dsh-scout 0.8.0 → 0.8.1

package/dist/index.d.ts

@@ -1,11 +1,23 @@
 import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
 export declare const name = "dsh-scout";
 export declare const inject: string[];
-export interface ScoutConfig {
+export interface Config {
     /** Default directory for case exports; case files land under `<scoutDir>/<caseId>/`. */
     scoutDir?: string;
     /** Persist the five-file export after every mutation when `scoutDir` is set. */
     autoPersist?: boolean;
+    /** Trusted authority host suffixes used by the E3 evidence policy. */
+    authorityHostSuffixes?: readonly string[];
 }
-export declare function apply(ctx: Context, config?: ScoutConfig): void;
+export declare const Config: z<Schemastery.ObjectS<{
+    scoutDir: z<string, string>;
+    autoPersist: z<boolean, boolean>;
+    authorityHostSuffixes: z<string[], string[]>;
+}>, Schemastery.ObjectT<{
+    scoutDir: z<string, string>;
+    autoPersist: z<boolean, boolean>;
+    authorityHostSuffixes: z<string[], string[]>;
+}>>;
+export declare function apply(ctx: Context, config?: Config): void;
 export * from './model.js';

package/dist/index.js

@@ -1,7 +1,13 @@
 import { defineTool } from '@deepseek-ai/dsh-tools';
-import { addClaim, addSource, appendEvent, CLAIM_DIMENSIONS, CLAIM_IMPACTS, CLAIM_STATUSES, createCase, decideCase, EVIDENCE_LEVELS, EXPORT_FILE_NAMES, exportCaseFiles, generateInterviewQuestions, importCaseFromFiles, inferEvidenceLevel, inferSourceType, renderComparison, renderReport, SOURCE_TYPES, verifyClaim, verifyIdentity, } from './model.js';
+import z from '@deepseek-ai/schemastery';
+import { addClaim, addSource, appendEvent, CLAIM_DIMENSIONS, CLAIM_IMPACTS, CLAIM_STATUSES, createCase, decideCase, DEFAULT_AUTHORITY_HOST_SUFFIXES, EVIDENCE_LEVELS, EXPORT_FILE_NAMES, exportCaseFiles, generateInterviewQuestions, importCaseFromFiles, inferEvidenceLevel, inferSourceType, renderComparison, renderReport, SOURCE_TYPES, verifyClaim, verifyIdentity, } from './model.js';
 export const name = 'dsh-scout';
-export const inject = ['tools', 'fs', 'web'];
+export const inject = ['tools'];
+export const Config = z.object({
+    scoutDir: z.string().default('dsh-scout'),
+    autoPersist: z.boolean().default(false),
+    authorityHostSuffixes: z.array(z.string()).default([...DEFAULT_AUTHORITY_HOST_SUFFIXES]),
+});
 export function apply(ctx, config = {}) {
     const cases = new Map();
     const caseKey = (caseId, agentId) => `${String(agentId ?? 'unscoped')}::${caseId}`;
@@ -11,8 +17,11 @@ export function apply(ctx, config = {}) {
             throw new Error(`Unknown case: ${key.split('::').at(-1)}`);
         return scoutCase;
     };
-    const fs = ctx.fs;
-    const web = ctx.web;
+    // Optional host services: unavailable hosts degrade gracefully (tools report
+    // the missing service instead of failing to register).
+    const fs = ctx.get('fs');
+    const web = ctx.get('web');
+    const authoritySuffixes = config.authorityHostSuffixes ?? DEFAULT_AUTHORITY_HOST_SUFFIXES;
     const defaultScoutDir = config.scoutDir?.replace(/\/+$/, '') || 'dsh-scout';
     const caseExportDir = (caseId) => `${defaultScoutDir}/${caseId}`;
     const persistFiles = async (scoutCase, targetDir) => {
@@ -45,7 +54,7 @@ export function apply(ctx, config = {}) {
             detail,
         });
     };
-    const registerSource = (scoutCase, source) => recordEvent(addSource(scoutCase, source), 'source_added', {
+    const registerSource = (scoutCase, source) => recordEvent(addSource(scoutCase, source, authoritySuffixes), 'source_added', {
         sourceId: source.sourceId,
         type: source.type,
         title: source.title,
@@ -199,8 +208,8 @@ export function apply(ctx, config = {}) {
                             errors.push({ url, error: `invalid evidenceLevel: ${String(item.evidenceLevel)}` });
                             continue;
                         }
-                        const typeGuess = inferSourceType(url, explicitType);
-                        const levelGuess = inferEvidenceLevel(url, typeGuess.type, explicitLevel);
+                        const typeGuess = inferSourceType(url, explicitType, authoritySuffixes);
+                        const levelGuess = inferEvidenceLevel(url, typeGuess.type, explicitLevel, authoritySuffixes);
                         let sourceId = `src-${nextId}`;
                         while (scoutCase.sources.some(source => source.sourceId === sourceId)) {
                             nextId += 1;
@@ -349,8 +358,8 @@ export function apply(ctx, config = {}) {
                         return;
                     }
                     try {
-                        const typeGuess = inferSourceType(url);
-                        const levelGuess = inferEvidenceLevel(url, typeGuess.type);
+                        const typeGuess = inferSourceType(url, undefined, authoritySuffixes);
+                        const levelGuess = inferEvidenceLevel(url, typeGuess.type, undefined, authoritySuffixes);
                         let sourceId = `src-${nextId}`;
                         while (scoutCase.sources.some(source => source.sourceId === sourceId)) {
                             nextId += 1;
@@ -542,7 +551,7 @@ export function apply(ctx, config = {}) {
                     evidenceLevel: args.evidenceLevel,
                     status: 'captured',
                 };
-                let nextCase = recordEvent(addSource(scoutCase, source), 'source_added', {
+                let nextCase = recordEvent(addSource(scoutCase, source, authoritySuffixes), 'source_added', {
                     sourceId: source.sourceId,
                     evidenceLevel: source.evidenceLevel,
                 });
@@ -577,7 +586,7 @@ export function apply(ctx, config = {}) {
                     legalRepresentative: args.legalRepresentative,
                     brandRelationship: args.brandRelationship,
                     sourceIds: args.sourceIds.split(',').map(value => value.trim()).filter(Boolean),
-                })), 'identity_verified', {
+                }, authoritySuffixes)), 'identity_verified', {
                     legalEntity: args.legalEntity,
                     registrationNumber: args.registrationNumber,
                 });

package/dist/model.d.ts

@@ -17,6 +17,8 @@ export interface ScoutEvent {
     at: string;
     detail: Record<string, unknown>;
 }
+/** Default trusted authority host suffixes used by the E3 evidence policy. */
+export declare const DEFAULT_AUTHORITY_HOST_SUFFIXES: readonly ["gov", "gov.cn", "gov.uk", "gov.hk", "gov.au", "gc.ca", "brreg.no", "handelsregister.de", "hkexnews.hk", "sse.com.cn", "szse.cn", "neeq.com.cn"];
 export interface ScoutSource {
     sourceId: string;
     type: SourceType;
@@ -80,15 +82,15 @@ export declare function createCase(input: {
     location?: string;
     decisionObjective?: string;
 }): ScoutCase;
-export declare function addSource(scoutCase: ScoutCase, source: ScoutSource): ScoutCase;
-export declare function isTrustedAuthorityUrl(value: string | null): boolean;
+export declare function addSource(scoutCase: ScoutCase, source: ScoutSource, authoritySuffixes?: readonly string[]): ScoutCase;
+export declare function isTrustedAuthorityUrl(value: string | null, authoritySuffixes?: readonly string[]): boolean;
 /** Guess a source category from its URL when the caller did not provide one. */
-export declare function inferSourceType(url: string | null, explicit?: SourceType): {
+export declare function inferSourceType(url: string | null, explicit?: SourceType, authoritySuffixes?: readonly string[]): {
     type: SourceType;
     inferred: boolean;
 };
 /** Guess an evidence level from the URL and category when not provided explicitly. */
-export declare function inferEvidenceLevel(url: string | null, type: SourceType, explicit?: EvidenceLevel): {
+export declare function inferEvidenceLevel(url: string | null, type: SourceType, explicit?: EvidenceLevel, authoritySuffixes?: readonly string[]): {
     evidenceLevel: EvidenceLevel;
     inferred: boolean;
 };
@@ -107,7 +109,7 @@ export declare function verifyIdentity(scoutCase: ScoutCase, input: {
     legalRepresentative: string;
     brandRelationship: string;
     sourceIds: string[];
-}): ScoutCase;
+}, authoritySuffixes?: readonly string[]): ScoutCase;
 export declare function decideCase(scoutCase: ScoutCase): ScoutCase;
 /** Derive a deduplicated, prioritized interview question list from the case. */
 export declare function generateInterviewQuestions(scoutCase: ScoutCase): string[];

package/dist/model.js

@@ -56,7 +56,8 @@ const JOB_PLATFORM_HOST_HINTS = [
     'nowcoder.com',
     'jobs.feishu.cn',
 ];
-const AUTHORITY_HOST_SUFFIXES = [
+/** Default trusted authority host suffixes used by the E3 evidence policy. */
+export const DEFAULT_AUTHORITY_HOST_SUFFIXES = [
     'gov',
     'gov.cn',
     'gov.uk',
@@ -111,17 +112,17 @@ export function createCase(input) {
         ],
     };
 }
-export function addSource(scoutCase, source) {
+export function addSource(scoutCase, source, authoritySuffixes = DEFAULT_AUTHORITY_HOST_SUFFIXES) {
     if (scoutCase.sources.some(item => item.sourceId === source.sourceId)) {
         throw new Error(`Duplicate source: ${source.sourceId}`);
     }
     if (source.evidenceLevel === 'E3'
-        && (!IDENTITY_SOURCE_TYPES.has(source.type) || !isTrustedAuthorityUrl(source.url))) {
+        && (!IDENTITY_SOURCE_TYPES.has(source.type) || !isTrustedAuthorityUrl(source.url, authoritySuffixes))) {
         throw new Error('E3 sources require a supported registry, regulator, or official filing HTTPS origin');
     }
     return { ...scoutCase, sources: [...scoutCase.sources, source] };
 }
-export function isTrustedAuthorityUrl(value) {
+export function isTrustedAuthorityUrl(value, authoritySuffixes = DEFAULT_AUTHORITY_HOST_SUFFIXES) {
     if (!value)
         return false;
     try {
@@ -131,21 +132,21 @@ export function isTrustedAuthorityUrl(value) {
         if (url.port && url.port !== '443')
             return false;
         const hostname = url.hostname.toLowerCase().replace(/\.$/, '');
-        return AUTHORITY_HOST_SUFFIXES.some(suffix => hostname === suffix || hostname.endsWith(`.${suffix}`));
+        return authoritySuffixes.some(suffix => hostname === suffix || hostname.endsWith(`.${suffix}`));
     }
     catch {
         return false;
     }
 }
 /** Guess a source category from its URL when the caller did not provide one. */
-export function inferSourceType(url, explicit) {
+export function inferSourceType(url, explicit, authoritySuffixes = DEFAULT_AUTHORITY_HOST_SUFFIXES) {
     if (explicit && SOURCE_TYPES.includes(explicit))
         return { type: explicit, inferred: false };
     if (url) {
         try {
             const hostname = new URL(url).hostname.toLowerCase().replace(/\.$/, '');
             // Trusted authority origins (official registry/regulator) take priority.
-            if (isTrustedAuthorityUrl(url)) {
+            if (isTrustedAuthorityUrl(url, authoritySuffixes)) {
                 const isRegistry = REGISTRY_HOST_SUFFIXES.some(suffix => hostname === suffix || hostname.endsWith(`.${suffix}`));
                 return { type: isRegistry ? 'company_registry' : 'regulator', inferred: true };
             }
@@ -161,10 +162,10 @@ export function inferSourceType(url, explicit) {
     return { type: 'other', inferred: true };
 }
 /** Guess an evidence level from the URL and category when not provided explicitly. */
-export function inferEvidenceLevel(url, type, explicit) {
+export function inferEvidenceLevel(url, type, explicit, authoritySuffixes = DEFAULT_AUTHORITY_HOST_SUFFIXES) {
     if (explicit && EVIDENCE_LEVELS.includes(explicit))
         return { evidenceLevel: explicit, inferred: false };
-    if (IDENTITY_SOURCE_TYPES.has(type) && isTrustedAuthorityUrl(url)) {
+    if (IDENTITY_SOURCE_TYPES.has(type) && isTrustedAuthorityUrl(url, authoritySuffixes)) {
         return { evidenceLevel: 'E3', inferred: true };
     }
     if (type === 'user_provided') {
@@ -228,7 +229,7 @@ export function verifyClaim(scoutCase, input) {
     claims[claimIndex] = verified;
     return { ...scoutCase, claims };
 }
-export function verifyIdentity(scoutCase, input) {
+export function verifyIdentity(scoutCase, input, authoritySuffixes = DEFAULT_AUTHORITY_HOST_SUFFIXES) {
     const requiredValues = [
         input.legalEntity,
         input.registrationNumber,
@@ -250,7 +251,7 @@ export function verifyIdentity(scoutCase, input) {
     });
     const hasAuthoritativeSource = sources.some(source => source.evidenceLevel === 'E3'
         && IDENTITY_SOURCE_TYPES.has(source.type)
-        && isTrustedAuthorityUrl(source.url));
+        && isTrustedAuthorityUrl(source.url, authoritySuffixes));
     if (!hasAuthoritativeSource) {
         throw new Error('Company identity verification requires a linked E3 registry, regulator, or official filing source');
     }

package/package.json

@@ -1,11 +1,19 @@
 {
   "name": "dsh-scout",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Evidence-driven company and job intelligence plugin for DeepSeek Harness.",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
   "files": [
     "dist",
     "cordis.patch.yml",
@@ -44,6 +52,9 @@
     "@deepseek-ai/dsh-tools": "0.1.0-rc.6",
     "typescript": "^5.8.3"
   },
+  "dependencies": {
+    "@deepseek-ai/schemastery": "^3.18.1"
+  },
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"

package/tests/model.test.mjs

@@ -18,7 +18,7 @@ import {
   verifyClaim,
   verifyIdentity,
 } from '../dist/model.js'
-import { apply, inject, name } from '../dist/index.js'
+import { apply, Config, inject, name } from '../dist/index.js'
 
 test('starts conservatively until company identity is verified', () => {
   const scoutCase = createCase({
@@ -327,6 +327,7 @@ test('only proceeds after identity and all required role dimensions are verified
 test('isolates identical case ids by DSH agent session identity', async () => {
   const registered = []
   apply({
+    get(name) { return this[name] },
     tools: {
       register(tool) {
         registered.push(tool)
@@ -413,6 +414,7 @@ test('exports a disposable DSH plugin tool surface', async () => {  const regist
   const disposed = []
   const effects = []
   apply({
+    get(name) { return this[name] },
     tools: {
       register(tool) {
         registered.push(tool)
@@ -425,7 +427,7 @@ test('exports a disposable DSH plugin tool surface', async () => {  const regist
   })
 
   assert.equal(name, 'dsh-scout')
-  assert.deepEqual(inject, ['tools', 'fs', 'web'])
+  assert.deepEqual(inject, ['tools'])
   assert.deepEqual(
     registered.map(tool => tool.name).sort(),
     [
@@ -521,6 +523,7 @@ test('exports and imports a case through the fs-backed tools', async () => {
     },
   }
   apply({
+    get(name) { return this[name] },
     tools: {
       register(tool) {
         registered.push(tool)
@@ -651,6 +654,7 @@ test('auto-persists each mutation when configured, and exports to the default di
     },
   }
   apply({
+    get(name) { return this[name] },
     tools: {
       register(tool) {
         registered.push(tool)
@@ -690,6 +694,7 @@ test('auto-persists each mutation when configured, and exports to the default di
 test('scout_questions tool returns the derived question list', async () => {
   const registered = []
   apply({
+    get(name) { return this[name] },
     tools: {
       register(tool) {
         registered.push(tool)
@@ -718,6 +723,7 @@ test('auto-persist and default export dir degrade gracefully without fs or scout
   // autoPersist enabled but no fs service: mutations still succeed
   const noFs = []
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { noFs.push(tool); return () => undefined } },
     effect(execute) { Array.from(execute()) },
   }, { scoutDir: '/nowhere', autoPersist: true })
@@ -743,6 +749,7 @@ test('auto-persist and default export dir degrade gracefully without fs or scout
     async writeText(target, content) { store.set(target.displayPath, content); return { operation: 'create' } },
   }
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { registered.push(tool); return () => undefined } },
     fs: mockFs,
     effect(execute) { Array.from(execute()) },
@@ -854,6 +861,7 @@ test('infers source type and evidence level from URLs', () => {
 test('scout_ingest batch-registers sources with inference and isolates errors', async () => {
   const registered = []
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { registered.push(tool); return () => undefined } },
     effect(execute) { Array.from(execute()) },
   })
@@ -906,6 +914,7 @@ test('scout_ingest isolates null items and invalid explicit enums, and avoids su
 
   const registered = []
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { registered.push(tool); return () => undefined } },
     effect(execute) { Array.from(execute()) },
   })
@@ -999,6 +1008,7 @@ test('scout_compare tool compares cases and inference rejects invalid explicit e
 
   const registered = []
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { registered.push(tool); return () => undefined } },
     effect(execute) { Array.from(execute()) },
   })
@@ -1020,6 +1030,7 @@ test('scout_compare tool compares cases and inference rejects invalid explicit e
 test('scout_compare deduplicates case ids and empty claims render cleanly', async () => {
   const registered = []
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { registered.push(tool); return () => undefined } },
     effect(execute) { Array.from(execute()) },
   })
@@ -1068,6 +1079,7 @@ test('scout_ingest drafts claims from items alongside sources', async () => {
 
   const registered = []
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { registered.push(tool); return () => undefined } },
     effect(execute) { Array.from(execute()) },
   })
@@ -1115,6 +1127,7 @@ test('scout_ingest drafts claims from items alongside sources', async () => {
 test('scout_ingest rejects invalid claim enums explicitly and keeps claim ids collision-safe', async () => {
   const registered = []
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { registered.push(tool); return () => undefined } },
     effect(execute) { Array.from(execute()) },
   })
@@ -1167,6 +1180,7 @@ test('covers registry boundaries, non-object claims, and verified-E0 rejection v
   const registered = []
   const store = new Map()
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { registered.push(tool); return () => undefined } },
     fs: {
       async resolve(path) { return { targetKey: path, displayPath: path } },
@@ -1211,6 +1225,7 @@ test('scout_search registers provider results as sources and requires the web se
   const registered = []
   const searched = []
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { registered.push(tool); return () => undefined } },
     web: {
       async search(request) {
@@ -1259,6 +1274,7 @@ test('scout_search registers provider results as sources and requires the web se
   // web service missing -> explicit error
   const noWeb = []
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { noWeb.push(tool); return () => undefined } },
     effect(execute) { Array.from(execute()) },
   })
@@ -1277,6 +1293,7 @@ test('scout_search handles provider edge cases and limit bounds', async () => {
   const providerCalls = []
   let failSearch = false
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { registered.push(tool); return () => undefined } },
     web: {
       async search(request) {
@@ -1339,6 +1356,7 @@ test('scout_search handles provider edge cases and limit bounds', async () => {
   // non-array sources -> reported as an error, tool still succeeds
   const noArray = []
   apply({
+    get(name) { return this[name] },
     tools: { register(tool) { noArray.push(tool); return () => undefined } },
     web: { async search() { return { sources: 'nope' } } },
     effect(execute) { Array.from(execute()) },
@@ -1354,3 +1372,50 @@ test('scout_search handles provider edge cases and limit bounds', async () => {
   assert.equal(nonArray.added.length, 0)
   assert.match(nonArray.errors[0].error, /non-array sources/)
 })
+
+test('exports a schemastery Config with sensible defaults', () => {
+  const parsed = Config({})
+  assert.equal(parsed.scoutDir, 'dsh-scout')
+  assert.equal(parsed.autoPersist, false)
+  assert.ok(parsed.authorityHostSuffixes.includes('gov.cn'))
+  assert.ok(parsed.authorityHostSuffixes.includes('gsxt.gov.cn') === false)
+})
+
+test('custom authority host suffixes extend the E3 trust boundary', async () => {
+  const registered = []
+  apply({
+    get(name) { return this[name] },
+    tools: {
+      register(tool) {
+        registered.push(tool)
+        return () => undefined
+      },
+    },
+    effect(execute) {
+      Array.from(execute())
+    },
+  }, {
+    authorityHostSuffixes: ['example-registry.example'],
+  })
+  const tools = new Map(registered.map(tool => [tool.name, tool]))
+  const start = tools.get('scout_start')
+  const addSource = tools.get('scout_add_source')
+  await start.execute({
+    caseId: 'custom-trust',
+    companyName: 'Custom Co',
+    roleTitle: 'Role',
+    location: '',
+  }, { agent: { id: 'session-a' } })
+  // The configured suffix makes this registry origin a valid E3 source.
+  const result = await addSource.execute({
+    caseId: 'custom-trust',
+    sourceId: 'registry',
+    sourceType: 'company_registry',
+    title: 'Custom registry',
+    url: 'https://registry.example-registry.example/rec/1',
+    evidenceLevel: 'E3',
+  }, { agent: { id: 'session-a' } })
+  assert.match(result, /"evidenceLevel": "E3"/)
+  // The default trust boundary still rejects the same origin without the override.
+  assert.equal(isTrustedAuthorityUrl('https://registry.example-registry.example/rec/1'), false)
+})