@pellux/goodvibes-sdk 0.33.38 → 0.34.1

package/dist/platform/channels/policy-manager.js

@@ -1,5 +1,6 @@
 import { randomUUID } from 'node:crypto';
 import { PersistentStore } from '../state/persistent-store.js';
+import { isRecord } from '../utils/record-coerce.js';
 const MAX_AUDIT_RECORDS = 500;
 function defaultPolicy(surface) {
     return {
@@ -52,9 +53,6 @@ function commandAllowed(command, allowedCommands) {
 }
 const CONVERSATION_POLICIES = new Set(['allow', 'deny', 'inherit']);
 const CONVERSATION_KINDS = new Set(['direct', 'group', 'channel', 'thread', 'service']);
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
 function isFiniteNumber(value) {
     return typeof value === 'number' && Number.isFinite(value);
 }

package/dist/platform/channels/reply-pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reply-pipeline.d.ts","sourceRoot":"","sources":["../../../src/platform/channels/reply-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAiB,MAAM,4BAA4B,CAAC;AACxH,OAAO,KAAK,EACV,kBAAkB,EAIlB,mBAAmB,EAEnB,cAAc,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAO9D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,UAAU,iBAAiB;IACzB,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;CAC3C;AAiRD,wBAAgB,sCAAsC,CACpD,QAAQ,EAAE,oBAAoB,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,GACvE,kBAAkB,EAAE,CAqItB;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;IACpD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;gBAE3C,IAAI,EAAE,iBAAiB;IAOnC,gBAAgB,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI;IA0B1D,OAAO,IAAI,IAAI;IAMf,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI;IAUhD,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAS9B,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAI7B,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAIjD,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAe3G,YAAY,CAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE;QAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAA;KAAO,GAChD,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;YA0BxB,cAAc;YAiDd,sBAAsB;IAsCpC,OAAO,CAAC,sBAAsB;IAmB9B,OAAO,CAAC,0BAA0B;IAgBlC,OAAO,CAAC,sBAAsB;YAahB,aAAa;YAIb,QAAQ;IA0CtB,OAAO,CAAC,oBAAoB;CAK7B"}
+{"version":3,"file":"reply-pipeline.d.ts","sourceRoot":"","sources":["../../../src/platform/channels/reply-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAiB,MAAM,4BAA4B,CAAC;AACxH,OAAO,KAAK,EACV,kBAAkB,EAIlB,mBAAmB,EAEnB,cAAc,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAO9D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,UAAU,iBAAiB;IACzB,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;CAC3C;AAiRD,wBAAgB,sCAAsC,CACpD,QAAQ,EAAE,oBAAoB,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,GACvE,kBAAkB,EAAE,CAyItB;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;IACpD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;gBAE3C,IAAI,EAAE,iBAAiB;IAOnC,gBAAgB,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI;IA0B1D,OAAO,IAAI,IAAI;IAMf,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI;IAUhD,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAS9B,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAI7B,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAIjD,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAe3G,YAAY,CAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE;QAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAA;KAAO,GAChD,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;YA0BxB,cAAc;YAiDd,sBAAsB;IAsCpC,OAAO,CAAC,sBAAsB;IAmB9B,OAAO,CAAC,0BAA0B;IAgBlC,OAAO,CAAC,sBAAsB;YAahB,aAAa;YAIb,QAAQ;IA0CtB,OAAO,CAAC,oBAAoB;CAK7B"}

package/dist/platform/channels/reply-pipeline.js

@@ -358,6 +358,10 @@ export function normalizeChannelRenderEventFromRuntime(envelope) {
             return [renderEvent('status', 'progress', envelope, {
                     text: `WRFC changes committed${payload.commitHash ? `: ${payload.commitHash}` : ''}`,
                 })];
+        case 'WORKFLOW_SCORE_REGRESSION':
+            return [renderEvent('status', 'progress', envelope, {
+                    text: `WRFC score regression warning: ${payload.reason}`,
+                })];
         case 'WORKFLOW_CASCADE_ABORTED':
             return [renderEvent('error', 'progress', envelope, {
                     text: `WRFC cascade warning: ${payload.reason}`,

package/dist/platform/config/schema-domain-core.d.ts

@@ -1,4 +1,4 @@
-import type { ConfigSettingDefinition } from './schema-shared.js';
+import { type ConfigSettingDefinition } from './schema-shared.js';
 export declare const coreConfigDefaults: {
     display: {
         stream: boolean;

package/dist/platform/config/schema-domain-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-domain-core.d.ts","sourceRoot":"","sources":["../../../src/platform/config/schema-domain-core.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+H9B,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,uBAAuB,EA+Z3D,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,uBAAuB,EAsI3D,CAAC"}
+{"version":3,"file":"schema-domain-core.d.ts","sourceRoot":"","sources":["../../../src/platform/config/schema-domain-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,uBAAuB,EAA4B,MAAM,oBAAoB,CAAC;AAE5F,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+H9B,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,uBAAuB,EA8Z3D,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,uBAAuB,EAsI3D,CAAC"}

package/dist/platform/config/schema-domain-core.js

@@ -1,3 +1,4 @@
+import { intRange, numRange, port } from './schema-shared.js';
 export const coreConfigDefaults = {
     display: {
         stream: true,
@@ -145,7 +146,7 @@ export const coreHeadConfigSettings = [
         type: 'number',
         default: 30,
         description: 'Line count threshold for collapsing tool output',
-        validate: (v) => typeof v === 'number' && v >= 1 && v <= 1000,
+        ...numRange(1, 1000),
     },
     {
         key: 'display.theme',
@@ -219,7 +220,7 @@ export const coreHeadConfigSettings = [
         type: 'number',
         default: 80,
         description: 'Compact conversation when context usage exceeds this percentage',
-        validate: (v) => typeof v === 'number' && v >= 10 && v <= 100,
+        ...numRange(10, 100),
     },
     {
         key: 'behavior.staleContextWarnings',
@@ -265,7 +266,7 @@ export const coreHeadConfigSettings = [
         type: 'number',
         default: 512 * 1024 * 1024,
         description: 'Maximum stored artifact size for file, URL, multipart, and raw upload ingest in bytes',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1 * 1024 * 1024 && v <= 10 * 1024 * 1024 * 1024,
+        ...intRange(1 * 1024 * 1024, 10 * 1024 * 1024 * 1024),
     },
     {
         key: 'permissions.mode',
@@ -383,14 +384,14 @@ export const coreHeadConfigSettings = [
         type: 'number',
         default: 8,
         description: 'Total active agents allowed across the orchestration tree',
-        validate: (v) => typeof v === 'number' && v >= 1 && v <= 20,
+        ...numRange(1, 20),
     },
     {
         key: 'orchestration.maxDepth',
         type: 'number',
         default: 0,
         description: 'Maximum recursive orchestration depth: 0=disabled, higher values allow deeper bounded recursion',
-        validate: (v) => typeof v === 'number' && v >= 0 && v <= 5,
+        ...numRange(0, 5),
     },
     {
         key: 'sandbox.replIsolation',
@@ -449,7 +450,7 @@ export const coreHeadConfigSettings = [
         type: 'number',
         default: 2222,
         description: 'Optional guest SSH port used by the QEMU wrapper for real guest command transport',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1 && v <= 65535,
+        ...port(),
     },
     {
         key: 'sandbox.qemuGuestUser',
@@ -518,8 +519,7 @@ export const coreHeadConfigSettings = [
         type: 'number',
         default: 1.0,
         description: 'Playback speed multiplier for TTS synthesis (0.25–4.0); 1.0 is normal speed',
-        validate: (v) => typeof v === 'number' && Number.isFinite(v) && v >= 0.25 && v <= 4.0,
-        validationHint: 'finite number in [0.25, 4.0]',
+        ...numRange(0.25, 4.0),
     },
     {
         key: 'ui.operationalMessages',
@@ -585,7 +585,7 @@ export const coreTailConfigSettings = [
         type: 'number',
         default: 5000,
         description: 'Default token budget for precision read operations',
-        validate: (v) => typeof v === 'number' && v >= 100 && v <= 100000,
+        ...numRange(100, 100000),
     },
     {
         key: 'tools.hooksFile',
@@ -598,14 +598,14 @@ export const coreTailConfigSettings = [
         type: 'number',
         default: 9.9,
         description: 'Minimum review score to pass WRFC (0-10)',
-        validate: (v) => typeof v === 'number' && v >= 0 && v <= 10,
+        ...numRange(0, 10),
     },
     {
         key: 'wrfc.maxFixAttempts',
         type: 'number',
         default: 5,
         description: 'Maximum gate retry depth before aborting WRFC chain',
-        validate: (v) => typeof v === 'number' && v >= 1 && v <= 20,
+        ...numRange(1, 20),
     },
     {
         key: 'wrfc.autoCommit',
@@ -644,7 +644,7 @@ export const coreTailConfigSettings = [
         type: 'number',
         default: 0.3,
         description: 'Warn when cache hit rate falls below this fraction (0.0–1.0)',
-        validate: (v) => typeof v === 'number' && v >= 0 && v <= 1,
+        ...numRange(0, 1),
     },
     {
         key: 'helper.enabled',

package/dist/platform/config/schema-domain-runtime.d.ts

@@ -1,4 +1,4 @@
-import type { ConfigSettingDefinition } from './schema-shared.js';
+import { type ConfigSettingDefinition } from './schema-shared.js';
 export declare const runtimeConfigDefaults: {
     runtime: {
         companionChatLimiter: {

package/dist/platform/config/schema-domain-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-domain-runtime.d.ts","sourceRoot":"","sources":["../../../src/platform/config/schema-domain-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+HjC,CAAC;AAEF,eAAO,MAAM,4BAA4B,EAAE,uBAAuB,EAsNjE,CAAC;AAEF,eAAO,MAAM,8BAA8B,EAAE,uBAAuB,EA+WnE,CAAC"}
+{"version":3,"file":"schema-domain-runtime.d.ts","sourceRoot":"","sources":["../../../src/platform/config/schema-domain-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,uBAAuB,EAAkB,MAAM,oBAAoB,CAAC;AAElF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+HjC,CAAC;AAEF,eAAO,MAAM,4BAA4B,EAAE,uBAAuB,EAsNjE,CAAC;AAEF,eAAO,MAAM,8BAA8B,EAAE,uBAAuB,EA+WnE,CAAC"}

package/dist/platform/config/schema-domain-runtime.js

@@ -1,3 +1,4 @@
+import { intRange, port } from './schema-shared.js';
 export const runtimeConfigDefaults = {
     runtime: {
         companionChatLimiter: {
@@ -138,35 +139,35 @@ export const runtimePrimaryConfigSettings = [
         type: 'number',
         default: 4,
         description: 'Maximum automation runs that may execute concurrently',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1 && v <= 64,
+        ...intRange(1, 64),
     },
     {
         key: 'automation.runHistoryLimit',
         type: 'number',
         default: 100,
         description: 'Maximum run history entries retained per automation job',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1 && v <= 5000,
+        ...intRange(1, 5000),
     },
     {
         key: 'automation.defaultTimeoutMs',
         type: 'number',
         default: 15 * 60 * 1000,
         description: 'Default execution timeout for automation runs in milliseconds',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1_000 && v <= 24 * 60 * 60 * 1000,
+        ...intRange(1_000, 24 * 60 * 60 * 1000),
     },
     {
         key: 'automation.catchUpWindowMinutes',
         type: 'number',
         default: 30,
         description: 'How long after startup the engine should catch up missed runs',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 0 && v <= 24 * 60,
+        ...intRange(0, 24 * 60),
     },
     {
         key: 'automation.failureCooldownMs',
         type: 'number',
         default: 5 * 60 * 1000,
         description: 'Cooldown applied after a failed automation run before retrying',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 0 && v <= 24 * 60 * 60 * 1000,
+        ...intRange(0, 24 * 60 * 60 * 1000),
     },
     {
         key: 'automation.deleteAfterRun',
@@ -198,7 +199,7 @@ export const runtimePrimaryConfigSettings = [
         type: 'number',
         default: 3421,
         description: 'Bind port for the control-plane HTTP server',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1 && v <= 65535,
+        ...port(),
     },
     {
         key: 'controlPlane.baseUrl',
@@ -275,7 +276,7 @@ export const runtimePrimaryConfigSettings = [
         type: 'number',
         default: 3422,
         description: 'Bind port for the webhook HTTP listener',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1 && v <= 65535,
+        ...port(),
     },
     {
         key: 'httpListener.trustProxy',
@@ -326,7 +327,7 @@ export const runtimePrimaryConfigSettings = [
         type: 'number',
         default: 3423,
         description: 'Bind port for the web surface',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1 && v <= 65535,
+        ...port(),
     },
     {
         key: 'web.publicBaseUrl',
@@ -353,21 +354,21 @@ export const runtimeSecondaryConfigSettings = [
         type: 'number',
         default: 60_000,
         description: 'Polling interval for watcher sources in milliseconds',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1_000 && v <= 24 * 60 * 60 * 1000,
+        ...intRange(1_000, 24 * 60 * 60 * 1000),
     },
     {
         key: 'watchers.heartbeatIntervalMs',
         type: 'number',
         default: 15_000,
         description: 'Heartbeat interval for watcher services in milliseconds',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1_000 && v <= 60 * 60 * 1000,
+        ...intRange(1_000, 60 * 60 * 1000),
     },
     {
         key: 'watchers.recoveryWindowMinutes',
         type: 'number',
         default: 10,
         description: 'Recovery window for watcher restart and missed-event catch-up',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 0 && v <= 24 * 60,
+        ...intRange(0, 24 * 60),
     },
     {
         key: 'service.enabled',
@@ -451,7 +452,7 @@ export const runtimeSecondaryConfigSettings = [
         default: 100,
         description: 'Maximum number of listeners per event channel (per-type and per-domain) before a warning is emitted in production ' +
             'or a RangeError is thrown in development mode. Raise this only if you have verified there is no subscriber leak.',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1 && v <= 100_000,
+        ...intRange(1, 100_000),
     },
     {
         key: 'telemetry.includeRawPrompts',
@@ -487,35 +488,35 @@ export const runtimeSecondaryConfigSettings = [
         type: 'number',
         default: 60_000,
         description: 'Daemon-local batch scheduler tick interval in milliseconds',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 5_000 && v <= 60 * 60 * 1000,
+        ...intRange(5_000, 60 * 60 * 1000),
     },
     {
         key: 'batch.maxDelayMs',
         type: 'number',
         default: 5 * 60 * 1000,
         description: 'Maximum time a queued local batch job should wait before the daemon submits its provider batch',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 0 && v <= 24 * 60 * 60 * 1000,
+        ...intRange(0, 24 * 60 * 60 * 1000),
     },
     {
         key: 'batch.maxJobsPerProviderBatch',
         type: 'number',
         default: 100,
         description: 'Maximum SDK jobs grouped into a single upstream provider batch submission',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1 && v <= 100_000,
+        ...intRange(1, 100_000),
     },
     {
         key: 'batch.maxQueuePayloadBytes',
         type: 'number',
         default: 16 * 1024,
         description: 'Recommended maximum Cloudflare queue message payload size; queue messages should be signals, not full prompt archives',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1024 && v <= 128 * 1024,
+        ...intRange(1024, 128 * 1024),
     },
     {
         key: 'batch.maxQueueMessagesPerDay',
         type: 'number',
         default: 1_000,
         description: 'SDK-side free-tier guardrail for Cloudflare queue message volume',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 0 && v <= 10_000_000,
+        ...intRange(0, 10_000_000),
     },
     {
         key: 'cloudflare.enabled',
@@ -703,6 +704,6 @@ export const runtimeSecondaryConfigSettings = [
         type: 'number',
         default: 10_000,
         description: 'Free-tier queue operation budget used by clients to warn before Cloudflare queue usage exceeds the intended budget',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 0 && v <= 10_000_000,
+        ...intRange(0, 10_000_000),
     },
 ];

package/dist/platform/config/schema-domain-surfaces.d.ts

@@ -1,4 +1,4 @@
-import type { ConfigSettingDefinition } from './schema-shared.js';
+import { type ConfigSettingDefinition } from './schema-shared.js';
 export declare const surfaceConfigDefaults: {
     slack: {
         enabled: boolean;

package/dist/platform/config/schema-domain-surfaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-domain-surfaces.d.ts","sourceRoot":"","sources":["../../../src/platform/config/schema-domain-surfaces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8IjC,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,uBAAuB,EA8b1D,CAAC"}
+{"version":3,"file":"schema-domain-surfaces.d.ts","sourceRoot":"","sources":["../../../src/platform/config/schema-domain-surfaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,uBAAuB,EAAY,MAAM,oBAAoB,CAAC;AAE5E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8IjC,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,uBAAuB,EA8b1D,CAAC"}

package/dist/platform/config/schema-domain-surfaces.js

@@ -1,3 +1,4 @@
+import { intRange } from './schema-shared.js';
 export const surfaceConfigDefaults = {
     slack: {
         enabled: false,
@@ -261,7 +262,7 @@ export const surfaceConfigSettings = [
         type: 'number',
         default: 3,
         description: 'Default ntfy priority (1-5)',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1 && v <= 5,
+        ...intRange(1, 5),
     },
     {
         key: 'surfaces.webhook.enabled',
@@ -280,7 +281,7 @@ export const surfaceConfigSettings = [
         type: 'number',
         default: 10_000,
         description: 'Outbound webhook timeout in milliseconds',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1_000 && v <= 60_000,
+        ...intRange(1_000, 60_000),
     },
     {
         key: 'surfaces.webhook.secret',
@@ -341,7 +342,7 @@ export const surfaceConfigSettings = [
         type: 'number',
         default: 20 * 60_000,
         description: 'Idle TTL for Home Assistant remote conversation sessions before the daemon closes them',
-        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 60_000 && v <= 24 * 60 * 60_000,
+        ...intRange(60_000, 24 * 60 * 60_000),
     },
     {
         key: 'surfaces.telegram.enabled',

package/dist/platform/config/schema-shared.d.ts

@@ -13,4 +13,10 @@ export interface ConfigSettingDefinition {
      */
     validationHint?: string | undefined;
 }
+/** Returns validate + validationHint for an integer in [min, max]. */
+export declare function intRange(min: number, max: number): Pick<ConfigSettingDefinition, 'validate' | 'validationHint'>;
+/** Returns validate + validationHint for a float in [min, max]. */
+export declare function numRange(min: number, max: number): Pick<ConfigSettingDefinition, 'validate' | 'validationHint'>;
+/** Returns validate + validationHint for a TCP port (integer in [1, 65535]). */
+export declare function port(): Pick<ConfigSettingDefinition, 'validate' | 'validationHint'>;
 //# sourceMappingURL=schema-shared.d.ts.map

package/dist/platform/config/schema-shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-shared.d.ts","sourceRoot":"","sources":["../../../src/platform/config/schema-shared.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;IACrD;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC"}
+{"version":3,"file":"schema-shared.d.ts","sourceRoot":"","sources":["../../../src/platform/config/schema-shared.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;IACrD;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,sEAAsE;AACtE,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,IAAI,CAAC,uBAAuB,EAAE,UAAU,GAAG,gBAAgB,CAAC,CAK9D;AAED,mEAAmE;AACnE,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,IAAI,CAAC,uBAAuB,EAAE,UAAU,GAAG,gBAAgB,CAAC,CAK9D;AAED,gFAAgF;AAChF,wBAAgB,IAAI,IAAI,IAAI,CAAC,uBAAuB,EAAE,UAAU,GAAG,gBAAgB,CAAC,CAKnF"}

package/dist/platform/config/schema-shared.js

@@ -1,2 +1,22 @@
 /** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
-export {};
+/** Returns validate + validationHint for an integer in [min, max]. */
+export function intRange(min, max) {
+    return {
+        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= min && v <= max,
+        validationHint: `integer in [${min}, ${max}]`,
+    };
+}
+/** Returns validate + validationHint for a float in [min, max]. */
+export function numRange(min, max) {
+    return {
+        validate: (v) => typeof v === 'number' && v >= min && v <= max,
+        validationHint: `number in [${min}, ${max}]`,
+    };
+}
+/** Returns validate + validationHint for a TCP port (integer in [1, 65535]). */
+export function port() {
+    return {
+        validate: (v) => typeof v === 'number' && Number.isInteger(v) && v >= 1 && v <= 65535,
+        validationHint: 'integer port in [1, 65535]',
+    };
+}

package/dist/platform/control-plane/approval-broker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-broker.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/approval-broker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC5H,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAG7D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3G,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;IACrG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACtD;AAED,UAAU,2BAA4B,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnE,QAAQ,CAAC,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;AACjE,KAAK,iBAAiB,GAAG;IACvB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACpD,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,0BAA0B,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC;CAC5F,CAAC;AAwIF,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+C;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2C;IACrE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAG5B;IACL,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,MAAM,CAAS;gBAGrB,OAAO,EAAE;QACP,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAAC;QAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACzC;IASH,SAAS,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,IAAI;IAOjD,YAAY,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI;IAIjD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAU5B,aAAa,CAAC,KAAK,SAAM,GAAG,oBAAoB,EAAE;IAIlD,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI;IAItD,eAAe,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA4DrF,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,SAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmB3H,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACpC,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmCjC,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;KACzD,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmBjC,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,SAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;YA4BpH,cAAc;YAwBd,OAAO;IAMrB,OAAO,CAAC,OAAO;CA8BhB"}
+{"version":3,"file":"approval-broker.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/approval-broker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC5H,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAI7D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3G,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;IACrG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACtD;AAED,UAAU,2BAA4B,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnE,QAAQ,CAAC,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;AACjE,KAAK,iBAAiB,GAAG;IACvB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACpD,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,0BAA0B,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC;CAC5F,CAAC;AAqIF,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+C;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2C;IACrE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAG5B;IACL,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,MAAM,CAAS;gBAGrB,OAAO,EAAE;QACP,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAAC;QAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACzC;IASH,SAAS,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,IAAI;IAOjD,YAAY,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI;IAIjD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAU5B,aAAa,CAAC,KAAK,SAAM,GAAG,oBAAoB,EAAE;IAIlD,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI;IAItD,eAAe,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA4DrF,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,SAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmB3H,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACpC,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmCjC,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;KACzD,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmBjC,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,SAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;YA4BpH,cAAc;YAwBd,OAAO;IAMrB,OAAO,CAAC,OAAO;CA8BhB"}

package/dist/platform/control-plane/approval-broker.js

@@ -1,6 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { PersistentStore } from '../state/persistent-store.js';
 import { logger } from '../utils/logger.js';
+import { isRecord } from '../utils/record-coerce.js';
 function sortApprovals(records) {
     return [...records].sort((a, b) => b.updatedAt - a.updatedAt || a.id.localeCompare(b.id));
 }
@@ -16,9 +17,6 @@ const APPROVAL_AUDIT_ACTIONS = new Set([
 ]);
 const PERMISSION_CATEGORIES = new Set(['read', 'write', 'execute', 'delegate']);
 const PERMISSION_RISK_LEVELS = new Set(['low', 'medium', 'high', 'critical']);
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
 function isFiniteNumber(value) {
     return typeof value === 'number' && Number.isFinite(value);
 }

package/dist/platform/control-plane/method-catalog-calendar.d.ts

@@ -0,0 +1,9 @@
+import type { GatewayMethodDescriptor } from './method-catalog-shared.js';
+/**
+ * Calendar operator methods — CalDAV-backed event read/write and iCalendar
+ * import/export through the standard operator method protocol. Daemon-backed;
+ * the SDK publishes the typed contract surface (no internal handler). Local .ics
+ * parsing is handled agent-side and does not depend on these contracts.
+ */
+export declare const builtinGatewayCalendarMethodDescriptors: readonly GatewayMethodDescriptor[];
+//# sourceMappingURL=method-catalog-calendar.d.ts.map

package/dist/platform/control-plane/method-catalog-calendar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"method-catalog-calendar.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/method-catalog-calendar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAiC1E;;;;;GAKG;AACH,eAAO,MAAM,uCAAuC,EAAE,SAAS,uBAAuB,EAyFrF,CAAC"}

package/dist/platform/control-plane/method-catalog-calendar.js

@@ -0,0 +1,117 @@
+import { STRING_SCHEMA, NUMBER_SCHEMA, arraySchema, objectSchema, listOutputSchema, bodyEnvelopeSchema, methodDescriptor, } from './method-catalog-shared.js';
+const CALENDAR_EVENT_SUMMARY_SCHEMA = objectSchema({
+    id: STRING_SCHEMA,
+    title: STRING_SCHEMA,
+    start: STRING_SCHEMA,
+    end: STRING_SCHEMA,
+    location: STRING_SCHEMA,
+    description: STRING_SCHEMA,
+    attendees: arraySchema(STRING_SCHEMA),
+}, ['id', 'title', 'start', 'end']);
+const CALENDAR_EVENT_DETAIL_SCHEMA = objectSchema({
+    id: STRING_SCHEMA,
+    uid: STRING_SCHEMA,
+    title: STRING_SCHEMA,
+    start: STRING_SCHEMA,
+    end: STRING_SCHEMA,
+    location: STRING_SCHEMA,
+    description: STRING_SCHEMA,
+    attendees: arraySchema(STRING_SCHEMA),
+    recurrence: STRING_SCHEMA,
+}, ['id', 'title', 'start', 'end']);
+/**
+ * Calendar operator methods — CalDAV-backed event read/write and iCalendar
+ * import/export through the standard operator method protocol. Daemon-backed;
+ * the SDK publishes the typed contract surface (no internal handler). Local .ics
+ * parsing is handled agent-side and does not depend on these contracts.
+ */
+export const builtinGatewayCalendarMethodDescriptors = [
+    methodDescriptor({
+        id: 'calendar.events.list',
+        title: 'List Calendar Events',
+        description: 'Return calendar event summaries from the configured CalDAV calendar within an optional time window.',
+        category: 'calendar',
+        scopes: ['read:calendar'],
+        http: { method: 'GET', path: '/api/calendar/events' },
+        inputSchema: objectSchema({
+            calendarId: STRING_SCHEMA,
+            from: STRING_SCHEMA,
+            to: STRING_SCHEMA,
+            limit: NUMBER_SCHEMA,
+        }),
+        outputSchema: listOutputSchema('events', CALENDAR_EVENT_SUMMARY_SCHEMA),
+    }),
+    methodDescriptor({
+        id: 'calendar.events.get',
+        title: 'Get Calendar Event',
+        description: 'Return the full event object including attendees, recurrence, and raw iCalendar UID.',
+        category: 'calendar',
+        scopes: ['read:calendar'],
+        http: { method: 'GET', path: '/api/calendar/events/{eventId}' },
+        inputSchema: objectSchema({
+            eventId: STRING_SCHEMA,
+            calendarId: STRING_SCHEMA,
+        }, ['eventId']),
+        outputSchema: CALENDAR_EVENT_DETAIL_SCHEMA,
+    }),
+    methodDescriptor({
+        id: 'calendar.events.create',
+        title: 'Create Calendar Event',
+        description: 'Create an event on the configured CalDAV calendar. Requires explicit confirmation.',
+        category: 'calendar',
+        scopes: ['write:calendar'],
+        access: 'admin',
+        http: { method: 'POST', path: '/api/calendar/events' },
+        inputSchema: bodyEnvelopeSchema({
+            title: STRING_SCHEMA,
+            start: STRING_SCHEMA,
+            end: STRING_SCHEMA,
+            description: STRING_SCHEMA,
+            attendees: arraySchema(STRING_SCHEMA),
+            location: STRING_SCHEMA,
+            calendarId: STRING_SCHEMA,
+            confirm: { type: 'boolean' },
+        }, ['title', 'start', 'end', 'confirm']),
+        outputSchema: objectSchema({
+            eventId: STRING_SCHEMA,
+            uid: STRING_SCHEMA,
+            createdAt: STRING_SCHEMA,
+        }, ['eventId', 'uid', 'createdAt']),
+    }),
+    methodDescriptor({
+        id: 'calendar.ics.import',
+        title: 'Import iCalendar',
+        description: 'Import raw .ics content into the configured CalDAV calendar. Requires explicit confirmation.',
+        category: 'calendar',
+        scopes: ['write:calendar'],
+        access: 'admin',
+        http: { method: 'POST', path: '/api/calendar/ics/import' },
+        inputSchema: bodyEnvelopeSchema({
+            icsContent: STRING_SCHEMA,
+            calendarId: STRING_SCHEMA,
+            confirm: { type: 'boolean' },
+        }, ['icsContent', 'confirm']),
+        outputSchema: objectSchema({
+            imported: NUMBER_SCHEMA,
+            eventIds: arraySchema(STRING_SCHEMA),
+            errors: arraySchema(STRING_SCHEMA),
+        }, ['imported', 'eventIds', 'errors']),
+    }),
+    methodDescriptor({
+        id: 'calendar.ics.export',
+        title: 'Export iCalendar',
+        description: 'Export events from the configured CalDAV calendar as raw .ics content within an optional time window.',
+        category: 'calendar',
+        scopes: ['read:calendar'],
+        http: { method: 'GET', path: '/api/calendar/ics/export' },
+        inputSchema: objectSchema({
+            calendarId: STRING_SCHEMA,
+            from: STRING_SCHEMA,
+            to: STRING_SCHEMA,
+        }),
+        outputSchema: objectSchema({
+            icsContent: STRING_SCHEMA,
+            eventCount: NUMBER_SCHEMA,
+        }, ['icsContent', 'eventCount']),
+    }),
+];

package/dist/platform/control-plane/method-catalog-channels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"method-catalog-channels.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/method-catalog-channels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAmC1E,eAAO,MAAM,sCAAsC,EAAE,SAAS,uBAAuB,EA6hBpF,CAAC"}
+{"version":3,"file":"method-catalog-channels.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/method-catalog-channels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAuF1E,eAAO,MAAM,sCAAsC,EAAE,SAAS,uBAAuB,EAkqBpF,CAAC"}