@ran-sh/dsh-crew 1.8.0 → 1.9.1

package/src/role-profiles.mjs

@@ -1,107 +1,107 @@
-// Versioned, narrow Worker/Reviewer profiles. Profiles configure one DSH
-// delegation; they are not general Agent personas and never contain prompts or
-// credentials.
-
-import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
-import { dirname, join } from 'node:path';
-import { homedir } from 'node:os';
-
-export const ROLE_PROFILE_SCHEMA_VERSION = 1;
-export const DEFAULT_ROLE_PROFILES = Object.freeze({
-  'worker-default': Object.freeze({
-    role: 'worker', routing: 'auto', isolation: 'worktree', fallback: true,
-    timeout_seconds: 1800, review_strictness: 'standard',
-  }),
-  'reviewer-default': Object.freeze({
-    role: 'reviewer', routing: 'stable', isolation: 'readonly', fallback: false,
-    timeout_seconds: 1800, review_strictness: 'strict',
-  }),
-});
-
-const ID = /^[a-z0-9][a-z0-9._-]{0,63}$/;
-const ROLES = new Set(['worker', 'reviewer']);
-const ROUTING = new Set(['auto', 'priority', 'stable']);
-const ISOLATION = new Set(['worktree', 'readonly', 'shared']);
-const STRICTNESS = new Set(['standard', 'strict']);
-
-function normalizeProfile(id, raw) {
-  if (!ID.test(id) || !raw || typeof raw !== 'object' || Array.isArray(raw)) return null;
-  if (!ROLES.has(raw.role)) return null;
-  const base = DEFAULT_ROLE_PROFILES[`${raw.role}-default`];
-  const routing = raw.routing ?? base.routing;
-  const isolation = raw.isolation ?? base.isolation;
-  const reviewStrictness = raw.review_strictness ?? base.review_strictness;
-  const timeout = raw.timeout_seconds ?? base.timeout_seconds;
-  if (!ROUTING.has(routing) || !ISOLATION.has(isolation) || !STRICTNESS.has(reviewStrictness)) return null;
-  if (!Number.isInteger(timeout) || timeout < 1 || timeout > 7200) return null;
-  if (raw.fallback !== undefined && typeof raw.fallback !== 'boolean') return null;
-  return {
-    role: raw.role,
-    routing,
-    isolation,
-    fallback: raw.fallback ?? base.fallback,
-    timeout_seconds: timeout,
-    review_strictness: reviewStrictness,
-  };
-}
-
-export function roleProfilesFile({ home = homedir() } = {}) {
-  return join(home, '.config', 'dsh-crew', 'profiles.json');
-}
-
-export function loadRoleProfiles({ home = homedir(), file = roleProfilesFile({ home }) } = {}) {
-  if (!existsSync(file)) {
-    return { schema_version: ROLE_PROFILE_SCHEMA_VERSION, ok: true, source: 'defaults', profiles: { ...DEFAULT_ROLE_PROFILES }, errors: [] };
-  }
-  let raw;
-  try { raw = JSON.parse(readFileSync(file, 'utf8')); } catch {
-    return { schema_version: ROLE_PROFILE_SCHEMA_VERSION, ok: false, source: 'file', profiles: { ...DEFAULT_ROLE_PROFILES }, errors: [{ code: 'PROFILE_FILE_INVALID' }] };
-  }
-  return parseRoleProfiles(raw);
-}
-
-function parseRoleProfiles(raw) {
-  const errors = [];
-  const profiles = { ...DEFAULT_ROLE_PROFILES };
-  if (raw?.schema_version !== ROLE_PROFILE_SCHEMA_VERSION || !raw.profiles || typeof raw.profiles !== 'object' || Array.isArray(raw.profiles)) {
-    return { schema_version: ROLE_PROFILE_SCHEMA_VERSION, ok: false, source: 'file', profiles, errors: [{ code: 'PROFILE_FILE_INVALID' }] };
-  }
-  for (const [id, value] of Object.entries(raw.profiles)) {
-    if (id in DEFAULT_ROLE_PROFILES) {
-      const normalized = normalizeProfile(id, value);
-      if (!normalized || JSON.stringify(normalized) !== JSON.stringify(DEFAULT_ROLE_PROFILES[id])) {
-        errors.push({ code: 'PROFILE_DEFAULT_RESERVED', profile_id: id });
-      }
-      continue;
-    }
-    const profile = normalizeProfile(id, value);
-    if (!profile) errors.push({ code: 'PROFILE_INVALID', profile_id: ID.test(id) ? id : '<invalid>' });
-    else profiles[id] = profile;
-  }
-  return { schema_version: ROLE_PROFILE_SCHEMA_VERSION, ok: errors.length === 0, source: 'file', profiles, errors: errors.slice(0, 32) };
-}
-
-export function saveRoleProfiles(document, { home = homedir(), file = roleProfilesFile({ home }) } = {}) {
-  const parsed = parseRoleProfiles(document);
-  if (!parsed.ok) return parsed;
-  const custom = Object.fromEntries(Object.entries(parsed.profiles).filter(([id]) => !(id in DEFAULT_ROLE_PROFILES)));
-  const payload = { schema_version: ROLE_PROFILE_SCHEMA_VERSION, profiles: custom };
-  mkdirSync(dirname(file), { recursive: true });
-  const temp = `${file}.tmp-${process.pid}-${Date.now()}`;
-  try {
-    writeFileSync(temp, `${JSON.stringify(payload, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
-    renameSync(temp, file);
-  } catch (error) {
-    rmSync(temp, { force: true });
-    return { ...parsed, ok: false, errors: [{ code: 'PROFILE_FILE_WRITE_FAILED' }], error_code: 'PROFILE_FILE_WRITE_FAILED' };
-  }
-  return { ...parsed, source: 'file' };
-}
-
-export function resolveRoleProfile(registry, profileId, role = 'worker') {
-  const id = profileId ?? `${role}-default`;
-  const profile = registry?.profiles?.[id];
-  if (!profile) return { ok: false, code: 'PROFILE_NOT_FOUND', profile_id: id };
-  if (profile.role !== role) return { ok: false, code: 'PROFILE_ROLE_MISMATCH', profile_id: id, expected_role: role };
-  return { ok: true, profile_id: id, profile: { ...profile } };
-}
+// Versioned, narrow Worker/Reviewer profiles. Profiles configure one DSH
+// delegation; they are not general Agent personas and never contain prompts or
+// credentials.
+
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+
+export const ROLE_PROFILE_SCHEMA_VERSION = 1;
+export const DEFAULT_ROLE_PROFILES = Object.freeze({
+  'worker-default': Object.freeze({
+    role: 'worker', routing: 'auto', isolation: 'worktree', fallback: true,
+    timeout_seconds: 1800, review_strictness: 'standard',
+  }),
+  'reviewer-default': Object.freeze({
+    role: 'reviewer', routing: 'stable', isolation: 'readonly', fallback: false,
+    timeout_seconds: 1800, review_strictness: 'strict',
+  }),
+});
+
+const ID = /^[a-z0-9][a-z0-9._-]{0,63}$/;
+const ROLES = new Set(['worker', 'reviewer']);
+const ROUTING = new Set(['auto', 'priority', 'stable']);
+const ISOLATION = new Set(['worktree', 'readonly', 'shared']);
+const STRICTNESS = new Set(['standard', 'strict']);
+
+function normalizeProfile(id, raw) {
+  if (!ID.test(id) || !raw || typeof raw !== 'object' || Array.isArray(raw)) return null;
+  if (!ROLES.has(raw.role)) return null;
+  const base = DEFAULT_ROLE_PROFILES[`${raw.role}-default`];
+  const routing = raw.routing ?? base.routing;
+  const isolation = raw.isolation ?? base.isolation;
+  const reviewStrictness = raw.review_strictness ?? base.review_strictness;
+  const timeout = raw.timeout_seconds ?? base.timeout_seconds;
+  if (!ROUTING.has(routing) || !ISOLATION.has(isolation) || !STRICTNESS.has(reviewStrictness)) return null;
+  if (!Number.isInteger(timeout) || timeout < 1 || timeout > 7200) return null;
+  if (raw.fallback !== undefined && typeof raw.fallback !== 'boolean') return null;
+  return {
+    role: raw.role,
+    routing,
+    isolation,
+    fallback: raw.fallback ?? base.fallback,
+    timeout_seconds: timeout,
+    review_strictness: reviewStrictness,
+  };
+}
+
+export function roleProfilesFile({ home = homedir() } = {}) {
+  return join(home, '.config', 'dsh-crew', 'profiles.json');
+}
+
+export function loadRoleProfiles({ home = homedir(), file = roleProfilesFile({ home }) } = {}) {
+  if (!existsSync(file)) {
+    return { schema_version: ROLE_PROFILE_SCHEMA_VERSION, ok: true, source: 'defaults', profiles: { ...DEFAULT_ROLE_PROFILES }, errors: [] };
+  }
+  let raw;
+  try { raw = JSON.parse(readFileSync(file, 'utf8')); } catch {
+    return { schema_version: ROLE_PROFILE_SCHEMA_VERSION, ok: false, source: 'file', profiles: { ...DEFAULT_ROLE_PROFILES }, errors: [{ code: 'PROFILE_FILE_INVALID' }] };
+  }
+  return parseRoleProfiles(raw);
+}
+
+function parseRoleProfiles(raw) {
+  const errors = [];
+  const profiles = { ...DEFAULT_ROLE_PROFILES };
+  if (raw?.schema_version !== ROLE_PROFILE_SCHEMA_VERSION || !raw.profiles || typeof raw.profiles !== 'object' || Array.isArray(raw.profiles)) {
+    return { schema_version: ROLE_PROFILE_SCHEMA_VERSION, ok: false, source: 'file', profiles, errors: [{ code: 'PROFILE_FILE_INVALID' }] };
+  }
+  for (const [id, value] of Object.entries(raw.profiles)) {
+    if (id in DEFAULT_ROLE_PROFILES) {
+      const normalized = normalizeProfile(id, value);
+      if (!normalized || JSON.stringify(normalized) !== JSON.stringify(DEFAULT_ROLE_PROFILES[id])) {
+        errors.push({ code: 'PROFILE_DEFAULT_RESERVED', profile_id: id });
+      }
+      continue;
+    }
+    const profile = normalizeProfile(id, value);
+    if (!profile) errors.push({ code: 'PROFILE_INVALID', profile_id: ID.test(id) ? id : '<invalid>' });
+    else profiles[id] = profile;
+  }
+  return { schema_version: ROLE_PROFILE_SCHEMA_VERSION, ok: errors.length === 0, source: 'file', profiles, errors: errors.slice(0, 32) };
+}
+
+export function saveRoleProfiles(document, { home = homedir(), file = roleProfilesFile({ home }) } = {}) {
+  const parsed = parseRoleProfiles(document);
+  if (!parsed.ok) return parsed;
+  const custom = Object.fromEntries(Object.entries(parsed.profiles).filter(([id]) => !(id in DEFAULT_ROLE_PROFILES)));
+  const payload = { schema_version: ROLE_PROFILE_SCHEMA_VERSION, profiles: custom };
+  mkdirSync(dirname(file), { recursive: true });
+  const temp = `${file}.tmp-${process.pid}-${Date.now()}`;
+  try {
+    writeFileSync(temp, `${JSON.stringify(payload, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+    renameSync(temp, file);
+  } catch (error) {
+    rmSync(temp, { force: true });
+    return { ...parsed, ok: false, errors: [{ code: 'PROFILE_FILE_WRITE_FAILED' }], error_code: 'PROFILE_FILE_WRITE_FAILED' };
+  }
+  return { ...parsed, source: 'file' };
+}
+
+export function resolveRoleProfile(registry, profileId, role = 'worker') {
+  const id = profileId ?? `${role}-default`;
+  const profile = registry?.profiles?.[id];
+  if (!profile) return { ok: false, code: 'PROFILE_NOT_FOUND', profile_id: id };
+  if (profile.role !== role) return { ok: false, code: 'PROFILE_ROLE_MISMATCH', profile_id: id, expected_role: role };
+  return { ok: true, profile_id: id, profile: { ...profile } };
+}

package/src/runtime-controls.mjs

@@ -1,84 +1,84 @@
-// Runtime control activation contract.
-//
-// This is deliberately data, not UI prose. MCP diagnostics and the Settings
-// surface consume the same boundary definitions so users are never told two
-// different stories about when a config change takes effect.
-
-export const ACTIVATION_BOUNDARY = Object.freeze({
-  LIVE: 'live',
-  NEXT_WORKFLOW: 'next-workflow',
-  NEXT_SESSION: 'next-session',
-  RESTART_REQUIRED: 'restart-required',
-});
-
-const N = ACTIVATION_BOUNDARY.NEXT_WORKFLOW;
-const S = ACTIVATION_BOUNDARY.NEXT_SESSION;
-const L = ACTIVATION_BOUNDARY.LIVE;
-const R = ACTIVATION_BOUNDARY.RESTART_REQUIRED;
-
-/**
- * `global` describes a write made through persisted Settings/config.
- * `session` describes an explicit dsh_worker_config override in the already
- * running MCP process. `session: null` means the setting is not a session
- * override surface.
- */
-export const RUNTIME_SETTING_ACTIVATION = Object.freeze({
-  max_parallel: Object.freeze({ global: L, session: null, note: 'Admission limit refreshes before new workflow starts and when slots release; lowering never cancels active work.' }),
-
-  subagents_enabled: Object.freeze({ global: N, session: N }),
-  collaboration_mode: Object.freeze({ global: N, session: N }),
-  main_agent_mode: Object.freeze({ global: N, session: N }),
-  flash_state: Object.freeze({ global: N, session: N }),
-  pro_state: Object.freeze({ global: N, session: N }),
-  worker_state: Object.freeze({ global: N, session: N }),
-  review_state: Object.freeze({ global: N, session: N }),
-  auto_review: Object.freeze({ global: N, session: N }),
-  pro_reviews_flash: Object.freeze({ global: N, session: N }),
-  worker_provider_mode: Object.freeze({ global: N, session: null }),
-  flash_model_priority: Object.freeze({ global: N, session: null }),
-  flash_model_fallback: Object.freeze({ global: N, session: null }),
-  pro_model_priority: Object.freeze({ global: N, session: null }),
-  pro_model_fallback: Object.freeze({ global: N, session: null }),
-  adaptive_routing: Object.freeze({ global: N, session: null, note: 'Opt-in provider health ordering is read for the next Hub model selection; existing explicit priorities remain authoritative.' }),
-  isolation: Object.freeze({ global: N, session: null }),
-
-  // These values are copied into the MCP session defaults at process startup.
-  // dsh_worker_config can override them for subsequent workflows in that same
-  // session, but persisted global edits require a new MCP session to inherit.
-  default_tier: Object.freeze({ global: S, session: N }),
-  default_effort: Object.freeze({ global: S, session: N }),
-  mode: Object.freeze({ global: S, session: N }),
-  default_timeout_seconds: Object.freeze({ global: S, session: N }),
-  escalate_on_failure: Object.freeze({ global: S, session: N }),
-  preset_flash: Object.freeze({ global: S, session: N }),
-  preset_pro: Object.freeze({ global: S, session: N }),
-
-  // hub-client freezes its base URL at module initialization.
-  hub_url: Object.freeze({ global: R, session: null }),
-});
-
-export function activationForSetting(key) {
-  const entry = RUNTIME_SETTING_ACTIVATION[key];
-  return entry ? { ...entry } : null;
-}
-
-export function runtimeActivationMetadata() {
-  return Object.fromEntries(
-    Object.entries(RUNTIME_SETTING_ACTIVATION).map(([key, value]) => [key, { ...value }]),
-  );
-}
-
-export function summarizeActivationBoundaries(metadata = RUNTIME_SETTING_ACTIVATION) {
-  const out = {
-    live: [],
-    'next-workflow': [],
-    'next-session': [],
-    'restart-required': [],
-  };
-  for (const [key, entry] of Object.entries(metadata)) {
-    const boundary = entry?.global;
-    if (out[boundary]) out[boundary].push(key);
-  }
-  for (const values of Object.values(out)) values.sort();
-  return out;
-}
+// Runtime control activation contract.
+//
+// This is deliberately data, not UI prose. MCP diagnostics and the Settings
+// surface consume the same boundary definitions so users are never told two
+// different stories about when a config change takes effect.
+
+export const ACTIVATION_BOUNDARY = Object.freeze({
+  LIVE: 'live',
+  NEXT_WORKFLOW: 'next-workflow',
+  NEXT_SESSION: 'next-session',
+  RESTART_REQUIRED: 'restart-required',
+});
+
+const N = ACTIVATION_BOUNDARY.NEXT_WORKFLOW;
+const S = ACTIVATION_BOUNDARY.NEXT_SESSION;
+const L = ACTIVATION_BOUNDARY.LIVE;
+const R = ACTIVATION_BOUNDARY.RESTART_REQUIRED;
+
+/**
+ * `global` describes a write made through persisted Settings/config.
+ * `session` describes an explicit dsh_worker_config override in the already
+ * running MCP process. `session: null` means the setting is not a session
+ * override surface.
+ */
+export const RUNTIME_SETTING_ACTIVATION = Object.freeze({
+  max_parallel: Object.freeze({ global: L, session: null, note: 'Admission limit refreshes before new workflow starts and when slots release; lowering never cancels active work.' }),
+
+  subagents_enabled: Object.freeze({ global: N, session: N }),
+  collaboration_mode: Object.freeze({ global: N, session: N }),
+  main_agent_mode: Object.freeze({ global: N, session: N }),
+  flash_state: Object.freeze({ global: N, session: N }),
+  pro_state: Object.freeze({ global: N, session: N }),
+  worker_state: Object.freeze({ global: N, session: N }),
+  review_state: Object.freeze({ global: N, session: N }),
+  auto_review: Object.freeze({ global: N, session: N }),
+  pro_reviews_flash: Object.freeze({ global: N, session: N }),
+  worker_provider_mode: Object.freeze({ global: N, session: null }),
+  flash_model_priority: Object.freeze({ global: N, session: null }),
+  flash_model_fallback: Object.freeze({ global: N, session: null }),
+  pro_model_priority: Object.freeze({ global: N, session: null }),
+  pro_model_fallback: Object.freeze({ global: N, session: null }),
+  adaptive_routing: Object.freeze({ global: N, session: null, note: 'Opt-in provider health ordering is read for the next Hub model selection; existing explicit priorities remain authoritative.' }),
+  isolation: Object.freeze({ global: N, session: null }),
+
+  // These values are copied into the MCP session defaults at process startup.
+  // dsh_worker_config can override them for subsequent workflows in that same
+  // session, but persisted global edits require a new MCP session to inherit.
+  default_tier: Object.freeze({ global: S, session: N }),
+  default_effort: Object.freeze({ global: S, session: N }),
+  mode: Object.freeze({ global: S, session: N }),
+  default_timeout_seconds: Object.freeze({ global: S, session: N }),
+  escalate_on_failure: Object.freeze({ global: S, session: N }),
+  preset_flash: Object.freeze({ global: S, session: N }),
+  preset_pro: Object.freeze({ global: S, session: N }),
+
+  // hub-client freezes its base URL at module initialization.
+  hub_url: Object.freeze({ global: R, session: null }),
+});
+
+export function activationForSetting(key) {
+  const entry = RUNTIME_SETTING_ACTIVATION[key];
+  return entry ? { ...entry } : null;
+}
+
+export function runtimeActivationMetadata() {
+  return Object.fromEntries(
+    Object.entries(RUNTIME_SETTING_ACTIVATION).map(([key, value]) => [key, { ...value }]),
+  );
+}
+
+export function summarizeActivationBoundaries(metadata = RUNTIME_SETTING_ACTIVATION) {
+  const out = {
+    live: [],
+    'next-workflow': [],
+    'next-session': [],
+    'restart-required': [],
+  };
+  for (const [key, entry] of Object.entries(metadata)) {
+    const boundary = entry?.global;
+    if (out[boundary]) out[boundary].push(key);
+  }
+  for (const values of Object.values(out)) values.sort();
+  return out;
+}

package/src/runtime-identity-contract.mjs

@@ -1,34 +1,34 @@
-// Browser-safe runtime identity primitives shared by the Hub, extension
-// contract and client.  Do not coerce missing values: an incomplete identity
-// is never evidence of the native 3210 Crew runtime.
-
-export const PRODUCTION_EXECUTION_PLANE = 'hub-3210';
-export const PRODUCTION_PROFILE = 'dsh-crew';
-export const PRODUCTION_LISTEN_PORT = 3210;
-
-function nonEmpty(value) {
-  return typeof value === 'string' && value.trim().length > 0;
-}
-
-export function isCompleteRuntimeIdentity(identity) {
-  return Boolean(identity && typeof identity === 'object'
-    && nonEmpty(identity.execution_plane)
-    && nonEmpty(identity.profile)
-    && Number.isInteger(identity.listen_port) && identity.listen_port > 0
-    && nonEmpty(identity.runtime_id));
-}
-
-export function sameCompleteRuntimeIdentity(left, right) {
-  return isCompleteRuntimeIdentity(left) && isCompleteRuntimeIdentity(right)
-    && left.execution_plane === right.execution_plane
-    && left.profile === right.profile
-    && left.listen_port === right.listen_port
-    && left.runtime_id === right.runtime_id;
-}
-
-export function isExactNativeCrewIdentity(identity) {
-  return isCompleteRuntimeIdentity(identity)
-    && identity.execution_plane === PRODUCTION_EXECUTION_PLANE
-    && identity.profile === PRODUCTION_PROFILE
-    && identity.listen_port === PRODUCTION_LISTEN_PORT;
-}
+// Browser-safe runtime identity primitives shared by the Hub, extension
+// contract and client.  Do not coerce missing values: an incomplete identity
+// is never evidence of the native 3210 Crew runtime.
+
+export const PRODUCTION_EXECUTION_PLANE = 'hub-3210';
+export const PRODUCTION_PROFILE = 'dsh-crew';
+export const PRODUCTION_LISTEN_PORT = 3210;
+
+function nonEmpty(value) {
+  return typeof value === 'string' && value.trim().length > 0;
+}
+
+export function isCompleteRuntimeIdentity(identity) {
+  return Boolean(identity && typeof identity === 'object'
+    && nonEmpty(identity.execution_plane)
+    && nonEmpty(identity.profile)
+    && Number.isInteger(identity.listen_port) && identity.listen_port > 0
+    && nonEmpty(identity.runtime_id));
+}
+
+export function sameCompleteRuntimeIdentity(left, right) {
+  return isCompleteRuntimeIdentity(left) && isCompleteRuntimeIdentity(right)
+    && left.execution_plane === right.execution_plane
+    && left.profile === right.profile
+    && left.listen_port === right.listen_port
+    && left.runtime_id === right.runtime_id;
+}
+
+export function isExactNativeCrewIdentity(identity) {
+  return isCompleteRuntimeIdentity(identity)
+    && identity.execution_plane === PRODUCTION_EXECUTION_PLANE
+    && identity.profile === PRODUCTION_PROFILE
+    && identity.listen_port === PRODUCTION_LISTEN_PORT;
+}