@goodandready/dsh-moa 0.2.45 → 0.2.47

package/README.md

@@ -150,7 +150,7 @@ Inspect line-by-line differences between candidate proposals and the curator's s
 Before promoting any winning candidate files over the workspace root, `dsh-moa` invokes the local `dsh-time-machine` service to create a shadow Git checkpoint (`moa-pre-promotion: candidate-N`). If `dsh-time-machine` is absent or unreachable, file promotion is blocked (fail-closed) to protect uncheckpointed workspace files against unintended overwrites (override with `force: true` only when automated checkpoints are explicitly unneeded).
 
 ### 9. Automated Test Execution Gate
-When `test_gate_enabled: true` and `test_command` (e.g. `npm test` or `pytest`) are configured, candidate code is executed in an ephemeral sandbox overlay. The judge receives concrete test outcomes, durations, and output logs to ground decisions in objective verification.
+When `test_gate_enabled: true` and `test_command` (e.g. `npm test` or `pytest`) are configured, candidate code is executed in an ephemeral sandbox overlay. The test sandbox uses process containment fences and path validation to block unauthorized host file access and computed shell evasion (base64/eval/pipes), while allowing safe HTTP route literals. The judge receives concrete test outcomes, durations, and output logs to ground decisions in objective verification.
 
 ### 10. Multi-Judge Panel & Consensus Voting
 When `multi_judge_enabled: true`, candidate solutions are independently evaluated by a panel of judge models. Winner selection supports `majority`, `highest_score`, or `unanimous` consensus strategies.
@@ -165,7 +165,7 @@ When invoking `/moa` without explicit preset flags, the router classifies prompt
 As each candidate completes, live token counts and USD costs are streamed directly into the chat based on catalog pricing and vendor rates.
 
 ### 14. Cost Budget Guardrails (Trim & Abort Modes)
-`budget_guard_enabled` and `max_budget_usd` guard against accidental spend. Mode `trim` automatically reduces the candidate pool to fit the budget, while `abort` cancels execution before token consumption.
+`budget_guard_enabled` and `max_budget_usd` guard against accidental spend. Upfront and runtime phase guards account for candidate generation, multi-judge panel voting, and downstream synthesis prompt overhead including custom evaluation criteria (`judge_criteria`). Mode `trim` automatically reduces the candidate pool to fit the budget, while `abort` cancels execution before token consumption. In abort payloads, all panel and candidate token metrics are fully preserved.
 
 ### 15. Temperature Gradient Exploration & Per-Candidate Temperature
 Supports individual candidate temperatures (`slot.temperature`) and `temperature_gradient_enabled` to distribute temperatures (0.2 → 0.9) across candidates for maximum architectural diversity.

package/README.ru.md

@@ -150,7 +150,7 @@ graph TD
 Перед промоушном файлов победителя в корень рабочей области `dsh-moa` автоматически обращается к сервису `dsh-time-machine` для создания снимка (`moa-pre-promotion: candidate-N`). Если плагин недоступен или создание снимка завершилось ошибкой, перезапись файлов блокируется во избежание потери несохранённых данных (переопределяется параметром `force: true`, только если создание снимков намеренно отключено).
 
 ### 9. Автоматический шлюз выполнения тестов (Automated Test Execution Gate)
-При включении `test_gate_enabled: true` и указании тестовой команды (`test_command`, например `npm test` или `pytest`) каждый кандидат запускается в изолированном оверлейном окружении. Судья получает объективный вердикт с кодами возврата, временем исполнения и логами тестов до вынесения итогового решения.
+При включении `test_gate_enabled: true` и указании тестовой команды (`test_command`, например `npm test` или `pytest`) каждый кандидат запускается в изолированном оверлейном окружении с защитой от выхода за пределы песочницы (блокировка вычисляемых shell-команд base64/eval/pipes при сохранении безопасных строковых REST-маршрутов). Судья получает объективный вердикт с кодами возврата, временем исполнения и логами тестов до вынесения итогового решения.
 
 ### 10. Коллегия судей и консенсусное голосование (Multi-Judge Panel)
 При активации опции `multi_judge_enabled` решения кандидатов оценивает независимая панель судейских моделей с поддержкой стратегий голосования: `majority` (большинство), `highest_score` (наивысший средний балл) или `unanimous` (единогласный консенсус).
@@ -165,7 +165,7 @@ graph TD
 По мере завершения каждого кандидата плагин в реальном времени транслирует в чат накопленный расход токенов и расчетную стоимость в USD на базе встроенного каталога тарифов OpenRouter и прямых цен провайдеров.
 
 ### 14. Бюджетные ограничения расходов (Cost Budget Guardrails)
-Опция `budget_guard_enabled` с лимитом `max_budget_usd` защищает от непредвиденных трат: режим `trim` автоматически сокращает пул кандидатов до самых экономичных моделей, укладывающихся в бюджет, а режим `abort` прерывает выполнение до начала генерации.
+Опция `budget_guard_enabled` с лимитом `max_budget_usd` защищает от непредвиденных трат. Упреждающие и пофазные проверки учитывают генерацию кандидатов, панель судей и оверхед промпта синтеза с учётом пользовательских критериев (`judge_criteria`). Режим `trim` автоматически сокращает пул кандидатов до самых экономичных моделей, укладывающихся в бюджет, а режим `abort` прерывает выполнение до начала генерации. При прерывании полностью сохраняются метрики токенов кандидатов и мульти-судейской панели.
 
 ### 15. Градиент температурной диверсификации и точечная температура
 Поддерживается как индивидуальная настройка температуры для каждого кандидата (`slot.temperature`), так и опция `temperature_gradient_enabled`, автоматически распределяющая температуры кандидатов по шкале от 0.2 до 0.9 для достижения максимального разнообразия инженерных подходов.

package/lib/client.js

@@ -119,6 +119,7 @@ window.__ModuleLoader__.load({
       'actions.save': 'Save Configuration',
       'actions.saving': 'Saving…',
       'actions.saved': 'Configuration saved successfully!',
+      'actions.saved_memory_only': 'Saved to session memory only (not persisted to disk)',
       'actions.retry': 'Reload Configuration',
       'badge.disabled': 'MoA Disabled',
       'config.enabled_label': 'Enable MoA (slash command and turn routing)',
@@ -297,6 +298,7 @@ window.__ModuleLoader__.load({
       'actions.save': '保存配置',
       'actions.saving': '正在保存…',
       'actions.saved': '配置已成功保存！',
+      'actions.saved_memory_only': '已保存到会话内存（未持久化到磁盘）',
       'actions.retry': '重新加载配置',
       'badge.disabled': 'MoA 已禁用',
       'config.enabled_label': '启用 MoA（斜杠命令与轮次拦截路由）',
@@ -2566,7 +2568,11 @@ window.__ModuleLoader__.load({
           .then((r) => r.json())
           .then((res) => {
             if (res && res.ok) {
-              setSaveStatus(t('actions.saved'))
+              if (res.persisted === false) {
+                setSaveStatus(t('actions.saved_memory_only'))
+              } else {
+                setSaveStatus(t('actions.saved'))
+              }
               if (Array.isArray(res.presets)) setPresets(res.presets)
               if (res.defaultPreset) setDefaultPreset(res.defaultPreset)
               setTimeout(() => setSaveStatus(''), 3000)

package/lib/file-workspace.js

@@ -302,6 +302,7 @@ export async function createPrePromotionCheckpoint(baseDir, candidateTarget, opt
       headers: { 'Content-Type': 'application/json' },
       body: JSON.stringify({ label, cwd: baseDir }),
       signal: AbortSignal.timeout(options.timeoutMs ?? 1500),
+      redirect: 'error',
     })
     if (res.ok) {
       const data = await res.json()
@@ -563,15 +564,15 @@ export function computeLineDiff(oldText = '', newText = '') {
   const subOld = oldLines.slice(start, oldEnd + 1)
   const subNew = newLines.slice(start, newEnd + 1)
   const subN = subOld.length, subM = subNew.length
-  const middleItems = []
-
-  if (subN === 0) middleItems.push(...subNew.map((line, j) => ({ type: 'added', line, newNum: start + j + 1 })))
-  else if (subM === 0) middleItems.push(...subOld.map((line, i) => ({ type: 'removed', line, oldNum: start + i + 1 })))
-  else if (subN > 2000 || subM > 2000) {
-    middleItems.push(
-      ...subOld.map((line, i) => ({ type: 'removed', line, oldNum: start + i + 1 })),
-      ...subNew.map((line, j) => ({ type: 'added', line, newNum: start + j + 1 })),
-    )
+  let middleItems
+  if (subN === 0) {
+    middleItems = subNew.map((line, j) => ({ type: 'added', line, newNum: start + j + 1 }))
+  } else if (subM === 0) {
+    middleItems = subOld.map((line, i) => ({ type: 'removed', line, oldNum: start + i + 1 }))
+  } else if (subN > 2000 || subM > 2000) {
+    middleItems = new Array(subN + subM)
+    for (let i = 0; i < subN; i++) middleItems[i] = { type: 'removed', line: subOld[i], oldNum: start + i + 1 }
+    for (let j = 0; j < subM; j++) middleItems[subN + j] = { type: 'added', line: subNew[j], newNum: start + j + 1 }
   } else {
     const dp = Array.from({ length: subN + 1 }, () => new Uint16Array(subM + 1))
     for (let i = 0; i < subN; i++) {
@@ -587,8 +588,7 @@ export function computeLineDiff(oldText = '', newText = '') {
         stack.push({ type: 'removed', line: subOld[--i], oldNum: start + i + 1 })
       }
     }
-    middleItems.push(...stack.reverse())
+    middleItems = stack.reverse()
   }
-
-  return [...prefixItems, ...middleItems, ...suffixItems]
+  return prefixItems.concat(middleItems, suffixItems)
 }

package/lib/index.js

@@ -95,10 +95,21 @@ export function apply(ctx, config) {
 
   const saveConfig = async (newFields) => {
     const plain = plainConfig(newFields)
+    let persisted = false
     if (settingsService && typeof settingsService.replace === 'function') {
       await settingsService.replace(NS, plain)
+      persisted = true
     } else if (settingsService && typeof settingsService.update === 'function') {
       await settingsService.update(NS, plain)
+      persisted = true
+    }
+    if (config && typeof config === 'object') {
+      for (const [k, v] of Object.entries(plain)) {
+        if (config[k] && typeof config[k] === 'object' && typeof config[k].get === 'function') continue
+        const desc = Object.getOwnPropertyDescriptor(config, k)
+        if (desc && desc.get && !desc.set) continue
+        bestEffort('update in-memory config key', () => { config[k] = v }, ctx.logger)
+      }
     }
     let liveCandidate = ctx.fiber?.config
     if (!liveCandidate && ('config' in ctx)) {
@@ -110,7 +121,7 @@ export function apply(ctx, config) {
       baseAtOverride[key] = JSON.stringify(currentLive[key])
     }
     localOverrides = { ...(localOverrides || {}), ...plain }
-    return live()
+    return { ok: true, persisted, ...live() }
   }
 
   const callLlm = createLlmCaller(ctx)

package/lib/moa-budget.js

@@ -66,6 +66,35 @@ export function estimateRound2Cost(candidates = [], prices = {}, expectedOutputT
   return r2Total
 }
 
+/**
+ * Estimates upfront token cost for multi-judge consensus panel (#158).
+ */
+export function estimatePanelCost(judges = [], numCandidates = 1, prices = {}, maxTokens = 2048, promptTokens = 500) {
+  if (!Array.isArray(judges) || judges.length === 0 || numCandidates <= 1) return 0
+  let totalCost = 0
+  const inputTokens = promptTokens + (maxTokens * numCandidates) + 150
+  const outputTokens = Math.min(maxTokens, 1024)
+  for (const j of judges) {
+    if (j?.provider && j?.model) {
+      const cost = estimateTokenCost(j, { inputTokens, outputTokens }, prices)?.costUsd || 0
+      totalCost += cost
+    }
+  }
+  return totalCost
+}
+
+/**
+ * Calculates accurate synthesis prompt tokens accounting for full user prompt,
+ * judge criteria, and reference candidate texts (#158).
+ */
+export function calcSynthesisPromptTokens(userPrompt = '', referenceOutputs = [], judgeCriteria = '', overhead = 2600) {
+  const promptChars = (typeof userPrompt === 'string' ? userPrompt.length : 0) +
+    (typeof judgeCriteria === 'string' ? judgeCriteria.length : 0) +
+    (Array.isArray(referenceOutputs) ? referenceOutputs.reduce((acc, r) => acc + (r.text?.length || 0), 0) : 0) +
+    overhead
+  return Math.max(50, Math.ceil(promptChars / 4))
+}
+
 /**
  * Phase-by-phase runtime budget check (#158).
  * Checks if current spent + next phase estimate would exceed budget.
@@ -108,6 +137,7 @@ export function applyBudgetGuardrails({
   promptLength = 1000,
   projectContext = '',
   messages = [],
+  judgeCriteria = '',
   maxTokens = 2048,
   peerCritiqueEnabled = false,
   aggregator = null,
@@ -122,8 +152,11 @@ export function applyBudgetGuardrails({
     }
   }
 
-  // Calculate full input tokens from userPrompt length + messages context + system prompt overhead
+  // Calculate full input tokens from userPrompt length + judgeCriteria + messages context + system prompt overhead
   let contextChars = Number(promptLength) || 1000
+  if (typeof judgeCriteria === 'string' && judgeCriteria.length > 0 && !String(promptLength).includes(String(judgeCriteria.length))) {
+    contextChars += judgeCriteria.length
+  }
   if (typeof projectContext === 'string' && projectContext.length > 0 && !String(promptLength).includes(String(projectContext.length))) {
     contextChars += projectContext.length
   }
@@ -245,8 +278,11 @@ export function createBudgetAbortPayload({
   isFastMode = false,
   collectedCtx = {},
   startTime = Date.now(),
+  multiJudgeResult = null,
 }) {
   const aggLabel = (primaryJudge?.provider && primaryJudge?.model) ? `${primaryJudge.provider}:${primaryJudge.model}` : "none";
+  const refTokens = referenceOutputs.reduce((acc, r) => acc + (r.usage?.totalTokens || 0), 0);
+  const panelTokens = multiJudgeResult?.totalUsage?.totalTokens || 0;
   return {
     kind: "failure",
     content: `🛑 Budget Guardrail Abort: ${reason}`,
@@ -259,11 +295,13 @@ export function createBudgetAbortPayload({
     winnerModel: "none",
     promotedFiles: [],
     usage: {
-      totalTokens: referenceOutputs.reduce((acc, r) => acc + (r.usage?.totalTokens || 0), 0),
+      totalTokens: refTokens + panelTokens,
       totalCostUsd: Number(currentSpentUsd.toFixed(5)),
       candidates: referenceOutputs.map((r) => ({ label: r.label, usage: r.usage, costUsd: r.costUsd })),
       aggregator: { inputTokens: 0, outputTokens: 0, totalTokens: 0, costUsd: 0 },
+      ...(multiJudgeResult ? { multiJudge: multiJudgeResult.totalUsage || { totalTokens: panelTokens } } : {}),
     },
+    multiJudgeResult: multiJudgeResult || undefined,
     skippedFiles: collectedCtx?.skippedFiles || 0,
     skippedList: collectedCtx?.skippedList || [],
     durationMs: Date.now() - startTime,

package/lib/moa-llm.js

@@ -26,7 +26,7 @@ function combineSignals(signal, timeoutSignal) {
  */
 
 export function createLlmCaller(ctx) {
-  return async ({ provider, model, messages, temperature = 0.6, maxTokens = 4096, timeoutMs, onStreamDelta, signal, stop, reasoningEffort }) => {
+  return async ({ provider, model, messages, temperature = 0.6, maxTokens = 2048, timeoutMs, onStreamDelta, signal, stop, reasoningEffort }) => {
     if (!ctx.llm) {
       throw new Error('ctx.llm is not available in cordis context')
     }

package/lib/moa-multi-judge.js

@@ -5,6 +5,7 @@
 
 import { slotLabel } from './moa-prompts.js'
 import { estimateTokenCost } from './pricing.js'
+import { estimatePanelCost, estimateDownstreamCost, checkPhaseBudget, calcSynthesisPromptTokens } from './moa-budget.js'
 
 /**
  * Extracts code fences and block-level assets from markdown text.
@@ -160,6 +161,7 @@ export async function executeMultiJudgePanel({
   onProgress,
   prices = {},
   blind = false,
+  maxTokens = 2048,
 }) {
   const activeCandidates = (candidates || []).filter((c) => c && c.ok)
   if (activeCandidates.length === 0) {
@@ -240,6 +242,7 @@ CONSENSUS_REASONING: [one concise sentence explaining your pick]
           { role: 'system', content: 'You are an objective AI code evaluation judge.' },
           { role: 'user', content: judgePrompt },
         ],
+        maxTokens,
         signal: abortCtrl.signal,
       })
 
@@ -392,3 +395,64 @@ CONSENSUS_REASONING: [one concise sentence explaining your pick]
     consensusReport,
   }
 }
+
+
+/**
+ * Runs the Multi-Judge consensus phase with budget pre-checking (#158, #168).
+ */
+export async function runMultiJudgePhase({
+  preset = {},
+  successfulRefs = [],
+  primaryJudge,
+  userPrompt = '',
+  judgeCriteria = '',
+  prices = {},
+  maxTokens = 2048,
+  callLlm,
+  signal,
+  onProgress,
+  currentSpent = 0,
+}) {
+  if (!preset?.multi_judge_enabled || successfulRefs.length <= 1) {
+    return { skipped: true, result: null }
+  }
+  const panelJudges = (preset.judge_models && preset.judge_models.length > 0) ? preset.judge_models : [primaryJudge]
+  const panelMaxTokens = Math.min(typeof preset.max_tokens === 'number' && preset.max_tokens > 0 ? preset.max_tokens : 2048, 2048)
+
+  if (preset?.budget_guard_enabled && preset?.max_budget_usd > 0) {
+    const promptTokens = calcSynthesisPromptTokens(userPrompt, successfulRefs, judgeCriteria)
+    const panelEst = estimatePanelCost(panelJudges, successfulRefs.length, prices, panelMaxTokens, promptTokens)
+    const downEst = estimateDownstreamCost(primaryJudge, [], successfulRefs.length, prices, maxTokens, promptTokens)
+    const phaseCheck = checkPhaseBudget({
+      phaseName: 'Multi-Judge Panel',
+      currentSpentUsd: currentSpent,
+      nextPhaseCostUsd: panelEst + downEst,
+      maxBudgetUsd: preset.max_budget_usd,
+      action: preset.budget_action || 'trim',
+      enabled: true,
+    })
+    if (!phaseCheck.allowed) {
+      if (preset.budget_action === 'abort') {
+        return { abort: true, reason: phaseCheck.reason }
+      }
+      if (typeof onProgress === 'function') {
+        onProgress(`✂️ *Skipping Multi-Judge Panel to stay within budget ($${preset.max_budget_usd.toFixed(4)})*\n`)
+      }
+      return { skipped: true, result: null }
+    }
+  }
+
+  const result = await executeMultiJudgePanel({
+    judges: panelJudges,
+    candidates: successfulRefs,
+    userPrompt,
+    callLlm,
+    strategy: preset.judge_voting_strategy || 'majority',
+    prices: prices || {},
+    blind: Boolean(preset.blind_evaluation),
+    maxTokens: panelMaxTokens,
+    signal,
+    onProgress,
+  })
+  return { skipped: false, result }
+}

package/lib/moa-runner.js

@@ -8,8 +8,8 @@ import { slotLabel, isBroadPromptRequiringQuestions, buildQuestionSynthesisPromp
 import { parseWinnerIndex, parseRecommendedAssembler } from './moa-parser.js'
 import { REFERENCE_SYSTEM_PROMPT, callWithTransientRetry, runReferencesParallel } from './moa-candidates.js'
 import { executeTestGateForCandidates } from './moa-test-gate.js'
-import { executeMultiJudgePanel, buildCompositeBlockDirectives } from './moa-multi-judge.js'
-import { applyBudgetGuardrails, checkPhaseBudget, estimateRound2Cost, estimateDownstreamCost, createBudgetAbortPayload } from './moa-budget.js'
+import { executeMultiJudgePanel, buildCompositeBlockDirectives, runMultiJudgePhase } from './moa-multi-judge.js'
+import { applyBudgetGuardrails, checkPhaseBudget, estimateRound2Cost, estimateDownstreamCost, calcSynthesisPromptTokens, createBudgetAbortPayload } from './moa-budget.js'
 import { extractPriorTurnBaseline, pruneMultiTurnMessages } from './moa-context.js'
 import { generateMoABenchmarkReport } from './moa-report.js'
 // Re-exports for consumers & backward compatibility
@@ -27,13 +27,8 @@ export async function runMoAPipeline({
   messages = [],
   preset,
   callLlm,
-  cwd = process.cwd(),
-  prices = {},
-  onProgress = null,
-  historyFilePath = null,
-  liveCanvas = null,
-  onStreamDelta = null,
-  signal = null,
+  cwd = process.cwd(), prices = {}, onProgress = null,
+  historyFilePath = null, liveCanvas = null, onStreamDelta = null, signal = null,
   testGateEnabled = null, testCommand = null, execFn = null,
   webServerPort = null, timeMachineEngine = null, timeMachineUrl = null,
   force = isTestEnvironment() ? true : false, checkpoint = true, checkpointFn = null, runId: customRunId = null,
@@ -85,7 +80,8 @@ export async function runMoAPipeline({
     maxBudgetUsd: preset?.max_budget_usd,
     action: preset?.budget_action || 'trim',
     prices,
-    promptLength: (userPrompt?.length || 1000) + (projectContext ? projectContext.length : 0),
+    promptLength: (userPrompt?.length || 1000) + (judgeCriteria?.length || 0) + (projectContext ? projectContext.length : 0),
+    judgeCriteria,
     projectContext,
     messages,
     maxTokens,
@@ -316,11 +312,7 @@ export async function runMoAPipeline({
     const currentSpent = referenceOutputs.reduce((acc, r) => acc + (r.costUsd || 0), 0)
     const r2Next = estimateRound2Cost(successfulRefs, prices, maxTokens)
     const downNext = estimateDownstreamCost(primaryJudge, preset?.judge_models, successfulRefs.length, prices, maxTokens)
-    const phaseCheck = checkPhaseBudget({
-      phaseName: 'Consilium Round 2', currentSpentUsd: currentSpent,
-      nextPhaseCostUsd: r2Next + downNext, maxBudgetUsd: preset.max_budget_usd,
-      action: preset.budget_action || 'trim', enabled: true,
-    })
+    const phaseCheck = checkPhaseBudget({ phaseName: 'Consilium Round 2', currentSpentUsd: currentSpent, nextPhaseCostUsd: r2Next + downNext, maxBudgetUsd: preset.max_budget_usd, action: preset.budget_action || 'trim', enabled: true })
     if (!phaseCheck.allowed) {
       if (phaseCheck.action === 'abort') {
         await cleanMoaWorkspaces(cwd, { runId })
@@ -393,19 +385,15 @@ export async function runMoAPipeline({
     return { error: new Error('Turn aborted') }
   }
 
-  if (preset?.multi_judge_enabled && successfulRefs.length > 1) {
-    multiJudgeResult = await executeMultiJudgePanel({
-      judges: (preset.judge_models && preset.judge_models.length > 0) ? preset.judge_models : [primaryJudge],
-      candidates: successfulRefs,
-      userPrompt,
-      callLlm,
-      strategy: preset.judge_voting_strategy || 'majority',
-      prices: prices || {},
-      blind: Boolean(preset.blind_evaluation),
-      signal,
-      onProgress,
-    })
+  const currentRefSpent = referenceOutputs.reduce((acc, r) => acc + (r.costUsd || 0), 0)
+  const panelPhase = await runMultiJudgePhase({
+    preset, successfulRefs, primaryJudge, userPrompt, judgeCriteria, prices, maxTokens, callLlm, signal, onProgress, currentSpent: currentRefSpent,
+  })
+  if (panelPhase.abort) {
+    await cleanMoaWorkspaces(cwd, { runId })
+    return createBudgetAbortPayload({ reason: panelPhase.reason, primaryJudge, referenceOutputs, currentSpentUsd: currentRefSpent, preset, isRefinement, isFastMode, collectedCtx, startTime })
   }
+  multiJudgeResult = panelPhase.result
 
   // 7d. Feature 3: Composite Block Merge Directive
   const compositeMergeDirective = (preset?.composite_merge_enabled && successfulRefs.length > 1)
@@ -413,17 +401,14 @@ export async function runMoAPipeline({
     : null
 
   // 8. Synthesis phase via primary judge or fallback chain
+  const synthPromptTokens = calcSynthesisPromptTokens(userPrompt, successfulRefs, judgeCriteria)
   if (preset?.budget_guard_enabled && preset?.max_budget_usd > 0 && !isFastMode) {
     const currentSpent = referenceOutputs.reduce((acc, r) => acc + (r.costUsd || 0), 0) + (multiJudgeResult?.totalCostUsd || 0)
-    const downNext = estimateDownstreamCost(primaryJudge, [], successfulRefs.length, prices, maxTokens)
-    const phaseCheck = checkPhaseBudget({
-      phaseName: 'Judge Synthesis', currentSpentUsd: currentSpent,
-      nextPhaseCostUsd: downNext, maxBudgetUsd: preset.max_budget_usd,
-      action: preset.budget_action || 'trim', enabled: true,
-    })
-    if (!phaseCheck.allowed) {
+    const downNext = estimateDownstreamCost(primaryJudge, [], successfulRefs.length, prices, maxTokens, synthPromptTokens)
+    const phaseCheck = checkPhaseBudget({ phaseName: 'Judge Synthesis', currentSpentUsd: currentSpent, nextPhaseCostUsd: downNext, maxBudgetUsd: preset.max_budget_usd, action: preset.budget_action || 'trim', enabled: true })
+    if (!phaseCheck.allowed && fallbackJudges.length === 0) {
       await cleanMoaWorkspaces(cwd, { runId })
-      return createBudgetAbortPayload({ reason: phaseCheck.reason, primaryJudge, referenceOutputs, currentSpentUsd: currentSpent, preset, isRefinement, isFastMode, collectedCtx, startTime })
+      return createBudgetAbortPayload({ reason: phaseCheck.reason, primaryJudge, referenceOutputs, currentSpentUsd: currentSpent, preset, isRefinement, isFastMode, collectedCtx, startTime, multiJudgeResult })
     }
   }
   const synthesisPrompt = buildSynthesisPrompt(userPrompt, referenceOutputs, judgeCriteria, {
@@ -443,6 +428,18 @@ export async function runMoAPipeline({
     const currentJudge = judgesChain[jIdx]
     const currentLabel = slotLabel(currentJudge)
 
+    if (preset?.budget_guard_enabled && preset?.max_budget_usd > 0 && !isFastMode) {
+      const currentSpent = referenceOutputs.reduce((acc, r) => acc + (r.costUsd || 0), 0) + (multiJudgeResult?.totalCostUsd || 0)
+      const judgeCost = estimateDownstreamCost(currentJudge, [], successfulRefs.length, prices, maxTokens, synthPromptTokens)
+      const phaseCheck = checkPhaseBudget({ phaseName: `Judge Synthesis (${currentLabel})`, currentSpentUsd: currentSpent, nextPhaseCostUsd: judgeCost, maxBudgetUsd: preset.max_budget_usd, action: preset.budget_action || 'trim', enabled: true })
+      if (!phaseCheck.allowed) {
+        lastJudgeError = new Error(phaseCheck.reason)
+        logger.warn(`[dsh-moa] Judge ${currentLabel} budget check failed: ${phaseCheck.reason}`)
+        if (typeof onProgress === 'function') onProgress(`⚠️ *Judge ${currentLabel} skipped: exceeds budget limit.*\n`)
+        continue
+      }
+    }
+
     if (typeof onProgress === 'function') {
       const modeTitle = isCuratorSynthesis ? 'Curator' : 'Judge'
       const fallbackBadge = jIdx > 0 ? ` (Fallback #${jIdx})` : ''
@@ -487,6 +484,11 @@ export async function runMoAPipeline({
   }
 
   if (!judgeSuccess) {
+    if (preset?.budget_guard_enabled && preset?.max_budget_usd > 0 && !isFastMode && (lastJudgeError?.message?.includes('exceeds max budget') || lastJudgeError?.message?.includes('Budget Guardrail') || preset?.budget_action === 'abort')) {
+      await cleanMoaWorkspaces(cwd, { runId })
+      const currentSpent = referenceOutputs.reduce((acc, r) => acc + (r.costUsd || 0), 0) + (multiJudgeResult?.totalCostUsd || 0)
+      return createBudgetAbortPayload({ reason: lastJudgeError?.message || 'Budget exceeded before judge synthesis', primaryJudge, referenceOutputs, currentSpentUsd: currentSpent, preset, isRefinement, isFastMode, collectedCtx, startTime, multiJudgeResult })
+    }
     const firstErr = lastJudgeError ? (lastJudgeError.message || String(lastJudgeError)) : 'unknown error'
     synthesizedText = `⚠️ *[Aggregator error: ${firstErr}. Fallback candidate outputs:]*\n\n` +
       successfulRefs.map((r, i) => `### Candidate ${i + 1} (${r.label})\n${r.text}`).join('\n\n')

package/lib/moa-test-gate.js

@@ -43,8 +43,12 @@ export function resolveCandidateDir(baseDir, candidateIndex, options = {}) {
   }
 }
 
+const COMPUTED_SHELL_EVASION = /(?:base64\s+(?:-d|--decode|-D)|\beval\s+["\']?\$|\bxxd\s+-r|\bprintf\s+[^|\n]+\|\s*(?:ba|z|da)?sh|\bopenssl\s+enc\s+-d)/i
+
+const UNIX_ROOT_PREFIX = /^\/(?:home|root|etc|var|tmp|opt|mnt|srv|media|proc|sys|dev|usr|bin|lib|lib64|run\/(?:user|systemd|lock|credentials|secrets|udev|initramfs|mount|shm|dbus|sshd|motd)|sbin|boot|Users\/(?:[a-zA-Z0-9_\-.]+)|Applications|Library|System|Volumes|private)(?:\/|$)/
+
 /**
- * Validates that an executed script or command does not reference files outside allowed roots (#161).
+ * Validates that an executed script or command does not reference files outside allowed roots (#161, #225).
  */
 function scanPathTokensForLeak(text, allowedRoots, executionDir) {
   if (!text || typeof text !== 'string') return null
@@ -56,7 +60,10 @@ function scanPathTokensForLeak(text, allowedRoots, executionDir) {
     if (/^\/(usr\/(bin|lib|include)|bin|lib|lib64|etc|dev)(\/|$)/.test(raw) && !/\.(txt|json|env|npmrc|key|ssh|md)/i.test(raw)) {
       continue
     }
-    if (!path.isAbsolute(raw) && !raw.startsWith('..')) continue
+    const isAbs = path.isAbsolute(raw)
+    const isUp = raw.startsWith('..')
+    if (!isAbs && !isUp) continue
+    if (isAbs && process.platform !== 'win32' && !UNIX_ROOT_PREFIX.test(raw)) continue
     const resolved = path.resolve(executionDir, raw)
     const allowed = allowedRoots.some((r) => r && (resolved === r || resolved.startsWith(r + path.sep)))
     if (!allowed) {
@@ -173,10 +180,10 @@ export async function runCandidateTestGate({
       }
 
       // 2. Scan script files referenced by command or present in candidate workspace (#161)
-      const candFiles = fsSync.existsSync(executionDir) ? fsSync.readdirSync(executionDir) : []
+      const candFiles = fsSync.existsSync(executionDir) ? fsSync.readdirSync(executionDir, { recursive: true }) : []
       const scriptTokens = new Set([
         ...cmdTokens.map((t) => t.replace(/^["']|["']$/g, '')),
-        ...candFiles,
+        ...candFiles.map((f) => String(f)),
       ])
 
       for (const scriptName of scriptTokens) {
@@ -184,6 +191,18 @@ export async function runCandidateTestGate({
         if (fsSync.existsSync(scriptPath) && !fsSync.statSync(scriptPath).isDirectory()) {
           try {
             const scriptText = fsSync.readFileSync(scriptPath, 'utf8')
+            if (COMPUTED_SHELL_EVASION.test(scriptText)) {
+              const durationMs = Date.now() - startTime
+              return {
+                candidateIndex,
+                passed: false,
+                exitCode: 1,
+                durationMs,
+                command: resolvedCmd,
+                output: 'Access denied: test script contains obfuscated or computed command execution',
+                summary: `FAIL (code 1, ${durationMs}ms)`,
+              }
+            }
             const leaked = scanPathTokensForLeak(scriptText, allowedRoots, executionDir)
             if (leaked) {
               const durationMs = Date.now() - startTime
@@ -197,7 +216,9 @@ export async function runCandidateTestGate({
                 summary: `FAIL (code 1, ${durationMs}ms)`,
               }
             }
-          } catch {}
+          } catch (scanErr) {
+            logger.debug('[dsh-moa:testGate] candidate script read error:', scanErr?.message || scanErr)
+          }
         }
       }
 
@@ -207,6 +228,18 @@ export async function runCandidateTestGate({
         try {
           const pkgObj = JSON.parse(fsSync.readFileSync(candPkgFile, 'utf8'))
           const scriptsContent = Object.values(pkgObj.scripts || {}).join('\n')
+          if (COMPUTED_SHELL_EVASION.test(scriptsContent)) {
+            const durationMs = Date.now() - startTime
+            return {
+              candidateIndex,
+              passed: false,
+              exitCode: 1,
+              durationMs,
+              command: resolvedCmd,
+              output: 'Access denied: package.json test script contains obfuscated or computed command execution',
+              summary: `FAIL (code 1, ${durationMs}ms)`,
+            }
+          }
           const leaked = scanPathTokensForLeak(scriptsContent, allowedRoots, executionDir)
           if (leaked) {
             const durationMs = Date.now() - startTime
@@ -220,7 +253,9 @@ export async function runCandidateTestGate({
               summary: `FAIL (code 1, ${durationMs}ms)`,
             }
           }
-        } catch {}
+        } catch (pkgErr) {
+          logger.debug('[dsh-moa:testGate] candidate package.json read error:', pkgErr?.message || pkgErr)
+        }
       }
 
       // Setup isolated HOME & node roots
@@ -240,6 +275,8 @@ export async function runCandidateTestGate({
         ...(candidateDir && candidateDir !== executionDir ? [candidateDir] : []),
         nodeRoot,
         nodeBinDir,
+        ...(process.env.NVM_DIR ? [process.env.NVM_DIR] : []),
+        ...(nodeRoot.includes("/.nvm/") ? [path.resolve(nodeRoot, "../..")] : []),
         ...(process.platform === 'win32'
           ? [process.env.SYSTEMROOT || 'C:\\Windows']
           : ['/usr', '/lib', '/lib64', '/etc']),
@@ -251,19 +288,40 @@ export async function runCandidateTestGate({
 const cp = require('node:child_process');
 const path = require('node:path');
 const allowed = ${JSON.stringify(allowedReads)};
-function checkPath(p) {
+const COMPUTED_SHELL_EVASION = /(?:base64\\s+(?:-d|--decode|-D)|\\beval\\s+["\']?\\$|\\bxxd\\s+-r|\\bprintf\\s+[^|\\n]+\\|\\s*(?:ba|z|da)?sh|\\bopenssl\\s+enc\\s+-d)/i;
+const UNIX_ROOT_PREFIX = /^\\/(?:home|root|etc|var|tmp|opt|mnt|srv|media|proc|sys|dev|usr|bin|lib|lib64|run\\/(?:user|systemd|lock|credentials|secrets|udev|initramfs|mount|shm|dbus|sshd|motd)|sbin|boot|Users\\/(?:[a-zA-Z0-9_\\-.]+)|Applications|Library|System|Volumes|private)(?:\\/|$)/;
+function checkSinglePath(p) {
   if (!p || typeof p !== 'string') return true;
   if (/^\\/(usr\\/(bin|lib|include)|bin|lib|lib64|etc|dev)(\\/|$)/.test(p) && !/\\.(txt|json|env|npmrc|key|ssh|md)/i.test(p)) return true;
+  const isAbs = path.isAbsolute(p);
+  const isUp = p.startsWith('..');
+  if (!isAbs && !isUp) return true;
+  if (isAbs && process.platform !== 'win32' && !UNIX_ROOT_PREFIX.test(p)) return true;
   const res = path.resolve(process.cwd(), p);
   return allowed.some(root => root && (res === root || res.startsWith(root + path.sep)));
 }
+function scanStringForPaths(str) {
+  if (!str || typeof str !== 'string') return true;
+  if (!checkSinglePath(str)) return false;
+  const matches = str.match(/(?:[a-zA-Z]:[\\\\/][^\\s"'<>]+|(?<![\\w.@/\\\\])\\/(?:[a-zA-Z0-9_\\-.]+\\/)*[a-zA-Z0-9_\\-.]+|(?<![\\w.@/\\\\])\\.\\.[\\\\/][^\\s"'<>]*)/g) || [];
+  for (const m of matches) {
+    if (!checkSinglePath(m)) return false;
+  }
+  return true;
+}
 function guardArgs(cmd, args) {
-  if (cmd && typeof cmd === 'string' && !checkPath(cmd)) {
-    throw new Error('ERR_ACCESS_DENIED: child process binary outside sandbox: ' + cmd);
+  const full = [cmd, ...(Array.isArray(args) ? args : [])].join(' ');
+  if (COMPUTED_SHELL_EVASION.test(full)) {
+    throw new Error('ERR_ACCESS_DENIED: child process computed execution pattern blocked: ' + full);
+  }
+  if (cmd && !scanStringForPaths(String(cmd))) {
+    throw new Error('ERR_ACCESS_DENIED: child process command outside sandbox: ' + cmd);
   }
   if (Array.isArray(args)) {
     for (const a of args) {
-      if (!checkPath(a)) throw new Error('ERR_ACCESS_DENIED: child process argument outside sandbox: ' + a);
+      if (a && !scanStringForPaths(String(a))) {
+        throw new Error('ERR_ACCESS_DENIED: child process argument outside sandbox: ' + a);
+      }
     }
   }
 }
@@ -297,6 +355,20 @@ cp.execSync = function(cmd, opts) {
   guardArgs(cmd, [cmd]);
   return origExecSync.apply(this, arguments);
 };
+const fsMod = require('node:fs');
+function guardFs(p, isWrite) {
+  if (!p || typeof p !== 'string') return;
+  const isAbs = path.isAbsolute(p);
+  const isUp = p.startsWith('..');
+  if (!isAbs && !isUp) return;
+  const resolved = path.resolve(process.cwd(), p);
+  const checkRoots = isWrite ? [process.cwd(), process.env.HOME].filter(Boolean) : allowed;
+  const ok = checkRoots.some(r => r && (resolved === r || resolved.startsWith(r + path.sep)));
+  if (!ok) throw new Error('ERR_ACCESS_DENIED: fs access outside sandbox: ' + p);
+}
+const origRF = fsMod.readFileSync; fsMod.readFileSync = function(p) { guardFs(p, false); return origRF.apply(this, arguments); };
+const origWF = fsMod.writeFileSync; fsMod.writeFileSync = function(p) { guardFs(p, true); return origWF.apply(this, arguments); };
+const origAF = fsMod.appendFileSync; fsMod.appendFileSync = function(p) { guardFs(p, true); return origAF.apply(this, arguments); };
 `
       fsSync.writeFileSync(fenceFile, fenceCode, 'utf8')
 

package/lib/routes.js

@@ -37,10 +37,7 @@ ctx.effect(() => {
       kind: 'exact',
       path: '/dsh-moa/status',
       handler: (req, res) => {
-        if (req.method !== 'GET') {
-          writeJson(res, 405, { ok: false, error: 'GET required' })
-          return
-        }
+        if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET required' })
         try {
           const cfg = live()
           writeJson(res, 200, {
@@ -49,9 +46,7 @@ ctx.effect(() => {
             defaultPreset: cfg.default_preset || 'default',
             presetsCount: (cfg.presets || []).length,
           })
-        } catch (err) {
-          writeJson(res, 500, { ok: false, error: err?.message || String(err) })
-        }
+        } catch (err) { writeJson(res, 500, { ok: false, error: err?.message || String(err) }) }
       },
     })
   }, 'dsh-moa: status route')
@@ -62,10 +57,7 @@ ctx.effect(() => {
       kind: 'exact',
       path: '/dsh-moa/models',
       handler: async (req, res) => {
-        if (req.method !== 'GET') {
-          writeJson(res, 405, { ok: false, error: 'GET required' })
-          return
-        }
+        if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET required' })
         if (_modelsCache.models.length > 0 && Date.now() - _modelsCache.timestamp < MODELS_CACHE_TTL) {
           writeJson(res, 200, { ok: true, models: _modelsCache.models, cached: true })
           return
@@ -201,21 +193,21 @@ ctx.effect(() => {
             }
 
             // Persist via saveConfig (in-memory and DSH profile settings)
+            let persistResult
             if (typeof saveConfig === 'function') {
-              try { await saveConfig(validated) }
+              try { persistResult = await saveConfig(validated) }
               catch (perr) { return writeJson(res, 500, { ok: false, error: 'Settings persistence failed: ' + (perr?.message || String(perr)) }) }
             }
 
             const unwrapped = typeof plainConfig === 'function' ? plainConfig(validated) : validated
             writeJson(res, 200, {
               ok: true,
+              persisted: persistResult?.persisted ?? false,
               enabled: unwrapped.enabled !== false,
               defaultPreset: unwrapped.default_preset,
               presets: unwrapped.presets,
             })
-          } catch (err) {
-            writeJson(res, 400, { ok: false, error: err?.message || String(err) })
-          }
+          } catch (err) { writeJson(res, 400, { ok: false, error: err?.message || String(err) }) }
           return
         }
 
@@ -230,19 +222,14 @@ ctx.effect(() => {
       kind: 'exact',
       path: '/dsh-moa/history',
       handler: async (req, res) => {
-        if (req.method !== 'GET') {
-          writeJson(res, 405, { ok: false, error: 'GET required' })
-          return
-        }
+        if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET required' })
         try {
           const u = new URL(req.url, 'http://localhost')
           const limit = Math.max(1, Math.min(100, parseInt(u.searchParams.get('limit') || '20', 10) || 20))
           const offset = Math.max(0, parseInt(u.searchParams.get('offset') || '0', 10) || 0)
           const data = getMoaHistory(limit, offset)
           writeJson(res, 200, { ok: true, ...data })
-        } catch (err) {
-          writeJson(res, 500, { ok: false, error: err?.message || String(err) })
-        }
+        } catch (err) { writeJson(res, 500, { ok: false, error: err?.message || String(err) }) }
       },
     })
   }, 'dsh-moa: history route')
@@ -253,10 +240,7 @@ ctx.effect(() => {
       kind: 'exact',
       path: '/dsh-moa/leaderboard',
       handler: async (req, res) => {
-        if (req.method !== 'GET') {
-          writeJson(res, 405, { ok: false, error: 'GET required' })
-          return
-        }
+        if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET required' })
         try {
           const url = new URL(req.url || '', 'http://127.0.0.1')
           const preset = url.searchParams.get('preset') || null
@@ -274,9 +258,7 @@ ctx.effect(() => {
 
           const data = getMoaLeaderboard(undefined, { preset })
           writeJson(res, 200, { ok: true, ...data })
-        } catch (err) {
-          writeJson(res, 500, { ok: false, error: err?.message || String(err) })
-        }
+        } catch (err) { writeJson(res, 500, { ok: false, error: err?.message || String(err) }) }
       },
     })
   }, 'dsh-moa: leaderboard route')
@@ -287,10 +269,7 @@ ctx.effect(() => {
       kind: 'exact',
       path: '/dsh-moa/promote',
       handler: async (req, res) => {
-        if (req.method !== 'POST') {
-          writeJson(res, 405, { ok: false, error: 'POST required' })
-          return
-        }
+        if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST required' })
         if (!isSafeWriteRequest(req)) {
           writeJson(res, 403, { ok: false, error: 'Forbidden: cross-site request rejected' })
           return
@@ -303,26 +282,35 @@ ctx.effect(() => {
             writeJson(res, 400, { ok: false, error: 'Valid candidateIndex required (>= 1)' })
             return
           }
-          const cwd = body?.cwd || process.cwd()
           const runId = body?.runId
+          let recordedRun = null
           if (runId) {
-            const recordedRun = getMoaRunById(runId)
-            if (recordedRun && body?.cwd && path.resolve(body.cwd) !== path.resolve(recordedRun.cwd)) {
-              writeJson(res, 403, { ok: false, error: 'Forbidden: cwd does not match recorded run cwd' })
+            recordedRun = getMoaRunById(runId)
+            if (!recordedRun) {
+              writeJson(res, 404, { ok: false, error: `Run '${runId}' not found` })
+              return
+            }
+          } else {
+            recordedRun = getMoaHistory(1, 0)?.runs?.[0] || null
+            if (!recordedRun) {
+              writeJson(res, 400, { ok: false, error: 'No recorded MoA run found' })
               return
             }
           }
-          const promotedFiles = await promoteCandidateWorkspace(cwd, candidateIndex, {
-            runId,
+          if (body?.cwd && path.resolve(body.cwd) !== path.resolve(recordedRun.cwd)) {
+            writeJson(res, 403, { ok: false, error: 'Forbidden: cwd does not match recorded run cwd' })
+            return
+          }
+          const effectiveCwd = recordedRun.cwd
+          const promotedFiles = await promoteCandidateWorkspace(effectiveCwd, candidateIndex, {
+            runId: recordedRun.id,
             keepMoa: true,
             port: ctx.webServer?.port,
             timeMachineEngine: timeMachineEngine || ctx.reflect?.get?.('timeMachineEngine', false),
             force: Boolean(body?.force),
           })
           writeJson(res, 200, { ok: true, candidateIndex, promotedFiles, checkpoint: promotedFiles?.checkpoint || null })
-        } catch (err) {
-          writeJson(res, 500, { ok: false, error: err?.message || String(err) })
-        }
+        } catch (err) { writeJson(res, 500, { ok: false, error: err?.message || String(err) }) }
       },
     })
   }, 'dsh-moa: promote candidate route')
@@ -333,10 +321,7 @@ ctx.effect(() => {
       kind: 'exact',
       path: '/dsh-moa/diff',
       handler: async (req, res) => {
-        if (req.method !== 'GET') {
-          writeJson(res, 405, { ok: false, error: 'GET required' })
-          return
-        }
+        if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET required' })
         try {
           const u = new URL(req.url, 'http://localhost')
           const rawRunId = u.searchParams.get('runId')
@@ -349,14 +334,18 @@ ctx.effect(() => {
               return
             }
           } else {
-            run = getMoaHistory(1, 0).runs[0] || null
+            run = getMoaHistory(1, 0)?.runs?.[0] || null
+            if (!run) {
+              writeJson(res, 404, { ok: false, error: 'No recorded MoA run found' })
+              return
+            }
           }
-          if (run && queryCwd && path.resolve(queryCwd) !== path.resolve(run.cwd)) {
+          if (queryCwd && path.resolve(queryCwd) !== path.resolve(run.cwd)) {
             writeJson(res, 403, { ok: false, error: 'Forbidden: cwd does not match recorded run cwd' })
             return
           }
-          const runId = run?.id
-          const cwd = run?.cwd || queryCwd || process.cwd()
+          const runId = run.id
+          const cwd = run.cwd
           const sanitizeTarget = (val, def) => {
             const clean = String(val || '').trim().replace(/[^a-zA-Z0-9_-]/g, '')
             return clean || def
@@ -393,24 +382,18 @@ ctx.effect(() => {
             toSize: toItem?.size || 0,
             diff,
           })
-        } catch (err) {
-          writeJson(res, 500, { ok: false, error: err?.message || String(err) })
-        }
+        } catch (err) { writeJson(res, 500, { ok: false, error: err?.message || String(err) }) }
       },
     })
   }, 'dsh-moa: candidate diff route')
 
-
   // Route: /dsh-moa/history/export
   ctx.effect(() => {
     return ctx.webServer.register({
       kind: 'exact',
       path: '/dsh-moa/history/export',
       handler: async (req, res) => {
-        if (req.method !== 'GET') {
-          writeJson(res, 405, { ok: false, error: 'GET required' })
-          return
-        }
+        if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET required' })
         try {
           const url = new URL(req.url || '', 'http://127.0.0.1')
           const preset = url.searchParams.get('preset') || null
@@ -423,9 +406,7 @@ ctx.effect(() => {
             'Content-Disposition': `attachment; filename="moa-history.${isCsv ? 'csv' : 'json'}"`,
           })
           res.end(data)
-        } catch (err) {
-          writeJson(res, 500, { ok: false, error: err?.message || String(err) })
-        }
+        } catch (err) { writeJson(res, 500, { ok: false, error: err?.message || String(err) }) }
       },
     })
   }, 'dsh-moa: history export route')
@@ -436,10 +417,7 @@ ctx.effect(() => {
       kind: 'prefix',
       path: '/dsh-moa/runs/',
       handler: (req, res) => {
-        if (req.method !== 'GET') {
-          writeJson(res, 405, { ok: false, error: 'GET required' })
-          return
-        }
+        if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET required' })
         const urlPath = req.url.split('?')[0]
         const parts = urlPath.split('/').filter(Boolean)
         const runId = parts[2] || ''
@@ -484,10 +462,7 @@ ctx.effect(() => {
       kind: 'exact',
       path: '/dsh-moa/route-preset',
       handler: async (req, res) => {
-        if (req.method !== 'POST') {
-          writeJson(res, 405, { ok: false, error: 'POST required' })
-          return
-        }
+        if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST required' })
         if (!isSafeWriteRequest(req)) {
           writeJson(res, 403, { ok: false, error: 'Forbidden: cross-site request rejected' })
           return
@@ -513,9 +488,7 @@ ctx.effect(() => {
             enabled: cfg.enabled !== false,
           })
           writeJson(res, 200, { ok: true, ...result })
-        } catch (err) {
-          writeJson(res, 500, { ok: false, error: err?.message || String(err) })
-        }
+        } catch (err) { writeJson(res, 500, { ok: false, error: err?.message || String(err) }) }
       },
     })
   }, 'dsh-moa: route preset endpoint')
@@ -529,10 +502,7 @@ ctx.effect(() => {
       kind: 'exact',
       path: '/dsh-moa/run',
       handler: async (req, res) => {
-        if (req.method !== 'POST') {
-          writeJson(res, 405, { ok: false, error: 'POST required' })
-          return
-        }
+        if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST required' })
         if (!isSafeWriteRequest(req)) {
           writeJson(res, 403, { ok: false, error: 'Forbidden: cross-site request rejected' })
           return
@@ -584,9 +554,7 @@ ctx.effect(() => {
           }
 
           writeJson(res, 200, { ok: true, ...result })
-        } catch (err) {
-          writeJson(res, 500, { ok: false, error: err?.message || String(err) })
-        }
+        } catch (err) { writeJson(res, 500, { ok: false, error: err?.message || String(err) }) }
       },
     })
   }, 'dsh-moa: run pipeline route')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-moa",
-  "version": "0.2.45",
+  "version": "0.2.47",
   "description": "Mixture of Agents (MoA) plugin for DeepSeek Harness with /moa slash command",
   "type": "module",
   "main": "lib/index.js",