@ddtcorex/dsh-maestro-review 0.7.2 → 0.7.4

package/profiles/reviewer-ci/pnpm-workspace.yaml

@@ -7,6 +7,46 @@
 # printed "Scope: all 2 workspace projects" and resolved relative to `../..`
 # without this file present).
 packages: []
+# Force the whole @deepseek-ai/dsh-* core dependency graph to one coherent
+# 0.1.5-rc.2 line. Bumping only dsh/dsh-base/dsh-agent-presets (the packages
+# this profile declares directly) left ~23 of THEIR transitive deps resolved
+# at the older 0.1.2-rc.1 they used to be pinned to, because nothing in the
+# graph forced them past whatever loose range their other consumers still
+# declared. The mismatch is silent at install time (a peer warning only) but
+# fatal at boot: a newer consumer ESM-imports a symbol the older peer's build
+# never exported (e.g. dsh-session-persistence-jsonl@0.1.5-rc.2 importing
+# SessionAlreadyExistsError from dsh-session-persistence@0.1.2-rc.1, which
+# doesn't have it), crashing the whole plugin tree with exit 1 — root-caused
+# 2026-09-14 by reproducing the crash locally (`docker run --entrypoint
+# /entrypoint.sh` with real credentials; GITLAB_HOST must be the bare
+# hostname, no `https://` prefix — ci-trigger.ts prepends the scheme itself).
+# pnpm reads `overrides:` here, NOT from package.json, on pnpm 11 (see the
+# dsh-invariants override above/below for the same gotcha in the sibling
+# workspace). Every package below is confirmed to publish a 0.1.5-rc.2.
+overrides:
+  '@deepseek-ai/dsh-attachment': 0.1.5-rc.2
+  '@deepseek-ai/dsh-session-persistence': 0.1.5-rc.2
+  '@deepseek-ai/dsh-fs': 0.1.5-rc.2
+  '@deepseek-ai/dsh-code-runtime': 0.1.5-rc.2
+  '@deepseek-ai/dsh-compaction': 0.1.5-rc.2
+  '@deepseek-ai/dsh-settings': 0.1.5-rc.2
+  '@deepseek-ai/dsh-hook-protocol': 0.1.5-rc.2
+  '@deepseek-ai/dsh-jobs': 0.1.5-rc.2
+  '@deepseek-ai/dsh-sandbox': 0.1.5-rc.2
+  '@deepseek-ai/dsh-session-query': 0.1.5-rc.2
+  '@deepseek-ai/dsh-util-time': 0.1.5-rc.2
+  '@deepseek-ai/dsh-shell': 0.1.5-rc.2
+  '@deepseek-ai/dsh-sdk-protocol': 0.1.5-rc.2
+  '@deepseek-ai/dsh-anonymous-user-id': 0.1.5-rc.2
+  '@deepseek-ai/dsh-output-retention': 0.1.5-rc.2
+  '@deepseek-ai/dsh-spill': 0.1.5-rc.2
+  '@deepseek-ai/dsh-workflow': 0.1.5-rc.2
+  '@deepseek-ai/dsh-util-workspace-path': 0.1.5-rc.2
+  '@deepseek-ai/dsh-bash-local': 0.1.5-rc.2
+  '@deepseek-ai/dsh-authorization': 0.1.5-rc.2
+  '@deepseek-ai/dsh-session-telemetry': 0.1.5-rc.2
+  '@deepseek-ai/dsh-session-title-llm': 0.1.5-rc.2
+  '@deepseek-ai/dsh-subagent-in-process-driver': 0.1.5-rc.2
 # Postinstall scripts required at runtime (node-pty/subprocess-local spawn
 # agents, koffi/protobufjs/genai serve model IO). Exact versions pinned in
 # pnpm-lock.yaml; review on every profile dep bump.

package/src/host/skills-tool.ts

@@ -53,7 +53,20 @@ export const MAESTRO_SKILLS_INSTALL_COMMAND = 'curl -fsSL https://raw.githubuser
 const loadedReviewProfiles = new WeakMap<object, ReviewSkillProfile>()
 
 export function loadedReviewProfile(ctx: Context): ReviewSkillProfile | undefined {
-  return ctx.agent === undefined ? undefined : loadedReviewProfiles.get(ctx.agent)
+  // Cordis's Context proxy throws synchronously on any property nobody
+  // registered/injected ("cannot get property ... without inject") rather
+  // than returning undefined — so a context where the framework's own
+  // `agent` service isn't available needs a try/catch, not just an
+  // `=== undefined` check, to actually get the "no agent yet" outcome this
+  // function documents. Root-caused 2026-09-14 against a real failed
+  // review (reproduced directly with @deepseek-ai/cordis, not a mock).
+  let agent: object | undefined
+  try {
+    agent = ctx.agent
+  } catch {
+    return undefined
+  }
+  return agent === undefined ? undefined : loadedReviewProfiles.get(agent)
 }
 
 // Mirrors @deepseek-ai/dsh-skill's consumer-facing `SkillRegistry` (verified

package/templates/reviewer-project.gitlab-ci.yml

@@ -3,7 +3,7 @@ stages: [review]
 
 variables:
   # Image registry — pin the SHA for reproducibility
-  REVIEWER_IMAGE: "ddtcorex/maestro-reviewer:0.7.2"
+  REVIEWER_IMAGE: "ddtcorex/maestro-reviewer:0.7.4"
   # Or use $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA when building the image in the same project
 
 review: