dsh-tower 2.1.0 → 2.4.0

package/tools/reload.js

@@ -1,52 +1,48 @@
 // tower_reload: dev-only HMR reload request.
-import { Tower } from '../app/tower.js'
+//
+// #121: this tool is the `tower-hmr` component. It is registered only by that
+// component's entry point, so the row is the switch; there is no second
+// `dev.hotReload` boolean to disagree with it.
 import { SCHEMAS, output } from '../domain/contracts/outputs.js'
 import { TowerToolError } from '../domain/errors.js'
-import { runtimeConfig } from '../lib/config.js'
-import { createHmrBridge } from '../lib/hmr.js'
 import { ReloadInput } from '../domain/contracts/tool-inputs/index.js'
 
 /**
  * @param {any} ctx
- * @param {{ define: import('../types/index.js').DefineTool, actorFor: any, requireTowerActor: any, sharedHmrBridge: any }} deps
+ * @param {{ define: import('../types/index.js').DefineTool, openTower: any, actorFor: any, requireTowerActor: any, sharedHmrBridge: any, runtimeConfig: any, createHmrBridge: any }} deps
  */
 export function registerReloadTool(ctx, deps) {
-  const { define, actorFor, requireTowerActor, sharedHmrBridge } = deps
-  // Dev-only hot reload. The tool is registered whenever dev.hotReload is on;
-  // it reports reload-unavailable when the profile has no HMR service. When the
-  // Host passed a shared bridge, its status() reflects the command's reloads too.
+  const { define, actorFor, requireTowerActor, sharedHmrBridge, runtimeConfig, createHmrBridge } = deps
   const dev = runtimeConfig().dev ?? {}
-  if (dev.hotReload !== false) {
-    const bridge =
-      sharedHmrBridge ??
-      createHmrBridge(ctx, {
-        requiredIds: dev.reloadRequiredIds,
-        delayMs: dev.reloadDelayMs,
-        logger: ctx.logger ?? console,
-      })
-    define(ctx, {
-      name: 'tower_reload',
-      description:
-        'Dev-only: ask DSH HMR to reconcile this profile and reload the Tower Host plugin from disk. The reload is scheduled a few milliseconds after this call returns (so the result reaches the model first). Use after editing the plugin source in a linked profile; plugin_manager install/update already triggers reconciliation by itself. Registered while dev.hotReload is on; fails with reload-unavailable when the HMR service is absent.',
-      parameters: ReloadInput,
-      output: output(SCHEMAS.reload),
-      async execute(args, exec) {
-        if (typeof args.repoRoot === 'string') {
-          const tower = await Tower.open(args.repoRoot)
-          const actor = await actorFor(tower, exec)
-          requireTowerActor(actor, 'reload the Tower plugin')
-        }
-        if (!bridge.available) {
-          throw new TowerToolError('reload-unavailable', 'this DSH profile has no HMR service; restart DSH instead')
-        }
-        const outcome = bridge.schedule()
-        return {
-          ok: true,
-          ...outcome,
-          ...(outcome.lastError ? { error: outcome.lastError } : {}),
-          restartHint: 'If the new code does not appear, restart DSH or check the profile hmr entry.',
-        }
-      },
+  const bridge =
+    sharedHmrBridge ??
+    createHmrBridge(ctx, {
+      requiredIds: dev.reloadRequiredIds,
+      delayMs: dev.reloadDelayMs,
+      logger: ctx.logger ?? console,
     })
-  }
+  define(ctx, {
+    name: 'tower_reload',
+    description:
+      'Dev-only: ask DSH HMR to reconcile this profile and reload the Tower Host plugin from disk. Registered only while the tower-hmr component is on (the row is shipped off). The reload is scheduled a few milliseconds after this call returns (so the result reaches the model first). Use after editing the plugin source in a linked profile; plugin_manager install/update already triggers reconciliation by itself. Fails with reload-unavailable when the HMR service is absent.',
+    parameters: ReloadInput,
+    output: output(SCHEMAS.reload),
+    async execute(args, exec) {
+      if (typeof args.repoRoot === 'string') {
+        const tower = await deps.openTower(args.repoRoot)
+        const actor = await actorFor(tower, exec)
+        requireTowerActor(actor, 'reload the Tower plugin')
+      }
+      if (!bridge.available) {
+        throw new TowerToolError('reload-unavailable', 'this DSH profile has no HMR service; restart DSH instead')
+      }
+      const outcome = bridge.schedule()
+      return {
+        ok: true,
+        ...outcome,
+        ...(outcome.lastError ? { error: outcome.lastError } : {}),
+        restartHint: 'If the new code does not appear, restart DSH or check the profile hmr entry.',
+      }
+    },
+  })
 }

package/tools/resource.js

@@ -1,17 +1,15 @@
 // tower_resource: advisory resource leases.
-import { Tower } from '../app/tower.js'
 import { SCHEMAS, output } from '../domain/contracts/outputs.js'
 import { TowerToolError } from '../domain/errors.js'
-import { acquireLease, releaseLease, inspectLeases } from '../lib/leases.js'
 import { ResourceInput } from '../domain/contracts/tool-inputs/index.js'
 import { LEASE_ACTION } from '../domain/vocabulary.js'
 
 /**
  * @param {any} ctx
- * @param {{ define: import('../types/index.js').DefineTool, actorFor: any, requireTowerActor: any }} deps
+ * @param {{ define: import('../types/index.js').DefineTool, openTower: any, actorFor: any, requireTowerActor: any, acquireLease: any, releaseLease: any, inspectLeases: any }} deps
  */
 export function registerResourceTool(ctx, deps) {
-  const { define, actorFor, requireTowerActor } = deps
+  const { define, actorFor, requireTowerActor, acquireLease, releaseLease, inspectLeases } = deps
   define(ctx, {
     name: 'tower_resource',
     description:
@@ -19,7 +17,7 @@ export function registerResourceTool(ctx, deps) {
     parameters: ResourceInput,
     output: output(SCHEMAS.resource),
     async execute(args, exec) {
-      const tower = await Tower.open(args.repoRoot)
+      const tower = await deps.openTower(args.repoRoot)
       const actor = await actorFor(tower, exec)
       const redact = (leases) => leases.map(({ token, ...lease }) => lease)
       if (args.action === LEASE_ACTION.status) {

package/tools/review.js

@@ -1,5 +1,4 @@
 // tower_review: independent review verdict.
-import { Tower } from '../app/tower.js'
 import { SCHEMAS, output } from '../domain/contracts/outputs.js'
 import { TowerToolError } from '../domain/errors.js'
 import { ReviewInput } from '../domain/contracts/tool-inputs/index.js'
@@ -7,21 +6,21 @@ import { isReviewerRole, isTowerRole } from '../domain/vocabulary.js'
 
 /**
  * @param {any} ctx
- * @param {{ define: import('../types/index.js').DefineTool, actorFor: any }} deps
+ * @param {{ define: import('../types/index.js').DefineTool, openTower: any, actorFor: any }} deps
  */
 export function registerReviewTool(ctx, deps) {
   const { define, actorFor } = deps
   define(ctx, {
     name: 'tower_review',
     description:
-      'Submit an independent review verdict for a completed mission, bound to the current branch tip. status is "clean", "p1-Nitems", or "p2-Nitems"; merge is "merge", "fix-then-merge", or "hold" (only clean + merge is later approval). Non-clean returns the mission to active. Reviewers are capped at 5 rounds per branch; a tower-submitted review is break-glass and requires breakGlassReason.',
+      'Submit an independent review verdict bound to the current branch tip: a completed mission starts a review round, and while the mission is active a later route may still record a verdict for that same reviewed tip, appending to the same round without changing the status (a moved tip is rejected with an explanation). status is "clean", "p1-Nitems", or "p2-Nitems"; merge is "merge", "fix-then-merge", or "hold" (only clean + merge is later approval). Non-clean returns the mission to active. Reviewers are capped at 5 rounds per branch; a tower-submitted review is break-glass and requires breakGlassReason.',
     parameters: ReviewInput,
     aliases: {"missionId":["id"]},
     requiresMissionId: true,
     board: true,
     output: output(SCHEMAS.review),
     async execute(args, exec) {
-      const tower = await Tower.open(args.repoRoot)
+      const tower = await deps.openTower(args.repoRoot)
       const actor = await actorFor(tower, exec)
       if (!isReviewerRole(actor.role) && !isTowerRole(actor.role)) {
         throw new TowerToolError('not-authorized', `only an assigned reviewer or the tower may review; ${actor.name} is ${actor.role}`)

package/tools/roster.js

@@ -1,5 +1,4 @@
 // tower_roster: authoritative roster activity.
-import { Tower } from '../app/tower.js'
 import { SCHEMAS, output } from '../domain/contracts/outputs.js'
 import { TowerToolError } from '../domain/errors.js'
 import { RosterInput } from '../domain/contracts/tool-inputs/index.js'
@@ -7,7 +6,7 @@ import { PARENT_STATUS_OK, ROSTER_ACTIVITY, ROSTER_GONE_STATES } from '../domain
 
 /**
  * @param {any} ctx
- * @param {{ define: import('../types/index.js').DefineTool }} deps
+ * @param {{ define: import('../types/index.js').DefineTool, openTower: any }} deps
  */
 export function registerRosterTool(ctx, deps) {
   const { define } = deps
@@ -18,7 +17,7 @@ export function registerRosterTool(ctx, deps) {
     parameters: RosterInput,
     output: output(SCHEMAS.roster),
     async execute(args) {
-      const tower = await Tower.open(args.repoRoot)
+      const tower = await deps.openTower(args.repoRoot)
       const view = await tower.rosterView()
       const subagents = ctx.get('subagents')
       if (!subagents) throw new TowerToolError('spawn-unavailable', 'subagents service is unavailable; cannot observe roster')

package/tools/send.js

@@ -1,5 +1,4 @@
 // tower_send: durable inbox message delivery.
-import { Tower } from '../app/tower.js'
 import { SCHEMAS, output } from '../domain/contracts/outputs.js'
 import { TowerToolError } from '../domain/errors.js'
 import { SendInput } from '../domain/contracts/tool-inputs/index.js'
@@ -17,6 +16,7 @@ import {
  * @param {any} ctx
  * @param {{
  *   define: import('../types/index.js').DefineTool,
+ *   openTower: any,
  *   actorFor: any,
  *   checkSendRate: any,
  * }} deps
@@ -31,7 +31,7 @@ export function registerSendTool(ctx, deps) {
     aliases: { consentRef: ['consent_ref'] },
     output: output(SCHEMAS.send),
     async execute(args, exec) {
-      const tower = await Tower.open(args.repoRoot)
+      const tower = await deps.openTower(args.repoRoot)
       checkSendRate(tower.config, args.repoRoot)
       const actor = await actorFor(tower, exec)
       const view = await tower.rosterView()

package/tools/spawn.js

@@ -1,5 +1,4 @@
 // tower_spawn: provision and start a worker/reviewer.
-import { Tower } from '../app/tower.js'
 import { SCHEMAS, output } from '../domain/contracts/outputs.js'
 import { TowerToolError, classifyError } from '../domain/errors.js'
 import { SpawnInput } from '../domain/contracts/tool-inputs/index.js'
@@ -9,13 +8,14 @@ import {
   precheckSpawnServices,
   precheckWorkerOwnership,
   resolveRosterName,
-} from '../lib/spawn-prechecks.js'
-import { buildAgentOptions, buildSpawnBriefing, waitForSpawnResult } from '../lib/spawn-support.js'
+} from '../app/spawn-prechecks.js'
+import { buildAgentOptions, buildSpawnBriefing, waitForSpawnResult } from '../app/spawn-support.js'
 
 /**
  * @param {any} ctx
  * @param {{
  *   define: import('../types/index.js').DefineTool,
+ *   openTower: any,
  *   actorFor: any,
  *   requireTowerActor: any,
  *   enqueueSpawn: any,
@@ -25,6 +25,7 @@ import { buildAgentOptions, buildSpawnBriefing, waitForSpawnResult } from '../li
  *   recordSpawnSuccess: any,
  *   runMissionDiscovery: any,
  *   textOf: any,
+ *   inspectLeases: any,
  * }} deps
  */
 export function registerSpawnTool(ctx, deps) {
@@ -43,7 +44,7 @@ export function registerSpawnTool(ctx, deps) {
     board: true,
     output: output(SCHEMAS.spawn),
     async execute(args, exec) {
-      const tower = await Tower.open(args.repoRoot)
+      const tower = await deps.openTower(args.repoRoot)
       const actor = await actorFor(tower, exec)
       requireTowerActor(actor, 'spawn tower agents')
       const role = args.role ?? DEFAULT_ROLE
@@ -68,7 +69,9 @@ export function registerSpawnTool(ctx, deps) {
           role, tower, ctx, view, missionId: args.missionId, takeover: args.takeover,
           maxLiveWorkers: config.spawn.maxLiveWorkers, budget: backoff.budget, observeActivity,
         })
-        const { subagents, provider } = await precheckSpawnServices({ tower, ctx, config, preset, actor, exec })
+        const { subagents, provider } = await precheckSpawnServices({
+          tower, ctx, config, preset, actor, exec, inspectLeases: deps.inspectLeases,
+        })
 
         const provisioned = await tower.provision({
           missionId: args.missionId,

package/tools/status.js

@@ -1,5 +1,4 @@
 // tower_status: dashboard and mission detail.
-import { Tower } from '../app/tower.js'
 import { SCHEMAS, output } from '../domain/contracts/outputs.js'
 import { classifyError } from '../domain/errors.js'
 import { StatusInput } from '../domain/contracts/tool-inputs/index.js'
@@ -10,22 +9,28 @@ import { archiveView } from '../app/archive.js'
  * @param {any} ctx
  * @param {{
  *   define: import('../types/index.js').DefineTool,
+ *   openTower: any,
  *   workspaceHook: any,
  *   spawnBackoffView: any,
  *   observeActivity: any,
+ *   componentReport: (ctx: any) => Promise<{ enabled: string[], disabled: Array<{ id: string, reason: string }> }>,
  * }} deps
  */
 export function registerStatusTool(ctx, deps) {
-  const { define, workspaceHook, spawnBackoffView, observeActivity } = deps
+  const { define, workspaceHook, spawnBackoffView, observeActivity, componentReport } = deps
   define(ctx, {
     name: 'tower_status',
     description:
-      'Read the Tower dashboard for a repository: state path, base branch, revision, mission status counts, paged mission summaries (scope/deps/tasks/worktree/owner), roster size, findings, archive count, config path and the activity tail. Pass missionId for one full mission (tasks, notes, reviews, findings, completion report; archived missions are loaded from their year file); offset/limit page the mission list (default 20, max 100); includeGate adds preflight gate digests for the page; includeArchived appends compact archived summaries after the active page; format:"markdown" returns the human-readable mission board (active missions plus an archived count). Read-only.',
+      'Read the Tower dashboard for a repository: state path, base branch, revision, mission status counts, paged mission summaries (scope/deps/tasks/worktree/owner), roster size, findings, archive count, config path and the activity tail. Also reports the repo-scoped git lock holder (`gitLock: {held,pid,phase,heldMs}`) so a merge holding the mutex is visible. Pass missionId for one full mission (tasks, notes, reviews, findings, completion report; archived missions are loaded from their year file); offset/limit page the mission list (default 20, max 100); includeGate adds preflight gate digests for the page; includeArchived appends compact archived summaries after the active page; format:"markdown" returns the human-readable mission board (active missions plus an archived count). Read-only.',
     parameters: StatusInput,
     aliases: { mission_id: ['missionId'], include_gate: ['includeGate'], include_archived: ['includeArchived'] },
     output: output(SCHEMAS.status),
     async execute(args, exec) {
-      const tower = await Tower.open(args.repoRoot)
+      const tower = await deps.openTower(args.repoRoot)
+      // #121: report the mounted optional components, including the exact
+      // "disabled by component <id>" reason. A capability that is off must be a
+      // visible fact of the dashboard, never a silent absence from the tools.
+      const components = await componentReport(ctx)
       const boardPath = tower.boardFile()
       const mode = workspaceHook?.modeInfo?.(exec) ?? null
       const statusState = await tower.load()
@@ -46,6 +51,7 @@ export function registerStatusTool(ctx, deps) {
           boardPath,
           mode,
           spawn,
+          components,
         }
       }
       const state = await tower.load()
@@ -90,6 +96,7 @@ export function registerStatusTool(ctx, deps) {
         boardPath,
         mode,
         spawn,
+        components,
       }
       if (isMarkdownFormat(args.format)) {
         const state = await tower.load()

package/tools/teardown.js

@@ -8,13 +8,12 @@
 // Pure eligibility decisions live in domain/integration.
 // See docs/reference/tools.generated.md for the public shape.
 // tower_teardown: remove eligible mission worktrees.
-import { Tower } from '../app/tower.js'
 import { SCHEMAS, output } from '../domain/contracts/outputs.js'
 import { TeardownInput } from '../domain/contracts/tool-inputs/index.js'
 
 /**
  * @param {any} ctx
- * @param {{ define: import('../types/index.js').DefineTool, actorFor: any, requireTowerActor: any, observeActivity: any }} deps
+ * @param {{ define: import('../types/index.js').DefineTool, openTower: any, actorFor: any, requireTowerActor: any, observeActivity: any }} deps
  */
 export function registerTeardownTool(ctx, deps) {
   const { define, actorFor, requireTowerActor, observeActivity } = deps
@@ -27,7 +26,7 @@ export function registerTeardownTool(ctx, deps) {
     board: true,
     output: output(SCHEMAS.teardown),
     async execute(args, exec) {
-      const tower = await Tower.open(args.repoRoot)
+      const tower = await deps.openTower(args.repoRoot)
       const actor = await actorFor(tower, exec)
       requireTowerActor(actor, 'tear down worktrees')
       const { activity } = await observeActivity(ctx, tower)

package/tools/test.js

@@ -1,5 +1,4 @@
 // tower_test: run declared worktree test discovery.
-import { Tower } from '../app/tower.js'
 import { SCHEMAS, output } from '../domain/contracts/outputs.js'
 import { TowerToolError } from '../domain/errors.js'
 import { TestInput } from '../domain/contracts/tool-inputs/index.js'
@@ -9,6 +8,7 @@ import { isReviewerRole, isWorkerRole } from '../domain/vocabulary.js'
  * @param {any} ctx
  * @param {{
  *   define: import('../types/index.js').DefineTool,
+ *   openTower: any,
  *   actorFor: any,
  *   requireKnownActor: any,
  *   runMissionDiscovery: any,
@@ -25,7 +25,7 @@ export function registerTestTool(ctx, deps) {
     requiresMissionId: true,
     output: output(SCHEMAS.test),
     async execute(args, exec) {
-      const tower = await Tower.open(args.repoRoot)
+      const tower = await deps.openTower(args.repoRoot)
       const actor = await actorFor(tower, exec)
       requireKnownActor(actor, 'tower_test')
       const context = await tower.missionContext(args.missionId)

package/types/index.d.ts

@@ -6,16 +6,35 @@
 // `tsc --noEmit` (checkJs). Keep this file free of value imports so consumers
 // can load it without `allowJs`.
 
+// ---------------------------------------------------------------------------
+// Generated vocabulary (#115): one declaration per runtime constant family.
+// `npm run types:generate` rewrites the marked block from ERROR_CODES,
+// MISSION_STATUSES, REVIEW_STATUSES, MERGE_VERDICTS, MISSION_KINDS,
+// REVIEW_POLICIES, FINDING_*, ROLES and PAUSE_CAUSES; the generated-types gate
+// (`npm run docs:check:generated:types`) fails when the block drifts. Do not
+// edit the block by hand.
+// generated:vocabulary:start
 export type MissionStatus = 'planned' | 'active' | 'completed' | 'blocked' | 'paused' | 'merged' | 'abandoned'
 export type MissionKind = 'build' | 'survey'
-export type ReviewStatus = 'clean' | 'p1-1items' | 'p1-2items' | 'p1-3items' | 'p1-4items' | 'p1-5items' | 'p2-1items' | 'p2-2items' | 'p2-3items' | 'p2-4items' | 'p2-5items'
+export type ReviewStatus =
+  | 'clean'
+  | 'p1-1items'
+  | 'p1-2items'
+  | 'p1-3items'
+  | 'p1-4items'
+  | 'p1-5items'
+  | 'p2-1items'
+  | 'p2-2items'
+  | 'p2-3items'
+  | 'p2-4items'
+  | 'p2-5items'
 export type MergeVerdict = 'merge' | 'fix-then-merge' | 'hold'
 export type ReviewPolicy = 'required-clean' | 'none'
 export type FindingType = 'bug' | 'improve' | 'vuln' | 'idea'
 export type FindingSeverity = 'low' | 'medium' | 'high' | 'critical'
 export type FindingStatus = 'open' | 'triaged' | 'fixed' | 'wontfix'
 export type Role = 'worker' | 'reviewer'
-
+export type PauseCause = 'user' | 'failure' | 'resource' | 'dependency'
 export type ErrorCode =
   | 'invalid-argument'
   | 'repo-invalid'
@@ -23,26 +42,22 @@ export type ErrorCode =
   | 'mission-not-found'
   | 'finding-not-found'
   | 'invalid-transition'
+  | 'stale-base'
   | 'state-locked'
   | 'state-corrupt'
+  | 'state-version-unsupported'
+  | 'state-migration-failed'
   | 'config-invalid'
   | 'config-unknown-key'
+  | 'git-failed'
   | 'git-timeout'
-  | 'merge-conflict'
-  | 'merge-hook-failed'
-  | 'merge-intent-pending'
-  | 'base-dirty'
-  | 'stale-base'
-  | 'tip-moved'
-  | 'out-of-scope'
-  | 'worker-busy'
-  | 'worker-stale'
+  | 'worktree-dirty'
   | 'spawn-unavailable'
   | 'provider-missing'
   | 'provider-cooldown'
   | 'preset-missing'
   | 'reviewer-prerequisite'
-  | 'worktree-dirty'
+  | 'not-authorized'
   | 'workspace-busy'
   | 'worker-limit'
   | 'rate-limited'
@@ -56,6 +71,7 @@ export type ErrorCode =
   | 'batch-invalid'
   | 'legacy-invalid'
   | 'tool-internal'
+// generated:vocabulary:end
 
 /** One machine-readable gate/completion blocker: a stable code plus a detail. */
 export interface Blocker {
@@ -106,7 +122,7 @@ export interface CompletionReport {
   checks?: CompletionCheck[]
 }
 
-/** One recorded test-discovery receipt (lib/tests.js). */
+/** One recorded test-discovery receipt (adapters/tests.js). */
 export interface TestRun {
   version?: number
   ok?: boolean

package/ui-bundle/README.md

@@ -1,6 +1,6 @@
 # Tower UI (optional Client bundle)
 
-An **optional** Web Client bundle for the Host `dsh-tower` plugin. It never touches Tower state directly: everything it renders is derived from the conversation the user is already looking at, or from the tool results already in that conversation. There is no Host → Client remote channel, no `host.call`, no DOM manipulation, no iframe, and no import of Harness Client packages (the only module it requires is `react` from the browser module table).
+An **optional** Web Client bundle for the Host `dsh-tower` plugin. It never touches Tower state directly: everything it renders is derived from the conversation the user is already looking at, or from the tool results already in that conversation. There is no Host → Client remote channel, no `host.call`, no DOM manipulation, no iframe, and no import of Harness Client packages (the only browser module-table word it requires is `react`).
 
 Version: **0.2.2** (private, not published). The Host plugin version is unchanged.
 
@@ -20,6 +20,39 @@ The cards are deliberately compact: mission status/counts, task checklist progre
 
 The overlay strip is `pointer-events: none` end-to-end and uses `role="status"` / `aria-live="polite"`; it never blocks the composer or the page.
 
+## Source layout (#71)
+
+The bundle is split along the surfaces above. `client.js` is the entry: it owns
+the diagnostics seam and the registrations, and loads the package-local chunks
+through the DSH client module system's `require.async("./client.<surface>.js")`
+(bundles execute as classic scripts, so the entry cannot require a sibling
+synchronously). Every chunk registers through the same `window.__ModuleLoader__`
+surface as `{ id: 'dsh-tower-ui', chunk: 'client.<surface>.js', factory }` and
+receives the shared helpers/styles/locales through the `env` the entry composes;
+no chunk reaches the Host or another chunk.
+
+| File | Surface |
+|---|---|
+| `client.js` | entry: diagnostics, `apply`, the five registrations |
+| `client.toolview.js` | toolview card: lifecycle + `TowerToolCard` |
+| `client.cards.js` | the per-tool card models behind the card |
+| `client.dock.js` | composer dock: mode chip, unknown state, latest summary |
+| `client.mode.js` | history-derived mode model + observable |
+| `client.denied.js` | mode-aware `Tower mode · disabled` rows |
+| `client.overlay.js` | transient `shell.overlay` status strip + notice store |
+| `client.locales.js` | `en`/`zh` dictionaries and the `t`-seat helpers |
+| `client.styles.js` | the `--dsw-alias-*` inline style table |
+| `client.helpers.js` | tool vocabulary + defensive payload helpers |
+| `index.js` | Host half (empty `apply`) |
+
+The client tier is gated by `scripts/architecture.mjs` like any other source
+root: `client-no-node` (no `node:*` imports; DOM globals are fine),
+`client-size` (800-line ceiling per file) and `client-ambient` (no module-level
+`let`; state lives in the `create*` closure), each with a seeded fixture in
+`tests/architecture.test.mjs`. Every client source file stays under 400 lines
+and the split preserves the pre-split line total within 10%
+(`tests/ui-bundle.test.mjs`).
+
 ## Persistent Tower-mode indicator (#11)
 
 Tower mode is a Host-side session stance and there is no Client RPC for it. The dock derives it from the durable session history that the Chat projection exposes in `useChat(snapshot.legacy)`:
@@ -38,7 +71,7 @@ The Host guard returns a plain tool error like `tower mode: <tool> is disabled w
 
 While the displayed session is in Tower mode the bundle dynamically registers `tool.call.toolview` entries for:
 
-- `tower_mode.deniedWhileActive` when the latest `tower_mode` output lists it, otherwise `lib/config.js` `DEFAULT_DENY_TOOLS` (`create_goal`, `todo_write`, `team_task_create`, `team_task_update`, `team_task_reopen`, `team_task_list`, `spawn_teammate`, `wait_agent`, `workflow`, `ralph`, `subagent`, `subagent_fork`);
+- `tower_mode.deniedWhileActive` when the latest `tower_mode` output lists it, otherwise `host/config.js` `DEFAULT_DENY_TOOLS` (`create_goal`, `todo_write`, `team_task_create`, `team_task_update`, `team_task_reopen`, `team_task_list`, `spawn_teammate`, `wait_agent`, `workflow`, `ralph`, `subagent`, `subagent_fork`);
 - `update_goal` unconditionally, because the guard special-cases its `action: "resume"`.
 
 Those entries register with `priority: -10`. The slot core renders the lowest priority for a key, so this shadows the native keyed views without replacing them; disposing the entries (mode off) restores the native views exactly. A denial result renders as a distinct **`Tower mode · disabled`** row (warn marker, label, the preserved denial message, and the `/tower off` hint) — not the generic error text styling. `update_goal` resume denials get the same row. A non-denial result that lands in one of those slots while the mode is on renders a defensive generic row (there is no native view to delegate to while the registration shadows it); ordinary tool errors are not misclassified as Tower-mode denials.
@@ -56,7 +89,7 @@ Verified **statically** against the installed DSH **0.2.1-rc.2** sources:
 - Locale: `ctx.locale.register(ns, { en, zh })`, dictionaries are flat `key → template` maps with `{param}` interpolation; a slot declaration's `locale` option supplies the bound `t` seat.
 - The bundle's `dsh.client.inject` orders activation after `ui-conversation` and `ui-tool`, the two packages that declare the slots it targets. `ctx.slots.inject` only installs a registration while its owner declaration exists; each injection is guarded and reported in diagnostics instead of crashing the whole Client half.
 
-Automated offline coverage: `tests/ui-bundle.test.mjs` loads `client.js` through a fake `window.__ModuleLoader__`, asserts the 12 keys / dock id / overlay id, en–zh dictionary parity, theme-token discipline, and renders every card plus the dock/overlay components with fake hooks. It also drives fake chat history through the dock to assert the off hint, the on chip (including refresh re-derivation), `tower_mode`/`tower_control`/command updates, dynamic registration for default and configured deny lists, disposal on mode off, `update_goal`, denial-row treatment, generic fallbacks, and locale parity — no browser required.
+Automated offline coverage: `tests/ui-bundle.test.mjs` loads `client.js` through a fake `window.__ModuleLoader__` (and each split chunk through the same loader when the entry calls `require.async`), asserts the 12 keys / dock id / overlay id, en–zh dictionary parity, theme-token discipline, every file's loader format and the split-size budget, and renders every card plus the dock/overlay components with fake hooks. It also drives fake chat history through the dock to assert the off hint, the on chip (including refresh re-derivation), `tower_mode`/`tower_control`/command updates, dynamic registration for default and configured deny lists, disposal on mode off, `update_goal`, denial-row treatment, generic fallbacks, and locale parity — no browser required.
 
 Live/browser verification is **opt-in** (`tests/live/ui-slots.cjs`) because it needs an isolated profile with the bundle installed. From a teammate/subagent session the Client `Slots` inspect query times out by design (the page answers only the agent whose session it displays), so this phase did not run a live inspection; the source-level contract above is the evidence. When the script runs against an installed profile it binds a session with a bare `/tower` command and asserts, through the read-only `window.__TOWER_UI_DIAG__` report, that apply() ran without errors, that all 12 toolview keys and the dock/overlay entries registered, that the dock outlet is visible, and — since the bind command turns the Host mode on — that the history-derived `Tower · on` chip rendered (#11). The chip can be inspected visually in the same run (`data-tower-ui="dock-mode"`).
 
@@ -65,6 +98,7 @@ Live/browser verification is **opt-in** (`tests/live/ui-slots.cjs`) because it n
 ```powershell
 # offline, no browser
 node --check ui-bundle/client.js
+Get-ChildItem ui-bundle -Filter 'client*.js' | ForEach-Object { node --check $_.FullName }
 node --test tests/ui-bundle.test.mjs
 
 # opt-in live check (isolated profile only)