dsh-standards 0.0.3 → 1.0.1

package/spec/levels.json

@@ -0,0 +1,371 @@
+{
+  "schema": "dsh-levels/1",
+  "version": "1.0.0-rc.1",
+  "status": "draft",
+  "updatedAt": "2026-11-01",
+  "nonOfficial": true,
+  "disclaimer": "Not an official DeepSeek standard, not a certification, not a security audit, and not a legal GB/GB-T/GB-Z instrument. The GB analogy is a communication aid only.",
+  "canonical": "https://github.com/PerryLink/dsh-standards",
+  "axes": {
+    "depth": [
+      "entry",
+      "flow",
+      "boost"
+    ],
+    "evidence": [
+      "not-run",
+      "recognized",
+      "static",
+      "runtime",
+      "measured",
+      "blocked",
+      "failed",
+      "stale"
+    ],
+    "rules": [
+      "Depth and evidence are independent; never collapse them into one score.",
+      "A skip is not a pass; not-run is not a pass; static is not runtime.",
+      "Certification grades A-D are orthogonal to these levels."
+    ]
+  },
+  "levels": [
+    {
+      "id": "entry",
+      "label": "DSH-ENTRY",
+      "analogy": "GB",
+      "question": "Can an existing plugin be recognized, installed, and booted without changing its code?",
+      "claim": "compatibility baseline",
+      "requiredForClaim": "G0-G5 at the recorded dsh/cordis versions; G4 is static, G5 is freshness",
+      "gates": [
+        {
+          "id": "G0",
+          "check": "dsh.bundle.patch parses",
+          "owner": "plugin"
+        },
+        {
+          "id": "G1",
+          "check": "base + sample compose; inserted row names resolve",
+          "owner": "plugin"
+        },
+        {
+          "id": "G2",
+          "check": "evaluatePluginCompatibility admits, or an explicit exact-version exemption applies",
+          "owner": "host"
+        },
+        {
+          "id": "G3",
+          "check": "real boot(): every target row is ACTIVE or disabled",
+          "owner": "plugin/host/fixture"
+        },
+        {
+          "id": "G4",
+          "check": "when dsh.client exists: exports['./client'] and a package-root row",
+          "owner": "plugin"
+        },
+        {
+          "id": "G5",
+          "check": "report carries runtime version/commit/artifact mtime; stale evidence is marked stale",
+          "owner": "process"
+        }
+      ],
+      "evidenceStates": [
+        "recognized",
+        "static",
+        "runtime",
+        "blocked",
+        "failed",
+        "not-run",
+        "stale"
+      ],
+      "notClaimed": [
+        "security",
+        "UI correctness",
+        "production readiness",
+        "official endorsement"
+      ],
+      "docs": [
+        "31-DSH-ENTRY入门规范.md",
+        "90-兼容运行时保证.md",
+        "92-兼容运行时实测.md"
+      ],
+      "machine": {
+        "checker": "40-checker/bin/dsh-plugin-verify.mjs --scope entry --entry-claim static|runtime",
+        "smoke": "40-checker/scripts/bundle-smoke.mjs",
+        "audit": "40-checker/scripts/level-audit.mjs",
+        "ci": ".github/workflows/entry18-runtime.yml"
+      }
+    },
+    {
+      "id": "flow",
+      "label": "DSH-FLOW",
+      "analogy": "GB/T",
+      "question": "Can a user install, configure, use, recover, upgrade, and uninstall the plugin without surprises?",
+      "claim": "recommended adoption",
+      "requiredForClaim": "J1-J8 with recorded evidence; manual journeys are allowed but must be marked manual",
+      "gates": [
+        {
+          "id": "J1",
+          "check": "install and remove: add -> dump-config -> remove; no hand-edited profile"
+        },
+        {
+          "id": "J2",
+          "check": "enable and disable: default on/off, stable id, dump diff is correct"
+        },
+        {
+          "id": "J3",
+          "check": "configuration: schema/defaults, invalid value fails loudly with a field path, volatile hot change"
+        },
+        {
+          "id": "J4",
+          "check": "first success: five-minute quickstart, readable error with three elements"
+        },
+        {
+          "id": "J5",
+          "check": "permissions and disclosure: capabilities/labels/commitments match README, forbidden words 0"
+        },
+        {
+          "id": "J6",
+          "check": "upgrade, rollback and uninstall: two versions, data preserved, rollback <=2 commands, no residue"
+        },
+        {
+          "id": "J7",
+          "check": "observability: start line name@version, diagnosable failure/pending, log path"
+        },
+        {
+          "id": "J8",
+          "check": "client/server shapes: headless/web/client-off work or are explicitly refused"
+        }
+      ],
+      "evidenceStates": [
+        "manual",
+        "runtime",
+        "not-run",
+        "failed",
+        "stale"
+      ],
+      "notClaimed": [
+        "certification",
+        "ranking",
+        "security review",
+        "every UI layout"
+      ],
+      "docs": [
+        "32-DSH-FLOW顺畅规范.md",
+        "94-开发建议-顺畅.md"
+      ],
+      "machine": {
+        "journey": "40-checker/scripts/journey.mjs",
+        "journeyRuntime": "40-checker/scripts/journey-runtime.mjs",
+        "audit": "40-checker/scripts/level-audit.mjs"
+      }
+    },
+    {
+      "id": "boost",
+      "label": "DSH-BOOST",
+      "analogy": "GB/Z",
+      "question": "Does the plugin use Cordis primitives (effect, inject, volatile, events, seams, jobs, bounded parallelism) to make development and use measurably cheaper?",
+      "claim": "guiding practice; evidence cards, no badge",
+      "requiredForClaim": "LEV-1..LEV-8 evidence cards with environment, input, command, negative control, result, version anchor, limitations",
+      "gates": [
+        {
+          "id": "LEV-1",
+          "check": "effects/timers/connections/watchers/subprocesses are registered as effects and return to baseline"
+        },
+        {
+          "id": "LEV-2",
+          "check": "required services are injected; optional ones use ctx.get; no polling"
+        },
+        {
+          "id": "LEV-3",
+          "check": "hot config uses volatile()/get(); config change does not remount"
+        },
+        {
+          "id": "LEV-4",
+          "check": "event modes match; waterfall observers call next(); notification listeners are isolated"
+        },
+        {
+          "id": "LEV-5",
+          "check": "seam/isolate/group used only when needed; per-agent ctx is honored"
+        },
+        {
+          "id": "LEV-6",
+          "check": "tool/prompt declarations are byte-stable; volatile data goes through systemPrompt.context"
+        },
+        {
+          "id": "LEV-7",
+          "check": "independent calls use bounded parallelism; long work uses jobs; cancellation propagates"
+        },
+        {
+          "id": "LEV-8",
+          "check": "bundle patch/preset expresses differences; every practice has an evidence card"
+        }
+      ],
+      "evidenceStates": [
+        "measured",
+        "not-measured",
+        "failed",
+        "stale"
+      ],
+      "notClaimed": [
+        "production benchmark",
+        "billing/cache-hit rate",
+        "total score",
+        "ranking"
+      ],
+      "docs": [
+        "33-DSH-BOOST加速实践.md",
+        "95-开发建议-加速.md",
+        "examples/boost/LEV-3-6.md"
+      ],
+      "machine": {
+        "lev3": "examples/boost/lev3-loader-bench.mjs",
+        "lev6": "examples/boost/lev6-capture-server.mjs",
+        "lev7": "examples/boost/lev7-bench.mjs",
+        "audit": "40-checker/scripts/level-audit.mjs"
+      }
+    }
+  ],
+  "crosswalk": {
+    "dsh-plugin-doctor": {
+      "repo": "https://github.com/PerryLink/dsh-plugin-doctor",
+      "entry": [
+        "R",
+        "K",
+        "D",
+        "X"
+      ],
+      "flow": "not-covered",
+      "boost": "not-covered",
+      "note": "Doctor maps its R/K/D/X results to an ENTRY status; it does not run J1-J8 or LEV benchmarks."
+    },
+    "dsh-plugin-certification": {
+      "repo": "https://github.com/PerryLink/dsh-plugin-certification",
+      "entry": [
+        "manifest",
+        "installSmoke",
+        "securityVeto"
+      ],
+      "flow": "not-covered",
+      "boost": "not-covered",
+      "note": "Grade A-D is orthogonal; certification evidence is necessary but not sufficient for ENTRY runtime."
+    },
+    "dsh-plugin-guide": {
+      "repo": "https://github.com/PerryLink/dsh-plugin-guide",
+      "entry": [
+        "guide/standards.md",
+        "SKILL.md"
+      ],
+      "flow": [
+        "guide/standards.md",
+        "plugin-dev-guide.md"
+      ],
+      "boost": [
+        "guide/standards.md",
+        "plugin-dev-guide.md"
+      ],
+      "note": "The guide teaches the levels and routes authors to the checker/audit; it does not certify."
+    },
+    "dsh-plugin-kit": {
+      "repo": "https://github.com/PerryLink/dsh-plugin-kit",
+      "entry": [
+        "data/peer-range.json",
+        "skeleton"
+      ],
+      "flow": "not-covered",
+      "boost": "not-covered",
+      "note": "Kit supplies the shared peer range and skeleton; it can carry level metadata in a future release."
+    },
+    "dsh-test-drive": {
+      "repo": "https://github.com/PerryLink/dsh-test-drive",
+      "entry": [
+        "install smoke"
+      ],
+      "flow": "not-covered",
+      "boost": "not-covered",
+      "note": "Test-drive is the install/load evidence source for ENTRY and certification dimension E."
+    },
+    "dsh-score": {
+      "repo": "https://github.com/PerryLink/dsh-score",
+      "entry": [
+        "consumes test-drive"
+      ],
+      "flow": "not-covered",
+      "boost": "not-covered",
+      "note": "Score is a quality summary; it must not label a plugin with a DSH level."
+    },
+    "dsh-plugin-portal": {
+      "repo": "https://github.com/PerryLink/dsh-plugin-portal",
+      "entry": "display-only",
+      "flow": "display-only",
+      "boost": "display-only",
+      "note": "A portal displays labels; it must not derive a level from stars or ratings."
+    },
+    "dsh-catalog": {
+      "repo": "https://github.com/PerryLink/dsh-catalog",
+      "entry": "display-only",
+      "flow": "display-only",
+      "boost": "display-only",
+      "note": "A market catalog may display evidence-backed labels; no label without a link."
+    },
+    "dsh-checkers": {
+      "repo": "https://github.com/PerryLink/dsh-checkers",
+      "entry": [
+        "static checks"
+      ],
+      "flow": "not-covered",
+      "boost": "not-covered",
+      "note": "A 53-checker bundle; it feeds ENTRY static, not runtime G0-G3."
+    },
+    "dsh-policy-ledger": {
+      "repo": "https://github.com/PerryLink/dsh-policy-ledger",
+      "entry": [
+        "install diagnosis"
+      ],
+      "flow": "not-covered",
+      "boost": "not-covered",
+      "note": "Install-only diagnosis; maps failures to G0/G2/G3 attribution."
+    },
+    "dsh-cert-mcp": {
+      "repo": "https://github.com/PerryLink/dsh-cert-mcp",
+      "entry": "not-applicable",
+      "flow": "not-applicable",
+      "boost": "not-applicable",
+      "note": "Read-only MCP over the certification registry; it does not assign levels."
+    }
+  },
+  "labels": {
+    "entry": {
+      "recognized": "dsh-entry:recognized",
+      "runtime": "dsh-entry:runtime",
+      "blocked": "dsh-entry:blocked",
+      "failed": "dsh-entry:failed"
+    },
+    "flow": {
+      "manual": "dsh-flow:manual",
+      "runtime": "dsh-flow:runtime",
+      "not-run": "dsh-flow:not-run"
+    },
+    "boost": {
+      "measured": "dsh-boost:measured",
+      "not-measured": "dsh-boost:not-measured"
+    }
+  },
+  "review": {
+    "provisionalWhileSolo": true,
+    "expiryDays": {
+      "entry": 90,
+      "flow": 180,
+      "boost": 365
+    },
+    "evidenceMustCarry": [
+      "level",
+      "levelVersion",
+      "dshVersion",
+      "cordisVersion",
+      "commit",
+      "generatedAt",
+      "scope",
+      "notClaimed"
+    ]
+  }
+}

package/spec/levels.schema.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/PerryLink/dsh-standards/spec/levels.schema.json",
+  "title": "DSH levels (non-official)",
+  "type": "object",
+  "required": ["schema", "version", "nonOfficial", "levels"],
+  "properties": {
+    "schema": { "const": "dsh-levels/1" },
+    "version": { "type": "string" },
+    "status": { "enum": ["draft", "provisional", "stable", "stale"] },
+    "nonOfficial": { "const": true },
+    "disclaimer": { "type": "string" },
+    "axes": { "type": "object" },
+    "levels": {
+      "type": "array",
+      "minItems": 3,
+      "items": {
+        "type": "object",
+        "required": ["id", "label", "analogy", "question", "claim", "gates", "evidenceStates"],
+        "properties": {
+          "id": { "enum": ["entry", "flow", "boost"] },
+          "label": { "enum": ["DSH-ENTRY", "DSH-FLOW", "DSH-BOOST"] },
+          "analogy": { "enum": ["GB", "GB/T", "GB/Z"] },
+          "question": { "type": "string" },
+          "claim": { "type": "string" },
+          "gates": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "required": ["id", "check"],
+              "properties": { "id": { "type": "string" }, "check": { "type": "string" }, "owner": { "type": "string" } }
+            }
+          },
+          "evidenceStates": { "type": "array", "items": { "type": "string" } },
+          "notClaimed": { "type": "array", "items": { "type": "string" } }
+        },
+        "additionalProperties": true
+      }
+    },
+    "crosswalk": { "type": "object" },
+    "labels": { "type": "object" },
+    "review": { "type": "object" }
+  },
+  "additionalProperties": true
+}

package/spec/reference-suite.json

@@ -0,0 +1,35 @@
+{
+  "schema": "dsh-reference-suite/1",
+  "version": "1.0.0",
+  "updatedAt": "2026-11-02",
+  "anchors": {
+    "dsh": "0.2.2-alpha.2",
+    "cordis": "4.0.6-alpha.1",
+    "node": ">=20",
+    "platform": "linux-x64 (primary), win32-x64 (secondary)"
+  },
+  "changeRules": [
+    "Adding a sample is a minor version bump; removing or changing an expected result is a major bump.",
+    "An expected result must be frozen in a commit before the run; the run commit must not contain answer edits.",
+    "A sample without a license/provenance is not added.",
+    "A sample that only proves 'not-run' is not a positive or negative control."
+  ],
+  "samples": [
+    { "id": "fixture-good", "kind": "plugin", "path": "40-checker/fixtures/good", "expected": "recognized", "control": "positive", "provenance": "synthetic" },
+    { "id": "fixture-bad", "kind": "plugin", "path": "40-checker/fixtures/bad", "expected": "failed", "control": "negative", "provenance": "synthetic" },
+    { "id": "fixture-bundle", "kind": "bundle", "path": "40-checker/fixtures/bundle", "expected": "runtime-or-blocked", "control": "positive", "provenance": "synthetic" },
+    { "id": "fixture-client-missing", "kind": "client", "path": "40-checker/fixtures/client-missing", "expected": "G4-failed", "control": "negative", "provenance": "synthetic" },
+    { "id": "flow-ci-diet", "kind": "flow-sample", "path": "40-checker/results/flow/real/ci-diet.json", "expected": "partial", "control": "positive", "provenance": "public-npm" },
+    { "id": "flow-free-search", "kind": "flow-sample", "path": "40-checker/results/flow/real/DDDMUC__dsh-free-search.json", "expected": "partial", "control": "positive", "provenance": "public-npm" },
+    { "id": "flow-ui-auth", "kind": "flow-sample", "path": "40-checker/results/flow/real/ui-auth.json", "expected": "partial", "control": "positive", "provenance": "public-npm" },
+    { "id": "flow-telemetry", "kind": "flow-sample", "path": "40-checker/results/flow/real/telemetry.json", "expected": "blocked", "control": "negative", "provenance": "public-npm" },
+    { "id": "flow-purge", "kind": "flow-sample", "path": "40-checker/results/flow/real/YuJunZhiXue__dsh-purge.json", "expected": "partial", "control": "positive", "provenance": "public-npm" },
+    { "id": "entry-18-index", "kind": "entry-batch", "path": "40-checker/results/entry/18/README.md", "expected": "10-verified-8-partial", "control": "batch", "provenance": "public-npm" },
+    { "id": "boost-lev12458", "kind": "boost-batch", "path": "40-checker/results/boost/lev12458.json", "expected": "measured", "control": "positive", "provenance": "synthetic" }
+  ],
+  "limits": [
+    "This is a reference suite, not a certified reference material.",
+    "Synthetic fixtures prove a parser/checker path, not ecosystem behavior.",
+    "The 18-package batch is static recognition plus base-only runtime; it is not 18/18 production."
+  ]
+}