@quantiya/codevibe-core 2.0.18 → 2.0.20

package/dist/orchestration-shell/quorum-loop.d.ts

@@ -16,7 +16,7 @@ import { captureWorkspaceRootAuthority } from '../local-executor/workspace-autho
 import { type TeamExecution } from '../local-executor/team-execution-flag';
 import { type RenderedConflict, type TrackIntentDiff } from '../local-executor/wb2-review-bundle';
 import { ReviewerRegistry } from '../reviewer/registry';
-import { type ReviewerFailureReason } from '../reviewer/provider';
+import { type ReviewerError, type ReviewerFailureReason } from '../reviewer/provider';
 import type { SubstrateHandle } from '../substrate/types';
 import type { VerdictClassifier } from '../reviewer/verdict-classifier';
 import type { AgentKind as ReviewerAgentKind, ReviewerRole, VerdictKind } from '../reviewer/types';
@@ -27,6 +27,13 @@ import type { PostDecisionAction, Tier } from './types';
 import type { ContinuationPacketWriter } from '../continuation/packet-writer';
 import type { ContinuationPacketReader } from '../continuation/packet-reader';
 import type { HandoffReason } from '../continuation/types';
+/**
+ * Project a `ReviewerError` into the variant-specific diagnostic fields worth
+ * logging without persisting reviewer-controlled bytes. The discriminator is
+ * logged separately. The exhaustive switch forces any future raw-carrying
+ * variant to choose an explicit safe projection.
+ */
+export declare function describeReviewerErrorDetail(detail: ReviewerError): Record<string, unknown>;
 /**
  * CP-1.f — the clean, user-facing one-liner for a synthesized ESCALATE verdict
  * whose origin is a reviewer subprocess failure. Built ONLY from the closed
@@ -1214,8 +1221,12 @@ export declare class QuorumLoop {
     getLastWorkspaceOutcome(): {
         kind: 'promoted';
         files: string[];
+        taskId?: string;
+        completedAt?: string;
     } | {
         kind: 'discarded';
+        taskId?: string;
+        completedAt?: string;
     } | null;
     /**
      * Session-owned Class-B ingress. The subscription calls this wrapper instead

package/dist/orchestration-shell/types.d.ts

@@ -157,6 +157,7 @@ export interface RunningTaskState {
     status: 'running' | 'cancelling' | 'completed' | 'cancelled' | 'failed';
     exitCode?: number;
     bypassReason?: 'deterministic_shortcut' | 'planner_outage' | 'planner_degraded_explicit_override';
+    completedAt?: string;
 }
 /**
  * P10 E3 r2 — one row of the bare-`/audit` session listing (the
@@ -180,6 +181,10 @@ export interface SessionTaskRecord {
     status: string;
     /** Singles: the dispatch stamp. Team rows: first-observed stamp. */
     startedAt: string;
+    /** Wall-clock ISO timestamp when the task reached a terminal state (promoted, discarded, failed). */
+    completedAt?: string;
+    /** Monotonic terminal-action sequence stamped when the task reached a terminal state. */
+    terminalSeq?: number;
 }
 /**
  * §5.1 LOCK (lines 547-556). Single reviewer subprocess identity +
@@ -594,6 +599,19 @@ export interface TeamState {
      * a re-drain so the next generation can write. `null`/undefined ⇔ still ticking.
      */
     mergeGateElapsedMs?: number;
+    /**
+     * [ADDITIVE WIDENING — #650 outcome recency] ISO wall-clock timestamp stamped
+     * when the team group first starts. Carried forward for recency evaluation
+     * against single-task outcomes.
+     */
+    startedAt?: string;
+    /**
+     * [ADDITIVE WIDENING — #650 outcome recency] ISO wall-clock timestamp stamped
+     * when the team group resolves or halts. Carried forward for recency evaluation.
+     */
+    completedAt?: string;
+    /** Monotonic terminal-action sequence stamped when the team group resolves or halts. */
+    terminalSeq?: number;
 }
 /**
  * [ADDITIVE WIDENING — CP-1.f live progress surfacing] The single EPHEMERAL
@@ -719,6 +737,8 @@ export interface OrchestrationState {
     gateActionClaims: Map<string, string | null>;
     /** True while prompt-action catch-up is not authoritative after a disconnect. */
     gateActionRecoveryBlocked: boolean;
+    /** Monotonic counter incremented on each terminal action (single task end or team resolution). */
+    terminalSequence?: number;
 }
 /**
  * One retained `/audit` listing row, keyed by its audit `entry_id` in
@@ -927,12 +947,14 @@ export type OrchestrationAction = {
 } | {
     type: 'TEAM_STARTED';
     taskGroupId: string;
+    startedAt?: string;
 } | {
     type: 'TEAM_TRACK_ASSIGNED';
     trackIndex: number;
     state: TeamTrackState;
     taskId?: string;
     agent?: string;
+    startedAt?: string;
 } | {
     type: 'TEAM_MERGE_GATE';
     status: TeamMergeGateStatus;
@@ -941,6 +963,7 @@ export type OrchestrationAction = {
 } | {
     type: 'TEAM_HALTED';
     haltReason: string;
+    completedAt?: string;
 } | {
     type: 'TEAM_TRACK_TERMINAL';
     trackIndex: number;
@@ -954,6 +977,7 @@ export type OrchestrationAction = {
 } | {
     type: 'TEAM_GROUP_RESOLVED';
     outcome: string;
+    completedAt?: string;
 } | {
     type: 'TASK_PROGRESS';
     event: TaskProgressEvent;

package/dist/ordinal-presentation.d.ts

@@ -0,0 +1,4 @@
+/** Human-facing ordinal only; never use this value as a wire ID or array index. */
+export declare function displayOrdinal(index: number): string;
+/** Legacy seat state also permits opaque IDs. Only numeric indexes are ordinals. */
+export declare function displaySeatNumber(seatId: string): string;

package/dist/ordinal-presentation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/reviewer/provider.d.ts

@@ -179,10 +179,10 @@ export type ReviewerError = {
     kind: 'spawn_failed';
     agent: AgentKind;
     /**
-     * Human-readable cause. **MAY carry raw stderr** — must stay in logs /
-     * audit only. NEVER promote this into the synthesized verdict wire
-     * `reasoning` (CP-1.f sanitization invariant). Use `failureReason` for
-     * the user-facing one-liner instead.
+     * Human-readable cause. **MAY carry raw stderr** — keep it transient and
+     * shape-project it before any durable log/audit. NEVER promote this into
+     * synthesized verdict wire `reasoning` (CP-1.f sanitization invariant).
+     * Use `failureReason` for the user-facing one-liner instead.
      */
     reason: string;
     /**
@@ -197,11 +197,11 @@ export type ReviewerError = {
     failureReason?: ReviewerFailureReason;
 } | {
     /** Reviewer returned but its output couldn't be parsed into a valid
-     *  verdict. Raw output is preserved for the audit log. */
+     *  verdict. Raw output remains transient for classification and is
+     *  shape-projected before any durable diagnostic. */
     kind: 'parse_failure';
     agent: AgentKind;
-    /** Raw output (truncated to a reasonable length by the caller if
-     *  needed). */
+    /** Raw output; consumers must never persist or surface its bytes. */
     raw_output: string;
 } | {
     /** Reviewer was cancelled by the engine before completing (e.g.,

package/dist/substrate/command-runner.d.ts

@@ -17,5 +17,6 @@ export declare class ChildProcessCommandRunner implements CommandRunner {
         env?: Readonly<Record<string, string>>;
         cwd?: string;
         cwdAuthority?: WorkspaceRootAuthority;
+        launchPathAuthorities?: readonly WorkspaceRootAuthority[];
     }): RunnerProc;
 }

package/dist/substrate/sandbox-exec.d.ts

@@ -91,8 +91,9 @@ homedir?: string,
  */
 auditDir?: string | null, 
 /**
- * Extra dirs that the agent may read/write. Used only for the mutable CLI
- * config/runtime dir; the broker-token helper stays in `extraReadDirs`.
+ * Extra dirs that the agent may read/write. Used for the mutable CLI
+ * config/runtime dir and the unique Claude scratch root; the broker-token
+ * helper stays in `extraReadDirs`.
  */
 extraWriteDirs?: readonly string[], 
 /**

package/dist/substrate/types.d.ts

@@ -92,6 +92,19 @@ export interface SubstrateSpec {
         /** Writable mount/grant point inside the sandbox. */
         sandboxDir: string;
     };
+    /**
+     * O5 — unique short writable Claude scratch root for A5. It is created by
+     * the host with mode 0700, granted as one exact subtree, and removed through
+     * identity-bound teardown. Docker does not need this extra mount/grant.
+     */
+    agentScratch?: {
+        /** Canonical host path used by the Seatbelt grant. */
+        hostDir: string;
+        /** Short path spelling exported as CLAUDE_CODE_TMPDIR. */
+        sandboxDir: string;
+        /** Exact scratch-root incarnation captured through its creation descriptor. */
+        authority: WorkspaceRootAuthority;
+    };
     /**
      * CP-7 W3 — Stage-2 r1 HIGH (A5 audit-readability). OPTIONAL, additive. The
      * RESOLVED per-task audit DIR (the sibling `.codevibe/audit/<group>/<track>/`
@@ -256,5 +269,12 @@ export interface CommandRunner {
         cwd?: string;
         /** Exact cwd incarnation held through native process creation. */
         cwdAuthority?: WorkspaceRootAuthority;
+        /**
+         * Additional directory incarnations that the trusted POSIX process host
+         * must authenticate synchronously at the final target-spawn boundary.
+         * These paths may be referenced by the child env/profile even though
+         * they are not its cwd (for example Claude's private scratch root).
+         */
+        launchPathAuthorities?: readonly WorkspaceRootAuthority[];
     }): RunnerProc;
 }

package/dist/substrate-launch/apikey-bootstrap.d.ts

@@ -1,4 +1,5 @@
 import type { VendorProvider } from "../credential-broker/types";
+import type { WorkspaceRootAuthority } from "../local-executor/workspace-authority";
 /** The fixed filenames inside the bootstrap dir (host + sandbox agree). */
 export declare const HELPER_SCRIPT_NAME = "broker-apikey-helper.sh";
 export declare const TOKEN_FILE_NAME = "broker-token";
@@ -49,6 +50,18 @@ export interface ApiKeyBootstrapInput {
     configDirEqualsHostDir?: boolean;
     /** Override the host root for the bootstrap dir (default os.tmpdir()). */
     hostRoot?: string;
+    /**
+     * A5/macOS only: parent for Claude's short, private per-seat scratch root.
+     * `engageSubstrate` passes `/tmp`, which is canonicalized before `mkdtemp`;
+     * the resulting `/private/tmp/cvXXXXXX` path remains under 30 bytes and
+     * prevents Claude's Bash child-process temp path from falling back to the
+     * shared `/tmp/claude-<uid>` namespace. Omitted for Docker/direct callers.
+     */
+    claudeScratchHostRoot?: string;
+    /** @internal deterministic race seam after mkdtemp identity capture. */
+    beforeClaudeScratchOpen?: (path: string) => Promise<void> | void;
+    /** @internal deterministic race seam before atomic scratch quarantine. */
+    beforeClaudeScratchCleanupCommit?: (path: string) => Promise<void> | void;
     /**
      * The host path of the agent's rw WORKDIR mount (the worktree). The token
      * file + helper MUST live OUTSIDE this dir — otherwise the broker token (and
@@ -78,6 +91,14 @@ export declare class ApiKeyBootstrap {
     readonly configSandboxDir: string;
     /** Host path of the token file (the LE rewrites this on rotation). */
     private readonly tokenFileHostPath;
+    /** Canonical host path of the unique Claude scratch root, if allocated. */
+    readonly claudeScratchHostDir: string | null;
+    /** Short in-sandbox spelling exported as CLAUDE_CODE_TMPDIR. */
+    readonly claudeScratchSandboxDir: string | null;
+    /** Creation identity used to refuse cleanup of a replaced path. */
+    private readonly claudeScratchIdentity;
+    /** Test-only pause seam retained with the task-owned scratch authority. */
+    private readonly beforeClaudeScratchCleanupCommit;
     private constructor();
     /**
      * Materialize the bootstrap: create the host dir (0700), write the token file
@@ -95,6 +116,12 @@ export declare class ApiKeyBootstrap {
         hostDir: string;
         sandboxDir: string;
     };
+    /** The unique writable Claude scratch grant, absent on Docker/Codex paths. */
+    get claudeScratchSpec(): {
+        hostDir: string;
+        sandboxDir: string;
+        authority: WorkspaceRootAuthority;
+    } | null;
     /**
      * REFRESH the broker token (rotation / on a broker 401). Atomically rewrites
      * the token file (write a temp + rename) so the agent never reads a partial
@@ -102,6 +129,10 @@ export declare class ApiKeyBootstrap {
      * the new value. The agent's mount is read-only, so ONLY the host can do this.
      */
     refresh(token: string): Promise<void>;
-    /** Remove the bootstrap dir (session teardown). Idempotent. */
+    /**
+     * Remove the bootstrap, config, and unique Claude scratch dirs. Scratch
+     * cleanup is identity-bound: a replaced pathname is retained and reported,
+     * never recursively removed as though it still belonged to this seat.
+     */
     destroy(): Promise<void>;
 }

package/dist/substrate-launch/engage-substrate.d.ts

@@ -76,6 +76,8 @@ export interface EngageSubstrateInput {
     tokenRefreshIntervalMs?: number;
     /** Bootstrap host-root override (tests). */
     bootstrapHostRoot?: string;
+    /** A5 Claude short-scratch parent override (tests; production is `/tmp`). */
+    claudeScratchHostRoot?: string;
     /** Safe locale source for the sanitized env (default: none). */
     localeSource?: Readonly<Record<string, string | undefined>>;
 }

package/dist/substrate-launch/sanitized-env.d.ts

@@ -42,6 +42,12 @@ export interface SanitizedEnvInput {
      * Required for the substrate path; the I1 allow-list still drops every cred.
      */
     sandboxBootstrapDir: string;
+    /**
+     * Optional Claude-only short private scratch root. A5 supplies a unique
+     * canonical `/private/tmp/cvXXXXXX` path; Docker keeps using its isolated
+     * config dir.
+     */
+    claudeScratchDir?: string;
     /**
      * A SAFE source for the hygiene values (LANG/TERM/…). Defaults to a minimal
      * fixed map. The LE may pass a curated subset of `process.env` for locale, but

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.18",
+  "version": "2.0.20",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",