@pellux/goodvibes-sdk 0.37.2 → 1.0.0

package/dist/platform/core/plan-proposal.js

@@ -0,0 +1,296 @@
+/**
+ * Plan proposal types + pure assembler.
+ *
+ * This module turns a loose decomposition (produced by an LLM planning agent,
+ * or handed in directly by a caller) into a validated, typed `PlanProposal`.
+ * It is intentionally free of I/O and LLM calls: no filesystem access, no
+ * agent spawning, no network. It exists so `AdaptivePlanner` can stay a
+ * synchronous, deterministic, side-effect-free scorer while still producing
+ * a rich, structured artifact that an orchestration engine can render for
+ * human approval and (once approved) instantiate.
+ *
+ * A `PlanProposal` is DATA. It is never instantiated on its own — approval
+ * flows through the existing `ProjectPlanningState.executionApproved` gate
+ * (see `planProposalToPlanningState` below), and durable persistence reuses
+ * `ExecutionPlanManager` (see `planProposalToExecutionPlanItems` below).
+ * Neither adapter performs any I/O itself; they only shape data for callers
+ * that do.
+ */
+import { randomUUID } from 'node:crypto';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function normalizeKey(value) {
+    return value.toLowerCase().trim();
+}
+/**
+ * Detect dependency cycles in a resolved work-item graph without ever
+ * looping forever: each id is visited at most once per traversal state
+ * (`visiting` blocks re-entry into an in-progress path; `done` short-circuits
+ * repeat visits from other roots).
+ */
+function detectCycleTitles(workItems) {
+    const byId = new Map(workItems.map((item) => [item.id, item]));
+    const state = new Map();
+    const cyclic = new Set();
+    const visit = (id, stack) => {
+        const current = state.get(id);
+        if (current === 'done')
+            return;
+        if (current === 'visiting') {
+            const cycleStart = stack.indexOf(id);
+            const cycle = cycleStart === -1 ? stack : stack.slice(cycleStart);
+            for (const cycleId of cycle)
+                cyclic.add(cycleId);
+            return;
+        }
+        state.set(id, 'visiting');
+        const item = byId.get(id);
+        if (item) {
+            for (const dep of item.dependsOn) {
+                visit(dep, [...stack, id]);
+            }
+        }
+        state.set(id, 'done');
+    };
+    for (const item of workItems)
+        visit(item.id, []);
+    return workItems.filter((item) => cyclic.has(item.id)).map((item) => item.title);
+}
+// ---------------------------------------------------------------------------
+// Assembler
+// ---------------------------------------------------------------------------
+/**
+ * Turn a raw decomposition into a validated, typed `PlanProposal`.
+ *
+ * Never throws. Malformed input degrades to an honest partial result: an
+ * unresolved phase reference lands its work item in a synthesized "Unphased"
+ * bucket; an unresolved dependency reference is dropped; a dependency cycle
+ * is flagged but left in place (no silent edge removal). Every problem is
+ * reported via the returned `issues` list rather than an exception.
+ *
+ * Dependency resolution mirrors `ExecutionPlanManager.replaceItems` exactly:
+ * a dep that already looks like a UUID passes through unchecked, otherwise
+ * it is resolved by case-insensitive title match, otherwise it is dropped.
+ *
+ * `source` defaults to `'planner-agent'` (the expected majority caller —
+ * `AdaptivePlanner.proposeWorkstream`). Pass `'caller-supplied'` when a
+ * non-agent caller hands in its own decomposition directly.
+ */
+export function assemblePlanProposal(task, strategy, raw, source = 'planner-agent') {
+    const issues = [];
+    // Pass 1: assign phase ids + stable order, index by normalized title.
+    const phaseByTitle = new Map();
+    const phases = raw.phases.map((rawPhase, index) => {
+        const phase = {
+            id: randomUUID(),
+            title: rawPhase.title,
+            order: index,
+            ...(rawPhase.description ? { description: rawPhase.description } : {}),
+        };
+        phaseByTitle.set(normalizeKey(rawPhase.title), phase);
+        return phase;
+    });
+    let unphased = null;
+    const resolvePhaseId = (title) => {
+        const found = phaseByTitle.get(normalizeKey(title));
+        if (found)
+            return { id: found.id, matched: true };
+        if (!unphased) {
+            unphased = { id: randomUUID(), title: 'Unphased', order: phases.length };
+            phases.push(unphased);
+        }
+        return { id: unphased.id, matched: false };
+    };
+    // Pass 2: assign work-item ids, index by normalized title (for dep resolution).
+    const idByTitle = new Map();
+    const provisional = raw.workItems.map((rawItem) => {
+        const id = randomUUID();
+        idByTitle.set(normalizeKey(rawItem.title), id);
+        return { id, rawItem };
+    });
+    const workItems = provisional.map(({ id, rawItem }) => {
+        const { id: phaseId, matched } = resolvePhaseId(rawItem.phase);
+        if (!matched) {
+            issues.push({
+                kind: 'unresolved-phase',
+                workItemTitle: rawItem.title,
+                message: `Work item "${rawItem.title}" referenced unknown phase "${rawItem.phase}"; placed in "Unphased".`,
+            });
+        }
+        return {
+            id,
+            title: rawItem.title,
+            brief: rawItem.brief,
+            phaseId,
+            dependsOn: [],
+            ...(rawItem.suggestedArchetype ? { suggestedArchetype: rawItem.suggestedArchetype } : {}),
+            ...(rawItem.likelyFiles ? { likelyFiles: rawItem.likelyFiles } : {}),
+            ...(rawItem.verification ? { verification: rawItem.verification } : {}),
+            ...(rawItem.canRunConcurrently !== undefined ? { canRunConcurrently: rawItem.canRunConcurrently } : {}),
+            ...(rawItem.needsReview !== undefined ? { needsReview: rawItem.needsReview } : {}),
+        };
+    });
+    // Pass 3: resolve dependsOn — UUID passthrough, else case-insensitive title lookup, else drop.
+    for (let i = 0; i < workItems.length; i++) {
+        const rawDeps = raw.workItems[i]?.dependsOn;
+        if (!rawDeps || rawDeps.length === 0)
+            continue;
+        const item = workItems[i];
+        const resolved = [];
+        for (const dep of rawDeps) {
+            if (UUID_RE.test(dep)) {
+                resolved.push(dep);
+                continue;
+            }
+            const depId = idByTitle.get(normalizeKey(dep));
+            if (depId) {
+                resolved.push(depId);
+            }
+            else {
+                issues.push({
+                    kind: 'dangling-dependency',
+                    workItemTitle: item.title,
+                    message: `Work item "${item.title}" depends on unresolved item "${dep}"; dependency dropped.`,
+                });
+            }
+        }
+        item.dependsOn = resolved;
+    }
+    // Pass 4: flag (do not silently fix) dependency cycles.
+    for (const title of detectCycleTitles(workItems)) {
+        issues.push({
+            kind: 'dependency-cycle',
+            workItemTitle: title,
+            message: `Work item "${title}" is part of a dependency cycle.`,
+        });
+    }
+    const proposal = {
+        id: randomUUID(),
+        task,
+        strategy,
+        rationale: `Decomposed "${task}" into ${phases.length} phase(s) and ${workItems.length} work item(s) for ${strategy} execution.`,
+        phases,
+        workItems,
+        createdAt: Date.now(),
+        source,
+    };
+    return { proposal, issues };
+}
+/**
+ * The honest fallback: one phase ("Execute"), one work item whose title and
+ * brief both equal the task text, no dependencies. Used whenever decomposition
+ * was not warranted (see `AdaptivePlanner.shouldDecompose`) or no raw
+ * decomposition is available yet.
+ */
+export function singleItemProposal(task) {
+    const phaseId = randomUUID();
+    return {
+        id: randomUUID(),
+        task,
+        strategy: 'single',
+        rationale: `No decomposition applied; running "${task}" as a single work item.`,
+        phases: [{ id: phaseId, title: 'Execute', order: 0 }],
+        workItems: [{
+                id: randomUUID(),
+                title: task,
+                brief: task,
+                phaseId,
+                dependsOn: [],
+            }],
+        createdAt: Date.now(),
+        source: 'single-item-fallback',
+    };
+}
+// ---------------------------------------------------------------------------
+// Approval-seam adapter: PlanProposal -> ProjectPlanningState
+// ---------------------------------------------------------------------------
+/**
+ * Project a `PlanProposal` into the existing `/plan approve` seam. This is
+ * data-only — no store is written here. The caller feeds the result into
+ * `ProjectPlanningService.upsertState` (or an equivalent), which is what
+ * actually persists it and evaluates readiness.
+ *
+ * Direction convention for the emitted `ProjectPlanningDependency` records
+ * (this type has no prior producer in the codebase to inherit a convention
+ * from, so it is fixed here): `fromTaskId` depends on `toTaskId`, i.e. the
+ * edge reads "fromTaskId depends on toTaskId" the same way `WorkItem.dependsOn`
+ * reads "this item depends on these ids".
+ *
+ * `ProjectPlanningTask` has no first-class phase concept, so phase
+ * membership is preserved in `metadata` rather than dropped silently.
+ *
+ * `executionApproved` is always `false` here — approval is a separate,
+ * explicit step owned by `/plan approve` (planning-runtime.ts), never implied
+ * by proposing.
+ */
+export function planProposalToPlanningState(proposal) {
+    const phaseTitleById = new Map(proposal.phases.map((phase) => [phase.id, phase.title]));
+    const tasks = proposal.workItems.map((item) => ({
+        id: item.id,
+        title: item.title,
+        why: item.brief,
+        status: 'pending',
+        ...(item.dependsOn.length > 0 ? { dependencies: item.dependsOn } : {}),
+        ...(item.likelyFiles ? { likelyFiles: item.likelyFiles } : {}),
+        ...(item.verification ? { verification: item.verification } : {}),
+        ...(item.canRunConcurrently !== undefined ? { canRunConcurrently: item.canRunConcurrently } : {}),
+        ...(item.needsReview !== undefined ? { needsReview: item.needsReview } : {}),
+        ...(item.suggestedArchetype ? { recommendedAgent: item.suggestedArchetype } : {}),
+        metadata: {
+            phaseId: item.phaseId,
+            ...(phaseTitleById.has(item.phaseId) ? { phaseTitle: phaseTitleById.get(item.phaseId) } : {}),
+        },
+    }));
+    const dependencies = proposal.workItems.flatMap((item) => item.dependsOn.map((toTaskId) => ({ fromTaskId: item.id, toTaskId })));
+    const scope = proposal.phases.length > 0
+        ? `Phases: ${proposal.phases.map((phase) => phase.title).join(', ')}`
+        : undefined;
+    return {
+        goal: proposal.task,
+        ...(scope ? { scope } : {}),
+        ...(proposal.rationale ? { assumptions: [proposal.rationale] } : {}),
+        tasks,
+        dependencies,
+        executionApproved: false,
+    };
+}
+// ---------------------------------------------------------------------------
+// Persistence adapter: PlanProposal -> ExecutionPlanManager's PlanItem shape
+// ---------------------------------------------------------------------------
+/**
+ * Project a `PlanProposal` into the plain items `ExecutionPlanManager` deals
+ * in. This is a deliberately lossy projection: `PlanItem` has no room for
+ * verification/likelyFiles/suggestedArchetype, and those stay in the
+ * full-fidelity `ProjectPlanningState` render above. It exists purely so a
+ * caller can hand a proposal's items to `ExecutionPlanManager` without
+ * re-deriving the phase/description/dependency shape by hand.
+ *
+ * Dependencies are expressed as WORK ITEM TITLES, not ids, because
+ * `ExecutionPlanManager.create()` does not resolve dependency references —
+ * only `ExecutionPlanManager.replaceItems()` does, by case-insensitive
+ * description match. The intended call sequence at instantiation is
+ * therefore:
+ *
+ *   const plan = planManager.create(title, []);
+ *   const { items } = planProposalToExecutionPlanItems(proposal);
+ *   planManager.replaceItems(plan.id, items);
+ *
+ * which reuses `replaceItems`' existing dependency resolver end-to-end
+ * instead of re-implementing dependency resolution here. This module defines
+ * no scheduler of its own — ready-to-run item selection stays
+ * `ExecutionPlanManager.getNextItems`'s job.
+ */
+export function planProposalToExecutionPlanItems(proposal) {
+    const phaseTitleById = new Map(proposal.phases.map((phase) => [phase.id, phase.title]));
+    const titleById = new Map(proposal.workItems.map((item) => [item.id, item.title]));
+    const items = proposal.workItems.map((item) => ({
+        phase: phaseTitleById.get(item.phaseId) ?? 'Unphased',
+        description: item.title,
+        ...(item.dependsOn.length > 0
+            ? { dependencies: item.dependsOn.map((depId) => titleById.get(depId) ?? depId) }
+            : {}),
+    }));
+    return { title: proposal.task, items };
+}

package/dist/platform/core/wrfc-routing.d.ts

@@ -1,5 +1,6 @@
 import type { ToolResult } from '../types/tools.js';
 export declare function isWrfcWorkflowRequest(text: string): boolean;
+export declare function userProhibitsDelegation(text: string): boolean;
 export declare function buildWrfcWorkflowRoutingPrompt(text: string): string | null;
 export declare function toolResultIndicatesAuthoritativeWrfcChain(result: ToolResult): boolean;
 //# sourceMappingURL=wrfc-routing.d.ts.map

package/dist/platform/core/wrfc-routing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrfc-routing.d.ts","sourceRoot":"","sources":["../../../src/platform/core/wrfc-routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAM3D;AAED,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG1E;AAsBD,wBAAgB,yCAAyC,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAQrF"}
+{"version":3,"file":"wrfc-routing.d.ts","sourceRoot":"","sources":["../../../src/platform/core/wrfc-routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAM3D;AAqCD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI7D;AAED,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAa1E;AAsBD,wBAAgB,yCAAyC,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAQrF"}

package/dist/platform/core/wrfc-routing.js

@@ -8,10 +8,60 @@ export function isWrfcWorkflowRequest(text) {
     return /\bwrfc\b.{0,80}\b(review|agent|build|make|implement|fix|test|verify|for)\b/.test(normalized)
         || /\b(review|agent|build|make|implement|fix|test|verify)\b.{0,80}\bwrfc\b/.test(normalized);
 }
+/**
+ * High-precision detector for an EXPLICIT user instruction not to delegate on this turn — do not
+ * spawn agents, do not start a WRFC/owner chain, or do the work directly/yourself. When true, the
+ * routing directive is suppressed entirely: the harness must never inject a "start a WRFC chain"
+ * nudge against a user who explicitly forbade it.
+ *
+ * Deliberately conservative. Every pattern pairs an explicit negation (do not / don't / never /
+ * no / without) with a delegation concept (spawn / agent(s) / delegate / wrfc / chain), or pairs a
+ * direct-action verb with "yourself"/"directly". A plain "build X with WRFC" request contains no
+ * such negation and is NOT treated as a prohibition. Precision over recall on purpose: a rare false
+ * positive only drops an advisory suggestion (the safe direction — never coerce), whereas a false
+ * negative would re-introduce the exact coercion this fixes.
+ *
+ * The documented pattern set:
+ *   - "do not / don't / never spawn"                          → forbids spawning
+ *   - "no agents" / "without agents" / "no sub-agents"         → forbids agents
+ *   - "no delegation" / "do not / don't / never delegate"      → forbids delegation
+ *   - "do not / don't / never start a wrfc|chain" / "no wrfc"  → forbids starting a chain
+ *   - "do not / don't / never use the agent tool|agents"       → forbids the agent tool
+ *   - "do|handle|implement|write|answer … yourself|directly"   → asks for direct, non-delegated work
+ */
+const DELEGATION_PROHIBITION_PATTERNS = [
+    /\b(?:do not|don't|never) spawn\b/,
+    /\bno (?:sub-?)?agents?\b/,
+    /\bwithout (?:spawning )?(?:sub-?)?agents?\b/,
+    /\bno delegation\b/,
+    /\b(?:do not|don't|never) delegate\b/,
+    /\b(?:do not|don't|never) start (?:a |an )?(?:new )?wrfc\b/,
+    /\bno wrfc (?:chain|owner)\b/,
+    /\b(?:do not|don't|never) start (?:a |an )?(?:new )?chain\b/,
+    /\b(?:do not|don't|never) use (?:the )?agents?\b/,
+    /\b(?:do not|don't|never) use the agent tool\b/,
+    /\b(?:do|handle|implement|write|answer)(?: it| this)?(?: the \w+)? (?:yourself|directly)\b/,
+];
+export function userProhibitsDelegation(text) {
+    // Normalize curly apostrophes and whitespace so "don't"/"don’t"/"do  not" all match one pattern.
+    const normalized = text.toLowerCase().replace(/[‘’]/g, "'").replace(/\s+/g, ' ');
+    return DELEGATION_PROHIBITION_PATTERNS.some((pattern) => pattern.test(normalized));
+}
 export function buildWrfcWorkflowRoutingPrompt(text) {
     if (!isWrfcWorkflowRequest(text))
         return null;
-    return '[WRFC routing] The user is asking for WRFC-owned work. Use the agent tool to start exactly one WRFC owner chain with mode=spawn, template=engineer, reviewMode=wrfc. Do not answer by describing WRFC, and do not spawn reviewer/tester/verifier roots.';
+    // The user's explicit intent for THIS turn wins over routing: if they forbade delegation, inject
+    // nothing at all rather than nudging them toward a chain they told us not to start.
+    if (userProhibitsDelegation(text))
+        return null;
+    // Advisory, not imperative: suggest the pipeline and, if chosen, how to enter it, while asserting
+    // that the user's explicit instructions always win. mode=spawn/template/reviewMode are retained
+    // as the how-to for when the model does choose the pipeline.
+    return '[WRFC routing] This looks like work the WRFC pipeline handles well. If you choose to use it, '
+        + 'start exactly one WRFC owner chain via the agent tool (mode=spawn, template=engineer, reviewMode=wrfc) '
+        + 'rather than spawning reviewer/tester/verifier roots directly. This is a suggestion, not a command — '
+        + "the user's explicit instructions always win; if they asked you to do the work yourself or not to "
+        + 'delegate, do that instead.';
 }
 function parseToolOutput(output) {
     if (!output)

package/dist/platform/daemon/boot.d.ts

@@ -0,0 +1,63 @@
+/**
+ * boot.ts
+ *
+ * A thin public factory that wraps the daemon construction graph in ONE call.
+ *
+ * `DaemonServer` already self-composes its full runtime graph
+ * (ConfigManager → RuntimeEventBus → runtime store → createRuntimeServices →
+ * gateway/brokers/router) from a `DaemonConfig`, and installs the network
+ * transport + folds legacy session stores during `start()`. This factory just
+ * threads the caller's overrides in, enables the daemon with the given token,
+ * starts it, and hands back a stop handle — composition, not new behavior.
+ *
+ * It exists so embedders and tests do not have to hand-mirror cli.ts's graph to
+ * stand up a real daemon (isolated home, ephemeral port, auth round-trip).
+ */
+import type { ApprovalBroker } from '../control-plane/index.js';
+import { DaemonServer } from './facade.js';
+export interface BootDaemonOptions {
+    /** Injected home directory — the daemon stays entirely inside it. */
+    readonly homeDirectory: string;
+    /** Working directory (project root) the daemon operates against. */
+    readonly workingDir: string;
+    /** TCP port to bind. Default 0 → an OS-assigned ephemeral port. */
+    readonly port?: number | undefined;
+    /** Host/interface to bind. Default resolved from config (127.0.0.1). */
+    readonly host?: string | undefined;
+    /** Bearer token required by every route. Omit for session-based auth. */
+    readonly token?: string | undefined;
+    /** Daemon home dir (identity state). Defaults to the runtime resolution. */
+    readonly daemonHomeDir?: string | undefined;
+    /** Optional preconfigured ConfigManager; otherwise one is built from the dirs. */
+    readonly configManager?: import('../config/manager.js').ConfigManager | undefined;
+    /** Optional custom serve factory (tests inject Bun.serve stand-ins). */
+    readonly serveFactory?: typeof Bun.serve | undefined;
+}
+export interface BootedDaemon {
+    /** The running daemon server. */
+    readonly server: DaemonServer;
+    /**
+     * The daemon's shared approval broker (same instance the HTTP approvals routes
+     * resolve through). Lets a proof test seed a pending approval and then exercise
+     * approve/deny — including per-hunk selection — over the live wire.
+     */
+    readonly approvals: ApprovalBroker;
+    /** The bound host. */
+    readonly host: string;
+    /** The bound TCP port (resolves an ephemeral 0 to the real port). */
+    readonly port: number;
+    /** Base URL for the daemon's HTTP surface. */
+    readonly url: string;
+    /** Stop the daemon and release the port. Idempotent. */
+    stop(): Promise<void>;
+}
+/**
+ * Boot a fully-composed daemon in one call and return a stop handle.
+ *
+ * @example
+ *   const daemon = await bootDaemon({ homeDirectory, workingDir, port: 0, token });
+ *   // ... hit `${daemon.url}/api/...` with `Authorization: Bearer ${token}`
+ *   await daemon.stop();
+ */
+export declare function bootDaemon(options: BootDaemonOptions): Promise<BootedDaemon>;
+//# sourceMappingURL=boot.d.ts.map

package/dist/platform/daemon/boot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../../../src/platform/daemon/boot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,kFAAkF;IAClF,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,sBAAsB,EAAE,aAAa,GAAG,SAAS,CAAC;IAClF,wEAAwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,GAAG,CAAC,KAAK,GAAG,SAAS,CAAC;CACtD;AAED,MAAM,WAAW,YAAY;IAC3B,iCAAiC;IACjC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,sBAAsB;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAqClF"}

package/dist/platform/daemon/boot.js

@@ -0,0 +1,60 @@
+/**
+ * boot.ts
+ *
+ * A thin public factory that wraps the daemon construction graph in ONE call.
+ *
+ * `DaemonServer` already self-composes its full runtime graph
+ * (ConfigManager → RuntimeEventBus → runtime store → createRuntimeServices →
+ * gateway/brokers/router) from a `DaemonConfig`, and installs the network
+ * transport + folds legacy session stores during `start()`. This factory just
+ * threads the caller's overrides in, enables the daemon with the given token,
+ * starts it, and hands back a stop handle — composition, not new behavior.
+ *
+ * It exists so embedders and tests do not have to hand-mirror cli.ts's graph to
+ * stand up a real daemon (isolated home, ephemeral port, auth round-trip).
+ */
+import { ConfigManager } from '../config/manager.js';
+import { DaemonServer } from './facade.js';
+/**
+ * Boot a fully-composed daemon in one call and return a stop handle.
+ *
+ * @example
+ *   const daemon = await bootDaemon({ homeDirectory, workingDir, port: 0, token });
+ *   // ... hit `${daemon.url}/api/...` with `Authorization: Bearer ${token}`
+ *   await daemon.stop();
+ */
+export async function bootDaemon(options) {
+    // Build a ConfigManager rooted at the injected dirs when the caller did not
+    // supply one — this is what makes the graph self-compose from just the dirs.
+    const configManager = options.configManager ?? new ConfigManager({
+        workingDir: options.workingDir,
+        homeDir: options.homeDirectory,
+        surfaceRoot: 'goodvibes',
+    });
+    const server = new DaemonServer({
+        port: options.port ?? 0,
+        ...(options.host !== undefined ? { host: options.host } : {}),
+        workingDir: options.workingDir,
+        homeDirectory: options.homeDirectory,
+        ...(options.daemonHomeDir !== undefined ? { daemonHomeDir: options.daemonHomeDir } : {}),
+        configManager,
+        ...(options.serveFactory !== undefined ? { serveFactory: options.serveFactory } : {}),
+    });
+    server.enable({ daemon: true }, options.token);
+    await server.start();
+    const host = server.boundHost;
+    const port = server.boundPort;
+    return {
+        server,
+        approvals: server.approvals,
+        host,
+        port,
+        url: `http://${host}:${port}`,
+        // Best-effort teardown, mirroring cli.ts's `Promise.allSettled` stance: a
+        // subsystem that refuses to stop (e.g. a feature-gated watcher) must not
+        // leave the caller unable to shut the daemon down.
+        stop: async () => {
+            await Promise.resolve(server.stop()).catch(() => { });
+        },
+    };
+}

package/dist/platform/daemon/cli.js

@@ -1,5 +1,6 @@
 import { homedir } from 'node:os';
 import { ConfigManager } from '../config/manager.js';
+import { resolveDaemonEnabled } from '../config/index.js';
 import { RuntimeEventBus } from '../runtime/events/index.js';
 import { createRuntimeStore } from '../runtime/store/index.js';
 import { createRuntimeServices } from '../runtime/services.js';
@@ -96,7 +97,7 @@ async function main() {
     process.on('SIGINT', () => void shutdown());
     process.on('SIGTERM', () => void shutdown());
     logger.info('goodvibes daemon host started', {
-        daemon: config.get('danger.daemon'),
+        daemon: resolveDaemonEnabled(config),
         httpListener: config.get('danger.httpListener'),
         workingDir,
         daemonHomeDir,

package/dist/platform/daemon/control-plane.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../../src/platform/daemon/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAOhE,OAAO,KAAK,EAAE,mBAAmB,EAAuB,MAAM,2BAA2B,CAAC;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAI5E,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,IAAI,CAAC;IAC3D,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,QAAQ,CAAC,UAAU,EACf,KAAK,GACL,KAAK,GACL,OAAO,GACP,SAAS,GACT,MAAM,GACN,SAAS,GACT,UAAU,GACV,aAAa,GACb,QAAQ,GACR,UAAU,GACV,WAAW,GACX,UAAU,GACV,SAAS,GACT,aAAa,GACb,YAAY,GACZ,QAAQ,GACR,QAAQ,CAAC;IACb,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,OAAO,CAAC;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACvE,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IACtF,QAAQ,CAAC,2BAA2B,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/G;AAED,UAAU,oBAAoB;IAC5B,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;CAC9D;AAED,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,yBAAyB;IAE/D,OAAO,CAAC,iBAAiB;IAIzB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM;IAItC,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO;IAOhC,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI;IAYhG,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI;IAYrC,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,4BAA4B,EAAE,mBAAmB,GAAG,QAAQ,CAAC;IAenI,8BAA8B,CAAC,KAAK,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI;IAuB5E,uBAAuB,CAAC,YAAY,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE;IAUjE,yBAAyB,CACvB,UAAU,EAAE,uBAAuB,EACnC,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;QAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;QAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KACtC,GACA;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,IAAI;IAsCtE,+BAA+B,CAC7B,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,oBAAoB,GAC3B,QAAQ,GAAG,UAAU,GAAG,IAAI;IAwC/B,+BAA+B,CAAC,EAAE,EAAE;QAClC,IAAI,EAAE,yBAAyB,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,GAAG,IAAI;IAeF,kCAAkC,CACtC,EAAE,EAAE;QACF,IAAI,EAAE,yBAAyB,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,EACD,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAClD,OAAO,CAAC,IAAI,CAAC;IA0IhB,gCAAgC,CAAC,EAAE,EAAE;QACnC,IAAI,EAAE,yBAAyB,CAAC;KACjC,GAAG,IAAI;IAKF,+BAA+B,CAAC,KAAK,EAAE;QAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACpC,QAAQ,CAAC,OAAO,CAAC,EAAE;YACjB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;YAC1F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;SACjD,CAAC;KACH,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAsCrD,uBAAuB,CAAC,KAAK,EAAE;QACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACpC,QAAQ,CAAC,OAAO,CAAC,EAAE;YACjB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;YAC1F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;YAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;SAC1C,CAAC;KACH,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;CAyD5D"}
+{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../../src/platform/daemon/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAOhE,OAAO,KAAK,EAAE,mBAAmB,EAAuB,MAAM,2BAA2B,CAAC;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAO5E,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,IAAI,CAAC;IAC3D,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,QAAQ,CAAC,UAAU,EACf,KAAK,GACL,KAAK,GACL,OAAO,GACP,SAAS,GACT,MAAM,GACN,SAAS,GACT,UAAU,GACV,aAAa,GACb,QAAQ,GACR,UAAU,GACV,WAAW,GACX,UAAU,GACV,SAAS,GACT,aAAa,GACb,YAAY,GACZ,QAAQ,GACR,QAAQ,CAAC;IACb,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,OAAO,CAAC;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACvE,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IACtF,QAAQ,CAAC,2BAA2B,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/G;AAED,UAAU,oBAAoB;IAC5B,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;CAC9D;AAED,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,yBAAyB;IAE/D,OAAO,CAAC,iBAAiB;IAIzB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM;IAItC,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO;IAOhC,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI;IAYhG,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI;IAYrC,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,4BAA4B,EAAE,mBAAmB,GAAG,QAAQ,CAAC;IAenI,8BAA8B,CAAC,KAAK,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI;IAuB5E,uBAAuB,CAAC,YAAY,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE;IAUjE,yBAAyB,CACvB,UAAU,EAAE,uBAAuB,EACnC,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;QAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;QAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KACtC,GACA;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,IAAI;IA2CtE,+BAA+B,CAC7B,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,oBAAoB,GAC3B,QAAQ,GAAG,UAAU,GAAG,IAAI;IAwC/B,+BAA+B,CAAC,EAAE,EAAE;QAClC,IAAI,EAAE,yBAAyB,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,GAAG,IAAI;IAeF,kCAAkC,CACtC,EAAE,EAAE;QACF,IAAI,EAAE,yBAAyB,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,EACD,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAClD,OAAO,CAAC,IAAI,CAAC;IA0IhB,gCAAgC,CAAC,EAAE,EAAE;QACnC,IAAI,EAAE,yBAAyB,CAAC;KACjC,GAAG,IAAI;IAKF,+BAA+B,CAAC,KAAK,EAAE;QAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACpC,QAAQ,CAAC,OAAO,CAAC,EAAE;YACjB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;YAC1F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;SACjD,CAAC;KACH,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IA8CrD,uBAAuB,CAAC,KAAK,EAAE;QACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACpC,QAAQ,CAAC,OAAO,CAAC,EAAE;YACjB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;YAC1F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;YAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;SAC1C,CAAC;KACH,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;CA0F5D"}

package/dist/platform/daemon/control-plane.js

@@ -3,6 +3,9 @@ import { isRuntimeEventDomain } from '../runtime/events/index.js';
 import { extractForwardedClientIp } from '../runtime/network/index.js';
 import { resolveGatewayPathTemplate } from './helpers.js';
 import { summarizeError } from '../utils/error-display.js';
+import { validateInvocationInput } from '../control-plane/invoke-input-validation.js';
+import { isGatewayVerbError } from '../control-plane/routes/gateway-verb-error.js';
+import { SDKErrorCodes } from '@pellux/goodvibes-errors';
 import { buildMissingScopeBody, resolveAuthenticatedPrincipal, } from './http-policy.js';
 export class DaemonControlPlaneHelper {
     context;
@@ -97,6 +100,11 @@ export class DaemonControlPlaneHelper {
                 ok: false,
                 body: {
                     error: `Gateway method is cataloged but not invokable through method dispatch: ${descriptor.id}`,
+                    // Machine-readable, following the SDKErrorCodes.SESSION_CLOSED precedent
+                    // (session-broker.ts) — consumers match on `code`, never on the message
+                    // string. See the `invokable` field's doc comment (method-catalog-shared.ts)
+                    // for what this status does and does not mean.
+                    code: SDKErrorCodes.NOT_INVOKABLE,
                 },
             };
         }
@@ -321,6 +329,14 @@ export class DaemonControlPlaneHelper {
             const denied = this.validateGatewayInvocation(matchedDescriptor, input.context);
             if (denied)
                 return denied;
+            // Same input gate for the method+path WS call path (no bypass of the HTTP
+            // methodId gate). Only POST/PATCH carry a validatable body here.
+            if (input.method === 'POST' || input.method === 'PATCH') {
+                const invalid = validateInvocationInput(matchedDescriptor, input.body);
+                if (invalid) {
+                    return { status: 400, ok: false, body: { error: invalid.detail, code: invalid.code } };
+                }
+            }
         }
         const url = new URL(`http://${this.context.host}:${this.context.port}${input.path.startsWith('/') ? input.path : `/${input.path}`}`);
         for (const [key, value] of Object.entries(input.query ?? {})) {
@@ -359,11 +375,33 @@ export class DaemonControlPlaneHelper {
     async invokeGatewayMethodCall(input) {
         const descriptor = this.context.gatewayMethods.get(input.methodId);
         if (!descriptor) {
-            return { status: 404, ok: false, body: { error: `Unknown gateway method: ${input.methodId}` } };
+            return {
+                status: 404,
+                ok: false,
+                body: {
+                    error: `Unknown gateway method: ${input.methodId}`,
+                    // Machine-readable, mirroring the NOT_INVOKABLE convention just below
+                    // (validateGatewayInvocation) — the uncataloged-id 404 gets its own code so
+                    // no consumer has to string-match "Unknown gateway method".
+                    code: SDKErrorCodes.METHOD_NOT_FOUND,
+                },
+            };
         }
         const denied = this.validateGatewayInvocation(descriptor, input.context);
         if (denied)
             return denied;
+        // Input validation gate: reject a wrong-typed / missing-required body against
+        // the verb's typed inputSchema before the handler runs (honest 400, not silent
+        // coercion). Only body-carrying invocations are checked — a handler method
+        // (no http binding) or a POST/PATCH verb receives its params in the body;
+        // GET/DELETE params arrive as query strings that cannot be soundly type-checked.
+        const carriesBody = !descriptor.http || descriptor.http.method === 'POST' || descriptor.http.method === 'PATCH';
+        if (carriesBody) {
+            const invalid = validateInvocationInput(descriptor, input.body);
+            if (invalid) {
+                return { status: 400, ok: false, body: { error: invalid.detail, code: invalid.code } };
+            }
+        }
         if (this.context.gatewayMethods.hasHandler(input.methodId)) {
             try {
                 const body = await this.context.gatewayMethods.invoke(input.methodId, {
@@ -381,6 +419,17 @@ export class DaemonControlPlaneHelper {
                 return { status: 200, ok: true, body };
             }
             catch (error) {
+                // A handler-registered verb (W3-S2: fleet.*, checkpoints.*,
+                // sessions.search) may throw a GatewayVerbError to report an honest
+                // caller-error status (400/404) instead of the blanket 500 below —
+                // see routes/gateway-verb-error.ts for why this seam is needed.
+                if (isGatewayVerbError(error)) {
+                    return {
+                        status: error.status,
+                        ok: false,
+                        body: { error: error.message, code: error.code },
+                    };
+                }
                 return {
                     status: 500,
                     ok: false,

package/dist/platform/daemon/facade-composition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"facade-composition.d.ts","sourceRoot":"","sources":["../../../src/platform/daemon/facade-composition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AA6BvD,OAAO,KAAK,EAAE,oBAAoB,EAA0B,MAAM,wCAAwC,CAAC;AAG3G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,KAAK,EAAE,YAAY,EAAuB,MAAM,YAAY,CAAC;AAKpE,YAAY,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,sCAAsC,GACvC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,sCAAsC,EACvC,MAAM,mBAAmB,CAAC;AAiD3B;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,8BAA8B,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,oBAAoB,CA8HvG;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,YAAY,GAAG,2BAA2B,CAkJ5F;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,sCAAsC,GAC9C,yBAAyB,CA4K3B;AAED,wBAAgB,kCAAkC,CAAC,OAAO,EAAE;IAC1D,QAAQ,CAAC,aAAa,EAAE,OAAO,2BAA2B,EAAE,mBAAmB,CAAC;IAChF,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,yBAAyB,EAAE,WAAW,GAAG,QAAQ,CAAC;IACzK,QAAQ,CAAC,4BAA4B,EAAE,CAAC,OAAO,EAAE,OAAO,yBAAyB,EAAE,sBAAsB,GAAG,SAAS,EAAE,KAAK,EAAE;QAC5H,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACzC,KAAK,IAAI,CAAC;CACZ,GAAG,IAAI,CAoBP"}
+{"version":3,"file":"facade-composition.d.ts","sourceRoot":"","sources":["../../../src/platform/daemon/facade-composition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AA6BvD,OAAO,KAAK,EAAE,oBAAoB,EAA0B,MAAM,wCAAwC,CAAC;AAG3G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,KAAK,EAAE,YAAY,EAAuB,MAAM,YAAY,CAAC;AAKpE,YAAY,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,sCAAsC,GACvC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,sCAAsC,EACvC,MAAM,mBAAmB,CAAC;AAiD3B;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,8BAA8B,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,oBAAoB,CA8HvG;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,YAAY,GAAG,2BAA2B,CAwJ5F;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,sCAAsC,GAC9C,yBAAyB,CA4K3B;AAED,wBAAgB,kCAAkC,CAAC,OAAO,EAAE;IAC1D,QAAQ,CAAC,aAAa,EAAE,OAAO,2BAA2B,EAAE,mBAAmB,CAAC;IAChF,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,yBAAyB,EAAE,WAAW,GAAG,QAAQ,CAAC;IACzK,QAAQ,CAAC,4BAA4B,EAAE,CAAC,OAAO,EAAE,OAAO,yBAAyB,EAAE,sBAAsB,GAAG,SAAS,EAAE,KAAK,EAAE;QAC5H,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACzC,KAAK,IAAI,CAAC;CACZ,GAAG,IAAI,CAoBP"}

package/dist/platform/daemon/facade-composition.js

@@ -275,6 +275,12 @@ export function resolveDaemonFacadeRuntime(config) {
         // Explicitly opt into disk persistence for the daemon. Default is false
         // for tests and embedded hosts.
         persist: true,
+        // Honor the runtime's injected home so an isolated-home daemon never reads
+        // or writes the real ~/.goodvibes/companion-chat.
+        sessionsDir: runtimeServices.shellPaths.resolveUserPath('companion-chat', 'sessions'),
+        // Live spine: companion sessions register INTO the shared broker at write
+        // time so /api/sessions reflects them same-process (no restart).
+        sessionBroker: runtimeServices.sessionBroker,
         // Wire the full ToolRegistry so LLM-emitted tool calls are executed.
         toolRegistry: runtimeServices.agentOrchestrator.getToolRegistry(),
         permissionManager: new PermissionManager(undefined, createPermissionConfigReader(resolvedConfigManager), runtimeServices.policyRuntimeState, runtimeServices.hookDispatcher, runtimeServices.featureFlags),