@ran-sh/dsh-crew 0.5.2 → 0.5.4

package/agents/ds-worker.md

@@ -7,10 +7,11 @@ model: haiku
 You are a thin dispatcher for the DSH worker role. You NEVER do the task yourself.
 
 1. Take the task you were given and pass it VERBATIM (plus any file paths / context you were given) to the `dsh_run_worker` tool with:
-   - `role`: `"worker"`
-   - `effort`: omit it entirely (the session/global default applies) unless the task explicitly names an effort level
-   - `cwd`: the current project directory
-2. Wait for the tool to return.
+   - `role`: `"worker"`
+   - `effort`: omit it entirely (the session/global default applies) unless the task explicitly names an effort level
+   - `cwd`: the current project directory
+   - For an explicitly read-only search or analysis task that must make zero file changes, pass `constraints: { allow_no_changes: true }`. Otherwise omit this constraint.
+2. Wait for the tool to return.
 3. If `status` is `done`: output the worker's `result` verbatim, then one footer line: `[ds-worker | tokens in/out: <input>/<output> | tool calls: <toolCalls>]`.
 4. If `status` is not `done`: report the `error` and `stopReason` clearly, and include whatever partial `result` exists.
 

package/codex/agents/ds-worker.toml

@@ -8,7 +8,7 @@ model = "gpt-5.4-mini"
 developer_instructions = """
 You are a thin dispatcher. You NEVER do the task yourself.
 
-1. Pass the task you were given VERBATIM (plus any file paths / context) to the `dsh_run_worker` tool with role "worker", cwd set to the current workspace, and NO effort argument (the session/global default applies) unless the task explicitly names one.
+1. Pass the task you were given VERBATIM (plus any file paths / context) to the `dsh_run_worker` tool with role "worker", cwd set to the current workspace, and NO effort argument (the session/global default applies) unless the task explicitly names one. For an explicitly read-only search or analysis task that must make zero file changes, pass `constraints: { allow_no_changes: true }`; otherwise omit that constraint.
 2. Wait for the tool to return.
 3. If status is "done": output the worker's result verbatim, then one footer line: [ds-worker | tokens in/out: <input>/<output> | tool calls: <toolCalls>].
 4. Otherwise report the error and stopReason clearly, including any partial result.

package/docs/job-contracts.md

@@ -80,10 +80,18 @@ long jobs without replaying the entire event history.
 The isolated Hub also exposes `/extension`, `/profiles`, `/workspaces`,
 `/jobs/:id/contract`, and `/jobs/:id/events`. All remain loopback-only.
 
-Per-job precedence is request `constraints` > Profile > session defaults.
-`workspace.branch` pins the isolated base revision; `workspace.worktree` accepts
-`auto`, `existing`, or `none`. Workspace preflight reports `READY`, `CONFLICT`,
-`READ_ONLY`, or `UNAVAILABLE` before dispatch.
+Per-job precedence is request `constraints` > Profile > session defaults.
+`workspace.branch` pins the isolated base revision; `workspace.worktree` accepts
+`auto`, `existing`, or `none`. Workspace preflight reports `READY`, `CONFLICT`,
+`READ_ONLY`, or `UNAVAILABLE` before dispatch.
+
+`constraints.allow_no_changes: true` is reserved for explicitly read-only
+search, inspection, or analysis work. It does not blindly convert a partial
+Delivery Report into success: Crew requires an isolated candidate with zero
+changed files, a complete Delivery Report, at least one passing evidence check,
+and no failed check. If the Worker reports no changes but the workspace contains
+edits—or reports changes while the workspace is empty—the workflow fails closed
+with workspace-evidence mismatch.
 
 The CLI is a JSON projection of the same local HTTP surface:
 

package/docs/readiness-matrix.md

@@ -24,7 +24,10 @@ The matrix separates three kinds of evidence:
 2. `ci` — platform validation such as Linux deterministic, Windows regressions, and future macOS smoke.
 3. `real-execution` — provider/model and workflow behavior that requires a genuine DSH execution.
 
-Only live checks are populated automatically by the current runtime. CI and real-execution rows remain `NOT_RUN` until a trusted higher layer supplies explicit evidence.
+Live checks are populated automatically. The config report also consumes the
+compatible Hub's bounded job registry, so a completed Worker or Reviewer can
+promote the corresponding generic real-execution row. Other CI and execution
+rows remain `NOT_RUN` until a trusted higher layer supplies explicit evidence.
 
 ## Target rows
 
@@ -32,7 +35,8 @@ Only live checks are populated automatically by the current runtime. CI and real
 - `windows_regressions`
 - `macos_smoke`
 - `hub_compatibility`
-- `provider_catalog`
+- `provider_catalog`
+- `model_execution`
 - `deepseek_flash`
 - `deepseek_pro`
 - `opencode_go_mimo_qwen`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ran-sh/dsh-crew",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "type": "module",
   "main": "./src/hub/entry.mjs",
   "bin": {

package/scripts/setup.mjs

@@ -23,20 +23,57 @@ import {
 
 const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
 
-function commandExists(name) {
-  const r = spawnSync(/^win/.test(process.platform) ? 'where' : 'which', [name], {
+function commandExists(name) {
+  const r = spawnSync(/^win/.test(process.platform) ? 'where' : 'which', [name], {
     encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'],
   });
-  return r.status === 0;
-}
-
-function run(cmd, args, opts = {}) {
-  const r = spawnSync(cmd, args, {
-    encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], shell: opts.shell === true, cwd: opts.cwd ?? ROOT,
-    env: opts.env ?? process.env,
-  });
-  return { ok: r.status === 0, status: r.status ?? -1, stdout: r.stdout ?? '', stderr: r.stderr ?? '' };
-}
+  return r.status === 0;
+}
+
+const PACKAGE_MANAGER_COMMAND = /^(?:npm|npx|pnpm|yarn|yarnpkg|bun|bunx)$/i;
+
+export function spawnCommand(command, platform = process.platform) {
+  if (platform === 'win32' && PACKAGE_MANAGER_COMMAND.test(command)) {
+    return `${command}.cmd`;
+  }
+  return command;
+}
+
+export function spawnNeedsShell(command, platform = process.platform) {
+  return platform === 'win32' && PACKAGE_MANAGER_COMMAND.test(command);
+}
+
+export function spawnInvocation(command, args = [], platform = process.platform, environment = process.env) {
+  const executable = spawnCommand(command, platform);
+  if (!spawnNeedsShell(command, platform)) return { command: executable, args };
+  const unsafe = args.find((arg) => !/^[A-Za-z0-9@._:+/=\-]+$/.test(String(arg)));
+  if (unsafe !== undefined) throw new Error(`unsafe package-manager argument: ${unsafe}`);
+  return {
+    command: environment.ComSpec || 'cmd.exe',
+    args: ['/d', '/s', '/c', [executable, ...args].join(' ')],
+  };
+}
+
+function run(cmd, args, opts = {}) {
+  let invocation;
+  try {
+    invocation = spawnInvocation(cmd, args);
+  } catch (error) {
+    return { ok: false, status: -1, stdout: '', stderr: String(error?.message ?? error), error };
+  }
+  const r = spawnSync(invocation.command, invocation.args, {
+    encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], shell: opts.shell === true, cwd: opts.cwd ?? ROOT,
+    env: opts.env ?? process.env,
+  });
+  const processError = r.error ? `${r.error.name}: ${r.error.message}` : '';
+  return {
+    ok: r.status === 0,
+    status: r.status ?? -1,
+    stdout: r.stdout ?? '',
+    stderr: r.stderr || processError,
+    error: r.error ?? null,
+  };
+}
 
 /**
  * Detect the DSH CLI. `allowDownload` is intentionally opt-in: installation
@@ -106,18 +143,18 @@ export async function setupInstall({
   installer = realInstaller,
   depRunner = null,
 } = {}) {
-  log('DSH Crew installer');
-  if (!checkRoot(root)) return { ok: false, error: `not a dsh-crew checkout: ${root}` };
-
-  if (depRunner) {
+  log('DSH Crew installer');
+  if (!checkRoot(root)) return { ok: false, error: `not a dsh-crew checkout: ${root}` };
+  const pnpmOk = commandExists('pnpm');
+
+  if (depRunner) {
     const r = depRunner(root);
     if (!r.ok) { mark(log, false, r.text); return { ok: false, error: r.text }; }
     mark(log, true, r.text);
-  } else if (!dryRun) {
-    const pnpmOk = commandExists('pnpm');
-    const cmd = pnpmOk ? 'pnpm' : 'npx';
+  } else if (!dryRun) {
+    const cmd = pnpmOk ? 'pnpm' : 'npx';
     const baseArgs = pnpmOk ? [] : ['-y', 'pnpm'];
-    const d = run(cmd, [...baseArgs, 'install', '--frozen-lockfile']);
+    const d = run(cmd, [...baseArgs, 'install', '--frozen-lockfile'], { cwd: root });
     if (!d.ok) {
       if (depsPresent(root)) mark(log, true, `dependencies (already present; install skipped — ${(d.stderr || d.stdout || '').trim().split('\n')[0]})`);
       else {
@@ -126,9 +163,11 @@ export async function setupInstall({
       }
     } else mark(log, true, 'dependencies');
   } else mark(log, true, 'dependencies (dry-run)');
-
-  if (!dryRun) {
-    const b = run('npx --no-install tsdown src/client/index.tsx --format cjs --platform browser --target es2022 --tsconfig tsconfig.client.json --deps.never-bundle react --deps.never-bundle react/jsx-runtime --deps.never-bundle react-dom --deps.never-bundle react-dom/client --out-dir .client-build --clean --logLevel warn && node scripts/build-client.mjs', [], { shell: true });
+
+  if (!dryRun) {
+    const b = pnpmOk
+      ? run('pnpm', ['run', 'build:client'], { cwd: root })
+      : run('npx', ['-y', 'pnpm', 'run', 'build:client'], { cwd: root });
     if (!b.ok) {
       log(`✗ client build failed:\n${(b.stderr || b.stdout || '').slice(0, 600)}`);
       return { ok: false, error: 'client build failed' };

package/src/config-readiness.mjs

@@ -1,31 +1,71 @@
 import { buildReadinessMatrix, READINESS_REASON_CODES } from './readiness-matrix.mjs';
 
-function warningCodes(catalogBody) {
+function warningCodes(catalogBody) {
   const hints = Array.isArray(catalogBody?.health?.hints) ? catalogBody.health.hints : [];
   return [...new Set(hints
     .filter((hint) => hint?.level === 'warning' && typeof hint?.code === 'string' && hint.code.trim())
     .map((hint) => hint.code.trim()))];
-}
+}
+
+function verifiedHubJob(job) {
+  return job?.status === 'done'
+    && job?.task_status === 'success'
+    && job?.delivery_complete === true
+    && job?.workspace_evidence_ok === true;
+}
+
+export function buildHubExecutionRows(hubJobs = []) {
+  const jobs = Array.isArray(hubJobs) ? hubJobs : [];
+  const workerPassed = jobs.some((job) => job?.role === 'worker' && verifiedHubJob(job));
+  const reviewerPassed = jobs.some((job) => job?.role === 'reviewer'
+    && verifiedHubJob(job)
+    && job?.review_verdict === 'approve');
+  return [
+    workerPassed
+      ? { id: 'model_execution', status: 'PASS', reason_code: 'REAL_EXECUTION_PASSED', evidence_source: 'hub-jobs' }
+      : { id: 'model_execution', status: 'NOT_RUN', reason_code: 'NO_EXECUTION_EVIDENCE', evidence_source: 'none' },
+    reviewerPassed
+      ? { id: 'reviewer_pipeline', status: 'PASS', reason_code: 'REAL_REVIEW_PASSED', evidence_source: 'hub-jobs' }
+      : { id: 'reviewer_pipeline', status: 'NOT_RUN', reason_code: 'NO_EXECUTION_EVIDENCE', evidence_source: 'none' },
+  ];
+}
 
 /**
  * Enrich the conservative runtime matrix with evidence the config report has
  * already collected. This function performs no I/O and never reads provider
  * configuration, credentials, quotas, pricing, or hidden catalog expectations.
  */
-export function buildConfigReadinessMatrix({
-  platform = process.platform,
-  hubCompatibility = null,
-  workerProviderMode = null,
-  providerCatalogChecked = false,
-  providerCatalogBody = null,
-} = {}) {
+export function buildConfigReadinessMatrix({
+  platform = process.platform,
+  hubCompatibility = null,
+  workerProviderMode = null,
+  providerCatalogChecked = false,
+  providerCatalogBody = null,
+  hubJobsChecked = false,
+  hubJobsBody = null,
+} = {}) {
   const warnings = warningCodes(providerCatalogBody);
   const catalogResponseOk = !!providerCatalogBody
     && typeof providerCatalogBody === 'object'
     && providerCatalogBody.ok !== false;
   const catalogOk = providerCatalogChecked && catalogResponseOk && warnings.length === 0;
 
-  const evidence = {};
+  const evidence = {};
+  const hubJobs = hubCompatibility?.compatible === true
+    && hubJobsChecked
+    && hubJobsBody?.ok !== false
+    && Array.isArray(hubJobsBody?.jobs)
+    ? hubJobsBody.jobs
+    : [];
+  for (const row of buildHubExecutionRows(hubJobs)) {
+    if (row.status === 'PASS') {
+      evidence[row.id] = {
+        status: row.status,
+        reason_code: row.reason_code,
+        evidence_source: row.evidence_source,
+      };
+    }
+  }
   if (
     workerProviderMode !== 'deepseek-official'
     && hubCompatibility?.compatible === true

package/src/hub/index.mjs

@@ -20,7 +20,7 @@ import { buildDirectSelectionTrace, resolveWorkerModel, resolveModel } from '../
 import { readHarnessModelCatalog } from '../model-catalog.mjs';
 import { appendDeliveryInstructions, parseDeliveryReport, formatDeliveryMetadata } from '../delivery.mjs';
 import { captureWorkspaceBaseline, captureWorkspaceDiff, NOT_A_GIT_REPOSITORY } from '../workspace-audit.mjs';
-import { buildOutcome, JOB_PHASES } from '../workflow.mjs';
+import { applyWorkspaceEvidence, buildOutcome, JOB_PHASES } from '../workflow.mjs';
 import { boundedMachineCodeFromError } from '../structured-error-code.mjs';
 import { createCanonicalJobEvent, projectWorkflowView } from '../job-contracts.mjs';
 import { getHubRuntimeIdentity } from '../runtime-identity.mjs';
@@ -29,6 +29,7 @@ import { addContextReferences, buildWorkspaceTask, isSafeBranchName, loadWorkspa
 import { buildExtensionContract } from '../extension-contract.mjs';
 import { cleanupIsolatedWorkspace, createIsolatedWorkspace } from '../workspace-isolation.mjs';
 import { assessWorkspaceReadiness } from '../workspace-readiness.mjs';
+import { buildHubExecutionRows } from '../config-readiness.mjs';
 
 // policy.mjs is pure (no @deepseek-ai imports, no ctx access), so importing it
 // here is safe for the profile-realm discipline: it never pulls in package
@@ -119,7 +120,20 @@ export function hubCanonicalEvents(job = {}) {
   }));
 }
 
-// ---------- job registry ----------
+// ---------- job registry ----------
+
+export function applyHubWorkspaceEvidence({ outcome, workspaceDiff, allowNoChanges = false, isolation = 'shared', role = 'worker' } = {}) {
+  const changes = workspaceDiff?.changes ?? {};
+  const hasChanges = ['modified', 'deleted', 'renamed', 'untracked']
+    .some((key) => Array.isArray(changes[key]) && changes[key].length > 0);
+  const evidenceAvailable = workspaceDiff?.kind === 'git' && workspaceDiff.dirtyBaseline !== true;
+  return applyWorkspaceEvidence(outcome, {
+    evidenceAvailable,
+    hasChanges,
+    allowNoChanges: allowNoChanges === true && isolation === 'worktree',
+    requireNoChangeAuthorization: role === 'worker',
+  });
+}
 
 // Exported for the unit tests (test/hub-windows.test.mjs); instantiation
 // needs only a duck-typed ctx, so spawn()'s path guard is testable without a
@@ -145,6 +159,10 @@ export class WorkerRegistry {  constructor(ctx) {
       startedAt: job.startedAt, endedAt: job.endedAt,
       isolation: job.isolation ?? 'shared', workspace_branch: job.workspace_branch ?? null,
       delivery_complete: !!job.delivery_complete,
+      allow_no_changes: job.allow_no_changes === true,
+      task_status: job.outcome?.task_status ?? null,
+      workspace_evidence_ok: job.outcome?.workspace_evidence_ok ?? null,
+      review_verdict: job.review?.verdict ?? null,
       workspace_diff_available: !!job.workspaceDiff && job.workspaceDiff.kind === 'git',
       workspace_retained: job.workspace_retained === true,
       cleanup_warning: job.cleanup_warning ?? null,
@@ -182,7 +200,7 @@ export class WorkerRegistry {  constructor(ctx) {
    * `role` (worker | reviewer) records who does the work; `tier` remains the
    * legacy model-class slot. Reviewer-role jobs always use the pro slot.
    */
-  async spawn({ task, tier = 'flash', role, attempt = 0, effort = 'max', cwd, source = 'api', preset, delivery = 'coding', client_job_id, requested_isolation, workspace_branch, timeout_seconds, profile_id, workspace_context }) {
+  async spawn({ task, tier = 'flash', role, attempt = 0, effort = 'max', cwd, source = 'api', preset, delivery = 'coding', client_job_id, requested_isolation, workspace_branch, timeout_seconds, profile_id, workspace_context, allow_no_changes }) {
     // role is only honored when the caller explicitly names it; a legacy
     // tier-only spawn (role === undefined) keeps the exact v0.1 resolution.
     const hasRole = role === 'worker' || role === 'reviewer';
@@ -291,6 +309,7 @@ export class WorkerRegistry {  constructor(ctx) {
       effort, reasoning_effort: selection.reasoningEffort,
       task, source, cwd: executionCwd, requested_cwd: cwd,
       isolation: isolatedWorkspace ? 'worktree' : 'shared',
+      allow_no_changes: allow_no_changes === true,
       workspace_branch: workspace_branch ?? null, isolatedWorkspace,
       profile_id: profile_id ?? null, workspace_context: workspace_context ?? null,
       prompt: workerPrompt, delivery: delivery === 'review' ? 'review' : 'coding',
@@ -451,6 +470,13 @@ export class WorkerRegistry {  constructor(ctx) {
         job.workspaceDiff = job.baseline.kind === 'git'
           ? await captureWorkspaceDiff({ cwd: executionCwd, baseline: job.baseline }).catch(() => ({ kind: 'no-git', reason: NOT_A_GIT_REPOSITORY, error: 'workspace diff failed' }))
           : job.baseline;
+        job.outcome = applyHubWorkspaceEvidence({
+          outcome: job.outcome,
+          workspaceDiff: job.workspaceDiff,
+          allowNoChanges: job.allow_no_changes,
+          isolation: job.isolation,
+          role: job.role,
+        });
         if (job.role === 'reviewer' && job.review && job.workspaceDiff?.kind === 'git') {
           const changes = job.workspaceDiff.changes ?? {};
           const mutated = ['modified', 'deleted', 'renamed', 'untracked'].some((key) => Array.isArray(changes[key]) && changes[key].length > 0);
@@ -609,6 +635,9 @@ export function resolveHubSpawnPayload(payload, getConfig = () => ({}), dependen
     if (raw.constraints?.allow_fallback !== undefined && typeof raw.constraints.allow_fallback !== 'boolean') {
       return { ok: false, code: 'JOB_CONSTRAINTS_INVALID', error: 'allow_fallback must be boolean' };
     }
+    if (raw.constraints?.allow_no_changes !== undefined && typeof raw.constraints.allow_no_changes !== 'boolean') {
+      return { ok: false, code: 'JOB_CONSTRAINTS_INVALID', error: 'allow_no_changes must be boolean' };
+    }
     const profileRegistry = dependencies.profileRegistry ?? loadRoleProfiles();
     const workspaceRegistry = dependencies.workspaceRegistry ?? loadWorkspaceContexts();
     if (!profileRegistry.ok) return { ok: false, code: 'PROFILE_FILE_INVALID', error: 'role profile registry is invalid' };
@@ -647,6 +676,7 @@ export function resolveHubSpawnPayload(payload, getConfig = () => ({}), dependen
       workspace_branch: raw.workspace?.branch ?? withRefs.context?.default_branch ?? null,
       timeout_seconds: raw.constraints?.timeout_seconds ?? profile.timeout_seconds,
       allow_fallback: raw.constraints?.allow_fallback ?? profile.fallback,
+      allow_no_changes: raw.constraints?.allow_no_changes === true,
       routing: profile.routing,
       review_strictness: profile.review_strictness,
       profile_id: resolvedProfile.profile_id,
@@ -852,12 +882,7 @@ export async function apply(ctx) {
           ? { status: 'UNAVAILABLE', reason_code: 'WORKSPACE_CONTEXT_NOT_FOUND' }
           : await assessWorkspaceReadiness({ cwd: requestedContext?.repo_root ?? null });
         const liveJobs = typeof hub.list === 'function' ? hub.list() : [];
-        const modelExecution = liveJobs.some((job) => job?.role === 'worker' && job?.status === 'done')
-          ? { id: 'model_execution', status: 'PASS', reason_code: 'REAL_EXECUTION_PASSED' }
-          : { id: 'model_execution', status: 'NOT_RUN', reason_code: 'NO_EXECUTION_EVIDENCE' };
-        const reviewerExecution = liveJobs.some((job) => job?.role === 'reviewer' && job?.status === 'done')
-          ? { id: 'reviewer_pipeline', status: 'PASS', reason_code: 'REAL_REVIEW_PASSED' }
-          : { id: 'reviewer_pipeline', status: 'NOT_RUN', reason_code: 'NO_EXECUTION_EVIDENCE' };
+        const [modelExecution, reviewerExecution] = buildHubExecutionRows(liveJobs);
         const contract = buildExtensionContract({
           config,
           readinessMatrix: { rows: [

package/src/install/windows-startup.mjs

@@ -11,6 +11,7 @@ import { homedir } from 'node:os';
 
 export const WINDOWS_STARTUP_FILENAME = 'DSH Crew.vbs';
 export const WINDOWS_LAUNCHER_FILENAME = 'start-dsh-crew.cmd';
+export const WINDOWS_HELPER_FILENAME = 'start-dsh-crew.ps1';
 
 function defaultStartupDir({ home, env }) {
   if (home === homedir() && env.APPDATA) {
@@ -21,9 +22,11 @@ function defaultStartupDir({ home, env }) {
 
 function paths({ home, startupDir, env }) {
   const launcherFile = join(home, '.config', 'dsh-crew', 'launchers', WINDOWS_LAUNCHER_FILENAME);
+  const helperFile = join(home, '.config', 'dsh-crew', 'launchers', WINDOWS_HELPER_FILENAME);
   const resolvedStartupDir = startupDir ?? defaultStartupDir({ home, env });
   return {
     launcherFile,
+    helperFile,
     startupFile: join(resolvedStartupDir, WINDOWS_STARTUP_FILENAME),
   };
 }
@@ -41,12 +44,22 @@ export function windowsStartupStatus({
 } = {}) {
   if (platform !== 'win32') return { supported: false, installed: false, ready: false };
   const resolved = paths({ home, startupDir, env });
-  const installed = existsSync(resolved.startupFile) || existsSync(resolved.launcherFile);
-  let ready = existsSync(resolved.startupFile) && existsSync(resolved.launcherFile);
+  const installed = existsSync(resolved.startupFile)
+    || existsSync(resolved.launcherFile)
+    || existsSync(resolved.helperFile);
+  let ready = existsSync(resolved.startupFile)
+    && existsSync(resolved.launcherFile)
+    && existsSync(resolved.helperFile);
   if (ready) {
     try {
-      const text = readFileSync(resolved.startupFile, 'utf16le').replace(/^\uFEFF/, '');
-      ready = text.includes(resolved.launcherFile);
+      const startup = readFileSync(resolved.startupFile, 'utf16le').replace(/^\uFEFF/, '');
+      const launcher = readFileSync(resolved.launcherFile, 'utf8');
+      const helper = readFileSync(resolved.helperFile, 'utf8');
+      ready = startup.includes(resolved.launcherFile)
+        && startup.includes('--watch')
+        && launcher.includes(WINDOWS_HELPER_FILENAME)
+        && helper.includes('DSH Crew managed Windows launcher')
+        && helper.includes('DSHCrewServiceSupervisor');
     } catch { ready = false; }
   }
   return { supported: true, installed, ready, ...resolved };
@@ -62,19 +75,23 @@ export function installWindowsStartup({
   if (platform !== 'win32') return { ok: true, supported: false, changed: false };
   if (!root) return { ok: false, supported: true, code: 'STARTUP_SOURCE_REQUIRED' };
   const sourceLauncher = join(root, 'windows', WINDOWS_LAUNCHER_FILENAME);
+  const sourceHelper = join(root, 'windows', WINDOWS_HELPER_FILENAME);
   const sourceVbs = join(root, 'windows', 'start-dsh-crew.vbs');
-  if (!existsSync(sourceLauncher) || !existsSync(sourceVbs)) {
+  if (!existsSync(sourceLauncher) || !existsSync(sourceHelper) || !existsSync(sourceVbs)) {
     return { ok: false, supported: true, code: 'STARTUP_ASSET_MISSING' };
   }
   const resolved = paths({ home, startupDir, env });
   mkdirSync(dirname(resolved.launcherFile), { recursive: true });
   mkdirSync(dirname(resolved.startupFile), { recursive: true });
   const beforeLauncher = existsSync(resolved.launcherFile) ? readFileSync(resolved.launcherFile) : null;
+  const beforeHelper = existsSync(resolved.helperFile) ? readFileSync(resolved.helperFile) : null;
   const beforeStartup = existsSync(resolved.startupFile) ? readFileSync(resolved.startupFile) : null;
   copyFileSync(sourceLauncher, resolved.launcherFile);
+  copyFileSync(sourceHelper, resolved.helperFile);
   const rendered = renderVbs(readFileSync(sourceVbs, 'utf8'), resolved.launcherFile);
   writeFileSync(resolved.startupFile, `\uFEFF${rendered}`, 'utf16le');
   const changed = !beforeLauncher?.equals(readFileSync(resolved.launcherFile))
+    || !beforeHelper?.equals(readFileSync(resolved.helperFile))
     || !beforeStartup?.equals(readFileSync(resolved.startupFile));
   return { ok: true, supported: true, changed, ...resolved };
 }
@@ -88,7 +105,7 @@ export function uninstallWindowsStartup({
   if (platform !== 'win32') return { ok: true, supported: false, removed: false };
   const resolved = paths({ home, startupDir, env });
   let removed = false;
-  for (const file of [resolved.startupFile, resolved.launcherFile]) {
+  for (const file of [resolved.startupFile, resolved.launcherFile, resolved.helperFile]) {
     if (existsSync(file)) {
       rmSync(file, { force: true });
       removed = true;

package/src/orchestrator.mjs

@@ -0,0 +1,53 @@
+import { execFileSync } from 'node:child_process';
+
+function explicitSource(value) {
+  if (typeof value !== 'string') return null;
+  const normalized = value.trim().toLowerCase();
+  return /^[a-z0-9][a-z0-9._-]{0,63}$/.test(normalized) ? normalized : null;
+}
+
+function classifyParent(value) {
+  const firstLine = String(value ?? '').split(/\r?\n/).map((line) => line.trim()).find(Boolean);
+  if (!firstLine) return 'unknown';
+  const command = firstLine.split(/[\\/]/).pop().toLowerCase().replace(/\.exe$/, '');
+  if (command.includes('claude')) return 'claude-code';
+  if (command.includes('codex')) return 'codex';
+  if (command.includes('zcode')) return 'zcode';
+  return /^[a-z0-9][a-z0-9._-]{0,63}$/.test(command) ? command : 'unknown';
+}
+
+function readParentProcess({ platform, pid }) {
+  const options = {
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'ignore'],
+    timeout: 2_000,
+    windowsHide: true,
+  };
+  if (platform === 'win32') {
+    return execFileSync('powershell.exe', [
+      '-NoLogo',
+      '-NoProfile',
+      '-NonInteractive',
+      '-Command',
+      `(Get-CimInstance Win32_Process -Filter "ProcessId = ${pid}").Name`,
+    ], options);
+  }
+  return execFileSync('ps', ['-o', 'comm=', '-p', String(pid)], options);
+}
+
+export function detectOrchestrator({
+  env = process.env,
+  platform = process.platform,
+  parentPid = process.ppid,
+  readParent = readParentProcess,
+} = {}) {
+  const explicit = explicitSource(env.DSH_ORCHESTRATOR);
+  if (explicit) return explicit;
+  if (env.CLAUDECODE || env.CLAUDE_CODE_ENTRYPOINT) return 'claude-code';
+  if (!Number.isInteger(parentPid) || parentPid < 1) return 'unknown';
+  try {
+    return classifyParent(readParent({ platform, pid: parentPid }));
+  } catch {
+    return 'unknown';
+  }
+}

package/src/readiness-matrix.mjs

@@ -26,9 +26,10 @@ const TARGET_ROWS = Object.freeze([
   ['linux_deterministic', 'ci'],
   ['windows_regressions', 'ci'],
   ['macos_smoke', 'ci'],
-  ['hub_compatibility', 'live-runtime'],
-  ['provider_catalog', 'live-runtime'],
-  ['deepseek_flash', 'real-execution'],
+  ['hub_compatibility', 'live-runtime'],
+  ['provider_catalog', 'live-runtime'],
+  ['model_execution', 'real-execution'],
+  ['deepseek_flash', 'real-execution'],
   ['deepseek_pro', 'real-execution'],
   ['opencode_go_mimo_qwen', 'real-execution'],
   ['reviewer_pipeline', 'real-execution'],

package/src/runtime-identity.mjs

@@ -8,7 +8,7 @@
 // Keep this module pure and dependency-free so Hub, MCP and tests all use the
 // exact same compatibility rules.
 
-export const RUNTIME_VERSION = '0.5.2';
+export const RUNTIME_VERSION = '0.5.4';
 export const HUB_PROTOCOL_VERSION = 1;
 
 export const HUB_CAPABILITIES = Object.freeze([