georesearch-dsh/georesearch-dsh--packages-installation-guard ↗★ 1
@georesearch/dsh-installation-guard
Fail-closed activation validation for the managed GeoResearch installation
AI Analysis
核心用途是验证 GeoResearch 安装的完整性。适合需要防止安装漂移、监控会话遥测并自动卸载受影响消费者的安全管理任务。
Install
This plugin has no verified bundle, or compatibility checks failed. Read the repository notes first. Read the full README ↗
README
Read the full README ↗@georesearch/dsh-installation-guard
Provides ctx.geoResearchInstallation only after the managed generation and all
recorded digests validate. A polling monitor disposes the provider fiber when
installation drift or Session Telemetry appears, which unloads injected
GeoResearch consumers.
Validation covers the managed installation carrier, the shared runtime package tree, and the GeoResearch-owned dependency and bundle fields in every integrated Web Profile. Unrelated user fields and dependencies remain outside the managed digest surface.
The Profile cordis.yml root is a Harness-owned runtime anchor and is excluded
from new managed tree digests. Legacy installation manifests that explicitly
recorded the file continue to use the legacy digest policy.
The maintenance nonce is single-use and 256-bit. Disk stores only its SHA-256
digest; the child environment receives a Windows DPAPI CurrentUser-protected
blob whose optional entropy binds transaction, generation, executable, and
deadline. Tests may use AES-256-GCM only when NODE_ENV=test and an explicit
32-byte GEORESEARCH_TEST_NONCE_KEY is supplied.