dsh-openwrite 0.2.27 → 0.2.33

package/docs/WORKFLOWS.md

@@ -23,20 +23,20 @@ dsh Workspace 是唯一的工作区身份：agent 工具调用按会话的不可
 
 1. 在 **OpenWrite 创作** 会话里先收敛灵感、人物、世界观与大纲（所有写入经 OpenWrite
    修订门控，重要改动先出 diff 再确认），再在同一会话中写正文。
-   正文和正典使用 `novel_document_change_plan`；大纲、资产、创作重点、伏笔和写作目标
-   使用 `novel_structured_change_plan`。两者都由服务端保存不可变预览、在确认时重验源
+   正文和正典使用 `novel_change_plan(action="document")`；大纲、资产、创作重点、伏笔和写作目标
+   使用 `novel_change_plan(action="structured")`。两者都由服务端保存不可变预览、在确认时重验源
    revision，并返回只对已确认结果有效的安全撤销 token。
    正文区按 canonical reading order 切章和连续审读，计划未写章节保留在大纲中但不会被
    当作可读正文；搜索结果只有在 document ID 与完整 revision 都仍匹配时才开放改单行。
 2. 写正文时执行 `novel_context_preview` 预检上下文包 →
    `novel_write_chapter` 写章 → `novel_review_chapter` 六域累加评审。
    每次评审同时生成 `data/novels/{id}/data/dog/reviews/{chapter}/dog-graph.json`；
-   通过 `novel_task_create(type=chapter_review)` 启动的后台评审，也会在
-   `novel_task_get` 读到完成态时生成同样的图；
+   通过 `novel_task(action="create", type=chapter_review)` 启动的后台评审，也会在
+   `novel_task(action="get")` 读到完成态时生成同样的图；
    图的顶层是上下文完整性、六个质量域、硬门禁和确定性聚合，六域下可展开原 37 项，
    查询 criterion、证据、问题、覆盖率和继承状态。DoG 只查询已生成的 artifact，
    不重新调用模型评审。
-   写章、评审和 `novel_revision_*` 操作还会维护
+   写章、评审和 `novel_revision` 操作还会维护
    `data/novels/{id}/data/dog/deliveries/{chapter}/dog-graph.json`：它把正文、
    `writing → review → revision → application → rereview → closure` 六阶段串成章节交付总图；
    正文 SHA 改变后旧评审立即 stale，修订应用后必须复评通过才算交付。

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "dsh-openwrite",
-  "version": "0.2.27",
+  "version": "0.2.33",
   "description": "OpenWrite 长篇小说领域后端接入 DeepSeek Harness：统一创作 Agent 预设 + 原生创作工作台",
   "type": "module",
   "scripts": {
-    "build": "npm --prefix packages/openwrite-bridge run build && npm --prefix packages/studio-panel run build && npm --prefix vendor/dsh-dog run build",
+    "build": "npm --prefix packages/openwrite-bridge run build && npm --prefix packages/studio-panel run build",
     "test:dog": "npm --prefix packages/openwrite-bridge run build && .venv/bin/python conductor/test_dog_artifacts.py",
     "test:epochs": "npm --prefix packages/studio-panel run test:epochs",
     "test:components": "npm --prefix packages/studio-panel run test:components",
@@ -14,14 +14,15 @@
     "install-dsh": "bash scripts/install.sh",
     "dev": "bash scripts/dev.sh",
     "doctor": "node scripts/plugin-doctor.mjs",
-    "test:maintenance": "node --test scripts/plugin-doctor.test.mjs scripts/lifecycle.test.mjs packages/openwrite-bridge/scripts/runtime-lifecycle.test.mjs scripts/maintenance.test.mjs scripts/preset-lifecycle.test.mjs scripts/safe-upgrade.test.mjs",
+    "test:maintenance": "node --test scripts/plugin-doctor.test.mjs scripts/lifecycle.test.mjs packages/openwrite-bridge/scripts/runtime-lifecycle.test.mjs scripts/maintenance.test.mjs scripts/preset-lifecycle.test.mjs scripts/companions.test.mjs scripts/host-model.test.mjs scripts/safe-upgrade.test.mjs",
     "check": "npm run check:plugin && npm run test:contracts",
     "test:lifecycle": "node --test scripts/lifecycle.test.mjs",
     "test:runtime": "node --test packages/openwrite-bridge/scripts/runtime-lifecycle.test.mjs",
-    "check:plugin": "npm run build && npm run doctor && npm run test:maintenance && npm run test:profiles && npm run test:preset && npm --prefix packages/openwrite-bridge run smoke && npm --prefix packages/studio-panel run smoke && npm run test:epochs && npm run test:components",
+    "check:plugin": "npm run build && npm run docs:check && npm run doctor && npm run test:maintenance && npm run test:profiles && npm run test:preset && npm --prefix packages/openwrite-bridge run smoke && npm --prefix packages/studio-panel run smoke && npm run test:epochs && npm run test:components",
+    "docs:check": "node scripts/gen-tools-md.mjs --check && node scripts/check-editor-coordinates.mjs && node scripts/check-tool-references.mjs",
     "test:profiles": "node scripts/profile-smoke.mjs",
     "prepare": "node scripts/prepare.mjs",
-    "test:managed": "node --test packages/openwrite-bridge/scripts/managed-runtime.test.mjs packages/openwrite-bridge/scripts/tool-policy.test.mjs",
+    "test:managed": "node --test packages/openwrite-bridge/scripts/host-web.test.mjs packages/openwrite-bridge/scripts/host-llm.test.mjs packages/openwrite-bridge/scripts/managed-runtime.test.mjs packages/openwrite-bridge/scripts/system-python.test.mjs packages/openwrite-bridge/scripts/tool-policy.test.mjs packages/openwrite-bridge/scripts/followup-tools.test.mjs packages/openwrite-bridge/scripts/proxy-allowlist.test.mjs",
     "test:release": "node scripts/release-smoke.mjs",
     "test:client-boot": "node scripts/client-boot-smoke.mjs"
   },
@@ -43,9 +44,8 @@
     "./bridge": "./packages/openwrite-bridge/lib/index.js",
     "./tools": "./packages/openwrite-bridge/lib/preset-tools.js",
     "./panel": "./packages/studio-panel/lib/index.js",
-    "./dog": "./vendor/dsh-dog/lib/index.js",
     "./package.json": "./package.json",
-    "./dog-tools": "./dog-tools.mjs"
+    "./ops-integration": "./presets/openwrite/ops-integration.mjs"
   },
   "dsh": {
     "bundle": {
@@ -54,7 +54,7 @@
     "displayName": "小说创作（OpenWrite）",
     "pluginType": "suite",
     "compatibility": {
-      "dsh": "0.1.2-rc.1 || 0.1.5-alpha.1 || 0.2.0-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3",
+      "dsh": "0.1.2-rc.1 || 0.1.5-alpha.1 || 0.2.0-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5",
       "profiles": [
         "web",
         "desktop"
@@ -66,21 +66,19 @@
         "0.1.5-alpha.1": "compatible",
         "0.2.0-rc.2": "compatible",
         "0.2.1-rc.2": "compatible",
-        "0.2.1-rc.3": "compatible"
+        "0.2.1-rc.3": "compatible",
+        "0.2.1-rc.4": "compatible",
+        "0.2.1-rc.5": "compatible"
       }
     }
   },
   "files": [
     "plugin.mjs",
     "preset-definition.mjs",
+    "companions.mjs",
     "plugin.d.ts",
     "cordis.patch.yml",
     "packages/studio-panel/vendor",
-    "vendor/dsh-dog/package.json",
-    "vendor/dsh-dog/lib",
-    "vendor/dsh-dog/schemas",
-    "vendor/dsh-dog/LICENSE",
-    "vendor/dsh-dog/UPSTREAM.md",
     "presets/openwrite",
     "release/*.json",
     "release/*.lock",
@@ -89,13 +87,12 @@
     "README.md",
     "LICENSE",
     "THIRD_PARTY_NOTICES.md",
-    "dog-tools.mjs",
     "packages/openwrite-bridge/lib",
     "packages/openwrite-bridge/package.json",
     "packages/studio-panel/lib",
     "packages/studio-panel/package.json",
-    "scripts/dog",
     "scripts/maintenance.mjs",
+    "scripts/plugin-doctor.mjs",
     "scripts/safe-upgrade.mjs",
     "packages/openwrite-bridge/LICENSE",
     "packages/studio-panel/LICENSE",
@@ -110,15 +107,15 @@
     "ajv": "^8.20.0",
     "ajv-formats": "^3.0.1",
     "fflate": "0.8.2",
+    "js-yaml": "4.3.1",
     "proper-lockfile": "4.1.2",
-    "tar": "7.5.7",
-    "js-yaml": "4.3.1"
+    "tar": "7.5.7"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "4.0.2 || ~4.0.4",
-    "@deepseek-ai/dsh-home-paths": "0.1.2-rc.1 || 0.1.5-alpha.1 || 0.2.0-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3",
-    "@deepseek-ai/dsh-settings": "0.1.2-rc.1 || 0.1.5-alpha.1 || 0.2.0-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3",
-    "@deepseek-ai/dsh-tools": "0.1.2-rc.1 || 0.1.5-alpha.1 || 0.2.0-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3"
+    "@deepseek-ai/dsh-home-paths": "0.1.2-rc.1 || 0.1.5-alpha.1 || 0.2.0-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5",
+    "@deepseek-ai/dsh-settings": "0.1.2-rc.1 || 0.1.5-alpha.1 || 0.2.0-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5",
+    "@deepseek-ai/dsh-tools": "0.1.2-rc.1 || 0.1.5-alpha.1 || 0.2.0-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5"
   },
   "bin": {
     "openwrite-maintenance": "scripts/maintenance.mjs",

package/packages/openwrite-bridge/lib/client.d.ts

@@ -36,7 +36,6 @@ export interface WorkspaceContext {
     rootCallId?: string;
     toolName?: string;
 }
-/** A normalized Studio failure: HTTP status plus the server's machine-readable code. */
 export declare class StudioError extends Error {
     readonly status: number;
     readonly code: string;

package/packages/openwrite-bridge/lib/client.js

@@ -21,6 +21,8 @@ export function workspaceRootHeaders(root, lowercase = false) {
         : { [name]: root };
 }
 /** A normalized Studio failure: HTTP status plus the server's machine-readable code. */
+/** Hard ceiling for one download (export / project archive). */
+const MAX_DOWNLOAD_BYTES = 256 * 1024 * 1024;
 export class StudioError extends Error {
     status;
     code;
@@ -176,7 +178,47 @@ export class StudioClient {
             // Error downloads are still JSON payloads.
             await this.readJson(response);
         }
-        const content = new Uint8Array(await response.arrayBuffer());
+        // Bound the buffer: an export or project archive is read fully into memory,
+        // so an unbounded body is an OOM vector against the host process. Reject on
+        // a declared oversize, and on a stream that exceeds the cap mid-read.
+        const declared = Number(response.headers.get('content-length') ?? '');
+        if (Number.isFinite(declared) && declared > MAX_DOWNLOAD_BYTES) {
+            await response.body?.cancel();
+            throw new StudioError(`Studio download is too large (${declared} bytes)`, 502, 'DOWNLOAD_TOO_LARGE', { limit: MAX_DOWNLOAD_BYTES });
+        }
+        const reader = response.body?.getReader();
+        if (reader === undefined) {
+            const content = new Uint8Array(await response.arrayBuffer());
+            if (content.byteLength > MAX_DOWNLOAD_BYTES) {
+                throw new StudioError(`Studio download is too large (${content.byteLength} bytes)`, 502, 'DOWNLOAD_TOO_LARGE', { limit: MAX_DOWNLOAD_BYTES });
+            }
+            return {
+                filename: parseDispositionFilename(response.headers.get('content-disposition')) ?? 'export.bin',
+                contentType: response.headers.get('content-type') ?? 'application/octet-stream',
+                content,
+            };
+        }
+        const chunks = [];
+        let total = 0;
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done !== undefined && done)
+                break;
+            if (value === undefined)
+                continue;
+            total += value.byteLength;
+            if (total > MAX_DOWNLOAD_BYTES) {
+                await reader.cancel().catch(() => { });
+                throw new StudioError(`Studio download exceeded ${MAX_DOWNLOAD_BYTES} bytes`, 502, 'DOWNLOAD_TOO_LARGE', { limit: MAX_DOWNLOAD_BYTES });
+            }
+            chunks.push(value);
+        }
+        const content = new Uint8Array(total);
+        let offset = 0;
+        for (const chunk of chunks) {
+            content.set(chunk, offset);
+            offset += chunk.byteLength;
+        }
         return {
             filename: parseDispositionFilename(response.headers.get('content-disposition')) ?? 'export.bin',
             contentType: response.headers.get('content-type') ?? 'application/octet-stream',
@@ -185,17 +227,32 @@ export class StudioClient {
     }
     /** One fetch honoring both the caller's abort signal and the configured timeout. */
     async request(url, init, signal) {
+        // Arm the deadline only once the connection is known. The runtime bootstrap
+        // (`connect()`) is deliberately uncapped — a 23 MB archive over a slow link
+        // needs minutes — so a timeout started before it turns every cold-start
+        // first call into a spurious network error carrying a misleading "the
+        // server may have accepted the request" hint.
+        const connection = await this.connect?.();
         const signals = [AbortSignal.timeout(this.timeoutMs)];
         if (signal !== undefined)
             signals.push(signal);
         try {
-            const connection = await this.connect?.();
             const target = connection ? new URL(url.pathname + url.search, connection.baseUrl) : url;
             const headers = connection?.token ? { ...init.headers, Authorization: `Bearer ${connection.token}` } : init.headers;
             const response = await fetch(target, { ...init, headers, signal: AbortSignal.any(signals) });
             const actual = response.headers.get('X-OpenWrite-Project-Path');
             if (response.ok && actual && this.context?.workspaceRoot) {
-                const expected = realpathSync(this.context.workspaceRoot);
+                let expected;
+                try {
+                    expected = realpathSync(this.context.workspaceRoot);
+                }
+                catch {
+                    // The root was deleted or moved mid-session. Letting ENOENT reach the
+                    // transport handler would report it as NETWORK_ERROR and write a
+                    // diagnostic blaming the network.
+                    await response.body?.cancel();
+                    throw new StudioError('The requested workspace root no longer exists', 400, 'WORKSPACE_ROOT_INVALID', { requested_path: this.context.workspaceRoot });
+                }
                 const received = decodeURIComponent(actual);
                 if (!workspaceRootsEqual(received, expected)) {
                     await response.body?.cancel();
@@ -210,23 +267,31 @@ export class StudioClient {
             if (error instanceof UnsupportedRuntimePlatformError) {
                 throw new StudioError(error.message, error.status, error.code, { platform: error.platform });
             }
+            // The caller's own abort is a cancellation, not a failure; it must not be
+            // rewritten into a StudioError that looks like a transport problem, and it
+            // must not race the client's own timeout for the same outcome.
+            if (signal?.aborted)
+                throw error;
+            // Distinguish the deadline we imposed from "the backend is unreachable".
+            // Both are ambiguous about whether the server applied a write, but only
+            // the timeout carries that meaning, and collapsing them makes an agent
+            // retry a write that may already have landed.
+            const timedOut = error instanceof Error && (error.name === 'TimeoutError' || error.name === 'AbortError');
             if (this.context?.workspaceRoot) {
                 try {
                     const root = join(this.context.workspaceRoot, '.openwrite', 'transport-errors');
                     await mkdir(root, { recursive: true });
                     await writeFile(join(root, `${randomUUID()}.json`), JSON.stringify({
-                        source: 'transport', code: signal?.aborted ? 'REQUEST_ABORTED' : 'NETWORK_ERROR',
+                        source: 'transport', code: timedOut ? 'REQUEST_TIMEOUT' : 'NETWORK_ERROR',
                         created_at: new Date().toISOString(), path: url.pathname,
                         tool_name: this.context.toolName ?? '', tool_call_id: this.context.toolCallId ?? '',
                     }));
                 }
                 catch { /* A diagnostic failure must not hide the transport failure. */ }
             }
-            if (signal?.aborted)
-                throw error;
             const cause = error instanceof Error ? error.cause : undefined;
             const detail = cause instanceof Error ? ` (${cause.message})` : cause === undefined ? '' : ` (${String(cause)})`;
-            throw new StudioError(`Studio request failed: ${error instanceof Error ? error.message : String(error)}${detail}`, 0, 'NETWORK_ERROR');
+            throw new StudioError(`Studio request failed: ${error instanceof Error ? error.message : String(error)}${detail}`, 0, timedOut ? 'REQUEST_TIMEOUT' : 'NETWORK_ERROR');
         }
     }
     /**
@@ -239,7 +304,14 @@ export class StudioClient {
         try {
             parsed = await response.json();
         }
-        catch {
+        catch (error) {
+            // The abort signal applies to the body stream too, so a mid-body abort or
+            // a truncated body would otherwise surface as INVALID_RESPONSE with the
+            // original success status — an error code on a 2xx, which defeats any
+            // caller that keys off `status`.
+            if (error instanceof Error && (error.name === 'TimeoutError' || error.name === 'AbortError')) {
+                throw new StudioError(`Studio response body was not fully received: ${error.message}`, 0, 'REQUEST_TIMEOUT');
+            }
             throw new StudioError(`Studio returned HTTP ${response.status} with a non-JSON body`, response.status, 'INVALID_RESPONSE');
         }
         const body = asJson(parsed);
@@ -248,7 +320,16 @@ export class StudioClient {
             if (error !== undefined && error !== null && error !== false && error !== '') {
                 const nested = typeof error === 'object' && !Array.isArray(error) ? error : {};
                 const code = typeof body['code'] === 'string' ? body['code'] : typeof nested['code'] === 'string' ? nested['code'] : 'STUDIO_ERROR';
-                const message = typeof body['message'] === 'string' ? body['message'] : typeof error === 'string' ? error : typeof nested['message'] === 'string' ? nested['message'] : JSON.stringify(error);
+                // Core sends the generic "Request failed (CODE, HTTP n)" envelope in
+                // `message` and the actionable reason in `error`. Prefer the message
+                // only when it carries real detail; otherwise surface `error`.
+                const envelope = typeof body['message'] === 'string' ? body['message'].trim() : '';
+                const genericEnvelope = envelope !== '' && /^Request failed \([^)]*\)$/.test(envelope);
+                const errorText = typeof error === 'string' && error !== '' ? error : undefined;
+                const nestedMessage = typeof nested['message'] === 'string' && nested['message'] !== '' ? nested['message'] : undefined;
+                const message = envelope !== '' && !genericEnvelope
+                    ? envelope
+                    : errorText ?? nestedMessage ?? (envelope !== '' ? envelope : JSON.stringify(error));
                 const details = body['details'] ?? nested['details'] ?? null;
                 const failure = new StudioError(message, response.status, code, details);
                 failure.requestId = typeof body['request_id'] === 'string' ? body['request_id'] : null;

package/packages/openwrite-bridge/lib/contracts-generated.js

@@ -729,7 +729,8 @@ const SCHEMAS = {
                     "auth_source": {
                         "enum": [
                             "api_key",
-                            "opencode_console"
+                            "opencode_console",
+                            "host_relay"
                         ]
                     },
                     "capabilities": {

package/packages/openwrite-bridge/lib/dog-delivery.d.ts

@@ -1,4 +1,5 @@
 import { type JsonValue } from './client.js';
+export declare function atomicWrite(path: string, value: unknown): Promise<void>;
 /**
  * Anti-drift guard (docs/WORKSPACE_CONTEXT_CONTRACT.md §7): the workspace
  * payload's project root must canonicalize to the current tool context root.

package/packages/openwrite-bridge/lib/dog-delivery.js

@@ -43,7 +43,7 @@ async function readJson(path) {
     }
     return value;
 }
-async function atomicWrite(path, value) {
+export async function atomicWrite(path, value) {
     await mkdir(dirname(path), { recursive: true });
     const temporary = join(dirname(path), `.${basename(path)}.${process.pid}.${randomUUID()}`);
     try {
@@ -216,7 +216,7 @@ export async function materializeChapterDelivery(workspaceValue, chapterId, thre
     });
     let reviewStage;
     if (Object.keys(review).length === 0) {
-        reviewStage = stage(chapterId, 'review', 'inconclusive', 'missing', {});
+        reviewStage = stage(chapterId, 'review', 'inconclusive', 'not_reviewed', {});
     }
     else if (!reviewCurrent) {
         reviewStage = stage(chapterId, 'review', 'inconclusive', reviewStale ? 'stale' : 'unverifiable', {
@@ -225,9 +225,13 @@ export async function materializeChapterDelivery(workspaceValue, chapterId, thre
     }
     else {
         const v2 = record(review['review_v2']);
-        reviewStage = stage(chapterId, 'review', reviewPassed ? 'pass' : ['inconclusive', 'stale'].includes(currentDeliveryStatus) ? 'inconclusive' : 'fail', 'current', {
+        const diagnostics = record(v2['delivery_diagnostics']);
+        const reviewState = !reviewPassed && currentDeliveryStatus === 'inconclusive' ? String(diagnostics['code'] ?? v2['delivery_reason'] ?? 'review_inconclusive') : 'current';
+        reviewStage = stage(chapterId, 'review', reviewPassed ? 'pass' : ['inconclusive', 'stale'].includes(currentDeliveryStatus) ? 'inconclusive' : 'fail', reviewState, {
             score: review['score'] ?? null, threshold: effectiveThreshold, passedGate: reviewPassed,
-            qualityScore: v2['quality_score'] ?? review['score'] ?? null, coverage: v2['coverage'] ?? 1,
+            qualityScore: hasV2 ? v2['quality_score'] ?? null : review['score'] ?? null, coverage: v2['coverage'] ?? 1,
+            scoreValid: v2['score_valid'] ?? (hasV2 ? v2['quality_score'] != null : review['score'] != null),
+            scopeStatus: v2['scope_status'] ?? 'full', deliveryDiagnostics: diagnostics,
             gateStatus: v2['gate_status'] ?? (hardIssueIds.length > 0 ? 'blocked' : 'pass'),
             deliveryStatus: currentDeliveryStatus,
             issueIds, hardIssueIds, sourceRevision: reviewSourceRevision,
@@ -328,6 +332,8 @@ export async function materializeChapterDelivery(workspaceValue, chapterId, thre
         root: {
             kind: 'composite', title: `${chapterId} 章节交付`, constraint: 'hard', target: `${relativeDir}/delivery.json`,
             completion: { op: 'all', items: Object.keys(stages).map(id => ({ op: 'ref', id })) },
+            // Inert contract metadata naming the verification stage kind (see the note
+            // in dog-review.ts): not resolved or executed by this plugin.
             verifier: { mode: 'programmatic', script: 'delivery-stage' },
         },
     };

package/packages/openwrite-bridge/lib/dog-review.js

@@ -1,8 +1,8 @@
 import { createHash } from 'node:crypto';
-import { mkdir, readdir, readFile, stat, writeFile } from 'node:fs/promises';
+import { mkdir, readdir, readFile, stat } from 'node:fs/promises';
 import { join, relative } from 'node:path';
 import { validateReviewV2Decision } from './contracts-generated.js';
-import { assertContained, assertWorkspaceRootMatch } from './dog-delivery.js';
+import { assertContained, assertWorkspaceRootMatch, atomicWrite } from './dog-delivery.js';
 export const DOG_REVIEW_DIMENSIONS = {
     1: 'OOC检查', 2: '时间线检查', 3: '设定冲突', 4: '战力崩坏', 5: '数值检查',
     6: '伏笔检查', 7: '节奏检查', 8: '文风检查', 9: '信息越界', 10: '词汇疲劳',
@@ -146,6 +146,11 @@ export function instantiateDogReviewFramework(frameworkValue, chapterId, relativ
             title: titleTemplate.replaceAll('{chapter_id}', chapterId),
             constraint: template['constraint'],
             target: `${prefix}/${artifact}`,
+            // Inert, server-declared metadata: the framework names a `script` such as
+            // "review-record"/"review-dimension" as a verification *stage kind*. The
+            // `scripts/dog/*.js` files that once implemented those names were removed
+            // with the vendored DoG engine; nothing in this plugin resolves or executes
+            // the value, so it is forwarded verbatim for contract compatibility.
             verifier: template['verifier'],
         };
         if (template['completion'] !== undefined)
@@ -393,6 +398,11 @@ export async function materializeDogReview(response, chapterId, threshold, expec
     catch {
         throw new Error(`invalid project root: ${root}`);
     }
+    // Contain the derived path before touching the filesystem: `novelId` comes
+    // straight from the Studio payload. dog-delivery.ts asserts first and reads
+    // second; doing it the other way round walks outside the project root first.
+    const reviewDir = join(root, 'data', 'novels', novelId, 'data', 'dog', 'reviews', chapterId);
+    assertContained(reviewDir, root);
     const { manifest, dimensionRecords } = buildDogReviewBundle(review, chapterId, threshold);
     // The artifact records retain the exact blueprint identity so a historical
     // review can always be explained against the topology that produced it.
@@ -417,7 +427,9 @@ export async function materializeDogReview(response, chapterId, threshold, expec
     const directory = join(root, relativeDir);
     assertContained(directory, root);
     await mkdir(directory, { recursive: true });
-    const write = async (name, value) => writeFile(join(directory, name), `${JSON.stringify(value, null, 2)}\n`, 'utf8');
+    // Atomic per-file writes: a crash mid-run must not leave a truncated JSON that
+    // a later read classifies as "DoG artifact corrupt JSON" (dog-delivery.ts:38).
+    const write = (name, value) => atomicWrite(join(directory, name), value);
     await write('review.json', manifest);
     await write('context.json', {
         schemaVersion: 'dsh-novel.review.context.v2', recordType: 'review-context', chapterId,

package/packages/openwrite-bridge/lib/domain.d.ts

@@ -6,6 +6,23 @@ export declare const CONFIG_ROUTE = "/studio-panel/config.json";
 export declare const API_PROXY_ROUTE = "/studio-panel/api";
 export declare const EVENTS_ROUTE = "/studio-panel/events";
 export declare const INVALIDATION_ROUTE = "/studio-panel/invalidation.json";
+/** Every browser write path the proxy forwards. Exported for the regression test. */
+export declare const WRITABLE_PATHS: Set<string>;
+export declare const WRITABLE_PATH_RE: RegExp;
+/**
+ * Paths whose payload is global, not project-scoped.
+ *
+ * The model profile library lives outside every project — Studio keeps it in
+ * the user's preferences directory (`model-profiles.json`), and every model
+ * route is registered with `requires_project=False`. The host settings dialog
+ * is the one surface that is opened *without* a bound workspace, so these
+ * paths must be reachable without a workspace id: the browser sends no
+ * `X-Dsh-Workspace-Id` and the proxy forwards the call without a project
+ * root, exactly as the contract's project-free routes expect.
+ *
+ * Every other proxied path stays fail-closed on a missing workspace id.
+ */
+export declare const GLOBAL_PATHS: Set<string>;
 declare module '@deepseek-ai/cordis' {
     interface Context {
         novelDomain: NovelDomainService;
@@ -37,6 +54,8 @@ export declare class NovelDomainService extends Service {
     private readonly connect;
     readonly baseUrl: string;
     private readonly resolveWorkspace;
+    /** Undelivered SSE bytes per stream, for backpressure (see notifyMutation). */
+    private readonly streamPending;
     /** Per-root invalidation state, keyed by canonical workspace root ('' = legacy). */
     private readonly roots;
     /** Open SSE connections bound to the root key they subscribed to. */
@@ -63,6 +82,14 @@ export declare class NovelDomainService extends Service {
      * closed per the contract: missing id → 400 WORKSPACE_CONTEXT_MISSING, no
      * registry → 503 WORKSPACE_REGISTRY_UNAVAILABLE, unknown id → 400 WORKSPACE_UNKNOWN.
      */
+    /**
+     * The workspace a browser view belongs to, for invalidation only.
+     *
+     * An unknown or absent workspace id resolves to the global bucket rather
+     * than to a rejection: the payload of a global path does not depend on the
+     * workspace, so a stale id must not turn a readable answer into an error.
+     */
+    private viewerRoot;
     private resolveBrowserWorkspace;
     private static sendRejection;
     registerWebRoutes(ctx: Context): void;