@dsh-plugin/dsh-loader 1.0.0 → 1.1.0-dev.32287576957

package/dist/adapters/dsh-1-x.js

@@ -0,0 +1,223 @@
+// dsh 1.x host adapter (design.md §7.4 / §5.1 / §3.3.1).
+//
+// Absorbs the verified repairs from dsh-upstream-fixes:
+//   - httpServer -> webServer single-hop service alias (fix 2).
+//   - settings namespace whitelist bypass bridge, gated behind
+//     `exposeAllNamespaces` (fix 5). Two independent paths:
+//       * host side: ctx.dshLoader.settings.* (handled by services/settings.ts
+//         + the bridge routes registered here for the browser fetch path).
+//       * client side: fetch interceptor in src/client.ts.
+//   - package-name aliasing for host-side CJS require (createRequire /
+//     require()) — intercepts Module._resolveFilename so a renamed dsh
+//     package resolves to its new name without plugin rebuilds.
+//
+// All registrations go through ctx.reflect.provide / ctx.effect so cordis
+// auto-recycles them when the dshloader fiber unloads (design.md §4.4). No
+// custom dispose() is needed for v1's covered capabilities.
+import { LOG_PREFIX } from '../version.js';
+import { toNamespaceView, settingsErrorToResult } from '../services/settings.js';
+// Covers the real dsh release line (0.1.0-rc.x, verified against
+// dsh-upstream-fixes) and the anticipated 1.x line. The adapter name keeps
+// the design-doc label "dsh-1-x"; the behavior is identical across both
+// ranges since dsh-upstream-fixes confirms httpServer->webServer + settings
+// bridge work the same way on 0.1.0-rc.7.
+export const supports = '>=0.1.0-rc.1 <2.0.0';
+export const name = 'dsh-1-x';
+// Browser-facing bridge prefix; the client fetch interceptor (src/client.ts)
+// must use the same prefix.
+export const BRIDGE_PREFIX = '/api/dshloader';
+// Host-side package-name aliases. Maps stable @dshloader/* names to the
+// real dsh package names for this version. Plugins should require() from
+// the stable names; the Module._resolveFilename hook maps them to the real
+// package. When dsh renames a host package, only this table changes.
+//
+// This intercepts CJS require() (including createRequire) via
+// Module._resolveFilename; ESM static imports are build-time resolved and
+// cannot be intercepted at runtime (use pnpm overrides / tsconfig paths
+// for those).
+export const hostPackageAliases = {
+    '@dsh-plugin/dsh-loader/tools': '@deepseek-ai/dsh-tools',
+    '@dsh-plugin/dsh-loader/llm': '@deepseek-ai/dsh-llm',
+    '@dsh-plugin/dsh-loader/agent': '@deepseek-ai/dsh-agent',
+    '@dsh-plugin/dsh-loader/settings': '@deepseek-ai/dsh-settings',
+};
+/**
+ * Install a Module._resolveFilename hook that maps old package names to
+ * new ones for CJS require() calls. Returns a dispose function that
+ * removes the hook.
+ */
+export async function installHostPackageAliases(aliases) {
+    const entries = Object.entries(aliases);
+    if (entries.length === 0)
+        return () => { };
+    const aliasMap = new Map(entries);
+    // Lazy-import Module to avoid loading it in browser/test contexts.
+    let Module;
+    try {
+        const mod = await import('node:module');
+        const nodeModule = mod.default ?? mod.Module ?? mod;
+        Module = nodeModule;
+    }
+    catch {
+        return () => { };
+    }
+    if (!Module || typeof Module._resolveFilename !== 'function')
+        return () => { };
+    const original = Module._resolveFilename;
+    const hooked = function dshloaderResolve(request, parent, ...rest) {
+        const mapped = aliasMap.get(request);
+        if (mapped !== undefined)
+            return original.call(this, mapped, parent, ...rest);
+        return original.call(this, request, parent, ...rest);
+    };
+    Module._resolveFilename = hooked;
+    return () => {
+        if (Module && Module._resolveFilename === hooked)
+            Module._resolveFilename = original;
+    };
+}
+/**
+ * @param ctx cordis context
+ * @param config
+ */
+export function create(ctx, config = {}) {
+    const exposeAllNamespaces = Boolean(config.exposeAllNamespaces);
+    const packageAliases = { ...hostPackageAliases, ...(config.hostPackageAliases ?? {}) };
+    async function apply() {
+        // --- service alias: httpServer -> webServer (fix 2) ---
+        if (ctx.get('httpServer') === undefined) {
+            const webServer = ctx.get('webServer');
+            if (webServer !== undefined) {
+                ctx.reflect.provide('httpServer', webServer);
+                console.log(`${LOG_PREFIX} aliased httpServer -> webServer`);
+            }
+        }
+        else {
+            console.log(`${LOG_PREFIX} httpServer already exists, skip alias`);
+        }
+        // --- host package-name aliases (CJS require interception) ---
+        if (Object.keys(packageAliases).length > 0) {
+            ctx.effect(() => installHostPackageAliases(packageAliases), 'dshloader: host package-name aliases');
+            console.log(`${LOG_PREFIX} installed host package aliases: ${Object.keys(packageAliases).join(', ')}`);
+        }
+        // --- settings bridge routes for the browser fetch path (fix 5, path 2) ---
+        // Only registered when the profile explicitly opts in. The host-side
+        // stable API (ctx.dshLoader.settings.*) is unaffected by this gate and
+        // always available to host plugin code.
+        if (exposeAllNamespaces) {
+            ctx.effect(() => registerSettingsBridgeRoutes(ctx), 'dshloader: settings namespace bridge routes');
+        }
+    }
+    function dispose() {
+        // No cordis-unaware resources held in v1; effect auto-recycle covers
+        // everything registered in apply(). Implemented as a no-op to satisfy
+        // the HostAdapter interface and future hot-swap scenarios.
+    }
+    return { supports, name, apply, dispose };
+}
+/**
+ * Register host bridge routes that the client fetch interceptor forwards
+ * non-whitelisted settings requests to. Mirrors dsh-upstream-fixes/lib/index.js
+ * `registerRoutes` (settings section).
+ */
+function registerSettingsBridgeRoutes(ctx) {
+    const webServer = ctx.get('webServer') ?? ctx.get('httpServer');
+    if (webServer === undefined || typeof webServer.register !== 'function')
+        return () => { };
+    return webServer.register({
+        kind: 'prefix',
+        path: BRIDGE_PREFIX,
+        handler: (req, res) => {
+            const json = (status, body) => {
+                res.statusCode = status;
+                res.setHeader('content-type', 'application/json');
+                res.end(JSON.stringify(body));
+            };
+            const readBody = () => new Promise((done, fail) => {
+                let body = '';
+                req.on?.('data', (chunk) => {
+                    body += chunk.toString('utf8');
+                });
+                req.on?.('end', () => done(body));
+                req.on?.('error', fail);
+            });
+            const url = req.url ?? '/';
+            const method = (req.method ?? 'GET').toUpperCase();
+            const path = url.split('?')[0] ?? '/';
+            void (async () => {
+                try {
+                    // GET /api/dshloader/settings/describe — full redacted namespace list.
+                    if (method === 'GET' && (path === `${BRIDGE_PREFIX}/settings/describe` || path === `${BRIDGE_PREFIX}/settings/describe/`)) {
+                        const settings = ctx.get('settings');
+                        if (settings === undefined) {
+                            json(200, { ok: false, message: 'settings service unavailable' });
+                            return;
+                        }
+                        json(200, {
+                            ok: true,
+                            namespaces: settings.describe({ redactSecrets: true }).map(toNamespaceView),
+                        });
+                        return;
+                    }
+                    // POST /api/dshloader/settings/{update,mutate,replace} — write seam.
+                    const writeMatch = /^\/api\/dshloader\/settings\/(update|mutate|replace)$/.exec(path);
+                    if (method === 'POST' && writeMatch !== null) {
+                        const mode = writeMatch[1];
+                        let parsed = {};
+                        try {
+                            parsed = JSON.parse(await readBody());
+                        }
+                        catch {
+                            /* keep {} */
+                        }
+                        const ns = typeof parsed.ns === 'string' ? parsed.ns : '';
+                        if (ns.length === 0) {
+                            json(200, {
+                                ok: true,
+                                result: {
+                                    ok: false,
+                                    code: 'settings-rejected',
+                                    message: 'settings write needs a namespace',
+                                    details: {},
+                                },
+                            });
+                            return;
+                        }
+                        const settings = ctx.get('settings');
+                        const result = await runSettingsWrite(settings, mode, ns, mode === 'mutate' ? parsed.ops : parsed.section, parsed.expectedRevision);
+                        json(200, { ok: true, result });
+                        return;
+                    }
+                    json(404, { ok: false, message: 'not found' });
+                }
+                catch (error) {
+                    json(500, { ok: false, message: error instanceof Error ? error.message : String(error) });
+                }
+            })();
+        },
+    });
+}
+async function runSettingsWrite(settings, mode, ns, section, expectedRevision) {
+    if (settings === undefined) {
+        return { ok: false, code: 'internal', message: 'settings service unavailable', details: {} };
+    }
+    try {
+        if (mode === 'update')
+            await settings.update(ns, section, expectedRevision);
+        else if (mode === 'replace')
+            await settings.replace(ns, section, expectedRevision);
+        else
+            await settings.mutate(ns, section, expectedRevision);
+    }
+    catch (error) {
+        return settingsErrorToResult(error, ns, mode);
+    }
+    const descriptor = settings
+        .describe({ redactSecrets: true })
+        .find((d) => String(d.ns) === String(ns));
+    if (descriptor === undefined) {
+        return { ok: false, code: 'internal', message: 'settings namespace disposed after write', details: { ns } };
+    }
+    return { ok: true, value: toNamespaceView(descriptor) };
+}
+//# sourceMappingURL=dsh-1-x.js.map

package/dist/adapters/dsh-1-x.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsh-1-x.js","sourceRoot":"","sources":["../../src/adapters/dsh-1-x.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,wDAAwD;AACxD,gEAAgE;AAChE,+DAA+D;AAC/D,4DAA4D;AAC5D,+EAA+E;AAC/E,2EAA2E;AAC3E,2DAA2D;AAC3D,uEAAuE;AACvE,uEAAuE;AACvE,gEAAgE;AAChE,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,4DAA4D;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAGjF,iEAAiE;AACjE,2EAA2E;AAC3E,wEAAwE;AACxE,4EAA4E;AAC5E,0CAA0C;AAC1C,MAAM,CAAC,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAC9C,MAAM,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC;AAE9B,6EAA6E;AAC7E,4BAA4B;AAC5B,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAE9C,wEAAwE;AACxE,yEAAyE;AACzE,2EAA2E;AAC3E,qEAAqE;AACrE,EAAE;AACF,8DAA8D;AAC9D,0EAA0E;AAC1E,wEAAwE;AACxE,cAAc;AACd,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACxD,8BAA8B,EAAE,wBAAwB;IACxD,4BAA4B,EAAE,sBAAsB;IACpD,8BAA8B,EAAE,wBAAwB;IACxD,iCAAiC,EAAE,2BAA2B;CAC/D,CAAC;AAOF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAA+B;IAE/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,mEAAmE;IACnE,IAAI,MAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;QACpD,MAAM,GAAG,UAA4B,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,UAAU;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACzC,MAAM,MAAM,GAAG,SAAS,gBAAgB,CAAgB,OAAe,EAAE,MAAe,EAAE,GAAG,IAAe;QAC1G,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9E,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC;IACjC,OAAO,GAAG,EAAE;QACV,IAAI,MAAM,IAAI,MAAM,CAAC,gBAAgB,KAAK,MAAM;YAAE,MAAM,CAAC,gBAAgB,GAAG,QAAQ,CAAC;IACvF,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,GAAkB,EAAE,MAAM,GAAsB,EAAE;IACvE,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,EAAE,GAAG,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,EAAE,CAAC;IAEvF,KAAK,UAAU,KAAK;QAClB,yDAAyD;QACzD,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACvC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,kCAAkC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,wCAAwC,CAAC,CAAC;QACrE,CAAC;QAED,+DAA+D;QAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,CACR,GAAG,EAAE,CAAC,yBAAyB,CAAC,cAAc,CAAC,EAC/C,sCAAsC,CACvC,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,oCAAoC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;QAED,4EAA4E;QAC5E,qEAAqE;QACrE,uEAAuE;QACvE,wCAAwC;QACxC,IAAI,mBAAmB,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CACR,GAAG,EAAE,CAAC,4BAA4B,CAAC,GAAG,CAAC,EACvC,6CAA6C,CAC9C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,SAAS,OAAO;QACd,qEAAqE;QACrE,sEAAsE;QACtE,2DAA2D;IAC7D,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5C,CAAC;AASD;;;;GAIG;AACH,SAAS,4BAA4B,CAAC,GAAkB;IACtD,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChE,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IACzF,OAAO,SAAS,CAAC,QAAQ,CAAC;QACxB,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,CAAC,GAAQ,EAAE,GAAQ,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAa,EAAE,EAAE;gBAC7C,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;gBACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,CAAC,CAAC;YACF,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,IAAI,OAAO,CAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;gBACjC,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;oBAC1C,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAClC,GAAG,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YACL,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YAEtC,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,uEAAuE;oBACvE,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,aAAa,oBAAoB,IAAI,IAAI,KAAK,GAAG,aAAa,qBAAqB,CAAC,EAAE,CAAC;wBAC1H,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;4BAC3B,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;4BAClE,OAAO;wBACT,CAAC;wBACD,IAAI,CAAC,GAAG,EAAE;4BACR,EAAE,EAAE,IAAI;4BACR,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;yBAC5E,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBAED,qEAAqE;oBACrE,MAAM,UAAU,GAAG,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACtF,IAAI,MAAM,KAAK,MAAM,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;wBAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;wBAC3B,IAAI,MAAM,GAAkF,EAAE,CAAC;wBAC/F,IAAI,CAAC;4BACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC;wBACxC,CAAC;wBAAC,MAAM,CAAC;4BACP,aAAa;wBACf,CAAC;wBACD,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1D,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BACpB,IAAI,CAAC,GAAG,EAAE;gCACR,EAAE,EAAE,IAAI;gCACR,MAAM,EAAE;oCACN,EAAE,EAAE,KAAK;oCACT,IAAI,EAAE,mBAAmB;oCACzB,OAAO,EAAE,kCAAkC;oCAC3C,OAAO,EAAE,EAAE;iCACZ;6BACF,CAAC,CAAC;4BACH,OAAO;wBACT,CAAC;wBACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBACrC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,QAAQ,EACR,IAAI,EACJ,EAAE,EACF,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAC/C,MAAM,CAAC,gBAAgB,CACxB,CAAC;wBACF,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;wBAChC,OAAO;oBACT,CAAC;oBAED,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;gBACjD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAa,EACb,IAAY,EACZ,EAAU,EACV,OAAgB,EAChB,gBAAyB;IAEzB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,8BAA8B,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;aACvE,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;;YAC9E,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,qBAAqB,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ;SACxB,QAAQ,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SACjC,IAAI,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,yCAAyC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;IAC9G,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;AAC1D,CAAC"}

package/dist/adapters/index.d.ts

@@ -0,0 +1,22 @@
+import type { AdapterFactory } from '../types.js';
+import type { AdapterRegistry } from '../registry.js';
+/** All host adapter factories, in registration order. */
+export declare const hostAdapters: AdapterFactory[];
+/** Register every built-in host adapter onto a registry. */
+export declare function registerHostAdapters(registry: AdapterRegistry): AdapterRegistry;
+export declare const clientAdapters: {
+    supports: string;
+    name: string;
+    moduleAliases: {
+        '@deepseek-ai/dsh-client-runtime/src/client/sessions/context-provenance.ts': string;
+        'dsh/runtime/context-provenance': string;
+    };
+    packageAliases: {
+        '@dsh-plugin/dsh-loader/ui-primitives': string;
+        '@dsh-plugin/dsh-loader/ui-slots': string;
+        '@dsh-plugin/dsh-loader/web-react': string;
+        '@dsh-plugin/dsh-loader/schema-form': string;
+        '@dsh-plugin/dsh-loader/ui-settings': string;
+        '@dsh-plugin/dsh-loader/runtime': string;
+    };
+}[];

package/dist/adapters/index.js

@@ -0,0 +1,57 @@
+// Adapter registration (design.md §7.4). Imports every host adapter and
+// registers it on the provided AdapterRegistry. Kept as a function so tests
+// can build a fresh registry per case.
+import * as dsh1x from './dsh-1-x.js';
+/** All host adapter factories, in registration order. */
+export const hostAdapters = [
+    { supports: dsh1x.supports, name: dsh1x.name, create: dsh1x.create },
+];
+/** Register every built-in host adapter onto a registry. */
+export function registerHostAdapters(registry) {
+    for (const factory of hostAdapters)
+        registry.register(factory);
+    return registry;
+}
+// Client adapter metadata for dsh 1.x (consumed by src/client.ts).
+//
+// packageAliases serves TWO roles:
+//   1. **Stable name → real name** (primary): plugins import from stable
+//      names like '@dshloader/ui-primitives' and the adapter maps them to
+//      the real dsh package name for this version. When dsh renames a
+//      package, only the adapter changes — plugin source and bundle stay
+//      the same.
+//   2. **Old real name → new real name** (fallback): if a plugin bundle
+//      was built before adopting stable names and still has
+//      `require('@deepseek-ai/dsh-client-ui-primitives')` baked in, the
+//      adapter can map the old real name to the new real name as a
+//      transition measure.
+export const clientAdapters = [
+    {
+        supports: dsh1x.supports,
+        name: dsh1x.name,
+        moduleAliases: {
+            // deep source import that breaks when dsh ships no `src/` (fix 1).
+            '@deepseek-ai/dsh-client-runtime/src/client/sessions/context-provenance.ts': '@deepseek-ai/dsh-client-runtime/client',
+            // stable module name (design.md §3.3.3).
+            'dsh/runtime/context-provenance': '@deepseek-ai/dsh-client-runtime/client',
+        },
+        // Stable package names → real dsh package names for dsh 1.x.
+        // Plugins import from @dsh-plugin/dsh-loader/* subpaths (e.g.
+        // '@dsh-plugin/dsh-loader/ui-primitives'); the __ModuleLoader__
+        // wrapper (installed by installClient) maps them to the real dsh
+        // package before hitting the module table. When dsh renames a
+        // package, only this table changes — plugin source and bundle stay
+        // the same.
+        packageAliases: {
+            // Client UI component libraries
+            '@dsh-plugin/dsh-loader/ui-primitives': '@deepseek-ai/dsh-client-ui-primitives',
+            '@dsh-plugin/dsh-loader/ui-slots': '@deepseek-ai/dsh-client-ui-slots',
+            '@dsh-plugin/dsh-loader/web-react': '@deepseek-ai/dsh-client-web-react',
+            '@dsh-plugin/dsh-loader/schema-form': '@deepseek-ai/dsh-client-schema-form',
+            '@dsh-plugin/dsh-loader/ui-settings': '@deepseek-ai/dsh-client-ui-settings/client',
+            // Client runtime
+            '@dsh-plugin/dsh-loader/runtime': '@deepseek-ai/dsh-client-runtime/client',
+        },
+    },
+];
+//# sourceMappingURL=index.js.map

package/dist/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4EAA4E;AAC5E,uCAAuC;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAItC,yDAAyD;AACzD,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;CACrE,CAAC;AAEF,4DAA4D;AAC5D,MAAM,UAAU,oBAAoB,CAAC,QAAyB;IAC5D,KAAK,MAAM,OAAO,IAAI,YAAY;QAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mEAAmE;AACnE,EAAE;AACF,mCAAmC;AACnC,yEAAyE;AACzE,0EAA0E;AAC1E,sEAAsE;AACtE,yEAAyE;AACzE,iBAAiB;AACjB,wEAAwE;AACxE,4DAA4D;AAC5D,wEAAwE;AACxE,mEAAmE;AACnE,2BAA2B;AAC3B,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B;QACE,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,aAAa,EAAE;YACb,mEAAmE;YACnE,2EAA2E,EACzE,wCAAwC;YAC1C,yCAAyC;YACzC,gCAAgC,EAAE,wCAAwC;SAC3E;QACD,6DAA6D;QAC7D,8DAA8D;QAC9D,gEAAgE;QAChE,iEAAiE;QACjE,8DAA8D;QAC9D,mEAAmE;QACnE,YAAY;QACZ,cAAc,EAAE;YACd,gCAAgC;YAChC,sCAAsC,EAAE,uCAAuC;YAC/E,iCAAiC,EAAE,kCAAkC;YACrE,kCAAkC,EAAE,mCAAmC;YACvE,oCAAoC,EAAE,qCAAqC;YAC3E,oCAAoC,EAAE,4CAA4C;YAClF,iBAAiB;YACjB,gCAAgC,EAAE,wCAAwC;SAC3E;KACF;CACF,CAAC"}

package/dist/api.d.ts

@@ -0,0 +1,13 @@
+import type { CordisContext, AdapterFactory, HostAdapter, HostAPI } from './types.js';
+/**
+ * @param opts
+ */
+export declare function createHostAPI(opts: {
+    ctx: CordisContext;
+    dshVersion: string;
+    factory: AdapterFactory;
+    adapter?: HostAdapter;
+    exposeAllNamespaces?: boolean;
+    whitelist?: Set<string>;
+    hostPackageAliases?: Record<string, string>;
+}): HostAPI;

package/dist/api.js

@@ -0,0 +1,46 @@
+// DshLoaderHostAPI construction (design.md §4.1 / §4.4).
+//
+// `createHostAPI` builds the `ctx.dshLoader` object exposed to other plugins.
+// Each capability (settings / web / services) is constructed from the active
+// adapter's overrides when present, otherwise from the default stable impl in
+// src/services/*.ts. The adapter's `apply()` is invoked separately by the
+// bundle entry (src/index.ts) so service aliases / bridge routes register via
+// cordis effects and auto-recycle on fiber unload (design.md §4.4).
+import { LOADER_VERSION } from './version.js';
+import { createSettingsAPI } from './services/settings.js';
+import { createWebAPI } from './services/web.js';
+import { createServicesAPI } from './services/services.js';
+import { installHostPackageAliases } from './adapters/dsh-1-x.js';
+/**
+ * @param opts
+ */
+export function createHostAPI(opts) {
+    const { ctx, dshVersion, factory, adapter, exposeAllNamespaces = false, whitelist, hostPackageAliases = {}, } = opts;
+    const base = {
+        version: LOADER_VERSION,
+        dshVersion,
+        adapterVersion: factory.supports,
+    };
+    // Adapters may override any capability (design.md §4.4 HostAdapter.{settings,
+    // web, services}); otherwise the default stable impl is used.
+    const settings = adapter?.settings ?? createSettingsAPI({ ctx, exposeAllNamespaces, whitelist });
+    const web = adapter?.web ?? createWebAPI({ ctx });
+    const services = adapter?.services ?? createServicesAPI({ ctx });
+    // Runtime host package-name alias registration. The adapter's apply()
+    // installs the static set at boot; this method lets plugins add more
+    // aliases at runtime (e.g. for packages the adapter didn't know about).
+    const runtimeHostAliases = new Map(Object.entries(hostPackageAliases));
+    const registerPackageAlias = (oldName, newName) => {
+        runtimeHostAliases.set(oldName, newName);
+        // Re-install the hook with the updated map.
+        installHostPackageAliases(Object.fromEntries(runtimeHostAliases));
+    };
+    return {
+        ...base,
+        settings,
+        web,
+        services,
+        registerPackageAlias,
+    };
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,oEAAoE;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAWlE;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAQ7B;IACC,MAAM,EACJ,GAAG,EACH,UAAU,EACV,OAAO,EACP,OAAO,EACP,mBAAmB,GAAG,KAAK,EAC3B,SAAS,EACT,kBAAkB,GAAG,EAAE,GACxB,GAAG,IAAI,CAAC;IAET,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,cAAc;QACvB,UAAU;QACV,cAAc,EAAE,OAAO,CAAC,QAAQ;KACjC,CAAC;IAEF,8EAA8E;IAC9E,8DAA8D;IAC9D,MAAM,QAAQ,GACZ,OAAO,EAAE,QAAQ,IAAI,iBAAiB,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC;IAClF,MAAM,GAAG,GAAW,OAAO,EAAE,GAAG,IAAI,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAgB,OAAO,EAAE,QAAQ,IAAI,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAE9E,sEAAsE;IACtE,qEAAqE;IACrE,wEAAwE;IACxE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACvE,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAE,OAAe,EAAQ,EAAE;QACtE,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,4CAA4C;QAC5C,yBAAyB,CAAC,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,IAAI;QACP,QAAQ;QACR,GAAG;QACH,QAAQ;QACR,oBAAoB;KACrB,CAAC;AACJ,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,157 @@
+/** Browser-only globals dshloader relies on (typed loosely so the module compiles without DOM lib). */
+type FetchImpl = (input: any, init?: any) => Promise<{
+    clone(): {
+        json(): any;
+    };
+    json(): any;
+}>;
+interface DshLoaderWindowLike {
+    fetch: FetchImpl;
+    location?: {
+        origin?: string;
+    };
+    Response?: new (body?: string, init?: {
+        status?: number;
+        headers?: Record<string, string>;
+    }) => any;
+    __ModuleLoader__?: {
+        load(handoff: {
+            id: string;
+            factory: (require: (spec: string) => any) => any;
+        }): unknown;
+    };
+    __DSHLOADER_VERSION__?: string;
+    __DSHLOADER_CONFIG__?: {
+        exposeAllNamespaces?: boolean;
+    };
+    __dshNativeRequire__?: (spec: string) => any;
+    __dshLoader__?: unknown;
+}
+declare global {
+    const window: DshLoaderWindowLike;
+}
+export declare class ModuleNotFoundError extends Error {
+    specifier: string;
+    constructor(specifier: string);
+}
+interface CreateClientAPIOpts {
+    dshVersion?: string;
+    adapterVersion?: string;
+    moduleAliases?: Record<string, string>;
+    packageAliases?: Map<string, string> | Record<string, string>;
+    requireImpl?: (spec: string) => any;
+    fetchBridge?: {
+        describe: () => Promise<any>;
+        write: (mode: string, payload: object) => Promise<any>;
+    };
+    clientCtx?: {
+        get?: (name: string) => any;
+    };
+}
+/**
+ * Build the `window.__dshLoader__` API object.
+ */
+export declare function createClientAPI(opts?: CreateClientAPIOpts): {
+    version: string;
+    dshVersion: string | undefined;
+    adapterVersion: string | undefined;
+    require(specifier: string): any;
+    registerModuleAlias(alias: string, target: string): void;
+    /**
+     * Register a package-name alias for the client module loader's
+     * require(). When a plugin's bundle calls require('@old/pkg-name'),
+     * the loader's wrapped require remaps it to '@new/pkg-name' before
+     * hitting the module table. This lets dsh rename client packages
+     * across versions without forcing plugin bundles to rebuild.
+     */
+    registerPackageAlias(oldName: string, newName: string): void;
+    /**
+     * Read a client-side cordis service by name.
+     * Proxies to `clientCtx.get(name)` — the same ctx.get plugins use
+     * inside their client `apply(ctx)`, but exposed through the stable
+     * dshloader surface so plugins don't depend on the cordis context
+     * shape directly.
+     *
+     * Only available when dshloader's client apply() received a ctx
+     * (cordis client boot). Returns undefined when ctx is not wired.
+     */
+    services: {
+        get(name: string): any;
+    };
+    rpc: {
+        settings: {
+            describe: () => Promise<any>;
+            update: (ns: string, section: unknown) => Promise<any>;
+            replace: (ns: string, section: unknown) => Promise<any>;
+            mutate: (ns: string, ops: unknown) => Promise<any>;
+        };
+    } | undefined;
+};
+interface InstallClientOpts {
+    window?: DshLoaderWindowLike;
+    dshVersion?: string;
+    exposeAllNamespaces?: boolean;
+    requireImpl?: (spec: string) => any;
+    hostBridgePrefix?: string;
+    packageAliases?: Record<string, string>;
+    clientCtx?: {
+        get?: (name: string) => any;
+    };
+}
+/**
+ * Install dshloader into a browser-like environment.
+ */
+export declare function installClient(opts?: InstallClientOpts): {
+    version: string;
+    dshVersion: string | undefined;
+    adapterVersion: string | undefined;
+    require(specifier: string): any;
+    registerModuleAlias(alias: string, target: string): void;
+    /**
+     * Register a package-name alias for the client module loader's
+     * require(). When a plugin's bundle calls require('@old/pkg-name'),
+     * the loader's wrapped require remaps it to '@new/pkg-name' before
+     * hitting the module table. This lets dsh rename client packages
+     * across versions without forcing plugin bundles to rebuild.
+     */
+    registerPackageAlias(oldName: string, newName: string): void;
+    /**
+     * Read a client-side cordis service by name.
+     * Proxies to `clientCtx.get(name)` — the same ctx.get plugins use
+     * inside their client `apply(ctx)`, but exposed through the stable
+     * dshloader surface so plugins don't depend on the cordis context
+     * shape directly.
+     *
+     * Only available when dshloader's client apply() received a ctx
+     * (cordis client boot). Returns undefined when ctx is not wired.
+     */
+    services: {
+        get(name: string): any;
+    };
+    rpc: {
+        settings: {
+            describe: () => Promise<any>;
+            update: (ns: string, section: unknown) => Promise<any>;
+            replace: (ns: string, section: unknown) => Promise<any>;
+            mutate: (ns: string, ops: unknown) => Promise<any>;
+        };
+    } | undefined;
+} | undefined;
+/**
+ * Fetch interceptor for settings namespace whitelist bypass (fix 5, path 2).
+ * Mirrors dsh-upstream-fixes/lib/client.js (127-223).
+ *
+ * - /api/settings.describe: merge non-whitelisted namespaces from the host
+ *   bridge into the official response (rpcId/official fields preserved).
+ * - /api/settings.{update,mutate,replace}: route writes for namespaces the
+ *   official proxy does NOT expose through the host bridge, and rebuild the
+ *   response envelope as `{ type: 'server-response', rpcId, result }` so the
+ *   official client can correlate the response with the request.
+ */
+export declare function installSettingsFetchInterceptor(win: DshLoaderWindowLike, bridgePrefix?: string): () => void;
+export declare const name = "@dsh-plugin/dsh-loader";
+export declare const inject: string[];
+export declare function apply(ctx: {
+    get?: (name: string) => any;
+}): void;
+export {};