@pellux/goodvibes-sdk 0.18.3 → 0.18.11

package/dist/platform/runtime/events/ui.d.ts

@@ -0,0 +1,59 @@
+/**
+ * UIEvent — discriminated union covering UI render, scroll, and panel events.
+ *
+ * These events drive the TUI rendering layer without coupling it to business logic.
+ */
+export type UIEvent = 
+/** A full re-render has been requested. */
+{
+    type: 'UI_RENDER_REQUEST';
+}
+/** Scroll by a relative delta (positive = down, negative = up). */
+ | {
+    type: 'UI_SCROLL_DELTA';
+    delta: number;
+}
+/** Scroll to an absolute line number. */
+ | {
+    type: 'UI_SCROLL_TO';
+    line: number;
+}
+/** A collapsible block's collapsed state was toggled. */
+ | {
+    type: 'UI_BLOCK_TOGGLE_COLLAPSE';
+    blockIndex: number;
+}
+/** A block was requested to re-run. */
+ | {
+    type: 'UI_BLOCK_RERUN';
+    blockIndex: number;
+    content: string;
+}
+/** The screen was cleared. */
+ | {
+    type: 'UI_CLEAR_SCREEN';
+}
+/** A panel was opened. */
+ | {
+    type: 'UI_PANEL_OPEN';
+    panelId: string;
+}
+/** A panel was closed. */
+ | {
+    type: 'UI_PANEL_CLOSE';
+    panelId: string;
+}
+/** A panel was focused. */
+ | {
+    type: 'UI_PANEL_FOCUS';
+    panelId: string;
+}
+/** The active view changed (e.g. chat -> search -> help). */
+ | {
+    type: 'UI_VIEW_CHANGED';
+    from: string;
+    to: string;
+};
+/** All UI event type literals as a union. */
+export type UIEventType = UIEvent['type'];
+//# sourceMappingURL=ui.d.ts.map

package/dist/platform/runtime/events/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/events/ui.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,OAAO;AACjB,2CAA2C;AACzC;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE;AAC/B,mEAAmE;GACjE;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAC5C,yCAAyC;GACvC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACxC,yDAAyD;GACvD;IAAE,IAAI,EAAE,0BAA0B,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AAC1D,uCAAuC;GACrC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACjE,8BAA8B;GAC5B;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE;AAC7B,0BAA0B;GACxB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC5C,0BAA0B;GACxB;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC7C,2BAA2B;GACzB;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC7C,6DAA6D;GAC3D;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC"}

package/dist/platform/runtime/events/ui.js

@@ -0,0 +1,6 @@
+/**
+ * UIEvent — discriminated union covering UI render, scroll, and panel events.
+ *
+ * These events drive the TUI rendering layer without coupling it to business logic.
+ */
+export {};

package/dist/platform/runtime/events/watchers.d.ts

@@ -0,0 +1,35 @@
+/**
+ * WatcherEvent — discriminated union covering managed watcher and listener lifecycle events.
+ */
+export declare const WATCHER_SOURCE_KINDS: readonly ["poll", "webhook", "tail", "file", "api", "stream"];
+export type WatcherSourceKind = (typeof WATCHER_SOURCE_KINDS)[number];
+export type WatcherEvent = {
+    type: 'WATCHER_STARTED';
+    watcherId: string;
+    sourceKind: WatcherSourceKind;
+    name: string;
+} | {
+    type: 'WATCHER_HEARTBEAT';
+    watcherId: string;
+    sourceKind: WatcherSourceKind;
+    seenAt: number;
+    checkpoint: string;
+} | {
+    type: 'WATCHER_CHECKPOINT_ADVANCED';
+    watcherId: string;
+    sourceKind: WatcherSourceKind;
+    checkpoint: string;
+} | {
+    type: 'WATCHER_FAILED';
+    watcherId: string;
+    sourceKind: WatcherSourceKind;
+    error: string;
+    retryable: boolean;
+} | {
+    type: 'WATCHER_STOPPED';
+    watcherId: string;
+    sourceKind: WatcherSourceKind;
+    reason: string;
+};
+export type WatcherEventType = WatcherEvent['type'];
+//# sourceMappingURL=watchers.d.ts.map

package/dist/platform/runtime/events/watchers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchers.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/events/watchers.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,oBAAoB,+DAAgE,CAAC;AAElG,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,MAAM,YAAY,GACpB;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;CACd,GACD;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,GACD;IACE,IAAI,EAAE,6BAA6B,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB,GACD;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;CACpB,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC"}

package/dist/platform/runtime/events/watchers.js

@@ -0,0 +1,4 @@
+/**
+ * WatcherEvent — discriminated union covering managed watcher and listener lifecycle events.
+ */
+export const WATCHER_SOURCE_KINDS = ['poll', 'webhook', 'tail', 'file', 'api', 'stream'];

package/dist/platform/runtime/execution-intents.d.ts

@@ -0,0 +1,13 @@
+export declare const EXECUTION_RISK_CLASSES: readonly ["safe", "elevated", "dangerous"];
+export declare const EXECUTION_NETWORK_POLICIES: readonly ["inherit", "allow", "deny", "scoped"];
+export declare const EXECUTION_FILESYSTEM_POLICIES: readonly ["inherit", "workspace-write", "read-only", "isolated"];
+export type ExecutionRiskClass = typeof EXECUTION_RISK_CLASSES[number];
+export type ExecutionNetworkPolicy = typeof EXECUTION_NETWORK_POLICIES[number];
+export type ExecutionFilesystemPolicy = typeof EXECUTION_FILESYSTEM_POLICIES[number];
+export interface ExecutionIntent {
+    readonly riskClass?: ExecutionRiskClass;
+    readonly requiresApproval?: boolean;
+    readonly networkPolicy?: ExecutionNetworkPolicy;
+    readonly filesystemPolicy?: ExecutionFilesystemPolicy;
+}
+//# sourceMappingURL=execution-intents.d.ts.map

package/dist/platform/runtime/execution-intents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-intents.d.ts","sourceRoot":"","sources":["../../../src/platform/runtime/execution-intents.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,4CAA6C,CAAC;AACjF,eAAO,MAAM,0BAA0B,iDAAkD,CAAC;AAC1F,eAAO,MAAM,6BAA6B,kEAAmE,CAAC;AAE9G,MAAM,MAAM,kBAAkB,GAAG,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;AACvE,MAAM,MAAM,sBAAsB,GAAG,OAAO,0BAA0B,CAAC,MAAM,CAAC,CAAC;AAC/E,MAAM,MAAM,yBAAyB,GAAG,OAAO,6BAA6B,CAAC,MAAM,CAAC,CAAC;AAErF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,sBAAsB,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,yBAAyB,CAAC;CACvD"}

package/dist/platform/runtime/execution-intents.js

@@ -0,0 +1,3 @@
+export const EXECUTION_RISK_CLASSES = ['safe', 'elevated', 'dangerous'];
+export const EXECUTION_NETWORK_POLICIES = ['inherit', 'allow', 'deny', 'scoped'];
+export const EXECUTION_FILESYSTEM_POLICIES = ['inherit', 'workspace-write', 'read-only', 'isolated'];

package/dist/platform/runtime/feature-flags/flags.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Registry of all known feature flags for goodvibes-sdk.
+ *
+ * All flags default to `'disabled'`. They are enabled as their corresponding
+ * tier is fully implemented and validated.
+ *
+ * Flag IDs follow the kebab-case naming convention used throughout the runtime.
+ */
+import type { FeatureFlag } from './types.js';
+/**
+ * The canonical list of feature flags across all implementation tiers.
+ *
+ * Add new flags here; the manager initialises from this array at startup.
+ */
+export declare const FEATURE_FLAGS: FeatureFlag[];
+/**
+ * Convenience map for O(1) lookups by flag id.
+ * Built once at module load time.
+ */
+export declare const FEATURE_FLAG_MAP: ReadonlyMap<string, FeatureFlag>;
+//# sourceMappingURL=flags.d.ts.map

package/dist/platform/runtime/feature-flags/flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/feature-flags/flags.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,WAAW,EA8gBtC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAE7D,CAAC"}

package/dist/platform/runtime/feature-flags/flags.js

@@ -0,0 +1,472 @@
+/**
+ * The canonical list of feature flags across all implementation tiers.
+ *
+ * Add new flags here; the manager initialises from this array at startup.
+ */
+export const FEATURE_FLAGS = [
+    // ── Tier 2 ───────────────────────────────────────────────────────────────
+    {
+        id: 'permissions-policy-engine',
+        name: 'Permissions Policy Engine',
+        description: 'Activates the redesigned permission model with granular tool-level and path-level rules.',
+        defaultState: 'disabled',
+        tier: 2,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'permissions-simulation',
+        name: 'Permissions Simulation Mode',
+        description: 'Enables the dual-evaluator simulation pipeline for the permissions policy engine. '
+            + 'Tracks divergence between actual and candidate evaluators without '
+            + 'changing enforcement behaviour until switched to enforce mode.',
+        defaultState: 'disabled',
+        tier: 2,
+        runtimeToggleable: false,
+    },
+    // ── Tier 3 ───────────────────────────────────────────────────────────────
+    {
+        id: 'hitl-ux-modes',
+        name: 'HITL UX Modes',
+        description: 'Enables the HITL UX mode system (quiet/balanced/operator) for notification verbosity '
+            + 'control. When enabled, ModeManager applies the configured HITL preset to the '
+            + 'notification router at startup and on mode change. '
+            + 'Disable to keep the router on its baseline delivery policy. '
+            + '@remarks This flag is informational for dashboard display only. '
+            + 'HITL modes are always applied from config at startup regardless of this flag — '
+            + 'it does not gate the runtime behaviour of ModeManager.',
+        defaultState: 'disabled',
+        tier: 3,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'unified-runtime-task',
+        name: 'Unified RuntimeTask',
+        description: 'Replaces ad-hoc task tracking with the unified RuntimeTask interface across all subsystems.',
+        defaultState: 'disabled',
+        tier: 3,
+        runtimeToggleable: false,
+    },
+    // ── Tier 4 ───────────────────────────────────────────────────────────────
+    {
+        id: 'plugin-lifecycle',
+        name: 'Plugin Lifecycle',
+        description: 'Enables the plugin lifecycle with structured init/teardown phases and health integration.',
+        defaultState: 'disabled',
+        tier: 4,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'mcp-lifecycle',
+        name: 'MCP Lifecycle',
+        description: 'Enables the MCP server lifecycle with structured connect/disconnect phases and health integration.',
+        defaultState: 'disabled',
+        tier: 4,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'otel-foundation',
+        name: 'OTel Foundation',
+        description: 'Enables the OpenTelemetry instrumentation foundation: SDK init, span creation, and in-process export.',
+        defaultState: 'disabled',
+        tier: 4,
+        runtimeToggleable: false,
+    },
+    // ── Tier 5 ───────────────────────────────────────────────────────────────
+    {
+        id: 'otel-remote-export',
+        name: 'OTel Remote Export',
+        description: 'Enables OTLP/gRPC remote export of spans to a configured collector endpoint. Requires otel-foundation.',
+        defaultState: 'disabled',
+        tier: 5,
+        runtimeToggleable: true,
+    },
+    // ── Tier 7 ───────────────────────────────────────────────────────────────
+    {
+        id: 'tool-result-reconciliation',
+        name: 'Tool Result Reconciliation',
+        description: 'Detects and reconciles unresolved tool calls at turn end. '
+            + 'When enabled, dangling tool-call state causes synthetic error results '
+            + 'to be injected and a reconciliation event to be emitted, preventing '
+            + 'silent conversation corruption. Disable to keep warning-only logging '
+            + 'without synthetic result injection.',
+        defaultState: 'enabled',
+        tier: 7,
+        runtimeToggleable: true,
+    },
+    // ── Tier 7 (continued) ──────────────────────────────────────────────────
+    // @remarks policy-signing: this flag is informational for UI/ops status display only —
+    // it is NOT a runtime gate. Signing always runs when a signing key is provided via
+    // `signingKey` in `PolicyLoaderOptions`; the flag does not suppress or bypass that
+    // behaviour. Use this flag to surface signing status in dashboards or operational tooling.
+    {
+        id: 'policy-signing',
+        name: 'Policy Signing',
+        description: 'Enables HMAC-SHA256 signature validation on policy bundle load. '
+            + 'When enabled, managed mode rejects bundles with invalid or missing signatures. '
+            + 'In non-managed mode, unsigned bundles are permitted with a warning status.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'session-compaction',
+        name: 'Session Compaction',
+        description: 'Activates structured session compaction with semantic chunking and relevance scoring.',
+        defaultState: 'disabled',
+        tier: 6,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'fetch-sanitization',
+        name: 'Fetch Response Sanitization',
+        description: 'Enables fetch response sanitization and host trust tier classification.'
+            + ' Sanitizes HTTP response content (none/safe-text/strict modes) and blocks requests'
+            + ' to SSRF-risk hosts (private IPs, metadata endpoints, localhost variants).'
+            + ' Defaults to safe-text sanitization mode when enabled.'
+            + ' Set sanitize_mode: none in fetch config to override for explicitly trusted hosts.',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'runtime-tools-budget-enforcement',
+        name: 'Runtime Budget Enforcement',
+        description: 'Enables per-phase runtime budget enforcement for tool execution pipelines. '
+            + 'Checks wall-clock time (BUDGET_EXCEEDED_MS), token consumption '
+            + '(BUDGET_EXCEEDED_TOKENS), and cost (BUDGET_EXCEEDED_COST) limits at phase '
+            + 'entry and exit. Terminates the pipeline immediately on hard budget breach '
+            + 'and emits a typed diagnostic event. Disable to revert to unlimited execution.',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'overflow-spill-backends',
+        name: 'Overflow Spill Backends',
+        description: 'Enables the pluggable spill backend system for overflow content. '
+            + 'When enabled, spillBackend can be set to file|ledger|diagnostics via config. '
+            + 'When disabled, overflow content uses the file spill backend.',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'permission-divergence-dashboard',
+        name: 'Divergence Dashboard and Enforce Gate',
+        description: 'Enables the divergence dashboard and enforcement gate for permissions simulation. '
+            + 'Aggregates divergence by tool/prefix/mode, exposes trend history in diagnostics, '
+            + 'and blocks enforce mode transitions when the divergence rate exceeds the configured '
+            + 'threshold. Disable to fall back to warn mode (no gate enforcement).',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'shell-ast-normalization',
+        name: 'Shell AST Normalization',
+        description: 'Enables the Shell AST parser for compound command verdict evaluation. '
+            + 'Produces per-segment verdicts (safe/unsafe) with user-facing denial '
+            + 'explanations. When disabled, uses the baseline flat segmentation mode.',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'local-provider-context-ingestion',
+        name: 'Local Provider Context Window Ingestion',
+        description: 'Enables dynamic ingestion of max_context_length from local/custom provider '
+            + '/v1/models endpoints. When enabled, local models use the provider-reported '
+            + 'context window (provenance: provider_api) for token budgeting and compaction '
+            + 'thresholds instead of the statically-configured contextWindow value. '
+            + 'Disable to revert to explicit configured or static limits (configured_cap / fallback).',
+        defaultState: 'enabled',
+        tier: 9,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'agent-context-window-awareness',
+        name: 'Agent Context Window Awareness',
+        description: 'Enables context window validation and compaction in the AgentOrchestrator. '
+            + 'Before each provider.chat() call, estimates total token count (system prompt + '
+            + 'messages + tool definitions) and compacts the conversation when usage exceeds '
+            + '85% of the model context window. Also applies layered system prompt assembly '
+            + '(drops conventions then project context for small windows) and catches '
+            + '"context size exceeded" errors from the provider with a single compaction retry. '
+            + 'Disable to revert to unchecked provider.chat() calls.',
+        defaultState: 'enabled',
+        tier: 9,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'output-schema-fingerprint',
+        name: 'Output Schema Fingerprints',
+        description: 'Appends `_meta.outputSchemaFingerprint` (SHA-256 of sorted result key names) '
+            + 'and `_meta.schemaShapeId` (canonical mode identifier) to tool results from '
+            + 'the find, analyze, and inspect tools. Enables schema drift detection and '
+            + 'diagnostic fingerprint surfaces. Disable to omit fingerprint metadata.',
+        defaultState: 'disabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    // ── Policy-as-Code ───────────────────────────────────────────────────────────
+    {
+        id: 'policy-as-code',
+        name: 'Policy-as-Code',
+        description: 'Enables the versioned policy bundle registry with promote/rollback semantics. '
+            + 'Requires simulation evidence (divergence gate passing) before enforcement. '
+            + 'Exposes /policy load, /policy simulate, /policy diff, /policy promote, '
+            + 'and /policy rollback commands. Divergence trends visible by command class/prefix '
+            + 'via the diagnostics panel.',
+        defaultState: 'disabled',
+        tier: 5,
+        runtimeToggleable: true,
+    },
+    // Adaptive Execution Planner.
+    {
+        id: 'adaptive-execution-planner',
+        name: 'Adaptive Execution Planner',
+        description: 'Enables the Adaptive Execution Planner, which scores strategy candidates '
+            + '(single/cohort/background/remote) using risk, latency, and capability '
+            + 'inputs and selects the best execution strategy each turn. '
+            + 'Exposes /plan mode, /plan explain, and /plan override commands. '
+            + 'Disable to revert to implicit single-call execution.',
+        defaultState: 'disabled',
+        tier: 5,
+        runtimeToggleable: true,
+    },
+    // Provider Optimizer.
+    {
+        id: 'provider-optimizer',
+        name: 'Provider Optimizer',
+        description: 'Enables the capability-contract-driven provider routing optimizer. '
+            + 'In auto mode, selects the best capable provider for each request profile '
+            + 'using ProviderCapabilityRegistry contracts. Supports manual, auto, and pinned '
+            + 'routing modes with deterministic, fully-explainable route decisions. '
+            + 'Exposes /provider route, /provider explain-route, /provider pin, and '
+            + '/provider fallback test commands. '
+            + 'Disable to revert to implicit provider selection with zero behavior change.',
+        defaultState: 'disabled',
+        tier: 5,
+        runtimeToggleable: true,
+    },
+    // ── Integration Delivery SLO ────────────────────────────────────────────
+    {
+        id: 'integration-delivery-slo',
+        name: 'Integration Delivery SLO',
+        description: 'Enables SLO enforcement for integration delivery (Slack, Discord, webhooks). '
+            + 'When enabled, dead-letter events are logged at error level and surfaced in '
+            + 'integration diagnostics. Failures are classified as retryable or terminal '
+            + 'and retried with exponential backoff. Dead-letter entries are exposed via '
+            + '/notify dlq and replayable via /notify replay. '
+            + 'Disable to keep warn-level logging without DLQ tracking.',
+        defaultState: 'disabled',
+        tier: 6,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'automation-runtime',
+        name: 'Automation Runtime',
+        description: 'Enables the first-class automation job and run model, including durable scheduling, '
+            + 'run history, catch-up behavior, and execution policies. Disable to keep the legacy '
+            + 'scheduler as the active execution path.',
+        defaultState: 'disabled',
+        tier: 6,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'gateway-control-plane',
+        name: 'Gateway Control Plane',
+        description: 'Enables the unified control-plane server that exposes shared automation, session, '
+            + 'task, and integration state over authenticated APIs and live event streams.',
+        defaultState: 'disabled',
+        tier: 6,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'omnichannel-route-binding',
+        name: 'Omnichannel Route Binding',
+        description: 'Enables route binding and reply-context preservation across TUI, web, Slack, Discord, '
+            + 'ntfy, and generic webhook surfaces.',
+        defaultState: 'disabled',
+        tier: 6,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'omnichannel-surface-adapters',
+        name: 'Omnichannel Surface Adapters',
+        description: 'Enables the channel adapter layer for interactive Slack and Discord surfaces plus '
+            + 'notification-oriented ntfy and generic webhook delivery.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'embedded-web-control-ui',
+        name: 'Embedded Web Control UI',
+        description: 'Enables the embedded browser operator surface served by the control plane.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'managed-watcher-services',
+        name: 'Managed Watcher Services',
+        description: 'Enables the watcher registry and managed long-running source listeners for external '
+            + 'automation triggers and integration health.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: false,
+    },
+    {
+        id: 'service-installation',
+        name: 'Service Installation',
+        description: 'Enables platform service install, autostart, and status management for daemonized '
+            + 'Goodvibes deployments.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: false,
+    },
+    // ── Adaptive Notification Suppression ──────────────────────────────────────
+    {
+        id: 'adaptive-notification-suppression',
+        name: 'Adaptive Notification Suppression',
+        description: 'Enables mode-context and burst-detection policies in the NotificationRouter. '
+            + 'In quiet/minimal mode, operational churn is suppressed before reaching the '
+            + 'conversation or status bar. Burst detection collapses rapid domain:level '
+            + 'floods into panel_only with a burst_collapsed reason code. '
+            + 'Disable to revert to base default + quiet-typing + batch-window policies only.',
+        defaultState: 'disabled',
+        tier: 3,
+        runtimeToggleable: true,
+    },
+    // ── Token Scope and Rotation Audit ────────────────────────────────────────
+    {
+        id: 'token-scope-rotation-audit',
+        name: 'Token Scope and Rotation Audit',
+        description: 'Enables minimum scope principle checks and rotation cadence audits for API tokens. '
+            + 'In managed mode, tokens with excess scopes or overdue rotation are blocked from use. '
+            + 'Diagnostics panel surfaces token age, scope violations, and rotation warnings. '
+            + 'Emits TOKEN_SCOPE_VIOLATION, TOKEN_ROTATION_WARNING, TOKEN_ROTATION_EXPIRED, '
+            + 'and TOKEN_BLOCKED events via the security event domain. '
+            + 'Disable to revert to unenforced advisory reporting only.',
+        defaultState: 'disabled',
+        tier: 7,
+        runtimeToggleable: true,
+    },
+    // Tool Contract Verification.
+    {
+        id: 'tool-contract-verification',
+        name: 'Tool Contract Verification',
+        description: 'Enables registration-time contract checks for all registered tools. '
+            + 'Validates schema validity, timeout/cancellation semantics, permission class '
+            + 'mapping, output policy compatibility, and idempotency declarations. '
+            + 'Invalid tools fail closed with actionable diagnostics. '
+            + 'Exposes /tool verify <name>, /tool verify-all, and /tool contract show <name> commands.',
+        defaultState: 'enabled',
+        tier: 8,
+        runtimeToggleable: true,
+    },
+    // ── Automation and Omnichannel Foundation ───────────────────────────────
+    {
+        id: 'automation-domain',
+        name: 'Automation Domain',
+        description: 'Enables the first-class automation job/run domain used by the shared scheduling engine. '
+            + 'This is the top-level gate for durable automation records, schedule evaluation, and run history.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'control-plane-gateway',
+        name: 'Control-Plane Gateway',
+        description: 'Enables the shared gateway/control-plane host that serves state snapshots, live streams, '
+            + 'and authenticated automation control APIs to the TUI and remote clients.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'route-binding',
+        name: 'Route Binding',
+        description: 'Enables durable binding and resolution of external conversation routes, thread contexts, '
+            + 'and reply targets across surfaces.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'delivery-engine',
+        name: 'Delivery Engine',
+        description: 'Enables first-class delivery tracking for automation results, retries, dead letters, and '
+            + 'surface-specific delivery outcomes.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'slack-surface',
+        name: 'Slack Surface',
+        description: 'Enables the Slack client adapter for interactive command ingress, threaded replies, and '
+            + 'notification delivery.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'discord-surface',
+        name: 'Discord Surface',
+        description: 'Enables the Discord client adapter for interaction handling, message replies, and '
+            + 'notification delivery.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'ntfy-surface',
+        name: 'ntfy Surface',
+        description: 'Enables the ntfy notification surface for push-style delivery and deep links back into the '
+            + 'control-plane UI.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'webhook-surface',
+        name: 'Webhook Surface',
+        description: 'Enables the generic webhook surface for machine-to-machine ingress and egress.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'web-surface',
+        name: 'Web Surface',
+        description: 'Enables the browser-based operator surface backed by the shared control plane.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'watcher-framework',
+        name: 'Watcher Framework',
+        description: 'Enables managed watcher/listener services, checkpointing, and recovery semantics for '
+            + 'long-running external sources.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+    {
+        id: 'service-management',
+        name: 'Service Management',
+        description: 'Enables install/start/stop/status/autostart management for running Goodvibes as a '
+            + 'durable host service.',
+        defaultState: 'disabled',
+        tier: 10,
+        runtimeToggleable: true,
+    },
+];
+/**
+ * Convenience map for O(1) lookups by flag id.
+ * Built once at module load time.
+ */
+export const FEATURE_FLAG_MAP = new Map(FEATURE_FLAGS.map((f) => [f.id, f]));

package/dist/platform/runtime/feature-flags/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Feature flag and kill-switch system for the goodvibes-sdk runtime — barrel exports and factory.
+ *
+ * Usage:
+ * ```ts
+ * import { createFeatureFlagManager } from './feature-flags/index.js';
+ * const flagManager = createFeatureFlagManager();
+ *
+ * // Check before using a gated subsystem
+ * if (flagManager.isEnabled('fetch-sanitization')) {
+ *   // enable stricter fetch sanitization rules
+ * }
+ *
+ * // Emergency kill
+ * flagManager.kill('fetch-sanitization', 'Crash loop detected in production');
+ * ```
+ */
+export type { FlagState, FeatureFlag, FlagConfig, FlagTransition } from './types.js';
+export type { FlagSubscriber } from './manager.js';
+export { FeatureFlagManager, createFeatureFlagManager } from './manager.js';
+export { FEATURE_FLAGS, FEATURE_FLAG_MAP } from './flags.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/platform/runtime/feature-flags/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/feature-flags/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACrF,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC"}