dsh-thinking-guard 0.1.19 → 0.1.21

package/lib/types/policy-state.d.ts

@@ -19,6 +19,12 @@ export interface GuardState {
     readonly duplicateDetection?: boolean;
     readonly alternatingCycleDetection?: boolean;
     readonly noProgressProtection?: boolean;
+    /**
+     * Editable repeat thresholds. Absent in files written before the field
+     * existed, which is why every reader must fall back to the shipped default
+     * instead of treating the absence as "empty list".
+     */
+    readonly repeatThresholds?: readonly number[];
 }
 export interface MenuState {
     readonly tiers: TierState;

package/lib/types/policy-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-state.d.ts","sourceRoot":"","sources":["../../src/policy-state.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IAC3C,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;CAC7C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC3C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;IACrC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAA;IAC5C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;CACxC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAC3B;AA4ED,sFAAsF;AACtF,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CASpE;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAEpE;AAiED,sEAAsE;AACtE,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAyBjG;AAED,kEAAkE;AAClE,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAerF;AAED,kFAAkF;AAClF,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACtH,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,sEAAsE;AACtE,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAiBxF;AAED,sDAAsD;AACtD,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAEtE"}
+{"version":3,"file":"policy-state.d.ts","sourceRoot":"","sources":["../../src/policy-state.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAGlD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IAC3C,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;CAC7C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC3C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;IACrC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAA;IAC5C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;IACvC;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC9C;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAC3B;AAsFD,sFAAsF;AACtF,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CASpE;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAEpE;AAiED,sEAAsE;AACtE,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAyBjG;AAED,kEAAkE;AAClE,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAerF;AAED,kFAAkF;AAClF,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACtH,OAAO,CAAC,IAAI,CAAC,CAqBf;AAQD,sEAAsE;AACtE,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAyBxF;AAED,sDAAsD;AACtD,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAEtE"}

package/lib/types/policy.d.ts

@@ -8,6 +8,7 @@ import type { Context } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
 import type { PromptPresentation } from '@deepseek-ai/dsh-system-prompt';
 import { type CapabilityKind } from './registry.ts';
+import { type GuardStatsSnapshot } from './guard-core.ts';
 import { type McpInput, type McpLocation, type McpUpdateInput, type SkillLocation } from './locations.ts';
 /**
  * Canonical policy classes, mirroring the registry's `CapabilityKind`.
@@ -243,6 +244,14 @@ export interface CapabilityPolicyService {
      * would reload the plugin each time a switch is flipped.
      */
     updateGuard(change: Partial<GuardSwitches>): Promise<void>;
+    /**
+     * Content-free counters proving whether the Guard ran and what it did.
+     *
+     * Counts and timestamps only: no tool name, argument, result or error text is
+     * retained, so this is safe to show (and to log) without leaking what the
+     * Agent was working on. Process-scoped, so the numbers do not reset per turn.
+     */
+    getGuardStats(): GuardStatsSnapshot;
     /**
      * Classify every capability currently indexed by `ctx.capability` (the
      * registry sibling). Returns an empty array when the registry is not mounted.
@@ -278,20 +287,30 @@ declare module '@deepseek-ai/cordis' {
     }
 }
 /**
- * The three Guard switches the settings page exposes.
+ * The Guard switches the settings page exposes.
  *
  * They are separate booleans, not one master flag, because the page presents
- * them as independent controls; the detector honours each one.
+ * them as independent controls; the detector honours each one. The repeat
+ * thresholds are editable as well — they used to be a hard-coded 3/5/8 constant
+ * that the page could only display, which is what made the control look dead.
  */
 export interface GuardSwitches {
     /** Master switch: off means no reminders and no denials at all. */
     readonly enabled: boolean;
-    /** Repeated identical calls: remind at the fixed 3/5/8 thresholds. */
+    /** Repeated identical calls: remind at the configured {@link repeatThresholds}. */
     readonly duplicateDetection: boolean;
     /** A -> B -> A -> B sequences: detect and explain. */
     readonly alternatingCycleDetection: boolean;
     /** Evidence gate for the local denial of one repeated call. */
     readonly noProgressProtection: boolean;
+    /**
+     * Consecutive-repeat counts that raise a reminder.
+     *
+     * 1-5 strictly increasing integers in 2..50. The highest entry is also the
+     * repeat count at which an unchanged result/error becomes a denial candidate,
+     * so lowering it makes the Guard act earlier and raising it makes it quieter.
+     */
+    readonly repeatThresholds: readonly number[];
 }
 /** Shipped defaults for {@link GuardSwitches}. */
 export declare const DEFAULT_GUARD_SWITCHES: GuardSwitches;

package/lib/types/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AAGxE,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAA;AAEjE,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAA;AAEvB;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,CAAA;AAEnE;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAA;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,QAAQ,CAAA;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,uEAAuE;AACvE,MAAM,WAAW,MAAM;IACrB,oFAAoF;IACpF,KAAK,CAAC,EAAE,mBAAmB,CAAA;IAC3B,wFAAwF;IACxF,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,KAAK,CAAC,EAAE,WAAW,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,0FAA0F;IAC1F,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;IAC9C,0DAA0D;IAC1D,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAA;CAC7B;AAED,mEAAmE;AACnE,eAAO,MAAM,WAAW,EAAE,WAOzB,CAAA;AAED,qDAAqD;AACrD,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAyB3B,CAAA;AAEF,eAAO,MAAM,kBAAkB,yCAA0C,CAAA;AASzE;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAgBlD;AAED,8DAA8D;AAC9D,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED,mDAAmD;AACnD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAA;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAA;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAA;CACzC;AAED,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,GAAG,GAAE,mBAAwB,GAAG,uBAAuB,CAMjF;AAED,kDAAkD;AAClD,MAAM,WAAW,WAAW;IAC1B,uFAAuF;IACvF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,iGAAiG;IACjG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,mDAAmD;IACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,uBAAuB;IACvB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;CAClC;AAmBD;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,uBAAuB,EACjC,MAAM,EAAE,WAAW,EACnB,SAAS,GAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,MAAM,EAAuB,GACtE,eAAe,CAwBjB;AAOD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,wDAAwD;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAQD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,gFAAgF;IAChF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAAA;IAC3C,yCAAyC;IACzC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAAA;IAC5C,+DAA+D;IAC/D,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACrC,qCAAqC;IACrC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACtC,oCAAoC;IACpC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACrC,qCAAqC;IACrC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACtC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAA;IAChE;;;;;;;;;;OAUG;IACH,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACtE,gDAAgD;IAChD,SAAS,IAAI,SAAS,MAAM,EAAE,CAAA;IAC9B,qFAAqF;IACrF,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,eAAe,CAAA;IACtE,uDAAuD;IACvD,SAAS,IAAI,uBAAuB,CAAA;IACpC,UAAU,IAAI,uBAAuB,CAAA;IAGrC,wCAAwC;IACxC,SAAS,IAAI,MAAM,CAAA;IACnB,6EAA6E;IAC7E,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrD;;;;;;;;;OASG;IACH,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAGjC;;;OAGG;IACH,QAAQ,IAAI,aAAa,CAAA;IACzB;;;;;;OAMG;IACH,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D;;;OAGG;IACH,WAAW,IAAI,SAAS,wBAAwB,EAAE,CAAA;IAGlD,6DAA6D;IAC7D,aAAa,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACvC,kEAAkE;IAClE,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7C,oCAAoC;IACpC,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5C,iFAAiF;IACjF,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE,2FAA2F;IAC3F,kBAAkB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;IAC9C;;;;;OAKG;IACH,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACpE,6EAA6E;IAC7E,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACzE,iGAAiG;IACjG,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtE,iEAAiE;IACjE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACpF;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,gBAAgB,EAAE,uBAAuB,CAAA;KAC1C;CACF;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,sEAAsE;IACtE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAA;IACpC,sDAAsD;IACtD,QAAQ,CAAC,yBAAyB,EAAE,OAAO,CAAA;IAC3C,+DAA+D;IAC/D,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;CACvC;AAED,kDAAkD;AAClD,eAAO,MAAM,sBAAsB,EAAE,aAKpC,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,uBAAuB,GAC/B,kBAAkB,CAiBpB;AAED,+BAA+B;AAC/B,eAAO,MAAM,IAAI,2BAA2B,CAAA;AAK5C,eAAO,MAAM,MAAM,UAAoC,CAAA;AAEvD,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,MAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAytB5E"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AAGxE,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAA;AAMjE,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAC5E,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAA;AAEvB;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,CAAA;AAEnE;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAA;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,QAAQ,CAAA;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,uEAAuE;AACvE,MAAM,WAAW,MAAM;IACrB,oFAAoF;IACpF,KAAK,CAAC,EAAE,mBAAmB,CAAA;IAC3B,wFAAwF;IACxF,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,KAAK,CAAC,EAAE,WAAW,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,0FAA0F;IAC1F,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;IAC9C,0DAA0D;IAC1D,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAA;CAC7B;AAED,mEAAmE;AACnE,eAAO,MAAM,WAAW,EAAE,WAOzB,CAAA;AAED,qDAAqD;AACrD,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAyB3B,CAAA;AAEF,eAAO,MAAM,kBAAkB,yCAA0C,CAAA;AASzE;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAgBlD;AAED,8DAA8D;AAC9D,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED,mDAAmD;AACnD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAA;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAA;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAA;CACzC;AAED,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,GAAG,GAAE,mBAAwB,GAAG,uBAAuB,CAMjF;AAED,kDAAkD;AAClD,MAAM,WAAW,WAAW;IAC1B,uFAAuF;IACvF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,iGAAiG;IACjG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,mDAAmD;IACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,uBAAuB;IACvB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;CAClC;AAmBD;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,uBAAuB,EACjC,MAAM,EAAE,WAAW,EACnB,SAAS,GAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,MAAM,EAAuB,GACtE,eAAe,CAwBjB;AAOD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,wDAAwD;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAQD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,gFAAgF;IAChF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAAA;IAC3C,yCAAyC;IACzC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAAA;IAC5C,+DAA+D;IAC/D,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACrC,qCAAqC;IACrC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACtC,oCAAoC;IACpC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACrC,qCAAqC;IACrC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACtC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAA;IAChE;;;;;;;;;;OAUG;IACH,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACtE,gDAAgD;IAChD,SAAS,IAAI,SAAS,MAAM,EAAE,CAAA;IAC9B,qFAAqF;IACrF,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,eAAe,CAAA;IACtE,uDAAuD;IACvD,SAAS,IAAI,uBAAuB,CAAA;IACpC,UAAU,IAAI,uBAAuB,CAAA;IAGrC,wCAAwC;IACxC,SAAS,IAAI,MAAM,CAAA;IACnB,6EAA6E;IAC7E,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrD;;;;;;;;;OASG;IACH,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAGjC;;;OAGG;IACH,QAAQ,IAAI,aAAa,CAAA;IACzB;;;;;;OAMG;IACH,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D;;;;;;OAMG;IACH,aAAa,IAAI,kBAAkB,CAAA;IACnC;;;OAGG;IACH,WAAW,IAAI,SAAS,wBAAwB,EAAE,CAAA;IAGlD,6DAA6D;IAC7D,aAAa,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACvC,kEAAkE;IAClE,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7C,oCAAoC;IACpC,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5C,iFAAiF;IACjF,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE,2FAA2F;IAC3F,kBAAkB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;IAC9C;;;;;OAKG;IACH,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACpE,6EAA6E;IAC7E,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACzE,iGAAiG;IACjG,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtE,iEAAiE;IACjE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACpF;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,gBAAgB,EAAE,uBAAuB,CAAA;KAC1C;CACF;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAA;IACpC,sDAAsD;IACtD,QAAQ,CAAC,yBAAyB,EAAE,OAAO,CAAA;IAC3C,+DAA+D;IAC/D,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAA;CAC7C;AAED,kDAAkD;AAClD,eAAO,MAAM,sBAAsB,EAAE,aAMpC,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,uBAAuB,GAC/B,kBAAkB,CAiBpB;AAED,+BAA+B;AAC/B,eAAO,MAAM,IAAI,2BAA2B,CAAA;AAK5C,eAAO,MAAM,MAAM,UAAoC,CAAA;AAEvD,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,MAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA4uB5E"}

package/lib/types/server/call-index-remote.d.ts

@@ -0,0 +1,17 @@
+import type { Context } from '@deepseek-ai/cordis';
+import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+import { type CallIndexReply } from '../usage/call-index-wire.ts';
+/** No static inject: disabled/missing optional services must still have a reachable status face. */
+export declare class CallIndexGateway extends TypertRemoteService {
+    constructor(ctx: Context);
+    private runtime;
+    private call;
+    getIndexStatus(): CallIndexReply;
+    startIndex(request?: unknown): CallIndexReply;
+    cancelIndex(request: unknown): CallIndexReply;
+    getSummary(request?: unknown): CallIndexReply;
+    listSessions(request?: unknown): CallIndexReply;
+    listCalls(request?: unknown): CallIndexReply;
+    getCallDetail(request: unknown): Promise<CallIndexReply>;
+}
+//# sourceMappingURL=call-index-remote.d.ts.map

package/lib/types/server/call-index-remote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-index-remote.d.ts","sourceRoot":"","sources":["../../../src/server/call-index-remote.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAU,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AAG9E,OAAO,EAAkC,KAAK,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAEjG,oGAAoG;AACpG,qBAAa,gBAAiB,SAAQ,mBAAmB;gBAC3C,GAAG,EAAE,OAAO;IACxB,OAAO,CAAC,OAAO;IAGf,OAAO,CAAC,IAAI;IAQc,cAAc,IAAI,cAAc;IACpC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc;IAC5C,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,cAAc;IAC9C,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc;IAC3C,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc;IAClD,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc;IAClC,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC;CAIxF"}

package/lib/types/server/remote.d.ts

@@ -10,6 +10,7 @@
 import type { Context } from '@deepseek-ai/cordis';
 import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
 import type { CapabilityClassification, CapabilityPolicyService, Config as CapabilityPolicyConfig, GuardSwitches } from '../policy.ts';
+import type { GuardStatsSnapshot } from '../guard-core.ts';
 import type { CapabilityDetail, SkillDirEntry, CapabilityService, CapabilityDiagnostics, SearchMetadata, SearchMetadataUpdate } from '../registry.ts';
 import type { McpInput, McpLocation, McpUpdateInput, SkillLocation } from '../locations.ts';
 import { type SelfUpdateStatus } from './self-update.ts';
@@ -62,6 +63,14 @@ export declare class CapabilityPolicyGateway extends TypertRemoteService {
      * not make dsh re-apply (and thereby reload) this plugin.
      */
     updateGuard(change: Partial<GuardSwitches>): Promise<void>;
+    /**
+     * Content-free Guard counters: was the Guard running, and did it do anything?
+     *
+     * Counts and timestamps only — never a tool name, argument, result or error
+     * text — so the settings page can prove the Guard is live without the wire
+     * ever carrying what the Agent was working on.
+     */
+    getGuardStats(): GuardStatsSnapshot;
     /** Classify every capability currently indexed by `ctx.capability`. */
     classifyAll(): CapabilityClassification[];
     /** Explain filtered, overridden, broken, empty, and unbrowseable inventory states. */

package/lib/types/server/remote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../../src/server/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAU,MAAM,kCAAkC,CAAA;AAE9E,OAAO,KAAK,EACV,wBAAwB,EACxB,uBAAuB,EACvB,MAAM,IAAI,sBAAsB,EAChC,aAAa,EACd,MAAM,cAAc,CAAA;AACrB,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAErJ,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE3F,OAAO,EAAuD,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAM7G,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,gBAAgB,EAAE,uBAAuB,CAAA;QACzC,UAAU,EAAE,iBAAiB,CAAA;KAC9B;CACF;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAA;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;QAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KACzB,EAAE,CAAA;CACJ;AAED;;;;;;;;;;GAUG;AACH,qBAAa,uBAAwB,SAAQ,mBAAmB;IAC9D,MAAM,CAAC,MAAM,WAAqC;gBAEtC,GAAG,EAAE,OAAO;IAKlB,eAAe,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAK5C,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjD,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,wCAAwC;IAExC,SAAS,IAAI,sBAAsB;IAInC,iFAAiF;IAE3E,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3E,4CAA4C;IAE5C,QAAQ,IAAI,aAAa;IAIzB;;;;;OAKG;IAEG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhE,uEAAuE;IAEvE,WAAW,IAAI,wBAAwB,EAAE;IAIzC,sFAAsF;IAEtF,cAAc,IAAI,qBAAqB;IAIvC;;;;;OAKG;IAEG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B,uFAAuF;IAEjF,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAKlE,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,cAAc,GAAG,SAAS;IAK3E,oBAAoB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhE,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzD,4EAA4E;IAEtE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,SAAS,CAAC;IAItF,mDAAmD;IAE7C,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI7E,mFAAmF;IAE7E,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC;IAsB5C,8CAA8C;IAExC,aAAa,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAI7C,gCAAgC;IAE1B,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAInD,oCAAoC;IAE9B,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIlD,yDAAyD;IAEnD,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAIzE;;;;;;;;;OASG;IAEG,kBAAkB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAsBpD;;;;OAIG;IAEG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI1E,gFAAgF;IAE1E,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI/E;;;;;;;;;;;;OAYG;IAEG,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAwBvD,sEAAsE;IAEhE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5E,iEAAiE;IAE3D,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIzF;;;;;;;;;;OAUG;IAEH,cAAc,IAAI,MAAM;CAGzB;AAED,gDAAgD;AAChD,eAAO,MAAM,IAAI,2BAA2B,CAAA;AAC5C,eAAO,MAAM,MAAM,UAAqC,CAAA;AACxD,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAExC"}
+{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../../src/server/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAU,MAAM,kCAAkC,CAAA;AAE9E,OAAO,KAAK,EACV,wBAAwB,EACxB,uBAAuB,EACvB,MAAM,IAAI,sBAAsB,EAChC,aAAa,EACd,MAAM,cAAc,CAAA;AACrB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAErJ,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE3F,OAAO,EAAuD,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAM7G,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,gBAAgB,EAAE,uBAAuB,CAAA;QACzC,UAAU,EAAE,iBAAiB,CAAA;KAC9B;CACF;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAA;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;QAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KACzB,EAAE,CAAA;CACJ;AAED;;;;;;;;;;GAUG;AACH,qBAAa,uBAAwB,SAAQ,mBAAmB;IAC9D,MAAM,CAAC,MAAM,WAAqC;gBAEtC,GAAG,EAAE,OAAO;IAKlB,eAAe,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAK5C,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjD,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,wCAAwC;IAExC,SAAS,IAAI,sBAAsB;IAInC,iFAAiF;IAE3E,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3E,4CAA4C;IAE5C,QAAQ,IAAI,aAAa;IAIzB;;;;;OAKG;IAEG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhE;;;;;;OAMG;IAEH,aAAa,IAAI,kBAAkB;IAInC,uEAAuE;IAEvE,WAAW,IAAI,wBAAwB,EAAE;IAIzC,sFAAsF;IAEtF,cAAc,IAAI,qBAAqB;IAIvC;;;;;OAKG;IAEG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B,uFAAuF;IAEjF,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAKlE,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,cAAc,GAAG,SAAS;IAK3E,oBAAoB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhE,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzD,4EAA4E;IAEtE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,SAAS,CAAC;IAItF,mDAAmD;IAE7C,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI7E,mFAAmF;IAE7E,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC;IAsB5C,8CAA8C;IAExC,aAAa,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAI7C,gCAAgC;IAE1B,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAInD,oCAAoC;IAE9B,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIlD,yDAAyD;IAEnD,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAIzE;;;;;;;;;OASG;IAEG,kBAAkB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAsBpD;;;;OAIG;IAEG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI1E,gFAAgF;IAE1E,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI/E;;;;;;;;;;;;OAYG;IAEG,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAwBvD,sEAAsE;IAEhE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5E,iEAAiE;IAE3D,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIzF;;;;;;;;;;OAUG;IAEH,cAAc,IAAI,MAAM;CAGzB;AAED,gDAAgD;AAChD,eAAO,MAAM,IAAI,2BAA2B,CAAA;AAC5C,eAAO,MAAM,MAAM,UAAqC,CAAA;AACxD,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAExC"}

package/lib/types/usage/call-index-core.d.ts

@@ -0,0 +1,152 @@
+import type { CallIndexSourceKind } from './call-index-wire.ts';
+/** One bounded, fixed reason code; never free-form error text. */
+export type CallIndexReason = 'malformed-event' | 'invalid-seq' | 'invalid-time' | 'unreadable-field' | 'unknown-required-event' | 'malformed-tool-call' | 'malformed-tool-result' | 'field-too-long' | 'seq-conflict' | 'duplicate-call-id' | 'result-before-call' | 'turn-step-mismatch' | 'clock-anomaly' | 'orphan-capacity' | 'orphan-result' | 'index-capacity' | 'reserve-denied' | 'projection-gap'
+/**
+ * The backend declared fewer events than the log actually holds.
+ *
+ * The jsonl backend counts only the header record of a multi-frame zstd
+ * artifact, so a long log can declare `eventCount: 1`. The scan must read past
+ * that declaration (D-030); this code records that it happened, because a
+ * silently-truncated scan and a genuinely short log look identical otherwise.
+ */
+ | 'event-count-underreported';
+/** A projected, metadata-only call-index event. */
+export interface CallIndexEvent {
+    readonly seq: number;
+    readonly time: number;
+    readonly kind: 'call' | 'result' | 'other';
+    readonly turn?: number;
+    readonly step?: number;
+    readonly callId?: string;
+    readonly toolName?: string;
+    readonly outcome?: 'success' | 'error' | 'cancelled' | 'unresolved';
+    readonly errorCode?: string;
+    readonly replacement?: boolean;
+    readonly turnClosed?: boolean;
+}
+/** One call row as exposed to a snapshot. */
+export interface CallIndexRow {
+    sessionId: string;
+    callSeq: number;
+    callId: string;
+    toolName: string;
+    turn?: number;
+    step?: number;
+    startedAt: number;
+    endedAt?: number;
+    resultSeq?: number;
+    durationMs?: number;
+    outcome: 'success' | 'error' | 'cancelled' | 'unresolved' | 'unknown' | 'running';
+    inherited: boolean;
+    sourceKind: CallIndexSourceKind;
+    /**
+     * PTC nesting depth. Always `'unknown'`: the PTC parent/child contract is not
+     * verified (plan §13.3), and a guessed layer would double-count nested calls.
+     */
+    layer: 'unknown';
+}
+/**
+ * Provenance of one call, decided by the caller from trusted catalog evidence.
+ *
+ * The partition never inspects a tool name itself: `mcp__` prefixes are a
+ * naming convention, not proof, so an unattributed call stays `unknown` (plan
+ * §3.5). The resolver is optional so a Host without the capability service
+ * still indexes calls — with honest `unknown` provenance.
+ */
+export type CallIndexSourceResolver = (toolName: string) => CallIndexSourceKind;
+export interface CallIndexPartitionOptions {
+    sessionId: string;
+    revision: string;
+    inheritedEventCount: number;
+    maxEvents?: number;
+    maxCalls?: number;
+    maxBytes?: number;
+    maxOrphans?: number;
+    reserve?: (bytes: number) => boolean;
+    /**
+     * Provenance resolver built from trusted catalog evidence.
+     *
+     * Omitted means "no trusted evidence available", which yields `unknown` for
+     * every row — not a guess. A resolver that throws is treated the same way for
+     * that call only, so one bad catalog read cannot blank a whole partition.
+     */
+    resolveSource?: CallIndexSourceResolver;
+}
+export interface CallIndexPartitionSnapshot {
+    sessionId: string;
+    revision: string;
+    cut: number;
+    rows: readonly CallIndexRow[];
+    coverage: 'complete' | 'partial';
+    reasons: readonly string[];
+    estimatedBytes: number;
+}
+/**
+ * Project one raw session event to a metadata-only {@link CallIndexEvent}.
+ *
+ * Unknown *required* event types are a coverage gap; unknown *ignorable* types
+ * project as `other`. Control events expose only `seq`/`time`/`type` plus the
+ * closing `turn` of `turn/end`. A throwing getter on any read field is reported
+ * as `unreadable-field` and never propagated.
+ */
+export declare function projectCallIndexEvent(raw: unknown): {
+    event?: CallIndexEvent;
+    reasons: readonly string[];
+};
+/** Bounded, single-session call index partition. */
+export declare class CallIndexPartition {
+    private readonly sessionId;
+    private readonly revision;
+    private readonly inheritedEventCount;
+    private readonly maxEvents;
+    private readonly maxCalls;
+    private readonly maxBytes;
+    private readonly maxOrphans;
+    private readonly reserveCallback?;
+    private readonly resolveSource?;
+    /** Resolved provenance per tool name; a catalog read must happen once per name. */
+    private readonly sourceByTool;
+    /** seq -> compact signature, used only for dedupe/conflict detection. */
+    private readonly seqMeta;
+    private readonly calls;
+    private readonly callsByCallId;
+    private readonly orphans;
+    private readonly reasonCodes;
+    private readonly turnClosedSeq;
+    private stopped;
+    private bytes;
+    private orphanCount;
+    constructor(options: CallIndexPartitionOptions);
+    /** Ingest a batch of already-projected events. Ingestion stops at the first capacity breach. */
+    ingest(events: readonly CallIndexEvent[]): void;
+    /** Record a coverage gap identified outside the projector (fixed code or generic fallback). */
+    addGap(reason: string): void;
+    usage(): {
+        events: number;
+        calls: number;
+        bytes: number;
+    };
+    snapshot(cut: number): CallIndexPartitionSnapshot;
+    private addReason;
+    private reachCapacity;
+    private tryReserve;
+    private ingestOne;
+    private ingestCall;
+    private ingestResult;
+    private isCompatible;
+    private tryAttachResult;
+    private bufferOrphan;
+    private retryOrphans;
+    /**
+     * Resolve one call's provenance from the caller's trusted evidence.
+     *
+     * Cached per tool name because a Session can make thousands of calls to the
+     * same tool and the catalog lookup is a synchronous map read. A throwing
+     * resolver degrades that call to `unknown`; it never propagates and never
+     * guesses a kind from the name.
+     */
+    private sourceKindFor;
+    private buildRow;
+    private isComplete;
+}
+//# sourceMappingURL=call-index-core.d.ts.map

package/lib/types/usage/call-index-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-index-core.d.ts","sourceRoot":"","sources":["../../../src/usage/call-index-core.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE/D,kEAAkE;AAClE,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,aAAa,GACb,cAAc,GACd,kBAAkB,GAClB,wBAAwB,GACxB,qBAAqB,GACrB,uBAAuB,GACvB,gBAAgB,GAChB,cAAc,GACd,mBAAmB,GACnB,oBAAoB,GACpB,oBAAoB,GACpB,eAAe,GACf,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB;AAClB;;;;;;;GAOG;GACD,2BAA2B,CAAA;AA6B/B,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAA;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,YAAY,CAAA;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,CAAA;IACjF,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,mBAAmB,CAAA;IAC/B;;;OAGG;IACH,KAAK,EAAE,SAAS,CAAA;CACjB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,mBAAmB,CAAA;AAE/E,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAA;IACpC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,uBAAuB,CAAA;CACxC;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,SAAS,YAAY,EAAE,CAAA;IAC7B,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAA;IAChC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAA;CACvB;AAuND;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,KAAK,CAAC,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAgD1G;AA8ED,oDAAoD;AACpD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAQ;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAA4B;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAyB;IACxD,mFAAmF;IACnF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyC;IAEtE,yEAAyE;IACzE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAChE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4B;IAE1D,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,KAAK,CAAI;IACjB,OAAO,CAAC,WAAW,CAAI;gBAEX,OAAO,EAAE,yBAAyB;IAoB9C,gGAAgG;IAChG,MAAM,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,GAAG,IAAI;IAO/C,+FAA+F;IAC/F,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI5B,KAAK,IAAI;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAIzD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,0BAA0B;IAsBjD,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,UAAU;IAsBlB,OAAO,CAAC,SAAS;IA0CjB,OAAO,CAAC,UAAU;IA4ClB,OAAO,CAAC,YAAY;IA4BpB,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,eAAe;IAsCvB,OAAO,CAAC,YAAY;IAapB,OAAO,CAAC,YAAY;IAoBpB;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAkBrB,OAAO,CAAC,QAAQ;IAsChB,OAAO,CAAC,UAAU;CAQnB"}

package/lib/types/usage/call-index-host-face.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Host-face Typert contribution for the `callIndex` Remote namespace (N23).
+ *
+ * Same package as the existing `capabilityPolicy` / `usage` faces
+ * (`dsh-thinking-guard`). It is exported as a face builder only and does NOT
+ * register itself: the package root merges it with the other faces and calls
+ * `ctx.typert.register()` exactly once (a second register for the same package
+ * withdraws the first face's strict definitions — see `mergeHostFaces`).
+ *
+ * Every request parameter is validated with the shared strict schema from
+ * `call-index-wire.ts` (the gateway decodes arguments with `codec.create().parse`),
+ * and every result is projected through `callIndexReplySchema`, so raw backend
+ * handles / tokens / arguments cannot leave the Host through this face.
+ *
+ * Wire shape mirrors `src/client/call-index-remote.ts`; the parity test
+ * (`tests/call-index-face.spec.ts`) fails when the two tables drift.
+ *
+ * @module dsh-thinking-guard/usage/call-index-host-face
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { TypertHostFace } from '../host-face.ts';
+/** Package owning this face — must equal the manifest's registered package. */
+export declare const CALL_INDEX_HOST_FACE_PACKAGE = "dsh-thinking-guard";
+/** Wire namespace shared with the browser face. */
+export declare const CALL_INDEX_HOST_FACE_NAMESPACE = "callIndex";
+/** Service key the gateway registers under (`super(ctx, 'callIndexGateway', …)`). */
+export declare const CALL_INDEX_HOST_FACE_SERVICE = "callIndexGateway";
+/**
+ * Optional Cordis key the call-index runtime installs under. Probed with
+ * `ctx.get`; never a static inject, so a Host without the runtime still mounts
+ * the gateway and answers a plain error reply.
+ */
+export declare const CALL_INDEX_RUNTIME_SERVICE = "callIndexRuntime";
+/**
+ * The gateway's Remote surface: `[method, required wire fields, optional wire
+ * fields]`, in the same order as the Host gateway and browser contribution.
+ * Every wire parameter is named `request`.
+ */
+export declare const CALL_INDEX_WIRE_METHODS: ReadonlyArray<readonly [string, readonly string[], readonly string[]]>;
+/** Build the host face for the `callIndex` namespace. */
+export declare function callIndexHostFace(): TypertHostFace;
+/** Registration is intentionally left to the package root (see module note). */
+export type CallIndexContext = Context;
+//# sourceMappingURL=call-index-host-face.d.ts.map

package/lib/types/usage/call-index-host-face.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-index-host-face.d.ts","sourceRoot":"","sources":["../../../src/usage/call-index-host-face.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,KAAK,EAAoC,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAWvF,+EAA+E;AAC/E,eAAO,MAAM,4BAA4B,uBAAoB,CAAA;AAE7D,mDAAmD;AACnD,eAAO,MAAM,8BAA8B,cAAc,CAAA;AAEzD,qFAAqF;AACrF,eAAO,MAAM,4BAA4B,qBAAqB,CAAA;AAE9D;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,qBAAqB,CAAA;AAE5D;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,MAAM,EAAE,CAAC,CAQ1G,CAAA;AA+BD,yDAAyD;AACzD,wBAAgB,iBAAiB,IAAI,cAAc,CAoBlD;AAED,gFAAgF;AAChF,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAA"}

package/lib/types/usage/call-index-host.d.ts

@@ -0,0 +1,7 @@
+import type { Context } from '@deepseek-ai/cordis';
+import { type CallIndexRuntimeConfig } from './call-index-runtime.ts';
+export declare const name = "thinking-guard-call-index";
+export declare const Config: import("@deepseek-ai/schemastery").default<CallIndexRuntimeConfig>;
+/** Lifecycle belongs to this plugin fiber; no production profile or Session writes. */
+export declare function apply(ctx: Context, config?: CallIndexRuntimeConfig): void;
+//# sourceMappingURL=call-index-host.d.ts.map

package/lib/types/usage/call-index-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-index-host.d.ts","sourceRoot":"","sources":["../../../src/usage/call-index-host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAA4C,KAAK,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAC/G,eAAO,MAAM,IAAI,8BAA8B,CAAA;AAC/C,eAAO,MAAM,MAAM,oEAAkB,CAAA;AACrC,uFAAuF;AACvF,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,sBAA2B,GAAG,IAAI,CAK7E"}

package/lib/types/usage/call-index-query.d.ts

@@ -0,0 +1,97 @@
+import type { SessionCallIndex } from './session-index.ts';
+import { type CallIndexReply } from './call-index-wire.ts';
+/** Structural type of `SessionCallIndex.snapshot()` — type-only, never bundled. */
+export type CallIndexQuerySnapshot = ReturnType<SessionCallIndex['snapshot']>;
+/** Everything the query layer needs from the Host; the runtime owns it. */
+export interface CallIndexQuerySource {
+    readonly snapshot: () => CallIndexQuerySnapshot;
+    /** Cheap authorization/rescan stamp. Changes on scope change or a full rescan. */
+    readonly stamp: () => string;
+    readonly isSessionVisible: (id: string) => Promise<boolean>;
+    /**
+     * Optional cheap freshness probe. When present, pagination can report
+     * `hasUpdates` after live additions WITHOUT re-reading `snapshot()`. When
+     * absent, frozen views simply report `hasUpdates: false`.
+     */
+    readonly generation?: () => number;
+}
+export interface CallIndexQueryOptions {
+    now?: () => number;
+    ttlMs?: number;
+    maxViews?: number;
+    maxBytes?: number;
+    maxReplyBytes?: number;
+}
+/**
+ * Immutable, bounded query views behind the `callIndex` namespace.
+ *
+ * One instance is owned by the Host runtime. Views are frozen captures of a
+ * single `snapshot()`; cursors point at offsets inside one view.
+ */
+export declare class CallIndexQueries {
+    private readonly source;
+    private readonly now;
+    private readonly ttlMs;
+    private readonly maxViews;
+    private readonly maxBytes;
+    private readonly maxReplyBytes;
+    private readonly views;
+    private readonly cursors;
+    private readonly cursorKeys;
+    private totalBytes;
+    constructor(source: CallIndexQuerySource, options?: CallIndexQueryOptions);
+    /**
+     * Wire envelope shared by every page.
+     *
+     * `totalExact` means "this number is the whole truth for the filter". The two
+     * kinds of provenance filter are NOT symmetric, and the asymmetry decides the
+     * flag:
+     *
+     * - `sourceKind: 'mcp' | 'native' | 'plugin-tool' | 'skill'` — the predicate
+     *   means "the real source IS mcp", but the stored label only means "the
+     *   catalog resolved it to mcp". A call from a since-removed plugin is
+     *   labelled `unknown` although it really was MCP, so this count is a LOWER
+     *   BOUND and must not claim exact.
+     * - `sourceKind: 'unknown'` — the predicate is the label itself. Every row
+     *   carries exactly one label (`buildRow` always writes it, and
+     *   `projectRow` drops a row with an invalid one), so "rows matching this
+     *   filter" equals "rows labelled unknown" by definition: nothing can be
+     *   missed and nothing counted twice. That exactness is definitional, not
+     *   evidential, which is why it survives.
+     *
+     * What `unknown` must NOT be read as is "calls whose real source is unknown":
+     * it also holds calls whose source is known but whose tool left the catalog.
+     * It is a superset of the truly-unresolved, so the UI has to say
+     * "provenance unresolved", never "未知来源的真实总数".
+     */
+    private meta;
+    private bounded;
+    /** Drop every cached view and cursor (explicit rescan / disable / dispose). */
+    invalidate(): void;
+    private estimateBytes;
+    private dropView;
+    private evictExpired;
+    private evictOldest;
+    private capture;
+    private resolveView;
+    private hasUpdates;
+    private cursorKey;
+    /** Reuse the cursor id for an identical (view, kind, filter, offset) position. */
+    private newCursor;
+    private fitCount;
+    private listContext;
+    private sessionsFor;
+    /** Summarise the whole filtered set (not the current page). */
+    getSummary(request?: unknown): CallIndexReply;
+    /** One page of Session metadata; zero-call Sessions are included when unfiltered. */
+    listSessions(request?: unknown): CallIndexReply;
+    /** One page of call rows in stable `(startedAt DESC, sessionId, callSeq)` order. */
+    listCalls(request?: unknown): CallIndexReply;
+    /**
+     * Safely read one call's metadata. The row must be in the frozen view, then
+     * the Session must still be visible, then the authorization stamp must still
+     * match — a detail read never trusts a browser-supplied id by itself.
+     */
+    getCallDetail(request: unknown): Promise<CallIndexReply>;
+}
+//# sourceMappingURL=call-index-query.d.ts.map

package/lib/types/usage/call-index-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-index-query.d.ts","sourceRoot":"","sources":["../../../src/usage/call-index-query.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EAkBL,KAAK,cAAc,EAEpB,MAAM,sBAAsB,CAAA;AAE7B,mFAAmF;AACnF,MAAM,MAAM,sBAAsB,GAAG,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAA;AAE7E,2EAA2E;AAC3E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,sBAAsB,CAAA;IAC/C,kFAAkF;IAClF,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAA;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3D;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAyUD;;;;;GAKG;AACH,qBAAa,gBAAgB;IAWf,OAAO,CAAC,QAAQ,CAAC,MAAM;IAVnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,UAAU,CAAI;gBAEO,MAAM,EAAE,oBAAoB,EAAE,OAAO,GAAE,qBAA0B;IAS9F;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,OAAO,CAAC,IAAI;IAMZ,OAAO,CAAC,OAAO;IAOf,+EAA+E;IAC/E,UAAU,IAAI,IAAI;IAOlB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,QAAQ;IAYhB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,OAAO;IAyBf,OAAO,CAAC,WAAW;IAmBnB,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,SAAS;IAKjB,kFAAkF;IAClF,OAAO,CAAC,SAAS;IAiBjB,OAAO,CAAC,QAAQ;IAkBhB,OAAO,CAAC,WAAW;IA4BnB,OAAO,CAAC,WAAW;IAanB,+DAA+D;IAC/D,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc;IAsB7C,qFAAqF;IACrF,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc;IA8B/C,oFAAoF;IACpF,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc;IA8B5C;;;;OAIG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC;CAiC/D"}

package/lib/types/usage/call-index-runtime.d.ts

@@ -0,0 +1,46 @@
+/** Formal Host owner of the call index. Scope is explicit; storage remains read-only. */
+import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+import { type CallIndexReply } from './call-index-wire.ts';
+export interface CallIndexRuntimeConfig {
+    scope?: 'disabled' | 'host-visible';
+    liveDebounceMs?: number;
+    maxEventsPerRun?: number;
+    queryTtlMs?: number;
+    queryMaxViews?: number;
+    queryMaxBytes?: number;
+    pageSize?: number;
+    maxBytes?: number;
+    maxCalls?: number;
+    maxSessions?: number;
+    maxLiveQueue?: number;
+    /** Run one history scan automatically when the plugin mounts (D-031). */
+    autoIndex?: boolean;
+    /** Which pass the automatic scan requests. Incremental by default. */
+    autoIndexMode?: 'full' | 'incremental';
+    /** Delay before the automatic scan, so the mount and scope resolve first. */
+    autoIndexDelayMs?: number;
+}
+export declare const CallIndexConfig: z<CallIndexRuntimeConfig>;
+export interface CallIndexRuntime {
+    getIndexStatus(): CallIndexReply;
+    startIndex(request?: unknown): CallIndexReply;
+    cancelIndex(request: unknown): CallIndexReply;
+    getSummary(request?: unknown): CallIndexReply;
+    listSessions(request?: unknown): CallIndexReply;
+    listCalls(request?: unknown): CallIndexReply;
+    getCallDetail(request: unknown): Promise<CallIndexReply>;
+    whenIdle(): Promise<void>;
+    dispose(): Promise<void>;
+}
+export interface CallIndexRuntimeOptions {
+    now?: () => number;
+    schedule?: (callback: () => void, delay: number) => () => void;
+}
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        callIndexRuntime: CallIndexRuntime;
+    }
+}
+export declare function installCallIndexRuntime(ctx: Context, config?: CallIndexRuntimeConfig, options?: CallIndexRuntimeOptions): CallIndexRuntime;
+//# sourceMappingURL=call-index-runtime.d.ts.map

package/lib/types/usage/call-index-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-index-runtime.d.ts","sourceRoot":"","sources":["../../../src/usage/call-index-runtime.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAIxC,OAAO,EAAkC,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAK1F,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,UAAU,GAAG,cAAc,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,GAAG,aAAa,CAAA;IACtC,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AACD,eAAO,MAAM,eAAe,EAAE,CAAC,CAAC,sBAAsB,CAkCpD,CAAA;AASF,MAAM,WAAW,gBAAgB;IAC/B,cAAc,IAAI,cAAc,CAAA;IAChC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc,CAAA;IAC7C,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,cAAc,CAAA;IAC7C,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc,CAAA;IAC7C,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc,CAAA;IAC/C,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc,CAAA;IAC5C,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IACxD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AACD,MAAM,WAAW,uBAAuB;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,IAAI,CAAA;CAC/D;AACD,OAAO,QAAQ,qBAAqB,CAAC;IAAE,UAAU,OAAO;QAAG,gBAAgB,EAAE,gBAAgB,CAAA;KAAE;CAAE;AAsDjG,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,sBAA2B,EAAE,OAAO,GAAE,uBAA4B,GAAG,gBAAgB,CAwMlJ"}

package/lib/types/usage/call-index-scope.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Explicit scope contract for the new call index (D-026).
+ * `host-visible` means the public service corpus, potentially across Profiles.
+ * It never claims Profile ownership. The legacy Usage gate is not changed.
+ * Resolving a scope never lists or opens history; this is a server-only lease.
+ */
+import type { SessionPersistence } from '@deepseek-ai/dsh-session-persistence';
+export type CallIndexScopeMode = 'disabled' | 'host-visible';
+export type CallIndexBackend = Pick<SessionPersistence, 'identity' | 'list' | 'stat' | 'open'>;
+export type CallIndexScope = {
+    readonly status: 'disabled';
+    readonly mode: 'disabled';
+    readonly reason: 'not-enabled';
+} | {
+    readonly status: 'unavailable';
+    readonly mode: 'disabled' | 'host-visible';
+    readonly reason: 'unsupported-scope' | 'persistence-unavailable';
+} | {
+    readonly status: 'ready';
+    readonly mode: 'host-visible';
+    readonly epoch: number;
+    readonly token: symbol;
+    readonly backend: CallIndexBackend;
+};
+export interface CallIndexScopeDescription {
+    readonly status: CallIndexScope['status'];
+    readonly mode: CallIndexScopeMode;
+    readonly scope?: 'host-visible';
+    readonly includesOtherProfiles?: true;
+    readonly epoch?: number;
+    readonly reason?: 'not-enabled' | 'unsupported-scope' | 'persistence-unavailable';
+}
+/** Instance-local epochs and tickets; neither is a persistent Profile identity. */
+export declare class CallIndexScopeController {
+    private counter;
+    private identity;
+    private ticket;
+    /**
+     * Resolve the live scope.
+     *
+     * `undefined` now means "use the configured default", which since D-029 is
+     * `host-visible` — matching `CallIndexConfig.scope`'s schema default. Keeping
+     * the two in step matters: this method is called directly by
+     * `installCallIndexRuntime`, so a schema-only default would leave a host that
+     * builds the runtime from a plain object quietly disabled.
+     *
+     * `'disabled'` still hard-disables, and any unrecognized mode stays
+     * `unavailable` rather than guessing.
+     */
+    resolve(mode?: unknown, backend?: unknown): CallIndexScope;
+    /** Callers must resolve the current live mode/backend before using this check. */
+    isCurrent(scope: CallIndexScope): scope is Extract<CallIndexScope, {
+        status: 'ready';
+    }>;
+    invalidate(): void;
+}
+/** Fixed wire projection: no service, symbol, path, Profile inference or raw error. */
+export declare function describeCallIndexScope(scope: CallIndexScope): CallIndexScopeDescription;
+//# sourceMappingURL=call-index-scope.d.ts.map

package/lib/types/usage/call-index-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-index-scope.d.ts","sourceRoot":"","sources":["../../../src/usage/call-index-scope.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAE9E,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,cAAc,CAAA;AAC5D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,kBAAkB,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,CAAA;AAC9F,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAC1F;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,yBAAyB,CAAA;CAAE,GAChJ;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAA;AAEnJ,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;IACzC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAA;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,mBAAmB,GAAG,yBAAyB,CAAA;CAClF;AAeD,mFAAmF;AACnF,qBAAa,wBAAwB;IACnC,OAAO,CAAC,OAAO,CAAI;IACnB,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,MAAM,CAAoB;IAElC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,IAAI,GAAE,OAAmB,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc;IA4BrE,kFAAkF;IAClF,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAIvF,UAAU,IAAI,IAAI;CAInB;AAED,uFAAuF;AACvF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,yBAAyB,CAQvF"}