@stage5/lumine 0.2.55 → 0.2.57

package/README.md

@@ -229,7 +229,7 @@ claude "Read CLAUDE.md, then make the requested change."
 The login command uses a browser approval code and stores a scoped token and the
 selected project at `~/.twinkle/lumine-cli-auth.json`.
 
-## Sponsoring Zero or Ciel Build Workshop duty
+## Sponsoring shared Zero and Ciel Build Workshop help
 
 Sponsorship is an approved contribution role, not an open switch and not a
 website-management role. Applications are submitted only through Lumine CLI;
@@ -243,12 +243,12 @@ lumine sponsor status
 ```
 
 After Mikey approves an application, configure conservative limits based on
-the subscription you are contributing, then start one foreground duty:
+the subscription you are contributing, then start one shared foreground duty:
 
 ```bash
 lumine sponsor capacity --concurrency 1 --helpers 0 \
   --daily-limit 3 --weekly-limit 10
-lumine sponsor duty start zero --provider codex \
+lumine sponsor duty start --provider codex \
   --model gpt-5.6-sol --effort max --service-tier priority
 ```
 
@@ -259,11 +259,14 @@ account may authenticate this way, but login never grants sponsor duty:
 `sponsor duty start` still requires that exact account to have a canonical,
 server-approved sponsor profile.
 
-While that foreground process has a fresh server lease, Zero or Ciel exposes a
-Build Workshop in chat and users may see the named sponsor and canonical queue.
+While that foreground process has a fresh server lease, both Zero and Ciel can
+delegate user-approved Build work to the shared worker pool. The user chooses
+the assistant for each request, and may see the named sponsor and canonical
+shared queue.
 With no live duty, the website stays in its ordinary chat state and shows none
 of the Workshop UI. Press Ctrl-C to stop accepting work and drain already
-claimed jobs before duty ends; `pause`, `resume`, and `stop` are also available.
+claimed jobs before duty ends; `pause`, `resume`, and `stop` are also available
+without a Zero/Ciel argument.
 
 Zero or Ciel remains the user-facing teammate. The local coding agent receives
 only the initial relay and active-job Build follow-ups covered by the user’s
@@ -273,8 +276,9 @@ cannot merge into Main, publish, or use website-management APIs. Lumine records
 the requested and provider-reported model, effort, service tier, runtime/usage
 evidence, coordinator/helper tree, saved artifact, and branch notice. Every
 completed handoff enters the daily integrity flow; probationary, hard-flagged,
-and sampled work requires review. Each unique cleared handoff earns a flat 50
-Karma Points, while retries and helper agents do not multiply the award.
+and sampled work requires review. Each unique cleared contribution to another
+user earns a flat 50 Karma Points, while self-sponsored testing, retries, and
+helper agents do not earn or multiply the award.
 
 ## Privileged website administration
 

package/lib/commands.js

@@ -2730,8 +2730,8 @@ export function printHelp() {
   lumine agent --provider <codex|claude-code> "<build request>"
   lumine sponsor agreement|apply|status|withdraw
   lumine sponsor capacity [--concurrency <n>] [--helpers <n>] [--daily-limit <n>] [--weekly-limit <n>]
-  lumine sponsor duty start <zero|ciel> --provider <codex|claude-code> [--model <name>] [--effort <level>] [--service-tier <tier>]
-  lumine sponsor duty pause|resume|stop <zero|ciel>
+  lumine sponsor duty start --provider <codex|claude-code> [--model <name>] [--effort <level>] [--service-tier <tier>]
+  lumine sponsor duty pause|resume|stop
   lumine sponsor jobs
   lumine app-mcp <published-app-url-or-id> [--no-open]
   lumine new [title]

package/lib/sponsor.js

@@ -212,24 +212,41 @@ async function sponsorDutyCommand(options, args, commandServices) {
     .trim()
     .toLowerCase();
   if (action === "status") {
+    if (args.length > 1) throw new Error(sponsorUsage());
     await printSponsorStatus(options);
     return;
   }
-  const persona = normalizePersona(args[1] || options.sponsorPersona);
+  if (args.length > 1 || options.sponsorPersona) {
+    throw new Error(
+      "Sponsor duty is shared by Zero and Ciel. Remove the persona argument.",
+    );
+  }
   if (["pause", "resume", "stop"].includes(action)) {
     const auth = await ensureAuth(options);
+    const status = await sponsorRequest({ options, auth, path: "/status" });
+    const currentDuties = (status.duties || []).filter((duty) =>
+      ["active", "paused"].includes(String(duty.state || "")),
+    );
+    if (currentDuties.length === 0) {
+      throw new Error("No active sponsor duty session was found.");
+    }
+    if (currentDuties.length > 1) {
+      throw new Error(
+        `Multiple legacy duty sessions are still open (${currentDuties.map((duty) => `#${duty.id}`).join(", ")}). Stop them with the CLI version that started them before using shared duty.`,
+      );
+    }
+    const dutyId = Number(currentDuties[0].id || 0);
+    if (!dutyId) throw new Error("Twinkle returned an invalid duty session.");
     const state =
       action === "resume" ? "active" : action === "stop" ? "stopped" : "paused";
     const result = await sponsorRequest({
       options,
       auth,
       method: "POST",
-      path: `/duty/${persona}/state`,
-      body: { state },
+      path: "/duty/state",
+      body: { dutySessionId: dutyId, state },
     });
-    printJsonOrLines(options, result, [
-      `${displayPersona(persona)} duty is now ${state}.`,
-    ]);
+    printJsonOrLines(options, result, [`Sponsor duty is now ${state}.`]);
     return;
   }
   if (action !== "start") throw new Error(sponsorUsage());
@@ -249,7 +266,7 @@ async function sponsorDutyCommand(options, args, commandServices) {
     method: "POST",
     path: "/duty/start",
     body: {
-      persona,
+      scope: "shared",
       provider,
       requestedModel: options.model || null,
       requestedEffort: options.sponsorEffort || null,
@@ -260,7 +277,6 @@ async function sponsorDutyCommand(options, args, commandServices) {
   await runSponsorDuty({
     options,
     auth,
-    persona,
     provider,
     started,
     commandServices,
@@ -270,7 +286,6 @@ async function sponsorDutyCommand(options, args, commandServices) {
 async function runSponsorDuty({
   options,
   auth,
-  persona,
   provider,
   started,
   commandServices,
@@ -280,6 +295,9 @@ async function runSponsorDuty({
   if (!dutyId || !leaseToken) {
     throw new Error("Twinkle did not return a valid sponsor duty lease.");
   }
+  if (started.duty?.scope !== "shared") {
+    throw new Error("Twinkle did not return a shared sponsor duty lease.");
+  }
   let canonicalDuty = started.duty;
   let stopRequested = false;
   let dutyLeaseError = null;
@@ -294,6 +312,9 @@ async function runSponsorDuty({
   process.on("SIGINT", signalHandler);
   process.on("SIGTERM", signalHandler);
 
+  const dutyHeartbeatEveryMs =
+    Math.max(10, Number(started.heartbeatEverySeconds || 30)) * 1_000;
+  let lastDutyHeartbeatSuccessAt = Date.now();
   const heartbeatDuty = async () => {
     if (dutyHeartbeatRunning) return;
     dutyHeartbeatRunning = true;
@@ -306,6 +327,7 @@ async function runSponsorDuty({
         body: { leaseToken },
       });
       dutyLeaseError = null;
+      lastDutyHeartbeatSuccessAt = Date.now();
       if (canonicalDuty.state === "stopped") stopRequested = true;
     } catch (error) {
       const status = await sponsorRequest({
@@ -322,20 +344,27 @@ async function runSponsorDuty({
         stopRequested = true;
         return;
       }
-      dutyLeaseError = error;
-      stopRequested = true;
+      // Same lease policy as the per-job heartbeat: end the duty only when the
+      // server rejects the lease or the lease window has fully elapsed. A
+      // transient network failure retries on the next tick.
+      const terminalDutyError = !isRetryableSponsorDutyRequestError(error);
+      const leaseWindowElapsed =
+        Date.now() - lastDutyHeartbeatSuccessAt >=
+        Math.max(120_000, dutyHeartbeatEveryMs * 3);
+      if (terminalDutyError || leaseWindowElapsed) {
+        dutyLeaseError = error;
+        stopRequested = true;
+      }
     } finally {
       dutyHeartbeatRunning = false;
     }
   };
   const dutyHeartbeat = setInterval(
     () => void heartbeatDuty(),
-    Math.max(10, Number(started.heartbeatEverySeconds || 30)) * 1_000,
+    dutyHeartbeatEveryMs,
   );
 
-  console.log(
-    `${displayPersona(persona)} sponsor duty started with ${provider}.`,
-  );
+  console.log(`Shared Zero/Ciel sponsor duty started with ${provider}.`);
   printDutyRuntime(canonicalDuty);
   console.log(
     "The Workshop is now discoverable to users. Press Ctrl-C for a graceful stop.",
@@ -352,20 +381,34 @@ async function runSponsorDuty({
         Number(canonicalDuty.capacity?.maxConcurrentTasks || 1),
       );
       while (!stopRequested && activeJobs.size < concurrency) {
-        const claim = await sponsorRequest({
-          options,
-          auth,
-          method: "POST",
-          path: "/jobs/claim",
-          body: { dutySessionId: dutyId, leaseToken },
-        });
+        let claim;
+        try {
+          claim = await sponsorRequest({
+            options,
+            auth,
+            method: "POST",
+            path: "/jobs/claim",
+            body: { dutySessionId: dutyId, leaseToken },
+          });
+        } catch (error) {
+          if (!isRetryableSponsorDutyRequestError(error)) {
+            dutyLeaseError = error;
+            stopRequested = true;
+            break;
+          }
+          // A failed claim must not kill the duty process; the heartbeat owns
+          // lease validity, and the outer loop polls again after a sleep.
+          console.error(
+            `Workshop claim failed; retrying next poll: ${error?.message || error}`,
+          );
+          break;
+        }
         if (!claim.job) break;
         const work = processSponsorJob({
           options,
           sponsorAuth: auth,
           dutyId,
           dutyLeaseToken: leaseToken,
-          persona,
           provider,
           claim,
           commandServices,
@@ -385,8 +428,8 @@ async function runSponsorDuty({
         options,
         auth,
         method: "POST",
-        path: `/duty/${persona}/state`,
-        body: { state: "paused" },
+        path: "/duty/state",
+        body: { dutySessionId: dutyId, state: "paused" },
       });
       canonicalDuty = paused.duty || canonicalDuty;
     }
@@ -401,8 +444,8 @@ async function runSponsorDuty({
         options,
         auth,
         method: "POST",
-        path: `/duty/${persona}/state`,
-        body: { state: "stopped" },
+        path: "/duty/state",
+        body: { dutySessionId: dutyId, state: "stopped" },
       }).catch((error) => {
         if (!dutyLeaseError) {
           console.error(
@@ -412,7 +455,7 @@ async function runSponsorDuty({
       });
     }
   }
-  console.log(`${displayPersona(persona)} sponsor duty stopped.`);
+  console.log("Shared Zero/Ciel sponsor duty stopped.");
 }
 
 async function processSponsorJob({
@@ -420,12 +463,12 @@ async function processSponsorJob({
   sponsorAuth,
   dutyId,
   dutyLeaseToken,
-  persona,
   provider,
   claim,
   commandServices,
 }) {
   const job = claim.job;
+  const persona = normalizeJobPersona(job?.persona);
   const jobId = Number(job.id);
   const attemptToken = String(claim.attempt?.token || "");
   const workspaceToken = String(claim.workspaceToken?.accessToken || "");
@@ -1118,6 +1161,12 @@ async function retrySponsorTransport(operation) {
   throw lastError;
 }
 
+function isRetryableSponsorDutyRequestError(error) {
+  const status = Number(error?.status || 0);
+  if (!status) return true;
+  return status === 408 || status === 425 || status === 429 || status >= 500;
+}
+
 async function sponsorRequest({
   options,
   auth,
@@ -1153,8 +1202,12 @@ async function printSponsorStatus(options) {
     );
   }
   for (const duty of status.duties || []) {
+    const scope =
+      duty.scope === "shared"
+        ? "shared Zero/Ciel"
+        : `legacy assistant user ${duty.personaUserId}`;
     console.log(
-      `Duty #${duty.id}: user ${duty.personaUserId} ${duty.state} · ${duty.provider} · model=${duty.requestedModel || "provider default"} · effort=${duty.requestedEffort || "provider default"}`,
+      `Duty #${duty.id}: ${scope} · ${duty.state} · ${duty.provider} · model=${duty.requestedModel || "provider default"} · effort=${duty.requestedEffort || "provider default"}`,
     );
   }
 }
@@ -1253,12 +1306,12 @@ function normalizeProvider(value) {
   return provider;
 }
 
-function normalizePersona(value) {
+function normalizeJobPersona(value) {
   const persona = String(value || "")
     .trim()
     .toLowerCase();
   if (!PERSONAS.has(persona)) {
-    throw new Error("Choose a duty persona: zero or ciel.");
+    throw new Error("Twinkle returned an invalid Workshop job assistant.");
   }
   return persona;
 }
@@ -1285,8 +1338,8 @@ function sponsorUsage() {
     "  lumine sponsor status",
     "  lumine sponsor withdraw [--yes]",
     "  lumine sponsor capacity [--concurrency <n>] [--helpers <n>] [--daily-limit <n>] [--weekly-limit <n>]",
-    "  lumine sponsor duty start <zero|ciel> --provider <codex|claude-code> [--model <name>] [--effort <level>] [--service-tier <tier>]",
-    "  lumine sponsor duty pause|resume|stop <zero|ciel>",
+    "  lumine sponsor duty start --provider <codex|claude-code> [--model <name>] [--effort <level>] [--service-tier <tier>]",
+    "  lumine sponsor duty pause|resume|stop",
     "  lumine sponsor jobs [--limit <n>]",
   ].join("\n");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage5/lumine",
-  "version": "0.2.55",
+  "version": "0.2.57",
   "description": "Command line tools for launching Lumine builds on Twinkle.",
   "type": "module",
   "bin": {

package/sdk/LUMINE_ADMIN.md

@@ -663,7 +663,9 @@ artifact snapshot, branch-notice evidence, and requested/resolved provider,
 model, effort, service-tier, runtime, usage, and agent-tree records. It never
 includes raw Zero/Ciel chat.
 
-`clear` qualifies that unique handoff for its flat 50 KP award;
+`clear` qualifies a contribution to another user for its flat 50 KP award;
+self-sponsored testing remains ineligible even when its integrity evidence is
+cleared.
 `disqualify` makes it ineligible. `hold` and `flag` require an evidence note and
 remain open. The scan itself never changes sponsor status or applies a sanction.
 Use the separate, audited `sponsor status set` command for an explicit human