@artenx/dshb 0.1.15 → 0.1.16

package/README.md

@@ -10,9 +10,11 @@ dsh plugin --profile web add @artenx/dshb
 
 Restart the corresponding DSH Web profile after installation.
 
+Desktop app: install from **Settings → Plugins → More** in the DSH desktop app; the plugin takes effect on next startup.
+
 ## Requirements
 
 - Node.js 22.13 or newer
-- DeepSeek Harness 0.1.7-rc.1
+- DeepSeek Harness 0.1.7-rc.1 or 0.2.1-rc.2 (Web or Desktop)
 
 Source code and complete documentation: https://github.com/Artenx/dsh-honeybee

package/lib/auth/gate.d.ts

@@ -8,7 +8,7 @@ declare class AuthGate {
   decide(req: IncomingMessage): GateDecision;
   private isPageRequest;
 }
-declare function rewriteToLoopback(req: IncomingMessage, port: number): void;
+declare function rewriteToLoopback(req: IncomingMessage, port?: number): void;
 //#endregion
 export { AuthGate, GateDecision, rewriteToLoopback };
 //# sourceMappingURL=gate.d.ts.map

package/lib/auth/gate.js

@@ -27,7 +27,9 @@ var AuthGate = class {
 	}
 };
 function rewriteToLoopback(req, port) {
-	const authority = `127.0.0.1:${port}`;
+	const localPort = port ?? req.socket.localPort;
+	if (typeof localPort !== "number") return;
+	const authority = `127.0.0.1:${localPort}`;
 	req.headers.host = authority;
 	for (const name of ["origin", "referer"]) {
 		const value = req.headers[name];

package/lib/auth/gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate.js","names":[],"sources":["../../src/auth/gate.ts"],"sourcesContent":["import type { IncomingMessage } from 'node:http'\nimport { isLoopbackRequest } from './loopback.js'\nimport { readCookie, SESSION_COOKIE, verifySession } from './session.js'\nimport type { CredentialStore } from './credentials.js'\n\nexport type GateDecision = 'allow' | 'exempt' | 'redirect-login' | 'reject'\n\nexport class AuthGate {\n  constructor(private readonly store: CredentialStore) {}\n\n  decide(req: IncomingMessage): GateDecision {\n    const path = new URL(req.url ?? '/', 'http://x').pathname\n    if (path === '/login' || path.startsWith('/api/auth/')) return 'exempt'\n    if (isLoopbackRequest(req.socket.remoteAddress, req.headers.host)) return 'allow'\n    const secret = this.store.sessionSecret\n    const username = this.store.username\n    if (secret && username) {\n      const value = readCookie(req.headers.cookie, SESSION_COOKIE)\n      if (verifySession(value, secret, username)) return 'allow'\n    }\n    if (this.isPageRequest(req)) return 'redirect-login'\n    return 'reject'\n  }\n\n  private isPageRequest(req: IncomingMessage): boolean {\n    if (req.method !== 'GET' && req.method !== 'HEAD') return false\n    const path = new URL(req.url ?? '/', 'http://x').pathname\n    if (path.startsWith('/api/')) return false\n    const accept = req.headers.accept ?? ''\n    return accept.includes('text/html') || accept.includes('*/*')\n  }\n}\n\nexport function rewriteToLoopback(req: IncomingMessage, port: number): void {\n  const authority = `127.0.0.1:${port}`\n  req.headers.host = authority\n  for (const name of ['origin', 'referer'] as const) {\n    const value = req.headers[name]\n    if (typeof value !== 'string') continue\n    try {\n      const url = new URL(value)\n      url.host = authority\n      req.headers[name] = url.toString()\n    } catch {}\n  }\n}\n"],"mappings":";;;AAOA,IAAa,WAAb,MAAsB;CACS;CAA7B,YAAY,OAAyC;EAAxB,KAAA,QAAA;CAAyB;CAEtD,OAAO,KAAoC;EACzC,MAAM,OAAO,IAAI,IAAI,IAAI,OAAO,KAAK,UAAU,CAAC,CAAC;EACjD,IAAI,SAAS,YAAY,KAAK,WAAW,YAAY,GAAG,OAAO;EAC/D,IAAI,kBAAkB,IAAI,OAAO,eAAe,IAAI,QAAQ,IAAI,GAAG,OAAO;EAC1E,MAAM,SAAS,KAAK,MAAM;EAC1B,MAAM,WAAW,KAAK,MAAM;EAC5B,IAAI,UAAU,UAAU;GACtB,MAAM,QAAQ,WAAW,IAAI,QAAQ,QAAQ,cAAc;GAC3D,IAAI,cAAc,OAAO,QAAQ,QAAQ,GAAG,OAAO;EACrD;EACA,IAAI,KAAK,cAAc,GAAG,GAAG,OAAO;EACpC,OAAO;CACT;CAEA,cAAsB,KAA+B;EACnD,IAAI,IAAI,WAAW,SAAS,IAAI,WAAW,QAAQ,OAAO;EAE1D,IADa,IAAI,IAAI,IAAI,OAAO,KAAK,UAAU,CAAC,CAAC,SACxC,WAAW,OAAO,GAAG,OAAO;EACrC,MAAM,SAAS,IAAI,QAAQ,UAAU;EACrC,OAAO,OAAO,SAAS,WAAW,KAAK,OAAO,SAAS,KAAK;CAC9D;AACF;AAEA,SAAgB,kBAAkB,KAAsB,MAAoB;CAC1E,MAAM,YAAY,aAAa;CAC/B,IAAI,QAAQ,OAAO;CACnB,KAAK,MAAM,QAAQ,CAAC,UAAU,SAAS,GAAY;EACjD,MAAM,QAAQ,IAAI,QAAQ;EAC1B,IAAI,OAAO,UAAU,UAAU;EAC/B,IAAI;GACF,MAAM,MAAM,IAAI,IAAI,KAAK;GACzB,IAAI,OAAO;GACX,IAAI,QAAQ,QAAQ,IAAI,SAAS;EACnC,QAAQ,CAAC;CACX;AACF"}
+{"version":3,"file":"gate.js","names":[],"sources":["../../src/auth/gate.ts"],"sourcesContent":["import type { IncomingMessage } from 'node:http'\nimport { isLoopbackRequest } from './loopback.js'\nimport { readCookie, SESSION_COOKIE, verifySession } from './session.js'\nimport type { CredentialStore } from './credentials.js'\n\nexport type GateDecision = 'allow' | 'exempt' | 'redirect-login' | 'reject'\n\nexport class AuthGate {\n  constructor(private readonly store: CredentialStore) {}\n\n  decide(req: IncomingMessage): GateDecision {\n    const path = new URL(req.url ?? '/', 'http://x').pathname\n    if (path === '/login' || path.startsWith('/api/auth/')) return 'exempt'\n    if (isLoopbackRequest(req.socket.remoteAddress, req.headers.host)) return 'allow'\n    const secret = this.store.sessionSecret\n    const username = this.store.username\n    if (secret && username) {\n      const value = readCookie(req.headers.cookie, SESSION_COOKIE)\n      if (verifySession(value, secret, username)) return 'allow'\n    }\n    if (this.isPageRequest(req)) return 'redirect-login'\n    return 'reject'\n  }\n\n  private isPageRequest(req: IncomingMessage): boolean {\n    if (req.method !== 'GET' && req.method !== 'HEAD') return false\n    const path = new URL(req.url ?? '/', 'http://x').pathname\n    if (path.startsWith('/api/')) return false\n    const accept = req.headers.accept ?? ''\n    return accept.includes('text/html') || accept.includes('*/*')\n  }\n}\n\nexport function rewriteToLoopback(req: IncomingMessage, port?: number): void {\n  const localPort = port ?? req.socket.localPort\n  if (typeof localPort !== 'number') return\n  const authority = `127.0.0.1:${localPort}`\n  req.headers.host = authority\n  for (const name of ['origin', 'referer'] as const) {\n    const value = req.headers[name]\n    if (typeof value !== 'string') continue\n    try {\n      const url = new URL(value)\n      url.host = authority\n      req.headers[name] = url.toString()\n    } catch {}\n  }\n}\n"],"mappings":";;;AAOA,IAAa,WAAb,MAAsB;CACS;CAA7B,YAAY,OAAyC;EAAxB,KAAA,QAAA;CAAyB;CAEtD,OAAO,KAAoC;EACzC,MAAM,OAAO,IAAI,IAAI,IAAI,OAAO,KAAK,UAAU,CAAC,CAAC;EACjD,IAAI,SAAS,YAAY,KAAK,WAAW,YAAY,GAAG,OAAO;EAC/D,IAAI,kBAAkB,IAAI,OAAO,eAAe,IAAI,QAAQ,IAAI,GAAG,OAAO;EAC1E,MAAM,SAAS,KAAK,MAAM;EAC1B,MAAM,WAAW,KAAK,MAAM;EAC5B,IAAI,UAAU,UAAU;GACtB,MAAM,QAAQ,WAAW,IAAI,QAAQ,QAAQ,cAAc;GAC3D,IAAI,cAAc,OAAO,QAAQ,QAAQ,GAAG,OAAO;EACrD;EACA,IAAI,KAAK,cAAc,GAAG,GAAG,OAAO;EACpC,OAAO;CACT;CAEA,cAAsB,KAA+B;EACnD,IAAI,IAAI,WAAW,SAAS,IAAI,WAAW,QAAQ,OAAO;EAE1D,IADa,IAAI,IAAI,IAAI,OAAO,KAAK,UAAU,CAAC,CAAC,SACxC,WAAW,OAAO,GAAG,OAAO;EACrC,MAAM,SAAS,IAAI,QAAQ,UAAU;EACrC,OAAO,OAAO,SAAS,WAAW,KAAK,OAAO,SAAS,KAAK;CAC9D;AACF;AAEA,SAAgB,kBAAkB,KAAsB,MAAqB;CAC3E,MAAM,YAAY,QAAQ,IAAI,OAAO;CACrC,IAAI,OAAO,cAAc,UAAU;CACnC,MAAM,YAAY,aAAa;CAC/B,IAAI,QAAQ,OAAO;CACnB,KAAK,MAAM,QAAQ,CAAC,UAAU,SAAS,GAAY;EACjD,MAAM,QAAQ,IAAI,QAAQ;EAC1B,IAAI,OAAO,UAAU,UAAU;EAC/B,IAAI;GACF,MAAM,MAAM,IAAI,IAAI,KAAK;GACzB,IAAI,OAAO;GACX,IAAI,QAAQ,QAAQ,IAAI,SAAS;EACnC,QAAQ,CAAC;CACX;AACF"}

package/lib/auth/webserver.d.ts

@@ -4,7 +4,7 @@ import { Context } from "@deepseek-ai/cordis";
 declare class AuthedWebServer extends WebServer {
   private readonly gate;
   constructor(ctx: Context, config: {
-    host: '127.0.0.1' | '0.0.0.0';
+    host: string;
     port: number;
   });
   register(route: WebRoute): () => void;

package/lib/auth/webserver.js.map

@@ -1 +1 @@
-{"version":3,"file":"webserver.js","names":[],"sources":["../../src/auth/webserver.ts"],"sourcesContent":["import type { IncomingMessage, ServerResponse } from 'node:http'\nimport type { Duplex } from 'node:stream'\nimport WebServer from '@deepseek-ai/dsh-host-webserver'\nimport type { WebRoute, WebUpgradeRoute } from '@deepseek-ai/dsh-host-webserver'\nimport type { Context } from '@deepseek-ai/cordis'\nimport { sharedCredentialStore } from './credentials.js'\nimport { AuthGate, rewriteToLoopback } from './gate.js'\n\nexport default class AuthedWebServer extends WebServer {\n  private readonly gate = new AuthGate(sharedCredentialStore())\n\n  constructor(ctx: Context, config: { host: '127.0.0.1' | '0.0.0.0'; port: number }) {\n    super(ctx, config)\n  }\n\n  override register(route: WebRoute): () => void {\n    return super.register({ ...route, handler: (req, res) => this.guarded(route, req, res) })\n  }\n\n  override registerFallback(handler: WebRoute['handler']): () => void {\n    return super.registerFallback((req, res) =>\n      this.guarded({ kind: 'exact', path: '/', handler }, req, res),\n    )\n  }\n\n  override registerUpgrade(route: WebUpgradeRoute): () => void {\n    return super.registerUpgrade({\n      ...route,\n      handler: (req, socket, head) => this.guardedUpgrade(route, req, socket, head),\n    })\n  }\n\n  private guarded(route: WebRoute, req: IncomingMessage, res: ServerResponse): void | Promise<void> {\n    const decision = this.gate.decide(req)\n    if (decision === 'allow') {\n      rewriteToLoopback(req, this.port)\n      return route.handler(req, res)\n    }\n    if (decision === 'exempt') {\n      return route.handler(req, res)\n    }\n    if (decision === 'redirect-login') {\n      res.writeHead(302, { location: '/login' })\n      res.end()\n      return\n    }\n    res.writeHead(401, { 'content-type': 'application/json' })\n    res.end(JSON.stringify({ ok: false, error: 'unauthorized' }))\n  }\n\n  private guardedUpgrade(\n    route: WebUpgradeRoute,\n    req: IncomingMessage,\n    socket: Duplex,\n    head: Buffer,\n  ): void | Promise<void> {\n    const decision = this.gate.decide(req)\n    if (decision === 'allow' || decision === 'exempt') {\n      if (decision === 'allow') rewriteToLoopback(req, this.port)\n      return route.handler(req, socket, head)\n    }\n    socket.write('HTTP/1.1 401 Unauthorized\\r\\nConnection: close\\r\\n\\r\\n')\n    socket.destroy()\n  }\n}\n"],"mappings":";;;;AAQA,IAAqB,kBAArB,cAA6C,UAAU;CACrD,OAAwB,IAAI,SAAS,sBAAsB,CAAC;CAE5D,YAAY,KAAc,QAAyD;EACjF,MAAM,KAAK,MAAM;CACnB;CAEA,SAAkB,OAA6B;EAC7C,OAAO,MAAM,SAAS;GAAE,GAAG;GAAO,UAAU,KAAK,QAAQ,KAAK,QAAQ,OAAO,KAAK,GAAG;EAAE,CAAC;CAC1F;CAEA,iBAA0B,SAA0C;EAClE,OAAO,MAAM,kBAAkB,KAAK,QAClC,KAAK,QAAQ;GAAE,MAAM;GAAS,MAAM;GAAK;EAAQ,GAAG,KAAK,GAAG,CAC9D;CACF;CAEA,gBAAyB,OAAoC;EAC3D,OAAO,MAAM,gBAAgB;GAC3B,GAAG;GACH,UAAU,KAAK,QAAQ,SAAS,KAAK,eAAe,OAAO,KAAK,QAAQ,IAAI;EAC9E,CAAC;CACH;CAEA,QAAgB,OAAiB,KAAsB,KAA2C;EAChG,MAAM,WAAW,KAAK,KAAK,OAAO,GAAG;EACrC,IAAI,aAAa,SAAS;GACxB,kBAAkB,KAAK,KAAK,IAAI;GAChC,OAAO,MAAM,QAAQ,KAAK,GAAG;EAC/B;EACA,IAAI,aAAa,UACf,OAAO,MAAM,QAAQ,KAAK,GAAG;EAE/B,IAAI,aAAa,kBAAkB;GACjC,IAAI,UAAU,KAAK,EAAE,UAAU,SAAS,CAAC;GACzC,IAAI,IAAI;GACR;EACF;EACA,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;EACzD,IAAI,IAAI,KAAK,UAAU;GAAE,IAAI;GAAO,OAAO;EAAe,CAAC,CAAC;CAC9D;CAEA,eACE,OACA,KACA,QACA,MACsB;EACtB,MAAM,WAAW,KAAK,KAAK,OAAO,GAAG;EACrC,IAAI,aAAa,WAAW,aAAa,UAAU;GACjD,IAAI,aAAa,SAAS,kBAAkB,KAAK,KAAK,IAAI;GAC1D,OAAO,MAAM,QAAQ,KAAK,QAAQ,IAAI;EACxC;EACA,OAAO,MAAM,wDAAwD;EACrE,OAAO,QAAQ;CACjB;AACF"}
+{"version":3,"file":"webserver.js","names":[],"sources":["../../src/auth/webserver.ts"],"sourcesContent":["import type { IncomingMessage, ServerResponse } from 'node:http'\nimport type { Duplex } from 'node:stream'\nimport WebServer from '@deepseek-ai/dsh-host-webserver'\nimport type { WebRoute, WebUpgradeRoute } from '@deepseek-ai/dsh-host-webserver'\nimport type { Context } from '@deepseek-ai/cordis'\nimport { sharedCredentialStore } from './credentials.js'\nimport { AuthGate, rewriteToLoopback } from './gate.js'\n\nexport default class AuthedWebServer extends WebServer {\n  private readonly gate = new AuthGate(sharedCredentialStore())\n\n  constructor(ctx: Context, config: { host: string; port: number }) {\n    super(ctx, config)\n  }\n\n  override register(route: WebRoute): () => void {\n    return super.register({ ...route, handler: (req, res) => this.guarded(route, req, res) })\n  }\n\n  override registerFallback(handler: WebRoute['handler']): () => void {\n    return super.registerFallback((req, res) =>\n      this.guarded({ kind: 'exact', path: '/', handler }, req, res),\n    )\n  }\n\n  override registerUpgrade(route: WebUpgradeRoute): () => void {\n    return super.registerUpgrade({\n      ...route,\n      handler: (req, socket, head) => this.guardedUpgrade(route, req, socket, head),\n    })\n  }\n\n  private guarded(route: WebRoute, req: IncomingMessage, res: ServerResponse): void | Promise<void> {\n    const decision = this.gate.decide(req)\n    if (decision === 'allow') {\n      rewriteToLoopback(req, this.port)\n      return route.handler(req, res)\n    }\n    if (decision === 'exempt') {\n      return route.handler(req, res)\n    }\n    if (decision === 'redirect-login') {\n      res.writeHead(302, { location: '/login' })\n      res.end()\n      return\n    }\n    res.writeHead(401, { 'content-type': 'application/json' })\n    res.end(JSON.stringify({ ok: false, error: 'unauthorized' }))\n  }\n\n  private guardedUpgrade(\n    route: WebUpgradeRoute,\n    req: IncomingMessage,\n    socket: Duplex,\n    head: Buffer,\n  ): void | Promise<void> {\n    const decision = this.gate.decide(req)\n    if (decision === 'allow' || decision === 'exempt') {\n      if (decision === 'allow') rewriteToLoopback(req, this.port)\n      return route.handler(req, socket, head)\n    }\n    socket.write('HTTP/1.1 401 Unauthorized\\r\\nConnection: close\\r\\n\\r\\n')\n    socket.destroy()\n  }\n}\n"],"mappings":";;;;AAQA,IAAqB,kBAArB,cAA6C,UAAU;CACrD,OAAwB,IAAI,SAAS,sBAAsB,CAAC;CAE5D,YAAY,KAAc,QAAwC;EAChE,MAAM,KAAK,MAAM;CACnB;CAEA,SAAkB,OAA6B;EAC7C,OAAO,MAAM,SAAS;GAAE,GAAG;GAAO,UAAU,KAAK,QAAQ,KAAK,QAAQ,OAAO,KAAK,GAAG;EAAE,CAAC;CAC1F;CAEA,iBAA0B,SAA0C;EAClE,OAAO,MAAM,kBAAkB,KAAK,QAClC,KAAK,QAAQ;GAAE,MAAM;GAAS,MAAM;GAAK;EAAQ,GAAG,KAAK,GAAG,CAC9D;CACF;CAEA,gBAAyB,OAAoC;EAC3D,OAAO,MAAM,gBAAgB;GAC3B,GAAG;GACH,UAAU,KAAK,QAAQ,SAAS,KAAK,eAAe,OAAO,KAAK,QAAQ,IAAI;EAC9E,CAAC;CACH;CAEA,QAAgB,OAAiB,KAAsB,KAA2C;EAChG,MAAM,WAAW,KAAK,KAAK,OAAO,GAAG;EACrC,IAAI,aAAa,SAAS;GACxB,kBAAkB,KAAK,KAAK,IAAI;GAChC,OAAO,MAAM,QAAQ,KAAK,GAAG;EAC/B;EACA,IAAI,aAAa,UACf,OAAO,MAAM,QAAQ,KAAK,GAAG;EAE/B,IAAI,aAAa,kBAAkB;GACjC,IAAI,UAAU,KAAK,EAAE,UAAU,SAAS,CAAC;GACzC,IAAI,IAAI;GACR;EACF;EACA,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;EACzD,IAAI,IAAI,KAAK,UAAU;GAAE,IAAI;GAAO,OAAO;EAAe,CAAC,CAAC;CAC9D;CAEA,eACE,OACA,KACA,QACA,MACsB;EACtB,MAAM,WAAW,KAAK,KAAK,OAAO,GAAG;EACrC,IAAI,aAAa,WAAW,aAAa,UAAU;GACjD,IAAI,aAAa,SAAS,kBAAkB,KAAK,KAAK,IAAI;GAC1D,OAAO,MAAM,QAAQ,KAAK,QAAQ,IAAI;EACxC;EACA,OAAO,MAAM,wDAAwD;EACrE,OAAO,QAAQ;CACjB;AACF"}

package/lib/core/index.js

@@ -8,7 +8,7 @@ import { registerRemoteDownloadRoutes, registerWorkspaceRoutes } from "./workspa
 import { sharedWorkspaceInstructionStore } from "./workspace-instructions.js";
 import { registerWorkspaceInstructionRoutes } from "./workspace-instruction-routes.js";
 import { WorkspaceBindingsStore } from "./workspace-bindings.js";
-import { a as registerWorkspaceInstructionInjector } from "../workspace-instruction-context-DzHFTN87.js";
+import { a as registerWorkspaceInstructionInjector } from "../workspace-instruction-context-DytAmaPY.js";
 //#region src/core/index.ts
 const name = "dshb-core";
 const inject = ["webServer", "credentials"];

package/lib/core/workspace-instruction-context.d.ts

@@ -1,6 +1,6 @@
 import { SessionInstructionSnapshot, SessionInstructionSnapshotStore, WorkspaceInstructionStore } from "./workspace-instructions.js";
 import { Context, Service } from "@deepseek-ai/cordis";
-import { FileAttachmentRef, ImageAttachmentRef } from "@deepseek-ai/dsh-attachment";
+import { FileAttachmentRef, ImageAttachmentRef, ImageRequestTarget } from "@deepseek-ai/dsh-attachment";
 //#region ../../node_modules/@deepseek-ai/dsh-brand/lib/types/index.d.ts
 /**
  * Duplicate-install-safe nominal primitive helpers.
@@ -35,6 +35,7 @@ interface TypertOwnedValue<Value> extends Disposable {
 declare const LOOKUP_HOST: unique symbol;
 declare const LOOKUP_WIRE: unique symbol;
 declare const CONTEXT_WIRE: unique symbol;
+declare const RESOURCE_ID: unique symbol;
 /** Type-level association between a Host object and its wire identity. */
 interface TypertLookup<Host, Wire> {
   readonly [LOOKUP_HOST]: Host;
@@ -54,6 +55,21 @@ type TypertContextWire<ContextType> = ContextType extends TypertContext<infer Wi
 interface TypertLookupMap {}
 /** Merge-extensible scoped Context declarations. */
 interface TypertContextMap {}
+/** Type-level association between a resource kind and its identity type. */
+interface TypertResource<Id> {
+  readonly [RESOURCE_ID]: Id;
+}
+/** Extract the identity type associated with one resource declaration. */
+type TypertResourceId<Resource> = Resource extends TypertResource<infer Id> ? Id : never;
+/**
+ * Merge-extensible resource kinds whose identities a Remote call or forwarded
+ * event may carry. The package that owns an identity type declares its kind;
+ * the value is that kind's identity type, a string type such as a branded id.
+ * `global` names the built-in identity-less resource and is never a kind here.
+ */
+interface TypertResourceMap {}
+/** One declared resource kind. */
+type TypertResourceKind = Extract<keyof TypertResourceMap, string>;
 /** Awaitable disposer returned by Cordis-owned Typert registrations. */
 type TypertDisposer = () => Promise<void>;
 type StringKeyOf<Value> = Extract<keyof Value, string>;
@@ -67,31 +83,31 @@ interface TypertSchema<Output = unknown> {
   parse(value: unknown): Output;
 }
 /** Codec attached to one invocation parameter or result. */
-type TypertCodec = {
+type TypertCodec<Value = unknown> = (TypertRemoteValue<Value> & {
   readonly mode: 'strict';
   readonly typeSymbol: string;
-  /** Materialize and return the process-realm schema on first boundary use. */
-  readonly create: () => TypertSchema;
   /**
    * Decode a unary result whose fields require type-specific handling.
    * @param value - result reconstructed by the RPC carrier.
    * @returns the validated result, retaining native byte views.
    */
-  readonly decode?: (value: unknown) => unknown;
+  readonly decode?: ((value: unknown) => unknown) | undefined;
   /**
    * Project typed binary fields into RPC result attachments.
    * @param value - native unary result.
    * @param writeBytes - records a byte view at its result-relative path and returns its JSON placeholder.
    * @returns JSON metadata with untouched JSON subtrees retained.
    */
-  readonly encode?: (value: unknown, writeBytes: (bytes: Uint8Array, path: readonly (string | number)[]) => null) => unknown;
-} | {
+  readonly encode?: ((value: unknown, writeBytes: (bytes: Uint8Array, path: readonly (string | number)[]) => null) => unknown) | undefined;
+}) | {
   readonly mode: 'src-json';
 };
 /** One ordered business parameter in a Remote invocation. */
 interface InvocationParameterDescriptor {
   /** Source-level parameter name. */
   readonly name: string;
+  /** Source parameter documentation, independent of JSON Schema support. */
+  readonly description?: string;
   /** Required key in the wire `args` object. */
   readonly wire: string;
   /** Whether the value is JSON or requires a registered Host lookup. */
@@ -158,6 +174,8 @@ interface InvocationDescriptor {
   };
   /** Codec for the unary result or each yielded stream item. */
   readonly result: TypertCodec;
+  /** Source-owned method documentation; ordinary methods need not have JSDoc. */
+  readonly description?: string;
   /** Source declaration used only for diagnostics. */
   readonly sourceLocation?: InvocationSourceLocation;
 }
@@ -168,19 +186,46 @@ interface InvocationDescriptor {
  */
 type PeerId = Branded<'PeerId'>;
 /**
- * One Peer's session on this Host. Connection owns it: `ctx` is the Cordis
+ * Merge-extensible caller identities. Each driver declares its own entry.
+ * Every entry is a JSON value with a unique literal `kind`, carries no
+ * credential, and is safe to persist in a Session log.
+ */
+interface PrincipalMap {
+  /** The local user who owns this Host. */
+  owner: {
+    readonly kind: 'owner';
+  };
+}
+/** One caller identity; the authorization layer reads only this. */
+type Principal = PrincipalMap[keyof PrincipalMap];
+/**
+ * One Peer's session on this Host. Its creator owns it: `ctx` is the Cordis
  * scope that owns connection-lifetime registrations and is disposed with the
- * Peer. Who the Peer is and what it may do are not recorded here.
+ * Peer, and `principal` is the caller identity fixed when the Peer was created.
  */
 interface PeerScope {
   readonly id: PeerId;
+  /** Connection-lifetime registrations; disposed with the Peer. */
   readonly ctx: Context;
+  /** Caller identity fixed at creation by in-process Host code; no wire field can set it. */
+  readonly principal: Principal;
+  /** Aborted once the Peer is disposed; Remote streams that speak for the Peer end with it. */
+  readonly signal: AbortSignal;
+  /** Whether the Peer may open a forwarded-event stream; this does not grant business permissions. */
+  readonly interactions: 'answer' | 'none';
   /**
    * Tear down every registration made through `ctx`.
    * @returns settles once the scope has quiesced; racing calls share one completion.
    */
   dispose(): Promise<void>;
 }
+/** Carrier capacity for buffered uplink frames of one logical stream. */
+interface RemoteUplinkWindow {
+  /** Maximum complete encoded frame bytes waiting for the Host consumer. */
+  readonly maxBytes: number;
+  /** UTF-8 envelope bytes added to a compact JSON item with a present value field. */
+  readonly frameOverheadBytes: number;
+}
 /**
  * The context of one Remote call, reachable inside the receiving method as
  * `this.ctx.invocation`. The Gateway derives the receiver from a Context that
@@ -194,10 +239,12 @@ interface RemoteInvocation {
   };
   /** Cordis service key of the receiving Service. */
   readonly service: string;
-  /** Peer the call speaks for; an in-process carrier speaks for the operator. */
+  /** Peer the call speaks for; every carrier names it explicitly. */
   readonly peer: PeerScope;
   /** Carrier cancellation: Client cancel, socket close, or an uplink failure. */
   readonly signal: AbortSignal;
+  /** Carrier frame capacity; absent when the carrier imposes no encoded-frame inbox limit. */
+  readonly uplinkWindow?: RemoteUplinkWindow | undefined;
   /**
    * The Client's uplink items for this call. Available once; a second call
    * throws. With an uplink codec on the descriptor every item is decoded to
@@ -218,18 +265,33 @@ interface TypertRemoteContribution {
   /** Consumer-side invocation descriptors generated from that package. */
   readonly descriptors: readonly InvocationDescriptor[];
 }
+/** Generated parser and optional lossless tool-schema projection of one Remote value. */
+interface TypertRemoteValue<Value = unknown> {
+  /** Materialize the generated parser without loading the owning Service. */
+  readonly create: () => TypertSchema<Value>;
+  /** Source-owned value documentation, independent of tool projection support. */
+  readonly description?: string | undefined;
+  /** Present when the value is representable in the tool-schema subset without losing constraints; may be derived lazily. */
+  readonly jsonSchema?: Readonly<Record<string, unknown>> | undefined;
+  /** Projection failure for consumers that require JSON Schema; parsing remains available. */
+  readonly jsonSchemaError?: string | undefined;
+}
 /**
  * Resolve one validated wire identity, synchronously or asynchronously.
  * @param id - validated wire identity.
  * @returns the Host object, or `undefined` when unavailable.
  */
 type TypertLookupResolver<Host = unknown, Wire = unknown> = (id: Wire) => Host | undefined | Promise<Host | undefined>;
+/** Resource kinds whose identity type is a wire identity; every kind for a type-erased provider. */
+type TypertResourceKindFor<Wire> = unknown extends Wire ? TypertResourceKind : { [Kind in TypertResourceKind]: [Wire] extends [TypertResourceId<TypertResourceMap[Kind]>] ? Kind : never; }[TypertResourceKind];
 /** Runtime provider for one declared Host object lookup. */
 interface TypertLookupProvider<Host = unknown, Wire = unknown> {
   /** Source parameter name recognized by the SRC weak parser. */
   readonly parameter: string;
   /** Wire field replacing the Host object parameter. */
   readonly wire: string;
+  /** Resource kind the wire identity names; a parameter of this lookup carries that resource. */
+  readonly resource?: TypertResourceKindFor<Wire>;
   /** Canonical Host type symbol used by strict generation. */
   readonly hostTypeSymbol: string;
   /** Canonical wire type symbol used by strict generation. */
@@ -260,6 +322,8 @@ interface TypertHostContextAdapter<Wire = unknown> {
   readonly wire: string;
   /** Canonical wire type symbol used by strict generation. */
   readonly wireTypeSymbol: string;
+  /** Resource kind the wire identity names; a call scoped to this Context carries that resource. */
+  readonly resource?: TypertResourceKindFor<Wire>;
   /**
    * Resolve a validated wire identity to a live Host Context.
    * @param id - validated wire identity.
@@ -286,7 +350,7 @@ interface TypertClientContextAdapter<Wire = unknown> {
 }
 /** Notification emitted after a Typert runtime registry changes. */
 interface TypertRegistryChange {
-  readonly kind: 'local' | 'remote' | 'lookup' | 'host-context' | 'client-context';
+  readonly kind: 'local' | 'remote' | 'lookup' | 'host-context' | 'client-context' | 'resource';
   readonly key: string;
 }
 /** Listener for one Typert runtime registry. */
@@ -396,7 +460,7 @@ interface TypertContextRegistry {
    */
   registerClient<K extends StringKeyOf<TypertContextMap>>(key: K, adapter: TypertClientContextAdapter<TypertContextWire<TypertContextMap[K]>>): TypertDisposer;
   /**
-   * Look up a Host Context adapter.
+   * Look up a Host Context adapter; a configured resolver keeps the adapter's declaration and `resource`.
    * @param key - descriptor Context key.
    * @returns the adapter, or `undefined` when absent.
    */
@@ -414,12 +478,49 @@ interface TypertContextRegistry {
    */
   subscribe(listener: TypertRegistryListener): TypertDisposer;
 }
+/** Default wire field of one resource kind. */
+interface TypertResourceDeclaration {
+  /** Top-level or first-object wire field holding one identity of the kind. */
+  readonly field: string;
+}
+/** One registered resource kind with its default wire field. */
+interface TypertResourceEntry extends TypertResourceDeclaration {
+  /** Registered resource kind. */
+  readonly kind: string;
+}
+/** Runtime registry of resource kinds' default wire fields. */
+interface TypertResourceRegistry {
+  /**
+   * Register one kind's default wire field for the calling fiber. Only the
+   * domain that owns the kind registers it.
+   * @param kind - merge-declared resource kind.
+   * @param declaration - the kind's default wire field.
+   * @returns disposer withdrawing the exact registration.
+   * @throws Error when the kind is already registered or is `global`, the built-in resource kind.
+   */
+  register(kind: TypertResourceKind, declaration: TypertResourceDeclaration): TypertDisposer;
+  /**
+   * Look up one kind's declaration.
+   * @param kind - resource kind.
+   * @returns the live declaration, or `undefined` when unregistered.
+   */
+  get(kind: string): TypertResourceDeclaration | undefined;
+  /** @returns a registration-order snapshot of registered kinds with their fields. */
+  entries(): readonly TypertResourceEntry[];
+  /**
+   * Observe later resource-kind changes.
+   * @param listener - synchronous contained observer.
+   * @returns disposer for this subscription.
+   */
+  subscribe(listener: TypertRegistryListener): TypertDisposer;
+}
 /** Minimal Typert runtime consumed through dependency inversion. */
 interface TypertRegistryContract {
   readonly local: TypertLocalRegistry;
   readonly remotes: TypertRemoteRegistry;
   readonly lookups: TypertLookupRegistry;
   readonly contexts: TypertContextRegistry;
+  readonly resources: TypertResourceRegistry;
 }
 declare module '@deepseek-ai/cordis' {
   interface Context {
@@ -453,7 +554,7 @@ declare abstract class TypertRemoteService<out T = never> extends Service<T> {
    * Register the Service and bind the same key to Typert Gateway.
    * @param ctx - owning Cordis Context.
    * @param serviceKey - exact Cordis service key and default wire namespace.
-   * @param options - optional distinct wire namespace.
+   * @param options - optional wire namespace.
    */
   protected constructor(ctx: Context, serviceKey: string, options?: TypertGatewayBindingOptions);
 }
@@ -703,9 +804,8 @@ interface ToolRemovalBlock {
 }
 /**
  * Merge-extensible content blocks keyed by `type`. New core blocks must land
- * with adapter, UI, and compaction support. Developer tool-change blocks are
- * reserved for Session V4 persistence; providers and UI reject them until
- * their producers and consumers are implemented together.
+ * with adapter, UI, and compaction support. Tool-change blocks belong to
+ * developer messages; `projectToolUpdates` selects what each route receives.
  */
 interface ContentBlockMap {
   'text': TextBlock;
@@ -838,9 +938,26 @@ interface LlmConfigurableProvider {
    * from outside.
    */
   declared?: boolean;
+  /**
+   * Route endpoint the adapter uses when the profile sets no `baseURL`; the
+   * adapter may still send an individual model to that model's own endpoint.
+   * Absent when the route has no fixed endpoint.
+   */
+  defaultBaseURL?: string;
+  /** Environment variables used to construct a provider endpoint; absent when none are reported. */
+  baseURLEnv?: readonly string[];
+  /** Authentication the adapter performs when the profile names no credential reference; absent when it reports none. */
+  nativeAuth?: LlmNativeAuth;
   /** Configuration diagnostic for repair; unaffected models may remain serviceable. */
   error?: string;
 }
+/** Authentication a provider route performs without a credential reference in its profile. */
+interface LlmNativeAuth {
+  /** Environment variables the route's authentication reads, in lookup order; empty when it reads none. */
+  env: readonly string[];
+  /** Whether a stored OAuth sign-in can authenticate the route. */
+  oauth: boolean;
+}
 /**
  * One interrogation of a provider endpoint that configuration has not stored
  * yet. Configuration surfaces send the draft a user is still editing, so the
@@ -920,7 +1037,7 @@ interface LlmReasoningEffortInfo {
 }
 /** Selectable reasoning efforts for one exact provider/model route. */
 interface LlmModelReasoningInfo {
-  /** Supported efforts in adapter-preferred display order. */
+  /** Supported efforts from least to greatest selectable reasoning effort, not predicted token use or latency. */
   efforts: readonly LlmReasoningEffortInfo[];
   /**
    * Adapter-configured default materialized into requests when callers omit
@@ -935,6 +1052,16 @@ interface LlmModelReasoningInfo {
  * can follow the cached history instead of rewriting message 0.
  */
 type SystemPromptUpdate = 'in-history';
+/**
+ * How a model accepts native tool declarations that change mid-conversation.
+ * `'addition-only'`: the model reads a `tool-addition` block in a later
+ * developer message as activating a tool declared with `deferLoading`, so an
+ * added tool follows the cached history instead of rewriting the declaration
+ * list. `'in-history'`: the model additionally reads `tool-removal` blocks,
+ * so a removed tool keeps its declaration and the removal follows the history.
+ * Absent means every request declares the complete current tool list.
+ */
+type ToolUpdate = 'in-history' | 'addition-only';
 /** Exact-route model metadata resolved by its owning adapter. */
 interface LlmResolvedModelInfo extends LlmModelInfo {
   /** Provider-owned context capacity when known. */
@@ -945,6 +1072,8 @@ interface LlmResolvedModelInfo extends LlmModelInfo {
   reasoning?: LlmModelReasoningInfo;
   /** Declared mid-conversation system prompt handling; absent means only a leading system message is read. */
   systemPromptUpdate?: SystemPromptUpdate;
+  /** Declared mid-conversation tool declaration handling; absent means every request declares the complete tool list. */
+  toolUpdate?: ToolUpdate;
 }
 /**
  * Adapter-private lossless-JSON state for replaying a successful response,
@@ -1033,6 +1162,18 @@ interface RequestUserInput {
 }
 /** A durable conversation message or a user input used only for one request. */
 type RequestMessage = Message | RequestUserInput;
+/** Logged tool declarations and update identities since the last declaration reset. */
+interface ToolHistory {
+  /** Complete active declarations at the start of this history. */
+  readonly tools: readonly ToolSchema[];
+  /** Ordered developer messages, with additions resolved from their historical headers. */
+  readonly updates: readonly {
+    /** Identity used to locate this update in the derived request history. */
+    readonly messageId: MessageId;
+    /** Added definitions resolved from the event's referenced request header. */
+    readonly additions: readonly ToolSchema[];
+  }[];
+}
 /** A single model request, fully assembled. */
 interface GenerateOptions {
   /** Registered provider route selecting the adapter instance. */
@@ -1054,6 +1195,8 @@ interface GenerateOptions {
   system?: string;
   /** Tool schemas (adapters map to the provider's `tools` field). */
   tools?: ToolSchema[];
+  /** Session-folded tool history used for route projection; omission sends complete declarations without tool updates. */
+  toolHistory?: ToolHistory;
   temperature?: number;
   maxTokens?: number;
   /**
@@ -1070,8 +1213,8 @@ interface GenerateOptions {
   sessionId?: Branded<'SessionId'>;
   /**
    * Provider-neutral classification for an auxiliary model call. Adapters may
-   * map the purpose to model-hidden transport metadata or purpose-specific
-   * generation policy. Ordinary conversation requests leave it unset.
+   * map the purpose to model-hidden transport metadata. Ordinary conversation
+   * requests leave it unset.
    */
   purpose?: 'compaction' | 'session-title';
 }
@@ -1407,20 +1550,33 @@ interface ResolvedAlwaysRetryPolicy extends ResolvedRetryBackoff {
 type ResolvedRetryPolicy = ResolvedNormalRetryPolicy | ResolvedAlwaysRetryPolicy;
 //#endregion
 //#region ../../node_modules/@deepseek-ai/dsh-llm/lib/types/call-config.d.ts
+/** Concrete generation settings; omitted controls use the selected route's defaults. */
+interface LlmCallControls {
+  reasoningEffort?: ReasoningEffortId;
+  temperature?: number;
+  maxTokens?: number;
+  stop?: string[];
+}
 /**
  * Provider, model, reasoning effort, and sampling scalars of one conversation's
  * requests. Every field maps 1:1 onto the same-named `GenerateOptions` field;
  * the loop builds requests from the logged header rather than accepting these
  * per call.
  */
-interface LlmCallConfig {
+interface LlmCallConfig extends LlmCallControls {
   provider: string;
   model: string;
-  reasoningEffort?: ReasoningEffortId;
-  temperature?: number;
-  maxTokens?: number;
-  stop?: string[];
 }
+/**
+ * Synchronous, pure configuration of one call before defaults and validation.
+ * Compose functions in the desired order; later writes replace earlier ones.
+ * The returned controls cannot change the captured route. Errors reject
+ * preparation before dispatch; only the resolved configuration is recordable.
+ * @param controls - detached, deeply frozen proposed controls, without defaults.
+ * @param model - detached, deeply frozen metadata from the captured adapter generation.
+ * @returns concrete controls; omitted fields receive the route's defaults.
+ */
+type ConfigureCall = (controls: Readonly<LlmCallControls>, model: Readonly<LlmResolvedModelInfo>) => LlmCallControls;
 /**
  * Effective config fields supplied by exact-model adapter resolution rather
  * than by the caller's request proposal.
@@ -1463,6 +1619,8 @@ interface PreparedLlmCall {
   readonly inputModalities?: readonly ModelModality[];
   /** Exact model system prompt update mode captured with the adapter dispatch generation. */
   readonly systemPromptUpdate?: SystemPromptUpdate;
+  /** Exact model tool update mode captured with the adapter dispatch generation. */
+  readonly toolUpdate?: ToolUpdate;
   /** Config fields materialized by the captured adapter rather than proposed by the caller. */
   readonly adapterDefaults: LlmCallConfigAdapterDefaults;
   /**
@@ -1510,10 +1668,20 @@ declare abstract class LlmAdapter {
    * @returns route-owned image pricing, or `undefined` when the route declares none.
    */
   imageRequestPricing(_provider: string, _model: string): LlmImageRequestPricing | undefined;
+  /**
+   * Resolve the image dimensions and byte target this adapter sends to the model.
+   * The default preserves normalized images; adapters that resize must override it.
+   * @param _provider - registered provider route.
+   * @param _model - exact model id.
+   * @param image - normalized image whose request projection is being resolved.
+   * @returns the same target used by request serialization, before provider-internal processing.
+   */
+  imageRequestTarget(_provider: string, _model: string, image: ImageAttachmentRef): ImageRequestTarget;
   /**
    * List models this adapter can currently advertise for one owned provider.
-   * The result is advisory: an adapter may accept unlisted model ids, and
-   * consumers must not turn absence into request rejection.
+   * Core routing accepts unlisted model ids; catalog-driven entry points such
+   * as the GUI may require membership. Adapters used there must advertise
+   * their available models; the base empty catalog offers no GUI selection.
    * @param _provider - one provider route owned by this adapter.
    * @returns discoverable models in adapter-preferred order.
    */
@@ -1690,6 +1858,14 @@ declare class LlmRuntime extends TypertRemoteService {
    * @returns the owning adapter's image pricing for the route, when declared.
    */
   imageRequestPricing(provider: string, model: string): LlmImageRequestPricing | undefined;
+  /**
+   * Resolve the image projection for an exact registered model route.
+   * @param provider - registered provider route.
+   * @param model - exact model id.
+   * @param image - normalized image reference.
+   * @returns dimensions and byte target used by the adapter's request serializer.
+   */
+  imageRequestTarget(provider: string, model: string, image: ImageAttachmentRef): ImageRequestTarget;
   /**
    * Resolve the exact text one durable file occurrence contributes to every
    * provider request in the current execution environment.
@@ -1701,7 +1877,8 @@ declare class LlmRuntime extends TypertRemoteService {
   private detachedModalities;
   /**
    * Discover models advertised by one registered provider. Catalog membership
-   * is advisory and never changes routing or request validation.
+   * does not constrain core routing. Catalog-driven entry points may restrict
+   * selection and submission to the advertised models.
    * @param provider - registered provider route to inspect.
    * @returns detached model metadata in adapter-preferred order.
    */
@@ -1737,11 +1914,15 @@ declare class LlmRuntime extends TypertRemoteService {
    * Resolve one call under its current adapter registration. The returned
    * one-shot handle keeps that registration across header logging and dispatch,
    * so HMR cannot combine one adapter's capability result with another adapter.
-   * @param config - provider/model route and optional request controls.
+   * An optional synchronous callback selects concrete controls using captured
+   * model metadata. Defaults and validation apply to its result. Callback
+   * failures and cancellation reject preparation before dispatch.
+   * @param config - provider/model route and optional concrete request controls.
    * @param signal - optional cancellation for adapter-owned capability lookup.
+   * @param configure - pure control selection, called once before defaults and validation.
    * @returns a prepared config and its registration-bound stream entry point.
    */
-  prepareCall(config: LlmCallConfig, signal?: AbortSignal): Promise<PreparedLlmCall>;
+  prepareCall(config: LlmCallConfig, signal?: AbortSignal, configure?: ConfigureCall): Promise<PreparedLlmCall>;
   private registration;
   /** Remove replay state whose historical route is owned by another adapter. */
   private forAdapter;

package/lib/core/workspace-instruction-context.js

@@ -1,3 +1,3 @@
 import "./workspace-instructions.js";
-import { a as registerWorkspaceInstructionInjector, i as name, n as escapeInstructionFrameBody, o as renderInstructionMessageText, r as inject, s as resolveSnapshotForSession, t as createInstructionMessage } from "../workspace-instruction-context-DzHFTN87.js";
+import { a as registerWorkspaceInstructionInjector, i as name, n as escapeInstructionFrameBody, o as renderInstructionMessageText, r as inject, s as resolveSnapshotForSession, t as createInstructionMessage } from "../workspace-instruction-context-DytAmaPY.js";
 export { createInstructionMessage, escapeInstructionFrameBody, inject, name, registerWorkspaceInstructionInjector, renderInstructionMessageText, resolveSnapshotForSession };