docs: land ADR-0034 and the 2026-06-10 review-pass follow-ups

.github/workflows/ci.yml

@@ -104,6 +104,12 @@ jobs:
       - name: Seam fence is enforced
         run: pnpm lint:fence-check
 
+      # The size half of the fence: engine packages' runtime dependency graphs must stay
+      # within their reviewed allowlists (a new engine dep = an ADR + a deliberate edit to
+      # tools/engine-deps/check.mjs in the same change).
+      - name: Engine dependency allowlist
+        run: pnpm lint:engine-deps
+
   # CI-only strict peer-dependency gate (.npmrc keeps this OFF for local installs so fresh
   # checkouts resolve while the surface packages' peers are not all in the tree yet). Catch
   # peer drift here without breaking local dev.

.npmrc

@@ -14,3 +14,10 @@ strict-peer-dependencies=false
 # of letting a wrong runtime surface as confusing errors later. The pinned versions live in
 # `.nvmrc` (Node 22) and `package.json` `engines` (Node >=20.11.0, pnpm >=9).
 engine-strict=true
+
+# Supply-chain: install scripts run ONLY for packages on the explicit allowlist in the root
+# `package.json` `pnpm.onlyBuiltDependencies` (better-sqlite3 builds/fetches its native binding;
+# esbuild fetches its platform binary). Every other package's install/postinstall script is
+# skipped, so a compromised transitive dependency cannot execute code at install time. Growing
+# that allowlist is a deliberate, reviewed change — the install-time twin of "no new runtime
+# dependency without an ADR" (architectural-principles.md §9).

CLAUDE.md

@@ -43,7 +43,10 @@ Phase 0 (M0, 2026-06-04) landed the monorepo, strict toolchain + CI, `@relavium/
 full Zod contract set), the no-vendor-type seam fence, and `@relavium/db`. Phase 1 has since
 landed `@relavium/llm` — the `LLMProvider` seam + all three adapters (Anthropic, OpenAI/DeepSeek,
 Gemini), green on one shared conformance suite with no vendor type crossing the seam, plus the
-ADR-0030 seam-shape amendment. Active work continues on the `FallbackChain` (1.K) and the
+ADR-0030 seam-shape amendment — and the **ADR-0031 multimodal seam-shape amendment (1.AD, PR #11,
+2026-06-10)**: the media content/stream union members, the per-modality capability matrix, and the
+reserved generator methods, shape-only, landed before the seam's exhaustive consumers. Active work
+continues on the `FallbackChain` (1.K) and the
 [`@relavium/core` engine](docs/roadmap/phases/phase-1-engine-and-llm.md); see
 [docs/roadmap/current.md](docs/roadmap/current.md). See [README.md](README.md) for the public overview.
 

README.md

@@ -33,7 +33,10 @@ set), the no-vendor-type seam fence, and `@relavium/db`. Phase 1 then landed
 [`@relavium/llm`](docs/roadmap/phases/phase-1-engine-and-llm.md): the provider-agnostic
 `LLMProvider` seam and **all three adapters** (Anthropic; the OpenAI-compatible adapter serving
 OpenAI + DeepSeek; Gemini), passing one shared conformance suite behind the frozen seam with no
-vendor type crossing it (PR #7–#9). Next on the critical path: the `FallbackChain` runner (1.K)
+vendor type crossing it (PR #7–#9), followed by the **ADR-0031 multimodal seam-shape amendment
+(1.AD)** — the media content/stream union members, the per-modality capability matrix, and the
+reserved generator methods, landed **shape-only** before the seam's exhaustive consumers exist
+(PR #11, 2026-06-10). Next on the critical path: the `FallbackChain` runner (1.K)
 and the `@relavium/core` engine — parser, run loop, checkpoint/resume, retry, plus the **AgentSession**
 runtime + export-to-workflow sub-spine. See [docs/roadmap/current.md](docs/roadmap/current.md) for
 live status.

docs/analysis/README.md

@@ -16,14 +16,12 @@ It has two parts:
 
 | Document | What it is |
 |----------|-----------|
-| [competitive-landscape-2026-06-05.md](competitive-landscape-2026-06-05.md) | Competitive analysis carrying the two-entry-point thesis (agent chat + workflow): four surfaces, one runtime, two entry points, and the chat → workflow continuum. Supersedes the 2026-06-03 read after the agent-first pivot. |
-| [competitive-landscape-2026-06-03.md](competitive-landscape-2026-06-03.md) | Competitive analysis vs Claude Code, Cursor, Continue.dev, Cline/Roo-code, GitHub Copilot Agent Mode, n8n/Zapier, and CrewAI/AutoGen, with where Relavium wins. |
 | [managed-inference-business-model-2026-06-03.md](managed-inference-business-model-2026-06-03.md) | Decision analysis: BYOK vs managed inference (Relavium's own keys, metered by license). ToS/legality, competitive pricing, unit economics, gateway architecture, compliance. Led to the dual-mode decision ([ADR-0012](../decisions/0012-managed-inference-dual-mode.md)). |
 | [_archive/README.md](_archive/README.md) | Provenance map: which living docs were seeded by which frozen raw-analysis section. The archive itself is **frozen — never edited**. |
 
 ## Conventions
 
-- **Dated research** uses an ISO-date suffix: `competitive-landscape-2026-06-03.md`.
+- **Dated research** uses an ISO-date suffix: `managed-inference-business-model-2026-06-03.md`.
   When the analysis is redone, a new dated file is added rather than overwriting the old
   one — the dated trail is the point.
 - **Analysis is not a spec.** Concrete specs (schemas, contracts, DDL, node types) live

docs/analysis/_archive/README.md

@@ -73,7 +73,7 @@ This is the current-vision pivot and the **primary** source for most of the tree
 | `vscode` (7 capabilities, Model C hybrid connection, LSP design, extension API) | [reference/vscode/extension-api.md](../../reference/vscode/extension-api.md), [tutorials/vscode/trigger-from-vscode.md](../../tutorials/vscode/trigger-from-vscode.md) |
 | `cli` (null in the raw JSON — CLI facts reconstructed from `synthesis`) | [reference/cli/commands.md](../../reference/cli/commands.md), [tutorials/cli/run-a-workflow-in-ci.md](../../tutorials/cli/run-a-workflow-in-ci.md) |
 | `corePortal` (Workflow YAML Spec v1.0, complete example, engine API, plugin API, MCP, local-vs-cloud mode, portal pages) | [reference/contracts/workflow-yaml-spec.md](../../reference/contracts/workflow-yaml-spec.md), [reference/contracts/agent-yaml-spec.md](../../reference/contracts/agent-yaml-spec.md), [architecture/shared-core-engine.md](../../architecture/shared-core-engine.md), [reference/portal/api-reference.md](../../reference/portal/api-reference.md), [architecture/cloud-phase-2.md](../../architecture/cloud-phase-2.md) |
-| `strategy` (7-competitor analysis, UVP, go-to-market, workflow-as-code, pricing) | [analysis/competitive-landscape-2026-06-03.md](../competitive-landscape-2026-06-03.md), [uvp.md](../../uvp.md), [vision.md](../../vision.md) |
+| `strategy` (7-competitor analysis, UVP, go-to-market, workflow-as-code, pricing) | `competitive-landscape-2026-06-03.md` *(removed 2026-06-10; surviving framing: uvp.md)*, [uvp.md](../../uvp.md), [vision.md](../../vision.md) |
 | `synthesis` (product identity, locked tech choices, monorepo, phasing, day-one DX, killer features, build order, top risks) | [vision.md](../../vision.md), [tech-stack.md](../../tech-stack.md), [project-structure.md](../../project-structure.md), [roadmap/README.md](../../roadmap/README.md), [architecture/overview.md](../../architecture/overview.md), the [tutorials/](../../tutorials/README.md) |
 
 ## Rules