@deepseek-ai/dsh-api-remotes 0.1.1-rc.2 → 0.1.2-alpha.2

package/lib/types/remote-events.d.ts

@@ -6,12 +6,62 @@
  * type-only.
  */
 /**
- * Host events this application forwards to consumers verbatim: no projection,
- * no redaction, no renaming. The wire name is the Host cordis event name and
- * the payload is its argument list, so this array is simultaneously the whole
- * control point over what a consumer can receive and the legal key set of
- * `ctx.remote.$on`. Forwarding one more event is an entry here and nothing
- * else.
+ * Host events this application forwards without renaming. The explicit mode is
+ * both the Host dispatch strategy and the legal key set of `ctx.remote.$on`.
  */
-export declare const API_REMOTE_FORWARDED_EVENTS: readonly ["agent-preset/selected", "commands/change", "credentials/reference-updated", "cordis/request-run", "cordis/request-run-resolved", "cordis/dynamic-package", "cordis/dynamic-retract", "cordis/inspect-query", "cordis/inspect-query-resolved", "llm/adapters-updated", "settings/document-updated"];
+export declare const API_REMOTE_FORWARDED_EVENTS: readonly [{
+    readonly event: "agent-preset/selected";
+    readonly mode: "emit";
+}, {
+    readonly event: "approval/request";
+    readonly mode: "waterfall";
+}, {
+    readonly event: "api-session/activity";
+    readonly mode: "emit";
+}, {
+    readonly event: "api-session/added";
+    readonly mode: "emit";
+}, {
+    readonly event: "api-session/error";
+    readonly mode: "emit";
+}, {
+    readonly event: "api-session/removed";
+    readonly mode: "emit";
+}, {
+    readonly event: "api-session/status";
+    readonly mode: "emit";
+}, {
+    readonly event: "commands/change";
+    readonly mode: "emit";
+}, {
+    readonly event: "credentials/reference-updated";
+    readonly mode: "emit";
+}, {
+    readonly event: "cordis/request-run";
+    readonly mode: "emit";
+}, {
+    readonly event: "cordis/request-run-resolved";
+    readonly mode: "emit";
+}, {
+    readonly event: "cordis/dynamic-package";
+    readonly mode: "emit";
+}, {
+    readonly event: "cordis/dynamic-retract";
+    readonly mode: "emit";
+}, {
+    readonly event: "cordis/inspect-query";
+    readonly mode: "emit";
+}, {
+    readonly event: "cordis/inspect-query-resolved";
+    readonly mode: "emit";
+}, {
+    readonly event: "llm/adapters-updated";
+    readonly mode: "emit";
+}, {
+    readonly event: "settings/document-updated";
+    readonly mode: "emit";
+}, {
+    readonly event: "user-questions/request";
+    readonly mode: "waterfall";
+}];
 //# sourceMappingURL=remote-events.d.ts.map

package/lib/types/remote-events.js

@@ -6,24 +6,27 @@
  * type-only.
  */
 /**
- * Host events this application forwards to consumers verbatim: no projection,
- * no redaction, no renaming. The wire name is the Host cordis event name and
- * the payload is its argument list, so this array is simultaneously the whole
- * control point over what a consumer can receive and the legal key set of
- * `ctx.remote.$on`. Forwarding one more event is an entry here and nothing
- * else.
+ * Host events this application forwards without renaming. The explicit mode is
+ * both the Host dispatch strategy and the legal key set of `ctx.remote.$on`.
  */
 export const API_REMOTE_FORWARDED_EVENTS = [
-    'agent-preset/selected',
-    'commands/change',
-    'credentials/reference-updated',
-    'cordis/request-run',
-    'cordis/request-run-resolved',
-    'cordis/dynamic-package',
-    'cordis/dynamic-retract',
-    'cordis/inspect-query',
-    'cordis/inspect-query-resolved',
-    'llm/adapters-updated',
-    'settings/document-updated',
+    { event: 'agent-preset/selected', mode: 'emit' },
+    { event: 'approval/request', mode: 'waterfall' },
+    { event: 'api-session/activity', mode: 'emit' },
+    { event: 'api-session/added', mode: 'emit' },
+    { event: 'api-session/error', mode: 'emit' },
+    { event: 'api-session/removed', mode: 'emit' },
+    { event: 'api-session/status', mode: 'emit' },
+    { event: 'commands/change', mode: 'emit' },
+    { event: 'credentials/reference-updated', mode: 'emit' },
+    { event: 'cordis/request-run', mode: 'emit' },
+    { event: 'cordis/request-run-resolved', mode: 'emit' },
+    { event: 'cordis/dynamic-package', mode: 'emit' },
+    { event: 'cordis/dynamic-retract', mode: 'emit' },
+    { event: 'cordis/inspect-query', mode: 'emit' },
+    { event: 'cordis/inspect-query-resolved', mode: 'emit' },
+    { event: 'llm/adapters-updated', mode: 'emit' },
+    { event: 'settings/document-updated', mode: 'emit' },
+    { event: 'user-questions/request', mode: 'waterfall' },
 ];
 //# sourceMappingURL=remote-events.js.map

package/lib/types/types.d.ts

@@ -10,7 +10,7 @@
  */
 import type { API_REMOTE_FORWARDED_EVENTS } from './remote-events.ts';
 /** Type projection of the allowlist; the consumer and the Host read this one. */
-export type ApiRemoteForwardedEvent = typeof API_REMOTE_FORWARDED_EVENTS[number];
+export type ApiRemoteForwardedEvent = typeof API_REMOTE_FORWARDED_EVENTS[number]['event'];
 declare module '@deepseek-ai/dsh-typert-protocol' {
     interface TypertRemoteEventSelection extends Record<ApiRemoteForwardedEvent, true> {
     }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-api-remotes",
-  "description": "Remote BFF assembly and Host Agent/Session lookup policy",
-  "version": "0.1.1-rc.2",
+  "description": "Remote BFF assembly for application-selected Host capabilities",
+  "version": "0.1.2-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -51,47 +51,38 @@
     "lib/types/**/*.d.ts"
   ],
   "dependencies": {
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.1-rc.2"
+    "@deepseek-ai/dsh-deque": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-session": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-util-values": "^0.1.2-alpha.2"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-agent": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-api-gateway": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-commands": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-file-reference": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-goal": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-plugin-inventory": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-cordis-host-runner": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-message-feedback": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-persistence": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-reference": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-typert-registry": "^0.1.1-rc.2",
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-session": "^0.1.1-rc.2"
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-scope": "^0.1.2-alpha.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-agent-presets": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-api-gateway": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-commands": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-cordis-host-runner": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-file-reference": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-goal": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-plugin-inventory": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-message-feedback": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-persistence": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-reference": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-typert-registry": "^0.1.1-rc.2",
-    "@deepseek-ai/cordis": "^4.0.1"
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-api-gateway": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-api-settings-controller": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-api-workspace-controller": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-credentials": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-commands": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-host-plugin-inventory": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-goal": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-message-feedback": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-session-reference": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-file-reference": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-subagent": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-user-approval": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-user-questions": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-connection": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-settings": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-scope": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-api-session-controller": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-cordis-host-runner": "^0.1.2-alpha.2"
   },
   "scripts": {
     "bundle": "tsdown",

package/lib/types/agent-lookup.d.ts

@@ -1,95 +0,0 @@
-/** Host BFF policy for resolving Remote Agent and Session identities. */
-import type { Context } from '@deepseek-ai/cordis';
-import type { Agent, AgentOptions, AgentSetup } from '@deepseek-ai/dsh-agent';
-import type { Session, SessionEvent, SessionHeader, SessionId } from '@deepseek-ai/dsh-session';
-/** Caller-facing failures preserved by the Gateway's RPC adapter. */
-export type ApiRemoteLookupError = {
-    readonly code: 'agent-busy';
-    readonly message: string;
-    readonly details: {
-        readonly reason: string;
-    };
-} | {
-    readonly code: 'session-not-found';
-    readonly message: string;
-    readonly details: {
-        readonly sessionId: SessionId;
-    };
-} | {
-    readonly code: 'internal';
-    readonly message: string;
-    readonly details: Record<never, never>;
-};
-/** Result of resolving one session identity to its live Agent. */
-export type ApiRemoteAgentResult = {
-    readonly agent: Agent;
-} | {
-    readonly error: ApiRemoteLookupError;
-};
-/** Resume configuration supplied by the owning Host composition. */
-export interface ApiRemoteAgentOptions {
-    /** Read the per-Agent defaults when a cold identity must resume. */
-    readonly agentOptions?: () => AgentOptions;
-    /**
-     * Build the Host-specific Agent-scope composition completed before
-     * publication. Keyed by the resumed session itself because what a Host
-     * installs may depend on what that session recorded: an agent preset fixes
-     * the tools its history was produced under, so rebuilding it under another
-     * composition would replay tool calls the agent can no longer make. The
-     * events come along because a session's own record of such a choice may be
-     * an event rather than a header field.
-     * @param session - the resumed session's persisted header and event log.
-     * @returns the Agent-scope setup to run before publication.
-     */
-    readonly setup?: (session: {
-        meta: SessionHeader;
-        events: readonly SessionEvent[];
-    }) => AgentSetup | Promise<AgentSetup>;
-}
-/** Cold identity absent from the durable session store. */
-export declare class ApiRemoteSessionNotFound extends Error {
-}
-/** Session identity whose lifecycle belongs to subagent routing. */
-export declare class ApiRemoteSubagentSessionOwnership extends Error {
-    readonly sessionId: SessionId;
-    /**
-     * Construct the ownership fence.
-     * @param sessionId - identity reserved to subagent routing.
-     */
-    constructor(sessionId: SessionId);
-}
-/**
- * Test whether generic Host routing must leave an identity to subagent routing.
- * @param ctx - Host Context carrying the live Agent registry.
- * @param session - attached or live Session metadata.
- * @param agent - live Agent when one is registered.
- * @returns whether generic Remote and legacy API calls must reject the identity.
- */
-export declare function hasApiRemoteSubagentOwner(ctx: Context, session: Pick<Session, 'header'>, agent: Agent | undefined): boolean;
-/**
- * Build the stable caller-facing ownership rejection.
- * @param sessionId - identity reserved to subagent routing.
- * @returns the existing `agent-busy` RPC shape.
- */
-export declare function apiRemoteSubagentOwnershipError(sessionId: SessionId): ApiRemoteLookupError;
-/**
- * Inspect one cold served session without repairing, resuming, or publishing it.
- * @param ctx - Host Context carrying the optional persistence provider.
- * @param sessionId - durable identity to inspect.
- * @returns detached metadata and events for a servable session.
- * @throws {@link ApiRemoteSessionNotFound} when the identity has no project-backed session.
- */
-export declare function inspectApiRemoteSession(ctx: Context, sessionId: SessionId): Promise<{
-    meta: SessionHeader;
-    events: SessionEvent[];
-}>;
-/**
- * Create the Host's shared Agent resolver and configure Agent/Session Typert lookups.
- * Live Agents are reused, ordinary cold sessions resume once per identity, and
- * subagent-owned identities retain the legacy `agent-busy` fence.
- * @param ctx - owning Host Context.
- * @param options - defaults and Agent-scope setup used only for cold resume.
- * @returns resolver shared by legacy API Proxy methods and Typert lookups.
- */
-export declare function createApiRemoteAgentResolver(ctx: Context, options: ApiRemoteAgentOptions): (sessionId: SessionId) => Promise<ApiRemoteAgentResult>;
-//# sourceMappingURL=agent-lookup.d.ts.map

package/lib/types/agent-lookup.js

@@ -1,166 +0,0 @@
-/** Host BFF policy for resolving Remote Agent and Session identities. */
-import { TypertLookupFailure } from '@deepseek-ai/dsh-typert-protocol';
-/** Cold identity absent from the durable session store. */
-export class ApiRemoteSessionNotFound extends Error {
-}
-/** Session identity whose lifecycle belongs to subagent routing. */
-export class ApiRemoteSubagentSessionOwnership extends Error {
-    sessionId;
-    /**
-     * Construct the ownership fence.
-     * @param sessionId - identity reserved to subagent routing.
-     */
-    constructor(sessionId) {
-        super(`session "${sessionId}" is a subagent session; use subagent delivery`);
-        this.sessionId = sessionId;
-    }
-}
-/**
- * Test whether generic Host routing must leave an identity to subagent routing.
- * @param ctx - Host Context carrying the live Agent registry.
- * @param session - attached or live Session metadata.
- * @param agent - live Agent when one is registered.
- * @returns whether generic Remote and legacy API calls must reject the identity.
- */
-export function hasApiRemoteSubagentOwner(ctx, session, agent) {
-    if (session.header.origin === 'subagent')
-        return true;
-    const parentId = session.header.parentSession;
-    if (parentId === undefined || agent === undefined)
-        return false;
-    const parent = ctx.agents.get(parentId);
-    return parent !== undefined && ctx.agents.isOwnedBy(agent.id, parent);
-}
-/**
- * Build the stable caller-facing ownership rejection.
- * @param sessionId - identity reserved to subagent routing.
- * @returns the existing `agent-busy` RPC shape.
- */
-export function apiRemoteSubagentOwnershipError(sessionId) {
-    return {
-        code: 'agent-busy',
-        message: `session "${sessionId}" is owned by subagent routing`,
-        details: { reason: 'use subagent delivery for this child session' },
-    };
-}
-/**
- * Inspect one cold served session without repairing, resuming, or publishing it.
- * @param ctx - Host Context carrying the optional persistence provider.
- * @param sessionId - durable identity to inspect.
- * @returns detached metadata and events for a servable session.
- * @throws {@link ApiRemoteSessionNotFound} when the identity has no project-backed session.
- */
-export async function inspectApiRemoteSession(ctx, sessionId) {
-    const persistence = ctx.get('sessionPersistence');
-    if (persistence === undefined) {
-        throw new Error('session persistence is not configured (load a dsh-session-persistence backend)');
-    }
-    const meta = (await persistence.list()).find(candidate => candidate.id === sessionId);
-    if (meta === undefined || meta.cwd === undefined) {
-        throw new ApiRemoteSessionNotFound(`session "${sessionId}" not found`);
-    }
-    const inspected = await persistence.inspect(sessionId);
-    if (inspected.meta.cwd === undefined) {
-        throw new ApiRemoteSessionNotFound(`session "${sessionId}" not found`);
-    }
-    return { meta: inspected.meta, events: [...inspected.events] };
-}
-/**
- * Create the Host's shared Agent resolver and configure Agent/Session Typert lookups.
- * Live Agents are reused, ordinary cold sessions resume once per identity, and
- * subagent-owned identities retain the legacy `agent-busy` fence.
- * @param ctx - owning Host Context.
- * @param options - defaults and Agent-scope setup used only for cold resume.
- * @returns resolver shared by legacy API Proxy methods and Typert lookups.
- */
-export function createApiRemoteAgentResolver(ctx, options) {
-    const resumes = new Map();
-    const fencedLiveAgent = (sessionId) => {
-        const live = ctx.agents.get(sessionId);
-        if (live === undefined)
-            return undefined;
-        if (hasApiRemoteSubagentOwner(ctx, live.session, live)) {
-            return { error: apiRemoteSubagentOwnershipError(sessionId) };
-        }
-        return { agent: live };
-    };
-    const agentFor = async (sessionId) => {
-        const fenced = fencedLiveAgent(sessionId);
-        if (fenced !== undefined)
-            return fenced;
-        const attached = ctx.sessions.get(sessionId);
-        if (attached !== undefined && hasApiRemoteSubagentOwner(ctx, attached, undefined)) {
-            return { error: apiRemoteSubagentOwnershipError(sessionId) };
-        }
-        let resume = resumes.get(sessionId);
-        if (resume === undefined) {
-            resume = (async () => {
-                try {
-                    const inspected = await inspectApiRemoteSession(ctx, sessionId);
-                    if (hasApiRemoteSubagentOwner(ctx, { header: inspected.meta }, undefined)) {
-                        throw new ApiRemoteSubagentSessionOwnership(sessionId);
-                    }
-                    // Built from the inspected session before the published re-checks
-                    // below, so those stay adjacent to `resume` and a Host setup that
-                    // awaits (composing a preset, say) does not widen the collision
-                    // window.
-                    const setup = options.setup === undefined ? undefined : await options.setup(inspected);
-                    const publishedSession = ctx.sessions.get(sessionId);
-                    const publishedAgent = ctx.agents.get(sessionId);
-                    if (publishedSession !== undefined
-                        && hasApiRemoteSubagentOwner(ctx, publishedSession, publishedAgent)) {
-                        throw new ApiRemoteSubagentSessionOwnership(sessionId);
-                    }
-                    const handle = await ctx.agents.resume({
-                        resumeSessionId: sessionId,
-                        ...options.agentOptions === undefined ? {} : { agentOptions: options.agentOptions() },
-                        ...setup === undefined ? {} : { setup },
-                    });
-                    return handle.agent;
-                }
-                finally {
-                    resumes.delete(sessionId);
-                }
-            })();
-            resumes.set(sessionId, resume);
-        }
-        try {
-            return { agent: await resume };
-        }
-        catch (error) {
-            if (error instanceof ApiRemoteSessionNotFound) {
-                return { error: { code: 'session-not-found', message: error.message, details: { sessionId } } };
-            }
-            if (error instanceof ApiRemoteSubagentSessionOwnership) {
-                return { error: apiRemoteSubagentOwnershipError(error.sessionId) };
-            }
-            const fenced = fencedLiveAgent(sessionId);
-            if (fenced !== undefined)
-                return fenced;
-            const attached = ctx.sessions.get(sessionId);
-            if (attached !== undefined && hasApiRemoteSubagentOwner(ctx, attached, undefined)) {
-                return { error: apiRemoteSubagentOwnershipError(sessionId) };
-            }
-            return {
-                error: {
-                    code: 'internal',
-                    message: `resume failed for session "${sessionId}": ${String(error)}`,
-                    details: {},
-                },
-            };
-        }
-    };
-    ctx.inject(['typert'], (typeCtx) => {
-        const resolveAgent = async (sessionId) => {
-            const found = await agentFor(sessionId);
-            if ('error' in found)
-                throw new TypertLookupFailure(found.error);
-            return found.agent;
-        };
-        typeCtx.typert.lookups.configure('agent', resolveAgent);
-        typeCtx.typert.lookups.configure('session', async (sessionId) => (await resolveAgent(sessionId)).session);
-        typeCtx.typert.contexts.configureHost('agent', async (sessionId) => (await resolveAgent(sessionId)).ctx);
-    });
-    return agentFor;
-}
-//# sourceMappingURL=agent-lookup.js.map