@dsh-edge/dsh-edge-agent 0.0.0-stage → 0.1.2

package/lib/dsh-adapter/session-attribution.d.ts

@@ -0,0 +1,70 @@
+/**
+ * §7.147 会话归属：审计行「属于哪个会话」的唯一口径。
+ *
+ * ## 为什么要有这个模块
+ *
+ * Edge 面板按**行**判断「这一轮」（§7.145-B）：会话自己的行 `turn >= 0`，
+ * 全局行 `turn === -1`（哨兵）。归属在宿主侧由 `edge-context-view.ts` 的
+ * `extractSessionId()` 决定 —— 载荷里**有** sessionId 就是会话行，没有就是
+ * 全局行；全局桶会被合并进**任何一个**会话的快照。
+ *
+ * 实测（§7.147，2026-10-29，本机审计链 4962 行逐 kind 统计）：
+ *
+ * | kind | 条数 | 带 sessionId |
+ * |---|---|---|
+ * | `llm.local.start` | 640 | **0** |
+ * | `llm.trace.index` | 195 | **0** |
+ * | `intent.jev.adopt` / `intent.jev.response` | 62 | **0** |
+ *
+ * 于是这些行**永远**落全局桶 ⇒ 路由 / 意图两个面板**结构上**不可能说
+ * 「这一轮」⇒ 面板只能显示「尚未绑定会话 + 全局信号」。
+ *
+ * ## 哨兵不是会话 id
+ *
+ * ops log 用 `'<pre-session>'` 表示「这次调用发生在会话建立之前」（§7.52：
+ * `<none>` / `unknown` 让人以为是数据丢失，`<pre-session>` 说明是预期）。
+ * 那是个**日志显示用**的哨兵，**不是**一个真实的会话 id。
+ *
+ * 把它当 sessionId 写进审计载荷会造出一个不存在的桶 —— 那些行从此只在
+ * 「有人请求 sessionId = `<pre-session>`」时才可见，等于**从所有真实会话
+ * 的视图里消失**。那比不写更糟：**宁可全局可见，不要无处可见**。
+ *
+ * 所以本模块给出唯一口径：
+ *
+ *   - **生产侧**：`realSessionId()` / `sessionIdField()` —— 哨兵与空串一律
+ *     判成「没有会话」，载荷里干脆不写这个键。
+ *   - **消费侧**：`edge-context-view.ts` 的 `extractSessionId()` 同样把哨兵
+ *     判成全局 —— 防御旧行与其它可能漏进来的路径。
+ *
+ * @module dsh-edge-agent/session-attribution
+ */
+/**
+ * ops log 用的「无会话」哨兵（§7.52）。
+ *
+ * 它是**日志显示**用的，不是会话标识。任何把它当作 id 使用的地方都是 bug。
+ */
+export declare const PRE_SESSION_SENTINEL = "<pre-session>";
+/**
+ * 取「真实会话 id」——没有就是 `undefined`（= 归属全局桶）。
+ *
+ * 判为「没有会话」的输入：非字符串 / 空串 / `'<pre-session>'` 哨兵。
+ *
+ * @param value - 任意来源的候选 id（options.sessionId / trace.sessionId / …）
+ * @returns 真实会话 id，或 `undefined`
+ */
+export declare function realSessionId(value: unknown): string | undefined;
+/**
+ * 审计载荷上的 `sessionId` 字段 —— 有真会话才带这个键。
+ *
+ * 用 `...(id ? { sessionId: id } : {})`（本仓既有写法，见 `intent-router.ts`
+ * 的 `...(sessionId ? { sessionId } : {})`）而不是 `sessionId: id`：后者在
+ * 无会话时会写一个 `undefined` 字段。JSON.stringify 会把它丢掉，结果一样，
+ * 但显式 spread 更清楚「**没有**这个键」而不是「有个空值」。
+ *
+ * @param value - 任意来源的候选 id
+ * @returns 可直接展开进审计载荷的对象
+ */
+export declare function sessionIdField(value: unknown): {
+    sessionId?: string;
+};
+//# sourceMappingURL=session-attribution.d.ts.map

package/lib/dsh-adapter/session-attribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-attribution.d.ts","sourceRoot":"","sources":["../../src/dsh-adapter/session-attribution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,kBAAkB,CAAA;AAEnD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIhE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAGrE"}

package/lib/dsh-adapter/session-attribution.js

@@ -0,0 +1,76 @@
+/**
+ * §7.147 会话归属：审计行「属于哪个会话」的唯一口径。
+ *
+ * ## 为什么要有这个模块
+ *
+ * Edge 面板按**行**判断「这一轮」（§7.145-B）：会话自己的行 `turn >= 0`，
+ * 全局行 `turn === -1`（哨兵）。归属在宿主侧由 `edge-context-view.ts` 的
+ * `extractSessionId()` 决定 —— 载荷里**有** sessionId 就是会话行，没有就是
+ * 全局行；全局桶会被合并进**任何一个**会话的快照。
+ *
+ * 实测（§7.147，2026-10-29，本机审计链 4962 行逐 kind 统计）：
+ *
+ * | kind | 条数 | 带 sessionId |
+ * |---|---|---|
+ * | `llm.local.start` | 640 | **0** |
+ * | `llm.trace.index` | 195 | **0** |
+ * | `intent.jev.adopt` / `intent.jev.response` | 62 | **0** |
+ *
+ * 于是这些行**永远**落全局桶 ⇒ 路由 / 意图两个面板**结构上**不可能说
+ * 「这一轮」⇒ 面板只能显示「尚未绑定会话 + 全局信号」。
+ *
+ * ## 哨兵不是会话 id
+ *
+ * ops log 用 `'<pre-session>'` 表示「这次调用发生在会话建立之前」（§7.52：
+ * `<none>` / `unknown` 让人以为是数据丢失，`<pre-session>` 说明是预期）。
+ * 那是个**日志显示用**的哨兵，**不是**一个真实的会话 id。
+ *
+ * 把它当 sessionId 写进审计载荷会造出一个不存在的桶 —— 那些行从此只在
+ * 「有人请求 sessionId = `<pre-session>`」时才可见，等于**从所有真实会话
+ * 的视图里消失**。那比不写更糟：**宁可全局可见，不要无处可见**。
+ *
+ * 所以本模块给出唯一口径：
+ *
+ *   - **生产侧**：`realSessionId()` / `sessionIdField()` —— 哨兵与空串一律
+ *     判成「没有会话」，载荷里干脆不写这个键。
+ *   - **消费侧**：`edge-context-view.ts` 的 `extractSessionId()` 同样把哨兵
+ *     判成全局 —— 防御旧行与其它可能漏进来的路径。
+ *
+ * @module dsh-edge-agent/session-attribution
+ */
+/**
+ * ops log 用的「无会话」哨兵（§7.52）。
+ *
+ * 它是**日志显示**用的，不是会话标识。任何把它当作 id 使用的地方都是 bug。
+ */
+export const PRE_SESSION_SENTINEL = '<pre-session>';
+/**
+ * 取「真实会话 id」——没有就是 `undefined`（= 归属全局桶）。
+ *
+ * 判为「没有会话」的输入：非字符串 / 空串 / `'<pre-session>'` 哨兵。
+ *
+ * @param value - 任意来源的候选 id（options.sessionId / trace.sessionId / …）
+ * @returns 真实会话 id，或 `undefined`
+ */
+export function realSessionId(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    if (value.length === 0 || value === PRE_SESSION_SENTINEL)
+        return undefined;
+    return value;
+}
+/**
+ * 审计载荷上的 `sessionId` 字段 —— 有真会话才带这个键。
+ *
+ * 用 `...(id ? { sessionId: id } : {})`（本仓既有写法，见 `intent-router.ts`
+ * 的 `...(sessionId ? { sessionId } : {})`）而不是 `sessionId: id`：后者在
+ * 无会话时会写一个 `undefined` 字段。JSON.stringify 会把它丢掉，结果一样，
+ * 但显式 spread 更清楚「**没有**这个键」而不是「有个空值」。
+ *
+ * @param value - 任意来源的候选 id
+ * @returns 可直接展开进审计载荷的对象
+ */
+export function sessionIdField(value) {
+    const id = realSessionId(value);
+    return id === undefined ? {} : { sessionId: id };
+}

package/lib/dsh-adapter/sessions.d.ts

@@ -0,0 +1,86 @@
+/**
+ * sessions — M3 PLAINTEXT session store. One session = one KV entry in the
+ * `local-storage` collection `sessions`, keyed by `sessionId`. Each value
+ * carries the full message list, a creation time, and a lastSeenAt stamp.
+ *
+ * M3 NOTE — A3 replaces this with an encrypted + indexed store; the
+ * service contract (create / appendMessage / getRecentMessages /
+ * listActive / cleanup) is the durable shape.
+ *
+ * @module dsh-edge-agent/sessions
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+export declare const name = "sessions";
+export declare const inject: readonly ["localStorage"];
+export interface Config {
+    /** Default TTL in seconds; sessions idle longer than this are eligible for cleanup. */
+    defaultTtlSeconds: number;
+    /** Hard cap on cached sessions; cleanup prunes LRU first. */
+    maxConcurrentSessions: number;
+    /** Filename inside the local-storage root for the sessions collection. */
+    collection: string;
+}
+export declare const Config: Schema<Config>;
+export interface SessionMessage {
+    role: 'user' | 'assistant' | 'system' | 'tool';
+    content: unknown;
+    ts: number;
+}
+export interface SessionRecord {
+    id: string;
+    createdAt: number;
+    lastSeenAt: number;
+    ttlSeconds: number;
+    messages: SessionMessage[];
+    /** Optional realm tag (LOCAL / CLOUD / SANITIZED) the session started under. */
+    realm?: 'LOCAL' | 'CLOUD' | 'SANITIZED';
+}
+export interface SessionsService {
+    create(input: {
+        id?: string;
+        realm?: SessionRecord['realm'];
+        ttlSeconds?: number;
+    }): Promise<SessionRecord>;
+    appendMessage(id: string, message: SessionMessage): Promise<SessionRecord>;
+    getRecentMessages(id: string, limit?: number): Promise<SessionMessage[]>;
+    get(id: string): Promise<SessionRecord | null>;
+    listActive(): Promise<SessionRecord[]>;
+    /** Drop sessions idle longer than their TTL; returns the count removed. */
+    cleanup(): Promise<number>;
+    /** Touch lastSeenAt without appending; preserves the TTL window. */
+    touch(id: string): Promise<void>;
+}
+export declare class SessionsServiceImpl extends Service {
+    private readonly collection;
+    private readonly defaultTtlSeconds;
+    private readonly maxConcurrentSessions;
+    /** 串行化 read-modify-write 周期：appendMessage / touch / cleanup 的
+     *  get→put 之间会让出事件循环，并发交错时后写覆盖前写（丢消息/丢
+     *  touch）。链内吞错防中毒 —— 一次失败不能让队列永久 rejected
+     *  （local-storage.writeQueue 踩过的坑），错误如实抛给当次调用方。 */
+    private mutationQueue;
+    /** TTL/LRU 清扫定时器（apply 启动；unref 不阻塞进程退出）。 */
+    private sweepTimer;
+    private enqueue;
+    constructor(ctx: Context, config: Config);
+    create(input: {
+        id?: string;
+        realm?: SessionRecord['realm'];
+        ttlSeconds?: number;
+    }): Promise<SessionRecord>;
+    appendMessage(id: string, message: SessionMessage): Promise<SessionRecord>;
+    getRecentMessages(id: string, limit?: number): Promise<SessionMessage[]>;
+    get(id: string): Promise<SessionRecord | null>;
+    listActive(): Promise<SessionRecord[]>;
+    touch(id: string): Promise<void>;
+    cleanup(): Promise<number>;
+    /** Start the periodic TTL/LRU sweep; idempotent (apply 唯一调用方). */
+    startSweep(intervalMs?: number): void;
+    /** Stop the TTL/LRU sweep timer (plugin dispose path). */
+    stop(): void;
+    private storage;
+}
+export declare function apply(ctx: Context, config: Config): Promise<() => Promise<void>>;
+//# sourceMappingURL=sessions.d.ts.map

package/lib/dsh-adapter/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/dsh-adapter/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAI7C,eAAO,MAAM,IAAI,aAAa,CAAA;AAE9B,eAAO,MAAM,MAAM,2BAA4B,CAAA;AAE/C,MAAM,WAAW,MAAM;IACrB,uFAAuF;IACvF,iBAAiB,EAAE,MAAM,CAAA;IACzB,6DAA6D;IAC7D,qBAAqB,EAAE,MAAM,CAAA;IAC7B,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAIhC,CAAA;AAEF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAA;IAC9C,OAAO,EAAE,OAAO,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;CACX;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,cAAc,EAAE,CAAA;IAC1B,gFAAgF;IAChF,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,WAAW,CAAA;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,KAAK,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC3G,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC1E,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IACxE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IAC9C,UAAU,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;IACtC,2EAA2E;IAC3E,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1B,oEAAoE;IACpE,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACjC;AAUD,qBAAa,mBAAoB,SAAQ,OAAO;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IAC1C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAQ;IAC9C;;;uDAGmD;IACnD,OAAO,CAAC,aAAa,CAAsC;IAE3D,6CAA6C;IAC7C,OAAO,CAAC,UAAU,CAA4C;IAE9D,OAAO,CAAC,OAAO;gBAMH,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IAOlC,MAAM,CAAC,KAAK,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAgB3G,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IAc1E,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAOxE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAM9C,UAAU,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IActC,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUhC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;IAiChC,kEAAkE;IAClE,UAAU,CAAC,UAAU,SAAS,GAAG,IAAI;IAQrC,0DAA0D;IAC1D,IAAI,IAAI,IAAI;IAOZ,OAAO,CAAC,OAAO;CAGhB;AAED,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAYtF"}

package/lib/dsh-adapter/sessions.js

@@ -0,0 +1,179 @@
+/**
+ * sessions — M3 PLAINTEXT session store. One session = one KV entry in the
+ * `local-storage` collection `sessions`, keyed by `sessionId`. Each value
+ * carries the full message list, a creation time, and a lastSeenAt stamp.
+ *
+ * M3 NOTE — A3 replaces this with an encrypted + indexed store; the
+ * service contract (create / appendMessage / getRecentMessages /
+ * listActive / cleanup) is the durable shape.
+ *
+ * @module dsh-edge-agent/sessions
+ */
+import { Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+export const name = 'sessions';
+export const inject = ['localStorage'];
+export const Config = Schema.object({
+    defaultTtlSeconds: Schema.natural().default(3600),
+    maxConcurrentSessions: Schema.natural().default(64),
+    collection: Schema.string().default('sessions'),
+});
+// NOTE: declaration merging disabled to avoid conflict with upstream dsh-session's SessionStore.
+// The edge-agent's session service is accessed via ctx.get('sessions') instead of ctx.sessions.
+// declare module '@deepseek-ai/cordis' {
+//   interface Context {
+//     sessions: SessionsServiceImpl
+//   }
+// }
+export class SessionsServiceImpl extends Service {
+    collection;
+    defaultTtlSeconds;
+    maxConcurrentSessions;
+    /** 串行化 read-modify-write 周期：appendMessage / touch / cleanup 的
+     *  get→put 之间会让出事件循环，并发交错时后写覆盖前写（丢消息/丢
+     *  touch）。链内吞错防中毒 —— 一次失败不能让队列永久 rejected
+     *  （local-storage.writeQueue 踩过的坑），错误如实抛给当次调用方。 */
+    mutationQueue = Promise.resolve();
+    /** TTL/LRU 清扫定时器（apply 启动；unref 不阻塞进程退出）。 */
+    sweepTimer;
+    enqueue(op) {
+        const result = this.mutationQueue.then(op, op);
+        this.mutationQueue = result.catch(() => { });
+        return result;
+    }
+    constructor(ctx, config) {
+        super(ctx, 'sessions');
+        this.collection = config.collection;
+        this.defaultTtlSeconds = config.defaultTtlSeconds;
+        this.maxConcurrentSessions = config.maxConcurrentSessions;
+    }
+    async create(input) {
+        const storage = this.storage();
+        const now = Date.now();
+        const id = input.id ?? `sess_${now}_${Math.random().toString(36).slice(2, 10)}`;
+        const session = {
+            id,
+            createdAt: now,
+            lastSeenAt: now,
+            ttlSeconds: input.ttlSeconds ?? this.defaultTtlSeconds,
+            messages: [],
+            realm: input.realm,
+        };
+        await storage.put(this.collection, id, session);
+        return session;
+    }
+    async appendMessage(id, message) {
+        return this.enqueue(async () => {
+            const storage = this.storage();
+            const session = await this.get(id);
+            if (!session) {
+                throw new Error(`sessions: session "${id}" not found`);
+            }
+            session.messages.push(message);
+            session.lastSeenAt = Date.now();
+            await storage.put(this.collection, id, session);
+            return session;
+        });
+    }
+    async getRecentMessages(id, limit) {
+        const session = await this.get(id);
+        if (!session)
+            return [];
+        const slice = limit === undefined ? session.messages : session.messages.slice(-limit);
+        return [...slice];
+    }
+    async get(id) {
+        const storage = this.storage();
+        const session = await storage.get(this.collection, id);
+        return session;
+    }
+    async listActive() {
+        const storage = this.storage();
+        const entries = await storage.list(this.collection);
+        const now = Date.now();
+        const out = [];
+        for (const { value } of entries) {
+            const session = value;
+            const ttlMs = session.ttlSeconds * 1000;
+            if (now - session.lastSeenAt <= ttlMs)
+                out.push(session);
+        }
+        out.sort((a, b) => b.lastSeenAt - a.lastSeenAt);
+        return out;
+    }
+    async touch(id) {
+        return this.enqueue(async () => {
+            const storage = this.storage();
+            const session = await storage.get(this.collection, id);
+            if (!session)
+                return;
+            session.lastSeenAt = Date.now();
+            await storage.put(this.collection, id, session);
+        });
+    }
+    async cleanup() {
+        return this.enqueue(async () => {
+            const storage = this.storage();
+            const entries = await storage.list(this.collection);
+            const now = Date.now();
+            let removed = 0;
+            for (const { key, value } of entries) {
+                const session = value;
+                const ttlMs = session.ttlSeconds * 1000;
+                if (now - session.lastSeenAt > ttlMs) {
+                    await storage.delete(this.collection, key);
+                    removed++;
+                }
+            }
+            // Enforce the cap by evicting oldest-by-lastSeenAt.
+            const active = await storage.list(this.collection);
+            if (active.length > this.maxConcurrentSessions) {
+                const sorted = (active
+                    .map((e) => e.value)
+                    .sort((a, b) => a.lastSeenAt - b.lastSeenAt));
+                const overflow = sorted.length - this.maxConcurrentSessions;
+                for (let i = 0; i < overflow; i++) {
+                    const victim = sorted[i];
+                    if (victim) {
+                        await storage.delete(this.collection, victim.id);
+                        removed++;
+                    }
+                }
+            }
+            return removed;
+        });
+    }
+    /** Start the periodic TTL/LRU sweep; idempotent (apply 唯一调用方). */
+    startSweep(intervalMs = 60_000) {
+        if (this.sweepTimer !== undefined)
+            return;
+        this.sweepTimer = setInterval(() => {
+            void this.cleanup().catch(() => { });
+        }, intervalMs);
+        if (typeof this.sweepTimer.unref === 'function')
+            this.sweepTimer.unref();
+    }
+    /** Stop the TTL/LRU sweep timer (plugin dispose path). */
+    stop() {
+        if (this.sweepTimer !== undefined) {
+            clearInterval(this.sweepTimer);
+            this.sweepTimer = undefined;
+        }
+    }
+    storage() {
+        return this.ctx.localStorage;
+    }
+}
+export async function apply(ctx, config) {
+    // SessionsServiceImpl extends `Service`, so its constructor calls
+    // `ctx.reflect.provide('sessions', this)` for us. Do not call
+    // `ctx.provide` again — that would throw "service already registered".
+    const service = new SessionsServiceImpl(ctx, config);
+    // cleanup() 此前没有任何调用方 —— TTL/LRU 形同虚设。每 60s 清扫一次
+    // （unref，不阻塞进程退出），与 privacy-policy / realm-skill-bridge 的
+    // 定时器模式一致。
+    service.startSweep();
+    return async () => {
+        service.stop();
+    };
+}

package/lib/dsh-adapter/tcm.d.ts

@@ -0,0 +1,55 @@
+/**
+ * TCM (Trusted Computing Module) — provides TEE-aware key management,
+ * encryption, sealing, and remote-attestation primitives.
+ *
+ * Backends:
+ *   - simulated: pure-JS, suitable for dev/CI
+ *   - trustzone: ARM TrustZone (production target)
+ *   - keystone: RISC-V Keystone (production target)
+ *   - sgx: Intel SGX (server-side test)
+ *
+ * @module dsh-edge-agent/tcm
+ */
+import { Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+export declare const name = "tcm";
+export declare const inject: readonly [];
+export interface Config {
+    teeType: 'simulated' | 'trustzone' | 'keystone' | 'sgx';
+    keyStorePath: string;
+    teeInference: boolean;
+    secureMemoryLimit: number;
+}
+export declare const Config: Schema<Config>;
+export interface AttestationToken {
+    payload: string;
+    signature: string;
+    teeType: string;
+    nonce: string;
+}
+export interface TcmStatus {
+    teeAvailable: boolean;
+    teeType: string;
+    keyCount: number;
+    secureMemoryUsed: number;
+}
+export declare class TcmService extends Service {
+    constructor(ctx: any);
+    generateKey(tag: string): Promise<Uint8Array>;
+    getKey(tag: string): Promise<Uint8Array>;
+    deleteKey(tag: string): Promise<void>;
+    encrypt(data: Uint8Array, tag: string): Promise<Uint8Array>;
+    decrypt(data: Uint8Array, tag: string): Promise<Uint8Array>;
+    hash(data: Uint8Array, algorithm: 'sha-256' | 'sha-3'): Promise<Uint8Array>;
+    seal(data: Uint8Array): Promise<Uint8Array>;
+    unseal(data: Uint8Array): Promise<Uint8Array>;
+    generateAttestation(nonce: string): Promise<AttestationToken>;
+    getStatus(): TcmStatus;
+}
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        tcm: TcmService;
+    }
+}
+export declare function apply(ctx: any, config: Config): Promise<() => Promise<void>>;
+//# sourceMappingURL=tcm.d.ts.map

package/lib/dsh-adapter/tcm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tcm.d.ts","sourceRoot":"","sources":["../../src/dsh-adapter/tcm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAI7C,eAAO,MAAM,IAAI,QAAQ,CAAA;AAEzB,eAAO,MAAM,MAAM,aAAc,CAAA;AAEjC,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,KAAK,CAAA;IACvD,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,OAAO,CAAA;IACrB,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AAED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAQhC,CAAA;AAEF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,OAAO,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAED,qBAAa,UAAW,SAAQ,OAAO;gBACzB,GAAG,EAAE,GAAG;IAId,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAK7C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIxC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAK3D,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAI3D,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAI3E,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAI3C,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAI7C,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IASnE,SAAS,IAAI,SAAS;CAQvB;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,GAAG,EAAE,UAAU,CAAA;KAChB;CACF;AAED,wBAAsB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAmBlF"}

package/lib/dsh-adapter/tcm.js

@@ -0,0 +1,94 @@
+/**
+ * TCM (Trusted Computing Module) — provides TEE-aware key management,
+ * encryption, sealing, and remote-attestation primitives.
+ *
+ * Backends:
+ *   - simulated: pure-JS, suitable for dev/CI
+ *   - trustzone: ARM TrustZone (production target)
+ *   - keystone: RISC-V Keystone (production target)
+ *   - sgx: Intel SGX (server-side test)
+ *
+ * @module dsh-edge-agent/tcm
+ */
+import { Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+import { join } from 'node:path';
+import { edgeHome, loadEdgeConfig } from './edge-config.js';
+export const name = 'tcm';
+export const inject = [];
+export const Config = Schema.object({
+    // §7.102 "one config file": no required/default — apply() fills teeType /
+    // keyStorePath from config/edge.json (tee.*), deriving the keystore path
+    // from the storage root when not given.
+    teeType: Schema.union(['simulated', 'trustzone', 'keystone', 'sgx']),
+    keyStorePath: Schema.string(),
+    teeInference: Schema.boolean().default(false),
+    secureMemoryLimit: Schema.natural().default(64 * 1024 * 1024),
+});
+export class TcmService extends Service {
+    constructor(ctx) {
+        super(ctx, 'tcm');
+    }
+    async generateKey(tag) {
+        // MVP: stub. real implementation would call TEE SDK
+        return new Uint8Array(32);
+    }
+    async getKey(tag) {
+        return new Uint8Array(32);
+    }
+    async deleteKey(tag) {
+        // MVP: stub
+    }
+    async encrypt(data, tag) {
+        // MVP: stub. real implementation uses AES-256-GCM via TEE
+        return data;
+    }
+    async decrypt(data, tag) {
+        return data;
+    }
+    async hash(data, algorithm) {
+        return new Uint8Array(32);
+    }
+    async seal(data) {
+        return data;
+    }
+    async unseal(data) {
+        return data;
+    }
+    async generateAttestation(nonce) {
+        return {
+            payload: '',
+            signature: '',
+            teeType: 'simulated',
+            nonce,
+        };
+    }
+    getStatus() {
+        return {
+            teeAvailable: true,
+            teeType: 'simulated',
+            keyCount: 0,
+            secureMemoryUsed: 0,
+        };
+    }
+}
+export async function apply(ctx, config) {
+    // §7.102: fill unset fields from config/edge.json (tee.*) so the stub
+    // service and A3 future work read the same single source.
+    const tee = loadEdgeConfig().tee;
+    const c = config;
+    if (c.teeType === undefined) {
+        c.teeType = (tee?.type && tee.type.length > 0 ? tee.type : 'simulated');
+    }
+    if (c.keyStorePath === undefined) {
+        const storageRoot = tee?.storageRoot && tee.storageRoot.length > 0 ? tee.storageRoot : edgeHome();
+        c.keyStorePath = tee?.keyStorePath && tee.keyStorePath.length > 0
+            ? tee.keyStorePath
+            : join(storageRoot, 'tcm-keys.json');
+    }
+    ctx.plugin(TcmService);
+    // MVP: real TEE wiring (KeyStore, secure-memory limiter) lives in plugin.ts
+    return async () => {
+        // dispose hook
+    };
+}

package/lib/dsh-adapter/td-bus.d.ts

@@ -0,0 +1,87 @@
+/**
+ * td-bus — threat detection bus.
+ *
+ * Phase D: real threat-level state machine. Subscribes to high-volume
+ * audit events and raises a threat level when patterns indicate abuse.
+ * The http-api plugin reads `getThreatLevel()` and blocks incoming
+ * `/v1/chat` requests when the level reaches the configured block
+ * threshold (default: 'critical', env DSH_EDGE_TD_BLOCK_LEVEL).
+ *
+ * Phase D decision matrix (frequency-driven):
+ *   requests/min in window   threat level
+ *   ≥ thresholds.cloud...    elevated
+ *   ≥ 2 × thresholds...      high
+ *   ≥ 4 × thresholds...      critical  ← blockLevel default
+ *
+ * Other streams (failed-sanitization streak, permission-denied streak)
+ * are reserved for future escalation; Phase D only ships the cloud-
+ * requests-per-minute counter.
+ *
+ * @module dsh-edge-agent/td-bus
+ */
+import { Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+export declare const name = "td-bus";
+export declare const inject: readonly ["auditLog", "privacyPolicy"];
+export interface Config {
+    windowSeconds: number;
+    thresholds: {
+        /** §7.102: unset → filled from config/edge.json (threat.cloudRate),
+         *  else the constructor literal 20. */
+        cloudRequestsPerMinute?: number;
+        failedSanitizationStreak: number;
+        permissionDeniedStreak: number;
+    };
+    /** Phase D: threat level at which the bus asks upstream plugins to
+     *  block (e.g. http-api returns 503). §7.102: unset → edge.json
+     *  (threat.blockLevel), else the constructor literal 'critical'. */
+    blockLevel?: 'elevated' | 'high' | 'critical';
+}
+export declare const Config: Schema<Config>;
+export type ThreatLevel = 'normal' | 'elevated' | 'high' | 'critical';
+export interface TdBusService {
+    getThreatLevel(): ThreatLevel;
+    /** Subscribe to a specific quarantine action. */
+    on(action: 'block-cloud' | 'kill-session' | 'notify-user' | 'lockdown', listener: () => void): () => void;
+    /** Manually escalate (e.g. after a policy tamper). */
+    escalate(reason: string): void;
+    /** Operator-facing解除 sticky 升级：escalate() 曾把等级永久钉死在
+     *  critical（Phase D 无 reset 路径）。清空 sticky 与滑动窗口，回落
+     *  normal；新流量按窗口重新累计。 */
+    reset(reason: string): void;
+    /** Phase D: ingest one cloud-bypass event (called by http-api / upstream). */
+    recordCloudRequest(): void;
+}
+export declare class TdBusServiceImpl extends Service {
+    private readonly windowMs;
+    private readonly cloudThreshold;
+    private readonly blockLevel;
+    private currentLevel;
+    /** When set, recomputeLevel() will not drop below this floor. Set by
+     *  escalate(); cleared only when the sliding window fully decays. */
+    private stickyLevel;
+    /** Sliding-window timestamps of cloud requests. */
+    private readonly cloudHits;
+    private readonly listeners;
+    constructor(ctx: any, config?: Config);
+    /** Recompute threat level from the current window. Called after each
+     *  recordCloudRequest() and from getThreatLevel(). Decay: cloudHits
+     *  older than windowMs are shifted out first, so the count reflects
+     *  only fresh events. */
+    private recomputeLevel;
+    getThreatLevel(): ThreatLevel;
+    on(action: 'block-cloud' | 'kill-session' | 'notify-user' | 'lockdown', listener: () => void): () => void;
+    escalate(reason: string): void;
+    recordCloudRequest(): void;
+    reset(reason: string): void;
+    /** Phase D: helper for http-api to decide whether to deny the request.
+     *  Returns true iff current level is at or above the configured blockLevel. */
+    shouldBlock(): boolean;
+}
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        tdBus: TdBusServiceImpl;
+    }
+}
+export declare function apply(ctx: any, config: Config): Promise<() => Promise<void>>;
+//# sourceMappingURL=td-bus.d.ts.map

package/lib/dsh-adapter/td-bus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"td-bus.d.ts","sourceRoot":"","sources":["../../src/dsh-adapter/td-bus.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAG7C,eAAO,MAAM,IAAI,WAAW,CAAA;AAE5B,eAAO,MAAM,MAAM,wCAAyC,CAAA;AAE5D,MAAM,WAAW,MAAM;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE;QACV;+CACuC;QACvC,sBAAsB,CAAC,EAAE,MAAM,CAAA;QAC/B,wBAAwB,EAAE,MAAM,CAAA;QAChC,sBAAsB,EAAE,MAAM,CAAA;KAC/B,CAAA;IACD;;wEAEoE;IACpE,UAAU,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAAA;CAC9C;AAED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAYhC,CAAA;AAEF,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAA;AAErE,MAAM,WAAW,YAAY;IAC3B,cAAc,IAAI,WAAW,CAAA;IAC7B,iDAAiD;IACjD,EAAE,CAAC,MAAM,EAAE,aAAa,GAAG,cAAc,GAAG,aAAa,GAAG,UAAU,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAA;IACzG,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B;;6BAEyB;IACzB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,8EAA8E;IAC9E,kBAAkB,IAAI,IAAI,CAAA;CAC3B;AAED,qBAAa,gBAAiB,SAAQ,OAAO;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IAGvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D,OAAO,CAAC,YAAY,CAAwB;IAC5C;yEACqE;IACrE,OAAO,CAAC,WAAW,CAA2B;IAC9C,mDAAmD;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqG;gBAEnH,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM;IAOrC;;;6BAGyB;IACzB,OAAO,CAAC,cAAc;IAiCtB,cAAc,IAAI,WAAW;IAO7B,EAAE,CAAC,MAAM,EAAE,aAAa,GAAG,cAAc,GAAG,aAAa,GAAG,UAAU,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAOzG,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAoB9B,kBAAkB,IAAI,IAAI;IAK1B,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAgB3B;mFAC+E;IAC/E,WAAW,IAAI,OAAO;CAIvB;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,KAAK,EAAE,gBAAgB,CAAA;KACxB;CACF;AAED,wBAAsB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CA6BlF"}