@dsh-enhanced/assistant-growth-driver 0.1.34

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-enhanced contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,200 @@
+# @dsh-enhanced/assistant-growth-driver
+
+默认关闭的有界后台成长驱动。可通过 `usageLearning` 让真实前台任务结果自动触发持久成长作业，或由 Host 显式唤醒。Agent 回顾 owner 的已验收成功、沉淀 pending 技能候选；启用源码轨后可准备已有 gap 对应的插件修改提案。当前自动入口已接通，修复后的有限采用与持续观察需另配 Control Plane；可安装部署与独立行为验收仍未贯通，`reviewed` 仅表示本次成长复盘结束。
+
+同一插件内还有**第二条、独立开关**的学习轨 `workflowOwnerAnchored`（默认关闭）：它不起模型、不触网，只在本地枚举最近完成的 owner-root goal，把 locator（不含任何 prompt/步骤/验收结论）交给 `assistant-delivery`；由 Delivery 自己再调 goals 的 `inspectOwnerVerifiedWorkflowSource` 独立复核（owner-root、whole-goal succeeded 且 quiescent、cwd/preset 精确匹配），只接受可诚实归约为**单步零工具 agent-turn** 的 goal，通过后经 content-free trace v2 沉淀为 workflow growth candidate，并由 Growth 以 **paused** automation 落库待 owner 批准。自由 objective 无法跨任务聚齐重复门，故该轨**单条即沉淀**：每个独立复核通过的成功 goal 产一条独立 paused 候选。候选带冻结的**占位 cron**（`0 0 29 2 *` UTC，由 store 的激活门阻断执行）；automations 在 store 层 fail-closed——Growth 所属且仍带占位 schedule 的 workflow 无法经 owner 批准 `resume` 或系统 reconcile 转 active，必须先由 owner 显式做一次 schedule mutation（换真 cron）。该轨同样零 approve/activate/install。
+
+自动成长默认继承 Delivery 随来源任务保存的实际 `request/header` 模型快照，包括 adapter 默认 reasoning effort；历史来源不读取后来切换的会话模型。可同时配置 `provider` / `model` 固定覆盖。Host 显式 `wake({ sourceAgent })` 读取该 Agent 的实际请求，普通周期 wake 仍读取外部会话当前选择。原生 Web 无来源时不猜模型。`health().run.model` 记录本轮模型；已派发但中断的持久作业保持 unknown，不换模型或自动重放。
+
+## 安装
+
+先装好 `assistant-delivery`、`assistant-goals`、`assistant-skills`、`assistant-policy` 和所用模型 adapter，再安装本包。只有选用 super-relay 时才需要安装并启用 `assistant-super-relay-budget`：
+
+```sh
+dsh plugin --profile web add @dsh-enhanced/assistant-growth-driver
+dsh --profile web --dump-config
+```
+
+包内 `cordis.patch.yml` 只注册插件、不带任何 `enabled` 配置，因此**安装后处于休眠状态**：无 timer、不起 Agent、零写入。第一期不随任何生产 profile 默认启用。
+
+## 工作机制
+
+每次唤醒（`intervalMs > 0` 的 unref timer，或显式调用 `wake()`）：
+
+1. **Preflight（不触网、不起 Agent）**：用配置中冻结的 owner scope 经 `assistantDelivery.validateOwnerRoute` 重新锚定真实 owner route 并铸造一枚短-lived authority（寿命 `≤ maxDurationMs`，硬顶 300000ms，每次使用都重新校验 route，route 漂移即整轮作废）；读取并冻结所选模型；仅使用 super-relay 时检查其契约和默认凭据引用，其他供应由对应 DSH adapter 管理凭据；确认 policy 服务在线；可选地预留 owner 配置的后台预算。
+2. **有界后台 Agent**：照 `assistant-skills` repair-agent 的冻结范式运行——`llm/stream` 逐请求钉 provider/model/maxTokens/tools digest，`tools.guard` 白名单 + 双预算计数，system-prompt 按身份过滤，`deadline = min(expiresAt, now + maxDurationMs)` 到点 abort。刻意**不挂载任何 preset**：默认工具面恰好是下面四个 `growth_*` realm 工具；显式开启源码提案且 control-plane 服务在线且配置了构建器时增加三个 `plugin_source_*` 工具。任何其它可见工具都会在发请求前被拒绝。
+   - `growth_list_owner_goals`：列最近的 owner-root goal（只读投影）。
+   - `growth_read_verified_workflow`：读一条已完成 goal 的**脱敏**摘要；Host 独立复核 owner-root（非 subagent、无 parent session、delegationDepth=0）、whole-goal succeeded 且 quiescent，cwd/preset 精确匹配；不返回步骤参数与验收回执。
+   - `growth_list_skills`：列该 owner 的 active skill 与 pending candidate，避免重名。
+   - `growth_propose_skill_candidate`：唯一的写工具，只产「提议」。
+3. **Host 侧复核沉淀（系统 authority，非模型）**：提议携带的每个 `{session_id, goal_id}` 都由 skills 服务经 goals 独立重读、逐条重新验收；必须有 **≥ `minRepeatedSuccesses` 个不同** 的 owner-verified 成功（模型无法把门槛降到配置值以下，谎报/伪造/重复 locator 一律拒绝且零写入），同名 active / pending / retired 冲突不写。通过后只 `stageCandidate` 产一条 **pending candidate**（TTL ≤ 7 天，带 reason/trigger/parentVersion）：不进 current 版本，`skill_run` 不可达。
+
+## 配置与使用
+
+所有配置项 fail-closed；未知字段直接报错。
+
+| 字段 | 默认 | 说明 |
+| --- | --- | --- |
+| `enabled` | `false` | 必须显式置 `true` 才运行；且启用时必须同时声明 `scope`，否则启动报错。 |
+| `scope` | 无 | 冻结的 owner 四字段 `workspace` / `preset` / `principalId` / `ownerRouteId`。driver 只在该 scope 内动作，identity 不从模型输出派生。`ownerRouteId` 必须是 Delivery 中既有的、已认证的 owner route id；route 不存在/不匹配时每轮跳过并记 `missing-binding`。 |
+| `intervalMs` | `0` | 显式 wake 的可选周期（上限 24h）；启用 `usageLearning` 时必须为 `0`，由 Automations 负责调度。 |
+| `minRepeatedSuccesses` | `3` | Host 侧重复门下限（1–32），模型提交值只允许更高。 |
+| `maxReviewsPerWake` | `10` | 每轮枚举历史 goal 的条数上限（1–50）。 |
+| `candidateTtlMs` | `86400000` | pending candidate TTL，schema 硬顶 7 天。 |
+| `maxModelCalls` / `maxToolCalls` / `maxOutputTokens` | `8` / `24` / `8192` | 单轮预算，到顶即 abort/cancel。 |
+| `maxDurationMs` | `120000` | 单轮墙钟上限，**硬顶 300000ms**（安全根，配置不可越过）。 |
+| `budgetId` / `budgetAmount` | 均无 | 必须**同时出现**；显式 wake 经 Policy 预留；usage 作业由 Automations 预留，避免重复扣取。已提交的未知消耗不退回。 |
+| `provider` / `model` | 继承会话 | 同时配置以固定修复/成长模型；只配置一个会拒绝。不会自动回退到 Day1。 |
+| `reasoningEffort` | 继承会话；固定模型时用供应默认 | 只有同时配置固定 provider/model 时可覆盖。 |
+| `apiKeyEnv` | 随供应 | 可选凭据引用名；未设置时，super-relay 使用 `SUPER_RELAY_API_KEY`，其他供应由对应 adapter 管理。引用优先经 credentials 解析，再读同名环境变量；不接受或打印明文 key。 |
+| `workflowOwnerAnchored.enabled` | `false` | owner-anchored workflow 轨独立开关；置 `true` 时要求驱动本体 `enabled: true` 且已声明 `scope`，否则启动报错。 |
+| `workflowOwnerAnchored.maxCommitsPerWake` | `5` | 单轮最多尝试提交的候选数（1–50）；goals/delivery 不可用、authority/route 漂移即中断本轮。幂等重放代价很低。 |
+| `pluginSourceProposals.enabled` | `false` | 开启后通过可选 `pluginControlPlane` 服务准备既有插件的 pending 修改提案。缺少该服务或构建器未配置时仍保持四工具基线。 |
+| `pluginSourceProposals.repository` | 无 | 开启时必填的绝对规范仓库路径；由 owner 配置，模型不可传入。 |
+| `pluginSourceProposals.preparationMode` | `inline` | `inline` 保持本轮隔离构建；`durable` 只把已读、冻结 base 的内容排入 Control Plane 自己的持久队列。队列 authority、构建超时和执行生命周期都由 Control Plane 配置，独立于模型 wake。 |
+| `pluginSourceProposals.maxPlansPerWake` | `1` | 每轮源码提案尝试上限（1–5）；inline 的 prepared 与 durable 的 queued 都占用此预算，失败也占一次。 |
+| `pluginSourceProposals.isolatedBuildTimeoutMs` | `180000` | 仅 `inline` 使用的构建时间上限（60000–240000ms）；控制面可进一步收窄，单轮 authority 到期仍会取消。`durable` 使用控制面 `sourceBuild.timeoutMs`。 |
+| `pluginSourceProposals.offline` | `true` | 源码提案必须离线构建；`false` 配置会拒绝。镜像须预先准备依赖。 |
+| `pluginSourceProposals.planTtlMs` | `86400000` | 待批 worktree 保留期限（15 分钟–24 小时）。 |
+| `workflowOwnerAnchored.lookbackMs` | `86400000` | 只枚举该回看窗口内更新过的 owner goal（1 分钟–7 天）。 |
+| `usageLearning.enabled` | `false` | 真实任务触发开关；要求主开关、owner scope、预算及 Evaluation/Automations 服务。 |
+| `usageLearning.databasePath` | 无 | 开启时必填的私有 SQLite 绝对路径，保存游标、冻结来源与作业状态。 |
+| `usageLearning.maxPending` | `16` | 同时 queued/running 上限（1–100）；满时保留未消费游标，释放容量后继续。 |
+| `usageLearning.lookbackMs` | `86400000` | 来源结果最大年龄与排队 TTL（1 分钟–7 天）。 |
+
+super-relay 自身的 5 个键（`enabled` / `apiKeyEnv` / `timeoutMs` / `maxResponseBytes` / `defaultMaxTokens`）在 `assistant-super-relay-budget` 插件上配置；driver 不重复定义。
+
+### copy-paste opt-in 片段
+
+在 profile 的 `cordis.patch.yml` 中插入本插件（路径/身份按实际 owner 替换）：
+
+```yaml
+- insert:
+    - id: dsh-enhanced-assistant-growth-driver
+      name: '@dsh-enhanced/assistant-growth-driver'
+      config:
+        enabled: true
+        intervalMs: 3600000
+        minRepeatedSuccesses: 3
+        maxDurationMs: 120000
+        # 默认继承会话；需要固定模型时添加以下两项：
+        # provider: super-relay
+        # model: auto_model/alwaysday1
+        scope:
+          workspace: /abs/path/to/owner/workspace
+          preset: primary
+          principalId: owner-1
+          ownerRouteId: <exact-delivery-owner-route-id>
+        budgetId: growth-budget
+        budgetAmount: 1
+        # 第二条、独立开关的学习轨；整段删除即保持关闭。
+        workflowOwnerAnchored:
+          enabled: true
+          maxCommitsPerWake: 5
+          lookbackMs: 86400000
+```
+
+owner-anchored 轨不需要额外 policy 规则：它不挂模型 Agent，唯一写动作是 Host-only 的 Delivery 提交口（系统 authority，非模型面）。产出的 paused automation 需 owner 在 automations 既有审批面处理——**批准 resume 前必须先把占位 cron 显式改成真实 schedule**，否则批准会落 `conflicted` 且行保持 paused（这是 store 层硬门，不是 UI 提示）。
+
+后台 Agent 以 `background` initiator 绑定 owner principal；policy 默认空规则全拒，需在 `dsh-enhanced-assistant-policy` 的 `rules` 中补两条最小 allow（主体 id 是 scope 的 preset，workspace/principal 必须与 scope 精确一致）：
+
+```yaml
+rules:
+  - id: growth-draft
+    effect: allow
+    subject: { kind: agent, id: primary, workspace: /abs/path/to/owner/workspace, principal: owner-1 }
+    actions: [draft]
+    resource: { kind: evolution, id: verified-workflows }
+    context: { initiators: [background] }
+  - id: growth-tool-execute
+    effect: allow
+    subject: { kind: agent, id: primary, workspace: /abs/path/to/owner/workspace, principal: owner-1 }
+    actions: [execute]
+    resource: { kind: tool, id: 'growth_*' }
+    context: { initiators: [background] }
+```
+
+使用 `budgetId` 时还要在 policy `budgets` 中存在同 id、`scope: subject` 的预算。任何规则都只授予「读历史 + 提 pending 候选」；driver 不注册、也不需要 save/activate/install/retire/rollback 权限。
+
+### 观察与关闭
+
+- 服务方法 `health()` 返回最近一次唤醒的 `lastWakeAt` / `outcome`（`never-run`/`ran`/`skipped`/`failed`）/ `reason` / 运行用量；跳过原因包括 `missing-scope`、`missing-binding:*`、`contract-expired:*`、`missing-credential`、`missing-policy`、`budget:*`。
+- `health().ownerAnchored`（仅该轨启用且本轮跑过时存在）给本地轨计数：`considered`（窗口内完成的 goal）/ `attempted`（实际尝试提交）/ `recorded`（新沉淀）/ `replayed`（幂等重放）/ `abstained`（多工具等无法归约为单步 agent-turn，诚实跳过）/ `stopped`（非空时为 fail-closed 中断原因，如 `inspect:*`、`authority:*`、`runtime-unavailable:*`）。
+- 停用：把 `enabled` 置回 `false`（或移除插件配置）即恢复休眠，不影响已经 staged 的 pending candidate——它们仍只由 owner 在既有 skills/automations 审批面处理。
+
+## 既有插件源码提案
+
+源码审阅与技能沉淀分别执行：启用本能力后，即使没有历史完成目标，也会检查已登记的开放 gap。重复、独立验收成功仍是技能候选的必要条件；源码候选按 gap、读取版本、权限和隔离检查规则准入。
+
+另行安装同批 `plugin-control-plane`，按其 README 配置 owner trust 和隔离构建镜像，再给 driver 增加：
+
+```yaml
+pluginSourceProposals:
+  enabled: true
+  preparationMode: durable # 删除或设为 inline 时保持当前同步构建行为
+  repository: /abs/path/to/dsh-enhanced
+  maxPlansPerWake: 1
+  isolatedBuildTimeoutMs: 180000
+  offline: true
+  planTtlMs: 86400000
+```
+
+这段是 driver 完整配置的补充。DSH patch 的 `config` 为整值替换，覆盖配置时必须同时保留 `enabled`、`scope` 和其它需要的值。Policy 还需对相同 owner、workspace、preset 和 `background` initiator 授予 `execute` / `tool:plugin_source_*`。
+
+Agent 先通过 `plugin_source_gaps` 发现 owner 配置的控制面账本中已有的开放 gap，通过 `plugin_source_read` 列出并读取目标插件在 Git 提交中的文本源码，最后通过 `plugin_source_prepare` 提交 `gap_id`、`plugin_name` 与两种互补的修改输入：新增短文件或完整替换用 `files: [{path, content}]`；已读的长既有文件用 `edits: [{path, before, after}]`。每个 `before` 必须在本轮缓存的原始文本中精确且唯一地出现，编辑按原始偏移处理，且不能重叠；`files` 与 `edits` 可以一起使用，但路径必须互不相同。Host 先展开为完整文件再交给 Control Plane，模型不会从确认结果取回缓存源码。普通手动 wake 读取既有手工 gap，这类记录没有逐条 owner 来源证明，多 owner 部署仍须隔离手工账本。启用下述 `usageLearning` 时只读取本次可信失败的专属 gap，绝不退回全局列表。至少提供一种非空输入；两种输入合计最多 64 项，单个完整内容、`before`、`after` 与最终每个文件最多 64 KiB，最终完整文件最多 64 个、合计 256 KiB。模型不能给仓库路径、命令、镜像、环境、TTL、审批或发布参数。安全根插件由 driver 和控制面同时拒绝。
+
+`plugin_source_read` 接收 `gap_id`、`plugin_name`、`paths`；`paths: []` 返回文件清单，再按需读取源码、测试、README、package.json 和 patch。只读取已提交的文本，不读取工作区改动、未跟踪文件、符号链接、隐藏文件或生成目录。单文件最多 64 KiB，每轮内容累计最多 256 KiB，并受现有工具调用次数与运行时限控制。读取的内容属于不可信数据，不能改变工具权限。
+
+Host 在本轮内按 gap 与插件保存首次读取的 commit，后续读取和准备均绑定该 commit；HEAD 变化即拒绝旧上下文。同一文件在同一 commit 的再次读取若内容漂移也会拒绝。完整替换既有文件前必须读取原内容；精确编辑只能作用于已读的既有文件，可在已有目录中增加源码或测试文件。模型不能指定 commit，也不能只凭文件清单覆盖未读文件。服务提供者更换后读上下文与待执行动作一并失效；未提供源码读取接口的旧版 control-plane 保持四工具基础模式。
+
+Control Plane 拥有 worktree、源码快照、容器构建和 SQLite 写入。`inline` 成功时仅返回待审批 plan id 与检查摘要；`durable` 成功时只返回 content-free job id/status，Host 接受队列后继续以它自己的 durable authority 运行，即使模型 wake 随后到期也不会伪造为 prepared。`plugin_source_job_status` 只在 durable 模式出现，并用当前 Growth authority 的 owner scope 查询 job。owner 仍需通过控制面的签名审批、源码复核和发布流程处理。模型看不到 worktree 路径或构建日志。检查失败、owner route 漂移、provider 移除、插件卸载或本轮到期均终止尚未被 Host 接受的操作。`health().run.sourceProposals` 分别提供 `queued`、`prepared` / `rejected` 数量；可选 provider 更换后下一轮重新绑定，旧轮次不会跨代继续写入。
+
+## 真实使用自动触发
+
+在完整 driver 配置中加入：
+
+```yaml
+enabled: true
+intervalMs: 0
+budgetId: growth-budget
+budgetAmount: 1
+usageLearning:
+  enabled: true
+  databasePath: /absolute/private/assistant-growth.sqlite
+  scanBudgetId: growth-discovery-runs
+  scanBudgetAmount: 1
+  maxPending: 16
+  lookbackMs: 86400000
+```
+
+保留前文 `scope` 和模型/工具预算；按需保留源码轨配置。安装并挂载 `assistant-evaluation` 与 `assistant-automations`，启用 Automations scheduler。Policy 需允许 background 主体 `assistant-growth-usage` 对相同 workspace/principal 的 `automation:*` 执行 `reconcile`，并允许对应后台作业的 `execute`。使用全局或 owner 聚合的周期预算限制持续成长总消耗；每个 review 由原生 Automations 预留一次预算，driver 不重复扣取。已有 `growth_*` 与可选 `plugin_source_*` 工具规则仍适用。
+
+`scanBudgetId/scanBudgetAmount` 是启用时的必填配置；对应 Policy budget 的 metric 为 `automation-runs`，扫描建议用 `subject` scope（每个 owner scope 的 scan automation id 稳定）。每分钟扫描即使队列为空也需要预算；例如每天最多 1,440 次扫描可配置 `limit: 1440, periodMs: 86400000, scope: subject`。模型复盘继续使用顶层 `workspace/global` 聚合预算。Policy 账本按 scope、metric 和周期计量，仅换 budget id 不会分开额度；扫描用 `subject`、复盘用 `workspace/global` 可以避免扫描占用模型额度。扫描预算耗尽暂停跨进程发现，同进程通知仍可登记候选，但 review 仍须通过自己的预算；不要开启 `allowUnbudgetedExecution` 绕过配置。升级已启用配置须补齐扫描预算，旧排队作业因配置摘要变化停止，不自动重放。
+
+同进程 Evaluation 变化即时扫描，原生每分钟 scan 负责重启及其他进程写入的恢复；scan 自身不调用模型。只处理精确 owner、已结束且 quiescent、未截断的前台可信结果（独立 Verifier 或已认证 owner 反馈），内置 Delivery 普通对话可在回复具体消息的 `/feedback not-achieved` 后触发，无需预先配置任务验收 profile；单纯模型结束不会生成可信结果。排除 Automation/后台成长自己的结果，避免递归触发。缺模型快照或多请求模型不一致且没有固定覆盖时不发起作业。相同 canonical 修订只接纳一次；纠正/撤回使旧排队作业失效，运行中的作业在模型/工具边界重查来源。原始记录和评价仍由 Evaluation 持有。
+
+`usageHealth()` 返回连接、扫描错误与各状态数量，不返回任务正文。queued 可在重启后恢复；running 中断转 unknown，不自动重跑。配置、owner 身份/route 或来源变化会阻止旧作业继续。停用 `usageLearning` 会卸载执行器并中止本代工作；持久作业不会被清除。它目前自动驱动有界复盘和候选生成，尚不创建任意修复 Goal；完成复盘不代表候选已采用或带来收益。
+
+同时启用 `pluginSourceProposals` 后，可信 `not-achieved` 前台结果会在模型启动前自动登记 Control Plane 私有 gap，无需预先人工登记。Host 重新读取 Delivery 来源，在 Evaluation writer fence 内记录 owner、任务修订和来源摘要；gap 不保存任务原文，默认 ROI 为未知占位值 0。成功、unknown、撤回、未结束及截断来源不产生失败 gap。新控制面接口缺失时失败关闭，不读取全局手工 gap。
+
+源码检查、最终计划提交及 durable job 的排队、恢复和执行都重新核对来源。完整 owner receipt 固定后，`/new` 导致 binding/generation 变化也会停止旧任务。纠正或撤回后保留历史引用，禁止旧来源继续产出计划。Driver 负责候选生成；后续有限审批、发布、独立审查、采用与真实任务观察由另行配置的 [Control Plane](../plugin-control-plane/README.md) 接续。组件已接线，可安装部署与独立行为验收尚未贯通，不能据此宣称生产自迭代已完成。
+
+## 权限与数据
+
+- 网络：经本轮冻结的 DSH 模型 adapter 发出请求，目标及凭据由该供应配置决定；没有模型之外的网络工具。
+- 文件系统：启用 `usageLearning` 后写私有 SQLite（文件权限 `0600`），保存冻结任务正文、owner 与模型，未自动清理历史。正文最多 4096 字符，经 owner 校验后作为不可信数据交给获授权的成长模型；Automations 定义与公开 health 不含正文。skill candidate 由 Skills 入库，源码提案经 Control Plane 写入其私有 worktree 和 SQLite。
+- 子进程：源码轨开启时委托 Control Plane 调用 Git 与隔离容器构建；构建权属于 owner 配置的 Control Plane，见其权限说明。driver 无浏览器能力。
+- 凭据：只读解析一次凭据引用（存在性检查），不持久化、不回显、不入日志。
+- 审批/策略：每次沉淀与每个工具调用都在 service 边界经 `assistant-policy`；空规则默认拒绝。产物仅 pending，零 activate/install。
+
+## 明确不做（边界）
+
+- 不自主发起/执行 goal、不提议 guidance、不记 capability gap。
+- 不 activate / install / retire / rollback、不扩权、不改 policy 规则表、不碰预算上限与急停等安全根。
+- owner-anchored 轨只提交 locator：证据（objective、步骤、验收结论）一律由 Delivery 持 goals 独立重取，driver 不接受调用方自带 prompt，也不自造 trace source/authority。
+- 源码轨只到经过检查的 pending 提案；owner 签名、发布、生产启用和 HMR reload 由独立控制面处理。
+- owner-anchored 轨的证据是 Delivery 在进程内对真实 goals SQLite 的独立复核（工程层）；真实 super-relay 端到端与真实外部平台深评测均不在本期，前者仅由 owner 显式 opt-in 后手动触发一次。
+
+## 兼容性
+
+See the repository [compatibility baseline](../../docs/compatibility.md)。

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: dsh-enhanced-assistant-growth-driver
+      name: '@dsh-enhanced/assistant-growth-driver'

package/lib/config.d.ts

@@ -0,0 +1,122 @@
+import Schema from '@deepseek-ai/schemastery';
+/**
+ * The growth driver is opt-in and fail-closed: it never runs until `enabled`
+ * is explicitly true and a concrete owner scope is declared. Model selection
+ * follows the owner's conversation unless an explicit fixed pair overrides it.
+ */
+export declare const DEFAULT_API_KEY_ENV: "SUPER_RELAY_API_KEY";
+export interface GrowthOwnerScopeConfig {
+    workspace: string;
+    preset: string;
+    principalId: string;
+    ownerRouteId: string;
+}
+/**
+ * The owner-anchored workflow bridge is a second, independently switched
+ * learning track inside the wake. It is opt-in and fail-closed even when the
+ * driver itself is enabled: it never proposes, approves, activates or installs
+ * anything, it only asks Delivery to re-verify and record paused candidates.
+ */
+export interface WorkflowOwnerAnchoredConfig {
+    enabled?: boolean;
+    /** Hard cap on commit attempts in one wake (rate limit); idempotent replays are cheap. */
+    maxCommitsPerWake?: number;
+    /** Only consider owner goals last updated inside this lookback horizon (TTL). */
+    lookbackMs?: number;
+}
+/**
+ * The plugin source-proposal track is the third, independently switched growth
+ * capability. It is opt-in and fail-closed even when the driver itself is
+ * enabled: the growth agent may then prepare PENDING modify source plans in
+ * isolated worktrees, but it can never approve, sign, release, activate,
+ * install or reload anything. Every build-shaping value (repository path,
+ * timeouts, TTL, offline flag) is frozen owner configuration — the model can
+ * never supply a repository, worktree, base commit or environment.
+ */
+export interface PluginSourceProposalsConfig {
+    enabled?: boolean;
+    /** Inline builds during the model wake; durable queues Host-owned work. */
+    preparationMode?: 'inline' | 'durable';
+    /** Canonical absolute path of the dsh-enhanced repository the patches target. Required when enabled. */
+    repository?: string;
+    /** Hard cap on prepared modify plans in one wake (rate limit); idempotent replays are cheap. */
+    maxPlansPerWake?: number;
+    /** Per-command bounded timeout for the frozen install/check/pack gate. */
+    isolatedBuildTimeoutMs?: number;
+    /** Run pnpm install fully offline (the owner must warm the store beforehand). */
+    offline?: boolean;
+    /** Pending-plan TTL: how long the isolated worktree waits for owner action. */
+    planTtlMs?: number;
+}
+export interface AssistantGrowthDriverConfig {
+    enabled?: boolean;
+    /** 0 = no periodic wake; the driver only runs when explicitly triggered. */
+    intervalMs?: number;
+    maxReviewsPerWake?: number;
+    minRepeatedSuccesses?: number;
+    candidateTtlMs?: number;
+    maxModelCalls?: number;
+    maxToolCalls?: number;
+    maxOutputTokens?: number;
+    maxDurationMs?: number;
+    /** Omit both to inherit the owner conversation; specify both for a fixed route. */
+    provider?: string;
+    model?: string;
+    /** Optional effort for an explicitly configured fixed route. */
+    reasoningEffort?: string;
+    /** Optional policy budget id; when unset no budget reservation is made. */
+    budgetId?: string;
+    /** Reserved amount in the owner-configured budget metric; required when budgetId is set. */
+    budgetAmount?: number;
+    /** Credential reference only; never a literal API key. */
+    apiKeyEnv?: string;
+    scope?: GrowthOwnerScopeConfig;
+    workflowOwnerAnchored?: WorkflowOwnerAnchoredConfig;
+    pluginSourceProposals?: PluginSourceProposalsConfig;
+    /** One-time opt-in to durable reviews driven by actual trusted foreground results. */
+    usageLearning?: {
+        enabled?: boolean;
+        databasePath?: string;
+        maxPending?: number;
+        lookbackMs?: number;
+        /** Native discovery scans need their own explicit automation-runs allocation. */
+        scanBudgetId?: string;
+        scanBudgetAmount?: number;
+    };
+}
+export interface NormalizedWorkflowOwnerAnchoredConfig {
+    readonly enabled: boolean;
+    readonly maxCommitsPerWake: number;
+    readonly lookbackMs: number;
+}
+export interface NormalizedPluginSourceProposalsConfig {
+    readonly enabled: boolean;
+    readonly preparationMode: 'inline' | 'durable';
+    readonly repository: string | null;
+    readonly maxPlansPerWake: number;
+    readonly isolatedBuildTimeoutMs: number;
+    readonly offline: boolean;
+    readonly planTtlMs: number;
+}
+export interface NormalizedGrowthDriverConfig extends Required<Omit<AssistantGrowthDriverConfig, 'provider' | 'model' | 'reasoningEffort' | 'apiKeyEnv' | 'budgetId' | 'budgetAmount' | 'scope' | 'workflowOwnerAnchored' | 'pluginSourceProposals' | 'usageLearning'>> {
+    readonly provider: string | null;
+    readonly model: string | null;
+    readonly reasoningEffort: string | null;
+    readonly apiKeyEnv: string | null;
+    readonly budgetId: string | null;
+    readonly budgetAmount: number | null;
+    readonly scope: GrowthOwnerScopeConfig | null;
+    readonly workflowOwnerAnchored: NormalizedWorkflowOwnerAnchoredConfig;
+    readonly pluginSourceProposals: NormalizedPluginSourceProposalsConfig;
+    readonly usageLearning: Readonly<{
+        enabled: boolean;
+        databasePath: string | null;
+        maxPending: number;
+        lookbackMs: number;
+        scanBudgetId: string | null;
+        scanBudgetAmount: number | null;
+    }>;
+}
+export declare const Config: Schema<AssistantGrowthDriverConfig>;
+export declare function normalizeConfig(input?: AssistantGrowthDriverConfig): Readonly<NormalizedGrowthDriverConfig>;
+//# sourceMappingURL=config.d.ts.map

package/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAE7C;;;;GAIG;AAEH,eAAO,MAAM,mBAAmB,EAAG,qBAA8B,CAAA;AAEjE,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IACtC,wGAAwG;IACxG,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,0EAA0E;IAC1E,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,iFAAiF;IACjF,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4FAA4F;IAC5F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,sBAAsB,CAAA;IAC9B,qBAAqB,CAAC,EAAE,2BAA2B,CAAA;IACnD,qBAAqB,CAAC,EAAE,2BAA2B,CAAA;IACnD,sFAAsF;IACtF,aAAa,CAAC,EAAE;QACd,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;QAClF,iFAAiF;QACjF,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KACjD,CAAA;CACF;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,eAAe,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAA;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,4BAA6B,SAAQ,QAAQ,CAAC,IAAI,CAAC,2BAA2B,EAAE,UAAU,GAAG,OAAO,GAAG,iBAAiB,GAAG,WAAW,GAAG,UAAU,GAAG,cAAc,GAAG,OAAO,GAAG,uBAAuB,GAAG,uBAAuB,GAAG,eAAe,CAAC,CAAC;IACrQ,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,qBAAqB,EAAE,qCAAqC,CAAA;IACrE,QAAQ,CAAC,qBAAqB,EAAE,qCAAqC,CAAA;IACrE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QACvH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;CAClE;AAgGD,eAAO,MAAM,MAAM,EAOb,MAAM,CAAC,2BAA2B,CAAC,CAAA;AAEzC,wBAAgB,eAAe,CAAC,KAAK,CAAC,EAAE,2BAA2B,GAAG,QAAQ,CAAC,4BAA4B,CAAC,CA8F3G"}

package/lib/config.js

@@ -0,0 +1,207 @@
+import { isAbsolute, resolve } from 'node:path';
+import Schema from '@deepseek-ai/schemastery';
+/**
+ * The growth driver is opt-in and fail-closed: it never runs until `enabled`
+ * is explicitly true and a concrete owner scope is declared. Model selection
+ * follows the owner's conversation unless an explicit fixed pair overrides it.
+ */
+export const DEFAULT_API_KEY_ENV = 'SUPER_RELAY_API_KEY';
+const fields = new Set([
+    'enabled',
+    'intervalMs',
+    'maxReviewsPerWake',
+    'minRepeatedSuccesses',
+    'candidateTtlMs',
+    'maxModelCalls',
+    'maxToolCalls',
+    'maxOutputTokens',
+    'maxDurationMs',
+    'provider',
+    'model',
+    'reasoningEffort',
+    'budgetId',
+    'budgetAmount',
+    'apiKeyEnv',
+    'scope',
+    'workflowOwnerAnchored',
+    'pluginSourceProposals',
+    'usageLearning',
+]);
+const ref = Schema.string().pattern(/^[A-Z_][A-Z0-9_]*$/u);
+const boundedText = (max) => Schema.string().min(1).max(max);
+// schemastery gives every object schema a default of {}, which would otherwise
+// deep-validate a missing scope against the required inner fields.  Pin the
+// default to undefined so an undeclared scope stays absent (fail-closed config
+// validation happens explicitly in normalizeConfig).  The cast bridges the
+// library typings, whose default() parameter excludes undefined even though the
+// runtime stores and returns it verbatim.
+const scopeSchema = Schema.object({
+    workspace: boundedText(4_096).required(),
+    preset: boundedText(256).required(),
+    principalId: boundedText(256).required(),
+    ownerRouteId: boundedText(256).required(),
+}).default(undefined);
+// Same missing-object default rationale as scopeSchema above. The inner fields
+// are optional in WorkflowOwnerAnchoredConfig (they all carry schema defaults),
+// so cast the object schema to that optional-input type before pinning its
+// missing-object default to undefined.
+const workflowOwnerAnchoredObjectSchema = Schema.object({
+    enabled: Schema.boolean().default(false),
+    maxCommitsPerWake: Schema.natural().min(1).max(50).default(5),
+    lookbackMs: Schema.natural().min(60_000).max(604_800_000).default(86_400_000),
+});
+const workflowOwnerAnchoredSchema = workflowOwnerAnchoredObjectSchema
+    .default(undefined);
+// Same missing-object default rationale as workflowOwnerAnchoredSchema above.
+const pluginSourceProposalsObjectSchema = Schema.object({
+    enabled: Schema.boolean().default(false),
+    preparationMode: Schema.union(['inline', 'durable']).default('inline'),
+    repository: boundedText(4_096),
+    maxPlansPerWake: Schema.natural().min(1).max(5).default(1),
+    // Security root: the isolated build gate must finish well inside the 300000 ms
+    // growth authority lifetime; bounds mirror the control-plane service limits.
+    isolatedBuildTimeoutMs: Schema.natural().min(60_000).max(240_000).default(180_000),
+    offline: Schema.boolean().default(true),
+    planTtlMs: Schema.natural().min(900_000).max(86_400_000).default(86_400_000),
+});
+const pluginSourceProposalsSchema = pluginSourceProposalsObjectSchema
+    .default(undefined);
+const schema = Schema.object({
+    enabled: Schema.boolean().default(false),
+    intervalMs: Schema.natural().min(0).max(86_400_000).default(0),
+    maxReviewsPerWake: Schema.natural().min(1).max(50).default(10),
+    minRepeatedSuccesses: Schema.natural().min(1).max(32).default(3),
+    // Store-imposed ceiling: candidates expire at most 7 days after staging.
+    candidateTtlMs: Schema.natural().min(1_000).max(604_800_000).default(86_400_000),
+    maxModelCalls: Schema.natural().min(1).max(64).default(8),
+    maxToolCalls: Schema.natural().min(0).max(128).default(24),
+    maxOutputTokens: Schema.natural().min(1).max(32_768).default(8_192),
+    // Security root: a growth authority may never live longer than 300000 ms.
+    maxDurationMs: Schema.natural().min(1_000).max(300_000).default(120_000),
+    provider: boundedText(256),
+    model: boundedText(256),
+    reasoningEffort: boundedText(128),
+    budgetId: Schema.string().min(1).max(128),
+    budgetAmount: Schema.natural().min(1).max(1_000_000_000),
+    apiKeyEnv: ref,
+    scope: scopeSchema,
+    workflowOwnerAnchored: workflowOwnerAnchoredSchema,
+    pluginSourceProposals: pluginSourceProposalsSchema,
+    usageLearning: Schema.object({ enabled: Schema.boolean().default(false), databasePath: boundedText(4096),
+        scanBudgetId: boundedText(128),
+        scanBudgetAmount: Schema.natural().min(1).max(10_000_000),
+        maxPending: Schema.natural().min(1).max(100).default(16),
+        lookbackMs: Schema.natural().min(60_000).max(604_800_000).default(86_400_000),
+    }).default(undefined),
+});
+export const Config = new Proxy(schema, {
+    apply(target, thisArg, argumentsList) {
+        const value = argumentsList[0];
+        if (value !== undefined && (value === null || typeof value !== 'object' || Array.isArray(value)))
+            throw new Error('assistant-growth-driver: config must be an object');
+        if (value !== undefined)
+            for (const key of Object.keys(value))
+                if (!fields.has(key))
+                    throw new Error(`assistant-growth-driver: unknown config field: ${key}`);
+        return Reflect.apply(target, thisArg, argumentsList);
+    },
+});
+export function normalizeConfig(input) {
+    const config = Config(input);
+    if (config.apiKeyEnv !== undefined && !/^[A-Z_][A-Z0-9_]*$/u.test(config.apiKeyEnv))
+        throw new Error('assistant-growth-driver: invalid apiKeyEnv');
+    const normalized = Object.freeze({
+        enabled: config.enabled ?? false,
+        intervalMs: config.intervalMs ?? 0,
+        maxReviewsPerWake: config.maxReviewsPerWake ?? 10,
+        minRepeatedSuccesses: config.minRepeatedSuccesses ?? 3,
+        candidateTtlMs: config.candidateTtlMs ?? 86_400_000,
+        maxModelCalls: config.maxModelCalls ?? 8,
+        maxToolCalls: config.maxToolCalls ?? 24,
+        maxOutputTokens: config.maxOutputTokens ?? 8_192,
+        maxDurationMs: config.maxDurationMs ?? 120_000,
+        provider: config.provider ?? null,
+        model: config.model ?? null,
+        reasoningEffort: config.reasoningEffort ?? null,
+        budgetId: config.budgetId ?? null,
+        budgetAmount: config.budgetAmount ?? null,
+        apiKeyEnv: config.apiKeyEnv ?? null,
+        scope: config.scope ? Object.freeze({ ...config.scope }) : null,
+        workflowOwnerAnchored: Object.freeze({
+            enabled: config.workflowOwnerAnchored?.enabled ?? false,
+            maxCommitsPerWake: config.workflowOwnerAnchored?.maxCommitsPerWake ?? 5,
+            lookbackMs: config.workflowOwnerAnchored?.lookbackMs ?? 86_400_000,
+        }),
+        pluginSourceProposals: Object.freeze({
+            enabled: config.pluginSourceProposals?.enabled ?? false,
+            preparationMode: config.pluginSourceProposals?.preparationMode ?? 'inline',
+            repository: config.pluginSourceProposals?.repository?.normalize('NFC').trim() ?? null,
+            maxPlansPerWake: config.pluginSourceProposals?.maxPlansPerWake ?? 1,
+            isolatedBuildTimeoutMs: config.pluginSourceProposals?.isolatedBuildTimeoutMs ?? 180_000,
+            offline: config.pluginSourceProposals?.offline ?? true,
+            planTtlMs: config.pluginSourceProposals?.planTtlMs ?? 86_400_000,
+        }),
+        usageLearning: Object.freeze({ enabled: config.usageLearning?.enabled ?? false,
+            scanBudgetId: config.usageLearning?.scanBudgetId ?? null,
+            scanBudgetAmount: config.usageLearning?.scanBudgetAmount ?? null,
+            databasePath: config.usageLearning?.databasePath ?? null, maxPending: config.usageLearning?.maxPending ?? 16,
+            lookbackMs: config.usageLearning?.lookbackMs ?? 86_400_000 }),
+    });
+    if (normalized.enabled && !normalized.scope)
+        throw new Error('assistant-growth-driver: enabled requires an explicit owner scope');
+    if ((normalized.provider === null) !== (normalized.model === null)) {
+        throw new Error('assistant-growth-driver: provider and model must be configured together');
+    }
+    if (normalized.reasoningEffort !== null && normalized.provider === null) {
+        throw new Error('assistant-growth-driver: reasoningEffort requires an explicit provider and model');
+    }
+    for (const value of [normalized.provider, normalized.model, normalized.reasoningEffort]) {
+        if (value !== null && (value.trim() !== value || value.length === 0 || [...value].some(character => {
+            const code = character.codePointAt(0);
+            return code <= 31 || code === 127;
+        }))) {
+            throw new Error('assistant-growth-driver: invalid model route');
+        }
+    }
+    if (normalized.workflowOwnerAnchored.enabled && !normalized.enabled) {
+        throw new Error('assistant-growth-driver: workflowOwnerAnchored.enabled requires the driver itself to be enabled');
+    }
+    if (normalized.workflowOwnerAnchored.enabled && !normalized.scope) {
+        throw new Error('assistant-growth-driver: workflowOwnerAnchored.enabled requires an explicit owner scope');
+    }
+    if (normalized.pluginSourceProposals.enabled) {
+        if (!normalized.enabled) {
+            throw new Error('assistant-growth-driver: pluginSourceProposals.enabled requires the driver itself to be enabled');
+        }
+        if (!normalized.scope) {
+            throw new Error('assistant-growth-driver: pluginSourceProposals.enabled requires an explicit owner scope');
+        }
+        if (!normalized.pluginSourceProposals.offline)
+            throw new Error('assistant-growth-driver: source preparation requires offline mode');
+        const repository = normalized.pluginSourceProposals.repository;
+        // Canonical TEXT only here (the control-plane service performs the realpath
+        // canonicalization against the live filesystem at prepare time): absolute,
+        // non-empty and free of '.'/'..' normalization segments.
+        if (repository === null || !isAbsolute(repository) || resolve(repository) !== repository) {
+            throw new Error('assistant-growth-driver: pluginSourceProposals.repository must be a canonical absolute path when enabled');
+        }
+    }
+    if ((normalized.budgetId === null) !== (normalized.budgetAmount === null)) {
+        throw new Error('assistant-growth-driver: budgetId and budgetAmount must be configured together');
+    }
+    if (normalized.usageLearning.enabled) {
+        const path = normalized.usageLearning.databasePath;
+        if (!normalized.enabled || !normalized.scope || !normalized.budgetId || normalized.intervalMs !== 0
+            || path === null || !isAbsolute(path) || resolve(path) !== path) {
+            throw new Error('assistant-growth-driver: usageLearning requires enabled owner scope, budget, absolute databasePath and intervalMs=0');
+        }
+        const scanBudget = normalized.usageLearning.scanBudgetId;
+        if (scanBudget === null || scanBudget.trim() !== scanBudget || scanBudget.length === 0
+            || scanBudget.normalize('NFC') !== scanBudget || /[\p{Cc}]/u.test(scanBudget)
+            || normalized.usageLearning.scanBudgetAmount === null) {
+            throw new Error('assistant-growth-driver: usageLearning requires scanBudgetId and scanBudgetAmount for native discovery');
+        }
+    }
+    return normalized;
+}
+//# sourceMappingURL=config.js.map

package/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAE7C;;;;GAIG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAA8B,CAAA;AA+GjE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;IACrB,SAAS;IACT,YAAY;IACZ,mBAAmB;IACnB,sBAAsB;IACtB,gBAAgB;IAChB,eAAe;IACf,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,UAAU;IACV,OAAO;IACP,iBAAiB;IACjB,UAAU;IACV,cAAc;IACd,WAAW;IACX,OAAO;IACP,uBAAuB;IACvB,uBAAuB;IACvB,eAAe;CAChB,CAAC,CAAA;AAEF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;AAC1D,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAEpE,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAC/E,2EAA2E;AAC3E,gFAAgF;AAChF,0CAA0C;AAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC,OAAO,CAAC,SAA8C,CAA+C,CAAA;AAExG,+EAA+E;AAC/E,gFAAgF;AAChF,2EAA2E;AAC3E,uCAAuC;AACvC,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IACtD,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACxC,iBAAiB,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;CAC9E,CAAmD,CAAA;AACpD,MAAM,2BAA2B,GAAG,iCAAiC;KAClE,OAAO,CAAC,SAAmD,CAAoD,CAAA;AAElH,8EAA8E;AAC9E,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IACtD,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACtE,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,+EAA+E;IAC/E,6EAA6E;IAC7E,sBAAsB,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAClF,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;CAC7E,CAAmD,CAAA;AACpD,MAAM,2BAA2B,GAAG,iCAAiC;KAClE,OAAO,CAAC,SAAmD,CAAoD,CAAA;AAElH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,iBAAiB,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,oBAAoB,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,yEAAyE;IACzE,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAChF,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACnE,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxE,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC;IAC1B,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC;IACvB,eAAe,EAAE,WAAW,CAAC,GAAG,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;IACxD,SAAS,EAAE,GAAG;IACd,KAAK,EAAE,WAAW;IAClB,qBAAqB,EAAE,2BAA2B;IAClD,qBAAqB,EAAE,2BAA2B;IAClD,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC;QACtG,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC;QAC9B,gBAAgB,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QACzD,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;KAC9E,CAAC,CAAC,OAAO,CAAC,SAAkB,CAAC;CAC/B,CAAwC,CAAA;AAEzC,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE;IACtC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,aAAwB;QAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QACtK,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,EAAE,CAAC,CAAA;QACvK,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAgC,CAAA;IACrF,CAAC;CACF,CAAwC,CAAA;AAEzC,MAAM,UAAU,eAAe,CAAC,KAAmC;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAgC,CAAA;IAC3D,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAClJ,MAAM,UAAU,GAAiC,MAAM,CAAC,MAAM,CAAC;QAC7D,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;QAChC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;QAClC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;QACjD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,CAAC;QACtD,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,UAAU;QACnD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC;QACxC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;QACvC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,KAAK;QAChD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,OAAO;QAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QACjC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;QAC3B,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QAC/C,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QACjC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;QACzC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/D,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC;YACnC,OAAO,EAAE,MAAM,CAAC,qBAAqB,EAAE,OAAO,IAAI,KAAK;YACvD,iBAAiB,EAAE,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,IAAI,CAAC;YACvE,UAAU,EAAE,MAAM,CAAC,qBAAqB,EAAE,UAAU,IAAI,UAAU;SACnE,CAAC;QACF,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC;YACnC,OAAO,EAAE,MAAM,CAAC,qBAAqB,EAAE,OAAO,IAAI,KAAK;YACvD,eAAe,EAAE,MAAM,CAAC,qBAAqB,EAAE,eAAe,IAAI,QAAQ;YAC1E,UAAU,EAAE,MAAM,CAAC,qBAAqB,EAAE,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI;YACrF,eAAe,EAAE,MAAM,CAAC,qBAAqB,EAAE,eAAe,IAAI,CAAC;YACnE,sBAAsB,EAAE,MAAM,CAAC,qBAAqB,EAAE,sBAAsB,IAAI,OAAO;YACvF,OAAO,EAAE,MAAM,CAAC,qBAAqB,EAAE,OAAO,IAAI,IAAI;YACtD,SAAS,EAAE,MAAM,CAAC,qBAAqB,EAAE,SAAS,IAAI,UAAU;SACjE,CAAC;QACF,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,IAAI,KAAK;YAC5E,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,YAAY,IAAI,IAAI;YACxD,gBAAgB,EAAE,MAAM,CAAC,aAAa,EAAE,gBAAgB,IAAI,IAAI;YAChE,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,YAAY,IAAI,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE,UAAU,IAAI,EAAE;YAC5G,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE,UAAU,IAAI,UAAU,EAAE,CAAC;KAChE,CAAC,CAAA;IACF,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;IACjI,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;IAC5F,CAAC;IACD,IAAI,UAAU,CAAC,eAAe,KAAK,IAAI,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAA;IACrG,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACxF,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;YACjG,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,CAAA;YACtC,OAAO,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,GAAG,CAAA;QACnC,CAAC,CAAC,CAAC,EAAE,CAAC;YACJ,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAA;IACpH,CAAC;IACD,IAAI,UAAU,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAA;IAC5G,CAAC;IACD,IAAI,UAAU,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAA;QACpH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAA;QAC5G,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;QACnI,MAAM,UAAU,GAAG,UAAU,CAAC,qBAAqB,CAAC,UAAU,CAAA;QAC9D,4EAA4E;QAC5E,2EAA2E;QAC3E,yDAAyD;QACzD,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,UAAU,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,0GAA0G,CAAC,CAAA;QAC7H,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAA;IACnG,CAAC;IACD,IAAI,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,YAAY,CAAA;QAClD,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,UAAU,KAAK,CAAC;eAC9F,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,qHAAqH,CAAC,CAAA;QACxI,CAAC;QACD,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,YAAY,CAAA;QACxD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;eACjF,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;eAC1E,UAAU,CAAC,aAAa,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAA;QAC3H,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC"}