diff --git a/.beads/issues.jsonl b/.beads/issues.jsonl
index 2900e188..f907337c 100644
--- a/.beads/issues.jsonl
+++ b/.beads/issues.jsonl
@@ -91,8 +91,8 @@
 {"id":"ge-hch.3.4.7","title":"Docs+CI: validate-story workflow \u0026 usage","status":"open","priority":2,"issue_type":"chore","assignee":"Ship","created_at":"2026-01-08T02:21:24.685539352-08:00","created_by":"rgardler","updated_at":"2026-01-11T22:22:37.152625606-08:00","dependencies":[{"issue_id":"ge-hch.3.4.7","depends_on_id":"ge-hch.3.4","type":"parent-child","created_at":"2026-01-08T02:21:24.686292195-08:00","created_by":"rgardler"}],"comments":[{"id":51,"issue_id":"ge-hch.3.4.7","author":"rgardler","text":"Draft CI workflow added at .github/workflows/validate-story.yml to run scripts/validate-story.js on web/stories/**/*.ink. This will run on PRs changing stories or the CLI and on pushes to main. Assign Ship for review/approval of CI policy.","created_at":"2026-01-12T06:22:35Z"},{"id":52,"issue_id":"ge-hch.3.4.7","author":"rgardler","text":"","created_at":"2026-01-12T06:22:53Z"}]}
 {"id":"ge-hch.3.5","title":"Implement: package.json scripts (start/build/validate/test)","description":"Add npm scripts to run dev server, build static output, run validate-story, and run tests.\\n\\n## Acceptance Criteria\\n- package.json scripts: start, build, validate-story, test are present.\\n- Docs updated with commands.\\n","status":"closed","priority":2,"issue_type":"task","assignee":"patch","created_at":"2026-01-07T19:42:53.712420193-08:00","created_by":"rgardler","updated_at":"2026-01-13T20:06:15.870738971-08:00","closed_at":"2026-01-13T20:06:15.870738971-08:00","close_reason":"Implemented scripts and verified locally","dependencies":[{"issue_id":"ge-hch.3.5","depends_on_id":"ge-hch.3","type":"parent-child","created_at":"2026-01-07T19:42:53.713310043-08:00","created_by":"rgardler"}],"comments":[{"id":79,"issue_id":"ge-hch.3.5","author":"rgardler","text":"Audit: ge-hch.3.5 — Implement package.json scripts (start/build/validate/test)\n\nSummary\n- Goal: Ensure package.json contains scripts: start (serve), build, validate-story, test (unit + demo), and docs updated with commands.\n- Result: Acceptance criteria met. package.json contains serve-demo, build, validate-story, test, test:unit, test:demo. docs/InkJS_README.md documents running the demo, validate command, and test commands.\n- Verification: validate-story and full test suite (unit + Playwright demo) ran locally and passed.\n\nFiles verified/edited\n- package.json (scripts added)\n- docs/InkJS_README.md (updated with run/test/validate instructions)\n\nCommands executed (for audit)\n1. Validate stable story (parse + smoke):\n   node scripts/validate-story.js web/stories/demo.ink --output json --max-steps 2000\n   Output (summary):\n   - demo.ink: pass=true, steps=21, rotationOpportunity=true\n   - test.ink: pass=true, steps=4\n\n2. Unit tests (Jest):\n   npm run test:unit\n   Output (summary):\n   - Test Suites: 4 passed, 4 total\n   - Tests: 21 passed, 21 total\n\n3. Demo Playwright tests (smoke):\n   npm run test:demo\n   Output (summary):\n   - Playwright: 10 tests run, 9 passed, 1 skipped\n   - JUnit xml produced; html report produced in playwright-report/\n\nNotes / Observations\n- package.json contains these scripts:\n  - \"serve-demo\": \"http-server web\"\n  - \"build\": \"echo 'no-op build'\"\n  - \"validate-story\": \"node scripts/validate-story.js --glob \\\"web/stories/**/*.ink\\\" --output json --max-steps 2000\"\n  - \"test\": \"npm run test:unit \u0026\u0026 npm run test:demo\"\n  - \"test:unit\": \"jest\"\n  - \"test:demo\": \"start-server-and-test \\\"npm run serve-demo -- --port 4173\\\" http://127.0.0.1:4173/demo \\\"npx playwright test --config=playwright.config.ts --reporter=list,html,junit\\\"\"\n\n- docs/InkJS_README.md includes instructions to run the demo, the validate-story command, and test instructions (see 'Testing' section).\n\nRecommendation / next steps\n- Close ge-hch.3.5 as acceptance criteria are satisfied.\n- No further follow-ups required unless you want separate scripts (e.g., explicit \"start\" alias) or additional CI hooks.\n\nActor: Build\n","created_at":"2026-01-14T04:06:13Z"}]}
 {"id":"ge-hch.3.6","title":"CI: Build + validate + Playwright (PR)","description":"Update CI workflows to run: npm build, scripts/validate-story against web/stories, package artifact, run Playwright E2E tests against built artifact, and (optionally) deploy to GitHub Pages on merge.\\n\\n## Acceptance Criteria\\n- .github/workflows/pr-ci.yml updated/added to run build + validate + Playwright on PRs.\\n- CI artifacts archived for Playwright runs and GitHub Pages deploy.\\n","status":"closed","priority":2,"issue_type":"task","assignee":"Ship","created_at":"2026-01-07T19:45:40.535363424-08:00","created_by":"rgardler","updated_at":"2026-01-13T20:03:54.107326073-08:00","closed_at":"2026-01-13T20:03:54.107326073-08:00","close_reason":"Merged PR #126; branch deletion requested","dependencies":[{"issue_id":"ge-hch.3.6","depends_on_id":"ge-hch.3","type":"parent-child","created_at":"2026-01-07T19:45:40.539250533-08:00","created_by":"rgardler"},{"issue_id":"ge-hch.3.6","depends_on_id":"ge-hch.3.5","type":"blocks","created_at":"2026-01-07T19:45:58.315417759-08:00","created_by":"rgardler"},{"issue_id":"ge-hch.3.6","depends_on_id":"ge-hch.3.4","type":"blocks","created_at":"2026-01-07T19:46:00.441977661-08:00","created_by":"rgardler"},{"issue_id":"ge-hch.3.6","depends_on_id":"ge-hch.3.3","type":"blocks","created_at":"2026-01-07T19:46:03.024294382-08:00","created_by":"rgardler"}],"comments":[{"id":76,"issue_id":"ge-hch.3.6","author":"rgardler","text":"Files changed:\\n- .github/workflows/pr-ci.yml\\n- package.json\\n\\nCommands run and outputs:\\n1) node scripts/validate-story.js web/stories/demo.ink --output json --max-steps 2000\u003csee logs/validate-demo.out in repo/logs\u003e\\n\\n2) npm test -- --runInBand\u003csee logs/test-summary.out in repo/logs\u003e\\n","created_at":"2026-01-14T03:48:10Z"},{"id":77,"issue_id":"ge-hch.3.6","author":"rgardler","text":"PR: https://github.com/TheWizardsCode/GEngine/pull/126\n\nFiles changed:\n- .github/workflows/pr-ci.yml\n- playwright.config.ts\n- package.json\n\nSummary:\nAdded Playwright junit reporter and upload steps to PR CI workflow. Playwright now writes HTML report to `playwright-report/` and JUnit XML to `junit-report.xml`. CI uploads two artifacts named `playwright-html-report` and `playwright-junit`.\n\nlogs/validate-demo.out:\n\n```\n[\n  {\n    \"story\": \"/home/rgardler/projects/GEngine/web/stories/demo.ink\",\n    \"pass\": true,\n    \"steps\": 10,\n    \"path\": [\n      3,\n      1\n    ],\n    \"rotationOpportunity\": true,\n    \"exhausted\": false\n  },\n  {\n    \"story\": \"/home/rgardler/projects/GEngine/web/stories/test.ink\",\n    \"pass\": true,\n    \"steps\": 4,\n    \"path\": [\n      0\n    ],\n    \"rotationOpportunity\": true,\n    \"exhausted\": false\n  }\n]\n\nlogs/test-playwright.out (trimmed summary):\n\n\n\u003e gengine-demo@0.1.0 test:demo\n\u003e start-server-and-test \"npm run serve-demo -- --port 4173\" http://127.0.0.1:4173/demo \"npx playwright test --config=playwright.config.ts --reporter=list,html,junit\"\n\n1: starting server using command \"npm run serve-demo -- --port 4173\"\nand when url \"[ 'http://127.0.0.1:4173/demo' ]\" is responding with HTTP status code 200\nrunning tests using command \"npx playwright test --config=playwright.config.ts --reporter=list,html,junit\"\n\n\n\u003e gengine-demo@0.1.0 serve-demo\n\u003e http-server web --port 4173\n\nStarting up http-server, serving web\n\nhttp-server version: 14.1.1\n\nhttp-server settings: \nCORS: disabled\nCache: 3600 seconds\nConnection Timeout: 120 seconds\nDirectory Listings: visible\nAutoIndex: visible\nServe GZIP Files: false\nServe Brotli Files: false\nDefault File Extension: none\n\nAvailable on:\n  http://127.0.0.1:4173\n  http://10.255.255.254:4173\n  http://192.168.188.207:4173\nHit CTRL-C to stop the server\n\n[2026-01-14T03:53:35.996Z]  \"HEAD /demo\" \"axios/1.13.2\"\n[2026-01-14T03:53:36.027Z]  \"HEAD /demo/\" \"axios/1.13.2\"\n\nRunning 10 tests using 4 workers\n\n[2026-01-14T03:53:38.198Z]  \"GET /demo/\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:38.198Z]  \"GET /demo/\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.220Z]  \"GET /demo/vendor/ink.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.223Z]  \"GET /demo/js/telemetry.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.223Z]  \"GET /demo/js/smoke.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.225Z]  \"GET /demo/js/inkrunner.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.230Z]  \"GET /demo/vendor/ink.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:38.231Z]  \"GET /demo/js/telemetry.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:38.232Z]  \"GET /demo/js/smoke.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:38.234Z]  \"GET /demo/js/inkrunner.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:38.245Z]  \"GET /demo/\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:38.246Z]  \"GET /demo/\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.258Z]  \"GET /demo/vendor/ink.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.258Z]  \"GET /demo/js/telemetry.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.258Z]  \"GET /demo/js/smoke.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.258Z]  \"GET /demo/js/inkrunner.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.260Z]  \"GET /demo/vendor/ink.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:38.261Z]  \"GET /demo/js/telemetry.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:38.262Z]  \"GET /demo/js/smoke.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:38.263Z]  \"GET /demo/js/inkrunner.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:38.420Z]  \"GET /stories/demo.ink\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.421Z]  \"GET /stories/demo.ink\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:38.526Z]  \"GET /stories/demo.ink\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:38.527Z]  \"GET /stories/demo.ink\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n  ✓   2 [chromium-desktop] › tests/demo.smoke.spec.ts:24:5 › demo loads and presents initial UI (click) (1.1s)\n[2026-01-14T03:53:39.204Z]  \"GET /demo/\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:39.225Z]  \"GET /demo/vendor/ink.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:39.225Z]  \"GET /demo/js/telemetry.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:39.226Z]  \"GET /demo/js/smoke.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:39.229Z]  \"GET /demo/js/inkrunner.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:39.286Z]  \"GET /stories/demo.ink\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n  ✓   3 [chromium-desktop] › tests/demo.telemetry.spec.ts:80:5 › emits telemetry events and triggers smoke (1.6s)\n  ✓   5 [chromium-desktop] › tests/demo.smoke.spec.ts:35:5 › choice can be selected via keyboard (594ms)\n  -   6 [chromium-desktop] › tests/demo.smoke.spec.ts:47:5 › choice can be selected via tap (touch)\n[2026-01-14T03:53:39.968Z]  \"GET /demo/\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:39.983Z]  \"GET /demo/vendor/ink.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:39.984Z]  \"GET /demo/js/telemetry.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:39.984Z]  \"GET /demo/js/smoke.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:39.984Z]  \"GET /demo/js/inkrunner.js\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n[2026-01-14T03:53:40.013Z]  \"GET /stories/demo.ink\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Safari/537.36\"\n  ✓   7 [chromium-desktop] › tests/demo.smoke.spec.ts:59:5 › choice can be selected via controller (Space key surrogate) (429ms)\n  ✓   1 [chromium-touch] › tests/demo.smoke.spec.ts:24:5 › demo loads and presents initial UI (click) (3.1s)\n[2026-01-14T03:53:41.229Z]  \"GET /demo/\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:41.240Z]  \"GET /demo/vendor/ink.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:41.240Z]  \"GET /demo/js/telemetry.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:41.241Z]  \"GET /demo/js/smoke.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:41.242Z]  \"GET /demo/js/inkrunner.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:41.433Z]  \"GET /stories/demo.ink\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n  ✓   4 [chromium-touch] › tests/demo.telemetry.spec.ts:80:5 › emits telemetry events and triggers smoke (4.3s)\n  ✓   8 [chromium-touch] › tests/demo.smoke.spec.ts:35:5 › choice can be selected via keyboard (1.3s)\n[2026-01-14T03:53:42.570Z]  \"GET /demo/\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:42.579Z]  \"GET /demo/vendor/ink.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:42.580Z]  \"GET /demo/js/telemetry.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:42.580Z]  \"GET /demo/js/smoke.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:42.583Z]  \"GET /demo/js/inkrunner.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:42.683Z]  \"GET /stories/demo.ink\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n  ✓   9 [chromium-touch] › tests/demo.smoke.spec.ts:47:5 › choice can be selected via tap (touch) (1.2s)\n[2026-01-14T03:53:43.773Z]  \"GET /demo/\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:43.786Z]  \"GET /demo/vendor/ink.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:43.788Z]  \"GET /demo/js/telemetry.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:43.788Z]  \"GET /demo/js/smoke.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:43.789Z]  \"GET /demo/js/inkrunner.js\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n[2026-01-14T03:53:43.885Z]  \"GET /stories/demo.ink\" \"Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.4 Mobile Safari/537.36\"\n  ✓  10 [chromium-touch] › tests/demo.smoke.spec.ts:59:5 › choice can be selected via controller (Space key surrogate) (1.1s)\n\n  1 skipped\n  9 passed (7.7s)\n\u003ctestsuites id=\"\" name=\"\" tests=\"10\" failures=\"0\" skipped=\"1\" errors=\"0\" time=\"7.739579000000001\"\u003e\n\u003ctestsuite name=\"demo.smoke.spec.ts\" timestamp=\"2026-01-14T03:53:37.181Z\" hostname=\"chromium-desktop\" tests=\"4\" failures=\"0\" skipped=\"1\" time=\"2.247\" errors=\"0\"\u003e\n\u003ctestcase name=\"demo loads and presents initial UI (click)\" classname=\"demo.smoke.spec.ts\" time=\"1.069\"\u003e\n\u003c/testcase\u003e\n\u003ctestcase name=\"choice can be selected via keyboard\" classname=\"demo.smoke.spec.ts\" time=\"0.594\"\u003e\n\u003c/testcase\u003e\n\u003ctestcase name=\"choice can be selected via tap (touch)\" classname=\"demo.smoke.spec.ts\" time=\"0.155\"\u003e\n\u003cproperties\u003e\n\u003cproperty name=\"skip\" value=\"Tap only for touch-enabled context\"\u003e\n\u003c/property\u003e\n\u003c/properties\u003e\n\u003cskipped\u003e\n\u003c/skipped\u003e\n\u003c/testcase\u003e\n\u003ctestcase name=\"choice can be selected via controller (Space key surrogate)\" classname=\"demo.smoke.spec.ts\" time=\"0.429\"\u003e\n\u003c/testcase\u003e\n\u003c/testsuite\u003e\n\u003ctestsuite name=\"demo.telemetry.spec.ts\" timestamp=\"2026-01-14T03:53:37.181Z\" hostname=\"chromium-desktop\" tests=\"1\" failures=\"0\" skipped=\"0\" time=\"1.641\" errors=\"0\"\u003e\n\u003ctestcase name=\"emits telemetry events and triggers smoke\" classname=\"demo.telemetry.spec.ts\" time=\"1.641\"\u003e\n\u003c/testcase\u003e\n\u003c/testsuite\u003e\n\u003ctestsuite name=\"demo.smoke.spec.ts\" timestamp=\"2026-01-14T03:53:37.181Z\" hostname=\"chromium-touch\" tests=\"4\" failures=\"0\" skipped=\"0\" time=\"6.709\" errors=\"0\"\u003e\n\u003ctestcase name=\"demo loads and presents initial UI (click)\" classname=\"demo.smoke.spec.ts\" time=\"3.11\"\u003e\n\u003c/testcase\u003e\n\u003ctestcase name=\"choice can be selected via keyboard\" classname=\"demo.smoke.spec.ts\" time=\"1.338\"\u003e\n\u003c/testcase\u003e\n\u003ctestcase name=\"choice can be selected via tap (touch)\" classname=\"demo.smoke.spec.ts\" time=\"1.183\"\u003e\n\u003c/testcase\u003e\n\u003ctestcase name=\"choice can be selected via controller (Space key surrogate)\" classname=\"demo.smoke.spec.ts\" time=\"1.078\"\u003e\n\u003c/testcase\u003e\n\u003c/testsuite\u003e\n\u003ctestsuite name=\"demo.telemetry.spec.ts\" timestamp=\"2026-01-14T03:53:37.181Z\" hostname=\"chromium-touch\" tests=\"1\" failures=\"0\" skipped=\"0\" time=\"4.268\" errors=\"0\"\u003e\n\u003ctestcase name=\"emits telemetry events and triggers smoke\" classname=\"demo.telemetry.spec.ts\" time=\"4.268\"\u003e\n\u003c/testcase\u003e\n\u003c/testsuite\u003e\n\u003c/testsuites\u003e\nhttp-server stopped.\n\n","created_at":"2026-01-14T03:54:31Z"}]}
-{"id":"ge-hch.4","title":"M1.5 — Content iteration tooling \u0026 replay regression","description":"M1.5 — Content iteration tooling \u0026 replay regression\\n\\nProvide tooling and workflows to rapidly swap stories, run replay tests (golden path), and enable fast content iteration for authors and AI content generation.\\n\\n## Success Criteria\\n- Tooling exists to replace demo story and load new stories without code changes.\\n- Automated replay harness can run and validate golden-path story completion for at least one story.\\n- Documentation for content-iteration workflow and example commands.","status":"in_progress","priority":1,"issue_type":"epic","assignee":"Build","created_at":"2026-01-07T17:24:07.829287373-08:00","created_by":"rgardler","updated_at":"2026-01-13T21:27:16.625904032-08:00","labels":["milestone"],"dependencies":[{"issue_id":"ge-hch.4","depends_on_id":"ge-hch.3","type":"blocks","created_at":"2026-01-07T17:24:30.333029896-08:00","created_by":"rgardler"}],"comments":[{"id":80,"issue_id":"ge-hch.4","author":"rgardler","text":"Created subtasks for M1.5 (content-iteration \u0026 replay)\n\nSummary of actions\n- Broke ge-hch.4 into concrete bd issues and assigned owners.\n\nIssues created (IDs \u0026 titles):\n- ge-hch.4.2 — Feature: story-swap CLI \u0026 manifest (assignee: patch)\n- ge-hch.4.3 — Feature: CI: replay gate \u0026 artifacts (assignee: ship)\n- ge-hch.4.4 — Task: golden-path automation tests (replay) (assignee: probe)\n- ge-hch.4.5 — Docs: content-iteration workflow \u0026 examples (assignee: scribbler)\n- ge-hch.4.6 — Task: sample golden-path scripts \u0026 example stories (assignee: patch)\n\nCommands executed\n- bd create \"Feature: story-swap CLI \u0026 manifest\" --parent ge-hch.4 -t feature -p 1 --assignee patch\n- bd create \"Feature: CI: replay gate \u0026 artifacts\" --parent ge-hch.4 -t feature -p 2 --assignee ship\n- bd create \"Task: golden-path automation tests (replay)\" --parent ge-hch.4 -t task -p 2 --assignee probe\n- bd create \"Docs: content-iteration workflow \u0026 examples\" --parent ge-hch.4 -t task -p 2 --assignee scribbler\n- bd create \"Task: sample golden-path scripts \u0026 example stories\" --parent ge-hch.4 -t task -p 2 --assignee patch\n\nFiles / paths referenced or expected\n- .beads/issues.jsonl (updated by bd)\n- runtime hook: scripts/replay.js (target for ge-hch.4.1)\n- scripts/validate-story.js (existing validate utility)\n- web/stories/manifest.json (proposed manifest location)\n- web/stories/golden.demo.json (golden-path choice script)\n- docs/content-iteration.md or docs/InkJS_README.md (target for docs)\n\nNotes / Risks / Follow-ups\n- Risk: CI secrets / permissions may be required for replay artifacts or hosted runners; Ship should list required secrets in ge-hch.4.3.\n- Risk: Story-swap runtime hook must remain backward-compatible; Patch should coordinate small runtime lookup change with existing dev server and validate-story script.\n- Risk: Golden-path determinism — stories must include deterministic choice indices or identifiers; Probe should design tests to be tolerant of non-deterministic content where necessary.\n\nNext steps\n- Owners (Patch/Ship/Probe/Scribbler) should comment on their assigned bd issue with an implementation plan and estimated timebox.\n- I will not mark the epic in_progress until owners confirm; please update ge-hch.4 when ready to start.\n\nActor: Build\n","created_at":"2026-01-14T05:24:33Z"},{"id":81,"issue_id":"ge-hch.4","author":"rgardler","text":"Rationale:\nWe need a headless replay harness to drive stories to completion for golden-path regression. Implementing scripts/replay.js and example golden-path scripts is the critical first step to enable automated validation and CI gating.\n\nRelated bd issues:\n- ge-hch.4 (epic)\n- ge-hch.4.1 (Tool: replay harness)\n- ge-hch.4.2 (story-swap CLI \u0026 manifest)\n- ge-hch.4.6 (sample golden-path scripts \u0026 example stories)\n\nAcceptance criteria (definition of done):\n1. scripts/replay.js exists and provides a CLI program that accepts:\n   - --story \u003cpath-to-ink-file\u003e\n   - --script \u003cpath-to-golden-json\u003e\n   - returns exit code 0 on success (story reached terminal node per script) and non-zero on failure.\n2. Format for golden JSON is documented in the script help and matches expectations used by tests (an array of choice indices or IDs).\n3. Example golden script web/stories/golden.demo.json present and demonstrates running to completion on web/stories/demo.ink.\n4. Unit or integration test(s) calling scripts/replay.js and asserting success are added (tests/replay/replay.spec.js or similar).\n5. README or docs note showing example command to run the replay harness locally.\n6. Files to create/modify are listed in the PR and linked in a bd comment.\n\nConstraints / timebox:\n- Priority: high (P1 for epic). Timebox: 48 hours recommended.\n- Keep implementation minimal and language-consistent with repo (Node.js). Avoid large refactors.\n\nDeliverables:\n- scripts/replay.js\n- web/stories/golden.demo.json\n- tests/replay/replay.spec.js\n- docs snippet (docs/content-iteration.md or README note)\n\nIf any blocking items (CI secrets, runtime API gaps) are discovered, record them on ge-hch.4.1 and notify Build.\n\nActor: Build\n","created_at":"2026-01-14T05:27:32Z"}]}
-{"id":"ge-hch.4.1","title":"Tool: replay harness (golden-path)","description":"Add a headless replay harness that can drive a story to completion using scripted choices and record results.\\n\\n## Acceptance Criteria\\n- scripts/replay.js exists and can be fed a story + choice sequence and returns success/failure.\\n- Example golden-path script present for stable demo.\\n","status":"in_progress","priority":2,"issue_type":"task","assignee":"patch","created_at":"2026-01-07T19:42:36.286010273-08:00","created_by":"rgardler","updated_at":"2026-01-13T22:05:39.257622036-08:00","external_ref":"https://github.com/TheWizardsCode/GEngine/pull/129","labels":["Status: PR Created"],"dependencies":[{"issue_id":"ge-hch.4.1","depends_on_id":"ge-hch.4","type":"parent-child","created_at":"2026-01-07T19:42:36.28684834-08:00","created_by":"rgardler"},{"issue_id":"ge-hch.4.1","depends_on_id":"ge-hch.3.5","type":"blocks","created_at":"2026-01-07T19:45:52.014164579-08:00","created_by":"rgardler"},{"issue_id":"ge-hch.4.1","depends_on_id":"ge-hch.3.4","type":"blocks","created_at":"2026-01-07T19:45:54.159316111-08:00","created_by":"rgardler"}],"comments":[{"id":82,"issue_id":"ge-hch.4.1","author":"rgardler","text":"@patch — Build requests you implement the replay harness per the attached delegation body (also attached on the parent epic). Summary: implement scripts/replay.js CLI (--story, --script) + example golden/demo script, tests (tests/replay/replay.spec.js), and a short docs snippet. Timebox: 48h. Please reply here with 'Accepted' and mark ge-hch.4.1 in_progress when you start; open a PR and add a bd comment linking the PR when ready. If you need clarifications or CI permissions, note blockers in this thread. --Actor: Build","created_at":"2026-01-14T05:28:25Z"}]}
+{"id":"ge-hch.4","title":"M1.5 — Content iteration tooling \u0026 replay regression","description":"M1.5 — Content iteration tooling \u0026 replay regression\\n\\nProvide tooling and workflows to rapidly swap stories, run replay tests (golden path), and enable fast content iteration for authors and AI content generation.\\n\\n## Success Criteria\\n- Tooling exists to replace demo story and load new stories without code changes.\\n- Automated replay harness can run and validate golden-path story completion for at least one story.\\n- Documentation for content-iteration workflow and example commands.","status":"in_progress","priority":1,"issue_type":"epic","assignee":"Build","created_at":"2026-01-07T17:24:07.829287373-08:00","created_by":"rgardler","updated_at":"2026-01-13T22:13:32.399224453-08:00","labels":["milestone"],"dependencies":[{"issue_id":"ge-hch.4","depends_on_id":"ge-hch.3","type":"blocks","created_at":"2026-01-07T17:24:30.333029896-08:00","created_by":"rgardler"}],"comments":[{"id":80,"issue_id":"ge-hch.4","author":"rgardler","text":"Created subtasks for M1.5 (content-iteration \u0026 replay)\n\nSummary of actions\n- Broke ge-hch.4 into concrete bd issues and assigned owners.\n\nIssues created (IDs \u0026 titles):\n- ge-hch.4.2 — Feature: story-swap CLI \u0026 manifest (assignee: patch)\n- ge-hch.4.3 — Feature: CI: replay gate \u0026 artifacts (assignee: ship)\n- ge-hch.4.4 — Task: golden-path automation tests (replay) (assignee: probe)\n- ge-hch.4.5 — Docs: content-iteration workflow \u0026 examples (assignee: scribbler)\n- ge-hch.4.6 — Task: sample golden-path scripts \u0026 example stories (assignee: patch)\n\nCommands executed\n- bd create \"Feature: story-swap CLI \u0026 manifest\" --parent ge-hch.4 -t feature -p 1 --assignee patch\n- bd create \"Feature: CI: replay gate \u0026 artifacts\" --parent ge-hch.4 -t feature -p 2 --assignee ship\n- bd create \"Task: golden-path automation tests (replay)\" --parent ge-hch.4 -t task -p 2 --assignee probe\n- bd create \"Docs: content-iteration workflow \u0026 examples\" --parent ge-hch.4 -t task -p 2 --assignee scribbler\n- bd create \"Task: sample golden-path scripts \u0026 example stories\" --parent ge-hch.4 -t task -p 2 --assignee patch\n\nFiles / paths referenced or expected\n- .beads/issues.jsonl (updated by bd)\n- runtime hook: scripts/replay.js (target for ge-hch.4.1)\n- scripts/validate-story.js (existing validate utility)\n- web/stories/manifest.json (proposed manifest location)\n- web/stories/golden.demo.json (golden-path choice script)\n- docs/content-iteration.md or docs/InkJS_README.md (target for docs)\n\nNotes / Risks / Follow-ups\n- Risk: CI secrets / permissions may be required for replay artifacts or hosted runners; Ship should list required secrets in ge-hch.4.3.\n- Risk: Story-swap runtime hook must remain backward-compatible; Patch should coordinate small runtime lookup change with existing dev server and validate-story script.\n- Risk: Golden-path determinism — stories must include deterministic choice indices or identifiers; Probe should design tests to be tolerant of non-deterministic content where necessary.\n\nNext steps\n- Owners (Patch/Ship/Probe/Scribbler) should comment on their assigned bd issue with an implementation plan and estimated timebox.\n- I will not mark the epic in_progress until owners confirm; please update ge-hch.4 when ready to start.\n\nActor: Build\n","created_at":"2026-01-14T05:24:33Z"},{"id":81,"issue_id":"ge-hch.4","author":"rgardler","text":"Rationale:\nWe need a headless replay harness to drive stories to completion for golden-path regression. Implementing scripts/replay.js and example golden-path scripts is the critical first step to enable automated validation and CI gating.\n\nRelated bd issues:\n- ge-hch.4 (epic)\n- ge-hch.4.1 (Tool: replay harness)\n- ge-hch.4.2 (story-swap CLI \u0026 manifest)\n- ge-hch.4.6 (sample golden-path scripts \u0026 example stories)\n\nAcceptance criteria (definition of done):\n1. scripts/replay.js exists and provides a CLI program that accepts:\n   - --story \u003cpath-to-ink-file\u003e\n   - --script \u003cpath-to-golden-json\u003e\n   - returns exit code 0 on success (story reached terminal node per script) and non-zero on failure.\n2. Format for golden JSON is documented in the script help and matches expectations used by tests (an array of choice indices or IDs).\n3. Example golden script web/stories/golden.demo.json present and demonstrates running to completion on web/stories/demo.ink.\n4. Unit or integration test(s) calling scripts/replay.js and asserting success are added (tests/replay/replay.spec.js or similar).\n5. README or docs note showing example command to run the replay harness locally.\n6. Files to create/modify are listed in the PR and linked in a bd comment.\n\nConstraints / timebox:\n- Priority: high (P1 for epic). Timebox: 48 hours recommended.\n- Keep implementation minimal and language-consistent with repo (Node.js). Avoid large refactors.\n\nDeliverables:\n- scripts/replay.js\n- web/stories/golden.demo.json\n- tests/replay/replay.spec.js\n- docs snippet (docs/content-iteration.md or README note)\n\nIf any blocking items (CI secrets, runtime API gaps) are discovered, record them on ge-hch.4.1 and notify Build.\n\nActor: Build\n","created_at":"2026-01-14T05:27:32Z"}]}
+{"id":"ge-hch.4.1","title":"Tool: replay harness (golden-path)","description":"Add a headless replay harness that can drive a story to completion using scripted choices and record results.\\n\\n## Acceptance Criteria\\n- scripts/replay.js exists and can be fed a story + choice sequence and returns success/failure.\\n- Example golden-path script present for stable demo.\\n","status":"in_progress","priority":2,"issue_type":"task","assignee":"patch","created_at":"2026-01-07T19:42:36.286010273-08:00","created_by":"rgardler","updated_at":"2026-01-13T22:13:29.759908876-08:00","external_ref":"https://github.com/TheWizardsCode/GEngine/pull/129","labels":["Status: PR Created"],"dependencies":[{"issue_id":"ge-hch.4.1","depends_on_id":"ge-hch.4","type":"parent-child","created_at":"2026-01-07T19:42:36.28684834-08:00","created_by":"rgardler"},{"issue_id":"ge-hch.4.1","depends_on_id":"ge-hch.3.5","type":"blocks","created_at":"2026-01-07T19:45:52.014164579-08:00","created_by":"rgardler"},{"issue_id":"ge-hch.4.1","depends_on_id":"ge-hch.3.4","type":"blocks","created_at":"2026-01-07T19:45:54.159316111-08:00","created_by":"rgardler"}],"comments":[{"id":82,"issue_id":"ge-hch.4.1","author":"rgardler","text":"@patch — Build requests you implement the replay harness per the attached delegation body (also attached on the parent epic). Summary: implement scripts/replay.js CLI (--story, --script) + example golden/demo script, tests (tests/replay/replay.spec.js), and a short docs snippet. Timebox: 48h. Please reply here with 'Accepted' and mark ge-hch.4.1 in_progress when you start; open a PR and add a bd comment linking the PR when ready. If you need clarifications or CI permissions, note blockers in this thread. --Actor: Build","created_at":"2026-01-14T05:28:25Z"}]}
 {"id":"ge-hch.4.2","title":"Feature: story-swap CLI \u0026 manifest","status":"open","priority":1,"issue_type":"feature","assignee":"patch","created_at":"2026-01-13T21:23:40.905924671-08:00","created_by":"rgardler","updated_at":"2026-01-13T21:23:40.905924671-08:00","dependencies":[{"issue_id":"ge-hch.4.2","depends_on_id":"ge-hch.4","type":"parent-child","created_at":"2026-01-13T21:23:40.90727509-08:00","created_by":"rgardler"}]}
 {"id":"ge-hch.4.3","title":"Feature: CI: replay gate \u0026 artifacts","status":"open","priority":2,"issue_type":"feature","assignee":"ship","created_at":"2026-01-13T21:23:40.963315998-08:00","created_by":"rgardler","updated_at":"2026-01-13T21:23:40.963315998-08:00","dependencies":[{"issue_id":"ge-hch.4.3","depends_on_id":"ge-hch.4","type":"parent-child","created_at":"2026-01-13T21:23:40.964300013-08:00","created_by":"rgardler"}]}
 {"id":"ge-hch.4.4","title":"Task: golden-path automation tests (replay)","status":"open","priority":2,"issue_type":"task","assignee":"probe","created_at":"2026-01-13T21:23:41.012895912-08:00","created_by":"rgardler","updated_at":"2026-01-13T21:23:41.012895912-08:00","dependencies":[{"issue_id":"ge-hch.4.4","depends_on_id":"ge-hch.4","type":"parent-child","created_at":"2026-01-13T21:23:41.01352695-08:00","created_by":"rgardler"}]}
@@ -113,5 +113,5 @@
 {"id":"ge-nzz","title":"Make root README InkJS-only","description":"Remove Unity references from the root README.md and focus it on InkJS/web demo usage and tests.","status":"closed","priority":1,"issue_type":"task","created_at":"2026-01-06T15:12:16.621516991-08:00","created_by":"rgardler","updated_at":"2026-01-06T15:13:37.065401561-08:00","closed_at":"2026-01-06T15:13:37.065401561-08:00","close_reason":"Done"}
 {"id":"ge-osd","title":"Restore original demo story for smoke tests","status":"closed","priority":1,"issue_type":"bug","created_at":"2026-01-06T22:09:37.056596959-08:00","created_by":"rgardler","updated_at":"2026-01-06T22:10:00.371743266-08:00","closed_at":"2026-01-06T22:10:00.371743266-08:00","close_reason":"Done","comments":[{"id":1,"issue_id":"ge-osd","author":"rgardler","text":"Fixed smoke tests broken by demo story changes by adding web/stories/test.ink (pre-903f044 demo story) and routing /stories/demo.ink to that file in Playwright.\n\nChanges:\n- web/stories/test.ink\n- tests/demo.smoke.spec.ts\n\nCommands:\n- npm test","created_at":"2026-01-07T06:09:54Z"}]}
 {"id":"ge-s2q","title":"Implement: web/demo skeleton (InkJS integration)","status":"closed","priority":1,"issue_type":"task","created_at":"2026-01-05T23:10:10.569697121-08:00","created_by":"rgardler","updated_at":"2026-01-06T02:46:13.725365368-08:00","closed_at":"2026-01-06T02:46:13.725374498-08:00","dependencies":[{"issue_id":"ge-s2q","depends_on_id":"ge-hch.1.2.2","type":"discovered-from","created_at":"2026-01-05T23:10:10.574207891-08:00","created_by":"rgardler"}]}
-{"id":"ge-urs","title":"Make all agents have wider default permissions, deny rather than allow","status":"closed","priority":0,"issue_type":"task","assignee":"forge","created_at":"2026-01-13T20:20:28.139994108-08:00","created_by":"rgardler","updated_at":"2026-01-13T21:13:57.734908481-08:00","closed_at":"2026-01-13T21:13:57.734908481-08:00","close_reason":"Merged PR #128: allow-by-default policy applied; destructive commands set to ask"}
+{"id":"ge-urs","title":"Make all agents have wider default permissions, deny rather than allow","status":"open","priority":0,"issue_type":"task","assignee":"forge","created_at":"2026-01-13T20:20:28.139994108-08:00","created_by":"rgardler","updated_at":"2026-01-13T22:16:24.330692374-08:00","comments":[{"id":83,"issue_id":"ge-urs","author":"rgardler","text":"Rationale:\n- ge-urs was merged but some agent files (e.g., .opencode/agent/patch.md) still have permissive or missing deny-by-default entries. We need a consistent, conservative permission set across all .opencode/agent/*.md files.\n\nScope:\n- Inspect all files under .opencode/agent/*.md and ensure each has a permission block that follows the deny-by-default template (no blanket \"*\": allow for bash). Update patch.md and any other agents missing the template.\n\nAcceptance criteria (Definition of Done):\n1. All files under .opencode/agent/*.md include a permissive/deny-by-default permission section matching the standard template found in .opencode/agent/forge.md.\n2. No file contains a wildcard \"*\": allow for bash or equivalent permissive entries.\n3. Add or update .opencode/agent/PERMISSIONS.md describing the template and a short rationale.\n4. Create scripts/check-agent-permissions.sh that exits non-zero if any .opencode/agent/*.md contains a wildcard allow entry.\n5. Open a PR from branch feature/ge-urs-complete-agent-perms with changes, include bd comment linking the PR, and request review from @forge and @rgardler.\n\nConstraints \u0026 timebox:\n- Timebox: 48 hours. Priority: high.\n- Only edit .opencode/agent/*.md, .opencode/agent/PERMISSIONS.md, and scripts/check-agent-permissions.sh. Do not modify CI workflows or other code without Producer approval.\n\nDeliverables:\n- PR URL (in bd comment) with changes.\n- bd comment on ge-urs noting files changed, commands run, and verification steps.\n\nRelated issues:\n- ge-urs (this issue)\n\nActor: Build\n","created_at":"2026-01-14T06:16:19Z"},{"id":84,"issue_id":"ge-urs","author":"rgardler","text":"Rationale:\n- ge-urs was merged but some agent files (e.g., .opencode/agent/patch.md) still have permissive or missing deny-by-default entries. We need a consistent, conservative permission set across all .opencode/agent/*.md files.\n\nScope:\n- Inspect all files under .opencode/agent/*.md and ensure each has a permission block that follows the deny-by-default template (no blanket \"*\": allow for bash). Update patch.md and any other agents missing the template.\n\nAcceptance criteria (Definition of Done):\n1. All files under .opencode/agent/*.md include a permissive/deny-by-default permission section matching the standard template found in .opencode/agent/forge.md.\n2. No file contains a wildcard \"*\": allow for bash or equivalent permissive entries.\n3. Add or update .opencode/agent/PERMISSIONS.md describing the template and a short rationale.\n4. Create scripts/check-agent-permissions.sh that exits non-zero if any .opencode/agent/*.md contains a wildcard allow entry.\n5. Open a PR from branch feature/ge-urs-complete-agent-perms with changes, include bd comment linking the PR, and request review from @forge and @rgardler.\n\nConstraints \u0026 timebox:\n- Timebox: 48 hours. Priority: high.\n- Only edit .opencode/agent/*.md, .opencode/agent/PERMISSIONS.md, and scripts/check-agent-permissions.sh. Do not modify CI workflows or other code without Producer approval.\n\nDeliverables:\n- PR URL (in bd comment) with changes.\n- bd comment on ge-urs noting files changed, commands run, and verification steps.\n\nRelated issues:\n- ge-urs (this issue)\n\nActor: Build\n","created_at":"2026-01-14T06:16:22Z"},{"id":85,"issue_id":"ge-urs","author":"rgardler","text":"@patch — Please take ownership of completing ge-urs for the agent permission updates.\n\nScope (please implement):\n- Update .opencode/agent/patch.md so its permission block follows the deny-by-default template (see .opencode/agent/forge.md for canonical example).\n- If you find other agents missing the deny-by-default entry, you may update only .opencode/agent/patch.md OR notify Build in this thread if you prefer to update multiple agent files (we can reassign or coordinate).\n\nAcceptance criteria (Definition of Done):\n1. .opencode/agent/patch.md contains a permission block without a wildcard \"*\": allow and follows the template used in forge.md (dangerous commands set to ask, general actions denied unless explicit).\n2. Create or update .opencode/agent/PERMISSIONS.md with a one-paragraph rationale and the template (if it does not already exist).\n3. If you change any files, open a PR from a feature branch (e.g., feature/ge-urs-complete-patch) with the changes and add a bd comment linking the PR. Include files changed in the bd comment.\n4. Reply here with \"Accepted\" and an ETA, or state blockers if you cannot accept.\n\nConstraints \u0026 timebox:\n- Do not edit CI workflows or other unrelated files without Producer approval.\n- Timebox: 48 hours.\n\nActor: Build (requesting)\n","created_at":"2026-01-14T06:19:34Z"}]}
 {"id":"ge-wdm","title":"refactor(validate-demo): investigate skipped Playwright demo test","status":"open","priority":2,"issue_type":"task","assignee":"probe","created_at":"2026-01-12T00:34:02.866687423-08:00","created_by":"rgardler","updated_at":"2026-01-12T01:40:58.069109467-08:00","labels":["refactor"],"comments":[{"id":66,"issue_id":"ge-wdm","author":"rgardler","text":"Diagnostics (Probe): Playwright demo smoke suite currently fails locally because server is not started; page.goto http://127.0.0.1:4173/demo/ =\u003e ERR_CONNECTION_REFUSED for all tests. Command: npx playwright test tests/demo.smoke.spec.ts --reporter=list. Skip behavior: test 'choice can be selected via tap (touch)' includes test.skip when context lacks hasTouch; in this run hasTouch=true for chromium-touch project so it attempted and failed for same server reason, not skipped. Need to start dev server (e.g., npm run dev or npm run preview) with baseURL 4173 or use webServer in Playwright config. To repro skip, run chromium-desktop only or context with hasTouch=false; otherwise it runs. Next steps: add webServer to config or document pre-req; re-run with server active.","created_at":"2026-01-12T09:46:35Z"}]}
diff --git a/.opencode/agent/build.md b/.opencode/agent/build.md
index 764145f7..32a69c5a 100644
--- a/.opencode/agent/build.md
+++ b/.opencode/agent/build.md
@@ -33,7 +33,7 @@ Workflow:
 - When work requires execution by another agent, use the repository opencode "delegate" command to create a structured delegation (preferred) rather than a freeform bd comment. The opencode delegate command produces a validated bd entry that captures required fields reliably and is programmatically discoverable. Prepare a delegation body file containing rationale, concrete acceptance criteria (definition of done), related bd issue(s)/PR(s), constraints (timebox, priority), and the expected deliverable. Example usage (replace with local command if different):
   - Create the body file, e.g. /tmp/delegate-ge-hch.3.2.md with the required fields.
   - Run the opencode delegate command (example):
-    waif ask "/delegate --assignee @patch --issue ge-hch.3 --timebox 48h --body-file /tmp/delegate-ge-hch.3.2.md"
+    /delegate --assignee @patch --issue ge-hch.3 --timebox 48h --body-file /tmp/delegate-ge-hch.3.2.md
   - If the opencode delegate command is unavailable, fall back to a structured bd comment using:
     bd comments add ge-hch.3 --file /tmp/delegate-ge-hch.3.2.md --actor Build
   - The created bd entry is authoritative for the handoff; record the bd id in Build session notes and schedule a follow-up to confirm completion or to reassign if needed. Choose the target agent according to docs/dev/team.md and prefer least-privilege assignments.
diff --git a/.opencode/agent/forge.md b/.opencode/agent/forge.md
index 75dde9a6..d9da4547 100644
--- a/.opencode/agent/forge.md
+++ b/.opencode/agent/forge.md
@@ -30,7 +30,7 @@ Workflow:
 - Start by reviewing `README.md`, `AGENTS.md`, and `bd` context for the requested change; confirm existing agent scopes before editing.
 - For each agent, minimize granted tools/permissions, rewrite narrative sections to match the standard template, and validate YAML structure.
 - After edits, compare against prior definitions with `git diff` and summarize adjustments plus open questions for the Producer in bd or the session report, explicitly listing commands executed, files/doc paths touched (including `history/` artifacts), and remaining risks/follow-ups.
-- When a defined change requires execution or verification by another agent, use a `/delegate @agent-name` bd comment or task. The `/delegate` must include: a short rationale for the handoff, concrete acceptance criteria, related bd issue(s) or PR(s), any constraints (timebox, priority), and the expected deliverable. Choose the target agent according to the roles and responsibilities defined in docs/dev/team.md and prefer least-privilege assignments. Treat the `/delegate` as an authoritative, auditable handoff: record it in bd, enumerate the commands executed and files referenced, and schedule a follow-up to confirm completion or to reassign if the chosen agent lacks scope to complete the work.
+- When a defined change requires execution or verification by another agent, use the `/delegate` opencode slash command (example: `/delegate --assignee @patch --issue ge-hch.3 --timebox 48h --body-file /tmp/delegate-ge-hch.3.2.md`). The `/delegate` invocation MUST be used rather than an external wrapper. The generated bd entry is authoritative for the handoff and must include: a short rationale for the handoff, concrete acceptance criteria, related bd issue(s) or PR(s), any constraints (timebox, priority), and the expected deliverable. Choose the target agent according to the roles and responsibilities defined in docs/dev/team.md and prefer least-privilege assignments. Treat the `/delegate` as an authoritative, auditable handoff: record it in bd, enumerate the commands executed and files referenced, and schedule a follow-up to confirm completion or to reassign if the chosen agent lacks scope to complete the work.
 
 Repo rules:
 - Use `bd` for issue tracking; don’t introduce markdown TODO checklists.