@jingyi0605/codingns4dsh 0.1.7-rc.3 → 0.2.0-beta.1

package/data/build/dist/host/features/git-management.js

@@ -204,19 +204,20 @@ async function readHistory(_workspaceId, root, rawLimit, rawOffset) {
     const offset = Math.max(0, Math.min(1_000_000, Number.isSafeInteger(rawOffset) ? Number(rawOffset) : 0));
     let result;
     try {
-        result = await runGit(root, ['log', `--skip=${String(offset)}`, `--max-count=${String(limit)}`, '--format=%H%x1f%an%x1f%aI%x1f%s%x1f%b%x1e']);
+        result = await runGit(root, ['log', `--skip=${String(offset)}`, `--max-count=${String(limit)}`, '--decorate=short', '--format=%H%x1f%an%x1f%aI%x1f%s%x1f%b%x1f%D%x1e']);
     }
     catch (error) {
         if (isEmptyRepositoryError(error))
             return { items: [], cursor: String(offset), nextCursor: null, totalCount: 0 };
         throw error;
     }
+    const refByShortName = new Map((await readRefRecords(root)).map((record) => [record.shortName, record]));
     const items = [];
     for (const record of result.stdout.split('\x1e')) {
         const fields = record.trim().split('\x1f');
         if (fields.length < 5 || !fields[0])
             continue;
-        items.push({ commitHash: fields[0], authorName: fields[1] ?? '', authoredAt: fields[2] ?? '', subject: fields[3] ?? '', body: fields[4] ?? '', refs: [] });
+        items.push({ commitHash: fields[0], authorName: fields[1] ?? '', authoredAt: fields[2] ?? '', subject: fields[3] ?? '', body: fields[4] ?? '', refs: parseHistoryRefs(fields[5] ?? '', refByShortName) });
     }
     let total = 0;
     try {
@@ -228,24 +229,46 @@ async function readHistory(_workspaceId, root, rawLimit, rawOffset) {
     }
     return { items, cursor: String(offset), nextCursor: offset + items.length < total ? String(offset + items.length) : null, totalCount: total };
 }
-async function readBranches(root) {
-    const currentBranch = (await runGit(root, ['branch', '--show-current'])).stdout.trim() || 'HEAD';
-    // for-each-ref 不展开 %xNN；使用 Git 原生支持的 NUL 字段分隔符，避免分支名被污染。
-    const result = await runGit(root, ['for-each-ref', '--format=%(refname)%00%(refname:short)%00%(HEAD)%00%(upstream:short)', 'refs/heads', 'refs/remotes']);
-    const local = [];
-    const remote = [];
-    const fields = result.stdout.replace(/\r?\n$/u, '').split('\0');
-    for (let index = 0; index + 3 < fields.length; index += 4) {
-        const fullName = fields[index] ?? '';
-        const name = fields[index + 1] ?? '';
-        const head = fields[index + 2] ?? '';
-        const upstream = fields[index + 3] ?? '';
-        if (!name)
+/** 读取本地与远程分支的 ref 表；记录之间换行分隔，字段使用 Git 原生支持的 NUL 分隔符（for-each-ref 不展开 %xNN）。 */
+async function readRefRecords(root) {
+    const result = await runGit(root, ['for-each-ref', '--format=%(refname)%00%(refname:short)%00%(objectname)%00%(upstream:short)%00%(HEAD)', 'refs/heads', 'refs/remotes']);
+    const records = [];
+    for (const line of result.stdout.split(/\r?\n/u)) {
+        if (line === '')
+            continue;
+        const [fullName = '', shortName = '', commitHash = '', upstream = '', head = ''] = line.split('\0');
+        if (shortName === '')
+            continue;
+        const remote = fullName.startsWith('refs/remotes/');
+        records.push({ fullName, shortName, commitHash, upstream: upstream.trim() || null, current: head.trim() === '*', kind: remote ? 'remote' : 'local', remoteName: remote && shortName.includes('/') ? shortName.split('/')[0] ?? null : null });
+    }
+    return records;
+}
+/** 解析 git log 的 %D 装饰字段：标签不显示，HEAD -> 分支 记为 head，其余通过 ref 表补全类型。 */
+function parseHistoryRefs(decoration, refByShortName) {
+    const refs = [];
+    for (const rawToken of decoration.split(',')) {
+        const token = rawToken.trim();
+        if (token === '' || token.startsWith('tag: '))
             continue;
-        const item = { name, current: head === '*', upstream: upstream || null, remote: fullName.startsWith('refs/remotes/') };
-        (item.remote ? remote : local).push(item);
+        if (token.startsWith('HEAD -> ')) {
+            const name = token.slice('HEAD -> '.length).trim();
+            if (name !== '')
+                refs.push({ name, kind: 'head', remoteName: null });
+            continue;
+        }
+        const record = refByShortName.get(token);
+        if (record === undefined || record.shortName.endsWith('/HEAD'))
+            continue;
+        refs.push({ name: record.shortName, kind: record.kind, remoteName: record.remoteName });
     }
-    return { currentBranch, local, remote };
+    return refs;
+}
+async function readBranches(root) {
+    const currentBranch = (await runGit(root, ['branch', '--show-current'])).stdout.trim() || 'HEAD';
+    const records = await readRefRecords(root);
+    const toItem = (record) => ({ name: record.shortName, current: record.current, upstream: record.upstream, remote: record.kind === 'remote' });
+    return { currentBranch, local: records.filter((record) => record.kind === 'local').map(toItem), remote: records.filter((record) => record.kind === 'remote').map(toItem) };
 }
 async function switchBranch(root, branchName, create) {
     if (!/^[A-Za-z0-9._/-]+$/u.test(branchName) || branchName.startsWith('-'))

package/data/build/dist/host/features/types.d.ts

@@ -1,9 +1,10 @@
 import type { CodingNsRpcTable } from '../rpc-table.js';
-import type { SettingsProvider, SettingsScope } from '@deepseek-ai/dsh-settings';
 import type { CodingNsSettings } from '../../shared/contracts/config.js';
+import type { DshHostSettingsProvider, DshHostSettingsScope } from '../../dsh-capabilities/host/config-forms-adapter.js';
 import type { CodingNsNativeSessionBridge } from '../native-session-bridge.js';
 import type { TerminalProcessService } from '../terminal/terminal-process-service.js';
 import type { DebugWorkspaceService } from '../debug.js';
+import type { CodingNsNativeTeamProxy } from '../cli-adapters/native-team-proxy.js';
 export interface CodingNsHostEvents {
     on(name: string, listener: (...args: any[]) => any): unknown;
 }
@@ -18,9 +19,9 @@ export interface CodingNsHostServices {
     /** 当前 DSH 宿主的真实版本；由 Host 入口启动门禁解析并向功能模块传递。 */
     readonly dshVersion?: string;
     /** 持久化设置；测试或嵌入式调用未提供时，局域网映射仍可手动启动。 */
-    readonly settings?: SettingsScope<CodingNsSettings>;
+    readonly settings?: DshHostSettingsScope<CodingNsSettings>;
     /** Host 设置提供器，供远程设置 RPC 做版本校验和持久化写入。 */
-    readonly settingsProvider?: SettingsProvider;
+    readonly settingsProvider?: DshHostSettingsProvider;
     /** 当前 DSH Web 服务实际监听端口，用于自动定位本机 DSH。 */
     readonly dshWebPort?: number;
     /** DSH 官方生成的一次性 Web 认证 URL；只留在 Host 内部完成 Cookie 交换。 */
@@ -29,6 +30,8 @@ export interface CodingNsHostServices {
     readonly events?: CodingNsHostEvents;
     /** DSH 原生会话桥接；不可用时为 undefined，插件不因此阻断启动。 */
     readonly nativeSessions?: CodingNsNativeSessionBridge;
+    /** DSH 0.2 原生 Agent Team Proxy；未安装实验 Team 包时为空。 */
+    readonly nativeTeam?: CodingNsNativeTeamProxy;
     /** 终端启动项和 PTY 进程服务；只由 Host RPC 使用。 */
     readonly terminalProcesses?: TerminalProcessService;
     /** Workspace 级调试服务；只使用 Host 解析出的根目录。 */

package/data/build/dist/host/index-injection.d.ts

@@ -6,12 +6,19 @@ export interface DshIndexInjectionEntry {
     readonly [key: string]: unknown;
 }
 /**
- * 在启动页声明 Host 所有权，同时保留 Desktop 已经提供的完整 Transport。
+ * 在启动页声明 Host 所有权，让 ui-settings 对非回环页面（局域网直连、中继）
+ * 保持 host 模式，同时保留 Desktop 已经提供的完整 Transport。
  *
- * 这里只使用 DSH WebServer 支持的 JSON global 行，不在首页安装全局 setter。
- * 页面可能由 Desktop Shell 在更晚的阶段注入自己的 Transport；因此找不到
- * 已有 Transport 时必须保持不变，不能追加同名全局，否则会覆盖 Desktop 的
- * `streamBaseUrl`，让 `/api/remote.mux` 退回 `ws://app`。
+ * 页面级 `__DSH_TRANSPORT__` 同时被 Desktop 壳、中继桥和这里写入，因此注入只做
+ * 合并写、且只追加脚本行（kind: "script"）：
+ *
+ * - 不追加同名全局行。全局行由 DSH 在文档里直接赋值，一旦排在 Desktop 的行之后
+ *   就会整体覆盖 Transport，丢掉 `streamBaseUrl`，让 `/api/remote.mux` 退回
+ *   `ws://app` 并卡住插件页。
+ * - 脚本行在客户端启动前执行：已有 Transport 时只补 `ownsHost`，没有 Transport
+ *   且页面也不是 Desktop（`dshDesktopBoot` 未定义，Desktop 自己声明所有权）时
+ *   才创建 `{ ownsHost: true }`。
+ * - 未知形状（例如 Desktop 托管的字符串标记）保持原样，不被覆盖。
  */
 export declare function injectDshWebTransportOwnership(table: unknown[]): void;
 //# sourceMappingURL=index-injection.d.ts.map

package/data/build/dist/host/index-injection.js

@@ -1,20 +1,41 @@
 /**
- * 在启动页声明 Host 所有权，同时保留 Desktop 已经提供的完整 Transport。
+ * 在启动页声明 Host 所有权，让 ui-settings 对非回环页面（局域网直连、中继）
+ * 保持 host 模式，同时保留 Desktop 已经提供的完整 Transport。
  *
- * 这里只使用 DSH WebServer 支持的 JSON global 行，不在首页安装全局 setter。
- * 页面可能由 Desktop Shell 在更晚的阶段注入自己的 Transport；因此找不到
- * 已有 Transport 时必须保持不变，不能追加同名全局，否则会覆盖 Desktop 的
- * `streamBaseUrl`，让 `/api/remote.mux` 退回 `ws://app`。
+ * 页面级 `__DSH_TRANSPORT__` 同时被 Desktop 壳、中继桥和这里写入，因此注入只做
+ * 合并写、且只追加脚本行（kind: "script"）：
+ *
+ * - 不追加同名全局行。全局行由 DSH 在文档里直接赋值，一旦排在 Desktop 的行之后
+ *   就会整体覆盖 Transport，丢掉 `streamBaseUrl`，让 `/api/remote.mux` 退回
+ *   `ws://app` 并卡住插件页。
+ * - 脚本行在客户端启动前执行：已有 Transport 时只补 `ownsHost`，没有 Transport
+ *   且页面也不是 Desktop（`dshDesktopBoot` 未定义，Desktop 自己声明所有权）时
+ *   才创建 `{ ownsHost: true }`。
+ * - 未知形状（例如 Desktop 托管的字符串标记）保持原样，不被覆盖。
  */
 export function injectDshWebTransportOwnership(table) {
     const index = table.findIndex((entry) => isTransportInjection(entry));
-    if (index < 0)
-        return;
-    const entry = table[index];
-    if (!isRecord(entry) || !isRecord(entry.value))
-        return;
-    table[index] = { ...entry, value: { ...entry.value, ownsHost: true } };
+    if (index >= 0) {
+        const entry = table[index];
+        if (!isRecord(entry) || !isRecord(entry.value))
+            return;
+        table[index] = { ...entry, value: { ...entry.value, ownsHost: true } };
+    }
+    table.push({ kind: 'script', placement: 'head', text: TRANSPORT_OWNERSHIP_SCRIPT });
 }
+/**
+ * 在客户端读取 Transport 之前补齐 Host 所有权。
+ *
+ * 只做合并写和“无 Transport 时创建”，不覆盖任何已有字段；`dshDesktopBoot`
+ * 存在时交给 Desktop 壳自己的 Transport（它已经带 `ownsHost`）。
+ */
+const TRANSPORT_OWNERSHIP_SCRIPT = [
+    '(function(){',
+    'var t=globalThis.__DSH_TRANSPORT__;',
+    'if(t===void 0||t===null){if(globalThis.dshDesktopBoot===void 0)globalThis.__DSH_TRANSPORT__={ownsHost:true};return}',
+    'if(typeof t==="object")t.ownsHost=true;',
+    '})()',
+].join('');
 function isTransportInjection(value) {
     return isRecord(value) && value.name === '__DSH_TRANSPORT__';
 }

package/data/build/dist/host/index.js

@@ -12,6 +12,7 @@ import { createDshCapabilityRegistry } from '../dsh-capabilities/index.js';
 import { debugInfo, debugWarn } from '../shared/debug.js';
 import { repairLegacySessionLogs } from './session-migration-repair.js';
 import { injectDshWebTransportOwnership } from './index-injection.js';
+import { DshNativeTeamProxy } from './cli-adapters/native-team-proxy.js';
 export function apply(ctx) {
     if (ctx === undefined)
         return;
@@ -53,9 +54,10 @@ export function apply(ctx) {
         debugInfo('codingns4dsh: legacy session repair finished', report);
     });
     ctx.inject(['settings', 'connection', 'webServer'], async (hostCtx) => {
+        const settingsContext = hostCtx;
         debugInfo('codingns4dsh: host inject ready', {
             hasConnection: hostCtx.connection !== undefined,
-            hasSettings: hostCtx.settings !== undefined,
+            hasSettings: settingsContext.settings !== undefined,
             hasWebServer: hostCtx.webServer !== undefined,
         });
         const webServerPort = hostCtx.webServer.port;
@@ -77,12 +79,12 @@ export function apply(ctx) {
         });
         debugInfo('codingns4dsh: host index injection registration ready');
         debugInfo('codingns4dsh: host settings registration begin');
-        const settings = registerCodingNsSettings(hostCtx);
+        const settings = registerCodingNsSettings(settingsContext);
         debugInfo('codingns4dsh: host settings registered');
         const workspaceRoots = new Map();
         // controller 必须在功能模块和浏览器 Client 开始消费状态前完成装配。
         // 工厂在本次启动只读取一次开关，设置 watcher 不会热切同名 service。
-        const terminal = await installTerminalController(hostCtx, settings, hostCtx.settings, {
+        const terminal = await installTerminalController(hostCtx, settings, settingsContext.settings, {
             resolveWorkspaceRoot: (workspaceId) => workspaceRoots.get(workspaceId) ?? resolveWorkspaceRoot(hostCtx, workspaceId),
             registerWorkspaceRoot: (workspaceId, cwd) => workspaceRoots.set(workspaceId, cwd),
         });
@@ -91,11 +93,12 @@ export function apply(ctx) {
             rpc: new CodingNsRpcTable(),
             dshVersion,
             settings,
-            settingsProvider: hostCtx.settings,
+            settingsProvider: settingsContext.settings,
             dshWebPort: webServerPort,
             dshWebAuthenticatedUrl: hostCtx.connection.authenticatedUrl(`http://127.0.0.1:${String(webServerPort)}`),
             events: { on: hostCtx.on.bind(hostCtx) },
             nativeSessions: createCodingNsNativeSessionBridge(hostCtx, dshVersion),
+            nativeTeam: new DshNativeTeamProxy(readOptionalService(hostCtx, 'agentTeams'), readOptionalService(hostCtx, 'agents')),
             terminalProcesses: terminal.processService,
             resolveWorkspaceRoot: (workspaceId) => workspaceRoots.get(workspaceId) ?? resolveWorkspaceRoot(hostCtx, workspaceId),
             listWorkspaceRoots: () => [...workspaceRoots.values(), ...readWorkspaceRoots(hostCtx)],
@@ -158,6 +161,14 @@ export function apply(ctx) {
         }, 'codingns4dsh: 功能模块启停同步');
     });
 }
+function readOptionalService(ctx, name) {
+    try {
+        return ctx.get(name);
+    }
+    catch {
+        return undefined;
+    }
+}
 function isRecord(value) {
     return typeof value === 'object' && value !== null;
 }

package/data/build/dist/host/lan-access-dsh.d.ts

@@ -1,7 +1,7 @@
 import { Transform, type TransformCallback } from 'node:stream';
-import type { SettingsScope } from '@deepseek-ai/dsh-settings';
 import type { CodingNsSettings, LanAccessDshLoginSettings, LoginProtectionScopes } from '../shared/contracts/config.js';
 import type { LanAccessDshConfig, LanAccessDshLoginConfig, LanAccessDshSnapshot } from '../shared/contracts/lan-access-dsh.js';
+import type { DshHostSettingsScope } from '../dsh-capabilities/host/config-forms-adapter.js';
 export interface LanAccessDshStream {
     pipe(destination: LanAccessDshStream): LanAccessDshStream;
     destroy(error?: Error): void;
@@ -112,5 +112,5 @@ export declare class LanAccessDshError extends Error {
     constructor(code: 'LAN_ACCESS_DSH_INVALID' | 'DSH_PORT_NOT_FOUND' | 'DSH_PORT_AMBIGUOUS', message: string);
 }
 export declare function normalizeLanAccessDshConfig(value: Partial<LanAccessDshConfig>, allowedListenHosts?: readonly string[]): LanAccessDshConfig;
-export declare function createLanAccessDshRpcHandler(proxy: LanAccessDshProxy, settings?: SettingsScope<CodingNsSettings>, loginStore?: LanAccessDshLoginStore): (action: string, payload: unknown) => unknown | Promise<unknown>;
+export declare function createLanAccessDshRpcHandler(proxy: LanAccessDshProxy, settings?: DshHostSettingsScope<CodingNsSettings>, loginStore?: LanAccessDshLoginStore): (action: string, payload: unknown) => unknown | Promise<unknown>;
 //# sourceMappingURL=lan-access-dsh.d.ts.map

package/data/build/dist/host/native-session-bridge.d.ts

@@ -12,6 +12,8 @@ export interface CodingNsNativeSessionStore {
     list(): readonly unknown[];
     flush?(session: unknown): Promise<boolean> | Promise<void> | boolean | void;
 }
+/** 插件可安全写入的 DSH Session generation；未来 generation 必须先有专用 adapter。 */
+export type CodingNsNativeSessionFormat = 3 | 4 | 'unknown' | 'unsupported';
 /** 公共 CLI 投影层写入 DSH 的工具调用，不包含任何 Provider 私有字段。 */
 export interface CodingNsNativeToolCall {
     readonly callId: string;
@@ -123,6 +125,8 @@ export interface CodingNsNativeSessionBridge {
     readonly workspaceController?: CodingNsNativeWorkspaceController;
     /** 获取已经进入 DSH 原生 SessionStore 的会话。 */
     get(sessionId: string): unknown | undefined;
+    /** 读取 Session header generation，用于阻止未来格式被旧投影器误写。 */
+    formatVersion?(sessionId: string): CodingNsNativeSessionFormat;
     /** 获取当前 Host 已装载的原生会话；失败时返回空数组。 */
     list(): readonly unknown[];
     /** 调用 DSH 原生 session/list；无 Controller 时回退到本地 SessionStore。 */

package/data/build/dist/host/native-session-bridge.js

@@ -23,11 +23,24 @@ export function createCodingNsNativeSessionBridge(ctx, dshVersion) {
     // 下一步的工具写进旧 step；step/start 到达后由工具投影器重试。
     const pendingStepTransitions = new Set();
     let injectedStepSequence = 0;
-    const modernInjectedSource = isModernDshVersion(dshVersion);
+    const modernProducerSource = isModernDshVersion(dshVersion);
+    // 当前会话的 generation 比运行时版本号更直接：v4 只接受生产者自持的
+    // source.kind，旧的 plugin 包装会被准入拒绝；v3 仍由 dsh-compaction 的
+    // plugin 判定识别。会话头缺少版本时（精简 Host 或旧夹具）才退回版本号推断。
+    const usesProducerOwnedSource = (session) => {
+        const format = sessionFormat(session);
+        if (format === 4)
+            return true;
+        if (format === 3)
+            return false;
+        return modernProducerSource;
+    };
     const appendNativeToolCall = (sessionId, call) => {
         if (on !== undefined && pendingStepTransitions.has(sessionId))
             return null;
         const session = appendableSession(store?.get(sessionId));
+        if (sessionFormat(session) === 'unsupported')
+            return null;
         const position = session === null ? null : activeStep(session);
         if (session === null || position === null)
             return null;
@@ -66,7 +79,7 @@ export function createCodingNsNativeSessionBridge(ctx, dshVersion) {
     };
     const appendNativeToolResult = (handle, result) => {
         const session = appendableSession(store?.get(handle.sessionId));
-        if (session === null)
+        if (session === null || sessionFormat(session) === 'unsupported')
             return false;
         const error = result.error?.trim();
         session.append('tool/result', {
@@ -92,7 +105,7 @@ export function createCodingNsNativeSessionBridge(ctx, dshVersion) {
     };
     const appendNativeRequestContext = (sessionId, context) => {
         const session = appendableSession(store?.get(sessionId));
-        if (session === null || context.provider.trim() === '' || context.model.trim() === '')
+        if (session === null || sessionFormat(session) === 'unsupported' || context.provider.trim() === '' || context.model.trim() === '')
             return false;
         try {
             // request/context 是 token-meter 的容量来源。相同路由重复追加会让
@@ -174,7 +187,7 @@ export function createCodingNsNativeSessionBridge(ctx, dshVersion) {
     const appendNativeUsageSample = (sessionId, usage) => {
         const session = appendableSession(store?.get(sessionId));
         const position = session === null ? null : activeStep(session);
-        if (session === null || position === null)
+        if (session === null || sessionFormat(session) === 'unsupported' || position === null)
             return false;
         try {
             const previousContext = latestRequestContext(session);
@@ -209,7 +222,7 @@ export function createCodingNsNativeSessionBridge(ctx, dshVersion) {
     };
     const appendNativeCompactionEvent = (sessionId, event) => {
         const session = appendableSession(store?.get(sessionId));
-        if (session === null)
+        if (session === null || sessionFormat(session) === 'unsupported')
             return false;
         try {
             if (event.phase === 'start') {
@@ -245,13 +258,13 @@ export function createCodingNsNativeSessionBridge(ctx, dshVersion) {
                         model: event.model?.trim() || 'external-agent',
                     });
                     // DSH 前端的 compaction 节点由紧随 summary 的 checkpoint 替换事件生成。
-                    // DSH 0.1.7 起会话格式只接受生产者自持的 source.kind，旧的 plugin 包装
-                    // 会让整轮持久化失败；0.1.6 及更早仍由 dsh-compaction 的 plugin 标记识别。
+                    // v4 的检查点必须携带同一次 compaction/start 的 compactionId，v3 继续
+                    // 使用该版本 dsh-compaction 识别的 plugin 标记。
                     session.append('user/message', {
                         id: `codingns-compaction-${state.compactionId}`,
                         role: 'user',
                         content: [{ type: 'text', text: summary }],
-                        source: modernInjectedSource
+                        source: usesProducerOwnedSource(session)
                             ? { kind: 'compact-checkpoint', compactionId: state.compactionId }
                             : { kind: 'plugin', plugin: 'compact' },
                     }, {
@@ -290,7 +303,7 @@ export function createCodingNsNativeSessionBridge(ctx, dshVersion) {
                 id: `codingns-external-step-${injectedStepSequence}-${randomUUID()}`,
                 role: 'user',
                 content: [{ type: 'text', text: boundedSummary }],
-                source: modernInjectedSource
+                source: usesProducerOwnedSource(appendableSession(store?.get(sessionId)))
                     ? { kind: 'model-selection', form: 'notice', summary: boundedSummary }
                     : { kind: 'plugin', plugin: 'codingns4dsh', form: 'notice', summary: boundedSummary },
             });
@@ -316,6 +329,9 @@ export function createCodingNsNativeSessionBridge(ctx, dshVersion) {
         get(sessionId) {
             return store?.get(sessionId);
         },
+        formatVersion(sessionId) {
+            return sessionFormat(appendableSession(store?.get(sessionId)));
+        },
         list() {
             try {
                 return store?.list() ?? [];
@@ -491,6 +507,32 @@ function appendableSession(value) {
         return null;
     return value;
 }
+/**
+ * Session V4 的 header 可能直接暴露 version，也可能包在 data 中；旧测试夹具
+ * 没有 header 时返回 unknown，继续保持 0.1.x 的兼容行为。对未来 generation
+ * 直接停止插件写入，避免把 V4 envelope 当作未知事件追加后破坏 projection。
+ */
+function sessionFormat(session) {
+    if (session === null)
+        return 'unknown';
+    let events;
+    try {
+        events = session.snapshotEvents();
+    }
+    catch {
+        return 'unknown';
+    }
+    const header = events[0];
+    if (!isRecord(header))
+        return 'unknown';
+    const data = isRecord(header.data) ? header.data : undefined;
+    const version = finiteInteger(header.version) ?? (data === undefined ? null : finiteInteger(data.version));
+    if (version === null)
+        return 'unknown';
+    if (version === 3 || version === 4)
+        return version;
+    return version > 4 ? 'unsupported' : 'unknown';
+}
 function isNativeStepStart(value) {
     return isRecord(value) && value.type === 'step/start';
 }

package/data/build/dist/host/relay-tunnel-runtime.js

@@ -11,6 +11,7 @@ import { RTCCertificate, RTCDtlsTransport, RTCPeerConnection } from 'werift';
 import { acceptWebRtcHost, createHostSignalingTicketRequest, } from '../transport/webrtc-host.js';
 import { DshGateway } from '../transport/dsh-gateway.js';
 import { createDshTransportDebugLogger } from '../transport/debug.js';
+import { DATA_CHANNEL_MAX_MESSAGE_BYTES } from '../transport/carrier.js';
 /** Relay Tunnel 规定的 DataChannel label，不允许使用插件自定义值。 */
 export const CODINGNS_TUNNEL_DATA_CHANNEL_LABEL = 'codingns-tunnel';
 /** 文件存储适用于 Host 桌面进程；先写临时文件再 rename，避免半截证书。 */
@@ -227,7 +228,15 @@ function isSignalingOpen(socket) {
 export function createWeriftPeerConnectionFactory(identity) {
     return ({ iceServers, iceTransportPolicy }) => {
         const certificate = identity ? new RTCCertificate(identity.privateKeyPem, identity.certPem, identity.signatureHash) : undefined;
-        const peer = new RTCPeerConnection({ iceServers, iceTransportPolicy, ...(certificate ? { certificates: [certificate] } : {}) });
+        // 浏览器按对端 SDP 宣告的 max-message-size 限制 RTCDataChannel.send()。werift 默认
+        // 只宣告 64 KiB，而 Carrier 的整分片是 64 KiB 正文加 20 字节头，浏览器一旦发送
+        // 超过 64 KiB 的消息就会抛错，中继下的原生设置与附件因此失败。
+        const peer = new RTCPeerConnection({
+            iceServers,
+            iceTransportPolicy,
+            maxMessageSize: DATA_CHANNEL_MAX_MESSAGE_BYTES,
+            ...(certificate ? { certificates: [certificate] } : {}),
+        });
         const adapted = {
             get connectionState() { return peer.connectionState; },
             get iceConnectionState() { return peer.iceConnectionState; },

package/data/build/dist/host/remote-web-runtime.js

@@ -128,8 +128,16 @@ export function createRemoteWebRuntimeFeature(options) {
                 }
             }
             catch (error) {
-                debug.log('web.request.error', { operation, streamId: context.envelope.streamId, error: error instanceof Error ? error.message : String(error) });
-                context.send('stream.error', { errorCode: error instanceof RemoteWebRuntimeError ? error.code : 'WEB_RUNTIME_FAILED', detail: error instanceof Error ? error.message : 'DSH Web Runtime 失败', retryable: false });
+                // 稳定错误码 + 请求路径是定位中继设置页空白这类问题的最小信息；
+                // 报文正文与凭据仍然不进日志。
+                const errorCode = error instanceof RemoteWebRuntimeError ? error.code : 'WEB_RUNTIME_FAILED';
+                debug.log('web.request.error', {
+                    operation,
+                    streamId: context.envelope.streamId,
+                    errorCode,
+                    ...(isRecord(request) && typeof request.path === 'string' ? { path: request.path } : {}),
+                });
+                context.send('stream.error', { errorCode, detail: error instanceof Error ? error.message : 'DSH Web Runtime 失败', retryable: false });
             }
             finally {
                 if (operation !== 'web.ws.open') {
@@ -350,19 +358,30 @@ export function createLocalDshWebRuntimeProvider(options) {
         },
         async getPluginBundle(session, _pluginId, path) { return this.getAsset(session, path); },
         async request(session, input) {
-            ensureSession(sessions, session);
-            const path = normalizePath(input.path);
-            if (!allowed.some((prefix) => path === prefix || path.startsWith(prefix)))
-                throw new Error('DSH Web 请求路径不在白名单内');
-            const init = { method: input.method ?? 'GET' };
-            if (input.headers !== undefined)
-                init.headers = Object.fromEntries(input.headers);
-            if (input.body !== undefined)
-                init.body = normalizeConnectionRpcBody(path, input.method ?? 'GET', input.body);
-            await ensureAuthenticated();
-            const response = await fetchLocal(path, init);
-            debug.log('web.provider.request.response', { sessionId: session.sessionId, path, method: input.method ?? 'GET', status: response.status });
-            return { status: response.status, headers: [...response.headers.entries()], body: await response.text() };
+            const method = input.method ?? 'GET';
+            let path = input.path;
+            try {
+                ensureSession(sessions, session);
+                path = normalizePath(input.path);
+                if (!allowed.some((prefix) => path === prefix || path.startsWith(prefix)))
+                    throw new RemoteWebRuntimeError('WEB_PATH_NOT_ALLOWED', 'DSH Web 请求路径不在白名单内');
+                const init = { method };
+                if (input.headers !== undefined)
+                    init.headers = Object.fromEntries(input.headers);
+                if (input.body !== undefined)
+                    init.body = normalizeConnectionRpcBody(path, method, input.body);
+                await ensureAuthenticated();
+                const response = await fetchLocal(path, init);
+                debug.log('web.provider.request.response', { sessionId: session.sessionId, path, method, status: response.status });
+                return { status: response.status, headers: [...response.headers.entries()], body: await response.text() };
+            }
+            catch (error) {
+                // 失败原因只以稳定错误码进入日志：路径和状态足够定位是哪类请求，
+                // 具体报文仍然不进日志。
+                const errorCode = error instanceof RemoteWebRuntimeError ? error.code : 'WEB_REQUEST_FAILED';
+                debug.log('web.provider.request.error', { sessionId: safeSessionId(session), path, method, errorCode });
+                throw error instanceof RemoteWebRuntimeError ? error : new RemoteWebRuntimeError(errorCode, error instanceof Error ? error.message : String(error));
+            }
         },
         async openWebSocket(session, path) {
             ensureSession(sessions, session);
@@ -527,11 +546,15 @@ async function readAsset(response) {
 }
 function ensureSession(sessions, session) {
     if (sessions.get(session.sessionId) !== session)
-        throw new Error('DSH Web Session 已失效');
+        throw new RemoteWebRuntimeError('WEB_SESSION_NOT_FOUND', 'DSH Web Session 已失效');
+}
+/** 会话可能已经不在 map 里（例如 Host 重启或旧 iframe 的收尾请求），日志取不到 id 也要能记录。 */
+function safeSessionId(session) {
+    return session === undefined ? undefined : session.sessionId;
 }
 function normalizePath(value) {
     if (!value.startsWith('/') || value.includes('\\') || value.split('/').some((part) => part === '..'))
-        throw new Error('DSH Web 路径无效');
+        throw new RemoteWebRuntimeError('WEB_PATH_INVALID', 'DSH Web 路径无效');
     return value;
 }
 function toBytes(value) {

package/data/build/dist/host/rpc.d.ts

@@ -1,7 +1,25 @@
 import type { Context } from '@deepseek-ai/cordis';
-import type { ConnectionRpcHandler } from '@deepseek-ai/dsh-client-connection';
-import type { SettingsProvider } from '@deepseek-ai/dsh-settings';
 import { type CodingNsRpcHandler, type CodingNsRpcTable } from './rpc-table.js';
+import type { DshHostSettingsProvider } from '../dsh-capabilities/host/config-forms-adapter.js';
+/** 0.2 Connection handler 的 Peer 参数；旧版 handler 仍可通过可选参数调用。 */
+/** CodingNS 自有的 Connection RPC 结果契约，避免绑定 DSH 具体导出名称。 */
+type CodingNsConnectionRpcResult<T = unknown> = {
+    readonly ok: true;
+    readonly value: T;
+    readonly attachments?: readonly CodingNsConnectionRpcAttachment[];
+} | {
+    readonly ok: false;
+    readonly error: {
+        readonly code: string;
+        readonly message: string;
+        readonly details: object;
+    };
+};
+interface CodingNsConnectionRpcAttachment {
+    readonly path: readonly (string | number)[];
+    readonly bytes: Uint8Array;
+}
+type CodingNsConnectionRpcHandler = (endpoint: string, payload: unknown, signal: AbortSignal, peer?: unknown) => Promise<CodingNsConnectionRpcResult<unknown>>;
 /**
  * 创建 Codingns4DSH Host RPC 主处理器。
  *
@@ -10,9 +28,10 @@ import { type CodingNsRpcHandler, type CodingNsRpcTable } from './rpc-table.js';
  * 之间的唯一边界：密码只在一次 RPC 请求中经过 Host，refresh token 只进入 Host
  * 凭据存储。
  */
-export declare function createCodingNsRpcHandler(table: CodingNsRpcTable): ConnectionRpcHandler;
+export declare function createCodingNsRpcHandler(table: CodingNsRpcTable): CodingNsConnectionRpcHandler;
 /** 在当前 Connection 上挂载 Codingns4DSH RPC 主处理器；注销由调用方的 effect 负责。 */
-export declare function registerCodingNsRpc(ctx: Context, table: CodingNsRpcTable, settingsProvider?: SettingsProvider): void;
+export declare function registerCodingNsRpc(ctx: Context, table: CodingNsRpcTable, settingsProvider?: DshHostSettingsProvider): void;
 /** 创建远程设置处理器；只允许 Codingns4DSH 自己的 namespace 和路径编辑。 */
-export declare function createCodingNsSettingsRpcHandler(provider: SettingsProvider): CodingNsRpcHandler;
+export declare function createCodingNsSettingsRpcHandler(provider: DshHostSettingsProvider): CodingNsRpcHandler;
+export {};
 //# sourceMappingURL=rpc.d.ts.map