@avantf/dsh-mission 0.3.0

package/lib/types/envinit.d.ts

@@ -0,0 +1,126 @@
+/** The framework's module shape; `import type` only — the value is always loaded dynamically. */
+type EnvinitModule = typeof import('@avantf/dsh-plugin-base');
+/** The services this plugin calls: `required` is this plugin's refusal policy; `typert` and
+ * `commands` are optional because the engine degrades without them. */
+interface ServiceContract {
+    readonly name: string;
+    readonly required: boolean;
+    readonly methods: readonly string[];
+}
+export interface CompatContext {
+    get(name: string): unknown;
+}
+export interface CompatLogger {
+    info(message: string): void;
+    warn(message: string): void;
+    error(message: string): void;
+}
+/** What this plugin declares about itself, so the base's rules stay generic. */
+interface CompatSpec {
+    readonly packageId: string;
+    readonly services: readonly ServiceContract[];
+    readonly declared: Readonly<Record<string, string | undefined>>;
+    readonly runtime?: Readonly<Record<string, string | undefined>>;
+    readonly probeTool?: () => unknown;
+    readonly probeTypert?: (packageId: string) => unknown;
+    readonly schemaNames?: readonly string[];
+    readonly events?: readonly string[];
+    readonly needsInterval?: boolean;
+}
+interface CompatLine {
+    readonly level: 'info' | 'warn' | 'error';
+    readonly message: string;
+}
+export interface CompatVerdict {
+    readonly load: boolean;
+    readonly skipped: boolean;
+    readonly status: string;
+    readonly problems: readonly string[];
+    readonly warnings: readonly string[];
+    readonly notes: readonly string[];
+    readonly lines: readonly CompatLine[];
+    readonly reason: string;
+}
+export interface CompatModule {
+    readonly COMPAT_PREFIX: string;
+    readonly BUILD_VERSIONS_FILE: string;
+    provision(ctx: CompatContext, log: CompatLogger, spec: CompatSpec): CompatVerdict;
+    compatReport(verdict: CompatVerdict, words: {
+        readonly heading: string;
+        readonly fix: string;
+        readonly warningsLabel: string;
+        readonly warnings: readonly string[];
+        /** Only present when the loaded base is new enough to accept it; see `compatReport`. */
+        readonly logPointer?: (prefix: string) => string;
+    }): string;
+    registerMegaphone(input: {
+        readonly ctx: CompatContext;
+        readonly log: CompatLogger;
+        readonly command: {
+            readonly name: string;
+            readonly description: string;
+        };
+        readonly text: string;
+    }): void;
+    schemaNamesFrom(contribution: unknown): readonly string[];
+    verifyRegisteredFaces(input: {
+        readonly ctx: CompatContext;
+        readonly packageId: string;
+        readonly schemaNames?: readonly string[];
+        readonly toolNames: readonly string[];
+        readonly log: CompatLogger;
+    }): {
+        readonly missing: readonly string[];
+    };
+    readDeclaredVersions(manifestUrl: string | URL, packages: readonly string[]): Record<string, string | undefined>;
+    readBuildVersions(buildUrl: string | URL, packages: readonly string[], fallback?: Readonly<Record<string, string | undefined>>): Record<string, string | undefined>;
+    readRuntimeVersions(packages: readonly string[], base?: string | URL): Record<string, string | undefined>;
+    toolProbeDeclaration(defineTool: (options: unknown) => unknown): () => unknown;
+}
+/** The loaded base, with everything derived from it for THIS plugin. */
+export interface CompatRuntime {
+    readonly module: CompatModule;
+    /**
+     * The loaded base module itself — the runtime source of the shared KIT (prompt files, logger,
+     * family paths). `undefined` only in the test seam that injects a partial module; the real load
+     * always has it. A capability missing here is a DEGRADATION, never a refusal.
+     */
+    readonly kit: EnvinitModule | undefined;
+    readonly prefix: string;
+    readonly spec: CompatSpec;
+    readonly schemaNames: readonly string[];
+}
+interface CompatLoadOptions {
+    readonly log?: CompatLogger;
+    /** Test seam: the loaded base module, instead of bootstrapping it from this plugin's install. */
+    readonly framework?: EnvinitModule;
+    /**
+     * Test seam: a structural stand-in for the gate half of the base, so the refusal / megaphone /
+     * post-registration shapes can be driven without a real host. The kit still comes from the module
+     * {@link CompatLoadOptions.framework} names.
+     */
+    readonly compatModule?: CompatModule;
+}
+/**
+ * Ensure the framework, then the base, then this plugin's gate runtime. Never throws: it returns
+ * `undefined` when the gate cannot run, and the caller then warns and mounts because a missing gate
+ * is "cannot tell". Cached, so the spec is built once per process.
+ */
+export declare function loadCompat(options?: CompatLoadOptions): Promise<CompatRuntime | undefined>;
+/** Run the gate FIRST in `apply()`: on a refusal nothing is registered yet, so "do not load" costs nothing to unwind; never throws. */
+export declare function provision(ctx: CompatContext, log: CompatLogger, compat: CompatRuntime): CompatVerdict;
+/** Keep one `/mission` command reporting the refusal; guarded, because on the REFUSAL path the report
+ * is the user's only channel and a shape mismatch must not reject `apply` and take it down. */
+export declare function registerCompatMegaphone(ctx: CompatContext, verdict: CompatVerdict, log: CompatLogger, compat: CompatRuntime): void;
+/** Second phase: every real registration must be visible afterwards; warn-only, since the plugin is
+ * mounted by now and no clean "do not load" is left. */
+export declare function verifyRegisteredFaces(input: {
+    readonly ctx: CompatContext;
+    readonly toolNames: readonly string[];
+    readonly log: CompatLogger;
+    readonly compat: CompatRuntime;
+}): {
+    readonly missing: readonly string[];
+};
+export {};
+//# sourceMappingURL=envinit.d.ts.map

package/lib/types/envinit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envinit.d.ts","sourceRoot":"","sources":["../../src/envinit.ts"],"names":[],"mappings":"AAmBA,iGAAiG;AACjG,KAAK,aAAa,GAAG,cAAc,yBAAyB,CAAC,CAAA;AAkD7D;uEACuE;AACvE,UAAU,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AA4BD,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,gFAAgF;AAChF,UAAU,UAAU;IAClB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAA;IAC7C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAA;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAA;IACrD,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CACjC;AAED,UAAU,UAAU;IAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAA;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,GAAG,aAAa,CAAA;IACjF,YAAY,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE;QAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;QACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;QACpC,wFAAwF;QACxF,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;KACjD,GAAG,MAAM,CAAA;IACV,iBAAiB,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;QAC3B,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAA;QAC1B,QAAQ,CAAC,OAAO,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAA;QACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KACtB,GAAG,IAAI,CAAA;IACR,eAAe,CAAC,YAAY,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAAA;IACzD,qBAAqB,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;QAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;QACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;QACrC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAA;KAC3B,GAAG;QAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;IAC3C,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAChH,iBAAiB,CACf,QAAQ,EAAE,MAAM,GAAG,GAAG,EACtB,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GACtD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACrC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACzG,oBAAoB,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,GAAG,MAAM,OAAO,CAAA;CAC/E;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;CACxC;AAED,UAAU,iBAAiB;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,YAAY,CAAA;IAC3B,iGAAiG;IACjG,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAA;IAClC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAA;CACrC;AAyCD;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAgBpG;AA0GD,uIAAuI;AACvI,wBAAgB,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,GAAG,aAAa,CAOrG;AAED;+FAC+F;AAC/F,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAiBlI;AAED;wDACwD;AACxD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAC/B,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAa1C"}

package/lib/types/executorSession.d.ts

@@ -0,0 +1,129 @@
+/**
+ * Finding the session that executed ONE historical mission, lazily.
+ *
+ * W17 made a node id clickable only when the record already carried `executorSessionId`. Nodes
+ * dispatched before that field existed have none, so their id was plain text and the session that
+ * ran them was unreachable from the panel. The fix cannot be "backfill at mount": resolving a
+ * historical executor means LISTING sessions and READING session logs, and doing that while the
+ * panel mounts would put the cost of every unlinkable node on every page load.
+ *
+ * So this module is the click-time half: it is called only from the Remote method that a click
+ * invokes, and it answers with a reason rather than an exception, because a miss is an ordinary
+ * outcome (the session may have been cleaned up) that the panel has to be able to explain.
+ *
+ * It is deliberately separated from `host.ts`: the host owns the tree and the write-back, this owns
+ * "which stored session is the one that ran node X", and a test can pin the filtering rules and the
+ * read budget with no tree and no engine.
+ * @module @avantf/dsh-mission/executorSession
+ */
+/** One stored session, as `sessionQuery.listSessions()` reports it (the fields the filter reads). */
+export interface ListedSession {
+    readonly header: {
+        readonly id: string;
+        readonly createdAt?: number;
+        readonly parentSession?: string;
+    };
+}
+/**
+ * The two `SessionEventResultFilter` members this resolver sends, transcribed from the REAL contract
+ * (`@deepseek-ai/dsh-session-query`): a filter array is ANDed, and every clause is an OBJECT
+ * discriminated by `kind`. It is NOT a tuple array — W20 shipped `[['time', from, to], ['text', …]]`,
+ * which the real `materializeSessionEventResultFilters` rejects with `unknown filter kind (missing)`
+ * before it reads anything. The local union stays structural (this module imports no optional
+ * service), but it must mirror that shape, and only the two members actually used are declared.
+ */
+type SessionEventFilter = {
+    readonly kind: 'time';
+    readonly from?: number;
+    readonly to?: number;
+} | {
+    readonly kind: 'text';
+    readonly text: string;
+};
+/** The slice of `sessionQuery` this resolver uses. Structural, like every optional service here. */
+export interface SessionQueryLike {
+    listSessions(): Promise<readonly ListedSession[]>;
+    /** Events of one session, AND-filtered by the real `SessionEventResultFilter` object union. */
+    filterEvents(sessionId: string, filters: readonly SessionEventFilter[]): Promise<readonly {
+        readonly text: string;
+    }[]>;
+}
+interface ResolveExecutorSessionOptions {
+    readonly node: {
+        readonly createdAt?: number;
+        readonly activityAt?: number;
+        readonly updatedAt?: number;
+        /**
+         * How many times this node has been dispatched. `0` is the DURABLE proof that no session ever
+         * ran it (and what the panel's "从未派发" sentence is about); `undefined` means the record cannot
+         * say, and the lookup proceeds rather than asserting something it does not know.
+         */
+        readonly attempts?: number;
+    };
+    /** The owner session every worker hangs under — the panel's own session. */
+    readonly ownerSessionId: string;
+    /** The optional `sessionQuery` service; omitted means the host cannot look anything up. */
+    readonly query: SessionQueryLike | undefined;
+    /** Wall clock, injected so a test fixes the window. */
+    readonly now: number;
+    /**
+     * Where a failed per-candidate log read goes. The failure must not VANISH: a filter whose SHAPE
+     * the service rejects fails on every candidate and, from the outside, looks exactly like "the
+     * session is gone" — which is how W20's total outage stayed green. At most one message per
+     * lookup; absent means no sink (tests that do not care).
+     */
+    readonly warn?: (message: string) => void;
+}
+/** Why no session could be named. The panel turns each into its own sentence. */
+type ExecutorSessionResolution = {
+    readonly status: 'resolved';
+    readonly sessionId: string;
+    readonly candidatesRead: number;
+} | {
+    readonly status: 'never-dispatched';
+} | {
+    readonly status: 'not-found';
+} | {
+    readonly status: 'unsupported';
+    readonly error: string;
+};
+/**
+ * Worst-case number of session LOGS one click may read.
+ *
+ * The three candidate filters (parent, id shape, time window) are metadata and free; this bounds the
+ * part that opens stored logs. A miss over more than this many candidates inside one node's own time
+ * window is not a lookup problem — the owner simply ran many sessions while this node was alive —
+ * and the bound is what keeps a click from turning into a scan of the whole corpus.
+ */
+export declare const RESOLVE_READ_BUDGET = 8;
+/**
+ * Slack around a node's own time window, in ms. Both ends exist for the same reason: the node
+ * record and the session header are written by different code, so clocks a second or two apart
+ * would otherwise hide the very session being looked for.
+ *
+ * Both margins are small BECAUSE of what they bound. The START is the node's creation, and the
+ * session that ran it is created at (or within seconds of) the dispatch that stamped the record.
+ * The END is the node's last movement, and the last attempt was dispatched BEFORE it — a wide
+ * trailing margin would only re-admit the owner's later, unrelated work, which is exactly what the
+ * time clause exists to keep out of the read budget.
+ */
+export declare const WINDOW_BEFORE_MS = 120000;
+export declare const WINDOW_AFTER_MS = 120000;
+/**
+ * Resolve one node's executor session from stored sessions, or say why not.
+ *
+ * Order of the answer: a node whose `attempts` is 0 is `never-dispatched` (nothing ever ran it, so
+ * there is nothing to look for — and the panel must be able to say that instead of "it may have
+ * been cleaned up"); a host without `sessionQuery` is `unsupported` (a real deployment can be
+ * headless, and the panel must say so instead of crashing); otherwise the filtered candidates are
+ * read newest-first until one matches or the budget is spent.
+ *
+ * A spent budget with no match splits in two, and the split is the point: if at least ONE candidate
+ * was read successfully, the honest reading is `not-found` ("it was dispatched once, and the session
+ * is gone now"); if EVERY candidate we read failed, nothing was actually searched and the answer is
+ * `unsupported` carrying the first reason — a broken filter shape or a dead backend must never be
+ * dressed up as "the session was cleaned up" (W20).
+ */
+export declare function resolveExecutorSession(nodeId: string, options: ResolveExecutorSessionOptions): Promise<ExecutorSessionResolution>;
+export {};
+//# sourceMappingURL=executorSession.d.ts.map

package/lib/types/executorSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executorSession.d.ts","sourceRoot":"","sources":["../../src/executorSession.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,qGAAqG;AACrG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAChC,CAAA;CACF;AAED;;;;;;;GAOG;AACH,KAAK,kBAAkB,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpD,oGAAoG;AACpG,MAAM,WAAW,gBAAgB;IAC/B,YAAY,IAAI,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAA;IACjD,+FAA+F;IAC/F,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,kBAAkB,EAAE,GACrC,OAAO,CAAC,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAA;CACjD;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;QAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;QAC3B;;;;WAIG;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAC3B,CAAA;IACD,4EAA4E;IAC5E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,2FAA2F;IAC3F,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,SAAS,CAAA;IAC5C,uDAAuD;IACvD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAC1C;AAED,iFAAiF;AACjF,KAAK,yBAAyB,GAC1B;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,GACvC;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAE9D;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,IAAI,CAAA;AAEpC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gBAAgB,SAAU,CAAA;AACvC,eAAO,MAAM,eAAe,SAAU,CAAA;AAmItC;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,yBAAyB,CAAC,CAoDpC"}

package/lib/types/faces.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The two tool faces, split so neither caller carries the other's tools: an executor's
+ * rides `toolFilter.deny` on dispatch, the owner's is applied at `agent/created` and in the
+ * assembly waterfall. Hiding is usability only — the refusals stay the boundary.
+ * @module @avantf/dsh-mission/faces
+ */
+export declare const OWNER_TOOL_DENY: readonly string[];
+/**
+ * Everything an executor must not hold, grouped by WHY it is dangerous here:
+ *
+ * - `subagent` / `subagent_fork` start mission the TREE cannot see (no node, no result, no convergence),
+ *   and `send_message` delivers into sessions outside this mission — the owner's included, which is how an
+ *   executor would report around the tree instead of through `submit_mission`.
+ * - `create_goal` / `get_goal` / `update_goal` are the OWNER's: an executor that can read or rewrite
+ *   the goal it is judged against is answering to a different objective than the one the tree
+ *   dispatched, and `dsh-tool-goal`'s static section rides the owner's preset into the executor
+ *   (the Known limit at the end of `prompt.ts` records that residue).
+ * - the last six are the owner's mission-tree face; an executor touches the tree only through
+ *   `note_mission` / `decompose_mission` / `submit_mission`.
+ *
+ * Only `subagent` / `subagent_fork` actually SPAWN a session — the rest are refusals of access, not
+ * of spawning, and the comment here used to claim otherwise for all six.
+ *
+ * `note_mission` is deliberately absent — `decompose_mission` needs it.
+ */
+export declare const WORKER_TOOL_DENY: readonly string[];
+export declare function visibleTo<T extends {
+    readonly name: string;
+}>(tools: readonly T[], hidden: readonly string[]): T[];
+//# sourceMappingURL=faces.d.ts.map

package/lib/types/faces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"faces.d.ts","sourceRoot":"","sources":["../../src/faces.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAI5C,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAa7C,CAAA;AAED,wBAAgB,SAAS,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC3D,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,MAAM,EAAE,SAAS,MAAM,EAAE,GACxB,CAAC,EAAE,CAGL"}