@lmzhen/dsh-evolution-capability 0.3.62 → 0.3.64

package/lib/index.js

@@ -13,7 +13,7 @@ import { clampedNumber } from "@lmzhen/dsh-evolution-core";
 * @module @lmzhen/dsh-evolution-capability
 */
 const CAPABILITY_NAME_RE = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
-var EvolutionCapability = class extends Service {
+var EvolutionCapability = class EvolutionCapability extends Service {
 	static inject = ["evolutionApproval", "evolutionState"];
 	static Config = z.object({
 		maxNameLength: z.number().min(1).default(64),
@@ -21,6 +21,14 @@ var EvolutionCapability = class extends Service {
 		maxCodeChars: z.number().min(1).default(65536)
 	});
 	limits;
+	/** P3 (v15): single source for the default limits — the Config schema and
+	* `validateCapabilityPackage`'s standalone default used to repeat the same
+	* three numbers (drift risk). */
+	static DEFAULT_LIMITS = {
+		maxNameLength: 64,
+		maxPurposeLength: 200,
+		maxCodeChars: 65536
+	};
 	constructor(ctx, config = {}) {
 		super(ctx, "evolutionCapability");
 		const clamped = [];
@@ -30,9 +38,9 @@ var EvolutionCapability = class extends Service {
 			return result;
 		};
 		this.limits = {
-			maxNameLength: field("maxNameLength", config.maxNameLength, 64),
-			maxPurposeLength: field("maxPurposeLength", config.maxPurposeLength, 200),
-			maxCodeChars: field("maxCodeChars", config.maxCodeChars, 65536)
+			maxNameLength: field("maxNameLength", config.maxNameLength, EvolutionCapability.DEFAULT_LIMITS.maxNameLength),
+			maxPurposeLength: field("maxPurposeLength", config.maxPurposeLength, EvolutionCapability.DEFAULT_LIMITS.maxPurposeLength),
+			maxCodeChars: field("maxCodeChars", config.maxCodeChars, EvolutionCapability.DEFAULT_LIMITS.maxCodeChars)
 		};
 		if (clamped.length > 0) ctx.logger.warn(`evolution-capability: ${clamped.join(", ")} provided an invalid value; falling back to the default`);
 	}
@@ -53,13 +61,17 @@ var EvolutionCapability = class extends Service {
 		};
 		const decision = await approval.request({
 			kind: "capability",
-			summary: `capability ${pkg.name}`,
-			args: pkg,
+			summary: `capability ${pkg.name.trim()}`,
+			args: {
+				...pkg,
+				name: pkg.name.trim(),
+				purpose: pkg.purpose.trim()
+			},
 			origin
 		});
 		if (decision.action !== "staged") return {
 			ok: false,
-			message: "Capability submission requires staged approval: set approval.stageForeground=true (it keeps capability submissions paused for review; allow would bypass the audit)."
+			message: `Capability submission requires staged approval and must never skip the audit; approval allowed a direct write (${decision.message}). Check the session approval policy and the approval stageForeground setting.`
 		};
 		return {
 			ok: true,
@@ -77,11 +89,7 @@ var EvolutionCapability = class extends Service {
 		return this.validate(record.args).ok ? record.args : null;
 	}
 };
-function validateCapabilityPackage(pkg, limits = {
-	maxNameLength: 64,
-	maxPurposeLength: 200,
-	maxCodeChars: 65536
-}) {
+function validateCapabilityPackage(pkg, limits = EvolutionCapability.DEFAULT_LIMITS) {
 	const errors = [];
 	if (!pkg || typeof pkg !== "object" || Array.isArray(pkg)) return {
 		ok: false,
@@ -96,6 +104,8 @@ function validateCapabilityPackage(pkg, limits = {
 	if (!code || typeof code !== "object" || Array.isArray(code)) errors.push("code object is required");
 	else {
 		const halves = code;
+		if (halves.host !== void 0 && typeof halves.host !== "string") errors.push("code.host must be a string");
+		if (halves.client !== void 0 && typeof halves.client !== "string") errors.push("code.client must be a string");
 		const host = typeof halves.host === "string" ? halves.host : "";
 		const client = typeof halves.client === "string" ? halves.client : "";
 		if (host.length === 0 && client.length === 0) errors.push("at least one of code.host or code.client is required");

package/lib/types/index.d.ts

@@ -42,6 +42,10 @@ export declare class EvolutionCapability extends Service {
     static inject: string[];
     static Config: Schema<Config>;
     private readonly limits;
+    /** P3 (v15): single source for the default limits — the Config schema and
+     * `validateCapabilityPackage`'s standalone default used to repeat the same
+     * three numbers (drift risk). */
+    static readonly DEFAULT_LIMITS: Required<Config>;
     constructor(ctx: Context, config?: Config);
     validate(pkg: unknown): CapabilityValidation;
     /** Stage one capability package. Execution is deliberately out of scope. */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-capability",
   "description": "Explicit staged governance adapter for Creator-mode capability packages (community build)",
-  "version": "0.3.62",
+  "version": "0.3.64",
   "publishConfig": {
     "access": "public"
   },
@@ -31,22 +31,22 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-core": "^0.3.62"
+    "@lmzhen/dsh-evolution-core": "^0.3.64"
   },
   "peerDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
     "@deepseek-ai/cordis": "^4.0.1",
-    "@lmzhen/dsh-evolution-approval": "^0.3.62",
-    "@lmzhen/dsh-evolution-state": "^0.3.62",
-    "@lmzhen/dsh-evolution-state-storage": "^0.3.62"
+    "@lmzhen/dsh-evolution-approval": "^0.3.64",
+    "@lmzhen/dsh-evolution-state": "^0.3.64",
+    "@lmzhen/dsh-evolution-state-storage": "^0.3.64"
   },
   "devDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
-    "@lmzhen/dsh-evolution-approval": "^0.3.62",
-    "@lmzhen/dsh-evolution-state": "^0.3.62",
-    "@lmzhen/dsh-evolution-state-storage": "^0.3.62",
-    "@lmzhen/dsh-evolution-io": "^0.3.62",
-    "@lmzhen/dsh-evolution-io-node": "^0.3.62",
-    "@lmzhen/dsh-evolution-state-json": "^0.3.62"
+    "@lmzhen/dsh-evolution-approval": "^0.3.64",
+    "@lmzhen/dsh-evolution-state": "^0.3.64",
+    "@lmzhen/dsh-evolution-state-storage": "^0.3.64",
+    "@lmzhen/dsh-evolution-io": "^0.3.64",
+    "@lmzhen/dsh-evolution-io-node": "^0.3.64",
+    "@lmzhen/dsh-evolution-state-json": "^0.3.64"
   }
 }