@deepseek-ai/dsh-cordis-host-runner 0.1.6-alpha.2 → 0.1.7-alpha.2

package/lib/index.js

@@ -1079,53 +1079,6 @@ var DynamicCordisRegistry = class {
 * closure, with its own facade.
 * @module @deepseek-ai/dsh-cordis-host-runner/sandbox
 */
-/** Exact Host closure symbols exposed by the sandbox and guarded Context. */
-const HOST_BUILTIN_INSPECTION = [
-	{
-		name: "ctx",
-		description: "Restricted Cordis Context. Prefer ctx.get(name) with an undefined check; use inject for hard dependencies.",
-		signatures: [
-			"ctx.get(name: string): unknown | undefined",
-			"ctx.on(name: string, listener: Function): () => void",
-			"ctx.provide(name: string, value: unknown): () => void",
-			"ctx.effect(callback: Function, label?: string): () => void"
-		]
-	},
-	{
-		name: "harness",
-		description: "Host helpers for Package-private Client RPC and model-visible dynamic Tools.",
-		signatures: [
-			"harness.handle(method: string, handler: (args: JsonValue) => JsonValue | Promise<JsonValue>): () => void",
-			"harness.defineTool(definition: ToolDefinition): ToolDefinition",
-			"harness.registerTool(ctx: Context, tool: ToolDefinition): () => void"
-		]
-	},
-	{
-		name: "console",
-		description: "Package-tagged Host logging.",
-		signatures: ["console.log(...values): void", "console.error(...values): void"]
-	},
-	{
-		name: "btoa",
-		description: "Encode UTF-8 text as base64.",
-		signatures: ["btoa(value: string): string"]
-	},
-	{
-		name: "atob",
-		description: "Decode base64 as UTF-8 text.",
-		signatures: ["atob(value: string): string"]
-	},
-	{
-		name: "TextEncoder",
-		description: "Standard UTF-8 encoder constructor.",
-		signatures: ["new TextEncoder()"]
-	},
-	{
-		name: "TextDecoder",
-		description: "Standard text decoder constructor.",
-		signatures: ["new TextDecoder(label?: string)"]
-	}
-];
 /**
 * A write-through console for one package, tagging every line with the package
 * id. Write-through (host stdout/stderr), NOT buffered into the tool result:
@@ -2399,10 +2352,7 @@ let DynamicCordisRunnerService = (() => {
 					type: "text",
 					text
 				}],
-				source: {
-					kind: "plugin",
-					plugin: "cordis-host-runner"
-				}
+				source: { kind: "cordis-host-runner" }
 			}));
 		}
 		steerRenderFailure(agent, plugin, definition, pluginRunId, failure) {
@@ -2411,10 +2361,7 @@ let DynamicCordisRunnerService = (() => {
 					type: "text",
 					text: `Cordis Client UI ${plugin.pluginId}/${definition.packageId} (${pluginRunId}) failed while rendering Slot "${failure.slot}" after activation.\n${formatErrorDetails(failure)}\nentryAbdicated: ${failure.abdicated}\nReport the Client render failure to the user; the definition can be stopped through the Cordis panel.`
 				}],
-				source: {
-					kind: "plugin",
-					plugin: "cordis-host-runner"
-				}
+				source: { kind: "cordis-host-runner" }
 			}));
 		}
 		steerHostHandlerFailure(plugin, run, method, failure) {
@@ -2427,10 +2374,7 @@ let DynamicCordisRunnerService = (() => {
 					type: "text",
 					text: `Cordis Host handler ${plugin.pluginId}/${run.packageId} (${run.pluginRunId}) failed when the Client called host.call(${JSON.stringify(method)}).\n${formatErrorDetails(failure)}\nThe Plugin remains running. Report the Host handler failure to the user. If the handler needs a Service, either declare that Service in the returned Plugin inject list or read it with ctx.get(name) and handle undefined.`
 				}],
-				source: {
-					kind: "plugin",
-					plugin: "cordis-host-runner"
-				}
+				source: { kind: "cordis-host-runner" }
 			}));
 		}
 		steerGuardFailure(plugin, run, platform, failure) {
@@ -2443,10 +2387,7 @@ let DynamicCordisRunnerService = (() => {
 					type: "text",
 					text: `Cordis ${platform} guard rejected runtime code in ${plugin.pluginId}/${run.packageId} (${run.pluginRunId}) after activation.\n${formatErrorDetails(failure)}\nThe Plugin remains running. Report the guard rejection to the user; it can be stopped through the Cordis panel.`
 				}],
-				source: {
-					kind: "plugin",
-					plugin: "cordis-host-runner"
-				}
+				source: { kind: "cordis-host-runner" }
 			}));
 		}
 		claimRuntimeFailure(plugin, run, key) {
@@ -2473,10 +2414,7 @@ let DynamicCordisRunnerService = (() => {
 					type: "text",
 					text
 				}],
-				source: {
-					kind: "plugin",
-					plugin: "cordis-host-runner"
-				}
+				source: { kind: "cordis-host-runner" }
 			}));
 		}
 		cancelPending(pluginId, message) {
@@ -2593,4 +2531,4 @@ function cloneAttempt(attempt) {
 	};
 }
 //#endregion
-export { ApprovalRequestId, CordisDynamicPackageId, CordisDynamicPluginId, CordisDynamicPluginRunId, CordisInspectRegistryService, DynamicCordisRunnerService, DynamicCordisRunnerService as default, HOST_BUILTIN_INSPECTION };
+export { ApprovalRequestId, CordisDynamicPackageId, CordisDynamicPluginId, CordisDynamicPluginRunId, CordisInspectRegistryService, DynamicCordisRunnerService, DynamicCordisRunnerService as default };

package/lib/typert.host.js

@@ -44,16 +44,16 @@ const _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_inventory_result$s
   'pluginRunId': z.intersection(z.string(), z.unknown()),
   'packageId': z.intersection(z.string(), z.unknown()),
   'mode': z.union([z.literal("run"), z.literal("update")]),
-  'status': z.union([z.literal("running"), z.literal("failed"), z.literal("rejected"), z.literal("awaiting-approval"), z.literal("cancelled"), z.literal("starting-host"), z.literal("client-pending"), z.literal("waiting"), z.literal("stopped")]),
+  'status': z.union([z.literal("cancelled"), z.literal("failed"), z.literal("running"), z.literal("rejected"), z.literal("awaiting-approval"), z.literal("starting-host"), z.literal("client-pending"), z.literal("waiting"), z.literal("stopped")]),
   'approvalRequestId': z.intersection(z.string(), z.unknown()).optional(),
   'requiresApproval': z.boolean().optional(),
   'host': z.object({
-  'status': z.union([z.literal("pending"), z.literal("running"), z.literal("failed"), z.literal("waiting"), z.literal("stopped"), z.literal("absent")]),
+  'status': z.union([z.literal("failed"), z.literal("running"), z.literal("pending"), z.literal("waiting"), z.literal("stopped"), z.literal("absent")]),
   'waitingFor': z.array(z.string()),
   'error': z.string().optional(),
 }),
   'client': z.object({
-  'status': z.union([z.literal("pending"), z.literal("running"), z.literal("failed"), z.literal("waiting"), z.literal("stopped"), z.literal("absent")]),
+  'status': z.union([z.literal("failed"), z.literal("running"), z.literal("pending"), z.literal("waiting"), z.literal("stopped"), z.literal("absent")]),
   'waitingFor': z.array(z.string()),
   'error': z.string().optional(),
 }),
@@ -207,7 +207,7 @@ const _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_settleUserRun_resu
   'mode': z.union([z.literal("run"), z.literal("update")]),
 }), z.object({
   'ok': z.literal(false),
-  'reason': z.union([z.literal("plugin-missing"), z.literal("rejected"), z.literal("host-half-failed"), z.literal("client-half-failed"), z.literal("package-missing"), z.literal("invalid-mode"), z.literal("transition-in-flight"), z.literal("cancelled"), z.literal("not-running")]),
+  'reason': z.union([z.literal("cancelled"), z.literal("plugin-missing"), z.literal("rejected"), z.literal("host-half-failed"), z.literal("client-half-failed"), z.literal("package-missing"), z.literal("invalid-mode"), z.literal("transition-in-flight"), z.literal("not-running")]),
   'message': z.string(),
   'stack': z.string().optional(),
 })]))
@@ -304,7 +304,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisClientSource',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_getClientCode_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":384,"column":3},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":389,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/inventory',
@@ -319,7 +319,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/inventory:result',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_inventory_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":525,"column":3},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":530,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/invoke',
@@ -374,7 +374,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisInvokeResult',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_invoke_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":741,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":746,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/reportClientGuardFailure',
@@ -434,7 +434,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/reportClientGuardFailure:result',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_reportClientGuardFailure_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":718,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":723,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/reportRenderFailure',
@@ -494,7 +494,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/reportRenderFailure:result',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_reportRenderFailure_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":684,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":689,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/resolveInspectQuery',
@@ -544,7 +544,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#CordisInspectResolveAck',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_resolveInspectQuery_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":511,"column":3},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":516,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/resolveRequestRun',
@@ -579,7 +579,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisResolveAck',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_resolveRequestRun_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":413,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":418,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/runHostHalf',
@@ -659,7 +659,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisHostHalfResult',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_runHostHalf_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":325,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":330,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/settleUserRun',
@@ -709,7 +709,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisRunResponse',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_settleUserRun_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":438,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":443,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/stopFromPanel',
@@ -749,7 +749,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisStopResponse',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_stopFromPanel_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":480,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":485,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/syncInspectManifest',
@@ -774,7 +774,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/syncInspectManifest:result',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_syncInspectManifest_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":498,"column":3},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":503,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/undefineFromPanel',
@@ -814,7 +814,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisUndefineReceipt',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_undefineFromPanel_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":227,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":232,"column":9},
     },
   ],
   model: {
@@ -898,7 +898,7 @@ export const TYPERT = {
           },
           {
             "name": "AssistantMessage",
-            "declaration": "export interface AssistantMessage extends Message {\n    readonly role: 'assistant';\n    readonly source: ModelMessageSource;\n}"
+            "declaration": "export interface AssistantMessage extends MessageBase {\n    readonly role: 'assistant';\n    readonly source: ModelMessageSource;\n}"
           },
           {
             "name": "AssistantProviderMetadata",
@@ -936,6 +936,10 @@ export const TYPERT = {
             "name": "CommandSourceMap",
             "declaration": "export interface CommandSourceMap {\n    user: { kind: 'user'; };\n}"
           },
+          {
+            "name": "CompactionCheckpointSource",
+            "declaration": "export type CompactionCheckpointSource = typeof COMPACT_CHECKPOINT_MARKER & { readonly compactionId: CompactionId; readonly sourceCommandId?: CommandId; };"
+          },
           {
             "name": "CompactionId",
             "declaration": "export type CompactionId = Branded<'CompactionId'>;"
@@ -946,7 +950,7 @@ export const TYPERT = {
           },
           {
             "name": "ContentBlockMap",
-            "declaration": "export interface ContentBlockMap {\n    text: TextBlock;\n    reasoning: ReasoningBlock;\n    image: ImageBlock;\n    file: FileBlock;\n    'tool-call': ToolCallBlock;\n    'tool-result': ToolResultBlock;\n}"
+            "declaration": "export interface ContentBlockMap {\n    text: TextBlock;\n    reasoning: ReasoningBlock;\n    image: ImageBlock;\n    file: FileBlock;\n    'tool-call': ToolCallBlock;\n    'tool-addition': ToolAdditionBlock;\n    'tool-removal': ToolRemovalBlock;\n}"
           },
           {
             "name": "ContentBlockType",
@@ -992,9 +996,13 @@ export const TYPERT = {
             "name": "CordisInspectResolveAck",
             "declaration": "export interface CordisInspectResolveAck {\n    accepted: boolean;\n}"
           },
+          {
+            "name": "DeveloperMessage",
+            "declaration": "export interface DeveloperMessage extends MessageBase {\n    readonly role: 'developer';\n}"
+          },
           {
             "name": "EpochHeader",
-            "declaration": "export interface EpochHeader {\n    config: LlmCallConfig;\n    adapterDefaults?: LlmCallConfigAdapterDefaults;\n    tools?: ToolSchema[];\n}"
+            "declaration": "export interface EpochHeader {\n    config: LlmCallConfig;\n    adapterDefaults?: LlmCallConfigAdapterDefaults;\n    tools?: ToolSchema[];\n    system?: never;\n}"
           },
           {
             "name": "FeedbackCategory",
@@ -1096,6 +1104,10 @@ export const TYPERT = {
             "name": "JsonValue",
             "declaration": "export type JsonValue = null | boolean | number | string | JsonValue[] | { [key: string]: JsonValue; };"
           },
+          {
+            "name": "KnownCatalogMode",
+            "declaration": "export type KnownCatalogMode = { readonly mode: 'one-shot'; readonly label?: string; } | { readonly mode: 'continuable'; readonly label: string; };"
+          },
           {
             "name": "LlmCallConfig",
             "declaration": "export interface LlmCallConfig {\n    provider: string;\n    model: string;\n    reasoningEffort?: ReasoningEffortId;\n    temperature?: number;\n    maxTokens?: number;\n    stop?: string[];\n}"
@@ -1110,7 +1122,11 @@ export const TYPERT = {
           },
           {
             "name": "Message",
-            "declaration": "export interface Message {\n    readonly id: MessageId;\n    readonly role: 'system' | 'user' | 'assistant';\n    readonly content: ContentBlock[];\n    readonly source: MessageSource;\n}"
+            "declaration": "export type Message = MessageRoleMap[keyof MessageRoleMap];"
+          },
+          {
+            "name": "MessageBase",
+            "declaration": "export interface MessageBase {\n    readonly id: MessageId;\n    readonly content: readonly ContentBlock[];\n    readonly source: MessageSource;\n}"
           },
           {
             "name": "MessageFeedbackDelete",
@@ -1136,13 +1152,17 @@ export const TYPERT = {
             "name": "MessageId",
             "declaration": "export type MessageId = Branded<'MessageId'>;"
           },
+          {
+            "name": "MessageRoleMap",
+            "declaration": "export interface MessageRoleMap {\n    system: SystemMessage;\n    developer: DeveloperMessage;\n    user: UserMessage;\n    assistant: AssistantMessage;\n    tool: ToolResultMessage;\n}"
+          },
           {
             "name": "MessageSource",
             "declaration": "export type MessageSource = MessageSourceMap[keyof MessageSourceMap];"
           },
           {
             "name": "MessageSourceMap",
-            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    plugin: { kind: 'plugin'; plugin: string; } & ContextFormed;\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    'user-rpc': { kind: 'user'; rpcId: SessionRequestId; clientTimeZone?: string; };\n    'agent-message': AgentMessageSource;\n    'subagent-settled': SubagentSettledMessageSource;\n    'skill-invocation': SkillInvocationSource;\n    'team-message': TeamMessageSource;\n    goal: GoalMessageSource;\n    'session-reference': SessionReferenceSource;\n}"
+            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    'system-prompt': SystemPromptMessageSource;\n    'model-selection': { kind: 'model-selection'; } & ContextFormed;\n    'user-approval': { kind: 'user-approval'; } & ContextFormed;\n    'ptc-mode': { kind: 'ptc-mode'; };\n    'tool-registry': { kind: 'tool-registry'; };\n    'user-rpc': { kind: 'user'; rpcId: SessionRequestId; clientTimeZone?: string; };\n    'agent-message': AgentMessageSource;\n    'subagent-settled': SubagentSettledMessageSource;\n    'skill-invocation': SkillInvocationSource;\n    'cordis-host-runner': { kind: 'cordis-host-runner'; };\n    'team-message': TeamMessageSource;\n    goal: GoalMessageSource;\n    'compact-checkpoint': CompactionCheckpointSource;\n    'session-reference': SessionReferenceSource;\n}"
           },
           {
             "name": "ModelMessageSource",
@@ -1198,7 +1218,7 @@ export const TYPERT = {
           },
           {
             "name": "Session",
-            "declaration": "export class Session {\n    get surface(): SessionSurface;\n    readonly header: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    get id(): SessionId;\n    readonly firstLiveSeq: SessionLogOffset;\n    eventAt(seq: SessionSeq): SessionEvent | undefined;\n    snapshotEvents(fromSeq: SessionLogOffset = SessionLogOffset(0), toSeqExclusive: SessionLogOffset = this.seq): readonly SessionEvent[];\n    ownEvents(): readonly SessionEvent[];\n    isOwnSeq(seq: SessionSeq): boolean;\n    get seq(): SessionLogOffset;\n    append<T extends SessionEventType>(type: T, data: SessionEventMap[T], ...opts: T extends SurfaceEventType ? [opts: SurfaceIntent<T>] : []): SessionEvent<T>;\n    requestHeader(): EpochHeader | undefined;\n    requestContext(): RequestContext | undefined;\n    deriveMessages(): Message[];\n    deriveEventMessage(event: SessionEvent): Message | null;\n}"
+            "declaration": "export class Session {\n    get surface(): SessionSurface;\n    readonly header: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    get id(): SessionId;\n    readonly firstLiveSeq: SessionLogOffset;\n    readonly firstLifecycleSeq: SessionLogOffset;\n    eventAt(seq: SessionSeq): SessionEvent | undefined;\n    snapshotEvents(fromSeq: SessionLogOffset = SessionLogOffset(0), toSeqExclusive: SessionLogOffset = this.seq): readonly SessionEvent[];\n    ownEvents(): readonly SessionEvent[];\n    isOwnSeq(seq: SessionSeq): boolean;\n    get seq(): SessionLogOffset;\n    append<T extends SessionEventType>(type: T, data: SessionEventMap[T], ...opts: T extends SurfaceEventType ? [opts: SurfaceIntent<T>] : []): SessionEvent<T>;\n    requestHeader(): EpochHeader | undefined;\n    requestContext(): RequestContext | undefined;\n    deriveMessages(): Message[];\n    deriveEventMessage(event: SessionEvent): Message | null;\n}"
           },
           {
             "name": "SessionEvent",
@@ -1206,7 +1226,7 @@ export const TYPERT = {
           },
           {
             "name": "SessionEventMap",
-            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'system/message': { turn: number; step: number; message: SystemMessage; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; stream: AssistantStreamRecord[]; usage?: TokenUsage; interrupted?: true; };\n    'assistant/attempt': { turn: number; step: number; stream: AssistantStreamRecord[]; };\n    'tool/call': { turn: number; step: number; callId: ToolCallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; reason?: string; }; meta?: JsonValue; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; startsSeries?: true; };\n    'request/context': RequestContext;\n    'session/end-seed': { inherited?: true; };\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'sandbox/mode': { mode: SandboxMode; source?: 'delegation'; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: ToolCallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/ptc-dispatch-start': PtcDispatchStartEventData;\n    'tool/ptc-dispatch': PtcDispatchEventData;\n    'agent-preset/selected': { agentPreset: string; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: import('@deepseek-ai/dsh-session/types').SessionSeq; };\n    'image/offload': { targets: ImageOffloadTarget[]; };\n    'session/title': SessionTitleEventData;\n    'todo/write': { todos: TodoItem[]; };\n    'model/selection': ModelSelection;\n    'subagent/descriptor': SubagentDescriptorData;\n    'permission/preset': { preset: string; };\n    'subagent/catalog': SubagentCatalogEvent;\n    'feedback/record': FeedbackRecord;\n    'team/member': { version: 2; teamId: TeamId; member: TeamMemberSnapshot; };\n    'team/task': { version: 2; teamId: TeamId; task: TeamTaskSnapshot; };\n    'team/message/queued': { version: 2; teamId: TeamId; message: TeamMessageSnapshot; };\n    'team/message/delivered': { version: 2; teamId: TeamId; messageId: TeamMessageId; targetId: SessionId; };\n    'goal/change': GoalChangeMeta;\n    'feedback/message-put': MessageFeedbackPut;\n    'feedback/message-delete': MessageFeedbackDelete;\n    'compaction/start': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; };\n    'compaction/summary': { compactionId: CompactionId; sourceCommandId?: CommandId; summary: ContentBlock[]; shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; provider: string; model: string; maxTokens?: number; usage?: TokenUsage; } & ({ rawOutput: ContentBlock[]; llmStreamCall: true; } | { rawOutput?: ContentBlock[]; llmStreamCall?: never; });\n    'compaction/end': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; error?: string; };\n    'compaction/prune': { shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; };\n}"
+            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'developer/message': { turn: number; step: number; message: DeveloperMessage; headerSeq?: SessionSeq; };\n    'system/message': { turn: number; step: number; message: SystemMessage; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; stream: AssistantStreamRecord[]; usage?: TokenUsage; interrupted?: true; };\n    'assistant/attempt': { turn: number; step: number; stream: AssistantStreamRecord[]; };\n    'tool/call': { turn: number; step: number; callId: ToolCallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; reason?: string; }; meta?: JsonValue; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; startsSeries?: true; };\n    'request/context': RequestContext;\n    'session/end-seed': { inherited?: true; };\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'sandbox/mode': { mode: SandboxMode; source?: 'delegation'; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: ToolCallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/ptc-dispatch-start': PtcDispatchStartEventData;\n    'tool/ptc-dispatch': PtcDispatchEventData;\n    'agent-preset/selected': { agentPreset: string; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: import('@deepseek-ai/dsh-session/types').SessionSeq; };\n    'image/offload': { targets: ImageOffloadTarget[]; };\n    'session/title': SessionTitleEventData;\n    'todo/write': { todos: TodoItem[]; };\n    'model/selection': ModelSelection;\n    'subagent/descriptor': SubagentDescriptorData;\n    'permission/preset': { preset: string; };\n    'subagent/catalog': SubagentCatalogEvent;\n    'feedback/record': FeedbackRecord;\n    'team/member': { version: 2; teamId: TeamId; member: TeamMemberSnapshot; };\n    'team/task': { version: 2; teamId: TeamId; task: TeamTaskSnapshot; };\n    'team/message/queued': { version: 2; teamId: TeamId; message: TeamMessageSnapshot; };\n    'team/message/delivered': { version: 2; teamId: TeamId; messageId: TeamMessageId; targetId: SessionId; };\n    'goal/change': GoalChangeMeta;\n    'feedback/message-put': MessageFeedbackPut;\n    'feedback/message-delete': MessageFeedbackDelete;\n    'compaction/start': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; };\n    'compaction/summary': { compactionId: CompactionId; sourceCommandId?: CommandId; summary: ContentBlock[]; shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; provider: string; model: string; maxTokens?: number; usage?: TokenUsage; } & ({ rawOutput: ContentBlock[]; llmStreamCall: true; } | { rawOutput?: ContentBlock[]; llmStreamCall?: never; });\n    'compaction/end': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; error?: string; };\n    'compaction/prune': { shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; };\n}"
           },
           {
             "name": "SessionEventType",
@@ -1266,7 +1286,7 @@ export const TYPERT = {
           },
           {
             "name": "SubagentCatalogEvent",
-            "declaration": "export type SubagentCatalogEvent = { readonly version: 0; readonly childId: SessionId; readonly childCreatedAt: number; } & ({ readonly mode: 'one-shot'; readonly label?: string; } | { readonly mode: 'continuable'; readonly label: string; });"
+            "declaration": "export type SubagentCatalogEvent = { readonly childId: SessionId; readonly childCreatedAt: number; } & (({ readonly version: 0; } & KnownCatalogMode) | ({ readonly version: 1; } & (KnownCatalogMode | { readonly mode: 'unknown'; readonly label?: string; })));"
           },
           {
             "name": "SubagentDescriptorBase",
@@ -1282,7 +1302,7 @@ export const TYPERT = {
           },
           {
             "name": "SurfaceEventType",
-            "declaration": "export type SurfaceEventType = 'system/message' | 'user/message' | 'assistant/message' | 'tool/result';"
+            "declaration": "export type SurfaceEventType = 'system/message' | 'developer/message' | 'user/message' | 'assistant/message' | 'tool/result';"
           },
           {
             "name": "SurfaceIntent",
@@ -1294,7 +1314,11 @@ export const TYPERT = {
           },
           {
             "name": "SystemMessage",
-            "declaration": "export interface SystemMessage extends Message {\n    readonly role: 'system';\n    readonly source: MessageSourceMap['plugin'];\n}"
+            "declaration": "export interface SystemMessage extends MessageBase {\n    readonly role: 'system';\n    readonly source: MessageSourceMap['system-prompt'];\n}"
+          },
+          {
+            "name": "SystemPromptMessageSource",
+            "declaration": "export interface SystemPromptMessageSource {\n    kind: 'system-prompt';\n}"
           },
           {
             "name": "SystemPromptUpdate",
@@ -1348,6 +1372,10 @@ export const TYPERT = {
             "name": "TokenUsage",
             "declaration": "export interface TokenUsage {\n    inputTokens: number;\n    outputTokens: number;\n    totalTokens?: number;\n    cacheReadTokens?: number;\n    cacheWriteTokens?: number;\n    reasoningTokens?: number;\n}"
           },
+          {
+            "name": "ToolAdditionBlock",
+            "declaration": "export interface ToolAdditionBlock {\n    type: 'tool-addition';\n    toolName: string;\n    tool?: never;\n}"
+          },
           {
             "name": "ToolCallBlock",
             "declaration": "export interface ToolCallBlock {\n    type: 'tool-call';\n    id: ToolCallId;\n    name: string;\n    arguments: string;\n}"
@@ -1361,20 +1389,20 @@ export const TYPERT = {
             "declaration": "export interface ToolMessageSource {\n    kind: 'tool';\n    callId: ToolCallId;\n}"
           },
           {
-            "name": "ToolRestriction",
-            "declaration": "export interface ToolRestriction {\n    readonly allow?: readonly string[];\n    readonly deny?: readonly string[];\n}"
+            "name": "ToolRemovalBlock",
+            "declaration": "export interface ToolRemovalBlock {\n    type: 'tool-removal';\n    toolName: string;\n}"
           },
           {
-            "name": "ToolResultBlock",
-            "declaration": "export interface ToolResultBlock {\n    type: 'tool-result';\n    toolCallId: ToolCallId;\n    content: ContentBlock[];\n    isError?: boolean;\n}"
+            "name": "ToolRestriction",
+            "declaration": "export interface ToolRestriction {\n    readonly allow?: readonly string[];\n    readonly deny?: readonly string[];\n}"
           },
           {
             "name": "ToolResultMessage",
-            "declaration": "export interface ToolResultMessage extends Message {\n    readonly role: 'user';\n    readonly content: [ToolResultBlock];\n    readonly source: ToolMessageSource;\n}"
+            "declaration": "export interface ToolResultMessage extends MessageBase {\n    readonly role: 'tool';\n    readonly source: ToolMessageSource;\n    readonly toolCallId: ToolCallId;\n    readonly isError?: boolean;\n}"
           },
           {
             "name": "ToolSchema",
-            "declaration": "export interface ToolSchema {\n    name: string;\n    description: string;\n    parameters: Record<string, unknown>;\n}"
+            "declaration": "export interface ToolSchema {\n    deferLoading?: true;\n    name: string;\n    description: string;\n    parameters: Record<string, unknown>;\n}"
           },
           {
             "name": "TurnEndCancelCause",
@@ -1386,11 +1414,11 @@ export const TYPERT = {
           },
           {
             "name": "TurnEndReasonMap",
-            "declaration": "export interface TurnEndReasonMap {\n    completed: { kind: 'completed'; };\n    aborted: { kind: 'aborted'; reason: TurnEndCancelCause; };\n    blocked: { kind: 'blocked'; };\n    error: { kind: 'error'; error: LlmFailure; };\n    'max-tokens': { kind: 'max-tokens'; };\n    interrupted: { kind: 'interrupted'; };\n}"
+            "declaration": "export interface TurnEndReasonMap {\n    completed: { kind: 'completed'; };\n    aborted: { kind: 'aborted'; reason: TurnEndCancelCause; };\n    blocked: { kind: 'blocked'; };\n    error: { kind: 'error'; error: LlmFailure; };\n    'max-tokens': { kind: 'max-tokens'; };\n    interrupted: { kind: 'interrupted'; };\n    forked: { kind: 'forked'; };\n}"
           },
           {
             "name": "UserMessage",
-            "declaration": "export interface UserMessage extends Message {\n    readonly role: 'user';\n}"
+            "declaration": "export interface UserMessage extends MessageBase {\n    readonly role: 'user';\n}"
           }
         ]
       },
@@ -1589,7 +1617,7 @@ export const TYPERT = {
           },
           {
             "name": "AssistantMessage",
-            "declaration": "export interface AssistantMessage extends Message {\n    readonly role: 'assistant';\n    readonly source: ModelMessageSource;\n}"
+            "declaration": "export interface AssistantMessage extends MessageBase {\n    readonly role: 'assistant';\n    readonly source: ModelMessageSource;\n}"
           },
           {
             "name": "AssistantProviderMetadata",
@@ -1627,6 +1655,10 @@ export const TYPERT = {
             "name": "CommandSourceMap",
             "declaration": "export interface CommandSourceMap {\n    user: { kind: 'user'; };\n}"
           },
+          {
+            "name": "CompactionCheckpointSource",
+            "declaration": "export type CompactionCheckpointSource = typeof COMPACT_CHECKPOINT_MARKER & { readonly compactionId: CompactionId; readonly sourceCommandId?: CommandId; };"
+          },
           {
             "name": "CompactionId",
             "declaration": "export type CompactionId = Branded<'CompactionId'>;"
@@ -1637,7 +1669,7 @@ export const TYPERT = {
           },
           {
             "name": "ContentBlockMap",
-            "declaration": "export interface ContentBlockMap {\n    text: TextBlock;\n    reasoning: ReasoningBlock;\n    image: ImageBlock;\n    file: FileBlock;\n    'tool-call': ToolCallBlock;\n    'tool-result': ToolResultBlock;\n}"
+            "declaration": "export interface ContentBlockMap {\n    text: TextBlock;\n    reasoning: ReasoningBlock;\n    image: ImageBlock;\n    file: FileBlock;\n    'tool-call': ToolCallBlock;\n    'tool-addition': ToolAdditionBlock;\n    'tool-removal': ToolRemovalBlock;\n}"
           },
           {
             "name": "ContentBlockType",
@@ -1707,6 +1739,10 @@ export const TYPERT = {
             "name": "CordisRunStatus",
             "declaration": "export type CordisRunStatus = 'awaiting-approval' | 'starting-host' | 'client-pending' | 'running' | 'waiting' | 'rejected' | 'failed' | 'cancelled' | 'stopped';"
           },
+          {
+            "name": "DeveloperMessage",
+            "declaration": "export interface DeveloperMessage extends MessageBase {\n    readonly role: 'developer';\n}"
+          },
           {
             "name": "DynamicCordisClientSource",
             "declaration": "export interface DynamicCordisClientSource {\n    code: string;\n    name: string;\n    pluginId: CordisDynamicPluginId;\n    packageId: CordisDynamicPackageId;\n    pluginRunId: CordisDynamicPluginRunId;\n}"
@@ -1781,7 +1817,7 @@ export const TYPERT = {
           },
           {
             "name": "EpochHeader",
-            "declaration": "export interface EpochHeader {\n    config: LlmCallConfig;\n    adapterDefaults?: LlmCallConfigAdapterDefaults;\n    tools?: ToolSchema[];\n}"
+            "declaration": "export interface EpochHeader {\n    config: LlmCallConfig;\n    adapterDefaults?: LlmCallConfigAdapterDefaults;\n    tools?: ToolSchema[];\n    system?: never;\n}"
           },
           {
             "name": "FeedbackCategory",
@@ -1875,6 +1911,10 @@ export const TYPERT = {
             "name": "JsonValue",
             "declaration": "export type JsonValue = null | boolean | number | string | JsonValue[] | { [key: string]: JsonValue; };"
           },
+          {
+            "name": "KnownCatalogMode",
+            "declaration": "export type KnownCatalogMode = { readonly mode: 'one-shot'; readonly label?: string; } | { readonly mode: 'continuable'; readonly label: string; };"
+          },
           {
             "name": "LlmCallConfig",
             "declaration": "export interface LlmCallConfig {\n    provider: string;\n    model: string;\n    reasoningEffort?: ReasoningEffortId;\n    temperature?: number;\n    maxTokens?: number;\n    stop?: string[];\n}"
@@ -1889,7 +1929,11 @@ export const TYPERT = {
           },
           {
             "name": "Message",
-            "declaration": "export interface Message {\n    readonly id: MessageId;\n    readonly role: 'system' | 'user' | 'assistant';\n    readonly content: ContentBlock[];\n    readonly source: MessageSource;\n}"
+            "declaration": "export type Message = MessageRoleMap[keyof MessageRoleMap];"
+          },
+          {
+            "name": "MessageBase",
+            "declaration": "export interface MessageBase {\n    readonly id: MessageId;\n    readonly content: readonly ContentBlock[];\n    readonly source: MessageSource;\n}"
           },
           {
             "name": "MessageFeedbackDelete",
@@ -1915,13 +1959,17 @@ export const TYPERT = {
             "name": "MessageId",
             "declaration": "export type MessageId = Branded<'MessageId'>;"
           },
+          {
+            "name": "MessageRoleMap",
+            "declaration": "export interface MessageRoleMap {\n    system: SystemMessage;\n    developer: DeveloperMessage;\n    user: UserMessage;\n    assistant: AssistantMessage;\n    tool: ToolResultMessage;\n}"
+          },
           {
             "name": "MessageSource",
             "declaration": "export type MessageSource = MessageSourceMap[keyof MessageSourceMap];"
           },
           {
             "name": "MessageSourceMap",
-            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    plugin: { kind: 'plugin'; plugin: string; } & ContextFormed;\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    'user-rpc': { kind: 'user'; rpcId: SessionRequestId; clientTimeZone?: string; };\n    'agent-message': AgentMessageSource;\n    'subagent-settled': SubagentSettledMessageSource;\n    'skill-invocation': SkillInvocationSource;\n    'team-message': TeamMessageSource;\n    goal: GoalMessageSource;\n    'session-reference': SessionReferenceSource;\n}"
+            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    'system-prompt': SystemPromptMessageSource;\n    'model-selection': { kind: 'model-selection'; } & ContextFormed;\n    'user-approval': { kind: 'user-approval'; } & ContextFormed;\n    'ptc-mode': { kind: 'ptc-mode'; };\n    'tool-registry': { kind: 'tool-registry'; };\n    'user-rpc': { kind: 'user'; rpcId: SessionRequestId; clientTimeZone?: string; };\n    'agent-message': AgentMessageSource;\n    'subagent-settled': SubagentSettledMessageSource;\n    'skill-invocation': SkillInvocationSource;\n    'cordis-host-runner': { kind: 'cordis-host-runner'; };\n    'team-message': TeamMessageSource;\n    goal: GoalMessageSource;\n    'compact-checkpoint': CompactionCheckpointSource;\n    'session-reference': SessionReferenceSource;\n}"
           },
           {
             "name": "ModelMessageSource",
@@ -1977,7 +2025,7 @@ export const TYPERT = {
           },
           {
             "name": "Session",
-            "declaration": "export class Session {\n    get surface(): SessionSurface;\n    readonly header: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    get id(): SessionId;\n    readonly firstLiveSeq: SessionLogOffset;\n    eventAt(seq: SessionSeq): SessionEvent | undefined;\n    snapshotEvents(fromSeq: SessionLogOffset = SessionLogOffset(0), toSeqExclusive: SessionLogOffset = this.seq): readonly SessionEvent[];\n    ownEvents(): readonly SessionEvent[];\n    isOwnSeq(seq: SessionSeq): boolean;\n    get seq(): SessionLogOffset;\n    append<T extends SessionEventType>(type: T, data: SessionEventMap[T], ...opts: T extends SurfaceEventType ? [opts: SurfaceIntent<T>] : []): SessionEvent<T>;\n    requestHeader(): EpochHeader | undefined;\n    requestContext(): RequestContext | undefined;\n    deriveMessages(): Message[];\n    deriveEventMessage(event: SessionEvent): Message | null;\n}"
+            "declaration": "export class Session {\n    get surface(): SessionSurface;\n    readonly header: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    get id(): SessionId;\n    readonly firstLiveSeq: SessionLogOffset;\n    readonly firstLifecycleSeq: SessionLogOffset;\n    eventAt(seq: SessionSeq): SessionEvent | undefined;\n    snapshotEvents(fromSeq: SessionLogOffset = SessionLogOffset(0), toSeqExclusive: SessionLogOffset = this.seq): readonly SessionEvent[];\n    ownEvents(): readonly SessionEvent[];\n    isOwnSeq(seq: SessionSeq): boolean;\n    get seq(): SessionLogOffset;\n    append<T extends SessionEventType>(type: T, data: SessionEventMap[T], ...opts: T extends SurfaceEventType ? [opts: SurfaceIntent<T>] : []): SessionEvent<T>;\n    requestHeader(): EpochHeader | undefined;\n    requestContext(): RequestContext | undefined;\n    deriveMessages(): Message[];\n    deriveEventMessage(event: SessionEvent): Message | null;\n}"
           },
           {
             "name": "SessionEvent",
@@ -1985,7 +2033,7 @@ export const TYPERT = {
           },
           {
             "name": "SessionEventMap",
-            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'system/message': { turn: number; step: number; message: SystemMessage; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; stream: AssistantStreamRecord[]; usage?: TokenUsage; interrupted?: true; };\n    'assistant/attempt': { turn: number; step: number; stream: AssistantStreamRecord[]; };\n    'tool/call': { turn: number; step: number; callId: ToolCallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; reason?: string; }; meta?: JsonValue; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; startsSeries?: true; };\n    'request/context': RequestContext;\n    'session/end-seed': { inherited?: true; };\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'sandbox/mode': { mode: SandboxMode; source?: 'delegation'; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: ToolCallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/ptc-dispatch-start': PtcDispatchStartEventData;\n    'tool/ptc-dispatch': PtcDispatchEventData;\n    'agent-preset/selected': { agentPreset: string; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: import('@deepseek-ai/dsh-session/types').SessionSeq; };\n    'image/offload': { targets: ImageOffloadTarget[]; };\n    'session/title': SessionTitleEventData;\n    'todo/write': { todos: TodoItem[]; };\n    'model/selection': ModelSelection;\n    'subagent/descriptor': SubagentDescriptorData;\n    'permission/preset': { preset: string; };\n    'subagent/catalog': SubagentCatalogEvent;\n    'feedback/record': FeedbackRecord;\n    'team/member': { version: 2; teamId: TeamId; member: TeamMemberSnapshot; };\n    'team/task': { version: 2; teamId: TeamId; task: TeamTaskSnapshot; };\n    'team/message/queued': { version: 2; teamId: TeamId; message: TeamMessageSnapshot; };\n    'team/message/delivered': { version: 2; teamId: TeamId; messageId: TeamMessageId; targetId: SessionId; };\n    'goal/change': GoalChangeMeta;\n    'feedback/message-put': MessageFeedbackPut;\n    'feedback/message-delete': MessageFeedbackDelete;\n    'compaction/start': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; };\n    'compaction/summary': { compactionId: CompactionId; sourceCommandId?: CommandId; summary: ContentBlock[]; shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; provider: string; model: string; maxTokens?: number; usage?: TokenUsage; } & ({ rawOutput: ContentBlock[]; llmStreamCall: true; } | { rawOutput?: ContentBlock[]; llmStreamCall?: never; });\n    'compaction/end': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; error?: string; };\n    'compaction/prune': { shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; };\n}"
+            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'developer/message': { turn: number; step: number; message: DeveloperMessage; headerSeq?: SessionSeq; };\n    'system/message': { turn: number; step: number; message: SystemMessage; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; stream: AssistantStreamRecord[]; usage?: TokenUsage; interrupted?: true; };\n    'assistant/attempt': { turn: number; step: number; stream: AssistantStreamRecord[]; };\n    'tool/call': { turn: number; step: number; callId: ToolCallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; reason?: string; }; meta?: JsonValue; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; startsSeries?: true; };\n    'request/context': RequestContext;\n    'session/end-seed': { inherited?: true; };\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'sandbox/mode': { mode: SandboxMode; source?: 'delegation'; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: ToolCallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/ptc-dispatch-start': PtcDispatchStartEventData;\n    'tool/ptc-dispatch': PtcDispatchEventData;\n    'agent-preset/selected': { agentPreset: string; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: import('@deepseek-ai/dsh-session/types').SessionSeq; };\n    'image/offload': { targets: ImageOffloadTarget[]; };\n    'session/title': SessionTitleEventData;\n    'todo/write': { todos: TodoItem[]; };\n    'model/selection': ModelSelection;\n    'subagent/descriptor': SubagentDescriptorData;\n    'permission/preset': { preset: string; };\n    'subagent/catalog': SubagentCatalogEvent;\n    'feedback/record': FeedbackRecord;\n    'team/member': { version: 2; teamId: TeamId; member: TeamMemberSnapshot; };\n    'team/task': { version: 2; teamId: TeamId; task: TeamTaskSnapshot; };\n    'team/message/queued': { version: 2; teamId: TeamId; message: TeamMessageSnapshot; };\n    'team/message/delivered': { version: 2; teamId: TeamId; messageId: TeamMessageId; targetId: SessionId; };\n    'goal/change': GoalChangeMeta;\n    'feedback/message-put': MessageFeedbackPut;\n    'feedback/message-delete': MessageFeedbackDelete;\n    'compaction/start': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; };\n    'compaction/summary': { compactionId: CompactionId; sourceCommandId?: CommandId; summary: ContentBlock[]; shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; provider: string; model: string; maxTokens?: number; usage?: TokenUsage; } & ({ rawOutput: ContentBlock[]; llmStreamCall: true; } | { rawOutput?: ContentBlock[]; llmStreamCall?: never; });\n    'compaction/end': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; error?: string; };\n    'compaction/prune': { shadowedRange: { start: SessionSeq; end: SessionSeq; }; shadowedSeqs: SessionSeq[]; shadowedTokenCount: number; };\n}"
           },
           {
             "name": "SessionEventType",
@@ -2045,7 +2093,7 @@ export const TYPERT = {
           },
           {
             "name": "SubagentCatalogEvent",
-            "declaration": "export type SubagentCatalogEvent = { readonly version: 0; readonly childId: SessionId; readonly childCreatedAt: number; } & ({ readonly mode: 'one-shot'; readonly label?: string; } | { readonly mode: 'continuable'; readonly label: string; });"
+            "declaration": "export type SubagentCatalogEvent = { readonly childId: SessionId; readonly childCreatedAt: number; } & (({ readonly version: 0; } & KnownCatalogMode) | ({ readonly version: 1; } & (KnownCatalogMode | { readonly mode: 'unknown'; readonly label?: string; })));"
           },
           {
             "name": "SubagentDescriptorBase",
@@ -2061,7 +2109,7 @@ export const TYPERT = {
           },
           {
             "name": "SurfaceEventType",
-            "declaration": "export type SurfaceEventType = 'system/message' | 'user/message' | 'assistant/message' | 'tool/result';"
+            "declaration": "export type SurfaceEventType = 'system/message' | 'developer/message' | 'user/message' | 'assistant/message' | 'tool/result';"
           },
           {
             "name": "SurfaceIntent",
@@ -2073,7 +2121,11 @@ export const TYPERT = {
           },
           {
             "name": "SystemMessage",
-            "declaration": "export interface SystemMessage extends Message {\n    readonly role: 'system';\n    readonly source: MessageSourceMap['plugin'];\n}"
+            "declaration": "export interface SystemMessage extends MessageBase {\n    readonly role: 'system';\n    readonly source: MessageSourceMap['system-prompt'];\n}"
+          },
+          {
+            "name": "SystemPromptMessageSource",
+            "declaration": "export interface SystemPromptMessageSource {\n    kind: 'system-prompt';\n}"
           },
           {
             "name": "SystemPromptUpdate",
@@ -2127,6 +2179,10 @@ export const TYPERT = {
             "name": "TokenUsage",
             "declaration": "export interface TokenUsage {\n    inputTokens: number;\n    outputTokens: number;\n    totalTokens?: number;\n    cacheReadTokens?: number;\n    cacheWriteTokens?: number;\n    reasoningTokens?: number;\n}"
           },
+          {
+            "name": "ToolAdditionBlock",
+            "declaration": "export interface ToolAdditionBlock {\n    type: 'tool-addition';\n    toolName: string;\n    tool?: never;\n}"
+          },
           {
             "name": "ToolCallBlock",
             "declaration": "export interface ToolCallBlock {\n    type: 'tool-call';\n    id: ToolCallId;\n    name: string;\n    arguments: string;\n}"
@@ -2140,20 +2196,20 @@ export const TYPERT = {
             "declaration": "export interface ToolMessageSource {\n    kind: 'tool';\n    callId: ToolCallId;\n}"
           },
           {
-            "name": "ToolRestriction",
-            "declaration": "export interface ToolRestriction {\n    readonly allow?: readonly string[];\n    readonly deny?: readonly string[];\n}"
+            "name": "ToolRemovalBlock",
+            "declaration": "export interface ToolRemovalBlock {\n    type: 'tool-removal';\n    toolName: string;\n}"
           },
           {
-            "name": "ToolResultBlock",
-            "declaration": "export interface ToolResultBlock {\n    type: 'tool-result';\n    toolCallId: ToolCallId;\n    content: ContentBlock[];\n    isError?: boolean;\n}"
+            "name": "ToolRestriction",
+            "declaration": "export interface ToolRestriction {\n    readonly allow?: readonly string[];\n    readonly deny?: readonly string[];\n}"
           },
           {
             "name": "ToolResultMessage",
-            "declaration": "export interface ToolResultMessage extends Message {\n    readonly role: 'user';\n    readonly content: [ToolResultBlock];\n    readonly source: ToolMessageSource;\n}"
+            "declaration": "export interface ToolResultMessage extends MessageBase {\n    readonly role: 'tool';\n    readonly source: ToolMessageSource;\n    readonly toolCallId: ToolCallId;\n    readonly isError?: boolean;\n}"
           },
           {
             "name": "ToolSchema",
-            "declaration": "export interface ToolSchema {\n    name: string;\n    description: string;\n    parameters: Record<string, unknown>;\n}"
+            "declaration": "export interface ToolSchema {\n    deferLoading?: true;\n    name: string;\n    description: string;\n    parameters: Record<string, unknown>;\n}"
           },
           {
             "name": "TurnEndCancelCause",
@@ -2165,11 +2221,11 @@ export const TYPERT = {
           },
           {
             "name": "TurnEndReasonMap",
-            "declaration": "export interface TurnEndReasonMap {\n    completed: { kind: 'completed'; };\n    aborted: { kind: 'aborted'; reason: TurnEndCancelCause; };\n    blocked: { kind: 'blocked'; };\n    error: { kind: 'error'; error: LlmFailure; };\n    'max-tokens': { kind: 'max-tokens'; };\n    interrupted: { kind: 'interrupted'; };\n}"
+            "declaration": "export interface TurnEndReasonMap {\n    completed: { kind: 'completed'; };\n    aborted: { kind: 'aborted'; reason: TurnEndCancelCause; };\n    blocked: { kind: 'blocked'; };\n    error: { kind: 'error'; error: LlmFailure; };\n    'max-tokens': { kind: 'max-tokens'; };\n    interrupted: { kind: 'interrupted'; };\n    forked: { kind: 'forked'; };\n}"
           },
           {
             "name": "UserMessage",
-            "declaration": "export interface UserMessage extends Message {\n    readonly role: 'user';\n}"
+            "declaration": "export interface UserMessage extends MessageBase {\n    readonly role: 'user';\n}"
           }
         ]
       }

package/lib/typert.remote-client.js

@@ -44,16 +44,16 @@ const _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_inventory_result$s
   'pluginRunId': z.intersection(z.string(), z.unknown()),
   'packageId': z.intersection(z.string(), z.unknown()),
   'mode': z.union([z.literal("run"), z.literal("update")]),
-  'status': z.union([z.literal("running"), z.literal("failed"), z.literal("rejected"), z.literal("awaiting-approval"), z.literal("cancelled"), z.literal("starting-host"), z.literal("client-pending"), z.literal("waiting"), z.literal("stopped")]),
+  'status': z.union([z.literal("cancelled"), z.literal("failed"), z.literal("running"), z.literal("rejected"), z.literal("awaiting-approval"), z.literal("starting-host"), z.literal("client-pending"), z.literal("waiting"), z.literal("stopped")]),
   'approvalRequestId': z.intersection(z.string(), z.unknown()).optional(),
   'requiresApproval': z.boolean().optional(),
   'host': z.object({
-  'status': z.union([z.literal("pending"), z.literal("running"), z.literal("failed"), z.literal("waiting"), z.literal("stopped"), z.literal("absent")]),
+  'status': z.union([z.literal("failed"), z.literal("running"), z.literal("pending"), z.literal("waiting"), z.literal("stopped"), z.literal("absent")]),
   'waitingFor': z.array(z.string()),
   'error': z.string().optional(),
 }),
   'client': z.object({
-  'status': z.union([z.literal("pending"), z.literal("running"), z.literal("failed"), z.literal("waiting"), z.literal("stopped"), z.literal("absent")]),
+  'status': z.union([z.literal("failed"), z.literal("running"), z.literal("pending"), z.literal("waiting"), z.literal("stopped"), z.literal("absent")]),
   'waitingFor': z.array(z.string()),
   'error': z.string().optional(),
 }),
@@ -207,7 +207,7 @@ const _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_settleUserRun_resu
   'mode': z.union([z.literal("run"), z.literal("update")]),
 }), z.object({
   'ok': z.literal(false),
-  'reason': z.union([z.literal("plugin-missing"), z.literal("rejected"), z.literal("host-half-failed"), z.literal("client-half-failed"), z.literal("package-missing"), z.literal("invalid-mode"), z.literal("transition-in-flight"), z.literal("cancelled"), z.literal("not-running")]),
+  'reason': z.union([z.literal("cancelled"), z.literal("plugin-missing"), z.literal("rejected"), z.literal("host-half-failed"), z.literal("client-half-failed"), z.literal("package-missing"), z.literal("invalid-mode"), z.literal("transition-in-flight"), z.literal("not-running")]),
   'message': z.string(),
   'stack': z.string().optional(),
 })]))
@@ -301,7 +301,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisClientSource',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_getClientCode_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":384,"column":3},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":389,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/inventory',
@@ -316,7 +316,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/inventory:result',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_inventory_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":525,"column":3},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":530,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/invoke',
@@ -371,7 +371,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisInvokeResult',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_invoke_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":741,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":746,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/reportClientGuardFailure',
@@ -431,7 +431,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/reportClientGuardFailure:result',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_reportClientGuardFailure_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":718,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":723,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/reportRenderFailure',
@@ -491,7 +491,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/reportRenderFailure:result',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_reportRenderFailure_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":684,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":689,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/resolveInspectQuery',
@@ -541,7 +541,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#CordisInspectResolveAck',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_resolveInspectQuery_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":511,"column":3},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":516,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/resolveRequestRun',
@@ -576,7 +576,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisResolveAck',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_resolveRequestRun_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":413,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":418,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/runHostHalf',
@@ -656,7 +656,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisHostHalfResult',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_runHostHalf_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":325,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":330,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/settleUserRun',
@@ -706,7 +706,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisRunResponse',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_settleUserRun_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":438,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":443,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/stopFromPanel',
@@ -746,7 +746,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisStopResponse',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_stopFromPanel_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":480,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":485,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/syncInspectManifest',
@@ -771,7 +771,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/syncInspectManifest:result',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_syncInspectManifest_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":498,"column":3},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":503,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-cordis-host-runner#dynamicCordisRunner/undefineFromPanel',
@@ -811,7 +811,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-cordis-host-runner/types#DynamicCordisUndefineReceipt',
         create: _deepseek_ai_dsh_cordis_host_runner_dynamicCordisRunner_undefineFromPanel_result$schema,
       },
-      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":227,"column":9},
+      sourceLocation: {"file":"packages/extensions/cordis-host-runner/src/index.ts","line":232,"column":9},
     },
   ],
 }

package/lib/types/index.d.ts

@@ -7,6 +7,13 @@ import { Context } from '@deepseek-ai/cordis';
 import type { Fiber } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
 import type { Agent } from '@deepseek-ai/dsh-agent';
+declare module '@deepseek-ai/dsh-llm' {
+    interface MessageSourceMap {
+        'cordis-host-runner': {
+            kind: 'cordis-host-runner';
+        };
+    }
+}
 import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
 import type { JsonValue } from '@deepseek-ai/dsh-util-values';
 import type { DynamicCordisDefineReceipt, DynamicCordisDefineRequest, DynamicCordisPackageInspection, DynamicCordisPluginInspection, DynamicCordisReference } from './registry.ts';
@@ -15,7 +22,6 @@ export type * from './types.ts';
 export type { DynamicCordisDefineReceipt, DynamicCordisDefineRequest, DynamicCordisDefinition, DynamicCordisHandler, DynamicCordisPackageInspection, DynamicCordisPlugin, DynamicCordisPluginInspection, DynamicCordisReference, DynamicCordisRun, } from './registry.ts';
 export { CordisInspectRegistryService } from './inspect-registry.ts';
 export type { HostCordisInspectProviderRegistration } from './inspect-registry.ts';
-export { HOST_BUILTIN_INSPECTION } from './sandbox.ts';
 /**
  * Brand a Host-minted Plugin ID.
  * @param id - opaque identifier minted by the Host registry.

package/lib/types/index.js

@@ -46,7 +46,6 @@ import { missingServices, startHostHalf } from "./lifecycle.js";
 import { DynamicCordisRegistry } from "./registry.js";
 import { createSandbox, evaluateHostCode, precheckCode } from "./sandbox.js";
 export { CordisInspectRegistryService } from "./inspect-registry.js";
-export { HOST_BUILTIN_INSPECTION } from "./sandbox.js";
 /**
  * Brand a Host-minted Plugin ID.
  * @param id - opaque identifier minted by the Host registry.
@@ -949,7 +948,7 @@ let DynamicCordisRunnerService = (() => {
             }
             agent.steer(createUserMessage({
                 content: [{ type: 'text', text }],
-                source: { kind: 'plugin', plugin: 'cordis-host-runner' },
+                source: { kind: 'cordis-host-runner' },
             }));
         }
         steerRenderFailure(agent, plugin, definition, pluginRunId, failure) {
@@ -962,7 +961,7 @@ let DynamicCordisRunnerService = (() => {
                             + `entryAbdicated: ${failure.abdicated}\n`
                             + 'Report the Client render failure to the user; the definition can be stopped through the Cordis panel.',
                     }],
-                source: { kind: 'plugin', plugin: 'cordis-host-runner' },
+                source: { kind: 'cordis-host-runner' },
             }));
         }
         steerHostHandlerFailure(plugin, run, method, failure) {
@@ -982,7 +981,7 @@ let DynamicCordisRunnerService = (() => {
                             + 'The Plugin remains running. Report the Host handler failure to the user. If the handler needs a Service, either declare '
                             + 'that Service in the returned Plugin inject list or read it with ctx.get(name) and handle undefined.',
                     }],
-                source: { kind: 'plugin', plugin: 'cordis-host-runner' },
+                source: { kind: 'cordis-host-runner' },
             }));
         }
         /* jscpd:ignore-start */
@@ -1001,7 +1000,7 @@ let DynamicCordisRunnerService = (() => {
                             + `(${run.pluginRunId}) after activation.\n${formatErrorDetails(failure)}\n`
                             + 'The Plugin remains running. Report the guard rejection to the user; it can be stopped through the Cordis panel.',
                     }],
-                source: { kind: 'plugin', plugin: 'cordis-host-runner' },
+                source: { kind: 'cordis-host-runner' },
             }));
         }
         /* jscpd:ignore-end */
@@ -1038,7 +1037,7 @@ let DynamicCordisRunnerService = (() => {
                 return;
             agent.inject(createUserMessage({
                 content: [{ type: 'text', text }],
-                source: { kind: 'plugin', plugin: 'cordis-host-runner' },
+                source: { kind: 'cordis-host-runner' },
             }));
         }
         cancelPending(pluginId, message) {

package/lib/types/sandbox.d.ts

@@ -10,36 +10,6 @@
  * closure, with its own facade.
  * @module @deepseek-ai/dsh-cordis-host-runner/sandbox
  */
-/** Exact Host closure symbols exposed by the sandbox and guarded Context. */
-export declare const HOST_BUILTIN_INSPECTION: readonly [{
-    readonly name: "ctx";
-    readonly description: "Restricted Cordis Context. Prefer ctx.get(name) with an undefined check; use inject for hard dependencies.";
-    readonly signatures: readonly ["ctx.get(name: string): unknown | undefined", "ctx.on(name: string, listener: Function): () => void", "ctx.provide(name: string, value: unknown): () => void", "ctx.effect(callback: Function, label?: string): () => void"];
-}, {
-    readonly name: "harness";
-    readonly description: "Host helpers for Package-private Client RPC and model-visible dynamic Tools.";
-    readonly signatures: readonly ["harness.handle(method: string, handler: (args: JsonValue) => JsonValue | Promise<JsonValue>): () => void", "harness.defineTool(definition: ToolDefinition): ToolDefinition", "harness.registerTool(ctx: Context, tool: ToolDefinition): () => void"];
-}, {
-    readonly name: "console";
-    readonly description: "Package-tagged Host logging.";
-    readonly signatures: readonly ["console.log(...values): void", "console.error(...values): void"];
-}, {
-    readonly name: "btoa";
-    readonly description: "Encode UTF-8 text as base64.";
-    readonly signatures: readonly ["btoa(value: string): string"];
-}, {
-    readonly name: "atob";
-    readonly description: "Decode base64 as UTF-8 text.";
-    readonly signatures: readonly ["atob(value: string): string"];
-}, {
-    readonly name: "TextEncoder";
-    readonly description: "Standard UTF-8 encoder constructor.";
-    readonly signatures: readonly ["new TextEncoder()"];
-}, {
-    readonly name: "TextDecoder";
-    readonly description: "Standard text decoder constructor.";
-    readonly signatures: readonly ["new TextDecoder(label?: string)"];
-}];
 /**
  * Build the vm context one host half evaluates in: the tagged console, the
  * `harness` registration helpers, the encoding primitives, the Node-API traps,

package/lib/types/sandbox.js

@@ -12,33 +12,6 @@
  */
 import { createContext, runInContext, Script } from 'node:vm';
 import { sandboxDefineTool, sandboxRegisterTool } from "./guard.js";
-/** Exact Host closure symbols exposed by the sandbox and guarded Context. */
-export const HOST_BUILTIN_INSPECTION = [
-    {
-        name: 'ctx',
-        description: 'Restricted Cordis Context. Prefer ctx.get(name) with an undefined check; use inject for hard dependencies.',
-        signatures: [
-            'ctx.get(name: string): unknown | undefined',
-            'ctx.on(name: string, listener: Function): () => void',
-            'ctx.provide(name: string, value: unknown): () => void',
-            'ctx.effect(callback: Function, label?: string): () => void',
-        ],
-    },
-    {
-        name: 'harness',
-        description: 'Host helpers for Package-private Client RPC and model-visible dynamic Tools.',
-        signatures: [
-            'harness.handle(method: string, handler: (args: JsonValue) => JsonValue | Promise<JsonValue>): () => void',
-            'harness.defineTool(definition: ToolDefinition): ToolDefinition',
-            'harness.registerTool(ctx: Context, tool: ToolDefinition): () => void',
-        ],
-    },
-    { name: 'console', description: 'Package-tagged Host logging.', signatures: ['console.log(...values): void', 'console.error(...values): void'] },
-    { name: 'btoa', description: 'Encode UTF-8 text as base64.', signatures: ['btoa(value: string): string'] },
-    { name: 'atob', description: 'Decode base64 as UTF-8 text.', signatures: ['atob(value: string): string'] },
-    { name: 'TextEncoder', description: 'Standard UTF-8 encoder constructor.', signatures: ['new TextEncoder()'] },
-    { name: 'TextDecoder', description: 'Standard text decoder constructor.', signatures: ['new TextDecoder(label?: string)'] },
-];
 /**
  * A write-through console for one package, tagging every line with the package
  * id. Write-through (host stdout/stderr), NOT buffered into the tool result:

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-cordis-host-runner",
   "description": "Dynamic package definition registry, host-half sandbox lifecycle, and invoke handler table for model-mounted dual-half packages",
-  "version": "0.1.6-alpha.2",
+  "version": "0.1.7-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -45,28 +45,28 @@
   "license": "MIT",
   "dependencies": {
     "zod": "^4.4.3",
-    "@deepseek-ai/dsh-util-values": "^0.1.6-alpha.2",
-    "@deepseek-ai/schemastery": "^3.18.2"
+    "@deepseek-ai/dsh-util-values": "0.1.7-alpha.2",
+    "@deepseek-ai/schemastery": "~3.18.4"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-agent": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-llm": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-brand": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-scope": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.6-alpha.2",
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-tools": "^0.1.6-alpha.2"
+    "@deepseek-ai/dsh-agent": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-scope": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.7-alpha.2",
+    "@deepseek-ai/cordis": "~4.0.4",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.7-alpha.2"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis-plugin-timer": "^1.1.4",
-    "@deepseek-ai/dsh-agent": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-brand": "^0.1.6-alpha.2",
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-scope": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tools": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-llm": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.6-alpha.2"
+    "@deepseek-ai/cordis": "~4.0.4",
+    "@deepseek-ai/cordis-plugin-timer": "~1.1.6",
+    "@deepseek-ai/dsh-agent": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-scope": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.7-alpha.2"
   }
 }