@quantiya/codevibe-core 2.0.75 → 2.0.77

package/dist/orchestration-shell/index.d.ts

@@ -28,6 +28,7 @@ import { runShellResumeInShell } from '../session-resume/shell-resume-io';
 import type { ShellResumeOutcome } from '../session-resume/shell-resume';
 import { type RelaunchRequest } from '../session-resume/relaunch';
 export { executeGitStatusSummary } from './git-status-summary';
+export { probeWorkspaceTreeFingerprint } from './context-store';
 import { type ContinuationCliResult, type ContinuationCliDeps } from './slash-routes/continuation';
 import { loadReviewerWizardData } from './slash-routes/reviewers';
 import { createShellEventEmitter } from './emit-shell-event';
@@ -46,6 +47,7 @@ import type { LocalExecutor } from '../local-executor';
 import type { WorkItemInput, DisjointnessRejection, RevertManifestStore } from '../local-executor';
 import type { QuorumLoop } from './quorum-loop';
 import { type InvocationUsageSnapshot } from '../reviewer/token-usage';
+import { buildImplementorArgv } from '../local-executor/implementor-argv';
 import { ensureFreshContextStore } from './context-store';
 import type { EnsureFreshResult } from './context-store';
 import { contextItemOccurrence, type ContextDurabilityReceipt } from './context-items';
@@ -611,7 +613,22 @@ export declare function readOnlyAgentPrompt(args: {
     allowRepositoryTools: boolean;
     hasRetainedPage?: boolean;
 }): string;
+export declare function readOnlyAdvisoryAllowsRepositoryTools(_input: string): boolean;
+export declare function applyReadOnlyAdvisoryToolPolicy(agent: LocalExecutorAgentKind, plan: ReturnType<typeof buildImplementorArgv>, allowRepositoryTools: boolean, workingDir?: string, attachments?: readonly string[]): ReturnType<typeof buildImplementorArgv>;
 export declare const BRAINSTORM_PANEL_ADVISORY_TIMEOUT_MS = 1800000;
+/**
+ * [#637] The Claude CLI reports a usage-limit INSIDE its stdout result envelope
+ * (`{"type":"result","result":"You've reached your usage limit…"}`) — NOT on
+ * stderr (`classifyImplementorQuotaFailure`) and NOT as the `error`/`turn.failed`
+ * JSONL events `classifyFailureFromStdout` reads — so a real Claude quota-wall
+ * used to render the generic 'failed' label. Locate the result envelope
+ * (tolerates pre-envelope warning lines; never throws) and run the SAME closed
+ * usage-limit patterns (`classifyFailureMessage`) against its `result` field.
+ * FAILURE PATH ONLY: the caller invokes this exclusively on the exit!==0 /
+ * empty-output branch, so the parsed answer of a SUCCESSFUL run is never
+ * classified. Only the closed label is ever surfaced, never the raw text.
+ */
+export declare function classifyClaudeResultStdoutQuota(stdout: string): boolean;
 export declare function routeReadOnlyAgentMention(args: {
     store: OrchestrationStore;
     shellArgs: RunOrchestrationShellArgs;
@@ -1271,6 +1288,10 @@ export declare function resetTurnAuthoringStateForTests(): void;
  * on any exit path. Non-throwing (delete on a Map/Set never throws).
  */
 export declare function clearTurnAuthoringSessionState(sessionId: string): void;
+/**
+ * Returns the set of quota-walled agents for the given session.
+ */
+export declare function getBrainstormQuotaWalled(sessionId: string): ReadonlySet<BrainstormPanelActiveAgent>;
 /**
  * M7 (SHARED-CONTEXT-M7-ADDENDUM.md §3.1, DL-2) — `/rule <text>`: pin the text
  * verbatim (capped) as a durable `user_rule` decision with source `explicit`,

package/dist/substrate/sandbox-exec.d.ts

@@ -111,7 +111,12 @@ extraWriteDirs?: readonly string[],
  * file-authed model call reaches its vendor directly). See
  * {@link SubstrateSpec.networkPosture}.
  */
-networkPosture?: 'loopback' | 'open'): string;
+networkPosture?: 'loopback' | 'open', 
+/**
+ * When false, denies writes to the worktree, establishing a hard read-only boundary (R5-F1).
+ * Default true (writes permitted to workdir).
+ */
+writableWorkdir?: boolean): string;
 /**
  * A5 macOS `sandbox-exec` substrate (`egressFidelity: 'coarse'`). See file
  * header. NOT the default — the LE selects it as the macOS Docker-fallback.

package/dist/substrate/types.d.ts

@@ -134,6 +134,11 @@ export interface SubstrateSpec {
      * construction still compiles (absent → loopback, byte-identical profile).
      */
     networkPosture?: "loopback" | "open";
+    /**
+     * When false, the workdir is mounted/granted read-only (writes to workdir are denied).
+     * Default true (writes permitted to workdir).
+     */
+    writableWorkdir?: boolean;
 }
 /**
  * A structural `ChildProcess` subset. The LE widens its internal child

package/dist/substrate-launch/engage-substrate.d.ts

@@ -41,6 +41,11 @@ export interface EngageSubstrateInput {
      * legacy behavior for every existing caller.
      */
     requireConfined?: boolean;
+    /**
+     * When false, the workdir is mounted/granted read-only (writes to workdir are denied) (R5-F1).
+     * Default true (writes permitted to workdir).
+     */
+    writableWorkdir?: boolean;
     /** F-P46a-4 — the implementor spawn's process-tree id (descendant reaping marker). */
     processTreeId?: string;
     /** Ladder deps (injectable for tests). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.75",
+  "version": "2.0.77",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",