@askdkc/dsh-cli 0.11.3

package/presets/liangshen/tool-bootstrap.mjs

@@ -0,0 +1,300 @@
+/**
+ * Anchored tool bootstrap — keep the FIRST model request on the Minimal
+ * preset's REAL tool schema (persistent `bash` + `str_replace_editor`), free
+ * of auto-injected workspace/skill context, then expose the complete assembled
+ * catalog once the session has produced its first durable tool call.
+ *
+ * The phase is derived from durable session events, so resume and reload
+ * preserve it. This preset configures `promoteOn: 'tool-call'`: text-only
+ * replies keep the bootstrap catalog, while the request after the first tool
+ * call sees every assembled tool at once. Other promotion modes remain
+ * supported for derived presets.
+ *
+ * First-request conditions established by the reproduction work (issues #6
+ * and #11, 2026-08-15):
+ *
+ *  1. Tool schema. The API-visible first-request catalog decides whether the
+ *     session anchors on the Minimal trajectory. At the adapter-default
+ *     maxTokens (256000 on the official endpoint) the Minimal tool pair —
+ *     persistent `bash` + `str_replace_editor` — anchored 5/5 runs with zero
+ *     `let me` first-lines, while every standard-family schema (pwsh/read,
+ *     pwsh only, sandboxed bash/read) fell into standard-like behavior
+ *     (11/11). Bootstrap therefore exposes exactly the Minimal pair, not
+ *     Standard's `pwsh`/`read`.
+ *
+ *  2. Output budget. On the official endpoint the first request's `max_tokens`
+ *     also dominated the trajectory anchor at 1024 (`We need` style in 26/32
+ *     runs against 0/5 at 256000, independent of tool descriptions). The
+ *     Minimal tool schema, however, anchors at 256000 WITHOUT any cap, and the
+ *     cap's delivery depends on the profile package's `prepareCall` behavior
+ *     (it reaches the request on the 0.1.0-rc.5 source checkout; a prebuilt
+ *     rc.6-reporting profile package observed in issue #11 overwrote it with
+ *     `adapterDefaults.maxTokens`). `bootstrapMaxTokens` is therefore OPT-IN:
+ *     leave it unset to run the Minimal schema at the adapter default, or set
+ *     it to cap the first request. When set, the cap is stripped after
+ *     promotion — the next request's seed proposal carries the previous
+ *     header's maxTokens forward, so the release must be explicit.
+ *
+ *  3. Injected reminders. dsh-agent-instructions and dsh-tool-skill inject
+ *     workspace instructions (AGENTS.md) and the skill catalog into the first
+ *     step as user messages whenever such content exists. With the skill
+ *     catalog present the anchor did not reproduce at all (0/9); without it
+ *     the same request reproduces at ~81%. Both message kinds are therefore
+ *     stripped during bootstrap and allowed again after promotion. The
+ *     stripped set is configurable via `suppressedContextSources` (default
+ *     `['skill-catalog', 'agent-instructions']`); an explicitly empty array
+ *     disables the context filter while keeping the tool bootstrap. A
+ *     user-initiated skill gesture (`skill-invocation`) is NOT in the default
+ *     set: it is not an automatic injection, and stripping it would lose the
+ *     skill content once the gesture scrolls out of the per-step claim.
+ *
+ * POST-PROMOTION: return the complete assembled catalog without a resident or
+ * discovery phase. This matches the two-stage harness experiment: exact
+ * Minimal schemas first, then the full capability surface in one transition.
+ *
+ * COMPACTION (local addition): a compaction rewrites the whole surface, so the
+ * first post-compaction request is a "second first request". Promotion is
+ * epoch-aware (see compaction-epoch.mjs): after `compaction/end` the session
+ * falls back to the controlled phase. With this preset's omitted
+ * `compactionTools`, that surface is the exact bootstrap pair until a NEW
+ * durable tool call exists past the boundary.
+ *
+ * Robustness:
+ *  - Promotion decisions are memoized per session id for this process; the
+ *    durable event scan runs once per session per process, then O(1).
+ *  - `includeSubagents: true` applies the same anchor/promotion cycle to
+ *    delegated agents instead of giving them the full catalog immediately.
+ *  - A missing bootstrap tool degrades to the full catalog with a one-time
+ *    warning instead of throwing, so a composition drift can never brick
+ *    every request of a session.
+ *  - The pre-step context filter degrades to "keep everything" on failure:
+ *    a filter bug must never eat the user's context.
+ *  - Invalid config (bad tool lists, unknown `promoteOn`, malformed
+ *    `suppressedContextSources`, non-positive `bootstrapMaxTokens`) fails at
+ *    apply time, i.e. at preset mount, where it is visible and fixable.
+ */
+
+import { createEpochPromotion } from './compaction-epoch.mjs'
+
+/** Cordis plugin name used by loader diagnostics. */
+export const name = 'anchored-tool-bootstrap'
+
+/**
+ * Deliberately NO inject list: the listeners only touch services at event
+ * time. Applying without an inject — combined with this row being FIRST in
+ * agent.cordis.yml — registers the plugin before dsh-agent-instructions and
+ * dsh-tool-skill, and waterfall after-next transforms apply in reverse
+ * registration order, so the first-request strip below is the LAST transform.
+ * With an inject here those plugins register first and re-inject their
+ * messages after the strip. The pre-step listener additionally registers with
+ * `prepend: true` so the strip stays the outermost transform even against
+ * host-plane listeners and future row reordering.
+ */
+export const inject = []
+
+/** Durable session event types that count as a promotion signal per mode. */
+const PROMOTE_EVENTS = {
+  'tool-call': ['tool/call'],
+  'assistant-message': ['assistant/message'],
+  either: ['tool/call', 'assistant/message'],
+}
+
+/** Every config key this plugin accepts — anything else is a typo. */
+const ALLOWED_KEYS = new Set(['bootstrapTools', 'promoteOn', 'bootstrapMaxTokens', 'suppressedContextSources', 'compactionTools', 'includeSubagents'])
+
+/**
+ * Context sources stripped from the first request by default. Both are
+ * automatic `agent/pre-step` injections: the available-skills reminder
+ * (`skill-catalog`) and the AGENTS.md/CLAUDE.md workspace digest
+ * (`agent-instructions`). True Minimal mounts neither plugin.
+ */
+const DEFAULT_SUPPRESSED_SOURCES = ['skill-catalog', 'agent-instructions']
+
+/**
+ * The default first-request catalog: the OFFICIAL Minimal preset's exact tool
+ * pair — the persistent `bash` shell and `str_replace_editor`. Issue #11
+ * measured this schema anchoring 5/5 at the adapter-default maxTokens while
+ * every standard-family schema failed 11/11.
+ */
+const DEFAULT_BOOTSTRAP_TOOLS = ['bash', 'str_replace_editor']
+
+function stringList(value, field) {
+  if (!Array.isArray(value) || value.length === 0 || value.some((item) => typeof item !== 'string' || item.length === 0)) {
+    throw new TypeError(`${name}: ${field} must be a non-empty array of non-empty strings`)
+  }
+  return [...new Set(value)]
+}
+
+function stringListOrEmpty(value, field) {
+  if (value === undefined) return []
+  return stringList(value, field)
+}
+
+function parsePromoteOn(value) {
+  if (value === undefined || value === 'either') return PROMOTE_EVENTS.either
+  if (value === 'tool-call' || value === 'assistant-message') return PROMOTE_EVENTS[value]
+  throw new TypeError(`${name}: promoteOn must be one of "tool-call", "assistant-message", "either"; got ${JSON.stringify(value)}`)
+}
+
+/**
+ * Validate the suppressed context sources. Unlike the bootstrap tool lists,
+ * an explicitly empty array is meaningful: it disables the context filter
+ * while keeping the tool bootstrap.
+ */
+function sourceList(value, field, fallback) {
+  if (value === undefined) return new Set(fallback)
+  if (!Array.isArray(value) || value.some((item) => typeof item !== 'string' || item.length === 0)) {
+    throw new TypeError(`${name}: ${field} must be an array of non-empty strings`)
+  }
+  return new Set(value)
+}
+
+/**
+ * Validate the optional first-request output cap. `undefined` means NO cap:
+ * the Minimal tool schema anchors at the adapter-default maxTokens, and the
+ * cap's delivery is profile-package dependent (see the header note), so it is
+ * opt-in rather than the default.
+ */
+function optionalPositiveInt(value, field) {
+  if (value === undefined) return undefined
+  if (!Number.isSafeInteger(value) || value <= 0) {
+    throw new TypeError(`${name}: ${field} must be a positive safe integer`)
+  }
+  return value
+}
+
+function optionalBoolean(value, field) {
+  if (value === undefined) return false
+  if (typeof value !== 'boolean') throw new TypeError(`${name}: ${field} must be a boolean`)
+  return value
+}
+
+/** Register the per-session bootstrap filters. */
+export function apply(ctx, config) {
+  const source = config === undefined ? {} : config
+  if (typeof source !== 'object' || source === null || Array.isArray(source)) {
+    throw new TypeError(`${name}: config must be an object`)
+  }
+  const unknown = Object.keys(source).filter((key) => !ALLOWED_KEYS.has(key))
+  if (unknown.length > 0) {
+    throw new TypeError(
+      `${name}: unknown config key(s) ${unknown.join(', ')} — allowed keys: ${[...ALLOWED_KEYS].sort().join(', ')}`,
+    )
+  }
+  const bootstrapTools = stringList(source.bootstrapTools, 'bootstrapTools')
+  const promoteEvents = parsePromoteOn(source.promoteOn)
+  const bootstrapMaxTokens = optionalPositiveInt(source.bootstrapMaxTokens, 'bootstrapMaxTokens')
+  const includeSubagents = optionalBoolean(source.includeSubagents, 'includeSubagents')
+  const suppressedSources = sourceList(source.suppressedContextSources, 'suppressedContextSources', DEFAULT_SUPPRESSED_SOURCES)
+  // Core work set exposed after a compaction, before re-promotion. Empty
+  // means "no compaction recovery catalog": the session stays on the
+  // bootstrap pair until a new promotion signal.
+  const compactionTools = stringListOrEmpty(source.compactionTools, 'compactionTools')
+
+  const promotion = createEpochPromotion(promoteEvents, { includeSubagents })
+  ctx.on('session/event', (session, event) => promotion.observe(session, event))
+
+  let warned = false
+  const warnOnce = (message) => {
+    if (warned) return
+    warned = true
+    try {
+      ctx.logger.warn(message)
+    } catch {
+      // Logger unavailable — the guard exists only to avoid spamming.
+    }
+  }
+
+  /** Narrow the assembled catalog to a keep-set; validate required names. */
+  const keepTools = (assembled, keep, missingAllowsFullCatalog) => {
+    const available = new Set(assembled.tools.map((tool) => tool.name))
+    const missing = [...keep].filter((toolName) => !available.has(toolName))
+    if (missing.length > 0) {
+      warnOnce(
+        `${name}: expected every phase tool; missing=${JSON.stringify(missing)} — `
+        + (missingAllowsFullCatalog ? 'bootstrap disabled, full catalog exposed' : 'continuing with what is available'),
+      )
+      if (missingAllowsFullCatalog) return assembled
+    }
+    return {
+      ...assembled,
+      tools: assembled.tools.filter((tool) => keep.has(tool.name)),
+    }
+  }
+
+  ctx.on('system-prompt/assemble', async (_assembly, context, next) => {
+    // Downstream errors propagate untouched; only this filter's own logic is guarded.
+    const assembled = await next()
+    try {
+      const status = promotion.status(context.agent)
+      if (status.promoted) {
+        // PROMOTED: unlock the complete assembled catalog in one step.
+        return assembled
+      }
+      // Controlled phase: the bootstrap pair; after a compaction, plus the
+      // compaction work set so mid-task work can continue.
+      const { boundary } = status
+      const keep = new Set(bootstrapTools)
+      if (boundary >= 0) for (const toolName of compactionTools) keep.add(toolName)
+      return keepTools(assembled, keep, true)
+    } catch (error) {
+      // A filter bug must never brick a session: degrade to the full catalog.
+      warnOnce(`${name}: bootstrap filter failed, exposing the full catalog: ${String((error && error.message) || error)}`)
+      return assembled
+    }
+  })
+
+  // Optionally cap the first model request's output budget while bootstrapping.
+  // Unset (`bootstrapMaxTokens` omitted) means the adapter default flows — the
+  // Minimal tool schema anchors at 256000 without a cap (issue #11).
+  if (bootstrapMaxTokens !== undefined) {
+    // Same registration discipline as the pre-step strip below: `prepend`
+    // keeps this listener the OUTERMOST transform of the agent/request
+    // waterfall for the same registration-order reasons (loader row
+    // application is concurrent; row order alone does not decide listener
+    // order — see issue #6 and upstream PR #13), so a later listener can
+    // never override the first-round budget after we set it.
+    ctx.on('agent/request', async (payload, next) => {
+      const resolved = await next()
+      const agent = payload.agent
+      if (promotion.status(agent).promoted) {
+        // The next request's seed proposal carries the previous header's
+        // maxTokens forward, so the injected cap must be stripped explicitly —
+        // otherwise it would persist for the whole session.
+        if (resolved.maxTokens === bootstrapMaxTokens) {
+          const { maxTokens: _bootstrap, ...rest } = resolved
+          return rest
+        }
+        return resolved
+      }
+      return {
+        ...resolved,
+        maxTokens: bootstrapMaxTokens,
+      }
+    }, { prepend: true })
+  }
+
+  // Strip first-step injected reminders (skill catalog, AGENTS.md) during
+  // bootstrap. Because this listener is the first registered (see the inject
+  // note, the row order in agent.cordis.yml, and `prepend` below), the strip
+  // is the final waterfall transform and actually removes what later
+  // listeners inject.
+  ctx.on('agent/pre-step', async ({ agent }, next) => {
+    // Downstream errors propagate untouched; only this filter's own logic is guarded.
+    const decision = await next()
+    if (decision.kind === 'reject') return decision
+    try {
+      if (promotion.status(agent).promoted || suppressedSources.size === 0) return decision
+      if (!Array.isArray(decision.messages)) return decision
+      const kept = decision.messages.filter((message) => {
+        const kind = message?.source?.kind
+        return typeof kind !== 'string' || !suppressedSources.has(kind)
+      })
+      return kept.length === decision.messages.length ? decision : { ...decision, messages: kept }
+    } catch (error) {
+      // A filter bug must never eat context: degrade to keeping every message.
+      warnOnce(`${name}: pre-step context filter failed, keeping injected context: ${String((error && error.message) || error)}`)
+      return decision
+    }
+  }, { prepend: true })
+}

package/vendor/dsh-std/packages/command/node_modules/@dsh-std/connection/CHANGELOG.md

@@ -0,0 +1,8 @@
+# Changelog
+
+Changes to `@dsh-std/connection` are recorded here.
+
+## 0.1.0 (draft)
+
+- Defined connection services, endpoint views, participant publication, capability bindings, and attachments.
+- Added an in-memory transport for protocol conformance and host integration tests.

package/vendor/dsh-std/packages/command/node_modules/@dsh-std/connection/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DSH Standard contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/vendor/dsh-std/packages/command/node_modules/@dsh-std/connection/README.md

@@ -0,0 +1,42 @@
+# @dsh-std/connection
+
+English | [中文](README.zh.md)
+
+The proposed design is documented in [Endpoint Connection](../../docs/proposals/endpoint-connection.zh.md). It separates the application-facing `ConnectionService` from the Connection Host provider SPI. The remainder of this page describes the current reference implementation, which does not yet complete that split.
+
+Host-provided communication service, two-endpoint capability negotiation, and implementation-neutral invocation for the DSH Standard.
+
+## Endpoint offers
+
+An endpoint offer contains an endpoint identity, a revision, and the live participant declarations admitted by endpoint policy. It carries no component manifests, installation inventory, or plugin registry.
+
+`resolveConnection()` passes both sets of declarations to a caller-owned `ProtocolCatalog`. Each protocol definition owns its negotiation and may place invocation bindings in its agreement; connection does not impose consumer/provider semantics on every protocol. `defineCapabilityProtocol()` is an explicit helper for domain protocols that do use RPC-shaped bindings.
+
+Each invocation binding is participant-scoped and plan-revision-scoped. A client for one participant cannot discover or invoke bindings granted to another participant.
+
+## Current reference API
+
+`StandardConnection` exposes endpoint identities, the active plan, consumer-scoped clients, plan-change observation, and close. `CapabilityClient.invoke()` returns an invocation id, a result promise, an asynchronous progress stream, and cancellation. Domain protocol packages own operation names and input, output, and progress values.
+
+`ConnectionBroker` selects one registered `ConnectionConnector` for an implementation-neutral target URI. Zero matches and multiple matches are both explicit errors. The broker does not expose the selected connector type through `StandardConnection`.
+
+These types are an early reference implementation. They do not require a TUI, Web UI, GUI, or business plugin to register and operate its own connector. The protocol direction places the broker, connector/provider registry, carrier, and wire behind a Connection Host's `ConnectionService`. A consumer submits a target and uses scoped typed clients for the negotiated protocols.
+
+A Connection Host may install or discover a remote service, own authentication, ports, forwarding and reconnection, and produce the `StandardConnection`. An SSH target facet contributes resolution and bootstrap integration while system OpenSSH or another provider may supply the physical SSH implementation. Applications do not observe the selected provider, ports, credentials, or wire.
+
+## Lifecycle
+
+Renegotiation creates a complete new plan revision and publishes it atomically. An invocation admitted under the old revision retains its binding until settlement; later invocations use the new revision. Closing a connection cancels active work and rejects new work with `connection-closed`.
+
+Transport implementations must preserve invocation isolation, progress order, cancellation, and the error classification exposed by `ConnectionInvocationError`. They are also responsible for authenticating the peer and preventing one connection from reusing another connection's grants.
+
+## Reference implementation
+
+The `@dsh-std/connection/memory` export provides a process-local implementation for tests, adapters, and conformance experiments. It demonstrates symmetric calls, progress, cancellation, isolation, and renegotiation. It is not a required carrier or a wire-format specification.
+
+## Known Limitations and Deferred Work
+
+- The consumer-facing `ConnectionService` and Host provider SPI are not implemented in the current code yet.
+- The package does not yet standardize discovery, authentication, encryption, reconnect policy, framing, or serialization.
+- A connection has exactly two endpoints in `v1alpha1`; multi-party routing is composed from separate connections.
+- The capability helper requires one peer provider by default. Protocols that allow multiple providers must opt into and define that behavior explicitly.

package/vendor/dsh-std/packages/command/node_modules/@dsh-std/connection/README.zh.md

@@ -0,0 +1,42 @@
+# @dsh-std/connection
+
+[English](README.md) | 中文
+
+拟议设计见 [Endpoint Connection](../../docs/proposals/endpoint-connection.zh.md)。规范把普通应用使用的 `ConnectionService` 与 Connection Host 的 provider SPI 分开；本页其余内容描述尚未完成该分层的当前参考实现。
+
+DSH Standard 的宿主通信 service、双端点能力协商与实现无关调用。
+
+## 端点提议
+
+端点提议包含端点身份、修订号，以及经端点 policy 裁剪后的 live participant declarations。它不携带 component manifests、安装记录或插件注册表。
+
+`resolveConnection()` 把两端 declarations 交给调用方提供的 `ProtocolCatalog`。每份协议 definition 决定如何协商，并可在 agreement 中产生调用绑定；connection 不为所有协议预设 consumer/provider 语义。内置的 `defineCapabilityProtocol()` 是需要 RPC 绑定的领域协议可显式采用的辅助定义。
+
+每项调用绑定都限定于消费 participant 和方案修订版。一个 participant 的客户端不能发现或调用授予另一 participant 的绑定。
+
+## 当前参考 API
+
+`StandardConnection` 暴露端点身份、当前方案、按消费方隔离的客户端、方案变更观察与关闭操作。`CapabilityClient.invoke()` 返回调用 id、结果 Promise、异步进度流与取消操作。领域协议包拥有操作名称以及输入、输出和进度值的语义。
+
+`ConnectionBroker` 根据与实现无关的目标 URI，从已注册 `ConnectionConnector` 中选择唯一实现。零个匹配与多个匹配都是明确错误。broker 不会通过 `StandardConnection` 暴露选中的 connector 类型。
+
+这些类型是早期参考实现，不表示 TUI、Web、GUI 或业务插件应自行注册 connector。规范方向是由 Connection Host 把 broker、connector/provider、carrier 和 wire 封装为 `ConnectionService`；consumer 只提交 target，并通过 scoped typed client 使用已协商协议。
+
+Connection Host 负责安装或发现远端服务、认证、端口与转发、重连和 `StandardConnection`。SSH target facet 可以贡献解析与 bootstrap 集成，物理 SSH 则可由系统 OpenSSH 或独立 provider 完成。应用不会看到所选 provider、端口、凭据或 wire。
+
+## 生命周期
+
+重新协商会生成完整的新方案修订版，并原子发布。旧修订版已经接纳的调用保留其绑定直至结束；后续调用使用新修订版。关闭连接会取消活跃工作，并以 `connection-closed` 拒绝新工作。
+
+传输实现必须保持调用隔离、进度顺序、取消语义和 `ConnectionInvocationError` 暴露的错误分类。实现还负责认证对端，并阻止一条连接复用另一条连接的授权。
+
+## 参考实现
+
+`@dsh-std/connection/memory` 导出用于测试、适配器和一致性实验的进程内实现。它演示双向调用、进度、取消、隔离和重新协商，但不是强制承载方式或线协议规范。
+
+## 已知限制与暂缓事项
+
+- consumer-facing `ConnectionService` 与 Host provider SPI 尚未在当前代码中实现。
+- 本包尚未标准化发现、认证、加密、重连策略、封帧或序列化。
+- `v1alpha1` 的一条连接恰好包含两个端点；多方路由由多条独立连接组合。
+- Capability helper 默认要求唯一对端提供方；需要多提供方的协议必须明确选择其规则。

package/vendor/dsh-std/packages/command/node_modules/@dsh-std/connection/lib/connection-CdGcSQnu.d.ts

@@ -0,0 +1,125 @@
+import { ApiReference, NegotiatedProtocol, ProtocolCatalog, ProtocolDeclaration, ProtocolRequirement, ProtocolSupport } from "@dsh-std/core";
+//#region src/model.d.ts
+declare const CONNECTION_API_VERSION = "connection.dsh/v1alpha1";
+interface EndpointIdentity {
+  readonly id: string;
+  readonly instanceId: string;
+}
+interface EndpointOffer {
+  readonly apiVersion: typeof CONNECTION_API_VERSION;
+  readonly kind: 'ConnectionOffer';
+  readonly endpoint: EndpointIdentity;
+  readonly revision: number;
+  readonly declarations: readonly ProtocolDeclaration[];
+}
+interface ConnectionEndpointReference extends EndpointIdentity {}
+interface CapabilityParticipant {
+  readonly endpoint: ConnectionEndpointReference;
+  readonly participantId: string;
+}
+interface CapabilityBinding {
+  readonly bindingId: string;
+  readonly agreementId: string;
+  readonly planRevision: number;
+  readonly consumer: CapabilityParticipant;
+  readonly provider: CapabilityParticipant;
+  readonly requirement: ProtocolRequirement;
+  readonly support: ProtocolSupport;
+}
+interface ConnectionIssue {
+  readonly severity: 'error' | 'warning';
+  readonly code: string;
+  readonly participant?: CapabilityParticipant;
+  readonly path?: string;
+  readonly message: string;
+}
+interface ConnectionPlan {
+  readonly apiVersion: typeof CONNECTION_API_VERSION;
+  readonly kind: 'ConnectionAgreement';
+  readonly connectionId: string;
+  readonly revision: number;
+  readonly digest: string;
+  readonly offers: readonly {
+    readonly endpoint: ConnectionEndpointReference;
+    readonly revision: number;
+  }[];
+  readonly compatible: boolean;
+  readonly protocols: readonly NegotiatedProtocol[];
+  readonly bindings: readonly CapabilityBinding[];
+  readonly issues: readonly ConnectionIssue[];
+}
+interface ResolveConnectionOptions {
+  readonly connectionId: string;
+  readonly revision: number;
+  readonly protocols: ProtocolCatalog;
+  readonly policy?: unknown;
+}
+/** Policy envelope supplied to definitions while evaluating a pair of endpoint offers. */
+interface ConnectionNegotiationPolicy {
+  readonly endpointByParticipant: Readonly<Record<string, string>>;
+  readonly protocol?: unknown;
+}
+declare function createEndpointOffer(endpoint: EndpointIdentity, revision: number, declarations: readonly ProtocolDeclaration[]): EndpointOffer;
+declare function validateEndpointOffer(offer: EndpointOffer): void;
+declare function freezeEndpoint(endpoint: EndpointIdentity): ConnectionEndpointReference;
+declare function validatePlanCoordinates(connectionId: string, revision: number): void;
+//#endregion
+//#region src/connection.d.ts
+interface CapabilityHandlerContext<TProgress = unknown> {
+  readonly connectionId: string;
+  readonly planRevision: number;
+  readonly invocationId: string;
+  readonly binding: CapabilityBinding;
+  readonly signal: AbortSignal;
+  progress(value: TProgress): void;
+}
+type CapabilityHandler<TInput = unknown, TOutput = unknown, TProgress = unknown> = (operation: string, input: TInput, context: CapabilityHandlerContext<TProgress>) => TOutput | Promise<TOutput>;
+interface CapabilityImplementation<TInput = unknown, TOutput = unknown, TProgress = unknown> {
+  readonly participantId: string;
+  readonly protocol: ProtocolSupport;
+  readonly handle: CapabilityHandler<TInput, TOutput, TProgress>;
+}
+interface CapabilityDispatch<TInput = unknown, TProgress = unknown> {
+  readonly connectionId: string;
+  readonly planRevision: number;
+  readonly invocationId: string;
+  readonly binding: CapabilityBinding;
+  readonly operation: string;
+  readonly input: TInput;
+  readonly signal: AbortSignal;
+  progress(value: TProgress): void;
+}
+interface ConnectionEndpoint {
+  readonly offer: EndpointOffer;
+  dispatch<TInput = unknown, TOutput = unknown, TProgress = unknown>(invocation: CapabilityDispatch<TInput, TProgress>): Promise<TOutput>;
+  onOfferChange(listener: (offer: EndpointOffer) => void): () => void;
+}
+interface CapabilityCall<TOutput = unknown, TProgress = unknown> {
+  readonly invocationId: string;
+  readonly result: Promise<TOutput>;
+  readonly progress: AsyncIterable<TProgress>;
+  cancel(reason?: string): void;
+}
+interface CapabilityClient {
+  readonly participantId: string;
+  binding(reference: ApiReference): CapabilityBinding | undefined;
+  invoke<TInput = unknown, TOutput = unknown, TProgress = unknown>(reference: ApiReference, operation: string, input: TInput, options?: {
+    readonly signal?: AbortSignal;
+  }): CapabilityCall<TOutput, TProgress>;
+}
+interface StandardConnection {
+  readonly id: string;
+  readonly local: ConnectionEndpointReference;
+  readonly remote: ConnectionEndpointReference;
+  readonly plan: ConnectionPlan;
+  client(participantId: string): CapabilityClient;
+  onPlanChange(listener: (plan: ConnectionPlan) => void): () => void;
+  close(reason?: string): void | Promise<void>;
+}
+declare class ConnectionInvocationError extends Error {
+  readonly code: 'connection-closed' | 'capability-unbound' | 'handler-missing' | 'cancelled' | 'handler-failed';
+  constructor(code: 'connection-closed' | 'capability-unbound' | 'handler-missing' | 'cancelled' | 'handler-failed', message: string, options?: ErrorOptions);
+}
+//#endregion
+export { validatePlanCoordinates as C, validateEndpointOffer as S, EndpointIdentity as _, CapabilityHandlerContext as a, createEndpointOffer as b, ConnectionInvocationError as c, CapabilityBinding as d, CapabilityParticipant as f, ConnectionPlan as g, ConnectionNegotiationPolicy as h, CapabilityHandler as i, StandardConnection as l, ConnectionIssue as m, CapabilityClient as n, CapabilityImplementation as o, ConnectionEndpointReference as p, CapabilityDispatch as r, ConnectionEndpoint as s, CapabilityCall as t, CONNECTION_API_VERSION as u, EndpointOffer as v, freezeEndpoint as x, ResolveConnectionOptions as y };
+//# sourceMappingURL=connection-CdGcSQnu.d.ts.map

package/vendor/dsh-std/packages/command/node_modules/@dsh-std/connection/lib/connection-CdGcSQnu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-CdGcSQnu.d.ts","names":[],"sources":["../src/model.ts","../src/connection.ts"],"mappings":";;cASa;UAEI;WACN;WACA;;UAGM;WACN,mBAAmB;WACnB;WACA,UAAU;WACV;WACA,uBAAuB;;UAGjB,oCAAoC;UAEpC;WACN,UAAU;WACV;;UAGM;WACN;WACA;WACA;WACA,UAAU;WACV,UAAU;WACV,aAAa;WACb,SAAS;;UAGH;WACN;WACA;WACA,cAAc;WACd;WACA;;UAGM;WACN,mBAAmB;WACnB;WACA;WACA;WACA;WACA;aACE,UAAU;aACV;;WAEF;WACA,oBAAoB;WACpB,mBAAmB;WACnB,iBAAiB;;UAGX;WACN;WACA;WACA,WAAW;WACX;;;UAIM;WACN,uBAAuB,SAAS;WAChC;;iBAGK,oBACd,UAAU,kBACV,kBACA,uBAAuB,wBACtB;iBAkBa,sBAAsB,OAAO;iBAa7B,eAAe,UAAU,mBAAmB;iBAI5C,wBAAwB,sBAAsB;;;UClH7C,yBAAyB;WAC/B;WACA;WACA;WACA,SAAS;WACT,QAAQ;EACjB,SAAS,OAAO;;KAGN,kBAAkB,kBAAkB,mBAAmB,wBACjE,mBAAmB,OAAO,QAAQ,SAAS,yBAAyB,eACjE,UAAU,QAAQ;UAEN,yBAAyB,kBAAkB,mBAAmB;WACpE;WACA,UAAU;WACV,QAAQ,kBAAkB,QAAQ,SAAS;;UAGrC,mBAAmB,kBAAkB;WAC3C;WACA;WACA;WACA,SAAS;WACT;WACA,OAAO;WACP,QAAQ;EACjB,SAAS,OAAO;;UAGD;WACN,OAAO;EAChB,SAAS,kBAAkB,mBAAmB,qBAAqB,YAAY,mBAAmB,QAAQ,aAAa,QAAQ;EAC/H,cAAc,WAAW,OAAO;;UAGjB,eAAe,mBAAmB;WACxC;WACA,QAAQ,QAAQ;WAChB,UAAU,cAAc;EACjC,OAAO;;UAGQ;WACN;EACT,QAAQ,WAAW,eAAe;EAClC,OAAO,kBAAkB,mBAAmB,qBAC1C,WAAW,cACX,mBACA,OAAO,QACP;aAAqB,SAAS;MAC7B,eAAe,SAAS;;UAGZ;WACN;WACA,OAAO;WACP,QAAQ;WACR,MAAM;EACf,OAAO,wBAAwB;EAC/B,aAAa,WAAW,MAAM;EAC9B,MAAM,yBAAyB;;cAGpB,kCAAkC;WAElC;EAAA,YAAA,uGACT,iBACA,UAAU"}

package/vendor/dsh-std/packages/command/node_modules/@dsh-std/connection/lib/index.d.ts

@@ -0,0 +1,89 @@
+import { C as validatePlanCoordinates, S as validateEndpointOffer, _ as EndpointIdentity, a as CapabilityHandlerContext, b as createEndpointOffer, c as ConnectionInvocationError, d as CapabilityBinding, f as CapabilityParticipant, g as ConnectionPlan, h as ConnectionNegotiationPolicy, i as CapabilityHandler, l as StandardConnection, m as ConnectionIssue, n as CapabilityClient, o as CapabilityImplementation, p as ConnectionEndpointReference, r as CapabilityDispatch, s as ConnectionEndpoint, t as CapabilityCall, u as CONNECTION_API_VERSION, v as EndpointOffer, x as freezeEndpoint, y as ResolveConnectionOptions } from "./connection-CdGcSQnu.js";
+import { ProtocolDeclaration, ProtocolDefinition, ProtocolRequirement, ProtocolSupport } from "@dsh-std/core";
+//#region src/broker.d.ts
+interface ConnectionTarget {
+  /** Implementation-neutral target. Its URI scheme is interpreted by registered connectors. */
+  readonly uri: string;
+  readonly metadata?: Readonly<Record<string, string>>;
+}
+interface ConnectRequest {
+  readonly target: ConnectionTarget;
+  /** Live endpoint, including the dispatcher used for peer-to-local calls. */
+  readonly local: ConnectionEndpoint;
+  readonly signal?: AbortSignal;
+}
+/** Client half of one concrete connection implementation. */
+interface ConnectionConnector {
+  /** Namespaced implementation identity, not a transport or product name exposed to domain consumers. */
+  readonly id: string;
+  supports(target: ConnectionTarget): boolean;
+  connect(request: ConnectRequest): Promise<StandardConnection>;
+}
+declare class ConnectionSelectionError extends Error {
+  readonly code: 'implementation-unavailable' | 'implementation-ambiguous';
+  readonly implementations: readonly string[];
+  constructor(code: 'implementation-unavailable' | 'implementation-ambiguous', message: string, implementations: readonly string[]);
+}
+/**
+ * Implementation registry used by an adapter or application composition root.
+ * Domain consumers request a connection; they never import the selected implementation.
+ */
+declare class ConnectionBroker {
+  private readonly connectors;
+  register(connector: ConnectionConnector): () => void;
+  implementations(target?: ConnectionTarget): readonly string[];
+  connect(request: ConnectRequest): Promise<StandardConnection>;
+}
+//#endregion
+//#region src/endpoint.d.ts
+interface EndpointPublication {
+  readonly declaration: ProtocolDeclaration;
+  readonly implementations?: readonly CapabilityImplementation[];
+}
+interface EndpointRuntimeOptions extends EndpointIdentity {
+  readonly revision?: number;
+}
+declare class StandardEndpointRuntime implements ConnectionEndpoint {
+  private readonly declarations;
+  private readonly implementations;
+  private readonly listeners;
+  private readonly identity;
+  private revision;
+  private currentOffer;
+  constructor(options: EndpointRuntimeOptions);
+  get offer(): EndpointOffer;
+  register(publication: EndpointPublication): () => void;
+  dispatch<TInput = unknown, TOutput = unknown, TProgress = unknown>(invocation: CapabilityDispatch<TInput, TProgress>): Promise<TOutput>;
+  onOfferChange(listener: (offer: EndpointOffer) => void): () => void;
+  private createOffer;
+  private publishOffer;
+}
+//#endregion
+//#region src/resolve.d.ts
+declare function resolveConnection(left: EndpointOffer, right: EndpointOffer, options: ResolveConnectionOptions): ConnectionPlan;
+//#endregion
+//#region src/rpc.d.ts
+interface CapabilityBindingDraft {
+  readonly consumer: string;
+  readonly provider: string;
+  readonly requirement: ProtocolRequirement;
+  readonly support: ProtocolSupport;
+}
+interface CapabilityAgreement {
+  readonly kind: 'CapabilityBindings';
+  readonly bindings: readonly CapabilityBindingDraft[];
+}
+interface CapabilityProtocolOptions {
+  readonly apiVersion: string;
+  readonly kind: string;
+  readonly accepts?: readonly string[];
+  readonly multipleProviders?: boolean;
+  validateRequirement?(spec: unknown): unknown;
+  validateSupport?(spec: unknown): unknown;
+}
+/** Reusable RPC-shaped protocol definition. Domain packages opt into these semantics explicitly. */
+declare function defineCapabilityProtocol(options: CapabilityProtocolOptions): ProtocolDefinition;
+declare function isCapabilityAgreement(value: unknown): value is CapabilityAgreement;
+//#endregion
+export { CONNECTION_API_VERSION, CapabilityAgreement, CapabilityBinding, CapabilityBindingDraft, CapabilityCall, CapabilityClient, CapabilityDispatch, CapabilityHandler, CapabilityHandlerContext, CapabilityImplementation, CapabilityParticipant, CapabilityProtocolOptions, ConnectRequest, ConnectionBroker, ConnectionConnector, ConnectionEndpoint, ConnectionEndpointReference, ConnectionInvocationError, ConnectionIssue, ConnectionNegotiationPolicy, ConnectionPlan, ConnectionSelectionError, ConnectionTarget, EndpointIdentity, EndpointOffer, EndpointPublication, EndpointRuntimeOptions, ResolveConnectionOptions, StandardConnection, StandardEndpointRuntime, createEndpointOffer, defineCapabilityProtocol, freezeEndpoint, isCapabilityAgreement, resolveConnection, validateEndpointOffer, validatePlanCoordinates };
+//# sourceMappingURL=index.d.ts.map

package/vendor/dsh-std/packages/command/node_modules/@dsh-std/connection/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/broker.ts","../src/endpoint.ts","../src/resolve.ts","../src/rpc.ts"],"mappings":";;;UAGiB;;WAEN;WACA,WAAW,SAAS;;UAGd;WACN,QAAQ;;WAER,OAAO;WACP,SAAS;;;UAIH;;WAEN;EACT,SAAS,QAAQ;EACjB,QAAQ,SAAS,iBAAiB,QAAQ;;cAG/B,iCAAiC;WAEjC;WAEA;EAFA,YAAA,iEACT,iBACS;;;;;;cAWA;mBACM;EAEjB,SAAS,WAAW;EAOpB,gBAAgB,SAAS;EAQnB,QAAQ,SAAS,iBAAiB,QAAQ;;;;UC3CjC;WACN,aAAa;WACb,2BAA2B;;UAGrB,+BAA+B;WACrC;;cAGE,mCAAmC;mBAC7B;mBACA;mBACA;mBACA;UACT;UACA;EAEI,YAAA,SAAS;MAMjB,SAAS;EAEb,SAAS,aAAa;EAmChB,SAAS,kBAAkB,mBAAmB,qBAAqB,YAAY,mBAAmB,QAAQ,aAAa,QAAQ;EAqBrI,cAAc,WAAW,OAAO;UAKxB;UAIA;;;;iBCxFM,kBAAkB,MAAM,eAAe,OAAO,eAAe,SAAS,2BAA2B;;;UCRhG;WACN;WACA;WACA,aAAa;WACb,SAAS;;UAGH;WACN;WACA,mBAAmB;;UAGb;WACN;WACA;WACA;WACA;EACT,qBAAqB;EACrB,iBAAiB;;;iBAIH,yBAAyB,SAAS,4BAA4B;iBA0D9D,sBAAsB,iBAAiB,SAAS"}