@dsh-plugin/dsh-loader 1.1.0-dev.32278873528 → 1.2.0-dev.32741629392

package/dist/patch.js

@@ -0,0 +1,179 @@
+/**
+ * The dshloader PATCH protocol (`ctx.dshLoader.patch` / `__dshLoader__.patch`).
+ *
+ * Monkey-patching a host method or global is the only way to intervene in
+ * behaviour dsh exposes no extension point for. Three plugins in this family
+ * each hand-rolled the protocol and they did NOT agree:
+ *
+ *   - dsh-loader's own `Module._resolveFilename` hook  → identity-checked restore
+ *   - dsh-network-settings' `globalThis.fetch` wrapper → identity-checked restore
+ *   - dsh-better-sidebar's `workspaces.openPath` wrap  → UNCONDITIONAL restore
+ *
+ * The last one silently destroys a later plugin's wrapper when it disposes
+ * first, even though its own comment promised the opposite. This module is the
+ * single correct implementation; every patch site delegates here.
+ *
+ * The five guarantees:
+ *
+ *  1. RAW original — each patch captures EXACTLY the value present when it
+ *     installed (another plugin's wrapper when one is already there) and
+ *     restores that value verbatim, never a bound copy. This is what lets a
+ *     chain of wrappers survive disposal in any order.
+ *  2. Identity-checked restore — disposal only reverts the slot when it still
+ *     holds OUR wrapper. If somebody patched on top afterwards, we leave the
+ *     chain alone (reverting would delete their wrapper).
+ *  3. Re-apply safety — re-applying the same `id` recovers the true original
+ *     first, so HMR / repeated `apply()` can never nest a wrapper in itself.
+ *     This holds while our patch is the OUTERMOST one; if a foreign patch was
+ *     layered on top in between, re-applying chains instead (un-nesting a
+ *     middle wrapper is not possible without rebuilding the whole chain).
+ *  4. Cross-instance durability — slot bookkeeping lives in a WeakMap parked on
+ *     `globalThis` under a `Symbol.for` key, so a reloaded module instance still
+ *     sees the original captured by its predecessor. Targets are never mutated.
+ *  5. Loud misuse — patching a non-function method, or a missing target, throws
+ *     instead of silently no-op'ing.
+ *
+ * Pure and environment-agnostic: no DOM, no Node builtins, so the same module
+ * serves the host half and the browser half.
+ *
+ * @module @dsh-plugin/dsh-loader/patch
+ */
+/**
+ * Registry key on `globalThis`. `Symbol.for` (not a fresh Symbol) so a
+ * re-instantiated module — HMR, a second bundle copy — finds the same registry
+ * and therefore the same captured originals.
+ */
+const REGISTRY_KEY = Symbol.for('dshloader.patch.registry.v1');
+/** The process-wide patch registry (targets are keys; nothing is written onto them). */
+function registry() {
+    const scope = globalThis;
+    let found = scope[REGISTRY_KEY];
+    if (found === undefined) {
+        found = new WeakMap();
+        scope[REGISTRY_KEY] = found;
+    }
+    return found;
+}
+/** The slot table for one target, created on first use. */
+function slotsOf(target) {
+    const reg = registry();
+    let table = reg.get(target);
+    if (table === undefined) {
+        table = new Map();
+        reg.set(target, table);
+    }
+    return table;
+}
+/** Read the current value of `target[key]` without tripping getters twice. */
+function read(target, key) {
+    return target[key];
+}
+/** Write `target[key]`, surfacing a frozen / read-only slot as a loud error. */
+function write(target, key, value, what) {
+    try {
+        target[key] = value;
+    }
+    catch (cause) {
+        throw new Error(`dshloader.patch: cannot write ${what} — the slot is read-only or frozen`, { cause });
+    }
+    if (read(target, key) !== value) {
+        // A non-writable data property assigns silently in sloppy mode.
+        throw new Error(`dshloader.patch: writing ${what} had no effect — the slot is not writable`);
+    }
+}
+/**
+ * Build the handle for one installed slot. Kept separate so a re-apply of the
+ * same id can hand back a handle over the existing bookkeeping.
+ */
+function makeHandle(target, key, slot) {
+    return {
+        get active() {
+            return read(target, key) === slot.wrapper;
+        },
+        get original() {
+            return slot.original;
+        },
+        dispose() {
+            // Guarantee 2: only revert while the slot still carries OUR wrapper.
+            if (read(target, key) !== slot.wrapper)
+                return;
+            write(target, key, slot.original, `${String(key)} (restore)`);
+            const table = registry().get(target);
+            if (table?.get(key) === slot)
+                table.delete(key);
+        },
+    };
+}
+/**
+ * Patch one slot of `target`. The low-level primitive behind
+ * {@link PatchAPI.method} and {@link PatchAPI.global}.
+ *
+ * @param target - object owning the slot (a service instance, `globalThis`, …).
+ * @param key - property key to wrap.
+ * @param wrap - receives the value currently in the slot (the previous wrapper
+ *   when another patch is already installed — chaining is intended) and returns
+ *   the replacement.
+ * @param options - see {@link PatchOptions}.
+ * @returns the handle whose `dispose()` reverts this patch.
+ */
+export function patchSlot(target, key, wrap, options = {}) {
+    if (target === null || (typeof target !== 'object' && typeof target !== 'function')) {
+        throw new TypeError(`dshloader.patch: target must be an object, received ${typeof target}`);
+    }
+    if (typeof wrap !== 'function') {
+        throw new TypeError('dshloader.patch: wrap must be a function');
+    }
+    const id = options.id ?? 'anonymous';
+    const table = slotsOf(target);
+    const existing = table.get(key);
+    // Guarantee 3: a re-apply of the same id must not wrap our own wrapper.
+    // Restore the captured original first, then patch the pristine slot.
+    if (existing !== undefined && existing.id === id && read(target, key) === existing.wrapper) {
+        write(target, key, existing.original, `${String(key)} (re-apply reset)`);
+        table.delete(key);
+    }
+    const current = read(target, key);
+    if (typeof current !== 'function') {
+        throw new TypeError(`dshloader.patch: ${String(key)} is ${current === undefined ? 'missing' : typeof current}, not a function`);
+    }
+    // Guarantee 1: capture EXACTLY the value present at install time. When another
+    // plugin already wrapped this slot, that wrapper is our original and restoring
+    // it is what keeps their patch alive (see the ordered-disposal tests).
+    const original = current;
+    const wrapper = wrap(current);
+    if (typeof wrapper !== 'function') {
+        throw new TypeError('dshloader.patch: wrap must return a function');
+    }
+    write(target, key, wrapper, String(key));
+    const slot = { original, wrapper, id };
+    table.set(key, slot);
+    return makeHandle(target, key, slot);
+}
+/** Whether a dshloader patch is currently installed on `target[key]`. */
+export function isPatched(target, key) {
+    const slot = registry().get(target)?.get(key);
+    return slot !== undefined && read(target, key) === slot.wrapper;
+}
+/** The patch id currently installed on `target[key]`, or `undefined`. */
+export function patchIdOf(target, key) {
+    const slot = registry().get(target)?.get(key);
+    return slot !== undefined && read(target, key) === slot.wrapper ? slot.id : undefined;
+}
+/** Build the `patch` facade. Stateless — all bookkeeping is in the global registry. */
+export function createPatchAPI() {
+    return {
+        method(target, key, wrap, options) {
+            return patchSlot(target, key, wrap, options);
+        },
+        global(key, wrap, options = {}) {
+            const scope = options.scope ?? globalThis;
+            return patchSlot(scope, key, wrap, options);
+        },
+        slot(target, key, wrap, options) {
+            return patchSlot(target, key, wrap, options);
+        },
+        isPatched,
+        patchIdOf,
+    };
+}
+//# sourceMappingURL=patch.js.map

package/dist/patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch.js","sourceRoot":"","sources":["../src/patch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAeH;;;;GAIG;AACH,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAE/D,wFAAwF;AACxF,SAAS,QAAQ;IACf,MAAM,KAAK,GAAG,UAAqD,CAAC;IACpE,IAAI,KAAK,GAAG,KAAK,CAAC,YAAY,CAA2C,CAAC;IAC1E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,GAAG,IAAI,OAAO,EAAqB,CAAC;QACzC,KAAK,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2DAA2D;AAC3D,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAuBD,8EAA8E;AAC9E,SAAS,IAAI,CAAC,MAAc,EAAE,GAAgB;IAC5C,OAAQ,MAAuC,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,gFAAgF;AAChF,SAAS,KAAK,CAAC,MAAc,EAAE,GAAgB,EAAE,KAAc,EAAE,IAAY;IAC3E,IAAI,CAAC;QACF,MAAuC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,oCAAoC,EACzE,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;QAChC,gEAAgE;QAChE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,2CAA2C,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,MAAc,EAAE,GAAgB,EAAE,IAAe;IACnE,OAAO;QACL,IAAI,MAAM;YACR,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC;QAC5C,CAAC;QACD,IAAI,QAAQ;YACV,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,OAAO;YACL,qEAAqE;YACrE,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO;gBAAE,OAAO;YAC/C,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CACvB,MAAc,EACd,GAAgB,EAChB,IAAwB,EACxB,OAAO,GAAiB,EAAE;IAE1B,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,SAAS,CAAC,uDAAuD,OAAO,MAAM,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,WAAW,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEhC,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC3F,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACzE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CACjB,oBAAoB,MAAM,CAAC,GAAG,CAAC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,OAAO,kBAAkB,CAC3G,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,+EAA+E;IAC/E,uEAAuE;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC;IAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAY,CAAC,CAAC;IACnC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAClD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrB,OAAO,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,GAAgB;IACxD,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC;AAClE,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,GAAgB;IACxD,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACxF,CAAC;AAiDD,uFAAuF;AACvF,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO;YAC/B,OAAO,SAAS,CAAC,MAAM,EAAE,GAAkB,EAAE,IAAsC,EAAE,OAAO,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAK,UAAgC,CAAC;YACjE,OAAO,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,IAAsC,EAAE,OAAO,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO;YAC7B,OAAO,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAsC,EAAE,OAAO,CAAC,CAAC;QACjF,CAAC;QACD,SAAS;QACT,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/services/dsh-symbols.d.ts

@@ -0,0 +1,70 @@
+/** Node's `setTimeout` ceiling (2^31 - 1), used when dsh-timeout is unavailable. */
+export declare const NODE_MAX_TIMER_DELAY_MS = 2147483647;
+/** The raw modules this facade forwards to, as resolved at boot. */
+export interface DshSymbolModules {
+    tools?: {
+        defineTool?: unknown;
+        ToolArgsError?: unknown;
+    };
+    timeout?: {
+        deadline?: unknown;
+        MAX_TIMER_DELAY_MS?: number;
+    };
+    credentials?: {
+        credentialRef?: unknown;
+    };
+    subagent?: {
+        delegationDepthOf?: unknown;
+    };
+    compaction?: {
+        BasicCompactionEngine?: unknown;
+    };
+    llm?: {
+        BlockAssembler?: unknown;
+    };
+}
+/**
+ * Module-level dsh symbols, grouped by owning package.
+ *
+ * Types are deliberately loose (`any`-shaped call signatures): pinning dsh's
+ * internal shapes here would defeat the shim's purpose, exactly as
+ * `src/types.ts` explains for the service surfaces.
+ */
+export interface DshSymbolsAPI {
+    tools: {
+        /** `defineTool(definition)` — build a tool definition dsh's registry accepts. */
+        defineTool<T>(definition: T): T;
+        /** `ToolArgsError` — the error class dsh expects for invalid tool arguments. */
+        readonly ToolArgsError: new (messages: string[]) => Error;
+    };
+    timeout: {
+        /** `deadline(...)` — dsh's cancellation-aware deadline helper. */
+        deadline<T>(...args: any[]): T;
+        /** dsh's timer ceiling; falls back to Node's own 2^31-1 when unavailable. */
+        readonly MAX_TIMER_DELAY_MS: number;
+    };
+    credentials: {
+        /** `credentialRef(ref)` — brand a raw reference for `credentials.resolve`. */
+        credentialRef(ref: unknown): unknown;
+    };
+    subagent: {
+        /** `delegationDepthOf(agent)` — how deep a delegated agent sits. */
+        delegationDepthOf(agent: unknown): number;
+    };
+    compaction: {
+        /**
+         * `BasicCompactionEngine` — the base class a plugin subclasses to override
+         * `summarize`. Throws when unavailable, because a subclass declaration has
+         * no meaningful fallback.
+         */
+        readonly BasicCompactionEngine: new (...args: any[]) => any;
+    };
+    llm: {
+        /** `BlockAssembler` — dsh's streaming content-block assembler. */
+        readonly BlockAssembler: new (...args: any[]) => any;
+    };
+}
+/** Build the `ctx.dshLoader.dsh` facade over boot-resolved modules. */
+export declare function createDshSymbolsAPI(opts: {
+    modules?: DshSymbolModules;
+}): DshSymbolsAPI;

package/dist/services/dsh-symbols.js

@@ -0,0 +1,82 @@
+/**
+ * Module-level dsh symbols (`ctx.dshLoader.dsh`).
+ *
+ * Some things a plugin needs are MODULE-level exports of `@deepseek-ai/*`
+ * packages rather than methods on a cordis service, so `services.get(...)`
+ * cannot reach them: `defineTool`, `ToolArgsError`, `deadline`,
+ * `credentialRef`, `delegationDepthOf`, and the `BasicCompactionEngine` base
+ * class a plugin subclasses.
+ *
+ * WHY A FACADE AND NOT THE STABLE SUBPATHS: the `@dsh-plugin/dsh-loader/tools`
+ * style subpaths are `export * from '@deepseek-ai/...'`, which requires that
+ * package to be resolvable FROM dshloader's own location — true for a client
+ * bundle (the browser module table resolves it) but not reliably true on the
+ * host, where dshloader sits in the profile and dsh is installed globally. A
+ * failed ESM static import is a hard boot failure; a facade degrades per symbol
+ * and says why. See docs/facades.md §0.
+ *
+ * Resolution happens once at boot (see `preloadRegistryModules`), so every
+ * accessor here is synchronous.
+ *
+ * @module @dsh-plugin/dsh-loader/services/dsh-symbols
+ */
+import { LOG_PREFIX } from '../version.js';
+/** Node's `setTimeout` ceiling (2^31 - 1), used when dsh-timeout is unavailable. */
+export const NODE_MAX_TIMER_DELAY_MS = 2147483647;
+/** Build a loud accessor for one required symbol. */
+function required(value, pkg, symbol) {
+    if (value === undefined || value === null) {
+        throw new Error(`${LOG_PREFIX}:dsh.${symbol} — ${pkg} is unavailable in this runtime; ` +
+            'the calling plugin cannot proceed without it');
+    }
+    return value;
+}
+/** Build the `ctx.dshLoader.dsh` facade over boot-resolved modules. */
+export function createDshSymbolsAPI(opts) {
+    const m = opts.modules ?? {};
+    return {
+        tools: {
+            defineTool(definition) {
+                const fn = required(m.tools?.defineTool, '@deepseek-ai/dsh-tools', 'tools.defineTool');
+                return fn(definition);
+            },
+            get ToolArgsError() {
+                return required(m.tools?.ToolArgsError, '@deepseek-ai/dsh-tools', 'tools.ToolArgsError');
+            },
+        },
+        timeout: {
+            deadline(...args) {
+                const fn = required(m.timeout?.deadline, '@deepseek-ai/dsh-timeout', 'timeout.deadline');
+                return fn(...args);
+            },
+            // A platform constant (Node's setTimeout ceiling), not a dsh-versioned
+            // value, so falling back to the literal is safe rather than a guess.
+            get MAX_TIMER_DELAY_MS() {
+                return m.timeout?.MAX_TIMER_DELAY_MS ?? NODE_MAX_TIMER_DELAY_MS;
+            },
+        },
+        credentials: {
+            credentialRef(ref) {
+                const fn = required(m.credentials?.credentialRef, '@deepseek-ai/dsh-credentials', 'credentials.credentialRef');
+                return fn(ref);
+            },
+        },
+        subagent: {
+            delegationDepthOf(agent) {
+                const fn = required(m.subagent?.delegationDepthOf, '@deepseek-ai/dsh-subagent', 'subagent.delegationDepthOf');
+                return fn(agent);
+            },
+        },
+        compaction: {
+            get BasicCompactionEngine() {
+                return required(m.compaction?.BasicCompactionEngine, '@deepseek-ai/dsh-compaction-basic', 'compaction.BasicCompactionEngine');
+            },
+        },
+        llm: {
+            get BlockAssembler() {
+                return required(m.llm?.BlockAssembler, '@deepseek-ai/dsh-llm', 'llm.BlockAssembler');
+            },
+        },
+    };
+}
+//# sourceMappingURL=dsh-symbols.js.map

package/dist/services/dsh-symbols.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsh-symbols.js","sourceRoot":"","sources":["../../src/services/dsh-symbols.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAsDlD,qDAAqD;AACrD,SAAS,QAAQ,CAAI,KAAc,EAAE,GAAW,EAAE,MAAc;IAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,QAAQ,MAAM,MAAM,GAAG,mCAAmC;YACrE,8CAA8C,CACjD,CAAC;IACJ,CAAC;IACD,OAAO,KAAU,CAAC;AACpB,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,mBAAmB,CAAC,IAAoC;IACtE,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IAC7B,OAAO;QACL,KAAK,EAAE;YACL,UAAU,CAAC,UAAU;gBACnB,MAAM,EAAE,GAAG,QAAQ,CACjB,CAAC,CAAC,KAAK,EAAE,UAAU,EACnB,wBAAwB,EACxB,kBAAkB,CACnB,CAAC;gBACF,OAAO,EAAE,CAAC,UAAU,CAAsB,CAAC;YAC7C,CAAC;YACD,IAAI,aAAa;gBACf,OAAO,QAAQ,CACb,CAAC,CAAC,KAAK,EAAE,aAAa,EACtB,wBAAwB,EACxB,qBAAqB,CACtB,CAAC;YACJ,CAAC;SACF;QACD,OAAO,EAAE;YACP,QAAQ,CAAC,GAAG,IAAW;gBACrB,MAAM,EAAE,GAAG,QAAQ,CACjB,CAAC,CAAC,OAAO,EAAE,QAAQ,EACnB,0BAA0B,EAC1B,kBAAkB,CACnB,CAAC;gBACF,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACrB,CAAC;YACD,uEAAuE;YACvE,qEAAqE;YACrE,IAAI,kBAAkB;gBACpB,OAAO,CAAC,CAAC,OAAO,EAAE,kBAAkB,IAAI,uBAAuB,CAAC;YAClE,CAAC;SACF;QACD,WAAW,EAAE;YACX,aAAa,CAAC,GAAG;gBACf,MAAM,EAAE,GAAG,QAAQ,CACjB,CAAC,CAAC,WAAW,EAAE,aAAa,EAC5B,8BAA8B,EAC9B,2BAA2B,CAC5B,CAAC;gBACF,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;SACF;QACD,QAAQ,EAAE;YACR,iBAAiB,CAAC,KAAK;gBACrB,MAAM,EAAE,GAAG,QAAQ,CACjB,CAAC,CAAC,QAAQ,EAAE,iBAAiB,EAC7B,2BAA2B,EAC3B,4BAA4B,CAC7B,CAAC;gBACF,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;SACF;QACD,UAAU,EAAE;YACV,IAAI,qBAAqB;gBACvB,OAAO,QAAQ,CACb,CAAC,CAAC,UAAU,EAAE,qBAAqB,EACnC,mCAAmC,EACnC,kCAAkC,CACnC,CAAC;YACJ,CAAC;SACF;QACD,GAAG,EAAE;YACH,IAAI,cAAc;gBAChB,OAAO,QAAQ,CACb,CAAC,CAAC,GAAG,EAAE,cAAc,EACrB,sBAAsB,EACtB,oBAAoB,CACrB,CAAC;YACJ,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/services/llm.d.ts

@@ -0,0 +1,30 @@
+/** The `@deepseek-ai/dsh-llm` surface the facades forward to. */
+export interface LlmModule {
+    createUserMessage?: (input: unknown) => unknown;
+    deepFreeze?: <T>(value: T) => T;
+    /** Streaming content-block assembler; surfaced through `dshLoader.dsh.llm`. */
+    BlockAssembler?: unknown;
+}
+/** The `llm` facade exposed on the host API. */
+export interface LlmAPI {
+    /**
+     * Build one identified, frozen user-role message.
+     *
+     * @param input - complete content and source for a new user message.
+     * @returns the immutable message.
+     * @throws when `@deepseek-ai/dsh-llm` is unavailable — callers building a
+     *   message have no meaningful fallback, so this fails loudly rather than
+     *   handing back something the agent loop would reject.
+     */
+    createUserMessage(input: unknown): unknown;
+    /**
+     * Deep-freeze a value with dsh's own helper (so frozen-ness matches what the
+     * runtime expects). Falls back to `Object.freeze` on the top level when the
+     * module is unavailable.
+     */
+    deepFreeze<T>(value: T): T;
+}
+/** Build the `ctx.dshLoader.llm` facade. */
+export declare function createLlmAPI(opts: {
+    module?: LlmModule;
+}): LlmAPI;

package/dist/services/llm.js

@@ -0,0 +1,35 @@
+/**
+ * LLM stable API (`ctx.dshLoader.llm`).
+ *
+ * Message CONSTRUCTION helpers are module-level exports of
+ * `@deepseek-ai/dsh-llm`, not methods on a cordis service, so
+ * `services.get('llm')` cannot reach them — a plugin that needs
+ * `createUserMessage` would otherwise have to import `@deepseek-ai/*`
+ * directly and lose its decoupling.
+ *
+ * Inference itself stays on the service: `services.get('llm').stream(...)`.
+ * This facade deliberately covers only the module-level helpers.
+ *
+ * @module @dsh-plugin/dsh-loader/services/llm
+ */
+import { LOG_PREFIX } from '../version.js';
+/** Build the `ctx.dshLoader.llm` facade. */
+export function createLlmAPI(opts) {
+    const { module } = opts;
+    return {
+        createUserMessage(input) {
+            const make = module?.createUserMessage;
+            if (typeof make !== 'function') {
+                throw new Error(`${LOG_PREFIX}:llm.createUserMessage — @deepseek-ai/dsh-llm is unavailable; cannot construct a message`);
+            }
+            return make(input);
+        },
+        deepFreeze(value) {
+            const freeze = module?.deepFreeze;
+            if (typeof freeze === 'function')
+                return freeze(value);
+            return Object.freeze(value);
+        },
+    };
+}
+//# sourceMappingURL=llm.js.map

package/dist/services/llm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm.js","sourceRoot":"","sources":["../../src/services/llm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AA8B3C,4CAA4C;AAC5C,MAAM,UAAU,YAAY,CAAC,IAA4B;IACvD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,OAAO;QACL,iBAAiB,CAAC,KAAK;YACrB,MAAM,IAAI,GAAG,MAAM,EAAE,iBAAiB,CAAC;YACvC,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,0FAA0F,CACxG,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,UAAU,CAAC,KAAK;YACd,MAAM,MAAM,GAAG,MAAM,EAAE,UAAU,CAAC;YAClC,IAAI,OAAO,MAAM,KAAK,UAAU;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YACvD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/services/registry.d.ts

@@ -0,0 +1,144 @@
+import type { CordisContext } from '../types.js';
+/** A live tool definition as the tools registry holds it (shape kept loose on purpose). */
+export interface ToolDefinitionLike {
+    name?: string;
+    description?: string;
+    parameters?: Record<string, unknown>;
+    execute?: (args: Record<string, unknown>, exec: unknown) => Promise<unknown>;
+    [key: string]: unknown;
+}
+/** One permission preset row as the `permissionPresets` table stores it. */
+export interface PermissionPresetLike {
+    sandbox: string;
+    approval: string;
+    name?: string;
+    description?: string;
+    [key: string]: unknown;
+}
+/** The optional dsh modules the facades need, resolved once at boot. */
+export interface RegistryModules {
+    /** `@deepseek-ai/dsh-sandbox` — for `ESCALATION_TARGETS`. */
+    sandbox?: {
+        ESCALATION_TARGETS?: readonly string[];
+    };
+    /** `@deepseek-ai/dsh-permission-presets` — for `effectivePermissionPreset`. */
+    permissionPresets?: {
+        effectivePermissionPreset?: (events: readonly unknown[]) => string | undefined;
+    };
+    /**
+     * `@deepseek-ai/dsh-settings` — the settings facade DELEGATES to these rather
+     * than reimplementing them. `installSettingsSection` in particular carries
+     * real upstream behaviour (register `base` from the composition entry, point
+     * the source thunk at the resolved scope, fall back to the entry when the
+     * service goes away, all riding the scoped fiber); copying that into a shim
+     * would be a bug farm.
+     */
+    settings?: {
+        installSettingsSection?: (ctx: unknown, ns: unknown, schema: unknown, entry: unknown, hooks: unknown) => void;
+        settingsNamespace?: (id: string) => unknown;
+        SettingsConflictError?: new (...args: never[]) => Error;
+    };
+    /**
+     * `@deepseek-ai/dsh-llm` — message-construction helpers are MODULE-level
+     * exports, not service methods, so `services.get('llm')` cannot reach them.
+     */
+    llm?: import('./llm.js').LlmModule;
+    /** `@deepseek-ai/dsh-tools` — `defineTool` / `ToolArgsError` are module-level. */
+    tools?: {
+        defineTool?: unknown;
+        ToolArgsError?: unknown;
+    };
+    /** `@deepseek-ai/dsh-timeout` — `deadline` / `MAX_TIMER_DELAY_MS`. */
+    timeout?: {
+        deadline?: unknown;
+        MAX_TIMER_DELAY_MS?: number;
+    };
+    /** `@deepseek-ai/dsh-credentials` — `credentialRef`. */
+    credentials?: {
+        credentialRef?: unknown;
+    };
+    /** `@deepseek-ai/dsh-subagent` — `delegationDepthOf`. */
+    subagent?: {
+        delegationDepthOf?: unknown;
+    };
+    /** `@deepseek-ai/dsh-compaction-basic` — the `BasicCompactionEngine` base class. */
+    compaction?: {
+        BasicCompactionEngine?: unknown;
+    };
+}
+/**
+ * Load the optional dsh modules the facades proxy.
+ *
+ * The specifiers are held in variables so TypeScript does not try to resolve
+ * them at build time: dshloader declares no `@deepseek-ai/*` dependency, and
+ * these packages only exist in the dsh runtime that loads the profile.
+ *
+ * @returns whatever resolved; a missing module simply stays `undefined`.
+ */
+export declare function preloadRegistryModules(): Promise<RegistryModules>;
+/** Tool-registry accessors. */
+export interface ToolsRegistryAPI {
+    /** Every registered tool definition; `[]` when the registry shape is unreachable. */
+    list(): ToolDefinitionLike[];
+    /** One definition by tool name. */
+    get(name: string): ToolDefinitionLike | undefined;
+    /**
+     * Run `patcher` over every registered definition now and after every
+     * `tools/change`, so load order between this plugin and the tool plugins does
+     * not matter.
+     *
+     * A definition is handed to a given `id` at most once (a non-enumerable
+     * `Symbol.for` marker on the definition), which is what stops a `tools/change`
+     * storm from wrapping `execute` again and again.
+     *
+     * @param patcher - mutates one live definition; throwing is contained and logged.
+     * @param options.id - stable patch id, used for the once-per-definition marker.
+     * @returns a disposer that stops the replay (already-applied patches stay).
+     */
+    patchAll(patcher: (def: ToolDefinitionLike) => void, options: {
+        id: string;
+    }): () => void;
+}
+/** Sandbox-registry accessors. */
+export interface SandboxRegistryAPI {
+    /** The escalation modes escalation tools advertise; `[]` when unreachable. */
+    escalationTargets(): readonly string[];
+    /**
+     * Advertise one extra escalation mode (idempotent).
+     * @returns a disposer removing the mode again; a no-op when unreachable.
+     */
+    addEscalationTarget(mode: string): () => void;
+}
+/** Permission-preset registry accessors. */
+export interface PermissionPresetsRegistryAPI {
+    /** The live preset table, or `undefined` when the service is absent. */
+    table(): Record<string, PermissionPresetLike> | undefined;
+    /**
+     * Define a preset unless the key already exists (declaration in a
+     * `cordis.patch.yml` layer wins).
+     * @returns a disposer removing only a preset this call actually added.
+     */
+    define(key: string, preset: PermissionPresetLike): () => void;
+    /**
+     * Fold a session's effective permission-preset key from its event log.
+     * @returns the preset key, or `undefined` when the helper is unavailable.
+     */
+    effective(events: readonly unknown[]): string | undefined;
+}
+/** The `registry` facade exposed on the host API. */
+export interface RegistryAPI {
+    tools: ToolsRegistryAPI;
+    sandbox: SandboxRegistryAPI;
+    permissionPresets: PermissionPresetsRegistryAPI;
+}
+/**
+ * Build the `ctx.dshLoader.registry` facade.
+ *
+ * @param opts.ctx - the cordis context (services are read lazily, never cached,
+ *   so a service arriving later is still picked up).
+ * @param opts.modules - optional dsh modules from {@link preloadRegistryModules}.
+ */
+export declare function createRegistryAPI(opts: {
+    ctx: CordisContext;
+    modules?: RegistryModules;
+}): RegistryAPI;