@dsh-electron/dsh-plugin-multi-root-workspace 0.1.0

package/lib/types/scope.d.ts

@@ -0,0 +1,120 @@
+/**
+ * The multi-root workspace scope: the plugin's single home for the question
+ * "which directories belong to this workspace".
+ *
+ * The primary root is never stored here — it is the session's immutable cwd as
+ * resolved by the upstream `ctx.sandboxPolicy` service. This service owns the
+ * additional roots, the canonical key that indexes them, and the one model-facing
+ * statement of that topology, so every enforcing provider (fs fence,
+ * kernel-sandbox dialects) and the prompt snapshot all resolve the same scope.
+ *
+ * The root table is still filled by the registry's own API (tests and smoke
+ * scripts today; plugin storage in M3). Keeping the empty case on the same code
+ * path as the populated one is deliberate — the pass-through safety net must
+ * exercise the real provider wiring, not a stub that later gets replaced.
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/scope
+ */
+import { Context, Service } from '@deepseek-ai/cordis';
+import type { SandboxExecutionPolicy } from '@deepseek-ai/dsh-sandbox';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        multiRootScope: MultiRootScopeService;
+    }
+}
+/** One configured additional root, as the registry persists it. */
+export interface AdditionalWorkspaceRoot {
+    /** Stable registry identity (opaque; M3 brands it). */
+    id: string;
+    /** Canonical absolute directory, as spelled in the registration. */
+    path: string;
+    /**
+     * The canonical directory this registration was granted for (the `realpath`
+     * captured when the operator registered it). The root is granted only while
+     * `canonicalPath(path)` still equals this value: re-resolving a path is NOT
+     * re-authorizing it, because whoever can replace the directory (or a symlink
+     * in its chain) could otherwise move the grant to a directory no operator
+     * ever registered.
+     */
+    recordedPath: string;
+    /** Optional display alias. */
+    alias?: string;
+}
+/**
+ * The resolved scope of one confined call. `primaryRoot` equals the policy's
+ * workspace root; `additionalRoots` are canonical, deduplicated, never equal to
+ * the primary root, and empty in M1.
+ */
+export interface FilesystemScope {
+    /** The session's workspace root (`session.header.cwd`, canonical). */
+    primaryRoot: string;
+    /** Extra writable roots granted inside the same sandbox mechanism. */
+    additionalRoots: readonly string[];
+}
+/**
+ * Canonicalize and sanitize one root list against a primary root: drop the
+ * primary itself, duplicates, missing/non-directory paths, and any root whose
+ * current resolution no longer matches the directory it was registered for;
+ * preserve registry order.
+ *
+ * The last rule is the security-relevant one. `canonicalPath` is `realpath`, so
+ * a registered directory that has since been replaced by a symlink resolves to
+ * a different directory — granting that would hand out a directory nobody
+ * registered, on nothing more than a local replace. A registration whose
+ * resolution moved is therefore withheld here (the registry reports it as
+ * `redirected`), and it comes back only when the path resolves to the recorded
+ * directory again.
+ *
+ * @param primaryRoot - the canonical primary root to exclude.
+ * @param roots - candidate roots, in registry order.
+ * @returns the sanitized additional roots.
+ */
+export declare function sanitizeAdditionalRoots(primaryRoot: string, roots: readonly AdditionalWorkspaceRoot[]): string[];
+/**
+ * The name of the runtime-context contribution that tells the model which extra
+ * roots belong to this session's workspace.
+ */
+export declare const MULTI_ROOT_CONTEXT_NAME = "multi-root:scope";
+/**
+ * Render the workspace topology the model is told about. Only roots are listed
+ * (never files), and the sentence states the two facts a denied write would
+ * otherwise have to teach: that the additional roots are part of the SAME
+ * workspace, and that the session cwd is unchanged (requirement §5, §8).
+ * @param primaryRoot - the canonical session workspace root.
+ * @param additionalRoots - canonical additional roots, in scope order.
+ * @returns the stable topology sentence.
+ */
+export declare function renderWorkspaceRootsContext(primaryRoot: string, additionalRoots: readonly string[]): string;
+/**
+ * The `ctx.multiRootScope` service. Providers ask it — never the filesystem —
+ * what the current scope is, which is what keeps the fs fence and every kernel
+ * dialect on one permission world (requirement §13).
+ */
+export declare class MultiRootScopeService extends Service {
+    /** Additional roots keyed by canonical primary root; empty until roots are registered. */
+    private readonly rootsByPrimary;
+    constructor(ctx: Context);
+    /**
+     * Resolve the scope of one confined call.
+     * @param policy - the upstream policy whose workspace root is the primary root.
+     * @returns the canonical scope; `additionalRoots` is empty when none are registered.
+     */
+    resolve(policy: SandboxExecutionPolicy): FilesystemScope;
+    /**
+     * The additional roots registered for one canonical primary root.
+     * @param primaryRoot - canonical primary root (or any spelling thereof).
+     * @returns the canonical additional roots; empty when none are registered.
+     */
+    scopeOf(primaryRoot: string): readonly string[];
+    /**
+     * Replace the roots registered for one primary root.
+     *
+     * M1 uses this from tests and smoke scripts only; M3 feeds it from plugin
+     * storage. It is a plain setter so the transition swaps the data source
+     * without touching any provider.
+     * @param primaryRoot - canonical primary root to register roots under.
+     * @param roots - the additional roots, in display order.
+     */
+    setAdditionalRoots(primaryRoot: string, roots: readonly AdditionalWorkspaceRoot[]): void;
+}
+export default MultiRootScopeService;

package/package.json

@@ -0,0 +1,145 @@
+{
+  "name": "@dsh-electron/dsh-plugin-multi-root-workspace",
+  "description": "Multi-root Workspace for DeepSeek Harness: adds N additional roots to the workspace sandbox scope as an out-of-tree bundle",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./fs": {
+      "types": "./lib/types/fs.d.ts",
+      "default": "./lib/fs.js"
+    },
+    "./sandbox": {
+      "types": "./lib/types/sandbox.d.ts",
+      "default": "./lib/sandbox.js"
+    },
+    "./scope": {
+      "types": "./lib/types/scope.d.ts",
+      "default": "./lib/scope.js"
+    },
+    "./registry": {
+      "types": "./lib/types/registry.d.ts",
+      "default": "./lib/registry.js"
+    },
+    "./command": {
+      "types": "./lib/types/command.d.ts",
+      "default": "./lib/command.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/*.js",
+    "lib/*.js.map",
+    "lib/types/**/*.d.ts",
+    "cordis.patch.yml",
+    "README.md",
+    "README.en.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cherrchen/dsh-plugin-multi-root-workspace.git"
+  },
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "license": "MIT",
+  "peerDependencies": {
+    "@deepseek-ai/cordis": ">=4.0.1 <5.0.0",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.2-alpha.4 <0.2.0",
+    "@deepseek-ai/dsh-commands": ">=0.1.2-alpha.4 <0.2.0",
+    "@deepseek-ai/dsh-fs": ">=0.1.2-alpha.4 <0.2.0",
+    "@deepseek-ai/dsh-fs-local": ">=0.1.2-alpha.4 <0.2.0",
+    "@deepseek-ai/dsh-sandbox": ">=0.1.2-alpha.4 <0.2.0",
+    "@deepseek-ai/dsh-sandbox-local": ">=0.1.2-alpha.4 <0.2.0",
+    "@deepseek-ai/dsh-sandbox-policy": ">=0.1.2-alpha.4 <0.2.0",
+    "@deepseek-ai/dsh-storage-domain": ">=0.1.2-alpha.4 <0.2.0",
+    "@deepseek-ai/dsh-subprocess": ">=0.1.2-alpha.4 <0.2.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-app-boot": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-base": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-sidebar": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-commands": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-fs": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-fs-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-fs-sandbox": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-storage": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-storage-domain": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-storage-json": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-workspace": "0.1.5-rc.2",
+    "@testing-library/react": "^16.3.3",
+    "@types/node": "^22.0.0",
+    "@types/react": "~18.3.31",
+    "clsx": "^2.0.0",
+    "jsdom": "^29.1.1",
+    "oxlint": "^1.76.0",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "tsdown": "^0.22.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.8",
+    "yaml": "^2.9.0"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-ui-sidebar"
+      ]
+    }
+  },
+  "dependencies": {
+    "zod": "^4.6.2"
+  },
+  "scripts": {
+    "build": "pnpm run build:types && pnpm run bundle",
+    "build:types": "tsc -p tsconfig.host.json && tsc -p tsconfig.client.json",
+    "bundle": "tsdown",
+    "docs:check": "node scripts/check-docs.mjs",
+    "kernel:probe": "node scripts/check-kernel-runner.mjs",
+    "lint": "oxlint",
+    "release": "node scripts/bump-version.mjs",
+    "smoke": "pnpm smoke:compose && pnpm smoke:behavior && pnpm smoke:journey",
+    "smoke:behavior": "node scripts/smoke-behavior.mjs",
+    "smoke:compose": "node scripts/smoke-compose.mjs",
+    "smoke:journey": "node scripts/smoke-journey.mjs",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc -p tsconfig.host.json --noEmit && tsc -p tsconfig.client.json --noEmit"
+  }
+}