dsh-composition-doctor 0.1.3 → 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,17 @@
+# Changelog
+
+## 0.2.0
+
+- Release the verified 0.2.0 package without changing the established diagnostic architecture or evidence boundaries.
+
+## 0.1.3
+
+- Hardened the release package contract with the `dsh-doctor` binary entry.
+- Added packed-package verification coverage and documented scan exit-code thresholds.
+- Hardened npm artifact cache writes with integrity metadata and atomic temporary-file publication.
+- Reject unsafe tar paths and link entries before reading package metadata.
+- Kept DSH compatibility verified only for `0.1.5-rc.1` and `0.1.5-rc.2`; `0.1.6-alpha.1` remains expected-compatible only.
+- Runtime smoke remains `not-run` unless a trusted OS-level isolation backend is available.
+- Two Windows symlink regressions may remain `skipped` when the test process cannot create file symlinks; this is not a compatibility PASS.
+- `0.1.6-alpha.1` is experimental/expected-compatible and is not part of the verified release range.
+- A temporary directory is not a security sandbox; no runtime safety claim is made from temporary-directory execution.

package/README.md

@@ -1,12 +1,14 @@
 # dsh-composition-doctor
 
 [![npm version](https://img.shields.io/npm/v/dsh-composition-doctor)](https://www.npmjs.com/package/dsh-composition-doctor)
-[![CI](https://github.com/lemonxiny55/dsh-composition-doctor/actions/workflows/ci.yml/badge.svg)](https://github.com/lemonxiny55/dsh-composition-doctor/actions)
+[![CI](https://github.com/lemonxiny55/dsh-composition-doctor/actions/workflows/ci.yml/badge.svg)](https://github.com/lemonxiny55/dsh-composition-doctor/actions/workflows/ci.yml)
 
 English | [中文](README.zh.md)
 
 Composition and upgrade preflight doctor for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (`dsh`). It reads an explicitly selected profile and explains observable Cordis/plugin composition risks with concrete evidence. It never edits a real profile or silently changes permissions.
 
+Current package release: `0.2.0`.
+
 ## What the model gets
 
 | Command | Purpose |
@@ -22,18 +24,21 @@ The Web Settings page is display/export only: it reads the latest local report,
 
 `scan --output <dir>` writes only to the requested directory. To make the same report visible to the read-only Settings page, opt in explicitly: `--publish` copies it to the default plugin directory `.dsh-composition-doctor/reports`, while `--report-dir <dir>` publishes to a configured plugin directory. Use `--format both` so the Web route has `report.json` and Markdown remains exportable. Do not use a profile directory, `.env` location, or any directory containing keys, tokens, or other secrets as a report directory.
 
-Reports declare `evidenceMode`: `static` means allow-listed root YAML/manifest metadata only; `resolved` requires an injected public runtime provider; `mixed` is reserved for an adapter that supplies both. Static findings and the bounded metadata coverage are not proof of the final runtime composition. This release has no stable public DSH runtime provider bundled.
+Reports declare `evidenceMode`: `static` means allow-listed manifest/patch/package metadata only; `composed` means a public `dsh --profile <name> --dump-config` command returned a composition result; `runtime-observed` is reserved for a successful isolated runtime observation backend; and `mixed` is reserved for an adapter that supplies both. `dump-config` never proves runtime execution, including when a `!!js` or other runtime-dependent value is present. Static findings and bounded metadata coverage are not proof of the final runtime composition. If no compatible public DSH CLI is available, scan falls back to static and records a warning. Reports written before evidence schema 2 may still be read as legacy `resolved`, but new reports never emit that label.
+
+`preflight --candidate package@version` records a validated exact reference in an isolated temporary `package.json`. Target artifact discovery is local-first (`--dsh-bin`, package directory, tarball, installed `dsh`, `--package-manager-cache`, then Doctor-owned cache); registry access is allowed only with explicit `--online`. Online resolution downloads exact registry tarballs into Doctor-owned cache, records source/version/integrity/hash, and never installs or runs lifecycle scripts. `--allow-build` does not grant permission to execute third-party runtime code.
 
-`preflight --candidate package@version` inserts a validated exact reference into an isolated temporary `package.json` and includes that declared metadata in static analysis. It never downloads, installs, loads, or runs candidate lifecycle scripts; peer/platform facts inside an uninstalled candidate and runtime compatibility remain unverified. `--allow-build` is only a recorded future runner gate and still executes no third-party script.
+`scan --fail-on never|info|warning|error` controls the scan exit code. The default is `never`: warnings and errors remain in the report without changing the exit code. `info` fails on any diagnostic, `warning` fails on warnings or errors, and `error` fails only on errors. Malformed arguments return exit code 2; operational failures return 1.
 
 ## Install
 
 ```powershell
 npm install -g dsh-composition-doctor
 npx @deepseek-ai/dsh plugin --profile web add dsh-composition-doctor
+dsh-doctor --version
 ```
 
-Restart the Web UI (`npx @deepseek-ai/dsh web`) after changing a profile. The CLI can also run from a checkout with `node dist/cli/main.js`.
+Restart the Web UI (`npx @deepseek-ai/dsh web`) after changing a profile.
 
 ## Example
 
@@ -42,18 +47,18 @@ dsh-doctor scan --profile C:\path\to\profile --format both --output .\reports\pr
 dsh-doctor scan --profile C:\path\to\profile --format both --output .\reports\archive --report-dir C:\safe\doctor-reports
 dsh-doctor snapshot --profile C:\path\to\profile --output .\reports\before.json
 dsh-doctor diff --before .\reports\before.json --after .\reports\after.json --format both
-dsh-doctor preflight --profile C:\path\to\profile --target-dsh 0.1.0-rc.6
+dsh-doctor preflight --profile C:\path\to\profile --target-dsh 0.1.5-rc.2
 ```
 
-Each finding is `info`, `warning`, or `error` and includes evidence, explanation, and the smallest remediation. Missing runtime evidence is reported as a warning, never as a confirmed failure.
+Each finding is `info`, `warning`, or `error` and includes evidence, explanation, and the smallest remediation. `runtimeSmoke.status=not-run` is not a runtime PASS; `artifact-unavailable` is not `incompatible`; and a warning is not a confirmed failure.
 
 ## Safety and privacy
 
-Default operations are read-only or isolated under the OS temporary directory. The plugin does not modify profiles, install/remove plugins, migrate configuration, escalate permissions, or perform network I/O by default. It never reads `.env`, keys, tokens, environment values, session bodies, or workspace file contents.
+Default operations are read-only or isolated under the OS temporary directory. The plugin does not modify profiles, install/remove plugins, migrate configuration, escalate permissions, or perform network I/O by default. It never reads `.env`, profile secrets, session bodies, or workspace file contents, and does not collect or persist arbitrary environment-variable values. Public CLI execution receives only the minimal process-routing variables required by the host platform.
 
 ## Support and limitations
 
-Verified preview range: DSH `>=0.1.0-rc.5 <0.2.0`, Cordis `>=4 <5`, Node.js `>=20`; Windows is first-class and macOS/Linux are supported. DSH has not yet exposed a stable resolved-composition introspection API, so static findings are explicitly labelled when no public provider is available.
+The real public CLI harness verifies `@deepseek-ai/dsh@0.1.5-rc.1` and `@deepseek-ai/dsh@0.1.5-rc.2`. `0.1.6-alpha.1` remains expected-compatible/experimental only; `0.1.0-rc.6` is historical context, not a current verified target. Missing artifacts are reported as unavailable, never as PASS. Verified development runtime: Node.js 24 on Windows; CI covers Node.js 20 on Ubuntu. Runtime hook/UI ownership is reported as unverified unless public metadata supplies it, and a temp profile is not a security sandbox.
 
 ## Development
 
@@ -63,4 +68,6 @@ pnpm typecheck
 pnpm build
 ```
 
+For checkout-only development, run the CLI with `node dist/cli/main.js` after building.
+
 See [`README.zh.md`](README.zh.md), [`docs/compatibility.md`](docs/compatibility.md), and [`docs/examples/scan-report.md`](docs/examples/scan-report.md). MIT licensed.

package/README.zh.md

@@ -1,36 +1,73 @@
 # dsh-composition-doctor（中文）
 
+[![npm version](https://img.shields.io/npm/v/dsh-composition-doctor)](https://www.npmjs.com/package/dsh-composition-doctor)
+[![CI](https://github.com/lemonxiny55/dsh-composition-doctor/actions/workflows/ci.yml/badge.svg)](https://github.com/lemonxiny55/dsh-composition-doctor/actions/workflows/ci.yml)
+
 [English](README.md) | 中文
 
-面向 DeepSeek Harness（DSH）的本地只读组合与升级预检插件。它读取明确指定的 profile，分析 Cordis/plugin 组合风险，生成脱敏快照，比较升级差异，并在独立临时目录中演练升级。
+面向 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（`dsh`）的组合与升级预检工具。它读取明确指定的 profile，用可追溯证据说明可观察到的 Cordis/plugin 组合风险；不会编辑真实 profile，也不会静默扩大权限。
+
+当前 package release：`0.2.0`。
 
-## 功能
+## 模型可用能力
 
 | 命令 | 作用 |
 |---|---|
-| `dsh-doctor scan` | 检测重复 row、hook 顺序风险、UI slot/route 冲突、bundle 覆盖、peer/platform 不匹配和 profile 漂移。 |
-| `dsh-doctor snapshot` | 生成脱敏、可比较的 profile 快照和 lockfile 哈希。 |
-| `dsh-doctor diff` | 比较插件、rows、hooks、UI、peer 和平台变化。 |
-| `dsh-doctor preflight` | 在独立临时目录预演目标 DSH 升级。 |
+| `dsh-doctor scan` | 检测重复 Cordis row、hook 顺序风险、UI slot/route 所有权冲突、bundle 覆盖、peer/platform 不匹配和 profile 漂移。 |
+| `dsh-doctor snapshot` | 生成脱敏、可比较的 profile 快照及 lockfile 哈希。 |
+| `dsh-doctor diff` | 汇总新增、删除或升级的插件，以及 rows、hooks、UI 声明、peer 和平台变化。 |
+| `dsh-doctor preflight` | 在独立临时 profile 中演练目标 DSH 升级。 |
 
-Web Settings 只读显示最近报告、冲突图并导出 JSON/Markdown，不提供修复、安装或卸载操作。
+Web Settings 页面仅供显示与导出：它读取最新本地报告、展示冲突图，并导出 JSON/Markdown；不提供修复、安装或卸载操作。
 
 ## 报告与证据边界
 
-`scan --output <目录>` 只写入该显式目录。要让只读 Settings 页面看到同一份报告，必须显式加 `--publish`，它会发布到插件默认目录 `.dsh-composition-doctor/reports`；或者用 `--report-dir <目录>` 发布到配置的目录。请使用 `--format both`，这样 Web route 可读取 `report.json`，同时保留 Markdown 导出。报告目录不得是 profile、`.env` 所在目录，或任何包含密钥、token 等敏感信息的目录。
+`scan --output <目录>` 只写入显式指定的目录。要让只读 Settings 页面看到同一份报告，必须显式选择 `--publish`，它会复制到默认插件目录 `.dsh-composition-doctor/reports`；也可以使用 `--report-dir <目录>` 发布到配置的插件报告目录。请使用 `--format both`，使 Web route 能读取 `report.json`，同时保留 Markdown 导出。报告目录不能是 profile、`.env` 所在位置，或任何含密钥、token 或其他敏感信息的目录。
+
+报告中的 `evidenceMode` 标明证据来源：`static` 仅表示 allow-list 中的 manifest、patch、package metadata 等静态证据；`composed` 表示公开 `dsh --profile <name> --dump-config` 返回了 composition 结果；`runtime-observed` 只允许真正启动隔离 runtime 并观察到注册/行为的后端使用；`mixed` 预留给同时提供多类来源的适配器。`dump-config` 即使成功，也不代表 runtime 已验证；存在 `!!js` 等运行时依赖时尤其如此。找不到兼容的公开 DSH CLI 时会回退到 static，并明确报告 warning。旧的 evidence schema 2 之前报告仍可按 legacy `resolved` 读取，但新报告不会再输出该标签。
 
-报告的 `evidenceMode` 表示证据来源：`static` 仅为允许列表中的根级 YAML/manifest 元数据；`resolved` 必须来自注入的公开 runtime provider；`mixed` 留给同时具有两类来源的适配器。静态发现和有限的 metadata coverage 不是最终 runtime composition 的证明；当前版本未内置稳定公开的 DSH runtime provider。
+`preflight --candidate package@version` 只会把通过校验的精确引用记录到隔离临时 `package.json`。目标 artifact 默认按本地优先顺序查找：`--dsh-bin`、本地 package directory、本地 tarball、已安装 `dsh`、`--package-manager-cache`、Doctor 自己的 cache；只有显式 `--online` 才允许访问 registry。在线解析会把精确 tarball 写入 Doctor 自己的 cache，记录来源、版本、integrity 和 hash，并且不会安装或执行 lifecycle script。`--allow-build` 不等于允许执行第三方 runtime code。
 
-`preflight --candidate package@version` 会将合法的精确引用放入隔离临时 `package.json`，使其声明元数据参与静态分析。它不会下载、安装、加载候选包，也不会执行第三方生命周期脚本；未安装候选包内部的 peer/platform 元数据与 runtime 兼容性仍未验证。`--allow-build` 目前仅记录未来 runner 的显式门槛，仍不会执行任何第三方脚本。
+`scan --fail-on never|info|warning|error` 控制 scan 的退出码。默认是 `never`：warning 和 error 会写入报告，但不改变退出码；`info` 遇到任意诊断时退出 1，`warning` 遇到 warning 或 error 时退出 1，`error` 只在 error 时退出 1。参数错误退出 2，执行失败退出 1。
 
-## 安装与使用
+## 安装
 
 ```powershell
 npm install -g dsh-composition-doctor
 npx @deepseek-ai/dsh plugin --profile web add dsh-composition-doctor
+dsh-doctor --version
+```
+
+更改 profile 后重启 Web UI：`npx @deepseek-ai/dsh web`。
+
+## 示例
+
+```powershell
 dsh-doctor scan --profile C:\path\to\profile --format both --output .\reports\profile --publish
+dsh-doctor scan --profile C:\path\to\profile --format both --output .\reports\archive --report-dir C:\safe\doctor-reports
+dsh-doctor snapshot --profile C:\path\to\profile --output .\reports\before.json
+dsh-doctor diff --before .\reports\before.json --after .\reports\after.json --format both
+dsh-doctor preflight --profile C:\path\to\profile --target-dsh 0.1.5-rc.2
+```
+
+每条诊断均为 `info`、`warning` 或 `error`，并附带 evidence、explanation 和最小 remediation。`runtimeSmoke.status=not-run` 不等于 runtime PASS；`artifact-unavailable` 不等于 `incompatible`；warning 也不等于已确认失败。
+
+## 安全与隐私
+
+默认操作只读，或仅在操作系统临时目录中隔离运行。插件不会修改 profile、安装或删除插件、迁移配置、扩大权限，默认也不会执行网络 I/O。它不会读取 `.env`、profile 密钥、会话正文或工作区源文件内容，也不会收集或持久化任意环境变量值；启动公开 CLI 时只传递平台所需的最小进程路由变量。
+
+## 支持范围与限制
+
+real-release harness 已使用真实公开 CLI 验证 `@deepseek-ai/dsh@0.1.5-rc.1` 和 `@deepseek-ai/dsh@0.1.5-rc.2`。`0.1.6-alpha.1` 仍只是 expected-compatible/experimental；`0.1.0-rc.6` 仅作历史兼容背景，不是当前 verified target。artifact 不可用时会明确报告 unavailable，绝不记为 PASS。已验证开发环境为 Windows + Node.js 24；CI 覆盖 Ubuntu + Node.js 20。只有公开 metadata 能提供 hook/UI ownership 时才会确认，否则标为 unverified；临时目录不是安全 sandbox。
+
+## 开发
+
+```powershell
+pnpm test
+pnpm typecheck
+pnpm build
 ```
 
-默认操作只读或写入操作系统临时目录，不修改真实 profile，不扩大权限，不默认联网，不读取 `.env`、密钥、token、环境变量值、会话正文或工作区文件内容。证据不足时只报告 warning。
+仅在 checkout 开发时，构建完成后使用 `node dist/cli/main.js` 运行 CLI。
 
-已验证范围：DSH `>=0.1.0-rc.5 <0.2.0`、Cordis `>=4 <5`、Node.js `>=20`；Windows 优先，同时支持 macOS/Linux。
+参阅 [`README.md`](README.md)、[`docs/compatibility.md`](docs/compatibility.md) 和 [`docs/examples/scan-report.md`](docs/examples/scan-report.md)。MIT 许可。

package/dist/cli/main.js

@@ -1,10 +1,11 @@
 import { fileURLToPath } from 'node:url';
+import { readFileSync } from 'node:fs';
 import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { dirname, resolve } from 'node:path';
 import { resolveComposition } from '../core/composition-adapter.js';
 import { diffSnapshots, renderSnapshotDiffMarkdown } from '../core/diff.js';
 import { readProfile } from '../core/profile-reader.js';
-import { createSnapshot } from '../core/snapshot.js';
+import { createSnapshot, isSnapshotV1, isSnapshotV2 } from '../core/snapshot.js';
 import { analyseComposition } from '../core/rules.js';
 import { renderJson } from '../reports/json.js';
 import { renderMarkdown } from '../reports/markdown.js';
@@ -12,6 +13,15 @@ import { resolveReportDirectory } from '../reports/location.js';
 import { runPreflight } from '../core/preflight.js';
 const usage = 'Usage: dsh-doctor <scan | snapshot | diff | preflight>';
 const commands = new Set(['scan', 'snapshot', 'diff', 'preflight']);
+function packageVersion() {
+    try {
+        const manifest = JSON.parse(readFileSync(resolve(dirname(fileURLToPath(import.meta.url)), '../../package.json'), 'utf8'));
+        return typeof manifest.version === 'string' ? manifest.version : 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
 function option(argv, name) {
     const index = argv.indexOf(name);
     return index >= 0 && typeof argv[index + 1] === 'string' ? argv[index + 1] : undefined;
@@ -38,7 +48,16 @@ async function scan(argv, io) {
         return invalid(io, 'scan requires --profile and --output');
     if (format !== 'json' && format !== 'markdown' && format !== 'both')
         return invalid(io, '--format must be json, markdown, or both');
-    const report = analyseComposition(await resolveComposition(await readProfile({ profileDir: resolve(profile) })));
+    const failOn = option(argv, '--fail-on') ?? 'never';
+    if (failOn !== 'never' && failOn !== 'info' && failOn !== 'warning' && failOn !== 'error')
+        return invalid(io, '--fail-on must be info, warning, error, or never');
+    const primary = await resolveComposition(await readProfile({ profileDir: resolve(profile) }));
+    const compared = await Promise.all(options(argv, '--compare-profile').map(async (value) => ({ name: value, model: await resolveComposition(await readProfile({ profileDir: resolve(value) })) })));
+    const report = analyseComposition(compared.length === 0 ? primary : {
+        ...primary,
+        bundles: [...(primary.bundles ?? []), ...compared.flatMap(({ name, model }) => (model.bundles ?? []).map((bundle) => ({ ...bundle, profile: name })))],
+        adapterDiagnostics: [...primary.adapterDiagnostics, ...compared.flatMap(({ model }) => model.adapterDiagnostics)]
+    });
     const destination = resolve(output);
     const destinations = [destination, ...(publish ? [resolveReportDirectory(configuredReportDir)] : [])];
     for (const directory of destinations) {
@@ -51,6 +70,12 @@ async function scan(argv, io) {
     io.write(`Wrote reports to ${destination}`);
     if (publish)
         io.write(`Published reports to ${destinations[1]}`);
+    if (failOn === 'info' && report.diagnostics.length > 0)
+        return 1;
+    if (failOn === 'error' && report.diagnostics.some((item) => item.severity === 'error'))
+        return 1;
+    if (failOn === 'warning' && report.diagnostics.some((item) => item.severity === 'warning' || item.severity === 'error'))
+        return 1;
     return 0;
 }
 async function snapshot(argv, io) {
@@ -64,9 +89,7 @@ async function snapshot(argv, io) {
     io.write(`Wrote snapshot to ${destination}`);
     return 0;
 }
-function isSnapshot(value) {
-    return value !== null && typeof value === 'object' && value.schemaVersion === 1;
-}
+function isSnapshot(value) { return isSnapshotV1(value) || isSnapshotV2(value); }
 async function diff(argv, io) {
     const beforePath = option(argv, '--before');
     const afterPath = option(argv, '--after');
@@ -78,12 +101,21 @@ async function diff(argv, io) {
     const before = JSON.parse(await readFile(resolve(beforePath), 'utf8'));
     const after = JSON.parse(await readFile(resolve(afterPath), 'utf8'));
     if (!isSnapshot(before) || !isSnapshot(after))
-        return invalid(io, 'diff inputs must be schema version 1 snapshots');
+        return invalid(io, 'diff inputs must be schema version 1 or 2 snapshots');
     const result = diffSnapshots(before, after);
-    if (format === 'json' || format === 'both')
-        io.write(`${JSON.stringify(result, null, 2)}\n`);
-    if (format === 'markdown' || format === 'both')
-        io.write(renderSnapshotDiffMarkdown(result));
+    const output = option(argv, '--output');
+    const rendered = [
+        ...(format === 'json' || format === 'both' ? [`${JSON.stringify(result, null, 2)}\n`] : []),
+        ...(format === 'markdown' || format === 'both' ? [renderSnapshotDiffMarkdown(result)] : [])
+    ];
+    if (output === undefined)
+        rendered.forEach((value) => io.write(value));
+    else {
+        const destination = resolve(output);
+        await mkdir(dirname(destination), { recursive: true });
+        await writeFile(destination, rendered.join(''), 'utf8');
+        io.write(`Wrote diff to ${destination}`);
+    }
     return 0;
 }
 async function preflight(argv, io) {
@@ -98,7 +130,10 @@ async function preflight(argv, io) {
         candidates: options(argv, '--candidate'),
         allowBuild: argv.includes('--allow-build'),
         online: argv.includes('--online'),
-        keepTemp: argv.includes('--keep-temp')
+        keepTemp: argv.includes('--keep-temp'),
+        dshBin: option(argv, '--dsh-bin'),
+        dshPackage: option(argv, '--dsh-package'),
+        packageManagerCacheDirs: options(argv, '--package-manager-cache')
     });
     const rendered = `${JSON.stringify(result, null, 2)}\n`;
     if (output === undefined)
@@ -117,6 +152,10 @@ export async function runCli(argv, io = { write: (line) => console.log(line) })
         io.write(usage);
         return 0;
     }
+    if (command === '--version') {
+        io.write(packageVersion());
+        return 0;
+    }
     if (!commands.has(command)) {
         io.write(`Unknown command: ${command}`);
         return 2;

package/dist/client/index.js

@@ -8,7 +8,7 @@ export const registration = Object.freeze({
 });
 export const apply = Object.assign((ctx) => {
     const messages = {
-        zh: { title: 'DSH 组合医生', exportJson: '导出 JSON', exportMarkdown: '导出 Markdown' },
+        zh: { title: 'DSH Composition Doctor', exportJson: '导出 JSON', exportMarkdown: '导出 Markdown' },
         en: { title: 'DSH Composition Doctor', exportJson: 'Export JSON', exportMarkdown: 'Export Markdown' }
     };
     const disposeLocale = ctx.locale?.register('dshCompositionDoctor', messages);

package/dist/client/report-view.js

@@ -2,6 +2,19 @@ import { createElement, useEffect, useRef } from 'react';
 import { renderMarkdown } from '../reports/markdown.js';
 export const clientReportPath = '/dsh-composition-doctor/reports/latest';
 export const downloadRevokeDelayMs = 1000;
+export function evidenceBadgeLabel(mode, runtimeObserved) {
+    if (mode === 'runtime-observed' && runtimeObserved)
+        return 'runtime-observed';
+    if (mode === 'runtime-observed')
+        return 'composed; runtime not observed';
+    if (mode === 'composed')
+        return 'composed; runtime not observed';
+    if (mode === 'mixed')
+        return runtimeObserved ? 'mixed; runtime observed' : 'mixed; runtime not observed';
+    if (mode === 'resolved')
+        return 'legacy resolved; runtime not observed';
+    return 'static';
+}
 export function buildConflictGraph(report) {
     const nodes = new Map();
     const edges = [];
@@ -24,6 +37,28 @@ export function toReportViewModel(report) {
         counts[diagnostic.severity] += 1;
     return { report, counts, graph: buildConflictGraph(report) };
 }
+function renderConflictGraph(document, graph) {
+    const section = document.createElement('section');
+    section.setAttribute('aria-labelledby', 'dsh-composition-doctor-conflict-graph');
+    const heading = document.createElement('h3');
+    heading.id = 'dsh-composition-doctor-conflict-graph';
+    heading.textContent = 'Conflict graph';
+    section.append(heading);
+    const list = document.createElement('ul');
+    for (const node of graph.nodes) {
+        const item = document.createElement('li');
+        const outgoing = graph.edges.filter((edge) => edge.from === node.id).map((edge) => graph.nodes.find((candidate) => candidate.id === edge.to)?.label ?? edge.to);
+        item.textContent = `${node.label} (${node.source})${outgoing.length === 0 ? '' : ` → ${outgoing.join(', ')}`}`;
+        list.append(item);
+    }
+    if (graph.nodes.length === 0) {
+        const item = document.createElement('li');
+        item.textContent = 'No evidence relationships were produced.';
+        list.append(item);
+    }
+    section.append(list);
+    return section;
+}
 function isReport(value) {
     if (value === null || typeof value !== 'object')
         return false;
@@ -101,9 +136,15 @@ export function createReportView(document = globalThis.document, translate = (ke
     const actions = document.createElement('p');
     actions.append(button(document, translate('exportJson'), () => { void exportReport(document, 'json', dependencies).catch(() => undefined); }), text(document, ' '), button(document, translate('exportMarkdown'), () => { void exportReport(document, 'markdown', dependencies).catch(() => undefined); }));
     root.append(actions);
-    void fetchReport().then((report) => {
+    void fetchReport(dependencies.fetcher).then((report) => {
         const model = toReportViewModel(report);
-        status.textContent = `Generated: ${report.generatedAt}. Profile: ${report.profileDir}. Evidence mode: ${report.evidenceMode}. Diagnostics: ${model.counts.error} error, ${model.counts.warning} warning, ${model.counts.info} info.`;
+        const badge = document.createElement('span');
+        badge.dataset.evidenceKind = report.evidenceMode;
+        badge.setAttribute('aria-label', 'Evidence capability');
+        badge.textContent = `Evidence: ${evidenceBadgeLabel(report.evidenceMode, report.runtimeObserved === true)}`;
+        status.textContent = `Generated: ${report.generatedAt}. Profile: ${report.profileDir}. Diagnostics: ${model.counts.error} error, ${model.counts.warning} warning, ${model.counts.info} info.`;
+        status.append(document.createTextNode(' '), badge);
+        root.append(renderConflictGraph(document, model.graph));
         const list = document.createElement('ul');
         for (const diagnostic of report.diagnostics) {
             const item = document.createElement('li');

package/dist/client.js

@@ -41,7 +41,7 @@ window.__ModuleLoader__.load({
 		function formatEvidence(item) {
 		  const subject = item.subject === void 0 ? "" : ` \u2014 ${item.subject}`;
 		  const packageLabel = item.packageName === void 0 ? "" : ` (${item.packageName}${item.version === void 0 ? "" : `@${item.version}`})`;
-		  return `- \`${item.source}\`${subject}${packageLabel}: ${item.detail}`;
+		  return `- [${item.evidenceKind}] \`${item.source}\`${subject}${packageLabel}: ${item.detail}`;
 		}
 		function formatDiagnostic(item) {
 		  const evidence = item.evidence.length === 0 ? "- No concrete source evidence was supplied." : item.evidence.map(formatEvidence).join("\n");
@@ -62,13 +62,13 @@ window.__ModuleLoader__.load({
 		`;
 		  return `# DSH Composition Doctor Report
 		
-		Schema: ${report.schemaVersion}
+		Schema: ${report.schemaVersion}; evidence schema: ${report.evidenceSchemaVersion}
 		
 		Profile: \`${report.profileDir}\`
 		
 		Generated: ${report.generatedAt}
 		
-		Evidence mode: ${report.evidenceMode}
+		Evidence mode: ${report.evidenceMode}; runtime observed: ${report.runtimeObserved ? "yes" : "no"}
 		${coverage}
 		Summary: ${summary}
 		
@@ -79,6 +79,14 @@ window.__ModuleLoader__.load({
 		// src/client/report-view.ts
 		var clientReportPath = "/dsh-composition-doctor/reports/latest";
 		var downloadRevokeDelayMs = 1e3;
+		function evidenceBadgeLabel(mode, runtimeObserved) {
+		  if (mode === "runtime-observed" && runtimeObserved) return "runtime-observed";
+		  if (mode === "runtime-observed") return "composed; runtime not observed";
+		  if (mode === "composed") return "composed; runtime not observed";
+		  if (mode === "mixed") return runtimeObserved ? "mixed; runtime observed" : "mixed; runtime not observed";
+		  if (mode === "resolved") return "legacy resolved; runtime not observed";
+		  return "static";
+		}
 		function buildConflictGraph(report) {
 		  const nodes = /* @__PURE__ */ new Map();
 		  const edges = [];
@@ -100,6 +108,28 @@ window.__ModuleLoader__.load({
 		  for (const diagnostic of report.diagnostics) counts[diagnostic.severity] += 1;
 		  return { report, counts, graph: buildConflictGraph(report) };
 		}
+		function renderConflictGraph(document, graph) {
+		  const section = document.createElement("section");
+		  section.setAttribute("aria-labelledby", "dsh-composition-doctor-conflict-graph");
+		  const heading = document.createElement("h3");
+		  heading.id = "dsh-composition-doctor-conflict-graph";
+		  heading.textContent = "Conflict graph";
+		  section.append(heading);
+		  const list = document.createElement("ul");
+		  for (const node of graph.nodes) {
+		    const item = document.createElement("li");
+		    const outgoing = graph.edges.filter((edge) => edge.from === node.id).map((edge) => graph.nodes.find((candidate) => candidate.id === edge.to)?.label ?? edge.to);
+		    item.textContent = `${node.label} (${node.source})${outgoing.length === 0 ? "" : ` \u2192 ${outgoing.join(", ")}`}`;
+		    list.append(item);
+		  }
+		  if (graph.nodes.length === 0) {
+		    const item = document.createElement("li");
+		    item.textContent = "No evidence relationships were produced.";
+		    list.append(item);
+		  }
+		  section.append(list);
+		  return section;
+		}
 		function isReport(value) {
 		  if (value === null || typeof value !== "object") return false;
 		  const candidate = value;
@@ -181,9 +211,15 @@ window.__ModuleLoader__.load({
 		    })
 		  );
 		  root.append(actions);
-		  void fetchReport().then((report) => {
+		  void fetchReport(dependencies.fetcher).then((report) => {
 		    const model = toReportViewModel(report);
-		    status.textContent = `Generated: ${report.generatedAt}. Profile: ${report.profileDir}. Evidence mode: ${report.evidenceMode}. Diagnostics: ${model.counts.error} error, ${model.counts.warning} warning, ${model.counts.info} info.`;
+		    const badge = document.createElement("span");
+		    badge.dataset.evidenceKind = report.evidenceMode;
+		    badge.setAttribute("aria-label", "Evidence capability");
+		    badge.textContent = `Evidence: ${evidenceBadgeLabel(report.evidenceMode, report.runtimeObserved === true)}`;
+		    status.textContent = `Generated: ${report.generatedAt}. Profile: ${report.profileDir}. Diagnostics: ${model.counts.error} error, ${model.counts.warning} warning, ${model.counts.info} info.`;
+		    status.append(document.createTextNode(" "), badge);
+		    root.append(renderConflictGraph(document, model.graph));
 		    const list = document.createElement("ul");
 		    for (const diagnostic of report.diagnostics) {
 		      const item = document.createElement("li");
@@ -233,7 +269,7 @@ window.__ModuleLoader__.load({
 		var apply = Object.assign(
 		  (ctx) => {
 		    const messages = {
-		      zh: { title: "DSH \u7EC4\u5408\u533B\u751F", exportJson: "\u5BFC\u51FA JSON", exportMarkdown: "\u5BFC\u51FA Markdown" },
+		      zh: { title: "DSH Composition Doctor", exportJson: "\u5BFC\u51FA JSON", exportMarkdown: "\u5BFC\u51FA Markdown" },
 		      en: { title: "DSH Composition Doctor", exportJson: "Export JSON", exportMarkdown: "Export Markdown" }
 		    };
 		    const disposeLocale = ctx.locale?.register("dshCompositionDoctor", messages);

package/dist/core/bundle-inventory.js

@@ -0,0 +1,66 @@
+import { access } from 'node:fs/promises';
+import { inspectInstalledPackage } from './package-provenance.js';
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : undefined;
+}
+function diagnostic(id, title, source, detail) {
+    return {
+        id,
+        severity: 'warning',
+        title,
+        evidence: [{ source, detail, evidenceKind: 'static' }],
+        explanation: detail,
+        remediation: 'Install the declared bundle in the selected profile or provide the missing public manifest/patch metadata.'
+    };
+}
+function bundleNames(manifest) {
+    const dsh = record(manifest.dsh);
+    const profile = record(dsh?.profile);
+    const bundles = profile?.bundles;
+    if (!Array.isArray(bundles))
+        return [];
+    return bundles.flatMap((entry) => {
+        if (typeof entry === 'string')
+            return [{ name: entry }];
+        const object = record(entry);
+        const name = typeof object?.name === 'string' ? object.name : typeof object?.package === 'string' ? object.package : undefined;
+        if (name === undefined)
+            return [];
+        return [{ name, ...(typeof object?.version === 'string' ? { requestedSpec: object.version } : {}) }];
+    });
+}
+export async function inspectBundleInventory(profileDir, packageJsonText) {
+    let manifest;
+    try {
+        manifest = JSON.parse(packageJsonText);
+    }
+    catch {
+        return { packages: [], diagnostics: [diagnostic('bundle-inventory-manifest-invalid', 'Profile package manifest is invalid', 'package.json', 'The profile package.json could not be parsed, so dsh.profile.bundles cannot be inspected.')] };
+    }
+    const packages = [];
+    const diagnostics = [];
+    for (const declared of bundleNames(manifest)) {
+        try {
+            const fact = await inspectInstalledPackage(profileDir, declared.name, declared.requestedSpec);
+            packages.push(fact);
+            if (fact.bundlePatch !== undefined) {
+                try {
+                    await access(fact.bundlePatch);
+                }
+                catch {
+                    diagnostics.push(diagnostic('bundle-patch-missing', 'Bundle patch metadata is missing', fact.packageJsonSource, `${declared.name} declares dsh.bundle.patch at ${fact.bundlePatch}, but that file is not readable.`));
+                }
+            }
+            else {
+                diagnostics.push(diagnostic('bundle-patch-unavailable', 'Bundle patch metadata is unavailable', fact.packageJsonSource, `${declared.name} has no readable dsh.bundle.patch declaration.`));
+            }
+            if (fact.integrity === undefined && fact.gitRef === undefined) {
+                diagnostics.push(diagnostic('bundle-provenance-unavailable', 'Bundle immutable provenance is unavailable', fact.packageJsonSource, `${declared.name} has neither registry integrity nor a fixed Git reference in its readable manifest.`));
+            }
+        }
+        catch (error) {
+            diagnostics.push(diagnostic('bundle-not-installed', 'Declared bundle is not installed or readable', 'package.json', `${declared.name}${declared.requestedSpec === undefined ? '' : `@${declared.requestedSpec}`} could not be resolved from the selected profile: ${error instanceof Error ? error.message : String(error)}`));
+        }
+    }
+    return { packages, diagnostics };
+}