@sessionbus/dsh 0.1.0-pre.2 → 0.1.0-pre.4

package/README.md

@@ -1,11 +1,13 @@
 # sessionbus for DSH
 
 `@sessionbus/dsh` connects DSH roots to sessionbus and runs daemon-managed DSH lanes.
-It depends on the exact `@sessionbus/kit` prerelease `0.1.0-pre.3`.
+It depends on the exact `@sessionbus/kit` version `0.5.5`.
 It supports DeepSeek Harness `0.1.5-rc.2` and later; tested versions are
 `0.1.5-rc.2`, `0.1.6-alpha.1`, and `0.1.6-alpha.2`.
 A DSH profile must install every DSH package at one uniform DSH version; adding
 one prerelease package can otherwise pull newer prereleases through DSH's caret peers.
+The default single-tool permission grant relies on DSH's `tools/pre-execute`
+waterfall, present since the `0.1.5-rc.2` peer floor.
 `@sessionbus/dsh` is a pkg.pr.new preview until a separately reviewed trusted-
 publishing workflow exists; its first registry version must be published manually
 before trusted publishing can be configured.
@@ -13,6 +15,11 @@ The plugin reads the token once, deletes it from process.env, and retains it
 nowhere in the plugin; DSH's immutable launch snapshot keeps it for the process
 lifetime (trusted host).
 
+## Installation
+
+See [Installing a DSH lane host](docs/HOST-INSTALL.md) for the complete
+preflight, installation, verification, and rollback procedure.
+
 Create the base-only lane profile with:
 
 ```sh

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sessionbus/dsh",
-  "version": "0.1.0-pre.2",
+  "version": "0.1.0-pre.4",
   "type": "commonjs",
   "main": "plugin.cjs",
   "exports": "./plugin.cjs",
@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "@antst/dsh-file-uploads-none": "0.1.0-alpha.18",
-    "@sessionbus/kit": "0.1.0-pre.3"
+    "@sessionbus/kit": "0.5.5"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",

package/plugin.cjs

@@ -313,6 +313,12 @@ function createRuntime(ctx, config, dependencies, prepared) {
     assertKnownArguments(args, argumentsSchema);
     return client.action(argumentsValue.action, args);
   };
+  let removeGrant;
+  try {
+    // The peer floor guarantees this waterfall; this catch covers registration errors, not feature detection.
+    removeGrant = ctx.on("tools/pre-execute", async (execution, next) =>
+      execution.name === "sessionbus" ? { kind: "allow" } : next(), { prepend: true });
+  } catch (error) { throw new Error(`cannot grant sessionbus tool permission: ${clean(error)}`); }
   const removeTool = ctx.tools.register(dependencies.defineTool({
     name: "sessionbus",
     description: "List, message, spawn and control Sessionbus sessions. Use trace mode off, events or content to configure live parent tracing for a direct child; spawn trace sets its initial mode.",
@@ -349,7 +355,7 @@ function createRuntime(ctx, config, dependencies, prepared) {
   };
   const removeReady = ctx.appReady.onReady(start);
   const close = () => {
-    removeReady(); removeCreated(); removeDisposed(); removeTitle(); removeCommand(); removeTool();
+    removeReady(); removeCreated(); removeDisposed(); removeTitle(); removeCommand(); removeGrant(); removeTool();
     for (const agent of peers.keys()) forget(agent);
     worker?.shutdown(); native.removeEvents();
   };