@dsh-triage/core 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DSH-Addition contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,30 @@
-# Temporary Holding Version
+# @dsh-triage/core
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Pure, offline judgment engine for DeepSeek Harness plugin compatibility.
+
+## Public API
+
+| Export | Purpose |
+|---|---|
+| `evaluateAdmission(manifest, runtime)` | Mirror upstream admission semantics (`engines.dsh` wins, else `@deepseek-ai/dsh*` peers ANDed, prereleases participate, empty/invalid ranges incompatible) |
+| `evaluateRange(range, runtime)` | Single-range evaluation that never throws |
+| `loadEnv({ dshHome, profile })` | Read a profile fingerprint (`Result`, no throw) |
+| `parseProfileManifest(raw)` | Pure manifest projection |
+| `parsePatchYaml(text)` / `extractEntryClaims(doc, source)` | Loader row extraction from a patch layer |
+| `findEntryIdCollisions(claims)` | Duplicate loader entry ids (fatal at boot) |
+| `verdictFromAdmission(input)` / `verdictsFromCollisions(input)` | Verdict assembly |
+| `mergeVerdicts(verdicts)` | Worst-conclusion merge with dedupe |
+| `renderVerdict(verdict, locale)` | Deterministic text rendering (`en` / `zh`) |
+
+## Invariants
+
+- Only `env.ts` touches the filesystem; everything else is pure.
+- No clock, no randomness: timestamps are injected by the caller.
+- Conclusions are exactly `go | risky | blocked | unknown`.
+- `blocked`/`risky` always carry remediation; `unknown` always lists missing evidence.
+
+## Parity
+
+Behaviour is locked by `data/gold/admission-cases.json` (13 synthetic + 8 real npm snapshots) and enforced by `scripts/gate_admission_parity.mjs`. Change the fixtures and the spec before changing the rules.
+
+MIT.

package/dist/admission.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Mirrors DeepSeek Harness admission semantics.
+ *
+ * SOURCE OF TRUTH (do not "improve" these rules from memory):
+ * `@deepseek-ai/dsh-app-boot@0.2.1-rc.2/README.md` — "Before a profile imports a
+ * plugin, DSH checks its declared DSH requirement against the single runtime
+ * version returned by `getDshRuntimeVersion()`":
+ *
+ *  1. `engines.dsh` present  -> that range alone decides, peers are ignored.
+ *  2. otherwise              -> every peer range on `@deepseek-ai/dsh` and
+ *                               `@deepseek-ai/dsh-*` must match (AND).
+ *  3. prereleases participate in range matching.
+ *  4. empty / invalid ranges (and `workspace:` in `engines.dsh`) are incompatible.
+ *  5. no declaration at all  -> no constraint.
+ *
+ * Parity is locked by `data/gold/admission-cases.json` and enforced by
+ * `scripts/gate_admission_parity.mjs`. Change the rules there first.
+ */
+/** Why a declared range did not hold. Stable codes, safe to switch on. */
+export type RequirementFailure = 'empty-range' | 'invalid-range' | 'workspace-protocol' | 'unsatisfied' | 'malformed-manifest';
+export interface Requirement {
+    /** `dsh` for `engines.dsh`, otherwise the peer package name. */
+    readonly key: string;
+    readonly range: string;
+    readonly satisfied: boolean;
+    readonly failure: RequirementFailure | null;
+}
+export type AdmissionStatus = 'admitted' | 'denied' | 'unconstrained' | 'indeterminate';
+export type AdmissionMode = 'engines' | 'peers' | 'none';
+export interface AdmissionResult {
+    readonly status: AdmissionStatus;
+    readonly mode: AdmissionMode;
+    /** Every requirement that was actually evaluated (empty for `none`). */
+    readonly requirements: readonly Requirement[];
+    /** Subset of `requirements` with `satisfied === false`. */
+    readonly unmet: readonly Requirement[];
+    /** Set when the runtime version is unknown, making admission unknowable. */
+    readonly indeterminateReason: string | null;
+}
+/** True for the peer package names that participate in admission. */
+export declare function isAdmissionPeer(key: string): boolean;
+interface EvaluatedRange {
+    readonly satisfied: boolean;
+    readonly failure: RequirementFailure | null;
+}
+/**
+ * Evaluate one declared range against one runtime version.
+ * Never throws: invalid input becomes a `satisfied: false` verdict.
+ */
+export declare function evaluateRange(range: unknown, runtime: string): EvaluatedRange;
+interface EnginesReading {
+    readonly kind: 'absent' | 'malformed' | 'range';
+    readonly value: string;
+}
+/** Read `engines.dsh` with the same tolerance as the upstream manifest reader. */
+export declare function readEnginesDsh(manifest: unknown): EnginesReading;
+/**
+ * Compute the admission decision for one plugin manifest on one runtime.
+ *
+ * Deterministic and side-effect free: same inputs always produce the same output,
+ * with requirements in stable order so stdout can be diffed.
+ */
+export declare function evaluateAdmission(manifest: unknown, runtime: string | null): AdmissionResult;
+export {};
+//# sourceMappingURL=admission.d.ts.map

package/dist/admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.d.ts","sourceRoot":"","sources":["../src/admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,0EAA0E;AAC1E,MAAM,MAAM,kBAAkB,GAC1B,aAAa,GACb,eAAe,GACf,oBAAoB,GACpB,aAAa,GACb,oBAAoB,CAAA;AAExB,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAA;CAC5C;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,QAAQ,GAAG,eAAe,GAAG,eAAe,CAAA;AAEvF,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAA;AAExD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAA;IAC7C,2DAA2D;IAC3D,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAA;IACtC,4EAA4E;IAC5E,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5C;AAKD,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,UAAU,cAAc;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAA;CAC5C;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,cAAc,CAgB7E;AAED,UAAU,cAAc;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAA;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,cAAc,CAmBhE;AAiBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,eAAe,CAqE5F"}

package/dist/admission.js

@@ -0,0 +1,153 @@
+/**
+ * Mirrors DeepSeek Harness admission semantics.
+ *
+ * SOURCE OF TRUTH (do not "improve" these rules from memory):
+ * `@deepseek-ai/dsh-app-boot@0.2.1-rc.2/README.md` — "Before a profile imports a
+ * plugin, DSH checks its declared DSH requirement against the single runtime
+ * version returned by `getDshRuntimeVersion()`":
+ *
+ *  1. `engines.dsh` present  -> that range alone decides, peers are ignored.
+ *  2. otherwise              -> every peer range on `@deepseek-ai/dsh` and
+ *                               `@deepseek-ai/dsh-*` must match (AND).
+ *  3. prereleases participate in range matching.
+ *  4. empty / invalid ranges (and `workspace:` in `engines.dsh`) are incompatible.
+ *  5. no declaration at all  -> no constraint.
+ *
+ * Parity is locked by `data/gold/admission-cases.json` and enforced by
+ * `scripts/gate_admission_parity.mjs`. Change the rules there first.
+ */
+import { satisfies, validRange } from 'semver';
+const DSH_PEER_PREFIX = '@deepseek-ai/dsh-';
+const DSH_PEER_EXACT = '@deepseek-ai/dsh';
+/** True for the peer package names that participate in admission. */
+export function isAdmissionPeer(key) {
+    return key === DSH_PEER_EXACT || key.startsWith(DSH_PEER_PREFIX);
+}
+/**
+ * Evaluate one declared range against one runtime version.
+ * Never throws: invalid input becomes a `satisfied: false` verdict.
+ */
+export function evaluateRange(range, runtime) {
+    if (typeof range !== 'string') {
+        return { satisfied: false, failure: 'malformed-manifest' };
+    }
+    const trimmed = range.trim();
+    // semver treats '' as '*', but DSH treats an empty requirement as incompatible.
+    if (trimmed === '') {
+        return { satisfied: false, failure: 'empty-range' };
+    }
+    if (trimmed.startsWith('workspace:')) {
+        return { satisfied: false, failure: 'workspace-protocol' };
+    }
+    if (validRange(trimmed, { includePrerelease: true }) === null) {
+        return { satisfied: false, failure: 'invalid-range' };
+    }
+    return { satisfied: satisfies(runtime, trimmed, { includePrerelease: true }), failure: null };
+}
+/** Read `engines.dsh` with the same tolerance as the upstream manifest reader. */
+export function readEnginesDsh(manifest) {
+    if (manifest === null || typeof manifest !== 'object') {
+        return { kind: 'malformed', value: '' };
+    }
+    const engines = manifest.engines;
+    if (engines === undefined) {
+        return { kind: 'absent', value: '' };
+    }
+    if (engines === null || typeof engines !== 'object') {
+        return { kind: 'malformed', value: '' };
+    }
+    const dsh = engines.dsh;
+    if (dsh === undefined) {
+        return { kind: 'absent', value: '' };
+    }
+    if (typeof dsh !== 'string') {
+        return { kind: 'malformed', value: '' };
+    }
+    return { kind: 'range', value: dsh };
+}
+/** Peer package names that participate in admission, in stable key order. */
+function peerRequirements(manifest) {
+    if (manifest === null || typeof manifest !== 'object') {
+        return [];
+    }
+    const peers = manifest.peerDependencies;
+    if (peers === null || typeof peers !== 'object') {
+        return [];
+    }
+    return Object.entries(peers)
+        .filter(([key]) => isAdmissionPeer(key))
+        .sort(([a], [b]) => a.localeCompare(b))
+        .map(([key, value]) => ({ key, range: typeof value === 'string' ? value : String(value) }));
+}
+/**
+ * Compute the admission decision for one plugin manifest on one runtime.
+ *
+ * Deterministic and side-effect free: same inputs always produce the same output,
+ * with requirements in stable order so stdout can be diffed.
+ */
+export function evaluateAdmission(manifest, runtime) {
+    if (runtime === null || runtime.trim() === '') {
+        return {
+            status: 'indeterminate',
+            mode: 'none',
+            requirements: [],
+            unmet: [],
+            indeterminateReason: 'runtime-version-unknown',
+        };
+    }
+    const engines = readEnginesDsh(manifest);
+    if (engines.kind === 'malformed') {
+        const requirement = {
+            key: 'dsh',
+            range: '<malformed>',
+            satisfied: false,
+            failure: 'malformed-manifest',
+        };
+        return {
+            status: 'denied',
+            mode: 'engines',
+            requirements: [requirement],
+            unmet: [requirement],
+            indeterminateReason: null,
+        };
+    }
+    if (engines.kind === 'range') {
+        const evaluated = evaluateRange(engines.value, runtime);
+        const requirement = {
+            key: 'dsh',
+            range: engines.value,
+            satisfied: evaluated.satisfied,
+            failure: evaluated.failure,
+        };
+        return {
+            status: evaluated.satisfied ? 'admitted' : 'denied',
+            mode: 'engines',
+            requirements: [requirement],
+            unmet: evaluated.satisfied ? [] : [requirement],
+            indeterminateReason: null,
+        };
+    }
+    const peerKeys = peerRequirements(manifest);
+    if (peerKeys.length === 0) {
+        return {
+            status: 'unconstrained',
+            mode: 'none',
+            requirements: [],
+            unmet: [],
+            indeterminateReason: null,
+        };
+    }
+    const requirements = peerKeys.map(({ key, range }) => {
+        const evaluated = evaluateRange(range, runtime);
+        return { key, range, satisfied: evaluated.satisfied, failure: evaluated.failure };
+    });
+    const unmet = requirements.filter((requirement) => !requirement.satisfied);
+    return {
+        status: unmet.length === 0 ? 'admitted' : 'denied',
+        mode: 'peers',
+        requirements,
+        unmet,
+        indeterminateReason: null,
+    };
+}
+//# sourceMappingURL=admission.js.map

package/dist/admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.js","sourceRoot":"","sources":["../src/admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAiC9C,MAAM,eAAe,GAAG,mBAAmB,CAAA;AAC3C,MAAM,cAAc,GAAG,kBAAkB,CAAA;AAEzC,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,GAAG,KAAK,cAAc,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAA;AAClE,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,OAAe;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAA;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,gFAAgF;IAChF,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAA;IAC5D,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAA;IACvD,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC/F,CAAC;AAOD,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IACzC,CAAC;IACD,MAAM,OAAO,GAAI,QAAkC,CAAC,OAAO,CAAA;IAC3D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IACtC,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IACzC,CAAC;IACD,MAAM,GAAG,GAAI,OAA6B,CAAC,GAAG,CAAA;IAC9C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IACtC,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IACzC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;AACtC,CAAC;AAED,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,QAAiB;IACzC,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,KAAK,GAAI,QAA2C,CAAC,gBAAgB,CAAA;IAC3E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SACpD,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;SACvC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;AAC/F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAiB,EAAE,OAAsB;IACzE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,MAAM;YACZ,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,EAAE;YACT,mBAAmB,EAAE,yBAAyB;SAC/C,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IAExC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,WAAW,GAAgB;YAC/B,GAAG,EAAE,KAAK;YACV,KAAK,EAAE,aAAa;YACpB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,oBAAoB;SAC9B,CAAA;QACD,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,SAAS;YACf,YAAY,EAAE,CAAC,WAAW,CAAC;YAC3B,KAAK,EAAE,CAAC,WAAW,CAAC;YACpB,mBAAmB,EAAE,IAAI;SAC1B,CAAA;IACH,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACvD,MAAM,WAAW,GAAgB;YAC/B,GAAG,EAAE,KAAK;YACV,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAA;QACD,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YACnD,IAAI,EAAE,SAAS;YACf,YAAY,EAAE,CAAC,WAAW,CAAC;YAC3B,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YAC/C,mBAAmB,EAAE,IAAI;SAC1B,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,MAAM;YACZ,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,EAAE;YACT,mBAAmB,EAAE,IAAI;SAC1B,CAAA;IACH,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAe,EAAE;QAChE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAC/C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAA;IACnF,CAAC,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;IAC1E,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;QAClD,IAAI,EAAE,OAAO;QACb,YAAY;QACZ,KAAK;QACL,mBAAmB,EAAE,IAAI;KAC1B,CAAA;AACH,CAAC"}

package/dist/capabilities.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Capability layer (M2-a · T-202, narrowed).
+ *
+ * WHY THIS IS FACTS AND DIFFS, NOT "MISSING TOOL" VERDICTS: upstream plugins do not
+ * declare their tool names anywhere static. `@deepseek-ai/dsh-tool-bash` has no `dsh`
+ * field in `package.json`; the only place `bash` appears is `defineTool({ name: 'bash' })`
+ * inside the built `lib/index.js`. So "this plugin declared tool X and X is not
+ * registered" cannot be derived — it would require us to ship a hand-written
+ * plugin→tool mapping table, which is exactly the guessing this project forbids
+ * (`PROJECT_RULES.md`, no evidence → `unknown`).
+ *
+ * What *is* real:
+ *   - the registry's own list of tools, read from `ctx.tools.schemas()` in the Host;
+ *   - the difference between two samples, which answers "this row disappearing removed
+ *     which abilities" — the primitive a bisect (T-114) needs.
+ *
+ * Everything below is pure: parsing is defensive, the diff is deterministic, and no
+ * conclusion is invented from an absence.
+ */
+import { type CoreError, type Result } from './result.js';
+import { type InventoryTransport } from './inventory.js';
+export interface CapabilityTool {
+    /** Model-facing tool name, exactly as registered. */
+    readonly name: string;
+    /** Optional one-line description; absent when the deployment does not publish one. */
+    readonly description: string | null;
+}
+export interface CapabilitySnapshot {
+    /**
+     * `'tools'` when a tool registry answered; `null` when the deployment composed none.
+     * The distinction matters: "no registry" is not "no tools", and reporting an empty
+     * list for both would turn a missing service into a clean bill.
+     */
+    readonly registry: 'tools' | null;
+    readonly tools: readonly CapabilityTool[];
+    readonly sampledAt: string;
+    /** How the list was read; same contract as the phase layer. */
+    readonly transport: InventoryTransport | null;
+    /** Channels this build can see but does not read yet. Surfaced, never judged. */
+    readonly unjudged: readonly string[];
+    /** Why the registry read failed, when it did — never conflated with an empty list. */
+    readonly readError: string | null;
+    /** Which presentation the list was read under (`ptc` collapses to `run_code`). */
+    readonly presentation: string | null;
+    /** Why forcing the native view failed, when it did. */
+    readonly presentationError: string | null;
+}
+export interface CapabilityMeta {
+    readonly sampledAt: string;
+}
+/** Parse one `capabilities` block defensively; a renamed field must fail loudly. */
+export declare function parseCapabilitySnapshot(value: unknown, meta: CapabilityMeta): Result<CapabilitySnapshot, CoreError>;
+export interface CapabilityDiff {
+    /** Present before, absent after. */
+    readonly removed: readonly string[];
+    /** Absent before, present after. */
+    readonly added: readonly string[];
+    /** Present in both; carried so a reader can see the comparison was not empty. */
+    readonly unchanged: number;
+}
+/**
+ * What changed between two capability samples.
+ *
+ * This is deliberately not a judgement: a tool disappearing after a row was disabled is
+ * the causal link the operator asked for, but the same diff means "an unrelated plugin
+ * crashed" if nobody touched a row. The caller records which experiment produced it.
+ */
+export declare function diffCapabilities(before: CapabilitySnapshot, after: CapabilitySnapshot): CapabilityDiff;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,MAAM,EAAW,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,KAAK,kBAAkB,EAAsB,MAAM,gBAAgB,CAAA;AAE5E,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,sFAAsF;IACtF,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAAA;IAC7C,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,sFAAsF;IACtF,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAID,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAiDnH;AAED,MAAM,WAAW,cAAc;IAC7B,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,oCAAoC;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,kBAAkB,EAC1B,KAAK,EAAE,kBAAkB,GACxB,cAAc,CAOhB"}

package/dist/capabilities.js

@@ -0,0 +1,93 @@
+/**
+ * Capability layer (M2-a · T-202, narrowed).
+ *
+ * WHY THIS IS FACTS AND DIFFS, NOT "MISSING TOOL" VERDICTS: upstream plugins do not
+ * declare their tool names anywhere static. `@deepseek-ai/dsh-tool-bash` has no `dsh`
+ * field in `package.json`; the only place `bash` appears is `defineTool({ name: 'bash' })`
+ * inside the built `lib/index.js`. So "this plugin declared tool X and X is not
+ * registered" cannot be derived — it would require us to ship a hand-written
+ * plugin→tool mapping table, which is exactly the guessing this project forbids
+ * (`PROJECT_RULES.md`, no evidence → `unknown`).
+ *
+ * What *is* real:
+ *   - the registry's own list of tools, read from `ctx.tools.schemas()` in the Host;
+ *   - the difference between two samples, which answers "this row disappearing removed
+ *     which abilities" — the primitive a bisect (T-114) needs.
+ *
+ * Everything below is pure: parsing is defensive, the diff is deterministic, and no
+ * conclusion is invented from an absence.
+ */
+import { err, ok } from './result.js';
+import { readTransportValue } from './inventory.js';
+const KNOWN_KEYS = new Set(['registry', 'tools', 'sampled_at', 'sampledAt', 'transport', 'unjudged', 'note', 'read_error', 'presentation', 'presentation_error']);
+/** Parse one `capabilities` block defensively; a renamed field must fail loudly. */
+export function parseCapabilitySnapshot(value, meta) {
+    const invalid = (detail) => err({ code: 'capabilities-invalid', detail });
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        return invalid('capabilities is not an object');
+    }
+    const record = value;
+    const registryRaw = record['registry'];
+    if (registryRaw !== null && registryRaw !== 'tools' && registryRaw !== undefined) {
+        return invalid(`registry is ${JSON.stringify(registryRaw)}, expected "tools" or null`);
+    }
+    const registry = registryRaw === undefined ? null : registryRaw;
+    const rawTools = record['tools'];
+    if (!Array.isArray(rawTools))
+        return invalid('tools is missing or is not an array');
+    const tools = [];
+    for (const [index, candidate] of rawTools.entries()) {
+        if (candidate === null || typeof candidate !== 'object' || Array.isArray(candidate)) {
+            return invalid(`tools[${index}] is not an object`);
+        }
+        const tool = candidate;
+        const name = typeof tool['name'] === 'string' ? tool['name'].trim() : '';
+        if (name === '')
+            return invalid(`tools[${index}] has no name`);
+        const description = typeof tool['description'] === 'string' && tool['description'] !== '' ? tool['description'] : null;
+        tools.push({ name, description });
+    }
+    // A registry that answered with no tools is legal; a registry that answered with a
+    // duplicate name is not (the Host rejects duplicate registrations, so this means the
+    // sample was assembled by hand).
+    const seen = new Set();
+    for (const tool of tools) {
+        if (seen.has(tool.name))
+            return invalid(`tool "${tool.name}" appears twice in one snapshot`);
+        seen.add(tool.name);
+    }
+    const transport = readTransportValue(record['transport']);
+    if (transport === 'invalid')
+        return invalid(`transport is ${JSON.stringify(record['transport'])}`);
+    const unjudged = Array.isArray(record['unjudged'])
+        ? record['unjudged'].filter((entry) => typeof entry === 'string').sort()
+        : [];
+    void KNOWN_KEYS;
+    const sampledAt = typeof record['sampled_at'] === 'string' ? record['sampled_at'] : typeof record['sampledAt'] === 'string' ? record['sampledAt'] : meta.sampledAt;
+    return ok({
+        registry,
+        tools: [...tools].sort((left, right) => left.name.localeCompare(right.name)),
+        sampledAt,
+        transport,
+        unjudged,
+        readError: typeof record['read_error'] === 'string' ? record['read_error'] : null,
+        presentation: typeof record['presentation'] === 'string' ? record['presentation'] : null,
+        presentationError: typeof record['presentation_error'] === 'string' ? record['presentation_error'] : null,
+    });
+}
+/**
+ * What changed between two capability samples.
+ *
+ * This is deliberately not a judgement: a tool disappearing after a row was disabled is
+ * the causal link the operator asked for, but the same diff means "an unrelated plugin
+ * crashed" if nobody touched a row. The caller records which experiment produced it.
+ */
+export function diffCapabilities(before, after) {
+    const beforeNames = new Set(before.tools.map((tool) => tool.name));
+    const afterNames = new Set(after.tools.map((tool) => tool.name));
+    const removed = [...beforeNames].filter((name) => !afterNames.has(name)).sort();
+    const added = [...afterNames].filter((name) => !beforeNames.has(name)).sort();
+    const unchanged = [...beforeNames].filter((name) => afterNames.has(name)).length;
+    return { removed, added, unchanged };
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAA+B,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AAClE,OAAO,EAA2B,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAkC5E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,oBAAoB,CAAC,CAAC,CAAA;AAEjK,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CAAC,KAAc,EAAE,IAAoB;IAC1E,MAAM,OAAO,GAAG,CAAC,MAAc,EAA4B,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC,CAAA;IAC3G,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,OAAO,CAAC,+BAA+B,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,CAAA;IACtC,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACjF,OAAO,OAAO,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAA;IACxF,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,WAA8B,CAAA;IACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC,qCAAqC,CAAC,CAAA;IACnF,MAAM,KAAK,GAAqB,EAAE,CAAA;IAClC,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACpD,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACpF,OAAO,OAAO,CAAC,SAAS,KAAK,oBAAoB,CAAC,CAAA;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,SAAoC,CAAA;QACjD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACxE,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,OAAO,CAAC,SAAS,KAAK,eAAe,CAAC,CAAA;QAC9D,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACtH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;IACnC,CAAC;IACD,mFAAmF;IACnF,qFAAqF;IACrF,iCAAiC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,SAAS,IAAI,CAAC,IAAI,iCAAiC,CAAC,CAAA;QAC5F,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;IACzD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAA;IAClG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,IAAI,EAAE;QACzF,CAAC,CAAC,EAAE,CAAA;IACN,KAAK,UAAU,CAAA;IACf,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAA;IAClK,OAAO,EAAE,CAAC;QACR,QAAQ;QACR,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5E,SAAS;QACT,SAAS;QACT,QAAQ;QACR,SAAS,EAAE,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;QACjF,YAAY,EAAE,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;QACxF,iBAAiB,EAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI;KAC1G,CAAC,CAAA;AACJ,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA0B,EAC1B,KAAyB;IAEzB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAClE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAChE,MAAM,OAAO,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/E,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7E,MAAM,SAAS,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAA;IAChF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;AACtC,CAAC"}

package/dist/compat-channel.d.ts

@@ -0,0 +1,60 @@
+/**
+ * `dsh.compatibility` — the declaration channel we did not read (BS-13 / T-108).
+ *
+ * WHY THIS FILE EXISTS (CASE-7590): the case was scored as a miss because neither
+ * plugin declares an `@deepseek-ai/dsh*` peer range. The R6 adversary pass showed
+ * "declares nothing" was too strong: `@xmanrui/dsh-im` carries
+ *
+ *     "dsh": { "compatibility": { "dsh": "0.1.7-alpha.1",
+ *              "dshReleases": { "0.1.7-alpha.1": "compatible" } } }
+ *
+ * while the profile runs `0.1.7-alpha.2`. The information was in the manifest all
+ * along; the engine only ever looked at `engines.dsh` and peers.
+ *
+ * HARD RULE (tier discipline): this channel never decides admission. It is
+ * `declared`-tier **secondary** evidence that gets listed next to the admission
+ * conclusion. It can never produce `blocked` on its own, and it can never upgrade
+ * an `unknown` to `go` — the author's self-declaration is not a measurement.
+ *
+ * Parsing is defensive: unknown shapes degrade to `null` (no channel), never to a
+ * guess. `evaluateRange` is reused from `admission.ts` so that prerelease and
+ * empty/invalid-range semantics stay byte-identical with the admission engine.
+ */
+/** One author-published per-release statement (`dsh.compatibility.dshReleases`). */
+export interface CompatRelease {
+    readonly version: string;
+    readonly status: string;
+}
+/** The parsed channel, flattened enough to be rendered without guessing. */
+export interface CompatChannel {
+    /** One-line summary a user can act on, e.g. `dsh 0.1.7-alpha.1`. */
+    readonly claim: string;
+    /** `dsh.compatibility.dsh`, verbatim (may be a version or a range). */
+    readonly pinned: string | null;
+    /** `dsh.compatibility.dshReleases`, sorted by version. */
+    readonly releases: readonly CompatRelease[];
+    /** `dsh.compatibility.profiles`, sorted. */
+    readonly profiles: readonly string[];
+}
+/** What the author's own channel says about the running build. */
+export type CompatStanding = 'match' | 'mismatch' | 'unknown';
+export interface CompatReading {
+    readonly channel: CompatChannel;
+    readonly standing: CompatStanding;
+}
+/**
+ * Parse `dsh.compatibility` out of a plugin manifest.
+ *
+ * Returns `null` when the manifest says nothing in this channel — the absence is
+ * reported as "no secondary evidence", never as "compatible".
+ */
+export declare function readCompatChannel(manifest: unknown): CompatChannel | null;
+/**
+ * Judge the channel against the running build.
+ *
+ * Order of authority inside the channel: an exact `dshReleases` entry for this
+ * runtime beats the broader `dsh` statement; `profiles` alone can never judge a
+ * version, so it stays `unknown`.
+ */
+export declare function judgeCompatChannel(manifest: unknown, runtime: string | null): CompatReading | null;
+//# sourceMappingURL=compat-channel.d.ts.map

package/dist/compat-channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat-channel.d.ts","sourceRoot":"","sources":["../src/compat-channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAMH,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAA;IAC3C,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACrC;AAgBD,kEAAkE;AAClE,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAA;AAE7D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;CAClC;AAWD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CA+BzE;AAUD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,GAAG,IAAI,CAqBlG"}

package/dist/compat-channel.js

@@ -0,0 +1,117 @@
+/**
+ * `dsh.compatibility` — the declaration channel we did not read (BS-13 / T-108).
+ *
+ * WHY THIS FILE EXISTS (CASE-7590): the case was scored as a miss because neither
+ * plugin declares an `@deepseek-ai/dsh*` peer range. The R6 adversary pass showed
+ * "declares nothing" was too strong: `@xmanrui/dsh-im` carries
+ *
+ *     "dsh": { "compatibility": { "dsh": "0.1.7-alpha.1",
+ *              "dshReleases": { "0.1.7-alpha.1": "compatible" } } }
+ *
+ * while the profile runs `0.1.7-alpha.2`. The information was in the manifest all
+ * along; the engine only ever looked at `engines.dsh` and peers.
+ *
+ * HARD RULE (tier discipline): this channel never decides admission. It is
+ * `declared`-tier **secondary** evidence that gets listed next to the admission
+ * conclusion. It can never produce `blocked` on its own, and it can never upgrade
+ * an `unknown` to `go` — the author's self-declaration is not a measurement.
+ *
+ * Parsing is defensive: unknown shapes degrade to `null` (no channel), never to a
+ * guess. `evaluateRange` is reused from `admission.ts` so that prerelease and
+ * empty/invalid-range semantics stay byte-identical with the admission engine.
+ */
+import { valid } from 'semver';
+import { evaluateRange } from './admission.js';
+/**
+ * Compare keys the way an author would write them, not byte-for-byte.
+ *
+ * WHY (R9 adversary finding): `dshReleases` is a hand-written object in someone's
+ * package.json, so `v0.1.7-alpha.2` or `" 0.1.7-alpha.2 "` happen. A byte compare
+ * missed the entry, fell through to a broader `dsh: "*"` statement, and reported a
+ * *match* for a build the author had explicitly marked incompatible — the one
+ * direction this channel must never get wrong.
+ */
+function normalizeVersion(value) {
+    const trimmed = value.trim().replace(/^[=v]+/i, '');
+    return valid(trimmed) ?? trimmed;
+}
+/** Release statuses that mean "the author says this build is fine". */
+const COMPATIBLE_STATUS = new Set(['compatible', 'ok', 'supported', 'yes', 'true']);
+function asRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : null;
+}
+/**
+ * Parse `dsh.compatibility` out of a plugin manifest.
+ *
+ * Returns `null` when the manifest says nothing in this channel — the absence is
+ * reported as "no secondary evidence", never as "compatible".
+ */
+export function readCompatChannel(manifest) {
+    const dsh = asRecord(asRecord(manifest)?.['dsh']);
+    const compatibility = asRecord(dsh?.['compatibility']);
+    if (compatibility === null)
+        return null;
+    const rawPinned = compatibility['dsh'];
+    const pinned = typeof rawPinned === 'string' && rawPinned.trim() !== '' ? rawPinned.trim() : null;
+    const releases = [];
+    const rawReleases = asRecord(compatibility['dshReleases']);
+    if (rawReleases !== null) {
+        for (const [version, value] of Object.entries(rawReleases)) {
+            if (typeof value === 'string' && value.trim() !== '') {
+                releases.push({ version, status: value.trim() });
+            }
+        }
+        releases.sort((a, b) => a.version.localeCompare(b.version));
+    }
+    const profiles = [];
+    const rawProfiles = compatibility['profiles'];
+    if (Array.isArray(rawProfiles)) {
+        for (const value of rawProfiles) {
+            if (typeof value === 'string' && value.trim() !== '')
+                profiles.push(value.trim());
+        }
+        profiles.sort((a, b) => a.localeCompare(b));
+    }
+    if (pinned === null && releases.length === 0 && profiles.length === 0)
+        return null;
+    return { claim: claimOf(pinned, releases, profiles), pinned, releases, profiles };
+}
+function claimOf(pinned, releases, profiles) {
+    if (pinned !== null)
+        return `dsh ${pinned}`;
+    if (releases.length > 0) {
+        return `dshReleases ${releases.map((release) => `${release.version}: ${release.status}`).join(', ')}`;
+    }
+    return `profiles ${profiles.join(', ')}`;
+}
+/**
+ * Judge the channel against the running build.
+ *
+ * Order of authority inside the channel: an exact `dshReleases` entry for this
+ * runtime beats the broader `dsh` statement; `profiles` alone can never judge a
+ * version, so it stays `unknown`.
+ */
+export function judgeCompatChannel(manifest, runtime) {
+    const channel = readCompatChannel(manifest);
+    if (channel === null)
+        return null;
+    if (runtime === null || runtime.trim() === '')
+        return { channel, standing: 'unknown' };
+    const wanted = normalizeVersion(runtime);
+    const exact = channel.releases.find((release) => normalizeVersion(release.version) === wanted);
+    if (exact !== undefined) {
+        const status = exact.status.toLowerCase();
+        const compatible = COMPATIBLE_STATUS.has(status);
+        // Anything the author wrote that is not a known "yes" is not a "yes": the
+        // conservative reading is exactly what keeps this channel from ever blocking.
+        return { channel, standing: compatible ? 'match' : 'mismatch' };
+    }
+    if (channel.pinned !== null) {
+        const evaluated = evaluateRange(channel.pinned, runtime);
+        return { channel, standing: evaluated.satisfied ? 'match' : 'mismatch' };
+    }
+    return { channel, standing: 'unknown' };
+}
+//# sourceMappingURL=compat-channel.js.map