@deepseek-insight/dsi 0.6.17 → 0.6.18

package/build/client/_app/version.json

@@ -1 +1 @@
-{"version":"1792011469761"}
+{"version":"1792184999340"}

package/build/handler.js

@@ -2,9 +2,9 @@ import './shims.js';
 import 'node:fs';
 import 'node:path';
 import 'node:process';
-export { h as handler } from './server/chunks/handler-Bx0HQRi_.js';
-import './server/chunks/index.js-DlqGbs2e.js';
-import './server/chunks/manifest.js-C5Epl_0n.js';
+export { h as handler } from './server/chunks/handler-D0h_ogA5.js';
+import './server/chunks/index.js-C43GYBhl.js';
+import './server/chunks/manifest.js-DN0QODc_.js';
 import './env.js';
 import 'node:buffer';
 import 'node:crypto';
@@ -19,6 +19,6 @@ import 'node:url';
 import './server/chunks/chunks/index-server.js-CV2lq-ha.js';
 import './server/chunks/chunks/server.js-DqHGsQU2.js';
 import './server/chunks/chunks/internal.js-BcS47nI-.js';
-import './server/chunks/chunks/internal2.js-Uh9eeZMM.js';
+import './server/chunks/chunks/internal2.js-C4ukUWRE.js';
 import './server/chunks/chunks/exports.js-DH_tjtdv.js';
 //# sourceMappingURL=handler.js.map

package/build/index.js

@@ -1,7 +1,7 @@
 import http from 'node:http';
 import fs__default from 'node:fs';
 import process from 'node:process';
-import { p as polka, h as handler, f as format_listening_address } from './server/chunks/handler-Bx0HQRi_.js';
+import { p as polka, h as handler, f as format_listening_address } from './server/chunks/handler-D0h_ogA5.js';
 import { env, timeout_env } from './env.js';
 import { rm } from 'node:fs/promises';
 import './shims.js';
@@ -14,13 +14,13 @@ import 'node:stream';
 import './server/chunks/chunks/shared.js-HQ0rfhm4.js';
 import './server/chunks/chunks/uneval.js-BJ9Qq2SF.js';
 import './server/chunks/chunks/utils.js-CAdNO8Tu.js';
-import './server/chunks/index.js-DlqGbs2e.js';
+import './server/chunks/index.js-C43GYBhl.js';
 import './server/chunks/chunks/index-server.js-CV2lq-ha.js';
 import './server/chunks/chunks/server.js-DqHGsQU2.js';
 import './server/chunks/chunks/internal.js-BcS47nI-.js';
-import './server/chunks/chunks/internal2.js-Uh9eeZMM.js';
+import './server/chunks/chunks/internal2.js-C4ukUWRE.js';
 import './server/chunks/chunks/exports.js-DH_tjtdv.js';
-import './server/chunks/manifest.js-C5Epl_0n.js';
+import './server/chunks/manifest.js-DN0QODc_.js';
 import 'node:url';
 
 const path = env('SOCKET_PATH', false);

package/build/server/chunks/chunks/{dsh-connection.js-DvncrWM4.js → dsh-connection.js-DL5qjlq2.js}

@@ -118,7 +118,8 @@ var DSH_METHODS = {
 	* workspace-file/not-text. Same refusals as read.
 	*/
 	workspaceFileReadBytes: "workspaceFiles/readBytes",
-	workspaceFileList: "workspaceFiles/list"
+	workspaceFileList: "workspaceFiles/list",
+	jobKill: "job/kill"
 };
 /** Args builders — one per endpoint, pinned to the live-probed shapes. */
 var DSH_ARGS = {
@@ -161,12 +162,19 @@ var DSH_ARGS = {
 		path
 	}),
 	/** Flat args like the read — WorkspaceByteRange {offset, length}, 0-based
-	*  bytes; `{}` = the host's window defaults. */
+	*  bytes; {} = the host's window defaults. */
 	workspaceFileReadBytes: (sessionId, path, range) => ({
 		workspaceFileScopeId: sessionId,
 		path,
 		range: range ?? {}
-	})
+	}),
+	/** Jobs (Job Badge Wave 1): request-wrapped like skillsList —
+	*  job/list {request:{sessionId}}, job/kill {request:{sessionId, jobId}}. */
+	jobList: (sessionId) => ({ request: { sessionId } }),
+	jobKill: (sessionId, jobId) => ({ request: {
+		sessionId,
+		jobId
+	} })
 };
 /**
 * The ONE stream carrier (0.1.2): `/api/remote.mux` WebSocket multiplexing
@@ -796,6 +804,14 @@ var DownlinkManager = class {
 	workspaceBaselineWaiters = /* @__PURE__ */ new Set();
 	/** Subscribes parked while the carrier is CONNECTING (flushed on open). */
 	pendingSubscribes = /* @__PURE__ */ new Set();
+	/**
+	* The Roster Mirror's mux bridge (ADR 2026-10-17 D1/D2): sessions with a
+	* job/list logical stream this generation, sessions the server-side watch
+	* holds, and sessions parked while the carrier connects.
+	*/
+	jobRosterStreams = /* @__PURE__ */ new Set();
+	jobRosterWatched = /* @__PURE__ */ new Set();
+	pendingJobRoster = /* @__PURE__ */ new Set();
 	reconnectTimer;
 	/** Wave 4.2 — consecutive failed generations; drives the backoff ladder. */
 	reconnectAttempt = 0;
@@ -840,6 +856,8 @@ var DownlinkManager = class {
 		this.openEventStream(socket);
 		this.openStateStream(socket, `workspaces-${String(this.streamSeq)}`, "workspace/follow");
 		this.openStateStream(socket, `control-${String(this.streamSeq)}`, "session/control");
+		for (const sessionId of this.jobRosterWatched) this.openJobRosterStream(sessionId);
+		this.pendingJobRoster.clear();
 	}
 	/** Open one state stream (workspace/follow | session/control) with empty args. */
 	openStateStream(socket, streamId, endpoint) {
@@ -852,6 +870,47 @@ var DownlinkManager = class {
 			assistantStream: true
 		} } });
 	}
+	/**
+	* Open (or ensure) the job/list logical stream for one watched session
+	* (ADR 2026-10-17 D1/D2). Parked while the carrier connects; reopened per
+	* generation for every watched session; 'end'/'error' drops the tracking
+	* entry so the next poll touch reopens and self-heals.
+	*/
+	openJobRosterStream(sessionId) {
+		this.ensureDownlinks();
+		this.jobRosterWatched.add(sessionId);
+		const socket = this.wsMux;
+		if (socket === void 0 || this.opened === false) {
+			this.pendingJobRoster.add(sessionId);
+			return;
+		}
+		if (this.jobRosterStreams.has(sessionId)) return;
+		this.sendStreamOpen(socket, `jobs-${sessionId}-${String(this.streamSeq)}`, "job/list", { args: { request: { sessionId } } });
+		this.jobRosterStreams.add(sessionId);
+	}
+	/** The reaper's close: stop tracking and tell the carrier (best-effort;
+	*  a carrier without stream-close semantics just gets ignored items). */
+	closeJobRosterStream(sessionId) {
+		this.jobRosterWatched.delete(sessionId);
+		this.pendingJobRoster.delete(sessionId);
+		this.jobRosterStreams.delete(sessionId);
+		for (const key of [...this.streamSockets.keys()]) {
+			if (!key.startsWith(`jobs-${sessionId}-`)) continue;
+			this.streamSockets.delete(key);
+			try {
+				this.wsMux?.send?.(JSON.stringify({
+					type: "close",
+					streamId: key
+				}));
+			} catch {}
+		}
+	}
+	/** Extract the sessionId from a jobs-<sessionId>-<seq> stream id. */
+	jobRosterSessionIdOf(streamId) {
+		const rest = streamId.slice(5);
+		const cut = rest.lastIndexOf("-");
+		return cut > 0 ? rest.slice(0, cut) : null;
+	}
 	openEventStream(socket) {
 		this.sendStreamOpen(socket, `events-${String(this.streamSeq)}`, REMOTE_EVENT_STREAM_ENDPOINT, REMOTE_EVENT_STREAM_PAYLOAD);
 	}
@@ -890,6 +949,8 @@ var DownlinkManager = class {
 		this.wsMux = void 0;
 		this.opened = false;
 		this.streamSockets.clear();
+		this.jobRosterStreams.clear();
+		this.pendingJobRoster.clear();
 		this.projections.clear();
 		this.workspaces = [];
 		for (const waiter of this.workspaceBaselineWaiters) waiter.resolve();
@@ -916,9 +977,21 @@ var DownlinkManager = class {
 			else if (frame.streamId.startsWith("events-")) this.onEventItem(value);
 			else if (frame.streamId.startsWith("workspaces-")) this.onWorkspaceItem(value);
 			else if (frame.streamId.startsWith("control-")) this.onControlItem(value);
+			else if (frame.streamId.startsWith("jobs-")) {
+				const sessionId = this.jobRosterSessionIdOf(frame.streamId);
+				if (sessionId !== null) this.conn.relay.onJobRosterItem(sessionId, value);
+			}
 			return;
 		}
-		if (frame.type === "error") this.conn.log(`dsh-connection: stream ${frame.streamId} failed`, frame.error?.code, frame.error?.message);
+		if (frame.type === "error") {
+			if (frame.streamId.startsWith("jobs-")) {
+				const sessionId = this.jobRosterSessionIdOf(frame.streamId);
+				if (sessionId !== null) {
+					this.conn.relay.onJobRosterStreamError(sessionId, frame.error?.code, frame.error?.message);
+					this.jobRosterStreams.delete(sessionId);
+				}
+			} else this.conn.log(`dsh-connection: stream ${frame.streamId} failed`, frame.error?.code, frame.error?.message);
+		}
 		this.streamSockets.delete(frame.streamId);
 	}
 	/** session/follow item: snapshot seeds the baseline; events append; the
@@ -1226,6 +1299,28 @@ var RpcRelay = class {
 	settledAnswers = /* @__PURE__ */ new Map();
 	/** Catalog-invalidation registry (Slash Menu W1) — listeners see every arm. */
 	catalogInvalidated = /* @__PURE__ */ new Set();
+	/** Job roster registry (Job Badge Wave 1) — per-frame fan-out to watchers. */
+	jobRosterListeners = /* @__PURE__ */ new Set();
+	/**
+	* The Roster Mirror (ADR 2026-10-17, The Roster Mirror — D1): the newest
+	* job/list stream frame per session. Authority stays the host registry;
+	* this is the derived copy GET /api/dsh/jobs serves. Pending (no frame
+	* yet) is honest darkness, never a synthesized empty set.
+	*/
+	jobRosterCache = /* @__PURE__ */ new Map();
+	/** Poll-liveness per watched session — the HTTP-native watch (D2): the
+	*  browser's 2s poll is the heartbeat; silence past the grace reaps. */
+	jobRosterTouch = /* @__PURE__ */ new Map();
+	/** First stream failure per session logged once (D3 loudness budget). */
+	jobRosterFailureLogged = /* @__PURE__ */ new Set();
+	/** The roster reaper interval (armed on first touch, disarmed at zero). */
+	jobRosterReapTimer;
+	/** Open/close transports wired once by DshConnection (mux bridge). */
+	jobRosterTransport = null;
+	/** Grace before an unpolled session's stream closes (tests shrink it). */
+	jobRosterGraceMs = 1e4;
+	/** Sessions whose stream is believed open — one open per watch period. */
+	jobRosterOpened = /* @__PURE__ */ new Set();
 	/**
 	* Parent-address hints for subagent-origin sessions (SubagentAddressHint),
 	* folded from session.list rows by rawListSessions.
@@ -1760,6 +1855,107 @@ var RpcRelay = class {
 		return await this.conn.rpc(DSH_METHODS.cancel, DSH_ARGS.cancel({ sessionId }));
 	}
 	/**
+	* Subscribe to per-session job roster pushes (mux frame fan-out). Returns
+	* the unsubscribe — the roster store's unwatch MUST call it, or the
+	* listener outlives its row (ADR give-up: streams are refcounted).
+	*/
+	onJobRoster(listener) {
+		this.jobRosterListeners.add(listener);
+		return () => this.jobRosterListeners.delete(listener);
+	}
+	/**
+	* Deliver one whole-set roster frame to listeners. Called by the mux push
+	* path (dsh-connection frame switch); a frame REPLACES the session's set —
+	* consumers overwrite, never merge (host JobListFrame contract).
+	*/
+	dispatchJobRoster(sessionId, jobs) {
+		for (const listener of this.jobRosterListeners) listener(sessionId, jobs);
+	}
+	/** Wire the open/close transports (called once by DshConnection). */
+	wireJobRosterTransport(transport) {
+		this.jobRosterTransport = transport;
+	}
+	/**
+	* One browser poll tick — the HTTP-native watch (D2): touch liveness and
+	* make sure the session's job/list stream is open. The browser store's
+	* refcounted watch lifecycle expresses itself here as a 2s heartbeat;
+	* silence past the grace window is the unwatch.
+	*/
+	touchJobRoster(sessionId) {
+		this.jobRosterTouch.set(sessionId, Date.now());
+		if (!this.jobRosterOpened.has(sessionId)) {
+			this.jobRosterOpened.add(sessionId);
+			this.jobRosterTransport?.open(sessionId);
+		}
+		this.armJobRosterReaper();
+	}
+	/** Arm the reaper lazily; it disarms itself when no session is watched. */
+	armJobRosterReaper() {
+		if (this.jobRosterReapTimer !== void 0) return;
+		this.jobRosterReapTimer = setInterval(() => this.reapJobRosters(), Math.max(1e3, Math.floor(this.jobRosterGraceMs / 2)));
+		this.jobRosterReapTimer.unref?.();
+	}
+	/** Close streams (and drop their caches) for sessions not polled within the grace. */
+	reapJobRosters(now = Date.now()) {
+		for (const [sessionId, last] of this.jobRosterTouch) {
+			if (now - last <= this.jobRosterGraceMs) continue;
+			this.jobRosterTouch.delete(sessionId);
+			this.jobRosterCache.delete(sessionId);
+			this.jobRosterFailureLogged.delete(sessionId);
+			this.jobRosterOpened.delete(sessionId);
+			this.jobRosterTransport?.close(sessionId);
+		}
+		if (this.jobRosterTouch.size === 0 && this.jobRosterReapTimer !== void 0) {
+			clearInterval(this.jobRosterReapTimer);
+			this.jobRosterReapTimer = void 0;
+		}
+	}
+	/**
+	* One job/list stream item — a whole-set frame (the host frames on open,
+	* then per coalesced commit burst; typert.host.js contract). Replaces the
+	* session's mirror and fans out to the roster listeners.
+	*/
+	onJobRosterItem(sessionId, value) {
+		if (sessionId === "") return;
+		const raw = value;
+		const jobs = Array.isArray(raw) ? raw : Array.isArray(raw?.jobs) ? raw.jobs : null;
+		if (jobs === null) return;
+		this.jobRosterCache.set(sessionId, { jobs });
+		this.dispatchJobRoster(sessionId, jobs);
+	}
+	/** Stream-level failure — logged once per session per watch (D3). */
+	onJobRosterStreamError(sessionId, code, message) {
+		this.jobRosterOpened.delete(sessionId);
+		if (sessionId === "" || this.jobRosterFailureLogged.has(sessionId)) return;
+		this.jobRosterFailureLogged.add(sessionId);
+		this.conn.log("dsh-connection: job/list stream failed", sessionId, code, message);
+	}
+	/**
+	* The mirror's answer for one session: the cached frame, or an honest
+	* pending (D3) — unknown is not empty. Replaces the retired unary
+	* job/list call (RCA 2026-10-17: the host refuses unary on a stream-only
+	* method).
+	*/
+	jobRosterSnapshot(sessionId) {
+		const cached = this.jobRosterCache.get(sessionId);
+		return cached ? {
+			jobs: cached.jobs,
+			pending: false
+		} : {
+			jobs: [],
+			pending: true
+		};
+	}
+	/**
+	* job.kill passthrough — the human's ONLY direct job verb (ADR fact 6:
+	* starting is always the owner Agent's tool call). The fence stays
+	* server-side: DSI sends the caller's sessionId verbatim and surfaces a
+	* refusal (belongs to another session) instead of masking it.
+	*/
+	async jobKill(sessionId, jobId) {
+		return await this.conn.rpc(DSH_METHODS.jobKill, DSH_ARGS.jobKill(sessionId, jobId));
+	}
+	/**
 	* POC-3 W3 (3.1) — session.rename {sessionId, title}.
 	*
 	* Appends a session/title event with the `user` source — pins the title
@@ -1996,6 +2192,10 @@ var DshConnection = class {
 			answerReapGraceMs,
 			staleGenerationRetryMs
 		});
+		this.relay.wireJobRosterTransport({
+			open: (sessionId) => this.downlinks.openJobRosterStream(sessionId),
+			close: (sessionId) => this.downlinks.closeJobRosterStream(sessionId)
+		});
 	}
 	/** Open the stream generation (idempotent) — see DownlinkManager. */
 	ensureDownlinks() {
@@ -2039,7 +2239,12 @@ var DshConnection = class {
 			case "question/resolved":
 				this.relay.registerSettlement(frame);
 				return;
-			default: this.log("dsh-connection: mux frame ignored", frame?.type);
+			default:
+				if (typeof frame?.type === "string" && frame.type.startsWith("job/") && Array.isArray(frame.jobs)) {
+					this.relay.dispatchJobRoster(String(frame.sessionId ?? ""), frame.jobs);
+					return;
+				}
+				this.log("dsh-connection: mux frame ignored", frame?.type);
 		}
 	}
 	/** The session's live tail for the events poll, or null when no attempt
@@ -2246,4 +2451,4 @@ var DshConnection = class {
 };
 
 export { DshRpcError as D, isPromptImageMediaType as a, buildPromptContent as b, getDshConnection as g, isSubagentRejection as i, mapRpcFailure as m, statusFor as s };
-//# sourceMappingURL=dsh-connection.js-DvncrWM4.js.map
+//# sourceMappingURL=dsh-connection.js-DL5qjlq2.js.map

package/build/server/chunks/chunks/{dsh-events.js-B_E1BU9F.js → dsh-events.js-35seDLwL.js}

@@ -221,6 +221,8 @@ var SILENT_TYPES = /* @__PURE__ */ new Set([
 	"goal/change",
 	"hook/invoked",
 	"hook/result",
+	"job/registered",
+	"job/settled",
 	"llm/retry",
 	"llm/retry-started",
 	"assistant/attempt",
@@ -535,4 +537,4 @@ function historyToEvents(history) {
 }
 
 export { entryForEvent as a, eventsToEntries as e, historyToEvents as h };
-//# sourceMappingURL=dsh-events.js-B_E1BU9F.js.map
+//# sourceMappingURL=dsh-events.js-35seDLwL.js.map

package/build/server/chunks/chunks/{engine.js-1gYqtdBP.js → engine.js-EfjwaLzA.js}

@@ -29,7 +29,7 @@ var execFileP = promisify(execFile);
 *  with RACK_GARDEN_PATH / RACK_GARDEN_REPO when the checkout lives elsewhere. */
 function gardenArgs() {
 	const gardenPath = process.env.RACK_GARDEN_PATH ?? join(process.cwd(), "plugins");
-	const gardenRepo = process.env.RACK_GARDEN_REPO ?? "https://github.com/mitmplay/deepseek-insight";
+	const gardenRepo = process.env.RACK_GARDEN_REPO ?? "https://github.com/mitmplay/dsh-insight";
 	return existsSync(gardenPath) ? [
 		"--garden",
 		gardenPath,
@@ -109,4 +109,4 @@ function getRackEngine() {
 }
 
 export { RackEngineMissingError as R, RackEngineFailedError as a, getRackEngine as g };
-//# sourceMappingURL=engine.js-1gYqtdBP.js.map
+//# sourceMappingURL=engine.js-EfjwaLzA.js.map

package/build/server/chunks/chunks/{git-probe.js-S9w9gGXE.js → git-probe.js-D4DjBXSY.js}

@@ -1,5 +1,5 @@
-import { g as getDshConnection } from './dsh-connection.js-DvncrWM4.js';
-import { h as historyToEvents } from './dsh-events.js-B_E1BU9F.js';
+import { g as getDshConnection } from './dsh-connection.js-DL5qjlq2.js';
+import { h as historyToEvents } from './dsh-events.js-35seDLwL.js';
 import { a as foldKnobs, f as filterKnobEvents, F as FULL_ACCESS_PRESET } from './permission-state.js-B7UpAHBv.js';
 import { promises } from 'node:fs';
 import * as nodePath from 'node:path';
@@ -216,4 +216,4 @@ async function gitStatus(repo) {
 }
 
 export { GitUnavailableError as G, gitStatus as a, gitFileHead as b, detectRepos as d, gitGateEnabled as g, isInsideRoot as i, parsePorcelainStatus as p, resolveEnclosingRepo as r };
-//# sourceMappingURL=git-probe.js-S9w9gGXE.js.map
+//# sourceMappingURL=git-probe.js-D4DjBXSY.js.map

package/build/server/chunks/chunks/{internal2.js-Uh9eeZMM.js → internal2.js-C4ukUWRE.js}

@@ -580,7 +580,7 @@ var options = {
 		app: ({ head, body, assets, nonce, env }) => "<!doctype html>\n<html lang=\"%paraglide.locale%\">\n	<head>\n		<meta charset=\"utf-8\" />\n		<link rel=\"icon\" href=\"" + assets + "/favicon.svg\" />\n		<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n		<script>\n			/* The Three-State Lamp pre-paint (ADR-0023 D3, 2026-10-11): resolve\n			 * the choice and set html[data-theme] BEFORE the bundle paints —\n			 * no flash of light on a dark reload. The key 'dsi-theme' is\n			 * pinned identical to src/lib/utils/theme-prefs.svelte.ts by\n			 * tests/unit/theme-prefs.test.ts; change both together. */\n			try {\n				var m = location.search.match(/[?&]profile=([^&]*)/);\n				var prof = m ? m[1].replace(/[^A-Za-z0-9_-]/g, '').slice(0, 40) : '';\n				var k = 'dsi-theme' + (prof ? '_' + prof : '');\n				var t = localStorage.getItem(k);\n				if (t !== 'light' && t !== 'dark' && t !== 'system') t = 'system';\n				document.documentElement.dataset.theme =\n					t === 'dark' || (t === 'system' && window.matchMedia && matchMedia('(prefers-color-scheme: dark)').matches)\n						? 'dark'\n						: 'light';\n			} catch (e) {\n				document.documentElement.dataset.theme = 'light';\n			}\n		<\/script>\n		" + head + "\n	</head>\n	<body data-sveltekit-preload-data=\"tap\">\n		<div style=\"display: contents\">" + body + "</div>\n	</body>\n</html>\n",
 		error: error_template_default
 	},
-	version_hash: "16ucppv"
+	version_hash: "1g1y6t7"
 };
 async function get_hooks() {
 	let handle;
@@ -603,4 +603,4 @@ async function get_hooks() {
 }
 
 export { set_public_env as a, set_read_implementation as b, get_hooks as g, options as o, public_env as p, read_implementation as r, set_private_env as s };
-//# sourceMappingURL=internal2.js-Uh9eeZMM.js.map
+//# sourceMappingURL=internal2.js-C4ukUWRE.js.map

package/build/server/chunks/chunks/{state.js-5SpXEMQf.js → state.js-OSxIx7MQ.js}

@@ -1,6 +1,6 @@
 import { i as index_server_exports } from './index-server.js-CV2lq-ha.js';
 import './shared.js-HQ0rfhm4.js';
-import './internal2.js-Uh9eeZMM.js';
+import './internal2.js-C4ukUWRE.js';
 import './exports.js-DH_tjtdv.js';
 import { U as snapshot, g as getContext, n as noop } from './server.js-DqHGsQU2.js';
 import { U as UI_LOCALES } from './config.js-B0w1-uCA.js';
@@ -304,4 +304,4 @@ var page = {
 };
 
 export { afterNavigate as a, backtoworkspace2 as b, currentLocale as c, dshunreachable1 as d, replaceState as e, page as p, reapednote1 as r, sessionnotfound2 as s, t, unexpectederror1 as u };
-//# sourceMappingURL=state.js-5SpXEMQf.js.map
+//# sourceMappingURL=state.js-OSxIx7MQ.js.map

package/build/server/chunks/chunks/{watcher.js-BfZOp5td.js → watcher.js-CACduBB9.js}

@@ -1,7 +1,7 @@
 import { c as readA2aConfig } from './insight-config.js-CA-iT3lB.js';
 import { i as insertWaiting, o as openA2aDb, s as settleRow, p as pruneTerminalBefore, l as listWaiting } from './db.js-DRhjT6xK.js';
-import { g as getDshConnection } from './dsh-connection.js-DvncrWM4.js';
-import { a as entryForEvent, h as historyToEvents } from './dsh-events.js-B_E1BU9F.js';
+import { g as getDshConnection } from './dsh-connection.js-DL5qjlq2.js';
+import { a as entryForEvent, h as historyToEvents } from './dsh-events.js-35seDLwL.js';
 
 //#region src/lib/server/a2a/matcher.ts
 /**
@@ -470,4 +470,4 @@ function registerWatch(row) {
 }
 
 export { configureWatcher as c, ensureStarted as e, registerWatch as r };
-//# sourceMappingURL=watcher.js-BfZOp5td.js.map
+//# sourceMappingURL=watcher.js-CACduBB9.js.map

package/build/server/chunks/entries/endpoints/api/a2a/{_server.ts.js-D9vpMh8K.js → _server.ts.js-DHFHuGSm.js}

@@ -1,5 +1,5 @@
 import { a as listRecent } from '../../../../chunks/db.js-DRhjT6xK.js';
-import { e as ensureStarted } from '../../../../chunks/watcher.js-BfZOp5td.js';
+import { e as ensureStarted } from '../../../../chunks/watcher.js-CACduBB9.js';
 import { j as json } from '../../../../chunks/utils.js-CAdNO8Tu.js';
 import '../../../../chunks/insight-config.js-CA-iT3lB.js';
 import '../../../../chunks/config.js-B0w1-uCA.js';
@@ -10,8 +10,8 @@ import 'node:os';
 import 'yaml';
 import '../../../../chunks/settings-home2.js-f75-B6RI.js';
 import 'node:sqlite';
-import '../../../../chunks/dsh-connection.js-DvncrWM4.js';
-import '../../../../chunks/dsh-events.js-B_E1BU9F.js';
+import '../../../../chunks/dsh-connection.js-DL5qjlq2.js';
+import '../../../../chunks/dsh-events.js-35seDLwL.js';
 import '../../../../chunks/merge.js-yMwW440S.js';
 import '../../../../chunks/shared.js-HQ0rfhm4.js';
 import '../../../../chunks/uneval.js-BJ9Qq2SF.js';
@@ -61,4 +61,4 @@ var GET = ({ url }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts.js-D9vpMh8K.js.map
+//# sourceMappingURL=_server.ts.js-DHFHuGSm.js.map

package/build/server/chunks/entries/endpoints/api/a2a/register/{_server.ts.js-HPJEmfbv.js → _server.ts.js-CUUfDBcc.js}

@@ -1,6 +1,6 @@
 import { c as readA2aConfig } from '../../../../../chunks/insight-config.js-CA-iT3lB.js';
-import { g as getDshConnection } from '../../../../../chunks/dsh-connection.js-DvncrWM4.js';
-import { c as configureWatcher, r as registerWatch } from '../../../../../chunks/watcher.js-BfZOp5td.js';
+import { g as getDshConnection } from '../../../../../chunks/dsh-connection.js-DL5qjlq2.js';
+import { c as configureWatcher, r as registerWatch } from '../../../../../chunks/watcher.js-CACduBB9.js';
 import { m as mintA2aId } from '../../../../../chunks/a2a-protocol.js-C77mVg2Q.js';
 import { j as json } from '../../../../../chunks/utils.js-CAdNO8Tu.js';
 import '../../../../../chunks/config.js-B0w1-uCA.js';
@@ -12,7 +12,7 @@ import 'yaml';
 import '../../../../../chunks/settings-home2.js-f75-B6RI.js';
 import '../../../../../chunks/db.js-DRhjT6xK.js';
 import 'node:sqlite';
-import '../../../../../chunks/dsh-events.js-B_E1BU9F.js';
+import '../../../../../chunks/dsh-events.js-35seDLwL.js';
 import '../../../../../chunks/merge.js-yMwW440S.js';
 import '../../../../../chunks/shared.js-HQ0rfhm4.js';
 import '../../../../../chunks/uneval.js-BJ9Qq2SF.js';
@@ -99,4 +99,4 @@ var POST = async ({ request }) => {
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts.js-HPJEmfbv.js.map
+//# sourceMappingURL=_server.ts.js-CUUfDBcc.js.map

package/build/server/chunks/entries/endpoints/api/dsh/directory/{_server.ts.js-BaAmRXrU.js → _server.ts.js-Cae4x1c7.js}

@@ -1,4 +1,4 @@
-import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../chunks/dsh-connection.js-DvncrWM4.js';
+import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../chunks/dsh-connection.js-DL5qjlq2.js';
 import { j as json } from '../../../../../chunks/utils.js-CAdNO8Tu.js';
 import '../../../../../chunks/config.js-B0w1-uCA.js';
 import '../../../../../chunks/insight-config.js-CA-iT3lB.js';
@@ -42,4 +42,4 @@ var GET = async ({ url }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts.js-BaAmRXrU.js.map
+//# sourceMappingURL=_server.ts.js-Cae4x1c7.js.map

package/build/server/chunks/entries/endpoints/api/dsh/jobs/_server.ts.js-hGmoSsDv.js

@@ -0,0 +1,93 @@
+import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../chunks/dsh-connection.js-DL5qjlq2.js';
+import { j as json } from '../../../../../chunks/utils.js-CAdNO8Tu.js';
+import '../../../../../chunks/config.js-B0w1-uCA.js';
+import '../../../../../chunks/insight-config.js-CA-iT3lB.js';
+import '../../../../../chunks/settings-document.js-BRTO59Al.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import '../../../../../chunks/settings-home2.js-f75-B6RI.js';
+import '../../../../../chunks/shared.js-HQ0rfhm4.js';
+import '../../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/dsh/jobs/+server.ts
+/**
+* api-dsh — GET /api/dsh/jobs?sessionId=… · POST /api/dsh/jobs
+*
+* Jobs (ADR-0026 D2/D3, Job Badge Wave 1): the browser's only view of the
+* host's per-session job roster (BC-1/BC-6 — the browser never reaches the
+* DSH Host directly).
+*
+* GET: one job.list snapshot for sessionId — the whole visible set (the
+* session's own jobs plus every unowned job). Live updates ride the mux push
+* path (relay.dispatchJobRoster) or a client refetch; the ledger is NOT
+* authority for live state (ADR fact 10).
+*
+* POST: job.kill passthrough — body {sessionId, jobId} → {outcome}.
+* The session fence stays server-side; a refusal surfaces verbatim.
+*/
+var GET = async ({ url }) => {
+	const sessionId = url.searchParams.get("sessionId");
+	if (!sessionId) return json({
+		ok: false,
+		error: {
+			code: "bad-session",
+			message: "sessionId query parameter is required"
+		}
+	}, { status: 400 });
+	try {
+		const relay = getDshConnection().relay;
+		relay.touchJobRoster(sessionId);
+		const frame = relay.jobRosterSnapshot(sessionId);
+		return json({
+			ok: true,
+			sessionId,
+			jobs: frame.jobs,
+			...frame.pending ? { pending: true } : {}
+		});
+	} catch (err) {
+		return json(mapRpcFailure(err), { status: statusFor(err) });
+	}
+};
+var POST = async ({ request }) => {
+	let body;
+	try {
+		body = await request.json();
+	} catch {
+		return json({
+			ok: false,
+			error: {
+				code: "bad-json",
+				message: "request body is not valid JSON"
+			}
+		}, { status: 400 });
+	}
+	const { sessionId, jobId } = body ?? {};
+	if (typeof sessionId !== "string" || sessionId.length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-session",
+			message: "sessionId is required"
+		}
+	}, { status: 400 });
+	if (typeof jobId !== "string" || jobId.length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-job",
+			message: "jobId is required"
+		}
+	}, { status: 400 });
+	try {
+		const result = await getDshConnection().relay.jobKill(sessionId, jobId);
+		return json({
+			ok: true,
+			outcome: result.outcome
+		});
+	} catch (err) {
+		return json(mapRpcFailure(err), { status: statusFor(err) });
+	}
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-hGmoSsDv.js.map

package/build/server/chunks/entries/endpoints/api/dsh/pick-directory/{_server.ts.js-D-Ftq5ei.js → _server.ts.js-BLb8o1cY.js}

@@ -1,4 +1,4 @@
-import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../chunks/dsh-connection.js-DvncrWM4.js';
+import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../chunks/dsh-connection.js-DL5qjlq2.js';
 import { j as json } from '../../../../../chunks/utils.js-CAdNO8Tu.js';
 import '../../../../../chunks/config.js-B0w1-uCA.js';
 import '../../../../../chunks/insight-config.js-CA-iT3lB.js';
@@ -35,4 +35,4 @@ var POST = async ({ request }) => {
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts.js-D-Ftq5ei.js.map
+//# sourceMappingURL=_server.ts.js-BLb8o1cY.js.map

package/build/server/chunks/entries/endpoints/api/dsh/presets/{_server.ts.js-C0_j53OW.js → _server.ts.js-BFeDKrPz.js}

@@ -1,4 +1,4 @@
-import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../chunks/dsh-connection.js-DvncrWM4.js';
+import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../chunks/dsh-connection.js-DL5qjlq2.js';
 import { j as json } from '../../../../../chunks/utils.js-CAdNO8Tu.js';
 import '../../../../../chunks/config.js-B0w1-uCA.js';
 import '../../../../../chunks/insight-config.js-CA-iT3lB.js';
@@ -32,4 +32,4 @@ var GET = async () => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts.js-C0_j53OW.js.map
+//# sourceMappingURL=_server.ts.js-BFeDKrPz.js.map

package/build/server/chunks/entries/endpoints/api/dsh/session/_sessionId_/attachment/{_server.ts.js-CxMvUVdS.js → _server.ts.js-DmSTTfI5.js}

@@ -1,4 +1,4 @@
-import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../../../chunks/dsh-connection.js-DvncrWM4.js';
+import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../../../chunks/dsh-connection.js-DL5qjlq2.js';
 import { j as json } from '../../../../../../../chunks/utils.js-CAdNO8Tu.js';
 import '../../../../../../../chunks/config.js-B0w1-uCA.js';
 import '../../../../../../../chunks/insight-config.js-CA-iT3lB.js';
@@ -43,4 +43,4 @@ var GET = async ({ params, url }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts.js-CxMvUVdS.js.map
+//# sourceMappingURL=_server.ts.js-DmSTTfI5.js.map

package/build/server/chunks/entries/endpoints/api/dsh/session/_sessionId_/cancel/{_server.ts.js-CfjRtKMp.js → _server.ts.js-Cus9XrC9.js}

@@ -1,4 +1,4 @@
-import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../../../chunks/dsh-connection.js-DvncrWM4.js';
+import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../../../chunks/dsh-connection.js-DL5qjlq2.js';
 import { j as json } from '../../../../../../../chunks/utils.js-CAdNO8Tu.js';
 import '../../../../../../../chunks/config.js-B0w1-uCA.js';
 import '../../../../../../../chunks/insight-config.js-CA-iT3lB.js';
@@ -32,4 +32,4 @@ var POST = async ({ params }) => {
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts.js-CfjRtKMp.js.map
+//# sourceMappingURL=_server.ts.js-Cus9XrC9.js.map