@deepseek-ai/dsh-tool-cordis 0.2.1-alpha.2 → 0.2.1-alpha.3

package/lib/types/api-catalog.js

@@ -135,7 +135,7 @@ export const SERVICE_API = [
             },
             {
                 signature: '@Remote(\'select\') async select(agent: Agent, agentPreset: string): Promise<string>',
-                description: 'Select a preset before a session starts its first turn.',
+                description: 'Select a preset before a session starts its first turn. A Session whose log records the preset and whose Agent runs its current revision keeps its composition; nothing is logged or announced.',
                 parameters: [{ name: 'agent', description: 'Target Agent.' }, { name: 'agentPreset', description: 'Requested identity.' }],
                 returns: 'Committed preset identity.',
             },
@@ -686,8 +686,8 @@ export const SERVICE_API = [
                 parameters: [],
             },
             {
-                signature: 'readonly operator: PeerScope',
-                description: 'The operator Peer every admitted request speaks for; its scope lives as long as Connection.',
+                signature: 'readonly browserPeer: PeerScope',
+                description: 'The owner Peer every authenticated browser connection shares.',
                 parameters: [],
             },
             {
@@ -709,9 +709,21 @@ export const SERVICE_API = [
             },
             {
                 signature: 'admit(request: ConnectionTrustRequest): PeerAdmission',
-                description: 'Admit one request: it passes requestRejection and speaks for the operator, or it is refused with that status.',
+                description: 'Admit an HTTP request against its signed browser or API credential and live Peer.',
                 parameters: [{ name: 'request', description: 'request headers from the HTTP or upgrade request.' }],
-                returns: 'the operator Peer, or the rejection status.',
+                returns: 'the credential\'s Peer, or the rejection status.',
+            },
+            {
+                signature: 'createPeer(options: { readonly principal: Principal; readonly interactions?: \'answer\' | \'none\' }): PeerScope',
+                description: 'Create an independent in-process Peer, disposed with the Context that read `ctx.connection`.',
+                parameters: [{ name: 'options', description: 'fixed principal and optional interaction participation (default `answer`).' }],
+                returns: 'a new Peer distinct from every other Peer.',
+            },
+            {
+                signature: 'admitConnection(request: ConnectionTrustRequest): ConnectionAdmission',
+                description: 'Claim a physical socket for an API Peer; browser sockets share their owner Peer.',
+                parameters: [{ name: 'request', description: 'authenticated upgrade request headers.' }],
+                returns: 'the Peer and idempotent release, or 409 for duplicate API ownership. The carrier releases on socket termination or failed upgrade; release removes API admission synchronously without cancelling independent HTTP calls.',
             },
             {
                 signature: 'authorizeIndex(request: ConnectionIndexRequest, response: ConnectionIndexResponse): boolean',
@@ -749,7 +761,7 @@ export const SERVICE_API = [
     {
         key: 'credentials',
         summary: 'Abstract credential service over two key spaces that answer two questions.',
-        description: 'Abstract credential service over two key spaces that answer two questions.\n\nA CredentialRef answers "what is behind this environment-variable name", layered over the process environment, the provider-managed store, and `.env` files. One seam-wide rule binds that half: an empty stored value is absent everywhere — `resolve` skips it, `describe` reports it unconfigured — so a blank never masquerades as a configured secret.\n\nA CredentialKey answers "what credential does this plugin hold for this id". Nothing can layer here — an authorization grant has no environment to be read from — so presence of the record is the whole fact, and modifyRecord is the only write path because a correct write depends on the current value (a token refresh is read-decide-replace under one lock).',
+        description: 'Abstract credential service over two key spaces that answer two questions.\n\nA CredentialRef answers "what is behind this environment-variable name": the provider-managed store first, then ambient fallbacks such as the process environment and `.env` files. One seam-wide rule binds that half: an empty stored value is absent everywhere — `resolve` skips it, `describe` reports it unconfigured — so a blank never masquerades as a configured secret.\n\nA CredentialKey answers "what credential does this plugin hold for this id". Nothing can layer here — an authorization grant has no environment to be read from — so presence of the record is the whole fact, and modifyRecord is the only write path because a correct write depends on the current value (a token refresh is read-decide-replace under one lock).',
         methods: [
             {
                 signature: 'abstract resolve(ref: CredentialRef): Promise<ResolvedCredential | undefined>',
@@ -765,12 +777,12 @@ export const SERVICE_API = [
             },
             {
                 signature: 'abstract set(ref: CredentialRef, value: string): Promise<void>',
-                description: 'Durably store one value in the provider-managed writable source. Rejects while a read-only source shadows the reference — the write would appear to succeed while resolution keeps returning the shadowing value — and rejects an empty value (use unset).',
+                description: 'Durably store one value in the provider-managed writable source. The stored value takes precedence over ambient fallbacks, and empty values are rejected (use unset).',
                 parameters: [{ name: 'ref', description: 'the reference to store.' }, { name: 'value', description: 'the non-empty secret value.' }],
             },
             {
                 signature: 'abstract unset(ref: CredentialRef): Promise<void>',
-                description: 'Remove one reference from the provider-managed writable source; removing an absent reference is a no-op. Rejects while a read-only source shadows the reference, like set.',
+                description: 'Remove one reference from the provider-managed writable source; removing an absent reference is a no-op. Ambient fallback layers may become effective again after removal.',
                 parameters: [{ name: 'ref', description: 'the reference to remove.' }],
             },
             {
@@ -843,7 +855,7 @@ export const SERVICE_API = [
             },
             {
                 signature: 'abstract getProfile(client: AccountClientMetadata): Promise<AccountDetails[\'profile\'] | null>',
-                description: 'Query Platform profile independently of wallet balances. A ready result whose stable profile ID first becomes available or changes notifies watch consumers, so identity consumers re-read getPlatformSession; repeated IDs stay silent.',
+                description: 'Query Platform profile independently of wallet balances. A ready result whose stable profile ID first becomes available or changes notifies identity-enabled watch consumers, so they re-read getPlatformSession; repeated IDs stay silent.',
                 parameters: [{ name: 'client', description: 'identity of the requesting UI for this call.' }],
                 returns: 'profile outcome, or null if signed out or the grant changed during the query.',
             },
@@ -884,9 +896,9 @@ export const SERVICE_API = [
                 returns: 'the signed-out state after local removal; remote failures never restore the grant.',
             },
             {
-                signature: 'abstract watch(signal: AbortSignal): AsyncIterable<AccountView>',
+                signature: 'abstract watch(signal: AbortSignal, includeIdentityChanges?: boolean): AsyncIterable<AccountView>',
                 description: 'Subscribe to snapshots including a complete initial state.',
-                parameters: [{ name: 'signal', description: 'subscription lifetime; ending it never cancels login.' }],
+                parameters: [{ name: 'signal', description: 'subscription lifetime; ending it never cancels login.' }, { name: 'includeIdentityChanges', description: 'also notify when cached Platform identity changes; defaults to false.' }],
                 returns: 'complete snapshots as account state changes.',
             },
             {
@@ -1227,6 +1239,13 @@ export const SERVICE_API = [
                 parameters: [{ name: 'url', description: 'Module URL.' }],
                 returns: 'Linked module URLs, or an empty list for an uncached module.',
             },
+            {
+                signature: 'async reconcileProfile(requiredIds: readonly string[] = []): Promise<ProfileReconciliation>',
+                description: 'Recompose the profile from its manifest and patch files, replacing running plugins whose loaded files below the profile directory or its linked package targets changed on disk, and publishing its runtime resolution. Changed modules are evicted and the Loader entries running them stop; app-boot\'s recomposeProfile then publishes the resolution, applies the generation, starts the stopped entries with the current files and configuration, imports entries whose import failed again, and judges activation. Afterwards the modules below the mappings the recomposition dropped are evicted, so a removed or deselected package is imported afresh when it returns. Callers run inside runExclusive.',
+                parameters: [{ name: 'requiredIds', description: 'Entry ids whose inactive state is reported as a failure even when it predates this call.' }],
+                returns: 'Inactive-entry diagnostics, the changed modules that load after a restart, and a profile-wide restart reason.',
+                throws: ['The patch read, publication, preparation, apply, or activation failure of the recomposition, including a replacement plugin that fails to load or start, whose previous code no longer runs.'],
+            },
         ],
     },
     {
@@ -1285,7 +1304,7 @@ export const SERVICE_API = [
                 signature: 'abstract start(spec: JobSpec): JobId',
                 description: 'Preflight access, validation, owner cleanup, and implementation-owned admission before starting and atomically registering work. Any preflight rejection leaves no job id or execution resource. A throwing starter leaves nothing registered; after it returns, registration cannot fail.',
                 parameters: [{ name: 'spec', description: 'job identity, owner, output sources, and synchronous starter.' }],
-                returns: 'the registry-issued `<kind>-N` id.',
+                returns: 'the registry-issued `<kind>-<short-uuid>` id.',
             },
             {
                 signature: 'abstract list(caller?: SessionId): JobView[]',
@@ -1396,6 +1415,12 @@ export const SERVICE_API = [
                 parameters: [{ name: 'provider', description: 'provider route named by a request header.' }, { name: 'model', description: 'exact model id named by the same header.' }],
                 returns: 'the owning adapter\'s image pricing for the route, when declared.',
             },
+            {
+                signature: 'imageRequestTarget(provider: string, model: string, image: ImageAttachmentRef): ImageRequestTarget',
+                description: 'Resolve the image projection for an exact registered model route.',
+                parameters: [{ name: 'provider', description: 'registered provider route.' }, { name: 'model', description: 'exact model id.' }, { name: 'image', description: 'normalized image reference.' }],
+                returns: 'dimensions and byte target used by the adapter\'s request serializer.',
+            },
             {
                 signature: 'fileRequestText(ref: FileAttachmentRef): string',
                 description: 'Resolve the exact text one durable file occurrence contributes to every provider request in the current execution environment.',
@@ -1764,7 +1789,7 @@ export const SERVICE_API = [
     {
         key: 'ptcRuntime',
         summary: 'Registers one `ctx.ptcRuntime` implementation.',
-        description: 'Registers one `ctx.ptcRuntime` implementation. Program, budget, abort, and substrate failures resolve in PtcRunResult; only Service Definition contract misuse rejects. Implementations bridge structured-cloneable bindings, materialize each declared namespace rejection class, treat programs as hostile peers, isolate runs from one another, and terminate and await in-flight runs during disposal.',
+        description: 'Registers one `ctx.ptcRuntime` implementation. Program, budget, abort, and substrate failures resolve in PtcRunResult; only Service Definition contract misuse rejects. Implementations bridge structured-cloneable bindings, materialize each declared namespace rejection class, treat programs as hostile peers, isolate distinct state owners, and terminate and await in-flight runs during disposal.',
         methods: [
             {
                 signature: 'abstract readonly language: string',
@@ -1776,6 +1801,13 @@ export const SERVICE_API = [
                 description: 'The execution substrate, as a lowercase identifier. Informational, not gating — a descriptor so deployments and diagnostics can tell backends apart, not a security claim. Well-known values: `\'worker-thread\'`, `\'process\'`, `\'container\'`.',
                 parameters: [],
             },
+            {
+                signature: 'release(owner: object): Promise<void>',
+                description: 'Release an owner\'s retained environment and await its execution resources. Stateless providers have no retained resources to release.',
+                parameters: [{ name: 'owner', description: 'The exact object supplied as the request\'s state owner.' }],
+                returns: 'Completion after all owned execution resources have been released.',
+                throws: ['When managed resource cleanup fails.'],
+            },
             {
                 signature: 'abstract resolve(request: PtcRunRequest): PtcRunSpec',
                 description: 'Resolve supported options and provider defaults before execution.',
@@ -1791,6 +1823,49 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'remoteAccess',
+        summary: 'Registry of access policies, the Gateway\'s access decisions, list filtering, and the per-Peer access snapshot.',
+        description: 'Registry of access policies, the Gateway\'s access decisions, list filtering, and the per-Peer access snapshot. Every composition that mounts the Gateway mounts this service too.',
+        methods: [
+            {
+                signature: 'registerPolicy<K extends Exclude<keyof PrincipalMap, \'owner\'>>(kind: K, policy: RemoteAccessPolicy<PrincipalMap[K]>): () => void',
+                description: 'Register the policy of one non-owner principal kind in the caller\'s fiber; open snapshots are recomputed on registration and removal.',
+                parameters: [{ name: 'kind', description: 'the principal kind the policy serves; never `owner`.' }, { name: 'policy', description: 'business-owned bindings and refusal reasons for principals of `kind`.' }],
+                returns: 'disposer removing this policy.',
+                throws: ['Error when `kind` already has a policy.'],
+            },
+            {
+                signature: 'invalidate(principal?: Principal): void',
+                description: 'Report that the bindings or condition answers for `principal` may have changed. Business packages call this on every grant, revocation, mode change, and expiry; open snapshots re-push, and the next failure of each policy is logged again.',
+                parameters: [{ name: 'principal', description: 'affected principal; omitted for every principal.' }],
+            },
+            {
+                signature: 'decide(request: RemoteAccessRequest<Principal>): RemoteAccessDecision',
+                description: 'Gateway-only: decide one request whose resources the Gateway resolved. The owner is allowed, and so is `remoteAccess/follow`: every Peer reads its own snapshot. Otherwise the action is allowed only when, on every listed resource, some binding of the principal\'s policy names that resource, has a role listing the action, and has no condition or a condition that allows. `bindings()` is called once per decision.',
+                parameters: [{ name: 'request', description: 'the caller or recipient, the action, the resources it touches, and a call\'s arguments.' }],
+                returns: '`allow`; or `deny` with `no-allow` when the principal kind has no policy, the first refusing condition\'s reason on the first resource no binding allows, else `explain()`\'s reason, else `no-allow`; `policy-failed` when `bindings()`, a condition, or `explain()` throws, logged once per policy until the next `invalidate()`. The Gateway throws `remote-access/denied` for a denied call and drops a denied event.',
+            },
+            {
+                signature: 'allows(resource: RemoteAccessResource): boolean',
+                description: 'Filter items inside a Remote method. The invocation is read from the Context that accessed this service, so call it as `this.ctx.remoteAccess.allows(resource)` from the Remote method. Each check reads the policy\'s bindings again, so a long-running stream sees binding changes from the next check on.',
+                parameters: [{ name: 'resource', description: 'resource of one result item.' }],
+                returns: 'true for the owner and outside a Remote call; otherwise whether the invocation\'s endpoint action is allowed on `resource` without call arguments, false when the policy is absent or fails.',
+            },
+            {
+                signature: 'snapshotFor(principal: Principal): RemoteAccessBaseline',
+                description: 'The baseline a page opens with before its snapshot stream connects. A business package rendering a non-owner page assigns this value to REMOTE_ACCESS_SNAPSHOT_KEY after every index injection row, replacing the owner baseline the webServer index carries.',
+                parameters: [{ name: 'principal', description: 'the page\'s caller identity.' }],
+                returns: 'the owner baseline for the owner; otherwise the principal\'s current grants.',
+            },
+            {
+                signature: '@Remote({ mode: \'stream\' }) async *follow(signal: AbortSignal): AsyncIterable<RemoteAccessFrame>',
+                description: 'Stream the calling Peer\'s access snapshot: one baseline, then `upsert` and `remove` frames after each `invalidate()` and each policy registration or removal that changes a grant. The owner receives only `{ owner: true }`. The generation ends when `signal` aborts or this service unloads, so a reloaded service starts every reader from a fresh baseline.',
+                parameters: [{ name: 'signal', description: 'generation cancellation.' }],
+                returns: 'the access frames of one generation.',
+            },
+        ],
+    },
     {
         key: 'sandbox',
         summary: 'Abstract process-sandbox service.',
@@ -1901,16 +1976,16 @@ export const SERVICE_API = [
                 returns: 'visible Session summaries ordered by activity.',
             },
             {
-                signature: '@Remote(\'search\') search(request: SessionSearchRequest, signal: AbortSignal): Promise<SessionSearchValue>',
-                description: 'Search visible Session content without resuming an Agent.',
+                signature: '@Remote(\'search\') async search(request: SessionSearchRequest, signal: AbortSignal): Promise<SessionSearchValue>',
+                description: 'Search visible Session content without resuming an Agent. A non-owner receives only the hits whose Session `allows()` admits; `hasMore` describes the bounded result before that filtering.',
                 parameters: [{ name: 'request', description: 'literal message-content query.' }, { name: 'signal', description: 'cancellation for list and search reads.' }],
                 returns: 'authorized bounded Session search results.',
             },
             {
                 signature: '@Remote(\'create\') create(request: SessionCreateRequest): Promise<SessionCreateValue>',
-                description: 'Create or idempotently adopt one ordinary Session.',
-                parameters: [{ name: 'request', description: 'requested identity, location, and Agent preset.' }],
-                returns: 'the Session identity and resolved preset when configured.',
+                description: 'Create one ordinary Session for a new conversation, reusing the named blank Session while it is reusable.',
+                parameters: [{ name: 'request', description: 'optional blank Session to reuse, location, and Agent preset.' }],
+                returns: 'the created or reused Session identity and its preset when configured.',
             },
             {
                 signature: '@Remote(\'selectModel\') selectModel(request: SessionSelectModelRequest): Promise<SessionSelectModelValue>',
@@ -1969,7 +2044,7 @@ export const SERVICE_API = [
                 returns: 'the new Session identity.',
             },
             {
-                signature: '@Remote(\'prompt\') prompt(request: SessionPromptRequest, signal: AbortSignal): Promise<SessionPromptValue>',
+                signature: '@Remote(\'prompt\') async prompt(request: SessionPromptRequest, signal: AbortSignal): Promise<SessionPromptValue>',
                 description: 'Admit one prompt after explicitly resuming its Session.',
                 parameters: [{ name: 'request', description: 'Session identity, prompt content, source metadata, and delivery mode.' }, { name: 'signal', description: 'caller cancellation before prompt admission begins.' }],
                 returns: 'acknowledgement that the Agent accepted the prompt.',
@@ -1993,13 +2068,13 @@ export const SERVICE_API = [
                 returns: 'acknowledgement that cancellation was requested.',
             },
             {
-                signature: '@Remote(\'page\') page(request: SessionPageRequest, signal: AbortSignal): Promise<SessionPage>',
+                signature: '@Remote({ name: \'page\', resources: { session: addressedSession } }) page(request: SessionPageRequest, signal: AbortSignal): Promise<SessionPage>',
                 description: 'Read one cold-safe, message-aligned Session history page.',
                 parameters: [{ name: 'request', description: 'durable address, backward cursor, and page budget.' }, { name: 'signal', description: 'cancellation for persistence reads.' }],
                 returns: 'one chronological page.',
             },
             {
-                signature: '@Remote({ mode: \'stream\' }) follow(request: SessionFollowRequest, signal: AbortSignal): AsyncIterable<SessionFollowFrame>',
+                signature: '@Remote({ mode: \'stream\', resources: { session: addressedSession } }) follow(request: SessionFollowRequest, signal: AbortSignal): AsyncIterable<SessionFollowFrame>',
                 description: 'Follow one Session log from its opening or resume cursor.',
                 parameters: [{ name: 'request', description: 'durable address and last committed sequence already held by the caller.' }, { name: 'signal', description: 'cancellation owned by the Remote stream carrier.' }],
                 returns: 'a complete opening snapshot followed by gap-free durable event frames and optional cursorless assistant-stream frames.',
@@ -2011,7 +2086,7 @@ export const SERVICE_API = [
                 returns: 'a sequenced baseline, cached hints when migration is deferred, or null when absent.',
             },
             {
-                signature: '@Remote({ mode: \'stream\' }) control(signal: AbortSignal): AsyncIterable<SessionControlFrame>',
+                signature: '@Remote({ mode: \'stream\' }) async *control(signal: AbortSignal): AsyncIterable<SessionControlFrame>',
                 description: 'Stream a complete live-control baseline followed by replacement frames.',
                 parameters: [{ name: 'signal', description: 'cancellation owned by the Remote stream carrier.' }],
                 returns: 'one complete baseline followed by live replacement frames.',
@@ -3069,22 +3144,10 @@ export const SERVICE_API = [
                 returns: 'a hold acknowledgement followed by an open lifetime stream.',
             },
             {
-                signature: '@Remote({ mode: \'stream\' }) follow(agent: Agent, id: WebTerminalId, attachmentId: TerminalAttachmentId, signal: AbortSignal): AsyncIterable<TerminalFrame>',
-                description: 'Attach to a terminal without binding its process lifetime to the transport.',
-                parameters: [{ name: 'agent', description: 'Session owner supplied by the Gateway.' }, { name: 'id', description: 'terminal identity.' }, { name: 'attachmentId', description: 'new exclusive input attachment.' }, { name: 'signal', description: 'physical stream cancellation.' }],
-                returns: 'screen recovery followed by output and metadata changes.',
-            },
-            {
-                signature: '@Remote async write(agent: Agent, id: WebTerminalId, attachmentId: TerminalAttachmentId, data: string): Promise<void>',
-                description: 'Deliver raw input, including Tab completion and control characters.',
-                parameters: [{ name: 'agent', description: 'Session owner supplied by the Gateway.' }, { name: 'id', description: 'terminal identity.' }, { name: 'attachmentId', description: 'current writable attachment.' }, { name: 'data', description: 'input bytes represented as UTF-8 text.' }],
-                returns: 'after provider input acceptance.',
-            },
-            {
-                signature: '@Remote async resize(agent: Agent, id: WebTerminalId, attachmentId: TerminalAttachmentId, cols: number, rows: number): Promise<void>',
-                description: 'Update the dimensions of the PTY and recovery screen.',
-                parameters: [{ name: 'agent', description: 'Session owner supplied by the Gateway.' }, { name: 'id', description: 'terminal identity.' }, { name: 'attachmentId', description: 'current writable attachment.' }, { name: 'cols', description: 'column count.' }, { name: 'rows', description: 'row count.' }],
-                returns: 'after the resize completes.',
+                signature: '@Remote({ mode: \'stream\' }) attach(agent: Agent, id: WebTerminalId, signal: AbortSignal): RemoteStream<TerminalFrame, TerminalInput>',
+                description: 'Attach terminal input and output to one physical Remote stream.',
+                parameters: [{ name: 'agent', description: 'Session owner supplied by the Gateway.' }, { name: 'id', description: 'terminal identity.' }, { name: 'signal', description: 'attachment cancellation; the process remains alive and input is never replayed.' }],
+                returns: 'screen recovery, output, writable state and provider-acceptance acknowledgements.',
             },
             {
                 signature: '@Remote rename(agent: Agent, id: WebTerminalId, title: string): void',
@@ -3389,9 +3452,9 @@ export const SERVICE_API = [
             },
             {
                 signature: 'hasLiveClient(): boolean',
-                description: 'Check for an active Client event stream.',
+                description: 'Check for an active owner Client event stream, the only kind that can answer forwarded waterfalls.',
                 parameters: [],
-                returns: 'whether a stream is open and has not been cancelled.',
+                returns: 'whether an owner stream is open and has not been cancelled.',
             },
             {
                 signature: 'registerRemoteEvents( source: TypertRemoteEventSource, host: RemoteEventHostInfo, ): () => Promise<void>',
@@ -3479,6 +3542,19 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'webApp',
+        summary: 'The Web GUI this process serves, provided by the `web-runtime` row.',
+        description: 'The Web GUI this process serves, provided by the `web-runtime` row.',
+        methods: [
+            {
+                signature: 'getAdvertisedUrl(): string',
+                description: 'The URL this GUI advertises, also used for `DSH_WEB_URL` and the startup URL line.',
+                parameters: [],
+                returns: 'the configured `publicUrl`, otherwise the listener origin.',
+            },
+        ],
+    },
     {
         key: 'webhookRuntime',
         summary: 'Fire-and-forget rule runtime.',
@@ -3503,6 +3579,13 @@ export const SERVICE_API = [
         summary: 'The browser HTTP carrier service.',
         description: 'The browser HTTP carrier service. Activation loads any configured TLS material, then listens immediately; a material or listen failure rejects initialization, and the boot process reports the failed fiber. Route registration order does not affect requests because configured named routes must be distinct, and the fallback handler answers anything not yet claimed during startup with 404 until its owner registers.',
         methods: [
+            {
+                signature: 'getOrigin(): string',
+                description: 'The root URL local clients use to reach the bound listener: the protocol, the bindUrlHost form of the bind address, and the listening port.',
+                parameters: [],
+                returns: 'the origin, for example `http://127.0.0.1:3080`.',
+                throws: ['before `listen` binds a port, or when the bind address has no URL form.'],
+            },
             {
                 signature: 'register(route: WebRoute): () => void',
                 description: 'Register a named route. Duplicate (kind, path) throws — route patterns are a composition-level contract, so a collision is a misconfiguration.',
@@ -3678,8 +3761,8 @@ export const SERVICE_API = [
                 returns: 'the complete resulting pin set, most recently pinned first.',
             },
             {
-                signature: '@Remote({ mode: \'stream\' }) follow(signal: AbortSignal): AsyncIterable<WorkspaceFollowFrame>',
-                description: 'Stream a complete Workspace baseline followed by ordered increments.',
+                signature: '@Remote({ mode: \'stream\' }) async *follow(signal: AbortSignal): AsyncIterable<WorkspaceFollowFrame>',
+                description: 'Stream a complete Workspace baseline followed by ordered increments. A non-owner receives only the Workspaces and Sessions `allows()` admits. When a delivered Workspace is no longer admitted at its next change or the next order change, the stream sends a `replace` frame with the complete filtered state instead of a `remove`, because a Client never resurrects a removed Workspace; a `remove` frame reports a deletion and reaches only a Client that received that Workspace.',
                 parameters: [{ name: 'signal', description: 'generation cancellation.' }],
                 returns: 'baseline followed by ordered Workspace increments.',
             },
@@ -4797,7 +4880,7 @@ export const TYPE_API = [
     },
     {
         name: 'ChangeResult',
-        declaration: 'export interface ChangeResult {\n    changed: boolean;\n    application: \'applied\' | \'restart-required\' | \'overridden\' | \'failed\' | \'cancelled\';\n    stage: \'install\' | \'enable\' | \'remove\';\n    target: string;\n    enabled?: boolean;\n    error?: ManagementError;\n    warnings?: string[];\n    packageResult?: PackageResult;\n    bundle?: string;\n    version?: string;\n    pendingBuilds?: string[];\n    approvedBuilds?: string[];\n    registries?: Registry[];\n    failedAt?: \'registry\' | \'spec-host\';\n}',
+        declaration: 'export interface ChangeResult {\n    changed: boolean;\n    application: \'applied\' | \'restart-required\' | \'overridden\' | \'failed\' | \'cancelled\';\n    restartReason?: RestartReason;\n    stage: \'install\' | \'enable\' | \'remove\';\n    target: string;\n    enabled?: boolean;\n    error?: ManagementError;\n    warnings?: string[];\n    packageResult?: PackageResult;\n    bundle?: string;\n    version?: string;\n    pendingBuilds?: string[];\n    approvedBuilds?: string[];\n    registries?: Registry[];\n    failedAt?: \'registry\' | \'spec-host\';\n}',
     },
     {
         name: 'ClientArtifactBaseline',
@@ -4899,9 +4982,13 @@ export const TYPE_API = [
         name: 'ConfinedSandboxMode',
         declaration: 'export type ConfinedSandboxMode = Exclude<SandboxMode, \'danger-full-access\'>;',
     },
+    {
+        name: 'ConnectionAdmission',
+        declaration: 'export type ConnectionAdmission = {\n    readonly peer: PeerScope;\n    readonly release: () => Promise<void>;\n} | {\n    readonly rejection: 401 | 403 | 409;\n};',
+    },
     {
         name: 'ConnectionFetchHandler',
-        declaration: 'export interface ConnectionFetchHandler {\n    requestBodyMode(request: {\n        readonly method: string;\n        readonly url: URL;\n    }): ConnectionRequestBodyMode;\n    fetch(request: Request): Promise<Response>;\n}',
+        declaration: 'export interface ConnectionFetchHandler {\n    requestBodyMode(request: {\n        readonly method: string;\n        readonly url: URL;\n    }): ConnectionRequestBodyMode;\n    fetch(request: Request, peer: PeerScope): Promise<Response>;\n}',
     },
     {
         name: 'ConnectionFetchMethod',
@@ -5541,11 +5628,11 @@ export const TYPE_API = [
     },
     {
         name: 'InvocationDescriptor',
-        declaration: 'export interface InvocationDescriptor {\n    readonly id: string;\n    readonly service: string;\n    readonly namespace: string;\n    readonly method: string;\n    readonly implementation?: string;\n    readonly mode?: \'stream\';\n    readonly invocation: {\n        readonly kind: \'direct\';\n    } | {\n        readonly kind: \'context\';\n        readonly context: string;\n        readonly wire: string;\n        readonly codec: TypertCodec;\n    };\n    readonly scope?: {\n        readonly context: string;\n        readonly wire: string;\n    };\n    readonly parameters: readonly InvocationParameterDescriptor[];\n    readonly uplink?: {\n        readonly codec: TypertCodec;\n    };\n    readonly cancellation?: {\n        readonly parameter: \'signal\';\n    };\n    readonly result: TypertCodec;\n    readonly sourceLocation?: InvocationSourceLocation;\n}',
+        declaration: 'export interface InvocationDescriptor {\n    readonly id: string;\n    readonly service: string;\n    readonly namespace: string;\n    readonly method: string;\n    readonly implementation?: string;\n    readonly mode?: \'stream\';\n    readonly invocation: {\n        readonly kind: \'direct\';\n    } | {\n        readonly kind: \'context\';\n        readonly context: string;\n        readonly wire: string;\n        readonly codec: TypertCodec;\n    };\n    readonly scope?: {\n        readonly context: string;\n        readonly wire: string;\n    };\n    readonly parameters: readonly InvocationParameterDescriptor[];\n    readonly uplink?: {\n        readonly codec: TypertCodec;\n    };\n    readonly cancellation?: {\n        readonly parameter: \'signal\';\n    };\n    readonly result: TypertCodec;\n    readonly description?: string;\n    readonly sourceLocation?: InvocationSourceLocation;\n}',
     },
     {
         name: 'InvocationParameterDescriptor',
-        declaration: 'export interface InvocationParameterDescriptor {\n    readonly name: string;\n    readonly wire: string;\n    readonly source: \'json\' | \'lookup\';\n    readonly lookup?: string;\n    readonly codec: TypertCodec;\n    readonly acceptsUndefined?: true;\n}',
+        declaration: 'export interface InvocationParameterDescriptor {\n    readonly name: string;\n    readonly description?: string;\n    readonly wire: string;\n    readonly source: \'json\' | \'lookup\';\n    readonly lookup?: string;\n    readonly codec: TypertCodec;\n    readonly acceptsUndefined?: true;\n}',
     },
     {
         name: 'InvocationSourceLocation',
@@ -5553,7 +5640,7 @@ export const TYPE_API = [
     },
     {
         name: 'InvokeRemoteRequest',
-        declaration: 'export interface InvokeRemoteRequest {\n    readonly namespace: string;\n    readonly method: string;\n    readonly args: Readonly<Record<string, unknown>>;\n    readonly uplink?: AsyncIterable<unknown>;\n    readonly peer?: PeerScope;\n    readonly signal?: AbortSignal;\n}',
+        declaration: 'export interface InvokeRemoteRequest {\n    readonly namespace: string;\n    readonly method: string;\n    readonly args: Readonly<Record<string, unknown>>;\n    readonly uplink?: AsyncIterable<unknown>;\n    readonly uplinkWindow?: RemoteUplinkWindow | undefined;\n    readonly peer: PeerScope;\n    readonly signal?: AbortSignal;\n}',
     },
     {
         name: 'JobAppendOptions',
@@ -5653,12 +5740,16 @@ export const TYPE_API = [
     },
     {
         name: 'JobSpec',
-        declaration: 'export interface JobSpec {\n    kind: JobKind;\n    label: string;\n    owner?: SessionId;\n    outputLimitBytes?: number;\n    output?: readonly JobOutputSource[];\n    run(job: JobHandle): JobHooks;\n}',
+        declaration: 'export interface JobSpec {\n    kind: JobKind;\n    label: string;\n    owner?: SessionId;\n    toolCall?: JobToolCall;\n    outputLimitBytes?: number;\n    output?: readonly JobOutputSource[];\n    run(job: JobHandle): JobHooks;\n}',
     },
     {
         name: 'JobStatus',
         declaration: 'export type JobStatus = \'running\' | \'stopping\' | \'completed\' | \'killed\' | \'failed\';',
     },
+    {
+        name: 'JobToolCall',
+        declaration: 'export interface JobToolCall {\n    readonly callId: SessionEventMap[\'tool/call\'][\'callId\'];\n    readonly rootCallId: SessionEventMap[\'tool/call\'][\'callId\'];\n}',
+    },
     {
         name: 'JobView',
         declaration: 'export interface JobView {\n    readonly id: JobId;\n    readonly kind: string;\n    readonly label: string;\n    readonly owner?: SessionId;\n    readonly outputLimitBytes?: number;\n    readonly status: JobStatus;\n    readonly progress?: string;\n    readonly detail?: string;\n    readonly startedAt: number;\n    readonly finishedAt?: number;\n    readonly output: {\n        readonly total: number;\n        readonly earliest: number;\n        readonly spillPaths?: readonly string[];\n    };\n}',
@@ -5697,7 +5788,7 @@ export const TYPE_API = [
     },
     {
         name: 'LlmAdapter',
-        declaration: 'export abstract class LlmAdapter {\n    providerInfo(provider: string): LlmProviderInfo;\n    providerRetryPolicy(_provider: string): ResolvedRetryPolicy | undefined;\n    imageRequestPricing(_provider: string, _model: string): LlmImageRequestPricing | undefined;\n    listModels(_provider: string): Promise<readonly LlmModelInfo[]>;\n    resolveModel(provider: string, model: string, _signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async prepareCall(provider: string, model: string, signal?: AbortSignal): Promise<PreparedAdapterCall>;\n    abstract stream(options: GenerateOptions): AsyncIterable<StreamChunk>;\n}',
+        declaration: 'export abstract class LlmAdapter {\n    providerInfo(provider: string): LlmProviderInfo;\n    providerRetryPolicy(_provider: string): ResolvedRetryPolicy | undefined;\n    imageRequestPricing(_provider: string, _model: string): LlmImageRequestPricing | undefined;\n    imageRequestTarget(_provider: string, _model: string, image: ImageAttachmentRef): ImageRequestTarget;\n    listModels(_provider: string): Promise<readonly LlmModelInfo[]>;\n    resolveModel(provider: string, model: string, _signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async prepareCall(provider: string, model: string, signal?: AbortSignal): Promise<PreparedAdapterCall>;\n    abstract stream(options: GenerateOptions): AsyncIterable<StreamChunk>;\n}',
     },
     {
         name: 'LlmAttemptId',
@@ -5717,7 +5808,7 @@ export const TYPE_API = [
     },
     {
         name: 'LlmConfigurableProvider',
-        declaration: 'export interface LlmConfigurableProvider {\n    provider: string;\n    displayName: string;\n    settingsNs: string;\n    settingsPath: readonly string[];\n    declared?: boolean;\n    error?: string;\n}',
+        declaration: 'export interface LlmConfigurableProvider {\n    provider: string;\n    displayName: string;\n    settingsNs: string;\n    settingsPath: readonly string[];\n    declared?: boolean;\n    defaultBaseURL?: string;\n    baseURLEnv?: readonly string[];\n    nativeAuth?: LlmNativeAuth;\n    error?: string;\n}',
     },
     {
         name: 'LlmDiscoveredModel',
@@ -5751,6 +5842,10 @@ export const TYPE_API = [
         name: 'LlmModelReasoningInfo',
         declaration: 'export interface LlmModelReasoningInfo {\n    efforts: readonly LlmReasoningEffortInfo[];\n    defaultEffort?: ReasoningEffortId;\n}',
     },
+    {
+        name: 'LlmNativeAuth',
+        declaration: 'export interface LlmNativeAuth {\n    env: readonly string[];\n    oauth: boolean;\n}',
+    },
     {
         name: 'LlmProviderInfo',
         declaration: 'export interface LlmProviderInfo {\n    id: string;\n    name: string;\n}',
@@ -5765,7 +5860,7 @@ export const TYPE_API = [
     },
     {
         name: 'LlmRuntime',
-        declaration: 'export class LlmRuntime extends TypertRemoteService {\n    constructor(ctx: Context);\n    registerAdapter(providers: string[], adapter: LlmAdapter): AdapterRegistrationHandle;\n    @Remote\n    listProviders(): LlmProviderInfo[];\n    registerConfigurableProviders(entries: readonly LlmConfigurableProvider[]): DirectoryRegistrationHandle;\n    @Remote\n    listConfigurableProviders(): LlmConfigurableProvider[];\n    registerModelDiscovery(settingsNs: string, discover: (request: LlmModelDiscoveryRequest, signal?: AbortSignal) => Promise<readonly LlmDiscoveredModel[]>): () => void;\n    async discoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal?: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    @Remote(\'discoverModels\')\n    async remoteDiscoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    providerRetryPolicy(provider: string): ResolvedRetryPolicy;\n    imageRequestPricing(provider: string, model: string): LlmImageRequestPricing | undefined;\n    fileRequestText(ref: FileAttachmentRef): string;\n    async listModels(provider: string): Promise<LlmModelInfo[]>;\n    async resolveModelInfo(provider: string, model: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async resolveCallConfig(config: LlmCallConfig, signal?: AbortSignal): Promise<LlmCallConfig>;\n    async prepareCall(config: LlmCallConfig, signal?: AbortSignal, configure?: ConfigureCall): Promise<PreparedLlmCall>;\n    strea /* …truncated — full shape in source */',
+        declaration: 'export class LlmRuntime extends TypertRemoteService {\n    constructor(ctx: Context);\n    registerAdapter(providers: string[], adapter: LlmAdapter): AdapterRegistrationHandle;\n    @Remote\n    listProviders(): LlmProviderInfo[];\n    registerConfigurableProviders(entries: readonly LlmConfigurableProvider[]): DirectoryRegistrationHandle;\n    @Remote\n    listConfigurableProviders(): LlmConfigurableProvider[];\n    registerModelDiscovery(settingsNs: string, discover: (request: LlmModelDiscoveryRequest, signal?: AbortSignal) => Promise<readonly LlmDiscoveredModel[]>): () => void;\n    async discoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal?: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    @Remote(\'discoverModels\')\n    async remoteDiscoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    providerRetryPolicy(provider: string): ResolvedRetryPolicy;\n    imageRequestPricing(provider: string, model: string): LlmImageRequestPricing | undefined;\n    imageRequestTarget(provider: string, model: string, image: ImageAttachmentRef): ImageRequestTarget;\n    fileRequestText(ref: FileAttachmentRef): string;\n    async listModels(provider: string): Promise<LlmModelInfo[]>;\n    async resolveModelInfo(provider: string, model: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async resolveCallConfig(config: LlmCallConfig, signal?: AbortSignal): Promise<LlmCallConfig>;\n    async prepareCall(conf /* …truncated — full shape in source */',
     },
     {
         name: 'LocalAtInput',
@@ -5821,7 +5916,7 @@ export const TYPE_API = [
     },
     {
         name: 'ManagementError',
-        declaration: 'export interface ManagementError {\n    code: ReadOnlyReason | \'unknown-plugin\' | \'invalid-spec\' | \'ambiguous-install\' | \'not-bundle\' | \'not-removable\' | \'stop-profile\' | \'bundle-in-use\' | \'stale-approval\' | \'incompatible-version\' | \'operation-error\';\n    diagnostic?: string;\n    incompatible?: IncompatiblePlugin[];\n}',
+        declaration: 'export interface ManagementError {\n    code: ReadOnlyReason | \'unknown-plugin\' | \'invalid-spec\' | \'already-installed\' | \'ambiguous-install\' | \'not-bundle\' | \'not-removable\' | \'stop-profile\' | \'bundle-in-use\' | \'stale-approval\' | \'incompatible-version\' | \'operation-error\';\n    diagnostic?: string;\n    incompatible?: IncompatiblePlugin[];\n}',
     },
     {
         name: 'ManualCompactAgentContext',
@@ -6085,7 +6180,11 @@ export const TYPE_API = [
     },
     {
         name: 'PeerScope',
-        declaration: 'export interface PeerScope {\n    readonly id: PeerId;\n    readonly ctx: Context;\n    dispose(): Promise<void>;\n}',
+        declaration: 'export interface PeerScope {\n    readonly id: PeerId;\n    readonly ctx: Context;\n    readonly principal: Principal;\n    readonly signal: AbortSignal;\n    readonly interactions: \'answer\' | \'none\';\n    dispose(): Promise<void>;\n}',
+    },
+    {
+        name: 'PendingModule',
+        declaration: 'export interface PendingModule {\n    url: string;\n    reason: \'host-module\' | \'unmanaged-plugin\' | \'module-comparison\';\n}',
     },
     {
         name: 'PermissionCatalog',
@@ -6207,6 +6306,14 @@ export const TYPE_API = [
         name: 'PreToolDecision',
         declaration: 'export type PreToolDecision = {\n    kind: \'allow\';\n} | {\n    kind: \'deny\';\n    reason: string;\n    info?: ToolErrorInfo;\n} | {\n    kind: \'cancel\';\n} | {\n    kind: \'ask\';\n    reason?: string;\n    displayReason?: {\n        readonly en: string;\n        readonly [locale: string]: string;\n    };\n};',
     },
+    {
+        name: 'Principal',
+        declaration: 'export type Principal = PrincipalMap[keyof PrincipalMap];',
+    },
+    {
+        name: 'PrincipalMap',
+        declaration: 'export interface PrincipalMap {\n    owner: {\n        readonly kind: \'owner\';\n    };\n}',
+    },
     {
         name: 'ProductEvent',
         declaration: 'export type ProductEvent = {\n    [K in keyof ProductEventMap]: {\n        eventName: K;\n        attributes: ProductEventMap[K];\n        timestamp: number;\n    };\n}[keyof ProductEventMap];',
@@ -6223,6 +6330,10 @@ export const TYPE_API = [
         name: 'ProfilePnpmInvocation',
         declaration: 'export interface ProfilePnpmInvocation {\n    readonly command: string;\n    readonly args: readonly string[];\n    readonly env: Readonly<Record<string, string>>;\n}',
     },
+    {
+        name: 'ProfileReconciliation',
+        declaration: 'export interface ProfileReconciliation {\n    warnings: string[];\n    pending: PendingModule[];\n    restartReason?: \'module-comparison\' | \'package-moved\';\n}',
+    },
     {
         name: 'ProjectionChangeListener',
         declaration: 'export type ProjectionChangeListener = (session: Session, key: Extract<keyof SessionProjectionMap, string>, value: unknown, seq: SessionSeq) => void;',
@@ -6321,7 +6432,7 @@ export const TYPE_API = [
     },
     {
         name: 'PtcRunRequest',
-        declaration: 'export interface PtcRunRequest {\n    program: string;\n    bindings: PtcBindingNamespace[];\n    cwd?: string;\n    timeoutMs?: number | null;\n    sandboxPolicy?: SandboxExecutionPolicy;\n    signal?: AbortSignal;\n}',
+        declaration: 'export interface PtcRunRequest {\n    program: string;\n    stateOwner?: object;\n    bindings: PtcBindingNamespace[];\n    cwd?: string;\n    timeoutMs?: number | null;\n    sandboxPolicy?: SandboxExecutionPolicy;\n    signal?: AbortSignal;\n}',
     },
     {
         name: 'PtcRunResult',
@@ -6375,6 +6486,62 @@ export const TYPE_API = [
         name: 'Reload',
         declaration: 'export interface Reload {\n    filename: string;\n    modules: ReloadModules;\n    runtime?: Plugin.Runtime | undefined;\n}',
     },
+    {
+        name: 'RemoteAccessAction',
+        declaration: 'export type RemoteAccessAction = RemoteAccessEndpoint | `event:${string}`;',
+    },
+    {
+        name: 'RemoteAccessBaseline',
+        declaration: 'export type RemoteAccessBaseline = Extract<RemoteAccessFrame, {\n    type: \'baseline\';\n}>;',
+    },
+    {
+        name: 'RemoteAccessBinding',
+        declaration: 'export type RemoteAccessBinding = {\n    [K in RemoteAccessResourceKind]: {\n        readonly role: RemoteAccessRole<K>;\n        readonly resource: RemoteAccessResourceOf<K>;\n        readonly condition?: RemoteAccessCondition<K>;\n    };\n}[RemoteAccessResourceKind];',
+    },
+    {
+        name: 'RemoteAccessCondition',
+        declaration: 'export type RemoteAccessCondition<K extends RemoteAccessResourceKind> = (request: {\n    readonly action: RemoteAccessAction;\n    readonly resource: RemoteAccessResourceOf<K>;\n    readonly args?: Readonly<Record<string, unknown>>;\n}) => RemoteAccessDecision;',
+    },
+    {
+        name: 'RemoteAccessDecision',
+        declaration: 'export type RemoteAccessDecision = {\n    readonly kind: \'allow\';\n} | {\n    readonly kind: \'deny\';\n    readonly reason: string;\n};',
+    },
+    {
+        name: 'RemoteAccessEndpoint',
+        declaration: 'export type RemoteAccessEndpoint = `${string}/${string}`;',
+    },
+    {
+        name: 'RemoteAccessFrame',
+        declaration: 'export type RemoteAccessFrame = {\n    readonly type: \'baseline\';\n    readonly owner: true;\n} | {\n    readonly type: \'baseline\';\n    readonly owner: false;\n    readonly grants: readonly RemoteAccessGrant[];\n} | {\n    readonly type: \'upsert\';\n    readonly grant: RemoteAccessGrant;\n} | {\n    readonly type: \'remove\';\n    readonly resource: RemoteAccessResource;\n};',
+    },
+    {
+        name: 'RemoteAccessGrant',
+        declaration: 'export interface RemoteAccessGrant {\n    readonly resource: RemoteAccessResource;\n    readonly actions: readonly string[];\n}',
+    },
+    {
+        name: 'RemoteAccessPolicy',
+        declaration: 'export interface RemoteAccessPolicy<P extends Principal> {\n    bindings(principal: P): readonly RemoteAccessBinding[];\n    explain?(request: RemoteAccessRequest<P>): string | undefined;\n}',
+    },
+    {
+        name: 'RemoteAccessRequest',
+        declaration: 'export interface RemoteAccessRequest<P extends Principal> {\n    readonly principal: P;\n    readonly action: RemoteAccessAction;\n    readonly resources: readonly RemoteAccessResource[];\n    readonly args?: Readonly<Record<string, unknown>>;\n}',
+    },
+    {
+        name: 'RemoteAccessResource',
+        declaration: 'export type RemoteAccessResource = {\n    readonly kind: \'global\';\n} | {\n    [Kind in TypertResourceKind]: {\n        readonly kind: Kind;\n        readonly id: TypertResourceId<TypertResourceMap[Kind]>;\n    };\n}[TypertResourceKind];',
+    },
+    {
+        name: 'RemoteAccessResourceKind',
+        declaration: 'export type RemoteAccessResourceKind = \'global\' | TypertResourceKind;',
+    },
+    {
+        name: 'RemoteAccessResourceOf',
+        declaration: 'export type RemoteAccessResourceOf<K extends RemoteAccessResourceKind> = Extract<RemoteAccessResource, {\n    readonly kind: K;\n}>;',
+    },
+    {
+        name: 'RemoteAccessRole',
+        declaration: 'export interface RemoteAccessRole<K extends RemoteAccessResourceKind> {\n    readonly name: string;\n    readonly resource: K;\n    readonly actions: readonly RemoteAccessAction[];\n}',
+    },
     {
         name: 'RemoteError',
         declaration: 'export class RemoteError<Code extends RemoteErrorCode = RemoteErrorCode> extends Error {\n    readonly isDSHRemoteError: true;\n    constructor(readonly code: Code, message: string, readonly details: RemoteErrorDetailsMap[Code], options?: ErrorOptions);\n}',
@@ -6391,6 +6558,14 @@ export const TYPE_API = [
         name: 'RemoteEventHostInfo',
         declaration: 'export interface RemoteEventHostInfo {\n    readonly home: string;\n}',
     },
+    {
+        name: 'RemoteStream',
+        declaration: 'export type RemoteStream<Out, In = never> = AsyncIterable<Out> & {\n    readonly [STREAM_UPLINK]?: In;\n};',
+    },
+    {
+        name: 'RemoteUplinkWindow',
+        declaration: 'export interface RemoteUplinkWindow {\n    readonly maxBytes: number;\n    readonly frameOverheadBytes: number;\n}',
+    },
     {
         name: 'RenderedDocumentBytes',
         declaration: 'export interface RenderedDocumentBytes extends WorkspaceFileBytes {\n    readonly missingFonts: string[];\n    readonly generation: OfficeToPdfGeneration;\n}',
@@ -6451,6 +6626,10 @@ export const TYPE_API = [
         name: 'ResolvedSubagentStartRequest',
         declaration: 'export interface ResolvedSubagentStartRequest extends SubagentStartRequest {\n    readonly cwd: string;\n}',
     },
+    {
+        name: 'RestartReason',
+        declaration: 'export type RestartReason = \'no-hmr\' | \'package-moved\' | \'host-module\' | \'unmanaged-plugin\' | \'module-comparison\';',
+    },
     {
         name: 'RestoredSessionOptions',
         declaration: 'export interface RestoredSessionOptions {\n    readonly seed: SessionEvent[];\n    readonly meta: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    readonly eventState: SessionSeedEventState;\n}',
@@ -7461,7 +7640,7 @@ export const TYPE_API = [
     },
     {
         name: 'SubagentCapabilities',
-        declaration: 'export interface SubagentCapabilities {\n    readonly agentOptions: boolean;\n    readonly outputSchema: boolean;\n    readonly depthLimit: boolean;\n    readonly toolFilter: boolean;\n    readonly persona: boolean;\n}',
+        declaration: 'export interface SubagentCapabilities {\n    readonly agentOptions: boolean;\n    readonly agentPreset: boolean;\n    readonly outputSchema: boolean;\n    readonly depthLimit: boolean;\n}',
     },
     {
         name: 'SubagentCatalogEntry',
@@ -7537,7 +7716,7 @@ export const TYPE_API = [
     },
     {
         name: 'SubagentStartRequest',
-        declaration: 'export interface SubagentStartRequest {\n    readonly cwd?: string;\n    readonly label?: string;\n    readonly prompt: ContentBlock[];\n    readonly parent: Agent;\n    readonly signal: AbortSignal;\n    readonly agentOptions?: AgentOptions;\n    readonly outputSchema?: ObjectJsonSchema;\n    readonly maxDepth?: number;\n    readonly toolFilter?: ToolRestriction;\n    readonly persona?: string;\n}',
+        declaration: 'export interface SubagentStartRequest {\n    readonly cwd?: string;\n    readonly agentPreset?: string;\n    readonly label?: string;\n    readonly prompt: ContentBlock[];\n    readonly parent: Agent;\n    readonly signal: AbortSignal;\n    readonly agentOptions?: AgentOptions;\n    readonly outputSchema?: ObjectJsonSchema;\n    readonly maxDepth?: number;\n}',
     },
     {
         name: 'SubagentStopReason',
@@ -7687,10 +7866,6 @@ export const TYPE_API = [
         name: 'TeamWaitResult',
         declaration: 'export interface TeamWaitResult {\n    readonly timedOut: boolean;\n}',
     },
-    {
-        name: 'TerminalAttachmentId',
-        declaration: 'export type TerminalAttachmentId = Branded<\'TerminalAttachmentId\'>;',
-    },
     {
         name: 'TerminalBackend',
         declaration: 'export interface TerminalBackend {\n    readonly type: string;\n    spawn(spec: TerminalBackendSpawnSpec): Promise<TerminalBackendSession>;\n}',
@@ -7713,11 +7888,15 @@ export const TYPE_API = [
     },
     {
         name: 'TerminalEnvironment',
-        declaration: 'export interface TerminalEnvironment {\n    readonly cwd: string;\n    readonly maxInputBytes: number;\n    readonly maxCols: number;\n    readonly maxRows: number;\n    readonly scrollback: number;\n}',
+        declaration: 'export interface TerminalEnvironment {\n    readonly cwd: string;\n    readonly maxInputBytes: number;\n    readonly maxBufferedBytes: number;\n    readonly maxCols: number;\n    readonly maxRows: number;\n    readonly scrollback: number;\n}',
     },
     {
         name: 'TerminalFrame',
-        declaration: 'export type TerminalFrame = {\n    readonly type: \'snapshot\';\n    readonly sequence: number;\n    readonly screen: string;\n    readonly info: WebTerminalInfo;\n} | {\n    readonly type: \'output\';\n    readonly sequence: number;\n    readonly data: string;\n} | {\n    readonly type: \'state\';\n    readonly info: WebTerminalInfo;\n};',
+        declaration: 'export type TerminalFrame = {\n    readonly type: \'snapshot\';\n    readonly sequence: number;\n    readonly screen: string;\n    readonly info: WebTerminalInfo;\n    readonly writable: boolean;\n    readonly inputWindow?: RemoteUplinkWindow;\n} | {\n    readonly type: \'output\';\n    readonly sequence: number;\n    readonly data: string;\n} | {\n    readonly type: \'state\';\n    readonly info: WebTerminalInfo;\n    readonly writable: boolean;\n} | {\n    readonly type: \'ack\';\n    readonly sequence: number;\n    readonly refusal?: \'read-only\' | \'not-running\';\n};',
+    },
+    {
+        name: 'TerminalInput',
+        declaration: 'export type TerminalInput = {\n    readonly type: \'write\';\n    readonly sequence: number;\n    readonly data: string;\n} | {\n    readonly type: \'resize\';\n    readonly sequence: number;\n    readonly cols: number;\n    readonly rows: number;\n};',
     },
     {
         name: 'TerminalReadRequest',
@@ -8025,7 +8204,7 @@ export const TYPE_API = [
     },
     {
         name: 'TypertCodec',
-        declaration: 'export type TypertCodec = {\n    readonly mode: \'strict\';\n    readonly typeSymbol: string;\n    readonly create: () => TypertSchema;\n    readonly decode?: (value: unknown) => unknown;\n    readonly encode?: (value: unknown, writeBytes: (bytes: Uint8Array, path: readonly (string | number)[]) => null) => unknown;\n} | {\n    readonly mode: \'src-json\';\n};',
+        declaration: 'export type TypertCodec<Value = unknown> = TypertRemoteValue<Value> & {\n    readonly mode: \'strict\';\n    readonly typeSymbol: string;\n    readonly decode?: ((value: unknown) => unknown) | undefined;\n    readonly encode?: ((value: unknown, writeBytes: (bytes: Uint8Array, path: readonly (string | number)[]) => null) => unknown) | undefined;\n} | {\n    readonly mode: \'src-json\';\n};',
     },
     {
         name: 'TypertContribution',
@@ -8053,7 +8232,7 @@ export const TYPE_API = [
     },
     {
         name: 'TypertGatewayWireStream',
-        declaration: 'export interface TypertGatewayWireStream {\n    readonly open: (endpoint: string, payload: unknown, uplink: AsyncIterable<unknown>, peer: PeerScope | undefined, signal: AbortSignal) => Promise<AsyncIterable<unknown>>;\n    readonly failure: (error: unknown) => {\n        readonly code: string;\n        readonly message: string;\n        readonly details: object;\n    };\n}',
+        declaration: 'export interface TypertGatewayWireStream {\n    readonly open: (endpoint: string, payload: unknown, uplink: AsyncIterable<unknown>, peer: PeerScope, signal: AbortSignal) => Promise<AsyncIterable<unknown>>;\n    readonly failure: (error: unknown) => {\n        readonly code: string;\n        readonly message: string;\n        readonly details: object;\n    };\n}',
     },
     {
         name: 'TypertMemberModel',
@@ -8085,7 +8264,7 @@ export const TYPE_API = [
     },
     {
         name: 'TypertRemoteEventFrame',
-        declaration: 'export interface TypertRemoteEventFrame {\n    readonly event: string;\n    readonly args: readonly unknown[];\n}',
+        declaration: 'export interface TypertRemoteEventFrame {\n    readonly event: string;\n    readonly args: readonly unknown[];\n    readonly resources?: Readonly<Record<string, TypertResourceReader>>;\n}',
     },
     {
         name: 'TypertRemoteEventInvocation',
@@ -8103,6 +8282,30 @@ export const TYPE_API = [
         name: 'TypertRemoteService',
         declaration: 'export abstract class TypertRemoteService<out T = never> extends Service<T> {\n    readonly typertRemote: TypertGatewayBinding<this>;\n}',
     },
+    {
+        name: 'TypertRemoteValue',
+        declaration: 'export interface TypertRemoteValue<Value = unknown> {\n    readonly create: () => TypertSchema<Value>;\n    readonly description?: string | undefined;\n    readonly jsonSchema?: Readonly<Record<string, unknown>> | undefined;\n    readonly jsonSchemaError?: string | undefined;\n}',
+    },
+    {
+        name: 'TypertResource',
+        declaration: 'export interface TypertResource<Id> {\n    readonly [RESOURCE_ID]: Id;\n}',
+    },
+    {
+        name: 'TypertResourceId',
+        declaration: 'export type TypertResourceId<Resource> = Resource extends TypertResource<infer Id> ? Id : never;',
+    },
+    {
+        name: 'TypertResourceKind',
+        declaration: 'export type TypertResourceKind = Extract<keyof TypertResourceMap, string>;',
+    },
+    {
+        name: 'TypertResourceMap',
+        declaration: 'export interface TypertResourceMap {\n}',
+    },
+    {
+        name: 'TypertResourceReader',
+        declaration: 'export type TypertResourceReader = {\n    read(...args: readonly unknown[]): unknown;\n}[\'read\'];',
+    },
     {
         name: 'TypertSchema',
         declaration: 'export interface TypertSchema<Output = unknown> {\n    parse(value: unknown): Output;\n}',
@@ -8273,7 +8476,7 @@ export const TYPE_API = [
     },
     {
         name: 'WebTerminalInfo',
-        declaration: 'export interface WebTerminalInfo {\n    readonly id: WebTerminalId;\n    readonly title: string;\n    readonly shell: TerminalShell;\n    readonly cwd: string;\n    readonly cols: number;\n    readonly rows: number;\n    readonly state: \'running\' | \'exited\' | \'failed\';\n    readonly exitCode: number | null;\n    readonly error?: string;\n    readonly controllerId?: TerminalAttachmentId;\n}',
+        declaration: 'export interface WebTerminalInfo {\n    readonly id: WebTerminalId;\n    readonly title: string;\n    readonly shell: TerminalShell;\n    readonly cwd: string;\n    readonly cols: number;\n    readonly rows: number;\n    readonly state: \'running\' | \'exited\' | \'failed\';\n    readonly exitCode: number | null;\n    readonly error?: string;\n}',
     },
     {
         name: 'WebUpgradeRoute',
@@ -8433,7 +8636,7 @@ export const TYPE_API = [
     },
     {
         name: 'WorkspaceFollowIncrement',
-        declaration: 'export type WorkspaceFollowIncrement = {\n    readonly type: \'upsert\';\n    readonly workspace: WorkspaceView;\n} | {\n    readonly type: \'remove\';\n    readonly workspaceId: WorkspaceId;\n} | {\n    readonly type: \'order\';\n    readonly workspaceIds: readonly WorkspaceId[];\n} | {\n    readonly type: \'archived\';\n    readonly archivedSessionIds: readonly SessionId[];\n} | {\n    readonly type: \'pinned\';\n    readonly pinnedSessionIds: readonly SessionId[];\n};',
+        declaration: 'export type WorkspaceFollowIncrement = {\n    readonly type: \'replace\';\n    readonly value: WorkspaceBaseline;\n} | {\n    readonly type: \'upsert\';\n    readonly workspace: WorkspaceView;\n} | {\n    readonly type: \'remove\';\n    readonly workspaceId: WorkspaceId;\n} | {\n    readonly type: \'order\';\n    readonly workspaceIds: readonly WorkspaceId[];\n} | {\n    readonly type: \'archived\';\n    readonly archivedSessionIds: readonly SessionId[];\n} | {\n    readonly type: \'pinned\';\n    readonly pinnedSessionIds: readonly SessionId[];\n};',
     },
     {
         name: 'WorkspaceInsertBeforeRequest',

package/locale/en.json

@@ -0,0 +1,5 @@
+{
+  "meta": {
+    "title": "tool-cordis"
+  }
+}

package/locale/host/en.json

@@ -0,0 +1,5 @@
+{
+  "meta": {
+    "title": "tool-cordis/host"
+  }
+}

package/locale/host/zh.json

@@ -0,0 +1,5 @@
+{
+  "meta": {
+    "title": "插件 API 检查服务"
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "插件 API 查询工具",
+    "description": "让 AI 在开发插件前查询服务端和浏览器端的可用 API。"
+  }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-tool-cordis",
   "description": "Read-only runtime API inspection for Harness plugin development",
-  "version": "0.2.1-alpha.2",
+  "version": "0.2.1-alpha.3",
   "publishConfig": {
     "access": "public"
   },
@@ -23,31 +23,35 @@
       "default": "./lib/types/host.js"
     },
     "./src/*": "./src/*",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./host/locale/*.json": "./locale/host/*.json",
+    "./locale/*.json": "./locale/*.json"
   },
   "files": [
+    "locale/*.json",
+    "locale/host/*.json",
     "lib/index.js",
     "lib/types/**/*.js",
     "lib/types/**/*.d.ts"
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-app-boot": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-cordis-host-runner": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.2.1-alpha.2"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-app-boot": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-cordis-host-runner": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-tools": "0.2.1-alpha.3"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/cordis-plugin-group": "~1.0.5-alpha.1",
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-app-boot": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-cordis-host-runner": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.2.1-alpha.2",
-    "@deepseek-ai/schemastery": "~3.18.5-alpha.1"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2",
+    "@deepseek-ai/cordis-plugin-group": "~1.0.5-alpha.2",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-app-boot": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-cordis-host-runner": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-tools": "0.2.1-alpha.3",
+    "@deepseek-ai/schemastery": "~3.18.5-alpha.2"
   }
 }