@deepseek-ai/dsh-webhook 0.1.5-rc.1 → 0.1.6-alpha.1

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/webhook/webhook/README.md
-README.md: e19bb7edc26857312c9249294bcfab23942075c1
-README.zh.md: 39d17eb6e2d1b20e7f05b811d42804c7b3aa435c
+README.md: 685bf3befa1aee3af336452d771c40c01d42c70d
+README.zh.md: db0801fcbd4aa81a8f24bd706673d1ee4629ed1f

package/README.md

@@ -27,7 +27,7 @@ English | [中文](README.zh.md)
 
 `WebhookRule<K>` has a branded unique `id`, a provider `kind`, and `run(delivery, signal)`. A callback may execute arbitrary trusted code and returns either `null` or one `WebhookSessionRequest`. Rules of the same kind start independently, and one throw or rejection is logged without starving siblings.
 
-`VerifiedWebhookDelivery` carries provider kind, configured source id, provider delivery id, normalized lossless JSON, and receipt time. The runtime snapshots and freezes the complete value before sharing it. `deliveryId` is provenance only; repeated delivery runs the rules again.
+`VerifiedWebhookDelivery` carries provider kind, configured source id, provider delivery id, normalized lossless JSON, and receipt time. The runtime snapshots and freezes the complete value before sharing it. `deliveryId` records the provider's identifier only; repeated delivery runs the rules again.
 
 Registration is an effect. Its awaitable disposer first hides the rule, then aborts and drains active callbacks. Callbacks must observe the supplied signal; same-process code that ignores cancellation cannot be forcibly stopped safely.
 
@@ -38,7 +38,7 @@ Registration is an effect. Its awaitable disposer first hides the rule, then abo
 
 The runtime validates presets before mutation, resolves or creates the canonical Workspace, creates an Agent with that Workspace path as `SessionHeader.cwd`, mounts the agent preset before publication, and attaches the Session before applying permissions, title, and prompt. Failed attachment disposes the unpublished action. A later pre-prompt failure detaches the Workspace and disposes the Agent on a best-effort rollback.
 
-Successful `Agent.followup()` is the webhook operation's commit point. The message uses `source.kind: "webhook"` with provider, source, delivery, and rule provenance. The runtime does not wait for idle, flush specially, inspect the reply, or publish completion state; ordinary Agent and Session behavior owns everything afterward.
+Successful `Agent.followup()` is the webhook operation's commit point. The message uses `source.kind: "webhook"` and records the provider, source, delivery, and rule identifiers. The runtime does not wait for idle, flush specially, inspect the reply, or publish completion state; ordinary Agent and Session behavior owns everything afterward.
 
 <a id="composition"></a>
 ## Composition

package/README.zh.md

@@ -1,5 +1,5 @@
 ---
-description: "面向注册可信外部事件策略并创建 Workspace Session 的维护者，说明 webhook 规则运行时。"
+description: "面向注册可信外部事件策略并创建 Workspace 会话的维护者，说明 webhook 规则运行时。"
 kind: "package-reference"
 ---
 
@@ -9,15 +9,15 @@ kind: "package-reference"
 
 ## 概述
 
-`dsh-webhook` 提供 Host 侧的 `ctx.webhookRuntime`：它既是受信任程序化 webhook 规则的注册表，也拥有唯一内置动作——在 Web Workspace 中创建普通根 Session。接口只包含 `register(rule)` 和 `dispatch(delivery)`；提供方身份验证属于适配器包。当受信任规则必须把外部事件变成新的 agent Session 时，请使用它。
+`dsh-webhook` 提供 Host 侧的 `ctx.webhookRuntime`：它既是受信任程序化 webhook 规则的注册表，也拥有唯一内置动作——在 Web Workspace 中创建普通根会话。接口只包含 `register(rule)` 和 `dispatch(delivery)`；提供方身份验证属于适配器包。当受信任规则必须把外部事件变成新的 agent（智能体）会话时，请使用它。
 
 ## 目录
 
 - [规则接口](#rule-interface)
-- [Session 请求](#session-request)
+- [会话请求](#session-request)
 - [组合](#composition)
-- [Model Experience](#model-experience)
-- [Known Limitations and Deferred Work](#known-limitations-and-deferred-work)
+- [模型体验](#model-experience)
+- [已知限制与延期工作](#known-limitations-and-deferred-work)
 - [开发备注](#dev-note)
 
 -----
@@ -25,54 +25,54 @@ kind: "package-reference"
 <a id="rule-interface"></a>
 ## 规则接口
 
-`WebhookRule<K>` 具有带品牌类型的唯一 `id`、提供方 `kind` 与 `run(delivery, signal)`。回调可以执行任意受信任代码，并返回 `null` 或一个 `WebhookSessionRequest`。同类规则彼此独立启动；某个规则抛出或拒绝只会记录日志，不会阻止同级规则。
+`WebhookRule<K>` 具有带 brand 类型的唯一 `id`、提供方 `kind` 与 `run(delivery, signal)`。回调可以执行任意受信任代码，并返回 `null` 或一个 `WebhookSessionRequest`。同类规则彼此独立启动；某个回调抛出异常或其返回的 Promise 被拒绝时，只会记录日志，不会阻止同级规则。
 
-`VerifiedWebhookDelivery` 携带提供方种类、已配置来源 id、提供方交付 id、规范化的无损 JSON 与接收时间。runtime 会在共享前快照并冻结完整值。`deliveryId` 仅是来源信息；重复交付会再次运行规则。
+`VerifiedWebhookDelivery` 携带提供方种类、已配置来源 id、提供方交付 id、规范化的无损 JSON 与接收时间。运行时会在共享前快照并冻结完整值。`deliveryId` 仅是来源信息；重复交付会再次运行规则。
 
 注册是一项 effect。它的可等待 disposer 会先隐藏规则，再中止并排空活动回调。回调必须观察所提供的 signal；忽略取消的同进程代码无法被安全强制停止。
 
 <a id="session-request"></a>
-## Session 请求
+## 会话请求
 
-`WebhookSessionRequest` 要求 `workspacePath`、`title`、`prompt`、`agentPreset` 与 `permissionPreset`；可选 `model` 会指定明确的提供方／模型路由与输出 token 上限。明确路由使用其适配器的默认推理强度。省略时会快照包含推理强度的完整当前部署选择，直到首个请求记录持久 header；之后的 Web 模型变更保留普通 Session 行为。
+`WebhookSessionRequest` 要求 `workspacePath`、`title`、`prompt`、`agentPreset` 与 `permissionPreset`；可选 `model` 会指定明确的提供方／模型路由与输出 token 上限。明确路由使用其适配器的默认推理（reasoning）强度。省略时会快照包含推理强度的完整当前部署选择，直到首个请求记录持久 header；之后的 Web 模型变更保留普通会话行为。
 
-runtime 会在变更状态前验证 preset，解析或创建规范 Workspace，以该 Workspace 路径作为 `SessionHeader.cwd` 创建 Agent，在发布前挂载 agent preset，并在应用权限、标题与提示词前附加 Session。附加失败会释放尚未提交动作的 Agent。之后若在提示词前失败，则以尽力而为方式脱离 Workspace 并释放 Agent。
+运行时会在变更状态前验证 preset，解析或创建规范 Workspace，以该 Workspace 路径作为 `SessionHeader.cwd` 创建 Agent，在发布前挂载 agent preset，并在应用权限、标题与提示词前附加会话。附加失败会对尚未发布的动作执行 dispose（资源释放）。之后若在提示词前失败，则以尽力而为方式脱离 Workspace 并对 Agent 执行 dispose。
 
-成功的 `Agent.followup()` 是 webhook 操作的提交点。消息使用 `source.kind: "webhook"`，并携带提供方、来源、交付与规则来源信息。runtime 不等待 idle、不执行特殊 flush、不检查回复，也不发布完成状态；之后完全由普通 Agent 与 Session 行为接管。
+成功的 `Agent.followup()` 是 webhook 操作的提交点。消息使用 `source.kind: "webhook"`，并携带提供方、来源、交付与规则来源信息。运行时不等待 idle、不执行特殊 flush、不检查回复，也不发布完成状态；之后完全由普通 Agent 与会话行为接管。
 
 <a id="composition"></a>
 ## 组合
 
-在 Web Host plane 上，于 Agents、模型默认值、agent presets、permission presets、标题与 Workspace 注册表之后加载 runtime。用户编写的规则插件注入 `webhookRuntime`，并通过自己的 effect 交出 `register()` 返回的 disposer。
+在 Web Host plane 上，于 Agents、模型默认值、agent presets、permission presets、标题与 Workspace 注册表之后加载运行时。用户编写的规则插件注入 `webhookRuntime`，并通过自己的 effect 交出 `register()` 返回的 disposer。
 
 [GitHub 评审指南](../../../docs/user/guide/github-review.zh.md)展示了规则模块、专用入口端口、密钥设置与 Workspace 路由。
 
 <a id="model-experience"></a>
-## Model Experience
+## 模型体验
 
 ### 规则编写的初始提示词
 
-#### What the model sees
+#### 模型看到的内容
 
-每个匹配规则都会让模型看到 `WebhookSessionRequest.prompt` 返回的非空文本原文。通用 runtime 不增加私有框架；若规则包含外部文本，则由规则负责标明其信任属性。随附 GitHub 示例会把选定 PR 字段标为不受信任的 JSON 元数据。
+每个匹配规则都会让模型看到 `WebhookSessionRequest.prompt` 返回的非空文本原文。通用运行时不增加私有框架；若规则包含外部文本，则由规则负责标明其信任属性。随附 GitHub 示例会把选定 PR 字段标为不受信任的 JSON 元数据。
 
-#### Token effect
+#### Token 影响
 
-一条依赖数据的 user-role 消息保留在新 Session 中，并持续贡献 token，直到普通 compaction 替换或移除该历史。
+一条依赖数据的 user-role 消息保留在新会话中，并持续贡献 token，直到普通压缩（compaction）替换或移除该历史。
 
-#### KV Cache effect
+#### KV Cache 影响
 
-初始提示词开启一个新 Session，因此它建立而不是使该 Session 的可复用请求前缀失效。
+初始提示词开启一个新会话，因此它建立而不是使该会话的可复用请求前缀失效。
 
-## Known Limitations and Deferred Work
+## 已知限制与延期工作
 
 <a id="known-limitations-and-deferred-work"></a>
 
-- **仅限进程内 fire-and-forget** — 崩溃会丢失尚未接纳提示词的规则调用；不存在队列、重放或重试。
-- **无内置去重** — 提供方重复交付可能创建重复 Session；需要幂等性的规则自行负责。
+- **仅限进程内 fire-and-forget** — 崩溃会丢失尚未接纳提示词的规则调用；不存在队列、回放或重试。
+- **无内置去重** — 提供方重复交付可能创建重复会话；需要幂等性的规则自行负责。
 - **无完成结果** — HTTP 接受与规则结算都不报告 Agent 成功、idle 或输出。
-- **受信任回调必须配合取消** — runtime teardown 会中止并等待回调，但无法终止任意同进程代码。
-- **Workspace 创建可能比失败的 Session 尝试更长寿** — 空 Workspace 会保留，因为另一个并发调用者可能已经使用它。
+- **受信任回调必须配合取消** — 运行时 teardown 会中止并等待回调，但无法终止任意同进程代码。
+- **Workspace 创建可能比失败的会话尝试更长寿** — 空 Workspace 会保留，因为另一个并发调用者可能已经使用它。
 
 
 <a id="dev-note"></a>

package/lib/index.js

@@ -82,7 +82,7 @@ function installInitialModelSelection(agentCtx, selection) {
 * Agent remains lifecycle-owned by `ctx` and follows normal Session behavior.
 *
 * @param ctx - untraced runtime context that owns the resulting Agent.
-* @param delivery - exact verified provider delivery used for provenance.
+* @param delivery - exact verified provider delivery recorded in the message source.
 * @param ruleId - rule that returned the request.
 * @param request - same-process rule result.
 * @param signal - registration lifetime cancellation through publication.
@@ -148,7 +148,7 @@ async function createWebhookSession(ctx, delivery, ruleId, request, signal) {
 }
 //#endregion
 //#region lib/types/brand.js
-/** Opaque webhook identities shared by adapters, rules, and Session provenance. */
+/** Opaque webhook identities shared by adapters, rules, and Session message sources. */
 /**
 * Brand a webhook rule id.
 * @param value - non-empty rule identifier validated at registration.

package/lib/types/brand.d.ts

@@ -1,4 +1,4 @@
-/** Opaque webhook identities shared by adapters, rules, and Session provenance. */
+/** Opaque webhook identities shared by adapters, rules, and Session message sources. */
 import type { Branded } from '@deepseek-ai/dsh-brand';
 /** Identifies one programmatic webhook rule. */
 export type WebhookRuleId = Branded<'WebhookRuleId'>;

package/lib/types/brand.js

@@ -1,4 +1,4 @@
-/** Opaque webhook identities shared by adapters, rules, and Session provenance. */
+/** Opaque webhook identities shared by adapters, rules, and Session message sources. */
 /**
  * Brand a webhook rule id.
  * @param value - non-empty rule identifier validated at registration.

package/lib/types/session.d.ts

@@ -8,7 +8,7 @@ import type { VerifiedWebhookDelivery, WebhookSessionRequest } from './types.ts'
  * Agent remains lifecycle-owned by `ctx` and follows normal Session behavior.
  *
  * @param ctx - untraced runtime context that owns the resulting Agent.
- * @param delivery - exact verified provider delivery used for provenance.
+ * @param delivery - exact verified provider delivery recorded in the message source.
  * @param ruleId - rule that returned the request.
  * @param request - same-process rule result.
  * @param signal - registration lifetime cancellation through publication.

package/lib/types/session.js

@@ -80,7 +80,7 @@ function installInitialModelSelection(agentCtx, selection) {
  * Agent remains lifecycle-owned by `ctx` and follows normal Session behavior.
  *
  * @param ctx - untraced runtime context that owns the resulting Agent.
- * @param delivery - exact verified provider delivery used for provenance.
+ * @param delivery - exact verified provider delivery recorded in the message source.
  * @param ruleId - rule that returned the request.
  * @param request - same-process rule result.
  * @param signal - registration lifetime cancellation through publication.

package/lib/types/types.d.ts

@@ -12,7 +12,7 @@ export interface VerifiedWebhookDelivery<K extends string = string> {
     readonly kind: K;
     /** Configured adapter instance such as `primary-github`. */
     readonly source: WebhookSourceId;
-    /** Provider identity exposed as provenance, never as built-in deduplication state. */
+    /** Provider delivery identifier exposed in message sources, never as built-in deduplication state. */
     readonly deliveryId: WebhookDeliveryId;
     /** Provider-normalized lossless JSON. */
     readonly event: WebhookEventOf<K>;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-webhook",
   "description": "Fire-and-forget webhook rule runtime that creates Workspace-backed DeepSeek Harness Sessions",
-  "version": "0.1.5-rc.1",
+  "version": "0.1.6-alpha.1",
   "publishConfig": {
     "access": "public"
   },
@@ -38,32 +38,32 @@
   "license": "MIT",
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-agent-default-model": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-agent": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-invariants": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-permission-presets": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-session-title": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-workspace": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-session": "^0.1.5-rc.1"
+    "@deepseek-ai/dsh-agent": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-agent-default-model": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-invariants": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-llm": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-permission-presets": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-session": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-session-title": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-workspace": "^0.1.6-alpha.1"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
     "@deepseek-ai/cordis-plugin-include": "^1.0.7",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-agent": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-agent-default-model": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-invariants": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-permission-presets": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-session": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-session-title": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-workspace": "^0.1.5-rc.1"
+    "@deepseek-ai/dsh-agent": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-agent-default-model": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-invariants": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-llm": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-permission-presets": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-session": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-session-title": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-workspace": "^0.1.6-alpha.1"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-util-values": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-brand": "^0.1.5-rc.1"
+    "@deepseek-ai/dsh-brand": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-util-values": "^0.1.6-alpha.1"
   }
 }