@senguoyun/dsh-arkme 0.1.31 → 0.1.33

package/lib/types/dsh-remote/realtime-transport.d.ts

@@ -0,0 +1,84 @@
+import type { DshRemoteCapability, DshRemotePublishDirection, DshRemoteRealtimePayload, DshRemoteRealtimeTransport, DshRemoteRuntimeTarget, DshRemoteTrustedEventMetadata } from './types.js';
+interface SocketEventLike {
+    data?: unknown;
+}
+export interface DshRemoteSocketLike {
+    readonly readyState: number;
+    send(data: string): void;
+    close(code?: number, reason?: string): void;
+    addEventListener(type: 'open' | 'message' | 'error' | 'close', listener: (event: SocketEventLike) => void): void;
+    removeEventListener(type: 'open' | 'message' | 'error' | 'close', listener: (event: SocketEventLike) => void): void;
+}
+export type DshRemoteSocketFactory = (input: {
+    profileRef: string;
+    clientRef: string;
+    signal: AbortSignal;
+}) => DshRemoteSocketLike | Promise<DshRemoteSocketLike>;
+export interface DshRemoteFrameSizingInput {
+    target: DshRemoteRuntimeTarget;
+    commandId: string;
+    direction: DshRemotePublishDirection;
+    payload: DshRemoteRealtimePayload;
+    senderRole: 'host' | 'controller';
+}
+/**
+ * Mirrors jotmo-realtime's login-only channel.publish and channel.event
+ * wrappers. Max-width sequence/timestamp values keep the check conservative.
+ */
+export declare function dshRemoteFrameByteLengths(input: DshRemoteFrameSizingInput): {
+    publish: number;
+    event: number;
+};
+export declare function assertDshRemoteFramesFit(input: DshRemoteFrameSizingInput): void;
+/** Exact adapter for jotmo-realtime's login-only DSH Remote contract. */
+export declare class ArkmeRemoteRealtimeTransport implements DshRemoteRealtimeTransport {
+    private readonly createSocket;
+    private readonly requestTimeoutMillis;
+    private socket;
+    private connectionGeneration;
+    private serviceLeaseGeneration;
+    private readonly waiters;
+    private readonly channelListeners;
+    private readonly disconnectListeners;
+    private onMessage;
+    private onClose;
+    constructor(createSocket: DshRemoteSocketFactory, requestTimeoutMillis?: number);
+    connect(input: {
+        profileRef: string;
+        clientRef: string;
+        signal: AbortSignal;
+    }): Promise<void>;
+    disconnect(): Promise<void>;
+    subscribeDisconnect(listener: (error: Error) => void): () => void;
+    registerHost(input: {
+        runtimeRef: string;
+        capabilities: DshRemoteCapability[];
+        signal: AbortSignal;
+    }): Promise<{
+        serviceLeaseGeneration: number;
+    }>;
+    unregisterHost(signal?: AbortSignal): Promise<void>;
+    subscribe(input: {
+        target: DshRemoteRuntimeTarget;
+        afterSequence?: number;
+        onEvent: (payload: DshRemoteRealtimePayload, metadata: DshRemoteTrustedEventMetadata) => void;
+        signal: AbortSignal;
+    }): Promise<() => void>;
+    publish(input: {
+        target: DshRemoteRuntimeTarget;
+        commandId: string;
+        direction: DshRemotePublishDirection;
+        payload: DshRemoteRealtimePayload;
+        signal: AbortSignal;
+    }): Promise<{
+        sequence: number;
+    }>;
+    private request;
+    private waitForRequest;
+    private waitForType;
+    private receive;
+    private failConnection;
+    private send;
+}
+export {};
+//# sourceMappingURL=realtime-transport.d.ts.map

package/lib/types/dsh-remote/realtime-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-transport.d.ts","sourceRoot":"","sources":["../../../src/dsh-remote/realtime-transport.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,6BAA6B,EAC9B,MAAM,YAAY,CAAA;AAGnB,UAAU,eAAe;IAAG,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE;AAC5C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GAAG,IAAI,CAAA;IAChH,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GAAG,IAAI,CAAA;CACpH;AAED,MAAM,MAAM,sBAAsB,GAAG,CACnC,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,KAClE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;AAOvD,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,sBAAsB,CAAA;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,yBAAyB,CAAA;IACpC,OAAO,EAAE,wBAAwB,CAAA;IACjC,UAAU,EAAE,MAAM,GAAG,YAAY,CAAA;CAClC;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,yBAAyB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAsB9G;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,yBAAyB,GAAG,IAAI,CAU/E;AAsED,yEAAyE;AACzE,qBAAa,4BAA6B,YAAW,0BAA0B;IAW3E,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAXvC,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,oBAAoB,CAAI;IAChC,OAAO,CAAC,sBAAsB,CAAI;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+F;IACvH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAkD;IACnF,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,SAAS,CAAgD;IACjE,OAAO,CAAC,OAAO,CAAgD;gBAG5C,YAAY,EAAE,sBAAsB,EACpC,oBAAoB,SAAS;IAO1C,OAAO,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAwC7F,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,mBAAmB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,MAAM,IAAI;IAK3D,YAAY,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,mBAAmB,EAAE,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,sBAAsB,EAAE,MAAM,CAAA;KAAE,CAAC;IAYlJ,cAAc,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAWnD,SAAS,CAAC,KAAK,EAAE;QACrB,MAAM,EAAE,sBAAsB,CAAA;QAC9B,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,OAAO,EAAE,CAAC,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAE,6BAA6B,KAAK,IAAI,CAAA;QAC7F,MAAM,EAAE,WAAW,CAAA;KACpB,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC;IAgDjB,OAAO,CAAC,KAAK,EAAE;QACnB,MAAM,EAAE,sBAAsB,CAAA;QAC9B,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,yBAAyB,CAAA;QACpC,OAAO,EAAE,wBAAwB,CAAA;QACjC,MAAM,EAAE,WAAW,CAAA;KACpB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;YAgBnB,OAAO;IAOrB,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,OAAO;IAyBf,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,IAAI;CAMb"}

package/lib/types/dsh-remote/runtime-secret-broker.d.ts

@@ -0,0 +1,28 @@
+import type { ArkmeSecureValueStore } from '../keychain-store.js';
+/**
+ * Stores only the local command-ledger encryption key and replay cursor.
+ * These values protect local recovery data; they are not remote authority.
+ */
+export declare class DshRemoteRuntimeSecretBroker {
+    private readonly store;
+    private readonly inFlight;
+    private readonly cursorWrites;
+    constructor(store: ArkmeSecureValueStore);
+    ledgerKey(accountId: string): Promise<Buffer>;
+    runtimeCursor(input: {
+        accountId: string;
+        runtimeRef: string;
+        channelRef: string;
+    }): Promise<number>;
+    putRuntimeCursor(input: {
+        accountId: string;
+        runtimeRef: string;
+        channelRef: string;
+        lastTransportSequence: number;
+    }): Promise<void>;
+    private secrets;
+    private loadOrCreate;
+    private parseCursor;
+    private cursorKey;
+}
+//# sourceMappingURL=runtime-secret-broker.d.ts.map

package/lib/types/dsh-remote/runtime-secret-broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-secret-broker.d.ts","sourceRoot":"","sources":["../../../src/dsh-remote/runtime-secret-broker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAgDjE;;;GAGG;AACH,qBAAa,4BAA4B;IAI3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHlC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsD;IAC/E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmC;gBAEnC,KAAK,EAAE,qBAAqB;IAEnD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7C,aAAa,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IASpG,gBAAgB,CAAC,KAAK,EAAE;QAC5B,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,UAAU,EAAE,MAAM,CAAA;QAClB,qBAAqB,EAAE,MAAM,CAAA;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC;YAuBH,OAAO;YAaP,YAAY;IAiB1B,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,SAAS;CAUlB"}

package/lib/types/dsh-remote/runtime-store.d.ts

@@ -0,0 +1,39 @@
+import type { DshRemoteCapability, DshRemoteRuntimeProjection } from './types.js';
+export interface DshRemoteProjectionInventory {
+    workspaceRefs: string[];
+    sessions: Array<{
+        sessionRef: string;
+        workspaceRef: string;
+        sourceUpdatedAt: number;
+    }>;
+}
+export declare class DshRemoteRuntimeStore {
+    private readonly path;
+    private state;
+    private queue;
+    constructor(directory: string);
+    activateRuntime(input: {
+        accountId: string;
+        profileRef: string;
+        capabilities: DshRemoteCapability[];
+        nowMillis?: number;
+    }): Promise<DshRemoteRuntimeProjection>;
+    adoptRuntimeRef(accountId: string, profileRef: string, runtimeRef: string, hostGeneration?: number): Promise<DshRemoteRuntimeProjection>;
+    bindDesktop(accountId: string, input: {
+        desktopRef: string;
+    }): Promise<void>;
+    renameDesktop(accountId: string, displayName: string): Promise<void>;
+    account(accountId: string): Promise<{
+        displayName?: string;
+        desktopRef?: string;
+        runtimes: DshRemoteRuntimeProjection[];
+    }>;
+    projectionInventory(accountId: string, profileRef: string): Promise<DshRemoteProjectionInventory>;
+    saveProjectionInventory(accountId: string, profileRef: string, inventory: DshRemoteProjectionInventory): Promise<void>;
+    private read;
+    private update;
+    private serial;
+    private load;
+    private persist;
+}
+//# sourceMappingURL=runtime-store.d.ts.map

package/lib/types/dsh-remote/runtime-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-store.d.ts","sourceRoot":"","sources":["../../../src/dsh-remote/runtime-store.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA;AAWjF,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,QAAQ,EAAE,KAAK,CAAC;QACd,UAAU,EAAE,MAAM,CAAA;QAClB,YAAY,EAAE,MAAM,CAAA;QACpB,eAAe,EAAE,MAAM,CAAA;KACxB,CAAC,CAAA;CACH;AAeD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,KAAK,CAAmC;gBAEpC,SAAS,EAAE,MAAM;IAIvB,eAAe,CAAC,KAAK,EAAE;QAC3B,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,YAAY,EAAE,mBAAmB,EAAE,CAAA;QACnC,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAuBjC,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,0BAA0B,CAAC;IA4BhC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAW5E,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUpE,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QACxC,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,QAAQ,EAAE,0BAA0B,EAAE,CAAA;KACvC,CAAC;IAWI,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,4BAA4B,CAAC;IAYlC,uBAAuB,CAC3B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,4BAA4B,GACtC,OAAO,CAAC,IAAI,CAAC;YAaF,IAAI;YAMJ,MAAM;YAQN,MAAM;YAMN,IAAI;YAwEJ,OAAO;CAWtB"}

package/lib/types/dsh-remote/transport-fragment.d.ts

@@ -0,0 +1,10 @@
+export interface DshRemoteOutboundPlaintext {
+    value: unknown;
+    fragmentIndex?: number;
+    commandId?: string;
+}
+/**
+ * Splits a large typed payload into independently bounded Realtime events.
+ */
+export declare function dshRemoteOutboundPayloads(envelope: unknown, transferSeed: string): DshRemoteOutboundPlaintext[];
+//# sourceMappingURL=transport-fragment.d.ts.map

package/lib/types/dsh-remote/transport-fragment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-fragment.d.ts","sourceRoot":"","sources":["../../../src/dsh-remote/transport-fragment.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,OAAO,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAMD;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,OAAO,EACjB,YAAY,EAAE,MAAM,GACnB,0BAA0B,EAAE,CAoC9B"}

package/lib/types/dsh-remote/types.d.ts

@@ -0,0 +1,164 @@
+export declare const DSH_REMOTE_PROTOCOL: "dsh.remote";
+export declare const DSH_REMOTE_PROTOCOL_MAJOR: 1;
+export declare const DSH_REMOTE_MAX_FRAME_BYTES: number;
+export declare const DSH_REMOTE_MAX_PAGE_ITEMS = 50;
+export declare const DSH_REMOTE_MAX_SNAPSHOT_BYTES: number;
+export declare const DSH_REMOTE_MAX_PAGE_RESULT_BYTES: number;
+export declare const DSH_REMOTE_MAX_TEXT_CODE_POINTS = 20000;
+export type DshRemoteCapability = 'workspace.list' | 'session.list' | 'session.create' | 'session.history' | 'session.prompt' | 'session.prompt.queue' | 'session.prompt.steer' | 'session.cancel' | 'session.events' | 'interaction.question.respond' | 'interaction.approval.respond';
+export type DshRemoteOperation = 'capabilities.get' | 'snapshot.get' | 'workspace.list' | 'session.list' | 'session.create' | 'session.history' | 'session.prompt' | 'session.cancel' | 'interaction.question.respond' | 'interaction.approval.respond';
+export type DshRemoteRequestKind = 'request';
+export type DshRemoteResponseStatus = 'accepted' | 'completed' | 'rejected' | 'duplicate';
+export interface DshRemoteRequest {
+    protocol: typeof DSH_REMOTE_PROTOCOL;
+    protocol_major: typeof DSH_REMOTE_PROTOCOL_MAJOR;
+    kind: DshRemoteRequestKind;
+    request_ref: string;
+    host_generation: number;
+    issued_at: number;
+    execute_before: number;
+    operation: DshRemoteOperation;
+    body: Record<string, unknown>;
+}
+export interface DshRemoteResponse {
+    protocol: typeof DSH_REMOTE_PROTOCOL;
+    protocol_major: typeof DSH_REMOTE_PROTOCOL_MAJOR;
+    kind: 'response';
+    request_ref: string;
+    status: DshRemoteResponseStatus;
+    host_generation: number;
+    issued_at: number;
+    operation: DshRemoteOperation;
+    body: Record<string, unknown>;
+    session_seq?: number;
+    projection_as_of_seq?: number;
+    result?: unknown;
+    error?: {
+        code: string;
+        message: string;
+        retryable: boolean;
+        trace_ref: string;
+    };
+}
+export interface DshRemoteRuntimeProjection {
+    runtimeRef: string;
+    desktopRef?: string;
+    profileRef: string;
+    accountId: string;
+    hostGeneration: number;
+    capabilities: DshRemoteCapability[];
+    updatedAtMillis: number;
+}
+export interface DshRemoteStatus {
+    contractVersion: 1;
+    available: boolean;
+    enabled: boolean;
+    connected: boolean;
+    accountId?: string;
+    desktopRef?: string;
+    runtimeRef?: string;
+    hostGeneration: number;
+    capabilities: DshRemoteCapability[];
+    unavailableReason?: string;
+    revision: number;
+}
+export interface DshRemoteTrustedEventMetadata {
+    senderRole: 'host' | 'controller';
+    runtimeRef: string;
+    acceptedAtMillis: number;
+    targetHostLeaseGeneration: number;
+    transportSequence?: number;
+}
+export type DshRemoteRealtimePayload = Record<string, unknown>;
+export type DshRemotePublishDirection = 'request' | 'response' | 'snapshot' | 'event';
+export interface DshRemoteRuntimeTarget {
+    runtimeRef: string;
+    hostProfileRef: string;
+    hostClientRef: string;
+    hostLeaseGeneration: number;
+}
+export interface DshRemoteControlPlane {
+    registerDesktop(input: Record<string, unknown>, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    registerRuntime(desktopRef: string, input: Record<string, unknown>, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    syncWorkspaces(input: Record<string, unknown>, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    syncSessions(input: Record<string, unknown>, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    appendSessionEvents(input: Record<string, unknown>, signal?: AbortSignal): Promise<Record<string, unknown>>;
+}
+export interface DshRemoteRealtimeTransport {
+    subscribeDisconnect(listener: (error: Error) => void): () => void;
+    connect(input: {
+        profileRef: string;
+        clientRef: string;
+        signal: AbortSignal;
+    }): Promise<void>;
+    disconnect(): Promise<void>;
+    registerHost(input: {
+        runtimeRef: string;
+        capabilities: DshRemoteCapability[];
+        signal: AbortSignal;
+    }): Promise<{
+        serviceLeaseGeneration: number;
+    }>;
+    unregisterHost(signal?: AbortSignal): Promise<void>;
+    subscribe(input: {
+        target: DshRemoteRuntimeTarget;
+        afterSequence?: number;
+        onEvent: (payload: DshRemoteRealtimePayload, metadata: DshRemoteTrustedEventMetadata) => void;
+        signal: AbortSignal;
+    }): Promise<() => void>;
+    publish(input: {
+        target: DshRemoteRuntimeTarget;
+        commandId: string;
+        direction: DshRemotePublishDirection;
+        payload: DshRemoteRealtimePayload;
+        signal: AbortSignal;
+    }): Promise<{
+        sequence: number;
+    }>;
+}
+export interface DshRemoteWorkspaceView {
+    workspaceId: string;
+    title: string;
+    path: string;
+    available: boolean;
+    sessionIds: string[];
+}
+export interface DshRemoteSessionSummary {
+    sessionId: string;
+    workspaceId: string;
+    title?: string;
+    updatedAt: number;
+    running: boolean;
+    blank: boolean;
+    projectionAsOfSeq?: number;
+}
+export interface DshRemoteSnapshot {
+    projectionAsOfMillis: number;
+    workspaces: DshRemoteWorkspaceView[];
+    sessions: DshRemoteSessionSummary[];
+    pendingInteractions: DshRemotePendingInteraction[];
+    nextCursor?: string;
+}
+export type DshRemotePendingInteraction = {
+    kind: 'question';
+    interactionRpcRef: string;
+    sessionId: string;
+    questions: unknown[];
+} | {
+    kind: 'approval';
+    interactionRpcRef: string;
+    sessionId: string;
+    approvalId: string;
+    toolName: string;
+    reason?: string;
+    canAllowOnce: boolean;
+    operationSummary?: string;
+};
+export interface DshRemoteHostFacade {
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    getStatus(): DshRemoteStatus;
+    renameDesktop(displayName: string): Promise<DshRemoteStatus>;
+    subscribe(listener: (status: DshRemoteStatus) => void): () => void;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/types/dsh-remote/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/dsh-remote/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,EAAG,YAAqB,CAAA;AACxD,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAA;AACnD,eAAO,MAAM,0BAA0B,QAAY,CAAA;AACnD,eAAO,MAAM,yBAAyB,KAAK,CAAA;AAK3C,eAAO,MAAM,6BAA6B,QAAa,CAAA;AACvD,eAAO,MAAM,gCAAgC,QAAY,CAAA;AACzD,eAAO,MAAM,+BAA+B,QAAS,CAAA;AAErD,MAAM,MAAM,mBAAmB,GAC3B,gBAAgB,GAChB,cAAc,GACd,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,sBAAsB,GACtB,sBAAsB,GACtB,gBAAgB,GAChB,gBAAgB,GAChB,8BAA8B,GAC9B,8BAA8B,CAAA;AAElC,MAAM,MAAM,kBAAkB,GAC1B,kBAAkB,GAClB,cAAc,GACd,gBAAgB,GAChB,cAAc,GACd,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,GAChB,8BAA8B,GAC9B,8BAA8B,CAAA;AAElC,MAAM,MAAM,oBAAoB,GAAG,SAAS,CAAA;AAC5C,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,CAAA;AAEzF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,mBAAmB,CAAA;IACpC,cAAc,EAAE,OAAO,yBAAyB,CAAA;IAChD,IAAI,EAAE,oBAAoB,CAAA;IAC1B,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,kBAAkB,CAAA;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,OAAO,mBAAmB,CAAA;IACpC,cAAc,EAAE,OAAO,yBAAyB,CAAA;IAChD,IAAI,EAAE,UAAU,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,uBAAuB,CAAA;IAC/B,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,kBAAkB,CAAA;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,OAAO,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,mBAAmB,EAAE,CAAA;IACnC,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,CAAC,CAAA;IAClB,SAAS,EAAE,OAAO,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,mBAAmB,EAAE,CAAA;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,GAAG,YAAY,CAAA;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;IACxB,yBAAyB,EAAE,MAAM,CAAA;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAC9D,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CAAA;AAErF,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,mBAAmB,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACvG,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3H,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACtG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACpG,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAC5G;AAED,MAAM,WAAW,0BAA0B;IACzC,mBAAmB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IACjE,OAAO,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7F,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,YAAY,CAAC,KAAK,EAAE;QAClB,UAAU,EAAE,MAAM,CAAA;QAClB,YAAY,EAAE,mBAAmB,EAAE,CAAA;QACnC,MAAM,EAAE,WAAW,CAAA;KACpB,GAAG,OAAO,CAAC;QAAE,sBAAsB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC/C,cAAc,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnD,SAAS,CAAC,KAAK,EAAE;QACf,MAAM,EAAE,sBAAsB,CAAA;QAC9B,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,OAAO,EAAE,CAAC,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAE,6BAA6B,KAAK,IAAI,CAAA;QAC7F,MAAM,EAAE,WAAW,CAAA;KACpB,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAA;IACvB,OAAO,CAAC,KAAK,EAAE;QACb,MAAM,EAAE,sBAAsB,CAAA;QAC9B,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,yBAAyB,CAAA;QACpC,OAAO,EAAE,wBAAwB,CAAA;QACjC,MAAM,EAAE,WAAW,CAAA;KACpB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,OAAO,CAAA;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,UAAU,EAAE,sBAAsB,EAAE,CAAA;IACpC,QAAQ,EAAE,uBAAuB,EAAE,CAAA;IACnC,mBAAmB,EAAE,2BAA2B,EAAE,CAAA;IAClD,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,MAAM,2BAA2B,GACnC;IACE,IAAI,EAAE,UAAU,CAAA;IAChB,iBAAiB,EAAE,MAAM,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,OAAO,EAAE,CAAA;CACrB,GACD;IACE,IAAI,EAAE,UAAU,CAAA;IAChB,iBAAiB,EAAE,MAAM,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,OAAO,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,CAAA;AAEL,MAAM,WAAW,mBAAmB;IAClC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACrB,SAAS,IAAI,eAAe,CAAA;IAC5B,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC5D,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;CACnE"}

package/lib/types/extensions/desktop-quarantine.d.ts

@@ -0,0 +1,79 @@
+import type { ArkmeExtensionInstallStore } from './install-store.js';
+import type { ArkmeInstalledExtension } from './types.js';
+export type DesktopRuntimeEnvironment = 'prod' | 'test';
+export type DesktopExtensionQuarantinePhase = 'pending' | 'active' | 'restored' | 'resolved';
+export interface DesktopExtensionQuarantineEntry {
+    packageName: string;
+    dependencySpec: string;
+    originalBundleIndex: number;
+    synchronizedAtMillis?: number;
+    notificationDismissedAtMillis?: number;
+    reenableRequestedAtMillis?: number;
+    resolvedAtMillis?: number;
+}
+export interface DesktopExtensionQuarantineReceipt {
+    schemaVersion: 1;
+    quarantineId: string;
+    environment: DesktopRuntimeEnvironment;
+    phase: DesktopExtensionQuarantinePhase;
+    mode: 'targeted' | 'local-safe-mode';
+    createdAtMillis: number;
+    updatedAtMillis: number;
+    runtimeReleaseId?: string;
+    failureSummary: string;
+    failureLogTail: string;
+    entries: DesktopExtensionQuarantineEntry[];
+}
+export interface ArkmeDesktopQuarantineEntryView {
+    packageName: string;
+    extensionId?: string;
+    dismissed: boolean;
+    resolved: boolean;
+}
+export interface ArkmeDesktopQuarantineStatus {
+    active: boolean;
+    quarantineId?: string;
+    mode?: 'targeted' | 'local-safe-mode';
+    failureSummary?: string;
+    failureLogTail?: string;
+    entries: ArkmeDesktopQuarantineEntryView[];
+}
+interface InstallStoreLike {
+    list(): ArkmeInstalledExtension[];
+    get(extensionId: string): ArkmeInstalledExtension | undefined;
+    put(item: ArkmeInstalledExtension): void;
+}
+interface ArkmeDesktopExtensionQuarantineOptions {
+    dshHome: string;
+    environment: DesktopRuntimeEnvironment;
+    installStore: Pick<ArkmeExtensionInstallStore, 'list' | 'get' | 'put'> | InstallStoreLike;
+    setProfileEnabled(packageName: string, enabled: boolean): Promise<void>;
+    requestRestart(input: {
+        packageName: string;
+        previousProfileIncluded: false;
+    }): Promise<void>;
+    isPackageActive(packageName: string): boolean;
+    now?: () => number;
+}
+export declare class ArkmeDesktopExtensionQuarantine {
+    private readonly options;
+    private readonly now;
+    constructor(options: ArkmeDesktopExtensionQuarantineOptions);
+    reconcile(): Promise<void>;
+    status(): Promise<ArkmeDesktopQuarantineStatus>;
+    dismiss(packageName: string): Promise<void>;
+    reenable(packageName: string): Promise<void>;
+    resolveActive(): Promise<void>;
+    health(packageName: string): Promise<{
+        profileEnabled: boolean;
+        active: boolean;
+    }>;
+    private activeReceiptForPackage;
+    private installedByPackage;
+    private profileContains;
+    private readReceipts;
+    private writeStoredReceipt;
+}
+export declare function parseDesktopExtensionQuarantineReceipt(text: string): DesktopExtensionQuarantineReceipt;
+export {};
+//# sourceMappingURL=desktop-quarantine.d.ts.map

package/lib/types/extensions/desktop-quarantine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktop-quarantine.d.ts","sourceRoot":"","sources":["../../../src/extensions/desktop-quarantine.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAA;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAUzD,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,MAAM,CAAA;AACvD,MAAM,MAAM,+BAA+B,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAA;AAE5F,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,6BAA6B,CAAC,EAAE,MAAM,CAAA;IACtC,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,CAAC,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,yBAAyB,CAAA;IACtC,KAAK,EAAE,+BAA+B,CAAA;IACtC,IAAI,EAAE,UAAU,GAAG,iBAAiB,CAAA;IACpC,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,EAAE,+BAA+B,EAAE,CAAA;CAC3C;AAED,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,OAAO,CAAA;IAClB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,IAAI,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,OAAO,EAAE,+BAA+B,EAAE,CAAA;CAC3C;AAED,UAAU,gBAAgB;IACxB,IAAI,IAAI,uBAAuB,EAAE,CAAA;IACjC,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAAA;IAC7D,GAAG,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAAA;CACzC;AAED,UAAU,sCAAsC;IAC9C,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,yBAAyB,CAAA;IACtC,YAAY,EAAE,IAAI,CAAC,0BAA0B,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,gBAAgB,CAAA;IACzF,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvE,cAAc,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,uBAAuB,EAAE,KAAK,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7F,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAA;IAC7C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAOD,qBAAa,+BAA+B;IAG9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;gBAEL,OAAO,EAAE,sCAAsC;IAItE,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAyB1B,MAAM,IAAI,OAAO,CAAC,4BAA4B,CAAC;IAwB/C,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS3C,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB5C,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAkC9B,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,cAAc,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;YAY1E,uBAAuB;IAYrC,OAAO,CAAC,kBAAkB;YAIZ,eAAe;YAgBf,YAAY;YAuBZ,kBAAkB;CAIjC;AAED,wBAAgB,sCAAsC,CAAC,IAAI,EAAE,MAAM,GAAG,iCAAiC,CAEtG"}

package/lib/types/extensions/profile-installer.d.ts

@@ -18,6 +18,7 @@ export interface ArkmeExtensionProfileInstallerOptions {
     requestShutdown?: () => void;
     supervisedExitCode?: number;
     supervisedPlanPath?: string;
+    runtimeReleaseId?: string;
     requestProcessExit?: (code: number) => void;
 }
 export declare class ArkmeExtensionProfileInstaller {
@@ -39,8 +40,12 @@ export declare class ArkmeExtensionProfileInstaller {
         previousInstalled?: ArkmeInstalledExtension;
         expectActive: boolean;
         activationChange?: true;
+        desktopQuarantineActivation?: true;
         previousProfileIncluded?: boolean;
     }): Promise<void>;
+    restartDesktopQuarantine(input: {
+        packageName: string;
+    }): Promise<void>;
     private run;
     private mutate;
 }

package/lib/types/extensions/profile-installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile-installer.d.ts","sourceRoot":"","sources":["../../../src/extensions/profile-installer.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAA;AACnF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAGzD,eAAO,MAAM,uCAAuC,KAAK,CAAA;AAEzD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOtE;AAED,MAAM,WAAW,qCAAqC;IACpD,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,gCAAgC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,eAAe,CAAC,EAAE,MAAM,IAAI,CAAA;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC5C;AAED,qBAAa,8BAA8B;IAG7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,YAAY,CAAmC;gBAE1B,OAAO,EAAE,qCAAqC;IAErE,OAAO,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe/C,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjD,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1C,UAAU,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAchE,6GAA6G;IACvG,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAQhE,OAAO,CAAC,KAAK,EAAE;QACnB,WAAW,EAAE,MAAM,CAAA;QACnB,WAAW,EAAE,MAAM,CAAA;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;QACvB,iBAAiB,CAAC,EAAE,uBAAuB,CAAA;QAC3C,YAAY,EAAE,OAAO,CAAA;QACrB,gBAAgB,CAAC,EAAE,IAAI,CAAA;QACvB,uBAAuB,CAAC,EAAE,OAAO,CAAA;KAClC,GAAG,OAAO,CAAC,IAAI,CAAC;YA8EH,GAAG;YAmBH,MAAM;CAKrB"}
+{"version":3,"file":"profile-installer.d.ts","sourceRoot":"","sources":["../../../src/extensions/profile-installer.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAA;AACnF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAGzD,eAAO,MAAM,uCAAuC,KAAK,CAAA;AAEzD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOtE;AAED,MAAM,WAAW,qCAAqC;IACpD,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,gCAAgC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,eAAe,CAAC,EAAE,MAAM,IAAI,CAAA;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC5C;AAED,qBAAa,8BAA8B;IAG7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,YAAY,CAAmC;gBAE1B,OAAO,EAAE,qCAAqC;IAErE,OAAO,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe/C,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjD,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1C,UAAU,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAchE,6GAA6G;IACvG,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAQhE,OAAO,CAAC,KAAK,EAAE;QACnB,WAAW,EAAE,MAAM,CAAA;QACnB,WAAW,EAAE,MAAM,CAAA;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;QACvB,iBAAiB,CAAC,EAAE,uBAAuB,CAAA;QAC3C,YAAY,EAAE,OAAO,CAAA;QACrB,gBAAgB,CAAC,EAAE,IAAI,CAAA;QACvB,2BAA2B,CAAC,EAAE,IAAI,CAAA;QAClC,uBAAuB,CAAC,EAAE,OAAO,CAAA;KAClC,GAAG,OAAO,CAAC,IAAI,CAAC;IAkFX,wBAAwB,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAY/D,GAAG;YAmBH,MAAM;CAKrB"}

package/lib/types/extensions/profile-restart-helper.d.ts

@@ -1,7 +1,7 @@
 import type { ArkmeInstalledExtension } from './types.js';
 import { applyArkmeProfileBundlePolicy } from './profile-bundle-policy.js';
 export interface ArkmeExtensionProfileRestartPlan {
-    schemaVersion: 1 | 2 | 3;
+    schemaVersion: 1 | 2 | 3 | 4;
     parentPid: number;
     execPath: string;
     dshBinPath: string;
@@ -18,9 +18,11 @@ export interface ArkmeExtensionProfileRestartPlan {
     installStoreDirectory: string;
     previousInstalled?: ArkmeInstalledExtension;
     activationChange?: true;
+    desktopQuarantineActivation?: true;
     previousProfileIncluded?: boolean;
     healthUrl: string;
     logPath: string;
+    runtimeReleaseId?: string;
 }
 export declare function parseExtensionProfileRestartPlan(value: unknown): ArkmeExtensionProfileRestartPlan;
 declare function start(plan: ArkmeExtensionProfileRestartPlan): import("child_process").ChildProcess;

package/lib/types/extensions/profile-restart-helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile-restart-helper.d.ts","sourceRoot":"","sources":["../../../src/extensions/profile-restart-helper.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AACzD,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAA;AAK1E,MAAM,WAAW,gCAAgC;IAC/C,aAAa,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,OAAO,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,iBAAiB,CAAC,EAAE,uBAAuB,CAAA;IAC3C,gBAAgB,CAAC,EAAE,IAAI,CAAA;IACvB,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;CAChB;AAaD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,gCAAgC,CA4CjG;AAYD,iBAAS,KAAK,CAAC,IAAI,EAAE,gCAAgC,wCAMpD;AAED,iBAAe,OAAO,CAAC,IAAI,EAAE,gCAAgC,GAAG,OAAO,CAAC,OAAO,CAAC,CA0B/E;AAED,iBAAS,cAAc,CAAC,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAUvF;AAED,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,OAAO,KAAK,CAAA;IACnB,SAAS,EAAE,OAAO,OAAO,CAAA;IACzB,cAAc,EAAE,OAAO,cAAc,CAAA;IACrC,iBAAiB,EAAE,OAAO,6BAA6B,CAAA;IACvD,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5C;AAiDD,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,gCAAgC,GAAG,MAAM,EAAE,CAM7F;AAED,wBAAsB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhF;AAED,wBAAsB,sCAAsC,CAC1D,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EACtB,SAAS,GAAE,OAAO,CAAC,iCAAiC,CAAM,GACzD,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,wBAAsB,sCAAsC,CAC1D,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,OAAO,CAAC,iCAAiC,CAAM,GACzD,OAAO,CAAC,IAAI,CAAC,CAIf"}
+{"version":3,"file":"profile-restart-helper.d.ts","sourceRoot":"","sources":["../../../src/extensions/profile-restart-helper.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AACzD,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAA;AAK1E,MAAM,WAAW,gCAAgC;IAC/C,aAAa,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,OAAO,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,iBAAiB,CAAC,EAAE,uBAAuB,CAAA;IAC3C,gBAAgB,CAAC,EAAE,IAAI,CAAA;IACvB,2BAA2B,CAAC,EAAE,IAAI,CAAA;IAClC,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAaD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,gCAAgC,CAqDjG;AAYD,iBAAS,KAAK,CAAC,IAAI,EAAE,gCAAgC,wCAMpD;AAED,iBAAe,OAAO,CAAC,IAAI,EAAE,gCAAgC,GAAG,OAAO,CAAC,OAAO,CAAC,CAqC/E;AAED,iBAAS,cAAc,CAAC,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAUvF;AAED,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,OAAO,KAAK,CAAA;IACnB,SAAS,EAAE,OAAO,OAAO,CAAA;IACzB,cAAc,EAAE,OAAO,cAAc,CAAA;IACrC,iBAAiB,EAAE,OAAO,6BAA6B,CAAA;IACvD,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5C;AAiDD,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,gCAAgC,GAAG,MAAM,EAAE,CAM7F;AAED,wBAAsB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhF;AAED,wBAAsB,sCAAsC,CAC1D,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EACtB,SAAS,GAAE,OAAO,CAAC,iCAAiC,CAAM,GACzD,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,wBAAsB,sCAAsC,CAC1D,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,OAAO,CAAC,iCAAiC,CAAM,GACzD,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/lib/types/harness-embed-route.d.ts

@@ -9,16 +9,26 @@ export interface DshWebBootEntry {
     immediately?: boolean;
     external?: string[];
 }
+export interface DshWebBootBatch {
+    phase: 'bootstrap' | 'application';
+    url: string;
+    rev: string;
+    entries: string[];
+}
 export interface DshWebBootGraph {
     rev: string;
     entries: DshWebBootEntry[];
+    /** Present in the structured DSH boot protocol; legacy graphs omit it. */
+    batches?: DshWebBootBatch[];
 }
 interface HarnessEmbedRouteOptions {
     getGraph(): DshWebBootGraph;
     installedPackageNames(): readonly string[];
-    readRootHtml(): Promise<string>;
+    readRootHtml(request: IncomingMessage): Promise<string>;
     onError?(error: unknown): void;
 }
+/** Forward only the same-origin browser session needed by authenticated DSH roots. */
+export declare function dshRootDocumentHeaders(request: IncomingMessage): Record<string, string>;
 /**
  * Build the iframe-only DSH graph without any Arkme-managed extension clients.
  * Host halves stay process-owned and untouched; only this document's browser

package/lib/types/harness-embed-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"harness-embed-route.d.ts","sourceRoot":"","sources":["../../src/harness-embed-route.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,eAAO,MAAM,yBAAyB,yBAAyB,CAAA;AAC/D,eAAO,MAAM,2BAA2B,gCAAgC,CAAA;AAOxE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,eAAe,EAAE,CAAA;CAC3B;AAED,UAAU,wBAAwB;IAChC,QAAQ,IAAI,eAAe,CAAA;IAC3B,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAAA;IAC1C,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IAC/B,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;CAC/B;AA0DD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,eAAe,EACtB,qBAAqB,EAAE,SAAS,MAAM,EAAE,GACvC,eAAe,CAoBjB;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,eAAe,EAC1B,cAAc,EAAE,eAAe,GAC9B,MAAM,CAOR;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,wBAAwB,IAChE,SAAS,eAAe,EAAE,UAAU,cAAc,KAAG,OAAO,CAAC,IAAI,CAAC,CA+BjF"}
+{"version":3,"file":"harness-embed-route.d.ts","sourceRoot":"","sources":["../../src/harness-embed-route.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,eAAO,MAAM,yBAAyB,yBAAyB,CAAA;AAC/D,eAAO,MAAM,2BAA2B,gCAAgC,CAAA;AAgBxE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,WAAW,GAAG,aAAa,CAAA;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B,0EAA0E;IAC1E,OAAO,CAAC,EAAE,eAAe,EAAE,CAAA;CAC5B;AAED,UAAU,wBAAwB;IAChC,QAAQ,IAAI,eAAe,CAAA;IAC3B,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAAA;IAC1C,YAAY,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACvD,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;CAC/B;AAED,sFAAsF;AACtF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIvF;AAyGD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,eAAe,EACtB,qBAAqB,EAAE,SAAS,MAAM,EAAE,GACvC,eAAe,CAuBjB;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,eAAe,EAC1B,cAAc,EAAE,eAAe,GAC9B,MAAM,CAqBR;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,wBAAwB,IAChE,SAAS,eAAe,EAAE,UAAU,cAAc,KAAG,OAAO,CAAC,IAAI,CAAC,CA+BjF"}

package/lib/types/host-api.d.ts

@@ -5,6 +5,8 @@ import type { ArkmePluginRequest } from './types.js';
 import type { ArkmeExtensionManager } from './extensions/manager.js';
 import type { ArkmeExtensionInstallTasks } from './extensions/install-tasks.js';
 import type { ArkmeOwnedExtensionInventory } from './extensions/owned-inventory.js';
+import type { ArkmeDesktopExtensionQuarantine } from './extensions/desktop-quarantine.js';
+import type { DshRemoteHostFacade } from './dsh-remote/types.js';
 export interface ArkmeHostApiOptions {
     expectedPort: number;
     allowNonLoopback: boolean;
@@ -12,7 +14,9 @@ export interface ArkmeHostApiOptions {
     extensionManager?: () => ArkmeExtensionManager | undefined;
     extensionInstallTasks?: () => ArkmeExtensionInstallTasks | undefined;
     ownedExtensionInventory?: () => ArkmeOwnedExtensionInventory | undefined;
+    remoteHost?: () => DshRemoteHostFacade | undefined;
+    desktopQuarantine?: Pick<ArkmeDesktopExtensionQuarantine, 'status' | 'dismiss' | 'reenable' | 'health'>;
 }
 export declare function createArkmeHostApi(service: ArkmeService, options: ArkmeHostApiOptions): (req: IncomingMessage, res: ServerResponse) => Promise<void>;
-export declare function dispatchArkmeHostOperation(service: ArkmeService, operation: ArkmePluginRequest['operation'], params: Record<string, unknown>, updateManager?: Pick<ArkmePluginUpdateManager, 'status' | 'check' | 'acknowledge' | 'install' | 'installStatus'>, extensionManager?: ArkmeExtensionManager, extensionInstallTasks?: ArkmeExtensionInstallTasks, ownedExtensionInventory?: ArkmeOwnedExtensionInventory, requestSignal?: AbortSignal): Promise<unknown>;
+export declare function dispatchArkmeHostOperation(service: ArkmeService, operation: ArkmePluginRequest['operation'], params: Record<string, unknown>, updateManager?: Pick<ArkmePluginUpdateManager, 'status' | 'check' | 'acknowledge' | 'install' | 'installStatus'>, extensionManager?: ArkmeExtensionManager, extensionInstallTasks?: ArkmeExtensionInstallTasks, ownedExtensionInventory?: ArkmeOwnedExtensionInventory, requestSignal?: AbortSignal, remoteHost?: DshRemoteHostFacade, desktopQuarantine?: Pick<ArkmeDesktopExtensionQuarantine, 'status' | 'dismiss' | 'reenable' | 'health'>): Promise<unknown>;
 //# sourceMappingURL=host-api.d.ts.map

package/lib/types/host-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-api.d.ts","sourceRoot":"","sources":["../../src/host-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,EAAoB,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEnE,OAAO,EAA0B,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAErF,OAAO,KAAK,EAKV,kBAAkB,EAGnB,MAAM,YAAY,CAAA;AAGnB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAA;AAC/E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAA;AAggBnF,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,OAAO,CAAA;IACzB,aAAa,CAAC,EAAE,IAAI,CAClB,wBAAwB,EACxB,QAAQ,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,GAAG,eAAe,CACjE,CAAA;IACD,gBAAgB,CAAC,EAAE,MAAM,qBAAqB,GAAG,SAAS,CAAA;IAC1D,qBAAqB,CAAC,EAAE,MAAM,0BAA0B,GAAG,SAAS,CAAA;IACpE,uBAAuB,CAAC,EAAE,MAAM,4BAA4B,GAAG,SAAS,CAAA;CACzE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,mBAAmB,IACtE,KAAK,eAAe,EAAE,KAAK,cAAc,KAAG,OAAO,CAAC,IAAI,CAAC,CA4DxE;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,kBAAkB,CAAC,WAAW,CAAC,EAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,aAAa,CAAC,EAAE,IAAI,CAClB,wBAAwB,EACxB,QAAQ,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,GAAG,eAAe,CACjE,EACD,gBAAgB,CAAC,EAAE,qBAAqB,EACxC,qBAAqB,CAAC,EAAE,0BAA0B,EAClD,uBAAuB,CAAC,EAAE,4BAA4B,EACtD,aAAa,CAAC,EAAE,WAAW,GAC1B,OAAO,CAAC,OAAO,CAAC,CAu4BlB"}
+{"version":3,"file":"host-api.d.ts","sourceRoot":"","sources":["../../src/host-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,EAAoB,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEnE,OAAO,EAA0B,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAErF,OAAO,KAAK,EAKV,kBAAkB,EAGnB,MAAM,YAAY,CAAA;AAGnB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAA;AAC/E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAA;AACnF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAA;AAMzF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AA6fhE,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,OAAO,CAAA;IACzB,aAAa,CAAC,EAAE,IAAI,CAClB,wBAAwB,EACxB,QAAQ,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,GAAG,eAAe,CACjE,CAAA;IACD,gBAAgB,CAAC,EAAE,MAAM,qBAAqB,GAAG,SAAS,CAAA;IAC1D,qBAAqB,CAAC,EAAE,MAAM,0BAA0B,GAAG,SAAS,CAAA;IACpE,uBAAuB,CAAC,EAAE,MAAM,4BAA4B,GAAG,SAAS,CAAA;IACxE,UAAU,CAAC,EAAE,MAAM,mBAAmB,GAAG,SAAS,CAAA;IAClD,iBAAiB,CAAC,EAAE,IAAI,CAAC,+BAA+B,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAA;CACxG;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,mBAAmB,IACtE,KAAK,eAAe,EAAE,KAAK,cAAc,KAAG,OAAO,CAAC,IAAI,CAAC,CAmExE;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,kBAAkB,CAAC,WAAW,CAAC,EAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,aAAa,CAAC,EAAE,IAAI,CAClB,wBAAwB,EACxB,QAAQ,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,GAAG,eAAe,CACjE,EACD,gBAAgB,CAAC,EAAE,qBAAqB,EACxC,qBAAqB,CAAC,EAAE,0BAA0B,EAClD,uBAAuB,CAAC,EAAE,4BAA4B,EACtD,aAAa,CAAC,EAAE,WAAW,EAC3B,UAAU,CAAC,EAAE,mBAAmB,EAChC,iBAAiB,CAAC,EAAE,IAAI,CAAC,+BAA+B,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC,GACtG,OAAO,CAAC,OAAO,CAAC,CAm6BlB"}

package/lib/types/index.d.ts

@@ -4,6 +4,8 @@ export { createOpenClawCliAdapter } from './openclaw/index.js';
 import { ArkmeService } from './arkme-service.js';
 import type { ArkmeToolProfile } from './tools/index.js';
 import { type ArkmeEnvironment } from './types.js';
+import { type DshPublicApiProxyLike } from './dsh-remote/api-proxy-adapter.js';
+import { type DshRemoteSocketLike } from './dsh-remote/realtime-transport.js';
 export interface Config {
     environment: ArkmeEnvironment;
     authBaseUrl: string;
@@ -47,6 +49,8 @@ export interface Config {
     updateAllowLocalInstall: boolean;
     openclawProfile: string;
     shareWebsite: string;
+    dshRemoteFeatureEnabled: boolean;
+    dshRemoteRealtimeBaseUrl: string;
 }
 export declare const ARKME_PRODUCTION_TRUSTED_SIGNING_KEYS = "{\"prod-ed25519-20260819-1\":\"m1MKKU16hyu1b1KKIXMG+zKEr/GmhmvyUEreJzthTxs=\"}";
 export declare const Config: Schema<Config>;
@@ -56,12 +60,23 @@ export declare function readDshRuntimeVersion(dshBinPath: string): string | unde
 export declare function resolveArkmeAppVersion(configuredAppVersion: string, environment?: {
     ARKME_APP_VERSION?: string;
 }): string | undefined;
+export declare function resolvePluginUpdateEnabled(configured: boolean, environment?: Readonly<Record<string, string | undefined>>): boolean;
 declare module '@deepseek-ai/cordis' {
     interface Context {
         /** Headless Arkme data provider for trusted Host-side consumer plugins. */
         arkmeData: ArkmeService;
+        /** Public DSH gateway detected at runtime; only the remote allowlist is consumed. */
+        apiProxy: DshPublicApiProxyLike;
+        /** Optional Host-owned authenticated Realtime socket carrier. */
+        arkmeRemoteSocketFactory: ArkmeRemoteAuthenticatedSocketFactory;
     }
 }
+export type ArkmeRemoteAuthenticatedSocketFactory = (input: {
+    profileRef: string;
+    clientRef: string;
+    accessToken: string;
+    signal: AbortSignal;
+}) => DshRemoteSocketLike | Promise<DshRemoteSocketLike>;
 export declare function apply(ctx: Context, config: Config): void;
 export declare function resolveArkmeConfig(ctx: Context, config: Config): Config;
 export type { ArkmeAiVideoJob, ArkmeAiVideoListItem, ArkmeAiVideoListResult, ArkmeAiVideoJobStatus, ArkmeAiVideoPreflightResult, ArkmeAiVideoSegmentSelector, ArkmeAiVideoTranscriptSource, ArkmeAuthSnapshot, ArkmeCachedQueryResult, ArkmeCachedSnapshot, ArkmeChatRealtimeState, ArkmeConversationWriteResult, ArkmeCreateTextResult, ArkmeDirectTextSendResult, ArkmeGroupAvatarFallback, ArkmeGroupAvatarPresentation, ArkmeGroupAvatarSlot, ArkmeIdAvailabilityReason, ArkmeIdAvailabilitySnapshot, ArkmeIdMutationResult, ArkmePendingWrite, ArkmeRelatedRecordingEligibility, ArkmeRelatedRecordingItem, ArkmeRelatedRecordingMonthBucket, ArkmeRelatedRecordingPage, ArkmeRelatedRecordingPageOptions, ArkmeRelatedRecordingPageState, ArkmeRelatedRecordingParticipant, ArkmeRelatedRecordingSpeaker, ArkmeContentBlock, ArkmeContentKind, ArkmeFavoriteSticker, ArkmeFavoriteStickerList, ArkmeFavoriteStickerAddInput, ArkmeFavoriteStickerManageAction, ArkmeRichSendInput, ArkmeImageMediaType, ArkmeImagePayload, ArkmeFileAssetDisplayItem, ArkmeRecordSearchResult, ArkmeRecordingSearchItem, ArkmeRecordingSearchResult, ArkmeSearchQueryGuard, ArkmeSearchRecordItem, ArkmeSearchSceneKind, ArkmeSearchSourceAggregate, ArkmeSourceDirectory, ArkmeSourceItem, ArkmeSourceKind, ArkmeSourceList, ArkmeSourceReadResult, ArkmeSourceSendResult, ArkmeTimelineCursor, ArkmeTimelineItem, ArkmeForwardRecordsPreview, ArkmeForwardRecordPreviewItem, ArkmeForwardTranscriptSegment, ArkmeTimelinePage, ArkmeUploadedAsset, ArkmeRecordCursor, ArkmeSelfRecordItem, ArkmeSelfRecordList, ArkmeSelfSummary, ArkmeCallDetail, ArkmeCallHistoryItem, ArkmeCallHistoryOptions, ArkmeCallHistoryPage, ArkmeCallMediaType, ArkmeCallParticipant, ArkmeCallRecentContact, ArkmeCallSummaryRetryResult, ArkmeCallSummaryStatus, ArkmeCallTranscriptSegment, ArkmeProviderCapabilities, ArkmeProviderState, ArkmePluginUpdateAvailability, ArkmePluginUpdateLevel, ArkmePluginUpdateNotice, ArkmePluginUpdateStatus, ArkmeUserProfile, ArkmeUserProfileSnapshot, ArkmeWorldPublishFileAsset, ArkmeWorldPublishFileAssetsInput, ArkmeWorldPublishResult, ArkmeWorldPublishTextInput, ArkmeWorldFeedItem, ArkmeWorldFeedPage, ArkmeWorldVoiceprintAvailability, ArkmeWorldVoiceprintAvailabilityItem, ArkmeWorldVoiceprintPlaybackChunk, ArkmeWorldRecordItem, ArkmeWorldRecordList, ArkmeWorldVisibility, ArkmeWechatCallFilter, ArkmeWechatCommonGroupFriend, ArkmeWechatCommonGroupPage, ArkmeWechatConversation, ArkmeWechatConversationDetail, ArkmeWechatConversationPage, ArkmeWechatGroupMember, ArkmeWechatGroupMemberPage, ArkmeWechatLocation, ArkmeWechatLocationPage, ArkmeWechatMessage, ArkmeWechatMessageFilter, ArkmeWechatMessagePage, ArkmeWechatMoneyFlow, ArkmeWechatMoneyFlowPage, ArkmeWechatPhone, ArkmeWechatPhoneEvidence, ArkmeWechatPhonePage, } from './types.js';