[S2] Enterprise maturation + consolidation

[rickylabs]

Child of the Road-to-0.0.1-stable umbrella. Consolidate the features shipped across recent waves into a coherent, mature, enterprise-grade surface and raise the whole codebase to production quality.

Scope

• Consolidate recent waves: fresh-ui, plugins (workers/sagas/triggers/streams + -core layer), Aspire, auth (better-auth/kv-oauth/workos + auth-core), streams. AI stack (epic: NetScript AI Stack — first-class AI runtime, chat & plugin seams (anchor #219) #238) folds in as it converges — do not re-architect it mid-flight.
• Fix plugin-service type-unsoundness (172a-2-SOUND: phantom-typed base contract seam) — this is a beta gate.
• Enterprise surface coherence: consistent public-surface verbs, doc-linted exports, no --allow-slow-types carve-outs at publish, coherent error surface.

Acceptance criteria

• All plugin services type-sound; deno task publish:dry-run clean with no slow-types allowances.
• Public surface doc-lint passes for every package's full export map.
• e2e-cli-prod + scaffold.runtime green.

Notes

Spans both milestones. Depends on S4 (doctrine) for the surface/error/versioning standards it enforces, and coordinates with S6 (stale elimination) so consolidation and deletion don't collide. DB layer carved out (ROUTE-TO-PRISMA).

---

Parent epic: #301

Part of #301

[rickylabs]

Acceptance reword — slow-types (S2 decision, user-ratified)

The prior acceptance demanded "publish:dry-run clean with NO slow-types allowances" and "doc-lint passes for every export map." That is incompatible with a sound plugin-service seam: 172a-2-SOUND (#332) binds oRPC's real declared builder types, which inherently produce private-type-ref slow-types diagnostics that only --allow-slow-types waives. Zero-allowance would force an unsound erasing cast back in.

Replace that acceptance line with:

publish:dry-run clean; --allow-slow-types is permitted only for oRPC-bound packages, per the sanctioned S4/#305 doctrine exception. Any other package using --allow-slow-types remains a finding.

The exception's authoritative wording lives in S4/#305. Refs #305.