@quantiya/codevibe-codex-plugin 2.0.63 → 2.0.65

package/node_modules/@quantiya/codevibe-core/dist/tool-activity/sync-transport.d.ts

@@ -0,0 +1,53 @@
+import { DurableDesktopSyncWriter, type DesktopSyncSessionScope } from '../appsync/sync-operation-journal';
+import type { ToolActivityTransport } from './consolidator';
+import type { ToolActivityOutbox } from './outbox';
+import type { ToolActivityLedger } from './ledger';
+import type { ConfirmDesktopSyncRetirementInput, SyncSessionRetirementReceipt } from '../appsync/sync-session-retirement';
+export interface ToolActivitySyncEncryption extends DesktopSyncSessionScope {
+    sessionKey: string;
+    sessionKeyGen: string | null;
+}
+export interface ToolActivitySyncTransportOptions {
+    sessionScope: DesktopSyncSessionScope;
+    /** The account- and session-scoped AppSync journal, never a legacy writer. */
+    writer: DurableDesktopSyncWriter;
+    /** One coherent live key/generation snapshot, read only for a new operation. */
+    getEncryptionContext(): Promise<ToolActivitySyncEncryption>;
+    /** Recovery may retry existing records, never prepare a missing operation. */
+    recoveryOnly?: boolean;
+}
+/** Terminal source-owner path; never retries an Event or invents an outcome. */
+export declare function retireToolActivityWindows(options: {
+    sessionScope: DesktopSyncSessionScope;
+    outbox: ToolActivityOutbox;
+    writer: DurableDesktopSyncWriter;
+    expectedSessionKeyGen: string;
+    confirm(input: ConfirmDesktopSyncRetirementInput): Promise<SyncSessionRetirementReceipt>;
+}): Promise<{
+    windowsRemoved: number;
+    operationsRemoved: number;
+}>;
+/**
+ * Shared metered tool transport. An existing ULID window maps deterministically
+ * to a namespaced UUIDv8 operation; no rollout rescan or retry remints it.
+ * Ciphertext is sealed in the journal before the first network attempt. A
+ * restart reads that exact record BEFORE consulting a possibly rotated key.
+ * The consolidator calls settled only after its durable native-occurrence
+ * ledger records ACCEPTED/OMITTED, then prunes the source window.
+ */
+export declare function createToolActivitySyncTransport(options: ToolActivitySyncTransportOptions): ToolActivityTransport;
+/**
+ * Drain saved R2 operations before selecting a live generation. Neither an
+ * active Session row nor a live encryption key is needed for existing journal
+ * outcomes. A source window sealed before journal preparation stays untouched
+ * for normal same-generation delivery (or explicit migration); it is not a
+ * license to remint into a replacement session. Ambiguity/corruption stops the
+ * pass, leaving all unfinished source/journal state intact.
+ * The provider holds its normal single-writer ownership throughout this call.
+ */
+export declare function recoverToolActivityWindows(options: {
+    sessionId: string;
+    outbox: ToolActivityOutbox;
+    ledger: ToolActivityLedger;
+    transportForGeneration(generation: string): ToolActivityTransport;
+}): Promise<void>;

package/node_modules/@quantiya/codevibe-core/dist/tool-activity/types.d.ts

@@ -66,11 +66,11 @@ export declare const ToolActivityGroupSchema: z.ZodObject<{
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     count: number;
+    tool: string;
     occurrences: {
         id: string;
         ts: string;
     }[];
-    tool: string;
     detail?: {
         i: number;
         digest: string;
@@ -78,11 +78,11 @@ export declare const ToolActivityGroupSchema: z.ZodObject<{
     target?: string | undefined;
 }, {
     count: number;
+    tool: string;
     occurrences: {
         id: string;
         ts: string;
     }[];
-    tool: string;
     detail?: {
         i: number;
         digest: string;
@@ -130,11 +130,11 @@ export declare const ToolActivityManifestSchema: z.ZodObject<{
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         count: number;
+        tool: string;
         occurrences: {
             id: string;
             ts: string;
         }[];
-        tool: string;
         detail?: {
             i: number;
             digest: string;
@@ -142,11 +142,11 @@ export declare const ToolActivityManifestSchema: z.ZodObject<{
         target?: string | undefined;
     }, {
         count: number;
+        tool: string;
         occurrences: {
             id: string;
             ts: string;
         }[];
-        tool: string;
         detail?: {
             i: number;
             digest: string;
@@ -157,40 +157,40 @@ export declare const ToolActivityManifestSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     groups: {
         count: number;
+        tool: string;
         occurrences: {
             id: string;
             ts: string;
         }[];
-        tool: string;
         detail?: {
             i: number;
             digest: string;
         }[] | undefined;
         target?: string | undefined;
     }[];
-    trackId?: string | null | undefined;
     windowStart?: string | undefined;
     windowEnd?: string | undefined;
     totalInvocations?: number | undefined;
+    trackId?: string | null | undefined;
     continues?: boolean | undefined;
 }, {
     groups: {
         count: number;
+        tool: string;
         occurrences: {
             id: string;
             ts: string;
         }[];
-        tool: string;
         detail?: {
             i: number;
             digest: string;
         }[] | undefined;
         target?: string | undefined;
     }[];
-    trackId?: string | null | undefined;
     windowStart?: string | undefined;
     windowEnd?: string | undefined;
     totalInvocations?: number | undefined;
+    trackId?: string | null | undefined;
     continues?: boolean | undefined;
 }>;
 export type ToolActivityManifest = z.infer<typeof ToolActivityManifestSchema>;
@@ -212,6 +212,8 @@ export declare const ToolActivityOutboxEnvelopeSchema: z.ZodObject<{
     clientEventId: z.ZodString;
     /** The plugin's backend session id this window belongs to (routing, X2a). */
     backendSessionId: z.ZodString;
+    /** Present only for R2-sealed windows. Never silently convert legacy or another generation on recovery. */
+    syncSessionGenerationId: z.ZodOptional<z.ZodString>;
     /** ISO-8601 ms — the event row sort key `(sessionId, windowStart)` (§4.9). */
     windowStart: z.ZodString;
     /** The plaintext manifest (encrypted only at send). */
@@ -247,11 +249,11 @@ export declare const ToolActivityOutboxEnvelopeSchema: z.ZodObject<{
             }>, "many">>;
         }, "strip", z.ZodTypeAny, {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             detail?: {
                 i: number;
                 digest: string;
@@ -259,11 +261,11 @@ export declare const ToolActivityOutboxEnvelopeSchema: z.ZodObject<{
             target?: string | undefined;
         }, {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             detail?: {
                 i: number;
                 digest: string;
@@ -274,95 +276,97 @@ export declare const ToolActivityOutboxEnvelopeSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         groups: {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             detail?: {
                 i: number;
                 digest: string;
             }[] | undefined;
             target?: string | undefined;
         }[];
-        trackId?: string | null | undefined;
         windowStart?: string | undefined;
         windowEnd?: string | undefined;
         totalInvocations?: number | undefined;
+        trackId?: string | null | undefined;
         continues?: boolean | undefined;
     }, {
         groups: {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             detail?: {
                 i: number;
                 digest: string;
             }[] | undefined;
             target?: string | undefined;
         }[];
-        trackId?: string | null | undefined;
         windowStart?: string | undefined;
         windowEnd?: string | undefined;
         totalInvocations?: number | undefined;
+        trackId?: string | null | undefined;
         continues?: boolean | undefined;
     }>;
     /** Native invocation ids in this window (ledger reconciliation + render dedup). */
     invocationIds: z.ZodArray<z.ZodString, "many">;
 }, "strip", z.ZodTypeAny, {
     isEncrypted: false;
+    windowStart: string;
+    clientEventId: string;
+    backendSessionId: string;
     manifest: {
         groups: {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             detail?: {
                 i: number;
                 digest: string;
             }[] | undefined;
             target?: string | undefined;
         }[];
-        trackId?: string | null | undefined;
         windowStart?: string | undefined;
         windowEnd?: string | undefined;
         totalInvocations?: number | undefined;
+        trackId?: string | null | undefined;
         continues?: boolean | undefined;
     };
-    windowStart: string;
-    clientEventId: string;
-    backendSessionId: string;
     invocationIds: string[];
+    syncSessionGenerationId?: string | undefined;
 }, {
     isEncrypted: false;
+    windowStart: string;
+    clientEventId: string;
+    backendSessionId: string;
     manifest: {
         groups: {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             detail?: {
                 i: number;
                 digest: string;
             }[] | undefined;
             target?: string | undefined;
         }[];
-        trackId?: string | null | undefined;
         windowStart?: string | undefined;
         windowEnd?: string | undefined;
         totalInvocations?: number | undefined;
+        trackId?: string | null | undefined;
         continues?: boolean | undefined;
     };
-    windowStart: string;
-    clientEventId: string;
-    backendSessionId: string;
     invocationIds: string[];
+    syncSessionGenerationId?: string | undefined;
 }>;
 export type ToolActivityOutboxEnvelope = z.infer<typeof ToolActivityOutboxEnvelopeSchema>;

package/node_modules/@quantiya/codevibe-core/dist/types/events.d.ts

@@ -61,6 +61,9 @@ export interface Attachment {
 export interface Event {
     eventId: string;
     sessionId: string;
+    sessionGenerationId?: string | null;
+    /** Server-authored R2 lifecycle marker, preserved by the authenticated sync reader. */
+    syncLifecycleVersion?: number;
     type: EventType;
     source: EventSource;
     content: string;

package/node_modules/@quantiya/codevibe-core/dist/types/reviewer.d.ts

@@ -24,7 +24,8 @@ export declare enum ReviewerRole {
 }
 /**
  * One seat in a user's reviewer panel. `seat_id` is the panel position
- * (0-indexed: Pro has seats 0–1, Max has 0–2). `role` is the review lens
+ * (0-indexed: Pro permits seat 0, Max permits seats 0–1 and may use only one).
+ * `role` is the review lens
  * — unique within a policy. `agent` (CLAUDE | GEMINI | CODEX | ANTIGRAVITY —
  * AGY-2.0 Phase A reviewer-type contract, task #51) may repeat across seats
  * — single-vendor users get multiple same-kind seats with distinct roles.
@@ -42,15 +43,23 @@ export interface ReviewerAgentSpecInput {
     modelHint?: string | null;
 }
 /**
- * Input for updateReviewerPolicy. Fields are independent:
- * - orchestrationEnabledDefault: set to true/false to persist the user's
- *   opt-in preference for new sessions. Null = leave unchanged.
+ * Input for updateReviewerPolicy:
+ * - orchestrationEnabledDefault is a legacy type-only field; not sent by 2.0.
  * - reviewerSeats: non-empty array sets a custom panel. Empty array
  *   resets to tier defaults. Null = leave unchanged.
+ * - reviewerQuorum is a complete configuration paired with reviewerSeats;
+ *   a panel-only update selects default quorum rules/revision depth.
  */
+export interface ReviewerQuorumSettings {
+    autoRevisionRounds: number;
+    passRule: 'UNANIMOUS' | 'AT_LEAST_N';
+    requiredApprovals?: number | null;
+}
 export interface UpdateReviewerPolicyInput {
     orchestrationEnabledDefault?: boolean | null;
     reviewerSeats?: ReviewerAgentSpecInput[] | null;
+    /** Complete settings, saved atomically with reviewerSeats. Panel-only resets defaults. */
+    reviewerQuorum?: ReviewerQuorumSettings | null;
 }
 /**
  * User record returned by updateAvailableAgents and updateReviewerPolicy.
@@ -63,5 +72,6 @@ export interface UserReviewerPolicySnapshot {
     availableAgents?: Array<'CLAUDE' | 'GEMINI' | 'CODEX' | 'ANTIGRAVITY'> | null;
     orchestrationEnabledDefault?: boolean | null;
     reviewerSeats?: ReviewerAgentSpec[] | null;
+    reviewerQuorum?: ReviewerQuorumSettings | null;
     updatedAt: string;
 }

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.56",
+  "version": "2.0.57",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-codex-plugin",
-  "version": "2.0.63",
+  "version": "2.0.65",
   "description": "Control OpenAI Codex CLI from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -47,7 +47,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "^2.0.56",
+    "@quantiya/codevibe-core": "^2.0.57",
     "@quantiya/quorum-core": "^1.0.1",
     "chokidar": "^4.0.0",
     "dotenv": "^16.6.1",