@robmclarty/volley 0.6.1 → 0.7.0

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## v0.7.0 — 2026-10-16
+
+### Added
+- **Each seat can use its own model server.** `--builder-url` and `--critic-url` (`builder_url` and `critic_url` in a config file) point the builder and the critic at different machines even when both run on the same provider, such as two Ollama servers. A seat without a URL of its own uses the provider's env var (`VOLLEY_OLLAMA_URL` or `VOLLEY_LMSTUDIO_URL`), then the default, never the other seat's. Everything a seat sends goes to its URL: its model calls, the Ollama prewarm and context check, and the `--dry-run` probe and critic canary. Inside the sandbox, a loopback seat URL crosses to `VOLLEY_MODEL_HOST` on its own port. Both URLs carry over to `volley resume` and to every `volley matrix` pairing. A URL on a `claude_cli` seat, or one that isn't plain http(s), is a configuration error (exit 5).
+
+### Changed
+- **Ollama seats need ai-sdk-ollama 4.3.0 or later.** Before 4.3.0 it streams a thinking model's reasoning only when a request sets `think`, which volley never does, so the reasoning vanished from the terminal and the trajectory and the phase's throughput read high. volley now declares the floor as an optional peer: pnpm warns about an older copy, npm refuses it with ERESOLVE, and an install without ai-sdk-ollama is unaffected.
+- **`--dry-run` probes the critic's model endpoint too.** Each local seat's endpoint is probed, once for a server both seats share, so a `claude_cli` builder with a local critic now gets a reachability check before the canary, and an unreachable endpoint is named with its seat.
+- **`ResolvedConfig` has `builder_url` and `critic_url`.** Both are required (`string | null`), so SDK code that builds a `ResolvedConfig` by hand instead of through `resolve_config` needs them. A run saved by an earlier version resumes with both null.
+- **An empty `VOLLEY_OLLAMA_URL` or `VOLLEY_LMSTUDIO_URL` means the default.** It used to fail the run with a configuration error.
+
+### Fixed
+- **An IPv6 loopback model URL reaches the host from inside the sandbox.** `http://[::1]:…` was never crossed to `VOLLEY_MODEL_HOST`, because `URL` keeps the brackets in the hostname.
+
+### Internal
+- **Built on fascicle 0.14.0, TypeScript 7, and tsdown.** tsdown replaces tsup, whose declaration build needed a compiler API TypeScript 7 no longer exports. The published files keep their names and exports, and the bundles now keep their source comments. The dev toolchain moves to checkride 0.14.0, fallow 3.33.1, oxlint 1.88.0, vitest 5.0.4, and @ast-grep/cli 0.50.0, alongside ai 7.0.140, undici 8.12.1, and cac 7.1.0, and `pnpm audit` is clean.
+- **The throughput docs mark the gap that remains on Ollama.** A turn whose only output is a tool call still reports a rate far too high until fascicle times those turns another way (robmclarty/fascicle#12).
+- **An integration test holds each seat to its own server.** It runs real engines against two stand-in Ollama servers, and the local-provider tests no longer reach a developer's own Ollama.
+
 ## v0.6.1 — 2026-10-14
 
 ### Fixed

package/README.md

@@ -157,10 +157,12 @@ volley matrix --builders <models> --critics <models> --config <path>
 | `--check` | `auto` | `auto` (checkride if detected, else none), `none`, or a shell command. |
 | `--builder-model` | `opus` | `opus`/`sonnet`/`haiku` or a full model id. |
 | `--builder-provider` | `claude_cli` | `claude_cli`, `ollama`, or `lmstudio` (see [Local builder](#local-builder)). |
+| `--builder-url` | the provider's env var | The builder's model server base URL, for `ollama` or `lmstudio` only. Lets the builder and critic run on different machines with the same provider (see [Seats on different machines](#seats-on-different-machines)). |
 | `--builder-max-steps` | `50` | Local builder tool-loop step cap per iteration. Ignored for `claude_cli`. |
 | `--allow-unsandboxed-builder` | off | Permit a local builder to run without a sandbox (see [Local builder](#local-builder)). |
 | `--critic-model` | `opus` | Model for the critic. |
 | `--critic-provider` | `claude_cli` | `claude_cli`, `ollama`, or `lmstudio` (see [Local critic](#local-critic)). |
+| `--critic-url` | the provider's env var | The critic's model server base URL, for `ollama` or `lmstudio` only. |
 | `--builder-permission-mode` | `acceptEdits` | Or `bypassPermissions` for fully trusted workspaces. |
 | `--critic` | `reviewer` | `reviewer`, `optimizer`, `researcher`, or a prompt file path. |
 | `--max-iterations` | `10` | Hard iteration cap. |
@@ -172,7 +174,7 @@ volley matrix --builders <models> --critics <models> --config <path>
 | `--fail-on-gate-edit` | off | Halt the run (exit 8) if the builder edits a gate path, instead of reporting it. |
 | `--sandbox-image` | `volley-sandbox:latest` | Container image for the local-builder sandbox. Or `VOLLEY_SANDBOX_IMAGE`. |
 | `--run-id` | a fresh UUID | The run's id, naming its `.volley/` state and its `volley/<id>` branch, so a harness that owns the id finds it in both. Letters, digits, `-`, and `_`, starting with a letter or digit. |
-| `--dry-run` | off | Validate config, run `checkride doctor` and (for a local critic) the critic-seat canary, then exit. |
+| `--dry-run` | off | Validate config, run `checkride doctor`, probe each local seat's model endpoint, run the critic-seat canary (for a local critic), then exit. |
 | `--config` | — | TypeScript config file (`VolleyConfig` default export). CLI flags override. |
 | `--json` | off | Machine mode: one summary JSON document on stdout. |
 | `--verbose` | off | Full tool inputs/outputs (truncated at 4000 chars). |
@@ -244,7 +246,7 @@ volley matrix \
 
 | Matrix flag | Description |
 |---|---|
-| `--config` | Base `VolleyConfig` (TS/JS): the task, workspace, providers, and caps held fixed. Required. |
+| `--config` | Base `VolleyConfig` (TS/JS): the task, workspace, providers, seat URLs, and caps held fixed. Required. |
 | `--builders` | Comma-separated builder models to sweep. |
 | `--critics` | Comma-separated critic models to sweep. |
 | `--repeat` | Attempts per seat (default 1). A pass *rate* needs more than one. |
@@ -296,8 +298,8 @@ produced none at all (`status: broke`).
 
 ## Local critic
 
-The builder always runs on the Claude Code CLI, but the critic is read-only
-and schema-constrained — a good fit for a cheaper local model. Point it at a
+The critic is read-only and schema-constrained, which makes it a good fit for
+a cheaper local model even when the builder stays on Claude. Point it at a
 local provider with `--critic-provider`:
 
 ```sh
@@ -317,19 +319,29 @@ Providers and their setup:
 
 | `--critic-provider` | Server | Base-URL env (default) | Required peer dependency |
 |---|---|---|---|
-| `ollama` | [Ollama](https://ollama.com) | `VOLLEY_OLLAMA_URL` (`http://localhost:11434`) | `ai-sdk-ollama@^4` |
+| `ollama` | [Ollama](https://ollama.com) | `VOLLEY_OLLAMA_URL` (`http://localhost:11434`) | `ai-sdk-ollama@^4.3.0` |
 | `lmstudio` | [LM Studio](https://lmstudio.ai) | `VOLLEY_LMSTUDIO_URL` (`http://localhost:1234/v1`) | `@ai-sdk/openai-compatible` |
 
 Install the peer for your provider in the project running volley (e.g.
-`pnpm add ai-sdk-ollama@^4`); fascicle loads it lazily only when the local
-critic actually runs. The major matters: it must satisfy fascicle's declared
-peer range (`^4` for fascicle 0.12.13, which tracks the AI SDK v7 line; a bare
-`pnpm add ai-sdk-ollama` installs v4, which is exactly what this major wants).
+`pnpm add ai-sdk-ollama@^4.3.0`); fascicle loads it lazily only when the local
+critic actually runs. The version matters. The major must satisfy fascicle's
+declared peer range (`^4` for fascicle 0.14.0, which tracks the AI SDK v7
+line), and volley declares 4.3.0 as its floor (an optional peer, so your
+package manager flags an older copy at install time). Before 4.3.0,
+ai-sdk-ollama streams a thinking model's reasoning only when the request sets
+`think`, which volley never does: the reasoning disappears from the terminal
+and the trajectory, and the phase's throughput reads high. A bare
+`pnpm add ai-sdk-ollama` installs the latest 4.x, which clears the floor.
 The Ollama base URL is the **server root** — `ai-sdk-ollama` adds the `/api`
 prefix itself (volley strips a trailing `/api` from `VOLLEY_OLLAMA_URL` for
 compatibility). Local providers are free, so the critic's cost is reported as
 `$0.000` and the run total reflects builder spend only.
 
+The env var sets a provider's URL for both seats. To give the critic a server
+of its own, pass `--critic-url` (`critic_url` in a config file). A seat uses its
+own URL, then the provider's env var, then the default, and never the other
+seat's URL; see [Seats on different machines](#seats-on-different-machines).
+
 Keeping the builder on Claude while the critic goes local is the low-risk split:
 the recurring per-iteration critic cost drops to zero and the critic is
 read-only, so a weaker local model can only mis-judge, never mis-edit. A local
@@ -408,7 +420,8 @@ is discarded wholesale in all three modes: an abandoned phase leaves nothing
 behind.
 
 Provider setup is the same as the [local critic](#local-critic) table
-(`VOLLEY_OLLAMA_URL` / `VOLLEY_LMSTUDIO_URL`, same peer dependencies). At
+(`VOLLEY_OLLAMA_URL` / `VOLLEY_LMSTUDIO_URL`, or `--builder-url` for the builder
+alone; same peer dependencies). At
 builder start (and before a local critic's first verdict) volley pre-loads an
 Ollama model with a load-only `/api/generate` call, so a cold multi-GB model
 load doesn't eat the first real request's time-to-first-byte budget — without
@@ -443,6 +456,44 @@ weak local model to drive a tool loop reliably has three sharp edges:
 Local providers are free, so a local builder's cost is reported as `$0.000` and
 never trips `--max-cost-usd`.
 
+### Seats on different machines
+
+Each seat can reach its own model server, so the builder and the critic can run
+on different machines even when they use the same provider. Give each seat a
+URL with `--builder-url` and `--critic-url`, or in a config file:
+
+```ts
+const config: VolleyConfig = {
+  // ...the task...
+  builder_provider: 'ollama',
+  builder_model: 'qwen3-coder:30b',
+  builder_url: 'http://localhost:11434', // this machine
+  critic_provider: 'ollama',
+  critic_model: 'qwen3:8b',
+  critic_url: 'http://localhost:11522', // a second machine, forwarded here
+};
+```
+
+- **Fallback.** A seat without a URL of its own uses the provider's env var,
+  then the default, never the other seat's URL.
+- **Same rules as the env var.** Ollama's trailing `/api` is dropped. The URL
+  must be plain `http(s)`, with no credentials, query, or fragment. Include the
+  port: a URL without one goes to 80 or 443, not the provider's default.
+- **`claude_cli` takes no URL.** Setting one on a `claude_cli` seat is a
+  configuration error (exit 5).
+- **Everything a seat sends goes to its own URL.** That covers the model calls,
+  the Ollama prewarm and context check, and the `--dry-run` endpoint probe and
+  critic canary. `volley matrix` holds both URLs fixed across every pairing.
+
+Inside the sandbox container, a loopback seat URL crosses to the host at
+`VOLLEY_MODEL_HOST` the way the env var does, keeping its port. So the two seats
+can be two forwarded ports on the host (`localhost:11522`, `localhost:11523`).
+With the allowlist's host rules in place the container reaches only the host
+gateway, so it can reach a seat on another machine only through a port forward
+on the host, for example `ssh -N -L 11522:localhost:11434 gpu-box`. On a Linux
+host, `host-gateway` is the Docker bridge's address, so the forward, like Ollama
+itself, has to listen there rather than on `127.0.0.1` alone.
+
 ## What the builder changed
 
 A check that exits 0 proves the check passed. It does not prove the builder did
@@ -520,7 +571,7 @@ pnpm install
 pnpm test          # vitest
 pnpm typecheck     # tsc --noEmit
 pnpm check         # checkride — volley dogfoods its own definition of done
-pnpm build         # tsup → dist/
+pnpm build         # tsdown → dist/
 pnpm diagram       # draw the flow from src/flow.ts with describe.diagram
 ```