@deepseek-ai/dsh-workflow-worker-thread 0.1.2-rc.1 → 0.1.5-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/README.i18n.yaml +2 -2
  2. package/README.md +1 -1
  3. package/README.zh.md +1 -1
  4. package/lib/index.js +5 -1
  5. package/lib/types/host.d.ts +5 -1
  6. package/package.json +23 -22
package/README.i18n.yaml CHANGED
@@ -2,5 +2,5 @@
2
2
  # side as of the last confirmed-consistent state. Both languages carry equal authority;
3
3
  # after editing either side, bring the other along and re-record with:
4
4
  # pnpm run verify-translation-pairing --write packages/workflow/workflow-worker-thread/README.md
5
- README.md: 826a04bd9fe67ac722c63ae81affc0a7c90396d0
6
- README.zh.md: 56d7dda4cd26d9997d934e783a376c196ef689f0
5
+ README.md: c0581a40e9ecf1e8614d35a9f7c07d28cefb484b
6
+ README.zh.md: 8516972e1f5334a2fa6d4ba7f4009d2b7e9e2573
package/README.md CHANGED
@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
9
9
 
10
10
  ## Summary
11
11
 
12
- `dsh-workflow-worker-thread` implements the workflow engine with one Node worker thread per run: the orchestration script executes inside a fresh worker while its `agent()` calls reach host subagents over a typed host/worker protocol. A synchronous script loop cannot block the harness event loop, and a script that ignores cancellation can be terminated with its worker. The isolation is containment, not a security boundary — a model-written script has the same trust premise as the model's existing bash access, and escaping the `node:vm` context recovers the worker's process authority. Mount this engine to give `ctx.workflowEngine` a concrete implementation; a composition that loads it with `dsh-tool-workflow` gives the model the `workflow` tool.
12
+ Use `dsh-workflow-worker-thread` to run model-written workflow scripts away from the host event loop. Each run receives its own worker thread, so synchronous loops do not stall the harness and scripts that ignore cancellation can be terminated. The engine supports the `workflow` and `ralph` tools in shipped compositions and can be paired with `dsh-tool-workflow` to expose `workflow` in another composition. This isolation limits availability failures but is not a security boundary; genuinely untrusted scripts require a separate process or container.
13
13
 
14
14
  ## Table of Contents
15
15
 
package/README.zh.md CHANGED
@@ -9,7 +9,7 @@ kind: "package-reference"
9
9
 
10
10
  ## 概述
11
11
 
12
- `dsh-workflow-worker-thread` 以每次运行一个 Node worker thread 的方式实现工作流引擎：编排脚本在一个全新 worker 内执行，其 `agent()` 调用通过带类型的宿主／worker 协议触达宿主 subagent。同步脚本循环不会阻塞 harness 事件循环，忽略取消的脚本可以连同其 worker 一起终止。这种隔离只是 containment（隔离），不是安全边界——由模型编写的脚本与模型已有的 bash 访问具有相同的信任前提，逃逸 `node:vm` 上下文即可重新取得 worker 的进程权限。挂载本引擎即为 `ctx.workflowEngine` 提供具体实现；与 `dsh-tool-workflow` 一起加载的组合会把 `workflow` 工具交给模型。
12
+ 使用 `dsh-workflow-worker-thread` 可让模型编写的工作流脚本在宿主事件循环之外运行。每次运行使用独立的 worker thread，因此同步循环不会阻塞 harness，忽略取消的脚本也可以被终止。本引擎支持已发布组合中的 `workflow` 与 `ralph` 工具，也可与 `dsh-tool-workflow` 配合，在其他组合中公开 `workflow`。这种隔离可以限制可用性故障，但不是安全边界；真正不可信的脚本需要独立进程或容器。
13
13
 
14
14
  ## 目录
15
15
 
package/lib/index.js CHANGED
@@ -186,7 +186,11 @@ var HostToWorkerType;
186
186
  * @module @deepseek-ai/dsh-workflow-worker-thread/host
187
187
  */
188
188
  /**
189
- * The scrubbed worker environment: no ambient credentials, no loader flags.
189
+ * The scrubbed worker environment: no ambient credentials, no loader flags, and deliberately no
190
+ * proxy policy. A worker thread does not inherit the host's global dispatcher, so a workflow's own
191
+ * requests go direct — the alternative is handing the worker a proxy URL that may carry
192
+ * `user:password`, and this worker executes the model-authored script body. That is the same
193
+ * containment the code runtime keeps, and `docs/defensive-patterns.md` requires it.
190
194
  * Windows derives `os.tmpdir()` from `TMP`/`TEMP` and falls back to the
191
195
  * literal relative path `undefined\temp` when the environment is empty, so
192
196
  * tsx's transform cache would land in a cwd-relative `undefined/temp`
package/lib/types/host.d.ts CHANGED
@@ -12,7 +12,11 @@ import type { WorkflowMeta, WorkflowResult, WorkflowRun, WorkflowRunId } from '@
12
12
  import type { ExecutionObserver } from './runtime.ts';
13
13
  import type { WorkerInit } from './types.ts';
14
14
  /**
15
- * The scrubbed worker environment: no ambient credentials, no loader flags.
15
+ * The scrubbed worker environment: no ambient credentials, no loader flags, and deliberately no
16
+ * proxy policy. A worker thread does not inherit the host's global dispatcher, so a workflow's own
17
+ * requests go direct — the alternative is handing the worker a proxy URL that may carry
18
+ * `user:password`, and this worker executes the model-authored script body. That is the same
19
+ * containment the code runtime keeps, and `docs/defensive-patterns.md` requires it.
16
20
  * Windows derives `os.tmpdir()` from `TMP`/`TEMP` and falls back to the
17
21
  * literal relative path `undefined\temp` when the environment is empty, so
18
22
  * tsx's transform cache would land in a cwd-relative `undefined/temp`
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@deepseek-ai/dsh-workflow-worker-thread",
3
3
  "description": "worker-thread workflow engine: executes model-written orchestration scripts off the host event loop, bridging agent() calls back to ctx.subagents",
4
- "version": "0.1.2-rc.1",
4
+ "version": "0.1.5-alpha.1",
5
5
  "publishConfig": {
6
6
  "access": "public"
7
7
  },
@@ -32,33 +32,34 @@
32
32
  ],
33
33
  "license": "MIT",
34
34
  "peerDependencies": {
35
- "@deepseek-ai/dsh-agent": "^0.1.2-rc.1",
35
+ "@deepseek-ai/dsh-agent": "^0.1.5-alpha.1",
36
36
  "@deepseek-ai/cordis": "^4.0.2",
37
- "@deepseek-ai/dsh-llm": "^0.1.2-rc.1",
38
- "@deepseek-ai/dsh-session": "^0.1.2-rc.1",
39
- "@deepseek-ai/dsh-tools": "^0.1.2-rc.1",
40
- "@deepseek-ai/dsh-subagent": "^0.1.2-rc.1",
41
- "@deepseek-ai/dsh-workflow": "^0.1.2-rc.1"
37
+ "@deepseek-ai/dsh-llm": "^0.1.5-alpha.1",
38
+ "@deepseek-ai/dsh-session": "^0.1.5-alpha.1",
39
+ "@deepseek-ai/dsh-subagent": "^0.1.5-alpha.1",
40
+ "@deepseek-ai/dsh-tools": "^0.1.5-alpha.1",
41
+ "@deepseek-ai/dsh-workflow": "^0.1.5-alpha.1"
42
42
  },
43
43
  "dependencies": {
44
- "@deepseek-ai/dsh-brand": "^0.1.2-rc.1",
45
- "@deepseek-ai/dsh-util-values": "^0.1.2-rc.1",
46
- "@deepseek-ai/schemastery": "^3.18.2"
44
+ "@deepseek-ai/dsh-util-values": "^0.1.5-alpha.1",
45
+ "@deepseek-ai/schemastery": "^3.18.2",
46
+ "@deepseek-ai/dsh-brand": "^0.1.5-alpha.1"
47
47
  },
48
48
  "devDependencies": {
49
49
  "tsx": "^4.19.2",
50
+ "@deepseek-ai/dsh-agent": "^0.1.5-alpha.1",
51
+ "@deepseek-ai/dsh-agent-loop": "^0.1.5-alpha.1",
50
52
  "@deepseek-ai/cordis": "^4.0.2",
51
- "@deepseek-ai/dsh-agent": "^0.1.2-rc.1",
52
- "@deepseek-ai/dsh-agent-loop": "^0.1.2-rc.1",
53
- "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.2-rc.1",
54
- "@deepseek-ai/dsh-invariants": "^0.1.2-rc.1",
55
- "@deepseek-ai/dsh-llm": "^0.1.2-rc.1",
56
- "@deepseek-ai/dsh-session": "^0.1.2-rc.1",
57
- "@deepseek-ai/dsh-session-projection": "^0.1.2-rc.1",
58
- "@deepseek-ai/dsh-subagent": "^0.1.2-rc.1",
59
- "@deepseek-ai/dsh-subagent-spawn-in-process": "^0.1.2-rc.1",
60
- "@deepseek-ai/dsh-system-prompt": "^0.1.2-rc.1",
61
- "@deepseek-ai/dsh-tools": "^0.1.2-rc.1",
62
- "@deepseek-ai/dsh-workflow": "^0.1.2-rc.1"
53
+ "@deepseek-ai/dsh-invariants": "^0.1.5-alpha.1",
54
+ "@deepseek-ai/dsh-llm": "^0.1.5-alpha.1",
55
+ "@deepseek-ai/dsh-session": "^0.1.5-alpha.1",
56
+ "@deepseek-ai/dsh-session-projection": "^0.1.5-alpha.1",
57
+ "@deepseek-ai/dsh-subagent": "^0.1.5-alpha.1",
58
+ "@deepseek-ai/dsh-subagent-spawn-in-process": "^0.1.5-alpha.1",
59
+ "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.5-alpha.1",
60
+ "@deepseek-ai/dsh-tools": "^0.1.5-alpha.1",
61
+ "@deepseek-ai/dsh-workflow": "^0.1.5-alpha.1",
62
+ "@deepseek-ai/dsh-http-proxy": "^0.1.5-alpha.1",
63
+ "@deepseek-ai/dsh-system-prompt": "^0.1.5-alpha.1"
63
64
  }
64
65
  }