@dsh-enhanced/assistant-verifier 0.1.48 → 0.1.53

package/lib/plugin-behavior-runner.js

@@ -0,0 +1,516 @@
+import { createHash } from 'node:crypto';
+import { IsolatedVerifierRunner, NativeMacVerifierRunner } from '@dsh-enhanced/assistant-isolation';
+import { behaviorNativeRuntimeDigest, NATIVE_BEHAVIOR_BOUNDARY, validatePluginBehaviorRunnerConfig } from './plugin-behavior-config.js';
+export { NATIVE_BEHAVIOR_BOUNDARY, validatePluginBehaviorRunnerConfig, validatePluginBehaviorDeploymentConfig } from './plugin-behavior-config.js';
+import { nativeBehaviorFiles } from './native-behavior-artifact.js';
+import { NATIVE_BEHAVIOR_SOURCE } from './native-behavior-worker.js';
+const MAX_PACK_BYTES = 512 * 1024;
+const MAX_OPERATION_BYTES = 64 * 1024;
+const MAX_WORKER_OUTPUT_BYTES = 64 * 1024;
+const SHA256 = /^[a-f0-9]{64}$/u;
+const SAFE_ID = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,95}$/u;
+const SAFE_TOOL = /^[a-z][a-z0-9_-]{0,95}$/u;
+const COMMAND = 'exec /usr/bin/env LD_PRELOAD=/opt/dsh-plugin-verifier/parent-protect.so /usr/local/bin/node --disable-sigusr1 /opt/dsh-plugin-verifier/worker.mjs';
+const BOUNDARY = 'process-seccomp-v1';
+function canonicalJson(value) {
+    try {
+        if (!deepJson(value))
+            return undefined;
+        const serialized = JSON.stringify(value);
+        return serialized === undefined ? undefined : serialized;
+    }
+    catch {
+        return undefined;
+    }
+}
+function deepJson(value, seen = new Set()) {
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+        return true;
+    if (typeof value === 'number')
+        return Number.isFinite(value);
+    if (typeof value !== 'object' || seen.has(value))
+        return false;
+    seen.add(value);
+    if (Array.isArray(value)) {
+        const valid = value.every(item => deepJson(item, seen));
+        seen.delete(value);
+        return valid;
+    }
+    if (Object.getPrototypeOf(value) !== Object.prototype)
+        return false;
+    const valid = Object.keys(value).every(key => {
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        return descriptor !== undefined && Object.hasOwn(descriptor, 'value') && deepJson(descriptor.value, seen);
+    });
+    seen.delete(value);
+    return valid;
+}
+function validOperation(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const operation = value;
+    if (operation.kind === 'discover')
+        return Object.keys(operation).length === 1;
+    if (operation.kind !== 'invoke' || typeof operation.schemaDigest !== 'string' || !SHA256.test(operation.schemaDigest)
+        || !Array.isArray(operation.calls) || operation.calls.length < 1 || operation.calls.length > 8
+        || Object.keys(operation).length !== 3)
+        return false;
+    const ids = new Set();
+    for (const call of operation.calls) {
+        if (!call || typeof call !== 'object' || Object.keys(call).length !== 3
+            || !SAFE_ID.test(call.id) || !SAFE_TOOL.test(call.toolName) || ids.has(call.id) || !deepJson(call.arguments))
+            return false;
+        ids.add(call.id);
+    }
+    return true;
+}
+function validObservation(value, operation, sha256) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const record = value;
+    if (record.schemaVersion !== 2 || record.boundary !== BOUNDARY || record.status !== 'observed' || record.artifactSha256 !== sha256
+        || record.quiescent !== true || !SHA256.test(record.schemaDigest)
+        || !record.environment || typeof record.environment !== 'object')
+        return false;
+    const environment = record.environment;
+    if (['node', 'cordis', 'tools', 'systemPrompt'].some(key => typeof environment[key] !== 'string'
+        || environment[key].length > 80))
+        return false;
+    if (operation.kind === 'discover') {
+        if (!Array.isArray(record.schemas) || record.schemas.length < 1 || record.schemas.length > 64 || record.calls !== undefined)
+            return false;
+        if (createHash('sha256').update(JSON.stringify(record.schemas)).digest('hex') !== record.schemaDigest)
+            return false;
+        const names = new Set();
+        for (const schema of record.schemas) {
+            if (!schema || typeof schema !== 'object' || !SAFE_TOOL.test(schema.name ?? '')
+                || names.has(schema.name))
+                return false;
+            names.add(schema.name);
+        }
+    }
+    else if (!Array.isArray(record.calls) || record.calls.length !== operation.calls.length
+        || record.schemaDigest !== operation.schemaDigest || record.schemas !== undefined
+        || record.calls.some((call, index) => !call || typeof call !== 'object'
+            || call.id !== operation.calls[index].id
+            || call.toolName !== operation.calls[index].toolName
+            || !Object.hasOwn(call, 'result')))
+        return false;
+    return true;
+}
+/** Host-only behavior observation. The candidate and worker receive no oracle or promotion authority. */
+export class PluginBehaviorRunner {
+    #runner;
+    #native;
+    #runtimeDigest;
+    #authorityDigest;
+    #environment;
+    #modulesPath;
+    constructor(input) {
+        const config = validatePluginBehaviorRunnerConfig(input);
+        this.#authorityDigest = config.authorityDigest;
+        this.#native = 'backend' in config && config.backend === 'macos-seatbelt';
+        if (this.#native) {
+            const native = config;
+            this.#runtimeDigest = behaviorNativeRuntimeDigest(native.runtime);
+            this.#environment = { node: native.runtime.versions.node, cordis: native.runtime.versions.cordis,
+                tools: native.runtime.versions.tools, systemPrompt: native.runtime.versions.systemPrompt };
+            this.#modulesPath = native.runtime.modulesPath;
+            this.#runner = new NativeMacVerifierRunner({ ...native, source: NATIVE_BEHAVIOR_SOURCE });
+        }
+        else
+            this.#runner = new IsolatedVerifierRunner({ ...config, command: COMMAND });
+    }
+    async run(input) {
+        const artifactSha256 = Buffer.isBuffer(input.artifact)
+            ? createHash('sha256').update(input.artifact).digest('hex') : '';
+        const unknown = (reason, quiescent = false, jobId) => ({ status: 'unknown', quiescent, artifactSha256, reason, ...(jobId ? { jobId } : {}) });
+        if (!Buffer.isBuffer(input.artifact) || input.artifact.length < 1 || input.artifact.length > MAX_PACK_BYTES)
+            return unknown('plugin-artifact-out-of-bound', true);
+        try {
+            if (!validOperation(input.operation))
+                return unknown('plugin-operation-invalid', true);
+        }
+        catch {
+            return unknown('plugin-operation-invalid', true);
+        }
+        let staged;
+        if (this.#native) {
+            try {
+                staged = nativeBehaviorFiles(input.artifact);
+            }
+            catch {
+                return unknown('plugin-artifact-invalid', true);
+            }
+        }
+        // Stable per frozen request: the durable runner must see identical bytes for a replay key.
+        // This is only frame correlation. Single-process candidate output is untrusted.
+        const nonce = this.#native ? createHash('sha256').update(JSON.stringify({ authorityDigest: this.#authorityDigest,
+            key: input.key, artifactSha256, operation: input.operation })).digest('hex') : undefined;
+        const request = this.#native
+            ? { schemaVersion: 1, nonce, artifactSha256, entry: staged.entry,
+                modulesPath: this.#modulesPath, operation: input.operation }
+            : { schemaVersion: 1, sha256: artifactSha256, sizeBytes: input.artifact.length, operation: input.operation };
+        const stdin = canonicalJson(request);
+        if (stdin === undefined || Buffer.byteLength(stdin) > MAX_OPERATION_BYTES)
+            return unknown('plugin-operation-out-of-bound', true);
+        let isolated;
+        try {
+            isolated = this.#native
+                ? await this.#runner.run(input.key, staged.files, stdin, input.signal)
+                : await this.#runner.run(input.key, input.artifact.toString('base64'), stdin, input.signal);
+        }
+        catch {
+            return unknown('plugin-runner-unavailable');
+        }
+        if (isolated.status !== 'succeeded' || isolated.quiescent !== true || isolated.exitCode !== 0)
+            return unknown(isolated.reason ?? 'plugin-runner-unsettled', isolated.quiescent, isolated.jobId);
+        if (Buffer.byteLength(isolated.stdout) > MAX_WORKER_OUTPUT_BYTES || !isolated.stdout.endsWith('\n')
+            || isolated.stdout.indexOf('\n') !== isolated.stdout.length - 1)
+            return unknown('plugin-worker-output-invalid', true, isolated.jobId);
+        try {
+            const value = JSON.parse(isolated.stdout.slice(0, -1));
+            if (this.#native) {
+                if (!value || typeof value !== 'object' || Array.isArray(value))
+                    return unknown('plugin-worker-output-invalid', true, isolated.jobId);
+                const frame = value;
+                const header = frame.wireVersion === 1 && frame.nonce === nonce && frame.artifactSha256 === artifactSha256
+                    && frame.operationDigest === createHash('sha256').update(JSON.stringify(input.operation)).digest('hex');
+                if (!header)
+                    return unknown('plugin-worker-output-invalid', true, isolated.jobId);
+                if (frame.status === 'unknown' && typeof frame.reason === 'string' && frame.reason.length > 0
+                    && frame.reason.length <= 128 && Object.keys(frame).length === 6)
+                    return unknown(frame.reason, true, isolated.jobId);
+                if (frame.status !== 'result' || !SHA256.test(frame.schemaDigest)
+                    || Object.keys(frame).length !== 7)
+                    return unknown('plugin-worker-observation-invalid', true, isolated.jobId);
+                if (input.operation.kind === 'discover') {
+                    if (!Array.isArray(frame.schemas) || frame.schemas.length < 1 || frame.schemas.length > 64
+                        || frame.calls !== undefined || createHash('sha256').update(JSON.stringify(frame.schemas)).digest('hex') !== frame.schemaDigest)
+                        return unknown('plugin-worker-observation-invalid', true, isolated.jobId);
+                    const names = new Set();
+                    for (const schema of frame.schemas) {
+                        const name = schema?.name;
+                        if (typeof name !== 'string' || !SAFE_TOOL.test(name) || names.has(name))
+                            return unknown('plugin-worker-observation-invalid', true, isolated.jobId);
+                        names.add(name);
+                    }
+                }
+                else {
+                    const calls = input.operation.calls;
+                    if (frame.schemaDigest !== input.operation.schemaDigest || !Array.isArray(frame.calls)
+                        || frame.calls.length !== calls.length || frame.schemas !== undefined
+                        || frame.calls.some((call, index) => !call || typeof call !== 'object'
+                            || call.id !== calls[index].id
+                            || call.toolName !== calls[index].toolName
+                            || !Object.hasOwn(call, 'result')))
+                        return unknown('plugin-worker-observation-invalid', true, isolated.jobId);
+                }
+                return { status: 'observed', quiescent: true, artifactSha256, jobId: isolated.jobId,
+                    boundary: NATIVE_BEHAVIOR_BOUNDARY, runtimeDigest: this.#runtimeDigest, environment: this.#environment,
+                    schemaDigest: frame.schemaDigest,
+                    ...(input.operation.kind === 'discover' ? { schemas: frame.schemas }
+                        : { calls: frame.calls }) };
+            }
+            if (value !== null && typeof value === 'object' && !Array.isArray(value)) {
+                const record = value;
+                if (record.schemaVersion === 2 && record.boundary === BOUNDARY && record.status === 'unknown'
+                    && typeof record.reason === 'string' && record.reason.length > 0 && record.reason.length <= 128
+                    && Object.keys(record).length === 4)
+                    return unknown(record.reason, true, isolated.jobId);
+            }
+            if (!validObservation(value, input.operation, artifactSha256))
+                return unknown('plugin-worker-observation-invalid', true, isolated.jobId);
+            const observation = value;
+            return { status: 'observed', quiescent: true, artifactSha256, jobId: isolated.jobId,
+                environment: observation.environment, schemaDigest: observation.schemaDigest,
+                ...(input.operation.kind === 'discover' ? { schemas: observation.schemas } : { calls: observation.calls }) };
+        }
+        catch {
+            return unknown('plugin-worker-output-invalid', true, isolated.jobId);
+        }
+    }
+    close() { return this.#runner.close(); }
+}
+/* DSH_PLUGIN_VERIFIER_WORKER_START
+// Copied verbatim into the manifest-only image by build-plugin-verifier-image.mjs.
+// This code executes inside the isolation worker, never in the Host process.
+import { createHash } from 'node:crypto'
+import { spawn } from 'node:child_process'
+import { existsSync, mkdirSync, readFileSync, symlinkSync, unlinkSync, writeFileSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { gunzipSync } from 'node:zlib'
+
+const limit = 512 * 1024
+const safeId = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,95}$/
+const safeTool = /^[a-z][a-z0-9_-]{0,95}$/
+const shaPattern = /^[a-f0-9]{64}$/
+const fail = reason => { throw new Error(reason) }
+const digest = bytes => createHash('sha256').update(bytes).digest('hex')
+const text = bytes => {
+  const end = bytes.indexOf(0)
+  const sliced = end < 0 ? bytes : bytes.subarray(0, end)
+  const value = sliced.toString('utf8')
+  if (!Buffer.from(value, 'utf8').equals(sliced)) fail('invalid-utf8-tar')
+  return value
+}
+const octal = bytes => {
+  const raw = text(bytes).trim()
+  if (!/^[0-7]+$/.test(raw)) fail('invalid-tar-number')
+  const value = Number.parseInt(raw, 8)
+  if (!Number.isSafeInteger(value)) fail('invalid-tar-number')
+  return value
+}
+const parsePax = bytes => {
+  const values = {}
+  for (let at = 0; at < bytes.length;) {
+    const space = bytes.indexOf(32, at)
+    if (space < 0) fail('invalid-pax')
+    const size = Number(bytes.subarray(at, space).toString('ascii'))
+    if (!Number.isSafeInteger(size) || size <= space - at + 2 || at + size > bytes.length || bytes[at + size - 1] !== 10) fail('invalid-pax')
+    const line = bytes.subarray(space + 1, at + size - 1).toString('utf8')
+    const equal = line.indexOf('=')
+    if (equal < 1 || Object.hasOwn(values, line.slice(0, equal))) fail('invalid-pax')
+    values[line.slice(0, equal)] = line.slice(equal + 1)
+    at += size
+  }
+  return values
+}
+function extract(bytes) {
+  let tar
+  try { tar = gunzipSync(bytes, { maxOutputLength: 16 * 1024 * 1024 }) }
+  catch { fail('invalid-or-oversized-tgz') }
+  const destination = '/workspace/plugin'
+  mkdirSync(destination, { mode: 0o700 })
+  let at = 0, extension = {}, global = {}, count = 0
+  const seen = new Set()
+  while (at + 512 <= tar.length) {
+    const header = tar.subarray(at, at + 512)
+    if (header.every(byte => byte === 0)) break
+    const expectedChecksum = octal(header.subarray(148, 156))
+    let checksum = 0
+    for (let index = 0; index < 512; index += 1) checksum += index >= 148 && index < 156 ? 32 : header[index]
+    if (expectedChecksum !== checksum) fail('invalid-tar-checksum')
+    const size = octal(header.subarray(124, 136))
+    const end = at + 512 + size
+    if (!Number.isSafeInteger(end) || end > tar.length || ++count > 256) fail('invalid-tar-member')
+    const kind = String.fromCharCode(header[156] || 48)
+    if (kind === 'g' || kind === 'x') {
+      if (size > 1_048_576) fail('oversized-tar-extension')
+      const parsed = parsePax(tar.subarray(at + 512, end))
+      if (kind === 'g') global = { ...global, ...parsed }
+      else extension = parsed
+    } else {
+      const attributes = { ...global, ...extension }
+      if (Object.keys(attributes).some(key => !['path', 'mtime', 'atime', 'ctime', 'comment', 'uid', 'gid', 'uname', 'gname', 'mode'].includes(key))) fail('unsupported-tar-extension')
+      const prefix = text(header.subarray(345, 500))
+      const rawName = prefix ? prefix + '/' + text(header.subarray(0, 100)) : text(header.subarray(0, 100))
+      const raw = attributes.path ?? rawName
+      const name = typeof raw === 'string' && raw.endsWith('/') ? raw.slice(0, -1) : raw
+      if (typeof name !== 'string' || name.length > 256
+        || name !== 'package' && (!name.startsWith('package/')
+          || name.slice(8).split('/').some(part => !part || part === '.' || part === '..' || !/^[A-Za-z0-9._-]+$/.test(part)))) fail('unsafe-tar-path')
+      if (seen.has(name) || (kind !== '0' && kind !== '5' && kind !== '7')
+        || name === 'package' && kind !== '5') fail('duplicate-or-unsafe-tar-entry')
+      seen.add(name)
+      const target = join(destination, name)
+      if (resolve(target) !== target || target !== join(destination, 'package') && !target.startsWith(destination + '/')) fail('unsafe-tar-path')
+      if (kind === '5') mkdirSync(target, { recursive: true, mode: 0o700 })
+      else {
+        mkdirSync(dirname(target), { recursive: true, mode: 0o700 })
+        writeFileSync(target, tar.subarray(at + 512, end), { flag: 'wx', mode: 0o600 })
+      }
+      extension = {}
+    }
+    at = end + (512 - size % 512) % 512
+  }
+  if (at + 1024 > tar.length || !tar.subarray(at).every(byte => byte === 0)) fail('invalid-tar-trailer')
+  if (!seen.has('package/package.json')) fail('missing-package-manifest')
+  const manifest = JSON.parse(readFileSync(join(destination, 'package/package.json'), 'utf8'))
+  if (!manifest || typeof manifest !== 'object' || typeof manifest.main !== 'string'
+    || !/^\.\/lib\/[A-Za-z0-9._/-]+\.js$/.test(manifest.main)
+    || manifest.main.split('/').includes('..')) fail('invalid-package-entry')
+  const entry = join(destination, 'package', manifest.main)
+  if (!existsSync(entry)) fail('missing-package-entry')
+  symlinkSync('/opt/dsh-plugin-verifier/node_modules', join(destination, 'package/node_modules'))
+  return entry
+}
+function validOperation(value) {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return false
+  if (value.kind === 'discover') return Object.keys(value).length === 1
+  if (value.kind !== 'invoke' || Object.keys(value).length !== 3 || !shaPattern.test(value.schemaDigest)
+    || !Array.isArray(value.calls) || value.calls.length < 1 || value.calls.length > 8) return false
+  const ids = new Set()
+  for (const call of value.calls) {
+    if (!call || typeof call !== 'object' || Object.keys(call).length !== 3
+      || !safeId.test(call.id) || !safeTool.test(call.toolName) || ids.has(call.id)) return false
+    ids.add(call.id)
+  }
+  return true
+}
+function version(name) {
+  return JSON.parse(readFileSync('/opt/dsh-plugin-verifier/node_modules/' + name + '/package.json', 'utf8')).version
+}
+const unknown = reason => ({ schemaVersion: 2, boundary: 'process-seccomp-v1', status: 'unknown', reason })
+const decoded = bytes => new TextDecoder('utf-8', { fatal: true }).decode(bytes)
+function validChild(value, operation) {
+  if (!value || typeof value !== 'object' || Array.isArray(value) || value.wireVersion !== 1) return false
+  if (value.status === 'unknown') return Object.keys(value).length === 3
+    && typeof value.reason === 'string' && value.reason.length > 0 && value.reason.length <= 128
+  if (value.status !== 'result' || !Array.isArray(value.schemas) || value.schemas.length < 1
+    || value.schemas.length > 64 || Object.keys(value).length !== (operation.kind === 'discover' ? 3 : 4)) return false
+  const names = new Set()
+  for (const schema of value.schemas) {
+    if (!schema || typeof schema !== 'object' || Array.isArray(schema)
+      || !safeTool.test(schema.name) || names.has(schema.name)) return false
+    names.add(schema.name)
+  }
+  if (operation.kind === 'discover') return value.calls === undefined
+  if (!Array.isArray(value.calls) || value.calls.length !== operation.calls.length) return false
+  for (let index = 0; index < value.calls.length; index += 1) {
+    const call = value.calls[index], requested = operation.calls[index]
+    if (!call || typeof call !== 'object' || Array.isArray(call) || Object.keys(call).length !== 3
+      || call.id !== requested.id || call.toolName !== requested.toolName || !names.has(call.toolName)
+      || !Object.hasOwn(call, 'result')) return false
+  }
+  return true
+}
+function observeChild(entry, operation) {
+  return new Promise(resolvePromise => {
+    let child
+    try {
+      child = spawn('/opt/dsh-plugin-verifier/candidate-launcher', [], {
+        cwd: '/workspace/plugin/package',
+        env: { PATH: '/usr/bin:/bin', LANG: 'C', LC_ALL: 'C', NODE_ENV: 'production' },
+        stdio: ['pipe', 'ignore', 'ignore', 'pipe'],
+      })
+    } catch { resolvePromise({ reason: 'candidate-launch-failed' }); return }
+    let bytes = Buffer.alloc(0), overflow = false, error = false, timedOut = false
+    const timer = setTimeout(() => { timedOut = true; child.kill('SIGKILL') }, 8000)
+    child.stdio[3].on('data', chunk => {
+      if (overflow) return
+      if (bytes.length + chunk.length > 60 * 1024) {
+        overflow = true
+        child.kill('SIGKILL')
+      } else bytes = Buffer.concat([bytes, chunk])
+    })
+    child.once('error', () => { error = true })
+    child.stdin.on('error', () => { error = true })
+    child.once('close', (code, signal) => {
+      clearTimeout(timer)
+      if (timedOut || overflow || error || code !== 0 || signal !== null) {
+        resolvePromise({ reason: timedOut ? 'candidate-timeout' : 'candidate-process-unsettled' }); return
+      }
+      try {
+        const text = decoded(bytes)
+        if (!text.endsWith('\n') || text.indexOf('\n') !== text.length - 1) fail('candidate-result-invalid')
+        const value = JSON.parse(text.slice(0, -1))
+        resolvePromise(validChild(value, operation) ? { value } : { reason: 'candidate-result-invalid' })
+      } catch { resolvePromise({ reason: 'candidate-result-invalid' }) }
+    })
+    child.stdin.end(JSON.stringify({ operation, entry }) + '\n')
+  })
+}
+let result
+try {
+  const encoded = readFileSync('/workspace/artifact', 'utf8')
+  const request = JSON.parse(readFileSync('/workspace/input', 'utf8'))
+  // Remove both staged files before any candidate process exists. The candidate
+  // gets only its operation and the extracted package through its stdin/path.
+  unlinkSync('/workspace/artifact')
+  unlinkSync('/workspace/input')
+  if (!request || request.schemaVersion !== 1 || !shaPattern.test(request.sha256)
+    || !Number.isSafeInteger(request.sizeBytes) || request.sizeBytes < 1 || request.sizeBytes > limit
+    || !validOperation(request.operation) || !/^[A-Za-z0-9+/]+={0,2}$/.test(encoded)) fail('invalid-worker-input')
+  const packed = Buffer.from(encoded, 'base64')
+  if (packed.length !== request.sizeBytes || packed.toString('base64') !== encoded || digest(packed) !== request.sha256) fail('artifact-mismatch')
+  const entry = extract(packed)
+  const child = await observeChild(entry, request.operation)
+  if (!child.value) fail(child.reason)
+  if (child.value.status === 'unknown') fail(child.value.reason)
+  const schemas = child.value.schemas
+  const schemaDigest = digest(Buffer.from(JSON.stringify(schemas)))
+  if (request.operation.kind === 'invoke' && schemaDigest !== request.operation.schemaDigest) fail('schema-digest-changed')
+  const base = { schemaVersion: 2, boundary: 'process-seccomp-v1', status: 'observed',
+    artifactSha256: request.sha256, quiescent: true,
+    environment: { node: process.version, cordis: version('@deepseek-ai/cordis'),
+      tools: version('@deepseek-ai/dsh-tools'), systemPrompt: version('@deepseek-ai/dsh-system-prompt') }, schemaDigest }
+  result = request.operation.kind === 'discover' ? { ...base, schemas } : { ...base, calls: child.value.calls }
+} catch (error) {
+  result = unknown(error instanceof Error ? error.message.slice(0, 128) : 'worker-error')
+}
+const output = JSON.stringify(result)
+if (Buffer.byteLength(output) > 60 * 1024) process.stdout.write(JSON.stringify(unknown('worker-output-too-large')) + '\n')
+else process.stdout.write(output + '\n')
+DSH_PLUGIN_VERIFIER_WORKER_END */
+/* DSH_PLUGIN_VERIFIER_CANDIDATE_START
+// Executes only after the fixed launcher installs seccomp and Node permissions.
+import { createHash } from 'node:crypto'
+import { writeSync } from 'node:fs'
+import { pathToFileURL } from 'node:url'
+import { Context } from '@deepseek-ai/cordis'
+import SystemPrompt from '@deepseek-ai/dsh-system-prompt'
+import ToolRuntime from '@deepseek-ai/dsh-tools'
+
+const safeTool = /^[a-z][a-z0-9_-]{0,95}$/
+let fiber, ctx, result, disposed = true
+try {
+  const chunks = []
+  let total = 0
+  for await (const chunk of process.stdin) {
+    total += chunk.length
+    if (total > 64 * 1024) throw new Error('candidate-input-too-large')
+    chunks.push(chunk)
+  }
+  const request = JSON.parse(Buffer.concat(chunks).toString('utf8'))
+  if (!request || typeof request.entry !== 'string'
+    || !/^\/workspace\/plugin\/package\/lib\/[A-Za-z0-9._/-]+\.js$/.test(request.entry)
+    || request.entry.split('/').includes('..')
+    || !request.operation || !['discover', 'invoke'].includes(request.operation.kind)) throw new Error('candidate-input-invalid')
+  ctx = new Context()
+  await ctx.plugin(SystemPrompt, { includeHarnessIdentity: false, includeRuntimeContext: false, personaPrefix: '' })
+  await ctx.plugin(ToolRuntime, { mode: 'native' })
+  const mod = await import(pathToFileURL(request.entry).href)
+  fiber = ctx.plugin(mod.default ?? mod)
+  let activationTimer
+  try {
+    await Promise.race([fiber, new Promise((_, reject) => {
+      activationTimer = setTimeout(() => reject(new Error('plugin-activation-timeout')), 5000)
+    })])
+  } finally { clearTimeout(activationTimer) }
+  if (fiber.state !== 2) throw new Error('plugin-fiber-not-active')
+  const schemas = (await ctx.systemPrompt.assemble({})).tools
+  if (!Array.isArray(schemas) || schemas.length < 1 || schemas.length > 64) throw new Error('invalid-tool-schemas')
+  const names = new Set()
+  for (const schema of schemas) {
+    if (!schema || !safeTool.test(schema.name) || names.has(schema.name)) throw new Error('invalid-tool-schemas')
+    names.add(schema.name)
+  }
+  const schemaDigest = createHash('sha256').update(JSON.stringify(schemas)).digest('hex')
+  if (request.operation.kind === 'invoke' && request.operation.schemaDigest !== schemaDigest)
+    throw new Error('schema-digest-changed')
+  if (request.operation.kind === 'discover') result = { wireVersion: 1, status: 'result', schemas }
+  else {
+    const calls = []
+    for (const call of request.operation.calls) {
+      if (!names.has(call.toolName)) throw new Error('unknown-invoked-tool')
+      const observed = await ctx.tools.execute({ callId: call.id, name: call.toolName,
+        arguments: call.arguments, signal: new AbortController().signal })
+      calls.push({ id: call.id, toolName: call.toolName, result: observed })
+    }
+    result = { wireVersion: 1, status: 'result', schemas, calls }
+  }
+} catch (error) {
+  result = { wireVersion: 1, status: 'unknown', reason: error instanceof Error ? error.message.slice(0, 128) : 'candidate-error' }
+} finally {
+  try { if (fiber) await fiber.dispose() } catch { disposed = false }
+  try { if (ctx) await ctx.fiber.dispose() } catch { disposed = false }
+}
+if (!disposed) result = { wireVersion: 1, status: 'unknown', reason: 'plugin-disposal-unconfirmed' }
+try {
+  const output = JSON.stringify(result)
+  if (Buffer.byteLength(output) > 60 * 1024) throw new Error('candidate-output-too-large')
+  writeSync(3, output + '\n')
+} catch { process.exitCode = 1 }
+DSH_PLUGIN_VERIFIER_CANDIDATE_END */
+//# sourceMappingURL=plugin-behavior-runner.js.map

package/lib/plugin-behavior-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-behavior-runner.js","sourceRoot":"","sources":["../src/plugin-behavior-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAClB,MAAM,mCAAmC,CAAA;AAC/E,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,kCAAkC,EAC/D,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,wBAAwB,EAAE,kCAAkC,EAAE,sCAAsC,EAAE,MAAM,6BAA6B,CAAA;AAElJ,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAEpE,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAA;AACjC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAA;AACrC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAA;AACzC,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,OAAO,GAAG,qCAAqC,CAAA;AACrD,MAAM,SAAS,GAAG,0BAA0B,CAAA;AAC5C,MAAM,OAAO,GAAG,mJAAmJ,CAAA;AACnK,MAAM,QAAQ,GAAG,oBAAoB,CAAA;AA4BrC,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACxC,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAA;IAAC,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,OAAO,IAAI,GAAG,EAAU;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IAC1F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC9D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACf,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAClB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;QAAE,OAAO,KAAK,CAAA;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;QAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAC9D,OAAO,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAC3G,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAClB,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,SAAS,GAAG,KAAgC,CAAA;IAClD,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;IAC7E,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;WAChH,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;WAC3F,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACtD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;eAClE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAA;QAC5H,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,SAAkC,EAAE,MAAc;IAC1F,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM;WAC7H,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAsB,CAAC;WACxE,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAChF,MAAM,WAAW,GAAG,MAAM,CAAC,WAAsC,CAAA;IACjE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,QAAQ;WAC1F,WAAW,CAAC,GAAG,CAAY,CAAC,MAAM,GAAG,EAAE,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5D,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACzI,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,YAAY;YAAE,OAAO,KAAK,CAAA;QACnH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;QAC/B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAE,MAA4B,CAAC,IAAI,IAAI,EAAE,CAAC;mBACjG,KAAK,CAAC,GAAG,CAAE,MAA2B,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAA;YAC/D,KAAK,CAAC,GAAG,CAAE,MAA2B,CAAC,IAAI,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM;WACpF,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;WAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;eACjE,IAAwB,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,EAAE;eAC1D,IAA8B,CAAC,QAAQ,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,QAAQ;eAC7E,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACpD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,yGAAyG;AACzG,MAAM,OAAO,oBAAoB;IACtB,OAAO,CAAkD;IACzD,OAAO,CAAS;IAChB,cAAc,CAAS;IACvB,gBAAgB,CAAQ;IACxB,YAAY,CAAwD;IACpE,YAAY,CAAS;IAC9B,YAAY,KAAiC;QAC3C,MAAM,MAAM,GAAG,kCAAkC,CAAC,KAAK,CAAC,CAAA;QACxD,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,eAAe,CAAA;QAC9C,IAAI,CAAC,OAAO,GAAG,SAAS,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,gBAAgB,CAAA;QACzE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,MAAuD,CAAA;YACtE,IAAI,CAAC,cAAc,GAAG,2BAA2B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACjE,IAAI,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAC9F,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAA;YAC5F,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAA;YAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,uBAAuB,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAA;QAC3F,CAAC;;YAAM,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,MAAuD,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IACpI,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,KAAgC;QACxC,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YACpD,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAClE,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,SAAS,GAAG,KAAK,EAAE,KAAc,EAA6B,EAAE,CAC/F,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QACzF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,cAAc;YACzG,OAAO,OAAO,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAA;QACtD,IAAI,CAAC;YAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAAE,OAAO,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAA;QAAC,CAAC;QAC9F,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAA;QAAC,CAAC;QAC1D,IAAI,MAA0D,CAAA;QAC9D,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC;gBAAC,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YAAC,CAAC;YACpD,MAAM,CAAC;gBAAC,OAAO,OAAO,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAA;YAAC,CAAC;QAC3D,CAAC;QACD,2FAA2F;QAC3F,gFAAgF;QAChF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,gBAAgB;YAC9G,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO;YAC1B,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAO,CAAC,KAAK;gBAC/D,WAAW,EAAE,IAAI,CAAC,YAAa,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;YAC/D,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;QAC9G,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,mBAAmB;YAAE,OAAO,OAAO,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;QAChI,IAAI,QAAQ,CAAA;QACZ,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,OAAO;gBACrB,CAAC,CAAC,MAAO,IAAI,CAAC,OAAmC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,MAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;gBACpG,CAAC,CAAC,MAAO,IAAI,CAAC,OAAkC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QAC3H,CAAC;QACD,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC,2BAA2B,CAAC,CAAA;QAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC;YAC3F,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,yBAAyB,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;QAClG,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,uBAAuB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;eAC9F,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,8BAA8B,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;QACvI,IAAI,CAAC;YACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/D,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,8BAA8B,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;gBACrI,MAAM,KAAK,GAAG,KAAgC,CAAA;gBAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc;uBACrG,KAAK,CAAC,eAAe,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACzG,IAAI,CAAC,MAAM;oBAAE,OAAO,OAAO,CAAC,8BAA8B,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;gBACjF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;uBACxF,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;gBACtH,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAsB,CAAC;uBACtE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,mCAAmC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAC/G,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;2BACrF,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,YAAY;wBAC/H,OAAO,OAAO,CAAC,mCAAmC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;oBAC3E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;oBAC/B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;wBACnC,MAAM,IAAI,GAAI,MAAoC,EAAE,IAAI,CAAA;wBACxD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;4BACtE,OAAO,OAAO,CAAC,mCAAmC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;wBAC3E,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;oBACjB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAA;oBACnC,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;2BACjF,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;2BAClE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;+BAChE,IAAwB,CAAC,EAAE,KAAK,KAAK,CAAC,KAAK,CAAE,CAAC,EAAE;+BAChD,IAA8B,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAE,CAAC,QAAQ;+BACnE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;wBAAE,OAAO,OAAO,CAAC,mCAAmC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;gBACnH,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACjF,QAAQ,EAAE,wBAAwB,EAAE,aAAa,EAAE,IAAI,CAAC,cAAe,EAAE,WAAW,EAAE,IAAI,CAAC,YAAa;oBACxG,YAAY,EAAE,KAAK,CAAC,YAAsB;oBAC1C,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAoB,EAAE;wBAC/E,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAA4D,EAAE,CAAC,EAAE,CAAA;YACxF,CAAC;YACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzE,MAAM,MAAM,GAAG,KAAgC,CAAA;gBAC/C,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;uBACxF,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG;uBAC5F,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC5F,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC;gBAAE,OAAO,OAAO,CAAC,mCAAmC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;YACxI,MAAM,WAAW,GAAG,KAAkC,CAAA;YACtD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACjF,WAAW,EAAE,WAAW,CAAC,WAAY,EAAE,YAAY,EAAE,WAAW,CAAC,YAAa;gBAC9E,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,OAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAM,EAAE,CAAC,EAAE,CAAA;QAClH,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC,8BAA8B,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;QAAC,CAAC;IAClF,CAAC;IACD,KAAK,KAAoB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA,CAAC,CAAC;CACvD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAkNiC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCAqEoC"}

package/lib/revision-regression-review.d.ts

@@ -0,0 +1,38 @@
+import type { Context } from '@deepseek-ai/cordis';
+import { type PluginCreationVerificationCertificate, type PluginRevisionRegressionRequest, type PluginRevisionRegressionResult, type RevisionRegressionAcceptanceAuthorityRef } from '@dsh-enhanced/assistant-growth-contract';
+import { type CreationReviewConfig } from './creation-review.js';
+export type RevisionRegressionReviewConfig = Omit<CreationReviewConfig, 'policy' | 'maxInputBytes' | 'maxOutputTokens'>;
+export interface RevisionRegressionReviewAuthorityInspection {
+    authority: RevisionRegressionAcceptanceAuthorityRef;
+    publicKey: string;
+    remainingVerifications: number;
+    available: boolean;
+}
+export declare function validateRevisionRegressionReviewConfig(input: RevisionRegressionReviewConfig): RevisionRegressionReviewConfig;
+export declare function compileRevisionRegressionReviewConfig(input: RevisionRegressionReviewConfig): {
+    config: RevisionRegressionReviewConfig;
+    authority: RevisionRegressionAcceptanceAuthorityRef;
+    publicKey: string;
+    privateKey: ReturnType<typeof import('node:crypto').createPrivateKey>;
+};
+type RetainedCases = Readonly<{
+    certificate: PluginCreationVerificationCertificate;
+    discovery: unknown;
+    contract: unknown;
+    cases: Record<string, unknown>;
+}>;
+type ReadParentCases = (certificate: PluginCreationVerificationCertificate) => RetainedCases | undefined;
+/** Independent paired Docker regression; this runtime has no LLM service and cannot switch a tool. */
+export declare class RevisionRegressionReviewRuntime {
+    #private;
+    private readonly ctx;
+    private readonly readParentCases;
+    constructor(ctx: Context, input: RevisionRegressionReviewConfig, databasePath: string, readParentCases: ReadParentCases);
+    inspect(input: {
+        owner: RevisionRegressionReviewConfig['owner'];
+    }): RevisionRegressionReviewAuthorityInspection | undefined;
+    run(request: PluginRevisionRegressionRequest, external?: AbortSignal): Promise<PluginRevisionRegressionResult>;
+    close(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=revision-regression-review.d.ts.map

package/lib/revision-regression-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision-regression-review.d.ts","sourceRoot":"","sources":["../src/revision-regression-review.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAKL,KAAK,qCAAqC,EAC1C,KAAK,+BAA+B,EAAE,KAAK,8BAA8B,EAEzE,KAAK,wCAAwC,EAAE,MAAM,yCAAyC,CAAA;AAEhG,OAAO,EAC0C,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAQxG,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAAC,oBAAoB,EAAE,QAAQ,GAAG,eAAe,GAAG,iBAAiB,CAAC,CAAA;AACvH,MAAM,WAAW,2CAA2C;IAC1D,SAAS,EAAE,wCAAwC,CAAA;IACnD,SAAS,EAAE,MAAM,CAAA;IACjB,sBAAsB,EAAE,MAAM,CAAA;IAC9B,SAAS,EAAE,OAAO,CAAA;CACnB;AAcD,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,8BAA8B,GAAG,8BAA8B,CAO5H;AAED,wBAAgB,qCAAqC,CAAC,KAAK,EAAE,8BAA8B,GAAG;IAC5F,MAAM,EAAE,8BAA8B,CAAC;IAAC,SAAS,EAAE,wCAAwC,CAAC;IAC5F,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC,cAAc,aAAa,EAAE,gBAAgB,CAAC,CAAA;CACzF,CAYA;AAkBD,KAAK,aAAa,GAAG,QAAQ,CAAC;IAAE,WAAW,EAAE,qCAAqC,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IACrG,QAAQ,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAAA;AACtD,KAAK,eAAe,GAAG,CAAC,WAAW,EAAE,qCAAqC,KAAK,aAAa,GAAG,SAAS,CAAA;AAgCxG,sGAAsG;AACtG,qBAAa,+BAA+B;;IAS9B,OAAO,CAAC,QAAQ,CAAC,GAAG;IAC9B,OAAO,CAAC,QAAQ,CAAC,eAAe;gBADL,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE,YAAY,EAAE,MAAM,EACnF,eAAe,EAAE,eAAe;IAenD,OAAO,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,8BAA8B,CAAC,OAAO,CAAC,CAAA;KAAE,GAAG,2CAA2C,GAAG,SAAS;IAQ3H,GAAG,CAAC,OAAO,EAAE,+BAA+B,EAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAoL9G,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAUvB"}