@deepseek-ai/dsh-subagent 0.1.2-alpha.3 → 0.1.2-alpha.4

package/lib/types/index.js

@@ -13,8 +13,8 @@
  *
  * Public operations express caller intent: `start` returns one published owned
  * one-shot run, `startContinuable` establishes a durable continuable child, and
- * `followup` delivers later content without exposing whether the child is
- * resident. Continuable children never become a {@link SubagentRun}: the
+ * `sendMessage` steers between adjacent Agents without exposing whether a child
+ * is resident. Continuable children never become a {@link SubagentRun}: the
  * continuation manager holds their `AgentHandle` directly and orders every turn
  * through the child's own inbox, so providers contribute only the detached
  * creation spec and see no handle, turn, or teardown. Child and descendant
@@ -72,10 +72,10 @@ import { SubagentError } from "./error.js";
 import { assertSubagentMaxDepth } from "./depth.js";
 import { createActivationObserver, createLifecycleEmitter, observeRun } from "./lifecycle.js";
 import SubagentContinuationManager from "./continuation.js";
-import SubagentActivationSetupRegistry from "./activation-setup-registry.js";
 import { listChildren as listSubagentChildren, listDescendants as listSubagentDescendants } from "./list-children.js";
 import { snapshotSubagentDescriptor } from "./descriptor.js";
 import { subagentIdentityProjectionDefinition, subagentTimingProjectionDefinition } from "./projection.js";
+import { queueSubagentPrompt } from "./internal.js";
 export * from "./out-of-process.js";
 export { AssistantOutputFold, finalAssistantOutput } from "./assistant-output.js";
 export { SubagentRunId } from "./types.js";
@@ -105,8 +105,6 @@ let SubagentRuntime = (() => {
         }
         providers = (__runInitializers(this, _instanceExtraInitializers), new Map());
         continuations;
-        /** Deployment contributions composed into unpublished continuable children. */
-        setupRegistry = new SubagentActivationSetupRegistry();
         /**
          * The contained lifecycle-edge publisher. Built here because scoped dispatch
          * keys its carrier by this exact service instance, whose own context filter
@@ -120,7 +118,7 @@ let SubagentRuntime = (() => {
                 const manager = new SubagentContinuationManager(childCtx, {
                     prepareContinuable: (name, request) => this.prepareContinuable(name, request),
                     observeActivation: (provider, childId, parent) => this.observeActivation(provider, childId, parent),
-                }, this.setupRegistry);
+                });
                 this.continuations = manager;
                 childCtx.effect(() => () => {
                     /* v8 ignore else -- one injected binding owns the slot until its fiber disposes. */
@@ -146,22 +144,35 @@ let SubagentRuntime = (() => {
             return this.requireContinuations().startContinuable(spec);
         }
         /**
-         * Deliver one later message to a continuable child as its next FIFO turn. A
-         * resident child's Agent inbox accepts it directly (waking a `waiting`
-         * Activation), while an absent one is cold-resumed from its persisted
-         * Session. The Agent inbox is the only queue, so every accepted message has
-         * one observable order.
-         * @param parent - the exact live direct parent authorizing this delivery.
-         * @param childId - durable child session id.
-         * @param content - user-role content to deliver.
-         * @param options - the message source fields and caller cancellation, which stops the
-         *   operation only before inbox acceptance.
+         * Steer one model-authored message to the sender's direct parent or direct
+         * continuable child. A running target admits it at the nearest step boundary;
+         * an idle target starts a turn, and an absent direct child cold-resumes from
+         * persistence. The service derives durable sender attribution from the exact
+         * live sender. Caller cancellation stops only pre-acceptance work.
+         * @param sender - exact live Agent authorizing and originating the message.
+         * @param targetId - durable direct-parent or direct-child session id.
+         * @param content - model-authored content to deliver.
+         * @param options - caller cancellation before inbox acceptance.
          * @returns the accepted message's inbox id.
-         * @throws when continuation services are unavailable, parent authority is
-         *   rejected, or the message was not admitted.
+         * @throws when continuation services are unavailable, adjacency is rejected,
+         *   or the message was not admitted.
          */
-        async followup(parent, childId, content, options) {
-            return this.requireContinuations().followup(parent, childId, content, options);
+        async sendMessage(sender, targetId, content, options) {
+            return this.requireContinuations().sendMessage(sender, targetId, content, options);
+        }
+        /**
+         * Queue one host-protocol message as a distinct direct-child turn.
+         * Symbol-keyed so host adapters can preserve their own provenance without
+         * widening the public Service Definition or impersonating an Agent sender.
+         * @param parent - exact live direct parent authorizing delivery.
+         * @param childId - durable direct-child session id.
+         * @param content - host-authored content to deliver.
+         * @param source - durable host-protocol provenance.
+         * @param signal - caller cancellation before inbox acceptance.
+         * @returns the accepted message's inbox id.
+         */
+        [queueSubagentPrompt](parent, childId, content, source, signal) {
+            return this.requireContinuations().queuePrompt(parent, childId, content, source, signal);
         }
         /**
          * Interrupt one live continuable child's current turn under a human parent
@@ -181,32 +192,6 @@ let SubagentRuntime = (() => {
         interrupt(targetSessionId, authority) {
             this.continuations?.interrupt(targetSessionId, authority);
         }
-        /**
-         * Deliver selected content from one live continuable child to its durable
-         * direct parent. The child is the authority credential; callers cannot name a
-         * recipient. Reporting does not conclude the child's turn or Activation.
-         * @param child - exact live reporting child.
-         * @param content - selected model-facing content.
-         * @param options - parent scheduling and pre-acceptance cancellation.
-         * @returns the stable identity of the parent-accepted message.
-         * @throws when continuation services are unavailable, sender authorization
-         *   fails, or the direct parent is not live.
-         */
-        async reportFrom(child, content, options) {
-            return this.requireContinuations().reportFrom(child, content, options);
-        }
-        /**
-         * Compose one deployment capability into every continuable child's
-         * unpublished creation context on fresh creation and cold resume. Grants wait
-         * for the next Activation; removing the contribution revokes every resident
-         * installation immediately.
-         * @param contribution - synchronous child-scope installer.
-         * @returns the exact Cordis effect disposer.
-         */
-        registerContinuableSetup(contribution) {
-            // oxlint-disable-next-line typescript/no-misused-promises -- synchronous disposer
-            return this.ctx.effect(() => this.setupRegistry.register(contribution), 'subagents.registerContinuableSetup()');
-        }
         /**
          * Close continuable admission below exact live parent Agents, stop only their
          * visible descendant Activations synchronously, then await admitted scoped
@@ -347,7 +332,9 @@ let SubagentRuntime = (() => {
                         throw new Error('subagent image prompt requires an attachment store');
                     content = await admitPromptContent(attachments, request.content);
                 }
-                return { messageId: await this.followup(parent, childSessionId, content, { source, signal }) };
+                return {
+                    messageId: await this[queueSubagentPrompt](parent, childSessionId, content, source, signal),
+                };
             }
             catch (error) {
                 return rejectPrompt(error, childSessionId, signal);

package/lib/types/internal.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Continuation integration markers and host adapters outside the public
+ * Service Definition and model-facing Agent messaging contract.
+ * @module @deepseek-ai/dsh-subagent/internal
+ */
+import type { Agent } from '@deepseek-ai/dsh-agent';
+import type { ContentBlock, MessageId, MessageSource } from '@deepseek-ai/dsh-llm';
+import type { SessionId } from '@deepseek-ai/dsh-session';
+import type { ToolDefinition } from '@deepseek-ai/dsh-tools';
+import type SubagentRuntime from './index.ts';
+/** Process-stable identity carried only by the standard adjacent-Agent messaging tool. */
+export declare const adjacentAgentSendMessageTool: unique symbol;
+/**
+ * Mark the standard adjacent-Agent messaging tool without changing its model-visible schema.
+ * @param definition - the standard `send_message` definition.
+ * @returns the same definition with its internal identity installed.
+ */
+export declare function markAdjacentAgentSendMessageTool(definition: ToolDefinition): ToolDefinition;
+/**
+ * Test whether one visible definition is the standard adjacent-Agent messaging tool.
+ * @param definition - the scope-resolved `send_message` candidate.
+ * @returns whether the definition carries the internal standard-tool identity.
+ */
+export declare function isAdjacentAgentSendMessageTool(definition: ToolDefinition | undefined): boolean;
+/**
+ * Process-stable symbol-keyed Queue delivery shared by the bundled runtime
+ * entry and this unbundled internal subpath.
+ * @internal
+ */
+export declare const queueSubagentPrompt: unique symbol;
+/** Runtime face required by the host-only Queue adapter. */
+export interface HostPromptQueue {
+    [queueSubagentPrompt](parent: Agent, childId: SessionId, content: ContentBlock[], source: MessageSource, signal: AbortSignal): Promise<MessageId>;
+}
+/**
+ * Queue one host-protocol message without exposing another Service operation.
+ * @param runtime - subagent runtime owning continuation residency.
+ * @param parent - exact live direct parent authorizing delivery.
+ * @param childId - durable direct-child session id.
+ * @param content - host-authored content to deliver.
+ * @param source - durable host-protocol provenance.
+ * @param signal - caller cancellation before inbox acceptance.
+ * @returns the accepted message's inbox id.
+ */
+export declare function queueHostSubagentPrompt(runtime: SubagentRuntime, parent: Agent, childId: SessionId, content: ContentBlock[], source: MessageSource, signal: AbortSignal): Promise<MessageId>;
+//# sourceMappingURL=internal.d.ts.map

package/lib/types/internal.js

@@ -0,0 +1,45 @@
+/**
+ * Continuation integration markers and host adapters outside the public
+ * Service Definition and model-facing Agent messaging contract.
+ * @module @deepseek-ai/dsh-subagent/internal
+ */
+/** Process-stable identity carried only by the standard adjacent-Agent messaging tool. */
+export const adjacentAgentSendMessageTool = Symbol.for('dsh.subagent.adjacentAgentSendMessageTool');
+/**
+ * Mark the standard adjacent-Agent messaging tool without changing its model-visible schema.
+ * @param definition - the standard `send_message` definition.
+ * @returns the same definition with its internal identity installed.
+ */
+export function markAdjacentAgentSendMessageTool(definition) {
+    Object.defineProperty(definition, adjacentAgentSendMessageTool, { value: true });
+    return definition;
+}
+/**
+ * Test whether one visible definition is the standard adjacent-Agent messaging tool.
+ * @param definition - the scope-resolved `send_message` candidate.
+ * @returns whether the definition carries the internal standard-tool identity.
+ */
+export function isAdjacentAgentSendMessageTool(definition) {
+    return definition !== undefined
+        && definition[adjacentAgentSendMessageTool] === true;
+}
+/**
+ * Process-stable symbol-keyed Queue delivery shared by the bundled runtime
+ * entry and this unbundled internal subpath.
+ * @internal
+ */
+export const queueSubagentPrompt = Symbol.for('dsh.subagent.queuePrompt');
+/**
+ * Queue one host-protocol message without exposing another Service operation.
+ * @param runtime - subagent runtime owning continuation residency.
+ * @param parent - exact live direct parent authorizing delivery.
+ * @param childId - durable direct-child session id.
+ * @param content - host-authored content to deliver.
+ * @param source - durable host-protocol provenance.
+ * @param signal - caller cancellation before inbox acceptance.
+ * @returns the accepted message's inbox id.
+ */
+export function queueHostSubagentPrompt(runtime, parent, childId, content, source, signal) {
+    return runtime[queueSubagentPrompt](parent, childId, content, source, signal);
+}
+//# sourceMappingURL=internal.js.map

package/lib/types/lifecycle.js

@@ -15,6 +15,7 @@
  */
 import { randomUUID } from 'node:crypto';
 import { foldConsumedWork } from '@deepseek-ai/dsh-agent';
+import { SessionLogOffset } from '@deepseek-ai/dsh-session';
 import { finalAssistantOutput } from "./assistant-output.js";
 import { SubagentRunId } from "./types.js";
 /**
@@ -90,7 +91,7 @@ export function createActivationObserver(emit, provider, childId, parent) {
     // A cold resume replays earlier turns, so this epoch's telemetry must come
     // from the suffix it actually produced — never the whole session, which
     // would report a previous epoch's answer when this one opened no turn.
-    let boundary = 0;
+    let boundary = SessionLogOffset(0);
     // Assigned by `capture()`, which the disposal path always runs before
     // `settle()`; a resident epoch therefore always has its facts by then.
     let captured = { stopReason: 'completed' };
@@ -101,11 +102,11 @@ export function createActivationObserver(emit, provider, childId, parent) {
         : { stopReason: 'error' };
     return {
         start: (child) => {
-            boundary = child.session.events.length;
+            boundary = child.session.seq;
             emit('subagent/start', identity, parent);
         },
         capture: (child) => {
-            const own = child.session.events.slice(boundary);
+            const own = child.session.snapshotEvents(boundary);
             const output = finalAssistantOutput(own);
             captured = {
                 stopReason: epochStopReason(own),

package/lib/types/list-children.d.ts

@@ -4,9 +4,10 @@
  * corpus; each child's mode/label is the registered `subagent` projection
  * unit's value, resolved
  * down a three-rung ladder: the registry's watermark cache for a live child,
- * a durable projection-cache row when it serves an own-suffix identity (the
- * seq gate), and one shared Session observation otherwise, validated against
- * the enumerated lifecycle. The projection fold is the single classification
+ * an unseeded durable projection-cache row, and one shared Session observation
+ * otherwise. A seeded header deliberately lacks its exact inherited cut, so
+ * it takes the body-bearing observation path before classifying an identity.
+ * The projection fold is the single classification
  * authority — this module parses no descriptor
  * itself. Absent persistence, enumeration is live-only: a cold child is
  * unreachable for resume anyway, so its absence is capability absence, not an
@@ -35,8 +36,8 @@ export type SubagentDescendantListEntry = SubagentListEntry & {
  * live-preferred merge of `ctx.sessions` and optional session persistence,
  * serving each identity from the `subagent` projection unit: the registry's
  * watermark snapshot for a live child; for a cold one, a durable
- * projection-cache read when it serves an own-suffix identity (the seq gate),
- * else one bounded-concurrency shared Session observation.
+ * projection-cache read for an unseeded lifecycle, else one bounded-concurrency
+ * shared Session observation carrying the exact inherited cut.
  * @see SubagentRuntime.listChildren for the public cancellation and failure contract.
  * @param ctx - context carrying the session store, the projection registry,
  *   optional persistence, and the optional projection cache.

package/lib/types/list-children.js

@@ -4,9 +4,10 @@
  * corpus; each child's mode/label is the registered `subagent` projection
  * unit's value, resolved
  * down a three-rung ladder: the registry's watermark cache for a live child,
- * a durable projection-cache row when it serves an own-suffix identity (the
- * seq gate), and one shared Session observation otherwise, validated against
- * the enumerated lifecycle. The projection fold is the single classification
+ * an unseeded durable projection-cache row, and one shared Session observation
+ * otherwise. A seeded header deliberately lacks its exact inherited cut, so
+ * it takes the body-bearing observation path before classifying an identity.
+ * The projection fold is the single classification
  * authority — this module parses no descriptor
  * itself. Absent persistence, enumeration is live-only: a cold child is
  * unreachable for resume anyway, so its absence is capability absence, not an
@@ -67,6 +68,7 @@ var __disposeResources = (this && this.__disposeResources) || (function (Suppres
     var e = new Error(message);
     return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
 });
+import { SessionLogOffset } from '@deepseek-ai/dsh-session';
 import { SubagentError } from "./error.js";
 /**
  * Concurrent cold observations per explicit catalog listing. Current Session
@@ -79,8 +81,8 @@ const COLD_READ_CONCURRENCY = 4;
  * live-preferred merge of `ctx.sessions` and optional session persistence,
  * serving each identity from the `subagent` projection unit: the registry's
  * watermark snapshot for a live child; for a cold one, a durable
- * projection-cache read when it serves an own-suffix identity (the seq gate),
- * else one bounded-concurrency shared Session observation.
+ * projection-cache read for an unseeded lifecycle, else one bounded-concurrency
+ * shared Session observation carrying the exact inherited cut.
  * @see SubagentRuntime.listChildren for the public cancellation and failure contract.
  * @param ctx - context carrying the session store, the projection registry,
  *   optional persistence, and the optional projection cache.
@@ -203,7 +205,7 @@ async function resolveCandidateRows(candidates, listing, signal) {
         // The unit's serializable no-value sentinel is `null`; `undefined` can
         // only mean the key was dropped at a JSON boundary. Both are no value.
         if (identity === undefined || identity === null
-            || identity.seq < (candidate.header.seedLength ?? 0))
+            || !candidate.live.isOwnSeq(identity.seq))
             return;
         rows[index] = childRow(childId, identity, 'running', subagentParents.has(childId));
     });
@@ -261,9 +263,8 @@ function compareCorpusRecords(a, b) {
     return a.header.createdAt - b.header.createdAt || a.header.id.localeCompare(b.header.id);
 }
 /**
- * Resolve one cold candidate down the remaining ladder: a durable
- * projection-cache row when it serves an own-suffix identity (the seq gate),
- * otherwise one shared Session observation. An absent or transiently failed
+ * Resolve one cold candidate down the remaining ladder: an unseeded durable
+ * projection-cache row, otherwise one shared Session observation. An absent or transiently failed
  * observation is one `unavailable` row retried on the next listing; an observation
  * source naming another lifecycle, and a
  * settled log the fold cannot identify — or that makes any registered unit
@@ -273,10 +274,14 @@ async function resolveColdIdentity(query, cache, header, hasChildren, signal) {
     const env_1 = { stack: [], error: void 0, hasError: false };
     try {
         const childId = header.id;
-        if (cache !== undefined) {
+        // A header deliberately exposes only whether a fork cut exists, not its
+        // integer. An unseeded lifecycle has the exact cut 0 and may use the cache;
+        // a seeded lifecycle must read the body before an identity seq can be
+        // classified as inherited or owned.
+        if (cache !== undefined && !header.isSeeded) {
             let cached;
             try {
-                cached = cache.cachedSnapshot(header, ['subagent'])?.values.subagent;
+                cached = cache.cachedSnapshot(header, SessionLogOffset(0), ['subagent'])?.values.subagent;
             }
             catch {
                 // Unlike the preparation fold below, a throwing cache read renders no
@@ -284,15 +289,11 @@ async function resolveColdIdentity(query, cache, header, hasChildren, signal) {
                 // row of ANY unit) silently falls through to the authoritative re-fold.
                 cached = undefined;
             }
-            // A child's OWN descriptor is immutable once appended, so a cached
-            // identity is final only when the seq gate proves it was folded from the
-            // own suffix: a creation-window checkpoint may instead carry a fork
-            // seed's replayed ANCESTOR descriptor (seq below `seedLength`), which
-            // must not outrank the re-fold. Everything else also falls through to
-            // preparation: an absent key (a cut before any descriptor) and the
-            // `null` sentinel, whose verdict belongs to the authoritative re-fold,
-            // not to a derived row.
-            if (cached !== undefined && cached !== null && cached.seq >= (header.seedLength ?? 0)) {
+            // An unseeded child's descriptor is owned at every valid seq. Everything
+            // else falls through to preparation: an absent key and the `null`
+            // sentinel, whose verdict belongs to the authoritative re-fold, not to a
+            // derived row.
+            if (cached !== undefined && cached !== null) {
                 return childRow(childId, cached, 'inactive', hasChildren);
             }
         }
@@ -326,7 +327,7 @@ async function resolveColdIdentity(query, cache, header, hasChildren, signal) {
         }
         const identity = ownedObservation.projections?.values.subagent;
         if (identity === undefined || identity === null
-            || identity.seq < (header.seedLength ?? 0)) {
+            || identity.seq < ownedObservation.inheritedEventCount) {
             return { kind: 'diagnostic', id: childId, reason: 'corrupt' };
         }
         return childRow(childId, identity, 'inactive', hasChildren);
@@ -361,7 +362,7 @@ function childRow(id, identity, activity, hasChildren) {
 }
 /** Immutable header fields that distinguish one session lifecycle from another under the same id. */
 const LIFECYCLE_WITNESS_KEYS = [
-    'version', 'id', 'createdAt', 'cwd', 'parentSession', 'seedLength', 'delegationDepth',
+    'version', 'id', 'createdAt', 'cwd', 'parentSession', 'isSeeded', 'delegationDepth',
     'origin', 'agentPreset',
 ];
 /** Whether an inspected log still belongs to the enumerated lifecycle. */

package/lib/types/projection-types.d.ts

@@ -3,6 +3,7 @@
  *
  * @module @deepseek-ai/dsh-subagent/projection-types
  */
+import type { SessionSeq } from '@deepseek-ai/dsh-session/types';
 /** Durable active-turn timing for one descriptor-backed child session. */
 export interface SubagentTimingProjection {
     /** Milliseconds accumulated across completed turns after the child's own descriptor. */
@@ -28,18 +29,18 @@ export type SubagentIdentityProjection = {
     label?: string;
     /**
      * Seq of the `subagent/descriptor` event this identity was folded from.
-     * `seq >= header.seedLength` proves the identity comes from the child's
+     * `session.isOwnSeq(seq)` proves the identity comes from the child's
      * OWN log suffix — where a descriptor is immutable once appended — and
      * not from a fork seed's replayed ancestor descriptor.
      */
-    seq: number;
+    seq: SessionSeq;
 } | {
     /** A resumable conversation. */
     mode: 'continuable';
     /** Durable creation label from the child's descriptor. */
     label: string;
     /** Seq of the folded descriptor event; see the one-shot arm for the own-suffix proof. */
-    seq: number;
+    seq: SessionSeq;
 };
 declare module '@deepseek-ai/dsh-session-projection/types' {
     interface SessionProjectionMap {

package/lib/types/projection.js

@@ -5,6 +5,7 @@
  * @module @deepseek-ai/dsh-subagent/projection
  */
 import { z } from 'zod';
+import { SessionSeq } from '@deepseek-ai/dsh-session';
 import { foldSubagentDescriptor } from "./descriptor.js";
 const activeIntervalSchema = z.object({
     since: z.number().int().nonnegative(),
@@ -88,12 +89,12 @@ const identityValueSchema = z.discriminatedUnion('mode', [
     z.object({
         mode: z.literal('one-shot'),
         label: z.string().optional(),
-        seq: z.number().int().nonnegative(),
+        seq: z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).transform(SessionSeq),
     }).strict(),
     z.object({
         mode: z.literal('continuable'),
         label: z.string(),
-        seq: z.number().int().nonnegative(),
+        seq: z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).transform(SessionSeq),
     }).strict(),
 ]);
 const identitySchema = identityValueSchema.nullable();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-subagent",
   "description": "Abstract subagent seam (ctx.subagents): named-provider registry for delegating to child agents",
-  "version": "0.1.2-alpha.3",
+  "version": "0.1.2-alpha.4",
   "publishConfig": {
     "access": "public"
   },
@@ -18,6 +18,10 @@
       "types": "./lib/types/index.d.ts",
       "default": "./lib/index.js"
     },
+    "./internal": {
+      "types": "./lib/types/internal.d.ts",
+      "default": "./lib/types/internal.js"
+    },
     "./invariant": {
       "types": "./lib/types/invariant.d.ts",
       "default": "./lib/invariant.js"
@@ -50,30 +54,30 @@
   "license": "MIT",
   "dependencies": {
     "zod": "^4.4.3",
-    "@deepseek-ai/dsh-brand": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-util-values": "^0.1.2-alpha.3"
+    "@deepseek-ai/dsh-util-values": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-brand": "^0.1.2-alpha.4"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-agent": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-attachment": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-jobs": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-sandbox": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-scope": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-session": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-session-projection": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-session-projection-cache": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-user-approval": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-session-persistence": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-util-time": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-session-query": "^0.1.2-alpha.3"
+    "@deepseek-ai/dsh-agent": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-attachment": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-jobs": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-sandbox": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-scope": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-session": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-session-projection": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-session-projection-cache": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-session-query": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-user-approval": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-session-persistence": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-util-time": "^0.1.2-alpha.4"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-agent-presets": {
@@ -106,27 +110,27 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-agent": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-attachment": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-jobs": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-sandbox": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-scope": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-session": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-session-projection": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-session-projection-cache": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-session-query": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-storage": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-storage-domain": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-storage-json": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-user-approval": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-util-time": "^0.1.2-alpha.3",
-    "@deepseek-ai/dsh-session-persistence": "^0.1.2-alpha.3"
+    "@deepseek-ai/dsh-agent": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-attachment": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-jobs": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-sandbox": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-scope": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-session": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-session-projection": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-session-projection-cache": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-session-query": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-storage": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-storage-domain": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-session-persistence": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-user-approval": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-util-time": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-storage-json": "^0.1.2-alpha.4"
   }
 }

package/lib/types/activation-setup-registry.d.ts

@@ -1,57 +0,0 @@
-/**
- * Internal registry of deployment capabilities composed into every continuable
- * child's unpublished creation context.
- *
- * A contribution grants a child-scoped capability without teaching the
- * continuation manager which capabilities exist. The manager owns residency;
- * this registry owns the join between plugin lifetime, unpublished setup, and
- * Activation disposal, so no installation outlives either owner and no removed
- * contribution can be installed after revocation reports completion.
- *
- * @module @deepseek-ai/dsh-subagent/activation-setup-registry
- */
-import type { Context } from '@deepseek-ai/cordis';
-import type { AgentSetupCommit } from '@deepseek-ai/dsh-agent';
-/**
- * One deployment capability installed into a continuable child's unpublished
- * creation context. It composes synchronously before publication and returns
- * the disposer for exactly that installation.
- * @param childCtx - the child's unpublished scoped context.
- * @returns the disposer revoking this installation.
- */
-export type ContinuableSetupContribution = (childCtx: Context) => () => void;
-/**
- * Owns continuable-child setup registrations, installations, rollback, child
- * cleanup, and immediate live revocation.
- */
-export declare class SubagentActivationSetupRegistry {
-    /** Live contributions in installation order. */
-    private readonly registrations;
-    /** Child context to its live installations. */
-    private readonly byChild;
-    /**
-     * Register one contribution.
-     * @param contribution - synchronous child-scope installer.
-     * @returns an idempotent registration undo.
-     * @throws after attempting every installation when any disposer fails.
-     */
-    register(contribution: ContinuableSetupContribution): () => void;
-    /**
-     * Install every live contribution into one unpublished child context.
-     * @param childCtx - the child's unpublished scoped context.
-     * @returns the provisioning commit consumed at Agent publication.
-     */
-    apply(childCtx: Context): AgentSetupCommit;
-    /** Release every remaining installation owned by one disposed child scope. */
-    private releaseChild;
-    /**
-     * Release a batch completely before reporting disposer failures.
-     * @param installations - records to release.
-     * @param during - operation name for diagnostics.
-     */
-    private releaseAll;
-    /** Drop one installation from both indices and dispose it exactly once. */
-    private release;
-}
-export default SubagentActivationSetupRegistry;
-//# sourceMappingURL=activation-setup-registry.d.ts.map