@qlzt/dsh-api-remote-access 0.0.0-stage → 0.2.1-rc.2

package/lib/typert.host.js

@@ -0,0 +1,233 @@
+/* Generated by @qlzt/dsh-typert-generator from FaceModel — do not edit. */
+import { z } from 'zod'
+
+import { createTypertRemoteInfo } from '@qlzt/dsh-typert-protocol/remote-info'
+
+let _deepseek_ai_dsh_api_remote_access_remoteAccess_follow_result$schema$value
+const _deepseek_ai_dsh_api_remote_access_remoteAccess_follow_result$schema = () => (_deepseek_ai_dsh_api_remote_access_remoteAccess_follow_result$schema$value ??= z.union([z.object({
+  'type': z.literal("baseline").readonly(),
+  'owner': z.literal(true).readonly(),
+}), z.object({
+  'type': z.literal("baseline").readonly(),
+  'owner': z.literal(false).readonly(),
+  'grants': z.array(z.object({
+  'resource': z.union([z.object({
+  'kind': z.literal("global").readonly(),
+}), z.object({
+  'kind': z.literal("session").readonly(),
+  'id': z.string().readonly(),
+}), z.object({
+  'kind': z.literal("workspace").readonly(),
+  'id': z.string().readonly(),
+})]).readonly(),
+  'actions': z.array(z.string()).readonly().describe('Endpoint actions allowed on this resource without call arguments, sorted; plain strings because Typert generates no codec for template literal types.'),
+})).readonly(),
+}), z.object({
+  'type': z.literal("upsert").readonly(),
+  'grant': z.object({
+  'resource': z.union([z.object({
+  'kind': z.literal("global").readonly(),
+}), z.object({
+  'kind': z.literal("session").readonly(),
+  'id': z.string().readonly(),
+}), z.object({
+  'kind': z.literal("workspace").readonly(),
+  'id': z.string().readonly(),
+})]).readonly(),
+  'actions': z.array(z.string()).readonly().describe('Endpoint actions allowed on this resource without call arguments, sorted; plain strings because Typert generates no codec for template literal types.'),
+}).readonly(),
+}), z.object({
+  'type': z.literal("remove").readonly(),
+  'resource': z.union([z.object({
+  'kind': z.literal("global").readonly(),
+}), z.object({
+  'kind': z.literal("session").readonly(),
+  'id': z.string().readonly(),
+}), z.object({
+  'kind': z.literal("workspace").readonly(),
+  'id': z.string().readonly(),
+})]).readonly(),
+})]))
+
+const $remote = createTypertRemoteInfo({
+  package: '@qlzt/dsh-api-remote-access',
+  methods: {
+    'remoteAccess/follow': {
+      service: 'remoteAccess',
+      description: 'Stream the calling Peer\'s access snapshot: one baseline, then `upsert` and `remove` frames after each `invalidate()` and each policy registration or removal that changes a grant. The owner receives only `{ owner: true }`. The generation ends when `signal` aborts or this service unloads, so a reloaded service starts every reader from a fresh baseline.',
+      mode: 'stream',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      cancellation: { parameter: 'signal' },
+      result: {
+        mode: 'strict',
+        typeSymbol: '@qlzt/dsh-api-remote-access/types#RemoteAccessFrame',
+        create: _deepseek_ai_dsh_api_remote_access_remoteAccess_follow_result$schema,
+        description: 'the access frames of one generation.',
+        jsonSchema: {"oneOf":[{"type":"object","properties":{"type":{"type":"string","const":"baseline"},"owner":{"type":"boolean","const":true}},"required":["type","owner"],"additionalProperties":true},{"type":"object","properties":{"type":{"type":"string","const":"baseline"},"owner":{"type":"boolean","const":false},"grants":{"type":"array","items":{"type":"object","properties":{"resource":{"oneOf":[{"type":"object","properties":{"kind":{"type":"string","const":"global"}},"required":["kind"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"session"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"workspace"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true}]},"actions":{"type":"array","items":{"type":"string"},"description":"Endpoint actions allowed on this resource without call arguments, sorted; plain strings because Typert generates no codec for template literal types."}},"required":["resource","actions"],"additionalProperties":true}}},"required":["type","owner","grants"],"additionalProperties":true},{"type":"object","properties":{"type":{"type":"string","const":"upsert"},"grant":{"type":"object","properties":{"resource":{"oneOf":[{"type":"object","properties":{"kind":{"type":"string","const":"global"}},"required":["kind"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"session"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"workspace"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true}]},"actions":{"type":"array","items":{"type":"string"},"description":"Endpoint actions allowed on this resource without call arguments, sorted; plain strings because Typert generates no codec for template literal types."}},"required":["resource","actions"],"additionalProperties":true}},"required":["type","grant"],"additionalProperties":true},{"type":"object","properties":{"type":{"type":"string","const":"remove"},"resource":{"oneOf":[{"type":"object","properties":{"kind":{"type":"string","const":"global"}},"required":["kind"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"session"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"workspace"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true}]}},"required":["type","resource"],"additionalProperties":true}]},
+      },
+      sourceLocation: {"file":"packages/api/remote-access/src/index.ts","line":271,"column":10},
+    },
+  },
+}, z)
+
+export const TYPERT = {
+  package: '@qlzt/dsh-api-remote-access',
+  face: 'host',
+  schemas: [
+  ],
+  get invocations() { return $remote.descriptors },
+  model: {
+    "services": [
+      {
+        "description": "Registry of access policies, the Gateway's access decisions, list filtering, and the per-Peer access snapshot. Every composition that mounts the Gateway mounts this service too.",
+        "summary": "Registry of access policies, the Gateway's access decisions, list filtering, and the per-Peer access snapshot.",
+        "tags": [],
+        "jsDoc": "/**\n * Registry of access policies, the Gateway's access decisions, list\n * filtering, and the per-Peer access snapshot. Every composition that mounts\n * the Gateway mounts this service too.\n */",
+        "key": "remoteAccess",
+        "exportName": "RemoteAccessService",
+        "members": [
+          {
+            "kind": "method",
+            "name": "registerPolicy",
+            "signature": "registerPolicy<K extends Exclude<keyof PrincipalMap, 'owner'>>(kind: K, policy: RemoteAccessPolicy<PrincipalMap[K]>): () => void",
+            "summary": "Register the policy of one non-owner principal kind in the caller's fiber; open snapshots are recomputed on registration and removal.",
+            "jsDoc": "/**\n * Register the policy of one non-owner principal kind in the caller's\n * fiber; open snapshots are recomputed on registration and removal.\n * @param kind - the principal kind the policy serves; never `owner`.\n * @param policy - business-owned bindings and refusal reasons for principals of `kind`.\n * @returns disposer removing this policy.\n * @throws Error when `kind` already has a policy.\n */"
+          },
+          {
+            "kind": "method",
+            "name": "invalidate",
+            "signature": "invalidate(principal?: Principal): void",
+            "summary": "Report that the bindings or condition answers for `principal` may have changed.",
+            "jsDoc": "/**\n * Report that the bindings or condition answers for `principal` may have\n * changed. Business packages call this on every grant, revocation, mode\n * change, and expiry; open snapshots re-push, and the next failure of each\n * policy is logged again.\n * @param principal - affected principal; omitted for every principal.\n */"
+          },
+          {
+            "kind": "method",
+            "name": "decide",
+            "signature": "decide(request: RemoteAccessRequest<Principal>): RemoteAccessDecision",
+            "summary": "Gateway-only: decide one request whose resources the Gateway resolved.",
+            "jsDoc": "/**\n * Gateway-only: decide one request whose resources the Gateway resolved.\n * The owner is allowed, and so is `remoteAccess/follow`: every Peer reads\n * its own snapshot. Otherwise the action is allowed only when, on every\n * listed resource, some binding of the principal's policy names that\n * resource, has a role listing the action, and has no condition or a\n * condition that allows. `bindings()` is called once per decision.\n * @param request - the caller or recipient, the action, the resources it\n *   touches, and a call's arguments.\n * @returns `allow`; or `deny` with `no-allow` when the principal kind has\n *   no policy, the first refusing condition's reason on the first resource\n *   no binding allows, else `explain()`'s reason, else `no-allow`;\n *   `policy-failed` when `bindings()`, a condition, or `explain()` throws,\n *   logged once per policy until the next `invalidate()`. The Gateway\n *   throws `remote-access/denied` for a denied call and drops a denied event.\n */"
+          },
+          {
+            "kind": "method",
+            "name": "allows",
+            "signature": "allows(resource: RemoteAccessResource): boolean",
+            "summary": "Filter items inside a Remote method.",
+            "jsDoc": "/**\n * Filter items inside a Remote method. The invocation is read from the\n * Context that accessed this service, so call it as\n * `this.ctx.remoteAccess.allows(resource)` from the Remote method. Each\n * check reads the policy's bindings again, so a long-running stream sees\n * binding changes from the next check on.\n * @param resource - resource of one result item.\n * @returns true for the owner and outside a Remote call; otherwise whether\n *   the invocation's endpoint action is allowed on `resource` without call\n *   arguments, false when the policy is absent or fails.\n */"
+          },
+          {
+            "kind": "method",
+            "name": "snapshotFor",
+            "signature": "snapshotFor(principal: Principal): RemoteAccessBaseline",
+            "summary": "The baseline a page opens with before its snapshot stream connects.",
+            "jsDoc": "/**\n * The baseline a page opens with before its snapshot stream connects. A\n * business package rendering a non-owner page assigns this value to\n * {@link REMOTE_ACCESS_SNAPSHOT_KEY} after every index injection row,\n * replacing the owner baseline the webServer index carries.\n * @param principal - the page's caller identity.\n * @returns the owner baseline for the owner; otherwise the principal's current grants.\n */"
+          },
+          {
+            "kind": "method",
+            "name": "follow",
+            "signature": "@Remote({ mode: 'stream' }) async *follow(signal: AbortSignal): AsyncIterable<RemoteAccessFrame>",
+            "summary": "Stream the calling Peer's access snapshot: one baseline, then `upsert` and `remove` frames after each `invalidate()` and each policy registration or removal that changes a grant.",
+            "jsDoc": "/**\n * Stream the calling Peer's access snapshot: one baseline, then `upsert`\n * and `remove` frames after each `invalidate()` and each policy\n * registration or removal that changes a grant. The owner receives only\n * `{ owner: true }`. The generation ends when `signal` aborts or this\n * service unloads, so a reloaded service starts every reader from a fresh\n * baseline.\n * @param signal - generation cancellation.\n * @returns the access frames of one generation.\n */"
+          }
+        ],
+        "types": [
+          {
+            "name": "Branded",
+            "declaration": "export type Branded<B extends string> = string & { readonly [BRAND]: B; };"
+          },
+          {
+            "name": "Principal",
+            "declaration": "export type Principal = PrincipalMap[keyof PrincipalMap];"
+          },
+          {
+            "name": "PrincipalMap",
+            "declaration": "export interface PrincipalMap {\n    owner: { readonly kind: 'owner'; };\n}"
+          },
+          {
+            "name": "RemoteAccessAction",
+            "declaration": "export type RemoteAccessAction = RemoteAccessEndpoint | `event:${string}`;"
+          },
+          {
+            "name": "RemoteAccessBaseline",
+            "declaration": "export type RemoteAccessBaseline = Extract<RemoteAccessFrame, { type: 'baseline'; }>;"
+          },
+          {
+            "name": "RemoteAccessBinding",
+            "declaration": "export type RemoteAccessBinding = { [K in RemoteAccessResourceKind]: { readonly role: RemoteAccessRole<K>; readonly resource: RemoteAccessResourceOf<K>; readonly condition?: RemoteAccessCondition<K>; } }[RemoteAccessResourceKind];"
+          },
+          {
+            "name": "RemoteAccessCondition",
+            "declaration": "export type RemoteAccessCondition<K extends RemoteAccessResourceKind> = (request: { readonly action: RemoteAccessAction; readonly resource: RemoteAccessResourceOf<K>; readonly args?: Readonly<Record<string, unknown>>; }) => RemoteAccessDecision;"
+          },
+          {
+            "name": "RemoteAccessDecision",
+            "declaration": "export type RemoteAccessDecision = { readonly kind: 'allow'; } | { readonly kind: 'deny'; readonly reason: string; };"
+          },
+          {
+            "name": "RemoteAccessEndpoint",
+            "declaration": "export type RemoteAccessEndpoint = `${string}/${string}`;"
+          },
+          {
+            "name": "RemoteAccessFrame",
+            "declaration": "export type RemoteAccessFrame = { readonly type: 'baseline'; readonly owner: true; } | { readonly type: 'baseline'; readonly owner: false; readonly grants: readonly RemoteAccessGrant[]; } | { readonly type: 'upsert'; readonly grant: RemoteAccessGrant; } | { readonly type: 'remove'; readonly resource: RemoteAccessResource; };"
+          },
+          {
+            "name": "RemoteAccessGrant",
+            "declaration": "export interface RemoteAccessGrant {\n    readonly resource: RemoteAccessResource;\n    readonly actions: readonly string[];\n}"
+          },
+          {
+            "name": "RemoteAccessPolicy",
+            "declaration": "export interface RemoteAccessPolicy<P extends Principal> {\n    bindings(principal: P): readonly RemoteAccessBinding[];\n    explain?(request: RemoteAccessRequest<P>): string | undefined;\n}"
+          },
+          {
+            "name": "RemoteAccessRequest",
+            "declaration": "export interface RemoteAccessRequest<P extends Principal> {\n    readonly principal: P;\n    readonly action: RemoteAccessAction;\n    readonly resources: readonly RemoteAccessResource[];\n    readonly args?: Readonly<Record<string, unknown>>;\n}"
+          },
+          {
+            "name": "RemoteAccessResource",
+            "declaration": "export type RemoteAccessResource = { readonly kind: 'global'; } | { [Kind in TypertResourceKind]: { readonly kind: Kind; readonly id: TypertResourceId<TypertResourceMap[Kind]>; } }[TypertResourceKind];"
+          },
+          {
+            "name": "RemoteAccessResourceKind",
+            "declaration": "export type RemoteAccessResourceKind = 'global' | TypertResourceKind;"
+          },
+          {
+            "name": "RemoteAccessResourceOf",
+            "declaration": "export type RemoteAccessResourceOf<K extends RemoteAccessResourceKind> = Extract<RemoteAccessResource, { readonly kind: K; }>;"
+          },
+          {
+            "name": "RemoteAccessRole",
+            "declaration": "export interface RemoteAccessRole<K extends RemoteAccessResourceKind> {\n    readonly name: string;\n    readonly resource: K;\n    readonly actions: readonly RemoteAccessAction[];\n}"
+          },
+          {
+            "name": "SessionId",
+            "declaration": "export type SessionId = Branded<'SessionId'>;"
+          },
+          {
+            "name": "TypertResource",
+            "declaration": "export interface TypertResource<Id> {\n    readonly [RESOURCE_ID]: Id;\n}"
+          },
+          {
+            "name": "TypertResourceId",
+            "declaration": "export type TypertResourceId<Resource> = Resource extends TypertResource<infer Id> ? Id : never;"
+          },
+          {
+            "name": "TypertResourceKind",
+            "declaration": "export type TypertResourceKind = Extract<keyof TypertResourceMap, string>;"
+          },
+          {
+            "name": "TypertResourceMap",
+            "declaration": "export interface TypertResourceMap {\n    session: TypertResource<SessionId>;\n    workspace: TypertResource<WorkspaceId>;\n}"
+          },
+          {
+            "name": "WorkspaceId",
+            "declaration": "export type WorkspaceId = Branded<'WorkspaceId'>;"
+          }
+        ]
+      }
+    ],
+    "events": [],
+    "objects": []
+  },
+}

package/lib/typert.remote-client.d.ts

@@ -0,0 +1,26 @@
+/* Generated by @qlzt/dsh-typert-generator from the Host FaceModel — do not edit. */
+import type {
+  RemoteResult,
+  RemoteStreamHandle,
+  TypertRemoteInfo,
+  TypertRemoteMethod,
+} from '@qlzt/dsh-typert-protocol'
+import type { RemoteAccessFrame } from '@qlzt/dsh-api-remote-access/types'
+
+declare module '@qlzt/dsh-typert-protocol' {
+  interface TypertRemoteNamespace$72656d6f7465416363657373 {
+    follow: (signal?: AbortSignal) => RemoteStreamHandle<RemoteAccessFrame, never>
+  }
+  interface TypertRemoteMap {
+    'remoteAccess/follow': (signal?: AbortSignal) => RemoteStreamHandle<RemoteAccessFrame, never>
+  }
+  interface TypertRemoteNamespaceMap {
+    'remoteAccess': TypertRemoteNamespace$72656d6f7465416363657373
+  }
+}
+
+export declare const TYPERT_REMOTE: TypertRemoteInfo<{
+  readonly 'remoteAccess/follow': TypertRemoteMethod<{  }, RemoteAccessFrame, 'stream'>
+}>
+export default TYPERT_REMOTE
+//# sourceMappingURL=typert.remote-client.d.ts.map

package/lib/typert.remote-client.js

@@ -0,0 +1,75 @@
+/* Generated by @qlzt/dsh-typert-generator from the Host FaceModel — do not edit. */
+import { z } from 'zod'
+
+import { createTypertRemoteInfo } from '@qlzt/dsh-typert-protocol/remote-info'
+
+let _deepseek_ai_dsh_api_remote_access_remoteAccess_follow_result$schema$value
+const _deepseek_ai_dsh_api_remote_access_remoteAccess_follow_result$schema = () => (_deepseek_ai_dsh_api_remote_access_remoteAccess_follow_result$schema$value ??= z.union([z.object({
+  'type': z.literal("baseline").readonly(),
+  'owner': z.literal(true).readonly(),
+}), z.object({
+  'type': z.literal("baseline").readonly(),
+  'owner': z.literal(false).readonly(),
+  'grants': z.array(z.object({
+  'resource': z.union([z.object({
+  'kind': z.literal("global").readonly(),
+}), z.object({
+  'kind': z.literal("session").readonly(),
+  'id': z.string().readonly(),
+}), z.object({
+  'kind': z.literal("workspace").readonly(),
+  'id': z.string().readonly(),
+})]).readonly(),
+  'actions': z.array(z.string()).readonly().describe('Endpoint actions allowed on this resource without call arguments, sorted; plain strings because Typert generates no codec for template literal types.'),
+})).readonly(),
+}), z.object({
+  'type': z.literal("upsert").readonly(),
+  'grant': z.object({
+  'resource': z.union([z.object({
+  'kind': z.literal("global").readonly(),
+}), z.object({
+  'kind': z.literal("session").readonly(),
+  'id': z.string().readonly(),
+}), z.object({
+  'kind': z.literal("workspace").readonly(),
+  'id': z.string().readonly(),
+})]).readonly(),
+  'actions': z.array(z.string()).readonly().describe('Endpoint actions allowed on this resource without call arguments, sorted; plain strings because Typert generates no codec for template literal types.'),
+}).readonly(),
+}), z.object({
+  'type': z.literal("remove").readonly(),
+  'resource': z.union([z.object({
+  'kind': z.literal("global").readonly(),
+}), z.object({
+  'kind': z.literal("session").readonly(),
+  'id': z.string().readonly(),
+}), z.object({
+  'kind': z.literal("workspace").readonly(),
+  'id': z.string().readonly(),
+})]).readonly(),
+})]))
+
+export const TYPERT_REMOTE = createTypertRemoteInfo({
+  package: '@qlzt/dsh-api-remote-access',
+  methods: {
+    'remoteAccess/follow': {
+      service: 'remoteAccess',
+      description: 'Stream the calling Peer\'s access snapshot: one baseline, then `upsert` and `remove` frames after each `invalidate()` and each policy registration or removal that changes a grant. The owner receives only `{ owner: true }`. The generation ends when `signal` aborts or this service unloads, so a reloaded service starts every reader from a fresh baseline.',
+      mode: 'stream',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      cancellation: { parameter: 'signal' },
+      result: {
+        mode: 'strict',
+        typeSymbol: '@qlzt/dsh-api-remote-access/types#RemoteAccessFrame',
+        create: _deepseek_ai_dsh_api_remote_access_remoteAccess_follow_result$schema,
+        description: 'the access frames of one generation.',
+        jsonSchema: {"oneOf":[{"type":"object","properties":{"type":{"type":"string","const":"baseline"},"owner":{"type":"boolean","const":true}},"required":["type","owner"],"additionalProperties":true},{"type":"object","properties":{"type":{"type":"string","const":"baseline"},"owner":{"type":"boolean","const":false},"grants":{"type":"array","items":{"type":"object","properties":{"resource":{"oneOf":[{"type":"object","properties":{"kind":{"type":"string","const":"global"}},"required":["kind"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"session"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"workspace"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true}]},"actions":{"type":"array","items":{"type":"string"},"description":"Endpoint actions allowed on this resource without call arguments, sorted; plain strings because Typert generates no codec for template literal types."}},"required":["resource","actions"],"additionalProperties":true}}},"required":["type","owner","grants"],"additionalProperties":true},{"type":"object","properties":{"type":{"type":"string","const":"upsert"},"grant":{"type":"object","properties":{"resource":{"oneOf":[{"type":"object","properties":{"kind":{"type":"string","const":"global"}},"required":["kind"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"session"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"workspace"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true}]},"actions":{"type":"array","items":{"type":"string"},"description":"Endpoint actions allowed on this resource without call arguments, sorted; plain strings because Typert generates no codec for template literal types."}},"required":["resource","actions"],"additionalProperties":true}},"required":["type","grant"],"additionalProperties":true},{"type":"object","properties":{"type":{"type":"string","const":"remove"},"resource":{"oneOf":[{"type":"object","properties":{"kind":{"type":"string","const":"global"}},"required":["kind"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"session"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true},{"type":"object","properties":{"kind":{"type":"string","const":"workspace"},"id":{"type":"string"}},"required":["kind","id"],"additionalProperties":true}]}},"required":["type","resource"],"additionalProperties":true}]},
+      },
+      sourceLocation: {"file":"packages/api/remote-access/src/index.ts","line":271,"column":10},
+    },
+  },
+}, z)
+
+export default TYPERT_REMOTE

package/lib/types/client/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Client face: starts from the access snapshot the index injected, follows
+ * the calling Peer's snapshot stream, provides the `remoteAccess` Client
+ * service whose `source(kind, id, action)` answers for any declared-kind
+ * resource, and publishes `useRemoteAccess(action)` on the global resource.
+ * Domain UI adapters publish their own resource Hooks over `source()`. Every
+ * answer is a boolean: true for the owner, false without a snapshot or after
+ * a non-owner stream fails; the Host enforces every call regardless.
+ * @module @qlzt/dsh-api-remote-access/client
+ */
+import type { Context } from '@deepseek-ai/cordis';
+export type { RemoteAccessAction, RemoteAccessEndpoint, RemoteAccessFrame, RemoteAccessGrant, RemoteAccessResource, TypertResourceKind, } from '../types.ts';
+export type { ClientRemoteAccess, RemoteEndpoint } from './mount.ts';
+/** Required Client services: the Remote mount face and the Slot registry. */
+export declare const inject: string[];
+/**
+ * Mount the generated `remoteAccess` namespace and publish the access Hooks.
+ * @param ctx - Client root Context.
+ * @returns disposer that withdraws the namespace after the stream stops.
+ */
+export declare function apply(ctx: Context): Promise<() => Promise<void>>;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/client/index.js

@@ -0,0 +1,25 @@
+/**
+ * Client face: starts from the access snapshot the index injected, follows
+ * the calling Peer's snapshot stream, provides the `remoteAccess` Client
+ * service whose `source(kind, id, action)` answers for any declared-kind
+ * resource, and publishes `useRemoteAccess(action)` on the global resource.
+ * Domain UI adapters publish their own resource Hooks over `source()`. Every
+ * answer is a boolean: true for the owner, false without a snapshot or after
+ * a non-owner stream fails; the Host enforces every call regardless.
+ * @module @qlzt/dsh-api-remote-access/client
+ */
+import remoteAccessRemote from '@qlzt/dsh-api-remote-access/remote';
+import { REMOTE_ACCESS_SNAPSHOT_KEY } from "../snapshot.js";
+import { mountAccess } from "./mount.js";
+import { parseInjectedBaseline } from "./state.js";
+/** Required Client services: the Remote mount face and the Slot registry. */
+export const inject = ['remote', 'slots'];
+/**
+ * Mount the generated `remoteAccess` namespace and publish the access Hooks.
+ * @param ctx - Client root Context.
+ * @returns disposer that withdraws the namespace after the stream stops.
+ */
+export function apply(ctx) {
+    return mountAccess(ctx, remoteAccessRemote, parseInjectedBaseline(Reflect.get(globalThis, REMOTE_ACCESS_SNAPSHOT_KEY)));
+}
+//# sourceMappingURL=index.js.map

package/lib/types/client/mount.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Client access mount: follows the calling Peer's access snapshot, provides
+ * the `remoteAccess` Client service, and publishes the global-resource `useRemoteAccess` Hook.
+ * The entry module supplies the generated `remoteAccess` contribution, so
+ * specs mount a fake one.
+ * @module @qlzt/dsh-api-remote-access/src/client/mount
+ */
+import { type Context } from '@deepseek-ai/cordis';
+import type { HostObservable } from '@qlzt/dsh-client-ui-slots';
+import type { TypertRemoteContribution, TypertRemoteMap, TypertResourceKind } from '@qlzt/dsh-typert-protocol';
+import { type Baseline } from './state.ts';
+/** Every endpoint the Client Remote namespaces declare. */
+export type RemoteEndpoint = Extract<keyof TypertRemoteMap, string>;
+/** Client access answers over the calling Peer's snapshot; it never issues a request. */
+export interface ClientRemoteAccess {
+    /**
+     * Whether the current Peer may call `action` on one resource.
+     * True for the owner; false without a baseline and after a non-owner
+     * stream fails; otherwise whether the resource's grant lists the action.
+     * @param kind - resource kind declared in `TypertResourceMap`.
+     * @param id - resource identity.
+     * @param action - endpoint action the caller would invoke.
+     * @returns identity-stable boolean source for this `(kind, id, action)`.
+     */
+    source(kind: TypertResourceKind, id: string, action: string): HostObservable<boolean>;
+}
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        /** Client access answers for the calling Peer. */
+        remoteAccess: ClientRemoteAccess;
+    }
+}
+declare module '@qlzt/dsh-client-ui-slots' {
+    interface GlobalStandardProps {
+        /** Whether the current Peer may call `action` on the global resource. */
+        useRemoteAccess: (action: RemoteEndpoint) => boolean;
+    }
+}
+/**
+ * Mount the `remoteAccess` namespace, follow the access snapshot, provide the
+ * `remoteAccess` Client service, and publish the global-resource `useRemoteAccess` Hook.
+ * Answers start from the page's injected baseline, or false without one,
+ * and follow the stream's frames from then on.
+ * @param ctx - Client root Context injecting `remote` and `slots`.
+ * @param contribution - generated `remoteAccess` Remote contribution.
+ * @param initial - the page's injected opening baseline, read before the stream connects.
+ * @returns disposer that withdraws the namespace after the stream stops.
+ */
+export declare function mountAccess(ctx: Context, contribution: TypertRemoteContribution, initial?: Baseline): Promise<() => Promise<void>>;
+//# sourceMappingURL=mount.d.ts.map

package/lib/types/client/mount.js

@@ -0,0 +1,81 @@
+/**
+ * Client access mount: follows the calling Peer's access snapshot, provides
+ * the `remoteAccess` Client service, and publishes the global-resource `useRemoteAccess` Hook.
+ * The entry module supplies the generated `remoteAccess` contribution, so
+ * specs mount a fake one.
+ * @module @qlzt/dsh-api-remote-access/src/client/mount
+ */
+import { Service } from '@deepseek-ai/cordis';
+import { RemoteSnapshotStream, RemoteStreamCarrierError, } from '@qlzt/dsh-api-gateway/client';
+import { ClientAccessState } from "./state.js";
+/** The `remoteAccess` Client service over one snapshot owner. */
+class ClientRemoteAccessService extends Service {
+    state;
+    /**
+     * @param ctx - Client Context the service is provided on.
+     * @param state - snapshot owner answering every source.
+     */
+    constructor(ctx, state) {
+        super(ctx, 'remoteAccess');
+        this.state = state;
+    }
+    source(kind, id, action) {
+        return this.state.resource(kind, id, action);
+    }
+}
+/**
+ * Mount the `remoteAccess` namespace, follow the access snapshot, provide the
+ * `remoteAccess` Client service, and publish the global-resource `useRemoteAccess` Hook.
+ * Answers start from the page's injected baseline, or false without one,
+ * and follow the stream's frames from then on.
+ * @param ctx - Client root Context injecting `remote` and `slots`.
+ * @param contribution - generated `remoteAccess` Remote contribution.
+ * @param initial - the page's injected opening baseline, read before the stream connects.
+ * @returns disposer that withdraws the namespace after the stream stops.
+ */
+export async function mountAccess(ctx, contribution, initial) {
+    const state = new ClientAccessState(initial);
+    new ClientRemoteAccessService(ctx, state);
+    ctx.slots.provideRoot({
+        keyedHooks: { remoteAccess: action => state.global(action) },
+    });
+    const unmount = await ctx.remote.$mount(contribution);
+    const follow = ctx.inject(['remote.remoteAccess'], (remoteCtx) => {
+        const control = createAccessStream(remoteCtx.remote, state, remoteCtx.logger);
+        control.start();
+        remoteCtx.effect(() => async () => { await control.dispose(); }, 'remote-access.client.follow');
+    });
+    return async () => {
+        await follow.dispose();
+        await unmount();
+    };
+}
+/**
+ * Create the reconnecting access snapshot stream. A carrier loss keeps the
+ * last snapshot while the stream reconnects; a terminal failure keeps the
+ * owner's answers and turns a non-owner's answers false.
+ */
+function createAccessStream(remote, state, logger) {
+    const stream = remote.$stream({
+        name: 'Remote access stream',
+        open: signal => remote.remoteAccess.follow(signal),
+        ended: accepted => accepted
+            ? new RemoteStreamCarrierError('Remote access stream ended without a terminal result')
+            : new Error('Remote access stream ended before its opening snapshot'),
+    });
+    return new RemoteSnapshotStream(stream, {
+        name: 'Remote access stream',
+        isSnapshot: (frame) => frame.type === 'baseline',
+        replace: (frame) => { state.replace(frame); },
+        update: (frame) => { state.update(frame); },
+        failed: (error) => {
+            // Only a non-owner's answers turn false after a terminal failure, so only its report names the recovery.
+            if (state.owner)
+                logger.error('access snapshot stream failed; owner access answers are unaffected', error);
+            else
+                logger.error('access snapshot stream failed; reload the page to reconnect', error);
+            state.unavailable();
+        },
+    });
+}
+//# sourceMappingURL=mount.js.map

package/lib/types/client/state.d.ts

@@ -0,0 +1,63 @@
+/**
+ * React-free Client access state: the latest `remoteAccess/follow` snapshot
+ * and identity-stable boolean sources per resource and action.
+ * @module @qlzt/dsh-api-remote-access/src/client/state
+ */
+import type { HostObservable } from '@qlzt/dsh-client-ui-slots';
+import type { RemoteAccessFrame } from '../types.ts';
+/** The opening frame of a snapshot generation. */
+export type Baseline = Extract<RemoteAccessFrame, {
+    type: 'baseline';
+}>;
+/**
+ * Validate the opening baseline an index injection row assigned to the page.
+ * @param value - the injected global; `undefined` when the page carries none.
+ * @returns the baseline, or `undefined` when none was injected.
+ * @throws TypeError when the injected value is not a baseline frame.
+ */
+export declare function parseInjectedBaseline(value: unknown): Baseline | undefined;
+/**
+ * Snapshot owner for one Client generation. Sources are cached per
+ * `(kind, id, action)` so Hook bindings keep their identity; each source
+ * computes its boolean from the current snapshot.
+ */
+export declare class ClientAccessState {
+    private snapshot;
+    /** @param initial - the page's injected opening baseline; without one every answer is false until a baseline arrives. */
+    constructor(initial?: Baseline);
+    private readonly listeners;
+    private readonly sources;
+    /**
+     * Answer for one action on the global resource.
+     * @param action - endpoint action the caller may invoke.
+     * @returns identity-stable boolean source.
+     */
+    global(action: string): HostObservable<boolean>;
+    /**
+     * Answer for one action on one resource of a declared kind.
+     * @param kind - declared resource kind.
+     * @param id - resource identity.
+     * @param action - endpoint action the caller may invoke.
+     * @returns identity-stable boolean source.
+     */
+    resource(kind: string, id: string, action: string): HostObservable<boolean>;
+    /**
+     * Replace the snapshot from one generation's opening frame.
+     * @param frame - owner or non-owner baseline.
+     */
+    replace(frame: Baseline): void;
+    /**
+     * Apply one increment of the current generation.
+     * @param frame - `upsert` or `remove`.
+     */
+    update(frame: Exclude<RemoteAccessFrame, {
+        type: 'baseline';
+    }>): void;
+    /** Whether the current snapshot is the owner's, whose answers never depend on the stream. */
+    get owner(): boolean;
+    /** The stream failed terminally: the owner keeps every answer; a non-owner's answers become false. */
+    unavailable(): void;
+    private cached;
+    private publish;
+}
+//# sourceMappingURL=state.d.ts.map