@mirrowel/opencode-openshare 0.3.0-dev.13 → 0.3.0-dev.15

package/ci/openshare.js

@@ -21,7 +21,9 @@
 // shareMode ("all" | "manual"; default = TUI presence), debounceMs,
 // completedDelayMs, modelLabel, ttlDays,
 // authLogin, authPassword, spoolDir, urlFile ("none" = off),
-// announceStderr.
+// announceStderr ("all" | "status" | "url" | "off"; status keeps the
+// status/banner lines and never prints the share URL - the public-CI
+// shape; url prints announce lines only).
 //
 // src/config.ts
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
@@ -42,7 +44,7 @@ var DEFAULTS = {
   urlFile: "",
   urlFileFormat: "url",
   configSet: "",
-  announceStderr: true
+  announceStderr: "all"
 };
 var CONFIG_NAME = "openshare.config.json";
 var LOCAL_NAME = "openshare.local.json";
@@ -225,6 +227,22 @@ function saveServerEntry(url, patch, target) {
 function saveServerToken(url, token, target) {
   return saveServerEntry(url, { token }, target);
 }
+function normalizeAnnounce(value, fallback) {
+  if (value === true)
+    return "all";
+  if (value === false)
+    return "off";
+  if (typeof value === "string") {
+    const v = value.trim().toLowerCase();
+    if (v === "all" || v === "status" || v === "url" || v === "off")
+      return v;
+    if (/^(1|true|yes|on)$/.test(v))
+      return "all";
+    if (/^(0|false|no)$/.test(v))
+      return "off";
+  }
+  return fallback;
+}
 function loadConfig(pluginDir, options) {
   const cfg = { ...DEFAULTS };
   const emptyMeansUnset = new Set(["workerUrl", "createToken", "urlFile", "spoolDir"]);
@@ -332,11 +350,12 @@ function loadConfig(pluginDir, options) {
   if (env.OPENSHARE_SPOOL_DIR)
     cfg.spoolDir = env.OPENSHARE_SPOOL_DIR;
   if (env.OPENSHARE_ANNOUNCE_STDERR !== undefined)
-    cfg.announceStderr = !/^(0|false|no|off)$/i.test(env.OPENSHARE_ANNOUNCE_STDERR.trim());
+    cfg.announceStderr = env.OPENSHARE_ANNOUNCE_STDERR;
   if (env.OPENSHARE_SHARE_MODE === "all" || env.OPENSHARE_SHARE_MODE === "manual")
     cfg.shareMode = env.OPENSHARE_SHARE_MODE;
   if (cfg.urlFile.trim().toLowerCase() === URL_FILE_NONE)
     cfg.urlFile = URL_FILE_NONE;
+  cfg.announceStderr = normalizeAnnounce(cfg.announceStderr, "all");
   if (cfg.workerUrl)
     cfg.workerUrl = cfg.workerUrl.trim().replace(/\/+$/, "");
   if (cfg.servers) {
@@ -889,6 +908,12 @@ function createEngine(deps) {
   const mode = resolveShareMode(cfg, deps);
   if (mode === "manual")
     stderrInfoAllowed = false;
+  const wantAnnounce = () => cfg.announceStderr === "all" || cfg.announceStderr === "url";
+  const logStatus = (...a) => {
+    if (cfg.announceStderr !== "all" && cfg.announceStderr !== "status")
+      return;
+    log(...a);
+  };
   if (process.env.OPENSHARE_DEBUG_FILE) {
     try {
       writeFileSync2(process.env.OPENSHARE_DEBUG_FILE, JSON.stringify({
@@ -902,7 +927,7 @@ function createEngine(deps) {
   }
   const server = resolveServer(cfg);
   if (!server || !server.url) {
-    log("disabled: no share server configured (workerUrl or a servers entry)");
+    logStatus("disabled: no share server configured (workerUrl or a servers entry)");
     return {
       mode,
       config: () => cfg,
@@ -912,7 +937,7 @@ function createEngine(deps) {
       }
     };
   }
-  log(`share mode: ${mode} (directory: ${deps.directory ?? "?"} worktree: ${deps.worktree ?? "?"})`);
+  logStatus(`share mode: ${mode} (directory: ${deps.directory ?? "?"} worktree: ${deps.worktree ?? "?"})`);
   const resolveTargets = () => {
     const merged = {};
     const hasServers = !!cfg.servers && Object.keys(cfg.servers).length > 0;
@@ -920,7 +945,7 @@ function createEngine(deps) {
     if (cfg.workerUrl && (!hasServers || envWorker))
       merged[cfg.workerUrl] = { token: cfg.createToken || "", active: true };
     if (cfg.workerUrl && hasServers && !envWorker && !cfg.servers[cfg.workerUrl]) {
-      log(`legacy workerUrl ${cfg.workerUrl} ignored: a servers group is configured - remove one of the two`);
+      logStatus(`legacy workerUrl ${cfg.workerUrl} ignored: a servers group is configured - remove one of the two`);
     }
     if (cfg.servers)
       for (const [u, e] of Object.entries(cfg.servers))
@@ -993,12 +1018,12 @@ function createEngine(deps) {
       if (adoptModel && doc.modelLabel === undefined) {
         doc.modelLabel = wantModel;
         dirty = true;
-        log(`${url}: adopted modelLabel from the server config set`);
+        logStatus(`${url}: adopted modelLabel from the server config set`);
       }
       if (adoptMode && doc.shareMode === undefined) {
         doc.shareMode = wantMode;
         dirty = true;
-        log(`${url}: adopted shareMode from the server config set`);
+        logStatus(`${url}: adopted shareMode from the server config set`);
       }
       if (dirty)
         writeFileSync2(home, JSON.stringify(doc, null, 2) + `
@@ -1043,7 +1068,7 @@ function createEngine(deps) {
         c.credential = b.token;
         c.error = "";
         const savedTo = saveServerToken(url, c.credential);
-        log(`enrolled at ${url} (user ${b.userId} "${b.label}")${savedTo ? " - token saved" : ""}`);
+        logStatus(`enrolled at ${url} (user ${b.userId} "${b.label}")${savedTo ? " - token saved" : ""}`);
         adoptServerSuggestions(url, c.credential);
         return c.credential;
       }
@@ -1190,7 +1215,7 @@ function createEngine(deps) {
         const after = targets.map((t) => t.url);
         const added = after.filter((u) => !before.has(u));
         if (added.length)
-          log(`fan-out set grew: ${added.join(", ")}`);
+          logStatus(`fan-out set grew: ${added.join(", ")}`);
       }
     }
   };
@@ -1368,10 +1393,11 @@ function createEngine(deps) {
   const scheduleBindingWrite = (st) => {
     if (st.metaTimer)
       return;
+    const debounce = Number(process.env.OPENSHARE_BINDING_WRITE_MS) > 0 ? Number(process.env.OPENSHARE_BINDING_WRITE_MS) : 30000;
     st.metaTimer = setTimeout(() => {
       st.metaTimer = null;
       chain = chain.then(() => writeBinding(st)).catch(() => {});
-    }, 30000);
+    }, debounce);
   };
   const h8 = (url) => {
     let h = 5381;
@@ -1538,7 +1564,7 @@ function createEngine(deps) {
       return;
     r.announced = true;
     const url = `${r.url}/s/${r.shareId}`;
-    if (cfg.announceStderr)
+    if (wantAnnounce())
       log(`live: ${url}`);
     if (mode === "all" && cfg.urlFile !== URL_FILE_NONE) {
       const file = cfg.urlFile ? isAbsolute(cfg.urlFile) ? cfg.urlFile : join2(deps.directory ?? process.cwd(), cfg.urlFile) : join2(deps.directory ?? process.cwd(), "openshare.urls.txt");
@@ -1552,7 +1578,7 @@ function createEngine(deps) {
 ` : url + `
 `;
         appendFileSync(file, line);
-        if (cfg.announceStderr && (file !== lastUrlFile || !urlFileAnnounced)) {
+        if (wantAnnounce() && (file !== lastUrlFile || !urlFileAnnounced)) {
           urlFileAnnounced = true;
           lastUrlFile = file;
           log(`url file: ${file}`);
@@ -1604,7 +1630,7 @@ function createEngine(deps) {
         attach.ttlHours = st.opts.ttlHours;
       const sent = wsSend(r, { op: "init", attach });
       if (sent)
-        log(`opts re-synced to ${url.slice(0, 24)}${st.opts?.ttlHours ? ` (ttl ${st.opts.ttlHours}h)` : ""}`);
+        logStatus(`opts re-synced to ${url.slice(0, 24)}${st.opts?.ttlHours ? ` (ttl ${st.opts.ttlHours}h)` : ""}`);
     }
   };
   const deleteAbandoned = (r) => {

package/dist/config.d.ts

@@ -36,9 +36,14 @@ export type ShareConfig = {
      * "json" (one JSON object per line: id, url, status, gated) for CI
      * consumers that want machine-readable lines without parsing URLs. */
     urlFileFormat: "url" | "json";
-    /** false silences the `[openshare] live:` (and `url file:`) stderr
-     * lines. The share itself is unaffected. */
-    announceStderr: boolean;
+    /** Stderr ladder with two independently controllable line classes:
+     * announce lines (`live:`, `url file:`) and status lines (mode banner,
+     * enrollment, adoption notes). "all" (default) prints both; "status"
+     * prints status lines only - the share URL never touches stderr
+     * (public CI logs); "url" prints announce lines only (private runners
+     * scraping the URL); "off" prints neither. Error-class lines ALWAYS
+     * reach stderr. */
+    announceStderr: "all" | "status" | "url" | "off";
     /** Wave 3 redaction: user-supplied regex rules (client-side only)
      * applied beside the built-in detectors on UNGATED shares. */
     redact?: {

package/dist/config.js

@@ -42,7 +42,7 @@ export const DEFAULTS = {
     urlFile: "",
     urlFileFormat: "url",
     configSet: "",
-    announceStderr: true,
+    announceStderr: "all",
 };
 const CONFIG_NAME = "openshare.config.json";
 const LOCAL_NAME = "openshare.local.json";
@@ -331,6 +331,24 @@ export function deleteServerEntry(url, target) {
         return undefined;
     }
 }
+/** Coerce an announceStderr value from any layer (enum string, legacy
+ * boolean, truthy/falsy word) to the 4-position ladder. */
+function normalizeAnnounce(value, fallback) {
+    if (value === true)
+        return "all";
+    if (value === false)
+        return "off";
+    if (typeof value === "string") {
+        const v = value.trim().toLowerCase();
+        if (v === "all" || v === "status" || v === "url" || v === "off")
+            return v;
+        if (/^(1|true|yes|on)$/.test(v))
+            return "all";
+        if (/^(0|false|no)$/.test(v))
+            return "off";
+    }
+    return fallback;
+}
 /** Load the effective config. `options` is the plugin-array options tuple
  * object (env still wins over it). Files MERGE lowest→highest priority
  * (later files override per key); empty strings in credential/path keys
@@ -460,12 +478,17 @@ export function loadConfig(pluginDir, options) {
     if (env.OPENSHARE_SPOOL_DIR)
         cfg.spoolDir = env.OPENSHARE_SPOOL_DIR;
     if (env.OPENSHARE_ANNOUNCE_STDERR !== undefined)
-        cfg.announceStderr = !/^(0|false|no|off)$/i.test(env.OPENSHARE_ANNOUNCE_STDERR.trim());
+        cfg.announceStderr = env.OPENSHARE_ANNOUNCE_STDERR;
     if (env.OPENSHARE_SHARE_MODE === "all" || env.OPENSHARE_SHARE_MODE === "manual")
         cfg.shareMode = env.OPENSHARE_SHARE_MODE;
     // normalize the disable sentinel (case-insensitive from any source)
     if (cfg.urlFile.trim().toLowerCase() === URL_FILE_NONE)
         cfg.urlFile = URL_FILE_NONE;
+    // announceStderr may arrive from ANY layer as the enum string or a
+    // legacy boolean/word (old saved configs carry true/false) - coerce the
+    // merged value once; unknown values fall back to the default ladder
+    // position
+    cfg.announceStderr = normalizeAnnounce(cfg.announceStderr, "all");
     // URL hygiene: a trailing slash on a server url becomes
     // wss://host//api/ws and https://host//s/<id> downstream - strip once,
     // at the source, so every consumer agrees

package/dist/core.js

@@ -61,8 +61,11 @@ const DEFAULT_POLICY = {
 // Stderr policy: in manual mode (TUI present) stderr is for ACTUAL ERRORS
 // only. Informational lines (live:/url file:/mode banner, lifecycle
 // traces) are suppressed because the TUI surfaces the URL itself.
-// All-mode (CI/server-only) keeps its stderr contract (announce lines,
-// silenceable via announceStderr). Error-class lines always reach stderr.
+// All-mode (CI/server-only) keeps its stderr contract, layered by the
+// announceStderr ladder: "all" = announce + status lines, "status" =
+// status lines only (the share URL never touches stderr), "url" =
+// announce lines only, "off" = neither. Error-class lines always reach
+// stderr.
 let stderrInfoAllowed = true;
 const log = (...a) => {
     if (!stderrInfoAllowed)
@@ -185,9 +188,19 @@ export function engineTargetUrls() {
 export function createEngine(deps) {
     let cfg = loadConfig(deps.pluginDir, deps.options);
     const mode = resolveShareMode(cfg, deps);
-    // stderr = errors only when the TUI part exists (the TUI surfaces URLs)
+    // Stderr = errors only when the TUI part exists (the TUI surfaces URLs)
     if (mode === "manual")
         stderrInfoAllowed = false;
+    // The ladder controls two line classes independently: announce lines
+    // (live:, url file:) print at all/url; status lines (mode banner,
+    // enrollment, adoption notes) print at all/status. "status" is the
+    // public-CI shape - the share URL never reaches the log.
+    const wantAnnounce = () => cfg.announceStderr === "all" || cfg.announceStderr === "url";
+    const logStatus = (...a) => {
+        if (cfg.announceStderr !== "all" && cfg.announceStderr !== "status")
+            return;
+        log(...a);
+    };
     if (process.env.OPENSHARE_DEBUG_FILE) {
         // diagnostic ground truth for the suites (never set in production)
         try {
@@ -203,7 +216,7 @@ export function createEngine(deps) {
     }
     const server = resolveServer(cfg);
     if (!server || !server.url) {
-        log("disabled: no share server configured (workerUrl or a servers entry)");
+        logStatus("disabled: no share server configured (workerUrl or a servers entry)");
         return {
             mode,
             config: () => cfg,
@@ -213,7 +226,7 @@ export function createEngine(deps) {
             },
         };
     }
-    log(`share mode: ${mode} (directory: ${deps.directory ?? "?"} worktree: ${deps.worktree ?? "?"})`);
+    logStatus(`share mode: ${mode} (directory: ${deps.directory ?? "?"} worktree: ${deps.worktree ?? "?"})`);
     const resolveTargets = () => {
         const merged = {};
         const hasServers = !!cfg.servers && Object.keys(cfg.servers).length > 0;
@@ -224,7 +237,7 @@ export function createEngine(deps) {
         if (cfg.workerUrl && (!hasServers || envWorker))
             merged[cfg.workerUrl] = { token: cfg.createToken || "", active: true };
         if (cfg.workerUrl && hasServers && !envWorker && !cfg.servers[cfg.workerUrl]) {
-            log(`legacy workerUrl ${cfg.workerUrl} ignored: a servers group is configured - remove one of the two`);
+            logStatus(`legacy workerUrl ${cfg.workerUrl} ignored: a servers group is configured - remove one of the two`);
         }
         if (cfg.servers)
             for (const [u, e] of Object.entries(cfg.servers))
@@ -314,12 +327,12 @@ export function createEngine(deps) {
             if (adoptModel && doc.modelLabel === undefined) {
                 doc.modelLabel = wantModel;
                 dirty = true;
-                log(`${url}: adopted modelLabel from the server config set`);
+                logStatus(`${url}: adopted modelLabel from the server config set`);
             }
             if (adoptMode && doc.shareMode === undefined) {
                 doc.shareMode = wantMode;
                 dirty = true;
-                log(`${url}: adopted shareMode from the server config set`);
+                logStatus(`${url}: adopted shareMode from the server config set`);
             }
             if (dirty)
                 writeFileSync(home, JSON.stringify(doc, null, 2) + "\n");
@@ -372,7 +385,7 @@ export function createEngine(deps) {
                 c.credential = b.token;
                 c.error = "";
                 const savedTo = saveServerToken(url, c.credential);
-                log(`enrolled at ${url} (user ${b.userId} "${b.label}")${savedTo ? " - token saved" : ""}`);
+                logStatus(`enrolled at ${url} (user ${b.userId} "${b.label}")${savedTo ? " - token saved" : ""}`);
                 void adoptServerSuggestions(url, c.credential);
                 return c.credential;
             }
@@ -540,7 +553,7 @@ export function createEngine(deps) {
                 const after = targets.map((t) => t.url);
                 const added = after.filter((u) => !before.has(u));
                 if (added.length)
-                    log(`fan-out set grew: ${added.join(", ")}`);
+                    logStatus(`fan-out set grew: ${added.join(", ")}`);
             }
         }
     };
@@ -765,10 +778,14 @@ export function createEngine(deps) {
     const scheduleBindingWrite = (st) => {
         if (st.metaTimer)
             return;
+        // env knob exists for the mock suites: their two-remote scenarios
+        // assert the SETTLED binding, and waiting out the production 30s
+        // coalescing window per scenario would dominate suite time
+        const debounce = Number(process.env.OPENSHARE_BINDING_WRITE_MS) > 0 ? Number(process.env.OPENSHARE_BINDING_WRITE_MS) : 30000;
         st.metaTimer = setTimeout(() => {
             st.metaTimer = null;
             chain = chain.then(() => writeBinding(st)).catch(() => { });
-        }, 30000);
+        }, debounce);
     };
     // ---- spool (temporary buffer for unacked frames) ----------------------
     // One spool per session per server: `<sid>.<h8(url)>.meta/queue`. The
@@ -1010,7 +1027,7 @@ export function createEngine(deps) {
             return;
         r.announced = true;
         const url = `${r.url}/s/${r.shareId}`;
-        if (cfg.announceStderr)
+        if (wantAnnounce())
             log(`live: ${url}`);
         if (mode === "all" && cfg.urlFile !== URL_FILE_NONE) {
             // default: the file lives where the session lives (its directory,
@@ -1038,7 +1055,7 @@ export function createEngine(deps) {
                     }) + "\n"
                     : url + "\n";
                 appendFileSync(file, line);
-                if (cfg.announceStderr && (file !== lastUrlFile || !urlFileAnnounced)) {
+                if (wantAnnounce() && (file !== lastUrlFile || !urlFileAnnounced)) {
                     urlFileAnnounced = true;
                     lastUrlFile = file;
                     log(`url file: ${file}`);
@@ -1109,7 +1126,7 @@ export function createEngine(deps) {
                 attach.ttlHours = st.opts.ttlHours;
             const sent = wsSend(r, { op: "init", attach });
             if (sent)
-                log(`opts re-synced to ${url.slice(0, 24)}${st.opts?.ttlHours ? ` (ttl ${st.opts.ttlHours}h)` : ""}`);
+                logStatus(`opts re-synced to ${url.slice(0, 24)}${st.opts?.ttlHours ? ` (ttl ${st.opts.ttlHours}h)` : ""}`);
         }
     };
     /** Best-effort cleanup of a share we are about to abandon (refused

package/dist/settings.js

@@ -131,12 +131,12 @@ const LABELS = {
     },
     announceStderr: {
         label: "Announce on stderr",
-        help: '"true"/"false": the [openshare] live: and url file: log lines. false silences them; the share itself is unaffected.',
+        help: '"all" | "status" | "url" | "off": which [openshare] info lines reach stderr.',
         kind: "text",
-        options: ["true", "false"],
+        options: ["all", "status", "url", "off"],
         section: "Advanced",
-        info: "Whether the informational [openshare] lines reach stderr in all-mode (CI logs). Error-class lines (worker down, refused, timeouts) ALWAYS reach stderr regardless. In manual mode stderr is errors-only by design.",
-        def: "true",
+        info: "The stderr ladder for informational [openshare] lines (all-mode/CI). all: announce lines (live:/url file:) plus status lines (mode banner, enrollment, adoption notes). status: status lines only - the share URL never touches stderr (public CI logs). url: announce lines only (private runners scraping the share URL). off: no info lines. Error-class lines (worker down, refused, timeouts) ALWAYS reach stderr regardless. In manual mode stderr is errors-only by design.",
+        def: "all",
     },
 };
 /** [i] pane text for a config key row: long info + live value + source + default. */
@@ -156,8 +156,6 @@ function helpForKey(key, cfg, sources) {
 function displayValue(key, cfg) {
     if (key === "createToken" || key === "authPassword")
         return mask(String(cfg[key] ?? ""));
-    if (key === "announceStderr")
-        return cfg.announceStderr !== false ? "on" : "off";
     const value = cfg[key];
     return value === undefined || value === "" ? "(not set)" : String(value);
 }
@@ -183,8 +181,6 @@ async function editKey(host, cfg, key) {
         const next = { ...cfg };
         if (key === "shareMode")
             next[key] = picked === "auto" ? undefined : picked;
-        else if (key === "announceStderr")
-            next[key] = picked === "true";
         else
             next[key] = picked;
         return next;

package/dist/tui.js

@@ -29,7 +29,7 @@ var DEFAULTS = {
   urlFile: "",
   urlFileFormat: "url",
   configSet: "",
-  announceStderr: true
+  announceStderr: "all"
 };
 var CONFIG_NAME = "openshare.config.json";
 var LOCAL_NAME = "openshare.local.json";
@@ -260,6 +260,22 @@ function deleteServerEntry(url, target) {
     return;
   }
 }
+function normalizeAnnounce(value, fallback) {
+  if (value === true)
+    return "all";
+  if (value === false)
+    return "off";
+  if (typeof value === "string") {
+    const v = value.trim().toLowerCase();
+    if (v === "all" || v === "status" || v === "url" || v === "off")
+      return v;
+    if (/^(1|true|yes|on)$/.test(v))
+      return "all";
+    if (/^(0|false|no)$/.test(v))
+      return "off";
+  }
+  return fallback;
+}
 function loadConfig(pluginDir, options) {
   const cfg = { ...DEFAULTS };
   const emptyMeansUnset = new Set(["workerUrl", "createToken", "urlFile", "spoolDir"]);
@@ -367,11 +383,12 @@ function loadConfig(pluginDir, options) {
   if (env.OPENSHARE_SPOOL_DIR)
     cfg.spoolDir = env.OPENSHARE_SPOOL_DIR;
   if (env.OPENSHARE_ANNOUNCE_STDERR !== undefined)
-    cfg.announceStderr = !/^(0|false|no|off)$/i.test(env.OPENSHARE_ANNOUNCE_STDERR.trim());
+    cfg.announceStderr = env.OPENSHARE_ANNOUNCE_STDERR;
   if (env.OPENSHARE_SHARE_MODE === "all" || env.OPENSHARE_SHARE_MODE === "manual")
     cfg.shareMode = env.OPENSHARE_SHARE_MODE;
   if (cfg.urlFile.trim().toLowerCase() === URL_FILE_NONE)
     cfg.urlFile = URL_FILE_NONE;
+  cfg.announceStderr = normalizeAnnounce(cfg.announceStderr, "all");
   if (cfg.workerUrl)
     cfg.workerUrl = cfg.workerUrl.trim().replace(/\/+$/, "");
   if (cfg.servers) {
@@ -1247,12 +1264,12 @@ Manual mode (TUI) never writes it \u2014 the link lives in the TUI.`,
   },
   announceStderr: {
     label: "Announce on stderr",
-    help: '"true"/"false": the [openshare] live: and url file: log lines. false silences them; the share itself is unaffected.',
+    help: '"all" | "status" | "url" | "off": which [openshare] info lines reach stderr.',
     kind: "text",
-    options: ["true", "false"],
+    options: ["all", "status", "url", "off"],
     section: "Advanced",
-    info: "Whether the informational [openshare] lines reach stderr in all-mode (CI logs). Error-class lines (worker down, refused, timeouts) ALWAYS reach stderr regardless. In manual mode stderr is errors-only by design.",
-    def: "true"
+    info: "The stderr ladder for informational [openshare] lines (all-mode/CI). all: announce lines (live:/url file:) plus status lines (mode banner, enrollment, adoption notes). status: status lines only - the share URL never touches stderr (public CI logs). url: announce lines only (private runners scraping the share URL). off: no info lines. Error-class lines (worker down, refused, timeouts) ALWAYS reach stderr regardless. In manual mode stderr is errors-only by design.",
+    def: "all"
   }
 };
 function helpForKey(key, cfg, sources) {
@@ -1272,8 +1289,6 @@ function helpForKey(key, cfg, sources) {
 function displayValue(key, cfg) {
   if (key === "createToken" || key === "authPassword")
     return mask(String(cfg[key] ?? ""));
-  if (key === "announceStderr")
-    return cfg.announceStderr !== false ? "on" : "off";
   const value = cfg[key];
   return value === undefined || value === "" ? "(not set)" : String(value);
 }
@@ -1297,8 +1312,6 @@ async function editKey(host, cfg, key) {
     const next = { ...cfg };
     if (key === "shareMode")
       next[key] = picked === "auto" ? undefined : picked;
-    else if (key === "announceStderr")
-      next[key] = picked === "true";
     else
       next[key] = picked;
     return next;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mirrowel/opencode-openshare",
-  "version": "0.3.0-dev.13",
+  "version": "0.3.0-dev.15",
   "type": "module",
   "description": "Open(code)Share — re:share: self-hosted session sharing for opencode. Server plugin (single file or package), optional TUI for interactive opt-in sharing.",
   "license": "MIT",

package/src/banner.txt

@@ -21,5 +21,7 @@
 // shareMode ("all" | "manual"; default = TUI presence), debounceMs,
 // completedDelayMs, modelLabel, ttlDays,
 // authLogin, authPassword, spoolDir, urlFile ("none" = off),
-// announceStderr.
+// announceStderr ("all" | "status" | "url" | "off"; status keeps the
+// status/banner lines and never prints the share URL - the public-CI
+// shape; url prints announce lines only).
 //

package/src/config.ts

@@ -62,9 +62,14 @@ export type ShareConfig = {
    * "json" (one JSON object per line: id, url, status, gated) for CI
    * consumers that want machine-readable lines without parsing URLs. */
   urlFileFormat: "url" | "json"
-  /** false silences the `[openshare] live:` (and `url file:`) stderr
-   * lines. The share itself is unaffected. */
-  announceStderr: boolean
+  /** Stderr ladder with two independently controllable line classes:
+   * announce lines (`live:`, `url file:`) and status lines (mode banner,
+   * enrollment, adoption notes). "all" (default) prints both; "status"
+   * prints status lines only - the share URL never touches stderr
+   * (public CI logs); "url" prints announce lines only (private runners
+   * scraping the URL); "off" prints neither. Error-class lines ALWAYS
+   * reach stderr. */
+  announceStderr: "all" | "status" | "url" | "off"
   /** Wave 3 redaction: user-supplied regex rules (client-side only)
    * applied beside the built-in detectors on UNGATED shares. */
   redact?: { patterns?: string[] }
@@ -103,7 +108,7 @@ export const DEFAULTS: ShareConfig = {
   urlFile: "",
   urlFileFormat: "url",
   configSet: "",
-  announceStderr: true,
+  announceStderr: "all",
 }
 
 const CONFIG_NAME = "openshare.config.json"
@@ -369,6 +374,20 @@ export function deleteServerEntry(url: string, target?: string): string | undefi
   }
 }
 
+/** Coerce an announceStderr value from any layer (enum string, legacy
+ * boolean, truthy/falsy word) to the 4-position ladder. */
+function normalizeAnnounce(value: unknown, fallback: "all" | "status" | "url" | "off"): "all" | "status" | "url" | "off" {
+  if (value === true) return "all"
+  if (value === false) return "off"
+  if (typeof value === "string") {
+    const v = value.trim().toLowerCase()
+    if (v === "all" || v === "status" || v === "url" || v === "off") return v
+    if (/^(1|true|yes|on)$/.test(v)) return "all"
+    if (/^(0|false|no)$/.test(v)) return "off"
+  }
+  return fallback
+}
+
 /** Load the effective config. `options` is the plugin-array options tuple
  * object (env still wins over it). Files MERGE lowest→highest priority
  * (later files override per key); empty strings in credential/path keys
@@ -473,12 +492,18 @@ export function loadConfig(pluginDir: string, options?: Record<string, unknown>)
   if (env.OPENSHARE_URL_FILE_FORMAT === "json" || env.OPENSHARE_URL_FILE_FORMAT === "url") cfg.urlFileFormat = env.OPENSHARE_URL_FILE_FORMAT
   if (env.OPENSHARE_CONFIG_SET) cfg.configSet = env.OPENSHARE_CONFIG_SET
   if (env.OPENSHARE_SPOOL_DIR) cfg.spoolDir = env.OPENSHARE_SPOOL_DIR
-  if (env.OPENSHARE_ANNOUNCE_STDERR !== undefined) cfg.announceStderr = !/^(0|false|no|off)$/i.test(env.OPENSHARE_ANNOUNCE_STDERR.trim())
+  if (env.OPENSHARE_ANNOUNCE_STDERR !== undefined) cfg.announceStderr = env.OPENSHARE_ANNOUNCE_STDERR as ShareConfig["announceStderr"]
   if (env.OPENSHARE_SHARE_MODE === "all" || env.OPENSHARE_SHARE_MODE === "manual") cfg.shareMode = env.OPENSHARE_SHARE_MODE
 
   // normalize the disable sentinel (case-insensitive from any source)
   if (cfg.urlFile.trim().toLowerCase() === URL_FILE_NONE) cfg.urlFile = URL_FILE_NONE
 
+  // announceStderr may arrive from ANY layer as the enum string or a
+  // legacy boolean/word (old saved configs carry true/false) - coerce the
+  // merged value once; unknown values fall back to the default ladder
+  // position
+  cfg.announceStderr = normalizeAnnounce(cfg.announceStderr, "all")
+
   // URL hygiene: a trailing slash on a server url becomes
   // wss://host//api/ws and https://host//s/<id> downstream - strip once,
   // at the source, so every consumer agrees

package/src/core.ts

@@ -233,8 +233,11 @@ export type Engine = {
 // Stderr policy: in manual mode (TUI present) stderr is for ACTUAL ERRORS
 // only. Informational lines (live:/url file:/mode banner, lifecycle
 // traces) are suppressed because the TUI surfaces the URL itself.
-// All-mode (CI/server-only) keeps its stderr contract (announce lines,
-// silenceable via announceStderr). Error-class lines always reach stderr.
+// All-mode (CI/server-only) keeps its stderr contract, layered by the
+// announceStderr ladder: "all" = announce + status lines, "status" =
+// status lines only (the share URL never touches stderr), "url" =
+// announce lines only, "off" = neither. Error-class lines always reach
+// stderr.
 let stderrInfoAllowed = true
 
 const log = (...a: unknown[]) => {
@@ -351,8 +354,17 @@ export function engineTargetUrls(): string[] {
 export function createEngine(deps: EngineDeps): Engine {
   let cfg = loadConfig(deps.pluginDir, deps.options)
   const mode: ShareMode = resolveShareMode(cfg, deps)
-  // stderr = errors only when the TUI part exists (the TUI surfaces URLs)
+  // Stderr = errors only when the TUI part exists (the TUI surfaces URLs)
   if (mode === "manual") stderrInfoAllowed = false
+  // The ladder controls two line classes independently: announce lines
+  // (live:, url file:) print at all/url; status lines (mode banner,
+  // enrollment, adoption notes) print at all/status. "status" is the
+  // public-CI shape - the share URL never reaches the log.
+  const wantAnnounce = () => cfg.announceStderr === "all" || cfg.announceStderr === "url"
+  const logStatus = (...a: unknown[]) => {
+    if (cfg.announceStderr !== "all" && cfg.announceStderr !== "status") return
+    log(...a)
+  }
   if (process.env.OPENSHARE_DEBUG_FILE) {
     // diagnostic ground truth for the suites (never set in production)
     try {
@@ -374,7 +386,7 @@ export function createEngine(deps: EngineDeps): Engine {
   }
   const server = resolveServer(cfg)
   if (!server || !server.url) {
-    log("disabled: no share server configured (workerUrl or a servers entry)")
+    logStatus("disabled: no share server configured (workerUrl or a servers entry)")
     return {
       mode,
       config: () => cfg,
@@ -384,7 +396,7 @@ export function createEngine(deps: EngineDeps): Engine {
       },
     }
   }
-  log(`share mode: ${mode} (directory: ${deps.directory ?? "?"} worktree: ${deps.worktree ?? "?"})`)
+  logStatus(`share mode: ${mode} (directory: ${deps.directory ?? "?"} worktree: ${deps.worktree ?? "?"})`)
 
   // ---- share servers (the fan-out set) -----------------------------------
   // Every entry flagged active:true shares new sessions; when none is
@@ -401,7 +413,7 @@ export function createEngine(deps: EngineDeps): Engine {
     const envWorker = !!process.env.OPENSHARE_WORKER_URL
     if (cfg.workerUrl && (!hasServers || envWorker)) merged[cfg.workerUrl] = { token: cfg.createToken || "", active: true }
     if (cfg.workerUrl && hasServers && !envWorker && !cfg.servers![cfg.workerUrl]) {
-      log(`legacy workerUrl ${cfg.workerUrl} ignored: a servers group is configured - remove one of the two`)
+      logStatus(`legacy workerUrl ${cfg.workerUrl} ignored: a servers group is configured - remove one of the two`)
     }
     if (cfg.servers) for (const [u, e] of Object.entries(cfg.servers)) merged[u] = { ...merged[u], ...e }
     const urls = Object.keys(merged)
@@ -480,8 +492,8 @@ export function createEngine(deps: EngineDeps): Engine {
         if (!doc || typeof doc !== "object") doc = {}
       } catch {}
       let dirty = false
-      if (adoptModel && doc.modelLabel === undefined) { doc.modelLabel = wantModel; dirty = true; log(`${url}: adopted modelLabel from the server config set`) }
-      if (adoptMode && doc.shareMode === undefined) { doc.shareMode = wantMode; dirty = true; log(`${url}: adopted shareMode from the server config set`) }
+      if (adoptModel && doc.modelLabel === undefined) { doc.modelLabel = wantModel; dirty = true; logStatus(`${url}: adopted modelLabel from the server config set`) }
+      if (adoptMode && doc.shareMode === undefined) { doc.shareMode = wantMode; dirty = true; logStatus(`${url}: adopted shareMode from the server config set`) }
       if (dirty) writeFileSync(home, JSON.stringify(doc, null, 2) + "\n")
     } catch {
       // suggestions are best-effort; a failed fetch never blocks sharing
@@ -530,7 +542,7 @@ export function createEngine(deps: EngineDeps): Engine {
         c.credential = b.token
         c.error = ""
         const savedTo = saveServerToken(url, c.credential)
-        log(`enrolled at ${url} (user ${b.userId} "${b.label}")${savedTo ? " - token saved" : ""}`)
+        logStatus(`enrolled at ${url} (user ${b.userId} "${b.label}")${savedTo ? " - token saved" : ""}`)
         void adoptServerSuggestions(url, c.credential)
         return c.credential
       }
@@ -700,7 +712,7 @@ export function createEngine(deps: EngineDeps): Engine {
       if (debugEvents) {
         const after = targets.map((t) => t.url)
         const added = after.filter((u) => !before.has(u))
-        if (added.length) log(`fan-out set grew: ${added.join(", ")}`)
+        if (added.length) logStatus(`fan-out set grew: ${added.join(", ")}`)
       }
     }
   }
@@ -913,10 +925,14 @@ export function createEngine(deps: EngineDeps): Engine {
 
   const scheduleBindingWrite = (st: SessionState) => {
     if (st.metaTimer) return
+    // env knob exists for the mock suites: their two-remote scenarios
+    // assert the SETTLED binding, and waiting out the production 30s
+    // coalescing window per scenario would dominate suite time
+    const debounce = Number(process.env.OPENSHARE_BINDING_WRITE_MS) > 0 ? Number(process.env.OPENSHARE_BINDING_WRITE_MS) : 30000
     st.metaTimer = setTimeout(() => {
       st.metaTimer = null
       chain = chain.then(() => writeBinding(st)).catch(() => {})
-    }, 30000)
+    }, debounce)
   }
 
   // ---- spool (temporary buffer for unacked frames) ----------------------
@@ -1142,7 +1158,7 @@ export function createEngine(deps: EngineDeps): Engine {
     if (r.announced) return
     r.announced = true
     const url = `${r.url}/s/${r.shareId}`
-    if (cfg.announceStderr) log(`live: ${url}`)
+    if (wantAnnounce()) log(`live: ${url}`)
     if (mode === "all" && cfg.urlFile !== URL_FILE_NONE) {
       // default: the file lives where the session lives (its directory,
       // falling back to the process cwd) — never a fixed global path.
@@ -1170,7 +1186,7 @@ export function createEngine(deps: EngineDeps): Engine {
               }) + "\n"
             : url + "\n"
         appendFileSync(file, line)
-        if (cfg.announceStderr && (file !== lastUrlFile || !urlFileAnnounced)) {
+        if (wantAnnounce() && (file !== lastUrlFile || !urlFileAnnounced)) {
           urlFileAnnounced = true
           lastUrlFile = file
           log(`url file: ${file}`)
@@ -1237,7 +1253,7 @@ export function createEngine(deps: EngineDeps): Engine {
       const attach: Record<string, unknown> = { id: r.shareId, secret: r.secret, ...authFrame(st) }
       if (st.opts?.ttlHours) attach.ttlHours = st.opts.ttlHours
       const sent = wsSend(r, { op: "init", attach })
-      if (sent) log(`opts re-synced to ${url.slice(0, 24)}${st.opts?.ttlHours ? ` (ttl ${st.opts.ttlHours}h)` : ""}`)
+      if (sent) logStatus(`opts re-synced to ${url.slice(0, 24)}${st.opts?.ttlHours ? ` (ttl ${st.opts.ttlHours}h)` : ""}`)
     }
   }
 

package/src/settings.ts

@@ -191,12 +191,12 @@ const LABELS: Record<string, LabelMeta> = {
   },
   announceStderr: {
     label: "Announce on stderr",
-    help: '"true"/"false": the [openshare] live: and url file: log lines. false silences them; the share itself is unaffected.',
+    help: '"all" | "status" | "url" | "off": which [openshare] info lines reach stderr.',
     kind: "text",
-    options: ["true", "false"],
+    options: ["all", "status", "url", "off"],
     section: "Advanced",
-    info: "Whether the informational [openshare] lines reach stderr in all-mode (CI logs). Error-class lines (worker down, refused, timeouts) ALWAYS reach stderr regardless. In manual mode stderr is errors-only by design.",
-    def: "true",
+    info: "The stderr ladder for informational [openshare] lines (all-mode/CI). all: announce lines (live:/url file:) plus status lines (mode banner, enrollment, adoption notes). status: status lines only - the share URL never touches stderr (public CI logs). url: announce lines only (private runners scraping the share URL). off: no info lines. Error-class lines (worker down, refused, timeouts) ALWAYS reach stderr regardless. In manual mode stderr is errors-only by design.",
+    def: "all",
   },
 }
 
@@ -214,7 +214,6 @@ function helpForKey(key: string, cfg: ShareConfig, sources: Record<string, strin
 
 function displayValue(key: string, cfg: ShareConfig): string {
   if (key === "createToken" || key === "authPassword") return mask(String(cfg[key] ?? ""))
-  if (key === "announceStderr") return cfg.announceStderr !== false ? "on" : "off"
   const value = (cfg as unknown as Record<string, unknown>)[key]
   return value === undefined || value === "" ? "(not set)" : String(value)
 }
@@ -238,7 +237,6 @@ async function editKey(host: ShareHostApi, cfg: ShareConfig, key: string): Promi
     if (picked === undefined) return undefined
     const next = { ...cfg } as unknown as Record<string, unknown>
     if (key === "shareMode") next[key] = picked === "auto" ? undefined : picked
-    else if (key === "announceStderr") next[key] = picked === "true"
     else next[key] = picked
     return next as ShareConfig
   }