@pellux/goodvibes-sdk 1.0.0 → 1.1.0

package/dist/platform/orchestration/controller-compat.d.ts

@@ -1,8 +1,7 @@
 /** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
 /**
- * Controller-compat (Wave 4, wo701) — stage 1 of the 3-stage WrfcController
- * migration (see design doc (g) and the work-order report's design-
- * divergences section).
+ * Controller-compat (see CHANGELOG 0.38.0) — stage 1 of the 3-stage WrfcController
+ * migration.
  *
  * `fromChainSpec()` produces the canned two-phase engineer->review
  * WORKSTREAM SPEC that a `WrfcController.createChain(ownerRecord)` call

package/dist/platform/orchestration/controller-compat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller-compat.d.ts","sourceRoot":"","sources":["../../../src/platform/orchestration/controller-compat.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,eAAe,EAAE,QAAQ,SAAI,GAAG,SAAS,EAAE,CAK5F;AAED,wBAAgB,aAAa,CAC3B,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC,EAC7C,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,aAAa,CAAC,GACxD,qBAAqB,CAOvB"}
+{"version":3,"file":"controller-compat.d.ts","sourceRoot":"","sources":["../../../src/platform/orchestration/controller-compat.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,eAAe,EAAE,QAAQ,SAAI,GAAG,SAAS,EAAE,CAK5F;AAED,wBAAgB,aAAa,CAC3B,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC,EAC7C,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,aAAa,CAAC,GACxD,qBAAqB,CAOvB"}

package/dist/platform/orchestration/dirty-guard.js

@@ -1,6 +1,6 @@
 /** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
 /**
- * Dirty-residue guard (Wave 6, wo-F item 4) — prevents an orchestration
+ * Dirty-residue guard (see CHANGELOG 0.38.0) — prevents an orchestration
  * engine run's scoped commit from sweeping in uncommitted changes that were
  * ALREADY sitting in the working tree before this engine launched (typically
  * residue left behind by a previously killed run sharing the same

package/dist/platform/orchestration/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/platform/orchestration/engine.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAkBrF,OAAO,KAAK,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAatF,OAAO,EAIL,KAAK,aAAa,EAElB,KAAK,0BAA0B,EAC/B,KAAK,KAAK,EACV,KAAK,WAAW,EAChB,KAAK,SAAS,EAEd,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAIlE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC;IACnD,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,aAAa,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,eAAe,CAAC,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,aAAa,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;IACvG,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrD,qIAAqI;IACrI,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;IAC1C,wHAAwH;IACxH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,iNAAiN;IACjN,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACrD;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACxD;AAED,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,UAAU,CAAC;IAC3D,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAC7C,eAAe,IAAI,UAAU,EAAE,CAAC;IAChC,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC;IACvF,qHAAqH;IACrH,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,+GAA+G;IAC/G,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;IAChF;;;;;;;;OAQG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACnC,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IAC9D,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACzD,4KAA4K;IAC5K,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IACjE,sEAAsE;IACtE,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IAChD,gGAAgG;IAChG,iBAAiB,IAAI,MAAM,CAAC;IAC5B,EAAE,CAAC,QAAQ,EAAE,0BAA0B,GAAG,MAAM,IAAI,CAAC;IACrD,OAAO,IAAI,IAAI,CAAC;CACjB;AAMD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,uBAAuB,GAAG,mBAAmB,CA4mB5F"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/platform/orchestration/engine.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAiBrF,OAAO,KAAK,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAatF,OAAO,EAIL,KAAK,aAAa,EAElB,KAAK,0BAA0B,EAC/B,KAAK,KAAK,EACV,KAAK,WAAW,EAChB,KAAK,SAAS,EAEd,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAIlE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC;IACnD,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,aAAa,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,eAAe,CAAC,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,aAAa,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;IACvG,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrD,qIAAqI;IACrI,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;IAC1C,wHAAwH;IACxH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,iNAAiN;IACjN,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACrD;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACxD;AAED,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,UAAU,CAAC;IAC3D,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAC7C,eAAe,IAAI,UAAU,EAAE,CAAC;IAChC,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC;IACvF,qHAAqH;IACrH,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,+GAA+G;IAC/G,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;IAChF;;;;;;;;OAQG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACnC,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IAC9D,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACzD,4KAA4K;IAC5K,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IACjE,sEAAsE;IACtE,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IAChD,gGAAgG;IAChG,iBAAiB,IAAI,MAAM,CAAC;IAC5B,EAAE,CAAC,QAAQ,EAAE,0BAA0B,GAAG,MAAM,IAAI,CAAC;IACrD,OAAO,IAAI,IAAI,CAAC;CACjB;AAMD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,uBAAuB,GAAG,mBAAmB,CA4mB5F"}

package/dist/platform/orchestration/engine.js

@@ -1,9 +1,8 @@
 /** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
 /**
- * OrchestrationEngine (Wave 4, wo701) — owns Workstream state and drives the
+ * OrchestrationEngine (see CHANGELOG 0.38.0) — owns Workstream state and drives the
  * pipeline. WRAPS a canned/authored workstream; does not rewrite or touch
- * WrfcController (stage 1 of the 3-stage migration — see controller-compat.ts
- * and the work-order report).
+ * WrfcController (stage 1 of the 3-stage migration — see controller-compat.ts).
  *
  * The tick loop is reactive, not timer-driven: `start()` runs one tick;
  * every phase-run completion re-runs tick() for its workstream. Because JS
@@ -49,7 +48,7 @@ export function createOrchestrationEngine(deps) {
         listeners.add(listener);
         return () => listeners.delete(listener);
     }
-    // Dirty-residue guard (Wave 6, wo-F item 4): snapshot the working tree's
+    // Dirty-residue guard (see CHANGELOG 0.38.0): snapshot the working tree's
     // dirty paths + content hashes ONCE, right at engine launch (synchronous —
     // see dirty-guard.ts's doc comment for why this must not be a promise
     // backed by real subprocess I/O), before any phase of this run has had a

package/dist/platform/orchestration/persistence.js

@@ -1,6 +1,6 @@
 /** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
 /**
- * Persistence (Wave 4, wo701) — mirrors the WrfcController chain seams
+ * Persistence (see CHANGELOG 0.38.0) — mirrors the WrfcController chain seams
  * exactly: serializeChain:323 / deserializeChain:345 (including the
  * future-schemaVersion-reject guard at :364) / importChain:402. Writes to
  * `.goodvibes/orchestration/<workstreamId>.json` — SEPARATE from the TUI's
@@ -164,7 +164,7 @@ export function attachDebouncedWriter(projectRoot, getWorkstream, getCompletedRe
         timers.set(workstreamId, timer);
     }
     const unsubscribe = subscribe((event) => {
-        // 'dirty-tree-at-launch' (Wave 6, wo-F item 4) is engine-wide, not
+        // 'dirty-tree-at-launch' (see CHANGELOG 0.38.0) is engine-wide, not
         // workstream-scoped — it has no workstreamId to schedule a write for.
         if (event.type === 'dirty-tree-at-launch')
             return;

package/dist/platform/orchestration/phase-runner.d.ts

@@ -1,6 +1,6 @@
 /** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
 /**
- * Phase-runner (Wave 4, wo701) — runs one WorkItem through one Phase: spawn
+ * Phase-runner (see CHANGELOG 0.38.0) — runs one WorkItem through one Phase: spawn
  * agent, await completion, verify claims, run gates, commit, cleanup.
  *
  * REUSES the hardened WRFC primitives verbatim (same functions WrfcController
@@ -26,7 +26,7 @@
  * itself has either. This module therefore mirrors WrfcController's ACTUAL
  * (shared-directory) behavior rather than the brief's aspirational
  * per-item-isolated-worktree fan-out; true fan-out isolation is a valuable,
- * separately-scoped follow-up (see the work-order report).
+ * separately-scoped follow-up.
  *
  * SECOND REALITY-WINS DIVERGENCE: AgentManager.spawn()'s root-spawn
  * normalization (tools/agent/wrfc-batch-policy.ts isRootReviewRoleTask) force
@@ -84,8 +84,8 @@ export interface PhaseRunnerDeps {
     readonly priceUsage?: ((model: string | undefined, usage: WorkItemUsage) => number | null) | undefined;
     readonly skipClaimVerification?: boolean | undefined;
     /**
-     * The dirty-tree snapshot taken synchronously at engine launch (Wave 6,
-     * wo-F item 4 — see dirty-guard.ts). Absent (undefined) degrades to
+     * The dirty-tree snapshot taken synchronously at engine launch (see
+     * CHANGELOG 0.38.0 and dirty-guard.ts). Absent (undefined) degrades to
      * today's behavior: no exclusion, every candidate path is committed.
      */
     readonly launchDirtySnapshot?: DirtyLaunchSnapshot | undefined;

package/dist/platform/orchestration/scheduler.d.ts

@@ -1,6 +1,6 @@
 /** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
 /**
- * Scheduler (Wave 4, wo701) — pure capacity-matching helpers, no side
+ * Scheduler (see CHANGELOG 0.38.0) — pure capacity-matching helpers, no side
  * effects. The hard departure from WrfcController's pairwise
  * engineer<->reviewer binding (startReview:883/startFix:1042): each tick,
  * for every phase in ordinal order, free capacity slots (capacity minus

package/dist/platform/orchestration/types.d.ts

@@ -1,6 +1,6 @@
 /** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
 /**
- * Orchestration engine — the model (W4.1, wo701).
+ * Orchestration engine — the model (see CHANGELOG 0.38.0).
  *
  * A phase/work-item pipeline layered OVER (not replacing) WrfcController. The
  * hard departure from WrfcController is pipeline semantics: an item advances
@@ -297,7 +297,7 @@ export interface GateOutcome {
     readonly unsatisfiedConstraintIds?: readonly string[] | undefined;
 }
 /**
- * Recorded on a PhaseResult when a scoped commit (Wave 6, wo-F item 4)
+ * Recorded on a PhaseResult when a scoped commit (see CHANGELOG 0.38.0)
  * excluded one or more candidate paths because they were already dirty
  * before this engine run launched and this phase never actually touched
  * them (see dirty-guard.ts's excludeUntouchedLaunchResidue). `skipped: true`
@@ -521,7 +521,7 @@ export type OrchestrationEvent = {
     readonly disposition: 'adopted' | 'reported';
 }
 /**
- * Emitted once per engine instance (Wave 6, wo-F item 4), right after the
+ * Emitted once per engine instance (see CHANGELOG 0.38.0), right after the
  * launch-time dirty-tree snapshot resolves, ONLY when it is non-empty.
  * Engine-wide, not workstream-scoped — `workstreamId` is absent (unlike
  * every other variant above) because it fires before any workstream is

package/dist/platform/presentation/glyphs.d.ts

@@ -4,7 +4,7 @@
  * and src/renderer/status-glyphs.ts (STATE_GLYPHS).
  *
  * This is one of the four genuinely-duplicated presentation tables named by the
- * W4-R1 renderer/input parity audit (both the TUI and the agent shipped a near-twin
+ * renderer/input parity audit (see CHANGELOG 1.0.0; both the TUI and the agent shipped a near-twin
  * copy). The TUI is the reference: it is the more-complete, more-recently-fixed
  * copy, and per the presentation-contract decision record its `status` group is
  * the one both renderers converge on.

package/dist/platform/presentation/glyphs.js

@@ -4,7 +4,7 @@
  * and src/renderer/status-glyphs.ts (STATE_GLYPHS).
  *
  * This is one of the four genuinely-duplicated presentation tables named by the
- * W4-R1 renderer/input parity audit (both the TUI and the agent shipped a near-twin
+ * renderer/input parity audit (see CHANGELOG 1.0.0; both the TUI and the agent shipped a near-twin
  * copy). The TUI is the reference: it is the more-complete, more-recently-fixed
  * copy, and per the presentation-contract decision record its `status` group is
  * the one both renderers converge on.

package/dist/platform/presentation/index.d.ts

@@ -2,7 +2,7 @@
  * @pellux/goodvibes-sdk/platform/presentation
  *
  * The presentation contract — the four genuinely-duplicated presentation
- * tables named by the W4-R1 renderer/input parity audit (goodvibes-tui vs
+ * tables named by the renderer/input parity audit (see CHANGELOG 1.0.0; goodvibes-tui vs
  * goodvibes-agent), hoisted into one pure, dependency-free module per Mike's
  * SDK-boundary rule (machinery needed by 2+ surfaces => SDK):
  *
@@ -15,8 +15,8 @@
  * The TUI is the reference for every value here; dark stays byte-identical to
  * today's TUI. See docs/decisions/2026-07-05-presentation-contract-sdk-extraction.md
  * for the full decision record, including the GLYPHS status-group reconciliation
- * ruling and the consumption plan (agent this wave via R4; TUI swap deferred to
- * a Wave-6 coherence pass).
+ * ruling and the consumption plan (the agent picks this up via R4; the TUI swap is
+ * deferred to a future coherence pass).
  *
  * PURE — no fs, no terminal I/O, no process globals. Painting stays
  * renderer-owned; this module owns only tokens and pure wording functions.

package/dist/platform/presentation/index.js

@@ -2,7 +2,7 @@
  * @pellux/goodvibes-sdk/platform/presentation
  *
  * The presentation contract — the four genuinely-duplicated presentation
- * tables named by the W4-R1 renderer/input parity audit (goodvibes-tui vs
+ * tables named by the renderer/input parity audit (see CHANGELOG 1.0.0; goodvibes-tui vs
  * goodvibes-agent), hoisted into one pure, dependency-free module per Mike's
  * SDK-boundary rule (machinery needed by 2+ surfaces => SDK):
  *
@@ -15,8 +15,8 @@
  * The TUI is the reference for every value here; dark stays byte-identical to
  * today's TUI. See docs/decisions/2026-07-05-presentation-contract-sdk-extraction.md
  * for the full decision record, including the GLYPHS status-group reconciliation
- * ruling and the consumption plan (agent this wave via R4; TUI swap deferred to
- * a Wave-6 coherence pass).
+ * ruling and the consumption plan (the agent picks this up via R4; the TUI swap is
+ * deferred to a future coherence pass).
  *
  * PURE — no fs, no terminal I/O, no process globals. Painting stays
  * renderer-owned; this module owns only tokens and pure wording functions.

package/dist/platform/presentation/thinking-phrases.d.ts

@@ -1,7 +1,7 @@
 /**
  * thinking-phrases.ts — the rotating "thinking" phrase pool, hoisted from
  * `goodvibes-tui` src/renderer/ui-factory.ts (THINKING_PHRASES). Verbatim
- * identical to the agent's copy today (per the W4-R1 parity audit) — a pure
+ * identical to the agent's copy today (per the renderer/input parity audit) — a pure
  * move, no reconciliation needed.
  *
  * Vaporwave / good-vibes themed; shown by waitingPhrase()'s 'thinking' case

package/dist/platform/presentation/thinking-phrases.js

@@ -1,7 +1,7 @@
 /**
  * thinking-phrases.ts — the rotating "thinking" phrase pool, hoisted from
  * `goodvibes-tui` src/renderer/ui-factory.ts (THINKING_PHRASES). Verbatim
- * identical to the agent's copy today (per the W4-R1 parity audit) — a pure
+ * identical to the agent's copy today (per the renderer/input parity audit) — a pure
  * move, no reconciliation needed.
  *
  * Vaporwave / good-vibes themed; shown by waitingPhrase()'s 'thinking' case

package/dist/platform/presentation/waiting-wording.d.ts

@@ -11,7 +11,7 @@
  * TUI's precedence order — approval beats reconnect beats pre-first-token
  * beats stalled beats thinking) and calls waitingPhrase(state, ctx) for the
  * exact wording. Neither renderer should carry its own copy of these five
- * strings/rotation — that duplication is exactly what the W4-R1 audit found
+ * strings/rotation — that duplication is exactly what the renderer/input parity audit found
  * (the agent's ui-factory.ts:308-313 was rotating-only, with no honest
  * stall/reconnect/approval split at all).
  *

package/dist/platform/presentation/waiting-wording.js

@@ -11,7 +11,7 @@
  * TUI's precedence order — approval beats reconnect beats pre-first-token
  * beats stalled beats thinking) and calls waitingPhrase(state, ctx) for the
  * exact wording. Neither renderer should carry its own copy of these five
- * strings/rotation — that duplication is exactly what the W4-R1 audit found
+ * strings/rotation — that duplication is exactly what the renderer/input parity audit found
  * (the agent's ui-factory.ts:308-313 was rotating-only, with no honest
  * stall/reconnect/approval split at all).
  *

package/dist/platform/push/delivery.d.ts

@@ -0,0 +1,48 @@
+/**
+ * push/delivery.ts
+ *
+ * The single place a push message is actually encrypted and sent. Every send —
+ * a `push.subscriptions.verify` test, or an approval/completion fan-out — flows
+ * through `deliverToSubscription`, so the honesty rules live in one spot:
+ *
+ *  - A push service that answers 404/410 means the browser subscription is gone;
+ *    the record is pruned and the receipt says `pruned`, never a fake success.
+ *  - Any other non-2xx (or a transport error) is reported as `failed` with the
+ *    status/reason, never swallowed into a success.
+ *  - The request carries the RFC 8188 `Content-Encoding: aes128gcm` body plus
+ *    the `TTL`, `Urgency`, and VAPID `Authorization` headers a push service
+ *    requires.
+ *
+ * The endpoint is whatever the browser registered. In tests that is a local
+ * HTTP sink; in production it is the browser vendor's push service. This module
+ * never contacts a hard-coded external service of its own.
+ */
+import type { VapidManager } from './vapid.js';
+import type { PushSubscriptionStore } from './subscription-store.js';
+import type { PushDeliveryReceipt, PushMessage, StoredPushSubscription } from './types.js';
+/** The `fetch` slice used to POST an encrypted payload. Injectable for tests. */
+export type PushTransport = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body: Buffer;
+}) => Promise<{
+    status: number;
+}>;
+export interface DeliveryDeps {
+    readonly vapid: VapidManager;
+    readonly store: PushSubscriptionStore;
+    readonly transport?: PushTransport | undefined;
+}
+/**
+ * Encrypt and send one message to one subscription, prune-on-gone, and return
+ * an honest receipt. The subscription's `lastOutcome` is stamped either way.
+ */
+export declare function deliverToSubscription(subscription: StoredPushSubscription, message: PushMessage, deps: DeliveryDeps): Promise<PushDeliveryReceipt>;
+/**
+ * Fan one message out to every stored subscription, delivering (and pruning) in
+ * sequence. Returns one receipt per subscription — an empty array when there
+ * are no subscriptions at all (the honest "nobody to notify" result, not a
+ * silent success).
+ */
+export declare function deliverToAll(message: PushMessage, deps: DeliveryDeps): Promise<PushDeliveryReceipt[]>;
+//# sourceMappingURL=delivery.d.ts.map

package/dist/platform/push/delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.d.ts","sourceRoot":"","sources":["../../../src/platform/push/delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,KAAK,EACV,mBAAmB,EACnB,WAAW,EACX,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,iFAAiF;AACjF,MAAM,MAAM,aAAa,GAAG,CAC1B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KACpE,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAgCjC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CAChD;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,sBAAsB,EACpC,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,mBAAmB,CAAC,CAyD9B;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAOhC"}

package/dist/platform/push/delivery.js

@@ -0,0 +1,117 @@
+/**
+ * push/delivery.ts
+ *
+ * The single place a push message is actually encrypted and sent. Every send —
+ * a `push.subscriptions.verify` test, or an approval/completion fan-out — flows
+ * through `deliverToSubscription`, so the honesty rules live in one spot:
+ *
+ *  - A push service that answers 404/410 means the browser subscription is gone;
+ *    the record is pruned and the receipt says `pruned`, never a fake success.
+ *  - Any other non-2xx (or a transport error) is reported as `failed` with the
+ *    status/reason, never swallowed into a success.
+ *  - The request carries the RFC 8188 `Content-Encoding: aes128gcm` body plus
+ *    the `TTL`, `Urgency`, and VAPID `Authorization` headers a push service
+ *    requires.
+ *
+ * The endpoint is whatever the browser registered. In tests that is a local
+ * HTTP sink; in production it is the browser vendor's push service. This module
+ * never contacts a hard-coded external service of its own.
+ */
+import { encryptPushPayload } from './encryption.js';
+const DEFAULT_TTL_SECONDS = 24 * 60 * 60;
+const GONE_STATUSES = new Set([404, 410]);
+function defaultTransport() {
+    return async (url, init) => {
+        // Re-wrap over a plain ArrayBuffer so the body matches fetch's BodyInit.
+        const res = await fetch(url, {
+            method: init.method,
+            headers: init.headers,
+            body: new Uint8Array(init.body),
+        });
+        return { status: res.status };
+    };
+}
+function endpointOrigin(endpoint) {
+    try {
+        return new URL(endpoint).origin;
+    }
+    catch {
+        return 'invalid';
+    }
+}
+function messagePlaintext(message) {
+    return Buffer.from(JSON.stringify({ title: message.title, body: message.body, data: message.data ?? {} }), 'utf8');
+}
+/**
+ * Encrypt and send one message to one subscription, prune-on-gone, and return
+ * an honest receipt. The subscription's `lastOutcome` is stamped either way.
+ */
+export async function deliverToSubscription(subscription, message, deps) {
+    const origin = endpointOrigin(subscription.endpoint);
+    const transport = deps.transport ?? defaultTransport();
+    let httpStatus;
+    try {
+        const encrypted = encryptPushPayload(subscription.keys, messagePlaintext(message));
+        const authorization = await deps.vapid.buildAuthorizationHeader(subscription.endpoint);
+        const headers = {
+            'content-encoding': encrypted.contentEncoding,
+            'content-type': 'application/octet-stream',
+            ttl: String(message.ttlSeconds ?? DEFAULT_TTL_SECONDS),
+            urgency: message.urgency ?? 'normal',
+            authorization,
+        };
+        const result = await transport(subscription.endpoint, {
+            method: 'POST',
+            headers,
+            body: encrypted.body,
+        });
+        httpStatus = result.status;
+    }
+    catch (error) {
+        await deps.store.recordOutcome(subscription.id, 'failed');
+        return {
+            subscriptionId: subscription.id,
+            endpointOrigin: origin,
+            outcome: 'failed',
+            detail: `delivery request failed: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+    if (httpStatus >= 200 && httpStatus < 300) {
+        await deps.store.recordOutcome(subscription.id, 'delivered');
+        return { subscriptionId: subscription.id, endpointOrigin: origin, outcome: 'delivered', httpStatus };
+    }
+    if (GONE_STATUSES.has(httpStatus)) {
+        // The subscription is gone at the push service — prune it (delete means
+        // delete) and report the prune with the status that proved it dead.
+        await deps.store.remove(subscription.id);
+        return {
+            subscriptionId: subscription.id,
+            endpointOrigin: origin,
+            outcome: 'pruned',
+            httpStatus,
+            detail: `push endpoint reported ${httpStatus} gone; subscription removed`,
+        };
+    }
+    await deps.store.recordOutcome(subscription.id, 'failed');
+    return {
+        subscriptionId: subscription.id,
+        endpointOrigin: origin,
+        outcome: 'failed',
+        httpStatus,
+        detail: `push service returned ${httpStatus}`,
+    };
+}
+/**
+ * Fan one message out to every stored subscription, delivering (and pruning) in
+ * sequence. Returns one receipt per subscription — an empty array when there
+ * are no subscriptions at all (the honest "nobody to notify" result, not a
+ * silent success).
+ */
+export async function deliverToAll(message, deps) {
+    const subscriptions = await deps.store.all();
+    const receipts = [];
+    for (const subscription of subscriptions) {
+        receipts.push(await deliverToSubscription(subscription, message, deps));
+    }
+    return receipts;
+}

package/dist/platform/push/encryption.d.ts

@@ -0,0 +1,41 @@
+/**
+ * push/encryption.ts
+ *
+ * Browser-push payload encryption, implemented with Node's built-in crypto
+ * (node:crypto) — no third-party web-push dependency. This is the daemon-side
+ * (Node/Bun) delivery path only; nothing here is imported by the runtime-neutral
+ * or browser bundles (see scripts/browser-compat-check.ts).
+ *
+ * Two standards are combined here, exactly as a browser Push service expects:
+ *
+ *  - RFC 8291 (Message Encryption for Web Push): derive a shared secret from an
+ *    ephemeral P-256 keypair and the subscription's public key + auth secret.
+ *  - RFC 8188 (aes128gcm content encoding): expand that secret into a
+ *    content-encryption key + nonce and encrypt one record, then frame it with
+ *    the salt / record-size / sender-public-key header the receiver reads back.
+ *
+ * The output Buffer is the raw request body sent to the subscription endpoint
+ * with `Content-Encoding: aes128gcm`.
+ */
+/** The subscription's own key material, base64url-encoded (browser PushSubscription shape). */
+export interface SubscriptionKeyMaterial {
+    /** The receiver's public key — 65-byte uncompressed P-256 point, base64url. */
+    readonly p256dh: string;
+    /** The receiver's 16-byte authentication secret, base64url. */
+    readonly auth: string;
+}
+export interface EncryptedPushPayload {
+    /** The aes128gcm request body: header || ciphertext || GCM tag. */
+    readonly body: Buffer;
+    /** Always `aes128gcm` — the value for the Content-Encoding request header. */
+    readonly contentEncoding: 'aes128gcm';
+}
+/**
+ * Encrypt `plaintext` for a subscription's key material.
+ *
+ * A fresh ephemeral sender keypair and salt are generated per call (RFC 8291
+ * requires this — the same salt/key pair must never encrypt two messages), so
+ * the result is non-deterministic by design.
+ */
+export declare function encryptPushPayload(keys: SubscriptionKeyMaterial, plaintext: Buffer): EncryptedPushPayload;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/platform/push/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../../src/platform/push/encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,+FAA+F;AAC/F,MAAM,WAAW,uBAAuB;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC;CACvC;AAyBD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,uBAAuB,EAC7B,SAAS,EAAE,MAAM,GAChB,oBAAoB,CA2CtB"}

package/dist/platform/push/encryption.js

@@ -0,0 +1,82 @@
+/**
+ * push/encryption.ts
+ *
+ * Browser-push payload encryption, implemented with Node's built-in crypto
+ * (node:crypto) — no third-party web-push dependency. This is the daemon-side
+ * (Node/Bun) delivery path only; nothing here is imported by the runtime-neutral
+ * or browser bundles (see scripts/browser-compat-check.ts).
+ *
+ * Two standards are combined here, exactly as a browser Push service expects:
+ *
+ *  - RFC 8291 (Message Encryption for Web Push): derive a shared secret from an
+ *    ephemeral P-256 keypair and the subscription's public key + auth secret.
+ *  - RFC 8188 (aes128gcm content encoding): expand that secret into a
+ *    content-encryption key + nonce and encrypt one record, then frame it with
+ *    the salt / record-size / sender-public-key header the receiver reads back.
+ *
+ * The output Buffer is the raw request body sent to the subscription endpoint
+ * with `Content-Encoding: aes128gcm`.
+ */
+import { createCipheriv, createECDH, createHmac, randomBytes } from 'node:crypto';
+/**
+ * Single fixed record size. Push payloads here (an approval summary, a
+ * completion note) are far below this, so one aes128gcm record always
+ * suffices; a payload that would not fit is rejected honestly rather than
+ * silently truncated or split.
+ */
+const RECORD_SIZE = 4096;
+const KEY_INFO_PREFIX = Buffer.from('WebPush: info\0', 'utf8');
+const CEK_INFO = Buffer.from('Content-Encoding: aes128gcm\0', 'utf8');
+const NONCE_INFO = Buffer.from('Content-Encoding: nonce\0', 'utf8');
+/** HKDF (RFC 5869) specialized to a single output block (length <= 32). */
+function hkdf(salt, ikm, info, length) {
+    const prk = createHmac('sha256', salt).update(ikm).digest();
+    const okm = createHmac('sha256', prk).update(Buffer.concat([info, Buffer.from([0x01])])).digest();
+    return okm.subarray(0, length);
+}
+function base64UrlToBuffer(value) {
+    return Buffer.from(value, 'base64url');
+}
+/**
+ * Encrypt `plaintext` for a subscription's key material.
+ *
+ * A fresh ephemeral sender keypair and salt are generated per call (RFC 8291
+ * requires this — the same salt/key pair must never encrypt two messages), so
+ * the result is non-deterministic by design.
+ */
+export function encryptPushPayload(keys, plaintext) {
+    const receiverPublic = base64UrlToBuffer(keys.p256dh);
+    const authSecret = base64UrlToBuffer(keys.auth);
+    if (receiverPublic.length !== 65) {
+        throw new Error('Push subscription p256dh key is not a 65-byte uncompressed P-256 point');
+    }
+    if (authSecret.length !== 16) {
+        throw new Error('Push subscription auth secret is not 16 bytes');
+    }
+    // Ephemeral sender (application-server) keypair for this one message.
+    const sender = createECDH('prime256v1');
+    sender.generateKeys();
+    const senderPublic = sender.getPublicKey();
+    const sharedSecret = sender.computeSecret(receiverPublic);
+    const salt = randomBytes(16);
+    // RFC 8291: mix the shared secret with the auth secret and both public keys.
+    const keyInfo = Buffer.concat([KEY_INFO_PREFIX, receiverPublic, senderPublic]);
+    const ikm = hkdf(authSecret, sharedSecret, keyInfo, 32);
+    // RFC 8188: expand into the content-encryption key and nonce.
+    const contentEncryptionKey = hkdf(salt, ikm, CEK_INFO, 16);
+    const nonce = hkdf(salt, ikm, NONCE_INFO, 12);
+    // One record: plaintext followed by the 0x02 last-record delimiter.
+    const record = Buffer.concat([plaintext, Buffer.from([0x02])]);
+    if (record.length + 16 > RECORD_SIZE) {
+        throw new Error(`Push payload too large for a single aes128gcm record (max ${RECORD_SIZE - 17} bytes)`);
+    }
+    const cipher = createCipheriv('aes-128-gcm', contentEncryptionKey, nonce);
+    const ciphertext = Buffer.concat([cipher.update(record), cipher.final(), cipher.getAuthTag()]);
+    // aes128gcm header: salt(16) | record-size(4, big-endian) | keyid-len(1) | keyid(=senderPublic).
+    const header = Buffer.alloc(16 + 4 + 1 + senderPublic.length);
+    salt.copy(header, 0);
+    header.writeUInt32BE(RECORD_SIZE, 16);
+    header.writeUInt8(senderPublic.length, 20);
+    senderPublic.copy(header, 21);
+    return { body: Buffer.concat([header, ciphertext]), contentEncoding: 'aes128gcm' };
+}

package/dist/platform/push/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * push/index.ts — the browser-push module barrel (VAPID custody, subscription
+ * store, RFC 8291 encryption, and the delivery path). Daemon-side only; not
+ * part of the runtime-neutral or browser bundles.
+ */
+export { encryptPushPayload } from './encryption.js';
+export type { SubscriptionKeyMaterial, EncryptedPushPayload } from './encryption.js';
+export { VapidManager, VAPID_SECRET_KEY } from './vapid.js';
+export type { VapidSecretStore, VapidManagerOptions } from './vapid.js';
+export { PushSubscriptionStore, toPublicSubscription } from './subscription-store.js';
+export type { RegisterSubscriptionInput } from './subscription-store.js';
+export { deliverToSubscription, deliverToAll } from './delivery.js';
+export type { PushTransport, DeliveryDeps } from './delivery.js';
+export { PushService } from './service.js';
+export type { PushServiceDeps, SubscribeInput, ApprovalSource, ApprovalNotice } from './service.js';
+export type { StoredPushSubscription, PublicPushSubscription, PushDeliveryOutcome, PushDeliveryReceipt, PushUrgency, PushMessage, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/platform/push/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/platform/push/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC5D,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACtF,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACpG,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC"}

package/dist/platform/push/index.js

@@ -0,0 +1,10 @@
+/**
+ * push/index.ts — the browser-push module barrel (VAPID custody, subscription
+ * store, RFC 8291 encryption, and the delivery path). Daemon-side only; not
+ * part of the runtime-neutral or browser bundles.
+ */
+export { encryptPushPayload } from './encryption.js';
+export { VapidManager, VAPID_SECRET_KEY } from './vapid.js';
+export { PushSubscriptionStore, toPublicSubscription } from './subscription-store.js';
+export { deliverToSubscription, deliverToAll } from './delivery.js';
+export { PushService } from './service.js';