@dxos/plugin-debug 0.12.0-next-73daef452f1464b62efdbca75fb0067c1066f264 → 0.13.0

package/dist/lib/chunk-StockfishSpace.mjs

@@ -0,0 +1,563 @@
+import { t as __exportAll } from "./chunk-rolldown-runtime.mjs";
+import * as Effect from "effect/Effect";
+import * as SampleSpace from "@dxos/app-toolkit/SampleSpace";
+import { Database, Obj, Ref } from "@dxos/echo";
+import * as Markdown from "@dxos/plugin-markdown/Markdown";
+import * as Instructions from "@dxos/compute/Instructions";
+import * as Project from "@dxos/compute/Project";
+import { EntityId } from "@dxos/echo/Key";
+import { Outline, Task, TaskSet } from "@dxos/types";
+import { Text } from "@dxos/schema";
+import * as Chess from "@dxos/plugin-chess/Chess";
+import * as Game from "@dxos/plugin-game/Game";
+import * as Skill from "@dxos/compute/Skill";
+import * as Template from "@dxos/compute/Template";
+import { trim } from "@dxos/util";
+//#region src/samples/stockfish/docs.ts
+var BRIEF_MD = `# Brief — chess engine as an MCP server on Workers
+
+A chess engine any chat in this space can consult, built as one Cloudflare Worker speaking MCP and
+registered against this space. The reader runs it end to end from the assistant, with no Cloudflare
+account, no GitHub account until the last stage, and no Anthropic key at any point.
+
+## Shape
+
+One Worker. One Streamable-HTTP MCP endpoint on it. Two tools — evaluate a position, and name the
+best move from it — over a chess engine compiled to WebAssembly and bundled into the Worker.
+
+## Constraints
+
+- **No database.** Every request carries the position as FEN; the Worker holds nothing between
+  requests, so it can be evicted and restarted freely.
+- **No accounts to start.** The first deploy uses wrangler's unauthenticated mode, which mints a
+  temporary Cloudflare account and prints a URL to claim it. GitHub comes last, and only to publish.
+- **No Anthropic key.** The chat driving this runs DeepSeek V4 Pro through the DXOS edge.
+- **Written by the assistant, not delegated.** The assistant edits and runs things itself in the
+  sandbox. The coding harness pre-installed in the sandbox image is not the path — see the
+  Development skill.
+- **Bounded search.** A fixed, low depth or a fixed millisecond budget per call. An MCP tool that
+  thinks for thirty seconds is a tool a chat gives up on.
+
+## Out of scope
+
+Opening books, endgame tablebases, multi-PV analysis, game persistence, per-caller rate limiting,
+and authentication beyond the shared key the MCP server record already carries.
+
+## Done means
+
+The Worker is registered as an MCP server in this space, and a chat opened on the seeded game
+answers "what is the best move here?" from the engine's reply rather than from its own knowledge —
+visible as a tool call in the transcript.
+`;
+/** The project's brief: the requirement the first task designs against. */
+var Docs = SampleSpace.phase("docs", {
+	schemas: [Markdown.Document],
+	run: () => Effect.gen(function* () {
+		return { brief: yield* Database.add(Markdown.make({
+			name: "BRIEF.md",
+			content: BRIEF_MD
+		})) };
+	})
+});
+//#endregion
+//#region src/samples/stockfish/game.ts
+var OPENING_PGN = "1. e4 e5 2. Nf3 Nc6 3. Bb5 a6 4. Ba4 Nf6 5. O-O Be7 *";
+/** The position the deployed engine is asked about, as a game the chess chat can open. */
+var ChessGame = SampleSpace.phase("game", {
+	schemas: [Game.Game, Chess.State],
+	run: () => Effect.gen(function* () {
+		const state = yield* Database.add(Chess.make({ pgn: OPENING_PGN }));
+		return {
+			game: yield* Database.add(Game.make({
+				name: "Test position — Spanish, 5 moves in",
+				players: [{
+					role: "white",
+					name: "You"
+				}, {
+					role: "black",
+					name: "Engine"
+				}],
+				variant: state
+			})),
+			state
+		};
+	})
+});
+//#endregion
+//#region src/samples/stockfish/project.ts
+var INSTRUCTIONS$1 = `Keep the Development skill enabled for the whole session — it carries how work \
+is tracked, where the code is written and what counts as evidence, and it applies to every turn \
+rather than to one task. Do not disable it to save context.
+
+Build the MCP server described in BRIEF.md by working the task tree in order, and set each task's \
+status as you finish it: the task list is how the reader follows this run.
+
+Write the code yourself in one sandbox, driving it through the Sandbox skill. The sandbox image \
+ships a coding agent of its own; do not delegate this project to it — it has none of this space's \
+context, and its output would land on a container filesystem rather than in this project.
+
+Verify every stage before starting the next, and redeploy in the two that change Worker code — a \
+design or registration stage has nothing to deploy. File what you produce — the design, the Worker \
+URL, the tool responses — as artifacts on this project rather than leaving it in the chat. The \
+claim URL that the first deploy prints is a bearer credential for the account: give it to me \
+directly and file it nowhere.
+
+This project needs no Anthropic key and no Cloudflare login. If a step seems to need either, that \
+is the wrong step.`;
+/**
+* The work-stream. It adopts the task set the tasks phase built (`Project.make` would otherwise
+* create its own empty one) and carries the brief as an artifact.
+*
+* The skill reaches a chat through `instructions.skills`, which is the only binding path: a Skill
+* object sitting in the space is not enabled by proximity. Binding makes it available; the text
+* above is what keeps it on. The Sandbox skill cannot be bound the same way — it is contributed by
+* a plugin under a key rather than stored here — so the text names it instead.
+*
+* No `repo` and no `McpServer`: the repository is created in stage five and the server record in
+* stage four, and seeding either would name a URL that does not exist.
+*/
+var ProjectPhase = SampleSpace.phase("project", {
+	schemas: [
+		Project.Project,
+		Instructions.Instructions,
+		Outline.Outline
+	],
+	run: ({ docs, tasks, skill, game }) => Effect.gen(function* () {
+		const instructions = yield* Database.add(Instructions.make({
+			name: "Chess MCP on Workers",
+			text: INSTRUCTIONS$1,
+			skills: [Ref.make(skill.skill)],
+			objects: [
+				Ref.make(docs.brief),
+				Ref.make(tasks.taskSet),
+				Ref.make(game.game)
+			]
+		}));
+		return {
+			project: yield* Database.add(Project.make({
+				name: "Chess MCP on Workers",
+				description: "A chess engine served from one Cloudflare Worker as an MCP server, registered against this space so any chat can ask it for a move.",
+				status: "active",
+				instructions: Ref.make(instructions),
+				taskSet: Ref.make(tasks.taskSet),
+				artifacts: [Ref.make(docs.brief)]
+			})),
+			instructions
+		};
+	})
+});
+//#endregion
+//#region src/samples/stockfish/skill.ts
+var INSTRUCTIONS = trim`
+  How multi-step development work is tracked and carried out here. These hold across a whole
+  session, not one task, so keep this skill enabled for the duration.
+
+  ## Tasks
+  - One task per unit of work, never per batch. A batched task hides which parts landed and which
+    were dropped.
+  - One or two lines per description. Detail belongs in the design document or the README.
+  - Work that ends in someone else's hands gets its own task, titled after the thing to act on and
+    assigned to them — never buried in the task that produced the work.
+  - Use the whole status range. \`blocked\` names what unblocks it; \`cancelled\` names why it was
+    dropped. Deleting a dropped item loses reasoning someone will otherwise re-derive later.
+  - Set status in the same turn the work completes, not in a batch at the end. The task list is how
+    the reader watches this run, so a status set late is a status that was wrong while it mattered.
+  - Respect \`dependsOn\`. A stage assumes the one before it deployed and was verified; starting one
+    early is how a failure gets attributed to the wrong change.
+  - Keep the outline scoped to the task in flight. Findings about another thread belong where that
+    thread lives.
+
+  ## Where the code is written
+  - **You write it.** The sandbox is a shell you drive: you create the files, run the build, and read
+    the failures. Creating a sandbox, running commands in it and moving files in and out are the
+    Sandbox skill's (\`org.dxos.skill.sandbox\`) — enable it rather than working from memory.
+  - **Do not hand the task to the harness in the image.** The sandbox image ships a coding agent of
+    its own, and \`org.dxos.skill.deepseek\` will run it. It is the wrong tool here: it starts with
+    none of this space's context — no brief, no task tree, no design document — and what it produces
+    lands on a container filesystem instead of in this project. Use it only if the reader asks for it
+    by name.
+  - **One sandbox for the whole project.** It keeps its filesystem, its installed toolchain and its
+    checkout between commands. A second one pays for all of that again and splits the tree in two.
+  - **The container is not durable.** Anything that has to survive it — the design, the deploy
+    output, the URLs — is filed as a project artifact in the same turn it is produced, not at the
+    end.
+
+  ## Deploying to Cloudflare
+  - **No account, first deploy.** \`wrangler deploy --temporary\` mints a temporary account and
+    prints a claim URL. The flag is not optional: plain \`wrangler deploy\` refuses in a
+    non-interactive shell and demands a token, and an authentication prompt is a dead end for a
+    session that cannot open a browser.
+  - **The claim URL is a bearer credential; the Worker URL is not.** Anyone holding the claim URL can
+    take ownership of the account, and a project artifact replicates in plaintext to everyone in the
+    space — so file the Worker URL and hand the claim URL straight to the reader, logging it nowhere.
+    Claiming needs a browser, so it is theirs to do; say that it expires with the Worker on it, which
+    invalidates every later stage rather than only the current one.
+  - **Deploy when the Worker changed, and verify every stage regardless.** A design stage has nothing
+    to deploy and a stage that only registers or publishes changes no Worker code — deploying there is
+    a no-op that reads as progress. Where you did deploy, a successful \`wrangler deploy\` is not
+    evidence that anything is serving; the response body is.
+  - **\`--temporary\` needs wrangler 4.102 or later, and that wrangler needs Node 22.** The sandbox
+    runs Node 20, and a plain \`npm install wrangler\` there resolves to the last version that fits
+    it, which has no \`--temporary\`. Install \`wrangler@latest\` explicitly and run its script under
+    a newer node without touching the image: \`npm install wrangler@latest\`, then
+    \`npx --yes node@22 node_modules/wrangler/bin/wrangler.js deploy --temporary\`.
+  - **Read the deploy output for what it warns about, not only its exit code.** Bundle size and a
+    missing binding are warnings on a deploy that succeeds and failures on the request that follows.
+  - **Bound work by work, not by wall-clock.** \`Date.now()\` does not advance during synchronous
+    compute in a Worker, so a time deadline never fires and every timing you report reads as zero.
+    Count iterations, nodes or bytes instead.
+
+  ## Models and credentials
+  - The chat runs DeepSeek V4 Pro through the DXOS edge. No Anthropic key is involved in this
+    project, and nothing here should ask for one.
+  - Bind credentials by REFERENCE with the variable name to read them as. Never paste a secret into
+    a prompt, a message or a shell command — a command line persists in the transcript and in the
+    container's history.
+  - A missing credential is a setup gap, not an error to stop on: name the connector the reader has
+    to connect, then wait. Do not retry in the same turn.
+
+  ## MCP servers
+  - A server is registered as an object in the space, with the transport as \`http\` — Streamable
+    HTTP. \`sse\` is the deprecated transport and is there for servers that have not migrated.
+  - Its key replicates in plaintext to everyone in the space. Register a key the server can rotate,
+    and never one that authorises anything beyond it.
+  - A chat that does not list a registered server's tools has failed to connect. That is a URL,
+    transport or handshake fault to diagnose — not a model that declined to use them.
+  - Prove the tool was actually called. An answer a model could have produced from its own knowledge
+    is not evidence the server is reachable; the tool call in the transcript is.
+
+  ## GitHub and publishing
+  - Publishing comes last, after the thing works. The two consent screens it needs are the only
+    steps that leave this space, and a first run that meets them mid-build stops there.
+  - An agent has no GitHub access of its own. Bind the space's token as \`GH_TOKEN\` before it is
+    needed, not after a 401.
+  - A connector token authorises access to repositories; it cannot CREATE one. Creating the
+    repository is the reader's task and it comes first — the token is then scoped to that repository
+    rather than to everything they own.
+  - Tokens rotate. A session that was pushing fine and now gets 401 or 403 holds a stale copy:
+    refresh the binding rather than restarting the session.
+
+  ## What counts as evidence
+  - Set the bar at execution, not compilation. "It builds" and "it parses" are not evidence: require
+    the thing to be RUN, and say what could not be exercised.
+  - A brief's premise is often wrong; expect it to be falsified. Ask what the real mechanism is
+    before changing the thing that looks like it, and re-ask when the previous answer was itself a
+    correction.
+  - When a measurement is corrected, sweep every conclusion that shared the flawed method. A bad
+    instrument invalidates results already banked; failing to propagate the fix backwards is the
+    expensive mistake.
+  - "Could not run it here" is an environment limit, not a behavioural difference. Only the second is
+    a stop; label the first untested rather than letting it read as a pass.
+  - The sandbox's own state contaminates results: tooling installed earlier makes a capability look
+    available when it is not. Verify a from-scratch claim in a clean container.
+  - A green build is not proof. Assignment and type erasure hide shape mismatches that fail only at
+    runtime — and a Worker's runtime is not node's, so a module that resolves locally can still be
+    missing at the edge.
+  - Distinguish cited from executed evidence. A comment describing a failure is a claim being
+    relayed, not a result; a load-bearing decision deserves a reproduction.
+  - Be terse about the plumbing. Creating a sandbox, installing a toolchain and each command that
+    found nothing are not worth narrating. What the reader wants is the outcome — the URL, the tool
+    response, the failure. Say something mid-flight only when they have to act.
+`;
+/** The development-preferences skill, as a space object a project's instructions can bind. */
+var DevelopmentSkill = SampleSpace.phase("skill", {
+	schemas: [Skill.Skill, Text.Text],
+	run: () => Effect.gen(function* () {
+		return { skill: yield* Database.add(Skill.make({
+			key: "org.dxos.skill.development",
+			name: "Development",
+			description: "How work is tracked, where the code is written, and what counts as evidence.",
+			instructions: Template.make({ source: INSTRUCTIONS }),
+			agentCanEnable: true
+		})) };
+	})
+});
+//#endregion
+//#region src/samples/stockfish/util.ts
+/** Stable reference date so regenerations are reproducible. Override with NOW=2026-05-20 env. */
+var REFERENCE = process.env.NOW ? new Date(process.env.NOW) : /* @__PURE__ */ new Date("2026-05-20T15:00:00Z");
+/** ISO timestamp that many days before {@link REFERENCE}, at an optional UTC hour of that day. */
+var daysAgo = SampleSpace.makeClock(REFERENCE).daysAgo;
+//#endregion
+//#region src/samples/stockfish/tasks.ts
+/**
+* The reader, as an assignee. A template cannot know who they are, so the actor carries the role and
+* a label rather than a Person ref — enough for the row to say the step is not the agent's.
+*/
+var USER = {
+	role: "user",
+	name: "You"
+};
+var PLAN = {
+	title: "Ship a chess engine as an MCP server on Cloudflare Workers",
+	description: "From the brief to a tool a chat in this space calls. Every stage is verified before the next one starts; the two that change Worker code deploy first.",
+	estimate: "l",
+	subTasks: [
+		{
+			title: "Design the tool surface and write it down",
+			description: "A Markdown artifact on this project, with the diagrams a reviewer reads instead of the code.",
+			estimate: "s",
+			subTasks: [
+				{
+					title: "Select DeepSeek V4 Pro as the chat model",
+					description: "Yours to do: the model is a Composer setting, not something this space can carry. Assistant settings → model, or the selector in the chat itself. It runs through the DXOS edge, so no Anthropic key is involved anywhere in this project.",
+					estimate: "xs",
+					assignee: USER
+				},
+				{
+					title: "Name the two tools and pin their schemas",
+					description: "Evaluate a position, and name the best move from one. FEN in, and a bounded search budget as an argument — decide the unit and the ceiling now.",
+					estimate: "xs"
+				},
+				{
+					title: "Diagram the request path",
+					description: "Chat → MCP client → Worker → engine, as a mermaid flowchart. Name what is bundled and what is fetched.",
+					estimate: "xs"
+				},
+				{
+					title: "Decide how the engine gets into the Worker",
+					description: "A WebAssembly build bundled with the Worker, and what that costs against the bundle-size limit. State the fallback if it does not fit.",
+					estimate: "xs"
+				},
+				{
+					title: "File the design as a project artifact",
+					description: "DESIGN.md, added to the project rather than left in the chat.",
+					estimate: "xs"
+				}
+			]
+		},
+		{
+			title: "Deploy an empty Worker with no Cloudflare login",
+			description: "Nothing application-shaped in this stage. The point is a URL that answers before any code exists, and an account claimed while it is cheap to lose. No login to DEPLOY; claiming it afterwards is the one browser step here.",
+			estimate: "m",
+			subTasks: [
+				{
+					title: "Create the sandbox and install the toolchain",
+					description: "One sandbox for the whole project — it keeps its filesystem between commands, so a second one pays for node and wrangler again.",
+					estimate: "s"
+				},
+				{
+					title: "Initialize the project with wrangler",
+					description: "A TypeScript Worker returning one line of body. Anything more is a later stage.",
+					estimate: "xs"
+				},
+				{
+					title: "Deploy without authenticating to Cloudflare",
+					description: "`wrangler deploy --temporary` mints a temporary account and prints a Worker URL and a claim URL; plain `wrangler deploy` refuses non-interactively and demands a token, so the flag is not optional. File the WORKER url on the project. The claim URL is a bearer credential — hand it straight to the reader and file it nowhere.",
+					estimate: "s"
+				},
+				{
+					title: "Fetch the deployed URL and confirm the body",
+					description: "Fetch it. A successful deploy command is not evidence that anything is serving. Do not claim the account yet — the next stage still redeploys this Worker.",
+					estimate: "xs"
+				}
+			]
+		},
+		{
+			title: "Implement the MCP server and the engine",
+			description: "The application stage, redeployed and checked over the wire at the end of it.",
+			estimate: "l",
+			subTasks: [
+				{
+					title: "Answer the MCP handshake over Streamable HTTP",
+					description: "Initialize and `tools/list` on one endpoint, with the two tools advertised and nothing behind them yet.",
+					estimate: "m"
+				},
+				{
+					title: "Bundle the engine and run one search",
+					description: "Prove a search returns inside the budget the design set, from a Worker rather than from node. Bound it by work done, not by wall-clock: `Date.now()` does not advance during synchronous compute in a Worker, so a time deadline never fires there and the call reports zero elapsed.",
+					estimate: "m"
+				},
+				{
+					title: "Implement both tools over the engine",
+					description: "Reject an unparseable FEN as a tool error rather than letting the engine fail on it.",
+					estimate: "m"
+				},
+				{
+					title: "Redeploy and call `tools/list` and both tools over the wire",
+					description: "Against the deployed URL, not a local dev server. Paste the responses into the project — that is the stage evidence. This is the last deploy, so claiming comes next.",
+					estimate: "s"
+				},
+				{
+					title: "Claim the temporary Cloudflare account",
+					description: "Yours to do: claiming signs the account into yours, which needs a browser the agent does not have. It comes AFTER the last redeploy — an agent with no login cannot update a claimed account, and `--temporary` would mint a second one under a different URL. Do it inside the hour; the account expires with the Worker on it.",
+					estimate: "xs",
+					assignee: USER
+				}
+			]
+		},
+		{
+			title: "Register the server and use it from the chess chat",
+			description: "The brief's definition of done, and the first point at which the thing is worth showing anyone.",
+			estimate: "m",
+			subTasks: [
+				{
+					title: "Add the deployed URL as an MCP server in this space",
+					description: "Register the URL as it stands AFTER the claim — a `workers.dev` hostname is account-scoped, so confirm it by fetching before trusting it. Protocol `http` — Streamable HTTP, not the deprecated SSE transport. Its key is stored in plaintext and replicates to everyone in the space, so keep it to one the Worker can rotate.",
+					estimate: "s"
+				},
+				{
+					title: "Enable the Chess plugin",
+					description: "Yours to do: it is available but off by default, and without it the seeded game has no board to open — the last step of this stage needs one. Settings -> plugin registry.",
+					estimate: "xs",
+					assignee: USER
+				},
+				{
+					title: "Confirm the tools reach the chat",
+					description: "A chat that lists the two tools has connected; one that does not is a transport or URL fault, not a model that chose against them.",
+					estimate: "xs"
+				},
+				{
+					title: "Ask for the best move in the seeded game",
+					description: "Open the game and ask. The answer has to arrive as a tool call in the transcript — a plausible move the model knew already is a failure of this step, not a pass.",
+					estimate: "s"
+				}
+			]
+		},
+		{
+			title: "Publish it to GitHub",
+			description: "Last on purpose: the two consent screens below are the only steps that leave this space, and putting them here means a first run reaches a working engine before it meets one.",
+			estimate: "m",
+			subTasks: [
+				{
+					title: "Create an empty GitHub repository for the server",
+					description: "Yours to do: a connector token authorises access to repositories, it cannot create one. Make it empty — this stage pushes the first commit — and note the owner/name.",
+					estimate: "xs",
+					assignee: USER
+				},
+				{
+					title: "Connect the GitHub credential, scoped to that repository",
+					description: "On the authorisation screen choose \"Only select repositories\" and pick the one above, with Contents set to read and write. A token scoped to everything is a token the agent did not need.",
+					estimate: "xs",
+					assignee: USER
+				},
+				{
+					title: "Push the tree, with the deploy and MCP steps written down",
+					description: "A README that gets a reader from a clone to a registered MCP server. The wrangler invocation and the URL to register are the two things they cannot guess.",
+					estimate: "s"
+				}
+			]
+		}
+	]
+};
+/**
+* Depth-first flatten, recording each task's children so they can be filed under it once stored.
+* The stages are collected on the way down, as the root's children.
+*/
+var buildTasks = (seed) => {
+	const tasks = [];
+	const stages = [];
+	const children = /* @__PURE__ */ new Map();
+	const visit = (seed, parent) => {
+		const task = Task.make({
+			title: seed.title,
+			status: "todo",
+			description: seed.description,
+			estimate: seed.estimate,
+			assignee: seed.assignee,
+			history: [{
+				id: EntityId.random(),
+				date: daysAgo(0),
+				event: "created",
+				description: "Filed from the chess MCP template."
+			}]
+		});
+		tasks.push(task);
+		if (parent) children.set(parent, [...children.get(parent) ?? [], task]);
+		if (parent === tasks[0]) stages.push(task);
+		for (const child of seed.subTasks ?? []) visit(child, task);
+	};
+	visit(seed, void 0);
+	return {
+		tasks,
+		stages,
+		children
+	};
+};
+/** The plan: one root task, five stages under it, and the steps under those. */
+var Tasks = SampleSpace.phase("tasks", {
+	schemas: [TaskSet.TaskSet, Task.Task],
+	run: () => Effect.gen(function* () {
+		const taskSet = yield* Database.add(TaskSet.make({
+			name: "Chess MCP on Workers",
+			description: "Everything between the brief and a chat asking the engine for a move."
+		}));
+		const { tasks, stages, children } = buildTasks(PLAN);
+		yield* SampleSpace.children(taskSet, [tasks[0]], (taskSet, refs) => {
+			taskSet.tasks = refs;
+		});
+		for (const [parent, subtasks] of children) yield* SampleSpace.children(parent, subtasks, (parent, refs) => {
+			parent.subtasks = refs;
+		});
+		for (const [index, stage] of stages.entries()) if (index > 0) {
+			const previous = stages[index - 1];
+			Obj.update(stage, (stage) => {
+				stage.dependsOn = [Ref.make(previous)];
+			});
+		}
+		return {
+			taskSet,
+			tasks,
+			root: tasks[0],
+			stages
+		};
+	})
+});
+//#endregion
+//#region src/samples/stockfish/StockfishSpace.ts
+var StockfishSpace_exports = /* @__PURE__ */ __exportAll({
+	make: () => make,
+	makeTemplate: () => makeTemplate
+});
+var phases = {
+	skill: DevelopmentSkill,
+	docs: Docs,
+	game: ChessGame,
+	tasks: Tasks,
+	project: ProjectPhase
+};
+/**
+* A starting point rather than a finished world: the brief for a chess engine exposed as an MCP
+* server on Cloudflare Workers, the plan to build it as a task tree nothing has started on, a
+* position to point the finished thing at, and the development-preferences skill a chat working it
+* runs with.
+*
+* The other space templates depict a project mid-flight; this one is meant to be RUN. Every task is
+* `todo`, the design artifact the first stage produces is deliberately absent, and neither the MCP
+* server record nor a repository is seeded — stages four and five create them.
+*
+* It is deliberately reachable with no credentials but the reader's own DXOS identity: the chat runs
+* DeepSeek through the edge, the first deploy uses wrangler's unauthenticated mode, and the only two
+* consent screens are in the last stage.
+*/
+var make = () => SampleSpace.make({
+	space: {
+		name: "Chess MCP on Workers",
+		icon: "shield-star",
+		hue: "amber"
+	},
+	reference: REFERENCE,
+	phases,
+	build: (phases) => Effect.gen(function* () {
+		const skill = yield* phases.skill();
+		const docs = yield* phases.docs();
+		const game = yield* phases.game();
+		const tasks = yield* phases.tasks();
+		yield* phases.project({
+			docs,
+			tasks,
+			skill,
+			game
+		});
+		yield* SampleSpace.collection("Documents", [Ref.make(docs.brief)]);
+	})
+});
+var makeTemplate = () => SampleSpace.makeTemplate({
+	id: "org.dxos.plugin-debug.template.stockfish",
+	description: "A brief, a five-stage plan as a task tree, a position to test against, and the skill for building it in a sandbox.",
+	definition: make()
+});
+//#endregion
+export { make as n, makeTemplate as r, StockfishSpace_exports as t };
+
+//# sourceMappingURL=chunk-StockfishSpace.mjs.map

package/dist/lib/chunk-StockfishSpace.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-StockfishSpace.mjs","names":[],"sources":["../../src/samples/stockfish/docs.ts","../../src/samples/stockfish/game.ts","../../src/samples/stockfish/project.ts","../../src/samples/stockfish/skill.ts","../../src/samples/stockfish/util.ts","../../src/samples/stockfish/tasks.ts","../../src/samples/stockfish/StockfishSpace.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport * as SampleSpace from '@dxos/app-toolkit/SampleSpace';\nimport { Database } from '@dxos/echo';\nimport * as Markdown from '@dxos/plugin-markdown/Markdown';\n\n//\n// The one artifact this space ships with.\n//\n// The brief is INPUT — what to build and what not to. The design (the tool surface and the request\n// path) is the first task's output, so it is deliberately absent: seeding it would answer the\n// question the project exists to work through.\n//\n\nconst BRIEF_MD = `# Brief — chess engine as an MCP server on Workers\n\nA chess engine any chat in this space can consult, built as one Cloudflare Worker speaking MCP and\nregistered against this space. The reader runs it end to end from the assistant, with no Cloudflare\naccount, no GitHub account until the last stage, and no Anthropic key at any point.\n\n## Shape\n\nOne Worker. One Streamable-HTTP MCP endpoint on it. Two tools — evaluate a position, and name the\nbest move from it — over a chess engine compiled to WebAssembly and bundled into the Worker.\n\n## Constraints\n\n- **No database.** Every request carries the position as FEN; the Worker holds nothing between\n  requests, so it can be evicted and restarted freely.\n- **No accounts to start.** The first deploy uses wrangler's unauthenticated mode, which mints a\n  temporary Cloudflare account and prints a URL to claim it. GitHub comes last, and only to publish.\n- **No Anthropic key.** The chat driving this runs DeepSeek V4 Pro through the DXOS edge.\n- **Written by the assistant, not delegated.** The assistant edits and runs things itself in the\n  sandbox. The coding harness pre-installed in the sandbox image is not the path — see the\n  Development skill.\n- **Bounded search.** A fixed, low depth or a fixed millisecond budget per call. An MCP tool that\n  thinks for thirty seconds is a tool a chat gives up on.\n\n## Out of scope\n\nOpening books, endgame tablebases, multi-PV analysis, game persistence, per-caller rate limiting,\nand authentication beyond the shared key the MCP server record already carries.\n\n## Done means\n\nThe Worker is registered as an MCP server in this space, and a chat opened on the seeded game\nanswers \"what is the best move here?\" from the engine's reply rather than from its own knowledge —\nvisible as a tool call in the transcript.\n`;\n\nexport type DocsResult = { brief: Markdown.Document };\n\n/** The project's brief: the requirement the first task designs against. */\nexport const Docs: SampleSpace.Phase<DocsResult> = SampleSpace.phase('docs', {\n  schemas: [Markdown.Document],\n  run: () =>\n    Effect.gen(function* () {\n      const brief = yield* Database.add(Markdown.make({ name: 'BRIEF.md', content: BRIEF_MD }));\n      return { brief };\n    }),\n});\n","//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport * as SampleSpace from '@dxos/app-toolkit/SampleSpace';\nimport { Database } from '@dxos/echo';\nimport * as Chess from '@dxos/plugin-chess/Chess';\nimport * as Game from '@dxos/plugin-game/Game';\n\n//\n// The thing the finished server gets pointed at.\n//\n// The last stage's definition of done is a chat answering \"what is the best move here?\" from the\n// engine rather than from what the model already knows, so the space ships a position to ask it\n// about. Seeded as a game rather than a bare FEN in the brief because the chess chat opens on a\n// Game — a position the reader has to paste in is a step that will be skipped.\n//\n// A Spanish opening five moves deep: quiet, materially level, and with no forced tactic, so a\n// plausible answer produced without calling the tool is not accidentally the right one.\n//\n\nconst OPENING_PGN = '1. e4 e5 2. Nf3 Nc6 3. Bb5 a6 4. Ba4 Nf6 5. O-O Be7 *';\n\nexport type GameResult = { game: Game.Game; state: Chess.State };\n\n/** The position the deployed engine is asked about, as a game the chess chat can open. */\nexport const ChessGame: SampleSpace.Phase<GameResult> = SampleSpace.phase('game', {\n  schemas: [Game.Game, Chess.State],\n  run: () =>\n    Effect.gen(function* () {\n      const state = yield* Database.add(Chess.make({ pgn: OPENING_PGN }));\n      const game = yield* Database.add(\n        Game.make({\n          name: 'Test position — Spanish, 5 moves in',\n          players: [\n            { role: 'white', name: 'You' },\n            { role: 'black', name: 'Engine' },\n          ],\n          variant: state,\n        }),\n      );\n\n      return { game, state };\n    }),\n});\n","//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport * as SampleSpace from '@dxos/app-toolkit/SampleSpace';\nimport * as Instructions from '@dxos/compute/Instructions';\nimport * as Project from '@dxos/compute/Project';\nimport { Database, Ref } from '@dxos/echo';\nimport { Outline } from '@dxos/types';\n\nimport { type DocsResult } from './docs.ts';\nimport { type GameResult } from './game.ts';\nimport { type SkillResult } from './skill.ts';\nimport { type TasksResult } from './tasks.ts';\n\n//\n// The project that ties the plan, the brief, the test position and the skill together.\n//\n\nexport type ProjectInput = { docs: DocsResult; tasks: TasksResult; skill: SkillResult; game: GameResult };\n\nexport type ProjectResult = { project: Project.Project; instructions: Instructions.Instructions };\n\nconst INSTRUCTIONS = `Keep the Development skill enabled for the whole session — it carries how work \\\nis tracked, where the code is written and what counts as evidence, and it applies to every turn \\\nrather than to one task. Do not disable it to save context.\n\nBuild the MCP server described in BRIEF.md by working the task tree in order, and set each task's \\\nstatus as you finish it: the task list is how the reader follows this run.\n\nWrite the code yourself in one sandbox, driving it through the Sandbox skill. The sandbox image \\\nships a coding agent of its own; do not delegate this project to it — it has none of this space's \\\ncontext, and its output would land on a container filesystem rather than in this project.\n\nVerify every stage before starting the next, and redeploy in the two that change Worker code — a \\\ndesign or registration stage has nothing to deploy. File what you produce — the design, the Worker \\\nURL, the tool responses — as artifacts on this project rather than leaving it in the chat. The \\\nclaim URL that the first deploy prints is a bearer credential for the account: give it to me \\\ndirectly and file it nowhere.\n\nThis project needs no Anthropic key and no Cloudflare login. If a step seems to need either, that \\\nis the wrong step.`;\n\n/**\n * The work-stream. It adopts the task set the tasks phase built (`Project.make` would otherwise\n * create its own empty one) and carries the brief as an artifact.\n *\n * The skill reaches a chat through `instructions.skills`, which is the only binding path: a Skill\n * object sitting in the space is not enabled by proximity. Binding makes it available; the text\n * above is what keeps it on. The Sandbox skill cannot be bound the same way — it is contributed by\n * a plugin under a key rather than stored here — so the text names it instead.\n *\n * No `repo` and no `McpServer`: the repository is created in stage five and the server record in\n * stage four, and seeding either would name a URL that does not exist.\n */\nexport const ProjectPhase: SampleSpace.Phase<ProjectResult, ProjectInput> = SampleSpace.phase('project', {\n  // `Outline.Outline` is not created here directly: `Project.make` builds one for the project's own\n  // outline, and a phase has to declare every type it persists or the space cannot register it.\n  schemas: [Project.Project, Instructions.Instructions, Outline.Outline],\n  run: ({ docs, tasks, skill, game }: ProjectInput) =>\n    Effect.gen(function* () {\n      const instructions = yield* Database.add(\n        Instructions.make({\n          name: 'Chess MCP on Workers',\n          text: INSTRUCTIONS,\n          skills: [Ref.make(skill.skill)],\n          objects: [Ref.make(docs.brief), Ref.make(tasks.taskSet), Ref.make(game.game)],\n        }),\n      );\n\n      const project = yield* Database.add(\n        Project.make({\n          name: 'Chess MCP on Workers',\n          description:\n            'A chess engine served from one Cloudflare Worker as an MCP server, registered against this space so any chat can ask it for a move.',\n          status: 'active',\n          instructions: Ref.make(instructions),\n          taskSet: Ref.make(tasks.taskSet),\n          artifacts: [Ref.make(docs.brief)],\n        }),\n      );\n\n      return { project, instructions };\n    }),\n});\n","//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport * as SampleSpace from '@dxos/app-toolkit/SampleSpace';\nimport * as Skill from '@dxos/compute/Skill';\nimport * as Template from '@dxos/compute/Template';\nimport { Database } from '@dxos/echo';\nimport { Text } from '@dxos/schema';\nimport { trim } from '@dxos/util';\n\n//\n// Durable working preferences, seeded as a space object so a project's instructions can bind them.\n//\n// Preferences, not mechanics: how work is tracked, where the code is written, and what counts as\n// evidence. The mechanics of the sandbox (creating one, exec, file transfer) belong to\n// `org.dxos.skill.sandbox` and are cross-referenced rather than restated — two copies of a\n// procedure diverge, and the copy the model reads is the stale one.\n//\n\nconst INSTRUCTIONS = trim`\n  How multi-step development work is tracked and carried out here. These hold across a whole\n  session, not one task, so keep this skill enabled for the duration.\n\n  ## Tasks\n  - One task per unit of work, never per batch. A batched task hides which parts landed and which\n    were dropped.\n  - One or two lines per description. Detail belongs in the design document or the README.\n  - Work that ends in someone else's hands gets its own task, titled after the thing to act on and\n    assigned to them — never buried in the task that produced the work.\n  - Use the whole status range. \\`blocked\\` names what unblocks it; \\`cancelled\\` names why it was\n    dropped. Deleting a dropped item loses reasoning someone will otherwise re-derive later.\n  - Set status in the same turn the work completes, not in a batch at the end. The task list is how\n    the reader watches this run, so a status set late is a status that was wrong while it mattered.\n  - Respect \\`dependsOn\\`. A stage assumes the one before it deployed and was verified; starting one\n    early is how a failure gets attributed to the wrong change.\n  - Keep the outline scoped to the task in flight. Findings about another thread belong where that\n    thread lives.\n\n  ## Where the code is written\n  - **You write it.** The sandbox is a shell you drive: you create the files, run the build, and read\n    the failures. Creating a sandbox, running commands in it and moving files in and out are the\n    Sandbox skill's (\\`org.dxos.skill.sandbox\\`) — enable it rather than working from memory.\n  - **Do not hand the task to the harness in the image.** The sandbox image ships a coding agent of\n    its own, and \\`org.dxos.skill.deepseek\\` will run it. It is the wrong tool here: it starts with\n    none of this space's context — no brief, no task tree, no design document — and what it produces\n    lands on a container filesystem instead of in this project. Use it only if the reader asks for it\n    by name.\n  - **One sandbox for the whole project.** It keeps its filesystem, its installed toolchain and its\n    checkout between commands. A second one pays for all of that again and splits the tree in two.\n  - **The container is not durable.** Anything that has to survive it — the design, the deploy\n    output, the URLs — is filed as a project artifact in the same turn it is produced, not at the\n    end.\n\n  ## Deploying to Cloudflare\n  - **No account, first deploy.** \\`wrangler deploy --temporary\\` mints a temporary account and\n    prints a claim URL. The flag is not optional: plain \\`wrangler deploy\\` refuses in a\n    non-interactive shell and demands a token, and an authentication prompt is a dead end for a\n    session that cannot open a browser.\n  - **The claim URL is a bearer credential; the Worker URL is not.** Anyone holding the claim URL can\n    take ownership of the account, and a project artifact replicates in plaintext to everyone in the\n    space — so file the Worker URL and hand the claim URL straight to the reader, logging it nowhere.\n    Claiming needs a browser, so it is theirs to do; say that it expires with the Worker on it, which\n    invalidates every later stage rather than only the current one.\n  - **Deploy when the Worker changed, and verify every stage regardless.** A design stage has nothing\n    to deploy and a stage that only registers or publishes changes no Worker code — deploying there is\n    a no-op that reads as progress. Where you did deploy, a successful \\`wrangler deploy\\` is not\n    evidence that anything is serving; the response body is.\n  - **\\`--temporary\\` needs wrangler 4.102 or later, and that wrangler needs Node 22.** The sandbox\n    runs Node 20, and a plain \\`npm install wrangler\\` there resolves to the last version that fits\n    it, which has no \\`--temporary\\`. Install \\`wrangler@latest\\` explicitly and run its script under\n    a newer node without touching the image: \\`npm install wrangler@latest\\`, then\n    \\`npx --yes node@22 node_modules/wrangler/bin/wrangler.js deploy --temporary\\`.\n  - **Read the deploy output for what it warns about, not only its exit code.** Bundle size and a\n    missing binding are warnings on a deploy that succeeds and failures on the request that follows.\n  - **Bound work by work, not by wall-clock.** \\`Date.now()\\` does not advance during synchronous\n    compute in a Worker, so a time deadline never fires and every timing you report reads as zero.\n    Count iterations, nodes or bytes instead.\n\n  ## Models and credentials\n  - The chat runs DeepSeek V4 Pro through the DXOS edge. No Anthropic key is involved in this\n    project, and nothing here should ask for one.\n  - Bind credentials by REFERENCE with the variable name to read them as. Never paste a secret into\n    a prompt, a message or a shell command — a command line persists in the transcript and in the\n    container's history.\n  - A missing credential is a setup gap, not an error to stop on: name the connector the reader has\n    to connect, then wait. Do not retry in the same turn.\n\n  ## MCP servers\n  - A server is registered as an object in the space, with the transport as \\`http\\` — Streamable\n    HTTP. \\`sse\\` is the deprecated transport and is there for servers that have not migrated.\n  - Its key replicates in plaintext to everyone in the space. Register a key the server can rotate,\n    and never one that authorises anything beyond it.\n  - A chat that does not list a registered server's tools has failed to connect. That is a URL,\n    transport or handshake fault to diagnose — not a model that declined to use them.\n  - Prove the tool was actually called. An answer a model could have produced from its own knowledge\n    is not evidence the server is reachable; the tool call in the transcript is.\n\n  ## GitHub and publishing\n  - Publishing comes last, after the thing works. The two consent screens it needs are the only\n    steps that leave this space, and a first run that meets them mid-build stops there.\n  - An agent has no GitHub access of its own. Bind the space's token as \\`GH_TOKEN\\` before it is\n    needed, not after a 401.\n  - A connector token authorises access to repositories; it cannot CREATE one. Creating the\n    repository is the reader's task and it comes first — the token is then scoped to that repository\n    rather than to everything they own.\n  - Tokens rotate. A session that was pushing fine and now gets 401 or 403 holds a stale copy:\n    refresh the binding rather than restarting the session.\n\n  ## What counts as evidence\n  - Set the bar at execution, not compilation. \"It builds\" and \"it parses\" are not evidence: require\n    the thing to be RUN, and say what could not be exercised.\n  - A brief's premise is often wrong; expect it to be falsified. Ask what the real mechanism is\n    before changing the thing that looks like it, and re-ask when the previous answer was itself a\n    correction.\n  - When a measurement is corrected, sweep every conclusion that shared the flawed method. A bad\n    instrument invalidates results already banked; failing to propagate the fix backwards is the\n    expensive mistake.\n  - \"Could not run it here\" is an environment limit, not a behavioural difference. Only the second is\n    a stop; label the first untested rather than letting it read as a pass.\n  - The sandbox's own state contaminates results: tooling installed earlier makes a capability look\n    available when it is not. Verify a from-scratch claim in a clean container.\n  - A green build is not proof. Assignment and type erasure hide shape mismatches that fail only at\n    runtime — and a Worker's runtime is not node's, so a module that resolves locally can still be\n    missing at the edge.\n  - Distinguish cited from executed evidence. A comment describing a failure is a claim being\n    relayed, not a result; a load-bearing decision deserves a reproduction.\n  - Be terse about the plumbing. Creating a sandbox, installing a toolchain and each command that\n    found nothing are not worth narrating. What the reader wants is the outcome — the URL, the tool\n    response, the failure. Say something mid-flight only when they have to act.\n`;\n\nexport type SkillResult = { skill: Skill.Skill };\n\n/** The development-preferences skill, as a space object a project's instructions can bind. */\nexport const DevelopmentSkill: SampleSpace.Phase<SkillResult> = SampleSpace.phase('skill', {\n  schemas: [Skill.Skill, Text.Text],\n  run: () =>\n    Effect.gen(function* () {\n      const skill = yield* Database.add(\n        Skill.make({\n          key: 'org.dxos.skill.development',\n          name: 'Development',\n          description: 'How work is tracked, where the code is written, and what counts as evidence.',\n          instructions: Template.make({ source: INSTRUCTIONS }),\n          agentCanEnable: true,\n        }),\n      );\n\n      return { skill };\n    }),\n});\n","//\n// Copyright 2026 DXOS.org\n//\n\nimport * as SampleSpace from '@dxos/app-toolkit/SampleSpace';\n\n/** Stable reference date so regenerations are reproducible. Override with NOW=2026-05-20 env. */\nexport const REFERENCE = process.env.NOW ? new Date(process.env.NOW) : new Date('2026-05-20T15:00:00Z');\n\n/**\n * Bound to the same reference the definition declares, so the pure content builders can date their\n * objects without every one of them being an effect.\n */\nexport const clock = SampleSpace.makeClock(REFERENCE);\n\n/** ISO timestamp that many days before {@link REFERENCE}, at an optional UTC hour of that day. */\nexport const daysAgo = clock.daysAgo;\n","//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport * as SampleSpace from '@dxos/app-toolkit/SampleSpace';\nimport { Database, Obj, Ref } from '@dxos/echo';\nimport { EntityId } from '@dxos/echo/Key';\nimport { Actor, Task, TaskSet } from '@dxos/types';\n\nimport { daysAgo } from './util.ts';\n\n//\n// The plan, authored as a tree.\n//\n// The set lists its root tasks and each task lists its own sub-tasks (`Task.subtasks`), at unbounded\n// depth. The seeds are nested the same way, which keeps the shape of the work visible in the source\n// rather than reconstructable only by following refs.\n//\n// Everything is `todo`: this is a plan to run, not a project caught mid-flight. The one thing the\n// seeds do assert is ORDER — a stage assumes the one before it landed, so each depends on its\n// predecessor and a runner that skips ahead is visibly out of order rather than merely early.\n//\n// The ordering constraint that shaped the stages: nothing needing an account outside this space\n// happens until the app already works. Publishing is stage five for exactly that reason — a consent\n// screen in the middle of the build is where a first run stops.\n//\n\ntype TaskSeed = {\n  readonly title: string;\n  readonly description?: string;\n  readonly estimate?: Task.Estimate;\n  /** Set where the step needs the reader's own hands — a consent screen, or a repository to own. */\n  readonly assignee?: Actor.Actor;\n  readonly subTasks?: ReadonlyArray<TaskSeed>;\n};\n\n/**\n * The reader, as an assignee. A template cannot know who they are, so the actor carries the role and\n * a label rather than a Person ref — enough for the row to say the step is not the agent's.\n */\nconst USER: Actor.Actor = { role: 'user', name: 'You' };\n\nconst PLAN: TaskSeed = {\n  title: 'Ship a chess engine as an MCP server on Cloudflare Workers',\n  description:\n    'From the brief to a tool a chat in this space calls. Every stage is verified before the next one starts; the two that change Worker code deploy first.',\n  estimate: 'l',\n  subTasks: [\n    {\n      title: 'Design the tool surface and write it down',\n      description: 'A Markdown artifact on this project, with the diagrams a reviewer reads instead of the code.',\n      estimate: 's',\n      subTasks: [\n        {\n          title: 'Select DeepSeek V4 Pro as the chat model',\n          description:\n            'Yours to do: the model is a Composer setting, not something this space can carry. Assistant settings → model, or the selector in the chat itself. It runs through the DXOS edge, so no Anthropic key is involved anywhere in this project.',\n          estimate: 'xs',\n          assignee: USER,\n        },\n        {\n          title: 'Name the two tools and pin their schemas',\n          description:\n            'Evaluate a position, and name the best move from one. FEN in, and a bounded search budget as an argument — decide the unit and the ceiling now.',\n          estimate: 'xs',\n        },\n        {\n          title: 'Diagram the request path',\n          description:\n            'Chat → MCP client → Worker → engine, as a mermaid flowchart. Name what is bundled and what is fetched.',\n          estimate: 'xs',\n        },\n        {\n          title: 'Decide how the engine gets into the Worker',\n          description:\n            'A WebAssembly build bundled with the Worker, and what that costs against the bundle-size limit. State the fallback if it does not fit.',\n          estimate: 'xs',\n        },\n        {\n          title: 'File the design as a project artifact',\n          description: 'DESIGN.md, added to the project rather than left in the chat.',\n          estimate: 'xs',\n        },\n      ],\n    },\n    {\n      title: 'Deploy an empty Worker with no Cloudflare login',\n      description:\n        'Nothing application-shaped in this stage. The point is a URL that answers before any code exists, and an account claimed while it is cheap to lose. No login to DEPLOY; claiming it afterwards is the one browser step here.',\n      estimate: 'm',\n      subTasks: [\n        {\n          title: 'Create the sandbox and install the toolchain',\n          description:\n            'One sandbox for the whole project — it keeps its filesystem between commands, so a second one pays for node and wrangler again.',\n          estimate: 's',\n        },\n        {\n          title: 'Initialize the project with wrangler',\n          description: 'A TypeScript Worker returning one line of body. Anything more is a later stage.',\n          estimate: 'xs',\n        },\n        {\n          title: 'Deploy without authenticating to Cloudflare',\n          description:\n            '`wrangler deploy --temporary` mints a temporary account and prints a Worker URL and a claim URL; plain `wrangler deploy` refuses non-interactively and demands a token, so the flag is not optional. File the WORKER url on the project. The claim URL is a bearer credential — hand it straight to the reader and file it nowhere.',\n          estimate: 's',\n        },\n        {\n          title: 'Fetch the deployed URL and confirm the body',\n          description:\n            'Fetch it. A successful deploy command is not evidence that anything is serving. Do not claim the account yet — the next stage still redeploys this Worker.',\n          estimate: 'xs',\n        },\n      ],\n    },\n    {\n      title: 'Implement the MCP server and the engine',\n      description: 'The application stage, redeployed and checked over the wire at the end of it.',\n      estimate: 'l',\n      subTasks: [\n        {\n          title: 'Answer the MCP handshake over Streamable HTTP',\n          description:\n            'Initialize and `tools/list` on one endpoint, with the two tools advertised and nothing behind them yet.',\n          estimate: 'm',\n        },\n        {\n          title: 'Bundle the engine and run one search',\n          description:\n            'Prove a search returns inside the budget the design set, from a Worker rather than from node. Bound it by work done, not by wall-clock: `Date.now()` does not advance during synchronous compute in a Worker, so a time deadline never fires there and the call reports zero elapsed.',\n          estimate: 'm',\n        },\n        {\n          title: 'Implement both tools over the engine',\n          description: 'Reject an unparseable FEN as a tool error rather than letting the engine fail on it.',\n          estimate: 'm',\n        },\n        {\n          title: 'Redeploy and call `tools/list` and both tools over the wire',\n          description:\n            'Against the deployed URL, not a local dev server. Paste the responses into the project — that is the stage evidence. This is the last deploy, so claiming comes next.',\n          estimate: 's',\n        },\n        {\n          title: 'Claim the temporary Cloudflare account',\n          description:\n            'Yours to do: claiming signs the account into yours, which needs a browser the agent does not have. It comes AFTER the last redeploy — an agent with no login cannot update a claimed account, and `--temporary` would mint a second one under a different URL. Do it inside the hour; the account expires with the Worker on it.',\n          estimate: 'xs',\n          assignee: USER,\n        },\n      ],\n    },\n    {\n      title: 'Register the server and use it from the chess chat',\n      description: \"The brief's definition of done, and the first point at which the thing is worth showing anyone.\",\n      estimate: 'm',\n      subTasks: [\n        {\n          title: 'Add the deployed URL as an MCP server in this space',\n          description:\n            'Register the URL as it stands AFTER the claim — a `workers.dev` hostname is account-scoped, so confirm it by fetching before trusting it. Protocol `http` — Streamable HTTP, not the deprecated SSE transport. Its key is stored in plaintext and replicates to everyone in the space, so keep it to one the Worker can rotate.',\n          estimate: 's',\n        },\n        {\n          title: 'Enable the Chess plugin',\n          description:\n            'Yours to do: it is available but off by default, and without it the seeded game has no board to open — the last step of this stage needs one. Settings -> plugin registry.',\n          estimate: 'xs',\n          assignee: USER,\n        },\n        {\n          title: 'Confirm the tools reach the chat',\n          description:\n            'A chat that lists the two tools has connected; one that does not is a transport or URL fault, not a model that chose against them.',\n          estimate: 'xs',\n        },\n        {\n          title: 'Ask for the best move in the seeded game',\n          description:\n            'Open the game and ask. The answer has to arrive as a tool call in the transcript — a plausible move the model knew already is a failure of this step, not a pass.',\n          estimate: 's',\n        },\n      ],\n    },\n    {\n      title: 'Publish it to GitHub',\n      description:\n        'Last on purpose: the two consent screens below are the only steps that leave this space, and putting them here means a first run reaches a working engine before it meets one.',\n      estimate: 'm',\n      subTasks: [\n        {\n          title: 'Create an empty GitHub repository for the server',\n          description:\n            'Yours to do: a connector token authorises access to repositories, it cannot create one. Make it empty — this stage pushes the first commit — and note the owner/name.',\n          estimate: 'xs',\n          assignee: USER,\n        },\n        {\n          title: 'Connect the GitHub credential, scoped to that repository',\n          description:\n            'On the authorisation screen choose \"Only select repositories\" and pick the one above, with Contents set to read and write. A token scoped to everything is a token the agent did not need.',\n          estimate: 'xs',\n          assignee: USER,\n        },\n        {\n          title: 'Push the tree, with the deploy and MCP steps written down',\n          description:\n            'A README that gets a reader from a clone to a registered MCP server. The wrangler invocation and the URL to register are the two things they cannot guess.',\n          estimate: 's',\n        },\n      ],\n    },\n  ],\n};\n\nexport type TasksResult = {\n  taskSet: TaskSet.TaskSet;\n  tasks: Task.Task[];\n  root: Task.Task;\n  /** The five stages, in order — the level the dependency chain is written across. */\n  stages: Task.Task[];\n};\n\n/**\n * Depth-first flatten, recording each task's children so they can be filed under it once stored.\n * The stages are collected on the way down, as the root's children.\n */\nconst buildTasks = (\n  seed: TaskSeed,\n): { tasks: Task.Task[]; stages: Task.Task[]; children: Map<Task.Task, Task.Task[]> } => {\n  const tasks: Task.Task[] = [];\n  const stages: Task.Task[] = [];\n  const children = new Map<Task.Task, Task.Task[]>();\n  const visit = (seed: TaskSeed, parent: Task.Task | undefined) => {\n    const task = Task.make({\n      title: seed.title,\n      status: 'todo',\n      description: seed.description,\n      estimate: seed.estimate,\n      assignee: seed.assignee,\n      // Task carries no due date; its dates are activity-log lines, so that is where they go.\n      history: [\n        {\n          id: EntityId.random(),\n          date: daysAgo(0),\n          event: 'created' as const,\n          description: 'Filed from the chess MCP template.',\n        },\n      ],\n    });\n    tasks.push(task);\n    if (parent) {\n      children.set(parent, [...(children.get(parent) ?? []), task]);\n    }\n    if (parent === tasks[0]) {\n      stages.push(task);\n    }\n    for (const child of seed.subTasks ?? []) {\n      visit(child, task);\n    }\n  };\n\n  visit(seed, undefined);\n  return { tasks, stages, children };\n};\n\n/** The plan: one root task, five stages under it, and the steps under those. */\nexport const Tasks: SampleSpace.Phase<TasksResult> = SampleSpace.phase('tasks', {\n  schemas: [TaskSet.TaskSet, Task.Task],\n  run: () =>\n    Effect.gen(function* () {\n      const taskSet = yield* Database.add(\n        TaskSet.make({\n          name: 'Chess MCP on Workers',\n          description: 'Everything between the brief and a chat asking the engine for a move.',\n        }),\n      );\n\n      const { tasks, stages, children } = buildTasks(PLAN);\n      yield* SampleSpace.children(taskSet, [tasks[0]], (taskSet, refs) => {\n        taskSet.tasks = refs;\n      });\n      for (const [parent, subtasks] of children) {\n        yield* SampleSpace.children(parent, subtasks, (parent, refs) => {\n          parent.subtasks = refs;\n        });\n      }\n\n      // Each stage depends on the one before it: the stages are sequential by construction (an MCP\n      // server cannot be registered before it has a URL), and stating it is what makes a runner\n      // working out of order visible rather than merely early.\n      for (const [index, stage] of stages.entries()) {\n        if (index > 0) {\n          const previous = stages[index - 1];\n          Obj.update(stage, (stage) => {\n            stage.dependsOn = [Ref.make(previous)];\n          });\n        }\n      }\n\n      return { taskSet, tasks, root: tasks[0], stages };\n    }),\n});\n","//\n// Copyright 2026 DXOS.org\n//\n\n// @import-as-namespace\n\nimport * as Effect from 'effect/Effect';\n\nimport type * as AppCapabilities from '@dxos/app-toolkit/AppCapabilities';\nimport * as SampleSpace from '@dxos/app-toolkit/SampleSpace';\nimport { Ref } from '@dxos/echo';\n\nimport { Docs } from './docs.ts';\nimport { ChessGame } from './game.ts';\nimport { ProjectPhase } from './project.ts';\nimport { DevelopmentSkill } from './skill.ts';\nimport { Tasks } from './tasks.ts';\nimport { REFERENCE } from './util.ts';\n\nconst phases = {\n  skill: DevelopmentSkill,\n  docs: Docs,\n  game: ChessGame,\n  tasks: Tasks,\n  project: ProjectPhase,\n};\n\n/**\n * A starting point rather than a finished world: the brief for a chess engine exposed as an MCP\n * server on Cloudflare Workers, the plan to build it as a task tree nothing has started on, a\n * position to point the finished thing at, and the development-preferences skill a chat working it\n * runs with.\n *\n * The other space templates depict a project mid-flight; this one is meant to be RUN. Every task is\n * `todo`, the design artifact the first stage produces is deliberately absent, and neither the MCP\n * server record nor a repository is seeded — stages four and five create them.\n *\n * It is deliberately reachable with no credentials but the reader's own DXOS identity: the chat runs\n * DeepSeek through the edge, the first deploy uses wrangler's unauthenticated mode, and the only two\n * consent screens are in the last stage.\n */\nexport const make = (): SampleSpace.Definition<typeof phases, void> =>\n  SampleSpace.make({\n    // Reaches a space only where the definition is applied directly (the generator panel, the\n    // archive test): the create-space dialog takes its icon from `space-templates.ts`, which\n    // overrides every template's by list index. See DESIGN.md §7.\n    space: { name: 'Chess MCP on Workers', icon: 'shield-star', hue: 'amber' },\n    reference: REFERENCE,\n    phases,\n    build: (phases) =>\n      Effect.gen(function* () {\n        const skill = yield* phases.skill();\n        const docs = yield* phases.docs();\n        const game = yield* phases.game();\n        const tasks = yield* phases.tasks();\n        yield* phases.project({ docs, tasks, skill, game });\n\n        // The root holds collections only. Project/TaskSet/Task/Skill/Game are not collection-item\n        // types, so they live directly in the space DB and surface through their own containers.\n        yield* SampleSpace.collection('Documents', [Ref.make(docs.brief)]);\n      }),\n  });\n\nexport const makeTemplate = (): AppCapabilities.SpaceTemplate =>\n  SampleSpace.makeTemplate({\n    id: 'org.dxos.plugin-debug.template.stockfish',\n    description:\n      'A brief, a five-stage plan as a task tree, a position to test against, and the skill for building it in a sandbox.',\n    definition: make(),\n  });\n"],"mappings":";;;;;;;;;;;;;;;;AAkBA,IAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCjB,IAAa,OAAsC,YAAY,MAAM,QAAQ;CAC3E,SAAS,CAAC,SAAS,QAAQ;CAC3B,WACE,OAAO,IAAI,aAAa;EAEtB,OAAO,EAAE,OAAA,OADY,SAAS,IAAI,SAAS,KAAK;GAAE,MAAM;GAAY,SAAS;EAAS,CAAC,CAAC,EACzE;CACjB,CAAC;AACL,CAAC;;;ACzCD,IAAM,cAAc;;AAKpB,IAAa,YAA2C,YAAY,MAAM,QAAQ;CAChF,SAAS,CAAC,KAAK,MAAM,MAAM,KAAK;CAChC,WACE,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,SAAS,IAAI,MAAM,KAAK,EAAE,KAAK,YAAY,CAAC,CAAC;EAYlE,OAAO;GAAE,MAAA,OAXW,SAAS,IAC3B,KAAK,KAAK;IACR,MAAM;IACN,SAAS,CACP;KAAE,MAAM;KAAS,MAAM;IAAM,GAC7B;KAAE,MAAM;KAAS,MAAM;IAAS,CAClC;IACA,SAAS;GACX,CAAC,CACH;GAEe;EAAM;CACvB,CAAC;AACL,CAAC;;;ACrBD,IAAM,iBAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCrB,IAAa,eAA+D,YAAY,MAAM,WAAW;CAGvG,SAAS;EAAC,QAAQ;EAAS,aAAa;EAAc,QAAQ;CAAO;CACrE,MAAM,EAAE,MAAM,OAAO,OAAO,WAC1B,OAAO,IAAI,aAAa;EACtB,MAAM,eAAe,OAAO,SAAS,IACnC,aAAa,KAAK;GAChB,MAAM;GACN,MAAM;GACN,QAAQ,CAAC,IAAI,KAAK,MAAM,KAAK,CAAC;GAC9B,SAAS;IAAC,IAAI,KAAK,KAAK,KAAK;IAAG,IAAI,KAAK,MAAM,OAAO;IAAG,IAAI,KAAK,KAAK,IAAI;GAAC;EAC9E,CAAC,CACH;EAcA,OAAO;GAAE,SAAA,OAZc,SAAS,IAC9B,QAAQ,KAAK;IACX,MAAM;IACN,aACE;IACF,QAAQ;IACR,cAAc,IAAI,KAAK,YAAY;IACnC,SAAS,IAAI,KAAK,MAAM,OAAO;IAC/B,WAAW,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC;GAClC,CAAC,CACH;GAEkB;EAAa;CACjC,CAAC;AACL,CAAC;;;AChED,IAAM,eAAe,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmHzB,IAAa,mBAAmD,YAAY,MAAM,SAAS;CACzF,SAAS,CAAC,MAAM,OAAO,KAAK,IAAI;CAChC,WACE,OAAO,IAAI,aAAa;EAWtB,OAAO,EAAE,OAAA,OAVY,SAAS,IAC5B,MAAM,KAAK;GACT,KAAK;GACL,MAAM;GACN,aAAa;GACb,cAAc,SAAS,KAAK,EAAE,QAAQ,aAAa,CAAC;GACpD,gBAAgB;EAClB,CAAC,CACH,EAEe;CACjB,CAAC;AACL,CAAC;;;;AClJD,IAAa,YAAY,QAAQ,IAAI,MAAM,IAAI,KAAK,QAAQ,IAAI,GAAG,oBAAI,IAAI,KAAK,sBAAsB;;AAStG,IAAa,UAHQ,YAAY,UAAU,SAGpB,CAAA,CAAM;;;;;;;AC0B7B,IAAM,OAAoB;CAAE,MAAM;CAAQ,MAAM;AAAM;AAEtD,IAAM,OAAiB;CACrB,OAAO;CACP,aACE;CACF,UAAU;CACV,UAAU;EACR;GACE,OAAO;GACP,aAAa;GACb,UAAU;GACV,UAAU;IACR;KACE,OAAO;KACP,aACE;KACF,UAAU;KACV,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;IACA;KACE,OAAO;KACP,aAAa;KACb,UAAU;IACZ;GACF;EACF;EACA;GACE,OAAO;GACP,aACE;GACF,UAAU;GACV,UAAU;IACR;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;IACA;KACE,OAAO;KACP,aAAa;KACb,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;GACF;EACF;EACA;GACE,OAAO;GACP,aAAa;GACb,UAAU;GACV,UAAU;IACR;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;IACA;KACE,OAAO;KACP,aAAa;KACb,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;KACV,UAAU;IACZ;GACF;EACF;EACA;GACE,OAAO;GACP,aAAa;GACb,UAAU;GACV,UAAU;IACR;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;KACV,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;GACF;EACF;EACA;GACE,OAAO;GACP,aACE;GACF,UAAU;GACV,UAAU;IACR;KACE,OAAO;KACP,aACE;KACF,UAAU;KACV,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;KACV,UAAU;IACZ;IACA;KACE,OAAO;KACP,aACE;KACF,UAAU;IACZ;GACF;EACF;CACF;AACF;;;;;AAcA,IAAM,cACJ,SACuF;CACvF,MAAM,QAAqB,CAAC;CAC5B,MAAM,SAAsB,CAAC;CAC7B,MAAM,2BAAW,IAAI,IAA4B;CACjD,MAAM,SAAS,MAAgB,WAAkC;EAC/D,MAAM,OAAO,KAAK,KAAK;GACrB,OAAO,KAAK;GACZ,QAAQ;GACR,aAAa,KAAK;GAClB,UAAU,KAAK;GACf,UAAU,KAAK;GAEf,SAAS,CACP;IACE,IAAI,SAAS,OAAO;IACpB,MAAM,QAAQ,CAAC;IACf,OAAO;IACP,aAAa;GACf,CACF;EACF,CAAC;EACD,MAAM,KAAK,IAAI;EACf,IAAI,QACF,SAAS,IAAI,QAAQ,CAAC,GAAI,SAAS,IAAI,MAAM,KAAK,CAAC,GAAI,IAAI,CAAC;EAE9D,IAAI,WAAW,MAAM,IACnB,OAAO,KAAK,IAAI;EAElB,KAAK,MAAM,SAAS,KAAK,YAAY,CAAC,GACpC,MAAM,OAAO,IAAI;CAErB;CAEA,MAAM,MAAM,KAAA,CAAS;CACrB,OAAO;EAAE;EAAO;EAAQ;CAAS;AACnC;;AAGA,IAAa,QAAwC,YAAY,MAAM,SAAS;CAC9E,SAAS,CAAC,QAAQ,SAAS,KAAK,IAAI;CACpC,WACE,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,SAAS,IAC9B,QAAQ,KAAK;GACX,MAAM;GACN,aAAa;EACf,CAAC,CACH;EAEA,MAAM,EAAE,OAAO,QAAQ,aAAa,WAAW,IAAI;EACnD,OAAO,YAAY,SAAS,SAAS,CAAC,MAAM,EAAE,IAAI,SAAS,SAAS;GAClE,QAAQ,QAAQ;EAClB,CAAC;EACD,KAAK,MAAM,CAAC,QAAQ,aAAa,UAC/B,OAAO,YAAY,SAAS,QAAQ,WAAW,QAAQ,SAAS;GAC9D,OAAO,WAAW;EACpB,CAAC;EAMH,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,GAC1C,IAAI,QAAQ,GAAG;GACb,MAAM,WAAW,OAAO,QAAQ;GAChC,IAAI,OAAO,QAAQ,UAAU;IAC3B,MAAM,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC;GACvC,CAAC;EACH;EAGF,OAAO;GAAE;GAAS;GAAO,MAAM,MAAM;GAAI;EAAO;CAClD,CAAC;AACL,CAAC;;;;;;;AC9RD,IAAM,SAAS;CACb,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;CACP,SAAS;AACX;;;;;;;;;;;;;;;AAgBA,IAAa,aACX,YAAY,KAAK;CAIf,OAAO;EAAE,MAAM;EAAwB,MAAM;EAAe,KAAK;CAAQ;CACzE,WAAW;CACX;CACA,QAAQ,WACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,OAAO,MAAM;EAClC,MAAM,OAAO,OAAO,OAAO,KAAK;EAChC,MAAM,OAAO,OAAO,OAAO,KAAK;EAChC,MAAM,QAAQ,OAAO,OAAO,MAAM;EAClC,OAAO,OAAO,QAAQ;GAAE;GAAM;GAAO;GAAO;EAAK,CAAC;EAIlD,OAAO,YAAY,WAAW,aAAa,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC;CACnE,CAAC;AACL,CAAC;AAEH,IAAa,qBACX,YAAY,aAAa;CACvB,IAAI;CACJ,aACE;CACF,YAAY,KAAK;AACnB,CAAC"}