dsh-tower 2.4.2 → 2.5.0

package/host/tool-registry.js

@@ -378,7 +378,11 @@ async function ensureRepository(repoRootInput, autoGitInit) {
   }
 }
 
-const OPERATIONAL_TOOLS = new Map()
+// #138: exported so `scripts/check-components.mjs` can import the route table
+// instead of scraping this file. The table is empty since #122; an empty Map is
+// the determined state, while a missing export or a failed import is a gate
+// failure.
+export const OPERATIONAL_TOOLS = new Map()
 
 function plainSchema(value) {
   return JSON.parse(JSON.stringify(value))
@@ -473,8 +477,11 @@ async function runMissionDiscovery(tower, mission) {
     return { configured: false, disabledBy: 'tower-tests', reason: disabledReason('tower-tests') }
   }
   const testsConfig = tower.config.tests ?? {}
-  if (testsConfig.enabled === false || testsConfig.allowPackageDiscovery === false) {
-    return { configured: false }
+  // #136: there is no second switch. The `tower-tests` row decided above; the
+  // only remaining reason to skip discovery is an explicit opt-out of repository
+  // package discovery.
+  if (testsConfig.allowPackageDiscovery === false) {
+    return { configured: false, error: 'test discovery is disabled by tests.allowPackageDiscovery:false' }
   }
   const worktreePath = mission?.worktree?.path
   if (!worktreePath) return { configured: false, error: 'mission has no worktree' }
@@ -565,6 +572,14 @@ export function registerCoreTowerTools(ctx, options = {}) {
   const baseDeps = options.deps ? assertPorts(options.deps) : (runtimeState.deps ?? createDefaultDeps())
   runtimeState.deps = {
     ...baseDeps,
+    // #140: the merge gate lives in the pure domain, which cannot read the
+    // component registry. Publish the two probes it needs on the port bag the
+    // store already receives, so `evaluateGate` can name a disabled row as the
+    // cause instead of guessing from config.
+    components: {
+      enabled: (id) => componentEnabled(id),
+      reason: (id) => disabledReason(id),
+    },
     events: {
       emit(name, payload) {
         try {
@@ -615,7 +630,9 @@ export function registerCoreTowerTools(ctx, options = {}) {
 
   registerStatusTool(ctx, { openTower, define, workspaceHook: runtimeState.workspaceHook, spawnBackoffView, observeActivity, componentReport })
 
-  registerSpawnTool(ctx, { openTower, define, actorFor, requireTowerActor, enqueueSpawn, observeActivity, spawnBackoffState, recordSpawnThrottle, recordSpawnSuccess, runMissionDiscovery, textOf, inspectLeases })
+  // #131: the lease precondition needs the row state, and the app layer may not
+  // import the registry, so the probe travels with the other spawn deps.
+  registerSpawnTool(ctx, { openTower, define, actorFor, requireTowerActor, enqueueSpawn, observeActivity, spawnBackoffState, recordSpawnThrottle, recordSpawnSuccess, runMissionDiscovery, textOf, inspectLeases, leaseComponent: () => ({ enabled: componentEnabled('tower-leases'), reason: disabledReason('tower-leases') }) })
 
   registerRosterTool(ctx, { openTower, define })
 

package/index.js

@@ -398,11 +398,15 @@ export function apply(ctx, rawConfig) {
       : () => {},
   )
 
-  ctx.systemPrompt.section({
-    name: 'tower:mode',
-    order: 15000,
-    text: (context) => (context && modeOn(agentKey(context.agent)) ? reminder : ''),
-  })
+  // #139: same leak as the skills provider — the section belongs to the plugin
+  // lifetime, so registration goes through `ctx.effect`.
+  ctx.effect(() =>
+    ctx.systemPrompt.section({
+      name: 'tower:mode',
+      order: 15000,
+      text: (context) => (context && modeOn(agentKey(context.agent)) ? reminder : ''),
+    }),
+  )
 
   // Workspace-lock heartbeat; only sessions holding a lock do I/O.
   ctx.effect(() => {
@@ -583,7 +587,14 @@ export function apply(ctx, rawConfig) {
           }
         }
         const { active, message } = parsed
-        if (active) await assertRuntimePreconditions(ctx, config)
+        // #142: preconditions guard the *transition* into Tower mode, not every
+        // `/tower` instruction. Re-validating on an already-active session meant a
+        // row disabled later in the session (tower-hmr ships off) blocked
+        // `/tower off` and ordinary forwarded text — the two commands a human
+        // needs precisely when something is broken. Spawn/plan/merge keep their own
+        // guards, so the capability checks still run before any real work.
+        const transition = active && !modeOn(key)
+        if (transition) await assertRuntimePreconditions(ctx, config)
         const outcome = active
           ? enterMode(ctx, key, agent, 'user', message || null)
           : await exitMode(key, 'user', message || null)

package/locale/archive/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Mission archive",
+    "description": "Move finished missions and their linked records into the on-disk archive, so the live state file stops carrying their full history. When off: Finished missions stay in the live state file, so it keeps growing; merges and every other capability keep working, and nothing is deleted."
+  }
+}

package/locale/archive/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "任务线归档",
+    "description": "把已结束的任务线及其关联记录移入磁盘归档，让当前状态文件不再承载它们的完整历史。关闭后：已结束的任务线继续留在当前状态文件中，文件会持续增大；合并与其他能力继续工作，且不会删除任何内容。"
+  }
+}

package/locale/batch/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "Evidence batches",
-    "description": "Group missions into finite evidence batches and close them against required checks and receipts. When off: tower_batch is not registered; missions, gates and merges are unaffected."
+    "description": "Collect a finite set of missions into a batch and close it only when every required check and evidence receipt is present. When off: Batch tools and their checks are unavailable; missions, merges and every other capability keep working."
   }
 }

package/locale/batch/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "证据批次",
-    "description": "把 mission 归入有限证据批次，并按必需检查与回执关闭批次。关闭后：不再注册 tower_batch；mission、门禁与合并不受影响。"
+    "description": "把一组任务线收进一个批次，只有当所有必需检查与证据回执齐全时才允许关闭该批次（或结案）。关闭后：批次工具及其检查不可用；任务线、合并与其他能力继续工作。"
   }
 }

package/locale/board/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Mission board",
+    "description": "Write a plain-text board file (MISSIONS.md) beside the state so a person can read the mission list without calling a tool. When off: The board file is not written or refreshed, so an existing board goes stale; missions, merges and every other capability keep working."
+  }
+}

package/locale/board/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "任务线看板",
+    "description": "在状态文件旁写入纯文本看板文件（MISSIONS.md），让人无需调用工具就能阅读任务线列表。关闭后：不再写入或刷新看板文件，已有看板会过期；任务线、合并与其他能力继续工作。"
+  }
+}

package/locale/en.json

@@ -1,53 +1,68 @@
 {
   "meta": {
     "title": "Tower",
-    "description": "Mission planning, isolated worktrees, worker/reviewer agents, and review-gated merges."
+    "description": "Plan and track missions, isolate each one in its own worktree, hand the work to worker and reviewer agents, and merge after review when review before merging is required. Off equals uninstalling Tower: no tools, presets or skills remain."
   },
   "components": {
     "tower": {
       "title": "Tower host",
-      "summary": "Mission planning, worktree isolation, the mode guard, the health contract and the recovery escape.",
-      "disables": "Turns off the mandatory host; this equals uninstalling Tower: no tools, presets or skills remain."
+      "summary": "The always-on core: mission planning and state, worktree isolation, Tower mode, the environment health check, and how to recover a stuck lock.",
+      "disables": "Off equals uninstalling Tower: no tools, presets or skills remain."
     },
     "tower-skills": {
       "title": "Tower skills",
-      "summary": "Playbooks for worker/reviewer agents and recovery after a blocked merge.",
-      "disables": "The three Tower skills leave the catalog; the worker/reviewer protocol sections and every mission tool keep working."
+      "summary": "Step-by-step playbooks for worker and reviewer agents, and a guide for getting unstuck when a merge is blocked.",
+      "disables": "The three Tower skills leave the catalog; the worker and reviewer protocol sections and every mission tool keep working."
     },
     "tower-batch": {
       "title": "Evidence batches",
-      "summary": "Group missions into finite evidence batches and close them against required checks and receipts.",
-      "disables": "tower_batch is not registered; missions, gates and merges are unaffected."
+      "summary": "Collect a finite set of missions into a batch and close it only when every required check and evidence receipt is present.",
+      "disables": "Batch tools and their checks are unavailable; missions, merges and every other capability keep working."
     },
     "tower-import": {
       "title": "Legacy import",
-      "summary": "Import a Tower Codex legacy state file and audit its snapshot-to-mission mapping.",
-      "disables": "tower_import_legacy and tower_legacy_map are not registered; new state is unaffected."
+      "summary": "Read a legacy Tower Codex state file (the earlier Tower state format) and show how each old snapshot maps to a mission.",
+      "disables": "The import tools are unavailable; current state and every other capability keep working."
     },
     "tower-leases": {
-      "title": "Advisory leases",
-      "summary": "Coordinate heavy per-repository work with advisory resource leases.",
-      "disables": "tower_resource is not registered; nothing else depends on a lease."
+      "title": "Lease coordination",
+      "summary": "Coordination only: lets one agent claim a named piece of shared work (a lease) so two agents do not start the same job. A lease is a note other agents can read; it never blocks work by itself.",
+      "disables": "Lease tools are unavailable. A worker configured to require a lease cannot start: planning and entering Tower mode are refused with an explanation until that setting is cleared or this row is re-enabled. Everything else keeps working."
     },
     "tower-tests": {
-      "title": "Test discovery",
-      "summary": "Run the worktree's declared test discovery and record a receipt for the mission tip.",
-      "disables": "tower_test is not registered and no receipt can be recorded; with gates.requireTests:true planning/mode entry is rejected with an explanation."
+      "title": "Test evidence",
+      "summary": "Run the project's declared test command in a mission's worktree and record the result as evidence for merging.",
+      "disables": "No test command can be run and no evidence can be recorded. If tests are already required before merging, planning and entering Tower mode are refused with an explanation, and merges stay blocked for the missing test evidence until that requirement is cleared; nothing else changes."
+    },
+    "tower-board": {
+      "title": "Mission board",
+      "summary": "Write a plain-text board file (MISSIONS.md) beside the state so a person can read the mission list without calling a tool.",
+      "disables": "The board file is not written or refreshed, so an existing board goes stale; missions, merges and every other capability keep working."
+    },
+    "tower-archive": {
+      "title": "Mission archive",
+      "summary": "Move finished missions and their linked records into the on-disk archive, so the live state file stops carrying their full history.",
+      "disables": "Finished missions stay in the live state file, so it keeps growing; merges and every other capability keep working, and nothing is deleted."
     },
     "tower-hmr": {
-      "title": "Dev hot reload",
-      "summary": "Register tower_reload and /tower reload for linked-profile development.",
-      "disables": "tower_reload and /tower reload are unavailable; a non-HMR profile behaves exactly as before. Shipped off."
+      "title": "Development hot reload",
+      "summary": "Development-only: reloads Tower in a linked development setup after a code change, so you do not have to restart DSH.",
+      "disables": "Nothing reloads automatically; restart the development setup by hand instead. A normal installation is unaffected, because this is developer tooling that ships off on purpose."
     },
     "preset-tower-worker": {
       "title": "Tower Worker preset",
-      "summary": "Declares the Tower Worker preset: the mission protocol plus the filesystem, shell and Tower tools a worker runs inside its assigned worktree.",
-      "disables": "tower_spawn cannot start a worker without it."
+      "summary": "The mandatory Tower Worker preset: the mission protocol plus the filesystem, shell and Tower tools a worker uses inside its own worktree.",
+      "disables": "Tower cannot plan missions, enter Tower mode, or start a worker without it."
     },
     "preset-tower-reviewer": {
       "title": "Tower Reviewer preset",
-      "summary": "Declares the Tower Reviewer preset: read-only independent review that inspects the mission diff, verifies scope and acceptance, and returns a verdict.",
-      "disables": "The reviewer cannot be dispatched. Supported while review.requireReview is false; with the gate on planning/mode entry is locked with an explanatory error."
+      "summary": "The independent Tower Reviewer preset: a read-only reviewer agent that reads the mission diff, checks scope and acceptance, and returns a verdict. Usable while review before merging is optional; a precondition for merging once review before merging is required.",
+      "disables": "The reviewer cannot be started. That is supported while review before merging is optional; once review before merging is required, planning and entering Tower mode are refused with an explanation."
+    },
+    "tower-ui": {
+      "title": "Tower UI",
+      "summary": "Adds Tower cards for tool results, a compact status summary above the message box, and a short status strip, in the web client.",
+      "disables": "The web interface piece is not loaded: no Tower cards, status summary or status strip. The Tower host, missions, state and the board keep working."
     }
   }
 }

package/locale/hmr/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
-    "title": "Dev hot reload",
-    "description": "Register tower_reload and /tower reload for linked-profile development. When off: tower_reload and /tower reload are unavailable; a non-HMR profile behaves exactly as before. Shipped off."
+    "title": "Development hot reload",
+    "description": "Development-only: reloads Tower in a linked development setup after a code change, so you do not have to restart DSH. When off: Nothing reloads automatically; restart the development setup by hand instead. A normal installation is unaffected, because this is developer tooling that ships off on purpose."
   }
 }

package/locale/hmr/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "开发热重载",
-    "description": "为联动开发 profile 注册 tower_reload 与 /tower reload。关闭后：tower_reload 与 /tower reload 不可用；非 HMR profile 的行为与之前完全相同。随包默认关闭。"
+    "description": "仅限开发人员：改动代码后，在联动开发配置中重新加载 Tower，无需重启 DSH。关闭后：不会自动重新加载，需要在开发配置中手动重启。普通安装不受影响：它是开发人员专用工具，默认关闭是有意为之。"
   }
 }

package/locale/import/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "Legacy import",
-    "description": "Import a Tower Codex legacy state file and audit its snapshot-to-mission mapping. When off: tower_import_legacy and tower_legacy_map are not registered; new state is unaffected."
+    "description": "Read a legacy Tower Codex state file (the earlier Tower state format) and show how each old snapshot maps to a mission. When off: The import tools are unavailable; current state and every other capability keep working."
   }
 }

package/locale/import/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "旧版导入",
-    "description": "导入 Tower Codex 旧状态文件，并审计快照到 mission 的映射。关闭后：不再注册 tower_import_legacy 与 tower_legacy_map；新状态不受影响。"
+    "description": "读取旧版 Tower Codex 状态文件（Tower 早期的状态格式），并显示每个旧快照对应哪一条任务线。关闭后：导入工具不可用；当前状态与其他能力继续工作。"
   }
 }

package/locale/leases/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
-    "title": "Advisory leases",
-    "description": "Coordinate heavy per-repository work with advisory resource leases. When off: tower_resource is not registered; nothing else depends on a lease."
+    "title": "Lease coordination",
+    "description": "Coordination only: lets one agent claim a named piece of shared work (a lease) so two agents do not start the same job. A lease is a note other agents can read; it never blocks work by itself. When off: Lease tools are unavailable. A worker configured to require a lease cannot start: planning and entering Tower mode are refused with an explanation until that setting is cleared or this row is re-enabled. Everything else keeps working."
   }
 }

package/locale/leases/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
-    "title": "咨询式租约",
-    "description": "用咨询式资源租约协调每个仓库中的重型工作。关闭后：不再注册 tower_resource；其他能力不依赖租约。"
+    "title": "租约协调",
+    "description": "只做协调：让一个代理认领某一具体工作（称为租约），避免两个代理同时开工。租约只是给其他代理看的说明，本身不会阻塞任何工作。关闭后：租约工具不可用。若某个执行代理被配置为必须先持有租约，它将无法启动：规划或进入 Tower 模式会被拒绝并给出解释，直到清除该设置或重新启用这一项。其他工作照常进行。"
   }
 }

package/locale/preset-reviewer/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "Tower Reviewer preset",
-    "description": "Declares the Tower Reviewer preset: read-only independent review that inspects the mission diff, verifies scope and acceptance, and returns a verdict. When off: The reviewer cannot be dispatched. Supported while review.requireReview is false; with the gate on planning/mode entry is locked with an explanatory error."
+    "description": "The independent Tower Reviewer preset: a read-only reviewer agent that reads the mission diff, checks scope and acceptance, and returns a verdict. Usable while review before merging is optional; a precondition for merging once review before merging is required. When off: The reviewer cannot be started. That is supported while review before merging is optional; once review before merging is required, planning and entering Tower mode are refused with an explanation."
   }
 }

package/locale/preset-reviewer/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "Tower Reviewer 预设",
-    "description": "声明 Tower Reviewer 预设：只读独立审查，检视任务差异、核对范围与验收，并返回结论。关闭后：无法派发审查代理。review.requireReview 为 false 时允许关闭；强制审查开启时规划/进入模式会被锁定并给出解释。"
+    "description": "独立的 Tower Reviewer 审查代理预设：一个只读代理，阅读任务线差异、核对范围与验收，并给出结论。在合并前审查仍为可选时可以使用；一旦把合并前审查设为必须，它就是合并的前置条件。关闭后：无法启动审查代理。在合并前审查仍为可选时，允许关闭这一项；一旦要求合并前必须审查，规划或进入 Tower 模式会被拒绝并给出解释。"
   }
 }

package/locale/preset-worker/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "Tower Worker preset",
-    "description": "Declares the Tower Worker preset: the mission protocol plus the filesystem, shell and Tower tools a worker runs inside its assigned worktree. Mandatory dependency, not a switch: tower_spawn cannot start a worker without it."
+    "description": "The mandatory Tower Worker preset: the mission protocol plus the filesystem, shell and Tower tools a worker uses inside its own worktree. Mandatory dependency, not a switch: Tower cannot plan missions, enter Tower mode, or start a worker without it."
   }
 }

package/locale/preset-worker/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "Tower Worker 预设",
-    "description": "声明 Tower Worker 预设：任务协议，以及执行代理在其工作树内使用的文件系统、终端与 Tower 工具。强制依赖，不是开关：缺少它 tower_spawn 无法启动执行代理。"
+    "description": "必需的 Tower Worker 执行代理预设：任务线协议，以及执行代理在其独立工作树中使用的文件系统、终端与 Tower 工具。强制依赖，不是开关：缺少它，Tower 无法规划任务线、进入 Tower 模式或启动执行代理。"
   }
 }

package/locale/skills/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "Tower skills",
-    "description": "Playbooks for worker/reviewer agents and recovery after a blocked merge. When off: The three Tower skills leave the catalog; the worker/reviewer protocol sections and every mission tool keep working."
+    "description": "Step-by-step playbooks for worker and reviewer agents, and a guide for getting unstuck when a merge is blocked. When off: The three Tower skills leave the catalog; the worker and reviewer protocol sections and every mission tool keep working."
   }
 }

package/locale/skills/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "Tower 技能包",
-    "description": "执行与审查代理的操作手册，以及失败后的恢复指南。关闭后：三个 Tower 技能从目录中移除；执行/审查协议段落与所有 mission 工具继续工作。"
+    "description": "执行代理与审查代理的分步操作手册，以及合并受阻时如何脱困的指南。关闭后：三个 Tower 技能从目录中移除；执行代理与审查代理的协议段落与所有任务线工具继续工作。"
   }
 }

package/locale/tests/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
-    "title": "Test discovery",
-    "description": "Run the worktree's declared test discovery and record a receipt for the mission tip. When off: tower_test is not registered and no receipt can be recorded; with gates.requireTests:true planning/mode entry is rejected with an explanation."
+    "title": "Test evidence",
+    "description": "Run the project's declared test command in a mission's worktree and record the result as evidence for merging. When off: No test command can be run and no evidence can be recorded. If tests are already required before merging, planning and entering Tower mode are refused with an explanation, and merges stay blocked for the missing test evidence until that requirement is cleared; nothing else changes."
   }
 }

package/locale/tests/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
-    "title": "测试发现",
-    "description": "运行 worktree 声明的测试发现，并为 mission tip 记录回执。关闭后：不再注册 tower_test，也无法记录回执；若 gates.requireTests:true，规划/进入模式会以解释性错误拒绝。"
+    "title": "测试证据",
+    "description": "在任务线的工作树中运行项目声明的测试命令，并把结果记录为合并证据。关闭后：无法运行测试命令，也无法记录证据。若已把测试设为合并前必须通过，规划或进入 Tower 模式会被拒绝并给出解释，缺少测试证据的合并也会持续受阻，直到清除该要求；其他一切照常。"
   }
 }

package/locale/zh.json

@@ -1,53 +1,68 @@
 {
   "meta": {
     "title": "Tower",
-    "description": "多代理任务规划、隔离工作树与审查门禁合并。"
+    "description": "规划并跟踪任务线，让每条任务线在独立工作树中完成，交给执行代理与审查代理，并且在把合并前审查设为必须时，审查通过后再合并。关闭这一项等同于卸载 Tower：不再保留任何工具、预设或技能。"
   },
   "components": {
     "tower": {
       "title": "Tower 控制塔",
-      "summary": "任务规划、隔离工作树、模式守卫、健康契约与恢复逃生口。",
-      "disables": "关闭强制主组件等同于卸载 Tower：不再保留任何工具、preset 或技能。"
+      "summary": "常驻核心：任务线规划与状态、工作树隔离、Tower 模式、环境健康检查，以及卡住的锁如何恢复。",
+      "disables": "关闭这一项等同于卸载 Tower：不再保留任何工具、预设或技能。"
     },
     "tower-skills": {
       "title": "Tower 技能包",
-      "summary": "执行与审查代理的操作手册，以及失败后的恢复指南。",
-      "disables": "三个 Tower 技能从目录中移除；执行/审查协议段落与所有 mission 工具继续工作。"
+      "summary": "执行代理与审查代理的分步操作手册，以及合并受阻时如何脱困的指南。",
+      "disables": "三个 Tower 技能从目录中移除；执行代理与审查代理的协议段落与所有任务线工具继续工作。"
     },
     "tower-batch": {
       "title": "证据批次",
-      "summary": "把 mission 归入有限证据批次，并按必需检查与回执关闭批次。",
-      "disables": "不再注册 tower_batch；mission、门禁与合并不受影响。"
+      "summary": "把一组任务线收进一个批次，只有当所有必需检查与证据回执齐全时才允许关闭该批次（或结案）。",
+      "disables": "批次工具及其检查不可用；任务线、合并与其他能力继续工作。"
     },
     "tower-import": {
       "title": "旧版导入",
-      "summary": "导入 Tower Codex 旧状态文件，并审计快照到 mission 的映射。",
-      "disables": "不再注册 tower_import_legacy 与 tower_legacy_map；新状态不受影响。"
+      "summary": "读取旧版 Tower Codex 状态文件（Tower 早期的状态格式），并显示每个旧快照对应哪一条任务线。",
+      "disables": "导入工具不可用；当前状态与其他能力继续工作。"
     },
     "tower-leases": {
-      "title": "咨询式租约",
-      "summary": "用咨询式资源租约协调每个仓库中的重型工作。",
-      "disables": "不再注册 tower_resource；其他能力不依赖租约。"
+      "title": "租约协调",
+      "summary": "只做协调：让一个代理认领某一具体工作（称为租约），避免两个代理同时开工。租约只是给其他代理看的说明，本身不会阻塞任何工作。",
+      "disables": "租约工具不可用。若某个执行代理被配置为必须先持有租约，它将无法启动：规划或进入 Tower 模式会被拒绝并给出解释，直到清除该设置或重新启用这一项。其他工作照常进行。"
     },
     "tower-tests": {
-      "title": "测试发现",
-      "summary": "运行 worktree 声明的测试发现，并为 mission tip 记录回执。",
-      "disables": "不再注册 tower_test，也无法记录回执；若 gates.requireTests:true，规划/进入模式会以解释性错误拒绝。"
+      "title": "测试证据",
+      "summary": "在任务线的工作树中运行项目声明的测试命令，并把结果记录为合并证据。",
+      "disables": "无法运行测试命令，也无法记录证据。若已把测试设为合并前必须通过，规划或进入 Tower 模式会被拒绝并给出解释，缺少测试证据的合并也会持续受阻，直到清除该要求；其他一切照常。"
+    },
+    "tower-board": {
+      "title": "任务线看板",
+      "summary": "在状态文件旁写入纯文本看板文件（MISSIONS.md），让人无需调用工具就能阅读任务线列表。",
+      "disables": "不再写入或刷新看板文件，已有看板会过期；任务线、合并与其他能力继续工作。"
+    },
+    "tower-archive": {
+      "title": "任务线归档",
+      "summary": "把已结束的任务线及其关联记录移入磁盘归档，让当前状态文件不再承载它们的完整历史。",
+      "disables": "已结束的任务线继续留在当前状态文件中，文件会持续增大；合并与其他能力继续工作，且不会删除任何内容。"
     },
     "tower-hmr": {
       "title": "开发热重载",
-      "summary": "为联动开发 profile 注册 tower_reload 与 /tower reload。",
-      "disables": "tower_reload 与 /tower reload 不可用；非 HMR profile 的行为与之前完全相同。随包默认关闭。"
+      "summary": "仅限开发人员：改动代码后，在联动开发配置中重新加载 Tower，无需重启 DSH。",
+      "disables": "不会自动重新加载，需要在开发配置中手动重启。普通安装不受影响：它是开发人员专用工具，默认关闭是有意为之。"
     },
     "preset-tower-worker": {
       "title": "Tower Worker 预设",
-      "summary": "声明 Tower Worker 预设：任务协议，以及执行代理在其工作树内使用的文件系统、终端与 Tower 工具。",
-      "disables": "缺少它 tower_spawn 无法启动执行代理。"
+      "summary": "必需的 Tower Worker 执行代理预设：任务线协议，以及执行代理在其独立工作树中使用的文件系统、终端与 Tower 工具。",
+      "disables": "缺少它，Tower 无法规划任务线、进入 Tower 模式或启动执行代理。"
     },
     "preset-tower-reviewer": {
       "title": "Tower Reviewer 预设",
-      "summary": "声明 Tower Reviewer 预设：只读独立审查，检视任务差异、核对范围与验收，并返回结论。",
-      "disables": "无法派发审查代理。review.requireReview 为 false 时允许关闭；强制审查开启时规划/进入模式会被锁定并给出解释。"
+      "summary": "独立的 Tower Reviewer 审查代理预设：一个只读代理，阅读任务线差异、核对范围与验收，并给出结论。在合并前审查仍为可选时可以使用；一旦把合并前审查设为必须，它就是合并的前置条件。",
+      "disables": "无法启动审查代理。在合并前审查仍为可选时，允许关闭这一项；一旦要求合并前必须审查，规划或进入 Tower 模式会被拒绝并给出解释。"
+    },
+    "tower-ui": {
+      "title": "Tower 界面",
+      "summary": "在 Web 客户端中显示 Tower 工具结果卡片、输入框上方的简要状态摘要，以及简短的状态提示条。",
+      "disables": "界面插件不再加载，不再有 Tower 卡片、状态摘要或提示条。Tower 核心、任务线、状态与看板继续工作。"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-tower",
-  "version": "2.4.2",
+  "version": "2.5.0",
   "type": "module",
   "description": "DSH-native Tower: mission planning, worktree isolation, review-gated merges, and a human-owned Tower mode.",
   "license": "MIT",
@@ -35,6 +35,8 @@
     "./import": "./host/capability-import.js",
     "./leases": "./host/capability-leases.js",
     "./tests": "./host/capability-tests.js",
+    "./board": "./host/capability-board.js",
+    "./archive": "./host/capability-archive.js",
     "./hmr": "./host/capability-hmr.js",
     "./preset-worker": "./host/preset-worker.js",
     "./preset-reviewer": "./host/preset-reviewer.js",
@@ -43,6 +45,8 @@
     "./import/locale/*.json": "./locale/import/*.json",
     "./leases/locale/*.json": "./locale/leases/*.json",
     "./tests/locale/*.json": "./locale/tests/*.json",
+    "./board/locale/*.json": "./locale/board/*.json",
+    "./archive/locale/*.json": "./locale/archive/*.json",
     "./hmr/locale/*.json": "./locale/hmr/*.json",
     "./preset-worker/locale/*.json": "./locale/preset-worker/*.json",
     "./preset-reviewer/locale/*.json": "./locale/preset-reviewer/*.json",
@@ -74,6 +78,7 @@
     "CONTRIBUTING.md",
     "SECURITY.md",
     "PRINCIPLES.md",
+    "GLOSSARY.md",
     "docs/",
     "ui-bundle/",
     "ports/*.js"
@@ -85,12 +90,15 @@
   },
   "scripts": {
     "test": "node --test tests/*.test.mjs",
+    "test:property": "node --test tests/property/*.prop.mjs",
+    "test:property:long": "node --env-file=tests/property/tiers/long.env --test tests/property/*.prop.mjs",
     "test:watch": "node --test --watch tests/*.test.mjs",
     "test:coverage": "node --test --experimental-test-coverage tests/*.test.mjs",
     "test:live": "node tests/live/run.cjs",
     "smoke:mount": "node scripts/mount-smoke.mjs",
     "smoke:fixtures": "node scripts/mount-smoke/fixtures.mjs",
     "release:check": "node scripts/release-check.mjs",
+    "release:notes": "node scripts/release-notes.mjs",
     "audit:issues": "node scripts/issue-audit.mjs",
     "audit:regressions": "node scripts/regression-audit.mjs",
     "surface:check": "node scripts/surface-baseline.mjs",
@@ -118,7 +126,7 @@
     "types:coverage": "node scripts/types-coverage.mjs",
     "types:strict:check": "node scripts/types-strict.mjs",
     "types:strict:write": "node scripts/types-strict.mjs --write",
-    "check": "npm test && npm run docs:check && npm run docs:check:philosophy && npm run docs:check:generated && npm run docs:check:generated:tools && npm run docs:check:generated:config && npm run docs:check:generated:events && npm run docs:check:generated:types && npm run docs:check:generated:components && npm run docs:check:generated:locale && npm run docs:check:components && npm run surface:check && npm run pack:check && npm run architecture:check && npm run types:coverage && npm run types:strict:check && npm run types:check && npm run domain:check",
+    "check": "npm test && npm run test:property && npm run docs:check && npm run docs:check:philosophy && npm run docs:check:generated && npm run docs:check:generated:tools && npm run docs:check:generated:config && npm run docs:check:generated:events && npm run docs:check:generated:types && npm run docs:check:generated:components && npm run docs:check:generated:locale && npm run docs:check:components && npm run surface:check && npm run pack:check && npm run architecture:check && npm run types:coverage && npm run types:strict:check && npm run types:check && npm run domain:check",
     "domain:metrics": "node scripts/domain-metrics.mjs",
     "domain:check": "node scripts/domain-metrics.mjs --check"
   },
@@ -128,6 +136,7 @@
   },
   "devDependencies": {
     "@types/node": "^22.20.5",
+    "fast-check": "^4.10.2",
     "typescript": "~5.9.3"
   }
 }