dsh-autotier 0.1.1 → 0.2.0

package/AGENTS.md

@@ -21,9 +21,28 @@ records repo-local decisions.
 - `src/service.ts` — `ctx.autotier` (`status()` and the live settings scope).
 - `src/types.ts` — shared vocabulary (tier ids, effort ids, routing modes,
   scenarios, route/status shapes).
+- `src/wire.ts` — the `tier` Remote wire vocabulary: `TierStatus` (the public
+  `AutotierStatus` plus an additive `session` view), `TierCatalog`, their zod v4
+  codecs, and the three invocation descriptors shared verbatim by the host
+  manifest and the client contribution.
+- `src/typert.host.ts` — the hand-written host Typert manifest exported as
+  `./typert`; the harness's typert-loader registers the `tier` invocations from
+  it when the plugin mounts.
+- `src/tier-remote.ts` — `TierRemoteService` (`TypertRemoteService`, namespace
+  `tier`): `status(agentId?)` / `catalog()` / `setMode(mode, agentId?)`. The
+  override it writes is the same per-agent `RouteState.override` the router and
+  `/tier` read; `agents` is read optionally through the injected resolver.
+- `src/client/` — browser half: `$mount`s the Remote contribution, registers the
+  composer pill into `conversation.input.left` (id `tier-pill`) and the Settings
+  card into `settings.plugins.tab` (id `autotier`), with a pure presenter
+  (`present.ts`), inline scoped stylesheet (`styles.ts`), and en/zh dictionaries
+  (`locales.ts`). The slot registry is read through a local structural
+  `SlotsFace` (its owning package differs across host lines).
 - `tests/` — vitest over the REAL published `0.1.2-rc.1` host packages
   (`Context`, `SessionStore`, `SystemPrompt`, `ToolRuntime`, `CommandRuntime`,
-  in-memory `SettingsProvider`) plus one real Loader composition.
+  in-memory `SettingsProvider`) plus one real Loader composition. The browser
+  half is covered through its pure units (wire codecs, presenter, dictionaries)
+  and the `tier` service through a real mount with a scripted `agents` face.
 
 ## Hard rules applied here
 
@@ -63,8 +82,12 @@ table.
 `typescript` + `tsdown` are regular `dependencies` (the git channel's `prepare`
 builds with production dependencies alone). `scripts/prepare.mjs` wipes `lib/`,
 emits tsc declarations into `lib/types`, then runs tsdown (tsdown `clean` stays
-OFF so the declarations survive). `pnpm-workspace.yaml` declares
-`allowBuilds: { esbuild: true }`.
+OFF so the declarations survive). Two build faces: the node half
+(`lib/index.js` + `lib/typert.host.js`) and the browser half (`lib/client.js`),
+whose CJS factory is wrapped in `window.__ModuleLoader__.load({ id, factory })`
+with the shell's platform modules (`react`, `react/jsx-runtime`, the
+`@deepseek-ai/dsh-client-*` singletons) left external and zod inlined.
+`pnpm-workspace.yaml` declares `allowBuilds: { esbuild: true }`.
 
 ## Checks
 

package/CHANGELOG.md

@@ -5,6 +5,39 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.0] - 2026-09-09
+
+### Added
+
+- **Browser half: a Settings card and a composer tier pill.** The plugin now
+  ships a `tier` Typert Remote service (`tier/status`, `tier/catalog`,
+  `tier/setMode`) behind a hand-written `./typert` host manifest, and a client
+  bundle that registers the composer pill into `conversation.input.left`
+  (id `tier-pill`) and the autotier card into the Plugins settings section
+  (`settings.plugins.tab`, id `autotier`). The pill shows the session's effective
+  mode (`AUTO` / `STRONG` / `CHEAP` / `OFF`) with an escalation badge and cycles
+  the session override on click; the card offers the full
+  `auto | strong | cheap | delegated | off` selector, the read-only tier
+  landings, the live session state, and a model-catalog dropdown fed by the live
+  `ctx.llm` registry. Copy ships in English and Simplified Chinese.
+- `TierStatus` extends the public `AutotierStatus` additively with a `session`
+  view (override, effective mode, applied tier and source, escalation, plan
+  mode, guard denials); the host still serves `ctx.autotier.status()` unchanged.
+- `zod` is now a runtime dependency (the strict wire codecs on both faces) and
+  the client peers (`dsh-api-remotes`, `dsh-client-connection`,
+  `dsh-client-locale`, `dsh-client-ui-conversation`, `dsh-client-ui-settings`,
+  `dsh-client-ui-slots`, `dsh-typert-protocol`) are declared as optional peers.
+
+### Notes
+
+- The session override stays runtime-only: `auto` clears it, and a plugin reload
+  restores the `cordis.yml` routing mode. Nothing is persisted.
+- `pnpm run verify:artifacts` now asserts the two new shipped faces
+  (`lib/typert.host.js` with its manifest shape, `lib/client.js` with its
+  ModuleLoader handshake and external platform modules).
+- The five-language READMEs are not updated in this change; the client copy is
+  English + Simplified Chinese only.
+
 ## [0.1.1] - 2026-09-09
 
 ### Added

package/THIRD_PARTY_NOTICES.md

@@ -1,5 +1,36 @@
 # Third-party notices
 
+## zod (https://github.com/colinhacks/zod)
+
+The `tier` Remote wire codecs (`src/wire.ts`) are zod v4 schemas. `zod` is a
+declared runtime dependency (MIT) and its library code is inlined into the built
+`lib/index.js`, `lib/typert.host.js` and `lib/client.js` bundles; no zod source
+is modified.
+
+```
+MIT License
+
+Copyright (c) 2020 Colin McDonnell
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
 ## dsh-tier-router (`lib/pure.js`)
 
 The high-risk command guard in `src/guard-rules.ts` is a port of the rule table

package/docs/roadmap-v0.2.md

@@ -0,0 +1,114 @@
+# v0.2 roadmap: concrete designs for the deferred items
+
+This file records the researched, decision-ready design for every capability
+that is deliberately **not** in 0.1.x. Each entry states the goal, the exact
+mechanism, the acceptance criteria, and why it is not enabled yet. Nothing here
+is speculation: the seams named below were read in the harness checkout
+(`dsh-v0.1.5-alpha.1-13`).
+
+## 1. Browser half (Settings card + composer pill)
+
+**Status:** implemented on the `v0.2.0` line (client bundle + Typert Remote
+`tier/status|setMode|catalog`); see `src/client/`, `src/wire.ts`,
+`src/typert.host.ts`.
+
+**Why it was deferred:** the host surface was complete first (`ctx.autotier`),
+and the client half needs the browser bundle pipeline (tsdown CJS face wrapped
+in `window.__ModuleLoader__.load`), which is a packaging change rather than a
+routing change.
+
+## 2. Fingerprint posterior persistence
+
+**Goal:** a restarted harness keeps the per-shape cheap/strong win rates instead
+of re-learning from the judge's cold start.
+
+**Mechanism (chosen):** a dedicated settings namespace, not the user-facing
+`autotier` one:
+
+```ts
+ctx.settings.register('autotier-fingerprints', FingerprintSchema, { applies: 'live' })
+```
+
+- `FingerprintSchema` = `{ version: 1, entries: [{ key, cheapOK, cheapN, strongOK, strongN, observations, lastSeen }] }`, capped at the same LRU 2000.
+- Writes are **debounced** (≥30 s between flushes and one final flush on
+  `ctx.effect` disposal) and use `replace()` on the whole section, so a user
+  editing the document cannot produce a partial merge.
+- On mount, `PosteriorTable.hydrate(section)` validates and loads; a
+  `stateVersion`/`version` mismatch discards the section (the same rule the
+  session-projection cache uses).
+- A namespace that is absent (a deployment without settings) degrades to the
+  current in-memory behaviour — the plugin never depends on persistence.
+
+**Why not the `autotier` namespace:** it is user-facing; writing a large learned
+table into it would surface in the Settings card and collide with the user's
+revision on every flush. A separate namespace keeps the two concerns apart.
+
+**Acceptance:** a unit test proving hydrate → record → flush → hydrate is
+idempotent; an integration test proving a refused settings write leaves the
+in-memory table intact.
+
+**Why not enabled yet:** it adds a write path to a plugin whose current promise
+is "writes only the `autotier` namespace", and the benefit only appears after a
+long enough session history that the cold-start fallback has already paid for
+itself. Ship it behind `persistence.fingerprints: false` default.
+
+## 3. Attempt-first middle band (default on)
+
+**Goal:** start ambiguous turns on the cheap tier and escalate on a signal,
+which the cascade literature shows is cheaper *and* faster than deciding up
+front.
+
+**What is missing is calibration, not code:** the band, its `tauLow`, the
+verify-once review, and the effort-first ladder are implemented and tested; the
+shipped default is `intent.attemptBand.enabled: false` because the thresholds
+have never been measured on real traffic.
+
+**Mechanism:** `scripts/calibrate.mjs` + a 90-case labelled corpus:
+
+- Corpus: `fixtures/intent-corpus.jsonl`, one `{ text, expectedTier, hard }` per
+  line, balanced across the eight scenarios (11–12 each) plus 10 adversarial
+  "looks simple, is complex" cases.
+- The script replays the corpus through the *shipped* classifier (no LLM), then
+  sweeps `ruleThreshold`/`tauLow` and prints a table of PGR, APGR, CPT(50 %),
+  CPT(80 %), strong-call % and rule-layer hit rate — the same metrics RouteLLM's
+  `calibrate_threshold` reports.
+- CI gate (a vitest suite over the same corpus): **CPT(80 %) ≤ 40 %**,
+  **APGR ≥ 0.7**, routing quality ≥ 95 % of an always-strong oracle, rule-layer
+  zero-token hit ≥ 60 %.
+- Only when the gate is green does the shipped default flip to
+  `attemptBand.enabled: true`.
+
+**Why not enabled yet:** enabling an uncalibrated band would spend strong calls
+on turns the rules already classify correctly, which is exactly the cost the
+plugin exists to avoid.
+
+## 4. Long-context lane
+
+**Goal:** route very long sessions (est. tokens ≥ 30 k) to a model whose context
+window actually fits, instead of failing or compacting mid-turn.
+
+**Mechanism:** the same pre-flight module already answers "does this route
+exist"; extend it with `ctx.llm.resolveModelInfo(...).context?.contextWindow`:
+
+- When the assembled request's estimated tokens exceed the target route's
+  `contextWindow`, pick the first fallback entry (or the other tier) whose
+  window fits, and log the substitution once.
+- If nothing fits, leave the route alone — compaction owns that case, and a
+  router must not silently drop the user's context.
+
+**Why not yet:** `LlmCallConfig` carries no message payload at the request
+waterfall, so the estimate must come from the session's derived history; the
+read is cheap but it is a new dependency on `session.deriveMessages()`, and the
+harness's own compaction is the primary owner of this problem.
+
+## 5. Multi-router coexistence
+
+**Status:** implemented in 0.1.2 — a foreign `provider/model` at the request
+waterfall is detected, logged once per session, and surfaced by `/tier status`
+and `tier_status`.
+
+## 6. Explicit user selection
+
+**Status:** implemented in 0.1.2 — the applied tier is mirrored into the
+`agent-default-model` document, and an external change to that document moves
+every live session to `delegated` until `/tier auto`.