@mogragsigma/dsh-dual-host-plugin 0.33.3 → 2.0.0

package/bundle/approval-workbench.js

@@ -8,6 +8,8 @@ export class WorkbenchApprovals {
   if(!object(args)||Object.keys(args).some(k=>!['task_id','request_id','expected_revision'].includes(k)))throw Error('APPROVAL_WORKBENCH_ARGUMENTS');
   const scoped=Object.keys(args).length>0;
   if(scoped&&(!(typeof args.task_id==='string'&&args.task_id.length<=128&&args.task_id)||!(typeof args.request_id==='string'&&args.request_id.length<=128&&args.request_id)||!Number.isSafeInteger(args.expected_revision)||args.expected_revision<1))throw Error('APPROVAL_WORKBENCH_ARGUMENTS');
+  if(scoped){const row=this.db.prepare('SELECT task_id,spec_revision FROM approval_requests WHERE id=?').get(args.request_id),head=this.db.prepare('SELECT spec_revision FROM task_catalog WHERE task_id=?').get(args.task_id);if(!row||row.task_id!==args.task_id||row.spec_revision!==args.expected_revision||head?.spec_revision!==args.expected_revision)throw Error('APPROVAL_WORKBENCH_CHANGED');}
+  if(scoped&&this.l.isNativeTask(args.task_id)){const r=this.l.view(args.request_id);if(r.task_id!==args.task_id||r.spec_revision!==args.expected_revision||this.l.catalog.head(args.task_id).spec_revision!==args.expected_revision)throw Error('APPROVAL_WORKBENCH_CHANGED');return {schema:2,enabled:true,identity_policy:'task-native',registration_required:false,new_browser_credential_required:false,approval_granted:false,execution_granted:false,read_only:true,next_action:{kind:'use_task_workbench',label:'在任务内处理',message:'通过当前已登录工作台或原生对话说明决定，无需 IM 身份确认。'}};}
   const chat=this.getChat(),binding=chat?.bindingHash?this.db.prepare('SELECT binding,disabled FROM approval_chat_bindings WHERE id=?').get(chat.bindingHash):null;
   const active=!!(binding?.disabled===0&&chat?.binding&&binding.binding===canonical(chat.binding)&&digest(chat.binding)===chat.bindingHash&&!chat.closed);
   const state=!chat?'not_configured':!active?'needs_review':chat.lastError?'unavailable':'configured';

package/bundle/artifact-media.js

@@ -25,10 +25,10 @@ export async function artifactSnapshot(g,task,id,mode){
   if(access.artifact.state!=='verified'||a.eligibility(r)!=='needs_verification'||access.artifact.sha256!==r.sha256)throw Error('NOTIFICATION_ARTIFACT_CHANGED');
   return {artifact_id:r.id,name:r.name,description:r.description,sha256:r.sha256,size:0,mode,spec_revision:r.spec_revision,mime:'text/uri-list',url:access.url};
  }
- const f=r.kind==='report'?a.readLocal(r):await g.repositories.provider.file(r.repository,r.path);a.assertOpen();
+ const f=['report','native_file'].includes(r.kind)?a.readLocal(r):await g.repositories.provider.file(r.repository,r.path);a.assertOpen();
  if(a.eligibility(r)!=='needs_verification'||f.bytes.length!==r.size||mediaHash(f.bytes)!==r.sha256||r.kind==='gitee'&&f.blob_sha!==r.blob_sha)throw Error('NOTIFICATION_ARTIFACT_CHANGED');
  if(mode==='page'&&r.kind!=='gitee')throw Error('NOTIFICATION_PAGE_UNAVAILABLE');
  const mime=mode==='image'?imageType(f.bytes):'application/octet-stream';
  if(mode==='image'&&!/\.(png|jpe?g)$/i.test(r.name))throw Error('ARTIFACT_INVALID_IMAGE');
- return {artifact_id:r.id,name:r.name,description:r.description??'暂无介绍',sha256:r.sha256,size:r.size,mode,spec_revision:r.spec_revision,mime,...(mode==='page'?{url:f.url}:{bytes:f.bytes})};
+ return {...(r.kind==='native_file'?{native_file:true}:{}),artifact_id:r.id,name:r.name,description:r.description??'暂无介绍',sha256:r.sha256,size:r.size,mode,spec_revision:r.spec_revision,mime,...(mode==='page'?{url:f.url}:{bytes:f.bytes})};
 }

package/bundle/compatibility.json

@@ -1,7 +1,7 @@
 {
   "schema": 1,
   "plugin": "@mogragsigma/dsh-dual-host-plugin",
-  "version": "0.33.3",
+  "version": "2.0.0",
   "publicEntry": "native-entry.js",
   "hostBaseline": "0.2.1-rc.5",
   "imOptional": {
@@ -976,5 +976,51 @@
     "restart": "claimed operations need review; no replay",
     "productionDeployed": false,
     "realPlatformTest": "local isolated official Web roles + real test Feishu; not production ECS/Desktop"
+  },
+  "hostCompatibilityPolicy": {
+    "declaredRange": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+    "standalonePinnedHost": "0.2.2-rc.1",
+    "targetHost": "0.2.2-rc.1",
+    "scope": "2.0.0 preparation, not published. Broad range admission is not per-version acceptance; see releaseContract and current acceptance report."
+  },
+  "releaseContract": {
+    "version": "2.0.0",
+    "stage": "unreleased-preparation",
+    "historicalFields": "Legacy approval/development/onboarding contracts remain for historical compatibility; they are not new-task policy or proof of 2.0 activation.",
+    "policy": "cloud-autonomous-v1",
+    "owner": "single-user",
+    "channels": [
+      "local-dsh-to-cloud",
+      "owner-local-im-to-cloud",
+      "owner-cloud-im-to-cloud"
+    ],
+    "execution": "cloud-only native DSH",
+    "taskImPermissions": "independent",
+    "modelCallLimit": null,
+    "uniformTaskDeadline": null,
+    "permissionReapprovalTTL": null,
+    "concurrency": {
+      "ordinary": 3,
+      "humanFollowup": 1
+    },
+    "sessions": {
+      "archiveIdleDays": 7,
+      "automaticDelete": false
+    },
+    "setup": "bundle/SETUP.md and bundle/configuration-v2.json; explicit native profile configuration",
+    "source": {
+      "transport": "gitee-selected-issues",
+      "maxIssuesPerSource": 8,
+      "defaultMode": "off",
+      "newTaskTotal": "explicitly confirmed finite per-period total, never model-call cap"
+    },
+    "legacyWizard": "Owned read-only runtime is historical; not the native cloud execution activation path",
+    "supportEvidence": "DSH 0.2.2-rc.1; 0.2.1-rc.5 lower-bound validation tracked separately; selected Feishu dsh-im 5.9.1 real business evidence; not all platforms",
+    "notSupported": [
+      "reverse-local-managed-worker",
+      "gitee-product-pr",
+      "automatic-session-delete",
+      "stateless-elastic-byom"
+    ]
   }
 }

package/bundle/configuration-v2.json

@@ -0,0 +1,15 @@
+{
+  "local": [
+    {"id":"dual-host-onboarding","config":{"role":"local","entryMode":"native","namespace":"__PAIR_NAMESPACE__","stateDir":"__STATE_DIR__","tokenFile":"__TOKEN_FILE__","port":33911,"coordinatorUrl":"http://127.0.0.1:33921","workbench":{"enabled":true},"continuity":{"enabled":true},"managedExecution":{"enabled":true}}},
+    {"insert":[{"id":"dual-host-native-tools","name":"@mogragsigma/dsh-dual-host-plugin/native-tools"}]}
+  ],
+  "cloud": [
+    {"id":"dual-host-onboarding","config":{"role":"cloud","entryMode":"native","namespace":"__PAIR_NAMESPACE__","stateDir":"__STATE_DIR__","tokenFile":"__TOKEN_FILE__","port":33921,"workbench":{"enabled":true},"continuity":{"enabled":true},"managedExecution":{"enabled":true,"endpoint":{"lockPort":33923}},"sourceIntake":{"enabled":false,"sources":[]}}},
+    {"insert":[{"id":"dual-host-native-tools","name":"@mogragsigma/dsh-dual-host-plugin/native-tools"}]}
+  ],
+  "selectedSource": {
+    "id":"selected-gitee-issues","adapterId":"gitee-issues-v1","namespace":"gitee-repository-42","revision":"1","enabled":false,
+    "scopes":["https://gitee.com/example/synthetic-repository"],
+    "gitee":{"url":"https://gitee.com/example/synthetic-repository","repository_id":42,"issues":["IEXAMPLE"]}
+  }
+}

package/bundle/delivery-state.js

@@ -1,3 +1,4 @@
+import {managedResourceBusy} from './managed-development-contract.js';
 // Read-only persisted projection. No Git, filesystem observation, migration,
 // approval renewal, lease acquisition or execution callback is allowed here.
 import {canonical,digest} from './approval-ledger.js';
@@ -11,6 +12,7 @@ const codes=new Set(['EFFECT_UNKNOWN','DRAIN_REQUIRED','READBACK_UNKNOWN','READB
 export function deliveryWaiting(db,r,t){
  if(r.state==='needs_review'||t.blocked)return 'delivery_review';if(r.state!=='queued')return null;
  if(t.busy)return 'task_busy';
+ if(managedResourceBusy(db,r.resource))return 'managed_resource_busy';
  const owner=db.prepare("SELECT state FROM delivery_actions WHERE resource=? AND state IN ('active','needs_review')").get(r.resource);
  if(owner)return owner.state==='needs_review'?'delivery_resource_review':'delivery_resource_busy';
  if(has(db,'development_requests')){

package/bundle/development-gate.js

@@ -1,3 +1,4 @@
+import {managedResourceBusy} from './managed-development-contract.js';
 import {randomUUID} from 'node:crypto';
 import {canonical,digest} from './approval-ledger.js';
 import {approvedDevelopment} from './development-contract.js';
@@ -58,6 +59,7 @@ export class DevelopmentGate {
   if(this.unresolved(id)||this.inflight.has(id))return 'development_draining';
   if(r.state!=='queued')return null;
   if(t.busy||this.busy(r.task_id))return 'task_busy';
+ if(managedResourceBusy(this.db,r.resource))return 'managed_resource_busy';
   const owner=this.db.prepare("SELECT id,state FROM development_requests WHERE resource=? AND state IN ('active','needs_review')").get(r.resource);
   if(owner)return owner.state==='needs_review'?'development_resource_review':this.unresolved(owner.id)||this.inflight.has(owner.id)?'development_resource_draining':'development_resource_busy';
   // Optional journal shares the SAME database. Cutoff merges FIFO order across

package/bundle/distribution-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@mogragsigma/dsh-dual-host-plugin",
-  "version": "0.33.3",
+  "version": "2.0.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@mogragsigma/dsh-dual-host-plugin",
-      "version": "0.33.3",
+      "version": "2.0.0",
       "license": "SEE LICENSE IN LICENSE",
       "dependencies": {
         "@js-temporal/polyfill": "0.5.1",
@@ -14,24 +14,24 @@
         "koffi": "3.1.1"
       },
       "engines": {
-        "dsh": "0.2.1-rc.5"
+        "dsh": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0"
       },
       "peerDependencies": {
-        "@deepseek-ai/dsh-agent": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-credentials": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-http-proxy": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-llm": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-llm-deepseek": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-llm-pi-ai": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-web-fetch-http": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-web-search-deepseek": "0.2.1-rc.5",
-        "@earendil-works/pi-ai": "1.3.0"
+        "@deepseek-ai/dsh-llm": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-llm-deepseek": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-llm-pi-ai": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@earendil-works/pi-ai": ">=1.3.0 <1.6.0",
+        "@deepseek-ai/dsh-agent": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-credentials": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-http-proxy": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-web-fetch-http": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-web-search-deepseek": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0"
       },
       "peerDependenciesMeta": {
-        "@deepseek-ai/dsh-agent": {
+        "@deepseek-ai/dsh-llm-pi-ai": {
           "optional": true
         },
-        "@deepseek-ai/dsh-credentials": {
+        "@earendil-works/pi-ai": {
           "optional": true
         },
         "@deepseek-ai/dsh-http-proxy": {
@@ -40,19 +40,19 @@
         "@deepseek-ai/dsh-llm": {
           "optional": true
         },
-        "@deepseek-ai/dsh-llm-deepseek": {
+        "@deepseek-ai/dsh-web-search-deepseek": {
           "optional": true
         },
-        "@deepseek-ai/dsh-llm-pi-ai": {
+        "@deepseek-ai/dsh-agent": {
           "optional": true
         },
         "@deepseek-ai/dsh-web-fetch-http": {
           "optional": true
         },
-        "@deepseek-ai/dsh-web-search-deepseek": {
+        "@deepseek-ai/dsh-credentials": {
           "optional": true
         },
-        "@earendil-works/pi-ai": {
+        "@deepseek-ai/dsh-llm-deepseek": {
           "optional": true
         }
       }

package/bundle/gateway-maintenance.js

@@ -17,6 +17,7 @@ export function createGatewayMaintenance(g,{now=Date.now}={}){
    deliveryPreparation:g.deliveryRuntime?.preparations.size??0,
    development:g.development?.gate.inflight.size??0,developmentPeer:g.developmentPeer?.pending.size??0,
    a2a:+!!g.a2aEndpoint?.pending+ +!!g.a2aEndpoint?.active+ +!!g.a2aEndpoint?.undrained,
+   managedExecution:g.execution?.slots.list().length??0,managedEndpoint:(g.executionEndpoint?.active.size??0)+ +!!g.executionEndpoint?.pending,
    approvals:+!!g.chatApproval?.running,artifacts:g.artifacts?.pending.size??0};
  }
  function status(a={}){if(!exact(a,[]))fail('ARGUMENTS');ready();const c=counts(),busy=Object.values(c).some(n=>n!==0);

package/bundle/global-rules/AGENTS.md

@@ -2,30 +2,34 @@
 仅限本项目；保留用户规则、人格、记忆及原生功能。
 本机身份：__HOST_NAME__（Host role：__HOST_ROLE__）；路由以 `task_identity` 为准，非昵称。
 Host 身份不证明渠道；云端 Web 也可接收 IM。无可靠渠道元数据须说“当前渠道未确认”，不按 localhost、环境提示或第三方 ID 猜测。
-### 职责与入口
-- 本地大肥鱼负责本机；云端大肥鱼在 ECS 受理、查询、解释结果。指定本地不改投云端；Mac 离线另联系云端，不接管旧机器人。
-- 双端通信走自有插件直连；IM 是入口和通知渠道，不要求机器人同群。Gitee 保存开发版本和成果，不是消息总线、权威任务状态或并发锁。
-- 长任务交独立 worker，入口即返回，不用 shell 查实现/配置或 sleep/轮询。task_schedule 必填 max_runs 限总批次，每批≤6次模型请求；worker 处理检查点等待。短问答保留原功能。
-- 入口不能代 worker 计算并冒报完成。独立会话不等于独立 OS 进程；不得声称已经实现对 root、原生 Shell 或其他插件的系统级身份隔离。
+### 当前云端自主任务优先规则
+- cloud-autonomous-v1：仅本地 DSH、本地 IM、云端 IM 三通道交办，统一云端执行；本地普通 DSH 保留，不反向派本地。
+- task_submit 保留必要原文，task_execute 原生持续执行；task_followup 接续指示。无审批前置、调用次数上限、统一300秒截止或两小时到期重批；保留技术超时及业务期限。
+- 云端原生 CLI/文件能力充分使用；IM 权限不决定任务执行。Git/远程托管可选；按约定交付并回读，不从研发推导发布。成果宿主登记，ready非已发送/已读。
+- 以下旧审批、预算、短批、本地执行及Gitee门禁仅限历史合同；不套用于新任务，不迁移、删除或自动续跑历史。
+
+### 历史合同职责与入口
+- 双端插件直连，IM只作入口/通知，不同群接力；Gitee非消息总线/权威状态/并发锁。
+- 旧task_schedule保留max_runs及每批≤6次；入口不代worker冒报完成，不shell轮询。独立会话非OS进程或系统级身份隔离。
 ### 按需加载 Skill
 回执为准。
 | 用户需求 | Skill |
 | --- | --- |
-| 委派、按名称查询或修改任务；选择模型 | `task-direct-link` |
-| 周期、未来时间、事件、等待输入、有界子任务 | `task-schedule` |
-| 双端自主协作与共享预算 | `task-a2a` |
+| 任务与模型 | `task-direct-link` |
+| 计划与信号 | `task-schedule` |
+| 历史A2A | `task-a2a` |
 | IM／本地／云端三端文件收发 | `task-file-transfer` |
-| 方案、自然语言批准／拒绝／暂缓／修改意见、回执引用 | `task-approval` |
-| 仓库关联、交付差异、提交和推送 | `task-repository` |
-| 已获授权的受管开发、修复与测试 | `task-development` |
-| 来源、联网研究、搜索阶段及证据 | `task-research` |
-| 通知目标、未知发送核对、图片／附件与手机入口 | `task-notify` |
-| 成果介绍、Gitee 页面或执行会话入口 | `task-artifacts` |
-| 云端 Web 工作台 | `task-workbench` |
-| 任务、双端、计划和交付状态展示 | `task-sidebar` |
-| 协议兼容、状态新鲜度、队列与回执诊断 | `task-diagnostics` |
-| 忙闲交接与中断核对 | `task-handoff`、`task-recovery` |
-| 导览、路径、凭据、安装与维护恢复、原事务回执 | `task-onboarding` |
+| 历史审批 | `task-approval` |
+| 仓库与交付 | `task-repository` |
+| 研发与验证 | `task-development` |
+| 来源与搜索 | `task-research` |
+| 通知与回执 | `task-notify` |
+| 成果取用 | `task-artifacts` |
+| 云端工作台 | `task-workbench` |
+| 任务展示 | `task-sidebar` |
+| 诊断 | `task-diagnostics` |
+| 交接与恢复 | `task-handoff`、`task-recovery` |
+| 配置与维护 | `task-onboarding` |
 
 `task-worker`、`task-a2a-worker` 只在相应独立执行会话加载，入口不冒充 worker。
 `dsh-dual-end`、`task-intake` 仅作兼容指引；旧 `/task`、`/run`、`/approve`、群内 A2A、旧消费者和补丁流程不恢复、不自动重放。保留旧会话，不擅自改模式或清空历史。
@@ -34,7 +38,7 @@ Host 身份不证明渠道；云端 Web 也可接收 IM。无可靠渠道元数
 - 按名称交办／查询，无需 ID、命令、哈希或精确 provider；歧义才文字询问。任务名非关联键，内部参数仅取真实工具回执，不编造。
 - `task_submit` 的 goal 为理解摘要，Host 保全直接用户原文和约束。仅明确引用时补必要前文，不上传整段聊天或禁转内容。补充沿用原任务并修订；超限、非文本、缺能力须说明，不截断需求。
 - 新任务或显式换模型先用 `task_model_resolve` 核对目标端目录；“ds flash”等简称唯一匹配才用返回策略。歧义用接入名称澄清（导览 clarification），默认不传 provider_hint；不凭记忆、入口清单、近似版本或降级补齐。
-- 本项目 ECS 新任务未指定思考程度默认 high；显式值优先，不固定模型。历史任务、已批准方案及恢复批次保持原策略；不能支持所选程度则停止说明。辅助模型与搜索须单独声明策略和预算，既有例外不推广到其他任务。
+- 新任务默认模型复用云端 DSH，显式值优先；恢复不换策略、不降级。辅助搜索单独声明路由；历史预算保留，新任务只统计。
 - 澄清使用普通聊天文字，不以飞书卡片、精确拼写或 ask_user_question 作为必经入口；此规则不拦截原生权限确认、第三方工具或斜杠命令。普通选择回复不是可信审批。
 
 ### 授权与可信审批