dsh-doublecheck 0.9.29 → 0.9.31

package/lib/domain/evidence.js

@@ -60,35 +60,29 @@ export function emptyDetection() {
  * Normalize one settled PTC sub-dispatch event, across the event-vocabulary
  * rename at the session-format V2→V3 edge.
  *
- * The current line names the settled sub-dispatch `tool/ptc-dispatch` (the
- * host's V2→V3 migration renames the predecessor `tool/code-dispatch`, keeping
- * the payload values), so a stored V2 log arrives under the new label. A host
- * on the older release line still emits the predecessor label, which is outside
- * this line's `SessionEventMap`; it is matched structurally instead of as a
- * switch case, so the fold never depends on which generation wrote the log.
+ * The V3 line names the settled sub-dispatch `tool/ptc-dispatch` (the host's
+ * V2→V3 migration renames the predecessor `tool/code-dispatch`, keeping the
+ * payload values), so a stored V2 log arrives under the new label. Neither
+ * label is a member of this host line's `SessionEventMap` — the 0.2.2 tools
+ * contract retires the PTC declaration while persistence still recognizes both
+ * names — so both are matched structurally instead of as switch cases. The
+ * fold therefore never depends on which generation wrote the log.
  *
  * @param event - one committed session event.
  * @returns the settled payload, or `undefined` when the event is not a settled sub-dispatch.
  */
 export function ptcSettle(event) {
-    if (event.type === 'tool/ptc-dispatch') {
-        return {
-            name: event.data.name,
-            arguments: event.data.arguments,
-            isError: event.data.isError,
-            content: event.data.content,
-        };
-    }
-    if (event.type !== 'tool/code-dispatch')
+    const type = event.type;
+    if (type !== 'tool/ptc-dispatch' && type !== 'tool/code-dispatch')
         return undefined;
-    const legacy = event.data;
-    if (legacy === null || legacy === undefined || typeof legacy.name !== 'string')
+    const settled = event.data;
+    if (settled === null || settled === undefined || typeof settled.name !== 'string')
         return undefined;
     return {
-        name: legacy.name,
-        arguments: legacy.arguments,
-        isError: legacy.isError === true,
-        content: Array.isArray(legacy.content) ? legacy.content : [],
+        name: settled.name,
+        arguments: settled.arguments,
+        isError: settled.isError === true,
+        content: Array.isArray(settled.content) ? settled.content : [],
     };
 }
 /**

package/lib/domain/report.d.ts

@@ -55,6 +55,12 @@ export interface ReportData extends ReportFacts {
         checks: VerifyCheck[];
         complete: boolean;
     } | null;
+    /**
+     * Why verification did not run, when it was requested. `null` when it ran or
+     * was not requested — the renderer must not reduce a failed attempt to a
+     * bare "Not run.".
+     */
+    verificationNote: string | null;
     /** Workspace markdown copy outcome. */
     path: string | null;
     written: boolean;

package/lib/domain/report.js

@@ -179,7 +179,7 @@ export function renderReportMarkdown(data) {
     }
     lines.push('', '## Verification');
     if (data.verification === null) {
-        lines.push('Not run.');
+        lines.push(data.verificationNote === null || data.verificationNote === undefined ? 'Not run.' : `Not run — ${data.verificationNote}`);
     }
     else {
         for (const check of data.verification.checks) {

package/lib/events.d.ts

@@ -196,6 +196,8 @@ declare module '@deepseek-ai/cordis' {
                 checks: VerifyCheck[];
                 complete: boolean;
             } | null;
+            /** Why verification did not run, when it was requested; null otherwise. */
+            verificationNote?: string | null;
             path: string | null;
             written: boolean;
         }): void;

package/lib/grill/index.js

@@ -348,6 +348,7 @@ export function apply(ctx, config) {
                         ],
                         required: true,
                     },
+                    verificationNote: { oneOf: [{ type: 'string' }, { type: 'null' }], required: true },
                     path: { oneOf: [{ type: 'string' }, { type: 'null' }], required: true },
                     written: { type: 'boolean', required: true },
                 },
@@ -365,13 +366,14 @@ export function apply(ctx, config) {
                 ? { spec: null, testRuns: { failed: 0, passed: 0 }, timeline: [], edits: 0, review: null }
                 : foldReportFacts(sessionEvents(session), reportDetection);
             const verify = args.verify ?? config.reportVerify;
-            const verification = verify
+            const attempt = verify
                 ? await runVerifyWorkflow(ctx, config, facts.spec, exec)
-                : null;
+                : { verification: null, note: null };
             const report = {
                 ...facts,
-                verdict: deriveReportVerdict(facts, verification),
-                verification,
+                verdict: deriveReportVerdict(facts, attempt.verification),
+                verification: attempt.verification,
+                verificationNote: attempt.note,
                 path: null,
                 written: false,
             };
@@ -379,7 +381,7 @@ export function apply(ctx, config) {
             report.path = outcome.path;
             report.written = outcome.written;
             if (session !== undefined) {
-                ctx.emit('doublecheck/report', { session, verdict: report.verdict, verification, path: report.path, written: report.written });
+                ctx.emit('doublecheck/report', { session, verdict: report.verdict, verification: report.verification, verificationNote: report.verificationNote, path: report.path, written: report.written });
             }
             return report;
         },
@@ -394,19 +396,65 @@ export function apply(ctx, config) {
     }));
 }
 /**
- * Run the per-dimension verification workflow through the workflow seam,
- * when one is mounted. A missing seam or a non-completed run settles as
- * `null` (no verification) — the report states it did not run.
- * @returns the settled checks with the completeness flag, or null when
- * verification did not run at all.
+ * Resolve the workflow engine for this call.
+ *
+ * A profile-level bundle row lives in the Host realm, but the web profile
+ * mounts the engine inside the calling preset's isolated `delegation` group,
+ * so `ctx.get('workflowEngine')` from the plugin context returns undefined
+ * even though the service is registered. `agentPresets.serviceFor()` is the
+ * host's explicit cross-realm accessor (it inspects the agent's retained
+ * composition), so it is tried first; the plain lookup stays as the fallback
+ * for profiles that mount the engine on the host plane.
+ * @param ctx - the plugin context (Host/profile realm).
+ * @param agent - the calling agent, when the tool call has one.
+ * @returns the engine, or a human-readable reason it is unreachable.
+ */
+function resolveWorkflowEngine(ctx, agent) {
+    const presets = ctx.get('agentPresets');
+    if (agent?.ctx !== undefined && typeof presets?.serviceFor === 'function') {
+        try {
+            const scoped = presets.serviceFor(agent, 'workflowEngine');
+            if (scoped !== undefined)
+                return { engine: scoped };
+        }
+        catch (error) {
+            ctx.logger.debug(`dsh-doublecheck: preset workflowEngine lookup failed: ${String(error)}`);
+        }
+    }
+    const host = ctx.get('workflowEngine');
+    if (host !== undefined)
+        return { engine: host };
+    return {
+        why: presets === undefined
+            ? 'the agent-preset registry is not mounted and the host plane has no workflowEngine'
+            : typeof presets.serviceFor !== 'function'
+                ? 'the mounted agentPresets service has no serviceFor() and the host plane has no workflowEngine'
+                : 'the calling agent preset does not mount a workflow engine (standard/cordis enable workflow-ptc; ptc/minimal do not) and the host plane has none',
+    };
+}
+/**
+ * Run the per-dimension verification workflow through the workflow seam.
+ *
+ * Every way this can fail — no spec, no agent, an engine that is unreachable
+ * from this realm, a rejected start, an early stop, a malformed value, a
+ * rejected result — settles as `verification: null` plus a note that the
+ * report renders. A missing seam must not fail the report call itself, but it
+ * must not look like "the checks all passed and there was nothing to say"
+ * either.
+ * @returns the settled checks, or null verification with the reason.
  */
 async function runVerifyWorkflow(ctx, config, spec, exec) {
-    if (spec === null || exec.agent === undefined)
-        return null;
-    const engine = ctx.get('workflowEngine');
+    if (spec === null) {
+        return { verification: null, note: 'no committed spec is on record; record one with doublecheck_spec before verification' };
+    }
+    if (exec.agent === undefined) {
+        return { verification: null, note: 'the call has no owning agent, so no agent preset can supply a workflow engine' };
+    }
+    const { engine, why } = resolveWorkflowEngine(ctx, exec.agent);
     if (engine === undefined) {
-        ctx.logger.warn('dsh-doublecheck: verification skipped: the workflowEngine seam is not mounted');
-        return null;
+        const note = `verification did not run: ${why}`;
+        ctx.logger.warn(`dsh-doublecheck: ${note}`);
+        return { verification: null, note };
     }
     let run;
     try {
@@ -423,16 +471,20 @@ async function runVerifyWorkflow(ctx, config, spec, exec) {
     catch (error) {
         // Invalid script/meta or an absent verify provider: verification did not
         // run, and the report states so instead of failing the report itself.
-        ctx.logger.warn(`dsh-doublecheck: verification workflow rejected: ${String(error)}`);
-        return null;
+        const note = `verification did not run: the workflow engine rejected the verify run: ${String(error)}`;
+        ctx.logger.warn(`dsh-doublecheck: ${note}`);
+        return { verification: null, note };
     }
     try {
         const result = await run.result;
-        if (result.stopReason !== 'completed')
-            return null;
+        if (result.stopReason !== 'completed') {
+            const detail = result.error === undefined ? '' : `: ${result.error}`;
+            return { verification: null, note: `verification did not run: the verify workflow stopped with "${result.stopReason}" before completing${detail}` };
+        }
         const value = result.value;
-        if (value === null || value === undefined || !Array.isArray(value.checks))
-            return null;
+        if (value === null || value === undefined || !Array.isArray(value.checks)) {
+            return { verification: null, note: 'verification did not run: the verify workflow completed without a structured checks array' };
+        }
         const checks = [];
         for (const check of value.checks) {
             if (!VERIFY_DIMENSIONS.includes(check.dimension))
@@ -443,17 +495,23 @@ async function runVerifyWorkflow(ctx, config, spec, exec) {
         // judged here so a checker that silently dropped a dimension cannot
         // upgrade the delivery.
         const complete = VERIFY_DIMENSIONS.every(dimension => checks.some(check => check.dimension === dimension));
-        return { checks, complete };
+        return { verification: { checks, complete }, note: null };
     }
     catch (error) {
         // A broken workflow engine must not fail the report call itself: the
         // delivery settles as unverified and the markdown says verification did
-        // not run.
-        ctx.logger.warn(`dsh-doublecheck: verification workflow failed: ${String(error)}`);
-        return null;
+        // not run, with the reason.
+        const note = `verification did not run: the verify workflow failed: ${String(error)}`;
+        ctx.logger.warn(`dsh-doublecheck: ${note}`);
+        return { verification: null, note };
     }
     finally {
-        await run.dispose();
+        try {
+            await run.dispose();
+        }
+        catch (error) {
+            ctx.logger.warn(`dsh-doublecheck: verify run disposal failed: ${String(error)}`);
+        }
     }
 }
 /** Write the report markdown through the filesystem seam, when one exists. */

package/lib/guard/command.js

@@ -113,6 +113,7 @@ export function doublecheckHandler(deps) {
                 ...facts,
                 verdict: deriveReportVerdict(facts, null),
                 verification: null,
+                verificationNote: null,
                 path: null,
                 written: false,
             };

package/lib/guard/index.js

@@ -585,31 +585,36 @@ export function apply(ctx, config) {
         const registry = projectionCtx.get('sessionProjections');
         if (registry === undefined)
             return;
-        // The registry returns the disposer that unregisters this projection; it
-        // MUST be owned by an effect. Registering without holding it left the old
-        // closure live after a config hot-reload: turning `gate` (or any detection
-        // knob) off and on again kept judging with the stale definitions — a
-        // silent false-safety window, and a hard throw once the state version moved.
-        projectionCtx.effect(() => registry.register({
-            key: 'doublecheck',
-            stateSchema: doublecheckStateSchema,
-            init: emptyDoublecheckState,
-            apply: (state, event) => applyDoublecheckEvent(state, event, detection),
-            wire: {
-                viewSchema: doublecheckViewSchema,
-                view: viewDoublecheck,
-            },
-            // v3: the wire value changed type (object -> one bounded line). The
-            // bump is the persisted-cache invalidation the registry documents, and
-            // it IS the backward-compatibility story: the state fields themselves
-            // are unchanged and still pass `doublecheckStateSchema`, but a row
-            // written at `ver: 2` is discarded on a `ver: 3` unit and the key
-            // refolds from `init` over the full log (the host's `restoreFloor`
-            // drops to seq 0 on any version mismatch). No migration code, and a
-            // pre-upgrade session degrades to a recomputed line instead of a
-            // stale one or a crash.
-            stateVersion: 3,
-        }), 'dsh-doublecheck: projection');
+        // Registration is asynchronous on the 0.2.2 line and returns a ready
+        // handle; awaiting it inside the effect keeps the fiber from publishing a
+        // half-registered unit. The handle's `dispose()` is the unregistration
+        // path and MUST be owned by an effect. Registering without holding it left
+        // the old closure live after a config hot-reload: turning `gate` (or any
+        // detection knob) off and on again kept judging with the stale
+        // definitions — a silent false-safety window, and a hard throw once the
+        // state version moved.
+        projectionCtx.effect(async () => {
+            const handle = await registry.register({
+                key: 'doublecheck',
+                stateSchema: doublecheckStateSchema,
+                init: emptyDoublecheckState,
+                apply: (state, event) => applyDoublecheckEvent(state, event, detection),
+                wire: {
+                    viewSchema: doublecheckViewSchema,
+                    view: viewDoublecheck,
+                },
+                // stateVersion is the persisted-cache invalidation the registry
+                // documents, and it IS the backward-compatibility story: the state
+                // fields themselves are unchanged and still pass
+                // `doublecheckStateSchema`, but a row written at `ver: 2` is
+                // discarded on a `ver: 3` unit and the key refolds from `init` over
+                // the full log (the host's `restoreFloor` drops to seq 0 on any
+                // version mismatch). No migration code, and a pre-upgrade session
+                // degrades to a recomputed line instead of a stale one or a crash.
+                stateVersion: 3,
+            });
+            return () => handle.dispose();
+        }, 'dsh-doublecheck: projection');
     });
     // The invariant companion, registered from the main plugin so its checks
     // see the live detection knobs. Activates only when an invariant registry

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-doublecheck",
-  "version": "0.9.29",
+  "version": "0.9.31",
   "description": "Delivery quality gate for DeepSeek Harness: grill the requirements, test the implementation, prove the delivery, and gate the handoff with a deliverable/rework decision.",
   "packageManager": "pnpm@11.7.0",
   "repository": {
@@ -51,7 +51,9 @@
     "README-es.md",
     "README-pt.md",
     "README-hi.md",
-    "LICENSE"
+    "LICENSE",
+    "PRIVACY.md",
+    "icon.svg"
   ],
   "scripts": {
     "build": "tsc --noEmitOnError && node scripts/fix-dts.mjs",
@@ -83,14 +85,18 @@
   "author": "PerryLink",
   "license": "Apache-2.0",
   "engines": {
-    "node": "^22.19.0 || >=24.0.0",
-    "dsh": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0"
+    "node": "^22.19.0 || >=24.9.0",
+    "dsh": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0"
   },
   "dsh": {
     "manifestVersion": 1,
     "bundle": {
       "patch": "./cordis.patch.yml"
-    }
+    },
+    "capabilities": [
+      "tools:register"
+    ],
+    "labels": []
   },
   "dshWorkshop": {
     "schema": "omdsh-workshop-package/v1",
@@ -137,46 +143,49 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.5-alpha.1",
-    "@deepseek-ai/dsh-agent": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-commands": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
+    "@deepseek-ai/dsh-agent": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/dsh-commands": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
     "@deepseek-ai/dsh-invariants": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-llm": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-session": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-session-projection": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-skill": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-tools": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
+    "@deepseek-ai/dsh-llm": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/dsh-session": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/dsh-session-projection": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/dsh-skill": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/dsh-tools": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
     "@deepseek-ai/schemastery": "^3.18.5-alpha.1"
   },
   "dependencies": {
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.5-alpha.1",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.6-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-commands": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-fs": "0.2.1-rc.2",
+    "@deepseek-ai/cordis": "^4.1.0",
+    "@deepseek-ai/cordis-plugin-loader": "^1.1.0",
+    "@deepseek-ai/dsh-agent": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-commands": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-fs": "0.2.2-rc.1",
     "@deepseek-ai/dsh-invariants": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-llm": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-session-projection": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-settings": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-skill": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-subagent": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-workflow": "0.2.1-rc.2",
-    "@deepseek-ai/schemastery": "^3.18.5-alpha.1",
+    "@deepseek-ai/dsh-llm": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-session": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-session-projection": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-settings": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-skill": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-subagent": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-tool-executor-native": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-tools": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-workflow": "0.2.2-rc.1",
+    "@deepseek-ai/schemastery": "~3.19.0",
     "@eslint/js": "^9.30.0",
     "@types/node": "^22.15.0",
     "@vitest/coverage-v8": "^3.2.0",
     "eslint": "^9.30.0",
     "typescript-eslint": "^8.35.0",
     "vitest": "^3.2.0",
-    "typescript": "^5.7.0"
+    "typescript": "^5.7.0",
+    "@deepseek-ai/dsh-package-manifest": "0.2.2-rc.1"
   },
   "funding": {
     "type": "individual",
     "url": "https://github.com/sponsors/PerryLink"
-  }
+  },
+  "icon": "icon.svg"
 }