@pellux/goodvibes-sdk 0.37.2 → 1.0.0

package/dist/platform/companion/companion-chat-routes.js

@@ -7,7 +7,8 @@
  *   POST   /api/companion/chat/sessions
  *   GET    /api/companion/chat/sessions/:sessionId
  *   PATCH  /api/companion/chat/sessions/:sessionId
- *   DELETE /api/companion/chat/sessions/:sessionId
+ *   POST   /api/companion/chat/sessions/:sessionId/close   (soft close — history preserved)
+ *   DELETE /api/companion/chat/sessions/:sessionId         (hard delete — record permanently removed)
  *   POST   /api/companion/chat/sessions/:sessionId/messages
  *   GET    /api/companion/chat/sessions/:sessionId/messages
  *   GET    /api/companion/chat/sessions/:sessionId/events  (SSE)
@@ -16,6 +17,7 @@
  * caller — DaemonHttpRouter.handleRequest already validates auth before
  * dispatching to API routes).
  */
+import { SDKErrorCodes } from '@pellux/goodvibes-errors';
 // ---------------------------------------------------------------------------
 // Route dispatch — called from DaemonHttpRouter.dispatchApiRoutes
 // ---------------------------------------------------------------------------
@@ -47,6 +49,10 @@ export async function dispatchCompanionChatRoutes(req, context) {
     if (!sub && req.method === 'PATCH') {
         return handleUpdateSession(req, sessionId, context);
     }
+    // POST /api/companion/chat/sessions/:sessionId/close
+    if (sub === 'close' && req.method === 'POST') {
+        return handleCloseSession(sessionId, context);
+    }
     // DELETE /api/companion/chat/sessions/:sessionId
     if (!sub && req.method === 'DELETE') {
         return handleDeleteSession(sessionId, context);
@@ -95,6 +101,10 @@ async function handleCreateSession(req, context) {
         return Response.json({ error: 'No provider or model configured. Set a current model before creating a companion chat session.', code: 'NO_MODEL_CONFIGURED' }, { status: 400 });
     }
     const session = context.chatManager.createSession(input);
+    // Drain the best-effort broker mirror before responding so /api/sessions
+    // reflects this session synchronously, matching CompanionBrokerSync's
+    // documented contract (see companion-chat-broker-sync.ts).
+    await context.chatManager.flushBrokerSync();
     return Response.json({ sessionId: session.id, createdAt: session.createdAt, session }, { status: 201 });
 }
 // ---------------------------------------------------------------------------
@@ -192,6 +202,9 @@ async function handleUpdateSession(req, sessionId, context) {
     }
     try {
         const session = context.chatManager.updateSession(sessionId, input);
+        // Drain the best-effort broker mirror before responding — an update
+        // heartbeats the shared record (see CompanionBrokerSync.registerSession).
+        await context.chatManager.flushBrokerSync();
         return Response.json({ session });
     }
     catch (err) {
@@ -201,15 +214,35 @@ async function handleUpdateSession(req, sessionId, context) {
     }
 }
 // ---------------------------------------------------------------------------
-// DELETE /api/companion/chat/sessions/:sessionId
+// POST /api/companion/chat/sessions/:sessionId/close
 // ---------------------------------------------------------------------------
-async function handleDeleteSession(sessionId, context) {
+async function handleCloseSession(sessionId, context) {
     const session = context.chatManager.closeSession(sessionId);
     if (!session) {
         return Response.json({ error: 'Session not found', code: 'SESSION_NOT_FOUND' }, { status: 404 });
     }
+    // Drain the best-effort broker mirror before responding so /api/sessions
+    // reflects the close synchronously (matches CompanionBrokerSync's docs).
+    await context.chatManager.flushBrokerSync();
     return Response.json({ sessionId: session.id, status: session.status });
 }
+// ---------------------------------------------------------------------------
+// DELETE /api/companion/chat/sessions/:sessionId  (W5-S1: a real hard delete)
+// ---------------------------------------------------------------------------
+async function handleDeleteSession(sessionId, context) {
+    try {
+        const result = await context.chatManager.deleteSession(sessionId);
+        // Drain the best-effort broker mirror before responding so /api/sessions
+        // no longer shows the session by the time this response returns.
+        await context.chatManager.flushBrokerSync();
+        return Response.json(result);
+    }
+    catch (err) {
+        const e = err;
+        const status = e.status ?? 500;
+        return Response.json({ error: e.message ?? 'Internal error', code: e.code ?? 'INTERNAL_ERROR' }, { status });
+    }
+}
 /**
  * Read the message content from an incoming POST body.
  * Returns empty string when neither field is present — the caller must
@@ -325,7 +358,7 @@ async function handleGetEvents(req, sessionId, context) {
         return Response.json({ error: 'Session not found', code: 'SESSION_NOT_FOUND' }, { status: 404 });
     }
     if (session.status === 'closed') {
-        return Response.json({ error: 'Session is closed', code: 'SESSION_CLOSED' }, { status: 410 });
+        return Response.json({ error: 'Session is closed', code: SDKErrorCodes.SESSION_CLOSED }, { status: 410 });
     }
     // Delegate to the caller-provided SSE stream opener which wires up the
     // gateway live-client registration and returns an SSE Response.

package/dist/platform/config/credential-status.d.ts

@@ -0,0 +1,28 @@
+/**
+ * credential-status.ts
+ *
+ * Promotes the internal SecretsManager to a secret-FREE status source for the
+ * daemon's `credentials.get` wire method (W6-C1 / E7 config sharing).
+ *
+ * The returned provider reports whether each credential in the shared store is
+ * configured and usable — it NEVER exposes the plaintext value. `usable` is a
+ * real in-process resolution attempt (env → store → secret-ref), reported only
+ * as a boolean, so a configured-but-unresolvable reference (e.g. a broken
+ * `op://` ref) is honestly `configured: true, usable: false`.
+ *
+ * Enumeration is over STORED keys only (SecretsManager.listDetailed filtered to
+ * non-env sources) — never a `process.env` dump — so it cannot leak the names of
+ * unrelated environment variables. A caller-named single-key probe (`get`) may
+ * consult env for that one named key only.
+ */
+import type { CredentialStatusProviderLike } from '@pellux/goodvibes-daemon-sdk';
+import type { SecretsManager } from './secrets.js';
+/** The SecretsManager surface this adapter needs (keeps callers free to inject a stub). */
+type SecretsMetadataSource = Pick<SecretsManager, 'get' | 'list' | 'listDetailed'>;
+/**
+ * Wrap a SecretsManager (the daemon's shared store) as a secret-free credential
+ * status provider suitable for the `credentials.get` route context.
+ */
+export declare function createCredentialStatusProvider(secrets: SecretsMetadataSource): CredentialStatusProviderLike;
+export {};
+//# sourceMappingURL=credential-status.d.ts.map

package/dist/platform/config/credential-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-status.d.ts","sourceRoot":"","sources":["../../../src/platform/config/credential-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EACV,4BAA4B,EAE7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,2FAA2F;AAC3F,KAAK,qBAAqB,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,MAAM,GAAG,cAAc,CAAC,CAAC;AAWnF;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,qBAAqB,GAC7B,4BAA4B,CA6C9B"}

package/dist/platform/config/credential-status.js

@@ -0,0 +1,75 @@
+/**
+ * credential-status.ts
+ *
+ * Promotes the internal SecretsManager to a secret-FREE status source for the
+ * daemon's `credentials.get` wire method (W6-C1 / E7 config sharing).
+ *
+ * The returned provider reports whether each credential in the shared store is
+ * configured and usable — it NEVER exposes the plaintext value. `usable` is a
+ * real in-process resolution attempt (env → store → secret-ref), reported only
+ * as a boolean, so a configured-but-unresolvable reference (e.g. a broken
+ * `op://` ref) is honestly `configured: true, usable: false`.
+ *
+ * Enumeration is over STORED keys only (SecretsManager.listDetailed filtered to
+ * non-env sources) — never a `process.env` dump — so it cannot leak the names of
+ * unrelated environment variables. A caller-named single-key probe (`get`) may
+ * consult env for that one named key only.
+ */
+async function resolveUsable(secrets, key) {
+    try {
+        const value = await secrets.get(key);
+        return value !== null && value.length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Wrap a SecretsManager (the daemon's shared store) as a secret-free credential
+ * status provider suitable for the `credentials.get` route context.
+ */
+export function createCredentialStatusProvider(secrets) {
+    return {
+        async list() {
+            const detailed = await secrets.listDetailed();
+            // STORED keys only — filter out the bulk env enumeration so we never leak
+            // the names of unrelated environment variables over the wire.
+            const stored = detailed.filter((record) => record.source !== 'env');
+            const records = [];
+            for (const record of stored) {
+                records.push({
+                    key: record.key,
+                    configured: true,
+                    usable: await resolveUsable(secrets, record.key),
+                    source: record.source,
+                    scope: record.scope,
+                    secure: record.secure,
+                    overriddenByEnv: record.overriddenByEnv,
+                    ...(record.refSource ? { refSource: record.refSource } : {}),
+                });
+            }
+            return records;
+        },
+        async get(key) {
+            const detailed = await secrets.listDetailed();
+            // A named probe MAY consult env for this one caller-named key. Prefer a
+            // stored record; fall back to an env-backed record for the same name.
+            const match = detailed.find((record) => record.key === key && record.source !== 'env') ??
+                detailed.find((record) => record.key === key) ??
+                null;
+            if (!match) {
+                return { key, configured: false, usable: false, source: 'none', scope: 'none', secure: false, overriddenByEnv: false };
+            }
+            return {
+                key: match.key,
+                configured: true,
+                usable: await resolveUsable(secrets, key),
+                source: match.source,
+                scope: match.scope,
+                secure: match.secure,
+                overriddenByEnv: match.overriddenByEnv,
+                ...(match.refSource ? { refSource: match.refSource } : {}),
+            };
+        },
+    };
+}

package/dist/platform/config/index.d.ts

@@ -11,12 +11,36 @@ export type { GoodVibesConfig, ConfigKey, ConfigValue, ConfigSetting, Permission
 export { DEFAULT_CONFIG, CONFIG_KEYS, CONFIG_SCHEMA, isValidConfigKey } from './schema.js';
 export type { PersistedFlagState } from './schema-types.js';
 export { ConfigError } from '../types/errors.js';
+export { migrateDangerDaemonAlias } from './migrations.js';
+export type { DangerDaemonMigrationResult } from './migrations.js';
 import { ConfigManager } from './manager.js';
 import type { GoodVibesConfig } from './schema.js';
 export declare function getConfigSnapshot(configManager: Pick<ConfigManager, 'getRaw'>): Readonly<GoodVibesConfig>;
 export declare function getConfiguredModelId(configManager: Pick<ConfigManager, 'get'>): string;
 export declare function getConfiguredEmbeddingProviderId(configManager: Pick<ConfigManager, 'get'>): string;
 export declare function isAutoApproveEnabled(configManager: Pick<ConfigManager, 'get'>): boolean;
+/**
+ * Minimal reader shape for {@link resolveDaemonEnabled}. Any object exposing a
+ * `get(key)` that returns the relevant config value satisfies it, so both
+ * the full {@link ConfigManager} and the narrow `HostServicesConfig` used by
+ * bootstrap-services qualify without a circular import.
+ */
+export interface DaemonEnabledReader {
+    get(key: 'daemon.enabled'): boolean | string | number | undefined;
+}
+/**
+ * Resolve whether the local session daemon should run.
+ *
+ * `daemon.enabled` governs (default `true` — daemon on by default,
+ * loopback-bound). The deprecated `danger.daemon` alias that used to
+ * override this was removed in Wave 6 (its explicit-`false` off-switch is
+ * preserved for existing users by a one-time config migration onto
+ * `daemon.enabled`, applied at {@link ConfigManager.load} — see migrations.ts).
+ *
+ * This lives in the shared SDK config module (not TUI-local) so the standalone
+ * daemon CLI and the TUI's adopt-or-start path resolve the flag identically.
+ */
+export declare function resolveDaemonEnabled(config: DaemonEnabledReader): boolean;
 export declare function getWorkingDirectory(configManager: Pick<ConfigManager, 'getWorkingDirectory'>): string | null;
 export declare function getConfiguredSystemPrompt(configManager: Pick<ConfigManager, 'get'>): string | undefined;
 export { getConfiguredApiKeys, resolveApiKeys } from './api-keys.js';
@@ -27,6 +51,7 @@ export type { HelperChatOptions, HelperModelDeps, HelperTask, HelperUsage, Resol
 export { beginOpenAICodexLogin, exchangeOpenAICodexCode, refreshOpenAICodexToken, OPENAI_CODEX_AUTHORIZE_URL, OPENAI_CODEX_CLIENT_ID, OPENAI_CODEX_REDIRECT_URI, OPENAI_CODEX_TOKEN_URL, } from './openai-codex-auth.js';
 export type { OpenAICodexLoginStart, OpenAICodexTokenResult } from './openai-codex-auth.js';
 export * from './secret-refs.js';
+export { createCredentialStatusProvider } from './credential-status.js';
 export { SecretsManager } from './secrets.js';
 export type { SecretDeleteOptions, SecretRecord, SecretScope, SecretSource, SecretStorageMedium, SecretStorageMode, SecretStorageReview, SecretWriteOptions, SecretsManagerOptions, } from './secrets.js';
 export { ServiceRegistry } from './service-registry.js';

package/dist/platform/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/platform/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACxK,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC3F,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,CAEzG;AAED,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,MAAM,CAEtF;AAED,wBAAgB,gCAAgC,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,MAAM,CAElG;AAED,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,OAAO,CAEvF;AAED,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,GAAG,MAAM,GAAG,IAAI,CAE5G;AAED,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,MAAM,GAAG,SAAS,CAIvG;AAED,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,YAAY,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3F,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,WAAW,EACX,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAC5F,cAAc,kBAAkB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EACV,mBAAmB,EACnB,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,mBAAmB,uBAAuB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACjF,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,WAAW,GACZ,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/platform/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACxK,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC3F,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,YAAY,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAGnE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,CAEzG;AAED,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,MAAM,CAEtF;AAED,wBAAgB,gCAAgC,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,MAAM,CAElG;AAED,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,OAAO,CAEvF;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAGzE;AAED,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,GAAG,MAAM,GAAG,IAAI,CAE5G;AAED,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,MAAM,GAAG,SAAS,CAIvG;AAED,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,YAAY,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3F,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,WAAW,EACX,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAC5F,cAAc,kBAAkB,CAAC;AACjC,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EACV,mBAAmB,EACnB,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,mBAAmB,uBAAuB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACjF,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,WAAW,GACZ,MAAM,eAAe,CAAC"}

package/dist/platform/config/index.js

@@ -8,6 +8,7 @@
 export { ConfigManager } from './manager.js';
 export { DEFAULT_CONFIG, CONFIG_KEYS, CONFIG_SCHEMA, isValidConfigKey } from './schema.js';
 export { ConfigError } from '../types/errors.js';
+export { migrateDangerDaemonAlias } from './migrations.js';
 import { readFileSync } from 'fs';
 import { ConfigManager } from './manager.js';
 export function getConfigSnapshot(configManager) {
@@ -22,6 +23,22 @@ export function getConfiguredEmbeddingProviderId(configManager) {
 export function isAutoApproveEnabled(configManager) {
     return configManager.get('behavior.autoApprove');
 }
+/**
+ * Resolve whether the local session daemon should run.
+ *
+ * `daemon.enabled` governs (default `true` — daemon on by default,
+ * loopback-bound). The deprecated `danger.daemon` alias that used to
+ * override this was removed in Wave 6 (its explicit-`false` off-switch is
+ * preserved for existing users by a one-time config migration onto
+ * `daemon.enabled`, applied at {@link ConfigManager.load} — see migrations.ts).
+ *
+ * This lives in the shared SDK config module (not TUI-local) so the standalone
+ * daemon CLI and the TUI's adopt-or-start path resolve the flag identically.
+ */
+export function resolveDaemonEnabled(config) {
+    const enabled = config.get('daemon.enabled');
+    return typeof enabled === 'boolean' ? enabled : true;
+}
 export function getWorkingDirectory(configManager) {
     return configManager.getWorkingDirectory();
 }
@@ -36,6 +53,7 @@ export { createOAuthLocalListener } from './oauth-local-listener.js';
 export { HelperModel, HelperModelUnavailableError, HelperRouter } from './helper-model.js';
 export { beginOpenAICodexLogin, exchangeOpenAICodexCode, refreshOpenAICodexToken, OPENAI_CODEX_AUTHORIZE_URL, OPENAI_CODEX_CLIENT_ID, OPENAI_CODEX_REDIRECT_URI, OPENAI_CODEX_TOKEN_URL, } from './openai-codex-auth.js';
 export * from './secret-refs.js';
+export { createCredentialStatusProvider } from './credential-status.js';
 export { SecretsManager } from './secrets.js';
 export { ServiceRegistry } from './service-registry.js';
 export { SubscriptionManager } from './subscriptions.js';

package/dist/platform/config/manager.d.ts

@@ -95,6 +95,15 @@ export declare class ConfigManager {
     saveProject(): void;
     /** Load config from disk: global then project (project wins). Deep-merges with defaults. */
     load(): void;
+    /**
+     * Removal-of-`danger.daemon` migration (Wave 6): rewrite an explicit legacy
+     * `danger.daemon = false` onto `daemon.enabled = false` before the raw JSON
+     * is merged with defaults, so the removed alias's two-year off-switch is
+     * honored rather than silently flipped on. Reports honestly via the logger
+     * when it actually rewrites a value; a no-op migration (alias absent, or
+     * `= true`) stays silent. See migrations.ts for the full contract.
+     */
+    private applyDangerDaemonMigration;
     /**
      * Merge a partial patch into a config category and auto-save.
      *
@@ -103,6 +112,15 @@ export declare class ConfigManager {
      * The patch is shallow-merged into the existing category value.
      */
     mergeCategory<C extends keyof GoodVibesConfig>(category: C, patch: Partial<GoodVibesConfig[C]>): void;
+    /**
+     * Remove a key from an object-shaped category and auto-save.
+     *
+     * mergeCategory can only set keys (undefined patch values are skipped, and
+     * getCategory returns a clone, so delete-then-merge is a silent no-op) —
+     * clearing an override, e.g. a feature-flag entry back to its default,
+     * requires this explicit removal.
+     */
+    removeCategoryKey<C extends keyof GoodVibesConfig>(category: C, key: string): void;
     /**
      * Reset a specific key to its default, or reset all config.
      * Saves to disk after reset.

package/dist/platform/config/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/platform/config/manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAI1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAOxD,wFAAwF;AACxF,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI;IAC5B,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CACzE,CAAC;AAEF,yEAAyE;AACzE,UAAU,kBAAkB;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,MAAM,eAAe,GAAG,kBAAkB,GAAG,CAC/C;IACA,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC,GACC;IACA,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC,CACF,CAAC;AASF,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC;AAED,0DAA0D;AAC1D,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,SAAS,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AAErH,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC;AA0C3C;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAgB;IAClD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,cAAc,CAA6C;IACnE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsE;gBAErF,SAAS,EAAE,eAAe;IAyCtC,wBAAwB,IAAI,MAAM;IAIlC,mBAAmB,IAAI,MAAM,GAAG,IAAI;IAIpC,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIjC;;;;OAIG;IACH,aAAa,IAAI,MAAM;IAIvB;;;OAGG;IACH,oBAAoB,IAAI,MAAM,GAAG,SAAS;IAI1C,oBAAoB,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI;IAI/E,OAAO,CAAC,WAAW;IAwBnB,0CAA0C;IAC1C,GAAG,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;IAKhD,gEAAgE;IAChE,GAAG,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,GAAE,gBAAqB,GAAG,IAAI;IA6B7F;;;OAGG;IACH,SAAS,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,iBAAiB;IAatF,sDAAsD;IACtD,OAAO,CAAC,eAAe;IAevB;;OAEG;IACH,OAAO,CAAC,cAAc;IA0BtB;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,gBAAqB,GAAG,IAAI;IAIhF,wFAAwF;IACxF,MAAM,IAAI,YAAY,CAAC,eAAe,CAAC;IAIvC,0DAA0D;IAC1D,WAAW,CAAC,CAAC,SAAS,MAAM,eAAe,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAIvF,+FAA+F;IAC/F,MAAM,IAAI,QAAQ,CAAC,eAAe,CAAC;IAInC,8BAA8B;IAC9B,SAAS,IAAI,aAAa,EAAE;IAI5B,0DAA0D;IAC1D,IAAI,IAAI,IAAI;IAKZ,yEAAyE;IACzE,WAAW,IAAI,IAAI;IAQnB,4FAA4F;IAC5F,IAAI,IAAI,IAAI;IAyBZ;;;;;;OAMG;IACH,aAAa,CAAC,CAAC,SAAS,MAAM,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAWrG;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,GAAG,IAAI;CAY7B"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/platform/config/manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAI1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAQxD,wFAAwF;AACxF,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI;IAC5B,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CACzE,CAAC;AAEF,yEAAyE;AACzE,UAAU,kBAAkB;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,MAAM,eAAe,GAAG,kBAAkB,GAAG,CAC/C;IACA,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC,GACC;IACA,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC,CACF,CAAC;AASF,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC;AAED,0DAA0D;AAC1D,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,SAAS,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AAErH,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC;AA0C3C;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAgB;IAClD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,cAAc,CAA6C;IACnE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsE;gBAErF,SAAS,EAAE,eAAe;IAyCtC,wBAAwB,IAAI,MAAM;IAIlC,mBAAmB,IAAI,MAAM,GAAG,IAAI;IAIpC,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIjC;;;;OAIG;IACH,aAAa,IAAI,MAAM;IAIvB;;;OAGG;IACH,oBAAoB,IAAI,MAAM,GAAG,SAAS;IAI1C,oBAAoB,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI;IAI/E,OAAO,CAAC,WAAW;IAwBnB,0CAA0C;IAC1C,GAAG,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;IAKhD,gEAAgE;IAChE,GAAG,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,GAAE,gBAAqB,GAAG,IAAI;IA6B7F;;;OAGG;IACH,SAAS,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,iBAAiB;IAatF,sDAAsD;IACtD,OAAO,CAAC,eAAe;IAevB;;OAEG;IACH,OAAO,CAAC,cAAc;IA0BtB;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,gBAAqB,GAAG,IAAI;IAIhF,wFAAwF;IACxF,MAAM,IAAI,YAAY,CAAC,eAAe,CAAC;IAIvC,0DAA0D;IAC1D,WAAW,CAAC,CAAC,SAAS,MAAM,eAAe,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAIvF,+FAA+F;IAC/F,MAAM,IAAI,QAAQ,CAAC,eAAe,CAAC;IAInC,8BAA8B;IAC9B,SAAS,IAAI,aAAa,EAAE;IAI5B,0DAA0D;IAC1D,IAAI,IAAI,IAAI;IAKZ,yEAAyE;IACzE,WAAW,IAAI,IAAI;IAQnB,4FAA4F;IAC5F,IAAI,IAAI,IAAI;IA2BZ;;;;;;;OAOG;IACH,OAAO,CAAC,0BAA0B;IAWlC;;;;;;OAMG;IACH,aAAa,CAAC,CAAC,SAAS,MAAM,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAWrG;;;;;;;OAOG;IACH,iBAAiB,CAAC,CAAC,SAAS,MAAM,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAOlF;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,GAAG,IAAI;CAY7B"}

package/dist/platform/config/manager.js

@@ -7,6 +7,7 @@ import { getManagedSettingLock } from '../runtime/settings/control-plane.js';
 import { requireSurfaceRoot, resolveSurfaceDirectory, resolveSurfaceSharedFile } from '../runtime/surface-root.js';
 import { summarizeError } from '../utils/error-display.js';
 import { toRecord } from '../utils/record-coerce.js';
+import { migrateDangerDaemonAlias } from './migrations.js';
 const DEFAULT_CONFIG_SNAPSHOT = structuredClone(DEFAULT_CONFIG);
 const PERMISSION_TOOL_KEYS = new Set(Object.keys(DEFAULT_CONFIG.permissions.tools));
 function cloneDefaultConfig() {
@@ -279,7 +280,8 @@ export class ConfigManager {
             try {
                 const raw = readFileSync(this.configPath, 'utf-8');
                 const parsed = JSON.parse(raw);
-                this.config = sanitizeConfigShape(deepMerge(cloneDefaultConfig(), parsed));
+                const migrated = this.applyDangerDaemonMigration(parsed, this.configPath);
+                this.config = sanitizeConfigShape(deepMerge(cloneDefaultConfig(), migrated));
             }
             catch (err) {
                 throw new ConfigError(`Global config load failed for ${this.configPath}: ${summarizeError(err)}`);
@@ -290,13 +292,30 @@ export class ConfigManager {
             try {
                 const raw = readFileSync(this.projectConfigPath, 'utf-8');
                 const parsed = JSON.parse(raw);
-                this.config = sanitizeConfigShape(deepMerge(this.config, parsed));
+                const migrated = this.applyDangerDaemonMigration(parsed, this.projectConfigPath);
+                this.config = sanitizeConfigShape(deepMerge(this.config, migrated));
             }
             catch (err) {
                 throw new ConfigError(`Project config load failed for ${this.projectConfigPath}: ${summarizeError(err)}`);
             }
         }
     }
+    /**
+     * Removal-of-`danger.daemon` migration (Wave 6): rewrite an explicit legacy
+     * `danger.daemon = false` onto `daemon.enabled = false` before the raw JSON
+     * is merged with defaults, so the removed alias's two-year off-switch is
+     * honored rather than silently flipped on. Reports honestly via the logger
+     * when it actually rewrites a value; a no-op migration (alias absent, or
+     * `= true`) stays silent. See migrations.ts for the full contract.
+     */
+    applyDangerDaemonMigration(parsed, sourcePath) {
+        const result = migrateDangerDaemonAlias(parsed);
+        if (result.rewroteDaemonEnabledFalse) {
+            logger.info(`Migrated deprecated 'danger.daemon: false' to 'daemon.enabled: false' (${sourcePath}). ` +
+                `The legacy off-switch is preserved; 'danger.daemon' is no longer read.`);
+        }
+        return result.config;
+    }
     /**
      * Merge a partial patch into a config category and auto-save.
      *
@@ -314,6 +333,21 @@ export class ConfigManager {
         }
         this.save();
     }
+    /**
+     * Remove a key from an object-shaped category and auto-save.
+     *
+     * mergeCategory can only set keys (undefined patch values are skipped, and
+     * getCategory returns a clone, so delete-then-merge is a silent no-op) —
+     * clearing an override, e.g. a feature-flag entry back to its default,
+     * requires this explicit removal.
+     */
+    removeCategoryKey(category, key) {
+        const current = this.config[category];
+        if (!(key in current))
+            return;
+        delete current[key];
+        this.save();
+    }
     /**
      * Reset a specific key to its default, or reset all config.
      * Saves to disk after reset.

package/dist/platform/config/migrations.d.ts

@@ -0,0 +1,48 @@
+/**
+ * One-shot config migrations applied to raw on-disk JSON before it is
+ * deep-merged with defaults in {@link ConfigManager.load}.
+ *
+ * Wave 6 removes the deprecated `danger.daemon` alias from the schema
+ * (see docs/decisions/2026-07-05-daemon-by-default.md). Once the key leaves
+ * `CONFIG_SCHEMA`/`ConfigKey`, a stray `danger.daemon` value in an existing
+ * settings.json would otherwise be silently ignored by the deep-merge (the
+ * default config's `danger` object no longer declares a `daemon` field to
+ * merge onto) — which would flip a user's explicit two-year off-switch
+ * (`danger.daemon = false`) back to daemon-ON the moment they upgrade. This
+ * migration closes that hazard by rewriting the explicit choice onto
+ * `daemon.enabled` BEFORE the merge, so the alias is honored exactly once
+ * and then retired.
+ */
+export interface DangerDaemonMigrationResult {
+    /** True if the raw config carried a `danger.daemon` key that this migration touched. */
+    readonly migrated: boolean;
+    /** The (possibly rewritten) raw config, safe to deep-merge with defaults. */
+    readonly config: Record<string, unknown>;
+    /**
+     * Present only when an explicit `danger.daemon = false` was rewritten onto
+     * `daemon.enabled = false` — the one case that changes resolved behavior.
+     * Callers can use this to report the migration honestly (e.g. a log line).
+     */
+    readonly rewroteDaemonEnabledFalse: boolean;
+}
+/**
+ * Migrate a raw parsed settings object: `danger.daemon` (a deprecated alias
+ * for `daemon.enabled`, removal scheduled Wave 6) is removed, and if it was
+ * explicitly `false`, that choice is preserved onto `daemon.enabled = false`.
+ *
+ * Precedence mirrors the alias it replaces (see the removed
+ * `resolveDaemonEnabled` alias branch): an explicit `danger.daemon` value
+ * always wins over whatever `daemon.enabled` currently holds in the same
+ * file, because the alias historically took precedence.
+ *
+ * Idempotent: config that has already been migrated (or never had the alias)
+ * comes back unchanged — `migrated: false`, same reference.
+ *
+ * - `danger.daemon === false` -> `daemon.enabled = false` (rewritten), alias removed.
+ * - `danger.daemon === true`  -> alias removed, no rewrite (daemon.enabled
+ *   already defaults `true`; nothing to preserve).
+ * - non-boolean junk under the key -> alias removed, no rewrite.
+ * - absent / not an object -> unchanged.
+ */
+export declare function migrateDangerDaemonAlias(parsed: Record<string, unknown>): DangerDaemonMigrationResult;
+//# sourceMappingURL=migrations.d.ts.map

package/dist/platform/config/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../src/platform/config/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,MAAM,WAAW,2BAA2B;IAC1C,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,EAAE,OAAO,CAAC;CAC7C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,2BAA2B,CAmBrG"}

package/dist/platform/config/migrations.js

@@ -0,0 +1,54 @@
+/**
+ * One-shot config migrations applied to raw on-disk JSON before it is
+ * deep-merged with defaults in {@link ConfigManager.load}.
+ *
+ * Wave 6 removes the deprecated `danger.daemon` alias from the schema
+ * (see docs/decisions/2026-07-05-daemon-by-default.md). Once the key leaves
+ * `CONFIG_SCHEMA`/`ConfigKey`, a stray `danger.daemon` value in an existing
+ * settings.json would otherwise be silently ignored by the deep-merge (the
+ * default config's `danger` object no longer declares a `daemon` field to
+ * merge onto) — which would flip a user's explicit two-year off-switch
+ * (`danger.daemon = false`) back to daemon-ON the moment they upgrade. This
+ * migration closes that hazard by rewriting the explicit choice onto
+ * `daemon.enabled` BEFORE the merge, so the alias is honored exactly once
+ * and then retired.
+ */
+function isPlainObject(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+/**
+ * Migrate a raw parsed settings object: `danger.daemon` (a deprecated alias
+ * for `daemon.enabled`, removal scheduled Wave 6) is removed, and if it was
+ * explicitly `false`, that choice is preserved onto `daemon.enabled = false`.
+ *
+ * Precedence mirrors the alias it replaces (see the removed
+ * `resolveDaemonEnabled` alias branch): an explicit `danger.daemon` value
+ * always wins over whatever `daemon.enabled` currently holds in the same
+ * file, because the alias historically took precedence.
+ *
+ * Idempotent: config that has already been migrated (or never had the alias)
+ * comes back unchanged — `migrated: false`, same reference.
+ *
+ * - `danger.daemon === false` -> `daemon.enabled = false` (rewritten), alias removed.
+ * - `danger.daemon === true`  -> alias removed, no rewrite (daemon.enabled
+ *   already defaults `true`; nothing to preserve).
+ * - non-boolean junk under the key -> alias removed, no rewrite.
+ * - absent / not an object -> unchanged.
+ */
+export function migrateDangerDaemonAlias(parsed) {
+    const danger = parsed['danger'];
+    if (!isPlainObject(danger) || !('daemon' in danger)) {
+        return { migrated: false, config: parsed, rewroteDaemonEnabledFalse: false };
+    }
+    const alias = danger['daemon'];
+    const { daemon: _removedAlias, ...restDanger } = danger;
+    const nextConfig = { ...parsed, danger: restDanger };
+    if (alias === false) {
+        const existingDaemon = isPlainObject(parsed['daemon']) ? parsed['daemon'] : {};
+        nextConfig['daemon'] = { ...existingDaemon, enabled: false };
+        return { migrated: true, config: nextConfig, rewroteDaemonEnabledFalse: true };
+    }
+    // alias === true, or non-boolean junk: nothing to preserve — daemon.enabled
+    // already defaults true, and a non-boolean value was never a valid override.
+    return { migrated: true, config: nextConfig, rewroteDaemonEnabledFalse: false };
+}

package/dist/platform/config/schema-domain-core.d.ts

@@ -57,6 +57,12 @@ export declare const coreConfigDefaults: {
         maxActiveAgents: number;
         maxDepth: number;
     };
+    planner: {
+        decomposition: string;
+        maxTurns: number;
+        tokenCeiling: number;
+        wallTimeoutMs: number;
+    };
     sandbox: {
         replIsolation: string;
         mcpIsolation: string;
@@ -88,8 +94,11 @@ export declare const coreConfigDefaults: {
     release: {
         channel: string;
     };
+    daemon: {
+        enabled: boolean;
+        embedInProcess: boolean;
+    };
     danger: {
-        daemon: boolean;
         httpListener: boolean;
     };
     tools: {

package/dist/platform/config/schema-domain-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-domain-core.d.ts","sourceRoot":"","sources":["../../../src/platform/config/schema-domain-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,uBAAuB,EAA4B,MAAM,oBAAoB,CAAC;AAE5F,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkI9B,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,uBAAuB,EA8Z3D,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,uBAAuB,EA2J3D,CAAC"}
+{"version":3,"file":"schema-domain-core.d.ts","sourceRoot":"","sources":["../../../src/platform/config/schema-domain-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,uBAAuB,EAA4B,MAAM,oBAAoB,CAAC;AAE5F,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2I9B,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,uBAAuB,EA0b3D,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,uBAAuB,EAmK3D,CAAC"}

package/dist/platform/config/schema-domain-core.js

@@ -57,6 +57,12 @@ export const coreConfigDefaults = {
         maxActiveAgents: 8,
         maxDepth: 0,
     },
+    planner: {
+        decomposition: 'agent',
+        maxTurns: 6,
+        tokenCeiling: 120_000,
+        wallTimeoutMs: 120_000, // 60s starved reasoning models that think silently before emitting (live replay: planner hit the wall at Turn 3 and fell back)
+    },
     sandbox: {
         replIsolation: 'shared-vm',
         mcpIsolation: 'disabled',
@@ -88,8 +94,11 @@ export const coreConfigDefaults = {
     release: {
         channel: 'stable',
     },
+    daemon: {
+        enabled: true,
+        embedInProcess: false,
+    },
     danger: {
-        daemon: false,
         httpListener: false,
     },
     tools: {
@@ -396,6 +405,34 @@ export const coreHeadConfigSettings = [
         description: 'Maximum recursive orchestration depth: 0=disabled, higher values allow deeper bounded recursion',
         ...numRange(0, 5),
     },
+    {
+        key: 'planner.decomposition',
+        type: 'enum',
+        default: 'agent',
+        description: "How /workstream decomposes a goal into work items: 'agent' spawns a read-only planning agent (with automatic fallback to the heuristic path on any failure); 'heuristic' forces the deterministic single-item path and never spawns an agent",
+        enumValues: ['agent', 'heuristic'],
+    },
+    {
+        key: 'planner.maxTurns',
+        type: 'number',
+        default: 6,
+        description: 'Maximum turns the planning-decomposition agent may take before it is stopped and the heuristic path is used',
+        ...numRange(1, 20),
+    },
+    {
+        key: 'planner.tokenCeiling',
+        type: 'number',
+        default: 120_000,
+        description: 'Total token budget for the planning-decomposition agent; exceeding it stops the agent and falls back to the heuristic path',
+        ...numRange(1_000, 2_000_000),
+    },
+    {
+        key: 'planner.wallTimeoutMs',
+        type: 'number',
+        default: 120_000,
+        description: 'Wall-clock timeout (ms) for the planning-decomposition agent; exceeding it cancels the agent and falls back to the heuristic path',
+        ...numRange(1_000, 600_000),
+    },
     {
         key: 'sandbox.replIsolation',
         type: 'enum',
@@ -548,10 +585,16 @@ export const coreHeadConfigSettings = [
 ];
 export const coreTailConfigSettings = [
     {
-        key: 'danger.daemon',
+        key: 'daemon.enabled',
+        type: 'boolean',
+        default: true,
+        description: 'Run the local session daemon (background service that hosts the shared session broker and companion chat). Default on; binds loopback (127.0.0.1) only. Set false to run fully local with no background service.',
+    },
+    {
+        key: 'daemon.embedInProcess',
         type: 'boolean',
         default: false,
-        description: 'Enable daemon mode (runs goodvibes-sdk as a background service)',
+        description: 'NOT RECOMMENDED. When true, and no daemon is already running, host the daemon INSIDE this surface process instead of spawning it as a detached background process. In-process embedding couples the daemon lifetime to this one surface: exiting the surface kills the daemon and every other surface sharing it (single point of failure). Default false — the surface spawns a detached, reboot-independent daemon (install it as a system service via POST /api/service/install on the daemon HTTP API).',
     },
     {
         key: 'danger.httpListener',