@benz-ai-x/dsh-md-preview 0.1.0

package/lib/index.js

@@ -0,0 +1,210 @@
+import { Remote, RemoteError, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
+import z from "@deepseek-ai/schemastery";
+//#region src/constants.ts
+/** Schema-free deployment constants shared by Host config and browser face. */
+/** Universal default: 1 MiB keeps a preview read bounded for any deployment. */
+const DEFAULT_MAX_BYTES = 1048576;
+/** Markdown documents are the previewable vocabulary; deployments may widen it. */
+const DEFAULT_ALLOWED_EXTENSIONS = [".md", ".markdown"];
+//#endregion
+//#region src/remote.ts
+var __runInitializers = function(thisArg, initializers, value) {
+	var useValue = arguments.length > 2;
+	for (var i = 0; i < initializers.length; i++) value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+	return useValue ? value : void 0;
+};
+var __esDecorate = function(ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+	function accept(f) {
+		if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected");
+		return f;
+	}
+	var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+	var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+	var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+	var _, done = false;
+	for (var i = decorators.length - 1; i >= 0; i--) {
+		var context = {};
+		for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+		for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+		context.addInitializer = function(f) {
+			if (done) throw new TypeError("Cannot add initializers after decoration has completed");
+			extraInitializers.push(accept(f || null));
+		};
+		var result = (0, decorators[i])(kind === "accessor" ? {
+			get: descriptor.get,
+			set: descriptor.set
+		} : descriptor[key], context);
+		if (kind === "accessor") {
+			if (result === void 0) continue;
+			if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+			if (_ = accept(result.get)) descriptor.get = _;
+			if (_ = accept(result.set)) descriptor.set = _;
+			if (_ = accept(result.init)) initializers.unshift(_);
+		} else if (_ = accept(result)) {
+			if (kind === "field") initializers.unshift(_);
+			else descriptor[key] = _;
+		}
+	}
+	if (target) Object.defineProperty(target, contextIn.name, descriptor);
+	done = true;
+};
+/** Business rejection with a stable code; the transport preserves it verbatim. */
+function failure(code, message) {
+	return new RemoteError(code, message, {});
+}
+/** Lowercased dot-prefixed extension of a path, or the empty string. */
+function extensionOf(path) {
+	const name = path.slice(Math.max(path.lastIndexOf("/"), path.lastIndexOf("\\")) + 1);
+	const dot = name.lastIndexOf(".");
+	return dot === -1 ? "" : name.slice(dot).toLowerCase();
+}
+/** Whether a candidate extension passes the configured allowlist. */
+function isAllowedExtension(path, allowedExtensions) {
+	const extension = extensionOf(path);
+	return extension !== "" && allowedExtensions.includes(extension);
+}
+/**
+* Host Remote service exposing `mdPreview/read` over the Gateway.
+*/
+let MdPreviewService = (() => {
+	let _classSuper = TypertRemoteService;
+	let _instanceExtraInitializers = [];
+	let _read_decorators;
+	return class MdPreviewService extends _classSuper {
+		static {
+			const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+			_read_decorators = [Remote];
+			__esDecorate(this, null, _read_decorators, {
+				kind: "method",
+				name: "read",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "read" in obj,
+					get: (obj) => obj.read
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			if (_metadata) Object.defineProperty(this, Symbol.metadata, {
+				enumerable: true,
+				configurable: true,
+				writable: true,
+				value: _metadata
+			});
+		}
+		static inject = [
+			"fs",
+			"typert",
+			"sessions"
+		];
+		/**
+		* Validated deployment configuration. TypeScript-private (not a `#` field):
+		* Cordis wraps plugin instances in proxies, and private fields fail their
+		* brand check through a proxy boundary.
+		*/
+		config = __runInitializers(this, _instanceExtraInitializers);
+		/**
+		* Bind the service to its Host context and validated configuration.
+		* @param ctx - Host context carrying fs, typert, and sessions services.
+		* @param config - Loader-validated deployment configuration.
+		*/
+		constructor(ctx, config) {
+			super(ctx, "mdPreview", { namespace: "mdPreview" });
+			this.config = config;
+		}
+		/**
+		* Read one previewable file from the session's workspace.
+		* @param sessionId - owning session; its header cwd roots the read.
+		* @param path - path as it appeared in the conversation.
+		* @param signal - caller cancellation carried through every fs call.
+		* @returns the path with its complete text content.
+		* @throws RemoteError with a stable MdPreview failure code.
+		*/
+		async read(sessionId, path, signal) {
+			if (path.trim().length === 0) throw failure("md-preview/bad-request", "mdPreview/read requires a non-empty path");
+			if (!isAllowedExtension(path, this.config.allowedExtensions)) throw failure("md-preview/unsupported-extension", `mdPreview/read refuses non-previewable path "${path}"`);
+			const session = this.ctx.sessions.get(sessionId);
+			if (session === void 0) throw failure("md-preview/unknown-session", `mdPreview/read cannot resolve session "${sessionId}"`);
+			const cwd = session.header.cwd;
+			if (cwd === void 0) throw failure("md-preview/no-workspace", `mdPreview/read session "${sessionId}" has no working directory`);
+			const root = await this.resolveWorkspacePath(cwd, signal);
+			let target;
+			try {
+				target = await this.resolveWorkspacePath(path, signal, cwd);
+			} catch (error) {
+				if (signal.aborted) throw error;
+				throw failure("md-preview/not-found", `mdPreview/read cannot resolve path "${path}"`);
+			}
+			if (!this.ctx.fs.contains(root, target)) throw failure("md-preview/forbidden", "mdPreview/read refuses paths outside the session workspace");
+			const info = await this.ctx.fs.stat(target, signal);
+			if (info === void 0) throw failure("md-preview/not-found", `mdPreview/read cannot find "${path}"`);
+			if (info.type !== "file") throw failure("md-preview/unsupported-extension", `mdPreview/read target "${path}" is not a regular file`);
+			if (info.size !== void 0 && info.size > this.config.maxBytes) throw failure("md-preview/too-large", `mdPreview/read refuses "${path}" above the configured byte cap`);
+			let content;
+			try {
+				content = await this.ctx.fs.readText(target, signal);
+			} catch (error) {
+				if (signal.aborted) throw error;
+				throw failure("md-preview/unavailable", `mdPreview/read failed for "${path}": ${error instanceof Error ? error.message : String(error)}`);
+			}
+			if (content.length > this.config.maxBytes) throw failure("md-preview/too-large", `mdPreview/read refuses "${path}" above the configured byte cap`);
+			return {
+				path,
+				content
+			};
+		}
+		/** Resolve one path against the workspace, with a plain not-found mapping. */
+		async resolveWorkspacePath(path, signal, cwd) {
+			return await this.ctx.fs.resolve(path, cwd === void 0 ? { signal } : {
+				cwd,
+				signal
+			});
+		}
+	};
+})();
+//#endregion
+//#region src/config.ts
+/** Deployment configuration for the MdPreview Host service. */
+/** Standard Schema twin of {@link Config}; defaults live here, not in code. */
+const Config = z.object({
+	maxBytes: z.number().min(1).default(DEFAULT_MAX_BYTES),
+	allowedExtensions: z.array(z.string()).default([...DEFAULT_ALLOWED_EXTENSIONS])
+});
+//#endregion
+//#region src/protocol.ts
+/** Stable failure codes carried by `RemoteError` across the wire. */
+const MD_PREVIEW_FAILURE_CODES = [
+	"md-preview/bad-request",
+	"md-preview/unknown-session",
+	"md-preview/no-workspace",
+	"md-preview/unsupported-extension",
+	"md-preview/forbidden",
+	"md-preview/not-found",
+	"md-preview/too-large",
+	"md-preview/unavailable"
+];
+//#endregion
+//#region src/index.ts
+const name = "md-preview";
+/** Host services the read authority depends on. */
+const inject = [
+	"fs",
+	"typert",
+	"sessions"
+];
+/**
+* Mount the MdPreview Host Remote.
+* @param ctx - Host Loader context.
+* @param config - Loader-validated deployment configuration (schema defaults
+* fill any fields the profile patch omits).
+*/
+function apply(ctx, config = {
+	maxBytes: DEFAULT_MAX_BYTES,
+	allowedExtensions: [...DEFAULT_ALLOWED_EXTENSIONS]
+}) {
+	ctx.plugin(MdPreviewService, config);
+}
+//#endregion
+export { Config, DEFAULT_ALLOWED_EXTENSIONS, DEFAULT_MAX_BYTES, MD_PREVIEW_FAILURE_CODES, MdPreviewService, apply, inject, isAllowedExtension, name };
+
+//# sourceMappingURL=index.js.map

package/lib/typert/remote-client.js

@@ -0,0 +1,58 @@
+import { z } from "zod";
+//#region src/typert/remote-client.ts
+/**
+* Browser-safe MdPreview Remote contribution.
+*
+* Hand-maintained twin of the artifacts `@deepseek-ai/dsh-typert-generator`
+* emits for monorepo packages (see `packages/api/session-controller/lib/typert.remote-client.js`
+* in the pinned Harness): one invocation descriptor plus zod strict codecs.
+* The single `mdPreview/read` method takes its session identity as an
+* explicit first business argument (the `goals/*` calling convention), so the
+* browser face works from any client context, not only agent-scoped ones.
+*/
+const readSessionId$schema = z.string();
+const readPath$schema = z.string().min(1);
+const readResult$schema = z.object({
+	path: z.string(),
+	content: z.string()
+});
+/** The MdPreview contribution mounted by this package's browser entry. */
+const TYPERT_REMOTE = {
+	package: "@benz-ai-x/dsh-md-preview",
+	descriptors: [{
+		id: "@benz-ai-x/dsh-md-preview#mdPreview/read",
+		service: "mdPreview",
+		namespace: "mdPreview",
+		method: "read",
+		invocation: { kind: "direct" },
+		parameters: [{
+			name: "sessionId",
+			wire: "sessionId",
+			source: "json",
+			codec: {
+				mode: "strict",
+				typeSymbol: "@deepseek-ai/dsh-session/types#SessionId",
+				schema: readSessionId$schema
+			}
+		}, {
+			name: "path",
+			wire: "path",
+			source: "json",
+			codec: {
+				mode: "strict",
+				typeSymbol: "@benz-ai-x/dsh-md-preview#mdPreview/read:path",
+				schema: readPath$schema
+			}
+		}],
+		cancellation: { parameter: "signal" },
+		result: {
+			mode: "strict",
+			typeSymbol: "@benz-ai-x/dsh-md-preview#mdPreview/read:result",
+			schema: readResult$schema
+		}
+	}]
+};
+//#endregion
+export { TYPERT_REMOTE, TYPERT_REMOTE as default };
+
+//# sourceMappingURL=remote-client.js.map

package/lib/types/client/MdChips.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The markdown-aware produced-files chip row, contributed into the
+ * `conversation.chat.turnTail` chain. This entry claims only turns that
+ * produced at least one markdown document and then renders the complete row:
+ * markdown chips open the in-browser preview panel, every other produced
+ * file keeps the shipped external-open behavior. Turns without markdown stay
+ * entirely with ui-deliverables' row.
+ */
+import type { InjectFace, PropsLocale } from '@deepseek-ai/dsh-client-ui-slots';
+import type { TurnTailOwnerProps } from '@deepseek-ai/dsh-client-ui-chat/client';
+import type { MdTurnFiles } from './turn-files.ts';
+/** Panel admission for one conversation session. */
+export interface MdChipsInjected {
+    /** Open the preview panel for a markdown document of this session. */
+    openPreview(path: string): void;
+}
+/** Matched paths plus the shipped file opener and the locale seat. */
+export type MdChipsProps = Pick<TurnTailOwnerProps, 'openFile'> & {
+    matched: MdTurnFiles;
+} & PropsLocale<'md-preview'> & InjectFace<MdChipsInjected>;
+/**
+ * Render one turn's produced files as chips; markdown opens the preview.
+ * @param props - selector-matched paths, the chat view's file opener, preview
+ * admission, and the locale seat.
+ * @returns the produced-files chip row.
+ */
+export declare function MdChips({ matched, openFile, openPreview, t }: MdChipsProps): import("react").JSX.Element | null;
+//# sourceMappingURL=MdChips.d.ts.map

package/lib/types/client/PreviewAction.d.ts

@@ -0,0 +1,15 @@
+import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
+/** Panel admission for one conversation session. */
+export interface PreviewActionInjected {
+    /** Open the preview panel for a markdown document of this session. */
+    openPreview(path: string): void;
+}
+/** Full composed action props: the owner message id plus the locale seat. */
+export type PreviewActionProps = PropsRuntime<'conversation.chat.assistant-actions'> & PropsLocale<'md-preview'> & InjectFace<PreviewActionInjected>;
+/**
+ * Render the preview-documents action for one finalized assistant message.
+ * @param props - the durable message id, preview admission, and locale seat.
+ * @returns the action button with its picker, or null without markdown.
+ */
+export declare function PreviewAction({ messageId, useChat, openPreview, t }: PreviewActionProps): import("react").JSX.Element | null;
+//# sourceMappingURL=PreviewAction.d.ts.map

package/lib/types/client/PreviewOverlay.d.ts

@@ -0,0 +1,26 @@
+import type { SnapshotStore } from '@deepseek-ai/dsh-client-store';
+import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
+import type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol';
+import type { SessionId } from '@deepseek-ai/dsh-session/types';
+import type { MdPreviewFile } from '../protocol.ts';
+import type { MdPreviewState } from './preview-state.ts';
+/** Read RPC and panel dismissal, created in the plugin's apply world. */
+export interface PreviewOverlayInjected {
+    hooks: {
+        /** Current preview target; null while the panel is closed. */
+        previewTarget: SnapshotStore<MdPreviewState>;
+    };
+    /** Dismiss the panel and drop the target. */
+    close(): void;
+    /** One bounded read; the transport carries the AbortSignal. */
+    read(sessionId: SessionId, path: string, signal: AbortSignal): Promise<RemoteResult<MdPreviewFile>>;
+}
+/** Full composed panel props. */
+export type PreviewOverlayProps = PropsRuntime<'shell.overlay'> & InjectFace<PreviewOverlayInjected> & PropsLocale<'md-preview'>;
+/**
+ * Render the preview panel for the current target.
+ * @param props - target hook, read RPC, dismissal, and the locale seat.
+ * @returns the docked panel, or null while closed.
+ */
+export declare function PreviewOverlay({ usePreviewTarget, close, read, t }: PreviewOverlayProps): import("react").JSX.Element | null;
+//# sourceMappingURL=PreviewOverlay.d.ts.map

package/lib/types/client/index.d.ts

@@ -0,0 +1,13 @@
+/** Browser entry binding the MdPreview Remote artifact to its Client UI. */
+import type { Context as ClientContext } from '@deepseek-ai/cordis';
+export { inject } from './mount.ts';
+export type { MdChipsInjected } from './MdChips.tsx';
+export type { PreviewActionInjected } from './PreviewAction.tsx';
+export type { PreviewOverlayInjected } from './PreviewOverlay.tsx';
+/**
+ * Mount the MdPreview Remote contribution and its browser UI.
+ * @param ctx - client root context.
+ * @returns disposer removing the namespace and every UI registration.
+ */
+export declare function apply(ctx: ClientContext): Promise<() => Promise<void>>;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/client/locale.d.ts

@@ -0,0 +1,24 @@
+/** `md-preview` namespace dictionaries. */
+/** Dictionary namespace owned by this plugin. */
+export declare const NS = "md-preview";
+/** Simplified Chinese dictionary (the key-set source of truth). */
+export declare const zh: {
+    'panel.title': string;
+    'panel.close': string;
+    'panel.loading': string;
+    'panel.empty': string;
+    'panel.error': string;
+    'panel.retry': string;
+    'chip.preview': string;
+    'chip.open': string;
+    'action.label': string;
+    'action.open': string;
+    copy: string;
+    copied: string;
+    footnotes: string;
+};
+/** English dictionary (same key set). */
+export declare const en: Record<MdPreviewKey, string>;
+/** Union of this namespace's dictionary keys. */
+export type MdPreviewKey = keyof typeof zh;
+//# sourceMappingURL=locale.d.ts.map

package/lib/types/client/message-files.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Message-id to produced-markdown lookup over the Chat snapshot. Pure and
+ * bounded by the loaded window: the per-message preview action finds the
+ * turn-tail node whose closing assistant message owns the id and reads the
+ * same `deliverables` Turn data the chip row uses. The returned references
+ * ride the snapshot's structural sharing, so selectors stay identity-stable
+ * across unrelated publications.
+ */
+import type { ChatSnapshot } from '@deepseek-ai/dsh-client-ui-chat/client';
+/** Deliverables Turn data plus the closing seq that fences it. */
+export interface OwnedDeliverables {
+    /** Raw `deliverables` Turn data reference (structurally shared). */
+    readonly produced: readonly {
+        readonly seq: number;
+        readonly path: string;
+    }[];
+    /** Closing assistant seq; later settlements are excluded downstream. */
+    readonly seq: number;
+}
+/**
+ * Find the deliverables data of the turn whose closing message owns an id.
+ * @param snapshot - current Chat target snapshot (loaded window only).
+ * @param messageId - durable assistant message id from the action row.
+ * @returns the turn's produced entries and closing seq, or undefined outside
+ * the window or when the turn produced nothing.
+ */
+export declare function ownedDeliverables(snapshot: ChatSnapshot, messageId: string): OwnedDeliverables | undefined;
+/**
+ * Previewable markdown documents of one turn, first-seen order, seq-cutoff applied.
+ * @param owned - deliverables data and closing seq of one turn.
+ * @returns previewable paths in first-seen order.
+ */
+export declare function previewableOf(owned: OwnedDeliverables): readonly string[];
+//# sourceMappingURL=message-files.d.ts.map

package/lib/types/client/mount.d.ts

@@ -0,0 +1,19 @@
+/** Source-safe MdPreview browser registration and Remote mount lifecycle. */
+import type { Context as ClientContext } from '@deepseek-ai/cordis';
+import type { TypertRemoteContribution } from '@deepseek-ai/dsh-typert-protocol';
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+    interface LocaleNamespaceMap {
+        /** MdPreview panel, chips, and action copy. */
+        'md-preview': import('./locale.ts').MdPreviewKey;
+    }
+}
+/** Required browser services for the Remote mount, slots, and locale. */
+export declare const inject: string[];
+/**
+ * Mount the MdPreview Remote contribution, then register its browser UI.
+ * @param ctx - client root context carrying the Remote table, slots, and locale.
+ * @param contribution - this package's Remote descriptors.
+ * @returns disposer for both the UI registrations and the Remote namespace.
+ */
+export declare function mountMdPreview(ctx: ClientContext, contribution: TypertRemoteContribution): Promise<() => Promise<void>>;
+//# sourceMappingURL=mount.d.ts.map

package/lib/types/client/preview-state.d.ts

@@ -0,0 +1,21 @@
+/** Preview target state shared by the conversation entries and the panel. */
+import type { SessionId } from '@deepseek-ai/dsh-session/types';
+/** The document the preview panel currently shows; null while closed. */
+export interface MdPreviewTarget {
+    readonly sessionId: SessionId;
+    readonly path: string;
+}
+/** Whole preview panel state: the current target or the closed state. */
+export type MdPreviewState = MdPreviewTarget | null;
+/** Create the plugin-owned preview target store. */
+export declare function createPreviewStore(): import("@deepseek-ai/dsh-client-store").SnapshotStore<MdPreviewState>;
+/** Trailing path segment; the part that identifies a file at a glance. */
+export declare function basename(path: string): string;
+/** Whether the client treats a produced path as a previewable markdown document. */
+export declare function isPreviewable(path: string): boolean;
+/** Produced paths of one turn split into previewable and externally-opened groups, first-seen order preserved. */
+export declare function splitPreviewable(paths: readonly string[]): {
+    previewable: string[];
+    other: string[];
+};
+//# sourceMappingURL=preview-state.d.ts.map

package/lib/types/client/styles.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Panel and chip styles. The DSH client shell claims `<style>` tags a plugin
+ * injects during materialization (tagged with data-plugin), so a plain
+ * one-time injection is lifecycle-correct without a CSS-modules pipeline.
+ * Colors ride the shared dsw alias tokens so light/dark themes both hold.
+ */
+/** Inject the plugin stylesheet once per browser document. */
+export declare function ensureStyles(): void;
+//# sourceMappingURL=styles.d.ts.map

package/lib/types/client/turn-files.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Turn-scoped produced-file readers for the browser half. Client-only and
+ * deliverables-free at runtime: the vocabulary comes from the `deliverables`
+ * Conversation Turn data published by ui-deliverables (absent when that
+ * plugin is not composed — the selector declines and no chips render).
+ */
+import type { TurnTailOwnerProps } from '@deepseek-ai/dsh-client-ui-chat/client';
+import type { TurnLocation } from '@deepseek-ai/dsh-client-ui-conversation/client';
+/** Produced paths of one closing Turn, first-seen order, seq-cutoff applied. */
+export declare function producedPaths(turn: TurnLocation, seq: number): readonly string[];
+/** Matched value for the turn-tail chain entry. */
+export interface MdTurnFiles {
+    /** Markdown documents this turn produced (open the preview panel). */
+    readonly previewable: readonly string[];
+    /** Every other produced file (keeps the shipped external-open behavior). */
+    readonly other: readonly string[];
+}
+/**
+ * Claim the turn-tail chain only for turns that produced at least one
+ * previewable markdown document. Claimed turns render this plugin's chip row
+ * (a superset of the shipped one); all other turns stay with ui-deliverables.
+ * @param owner - turn-tail owner currency for the closing assistant message.
+ * @returns the split paths when the turn produced markdown, otherwise null.
+ */
+export declare function selectMdTurnFiles(owner: TurnTailOwnerProps): MdTurnFiles | null;
+//# sourceMappingURL=turn-files.d.ts.map

package/lib/types/config.d.ts

@@ -0,0 +1,12 @@
+/** Deployment configuration for the MdPreview Host service. */
+import z from '@deepseek-ai/schemastery';
+/** Runtime-validated MdPreview configuration. */
+export interface Config {
+    /** Largest file size the service will read and return, in bytes. */
+    maxBytes: number;
+    /** Extensions (lowercased, dot-prefixed) eligible for preview. */
+    allowedExtensions: string[];
+}
+/** Standard Schema twin of {@link Config}; defaults live here, not in code. */
+export declare const Config: z<Config>;
+//# sourceMappingURL=config.d.ts.map

package/lib/types/constants.d.ts

@@ -0,0 +1,6 @@
+/** Schema-free deployment constants shared by Host config and browser face. */
+/** Universal default: 1 MiB keeps a preview read bounded for any deployment. */
+export declare const DEFAULT_MAX_BYTES = 1048576;
+/** Markdown documents are the previewable vocabulary; deployments may widen it. */
+export declare const DEFAULT_ALLOWED_EXTENSIONS: readonly [".md", ".markdown"];
+//# sourceMappingURL=constants.d.ts.map

package/lib/types/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * dsh-md-preview Host entry: registers the MdPreview Remote service. The
+ * browser half lives at `./client` (see `dsh.client` in package.json); this
+ * module only owns the Host-side read authority.
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { type Config as ConfigType } from './config.ts';
+export { Config } from './config.ts';
+export type { Config as ConfigInterface } from './config.ts';
+export { DEFAULT_ALLOWED_EXTENSIONS, DEFAULT_MAX_BYTES } from './constants.ts';
+export { isAllowedExtension, MdPreviewService } from './remote.ts';
+export type { MdPreviewFile, MdPreviewFailureCode, MdPreviewReadRequest } from './protocol.ts';
+export { MD_PREVIEW_FAILURE_CODES } from './protocol.ts';
+export declare const name = "md-preview";
+/** Host services the read authority depends on. */
+export declare const inject: string[];
+/**
+ * Mount the MdPreview Host Remote.
+ * @param ctx - Host Loader context.
+ * @param config - Loader-validated deployment configuration (schema defaults
+ * fill any fields the profile patch omits).
+ */
+export declare function apply(ctx: Context, config?: ConfigType): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/protocol.d.ts

@@ -0,0 +1,41 @@
+/** Wire-level vocabulary shared by the Host service and the browser face. */
+import type { SessionId } from '@deepseek-ai/dsh-session/types';
+/** One rendered-preview payload: the requested path and its full text content. */
+export interface MdPreviewFile {
+    /** The path exactly as requested by the caller (tool-produced spelling). */
+    readonly path: string;
+    /** The complete file content, capped by the configured byte limit. */
+    readonly content: string;
+}
+/** Stable failure codes carried by `RemoteError` across the wire. */
+export declare const MD_PREVIEW_FAILURE_CODES: readonly ["md-preview/bad-request", "md-preview/unknown-session", "md-preview/no-workspace", "md-preview/unsupported-extension", "md-preview/forbidden", "md-preview/not-found", "md-preview/too-large", "md-preview/unavailable"];
+/** One stable MdPreview failure code. */
+export type MdPreviewFailureCode = (typeof MD_PREVIEW_FAILURE_CODES)[number];
+declare module '@deepseek-ai/dsh-typert-protocol' {
+    interface RemoteErrorDetailsMap {
+        /** The request path was empty or otherwise unusable. */
+        'md-preview/bad-request': {};
+        /** The named Session does not exist. */
+        'md-preview/unknown-session': {};
+        /** The Session carries no working directory to root the read. */
+        'md-preview/no-workspace': {};
+        /** The target is not a previewable markdown document. */
+        'md-preview/unsupported-extension': {};
+        /** The resolved path escapes the session workspace. */
+        'md-preview/forbidden': {};
+        /** Nothing exists at the requested path. */
+        'md-preview/not-found': {};
+        /** The file exceeds the configured byte cap. */
+        'md-preview/too-large': {};
+        /** The read itself failed. */
+        'md-preview/unavailable': {};
+    }
+}
+/** Read request shape as the browser face types it (wire fields stay flat). */
+export interface MdPreviewReadRequest {
+    /** Owning session whose workspace roots the read. */
+    readonly sessionId: SessionId;
+    /** Path as it appeared in the conversation (absolute or workspace-relative). */
+    readonly path: string;
+}
+//# sourceMappingURL=protocol.d.ts.map

package/lib/types/remote.d.ts

@@ -0,0 +1,43 @@
+/**
+ * MdPreview Host Remote: reads one markdown document from a session's
+ * workspace for in-browser rendering. The read is deliberately scoped: the
+ * path must resolve inside the owning session's working directory, carry an
+ * allowed extension, and stay under the configured byte cap.
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+import type { SessionId } from '@deepseek-ai/dsh-session/types';
+import type { Config } from './config.ts';
+import type { MdPreviewFile } from './protocol.ts';
+/** Whether a candidate extension passes the configured allowlist. */
+export declare function isAllowedExtension(path: string, allowedExtensions: readonly string[]): boolean;
+/**
+ * Host Remote service exposing `mdPreview/read` over the Gateway.
+ */
+export declare class MdPreviewService extends TypertRemoteService {
+    static inject: string[];
+    /**
+     * Validated deployment configuration. TypeScript-private (not a `#` field):
+     * Cordis wraps plugin instances in proxies, and private fields fail their
+     * brand check through a proxy boundary.
+     */
+    private readonly config;
+    /**
+     * Bind the service to its Host context and validated configuration.
+     * @param ctx - Host context carrying fs, typert, and sessions services.
+     * @param config - Loader-validated deployment configuration.
+     */
+    constructor(ctx: Context, config: Config);
+    /**
+     * Read one previewable file from the session's workspace.
+     * @param sessionId - owning session; its header cwd roots the read.
+     * @param path - path as it appeared in the conversation.
+     * @param signal - caller cancellation carried through every fs call.
+     * @returns the path with its complete text content.
+     * @throws RemoteError with a stable MdPreview failure code.
+     */
+    read(sessionId: SessionId, path: string, signal: AbortSignal): Promise<MdPreviewFile>;
+    /** Resolve one path against the workspace, with a plain not-found mapping. */
+    private resolveWorkspacePath;
+}
+//# sourceMappingURL=remote.d.ts.map

package/lib/types/typert/remote-client.d.ts

@@ -0,0 +1,18 @@
+import type { RemoteResult, TypertRemoteContribution } from '@deepseek-ai/dsh-typert-protocol';
+import type { SessionId } from '@deepseek-ai/dsh-session/types';
+import type { MdPreviewFile } from '../protocol.ts';
+/** Browser face of the mounted `mdPreview` Remote namespace. */
+export interface MdPreviewRemote {
+    /** Read one previewable document of a session's workspace. */
+    read(sessionId: SessionId, path: string, signal?: AbortSignal): Promise<RemoteResult<MdPreviewFile>>;
+}
+declare module '@deepseek-ai/dsh-typert-protocol' {
+    interface TypertRemoteNamespaceMap {
+        /** Markdown preview reads over the Gateway. */
+        mdPreview: MdPreviewRemote;
+    }
+}
+/** The MdPreview contribution mounted by this package's browser entry. */
+export declare const TYPERT_REMOTE: TypertRemoteContribution;
+export default TYPERT_REMOTE;
+//# sourceMappingURL=remote-client.d.ts.map