@deepseek-ai/dsh-message-feedback 0.0.1-rc.2 → 0.0.1-rc.3

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/feedback/message-feedback/README.md
-README.md: 54c6b92fbb68027a4aedb198948785183661a724
-README.zh.md: 29cbee0c1ec2ee810948d895c762d2e6320e9b66
+README.md: b85104abb983eb3b33ab6ddad9328e6f5f3b1fc9
+README.zh.md: 52efef5119854f4a5c3c776a227032b59b680fc5

package/README.md

@@ -37,7 +37,7 @@ Message feedback is not Session-log content or a Session projection. It emits no
 
 ## Service and Host Remote contract
 
-The same three `MessageFeedbackService` methods are published by `GatewayService` and `@Remote`; the Host endpoint names are `messageFeedback.list`, `messageFeedback.put`, and `messageFeedback.delete`. Every method returns a discriminated business union: `{ ok: true, value }` or `{ ok: false, error }`. Operational storage, corruption, or missing-durability-listener failures reject instead of being mislabeled as business errors.
+The same three `MessageFeedbackService` methods are published by `TypertRemoteService` and `@Remote`; the Host endpoint names are `messageFeedback.list`, `messageFeedback.put`, and `messageFeedback.delete`. Every method returns a discriminated business union: `{ ok: true, value }` or `{ ok: false, error }`. Operational storage, corruption, or missing-durability-listener failures reject instead of being mislabeled as business errors.
 
 | Method | Request | Success `value` | Rejected `error.code` |
 |---|---|---|---|

package/README.zh.md

@@ -37,7 +37,7 @@ message feedback 不是 Session 日志内容或 Session 投影。它不发出 `f
 
 ## 服务与 Host Remote 契约
 
-`GatewayService` 与 `@Remote` 将 `MessageFeedbackService` 的同三个方法发布出去；Host endpoint 名称为 `messageFeedback.list`、`messageFeedback.put` 与 `messageFeedback.delete`。每个方法都返回判别式业务 union：`{ ok: true, value }` 或 `{ ok: false, error }`。存储、损坏或缺少 durability listener 等操作故障会产生 reject，不会被误标为业务错误。
+`TypertRemoteService` 与 `@Remote` 将 `MessageFeedbackService` 的同三个方法发布出去；Host endpoint 名称为 `messageFeedback.list`、`messageFeedback.put` 与 `messageFeedback.delete`。每个方法都返回判别式业务 union：`{ ok: true, value }` 或 `{ ok: false, error }`。存储、损坏或缺少 durability listener 等操作故障会产生 reject，不会被误标为业务错误。
 
 | 方法 | 请求 | 成功 `value` | 拒绝的 `error.code` |
 |---|---|---|---|
@@ -77,7 +77,7 @@ Plugin disposal 会先关闭变更接纳，排空已进入各个 Session 队列
 
 - **缺少客户端聚合与 UI**——Host Remote 契约已经发布，但客户端 Remote 聚合 contribution 与任何 UI 消费方由各自边界负责并保持延后。
 - **Compare-and-set 仅限单进程**——按 Session 划分的队列只串行化一个服务实例；storage-domain 不提供跨进程条件写，因此多个 Host 进程写入同一存储根目录时仍可能丢失更新。
-- **没有持久 Session 删除级联**——Session persistence 没有删除接口，且 `session/disposed`/`host/session-removed` 表示 detach 而非持久删除。因此服务会保留空行，并可能在带外移除日志后留下孤儿行，而不会在 detach 时删除仍有效的反馈。
+- **没有持久 Session 删除级联**——Session persistence 没有删除接口，且 `session/disposed`/`host/session-removed` 表示 detach 而非持久删除。因此服务会保留空行，并可能在带外移除日志后留下遗留行，而不会在 detach 时删除仍有效的反馈。
 - **Detach/catalog retirement 窗口**——请求若恰好落在 live detach 之后、persistence catalog 物化 header 之前的极短窗口，可能收到 `session-not-found`；调用方应在 retirement materialization 后重试。
 - **Header 身份不是内容指纹**——只有 `{createdAt, cwd}` 不同时才能识别复用；本契约无法区分保留相同 header 身份的克隆日志。
 - **调用方边界受信任**——`list`/`put`/`delete` 不携带已认证的 actor 或审计身份。在加入授权与归属信息前，部署方必须只通过受信任或另行认证的边界暴露 Host gateway。

package/lib/index.js

@@ -3,7 +3,7 @@ import { randomUUID } from "node:crypto";
 import { Service } from "@deepseek-ai/cordis";
 import s from "@deepseek-ai/schemastery";
 import { deriveEventMessage, isAppendSurfaceEvent } from "@deepseek-ai/dsh-session/surface";
-import { GatewayService, Remote } from "@deepseek-ai/dsh-type-meta";
+import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { z } from "zod";
 import { defineDomain, domainTable } from "@deepseek-ai/dsh-storage-domain";
 //#region lib/types/spec.js
@@ -185,7 +185,7 @@ function nextVersion() {
 * never creates or resumes an Agent or Session.
 */
 let MessageFeedbackService = (() => {
-	let _classSuper = GatewayService;
+	let _classSuper = TypertRemoteService;
 	let _instanceExtraInitializers = [];
 	let _list_decorators;
 	let _put_decorators;

package/lib/typert.remote-client.d.ts

@@ -1,25 +1,26 @@
 /* Generated by @deepseek-ai/dsh-typert-generator from the Host FaceModel — do not edit. */
 import type {
-  TypeRTRemoteContribution,
-} from '@deepseek-ai/dsh-type-meta'
+  RemoteResult,
+  TypertRemoteContribution,
+} from '@deepseek-ai/dsh-typert-protocol'
 import type { MessageFeedbackDeleteRequest, MessageFeedbackDeleteResult, MessageFeedbackListRequest, MessageFeedbackListResult, MessageFeedbackPutRequest, MessageFeedbackPutResult } from '@deepseek-ai/dsh-message-feedback/types'
 
-declare module '@deepseek-ai/dsh-type-meta' {
-  interface TypeRTRemoteNamespace$6d657373616765466565646261636b {
-    delete: (request: MessageFeedbackDeleteRequest) => Promise<MessageFeedbackDeleteResult>
-    list: (request: MessageFeedbackListRequest) => Promise<MessageFeedbackListResult>
-    put: (request: MessageFeedbackPutRequest) => Promise<MessageFeedbackPutResult>
+declare module '@deepseek-ai/dsh-typert-protocol' {
+  interface TypertRemoteNamespace$6d657373616765466565646261636b {
+    delete: (request: MessageFeedbackDeleteRequest) => Promise<RemoteResult<MessageFeedbackDeleteResult>>
+    list: (request: MessageFeedbackListRequest) => Promise<RemoteResult<MessageFeedbackListResult>>
+    put: (request: MessageFeedbackPutRequest) => Promise<RemoteResult<MessageFeedbackPutResult>>
   }
-  interface TypeRTRemoteMap {
-    'messageFeedback/delete': (request: MessageFeedbackDeleteRequest) => Promise<MessageFeedbackDeleteResult>
-    'messageFeedback/list': (request: MessageFeedbackListRequest) => Promise<MessageFeedbackListResult>
-    'messageFeedback/put': (request: MessageFeedbackPutRequest) => Promise<MessageFeedbackPutResult>
+  interface TypertRemoteMap {
+    'messageFeedback/delete': (request: MessageFeedbackDeleteRequest) => Promise<RemoteResult<MessageFeedbackDeleteResult>>
+    'messageFeedback/list': (request: MessageFeedbackListRequest) => Promise<RemoteResult<MessageFeedbackListResult>>
+    'messageFeedback/put': (request: MessageFeedbackPutRequest) => Promise<RemoteResult<MessageFeedbackPutResult>>
   }
-  interface TypeRTRemoteNamespaceMap {
-    'messageFeedback': TypeRTRemoteNamespace$6d657373616765466565646261636b
+  interface TypertRemoteNamespaceMap {
+    'messageFeedback': TypertRemoteNamespace$6d657373616765466565646261636b
   }
 }
 
-export declare const TYPERT_REMOTE: TypeRTRemoteContribution
+export declare const TYPERT_REMOTE: TypertRemoteContribution
 export default TYPERT_REMOTE
 //# sourceMappingURL=typert.remote-client.d.ts.map

package/lib/types/index.d.ts

@@ -4,7 +4,7 @@
  */
 import { Context, Service } from '@deepseek-ai/cordis';
 import s from '@deepseek-ai/schemastery';
-import { GatewayService } from '@deepseek-ai/dsh-type-meta';
+import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
 import type { MessageFeedbackDeleteRequest, MessageFeedbackDeleteResult, MessageFeedbackListRequest, MessageFeedbackListResult, MessageFeedbackPutRequest, MessageFeedbackPutResult } from './types.ts';
 export type * from './types.ts';
 export { messageFeedbackDomainSpec, messageFeedbackItemSchema, messageFeedbackRatingSchema, messageFeedbackRowSchema, messageFeedbackSessionIdentitySchema, messageFeedbackVersionSchema, } from './spec.ts';
@@ -23,7 +23,7 @@ declare module '@deepseek-ai/cordis' {
  * Storage-domain sidecar service. It inspects persisted Session history and
  * never creates or resumes an Agent or Session.
  */
-export declare class MessageFeedbackService extends GatewayService {
+export declare class MessageFeedbackService extends TypertRemoteService {
     static inject: string[];
     /** Loader validation for the required note-size policy. */
     static Config: s<Config>;

package/lib/types/index.js

@@ -41,7 +41,7 @@ import { randomUUID } from 'node:crypto';
 import { Service } from '@deepseek-ai/cordis';
 import s from '@deepseek-ai/schemastery';
 import { deriveEventMessage, isAppendSurfaceEvent } from '@deepseek-ai/dsh-session/surface';
-import { GatewayService, Remote } from '@deepseek-ai/dsh-type-meta';
+import { TypertRemoteService, Remote } from '@deepseek-ai/dsh-typert-protocol';
 import { messageFeedbackDomainSpec } from "./spec.js";
 export { messageFeedbackDomainSpec, messageFeedbackItemSchema, messageFeedbackRatingSchema, messageFeedbackRowSchema, messageFeedbackSessionIdentitySchema, messageFeedbackVersionSchema, } from "./spec.js";
 /** Immutable empty list reused only as an input to caller-owned copying. */
@@ -109,7 +109,7 @@ function nextVersion() {
  * never creates or resumes an Agent or Session.
  */
 let MessageFeedbackService = (() => {
-    let _classSuper = GatewayService;
+    let _classSuper = TypertRemoteService;
     let _instanceExtraInitializers = [];
     let _list_decorators;
     let _put_decorators;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-message-feedback",
   "description": "Lifecycle-bound per-message rating and note sidecar for the DeepSeek Harness",
-  "version": "0.0.1-rc.2",
+  "version": "0.0.1-rc.3",
   "publishConfig": {
     "access": "restricted"
   },
@@ -45,38 +45,36 @@
     "lib/typert.host.js",
     "lib/typert.host.d.ts",
     "lib/typert.remote-client.js",
-    "lib/typert.remote-client.d.ts",
-    "lib/typert.remote-client.d.ts.map",
-    "src"
+    "lib/typert.remote-client.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
-    "@deepseek-ai/dsh-brand": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-invariants": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-session": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-session-persistence": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-type-meta": "^0.0.1-rc.2",
-    "@deepseek-ai/cordis": "^4.0.1-rc.1",
-    "@deepseek-ai/dsh-storage-domain": "^0.0.1-rc.2"
+    "@deepseek-ai/dsh-brand": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-invariants": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-llm": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-session": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-session-persistence": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-storage-domain": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-typert-protocol": "^0.0.1-rc.3",
+    "@deepseek-ai/cordis": "^4.0.1-rc.1"
   },
   "dependencies": {
     "zod": "^4.4.3",
     "@deepseek-ai/schemastery": "^3.18.1-rc.1"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis-plugin-include": "^1.0.5-rc.1",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.1-rc.1",
-    "@deepseek-ai/dsh-brand": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-invariants": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-session-persistence": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-session": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-storage": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-storage-domain": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-storage-json": "^0.0.1-rc.2",
-    "@deepseek-ai/dsh-type-meta": "^0.0.1-rc.2",
+    "@deepseek-ai/dsh-brand": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-invariants": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-llm": "^0.0.1-rc.3",
+    "@deepseek-ai/cordis-plugin-include": "^1.0.5-rc.1",
+    "@deepseek-ai/dsh-session": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-session-persistence": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-storage": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-storage-domain": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-storage-json": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-typert-protocol": "^0.0.1-rc.3",
     "@deepseek-ai/cordis": "^4.0.1-rc.1"
   }
 }

package/lib/typert.remote-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"typert.remote-client.d.ts","names":["delete","list","put"],"sources":["../src/index.ts"],"sourcesContent":[null],"mappings":";;;;;;;;IA+QEA,M;IAlFMC,I;IAgBNC,G;;;IAkEAF,wB;IAlFMC,sB;IAgBNC,qB","ignoreList":[]}

package/src/index.ts

@@ -1,383 +0,0 @@
-/**
- * Durable, lifecycle-bound feedback for finalized assistant messages.
- * @module @deepseek-ai/dsh-message-feedback
- */
-
-import { Buffer } from 'node:buffer'
-import { randomUUID } from 'node:crypto'
-import { Context, Service } from '@deepseek-ai/cordis'
-import s from '@deepseek-ai/schemastery'
-import { deriveEventMessage, isAppendSurfaceEvent } from '@deepseek-ai/dsh-session/surface'
-import type { SessionHeader, SessionId } from '@deepseek-ai/dsh-session/types'
-import type { SessionInspection } from '@deepseek-ai/dsh-session-persistence'
-import type { KvTable } from '@deepseek-ai/dsh-storage-domain'
-import { GatewayService, Remote } from '@deepseek-ai/dsh-type-meta'
-import { messageFeedbackDomainSpec } from './spec.ts'
-import type { MessageFeedbackRow, MessageFeedbackSessionIdentity } from './spec.ts'
-import type {
-  MessageFeedbackDeleteRequest,
-  MessageFeedbackDeleteResult,
-  MessageFeedbackDeleteValue,
-  MessageFeedbackFailure,
-  MessageFeedbackItem,
-  MessageFeedbackListRequest,
-  MessageFeedbackListResult,
-  MessageFeedbackListValue,
-  MessageFeedbackNoteBlank,
-  MessageFeedbackNoteTooLarge,
-  MessageFeedbackPutRequest,
-  MessageFeedbackPutResult,
-  MessageFeedbackRejected,
-  MessageFeedbackSessionNotFound,
-  MessageFeedbackSuccess,
-  MessageFeedbackVersion,
-  MessageFeedbackVersionConflict,
-} from './types.ts'
-
-export type * from './types.ts'
-export {
-  messageFeedbackDomainSpec,
-  messageFeedbackItemSchema,
-  messageFeedbackRatingSchema,
-  messageFeedbackRowSchema,
-  messageFeedbackSessionIdentitySchema,
-  messageFeedbackVersionSchema,
-} from './spec.ts'
-export type { MessageFeedbackRow, MessageFeedbackSessionIdentity } from './spec.ts'
-
-/** Required deployment policy for optional notes. */
-export interface Config {
-  /** Maximum UTF-8 byte length accepted for one note. */
-  readonly maxNoteBytes: number
-}
-
-declare module '@deepseek-ai/cordis' {
-  interface Context {
-    messageFeedback: MessageFeedbackService
-  }
-}
-
-/** Immutable empty list reused only as an input to caller-owned copying. */
-const EMPTY_ITEMS: readonly MessageFeedbackItem[] = Object.freeze([])
-
-/** Validate the one deployment-varying limit at the configuration boundary. */
-function resolveMaxNoteBytes(value: number): number {
-  if (!Number.isSafeInteger(value) || value < 1) {
-    throw new TypeError(
-      `message-feedback: maxNoteBytes must be a positive safe integer, got ${String(value)}`,
-    )
-  }
-  return value
-}
-
-/** Copy and freeze one item before it crosses the service boundary. */
-function snapshotItem(item: MessageFeedbackItem): MessageFeedbackItem {
-  return Object.freeze({
-    messageId: item.messageId,
-    rating: item.rating,
-    ...(item.note === undefined ? {} : { note: item.note }),
-    version: item.version,
-    createdAt: item.createdAt,
-    updatedAt: item.updatedAt,
-  })
-}
-
-/** Copy and freeze a list response. */
-function snapshotList(items: readonly MessageFeedbackItem[]): MessageFeedbackListValue {
-  return Object.freeze({ items: Object.freeze(items.map(snapshotItem)) })
-}
-
-/** Build a frozen success branch. */
-function success<T>(value: T): MessageFeedbackSuccess<T> {
-  return Object.freeze({ ok: true, value })
-}
-
-/** Build a frozen business-failure branch. */
-function rejected<E extends MessageFeedbackFailure>(error: E): MessageFeedbackRejected<E> {
-  return Object.freeze({ ok: false, error: Object.freeze(error) })
-}
-
-/** Project the Session fields that distinguish one persisted log lifecycle. */
-function identityOf(header: SessionHeader): MessageFeedbackSessionIdentity {
-  return Object.freeze({
-    createdAt: header.createdAt,
-    ...(header.cwd === undefined ? {} : { cwd: header.cwd }),
-  })
-}
-
-/** Whether a stored row belongs to the inspected Session lifecycle. */
-function sameIdentity(row: MessageFeedbackRow, header: SessionHeader): boolean {
-  return row.session.createdAt === header.createdAt && row.session.cwd === header.cwd
-}
-
-/** Whether two observations name the same persisted Session lifecycle. */
-function sameHeaderIdentity(left: SessionHeader, right: SessionHeader): boolean {
-  return left.id === right.id && left.createdAt === right.createdAt && left.cwd === right.cwd
-}
-
-/** Freeze the replacement row so storage-domain never exposes mutable aliases. */
-function rowSnapshot(
-  session: MessageFeedbackSessionIdentity,
-  items: readonly MessageFeedbackItem[],
-): MessageFeedbackRow {
-  const copiedItems = items.map(snapshotItem)
-  Object.freeze(copiedItems)
-  return Object.freeze({
-    session,
-    items: copiedItems,
-  })
-}
-
-/** Generate an opaque equality token for one material mutation. */
-function nextVersion(): MessageFeedbackVersion {
-  return randomUUID() as MessageFeedbackVersion
-}
-
-/** Session inspection result that keeps absence inside the business union. */
-type KnownSession =
-  | MessageFeedbackSuccess<SessionInspection>
-  | MessageFeedbackRejected<MessageFeedbackSessionNotFound>
-
-/** Validated note or one explicit request failure. */
-type ResolvedNote =
-  | MessageFeedbackSuccess<string | undefined>
-  | MessageFeedbackRejected<MessageFeedbackNoteBlank | MessageFeedbackNoteTooLarge>
-
-/**
- * Storage-domain sidecar service. It inspects persisted Session history and
- * never creates or resumes an Agent or Session.
- */
-export class MessageFeedbackService extends GatewayService {
-  static inject = ['storageDomain', 'sessionPersistence', 'sessions']
-
-  /** Loader validation for the required note-size policy. */
-  static Config: s<Config> = s.object({
-    maxNoteBytes: s.number().step(1).min(1).required(),
-  })
-
-  private readonly maxNoteBytes: number
-  private table?: KvTable<SessionId, MessageFeedbackRow>
-  private readonly operationTails = new Map<SessionId, Promise<void>>()
-  private mutationAdmissionOpen = true
-
-  /**
-   * @param ctx - Host context carrying persistence and the storage-domain form.
-   * @param config - Required note-size policy.
-   */
-  constructor(ctx: Context, config: Config) {
-    super(ctx, 'messageFeedback')
-    this.maxNoteBytes = resolveMaxNoteBytes(config.maxNoteBytes)
-  }
-
-  /** Open and own the one message-feedback sidecar domain. */
-  protected async [Service.init](): Promise<void> {
-    const domain = await this.ctx.storageDomain.open(messageFeedbackDomainSpec)
-    this.ctx.effect(() => async () => {
-      this.mutationAdmissionOpen = false
-      await Promise.all(this.operationTails.values())
-      await domain.close()
-    }, 'message-feedback.domainClose')
-    this.table = domain.table('sessions')
-  }
-
-  /**
-   * Read feedback belonging to the current persisted Session lifecycle.
-   * A stale row from a reused Session id is invisible.
-   * @param request - Session identity to inspect and list.
-   * @returns current immutable items or `session-not-found`.
-   */
-  @Remote('list')
-  async list(request: MessageFeedbackListRequest): Promise<MessageFeedbackListResult> {
-    const known = await this.inspectSession(request.sessionId)
-    if (!known.ok) return known
-    const row = this.requireTable().get(request.sessionId)
-    const items = row !== undefined && sameIdentity(row, known.value.meta) ? row.items : EMPTY_ITEMS
-    return success(snapshotList(items))
-  }
-
-  /**
-   * Create or replace feedback for one derived append-origin assistant
-   * message. Every request must match the addressed item's current version;
-   * a matching no-op returns the stored item without changing its revision.
-   * @param request - target, desired value, and observed item version.
-   * @returns the committed item or an explicit business failure.
-   */
-  @Remote('put')
-  put(request: MessageFeedbackPutRequest): Promise<MessageFeedbackPutResult> {
-    const note = this.resolveNote(request.note)
-    if (!note.ok) return Promise.resolve(note)
-    return this.enqueue(request.sessionId, async () => {
-      const known = await this.inspectSession(request.sessionId)
-      if (!known.ok) return known
-      if (!this.hasFeedbackTarget(known.value, request.messageId)) {
-        return rejected({
-          code: 'target-not-found',
-          sessionId: request.sessionId,
-          messageId: request.messageId,
-        })
-      }
-
-      const durable = await this.ensureTargetDurable(known.value)
-      if (!sameHeaderIdentity(durable.meta, known.value.meta)
-        || !this.hasFeedbackTarget(durable, request.messageId)) {
-        return rejected({
-          code: 'target-not-found',
-          sessionId: request.sessionId,
-          messageId: request.messageId,
-        })
-      }
-
-      const table = this.requireTable()
-      const stored = table.get(request.sessionId)
-      const current = stored !== undefined && sameIdentity(stored, durable.meta) ? stored : undefined
-      const items = current?.items ?? EMPTY_ITEMS
-      const index = items.findIndex(item => item.messageId === request.messageId)
-      const existing = items[index]
-      if (request.ifVersion !== (existing?.version ?? null)) {
-        return rejected(this.versionConflict(existing ?? null))
-      }
-      if (existing !== undefined
-        && existing.rating === request.rating
-        && existing.note === note.value) {
-        return success(snapshotItem(existing))
-      }
-
-      const now = Date.now()
-      const item = snapshotItem({
-        messageId: request.messageId,
-        rating: request.rating,
-        ...(note.value === undefined ? {} : { note: note.value }),
-        version: nextVersion(),
-        createdAt: existing?.createdAt ?? now,
-        updatedAt: existing === undefined ? now : Math.max(now, existing.updatedAt),
-      })
-      const nextItems = [...items]
-      if (index === -1) nextItems.push(item)
-      else nextItems[index] = item
-      await table.put(
-        request.sessionId,
-        rowSnapshot(identityOf(durable.meta), nextItems),
-      )
-      return success(snapshotItem(item))
-    })
-  }
-
-  /**
-   * Delete one feedback item. Absence is successful regardless of the
-   * supplied version; an existing item requires an exact version match.
-   * @param request - Session, message, and observed item version.
-   * @returns the stable absent postcondition, or an explicit failure.
-   */
-  @Remote('delete')
-  delete(request: MessageFeedbackDeleteRequest): Promise<MessageFeedbackDeleteResult> {
-    return this.enqueue(request.sessionId, async () => {
-      const known = await this.inspectSession(request.sessionId)
-      if (!known.ok) return known
-
-      const table = this.requireTable()
-      const stored = table.get(request.sessionId)
-      const current = stored !== undefined && sameIdentity(stored, known.value.meta) ? stored : undefined
-      const items = current?.items ?? EMPTY_ITEMS
-      const existing = items.find(item => item.messageId === request.messageId)
-      if (existing === undefined) {
-        return success<MessageFeedbackDeleteValue>(Object.freeze({ absent: true }))
-      }
-      if (request.ifVersion !== existing.version) {
-        return rejected(this.versionConflict(existing))
-      }
-
-      await table.put(
-        request.sessionId,
-        rowSnapshot(identityOf(known.value.meta), items.filter(item => item !== existing)),
-      )
-      return success<MessageFeedbackDeleteValue>(Object.freeze({ absent: true }))
-    })
-  }
-
-  /**
-   * Resolve a live owner directly; otherwise use the storage catalog as the
-   * existence authority before inspecting the log. Inspection failures for a
-   * catalogued Session remain infrastructure failures rather than being
-   * guessed into the business `session-not-found` branch.
-   */
-  private async inspectSession(sessionId: SessionId): Promise<KnownSession> {
-    if (this.ctx.sessions.get(sessionId) === undefined) {
-      const snapshots = await this.ctx.sessionPersistence.listSnapshots()
-      if (!snapshots.some(snapshot => snapshot.header.id === sessionId)
-        && this.ctx.sessions.get(sessionId) === undefined) {
-        return rejected({ code: 'session-not-found', sessionId })
-      }
-    }
-    return success(await this.ctx.sessionPersistence.inspect(sessionId))
-  }
-
-  /** Require the exact finalized append-origin assistant message projection. */
-  private hasFeedbackTarget(inspection: SessionInspection, messageId: MessageFeedbackItem['messageId']): boolean {
-    return inspection.events.some((event) => {
-      if (event.type !== 'assistant/message' || !isAppendSurfaceEvent(event)) return false
-      const message = deriveEventMessage(event)
-      return message?.role === 'assistant' && message.id === messageId
-    })
-  }
-
-  /**
-   * Put the target log prefix behind a durability barrier before its sidecar.
-   * A live owner flushes through the SessionStore's canonical checkpoint; a
-   * cold owner is re-read from the physical durable prefix.
-   */
-  private async ensureTargetDurable(inspection: SessionInspection): Promise<SessionInspection> {
-    const live = this.ctx.sessions.get(inspection.meta.id)
-    if (live !== undefined && sameHeaderIdentity(live.header, inspection.meta)) {
-      if (!(await this.ctx.sessions.flush(live))) {
-        throw new Error(
-          `message-feedback: no durability listener participated for live session '${inspection.meta.id}'`,
-        )
-      }
-      return await this.ctx.sessionPersistence.readFrom(inspection.meta.id, 0)
-    }
-    return await this.ctx.sessionPersistence.readFrom(inspection.meta.id, 0)
-  }
-
-  /** Validate optional-note semantics and the configured complete UTF-8 byte bound. */
-  private resolveNote(note: string | undefined): ResolvedNote {
-    if (note === undefined) return success(undefined)
-    if (note.trim().length === 0) return rejected({ code: 'note-blank' })
-    const actualBytes = Buffer.byteLength(note, 'utf8')
-    if (actualBytes > this.maxNoteBytes) {
-      return rejected({ code: 'note-too-large', maxBytes: this.maxNoteBytes, actualBytes })
-    }
-    return success(note)
-  }
-
-  /** Return the authoritative item needed to reconcile one failed comparison. */
-  private versionConflict(current: MessageFeedbackItem | null): MessageFeedbackVersionConflict {
-    return {
-      code: 'version-conflict',
-      current: current === null ? null : snapshotItem(current),
-    }
-  }
-
-  /** Queue a complete read/compare/write mutation behind this Session's prior mutation. */
-  private enqueue<T>(sessionId: SessionId, operation: () => Promise<T>): Promise<T> {
-    if (!this.mutationAdmissionOpen) {
-      return Promise.reject(new Error('message-feedback: service is disposing'))
-    }
-    const previous = this.operationTails.get(sessionId) ?? Promise.resolve()
-    const result = previous.then(operation)
-    const tail = result.then(() => undefined, () => undefined)
-    this.operationTails.set(sessionId, tail)
-    return result.finally(() => {
-      if (this.operationTails.get(sessionId) === tail) this.operationTails.delete(sessionId)
-    })
-  }
-
-  /** Resolve the initialized durable table or fail a broken service lifecycle. */
-  private requireTable(): KvTable<SessionId, MessageFeedbackRow> {
-    if (this.table === undefined) {
-      throw new Error('message-feedback: durable domain is not initialized')
-    }
-    return this.table
-  }
-}
-
-export default MessageFeedbackService

package/src/invariant.ts

@@ -1,27 +0,0 @@
-/** Package-owned invariant companion. @module @deepseek-ai/dsh-message-feedback/invariant */
-
-/* jscpd:ignore-start */
-import type { Context } from '@deepseek-ai/cordis'
-import type { InvariantInstaller } from '@deepseek-ai/dsh-invariants'
-
-const PACKAGE_NAME = '@deepseek-ai/dsh-message-feedback'
-
-/** Cordis companion plugin name. */
-export const name = 'message-feedback-invariant'
-/** Services required before the companion can reserve and check package ownership. */
-export const inject = ['invariants']
-
-/**
- * No runtime invariant: the private typed writer owns current row mutations,
- * the domain schema validates rows on reopen, and no second authority exists.
- */
-const install: InvariantInstaller = Object.assign(() => {}, { inject: ['messageFeedback'] })
-
-/**
- * Register this package's invariant companion.
- * @param ctx - Cordis context carrying the invariant service.
- * @returns the installed registration's disposer after setup succeeds.
- */
-export const apply = (ctx: Context): Promise<() => void> =>
-  Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install))
-/* jscpd:ignore-end */

package/src/spec.ts

@@ -1,90 +0,0 @@
-/**
- * Durable storage-domain declaration for lifecycle-bound message feedback.
- * @module @deepseek-ai/dsh-message-feedback/src/spec
- */
-
-import { z } from 'zod'
-import type { MessageId } from '@deepseek-ai/dsh-llm/brand'
-import type { SessionId } from '@deepseek-ai/dsh-session/types'
-import { defineDomain, domainTable } from '@deepseek-ai/dsh-storage-domain'
-import type { MessageFeedbackItem, MessageFeedbackRating, MessageFeedbackVersion } from './types.ts'
-
-const nonNegativeSafeInteger = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER)
-
-/** Runtime schema for the closed rating vocabulary. */
-export const messageFeedbackRatingSchema = z.union([
-  z.literal('positive'),
-  z.literal('negative'),
-]) satisfies z.ZodType<MessageFeedbackRating>
-
-/** Runtime schema for one opaque item version stored on disk. */
-export const messageFeedbackVersionSchema = z.uuid()
-  .transform(value => value as MessageFeedbackVersion)
-
-/** Runtime schema for one current feedback item. */
-// Zod infers transformed branded fields structurally, so it cannot name the
-// public interface even though every branded output is created below.
-export const messageFeedbackItemSchema = z.object({
-  messageId: z.string().min(1).transform(value => value as MessageId),
-  rating: messageFeedbackRatingSchema,
-  note: z.string().refine(note => note.trim().length > 0, {
-    message: 'message feedback note must contain a non-whitespace character',
-  }).optional(),
-  version: messageFeedbackVersionSchema,
-  createdAt: nonNegativeSafeInteger,
-  updatedAt: nonNegativeSafeInteger,
-}).refine(item => item.updatedAt >= item.createdAt, {
-  path: ['updatedAt'],
-  message: 'message feedback updatedAt must not precede createdAt',
-}) as unknown as z.ZodType<MessageFeedbackItem>
-
-/** Persisted Session fields that fence a sidecar row to one log lifecycle. */
-export const messageFeedbackSessionIdentitySchema = z.object({
-  createdAt: nonNegativeSafeInteger,
-  cwd: z.string().optional(),
-})
-
-/** Persisted lifecycle identity inferred from its durable schema. */
-export type MessageFeedbackSessionIdentity = z.infer<typeof messageFeedbackSessionIdentitySchema>
-
-/**
- * One whole-Session sidecar. Duplicate message ids would make item lookup
- * ambiguous; duplicate versions would break their independent identity.
- */
-export const messageFeedbackRowSchema = z.object({
-  session: messageFeedbackSessionIdentitySchema,
-  items: z.array(messageFeedbackItemSchema),
-}).superRefine((row, ctx) => {
-  const messageIds = new Set<string>()
-  const versions = new Set<string>()
-  row.items.forEach((item, index) => {
-    if (messageIds.has(item.messageId)) {
-      ctx.addIssue({
-        code: 'custom',
-        path: ['items', index, 'messageId'],
-        message: `duplicate message feedback id '${item.messageId}'`,
-      })
-    }
-    messageIds.add(item.messageId)
-    if (versions.has(item.version)) {
-      ctx.addIssue({
-        code: 'custom',
-        path: ['items', index, 'version'],
-        message: `duplicate message feedback version '${item.version}'`,
-      })
-    }
-    versions.add(item.version)
-  })
-})
-
-/** Durable sidecar row inferred from {@link messageFeedbackRowSchema}. */
-export type MessageFeedbackRow = z.infer<typeof messageFeedbackRowSchema>
-
-/** One lifecycle-bound sidecar record per Session id. */
-export const messageFeedbackDomainSpec = defineDomain({
-  name: 'message_feedback',
-  version: 0,
-  tables: {
-    sessions: domainTable<SessionId, MessageFeedbackRow>(messageFeedbackRowSchema),
-  },
-})

package/src/types.ts

@@ -1,147 +0,0 @@
-/**
- * Public request, value, and failure vocabulary for per-message feedback.
- * This module contains types only so generated Remote clients can consume it
- * without importing Host runtime code.
- * @module @deepseek-ai/dsh-message-feedback/types
- */
-
-import type { Branded } from '@deepseek-ai/dsh-brand'
-import type { MessageId } from '@deepseek-ai/dsh-llm/brand'
-import type { SessionId } from '@deepseek-ai/dsh-session/types'
-
-/** Opaque compare-and-set token for one exact feedback item revision. */
-export type MessageFeedbackVersion = Branded<'MessageFeedbackVersion'>
-
-/** The human's overall judgment of one assistant message. */
-export type MessageFeedbackRating = 'positive' | 'negative'
-
-/** One current feedback value and its opaque mutation token. */
-export interface MessageFeedbackItem {
-  /** Stable identity of the assistant message inside the owning Session. */
-  readonly messageId: MessageId
-  /** Overall positive or negative judgment. */
-  readonly rating: MessageFeedbackRating
-  /** Optional explanation, preserved verbatim after validation. */
-  readonly note?: string
-  /** Equality-only token replaced by every material create or update. */
-  readonly version: MessageFeedbackVersion
-  /** Host-assigned creation time in Unix epoch milliseconds. */
-  readonly createdAt: number
-  /** Host-assigned time of the most recent material update. */
-  readonly updatedAt: number
-}
-
-/** Read all message feedback belonging to one persisted Session lifecycle. */
-export interface MessageFeedbackListRequest {
-  /** Persisted Session whose sidecar should be read. */
-  readonly sessionId: SessionId
-}
-
-/** Current feedback values for one Session, in first-creation order. */
-export interface MessageFeedbackListValue {
-  /** Fresh immutable item snapshots. */
-  readonly items: readonly MessageFeedbackItem[]
-}
-
-/** Create or replace feedback for one assistant message. */
-export interface MessageFeedbackPutRequest {
-  /** Persisted Session that owns the target message. */
-  readonly sessionId: SessionId
-  /** Target assistant-message identity. */
-  readonly messageId: MessageId
-  /** Desired overall judgment. */
-  readonly rating: MessageFeedbackRating
-  /** Optional non-blank explanation. */
-  readonly note?: string
-  /** Observed item version, or `null` to require that no item exists. */
-  readonly ifVersion: MessageFeedbackVersion | null
-}
-
-/** Delete feedback for one message after observing its current version. */
-export interface MessageFeedbackDeleteRequest {
-  /** Persisted Session that owns the sidecar. */
-  readonly sessionId: SessionId
-  /** Message whose feedback should be absent after this operation. */
-  readonly messageId: MessageId
-  /** Observed item version; ignored when the item is already absent. */
-  readonly ifVersion: MessageFeedbackVersion
-}
-
-/** Idempotent deletion acknowledgement. */
-export interface MessageFeedbackDeleteValue {
-  /** Stable postcondition shared by the first deletion and every retry. */
-  readonly absent: true
-}
-
-/** No persisted Session header exists for the requested id. */
-export interface MessageFeedbackSessionNotFound {
-  readonly code: 'session-not-found'
-  readonly sessionId: SessionId
-}
-
-/** The id does not name a derived, append-origin assistant message. */
-export interface MessageFeedbackTargetNotFound {
-  readonly code: 'target-not-found'
-  readonly sessionId: SessionId
-  readonly messageId: MessageId
-}
-
-/** A material mutation did not match the addressed item's current version. */
-export interface MessageFeedbackVersionConflict {
-  readonly code: 'version-conflict'
-  /** Authoritative current item, or `null` when it does not exist. */
-  readonly current: MessageFeedbackItem | null
-}
-
-/** A supplied note contains no non-whitespace character. */
-export interface MessageFeedbackNoteBlank {
-  readonly code: 'note-blank'
-}
-
-/** A supplied note exceeds the configured UTF-8 byte limit. */
-export interface MessageFeedbackNoteTooLarge {
-  readonly code: 'note-too-large'
-  readonly maxBytes: number
-  readonly actualBytes: number
-}
-
-/** Failures shared by the public message-feedback operations. */
-export type MessageFeedbackFailure =
-  | MessageFeedbackSessionNotFound
-  | MessageFeedbackTargetNotFound
-  | MessageFeedbackVersionConflict
-  | MessageFeedbackNoteBlank
-  | MessageFeedbackNoteTooLarge
-
-/** Successful public operation result. */
-export interface MessageFeedbackSuccess<T> {
-  readonly ok: true
-  readonly value: T
-}
-
-/** Rejected public operation result with a stable business failure. */
-export interface MessageFeedbackRejected<E extends MessageFeedbackFailure> {
-  readonly ok: false
-  readonly error: E
-}
-
-/** Result returned by the message-feedback `list` operation. */
-export type MessageFeedbackListResult =
-  | MessageFeedbackSuccess<MessageFeedbackListValue>
-  | MessageFeedbackRejected<MessageFeedbackSessionNotFound>
-
-/** Result returned by the message-feedback `put` operation. */
-export type MessageFeedbackPutResult =
-  | MessageFeedbackSuccess<MessageFeedbackItem>
-  | MessageFeedbackRejected<
-    | MessageFeedbackSessionNotFound
-    | MessageFeedbackTargetNotFound
-    | MessageFeedbackVersionConflict
-    | MessageFeedbackNoteBlank
-    | MessageFeedbackNoteTooLarge
-  >
-
-/** Result returned by the message-feedback `delete` operation. */
-export type MessageFeedbackDeleteResult =
-  | MessageFeedbackSuccess<MessageFeedbackDeleteValue>
-  | MessageFeedbackRejected<MessageFeedbackSessionNotFound | MessageFeedbackVersionConflict>