dsh-standards 0.0.2 → 1.0.0

package/40-checker/results/flow/real/qiushi.json

@@ -0,0 +1,277 @@
+{
+  "schema": "dsh-flow-real/1",
+  "generatedAt": "2026-11-01T05:42:28.077Z",
+  "id": "qiushi",
+  "package": "qiushi-dsh-evidence-audit",
+  "version": "0.1.0",
+  "entry18Version": "0.1.0",
+  "source": "npm",
+  "spec": "qiushi-dsh-evidence-audit@0.1.0",
+  "why": "second wave: evidence-oriented plugin",
+  "packageDir": "/tmp/flow-sample/qiushi",
+  "download": {
+    "kind": "npm-pack",
+    "command": "npm pack qiushi-dsh-evidence-audit@0.1.0 --pack-destination /tmp/flow-sample/_cache",
+    "tarball": "/tmp/flow-sample/_cache/qiushi-dsh-evidence-audit-0.1.0.tgz",
+    "registry": "https://registry.npmmirror.com",
+    "actualVersion": "0.1.0"
+  },
+  "manifest": {
+    "name": "qiushi-dsh-evidence-audit",
+    "version": "0.1.0",
+    "engines": {
+      "node": "^22.19.0 || >=24.0.0"
+    },
+    "peerDependencies": {
+      "@deepseek-ai/cordis": "4.0.1"
+    },
+    "dependencies": {
+      "@deepseek-ai/schemastery": "3.18.1"
+    },
+    "scripts": {
+      "postinstall": null
+    },
+    "dsh": {
+      "bundle": {
+        "patch": "./cordis.patch.yml"
+      }
+    }
+  },
+  "dependencyInstall": {
+    "needed": true,
+    "command": "npm install --omit=dev --ignore-scripts --legacy-peer-deps --no-package-lock",
+    "exit": 0,
+    "ignoredScripts": true,
+    "note": "third-party lifecycle scripts were not run (--ignore-scripts)",
+    "stdout": "\nup to date in 1s\n",
+    "stderr": "",
+    "error": null
+  },
+  "previous": null,
+  "gate": null,
+  "journey": {
+    "command": "<home>/opt/node-v24.22.1-linux-x64/bin/node <standards>/40-checker/scripts/journey-runtime.mjs --package /tmp/flow-sample/qiushi --dsh /tmp/dsh022/node_modules/@deepseek-ai/dsh/lib/bin.js --json",
+    "exit": 0,
+    "parseError": null,
+    "stderr": "",
+    "result": {
+      "schema": "dsh-flow-runtime/1",
+      "environment": {
+        "dsh": "0.2.2-alpha.2",
+        "node": "v24.22.1",
+        "platform": "linux"
+      },
+      "package": "qiushi-dsh-evidence-audit",
+      "version": "0.1.0",
+      "previous": null,
+      "mode": "j1-j2-j4-j6-runtime",
+      "checks": [
+        {
+          "id": "J1.profile",
+          "result": "PASS",
+          "reason": "create profile exit=0",
+          "stderr": ""
+        },
+        {
+          "id": "J1.install",
+          "result": "PASS",
+          "reason": "add exit=0",
+          "stderr": "[WARN] The package qiushi-dsh-evidence-audit, which you have just pnpm linked, has the following peerDependencies specified in its package.json:\n\n  - @deepseek-ai/cordis@4.0.1\n\nThe linked in dependency will not resolve the peer dependencies from the target node_modules.\nThis might cause issues in your project. To resolve this, you may use the \"file:\" protocol to reference the local dependency.\nAlready up to date\n\ndependencies:\n+ qiushi-dsh-evidence-audit <- ../../../flow-sample/qiushi\n\nDone in 33ms using pnpm v12.15.0\n"
+        },
+        {
+          "id": "J1.dump",
+          "result": "PASS",
+          "reason": "dump exit=0",
+          "stderr": ""
+        },
+        {
+          "id": "J1.layer",
+          "result": "PASS",
+          "reason": "layer/entry appears in dump"
+        },
+        {
+          "id": "J2.disable",
+          "result": "PASS",
+          "reason": "row qiushi-evidence-audit disabled",
+          "stderr": ""
+        },
+        {
+          "id": "J2.enable",
+          "result": "PASS",
+          "reason": "row qiushi-evidence-audit enabled again",
+          "stderr": ""
+        },
+        {
+          "id": "J1.remove",
+          "result": "PASS",
+          "reason": "remove exit=0",
+          "stderr": "Already up to date\n\ndependencies:\n- qiushi-dsh-evidence-audit link:/tmp/flow-sample/qiushi\n\nDone in 18ms using pnpm v12.15.0\n"
+        },
+        {
+          "id": "J1.clean",
+          "result": "PASS",
+          "reason": "layer/dependency gone after remove"
+        },
+        {
+          "id": "J4.tree-load",
+          "result": "PASS",
+          "reason": "keyless boot reached the credential boundary",
+          "stderr": "\ndsh: MISSING_CREDENTIAL: llm-deepseek: no API key for provider route \"deepseek-official\"; store DEEPSEEK_API_KEY through the credentials service (the web Models page writes it), or export DEEPSEEK_API_KEY in the launching environment\n"
+        },
+        {
+          "id": "J6.upgrade",
+          "result": "not-run",
+          "reason": "no --previous package supplied"
+        },
+        {
+          "id": "J6.rollback",
+          "result": "not-run",
+          "reason": "no --previous package supplied"
+        },
+        {
+          "id": "J3.config",
+          "result": "not-run",
+          "reason": "invalid-config harness not implemented; do not claim J3"
+        },
+        {
+          "id": "J5.permissions",
+          "result": "not-run",
+          "reason": "permissions/disclosure review is manual"
+        },
+        {
+          "id": "J7.observe",
+          "result": "not-run",
+          "reason": "observability probe not implemented"
+        },
+        {
+          "id": "J8.client",
+          "result": "not-run",
+          "reason": "client-shape probe not implemented"
+        }
+      ],
+      "summary": {
+        "pass": 9,
+        "warn": 0,
+        "fail": 0,
+        "blocked": 0,
+        "notRun": 6
+      },
+      "conclusion": "flow-warn"
+    }
+  },
+  "layerProbe": null,
+  "checks": [
+    {
+      "id": "J1.profile",
+      "result": "PASS",
+      "reason": "create profile exit=0",
+      "stderr": ""
+    },
+    {
+      "id": "J1.install",
+      "result": "PASS",
+      "reason": "add exit=0",
+      "stderr": "[WARN] The package qiushi-dsh-evidence-audit, which you have just pnpm linked, has the following peerDependencies specified in its package.json:\n\n  - @deepseek-ai/cordis@4.0.1\n\nThe linked in dependency will not resolve the peer dependencies from the target node_modules.\nThis might cause issues in your project. To resolve this, you may use the \"file:\" protocol to reference the local dependency.\nAlready up to date\n\ndependencies:\n+ qiushi-dsh-evidence-audit <- ../../../flow-sample/qiushi\n\nDone in 33ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J1.dump",
+      "result": "PASS",
+      "reason": "dump exit=0",
+      "stderr": ""
+    },
+    {
+      "id": "J1.layer",
+      "result": "PASS",
+      "reason": "layer/entry appears in dump"
+    },
+    {
+      "id": "J2.disable",
+      "result": "PASS",
+      "reason": "row qiushi-evidence-audit disabled",
+      "stderr": ""
+    },
+    {
+      "id": "J2.enable",
+      "result": "PASS",
+      "reason": "row qiushi-evidence-audit enabled again",
+      "stderr": ""
+    },
+    {
+      "id": "J1.remove",
+      "result": "PASS",
+      "reason": "remove exit=0",
+      "stderr": "Already up to date\n\ndependencies:\n- qiushi-dsh-evidence-audit link:/tmp/flow-sample/qiushi\n\nDone in 18ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J1.clean",
+      "result": "PASS",
+      "reason": "layer/dependency gone after remove"
+    },
+    {
+      "id": "J4.tree-load",
+      "result": "PASS",
+      "reason": "keyless boot reached the credential boundary",
+      "stderr": "\ndsh: MISSING_CREDENTIAL: llm-deepseek: no API key for provider route \"deepseek-official\"; store DEEPSEEK_API_KEY through the credentials service (the web Models page writes it), or export DEEPSEEK_API_KEY in the launching environment\n"
+    },
+    {
+      "id": "J6.upgrade",
+      "result": "not-run",
+      "reason": "no --previous package supplied"
+    },
+    {
+      "id": "J6.rollback",
+      "result": "not-run",
+      "reason": "no --previous package supplied"
+    },
+    {
+      "id": "J3.config",
+      "result": "not-run",
+      "reason": "invalid-config harness not implemented; do not claim J3"
+    },
+    {
+      "id": "J5.permissions",
+      "result": "not-run",
+      "reason": "permissions/disclosure review is manual"
+    },
+    {
+      "id": "J7.observe",
+      "result": "not-run",
+      "reason": "observability probe not implemented"
+    },
+    {
+      "id": "J8.client",
+      "result": "not-run",
+      "reason": "client-shape probe not implemented"
+    }
+  ],
+  "verdicts": {
+    "J1": "pass",
+    "J2": "pass",
+    "J4": "pass",
+    "J6": "not-run"
+  },
+  "classification": "clean",
+  "caveats": [],
+  "limitations": [
+    "J3/J5/J7/J8 are not covered by journey-runtime.",
+    "This is a local-directory install (`dsh plugin add <dir>`), not a registry tarball install."
+  ],
+  "summary": {
+    "checks": {
+      "pass": 9,
+      "warn": 0,
+      "fail": 0,
+      "blocked": 0,
+      "partial": 0,
+      "notRun": 6
+    },
+    "verdicts": {
+      "pass": 3,
+      "fail": 0,
+      "blocked": 0,
+      "partial": 0,
+      "notRun": 1
+    }
+  },
+  "conclusion": "flow-warn"
+}

package/40-checker/results/flow/real/status-rotator.json

@@ -0,0 +1,275 @@
+{
+  "schema": "dsh-flow-real/1",
+  "generatedAt": "2026-11-01T05:42:29.792Z",
+  "id": "status-rotator",
+  "package": "dsh-status-rotator",
+  "version": "0.38.0",
+  "entry18Version": "0.38.0",
+  "source": "npm",
+  "spec": "dsh-status-rotator@0.38.0",
+  "why": "second wave: npm plugin",
+  "packageDir": "/tmp/flow-sample/status-rotator",
+  "download": {
+    "kind": "npm-pack",
+    "command": "npm pack dsh-status-rotator@0.38.0 --pack-destination /tmp/flow-sample/_cache",
+    "tarball": "/tmp/flow-sample/_cache/dsh-status-rotator-0.38.0.tgz",
+    "registry": "https://registry.npmmirror.com",
+    "actualVersion": "0.38.0"
+  },
+  "manifest": {
+    "name": "dsh-status-rotator",
+    "version": "0.38.0",
+    "engines": null,
+    "peerDependencies": {
+      "@deepseek-ai/cordis": "*"
+    },
+    "dependencies": null,
+    "scripts": {
+      "postinstall": null
+    },
+    "dsh": {
+      "bundle": {
+        "patch": "./cordis.patch.yml"
+      },
+      "client": {
+        "platform": "web",
+        "inject": [],
+        "immediately": true
+      }
+    }
+  },
+  "dependencyInstall": {
+    "needed": false,
+    "command": null,
+    "exit": 0,
+    "ignoredScripts": true,
+    "note": "no dependencies in package.json; npm install skipped"
+  },
+  "previous": null,
+  "gate": null,
+  "journey": {
+    "command": "<home>/opt/node-v24.22.1-linux-x64/bin/node <standards>/40-checker/scripts/journey-runtime.mjs --package /tmp/flow-sample/status-rotator --dsh /tmp/dsh022/node_modules/@deepseek-ai/dsh/lib/bin.js --json",
+    "exit": 0,
+    "parseError": null,
+    "stderr": "",
+    "result": {
+      "schema": "dsh-flow-runtime/1",
+      "environment": {
+        "dsh": "0.2.2-alpha.2",
+        "node": "v24.22.1",
+        "platform": "linux"
+      },
+      "package": "dsh-status-rotator",
+      "version": "0.38.0",
+      "previous": null,
+      "mode": "j1-j2-j4-j6-runtime",
+      "checks": [
+        {
+          "id": "J1.profile",
+          "result": "PASS",
+          "reason": "create profile exit=0",
+          "stderr": ""
+        },
+        {
+          "id": "J1.install",
+          "result": "PASS",
+          "reason": "add exit=0",
+          "stderr": "[WARN] The package dsh-status-rotator, which you have just pnpm linked, has the following peerDependencies specified in its package.json:\n\n  - @deepseek-ai/cordis@*\n\nThe linked in dependency will not resolve the peer dependencies from the target node_modules.\nThis might cause issues in your project. To resolve this, you may use the \"file:\" protocol to reference the local dependency.\nAlready up to date\n\ndependencies:\n+ dsh-status-rotator <- ../../../flow-sample/status-rotator\n\nDone in 23ms using pnpm v12.15.0\n"
+        },
+        {
+          "id": "J1.dump",
+          "result": "PASS",
+          "reason": "dump exit=0",
+          "stderr": ""
+        },
+        {
+          "id": "J1.layer",
+          "result": "PASS",
+          "reason": "layer/entry appears in dump"
+        },
+        {
+          "id": "J2.disable",
+          "result": "PASS",
+          "reason": "row status-rotator disabled",
+          "stderr": ""
+        },
+        {
+          "id": "J2.enable",
+          "result": "PASS",
+          "reason": "row status-rotator enabled again",
+          "stderr": ""
+        },
+        {
+          "id": "J1.remove",
+          "result": "PASS",
+          "reason": "remove exit=0",
+          "stderr": "Already up to date\n\ndependencies:\n- dsh-status-rotator link:/tmp/flow-sample/status-rotator\n\nDone in 22ms using pnpm v12.15.0\n"
+        },
+        {
+          "id": "J1.clean",
+          "result": "PASS",
+          "reason": "layer/dependency gone after remove"
+        },
+        {
+          "id": "J4.tree-load",
+          "result": "PASS",
+          "reason": "keyless boot reached the credential boundary",
+          "stderr": "\ndsh: MISSING_CREDENTIAL: llm-deepseek: no API key for provider route \"deepseek-official\"; store DEEPSEEK_API_KEY through the credentials service (the web Models page writes it), or export DEEPSEEK_API_KEY in the launching environment\n"
+        },
+        {
+          "id": "J6.upgrade",
+          "result": "not-run",
+          "reason": "no --previous package supplied"
+        },
+        {
+          "id": "J6.rollback",
+          "result": "not-run",
+          "reason": "no --previous package supplied"
+        },
+        {
+          "id": "J3.config",
+          "result": "not-run",
+          "reason": "invalid-config harness not implemented; do not claim J3"
+        },
+        {
+          "id": "J5.permissions",
+          "result": "not-run",
+          "reason": "permissions/disclosure review is manual"
+        },
+        {
+          "id": "J7.observe",
+          "result": "not-run",
+          "reason": "observability probe not implemented"
+        },
+        {
+          "id": "J8.client",
+          "result": "not-run",
+          "reason": "client-shape probe not implemented"
+        }
+      ],
+      "summary": {
+        "pass": 9,
+        "warn": 0,
+        "fail": 0,
+        "blocked": 0,
+        "notRun": 6
+      },
+      "conclusion": "flow-warn"
+    }
+  },
+  "layerProbe": null,
+  "checks": [
+    {
+      "id": "J1.profile",
+      "result": "PASS",
+      "reason": "create profile exit=0",
+      "stderr": ""
+    },
+    {
+      "id": "J1.install",
+      "result": "PASS",
+      "reason": "add exit=0",
+      "stderr": "[WARN] The package dsh-status-rotator, which you have just pnpm linked, has the following peerDependencies specified in its package.json:\n\n  - @deepseek-ai/cordis@*\n\nThe linked in dependency will not resolve the peer dependencies from the target node_modules.\nThis might cause issues in your project. To resolve this, you may use the \"file:\" protocol to reference the local dependency.\nAlready up to date\n\ndependencies:\n+ dsh-status-rotator <- ../../../flow-sample/status-rotator\n\nDone in 23ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J1.dump",
+      "result": "PASS",
+      "reason": "dump exit=0",
+      "stderr": ""
+    },
+    {
+      "id": "J1.layer",
+      "result": "PASS",
+      "reason": "layer/entry appears in dump"
+    },
+    {
+      "id": "J2.disable",
+      "result": "PASS",
+      "reason": "row status-rotator disabled",
+      "stderr": ""
+    },
+    {
+      "id": "J2.enable",
+      "result": "PASS",
+      "reason": "row status-rotator enabled again",
+      "stderr": ""
+    },
+    {
+      "id": "J1.remove",
+      "result": "PASS",
+      "reason": "remove exit=0",
+      "stderr": "Already up to date\n\ndependencies:\n- dsh-status-rotator link:/tmp/flow-sample/status-rotator\n\nDone in 22ms using pnpm v12.15.0\n"
+    },
+    {
+      "id": "J1.clean",
+      "result": "PASS",
+      "reason": "layer/dependency gone after remove"
+    },
+    {
+      "id": "J4.tree-load",
+      "result": "PASS",
+      "reason": "keyless boot reached the credential boundary",
+      "stderr": "\ndsh: MISSING_CREDENTIAL: llm-deepseek: no API key for provider route \"deepseek-official\"; store DEEPSEEK_API_KEY through the credentials service (the web Models page writes it), or export DEEPSEEK_API_KEY in the launching environment\n"
+    },
+    {
+      "id": "J6.upgrade",
+      "result": "not-run",
+      "reason": "no --previous package supplied"
+    },
+    {
+      "id": "J6.rollback",
+      "result": "not-run",
+      "reason": "no --previous package supplied"
+    },
+    {
+      "id": "J3.config",
+      "result": "not-run",
+      "reason": "invalid-config harness not implemented; do not claim J3"
+    },
+    {
+      "id": "J5.permissions",
+      "result": "not-run",
+      "reason": "permissions/disclosure review is manual"
+    },
+    {
+      "id": "J7.observe",
+      "result": "not-run",
+      "reason": "observability probe not implemented"
+    },
+    {
+      "id": "J8.client",
+      "result": "not-run",
+      "reason": "client-shape probe not implemented"
+    }
+  ],
+  "verdicts": {
+    "J1": "pass",
+    "J2": "pass",
+    "J4": "pass",
+    "J6": "not-run"
+  },
+  "classification": "clean",
+  "caveats": [],
+  "limitations": [
+    "J3/J5/J7/J8 are not covered by journey-runtime.",
+    "This is a local-directory install (`dsh plugin add <dir>`), not a registry tarball install."
+  ],
+  "summary": {
+    "checks": {
+      "pass": 9,
+      "warn": 0,
+      "fail": 0,
+      "blocked": 0,
+      "partial": 0,
+      "notRun": 6
+    },
+    "verdicts": {
+      "pass": 3,
+      "fail": 0,
+      "blocked": 0,
+      "partial": 0,
+      "notRun": 1
+    }
+  },
+  "conclusion": "flow-warn"
+}