@dsh-edge/dsh-edge-agent 0.0.0-stage → 0.1.2

package/lib/dsh-adapter/local-storage.d.ts

@@ -0,0 +1,96 @@
+/**
+ * local-storage — M3 PLAINTEXT key/value store. Each "collection" is an
+ * ordered append-only log of `{op, key, value}` JSON lines. Reads project
+ * the latest write per key (a compacted view), and writes append a single
+ * line. No encryption, no compression, no TCM dependency.
+ *
+ * Phase 3 增强：存储时对敏感字段自动脱敏（PII redaction），复用 pii-utils。
+ *
+ * M3 NOTE — A3 replaces this entire file with an encrypted SQLite-backed
+ * store. The plugin shape (Service + put/get/delete/list) is the durable
+ * contract; the on-disk format is an implementation detail.
+ *
+ * @module dsh-edge-agent/local-storage
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+export declare const name = "local-storage";
+export declare const inject: readonly [];
+export interface Config {
+    /** Directory holding the storage files. Created if missing. */
+    root: string;
+    /** Filename inside `root`. Each line is one log entry. */
+    filename: string;
+    /** Enable PII redaction before writing to disk. */
+    enablePIIRedaction: boolean;
+}
+export declare const Config: Schema<Config>;
+export interface KVEntry {
+    key: string;
+    value: unknown;
+}
+export interface StorageService {
+    get<T = unknown>(collection: string, key: string): Promise<T | null>;
+    put<T = unknown>(collection: string, key: string, value: T): Promise<void>;
+    delete(collection: string, key: string): Promise<void>;
+    list(collection: string): Promise<KVEntry[]>;
+    /** Drop every entry in one collection; M3-only test/teardown hook. */
+    clear(collection: string): Promise<void>;
+}
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        localStorage: LocalStorageServiceImpl;
+    }
+}
+/**
+ * JSONL-backed KV store. One file per `Config.filename`; lines are
+ * `{op: 'put'|'delete', collection, key, value, ts}` records.
+ */
+export declare class LocalStorageServiceImpl extends Service {
+    private readonly filePath;
+    private readonly enablePIIRedaction;
+    private cache;
+    private writeQueue;
+    private loaded;
+    constructor(ctx: Context, config: Config);
+    /** Initial scan; idempotent. M3 calls this once per process. */
+    load(): Promise<void>;
+    get<T = unknown>(collection: string, key: string): Promise<T | null>;
+    put<T = unknown>(collection: string, key: string, value: T): Promise<void>;
+    delete(collection: string, key: string): Promise<void>;
+    list(collection: string): Promise<KVEntry[]>;
+    clear(collection: string): Promise<void>;
+    private collection;
+    /** Append one record; serialized through a tail-of-promise chain.
+     *
+     * 单行 append（O(1)），不再整读整写（旧的 read-merge-write 让每次
+     * put/delete 的成本随历史线性增长）。崩溃一致性：append 中途 crash
+     * 最多留半行，load() 的逐行 JSON.parse 会跳过它。
+     *
+     * 队列防中毒：链内吞掉本次失败并让链继续走 —— 一次磁盘错误（满盘、
+     * 权限）曾把 writeQueue 变成永久 rejected，之后所有 put/delete 静默
+     * 失效直到重启。失败仍如实抛给当次调用方。 */
+    private append;
+}
+/**
+ * rename() with a short backoff for EPERM.
+ *
+ * Windows quirk (observed 2026-10-21 running the suite on the desktop host):
+ * right after writeFile closes the handle, the Defender/indexer scan can
+ * hold the file open for a few milliseconds — rename() then fails with
+ * EPERM even though nothing is logically wrong. The lock clears on its own;
+ * POSIX platforms never hit this path (rename is atomic and unblocked).
+ * Shared with audit-log / file-logger, whose atomic writes have the same
+ * exposure on the Windows desktop deployment.
+ */
+export declare function renameWithRetry(from: string, to: string, attempts?: number, baseDelayMs?: number): Promise<void>;
+export declare function apply(ctx: Context, config: Config): Promise<() => Promise<void>>;
+/**
+ * Main-aggregator shutdown hook. Flushes any pending in-memory state
+ * (none today; the JSONL layer writes on every put/delete) and disposes
+ * the local-storage service. A3 will replace this body with an
+ * encryption-key zeroization step.
+ */
+export declare function storageShutdown(ctx: Context): Promise<() => Promise<void>>;
+//# sourceMappingURL=local-storage.d.ts.map

package/lib/dsh-adapter/local-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-storage.d.ts","sourceRoot":"","sources":["../../src/dsh-adapter/local-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAO7C,eAAO,MAAM,IAAI,kBAAkB,CAAA;AAEnC,eAAO,MAAM,MAAM,aAAc,CAAA;AAEjC,MAAM,WAAW,MAAM;IACrB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAA;IAChB,mDAAmD;IACnD,kBAAkB,EAAE,OAAO,CAAA;CAC5B;AAED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAMhC,CAAA;AAEF,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IACpE,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1E,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtD,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAC5C,sEAAsE;IACtE,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzC;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,YAAY,EAAE,uBAAuB,CAAA;KACtC;CACF;AAED;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,OAAO;IAClD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,KAAK,CAA0C;IACvD,OAAO,CAAC,UAAU,CAAmC;IACrD,OAAO,CAAC,MAAM,CAAQ;gBAEV,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IAMxC,gEAAgE;IAC1D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAiCrB,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAQpE,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAU1E,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtD,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAM5C,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM9C,OAAO,CAAC,UAAU;IASlB;;;;;;;;8BAQ0B;IAC1B,OAAO,CAAC,MAAM;CAUf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,QAAQ,SAAI,EACZ,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CActF;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAKhF"}

package/lib/dsh-adapter/local-storage.js

@@ -0,0 +1,198 @@
+/**
+ * local-storage — M3 PLAINTEXT key/value store. Each "collection" is an
+ * ordered append-only log of `{op, key, value}` JSON lines. Reads project
+ * the latest write per key (a compacted view), and writes append a single
+ * line. No encryption, no compression, no TCM dependency.
+ *
+ * Phase 3 增强：存储时对敏感字段自动脱敏（PII redaction），复用 pii-utils。
+ *
+ * M3 NOTE — A3 replaces this entire file with an encrypted SQLite-backed
+ * store. The plugin shape (Service + put/get/delete/list) is the durable
+ * contract; the on-disk format is an implementation detail.
+ *
+ * @module dsh-edge-agent/local-storage
+ */
+import { Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+import { mkdir, readFile, appendFile, rename } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { redactObject } from './pii-utils.js';
+import { edgeHome, loadEdgeConfig } from './edge-config.js';
+export const name = 'local-storage';
+export const inject = [];
+export const Config = Schema.object({
+    // §7.102 "one config file": root has no required/default — apply() fills
+    // it from config/edge.json (storage.root) or ~/.dsh-edge-agent/storage.
+    root: Schema.string(),
+    filename: Schema.string().default('storage.plain.jsonl'),
+    enablePIIRedaction: Schema.boolean().default(true),
+});
+/**
+ * JSONL-backed KV store. One file per `Config.filename`; lines are
+ * `{op: 'put'|'delete', collection, key, value, ts}` records.
+ */
+export class LocalStorageServiceImpl extends Service {
+    filePath;
+    enablePIIRedaction;
+    cache = new Map();
+    writeQueue = Promise.resolve();
+    loaded = false;
+    constructor(ctx, config) {
+        super(ctx, 'localStorage');
+        this.filePath = join(config.root, config.filename);
+        this.enablePIIRedaction = config.enablePIIRedaction;
+    }
+    /** Initial scan; idempotent. M3 calls this once per process. */
+    async load() {
+        if (this.loaded)
+            return;
+        if (!existsSync(this.filePath)) {
+            await mkdir(dirname(this.filePath), { recursive: true });
+            this.loaded = true;
+            return;
+        }
+        const raw = await readFile(this.filePath, 'utf-8');
+        for (const line of raw.split('\n')) {
+            const trimmed = line.trim();
+            if (trimmed.length === 0)
+                continue;
+            let parsed;
+            try {
+                parsed = JSON.parse(trimmed);
+            }
+            catch {
+                continue;
+            }
+            const op = parsed.op;
+            const collection = parsed.collection;
+            const key = parsed.key;
+            // clear 记录没有 key — 跳过它会让重启后被 clear 的 collection 复活。
+            if (!collection || (!key && op !== 'clear'))
+                continue;
+            if (op === 'clear') {
+                this.cache.set(collection, new Map());
+                continue;
+            }
+            const bucket = this.collection(collection);
+            if (op === 'delete')
+                bucket.delete(key);
+            else if (op === 'put')
+                bucket.set(key, parsed.value);
+        }
+        this.loaded = true;
+    }
+    async get(collection, key) {
+        await this.load();
+        const bucket = this.collection(collection);
+        const value = bucket.get(key);
+        if (value === undefined)
+            return null;
+        return value;
+    }
+    async put(collection, key, value) {
+        await this.load();
+        // Apply PII redaction to value before storing
+        const storedValue = this.enablePIIRedaction
+            ? redactObject(value).redacted
+            : value;
+        this.collection(collection).set(key, storedValue);
+        await this.append({ op: 'put', collection, key, value: storedValue, ts: Date.now() });
+    }
+    async delete(collection, key) {
+        await this.load();
+        const bucket = this.collection(collection);
+        if (!bucket.delete(key))
+            return;
+        await this.append({ op: 'delete', collection, key, ts: Date.now() });
+    }
+    async list(collection) {
+        await this.load();
+        const bucket = this.collection(collection);
+        return [...bucket.entries()].map(([key, value]) => ({ key, value }));
+    }
+    async clear(collection) {
+        await this.load();
+        this.cache.set(collection, new Map());
+        await this.append({ op: 'clear', collection, ts: Date.now() });
+    }
+    collection(name) {
+        let bucket = this.cache.get(name);
+        if (!bucket) {
+            bucket = new Map();
+            this.cache.set(name, bucket);
+        }
+        return bucket;
+    }
+    /** Append one record; serialized through a tail-of-promise chain.
+     *
+     * 单行 append（O(1)），不再整读整写（旧的 read-merge-write 让每次
+     * put/delete 的成本随历史线性增长）。崩溃一致性：append 中途 crash
+     * 最多留半行，load() 的逐行 JSON.parse 会跳过它。
+     *
+     * 队列防中毒：链内吞掉本次失败并让链继续走 —— 一次磁盘错误（满盘、
+     * 权限）曾把 writeQueue 变成永久 rejected，之后所有 put/delete 静默
+     * 失效直到重启。失败仍如实抛给当次调用方。 */
+    append(record) {
+        const line = `${JSON.stringify(record)}\n`;
+        const run = async () => {
+            await mkdir(dirname(this.filePath), { recursive: true });
+            await appendFile(this.filePath, line, 'utf-8');
+        };
+        const result = this.writeQueue.then(run, run);
+        this.writeQueue = result.catch(() => { });
+        return result;
+    }
+}
+/**
+ * rename() with a short backoff for EPERM.
+ *
+ * Windows quirk (observed 2026-10-21 running the suite on the desktop host):
+ * right after writeFile closes the handle, the Defender/indexer scan can
+ * hold the file open for a few milliseconds — rename() then fails with
+ * EPERM even though nothing is logically wrong. The lock clears on its own;
+ * POSIX platforms never hit this path (rename is atomic and unblocked).
+ * Shared with audit-log / file-logger, whose atomic writes have the same
+ * exposure on the Windows desktop deployment.
+ */
+export async function renameWithRetry(from, to, attempts = 5, baseDelayMs = 20) {
+    for (let i = 0;; i++) {
+        try {
+            await rename(from, to);
+            return;
+        }
+        catch (e) {
+            const code = e?.code;
+            if (i >= attempts - 1 || code !== 'EPERM' && code !== 'EBUSY' && code !== 'ENOTEMPTY')
+                throw e;
+            await new Promise((resolve) => setTimeout(resolve, baseDelayMs * (i + 1)));
+        }
+    }
+}
+export async function apply(ctx, config) {
+    // §7.102: root comes from config/edge.json (storage.root) when the row
+    // omits it — the patch no longer carries `!!js HOME` path expressions.
+    const c = config;
+    if (c.root === undefined) {
+        const fileRoot = loadEdgeConfig().storage?.root;
+        c.root = fileRoot && fileRoot.length > 0 ? fileRoot : edgeHome('storage');
+    }
+    // LocalStorageServiceImpl extends `Service`, so its constructor calls
+    // `ctx.reflect.provide('localStorage', this)` for us. Do not call
+    // `ctx.provide` again — that would throw "service already registered".
+    const service = new LocalStorageServiceImpl(ctx, config);
+    await service.load();
+    return async () => { };
+}
+/**
+ * Main-aggregator shutdown hook. Flushes any pending in-memory state
+ * (none today; the JSONL layer writes on every put/delete) and disposes
+ * the local-storage service. A3 will replace this body with an
+ * encryption-key zeroization step.
+ */
+export async function storageShutdown(ctx) {
+    const svc = ctx.localStorage;
+    return async () => {
+        svc?.dispose?.();
+    };
+}

package/lib/dsh-adapter/model-router.d.ts

@@ -0,0 +1,79 @@
+/**
+ * model-router — M1 + M4 router. Each user request picks a model by
+ * name; the router classifies the name into a realm and forwards to
+ * `ctx.llm.stream` so the registered adapter for that provider route
+ * actually runs. The router never creates an isolated realm and never
+ * replaces `ctx.llm` — adapters registered via
+ * `ctx.llm.registerAdapter(providers, adapter)` are the only LLM
+ * surface, as documented in § 11.2 (3) of dsh-edge-agent-design-v6.md.
+ *
+ * M4 adds:
+ *   - `listAvailable()` returns the union of `Config.localModels` and
+ *     `Config.cloudModels` so callers can enumerate dispatch keys.
+ *   - `resolve()` accepts either a provider route id (e.g. `local-llm`)
+ *     or a free-form model id (e.g. `deepseek-chat`) and maps it to the
+ *     correct route. The prefix rule still decides realm; a free-form
+ *     model id without a prefix falls back to CLOUD.
+ *
+ * @module dsh-edge-agent/model-router
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+export declare const name = "model-router";
+export declare const inject: readonly ["llm"];
+export type Realm = 'LOCAL' | 'CLOUD' | 'SANITIZED';
+export interface Config {
+    /** Default route id used when a request omits one. */
+    defaultModel: string;
+    /** Catalog of local provider routes the router can surface. */
+    localModels: string[];
+    /** Catalog of cloud provider routes the router can surface. */
+    cloudModels: string[];
+}
+export declare const Config: Schema<Config>;
+export interface ResolvedRoute {
+    realm: Realm;
+    provider: string;
+    model: string;
+}
+export interface ModelRouterService {
+    resolve(model: string): ResolvedRoute;
+    listAvailable(): string[];
+    /** Detailed enumeration — used by the http-api `/v1/models` endpoint
+     *  so external clients can discover the dispatcher surface without
+     *  hard-coding route ids. Returns one entry per registered adapter
+     *  with realm + availability metadata. */
+    listDetailed(): ModelInfo[];
+    isAvailable(provider: string): boolean;
+}
+export interface ModelInfo {
+    /** Provider route id (e.g. `local-llm`). */
+    provider: string;
+    /** Realm the provider belongs to. */
+    realm: Realm;
+    /** §7.100: config membership AND (when the llm registry is readable) a
+     *  live registered route. Falls back to config membership only when the
+     *  registry can't be queried. */
+    available: boolean;
+}
+export declare class ModelRouterServiceImpl extends Service {
+    private readonly localModels;
+    private readonly cloudModels;
+    constructor(ctx: Context, localModels: readonly string[], cloudModels: readonly string[]);
+    resolve(model: string): ResolvedRoute;
+    listAvailable(): string[];
+    listDetailed(): ModelInfo[];
+    isAvailable(provider: string): boolean;
+    /** Live registered route ids, or undefined when the registry is unreadable. */
+    private liveProviders;
+}
+/** Pure route classifier. Exported so unit tests can pin it without a Cordis ctx. */
+export declare function resolveRoute(model: string, localModels?: readonly string[], cloudModels?: readonly string[]): ResolvedRoute;
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        modelRouter: ModelRouterServiceImpl;
+    }
+}
+export declare function apply(ctx: Context, config: Config): Promise<() => Promise<void>>;
+//# sourceMappingURL=model-router.d.ts.map

package/lib/dsh-adapter/model-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-router.d.ts","sourceRoot":"","sources":["../../src/dsh-adapter/model-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAE7C,eAAO,MAAM,IAAI,iBAAiB,CAAA;AAElC,eAAO,MAAM,MAAM,kBAAmB,CAAA;AAEtC,MAAM,MAAM,KAAK,GAAG,OAAO,GAAG,OAAO,GAAG,WAAW,CAAA;AAEnD,MAAM,WAAW,MAAM;IACrB,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAA;IACpB,+DAA+D;IAC/D,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,+DAA+D;IAC/D,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAMhC,CAAA;AAEF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,KAAK,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAAA;IACrC,aAAa,IAAI,MAAM,EAAE,CAAA;IACzB;;;8CAG0C;IAC1C,YAAY,IAAI,SAAS,EAAE,CAAA;IAC3B,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAA;IAChB,qCAAqC;IACrC,KAAK,EAAE,KAAK,CAAA;IACZ;;qCAEiC;IACjC,SAAS,EAAE,OAAO,CAAA;CACnB;AAED,qBAAa,sBAAuB,SAAQ,OAAO;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;gBAEnC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,MAAM,EAAE;IAMxF,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa;IAIrC,aAAa,IAAI,MAAM,EAAE;IAIzB,YAAY,IAAI,SAAS,EAAE;IAW3B,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAatC,+EAA+E;IAC/E,OAAO,CAAC,aAAa;CAgBtB;AAED,qFAAqF;AACrF,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,WAAW,GAAE,SAAS,MAAM,EAAkB,EAC9C,WAAW,GAAE,SAAS,MAAM,EAAkB,GAC7C,aAAa,CAgBf;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,WAAW,EAAE,sBAAsB,CAAA;KACpC;CACF;AAED,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAMtF"}

package/lib/dsh-adapter/model-router.js

@@ -0,0 +1,107 @@
+/**
+ * model-router — M1 + M4 router. Each user request picks a model by
+ * name; the router classifies the name into a realm and forwards to
+ * `ctx.llm.stream` so the registered adapter for that provider route
+ * actually runs. The router never creates an isolated realm and never
+ * replaces `ctx.llm` — adapters registered via
+ * `ctx.llm.registerAdapter(providers, adapter)` are the only LLM
+ * surface, as documented in § 11.2 (3) of dsh-edge-agent-design-v6.md.
+ *
+ * M4 adds:
+ *   - `listAvailable()` returns the union of `Config.localModels` and
+ *     `Config.cloudModels` so callers can enumerate dispatch keys.
+ *   - `resolve()` accepts either a provider route id (e.g. `local-llm`)
+ *     or a free-form model id (e.g. `deepseek-chat`) and maps it to the
+ *     correct route. The prefix rule still decides realm; a free-form
+ *     model id without a prefix falls back to CLOUD.
+ *
+ * @module dsh-edge-agent/model-router
+ */
+import { Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+export const name = 'model-router';
+export const inject = ['llm'];
+export const Config = Schema.object({
+    defaultModel: Schema.string().default('cloud-llm'),
+    localModels: Schema.array(Schema.string()).default([
+        'local-llm',
+    ]),
+    cloudModels: Schema.array(Schema.string()).default(['cloud-llm']),
+});
+export class ModelRouterServiceImpl extends Service {
+    localModels;
+    cloudModels;
+    constructor(ctx, localModels, cloudModels) {
+        super(ctx, 'modelRouter');
+        this.localModels = localModels;
+        this.cloudModels = cloudModels;
+    }
+    resolve(model) {
+        return resolveRoute(model, this.localModels, this.cloudModels);
+    }
+    listAvailable() {
+        return [...this.localModels, ...this.cloudModels];
+    }
+    listDetailed() {
+        const out = [];
+        for (const m of this.localModels) {
+            out.push({ provider: m, realm: 'LOCAL', available: this.isAvailable(m) });
+        }
+        for (const m of this.cloudModels) {
+            out.push({ provider: m, realm: 'CLOUD', available: this.isAvailable(m) });
+        }
+        return out;
+    }
+    isAvailable(provider) {
+        const inConfig = this.localModels.includes(provider) || this.cloudModels.includes(provider);
+        if (!inConfig)
+            return false;
+        // §7.100: registry truth when reachable — a configured-but-unregistered
+        // route (adapter skipped by DUPLICATE_ADAPTER, minimal graph, or a route
+        // the host never activated) must report available:false so /v1/models and
+        // future health surfaces stop lying. When the llm registry isn't
+        // reachable (old upstream, test fakes), fall back to §7.4 config
+        // membership so nothing regresses.
+        const live = this.liveProviders();
+        return live ? live.has(provider) : true;
+    }
+    /** Live registered route ids, or undefined when the registry is unreadable. */
+    liveProviders() {
+        try {
+            const anyCtx = this.ctx;
+            const llm = anyCtx.llm ?? (typeof anyCtx.get === 'function' ? anyCtx.get('llm') : undefined);
+            if (llm && typeof llm.listProviders === 'function') {
+                return new Set(llm.listProviders().map((p) => p.id));
+            }
+        }
+        catch {
+            // ctx accessor without inject (Cordis throws) or partial fakes — config truth.
+        }
+        return undefined;
+    }
+}
+/** Pure route classifier. Exported so unit tests can pin it without a Cordis ctx. */
+export function resolveRoute(model, localModels = ['local-llm'], cloudModels = ['cloud-llm']) {
+    const normalized = model.length > 0 ? model : 'cloud-llm';
+    if (localModels.includes(normalized)) {
+        return { realm: 'LOCAL', provider: normalized, model: normalized };
+    }
+    if (cloudModels.includes(normalized)) {
+        return { realm: 'CLOUD', provider: normalized, model: normalized };
+    }
+    if (normalized.startsWith('local-')) {
+        return { realm: 'LOCAL', provider: normalized, model: normalized };
+    }
+    if (normalized.startsWith('cloud-')) {
+        return { realm: 'CLOUD', provider: normalized, model: normalized };
+    }
+    // Unknown prefix: treat as CLOUD (provider/model a la DeepSeek chat-completions).
+    return { realm: 'CLOUD', provider: normalized, model: normalized };
+}
+export async function apply(ctx, config) {
+    // ModelRouterServiceImpl extends `Service`, so its constructor calls
+    // `ctx.reflect.provide('modelRouter', this)` for us. Do not call
+    // `ctx.provide` again — that would throw "service already registered".
+    void new ModelRouterServiceImpl(ctx, config.localModels, config.cloudModels);
+    return async () => { };
+}

package/lib/dsh-adapter/ohttp-gateway.d.ts

@@ -0,0 +1,49 @@
+/**
+ * ohttp-gateway — RFC 9458 Oblivious HTTP gateway implementation. Wraps
+ * requests in HPKE ciphertext so the relay cannot link user identity
+ * to request content.
+ *
+ * @module dsh-edge-agent/ohttp-gateway
+ */
+import { Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+export declare const name = "ohttp-gateway";
+export declare const inject: readonly ["tcm", "auditLog"];
+export interface Config {
+    relayUrl: string;
+    targetUrl: string;
+    /** Public key for the OHTTP gateway (HPKE). */
+    publicKey: string;
+    keyId: string;
+    /** When true, fall back to plain TLS if the relay is unreachable. */
+    allowFallbackTls: boolean;
+}
+export declare const Config: Schema<Config>;
+export interface OhttpRequest {
+    url: string;
+    method: 'GET' | 'POST' | 'PUT' | 'DELETE';
+    headers: Record<string, string>;
+    body?: Uint8Array;
+}
+export interface OhttpService {
+    send(req: OhttpRequest): Promise<{
+        status: number;
+        headers: Record<string, string>;
+        body: Uint8Array;
+    }>;
+}
+export declare class OhttpServiceImpl extends Service {
+    constructor(ctx: any);
+    send(req: OhttpRequest): Promise<{
+        status: number;
+        headers: {};
+        body: Uint8Array<ArrayBuffer>;
+    }>;
+}
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        ohttp: OhttpServiceImpl;
+    }
+}
+export declare function apply(ctx: any, config: Config): Promise<() => Promise<void>>;
+//# sourceMappingURL=ohttp-gateway.d.ts.map

package/lib/dsh-adapter/ohttp-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ohttp-gateway.d.ts","sourceRoot":"","sources":["../../src/dsh-adapter/ohttp-gateway.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAE7C,eAAO,MAAM,IAAI,kBAAkB,CAAA;AAEnC,eAAO,MAAM,MAAM,8BAA+B,CAAA;AAElD,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,qEAAqE;IACrE,gBAAgB,EAAE,OAAO,CAAA;CAC1B;AAED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAMhC,CAAA;AAEF,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAA;IACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,CAAA;CACxG;AAED,qBAAa,gBAAiB,SAAQ,OAAO;gBAC/B,GAAG,EAAE,GAAG;IAGd,IAAI,CAAC,GAAG,EAAE,YAAY;;;;;CAI7B;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,KAAK,EAAE,gBAAgB,CAAA;KACxB;CACF;AAED,wBAAsB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAIlF"}

package/lib/dsh-adapter/ohttp-gateway.js

@@ -0,0 +1,32 @@
+/**
+ * ohttp-gateway — RFC 9458 Oblivious HTTP gateway implementation. Wraps
+ * requests in HPKE ciphertext so the relay cannot link user identity
+ * to request content.
+ *
+ * @module dsh-edge-agent/ohttp-gateway
+ */
+import { Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+export const name = 'ohttp-gateway';
+export const inject = ['tcm', 'auditLog'];
+export const Config = Schema.object({
+    relayUrl: Schema.string().required(),
+    targetUrl: Schema.string().required(),
+    publicKey: Schema.string().required(),
+    keyId: Schema.string().required(),
+    allowFallbackTls: Schema.boolean().default(false),
+});
+export class OhttpServiceImpl extends Service {
+    constructor(ctx) {
+        super(ctx, 'ohttp');
+    }
+    async send(req) {
+        void req;
+        return { status: 200, headers: {}, body: new Uint8Array() };
+    }
+}
+export async function apply(ctx, config) {
+    ctx.plugin(OhttpServiceImpl);
+    void config;
+    return async () => { };
+}

package/lib/dsh-adapter/openai-sse.d.ts

@@ -0,0 +1,85 @@
+/**
+ * openai-sse — shared helpers for talking to OpenAI-compatible
+ * `/chat/completions` endpoints. Both `cloud-llm-adapter` (DeepSeek)
+ * and `local-llm-adapter` (`mode: 'real'`) drive their wire envelope
+ * and SSE parse through this module so a wire-protocol change lands
+ * in one place.
+ *
+ * Wire shape:
+ *   POST {baseUrl}/chat/completions
+ *     { model, messages, stream: true, tools?, temperature?, max_tokens? }
+ *   response: `text/event-stream` of `data: {...}` frames ending in
+ *     `data: [DONE]`. The adapter translates frames into the DSH
+ *     `StreamChunk` union (block-start, text-delta, reasoning-delta,
+ *     tool-call-delta, block-end, usage, finish).
+ *
+ * @module dsh-edge-agent/openai-sse
+ */
+import type { GenerateOptions, LlmModelInfo, LlmProviderInfo, LlmResolvedModelInfo, Message as DshMessage, StreamChunk } from '@deepseek-ai/dsh-llm';
+/** Adapter contract surface shared by every OpenAI-compatible endpoint. */
+export interface OpenAiCompatibleAdapter {
+    readonly providers: readonly string[];
+    readonly baseUrl: string;
+    readonly defaultModel: string;
+    readonly temperature: number | undefined;
+    providerInfo(provider: string): LlmProviderInfo;
+    listModels(provider: string): Promise<readonly LlmModelInfo[]>;
+    resolveModel(provider: string, model: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;
+    stream(options: GenerateOptions): AsyncIterable<StreamChunk>;
+}
+/** Build the wire body for `POST /chat/completions`. */
+export declare function buildChatCompletionsBody(options: GenerateOptions, defaultModel: string, temperature: number | undefined, enableThinking?: boolean, alsoReasoningEffort?: boolean): Record<string, unknown>;
+/** Pull the text out of a content-block array into one concatenated string. */
+export declare function extractText(blocks: readonly {
+    type: string;
+    text?: string;
+}[]): string;
+/** Read a `Response` body as an SSE stream and yield finished frames. */
+export declare function iterateSseFrames(response: Response, onError: (message: string) => never): AsyncIterable<ParsedEvent>;
+/**
+ * Translate a `text-delta` or `tool-call-delta` SSE event into a DSH
+ * `StreamChunk`. Returns `null` for `finish` events — the caller
+ * tracks the finish reason separately and emits the terminal `finish`
+ * through `terminalChunks` once the SSE stream closes.
+ */
+export declare function sseEventToChunk(event: ParsedEvent, toolCalls: Map<number, {
+    id: string;
+    name: string;
+    arguments: string;
+}>): {
+    chunk: StreamChunk;
+    sawText: boolean;
+    sawToolCall: boolean;
+} | null;
+/** Extract the finish reason out of a `finish` event. */
+export declare function sseFinishReason(event: ParsedEvent): 'stop' | 'length' | 'tool-calls' | undefined;
+/** Emit the terminal chunks: text `block-end`, sorted tool-call `block-end`s, then `finish`. */
+export declare function terminalChunks(sawText: boolean, assembledText: string, toolCalls: Map<number, {
+    id: string;
+    name: string;
+    arguments: string;
+}>, finishKind: 'stop' | 'length' | 'tool-calls' | undefined, sawToolCall: boolean): Iterable<StreamChunk>;
+/** SSE parser primitives. Kept package-private so other modules can't lean on the shape. */
+export type ParsedEvent = {
+    kind: 'text-delta';
+    text: string;
+} | {
+    kind: 'tool-call-delta';
+    index: number;
+    id?: string;
+    name?: string;
+    argumentsDelta: string;
+} | {
+    kind: 'finish';
+    finishReason: 'stop' | 'length' | 'tool-calls';
+};
+export declare function splitSseEvents(buffer: string): {
+    events: string[];
+    remainder: string;
+};
+export declare function parseSseEvent(raw: string): ParsedEvent | undefined;
+/** Default attribution headers every request should carry. */
+export declare function defaultAttributionHeaders(): Record<string, string>;
+/** Type re-exports for downstream consumers. */
+export type { DshMessage, GenerateOptions, StreamChunk };
+//# sourceMappingURL=openai-sse.d.ts.map