@pellux/goodvibes-sdk 0.18.11 → 0.18.13

package/dist/_internal/platform/runtime/events/transport.js

@@ -0,0 +1,2 @@
+/** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
+export {};

package/dist/_internal/platform/runtime/events/ui.d.ts

@@ -0,0 +1,59 @@
+/**
+ * UIEvent — discriminated union covering UI render, scroll, and panel events.
+ *
+ * These events drive terminal and web surface rendering without coupling it to business logic.
+ */
+export type UIEvent = 
+/** A full re-render has been requested. */
+{
+    type: 'UI_RENDER_REQUEST';
+}
+/** Scroll by a relative delta (positive = down, negative = up). */
+ | {
+    type: 'UI_SCROLL_DELTA';
+    delta: number;
+}
+/** Scroll to an absolute line number. */
+ | {
+    type: 'UI_SCROLL_TO';
+    line: number;
+}
+/** A collapsible block's collapsed state was toggled. */
+ | {
+    type: 'UI_BLOCK_TOGGLE_COLLAPSE';
+    blockIndex: number;
+}
+/** A block was requested to re-run. */
+ | {
+    type: 'UI_BLOCK_RERUN';
+    blockIndex: number;
+    content: string;
+}
+/** The screen was cleared. */
+ | {
+    type: 'UI_CLEAR_SCREEN';
+}
+/** A panel was opened. */
+ | {
+    type: 'UI_PANEL_OPEN';
+    panelId: string;
+}
+/** A panel was closed. */
+ | {
+    type: 'UI_PANEL_CLOSE';
+    panelId: string;
+}
+/** A panel was focused. */
+ | {
+    type: 'UI_PANEL_FOCUS';
+    panelId: string;
+}
+/** The active view changed (e.g. chat -> search -> help). */
+ | {
+    type: 'UI_VIEW_CHANGED';
+    from: string;
+    to: string;
+};
+/** All UI event type literals as a union. */
+export type UIEventType = UIEvent['type'];
+//# sourceMappingURL=ui.d.ts.map

package/dist/_internal/platform/runtime/events/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/events/ui.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,OAAO;AACjB,2CAA2C;AACzC;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE;AAC/B,mEAAmE;GACjE;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAC5C,yCAAyC;GACvC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACxC,yDAAyD;GACvD;IAAE,IAAI,EAAE,0BAA0B,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AAC1D,uCAAuC;GACrC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACjE,8BAA8B;GAC5B;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE;AAC7B,0BAA0B;GACxB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC5C,0BAA0B;GACxB;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC7C,2BAA2B;GACzB;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC7C,6DAA6D;GAC3D;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC"}

package/dist/_internal/platform/runtime/events/ui.js

@@ -0,0 +1,6 @@
+/**
+ * UIEvent — discriminated union covering UI render, scroll, and panel events.
+ *
+ * These events drive terminal and web surface rendering without coupling it to business logic.
+ */
+export {};

package/dist/_internal/platform/runtime/events/watchers.d.ts

@@ -0,0 +1,36 @@
+/** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
+/**
+ * WatcherEvent — discriminated union covering managed watcher and listener lifecycle events.
+ */
+export declare const WATCHER_SOURCE_KINDS: readonly ["poll", "webhook", "tail", "file", "api", "stream"];
+export type WatcherSourceKind = (typeof WATCHER_SOURCE_KINDS)[number];
+export type WatcherEvent = {
+    type: 'WATCHER_STARTED';
+    watcherId: string;
+    sourceKind: WatcherSourceKind;
+    name: string;
+} | {
+    type: 'WATCHER_HEARTBEAT';
+    watcherId: string;
+    sourceKind: WatcherSourceKind;
+    seenAt: number;
+    checkpoint: string;
+} | {
+    type: 'WATCHER_CHECKPOINT_ADVANCED';
+    watcherId: string;
+    sourceKind: WatcherSourceKind;
+    checkpoint: string;
+} | {
+    type: 'WATCHER_FAILED';
+    watcherId: string;
+    sourceKind: WatcherSourceKind;
+    error: string;
+    retryable: boolean;
+} | {
+    type: 'WATCHER_STOPPED';
+    watcherId: string;
+    sourceKind: WatcherSourceKind;
+    reason: string;
+};
+export type WatcherEventType = WatcherEvent['type'];
+//# sourceMappingURL=watchers.d.ts.map

package/dist/_internal/platform/runtime/events/watchers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchers.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/events/watchers.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;GAEG;AAEH,eAAO,MAAM,oBAAoB,+DAAgE,CAAC;AAElG,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,MAAM,YAAY,GACpB;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;CACd,GACD;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,GACD;IACE,IAAI,EAAE,6BAA6B,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB,GACD;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;CACpB,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC"}

package/dist/_internal/platform/runtime/events/watchers.js

@@ -0,0 +1,5 @@
+/** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
+/**
+ * WatcherEvent — discriminated union covering managed watcher and listener lifecycle events.
+ */
+export const WATCHER_SOURCE_KINDS = ['poll', 'webhook', 'tail', 'file', 'api', 'stream'];

package/dist/_internal/platform/runtime/execution-intents.d.ts

@@ -0,0 +1,14 @@
+/** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
+export declare const EXECUTION_RISK_CLASSES: readonly ["safe", "elevated", "dangerous"];
+export declare const EXECUTION_NETWORK_POLICIES: readonly ["inherit", "allow", "deny", "scoped"];
+export declare const EXECUTION_FILESYSTEM_POLICIES: readonly ["inherit", "workspace-write", "read-only", "isolated"];
+export type ExecutionRiskClass = typeof EXECUTION_RISK_CLASSES[number];
+export type ExecutionNetworkPolicy = typeof EXECUTION_NETWORK_POLICIES[number];
+export type ExecutionFilesystemPolicy = typeof EXECUTION_FILESYSTEM_POLICIES[number];
+export interface ExecutionIntent {
+    readonly riskClass?: ExecutionRiskClass;
+    readonly requiresApproval?: boolean;
+    readonly networkPolicy?: ExecutionNetworkPolicy;
+    readonly filesystemPolicy?: ExecutionFilesystemPolicy;
+}
+//# sourceMappingURL=execution-intents.d.ts.map

package/dist/_internal/platform/runtime/execution-intents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-intents.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/runtime/execution-intents.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF,eAAO,MAAM,sBAAsB,4CAA6C,CAAC;AACjF,eAAO,MAAM,0BAA0B,iDAAkD,CAAC;AAC1F,eAAO,MAAM,6BAA6B,kEAAmE,CAAC;AAE9G,MAAM,MAAM,kBAAkB,GAAG,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;AACvE,MAAM,MAAM,sBAAsB,GAAG,OAAO,0BAA0B,CAAC,MAAM,CAAC,CAAC;AAC/E,MAAM,MAAM,yBAAyB,GAAG,OAAO,6BAA6B,CAAC,MAAM,CAAC,CAAC;AAErF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,sBAAsB,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,yBAAyB,CAAC;CACvD"}

package/dist/_internal/platform/runtime/execution-intents.js

@@ -0,0 +1,4 @@
+/** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
+export const EXECUTION_RISK_CLASSES = ['safe', 'elevated', 'dangerous'];
+export const EXECUTION_NETWORK_POLICIES = ['inherit', 'allow', 'deny', 'scoped'];
+export const EXECUTION_FILESYSTEM_POLICIES = ['inherit', 'workspace-write', 'read-only', 'isolated'];

package/dist/_internal/platform/runtime/feature-flags/flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/feature-flags/flags.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,WAAW,EA8gBtC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAE7D,CAAC"}

package/dist/_internal/platform/runtime/feature-flags/flags.js

@@ -0,0 +1,472 @@
+/**
+ * The canonical list of feature flags across all implementation tiers.
+ *
+ * Add new flags here; the manager initialises from this array at startup.
+ */
+export const FEATURE_FLAGS = [
+    // ── Tier 2 ───────────────────────────────────────────────────────────────
+    {
+        id: 'permissions-policy-engine',
+        name: 'Permissions Policy Engine',
+        description: 'Activates the redesigned permission model with granular tool-level and path-level rules.',
+        defaultState: 'disabled',
+        tier: 2,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'permissions-simulation',
+        name: 'Permissions Simulation Mode',
+        description: 'Enables the dual-evaluator simulation pipeline for the permissions policy engine. '
+            + 'Tracks divergence between actual and candidate evaluators without '
+            + 'changing enforcement behaviour until switched to enforce mode.',
+        defaultState: 'disabled',
+        tier: 2,
+        runtimeToggleable: false,
+    },
+    // ── Tier 3 ───────────────────────────────────────────────────────────────
+    {
+        id: 'hitl-ux-modes',
+        name: 'HITL UX Modes',
+        description: 'Enables the HITL UX mode system (quiet/balanced/operator) for notification verbosity '
+            + 'control. When enabled, ModeManager applies the configured HITL preset to the '
+            + 'notification router at startup and on mode change. '
+            + 'Disable to keep the router on its baseline delivery policy. '
+            + '@remarks This flag is informational for dashboard display only. '
+            + 'HITL modes are always applied from config at startup regardless of this flag — '
+            + 'it does not gate the runtime behaviour of ModeManager.',
+        defaultState: 'disabled',
+        tier: 3,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'unified-runtime-task',
+        name: 'Unified RuntimeTask',
+        description: 'Replaces ad-hoc task tracking with the unified RuntimeTask interface across all subsystems.',
+        defaultState: 'disabled',
+        tier: 3,
+        runtimeToggleable: false,
+    },
+    // ── Tier 4 ───────────────────────────────────────────────────────────────
+    {
+        id: 'plugin-lifecycle',
+        name: 'Plugin Lifecycle',
+        description: 'Enables the plugin lifecycle with structured init/teardown phases and health integration.',
+        defaultState: 'disabled',
+        tier: 4,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'mcp-lifecycle',
+        name: 'MCP Lifecycle',
+        description: 'Enables the MCP server lifecycle with structured connect/disconnect phases and health integration.',
+        defaultState: 'disabled',
+        tier: 4,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'otel-foundation',
+        name: 'OTel Foundation',
+        description: 'Enables the OpenTelemetry instrumentation foundation: SDK init, span creation, and in-process export.',
+        defaultState: 'disabled',
+        tier: 4,
+        runtimeToggleable: false,
+    },
+    // ── Tier 5 ───────────────────────────────────────────────────────────────
+    {
+        id: 'otel-remote-export',
+        name: 'OTel Remote Export',
+        description: 'Enables OTLP/gRPC remote export of spans to a configured collector endpoint. Requires otel-foundation.',
+        defaultState: 'disabled',
+        tier: 5,
+        runtimeToggleable: true,
+    },
+    // ── Tier 7 ───────────────────────────────────────────────────────────────
+    {
+        id: 'tool-result-reconciliation',
+        name: 'Tool Result Reconciliation',
+        description: 'Detects and reconciles unresolved tool calls at turn end. '
+            + 'When enabled, dangling tool-call state causes synthetic error results '
+            + 'to be injected and a reconciliation event to be emitted, preventing '
+            + 'silent conversation corruption. Disable to keep warning-only logging '
+            + 'without synthetic result injection.',
+        defaultState: 'enabled',
+        tier: 7,
+        runtimeToggleable: true,
+    },
+    // ── Tier 7 (continued) ──────────────────────────────────────────────────
+    // @remarks policy-signing: this flag is informational for UI/ops status display only —
+    // it is NOT a runtime gate. Signing always runs when a signing key is provided via
+    // `signingKey` in `PolicyLoaderOptions`; the flag does not suppress or bypass that
+    // behaviour. Use this flag to surface signing status in dashboards or operational tooling.
+    {
+        id: 'policy-signing',
+        name: 'Policy Signing',
+        description: 'Enables HMAC-SHA256 signature validation on policy bundle load. '
+            + 'When enabled, managed mode rejects bundles with invalid or missing signatures. '
+            + 'In non-managed mode, unsigned bundles are permitted with a warning status.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'session-compaction',
+        name: 'Session Compaction',
+        description: 'Activates structured session compaction with semantic chunking and relevance scoring.',
+        defaultState: 'disabled',
+        tier: 6,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'fetch-sanitization',
+        name: 'Fetch Response Sanitization',
+        description: 'Enables fetch response sanitization and host trust tier classification.'
+            + ' Sanitizes HTTP response content (none/safe-text/strict modes) and blocks requests'
+            + ' to SSRF-risk hosts (private IPs, metadata endpoints, localhost variants).'
+            + ' Defaults to safe-text sanitization mode when enabled.'
+            + ' Set sanitize_mode: none in fetch config to override for explicitly trusted hosts.',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'runtime-tools-budget-enforcement',
+        name: 'Runtime Budget Enforcement',
+        description: 'Enables per-phase runtime budget enforcement for tool execution pipelines. '
+            + 'Checks wall-clock time (BUDGET_EXCEEDED_MS), token consumption '
+            + '(BUDGET_EXCEEDED_TOKENS), and cost (BUDGET_EXCEEDED_COST) limits at phase '
+            + 'entry and exit. Terminates the pipeline immediately on hard budget breach '
+            + 'and emits a typed diagnostic event. Disable to revert to unlimited execution.',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'overflow-spill-backends',
+        name: 'Overflow Spill Backends',
+        description: 'Enables the pluggable spill backend system for overflow content. '
+            + 'When enabled, spillBackend can be set to file|ledger|diagnostics via config. '
+            + 'When disabled, overflow content uses the file spill backend.',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'permission-divergence-dashboard',
+        name: 'Divergence Dashboard and Enforce Gate',
+        description: 'Enables the divergence dashboard and enforcement gate for permissions simulation. '
+            + 'Aggregates divergence by tool/prefix/mode, exposes trend history in diagnostics, '
+            + 'and blocks enforce mode transitions when the divergence rate exceeds the configured '
+            + 'threshold. Disable to fall back to warn mode (no gate enforcement).',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'shell-ast-normalization',
+        name: 'Shell AST Normalization',
+        description: 'Enables the Shell AST parser for compound command verdict evaluation. '
+            + 'Produces per-segment verdicts (safe/unsafe) with user-facing denial '
+            + 'explanations. When disabled, uses the baseline flat segmentation mode.',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'local-provider-context-ingestion',
+        name: 'Local Provider Context Window Ingestion',
+        description: 'Enables dynamic ingestion of max_context_length from local/custom provider '
+            + '/v1/models endpoints. When enabled, local models use the provider-reported '
+            + 'context window (provenance: provider_api) for token budgeting and compaction '
+            + 'thresholds instead of the statically-configured contextWindow value. '
+            + 'Disable to revert to explicit configured or static limits (configured_cap / fallback).',
+        defaultState: 'enabled',
+        tier: 9,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'agent-context-window-awareness',
+        name: 'Agent Context Window Awareness',
+        description: 'Enables context window validation and compaction in the AgentOrchestrator. '
+            + 'Before each provider.chat() call, estimates total token count (system prompt + '
+            + 'messages + tool definitions) and compacts the conversation when usage exceeds '
+            + '85% of the model context window. Also applies layered system prompt assembly '
+            + '(drops conventions then project context for small windows) and catches '
+            + '"context size exceeded" errors from the provider with a single compaction retry. '
+            + 'Disable to revert to unchecked provider.chat() calls.',
+        defaultState: 'enabled',
+        tier: 9,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'output-schema-fingerprint',
+        name: 'Output Schema Fingerprints',
+        description: 'Appends `_meta.outputSchemaFingerprint` (SHA-256 of sorted result key names) '
+            + 'and `_meta.schemaShapeId` (canonical mode identifier) to tool results from '
+            + 'the find, analyze, and inspect tools. Enables schema drift detection and '
+            + 'diagnostic fingerprint surfaces. Disable to omit fingerprint metadata.',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    // ── Policy-as-Code ───────────────────────────────────────────────────────────
+    {
+        id: 'policy-as-code',
+        name: 'Policy-as-Code',
+        description: 'Enables the versioned policy bundle registry with promote/rollback semantics. '
+            + 'Requires simulation evidence (divergence gate passing) before enforcement. '
+            + 'Exposes /policy load, /policy simulate, /policy diff, /policy promote, '
+            + 'and /policy rollback commands. Divergence trends visible by command class/prefix '
+            + 'via the diagnostics panel.',
+        defaultState: 'disabled',
+        tier: 5,
+        runtimeToggleable: true,
+    },
+    // Adaptive Execution Planner.
+    {
+        id: 'adaptive-execution-planner',
+        name: 'Adaptive Execution Planner',
+        description: 'Enables the Adaptive Execution Planner, which scores strategy candidates '
+            + '(single/cohort/background/remote) using risk, latency, and capability '
+            + 'inputs and selects the best execution strategy each turn. '
+            + 'Exposes /plan mode, /plan explain, and /plan override commands. '
+            + 'Disable to revert to implicit single-call execution.',
+        defaultState: 'disabled',
+        tier: 5,
+        runtimeToggleable: true,
+    },
+    // Provider Optimizer.
+    {
+        id: 'provider-optimizer',
+        name: 'Provider Optimizer',
+        description: 'Enables the capability-contract-driven provider routing optimizer. '
+            + 'In auto mode, selects the best capable provider for each request profile '
+            + 'using ProviderCapabilityRegistry contracts. Supports manual, auto, and pinned '
+            + 'routing modes with deterministic, fully-explainable route decisions. '
+            + 'Exposes /provider route, /provider explain-route, /provider pin, and '
+            + '/provider fallback test commands. '
+            + 'Disable to revert to implicit provider selection with zero behavior change.',
+        defaultState: 'disabled',
+        tier: 5,
+        runtimeToggleable: true,
+    },
+    // ── Integration Delivery SLO ────────────────────────────────────────────
+    {
+        id: 'integration-delivery-slo',
+        name: 'Integration Delivery SLO',
+        description: 'Enables SLO enforcement for integration delivery (Slack, Discord, webhooks). '
+            + 'When enabled, dead-letter events are logged at error level and surfaced in '
+            + 'integration diagnostics. Failures are classified as retryable or terminal '
+            + 'and retried with exponential backoff. Dead-letter entries are exposed via '
+            + '/notify dlq and replayable via /notify replay. '
+            + 'Disable to keep warn-level logging without DLQ tracking.',
+        defaultState: 'disabled',
+        tier: 6,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'automation-runtime',
+        name: 'Automation Runtime',
+        description: 'Enables the first-class automation job and run model, including durable scheduling, '
+            + 'run history, catch-up behavior, and execution policies. Disable to keep the legacy '
+            + 'scheduler as the active execution path.',
+        defaultState: 'disabled',
+        tier: 6,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'gateway-control-plane',
+        name: 'Gateway Control Plane',
+        description: 'Enables the unified control-plane server that exposes shared automation, session, '
+            + 'task, and integration state over authenticated APIs and live event streams.',
+        defaultState: 'disabled',
+        tier: 6,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'omnichannel-route-binding',
+        name: 'Omnichannel Route Binding',
+        description: 'Enables route binding and reply-context preservation across terminal, web, Slack, Discord, '
+            + 'ntfy, and generic webhook surfaces.',
+        defaultState: 'disabled',
+        tier: 6,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'omnichannel-surface-adapters',
+        name: 'Omnichannel Surface Adapters',
+        description: 'Enables the channel adapter layer for interactive Slack and Discord surfaces plus '
+            + 'notification-oriented ntfy and generic webhook delivery.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'embedded-web-control-ui',
+        name: 'Embedded Web Control UI',
+        description: 'Enables the embedded browser operator surface served by the control plane.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'managed-watcher-services',
+        name: 'Managed Watcher Services',
+        description: 'Enables the watcher registry and managed long-running source listeners for external '
+            + 'automation triggers and integration health.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'service-installation',
+        name: 'Service Installation',
+        description: 'Enables platform service install, autostart, and status management for daemonized '
+            + 'Goodvibes deployments.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: false,
+    },
+    // ── Adaptive Notification Suppression ──────────────────────────────────────
+    {
+        id: 'adaptive-notification-suppression',
+        name: 'Adaptive Notification Suppression',
+        description: 'Enables mode-context and burst-detection policies in the NotificationRouter. '
+            + 'In quiet/minimal mode, operational churn is suppressed before reaching the '
+            + 'conversation or status bar. Burst detection collapses rapid domain:level '
+            + 'floods into panel_only with a burst_collapsed reason code. '
+            + 'Disable to revert to base default + quiet-typing + batch-window policies only.',
+        defaultState: 'disabled',
+        tier: 3,
+        runtimeToggleable: true,
+    },
+    // ── Token Scope and Rotation Audit ────────────────────────────────────────
+    {
+        id: 'token-scope-rotation-audit',
+        name: 'Token Scope and Rotation Audit',
+        description: 'Enables minimum scope principle checks and rotation cadence audits for API tokens. '
+            + 'In managed mode, tokens with excess scopes or overdue rotation are blocked from use. '
+            + 'Diagnostics panel surfaces token age, scope violations, and rotation warnings. '
+            + 'Emits TOKEN_SCOPE_VIOLATION, TOKEN_ROTATION_WARNING, TOKEN_ROTATION_EXPIRED, '
+            + 'and TOKEN_BLOCKED events via the security event domain. '
+            + 'Disable to revert to unenforced advisory reporting only.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: true,
+    },
+    // Tool Contract Verification.
+    {
+        id: 'tool-contract-verification',
+        name: 'Tool Contract Verification',
+        description: 'Enables registration-time contract checks for all registered tools. '
+            + 'Validates schema validity, timeout/cancellation semantics, permission class '
+            + 'mapping, output policy compatibility, and idempotency declarations. '
+            + 'Invalid tools fail closed with actionable diagnostics. '
+            + 'Exposes /tool verify <name>, /tool verify-all, and /tool contract show <name> commands.',
+        defaultState: 'enabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    // ── Automation and Omnichannel Foundation ───────────────────────────────
+    {
+        id: 'automation-domain',
+        name: 'Automation Domain',
+        description: 'Enables the first-class automation job/run domain used by the shared scheduling engine. '
+            + 'This is the top-level gate for durable automation records, schedule evaluation, and run history.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'control-plane-gateway',
+        name: 'Control-Plane Gateway',
+        description: 'Enables the shared gateway/control-plane host that serves state snapshots, live streams, '
+            + 'and authenticated automation control APIs to terminal hosts and remote clients.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'route-binding',
+        name: 'Route Binding',
+        description: 'Enables durable binding and resolution of external conversation routes, thread contexts, '
+            + 'and reply targets across surfaces.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'delivery-engine',
+        name: 'Delivery Engine',
+        description: 'Enables first-class delivery tracking for automation results, retries, dead letters, and '
+            + 'surface-specific delivery outcomes.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'slack-surface',
+        name: 'Slack Surface',
+        description: 'Enables the Slack client adapter for interactive command ingress, threaded replies, and '
+            + 'notification delivery.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'discord-surface',
+        name: 'Discord Surface',
+        description: 'Enables the Discord client adapter for interaction handling, message replies, and '
+            + 'notification delivery.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'ntfy-surface',
+        name: 'ntfy Surface',
+        description: 'Enables the ntfy notification surface for push-style delivery and deep links back into the '
+            + 'control-plane UI.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'webhook-surface',
+        name: 'Webhook Surface',
+        description: 'Enables the generic webhook surface for machine-to-machine ingress and egress.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'web-surface',
+        name: 'Web Surface',
+        description: 'Enables the browser-based operator surface backed by the shared control plane.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'watcher-framework',
+        name: 'Watcher Framework',
+        description: 'Enables managed watcher/listener services, checkpointing, and recovery semantics for '
+            + 'long-running external sources.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'service-management',
+        name: 'Service Management',
+        description: 'Enables install/start/stop/status/autostart management for running Goodvibes as a '
+            + 'durable host service.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+];
+/**
+ * Convenience map for O(1) lookups by flag id.
+ * Built once at module load time.
+ */
+export const FEATURE_FLAG_MAP = new Map(FEATURE_FLAGS.map((f) => [f.id, f]));

package/dist/_internal/platform/runtime/feature-flags/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/feature-flags/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACrF,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC"}

package/dist/_internal/platform/runtime/feature-flags/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/feature-flags/manager.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGrF,sDAAsD;AACtD,MAAM,MAAM,cAAc,GAAG,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,SAAS,KAChB,IAAI,CAAC;AAEV;;;GAGG;AACH,cAAM,sBAAsB;IAC1B,6CAA6C;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAE7D,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkC;IAE/D,4DAA4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwB;IAErD,kCAAkC;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkC;;IAW/D;;;;;OAKG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIlC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIjC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS;IAQnC;;;OAGG;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,SAAS,CAAA;KAAE,CAAC;IAW9D;;;OAGG;IACH,cAAc,IAAI,SAAS,cAAc,EAAE;IAM3C;;;;;;;;;OASG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAuB5B;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAgB7B;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAe1C;;;;;;;;;;OAUG;IACH,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAyBxC;;;;;;;;OAQG;IACH,SAAS,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI;IAS/C;;;OAGG;IACH,OAAO,CAAC,YAAY;IAQpB;;;OAGG;IACH,OAAO,CAAC,WAAW;CA+BpB;AAED;;;;;;GAMG;AACH,OAAO,EAAE,sBAAsB,IAAI,kBAAkB,EAAE,CAAC;AAExD,wBAAgB,wBAAwB,IAAI,sBAAsB,CAEjE"}

package/dist/_internal/platform/runtime/feature-flags/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/feature-flags/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE1D;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,sFAAsF;IACtF,EAAE,EAAE,MAAM,CAAC;IAEX,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IAEb,sDAAsD;IACtD,WAAW,EAAE,MAAM,CAAC;IAEpB,yEAAyE;IACzE,YAAY,EAAE,SAAS,CAAC;IAExB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IAEf,kCAAkC;IAClC,QAAQ,EAAE,SAAS,CAAC;IAEpB,iCAAiC;IACjC,IAAI,EAAE,SAAS,CAAC;IAEhB,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAElB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/_internal/platform/runtime/forensics/classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/forensics/classifier.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,oEAAoE;AACpE,UAAU,eAAe;IACvB,kDAAkD;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,6CAA6C;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,qEAAqE;IACrE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,uDAAuD;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,+CAA+C;IAC/C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,+CAA+C;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CACvC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,YAAY,CAoEpE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,YAAY,EAC5B,YAAY,CAAC,EAAE,MAAM,EACrB,UAAU,CAAC,EAAE,MAAM,GAClB,MAAM,CA6BR"}

package/dist/_internal/platform/runtime/forensics/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/forensics/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EACV,aAAa,EACb,eAAe,EAIhB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;QACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC,CAAC;IACH,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;QACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;QACvD,QAAQ,CAAC,aAAa,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,YAAY,GAAG,aAAa,CAAC;QAC3F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC,CAAC;CACJ;AAED,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;gBAEnC,KAAK,GAAE,MAA+B;IAIzD;;;OAGG;IACI,IAAI,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAWxC;;OAEG;IACI,MAAM,IAAI,aAAa,GAAG,SAAS;IAI1C;;OAEG;IACI,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIrD;;OAEG;IACI,MAAM,IAAI,aAAa,EAAE;IAIhC;;OAEG;IACI,KAAK,IAAI,MAAM;IAItB;;;OAGG;IACI,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAMnD;;;OAGG;IACI,WAAW,CAChB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE;QAAE,cAAc,CAAC,EAAE,mBAAmB,CAAA;KAAO,GACrD,eAAe,GAAG,SAAS;IAmC9B;;;OAGG;IACI,kBAAkB,CACvB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE;QAAE,cAAc,CAAC,EAAE,mBAAmB,CAAA;KAAO,GACrD,MAAM,GAAG,SAAS;IAMrB;;OAEG;IACI,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAKlD,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,oBAAoB;IAqE5B,OAAO,CAAC,QAAQ;CAQjB"}