@quantiya/codevibe-core 2.0.6 → 2.0.8

package/dist/daemon/process-guards.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Minimal structural logger — every plugin's `createLogger(...)` Logger satisfies
+ * it, and so does any object with an `error(message, data?)` method.
+ */
+export interface DaemonGuardLogger {
+    error(message: string, data?: any): void;
+}
+export interface DaemonProcessGuardOptions {
+    /**
+     * Invoked for a genuinely fatal (non-network-class) `uncaughtException`. A
+     * plugin passes its existing graceful-shutdown fn here. When omitted, the guard
+     * falls back to `process.exit(1)` so a fatal fault still terminates the daemon.
+     */
+    onFatal?: (error: Error) => void;
+}
+/**
+ * True when `err`'s `code` or `message` matches a known transient network-class
+ * signature.
+ */
+export declare function isNetworkClass(err: unknown): boolean;
+/**
+ * Install the shared daemon process guards.
+ *
+ * Both handlers are SYMMETRIC (#638 F6): a network-class fault is transient — the
+ * AppSync two-phase reconnect heals it — so log and CONTINUE; anything else is a
+ * genuinely-unexpected (programmer/app) fault that could leave a corrupted daemon
+ * lying ACTIVE (a2's heartbeat re-asserts `status: ACTIVE`), so treat it as fatal
+ * and hand off to `opts.onFatal` (a clean shutdown incl. INACTIVE) or `process.exit(1)`.
+ *
+ * - `unhandledRejection` → network-class → log + CONTINUE; otherwise fatal. EXPECTED
+ *   transient app/GraphQL rejections are handled AT their emit source with `.catch()`
+ *   (audited across the plugins), so they never reach here — only a truly-unhandled
+ *   programmer-bug rejection is fatal. This is intentionally symmetric with
+ *   `uncaughtException`: before #638 an unhandledRejection was ALWAYS non-fatal, which
+ *   masked a corrupted daemon that kept advertising connected.
+ * - `uncaughtException` → network-class → log + CONTINUE; otherwise fatal.
+ */
+export declare function installDaemonProcessGuards(logger: DaemonGuardLogger, opts?: DaemonProcessGuardOptions): void;

package/dist/e1/__tests__/prompt-raise.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/e1/index.d.ts

@@ -0,0 +1,2 @@
+export { newPromptRaise, raiseFieldsFromRecord, } from './prompt-raise';
+export type { E1ProducerKind, PromptRaiseRecord, E1RaiseFields, } from './prompt-raise';

package/dist/e1/prompt-raise.d.ts

@@ -0,0 +1,65 @@
+/**
+ * E1 missed-prompt recovery — the SHARED producer-side raise identity
+ * (PHASE-E1-MISSED-PROMPT-RECOVERY-DESIGN.md §4 / §6a-4). core + claude + codex +
+ * agy all mint + emit + persist the SAME shape so a retirement/resume re-raise
+ * re-commits the SAME `promptId`.
+ *
+ * A producer mints a fresh `ownerToken` at FIRST raise and stashes it in a
+ * durable `PromptRaiseRecord`. Every raise/re-raise emits
+ * `promptId = deriveOpenPromptId(ownerToken)` + the token, so the backend
+ * `classifyRaise` WRITE_ROWs the durable open-prompt row (first raise on the
+ * `attribute_not_exists` branch, a re-raise on the `ownerToken = :token` branch).
+ *
+ * SECRECY INVARIANT (design Stage-1 v37): `ownerToken` is the secret behind the
+ * commitment — it must be stripped from EVERY same-user-readable surface (it is
+ * never in a Query/fan-out/listEvents projection). Persist it ONLY in the local
+ * durable record on the producer's own machine.
+ *
+ * Scope: this is the shared E1 IDENTITY. Each plugin's persistence adapter wraps
+ * this record with its own re-raise CONTENT (the prompt text / options), because
+ * those shapes differ per agent (claude tmux options, codex tool-input, agy pane
+ * capture). Keep the identity here; keep the content in the plugin.
+ */
+export type E1ProducerKind = 'PLUGIN_APPROVAL' | 'CORE_OFFER';
+/** The durable, per-producer record (§6a-4). Persisted locally; never uploaded. */
+export interface PromptRaiseRecord {
+    /** = deriveOpenPromptId(ownerToken). The stable cross-surface prompt identity. */
+    promptId: string;
+    /** IMMUTABLE 256-bit secret minted ONCE at first raise. NEVER surface it. */
+    ownerToken: string;
+    /** The session this prompt belongs to (for the resolve-delete origin binding). */
+    sessionId: string;
+    producerKind: E1ProducerKind;
+    /** CLAUDE | CODEX | ANTIGRAVITY (for the mobile row + fan-out). */
+    agentType?: string;
+    title?: string;
+    /** false = SUPPRESSED (options unparseable → badge-only NOTIFICATION carrier). */
+    mobileActionable: boolean;
+    /** First-raise wall clock (ms); record-creation time, for local ordering/debug. */
+    raisedAtMs: number;
+}
+/** The additive `CreateEventInput` fields a raise/re-raise puts on the wire. */
+export interface E1RaiseFields {
+    ownerToken: string;
+    promptId: string;
+    producerKind: E1ProducerKind;
+    mobileActionable: boolean;
+}
+/** Derive the wire fields from a (new or persisted) record — pure. */
+export declare function raiseFieldsFromRecord(r: PromptRaiseRecord): E1RaiseFields;
+/**
+ * FIRST raise: mint a fresh secret, derive its committed promptId, and return
+ * both the wire fields and the durable record to persist. The caller persists
+ * `record` (via its per-plugin adapter) so a later restart can re-raise.
+ */
+export declare function newPromptRaise(opts: {
+    sessionId: string;
+    producerKind: E1ProducerKind;
+    mobileActionable: boolean;
+    agentType?: string;
+    title?: string;
+    nowMs?: number;
+}): {
+    record: PromptRaiseRecord;
+    fields: E1RaiseFields;
+};

package/dist/index.d.ts

@@ -1,7 +1,16 @@
 export { KeychainManager, keychainManager, KeychainError } from './keychain';
 export { CryptoService, cryptoService, CryptoError, ENCRYPTION_VERSION } from './crypto';
+export { encryptForEmit } from './crypto';
+export type { EncryptedEmitPayload } from './crypto';
+export { E1_PROMPT_ID_DOMAIN, deriveOpenPromptId, mintOwnerToken } from './crypto';
+export { newPromptRaise, raiseFieldsFromRecord } from './e1';
+export type { E1ProducerKind, PromptRaiseRecord, E1RaiseFields } from './e1';
+export { installDaemonProcessGuards, isNetworkClass } from './daemon';
+export type { DaemonGuardLogger, DaemonProcessGuardOptions } from './daemon';
 export { AppSyncClient, AppSyncGraphQLError, DownloadUrlResponse } from './appsync';
 export { queries, mutations, subscriptions } from './appsync';
+export { isPersistedEventResult } from './appsync';
+export type { PutContextItemInput } from './appsync';
 export { AuthService, authService } from './auth';
 export { bindOAuthServer, PRIMARY_PORT, PORT_RANGE_SIZE } from './auth';
 export { runAuthCli } from './auth';
@@ -14,7 +23,7 @@ export { parseInteractivePrompt, normalizeSnapshot, } from './prompt-parser';
 export type { ParsedInteractivePrompt, PromptKind, InteractivePromptOption, } from './prompt-parser';
 export { resumeOrCreateSession, prepareSessionEncryption, rekeySessionForNewDevices, startDeviceKeyWatcher, registerDeviceEncryptionKey, prepareEventTimestamp, _resetPrepareEventTimestampForTesting, } from './session';
 export type { ResumeOrCreateSessionInput, ResumeOrCreateSessionResult } from './session';
-export { detectInstalledAgents, pushDetectedAgents, applyPerSessionOrchestrationOverride, runOrchestrationCli, V1_ORCHESTRATION_PROMPT_KIND, V1_ORCHESTRATION_OPTIONS, mapOptionNumberToUserDecisionKind, mapOptionToUserDecisionKind, } from './orchestration';
+export { detectInstalledAgents, pushDetectedAgents, V1_ORCHESTRATION_PROMPT_KIND, V1_ORCHESTRATION_OPTIONS, mapOptionNumberToUserDecisionKind, mapOptionToUserDecisionKind, } from './orchestration';
 export type { DetectableAgent, V1OrchestrationOption, V1UserDecisionKind, } from './orchestration';
 export * as Reviewer from './reviewer';
 export * as AuditKeys from './audit-keys';
@@ -27,7 +36,16 @@ export * as Continuation from './continuation';
 export * as StructuralSummary from './structural-summary';
 export { runOrchestrationShell } from './orchestration-shell';
 export { runCompanionMode } from './companion-mode';
-export { pickMode, TierError } from './orchestration-shell';
+export { pickMode } from './orchestration-shell';
 export { emitShellEvent, createShellEventEmitter } from './orchestration-shell';
 export { processMarkers, withRoleMarker } from './orchestration-shell';
+export { ToolActivityOutbox, type ToolActivityOutboxOptions, type ListPendingResult, } from './tool-activity';
+export { ToolActivityLedger, LedgerEntrySchema, LedgerFileSchema, LegacyOwnedFileSchema, type LedgerEntry, type LedgerFile, type LegacyOwnedFile, type OccurrenceRef, type ToolActivityLedgerOptions, } from './tool-activity';
+export { ToolReplayCursor, ReplayFrameTooLargeError, ReplayCursorStateSchema, DEFAULT_REPLAY_READ_BYTES, DEFAULT_REPLAY_MAX_FRAME_BYTES, type ReplayCursorState, type ReplayFrame, type ReadFramesResult, type ToolReplayCursorOptions, } from './tool-activity';
+export { ToolActivitySessionMap, InProcessRolloutLock, SessionMapRecordSchema, type RolloutLock, type RolloutOwnership, type SessionMapRecord, type ToolActivitySessionMapOptions, } from './tool-activity';
+export { ToolActivityConsolidator, isSessionKeyStaleError, type ObservedOccurrence, type ObserveDisposition, type ToolActivityTransport, type ToolActivityConsolidatorOptions, } from './tool-activity';
+export { SocketRolloutLock, type SocketRolloutLockOptions, FlockRolloutLock, type FlockRolloutLockOptions, type FlockSyncFn, type FlockFlag, createRolloutLock, type CreateRolloutLockOptions, } from './tool-activity';
+export { ToolActivityOccurrenceSchema, ToolActivityDetailSchema, ToolActivityGroupSchema, ToolActivityManifestSchema, ToolActivityOutboxEnvelopeSchema, type ToolActivityOccurrence, type ToolActivityDetail, type ToolActivityGroup, type ToolActivityManifest, type ToolActivityOutboxEnvelope, } from './tool-activity';
+export { digestOf, stableStringify } from './tool-activity';
+export { CONTEXT_SESSION_PSEUDO_TASK_NAMESPACE, deriveSessionPseudoTaskId, auditPartitionTaskIdFor, buildContextItemWireRow, decryptContextItemWireRow, type ContextItem, type ContextItemWireRow, } from './orchestration-shell';
 export type { Mode, Tier, PlannerDecision, AgentKind, PlannerHealthState, OrchestrationState, OrchestrationAction, ConversationEntry, RunningTaskState, ReviewerSeatState, GateState, ExecutionEventEntry, RefusalEventEntry, BypassEventEntry, MobileEventEntry, EventStreamEntry, QueuedTask, PendingClarification, LastModeFile, } from './orchestration-shell';