@hongmaple0820/dsh-scale 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,60 @@
-# Temporary Holding Version
+# dsh-scale
+
+SCALE Engine 治理插件 for DeepSeek Harness（DSH）。一个 `apply()` 挂五座桥：
+
+| 桥 | DSH 扩展点 | 作用 |
+| --- | --- | --- |
+| Shield | `tools/pre-execute`（waterfall） | 危险命令拦截（block→deny）、受保护路径、warn 级命令转 `ask` 用户确认 |
+| Cortex | `systemPrompt.context` | 注入 SCALE 证据纪律契约 + 高置信本能（`InstinctStore`/`SessionInjector`） |
+| Evidence | `tools/post-execute` | 工具调用落 `.scale/evidence/runtime/`（异步、默认 failures-only） |
+| Commands（T2） | `ctx.commands.register` | 6 个治理斜杠命令：`/scale-preflight`、`/scale-gate-quality`、`/scale-verify`、`/scale-shield-status`、`/scale-cortex-metrics`、`/scale-doctor-env`——真实拉起 `scale` CLI（allowlist 固定参数、120–300s 超时、输出截断） |
+| Skills（T2） | `ctx.skills.registerProvider` | `.scale/skills/<PHASE>/<name>.md` 阶段工作流技能进 DSH 注册表（名字 kebab-case、正文 get() 懒加载；`skills.json` 的域路由元数据不注册——那些指向全局根的外部技能，DSH 自己的文件发现负责） |
+
+客户端半（T3）：`exports["./client"]`（`dsh.client.platform: "web"`）为 25 个 `mcp__scale__*` 工具注册 `tool.call.toolview` 卡片——纯展示（会话内参数 + 结果），轻量 React（`React.createElement` 全局 + `styles.insert`，无 JSX、无 Vue 混挂——计划 R6 允许的回退路线，U4 就此关闭），不触文件系统。
+
+工具名映射（DSH → SCALE Shield）：`pwsh→Bash`、`write→Write`、`edit→Edit`、`read→Read`；`mcp__scale__*` 前缀自动解包（`shell_run` 按 Bash 语义判定）。
+
+## 配置（cordis.patch.yml config）
+
+| 键 | 默认 | 说明 |
+| --- | --- | --- |
+| `projectDir` | `''`（用 DSH 会话 cwd） | `.scale/` 所在项目根 |
+| `enableShield` / `enableCortex` / `enableEvidence` / `enableCommands` / `enableSkills` | `true` | 五座桥单独开关 |
+| `evidenceMode` | `'failures-only'` | `'all'` 记录全部工具调用（写盘量未压测，plan U8） |
+
+## 本地开发
+
+```bash
+# 1. 构建主包（插件类型与运行时都依赖 dist/）
+npm run build                        # repo root
+
+# 2. 插件依赖 + 构建（file: 链接主包）
+cd packages/dsh-scale
+npm install
+npm run build
+
+# 3. 独立 profile 验证（desktop 被 Electron 独占，不能用）
+dsh --profile scale-dev --from-default-profile web   # 建一次
+dsh --profile scale-dev --patch packages/dsh-scale/dev.patch.yml --dump-config
+SCALE_DSH_SELFTEST=1 dsh --profile scale-dev --patch packages/dsh-scale/dev.patch.yml --help
+```
+
+`SCALE_DSH_SELFTEST=1` 触发 §5.6 式零 API 自测（BLOCK/PROTECT/ALLOW 三用例）。
+
+## 安装（正式）
+
+```bash
+dsh plugin --profile <profile> add @hongmaple0820/dsh-scale
+dsh --profile <profile> --dump-config   # 确认 scale-governance 层未被跳过
+```
+
+发布须知：`files` 只含 `lib/`（预构建，含 client.js）+ `cordis.patch.yml`，避免 git 安装的 build 授权陷阱（plan §2.11）。
+
+## 边界
+
+- 不构造 `SQLiteArtifactStore`/`MemoryBrain` —— DSH 的 Electron ABI（MODULE_VERSION 149）与主包原生模块（137）不兼容；本插件只走 `InMemoryArtifactStore`/纯函数路径（plan R1）。
+- 多项目：`projectDir` 固定值在多工作区场景会保护错项目；Shield 逐次按 `exec.agent.session.header.cwd` 解析。Skills/Commands 按进程 cwd（`projectDir` 配置优先）。
+- `SessionInjector` 的 `.scale/specs` 按 `process.cwd()` 解析（主包既有行为），会话 cwd ≠ projectDir 时 specs 段缺省。
+- 斜杠命令的 CLI 参数是 allowlist 固定的，`rawInput` 不透传（v1 安全取舍）；需要带参命令时先扩 allowlist。
+- 客户端卡片对 props 做防御式消费（第三方卡片的载荷形状不是稳定公开契约），缺字段时降级为仅显示工具名。
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.

package/cordis.patch.yml

@@ -0,0 +1,6 @@
+# dsh-scale: SCALE Engine governance plugin
+# Insert SCALE governance into the DSH profile's bundle list.
+# The --insert adds the bundle _after_ any existing entries in the target group.
+- insert:
+    - id: scale-governance
+      name: '@hongmaple0820/dsh-scale'

package/lib/cliExecutor.d.ts

@@ -0,0 +1,19 @@
+export interface CliRunResult {
+    ok: boolean;
+    exitCode: number | null;
+    output: string;
+}
+/**
+ * Locate <main package>/dist/api/cli.js by walking up from this module
+ * looking for the installed package. Filesystem probing (not require.resolve):
+ * the main package is ESM-only — its `exports` map has just an `import`
+ * condition, so a CJS resolve of the bare name always throws
+ * ERR_PACKAGE_PATH_NOT_EXPORTED. Symlinks (npm file:, pnpm) are realpath'd
+ * to the physical package root.
+ */
+export declare function resolveScaleCli(): string | null;
+/**
+ * Run `scale <args...>` in projectDir. Output (stdout+stderr) is capped;
+ * timeout kills the child and reports failure. Never rejects.
+ */
+export declare function runScaleCli(args: string[], projectDir: string, timeoutMs?: number): Promise<CliRunResult>;

package/lib/cliExecutor.js

@@ -0,0 +1,88 @@
+// dsh-scale: SCALE CLI executor — spawns the real `scale` CLI from the
+// resolved main package (dist/api/cli.js, the `bin` entry) with a hard
+// timeout and bounded output. Never throws: every failure is a return value
+// (a throwing command handler settles as an error result, but staying inside
+// the contract is cheaper than relying on that).
+import { spawn } from 'node:child_process';
+import { existsSync, realpathSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const OUTPUT_CAP = 20_000;
+const DEFAULT_TIMEOUT_MS = 120_000;
+const PKG_DIR = join('node_modules', '@hongmaple0820', 'scale-engine');
+/**
+ * Locate <main package>/dist/api/cli.js by walking up from this module
+ * looking for the installed package. Filesystem probing (not require.resolve):
+ * the main package is ESM-only — its `exports` map has just an `import`
+ * condition, so a CJS resolve of the bare name always throws
+ * ERR_PACKAGE_PATH_NOT_EXPORTED. Symlinks (npm file:, pnpm) are realpath'd
+ * to the physical package root.
+ */
+export function resolveScaleCli() {
+    let dir = dirname(fileURLToPath(import.meta.url));
+    for (let depth = 0; depth < 8; depth += 1) {
+        const candidate = join(dir, PKG_DIR);
+        if (existsSync(candidate)) {
+            const root = realpathSync(candidate);
+            const cli = join(root, 'dist', 'api', 'cli.js');
+            return existsSync(cli) ? cli : null;
+        }
+        const parent = dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+/**
+ * Run `scale <args...>` in projectDir. Output (stdout+stderr) is capped;
+ * timeout kills the child and reports failure. Never rejects.
+ */
+export function runScaleCli(args, projectDir, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const cli = resolveScaleCli();
+    if (!cli) {
+        return Promise.resolve({
+            ok: false,
+            exitCode: null,
+            output: 'scale CLI not found: @hongmaple0820/scale-engine is not installed (or dist/ not built) next to dsh-scale',
+        });
+    }
+    return new Promise((resolve) => {
+        let output = '';
+        let settled = false;
+        const child = spawn(process.execPath, [cli, ...args], {
+            cwd: projectDir,
+            env: { ...process.env, SCALE_DIR: '.scale' },
+            windowsHide: true,
+        });
+        const cap = (chunk) => {
+            if (output.length >= OUTPUT_CAP)
+                return;
+            output = (output + chunk).slice(0, OUTPUT_CAP);
+        };
+        child.stdout.on('data', (d) => cap(String(d)));
+        child.stderr.on('data', (d) => cap(String(d)));
+        const timer = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            child.kill();
+            resolve({ ok: false, exitCode: null, output: `${output}\n[scale] timed out after ${timeoutMs}ms` });
+        }, timeoutMs);
+        child.on('error', (err) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve({ ok: false, exitCode: null, output: `spawn failed: ${err.message}` });
+        });
+        child.on('close', (code) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve({ ok: code === 0, exitCode: code, output });
+        });
+    });
+}
+//# sourceMappingURL=cliExecutor.js.map

package/lib/cliExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliExecutor.js","sourceRoot":"","sources":["../src/cliExecutor.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,uEAAuE;AACvE,4EAA4E;AAC5E,6EAA6E;AAC7E,iDAAiD;AAEjD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAQxC,MAAM,UAAU,GAAG,MAAM,CAAA;AACzB,MAAM,kBAAkB,GAAG,OAAO,CAAA;AAClC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAA;AAEtE;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACjD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACpC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;YAC/C,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QACrC,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAK;QACzB,GAAG,GAAG,MAAM,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,IAAc,EACd,UAAkB,EAClB,SAAS,GAAG,kBAAkB;IAE9B,MAAM,GAAG,GAAG,eAAe,EAAE,CAAA;IAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,0GAA0G;SACnH,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE;YACpD,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE;YAC5C,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;QAEF,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE;YAC5B,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;gBAAE,OAAM;YACvC,MAAM,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;QAChD,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9C,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAE9C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,KAAK,CAAC,IAAI,EAAE,CAAA;YACZ,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,6BAA6B,SAAS,IAAI,EAAE,CAAC,CAAA;QACrG,CAAC,EAAE,SAAS,CAAC,CAAA;QAEb,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAChF,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/client.d.ts

@@ -0,0 +1,11 @@
+export declare const inject: string[];
+export declare function apply(ctx: {
+    slots?: {
+        inject?: (slot: string, fn: () => unknown) => void;
+        register?: (meta: {
+            name: string;
+            key: string;
+        }, component: unknown) => unknown;
+    };
+    effect?: (fn: () => (() => void) | void) => void;
+}): void;

package/lib/client.js

@@ -0,0 +1,114 @@
+// dsh-scale client half (T3) — Web (React) client plugin.
+//
+// Route decision (plan R6/U4, resolved): lightweight React components via the
+// client `React` global and `styles.insert` — no JSX transform, no Vue
+// mounting bridge, no DSH-internal module imports. Everything renders from
+// data already in the conversation (tool call args + results); the client
+// never touches the filesystem (plan §6 T3 acceptance).
+//
+// This module must stay free of node-only imports: it loads in the browser.
+/** The 25 MCP tools dsh-scale exposes under mcp__scale__ (27 minus the narrowed shell pair). */
+const SCALE_MCP_TOOLS = [
+    'scale_create', 'scale_transition', 'scale_list', 'scale_show', 'scale_available_actions',
+    'scale_context', 'scale_stats', 'scale_detect_changes', 'scale_review_context',
+    'scale_code_intelligence_status', 'task_create', 'task_start', 'task_status',
+    'task_checkpoint', 'task_resume', 'complete_task', 'capability_list', 'capability_map',
+    'bridge_register', 'bridge_heartbeat', 'delegation_delegate', 'delegation_review',
+    'cortex_promotion_propose', 'cortex_promotion_hit', 'cortex_promotion_approve',
+];
+const CSS = `
+.dsh-scale-card{border:1px solid var(--dsh-border,#e2e2e2);border-radius:8px;padding:8px 10px;margin:4px 0;font-size:12px;font-family:var(--dsh-mono,ui-monospace,monospace)}
+.dsh-scale-card-head{display:flex;gap:6px;align-items:baseline;margin-bottom:4px}
+.dsh-scale-card-badge{background:#1f6feb;color:#fff;border-radius:4px;padding:1px 5px;font-size:10px;font-weight:600;letter-spacing:.03em}
+.dsh-scale-card-name{font-weight:600}
+.dsh-scale-card-args{color:var(--dsh-muted,#666);white-space:pre-wrap;word-break:break-all;max-height:6.5em;overflow:hidden}
+.dsh-scale-card-result{margin-top:4px;color:var(--dsh-text,#222);white-space:pre-wrap;word-break:break-all;max-height:10em;overflow:hidden;border-top:1px dashed var(--dsh-border,#ddd);padding-top:4px}
+`;
+/** Defensive React access — the client exposes React (createElement) as a global (plan §2.8). */
+function react() {
+    return globalThis.React;
+}
+function preview(value, cap = 600) {
+    if (value === null || value === undefined)
+        return '';
+    if (typeof value === 'string')
+        return value.slice(0, cap);
+    try {
+        return JSON.stringify(value, null, 1).slice(0, cap);
+    }
+    catch {
+        return '[unserializable]';
+    }
+}
+/** Extract the raw tool name from mcp__scale__<name>. */
+function shortName(wireName) {
+    return wireName.startsWith('mcp__scale__') ? wireName.slice('mcp__scale__'.length) : wireName;
+}
+/**
+ * Toolview card for mcp__scale__* calls. Props are consumed defensively:
+ * the exact third-party card payload shape is not part of a stable public
+ * contract, so every field is optional and rendering degrades to the name.
+ */
+function ScaleToolCard(props) {
+    const R = react();
+    if (!R)
+        return null;
+    const wireName = typeof props.tool === 'string' ? props.tool
+        : typeof props.name === 'string' ? props.name
+            : 'mcp__scale__?';
+    const argsText = preview(props.arguments ?? props.args ?? props.input);
+    const resultText = preview(props.result ?? props.content ?? props.output);
+    const children = [
+        R.createElement('span', { className: 'dsh-scale-card-badge' }, 'SCALE'),
+        R.createElement('span', { className: 'dsh-scale-card-name' }, shortName(wireName)),
+    ];
+    if (props.phase === 'preparing' || props.isRunning === true) {
+        children.push(R.createElement('span', { className: 'dsh-scale-card-name' }, '· running'));
+    }
+    const body = [R.createElement('div', { className: 'dsh-scale-card-head' }, ...children)];
+    if (argsText)
+        body.push(R.createElement('div', { className: 'dsh-scale-card-args' }, argsText));
+    if (resultText)
+        body.push(R.createElement('div', { className: 'dsh-scale-card-result' }, resultText));
+    return R.createElement('div', { className: 'dsh-scale-card', 'data-tool': wireName }, ...body);
+}
+export const inject = ['slots'];
+export function apply(ctx) {
+    // Client-scoped CSS, inserted once (styles.insert is a client global).
+    const styles = globalThis.styles;
+    try {
+        styles?.insert(CSS);
+    }
+    catch {
+        // styling is best-effort; the card still renders unstyled
+    }
+    const slots = ctx.slots;
+    if (!slots?.register)
+        return;
+    const disposers = [];
+    for (const tool of SCALE_MCP_TOOLS) {
+        const wireName = `mcp__scale__${tool}`;
+        try {
+            const registered = slots.register({ name: 'tool.call.toolview', key: wireName }, ScaleToolCard);
+            if (typeof registered === 'function')
+                disposers.push(registered);
+            else if (registered && typeof registered.dispose === 'function') {
+                disposers.push(() => registered.dispose());
+            }
+        }
+        catch {
+            // duplicate key (reload) — skip, keep the rest
+        }
+    }
+    ctx.effect?.(() => () => {
+        for (const dispose of disposers) {
+            try {
+                dispose();
+            }
+            catch {
+                // best-effort teardown
+            }
+        }
+    });
+}
+//# sourceMappingURL=client.js.map

package/lib/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,8EAA8E;AAC9E,uEAAuE;AACvE,2EAA2E;AAC3E,0EAA0E;AAC1E,wDAAwD;AACxD,EAAE;AACF,4EAA4E;AAE5E,gGAAgG;AAChG,MAAM,eAAe,GAAG;IACtB,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,YAAY,EAAE,yBAAyB;IACzF,eAAe,EAAE,aAAa,EAAE,sBAAsB,EAAE,sBAAsB;IAC9E,gCAAgC,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa;IAC5E,iBAAiB,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB;IACtF,iBAAiB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB;IACjF,0BAA0B,EAAE,sBAAsB,EAAE,0BAA0B;CACtE,CAAA;AAEV,MAAM,GAAG,GAAG;;;;;;;CAOX,CAAA;AAED,iGAAiG;AACjG,SAAS,KAAK;IACZ,OAAQ,UAAkC,CAAC,KAAiC,CAAA;AAC9E,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,GAAG,GAAG,GAAG;IACxC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACzD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAA;IAC3B,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC/F,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAA8B;IACnD,MAAM,CAAC,GAAG,KAAK,EAAE,CAAA;IACjB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAEnB,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;QAC1D,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;YAC3C,CAAC,CAAC,eAAe,CAAA;IACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IACtE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;IAEzE,MAAM,QAAQ,GAAc;QAC1B,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,sBAAsB,EAAE,EAAE,OAAO,CAAC;QACvE,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;KACnF,CAAA;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5D,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,EAAE,WAAW,CAAC,CAAC,CAAA;IAC3F,CAAC;IAED,MAAM,IAAI,GAAc,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAA;IACnG,IAAI,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC/F,IAAI,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,uBAAuB,EAAE,EAAE,UAAU,CAAC,CAAC,CAAA;IAErG,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,CAAA;AAChG,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,CAAA;AAE/B,MAAM,UAAU,KAAK,CAAC,GAMrB;IACC,uEAAuE;IACvE,MAAM,MAAM,GAAI,UAA6D,CAAC,MAAM,CAAA;IACpF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAA;IACvB,IAAI,CAAC,KAAK,EAAE,QAAQ;QAAE,OAAM;IAE5B,MAAM,SAAS,GAAsB,EAAE,CAAA;IACvC,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,eAAe,IAAI,EAAE,CAAA;QACtC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAA;YAC/F,IAAI,OAAO,UAAU,KAAK,UAAU;gBAAE,SAAS,CAAC,IAAI,CAAC,UAAwB,CAAC,CAAA;iBACzE,IAAI,UAAU,IAAI,OAAQ,UAAuC,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBAC9F,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAE,UAAsC,CAAC,OAAO,EAAE,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IAED,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;QACtB,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,OAAO,EAAE,CAAA;YACX,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/commandsBridge.d.ts

@@ -0,0 +1,26 @@
+import type { CommandsService } from './dshTypes.js';
+export interface ScaleCommandSpec {
+    /** DSH slash command name: /^[a-z][a-z0-9_-]*$/ */
+    name: string;
+    description: string;
+    /** CLI argv after the `scale` binary (allowlisted — raw user input is never appended) */
+    args: string[];
+    /** timeout override for slow gates */
+    timeoutMs?: number;
+}
+/**
+ * The T2.1 allowlist (plan §6: candidates from ~90 top-level commands).
+ * Deliberately excludes daemons (open, dashboard, orch start) and anything
+ * that mutates agent installs from inside a UI command.
+ */
+export declare const SCALE_COMMANDS: ScaleCommandSpec[];
+/**
+ * Register the allowlisted SCALE commands. The handler stays inside the
+ * CommandResult contract on every path — a throw would settle as an error
+ * result, but not throwing is cheaper and keeps our own message.
+ */
+export declare function registerScaleCommands(ctx: {
+    commands?: CommandsService;
+}, config: {
+    projectDir?: string;
+}): number;

package/lib/commandsBridge.js

@@ -0,0 +1,52 @@
+// dsh-scale: Commands Bridge (T2.1) — exposes SCALE governance gates as DSH
+// slash commands. Commands are user-invoked UI actions; they never enter the
+// model (plan §2.7). Only non-daemon commands are allowlisted — long-running
+// surfaces (open/dashboard/orch start) stay out because DSH has its own
+// scheduling (plan §6 T2.1).
+import { runScaleCli } from './cliExecutor.js';
+/**
+ * The T2.1 allowlist (plan §6: candidates from ~90 top-level commands).
+ * Deliberately excludes daemons (open, dashboard, orch start) and anything
+ * that mutates agent installs from inside a UI command.
+ */
+export const SCALE_COMMANDS = [
+    { name: 'scale-preflight', description: 'Run SCALE preflight checks for this project', args: ['preflight'] },
+    { name: 'scale-gate-quality', description: 'Run the SCALE quality gate chain', args: ['gate', 'quality'], timeoutMs: 300_000 },
+    { name: 'scale-verify', description: 'Run SCALE verify with the default profile', args: ['verify', '--profile', 'default'], timeoutMs: 300_000 },
+    { name: 'scale-shield-status', description: 'Show Scale Shield hook registration and .scale integrity', args: ['shield', 'status'] },
+    { name: 'scale-cortex-metrics', description: 'Show SCALE Cortex governance ROI metrics (30 days)', args: ['cortex', 'metrics', '--days', '30'] },
+    { name: 'scale-doctor-env', description: 'Diagnose the SCALE environment', args: ['doctor', 'env'] },
+];
+/**
+ * Register the allowlisted SCALE commands. The handler stays inside the
+ * CommandResult contract on every path — a throw would settle as an error
+ * result, but not throwing is cheaper and keeps our own message.
+ */
+export function registerScaleCommands(ctx, config) {
+    const commands = ctx.commands;
+    if (!commands?.register)
+        return 0;
+    let registered = 0;
+    for (const spec of SCALE_COMMANDS) {
+        try {
+            commands.register({
+                name: spec.name,
+                description: spec.description,
+                handler: async () => {
+                    const projectDir = config.projectDir || process.cwd();
+                    const result = await runScaleCli(spec.args, projectDir, spec.timeoutMs);
+                    const text = `$ scale ${spec.args.join(' ')}\n${result.output.trim()}`.trim();
+                    return result.ok
+                        ? { kind: 'success', text }
+                        : { kind: 'error', text: `${text}\n(exit ${result.exitCode ?? 'killed'})` };
+                },
+            });
+            registered += 1;
+        }
+        catch {
+            // duplicate name (reload) or registry closed — skip this command, keep the rest
+        }
+    }
+    return registered;
+}
+//# sourceMappingURL=commandsBridge.js.map

package/lib/commandsBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandsBridge.js","sourceRoot":"","sources":["../src/commandsBridge.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,wEAAwE;AACxE,6BAA6B;AAG7B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAY9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,6CAA6C,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE;IAC5G,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,kCAAkC,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE;IAC9H,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,2CAA2C,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE;IAChJ,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,0DAA0D,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;IACpI,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,oDAAoD,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;IAChJ,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,gCAAgC,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE;CACrG,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAmC,EACnC,MAA+B;IAE/B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;IAC7B,IAAI,CAAC,QAAQ,EAAE,QAAQ;QAAE,OAAO,CAAC,CAAA;IAEjC,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,QAAQ,CAAC,QAAQ,CAAC;gBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,OAAO,EAAE,KAAK,IAA4B,EAAE;oBAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;oBACrD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;oBACvE,MAAM,IAAI,GAAG,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAA;oBAC7E,OAAO,MAAM,CAAC,EAAE;wBACd,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;wBAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,WAAW,MAAM,CAAC,QAAQ,IAAI,QAAQ,GAAG,EAAE,CAAA;gBAC/E,CAAC;aACF,CAAC,CAAA;YACF,UAAU,IAAI,CAAC,CAAA;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;QAClF,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC"}

package/lib/cortexBridge.d.ts

@@ -0,0 +1,17 @@
+export interface CortexContextEntry {
+    id: string;
+    content: string;
+    order: number;
+}
+/**
+ * Build the single systemPrompt.context entry for a project.
+ *
+ * buildMinimal() always returns at least the evidence-discipline contract;
+ * high-confidence instincts (≥0.7, plan §3.3) are appended when present.
+ * Returns null only if the injection cannot be built at all (graceful degrade).
+ *
+ * Note: SessionInjector.loadScopedSpecs resolves .scale/specs against
+ * process.cwd(), not projectDir — single-project deployments where the DSH
+ * session cwd === projectDir get the full injection (plan §6 T1.2 caveat).
+ */
+export declare function buildCortexContext(projectDir: string): CortexContextEntry | null;

package/lib/cortexBridge.js

@@ -0,0 +1,34 @@
+// dsh-scale: Cortex Bridge — system prompt instinct injection
+// Uses SCALE's own InstinctStore + SessionInjector so the on-disk format is
+// read by the code that writes it (<domain>/<id>.yaml, .audit.jsonl — plan §3.3).
+// The earlier hand-rolled reader expected manifest.json + flat .md files,
+// which InstinctStore never writes: it silently matched zero instincts.
+import { join } from 'node:path';
+import { InstinctStore, SessionInjector } from '@hongmaple0820/scale-engine';
+/**
+ * Build the single systemPrompt.context entry for a project.
+ *
+ * buildMinimal() always returns at least the evidence-discipline contract;
+ * high-confidence instincts (≥0.7, plan §3.3) are appended when present.
+ * Returns null only if the injection cannot be built at all (graceful degrade).
+ *
+ * Note: SessionInjector.loadScopedSpecs resolves .scale/specs against
+ * process.cwd(), not projectDir — single-project deployments where the DSH
+ * session cwd === projectDir get the full injection (plan §6 T1.2 caveat).
+ */
+export function buildCortexContext(projectDir) {
+    try {
+        // createDirs: false — reading must never mint a .scale/instincts directory
+        const store = new InstinctStore(join(projectDir, '.scale', 'instincts'), { createDirs: false });
+        const injector = new SessionInjector(store);
+        const injection = injector.buildMinimal();
+        if (!injection?.content?.trim())
+            return null;
+        return { id: 'scale-cortex', content: injection.content, order: 900 };
+    }
+    catch {
+        // Instinct store unreadable → no injection; Shield and Evidence stay up
+        return null;
+    }
+}
+//# sourceMappingURL=cortexBridge.js.map

package/lib/cortexBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cortexBridge.js","sourceRoot":"","sources":["../src/cortexBridge.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,4EAA4E;AAC5E,kFAAkF;AAClF,0EAA0E;AAC1E,wEAAwE;AAExE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAQ5E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,IAAI,CAAC;QACH,2EAA2E;QAC3E,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;QAC/F,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAA;QAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAA;QACzC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;YAAE,OAAO,IAAI,CAAA;QAC5C,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/dshTypes.d.ts

@@ -0,0 +1,99 @@
+/** Event names this plugin subscribes to (plan §2.5 tool pipeline). */
+export type ToolEventListener = (...args: unknown[]) => unknown;
+export interface SystemPromptService {
+    /** Register a context block; signature per plan §6 T1.2 (U5: exact arity re-checked at live acceptance). */
+    context?: (id: string, content: string, opts?: {
+        order?: number;
+    }) => void;
+}
+/** Materialized final result of a tools.execute() call (verified against dsh-tools 0.2.1-rc.2). */
+export interface ToolExecutionOutcome {
+    isError: boolean;
+    content?: Array<{
+        type: string;
+        text?: string;
+    }>;
+    message?: string;
+}
+export interface ToolsService {
+    /** execute(exec) takes a typed call input object — NOT (name, args). Call it as tools.execute({...}) so `this` stays bound. */
+    execute?: (exec: {
+        name: string;
+        arguments?: Record<string, unknown>;
+        callId?: string;
+        /** callerCancelled() reads signal.aborted — required in 0.2.1-rc.2. */
+        signal?: AbortSignal;
+    }) => Promise<ToolExecutionOutcome>;
+}
+/** dsh-commands CommandResult: success may omit text; error text must be non-empty. */
+export type CommandResult = {
+    kind: 'success';
+    text?: string;
+} | {
+    kind: 'error';
+    text: string;
+};
+export interface CommandInvocation {
+    commandId: string;
+    rawInput: string;
+    signal: AbortSignal;
+    agent?: unknown;
+}
+export interface CommandsService {
+    /** name must match /^[a-z][a-z0-9_-]*$/; description non-empty; handler returns CommandResult. */
+    register?: (definition: {
+        name: string;
+        description: string;
+        input?: {
+            hint: string;
+            attachments?: boolean;
+        };
+        handler: (invocation: CommandInvocation) => Promise<CommandResult> | CommandResult;
+    }) => unknown;
+}
+/** /^[a-z0-9]+(?:-[a-z0-9]+)*$/ — kebab-case, no uppercase. */
+export type SkillInvocation = {
+    modelInvocable: boolean;
+    userInvocable: boolean;
+};
+export interface SkillCandidate {
+    name: string;
+    description: string;
+    invocation: SkillInvocation;
+    /** where this skill came from (display) */
+    source: string;
+    /** must equal the provider's own name */
+    provider: string;
+    rank: number;
+    whenToUse?: string;
+    path?: string;
+    /** opaque value passed back to provider.get() */
+    locator?: unknown;
+}
+export interface SkillDefinition extends SkillCandidate {
+    /** full skill body (markdown) */
+    content: string;
+}
+export interface SkillProvider {
+    name: string;
+    list: () => Promise<SkillCandidate[] | {
+        candidates: SkillCandidate[];
+        complete: boolean;
+    }>;
+    get: (candidate: SkillCandidate) => Promise<SkillDefinition | undefined>;
+}
+export interface SkillsService {
+    /** create() runs synchronously during apply; disk/remote work belongs in list()/get(). */
+    registerProvider?: (create: (control: {
+        signal: AbortSignal;
+        invalidate: () => void;
+    }) => SkillProvider) => unknown;
+}
+export interface CordisContext {
+    on: (event: string, listener: ToolEventListener) => void;
+    effect: (setup: () => (() => void) | void) => void;
+    systemPrompt?: SystemPromptService;
+    tools?: ToolsService;
+    commands?: CommandsService;
+    skills?: SkillsService;
+}

package/lib/dshTypes.js

@@ -0,0 +1,9 @@
+// Minimal structural types for the Cordis Context DSH hands to apply().
+//
+// The real types live in DSH's own cordis package (not published under the
+// bare name `cordis` this plugin could resolve); we only consume three
+// services, so structural types keep the plugin dependency-free while staying
+// honest about what we touch. Swap for `@deepseek-ai/cordis` types once that
+// package is consumable outside the DSH tree (plan R7: rc drift).
+export {};
+//# sourceMappingURL=dshTypes.js.map

package/lib/dshTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dshTypes.js","sourceRoot":"","sources":["../src/dshTypes.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,2EAA2E;AAC3E,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAC7E,kEAAkE"}

package/lib/evidenceBridge.d.ts

@@ -0,0 +1,19 @@
+export type EvidenceMode = 'failures-only' | 'all';
+export interface ToolEvidenceParams {
+    toolName: string;
+    args: Record<string, unknown>;
+    result: unknown;
+    error: boolean;
+    projectDir: string;
+    sessionId?: string;
+    mode?: EvidenceMode;
+}
+/** Await all in-flight evidence writes (tests, graceful shutdown). */
+export declare function pendingEvidenceWrites(): Promise<void>;
+/** Reset module state — plugin unload (ctx.effect disposer) and tests. */
+export declare function resetEvidenceBridge(): void;
+/**
+ * Record a tool execution. Fire-and-forget: enqueues an async write and
+ * returns immediately — evidence must never block or fail the tool result.
+ */
+export declare function recordToolEvidence(params: ToolEvidenceParams): void;