@askdkc/dsh-cli 0.11.3

package/lib/types/dsh-adapter/contract.js

@@ -0,0 +1,276 @@
+/**
+ * Upstream compatibility contract.
+ *
+ * The TUI is validated against a set of upstream prerelease lines — the
+ * current primary (0.1.7-rc.2) plus older lines kept in backward
+ * compatibility across the 0.1.5, 0.1.3, 0.1.2, 0.1.1 and 0.1.0 release
+ * families.
+ * Every official package this adapter touches is blessed here; anything
+ * else must go through upstream channels or the adapter, never the UI.
+ *
+ * `upstreamDrift()` powers the CI gate (scripts/verify-upstream-contract.ts)
+ * so a mismatched install fails in CI before it fails on a user's machine.
+ * `upstreamDriftSummary()` collapses the per-package entries into the
+ * single natural-language boot notice the logo header shows (see LogoV2).
+ */
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+/** Primary validated upstream line (newest). */
+export const UPSTREAM_VALIDATED_VERSION = '0.1.7-rc.2';
+/**
+ * Explicitly supported upstream prerelease lines, oldest first.
+ *
+ * 0.1.7-rc.2 = primary continuous-CI line; 0.1.7-rc.1 = previous 0.1.7
+ * build (mapped compatibility); 0.1.5-rc.1/alpha.2/alpha.1 = mapped
+ * compatibility lines (source-checked when the primary line moves);
+ * 0.1.3-alpha.2 = compatibility line (the only 0.1.3 build on npm);
+ * 0.1.2-rc.1 = previous family (full CI coverage); 0.1.2-alpha.3–alpha.5 =
+ * mapped compatibility lines; 0.1.1-rc.1/rc.2 = compatibility lines
+ * (install- and type-level compatibility); 0.1.0-rc.7/rc.8 = full CI
+ * coverage; 0.1.0-rc.6 = legacy line (install- and type-level
+ * compatibility, feature surface may lack later additions — new features
+ * must degrade gracefully there).
+ * The peer range in package.json is deliberately wider than this list: an
+ * install on an older or newer line is allowed but reports drift at boot.
+ */
+export const UPSTREAM_VALIDATED_VERSIONS = [
+    '0.1.0-rc.6',
+    '0.1.0-rc.7',
+    '0.1.0-rc.8',
+    '0.1.1-rc.1',
+    '0.1.1-rc.2',
+    '0.1.2-alpha.3',
+    '0.1.2-alpha.4',
+    '0.1.2-alpha.5',
+    '0.1.2-rc.1',
+    '0.1.3-alpha.2',
+    '0.1.5-alpha.1',
+    '0.1.5-alpha.2',
+    '0.1.5-rc.1',
+    '0.1.7-rc.1',
+    '0.1.7-rc.2',
+];
+/**
+ * Framework packages version on their own lines; the contract validates
+ * their MAJOR (breaking surface), not the harness prerelease number.
+ */
+export const UPSTREAM_FRAMEWORK_MAJORS = {
+    '@deepseek-ai/cordis': 4,
+    '@deepseek-ai/schemastery': 3,
+};
+/** Official packages the adapter consumes at runtime or as types. */
+export const UPSTREAM_BLESSED_PACKAGES = [
+    '@deepseek-ai/cordis',
+    '@deepseek-ai/schemastery',
+    '@deepseek-ai/dsh-invariants',
+    '@deepseek-ai/dsh-agent',
+    '@deepseek-ai/dsh-agent-instructions',
+    '@deepseek-ai/dsh-agent-preset-registry',
+    '@deepseek-ai/dsh-atomic-write',
+    '@deepseek-ai/dsh-ptc-runtime-node',
+    '@deepseek-ai/dsh-commands',
+    '@deepseek-ai/dsh-cordis-host-runner',
+    '@deepseek-ai/dsh-llm',
+    '@deepseek-ai/dsh-llm-pi-ai',
+    '@deepseek-ai/dsh-persona',
+    '@deepseek-ai/dsh-session',
+    '@deepseek-ai/dsh-settings',
+    '@deepseek-ai/dsh-skill',
+    '@deepseek-ai/dsh-storage',
+    '@deepseek-ai/dsh-storage-domain',
+    '@deepseek-ai/dsh-storage-json',
+    '@deepseek-ai/dsh-workspace',
+    '@deepseek-ai/dsh-web-app',
+    '@deepseek-ai/dsh-system-prompt',
+    '@deepseek-ai/dsh-terminal',
+    '@deepseek-ai/dsh-terminal-bash',
+    '@deepseek-ai/dsh-tool-ask-user',
+    '@deepseek-ai/dsh-tool-bash-persistent',
+    '@deepseek-ai/dsh-tool-cordis',
+    '@deepseek-ai/dsh-tool-subagent',
+    '@deepseek-ai/dsh-user-approval',
+    '@deepseek-ai/dsh-user-questions',
+];
+// These capabilities are loaded dynamically and did not exist on every
+// supported host line. Their absence is valid at runtime, not in the CI tree.
+const OPTIONAL_RUNTIME_PACKAGES = new Set([
+    '@deepseek-ai/dsh-agent-preset-registry',
+    '@deepseek-ai/dsh-ptc-runtime-node',
+    '@deepseek-ai/dsh-web-app',
+]);
+/** Parse an upstream prerelease version; undefined when unparseable. */
+export function parseUpstreamVersion(version) {
+    const match = /^(\d+)\.(\d+)\.(\d+)-(alpha|beta|rc)\.(\d+)$/u.exec(version ?? '');
+    return match === null
+        ? undefined
+        : [Number(match[1]), Number(match[2]), Number(match[3]), match[4], Number(match[5])];
+}
+/** Order two parsed versions: negative/positive/zero as a `<`/`>`/`=`. */
+export function compareVersions(a, b) {
+    for (const index of [0, 1, 2]) {
+        if (a[index] > b[index])
+            return 1;
+        if (a[index] < b[index])
+            return -1;
+    }
+    const channelRank = { alpha: 0, beta: 1, rc: 2 };
+    const channelOrder = channelRank[a[3]] - channelRank[b[3]];
+    return channelOrder !== 0 ? channelOrder : a[4] - b[4];
+}
+/** Collapse validated versions into per-release and per-channel groups. */
+function validatedLinesLabel() {
+    const groups = [];
+    for (const version of UPSTREAM_VALIDATED_VERSIONS) {
+        const [major, minor, patch, channel, number] = parseUpstreamVersion(version);
+        const release = `${major}.${minor}.${patch}`;
+        let group = groups.find(candidate => candidate.release === release && candidate.channel === channel);
+        if (group === undefined) {
+            group = { release, channel, numbers: [] };
+            groups.push(group);
+        }
+        group.numbers.push(number);
+    }
+    return groups.map(({ release, channel, numbers }) => `${release}-${channel}.${numbers.join('/')}`).join(', ');
+}
+/** Human-readable summary of the exact validated prerelease lines. */
+export const UPSTREAM_VALIDATED_LABEL = `${UPSTREAM_VALIDATED_VERSION} (${validatedLinesLabel()})`;
+function resolvePackageJson(packageName) {
+    try {
+        const path = import.meta.resolve(`${packageName}/package.json`);
+        return path.startsWith('file:') ? fileURLToPath(path) : path;
+    }
+    catch {
+        return undefined;
+    }
+}
+let cachedVersions;
+export function installedUpstreamVersions() {
+    // Package manifests do not change mid-process; memoize so per-call gates
+    // (e.g. the command-images line check) stay cheap. Frozen so callers can
+    // never corrupt the shared cache.
+    if (cachedVersions !== undefined)
+        return cachedVersions;
+    const result = {};
+    for (const packageName of UPSTREAM_BLESSED_PACKAGES) {
+        let version;
+        const path = resolvePackageJson(packageName);
+        if (path !== undefined) {
+            try {
+                const manifest = JSON.parse(readFileSync(path, 'utf8'));
+                version = manifest.version;
+            }
+            catch {
+                version = undefined;
+            }
+        }
+        result[packageName] = version;
+    }
+    cachedVersions = Object.freeze(result);
+    return cachedVersions;
+}
+/**
+ * The installed upstream version of one blessed package, parsed; undefined
+ * when missing or not on a supported `x.y.z-(alpha|beta|rc).n` line. Feature gates
+ * compare this against the line a behavior was introduced on, so the
+ * adapter degrades on older installs instead of calling APIs they do not
+ * have.
+ */
+export function installedUpstreamVersion(packageName) {
+    return parseUpstreamVersion(installedUpstreamVersions()[packageName]);
+}
+/**
+ * Whether the installed version of `packageName` is at or beyond `minimum`
+ * (a literal like `'0.1.0-rc.8'`). Unparseable or older installs return
+ * false so features introduced on the minimum line degrade gracefully.
+ */
+export function installedMeetsVersion(packageName, minimum) {
+    const installed = installedUpstreamVersion(packageName);
+    const floor = parseUpstreamVersion(minimum);
+    if (installed === undefined || floor === undefined)
+        return false;
+    return compareVersions(installed, floor) >= 0;
+}
+/**
+ * The distinct installed prerelease versions across the blessed harness
+ * packages (framework packages excluded). One entry = coherent install;
+ * several = a mixed tree, which the per-package drift check cannot see.
+ * Empty when nothing (or no harness package) is installed.
+ */
+export function installedUpstreamLines(installedVersions = installedUpstreamVersions()) {
+    const lines = new Set();
+    for (const packageName of UPSTREAM_BLESSED_PACKAGES) {
+        if (UPSTREAM_FRAMEWORK_MAJORS[packageName] !== undefined)
+            continue;
+        const version = installedVersions[packageName];
+        if (version !== undefined && parseUpstreamVersion(version) !== undefined)
+            lines.add(version);
+    }
+    return [...lines].sort((a, b) => compareVersions(parseUpstreamVersion(a), parseUpstreamVersion(b)));
+}
+/**
+ * Report every blessed package whose installed version is NOT one of the
+ * validated release lines. Empty array = the running install matches the
+ * contract.
+ */
+export function upstreamDrift(installedVersions = installedUpstreamVersions()) {
+    const validated = new Set(UPSTREAM_VALIDATED_VERSIONS);
+    const drift = [];
+    for (const [packageName, installed] of Object.entries(installedVersions)) {
+        const expected = UPSTREAM_BLESSED_PACKAGES.includes(packageName);
+        if (!expected)
+            continue;
+        let matches;
+        const frameworkMajor = UPSTREAM_FRAMEWORK_MAJORS[packageName];
+        if (frameworkMajor !== undefined) {
+            const installedMajor = Number((installed ?? '').split('.')[0]);
+            matches = installedMajor === frameworkMajor;
+        }
+        else {
+            matches = installed !== undefined && validated.has(installed);
+        }
+        if (!matches) {
+            drift.push({
+                package: packageName,
+                installed,
+                validated: frameworkMajor !== undefined ? `major ${frameworkMajor}` : UPSTREAM_VALIDATED_LABEL,
+            });
+        }
+    }
+    return drift;
+}
+/**
+ * Collapse {@link upstreamDrift} into a single summary for the boot notice:
+ * undefined when the install matches the contract. Only harness prerelease packages
+ * decide newer/older/mixed; a framework-only drift (e.g. a cordis major
+ * bump) reports `broken`, since its version line is not comparable.
+ */
+export function upstreamDriftSummary(installedVersions = installedUpstreamVersions()) {
+    const installedLines = installedUpstreamLines(installedVersions);
+    if (installedLines.length > 1)
+        return { kind: 'mixed', versions: installedLines };
+    const drift = upstreamDrift(installedVersions).filter(entry => entry.installed !== undefined || !OPTIONAL_RUNTIME_PACKAGES.has(entry.package));
+    if (drift.length === 0)
+        return undefined;
+    const harness = drift.filter(entry => UPSTREAM_FRAMEWORK_MAJORS[entry.package] === undefined);
+    const versions = [...new Set(drift.map(entry => entry.installed ?? 'missing'))];
+    if (harness.some(entry => entry.installed === undefined)) {
+        return { kind: 'broken', versions };
+    }
+    const harnessVersions = [...new Set(harness.map(entry => entry.installed))];
+    if (harnessVersions.length > 1) {
+        return { kind: 'mixed', versions };
+    }
+    const installed = parseUpstreamVersion(harnessVersions[0] ?? '');
+    const validated = parseUpstreamVersion(UPSTREAM_VALIDATED_VERSION);
+    if (installed === undefined) {
+        return { kind: 'broken', versions };
+    }
+    const order = compareVersions(installed, validated);
+    if (order > 0)
+        return { kind: 'newer', versions };
+    if (order < 0)
+        return { kind: 'older', versions };
+    // Identical to the primary validated version — cannot happen (it would
+    // not be drift); report broken rather than staying silent.
+    return { kind: 'broken', versions };
+}

package/lib/types/dsh-adapter/credentialRefGuard.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Credential-ref reservation guard for the plugin settings-section seam.
+ *
+ * A settings section's `secret: { ref }` field writes whatever the user types
+ * through the credentials seam — under ANY ref the section names. A malicious
+ * section can therefore present a "plugin API key" card whose ref is actually
+ * the harness's shared DEEPSEEK_API_KEY (or any DEEPSEEK_/DSH_-prefixed ref)
+ * and overwrite the user's main credential. The guard is deliberately
+ * restrained: only refs the host owns are protected, and only for plugin-side
+ * registrations — plugins keep their own namespaces (my-plugin/key) untouched.
+ */
+/** Whether `ref` lives in a credential namespace reserved for the host. */
+export declare function isReservedCredentialRef(ref: string): boolean;
+/** Field shape the vetting needs; structural so any section type fits. */
+interface FieldWithSecretRef {
+    readonly path: readonly string[];
+    readonly secret?: {
+        ref: string;
+    };
+}
+/** One rejected field, for the caller's warning log. */
+export interface SecretRefRejection {
+    readonly path: readonly string[];
+    readonly ref: string;
+}
+/**
+ * Drop every field whose secret ref is reserved for the host. Used on the
+ * plugin-facing registration path only — host-identity registrations (no
+ * activation owner) keep their reserved refs. The rest of the section is
+ * preserved: one offending field must not take a plugin's whole settings
+ * page down with it.
+ */
+export declare function vetSectionSecretRefs<S extends {
+    fields: readonly FieldWithSecretRef[];
+}>(section: S): {
+    section: S;
+    rejected: SecretRefRejection[];
+};
+export {};
+//# sourceMappingURL=credentialRefGuard.d.ts.map

package/lib/types/dsh-adapter/credentialRefGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialRefGuard.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/credentialRefGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH,2EAA2E;AAC3E,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAG5D;AAED,0EAA0E;AAC1E,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAClC;AAED,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAAE,EACtF,OAAO,EAAE,CAAC,GACT;IAAE,OAAO,EAAE,CAAC,CAAC;IAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAYhD"}

package/lib/types/dsh-adapter/credentialRefGuard.js

@@ -0,0 +1,43 @@
+/**
+ * Credential-ref reservation guard for the plugin settings-section seam.
+ *
+ * A settings section's `secret: { ref }` field writes whatever the user types
+ * through the credentials seam — under ANY ref the section names. A malicious
+ * section can therefore present a "plugin API key" card whose ref is actually
+ * the harness's shared DEEPSEEK_API_KEY (or any DEEPSEEK_/DSH_-prefixed ref)
+ * and overwrite the user's main credential. The guard is deliberately
+ * restrained: only refs the host owns are protected, and only for plugin-side
+ * registrations — plugins keep their own namespaces (my-plugin/key) untouched.
+ */
+/**
+ * Refs the host/harness owns outright. The DEEPSEEK_/DSH_ prefixes below
+ * cover future host-side additions without editing this list each time.
+ */
+const RESERVED_CREDENTIAL_REFS = ['DEEPSEEK_API_KEY'];
+const RESERVED_CREDENTIAL_REF_PREFIXES = ['DEEPSEEK_', 'DSH_'];
+/** Whether `ref` lives in a credential namespace reserved for the host. */
+export function isReservedCredentialRef(ref) {
+    return RESERVED_CREDENTIAL_REFS.includes(ref)
+        || RESERVED_CREDENTIAL_REF_PREFIXES.some(prefix => ref.startsWith(prefix));
+}
+/**
+ * Drop every field whose secret ref is reserved for the host. Used on the
+ * plugin-facing registration path only — host-identity registrations (no
+ * activation owner) keep their reserved refs. The rest of the section is
+ * preserved: one offending field must not take a plugin's whole settings
+ * page down with it.
+ */
+export function vetSectionSecretRefs(section) {
+    const rejected = [];
+    const fields = section.fields.filter(field => {
+        const ref = field.secret?.ref;
+        if (ref === undefined || !isReservedCredentialRef(ref))
+            return true;
+        rejected.push({ path: field.path, ref });
+        return false;
+    });
+    // The spread keeps every other property of the caller's section type; the
+    // fields array is the same element type minus nothing structural (only
+    // fewer elements), so the cast is a pure narrowing of the same value.
+    return { section: { ...section, fields: fields }, rejected };
+}

package/lib/types/dsh-adapter/decision-guard.d.ts

@@ -0,0 +1,128 @@
+/**
+ * RFC 0005 D-7 enforcement: subscribing to an intercept-class (decision)
+ * event requires an explicit host-side grant — default deny.
+ *
+ * Interception is strictly more powerful than observation: a plugin that can
+ * veto user input or a session switch can change what the user's intent
+ * actually does. So `tui/input`, `tui/rewind-prompt`, `tui/session-switch`
+ * and `tui/compact` are NOT free-for-all `ctx.on` targets: the subscribing
+ * plugin (identified by its verified Component identity) must hold the
+ * matching `domain.resource.intercept` grant. Grant answers
+ * come from the unified 8-permission GrantStore in
+ * `../adapter/standard/grants.js` (registry-driven defaults,
+ * `grants`/`denies` sections, corrupt fail-closed) — this module is only the
+ * subscribe-time CHECKPOINT: which event needs which permission, and the
+ * cordis bail hook that enforces it.
+ *
+ * A denied subscription never enters the dispatch chain — it is "as if
+ * unregistered" (D-7) and the caller gets a no-op disposer plus a logger
+ * warning naming the plugin, the event, and the missing grant.
+ *
+ * Re-check semantics (D-7: subscription, revocation, scope change): every
+ * operation reads the live GrantStore and grant-owned registrations are
+ * released when its change watcher observes a revocation.
+ *
+ * Mechanism: cordis bails `internal/listener` on EVERY `ctx.on` before
+ * registering, with `this` bound to the subscribing context; a truthy bail
+ * result skips the registration and becomes the caller's disposer. That is
+ * the whole hook — no patching of the events service.
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { EXTENSION_GRANTS_FILE, type GrantStore } from '../adapter/standard/grants.js';
+import { type VerifiedComponentIdentity } from './component-identity.js';
+import { DECISION_EVENT_PERMISSIONS } from '../adapter/spec/protocol-constants.js';
+import { type AdapterRuntimeOptions } from '../adapter/kernel/runtime.js';
+/** The intercept permission each decision event requires. The map is
+ * derived in src/adapter/spec/protocol-constants.ts and re-exported here for
+ * compatibility; product code must not declare a second copy. */
+export { DECISION_EVENT_PERMISSIONS };
+export { EXTENSION_GRANTS_FILE };
+/** @deprecated Use GrantStore from `../adapter/standard/grants.js` (same shape, plus more).
+ * Long-term compatibility alias; owner: dsh-tui adapter. */
+export type ExtensionGrants = GrantStore;
+/** @deprecated Use parseGrantStore from `../adapter/standard/grants.js`.
+ * Long-term compatibility alias; owner: dsh-tui adapter. */
+export declare const parseExtensionGrants: (text: string) => GrantStore;
+/** @deprecated Use readGrantStore from `../adapter/standard/grants.js`.
+ * Long-term compatibility alias; owner: dsh-tui adapter. */
+export declare const readExtensionGrants: (dir?: string) => GrantStore;
+export interface DecisionHandlerMetadata {
+    componentId: string;
+    activationId: string;
+    event: string;
+    order: string;
+}
+/** A host-mediated DecisionEvents registration.  The registry is deliberately
+ * separate from Cordis' private `_hooks`: admission and dispatch must not
+ * depend on plugin load order or on an implementation detail of the event
+ * service. */
+export interface DecisionRegistrationOptions {
+    /** Scope covered by this handler. When omitted it is derived from the
+     * manifest declaration; an unsafe concrete-session declaration is refused. */
+    scope?: string;
+    /** Deterministic order key. Handlers with the same activation/event must use
+     * distinct keys; registration order is never used as a policy. */
+    order?: string;
+}
+export interface RegisteredDecisionHandler {
+    readonly event: string;
+    readonly scope: string;
+    readonly componentId: string;
+    readonly activationId: string;
+    readonly order: string;
+    readonly identity: VerifiedComponentIdentity;
+    readonly ownerContext: Context;
+    readonly listener: (payload: Record<string, unknown>) => unknown;
+}
+export interface DecisionRegistry {
+    runtime: AdapterRuntimeOptions;
+    grants: GrantStore;
+    handlers: Map<string, Map<string, RegisteredDecisionHandler>>;
+}
+export declare function decisionRegistryOf(ctx: Context): DecisionRegistry;
+/** Return a stable snapshot of handlers for one event and payload scope. */
+export declare function decisionHandlersOf(ctx: Context, event: string, payloadScope?: string): readonly RegisteredDecisionHandler[];
+/** Host-only registration used by TuiPluginHostRuntime. */
+export declare function registerDecisionHandler(pluginCtx: Context, identity: VerifiedComponentIdentity, event: string, listener: (payload: Record<string, unknown>) => unknown, options?: DecisionRegistrationOptions, onRelease?: () => void): () => boolean;
+/** Execute ctx.on for one host-mediated decision registration. */
+export declare function withDecisionRegistration<T>(ctx: Context, callback: () => T): T;
+export declare function decisionHandlerMetadataOf(listener: Function): DecisionHandlerMetadata | undefined;
+/** Return the event names for which a real dispatch topology is recorded in
+ * this composition. Empty means only a guard (or nothing) is mounted. */
+export declare function decisionDispatchEventNames(ctx: Context): readonly string[];
+/** True when this composition has at least one real DecisionEvents dispatch
+ * source (today: the live channel). Used by host descriptor/admission views. */
+export declare function hasDecisionDispatchTopology(ctx: Context): boolean;
+/**
+ * Record that this composition contains a real DecisionEvents dispatch
+ * source for the supplied event names. Called by the channel after it mounts
+ * the dispatch path; never called by guard installation alone.
+ *
+ * Returns a disposer that decrements this source's contribution. Multiple
+ * dispatch sources in the same composition are reference-counted per event,
+ * so unloading one channel does not erase another live channel's topology.
+ *
+ * Lifecycle assumption: in the current TUI the channel is mounted by a
+ * Cordis plugin/context and `createChannel()` registers this disposer in that
+ * context's effect cleanup, so unloading the owning context unmarks the
+ * topology. If an embedder intentionally treats the channel as a
+ * process-level singleton and never disposes the owning context, the marker
+ * persists for the process lifetime — matching the singleton assumption and
+ * not leaking across unloaded channels. Tests can always call the disposer or
+ * `unmarkDecisionDispatchTopology()` explicitly to prove post-unload
+ * behavior.
+ */
+export declare function markDecisionDispatchTopology(ctx: Context, events?: readonly string[]): () => void;
+/**
+ * Remove this composition's DecisionEvents dispatch topology registration for
+ * the supplied events (defaults to all known events). Also available as the
+ * disposer returned by `markDecisionDispatchTopology()`; `createChannel()`
+ * calls it when the channel's Cordis effect/context is unloaded.
+ */
+export declare function unmarkDecisionDispatchTopology(ctx: Context, events?: readonly string[]): void;
+/** Read-only DecisionEvents feature probe: reports only event names that have
+ * BOTH a guard and a real channel/dispatch topology in this composition. It
+ * creates no subscription and is used by the live-driver evidence path. */
+export declare function probeDecisionEventFeatures(ctx: Context): readonly string[];
+export declare function installDecisionGuard(ctx: Context, grants: GrantStore): void;
+//# sourceMappingURL=decision-guard.d.ts.map

package/lib/types/dsh-adapter/decision-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-guard.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/decision-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EACL,qBAAqB,EAGrB,KAAK,UAAU,EAChB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAIL,KAAK,yBAAyB,EAC/B,MAAM,yBAAyB,CAAA;AAOhC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAA;AAGlF,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,8BAA8B,CAAA;AAErC;;iEAEiE;AACjE,OAAO,EAAE,0BAA0B,EAAE,CAAA;AAQrC,OAAO,EAAE,qBAAqB,EAAE,CAAA;AAEhC;4DAC4D;AAC5D,MAAM,MAAM,eAAe,GAAG,UAAU,CAAA;AAExC;4DAC4D;AAC5D,eAAO,MAAM,oBAAoB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAA4B,CAAA;AAEjF;4DAC4D;AAC5D,eAAO,MAAM,mBAAmB,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,KAAK,UAA2B,CAAA;AA4B/E,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAGD;;;cAGc;AACd,MAAM,WAAW,2BAA2B;IAC1C;kFAC8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;sEACkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAA;IAC5C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAA;CACjE;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,qBAAqB,CAAA;IAC9B,MAAM,EAAE,UAAU,CAAA;IAClB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAA;CAC9D;AAqBD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAEjE;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,GACpB,SAAS,yBAAyB,EAAE,CA6BtC;AAsCD,2DAA2D;AAC3D,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,OAAO,EAClB,QAAQ,EAAE,yBAAyB,EACnC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,EACvD,OAAO,GAAE,2BAAgC,EACzC,SAAS,CAAC,EAAE,MAAM,IAAI,GACrB,MAAM,OAAO,CAgGf;AAkBD,kEAAkE;AAClE,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAI9E;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,GAAG,uBAAuB,GAAG,SAAS,CAEjG;AAED;yEACyE;AACzE,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAQ1E;AAED;gFACgF;AAChF,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEjE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,OAAO,EACZ,MAAM,GAAE,SAAS,MAAM,EAA6B,GACnD,MAAM,IAAI,CAqBZ;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,OAAO,EACZ,MAAM,GAAE,SAAS,MAAM,EAA6B,GACnD,IAAI,CAaN;AAED;;2EAE2E;AAC3E,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAI1E;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CA+D3E"}