@melite/harness-provisioner 0.1.5-pre-alpha → 0.2.2-alpha

package/README.md

@@ -1,8 +1,3 @@
----
-description: The vanilla-DSH provisioner — mounts the Melite estate bundle and renders ready-to-boot profiles into any DSH_HOME.
-kind: package-bundle
----
-
 # @melite/harness-provisioner
 
 The provisioner mounts the Melite estate into a vanilla DSH installation and
@@ -31,19 +26,21 @@ Declared exports: `.` (the workspace-linked bundle row) and `./package.json`.
 ```sh
 node packages/harness/provisioner/bin/infer-provision.mjs all
 node packages/harness/provisioner/bin/infer-provision.mjs profile melite-test
-node packages/harness/provisioner/bin/infer-provision.mjs profile headless --dsh-home /tmp/melite-dsh
+node packages/harness/provisioner/bin/infer-provision.mjs profile estate --dsh-home /tmp/melite-dsh
 ```
 
-`all` renders `inference`, `headless`, `estate`, and `melite-test`, then runs
-pnpm in each rendered profile. The output is machine-local state; the source
-of truth is this package and the workspace.
+`all` renders `melite-test` and `estate`, then runs pnpm in each rendered
+profile. The output is machine-local state; the source of truth is this
+package and the workspace.
 
 ## Interfaces
 
-- `inference` and `melite-test` mount the web app and the browser card UI.
-- `headless` mounts the DSH headless app. `MELITE_HEADLESS=1` selects the
-  delegated run interface.
-- `estate` mounts the SDK app and the headless tool interface.
+- `melite-test` mounts the web app and the browser card UI.
+- `estate` mounts the SDK app as a job-server lane.
+- Headless one-shot runs are DSH's own surface: `dsh headless "task brief"`
+  rides DSH's shipped `headless` profile. Melite renders no parallel headless
+  mount; the run doors (`melite_flow` / `run_status`) seat from the home's
+  persisted `/melite-runs` record in every profile.
 
 The tool transport is in-process through the mounted estate row. Do not add a
 `MELITE_GATEWAY` setting or a second HTTP service.
@@ -61,7 +58,7 @@ profile is not a substitute for reading that reference.
 ## Verification
 
 ```sh
-pnpm --dir packages/harness/provisioner exec infer-provision profile headless --dsh-home /tmp/melite-dsh
+pnpm --dir packages/harness/provisioner exec infer-provision profile estate --dsh-home /tmp/melite-dsh
 pnpm run test
 pnpm run lint
 ```
@@ -92,6 +89,6 @@ Independent — no conversation state.
 
 - **Rendered profiles are machine-local state** — they are not a source of
   truth; re-render after manifest or workspace changes.
-- **Headless selection is render-time** — `MELITE_HEADLESS` picks the
-  delegated run interface per profile; there is no per-request interface
-  switch.
+- **There is no melite headless profile** — HEADLESS IS DSH'S
+  (`dsh headless "task"`); `profile headless` refuses loud, and run-door
+  seating follows the home's `/melite-runs` record, not a render flag.

package/bin/infer-provision.mjs

@@ -4,7 +4,7 @@
  *
  * The bundle patch (cordis.patch.yml) covers the ROWS; this bin covers
  * the PROFILES: renders ready-to-boot profile dirs (melite-test /
- * headless / estate) and installs their link deps. Every render
+ * estate) and installs their link deps. Every render
  * stamps render-provenance.json (F5: who/what/when/flags) and holds
  * the profile's render lock across render+install (F6).
  * Self-locating — every path derives from this file's own location
@@ -32,13 +32,14 @@
  * brain — plus any operator rows spliced verbatim by --profile-rows
  * (llm provider rows ride the profile layer the same way the web
  * profile's own patch carries them; the file is never re-serialized).
- * The template pins: our bundle + the dsh web base for 'melite-test',
- * the plain headless base for 'headless'.
+ * The template pins: our bundle + the dsh web base for 'melite-test'.
+ * There is no melite headless profile: HEADLESS IS DSH'S (`dsh headless`,
+ * its own shipped `headless` profile) — melite renders no parallel mount.
  */
 
 import { execSync } from 'node:child_process'
 import { createHash } from 'node:crypto'
-import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from 'node:fs'
+import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from 'node:fs'
 import { dirname, join, resolve } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import process from 'node:process'
@@ -59,6 +60,13 @@ const ESTATE_AGENT_ROUTE = flag('--estate-agent-route', '')
 const ESTATE_STATE_ROOT = flag('--estate-state-root', '')
 const PROFILE_ROWS = flag('--profile-rows', '')
 
+
+// files IT rendered. A package.json with no provenance stamp naming
+// this renderer (a hand-composed profile, another tool's output)
+
+// original gone. See the guard at the package.json write.
+const FORCE_RENDER = argv.includes('--force-render')
+
 const log = (...a) => console.log(...a)
 const die = (msg) => { console.error('infer-provision: ' + msg); process.exit(1) }
 
@@ -200,24 +208,13 @@ const PROFILE_BASES = {
   'melite-test': ['@deepseek-ai/dsh-base', '@deepseek-ai/dsh-web-app', '@melite/harness-provisioner',
     '@melite/harness-tools', '@melite-plugin/dsh-estate', '@melite/card-base', '@melite/three-client',
     '@melite-plugin/dsh-card-view', '@melite-plugin/dsh-card-deck', '@melite-plugin/dsh-gallery',
-    '@melite/video-h3-timeline', '@melite/motion-motion'],
-  // headless = the agent server: one-shot task runner + the tools
-  // plane (harness-tools self-registers its melite-tools row; the
-  // renderer disables the web-plane doors row in this mount).
-  // dsh-estate rides here too: a headless task that composes media
-  // reaches the same runs/queue/drafts seats through melite_flow —
-  // without the bundle the tool answers ABSENCE (the estate-drive
-  
-  // unpinned queue seat refuses loud by design).
-  headless: ['@deepseek-ai/dsh-base', '@deepseek-ai/dsh-headless', '@melite/harness-provisioner',
-    '@melite/harness-tools', '@melite-plugin/dsh-estate'],
+    '@melite/video-h3-timeline', '@melite/motion-motion', '@melite/image-input-prep'],
   // estate = the job server: the SDK JSON-RPC base (estate-drive
   
   // in-process — no second app, no HTTP). dsh-estate bundles the
   // runs/queue/drafts seats — without it melite_flow answers
   // ABSENCE ("no seat of that family is mounted on this lane"),
   
-  // tools row's HEADLESS interface by its self-registration id.
   estate: ['@deepseek-ai/dsh-base', '@deepseek-ai/dsh-sdk-app', '@melite/harness-provisioner',
     '@melite/harness-tools', '@melite-plugin/dsh-estate'],
 }
@@ -268,7 +265,7 @@ function renderProfile(name) {  // In-box bundles (@deepseek-ai/*) resolve from
   // from a registry - only OUR link goes in dependencies. Mirrors what
   // `dsh plugin` itself initializes (PROFILE_TEMPLATES + reconcile).
   
-  // old `|| PROFILE_BASES.headless` fallback turned a typo into a
+  // old default-to-first-base fallback turned a typo into a
   // bootable-looking directory with the wrong rows and exit 0.
   if (!(name in PROFILE_BASES)) {
     console.error(`infer-provision: unknown profile '${name}' — known: ${Object.keys(PROFILE_BASES).join(', ')}`)
@@ -283,7 +280,7 @@ function renderProfile(name) {  // In-box bundles (@deepseek-ai/*) resolve from
   // deps — every plugin package the bundle rows name must become a
   // DIRECT link: dep here. The provisioner's manifest declares them
   // as workspace:* specs; a link:-only scan dropped them, so the
-  // headless/estate profiles mounted @melite/harness-tools as a
+  // server profile mounted @melite/harness-tools as a
   // bundle row with NO installed package — the tool lane could not
   // load (ledger li-headless-profile-deps). workspace specs resolve
   // by scanning this repository's own pnpm workspace globs
@@ -327,6 +324,24 @@ function renderProfile(name) {  // In-box bundles (@deepseek-ai/*) resolve from
   const pkgPath = join(dst, 'package.json')
   let pkg = { name: 'dsh-profile-' + name, private: true, dependencies: {} }
   if (existsSync(pkgPath)) {
+    // F1 refuse-or-backup: without a stamp naming THIS renderer the
+    // render dies loud; --force-render backs the file up and proceeds.
+    // A file with our own stamp re-renders freely — the no-drift law
+    // (the renderer owns its output wholesale) is unchanged.
+    if (!FORCE_RENDER) {
+      let mine = false
+      try {
+        const prov = JSON.parse(readFileSync(join(dst, 'render-provenance.json'), 'utf8'))
+        mine = prov !== null && typeof prov === 'object' && prov.renderer === 'infer-provision'
+      } catch { /* no stamp, or unparseable: not provably ours */ }
+      if (!mine) {
+        die('refusing to overwrite ' + pkgPath + ' — no render-provenance.json names this renderer '
+          + '(a hand-composed or foreign file). Move it aside, or pass --force-render to back it up '
+          + 'as package.json.prerender.bak and re-render')
+      }
+    } else {
+      copyFileSync(pkgPath, pkgPath + '.prerender.bak')
+    }
     try { pkg = JSON.parse(readFileSync(pkgPath, 'utf8')) } catch { /* re-render */ }
   }
   pkg.name = pkg.name || 'dsh-profile-' + name
@@ -359,14 +374,14 @@ function renderProfile(name) {  // In-box bundles (@deepseek-ai/*) resolve from
   pkg.dsh = { profile: { bundles: [...new Set(bundles)] } }
   writeFileAtomic(join(dst, 'package.json'), JSON.stringify(pkg, null, 2) + String.fromCharCode(10))
   // The cordis.yml USER layer stays EMPTY — the bundle patch owns every
-  // melite row (no drift). NON-web mounts (headless/SDK) get the
+  // melite row (no drift). NON-web mounts (SDK) get the
   // web-surface rows mechanically DISABLED in the profile patch (by the
   
   // exists to activate them. The bundle owns the rows; the renderer
   // owns the per-app mount shape and the seat pins below.
   const webMount = bundles.includes('@deepseek-ai/dsh-web-app')
   // melite-tools-doors is web-profiles-only by its own contract (the
-  // ✦ doors need webServer+llm — absent in sdk/headless mounts); the
+  // ✦ doors need webServer+llm — absent in sdk mounts); the
   // renderer disables it with the other web rows in non-web mounts.
   const webRows = ['melite-tools-doors',
                    'infer-card-view', 'ray-card-deck', 'infer-gallery']
@@ -376,16 +391,33 @@ function renderProfile(name) {  // In-box bundles (@deepseek-ai/*) resolve from
   // render's own repo root), so the runs/drafts seats never boot
   // unpinned (they refuse loud by design). agentRoute names the agent
   // brain (provider/model); absent, the estate logs the engine unseated
-  // — the honest state, never a silent default.
+  // — the honest state, never a silent default. acquireStallTimeoutMs
+  
+  // the lane rides a pinned 10s, never the library default by accident.
+  
+  // downloads-stream audit): the lane is the long-lived process that
+  // owns fetch lifetimes — its durable claim ticker claims requested
+  // rows and stamps the claimer heartbeat, so a task press's
+  // wanted download survives its own session dying. A non-web mount
+  // (estate job server) is short-lived: a claimer in
+  // it would orphan every fetch it died mid-flight, so its presses
+  // take their own wire, exactly as before.
   const estateRow = bundles.includes('@melite-plugin/dsh-estate')
     ? '# ESTATE SEAT PIN — the estate row config owns every seat:\n'
       + '# repoRoot pins the runs/drafts seats (unpinned boots refuse loud);\n'
       + '# stateRoot overrides it (J12: walls render hermetic roots by\n'
       + '# config — stateRoot wins over repoRoot in the queue seat).\n'
       + '# agentRoute names the agent brain (absent = unseated, logged loud).\n'
+      + '# acquireStallTimeoutMs: the deliberate stall budget (audit F7).\n'
+      + (webMount
+        ? '# durableDownloads: the lane claims requested rows (the lifetime\n'
+          + '# finding) — long-lived web mounts only, never a task process.\n'
+        : '')
       + '- id: melite-estate\n'
       + '  config:\n'
       + '    repoRoot: ' + JSON.stringify(resolve(PROVISIONER, '../../..')) + '\n'
+      + '    acquireStallTimeoutMs: 10000\n'
+      + (webMount ? '    durableDownloads: true\n' : '')
       + (ESTATE_STATE_ROOT
         ? '    stateRoot: ' + JSON.stringify(ESTATE_STATE_ROOT) + '\n'
         : '')
@@ -422,23 +454,7 @@ function renderProfile(name) {  // In-box bundles (@deepseek-ai/*) resolve from
         + '# No webServer service in this mount: the four web-surface rows\n'
         + '# are disabled so activation cannot pend forever.\n'
         + webRows.map(id => '- id: ' + id + '\n  disabled: true\n').join('')
-        + estateRow + operatorRows
-        // DELEGATED-OPERATOR MOUNTS (estate | headless): this mount
-        // RUNS jobs — the tools row selects the HEADLESS interface
-        // (the melite_flow + run_status run doors). Pinned in the
-        // render (not ambient env) because the interface is profile
-        // state: browser mounts compose, the job server executes.
-        // The 'headless' agent server rides the same pin — its base
-        // list promises melite_flow ("a headless task that composes
-        // media reaches the same runs/queue/drafts seats"), and the
-        
-        // compose-only mount: benches composed and validated, every
-        // execution refused at the absent verb. Every other mount
-        // keeps the browser default.
-        + (name === 'estate' || name === 'headless'
-          ? '# HEADLESS interface: the delegated operator runs jobs here.\n'
-            + '- id: melite-tools\n  config:\n    headless: true\n'
-          : ''))
+        + estateRow + operatorRows)
   writeFileAtomic(join(dst, 'cordis.yml'), '# rendered by infer-provision' + '\n' + '[]' + '\n')
   const ws = join(dst, 'pnpm-workspace.yaml')
   if (!existsSync(ws)) writeFileAtomic(ws, 'packages:' + '\n' + '  - node_modules/*' + '\n')
@@ -517,7 +533,7 @@ switch (cmd) {
     // command renders + installs every profile (the gateway health
     // check died with the gateway — there is no second process to
     // probe anymore).
-    for (const name of ['melite-test', 'headless', 'estate']) {
+    for (const name of ['melite-test', 'estate']) {
       renderInstall(name)
     }
     log('boot with:')
@@ -527,13 +543,14 @@ switch (cmd) {
     log('   launch — binary pin, version floor, home, and unit. The shapes below')
     log('   are what the door runs UNDER THE HOOD, never a hand-run shortcut:)')
     log('  dsh --profile melite-test            # the studio GUI + TEST lane (one process, no :33081)')
-    log('  dsh --profile headless "<task>"      # one-shot agent with card tools')
     log('  dsh --profile estate                 # the SDK job server (estate row)')
+    log('  one-shot agents ride DSH itself: dsh headless "<task>" (DSH ships the')
+    log('  headless profile; melite maintains no parallel mount)')
     break
   }
   case 'profile': {
     renderInstall(PROFILE)
-    log('boot with: dsh --profile ' + PROFILE + (PROFILE === 'melite-test' ? '' : ' "<task>"'))
+    log('boot with: dsh --profile ' + PROFILE)
     break
   }
   // the `preset` arm died with installPreset (undefined since the

package/cordis.patch.yml

@@ -4,13 +4,16 @@
 # Installing this bundle into ANY profile (dsh plugin --profile <name>
 # add <repo>/packages/harness/dsh/provisioner) mounts:
 #
-#   infer-tools          the tool registry, TWO interfaces (profile
-#                        config / MELITE_HEADLESS selects): BASE = discovery
-#                        (melite_discover, melite_load), the bench
-#                        (melite_construct), management (comfy_manage),
-#                        craft (skill_index, skill_read), audit
-#                        (ledger_tail); HEADLESS adds the run doors
-#                        melite_flow / run_status (queue-native).
+#   infer-tools          the tool registry, ONE interface: BASE =
+#                        discovery (melite_discover, melite_load), the
+#                        bench (melite_construct), management
+#                        (comfy_manage), craft (skill_index,
+#                        skill_read), audit (ledger_tail). The run
+#                        doors melite_flow / run_status seat from the
+#                        home's persisted /melite-runs record — there
+#                        is no config or env selector (HEADLESS IS
+#                        DSH'S: `dsh headless "task"` is DSH's own
+#                        shipped profile).
 #                        enhance_prompt is AD HOC (MELITE_ADHOC), never base.
 #   infer-card-view-*    editable action cards rendered in the
 #                        conversation (host row serves the editor bundle
@@ -47,8 +50,9 @@
 # melite_load → skill_read), never a pre-loaded catalog. The pin
 # silences the HOST layer only: a preset that genuinely wants local
 # skill discovery still mounts its OWN preset-layer row. Without this
-# pin the headless profile auto-injects (only dsh-web-app disables the
-# host row, and headless does not bundle it). The row below is an
+# pin the agent-server profiles auto-inject (only dsh-web-app disables
+# the host row, and the server profiles do not bundle it). The row
+# below is an
 # OVERRIDE (column-0 `- id:`, no `insert:`): it patches the dsh-base
 # row and mounts nothing.
 

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@melite/harness-provisioner",
-  "version": "0.1.5-pre-alpha",
-  "license": "SSPL-1.0",
-  "description": "Vanilla-DSH provisioner for the inference.cpp media stack: one bundle mounts the estate row (in-process seats, no second process), the tool surface, the card view/deck, media previews, and the runs gallery — and the infer-provision bin renders ready-to-boot profiles (inference / headless / estate / melite-test) into any DSH_HOME.",
+  "version": "0.2.2-alpha",
+  "license": "AGPL-3.0-or-later",
+  "description": "The vanilla-DSH provisioner — mounts the Melite estate bundle and renders ready-to-boot profiles into any DSH_HOME.",
   "type": "module",
   "exports": {
     ".": {
@@ -21,36 +21,45 @@
   "bin": {
     "infer-provision": "./bin/infer-provision.mjs"
   },
-  "devDependencies": {
-    "@types/node": "^22.20.0",
-    "typescript": "^5.9.3"
-  },
   "dependencies": {
-    "@deepseek-ai/dsh-llm-pi-ai": "0.2.0-rc.2",
-    "@melite-plugin/dsh-card-deck": "0.1.5-pre-alpha",
-    "@melite-plugin/dsh-card-view": "0.1.5-pre-alpha",
-    "@melite-plugin/dsh-estate": "0.1.5-pre-alpha",
-    "@melite-plugin/dsh-gallery": "0.1.5-pre-alpha",
-    "@melite/harness-tools": "0.1.5-pre-alpha",
-    "@melite/motion-motion": "0.1.5-pre-alpha",
-    "@melite/3d-img-to-mesh": "0.1.5-pre-alpha",
-    "@melite/video-h3-timeline": "0.1.5-pre-alpha"
+    "@deepseek-ai/dsh-llm-pi-ai": "0.2.1-rc.2",
+    "@melite-plugin/dsh-card-deck": "0.2.2-alpha",
+    "@melite/3d-img-to-mesh": "0.2.2-alpha",
+    "@melite-plugin/dsh-estate": "0.2.2-alpha",
+    "@melite/harness-tools": "0.2.2-alpha",
+    "@melite-plugin/dsh-card-view": "0.2.2-alpha",
+    "@melite-plugin/dsh-gallery": "0.2.2-alpha",
+    "@melite/video-h3-timeline": "0.2.2-alpha",
+    "@melite/motion-motion": "0.2.2-alpha"
   },
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
     }
   },
-  "engines": {
-    "dsh": ">=0.1.1-rc.1"
-  },
   "peerDependencies": {
-    "@deepseek-ai/dsh": ">=0.2.0-rc.1 <0.3.0"
+    "@deepseek-ai/dsh": ">=0.2.1-rc.2 <0.3.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/JayDataEngineer/melite.git",
+    "directory": "packages/harness/provisioner"
   },
+  "keywords": [
+    "melite",
+    "comfyui",
+    "cordis",
+    "agent",
+    "media-generation",
+    "dsh-bundle"
+  ],
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
     "typecheck": "tsc --noEmit"
   },
+  "engines": {
+    "node": ">=22.18.0"
+  },
   "publishConfig": {
     "access": "public"
   }