dsh-completion-guard 0.2.1 → 0.3.0

package/docs/upstream-deltas.json

@@ -0,0 +1,217 @@
+{
+  "ledgerVersion": "1",
+  "description": "Delta ledger tracking how dsh-completion-guard adapts codex-context-guard protocol capabilities. Each entry separates the source fact from plan status, implementation status, deterministic tests, native platform acceptance, and release readback. A disposition of adapted/adopted with implementationStatus not-implemented is a planned alignment, not a shipped one.",
+  "snapshotBoundary": "Pre-release planning snapshot retained for historical traceability. Candidate labels and empty release readbacks describe the planning state when each row was recorded, not the current package status. Use CHANGELOG.md and docs/LOCAL_ACCEPTANCE.md for v0.3.0 release and validation state.",
+  "source": {
+    "product": "codex-context-guard",
+    "version": "v0.9.4",
+    "head": "0921dcd",
+    "stopProtocol": "2.0.0",
+    "proofProtocol": "1.0.0",
+    "executionProtocol": "1.0.0",
+    "stateSchema": 7
+  },
+  "target": {
+    "product": "dsh-completion-guard",
+    "codeBaseline": "v0.3.0 local candidate over prerequisite 55f694d2534147b7fb2aac1d5b795ae5b7ead50f",
+    "sourceHead": "uncommitted-local-candidate",
+    "host": "dsh 0.1.1-rc.2 / cordis 4.0.1",
+    "nextRelease": "v0.3.0"
+  },
+  "dispositions": [
+    "adopted",
+    "adapted",
+    "already-equivalent",
+    "not-applicable",
+    "deferred",
+    "rejected"
+  ],
+  "entries": [
+    {
+      "capability": "stop-protocol-2",
+      "sourceFact": "Stop protocol 2.0.0 (published v0.9.4): only an authenticated, current-turn, full-coverage checkpoint can mark a task complete; assistant completion prose is diagnostic and never a control source.",
+      "disposition": "adapted",
+      "targetRelease": "dsh-completion-guard v0.3.0",
+      "rationale": "DSH keeps its native Goal Round Driver scheduling; the stop decision table is rebuilt so prose classification only produces diagnostics and uncontrolled turns safe-yield with pending items preserved.",
+      "planStatus": "planned in DSH v0.3.0 stop policy split (observeAssistantOutcome / decideTurnBoundary)",
+      "implementationStatus": "local-candidate-implemented",
+      "tests": [
+        "tests/domain/v030-stop-boundary.test.ts",
+        "tests/domain/portable-semantics.test.ts (all 37 mirrored cases)"
+      ],
+      "plannedTests": [
+        "stop-prose-is-diagnostic",
+        "no-control-safe-yield",
+        "stop-metamorphic-equivalence",
+        "active-armed-goal-round-driver-only"
+      ],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    },
+    {
+      "capability": "proof-protocol-1",
+      "sourceFact": "Proof protocol 1.0.0 (published v0.9.4): deterministic proof contracts bind obligations to evidence with hash-bound manifests.",
+      "disposition": "adapted",
+      "targetRelease": "dsh-completion-guard v0.3.0 (minimal state verification) and v0.4.0 (full proof manifest)",
+      "rationale": "v0.3 introduces effect plus independent state readback for the stateful action set with semantic action and target binding; the full versioned proof manifest (subject readback, scope coverage) follows in v0.4.",
+      "planStatus": "planned; minimal state_verification set is a v0.3.0 release gate",
+      "implementationStatus": "v0.3-minimal-state-verification-local-candidate-implemented",
+      "tests": [
+        "tests/domain/v030-certificate.test.ts (all ten STATEFUL_ACTIONS, role closure, cross-pairing, predicate mismatch)"
+      ],
+      "plannedTests": [
+        "stateful-actions-require-independent-readback",
+        "effect-only-certification-rejected",
+        "binding-state-closure-role-matrix"
+      ],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    },
+    {
+      "capability": "certificate-manifest-digest-v3",
+      "sourceFact": "Digest v3 canonical manifests (this repository, introduced with the semantic compatibility assets): session/host/evidence/binding/certification digests with golden vectors and a cross-language gate.",
+      "disposition": "adopted",
+      "targetRelease": "dsh-completion-guard v0.3.0",
+      "rationale": "DSH byte-mirrors tests/fixtures/conformance/digest_v3 and re-derives all 29 vectors with its own runner; digest identity inputs exclude telemetry refs by contract.",
+      "planStatus": "fixture gate frozen; DSH runner implemented against the byte mirror",
+      "implementationStatus": "codex-encoder-and-fixture-complete; dsh-runner-implemented (vitest re-derives all 29 vectors from the byte mirror)",
+      "tests": [
+        "codex-context-guard tests/test_reference_digest_encoder.py (29/29 golden vectors, fail-closed negatives, --check gate)",
+        "dsh-completion-guard tests/domain/digest-v3.test.ts (byte-mirror pin and 29/29 cross-language vectors)"
+      ],
+      "plannedTests": [],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    },
+    {
+      "capability": "execution-protocol-1",
+      "sourceFact": "Execution protocol 1.0.0 exists in Codex v0.9.4; not all surfaces are enabled through PreToolUse in Codex itself.",
+      "disposition": "deferred",
+      "targetRelease": "unassigned",
+      "rationale": "DSH first needs a host coverage matrix (tools guard, permissions, sandbox, tool input digest, agent lineage, Goal CAS, high-risk write surfaces); an execution contract is only built against confirmed gaps.",
+      "planStatus": "deferred pending host coverage matrix",
+      "implementationStatus": "local-candidate-implemented-diagnostic-only",
+      "tests": [
+        "tests/domain/v030-stop-boundary.test.ts",
+        "tests/domain/portable-semantics.test.ts"
+      ],
+      "plannedTests": [],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    },
+    {
+      "capability": "classifier-2.3.2-quoted-completion",
+      "sourceFact": "Classifier 2.3.2 (v0.8.12/0.9.4) keeps quoted completion phrases and meta-discussion diagnostic; direct completion assertions stay gated.",
+      "disposition": "adapted",
+      "targetRelease": "dsh-completion-guard v0.3.0",
+      "rationale": "The DSH stop policy rebuild keeps whole-completion and quote/assumption classification as diagnostic outcome codes only.",
+      "planStatus": "planned with stop-protocol-2",
+      "implementationStatus": "not-implemented",
+      "tests": [],
+      "plannedTests": [
+        "quoted-completion-diagnostic-only"
+      ],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    },
+    {
+      "capability": "utf8-stdin-decoding",
+      "sourceFact": "v0.9.4 decodes Hook stdin as UTF-8 explicitly, independent of host locale, rejecting invalid bytes fail-closed.",
+      "disposition": "already-equivalent",
+      "targetRelease": "none",
+      "rationale": "DSH has no Hook stdin surface; it reads persisted structured session logs, so non-ASCII prompt text is preserved natively.",
+      "planStatus": "satisfied by native host design",
+      "implementationStatus": "already-equivalent",
+      "tests": [],
+      "plannedTests": [],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    },
+    {
+      "capability": "managed-cache-fallback",
+      "sourceFact": "v0.8.11 Hooks fall back to the newest valid managed plugin cache when the original cache directory is removed, with strict version validation and a repair hint when nothing valid survives.",
+      "disposition": "not-applicable",
+      "targetRelease": "none",
+      "rationale": "DSH has no installed Hook cache lifecycle; plugin loading and lifecycle belong to the Cordis host.",
+      "planStatus": "not applicable to the DSH host model",
+      "implementationStatus": "not-applicable",
+      "tests": [],
+      "plannedTests": [],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    },
+    {
+      "capability": "installer-missing-cache-messaging",
+      "sourceFact": "v0.8.11 installer explains missing historical caches and how to restore them instead of failing silently.",
+      "disposition": "not-applicable",
+      "targetRelease": "none",
+      "rationale": "Same host-model boundary as managed-cache-fallback.",
+      "planStatus": "not applicable to the DSH host model",
+      "implementationStatus": "not-applicable",
+      "tests": [],
+      "plannedTests": [],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    },
+    {
+      "capability": "privacy-token-value-classifier",
+      "sourceFact": "v0.8.11 privacy classification inspects serialized token field values, allowing redaction placeholders and readable examples while blocking real-looking values.",
+      "disposition": "already-equivalent",
+      "targetRelease": "none",
+      "rationale": "DSH sanitizes clause text by value patterns (bearer tokens, header values, quoted and bare secret assignments) before items are stored; value-based redaction is the existing behavior.",
+      "planStatus": "satisfied by existing DSH sanitization",
+      "implementationStatus": "already-equivalent",
+      "tests": [
+        "tests/domain/core.test.ts sanitizeClauseText coverage (existing DSH suite)"
+      ],
+      "plannedTests": [],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    },
+    {
+      "capability": "incident-corpus",
+      "sourceFact": "v0.9.4 adds a standard-library incident corpus tool with reviewed, sanitized public fixtures used by CI.",
+      "disposition": "adapted",
+      "targetRelease": "dsh-completion-guard v0.3.0 (fixture layer only)",
+      "rationale": "Cross-platform protocol regressions are expressed as portable conformance cases in the shared fixture; the corpus tooling itself stays Codex-only.",
+      "planStatus": "portable fixture layer established; case growth is continuous",
+      "implementationStatus": "fixture-schema-first-batch-and-all-case-dsh-runner-present",
+      "tests": [
+        "tests/domain/portable-semantics.test.ts (37/37, no skips)",
+        "tests/domain/digest-v3.test.ts (pin and digest mirror integrity)"
+      ],
+      "plannedTests": [],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    },
+    {
+      "capability": "schema-7-private-ledger",
+      "sourceFact": "Codex persists a private schema-7 state ledger across the eight-Hook lifecycle.",
+      "disposition": "not-applicable",
+      "targetRelease": "none",
+      "rationale": "DSH persists in the native session log by design; the plan explicitly excludes porting the Codex private ledger.",
+      "planStatus": "not applicable; shared semantics carried by fixtures instead",
+      "implementationStatus": "not-applicable",
+      "tests": [],
+      "plannedTests": [],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    },
+    {
+      "capability": "surface-intent-and-capability-binding",
+      "sourceFact": "Codex v0.9.4 carries the deterministic proof contract surface classifier whose substring misclassification and capability adaptation gaps are scheduled for repair in v0.9.5/v0.10.0 (canonical locator, capability trust root, clause-level surface intent).",
+      "disposition": "deferred",
+      "targetRelease": "dsh-completion-guard v0.4.0",
+      "rationale": "DSH Layer B reuses the Codex canonical locator, capability priority, and clause-derived surface tuple semantics via portable fixtures after the Codex repair lands; DSH must not fork its own binding rules.",
+      "planStatus": "deferred until Codex v0.9.5/v0.10.0 semantics freeze",
+      "implementationStatus": "not-implemented",
+      "tests": [],
+      "plannedTests": [
+        "canonical-locator-subject-identity",
+        "capability-trust-root-priority"
+      ],
+      "nativeAcceptance": "none",
+      "releaseReadback": "none"
+    }
+  ]
+}

package/manifests/action-manifest.v1.json

@@ -0,0 +1,33 @@
+{
+  "version": 1,
+  "semanticActions": ["inspect_remote_updates", "install", "apply", "create", "modify", "test", "verify", "pull", "fetch", "commit", "push", "restart", "publish", "generic_run"],
+  "statefulActions": ["install", "apply", "create", "modify", "restart", "commit", "push", "publish", "pull", "fetch"],
+  "evidenceAdapters": {
+    "context-guard.git.v1": "1.0.0",
+    "context-guard.package.v1": "1.0.0",
+    "context-guard.artifact.v1": "1.0.0",
+    "context-guard.service.v1": "1.0.0",
+    "context-guard.registry.v1": "1.0.0"
+  },
+  "actions": {
+    "inspect_remote_updates": {"stateful": false, "evidenceProducer": "supported", "resolvedTargetKeys": ["repository", "version", "remote"], "observedStateKeys": ["upstream_oid"], "predicateId": "pred.inspect_remote_updates.v1", "commandManifestIds": ["git.ls_remote_exact.v2"]},
+    "install": {"stateful": true, "evidenceProducer": "supported", "resolvedTargetKeys": ["package_id", "version", "integrity_digest", "profile"], "observedStateKeys": ["package_id", "version", "integrity_digest", "profile"], "predicateId": "pred.install.v1", "commandManifestIds": ["dsh.plugin_add_tgz.install.v1"]},
+    "apply": {"stateful": true, "evidenceProducer": "supported", "resolvedTargetKeys": ["package_id", "version", "integrity_digest", "profile"], "observedStateKeys": ["package_id", "version", "integrity_digest", "profile"], "predicateId": "pred.apply.v1", "commandManifestIds": ["dsh.plugin_add_tgz.apply.v1"]},
+    "create": {"stateful": true, "evidenceProducer": "supported", "resolvedTargetKeys": ["artifact_id", "scope", "pre_digest", "change_set_digest"], "observedStateKeys": ["post_digest"], "predicateId": "pred.create.v1", "commandManifestIds": ["artifact.create.v1"]},
+    "modify": {"stateful": true, "evidenceProducer": "supported", "resolvedTargetKeys": ["artifact_id", "scope", "pre_digest", "change_set_digest"], "observedStateKeys": ["post_digest"], "predicateId": "pred.modify.v1", "commandManifestIds": ["artifact.modify.v1"]},
+    "test": {"stateful": false, "evidenceProducer": "supported", "resolvedTargetKeys": ["scope", "executable"], "observedStateKeys": [], "predicateId": "pred.test.outcome", "commandManifestIds": ["python.unittest.v1", "package.test.v1", "test.runner.v1"]},
+    "verify": {"stateful": false, "evidenceProducer": "supported", "resolvedTargetKeys": ["scope"], "observedStateKeys": [], "predicateId": "pred.verify.outcome", "commandManifestIds": ["deterministic.verify.v1"]},
+    "pull": {"stateful": true, "evidenceProducer": "supported", "resolvedTargetKeys": ["repository", "remote", "refspec", "upstream_oid", "pre_head_oid", "pull_mode"], "observedStateKeys": ["post_head_oid", "tracking_ref_oid"], "predicateId": "pred.pull.v1", "commandManifestIds": ["git.pull_ff_only_explicit.v2"]},
+    "fetch": {"stateful": true, "evidenceProducer": "supported", "resolvedTargetKeys": ["repository", "remote", "refspec", "upstream_oid", "pre_head_oid"], "observedStateKeys": ["tracking_ref_oid", "post_head_oid"], "predicateId": "pred.fetch.v1", "commandManifestIds": ["git.fetch_tracking_explicit.v2"]},
+    "commit": {"stateful": true, "evidenceProducer": "supported", "resolvedTargetKeys": ["repository", "branch", "change_set_digest", "pre_head_oid"], "observedStateKeys": ["post_head_oid", "pre_head_oid"], "predicateId": "pred.commit.v1", "commandManifestIds": ["git.commit_index_tree.v2"]},
+    "push": {"stateful": true, "evidenceProducer": "supported", "resolvedTargetKeys": ["repository", "remote", "refspec", "local_oid"], "observedStateKeys": ["remote_oid"], "predicateId": "pred.push.v1", "commandManifestIds": ["git.push_explicit_refs.v2"]},
+    "restart": {"stateful": true, "evidenceProducer": "supported", "resolvedTargetKeys": ["service_id", "pre_generation"], "observedStateKeys": ["new_generation", "health"], "predicateId": "pred.restart.v1", "commandManifestIds": ["dshmarket.restart.v1"]},
+    "publish": {"stateful": true, "evidenceProducer": "supported", "resolvedTargetKeys": ["artifact_id", "version", "registry", "integrity_digest"], "observedStateKeys": ["artifact_id", "version", "registry", "integrity_digest"], "predicateId": "pred.publish.v1", "commandManifestIds": ["npm.publish_tgz.v1"]},
+    "generic_run": {"stateful": false, "evidenceProducer": "supported", "resolvedTargetKeys": ["scope", "executable"], "observedStateKeys": [], "predicateId": "pred.generic_run.outcome", "commandManifestIds": ["generic.run.v1"]}
+  },
+  "compatibility": {
+    "inspect_remote_updates": ["inspect_remote_updates"], "install": ["install"], "apply": ["apply"], "create": ["create"], "modify": ["modify"],
+    "test": ["test", "verify"], "verify": ["verify", "test"], "pull": ["pull"], "fetch": ["fetch"], "commit": ["commit"], "push": ["push"],
+    "restart": ["restart"], "publish": ["publish"], "generic_run": ["generic_run"]
+  }
+}

package/manifests/git-command-manifest.v2.json

@@ -0,0 +1,52 @@
+{
+  "version": 2,
+  "adapterId": "context-guard.git.v1",
+  "parser": "production-shell-parser-canonical-argv",
+  "globalProhibitions": [
+    "git_global_C",
+    "git_global_c",
+    "alias_subcommand",
+    "force",
+    "wildcard_refspec",
+    "delete_refspec",
+    "implicit_ref",
+    "implicit_HEAD"
+  ],
+  "commands": {
+    "git.ls_remote_exact.v2": {
+      "action": "inspect_remote_updates",
+      "argv": ["git", "ls-remote", "--exit-code", "--refs", "<remote-name>", "<source-ref>"],
+      "sourceRefKind": "refs/heads"
+    },
+    "git.pull_ff_only_explicit.v2": {
+      "action": "pull",
+      "argv": ["git", "pull", "--ff-only", "--no-tags", "<remote-name>", "<source-ref>"],
+      "sourceRefKind": "refs/heads"
+    },
+    "git.fetch_tracking_explicit.v2": {
+      "action": "fetch",
+      "argv": ["git", "fetch", "--no-tags", "<remote-name>", "<source-ref>:<tracking-ref>"],
+      "sourceRefKind": "refs/heads",
+      "trackingRefKind": "refs/remotes/<remote-name>",
+      "readback": "git rev-parse --verify <tracking-ref>"
+    },
+    "git.commit_index_tree.v2": {
+      "action": "commit",
+      "argv": ["git", "commit", "-m|--message", "<literal-message>"],
+      "prestate": ["git rev-parse HEAD", "git write-tree", "git ls-files --stage -z"],
+      "tupleEncoding": "sha256-length-prefixed-raw-bytes"
+    },
+    "git.push_explicit_refs.v2": {
+      "action": "push",
+      "argv": ["git", "push", "<remote-name>", "<source-ref>:<destination-ref>"],
+      "sourceRefKind": "refs/heads",
+      "destinationRefKind": "refs/heads",
+      "prestate": ["source-ref-oid", "exact-destination-ref-oid"],
+      "readback": "git ls-remote --exit-code --refs <remote-name> <destination-ref>"
+    }
+  },
+  "effectGate": {
+    "envelopeVersion": "git.prestate.v1",
+    "rule": "recompute target identity and prestate tuple immediately before exact argv execution"
+  }
+}

package/manifests/supported-host.v1.json

@@ -0,0 +1,66 @@
+{
+  "manifestVersion": 1,
+  "supportedGoalVersions": ["0.1.1-rc.2"],
+  "capabilities": {
+    "goal_complete_precommit_guard": "required",
+    "goal_disarm_readback": "required",
+    "session_flush_before_control": "required",
+    "tool_guard_monotonic": "required",
+    "host_capability_model": "action-platform-v1",
+    "external_wait_jobs_readback": "dsh.jobs.v1",
+    "filesystem_tool_contract": "dsh.fs-tools.v1",
+    "packageGroups": {
+      "base": ["@deepseek-ai/cordis", "@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-commands", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-tools"],
+      "goal": ["@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-tool-goal"],
+      "agent_loop": ["@deepseek-ai/dsh-agent-loop"],
+      "terminal_posix": ["@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-subprocess-local", "@deepseek-ai/dsh-bash-sandbox", "@deepseek-ai/dsh-shell-env"],
+      "terminal_windows": ["@deepseek-ai/dsh-tool-pwsh", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-subprocess-local", "@deepseek-ai/dsh-pwsh-sandbox", "@deepseek-ai/dsh-shell-env"],
+      "dsh_cli": ["@deepseek-ai/dsh"],
+      "plugin_inventory": ["@deepseek-ai/dsh-host-plugin-inventory"],
+      "web_control": ["dshmarket", "@deepseek-ai/dsh-host-webserver", "@deepseek-ai/dsh-web-app"],
+      "jobs": ["@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-tool-jobs"],
+      "filesystem": ["@deepseek-ai/dsh-tool-fs", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-fs-local", "@deepseek-ai/dsh-fs-sandbox", "@deepseek-ai/dsh-fs-observation-policy", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-user-approval", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-system-prompt"]
+    }
+  },
+  "packages": [
+    {"name": "@deepseek-ai/cordis", "version": "4.0.1", "integrity": "sha512-YBdskTU2Po1kru3GgcUWUbkTsPMA9LkSQDAY8rBkFJeajdgcQad3QPJZE26JyK99Xb6HaASvoXg2DSUTeN/0Nw=="},
+    {"name": "@deepseek-ai/dsh-agent", "version": "0.1.1-rc.2", "integrity": "sha512-cC7lnJe7JgPFcreNXxcxLMxQd78LnpVO9ZXROjZsGRQN1zGH6i/DduI892F1am85IfzzO+XTxMwwUHmfwamb0g=="},
+    {"name": "@deepseek-ai/dsh-commands", "version": "0.1.1-rc.2", "integrity": "sha512-BOIe4Sht9rmMv1a6b3GWjWBbeWr7PtHlAy41vgpaymvUUuzOapOIA648ZMGCI/crRIt72Umev2FHtSwCNSbYZg=="},
+    {"name": "@deepseek-ai/dsh-goal", "version": "0.1.1-rc.2", "integrity": "sha512-lSHTh4vfS6eRb9to/y+bjRf2+0QkNpY3tHJ29HMTewR9fJYZsEVVu4Hc+GPhPEjF7RpiD35/sKx+akijtDasyg=="},
+    {"name": "@deepseek-ai/dsh-llm", "version": "0.1.1-rc.2", "integrity": "sha512-ASJfjIdZbIXvLwi3rGo+eZb/GxMVV/WO5/XVD3B96mT8EIzrlw3+nMR6/CvmJVzcycKQ2XN0wj7jD6TasPRySA=="},
+    {"name": "@deepseek-ai/dsh-session", "version": "0.1.1-rc.2", "integrity": "sha512-4/cv6X9HPhm47eyRhCu/WZwzrtJKegk5J+0xaxcZ9i8S0smdxP57tqy8a0jkSshLQn7BzMFxneQrlYExrLrDhQ=="},
+    {"name": "@deepseek-ai/dsh-tools", "version": "0.1.1-rc.2", "integrity": "sha512-0GGL4D55MwYDepzZMOI3L0ycu5b2qr96GL0Y7snwhAnpK2Di61rbX3fJE+PB3ZrovGX0csIRdt9n3iJZDVtDrw=="},
+    {"name": "@deepseek-ai/dsh-tool-goal", "version": "0.1.1-rc.2", "integrity": "sha512-kTECpE732uwlxRJr/jBZb1BqaxZzrA7Rv4KuM3eolvhoTJ5zjyiR2YHmDmCSfuI6zmA/BEfWss7D0mLbVtJEZA=="},
+    {"name": "@deepseek-ai/dsh-agent-loop", "version": "0.1.1-rc.2", "integrity": "sha512-2uJZ6kjJ3IYLRGn6/NhiZgD576ABcbERB/nkReR9TEUMO2zWkz6OuKtVwLyFCFSni2T25Jv+clKQWt7D4MhU3A=="},
+    {"name": "@deepseek-ai/dsh-tool-bash", "version": "0.1.1-rc.2", "integrity": "sha512-YNmrKmBanj5EQn1zejjbo4UUFtg2/h3s9y0lY3vBu+dezNz4HdUlSkSZACbNUAZywyLomdhlt4rJdtdnrqyS7Q=="},
+    {"name": "@deepseek-ai/dsh-tool-pwsh", "version": "0.1.1-rc.2", "integrity": "sha512-Gr0F4VWCIIR25qWVv4mMEJnewXILHLCkZwrLfbHA2OOI7DNvvdB5wjJxhuo+ZQa8/3KJ/byQGtEBqCY9mb10Zg=="},
+    {"name": "@deepseek-ai/dsh-shell", "version": "0.1.1-rc.2", "integrity": "sha512-gEqPUxKOpOV66wvM4o8Z5FEuWmsEvYzD9OQy3cyo/kjzlx+2+KUWi22cl/YWtBs/zUtRJbdG5UqMnh8GUeO8Hg=="},
+    {"name": "@deepseek-ai/dsh-subprocess-local", "version": "0.1.1-rc.2", "integrity": "sha512-I4pyzpohZEVRQQbuEpMP0t8oKsf+XIlRo64aJVKGXI2eMcg9f9gbfhKQNYNqRGbegQL1HYpSLU6Rzyibldgwaw=="},
+    {"name": "@deepseek-ai/dsh-bash-sandbox", "version": "0.1.1-rc.2", "integrity": "sha512-bagZDMZ73C1dVDBjFCn1flNZ8aOEel4dsmDJTfmagqeYPXfIJDFKPhDc3lWjc+o6jMNfmumeUJ62dwhHkjJHKA=="},
+    {"name": "@deepseek-ai/dsh-pwsh-sandbox", "version": "0.1.1-rc.2", "integrity": "sha512-hBUTg5p8TTQifZrfstbimVlBFyUOb7JhNkWKc+n6UpTzoFRSkPAvrjGeXKDmFI6jXpL4nXzLJoaIssfYnRg7bw=="},
+    {"name": "@deepseek-ai/dsh-shell-env", "version": "0.1.1-rc.2", "integrity": "sha512-dDKKqsxsbklUpxX5ornd/SKJ2yfr/SOHOWDgeJkYvx3SMSXq8EvhCK/VEvHswXQ25rRLFWM4/Mr3htk1hn/GPA=="},
+    {"name": "@deepseek-ai/dsh", "version": "0.1.1-rc.2", "integrity": "sha512-UP1UIh6q3Gme/yXRn/QL2P8IsVlv8Shpg22TRJIZPsCRWLm4CBiA1MUvXmJAfsOEETBMLAl+xWPtFw6ICsN3wg=="},
+    {"name": "@deepseek-ai/dsh-host-plugin-inventory", "version": "0.1.1-rc.2", "integrity": "sha512-Hud9ezW0bexWfhX7C+c5rdUDX1xzbEGDzj1lGQyj/QxdrxHYHjGrJq3tLRyvN6K4FSmEdG2IBKdQGCOLVrIthA=="},
+    {"name": "dshmarket", "version": "1.36.0", "integrity": "sha512-xX8CCoXdIALaxtLosj+5qGg8r1cykW2zo1AOPJcSQepg2r4Vd2K0NmERldDqfeyFV0pCuZsUoAPe1Q/BW7De/g=="},
+    {"name": "@deepseek-ai/dsh-host-webserver", "version": "0.1.1-rc.2", "integrity": "sha512-t9MrjC65QHiiWhG9V8UZxgfE/aWYhJHHrIM0kbTvtXxg4tLGIKo/upHp7iiag65F3HTkVLrH/DUyPMi4v2ZA7g=="},
+    {"name": "@deepseek-ai/dsh-web-app", "version": "0.1.1-rc.2", "integrity": "sha512-1zGHY7qwBVlVJrzIWu+86SuBZXaVUxe2JRfffsuRvKXq2QcR/K4CoJJfZ43cDoWKu9xPvvxz7w2ezV+EdXgg1A=="},
+    {"name": "@deepseek-ai/dsh-jobs", "version": "0.1.1-rc.2", "integrity": "sha512-SXvDJMvcUrGrlzIyE7j8/lI4Pj1nDe/UOR8C05Zagp+/0R8p46n6KylySvZdPAFENV5t8WX3Fw3eOaS4No0+wQ=="},
+    {"name": "@deepseek-ai/dsh-jobs-local", "version": "0.1.1-rc.2", "integrity": "sha512-26lg7mi9RKnu8IP8SWLbY+uZenbqF2AkAZvgZaLDlw1z58NtBsbgKgh6FNC8JXEyknAwYc6auQQKF+nLTlEjCw=="},
+    {"name": "@deepseek-ai/dsh-tool-jobs", "version": "0.1.1-rc.2", "integrity": "sha512-wCU7mo2uoQcAtz7de4ZXP2es9lALsmz6XzC+KAlS2e7/yTBi9a5LL2vdSr6XhExVAuhu/6f9eM/w4EQBOxtKlw=="},
+    {"name": "@deepseek-ai/dsh-tool-fs", "version": "0.1.1-rc.2", "integrity": "sha512-llX8AWbaI3CGme/a2eeTSfy5atk8u3iJeOFzmZV/KZ0v0hMhKZIK1xQInWwC9OmSDJ/StStJe0hDPVLWbB7hVg=="},
+    {"name": "@deepseek-ai/dsh-fs", "version": "0.1.1-rc.2", "integrity": "sha512-8j+6MffvCHATLQrhAVfc9rKyunKu/O7mjjJzmdsUSdID7V4iUYMwqPamhlAyI+tfohZu/vcforKzCRIZGmCYug=="},
+    {"name": "@deepseek-ai/dsh-fs-local", "version": "0.1.1-rc.2", "integrity": "sha512-jvn1MsAMqCmt5SjRNkPjmpc+RIWrZQrBVtf/OpmKr2PaBEGqSbCkPApWDE9iSMhcuQg6k5evScOXwAsduzKOLA=="},
+    {"name": "@deepseek-ai/dsh-fs-sandbox", "version": "0.1.1-rc.2", "integrity": "sha512-PI65uLZ3ARkfVV/PXvACS1HEXggoOaXgYQzXQFdLOfm7AiHOdZWZccUAXBetpZhcNYIOKsVoLnfZkXcHByqecQ=="},
+    {"name": "@deepseek-ai/dsh-fs-observation-policy", "version": "0.1.1-rc.2", "integrity": "sha512-rlq7yu4xavkKK1Oa1/aNCOeUW7t/3OXJJOfOcZXuUgJn5f8G0AbpTDpp2CeuL1cHlKpbunGhEkKQ2N/dv7ZR9w=="},
+    {"name": "@deepseek-ai/dsh-sandbox", "version": "0.1.1-rc.2", "integrity": "sha512-rnO2RqZ+ycpwrXrXlMcrhWAICdui3ZVTjNQ8eZrOPE18hAbX3tw0nLFq26sBjMSnBfDQHNZ4VaFpt0p8qhkPWQ=="},
+    {"name": "@deepseek-ai/dsh-sandbox-policy", "version": "0.1.1-rc.2", "integrity": "sha512-cpoIUxCzpZJDTMXVt9gS+qgWEDAWf6rIe715uY1NF0ROoiEXPlmToLsHLF+4pXTW3wWWzpGVswO0bPYEKrQr3g=="},
+    {"name": "@deepseek-ai/dsh-user-approval", "version": "0.1.1-rc.2", "integrity": "sha512-SdsO4Rs+NeJFoertkVilXBACREOLfkKPJJznYKqDhJxeRo38RJ56dtj0Xd0/6rERmsQiMck4Bwdrzg1ubUqPNA=="},
+    {"name": "@deepseek-ai/dsh-attachment", "version": "0.1.1-rc.2", "integrity": "sha512-rCYAt8QsawP1yfDCU7XxNwYT/XWvyFsxYrkwhLLkdfW83QVD0CQHizSkTQE7RFX74nKUD1z3sTLfnLr7xneArw=="},
+    {"name": "@deepseek-ai/dsh-system-prompt", "version": "0.1.1-rc.2", "integrity": "sha512-on4hjAlYI5uX9q7Sf95YkMMBVe6heywtA/H50ksrIMUub8U2B98hO9iQpHhjwIO1F1vu+5pLcPvRr6yUGGmtXQ=="}
+  ],
+  "runtimeIdentity": {
+    "source": "active-profile-package-graph",
+    "injectionConfigKeys": ["hostLockPackages", "hostLockPlatform", "hostLockProfile"],
+    "missingBehavior": "fail-closed"
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-completion-guard",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "A task-contract and completion-certification layer for DeepSeek Harness.",
   "repository": {
     "type": "git",
@@ -19,13 +19,18 @@
       "default": "./dist/domain/index.js"
     }
   },
+  "bin": {
+    "dsh-completion-guard-host-lock": "./bin/dsh-completion-guard-host-lock.mjs"
+  },
   "files": [
+    "bin",
     "dist",
     "cordis.patch.yml",
     "README.md",
     "README.zh-CN.md",
     "LICENSE",
     "docs",
+    "manifests",
     "CHANGELOG.md",
     "CHANGELOG.zh-CN.md"
   ],
@@ -42,29 +47,62 @@
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/dsh-agent": "^0.1.1-rc.2",
     "@deepseek-ai/dsh-commands": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-goal": "0.1.1-rc.2",
     "@deepseek-ai/dsh-llm": "^0.1.1-rc.2",
     "@deepseek-ai/dsh-session": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-tool-goal": "0.1.1-rc.2",
     "@deepseek-ai/dsh-tools": "^0.1.1-rc.2"
   },
-  "scripts": {
-    "build": "tsdown",
-    "lint": "oxlint src tests",
-    "test": "vitest run",
-    "typecheck": "tsc --noEmit",
-    "pack:check": "pnpm pack --dry-run --json"
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-goal": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-goal": {
+      "optional": true
+    }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-commands": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tools": "^0.1.1-rc.2",
+    "@deepseek-ai/cordis": "4.0.1",
+    "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-commands": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-fs": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-fs-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-fs-observation-policy": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-fs-sandbox": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-goal": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-jobs": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-jobs-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tool-fs": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tool-goal": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.1-rc.2",
     "@deepseek-ai/schemastery": "^3.18.1",
     "@types/node": "^22.0.0",
     "oxlint": "^1.20.0",
     "tsdown": "^0.15.0",
     "typescript": "^5.8.0",
     "vitest": "^3.2.0"
+  },
+  "keywords": [
+    "deepseek-harness",
+    "dsh-plugin",
+    "task-contract",
+    "completion-certification",
+    "hooks",
+    "typescript"
+  ],
+  "scripts": {
+    "build": "tsdown",
+    "lint": "oxlint src tests",
+    "test": "vitest run",
+    "test:stats": "node --test tests/npm-download-stats.node.mjs",
+    "typecheck": "tsc --noEmit",
+    "pack:check": "pnpm pack --dry-run --json"
   }
-}
+}