@adhdev/mesh-shared 1.0.76-rc.1 → 1.0.76-rc.2

package/dist/node-facts.d.ts

@@ -223,7 +223,6 @@ export declare function normalizeMeshNodeFacts(raw: unknown): MeshNodeFacts | un
  *
  * Known non-members and why, so this is not re-litigated per surface:
  *   - cursor-cli    — permanently impossible; no personal usage API exists
- *   - hermes-cli    — no model-axis quota to report
  *
  * ★grok-cli WAS listed here as impossible and is not: that verdict came from
  * probing `api.x.ai` / `management-api.x.ai` (the team-API billing axis, which

package/dist/outbound-message.d.ts

@@ -93,8 +93,12 @@ export interface InputEnvelopeWire {
  * `'mesh'` (flagged as an open question in phase-D-plan.md §7.3 risk 5) —
  * kept here unchanged pending an owner decision; dropping a union member is
  * a decision for whoever lands D-daemon/D2, not this workstream.
+ *
+ * `'assistant'`: the assistant layer's `project_send` into a project
+ * coordinator (docs/design/2026-10-07-assistant-layer.md §4.3 step 4). A label
+ * only — it is not an auth signal and selects no policy of its own.
  */
-export type OutboundMessageOrigin = 'dashboard' | 'mcp' | 'mesh' | 'api' | 'cli';
+export type OutboundMessageOrigin = 'dashboard' | 'mcp' | 'mesh' | 'api' | 'cli' | 'assistant';
 /**
  * How this message should be admitted when the session is not idle.
  * Replaces the loose `sendNow`/`interrupt`/`force`/`forceSend` booleans (and
@@ -188,7 +192,7 @@ export interface OutboundMessage {
 }
 export declare function mintMessageId(now?: number): string;
 export declare function isMessageId(value: unknown): value is string;
-export declare const OUTBOUND_MESSAGE_ORIGINS: readonly ["dashboard", "mcp", "mesh", "api", "cli"];
+export declare const OUTBOUND_MESSAGE_ORIGINS: readonly ["dashboard", "mcp", "mesh", "api", "cli", "assistant"];
 export declare function isOutboundMessageOrigin(value: unknown): value is OutboundMessageOrigin;
 export declare const SEND_POLICY_MODES: readonly ["queue", "send_now", "interrupt"];
 export declare function isSendPolicyMode(value: unknown): value is SendPolicy['mode'];

package/dist/session-launch.d.ts

@@ -25,8 +25,10 @@ export declare function isModelAxisSource(value: unknown): value is ModelAxisSou
 /**
  * Which surface started the session. `restore` means "re-attached to a hosted
  * runtime that outlived a daemon restart" — the axis sources are preserved.
+ * `assistant` is the assistant layer's own session (`launch_assistant`,
+ * docs/design/2026-10-07-assistant-layer.md §4.5).
  */
-export declare const SESSION_LAUNCHED_BY: readonly ["dashboard", "mesh", "cli", "api", "restore"];
+export declare const SESSION_LAUNCHED_BY: readonly ["dashboard", "mesh", "cli", "api", "restore", "assistant"];
 export type SessionLaunchedBy = typeof SESSION_LAUNCHED_BY[number];
 export declare function isSessionLaunchedBy(value: unknown): value is SessionLaunchedBy;
 /** How a value entered the axis history. */

package/dist/slot-proposal.d.ts

@@ -58,8 +58,8 @@ export interface CliSlotRecipe {
  * invented heuristic. Replace wholesale once usage data (success rate, cost,
  * turn latency per provider×difficulty) can drive it.
  *
- * Every entry except `hermes-cli` reflects a real configured slot. `hermes-cli`
- * is a conservative GUESS — see its `provisional` flag.
+ * Every entry reflects a real configured slot. A provider absent from the table
+ * falls back to {@link UNKNOWN_CLI_SLOT_RECIPE}, the only `provisional` recipe.
  */
 export declare const CLI_SLOT_RECIPES: Readonly<Record<string, readonly CliSlotRecipe[]>>;
 /**

package/dist/turn-evidence.d.ts

@@ -74,11 +74,13 @@ export type LivenessResult = typeof LIVENESS_RESULTS[number];
 export declare const PROVIDER_FAILURES: readonly ["auth_failed", "billing_failed"];
 export type ProviderFailure = typeof PROVIDER_FAILURES[number];
 /**
- * `daemon_restart` (wiring-unification follow-up, design §5): a boot-time
- * reconciliation observes this for a plain attempt whose session is gone
- * after a restart — the daemon never saw the session's own exit, so it is
- * not `provider_error`/`adapter_error`/etc.; it is the daemon itself
- * reporting "this session no longer exists".
+ * `daemon_restart` (wiring-unification follow-up, design §5): boot-time
+ * reconciliation observes this for a plain attempt that was open when the
+ * daemon restarted — either its session is gone, or the session was restored
+ * live but the turn in flight was cut by the restart. The daemon never saw
+ * the session's own exit or commit, so it is not `provider_error` /
+ * `adapter_error` / etc.; it is the daemon itself closing a turn it can no
+ * longer follow.
  */
 export declare const SESSION_ERROR_REASONS: readonly ["provider_error", "adapter_error", "spawn_failed", "auth_failed", "billing_failed", "unknown", "daemon_restart"];
 export type SessionErrorReason = typeof SESSION_ERROR_REASONS[number];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adhdev/mesh-shared",
-  "version": "1.0.76-rc.1",
+  "version": "1.0.76-rc.2",
   "description": "ADHDev mesh-shared — pure mesh/git status normalizers shared by daemon-core and web-core",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/assistant-protocol.ts

@@ -0,0 +1,109 @@
+/**
+ * assistant-protocol — the assistant layer's tool and daemon-verb names
+ * (docs/design/2026-10-07-assistant-layer.md §4.4).
+ *
+ * The single source for both halves of the assistant contract, like
+ * `WORKER_TOOLS` is for workers:
+ *   - `ASSISTANT_TOOLS` — exactly what `adhdev mcp --assistant` will advertise
+ *     (an mcp-server parity test pins ListTools to this tuple once that mode
+ *     lands);
+ *   - `ASSISTANT_TOOL_VERBS` — the daemon command each tool calls;
+ *   - the daemon-only verbs (launch / MCP-only pull / owner actions) that have
+ *     no tool.
+ *
+ * Assistant tools are a separate set from the mesh tools: none of these names
+ * belongs in `CANONICAL_MESH_TOOL_NAMES`, and the coordinator/worker MCP modes
+ * never publish them.
+ */
+
+export const ASSISTANT_TOOLS = [
+    'projects',
+    'project_status',
+    'project_send',
+    'project_read',
+    'project_add',
+    'discover_repos',
+    'memory',
+    'skill_view',
+    'skill_manage',
+    'project_note',
+] as const
+
+export type AssistantTool = typeof ASSISTANT_TOOLS[number]
+
+const ASSISTANT_TOOL_SET: ReadonlySet<string> = new Set(ASSISTANT_TOOLS)
+
+export function isAssistantTool(value: unknown): value is AssistantTool {
+    return typeof value === 'string' && ASSISTANT_TOOL_SET.has(value)
+}
+
+/** Daemon verb names (§4.4 table + the five verbs below it). */
+export const ASSISTANT_VERB = {
+    // tool verbs
+    projects: 'assistant_projects',
+    projectStatus: 'assistant_project_status',
+    projectSend: 'assistant_project_send',
+    projectRead: 'assistant_project_read',
+    projectAdd: 'assistant_project_add',
+    discoverRepos: 'assistant_discover_repos',
+    memory: 'assistant_memory',
+    skillView: 'assistant_skill_view',
+    skillManage: 'assistant_skill_manage',
+    projectNote: 'assistant_project_note',
+    // assistant-side daemon verbs without a tool of the same name
+    launch: 'launch_assistant',
+    pendingRelays: 'assistant_pending_relays',
+    // owner verbs (dashboard only)
+    stagedResolve: 'assistant_staged_resolve',
+    storeAdmin: 'assistant_store_admin',
+    importSkills: 'assistant_import_skills',
+} as const
+
+export type AssistantVerb = typeof ASSISTANT_VERB[keyof typeof ASSISTANT_VERB]
+
+/** The daemon verb each assistant tool calls. */
+export const ASSISTANT_TOOL_VERBS: Readonly<Record<AssistantTool, AssistantVerb>> = {
+    projects: ASSISTANT_VERB.projects,
+    project_status: ASSISTANT_VERB.projectStatus,
+    project_send: ASSISTANT_VERB.projectSend,
+    project_read: ASSISTANT_VERB.projectRead,
+    project_add: ASSISTANT_VERB.projectAdd,
+    discover_repos: ASSISTANT_VERB.discoverRepos,
+    memory: ASSISTANT_VERB.memory,
+    skill_view: ASSISTANT_VERB.skillView,
+    skill_manage: ASSISTANT_VERB.skillManage,
+    project_note: ASSISTANT_VERB.projectNote,
+}
+
+/**
+ * Tools annotated as writes; every other assistant tool is read-only. §4.4
+ * lists the three store writes; project_send and project_add are here too
+ * because they cause effects (a coordinator message or launch, a new
+ * project), and MCP clients use readOnlyHint to skip confirmation.
+ */
+export const ASSISTANT_WRITE_TOOLS: readonly AssistantTool[] = ['memory', 'skill_manage', 'project_note', 'project_send', 'project_add']
+
+/** Owner-only verbs: never reachable from the assistant's MCP server (no `ipc`). */
+export const ASSISTANT_OWNER_VERBS: readonly AssistantVerb[] = [
+    ASSISTANT_VERB.stagedResolve,
+    ASSISTANT_VERB.storeAdmin,
+    ASSISTANT_VERB.importSkills,
+]
+
+/** The only assistant verbs accepted while an idle review turn is open (§4.10.7). */
+export const ASSISTANT_REVIEW_TURN_VERBS: readonly AssistantVerb[] = [
+    ASSISTANT_VERB.memory,
+    ASSISTANT_VERB.skillView,
+    ASSISTANT_VERB.skillManage,
+    ASSISTANT_VERB.projectNote,
+]
+
+/**
+ * Env var the daemon sets on the assistant CLI's process (§4.5), read by the
+ * assistant MCP server and forwarded on every verb as
+ * `ASSISTANT_SESSION_ID_ARG`. Routing / ownership only — never an auth gate.
+ */
+export const ASSISTANT_SESSION_ID_ENV = 'ADHDEV_ASSISTANT_SESSION_ID'
+
+/** Request arg carrying the calling assistant session id. */
+export const ASSISTANT_SESSION_ID_ARG = 'assistantSessionId'

package/src/index.ts

@@ -33,6 +33,7 @@ export * from './session-status'
 export * from './mesh-vocabulary'
 export * from './outbound-message'
 export * from './worker-protocol'
+export * from './assistant-protocol'
 export * from './protocol'
 export * from './turn-evidence'
 export * from './session-launch'

package/src/node-facts.ts

@@ -238,7 +238,6 @@ export function normalizeMeshNodeFacts(raw: unknown): MeshNodeFacts | undefined
  *
  * Known non-members and why, so this is not re-litigated per surface:
  *   - cursor-cli    — permanently impossible; no personal usage API exists
- *   - hermes-cli    — no model-axis quota to report
  *
  * ★grok-cli WAS listed here as impossible and is not: that verdict came from
  * probing `api.x.ai` / `management-api.x.ai` (the team-API billing axis, which

package/src/outbound-message.ts

@@ -113,8 +113,12 @@ export interface InputEnvelopeWire {
  * `'mesh'` (flagged as an open question in phase-D-plan.md §7.3 risk 5) —
  * kept here unchanged pending an owner decision; dropping a union member is
  * a decision for whoever lands D-daemon/D2, not this workstream.
+ *
+ * `'assistant'`: the assistant layer's `project_send` into a project
+ * coordinator (docs/design/2026-10-07-assistant-layer.md §4.3 step 4). A label
+ * only — it is not an auth signal and selects no policy of its own.
  */
-export type OutboundMessageOrigin = 'dashboard' | 'mcp' | 'mesh' | 'api' | 'cli'
+export type OutboundMessageOrigin = 'dashboard' | 'mcp' | 'mesh' | 'api' | 'cli' | 'assistant'
 
 /**
  * How this message should be admitted when the session is not idle.
@@ -243,7 +247,7 @@ export function isMessageId(value: unknown): value is string {
 
 // ─── Guards ─────────────────────────────────────────────────────────────────
 
-export const OUTBOUND_MESSAGE_ORIGINS = ['dashboard', 'mcp', 'mesh', 'api', 'cli'] as const satisfies readonly OutboundMessageOrigin[]
+export const OUTBOUND_MESSAGE_ORIGINS = ['dashboard', 'mcp', 'mesh', 'api', 'cli', 'assistant'] as const satisfies readonly OutboundMessageOrigin[]
 
 export function isOutboundMessageOrigin(value: unknown): value is OutboundMessageOrigin {
     return typeof value === 'string' && (OUTBOUND_MESSAGE_ORIGINS as readonly string[]).includes(value)

package/src/session-launch.ts

@@ -54,8 +54,10 @@ export function isModelAxisSource(value: unknown): value is ModelAxisSource {
 /**
  * Which surface started the session. `restore` means "re-attached to a hosted
  * runtime that outlived a daemon restart" — the axis sources are preserved.
+ * `assistant` is the assistant layer's own session (`launch_assistant`,
+ * docs/design/2026-10-07-assistant-layer.md §4.5).
  */
-export const SESSION_LAUNCHED_BY = ['dashboard', 'mesh', 'cli', 'api', 'restore'] as const
+export const SESSION_LAUNCHED_BY = ['dashboard', 'mesh', 'cli', 'api', 'restore', 'assistant'] as const
 
 export type SessionLaunchedBy = typeof SESSION_LAUNCHED_BY[number]
 

package/src/slot-proposal.ts

@@ -64,8 +64,8 @@ export interface CliSlotRecipe {
  * invented heuristic. Replace wholesale once usage data (success rate, cost,
  * turn latency per provider×difficulty) can drive it.
  *
- * Every entry except `hermes-cli` reflects a real configured slot. `hermes-cli`
- * is a conservative GUESS — see its `provisional` flag.
+ * Every entry reflects a real configured slot. A provider absent from the table
+ * falls back to {@link UNKNOWN_CLI_SLOT_RECIPE}, the only `provisional` recipe.
  */
 export const CLI_SLOT_RECIPES: Readonly<Record<string, readonly CliSlotRecipe[]>> = Object.freeze<Record<string, readonly CliSlotRecipe[]>>({
     'claude-cli': [
@@ -115,18 +115,6 @@ export const CLI_SLOT_RECIPES: Readonly<Record<string, readonly CliSlotRecipe[]>
             rationale: 'Easy tasks only; auto model selection.',
         },
     ],
-    'hermes-cli': [
-        {
-            difficulty: ['medium'],
-            maxParallel: 2,
-            provisional: true,
-            // NOTE: ESTIMATE, NOT OBSERVED. hermes-cli is absent from the live
-            // slot configuration this table was seeded from, so `medium` is a
-            // conservative placement rather than a transcription. Revisit once
-            // it has real usage data.
-            rationale: 'ESTIMATE — no live slot to transcribe; conservative mid placement. Adjust after real use.',
-        },
-    ],
 })
 
 /**
@@ -193,7 +181,7 @@ function slotKey(slot: NodeCapabilitySlot): string {
         [...(slot.difficulty ?? [])].sort().join('|'),
         [...(slot.capability ?? [])].sort().join('|'),
         slot.maxParallel ?? '',
-    ].join('')
+    ].join('\u0000')
 }
 
 /** Dedupe detected providers by type, preserving first-seen order. */

package/src/turn-evidence.ts

@@ -107,11 +107,13 @@ export const PROVIDER_FAILURES = ['auth_failed', 'billing_failed'] as const
 export type ProviderFailure = typeof PROVIDER_FAILURES[number]
 
 /**
- * `daemon_restart` (wiring-unification follow-up, design §5): a boot-time
- * reconciliation observes this for a plain attempt whose session is gone
- * after a restart — the daemon never saw the session's own exit, so it is
- * not `provider_error`/`adapter_error`/etc.; it is the daemon itself
- * reporting "this session no longer exists".
+ * `daemon_restart` (wiring-unification follow-up, design §5): boot-time
+ * reconciliation observes this for a plain attempt that was open when the
+ * daemon restarted — either its session is gone, or the session was restored
+ * live but the turn in flight was cut by the restart. The daemon never saw
+ * the session's own exit or commit, so it is not `provider_error` /
+ * `adapter_error` / etc.; it is the daemon itself closing a turn it can no
+ * longer follow.
  */
 export const SESSION_ERROR_REASONS = ['provider_error', 'adapter_error', 'spawn_failed', 'auth_failed', 'billing_failed', 'unknown', 'daemon_restart'] as const
 export type SessionErrorReason = typeof SESSION_ERROR_REASONS[number]