Harden Pulse lifecycle for v0.1.0

[zekageri]

Summary

Implements the Pulse v0.1.0 release-blocker remediation plan on pulse-production-hardening.

Lifecycle and shutdown

• adds Uninitialized, Running, Stopping, and Stopped lifecycle states
• adds a monotonically increasing lifecycle generation so stale concurrent end() waiters cannot stop a newer run
• allocates and atomically installs PulseImpl during init()
• retains the implementation independently for the scheduler task
• makes the scheduler task wait until init() has published its handle, generation, and Running state
• replaces queue-based shutdown with a dedicated task notification
• keeps shutdown retryable after Timeout
• defines Stopped as scheduler quiescence before physical task deletion
• makes external destruction wait for scheduler quiescence
• supports private self-shutdown when Pulse is destroyed from its own callback
• returns Busy when public end() is called from the Pulse task
• makes the scheduler task the sole normal owner of queue and timer-storage cleanup
• keeps completion signaling alive for the full implementation lifetime
• destroys user callback captures outside the lifecycle mutex

Queue and timer controls

• makes public queue sends nonblocking and lifecycle-atomic
• tags commands with lifecycle generation
• rolls back timer registration immediately when the bounded queue is full
• gives shutdown priority independently of queue capacity
• processes the command-queue snapshot present at callback completion before selecting another due timer
• qualifies the control guarantee so shutdown may supersede pending timer operations
• makes timeout and final-countdown callbacks terminal
• preserves a full interval for callback-side pause
• preserves the next countdown delay for callback-side pause
• uses timer mutation generations so callback controls are not overwritten by default rescheduling

Diagnostics and allocation behavior

• fixes ESP-IDF stack high-water units by returning the byte value directly
• queries live task and queue diagnostics while lifecycle protection keeps handles valid
• moves callbacks into timer records and invokes stored callbacks directly
• narrows the no-exception documentation to accurately describe std::function, callback-capture, and shared_ptr allocation behavior

Runtime tests and release gates

• adds a host FreeRTOS adapter that compiles and executes the production Pulse.cpp
• covers timeout/interval/countdown ordering, non-divisible countdown completion, terminal controls, restart behavior, pause/resume delay preservation, callback command ordering, queue-full rollback, shutdown priority, long-callback timeout/retry, concurrent first initialization, stale lifecycle waiters, repeated lifecycle cycles, external destructor joining, callback self-destruction, callback cleanup outside the lifecycle lock, diagnostics, and stack units
• adds a no-exceptions compilation job
• adds branch/tag package-version validation
• updates library.properties and library.json to 0.1.0
• adds a compilable on-device lifecycle smoke sketch under extras/PulseSmoke
• adds curated CHANGELOG.md release notes and updated lifecycle/API documentation
• deduplicates branch and pull-request CI through a shared concurrency key

Validation

GitHub Actions run 29341692432 passed the main CI workflow on the previous head. A follow-up commit moved the smoke sketch under extras/PulseSmoke to satisfy Arduino Lint rule LD003.

• production source audit: passed
• package version consistency: passed
• -fno-exceptions production compilation: passed
• all deterministic host runtime contracts: passed
• PIOArduino example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed
• Arduino CLI example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed

Remaining manual release gate

Keep this PR as draft until extras/PulseSmoke has been executed on physical hardware with:

1. an internal task stack; and
2. a PSRAM task stack on a supported PSRAM-capable board.

The sketch is compiled in CI for the full board matrix, but this PR does not claim that physical hardware execution was performed.

Scope note

The existing shared_ptr timer-record ownership remains in place for v0.1.0. Avoidable callback copies were removed and the allocation contract is documented accurately. Replacing the shared_ptr control-block allocation remains optional follow-up hardening and should not delay the lifecycle safety fixes.

[zekageri]

Summary

Implements the Pulse v0.1.0 release-blocker remediation plan on pulse-production-hardening.

Lifecycle and shutdown

• adds Uninitialized, Running, Stopping, and Stopped lifecycle states
• adds a monotonically increasing lifecycle generation so stale concurrent end() waiters cannot stop a newer run
• allocates and atomically installs PulseImpl during init()
• retains the implementation independently for the scheduler task
• makes the scheduler task wait until init() has published its handle, generation, and Running state
• replaces queue-based shutdown with a dedicated task notification
• keeps shutdown retryable after Timeout
• defines Stopped as scheduler quiescence before physical task deletion
• makes external destruction wait for scheduler quiescence
• supports private self-shutdown when Pulse is destroyed from its own callback
• returns Busy when public end() is called from the Pulse task
• makes the scheduler task the sole normal owner of queue and timer-storage cleanup
• keeps completion signaling alive for the full implementation lifetime
• destroys user callback captures outside the lifecycle mutex

Queue and timer controls

• makes public queue sends nonblocking and lifecycle-atomic
• tags commands with lifecycle generation
• rolls back timer registration immediately when the bounded queue is full
• gives shutdown priority independently of queue capacity
• processes the command-queue snapshot present at callback completion before selecting another due timer
• qualifies the control guarantee so shutdown may supersede pending timer operations
• makes timeout and final-countdown callbacks terminal
• preserves a full interval for callback-side pause
• preserves the next countdown delay for callback-side pause
• uses timer mutation generations so callback controls are not overwritten by default rescheduling

Diagnostics and allocation behavior

• fixes ESP-IDF stack high-water units by returning the byte value directly
• queries live task and queue diagnostics while lifecycle protection keeps handles valid
• moves callbacks into timer records and invokes stored callbacks directly
• narrows the no-exception documentation to accurately describe std::function, callback-capture, and shared_ptr allocation behavior

Runtime tests and release gates

• adds a host FreeRTOS adapter that compiles and executes the production Pulse.cpp
• covers timeout/interval/countdown ordering, non-divisible countdown completion, terminal controls, restart behavior, pause/resume delay preservation, callback command ordering, queue-full rollback, shutdown priority, long-callback timeout/retry, concurrent first initialization, stale lifecycle waiters, repeated lifecycle cycles, external destructor joining, callback self-destruction, callback cleanup outside the lifecycle lock, diagnostics, and stack units
• adds a no-exceptions compilation job
• adds branch/tag package-version validation
• updates library.properties and library.json to 0.1.0
• adds a compilable on-device lifecycle smoke sketch under extras/PulseSmoke
• adds curated CHANGELOG.md release notes and updated lifecycle/API documentation
• deduplicates branch and pull-request CI through a shared concurrency key

Validation

GitHub Actions run 29341692432 passed the main CI workflow on the previous head. A follow-up commit moved the smoke sketch under extras/PulseSmoke to satisfy Arduino Lint rule LD003.

• production source audit: passed
• package version consistency: passed
• -fno-exceptions production compilation: passed
• all deterministic host runtime contracts: passed
• PIOArduino example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed
• Arduino CLI example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed

Remaining manual release gate

Keep this PR as draft until extras/PulseSmoke has been executed on physical hardware with:

1. an internal task stack; and
2. a PSRAM task stack on a supported PSRAM-capable board.

The sketch is compiled in CI for the full board matrix, but this PR does not claim that physical hardware execution was performed.

Scope note

The existing shared_ptr timer-record ownership remains in place for v0.1.0. Avoidable callback copies were removed and the allocation contract is documented accurately. Replacing the shared_ptr control-block allocation remains optional follow-up hardening and should not delay the lifecycle safety fixes.

[zekageri]

Summary

Implements the Pulse v0.1.0 release-blocker remediation plan on pulse-production-hardening.

Lifecycle and shutdown

• adds Uninitialized, Running, Stopping, and Stopped lifecycle states
• adds a monotonically increasing lifecycle generation so stale concurrent end() waiters cannot stop a newer run
• allocates and atomically installs PulseImpl during init()
• retains the implementation independently for the scheduler task
• makes the scheduler task wait until init() has published its handle, generation, and Running state
• replaces queue-based shutdown with a dedicated task notification
• keeps shutdown retryable after Timeout
• defines Stopped as scheduler quiescence before physical task deletion
• makes external destruction wait for scheduler quiescence
• supports private self-shutdown when Pulse is destroyed from its own callback
• returns Busy when public end() is called from the Pulse task
• makes the scheduler task the sole normal owner of queue and timer-storage cleanup
• keeps completion signaling alive for the full implementation lifetime
• destroys user callback captures outside the lifecycle mutex

Queue and timer controls

• makes public queue sends nonblocking and lifecycle-atomic
• tags commands with lifecycle generation
• rolls back timer registration immediately when the bounded queue is full
• gives shutdown priority independently of queue capacity
• processes the command-queue snapshot present at callback completion before selecting another due timer
• qualifies the control guarantee so shutdown may supersede pending timer operations
• makes timeout and final-countdown callbacks terminal
• preserves a full interval for callback-side pause
• preserves the next countdown delay for callback-side pause
• uses timer mutation generations so callback controls are not overwritten by default rescheduling

Diagnostics and allocation behavior

• fixes ESP-IDF stack high-water units by returning the byte value directly
• queries live task and queue diagnostics while lifecycle protection keeps handles valid
• moves callbacks into timer records and invokes stored callbacks directly
• narrows the no-exception documentation to accurately describe std::function, callback-capture, and shared_ptr allocation behavior

Runtime tests and release gates

• adds a host FreeRTOS adapter that compiles and executes the production Pulse.cpp
• covers timeout/interval/countdown ordering, non-divisible countdown completion, terminal controls, restart behavior, pause/resume delay preservation, callback command ordering, queue-full rollback, shutdown priority, long-callback timeout/retry, concurrent first initialization, stale lifecycle waiters, repeated lifecycle cycles, external destructor joining, callback self-destruction, callback cleanup outside the lifecycle lock, diagnostics, and stack units
• adds a no-exceptions compilation job
• adds branch/tag package-version validation
• updates library.properties and library.json to 0.1.0
• adds a compilable on-device lifecycle smoke sketch under extras/PulseSmoke
• adds curated CHANGELOG.md release notes and updated lifecycle/API documentation
• deduplicates branch and pull-request CI through a shared concurrency key

Validation

GitHub Actions run 29341692432 passed the main CI workflow on the previous head. A follow-up commit moved the smoke sketch under extras/PulseSmoke to satisfy Arduino Lint rule LD003.

• production source audit: passed
• package version consistency: passed
• -fno-exceptions production compilation: passed
• all deterministic host runtime contracts: passed
• PIOArduino example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed
• Arduino CLI example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed

Remaining manual release gate

Keep this PR as draft until extras/PulseSmoke has been executed on physical hardware with:

1. an internal task stack; and
2. a PSRAM task stack on a supported PSRAM-capable board.

The sketch is compiled in CI for the full board matrix, but this PR does not claim that physical hardware execution was performed.

Scope note

The existing shared_ptr timer-record ownership remains in place for v0.1.0. Avoidable callback copies were removed and the allocation contract is documented accurately. Replacing the shared_ptr control-block allocation remains optional follow-up hardening and should not delay the lifecycle safety fixes.

[zekageri]

Summary

Implements the Pulse v0.1.0 release-blocker remediation plan on pulse-production-hardening.

Lifecycle and shutdown

• adds Uninitialized, Running, Stopping, and Stopped lifecycle states
• adds a monotonically increasing lifecycle generation so stale concurrent end() waiters cannot stop a newer run
• allocates and atomically installs PulseImpl during init()
• retains the implementation independently for the scheduler task
• makes the scheduler task wait until init() has published its handle, generation, and Running state
• replaces queue-based shutdown with a dedicated task notification
• keeps shutdown retryable after Timeout
• defines Stopped as scheduler quiescence before physical task deletion
• makes external destruction wait for scheduler quiescence
• supports private self-shutdown when Pulse is destroyed from its own callback
• returns Busy when public end() is called from the Pulse task
• makes the scheduler task the sole normal owner of queue and timer-storage cleanup
• keeps completion signaling alive for the full implementation lifetime
• destroys user callback captures outside the lifecycle mutex

Queue and timer controls

• makes public queue sends nonblocking and lifecycle-atomic
• tags commands with lifecycle generation
• rolls back timer registration immediately when the bounded queue is full
• gives shutdown priority independently of queue capacity
• processes the command-queue snapshot present at callback completion before selecting another due timer
• qualifies the control guarantee so shutdown may supersede pending timer operations
• makes timeout and final-countdown callbacks terminal
• preserves a full interval for callback-side pause
• preserves the next countdown delay for callback-side pause
• uses timer mutation generations so callback controls are not overwritten by default rescheduling

Diagnostics and allocation behavior

• fixes ESP-IDF stack high-water units by returning the byte value directly
• queries live task and queue diagnostics while lifecycle protection keeps handles valid
• moves callbacks into timer records and invokes stored callbacks directly
• narrows the no-exception documentation to accurately describe std::function, callback-capture, and shared_ptr allocation behavior

Runtime tests and release gates

• adds a host FreeRTOS adapter that compiles and executes the production Pulse.cpp
• covers timeout/interval/countdown ordering, non-divisible countdown completion, terminal controls, restart behavior, pause/resume delay preservation, callback command ordering, queue-full rollback, shutdown priority, long-callback timeout/retry, concurrent first initialization, stale lifecycle waiters, repeated lifecycle cycles, external destructor joining, callback self-destruction, callback cleanup outside the lifecycle lock, diagnostics, and stack units
• adds a no-exceptions compilation job
• adds branch/tag package-version validation
• updates library.properties and library.json to 0.1.0
• adds a compilable on-device lifecycle smoke sketch under extras/PulseSmoke
• adds curated CHANGELOG.md release notes and updated lifecycle/API documentation
• deduplicates branch and pull-request CI through a shared concurrency key

Validation

GitHub Actions run 29341692432 passed the main CI workflow on the previous head. A follow-up commit moved the smoke sketch under extras/PulseSmoke to satisfy Arduino Lint rule LD003.

• production source audit: passed
• package version consistency: passed
• -fno-exceptions production compilation: passed
• all deterministic host runtime contracts: passed
• PIOArduino example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed
• Arduino CLI example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed

Remaining manual release gate

Keep this PR as draft until extras/PulseSmoke has been executed on physical hardware with:

1. an internal task stack; and
2. a PSRAM task stack on a supported PSRAM-capable board.

The sketch is compiled in CI for the full board matrix, but this PR does not claim that physical hardware execution was performed.

Scope note

The existing shared_ptr timer-record ownership remains in place for v0.1.0. Avoidable callback copies were removed and the allocation contract is documented accurately. Replacing the shared_ptr control-block allocation remains optional follow-up hardening and should not delay the lifecycle safety fixes.

[zekageri]

Summary

Implements the Pulse v0.1.0 release-blocker remediation plan on pulse-production-hardening.

Lifecycle and shutdown

• adds Uninitialized, Running, Stopping, and Stopped lifecycle states
• adds a monotonically increasing lifecycle generation so stale concurrent end() waiters cannot stop a newer run
• allocates and atomically installs PulseImpl during init()
• retains the implementation independently for the scheduler task
• makes the scheduler task wait until init() has published its handle, generation, and Running state
• replaces queue-based shutdown with a dedicated task notification
• keeps shutdown retryable after Timeout
• defines Stopped as scheduler quiescence before physical task deletion
• makes external destruction wait for scheduler quiescence
• supports private self-shutdown when Pulse is destroyed from its own callback
• returns Busy when public end() is called from the Pulse task
• makes the scheduler task the sole normal owner of queue and timer-storage cleanup
• keeps completion signaling alive for the full implementation lifetime
• destroys user callback captures outside the lifecycle mutex

Queue and timer controls

• makes public queue sends nonblocking and lifecycle-atomic
• tags commands with lifecycle generation
• rolls back timer registration immediately when the bounded queue is full
• gives shutdown priority independently of queue capacity
• processes the command-queue snapshot present at callback completion before selecting another due timer
• qualifies the control guarantee so shutdown may supersede pending timer operations
• makes timeout and final-countdown callbacks terminal
• preserves a full interval for callback-side pause
• preserves the next countdown delay for callback-side pause
• uses timer mutation generations so callback controls are not overwritten by default rescheduling

Diagnostics and allocation behavior

• fixes ESP-IDF stack high-water units by returning the byte value directly
• queries live task and queue diagnostics while lifecycle protection keeps handles valid
• moves callbacks into timer records and invokes stored callbacks directly
• narrows the no-exception documentation to accurately describe std::function, callback-capture, and shared_ptr allocation behavior

Runtime tests and release gates

• adds a host FreeRTOS adapter that compiles and executes the production Pulse.cpp
• covers timeout/interval/countdown ordering, non-divisible countdown completion, terminal controls, restart behavior, pause/resume delay preservation, callback command ordering, queue-full rollback, shutdown priority, long-callback timeout/retry, concurrent first initialization, stale lifecycle waiters, repeated lifecycle cycles, external destructor joining, callback self-destruction, callback cleanup outside the lifecycle lock, diagnostics, and stack units
• adds a no-exceptions compilation job
• adds branch/tag package-version validation
• updates library.properties and library.json to 0.1.0
• adds a compilable on-device lifecycle smoke sketch under extras/PulseSmoke
• adds curated CHANGELOG.md release notes and updated lifecycle/API documentation
• deduplicates branch and pull-request CI through a shared concurrency key

Validation

GitHub Actions run 29341692432 passed the main CI workflow on the previous head. A follow-up commit moved the smoke sketch under extras/PulseSmoke to satisfy Arduino Lint rule LD003.

• production source audit: passed
• package version consistency: passed
• -fno-exceptions production compilation: passed
• all deterministic host runtime contracts: passed
• PIOArduino example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed
• Arduino CLI example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed

Remaining manual release gate

Keep this PR as draft until extras/PulseSmoke has been executed on physical hardware with:

1. an internal task stack; and
2. a PSRAM task stack on a supported PSRAM-capable board.

The sketch is compiled in CI for the full board matrix, but this PR does not claim that physical hardware execution was performed.

Scope note

The existing shared_ptr timer-record ownership remains in place for v0.1.0. Avoidable callback copies were removed and the allocation contract is documented accurately. Replacing the shared_ptr control-block allocation remains optional follow-up hardening and should not delay the lifecycle safety fixes.

[zekageri]

Summary

Implements the Pulse v0.1.0 release-blocker remediation plan on pulse-production-hardening.

Lifecycle and shutdown

• adds Uninitialized, Running, Stopping, and Stopped lifecycle states
• adds a monotonically increasing lifecycle generation so stale concurrent end() waiters cannot stop a newer run
• allocates and atomically installs PulseImpl during init()
• retains the implementation independently for the scheduler task
• makes the scheduler task wait until init() has published its handle, generation, and Running state
• replaces queue-based shutdown with a dedicated task notification
• keeps shutdown retryable after Timeout
• defines Stopped as scheduler quiescence before physical task deletion
• makes external destruction wait for scheduler quiescence
• supports private self-shutdown when Pulse is destroyed from its own callback
• returns Busy when public end() is called from the Pulse task
• makes the scheduler task the sole normal owner of queue and timer-storage cleanup
• keeps completion signaling alive for the full implementation lifetime
• destroys user callback captures outside the lifecycle mutex

Queue and timer controls

• makes public queue sends nonblocking and lifecycle-atomic
• tags commands with lifecycle generation
• rolls back timer registration immediately when the bounded queue is full
• gives shutdown priority independently of queue capacity
• processes the command-queue snapshot present at callback completion before selecting another due timer
• qualifies the control guarantee so shutdown may supersede pending timer operations
• makes timeout and final-countdown callbacks terminal
• preserves a full interval for callback-side pause
• preserves the next countdown delay for callback-side pause
• uses timer mutation generations so callback controls are not overwritten by default rescheduling

Diagnostics and allocation behavior

• fixes ESP-IDF stack high-water units by returning the byte value directly
• queries live task and queue diagnostics while lifecycle protection keeps handles valid
• moves callbacks into timer records and invokes stored callbacks directly
• narrows the no-exception documentation to accurately describe std::function, callback-capture, and shared_ptr allocation behavior

Runtime tests and release gates

• adds a host FreeRTOS adapter that compiles and executes the production Pulse.cpp
• covers timeout/interval/countdown ordering, non-divisible countdown completion, terminal controls, restart behavior, pause/resume delay preservation, callback command ordering, queue-full rollback, shutdown priority, long-callback timeout/retry, concurrent first initialization, stale lifecycle waiters, repeated lifecycle cycles, external destructor joining, callback self-destruction, callback cleanup outside the lifecycle lock, diagnostics, and stack units
• adds a no-exceptions compilation job
• adds branch/tag package-version validation
• updates library.properties and library.json to 0.1.0
• adds a compilable on-device lifecycle smoke sketch under extras/PulseSmoke
• adds curated CHANGELOG.md release notes and updated lifecycle/API documentation
• deduplicates branch and pull-request CI through a shared concurrency key

Validation

GitHub Actions run 29341692432 passed the main CI workflow on the previous head. A follow-up commit moved the smoke sketch under extras/PulseSmoke to satisfy Arduino Lint rule LD003.

• production source audit: passed
• package version consistency: passed
• -fno-exceptions production compilation: passed
• all deterministic host runtime contracts: passed
• PIOArduino example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed
• Arduino CLI example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed

Remaining manual release gate

Keep this PR as draft until extras/PulseSmoke has been executed on physical hardware with:

1. an internal task stack; and
2. a PSRAM task stack on a supported PSRAM-capable board.

The sketch is compiled in CI for the full board matrix, but this PR does not claim that physical hardware execution was performed.

Scope note

The existing shared_ptr timer-record ownership remains in place for v0.1.0. Avoidable callback copies were removed and the allocation contract is documented accurately. Replacing the shared_ptr control-block allocation remains optional follow-up hardening and should not delay the lifecycle safety fixes.

[zekageri]

Summary

Implements the Pulse v0.1.0 release-blocker remediation plan on pulse-production-hardening.

Lifecycle and shutdown

• adds Uninitialized, Running, Stopping, and Stopped lifecycle states
• adds a monotonically increasing lifecycle generation so stale concurrent end() waiters cannot stop a newer run
• allocates and atomically installs PulseImpl during init()
• retains the implementation independently for the scheduler task
• makes the scheduler task wait until init() has published its handle, generation, and Running state
• replaces queue-based shutdown with a dedicated task notification
• keeps shutdown retryable after Timeout
• defines Stopped as scheduler quiescence before physical task deletion
• makes external destruction wait for scheduler quiescence
• supports private self-shutdown when Pulse is destroyed from its own callback
• returns Busy when public end() is called from the Pulse task
• makes the scheduler task the sole normal owner of queue and timer-storage cleanup
• keeps completion signaling alive for the full implementation lifetime
• destroys user callback captures outside the lifecycle mutex

Queue and timer controls

• makes public queue sends nonblocking and lifecycle-atomic
• tags commands with lifecycle generation
• rolls back timer registration immediately when the bounded queue is full
• gives shutdown priority independently of queue capacity
• processes the command-queue snapshot present at callback completion before selecting another due timer
• qualifies the control guarantee so shutdown may supersede pending timer operations
• makes timeout and final-countdown callbacks terminal
• preserves a full interval for callback-side pause
• preserves the next countdown delay for callback-side pause
• uses timer mutation generations so callback controls are not overwritten by default rescheduling

Diagnostics and allocation behavior

• fixes ESP-IDF stack high-water units by returning the byte value directly
• queries live task and queue diagnostics while lifecycle protection keeps handles valid
• moves callbacks into timer records and invokes stored callbacks directly
• narrows the no-exception documentation to accurately describe std::function, callback-capture, and shared_ptr allocation behavior

Runtime tests and release gates

• adds a host FreeRTOS adapter that compiles and executes the production Pulse.cpp
• covers timeout/interval/countdown ordering, non-divisible countdown completion, terminal controls, restart behavior, pause/resume delay preservation, callback command ordering, queue-full rollback, shutdown priority, long-callback timeout/retry, concurrent first initialization, stale lifecycle waiters, repeated lifecycle cycles, external destructor joining, callback self-destruction, callback cleanup outside the lifecycle lock, diagnostics, and stack units
• adds a no-exceptions compilation job
• adds branch/tag package-version validation
• updates library.properties and library.json to 0.1.0
• adds a compilable on-device lifecycle smoke sketch under extras/PulseSmoke
• adds curated CHANGELOG.md release notes and updated lifecycle/API documentation
• deduplicates branch and pull-request CI through a shared concurrency key

Validation

GitHub Actions run 29341692432 passed the main CI workflow on the previous head. A follow-up commit moved the smoke sketch under extras/PulseSmoke to satisfy Arduino Lint rule LD003.

• production source audit: passed
• package version consistency: passed
• -fno-exceptions production compilation: passed
• all deterministic host runtime contracts: passed
• PIOArduino example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed
• Arduino CLI example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed

Remaining manual release gate

Keep this PR as draft until extras/PulseSmoke has been executed on physical hardware with:

1. an internal task stack; and
2. a PSRAM task stack on a supported PSRAM-capable board.

The sketch is compiled in CI for the full board matrix, but this PR does not claim that physical hardware execution was performed.

Scope note

The existing shared_ptr timer-record ownership remains in place for v0.1.0. Avoidable callback copies were removed and the allocation contract is documented accurately. Replacing the shared_ptr control-block allocation remains optional follow-up hardening and should not delay the lifecycle safety fixes.

[zekageri]

Summary

Implements the Pulse v0.1.0 release-blocker remediation plan on pulse-production-hardening.

Lifecycle and shutdown

• adds Uninitialized, Running, Stopping, and Stopped lifecycle states
• adds a monotonically increasing lifecycle generation so stale concurrent end() waiters cannot stop a newer run
• allocates and atomically installs PulseImpl during init()
• retains the implementation independently for the scheduler task
• makes the scheduler task wait until init() has published its handle, generation, and Running state
• replaces queue-based shutdown with a dedicated task notification
• keeps shutdown retryable after Timeout
• defines Stopped as scheduler quiescence before physical task deletion
• makes external destruction wait for scheduler quiescence
• supports private self-shutdown when Pulse is destroyed from its own callback
• returns Busy when public end() is called from the Pulse task
• makes the scheduler task the sole normal owner of queue and timer-storage cleanup
• keeps completion signaling alive for the full implementation lifetime
• destroys user callback captures outside the lifecycle mutex

Queue and timer controls

• makes public queue sends nonblocking and lifecycle-atomic
• tags commands with lifecycle generation
• rolls back timer registration immediately when the bounded queue is full
• gives shutdown priority independently of queue capacity
• processes the command-queue snapshot present at callback completion before selecting another due timer
• qualifies the control guarantee so shutdown may supersede pending timer operations
• makes timeout and final-countdown callbacks terminal
• preserves a full interval for callback-side pause
• preserves the next countdown delay for callback-side pause
• uses timer mutation generations so callback controls are not overwritten by default rescheduling

Diagnostics and allocation behavior

• fixes ESP-IDF stack high-water units by returning the byte value directly
• queries live task and queue diagnostics while lifecycle protection keeps handles valid
• moves callbacks into timer records and invokes stored callbacks directly
• narrows the no-exception documentation to accurately describe std::function, callback-capture, and shared_ptr allocation behavior

Runtime tests and release gates

• adds a host FreeRTOS adapter that compiles and executes the production Pulse.cpp
• covers timeout/interval/countdown ordering, non-divisible countdown completion, terminal controls, restart behavior, pause/resume delay preservation, callback command ordering, queue-full rollback, shutdown priority, long-callback timeout/retry, concurrent first initialization, stale lifecycle waiters, repeated lifecycle cycles, external destructor joining, callback self-destruction, callback cleanup outside the lifecycle lock, diagnostics, and stack units
• adds a no-exceptions compilation job
• adds branch/tag package-version validation
• updates library.properties and library.json to 0.1.0
• adds a compilable on-device lifecycle smoke sketch under extras/PulseSmoke
• adds curated CHANGELOG.md release notes and updated lifecycle/API documentation
• deduplicates branch and pull-request CI through a shared concurrency key

Validation

GitHub Actions run 29341692432 passed the main CI workflow on the previous head. A follow-up commit moved the smoke sketch under extras/PulseSmoke to satisfy Arduino Lint rule LD003.

• production source audit: passed
• package version consistency: passed
• -fno-exceptions production compilation: passed
• all deterministic host runtime contracts: passed
• PIOArduino example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed
• Arduino CLI example and smoke-sketch compilation:
  • classic ESP32: passed
  • ESP32-S3: passed
  • ESP32-C3: passed
  • ESP32-P4: passed

Remaining manual release gate

Keep this PR as draft until extras/PulseSmoke has been executed on physical hardware with:

1. an internal task stack; and
2. a PSRAM task stack on a supported PSRAM-capable board.

The sketch is compiled in CI for the full board matrix, but this PR does not claim that physical hardware execution was performed.

Scope note

The existing shared_ptr timer-record ownership remains in place for v0.1.0. Avoidable callback copies were removed and the allocation contract is documented accurately. Replacing the shared_ptr control-block allocation remains optional follow-up hardening and should not delay the lifecycle safety fixes.