@quantiya/codevibe-codex-plugin 2.0.6 → 2.0.8

package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-save.d.ts

@@ -1,47 +0,0 @@
-import type { AppSyncClient } from '../appsync/appsync-client.js';
-import { WizardSeatPick, WizardStepFailureReason } from './setup-types.js';
-export type SaveResult = {
-    ok: true;
-} | {
-    ok: false;
-    reason: WizardStepFailureReason;
-    /**
-     * Whether `[r] retry` makes sense for this failure. Network /
-     * 5xx / throttle are retryable (transient). auth_token_expired
-     * is NOT retryable in-process — the user must re-run `codevibe
-     * login` and start a new wizard run.
-     */
-    recoverable: boolean;
-};
-export interface SaveDeps {
-    wizardRunId: string;
-    client: AppSyncClient;
-    seats: WizardSeatPick[];
-    /**
-     * Whether the user reached this step via "save anyway" after a
-     * Test My Agents warning. Drives the wizard_completed.outcome
-     * value at the wizard's terminal exit (`'ok' | 'saved_after_test_warning'`).
-     * Not used here — Step 3 just persists; the top-level wizard
-     * threads the outcome value into the final `wizard_completed` event.
-     */
-    savedAfterTestWarning: boolean;
-}
-/**
- * Run Step 3. Emits `wizard_step_started{step:'save'}` on entry,
- * `wizard_step_completed` on success, or `wizard_step_failed` with
- * the classified reason. Returns a SaveResult the wizard's recourse
- * loop consumes.
- */
-export declare function runSave(deps: SaveDeps): Promise<SaveResult>;
-/**
- * Classify a thrown error from `updateReviewerPolicy` into one of the
- * §7 save-step reason codes. Best-effort matching against the AppSync
- * client's error message conventions:
- *   - 401 / "Unauthorized" / "Token expired" → auth_token_expired
- *   - 429 / "Throttling" / "Rate exceeded" → update_policy_throttle
- *   - 5xx / "Internal" / "InternalServerError" → update_policy_5xx
- *   - everything else (fetch threw, ECONNRESET, DNS) → update_policy_network
- *
- * Exposed for tests to assert classification mapping.
- */
-export declare function classifySaveError(err: unknown): WizardStepFailureReason;

package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-seat-picker.d.ts

@@ -1,72 +0,0 @@
-import * as readline from 'readline';
-import { WizardSeatPick, WizardRole } from './setup-types.js';
-import type { AgentKind } from '../reviewer/types.js';
-/**
- * One entry in the optional `savedSeats` array — the user's previously
- * persisted reviewer policy, threaded in by the wizard on a re-run so
- * the picker pre-fills per-seat agent + role defaults. Stage 2 round-1
- * Codex M2.
- *
- * Stale entries (agent no longer installed, role not in
- * `WIZARD_ROLES`, role already taken by a previous seat) are silently
- * ignored — the picker falls back to the canonical priority defaults
- * for that seat.
- */
-export interface SavedSeatHint {
-    seatId: number;
-    agent: AgentKind;
-    role: WizardRole;
-}
-/**
- * Reader/writer abstraction so tests can drive the picker with
- * scripted answers instead of an interactive readline. Production
- * passes a Node readline.Interface; tests pass a fake.
- */
-export interface PickerIO {
-    /** Render a line to the user. No newline appended; pass '\n' if needed. */
-    write: (line: string) => void;
-    /** Prompt the user and return the trimmed answer (without trailing newline). */
-    ask: (prompt: string) => Promise<string>;
-}
-export interface SeatPickerDeps {
-    wizardRunId: string;
-    installedAgents: AgentKind[];
-    seatBudget: number;
-    io: PickerIO;
-    /**
-     * Optional per-seat hints from the user's saved reviewer policy
-     * (Stage 2 round-1 Codex M2). When present and valid (agent
-     * installed; role still available for that seat), the picker uses
-     * the hint as the default instead of the canonical
-     * AGENT_PRIORITY / DEFAULT_ROLE_BY_SEAT priority.
-     *
-     * Indexed by `seatId` (NOT array position) — the implementation
-     * looks up `savedSeats.find(s => s.seatId === seatId)` so absent /
-     * out-of-order entries are fine.
-     */
-    savedSeats?: ReadonlyArray<SavedSeatHint>;
-}
-/**
- * Run Step 1. Returns the user's per-seat picks. Caller is
- * responsible for closing the readline interface.
- */
-export declare function runSeatPicker(deps: SeatPickerDeps): Promise<WizardSeatPick[]>;
-/**
- * Default-role-fallback rule (PHASE-3-A-DESIGN.md §1). Seat 0 wants
- * `architecture`, Seat 1 wants `correctness`, Seat 2 wants `security`.
- * If the canonical pick is gone (taken by a previous seat), fall
- * back to the first remaining role in canonical order.
- *
- * Stage 2 round-1 Codex M2: when `savedRole` is provided AND that
- * role is in `WIZARD_ROLES` AND it's still in `availableRoles` (not
- * taken by a previous seat), use it as the default instead of the
- * canonical-default-by-seat priority. Stale saved values (role
- * already taken, or a non-3-role value from a 2.0.x custom-roles
- * future expansion) are silently ignored.
- */
-export declare function pickDefaultRole(seatId: number, availableRoles: ReadonlyArray<WizardRole>, savedRole?: WizardRole): WizardRole;
-/**
- * Build a `PickerIO` from a Node readline interface. Production
- * callers use this; tests construct their own `PickerIO` directly.
- */
-export declare function readlinePickerIO(rl: readline.Interface): PickerIO;

package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-telemetry.d.ts

@@ -1,54 +0,0 @@
-import type { WizardStep, WizardStepFailureReason, WizardAbortReason, WizardEntry, WizardTier, CountBucket, LatencyBucket } from './setup-types.js';
-/**
- * Generate a fresh `wizard_run_id` for one wizard invocation. Returned
- * by `runSetupWizard()` entry and threaded into every emit call.
- *
- * v4 UUID — uses Node's crypto.randomUUID when available (Node 14.17+);
- * otherwise falls back to a manual v4 derivation. Either path produces
- * a 36-char hex-with-dashes string suitable for the GA4 custom-dimension
- * `wizard_run_id` registered in `register-custom-dimensions.py`.
- */
-export declare function newWizardRunId(): string;
-export declare function emitWizardStarted(args: {
-    wizardRunId: string;
-    tier: WizardTier;
-    entry: WizardEntry;
-    installedAgentsBucket: CountBucket;
-}): Promise<void>;
-export declare function emitWizardStepStarted(args: {
-    wizardRunId: string;
-    step: WizardStep;
-}): Promise<void>;
-export declare function emitWizardStepCompleted(args: {
-    wizardRunId: string;
-    step: WizardStep;
-    latencyBucket: LatencyBucket;
-}): Promise<void>;
-export declare function emitWizardStepFailed(args: {
-    wizardRunId: string;
-    step: WizardStep;
-    reason: WizardStepFailureReason;
-    latencyBucket: LatencyBucket;
-}): Promise<void>;
-export declare function emitWizardCompleted(args: {
-    wizardRunId: string;
-    outcome: 'ok' | 'saved_after_test_warning';
-    tier: WizardTier;
-    seatsBucket: CountBucket;
-    agentsDistinctBucket: CountBucket;
-    rolesDistinctBucket: CountBucket;
-    totalLatencyBucket: LatencyBucket;
-}): Promise<void>;
-export declare function emitWizardAborted(args: {
-    wizardRunId: string;
-    reason: WizardAbortReason;
-    lastStep: WizardStep;
-}): Promise<void>;
-type BeaconRecord = {
-    name: string;
-    params: Record<string, string | number>;
-};
-type BeaconSink = (record: BeaconRecord) => void;
-export declare function __setBeaconSink(sink: BeaconSink): void;
-export declare function __resetBeaconSink(): void;
-export {};

package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-test-agents.d.ts

@@ -1,108 +0,0 @@
-import { WizardSeatPick, WizardStepFailureReason } from './setup-types.js';
-import type { ReviewerSpec, ReviewerVerdict } from '../reviewer/index.js';
-/**
- * Canned proposal — byte-identical across all installations. Locked
- * 2026-05-03 per PHASE-3-A-DESIGN.md §3. Do NOT edit without going
- * through a re-review of the entire Test My Agents protocol; the
- * prose is part of the wizard's contract test surface (the new-contract
- * row at PHASE-3-A-DESIGN.md:495 asserts byte-identicality).
- *
- * The proposal is intentionally trivial + read-only. The wizard does
- * NOT actually create /tmp/quorum_test_hello.py — APPROVE is the
- * expected outcome from a working reviewer.
- */
-export declare const CANNED_PROPOSAL = "## Problem\nAdd a one-line Python \"Hello, World\" script to a new file.\n\n## Proposal\nCreate a single Python file at /tmp/quorum_test_hello.py containing the\nsingle line: print(\"hello world\")\n\n## Implementation Plan\n1. Create the file at /tmp/quorum_test_hello.py\n2. Write print(\"hello world\") on line 1 followed by a trailing newline\n3. Make no other changes\n\n## Expected Outputs\n- /tmp/quorum_test_hello.py \u2014 exists, contains the single-line script\n";
-/**
- * Per-seat timeout. PHASE-3-A-DESIGN.md §6 "Timeout (60s/seat)".
- * Conservative — gives a slow CLI room to start + respond on a
- * cold-spawned reviewer process. Shorter would pollute the failure
- * recourse menu with false positives on first-run latency.
- */
-export declare const PER_SEAT_TIMEOUT_MS = 60000;
-/**
- * Per-seat outcome rendered by the wizard. Returned by
- * `runTestMyAgents` in the `seatOutcomes` array so the recourse menu
- * can display each seat's status individually (per §3 "per-seat
- * outputs ... are tagged with the seat ID and rendered together").
- */
-export interface SeatOutcome {
-    seatId: number;
-    agent: WizardSeatPick['agent'];
-    role: WizardSeatPick['role'];
-    /** Wall-clock seconds elapsed for this seat's evaluate() call. */
-    elapsedSeconds: number;
-    /** Discriminated outcome — APPROVE plus the 6 failure shapes. */
-    result: {
-        kind: 'approve';
-    } | {
-        kind: 'revise';
-    } | {
-        kind: 'reject';
-    } | {
-        kind: 'escalate';
-    } | {
-        kind: 'parse_failure';
-    } | {
-        kind: 'spawn_failure';
-        reason: string;
-    } | {
-        kind: 'timeout';
-        elapsedMs: number;
-    } | {
-        kind: 'unknown_error';
-        message: string;
-    };
-}
-export type TestMyAgentsResult = {
-    ok: true;
-    seatOutcomes: SeatOutcome[];
-} | {
-    ok: false;
-    reason: WizardStepFailureReason;
-    canSaveAnyway: boolean;
-    seatOutcomes: SeatOutcome[];
-};
-/**
- * Inputs for `runTestMyAgents`. The registry factory is injected so
- * tests can swap in a mock; production passes
- * `createSubprocessReviewerRegistry`.
- */
-export interface TestMyAgentsDeps {
-    wizardRunId: string;
-    seats: WizardSeatPick[];
-    registryFactory?: () => {
-        evaluate: (spec: ReviewerSpec, gateId: string) => Promise<ReviewerVerdict>;
-    };
-    /**
-     * Status renderer. Tests pass a buffer; production passes a function
-     * that writes to process.stdout. Each call gets one line (no
-     * trailing newline added — caller controls).
-     */
-    write?: (line: string) => void;
-    /**
-     * Test seam: a synthetic gateId. Phase 3.a's wizard is wholly
-     * client-side (PHASE-3-A-DESIGN.md §5 "Wizard never spawns through
-     * OrchestrationClient.connect()"), so the gateId is a local
-     * synthetic UUID — providers echo it back on the verdict but the
-     * wizard does not persist it. Tests can pin a known value.
-     */
-    gateId?: string;
-}
-/**
- * Run Step 2. Emits `wizard_step_started`, dispatches all seats in
- * parallel via Promise.allSettled, classifies each outcome, emits
- * `wizard_step_completed` (all APPROVE) or `wizard_step_failed` with
- * the worst-blocker reason. Returns per-seat outcomes for the
- * wizard's recourse renderer.
- */
-export declare function runTestMyAgents(deps: TestMyAgentsDeps): Promise<TestMyAgentsResult>;
-/**
- * Render a per-failure-kind explanatory sentence per the §6 outcome
- * table + §1 line 140 "Display the structured error describing what
- * failed" requirement. The wizard prints this before the recourse
- * menu so users see WHY each non-APPROVE seat failed, not just a
- * status line.
- *
- * R1 round-1 M3 (resolved 2026-05-08).
- */
-export declare function humanizeStep2Failures(outcomes: SeatOutcome[]): string[];

package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-types.d.ts

@@ -1,146 +0,0 @@
-import type { ReviewerRole as PolicyReviewerRole } from '../reviewer/types.js';
-import type { AgentKind } from '../reviewer/types.js';
-import { ReviewerRole as SchemaReviewerRole } from '../types/reviewer.js';
-/**
- * Tier returned by `getSubscriptionStatus`. Drives seat budget +
- * tier-gate at bootstrap.
- *
- * UPPERCASE wire format matches `codevibe-backend/graphql/schema.graphql:209`
- * (`enum SubscriptionTier { FREE PRO MAX }`).
- */
-export type WizardTier = 'FREE' | 'PRO' | 'MAX';
-/**
- * Tier-aware seat budget. Mirrors
- * `codevibe-backend/lambda/user-management/index.ts:184-188`'s
- * `REVIEWER_SEAT_COUNT` map. Free has no seats — orchestration is not
- * permitted at that tier; the wizard short-circuits at bootstrap with
- * the §6 upgrade interstitial.
- */
-export declare const SEAT_BUDGET: Record<WizardTier, number | null>;
-/**
- * The 3-role lock from PHASE-3-A-DESIGN.md: the wizard offers ONLY
- * `architecture` / `correctness` / `security`. The schema's
- * `ReviewerRole` enum at `codevibe-backend/graphql/schema.graphql:167-177`
- * still has 9 variants for backward compat / 2.0.x custom-roles
- * (#80) — but the wizard NEVER sends a non-3-role seat to
- * `updateReviewerPolicy`.
- *
- * snake_case matches `codevibe-core/src/reviewer/types.ts:52-61` (the
- * reviewer-module wire). The wizard converts to AppSync UPPERCASE at
- * the save boundary via `roleToAppSync()`.
- */
-export declare const WIZARD_ROLES: readonly ["architecture", "correctness", "security"];
-export type WizardRole = (typeof WIZARD_ROLES)[number];
-/**
- * Tier-aware default role for each seat (§1 "Default-role fallback").
- * Seat 0 = architecture, Seat 1 = correctness, Seat 2 = security.
- * When the canonical default is already taken by a previous seat, the
- * wizard falls back to the first remaining role in canonical order.
- */
-export declare const DEFAULT_ROLE_BY_SEAT: WizardRole[];
-/**
- * Canonical agent ordering used for wizard defaults. The first
- * installed agent in this order is the default for each seat unless
- * the user picks otherwise. AGY-2.0: antigravity ranks LAST (weakest —
- * defaulted only on an agy-only host), mirroring TIER2_REVIEWER_RANK.
- */
-export declare const AGENT_PRIORITY: AgentKind[];
-/**
- * The wizard's terminal outcomes. Drives `wizard_completed` /
- * `wizard_aborted` GA4 events and the exit code.
- */
-export type WizardOutcome = {
-    kind: 'ok';
-    saved: true;
-    seats: ReadonlyArray<WizardSeatPick>;
-} | {
-    kind: 'saved_after_test_warning';
-    saved: true;
-    seats: ReadonlyArray<WizardSeatPick>;
-} | {
-    kind: 'aborted';
-    reason: WizardAbortReason;
-    lastStep: WizardStep;
-};
-/**
- * Reasons the wizard exited without saving. Mirror the
- * `wizard_aborted.reason` taxonomy in PHASE-3-A-DESIGN.md §7.
- */
-export type WizardAbortReason = 'ctrl_c' | 'tier_gate_free' | 'no_clis' | 'step_user_exit' | 'step_save_failed_exit' | 'auth_expired' | 'bootstrap_failure';
-/**
- * Wizard step taxonomy — used for `wizard_step_started`/`completed`/
- * `failed` and `wizard_aborted.last_step`.
- */
-export type WizardStep = 'bootstrap' | 'seat_assignment' | 'test_my_agents' | 'save';
-/**
- * Per-step `wizard_step_failed.reason` codes. Mirror the table in
- * PHASE-3-A-DESIGN.md §7. Each step has its own bounded reason set;
- * `seat_assignment` has no failure modes (the picker filters out
- * invalid choices UI-side).
- */
-export type WizardStepFailureReason = 'tier_gate_free' | 'not_signed_in' | 'subscription_status_network' | 'no_clis_installed' | 'test_revise' | 'test_reject' | 'test_escalate' | 'test_parse_failure' | 'test_spawn_failure' | 'test_timeout' | 'update_policy_network' | 'update_policy_5xx' | 'update_policy_throttle' | 'auth_token_expired';
-/**
- * One seat the user picked in Step 1. The wizard converts these to
- * `ReviewerAgentSpecInput[]` at save time by uppercase-mapping role +
- * agent (the schema's wire form).
- */
-export interface WizardSeatPick {
-    seatId: number;
-    agent: AgentKind;
-    role: WizardRole;
-}
-/**
- * Latency bucket for GA4 `latency_bucket_s` / `total_latency_bucket_s`
- * dimensions. Bounded set — keeps GA4 cardinality tractable per R2
- * round-1 MEDIUM (PHASE-3-A-DESIGN.md §7).
- */
-export type LatencyBucket = '<2' | '2-5' | '5-10' | '10-30' | '30+';
-/**
- * Categorical bucket for "how many agents are installed" /
- * "how many seats". Locked at "1" / "2" / "3" — there is no "4+"
- * because Max is the ceiling.
- */
-export type CountBucket = '1' | '2' | '3';
-/**
- * Entry point identifier — distinguishes meta CLI invocation from
- * each plugin's alias (`codevibe-{claude,gemini,codex} orchestration setup`).
- */
-export type WizardEntry = 'meta_cli' | 'claude_alias' | 'gemini_alias' | 'codex_alias';
-/**
- * Bucket a wall-clock duration into one of the 5 latency-bucket values.
- * Used by telemetry for per-step + total-wizard timing dimensions.
- */
-export declare function bucketLatencySeconds(seconds: number): LatencyBucket;
-/**
- * Bucket an integer count into "1" / "2" / "3", clamping anything
- * higher to "3". Used for `seats_bucket`, `agents_distinct_bucket`,
- * `roles_distinct_bucket`, `installed_agents_bucket`.
- */
-export declare function bucketCount(n: number): CountBucket;
-/**
- * Map a wizard role (snake_case) to the reviewer-module's snake_case
- * `ReviewerRole` literal type — used when building a `ReviewerSpec`
- * for `createSubprocessReviewerRegistry().evaluate()`. Pass-through
- * because `WizardRole` is a strict subset of `PolicyReviewerRole`.
- */
-export declare function roleToReviewerSpec(role: WizardRole): PolicyReviewerRole;
-/**
- * Map a wizard role (snake_case) to the AppSync schema's UPPERCASE
- * `ReviewerRole` enum — used when building a `ReviewerAgentSpecInput`
- * for the `updateReviewerPolicy` mutation. The wizard locks to 3
- * roles, so this mapping is exhaustive over `WizardRole` and never
- * produces one of the 6 non-3-role variants.
- */
-export declare function roleToAppSync(role: WizardRole): SchemaReviewerRole;
-/**
- * Map AgentKind (lowercase reviewer-module wire) to the UPPERCASE AppSync
- * reviewer-agent enum. Used at save time when building the
- * `ReviewerAgentSpecInput[]` for `updateReviewerPolicy`.
- *
- * The codomain is the REVIEWER-agent union
- * (`CLAUDE | GEMINI | CODEX | ANTIGRAVITY`, per `ReviewerAgentSpecInput.agent`),
- * NOT the session `AgentType` enum — a reviewer seat can be ANTIGRAVITY
- * (never in `AgentType`) and can never be the CODEVIBE orchestrator, so the
- * two enums are deliberately distinct.
- */
-export declare function agentToAppSync(agent: AgentKind): 'CLAUDE' | 'GEMINI' | 'CODEX' | 'ANTIGRAVITY';

package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-wizard.d.ts

@@ -1,57 +0,0 @@
-import { DetectableAgent } from './detect-agents.js';
-import { WizardEntry } from './setup-types.js';
-import { PickerIO } from './setup-seat-picker.js';
-import { AppSyncClient } from '../appsync/appsync-client.js';
-import type { ReviewerSpec, ReviewerVerdict } from '../reviewer/index.js';
-/**
- * Parse `--entry=<value>` from argv. Defaults to `meta_cli` if absent
- * or invalid. Plugin wrappers pass `--entry=claude_alias` /
- * `gemini_alias` / `codex_alias` per the §4 alias contract.
- */
-export declare function parseEntry(argv: string[]): WizardEntry;
-/**
- * Injectable dependencies for `runSetupWizardWithDeps`. Factored out
- * so unit tests can drive the whole state machine deterministically
- * (no real readline, no real subprocess spawn, no real network).
- *
- * Production callers use `runSetupWizard`, which wires the production
- * deps + calls `process.exit(result.exitCode)`.
- */
-export interface SetupWizardDeps {
-    /** Builds an authenticated AppSyncClient or returns null if unauthenticated. */
-    clientFactory: () => Promise<AppSyncClient | null>;
-    /** Returns the subset of agents present on PATH. */
-    agentDetector: () => DetectableAgent[];
-    /** Optional reviewer registry (Step 2). Default: real subprocess registry. */
-    registryFactory?: () => {
-        evaluate: (spec: ReviewerSpec, gateId: string) => Promise<ReviewerVerdict>;
-    };
-    /** Output writer — writes the line as-is (caller controls newlines). */
-    write: (line: string) => void;
-    /** Build a fresh PickerIO + close handle for the next interactive prompt. */
-    createPickerIO: () => {
-        io: PickerIO;
-        close: () => void;
-    };
-}
-/**
- * Result of the wizard's state machine. The public `runSetupWizard`
- * wrapper translates this to a `process.exit(exitCode)`.
- */
-export interface SetupWizardResult {
-    exitCode: number;
-}
-/**
- * Production entry point. Called from `runOrchestrationCli` when
- * `argv[3] === 'setup'`. Builds production deps + calls process.exit
- * with the wizard's exit code. Drives the full state machine via
- * `runSetupWizardWithDeps`.
- */
-export declare function runSetupWizard(argv: string[]): Promise<void>;
-/**
- * Testable wizard core. Exits with code 0 on success or any user-
- * initiated abort; exit 1 on a failure the user couldn't recover
- * from in the recourse loop. SIGINT is registered + cleaned up
- * around the call (no-op for tests when SIGINT is never fired).
- */
-export declare function runSetupWizardWithDeps(argv: string[], deps: SetupWizardDeps): Promise<SetupWizardResult>;

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/cohort-flag.d.ts

@@ -1,16 +0,0 @@
-/**
- * Filesystem location of the cohort-flag file (`~/.codevibe/cohort-flags.json`).
- * Exposed as a function so test code can monkey-patch via env override.
- */
-export declare function cohortFlagFilePath(): string;
-/**
- * Reads the named cohort flag for the given session/user. Returns
- * `false` on every failure mode (file missing, malformed JSON, flag
- * unset, non-boolean value). This is fail-closed by design — per §3
- * H6 mitigation, the cohort gate MUST default off until Phase 4 flips
- * the flag.
- *
- * `sessionId` is accepted in the signature for future per-session
- * cohort overrides; CP-1.a ignores it.
- */
-export declare function getCohortFlag(name: string, _sessionId: string): Promise<boolean>;

package/node_modules/@quantiya/codevibe-core/dist/reviewer/providers/gemini.d.ts

@@ -1,109 +0,0 @@
-import { type ReviewerEvaluateOptions, type ReviewerProvider, type ReviewerSpec } from '../provider.js';
-import { type SubprocessOutcome } from '../subprocess.js';
-import type { ReviewerVerdict } from '../types.js';
-import { type VerdictClassifier } from '../verdict-classifier.js';
-import type { BuiltCommand } from './claude.js';
-/** Construction options. */
-export interface GeminiReviewerProviderOptions {
-    /** Override the `gemini` executable path. Production callers pass nothing
-     *  (PATH lookup); integration tests can stub Gemini with a shell-script
-     *  fixture. */
-    executable?: string;
-}
-/**
- * JSON envelope shape emitted by `gemini --output-format json`. We only care
- * about `response`; the other fields (`session_id`, `stats`) are consumed by
- * the JSON deserializer but not surfaced on `ReviewerVerdict` directly.
- *
- * Tolerates missing or extra top-level keys for cross-version compatibility.
- */
-export interface GeminiEnvelope {
-    response: string;
-    /** Gemini 0.38.2 emits this; older versions may not. */
-    session_id?: string;
-    stats?: GeminiStats;
-}
-export interface GeminiStats {
-    /** Map of model name → per-model stats. Token usage MUST be summed across
-     *  every entry (R2 "telemetry timebomb" lesson — picking an arbitrary one
-     *  via `Object.values()[0]` would under-report when Gemini reports
-     *  auxiliary models). */
-    models?: Record<string, GeminiModelStats>;
-}
-export interface GeminiModelStats {
-    tokens?: {
-        /** Prompt + response tokens combined. Populated by Gemini's
-         *  `stats.models.<name>.tokens.total`; used for cost telemetry. */
-        total?: number;
-    };
-}
-/**
- * Real Gemini CLI reviewer provider. Wraps the `gemini` binary.
- */
-export declare class GeminiReviewerProvider implements ReviewerProvider {
-    private readonly executable;
-    constructor(opts?: GeminiReviewerProviderOptions);
-    evaluate(spec: ReviewerSpec, gateId: string, opts?: ReviewerEvaluateOptions): Promise<ReviewerVerdict>;
-}
-/**
- * Construct the Gemini CLI invocation. Split out from `evaluate` so unit
- * tests can assert on the built arg list + env without actually spawning a
- * process.
- *
- * Locked flag set:
- * - `-p ''` — non-interactive mode, empty inline prompt so the full prompt
- *   is read from stdin (consistent with Claude path).
- * - `--approval-mode plan` — read-only sandbox.
- * - `--output-format json` — structured reply envelope that survives
- *   user-hook stdout pollution.
- * - `--model <hint>` — optional; omitted when `spec.model_hint` is `null`.
- *
- * `spec.tool_allowlist` is **intentionally unused** for Gemini. Plan mode
- * is the design-locked sandbox; mapping the Claude-style allowlist to
- * Gemini's (deprecated) `--allowed-tools` flag would hit the known
- * non-interactive bugs flagged in the module docs.
- *
- * # QUORUM_REVIEWER_SUBPROCESS env var
- *
- * Set unconditionally to `'1'` in the child's environment. The user's
- * Gemini plugin checks this at the top of `hooks/common.sh` and
- * short-circuits every hook — without this gate, reviewer spawns would
- * each create a new backend session and mark the user's primary Gemini
- * session INACTIVE (empirically observed 2026-04-21 during Phase 2c.2
- * local testing).
- */
-export declare function buildCommand(executable: string, spec: ReviewerSpec, sandboxed?: boolean): BuiltCommand;
-/**
- * Map the raw subprocess outcome into a `ReviewerVerdict` or throw a
- * structured `ReviewerErrorClass`. See `claude.ts::buildVerdict` for the
- * shared safety rule (non-zero exit overrides any parseable stdout).
- */
-export declare function buildVerdict(spec: ReviewerSpec, gateId: string, outcome: SubprocessOutcome, classifyVerdict?: VerdictClassifier): Promise<ReviewerVerdict>;
-/**
- * Parse the FIRST complete JSON object in `stdout`, discarding any trailing
- * bytes. User-level hooks (e.g., CodeVibe's own Gemini plugin hooks
- * installed in `~/.gemini/settings.json`) append log lines to stdout AFTER
- * the model's reply envelope. This walks the text byte-by-byte tracking
- * brace depth + string escapes to find where the first JSON object ends,
- * then `JSON.parse` that slice — the equivalent of Rust's
- * `serde_json::Deserializer::into_iter().next()` for our purposes.
- *
- * Returns `null` if stdout contains no valid JSON value at all, the
- * extracted slice fails strict JSON parsing, OR the parsed value isn't a
- * shape-conformant `GeminiEnvelope` (i.e. missing or non-string
- * `response`). The caller routes any of these to ParseFailure with raw
- * stdout — matching Rust's serde-deserialization-failure path.
- *
- * # Why runtime shape validation
- *
- * Rust's `serde_json::Deserializer` rejects `{}` or `{"response":123}`
- * during deserialization because `GeminiEnvelope { response: String, ... }`
- * makes the field required at the type-system layer. TypeScript's
- * `JSON.parse(slice) as GeminiEnvelope` is a compile-time-only assertion
- * with no runtime check, so we reproduce serde's behavior with an
- * explicit `validateGeminiEnvelope` step. Without this, a syntactically-
- * valid-but-shape-bad envelope would land an `undefined.replace()`
- * TypeError up the call stack instead of a structured ParseFailure
- * (R1 finding on Phase 2f.1.b round 1).
- */
-export declare function parseFirstJsonEnvelope(stdout: string): GeminiEnvelope | null;

package/node_modules/@quantiya/codevibe-core/dist/substrate/git-proxy.d.ts

@@ -1,35 +0,0 @@
-/**
- * A minimal synthetic `config` written into the proxy. Repository-format
- * version + bare=false ONLY — explicitly NO `[remote ...]`, NO `[credential]`,
- * NO `core.hooksPath`, NO `[user]` (which could carry a signing key path). This
- * is the credential-scrub: the real repo's config never enters the sandbox.
- */
-export declare const SCRUBBED_CONFIG: string;
-/**
- * Resolve the real parent `.git` directory for a worktree. In a worktree the
- * `<workdir>/.git` is a FILE: `gitdir: /abs/path/to/parent/.git/worktrees/<n>`.
- * The commit objects live in the parent repo's top-level `.git` (i.e. two
- * levels up from `worktrees/<n>`). For a NON-worktree checkout `<workdir>/.git`
- * is already the real dir. Returns the directory that holds `objects/` +
- * `refs/`.
- *
- * @returns the resolved real git-common-dir, or `null` if `<workdir>/.git` is
- *   absent/unreadable (the caller skips proxying — a non-git workdir is fine).
- */
-export declare function resolveGitCommonDir(workdir: string): Promise<string | null>;
-/**
- * Build a read-only, credential-scrubbed `.git` proxy at `destDir` from the
- * resolved git-common-dir. **[W2-min]** — copies only {@link COPIED_GIT_ENTRIES}
- * + a synthetic stripped {@link SCRUBBED_CONFIG}; NO remotes/creds/hooks/reflog.
- *
- * The substrate bind-mounts `destDir` READ-ONLY into the sandbox at
- * `<workdir>/.git`. Returns the proxy path on success, or `null` if `workdir`
- * is not a resolvable git checkout (the substrate then mounts only the worktree
- * with no `.git`, and git read commands simply report "not a repository" — no
- * ambient exposure either way).
- */
-export declare function buildScrubbedGitProxy(workdir: string, destDir: string): Promise<string | null>;
-export declare const __testing: {
-    COPIED_GIT_ENTRIES: readonly ["HEAD", "refs", "packed-refs", "objects"];
-    SCRUBBED_CONFIG: string;
-};