@deepseek-ai/dsh-api-session-controller 0.2.1-alpha.2 → 0.2.1-alpha.4

package/lib/types/commands.js

@@ -60,11 +60,15 @@ import { buildForkSeed } from '@deepseek-ai/dsh-session/fork';
 import { SessionLogOffset, SessionSeq } from '@deepseek-ai/dsh-session';
 import { SessionQueryError } from '@deepseek-ai/dsh-session-query';
 import { SessionTitleInvalidError } from '@deepseek-ai/dsh-session-title';
-import { canonicalClientTimeZone } from '@deepseek-ai/dsh-util-time';
 import { assertNever } from '@deepseek-ai/dsh-util-values';
 import { RemoteError, remoteErrorOf } from '@deepseek-ai/dsh-typert-protocol';
 import { ApiSessionCwdConflict, ApiSessionNotFound, ApiSessionPresetConflict, ApiSessionSubagentOwnership, apiSessionSubagentOwnershipError, hasApiSessionSubagentOwner, inspectApiSession, } from "./agent.js";
-function hasPromptContent(content) {
+/**
+ * Whether prompt content carries non-whitespace text or an attachment.
+ * @param content - submitted or edited prompt parts.
+ * @returns false for content the Agent must not receive.
+ */
+export function hasPromptContent(content) {
     return content.some(part => part.type !== 'text' || part.text.trim().length > 0);
 }
 /**
@@ -100,15 +104,15 @@ export class SessionCommandController {
         this.defaultCwd = defaultCwd;
     }
     /**
-     * Create or idempotently adopt one ordinary Session.
-     * @param request - requested identity, location, and Agent preset.
-     * @returns the Session identity and resolved preset when configured.
+     * Create one ordinary Session for a new conversation, reusing the named
+     * blank Session while it is an unarchived member of the requested Workspace.
+     * @param request - optional blank Session to reuse, location, and Agent preset.
+     * @returns the created or reused Session identity and its preset when configured.
      */
     async create(request) {
         if (request.workspaceId !== undefined && request.cwd !== undefined) {
             throw new RemoteError('gateway/bad-request', 'session.create accepts workspaceId or cwd, not both', {});
         }
-        const sessionId = request.sessionId ?? brandString(`session-${randomUUID()}`);
         let workspace;
         if (request.workspaceId !== undefined) {
             workspace = this.ctx.workspaceRegistry.get(request.workspaceId);
@@ -119,13 +123,20 @@ export class SessionCommandController {
             }
         }
         const cwd = workspace?.path ?? request.cwd ?? this.defaultCwd;
-        let adopted;
+        let created;
         try {
-            adopted = await this.agents.ensureSession(sessionId, cwd, request.sessionId !== undefined, request.agentPreset);
+            created = await this.agents.createSession({
+                ...(request.sessionId === undefined ? {} : { sessionId: request.sessionId }),
+                cwd,
+                ...(request.agentPreset === undefined ? {} : { agentPreset: request.agentPreset }),
+                reusable: sessionId => !this.ctx.workspaceRegistry.archivedSessionIds.includes(sessionId)
+                    && (workspace === undefined || workspace.sessionIds.includes(sessionId)),
+            });
         }
         catch (error) {
-            this.rejectCreation(sessionId, error);
+            this.rejectCreation(error);
         }
+        const sessionId = created.agent.id;
         if (workspace !== undefined) {
             try {
                 await workspace.attachSession(sessionId);
@@ -134,8 +145,7 @@ export class SessionCommandController {
                 throw new RemoteError('session/workspace-attach-failed', `session "${sessionId}" was created but could not attach to workspace "${workspace.id}": ${String(error)}`, { sessionId, workspaceId: workspace.id });
             }
         }
-        const agentPreset = this.agents.presetForSession(adopted.session);
-        return { sessionId, ...(agentPreset === undefined ? {} : { agentPreset }) };
+        return { sessionId, ...(created.agentPreset === undefined ? {} : { agentPreset: created.agentPreset }) };
     }
     /**
      * Validate and install one Session-local model selection; save the default in the background.
@@ -283,28 +293,16 @@ export class SessionCommandController {
         }
     }
     /**
-     * Reject empty content, then admit one prompt after Agent and attachment validation.
-     * @param request - Session identity, prompt content, source metadata, and delivery mode.
+     * Admit one prompt after Agent and attachment validation; the Remote method
+     * has already validated the content and built the durable message source.
+     * @param request - Session identity, prompt content, and delivery mode.
+     * @param source - the `user-rpc` source recorded on the accepted message.
      * @returns acknowledgement that the Agent accepted the prompt.
      */
-    async prompt(request) {
-        if (!hasPromptContent(request.content)) {
-            throw new RemoteError('gateway/bad-request', 'prompt content must include non-whitespace text or an attachment', {});
-        }
-        const clientTimeZone = request.clientTimeZone === undefined
-            ? undefined
-            : canonicalClientTimeZone(request.clientTimeZone);
-        if (request.clientTimeZone !== undefined && clientTimeZone === undefined) {
-            throw new RemoteError('session/invalid-time-zone', 'clientTimeZone must be UTC or a valid IANA Area/Location name', { value: request.clientTimeZone });
-        }
+    async prompt(request, source) {
         const agent = await this.resolveAgent(request.sessionId);
         if (hasPromptRequest(agent, request.requestId))
             return { accepted: true };
-        const source = {
-            kind: 'user',
-            rpcId: request.requestId,
-            ...(clientTimeZone === undefined ? {} : { clientTimeZone }),
-        };
         const hasImage = request.content.some(part => part.type === 'image');
         const admit = async () => {
             try {
@@ -482,17 +480,13 @@ export class SessionCommandController {
             throw found.error;
         return found.agent;
     }
-    rejectCreation(sessionId, error) {
+    rejectCreation(error) {
         if (remoteErrorOf(error) !== undefined)
             throw error;
-        if (error instanceof Error && error.name === 'SessionAlreadyOwnedError') {
-            throw new RemoteError('session/writer-held', error.message, { sessionId });
-        }
         if (error instanceof ApiSessionPresetConflict) {
             throw new RemoteError('agent-preset/conflict', error.message, {
                 sessionId: error.sessionId,
                 requestedPreset: error.requestedPreset,
-                ...(error.existingPreset === undefined ? {} : { existingPreset: error.existingPreset }),
             });
         }
         if (error instanceof ApiSessionCwdConflict) {
@@ -505,7 +499,7 @@ export class SessionCommandController {
         if (error instanceof ApiSessionSubagentOwnership) {
             throw apiSessionSubagentOwnershipError(error.sessionId);
         }
-        throw new RemoteError('gateway/internal', `failed to create session "${sessionId}": ${String(error)}`, {});
+        throw new RemoteError('gateway/internal', `failed to create session: ${String(error)}`, {});
     }
     async readSessionState(sessionId) {
         const attached = this.ctx.sessions.get(sessionId);

package/lib/types/index.d.ts

@@ -85,16 +85,18 @@ export declare class SessionController extends TypertRemoteService {
      */
     list(_request: SessionListRequest, signal: AbortSignal): Promise<SessionListValue>;
     /**
-     * Search visible Session content without resuming an Agent.
+     * Search visible Session content without resuming an Agent. A non-owner
+     * receives only the hits whose Session `allows()` admits; `hasMore`
+     * describes the bounded result before that filtering.
      * @param request - literal message-content query.
      * @param signal - cancellation for list and search reads.
      * @returns authorized bounded Session search results.
      */
     search(request: SessionSearchRequest, signal: AbortSignal): Promise<SessionSearchValue>;
     /**
-     * Create or idempotently adopt one ordinary Session.
-     * @param request - requested identity, location, and Agent preset.
-     * @returns the Session identity and resolved preset when configured.
+     * Create one ordinary Session for a new conversation, reusing the named blank Session while it is reusable.
+     * @param request - optional blank Session to reuse, location, and Agent preset.
+     * @returns the created or reused Session identity and its preset when configured.
      */
     create(request: SessionCreateRequest): Promise<SessionCreateValue>;
     /**

package/lib/types/index.js

@@ -91,9 +91,11 @@ import z from '@deepseek-ai/schemastery';
 import { errorChain, ReasoningEffortId } from '@deepseek-ai/dsh-llm';
 import { canOpenNativePath, nativeFileManager, nativeFileApplications, openNativeFileApplication, openNativeAssociatedPath, revealNativePath } from '@deepseek-ai/dsh-native-command';
 import { SessionQueryError } from '@deepseek-ai/dsh-session-query';
-import { Remote, RemoteError, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+import { Remote, RemoteError, TypertRemoteService, principalOf } from '@deepseek-ai/dsh-typert-protocol';
+import { canonicalClientTimeZone } from '@deepseek-ai/dsh-util-time';
+import { assertNever } from '@deepseek-ai/dsh-util-values';
 import { ApiSessionAgentController, inspectApiSession, } from "./agent.js";
-import { SessionCommandController } from "./commands.js";
+import { SessionCommandController, hasPromptContent } from "./commands.js";
 import { SessionControlController } from "./control.js";
 import { SessionHistoryController } from "./history.js";
 import { SessionFileReferences } from "./file-references.js";
@@ -106,6 +108,15 @@ import { ArchivedSessionGate } from "./archived-session-gate.js";
 export { ApiSessionNotFound } from "./agent.js";
 export { SessionFileReferences } from "./file-references.js";
 export { SessionSkillCatalog } from "./skill-catalog.js";
+/**
+ * Read the Session resource a history address names: the Session itself, or
+ * the child Session whose transcript a subagent address reads.
+ * @param request - history request carrying the durable address.
+ * @returns the Session whose access the read requires.
+ */
+function addressedSession(request) {
+    return request.address.kind === 'session' ? request.address.sessionId : request.address.childSessionId;
+}
 /** Host service backing the generated `ctx.remote.session` namespace. */
 let SessionController = (() => {
     let _classSuper = TypertRemoteService;
@@ -147,8 +158,8 @@ let SessionController = (() => {
             _attachment_decorators = [Remote('attachment')];
             _updateQueue_decorators = [Remote('updateQueue')];
             _cancel_decorators = [Remote('cancel')];
-            _page_decorators = [Remote('page')];
-            _follow_decorators = [Remote({ mode: 'stream' })];
+            _page_decorators = [Remote({ name: 'page', resources: { session: addressedSession } })];
+            _follow_decorators = [Remote({ mode: 'stream', resources: { session: addressedSession } })];
             _projections_decorators = [Remote('projections')];
             _control_decorators = [Remote({ mode: 'stream' })];
             __esDecorate(this, null, _list_decorators, { kind: "method", name: "list", static: false, private: false, access: { has: obj => "list" in obj, get: obj => obj.list }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -179,6 +190,7 @@ let SessionController = (() => {
             'fileUploads',
             'fs',
             'llm',
+            'remoteAccess',
             'sessions',
             'sessionProjections',
             'sessionQuery',
@@ -207,6 +219,7 @@ let SessionController = (() => {
          */
         constructor(ctx, config, internals = {}) {
             super(ctx, 'sessionController', { namespace: 'session' });
+            ctx.typert.resources.register('session', { field: 'sessionId' });
             const resolved = SessionController.Config(config);
             installModelSelectionProjection(ctx);
             this.agents = new ApiSessionAgentController(ctx);
@@ -324,21 +337,25 @@ let SessionController = (() => {
          * @returns visible Session summaries ordered by activity.
          */
         async list(_request, signal) {
-            return { items: await this.listState.list(signal) };
+            const items = await this.listState.list(signal);
+            return { items: items.filter(item => this.ctx.remoteAccess.allows({ kind: 'session', id: item.sessionId })) };
         }
         /**
-         * Search visible Session content without resuming an Agent.
+         * Search visible Session content without resuming an Agent. A non-owner
+         * receives only the hits whose Session `allows()` admits; `hasMore`
+         * describes the bounded result before that filtering.
          * @param request - literal message-content query.
          * @param signal - cancellation for list and search reads.
          * @returns authorized bounded Session search results.
          */
-        search(request, signal) {
-            return this.listState.search(request.query, signal);
+        async search(request, signal) {
+            const result = await this.listState.search(request.query, signal);
+            return { ...result, items: result.items.filter(item => this.ctx.remoteAccess.allows({ kind: 'session', id: item.sessionId })) };
         }
         /**
-         * Create or idempotently adopt one ordinary Session.
-         * @param request - requested identity, location, and Agent preset.
-         * @returns the Session identity and resolved preset when configured.
+         * Create one ordinary Session for a new conversation, reusing the named blank Session while it is reusable.
+         * @param request - optional blank Session to reuse, location, and Agent preset.
+         * @returns the created or reused Session identity and its preset when configured.
          */
         create(request) {
             return this.commands.create(request);
@@ -483,9 +500,26 @@ let SessionController = (() => {
          * @param signal - caller cancellation before prompt admission begins.
          * @returns acknowledgement that the Agent accepted the prompt.
          */
-        prompt(request, signal) {
+        async prompt(request, signal) {
             signal.throwIfAborted();
-            return this.commands.prompt(request);
+            if (!hasPromptContent(request.content)) {
+                throw new RemoteError('gateway/bad-request', 'prompt content must include non-whitespace text or an attachment', {});
+            }
+            const clientTimeZone = request.clientTimeZone === undefined
+                ? undefined
+                : canonicalClientTimeZone(request.clientTimeZone);
+            if (request.clientTimeZone !== undefined && clientTimeZone === undefined) {
+                throw new RemoteError('session/invalid-time-zone', 'clientTimeZone must be UTC or a valid IANA Area/Location name', { value: request.clientTimeZone });
+            }
+            // The caller is recorded only when it is not the owner, so owner messages keep their exact source.
+            const principal = principalOf(this.ctx.invocation);
+            const source = {
+                kind: 'user',
+                rpcId: request.requestId,
+                ...(clientTimeZone === undefined ? {} : { clientTimeZone }),
+                ...(principal === undefined ? {} : { principal }),
+            };
+            return this.commands.prompt(request, source);
         }
         /**
          * Read one image proven reachable from the addressed Session log.
@@ -598,8 +632,24 @@ let SessionController = (() => {
          * @param signal - cancellation owned by the Remote stream carrier.
          * @returns one complete baseline followed by live replacement frames.
          */
-        control(signal) {
-            return this.controlState.control(signal);
+        async *control(signal) {
+            for await (const frame of this.controlState.control(signal)) {
+                switch (frame.type) {
+                    case 'baseline': {
+                        const projections = Object.fromEntries(Object.entries(frame.value.projections)
+                            .filter(([sessionId]) => this.ctx.remoteAccess.allows({ kind: 'session', id: sessionId })));
+                        yield { type: 'baseline', value: { ...frame.value, projections } };
+                        break;
+                    }
+                    case 'projection':
+                        if (this.ctx.remoteAccess.allows({ kind: 'session', id: frame.sessionId }))
+                            yield frame;
+                        break;
+                    /* v8 ignore next -- closed control-frame union. */
+                    default:
+                        assertNever(frame);
+                }
+            }
         }
     };
 })();

package/lib/types/types.d.ts

@@ -6,6 +6,7 @@ import type { LlmAttemptId, MessageId } from '@deepseek-ai/dsh-llm/brand';
 import type { TextBlock } from '@deepseek-ai/dsh-llm';
 import type { SessionId, SessionSeqCursor } from '@deepseek-ai/dsh-session/types';
 import type { SessionProjectionMap } from '@deepseek-ai/dsh-session-projection/types';
+import type { Principal } from '@deepseek-ai/dsh-typert-protocol';
 import type { JsonValue } from '@deepseek-ai/dsh-util-values';
 import type { WorkspaceId } from '@deepseek-ai/dsh-workspace/types';
 declare module '@deepseek-ai/dsh-session-projection/types' {
@@ -211,7 +212,6 @@ declare module '@deepseek-ai/dsh-typert-protocol' {
         'agent-preset/conflict': {
             readonly sessionId: SessionId;
             readonly requestedPreset: string;
-            readonly existingPreset?: string;
         };
         'session/attachment-invalid': {
             readonly reason: string;
@@ -280,16 +280,22 @@ export interface SessionSearchValue {
     readonly items: readonly SessionSearchItem[];
     readonly hasMore: boolean;
 }
-/** Session creation or explicit-id adoption request. */
+/** Request for a Session for a new conversation. */
 export interface SessionCreateRequest {
+    /** Workspace the Session joins; exclusive with `cwd`. */
     readonly workspaceId?: WorkspaceId;
+    /** Directory the Session owns when no Workspace is named. */
     readonly cwd?: string;
+    /** Blank Session to reuse while it is reusable, or the identity of a new Session when none is stored under it. */
     readonly sessionId?: SessionId;
+    /** Preset the Session runs, replacing a reused Session's recorded preset; the configured default when omitted. */
     readonly agentPreset?: string;
 }
 /** Session creation response value. */
 export interface SessionCreateValue {
+    /** The created or reused Session, which may differ from the requested `sessionId`. */
     readonly sessionId: SessionId;
+    /** Preset the Session runs, when the deployment composes a preset roster. */
     readonly agentPreset?: string;
 }
 /** Session model-selection request. */
@@ -381,11 +387,16 @@ export interface SessionOpenWorkspacePathValue {
 export type SessionRequestId = Branded<'session-request-id'>;
 declare module '@deepseek-ai/dsh-llm' {
     interface MessageSourceMap {
-        /** Browser prompt correlation and optional Host-validated time zone. */
+        /**
+         * Browser prompt correlation, optional Host-validated time zone, and the
+         * caller that submitted the prompt. `principal` is written only for a
+         * caller other than the owner, so an absent `principal` means the owner.
+         */
         'user-rpc': {
             kind: 'user';
             rpcId: SessionRequestId;
             clientTimeZone?: string;
+            principal?: Principal;
         };
     }
 }

package/locale/en.json

@@ -0,0 +1,5 @@
+{
+  "meta": {
+    "title": "api-session-controller"
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "会话控制接口",
+    "description": "向客户端提供会话读取、运行控制和状态更新能力。"
+  }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-api-session-controller",
   "description": "Session Remote commands, cold reads, and live control transport",
-  "version": "0.2.1-alpha.2",
+  "version": "0.2.1-alpha.4",
   "publishConfig": {
     "access": "public"
   },
@@ -39,7 +39,8 @@
       "default": "./lib/typert.remote-client.js"
     },
     "./src/*": "./src/*",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
   },
   "dsh": {
     "client": {
@@ -54,6 +55,7 @@
     }
   },
   "files": [
+    "locale/*.json",
     "lib/index.js",
     "lib/client.js",
     "lib/types/**/*.js",
@@ -65,44 +67,44 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@deepseek-ai/dsh-brand": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-deque": "0.2.1-alpha.2",
-    "@deepseek-ai/schemastery": "~3.18.5-alpha.1",
+    "@deepseek-ai/dsh-brand": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-deque": "0.2.1-alpha.4",
+    "@deepseek-ai/schemastery": "~3.18.5-alpha.2",
     "mime-types": "^3.0.2",
-    "zod": "^4.4.3"
+    "zod": "4.4.3"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-agent-default-model": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-api-gateway": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-attachment": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-file-upload": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-commands": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-file-reference": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-fs": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-native-command": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-scope": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-persistence": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-projection-cache": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-query": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-title": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-settings": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-skill": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-subagent": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-typert-registry": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-util-time": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-util-values": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-util-workspace-path": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-workspace": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-working-directory": "0.2.1-alpha.2"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-agent-default-model": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-api-gateway": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-attachment": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-client-file-upload": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-commands": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-file-reference": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-fs": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-llm": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-native-command": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-scope": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-persistence": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-projection-cache": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-query": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-title": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-settings": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-skill": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-subagent": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-typert-registry": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-util-time": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-util-values": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-util-workspace-path": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-workspace": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-working-directory": "0.2.1-alpha.4"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-session-persistence": {
@@ -116,50 +118,51 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-agent-default-model": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-agent-loop": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-agent-loop-testkit": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-api-gateway": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-attachment": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-file-upload": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-store": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-test-runtime": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-commands": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-file-reference": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-fs": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-fs-local": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-native-command": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-permission-presets": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-remote-mock": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-scope": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-persistence": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-projection-cache": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-query": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-title": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-settings": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-skill": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-storage": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-storage-domain": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-storage-json": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-subagent": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-typert-registry": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-util-crypto": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-util-time": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-util-values": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-util-workspace-path": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-workspace": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-api-remote-access": "0.2.1-alpha.4",
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-agent-default-model": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-agent-loop": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-agent-loop-testkit": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-api-gateway": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-attachment": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-client-file-upload": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-client-store": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-client-test-runtime": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-commands": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-file-reference": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-fs": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-fs-local": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-llm": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-native-command": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-permission-presets": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-remote-mock": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-scope": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-persistence": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-projection-cache": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-query": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-title": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-settings": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-skill": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-storage": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-storage-domain": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-storage-json": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-subagent": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-typert-registry": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-util-crypto": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-util-time": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-util-values": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-util-workspace-path": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-workspace": "0.2.1-alpha.4",
     "@types/mime-types": "^3.0.1",
-    "@deepseek-ai/dsh-working-directory": "0.2.1-alpha.2"
+    "@deepseek-ai/dsh-working-directory": "0.2.1-alpha.4"
   },
   "scripts": {
     "bundle": "tsdown",