@melite/harness-provisioner 0.1.5-pre-alpha → 0.2.0-alpha

package/bin/infer-provision.mjs

@@ -38,7 +38,7 @@
 
 import { execSync } from 'node:child_process'
 import { createHash } from 'node:crypto'
-import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from 'node:fs'
+import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from 'node:fs'
 import { dirname, join, resolve } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import process from 'node:process'
@@ -59,6 +59,13 @@ const ESTATE_AGENT_ROUTE = flag('--estate-agent-route', '')
 const ESTATE_STATE_ROOT = flag('--estate-state-root', '')
 const PROFILE_ROWS = flag('--profile-rows', '')
 
+
+// files IT rendered. A package.json with no provenance stamp naming
+// this renderer (a hand-composed profile, another tool's output)
+
+// original gone. See the guard at the package.json write.
+const FORCE_RENDER = argv.includes('--force-render')
+
 const log = (...a) => console.log(...a)
 const die = (msg) => { console.error('infer-provision: ' + msg); process.exit(1) }
 
@@ -200,7 +207,7 @@ const PROFILE_BASES = {
   'melite-test': ['@deepseek-ai/dsh-base', '@deepseek-ai/dsh-web-app', '@melite/harness-provisioner',
     '@melite/harness-tools', '@melite-plugin/dsh-estate', '@melite/card-base', '@melite/three-client',
     '@melite-plugin/dsh-card-view', '@melite-plugin/dsh-card-deck', '@melite-plugin/dsh-gallery',
-    '@melite/video-h3-timeline', '@melite/motion-motion'],
+    '@melite/video-h3-timeline', '@melite/motion-motion', '@melite/image-input-prep'],
   // headless = the agent server: one-shot task runner + the tools
   // plane (harness-tools self-registers its melite-tools row; the
   // renderer disables the web-plane doors row in this mount).
@@ -327,6 +334,24 @@ function renderProfile(name) {  // In-box bundles (@deepseek-ai/*) resolve from
   const pkgPath = join(dst, 'package.json')
   let pkg = { name: 'dsh-profile-' + name, private: true, dependencies: {} }
   if (existsSync(pkgPath)) {
+    // F1 refuse-or-backup: without a stamp naming THIS renderer the
+    // render dies loud; --force-render backs the file up and proceeds.
+    // A file with our own stamp re-renders freely — the no-drift law
+    // (the renderer owns its output wholesale) is unchanged.
+    if (!FORCE_RENDER) {
+      let mine = false
+      try {
+        const prov = JSON.parse(readFileSync(join(dst, 'render-provenance.json'), 'utf8'))
+        mine = prov !== null && typeof prov === 'object' && prov.renderer === 'infer-provision'
+      } catch { /* no stamp, or unparseable: not provably ours */ }
+      if (!mine) {
+        die('refusing to overwrite ' + pkgPath + ' — no render-provenance.json names this renderer '
+          + '(a hand-composed or foreign file). Move it aside, or pass --force-render to back it up '
+          + 'as package.json.prerender.bak and re-render')
+      }
+    } else {
+      copyFileSync(pkgPath, pkgPath + '.prerender.bak')
+    }
     try { pkg = JSON.parse(readFileSync(pkgPath, 'utf8')) } catch { /* re-render */ }
   }
   pkg.name = pkg.name || 'dsh-profile-' + name
@@ -376,16 +401,33 @@ function renderProfile(name) {  // In-box bundles (@deepseek-ai/*) resolve from
   // render's own repo root), so the runs/drafts seats never boot
   // unpinned (they refuse loud by design). agentRoute names the agent
   // brain (provider/model); absent, the estate logs the engine unseated
-  // — the honest state, never a silent default.
+  // — the honest state, never a silent default. acquireStallTimeoutMs
+  
+  // the lane rides a pinned 10s, never the library default by accident.
+  
+  // downloads-stream audit): the lane is the long-lived process that
+  // owns fetch lifetimes — its durable claim ticker claims requested
+  // rows and stamps the claimer heartbeat, so a headless press's
+  // wanted download survives its own session dying. A non-web mount
+  // (headless task, estate job server) is short-lived: a claimer in
+  // it would orphan every fetch it died mid-flight, so its presses
+  // take their own wire, exactly as before.
   const estateRow = bundles.includes('@melite-plugin/dsh-estate')
     ? '# ESTATE SEAT PIN — the estate row config owns every seat:\n'
       + '# repoRoot pins the runs/drafts seats (unpinned boots refuse loud);\n'
       + '# stateRoot overrides it (J12: walls render hermetic roots by\n'
       + '# config — stateRoot wins over repoRoot in the queue seat).\n'
       + '# agentRoute names the agent brain (absent = unseated, logged loud).\n'
+      + '# acquireStallTimeoutMs: the deliberate stall budget (audit F7).\n'
+      + (webMount
+        ? '# durableDownloads: the lane claims requested rows (the lifetime\n'
+          + '# finding) — long-lived web mounts only, never a task process.\n'
+        : '')
       + '- id: melite-estate\n'
       + '  config:\n'
       + '    repoRoot: ' + JSON.stringify(resolve(PROVISIONER, '../../..')) + '\n'
+      + '    acquireStallTimeoutMs: 10000\n'
+      + (webMount ? '    durableDownloads: true\n' : '')
       + (ESTATE_STATE_ROOT
         ? '    stateRoot: ' + JSON.stringify(ESTATE_STATE_ROOT) + '\n'
         : '')

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@melite/harness-provisioner",
-  "version": "0.1.5-pre-alpha",
-  "license": "SSPL-1.0",
+  "version": "0.2.0-alpha",
+  "license": "AGPL-3.0-or-later",
   "description": "Vanilla-DSH provisioner for the inference.cpp media stack: one bundle mounts the estate row (in-process seats, no second process), the tool surface, the card view/deck, media previews, and the runs gallery — and the infer-provision bin renders ready-to-boot profiles (inference / headless / estate / melite-test) into any DSH_HOME.",
   "type": "module",
   "exports": {
@@ -26,26 +26,23 @@
     "typescript": "^5.9.3"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-llm-pi-ai": "0.2.0-rc.2",
-    "@melite-plugin/dsh-card-deck": "0.1.5-pre-alpha",
-    "@melite-plugin/dsh-card-view": "0.1.5-pre-alpha",
-    "@melite-plugin/dsh-estate": "0.1.5-pre-alpha",
-    "@melite-plugin/dsh-gallery": "0.1.5-pre-alpha",
-    "@melite/harness-tools": "0.1.5-pre-alpha",
-    "@melite/motion-motion": "0.1.5-pre-alpha",
-    "@melite/3d-img-to-mesh": "0.1.5-pre-alpha",
-    "@melite/video-h3-timeline": "0.1.5-pre-alpha"
+    "@deepseek-ai/dsh-llm-pi-ai": "0.2.1-rc.2",
+    "@melite-plugin/dsh-gallery": "0.2.0-alpha",
+    "@melite-plugin/dsh-card-deck": "0.2.0-alpha",
+    "@melite/harness-tools": "0.2.0-alpha",
+    "@melite-plugin/dsh-estate": "0.2.0-alpha",
+    "@melite/3d-img-to-mesh": "0.2.0-alpha",
+    "@melite-plugin/dsh-card-view": "0.2.0-alpha",
+    "@melite/motion-motion": "0.2.0-alpha",
+    "@melite/video-h3-timeline": "0.2.0-alpha"
   },
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
     }
   },
-  "engines": {
-    "dsh": ">=0.1.1-rc.1"
-  },
   "peerDependencies": {
-    "@deepseek-ai/dsh": ">=0.2.0-rc.1 <0.3.0"
+    "@deepseek-ai/dsh": ">=0.2.1-rc.2 <0.3.0"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",