dsh-standards 0.0.2 → 1.0.0

package/40-checker/results/flow/j3-j7-fixture.json

@@ -0,0 +1,51 @@
+{
+  "schema": "dsh-flow-config-observe/1",
+  "generatedAt": "2026-11-01T05:47:51.065Z",
+  "package": "@dsh-fixtures/flow-config",
+  "version": "1.0.0",
+  "environment": {
+    "dsh": "0.2.2-alpha.2",
+    "node": "v24.22.1",
+    "platform": "linux"
+  },
+  "checks": [
+    {
+      "id": "setup.install",
+      "result": "PASS",
+      "reason": "plain dependency install exit=0"
+    },
+    {
+      "id": "J3.invalid-field-path",
+      "result": "PASS",
+      "reason": "invalid config exit=1; fieldPath=true"
+    },
+    {
+      "id": "J3.valid-config",
+      "result": "PASS",
+      "reason": "valid config exit=1"
+    },
+    {
+      "id": "J7.start-line",
+      "result": "PASS",
+      "reason": "start line names package@version"
+    },
+    {
+      "id": "J7.diagnosable",
+      "result": "PASS",
+      "reason": "keyless failure reaches a diagnosable credential boundary"
+    },
+    {
+      "id": "J3.defaults",
+      "result": "PASS",
+      "reason": "missing config uses the default"
+    }
+  ],
+  "summary": {
+    "pass": 6,
+    "fail": 0,
+    "blocked": 0
+  },
+  "limitations": [
+    "fixture-level only; not every plugin validates config or logs a start line"
+  ]
+}

package/40-checker/results/flow/j5-j8-client-missing.json

@@ -0,0 +1,45 @@
+{
+  "schema": "dsh-flow-disclosure-shape/1",
+  "generatedAt": "2026-11-01T05:48:02.999Z",
+  "package": "@dsh-fixtures/client-missing",
+  "version": "1.0.0",
+  "checks": {
+    "J5": {
+      "machine": "WARN",
+      "humanReview": "required",
+      "declared": {
+        "capabilities": false,
+        "labels": false,
+        "commitments": false
+      },
+      "forbiddenWords": false,
+      "declaration": [
+        {
+          "id": "DSC-11",
+          "result": "WARN"
+        },
+        {
+          "id": "DSC-12",
+          "result": "PASS"
+        },
+        {
+          "id": "DSC-13",
+          "result": "WARN"
+        }
+      ],
+      "reason": "permissions/disclosure judgement is still human"
+    },
+    "J8": {
+      "machine": "FAIL",
+      "humanReview": "required for UI/render",
+      "hasClient": true,
+      "clientExport": false,
+      "serverEntry": true,
+      "reason": "client shape checked statically; render not tested"
+    }
+  },
+  "limitations": [
+    "J5 is a disclosure preflight, not a security review",
+    "J8 is a shape preflight, not a browser render probe"
+  ]
+}

package/40-checker/results/flow/j5-j8-good.json

@@ -0,0 +1,45 @@
+{
+  "schema": "dsh-flow-disclosure-shape/1",
+  "generatedAt": "2026-11-01T05:48:02.615Z",
+  "package": "@dsh-fixtures/good-plugin",
+  "version": "1.0.0",
+  "checks": {
+    "J5": {
+      "machine": "PASS",
+      "humanReview": "required",
+      "declared": {
+        "capabilities": true,
+        "labels": true,
+        "commitments": false
+      },
+      "forbiddenWords": false,
+      "declaration": [
+        {
+          "id": "DSC-11",
+          "result": "PASS"
+        },
+        {
+          "id": "DSC-12",
+          "result": "PASS"
+        },
+        {
+          "id": "DSC-13",
+          "result": "PASS"
+        }
+      ],
+      "reason": "permissions/disclosure judgement is still human"
+    },
+    "J8": {
+      "machine": "WARN",
+      "humanReview": "required for UI/render",
+      "hasClient": false,
+      "clientExport": false,
+      "serverEntry": true,
+      "reason": "no dsh.client declaration"
+    }
+  },
+  "limitations": [
+    "J5 is a disclosure preflight, not a security review",
+    "J8 is a shape preflight, not a browser render probe"
+  ]
+}

package/40-checker/results/flow/journey-fixture-bundle.json

@@ -0,0 +1,90 @@
+{
+  "schema": "dsh-flow-runtime/1",
+  "package": "@dsh-fixtures/bundle-with-server",
+  "version": "1.0.0",
+  "mode": "j1-runtime",
+  "checks": [
+    {
+      "id": "J1.profile",
+      "result": "PASS",
+      "reason": "create profile exit=0",
+      "stderr": ""
+    },
+    {
+      "id": "J1.exemption",
+      "result": "WARN",
+      "reason": "allow-version exit=0",
+      "stderr": "dsh: warning: allowing incompatible plugin versions can break the application or corrupt data. Approval applies only to the exact package and DSH versions.\n"
+    },
+    {
+      "id": "J1.install",
+      "result": "PASS",
+      "reason": "add exit=0",
+      "stderr": "Already up to date\n\ndependencies:\n+ @dsh-fixtures/bundle-with-server <- ../../../..<standards>/40-checker/fixtures/bundle\n\nDone in 42ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J1.dump",
+      "result": "PASS",
+      "reason": "dump exit=0",
+      "stderr": ""
+    },
+    {
+      "id": "J1.layer",
+      "result": "PASS",
+      "reason": "layer/entry appears in dump"
+    },
+    {
+      "id": "J1.remove",
+      "result": "PASS",
+      "reason": "remove exit=0",
+      "stderr": "Already up to date\n\ndependencies:\n- @dsh-fixtures/bundle-with-server link:<standards>/40-checker/fixtures/bundle\n\nDone in 201ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J1.clean",
+      "result": "PASS",
+      "reason": "layer/dependency gone after remove"
+    },
+    {
+      "id": "J2.toggle",
+      "result": "not-run",
+      "reason": "runtime harness not implemented yet"
+    },
+    {
+      "id": "J3.config",
+      "result": "not-run",
+      "reason": "runtime harness not implemented yet"
+    },
+    {
+      "id": "J4.first-run",
+      "result": "not-run",
+      "reason": "runtime harness not implemented yet"
+    },
+    {
+      "id": "J5.permissions",
+      "result": "not-run",
+      "reason": "runtime harness not implemented yet"
+    },
+    {
+      "id": "J6.upgrade",
+      "result": "not-run",
+      "reason": "runtime harness not implemented yet"
+    },
+    {
+      "id": "J7.observe",
+      "result": "not-run",
+      "reason": "runtime harness not implemented yet"
+    },
+    {
+      "id": "J8.client",
+      "result": "not-run",
+      "reason": "runtime harness not implemented yet"
+    }
+  ],
+  "summary": {
+    "pass": 6,
+    "warn": 1,
+    "fail": 0,
+    "notRun": 7
+  },
+  "conclusion": "flow-warn"
+}

package/40-checker/results/flow/journey-fixture-j1-j2-j4-j6.json

@@ -0,0 +1,107 @@
+{
+  "schema": "dsh-flow-runtime/1",
+  "package": "@dsh-fixtures/bundle-with-server",
+  "version": "1.0.0",
+  "previous": "0.9.0",
+  "mode": "j1-j2-j4-j6-runtime",
+  "checks": [
+    {
+      "id": "J1.profile",
+      "result": "PASS",
+      "reason": "create profile exit=0",
+      "stderr": ""
+    },
+    {
+      "id": "J1.install",
+      "result": "PASS",
+      "reason": "add exit=0",
+      "stderr": "Already up to date\n\ndependencies:\n+ @dsh-fixtures/bundle-with-server <- ../../../..<standards>/40-checker/fixtures/bundle\n\nDone in 46ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J1.dump",
+      "result": "PASS",
+      "reason": "dump exit=0",
+      "stderr": ""
+    },
+    {
+      "id": "J1.layer",
+      "result": "PASS",
+      "reason": "layer/entry appears in dump"
+    },
+    {
+      "id": "J2.disable",
+      "result": "PASS",
+      "reason": "row fixture-bundle-server disabled",
+      "stderr": ""
+    },
+    {
+      "id": "J2.enable",
+      "result": "PASS",
+      "reason": "row fixture-bundle-server enabled again",
+      "stderr": ""
+    },
+    {
+      "id": "J1.remove",
+      "result": "PASS",
+      "reason": "remove exit=0",
+      "stderr": "Already up to date\n\ndependencies:\n- @dsh-fixtures/bundle-with-server link:<standards>/40-checker/fixtures/bundle\n\nDone in 30ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J1.clean",
+      "result": "PASS",
+      "reason": "layer/dependency gone after remove"
+    },
+    {
+      "id": "J4.tree-load",
+      "result": "PASS",
+      "reason": "keyless boot reached the credential boundary",
+      "stderr": "\ndsh: MISSING_CREDENTIAL: llm-deepseek: no API key for provider route \"deepseek-official\"; store DEEPSEEK_API_KEY through the credentials service (the web Models page writes it), or export DEEPSEEK_API_KEY in the launching environment\n"
+    },
+    {
+      "id": "J6.upgrade",
+      "result": "PASS",
+      "reason": "upgrade 0.9.0->1.0.0 exit=0, installed=0.9.0",
+      "stderr": "[WARN] Replaced \"@dsh-fixtures/bundle-with-server\" (\"link:<standards>/40-checker/fixtures/bundle\") with \"<standards>/40-checker/fixtures/bundle-v0\" from a different source.\nAlready up to date\n\ndependencies:\n+ @dsh-fixtures/bundle-with-server <- ../../../..<standards>/40-checker/fixtures/bundle-v0\n\nDone in 42ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J6.upgrade-current",
+      "result": "PASS",
+      "reason": "current install exit=0, installed=1.0.0",
+      "stderr": "[WARN] Replaced \"@dsh-fixtures/bundle-with-server\" (\"link:<standards>/40-checker/fixtures/bundle-v0\") with \"<standards>/40-checker/fixtures/bundle\" from a different source.\nAlready up to date\n\ndependencies:\n+ @dsh-fixtures/bundle-with-server <- ../../../..<standards>/40-checker/fixtures/bundle\n\nDone in 46ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J6.rollback",
+      "result": "PASS",
+      "reason": "rollback exit=0, installed=0.9.0",
+      "stderr": "[WARN] Replaced \"@dsh-fixtures/bundle-with-server\" (\"link:<standards>/40-checker/fixtures/bundle\") with \"<standards>/40-checker/fixtures/bundle-v0\" from a different source.\nAlready up to date\n\ndependencies:\n+ @dsh-fixtures/bundle-with-server <- ../../../..<standards>/40-checker/fixtures/bundle-v0\n\nDone in 43ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J3.config",
+      "result": "not-run",
+      "reason": "invalid-config harness not implemented; do not claim J3"
+    },
+    {
+      "id": "J5.permissions",
+      "result": "not-run",
+      "reason": "permissions/disclosure review is manual"
+    },
+    {
+      "id": "J7.observe",
+      "result": "not-run",
+      "reason": "observability probe not implemented"
+    },
+    {
+      "id": "J8.client",
+      "result": "not-run",
+      "reason": "client-shape probe not implemented"
+    }
+  ],
+  "summary": {
+    "pass": 12,
+    "warn": 0,
+    "fail": 0,
+    "blocked": 0,
+    "notRun": 4
+  },
+  "conclusion": "flow-warn"
+}

package/40-checker/results/flow/real/DDDMUC__dsh-free-search.json

@@ -0,0 +1,297 @@
+{
+  "schema": "dsh-flow-real/1",
+  "generatedAt": "2026-11-01T04:24:13.030Z",
+  "id": "DDDMUC__dsh-free-search",
+  "package": "dsh-free-search",
+  "version": "0.9.26",
+  "entry18Version": "0.9.26",
+  "source": "github",
+  "spec": "DDDMUC/dsh-free-search",
+  "why": "GitHub bundle",
+  "packageDir": "/tmp/flow-sample/DDDMUC__dsh-free-search",
+  "download": {
+    "kind": "git-clone",
+    "command": "git clone --depth 1 https://github.com/DDDMUC/dsh-free-search.git /tmp/flow-sample/DDDMUC__dsh-free-search",
+    "url": "https://github.com/DDDMUC/dsh-free-search",
+    "gitHead": "7c30dd059e1d9de4ffc8b779978b2152af84b0ec",
+    "gitSubject": "release 0.9.26 - one select-all checkbox instead of two buttons",
+    "actualVersion": "0.9.26"
+  },
+  "manifest": {
+    "name": "dsh-free-search",
+    "version": "0.9.26",
+    "engines": {
+      "node": ">=20"
+    },
+    "peerDependencies": {
+      "@deepseek-ai/cordis": "^4.0.1",
+      "@deepseek-ai/dsh-client-ui-commands": "^0.1.7-rc.1 || ^0.2.0-rc.1",
+      "@deepseek-ai/dsh-client-ui-plugin-manager": "^0.1.7-rc.1 || ^0.2.0-rc.1",
+      "@deepseek-ai/dsh-client-ui-renderer": "^0.1.7-rc.1 || ^0.2.0-rc.1",
+      "@deepseek-ai/dsh-settings": "^0.1.7-rc.1 || ^0.2.0-rc.1",
+      "@deepseek-ai/dsh-tools": "^0.1.7-rc.1 || ^0.2.0-rc.1",
+      "@deepseek-ai/schemastery": "^3.18.4",
+      "react": "^18.2.0"
+    },
+    "dependencies": {
+      "@deepseek-ai/schemastery": "^3.18.4"
+    },
+    "scripts": {
+      "postinstall": null
+    },
+    "dsh": {
+      "bundle": {
+        "patch": "cordis.patch.yml"
+      },
+      "client": {
+        "inject": [
+          "@deepseek-ai/dsh-client-ui-commands",
+          "@deepseek-ai/dsh-client-ui-plugin-manager",
+          "@deepseek-ai/dsh-client-ui-renderer"
+        ],
+        "platform": "web"
+      },
+      "engines": {
+        "dsh": ">=0.1.7-rc.1"
+      },
+      "compatibility": {
+        "dshReleases": {
+          "0.1.7-rc.1": "compatible"
+        }
+      }
+    }
+  },
+  "dependencyInstall": {
+    "needed": true,
+    "command": "npm install --omit=dev --ignore-scripts --legacy-peer-deps --no-package-lock",
+    "exit": 0,
+    "ignoredScripts": true,
+    "note": "third-party lifecycle scripts were not run (--ignore-scripts)",
+    "stdout": "\nup to date in 200ms\n",
+    "stderr": "",
+    "error": null
+  },
+  "previous": null,
+  "gate": null,
+  "journey": {
+    "command": "<home>/opt/node-v24.22.1-linux-x64/bin/node <standards>/40-checker/scripts/journey-runtime.mjs --package /tmp/flow-sample/DDDMUC__dsh-free-search --dsh /tmp/dsh022/node_modules/@deepseek-ai/dsh/lib/bin.js --json",
+    "exit": 0,
+    "parseError": null,
+    "stderr": "",
+    "result": {
+      "schema": "dsh-flow-runtime/1",
+      "package": "dsh-free-search",
+      "version": "0.9.26",
+      "previous": null,
+      "mode": "j1-j2-j4-j6-runtime",
+      "checks": [
+        {
+          "id": "J1.profile",
+          "result": "PASS",
+          "reason": "create profile exit=0",
+          "stderr": ""
+        },
+        {
+          "id": "J1.install",
+          "result": "PASS",
+          "reason": "add exit=0",
+          "stderr": "[WARN] The package dsh-free-search, which you have just pnpm linked, has the following peerDependencies specified in its package.json:\n\n  - @deepseek-ai/cordis@^4.0.1,   - @deepseek-ai/dsh-client-ui-commands@^0.1.7-rc.1 || ^0.2.0-rc.1,   - @deepseek-ai/dsh-client-ui-plugin-manager@^0.1.7-rc.1 || ^0.2.0-rc.1,   - @deepseek-ai/dsh-client-ui-renderer@^0.1.7-rc.1 || ^0.2.0-rc.1,   - @deepseek-ai/dsh-settings@^0.1.7-rc.1 || ^0.2.0-rc.1,   - @deepseek-ai/dsh-tools@^0.1.7-rc.1 || ^0.2.0-rc.1,   - @deepseek-ai/schemastery@^3.18.4,   - react@^18.2.0\n\nThe linked in dependency will not resolve the peer dependencies from the target node_modules.\nThis might cause issues in your project. To resolve this, you may use the \"file:\" protocol to reference the local dependency.\nAlready up to date\n\ndependencies"
+        },
+        {
+          "id": "J1.dump",
+          "result": "PASS",
+          "reason": "dump exit=0",
+          "stderr": ""
+        },
+        {
+          "id": "J1.layer",
+          "result": "PASS",
+          "reason": "layer/entry appears in dump"
+        },
+        {
+          "id": "J2.disable",
+          "result": "PASS",
+          "reason": "row web-search-free disabled",
+          "stderr": ""
+        },
+        {
+          "id": "J2.enable",
+          "result": "PASS",
+          "reason": "row web-search-free enabled again",
+          "stderr": ""
+        },
+        {
+          "id": "J1.remove",
+          "result": "PASS",
+          "reason": "remove exit=0",
+          "stderr": "Already up to date\n\ndependencies:\n- dsh-free-search link:/tmp/flow-sample/DDDMUC__dsh-free-search\n\nDone in 18ms using pnpm v12.15.0\n"
+        },
+        {
+          "id": "J1.clean",
+          "result": "PASS",
+          "reason": "layer/dependency gone after remove"
+        },
+        {
+          "id": "J4.tree-load",
+          "result": "PASS",
+          "reason": "keyless boot reached the credential boundary",
+          "stderr": "\ndsh: MISSING_CREDENTIAL: llm-deepseek: no API key for provider route \"deepseek-official\"; store DEEPSEEK_API_KEY through the credentials service (the web Models page writes it), or export DEEPSEEK_API_KEY in the launching environment\n"
+        },
+        {
+          "id": "J6.upgrade",
+          "result": "not-run",
+          "reason": "no --previous package supplied"
+        },
+        {
+          "id": "J6.rollback",
+          "result": "not-run",
+          "reason": "no --previous package supplied"
+        },
+        {
+          "id": "J3.config",
+          "result": "not-run",
+          "reason": "invalid-config harness not implemented; do not claim J3"
+        },
+        {
+          "id": "J5.permissions",
+          "result": "not-run",
+          "reason": "permissions/disclosure review is manual"
+        },
+        {
+          "id": "J7.observe",
+          "result": "not-run",
+          "reason": "observability probe not implemented"
+        },
+        {
+          "id": "J8.client",
+          "result": "not-run",
+          "reason": "client-shape probe not implemented"
+        }
+      ],
+      "summary": {
+        "pass": 9,
+        "warn": 0,
+        "fail": 0,
+        "notRun": 6
+      },
+      "conclusion": "flow-warn"
+    }
+  },
+  "layerProbe": null,
+  "checks": [
+    {
+      "id": "J1.profile",
+      "result": "PASS",
+      "reason": "create profile exit=0",
+      "stderr": ""
+    },
+    {
+      "id": "J1.install",
+      "result": "PASS",
+      "reason": "add exit=0",
+      "stderr": "[WARN] The package dsh-free-search, which you have just pnpm linked, has the following peerDependencies specified in its package.json:\n\n  - @deepseek-ai/cordis@^4.0.1,   - @deepseek-ai/dsh-client-ui-commands@^0.1.7-rc.1 || ^0.2.0-rc.1,   - @deepseek-ai/dsh-client-ui-plugin-manager@^0.1.7-rc.1 || ^0.2.0-rc.1,   - @deepseek-ai/dsh-client-ui-renderer@^0.1.7-rc.1 || ^0.2.0-rc.1,   - @deepseek-ai/dsh-settings@^0.1.7-rc.1 || ^0.2.0-rc.1,   - @deepseek-ai/dsh-tools@^0.1.7-rc.1 || ^0.2.0-rc.1,   - @deepseek-ai/schemastery@^3.18.4,   - react@^18.2.0\n\nThe linked in dependency will not resolve the peer dependencies from the target node_modules.\nThis might cause issues in your project. To resolve this, you may use the \"file:\" protocol to reference the local dependency.\nAlready up to date\n\ndependencies"
+    },
+    {
+      "id": "J1.dump",
+      "result": "PASS",
+      "reason": "dump exit=0",
+      "stderr": ""
+    },
+    {
+      "id": "J1.layer",
+      "result": "PASS",
+      "reason": "layer/entry appears in dump"
+    },
+    {
+      "id": "J2.disable",
+      "result": "PASS",
+      "reason": "row web-search-free disabled",
+      "stderr": ""
+    },
+    {
+      "id": "J2.enable",
+      "result": "PASS",
+      "reason": "row web-search-free enabled again",
+      "stderr": ""
+    },
+    {
+      "id": "J1.remove",
+      "result": "PASS",
+      "reason": "remove exit=0",
+      "stderr": "Already up to date\n\ndependencies:\n- dsh-free-search link:/tmp/flow-sample/DDDMUC__dsh-free-search\n\nDone in 18ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J1.clean",
+      "result": "PASS",
+      "reason": "layer/dependency gone after remove"
+    },
+    {
+      "id": "J4.tree-load",
+      "result": "PASS",
+      "reason": "keyless boot reached the credential boundary",
+      "stderr": "\ndsh: MISSING_CREDENTIAL: llm-deepseek: no API key for provider route \"deepseek-official\"; store DEEPSEEK_API_KEY through the credentials service (the web Models page writes it), or export DEEPSEEK_API_KEY in the launching environment\n"
+    },
+    {
+      "id": "J6.upgrade",
+      "result": "not-run",
+      "reason": "no --previous package supplied"
+    },
+    {
+      "id": "J6.rollback",
+      "result": "not-run",
+      "reason": "no --previous package supplied"
+    },
+    {
+      "id": "J3.config",
+      "result": "not-run",
+      "reason": "invalid-config harness not implemented; do not claim J3"
+    },
+    {
+      "id": "J5.permissions",
+      "result": "not-run",
+      "reason": "permissions/disclosure review is manual"
+    },
+    {
+      "id": "J7.observe",
+      "result": "not-run",
+      "reason": "observability probe not implemented"
+    },
+    {
+      "id": "J8.client",
+      "result": "not-run",
+      "reason": "client-shape probe not implemented"
+    }
+  ],
+  "verdicts": {
+    "J1": "pass",
+    "J2": "pass",
+    "J4": "pass",
+    "J6": "not-run"
+  },
+  "classification": "clean",
+  "caveats": [
+    "J6 not run: only one version was fetched; the clone HEAD is 7c30dd059e1d9de4ffc8b779978b2152af84b0ec."
+  ],
+  "limitations": [
+    "J3/J5/J7/J8 are not covered by journey-runtime.",
+    "This is a local-directory install (`dsh plugin add <dir>`), not a registry tarball install."
+  ],
+  "summary": {
+    "checks": {
+      "pass": 9,
+      "warn": 0,
+      "fail": 0,
+      "blocked": 0,
+      "partial": 0,
+      "notRun": 6
+    },
+    "verdicts": {
+      "pass": 3,
+      "fail": 0,
+      "blocked": 0,
+      "partial": 0,
+      "notRun": 1
+    }
+  },
+  "conclusion": "flow-warn"
+}