@quantiya/codevibe-codex-plugin 2.0.71 → 2.0.73

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/cli.js

@@ -6741,6 +6741,11 @@ function invalid3() {
 function badResponse() {
   throw new SyncReadClientError("INVALID_SYNC_READ_RESPONSE");
 }
+function gatewayUnavailable(status, value) {
+  if (!closed3(value, ["message"]) || typeof value.message != "string") return !1;
+  let message = value.message.toLowerCase();
+  return [500, 502, 503, 504].includes(status) && message === "internal server error" || status === 429 && message === "too many requests";
+}
 function syncReadResponseError(value) {
   return (!plain4(value) || value.ok !== !1 || typeof value.errorCode != "string" || Object.keys(value).some((k) => !["ok", "errorCode", "retryAfterMs"].includes(k)) || value.retryAfterMs !== void 0 && (!Number.isSafeInteger(value.retryAfterMs) || value.retryAfterMs < 0)) && badResponse(), new SyncReadClientError(
     "SYNC_READ_UNAVAILABLE",
@@ -6770,7 +6775,7 @@ var DesktopSyncReadClient = class {
   }
   event(value) {
     let mobileInput = plain4(value) && value.source === "MOBILE" && ["USER_PROMPT", "PROMPT_RESPONSE"].includes(value.type), legacyStatusRevision = plain4(value) && value.deliveryStatus === "SENT" ? "0" : plain4(value) && value.deliveryStatus === "DELIVERED" ? "1" : plain4(value) && value.deliveryStatus === "EXECUTED" ? "2" : void 0, legacyInput = mobileInput && value.syncLegacyProjection === 1 && value.syncLifecycleVersion === void 0 && value.syncVisibility === "VISIBLE_METERED" && value.syncEventRevision === legacyStatusRevision && value.syncOperationId === void 0 && value.syncImmutableIdentityDigest === void 0;
-    return (!plain4(value) || typeof value.eventId != "string" || !ID2.test(value.eventId) || value.sessionId !== this.scope.sessionId || value.sessionGenerationId !== this.scope.sessionGenerationId || !timestamp2(value.timestamp) || typeof value.type != "string" || !/^[A-Z][A-Z0-9_]{0,63}$/.test(value.type) || !["DESKTOP", "MOBILE"].includes(value.source) || value.syncLegacyProjection !== void 0 && !legacyInput || mobileInput && value.syncLifecycleVersion !== 1 && !legacyInput || value.content !== void 0 && typeof value.content != "string" || value.metadata !== void 0 && typeof value.metadata != "string" || value.isEncrypted !== void 0 && typeof value.isEncrypted != "boolean" || value.isEncrypted === !0 && value.encryptionVersion !== 1 || Buffer.byteLength(JSON.stringify(value)) > 350 * 1024) && badResponse(), Object.freeze(value);
+    return (!plain4(value) || typeof value.eventId != "string" || !ID2.test(value.eventId) || value.sessionId !== this.scope.sessionId || value.sessionGenerationId !== this.scope.sessionGenerationId || !timestamp2(value.timestamp) || typeof value.type != "string" || !/^[A-Z][A-Z0-9_]{0,63}$/.test(value.type) || !["DESKTOP", "MOBILE"].includes(value.source) || value.syncLegacyProjection !== void 0 && !legacyInput || mobileInput && value.syncLifecycleVersion !== 1 && !legacyInput || value.content !== void 0 && typeof value.content != "string" || value.metadata !== void 0 && typeof value.metadata != "string" || value.isEncrypted !== void 0 && typeof value.isEncrypted != "boolean" || value.isEncrypted === !0 && value.encryptionVersion !== 1 && !(legacyInput && value.encryptionVersion === void 0) || Buffer.byteLength(JSON.stringify(value)) > 350 * 1024) && badResponse(), Object.freeze(value);
   }
   async request(method, path83, body, proofPayload, action, bound, headers, signal) {
     this.fence(signal);
@@ -6819,7 +6824,7 @@ var DesktopSyncReadClient = class {
         return badResponse();
       }
       if (!response.ok)
-        throw syncReadResponseError(value);
+        throw gatewayUnavailable(response.status, value) ? new SyncReadClientError("SYNC_READ_UNAVAILABLE") : syncReadResponseError(value);
       return { text: text2, value };
     } finally {
       controller.abort(), clearTimeout(timer), signal?.removeEventListener("abort", cancel);
@@ -10969,7 +10974,7 @@ function coerceAwsJsonObject(raw, op) {
 }
 var AppSyncGraphQLError = class extends Error {
   constructor(opts) {
-    super(`GraphQL error: ${opts.message}`), this.name = "AppSyncGraphQLError", this.responseMessage = opts.message, this.errorType = opts.errorType, this.extensions = opts.extensions, this.path = opts.path;
+    super(`GraphQL error: ${opts.message}`), this.name = "AppSyncGraphQLError", this.responseMessage = opts.message, this.errorType = opts.errorType, this.extensions = opts.extensions, this.path = opts.path, this.data = opts.data, this.requestId = typeof opts.requestId == "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(opts.requestId) ? opts.requestId : void 0;
   }
 }, AppSyncAuthenticationError = class extends Error {
   constructor(kind) {
@@ -11032,6 +11037,12 @@ var AppSyncClient = class _AppSyncClient {
     this.syncDisplayAppliedSequence = 0;
     this.syncDisplay = null;
     this.syncDisplayListeners = /* @__PURE__ */ new Set();
+    this.syncStateRead = null;
+    this.syncStateRetry = null;
+    /** Passive server-denial deadlines shared by existing source retry owners.
+     * Exactly two producer families; no timer, durable state or admission grant. */
+    this.syncProducerEpoch = 0;
+    this.syncProducerRetry = /* @__PURE__ */ new Map();
     this.activeSubscriptions = /* @__PURE__ */ new Map();
     /**
      * Set by `authenticateWithStoredTokens()` on every false-return path
@@ -11187,7 +11198,7 @@ var AppSyncClient = class _AppSyncClient {
    * Authenticate using stored OAuth tokens from keychain
    */
   async authenticateWithStoredTokens() {
-    this.lastAuthFailureKind = null, this.lastAuthFailureDetail = null, this.resetCompanionSyncDisplay();
+    this.lastAuthFailureKind = null, this.lastAuthFailureDetail = null, this.resetSyncProducerAuthority(), this.resetCompanionSyncDisplay();
     try {
       let tokens;
       try {
@@ -11229,6 +11240,16 @@ var AppSyncClient = class _AppSyncClient {
   static throwIfAborted(signal) {
     if (signal?.aborted) throw _AppSyncClient.abortReason(signal);
   }
+  static async waitForSyncStateRetry(delayMs, signal) {
+    _AppSyncClient.throwIfAborted(signal), await new Promise((resolve28, reject) => {
+      let timer = setTimeout(() => {
+        signal?.removeEventListener("abort", onAbort), resolve28();
+      }, delayMs), onAbort = () => {
+        clearTimeout(timer), signal?.removeEventListener("abort", onAbort), reject(_AppSyncClient.abortReason(signal));
+      };
+      signal?.addEventListener("abort", onAbort, { once: !0 }), signal?.aborted && onAbort();
+    });
+  }
   /**
    * Bound one stage by its owning operation's absolute deadline. Every stage
    * receives the same `deadlineAtMs`; a storage-backed retry therefore consumes
@@ -11507,20 +11528,22 @@ var AppSyncClient = class _AppSyncClient {
    * Sign out
    */
   signOut() {
-    this.authenticated = !1, this.replaceTokens(null), this.currentUserId = null, this.currentEmail = null, this.resetCompanionSyncDisplay(), this.cleanupSubscriptions(), logger.info("[AppSyncClient] Signed out");
+    this.resetSyncProducerAuthority(), this.authenticated = !1, this.replaceTokens(null), this.currentUserId = null, this.currentEmail = null, this.resetCompanionSyncDisplay(), this.cleanupSubscriptions(), logger.info("[AppSyncClient] Signed out");
   }
   /**
    * Make a GraphQL request
    */
-  async graphqlRequest(query, variables, isRetry = !1, signal, expectedUserId, maxResponseBytes) {
+  async graphqlRequest(query, variables, isRetry = !1, signal, expectedUserId, maxResponseBytes, beforeSend) {
     _AppSyncClient.throwIfAborted(signal), expectedUserId !== void 0 && this.assertSyncAccount(expectedUserId);
-    let config = getConfig();
+    let syncUserId = this.currentUserId, syncEpoch = this.syncDisplayEpoch, config = getConfig();
     if (!this.tokens?.idToken)
       throw new Error('Not authenticated. Run "codevibe login" first.');
     let headers = {
       "Content-Type": "application/json",
       Authorization: this.tokens.idToken
-    }, response = await fetchWithDiagnostics(
+    };
+    beforeSend?.();
+    let response = await fetchWithDiagnostics(
       config.aws.appsyncUrl,
       {
         method: "POST",
@@ -11536,7 +11559,7 @@ var AppSyncClient = class _AppSyncClient {
       logger.info("[AppSyncClient] 401 Unauthorized, refreshing token..."), _AppSyncClient.throwIfAborted(signal);
       let refreshed = await this.refreshTokens(this.tokens, signal);
       if (_AppSyncClient.throwIfAborted(signal), refreshed)
-        return this.graphqlRequest(query, variables, !0, signal, expectedUserId, maxResponseBytes);
+        return this.graphqlRequest(query, variables, !0, signal, expectedUserId, maxResponseBytes, beforeSend);
       throw new AppSyncAuthenticationError(
         this.lastRefreshNetworkError ? "refresh_network" : "refresh_auth_rejected"
       );
@@ -11546,11 +11569,22 @@ var AppSyncClient = class _AppSyncClient {
     let result = maxResponseBytes === void 0 ? await response.json() : await this.boundedGraphQLJson(response, maxResponseBytes, signal);
     if (expectedUserId !== void 0 && this.assertSyncAccount(expectedUserId), result.errors?.length) {
       let first = result.errors[0];
-      throw new AppSyncGraphQLError({
+      throw [
+        mutations.createEvent,
+        mutations.updateEventStatus,
+        mutations.recordWorkspaceOutcomeV2,
+        mutations.reportSecurityPostureV2,
+        queries.listEvents,
+        queries.listSupervisionEvents,
+        queries.getGateResolution,
+        queries.getGateResolutionV2
+      ].includes(query) && syncUserId === this.currentUserId && syncEpoch === this.syncDisplayEpoch && ["UPDATE_REQUIRED", "AUTHORITY_UNAVAILABLE", "SYNC_BLOCKED"].includes(first.errorType ?? "") && this.resetCompanionSyncDisplay(), new AppSyncGraphQLError({
         message: first.message,
         errorType: first.errorType,
         extensions: first.extensions,
-        path: first.path
+        path: first.path,
+        data: first.data,
+        requestId: response.headers?.get("x-amzn-requestid")
       });
     }
     return result;
@@ -11589,15 +11623,70 @@ var AppSyncClient = class _AppSyncClient {
     if (!this.authenticated || this.currentUserId !== userId || this.tokens?.userId !== userId)
       throw new SyncEventClientError("SYNC_ACCOUNT_CHANGED");
   }
-  /** Bounded cloud routing/usage read, pinned to the current account. No fallback. */
+  /** Concurrent fresh reads share one account/epoch-bound request and retry
+   * loop. Sequential status/quota reads remain fresh; one cancelled caller
+   * cannot cancel another caller's read. No cached admission authority. */
   async getCompanionSyncState(signal) {
-    let userId = this.getCurrentUserId();
+    let userId = this.getCurrentUserId(), epoch = this.syncDisplayEpoch, check = () => {
+      if (this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal), epoch !== this.syncDisplayEpoch) throw new SyncEventClientError("INVALID_SYNC_STATE");
+    };
+    check();
+    let flight = this.syncStateRead;
+    if (!flight || flight.userId !== userId || flight.epoch !== epoch || flight.controller.signal.aborted) {
+      let controller = new AbortController();
+      flight = { userId, epoch, controller, promise: this.readCompanionSyncState(userId, epoch, controller.signal), waiters: 0, settled: !1 }, this.syncStateRead = flight;
+      let owned2 = flight, settled = () => {
+        owned2.settled = !0, this.syncStateRead === owned2 && (this.syncStateRead = null);
+      };
+      owned2.promise.then(settled, settled);
+    }
+    let owned = flight;
+    return owned.waiters++, new Promise((resolve28, reject) => {
+      let finished = !1, finish = (error) => {
+        if (!finished) {
+          finished = !0, signal?.removeEventListener("abort", onAbort), --owned.waiters === 0 && !owned.settled && (this.syncStateRead === owned && (this.syncStateRead = null), owned.controller.abort(new Error("Sync state read has no callers")));
+          try {
+            if (check(), error !== void 0) throw error;
+            let state = this.companionSyncStatusSnapshot(userId);
+            if (!state) throw new SyncEventClientError("INVALID_SYNC_STATE");
+            resolve28(state);
+          } catch (failure2) {
+            reject(failure2);
+          }
+        }
+      }, onAbort = () => finish(_AppSyncClient.abortReason(signal));
+      signal?.addEventListener("abort", onAbort, { once: !0 }), owned.promise.then(() => finish(), (error) => finish(error)), signal?.aborted && onAbort();
+    });
+  }
+  /** Only explicit HISTORY_RETRY_AFTER permits two retries / ten seconds of
+   * added wait. Retain the server's earliest retry time after cancellation or
+   * exhaustion so a later caller cannot restart I/O before that time. */
+  async readCompanionSyncState(userId, epoch, signal) {
     this.assertSyncAccount(userId);
-    let epoch = this.syncDisplayEpoch, sequence = ++this.syncDisplaySequence;
+    let sequence = ++this.syncDisplaySequence;
     try {
-      _AppSyncClient.throwIfAborted(signal);
-      let response = await this.graphqlRequest(queries.getCompanionSyncState, {}, !1, signal, userId);
-      this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal);
+      let response, retries = 0, waitedMs = 0;
+      for (; ; ) {
+        this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal);
+        let cooldown = this.syncStateRetry;
+        if (cooldown?.userId === userId && cooldown.epoch === epoch) {
+          let delayMs = cooldown.retryAtMs - Date.now();
+          if (delayMs > 1e4 - waitedMs) throw cooldown.error;
+          delayMs > 0 && (waitedMs += delayMs, await _AppSyncClient.waitForSyncStateRetry(delayMs, signal), this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal));
+        }
+        try {
+          response = await this.graphqlRequest(queries.getCompanionSyncState, {}, !1, signal, userId);
+          break;
+        } catch (error) {
+          this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal);
+          let data = error instanceof AppSyncGraphQLError ? error.data : void 0, retryAfterMs = data && typeof data == "object" && !Array.isArray(data) ? data.retryAfterMs : void 0;
+          if (!(error instanceof AppSyncGraphQLError) || error.errorType !== "HISTORY_RETRY_AFTER" || typeof retryAfterMs != "number" || !Number.isSafeInteger(retryAfterMs) || retryAfterMs < 0) throw error;
+          let retryAtMs = Date.now() + Math.max(1, retryAfterMs);
+          if (!Number.isSafeInteger(retryAtMs) || (this.syncStateRetry = { userId, epoch, retryAtMs, error }, retries >= 2)) throw error;
+          retries++;
+        }
+      }
+      this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal), this.syncStateRetry?.userId === userId && this.syncStateRetry.epoch === epoch && (this.syncStateRetry = null);
       let state = parseCompanionSyncState(response?.data?.getCompanionSyncState, this.environment), effective = this.publishCompanionSyncDisplay(userId, state, epoch, sequence), now = Date.now();
       if (!effective || !Number.isSafeInteger(now) || effective.observedAtEpochMs > now + SYNC_STATE_CLOCK_SKEW_MS || effective.validUntilEpochMs <= now)
         throw new SyncEventClientError("INVALID_SYNC_STATE");
@@ -11606,6 +11695,19 @@ var AppSyncClient = class _AppSyncClient {
       throw this.publishCompanionSyncDisplay(userId, null, epoch, sequence), error;
     }
   }
+  /** Reuse only the server-unexpired protocol selection, never its entitlement
+   * or usage as admission authority. Every selected cloud operation still
+   * authorizes itself. Explicit status/quota refreshes remain fresh reads. */
+  async getCompanionSyncRoute(signal) {
+    let userId = this.getCurrentUserId(), epoch = this.syncDisplayEpoch, check = () => {
+      if (this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal), epoch !== this.syncDisplayEpoch) throw new SyncEventClientError("INVALID_SYNC_STATE");
+    };
+    check();
+    let cached = this.companionSyncStatusSnapshot(userId);
+    if (cached) return { protocol: cached.protocol };
+    let state = await this.getCompanionSyncState(signal);
+    return check(), { protocol: state.protocol };
+  }
   /** Subscribe to validated reads already performed by this client. No new
    * request, persistent journal, producer grant or retry is created here. */
   subscribeCompanionSyncState(userId, listener) {
@@ -11634,8 +11736,13 @@ var AppSyncClient = class _AppSyncClient {
       logger.warn("[AppSyncClient] Companion status display listener failed");
     }
   }
+  resetSyncProducerAuthority() {
+    this.syncProducerEpoch++, this.syncProducerRetry.clear();
+  }
   resetCompanionSyncDisplay() {
-    this.syncDisplayEpoch += 1, this.syncDisplay = null, this.syncDisplayAppliedSequence = this.syncDisplaySequence;
+    this.syncDisplayEpoch += 1;
+    let flight = this.syncStateRead;
+    this.syncStateRead = null, this.syncStateRetry = null, flight?.controller.abort(new Error("Sync routing observation invalidated")), this.syncDisplay = null, this.syncDisplayAppliedSequence = this.syncDisplaySequence;
     for (let entry5 of this.syncDisplayListeners) this.notifyCompanionSyncDisplay(entry5);
   }
   publishCompanionSyncDisplay(userId, state, epoch, sequence) {
@@ -11661,7 +11768,7 @@ var AppSyncClient = class _AppSyncClient {
       posture
     }, userId = this.getCurrentUserId();
     this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal);
-    let state = await this.getCompanionSyncState(signal);
+    let state = await this.getCompanionSyncRoute(signal);
     if (this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal), state.protocol === "LEGACY") return null;
     if (state.protocol !== "SYNC_V2") throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
     if (!scope.sessionGenerationId) throw new SyncEventClientError("SYNC_SESSION_GENERATION_CHANGED");
@@ -11689,7 +11796,7 @@ var AppSyncClient = class _AppSyncClient {
   async desktopSyncReadClient(sessionScope, signal) {
     let scope = { ...sessionScope }, userId = this.getCurrentUserId();
     this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal);
-    let state = await this.getCompanionSyncState(signal);
+    let state = await this.getCompanionSyncRoute(signal);
     if (this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal), state.protocol !== "SYNC_V2") throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
     let config = getConfig();
     if (config.environment !== this.environment || !config.aws.syncHttpUrl) throw new SyncEventClientError("SYNC_SESSION_UNAVAILABLE");
@@ -11996,13 +12103,13 @@ var AppSyncClient = class _AppSyncClient {
       getEncryptionContext: selected.getEncryptionContext
     });
   }
-  /** Shared cloud-selected authority for tools and ordinary native sources. */
+  /** Shared cloud-selected routing for tools and ordinary native sources. */
   async selectCompanionSourceTransport(options) {
     let { sessionId, root } = options;
     if (typeof sessionId != "string" || !/^[A-Za-z0-9_-]{1,256}$/.test(sessionId)) throw new SyncEventClientError("INVALID_SYNC_INPUT");
     let userId = this.getCurrentUserId();
     this.assertSyncAccount(userId);
-    let state = await this.getCompanionSyncState();
+    let state = await this.getCompanionSyncRoute();
     if (this.assertSyncAccount(userId), state.protocol === "FROZEN") throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
     if (state.protocol === "LEGACY") return Object.freeze({ protocol: "LEGACY" });
     let readSession = async () => {
@@ -12151,12 +12258,12 @@ var AppSyncClient = class _AppSyncClient {
       let resolutions = await writer.promptResolutions();
       check();
       let knownV2 = [...publications, ...resolutions].some((row3) => row3.sessionId === input.sessionId && row3.promptId === input.promptId), durable = (control, selected) => writer.runPromptResolution(control, async (saved, fence) => {
-        let state2 = selected ?? await this.getCompanionSyncState();
+        let state2 = selected ?? await this.getCompanionSyncRoute();
         if (await fence(), state2.protocol !== "SYNC_V2") throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
         return this.finishPromptResolution(saved, options, fence);
       });
       if (knownV2) return durable(prepareV2());
-      let state = await this.getCompanionSyncState();
+      let state = await this.getCompanionSyncRoute();
       if (check(), state.protocol === "LEGACY")
         return this.resolvePromptPublication(input, async (hasV2Publication) => {
           if (hasV2Publication || (await writer.promptResolutions()).some((row3) => row3.sessionId === input.sessionId && row3.promptId === input.promptId))
@@ -12187,7 +12294,7 @@ var AppSyncClient = class _AppSyncClient {
       check();
       let records = (await writer.promptResolutions()).filter((row3) => row3.sessionId === sessionId);
       if (check(), !records.length) return 0;
-      let state = await this.getCompanionSyncState(signal);
+      let state = await this.getCompanionSyncRoute(signal);
       if (check(), state.protocol !== "SYNC_V2") throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
       let completed = 0, firstFailure;
       for (let input of records) {
@@ -12440,10 +12547,18 @@ var AppSyncClient = class _AppSyncClient {
   }
   async mutateDesktopSyncEvent(action, input, signal) {
     _AppSyncClient.throwIfAborted(signal);
-    let data = snapshotDesktopSyncInput(action, input), userId = this.getCurrentUserId();
-    this.assertSyncAccount(userId);
+    let data = snapshotDesktopSyncInput(action, input), userId = this.getCurrentUserId(), epoch = this.syncProducerEpoch, deniedLocally = !1, check = () => {
+      if (this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal), epoch !== this.syncProducerEpoch) throw new SyncEventClientError("SYNC_ACCOUNT_CHANGED");
+      for (let family of ["PRODUCER", "ENRICHMENT"]) {
+        if (family === "ENRICHMENT" && action !== "UPDATE_EVENT") continue;
+        let cooldown = this.syncProducerRetry.get(family);
+        if (cooldown?.userId === userId && cooldown.epoch === epoch && cooldown.retryAtMs > Date.now())
+          throw deniedLocally = !0, cooldown.error;
+      }
+    };
+    check();
     let identity = await keychainManager.getDeviceIdentity();
-    if (this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal), !identity) throw new SyncEventClientError("SYNC_IDENTITY_UNAVAILABLE");
+    if (check(), !identity) throw new SyncEventClientError("SYNC_IDENTITY_UNAVAILABLE");
     let prepared = signDesktopSyncInput(
       action,
       data,
@@ -12452,9 +12567,16 @@ var AppSyncClient = class _AppSyncClient {
       Date.now()
     ), field2 = action === "CREATE_EVENT" ? "createEventV2" : "updateEventV2", response;
     try {
-      response = await this.graphqlRequest(mutations[field2], { input: prepared }, !1, signal, userId);
+      response = await this.graphqlRequest(mutations[field2], { input: prepared }, !1, signal, userId, void 0, check);
     } catch (error) {
-      if (this.assertSyncAccount(userId), error instanceof AppSyncGraphQLError && error.errorType === "SYNC_QUOTA_EXHAUSTED") {
+      if (this.assertSyncAccount(userId), !deniedLocally && epoch === this.syncProducerEpoch && error instanceof AppSyncGraphQLError) {
+        let serverDelay = error.data && typeof error.data == "object" && !Array.isArray(error.data) ? error.data.retryAfterMs : void 0, retryFamily = error.errorType === "PRODUCER_RETRY_AFTER" ? "PRODUCER" : action === "UPDATE_EVENT" && error.errorType === "UPDATE_ENRICHMENT_RETRY_AFTER" ? "ENRICHMENT" : null, family = retryFamily ?? "PRODUCER", delay = retryFamily !== null && typeof serverDelay == "number" && Number.isSafeInteger(serverDelay) && serverDelay >= 0 ? Math.max(1, serverDelay) : error.errorType === "CONTROL_BREAKER_CONTENTION" ? 1e4 : null;
+        if (delay !== null) {
+          let retryAtMs = Date.now() + delay, prior = this.syncProducerRetry.get(family);
+          Number.isSafeInteger(retryAtMs) && (!prior || prior.userId !== userId || prior.epoch !== epoch || prior.retryAtMs < retryAtMs) && this.syncProducerRetry.set(family, { userId, epoch, retryAtMs, error });
+        }
+      }
+      if (error instanceof AppSyncGraphQLError && error.errorType === "SYNC_QUOTA_EXHAUSTED") {
         let displayed = this.syncDisplay?.userId === userId ? this.syncDisplay.state : null;
         if (displayed?.usage?.syncState !== "PAUSED" || displayed.validUntilEpochMs <= Date.now()) {
           try {
@@ -12606,7 +12728,7 @@ var AppSyncClient = class _AppSyncClient {
   async submitWorkspaceOutcome(value, options = {}) {
     let input = snapshotWorkspaceOutcomeInput(value), userId = this.getCurrentUserId();
     this.assertSyncAccount(userId);
-    let route = await this.getCompanionSyncState();
+    let route = await this.getCompanionSyncRoute();
     if (this.assertSyncAccount(userId), route.protocol === "FROZEN") throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
     if (route.protocol === "LEGACY") {
       if (options.requiresV2) throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
@@ -12710,7 +12832,7 @@ var AppSyncClient = class _AppSyncClient {
           source: "MOBILE" /* MOBILE */,
           type: expected.type
         }), this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal));
-    let route = await this.getCompanionSyncState(signal);
+    let route = await this.getCompanionSyncRoute(signal);
     if (this.assertSyncAccount(userId), _AppSyncClient.throwIfAborted(signal), route.protocol === "FROZEN") throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
     if (requiredSessionGenerationId !== void 0 && route.protocol !== "SYNC_V2") throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
     if (route.protocol === "LEGACY") {
@@ -12738,7 +12860,7 @@ var AppSyncClient = class _AppSyncClient {
    * List events for a session
    */
   async listEvents(sessionId, source2, limit) {
-    let route = await this.getCompanionSyncState();
+    let route = await this.getCompanionSyncRoute();
     if (route.protocol === "FROZEN") throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
     if (route.protocol === "SYNC_V2") {
       if (limit !== void 0 && (!Number.isSafeInteger(limit) || limit < 1 || limit > 100)) throw new SyncEventClientError("INVALID_SYNC_INPUT");
@@ -12752,7 +12874,7 @@ var AppSyncClient = class _AppSyncClient {
    * can merge each page through the same strict event classifier as live data.
    */
   async listSupervisionEvents(input) {
-    let route = await this.getCompanionSyncState();
+    let route = await this.getCompanionSyncRoute();
     if (route.protocol === "FROZEN") throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
     if (route.protocol === "SYNC_V2") {
       if (input.limit !== void 0 && input.limit !== 100) throw new SyncEventClientError("INVALID_SYNC_INPUT");
@@ -13201,7 +13323,7 @@ var AppSyncClient = class _AppSyncClient {
   async getGateResolution(input) {
     let expected = { ...input }, userId = this.getCurrentUserId(), epoch = this.syncReadEpoch;
     this.assertSyncAccount(userId), this.assertSyncReadAdmission(expected.sessionId);
-    let route = await this.getCompanionSyncState();
+    let route = await this.getCompanionSyncRoute();
     if (this.assertSyncAccount(userId), this.assertSyncReadAdmission(expected.sessionId), epoch !== this.syncReadEpoch) throw new SyncEventClientError("SYNC_SESSION_UNAVAILABLE");
     if (route.protocol === "LEGACY") {
       let response = await this.graphqlRequest(
@@ -14233,7 +14355,7 @@ var AppSyncClient = class _AppSyncClient {
   createSubscription(state) {
     let abort = state.setupAbort = new AbortController(), current = () => !state.destroyed && !abort.signal.aborted && this.activeSubscriptions.get(state.sessionId) === state, setup = (async () => {
       if (await this.joinSyncSubscriptionClosures(state.sessionId), !current()) return;
-      let userId = this.getCurrentUserId(), route = await this.getCompanionSyncState(abort.signal);
+      let userId = this.getCurrentUserId(), route = await this.getCompanionSyncRoute(abort.signal);
       if (!current()) return;
       if (this.assertSyncAccount(userId), route.protocol === "FROZEN") throw new SyncEventClientError("SYNC_PRODUCER_FROZEN");
       if (route.protocol === "LEGACY") {
@@ -77322,10 +77444,47 @@ var OrchestrationShellStartupError = class extends Error {
     super(message), this.name = "OrchestrationShellStartupError", this.cause = cause;
   }
 }, STARTUP_SUBSCRIPTION_TIMEOUT_MS = 15e3;
+function logStartupFailure(boundary, errorValue, reason) {
+  try {
+    let error = errorValue, classes = [
+      "AppSyncGraphQLError",
+      "AppSyncAuthenticationError",
+      "SyncEventClientError",
+      "SyncReadClientError",
+      "Error",
+      "TypeError"
+    ], codes = [
+      "HISTORY_RETRY_AFTER",
+      "CONTROL_BREAKER_CONTENTION",
+      "AUTHORITY_UNAVAILABLE",
+      "INVALID_SYNC_STATE",
+      "INVALID_SYNC_READ_RESPONSE",
+      "SYNC_PRODUCER_FROZEN",
+      "SYNC_ACCOUNT_CHANGED",
+      "SYNC_SESSION_UNAVAILABLE",
+      "EPERM",
+      "EACCES",
+      "ENOENT",
+      "ENETUNREACH",
+      "EAI_AGAIN",
+      "ECONNREFUSED",
+      "ECONNRESET",
+      "ETIMEDOUT"
+    ], code = [error?.errorType, error?.code].find((value) => typeof value == "string" && codes.includes(value)), requestId = typeof error?.requestId == "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(error.requestId) ? error.requestId : void 0, delay = error?.data?.retryAfterMs, retryAfterMs = code === "HISTORY_RETRY_AFTER" && typeof delay == "number" && Number.isSafeInteger(delay) && delay >= 0 ? delay : void 0;
+    logger.warn(`[orchestration-shell] startup ${boundary} failed`, {
+      ...reason !== void 0 && { reason },
+      errorClass: typeof error?.name == "string" && classes.includes(error.name) ? error.name : "UNKNOWN",
+      errorCode: code ?? "UNKNOWN",
+      ...requestId && { requestId },
+      ...retryAfterMs !== void 0 && { retryAfterMs }
+    });
+  } catch {
+  }
+}
 function startupEventFailure(result) {
   if (result.emitted)
     return new OrchestrationShellStartupError("Unexpected successful startup event result");
-  switch (result.reason) {
+  switch (logStartupFailure("event", result.error, result.reason), result.reason) {
     case "missing_session_key":
       return new OrchestrationShellStartupError(
         "CodeVibe could not access the orchestration session encryption key. Exit and launch CodeVibe again; if the problem persists, run `codevibe login`.",
@@ -77864,7 +78023,7 @@ async function runOrchestrationShell(args) {
       // an event actually arrives (async) — never during this synchronous setup.
       subscribedEventDispatcher,
       (err) => {
-        initialCatchUpStarted && rejectInitialSubscription(err), logger.warn("[orchestration-shell] subscribeToEvents error", {
+        initialSubscriptionSettled || logStartupFailure("subscription", err), initialCatchUpStarted && rejectInitialSubscription(err), logger.warn("[orchestration-shell] subscribeToEvents error", {
           error: err.message
         });
       },

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.62",
+  "version": "2.0.64",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-codex-plugin",
-  "version": "2.0.71",
+  "version": "2.0.73",
   "description": "Control OpenAI Codex CLI from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -47,7 +47,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "^2.0.62",
+    "@quantiya/codevibe-core": "^2.0.64",
     "@quantiya/quorum-core": "^1.0.1",
     "chokidar": "^4.0.0",
     "dotenv": "^16.6.1",