@lmzhen/dsh-evolution-skill-health 0.26.26 → 0.27.0

package/lib/client.js

@@ -5,34 +5,141 @@ window.__ModuleLoader__.load({
 		var exports = module.exports;
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 		let react = require("react");
-		//#region src/client/api.ts
-		/** Route paths, mirrored from the host half. */
-		const HOST_ROUTES = { rows: "/api/dsh-evolution/skill-health/rows" };
+		//#region src/client/routes.generated.ts
 		/**
-		* Read the scan result.
-		* @returns the payload, or the host's own refusal sentence.
+		* Every family host path, generated from evolution-core's HOST_ROUTES (the ONE declaration).
+		* A browser half cannot import the host package at runtime (client bundles keep @deepseek-ai/*
+		* external), so the table is mirrored here mechanically; a rename in core regenerates all three
+		* client copies, and the generator's --check makes a stale copy red.
 		*/
-		async function rows() {
+		const ROUTES = {
+			approval: {
+				pending: "/api/dsh-evolution/approval/pending",
+				preview: "/api/dsh-evolution/approval/preview",
+				approve: "/api/dsh-evolution/approval/approve",
+				reject: "/api/dsh-evolution/approval/reject"
+			},
+			"skill-history": {
+				skills: "/api/dsh-evolution/skill-history/skills",
+				versions: "/api/dsh-evolution/skill-history/versions",
+				diff: "/api/dsh-evolution/skill-history/versions/diff",
+				body: "/api/dsh-evolution/skill-history/versions/body",
+				undo: "/api/dsh-evolution/skill-history/undo",
+				health: "/api/dsh-evolution/skill-history/health"
+			},
+			"skill-health": { rows: "/api/dsh-evolution/skill-health/rows" },
+			diagnostics: { view: "/api/dsh-evolution/diagnostics" }
+		};
+		//#endregion
+		//#region src/client/route-client.generated.ts
+		/** Classify a non-2xx status: 401/403/404 keep their own kind, everything else is a server answer. */
+		function classify(status) {
+			if (status === 401) return {
+				kind: "unauthenticated",
+				status: 401
+			};
+			if (status === 403) return {
+				kind: "forbidden",
+				status: 403
+			};
+			if (status === 404) return {
+				kind: "unmounted",
+				status: 404
+			};
+			return {
+				kind: "server",
+				status
+			};
+		}
+		/**
+		* One request, no retries and no body parsing for the platform's admission answers.
+		* @param doFetch - the fetch in use (the browser's, or a spec's stub).
+		* @param path - the exact route path from the generated ROUTES table.
+		* @param init - standard RequestInit.
+		* @returns the data, or the classified failure (network/parse failures read as 'server').
+		*/
+		async function requestJson(doFetch, path, init) {
+			let response;
 			try {
-				const response = await fetch(HOST_ROUTES.rows, { headers: { accept: "application/json" } });
-				const body = await response.json();
-				if (!response.ok) return {
+				response = await doFetch(path, init);
+			} catch (error) {
+				return {
 					ok: false,
-					message: body.message ?? "skill-health: the route refused the request"
+					failure: {
+						kind: "server",
+						status: 0,
+						detail: error instanceof Error ? error.message : String(error)
+					}
 				};
+			}
+			if (!response.ok) return {
+				ok: false,
+				failure: classify(response.status)
+			};
+			let body;
+			try {
+				body = await response.json();
+			} catch {
 				return {
-					ok: true,
-					payload: {
-						rows: body.rows ?? [],
-						truncated: body.truncated === true
+					ok: false,
+					failure: {
+						kind: "server",
+						status: response.status
 					}
 				};
-			} catch (error) {
-				return {
+			}
+			if (typeof body === "object" && body !== null) {
+				const record = body;
+				if (record.ok === true) return {
+					ok: true,
+					data: record.data
+				};
+				if (record.ok === false && typeof record.message === "string" && record.message !== "") return {
 					ok: false,
-					message: "skill-health: " + String(error)
+					failure: {
+						kind: "refused",
+						code: typeof record.code === "string" && record.code !== "" ? record.code : "refused",
+						message: record.message
+					}
 				};
 			}
+			return {
+				ok: false,
+				failure: {
+					kind: "server",
+					status: response.status
+				}
+			};
+		}
+		//#endregion
+		//#region src/client/api.ts
+		/**
+		* The host route this bundle reads, and the ONE place a request is made.
+		*
+		* G5/W7: the path comes from the generated client route table (rendered from evolution-core
+		* HOST_ROUTES) and the transport is the shared generated route-client. A refusal arrives classified
+		* with the host's own sentence, so the panel shows what the route actually said.
+		* @module @lmzhen/dsh-evolution-skill-health/client
+		*/
+		/** Route paths: the generated mirror of the host's HOST_ROUTES (one declaration in core). */
+		const HOST_ROUTES = ROUTES["skill-health"];
+		/**
+		* Read the scan result.
+		* @returns the payload, or the host's own refusal sentence.
+		*/
+		async function rows() {
+			const answer = await requestJson(fetch, HOST_ROUTES.rows, { headers: { accept: "application/json" } });
+			if (!answer.ok) return {
+				ok: false,
+				failure: answer.failure
+			};
+			return {
+				ok: true,
+				payload: {
+					rows: answer.data.rows,
+					truncated: answer.data.truncated
+				}
+			};
 		}
 		//#endregion
 		//#region src/client/seam.ts
@@ -75,7 +182,12 @@ window.__ModuleLoader__.load({
 			"line.unknown": "位置：未知",
 			"unreadable.note": "读不到内容，因此无法判断（不是「通过」）。",
 			"loading.failed": "读取失败——现在判断不了；点「刷新」重试。",
-			"read.failed": "这次没读到数据（下面一行是原始信息）："
+			"read.failed": "这次没读到数据（下面一行是原始信息）：",
+			"failure.unauthorized": "需要登录：重新打开这个页面完成登录后再试。",
+			"failure.forbidden": "平台拒绝了这个请求（身份不是 owner）。",
+			"failure.unmounted": "该功能没有挂载。",
+			"failure.server": "读取失败，可以重试。",
+			"fallback.hint": "可以改用命令：{command}"
 		};
 		/** English dictionary. */
 		const en = {
@@ -101,7 +213,12 @@ window.__ModuleLoader__.load({
 			"line": "line: {path}",
 			"line.unknown": "line: UNKNOWN",
 			"unreadable.note": "The content could not be read, so this cannot be judged (it is not a pass).",
-			"loading.failed": "Reading failed — this cannot be judged right now; press Refresh to retry."
+			"loading.failed": "Reading failed — this cannot be judged right now; press Refresh to retry.",
+			"failure.unauthorized": "Sign-in is required: reopen this page and sign in, then retry.",
+			"failure.forbidden": "The platform refused this request (not the owner principal).",
+			"failure.unmounted": "This feature is not mounted.",
+			"failure.server": "The read failed; you can retry.",
+			"fallback.hint": "Command fallback: {command}"
 		};
 		//#endregion
 		//#region src/client/styles.ts
@@ -162,6 +279,51 @@ window.__ModuleLoader__.load({
 			":where(.dsh-evolution-skill-health [data-role=\"note\"]) { margin: 0; color: var(--dsw-alias-label-secondary); }"
 		].join(String.fromCharCode(10));
 		//#endregion
+		//#region src/client/states.generated.ts
+		/** A neutral/ warn/ fail block; a fail block is role=alert so assistive tech announces it. */
+		function Block(props) {
+			const tone = props.tone ?? "neutral";
+			return (0, react.createElement)("div", {
+				"data-tone": tone,
+				...tone === "fail" ? { role: "alert" } : {}
+			}, props.title === void 0 ? null : (0, react.createElement)("div", { "data-tone-title": tone }, props.title), props.children);
+		}
+		/** One classified failure as a reader-facing sentence. */
+		function failureText(failure, t) {
+			switch (failure.kind) {
+				case "unauthenticated": return t("failureUnauthorized");
+				case "forbidden": return t("failureForbidden");
+				case "unmounted": return t("failureUnmounted");
+				case "server": return failure.status === 0 ? t("failureServer") : t("failureServer") + " (HTTP " + String(failure.status) + ")";
+				case "refused": return failure.message;
+			}
+		}
+		/** The failed-state block: sentence + (when the surface exists but is unreachable) the command fallback. */
+		function FailureBlock(props) {
+			const hint = props.fallback === void 0 ? null : (0, react.createElement)("div", { "data-tone-hint": "true" }, props.t("fallbackHint", { command: props.fallback.command }));
+			return Block({
+				tone: "fail",
+				title: failureText(props.failure, props.t),
+				children: hint
+			});
+		}
+		//#endregion
+		//#region src/client/fallbacks.generated.ts
+		/**
+		* The command-face fallback for every Host surface, generated from evolution-commands'
+		* COMMAND_FALLBACKS (the ONE home). When the platform's connection carrier is absent (E-325) the
+		* panels render this hint instead of a bare HTTP failure — same use case, command face.
+		*/
+		const FALLBACKS = {
+			approval: { command: "/evolution pending … /evolution approve <id> … /evolution reject <id> … /evolution release <id>" },
+			"skill-history": { command: "/evolution restore <name> [v]（查看：/evolution skills history <name>）" },
+			"skill-health": { command: "/evolution skills refresh（健康行：/evolution doctor）" },
+			diagnostics: {
+				command: "/evolution doctor",
+				platformCli: "dsh --json /evolution doctor"
+			}
+		};
+		//#endregion
 		//#region src/client/Panel.ts
 		/**
 		* The panel body: a four-state summary plus the list aggregated BY RULE.
@@ -234,6 +396,25 @@ window.__ModuleLoader__.load({
 		* @param props - the face (`{ rows, truncated, openHistory? }`) and the locale seat's translator.
 		* @returns the panel body.
 		*/
+		/** Fill the generated block's `{slot}` copies with this bundle's dictionary. */
+		function fillCopy(template, values) {
+			return template.replace(/\{(\w+)\}/g, (match, slot) => {
+				const value = values[slot];
+				return value === void 0 ? match : String(value);
+			});
+		}
+		/** The shared four-state failure block, spoken through this bundle's keys. */
+		function failureBlock(t, failure) {
+			const translate = (key, values) => {
+				const text = t(key);
+				return values === void 0 ? text : fillCopy(text, values);
+			};
+			return FailureBlock({
+				failure,
+				t: translate,
+				fallback: FALLBACKS["skill-health"]
+			});
+		}
 		function SkillHealthPanel(face) {
 			const t = face.t;
 			const [view, setView] = (0, react.useState)(face);
@@ -249,9 +430,12 @@ window.__ModuleLoader__.load({
 						rows: outcome.payload.rows,
 						truncated: outcome.payload.truncated
 					});
-					else setFailed(outcome.message);
-				}).catch((error) => {
-					if (live) setFailed(String(error));
+					else setFailed(outcome.failure);
+				}).catch(() => {
+					if (live) setFailed({
+						kind: "server",
+						status: 0
+					});
 				});
 				return () => {
 					live = false;
@@ -263,7 +447,7 @@ window.__ModuleLoader__.load({
 				"data-role": "stat",
 				"data-tone": kind
 			}, (0, react.createElement)("div", { "data-role": "stat-value" }, String(counts.get(kind) ?? 0)), (0, react.createElement)("div", { "data-role": "stat-label" }, t("verdict." + kind)))));
-			return (0, react.createElement)("section", { className: CSS_TAG_ID }, (0, react.createElement)("p", { "data-role": "hint" }, t("hint")), stats, view.truncated ? (0, react.createElement)("p", { "data-role": "note" }, t("loading.failed")) : null, failed === void 0 ? null : (0, react.createElement)("p", { "data-role": "note" }, t("read.failed") + " " + failed), view.rows.length === 0 ? (0, react.createElement)("p", { "data-role": "note" }, t("empty.noneReported")) : null, (0, react.createElement)("h3", { "data-role": "group-title" }, t("group.byRule")), ruleTable(view, t), view.rows.filter((row) => row.verdict === "unreadable").map((row) => (0, react.createElement)("p", {
+			return (0, react.createElement)("section", { className: CSS_TAG_ID }, (0, react.createElement)("p", { "data-role": "hint" }, t("hint")), stats, view.truncated ? (0, react.createElement)("p", { "data-role": "note" }, t("loading.failed")) : null, failed === void 0 ? null : (0, react.createElement)("div", { "data-role": "note" }, failureBlock(t, failed)), view.rows.length === 0 ? (0, react.createElement)("p", { "data-role": "note" }, t("empty.noneReported")) : null, (0, react.createElement)("h3", { "data-role": "group-title" }, t("group.byRule")), ruleTable(view, t), view.rows.filter((row) => row.verdict === "unreadable").map((row) => (0, react.createElement)("p", {
 				key: row.name + ":unreadable",
 				"data-role": "note"
 			}, row.name + " — " + t("unreadable.note"))));

package/lib/index.js

@@ -1,14 +1,17 @@
+import { HOST_ROUTES, json, methodNotAllowed, registerHostRoutes } from "@lmzhen/dsh-evolution-core/http-routes";
 //#region lib/types/routes.js
 /**
 * The panel's ONE read-only route: the health rows the browser half renders.
 *
-* Read-only by construction: it never writes a skill, a marker or a config. It also carries the
-* house rule down to the client — a rule whose threshold is NOT calibrated yet is reported with
-* `countIsMeaningful: false`, so the panel can name it without printing a number we do not have.
+* W6/G4: exact FetchRoute on the platform Host connection data plane — trust/auth/owner admission are
+* the platform's, so there is no fence here. Read-only by construction: it never writes a skill, a
+* marker or a config. It also carries the house rule down to the client — a rule whose threshold is
+* NOT calibrated yet is reported with `countIsMeaningful: false`, so the panel can name it without
+* printing a number we do not have.
 * @module @lmzhen/dsh-evolution-skill-health
 */
-/** Where the panel asks for its rows. */
-const ROUTES = { rows: "/api/dsh-evolution/skill-health/rows" };
+/** Where the panel asks for its rows. The ONE declaration lives in core (W1). */
+const ROUTES = HOST_ROUTES.skillHealth;
 /** Rules whose threshold is not calibrated yet: named on screen, never counted. */
 const UNCALIBRATED_RULES = ["references-sprawl"];
 /**
@@ -29,55 +32,41 @@ function toRouteRows(rows) {
 	}));
 }
 /**
-* Build the panel's routes, in the platform shape: `{ path, handler(req, res) }` — the same objects
-* `ctx.webServer.register` takes for every other row in this family.
+* Build the panel's route in the platform's exact FetchRoute shape.
 * @param deps - a getter for the curator service (absent until the profile mounts it).
+* @param _audit - the registration audit (read-only surface: nothing to record).
 * @returns one GET route; with no curator it answers an EMPTY row list plus `truncated: true`, which
 *   the panel shows as "cannot decide right now" rather than as a pass.
 */
-function makeSkillHealthRoutes(deps) {
+function makeSkillHealthRoutes(deps, _audit) {
 	return [{
-		kind: "exact",
 		path: ROUTES.rows,
-		handler: async (_req, res) => {
+		methods: ["GET"],
+		requestBody: "buffered",
+		fetch: async (request) => {
+			if (request.method !== "GET") return methodNotAllowed(["GET"]);
 			const curator = deps.getCurator();
 			const view = curator?.healthView === void 0 ? void 0 : await curator.healthView();
-			const rows = Array.isArray(view) ? toRouteRows(view) : [];
-			res.writeHead(200, { "content-type": "application/json" });
-			res.end(JSON.stringify({
-				rows,
-				truncated: view === void 0
-			}));
+			return json(200, {
+				ok: true,
+				data: {
+					rows: Array.isArray(view) ? toRouteRows(view) : [],
+					truncated: view === void 0
+				}
+			});
 		}
 	}];
 }
 //#endregion
 //#region lib/types/index.js
-/**
-* Host half: ONE read-only route, mounted when the profile gives this row a web server.
-*
-* **Why `ctx.inject` and not `ctx.get`**: profile rows apply in file order, so at this row's apply
-* time the web server may not exist yet — a `ctx.get('webServer')` of undefined is a TIMING fact,
-* not a verdict, and acting on it leaves the route unregistered while the panel renders and every
-* call answers 404. Waiting on the service mounts the route whenever it arrives, and a profile that
-* never gets one simply never runs this callback — inert, never pending.
-* @module @lmzhen/dsh-evolution-skill-health
-*/
-/** No required services: the web server is WAITED ON below, not demanded here. */
+/** No required services: `connection` is waited on inside registerHostRoutes, not demanded here. */
 const inject = [];
 /**
-* Mount the route as ONE effect (disposers run on unload and on HMR).
-* @param ctx - the host context; the web server and curator arrive through it.
+* Mount the route as ONE owner effect (disposers run on unload and on HMR).
+* @param ctx - the host context; the connection and curator arrive through it.
 */
 function apply(ctx) {
-	ctx.inject(["webServer"], (scope) => {
-		scope.effect(() => {
-			const disposers = makeSkillHealthRoutes({ getCurator: () => scope.get("evolutionCurator") }).map((route) => scope.webServer.register(route));
-			return () => {
-				for (const dispose of disposers) dispose();
-			};
-		}, "evolution-skill-health: routes");
-	});
+	registerHostRoutes(ctx, (audit) => makeSkillHealthRoutes({ getCurator: () => ctx.get("evolutionCurator") }, audit));
 }
 //#endregion
 export { apply, inject };

package/lib/types/client/Panel.d.ts

@@ -35,10 +35,5 @@ export interface HealthFace {
     /** The seat's translator for this bundle's dictionary — the panel never reaches for a service. */
     t: (key: string) => string;
 }
-/**
- * Render the panel.
- * @param props - the face (`{ rows, truncated, openHistory? }`) and the locale seat's translator.
- * @returns the panel body.
- */
 export declare function SkillHealthPanel(face: HealthFace): ReactNode;
 //# sourceMappingURL=Panel.d.ts.map

package/lib/types/client/api.d.ts

@@ -1,13 +1,6 @@
-/**
- * The host route this bundle reads, and the ONE place a request is made.
- *
- * The path mirrors the host half's `ROUTES.rows` in `src/routes.ts` (a spec asserts the two sides
- * agree). A refusal arrives as `ok:false` with the host's own sentence, so the panel shows what the
- * route actually said instead of inventing a second vocabulary.
- * @module @lmzhen/dsh-evolution-skill-health/client
- */
+import type { RouteFailure } from './route-client.generated.ts';
 import type { HealthRow } from './Panel.ts';
-/** Route paths, mirrored from the host half. */
+/** Route paths: the generated mirror of the host's HOST_ROUTES (one declaration in core). */
 export declare const HOST_ROUTES: {
     readonly rows: "/api/dsh-evolution/skill-health/rows";
 };
@@ -17,13 +10,13 @@ export interface HealthPayload {
     /** True when the host could not finish the scan: the counts below are then a lower bound. */
     truncated: boolean;
 }
-/** Either the payload or the host's refusal sentence — never a thrown error the panel must guess at. */
+/** Either the payload or the classified four-state failure — never a thrown error the panel must guess at. */
 export type HealthOutcome = {
     ok: true;
     payload: HealthPayload;
 } | {
     ok: false;
-    message: string;
+    failure: RouteFailure;
 };
 /**
  * Read the scan result.

package/lib/types/client/contracts.generated.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Literal mirror of the frozen Host diagnostics contract (W1 §2.8 / core diagnostics.ts). The browser
+ * build keeps every @deepseek-ai/* specifier external, so the client CANNOT import the host type — the
+ * shape is mirrored mechanically here instead. The key unions are rendered from core diagnostics.ts by
+ * the generator, so a key change regenerates all three copies (a stale copy fails --check).
+ */
+export type DiagnosticsSchemaVersion = 2;
+export type DiagnosticsFactKey = 'platform-line' | 'family-version' | 'install-form' | 'preset-ids' | 'readonly-contract' | 'upgrade-order' | 'fallback-map';
+export type DiagnosticsRuntimeKey = 'subagent-channel' | 'restricted-preset' | 'host-surface' | 'session-fold' | 'platform-services' | 'runs' | 'platform-pairing' | 'install-form-detected';
+export type DiagnosticStatus = 'ok' | 'warn' | 'fail' | 'unknown';
+export interface DocFactRow {
+    readonly key: DiagnosticsFactKey;
+    readonly label: string;
+    readonly value: string;
+    readonly home: string;
+}
+export interface DiagnosticRow {
+    readonly key: DiagnosticsRuntimeKey;
+    readonly label: string;
+    readonly status: DiagnosticStatus;
+    readonly detail?: string;
+    readonly remedy?: string;
+}
+export interface DiagnosticsView {
+    readonly schemaVersion: DiagnosticsSchemaVersion;
+    readonly generatedAt: string;
+    readonly facts: readonly DocFactRow[];
+    readonly runtime: readonly DiagnosticRow[];
+}
+/** The installation form the doctor reports (W8 install-form-detected row). */
+export type InstallFormId = 'M1' | 'M2' | 'M3' | 'M4';
+/** One surface's command-face path(s) — the client `fallbacks.generated.ts` table's row type. */
+export interface FallbackHint {
+    readonly command: string;
+    readonly platformCli?: string;
+}
+//# sourceMappingURL=contracts.generated.d.ts.map

package/lib/types/client/fallbacks.generated.d.ts

@@ -0,0 +1,8 @@
+import type { FallbackHint } from './contracts.generated.ts';
+/**
+ * The command-face fallback for every Host surface, generated from evolution-commands'
+ * COMMAND_FALLBACKS (the ONE home). When the platform's connection carrier is absent (E-325) the
+ * panels render this hint instead of a bare HTTP failure — same use case, command face.
+ */
+export declare const FALLBACKS: Readonly<Record<'approval' | 'skill-history' | 'skill-health' | 'diagnostics', FallbackHint>>;
+//# sourceMappingURL=fallbacks.generated.d.ts.map

package/lib/types/client/route-client.generated.d.ts

@@ -0,0 +1,45 @@
+/**
+ * The four-state transport classifier every family client shares (W7 §2). The platform owns
+ * admission (401/403/404 are its answers, not ours), so the client reads the STATUS only for those
+ * three and never tries to interpret a platform body. Everything the family route itself answers
+ * keeps its business envelope: 2xx + {ok:true,data} or 2xx + {ok:false,code,message}.
+ */
+export type RouteFailure = {
+    readonly kind: 'unauthenticated';
+    readonly status: 401;
+} | {
+    readonly kind: 'forbidden';
+    readonly status: 403;
+} | {
+    readonly kind: 'unmounted';
+    readonly status: 404;
+} | {
+    readonly kind: 'server';
+    readonly status: number;
+    readonly detail?: string;
+} | {
+    readonly kind: 'refused';
+    readonly code: string;
+    readonly message: string;
+};
+/** One route answer: the data, or the classified failure. */
+export type RouteAnswer<T> = {
+    readonly ok: true;
+    readonly data: T;
+} | {
+    readonly ok: false;
+    readonly failure: RouteFailure;
+};
+/** Classify a non-2xx status: 401/403/404 keep their own kind, everything else is a server answer. */
+export declare function classify(status: number): RouteFailure;
+/**
+ * One request, no retries and no body parsing for the platform's admission answers.
+ * @param doFetch - the fetch in use (the browser's, or a spec's stub).
+ * @param path - the exact route path from the generated ROUTES table.
+ * @param init - standard RequestInit.
+ * @returns the data, or the classified failure (network/parse failures read as 'server').
+ */
+export declare function requestJson<T>(doFetch: typeof fetch, path: string, init?: RequestInit): Promise<RouteAnswer<T>>;
+/** The one-sentence rendering legacy callers attach to a classified failure. */
+export declare function failureMessage(failure: RouteFailure): string;
+//# sourceMappingURL=route-client.generated.d.ts.map

package/lib/types/client/routes.generated.d.ts

@@ -0,0 +1,31 @@
+/** One host data-plane surface the browser half can call. */
+export type SurfaceId = 'approval' | 'skill-history' | 'skill-health' | 'diagnostics';
+/**
+ * Every family host path, generated from evolution-core's HOST_ROUTES (the ONE declaration).
+ * A browser half cannot import the host package at runtime (client bundles keep @deepseek-ai/*
+ * external), so the table is mirrored here mechanically; a rename in core regenerates all three
+ * client copies, and the generator's --check makes a stale copy red.
+ */
+export declare const ROUTES: {
+    readonly approval: {
+        readonly pending: "/api/dsh-evolution/approval/pending";
+        readonly preview: "/api/dsh-evolution/approval/preview";
+        readonly approve: "/api/dsh-evolution/approval/approve";
+        readonly reject: "/api/dsh-evolution/approval/reject";
+    };
+    readonly 'skill-history': {
+        readonly skills: "/api/dsh-evolution/skill-history/skills";
+        readonly versions: "/api/dsh-evolution/skill-history/versions";
+        readonly diff: "/api/dsh-evolution/skill-history/versions/diff";
+        readonly body: "/api/dsh-evolution/skill-history/versions/body";
+        readonly undo: "/api/dsh-evolution/skill-history/undo";
+        readonly health: "/api/dsh-evolution/skill-history/health";
+    };
+    readonly 'skill-health': {
+        readonly rows: "/api/dsh-evolution/skill-health/rows";
+    };
+    readonly diagnostics: {
+        readonly view: "/api/dsh-evolution/diagnostics";
+    };
+};
+//# sourceMappingURL=routes.generated.d.ts.map

package/lib/types/client/states.generated.d.ts

@@ -0,0 +1,43 @@
+import { type ReactNode } from 'react';
+import type { RouteAnswer, RouteFailure } from './route-client.generated.ts';
+import type { FallbackHint } from './contracts.generated.ts';
+/**
+ * The four-state base of every family card (W7 §2). Load states are read from the generated
+ * route-client's answer — a card owns no HTTP vocabulary and no second state machine.
+ */
+export type LoadState<T> = {
+    readonly phase: 'loading';
+} | {
+    readonly phase: 'ready';
+    readonly data: T;
+} | {
+    readonly phase: 'empty';
+} | {
+    readonly phase: 'failed';
+    readonly failure: RouteFailure;
+};
+/** Map one classified answer onto the card's four states. */
+export declare function loadStateOf<T>(answer: RouteAnswer<T>, isEmpty: (data: T) => boolean): LoadState<T>;
+/** The locale lookup every block calls (the platform's own `t`). */
+export interface Translate {
+    (key: string, values?: Readonly<Record<string, string | number>>): string;
+}
+export type BlockTone = 'neutral' | 'warn' | 'fail';
+export interface BlockProps {
+    readonly tone?: BlockTone;
+    readonly title?: string;
+    readonly children?: ReactNode;
+}
+/** A neutral/ warn/ fail block; a fail block is role=alert so assistive tech announces it. */
+export declare function Block(props: BlockProps): ReactNode;
+export interface FailureBlockProps {
+    readonly failure: RouteFailure;
+    readonly t: Translate;
+    /** The command-face fallback for this surface (rendered on unmounted/failed answers). */
+    readonly fallback?: FallbackHint | undefined;
+}
+/** One classified failure as a reader-facing sentence. */
+export declare function failureText(failure: RouteFailure, t: Translate): string;
+/** The failed-state block: sentence + (when the surface exists but is unreachable) the command fallback. */
+export declare function FailureBlock(props: FailureBlockProps): ReactNode;
+//# sourceMappingURL=states.generated.d.ts.map

package/lib/types/index.d.ts

@@ -1,19 +1,17 @@
 /**
- * Host half: ONE read-only route, mounted when the profile gives this row a web server.
+ * Host half: ONE read-only route, mounted on the platform's Host connection data plane.
  *
- * **Why `ctx.inject` and not `ctx.get`**: profile rows apply in file order, so at this row's apply
- * time the web server may not exist yet — a `ctx.get('webServer')` of undefined is a TIMING fact,
- * not a verdict, and acting on it leaves the route unregistered while the panel renders and every
- * call answers 404. Waiting on the service mounts the route whenever it arrives, and a profile that
- * never gets one simply never runs this callback — inert, never pending.
+ * W6/G4: `registerHostRoutes` waits on the `connection` service (it may apply after this row),
+ * registers via one owner effect and captures the DecisionAudit there. The old webServer + loopback
+ * fence path is gone: trust/auth/owner admission are the platform's.
  * @module @lmzhen/dsh-evolution-skill-health
  */
 import type { Context } from '@deepseek-ai/cordis';
-/** No required services: the web server is WAITED ON below, not demanded here. */
+/** No required services: `connection` is waited on inside registerHostRoutes, not demanded here. */
 export declare const inject: string[];
 /**
- * Mount the route as ONE effect (disposers run on unload and on HMR).
- * @param ctx - the host context; the web server and curator arrive through it.
+ * Mount the route as ONE owner effect (disposers run on unload and on HMR).
+ * @param ctx - the host context; the connection and curator arrive through it.
  */
 export declare function apply(ctx: Context): void;
 //# sourceMappingURL=index.d.ts.map

package/lib/types/routes.d.ts

@@ -1,13 +1,5 @@
-import type { WebRoute } from '@deepseek-ai/dsh-host-webserver';
-/**
- * The panel's ONE read-only route: the health rows the browser half renders.
- *
- * Read-only by construction: it never writes a skill, a marker or a config. It also carries the
- * house rule down to the client — a rule whose threshold is NOT calibrated yet is reported with
- * `countIsMeaningful: false`, so the panel can name it without printing a number we do not have.
- * @module @lmzhen/dsh-evolution-skill-health
- */
-/** Where the panel asks for its rows. */
+import type { ConnectionFetchRouteLike, DecisionAudit } from '@lmzhen/dsh-evolution-core/http-routes';
+/** Where the panel asks for its rows. The ONE declaration lives in core (W1). */
 export declare const ROUTES: {
     readonly rows: "/api/dsh-evolution/skill-health/rows";
 };
@@ -44,9 +36,9 @@ export declare function toRouteRows(rows: ReadonlyArray<{
     } | null;
 }>): RouteRow[];
 /**
- * Build the panel's routes, in the platform shape: `{ path, handler(req, res) }` — the same objects
- * `ctx.webServer.register` takes for every other row in this family.
+ * Build the panel's route in the platform's exact FetchRoute shape.
  * @param deps - a getter for the curator service (absent until the profile mounts it).
+ * @param _audit - the registration audit (read-only surface: nothing to record).
  * @returns one GET route; with no curator it answers an EMPTY row list plus `truncated: true`, which
  *   the panel shows as "cannot decide right now" rather than as a pass.
  */
@@ -54,5 +46,5 @@ export declare function makeSkillHealthRoutes(deps: {
     getCurator: () => {
         healthView?: () => Promise<unknown>;
     } | undefined;
-}): WebRoute[];
+}, _audit: DecisionAudit): ConnectionFetchRouteLike[];
 //# sourceMappingURL=routes.d.ts.map

package/package.json

@@ -11,7 +11,7 @@
       ]
     }
   },
-  "version": "0.26.26",
+  "version": "0.27.0",
   "publishConfig": {
     "access": "public"
   },
@@ -40,16 +40,19 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.2.0-rc.1",
+    "@deepseek-ai/cordis": "^4.0.5",
     "react": "^18.2.0",
-    "@lmzhen/dsh-evolution-curator": "^0.26.26"
+    "@lmzhen/dsh-evolution-core": "^0.27.0",
+    "@lmzhen/dsh-evolution-curator": "^0.27.0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.2.0-rc.1",
+    "@deepseek-ai/cordis": "^4.0.5",
     "@types/react": "~18.3.1",
     "react": "^18.2.0",
-    "@lmzhen/dsh-evolution-curator": "^0.26.26"
+    "@lmzhen/dsh-evolution-core": "^0.27.0",
+    "@lmzhen/dsh-evolution-curator": "^0.27.0"
+  },
+  "engines": {
+    "dsh": ">=0.2.1-rc.1 <0.2.2-0"
   }
 }