@quantiya/codevibe-codex-plugin 2.0.66 → 2.0.69

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/cli.js

@@ -1187,6 +1187,10 @@ var import_os = __toESM(require("os")), import_path = __toESM(require("path")),
       // 2026-04-25 when Phase 2f.3.c destroyed and recreated the dev API
       // stack, breaking every hardcoded `<id>.appsync-api...` URL.
       appsyncUrl: "https://api-dev.codevibe.quantiya.ai/graphql",
+      // Exact deployed Development API outputs, verified 2026-10-09. Keep
+      // Production unconfigured until its separately approved deployment.
+      syncHttpUrl: "https://syutde0emc.execute-api.us-east-1.amazonaws.com",
+      syncWebSocketUrl: "wss://yahmtnhy2d.execute-api.us-east-1.amazonaws.com/development",
       cognitoUserPoolId: "us-east-1_yVwWDPvvJ",
       cognitoClientId: "e9r5apv6v5uui3l928r2ris0r",
       cognitoDomain: "codevibe-development.auth.us-east-1.amazoncognito.com"
@@ -4182,7 +4186,7 @@ function parseSyncPromptRetentionReceipt(value, promptId2) {
 }
 
 // src/appsync/sync-state.ts
-var import_json_freeze3 = require("json-freeze"), QUOTA_PAUSED_CONTENT = "Companion sync paused. Continue on desktop. Messages omitted while paused will not be backfilled.";
+var import_json_freeze3 = require("json-freeze"), SYNC_STATE_CLOCK_SKEW_MS = 6e4, QUOTA_PAUSED_CONTENT = "Companion sync paused. Continue on desktop. Messages omitted while paused will not be backfilled.";
 function companionSyncStateMerge(next, previous) {
   if (next.controlGeneration !== previous.controlGeneration) return next.controlGeneration > previous.controlGeneration ? "REPLACE" : "RETAIN";
   if (next.accountingGeneration !== previous.accountingGeneration) return "CONFLICT";
@@ -4194,11 +4198,11 @@ function companionSyncStateMerge(next, previous) {
   return payload(next) !== payload(previous) ? "CONFLICT" : next.observedAtEpochMs !== previous.observedAtEpochMs ? next.observedAtEpochMs > previous.observedAtEpochMs ? "REPLACE" : "RETAIN" : next.validUntilEpochMs >= previous.validUntilEpochMs ? "REPLACE" : "RETAIN";
 }
 function companionSyncBadge(state, now = Date.now()) {
-  return !state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now || now >= state.validUntilEpochMs ? "Companion sync status unavailable" : state.usage?.syncState === "PAUSED" ? "Companion sync paused" : state.protocol === "FROZEN" ? "Companion sync unavailable" : state.usage?.syncState === "WARNING" ? "Companion sync 80%+" : null;
+  return !state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || now >= state.validUntilEpochMs ? "Companion sync status unavailable" : state.usage?.syncState === "PAUSED" ? "Companion sync paused" : state.protocol === "FROZEN" ? "Companion sync unavailable" : state.usage?.syncState === "WARNING" ? "Companion sync 80%+" : null;
 }
 function companionSyncUsageLines(state, now = Date.now()) {
   let unavailable = ["Companion sync status unavailable"];
-  if (!state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now || now >= state.validUntilEpochMs) return unavailable;
+  if (!state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || now >= state.validUntilEpochMs) return unavailable;
   if (state.protocol === "LEGACY") return ["Legacy Companion accounting"];
   if (!state.usage || state.resetAtEpochMs === null) return unavailable;
   let paused = state.usage.syncState === "PAUSED", allowsSend = !paused && state.protocol === "SYNC_V2", lines = [paused ? "Companion sync paused" : allowsSend ? state.usage.syncState === "WARNING" ? "Companion sync 80%+" : "Companion sync active" : "Companion sync unavailable"], labels = [["syncUnits", "Sync units"], ["mobileAttachmentCount", "Mobile images"], ["mobileAttachmentBytes", "Mobile upload bytes"]];
@@ -4242,7 +4246,7 @@ function parseCompanionSyncState(value, environment, now = Date.now()) {
       invalid2();
     }
   }
-  (!closed(value, plain2(value) && Object.prototype.hasOwnProperty.call(value, "quotaNotice") ? [...FIELDS, "quotaNotice"] : FIELDS) || Buffer.byteLength(JSON.stringify(value)) > 2048 || value.schemaVersion !== 1 || value.environment !== environment || !["development", "production"].includes(value.environment) || !["FREE", "PRO", "MAX"].includes(value.tier) || !["LEGACY", "SHADOW", "AUTHORITATIVE", "ROLLBACK_FREEZE"].includes(value.mode) || !["LEGACY", "SYNC_V2", "FROZEN"].includes(value.protocol) || !Number.isSafeInteger(value.controlGeneration) || value.controlGeneration < 0 || !Number.isSafeInteger(value.observedAtEpochMs) || value.observedAtEpochMs < Date.UTC(2e3, 0, 1) || value.observedAtEpochMs > now + 6e4 || !Number.isSafeInteger(value.validUntilEpochMs) || value.validUntilEpochMs <= now || value.validUntilEpochMs <= value.observedAtEpochMs || value.validUntilEpochMs - value.observedAtEpochMs > 18e5 || value.accountingGeneration !== null && (typeof value.accountingGeneration != "string" || !/^[A-Za-z0-9_-]{1,64}$/.test(value.accountingGeneration)) || !closed(value.limits, METERS)) && invalid2(), count(value.entitlementVersion);
+  (!closed(value, plain2(value) && Object.prototype.hasOwnProperty.call(value, "quotaNotice") ? [...FIELDS, "quotaNotice"] : FIELDS) || Buffer.byteLength(JSON.stringify(value)) > 2048 || value.schemaVersion !== 1 || value.environment !== environment || !["development", "production"].includes(value.environment) || !["FREE", "PRO", "MAX"].includes(value.tier) || !["LEGACY", "SHADOW", "AUTHORITATIVE", "ROLLBACK_FREEZE"].includes(value.mode) || !["LEGACY", "SYNC_V2", "FROZEN"].includes(value.protocol) || !Number.isSafeInteger(value.controlGeneration) || value.controlGeneration < 0 || !Number.isSafeInteger(value.observedAtEpochMs) || value.observedAtEpochMs < Date.UTC(2e3, 0, 1) || value.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || !Number.isSafeInteger(value.validUntilEpochMs) || value.validUntilEpochMs <= now || value.validUntilEpochMs <= value.observedAtEpochMs || value.validUntilEpochMs - value.observedAtEpochMs > 18e5 || value.accountingGeneration !== null && (typeof value.accountingGeneration != "string" || !/^[A-Za-z0-9_-]{1,64}$/.test(value.accountingGeneration)) || !closed(value.limits, METERS)) && invalid2(), count(value.entitlementVersion);
   for (let meter of METERS) count(value.limits[meter]) === 0n && invalid2();
   if (value.mode === "AUTHORITATIVE") {
     (value.protocol === "LEGACY" || !value.accountingGeneration || !closed(value.usage, USAGE_FIELDS) || typeof value.periodId != "string" || !/^\d{4}-(0[1-9]|1[0-2])$/.test(value.periodId)) && invalid2();
@@ -11595,7 +11599,7 @@ var AppSyncClient = class _AppSyncClient {
       let response = await this.graphqlRequest(queries.getCompanionSyncState, {}, !1, signal, userId);
       this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal);
       let state = parseCompanionSyncState(response?.data?.getCompanionSyncState, this.environment), effective = this.publishCompanionSyncDisplay(userId, state, epoch, sequence), now = Date.now();
-      if (!effective || effective.observedAtEpochMs > now || effective.validUntilEpochMs <= now)
+      if (!effective || !Number.isSafeInteger(now) || effective.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || effective.validUntilEpochMs <= now)
         throw new SyncEventClientError("INVALID_SYNC_STATE");
       return effective;
     } catch (error) {
@@ -11615,7 +11619,7 @@ var AppSyncClient = class _AppSyncClient {
    * grants admission, or exposes another account's last observation. */
   companionSyncStatusSnapshot(userId) {
     let value = this.syncDisplay, now = Date.now();
-    return !this.authenticated || this.currentUserId !== userId || this.tokens?.userId !== userId || value?.userId !== userId || value.state.environment !== this.environment || !Number.isSafeInteger(now) || value.state.observedAtEpochMs > now || now >= value.state.validUntilEpochMs ? null : value.state;
+    return !this.authenticated || this.currentUserId !== userId || this.tokens?.userId !== userId || value?.userId !== userId || value.state.environment !== this.environment || !Number.isSafeInteger(now) || value.state.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || now >= value.state.validUntilEpochMs ? null : value.state;
   }
   /** Existing socket maintenance recovers idle status after its cloud cache
    * expires. This is display-only; admissions never use the cached result. */
@@ -17825,7 +17829,7 @@ init_logger2();
 var import_node_crypto18 = require("node:crypto"), import_node_fs7 = require("node:fs"), os13 = __toESM(require("node:os")), path21 = __toESM(require("node:path"));
 var METERS2 = ["syncUnits", "mobileAttachmentCount", "mobileAttachmentBytes"];
 function companionSyncUsageWarnings(state, now = Date.now()) {
-  if (!state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now || now >= state.validUntilEpochMs || state.mode !== "AUTHORITATIVE" || state.protocol !== "SYNC_V2" || state.usage?.syncState !== "WARNING") return [];
+  if (!state || !Number.isSafeInteger(now) || state.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || now >= state.validUntilEpochMs || state.mode !== "AUTHORITATIVE" || state.protocol !== "SYNC_V2" || state.usage?.syncState !== "WARNING") return [];
   let value = parseCompanionSyncState(state, state.environment, now), usage = value.usage;
   return METERS2.flatMap((meter) => {
     let committed = usage[`${meter}Committed`], limit = usage[`${meter}Limit`];

package/node_modules/@quantiya/codevibe-core/dist/prompt-parser.d.ts

@@ -39,3 +39,6 @@ export declare function parseInteractivePrompt(snapshot: string, options?: {
  * so the parser can match option lines inside boxes.
  */
 export declare function normalizeSnapshot(snapshot: string): string;
+export declare function countUnescapedBackticks(str: string): number;
+export declare function isMcpHeadingLine(line: string): boolean;
+export declare function isPromptHeadingLine(line: string): boolean;

package/node_modules/@quantiya/codevibe-core/dist/terminal-menu.d.ts

@@ -16,7 +16,8 @@ export declare function selectTerminalMenuOption(identity: string, number: strin
 }): Promise<TerminalMenuDelivery>;
 /**
  * Recognize a bottom-pane numbered selector, never a bare numbered list.
- * Requires a styled title, exactly one selected option, and a separate terminal
- * footer. Labels are data: there is no dialog-title or approval-phrase allowlist.
+ * Recognizes styled (bold) titles or prompt heading patterns (with bounded
+ * parameter regions for MCP tool approval dialogs), exactly one selected option,
+ * and a separate terminal footer with key hints.
  */
 export declare function parseActiveTerminalMenu(snapshot: string): TerminalMenu | null;

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.58",
+  "version": "2.0.61",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-codex-plugin",
-  "version": "2.0.66",
+  "version": "2.0.69",
   "description": "Control OpenAI Codex CLI from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -47,7 +47,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "^2.0.58",
+    "@quantiya/codevibe-core": "^2.0.61",
     "@quantiya/quorum-core": "^1.0.1",
     "chokidar": "^4.0.0",
     "dotenv": "^16.6.1",