@ran-sh/dsh-crew 0.3.5 → 0.3.7

package/src/readiness-matrix.mjs

@@ -1,169 +1,169 @@
-// Conservative release/environment readiness matrix.
-//
-// A row is PASS only when the caller supplies direct evidence for that row.
-// Missing evidence is NOT_RUN, not an inferred success. Runtime observations
-// (Hub handshake / catalog read) are intentionally separate from execution
-// verification (real worker, reviewer, cancellation, timeout, etc.).
-
-export const READINESS_STATUSES = Object.freeze(['PASS', 'FAIL', 'BLOCKED', 'SKIP', 'NOT_RUN']);
-
-export const READINESS_REASON_CODES = Object.freeze({
-  LIVE_CHECK_PASSED: 'LIVE_CHECK_PASSED',
-  HUB_UNREACHABLE: 'HUB_UNREACHABLE',
-  HUB_INCOMPATIBLE: 'HUB_INCOMPATIBLE',
-  PROVIDER_CATALOG_RESOLVED: 'PROVIDER_CATALOG_RESOLVED',
-  PROVIDER_CATALOG_UNAVAILABLE: 'PROVIDER_CATALOG_UNAVAILABLE',
-  PROVIDER_CATALOG_HEALTH_WARNING: 'PROVIDER_CATALOG_HEALTH_WARNING',
-  PROVIDER_CATALOG_NOT_REQUIRED: 'PROVIDER_CATALOG_NOT_REQUIRED',
-  PROVIDER_MODE_UNKNOWN: 'PROVIDER_MODE_UNKNOWN',
-  NO_CI_EVIDENCE: 'NO_CI_EVIDENCE',
-  NO_EXECUTION_EVIDENCE: 'NO_EXECUTION_EVIDENCE',
-  CREDENTIAL_STATUS_NOT_PROBED: 'CREDENTIAL_STATUS_NOT_PROBED',
-  EVIDENCE_REPORTED: 'EVIDENCE_REPORTED',
-});
-
-const TARGET_ROWS = Object.freeze([
-  ['linux_deterministic', 'ci'],
-  ['windows_regressions', 'ci'],
-  ['macos_smoke', 'ci'],
-  ['hub_compatibility', 'live-runtime'],
-  ['provider_catalog', 'live-runtime'],
-  ['deepseek_flash', 'real-execution'],
-  ['deepseek_pro', 'real-execution'],
-  ['opencode_go_mimo_qwen', 'real-execution'],
-  ['reviewer_pipeline', 'real-execution'],
-  ['cancellation_timeout_escalation', 'real-execution'],
-  ['standalone_official', 'real-execution'],
-]);
-
-function baseRow(id, category, status, reasonCode, evidenceSource = 'none', extra = {}) {
-  return {
-    id,
-    category,
-    status,
-    reason_code: reasonCode,
-    evidence_source: evidenceSource,
-    ...extra,
-  };
-}
-
-function normalizeEvidence(row, evidence) {
-  if (!evidence || typeof evidence !== 'object') return row;
-  if (!READINESS_STATUSES.includes(evidence.status)) return row;
-  const reason = typeof evidence.reason_code === 'string' && evidence.reason_code.trim()
-    ? evidence.reason_code.trim()
-    : READINESS_REASON_CODES.EVIDENCE_REPORTED;
-  const source = typeof evidence.evidence_source === 'string' && evidence.evidence_source.trim()
-    ? evidence.evidence_source.trim()
-    : 'reported-evidence';
-  return {
-    ...row,
-    status: evidence.status,
-    reason_code: reason,
-    evidence_source: source,
-    ...(typeof evidence.evidence_ref === 'string' && evidence.evidence_ref.trim()
-      ? { evidence_ref: evidence.evidence_ref.trim() }
-      : {}),
-  };
-}
-
-function defaultRows() {
-  return Object.fromEntries(TARGET_ROWS.map(([id, category]) => {
-    const reason = category === 'ci'
-      ? READINESS_REASON_CODES.NO_CI_EVIDENCE
-      : id === 'standalone_official'
-        ? READINESS_REASON_CODES.CREDENTIAL_STATUS_NOT_PROBED
-        : READINESS_REASON_CODES.NO_EXECUTION_EVIDENCE;
-    return [id, baseRow(id, category, 'NOT_RUN', reason)];
-  }));
-}
-
-/**
- * Build a secret-free readiness matrix from direct runtime observations plus
- * optional trusted evidence supplied by a higher layer.
- *
- * `evidence` is deliberately inert metadata: this module never reads files,
- * credentials, GitHub, provider config, or the network on its own.
- */
-export function buildReadinessMatrix({
-  platform = process.platform,
-  hubCompatibility = null,
-  workerProviderMode = null,
-  providerCatalogChecked = false,
-  providerCatalogOk = false,
-  evidence = {},
-} = {}) {
-  const rows = defaultRows();
-
-  if (hubCompatibility?.compatible === true) {
-    rows.hub_compatibility = baseRow(
-      'hub_compatibility', 'live-runtime', 'PASS',
-      READINESS_REASON_CODES.LIVE_CHECK_PASSED, 'hub-handshake',
-      {
-        runtime_version: hubCompatibility.runtime_version ?? null,
-        protocol_version: hubCompatibility.protocol_version ?? null,
-      },
-    );
-  } else if (hubCompatibility?.reachable === true) {
-    rows.hub_compatibility = baseRow(
-      'hub_compatibility', 'live-runtime', 'FAIL',
-      READINESS_REASON_CODES.HUB_INCOMPATIBLE, 'hub-handshake',
-      { detail_code: hubCompatibility.code ?? null },
-    );
-  } else {
-    rows.hub_compatibility = baseRow(
-      'hub_compatibility', 'live-runtime', 'BLOCKED',
-      READINESS_REASON_CODES.HUB_UNREACHABLE, 'hub-handshake',
-      { detail_code: hubCompatibility?.code ?? null },
-    );
-  }
-
-  if (workerProviderMode == null) {
-    rows.provider_catalog = baseRow(
-      'provider_catalog', 'live-runtime', 'NOT_RUN',
-      READINESS_REASON_CODES.PROVIDER_MODE_UNKNOWN, 'none',
-    );
-  } else if (workerProviderMode === 'deepseek-official') {
-    rows.provider_catalog = baseRow(
-      'provider_catalog', 'live-runtime', 'SKIP',
-      READINESS_REASON_CODES.PROVIDER_CATALOG_NOT_REQUIRED, 'runtime-policy',
-    );
-  } else if (!hubCompatibility?.compatible) {
-    rows.provider_catalog = baseRow(
-      'provider_catalog', 'live-runtime', 'BLOCKED',
-      hubCompatibility?.reachable
-        ? READINESS_REASON_CODES.HUB_INCOMPATIBLE
-        : READINESS_REASON_CODES.HUB_UNREACHABLE,
-      'hub-handshake',
-      { detail_code: hubCompatibility?.code ?? null },
-    );
-  } else if (providerCatalogChecked && providerCatalogOk) {
-    rows.provider_catalog = baseRow(
-      'provider_catalog', 'live-runtime', 'PASS',
-      READINESS_REASON_CODES.PROVIDER_CATALOG_RESOLVED, 'harness-catalog',
-    );
-  } else if (providerCatalogChecked) {
-    rows.provider_catalog = baseRow(
-      'provider_catalog', 'live-runtime', 'FAIL',
-      READINESS_REASON_CODES.PROVIDER_CATALOG_UNAVAILABLE, 'harness-catalog',
-    );
-  }
-
-  for (const [id] of TARGET_ROWS) {
-    rows[id] = normalizeEvidence(rows[id], evidence?.[id]);
-  }
-
-  const ordered = TARGET_ROWS.map(([id]) => rows[id]);
-  const counts = Object.fromEntries(READINESS_STATUSES.map((status) => [
-    status,
-    ordered.filter((row) => row.status === status).length,
-  ]));
-
-  return {
-    schema_version: 1,
-    platform,
-    conservative: true,
-    summary: counts,
-    rows: ordered,
-  };
-}
+// Conservative release/environment readiness matrix.
+//
+// A row is PASS only when the caller supplies direct evidence for that row.
+// Missing evidence is NOT_RUN, not an inferred success. Runtime observations
+// (Hub handshake / catalog read) are intentionally separate from execution
+// verification (real worker, reviewer, cancellation, timeout, etc.).
+
+export const READINESS_STATUSES = Object.freeze(['PASS', 'FAIL', 'BLOCKED', 'SKIP', 'NOT_RUN']);
+
+export const READINESS_REASON_CODES = Object.freeze({
+  LIVE_CHECK_PASSED: 'LIVE_CHECK_PASSED',
+  HUB_UNREACHABLE: 'HUB_UNREACHABLE',
+  HUB_INCOMPATIBLE: 'HUB_INCOMPATIBLE',
+  PROVIDER_CATALOG_RESOLVED: 'PROVIDER_CATALOG_RESOLVED',
+  PROVIDER_CATALOG_UNAVAILABLE: 'PROVIDER_CATALOG_UNAVAILABLE',
+  PROVIDER_CATALOG_HEALTH_WARNING: 'PROVIDER_CATALOG_HEALTH_WARNING',
+  PROVIDER_CATALOG_NOT_REQUIRED: 'PROVIDER_CATALOG_NOT_REQUIRED',
+  PROVIDER_MODE_UNKNOWN: 'PROVIDER_MODE_UNKNOWN',
+  NO_CI_EVIDENCE: 'NO_CI_EVIDENCE',
+  NO_EXECUTION_EVIDENCE: 'NO_EXECUTION_EVIDENCE',
+  CREDENTIAL_STATUS_NOT_PROBED: 'CREDENTIAL_STATUS_NOT_PROBED',
+  EVIDENCE_REPORTED: 'EVIDENCE_REPORTED',
+});
+
+const TARGET_ROWS = Object.freeze([
+  ['linux_deterministic', 'ci'],
+  ['windows_regressions', 'ci'],
+  ['macos_smoke', 'ci'],
+  ['hub_compatibility', 'live-runtime'],
+  ['provider_catalog', 'live-runtime'],
+  ['deepseek_flash', 'real-execution'],
+  ['deepseek_pro', 'real-execution'],
+  ['opencode_go_mimo_qwen', 'real-execution'],
+  ['reviewer_pipeline', 'real-execution'],
+  ['cancellation_timeout_escalation', 'real-execution'],
+  ['standalone_official', 'real-execution'],
+]);
+
+function baseRow(id, category, status, reasonCode, evidenceSource = 'none', extra = {}) {
+  return {
+    id,
+    category,
+    status,
+    reason_code: reasonCode,
+    evidence_source: evidenceSource,
+    ...extra,
+  };
+}
+
+function normalizeEvidence(row, evidence) {
+  if (!evidence || typeof evidence !== 'object') return row;
+  if (!READINESS_STATUSES.includes(evidence.status)) return row;
+  const reason = typeof evidence.reason_code === 'string' && evidence.reason_code.trim()
+    ? evidence.reason_code.trim()
+    : READINESS_REASON_CODES.EVIDENCE_REPORTED;
+  const source = typeof evidence.evidence_source === 'string' && evidence.evidence_source.trim()
+    ? evidence.evidence_source.trim()
+    : 'reported-evidence';
+  return {
+    ...row,
+    status: evidence.status,
+    reason_code: reason,
+    evidence_source: source,
+    ...(typeof evidence.evidence_ref === 'string' && evidence.evidence_ref.trim()
+      ? { evidence_ref: evidence.evidence_ref.trim() }
+      : {}),
+  };
+}
+
+function defaultRows() {
+  return Object.fromEntries(TARGET_ROWS.map(([id, category]) => {
+    const reason = category === 'ci'
+      ? READINESS_REASON_CODES.NO_CI_EVIDENCE
+      : id === 'standalone_official'
+        ? READINESS_REASON_CODES.CREDENTIAL_STATUS_NOT_PROBED
+        : READINESS_REASON_CODES.NO_EXECUTION_EVIDENCE;
+    return [id, baseRow(id, category, 'NOT_RUN', reason)];
+  }));
+}
+
+/**
+ * Build a secret-free readiness matrix from direct runtime observations plus
+ * optional trusted evidence supplied by a higher layer.
+ *
+ * `evidence` is deliberately inert metadata: this module never reads files,
+ * credentials, GitHub, provider config, or the network on its own.
+ */
+export function buildReadinessMatrix({
+  platform = process.platform,
+  hubCompatibility = null,
+  workerProviderMode = null,
+  providerCatalogChecked = false,
+  providerCatalogOk = false,
+  evidence = {},
+} = {}) {
+  const rows = defaultRows();
+
+  if (hubCompatibility?.compatible === true) {
+    rows.hub_compatibility = baseRow(
+      'hub_compatibility', 'live-runtime', 'PASS',
+      READINESS_REASON_CODES.LIVE_CHECK_PASSED, 'hub-handshake',
+      {
+        runtime_version: hubCompatibility.runtime_version ?? null,
+        protocol_version: hubCompatibility.protocol_version ?? null,
+      },
+    );
+  } else if (hubCompatibility?.reachable === true) {
+    rows.hub_compatibility = baseRow(
+      'hub_compatibility', 'live-runtime', 'FAIL',
+      READINESS_REASON_CODES.HUB_INCOMPATIBLE, 'hub-handshake',
+      { detail_code: hubCompatibility.code ?? null },
+    );
+  } else {
+    rows.hub_compatibility = baseRow(
+      'hub_compatibility', 'live-runtime', 'BLOCKED',
+      READINESS_REASON_CODES.HUB_UNREACHABLE, 'hub-handshake',
+      { detail_code: hubCompatibility?.code ?? null },
+    );
+  }
+
+  if (workerProviderMode == null) {
+    rows.provider_catalog = baseRow(
+      'provider_catalog', 'live-runtime', 'NOT_RUN',
+      READINESS_REASON_CODES.PROVIDER_MODE_UNKNOWN, 'none',
+    );
+  } else if (workerProviderMode === 'deepseek-official') {
+    rows.provider_catalog = baseRow(
+      'provider_catalog', 'live-runtime', 'SKIP',
+      READINESS_REASON_CODES.PROVIDER_CATALOG_NOT_REQUIRED, 'runtime-policy',
+    );
+  } else if (!hubCompatibility?.compatible) {
+    rows.provider_catalog = baseRow(
+      'provider_catalog', 'live-runtime', 'BLOCKED',
+      hubCompatibility?.reachable
+        ? READINESS_REASON_CODES.HUB_INCOMPATIBLE
+        : READINESS_REASON_CODES.HUB_UNREACHABLE,
+      'hub-handshake',
+      { detail_code: hubCompatibility?.code ?? null },
+    );
+  } else if (providerCatalogChecked && providerCatalogOk) {
+    rows.provider_catalog = baseRow(
+      'provider_catalog', 'live-runtime', 'PASS',
+      READINESS_REASON_CODES.PROVIDER_CATALOG_RESOLVED, 'harness-catalog',
+    );
+  } else if (providerCatalogChecked) {
+    rows.provider_catalog = baseRow(
+      'provider_catalog', 'live-runtime', 'FAIL',
+      READINESS_REASON_CODES.PROVIDER_CATALOG_UNAVAILABLE, 'harness-catalog',
+    );
+  }
+
+  for (const [id] of TARGET_ROWS) {
+    rows[id] = normalizeEvidence(rows[id], evidence?.[id]);
+  }
+
+  const ordered = TARGET_ROWS.map(([id]) => rows[id]);
+  const counts = Object.fromEntries(READINESS_STATUSES.map((status) => [
+    status,
+    ordered.filter((row) => row.status === status).length,
+  ]));
+
+  return {
+    schema_version: 1,
+    platform,
+    conservative: true,
+    summary: counts,
+    rows: ordered,
+  };
+}

package/src/runtime-controls.mjs

@@ -1,90 +1,90 @@
-// Runtime control activation contract.
-//
-// This is deliberately data, not UI prose. MCP diagnostics and the Settings
-// surface consume the same boundary definitions so users are never told two
-// different stories about when a config change takes effect.
-
-export const ACTIVATION_BOUNDARY = Object.freeze({
-  LIVE: 'live',
-  NEXT_WORKFLOW: 'next-workflow',
-  NEXT_SESSION: 'next-session',
-  RESTART_REQUIRED: 'restart-required',
-});
-
-const N = ACTIVATION_BOUNDARY.NEXT_WORKFLOW;
-const S = ACTIVATION_BOUNDARY.NEXT_SESSION;
-const L = ACTIVATION_BOUNDARY.LIVE;
-const R = ACTIVATION_BOUNDARY.RESTART_REQUIRED;
-
-/**
- * `global` describes a write made through persisted Settings/config.
- * `session` describes an explicit dsh_worker_config override in the already
- * running MCP process. `session: null` means the setting is not a session
- * override surface.
- */
-export const RUNTIME_SETTING_ACTIVATION = Object.freeze({
-  max_parallel: Object.freeze({ global: L, session: null, note: 'Admission limit refreshes before new workflow starts and when slots release; lowering never cancels active work.' }),
-
-  subagents_enabled: Object.freeze({ global: N, session: N }),
-  collaboration_mode: Object.freeze({ global: N, session: N }),
-  main_agent_mode: Object.freeze({ global: N, session: N }),
-  flash_state: Object.freeze({ global: N, session: N }),
-  pro_state: Object.freeze({ global: N, session: N }),
-  worker_state: Object.freeze({ global: N, session: N }),
-  review_state: Object.freeze({ global: N, session: N }),
-  auto_review: Object.freeze({ global: N, session: N }),
-  pro_reviews_flash: Object.freeze({ global: N, session: N }),
-  worker_provider_mode: Object.freeze({ global: N, session: null }),
-  flash_model_priority: Object.freeze({ global: N, session: null }),
-  flash_model_fallback: Object.freeze({ global: N, session: null }),
-  pro_model_priority: Object.freeze({ global: N, session: null }),
-  pro_model_fallback: Object.freeze({ global: N, session: null }),
-  adaptive_routing: Object.freeze({ global: N, session: null, note: 'Opt-in provider health ordering is read for the next Hub model selection; existing explicit priorities remain authoritative.' }),
-  isolation: Object.freeze({ global: N, session: null }),
-  vision_provider: Object.freeze({ global: N, session: null }),
-  vision_model: Object.freeze({ global: N, session: null }),
-  imagegen_provider: Object.freeze({ global: N, session: null }),
-
-  // These values are copied into the MCP session defaults at process startup.
-  // dsh_worker_config can override them for subsequent workflows in that same
-  // session, but persisted global edits require a new MCP session to inherit.
-  default_tier: Object.freeze({ global: S, session: N }),
-  default_effort: Object.freeze({ global: S, session: N }),
-  mode: Object.freeze({ global: S, session: N }),
-  default_timeout_seconds: Object.freeze({ global: S, session: N }),
-  escalate_on_failure: Object.freeze({ global: S, session: N }),
-  preset_flash: Object.freeze({ global: S, session: N }),
-  preset_pro: Object.freeze({ global: S, session: N }),
-
-  // hub-client freezes its base URL at module initialization. Crew Vision and
-  // Image Generation tool registration is also decided at Hub plugin boot.
-  hub_url: Object.freeze({ global: R, session: null }),
-  vision_enabled: Object.freeze({ global: R, session: null }),
-  imagegen_enabled: Object.freeze({ global: R, session: null }),
-});
-
-export function activationForSetting(key) {
-  const entry = RUNTIME_SETTING_ACTIVATION[key];
-  return entry ? { ...entry } : null;
-}
-
-export function runtimeActivationMetadata() {
-  return Object.fromEntries(
-    Object.entries(RUNTIME_SETTING_ACTIVATION).map(([key, value]) => [key, { ...value }]),
-  );
-}
-
-export function summarizeActivationBoundaries(metadata = RUNTIME_SETTING_ACTIVATION) {
-  const out = {
-    live: [],
-    'next-workflow': [],
-    'next-session': [],
-    'restart-required': [],
-  };
-  for (const [key, entry] of Object.entries(metadata)) {
-    const boundary = entry?.global;
-    if (out[boundary]) out[boundary].push(key);
-  }
-  for (const values of Object.values(out)) values.sort();
-  return out;
-}
+// Runtime control activation contract.
+//
+// This is deliberately data, not UI prose. MCP diagnostics and the Settings
+// surface consume the same boundary definitions so users are never told two
+// different stories about when a config change takes effect.
+
+export const ACTIVATION_BOUNDARY = Object.freeze({
+  LIVE: 'live',
+  NEXT_WORKFLOW: 'next-workflow',
+  NEXT_SESSION: 'next-session',
+  RESTART_REQUIRED: 'restart-required',
+});
+
+const N = ACTIVATION_BOUNDARY.NEXT_WORKFLOW;
+const S = ACTIVATION_BOUNDARY.NEXT_SESSION;
+const L = ACTIVATION_BOUNDARY.LIVE;
+const R = ACTIVATION_BOUNDARY.RESTART_REQUIRED;
+
+/**
+ * `global` describes a write made through persisted Settings/config.
+ * `session` describes an explicit dsh_worker_config override in the already
+ * running MCP process. `session: null` means the setting is not a session
+ * override surface.
+ */
+export const RUNTIME_SETTING_ACTIVATION = Object.freeze({
+  max_parallel: Object.freeze({ global: L, session: null, note: 'Admission limit refreshes before new workflow starts and when slots release; lowering never cancels active work.' }),
+
+  subagents_enabled: Object.freeze({ global: N, session: N }),
+  collaboration_mode: Object.freeze({ global: N, session: N }),
+  main_agent_mode: Object.freeze({ global: N, session: N }),
+  flash_state: Object.freeze({ global: N, session: N }),
+  pro_state: Object.freeze({ global: N, session: N }),
+  worker_state: Object.freeze({ global: N, session: N }),
+  review_state: Object.freeze({ global: N, session: N }),
+  auto_review: Object.freeze({ global: N, session: N }),
+  pro_reviews_flash: Object.freeze({ global: N, session: N }),
+  worker_provider_mode: Object.freeze({ global: N, session: null }),
+  flash_model_priority: Object.freeze({ global: N, session: null }),
+  flash_model_fallback: Object.freeze({ global: N, session: null }),
+  pro_model_priority: Object.freeze({ global: N, session: null }),
+  pro_model_fallback: Object.freeze({ global: N, session: null }),
+  adaptive_routing: Object.freeze({ global: N, session: null, note: 'Opt-in provider health ordering is read for the next Hub model selection; existing explicit priorities remain authoritative.' }),
+  isolation: Object.freeze({ global: N, session: null }),
+  vision_provider: Object.freeze({ global: N, session: null }),
+  vision_model: Object.freeze({ global: N, session: null }),
+  imagegen_provider: Object.freeze({ global: N, session: null }),
+
+  // These values are copied into the MCP session defaults at process startup.
+  // dsh_worker_config can override them for subsequent workflows in that same
+  // session, but persisted global edits require a new MCP session to inherit.
+  default_tier: Object.freeze({ global: S, session: N }),
+  default_effort: Object.freeze({ global: S, session: N }),
+  mode: Object.freeze({ global: S, session: N }),
+  default_timeout_seconds: Object.freeze({ global: S, session: N }),
+  escalate_on_failure: Object.freeze({ global: S, session: N }),
+  preset_flash: Object.freeze({ global: S, session: N }),
+  preset_pro: Object.freeze({ global: S, session: N }),
+
+  // hub-client freezes its base URL at module initialization. Crew Vision and
+  // Image Generation tool registration is also decided at Hub plugin boot.
+  hub_url: Object.freeze({ global: R, session: null }),
+  vision_enabled: Object.freeze({ global: R, session: null }),
+  imagegen_enabled: Object.freeze({ global: R, session: null }),
+});
+
+export function activationForSetting(key) {
+  const entry = RUNTIME_SETTING_ACTIVATION[key];
+  return entry ? { ...entry } : null;
+}
+
+export function runtimeActivationMetadata() {
+  return Object.fromEntries(
+    Object.entries(RUNTIME_SETTING_ACTIVATION).map(([key, value]) => [key, { ...value }]),
+  );
+}
+
+export function summarizeActivationBoundaries(metadata = RUNTIME_SETTING_ACTIVATION) {
+  const out = {
+    live: [],
+    'next-workflow': [],
+    'next-session': [],
+    'restart-required': [],
+  };
+  for (const [key, entry] of Object.entries(metadata)) {
+    const boundary = entry?.global;
+    if (out[boundary]) out[boundary].push(key);
+  }
+  for (const values of Object.values(out)) values.sort();
+  return out;
+}