@dsh-edge/dsh-edge-agent 0.0.0-stage → 0.1.2

package/lib/dsh-adapter/contract.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Upstream DSH compatibility contract.
+ *
+ * Policy (2026-10-17): **do not pin the upstream DSH release line.** The
+ * project follows the newest published `@deepseek-ai/dsh-*` packages
+ * (currently the `next` dist-tag), so `package.json` uses open-ended
+ * lower bounds (`>=0.2.1-rc.2`) rather than exact versions.
+ *
+ * The contract gate therefore checks *compatibility*, not equality:
+ *   - every blessed package must be installed;
+ *   - every installed version must be >= `UPSTREAM_MIN_VERSION`;
+ *   - all blessed packages must resolve to one consistent version line
+ *     (mixed installs are the usual symptom of a partial upgrade);
+ *   - versions newer than `UPSTREAM_TESTED_VERSION` are reported as a
+ *     warning, never as a failure.
+ *
+ * `UPSTREAM_MIN_VERSION` is bumped only when an upstream change actually
+ * requires a code change here (e.g. the 0.2.x `agent/assistant-stream`
+ * replacement for `session/event assistant/chunk`).
+ */
+/**
+ * Oldest upstream line this bundle is known to work with. Raise this only
+ * together with a code migration, never just because a newer RC exists.
+ */
+export declare const UPSTREAM_MIN_VERSION = "0.2.1-rc.2";
+/** Newest upstream line exercised by the repo's own compile/gate run. */
+export declare const UPSTREAM_TESTED_VERSION = "0.2.1-rc.2";
+/**
+ * @deprecated Use `UPSTREAM_TESTED_VERSION` (or `UPSTREAM_MIN_VERSION` for
+ * compatibility checks). Kept as an alias so external scripts that imported
+ * the old name keep working.
+ */
+export declare const UPSTREAM_VALIDATED_VERSION = "0.2.1-rc.2";
+/** Framework packages compared by major/minor only. */
+export declare const UPSTREAM_FRAMEWORK_MAJORS: {
+    readonly '@deepseek-ai/cordis': ">=4.0.5";
+    readonly '@deepseek-ai/schemastery': ">=3.18.5";
+};
+/**
+ * Packages whose versions must move together. Keeping this list small is
+ * deliberate: it covers the API surface this bundle imports directly.
+ */
+export declare const UPSTREAM_BLESSED_PACKAGES: readonly ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-scope"];
+export type BlessedPackage = (typeof UPSTREAM_BLESSED_PACKAGES)[number];
+export interface UpstreamEntry {
+    pkg: string;
+    installed: string;
+}
+export interface UpstreamReport {
+    /** False only for below-minimum or mixed installs. */
+    ok: boolean;
+    minimum: string;
+    tested: string;
+    installed: Record<string, string>;
+    missing: string[];
+    belowMinimum: UpstreamEntry[];
+    mixed: UpstreamEntry[];
+    newerThanTested: UpstreamEntry[];
+    versions: string[];
+}
+/** Semver-ish comparison that also understands `-rc.1` style prereleases. */
+export declare function compareVersions(a: string, b: string): number;
+export declare function versionAtLeast(value: string, minimum: string): boolean;
+/**
+ * Read installed versions by walking the consumer's `node_modules/<pkg>/package.json`.
+ * Missing packages are reported, not thrown: a host may provide them lazily.
+ */
+export declare function installedUpstreamVersions(): Promise<Map<string, string>>;
+/** Full compatibility report used by the CI gate and boot diagnostics. */
+export declare function upstreamReport(): Promise<UpstreamReport>;
+/**
+ * Boot-time drift: only conditions that are actually incompatible.
+ * A newer upstream (e.g. 0.3.x) is intentionally *not* drift.
+ */
+export declare function upstreamDrift(): Promise<Array<{
+    pkg: string;
+    installed: string;
+    expected: string;
+}>>;
+//# sourceMappingURL=contract.d.ts.map

package/lib/dsh-adapter/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/dsh-adapter/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB,eAAe,CAAA;AAEhD,yEAAyE;AACzE,eAAO,MAAM,uBAAuB,eAAe,CAAA;AAEnD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,eAA0B,CAAA;AAEjE,uDAAuD;AACvD,eAAO,MAAM,yBAAyB;;;CAG5B,CAAA;AAEV;;;GAGG;AACH,eAAO,MAAM,yBAAyB,+KAO5B,CAAA;AAEV,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEvE,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,EAAE,EAAE,OAAO,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,YAAY,EAAE,aAAa,EAAE,CAAA;IAC7B,KAAK,EAAE,aAAa,EAAE,CAAA;IACtB,eAAe,EAAE,aAAa,EAAE,CAAA;IAChC,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAuCD,6EAA6E;AAC7E,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ5D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAa9E;AAED,0EAA0E;AAC1E,wBAAsB,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,CAkD9D;AAED;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAY1G"}

package/lib/dsh-adapter/contract.js

@@ -0,0 +1,194 @@
+/**
+ * Upstream DSH compatibility contract.
+ *
+ * Policy (2026-10-17): **do not pin the upstream DSH release line.** The
+ * project follows the newest published `@deepseek-ai/dsh-*` packages
+ * (currently the `next` dist-tag), so `package.json` uses open-ended
+ * lower bounds (`>=0.2.1-rc.2`) rather than exact versions.
+ *
+ * The contract gate therefore checks *compatibility*, not equality:
+ *   - every blessed package must be installed;
+ *   - every installed version must be >= `UPSTREAM_MIN_VERSION`;
+ *   - all blessed packages must resolve to one consistent version line
+ *     (mixed installs are the usual symptom of a partial upgrade);
+ *   - versions newer than `UPSTREAM_TESTED_VERSION` are reported as a
+ *     warning, never as a failure.
+ *
+ * `UPSTREAM_MIN_VERSION` is bumped only when an upstream change actually
+ * requires a code change here (e.g. the 0.2.x `agent/assistant-stream`
+ * replacement for `session/event assistant/chunk`).
+ */
+/**
+ * Oldest upstream line this bundle is known to work with. Raise this only
+ * together with a code migration, never just because a newer RC exists.
+ */
+export const UPSTREAM_MIN_VERSION = '0.2.1-rc.2';
+/** Newest upstream line exercised by the repo's own compile/gate run. */
+export const UPSTREAM_TESTED_VERSION = '0.2.1-rc.2';
+/**
+ * @deprecated Use `UPSTREAM_TESTED_VERSION` (or `UPSTREAM_MIN_VERSION` for
+ * compatibility checks). Kept as an alias so external scripts that imported
+ * the old name keep working.
+ */
+export const UPSTREAM_VALIDATED_VERSION = UPSTREAM_TESTED_VERSION;
+/** Framework packages compared by major/minor only. */
+export const UPSTREAM_FRAMEWORK_MAJORS = {
+    '@deepseek-ai/cordis': '>=4.0.5',
+    '@deepseek-ai/schemastery': '>=3.18.5',
+};
+/**
+ * Packages whose versions must move together. Keeping this list small is
+ * deliberate: it covers the API surface this bundle imports directly.
+ */
+export const UPSTREAM_BLESSED_PACKAGES = [
+    '@deepseek-ai/dsh-agent',
+    '@deepseek-ai/dsh-llm',
+    '@deepseek-ai/dsh-tools',
+    '@deepseek-ai/dsh-session',
+    '@deepseek-ai/dsh-system-prompt',
+    '@deepseek-ai/dsh-scope',
+];
+function parseVersion(value) {
+    const [core = '', pre = ''] = value.split('-', 2);
+    const parts = core.split('.').map((part) => {
+        const n = Number.parseInt(part, 10);
+        return Number.isFinite(n) ? n : 0;
+    });
+    return { parts, prerelease: pre.length > 0 ? pre.split('.') : [] };
+}
+function comparePrerelease(a, b) {
+    // A release sorts above any prerelease of the same core version.
+    if (a.length === 0 && b.length === 0)
+        return 0;
+    if (a.length === 0)
+        return 1;
+    if (b.length === 0)
+        return -1;
+    const length = Math.max(a.length, b.length);
+    for (let i = 0; i < length; i++) {
+        const x = a[i];
+        const y = b[i];
+        if (x === undefined)
+            return -1;
+        if (y === undefined)
+            return 1;
+        const xNumeric = /^\d+$/.test(x);
+        const yNumeric = /^\d+$/.test(y);
+        if (xNumeric && yNumeric) {
+            const diff = Number(x) - Number(y);
+            if (diff !== 0)
+                return diff < 0 ? -1 : 1;
+        }
+        else if (xNumeric) {
+            return -1;
+        }
+        else if (yNumeric) {
+            return 1;
+        }
+        else {
+            const cmp = x.localeCompare(y);
+            if (cmp !== 0)
+                return cmp < 0 ? -1 : 1;
+        }
+    }
+    return 0;
+}
+/** Semver-ish comparison that also understands `-rc.1` style prereleases. */
+export function compareVersions(a, b) {
+    const pa = parseVersion(a);
+    const pb = parseVersion(b);
+    for (let i = 0; i < 3; i++) {
+        const diff = (pa.parts[i] ?? 0) - (pb.parts[i] ?? 0);
+        if (diff !== 0)
+            return diff < 0 ? -1 : 1;
+    }
+    return comparePrerelease(pa.prerelease, pb.prerelease);
+}
+export function versionAtLeast(value, minimum) {
+    return compareVersions(value, minimum) >= 0;
+}
+/**
+ * Read installed versions by walking the consumer's `node_modules/<pkg>/package.json`.
+ * Missing packages are reported, not thrown: a host may provide them lazily.
+ */
+export async function installedUpstreamVersions() {
+    const { createRequire } = await import('node:module');
+    const require = createRequire(import.meta.url);
+    const result = new Map();
+    for (const pkg of UPSTREAM_BLESSED_PACKAGES) {
+        try {
+            const manifest = require(`${pkg}/package.json`);
+            result.set(pkg, manifest.version);
+        }
+        catch {
+            // not installed; reported as `missing`
+        }
+    }
+    return result;
+}
+/** Full compatibility report used by the CI gate and boot diagnostics. */
+export async function upstreamReport() {
+    const installedMap = await installedUpstreamVersions();
+    const installed = {};
+    const missing = [];
+    const belowMinimum = [];
+    const newerThanTested = [];
+    for (const pkg of UPSTREAM_BLESSED_PACKAGES) {
+        const version = installedMap.get(pkg);
+        if (version === undefined) {
+            missing.push(pkg);
+            continue;
+        }
+        installed[pkg] = version;
+        if (!versionAtLeast(version, UPSTREAM_MIN_VERSION)) {
+            belowMinimum.push({ pkg, installed: version });
+        }
+        if (compareVersions(version, UPSTREAM_TESTED_VERSION) > 0) {
+            newerThanTested.push({ pkg, installed: version });
+        }
+    }
+    const versions = [...new Set(Object.values(installed))];
+    let mixed = [];
+    if (versions.length > 1) {
+        // Report the outliers relative to the most common version line.
+        const counts = new Map();
+        for (const version of Object.values(installed)) {
+            counts.set(version, (counts.get(version) ?? 0) + 1);
+        }
+        const baseline = [...counts.entries()].sort((a, b) => b[1] - a[1])[0]?.[0];
+        mixed = Object.entries(installed)
+            .filter(([, version]) => version !== baseline)
+            .map(([pkg, version]) => ({ pkg, installed: version }));
+    }
+    return {
+        // Missing packages are a hard failure for the CI gate (the repo installs
+        // them as devDependencies). Runtime consumers use `upstreamDrift()`, which
+        // intentionally ignores `missing` because the host may provide them.
+        ok: missing.length === 0 && belowMinimum.length === 0 && mixed.length === 0,
+        minimum: UPSTREAM_MIN_VERSION,
+        tested: UPSTREAM_TESTED_VERSION,
+        installed,
+        missing,
+        belowMinimum,
+        mixed,
+        newerThanTested,
+        versions,
+    };
+}
+/**
+ * Boot-time drift: only conditions that are actually incompatible.
+ * A newer upstream (e.g. 0.3.x) is intentionally *not* drift.
+ */
+export async function upstreamDrift() {
+    const report = await upstreamReport();
+    return [
+        ...report.belowMinimum.map((entry) => ({
+            ...entry,
+            expected: UPSTREAM_MIN_VERSION,
+        })),
+        ...report.mixed.map((entry) => ({
+            ...entry,
+            expected: 'one consistent upstream version line',
+        })),
+    ];
+}

package/lib/dsh-adapter/desktop-cookie-janitor.d.ts

@@ -0,0 +1,214 @@
+/**
+ * desktop-cookie-janitor — §7.145 桌面版「起不来」的根因修复。
+ *
+ * ## 现象（主人现场，2026-10-28）
+ *
+ * 桌面版反复起不来，报 "DeepSeek Harness is unavailable"。审计链里能看到
+ * **18 次「插件加载完 0.1 秒就死」的启动**（每次只有 8 条事件：
+ * config.loaded → policy.loaded → boot.probe → 4 条 hook 注册，然后戛然而止）。
+ *
+ * ## 根因
+ *
+ * 桌面版每次启动都用**随机端口**起 web 服务
+ * （apps/desktop-host/src/index.ts: `args: ['--no-open','--host','127.0.0.1','--port','0']`），
+ * 宿主据此签发浏览器会话 cookie：
+ *
+ *   cookie 名 = "dsh-auth-" + base64url(sha256(authority))   // authority = "127.0.0.1:<port>"
+ *
+ * **端口进了 cookie 名** ⇒ 每次启动都是一条**新名字**的 cookie ⇒ 上一轮的 cookie
+ * 既不会被命中、也不会因为端口复用而覆盖 ⇒ Chromium 的 cookie jar 无限增长。
+ *
+ * Chromium 把**同一 host 的全部 cookie** 塞进 Cookie 头（cookie 不按端口隔离，
+ * 只有名字里带了端口）⇒ Electron 外壳的 welcome 握手
+ * （app.asar/lib/main.js:8885 `net.fetch(url, {credentials:'include'})`）带着
+ * 一大堆 cookie 出发 ⇒ 宿主 web 服务是裸 `createServer(listener)`
+ * （@deepseek-ai/dsh-host-webserver/lib/index.js:566，未设 maxHeaderSize）
+ * ⇒ Node 默认 16384 B 头上限 ⇒ **431 Request Header Fields Too Large**
+ * ⇒ 外壳判定 `!authenticated.ok` ⇒ 拆掉宿主 ⇒ 「unavailable」。
+ *
+ * 实测：71 条 cookie = 16.2 KB（每条 227 B）⇒ 约 69 次启动就撞线。
+ *
+ * ## 为什么是本插件来修
+ *
+ * 实测时间线（2026-10-29 01:08:23 一次真实启动）：
+ *
+ *   01:08:23.030  我们的插件加载（config.loaded）
+ *   01:08:25.979  Electron 锁住 cookie 库（welcome 握手触发网络服务）
+ *
+ * ⇒ 插件加载后有**约 3 秒的窗口**，cookie 库还没被锁 ⇒ 这时候可以把历次启动
+ * 留下的死端口 cookie 删掉。Electron 之后才打开这个库，读到的就是清理过的。
+ *
+ * 同时把宿主 web 服务的 `maxHeaderSize` 抬上去：即使清理没赶上（库已被锁），
+ * 一个已经攒胖的 jar 也不会再把启动打死 —— 两道防线，互不依赖。
+ *
+ * ## 只在桌面版生效
+ *
+ * 431 只发生在 Electron 外壳（只有它带 Chromium cookie jar）。headless profile
+ * （web / tui / dsh-edge-agent）由普通 Node 拉起，自己起 web 服务、客户端不带
+ * cookie jar ⇒ 同样场景不会发生。所以本插件用 `process.versions.electron`
+ * 判别运行环境，非桌面版一律跳过 —— 不去动无关 profile 里的宿主 web 服务。
+ *
+ * ## 不做什么
+ *
+ * - **不碰**非 `dsh-auth-*` 的 cookie（别的站点的）。
+ * - **不碰**当前活着端口的那条（= 本次会话的 cookie）。
+ * - **不删**认不出 audience 的行以外的东西；认不出的 auth cookie 视为残骸
+ *   （它多半来自旧版本/旧端口），但只在 `source_port` 也拿不到时才动它。
+ * - 任何一步失败都**静默降级**（返回一份报告，绝不抛）—— 观测/家���不能拖垮启动。
+ *
+ * @module dsh-edge-agent/desktop-cookie-janitor
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+export declare const name = "desktop-cookie-janitor";
+/** 无硬依赖：web 服务用 `ctx.inject(['webServer'])` 延迟取（headless profile
+ *  未必有它），cookie 库也不依赖任何服务。 */
+export declare const inject: readonly [];
+/** 宿主签发的浏览器会话 cookie 前缀（别的 cookie 一律不碰）。 */
+export declare const AUTH_COOKIE_PREFIX = "dsh-auth-";
+/** Node http.Server 的默认请求头上限（bytes）。宿主 web 服务没设 maxHeaderSize，
+ *  所以这就是宿主实际生效的门槛。 */
+export declare const NODE_MAX_HEADER_SIZE = 16384;
+/** 我们把上限抬到的值（bytes）。64 KB ≈ 280 条 cookie —— 远超 Chromium 的
+ *  每域 cookie 上限（180），所以清理一旦失效也不会顶到 Chromium 的淘汰线。 */
+export declare const DEFAULT_MAX_HEADER_BYTES = 65536;
+/** Chromium 会话 cookie 之外的请求头估值（Host / UA / sec-ch-* / Accept-* …）。 */
+export declare const OTHER_HEADER_BYTES = 600;
+/** 单条 cookie 的实测字节：name 52 + value 173 + 2 个分隔符 ≈ 227。 */
+export declare const PER_COOKIE_BYTES = 227;
+/** cookie 库中的一行（只取我们用得到的列）。 */
+export interface CookieRow {
+    host_key: string;
+    name: string;
+    value: string;
+    source_port: number | null;
+}
+/**
+ * 从 cookie 里取出 audience（`host:port`）。
+ *
+ * 宿主签发的是 `v1.<base64url(json)>.<hmac>`，json 里带 authority；但 Chromium
+ * 在 Windows 上会用 DPAPI 加密 `value` 列 ⇒ 解析多半失败 ⇒ 退回
+ * `host_key` + `source_port`（Chromium 自己记的源端口，一直是对的）。
+ */
+export declare function authorityOf(cookie: CookieRow): string | undefined;
+/** 从 audience 里取端口。 */
+export declare function portOf(authority: string | undefined): number | undefined;
+/**
+ * 请求头投影：Chromium 会把同一 host 的全部 cookie 塞进 Cookie 头。
+ *
+ * @param cookies - 参与发送的 cookie 行
+ */
+export declare function projectHeaderBytes(cookies: CookieRow[]): number;
+/** 还能撑几次启动（每次新增一条 cookie）。 */
+export declare function remainingLaunches(cookies: CookieRow[]): number;
+/** 一条 cookie 的判定结果。 */
+export interface CookieVerdict {
+    cookie: CookieRow;
+    authority: string | undefined;
+    port: number | undefined;
+    /** 端口已死 = 历次启动的残骸，可以删。 */
+    stale: boolean;
+    reason: string;
+}
+/**
+ * 把 auth cookie 分成「活的」与「死的」。
+ *
+ * @param cookies - 库里的全部行（函数自己只挑 `dsh-auth-*`）
+ * @param isAlive - (port) => Promise<boolean>，端口存活探针（可注入以便自证）
+ */
+export declare function classifyCookies(cookies: CookieRow[], isAlive: (port: number) => Promise<boolean>): Promise<{
+    auth: CookieRow[];
+    foreign: CookieRow[];
+    stale: CookieVerdict[];
+    live: CookieVerdict[];
+}>;
+/**
+ * 抬高 web 服务的请求头上限。
+ *
+ * Node 在**每条连接**建立时把 `server.maxHeaderSize` 读进 parser ⇒ 在握手
+ * 之前改好即可生效。
+ *
+ * ⚠️ 实测坑：`http.createServer()` 建出来的 server 上，`maxHeaderSize` 是
+ * **undefined**（不是 16384！）—— Node 把默认值放在 parser 里。所以
+ * 「读到的不是数字 ⇒ 不是 http server」这个判据是错的，会让这道防线永远
+ * 抬不上。真正的判据是「它像不像一个 http server」（有 listen/close）。
+ *
+ * @returns 是否真的改了（false = 没接口 / 已经够大 / 被禁用 / 不是 server）
+ */
+export declare function applyHeaderBudget(server: unknown, bytes: number): boolean;
+/** 桌面版 cookie 库的默认位置（各平台 Electron userData 目录）。 */
+export declare function defaultJarPath(env?: NodeJS.ProcessEnv): string;
+/** 端口上是否还有进程在监听（= 该 cookie 的宿主还活着）。 */
+export declare function probePort(port: number, host?: string, timeoutMs?: number): Promise<boolean>;
+/** 清理结果（给日志看的客观事实，不含任何 cookie 明文）。 */
+export interface JanitorReport {
+    /** cookie 库路径（不存在 ⇒ 根本没有桌面版环境）。 */
+    jar: string;
+    /** 库可读吗？不可读 = 打不开（被 Electron 锁着 / 文件损坏）。 */
+    opened: boolean;
+    /** 库里的 auth cookie 总数。 */
+    authCount: number;
+    /** 删掉的条数。 */
+    removed: number;
+    /** 清理后的请求头投影字节数。 */
+    projectedBytes: number;
+    /** 清理后还能撑几次启动。 */
+    launchesLeft: number;
+    /** 出错时的说明（可空）。 */
+    error?: string;
+}
+/**
+ * 清一次 cookie 库。
+ *
+ * 全程不抛：库不存在 / 被 Electron 锁着 / 没有 node:sqlite —— 都只写进报告。
+ */
+export declare function cleanCookieJar(jarPath: string, isAlive?: (port: number) => Promise<boolean>): Promise<JanitorReport>;
+export interface Config {
+    /** 关掉整个插件（默认开）。 */
+    enabled: boolean;
+    /** 请求头上限（bytes）；0 = 不动宿主。 */
+    maxHeaderBytes: number;
+    /** cookie 库路径；空 = 按平台默认猜。 */
+    jarPath: string;
+}
+export declare const Config: Schema<Config>;
+interface WebServerFace {
+    server?: {
+        maxHeaderSize?: number;
+    };
+}
+/** 宿主 web 服务（@deepseek-ai/dsh-host-webserver）注入的服务名。 */
+export declare const WEB_SERVER_SERVICE = "webServer";
+/**
+ * 是不是跑在 Electron 里（= 桌面版）。
+ *
+ * 桌面版的宿主进程是 Electron 以 `ELECTRON_RUN_AS_NODE=1` 拉起来的
+ * （apps/desktop-host/src/index.ts 的 packageManager），所以宿主进程里
+ * `process.versions.electron` 有值（实测 44.7.0）。headless profile
+ * （web / tui / dsh-edge-agent）由普通 Node 拉起 ⇒ 没有这个字段。
+ */
+export declare function isDesktopRuntime(versions?: Record<string, string | undefined>): boolean;
+/**
+ * 从 inject 回调拿到的 ctx 代理里取出宿主 web 服务。
+ *
+ * cordis 的 `ctx.inject(deps, cb)` 把 **ctx 代理**交给回调（不是服务本身），
+ * 注入的服务要从代理上按**服务名**取（`raw.webServer`）；直接读别的属性
+ * 会被代理拒绝（"cannot get property X without inject"）。
+ */
+export declare function webServerOf(raw: unknown): WebServerFace | undefined;
+/** 立刻抬高上限（web 服务的 http server 已经存在时）。 */
+export declare function raiseHeaderBudget(raw: unknown, bytes: number): boolean;
+/**
+ * 等 web 服务把 http server 建出来，再抬上限。
+ *
+ * 宿主 web 服务的 `server` 字段是在 `listen` 的 effect 里创建的
+ * （`this.server = createServer(listener)`），而 inject 回调在**服务构造**时
+ * 就触发了 ⇒ 那一刻 `server` 还是 undefined。所以这里短轮询一下：等它出现
+ * 立刻抬（赶在 Electron 的 welcome 握手之前），最多等 ~2 秒。
+ *
+ * @returns 是否抬成功
+ */
+export declare function raiseHeaderBudgetWhenReady(raw: unknown, bytes: number, attempts?: number, intervalMs?: number, schedule?: (fn: () => void, ms: number) => void): Promise<boolean>;
+export declare function apply(ctx: Context, config: Config): Promise<() => void>;
+export {};
+//# sourceMappingURL=desktop-cookie-janitor.d.ts.map

package/lib/dsh-adapter/desktop-cookie-janitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktop-cookie-janitor.d.ts","sourceRoot":"","sources":["../../src/dsh-adapter/desktop-cookie-janitor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAM7C,eAAO,MAAM,IAAI,2BAA2B,CAAA;AAE5C;8BAC8B;AAC9B,eAAO,MAAM,MAAM,aAAc,CAAA;AAEjC,4CAA4C;AAC5C,eAAO,MAAM,kBAAkB,cAAc,CAAA;AAE7C;sBACsB;AACtB,eAAO,MAAM,oBAAoB,QAAS,CAAA;AAE1C;qDACqD;AACrD,eAAO,MAAM,wBAAwB,QAAS,CAAA;AAE9C,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,MAAM,CAAA;AAErC,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,MAAM,CAAA;AAEnC,+BAA+B;AAC/B,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAID;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAkBjE;AAED,uBAAuB;AACvB,wBAAgB,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAMxE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,CAQ/D;AAED,8BAA8B;AAC9B,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,CAI9D;AAED,uBAAuB;AACvB,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,SAAS,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,0BAA0B;IAC1B,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,SAAS,EAAE,EACpB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAC1C,OAAO,CAAC;IAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAAC,KAAK,EAAE,aAAa,EAAE,CAAC;IAAC,IAAI,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC,CAqBrG;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAczE;AAID,mDAAmD;AACnD,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAS3E;AAED,uCAAuC;AACvC,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAc,EAAE,SAAS,SAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAY7F;AAyCD,sCAAsC;AACtC,MAAM,WAAW,aAAa;IAC5B,mCAAmC;IACnC,GAAG,EAAE,MAAM,CAAA;IACX,4CAA4C;IAC5C,MAAM,EAAE,OAAO,CAAA;IACf,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa;IACb,OAAO,EAAE,MAAM,CAAA;IACf,oBAAoB;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,kBAAkB;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAsC1H;AAID,MAAM,WAAW,MAAM;IACrB,mBAAmB;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,6BAA6B;IAC7B,cAAc,EAAE,MAAM,CAAA;IACtB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAIhC,CAAA;AAEF,UAAU,aAAa;IACrB,MAAM,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACpC;AAED,wDAAwD;AACxD,eAAO,MAAM,kBAAkB,cAAc,CAAA;AAE7C;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAoB,GAAG,OAAO,CAEzG;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CAEnE;AAED,yCAAyC;AACzC,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,MAAM,EACb,QAAQ,SAAK,EACb,UAAU,SAAK,EACf,QAAQ,GAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,IAAiB,GAC1D,OAAO,CAAC,OAAO,CAAC,CAclB;AAID,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CA8C7E"}