deepseek-coordination 0.1.6 → 0.1.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepseek-coordination",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "private": false,
   "type": "module",
   "description": "Cross-platform atomic OS-interaction surface for the DeepSeek Harness: one argument-stable verb set implemented natively on each OS, with byte-exact charset, BOM and line-ending handling.",
@@ -93,6 +93,7 @@
     "test:encoding": "powershell -NoLogo -NoProfile -ExecutionPolicy Bypass -File tests/encoding.ps1",
     "test:conformance": "powershell -NoLogo -NoProfile -ExecutionPolicy Bypass -File tests/conformance.ps1",
     "test:plugin": "node tests/plugin.test.mjs",
+    "test:activation": "node tests/activation.test.mjs",
     "test:takeover": "node tests/takeover.test.mjs",
     "test:permission": "node tests/permission.test.mjs",
     "test:workflow": "node tests/workflow.test.mjs",

package/src/permission/index.js

@@ -192,7 +192,12 @@ function nextRuleId(document) {
   return `r-${String(max + 1).padStart(4, '0')}`
 }
 
-export function apply(ctx, config = {}) {
+export function apply(ctx, rawConfig) {
+  // `?? {}` rather than a default parameter: Cordis passes a row's config as `null` when the row declares
+  // none, and a default parameter only fires for `undefined`. This row happens to ship with a config, so
+  // it never hit the fault — but the fix belongs here too, or a deployment that trims the row's config
+  // takes the consent delegate down with it.
+  const config = rawConfig ?? {}
   const path = permissionPathOf(config)
   const auditLimit = config.auditLimit ?? AUDIT_LIMIT
 

package/src/plugin/index.js

@@ -27,7 +27,11 @@ export const name = 'dsh-os'
 /** The plugin is inert without the tool registry. */
 export const inject = ['tools']
 
-export function apply(ctx, config = {}) {
+export function apply(ctx, rawConfig) {
+  // `?? {}` rather than a default parameter: Cordis passes a row's config as `null` when the row declares
+  // none, and a default parameter only fires for `undefined`. Every entry point in this package guards the
+  // same way, so a row whose config is trimmed degrades to defaults instead of failing to activate.
+  const config = rawConfig ?? {}
   const timeoutMs = config.timeoutMs ?? 120000
 
   ctx.tools.register({

package/src/plugin/invoke.js

@@ -113,7 +113,11 @@ export const DEFAULT_SCRIPT_DIR = 'src/host/bin'
  * DSH_OS_POWERSHELL still overrides the executable. `'auto'` uses 7.6 only when both the artefact and
  * a pwsh executable are present, and falls back to 5.1 otherwise.
  */
-export function resolveInvocation(config = {}) {
+export function resolveInvocation(rawConfig) {
+  // `?? {}` rather than a default parameter. Cordis passes a row's config through as `null` when the row
+  // declares none, and a default parameter only fires for `undefined` — so `config.scriptPath` on that
+  // null threw and the plugin row failed to activate. Every caller may pass null.
+  const config = rawConfig ?? {}
   const explicit = config.scriptPath ? [config.scriptPath] : []
   const dir = config.scriptPath
     ? dirname(config.scriptPath)
@@ -192,7 +196,8 @@ export function resolveInvocation(config = {}) {
 }
 
 /** The directory an invocation would search, for error messages that name a real path. */
-export function searchedDirectory(config = {}) {
+export function searchedDirectory(rawConfig) {
+  const config = rawConfig ?? {}
   return config.scriptPath ?? join(PKG_ROOT, config.scriptDir ?? DEFAULT_SCRIPT_DIR)
 }
 

package/src/plugin/settings.js

@@ -110,9 +110,15 @@ export function writeSettings(file, settings) {
  * second one is evidence that the feature works.
  */
 export class SettingsService {
-  constructor(ctx, config = {}) {
+  constructor(ctx, config) {
     this.ctx = ctx
-    this.file = config.settingsPath ?? settingsPath()
+    // `config ?? {}` rather than a default parameter: Cordis passes the row's config as `null` when the
+    // row declares none, and a default parameter does not fire for null. This is exactly what made the
+    // shipped 0.1.5 fail to activate with "Cannot read properties of null (reading 'settingsPath')".
+    const resolved = config ?? {}
+    this.file = typeof resolved.settingsPath === 'string' && resolved.settingsPath.trim() !== ''
+      ? resolved.settingsPath
+      : settingsPath()
     this.settings = readSettings(this.file)
     this.activity = []
     this.listeners = new Set()
@@ -312,8 +318,11 @@ export function makeSettingsRoutes(service) {
  */
 export const name = 'dsh-os-settings'
 
-export function apply(ctx, config = {}) {
-  const service = new SettingsService(ctx, config)
+export function apply(ctx, rawConfig) {
+  // `?? {}` rather than a default parameter: Cordis passes a row's config as `null` when the row declares
+  // none, and a default parameter only fires for `undefined`. This row ships WITHOUT a config, which is
+  // what made the shipped 0.1.5 fail with "Cannot read properties of null (reading 'settingsPath')".
+  const service = new SettingsService(ctx, rawConfig ?? {})
 
   // `ctx.provide` REGISTERS the service and returns a disposer; `ctx.set` only overwrites the value of a
   // service that was already provided, and calling it first throws

package/src/plugin/takeover.js

@@ -388,7 +388,11 @@ function eligible(tool, args) {
   }
 }
 
-export function apply(ctx, config = {}) {
+export function apply(ctx, rawConfig) {
+  // `?? {}` rather than a default parameter: Cordis passes a row's config as `null` when the row declares
+  // none, and a default parameter only fires for `undefined`, so the first property read threw and the
+  // row never activated. This row is shipped WITHOUT a config, so it hit exactly that.
+  const config = rawConfig ?? {}
   const toolTimeoutMs = config.timeoutMs ?? 120000
   // Mirrors the `tool-fs` row's `readLimit` (2000 by default): the interception must not quietly apply
   // a different window size than the built-in it replaced.

package/src/plugin/workflow.js

@@ -1405,12 +1405,17 @@ export function workflowToolDefinition(handlers) {
   }
 }
 
-export function apply(ctx, config = {}) {
-  const root = typeof config.workflowRoot === 'string' && config.workflowRoot.trim() !== ''
-    ? config.workflowRoot
+export function apply(ctx, config) {
+  // `config ?? {}` rather than a `config = {}` default parameter, because the two are NOT equivalent:
+  // a default parameter only fires for `undefined`, and Cordis hands the row's config through as `null`
+  // when the row declares none. The shipped 0.1.5 read `config.workflowRoot` off that null and the row
+  // failed to activate with "Cannot read properties of null".
+  const resolved = config ?? {}
+  const root = typeof resolved.workflowRoot === 'string' && resolved.workflowRoot.trim() !== ''
+    ? resolved.workflowRoot
     : workflowRoot()
-  const autoCompact = config.autoCompact !== false
-  const maxCheckpoints = Number.isInteger(config.maxCheckpoints) && config.maxCheckpoints > 0 ? config.maxCheckpoints : 20
+  const autoCompact = resolved.autoCompact !== false
+  const maxCheckpoints = Number.isInteger(resolved.maxCheckpoints) && resolved.maxCheckpoints > 0 ? resolved.maxCheckpoints : 20
 
   // The engine's own automatic compaction is named in the checkpoint result rather than invoked: this
   // plugin holds no session handle, and a call into a service whose context contract is not published
@@ -1446,14 +1451,28 @@ export function apply(ctx, config = {}) {
 
   if (typeof ctx.tools?.register === 'function') ctx.tools.register(workflowToolDefinition(handlers))
 
-  // The prompt half is registered only when the registry is present, so a deployment without it loses
-  // the section rather than the feature. The text is a constant: no state is read, nothing is looked up,
-  // and the model's cached prefix survives every phase of every workflow. See SECTION_TEXT.
-  if (typeof ctx.systemPrompt?.section === 'function') {
-    ctx.systemPrompt.section({
-      name: 'dsh-os:workflow',
-      order: sectionOrder(ctx.systemPrompt),
-      text: SECTION_TEXT,
+  // The prompt half is registered through `ctx.inject`, NOT by reading `ctx.systemPrompt` directly.
+  //
+  // Reading it directly is what broke the shipped 0.1.5: Cordis resolves a service property through an
+  // enforcing proxy, so an undeclared service does not read as `undefined` — it THROWS
+  //   Error: cannot get property "systemPrompt" without inject
+  // and a guard of the form `typeof ctx.systemPrompt?.section === 'function'` never gets to run, because
+  // the property access itself is the throw. The row then failed to activate entirely, losing the tool
+  // as well as the section.
+  //
+  // `ctx.inject` is the first-party pattern for an optional service (`dsh-tool-fs` registers its image
+  // tool the same way): the callback runs when the service is present and unwinds when it goes away, and
+  // a deployment without a system prompt keeps the tool instead of losing everything.
+  //
+  // The text is a constant: no state is read, nothing is looked up, and the model's cached prefix
+  // survives every phase of every workflow. See SECTION_TEXT.
+  if (typeof ctx.inject === 'function') {
+    ctx.inject(['systemPrompt'], (scoped) => {
+      scoped.systemPrompt.section({
+        name: 'dsh-os:workflow',
+        order: sectionOrder(scoped.systemPrompt),
+        text: SECTION_TEXT,
+      })
     })
   }