@deepseek-ai/dsh-workflow-worker-thread 0.0.1-rc.3 → 0.1.0-rc.2

package/LICENSE

@@ -1,28 +1,21 @@
-BSD 3-Clause License
+MIT License
 
-Copyright (c) 2026, DeepSeek
+Copyright (c) 2026 DeepSeek
 
-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are met:
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
 
-1. Redistributions of source code must retain the above copyright notice, this
-   list of conditions and the following disclaimer.
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
 
-2. Redistributions in binary form must reproduce the above copyright notice,
-   this list of conditions and the following disclaimer in the documentation
-   and/or other materials provided with the distribution.
-
-3. Neither the name of the copyright holder nor the names of its
-   contributors may be used to endorse or promote products derived from
-   this software without specific prior written permission.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
-FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
-SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
-CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
-OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/lib/index.js

@@ -1,5 +1,5 @@
 import { randomUUID } from "node:crypto";
-import { availableParallelism } from "node:os";
+import { availableParallelism, tmpdir } from "node:os";
 import * as vm from "node:vm";
 import z from "@deepseek-ai/schemastery";
 import WorkflowEngine, { WorkflowError, WorkflowRunId } from "@deepseek-ai/dsh-workflow";
@@ -187,10 +187,33 @@ var HostToWorkerType;
 * @module @deepseek-ai/dsh-workflow-worker-thread/host
 */
 /**
+* The scrubbed worker environment: no ambient credentials, no loader flags.
+* Windows derives `os.tmpdir()` from `TMP`/`TEMP` and falls back to the
+* literal relative path `undefined\temp` when the environment is empty, so
+* tsx's transform cache would land in a cwd-relative `undefined/temp`
+* directory; the host's real temp path (not a credential) is injected there.
+* The unbuilt shape additionally forwards `TSX_TSCONFIG_PATH` for path
+* resolution.
+* @param platform - host platform; overridable so tests exercise both peer arms.
+* @param tsconfigPath - the tsconfig pin to forward; only the unbuilt caller
+*   passes one, so the built worker never observes the host's pin.
+* @returns the scrubbed worker environment object.
+*/
+function workerSpawnEnv(platform = process.platform, tsconfigPath) {
+	const env = {};
+	if (platform === "win32") {
+		const tmp = tmpdir();
+		env.TMP = tmp;
+		env.TEMP = tmp;
+	}
+	if (tsconfigPath !== void 0) env.TSX_TSCONFIG_PATH = tsconfigPath;
+	return env;
+}
+/**
 * Resolve a built worker bundle or an unbuilt bootstrap that installs both tsx
 * transforms inside the worker. Both shapes clear `execArgv` and the ambient
-* environment; the unbuilt shape forwards only `TSX_TSCONFIG_PATH` for path
-* resolution.
+* environment (the worker only sees the platform temp path and, unbuilt,
+* `TSX_TSCONFIG_PATH`).
 * @param init - the run payload, passed as `workerData`.
 * @returns the entry path or URL and the Worker options to spawn it with.
 */
@@ -200,7 +223,7 @@ function resolveWorkerSpawn(init) {
 		entry: fileURLToPath(new URL("./worker.cjs", import.meta.url)),
 		options: {
 			workerData: init,
-			env: {},
+			env: workerSpawnEnv(),
 			execArgv: []
 		}
 	};
@@ -218,7 +241,7 @@ function resolveWorkerSpawn(init) {
 		entry: new URL(`data:text/javascript,${encodeURIComponent(bootstrap)}`),
 		options: {
 			workerData: init,
-			env: process.env.TSX_TSCONFIG_PATH === void 0 ? {} : { TSX_TSCONFIG_PATH: process.env.TSX_TSCONFIG_PATH },
+			env: workerSpawnEnv(void 0, process.env.TSX_TSCONFIG_PATH),
 			execArgv: []
 		}
 	};

package/lib/types/host.d.ts

@@ -11,6 +11,20 @@ import type SubagentRuntime from '@deepseek-ai/dsh-subagent';
 import type { WorkflowMeta, WorkflowResult, WorkflowRun, WorkflowRunId } from '@deepseek-ai/dsh-workflow';
 import type { ExecutionObserver } from './runtime.ts';
 import type { WorkerInit } from './types.ts';
+/**
+ * The scrubbed worker environment: no ambient credentials, no loader flags.
+ * Windows derives `os.tmpdir()` from `TMP`/`TEMP` and falls back to the
+ * literal relative path `undefined\temp` when the environment is empty, so
+ * tsx's transform cache would land in a cwd-relative `undefined/temp`
+ * directory; the host's real temp path (not a credential) is injected there.
+ * The unbuilt shape additionally forwards `TSX_TSCONFIG_PATH` for path
+ * resolution.
+ * @param platform - host platform; overridable so tests exercise both peer arms.
+ * @param tsconfigPath - the tsconfig pin to forward; only the unbuilt caller
+ *   passes one, so the built worker never observes the host's pin.
+ * @returns the scrubbed worker environment object.
+ */
+export declare function workerSpawnEnv(platform?: NodeJS.Platform, tsconfigPath?: string): NodeJS.ProcessEnv;
 /**
  * One live worker-engine run — the seam's {@link WorkflowRun}, returned by
  * `start()` directly. Owns the Worker, the child registry, and the result

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-workflow-worker-thread",
   "description": "worker-thread workflow engine: executes model-written orchestration scripts off the host event loop, bridging agent() calls back to ctx.subagents",
-  "version": "0.0.1-rc.3",
+  "version": "0.1.0-rc.2",
   "publishConfig": {
     "access": "restricted"
   },
@@ -35,35 +35,35 @@
     "lib/worker.cjs",
     "lib/types/**/*.d.ts"
   ],
-  "license": "BSD-3-Clause",
+  "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-agent": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-brand": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-invariants": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-llm": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-subagent": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-tools": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-workflow": "^0.0.1-rc.3",
-    "@deepseek-ai/cordis": "^4.0.1-rc.1",
-    "@deepseek-ai/dsh-session": "^0.0.1-rc.3"
+    "@deepseek-ai/dsh-agent": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-brand": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-session": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-subagent": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-workflow": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.1.0-rc.2",
+    "@deepseek-ai/cordis": "^4.0.1"
   },
   "dependencies": {
-    "@deepseek-ai/schemastery": "^3.18.1-rc.1"
+    "@deepseek-ai/schemastery": "^3.18.1"
   },
   "devDependencies": {
     "tsx": "^4.19.2",
-    "@deepseek-ai/dsh-agent": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-agent-loop": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-agent-loop-testkit": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-invariants": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-brand": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-llm": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-session": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-subagent": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-subagent-spawn-in-process": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-tools": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-workflow": "^0.0.1-rc.3",
-    "@deepseek-ai/dsh-system-prompt": "^0.0.1-rc.3",
-    "@deepseek-ai/cordis": "^4.0.1-rc.1"
+    "@deepseek-ai/dsh-agent": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-brand": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-session": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-subagent-spawn-in-process": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-subagent": "^0.1.0-rc.2",
+    "@deepseek-ai/dsh-workflow": "^0.1.0-rc.2",
+    "@deepseek-ai/cordis": "^4.0.1"
   }
 }