@deepseek-harness-tui/dsh-tui 0.10.0 → 0.10.2

package/lib/types/{plugin-spec → adapter/standard}/registry.js

@@ -3,7 +3,8 @@ import { createHash } from 'node:crypto';
 import { existsSync, readFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { createAdmissionCatalog } from './tui-extension.js';
+import { getAdmissionCatalog } from './tui-extension.js';
+import { EXPECTED_PERMISSIONS } from '../spec/protocol-constants.js';
 export const DSH_STD_REVISION = '614dfa1ac168db79fcf4577cf0ebb34e2e3b944b';
 export const ECOSYSTEM_SPEC_REVISION = 'd28c267fe7fd775428ec2dccd65b0b7efd4dacee';
 const REGISTRY_FILE = join('registry', 'registry-0.15.json');
@@ -12,19 +13,6 @@ const EXPECTED_STD_REPOSITORY = 'https://github.com/Yan-Zero/dsh-std';
 const EXPECTED_STD_SUBMODULE = 'vendor/dsh-std';
 const EXPECTED_STD_MANIFEST_VERSION = '0.15';
 const EXPECTED_PERMISSION_REGISTRY_VERSION = '0.1';
-// The permission registry is policy, not merely input data. Keep the
-// admission defaults and scopes pinned to the reviewed dsh-ecosystem-spec
-// revision so a locally modified copy cannot silently widen a capability.
-const EXPECTED_PERMISSIONS = Object.freeze([
-    { name: 'storage.local.read', default: 'deny', revocable: true, scope: 'plugin namespace' },
-    { name: 'storage.local.write', default: 'deny', revocable: true, scope: 'plugin namespace' },
-    { name: 'commands.invoke', default: 'allow', revocable: true, scope: 'declared command id' },
-    { name: 'messages.observe.read', default: 'deny', revocable: true, scope: 'message observation scope' },
-    { name: 'session.input.intercept', default: 'deny', revocable: true, scope: 'decision event subscription' },
-    { name: 'session.rewind.intercept', default: 'deny', revocable: true, scope: 'decision event subscription' },
-    { name: 'session.switch.intercept', default: 'deny', revocable: true, scope: 'decision event subscription' },
-    { name: 'session.compact.intercept', default: 'deny', revocable: true, scope: 'decision event subscription' },
-]);
 export function locateSpecDir(start = dirname(fileURLToPath(import.meta.url))) {
     let dir = start;
     for (let index = 0; index < 8; index++) {
@@ -168,7 +156,7 @@ export function verifyRegistry(data) {
     }
     const names = new Set();
     const coordinates = new Set();
-    const { protocols } = createAdmissionCatalog();
+    const { protocols } = getAdmissionCatalog();
     for (const raw of [...registry.imports, ...registry.definitions]) {
         const privateDefinition = registry.definitions.includes(raw);
         if (!soundEntry(raw, privateDefinition)) {

package/lib/types/adapter/standard/schema-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-check.d.ts","sourceRoot":"","sources":["../../../../src/adapter/standard/schema-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAqCzC;;;GAGG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAE,UAAmB,EAAE,KAAK,SAAM,GAAG,IAAI,CA4G5G"}

package/lib/types/{plugin-spec → adapter/standard}/schema-check.js

@@ -120,8 +120,10 @@ export function check(value, schema, rootSchema = schema, where = '$') {
         if (schema.maxItems !== undefined && value.length > schema.maxItems) {
             throw new Error(`${where}: too many items`);
         }
-        for (let i = 0; i < value.length; i++) {
-            check(value[i], schema.items, rootSchema, `${where}[${i}]`);
+        if (schema.items !== undefined) {
+            for (let i = 0; i < value.length; i++) {
+                check(value[i], schema.items, rootSchema, `${where}[${i}]`);
+            }
         }
         if (schema.uniqueItems === true) {
             const encoded = value.map(canonicalJson);

package/lib/types/adapter/standard/tui-extension.d.ts

@@ -0,0 +1,25 @@
+/**
+ * dsh-TUI private protocol registration on the shared dsh-std catalog.
+ *
+ * Private protocol definitions are NOT authored here. The canonical
+ * dsh-ecosystem-spec definitions are loaded through `src/adapter/spec/`; this
+ * module only registers public dsh-std protocols and delegates the private
+ * TUI profile definitions to the spec boundary.
+ */
+import { ProtocolCatalog } from '@dsh-std/core';
+import { ManifestDefinitionCatalog } from '@dsh-std/manifest';
+export { TUI_EXTENSION_API_VERSION, DECISION_EVENTS_COORDINATE, DECISION_EVENTS, TUI_DECISION_EVENT_NAMES, TUI_EXTENSION_PERMISSION_NAMES, decisionEventsDefinition, profileDefinitions, registerProfileProtocols, tuiChannelDefinition, TUI_CHANNEL, TUI_CHANNEL_FEATURES, TUI_CHANNEL_WIRE_REVISION, } from '../spec/tui-contributions.js';
+export interface AdmissionCatalog {
+    protocols: ProtocolCatalog;
+    manifests: ManifestDefinitionCatalog;
+}
+/** Process-level canonical ProtocolCatalog / admission core. Every production
+ * admission, descriptor and negotiation path must share this instance. */
+export declare function getAdmissionCatalog(): AdmissionCatalog;
+/** Backward-compatible factory retained as a long-term compatibility face
+ * for existing callers. It now returns the same process-level canonical
+ * catalog rather than allocating a new one, so no second admission core can
+ * appear in production. OWNER: dsh-tui adapter. UNTIL: no scheduled removal.
+ */
+export declare function createAdmissionCatalog(): AdmissionCatalog;
+//# sourceMappingURL=tui-extension.d.ts.map

package/lib/types/adapter/standard/tui-extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui-extension.d.ts","sourceRoot":"","sources":["../../../../src/adapter/standard/tui-extension.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAO7D,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,eAAe,EACf,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAA;AAErC,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,eAAe,CAAA;IAC1B,SAAS,EAAE,yBAAyB,CAAA;CACrC;AAmBD;0EAC0E;AAC1E,wBAAgB,mBAAmB,IAAI,gBAAgB,CAGtD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,gBAAgB,CAEzD"}

package/lib/types/adapter/standard/tui-extension.js

@@ -0,0 +1,45 @@
+/**
+ * dsh-TUI private protocol registration on the shared dsh-std catalog.
+ *
+ * Private protocol definitions are NOT authored here. The canonical
+ * dsh-ecosystem-spec definitions are loaded through `src/adapter/spec/`; this
+ * module only registers public dsh-std protocols and delegates the private
+ * TUI profile definitions to the spec boundary.
+ */
+import { ProtocolCatalog } from '@dsh-std/core';
+import { ManifestDefinitionCatalog } from '@dsh-std/manifest';
+import { register as registerCommand } from '@dsh-std/command';
+import { register as registerMessages } from '@dsh-std/messages';
+import { register as registerPresentation } from '@dsh-std/presentation';
+import { register as registerStorage } from '@dsh-std/storage';
+import { registerProfileProtocols } from '../spec/tui-contributions.js';
+export { TUI_EXTENSION_API_VERSION, DECISION_EVENTS_COORDINATE, DECISION_EVENTS, TUI_DECISION_EVENT_NAMES, TUI_EXTENSION_PERMISSION_NAMES, decisionEventsDefinition, profileDefinitions, registerProfileProtocols, tuiChannelDefinition, TUI_CHANNEL, TUI_CHANNEL_FEATURES, TUI_CHANNEL_WIRE_REVISION, } from '../spec/tui-contributions.js';
+/** Build a fresh catalog. This is intentionally not exported as the
+ * production entry point; production callers must use `getAdmissionCatalog()`.
+ * Keeping the builder private prevents a second canonical catalog from being
+ * created by product code. */
+function buildAdmissionCatalog() {
+    const protocols = new ProtocolCatalog({ name: 'dsh-tui-admission', version: '0.15' });
+    const manifests = new ManifestDefinitionCatalog();
+    registerCommand(protocols, manifests);
+    registerStorage(protocols);
+    registerMessages(protocols);
+    registerPresentation(protocols);
+    registerProfileProtocols(protocols);
+    return { protocols, manifests };
+}
+let canonicalAdmissionCatalog;
+/** Process-level canonical ProtocolCatalog / admission core. Every production
+ * admission, descriptor and negotiation path must share this instance. */
+export function getAdmissionCatalog() {
+    canonicalAdmissionCatalog ??= buildAdmissionCatalog();
+    return canonicalAdmissionCatalog;
+}
+/** Backward-compatible factory retained as a long-term compatibility face
+ * for existing callers. It now returns the same process-level canonical
+ * catalog rather than allocating a new one, so no second admission core can
+ * appear in production. OWNER: dsh-tui adapter. UNTIL: no scheduled removal.
+ */
+export function createAdmissionCatalog() {
+    return getAdmissionCatalog();
+}

package/lib/types/{plugin-spec → adapter/standard}/types.d.ts

@@ -1,13 +1,7 @@
 /** Types shared by the dsh-std admission adapter and the TUI runtime. */
 import type { PluginManifest as StandardPluginManifest } from '@dsh-std/manifest';
-export interface ContractCoordinate {
-    apiVersion: string;
-    kind: string;
-}
-export interface ContractRef extends ContractCoordinate {
-    optional?: boolean;
-    fallback?: string;
-}
+import type { ContractCoordinate, ContractRef } from '../kernel/driver-types.js';
+export type { ContractCoordinate, ContractRef };
 export interface ManifestPermission {
     name: string;
     scope: string;
@@ -17,6 +11,7 @@ export type SubscriptionRef = ContractCoordinate & {
     scope?: string;
 } | string;
 /** Community v0.15 is parsed and frozen by @dsh-std/manifest. */
+export type { ComponentManifest } from '@dsh-std/manifest';
 export type PluginManifest = StandardPluginManifest;
 export type HostContractDefinition = {
     source: 'dsh-std';
@@ -110,5 +105,4 @@ export interface ContractRegistry {
     definitions: PrivateRegistryEntry[];
     facetApiVersions: string[];
 }
-export {};
 //# sourceMappingURL=types.d.ts.map

package/lib/types/adapter/standard/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/adapter/standard/types.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE,OAAO,KAAK,EAAE,cAAc,IAAI,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AACjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAEhF,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAA;AAE/C,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,eAAe,GAAG,kBAAkB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAA;AAE9E,iEAAiE;AACjE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1D,MAAM,MAAM,cAAc,GAAG,sBAAsB,CAAA;AAEnD,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,YAAY,MAAM,EAAE,CAAA;CAAE,GACpD;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,UAAU,MAAM,EAAE,CAAA;CAAE,CAAA;AAE9D,MAAM,WAAW,YAAa,SAAQ,kBAAkB;IACtD,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,UAAU,EAAE,sBAAsB,CAAA;IAClC,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,kCAAkC,CAAA;IAC3C,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,SAAS,EAAE,YAAY,EAAE,CAAA;IACzB,OAAO,EAAE;QACP,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAA;QAC1C,YAAY,EAAE,MAAM,CAAA;QACpB,QAAQ,EAAE,OAAO,CAAA;QACjB,YAAY,CAAC,EAAE,OAAO,CAAA;KACvB,CAAA;IACD,UAAU,EAAE,oBAAoB,CAAA;IAChC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,EAAE,YAAY,CAAA;CAAE,GAC1B;IAAE,QAAQ,EAAE,qBAAqB,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9D;IAAE,QAAQ,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAAE,GACtF;IACE,QAAQ,EAAE,UAAU,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;CAC5B,GACD;IAAE,QAAQ,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE3E,eAAO,MAAM,uBAAuB,mNAQ1B,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE3E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,GAAG,MAAM,CAAA;IACzB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,WAAW,EAAE,eAAe,EAAE,CAAA;CAC/B;AAED,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,kBAAkB,CAAA;IAC/B,IAAI,EAAE,YAAY,GAAG,OAAO,CAAA;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,OAAO,EAAE,YAAY,MAAM,EAAE,CAAA;CAC9B;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,SAAS,EAAE,SAAS,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,UAAU,MAAM,EAAE,CAAA;CAChC;AAED,MAAM,MAAM,aAAa,GAAG,qBAAqB,GAAG,oBAAoB,CAAA;AAExE,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAA;IACtB,GAAG,EAAE;QACH,UAAU,EAAE,MAAM,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;QACjB,eAAe,EAAE,MAAM,CAAA;KACxB,CAAA;IACD,OAAO,EAAE,qBAAqB,EAAE,CAAA;IAChC,WAAW,EAAE,oBAAoB,EAAE,CAAA;IACnC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B"}

package/lib/types/{plugin-spec → adapter/standard}/validate.d.ts

@@ -1,12 +1,12 @@
 /** Semantic validation layered on the official manifest parser/projection. */
-import { createAdmissionCatalog } from './tui-extension.js';
+import { getAdmissionCatalog } from './tui-extension.js';
 import type { ContractCoordinate, ContractRegistry, HostDescriptor, PermissionRegistry, PluginManifest, RegistryEntry, SubscriptionRef } from './types.js';
 export interface ContractIndex {
     registry: ContractRegistry;
     permissions: PermissionRegistry;
     facetApiVersions: string[];
-    protocols: ReturnType<typeof createAdmissionCatalog>['protocols'];
-    manifests: ReturnType<typeof createAdmissionCatalog>['manifests'];
+    protocols: ReturnType<typeof getAdmissionCatalog>['protocols'];
+    manifests: ReturnType<typeof getAdmissionCatalog>['manifests'];
     lookupContract(coordinate: ContractCoordinate): RegistryEntry | undefined;
     resolveContractRef(ref: ContractCoordinate): {
         entry: RegistryEntry | null;

package/lib/types/adapter/standard/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../../src/adapter/standard/validate.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAG9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAGxD,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,eAAe,EAChB,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,WAAW,EAAE,kBAAkB,CAAA;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,SAAS,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,WAAW,CAAC,CAAA;IAC9D,SAAS,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,WAAW,CAAC,CAAA;IAC9D,cAAc,CAAC,UAAU,EAAE,kBAAkB,GAAG,aAAa,GAAG,SAAS,CAAA;IACzE,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,GAAG;QAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;QAAC,mBAAmB,EAAE,OAAO,CAAA;KAAE,CAAA;IAC1G,mBAAmB,CAAC,GAAG,EAAE,eAAe,GAAG,aAAa,CAAA;CACzD;AAGD,eAAO,MAAM,OAAO,GAAI,YAAY,MAAM,KAAG,MAAwC,CAAA;AAErF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,GAAG,aAAa,CAsC9G;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CA6DnF;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI,CA4B7E"}

package/lib/types/{plugin-spec → adapter/standard}/validate.js

@@ -1,6 +1,6 @@
 /** Semantic validation layered on the official manifest parser/projection. */
 import { projectManifest } from '@dsh-std/manifest';
-import { createAdmissionCatalog } from './tui-extension.js';
+import { getAdmissionCatalog } from './tui-extension.js';
 import { registryEntries } from './registry.js';
 import { INTERCEPT_PERMISSIONS, normalizePermissionScope } from './permission-scope.js';
 const coordinateKey = (coordinate) => `${coordinate.apiVersion}#${coordinate.kind}`;
@@ -9,7 +9,7 @@ export function createContractIndex(registry, permissions) {
     const entries = registryEntries(registry);
     const byCoordinate = new Map(entries.map(entry => [coordinateKey(entry.coordinates), entry]));
     const byName = new Map(entries.map(entry => [entry.name, entry]));
-    const { protocols, manifests } = createAdmissionCatalog();
+    const { protocols, manifests } = getAdmissionCatalog();
     const resolveContractRef = (ref) => {
         const exact = byCoordinate.get(coordinateKey(ref));
         if (exact !== undefined)
@@ -60,16 +60,17 @@ export function validatePlugin(index, manifest) {
     const commandIds = new Set(manifest.contributes.commands.map(command => command.id));
     const requiresDecisionEvents = manifest.requires.contracts.some(requirement => requirement.kind === 'DecisionEvents'
         && groupOf(requirement.apiVersion) === groupOf('tui.dsh/v1alpha1'));
-    const capabilityForPermission = {
-        'commands.invoke': { apiVersion: 'commands.dsh/v1alpha1', kind: 'Command' },
-        'storage.local.read': { apiVersion: 'storage.dsh/v1alpha1', kind: 'LocalStorage' },
-        'storage.local.write': { apiVersion: 'storage.dsh/v1alpha1', kind: 'LocalStorage' },
-        'messages.observe.read': { apiVersion: 'messages.dsh/v1alpha1', kind: 'MessageObserver' },
-        'session.input.intercept': { apiVersion: 'tui.dsh/v1alpha1', kind: 'DecisionEvents' },
-        'session.rewind.intercept': { apiVersion: 'tui.dsh/v1alpha1', kind: 'DecisionEvents' },
-        'session.switch.intercept': { apiVersion: 'tui.dsh/v1alpha1', kind: 'DecisionEvents' },
-        'session.compact.intercept': { apiVersion: 'tui.dsh/v1alpha1', kind: 'DecisionEvents' },
-    };
+    // Derive the permission -> capability map from the machine-readable registry
+    // instead of maintaining a second handwritten copy in the TUI product.
+    const capabilityByPermission = new Map();
+    for (const entry of registryEntries(index.registry)) {
+        for (const permission of entry.permissions) {
+            capabilityByPermission.set(permission, {
+                apiVersion: entry.coordinates.apiVersion,
+                kind: entry.coordinates.kind,
+            });
+        }
+    }
     for (const permission of manifest.permissions) {
         if (!knownPermissions.has(permission.name)) {
             throw new Error(`permission is not admitted by the TUI profile: ${permission.name}`);
@@ -83,7 +84,7 @@ export function validatePlugin(index, manifest) {
         if (INTERCEPT_PERMISSIONS.has(permission.name) && !requiresDecisionEvents) {
             throw new Error(`${permission.name} requires tui.dsh/v1alpha1#DecisionEvents`);
         }
-        const capability = capabilityForPermission[permission.name];
+        const capability = capabilityByPermission.get(permission.name);
         // An otherwise valid contract reference may use an unregistered version
         // from the same protocol group. Keep that manifest structurally valid so
         // negotiation can return UNKNOWN_PROTOCOL_VERSION rather than letting the

package/lib/types/adapter/upstream/channel-driver.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Upstream driver for the TUI live Channel.
+ *
+ * The live Channel is a TUI host-internal stateful object, not a DSH service.
+ * The driver mounts the five Channel Host Ports (projection/actions/state/
+ * plugins/transcript) over the channel registered for the composition root.
+ * It is deliberately read-only at mount time: the HostFacade shadow wrapper
+ * gates every action method before a caller can mutate the Channel.
+ *
+ * Publication is feature-level and honest:
+ * - read-only projection/state/transcript features become live after a real
+ *   snapshot/row probe;
+ * - action/plugin mutation methods stay degraded because they cannot be
+ *   safely auto-reversed on a live TUI.
+ */
+import type { CapabilityLifecycle } from '../kernel/lifecycle.js';
+import type { Detection } from './detection.js';
+import type { UpstreamDriver } from './driver.js';
+export declare function detectChannelCapability(ctx: unknown): Detection;
+export declare function verifyChannelLive(ctx: unknown): Promise<CapabilityLifecycle[]>;
+export declare const channelDriver: UpstreamDriver;
+//# sourceMappingURL=channel-driver.d.ts.map

package/lib/types/adapter/upstream/channel-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-driver.d.ts","sourceRoot":"","sources":["../../../../src/adapter/upstream/channel-driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAEjE,OAAO,KAAK,EAAE,SAAS,EAAqB,MAAM,gBAAgB,CAAA;AAClE,OAAO,KAAK,EAAE,cAAc,EAAuB,MAAM,aAAa,CAAA;AAgDtE,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,CAuB/D;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAE9E;AAuTD,eAAO,MAAM,aAAa,EAAE,cAuB3B,CAAA"}