@pellux/goodvibes-tui 0.18.11 → 0.18.13

package/src/runtime/bootstrap.ts

@@ -32,9 +32,9 @@ import {
   loadLastConversation,
   writeLastSessionPointer,
 } from '@pellux/goodvibes-sdk/platform/runtime/session-persistence';
-import { startBackgroundProviderRegistration } from './bootstrap-background.ts';
-import { restoreSavedModel } from './bootstrap-helpers.ts';
-import { startExternalServices, type ExternalServicesHandle } from './bootstrap-services.ts';
+import { startBackgroundProviderRegistration } from '@pellux/goodvibes-sdk/platform/runtime/bootstrap-background';
+import { restoreSavedModel } from '@pellux/goodvibes-sdk/platform/runtime/bootstrap-helpers';
+import { startExternalServices, type ExternalServicesHandle } from '@pellux/goodvibes-sdk/platform/runtime/bootstrap-services';
 import type { UiRuntimeServices } from './ui-services.ts';
 import { createDeferredStartupCoordinator } from '@pellux/goodvibes-sdk/platform/runtime/deferred-startup';
 import { initializeBootstrapCore } from './bootstrap-core.ts';
@@ -128,7 +128,7 @@ export async function bootstrapRuntime(
   const workingDir = options.workingDir;
   const configManager = options.configManager;
   const controlPlaneRecentEventsRef: {
-    value: (limit: number) => readonly import('../control-plane/gateway.ts').ControlPlaneRecentEvent[];
+    value: (limit: number) => readonly import('@pellux/goodvibes-sdk/platform/control-plane/gateway').ControlPlaneRecentEvent[];
   } = {
     value: (_limit) => [],
   };
@@ -358,6 +358,7 @@ export async function bootstrapRuntime(
     restoreSavedModel,
     systemMessageRouter,
     shellPaths: services.shellPaths,
+    surfaceRoot: 'tui',
   });
   if (configManager.get('automation.enabled')) {
     deferredStartup.schedule({
@@ -406,7 +407,7 @@ export async function bootstrapRuntime(
     permissions: permissionManager,
     toolRegistry,
     providerRegistry,
-    panelHealthMonitor: services.panelHealthMonitor,
+    componentHealthMonitor: services.componentHealthMonitor,
     worktreeRegistry: services.worktreeRegistry,
     sandboxSessionRegistry: services.sandboxSessionRegistry,
     hookDispatcher,

package/src/runtime/context.ts

@@ -16,29 +16,13 @@ import type { ProviderRegistry } from '@pellux/goodvibes-sdk/platform/providers/
 import type { RuntimeStore } from './store/index.ts';
 import type { RuntimeEventBus } from '@pellux/goodvibes-sdk/platform/runtime/events/index';
 import type { FeatureFlagManager } from '@pellux/goodvibes-sdk/platform/runtime/feature-flags/index';
+import type { MutableRuntimeState } from '@pellux/goodvibes-sdk/platform/runtime/mutable-runtime-state';
 import type { SessionSnapshot } from '@pellux/goodvibes-sdk/platform/runtime/session-persistence';
 import type { RuntimeServices } from './services.ts';
-import type { PanelHealthMonitor } from '@pellux/goodvibes-sdk/platform/runtime/perf/panel-health-monitor';
+import type { ComponentHealthMonitor } from './perf/panel-health-monitor.ts';
 import type { WorktreeRegistry } from '@pellux/goodvibes-sdk/platform/runtime/worktree/registry';
 import type { SandboxSessionRegistry } from '@pellux/goodvibes-sdk/platform/runtime/sandbox/session-registry';
 
-/**
- * Mutable runtime state that may be changed by slash commands or model-picker events.
- * Kept as a plain object so event handlers can close over it by reference.
- *
- * Named `MutableRuntimeState` to avoid a name collision with `RuntimeState` in
- * `src/runtime/store/state.ts`.
- */
-export interface MutableRuntimeState {
-  model: string;
-  provider: string;
-  debugMode: boolean;
-  systemPrompt: string;
-  /** Empty string if not configured. */
-  reasoningEffort: string;
-  sessionId: string;
-}
-
 /**
  * Options accepted by bootstrapRuntime().
  */
@@ -103,8 +87,8 @@ export interface RuntimeContext {
   /** Shared provider registry owned by the runtime services graph. */
   providerRegistry: ProviderRegistry;
 
-  /** Shared panel-health monitor owned by the runtime services graph. */
-  panelHealthMonitor: PanelHealthMonitor;
+  /** Shared component-health monitor owned by the runtime services graph. */
+  componentHealthMonitor: ComponentHealthMonitor;
 
   /** Shared worktree registry owned by the runtime services graph. */
   worktreeRegistry: WorktreeRegistry;

package/src/runtime/diagnostics/panels/index.ts

@@ -19,6 +19,6 @@ export { TransportPanel } from '@pellux/goodvibes-sdk/platform/runtime/diagnosti
 export type { TransportPanelSnapshot } from '@pellux/goodvibes-sdk/platform/runtime/diagnostics/panels/transport';
 export { OpsPanel } from './ops.ts';
 export type { OpsAuditEntry } from './ops.ts';
-export { PanelResourcesPanel } from '@pellux/goodvibes-sdk/platform/runtime/diagnostics/panels/panel-resources';
+export { PanelResourcesPanel } from './panel-resources.ts';
 export { SecurityPanel } from '@pellux/goodvibes-sdk/platform/runtime/diagnostics/panels/security';
 export type { SecurityPanelSnapshot } from '@pellux/goodvibes-sdk/platform/runtime/diagnostics/panels/security';

package/src/runtime/diagnostics/panels/ops.ts

@@ -13,7 +13,7 @@ import type { PanelConfig } from '@pellux/goodvibes-sdk/platform/runtime/diagnos
 import { DEFAULT_PANEL_CONFIG, appendBounded, applyFilter } from '@pellux/goodvibes-sdk/platform/runtime/diagnostics/types';
 import type { DiagnosticFilter } from '@pellux/goodvibes-sdk/platform/runtime/diagnostics/types';
 import type { OpsInterventionReason, OpsEvent } from '@pellux/goodvibes-sdk/platform/runtime/events/ops';
-import type { UiEventFeed } from '@pellux/goodvibes-sdk/platform/runtime/ui-events';
+import type { UiEventFeed } from '../../ui-events.ts';
 
 // ---------------------------------------------------------------------------
 // Audit entry

package/src/runtime/diagnostics/panels/panel-resources.ts

@@ -0,0 +1,118 @@
+/**
+ * Panel resource diagnostics panel data provider.
+ *
+ * Polls the shared TUI-owned ComponentHealthMonitor and produces PanelResourceSnapshot
+ * values for the diagnostics panel to render.
+ */
+import type { ComponentHealthMonitor } from '../../perf/panel-health-monitor.ts';
+import type {
+  ComponentResourceEntry,
+  ComponentResourceSnapshot,
+} from '@pellux/goodvibes-sdk/platform/runtime/diagnostics/types';
+
+const DEFAULT_POLL_INTERVAL_MS = 500;
+
+const HEALTH_ORDER: Record<string, number> = {
+  overloaded: 0,
+  warning: 1,
+  healthy: 2,
+};
+
+export class PanelResourcesPanel {
+  private readonly _pollIntervalMs: number;
+  private readonly _monitor: ComponentHealthMonitor;
+  private _current: ComponentResourceSnapshot;
+  private _timerId: ReturnType<typeof setInterval> | null = null;
+  private readonly _subscribers = new Set<() => void>();
+
+  constructor(monitor: ComponentHealthMonitor, pollIntervalMs: number = DEFAULT_POLL_INTERVAL_MS) {
+    this._monitor = monitor;
+    this._pollIntervalMs = pollIntervalMs;
+    this._current = this._buildSnapshot(Date.now());
+  }
+
+  start(): void {
+    if (this._timerId !== null) return;
+    this._timerId = setInterval(() => {
+      this._current = this._buildSnapshot(Date.now());
+      this._notify();
+    }, this._pollIntervalMs);
+  }
+
+  stop(): void {
+    if (this._timerId !== null) {
+      clearInterval(this._timerId);
+      this._timerId = null;
+    }
+  }
+
+  getSnapshot(): ComponentResourceSnapshot {
+    return this._current;
+  }
+
+  refresh(now: number = Date.now()): ComponentResourceSnapshot {
+    this._current = this._buildSnapshot(now);
+    return this._current;
+  }
+
+  subscribe(callback: () => void): () => void {
+    this._subscribers.add(callback);
+    return () => this._subscribers.delete(callback);
+  }
+
+  dispose(): void {
+    this.stop();
+    this._subscribers.clear();
+  }
+
+  private _buildSnapshot(capturedAt: number): ComponentResourceSnapshot {
+    const healthStates = this._monitor.getAllHealth();
+
+    const panels: ComponentResourceEntry[] = healthStates.map((health) => {
+      const contract = this._monitor.getContract(health.componentId);
+      return {
+        componentId: health.componentId,
+        throttleStatus: health.throttleStatus,
+        healthStatus: health.healthStatus,
+        renderP95Ms: health.renderP95Ms,
+        maxRenderMs: contract?.maxRenderMs ?? 0,
+        rendersInWindow: health.rendersInWindow,
+        maxUpdatesPerSecond: contract?.maxUpdatesPerSecond ?? 0,
+        consecutiveViolations: health.consecutiveViolations,
+        totalSuppressed: health.totalSuppressed,
+        totalPermitted: health.totalPermitted,
+        lastRenderAt: health.lastRenderAt,
+        nextAllowedAt: health.nextAllowedAt,
+      };
+    });
+
+    panels.sort((left, right) => {
+      const diff = (HEALTH_ORDER[left.healthStatus] ?? 2) - (HEALTH_ORDER[right.healthStatus] ?? 2);
+      return diff !== 0 ? diff : left.componentId.localeCompare(right.componentId);
+    });
+
+    const overloadedCount = panels.filter((panel) => panel.healthStatus === 'overloaded').length;
+    const warningCount = panels.filter((panel) => panel.healthStatus === 'warning').length;
+    const healthyCount = panels.filter((panel) => panel.healthStatus === 'healthy').length;
+    const totalSuppressed = panels.reduce((sum, panel) => sum + panel.totalSuppressed, 0);
+
+    return {
+      panels,
+      overloadedCount,
+      warningCount,
+      healthyCount,
+      totalSuppressed,
+      capturedAt,
+    };
+  }
+
+  private _notify(): void {
+    for (const callback of this._subscribers) {
+      try {
+        callback();
+      } catch {
+        // Subscriber failures must not take down diagnostics polling.
+      }
+    }
+  }
+}

package/src/runtime/perf/panel-contracts.ts

@@ -0,0 +1,32 @@
+/**
+ * Panel resource contracts — backward-compat shim.
+ *
+ * Re-exports the SDK's component contract types and helpers. TUI code that
+ * previously used local `ComponentResourceContract` / `ComponentHealthState`
+ * types (with `panelId`) now uses the SDK types (with `componentId`).
+ *
+ * Backward-compat aliases are re-exported:
+ *   - `PanelResourceContract` = `Omit<ComponentResourceContract,'componentId'> & { panelId }`
+ *   - `PanelHealthState`      = `Omit<ComponentHealthState,'componentId'> & { panelId }`
+ *
+ * These keep TUI-internal code that still uses `.panelId` compiling while
+ * the broader migration to `.componentId` proceeds.
+ */
+
+export type {
+  ComponentThrottleStatus,
+  ComponentHealthStatus,
+  ComponentResourceContract,
+  ComponentHealthState,
+  PanelThrottleStatus,
+  PanelHealthStatus,
+  PanelResourceContract,
+  PanelHealthState,
+} from '@pellux/goodvibes-sdk/platform/runtime/perf/component-contracts';
+
+export {
+  CATEGORY_CONTRACTS,
+  buildContract,
+  createInitialComponentHealthState,
+  createInitialPanelHealthState,
+} from '@pellux/goodvibes-sdk/platform/runtime/perf/component-contracts';

package/src/runtime/perf/panel-health-monitor.ts

@@ -0,0 +1,18 @@
+/**
+ * Panel health monitor — backward-compat shim.
+ *
+ * Re-exports the SDK's ComponentHealthMonitor so that the TUI and the SDK
+ * share a single class declaration. This eliminates the TypeScript nominal
+ * incompatibility that arises from two classes having separate `private`
+ * field declarations with the same name.
+ *
+ * All call-sites that previously imported the TUI-local ComponentHealthMonitor
+ * now receive the SDK's canonical class without any behavioral change —
+ * the public API is identical (register/deregister/canRender/recordRender/
+ * getHealth/getAllHealth/getContract/resetHealth).
+ */
+
+export {
+  ComponentHealthMonitor,
+  PanelHealthMonitor,
+} from '@pellux/goodvibes-sdk/platform/runtime/perf/component-health-monitor';

package/src/runtime/services.ts

@@ -37,7 +37,7 @@ import { HookDispatcher, createHookWorkbench, type HookWorkbench } from '@pellux
 import { PluginManager } from '@pellux/goodvibes-sdk/platform/plugins/manager';
 import { BookmarkManager } from '@pellux/goodvibes-sdk/platform/bookmarks/manager';
 import { ProfileManager } from '@pellux/goodvibes-sdk/platform/profiles/manager';
-import { SessionManager } from '../sessions/manager.ts';
+import { SessionManager } from '@pellux/goodvibes-sdk/platform/sessions/manager';
 import { CrossSessionTaskRegistry } from '@pellux/goodvibes-sdk/platform/sessions/orchestration/index';
 import { ApiTokenAuditor } from '@pellux/goodvibes-sdk/platform/security/token-audit';
 import { UserAuthManager } from '@pellux/goodvibes-sdk/platform/security/user-auth';
@@ -62,7 +62,7 @@ import { ProjectIndex } from '@pellux/goodvibes-sdk/platform/state/project-index
 import { IdempotencyStore } from '@pellux/goodvibes-sdk/platform/runtime/idempotency/index';
 import { OverflowHandler } from '@pellux/goodvibes-sdk/platform/tools/shared/overflow';
 import { ToolLLM } from '@pellux/goodvibes-sdk/platform/config/tool-llm';
-import { PanelHealthMonitor } from '@pellux/goodvibes-sdk/platform/runtime/perf/panel-health-monitor';
+import { ComponentHealthMonitor } from '@pellux/goodvibes-sdk/platform/runtime/perf/component-health-monitor';
 import { WorktreeRegistry } from '@pellux/goodvibes-sdk/platform/runtime/worktree/registry';
 import { SandboxSessionRegistry } from '@pellux/goodvibes-sdk/platform/runtime/sandbox/session-registry';
 import { createShellPathService, type ShellPathService } from '@pellux/goodvibes-sdk/platform/runtime/shell-paths';
@@ -133,7 +133,7 @@ export interface RuntimeServices {
   readonly channelPolicy: ChannelPolicyManager;
   readonly mcpRegistry: McpRegistry;
   readonly tokenAuditor: ApiTokenAuditor;
-  readonly panelHealthMonitor: PanelHealthMonitor;
+  readonly componentHealthMonitor: ComponentHealthMonitor;
   readonly worktreeRegistry: WorktreeRegistry;
   readonly sandboxSessionRegistry: SandboxSessionRegistry;
   readonly webhookNotifier: WebhookNotifier;
@@ -234,7 +234,7 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   });
   const profileManager = new ProfileManager(shellPaths.resolveUserPath('tui', 'profiles'));
   const bookmarkManager = new BookmarkManager(shellPaths.resolveUserPath('tui', 'bookmarks'));
-  const sessionManager = new SessionManager(workingDirectory);
+  const sessionManager = new SessionManager(workingDirectory, { surfaceRoot: 'tui' });
   const sessionOrchestration = new CrossSessionTaskRegistry(
     shellPaths.resolveProjectPath('tui', 'sessions', 'task-graph.json'),
   );
@@ -393,7 +393,7 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   mcpRegistry.setRuntimeBus(options.runtimeBus);
   mcpRegistry.setSandboxRuntime(configManager, sandboxSessionRegistry);
   const tokenAuditor = new ApiTokenAuditor({ managed: false });
-  const panelHealthMonitor = new PanelHealthMonitor();
+  const componentHealthMonitor = new ComponentHealthMonitor();
   const worktreeRegistry = new WorktreeRegistry(workingDirectory);
   const webhookNotifier = new WebhookNotifier();
   const replayEngine = new DeterministicReplayEngine(workingDirectory);
@@ -511,7 +511,7 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
     channelPolicy,
     mcpRegistry,
     tokenAuditor,
-    panelHealthMonitor,
+    componentHealthMonitor,
     worktreeRegistry,
     sandboxSessionRegistry,
     webhookNotifier,

package/src/runtime/store/domains/conversation.ts

@@ -1,181 +1 @@
-/**
- * Conversation domain state — tracks the active turn lifecycle,
- * message buffer, streaming deltas, and tool dispatch state.
- */
-
-import type { TurnStopReason } from '@pellux/goodvibes-sdk/platform/runtime/events/turn';
-
-/** States for the turn lifecycle machine. */
-export type TurnState =
-  | 'idle'
-  | 'preflight'
-  | 'streaming'
-  | 'tool_dispatch'
-  | 'post_hooks'
-  | 'completed'
-  | 'failed'
-  | 'cancelled';
-
-/** States for the tool execution machine. */
-export type ToolExecutionState =
-  | 'received'
-  | 'validated'
-  | 'prehooked'
-  | 'permissioned'
-  | 'executing'
-  | 'mapped'
-  | 'posthooked'
-  | 'succeeded'
-  | 'failed'
-  | 'cancelled';
-
-/** A lightweight record of an in-progress or recently completed tool call. */
-export interface ActiveToolCall {
-  /** Tool call ID from the provider. */
-  callId: string;
-  /** Tool name. */
-  toolName: string;
-  /** Serialized arguments (JSON string). */
-  args: string;
-  /** Current execution state. */
-  state: ToolExecutionState;
-  /** Epoch ms when this call entered the current state. */
-  stateEnteredAt: number;
-  /** Phase timestamps keyed by ToolExecutionState. */
-  phaseTimestamps: Partial<Record<ToolExecutionState, number>>;
-  /** Error message if state === 'failed'. */
-  error?: string;
-}
-
-/** Token usage accumulated for the current or most recent turn. */
-export interface TurnUsage {
-  inputTokens: number;
-  outputTokens: number;
-  cacheReadTokens: number;
-  cacheWriteTokens: number;
-  reasoningTokens: number;
-}
-
-/** Streaming progress for the current turn. */
-export interface StreamProgress {
-  /** Accumulated text content so far. */
-  accumulated: string;
-  /** Latest reasoning delta (if any). */
-  reasoningAccumulated: string;
-  /** Compact preview of the most recent partial tool call streamed so far. */
-  partialToolPreview?: string;
-  /** Number of delta events received. */
-  deltaCount: number;
-  /** Epoch ms of the first delta. */
-  firstDeltaAt?: number;
-  /** Epoch ms of the most recent delta. */
-  lastDeltaAt?: number;
-}
-
-export interface TurnReconciliationRecord {
-  count: number;
-  callIds: string[];
-  toolNames: string[];
-  reason: string;
-  timestamp: number;
-  isMalformed: boolean;
-}
-
-/**
- * ConversationDomainState — turn lifecycle and streaming state.
- */
-export interface ConversationDomainState {
-  // ── Domain metadata ────────────────────────────────────────────────────────
-  /** Monotonic revision counter; increments on every mutation. */
-  revision: number;
-  /** Timestamp of last mutation (Date.now()). */
-  lastUpdatedAt: number;
-  /** Subsystem that triggered the last mutation. */
-  source: string;
-
-  // ── Turn lifecycle ─────────────────────────────────────────────────────────
-  /** Current state of the turn lifecycle machine. */
-  turnState: TurnState;
-  /** Unique ID of the current turn (undefined when idle). */
-  currentTurnId?: string;
-  /** Epoch ms when the current turn started (undefined when idle). */
-  turnStartedAt?: number;
-  /** Epoch ms when the current turn completed/failed (undefined while active). */
-  turnEndedAt?: number;
-  /** Error from the most recent failed turn. */
-  lastTurnError?: string;
-  /** Explicit terminal reason for the most recently finished turn. */
-  lastTurnStopReason?: TurnStopReason;
-  /** Final assistant response for the most recently completed turn. */
-  lastTurnResponse?: string;
-  /** Most recent preflight failure message, if any. */
-  lastPreflightFailure?: string;
-  /** Total number of turns completed in this session. */
-  totalTurns: number;
-
-  // ── Streaming ──────────────────────────────────────────────────────────────
-  /** Live streaming progress (populated during 'streaming' state). */
-  stream: StreamProgress;
-
-  // ── Tool dispatch ──────────────────────────────────────────────────────────
-  /** Map of callId → ActiveToolCall for all in-flight tool calls. */
-  activeToolCalls: Map<string, ActiveToolCall>;
-  /** Count of tool calls dispatched in the current turn. */
-  toolCallsThisTurn: number;
-  /** Most recent reconciliation record for unresolved or malformed tool calls. */
-  lastToolReconciliation?: TurnReconciliationRecord;
-
-  // ── Token accounting ───────────────────────────────────────────────────────
-  /** Usage for the current or most recent turn. */
-  currentTurnUsage: TurnUsage;
-  /** Cumulative usage across all turns in this session. */
-  sessionUsage: TurnUsage;
-
-  // ── Context window ─────────────────────────────────────────────────────────
-  /** Estimated token count of the current context window. */
-  estimatedContextTokens: number;
-  /** Whether a context warning threshold has been crossed. */
-  contextWarningActive: boolean;
-  /** Message count in the current session conversation. */
-  messageCount: number;
-}
-
-function makeEmptyUsage(): TurnUsage {
-  return { inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0, reasoningTokens: 0 };
-}
-
-/**
- * Returns the default initial state for the conversation domain.
- */
-export function createInitialConversationState(): ConversationDomainState {
-  return {
-    revision: 0,
-    lastUpdatedAt: 0,
-    source: 'init',
-    turnState: 'idle',
-    currentTurnId: undefined,
-    turnStartedAt: undefined,
-    turnEndedAt: undefined,
-    lastTurnError: undefined,
-    lastTurnStopReason: undefined,
-    lastTurnResponse: undefined,
-    lastPreflightFailure: undefined,
-    totalTurns: 0,
-    stream: {
-      accumulated: '',
-      reasoningAccumulated: '',
-      partialToolPreview: undefined,
-      deltaCount: 0,
-      firstDeltaAt: undefined,
-      lastDeltaAt: undefined,
-    },
-    activeToolCalls: new Map(),
-    toolCallsThisTurn: 0,
-    lastToolReconciliation: undefined,
-    currentTurnUsage: makeEmptyUsage(),
-    sessionUsage: makeEmptyUsage(),
-    estimatedContextTokens: 0,
-    contextWarningActive: false,
-    messageCount: 0,
-  };
-}
+export * from '@pellux/goodvibes-sdk/platform/runtime/store/domains/conversation';

package/src/runtime/store/domains/permissions.ts

@@ -1,143 +1 @@
-/**
- * Permissions domain state — tracks the permission mode, session approvals,
- * and the most recent permission decision with full audit trail.
- */
-
-import type { PermissionCategory } from '@pellux/goodvibes-sdk/platform/permissions/manager';
-import type { PermissionRiskLevel } from '@pellux/goodvibes-sdk/platform/permissions/types';
-
-/** Permission evaluation modes (maps to PermissionsToolConfig). */
-export type PermissionMode =
-  | 'default'
-  | 'plan'
-  | 'allow-all'
-  | 'custom'
-  | 'background-restricted';
-
-/** States for the permission decision machine. */
-export type PermissionDecisionMachineState =
-  | 'collect_rules'
-  | 'normalize_input'
-  | 'evaluate_policy'
-  | 'evaluate_runtime_mode'
-  | 'evaluate_session_override'
-  | 'final_safety_checks'
-  | 'decision_emitted';
-
-/** The outcome of a permission decision. */
-export type PermissionDecisionOutcome = 'approved' | 'denied' | 'deferred';
-
-/** Source layer that determined the permission outcome. */
-export type PermissionSourceLayer =
-  | 'config_policy'
-  | 'managed_policy'
-  | 'runtime_mode'
-  | 'session_override'
-  | 'safety_check'
-  | 'user_prompt';
-
-/** Reason codes for a permission decision. */
-export type PermissionDecisionReason =
-  | 'config_allow'
-  | 'config_deny'
-  | 'managed_policy_allow'
-  | 'managed_policy_deny'
-  | 'mode_allow_all'
-  | 'mode_denied'
-  | 'mode_plan_deny'
-  | 'mode_background_restricted'
-  | 'session_cached_approval'
-  | 'session_cached_denial'
-  | 'safety_guardrail'
-  | 'user_approved'
-  | 'user_denied';
-
-/** Full record of the most recent permission decision. */
-export interface PermissionDecision {
-  /** Tool call ID this decision is for. */
-  callId: string;
-  /** Tool name. */
-  toolName: string;
-  /** Permission category. */
-  category: PermissionCategory;
-  /** State machine state when the decision was emitted. */
-  machineState: PermissionDecisionMachineState;
-  /** Final outcome. */
-  outcome: PermissionDecisionOutcome;
-  /** Primary reason code. */
-  reason: PermissionDecisionReason;
-  /** Source layer that yielded the decision. */
-  sourceLayer: PermissionSourceLayer;
-  /** Whether the decision was persisted to session approvals. */
-  persisted: boolean;
-  /** Semantic classification surfaced with the decision. */
-  classification?: string;
-  /** Risk level surfaced with the decision. */
-  riskLevel?: PermissionRiskLevel;
-  /** Human-readable summary for operators and the prompt UI. */
-  summary?: string;
-  /** Epoch ms when the decision was emitted. */
-  decidedAt: number;
-}
-
-/**
- * PermissionDomainState — permission configuration and decision state.
- */
-export interface PermissionDomainState {
-  // ── Domain metadata ────────────────────────────────────────────────────────
-  /** Monotonic revision counter; increments on every mutation. */
-  revision: number;
-  /** Timestamp of last mutation (Date.now()). */
-  lastUpdatedAt: number;
-  /** Subsystem that triggered the last mutation. */
-  source: string;
-
-  // ── Mode ───────────────────────────────────────────────────────────────────
-  /** Current global permission mode. */
-  mode: PermissionMode;
-  /** Whether the user is currently being prompted for a permission decision. */
-  awaitingDecision: boolean;
-  /** Current state of the decision state machine (while a decision is in flight). */
-  decisionMachineState?: PermissionDecisionMachineState;
-
-  // ── Session approvals ──────────────────────────────────────────────────────
-  /**
-   * Per-session tool approval cache.
-   * Key format: "<toolName>:<argsHash>" → boolean (approved/denied).
-   */
-  sessionApprovals: Map<string, boolean>;
-  /** Number of approvals granted this session. */
-  approvalCount: number;
-  /** Number of denials issued this session. */
-  denialCount: number;
-
-  // ── Last decision ──────────────────────────────────────────────────────────
-  /** The most recent permission decision record. */
-  lastDecision?: PermissionDecision;
-
-  // ── Statistics ─────────────────────────────────────────────────────────────
-  /** Total permission checks performed this session. */
-  totalChecks: number;
-  /** Total checks that were served from session cache. */
-  cachedChecks: number;
-}
-
-/**
- * Returns the default initial state for the permissions domain.
- */
-export function createInitialPermissionsState(): PermissionDomainState {
-  return {
-    revision: 0,
-    lastUpdatedAt: 0,
-    source: 'init',
-    mode: 'default',
-    awaitingDecision: false,
-    decisionMachineState: undefined,
-    sessionApprovals: new Map(),
-    approvalCount: 0,
-    denialCount: 0,
-    lastDecision: undefined,
-    totalChecks: 0,
-    cachedChecks: 0,
-  };
-}
+export * from '@pellux/goodvibes-sdk/platform/runtime/store/domains/permissions';