@deepseek-ai/dsh-api-session-controller 0.1.3-alpha.2 → 0.1.5-alpha.1

package/lib/typert.remote-client.js

@@ -99,6 +99,10 @@ const _deepseek_ai_dsh_api_session_controller_session_control_result$schema = z.
   'projections': z.record(z.intersection(z.string(), z.unknown()), z.object({
   'asOfSeq': z.number().readonly(),
   'values': z.intersection(z.object({
+  'inbox': z.object({
+  'next-turn': z.array(z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema4)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema4))])).readonly(),
+  'next-step': z.array(z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema4)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema4))])).readonly(),
+}).optional(),
   'agentPreset': z.union([z.literal(null), z.string()]).optional(),
   'title': z.union([z.literal(null), z.string()]).optional(),
   'todos': z.union([z.literal(null), z.array(z.object({
@@ -227,12 +231,8 @@ const _deepseek_ai_dsh_api_session_controller_session_follow_result$schema = z.u
   'time': z.number().readonly(),
   'data': z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema3)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema3))]).readonly(),
   'ignorable': z.literal(true).readonly().optional(),
-  'sourceEventSeqs': z.array(z.number()).readonly().optional(),
-  'surfaceOp': z.union([z.literal("append"), z.object({
-  'op': z.literal("replace").readonly(),
-  'start': z.number().readonly(),
-  'end': z.number().readonly(),
-})]).readonly().optional(),
+  'sourceEventSeqs': z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema3)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema3))]).readonly().optional(),
+  'surfaceOp': z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema3)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema3))]).readonly().optional(),
 }).readonly(),
 }), z.object({
   'type': z.literal("snapshot").readonly(),
@@ -256,18 +256,18 @@ const _deepseek_ai_dsh_api_session_controller_session_follow_result$schema = z.u
   'time': z.number().readonly(),
   'data': z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema3)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema3))]).readonly(),
   'ignorable': z.literal(true).readonly().optional(),
-  'sourceEventSeqs': z.array(z.number()).readonly().optional(),
-  'surfaceOp': z.union([z.literal("append"), z.object({
-  'op': z.literal("replace").readonly(),
-  'start': z.number().readonly(),
-  'end': z.number().readonly(),
-})]).readonly().optional(),
+  'sourceEventSeqs': z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema3)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema3))]).readonly().optional(),
+  'surfaceOp': z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema3)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema3))]).readonly().optional(),
 }).readonly(),
 })).readonly(),
   'hasMore': z.boolean().readonly(),
   'projections': z.object({
   'asOfSeq': z.number().readonly(),
   'values': z.intersection(z.object({
+  'inbox': z.object({
+  'next-turn': z.array(z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema3)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema3))])).readonly(),
+  'next-step': z.array(z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema3)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema3))])).readonly(),
+}).optional(),
   'agentPreset': z.union([z.literal(null), z.string()]).optional(),
   'title': z.union([z.literal(null), z.string()]).optional(),
   'todos': z.union([z.literal(null), z.array(z.object({
@@ -395,6 +395,10 @@ const _deepseek_ai_dsh_api_session_controller_session_list_result$schema = z.obj
   'projections': z.object({
   'asOfSeq': z.number().readonly(),
   'values': z.intersection(z.object({
+  'inbox': z.object({
+  'next-turn': z.array(z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema))])).readonly(),
+  'next-step': z.array(z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema))])).readonly(),
+}).optional(),
   'agentPreset': z.union([z.literal(null), z.string()]).optional(),
   'title': z.union([z.literal(null), z.string()]).optional(),
   'todos': z.union([z.literal(null), z.array(z.object({
@@ -520,12 +524,8 @@ const _deepseek_ai_dsh_api_session_controller_session_page_result$schema = z.obj
   'time': z.number().readonly(),
   'data': z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema2)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema2))]).readonly(),
   'ignorable': z.literal(true).readonly().optional(),
-  'sourceEventSeqs': z.array(z.number()).readonly().optional(),
-  'surfaceOp': z.union([z.literal("append"), z.object({
-  'op': z.literal("replace").readonly(),
-  'start': z.number().readonly(),
-  'end': z.number().readonly(),
-})]).readonly().optional(),
+  'sourceEventSeqs': z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema2)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema2))]).readonly().optional(),
+  'surfaceOp': z.union([z.literal(null), z.string(), z.number(), z.literal(false), z.literal(true), z.array(z.lazy(() => JsonValueRemoteCodec$schema2)), z.record(z.string(), z.lazy(() => JsonValueRemoteCodec$schema2))]).readonly().optional(),
 }).readonly(),
 })).readonly(),
   'hasMore': z.boolean().readonly(),
@@ -713,7 +713,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionAttachmentValue',
         schema: _deepseek_ai_dsh_api_session_controller_session_attachment_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":340,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":342,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/cancel',
@@ -738,7 +738,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionCancelValue',
         schema: _deepseek_ai_dsh_api_session_controller_session_cancel_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":360,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":362,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/canOpenWorkspacePath',
@@ -753,7 +753,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller#session/canOpenWorkspacePath:result',
         schema: _deepseek_ai_dsh_api_session_controller_session_canOpenWorkspacePath_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":265,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":267,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/control',
@@ -770,7 +770,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionControlFrame',
         schema: _deepseek_ai_dsh_api_session_controller_session_control_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":393,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":395,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/create',
@@ -795,7 +795,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionCreateValue',
         schema: _deepseek_ai_dsh_api_session_controller_session_create_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":237,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":239,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/follow',
@@ -822,7 +822,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionFollowFrame',
         schema: _deepseek_ai_dsh_api_session_controller_session_follow_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":383,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":385,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/fork',
@@ -847,7 +847,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionForkValue',
         schema: _deepseek_ai_dsh_api_session_controller_session_fork_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":318,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":320,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/list',
@@ -873,7 +873,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionListValue',
         schema: _deepseek_ai_dsh_api_session_controller_session_list_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":216,"column":9},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":218,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/modelCatalog',
@@ -888,7 +888,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#ModelCatalog',
         schema: _deepseek_ai_dsh_api_session_controller_session_modelCatalog_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":256,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":258,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/openWorkspacePath',
@@ -914,7 +914,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionOpenWorkspacePathValue',
         schema: _deepseek_ai_dsh_api_session_controller_session_openWorkspacePath_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":277,"column":9},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":279,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/page',
@@ -940,7 +940,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionPage',
         schema: _deepseek_ai_dsh_api_session_controller_session_page_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":371,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":373,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/prompt',
@@ -966,7 +966,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionPromptValue',
         schema: _deepseek_ai_dsh_api_session_controller_session_prompt_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":329,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":331,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/rename',
@@ -991,7 +991,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionRenameValue',
         schema: _deepseek_ai_dsh_api_session_controller_session_rename_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":308,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":310,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/search',
@@ -1017,7 +1017,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionSearchValue',
         schema: _deepseek_ai_dsh_api_session_controller_session_search_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":227,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":229,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/selectModel',
@@ -1042,7 +1042,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionSelectModelValue',
         schema: _deepseek_ai_dsh_api_session_controller_session_selectModel_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":247,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":249,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#session/updateQueue',
@@ -1067,7 +1067,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-session-controller/types#SessionUpdateQueueValue',
         schema: _deepseek_ai_dsh_api_session_controller_session_updateQueue_result$schema,
       },
-      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":350,"column":3},
+      sourceLocation: {"file":"packages/api/session-controller/src/index.ts","line":352,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-session-controller#skills/list',

package/lib/types/agent.js

@@ -380,13 +380,14 @@ export class ApiSessionAgentController {
      */
     async composeAgent(presetId) {
         const presets = this.ctx.get('agentPresets');
-        if (presets === undefined)
-            return { setup: (agentCtx) => { this.installSelection(agentCtx); } };
+        if (presets === undefined) {
+            return { setup: (_agentCtx, agent) => { this.installSelection(agent); } };
+        }
         const resolvedId = (await presets.resolve(presetId)).id;
         return {
             agentPreset: resolvedId,
-            setup: async (agentCtx) => {
-                this.installSelection(agentCtx);
+            setup: async (agentCtx, agent) => {
+                this.installSelection(agent);
                 await presets.mount(agentCtx, resolvedId);
             },
         };
@@ -506,10 +507,7 @@ export class ApiSessionAgentController {
         const { provider, model } = this.ctx.agentDefaultModel.currentSelection();
         return { provider, model };
     }
-    installSelection(agentCtx) {
-        const agent = agentCtx.agent;
-        if (agent === undefined)
-            throw new Error('api-session: Agent setup has no scoped Agent');
+    installSelection(agent) {
         this.selectionFor(agent);
     }
     /**

package/lib/types/client/session-wire-event.d.ts

@@ -0,0 +1,11 @@
+/** Event-local acceptance for raw Session journal responses; payloads remain owner-defined JSON. */
+import type { SessionWireEvent } from '../types.ts';
+/**
+ * Reject non-current event envelopes without stripping or normalizing wire fields.
+ * Range membership and source existence require the durable log and remain Host-owned.
+ * @param value - one event received in a follow frame or history page.
+ * @returns nothing after narrowing the accepted event envelope.
+ * @throws when the envelope or current event-local metadata is invalid.
+ */
+export declare function assertSessionWireEvent(value: unknown): asserts value is SessionWireEvent;
+//# sourceMappingURL=session-wire-event.d.ts.map

package/lib/types/client/session-wire-event.js

@@ -0,0 +1,43 @@
+/** Event-local acceptance for raw Session journal responses; payloads remain owner-defined JSON. */
+import { validateSessionEventData, validateSurfaceMetadata } from '@deepseek-ai/dsh-session/surface';
+/**
+ * Reject non-current event envelopes without stripping or normalizing wire fields.
+ * Range membership and source existence require the durable log and remain Host-owned.
+ * @param value - one event received in a follow frame or history page.
+ * @returns nothing after narrowing the accepted event envelope.
+ * @throws when the envelope or current event-local metadata is invalid.
+ */
+export function assertSessionWireEvent(value) {
+    const subject = 'session wire event';
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        throw new Error(`${subject} must be an object`);
+    }
+    const event = value;
+    for (const key of Object.keys(event)) {
+        switch (key) {
+            case 'type':
+            case 'seq':
+            case 'time':
+            case 'data':
+            case 'ignorable':
+            case 'surfaceOp':
+            case 'sourceEventSeqs':
+                break;
+            default:
+                throw new Error(`${subject} has unexpected field ${key}`);
+        }
+    }
+    const seq = event['seq'];
+    if (typeof event['type'] !== 'string'
+        || typeof seq !== 'number' || !Number.isSafeInteger(seq) || seq < 0 || Object.is(seq, -0)
+        || typeof event['time'] !== 'number' || !Number.isSafeInteger(event['time'])
+        || !Object.hasOwn(event, 'data') || event['data'] === undefined
+        || (Object.hasOwn(event, 'ignorable') && event['ignorable'] !== true)) {
+        throw new Error(`${subject} has an invalid envelope`);
+    }
+    // Event names and payloads are merge-extensible; only event-local owner rules run here.
+    const current = event;
+    validateSurfaceMetadata(current);
+    validateSessionEventData(current, subject);
+}
+//# sourceMappingURL=session-wire-event.js.map

package/lib/types/client/transport.js

@@ -2,6 +2,7 @@
 import { RemoteError } from '@deepseek-ai/dsh-typert-protocol';
 import { RemoteJournalStream, RemoteSnapshotStream, RemoteStreamCarrierError, } from '@deepseek-ai/dsh-api-gateway/client';
 import { historyEntries, historyRecordFirstSeq, historyRecordLastSeq, } from "./sessions/history-records.js";
+import { assertSessionWireEvent } from "./session-wire-event.js";
 export { SESSION_SEARCH_RESULT_LIMIT, SESSION_SEARCH_SNIPPET_MAX_CODE_POINTS, } from "../types.js";
 function toSessionJournalChange(change) {
     switch (change.type) {
@@ -78,6 +79,8 @@ export class SessionEventStream extends RemoteJournalStream {
             ...(request.maxMessages === undefined ? {} : { maxMessages: request.maxMessages }),
         }, signal)) {
             if (frame.type === 'snapshot') {
+                for (const record of frame.records)
+                    assertSessionWireEvent(record.event);
                 if (frame.assistantStream === undefined) {
                     throw new RemoteError('gateway/internal', 'session assistant stream omitted its opted-in opening baseline', {});
                 }
@@ -103,6 +106,7 @@ export class SessionEventStream extends RemoteJournalStream {
                 yield { type: 'notification', notification: frame.frame };
                 continue;
             }
+            assertSessionWireEvent(frame.event);
             yield { type: 'entry', entry: frame };
         }
     }
@@ -111,6 +115,8 @@ export class SessionEventStream extends RemoteJournalStream {
         const result = await this.remote.session.page({ address: this.address, throughSeq, ...request }, signal);
         if (!result.ok)
             throw result.error;
+        for (const record of result.value.records)
+            assertSessionWireEvent(record.event);
         return result.value;
     }
     /** @inheritdoc */

package/lib/types/commands.d.ts

@@ -38,7 +38,7 @@ export declare class SessionCommandController {
      */
     fork(request: SessionForkRequest): Promise<SessionForkValue>;
     /**
-     * Admit one browser prompt after explicit Agent resume and image validation.
+     * Reject empty content, then admit one prompt after Agent and attachment validation.
      * @param request - Session identity, prompt content, source metadata, and delivery mode.
      * @returns acknowledgement that the Agent accepted the prompt.
      */

package/lib/types/commands.js

@@ -62,6 +62,9 @@ import { canonicalClientTimeZone } from '@deepseek-ai/dsh-util-time';
 import { assertNever } from '@deepseek-ai/dsh-util-values';
 import { RemoteError, remoteErrorOf } from '@deepseek-ai/dsh-typert-protocol';
 import { ApiSessionCwdConflict, ApiSessionNotFound, ApiSessionPresetConflict, ApiSessionSubagentOwnership, apiSessionSubagentOwnershipError, hasApiSessionSubagentOwner, inspectApiSession, } from "./agent.js";
+function hasPromptContent(content) {
+    return content.some(part => part.type !== 'text' || part.text.trim().length > 0);
+}
 /** Implements Session business commands delegated by the Session Controller Remote service. */
 export class SessionCommandController {
     ctx;
@@ -271,11 +274,14 @@ export class SessionCommandController {
         }
     }
     /**
-     * Admit one browser prompt after explicit Agent resume and image validation.
+     * Reject empty content, then admit one prompt after Agent and attachment validation.
      * @param request - Session identity, prompt content, source metadata, and delivery mode.
      * @returns acknowledgement that the Agent accepted the prompt.
      */
     async prompt(request) {
+        if (!hasPromptContent(request.content)) {
+            throw new RemoteError('gateway/bad-request', 'prompt content must include non-whitespace text or an attachment', {});
+        }
         const clientTimeZone = request.clientTimeZone === undefined
             ? undefined
             : canonicalClientTimeZone(request.clientTimeZone);
@@ -379,9 +385,13 @@ export class SessionCommandController {
      * @returns acknowledgement that the queue mutation was applied.
      */
     updateQueue(request) {
-        if (request.action.kind === 'edit'
-            && request.action.content.some(block => block.type !== 'text')) {
-            throw new RemoteError('session/attachment-invalid', 'queue edits accept text content only', { reason: 'QUEUE_EDIT_NON_TEXT' });
+        if (request.action.kind === 'edit') {
+            if (request.action.content.some(block => block.type !== 'text')) {
+                throw new RemoteError('session/attachment-invalid', 'queue edits accept text content only', { reason: 'QUEUE_EDIT_NON_TEXT' });
+            }
+            if (!hasPromptContent(request.action.content)) {
+                throw new RemoteError('gateway/bad-request', 'queue edit content must include non-whitespace text', {});
+            }
         }
         const agent = this.ctx.agents.get(request.sessionId);
         if (agent === undefined) {

package/lib/types/control.d.ts

@@ -15,7 +15,6 @@ export declare class SessionControlController {
     control(signal: AbortSignal): AsyncIterable<SessionControlFrame>;
     private baseline;
     private projectionBaseline;
-    private onSessionEvent;
     private onJobsChanged;
     private jobsFor;
     private broadcast;

package/lib/types/control.js

@@ -7,7 +7,6 @@ export class SessionControlController {
     /** @param ctx - Host context carrying live Agent, projection, and jobs services. */
     constructor(ctx) {
         this.ctx = ctx;
-        ctx.on('session/event', (session, event) => { this.onSessionEvent(session, event); });
         ctx.sessionProjections.onChanged((session, key, value, seq) => {
             this.broadcast({
                 type: 'projection',
@@ -16,6 +15,16 @@ export class SessionControlController {
                 value: value,
                 seq,
             });
+            if (key !== 'inbox')
+                return;
+            const agent = this.ctx.agents.get(session.id);
+            if (agent?.session !== session)
+                return;
+            this.broadcast({
+                type: 'queue',
+                sessionId: session.id,
+                items: queueItemsFromInbox(value),
+            });
         });
         ctx.inject(['jobs'], (jobsCtx) => {
             jobsCtx.jobs.onJobsChanged((owner) => { this.onJobsChanged(owner); });
@@ -76,18 +85,6 @@ export class SessionControlController {
         }
         return blocks;
     }
-    onSessionEvent(session, event) {
-        if (event.type !== 'agent/inbox/spliced')
-            return;
-        const agent = this.ctx.agents.get(session.id);
-        if (agent?.session !== session)
-            return;
-        this.broadcast({
-            type: 'queue',
-            sessionId: session.id,
-            items: queueItems(agent, event.data),
-        });
-    }
     onJobsChanged(owner) {
         if (owner !== undefined) {
             this.broadcast({ type: 'jobs', sessionId: owner.id, jobs: this.jobsFor(owner) });
@@ -151,21 +148,21 @@ class ControlQueue {
         }
     }
 }
-function queueItems(agent, splice) {
-    const project = (target) => {
-        const messages = target === 'next-turn' ? agent.inbox.nextTurn : agent.inbox.nextStep;
-        return splice?.target === target
-            ? messages.toSpliced(splice.start, splice.removedCount ?? 0, ...splice.inserted)
-            : messages;
-    };
+function queueItems(agent) {
+    return queueItemsFromInbox({
+        'next-turn': agent.inbox.nextTurn,
+        'next-step': agent.inbox.nextStep,
+    });
+}
+function queueItemsFromInbox(inbox) {
     return [
-        ...project('next-turn').map(message => ({
+        ...inbox['next-turn'].map(message => ({
             id: message.id,
             placement: 'queued',
             ...promptRpcId(message),
             message: { id: message.id, content: message.content },
         })),
-        ...project('next-step').map(message => ({
+        ...inbox['next-step'].map(message => ({
             id: message.id,
             placement: message.source.kind === 'user' ? 'steering' : 'context',
             ...promptRpcId(message),

package/lib/types/index.js

@@ -98,6 +98,7 @@ import { ApiSessionList } from "./list.js";
 import { buildModelCatalog } from "./catalog.js";
 import { installModelSelectionProjection } from "./model-selection-projection.js";
 import { SessionSkillCatalog } from "./skill-catalog.js";
+import { SessionMediaReferences } from "./media-references.js";
 export { ApiSessionNotFound } from "./agent.js";
 export { SessionFileReferences } from "./file-references.js";
 export { SessionSkillCatalog } from "./skill-catalog.js";
@@ -209,6 +210,7 @@ let SessionController = (() => {
             this.canOpenPath = internals.canOpenPath
                 ?? (() => config.nativeOpen ?? (internals.openPath !== undefined || canOpenNativePath()));
             ctx.plugin(SessionFileReferences);
+            ctx.plugin(SessionMediaReferences);
             ctx.plugin(SessionSkillCatalog);
             ctx.on('session/created', (session) => {
                 ctx.emit('api-session/added', this.listState.summaryFor(session));

package/lib/types/media-references.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Authenticated GET/HEAD /api/file reads bounded file responses through
+ * the composed filesystem provider. Paths and MIME types do not restrict access;
+ * the connection service authenticates requests before this handler.
+ * @module @deepseek-ai/dsh-api-session-controller/media-references
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/**
+ * File-display contribution. The connection service supplies authentication;
+ * `ctx.fs` supplies the execution world's paths, reads, and access policy.
+ */
+export declare const SessionMediaReferences: {
+    inject: string[];
+    apply(ctx: Context): void;
+};
+//# sourceMappingURL=media-references.d.ts.map

package/lib/types/media-references.js

@@ -0,0 +1,77 @@
+/**
+ * Authenticated GET/HEAD /api/file reads bounded file responses through
+ * the composed filesystem provider. Paths and MIME types do not restrict access;
+ * the connection service authenticates requests before this handler.
+ * @module @deepseek-ai/dsh-api-session-controller/media-references
+ */
+import { isAbsolute } from 'node:path';
+import { FsError } from '@deepseek-ai/dsh-fs';
+import mime from 'mime-types';
+const BASE_HEADERS = {
+    'Cache-Control': 'private, no-store',
+    'X-Content-Type-Options': 'nosniff',
+    // HTML and SVG files may be opened directly on the authenticated API origin.
+    'Content-Security-Policy': "sandbox; default-src 'none'",
+};
+async function serveFile(request, fs, maxBytes) {
+    const fail = (status, text) => new Response(request.method === 'HEAD' ? null : text, { status, headers: BASE_HEADERS });
+    const path = new URL(request.url).searchParams.get('path');
+    if (path === null || path.length === 0)
+        return fail(400, 'missing path');
+    if (path.includes('\0') || !isAbsolute(path))
+        return fail(400, 'absolute path required');
+    try {
+        const target = await fs.resolve(path, { signal: request.signal });
+        const mediaType = mime.lookup(target.displayPath) || 'application/octet-stream';
+        const headers = {
+            ...BASE_HEADERS,
+            'Content-Type': mediaType,
+        };
+        if (request.method === 'HEAD') {
+            const info = await fs.stat(target, request.signal);
+            if (info === undefined)
+                return fail(404, 'not found');
+            if (info.type !== 'file')
+                return fail(403, 'not a regular file');
+            if (info.size !== undefined) {
+                if (info.size > maxBytes)
+                    return fail(413, 'file exceeds byte limit');
+                headers['Content-Length'] = String(info.size);
+            }
+            return new Response(null, { headers });
+        }
+        const bytes = await fs.readBytes(target, request.signal, maxBytes);
+        headers['Content-Length'] = String(bytes.byteLength);
+        return new Response(bytes.slice(), { headers });
+    }
+    catch (error) {
+        if (!(error instanceof FsError))
+            throw error;
+        const statuses = {
+            FS_NOT_FOUND: 404,
+            FS_NOT_REGULAR_FILE: 403,
+            FS_PERMISSION_DENIED: 403,
+            FS_SANDBOX_DENIED: 403,
+            FS_TOO_LARGE: 413,
+            FS_ABORTED: 499,
+        };
+        return fail(statuses[error.code] ?? 500, error.code);
+    }
+}
+/**
+ * File-display contribution. The connection service supplies authentication;
+ * `ctx.fs` supplies the execution world's paths, reads, and access policy.
+ */
+export const SessionMediaReferences = {
+    inject: ['connection', 'fs', 'attachments'],
+    apply(ctx) {
+        const maxBytes = ctx.attachments.imageLimits.maxImageBytes;
+        ctx.effect(() => ctx.connection.fetch.register({
+            path: '/api/file',
+            methods: ['GET', 'HEAD'],
+            requestBody: 'buffered',
+            fetch: request => serveFile(request, ctx.fs, maxBytes),
+        }), 'session-controller: /api/file');
+    },
+};
+//# sourceMappingURL=media-references.js.map

package/lib/types/types.d.ts

@@ -134,6 +134,7 @@ export interface ModelCatalog {
 /** One client-requested mutation of a still-pending queue item. */
 export type QueueAction = {
     readonly kind: 'edit';
+    /** Non-empty text-only replacement content. */
     readonly content: readonly ContentBlock[];
 } | {
     readonly kind: 'remove';
@@ -293,6 +294,7 @@ export interface SessionPromptRequest {
     readonly requestId: SessionRequestId;
     readonly sessionId: SessionId;
     readonly mode: 'queue' | 'steer';
+    /** At least one non-whitespace text part or attachment. */
     readonly content: readonly PromptContentPart[];
     readonly clientTimeZone?: string;
 }
@@ -377,23 +379,29 @@ export interface SessionWireHeader {
     readonly delegationDepth?: number;
     readonly agentPreset?: string;
 }
-/** Browser wire form of one Session surface operation. */
+/** Browser wire surface operation; replacement endpoints are earlier event seqs in surface order. */
 export type SessionWireSurfaceOp = 'append' | {
     readonly op: 'replace';
-    readonly start: number;
-    readonly end: number;
+    readonly startSeq: number;
+    readonly endSeq: number;
 };
-/** One history-page record. V2 embeds compact Assistant streams inside events. */
+/** One history-page record with compact Assistant streams embedded inside events. */
 export type SessionHistoryRecord = SessionEventEntry;
-/** Session event wire form; durable readers own recognition of merge-extensible event names. */
+/**
+ * Exact Session event envelope accepted by the Client journal adapter.
+ * Surface events require surfaceOp; only non-Assistant surface events may cite earlier sources.
+ * Durable readers own recognition of merge-extensible event names.
+ */
 export interface SessionWireEvent {
     readonly type: string;
     readonly seq: number;
     readonly time: number;
     readonly data: JsonValue;
     readonly ignorable?: true;
-    readonly sourceEventSeqs?: number[];
-    readonly surfaceOp?: SessionWireSurfaceOp;
+    /** Earlier sources on current surface events; opaque JSON on unknown ignorable events. */
+    readonly sourceEventSeqs?: JsonValue;
+    /** Canonical placement on current surface events; opaque JSON on unknown ignorable events. */
+    readonly surfaceOp?: JsonValue;
 }
 /** One message-aligned backwards-history request. */
 export interface SessionPageRequest {