Document the real Spoken Audio Node migration state, and fix the CI that hid it (#42)

Replaces the boundary file's assertion of a hold on ADRs that were not on the
registry's default branch (they are now, via registry#41) with what has
actually moved, what has not, and what each remaining step is blocked on.

Does not build the Spoken Audio Node. The capture->ingestion contract lists
the endpoint path, auth model, metadata key set and error envelope as owed;
writing those for a service that does not exist would produce fabricated
identifiers.

Also ports one line from #27: .wp-env.json pinned WordPress 6.4 while the
plugin header requires 6.9, so the plugin could never activate in its own
test environment. That fix unmasked a second pre-existing failure — the test
script looks for the plugin at wp-content/plugins/starmus-audio-recorder (the
main PHP file's name) while wp-env mounts it under the repository directory
name. Diagnosed on the PR with a proposed patch; not pushed, because it could
not be verified without running Docker.

Merged over three checks that are red on main for reasons unrelated to this
diff: Trigger_EthicalCheck (apisec-inc/ethicalcheck-action no longer
resolves), Lint & Proof Frontend Assets (docs/index.html links to six
generated .html files that are never generated), and the wp-env plugin-slug
mismatch above. None is made worse by this merge; #27 addresses the first.

Author: MaximillianGroup

.github/instructions/starmus-boundary.md

@@ -0,0 +1,89 @@
+# Repository role and migration state — ADR-034 / ADR-035 / ADR-036
+
+**This repository is designated the Spoken Audio Node** under ADR-034. **It is
+not that today**, and this file says plainly what has moved, what has not, and
+what each remaining step is waiting on.
+
+Role assignment lives here; the reason lives in the governance registry. Do not
+restate the rationale in this repository — cite the record.
+
+- [ADR-034 — split axis](https://github.com/Starisian-Technologies/sparxstar-architecture-governance-registry/blob/main/standards/decisions/ADR-034-capture-experience-vs-audio-lifecycle-split.md)
+- [ADR-035 — capture profiles](https://github.com/Starisian-Technologies/sparxstar-architecture-governance-registry/blob/main/standards/decisions/ADR-035-capture-profiles-not-a-platform-audio-ceiling.md)
+- [ADR-036 — elicitation pacing is not acoustic prosody](https://github.com/Starisian-Technologies/sparxstar-architecture-governance-registry/blob/main/standards/decisions/ADR-036-elicitation-pacing-is-not-acoustic-prosody.md)
+
+Seam contracts, which say what actually crosses each boundary:
+
+- [Capture → Ingestion](https://github.com/Starisian-Technologies/sparxstar-architecture-governance-registry/blob/main/contracts/spoken-audio-capture-to-ingestion.md)
+- [Asset → Records](https://github.com/Starisian-Technologies/sparxstar-architecture-governance-registry/blob/main/contracts/spoken-audio-asset-to-records.md)
+
+## What this repository will own
+
+Server-side ingestion, validation, integrity, immutable object storage,
+derivatives, quality measurements, bulk import, processing jobs, and authorized
+consumption. A service, not a set of pages.
+
+**It does not capture.** Browser microphone access, local and offline handling,
+the chunked-upload client and capture UX are the capture UI package's. The
+reviewed transcript and its translation are ESU's; acoustic measurement is
+ours, and interpreting what a measurement means is ESU's.
+
+**ESU** is the platform component that owns the canonical linguistic record —
+transcription, translation, interpretation, and human correction — and stores
+no audio. Its canonical name and scope live in the governance registry and in
+ESU's own repository; this file deliberately does not restate an expansion it
+cannot verify from either, and no reader should infer one from context.
+
+## What it stops owning
+
+CMS templates and shortcodes · CMS admin screens · custom-post-type and
+attachment persistence · a CMS custom-field plugin as its primary database ·
+browser recorder code · CSS and frontend rendering · transcript review ·
+prosodic interpretation.
+
+## Migration state, honestly
+
+### Done
+
+- The **manifest-driven UI package boundary** exists
+  (`starmus-ui-packages.json`, `StarmusUiPackageResolver`). This is the
+  mechanism that will let the plugin stop shipping its own copy of the capture
+  JS and consume the built capture UI package instead. It is a precondition for
+  everything below, and it landed.
+- The capture UI package has removed the paced reader, the transcript-sync
+  controller, and the platform-wide audio ceiling.
+
+### Blocked, and on what
+
+1. **Removing the duplicated capture JS from `src/js/`.** Nineteen files, of
+   which fifteen are diverged copies of files in the capture UI package. One
+   home per capture-path source file (ADR-034). **Blocked on** the capture UI
+   package being resolvable through the manifest as a published artifact rather
+   than a sibling checkout. Deleting them before then breaks a shipping
+   product.
+2. **Removing the prosody assets** (`src/js/prosody/`,
+   `src/css/starmus-prosody-engine.css` and their built forms) and the
+   `prosodyScript` / `prosodyStyle` manifest surface. **Blocked on** the
+   elicitation pacing package being publishable: `StarmusProsodyPlayer.php`
+   enqueues these today, and the resolver needs a URL to point at instead.
+   Deleting the assets first takes the paced reader off every live page.
+3. **Standing up the ingestion service itself.** **Blocked on** the items the
+   Capture → Ingestion contract lists as *owed*: the endpoint path and auth
+   model, the upload metadata key set, the acknowledgement and error envelope,
+   and confirmation that the consumer verifies `sha256` as the producer sends.
+   **No repository implements a guess at those.** Writing endpoint paths, field
+   names or status codes for a service that does not exist is how fabricated
+   identifiers ship, and this organisation has shipped them before.
+4. **Which repository carries the CMS host product** once this one becomes a
+   service — this repo's residue, or a new one. Explicitly left open by
+   ADR-034. **Decide it before moving files, not during.**
+
+## Rules that already bind this repository
+
+- **No platform-wide audio ceiling** (ADR-035). A capture profile travels with
+  the asset; an asset carrying none is *stored* and merely not admissible as a
+  source for acoustic measurement — never rejected, because unconditional
+  capture still holds.
+- **No transcoding on the ingestion path.** `import` means the received bytes
+  are preserved. Derivatives are additional objects.
+- **Never hold the transcript of record.** A machine transcript may exist as a
+  processing artifact of an asset, marked unreviewed. Consumers read ESU.

.wp-env.json

@@ -1,5 +1,5 @@
 {
-  "core": "WordPress/WordPress#6.4",
+  "core": "WordPress/WordPress#6.9",
   "phpVersion": "8.2",
   "plugins": ["."],
   "themes": ["https://downloads.wordpress.org/theme/twentytwentyfour.1.0.zip"],

src/core/StarmusAssetLoader.php

@@ -413,21 +413,21 @@ private function build_bootstrap_inline_script(array $config): string
         $base_json = (string) wp_json_encode($base, JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT);
 
         return <<<JS
-// The asset loader emits the authoritative runtime bootstrap immediately before this
-// bundle executes. Page-surface fields written to window.STARMUS_BOOTSTRAP earlier
-// in the document are preserved; base fields fill any unset slots.
-(function () {
-    var base = {$base_json};
-    var page = window.STARMUS_BOOTSTRAP || {};
-    base.pageType = page.pageType || base.pageType;
-    base.mode = page.mode || base.mode;
-    base.postId = page.postId !== undefined ? page.postId : base.postId;
-    base.canCommit = page.canCommit !== undefined ? page.canCommit : base.canCommit;
-    base.artifact = page.artifact || base.artifact;
-    base.hosts = page.hosts !== undefined ? page.hosts : base.hosts;
-    window.STARMUS_BOOTSTRAP = base;
-}());
-JS;
+            // The asset loader emits the authoritative runtime bootstrap immediately before this
+            // bundle executes. Page-surface fields written to window.STARMUS_BOOTSTRAP earlier
+            // in the document are preserved; base fields fill any unset slots.
+            (function () {
+                var base = {$base_json};
+                var page = window.STARMUS_BOOTSTRAP || {};
+                base.pageType = page.pageType || base.pageType;
+                base.mode = page.mode || base.mode;
+                base.postId = page.postId !== undefined ? page.postId : base.postId;
+                base.canCommit = page.canCommit !== undefined ? page.canCommit : base.canCommit;
+                base.artifact = page.artifact || base.artifact;
+                base.hosts = page.hosts !== undefined ? page.hosts : base.hosts;
+                window.STARMUS_BOOTSTRAP = base;
+            }());
+            JS;
     }
 
     private function resolve_bootstrap_mode(): string

src/core/StarmusUiPackageResolver.php

@@ -1,18 +1,15 @@
 <?php
 
 declare(strict_types=1);
-
 namespace Starisian\Sparxstar\Starmus\core;
 
-use Starisian\Sparxstar\Starmus\helpers\StarmusLogger;
-
 use function file_exists;
 use function file_get_contents;
 use function filemtime;
-use function is_array;
-use function is_string;
 use function json_decode;
 
+use Starisian\Sparxstar\Starmus\helpers\StarmusLogger;
+
 final class StarmusUiPackageResolver
 {
     private const MANIFEST_FILE = 'starmus-ui-packages.json';
@@ -47,16 +44,16 @@ public function resolve_asset(string $asset_key): array
     {
         $manifest = $this->load_manifest();
         $assets = $manifest['assets'] ?? [];
-        $asset = is_array($assets) && isset($assets[$asset_key]) && is_array($assets[$asset_key])
+        $asset = \is_array($assets) && isset($assets[$asset_key]) && \is_array($assets[$asset_key])
             ? $assets[$asset_key]
             : [];
 
-        $handle = is_string($asset['handle'] ?? null) ? $asset['handle'] : '';
-        $type = is_string($asset['type'] ?? null) ? $asset['type'] : 'script';
-        $package = is_string($asset['package'] ?? null) ? $asset['package'] : '';
-        $surface = is_string($asset['surface'] ?? null) ? $asset['surface'] : '';
+        $handle = \is_string($asset['handle'] ?? null) ? $asset['handle'] : '';
+        $type = \is_string($asset['type'] ?? null) ? $asset['type'] : 'script';
+        $package = \is_string($asset['package'] ?? null) ? $asset['package'] : '';
+        $surface = \is_string($asset['surface'] ?? null) ? $asset['surface'] : '';
 
-        $external_url = is_string($asset['externalUrl'] ?? null) ? $asset['externalUrl'] : '';
+        $external_url = \is_string($asset['externalUrl'] ?? null) ? $asset['externalUrl'] : '';
         if ($external_url !== '') {
             return [
                 'handle' => $handle,
@@ -68,7 +65,7 @@ public function resolve_asset(string $asset_key): array
             ];
         }
 
-        $min_rel = is_string($asset['min'] ?? null) ? $asset['min'] : '';
+        $min_rel = \is_string($asset['min'] ?? null) ? $asset['min'] : '';
         if ($min_rel !== '' && $this->base_path !== '' && file_exists($this->base_path . $min_rel)) {
             return [
                 'handle' => $handle,
@@ -80,7 +77,7 @@ public function resolve_asset(string $asset_key): array
             ];
         }
 
-        $src_rel = is_string($asset['src'] ?? null) ? $asset['src'] : '';
+        $src_rel = \is_string($asset['src'] ?? null) ? $asset['src'] : '';
         if ($src_rel !== '' && $this->base_path !== '' && file_exists($this->base_path . $src_rel)) {
             return [
                 'handle' => $handle,
@@ -110,7 +107,7 @@ public function get_runtime_projection(): array
         $manifest = $this->load_manifest();
         $runtime = $manifest['runtime'] ?? [];
 
-        return is_array($runtime) ? $runtime : [];
+        return \is_array($runtime) ? $runtime : [];
     }
 
     private function resolve_version(): string
@@ -132,22 +129,22 @@ private function load_manifest(): array
             return $this->manifest;
         }
 
-        $normalized_base_path = \rtrim($this->base_path, '/\\');
-        $manifest_path        = $normalized_base_path . DIRECTORY_SEPARATOR . self::MANIFEST_FILE;
+        $normalized_base_path = rtrim($this->base_path, '/\\');
+        $manifest_path = $normalized_base_path . DIRECTORY_SEPARATOR . self::MANIFEST_FILE;
 
         if ( ! file_exists($manifest_path)) {
             $this->manifest = [];
             return $this->manifest;
         }
 
         $manifest_json = file_get_contents($manifest_path);
-        if ( ! is_string($manifest_json) || $manifest_json === '') {
+        if ( ! \is_string($manifest_json) || $manifest_json === '') {
             $this->manifest = [];
             return $this->manifest;
         }
 
         $decoded = json_decode($manifest_json, true);
-        if ( ! is_array($decoded)) {
+        if ( ! \is_array($decoded)) {
             StarmusLogger::error(
                 '[StarmusUiPackageResolver] Failed to parse manifest: ' . $manifest_path,
                 ['json_error' => json_last_error_msg()]

src/frontend/StarmusProsodyPlayer.php

@@ -1,15 +1,14 @@
 <?php
 
 declare(strict_types=1);
-
 namespace Starisian\Sparxstar\Starmus\frontend;
 
 use function class_exists;
 use function ob_get_clean;
 use function ob_start;
 
-use Starisian\Sparxstar\Starmus\data\StarmusProsodyDAL;
 use Starisian\Sparxstar\Starmus\core\StarmusUiPackageResolver;
+use Starisian\Sparxstar\Starmus\data\StarmusProsodyDAL;
 use Starisian\Sparxstar\Starmus\helpers\StarmusLogger;
 use Throwable;
 

src/js/starmus-integrator.js

@@ -11,11 +11,7 @@
  * @global
  * @namespace
  */
-window.Starmus =
-    window.Starmus ||
-    {
-        /* intentionally empty */
-    };
+window.Starmus = window.Starmus || {/* intentionally empty */};
 
 /**
  * Current version of the Starmus integration layer.
@@ -75,31 +71,11 @@ window.addEventListener("sparxstar:environment-ready", (e) => {
         return;
     }
 
-    const raw =
-        e.detail ||
-        {
-            /* intentionally empty */
-        };
-    const tech =
-        raw.technical ||
-        {
-            /* intentionally empty */
-        };
-    const rawTech =
-        tech.raw ||
-        {
-            /* intentionally empty */
-        };
-    const profile =
-        tech.profile ||
-        {
-            /* intentionally empty */
-        };
-    const idents =
-        raw.identifiers ||
-        {
-            /* intentionally empty */
-        }; // Sometimes at root
+    const raw = e.detail || {/* intentionally empty */};
+    const tech = raw.technical || {/* intentionally empty */};
+    const rawTech = tech.raw || {/* intentionally empty */};
+    const profile = tech.profile || {/* intentionally empty */};
+    const idents = raw.identifiers || {/* intentionally empty */}; // Sometimes at root
     // Handle case where identifiers might be inside technical or separate (based on logs)
 
     /**
@@ -118,37 +94,21 @@ window.addEventListener("sparxstar:environment-ready", (e) => {
     const normalizedEnv = {
         // 1. Device Info (Merge Detector + Profile)
         device: {
-            ...(rawTech.device ||
-                {
-                    /* intentionally empty */
-                }),
+            ...(rawTech.device || {/* intentionally empty */}),
             class: profile.deviceClass || "unknown",
-            os:
-                raw.identifiers?.deviceDetails?.os ||
-                {
-                    /* intentionally empty */
-                },
+            os: raw.identifiers?.deviceDetails?.os || {/* intentionally empty */},
             userAgent: navigator.userAgent,
         },
 
         // 2. Browser Info
         browser: {
-            ...(rawTech.browser ||
-                {
-                    /* intentionally empty */
-                }),
-            ...(raw.identifiers?.deviceDetails?.client ||
-                {
-                    /* intentionally empty */
-                }),
+            ...(rawTech.browser || {/* intentionally empty */}),
+            ...(raw.identifiers?.deviceDetails?.client || {/* intentionally empty */}),
         },
 
         // 3. Network Info
         network: {
-            ...(rawTech.network ||
-                {
-                    /* intentionally empty */
-                }),
+            ...(rawTech.network || {/* intentionally empty */}),
             profile: profile.networkProfile || "unknown",
         },
 
@@ -161,16 +121,8 @@ window.addEventListener("sparxstar:environment-ready", (e) => {
 
         // 5. Features / Battery / Perf
         features: {
-            battery:
-                rawTech.battery ||
-                {
-                    /* intentionally empty */
-                },
-            performance:
-                rawTech.performance ||
-                {
-                    /* intentionally empty */
-                },
+            battery: rawTech.battery || {/* intentionally empty */},
+            performance: rawTech.performance || {/* intentionally empty */},
         },
 
         // 6. Init Error Array (Required by Schema)

src/js/starmus-main.js

@@ -320,9 +320,7 @@ document.addEventListener("DOMContentLoaded", () => {
             }
 
             const instanceId =
-                bootstrap.hosts.formId ||
-                recorderForm.getAttribute("data-starmus-instance") ||
-                "";
+                bootstrap.hosts.formId || recorderForm.getAttribute("data-starmus-instance") || "";
             initRecorderInstance(recorderForm, instanceId, bootstrap);
         } else if (bootstrap.pageType === "editor") {
             const editorRoot = document.getElementById(bootstrap.hosts.editorRootId || "");