@ckanner/flywheel 0.31.0 → 0.32.0

package/docs/validation/evidence/claude-quality-gate.txt

@@ -0,0 +1,29 @@
+go vet ./...
+test -z "$(gofmt -l . | grep -v '^$')" || (echo "gofmt needed:"; gofmt -l .; exit 1)
+go test github.com/ckanner/flywheel/internal/build github.com/ckanner/flywheel/internal/childenv github.com/ckanner/flywheel/internal/circuitbreaker github.com/ckanner/flywheel/internal/cli github.com/ckanner/flywheel/internal/config github.com/ckanner/flywheel/internal/contract github.com/ckanner/flywheel/internal/defectinjection github.com/ckanner/flywheel/internal/diagnostic github.com/ckanner/flywheel/internal/donereport github.com/ckanner/flywheel/internal/drivers github.com/ckanner/flywheel/internal/errs github.com/ckanner/flywheel/internal/exitcontract github.com/ckanner/flywheel/internal/fallback github.com/ckanner/flywheel/internal/ledger github.com/ckanner/flywheel/internal/machine github.com/ckanner/flywheel/internal/metrics github.com/ckanner/flywheel/internal/modules github.com/ckanner/flywheel/internal/prompts github.com/ckanner/flywheel/internal/skillsembed github.com/ckanner/flywheel/internal/state github.com/ckanner/flywheel/internal/verify github.com/ckanner/flywheel/internal/watchdog github.com/ckanner/flywheel/skills github.com/ckanner/flywheel/templates -count=1 -coverprofile=cover.out
+?   	github.com/ckanner/flywheel/internal/build	[no test files]
+ok  	github.com/ckanner/flywheel/internal/childenv	0.005s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/circuitbreaker	0.026s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/cli	6.225s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/config	0.267s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/contract	0.200s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/defectinjection	1.041s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/diagnostic	0.227s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/donereport	0.016s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/drivers	15.010s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/errs	0.009s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/exitcontract	0.007s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/fallback	0.018s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/ledger	0.011s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/machine	54.069s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/metrics	0.014s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/modules	24.884s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/prompts	0.013s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/skillsembed	0.009s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/state	0.270s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/verify	2.709s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/watchdog	5.013s	coverage: 100.0% of statements
+?   	github.com/ckanner/flywheel/skills	[no test files]
+?   	github.com/ckanner/flywheel/templates	[no test files]
+total:										(statements)			100.0%
+OK: coverage 100% (every function)

package/docs/validation/evidence/claude-race.txt

@@ -0,0 +1,7 @@
+ok  	github.com/ckanner/flywheel/internal/machine	80.902s
+ok  	github.com/ckanner/flywheel/internal/verify	4.159s
+ok  	github.com/ckanner/flywheel/internal/watchdog	6.056s
+ok  	github.com/ckanner/flywheel/internal/drivers	78.530s
+ok  	github.com/ckanner/flywheel/internal/cli	17.256s
+ok  	github.com/ckanner/flywheel/internal/modules	26.256s
+ok  	github.com/ckanner/flywheel/internal/diagnostic	1.350s

package/docs/validation/evidence/codex-pro-070-probes.txt

@@ -0,0 +1,4 @@
+{"probe":"missing-effective-configuration","accepted":true,"configuration":{"requested":{"cwd":"/tmp","model":"audit-model","approvalPolicy":"never","sandbox":"read-only"},"effective":{},"matched":false}}
+{"probe":"malformed-usage-after-valid-snapshot","report":{"status":"complete","run":{"totalTokens":100,"inputTokens":90,"cachedInputTokens":0,"cacheWriteInputTokens":0,"outputTokens":10,"reasoningOutputTokens":0},"threadTotal":{"totalTokens":100,"inputTokens":90,"cachedInputTokens":0,"cacheWriteInputTokens":0,"outputTokens":10,"reasoningOutputTokens":0},"observations":1,"replayedBaseline":false,"reason":"Codex reported a malformed token-usage notification"}}
+{"probe":"public-default-permission","permissionMode":"dangerously-bypass-approvals-and-sandbox"}
+{"probe":"public-run-export","code":"ERR_PACKAGE_PATH_NOT_EXPORTED"}

package/docs/validation/evidence/dsh-bridge.txt

@@ -0,0 +1,4 @@
+=== RUN   TestDSHNodeWorkerOfflineBridge
+--- PASS: TestDSHNodeWorkerOfflineBridge (0.10s)
+PASS
+ok  	github.com/ckanner/flywheel/internal/drivers	0.105s

package/docs/validation/evidence/dsh-native-view-bridge-tests.txt

@@ -0,0 +1 @@
+ok  	github.com/ckanner/flywheel/internal/drivers	15.960s

package/docs/validation/evidence/dsh-native-view-build.txt

@@ -0,0 +1,15 @@
+npm warn Unknown env config "http-proxy". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
+npm notice run @ckanner/flywheel@0.28.0 build:npm
+npm notice run bash scripts/build-npm.sh 0.28.0 dist-npm
+npm warn Unknown env config "http-proxy". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
+npm warn deprecated whatwg-encoding@3.1.1: Use @exodus/bytes instead for a more spec-conformant and faster implementation
+
+added 53 packages in 1s
+Built host plugin, native Conversation View, DSH SDK and Codex Pro workers.
+npm warn Unknown env config "http-proxy". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
+npm warn Unknown env config "http-proxy". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
+npm warn Unknown env config "http-proxy". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
+npm warn Unknown env config "http-proxy". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
+npm warn Unknown env config "http-proxy". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
+npm warn Unknown env config "http-proxy". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
+Built 6 verified npm packages for 0.28.0 at /workspace/scratch/e50f7e980589/flywheel/dist-npm (development source; not publishable)

package/docs/validation/evidence/dsh-native-view-candidate.json

@@ -0,0 +1,54 @@
+{
+  "format_version": 1,
+  "version": "0.28.0",
+  "source": {
+    "commit": "3cb79b9b7cffaacb799ecd804a0d7cdd885635e1",
+    "tree": "61650a7d6aac1be933183c2e7c87519fc181c82b",
+    "dirty": true,
+    "snapshot_sha256": "68b339ff7b5f8c7eb748de339432891cda57983b291c29cbb3eba9704a60f75b"
+  },
+  "packages": [
+    {
+      "name": "@ckanner/flywheel-darwin-arm64",
+      "version": "0.28.0",
+      "filename": "ckanner-flywheel-darwin-arm64-0.28.0.tgz",
+      "bytes": 2413825,
+      "integrity": "sha512-62sbFkb98zWoc+464NArI5Ac/ko778mMUSY5StBC+6hdc18H2AKFRXIBo3BzW/yVUQu2JAASzauS7UUjIg1cmA=="
+    },
+    {
+      "name": "@ckanner/flywheel-darwin-amd64",
+      "version": "0.28.0",
+      "filename": "ckanner-flywheel-darwin-amd64-0.28.0.tgz",
+      "bytes": 2614162,
+      "integrity": "sha512-CPZ4flHfwaTzRdFq61kFPYnrkDpKE4TV68TjnayIlwP/dgY2tczZzyOLJ1Fj8KFtPlNFTGUAvI9D9PWCVYgqbw=="
+    },
+    {
+      "name": "@ckanner/flywheel-linux-arm64",
+      "version": "0.28.0",
+      "filename": "ckanner-flywheel-linux-arm64-0.28.0.tgz",
+      "bytes": 2344452,
+      "integrity": "sha512-J8JHmJNGzFJUT+q1OVg0zMQAAaQ8//RBvyOrFwxpgZG7l3uvJX42k07Jm1dIbSV9q/ZNraLipKafWG7O/RedVA=="
+    },
+    {
+      "name": "@ckanner/flywheel-linux-amd64",
+      "version": "0.28.0",
+      "filename": "ckanner-flywheel-linux-amd64-0.28.0.tgz",
+      "bytes": 2592907,
+      "integrity": "sha512-InvTdKCHRALn2ZNvJ1QTXqrJk0Ngp1HvL9KeXiGCM9IRSM9GDK2wOZxDPvz7qWPu+8uNyIITCmRrOECMzWzV7g=="
+    },
+    {
+      "name": "@ckanner/dsh-plugin-flywheel",
+      "version": "0.28.0",
+      "filename": "ckanner-dsh-plugin-flywheel-0.28.0.tgz",
+      "bytes": 60385,
+      "integrity": "sha512-EOTFMw8KyYX/jbm7ECNCHDwAiif7TW1Rs94PHL5C1F3ux/G+Ixlml1qlIrjiAYaI3Go/lyOZjwo7/zTnni8t4Q=="
+    },
+    {
+      "name": "@ckanner/flywheel",
+      "version": "0.28.0",
+      "filename": "ckanner-flywheel-0.28.0.tgz",
+      "bytes": 72015,
+      "integrity": "sha512-/YaXDZB0q/2zGicl6/nfftXipO5hF7AjvnNfvbya7wvwWQAq3gk1kTJJW3C0paQmGhWVv/YmyyqnhkjRBaInWA=="
+    }
+  ]
+}

package/docs/validation/evidence/dsh-native-view-inspect.txt

@@ -0,0 +1,27 @@
+{
+  "providers": [
+    {
+      "id": "Service",
+      "platform": "host"
+    },
+    {
+      "id": "Event",
+      "platform": "host"
+    },
+    {
+      "id": "Config",
+      "platform": "host"
+    },
+    {
+      "id": "Tool",
+      "platform": "host"
+    }
+  ],
+  "services": 98,
+  "events": 76,
+  "queriedServices": [
+    "commands",
+    "tools"
+  ],
+  "client": "no connected target desktop"
+}

package/docs/validation/evidence/dsh-native-view-install-tests.txt

@@ -0,0 +1,19 @@
+npm warn Unknown env config "http-proxy". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
+npm notice run @ckanner/flywheel@0.28.0 test:install
+npm notice run node --test npm/test/install.integration.js
+▶ the six packaged npm candidates install and run from a clean agent environment
+  ✔ installed worker imports the real pinned plugin and executes an offline app-server (523.463367ms)
+  ✔ same-version setup is repeatable and preserves configuration (867.266162ms)
+  ✔ installed npm shim forwards cancellation through the real Go watchdog (93.285936ms)
+  ✔ DSH registration failure is reported and a retry repairs that step (1341.81595ms)
+  ✔ explicit CLI-only installation keeps DSH skipped (557.532221ms)
+  ✔ user-edited skill content is preserved and prevents false installation success (335.572761ms)
+✔ the six packaged npm candidates install and run from a clean agent environment (16022.828449ms)
+ℹ tests 7
+ℹ suites 0
+ℹ pass 7
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 16130.339375

package/docs/validation/evidence/dsh-native-view-npm-tests.txt

@@ -0,0 +1,143 @@
+npm warn Unknown env config "http-proxy". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
+npm notice run @ckanner/flywheel@0.28.0 test
+npm notice run node --test npm/test/*.test.js
+✔ invalid installer arguments return one JSON error without creating installation state (447.52722ms)
+✔ unsupported Node reports the required floor before changing installation state (113.066804ms)
+✔ installer executes special paths literally and repeat setup keeps a stable desktop launcher (2424.498024ms)
+✔ explicit no-dsh is reported as skipped while missing CLI prerequisites remain recoverable (1734.885231ms)
+✔ human setup output retains diagnostic remedies and does not announce an uninstalled DSH plugin (874.607689ms)
+✔ missing DSH reports partial installation and recovers on a later explicit command (1551.521772ms)
+✔ DSH reporting a different installed version cannot complete setup (812.719225ms)
+✔ setup rejects an adapter whose installed public API reports another version (174.948939ms)
+✔ a skills conflict remains visible and prevents later desktop changes (505.031882ms)
+✔ setup cancellation waits for a trapping CLI and cannot publish success (729.261769ms)
+✔ step timeout rejects a CLI that traps termination as exit zero (1692.732541ms)
+✔ cancellation during final unlock cannot return a successful report or hide cleanup errors (1615.982152ms)
+✔ managed launcher updates preserve user edits and invalid installation records (9.942796ms)
+✔ setup preserves a modified launcher and exposes the failed step in its JSON result (1278.204428ms)
+✔ capture cancels a whole installation process group after its leader exits (209.368213ms)
+✔ normal exit zero cannot hide a surviving installation subprocess (1255.117863ms)
+✔ inherited output handles outside the owned group produce a bounded failure (770.361836ms)
+✔ concurrent setup preserves the active install lock and can retry after its owner exits (1671.485064ms)
+✔ an installer never removes a lock whose ownership changed (2.725389ms)
+✔ local release CLI resolves a selected source and defaults to that source's candidate directory (2.381236ms)
+▶ clean lightweight and annotated source tags complete installation, candidate publication, registry smoke and promotion in order
+  ✔ lightweight (1281.91286ms)
+  ✔ annotated (1470.247201ms)
+✔ clean lightweight and annotated source tags complete installation, candidate publication, registry smoke and promotion in order (2754.058294ms)
+✔ the CLI can release an explicitly saved candidate outside the source checkout (1226.715875ms)
+▶ dirty source and mismatched HEAD, tree or physical snapshot cannot reach publication
+  ✔ tracked edit (147.051449ms)
+  ✔ untracked file (165.58548ms)
+  ✔ staged edit (153.415426ms)
+  ✔ new clean HEAD (151.217072ms)
+  ✔ different tree (133.950832ms)
+  ✔ different snapshot (145.594654ms)
+  ✔ dirty build receipt (109.266985ms)
+  ✔ working bytes hidden from Git status (173.926605ms)
+✔ dirty source and mismatched HEAD, tree or physical snapshot cannot reach publication (1183.255213ms)
+▶ the exact remote release tag must exist and identify the candidate source
+  ✔ missing (168.111545ms)
+  ✔ different target (178.539981ms)
+✔ the exact remote release tag must exist and identify the candidate source (347.457098ms)
+✔ remote tag parsing rejects ambiguous, unexpected and abnormal responses (0.81188ms)
+✔ remote tag reads are captured, bounded and noninteractive even in a TTY release (0.254671ms)
+✔ failed or cancelled local installation never uploads a package (334.549946ms)
+✔ a failed registry installation leaves latest unchanged, and a retry reuses all six uploaded candidates (1287.247242ms)
+✔ a partial publication retries only missing immutable versions using the same saved candidate (1430.767059ms)
+▶ source, candidate and remote tag changes during installation block the first upload
+  ✔ source (226.807094ms)
+  ✔ valid replacement candidate (176.325456ms)
+  ✔ remote deletion (207.14679ms)
+  ✔ remote target (220.53694ms)
+  ✔ same commit, new annotation (285.341088ms)
+✔ source, candidate and remote tag changes during installation block the first upload (1117.061733ms)
+▶ mutating source, candidate or tag after an upload blocks the next write
+  ✔ source (314.628091ms)
+  ✔ candidate (338.912324ms)
+  ✔ tag target (342.789322ms)
+  ✔ tag annotation (381.84599ms)
+✔ mutating source, candidate or tag after an upload blocks the next write (1379.165645ms)
+▶ source, candidate and tag changes during registry smoke block promotion
+  ✔ source (709.282131ms)
+  ✔ candidate (603.586134ms)
+  ✔ tag (652.496149ms)
+✔ source, candidate and tag changes during registry smoke block promotion (1966.055902ms)
+✔ a source change during partial latest promotion stops remaining tags (777.090073ms)
+▶ scope registry and tarball publishConfig cannot redirect uploads to another registry
+  ✔ registry (118.477066ms)
+  ✔ @ckanner:registry (125.602177ms)
+✔ scope registry and tarball publishConfig cannot redirect uploads to another registry (399.142033ms)
+✔ a scope registry change after the first upload cannot redirect the next package (359.910917ms)
+✔ only npm writes inherit the terminal; reads preserve captured output and deadline options (0.394711ms)
+✔ npm release reads and writes override an unrelated default scope without discarding authentication (0.348292ms)
+✔ a failed pre-write checkpoint prevents invoking npm even with a real terminal (0.174056ms)
+✔ non-TTY local publication stops before installation or any npm request (78.954885ms)
+✔ the public command reports non-TTY failure without invoking real npm (155.452154ms)
+✔ all six package versions, exact dependencies and platform selectors must agree (3.672981ms)
+✔ preflight accepts only the exact clean HEAD tag, not an ancestor tag (108.804866ms)
+✔ source snapshots preserve modes and symlinks without copying ignored files or editing source (16.274338ms)
+✔ npm pack accepts the npm 11 array and npm 12 name-keyed single-package protocols (1.259669ms)
+✔ npm pack rejects malformed output, ambiguous package sets and wrong map keys (0.612554ms)
+✔ npm pack requires the exact name, version and basename in either protocol (0.389679ms)
+✔ real offline npm pack output identifies the artifact whose bytes are verified (415.798987ms)
+✔ candidate verifies actual tar manifests, exact source and clean source policy (100.431279ms)
+✔ changed tar bytes and symlink substitution cannot pass candidate verification (37.552861ms)
+✔ rehashed tarball with a wrong embedded package version is still rejected (79.975626ms)
+✔ public candidate verification CLI returns failure for a mismatched source (263.399409ms)
+✔ npm absence is only structured E404; authentication, network and cancellation fail closed (1.396518ms)
+✔ npm view accepts legacy scalars and npm 12 single-scalar arrays (0.281221ms)
+✔ npm view rejects ambiguous arrays, nesting and non-scalar fields (0.456085ms)
+✔ npm view missing values are allowed only for explicitly optional fields (0.323683ms)
+✔ a successful empty integrity response never permits publication, while a missing latest tag is allowed (38.814878ms)
+✔ real npm view preserves scalar, missing-field and registry-error semantics (1926.518955ms)
+✔ publishing uses exact dependencies first and never advances latest; retries verify existing bytes (37.585166ms)
+✔ npm 12 scalar arrays preserve exact-version verification and latest promotion (41.531674ms)
+✔ a conflicting existing version or newer latest blocks every publish before mutation (42.83659ms)
+✔ private repository publication disables automatic provenance without changing candidate bytes or latest (198.917295ms)
+✔ unknown repository visibility fails before any registry request (33.638753ms)
+✔ an uncertain publish response succeeds only when registry bytes match (36.253707ms)
+✔ failed publish with no registry version stops before later packages (37.788866ms)
+✔ publication cancellation is a failure even if registry accepted the bytes (33.071075ms)
+✔ registry visibility accepts a matching package that appears after the former ten-second window (31.703568ms)
+✔ registry visibility has one deadline including query time and never starts an unbounded query (32.602068ms)
+✔ registry visibility cannot succeed or start another query after the deadline (35.153519ms)
+✔ registry visibility retries only structured E404 and stops immediately on other errors (38.3498ms)
+✔ registry query timeout terminates the real npm process even when it ignores SIGTERM (1082.883001ms)
+✔ a visibility timeout keeps the same candidate reusable without republishing accepted bytes (41.523469ms)
+✔ a local candidate changed after registry preflight is not published (39.699928ms)
+✔ latest promotion requires all six versions and promotes the entry package last (38.900905ms)
+✔ promotion waits for old latest responses to converge without repeating dist-tag mutations (38.637547ms)
+✔ latest verification tolerates a missing tag or temporarily absent target metadata (42.610289ms)
+✔ latest verification immediately rejects a newer tag even while target metadata is missing (37.66116ms)
+✔ latest verification never retries invalid tags, integrity conflicts or query failures (33.179235ms)
+✔ latest and integrity queries share one deadline and stop before starting a query past it (42.074469ms)
+✔ a latest visibility timeout resumes the same candidate without repeating completed mutations (38.874764ms)
+✔ the verify-latest CLI awaits asynchronous verification before reporting success (256.234753ms)
+✔ a concurrent newer entry tag cannot be rolled back during promotion (43.193894ms)
+✔ latest verification checks all versions and rejects unknown version ordering (43.446298ms)
+✔ release commands reject incomplete or unsafe options (0.909825ms)
+✔ npm CLI preserves literal argv, stdin, cwd, environment, stderr and native exit status (203.224789ms)
+✔ an explicit worker override is preserved, even when the bundled worker is unavailable (410.150601ms)
+✔ missing platform or worker packages fail visibly instead of selecting another installation (273.732558ms)
+✔ a non-executable native binary reports a launch failure (124.805125ms)
+✔ resolved native and worker versions must match the meta package's exact pins (327.852027ms)
+✔ a stale parent dependency is rejected while a correctly hoisted package is accepted (464.103813ms)
+✔ install and setup dispatch to the bundled installer with untouched arguments (316.982182ms)
+✔ flywheel-dsh-worker.js uses its current Node executable and the package's public worker export (188.912268ms)
+✔ flywheel-codex-pro-worker.js uses its current Node executable and the package's public worker export (172.133809ms)
+✔ the runtime enforces the adapter minimum of Node 22.18.0 (2.199368ms)
+✔ SIGTERM reaches the native owner and npm waits for its worker and delayed cleanup (531.606091ms)
+✔ SIGINT reaches the native owner and npm waits for its worker and delayed cleanup (533.039219ms)
+✔ SIGHUP reaches the native owner and npm waits for its worker and delayed cleanup (488.925538ms)
+✔ native signal death maps to its conventional exit code (174.635648ms)
+✔ cancellation preserves a native diagnostic failure after cleanup (549.327913ms)
+✔ worker shim also waits for cancellation cleanup and rejects a late exit zero (278.625762ms)
+ℹ tests 125
+ℹ suites 0
+ℹ pass 125
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 18976.574566

package/docs/validation/evidence/dsh-native-view-plugin-tests.txt

@@ -0,0 +1,99 @@
+npm warn Unknown env config "http-proxy". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
+npm notice run @ckanner/dsh-plugin-flywheel@0.28.0 check
+npm notice run npm test
+npm warn Unknown env config "http-proxy". This will stop working in the next major version of npm.
+npm warn Unknown env config "global-ignore-file". This will stop working in the next major version of npm.
+
+> @ckanner/dsh-plugin-flywheel@0.28.0 test
+> npm run build && node --test test/*.test.js
+
+npm warn Unknown env config "http-proxy". This will stop working in the next major version of npm.
+npm warn Unknown env config "global-ignore-file". This will stop working in the next major version of npm.
+
+> @ckanner/dsh-plugin-flywheel@0.28.0 build
+> node scripts/build.mjs
+
+Built host plugin, native Conversation View, DSH SDK and Codex Pro workers.
+✔ the published rc.5 renderer owns the external plugin lifecycle without Harness Client module imports (244.983029ms)
+✔ native Flywheel view is additive, idle on opening, and ships its scoped stylesheet (102.367725ms)
+✔ effective models can be inspected without a task and every binding remains readable (72.39449ms)
+✔ task lifecycle labels distinguish pending, completed, stopped and unconfirmed engine state (95.435766ms)
+✔ all packets and attention records remain accessible, text is escaped, and unknown cost stays unknown (40.341641ms)
+✔ local and SDK checks retain structured failures, remedies and the inference boundary (26.292289ms)
+✔ editing a read target invalidates its late result without permitting overlapping operations (22.826559ms)
+✔ late query failures are ignored after editing, and active protocol or transport errors can recover (59.985855ms)
+✔ failed status refresh retains the previous data with a visible unconfirmed marker (24.49956ms)
+✔ start is single-flight with a frozen target, including hide and reopen before confirmation (25.270418ms)
+✔ an unknown mutation stays blocked across path changes until the same task is successfully reconciled (56.054738ms)
+✔ proven host preflight rejections can be corrected without an impossible status reconciliation (613.041842ms)
+✔ post-dispatch failures and forged engine messages remain uncertain until the original task is observed (1779.486392ms)
+✔ a browser deadline reports unknown outcome and a late original success cannot silently clear it (11.777799ms)
+✔ session drafts and results stay separate, and a replacement binding cannot adopt an old reply (47.224003ms)
+✔ plugin disposal stops local publication without sending a task cancellation (13.252227ms)
+✔ malformed protocol results are visible and never become successful task observations (53.098576ms)
+✔ malformed configuration and diagnostic reports stay recoverable instead of breaking rendering (32.391258ms)
+✔ the UI accepts realpath identities already validated by the host for every control action (530.205111ms)
+✔ labelled fields validate paths without a request, retain focus, and follow the host locale (25.230711ms)
+✔ public installed machine API carries exact settings and a complete unchanged receipt (428.597379ms)
+✔ doctor imports the exact dependency without starting any Codex process (155.600959ms)
+✔ wrong-model retains startup evidence and prevents the model turn (380.703227ms)
+✔ wrong-cwd retains startup evidence and prevents the model turn (380.35398ms)
+✔ wrong-approval retains startup evidence and prevents the model turn (432.346207ms)
+✔ wrong-sandbox retains startup evidence and prevents the model turn (529.562338ms)
+✔ unknown-usage stays unknown or partial in the raw successful receipt (368.720104ms)
+✔ partial-usage stays unknown or partial in the raw successful receipt (281.569393ms)
+✔ full policy is preserved, without claiming a pre-turn consumer policy guard (282.358073ms)
+✔ SIGTERM awaits adapter cleanup and returns its actual cancellation receipt (319.44673ms)
+✔ SIGINT awaits adapter cleanup and returns its actual cancellation receipt (380.990145ms)
+✔ stdin EOF after admission cancels the owned run and preserves its cleanup receipt (315.815861ms)
+✔ a stubborn app-server is killed within the adapter cleanup budget (3314.019183ms)
+✔ a broken stdout waits for the app-server and guardian to disappear (436.021205ms)
+✔ progress budget failure preserves the raw cancellation receipt instead of dropping frames silently (456.892882ms)
+✔ worker SIGKILL makes the installed guardian clean ordinary descendants without a forged receipt (3410.109444ms)
+✔ an additional request cancels instead of silently starting or ignoring another task (446.103064ms)
+✔ startup timeout includes initialize and cannot submit a late prompt (293.093792ms)
+✔ output truncation is a failed attempt with a complete cleanup receipt (1392.921449ms)
+✔ invalid requests and arguments fail before launching any app-server (1001.267677ms)
+✔ parent disconnection before input does not wait for the admission timeout (80.20769ms)
+✔ public request validation always fixes fresh sessions and bounded output (10.130004ms)
+✔ missing and mismatched installed dependencies fail locally without fallback (353.05207ms)
+✔ control invokes only the Go JSON CLI using literal argv, including paths with shell syntax (121.622879ms)
+✔ configuration and doctor need no task directory, and probe is an explicit doctor-only boolean (327.803784ms)
+✔ doctor returns a valid failed report but rejects process, protocol, and identity failures (1593.304648ms)
+✔ hung controls are bounded and cancellation is never a diagnostic success (216.106167ms)
+✔ diagnostic cancellation and timeout keep the Go owner alive until delayed group cleanup finishes (14125.537492ms)
+✔ an unresponsive diagnostic owner is eventually force-stopped after its cleanup window (21012.603737ms)
+✔ slash command and model tool use the same validated engine control boundary (269.598382ms)
+✔ policy uses the shipped shell probe and pins effective session facts, rejecting partial enforcement (1.402048ms)
+✔ the native rc.5 view reaches the registered slash command through the session-scoped Remote (147.351241ms)
+✔ desktop resolves a verified npm launcher without a shell PATH (4.617531ms)
+✔ invalid or stale records do not silently select another executable (6.333246ms)
+✔ receipt and launcher links or non-executable files are rejected (2.143567ms)
+✔ start normalizes cwd and rejects resume, extra write roots, implicit permission, and empty route (11.412148ms)
+✔ only unique committed model calls count; cache is included in aggregate input, reasoning is a subset (1.642546ms)
+✔ missing or malformed usage remains unknown, not free or partial cost (0.46012ms)
+✔ an idle or max-token interval is not successful completion (0.901612ms)
+✔ permission acknowledgement must match actual cwd, policy, approval and full confinement (0.445548ms)
+✔ full worker handshake, durable result, usage and SDK shutdown agree with the Go contract (84.055279ms)
+✔ wrong-policy: fail before submitting a paid prompt (82.84379ms)
+✔ wrong-cwd: fail before submitting a paid prompt (70.212891ms)
+✔ missing-policy: fail before submitting a paid prompt (68.865147ms)
+✔ malformed: fail before submitting a paid prompt (84.287453ms)
+✔ empty: session/wait alone never establishes success (70.740186ms)
+✔ missing-terminal: session/wait alone never establishes success (57.715552ms)
+✔ max-tokens: session/wait alone never establishes success (80.253463ms)
+✔ corrupt-tail: session/wait alone never establishes success (73.493232ms)
+✔ unknown provider usage survives a successful call as null (59.662332ms)
+✔ full lifecycle deadline includes a stalled initialize; no model prompt is sent (164.927026ms)
+✔ external cancellation settles a stalled turn through SDK shutdown (142.501039ms)
+✔ forced SDK shutdown cannot claim successful settlement of native managed ranges (723.969245ms)
+✔ doctor exercises runtime and permission handshake but never prompts a model (64.198778ms)
+✔ overlay pins real native confinement and disables model-owned delegation and auxiliary model calls (0.519808ms)
+ℹ tests 75
+ℹ suites 0
+ℹ pass 75
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 38464.598741

package/docs/validation/evidence/dsh-native-view-quality-gate.txt

@@ -0,0 +1,29 @@
+go vet ./...
+test -z "$(gofmt -l . | grep -v '^$')" || (echo "gofmt needed:"; gofmt -l .; exit 1)
+go test github.com/ckanner/flywheel/internal/build github.com/ckanner/flywheel/internal/childenv github.com/ckanner/flywheel/internal/circuitbreaker github.com/ckanner/flywheel/internal/cli github.com/ckanner/flywheel/internal/config github.com/ckanner/flywheel/internal/contract github.com/ckanner/flywheel/internal/defectinjection github.com/ckanner/flywheel/internal/diagnostic github.com/ckanner/flywheel/internal/donereport github.com/ckanner/flywheel/internal/drivers github.com/ckanner/flywheel/internal/errs github.com/ckanner/flywheel/internal/exitcontract github.com/ckanner/flywheel/internal/fallback github.com/ckanner/flywheel/internal/ledger github.com/ckanner/flywheel/internal/machine github.com/ckanner/flywheel/internal/metrics github.com/ckanner/flywheel/internal/modules github.com/ckanner/flywheel/internal/prompts github.com/ckanner/flywheel/internal/skillsembed github.com/ckanner/flywheel/internal/state github.com/ckanner/flywheel/internal/verify github.com/ckanner/flywheel/internal/watchdog github.com/ckanner/flywheel/skills github.com/ckanner/flywheel/templates -count=1 -coverprofile=cover.out
+?   	github.com/ckanner/flywheel/internal/build	[no test files]
+ok  	github.com/ckanner/flywheel/internal/childenv	0.011s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/circuitbreaker	0.025s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/cli	6.134s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/config	0.033s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/contract	0.123s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/defectinjection	1.162s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/diagnostic	0.213s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/donereport	0.020s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/drivers	11.509s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/errs	0.013s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/exitcontract	0.013s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/fallback	0.012s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/ledger	0.007s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/machine	48.145s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/metrics	0.007s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/modules	25.811s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/prompts	0.013s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/skillsembed	0.011s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/state	0.031s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/verify	3.114s	coverage: 100.0% of statements
+ok  	github.com/ckanner/flywheel/internal/watchdog	5.029s	coverage: 100.0% of statements
+?   	github.com/ckanner/flywheel/skills	[no test files]
+?   	github.com/ckanner/flywheel/templates	[no test files]
+total:										(statements)			100.0%
+OK: coverage 100% (every function)

package/docs/validation/evidence/dsh-plugin-tests.txt

@@ -0,0 +1,48 @@
+npm warn Unknown env config "http-proxy". This will stop working in the next major version of npm.
+
+> @ckanner/dsh-plugin-flywheel@0.1.0 check
+> npm run build && npm test
+
+npm warn Unknown env config "http-proxy". This will stop working in the next major version of npm.
+
+> @ckanner/dsh-plugin-flywheel@0.1.0 build
+> node scripts/build.mjs
+
+Built host plugin, rc.5 client module, and native SDK worker.
+npm warn Unknown env config "http-proxy". This will stop working in the next major version of npm.
+
+> @ckanner/dsh-plugin-flywheel@0.1.0 test
+> node --test test/*.test.js
+
+✔ control invokes only the Go JSON CLI using literal argv, including paths with shell syntax (53.115591ms)
+✔ slash command and model tool use the same validated engine control boundary (85.482693ms)
+✔ policy uses the shipped shell probe and pins effective session facts, rejecting partial enforcement (0.901779ms)
+✔ browser module registers the actual rc.5 dock and calls existing command Remote (4.950943ms)
+✔ start normalizes cwd and rejects resume, extra write roots, implicit permission, and empty route (8.953366ms)
+✔ only unique committed model calls count; cache is included in aggregate input, reasoning is a subset (1.407612ms)
+✔ missing or malformed usage remains unknown, not free or partial cost (0.461726ms)
+✔ an idle or max-token interval is not successful completion (0.495798ms)
+✔ permission acknowledgement must match actual cwd, policy, approval and full confinement (0.356237ms)
+✔ full worker handshake, durable result, usage and SDK shutdown agree with the Go contract (55.823834ms)
+✔ wrong-policy: fail before submitting a paid prompt (41.123688ms)
+✔ wrong-cwd: fail before submitting a paid prompt (46.321688ms)
+✔ missing-policy: fail before submitting a paid prompt (41.295762ms)
+✔ malformed: fail before submitting a paid prompt (55.28304ms)
+✔ empty: session/wait alone never establishes success (47.693ms)
+✔ missing-terminal: session/wait alone never establishes success (41.935681ms)
+✔ max-tokens: session/wait alone never establishes success (41.575588ms)
+✔ corrupt-tail: session/wait alone never establishes success (43.948591ms)
+✔ unknown provider usage survives a successful call as null (38.125098ms)
+✔ full lifecycle deadline includes a stalled initialize; no model prompt is sent (160.168029ms)
+✔ external cancellation settles a stalled turn through SDK shutdown (119.736113ms)
+✔ forced SDK shutdown cannot claim successful settlement of native managed ranges (696.032955ms)
+✔ doctor exercises runtime and permission handshake but never prompts a model (36.570725ms)
+✔ overlay pins real native confinement and disables model-owned delegation and auxiliary model calls (0.264138ms)
+ℹ tests 24
+ℹ suites 0
+ℹ pass 24
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 1563.380974