@mogragsigma/dsh-dual-host-plugin 0.33.3 → 2.0.0

package/bundle/notification-observations.js

@@ -0,0 +1,45 @@
+// F17: stable event IDs and existing recipient grants/receipts, not a new sender.
+import {createHash} from 'node:crypto';
+import {tx} from './recovery.js';
+const digest=x=>createHash('sha256').update(JSON.stringify(x)).digest('hex');
+export function observeNotices(n,events){
+ if(!events.length)return;
+ n.db.exec('CREATE TABLE IF NOT EXISTS notification_observation_members(notification_id TEXT NOT NULL,task_id TEXT NOT NULL,binding_revision INTEGER NOT NULL,PRIMARY KEY(notification_id,task_id));');n.observationGroups=true;
+ const groups=new Map();
+ for(const e of events){
+  if(n.db.prepare('SELECT 1 FROM task_notification_events WHERE id=?').get(e.id))continue;
+  const b=n.db.prepare('SELECT * FROM notification_bindings WHERE task_id=?').get(e.task_id);
+  if(!n.valid(b)||!JSON.parse(b.policy).events.includes(e.category)){
+   n.db.prepare('INSERT OR IGNORE INTO task_notification_events VALUES (?,?,?,?,?,NULL)').run(e.id,e.task_id,e.category,n.g.now(),'no_current_notification_grant');continue;
+  }
+  // Only proved provider-level common cause, identical destination + category.
+  const key=JSON.stringify([e.common??e.id,b.target_key,b.route_hash,e.category]);
+  const group=groups.get(key)??[];group.push({...e,b});groups.set(key,group);
+ }
+ for(const group of groups.values())for(let i=0;i<group.length;i+=10){const members=group.slice(i,i+10),first=members[0],id='observation-notice-'+digest(members.map(e=>e.id).sort());
+  tx(n.db,()=>{
+   if(n.db.prepare('SELECT 1 FROM task_notification_events WHERE id=?').get(first.id))return;
+   const count=n.db.prepare("SELECT count(*) n FROM task_notifications WHERE task_id=? AND state IN ('queued','leased','dispatching','needs_review')").get(first.task_id).n;
+   if(count>=200){for(const e of members)n.db.prepare('INSERT OR IGNORE INTO task_notification_events VALUES (?,?,?,?,?,NULL)').run(e.id,e.task_id,e.category,n.g.now(),'queue_limit');return;}
+   const names=members.map(e=>n.g.catalog.head(e.task_id).title.slice(0,120)),text=(members.length>1?'本次核对曾记录同一服务问题（最新状态以任务页为准）：'+names.join('、')+'。':'任务「'+names[0]+'」核对记录：')+first.text+'\n可在任务中查看依据、成果或追加指示。';
+   const target=n.config.get(first.b.target_key);
+   n.db.prepare("INSERT INTO task_notifications(id,task_id,binding_revision,target_key,host,route_hash,category,text,state,due,created) VALUES (?,?,?,?,?,?,?,?,'queued',?,?)").run(id,first.task_id,first.b.revision,target.key,target.host,target.route_hash,first.category,text.slice(0,8000),n.g.now(),n.g.now());
+   for(const e of members){n.db.prepare('INSERT OR IGNORE INTO notification_observation_members VALUES (?,?,?)').run(id,e.task_id,e.b.revision);n.db.prepare('INSERT INTO task_notification_events VALUES (?,?,?,?,?,?)').run(e.id,e.task_id,e.category,n.g.now(),'queued',id);}
+  });
+ }
+}
+export function observationGrant(n,id){
+ if(!n.observationGroups)return true;
+ const members=n.db.prepare('SELECT * FROM notification_observation_members WHERE notification_id=?').all(id);
+ if(!members.length)return true;
+ let relevant=false;
+ for(const m of members){
+  const b=n.db.prepare('SELECT * FROM notification_bindings WHERE task_id=?').get(m.task_id);
+  if(!n.valid(b)||b.revision!==m.binding_revision)return false;
+  const e=n.db.prepare('SELECT id,category FROM task_notification_events WHERE delivery_id=? AND task_id=?').get(id,m.task_id);
+  if(e?.category!=='attention'||n.g.observer?.noticeCurrent(m.task_id,e.id)===true)relevant=true;
+ }
+ // Group text is explicitly a historical snapshot. One still-current issue
+ // warrants the batch; all recovered/paused issues suppress it. Never resend.
+ return relevant;
+}

package/bundle/onboarding-cloud-package.js

@@ -34,5 +34,5 @@ export async function cloudPackage(source=path.dirname(fileURLToPath(import.meta
  const pkg=JSON.parse(Buffer.from(files.find(x=>x.path==='plugin/package.json').data,'base64'));
  const compat=JSON.parse(Buffer.from(files.find(x=>x.path==='plugin/compatibility.json').data,'base64'));
  if(pkg.name!=='@mogragsigma/dsh-dual-host-plugin'||pkg.version!==compat.version)fail();
- return {files,manifest,manifestHash,bytes:total,pluginVersion:pkg.version,hostVersion:compat.hostBaseline};
+ return {files,manifest,manifestHash,bytes:total,pluginVersion:pkg.version,hostVersion:(compat.hostCompatibilityPolicy?.standalonePinnedHost??compat.hostBaseline)};
 }

package/bundle/onboarding-cloud.js

@@ -98,7 +98,7 @@ export function createOnboardingCloud(ctx,config={},runtime={}){
    }
    const compatibility=JSON.parse(await fs.readFile(new URL('./compatibility.json',import.meta.url),'utf8')),pkg=await cloudPackage(runtime.source);
    const steps=['创建专用安装目录及归属账本','安装固定版本官方 DSH 与依赖','安装自有插件和独立 profile','保护性创建或追加全局规则与 Skill','启动仅 loopback 可访问的独立 Host','核验真实路径、能力与持久回执'];
-   const plan={owner:OWNER,schema:1,id:randomUUID(),createdAt:now(),expiresAt:now()+300000,bindingRevision:b.revision,bindingFingerprint:digest(b),snapshot,hostVersion:compatibility.hostBaseline,pluginVersion:compatibility.version,sourceManifestHash:pkg.manifestHash,sourceFiles:pkg.manifest.length,sourceBytes:pkg.bytes,canStage:preparationAvailable()&&!conflicts.length,preparationOnly:true,steps,conflicts,canApply:false,executor:'pending_implementation',modelEnabled:false,imEnabled:false,repositoryWrites:false};
+   const plan={owner:OWNER,schema:1,id:randomUUID(),createdAt:now(),expiresAt:now()+300000,bindingRevision:b.revision,bindingFingerprint:digest(b),snapshot,hostVersion:(compatibility.hostCompatibilityPolicy?.standalonePinnedHost??compatibility.hostBaseline),pluginVersion:compatibility.version,sourceManifestHash:pkg.manifestHash,sourceFiles:pkg.manifest.length,sourceBytes:pkg.bytes,canStage:preparationAvailable()&&!conflicts.length,preparationOnly:true,steps,conflicts,canApply:false,executor:'pending_implementation',modelEnabled:false,imEnabled:false,repositoryWrites:false};
    plan.fingerprint=digest(plan);const c=credentials();await c.modifyRecord(PLAN,old=>{
     if(old){const p=old.payload;if(old.kind!=='grant'||!p||p.owner!==OWNER||p.schema!==1||!uuid(p.id)||p.canApply!==false||p.executor!=='pending_implementation')fail('CLOUD_PLAN_REVIEW');const {fingerprint,...body}=p;if(digest(body)!==fingerprint)fail('CLOUD_PLAN_REVIEW');}
     return {kind:'grant',payload:plan};

package/bundle/onboarding-file-contract.js

@@ -3,13 +3,14 @@
 // Preserve it for immutable controllers; actual scope is sendRoots (plan.scope.sendRoots).
 // Consumers must not use it to infer inclusion/exclusion of an explicitly selected IM directory.
 import path from 'node:path';
+import {FILE_CONFIG_MAX} from './peer-files.js';
 import {digest} from './onboarding-ssh.js';
 const exact=(v,ks)=>v&&typeof v==='object'&&!Array.isArray(v)&&Object.keys(v).sort().join()===ks.slice().sort().join();
 const uuid=v=>typeof v==='string'&&/^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/.test(v),hex=v=>typeof v==='string'&&/^[a-f0-9]{64}$/.test(v),rev=v=>Number.isSafeInteger(v)&&v>=0&&v<Number.MAX_SAFE_INTEGER-1;
 const fail=()=>{throw Error('ONBOARDING_FILES_RESPONSE_REVIEW');};
 const abs=v=>typeof v==='string'&&v.length<=4096&&v.startsWith('/')&&path.posix.normalize(v)===v&&!/[\x00-\x1f\x7f]/u.test(v);
-function limits(v){if(!exact(v,['maxBytes','queueEntries','chunkBytes','automaticDeletion'])||v.maxBytes!==2097152||v.queueEntries!==64||v.chunkBytes!==49152||v.automaticDeletion!==false)fail();}
-export function fileConfigurationInput(v){if(!exact(v,['enabled','sendRoots','maxBytes'])||typeof v.enabled!=='boolean'||!Array.isArray(v.sendRoots)||v.sendRoots.length>8||!v.sendRoots.every(abs)||new Set(v.sendRoots).size!==v.sendRoots.length||!Number.isSafeInteger(v.maxBytes)||v.maxBytes<1||v.maxBytes>2097152)fail();return v;}
+function limits(v){if(!exact(v,['maxBytes','queueEntries','chunkBytes','automaticDeletion'])||![2097152,FILE_CONFIG_MAX].includes(v.maxBytes)||v.queueEntries!==64||v.chunkBytes!==49152||v.automaticDeletion!==false)fail();}
+export function fileConfigurationInput(v){if(!exact(v,['enabled','sendRoots','maxBytes'])||typeof v.enabled!=='boolean'||!Array.isArray(v.sendRoots)||v.sendRoots.length>8||!v.sendRoots.every(abs)||new Set(v.sendRoots).size!==v.sendRoots.length||!Number.isSafeInteger(v.maxBytes)||v.maxBytes<1||v.maxBytes>FILE_CONFIG_MAX)fail();return v;}
 function scope(s){if(!exact(s,['runtimeId','role','namespace','root','rootIdentity','sendRoots','receiveRoot','maxBytes'])||!uuid(s.runtimeId)||s.role!=='cloud'||s.namespace!=='managed-'+s.runtimeId||!abs(s.root)||path.posix.basename(s.root)!==s.runtimeId||!/^\d+:\d+$/.test(s.rootIdentity)||s.receiveRoot!==s.root+'/files/inbox'||!Array.isArray(s.sendRoots)||!s.sendRoots.length||s.sendRoots.some(x=>!exact(x,['path','identity'])||!abs(x.path)||typeof x.identity!=='string'||!(x.path===s.root+'/files/outbox'?x.identity==='owned-outbox':/^\d+:\d+$/.test(x.identity))))fail();fileConfigurationInput({enabled:true,sendRoots:s.sendRoots.map(x=>x.path),maxBytes:s.maxBytes});}
 export function cloudFilePlan(v){if(v?.kind==='scope_migration')return cloudFileMigrationPlan(v);if(!exact(v,['id','expectedRevision','enabled','scope','expiresAt','fingerprint','contract','limits','writes','modelRequests','imTemporaryRootsIncluded','repositoryWriteAuthorized','executionAuthorized'])||v.contract!==2||!uuid(v.id)||!rev(v.expectedRevision)||typeof v.enabled!=='boolean'||!Number.isSafeInteger(v.expiresAt)||!hex(v.fingerprint)||v.writes!==0||v.modelRequests!==0||v.imTemporaryRootsIncluded!==false||v.repositoryWriteAuthorized!==false||v.executionAuthorized!==false)fail();scope(v.scope);limits(v.limits);return v;}
 export function fileMigrationInput(v){if(!exact(v,['sendRoots','maxBytes']))fail();fileConfigurationInput({...v,enabled:false});return v;}

package/bundle/onboarding-file-transfer.js

@@ -3,7 +3,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import {randomUUID} from 'node:crypto';
 import {credentialKey} from '@deepseek-ai/dsh-credentials';
-import {PeerFiles,FILE_MAX} from './peer-files.js';
+import {PeerFiles,FILE_MAX,FILE_CONFIG_MAX} from './peer-files.js';
 import {FileRoot} from './peer-file-fs.js';
 import {migrationSnapshot,migrateFileScope} from './peer-file-migration.js';
 import {fileQueueList,fileQueuePlan,fileQueueReceipt,fileQueueClosed,closeFileQueuePlan,applyFileQueuePlan} from './peer-file-review.js';
@@ -11,7 +11,7 @@ import {digest} from './onboarding-ssh.js';
 const owner='dsh-dual-host-file-transfer',exact=(v,ks)=>v&&typeof v==='object'&&!Array.isArray(v)&&Object.keys(v).sort().join()===ks.slice().sort().join();
 const uuid=v=>typeof v==='string'&&/^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/.test(v),hex=v=>typeof v==='string'&&/^[a-f0-9]{64}$/.test(v);
 const fail=c=>{throw Error('ONBOARDING_FILES_'+c);},within=(a,b)=>a===b||a.startsWith(b+path.sep);
-const limits={maxBytes:FILE_MAX,queueEntries:64,chunkBytes:48*1024,automaticDeletion:false};
+const limits={maxBytes:FILE_CONFIG_MAX,queueEntries:64,chunkBytes:48*1024,automaticDeletion:false};
 // The outbox contains user input, not executable runtime state. Recognize only our
 // exact private marker; callers must still validate the directory itself. Never
 // traverse, chmod or adopt its contents here: PeerFiles validates each send.
@@ -29,7 +29,7 @@ export function createOnboardingFileTransfer({g,root,credentials,protectedRoots=
  function inspectOwned(){base.check();if(!fs.existsSync(folder))return;owned(folder,true);owned(path.join(folder,'owner.json'),false);if(fs.readFileSync(path.join(folder,'owner.json'),'utf8')!==marker)fail('PATH_REVIEW');for(const p of [outbox,inbox])if(fs.existsSync(p))owned(p,true);}
  function makeOwned(){inspectOwned();if(!fs.existsSync(folder)){fs.mkdirSync(folder,{mode:0o700});fs.writeFileSync(path.join(folder,'owner.json'),marker,{flag:'wx',mode:0o600});}for(const p of [outbox,inbox]){try{fs.mkdirSync(p,{mode:0o700});}catch(e){if(e.code!=='EEXIST')throw e;}owned(p,true);}}
  function scope(roots,maxBytes){
-  ready();inspectOwned();if(!Array.isArray(roots)||roots.length>8||!Number.isSafeInteger(maxBytes)||maxBytes<1||maxBytes>FILE_MAX)fail('ARGUMENTS');
+  ready();inspectOwned();if(!Array.isArray(roots)||roots.length>8||!Number.isSafeInteger(maxBytes)||maxBytes<1||maxBytes>FILE_CONFIG_MAX)fail('ARGUMENTS');
   const selected=(roots.length?roots:[outbox]).map(p=>{
    if(typeof p!=='string'||p.length>4096||!path.isAbsolute(p)||path.resolve(p)!==p||/[\x00-\x1f\x7f]/u.test(p))fail('SOURCE_REVIEW');
    if(p===outbox)return {path:p,identity:'owned-outbox'};
@@ -39,7 +39,7 @@ export function createOnboardingFileTransfer({g,root,credentials,protectedRoots=
   if(new Set(selected.map(x=>x.path)).size!==selected.length||selected.some((a,i)=>selected.some((b,j)=>i!==j&&within(a.path,b.path))))fail('SOURCE_OVERLAP');
   return {runtimeId,role,namespace,root,rootIdentity:base.id,sendRoots:selected,receiveRoot:inbox,maxBytes};
  }
- function checkedScope(s){if(!exact(s,['runtimeId','role','namespace','root','rootIdentity','sendRoots','receiveRoot','maxBytes'])||s.runtimeId!==runtimeId||s.role!==role||s.namespace!==namespace||s.root!==root||s.rootIdentity!==base.id||s.receiveRoot!==inbox||!Array.isArray(s.sendRoots)||!s.sendRoots.length||s.sendRoots.length>8||s.sendRoots.some(x=>!exact(x,['path','identity'])||typeof x.path!=='string'||!path.isAbsolute(x.path)||path.resolve(x.path)!==x.path||typeof x.identity!=='string'||!(x.path===outbox?x.identity==='owned-outbox':/^\d+:\d+$/.test(x.identity)))||!Number.isSafeInteger(s.maxBytes)||s.maxBytes<1||s.maxBytes>FILE_MAX)fail('LEDGER_REVIEW');return s;}
+ function checkedScope(s){if(!exact(s,['runtimeId','role','namespace','root','rootIdentity','sendRoots','receiveRoot','maxBytes'])||s.runtimeId!==runtimeId||s.role!==role||s.namespace!==namespace||s.root!==root||s.rootIdentity!==base.id||s.receiveRoot!==inbox||!Array.isArray(s.sendRoots)||!s.sendRoots.length||s.sendRoots.length>8||s.sendRoots.some(x=>!exact(x,['path','identity'])||typeof x.path!=='string'||!path.isAbsolute(x.path)||path.resolve(x.path)!==x.path||typeof x.identity!=='string'||!(x.path===outbox?x.identity==='owned-outbox':/^\d+:\d+$/.test(x.identity)))||!Number.isSafeInteger(s.maxBytes)||s.maxBytes<1||s.maxBytes>FILE_CONFIG_MAX)fail('LEDGER_REVIEW');return s;}
  function record(r){if(!r)return null;const p=r.payload;
   if(r.kind!=='grant'||!exact(p,['owner','schema','revision','operation','planHash','enabled','scope','updatedAt',...(p?.schema===2?['transition']:[])])||p.owner!==owner||![1,2].includes(p.schema)||!Number.isSafeInteger(p.revision)||p.revision<1||p.revision>=Number.MAX_SAFE_INTEGER-1||!uuid(p.operation)||!hex(p.planHash)||typeof p.enabled!=='boolean'||!Number.isSafeInteger(p.updatedAt))fail('LEDGER_REVIEW');
   if(p.scope===null){if(p.enabled||p.schema===2)fail('LEDGER_REVIEW');return p;}checkedScope(p.scope);

package/bundle/onboarding-native-probe.js

@@ -15,7 +15,7 @@ export function apply(ctx,c){
   try{
    const roster=await ctx.agentPresets.list(),compat=JSON.parse(await fs.readFile(new URL('./compatibility.json',import.meta.url)));
    const require=createRequire(import.meta.url),host=JSON.parse(await fs.readFile(require.resolve('@deepseek-ai/dsh/package.json')));
-   if(host.version!==compat.hostBaseline)throw Error('NATIVE_HOST_VERSION_REVIEW');
+   if(host.version!==(compat.hostCompatibilityPolicy?.standalonePinnedHost??compat.hostBaseline))throw Error('NATIVE_HOST_VERSION_REVIEW');
    for(const preset of ['standard','ptc','cordis','minimal']){
     if(!roster.some(x=>x.id===preset))throw Error('NATIVE_PRESET_MISSING');
     stage=preset+':create';const h=await ctx.agents.withoutInitiator(()=>ctx.agents.create({sessionId:'onboarding-check-'+c.nonce+'-'+preset,meta:{cwd:c.workspace,agentPreset:preset},agentOptions:ctx.agentDefaultModel.currentSelection(),setup:async ac=>{await ctx.agentPresets.mount(ac,preset);}}));

package/bundle/onboarding-runtime-activation.js

@@ -49,7 +49,7 @@ export function createRuntimeActivation(api,q,j,{repair,inventory,source,compat,
  }
  function admission(){
   const r=j.restart,n=j.nativeReceipt,rows=n?.rows;
-  if((normal?!['committed','rolled_back'].includes(versionSubject.state):!repair||repair.state!=='committed')||!uuid(r?.id)||r.state!=='ready'||r.nativeResumeAcknowledged!==true||r.consentContract!==1||!Number.isSafeInteger(r.createdAt)||!normal&&r.createdAt<repair.updatedAt||!Number.isSafeInteger(r.completedAt)||r.completedAt<r.createdAt||hash(r.host??null)!==hash(j.host??null)||r.nonce!==j.nativeNonce||j.state!=='host_ready'||n?.ok!==true||n.pid!==j.host?.pid||n.nonce!==j.nativeNonce||n.hostVersion!==compat.hostBaseline||n.modelAttempts!==0||n.modelAttemptScope!=='inspection_agents_only')fail('RUNTIME_ACTIVATION_RESTART_REQUIRED');
+  if((normal?!['committed','rolled_back'].includes(versionSubject.state):!repair||repair.state!=='committed')||!uuid(r?.id)||r.state!=='ready'||r.nativeResumeAcknowledged!==true||r.consentContract!==1||!Number.isSafeInteger(r.createdAt)||!normal&&r.createdAt<repair.updatedAt||!Number.isSafeInteger(r.completedAt)||r.completedAt<r.createdAt||hash(r.host??null)!==hash(j.host??null)||r.nonce!==j.nativeNonce||j.state!=='host_ready'||n?.ok!==true||n.pid!==j.host?.pid||n.nonce!==j.nativeNonce||n.hostVersion!==(compat.hostCompatibilityPolicy?.standalonePinnedHost??compat.hostBaseline)||n.modelAttempts!==0||n.modelAttemptScope!=='inspection_agents_only')fail('RUNTIME_ACTIVATION_RESTART_REQUIRED');
   if(!Array.isArray(rows)||rows.length!==4||new Set(rows.map(x=>x.preset)).size!==4)fail('RUNTIME_ACTIVATION_ADMISSION_REVIEW');
   if(versionContext&&n.pluginVersion!==versionContext.version)fail('RUNTIME_ACTIVATION_VERSION_REVIEW');
   for(const preset of ['standard','ptc','cordis','minimal']){

package/bundle/onboarding-runtime-extension.js

@@ -47,12 +47,12 @@ async function runtimePlan(q){
  const im=q.im===true,prefix=im?'runtime-im':'runtime';
  const pkg=JSON.parse((await regular(path.join(q.root,'plugin',prefix+'-package.json')))?.data??'null'),lock=JSON.parse((await regular(path.join(q.root,'plugin',prefix+'-lock.json')))?.data??'null');
  const compat=JSON.parse((await regular(path.join(q.root,'plugin/compatibility.json'))).data);
- if(pkg?.private!==true||pkg.name!=='dsh-dual-host-isolated-runtime'||pkg.dependencies?.['@deepseek-ai/dsh']!==compat.hostBaseline||lock?.lockfileVersion!==3||hash(lock.packages?.['']?.dependencies)!==hash(pkg.dependencies)||pkg.scripts)fail('RUNTIME_LOCK_REVIEW');
+ if(pkg?.private!==true||pkg.name!=='dsh-dual-host-isolated-runtime'||pkg.dependencies?.['@deepseek-ai/dsh']!==(compat.hostCompatibilityPolicy?.standalonePinnedHost??compat.hostBaseline)||lock?.lockfileVersion!==3||hash(lock.packages?.['']?.dependencies)!==hash(pkg.dependencies)||pkg.scripts)fail('RUNTIME_LOCK_REVIEW');
  for(const [name,p] of Object.entries(lock.packages)){if(!name)continue;if(!name.startsWith('node_modules/')||p.link||p.resolved&&!/^https:\/\/registry\.npmjs\.org\/[^?#\s]+$/.test(p.resolved)||!p.integrity||!/^sha512-[A-Za-z0-9+/]+={0,2}$/.test(p.integrity))fail('RUNTIME_LOCK_REVIEW');}
  if(im&&(compat.onboardingOptionalIm!==1||pkg.dependencies?.['@xmanrui/dsh-im']!==(compat.imOptional?.installationVersion??compat.imOptional?.testedVersion))||!im&&pkg.dependencies?.['@xmanrui/dsh-im'])fail('RUNTIME_OPTIONAL_IM_REVIEW');
  const systemLock=await runtimeTool('/usr/bin/flock').catch(()=>null);if(!systemLock||systemLock.uid!==0||(systemLock.mode&0o022)!==0)fail('RUNTIME_LOCK_UNAVAILABLE');
  const d=await fs.statfs(q.root);if(Number(d.bavail)*Number(d.bsize)<2147483648)fail('RUNTIME_DISK_LOW');
- const plan={schema:1,operationId:q.operationId,sourceManifestHash:s.owner.manifestHash,root:q.root,hostVersion:compat.hostBaseline,node:{path:process.execPath,version:process.versions.node,...identity(await fs.stat(process.execPath))},npm,systemLock,packageHash:hash(pkg),lockHash:hash(lock),registry:'https://registry.npmjs.org',optionalIm:im?{package:'@xmanrui/dsh-im',version:pkg.dependencies['@xmanrui/dsh-im'],loaded:true,botConnection:false,credentialTransfer:false}:null,nativeHost:{listen:'127.0.0.1',port:0,rules:true,skills:true,officialSupportScript:'@deepseek-ai/dsh-subprocess-local/scripts/ensure-spawn-helper.mjs',gatewayBound:false},lifecycleScripts:false,modelEnabled:false,imEnabled:false,repositoryWrites:false,hostStarted:false};
+ const plan={schema:1,operationId:q.operationId,sourceManifestHash:s.owner.manifestHash,root:q.root,hostVersion:(compat.hostCompatibilityPolicy?.standalonePinnedHost??compat.hostBaseline),node:{path:process.execPath,version:process.versions.node,...identity(await fs.stat(process.execPath))},npm,systemLock,packageHash:hash(pkg),lockHash:hash(lock),registry:'https://registry.npmjs.org',optionalIm:im?{package:'@xmanrui/dsh-im',version:pkg.dependencies['@xmanrui/dsh-im'],loaded:true,botConnection:false,credentialTransfer:false}:null,nativeHost:{listen:'127.0.0.1',port:0,rules:true,skills:true,officialSupportScript:'@deepseek-ai/dsh-subprocess-local/scripts/ensure-spawn-helper.mjs',gatewayBound:false},lifecycleScripts:false,modelEnabled:false,imEnabled:false,repositoryWrites:false,hostStarted:false};
  return {...plan,fingerprint:hash(plan)};
 }
 function runtimeEnv(q){const r=runtimeRoot(q),home=path.join(r,'.bootstrap-home');return {HOME:home,PATH:path.dirname(process.execPath)+':/usr/bin:/bin',SHELL:'/bin/sh',LANG:'C.UTF-8',XDG_CONFIG_HOME:path.join(home,'config'),XDG_CACHE_HOME:path.join(home,'cache'),XDG_DATA_HOME:path.join(home,'data'),NPM_CONFIG_USERCONFIG:path.join(r,'npm-user.ini'),NPM_CONFIG_GLOBALCONFIG:path.join(r,'npm-global.ini'),NPM_CONFIG_CACHE:path.join(r,'.npm-cache'),NPM_CONFIG_UPDATE_NOTIFIER:'false'};}

package/bundle/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@mogragsigma/dsh-dual-host-plugin",
-  "version": "0.33.3",
+  "version": "2.0.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@mogragsigma/dsh-dual-host-plugin",
-      "version": "0.33.3",
+      "version": "2.0.0",
       "license": "SEE LICENSE IN LICENSE",
       "dependencies": {
         "@js-temporal/polyfill": "0.5.1",
@@ -14,24 +14,24 @@
         "koffi": "3.1.1"
       },
       "engines": {
-        "dsh": "0.2.1-rc.5"
+        "dsh": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0"
       },
       "peerDependencies": {
-        "@deepseek-ai/dsh-agent": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-credentials": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-http-proxy": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-llm": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-llm-deepseek": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-llm-pi-ai": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-web-fetch-http": "0.2.1-rc.5",
-        "@deepseek-ai/dsh-web-search-deepseek": "0.2.1-rc.5",
-        "@earendil-works/pi-ai": "1.3.0"
+        "@deepseek-ai/dsh-llm": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-llm-deepseek": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-llm-pi-ai": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@earendil-works/pi-ai": ">=1.3.0 <1.6.0",
+        "@deepseek-ai/dsh-agent": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-credentials": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-http-proxy": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-web-fetch-http": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+        "@deepseek-ai/dsh-web-search-deepseek": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0"
       },
       "peerDependenciesMeta": {
-        "@deepseek-ai/dsh-agent": {
+        "@deepseek-ai/dsh-llm-pi-ai": {
           "optional": true
         },
-        "@deepseek-ai/dsh-credentials": {
+        "@earendil-works/pi-ai": {
           "optional": true
         },
         "@deepseek-ai/dsh-http-proxy": {
@@ -40,19 +40,19 @@
         "@deepseek-ai/dsh-llm": {
           "optional": true
         },
-        "@deepseek-ai/dsh-llm-deepseek": {
+        "@deepseek-ai/dsh-web-search-deepseek": {
           "optional": true
         },
-        "@deepseek-ai/dsh-llm-pi-ai": {
+        "@deepseek-ai/dsh-agent": {
           "optional": true
         },
         "@deepseek-ai/dsh-web-fetch-http": {
           "optional": true
         },
-        "@deepseek-ai/dsh-web-search-deepseek": {
+        "@deepseek-ai/dsh-credentials": {
           "optional": true
         },
-        "@earendil-works/pi-ai": {
+        "@deepseek-ai/dsh-llm-deepseek": {
           "optional": true
         }
       }

package/bundle/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mogragsigma/dsh-dual-host-plugin",
-  "version": "0.33.3",
+  "version": "2.0.0",
   "type": "module",
   "exports": {
     ".": "./native-entry.js",
@@ -8,7 +8,7 @@
     "./native-tools": "./native-tools.js",
     "./client": "./workbench-client.js"
   },
-  "description": "Local and cloud DSH coordination with protected onboarding, task approval and controlled artifacts",
+  "description": "Single-owner native cloud tasks for DeepSeek Harness, with local and IM entry, continuous follow-up and verifiable artifacts",
   "files": [
     "*.js",
     "cordis.patch.yml",
@@ -33,7 +33,9 @@
     "LICENSE",
     "LICENSE.en.md",
     "THIRD_PARTY_NOTICES.md",
-    "ASSET_NOTICE.md"
+    "ASSET_NOTICE.md",
+    "SETUP.md",
+    "configuration-v2.json"
   ],
   "dsh": {
     "bundle": {
@@ -56,15 +58,15 @@
     "koffi": "3.1.1"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-llm": "0.2.1-rc.5",
-    "@deepseek-ai/dsh-llm-deepseek": "0.2.1-rc.5",
-    "@deepseek-ai/dsh-llm-pi-ai": "0.2.1-rc.5",
-    "@earendil-works/pi-ai": "1.3.0",
-    "@deepseek-ai/dsh-agent": "0.2.1-rc.5",
-    "@deepseek-ai/dsh-credentials": "0.2.1-rc.5",
-    "@deepseek-ai/dsh-http-proxy": "0.2.1-rc.5",
-    "@deepseek-ai/dsh-web-fetch-http": "0.2.1-rc.5",
-    "@deepseek-ai/dsh-web-search-deepseek": "0.2.1-rc.5"
+    "@deepseek-ai/dsh-llm": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+    "@deepseek-ai/dsh-llm-deepseek": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+    "@deepseek-ai/dsh-llm-pi-ai": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+    "@earendil-works/pi-ai": ">=1.3.0 <1.6.0",
+    "@deepseek-ai/dsh-agent": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+    "@deepseek-ai/dsh-credentials": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+    "@deepseek-ai/dsh-http-proxy": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+    "@deepseek-ai/dsh-web-fetch-http": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0",
+    "@deepseek-ai/dsh-web-search-deepseek": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-llm-pi-ai": {
@@ -113,9 +115,9 @@
     "dsh-plugin",
     "deepseek-harness",
     "dual-host",
-    "task-approval"
+    "cloud-tasks"
   ],
   "engines": {
-    "dsh": "0.2.1-rc.5"
+    "dsh": ">=0.2.1-rc.5 <0.2.2-0 || >=0.2.2-rc.1 <0.2.3-0"
   }
 }

package/bundle/peer-file-review.js

@@ -4,7 +4,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import {FileRoot,fileHash} from './peer-file-fs.js';
-import {FILE_MAX,FILE_CHUNK,fileMetadata} from './peer-files.js';
+import {FILE_CONFIG_MAX as FILE_MAX,FILE_CHUNK,fileMetadata} from './peer-files.js';
 import {fileScopeConfig} from './peer-file-migration.js';
 import {digest} from './onboarding-ssh.js';
 const json=JSON.stringify,fail=c=>{throw Error('ONBOARDING_FILES_'+c);};

package/bundle/peer-files.js

@@ -1,11 +1,14 @@
 import fs from 'node:fs';
 import {join} from 'node:path';
 import {FileRoot,fileHash,fileName,sourceFile} from './peer-file-fs.js';
-export const FILE_CHUNK=48*1024,FILE_MAX=2*1024*1024;
+export const FILE_CHUNK=48*1024,FILE_MAX=32*1024*1024,FILE_CONFIG_MAX=512*1024*1024;
+// FILE_MAX is the fresh-install default, not a universal transfer-size promise.
+// Preserve an existing implicit limit; expanding a persisted scope remains explicit.
 const other=r=>r==='local'?'cloud':'local',jid=x=>typeof x==='string'&&/^file-[a-f0-9]{64}$/.test(x),task=x=>typeof x==='string'&&/^task-[a-f0-9-]{36}$/.test(x);
 const json=JSON.stringify,fail=c=>{throw Error('PEER_FILE_'+c);};
 const same=(a,b)=>json(a)===json(b);
 export function fileMetadata(a,namespace,origin,max){
+ if(Number.isSafeInteger(a?.size)&&a.size>max)fail('TOO_LARGE');
  const keys=['v','namespace','id','task_id','from','to','name','size','sha256','created_at'];
  if(!a||typeof a!=='object'||Object.keys(a).some(k=>!keys.includes(k))||a.v!==1||a.namespace!==namespace||!jid(a.id)||!task(a.task_id)||a.from!==origin||a.to!==other(origin)||!Number.isSafeInteger(a.size)||a.size<0||a.size>max||!(/^[a-f0-9]{64}$/.test(a.sha256??''))||!Number.isSafeInteger(a.created_at)||a.created_at<0)fail('METADATA_INVALID');
  fileName(a.name);return Object.fromEntries(keys.map(k=>[k,a[k]]));
@@ -15,9 +18,10 @@ function decode(s){if(typeof s!=='string'||s.length>FILE_CHUNK*4/3||!s.length)fa
 export class PeerFiles {
  constructor(g,c){
   if(!c||c.enabled!==true||Object.keys(c).some(k=>!['enabled','sendRoots','receiveRoot','maxBytes'].includes(k))||!Array.isArray(c.sendRoots)||!c.sendRoots.length||c.sendRoots.length>8)fail('CONFIG_INVALID');
-  this.g=g;this.db=g.db;this.role=g.c.role;this.namespace=g.c.namespace;this.max=c.maxBytes??FILE_MAX;
+  this.g=g;this.db=g.db;this.role=g.c.role;this.namespace=g.c.namespace;const retained=this.db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='peer_file_owner'").get()?this.db.prepare('SELECT config FROM peer_file_owner WHERE id=1').get():null;
+  this.max=c.maxBytes??(retained?JSON.parse(retained.config).max:FILE_MAX);
   if(!['local','cloud'].includes(this.role)||typeof this.namespace!=='string'||!this.namespace||this.namespace.length>128)fail('CONFIG_INVALID');
-  if(!Number.isSafeInteger(this.max)||this.max<1||this.max>FILE_MAX)fail('CONFIG_INVALID');
+  if(!Number.isSafeInteger(this.max)||this.max<1||this.max>FILE_CONFIG_MAX)fail('CONFIG_INVALID');
   this.roots=c.sendRoots.map(p=>new FileRoot(p));this.receive=new FileRoot(c.receiveRoot);
   const dir=join(g.c.stateDir,'peer-files');fs.mkdirSync(dir,{recursive:true,mode:0o700});this.spool=new FileRoot(dir);
   this.db.exec(`CREATE TABLE IF NOT EXISTS peer_file_owner(id INTEGER PRIMARY KEY,config TEXT NOT NULL);
@@ -149,7 +153,7 @@ export class PeerFiles {
   const out=this.db.prepare('SELECT * FROM peer_file_out').all().filter(r=>JSON.parse(r.meta).task_id===task_id).map(r=>this.receipt(r));
   const incoming=this.db.prepare('SELECT * FROM peer_file_in').all().filter(r=>JSON.parse(r.meta).task_id===task_id).map(r=>{
    const m=JSON.parse(r.meta);let availability='not_received';
-   if(r.state==='received'){try{const b=this.receive.read([m.task_id,m.id,m.name],FILE_MAX);availability=b.length===m.size&&fileHash(b)===m.sha256?'available':'changed';}catch{availability='missing_or_unsafe';}}
+   if(r.state==='received'){try{const b=this.receive.read([m.task_id,m.id,m.name],m.size);availability=b.length===m.size&&fileHash(b)===m.sha256?'available':'changed';}catch(e){availability=e.message==='PEER_FILE_TOO_LARGE'?'changed':'missing_or_unsafe';}}
    return {...this.receipt(r),path:r.path,availability,checked_at:this.g.now()};
   });return {host:this.role,sent:out,received:incoming,grants_execution:false};
  }

package/bundle/recovery.js

@@ -3,7 +3,7 @@ import {randomUUID} from 'node:crypto';
 export const permanentErrors=new Set(['INGRESS_ID_CONFLICT','TASK_CONTENT_CONFLICT','INVALID_TASK_ENVELOPE','INVALID_TASK_TITLE','INVALID_CONTEXT_SOURCE','CONTEXT_ORIGIN_MISMATCH','REFERENCE_NOT_IN_USER_CONTEXT','UNSUPPORTED_REFERENCE','CONTEXT_LIMIT','INVALID_INGRESS','INVALID_GOAL','INVALID_SUBMISSION','AUTH_DENIED','METHOD_DENIED']);
 export function safeError(e){const s=e?.message;return permanentErrors.has(s)?s:['DELIVERY_TIMEOUT','SEND_TIMEOUT'].includes(s)?s:'TRANSIENT_FAILURE';}
 export function bounded(p,ms,code){let t;return Promise.race([p,new Promise((_,reject)=>{t=setTimeout(()=>reject(Error(code)),ms);})]).finally(()=>clearTimeout(t));}
-export function tx(db,fn){db.exec('BEGIN IMMEDIATE');try{const r=fn();db.exec('COMMIT');return r;}catch(e){db.exec('ROLLBACK');throw e;}}
+export function tx(db,fn){db.exec('BEGIN IMMEDIATE');try{const r=fn();db.exec('COMMIT');return r;}catch(e){try{db.exec('ROLLBACK');}catch{}throw e;}}
 export function migrateRecovery(db){
  tx(db,()=>{
   for(const table of ['submissions','receipts','notices']){

package/bundle/repository-gitee.js

@@ -54,6 +54,18 @@ export class GiteeReadOnly {
   if(!Number.isSafeInteger(meta.id)||meta.id<=0||typeof meta.full_name!=='string'||typeof meta.private!=='boolean'||repositoryURL('https://gitee.com/'+meta.full_name).url!==r.url)throw Error('REPOSITORY_IDENTITY_MISMATCH');
   return {provider:'gitee',repository_id:meta.id,url:r.url,private:meta.private};
  }
+ async issue(snapshot,number){
+  const r=repositoryURL(snapshot.url);
+  if(!Number.isSafeInteger(snapshot.repository_id)||snapshot.repository_id<=0||typeof number!=='string'||!/^I[A-Z0-9]{1,20}$/.test(number))throw Error('REPOSITORY_ISSUE_INVALID');
+  if((await this.identity(r.url)).repository_id!==snapshot.repository_id)throw Error('REPOSITORY_IDENTITY_MISMATCH');
+  const item=await this.get(`/repos/${encodeURIComponent(r.owner)}/${encodeURIComponent(r.repo)}/issues/${number}`,131072);
+  const at=Date.parse(item.updated_at),url=r.url+'/issues/'+number;item.body??='';
+  if(!Number.isSafeInteger(item.id)||item.id<=0||item.number!==number||item.html_url!==url||!Number.isSafeInteger(at)||at<0||
+   !['open','progressing','closed','rejected'].includes(item.state)||typeof item.title!=='string'||typeof item.body!=='string'||
+   Buffer.byteLength(item.title+'\n'+item.body)>65536||!Number.isSafeInteger(item.user?.id)||item.user.id<=0)throw Error('REPOSITORY_ISSUE_RESPONSE_INVALID');
+  return {id:item.id,number,state:item.state,updated_at:at,title:item.title,body:item.body,url,
+   actor:{id:String(item.user.id),kind:item.user.type==='User'?'human':item.user.type==='Bot'?'bot':'unknown'}};
+ }
  async commit(snapshot,expected){
   const r=repositoryURL(snapshot.url),path=`/repos/${encodeURIComponent(r.owner)}/${encodeURIComponent(r.repo)}`;
   if(!/^[a-f0-9]{40}$/.test(snapshot.base_sha??'')||![expected?.tree_oid,expected?.parent_oid].every(x=>/^[a-f0-9]{40}$/.test(x??'')))throw Error('ARTIFACT_PROVIDER_COMMIT_INVALID');

package/bundle/repository-managed.js

@@ -43,4 +43,5 @@ export class ManagedGiteeReadOnly {
  identity(...a){return this.read('identity',a);}
  file(...a){return this.read('file',a);}
  commit(...a){return this.read('commit',a);}
+ issue(...a){return this.read('issue',a);}
 }