feat(kernel-utils): add described*() combinators for guard+schema authoring

[grypez]

Explanation

Adds a ./described export whose combinators author an @endo/patterns
interface guard and a matching MethodSchema from a single source, so a
discoverable exo's enforced shape and its __getDescription__ hint cannot
drift.

The combinator namespace is exported as S (mirroring @endo/patterns's M
and @endo/eventual-send's E). D was avoided because it reads as liveslots'
D() device operator to readers familiar with that codebase. S is the single
authoring surface — there are no bare combinator function exports:

• Leaves: S.string/S.number/S.boolean/S.arrayOf/S.record/S.object/S.nothing each yield a { pattern, schema } pair.
• S.arg names a positional parameter.
• S.method and S.interface assemble them into { guard, schema } / { interfaceGuard, schemas }, ready to splat into makeDiscoverableExo.

Because the enforced pattern and the descriptive schema are projected from the
same authored leaves, their conformance is a construction invariant. Method
guards use M.callWhen(...).returns(...) (exo methods are invoked across an
eventual-send boundary) and the interface guard sets defaultGuards: 'passable'
so the __getDescription__ method injected by makeDiscoverableExo is allowed.
Optional arguments must be trailing (enforced by S.method).

Before this PR

// guard and schema written by hand, independently — nothing keeps them in sync.
const interfaceGuard = M.interface('Math', {
  add: M.callWhen(M.arrayOf(M.number())).returns(M.number()),
});
const schemas = {
  add: {
    description: 'Add a list of numbers.',
    args: { summands: { type: 'array', items: { type: 'number' } } },
    returns: { type: 'number' },
  },
};
// Relax the guard to accept M.string() and the schema still advertises number[]:
// the membrane and the prompt now describe different methods, and nothing catches it.

After this PR

// one source — the guard and the MethodSchema are projected from the
// same authored leaves, so they cannot drift.
const { interfaceGuard, schemas } = S.interface('Math', {
  add: S.method(
    'Add a list of numbers.',
    [S.arg('summands', S.arrayOf(S.number()))],
    S.number('The sum of the numbers.'),
  ),
});

Test plan

• yarn workspace @metamask/kernel-utils test:dev:quiet (304 pass, incl. 13 new described tests)
• yarn workspace @metamask/kernel-utils build
• yarn workspace @metamask/kernel-utils lint

---

Note

Low Risk
Additive API and schema metadata; behavior change is limited to optional-arg validation/conversion where required is set.

Overview
Adds @metamask/kernel-utils ./described (and root S) so discoverable exos can author @endo/patterns guards and MethodSchema from one definition, avoiding drift between membrane enforcement and __getDescription__.

S exposes leaves (string, number, boolean, arrayOf, record, object, nothing), S.arg, S.method (async M.callWhen, trailing optional args), and S.interface ( defaultGuards: 'passable' for injected description). MethodSchema gains optional required; methodArgsToStruct honors it for Superstruct validation. service-discovery-types methodSchemaToMethodSpec now marks parameters not in required as optional.

^{Reviewed by Cursor Bugbot for commit af20bba. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	71.24% ⬆️ +0.14%	8830 / 12394
🔵	Statements	71.06% ⬆️ +0.15%	8978 / 12633
🔵	Functions	72.36% ⬆️ +0.17%	2126 / 2938
🔵	Branches	64.86% ⬆️ +0.18%	3569 / 5502

File Coverage

File	Stmts	Branches	Functions	Lines	Uncovered Lines
Changed Files
packages/kernel-utils/src/described.ts	100%	100%	100%	100%
packages/kernel-utils/src/index.ts	100% 🟰 ±0%	100% 🟰 ±0%	100% 🟰 ±0%	100% 🟰 ±0%
packages/kernel-utils/src/json-schema-to-struct.ts	81.81% ⬆️ +0.86%	81.08% ⬆️ +2.96%	100% 🟰 ±0%	81.81% ⬆️ +0.86%	30, 40, 45-48, 91-92, 117
packages/kernel-utils/src/schema.ts	100% 🟰 ±0%	100% 🟰 ±0%	100% 🟰 ±0%	100% 🟰 ±0%
packages/service-discovery-types/src/method-schema-convert.ts	94.73% ⬆️ +0.62%	92.3% ⬆️ +5.94%	100% 🟰 ±0%	94.73% ⬆️ +0.62%	52-53

Generated in workflow #4473 for commit af20bba by the Vitest Coverage Report Action

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 6bc1fee. Configure here.}