@stage5/lumine 0.2.36 → 0.2.38

package/lib/admin.js

@@ -4,19 +4,17 @@ import { assertAuthScope, resolveAuth } from "./auth.js";
 import { requestJson } from "./http.js";
 
 const MAX_EDITORIAL_FILE_BYTES = 256 * 1024;
-const MAX_COMPOSED_COMMENT_FILE_BYTES = 64 * 1024;
-const MAX_COMPOSED_COMMENT_LENGTH = 10_000;
+const MAX_COMPOSED_TEXT_FILE_BYTES = 64 * 1024;
+const MAX_COMPOSED_TEXT_LENGTH = 10_000;
 const MAX_NOTABLE_NOTE_LENGTH = 2_000;
 
-// Operator-composed persona comment text (plain UTF-8, not JSON). The agent
-// writes the comment in the bot's persona itself; the server never invokes
+// Operator-composed persona text (plain UTF-8, not JSON). The agent writes
+// the content in the bot's persona itself; the server never invokes
 // its model and no AI Energy is spent.
-function readComposedCommentFile(filePath) {
+function readComposedTextFile(filePath) {
   const normalizedPath = String(filePath || "").trim();
   if (!normalizedPath) {
-    throw cliValidationError(
-      "Pass composed comment text with --file <comment.md>.",
-    );
+    throw cliValidationError("Pass composed text with --file <file.md>.");
   }
   let contents;
   try {
@@ -24,18 +22,18 @@ function readComposedCommentFile(filePath) {
   } catch {
     throw cliValidationError(`Could not read ${normalizedPath}.`);
   }
-  if (Buffer.byteLength(contents, "utf8") > MAX_COMPOSED_COMMENT_FILE_BYTES) {
-    throw cliValidationError("The composed comment file must be under 64KB.");
+  if (Buffer.byteLength(contents, "utf8") > MAX_COMPOSED_TEXT_FILE_BYTES) {
+    throw cliValidationError("The composed text file must be under 64KB.");
   }
   const normalized = contents.trim();
   if (!normalized) {
     throw cliValidationError(
-      `${normalizedPath} is empty; a composed comment needs text.`,
+      `${normalizedPath} is empty; composed text is required.`,
     );
   }
-  if (normalized.length > MAX_COMPOSED_COMMENT_LENGTH) {
+  if (normalized.length > MAX_COMPOSED_TEXT_LENGTH) {
     throw cliValidationError(
-      `A composed comment must be at most ${MAX_COMPOSED_COMMENT_LENGTH} characters.`,
+      `Composed text must be at most ${MAX_COMPOSED_TEXT_LENGTH} characters.`,
     );
   }
   return normalized;
@@ -724,6 +722,17 @@ export function parseAdminOperation(options) {
     );
   }
 
+  if (namespace === "announcement" && action === "post") {
+    return writeOperation(
+      "announcement.post",
+      "POST",
+      "/cli/admin/announcements",
+      {
+        content: readComposedTextFile(options.adminFile),
+      },
+    );
+  }
+
   if (namespace === "chat" && action === "send") {
     const rawTarget = String(target || "").trim();
     if (!rawTarget) {
@@ -735,7 +744,7 @@ export function parseAdminOperation(options) {
     // the bot's voice; the server never invokes a model for it.
     return writeOperation("chat.send", "POST", "/cli/admin/chat-messages", {
       target: rawTarget,
-      content: readComposedCommentFile(options.adminFile),
+      content: readComposedTextFile(options.adminFile),
     });
   }
 
@@ -821,7 +830,7 @@ export function parseAdminOperation(options) {
             ? parseIdentity(options.adminIdentity)
             : undefined,
           ...(options.adminFile
-            ? { content: readComposedCommentFile(options.adminFile) }
+            ? { content: readComposedTextFile(options.adminFile) }
             : {}),
           ...(reviewedBuildVersionId ? { reviewedBuildVersionId } : {}),
           ...(buildReviewMethod ? { buildReviewMethod } : {}),
@@ -849,7 +858,7 @@ export function parseAdminOperation(options) {
         "comment.edit",
         "PUT",
         `/cli/admin/comments/${commentId}`,
-        { content: readComposedCommentFile(options.adminFile) },
+        { content: readComposedTextFile(options.adminFile) },
       );
     }
     if (action === "post") {
@@ -868,7 +877,7 @@ export function parseAdminOperation(options) {
   }
 
   throw cliValidationError(
-    "Usage: lumine admin identity|daily-run|recommendations|builds|post|subjects|subject|featured|comment|chat|news|audit|brief|bot-output|notable ...",
+    "Usage: lumine admin identity|daily-run|recommendations|builds|post|subjects|subject|featured|comment|announcement|chat|news|audit|brief|bot-output|notable ...",
   );
 }
 

package/lib/commands.js

@@ -908,7 +908,7 @@ export async function save(options) {
   buildId = Number(build?.id || buildId);
   const dir = resolveProjectDirForSave({ options, localProject });
   const files = await collectProjectFiles(dir);
-  assertProjectFilesWithinLimits(files);
+  assertProjectFilesWithinLimits(files, build?.projectLimits);
   // Only claim a base snapshot when this workspace was pulled from the same
   // build we are saving to. Missing filesHash used to mean "unguarded save",
   // which let stale checkouts silently rewind newer server versions — refuse
@@ -975,12 +975,25 @@ export async function save(options) {
     }
     throw error;
   }
-  build = result.build ||
-    build ||
-    (await loadBuildMetadata({ options, auth, buildId }).catch(() => null)) || {
+  build = result.build ? { ...build, ...result.build } : build;
+  if (result.copilotPolicy?.limits) {
+    build = {
+      ...build,
+      projectLimits: {
+        maxProjectBytes: result.copilotPolicy.limits.maxProjectBytes,
+        maxFilesPerProject: result.copilotPolicy.limits.maxFilesPerProject,
+        maxFileLines: result.copilotPolicy.limits.maxFileLines,
+      },
+    };
+  }
+  if (!build) {
+    build = (await loadBuildMetadata({ options, auth, buildId }).catch(
+      () => null,
+    )) || {
       id: buildId,
       title: `Build ${buildId}`,
     };
+  }
   await saveSelectedBuild({ options, auth, build });
   await writeProjectMetadata({
     dir,
@@ -1010,9 +1023,10 @@ export async function save(options) {
 }
 
 export async function check(options) {
-  await reportLocalProjectFindings(options);
   const auth = await resolveAuth(options);
   const buildId = await resolveRequiredBuildIdOrSelected(options, auth);
+  const canonicalBuild = await loadBuildMetadata({ options, auth, buildId });
+  await reportLocalProjectFindings(options, canonicalBuild?.projectLimits);
   const result = await requestJson({
     url: `${options.apiUrl}/cli/build/${buildId}/launch-check`,
     authToken: auth.token,
@@ -1022,9 +1036,13 @@ export async function check(options) {
   if (!result.ok) process.exitCode = 1;
 }
 
-// Local, network-free half of `lumine check`: validate the workspace against
-// the platform's project-file rules so agents see violations before saving.
-export async function reportLocalProjectFindings(options) {
+// Local half of `lumine check`: validate the workspace against the canonical
+// project limits fetched by check(), so a newly approved allowance works
+// immediately without requiring another pull just to refresh local metadata.
+export async function reportLocalProjectFindings(
+  options,
+  canonicalProjectLimits,
+) {
   const localProject = await findLocalProjectMetadata(
     path.resolve(options.dir || process.cwd()),
   );
@@ -1037,7 +1055,10 @@ export async function reportLocalProjectFindings(options) {
     process.exitCode = 1;
     return;
   }
-  const { errors, warnings } = collectProjectLimitFindings(files);
+  const { errors, warnings } = collectProjectLimitFindings(
+    files,
+    canonicalProjectLimits || localProject?.metadata?.build?.projectLimits,
+  );
   for (const warning of warnings) {
     console.error(`Local check warning: ${warning}`);
   }
@@ -1171,10 +1192,14 @@ export async function resolveBuildForSave({
   const localBuild = localProject?.metadata?.build;
   const localBuildId =
     Number(localBuild?.id || 0) || Number(localProject?.metadata?.buildId || 0);
+  // Save is already an online operation. Refresh the server-owned Build
+  // metadata before enforcing permissions and project limits so a newly
+  // approved Main allowance (inherited by branches) works without re-pulling.
+  const canonicalBuild = await loadBuildMetadata({ options, auth, buildId });
   const build =
     localBuild && localBuildId === Number(buildId)
-      ? { ...localBuild, id: buildId }
-      : await loadBuildMetadata({ options, auth, buildId });
+      ? { ...localBuild, ...canonicalBuild, id: buildId }
+      : canonicalBuild;
   return await resolveEditableWorkspaceBuild({
     options,
     auth,
@@ -1281,6 +1306,7 @@ export function normalizeContributionBranchBuild({ branch, sourceBuild }) {
       Number(branch?.contributionContributorId || branch?.userId || 0) || null,
     contributionBranchNumber:
       Number(branch?.contributionBranchNumber || 0) || null,
+    projectLimits: branch?.projectLimits || sourceBuild?.projectLimits || null,
   };
 }
 
@@ -2541,6 +2567,7 @@ export function printHelp() {
   lumine admin comment edit <comment-id> --file <comment.md> [--json]
   lumine admin brief [--days <1..30>] [--json]
   lumine admin bot-output [--days <1..30>] [--json]
+  lumine admin announcement post --file <announcement.md> [--json]
   lumine admin chat send <user-id|username> --file <message.md> [--json]
   lumine admin notable add <user-id|username> --note <text> [--json]
   lumine admin audit [list] [--run current|last|<run-id>] [--target <target>] [--actions <a,b>] [--full] [--cursor <cursor>] [--json]
@@ -2626,7 +2653,7 @@ Options:
   --reward-twinkles 3   Pair a recommendation with exactly 3 Twinkles
   --twinkles 3          Give exactly 3 Twinkles through the normal economy
   --draft-id <id>       Canonical delegated comment draft ID
-  --file <path>         Editorial JSON or composed comment text file
+  --file <path>         Editorial JSON or composed text file
   --reviewed-version <id> Published Build artifact version actually reviewed
   --reviewed-via <method> Build review method: runtime or code
   --reason <text>       Reason when marking an admin run failed

package/lib/constants.js

@@ -69,14 +69,12 @@ export const ASSET_MIME_BY_EXTENSION = {
   ".bin": "application/octet-stream",
   ".drc": "application/octet-stream",
 };
-// Mirrors the platform's project-file limits. File count and effective-line
-// limits are hardcoded server constants; the total-byte limit is
-// env-overridable server-side, so the CLI only warns on it.
+// Default platform project-file limits. A pulled workspace can carry larger
+// canonical per-project limits approved on Main in lumine-project.json.
 export const PROJECT_MAX_FILES = 100;
 export const PROJECT_MAX_EFFECTIVE_FILE_LINES = 500;
 export const PROJECT_EFFECTIVE_LINE_MAX_COLUMNS = 160;
 export const PROJECT_MAX_TOTAL_BYTES_DEFAULT = 1024 * 1024;
-export const PROJECT_WARN_TOTAL_BYTES = 500 * 1024;
 // Matches asset references in project files: absolute CloudFront URLs and
 // relative /attachments/build-runtime|optimized/... paths.
 export const RUNTIME_ASSET_REFERENCE_PATTERN =
@@ -233,10 +231,12 @@ lumine save --summary "Describe the change"
 
 ## Project File Limits
 
-- Max ${PROJECT_MAX_FILES} files per project; each file max ${PROJECT_MAX_EFFECTIVE_FILE_LINES} effective lines
+- Default max ${PROJECT_MAX_FILES} files and ${Math.floor(PROJECT_MAX_TOTAL_BYTES_DEFAULT / 1024)} KB per project. Read
+  \`.twinkle/lumine-project.json\` for this project's canonical \`projectLimits\`;
+  an approved Main project can allow up to 500 files and 5 MB, inherited by branches.
+- Each file max ${PROJECT_MAX_EFFECTIVE_FILE_LINES} effective lines
   (a physical line counts once per ${PROJECT_EFFECTIVE_LINE_MAX_COLUMNS} characters, so minified one-liners
-  blow the limit). Default total project size cap ${Math.floor(PROJECT_MAX_TOTAL_BYTES_DEFAULT / 1024)} KB,
-  with a soft warning from ${Math.floor(PROJECT_WARN_TOTAL_BYTES / 1024)} KB.
+  blow the limit).
 - Plan file splits BEFORE writing code; \`lumine check\` validates the local
   workspace against these limits without saving, and \`lumine save\` fails fast
   locally listing every violation.

package/lib/workspace.js

@@ -15,7 +15,6 @@ import {
   PROJECT_MAX_EFFECTIVE_FILE_LINES,
   PROJECT_MAX_FILES,
   PROJECT_MAX_TOTAL_BYTES_DEFAULT,
-  PROJECT_WARN_TOTAL_BYTES,
   PROJECT_METADATA_DIR,
   PROJECT_METADATA_FILE,
   SDK_REFERENCE_FALLBACK,
@@ -342,16 +341,30 @@ export function countEffectiveLines(value) {
     );
 }
 
-// Local mirror of the server's project limits so violations fail fast with
-// the full list (the server stops at the first). File count and per-file
-// effective lines are hard server constants -> errors; the total-byte limit
-// is env-overridable server-side -> warning only, the server stays the gate.
-export function collectProjectLimitFindings(files) {
+// Local mirror of the canonical per-project limits returned by the server so
+// violations fail fast with the full list (the server stops at the first).
+export function collectProjectLimitFindings(files, projectLimits = {}) {
   const errors = [];
   const warnings = [];
-  if (files.length > PROJECT_MAX_FILES) {
+  const canonicalMaxFiles = Math.floor(
+    Number(projectLimits?.maxFilesPerProject || 0),
+  );
+  const canonicalMaxProjectBytes = Math.floor(
+    Number(projectLimits?.maxProjectBytes || 0),
+  );
+  const maxFilesPerProject =
+    canonicalMaxFiles > 0 ? canonicalMaxFiles : PROJECT_MAX_FILES;
+  const maxProjectBytes =
+    canonicalMaxProjectBytes > 0
+      ? canonicalMaxProjectBytes
+      : PROJECT_MAX_TOTAL_BYTES_DEFAULT;
+  const warnProjectBytes = Math.min(
+    Math.floor(maxProjectBytes * 0.8),
+    maxProjectBytes - 1,
+  );
+  if (files.length > maxFilesPerProject) {
     errors.push(
-      `Project exceeds the ${PROJECT_MAX_FILES}-file limit (${files.length} files). Split or consolidate files before saving.`,
+      `Project exceeds the ${maxFilesPerProject}-file limit (${files.length} files). Split or consolidate files before saving.`,
     );
   }
   for (const file of files) {
@@ -369,26 +382,23 @@ export function collectProjectLimitFindings(files) {
       total + Buffer.byteLength(String(file.content || ""), "utf8"),
     0,
   );
-  if (totalBytes > PROJECT_MAX_TOTAL_BYTES_DEFAULT) {
-    warnings.push(
-      `Project files total ${formatBytes(totalBytes)}, above the default ${Math.floor(
-        PROJECT_MAX_TOTAL_BYTES_DEFAULT / 1024,
-      )} KB project limit — the server may reject this save.`,
+  if (totalBytes > maxProjectBytes) {
+    errors.push(
+      `Project files total ${formatBytes(totalBytes)}, above this project's ${formatBytes(maxProjectBytes)} limit.`,
     );
-  } else if (totalBytes > PROJECT_WARN_TOTAL_BYTES) {
+  } else if (totalBytes > warnProjectBytes) {
     warnings.push(
-      `Project files total ${formatBytes(totalBytes)} — approaching the ${Math.floor(
-        PROJECT_MAX_TOTAL_BYTES_DEFAULT / 1024,
-      )} KB project cap (soft warning from ${Math.floor(
-        PROJECT_WARN_TOTAL_BYTES / 1024,
-      )} KB). Keep files lean where structure allows.`,
+      `Project files total ${formatBytes(totalBytes)} — approaching this project's ${formatBytes(maxProjectBytes)} cap. Keep files lean where structure allows.`,
     );
   }
   return { errors, warnings };
 }
 
-export function assertProjectFilesWithinLimits(files) {
-  const { errors, warnings } = collectProjectLimitFindings(files);
+export function assertProjectFilesWithinLimits(files, projectLimits = {}) {
+  const { errors, warnings } = collectProjectLimitFindings(
+    files,
+    projectLimits,
+  );
   for (const warning of warnings) {
     console.error(`lumine: warning — ${warning}`);
   }
@@ -587,6 +597,10 @@ export async function writeProjectMetadata({
                 build.canPublish !== undefined
                   ? Boolean(build.canPublish)
                   : build.role === "owner",
+              projectLimits:
+                build.projectLimits && typeof build.projectLimits === "object"
+                  ? build.projectLimits
+                  : null,
             }
           : null,
         apiUrl: options.apiUrl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage5/lumine",
-  "version": "0.2.36",
+  "version": "0.2.38",
   "description": "Command line tools for launching Lumine builds on Twinkle.",
   "type": "module",
   "bin": {

package/sdk/LUMINE_ADMIN.md

@@ -1621,6 +1621,30 @@ Ordinary warm follow-ups (checking on a member the bots already know after
 something the run surfaced) are within a run's judgment, sparingly, and are
 always reported in the run report.
 
+## Official announcements
+
+```bash
+lumine admin announcement post --file announcement.md --json
+```
+
+The run's selected bot posts one composed message to General's announcement
+subchannel (`channelId` 2, `subchannelId` 2). This is the public official
+board, not a DM and not a Home comment. Mechanics:
+
+- requires the `chat:post` scope of a comment-mode `post` run;
+- composed-only (`--file`, same 10,000-character limit as `chat send`);
+- authors as Zero or Ciel only — the ordinary chat post route and the
+  announcement socket relay now treat those two IDs as allowed announcement
+  authors, same as management-level 3 humans;
+- persists through the ordinary `msg_chats` insert (channel lock +
+  visibility restore), writes the Twinkle Newspaper `announcement:<messageId>`
+  event, and relays `new_chat_message` on General. No bot socket, session, or
+  presence;
+- audited as `announcement.post` and idempotent per request key.
+
+Use this only when Mikey asks for an official announcement. Do not treat a
+management run as a standing license to post there.
+
 ## Audit history
 
 ```bash