@apollo-music/dsh-bundle-school-policy-dual-runtime

Host Bundle @apollo-music/[email protected] for the Apollo school-policy dual Agent. It registers:

• school-policy-internal-sdk, an out-of-process DSH SDK provider backed by @apollo-music/[email protected];
• @apollo-music/[email protected], routed only to the school-policy-expert-wecom Preset.

This README describes Bundle 0.3.2. Deployments must pin @apollo-music/[email protected] from the authorised npm registry and verify the clean Profile's exact package versions, dependency closure and artifact hashes. Workspace builds and local tarballs are development inputs, not registry-install evidence; publication and clean-reinstall status belongs in the external release audit.

The Bundle does not itself register a model-visible internal tool. The user-facing business-contact Preset mounts exactly one @deepseek-ai/dsh-tool-subagent consumer named school_policy_internal; it currently serves the employee WeCom bot and can later serve a student-facing WeChat customer-service bot. The Internal Agent is never exposed directly. Terminology is Agent-scoped in that Preset through fail-closed @apollo-music/[email protected]; that package fixes the online Apollo authority and exposes no URL override or offline fallback.

Independent runtime home

Run this composition with a dedicated absolute DSH_HOME; do not install it into the existing shared Apollo runtime home. Every internal mutable root is derived beneath:

$DSH_HOME/school-policy-internal/
├── sessions/
├── archive-cache/
├── file-reader-venv/
├── feedback/
│   └── events.jsonl
├── render-requirements/
│   ├── current.json
│   ├── published/
│   └── revisions.jsonl
├── published-business-knowledge/
│   └── current/
│       ├── manifest.json
│       └── records.jsonl
└── wecom/
    ├── workspace/
    ├── status.json
    └── outbox.json

The patch intentionally fails configuration evaluation when DSH_HOME is missing. Bridge status and outbox variable names are private to this Bundle and are assigned to the paths above before Bridge initialization. The outbox contains user-visible answers and must remain on a protected persistent volume.

Runtime contract

Each school_policy_internal call starts a fresh apollo-school-policy-internal-jsonrpc process and child Session. Requests must be complete, standalone query, query_historical_reference, submit_feedback, read_pdf_requirements, or update_pdf_requirements tasks. The internal package owns School Expert 0.3.1 and embeds the private school-policy-core model tools and maintenance CLI at build time; it has no private registry dependency. The Host Bundle does not start School Expert or Analyzer directly. The external Preset always exposes only school_policy_internal; it does not mount the generic skill tool or any direct policy-storage tool. Policy generation remains an operator CLI, while the two bounded business changes are performed inside the Internal Agent by apollo_policy_feedback_apply and apollo_pdf_requirements_apply.

The private internal tool surface contains ten tools: school status, official links, programme list/search, one-programme detail, professor list/search, one-professor detail, narrow historical-reference lookup, current PDF-requirements read, authorized PDF-requirements apply, and authorized policy-feedback apply. Eight are read-only. Deployment/channel access control is the trust boundary; a user who can access this governed Agent needs no additional authorization flag, confirmation, or approval. An explicit traceable user instruction is directly usable by the appropriate apply surface, which validates its complete bounded input and atomically produces either one applied event with the new release/current or no state change. The Agents do not add complex RBAC or trust a caller's self-asserted role. There is no pending→approved/rejected second-approval chain, and neither surface accepts a caller-selected path, SQL statement, or custom DSL. The external Preset still sees only the single school_policy_internal consumer.

The verified policy release uses contract v2. Each school has programmes/, professors/, and references/; every in-scope/review music programme and every confirmed professor or evidence-backed professor-title review candidate has one detailed Markdown file plus a machine index record. Programme-professor edges are explicit, bidirectional, and school-scoped.

Professor identity and music scope are independent. An official faculty profile, personnel notice, directory, department, or teaching record may admit a review candidate only when it is explicitly attributable to that person; an unrelated professor event or an ambiguous Prof. in concatenated directory text does not. A structured role_type=professor is required for identity confirmed. A current staff listing or programme relationship is never evidence of current intake.

Programme dates retain the source value and separate format metadata. Full dates render as ISO YYYY-MM-DD; yearless recurring dates use ISO 8601 month-day --MM-DD with recurring single/range/set precision. Time and timezone remain separate, and a parser anchor must never appear as a policy year.

School Expert and the internal package fail closed before query when the release contract is old, a declared path is absolute or escapes its school tree, an object is missing, a school scope is inconsistent, or any content/tree hash differs. There is no v1 compatibility fallback. The v2 compatibility set is Analyzer 0.3.1, School Expert 0.3.1, Internal Agent 0.3.2, and this Bundle 0.3.2.

The sealed v2 baseline is release 20260823T114755Z-29e4da10a42a: 33/33 schools, 1,407 programme files, 2,360 professor files, 2,755 relations/5,510 bidirectional endpoints, 54,071 evidence records, 13 input audit items, and 4,229 declared content files totaling 142,978,263 content bytes. Full-tree QA reports 0 errors and 0 warnings. Manifest SHA-256 is 29e4da10a42a0d0e1e24488597e8bacad0d76de25a6e6999a586bd2b9a139f12; archive SHA-256 is 8bf5c15636b981619ce5ed314d7a9d3ba2c338e9352eeb043f943cfeafd2ea27. The release has been sealed, published to stable, downloaded, and verified; the previous immutable release remains retained.

Internal/Bundle 0.3.0 introduced the operator-only student delivery generator and expanded the private tool surface to ten tools while preserving one external school_policy_internal gateway. Version 0.3.1 keeps that feature contract, updates the final Terms 0.1.5 title evidence and dependency chain, and removes the external generic skill tool so the model-visible surface is exactly one gateway. Version 0.3.2 adopts the Cordis 4.0.2 vendor cohort and its Node 24 loader compatibility fix without changing the model-visible contract. Only a clean exact-version registry installation may be described as registry deployment evidence.

Version 0.3.2 is fixed to DSH 0.1.1-rc.2, School Expert 0.3.1, release contract v2, and the configured dashscope-intl/qwen3.8-max route with no fallback. Public official programme titles are authorised for the separate DSH title-translation Agent; this does not authorise full-policy, student or customer data, and production WeCom remains a separate authorised check.

The child route is fixed to:

• provider: dashscope-intl;
• model: qwen3.8-max;
• API: openai-completions;
• context window: 262144;
• max output tokens: 32768.

No fallback provider or model is configured. Missing model credentials fail the child run.

Required deployment values:

• DSH_HOME: dedicated absolute runtime home;
• APOLLO_KB_ROOT: absolute verified sealed School Expert release;
• APOLLO_SCHOOL_POLICY_MODEL_API_KEY or DASHSCOPE_INTL_API_KEY;
• APOLLO_TERMINOLOGY_READ_API_KEY;
• WECOM_AIBOT_BOT_ID and WECOM_AIBOT_SECRET when APOLLO_WECOM_ENABLED=1;
• APOLLO_SCHOOL_POLICY_WORKSPACE: optional external Session workspace.

The provider forwards the internal package's exact APOLLO_SCHOOL_POLICY_* contract. Its session root, archive cache, append-only feedback file, published PDF-requirements registry, and optional sealed business-knowledge snapshot all resolve beneath the dedicated home. The child FileReader workspace is fixed to school-policy-internal/archive-cache, so materialized PDF/Office evidence is readable without exposing WeCom state, feedback, requirements revisions, historical records, or the parent Session workspace. Bootstrap creates file-reader-venv, initializes the versioned/hash-bound PDF specification, optionally installs one authorized immutable business-knowledge snapshot, and installs the exact parser lock. The verifier rehashes the governed documents, reverse-binds a non-baseline active PDF requirement to its unique render_requirements.revision.applied event, verifies the Internal package's fixed artifact manifest and critical dist bytes, and imports the PDF/Office dependencies rather than accepting a version-only or mount-only green result. APOLLO_KB_ROOT remains the sealed-release input required by the internal package.

Install into a dedicated Profile

部署 Profile 应从授权 registry 精确安装 @apollo-music/[email protected]。开发与可复现制品检查也可使用本地 tarball，但本地 tarball 不构成 registry 复装证据：

npm pack ./packages/bundles/school-policy-dual-runtime \
  --pack-destination output/release-candidates-20260831/dual-runtime-0.3.2
node scripts/bootstrap-school-policy-dual-runtime.mjs \
  --bundle output/release-candidates-20260831/dual-runtime-0.3.2/apollo-music-dsh-bundle-school-policy-dual-runtime-0.3.2.tgz

registry 部署必须在全新专属 Profile 中安装精确的 @apollo-music/[email protected] 并重跑完整 verifier。

Copy agents/school-policy-expert-wecom to:

$DSH_HOME/.agent-presets/school-policy-expert-wecom

Profile 使用 autoInstallPeers: false，Bundle 因此显式锁定 rc.2 SDK provider 所需的完整依赖闭包。Native build policy must allow the existing rc.2 subprocess dependencies (@deepseek-ai/dsh-subprocess-local, koffi, and node-pty).

For live official-page verification behind the internal boundary, install the existing @apollo-music/dsh-bundle-playwright-browser in the same Host Profile and restrict it to the Internal Agent's bounded official-origin flow. The user-facing Preset still exposes only school_policy_internal; this Bundle does not create another Browser process or Web UI.

Verification

npm test --prefix packages/bundles/school-policy-dual-runtime
DSH_HOME=/absolute/school-policy-dual-home dsh --profile school-policy-dual --dump-config

The dumped composition must show one school-policy-internal-sdk provider fixed to dashscope-intl/qwen3.8-max, one Bridge row targeting school-policy-expert-wecom, and only one internal subagent consumer in that Preset. Also verify Bridge status/outbox and every child state directory resolve below the dedicated DSH_HOME/school-policy-internal root. A valid composition is necessary but does not prove a policy release: independently verify release v2 hashes and one real programme/professor lookup before recording completion.

Title translation, including smoke verification, must use the live read-only Apollo terminology service at https://apollomusic-poc1.fde0.com/kb/terminology with APOLLO_TERMINOLOGY_READ_API_KEY. A local URL, no-network placeholder, or offline fallback is not a valid translation verification path. WeCom may remain disabled while validating the composition and the separately authorised public-title translation flow; do not describe that as a full production WeCom or school-policy Qwen test.