dsh-context 0.35.0 → 0.37.0

package/lib/index.d.ts

@@ -1,6 +1,6 @@
-import { ZodType, z } from "zod";
-import { Session, SessionEvent } from "@deepseek-ai/dsh-session";
-import { Context, Service } from "@deepseek-ai/cordis";
+import { z } from "zod";
+import "@deepseek-ai/dsh-session";
+import { Context } from "@deepseek-ai/cordis";
 //#region src/host/config.d.ts
 interface Config {
   /** Cap on kept per-step request records (the hard step backstop). */
@@ -29,13 +29,90 @@ declare const Config: z.ZodPreprocess<z.ZodObject<{
   maxArchiveNodes: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strict>>;
 //#endregion
-//#region src/shared/types.d.ts
+//#region src/host/headers.d.ts
+interface HeadersState {
+  headers: HeaderRecord[];
+}
+//#endregion
+//#region src/host/fold.d.ts
 /**
- * Shared wire contract — the snapshot model exchanged between the Host and Client halves. Delivered as the `view()` payload of the
- * `contextTimeline`/`contextHeaders` session projections (registered on `ctx.sessionProjections`; the registry pushes finished views as
- * `session/projection` frames — see host/timeline.ts). TYPE-ONLY host-side module: both halves import these as `import type`, so nothing
- * from here ever reaches the runtime bundles.
+ * History retention bounds (configurable since 0.11 — see config.ts; these
+ * are the defaults' values). The fold keeps per-STEP request records; once the
+ * newest run count exceeds `maxKeptTurns`, the timeline is trimmed to the
+ * most recent whole TURN runs (never cutting a turn in half), so turn
+ * granularity can always show the full recent turn range instead of a
+ * step-count fragment. The turn-run trim runs whenever the cap is crossed
+ * (not only when the raw step bound is), so the bounded state stays at the
+ * newest ~`maxKeptTurns` turns deterministically as a live log grows.
  */
+interface TimelineState {
+  /** Model-visible surface, newest last. */
+  surface: SurfaceNode[];
+  sums: Record<Category, number>;
+  systemTokens: number;
+  toolsTokens: number;
+  /**
+   * The projection-cache precondition is plain JSON: a property whose value
+   * is `undefined` makes the whole checkpoint unserializable
+   * (`snapshotJsonValue` rejects it), which fails EVERY cache write for the
+   * session — including the `title` projection row that powers the session
+   * list after a restart. Optional fields therefore use absent properties
+   * (`model`/`provider`/`lastModel`/`contextWindow` are simply not set until
+   * a value is known) instead of `undefined`-valued ones. Reads via
+   * `state.model` are identical for both shapes (`undefined` on miss).
+   */
+  model?: string;
+  provider?: string;
+  lastModel?: string;
+  contextWindow?: number;
+  requests: RequestRecord[];
+  events: ContextEventRecord[];
+  /**
+   * Recently removed surface nodes (stamped COPIES carrying `gone`), in
+   * removal order. Feeds the Context browser's per-step reconstruction.
+   * Bounded two ways in trimState: capped to `maxArchiveNodes`, and pruned
+   * to removals after the oldest retained request (older removals can only
+   * serve steps the requests trim already forgot).
+   */
+  archived: SurfaceNode[];
+  /**
+   * Session-cost raw material: cumulative billed-token totals per DeepSeek
+   * V4 model family and pricing period (see SessionCostUsage). Running
+   * totals — never trimmed, so the estimate always covers the COMPLETE
+   * session log even after the request/event retention bounds cut in.
+   * Absent until a v4-flash / v4-pro request reports usage.
+   */
+  cost?: SessionCostUsage;
+  archiveFloor?: number;
+  /**
+   * Tool callId → name, armed by `tool/call` and DELETED when its
+   * `tool/result` folds in (one result per call, in log order) — the map
+   * stays at pending-call size instead of growing for the session's whole
+   * lifetime (it is persisted state, shallow-copied by every fold step).
+   */
+  callNames: Record<string, string>;
+  /**
+   * Seq list of the surface nodes the next replacement will shadow, armed by
+   * the metering event (`compaction/summary` | `compaction/prune`) and
+   * consumed by the replacement that must follow it synchronously. The
+   * producer's shadow price covers exactly these seqs — which can differ
+   * from the replacement's declared range (pruned replacement nodes keep
+   * their own seqs, beyond the range end) — so removal must follow the seqs.
+   * Absent until armed, and REMOVED (not set to `undefined`) when consumed,
+   * to keep the state plain JSON for the projection cache.
+   */
+  pendingShadowedSeqs?: number[];
+  /**
+   * The seq of the compaction/prune event that armed `pendingShadowedSeqs` —
+   * the shadowed path rewrites that event's `tokens` from the gross shadow
+   * price to the NET freed amount (removed nodes minus the synchronous
+   * replacement), so the row matches the drop the trend chart shows. Same
+   * arm/remove lifecycle as `pendingShadowedSeqs`.
+   */
+  pendingShadowEventSeq?: number;
+}
+//#endregion
+//#region src/shared/types.d.ts
 declare module '@deepseek-ai/dsh-session-projection/types' {
   interface SessionProjectionMap {
     /**
@@ -55,6 +132,10 @@ declare module '@deepseek-ai/dsh-session-projection/types' {
      */
     contextHeaders: ContextHeaders;
   }
+  interface SessionProjectionStateMap {
+    contextTimeline: TimelineState;
+    contextHeaders: HeadersState;
+  }
 }
 type Category = 'user' | 'inject' | 'assistant' | 'tool';
 interface Snapshot {
@@ -247,6 +328,15 @@ interface HeaderTool {
   tokens: number;
   /** Producer-declared description (may be long; the browser truncates). */
   description?: string;
+  /**
+   * The registering plugin's label, when attribution is known: either a
+   * `plugin` field carried by the raw header entry (harness-provided) or the
+   * host's best-effort attribution (`mcp:<server>` for MCP tools, or the
+   * pinned first-party package map). `UNKNOWN_TOOL_SOURCE` marks a tool whose
+   * provider predates the attribution hook; absent means nothing is known and
+   * the browser shows no tag.
+   */
+  plugin?: string;
   /** The raw JSON schema object the model received (plain JSON). */
   schema?: unknown;
 }
@@ -264,315 +354,6 @@ interface ContextHeaders {
   headers: HeaderRecord[];
 }
 //#endregion
-//#region src/host/fold.d.ts
-/**
- * History retention bounds (configurable since 0.11 — see config.ts; these
- * are the defaults' values). The fold keeps per-STEP request records; once the
- * newest run count exceeds `maxKeptTurns`, the timeline is trimmed to the
- * most recent whole TURN runs (never cutting a turn in half), so turn
- * granularity can always show the full recent turn range instead of a
- * step-count fragment. The turn-run trim runs whenever the cap is crossed
- * (not only when the raw step bound is), so the bounded state stays at the
- * newest ~`maxKeptTurns` turns deterministically as a live log grows.
- */
-interface TimelineState {
-  /** Model-visible surface, newest last. */
-  surface: SurfaceNode[];
-  sums: Record<Category, number>;
-  systemTokens: number;
-  toolsTokens: number;
-  /**
-   * The projection-cache precondition is plain JSON: a property whose value
-   * is `undefined` makes the whole checkpoint unserializable
-   * (`snapshotJsonValue` rejects it), which fails EVERY cache write for the
-   * session — including the `title` projection row that powers the session
-   * list after a restart. Optional fields therefore use absent properties
-   * (`model`/`provider`/`lastModel`/`contextWindow` are simply not set until
-   * a value is known) instead of `undefined`-valued ones. Reads via
-   * `state.model` are identical for both shapes (`undefined` on miss).
-   */
-  model?: string;
-  provider?: string;
-  lastModel?: string;
-  contextWindow?: number;
-  requests: RequestRecord[];
-  events: ContextEventRecord[];
-  /**
-   * Recently removed surface nodes (stamped COPIES carrying `gone`), in
-   * removal order. Feeds the Context browser's per-step reconstruction.
-   * Bounded two ways in trimState: capped to `maxArchiveNodes`, and pruned
-   * to removals after the oldest retained request (older removals can only
-   * serve steps the requests trim already forgot).
-   */
-  archived: SurfaceNode[];
-  /**
-   * Session-cost raw material: cumulative billed-token totals per DeepSeek
-   * V4 model family and pricing period (see SessionCostUsage). Running
-   * totals — never trimmed, so the estimate always covers the COMPLETE
-   * session log even after the request/event retention bounds cut in.
-   * Absent until a v4-flash / v4-pro request reports usage.
-   */
-  cost?: SessionCostUsage;
-  archiveFloor?: number;
-  /**
-   * Tool callId → name, armed by `tool/call` and DELETED when its
-   * `tool/result` folds in (one result per call, in log order) — the map
-   * stays at pending-call size instead of growing for the session's whole
-   * lifetime (it is persisted state, shallow-copied by every fold step).
-   */
-  callNames: Record<string, string>;
-  /**
-   * Seq list of the surface nodes the next replacement will shadow, armed by
-   * the metering event (`compaction/summary` | `compaction/prune`) and
-   * consumed by the replacement that must follow it synchronously. The
-   * producer's shadow price covers exactly these seqs — which can differ
-   * from the replacement's declared range (pruned replacement nodes keep
-   * their own seqs, beyond the range end) — so removal must follow the seqs.
-   * Absent until armed, and REMOVED (not set to `undefined`) when consumed,
-   * to keep the state plain JSON for the projection cache.
-   */
-  pendingShadowedSeqs?: number[];
-  /**
-   * The seq of the compaction/prune event that armed `pendingShadowedSeqs` —
-   * the shadowed path rewrites that event's `tokens` from the gross shadow
-   * price to the NET freed amount (removed nodes minus the synchronous
-   * replacement), so the row matches the drop the trend chart shows. Same
-   * arm/remove lifecycle as `pendingShadowedSeqs`.
-   */
-  pendingShadowEventSeq?: number;
-}
-//#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-session-projection@0.1.0-rc.8_@deepseek-ai+cordis@4.0.1_@deepseek-ai+d_c0ffab70d18276fadfe75ed916313ea3/node_modules/@deepseek-ai/dsh-session-projection/lib/types/types.d.ts
-/**
- * Pure-type outlet of the session-projection Service Definition: the one projection type
- * table, importable from client aggregates without dragging the host-side
- * cordis Context merges of the package root (dsh-agent → dsh-session). Domain
- * packages may declare-merge through either the package root or this outlet —
- * re-export preserves symbol identity, so both land on the same table.
- *
- * @module @deepseek-ai/dsh-session-projection/types
- */
-/**
- * The single projection type table for the whole chain (host provider, wire
- * block, client cell, React hook). Domain packages merge their key here via
- * declaration merging; values are wire-JSON whole values. How a value is
- * rendered is the slot system's business, never this layer's.
- */
-interface SessionProjectionMap {}
-//#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-session-projection@0.1.0-rc.8_@deepseek-ai+cordis@4.0.1_@deepseek-ai+d_c0ffab70d18276fadfe75ed916313ea3/node_modules/@deepseek-ai/dsh-session-projection/lib/types/index.d.ts
-declare module '@deepseek-ai/cordis' {
-  interface Context {
-    sessionProjections: SessionProjectionRegistry;
-  }
-}
-/**
- * One domain's state-driven computation unit: three pure synchronous
- * functions plus declarations — never an opaque getter. The framework drives
- * `apply` on every committed session event; the domain holds no
- * subscriptions and owns only the mathematics. All three functions MUST be
- * synchronous (an async unit would tear the carriers' consistency cut) and
- * `state` MUST be plain JSON (the persisted-cache precondition).
- */
-interface ProjectionDefinition<K extends keyof SessionProjectionMap, S> {
-  /** The projection key this unit owns (its `SessionProjectionMap` entry). */
-  key: K;
-  /** Validates the wire payload (`view` output) before it leaves the host. */
-  schema: ZodType<SessionProjectionMap[K]>;
-  /**
-   * State for the empty log.
-   * @returns the initial state.
-   */
-  init(): S;
-  /**
-   * Pure transition: previous state + one committed event → next state. A
-   * unit uninterested in an event MUST return the same state reference — an
-   * unchanged reference (`Object.is`) produces zero downstream work.
-   * @param state - the state covering all prior events.
-   * @param event - the next committed session event.
-   * @returns the next state (same reference when the event is not the unit's).
-   */
-  apply(state: S, event: SessionEvent): S;
-  /**
-   * State → wire payload (the read-side projection).
-   * @param state - the current state.
-   * @returns the whole current value for this unit's key.
-   */
-  view(state: S): SessionProjectionMap[K];
-  /**
-   * Persisted-cache invalidation version: bump whenever the serialized state fields or the
-   * fold semantics change, so persisted `(sessionId, key, ver, seq, val)`
-   * rows from an older unit are discarded instead of being forward-applied
-   * into garbage. Non-negative integer.
-   */
-  stateVersion: number;
-}
-/**
- * Change-feed listener: one unit's value changed for one session. `value` is
- * the schema-validated `view` output; `seq` is the unit's watermark at
- * emission (the seq of the event that caused the change).
- */
-type ProjectionChangeListener = (session: Session, key: Extract<keyof SessionProjectionMap, string>, value: unknown, seq: number) => void;
-/**
- * One consistent read cut over every registered unit for one session.
- * `asOfSeq` is the shared watermark — the seq of the last event every value
- * reflects (`-1` for an empty log, mirroring `session/subscribed.lastSeq`).
- */
-interface ProjectionSnapshot {
-  /** Seq of the last event the values reflect; -1 for an empty log. */
-  asOfSeq: number;
-  /** Whole current value per registered key. */
-  values: Partial<SessionProjectionMap>;
-}
-/**
- * One unit's checkpoint: its internal state (plain JSON by the unit
- * contract), the seq of the last event folded into it, and the unit
- * `stateVersion` that produced it — the persisted projection-cache row
- * `(sessionId, key, ver, seq, val)` minus the two outer keys. A row is
- * never authoritative, only a fold shortcut: `restore` discards it on a
- * version mismatch or when it claims events past the stored log end.
- */
-interface ProjectionCheckpointRow {
-  /** The registering unit's `stateVersion` at fold time. */
-  ver: number;
-  /** Seq of the last event folded into `val`; -1 for the empty log. */
-  seq: number;
-  /** The unit's internal state — plain JSON per the unit contract. */
-  val: unknown;
-}
-/** Checkpoint rows keyed by projection key (one session's persisted cache value). */
-type ProjectionCheckpoint = Record<string, ProjectionCheckpointRow>;
-/**
- * `ctx.sessionProjections`: the projection unit table and its drive. The
- * service subscribes to `session/event` once; every committed event passes
- * every registered unit's `apply` (eager drive), and a changed state
- * reference notifies the change feed with the schema-validated view.
- * Cells build lazily — a unit registered after events flowed, or a session
- * older than the registry, folds `init` over the in-memory log on first
- * touch (event or read). Registration is an effect (disposer rides the
- * calling fiber): an unloaded domain plugin's key disappears from snapshots
- * and clients read it as capability absence. Domain
- * plugins register under `ctx.inject(['sessionProjections'], …)` so headless
- * assemblies without the registry stay unaffected. Registrants sharing a key
- * share one unit and are counted: the same tool package mounted in N agent
- * presets registers N times, and the key survives until the last one
- * unloads.
- */
-declare class SessionProjectionRegistry extends Service {
-  private readonly registrations;
-  private readonly listeners;
-  /**
-   * Create and install the registry as `ctx.sessionProjections`.
-   * @param ctx - Cordis context that owns the service.
-   */
-  constructor(ctx: Context);
-  /**
-   * Register one domain's unit. The registration is an effect on the calling
-   * context's fiber: disposing the fiber (or calling the returned disposer)
-   * removes the key — and the unit's cached cells — from subsequent drives
-   * and snapshots.
-   * @param definition - key, state schema, pure unit functions, and stateVersion.
-   * @returns the exact disposer that unregisters this unit.
-   */
-  register<K extends keyof SessionProjectionMap, S>(definition: ProjectionDefinition<K, S>): () => void;
-  /**
-   * Subscribe to the change feed. The registration is an effect on the
-   * calling context's fiber.
-   * @param listener - called once per unit whose state reference changed, per committed event.
-   * @returns the exact disposer that unsubscribes.
-   */
-  onChanged(listener: ProjectionChangeListener): () => void;
-  /**
-   * One consistent cut over every registered unit for one session, read from
-   * the watermark cache (missing cells fold lazily over the in-memory log).
-   * Fully synchronous — every value and `asOfSeq` reflect the same log
-   * position. Each value passes its unit's schema before leaving.
-   * @param session - the session whose projection values are read.
-   * @returns the snapshot; `values` is empty when no unit is registered.
-   */
-  snapshot(session: Session): ProjectionSnapshot;
-  /**
-   * State-level checkpoint of every registered unit for one session, read
-   * from the watermark cache (missing cells fold lazily over the in-memory
-   * log). This is the write side of the persisted projection cache: the
-   * returned rows are the `(key → {ver, seq, val})` part of the durable
-   * `(sessionId, key, ver, seq, val)`
-   * rows. Every `val` is a DETACHED structured clone — never the live
-   * cell reference: the watermark cache is this registry's authoritative
-   * mutable state, and a caller reaching the live reference could corrupt
-   * every subsequent snapshot and frame through it (plain JSON by the unit
-   * contract, so the clone is total).
-   * @param session - the session whose unit states are checkpointed.
-   * @returns one row per registered key; empty when no unit is registered.
-   */
-  checkpoint(session: Session): ProjectionCheckpoint;
-  /**
-   * The stored seq a {@link restore} tail read over `checkpoint` must start
-   * at: one event BELOW the lowest usable watermark (a row is usable when
-   * its `ver` matches the live unit's `stateVersion`; an absent or mismatched row
-   * pulls the floor to `0` — that key must refold the full log). The
-   * one-below anchor is load-bearing: the tail then proves how far the
-   * stored log still extends, so {@link restore} can detect a log that
-   * shrank below a row's watermark (crash-repair truncation) instead of
-   * serving the stale row as current — an empty tail read from the anchor
-   * yields an end below every watermark and the restore rejects for a full
-   * re-read.
-   * @param checkpoint - persisted rows for one session (possibly stale or empty).
-   * @returns the seq to hand the persistence `readFrom`, or `undefined`
-   *   when no unit is registered (no read needed — {@link restore} would
-   *   serve empty values regardless).
-   */
-  restoreFloor(checkpoint: ProjectionCheckpoint): number | undefined;
-  /**
-   * View a checkpoint's rows without any log read: for every registered
-   * unit whose row's `ver` matches, serve the schema-validated
-   * `view` of the stored state; mismatched or absent rows leave their key
-   * absent (a cold or listing consumer treats it as not-yet-available and a
-   * fuller read path refolds it). The zero-I/O rung of the read ladder —
-   * values are as stale as their rows, never wrong.
-   * @param checkpoint - persisted rows for one session (possibly stale or empty).
-   * @returns whole values per key with a usable row; empty when none.
-   */
-  viewCheckpoint(checkpoint: ProjectionCheckpoint): Partial<SessionProjectionMap>;
-  /**
-   * Cold read: fold every registered unit over a stored log suffix, seeding
-   * each from its checkpoint row when usable — the one read recipe (cached
-   * state + forward tail replay + `view`) applied without a live `Session`.
-   * Call with the events returned by a persistence
-   * `readFrom(id, restoreFloor(checkpoint))` and that same floor as
-   * `baseSeq`; the floor's one-below anchor makes the supplied end honest,
-   * so a shrunk log is detected here. A row is usable iff its
-   * `ver` matches the live unit's `stateVersion`, it does not predate `baseSeq`
-   * (`seq >= baseSeq - 1`), and it does not claim events past the
-   * supplied end (`seq <= endSeq`); an unusable row is discarded
-   * and its key refolds from `init` — which is only sound over the full
-   * log, so a discarded row with `baseSeq > 0` throws (the caller re-reads
-   * from seq 0, e.g. after a crash-repair truncation shrank the log below
-   * a row's watermark).
-   * @param checkpoint - persisted rows for one session (possibly stale or empty).
-   * @param events - the stored events with `seq >= baseSeq`, in seq order.
-   * @param baseSeq - the seq `events` starts at (its first event's seq when non-empty).
-   * @returns the snapshot cut at the supplied log end (`asOfSeq` is the last
-   *   supplied event's seq, `baseSeq - 1` for an empty tail) plus the
-   *   refreshed checkpoint rows at that cut, ready for a durable write-back.
-   */
-  restore(checkpoint: ProjectionCheckpoint, events: readonly SessionEvent[], baseSeq: number): {
-    snapshot: ProjectionSnapshot;
-    checkpoint: ProjectionCheckpoint;
-  };
-  /** Fold one unit from init over `events`, producing a cell watermarked at the last folded event. */
-  private buildCell;
-  /** Read (or lazily build, folding the full in-memory log) one unit's cell. */
-  private cellFor;
-  /** Eager drive: pass one committed event through every registered unit; notify on changed references. */
-  private drive;
-}
-//#endregion
-//#region src/host/headers.d.ts
-interface HeadersState {
-  headers: HeaderRecord[];
-}
-//#endregion
 //#region src/host/index.d.ts
 declare const name = "dsh-context";
 declare const inject: string[];