@deepseek-ai/dsh-client-connection 0.2.1-alpha.2 → 0.2.1-alpha.4

package/lib/types/rpc-host.d.ts

@@ -1,8 +1,9 @@
 /** Host registry and HTTP adapter for generic Connection RPC channels. */
 import { Context, Service } from '@deepseek-ai/cordis';
-import type { PeerScope } from '@deepseek-ai/dsh-typert-protocol';
+import type { PeerScope, Principal } from '@deepseek-ai/dsh-typert-protocol';
+import type { ConnectionInteractions } from './connect-protocol.ts';
 import type { BrowserAuth } from './browser-auth.ts';
-import type { PeerAdmission, ConnectionIndexRequest, ConnectionIndexResponse, ConnectionFetchHandler, HostConnectionFetch, ConnectionRequestRejection, ConnectionTrustRequest, HostConnectionHandle, HostConnectionRpc } from './rpc.ts';
+import type { PeerAdmission, ConnectionAdmission, ConnectionIndexRequest, ConnectionIndexResponse, ConnectionFetchHandler, HostConnectionFetch, ConnectionRequestRejection, ConnectionTrustRequest, HostConnectionHandle, HostConnectionRpc } from './rpc.ts';
 declare module '@deepseek-ai/cordis' {
     interface Context {
         /** Host Connection transport and RPC registrations. */
@@ -13,8 +14,11 @@ declare module '@deepseek-ai/cordis' {
 export declare class HostConnectionService extends Service implements HostConnectionHandle {
     private readonly trustedHosts;
     private readonly browserAuth;
-    /** The operator Peer every admitted request speaks for. */
-    readonly operator: PeerScope;
+    /** The Peer every authenticated browser connection shares. */
+    readonly browserPeer: PeerScope;
+    private readonly peers;
+    private readonly owner;
+    private disposed;
     private readonly interceptors;
     private readonly fetchRoutes;
     readonly allowsRemoteAuthorities: boolean;
@@ -29,10 +33,25 @@ export declare class HostConnectionService extends Service implements HostConnec
     get rpc(): HostConnectionRpc;
     /** Exact Fetch-route registry scoped to the Context reading this service. */
     get fetch(): HostConnectionFetch;
-    /** Apply the Host/Origin fence, then browser authentication. */
+    /** Apply the Host/Origin fence and require an authenticated live Peer. */
     requestRejection(request: ConnectionTrustRequest): ConnectionRequestRejection;
-    /** A request that passes the fence and authentication speaks for the operator. */
+    /** Browser requests share an owner Peer; API HTTP does not depend on an attached socket. */
     admit(request: ConnectionTrustRequest): PeerAdmission;
+    /** Create one in-process Peer owned by the Context that read this service. */
+    createPeer(options: {
+        readonly principal: Principal;
+        readonly interactions?: ConnectionInteractions;
+    }): PeerScope;
+    /** Claim API socket ownership synchronously; callers release on termination or failed upgrade. */
+    admitConnection(request: ConnectionTrustRequest): ConnectionAdmission;
+    private isTrusted;
+    private publishPeer;
+    /**
+     * Authenticate and publish a credential before sending the connect redirect.
+     * @param request - launch-token request on /connect.
+     * @param response - response owned to completion.
+     */
+    authorizeConnect(request: ConnectionIndexRequest, response: ConnectionIndexResponse): void;
     /**
      * Authenticate an index request; native TLS listeners mint Secure cookies.
      */

package/lib/types/rpc.d.ts

@@ -1,6 +1,6 @@
 /** Generic unary RPC contracts shared by the Host and Client Connection halves. */
 import type { Branded } from '@deepseek-ai/dsh-brand';
-import type { PeerScope } from '@deepseek-ai/dsh-typert-protocol';
+import type { PeerScope, Principal } from '@deepseek-ai/dsh-typert-protocol';
 /** Correlation id minted by a caller and echoed by the Connection response. */
 export type RpcId = Branded<'rpc-id'>;
 /**
@@ -90,15 +90,23 @@ export interface ConnectionIndexResponse {
     writeHead(status: number, headers?: Readonly<Record<string, string>>): unknown;
     end(body?: string): unknown;
 }
-/** Outcome of admitting one request: the operator Peer it speaks for, or the status refusing it. */
+/** Outcome of admitting one request: the Peer it speaks for, or the status refusing it. */
 export type PeerAdmission = {
     readonly peer: PeerScope;
 } | {
     readonly rejection: 401 | 403;
 };
+/** Socket admission claims API ownership until its carrier calls release, including failed upgrades. */
+export type ConnectionAdmission = {
+    readonly peer: PeerScope;
+    /** Remove and dispose an API Peer; browser releases leave the shared browser Peer intact. */
+    readonly release: () => Promise<void>;
+} | {
+    readonly rejection: 401 | 403 | 409;
+};
 /**
  * Handler invoked after Connection has decoded the transport envelope.
- * `peer` is the Peer the request was admitted as: the operator.
+ * `peer` is the Peer the carrier admitted or the in-process caller supplied.
  */
 export type ConnectionRpcHandler = (endpoint: string, payload: unknown, signal: AbortSignal, peer: PeerScope) => Promise<ConnectionRpcHandlerResult>;
 /** Synchronous ownership test for one endpoint on a shared RPC channel. */
@@ -115,7 +123,11 @@ export interface ConnectionFetchRoute {
     readonly methods: readonly ConnectionFetchMethod[];
     /** Buffered requests obey the configured JSON cap; streaming requests arrive with backpressure and no aggregate cap. */
     readonly requestBody: ConnectionRequestBodyMode;
-    /** Handle one request after the physical carrier has applied its trust and authentication policy. */
+    /**
+     * Handle one request after the physical carrier has applied its trust and
+     * authentication policy. Only owner Peers reach an exact route; the shared
+     * handler answers 403 for every other principal.
+     */
     readonly fetch: (request: Request) => Promise<Response>;
 }
 /** Host registry for exact Fetch routes that cannot use JSON Remote invocation. */
@@ -151,8 +163,8 @@ export interface HostConnectionHandle {
     readonly rpc: HostConnectionRpc;
     /** Exact Fetch routes for streaming or browser-native responses. */
     readonly fetch: HostConnectionFetch;
-    /** The operator Peer every admitted request speaks for; its scope lives as long as Connection. */
-    readonly operator: PeerScope;
+    /** The owner Peer every authenticated browser connection shares. */
+    readonly browserPeer: PeerScope;
     /**
      * Whether this deployment accepts authorities beyond loopback: true only
      * when a validated `trustedHosts` entry names a non-loopback hostname.
@@ -172,12 +184,28 @@ export interface HostConnectionHandle {
      */
     requestRejection(request: ConnectionTrustRequest): ConnectionRequestRejection;
     /**
-     * Admit one request: it passes {@link requestRejection} and speaks for the
-     * operator, or it is refused with that status.
+     * Admit an HTTP request against its signed browser or API credential and live Peer.
      * @param request - request headers from the HTTP or upgrade request.
-     * @returns the operator Peer, or the rejection status.
+     * @returns the credential's Peer, or the rejection status.
      */
     admit(request: ConnectionTrustRequest): PeerAdmission;
+    /**
+     * Create an independent in-process Peer, disposed with the Context that read `ctx.connection`.
+     * @param options - fixed principal and optional interaction participation (default `answer`).
+     * @returns a new Peer distinct from every other Peer.
+     */
+    createPeer(options: {
+        readonly principal: Principal;
+        readonly interactions?: 'answer' | 'none';
+    }): PeerScope;
+    /**
+     * Claim a physical socket for an API Peer; browser sockets share their owner Peer.
+     * @param request - authenticated upgrade request headers.
+     * @returns the Peer and idempotent release, or 409 for duplicate API ownership.
+     * The carrier releases on socket termination or failed upgrade; release removes
+     * API admission synchronously without cancelling independent HTTP calls.
+     */
+    admitConnection(request: ConnectionTrustRequest): ConnectionAdmission;
     /**
      * Authenticate one frontend index request, owning a token redirect or 401.
      * The cookie this mints is `Secure` when the mounted Web carrier serves TLS,
@@ -208,9 +236,10 @@ export interface ConnectionFetchHandler {
     /**
      * Dispatch one already-authenticated request.
      * @param request - Fetch request below the shared channel.
-     * @returns the registered response or a 404 response.
+     * @param peer - Peer to dispatch as; required, never defaulted.
+     * @returns the registered response, a 403 response for an exact route and a non-owner Peer, or a 404 response.
      */
-    fetch(request: Request): Promise<Response>;
+    fetch(request: Request, peer: PeerScope): Promise<Response>;
 }
 /** Client caller for logical RPC channels carried by the current transport. */
 export interface ClientConnectionRpc {

package/locale/en.json

@@ -0,0 +1,5 @@
+{
+  "meta": {
+    "title": "connection"
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "客户端连接",
+    "description": "建立已认证的客户端通信，并管理连接生命周期。"
+  }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-client-connection",
   "description": "Authenticated RPC transport and generation lifecycle",
-  "version": "0.2.1-alpha.2",
+  "version": "0.2.1-alpha.4",
   "publishConfig": {
     "access": "public"
   },
@@ -20,10 +20,13 @@
     },
     "./client": {
       "types": "./lib/types/client/index.d.ts",
-      "default": "./lib/client.js"
+      "node": "./lib/client.node.js",
+      "browser": "./lib/client.browser.js",
+      "default": "./lib/client.browser.js"
     },
     "./src/*": "./src/*",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
   },
   "dsh": {
     "client": {
@@ -34,27 +37,29 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.2",
-    "@deepseek-ai/schemastery": "~3.18.5-alpha.1",
-    "zod": "^4.4.3"
+    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.4",
+    "@deepseek-ai/schemastery": "~3.18.5-alpha.2",
+    "zod": "4.4.3"
   },
   "files": [
+    "locale/*.json",
     "lib/index.js",
-    "lib/client.js",
+    "lib/client.browser.js",
+    "lib/client.node.js",
     "lib/types/**/*.d.ts"
   ],
   "peerDependencies": {
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/dsh-scope": "0.2.1-alpha.2"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2",
+    "@deepseek-ai/dsh-scope": "0.2.1-alpha.4"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/dsh-attachment": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-brand": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-scope": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.2.1-alpha.2"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2",
+    "@deepseek-ai/dsh-attachment": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-brand": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-llm": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-scope": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.1-alpha.4"
   }
 }

package/lib/types/operator-peer.d.ts

@@ -1,23 +0,0 @@
-/**
- * The operator Peer: the one party this Host answers to. Connection owns it
- * for its own lifetime, admits every request as it, and hands it to each
- * Remote call as `invocation.peer`.
- * @module @deepseek-ai/dsh-client-connection/src/operator-peer
- */
-import type { Context } from '@deepseek-ai/cordis';
-import type { PeerId, PeerScope } from '@deepseek-ai/dsh-typert-protocol';
-/**
- * The operator's scope. The instance is its own scope key, so `scopeOf(peer.ctx)`
- * returns it and events dispatched with `scopeTarget(subject, peer)` reach
- * listeners registered through `peer.ctx` and nobody else.
- */
-export declare class OperatorPeer implements PeerScope {
-    readonly id: PeerId;
-    readonly ctx: Context;
-    private readonly scope;
-    /** @param owner - Connection plugin context the scope fiber hangs under. */
-    constructor(owner: Context);
-    /** Tear down every connection-lifetime registration; racing calls share one completion. */
-    dispose(): Promise<void>;
-}
-//# sourceMappingURL=operator-peer.d.ts.map