# Seam probes

These keyless TypeScript probes exercise the DSH capability seams used by the project. `pnpm run check:quality` is the release gate.

| Probe | Coverage |
|---|---|
| `authorization-seam-probe.ts` | Authorization parsing; domain, IP, CIDR, port, method, and path decisions; redirects and dynamic targets; typed-tool policy; tiered approval; monotonic guard behavior |
| `tools-seam-probe.ts` | Typed command construction, escaping, redirect policy, and nmap/curl output parsing |
| `skills-seam-probe.ts` | Exact assessment and red-team skill sets |
| `stage2-seam-probe.ts` | Container Bash execution, environment, stdin, timeout cleanup, background processes, kill, and mounts |
| `stage3-seam-probe.ts` | Evidence record/search/report, FTS, blackboard, top-level-only durable writes, session-seed recovery, late mounting, and JSONL rebuild |
| `lifeline-seam-probe.ts` | Ephemeral-container cleanup when the host exits or receives `SIGKILL` |

The probes resolve DSH libraries and types from the sibling `../deepseek-harness` checkout by default. Set `DSH_SOURCE` to use another checkout. This is a development dependency and does not change the runtime compatibility documented in the root README. The stage2 and lifeline probes also require Docker and `cyberstrike-kali:latest`.

```sh
pnpm run probe:authorization
pnpm run probe:tools
pnpm run probe:stage3
pnpm run check:seams
pnpm run check:quality
```