@lmzhen/dsh-evolution-capability 0.1.0-rc.1

package/README.md

@@ -0,0 +1,26 @@
+# @deepseek-ai/dsh-evolution-capability
+
+Explicit staged governance adapter for Creator-mode capability packages
+
+
+## Model Experience
+
+### Indirect model surface
+
+#### What the model sees
+
+`@deepseek-ai/dsh-evolution-capability` registers no direct prompt or tool schema itself. Model-visible effects are owned by the packages that consume this service.
+
+#### Token effect
+
+Zero direct token effect from this package; consumers add any model-visible tokens.
+
+#### KV Cache effect
+
+Independent of request-prefix construction. This package does not alter the assembled prompt or tool list.
+
+## Known Limitations and Deferred Work
+
+
+- - This adapter validates and stages capability packages only. It never executes model code; activation remains a manual Creator-mode operation.
+

package/lib/index.js

@@ -0,0 +1,101 @@
+import { Service } from "@deepseek-ai/cordis";
+import z from "@deepseek-ai/schemastery";
+//#region lib/types/index.js
+/**
+* Explicit, non-automatic capability evolution adapter.
+*
+* The DSH Creator mode already owns the trusted dynamic-package lifecycle.
+* This adapter adds the missing governance seam WITHOUT executing model code:
+* a capability package is validated, then submitted through the same staged
+* approval audit used by memory/skills. Human approval records the pending
+* package; the actual `cordis_define`/`cordis_run` work stays in Creator mode.
+* @module @lmzhen/dsh-evolution-capability
+*/
+const CAPABILITY_NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
+var EvolutionCapability = class extends Service {
+	static inject = ["evolutionApproval", "evolutionState"];
+	static Config = z.object({
+		maxNameLength: z.number().default(64),
+		maxPurposeLength: z.number().default(200),
+		maxCodeChars: z.number().default(65536)
+	});
+	limits;
+	constructor(ctx, config = {}) {
+		super(ctx, "evolutionCapability");
+		this.limits = {
+			maxNameLength: config.maxNameLength ?? 64,
+			maxPurposeLength: config.maxPurposeLength ?? 200,
+			maxCodeChars: config.maxCodeChars ?? 65536
+		};
+	}
+	validate(pkg) {
+		return validateCapabilityPackage(pkg, this.limits);
+	}
+	/** Stage one capability package. Execution is deliberately out of scope. */
+	async submit(pkg, origin = "foreground") {
+		const validation = this.validate(pkg);
+		if (!validation.ok) return {
+			ok: false,
+			message: validation.errors.join("; ")
+		};
+		const approval = this.ctx.evolutionApproval;
+		if (!approval.isEnabled) return {
+			ok: false,
+			message: "Capability evolution requires staged approval to be enabled."
+		};
+		const decision = await approval.request({
+			kind: "capability",
+			summary: `capability ${pkg.name}`,
+			args: pkg,
+			origin
+		});
+		if (decision.action !== "staged") return {
+			ok: false,
+			message: "Capability submission was not staged."
+		};
+		return {
+			ok: true,
+			pendingId: decision.pendingId,
+			message: decision.message
+		};
+	}
+	async listPending(status = "pending") {
+		return (await this.ctx.evolutionState.listPending(status)).filter((record) => record.kind === "capability");
+	}
+	/** Retrieve an approved package for manual Creator-mode activation. */
+	async approvedPackage(id) {
+		const record = (await this.ctx.evolutionState.listPending("approved")).find((item) => item.id === id && item.kind === "capability");
+		return record ? record.args : null;
+	}
+};
+function validateCapabilityPackage(pkg, limits = {
+	maxNameLength: 64,
+	maxPurposeLength: 200,
+	maxCodeChars: 65536
+}) {
+	const errors = [];
+	if (!pkg || typeof pkg !== "object" || Array.isArray(pkg)) return {
+		ok: false,
+		errors: ["capability package must be an object"]
+	};
+	const record = pkg;
+	const name = typeof record.name === "string" ? record.name.trim() : "";
+	const purpose = typeof record.purpose === "string" ? record.purpose.trim() : "";
+	const code = record.code;
+	if (!CAPABILITY_NAME_RE.test(name) || name.length > limits.maxNameLength) errors.push(`name must be lowercase-hyphenated and <= ${limits.maxNameLength} chars`);
+	if (purpose.length === 0 || purpose.length > limits.maxPurposeLength) errors.push(`purpose must be 1-${limits.maxPurposeLength} chars`);
+	if (!code || typeof code !== "object" || Array.isArray(code)) errors.push("code object is required");
+	else {
+		const halves = code;
+		const host = typeof halves.host === "string" ? halves.host : "";
+		const client = typeof halves.client === "string" ? halves.client : "";
+		if (host.length === 0 && client.length === 0) errors.push("at least one of code.host or code.client is required");
+		if (host.length > limits.maxCodeChars || client.length > limits.maxCodeChars) errors.push(`each code half must be <= ${limits.maxCodeChars} chars`);
+	}
+	return {
+		ok: errors.length === 0,
+		errors
+	};
+}
+//#endregion
+export { CAPABILITY_NAME_RE, EvolutionCapability, EvolutionCapability as default, validateCapabilityPackage };

package/lib/invariant.js

@@ -0,0 +1,8 @@
+//#region lib/types/invariant.js
+const PACKAGE_NAME = "@deepseek-ai/dsh-evolution-capability";
+const name = "evolution-capability-invariant";
+const inject = ["invariants"];
+const install = () => {};
+const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
+//#endregion
+export { apply, inject, name };

package/lib/types/index.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Explicit, non-automatic capability evolution adapter.
+ *
+ * The DSH Creator mode already owns the trusted dynamic-package lifecycle.
+ * This adapter adds the missing governance seam WITHOUT executing model code:
+ * a capability package is validated, then submitted through the same staged
+ * approval audit used by memory/skills. Human approval records the pending
+ * package; the actual `cordis_define`/`cordis_run` work stays in Creator mode.
+ * @module @deepseek-ai/dsh-evolution-capability
+ */
+import { Context, Service } from '@deepseek-ai/cordis';
+import type Schema from '@deepseek-ai/schemastery';
+import type { PendingRecord, PendingStatus } from '@deepseek-ai/dsh-evolution-state-storage';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        evolutionCapability: EvolutionCapability;
+    }
+}
+export declare const CAPABILITY_NAME_RE: RegExp;
+export interface CapabilityPackage {
+    name: string;
+    purpose: string;
+    code: {
+        host?: string;
+        client?: string;
+    };
+}
+export interface CapabilityValidation {
+    ok: boolean;
+    errors: string[];
+}
+export interface CapabilitySubmitResult {
+    ok: boolean;
+    pendingId?: string | undefined;
+    message: string;
+}
+export interface Config {
+    maxNameLength?: number;
+    maxPurposeLength?: number;
+    maxCodeChars?: number;
+}
+export declare class EvolutionCapability extends Service {
+    static inject: string[];
+    static Config: Schema<Config>;
+    private readonly limits;
+    constructor(ctx: Context, config?: Config);
+    validate(pkg: unknown): CapabilityValidation;
+    /** Stage one capability package. Execution is deliberately out of scope. */
+    submit(pkg: CapabilityPackage, origin?: 'foreground' | 'background_review'): Promise<CapabilitySubmitResult>;
+    listPending(status?: PendingStatus): Promise<PendingRecord[]>;
+    /** Retrieve an approved package for manual Creator-mode activation. */
+    approvedPackage(id: string): Promise<CapabilityPackage | null>;
+}
+export interface CapabilityLimits {
+    maxNameLength: number;
+    maxPurposeLength: number;
+    maxCodeChars: number;
+}
+export declare function validateCapabilityPackage(pkg: unknown, limits?: CapabilityLimits): CapabilityValidation;
+export default EvolutionCapability;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/invariant.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from '@deepseek-ai/cordis';
+export declare const name = "evolution-capability-invariant";
+export declare const inject: string[];
+export declare const apply: (ctx: Context) => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@lmzhen/dsh-evolution-capability",
+  "description": "Explicit staged governance adapter for Creator-mode capability packages (community build)",
+  "version": "0.1.0-rc.1",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lmzhen/dsh-evolution.git",
+    "directory": "packages/dsh-evolution-capability"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./invariant": {
+      "types": "./lib/types/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/invariant.js",
+    "lib/types/**/*.d.ts",
+    "lib/types/invariant.d.ts"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "@deepseek-ai/schemastery": "^3.18.1"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.6",
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@lmzhen/dsh-evolution-approval": "^0.1.0-rc.1",
+    "@lmzhen/dsh-evolution-state": "^0.1.0-rc.1",
+    "@lmzhen/dsh-evolution-state-storage": "^0.1.0-rc.1"
+  },
+  "devDependencies": {
+    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.6",
+    "@lmzhen/dsh-evolution-approval": "^0.1.0-rc.1",
+    "@lmzhen/dsh-evolution-state": "^0.1.0-rc.1",
+    "@lmzhen/dsh-evolution-state-storage": "^0.1.0-rc.1",
+    "@lmzhen/dsh-evolution-io": "^0.1.0-rc.1",
+    "@lmzhen/dsh-evolution-io-node": "^0.1.0-rc.1",
+    "@lmzhen/dsh-evolution-state-json": "^0.1.0-rc.1"
+  }
+}