@javierfrancoleal/compas 0.0.0-stage → 1.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 J.Franco
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,26 @@
-# Temporary Holding Version
+---
+description: "Compás — the platform optimizer organ: audits Fanal against DSH-derived optimizations, applies only what makes sense."
+kind: "package-bundle"
+---
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# @javierfrancoleal/compas
+
+Created by **J.Franco**.
+
+## Summary
+
+When the model audits or optimizes Fanal for a platform, this skill runs
+the DSH-derived checklist (one brain many skins, electron hardening, PWA
+cache, token gate, batched state, client key silo, bundled runtime) and
+applies ONLY what makes sense for a sovereign agentic orchestration
+layer. It never over-engineers: DSH pieces that do not apply are
+explicitly excluded.
+
+## Use
+
+Ask "compas" before shipping Fanal to any platform. The skill runs the
+checker in the assets and reports `N ok · M to review` with the fixes.
+
+## License
+
+MIT.

package/assets/compas.md

@@ -0,0 +1,43 @@
+# Compás — the platform optimizer organ
+
+Use this skill when Fanal must be audited or optimized for a platform
+(macOS, Windows, Linux, browser, PWA). The rule: optimize LIKE DeepSeek
+Harness, but ONLY what makes sense for a sovereign agentic orchestration
+layer — never over-engineer.
+
+## The method
+
+1. Run the checker shipped in the assets:
+   `sh <assets>/fanal-optimize.sh` inside the Fanal workspace
+   (or `sh tools/fanal-optimize.sh`).
+2. Every ✔ item is fine. Every ⚠ item is a REAL gap to review.
+3. Fix only the ⚠ items that matter for the deployment target.
+4. Never touch the EXCLUDED list (below) just to imitate DSH.
+
+## The checklist (distilled from DeepSeek Harness)
+
+- One brain × many skins (browser, Electron, PWA, panel, wallboard).
+- Electron hardening: single-instance lock, kiosk mode for the kitchen
+  tablet, win/linux targets configured.
+- PWA: manifest + service worker with an offline cache.
+- Token gate for LAN exposure (SUPERVISOR_TOKEN, like DSH's ?token=).
+- Batched state (one /api/state instead of many polls).
+- Client key silo (the API key lives in the client's settings file).
+- Bundled runtime for production installs (DSH ships its own Node —
+  the client host must not need a system Node).
+- Guard gates (check.sh + verify-app) before any artifact ships.
+
+## Intentionally EXCLUDED (DSH pieces that do not apply to Fanal)
+
+- The client plugin ecosystem (window.__ModuleLoader__): Fanal has no
+  third-party UI plugins.
+- The Cordis runtime inside the product: Fanal is a product, not a
+  harness.
+- Chat/GitHub/Feishu sources: Fanal is the silo; the factory lives at
+  Trasunto.
+- Profiles-per-purpose: one silo per install is simpler and sovereign.
+
+## Report format
+
+Always report: `N ok · M to review`, the concrete ⚠ items with the fix,
+and nothing else. Do not propose changes from the EXCLUDED list.

package/assets/fanal-optimize.sh

@@ -0,0 +1,56 @@
+#!/bin/sh
+# fanal-optimize.sh — the COMPÁS audit: Fanal × DSH optimizations, filtered.
+# Compares Fanal against the optimization checklist distilled from DeepSeek
+# Harness, and reports ONLY what makes sense for a sovereign agentic
+# orchestration layer. Never over-engineers: DSH pieces that do not apply
+# (client plugin ecosystem, Cordis runtime inside the product, chat
+# sources) are listed as INTENTIONALLY EXCLUDED, not as warnings.
+set -u
+ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+SV="$ROOT/supervisor"; APP="$ROOT/apps/desktop"
+pass=0; warn=0; ok=0
+
+chk() { # chk <label> <condition-expr>
+  if eval "$2"; then ok=$((ok+1)); echo "  ✔ $1"; else warn=$((warn+1)); echo "  ⚠ $1"; fi
+}
+
+echo "== COMPÁS — Fanal optimization audit (DSH-derived, filtered) =="
+
+echo "— The one brain × many skins (DSH pattern):"
+chk "Electron single-instance lock"        "[ -n \"$(grep -l requestSingleInstanceLock "$APP/main.js" 2>/dev/null)\" ]"
+chk "Electron kiosk mode (kitchen tablet)" "[ -n \"$(grep -l -- '--kiosk' "$APP/main.js" 2>/dev/null)\" ]"
+chk "win/linux electron targets"           "[ -n \"$(grep -l '\"win\"' "$APP/package.json" 2>/dev/null)\" ]"
+chk "PWA manifest + service worker"        "[ -f "$ROOT/ui/manifest.webmanifest" ] && [ -f "$ROOT/ui/sw.js" ]"
+chk "offline cache in sw"                  "[ -n \"$(grep -l caches "$ROOT/ui/sw.js" 2>/dev/null)\" ]"
+
+echo "— Production hardening (DSH token gate pattern):"
+chk "token gate (SUPERVISOR_TOKEN)"        "[ -n \"$(grep -l SUPERVISOR_TOKEN "$SV/server.js" 2>/dev/null)\" ]"
+chk "batched /api/state"                   "[ -n \"$(grep -l 'api/state' "$SV/server.js" 2>/dev/null)\" ]"
+chk "client key silo (settings.json)"      "[ -n \"$(grep -l settings.json "$SV/server.js" 2>/dev/null)\" ]"
+
+echo "— The sovereignty layer (Fanal specifics):"
+chk "sector packs present"                 "[ -f "$ROOT/docs/sector-packs/restaurant.json" ]"
+chk "guard gates (check.sh + verify-app)"  "[ -f "$ROOT/tools/check.sh" ] && [ -f "$ROOT/tools/verify-app.sh" ]"
+chk "routing table + telemetry in server"  "[ -n \"$(grep -l 'const ROUTES' "$SV/server.js" 2>/dev/null)\" ]"
+
+echo "— The installers (mac + windows), ready to build:"
+chk "appId without the old brand"          "[ -n \"$(grep -l 'ca.trasunto.fanal' "$APP/package.json" 2>/dev/null)\" ]"
+chk "win targets nsis + portable"          "[ -n \"$(grep -l 'nsis' "$APP/package.json" 2>/dev/null)\" ]"
+chk "bundled runtime spawn (process.execPath)" "[ -n \"$(grep -l process.execPath "$APP/main.js" 2>/dev/null)\" ]"
+chk "runtime pack renamed (trasunto-runtime)" "[ -d "$ROOT/dist/trasunto-runtime" ]"
+
+echo "— The one warning that matters for client machines:"
+if [ -n "$(grep -l 'require("http")\|createServer' "$SV/server.js" 2>/dev/null)" ]; then
+  echo "  ⚠ The supervisor is a Node script: the CLIENT host needs Node ≥18. DSH ships its own runtime — for production Fanal, bundle a node runtime in the installer (the desktop app already does)."
+  warn=$((warn+1))
+fi
+
+echo ""
+echo "— Intentionally EXCLUDED from Fanal (DSH pieces that do not apply):"
+echo "  · the client plugin ecosystem (ModuleLoader) — Fanal has no third-party UI plugins"
+echo "  · the Cordis runtime inside the product — Fanal is a product, not a harness"
+echo "  · chat/GitHub/Feishu sources — Fanal is the silo, not the factory"
+echo "  · profiles-per-purpose — one silo per install is simpler and sovereign"
+echo ""
+echo "== Result: $ok ok · $warn to review =="
+[ "$warn" -eq 0 ]

package/cordis.patch.yml

@@ -0,0 +1,4 @@
+# @javierfrancoleal/compas — the platform optimizer organ.
+- insert:
+    - id: compas
+      name: '@javierfrancoleal/compas'

package/icon.svg

@@ -0,0 +1,7 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" width="64" height="64">
+  <rect width="64" height="64" rx="14" fill="#7C5CFF"/>
+  <circle cx="32" cy="32" r="16" fill="none" stroke="#ffffff" stroke-width="3"/>
+  <circle cx="32" cy="32" r="2.5" fill="#ffffff"/>
+  <line x1="32" y1="32" x2="43" y2="21" stroke="#ffffff" stroke-width="3" stroke-linecap="round"/>
+  <circle cx="10" cy="12" r="3" fill="#FACC15"/>
+</svg>

package/lib/index.js

@@ -0,0 +1,45 @@
+// @javierfrancoleal/compas — an organ of the J.Franco agentic workflow.
+// Created by J.Franco. Registers the compas skill provider.
+import { readFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import { BUNDLED_SKILL_RANK } from "@deepseek-ai/dsh-skill";
+
+const PROVIDER_NAME = "javierfrancoleal-compas";
+const SKILL_BODY_URL = new URL("../assets/compas.md", import.meta.url);
+const RESOURCE_BASE = { kind: "directory", path: fileURLToPath(new URL("../assets/", import.meta.url)) };
+
+const CANDIDATE = {
+  name: "compas",
+  description: "The platform optimizer organ of the J.Franco agentic workflow: audits Fanal against the optimization checklist distilled from DeepSeek Harness (one brain many skins, token gate, batched state, PWA cache, electron hardening, bundled runtime) and applies ONLY what makes sense for a sovereign agentic orchestration layer — never over-engineers.",
+  invocation: { modelInvocable: true, userInvocable: true },
+  provider: PROVIDER_NAME,
+  source: "bundled",
+  resourceBase: RESOURCE_BASE,
+  rank: BUNDLED_SKILL_RANK,
+  locator: SKILL_BODY_URL,
+};
+
+const provider = {
+  name: PROVIDER_NAME,
+  list: () => Promise.resolve([CANDIDATE]),
+  async get() {
+    return {
+      name: CANDIDATE.name,
+      description: CANDIDATE.description,
+      invocation: CANDIDATE.invocation,
+      provider: CANDIDATE.provider,
+      source: CANDIDATE.source,
+      resourceBase: RESOURCE_BASE,
+      content: await readFile(SKILL_BODY_URL, "utf8"),
+    };
+  },
+};
+
+const name = "compas";
+const inject = ["skills"];
+
+function apply(ctx) {
+  ctx.skills.registerProvider(() => provider);
+}
+
+export { apply, inject, name };

package/locale/ar.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "البوصلة",
+    "description": "تدقق Fanal وفق تحسينات DSH وتطبق ما له معنى فقط."
+  }
+}

package/locale/de.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Kompass",
+    "description": "Prüft Fanal gegen DSH-Optimierungen und wendet nur Sinnvolles an."
+  }
+}

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Compass",
+    "description": "Audits Fanal against DSH-derived optimizations and applies only what makes sense."
+  }
+}

package/locale/es.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Compás",
+    "description": "Audita Fanal contra las optimizaciones derivadas de DSH y aplica solo lo que tiene sentido."
+  }
+}

package/locale/fr.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Compas",
+    "description": "Audite Fanal selon les optimisations issues de DSH et n'applique que ce qui a du sens."
+  }
+}

package/locale/it.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Bussola",
+    "description": "Verifica Fanal rispetto alle ottimizzazioni DSH e applica solo ciò che ha senso."
+  }
+}

package/locale/ja.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "羅針盤",
+    "description": "DSH 由来の最適化で Fanal を監査し、意味のあるものだけ適用します。"
+  }
+}

package/locale/ko.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "나침반",
+    "description": "DSH 기반 최적화로 Fanal을 감사하고 의미 있는 것만 적용합니다."
+  }
+}

package/locale/pt.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Bússola",
+    "description": "Audita Fanal contra as otimizações DSH e aplica apenas o que faz sentido."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "罗盘",
+    "description": "对照 DSH 优化审计 Fanal，只应用有意义的部分。"
+  }
+}

package/package.json

@@ -1,6 +1,54 @@
 {
   "name": "@javierfrancoleal/compas",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.1",
+  "description": "Compás — the platform optimizer organ of the J.Franco agentic workflow: audits Fanal against the optimization checklist distilled from DeepSeek Harness (one brain many skins, token gate, batched state, PWA cache, electron hardening) and applies ONLY what makes sense for a sovereign agentic orchestration layer. Never over-engineers. Created by J.Franco.",
+  "author": "J.Franco",
+  "license": "MIT",
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
+  },
+  "icon": "./icon.svg",
+  "files": [
+    "icon.svg",
+    "locale/*.json",
+    "lib/index.js",
+    "assets",
+    "cordis.patch.yml",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=24",
+    "dsh": ">=0.2.1-rc.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/JavierFrancoLeal/jfranco-agentic-suite.git",
+    "directory": "jfranco-compas"
+  },
+  "keywords": [
+    "deepseek-harness",
+    "agentic-workflow",
+    "optimization",
+    "electron",
+    "pwa",
+    "sovereign"
+  ],
+  "dsh": {
+    "manifestVersion": 1,
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "~4.0.5",
+    "@deepseek-ai/dsh-skill": ">=0.2.1-rc.5"
+  }
+}