@deepseek-harness-tui/dsh-tui 0.14.1 → 0.15.0

package/lib/types/adapter/spec/tui-contributions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tui-contributions.d.ts","sourceRoot":"","sources":["../../../../src/adapter/spec/tui-contributions.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,cAAc,kCAAkC,CAAA;AAChD,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,yBAAyB,CAAA;AAEhC,eAAO,MAAM,yBAAyB,qBAAqB,CAAA;AAE3D,oEAAoE;AACpE,eAAO,MAAM,0BAA0B;;;EAAkB,CAAA"}
+{"version":3,"file":"tui-contributions.d.ts","sourceRoot":"","sources":["../../../../src/adapter/spec/tui-contributions.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,cAAc,kCAAkC,CAAA;AAChD,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAA;AAMpE,OAAO,EACL,OAAO,EACP,6BAA6B,EAC7B,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,gCAAgC,CAAA;AACvC,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,WAAW,GACZ,MAAM,gCAAgC,CAAA;AAEvC,eAAO,MAAM,yBAAyB,qBAAqB,CAAA;AAE3D,oEAAoE;AACpE,eAAO,MAAM,0BAA0B;;;EAAkB,CAAA"}

package/lib/types/adapter/spec/tui-contributions.js

@@ -10,6 +10,13 @@
 import { DECISION_EVENTS } from '#tui-profile/profile-definitions';
 export * from '#tui-profile/profile-definitions';
 export { TUI_DECISION_EVENT_NAMES, TUI_EXTENSION_PERMISSION_NAMES, } from './protocol-constants.js';
+export { BACKEND_CAPABILITY_NAMES } from './backend-capabilities.js';
+// The Backend contribution family (B-2). `profile-definitions` re-exports only
+// the registrar, and the definition itself must come from the profile module that
+// authors it — still inside the spec boundary, the one layer allowed to resolve
+// `#tui-profile/*`. The import map for this specifier already exists
+// (`package.json` `imports`); nothing new is mounted.
+export { BACKEND, BACKEND_CONFIRMATION_POLICIES, BACKEND_RESERVED_IDS, assertBackendHandler, backendExtensionDefinition, validateBackendSpec, } from '#tui-profile/tui-contributions';
 export const TUI_EXTENSION_API_VERSION = 'tui.dsh/v1alpha1';
 /** Re-exported from tui-profile; kept as a named friendly alias. */
 export const DECISION_EVENTS_COORDINATE = DECISION_EVENTS;

package/lib/types/adapter/standard/registry.d.ts

@@ -15,6 +15,12 @@ export interface SpecData {
 }
 export declare function locateSpecDir(start?: string): string | undefined;
 export declare function loadSpecData(dir?: string | undefined): SpecData | undefined;
+/**
+ * Every registry entry this host can resolve a contract reference against, in
+ * section order: imported contracts, TUI-owned protocol definitions, and the
+ * manifest extension definitions (`Backend` is the family that made this section
+ * load-bearing — a bundle's declaration is admitted against it).
+ */
 export declare function registryEntries(registry: ContractRegistry): RegistryEntry[];
 export declare function digestFile(dir: string, relative: string): `sha256:${string}`;
 /** Verify definition availability and private profile digest pins. */

package/lib/types/adapter/standard/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/adapter/standard/registry.ts"],"names":[],"mappings":"AAAA,uEAAuE;AAQvE,OAAO,KAAK,EAAE,gBAAgB,EAAmB,kBAAkB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAEtG,eAAO,MAAM,gBAAgB,6CAA6C,CAAA;AAC1E,wDAAwD;AACxD,eAAO,MAAM,eAAe,gBAAgB,CAAA;AAE5C,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,WAAW,EAAE,kBAAkB,CAAA;IAC/B,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAC/B,CAAA;CACF;AASD,wBAAgB,aAAa,CAAC,KAAK,GAAE,MAAgD,GAAG,MAAM,GAAG,SAAS,CASzG;AAiFD,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,GAAG,SAA2B,GAAG,QAAQ,GAAG,SAAS,CAiB5F;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,gBAAgB,GAAG,aAAa,EAAE,CAI3E;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,MAAM,EAAE,CAE5E;AAED,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,EAAE,CAuCvD;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,EAAE,CA2C/D"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/adapter/standard/registry.ts"],"names":[],"mappings":"AAAA,uEAAuE;AAQvE,OAAO,KAAK,EAAE,gBAAgB,EAAmB,kBAAkB,EAAwB,aAAa,EAAE,MAAM,YAAY,CAAA;AAE5H,eAAO,MAAM,gBAAgB,6CAA6C,CAAA;AAC1E,wDAAwD;AACxD,eAAO,MAAM,eAAe,gBAAgB,CAAA;AAE5C,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,WAAW,EAAE,kBAAkB,CAAA;IAC/B,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAC/B,CAAA;CACF;AASD,wBAAgB,aAAa,CAAC,KAAK,GAAE,MAAgD,GAAG,MAAM,GAAG,SAAS,CASzG;AAgGD,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,GAAG,SAA2B,GAAG,QAAQ,GAAG,SAAS,CAiB5F;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,gBAAgB,GAAG,aAAa,EAAE,CAG3E;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,MAAM,EAAE,CAE5E;AAED,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,EAAE,CAuDvD;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,EAAE,CAyD/D"}

package/lib/types/adapter/standard/registry.js

@@ -34,7 +34,7 @@ function isRecord(value) {
 }
 function soundEntry(value, privateDefinition) {
     if (!isRecord(value) || typeof value.name !== 'string' || value.name === ''
-        || (value.kind !== 'capability' && value.kind !== 'event'))
+        || (value.kind !== 'capability' && value.kind !== 'event' && value.kind !== 'extension'))
         return false;
     if (!isRecord(value.coordinates)
         || typeof value.coordinates.apiVersion !== 'string' || value.coordinates.apiVersion === ''
@@ -51,6 +51,16 @@ function soundEntry(value, privateDefinition) {
     }
     return typeof value.package === 'string' && /^@dsh-std\/[a-z0-9][a-z0-9-]*$/u.test(value.package);
 }
+/**
+ * An `extensions` entry is either imported (`authority: 'dsh-std'`, identified
+ * by its package) or TUI-owned (identified by its pinned profile) — the same
+ * split `imports` vs `definitions` makes, and the same one the profile's own
+ * conformance runner applies. Anything that is not explicitly dsh-std's must
+ * satisfy the TUI-owned shape, so an entry cannot dodge both.
+ */
+function soundExtension(value) {
+    return soundEntry(value, !(isRecord(value) && value.authority === 'dsh-std'));
+}
 function structurallySound(data) {
     if (!isRecord(data.registry)
         || data.registry.profileVersion !== EXPECTED_PROFILE_VERSION
@@ -60,6 +70,7 @@ function structurallySound(data) {
         || data.registry.std.manifestVersion !== EXPECTED_STD_MANIFEST_VERSION
         || !Array.isArray(data.registry.imports)
         || !Array.isArray(data.registry.definitions)
+        || !Array.isArray(data.registry.extensions)
         || !Array.isArray(data.registry.facetApiVersions)
         || data.registry.facetApiVersions.length === 0
         || !data.registry.facetApiVersions.every(version => typeof version === 'string'
@@ -71,7 +82,9 @@ function structurallySound(data) {
         return false;
     if (!data.registry.definitions.every(entry => soundEntry(entry, true)))
         return false;
-    const entries = [...data.registry.imports, ...data.registry.definitions];
+    if (!data.registry.extensions.every(soundExtension))
+        return false;
+    const entries = [...data.registry.imports, ...data.registry.definitions, ...data.registry.extensions];
     const names = new Set();
     const coordinates = new Set();
     for (const entry of entries) {
@@ -82,7 +95,9 @@ function structurallySound(data) {
         if (coordinates.has(key))
             return false;
         coordinates.add(key);
-        if ('authority' in entry && !entry.coordinates.apiVersion.startsWith('tui.dsh/'))
+        // Only this profile's own entries must live in the private protocol group;
+        // an imported extension names a dsh-std coordinate (`workspace.dsh/…`).
+        if (entry.authority === 'dsh-tui' && !entry.coordinates.apiVersion.startsWith('tui.dsh/'))
             return false;
     }
     if (!isRecord(data.permissions)
@@ -138,10 +153,15 @@ export function loadSpecData(dir = locateSpecDir()) {
         return undefined;
     }
 }
+/**
+ * Every registry entry this host can resolve a contract reference against, in
+ * section order: imported contracts, TUI-owned protocol definitions, and the
+ * manifest extension definitions (`Backend` is the family that made this section
+ * load-bearing — a bundle's declaration is admitted against it).
+ */
 export function registryEntries(registry) {
-    return Array.isArray(registry.imports) && Array.isArray(registry.definitions)
-        ? [...registry.imports, ...registry.definitions]
-        : [];
+    const section = (value) => Array.isArray(value) ? value : [];
+    return [...section(registry.imports), ...section(registry.definitions), ...section(registry.extensions)];
 }
 export function digestFile(dir, relative) {
     return `sha256:${createHash('sha256').update(readFileSync(join(dir, relative))).digest('hex')}`;
@@ -155,12 +175,16 @@ export function verifyRegistry(data) {
         || !Array.isArray(registry.definitions)) {
         return ['registry imports/definitions are malformed'];
     }
+    // `structurallySound()` requires the section; a hand-built `SpecData` (gates,
+    // fixtures) may omit it, and an absent section is an empty one.
+    const extensions = Array.isArray(registry.extensions) ? registry.extensions : [];
     const names = new Set();
     const coordinates = new Set();
-    const { protocols } = getAdmissionCatalog();
-    for (const raw of [...registry.imports, ...registry.definitions]) {
+    const { protocols, manifests } = getAdmissionCatalog();
+    for (const raw of [...registry.imports, ...registry.definitions, ...extensions]) {
         const privateDefinition = registry.definitions.includes(raw);
-        if (!soundEntry(raw, privateDefinition)) {
+        const extension = extensions.includes(raw);
+        if (!soundEntry(raw, extension ? !(isRecord(raw) && raw.authority === 'dsh-std') : privateDefinition)) {
             failures.push('registry entry is malformed');
             continue;
         }
@@ -172,11 +196,23 @@ export function verifyRegistry(data) {
         if (coordinates.has(key))
             failures.push(`${key}: duplicate registry coordinate`);
         coordinates.add(key);
-        if ('authority' in entry && !entry.coordinates.apiVersion.startsWith('tui.dsh/')) {
+        if ('authority' in entry && entry.authority === 'dsh-tui' && !entry.coordinates.apiVersion.startsWith('tui.dsh/')) {
             failures.push(`${key}: dsh-tui definition must use the private protocol group`);
         }
-        if (!protocols.understands(entry.coordinates))
+        if (extension) {
+            // A manifest extension definition is published by the *manifest* catalog,
+            // never by the protocol catalog. Only an entry with a pinned profile is
+            // this host's own and must therefore resolve: an imported one names a
+            // dsh-std package this profile may not install (today `@dsh-std/workspace`),
+            // and dropping the whole descriptor over a definition the host does not
+            // ship — and never reads — would be a false alarm.
+            if ('profile' in entry && manifests.extension(entry.coordinates) === undefined) {
+                failures.push(`${key}: manifest extension definition unavailable`);
+            }
+        }
+        else if (!protocols.understands(entry.coordinates)) {
             failures.push(`${key}: ProtocolCatalog definition unavailable`);
+        }
         if ('profile' in entry) {
             let actual;
             try {
@@ -199,15 +235,24 @@ export function verifyContractProfiles(data) {
         'errors', 'concurrency', 'timeout', 'cleanup', 'privacyClass', 'securityBoundary',
     ];
     const failures = [];
-    if (!isRecord(data?.registry)
-        || !Array.isArray(data.registry.definitions)) {
+    const registry = data?.registry;
+    if (!isRecord(data?.registry) || !Array.isArray(registry?.definitions)) {
         return ['registry definitions are malformed'];
     }
-    for (const entry of data.registry.definitions) {
-        if (!soundEntry(entry, true)) {
+    const extensions = Array.isArray(registry.extensions) ? registry.extensions : [];
+    // TUI-owned extension profiles are held to the same ten-point shape as the
+    // protocol definitions: `Backend`'s contract profile is the pinned description
+    // of a contribution family third parties write against (W-2).
+    const ownedProfiles = [
+        ...data.registry.definitions,
+        ...extensions.filter(extension => isRecord(extension) && 'profile' in extension),
+    ];
+    for (const raw of ownedProfiles) {
+        if (!soundEntry(raw, true)) {
             failures.push('registry definition is malformed');
             continue;
         }
+        const entry = raw;
         let profile;
         try {
             const loaded = loadJson(data.dir, entry.profile);
@@ -236,6 +281,11 @@ export function verifyContractProfiles(data) {
         if (!('operations' in profile) || profile.securityBoundary !== false) {
             failures.push(`${entry.name}: capability boundary is incomplete`);
         }
+        // The section is what selects the reader (manifest definition vs protocol
+        // definition), so a profile may not disagree with it.
+        if (extensions.includes(entry) && profile.kind !== 'extension') {
+            failures.push(`${entry.name}: extension definition profile must declare kind "extension"`);
+        }
     }
     return failures;
 }

package/lib/types/adapter/standard/tui-extension.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tui-extension.d.ts","sourceRoot":"","sources":["../../../../src/adapter/standard/tui-extension.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAO7D,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,eAAe,EACf,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAA;AAErC,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,eAAe,CAAA;IAC1B,SAAS,EAAE,yBAAyB,CAAA;CACrC;AAmBD;0EAC0E;AAC1E,wBAAgB,mBAAmB,IAAI,gBAAgB,CAGtD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,gBAAgB,CAEzD"}
+{"version":3,"file":"tui-extension.d.ts","sourceRoot":"","sources":["../../../../src/adapter/standard/tui-extension.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAO7D,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,eAAe,EACf,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAA;AAErC,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,eAAe,CAAA;IAC1B,SAAS,EAAE,yBAAyB,CAAA;CACrC;AAyBD;0EAC0E;AAC1E,wBAAgB,mBAAmB,IAAI,gBAAgB,CAGtD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,gBAAgB,CAEzD"}

package/lib/types/adapter/standard/tui-extension.js

@@ -12,7 +12,7 @@ import { register as registerCommand } from '@dsh-std/command';
 import { register as registerMessages } from '@dsh-std/messages';
 import { register as registerPresentation } from '@dsh-std/presentation';
 import { register as registerStorage } from '@dsh-std/storage';
-import { registerProfileProtocols } from '../spec/tui-contributions.js';
+import { registerProfileProtocols, registerTuiContributionExtensions } from '../spec/tui-contributions.js';
 export { TUI_EXTENSION_API_VERSION, DECISION_EVENTS_COORDINATE, DECISION_EVENTS, TUI_DECISION_EVENT_NAMES, TUI_EXTENSION_PERMISSION_NAMES, decisionEventsDefinition, profileDefinitions, registerProfileProtocols, tuiChannelDefinition, TUI_CHANNEL, TUI_CHANNEL_FEATURES, TUI_CHANNEL_WIRE_REVISION, } from '../spec/tui-contributions.js';
 /** Build a fresh catalog. This is intentionally not exported as the
  * production entry point; production callers must use `getAdmissionCatalog()`.
@@ -26,6 +26,12 @@ function buildAdmissionCatalog() {
     registerMessages(protocols);
     registerPresentation(protocols);
     registerProfileProtocols(protocols);
+    // The manifest extension catalog every `x-dsh-tui` contribution is validated
+    // against (W-2). Without it a bundle's SettingsSection / Scene / Backend
+    // declaration has no definition to resolve, so the family could never be
+    // admitted by a third party. Registering it here — the one assembly point of
+    // the canonical catalog, built lazily on first use — adds no startup ordering.
+    registerTuiContributionExtensions(manifests);
     return { protocols, manifests };
 }
 let canonicalAdmissionCatalog;

package/lib/types/adapter/standard/types.d.ts

@@ -81,7 +81,9 @@ export interface PermissionRegistry {
 interface RegistryEntryBase {
     name: string;
     coordinates: ContractCoordinate;
-    kind: 'capability' | 'event';
+    /** What the entry registers: a contract capability, an event point, or a
+     *  manifest extension definition (`SettingsSection` / `Scene` / `Backend` …). */
+    kind: 'capability' | 'event' | 'extension';
     permissions: string[];
     eventEnvelope?: string;
 }
@@ -103,6 +105,13 @@ export interface ContractRegistry {
     };
     imports: ImportedRegistryEntry[];
     definitions: PrivateRegistryEntry[];
+    /**
+     * Manifest extension definitions, both imported and TUI-owned (W-2). The
+     * section is what a contribution family is *published* from: `Backend` lives
+     * here, which is why the registry reader, the descriptor's supported-contract
+     * derivation and the admission gates all read it (`src/adapter/standard/registry.ts`).
+     */
+    extensions: RegistryEntry[];
     facetApiVersions: string[];
 }
 //# sourceMappingURL=types.d.ts.map

package/lib/types/adapter/standard/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/adapter/standard/types.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE,OAAO,KAAK,EAAE,cAAc,IAAI,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AACjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAEhF,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAA;AAE/C,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,eAAe,GAAG,kBAAkB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAA;AAE9E,iEAAiE;AACjE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1D,MAAM,MAAM,cAAc,GAAG,sBAAsB,CAAA;AAEnD,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,YAAY,MAAM,EAAE,CAAA;CAAE,GACpD;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,UAAU,MAAM,EAAE,CAAA;CAAE,CAAA;AAE9D,MAAM,WAAW,YAAa,SAAQ,kBAAkB;IACtD,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,UAAU,EAAE,sBAAsB,CAAA;IAClC,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,kCAAkC,CAAA;IAC3C,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,SAAS,EAAE,YAAY,EAAE,CAAA;IACzB,OAAO,EAAE;QACP,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAA;QAC1C,YAAY,EAAE,MAAM,CAAA;QACpB,QAAQ,EAAE,OAAO,CAAA;QACjB,YAAY,CAAC,EAAE,OAAO,CAAA;KACvB,CAAA;IACD,UAAU,EAAE,oBAAoB,CAAA;IAChC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,EAAE,YAAY,CAAA;CAAE,GAC1B;IAAE,QAAQ,EAAE,qBAAqB,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9D;IAAE,QAAQ,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAAE,GACtF;IACE,QAAQ,EAAE,UAAU,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;CAC5B,GACD;IAAE,QAAQ,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE3E,eAAO,MAAM,uBAAuB,mNAQ1B,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE3E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,GAAG,MAAM,CAAA;IACzB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,WAAW,EAAE,eAAe,EAAE,CAAA;CAC/B;AAED,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,kBAAkB,CAAA;IAC/B,IAAI,EAAE,YAAY,GAAG,OAAO,CAAA;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,OAAO,EAAE,YAAY,MAAM,EAAE,CAAA;CAC9B;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,SAAS,EAAE,SAAS,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,UAAU,MAAM,EAAE,CAAA;CAChC;AAED,MAAM,MAAM,aAAa,GAAG,qBAAqB,GAAG,oBAAoB,CAAA;AAExE,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAA;IACtB,GAAG,EAAE;QACH,UAAU,EAAE,MAAM,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;QACjB,eAAe,EAAE,MAAM,CAAA;KACxB,CAAA;IACD,OAAO,EAAE,qBAAqB,EAAE,CAAA;IAChC,WAAW,EAAE,oBAAoB,EAAE,CAAA;IACnC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/adapter/standard/types.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE,OAAO,KAAK,EAAE,cAAc,IAAI,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AACjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAEhF,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAA;AAE/C,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,eAAe,GAAG,kBAAkB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAA;AAE9E,iEAAiE;AACjE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1D,MAAM,MAAM,cAAc,GAAG,sBAAsB,CAAA;AAEnD,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,YAAY,MAAM,EAAE,CAAA;CAAE,GACpD;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,UAAU,MAAM,EAAE,CAAA;CAAE,CAAA;AAE9D,MAAM,WAAW,YAAa,SAAQ,kBAAkB;IACtD,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,UAAU,EAAE,sBAAsB,CAAA;IAClC,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,kCAAkC,CAAA;IAC3C,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,SAAS,EAAE,YAAY,EAAE,CAAA;IACzB,OAAO,EAAE;QACP,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAA;QAC1C,YAAY,EAAE,MAAM,CAAA;QACpB,QAAQ,EAAE,OAAO,CAAA;QACjB,YAAY,CAAC,EAAE,OAAO,CAAA;KACvB,CAAA;IACD,UAAU,EAAE,oBAAoB,CAAA;IAChC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,EAAE,YAAY,CAAA;CAAE,GAC1B;IAAE,QAAQ,EAAE,qBAAqB,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9D;IAAE,QAAQ,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAAE,GACtF;IACE,QAAQ,EAAE,UAAU,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;CAC5B,GACD;IAAE,QAAQ,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE3E,eAAO,MAAM,uBAAuB,mNAQ1B,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE3E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,GAAG,MAAM,CAAA;IACzB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,WAAW,EAAE,eAAe,EAAE,CAAA;CAC/B;AAED,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,kBAAkB,CAAA;IAC/B;qFACiF;IACjF,IAAI,EAAE,YAAY,GAAG,OAAO,GAAG,WAAW,CAAA;IAC1C,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,OAAO,EAAE,YAAY,MAAM,EAAE,CAAA;CAC9B;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,SAAS,EAAE,SAAS,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,UAAU,MAAM,EAAE,CAAA;CAChC;AAED,MAAM,MAAM,aAAa,GAAG,qBAAqB,GAAG,oBAAoB,CAAA;AAExE,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAA;IACtB,GAAG,EAAE;QACH,UAAU,EAAE,MAAM,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;QACjB,eAAe,EAAE,MAAM,CAAA;KACxB,CAAA;IACD,OAAO,EAAE,qBAAqB,EAAE,CAAA;IAChC,WAAW,EAAE,oBAAoB,EAAE,CAAA;IACnC;;;;;OAKG;IACH,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B"}

package/lib/types/adapter/upstream/host-descriptor-driver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-descriptor-driver.d.ts","sourceRoot":"","sources":["../../../../src/adapter/upstream/host-descriptor-driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAUjE,OAAO,KAAK,EAAE,SAAS,EAAqB,MAAM,gBAAgB,CAAA;AAClE,OAAO,KAAK,EAAE,cAAc,EAAuB,MAAM,aAAa,CAAA;AA8BtE;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,CAwCtE;AAkYD;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,OAAO,GAAG,mBAAmB,EAAE,CAejF;AAED;;;;;;;;GAQG;AACH,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAgElG;AAED,uDAAuD;AACvD,eAAO,MAAM,oBAAoB,EAAE,cAclC,CAAA"}
+{"version":3,"file":"host-descriptor-driver.d.ts","sourceRoot":"","sources":["../../../../src/adapter/upstream/host-descriptor-driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAUjE,OAAO,KAAK,EAAE,SAAS,EAAqB,MAAM,gBAAgB,CAAA;AAClE,OAAO,KAAK,EAAE,cAAc,EAAuB,MAAM,aAAa,CAAA;AA8BtE;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,CAwCtE;AA+aD;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,OAAO,GAAG,mBAAmB,EAAE,CAejF;AAED;;;;;;;;GAQG;AACH,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA0ElG;AAED,uDAAuD;AACvD,eAAO,MAAM,oBAAoB,EAAE,cAclC,CAAA"}

package/lib/types/adapter/upstream/host-descriptor-driver.js

@@ -88,6 +88,10 @@ function contractServiceName(coordinate) {
         case 'LocalStorage': return 'tuiPluginStorage';
         case 'MessageObserver': return 'tuiMessageObserver';
         case 'DecisionEvents': return 'tuiPluginHost';
+        // The `Backend` contribution family is not a plugin-visible service; the
+        // host row that owns the descriptor owns its admission machine too, and
+        // reports it through the read-only probe below (W-2).
+        case 'Backend': return 'tuiPluginHost';
         default: return '';
     }
 }
@@ -382,12 +386,44 @@ async function probeMessageLive(service) {
         };
     }
 }
+/** The backend admission machine probe (W-2).
+ *
+ * `Backend` is a manifest extension family, not a plugin-visible service, and the
+ * contract may only be published when the host can actually admit a
+ * contribution. The host row that owns the descriptor reports that itself
+ * (`ctx.tuiPluginHost.probeBackendAdmission()`), read-only and side-effect free —
+ * the same shape as `probeDecisionEvents()`, which likewise reports topology the
+ * service row alone cannot prove. */
+function probeBackendAdmissionMachine(service) {
+    if (!hasFunction(service, 'probeBackendAdmission')) {
+        return { evidence: [], missing: ['tuiPluginHost.probeBackendAdmission()'] };
+    }
+    try {
+        const result = service.probeBackendAdmission();
+        if (result?.verdict !== 'compatible') {
+            throw new Error('backend admission probe did not admit a contribution declaration');
+        }
+        return {
+            evidence: [
+                probeEvidence('tuiPluginHost.probeBackendAdmission()', `backend admission machine answered ${String(result.verdict)} (${String(result.registered)} registered, ${String(result.offered)} offered)`),
+            ],
+            missing: [],
+        };
+    }
+    catch (error) {
+        return {
+            evidence: [probeEvidence('tuiPluginHost.probeBackendAdmission()', errorText(error))],
+            missing: ['tuiPluginHost.probeBackendAdmission()'],
+        };
+    }
+}
 function probeForCoordinate(service, coordinate) {
     switch (coordinate.kind) {
         case 'Command': return probeCommand(service);
         case 'LocalStorage': return probeStorage(service);
         case 'MessageObserver': return probeMessageObserver(service);
         case 'DecisionEvents': return probeDecisionEvents(service);
+        case 'Backend': return probeBackendAdmissionMachine(service);
         default: return { evidence: [], missing: [] };
     }
 }
@@ -442,6 +478,12 @@ function contractDetection(ctx, coordinate) {
             else
                 evidence.push(methodEvidence(serviceName, 'subscribeDecision'));
             break;
+        case 'Backend':
+            if (!hasFunction(service, 'probeBackendAdmission'))
+                missing.push('tuiPluginHost.probeBackendAdmission()');
+            else
+                evidence.push(methodEvidence(serviceName, 'probeBackendAdmission'));
+            break;
     }
     const probe = probeForCoordinate(service, coordinate);
     evidence.push(...probe.evidence);
@@ -578,6 +620,16 @@ export async function refreshHostCapabilityLifecycles(ctx) {
                     missing.push(...probe.missing);
                 }
                 break;
+            case 'Backend':
+                // The same probe as the synchronous projection: a completed refresh
+                // replaces the whole lifecycle set, so leaving `Backend` out here would
+                // publish it before the first refresh and drop it right after.
+                {
+                    const probe = probeBackendAdmissionMachine(service);
+                    evidence.push(...probe.evidence);
+                    missing.push(...probe.missing);
+                }
+                break;
             default:
                 break;
         }

package/lib/types/agent/backend-manifest.d.ts

@@ -0,0 +1,152 @@
+/**
+ * A backend's static description — the runtime form of the `manifest.ts` that
+ * every `src/backends/<id>/` directory ships (roadmap Stage A / P0).
+ *
+ * It is **pure data**: the build-time index (`scripts/gen-backend-index.mjs`)
+ * imports each manifest statically, so a manifest may import nothing at all
+ * except types, plus the single allowlisted version constant inside its own
+ * backend (the Claude SDK pin — see `scripts/verify-backend-registry.ts`).
+ * The backend implementation stays behind the registry's lazy `load()`.
+ *
+ * This module sits in the neutral domain layer (`src/agent/**`) on purpose: the
+ * host registry, the boundary gate and the UI all need these shapes, and none
+ * of them may import a concrete backend.
+ */
+import type { BackendInstallRecipe } from './backend.js';
+/**
+ * How a backend is named in the kernel picker (`backend-registry` D2).
+ *
+ * `key` is the host vocabulary (`t(key)`) and is reserved for the backends that
+ * ship inside this package (`inTree`): a plugin writing
+ * `{ kind: 'key', key: 'kernel-label-dsh' }` would otherwise be able to claim a
+ * first-party name, so `registerBackend()` rejects that combination outright.
+ *
+ * `literal` is external text: it is rendered as-is, **never** through `t()` and
+ * never into the message catalog, and it is treated as untrusted input (width
+ * truncation with the repo's terminal helpers, no template expansion).
+ */
+export type KernelLabel = {
+    readonly kind: 'key';
+    readonly key: string;
+} | {
+    readonly kind: 'literal';
+    readonly text: string;
+};
+/** One backend's static facts. See the P0 checklist §3 for the field rationale. */
+export interface BackendManifest {
+    readonly id: string;
+    /** Full name: picker rows (`KernelPicker`) — `key` for in-tree, `literal` for plugins. */
+    readonly label: KernelLabel;
+    /** Short brand name (the launchpad corner plate, the handoff notices): never
+     *  localized, and short enough for a narrow terminal (the full name is 40
+     *  columns wide and would push the cwd plate off the bottom edge). */
+    readonly shortLabel: string;
+    /** Product a version belongs to (`claude-code v2.1.0`); absent = bare version. */
+    readonly product?: string;
+    /** Ships inside this package (dsh / claude / codex): the only source allowed
+     *  to use `label.kind === 'key'` and a `native.<key>` channel. */
+    readonly inTree: boolean;
+    /** Always selectable and not an `AgentBackend` at all (only `dsh` today:
+     *  `buildKernelCatalog`'s `selectable` and the dsh version row need it).
+     *  Distinct from `inTree` — claude and codex are in-tree but optional. */
+    readonly alwaysAvailable?: true;
+    /** Module export holding the `AgentBackend` (default `backend`; claude's
+     *  barrel exports `claudeBackend`). Absent = this entry has no `load`. */
+    readonly backendExport?: string;
+    /**
+     * Module export closing this backend's **module-level / process-wide**
+     * resource pool (codex: `closeAllCodexHubs`). Session-scoped resources
+     * (child processes, transcript handles) belong to `session.dispose()`, which
+     * the fiber owns — never here.
+     *
+     * The registry only remembers the hook of an entry it actually loaded, so
+     * "never loaded" also means "never imported" and "never closed" (D4).
+     */
+    readonly unloadExport?: string;
+    /** Gate derivation only (backend scope, `verify-adapter-boundary`): vendor
+     *  package prefixes this backend may import (claude: `@anthropic-ai/`). */
+    readonly vendorPackages?: readonly string[];
+    /** Gate derivation only: the `native.<key>` slot this backend owns. **Absent
+     *  means "this backend does not use a native channel"** — claude must stay
+     *  absent (its channel is not declared today, and deriving one would widen
+     *  the boundary gate). */
+    readonly nativeKey?: string;
+    /**
+     * The session capabilities this backend's handler actually serves, in the
+     * `SessionCapabilities` vocabulary (`src/agent/capabilities.ts` —
+     * `BackendHost`-visible subset; `src/adapter/spec/backend-capabilities.ts` is
+     * the spec-plane copy the admission compares against). Declaring it is how a
+     * backend says "these are the optional surfaces I answer to" *before* it runs;
+     * a name this host does not know degrades the admission (`compatible_degraded`)
+     * rather than refusing it (§0 D-3).
+     *
+     * The declaration must **cover** what the session actually serves (the set the
+     * runtime hands back is a subset of this list), and the conformance fixture
+     * checks the other direction at the seam: its `open()` must not answer with a
+     * capability key outside what it declared
+     * (`scripts/verify-backend-contribution.ts`). Absent = "nothing declared", which
+     * the projection turns into the empty list.
+     */
+    readonly capabilities?: readonly string[];
+    /**
+     * The host permissions this backend asks for, by the host's own vocabulary
+     * (`registry/permissions-0.1.json`). Today every in-tree backend declares
+     * `[]`: none of the eight existing permission names describes what a backend
+     * actually needs (spawning a child process, reading its own prefs, network) —
+     * those are optional host capabilities on `BackendHost`, feature-detected, not
+     * grants (D-3). A name with no grant lands the entry in `waiting_authorization`,
+     * an unknown name degrades it; neither is a silent "usable".
+     */
+    readonly grants?: readonly string[];
+    /**
+     * What the host's install wizard would install, and with which of the host's
+     * executors (§6 item 12). Declaring it is how a backend says "there is
+     * something to install for me": no backend id is privileged any longer, and
+     * codex's "there is nothing to install, the user's own binary is the
+     * dependency" is the absent case — still a first-class row (a hint, no fake
+     * button).
+     *
+     * Whether the named `executor` is one *this* host implements is a runtime
+     * question the registry answers by table lookup; an unknown value means "no
+     * install surface", never a failed registration.
+     */
+    readonly install?: BackendInstallRecipe;
+}
+/**
+ * One registry record: the manifest plus the lazy loader of its **module
+ * namespace** — not of the `AgentBackend` itself, because the registry resolves
+ * both `backendExport` and `unloadExport` from it (D4). `dsh` has no loader: it
+ * is not an `AgentBackend` (see `src/dsh-adapter/backend/session.ts`).
+ */
+export interface BackendEntry {
+    readonly manifest: BackendManifest;
+    readonly load?: () => Promise<Record<string, unknown>>;
+}
+/**
+ * The syntax every backend id must match: readable, sortable, usable as a file
+ * name. `:` is deliberately excluded — a plugin id could otherwise not become
+ * `~/.dsh-tui/backends/<id>/` on Windows (drive letters / alternate data
+ * streams), and `AgentSessionRef` disambiguation would need the full id set,
+ * which is exactly what a plugin registry cannot enumerate (P0 §5).
+ *
+ * Mirrored in `bin/dsh-tui.js`, which must work without compiled modules.
+ */
+export declare const BACKEND_ID_PATTERN: RegExp;
+declare const validatedBackendId: unique symbol;
+/**
+ * A backend id that passed the syntax gate. The brand is what keeps an
+ * *unvalidated* string out of `backendId:sessionId` references and
+ * `~/.dsh-tui/backends/<id>/` paths at compile time — the whole point of R11.
+ *
+ * It means "validated input", not "installed": membership is a runtime question
+ * the registry answers (`parseBackendChoice`), and every caller that only has the
+ * syntax half (`kernelPrefs`' `parseBackendId`, the launcher's mirror) still gets
+ * the same protection for refs and paths, which is the part that matters there.
+ */
+export type BackendId = string & {
+    readonly [validatedBackendId]: true;
+};
+/** Whether an untrusted value may pass into a session ref, a path or a log. */
+export declare function isBackendIdSyntax(value: unknown): value is BackendId;
+export {};
+//# sourceMappingURL=backend-manifest.d.ts.map

package/lib/types/agent/backend-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-manifest.d.ts","sourceRoot":"","sources":["../../../src/agent/backend-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAExD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvD,mFAAmF;AACnF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,0FAA0F;IAC1F,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B;;0EAEsE;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,kFAAkF;IAClF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB;sEACkE;IAClE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB;;8EAE0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,CAAA;IAC/B;8EAC0E;IAC1E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B;+EAC2E;IAC3E,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C;;;8BAG0B;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAA;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CACvD;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,QAA+B,CAAA;AAE9D,OAAO,CAAC,MAAM,kBAAkB,EAAE,OAAO,MAAM,CAAA;AAE/C;;;;;;;;;GASG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAA;CAAE,CAAA;AAExE,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAEpE"}

package/lib/types/agent/backend-manifest.js

@@ -0,0 +1,14 @@
+/**
+ * The syntax every backend id must match: readable, sortable, usable as a file
+ * name. `:` is deliberately excluded — a plugin id could otherwise not become
+ * `~/.dsh-tui/backends/<id>/` on Windows (drive letters / alternate data
+ * streams), and `AgentSessionRef` disambiguation would need the full id set,
+ * which is exactly what a plugin registry cannot enumerate (P0 §5).
+ *
+ * Mirrored in `bin/dsh-tui.js`, which must work without compiled modules.
+ */
+export const BACKEND_ID_PATTERN = /^[a-z0-9][a-z0-9-]{0,31}$/u;
+/** Whether an untrusted value may pass into a session ref, a path or a log. */
+export function isBackendIdSyntax(value) {
+    return typeof value === 'string' && BACKEND_ID_PATTERN.test(value);
+}