@quantiya/codevibe-codex-plugin 2.0.65 → 2.0.68

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/cli.js

@@ -1187,6 +1187,10 @@ var import_os = __toESM(require("os")), import_path = __toESM(require("path")),
       // 2026-04-25 when Phase 2f.3.c destroyed and recreated the dev API
       // stack, breaking every hardcoded `<id>.appsync-api...` URL.
       appsyncUrl: "https://api-dev.codevibe.quantiya.ai/graphql",
+      // Exact deployed Development API outputs, verified 2026-10-09. Keep
+      // Production unconfigured until its separately approved deployment.
+      syncHttpUrl: "https://syutde0emc.execute-api.us-east-1.amazonaws.com",
+      syncWebSocketUrl: "wss://yahmtnhy2d.execute-api.us-east-1.amazonaws.com/development",
       cognitoUserPoolId: "us-east-1_yVwWDPvvJ",
       cognitoClientId: "e9r5apv6v5uui3l928r2ris0r",
       cognitoDomain: "codevibe-development.auth.us-east-1.amazoncognito.com"
@@ -4182,7 +4186,7 @@ function parseSyncPromptRetentionReceipt(value, promptId2) {
 }
 
 // src/appsync/sync-state.ts
-var import_json_freeze3 = require("json-freeze"), QUOTA_PAUSED_CONTENT = "Companion sync paused. Continue on desktop. Messages omitted while paused will not be backfilled.";
+var import_json_freeze3 = require("json-freeze"), SYNC_STATE_CLOCK_SKEW_MS = 6e4, QUOTA_PAUSED_CONTENT = "Companion sync paused. Continue on desktop. Messages omitted while paused will not be backfilled.";
 function companionSyncStateMerge(next, previous) {
   if (next.controlGeneration !== previous.controlGeneration) return next.controlGeneration > previous.controlGeneration ? "REPLACE" : "RETAIN";
   if (next.accountingGeneration !== previous.accountingGeneration) return "CONFLICT";
@@ -4194,11 +4198,11 @@ function companionSyncStateMerge(next, previous) {
   return payload(next) !== payload(previous) ? "CONFLICT" : next.observedAtEpochMs !== previous.observedAtEpochMs ? next.observedAtEpochMs > previous.observedAtEpochMs ? "REPLACE" : "RETAIN" : next.validUntilEpochMs >= previous.validUntilEpochMs ? "REPLACE" : "RETAIN";
 }
 function companionSyncBadge(state, now = Date.now()) {
-  return !state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now || now >= state.validUntilEpochMs ? "Companion sync status unavailable" : state.usage?.syncState === "PAUSED" ? "Companion sync paused" : state.protocol === "FROZEN" ? "Companion sync unavailable" : state.usage?.syncState === "WARNING" ? "Companion sync 80%+" : null;
+  return !state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || now >= state.validUntilEpochMs ? "Companion sync status unavailable" : state.usage?.syncState === "PAUSED" ? "Companion sync paused" : state.protocol === "FROZEN" ? "Companion sync unavailable" : state.usage?.syncState === "WARNING" ? "Companion sync 80%+" : null;
 }
 function companionSyncUsageLines(state, now = Date.now()) {
   let unavailable = ["Companion sync status unavailable"];
-  if (!state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now || now >= state.validUntilEpochMs) return unavailable;
+  if (!state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || now >= state.validUntilEpochMs) return unavailable;
   if (state.protocol === "LEGACY") return ["Legacy Companion accounting"];
   if (!state.usage || state.resetAtEpochMs === null) return unavailable;
   let paused = state.usage.syncState === "PAUSED", allowsSend = !paused && state.protocol === "SYNC_V2", lines = [paused ? "Companion sync paused" : allowsSend ? state.usage.syncState === "WARNING" ? "Companion sync 80%+" : "Companion sync active" : "Companion sync unavailable"], labels = [["syncUnits", "Sync units"], ["mobileAttachmentCount", "Mobile images"], ["mobileAttachmentBytes", "Mobile upload bytes"]];
@@ -4242,7 +4246,7 @@ function parseCompanionSyncState(value, environment, now = Date.now()) {
       invalid2();
     }
   }
-  (!closed(value, plain2(value) && Object.prototype.hasOwnProperty.call(value, "quotaNotice") ? [...FIELDS, "quotaNotice"] : FIELDS) || Buffer.byteLength(JSON.stringify(value)) > 2048 || value.schemaVersion !== 1 || value.environment !== environment || !["development", "production"].includes(value.environment) || !["FREE", "PRO", "MAX"].includes(value.tier) || !["LEGACY", "SHADOW", "AUTHORITATIVE", "ROLLBACK_FREEZE"].includes(value.mode) || !["LEGACY", "SYNC_V2", "FROZEN"].includes(value.protocol) || !Number.isSafeInteger(value.controlGeneration) || value.controlGeneration < 0 || !Number.isSafeInteger(value.observedAtEpochMs) || value.observedAtEpochMs < Date.UTC(2e3, 0, 1) || value.observedAtEpochMs > now + 6e4 || !Number.isSafeInteger(value.validUntilEpochMs) || value.validUntilEpochMs <= now || value.validUntilEpochMs <= value.observedAtEpochMs || value.validUntilEpochMs - value.observedAtEpochMs > 18e5 || value.accountingGeneration !== null && (typeof value.accountingGeneration != "string" || !/^[A-Za-z0-9_-]{1,64}$/.test(value.accountingGeneration)) || !closed(value.limits, METERS)) && invalid2(), count(value.entitlementVersion);
+  (!closed(value, plain2(value) && Object.prototype.hasOwnProperty.call(value, "quotaNotice") ? [...FIELDS, "quotaNotice"] : FIELDS) || Buffer.byteLength(JSON.stringify(value)) > 2048 || value.schemaVersion !== 1 || value.environment !== environment || !["development", "production"].includes(value.environment) || !["FREE", "PRO", "MAX"].includes(value.tier) || !["LEGACY", "SHADOW", "AUTHORITATIVE", "ROLLBACK_FREEZE"].includes(value.mode) || !["LEGACY", "SYNC_V2", "FROZEN"].includes(value.protocol) || !Number.isSafeInteger(value.controlGeneration) || value.controlGeneration < 0 || !Number.isSafeInteger(value.observedAtEpochMs) || value.observedAtEpochMs < Date.UTC(2e3, 0, 1) || value.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || !Number.isSafeInteger(value.validUntilEpochMs) || value.validUntilEpochMs <= now || value.validUntilEpochMs <= value.observedAtEpochMs || value.validUntilEpochMs - value.observedAtEpochMs > 18e5 || value.accountingGeneration !== null && (typeof value.accountingGeneration != "string" || !/^[A-Za-z0-9_-]{1,64}$/.test(value.accountingGeneration)) || !closed(value.limits, METERS)) && invalid2(), count(value.entitlementVersion);
   for (let meter of METERS) count(value.limits[meter]) === 0n && invalid2();
   if (value.mode === "AUTHORITATIVE") {
     (value.protocol === "LEGACY" || !value.accountingGeneration || !closed(value.usage, USAGE_FIELDS) || typeof value.periodId != "string" || !/^\d{4}-(0[1-9]|1[0-2])$/.test(value.periodId)) && invalid2();
@@ -4303,9 +4307,7 @@ function boundedObject(value, limit) {
   }
 }
 function parseSyncSecurityPostureReceipt(value, expected) {
-  let wrapper = boundedObject(value, 4096);
-  if (!closed2(wrapper, ["ok", "receiptJson"]) || wrapper.ok !== !0 || typeof wrapper.receiptJson != "string") return invalidReceipt();
-  let row3 = boundedObject(wrapper.receiptJson, 2048);
+  let row3 = boundedObject(value, 2048);
   if (!closed2(row3, ["schemaVersion", "kind", "state", "sessionId", "sessionGenerationId", "posture", "noticeId", "delivery"]) || row3.schemaVersion !== 1 || row3.kind !== "SECURITY_POSTURE" || row3.state !== "RECORDED" || row3.sessionId !== expected.sessionId || row3.sessionGenerationId !== expected.sessionGenerationId || row3.posture !== expected.posture || row3.noticeId !== syncSecurityPostureNoticeId(expected) || !closed2(row3.delivery, ["state", "outcomes"]) || !["ATTEMPTED", "REPLAY_NO_SEND"].includes(row3.delivery.state) || !Array.isArray(row3.delivery.outcomes) || row3.delivery.outcomes.length > 3 || row3.delivery.state === "REPLAY_NO_SEND" && row3.delivery.outcomes.length !== 0) return invalidReceipt();
   let recipients = /* @__PURE__ */ new Set();
   for (let outcome2 of row3.delivery.outcomes) {
@@ -11597,7 +11599,7 @@ var AppSyncClient = class _AppSyncClient {
       let response = await this.graphqlRequest(queries.getCompanionSyncState, {}, !1, signal, userId);
       this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal);
       let state = parseCompanionSyncState(response?.data?.getCompanionSyncState, this.environment), effective = this.publishCompanionSyncDisplay(userId, state, epoch, sequence), now = Date.now();
-      if (!effective || effective.observedAtEpochMs > now || effective.validUntilEpochMs <= now)
+      if (!effective || !Number.isSafeInteger(now) || effective.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || effective.validUntilEpochMs <= now)
         throw new SyncEventClientError("INVALID_SYNC_STATE");
       return effective;
     } catch (error) {
@@ -11617,7 +11619,7 @@ var AppSyncClient = class _AppSyncClient {
    * grants admission, or exposes another account's last observation. */
   companionSyncStatusSnapshot(userId) {
     let value = this.syncDisplay, now = Date.now();
-    return !this.authenticated || this.currentUserId !== userId || this.tokens?.userId !== userId || value?.userId !== userId || value.state.environment !== this.environment || !Number.isSafeInteger(now) || value.state.observedAtEpochMs > now || now >= value.state.validUntilEpochMs ? null : value.state;
+    return !this.authenticated || this.currentUserId !== userId || this.tokens?.userId !== userId || value?.userId !== userId || value.state.environment !== this.environment || !Number.isSafeInteger(now) || value.state.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || now >= value.state.validUntilEpochMs ? null : value.state;
   }
   /** Existing socket maintenance recovers idle status after its cloud cache
    * expires. This is display-only; admissions never use the cached result. */
@@ -17827,7 +17829,7 @@ init_logger2();
 var import_node_crypto18 = require("node:crypto"), import_node_fs7 = require("node:fs"), os13 = __toESM(require("node:os")), path21 = __toESM(require("node:path"));
 var METERS2 = ["syncUnits", "mobileAttachmentCount", "mobileAttachmentBytes"];
 function companionSyncUsageWarnings(state, now = Date.now()) {
-  if (!state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now || now >= state.validUntilEpochMs || state.mode !== "AUTHORITATIVE" || state.protocol !== "SYNC_V2" || state.usage?.syncState !== "WARNING") return [];
+  if (!state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || now >= state.validUntilEpochMs || state.mode !== "AUTHORITATIVE" || state.protocol !== "SYNC_V2" || state.usage?.syncState !== "WARNING") return [];
   let value = parseCompanionSyncState(state, state.environment, now), usage = value.usage;
   return METERS2.flatMap((meter) => {
     let committed = usage[`${meter}Committed`], limit = usage[`${meter}Limit`];

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.57",
+  "version": "2.0.60",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-codex-plugin",
-  "version": "2.0.65",
+  "version": "2.0.68",
   "description": "Control OpenAI Codex CLI from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -47,7 +47,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "^2.0.57",
+    "@quantiya/codevibe-core": "^2.0.60",
     "@quantiya/quorum-core": "^1.0.1",
     "chokidar": "^4.0.0",
     "dotenv": "^16.6.1",