@deepseek-ai/dsh-client-file-upload 0.2.0-rc.1 → 0.2.1-alpha.1

package/README.i18n.yaml

@@ -18,8 +18,8 @@
   en: 9d5bbf52599b0d00
   zh: 7907542ce1e34549
 /deepseek-ai-dsh-client-file-upload/understand-the-implementation:
-  en: da896ccc5ecbe207
-  zh: f434a7572085ee1e
+  en: 77937960a540cf51
+  zh: 52c478bd11200975
 /deepseek-ai-dsh-client-file-upload/further-exploration:
   en: ac94eb9da9ecc296
   zh: 25cc3362e2bea330

package/README.md

@@ -44,11 +44,11 @@ The package has no Cordis configuration fields. A `Blob` uses XMLHttpRequest ins
 
 The Client plugin provides `ctx.fileUpload`. Its `upload()` method receives the owning Session identity, assembles the raw route request, and invokes the generated Remote for exact bytes. The provider reads the optional pre-Cordis `__DSH_FILE_UPLOAD__` hook once. Without a hook, each Blob or stream request owns a short-lived Worker and releases it after completion, failure, or cancellation. With the hook, the service sends the body through the page-owned Fetch carrier; the Web Worker runtime transfers stream bodies through its request frame and exposes them to the Host HTTP bridge as backpressured chunks.
 
-The Host plugin provides `ctx.fileUploads`. It owns the authenticated streaming route, encoded Remote fallback, command receipt resolver, and staged-receipt lifecycle; encoded admission, attachment-error recognition, and byte storage stay behind `ctx.attachments`. Receipt tables use the receiving Agent's Session object as their key. The Session Controller registers the resolver that can resume a cold ordinary Agent and consumes receipts during prompt admission. Prompt delivery holds each receipt binding in a disposable transaction: disposal restores the previous binding until successful delivery commits it, and queue or history observation then retires the committed receipt.
+The Host plugin provides `ctx.fileUploads`. It owns the authenticated streaming route, encoded Remote fallback, command receipt resolver, and staged-receipt lifecycle; encoded admission, attachment-error recognition, and byte storage stay behind `ctx.attachments`. Host callers supply an Agent with its runtime-owned context; receipt tables use that Agent's exact Session object as their key. The Session Controller registers the resolver that can resume a cold ordinary Agent and consumes receipts during prompt admission. Prompt delivery holds each receipt binding in a disposable transaction: disposal restores the previous binding until successful delivery commits it, and queue or history observation then retires the committed receipt.
 
 | File | Role |
 |---|---|
-| [`src/index.ts`](src/index.ts) | Host streaming route, attachment-service admission, and Agent-scoped receipt lifecycle |
+| [`src/index.ts`](src/index.ts) | Host streaming route, attachment-service admission, and Session-owned receipt lifecycle |
 | [`src/types.ts`](src/types.ts) | encoded request, receipt, and durable result types |
 | [`src/client/contract.ts`](src/client/contract.ts) | Client upload, progress, and page-hook types |
 | [`src/client/runtime.ts`](src/client/runtime.ts) | Dedicated Worker and page-owned carrier implementations |
@@ -56,7 +56,7 @@ The Host plugin provides `ctx.fileUploads`. It owns the authenticated streaming
 
 </details>
 
-**Runtime invariant:** No companion is published. Each upload receipt belongs to one exact Session, and each request uses one selected carrier. Unsupported stream carriers fail before the body is sent.
+Each upload receipt belongs to one exact Session, and each request uses one selected carrier. Unsupported stream carriers fail before the body is sent.
 
 -----
 

package/README.zh.md

@@ -44,11 +44,11 @@ kind: "package-reference"
 
 Client 插件提供 `ctx.fileUpload`。其 `upload()` 方法接收所属 Session 标识，组装原始路由请求，并为精确字节调用生成的 Remote。提供方只读取一次可选的 Cordis 启动前 `__DSH_FILE_UPLOAD__` 钩子。没有该钩子时，每个 Blob 或 stream 请求拥有一个短期 Worker，并在完成、失败或取消后释放。存在该钩子时，服务通过页面自己提供的 Fetch 载体发送请求体；Web Worker runtime 会通过请求帧转移 stream 请求体，再以带背压的分片形式交给 Host HTTP bridge。
 
-Host 插件提供 `ctx.fileUploads`。它拥有经过认证的流式路由、编码 Remote 兜底、命令凭证解析器与暂存凭证生命周期；编码准入、附件错误识别与字节存储仍由 `ctx.attachments` 提供。凭证表以接收方 Agent 的 Session 对象为键。Session Controller 注册可恢复休眠普通 Agent 的解析器，并在 prompt 准入时消费凭证。Prompt 投递通过可释放事务持有每个凭证绑定。成功投递提交事务前，释放会恢复原绑定；提交后，队列或历史观察会退休该凭证。
+Host 插件提供 `ctx.fileUploads`。它拥有经过认证的流式路由、编码 Remote 兜底、命令凭证解析器与暂存凭证生命周期；编码准入、附件错误识别与字节存储仍由 `ctx.attachments` 提供。Host 调用方传入具有运行时所属上下文的 Agent；凭证表以该 Agent 的准确 Session 对象为键。Session Controller 注册可恢复休眠普通 Agent 的解析器，并在 prompt 准入时消费凭证。Prompt 投递通过可释放事务持有每个凭证绑定。成功投递提交事务前，释放会恢复原绑定；提交后，队列或历史观察会退休该凭证。
 
 | 文件 | 职责 |
 |---|---|
-| [`src/index.ts`](src/index.ts) | Host 流式路由、附件服务准入与按 Agent scope 管理的凭证生命周期 |
+| [`src/index.ts`](src/index.ts) | Host 流式路由、附件服务准入与 Session 所属的凭证生命周期 |
 | [`src/types.ts`](src/types.ts) | 编码请求、凭证与持久结果类型 |
 | [`src/client/contract.ts`](src/client/contract.ts) | Client 上传、进度与页面钩子类型 |
 | [`src/client/runtime.ts`](src/client/runtime.ts) | 专用 Worker 与页面自有载体实现 |
@@ -56,7 +56,7 @@ Host 插件提供 `ctx.fileUploads`。它拥有经过认证的流式路由、编
 
 </details>
 
-**运行时不变式：** 不发布伴生入口。每个上传凭证只属于一个准确的 Session，每个请求只使用一个已选定载体。载体不支持的 stream 会在发送请求体前失败。
+每个上传凭证只属于一个准确的 Session，每个请求只使用一个已选定载体。载体不支持的 stream 会在发送请求体前失败。
 
 -----
 

package/lib/index.js

@@ -1,5 +1,4 @@
 import { randomUUID } from "node:crypto";
-import { scopeOf } from "@deepseek-ai/dsh-scope";
 import { Remote, RemoteError, TypertRemoteService, remoteErrorOf } from "@deepseek-ai/dsh-typert-protocol";
 import { brandString } from "@deepseek-ai/dsh-brand";
 //#region lib/types/http-route.js
@@ -74,7 +73,7 @@ const FILE_UPLOAD_PATH = "/api/session/uploadFileBinary";
 FILE_UPLOAD_PATH.slice(1);
 //#endregion
 //#region lib/types/index.js
-/** Host file-upload service: streamed intake and Agent-scoped staged receipts. */
+/** Host file-upload service: streamed intake and Session-owned staged receipts. */
 var __runInitializers = function(thisArg, initializers, value) {
 	var useValue = arguments.length > 2;
 	for (var i = 0; i < initializers.length; i++) value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
@@ -128,7 +127,7 @@ var PromptFileBindingGuard = class {
 		this.rollback();
 	}
 };
-/** Host service owning upload storage and Agent-scoped staged receipts. */
+/** Host service owning upload storage and receipts keyed by each receiving Agent's exact Session. */
 let FileUploads = (() => {
 	let _classSuper = TypertRemoteService;
 	let _instanceExtraInitializers = [];
@@ -221,13 +220,12 @@ let FileUploads = (() => {
 			}));
 		}
 		/**
-		* Resolve one staged receipt inside its receiving Agent scope.
+		* Resolve one staged receipt for the receiving Agent's exact Session.
 		* @param agent - receiving Agent.
 		* @param receiptId - opaque receipt minted for one completed upload.
 		* @returns durable file reference, or `undefined` for an unknown or foreign receipt.
 		*/
 		resolve(agent, receiptId) {
-			this.assertAgentScope(agent);
 			return this.stagedFiles.get(agent.session)?.get(receiptId)?.file;
 		}
 		/**
@@ -239,7 +237,6 @@ let FileUploads = (() => {
 		* @returns binding kept after commit until queue or history observation retires its receipts.
 		*/
 		bindPrompt(agent, receiptIds, requestId) {
-			this.assertAgentScope(agent);
 			const staged = this.stagedFiles.get(agent.session);
 			const bound = receiptIds.map((receiptId) => {
 				const upload = staged?.get(receiptId);
@@ -261,7 +258,6 @@ let FileUploads = (() => {
 		* @param requestId - prompt identity carried by the queue occurrence.
 		*/
 		retirePrompt(agent, requestId) {
-			this.assertAgentScope(agent);
 			this.retire(agent.session, requestId);
 		}
 		async commit(agent, save) {
@@ -293,11 +289,7 @@ let FileUploads = (() => {
 			if (resolver === void 0) throw new RemoteError("session/not-found", `session "${sessionId}" is not attached`, { sessionId });
 			return resolver(sessionId);
 		}
-		assertAgentScope(agent) {
-			if (scopeOf(agent.ctx) !== agent) throw new Error("file-upload: operation requires the Agent's own scope");
-		}
 		assertOrdinaryAgent(agent) {
-			this.assertAgentScope(agent);
 			if (agent.session.header.origin === "subagent") throw new RemoteError("subagent/attachment-invalid", "subagent conversations do not accept file uploads", { reason: "SUBAGENT_FILE_UNSUPPORTED" });
 		}
 		observeSessionEvent(session, event) {

package/lib/typert.host.js

@@ -63,16 +63,16 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-client-file-upload/types#FileUploadValue',
         create: _deepseek_ai_dsh_client_file_upload_fileUploads_upload_result$schema,
       },
-      sourceLocation: {"file":"packages/client/file-upload/src/index.ts","line":106,"column":3},
+      sourceLocation: {"file":"packages/client/file-upload/src/index.ts","line":105,"column":3},
     },
   ],
   model: {
     "services": [
       {
-        "description": "Host service owning upload storage and Agent-scoped staged receipts.",
-        "summary": "Host service owning upload storage and Agent-scoped staged receipts.",
+        "description": "Host service owning upload storage and receipts keyed by each receiving Agent's exact Session.",
+        "summary": "Host service owning upload storage and receipts keyed by each receiving Agent's exact Session.",
         "tags": [],
-        "jsDoc": "/** Host service owning upload storage and Agent-scoped staged receipts. */",
+        "jsDoc": "/** Host service owning upload storage and receipts keyed by each receiving Agent's exact Session. */",
         "key": "fileUploads",
         "exportName": "FileUploads",
         "members": [
@@ -101,8 +101,8 @@ export const TYPERT = {
             "kind": "method",
             "name": "resolve",
             "signature": "resolve(agent: Agent, receiptId: FileUploadReceiptId): FileAttachmentRef | undefined",
-            "summary": "Resolve one staged receipt inside its receiving Agent scope.",
-            "jsDoc": "/**\n * Resolve one staged receipt inside its receiving Agent scope.\n * @param agent - receiving Agent.\n * @param receiptId - opaque receipt minted for one completed upload.\n * @returns durable file reference, or `undefined` for an unknown or foreign receipt.\n */"
+            "summary": "Resolve one staged receipt for the receiving Agent's exact Session.",
+            "jsDoc": "/**\n * Resolve one staged receipt for the receiving Agent's exact Session.\n * @param agent - receiving Agent.\n * @param receiptId - opaque receipt minted for one completed upload.\n * @returns durable file reference, or `undefined` for an unknown or foreign receipt.\n */"
           },
           {
             "kind": "method",
@@ -388,6 +388,14 @@ export const TYPERT = {
             "name": "LlmFailure",
             "declaration": "export interface LlmFailure {\n    readonly message: string;\n    readonly code: string;\n    readonly status?: number;\n    readonly providerRetryAfterMs?: number;\n    readonly requestId?: ProviderRequestId;\n    readonly offloadImages?: number;\n}"
           },
+          {
+            "name": "LlmRetryEventData",
+            "declaration": "export type LlmRetryEventData = { retryId: RetryId; turn: number; step: number; provider: string; mode: 'normal'; policyKey: string; retry: number; maxRetries: number; delayMs: number; failure: LlmFailure; } | { retryId: RetryId; turn: number; step: number; provider: string; mode: 'always'; policyKey: string; retry: number; delayMs: number; failure: LlmFailure; };"
+          },
+          {
+            "name": "LlmRetryStartedEventData",
+            "declaration": "export interface LlmRetryStartedEventData {\n    retryId: RetryId;\n    turn: number;\n    step: number;\n    retry: number;\n}"
+          },
           {
             "name": "Message",
             "declaration": "export type Message = MessageRoleMap[keyof MessageRoleMap];"
@@ -430,7 +438,7 @@ export const TYPERT = {
           },
           {
             "name": "MessageSourceMap",
-            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    'system-prompt': SystemPromptMessageSource;\n    'model-selection': { kind: 'model-selection'; } & ContextFormed;\n    'user-approval': { kind: 'user-approval'; } & ContextFormed;\n    'ptc-mode': { kind: 'ptc-mode'; };\n    'tool-registry': { kind: 'tool-registry'; };\n    'user-rpc': { kind: 'user'; rpcId: SessionRequestId; clientTimeZone?: string; };\n    'agent-message': AgentMessageSource;\n    'subagent-settled': SubagentSettledMessageSource;\n    'skill-invocation': SkillInvocationSource;\n    'cordis-host-runner': { kind: 'cordis-host-runner'; };\n    goal: GoalMessageSource;\n    schedule: { kind: 'schedule'; } & ContextFormed;\n    'compact-checkpoint': CompactionCheckpointSource;\n    'session-reference': SessionReferenceSource;\n}"
+            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    'system-prompt': SystemPromptMessageSource;\n    'model-selection': { kind: 'model-selection'; } & ContextFormed;\n    'user-approval': { kind: 'user-approval'; } & ContextFormed;\n    'ptc-mode': { kind: 'ptc-mode'; };\n    'tool-registry': { kind: 'tool-registry'; };\n    'user-rpc': { kind: 'user'; rpcId: SessionRequestId; clientTimeZone?: string; };\n    'agent-message': AgentMessageSource;\n    'subagent-settled': SubagentSettledMessageSource;\n    'skill-invocation': SkillInvocationSource;\n    'cordis-host-runner': { kind: 'cordis-host-runner'; };\n    'compact-checkpoint': CompactionCheckpointSource;\n    'user-question-reply': { kind: 'user-question-reply'; callId: ToolCallId; outcome: 'answered'; };\n    goal: GoalMessageSource;\n    schedule: { kind: 'schedule'; } & ContextFormed;\n    'session-reference': SessionReferenceSource;\n}"
           },
           {
             "name": "ModelMessageSource",
@@ -488,6 +496,10 @@ export const TYPERT = {
             "name": "RequestHeaderReason",
             "declaration": "export type RequestHeaderReason = 'initial' | 'resume' | 'change' | 'series';"
           },
+          {
+            "name": "RetryId",
+            "declaration": "export type RetryId = Branded<'RetryId'>;"
+          },
           {
             "name": "SandboxMode",
             "declaration": "export type SandboxMode = 'read-only' | 'workspace-write' | 'danger-full-access';"
@@ -522,7 +534,7 @@ export const TYPERT = {
           },
           {
             "name": "SessionEventMap",
-            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'developer/message': { turn: number; step: number; message: DeveloperMessage; headerSeq?: SessionSeq; };\n    'system/message': { turn: number; step: number; message: SystemMessage; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; stream: AssistantStreamRecord[]; usage?: TokenUsage; interrupted?: true; };\n    'assistant/attempt': { turn: number; step: number; stream: AssistantStreamRecord[]; };\n    'tool/call': { turn: number; step: number; callId: ToolCallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; reason?: string; }; meta?: JsonValue; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; startsSeries?: true; };\n    'request/context': RequestContext;\n    'session/end-seed': { inherited?: true; };\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'sandbox/mode': { mode: SandboxMode; source?: 'delegation'; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: ToolCallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/ptc-dispatch-start': PtcDispatchStartEventData;\n    'tool/ptc-dispatch': PtcDispatchEventData;\n    'agent-preset/selected': { agentPreset: string; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: import('@deepseek-ai/dsh-session/types').SessionSeq; };\n    'image/offload': { targets: ImageOffloadTarget[]; };\n    'session/title': SessionTitleEventData;\n    'todo/write': { todos: TodoItem[]; };\n    'model/selection': ModelSelection;\n    'subagent/descriptor': SubagentDescriptorData;\n    'permission/preset': { preset: string; };\n    'subagent/catalog': SubagentCatalogEvent;\n    'compaction/start': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; };\n    'compaction/summary': { compactionId: CompactionId; sourceCommandId?: CommandId; summary: ContentBlock[]; shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; provider: string; model: string; maxTokens?: number; usage?: TokenUsage; } & ({ rawOutput: ContentBlock[]; llmStreamCall: true; } | { rawOutput?: ContentBlock[]; llmStreamCall?: never; });\n    'compaction/end': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; error?: string; };\n    'compaction/prune': { shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; };\n    'feedback/record': FeedbackRecord;\n    'goal/change': GoalChangeMeta;\n    'feedback/message-put': MessageFeedbackPut;\n    'feedback/message-delete': MessageFeedbackDelete;\n    'schedule/change': ScheduleChange;\n}"
+            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'developer/message': { turn: number; step: number; message: DeveloperMessage; headerSeq?: SessionSeq; };\n    'system/message': { turn: number; step: number; message: SystemMessage; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; stream: AssistantStreamRecord[]; usage?: TokenUsage; interrupted?: true; };\n    'assistant/attempt': { turn: number; step: number; stream: AssistantStreamRecord[]; };\n    'tool/call': { turn: number; step: number; callId: ToolCallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; reason?: string; }; meta?: JsonValue; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; startsSeries?: true; };\n    'request/context': RequestContext;\n    'session/end-seed': { inherited?: true; };\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'sandbox/mode': { mode: SandboxMode; source?: 'delegation'; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: ToolCallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/ptc-dispatch-start': PtcDispatchStartEventData;\n    'tool/ptc-dispatch': PtcDispatchEventData;\n    'agent-preset/selected': { agentPreset: string; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: import('@deepseek-ai/dsh-session/types').SessionSeq; };\n    'image/offload': { targets: ImageOffloadTarget[]; };\n    'session/title': SessionTitleEventData;\n    'todo/write': { todos: TodoItem[]; };\n    'model/selection': ModelSelection;\n    'subagent/descriptor': SubagentDescriptorData;\n    'permission/preset': { preset: string; };\n    'subagent/catalog': SubagentCatalogEvent;\n    'compaction/start': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; };\n    'compaction/summary': { compactionId: CompactionId; sourceCommandId?: CommandId; summary: ContentBlock[]; shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; provider: string; model: string; maxTokens?: number; usage?: TokenUsage; } & ({ rawOutput: ContentBlock[]; llmStreamCall: true; } | { rawOutput?: ContentBlock[]; llmStreamCall?: never; });\n    'compaction/end': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; error?: string; };\n    'compaction/prune': { shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; };\n    'feedback/record': FeedbackRecord;\n    'llm/retry': LlmRetryEventData;\n    'llm/retry-started': LlmRetryStartedEventData;\n    'goal/change': GoalChangeMeta;\n    'feedback/message-put': MessageFeedbackPut;\n    'feedback/message-delete': MessageFeedbackDelete;\n    'schedule/change': ScheduleChange;\n}"
           },
           {
             "name": "SessionEventType",

package/lib/typert.remote-client.js

@@ -60,7 +60,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-client-file-upload/types#FileUploadValue',
         create: _deepseek_ai_dsh_client_file_upload_fileUploads_upload_result$schema,
       },
-      sourceLocation: {"file":"packages/client/file-upload/src/index.ts","line":106,"column":3},
+      sourceLocation: {"file":"packages/client/file-upload/src/index.ts","line":105,"column":3},
     },
   ],
 }

package/lib/types/index.d.ts

@@ -1,4 +1,4 @@
-/** Host file-upload service: streamed intake and Agent-scoped staged receipts. */
+/** Host file-upload service: streamed intake and Session-owned staged receipts. */
 import type { Context } from '@deepseek-ai/cordis';
 import type { Agent } from '@deepseek-ai/dsh-agent';
 import type { FileAttachmentRef } from '@deepseek-ai/dsh-attachment';
@@ -19,7 +19,7 @@ export interface PromptFileBinding extends Disposable {
     /** Keep the receipt bindings until queue or history observation retires them. */
     commit(): void;
 }
-/** Host service owning upload storage and Agent-scoped staged receipts. */
+/** Host service owning upload storage and receipts keyed by each receiving Agent's exact Session. */
 export declare class FileUploads extends TypertRemoteService {
     static inject: string[];
     private readonly stagedFiles;
@@ -52,7 +52,7 @@ export declare class FileUploads extends TypertRemoteService {
         readonly name?: string;
     }): Promise<FileUploadValue>;
     /**
-     * Resolve one staged receipt inside its receiving Agent scope.
+     * Resolve one staged receipt for the receiving Agent's exact Session.
      * @param agent - receiving Agent.
      * @param receiptId - opaque receipt minted for one completed upload.
      * @returns durable file reference, or `undefined` for an unknown or foreign receipt.
@@ -75,7 +75,6 @@ export declare class FileUploads extends TypertRemoteService {
     retirePrompt(agent: Agent, requestId: string): void;
     private commit;
     private resolveAgent;
-    private assertAgentScope;
     private assertOrdinaryAgent;
     private observeSessionEvent;
     private retire;

package/lib/types/index.js

@@ -1,4 +1,4 @@
-/** Host file-upload service: streamed intake and Agent-scoped staged receipts. */
+/** Host file-upload service: streamed intake and Session-owned staged receipts. */
 var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
     var useValue = arguments.length > 2;
     for (var i = 0; i < initializers.length; i++) {
@@ -34,7 +34,6 @@ var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn,
     done = true;
 };
 import { randomUUID } from 'node:crypto';
-import { scopeOf } from '@deepseek-ai/dsh-scope';
 import { Remote, RemoteError, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
 import { handleFileUploadHttp } from "./http-route.js";
 import { FILE_UPLOAD_PATH } from "./protocol.js";
@@ -54,7 +53,7 @@ class PromptFileBindingGuard {
         this.rollback();
     }
 }
-/** Host service owning upload storage and Agent-scoped staged receipts. */
+/** Host service owning upload storage and receipts keyed by each receiving Agent's exact Session. */
 let FileUploads = (() => {
     let _classSuper = TypertRemoteService;
     let _instanceExtraInitializers = [];
@@ -125,13 +124,12 @@ let FileUploads = (() => {
             }));
         }
         /**
-         * Resolve one staged receipt inside its receiving Agent scope.
+         * Resolve one staged receipt for the receiving Agent's exact Session.
          * @param agent - receiving Agent.
          * @param receiptId - opaque receipt minted for one completed upload.
          * @returns durable file reference, or `undefined` for an unknown or foreign receipt.
          */
         resolve(agent, receiptId) {
-            this.assertAgentScope(agent);
             return this.stagedFiles.get(agent.session)?.get(receiptId)?.file;
         }
         /**
@@ -143,7 +141,6 @@ let FileUploads = (() => {
          * @returns binding kept after commit until queue or history observation retires its receipts.
          */
         bindPrompt(agent, receiptIds, requestId) {
-            this.assertAgentScope(agent);
             const staged = this.stagedFiles.get(agent.session);
             const bound = receiptIds.map((receiptId) => {
                 const upload = staged?.get(receiptId);
@@ -168,7 +165,6 @@ let FileUploads = (() => {
          * @param requestId - prompt identity carried by the queue occurrence.
          */
         retirePrompt(agent, requestId) {
-            this.assertAgentScope(agent);
             this.retire(agent.session, requestId);
         }
         async commit(agent, save) {
@@ -205,12 +201,7 @@ let FileUploads = (() => {
             }
             return resolver(sessionId);
         }
-        assertAgentScope(agent) {
-            if (scopeOf(agent.ctx) !== agent)
-                throw new Error('file-upload: operation requires the Agent\'s own scope');
-        }
         assertOrdinaryAgent(agent) {
-            this.assertAgentScope(agent);
             if (agent.session.header.origin === 'subagent') {
                 throw new RemoteError('subagent/attachment-invalid', 'subagent conversations do not accept file uploads', { reason: 'SUBAGENT_FILE_UNSUPPORTED' });
             }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-client-file-upload",
   "description": "Agent-scoped browser file upload, streaming intake, and staged receipt service",
-  "version": "0.2.0-rc.1",
+  "version": "0.2.1-alpha.1",
   "publishConfig": {
     "access": "public"
   },
@@ -59,23 +59,21 @@
   ],
   "dependencies": {
     "zod": "^4.4.3",
-    "@deepseek-ai/dsh-typert-protocol": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-brand": "0.2.0-rc.1"
+    "@deepseek-ai/dsh-typert-protocol": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-brand": "0.2.1-alpha.1"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "~4.0.4",
-    "@deepseek-ai/dsh-scope": "0.2.0-rc.1"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.1"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "~4.0.4",
-    "@deepseek-ai/dsh-agent": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-connection": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-commands": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-scope": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-util-crypto": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-remotes": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-attachment": "0.2.0-rc.1"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-commands": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-api-remotes": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-attachment": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-util-crypto": "0.2.1-alpha.1"
   },
   "scripts": {
     "bundle": "tsdown",