@deepseek-harness-tui/dsh-tui 0.10.0 → 0.10.1

package/lib/types/dsh-adapter/plugin-host.d.ts

@@ -9,9 +9,11 @@
  * - `generationId` — the runtime generation id (C-050), a fresh UUID per
  *   row activation; ledger records and the Host Descriptor stamp it so
  *   effects from different process generations can never be confused.
- * - `grants` — the unified 8-permission live GrantStore (./grants.js).
- * - `hostDescriptor()` — the C-010 Host Descriptor (./host-descriptor.js),
- *   built lazily and cached; drifted contracts are dropped fail-closed.
+ * - `grants` — the unified 8-permission live GrantStore
+ *   (`../adapter/standard/grants.js`).
+ * - `hostDescriptor()` — the C-010 Host Descriptor
+ *   (`../adapter/standard/descriptor.js`), built lazily and cached; drifted
+ *   contracts are dropped fail-closed.
  * - `selfCheck()` — vendored registry + contract-profile violations
  *   (definition/profile drift, ten-point incompleteness, parity mismatches).
  * - `registerCommand(pluginCtx, definition)` — the MEDIATED command
@@ -34,17 +36,38 @@
  */
 import { Context, Service } from '@deepseek-ai/cordis';
 import type { CommandDefinition } from '@deepseek-ai/dsh-commands';
-import type { HostDescriptor } from '../plugin-spec/types.js';
-import { type GrantStore } from './grants.js';
-import { type HostDescriptorBuild } from './host-descriptor.js';
+import type { HostDescriptor } from '../adapter/standard/types.js';
+import { type HostDescriptorBuild } from '../adapter/standard/descriptor.js';
 import { type DecisionRegistrationOptions } from './decision-guard.js';
 import { type VerifiedComponentIdentity } from './component-identity.js';
+/** Caller-safe grant facade exposed through `ctx.tuiPluginHost.grants`.
+ * Unlike the internal full-parameter GrantStore, this facade derives the
+ * principal from the calling activation and never accepts a caller-supplied
+ * component/activation identity. The legacy `.corrupt` boolean is
+ * deliberately not exposed here; use `selfCheck()` / `/doctor` or host-side
+ * diagnostics for grant-file health. */
+export interface HostGrantFacade {
+    /** Evaluate a grant for the calling activation, not an arbitrary principal. */
+    allows(pluginCtx: Context, permission: string, scope: string): boolean;
+    defaultOf(permission: string): 'allow' | 'deny';
+    knownPermissions(): readonly string[];
+    /**
+     * File-change watch, used by grant-owned effects to release promptly.
+     *
+     * This is a subscribe-class adapter capability. The caller activation is
+     * required both for shadow-policy enforcement and for lifecycle binding:
+     * the returned watcher (and the underlying file poller's registration) is
+     * owned by the calling Cordis activation, so unloading that activation
+     * cannot leave the listener or the poller behind.
+     */
+    onChange(pluginCtx: Context, listener: () => void): (() => void) | undefined;
+}
 /** Public, mediated plugin-host capability. Loader-only admission remains
  * behind getHostAdmission(), which is deliberately omitted from the package
  * export surface. */
 export interface TuiPluginHost {
     readonly generationId: string;
-    readonly grants: GrantStore;
+    readonly grants: HostGrantFacade;
     hostDescriptor(): HostDescriptor;
     describe(): HostDescriptorBuild;
     subscribeDecision(pluginCtx: Context, event: string, listener: (payload: Record<string, unknown>) => unknown, options?: {
@@ -54,6 +77,8 @@ export interface TuiPluginHost {
     registerCommand(pluginCtx: Context, definition: CommandDefinition): () => void;
     registerCommand(pluginCtx: Context, contributionId: string, definition: CommandDefinition): () => void;
     selfCheck(): string[];
+    /** Read-only DecisionEvents feature probe (host/driver diagnostics). */
+    probeDecisionEvents(): readonly string[];
 }
 declare module '@deepseek-ai/cordis' {
     interface Context {
@@ -62,11 +87,21 @@ declare module '@deepseek-ai/cordis' {
 }
 /** `ctx.tuiPluginHost` — plugin-interop anchor (generation, grants, descriptor). */
 export declare class TuiPluginHostRuntime extends Service implements TuiPluginHost {
+    #private;
     /** Runtime generation id (C-050): fresh per activation of this row. */
     get generationId(): string;
-    /** Live scoped grant store; every operation observes the current file. */
-    get grants(): GrantStore;
+    /** Caller-safe grant facade; the internal full-parameter store stays
+     * host-only (see getHostGrantStore in ./host-grants.js). */
+    get grants(): HostGrantFacade;
+    /** Read-only DecisionEvents feature probe. Returns only the event names
+     * whose guard is installed in this composition. */
+    probeDecisionEvents(): readonly string[];
     constructor(ctx: Context);
+    /** @internal Start the Kernel after the whole plugin-host row (including
+     * sibling storage/observer services) is mounted. Called from `apply()`; not
+     * part of the public plugin surface. */
+    startKernelRuntime(): void;
+    private assertEffect;
     /**
      * The C-010 Host Descriptor, built lazily and cached while the
      * runtime-dependent commands capability remains unchanged.
@@ -75,15 +110,17 @@ export declare class TuiPluginHostRuntime extends Service implements TuiPluginHo
     /** The full build result (descriptor + dropped coordinates + warnings). */
     describe(): HostDescriptorBuild;
     private build;
+    private buildUnsafe;
     /**
      * Parse, project, validate, negotiate, and bind one activation's Component
      * identity before any mediated runtime capability can be used.
      */
     admit(pluginCtx: Context, source: string, options?: {
         source?: string;
-        activationId?: string;
     }): VerifiedComponentIdentity;
-    /** @internal Host loader entry; the unexported token prevents proxy calls. */
+    /** @internal Host loader entry; the unexported production token prevents
+     * proxy calls. The test token is only reachable from the test-only adapter
+     * helper, never from the package's production admission accessor. */
     admitInternal(pluginCtx: Context, source: string, options?: {
         source?: string;
         activationId?: string;
@@ -117,6 +154,12 @@ export declare class TuiPluginHostRuntime extends Service implements TuiPluginHo
      */
     selfCheck(): string[];
 }
+/** Initial host-owned Kernel refresh outcome. This is adapter-test-only
+ * readiness evidence, not a plugin capability or a Kernel control surface. */
+export interface InitialKernelRefreshResult {
+    readonly status: 'pending' | 'completed' | 'failed' | 'skipped';
+    readonly error?: string;
+}
 /**
  * Loader-only admission capability.  It is intentionally omitted from the
  * package `plugin-host` export; tests and the in-process loader can obtain it
@@ -125,12 +168,38 @@ export declare class TuiPluginHostRuntime extends Service implements TuiPluginHo
  * different manifest identity.
  */
 export interface HostAdmission {
+    admit(pluginCtx: Context, source: string, options?: {
+        source?: string;
+    }): VerifiedComponentIdentity;
+}
+/** Test-only admission accessor. Kept separate from the production
+ * `getHostAdmission` so the test-utils injection of a deterministic
+ * activationId can never be reached by production host loaders. */
+export interface HostAdmissionForTest extends HostAdmission {
     admit(pluginCtx: Context, source: string, options?: {
         source?: string;
         activationId?: string;
     }): VerifiedComponentIdentity;
 }
+/** Adapter-test-only readiness accessor. It exposes only the host-owned
+ * initial refresh promise/result; callers cannot inspect or control KernelRuntime. */
+export interface HostInitialKernelRefreshForTest {
+    result(): InitialKernelRefreshResult | undefined;
+    awaitResult(): Promise<InitialKernelRefreshResult>;
+}
+export declare function getHostInitialKernelRefreshForTest(runtime: TuiPluginHost | TuiPluginHostRuntime | undefined): HostInitialKernelRefreshForTest | undefined;
+export declare function getHostAdmissionForTest(runtime: TuiPluginHost | TuiPluginHostRuntime | undefined): HostAdmissionForTest | undefined;
 export declare function getHostAdmission(runtime: TuiPluginHost | TuiPluginHostRuntime | undefined): HostAdmission | undefined;
+/**
+ * Host-only accessor for the new Kernel HostFacade. Deliberately omitted from
+ * the public plugin-host export: HostFacade is an internal composition entry,
+ * not an external plugin API.
+ *
+ * @internal P2: the facade is now backed by the KernelRuntime's unified
+ * evidence snapshot (driver detect + live verification), not by a legacy
+ * describe() wrapper. It remains read-only and shadow-guarded.
+ */
+export declare function getHostFacade(runtime: TuiPluginHost | TuiPluginHostRuntime | undefined): import("../adapter/index.js").HostFacade | undefined;
 export declare const name = "dsh-tui-plugin-host";
 export declare function apply(ctx: Context): void;
 //# sourceMappingURL=plugin-host.d.ts.map

package/lib/types/dsh-adapter/plugin-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-host.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/plugin-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAElE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAI7D,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAiD,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAM9G,OAAO,EAKL,KAAK,2BAA2B,EACjC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAML,KAAK,yBAAyB,EAC/B,MAAM,yBAAyB,CAAA;AAGhC;;qBAEqB;AACrB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,cAAc,IAAI,cAAc,CAAA;IAChC,QAAQ,IAAI,mBAAmB,CAAA;IAC/B,iBAAiB,CACf,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,EACvD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,MAAM,OAAO,CAAA;IAChB,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,GAAG,MAAM,IAAI,CAAA;IAC9E,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,MAAM,IAAI,CAAA;IACtG,SAAS,IAAI,MAAM,EAAE,CAAA;CACtB;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,aAAa,EAAE,aAAa,CAAA;KAC7B;CACF;AAED,oFAAoF;AACpF,qBAAa,oBAAqB,SAAQ,OAAQ,YAAW,aAAa;IACxE,uEAAuE;IACvE,IAAI,YAAY,IAAI,MAAM,CAA2C;IACrE,0EAA0E;IAC1E,IAAI,MAAM,IAAI,UAAU,CAAqC;gBAEjD,GAAG,EAAE,OAAO;IAqBxB;;;OAGG;IACH,cAAc,IAAI,cAAc;IAIhC,2EAA2E;IAC3E,QAAQ,IAAI,mBAAmB;IAI/B,OAAO,CAAC,KAAK;IAyCb;;;OAGG;IACH,KAAK,CACH,SAAS,EAAE,OAAO,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAO,GACvD,yBAAyB;IAa5B,8EAA8E;IAC9E,aAAa,CACX,SAAS,EAAE,OAAO,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAO,EACxD,KAAK,CAAC,EAAE,MAAM,GACb,yBAAyB;IAqC5B;;;;;;OAMG;IACH,iBAAiB,CACf,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,EACvD,OAAO,GAAE,2BAAgC,GACxC,MAAM,OAAO;IAmDhB;;;;;;;;;;;MAWE;IACF,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAC9E,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,MAAM,IAAI;IA6FtG;;;;OAIG;IACH,SAAS,IAAI,MAAM,EAAE;CAKtB;AAwBD;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,CACH,SAAS,EAAE,OAAO,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,yBAAyB,CAAA;CAC7B;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,oBAAoB,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAUrH;AA0BD,eAAO,MAAM,IAAI,wBAAwB,CAAA;AAEzC,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAaxC"}
+{"version":3,"file":"plugin-host.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/plugin-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAElE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAclE,OAAO,EAA4E,KAAK,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAMtJ,OAAO,EAML,KAAK,2BAA2B,EACjC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAML,KAAK,yBAAyB,EAC/B,MAAM,yBAAyB,CAAA;AAKhC;;;;;wCAKwC;AACxC,MAAM,WAAW,eAAe;IAC9B,+EAA+E;IAC/E,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;IACtE,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAA;IAC/C,gBAAgB,IAAI,SAAS,MAAM,EAAE,CAAA;IACrC;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAA;CAC7E;AAED;;qBAEqB;AACrB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,cAAc,IAAI,cAAc,CAAA;IAChC,QAAQ,IAAI,mBAAmB,CAAA;IAC/B,iBAAiB,CACf,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,EACvD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,MAAM,OAAO,CAAA;IAChB,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,GAAG,MAAM,IAAI,CAAA;IAC9E,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,MAAM,IAAI,CAAA;IACtG,SAAS,IAAI,MAAM,EAAE,CAAA;IACrB,wEAAwE;IACxE,mBAAmB,IAAI,SAAS,MAAM,EAAE,CAAA;CACzC;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,aAAa,EAAE,aAAa,CAAA;KAC7B;CACF;AAED,oFAAoF;AACpF,qBAAa,oBAAqB,SAAQ,OAAQ,YAAW,aAAa;;IACxE,uEAAuE;IACvE,IAAI,YAAY,IAAI,MAAM,CAA2C;IACrE;gEAC4D;IAC5D,IAAI,MAAM,IAAI,eAAe,CA6B5B;IAED;uDACmD;IACnD,mBAAmB,IAAI,SAAS,MAAM,EAAE;gBAK5B,GAAG,EAAE,OAAO;IAyDxB;;4CAEwC;IACxC,kBAAkB,IAAI,IAAI;IA+D1B,OAAO,CAAC,YAAY;IAKpB;;;OAGG;IACH,cAAc,IAAI,cAAc;IAKhC,2EAA2E;IAC3E,QAAQ,IAAI,mBAAmB;IAK/B,OAAO,CAAC,KAAK;IAeb,OAAO,CAAC,WAAW;IA6EnB;;;OAGG;IACH,KAAK,CACH,SAAS,EAAE,OAAO,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAChC,yBAAyB;IAa5B;;yEAEqE;IACrE,aAAa,CACX,SAAS,EAAE,OAAO,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAO,EACxD,KAAK,CAAC,EAAE,MAAM,GACb,yBAAyB;IA0D5B;;;;;;OAMG;IACH,iBAAiB,CACf,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,EACvD,OAAO,GAAE,2BAAgC,GACxC,MAAM,OAAO;IAoDhB;;;;;;;;;;;MAWE;IACF,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAC9E,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAmMtG;;;;OAIG;IACH,SAAS,IAAI,MAAM,EAAE;CAMtB;AAqBD;8EAC8E;AAC9E,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAA;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AA2BD;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,CACH,SAAS,EAAE,OAAO,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,yBAAyB,CAAA;CAC7B;AAED;;mEAEmE;AACnE,MAAM,WAAW,oBAAqB,SAAQ,aAAa;IACzD,KAAK,CACH,SAAS,EAAE,OAAO,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,yBAAyB,CAAA;CAC7B;AAED;sFACsF;AACtF,MAAM,WAAW,+BAA+B;IAC9C,MAAM,IAAI,0BAA0B,GAAG,SAAS,CAAA;IAChD,WAAW,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAA;CACnD;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,aAAa,GAAG,oBAAoB,GAAG,SAAS,GACxD,+BAA+B,GAAG,SAAS,CAmB7C;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,aAAa,GAAG,oBAAoB,GAAG,SAAS,GACxD,oBAAoB,GAAG,SAAS,CAUlC;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,oBAAoB,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAUrH;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,oBAAoB,GAAG,SAAS,wDAiBtF;AA0BD,eAAO,MAAM,IAAI,wBAAwB,CAAA;AAEzC,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAiBxC"}