@phuetz/code-buddy 1.0.0 → 1.2.0

package/dist/server/tls-config.js

@@ -0,0 +1,142 @@
+/**
+ * Optional TLS for the API server.
+ *
+ * The mobile-supervision endpoint (`/api/mobile`) rides the main HTTP server.
+ * To expose it off-device securely it can be served over HTTPS. This is purely
+ * transport security — it does not change any product gate (the dispatch gate
+ * `CODEBUDDY_MOBILE_ALLOW_DISPATCH` is untouched).
+ *
+ * Behaviour, gated by env (HTTP stays the default — no env, no TLS):
+ *  - `CODEBUDDY_HTTPS=1` (or `CODEBUDDY_MOBILE_TLS=1`) enables HTTPS.
+ *  - `CODEBUDDY_TLS_CERT` / `CODEBUDDY_TLS_KEY` = paths to a PEM cert/key. This
+ *    is the standard production approach (Let's Encrypt / reverse proxy / the
+ *    operator provisions the cert).
+ *  - If TLS is enabled but no cert is provided, a dev self-signed cert is
+ *    generated via `openssl` (if on PATH) into `~/.codebuddy/tls/` and reused.
+ *  - If TLS is enabled but it cannot be satisfied (cert unreadable, or openssl
+ *    absent), this **throws** with a clear message. It never silently falls back
+ *    to plain HTTP — an operator who asked for TLS must not be downgraded.
+ *
+ * Uses only Node built-ins (`https`, `fs`, `child_process`) — no new dependency.
+ */
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { execFileSync } from 'child_process';
+import { logger } from '../utils/logger.js';
+/** Truthy env flag check — accepts `1`, `true`, `yes`, `on` (case-insensitive). */
+function isEnvTrue(value) {
+    if (!value)
+        return false;
+    const v = value.trim().toLowerCase();
+    return v === '1' || v === 'true' || v === 'yes' || v === 'on';
+}
+/** Whether HTTPS is requested for the API server. */
+export function isTlsEnabled(env = process.env) {
+    return isEnvTrue(env.CODEBUDDY_HTTPS) || isEnvTrue(env.CODEBUDDY_MOBILE_TLS);
+}
+function tlsDir() {
+    const home = process.env.CODEBUDDY_HOME || os.homedir();
+    return path.join(home, '.codebuddy', 'tls');
+}
+function hasOpenssl() {
+    try {
+        execFileSync('openssl', ['version'], { stdio: 'ignore' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Generate (once) and return a dev self-signed cert/key under `~/.codebuddy/tls/`.
+ * Reuses an existing pair if both files are present. Throws if openssl is absent.
+ */
+function ensureDevSelfSignedCert() {
+    const dir = tlsDir();
+    const certPath = path.join(dir, 'dev-cert.pem');
+    const keyPath = path.join(dir, 'dev-key.pem');
+    if (fs.existsSync(certPath) && fs.existsSync(keyPath)) {
+        return { cert: fs.readFileSync(certPath), key: fs.readFileSync(keyPath) };
+    }
+    if (!hasOpenssl()) {
+        throw new Error('TLS is enabled (CODEBUDDY_HTTPS) but no cert/key was provided and `openssl` ' +
+            'is not available on PATH to generate a dev self-signed certificate. ' +
+            'Provide CODEBUDDY_TLS_CERT and CODEBUDDY_TLS_KEY (PEM paths), or install openssl.');
+    }
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    try {
+        execFileSync('openssl', [
+            'req',
+            '-x509',
+            '-newkey',
+            'rsa:2048',
+            '-nodes',
+            '-keyout',
+            keyPath,
+            '-out',
+            certPath,
+            '-subj',
+            '/CN=localhost',
+            '-days',
+            '365',
+        ], { stdio: 'ignore' });
+        // Restrict the private key to the owner.
+        try {
+            fs.chmodSync(keyPath, 0o600);
+        }
+        catch {
+            /* best-effort on platforms without POSIX perms */
+        }
+    }
+    catch (err) {
+        throw new Error('TLS is enabled (CODEBUDDY_HTTPS) but generating a dev self-signed certificate ' +
+            `with openssl failed: ${err instanceof Error ? err.message : String(err)}. ` +
+            'Provide CODEBUDDY_TLS_CERT and CODEBUDDY_TLS_KEY (PEM paths) instead.');
+    }
+    logger.warn(`TLS: generated a dev self-signed certificate at ${certPath}. ` +
+        'This is for development/off-device testing only — use a real cert ' +
+        '(CODEBUDDY_TLS_CERT / CODEBUDDY_TLS_KEY) in production.');
+    return { cert: fs.readFileSync(certPath), key: fs.readFileSync(keyPath) };
+}
+/**
+ * Resolve TLS options for the server, or `null` when TLS is not requested.
+ *
+ * Returns `null` (HTTP, unchanged default) when neither `CODEBUDDY_HTTPS` nor
+ * `CODEBUDDY_MOBILE_TLS` is set. Throws a clear error if TLS is requested but
+ * cannot be satisfied — it never downgrades to HTTP behind the operator's back.
+ */
+export function resolveServerTlsOptions(env = process.env) {
+    if (!isTlsEnabled(env)) {
+        return null;
+    }
+    const certPath = env.CODEBUDDY_TLS_CERT?.trim();
+    const keyPath = env.CODEBUDDY_TLS_KEY?.trim();
+    // One of the two paths set but not the other → operator misconfiguration.
+    if ((certPath && !keyPath) || (!certPath && keyPath)) {
+        throw new Error('TLS is enabled (CODEBUDDY_HTTPS) but only one of CODEBUDDY_TLS_CERT / ' +
+            'CODEBUDDY_TLS_KEY is set. Provide both, or neither (to use a dev self-signed cert).');
+    }
+    if (certPath && keyPath) {
+        let cert;
+        let key;
+        try {
+            cert = fs.readFileSync(certPath);
+        }
+        catch (err) {
+            throw new Error(`TLS is enabled but CODEBUDDY_TLS_CERT (${certPath}) could not be read: ` +
+                `${err instanceof Error ? err.message : String(err)}`);
+        }
+        try {
+            key = fs.readFileSync(keyPath);
+        }
+        catch (err) {
+            throw new Error(`TLS is enabled but CODEBUDDY_TLS_KEY (${keyPath}) could not be read: ` +
+                `${err instanceof Error ? err.message : String(err)}`);
+        }
+        return { cert, key };
+    }
+    // TLS requested with no explicit cert — generate/reuse a dev self-signed cert.
+    return ensureDevSelfSignedCert();
+}
+//# sourceMappingURL=tls-config.js.map

package/dist/server/tunnel-manager.d.ts

@@ -0,0 +1,20 @@
+export interface TunnelOptions {
+    port: number;
+    authtoken?: string;
+    domain?: string;
+}
+export declare class TunnelManager {
+    private static listener;
+    /**
+     * Start an ngrok tunnel forwarding to the specified port.
+     */
+    static startTunnel(options: TunnelOptions): Promise<string>;
+    /**
+     * Stop the active ngrok tunnel.
+     */
+    static stopTunnel(): Promise<void>;
+    /**
+     * Get the URL of the currently active tunnel, if any.
+     */
+    static getActiveTunnelUrl(): string | null;
+}

package/dist/server/tunnel-manager.js

@@ -0,0 +1,58 @@
+import * as ngrok from '@ngrok/ngrok';
+import { logger } from '../utils/logger.js';
+export class TunnelManager {
+    static listener = null;
+    /**
+     * Start an ngrok tunnel forwarding to the specified port.
+     */
+    static async startTunnel(options) {
+        if (this.listener) {
+            logger.warn('A tunnel is already running. Disconnecting existing tunnel.');
+            await this.stopTunnel();
+        }
+        try {
+            logger.info(`Starting ngrok tunnel for port ${options.port}...`);
+            const ngrokOptions = {
+                addr: options.port,
+                authtoken_from_env: true,
+            };
+            if (options.authtoken) {
+                ngrokOptions.authtoken = options.authtoken;
+            }
+            if (options.domain) {
+                ngrokOptions.domain = options.domain;
+            }
+            this.listener = await ngrok.forward(ngrokOptions);
+            const url = this.listener.url() ?? '';
+            logger.info(`ngrok tunnel established at: ${url}`);
+            return url;
+        }
+        catch (error) {
+            logger.error('Failed to start ngrok tunnel', { error });
+            throw error;
+        }
+    }
+    /**
+     * Stop the active ngrok tunnel.
+     */
+    static async stopTunnel() {
+        if (this.listener) {
+            try {
+                await this.listener.close();
+                this.listener = null;
+                logger.info('ngrok tunnel closed.');
+            }
+            catch (error) {
+                logger.error('Failed to close ngrok tunnel', { error });
+                throw error;
+            }
+        }
+    }
+    /**
+     * Get the URL of the currently active tunnel, if any.
+     */
+    static getActiveTunnelUrl() {
+        return this.listener ? this.listener.url() ?? null : null;
+    }
+}
+//# sourceMappingURL=tunnel-manager.js.map

package/dist/server/websocket/fleet-bridge.d.ts

@@ -38,7 +38,7 @@
  * agent-executor events so receivers can map them 1:1 to local
  * AgentRuntime events for re-display.
  */
-export declare const FLEET_EVENT_TYPES: readonly ["fleet:agent:tool_started", "fleet:agent:tool_completed", "fleet:agent:tool_error", "fleet:agent:reasoning", "fleet:workflow:event", "fleet:workflow:start", "fleet:workflow:complete", "fleet:session:spawn", "fleet:session:message", "fleet:peer:heartbeat", "fleet:peer:compacting:start", "fleet:peer:compacting:complete", "fleet:chat-session:start", "fleet:chat-session:turn", "fleet:chat-session:end"];
+export declare const FLEET_EVENT_TYPES: readonly ["fleet:agent:tool_started", "fleet:agent:tool_completed", "fleet:agent:tool_error", "fleet:agent:reasoning", "fleet:workflow:event", "fleet:workflow:start", "fleet:workflow:complete", "fleet:session:spawn", "fleet:session:message", "fleet:peer:heartbeat", "fleet:peer:compacting:start", "fleet:peer:compacting:complete", "fleet:chat-session:start", "fleet:chat-session:turn", "fleet:chat-session:end", "fleet:chat-session:goal"];
 export type FleetEventType = (typeof FLEET_EVENT_TYPES)[number];
 /**
  * Source identification carried with every fleet event so receivers know
@@ -137,3 +137,15 @@ export declare function broadcastChatSessionEnd(payload: {
     sessionId: string;
     reason?: 'end' | 'expired';
 }): void;
+/**
+ * Goal Ralph-loop on a peer session (Hermes gateway parity) — emitted on
+ * goal attach/pause/resume/clear and after each post-turn judge verdict.
+ * Metadata only: status/verdict/counters, never goal text or judge reasons.
+ */
+export declare function broadcastChatSessionGoal(payload: {
+    sessionId: string;
+    status: string;
+    verdict?: string;
+    turnsUsed?: number;
+    maxTurns?: number;
+}): void;

package/dist/server/websocket/fleet-bridge.js

@@ -67,6 +67,9 @@ export const FLEET_EVENT_TYPES = [
     'fleet:chat-session:start',
     'fleet:chat-session:turn',
     'fleet:chat-session:end',
+    // Goal Ralph-loop on peer sessions (Hermes gateway parity). Metadata
+    // only — status/verdict/turn counters, never goal text or reasons.
+    'fleet:chat-session:goal',
 ];
 /**
  * Cached source. Resolved lazily on first emit so tests can stub
@@ -167,4 +170,17 @@ export function broadcastChatSessionTurn(payload) {
 export function broadcastChatSessionEnd(payload) {
     broadcastFleetEvent('fleet:chat-session:end', { ...payload });
 }
+/**
+ * Goal Ralph-loop on a peer session (Hermes gateway parity) — emitted on
+ * goal attach/pause/resume/clear and after each post-turn judge verdict.
+ * Metadata only: status/verdict/counters, never goal text or judge reasons.
+ */
+export function broadcastChatSessionGoal(payload) {
+    broadcastFleetEvent('fleet:chat-session:goal', { ...payload });
+}
+// Wire up the agent runtime hooks (breaks circular dependency #2)
+import { registerFleetBroadcaster } from '../../agent/execution/tool-hooks.js';
+registerFleetBroadcaster(broadcastFleetEvent);
+import { registerSessionFleetBroadcaster } from '../../agent/multi-agent/session-fleet-bridge.js';
+registerSessionFleetBroadcaster(broadcastFleetEvent);
 //# sourceMappingURL=fleet-bridge.js.map

package/dist/services/prompt-builder.d.ts

@@ -39,6 +39,7 @@ export interface BuildOptions {
     includeWritingRules?: boolean;
     includeCodingStyle?: boolean;
     includeWorkflowRules?: boolean;
+    includeExecutionDiscipline?: boolean;
     includeVariation?: boolean;
 }
 export declare class PromptBuilder {

package/dist/services/prompt-builder.js

@@ -30,6 +30,7 @@ const ALL_BLOCKS = {
     includeWritingRules: true,
     includeCodingStyle: true,
     includeWorkflowRules: true,
+    includeExecutionDiscipline: true,
     includeVariation: true,
 };
 const EXTERNAL_PROMPT_MANAGER_TOOLS = [
@@ -83,13 +84,17 @@ export class PromptBuilder {
         // confuse the LLM into hallucinating JSON tool calls. Force-off here.
         const toolCfg = getModelToolConfig(modelName);
         const activeToolFilter = getToolFilter();
-        if (toolCfg.supportsToolCalls === false) {
+        const forceTools = process.env.GROK_FORCE_TOOLS === 'true';
+        if (toolCfg.supportsToolCalls === false && !forceTools) {
             gates.includeMemoryDirective = false;
             gates.includeLessonsDirective = false;
             gates.includeUserModelDirective = false;
             gates.includeWorkflowRules = false;
+            gates.includeExecutionDiscipline = false;
         }
-        if (!isToolNameAllowed('remember', activeToolFilter)) {
+        const rememberToolAllowed = isToolNameAllowed('remember', activeToolFilter);
+        const memoryProposeToolAllowed = isToolNameAllowed('memory_propose', activeToolFilter);
+        if (!rememberToolAllowed && !memoryProposeToolAllowed) {
             gates.includeMemoryDirective = false;
         }
         if (!['lessons_add', 'lessons_search', 'lessons_graph'].every(toolName => isToolNameAllowed(toolName, activeToolFilter))) {
@@ -188,7 +193,7 @@ export class PromptBuilder {
                 });
                 logger.debug(`Auto-selected prompt: ${autoId} (based on ${modelName})`);
             }
-            else if (toolCfg.supportsToolCalls === false) {
+            else if (toolCfg.supportsToolCalls === false && !forceTools) {
                 // Chat-only base prompt for models that can't dispatch tool calls.
                 // The default body lists `bash`, `view_file`, `str_replace_editor`,
                 // etc. by name — small Ollama models read those mentions and try to
@@ -223,6 +228,26 @@ export class PromptBuilder {
                 systemPrompt = `# Role & Instructions (from intro_hook.txt)\n\n${introHookContent}\n\n---\n\n${systemPrompt}`;
                 logger.debug("Prepended intro hook content to system prompt");
             }
+            // Inject execution-discipline guidance (tool-use enforcement, anti-stub
+            // completion, mandatory-tool, pre-finalize self-check). Borrowed from the
+            // Hermes Agent prompt audit — its highest-leverage agentic-reliability
+            // block. Placed HERE in the STABLE PREFIX (not near the footer) on
+            // purpose: the footer reminder section is shuffled by the variation
+            // injector (varySystemPrompt → extractBlocks splits on bullet lines), so
+            // a late placement fragmented this block — foreign bullets got interleaved
+            // between its lines. Up here it stays contiguous, cache-stable, and
+            // survives head-truncation. Gated off for trivial/lite + tool-callless
+            // models (see gating above).
+            if (gates.includeExecutionDiscipline) {
+                try {
+                    const { getExecutionDisciplineBlock } = await import('../prompts/execution-discipline.js');
+                    systemPrompt += '\n\n' + getExecutionDisciplineBlock();
+                    logger.debug('Injected execution-discipline guidance into system prompt');
+                }
+                catch (err) {
+                    logger.warn('Failed to inject execution-discipline block', { error: getErrorMessage(err) });
+                }
+            }
             // Inject bootstrap context files (BOOTSTRAP.md, AGENTS.md, SOUL.md, etc.)
             if (gates.includeBootstrap) {
                 try {
@@ -361,17 +386,32 @@ export class PromptBuilder {
                 }
                 catch { /* fleet registry optional — module not loaded yet */ }
             }
-            // Inject auto-memory directive — tells the LLM WHEN to call the
-            // `remember` tool to auto-persist non-obvious facts to
+            // Inject auto-memory directive — tells the LLM WHEN to call `remember`
+            // or the review-gated `memory_propose` tool for non-obvious facts from
             // .codebuddy/CODEBUDDY_MEMORY.md (project) or ~/.codebuddy/memory.md
             // (user). Without this directive, the tool is registered but the LLM
             // has no instruction on when to use it, so the file stays empty.
-            // Paired with `alwaysInclude: ['remember']` in tool-selection-strategy.
+            // Paired with `alwaysInclude: ['remember', 'memory_propose']` in
+            // tool-selection-strategy.
             if (this.config.memoryEnabled && this.persistentMemory && gates.includeMemoryDirective) {
+                const memoryWriteInstruction = memoryProposeToolAllowed
+                    ? 'Use `remember` only for explicit, high-confidence durable facts. Use `memory_propose` for inferred, ambiguous, or model-derived facts so the user can review them before they become prompt-injected memory.'
+                    : 'Use `remember` only for explicit, high-confidence durable facts. Do not store inferred or ambiguous facts silently.';
+                const inferredFactInstruction = memoryProposeToolAllowed
+                    ? 'When to call `memory_propose`:'
+                    : 'When to consider durable memory, but skip if it is only inferred or ambiguous:';
+                const closingMemoryInstruction = memoryProposeToolAllowed
+                    ? 'Prefer `memory_propose` over `remember` when the fact came from your interpretation rather than an explicit user instruction.'
+                    : 'Only call `remember` when the fact came from an explicit user instruction or correction.';
                 systemPrompt += `\n\n<auto_memory_directive>
-You have a persistent memory system at .codebuddy/CODEBUDDY_MEMORY.md (project-scoped) and ~/.codebuddy/memory.md (user-scoped, all projects). Use the \`remember\` tool to save facts that will be useful in future sessions.
+You have a persistent memory system at .codebuddy/CODEBUDDY_MEMORY.md (project-scoped) and ~/.codebuddy/memory.md (user-scoped, all projects).
+${memoryWriteInstruction}
 
 When to call \`remember\`:
+- The user explicitly says to remember/store a fact or preference
+- The user directly corrects an existing stable fact
+
+${inferredFactInstruction}
 - User preferences ("user prefers single quotes", "always use Vitest, not Jest")
 - Architectural decisions ("API uses JWT in HttpOnly cookies, not localStorage")
 - Non-obvious gotchas ("vi.hoisted() needed for mock factories in this repo")
@@ -388,7 +428,7 @@ Format:
 - \`scope\`: \`project\` (default — fact is specific to THIS repo) or \`user\` (preference across all projects)
 - \`category\`: \`preferences\`, \`decisions\`, \`patterns\`, \`project\`, or \`custom\`
 
-Call \`remember\` proactively when you learn something worth remembering — don't wait for the user to ask.
+${closingMemoryInstruction}
 </auto_memory_directive>`;
                 logger.debug('Injected auto-memory directive into system prompt');
             }
@@ -642,6 +682,7 @@ export function gatesForComplexity(complexity) {
                 includeWritingRules: true,
                 includeCodingStyle: false,
                 includeWorkflowRules: false,
+                includeExecutionDiscipline: false,
                 includeVariation: false,
             };
         case 'simple':

package/dist/shared/engine-types.d.ts

@@ -7,7 +7,7 @@
  *
  * @module shared/engine-types
  */
-export type EngineStreamEventType = 'content' | 'thinking' | 'tool_start' | 'tool_end' | 'tool_stream' | 'token_count' | 'cost' | 'done' | 'error' | 'ask_user' | 'plan_progress' | 'diff_preview';
+export type EngineStreamEventType = 'content' | 'thinking' | 'tool_start' | 'tool_end' | 'tool_stream' | 'token_count' | 'cost' | 'done' | 'error' | 'ask_user' | 'plan_progress' | 'steer' | 'diff_preview' | 'goal_status';
 export interface EngineStreamEvent {
     type: EngineStreamEventType;
     /** Incremental text delta */
@@ -47,6 +47,11 @@ export interface EngineStreamEvent {
         completed: number;
         message?: string;
     };
+    /** User guidance delivered to an active run. */
+    steer?: {
+        content: string;
+        source: string;
+    };
     /** Diff preview */
     diffPreview?: {
         turnId: number;
@@ -59,6 +64,15 @@ export interface EngineStreamEvent {
         }>;
         plan?: string;
     };
+    /** Autonomous goal-loop progress (for host UIs like the Cowork goal banner). */
+    goalStatus?: {
+        goal: string;
+        status: 'active' | 'paused' | 'done' | 'cleared';
+        turnsUsed: number;
+        maxTurns: number;
+        lastVerdict?: 'done' | 'continue' | 'skipped';
+        lastReason?: string;
+    };
 }
 export interface EngineMessage {
     role: 'user' | 'assistant' | 'system';

package/dist/sidecar/sidecar-bridge.d.ts

@@ -46,6 +46,7 @@ export declare class SidecarBridge {
      * Find the sidecar binary
      */
     private findBinary;
+    private isExecutableCandidate;
     /**
      * Check if sidecar is available
      */

package/dist/sidecar/sidecar-bridge.js

@@ -11,7 +11,7 @@
 import { spawn } from 'child_process';
 import { createInterface } from 'readline';
 import { join } from 'path';
-import { existsSync } from 'fs';
+import { accessSync, constants, existsSync } from 'fs';
 import { logger } from '../utils/logger.js';
 // ============================================================================
 // Sidecar Bridge
@@ -27,23 +27,34 @@ export class SidecarBridge {
      * Find the sidecar binary
      */
     findBinary() {
+        const localBinary = process.platform === 'win32' ? 'codebuddy-sidecar.exe' : 'codebuddy-sidecar';
         const candidates = [
             // Development: built via `cargo build`
-            join(process.cwd(), 'src-sidecar', 'target', 'release', 'codebuddy-sidecar.exe'),
-            join(process.cwd(), 'src-sidecar', 'target', 'release', 'codebuddy-sidecar'),
-            join(process.cwd(), 'src-sidecar', 'target', 'debug', 'codebuddy-sidecar.exe'),
-            join(process.cwd(), 'src-sidecar', 'target', 'debug', 'codebuddy-sidecar'),
+            join(process.cwd(), 'src-sidecar', 'target', 'release', localBinary),
+            join(process.cwd(), 'src-sidecar', 'target', 'debug', localBinary),
             // Installed globally
-            join(process.env.HOME || process.env.USERPROFILE || '', '.cargo', 'bin', 'codebuddy-sidecar.exe'),
-            join(process.env.HOME || process.env.USERPROFILE || '', '.cargo', 'bin', 'codebuddy-sidecar'),
+            join(process.env.HOME || process.env.USERPROFILE || '', '.cargo', 'bin', localBinary),
         ];
-        for (const path of candidates) {
-            if (existsSync(path)) {
-                return path;
+        for (const candidate of candidates) {
+            if (this.isExecutableCandidate(candidate)) {
+                return candidate;
             }
         }
         return null;
     }
+    isExecutableCandidate(filePath) {
+        if (!existsSync(filePath))
+            return false;
+        if (process.platform === 'win32')
+            return true;
+        try {
+            accessSync(filePath, constants.X_OK);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
     /**
      * Check if sidecar is available
      */

package/dist/spec/spec-store.js

@@ -58,6 +58,7 @@ export class SpecTransitionError extends Error {
 // Singleton registry (one store per working directory)
 // ============================================================================
 const registry = new Map();
+let lastStoryCreatedAt = 0;
 export function getSpecStore(workDir = process.cwd()) {
     const key = path.resolve(workDir);
     if (!registry.has(key)) {
@@ -73,6 +74,7 @@ export function getSpecStore(workDir = process.cwd()) {
 /** Test helper: drop cached store instances. */
 export function resetSpecStores() {
     registry.clear();
+    lastStoryCreatedAt = 0;
 }
 /** Whether `from → to` is a legal story status transition. */
 export function isLegalTransition(from, to) {
@@ -211,7 +213,7 @@ export class SpecStore {
         const title = (input.title ?? '').trim();
         if (!title)
             throw new Error('Story title is required.');
-        const now = Date.now();
+        const now = nextStoryCreatedAt();
         const allowedPaths = cleanList(input.allowedPaths);
         const verification = cleanList(input.verification);
         const story = {
@@ -479,6 +481,11 @@ function parseFrontmatter(content) {
 function randomId() {
     return `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 7)}`;
 }
+function nextStoryCreatedAt() {
+    const now = Date.now();
+    lastStoryCreatedAt = now > lastStoryCreatedAt ? now : lastStoryCreatedAt + 1;
+    return lastStoryCreatedAt;
+}
 /** Trim, drop blanks, and de-duplicate a string list (used for contract fields). */
 function cleanList(values) {
     if (!Array.isArray(values))

package/dist/talk-mode/providers/audioreader-tts.d.ts

@@ -1,7 +1,7 @@
 /**
  * AudioReader TTS Provider
  *
- * Uses a local AudioReader API (Kokoro-82M engine) for high-quality,
+ * Uses a local AudioReader API for high-quality,
  * free text-to-speech synthesis via an OpenAI-compatible REST API.
  */
 import type { TTSProviderConfig, Voice, SynthesisOptions, SynthesisResult } from '../types.js';

package/dist/talk-mode/providers/audioreader-tts.js

@@ -1,14 +1,14 @@
 /**
  * AudioReader TTS Provider
  *
- * Uses a local AudioReader API (Kokoro-82M engine) for high-quality,
+ * Uses a local AudioReader API for high-quality,
  * free text-to-speech synthesis via an OpenAI-compatible REST API.
  */
 const DEFAULT_BASE_URL = 'http://localhost:8000';
-const DEFAULT_MODEL = 'kokoro';
+const DEFAULT_MODEL = 'audioreader';
 const DEFAULT_VOICE = 'ff_siwis';
-/** Known Kokoro voices with metadata */
-const KOKORO_VOICES = {
+/** Known AudioReader voices with metadata */
+const AUDIOREADER_VOICES = {
     ff_siwis: { name: 'Siwis', language: 'fr-FR', gender: 'female' },
     af_bella: { name: 'Bella', language: 'en-US', gender: 'female' },
     af_heart: { name: 'Heart', language: 'en-US', gender: 'female' },
@@ -20,7 +20,7 @@ const KOKORO_VOICES = {
     bf_emma: { name: 'Emma', language: 'en-GB', gender: 'female' },
     bm_george: { name: 'George', language: 'en-GB', gender: 'male' },
 };
-/** OpenAI voice name to Kokoro voice mapping */
+/** OpenAI voice name to AudioReader voice mapping */
 const OPENAI_VOICE_MAP = {
     alloy: 'af_bella',
     echo: 'am_adam',
@@ -74,7 +74,7 @@ export class AudioReaderTTSProvider {
         catch {
             // Fall back to known voices
         }
-        return Object.keys(KOKORO_VOICES).map(id => this.buildVoice(id));
+        return Object.keys(AUDIOREADER_VOICES).map(id => this.buildVoice(id));
     }
     async synthesize(text, options) {
         if (!this.initialized) {
@@ -131,11 +131,11 @@ export class AudioReaderTTSProvider {
         return voice;
     }
     buildVoice(id) {
-        const meta = KOKORO_VOICES[id];
+        const meta = AUDIOREADER_VOICES[id];
         return {
             id: `audioreader-${id}`,
             name: meta?.name ?? id,
-            description: `AudioReader Kokoro voice - ${meta?.name ?? id}`,
+            description: `AudioReader voice - ${meta?.name ?? id}`,
             language: meta?.language ?? 'en-US',
             gender: meta?.gender ?? 'female',
             provider: 'audioreader',

package/dist/templates/project-scaffolding.js

@@ -12,6 +12,7 @@ import * as path from 'path';
 import { existsSync } from 'fs';
 import { EventEmitter } from 'events';
 import { spawn } from 'child_process';
+import { performance } from 'perf_hooks';
 // ============================================================================
 // Built-in Templates
 // ============================================================================
@@ -641,7 +642,7 @@ export class TemplateEngine extends EventEmitter {
      * Generate project from template
      */
     async generate(options) {
-        const startTime = Date.now();
+        const startTime = performance.now();
         const warnings = [];
         const filesCreated = [];
         // Get template
@@ -737,7 +738,7 @@ export class TemplateEngine extends EventEmitter {
             success: true,
             projectPath,
             filesCreated,
-            duration: Date.now() - startTime,
+            duration: Math.max(1, Math.ceil(performance.now() - startTime)),
             warnings,
             nextSteps,
         };