@deepseek-ai/dsh-workflow-worker-thread 0.1.2-alpha.5 → 0.1.3-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/lib/index.js +5 -1
  2. package/lib/types/host.d.ts +5 -1
  3. package/package.json +23 -22
package/lib/index.js CHANGED
@@ -186,7 +186,11 @@ var HostToWorkerType;
186
186
  * @module @deepseek-ai/dsh-workflow-worker-thread/host
187
187
  */
188
188
  /**
189
- * The scrubbed worker environment: no ambient credentials, no loader flags.
189
+ * The scrubbed worker environment: no ambient credentials, no loader flags, and deliberately no
190
+ * proxy policy. A worker thread does not inherit the host's global dispatcher, so a workflow's own
191
+ * requests go direct — the alternative is handing the worker a proxy URL that may carry
192
+ * `user:password`, and this worker executes the model-authored script body. That is the same
193
+ * containment the code runtime keeps, and `docs/defensive-patterns.md` requires it.
190
194
  * Windows derives `os.tmpdir()` from `TMP`/`TEMP` and falls back to the
191
195
  * literal relative path `undefined\temp` when the environment is empty, so
192
196
  * tsx's transform cache would land in a cwd-relative `undefined/temp`
package/lib/types/host.d.ts CHANGED
@@ -12,7 +12,11 @@ import type { WorkflowMeta, WorkflowResult, WorkflowRun, WorkflowRunId } from '@
12
12
  import type { ExecutionObserver } from './runtime.ts';
13
13
  import type { WorkerInit } from './types.ts';
14
14
  /**
15
- * The scrubbed worker environment: no ambient credentials, no loader flags.
15
+ * The scrubbed worker environment: no ambient credentials, no loader flags, and deliberately no
16
+ * proxy policy. A worker thread does not inherit the host's global dispatcher, so a workflow's own
17
+ * requests go direct — the alternative is handing the worker a proxy URL that may carry
18
+ * `user:password`, and this worker executes the model-authored script body. That is the same
19
+ * containment the code runtime keeps, and `docs/defensive-patterns.md` requires it.
16
20
  * Windows derives `os.tmpdir()` from `TMP`/`TEMP` and falls back to the
17
21
  * literal relative path `undefined\temp` when the environment is empty, so
18
22
  * tsx's transform cache would land in a cwd-relative `undefined/temp`
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@deepseek-ai/dsh-workflow-worker-thread",
3
3
  "description": "worker-thread workflow engine: executes model-written orchestration scripts off the host event loop, bridging agent() calls back to ctx.subagents",
4
- "version": "0.1.2-alpha.5",
4
+ "version": "0.1.3-alpha.2",
5
5
  "publishConfig": {
6
6
  "access": "public"
7
7
  },
@@ -33,32 +33,33 @@
33
33
  "license": "MIT",
34
34
  "peerDependencies": {
35
35
  "@deepseek-ai/cordis": "^4.0.2",
36
- "@deepseek-ai/dsh-subagent": "^0.1.2-alpha.5",
37
- "@deepseek-ai/dsh-session": "^0.1.2-alpha.5",
38
- "@deepseek-ai/dsh-tools": "^0.1.2-alpha.5",
39
- "@deepseek-ai/dsh-workflow": "^0.1.2-alpha.5",
40
- "@deepseek-ai/dsh-agent": "^0.1.2-alpha.5",
41
- "@deepseek-ai/dsh-llm": "^0.1.2-alpha.5"
36
+ "@deepseek-ai/dsh-agent": "^0.1.3-alpha.2",
37
+ "@deepseek-ai/dsh-session": "^0.1.3-alpha.2",
38
+ "@deepseek-ai/dsh-subagent": "^0.1.3-alpha.2",
39
+ "@deepseek-ai/dsh-tools": "^0.1.3-alpha.2",
40
+ "@deepseek-ai/dsh-llm": "^0.1.3-alpha.2",
41
+ "@deepseek-ai/dsh-workflow": "^0.1.3-alpha.2"
42
42
  },
43
43
  "dependencies": {
44
- "@deepseek-ai/dsh-util-values": "^0.1.2-alpha.5",
45
- "@deepseek-ai/schemastery": "^3.18.2",
46
- "@deepseek-ai/dsh-brand": "^0.1.2-alpha.5"
44
+ "@deepseek-ai/dsh-brand": "^0.1.3-alpha.2",
45
+ "@deepseek-ai/dsh-util-values": "^0.1.3-alpha.2",
46
+ "@deepseek-ai/schemastery": "^3.18.2"
47
47
  },
48
48
  "devDependencies": {
49
49
  "tsx": "^4.19.2",
50
50
  "@deepseek-ai/cordis": "^4.0.2",
51
- "@deepseek-ai/dsh-agent-loop": "^0.1.2-alpha.5",
52
- "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.2-alpha.5",
53
- "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.5",
54
- "@deepseek-ai/dsh-agent": "^0.1.2-alpha.5",
55
- "@deepseek-ai/dsh-llm": "^0.1.2-alpha.5",
56
- "@deepseek-ai/dsh-session": "^0.1.2-alpha.5",
57
- "@deepseek-ai/dsh-session-projection": "^0.1.2-alpha.5",
58
- "@deepseek-ai/dsh-subagent-spawn-in-process": "^0.1.2-alpha.5",
59
- "@deepseek-ai/dsh-system-prompt": "^0.1.2-alpha.5",
60
- "@deepseek-ai/dsh-tools": "^0.1.2-alpha.5",
61
- "@deepseek-ai/dsh-workflow": "^0.1.2-alpha.5",
62
- "@deepseek-ai/dsh-subagent": "^0.1.2-alpha.5"
51
+ "@deepseek-ai/dsh-agent": "^0.1.3-alpha.2",
52
+ "@deepseek-ai/dsh-agent-loop": "^0.1.3-alpha.2",
53
+ "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.3-alpha.2",
54
+ "@deepseek-ai/dsh-invariants": "^0.1.3-alpha.2",
55
+ "@deepseek-ai/dsh-llm": "^0.1.3-alpha.2",
56
+ "@deepseek-ai/dsh-session": "^0.1.3-alpha.2",
57
+ "@deepseek-ai/dsh-session-projection": "^0.1.3-alpha.2",
58
+ "@deepseek-ai/dsh-subagent": "^0.1.3-alpha.2",
59
+ "@deepseek-ai/dsh-system-prompt": "^0.1.3-alpha.2",
60
+ "@deepseek-ai/dsh-workflow": "^0.1.3-alpha.2",
61
+ "@deepseek-ai/dsh-tools": "^0.1.3-alpha.2",
62
+ "@deepseek-ai/dsh-subagent-spawn-in-process": "^0.1.3-alpha.2",
63
+ "@deepseek-ai/dsh-http-proxy": "^0.1.3-alpha.2"
63
64
  }
64
65
  }