dsh-draw 0.1.0 → 0.1.2

package/lib/types/event-gate.d.ts

@@ -0,0 +1,46 @@
+/**
+ * The session-event adaptive gate. `draw/generated` is declared only in this
+ * package's types, so it sits outside every host's `KNOWN_SESSION_EVENT_TYPES`:
+ * hosts whose session reader validates a static whitelist (rc.6/rc.7) refuse to
+ * reopen a session containing the event unless it carries the `ignorable`
+ * envelope — and those hosts' `Session.append` cannot stamp it. The gate
+ * therefore appends only when the type is host-known or a mount-time probe
+ * proves envelope support; otherwise the accounting payload goes to the
+ * in-memory fallback ledger (see session-events.ts) so quota keeps working for
+ * the live session without poisoning the log.
+ *
+ * @module dsh-draw/event-gate
+ */
+/** One gate decision: whether to append, and whether to mark ignorable. */
+export interface EventGateDecision {
+    /** Append the event to the session log. */
+    append: boolean;
+    /** Stamp the `ignorable` envelope (only meaningful when append). */
+    ignorable: boolean;
+}
+/** Decision function over session event types. */
+export type EventGate = (type: string) => EventGateDecision;
+/**
+ * Build the gate: host-known types append plainly; unknown types append with
+ * the ignorable envelope only when the host append honors it; everything else
+ * is skipped — an unknown, unmarked event would make the session refuse to
+ * load on restart under the rc.6/rc.7 static whitelist.
+ *
+ * @param knownTypes - the host's KNOWN_SESSION_EVENT_TYPES.
+ * @param ignorableAppend - whether the host append stamps the envelope.
+ * @returns the decision function.
+ */
+export declare function makeEventGate(knownTypes: ReadonlySet<string>, ignorableAppend?: boolean): EventGate;
+/**
+ * Probe whether the host `Session.append` stamps the ignorable envelope. Runs
+ * on a fully detached SessionStore — never host persistence — appending one
+ * probe event with `{ ignorable: true }` and reading the marker back. rc.6's
+ * append silently drops the unknown options key (probe false); every failure
+ * is contained as "unsupported".
+ *
+ * @returns whether the envelope is honored.
+ */
+export declare function probeIgnorableAppend(): boolean;
+/** The gate over the host's known types plus the probed envelope support. */
+export declare function makeHostEventGate(): EventGate;
+//# sourceMappingURL=event-gate.d.ts.map

package/lib/types/event-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-gate.d.ts","sourceRoot":"","sources":["../../src/event-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,MAAM,EAAE,OAAO,CAAA;IACf,oEAAoE;IACpE,SAAS,EAAE,OAAO,CAAA;CACnB;AAED,kDAAkD;AAClD,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,iBAAiB,CAAA;AAE3D;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,eAAe,UAAQ,GAAG,SAAS,CAMjG;AAKD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAoB9C;AAED,6EAA6E;AAC7E,wBAAgB,iBAAiB,IAAI,SAAS,CAE7C"}

package/lib/types/event-gate.js

@@ -0,0 +1,69 @@
+/**
+ * The session-event adaptive gate. `draw/generated` is declared only in this
+ * package's types, so it sits outside every host's `KNOWN_SESSION_EVENT_TYPES`:
+ * hosts whose session reader validates a static whitelist (rc.6/rc.7) refuse to
+ * reopen a session containing the event unless it carries the `ignorable`
+ * envelope — and those hosts' `Session.append` cannot stamp it. The gate
+ * therefore appends only when the type is host-known or a mount-time probe
+ * proves envelope support; otherwise the accounting payload goes to the
+ * in-memory fallback ledger (see session-events.ts) so quota keeps working for
+ * the live session without poisoning the log.
+ *
+ * @module dsh-draw/event-gate
+ */
+import { Context } from '@deepseek-ai/cordis';
+import SessionStore, { KNOWN_SESSION_EVENT_TYPES } from '@deepseek-ai/dsh-session';
+/**
+ * Build the gate: host-known types append plainly; unknown types append with
+ * the ignorable envelope only when the host append honors it; everything else
+ * is skipped — an unknown, unmarked event would make the session refuse to
+ * load on restart under the rc.6/rc.7 static whitelist.
+ *
+ * @param knownTypes - the host's KNOWN_SESSION_EVENT_TYPES.
+ * @param ignorableAppend - whether the host append stamps the envelope.
+ * @returns the decision function.
+ */
+export function makeEventGate(knownTypes, ignorableAppend = false) {
+    return (type) => {
+        if (knownTypes.has(type))
+            return { append: true, ignorable: false };
+        if (ignorableAppend)
+            return { append: true, ignorable: true };
+        return { append: false, ignorable: false };
+    };
+}
+/**
+ * Probe whether the host `Session.append` stamps the ignorable envelope. Runs
+ * on a fully detached SessionStore — never host persistence — appending one
+ * probe event with `{ ignorable: true }` and reading the marker back. rc.6's
+ * append silently drops the unknown options key (probe false); every failure
+ * is contained as "unsupported".
+ *
+ * @returns whether the envelope is honored.
+ */
+export function probeIgnorableAppend() {
+    try {
+        const store = new SessionStore(new Context());
+        const session = store.create();
+        const event = session.append('draw/generated', {
+            engine: 'probe',
+            model: 'probe',
+            source: 'tool',
+            prompt: 'probe',
+            size: 'auto',
+            quality: 'auto',
+            count: 0,
+            bytes: 0,
+            attachmentIds: [],
+            elapsedMs: 0,
+        }, { ignorable: true });
+        return event?.ignorable === true;
+    }
+    catch {
+        return false;
+    }
+}
+/** The gate over the host's known types plus the probed envelope support. */
+export function makeHostEventGate() {
+    return makeEventGate(KNOWN_SESSION_EVENT_TYPES, probeIgnorableAppend());
+}

package/lib/types/index.d.ts

@@ -14,23 +14,24 @@
  * @module dsh-draw
  */
 import type { Context } from '@deepseek-ai/cordis';
-import { Config } from './config.ts';
+import { Config } from './config.js';
 export declare const name = "dsh-draw";
 /** Hard services: the tool registry every contribution lands in. */
 export declare const inject: string[];
-export { Config, resolveConfig, type Config as DrawConfig, type ResolvedConfig, DEFAULT_ENGINES, engineById } from './config.ts';
-export { EngineRouter, type AttemptView, type EngineStatus, type ProbeOutcome } from './router.ts';
-export { Drawer, type DrawImage, type DrawFailureReason, type DrawOutcome, type DrawOptions, type DrawSuccess } from './drawer.ts';
-export { imageGenerateTool } from './tool.ts';
-export { DrawService } from './service.ts';
-export { defaultHttpTransport, fusedSignal, type HttpTransport, type HttpRequest, type HttpResponse, HttpError } from './http.ts';
-export { callEngine, EngineCallError, type EngineDeps, type ProducedImage } from './engine.ts';
-export { translateRequest, normalizeRequest, type StandardImageRequest } from './translate.ts';
-export { quotaState, checkQuotaGenerations, checkQuotaBytes, type QuotaLimits, type QuotaState } from './quota.ts';
-export { sanitizeUrl, sanitizeText, sanitizeError, REDACTED } from './sanitize.ts';
-export { appendDrawGenerated, drawGeneratedEvents, type DrawGeneratedEvent } from './session-events.ts';
-export { PLUGIN_VERSION } from './version.ts';
-export { DRAW_INVOCATIONS, imageToWire, statusToView, probeToWire, type DrawStatusSnapshot } from './wire.ts';
+export { Config, resolveConfig, type Config as DrawConfig, type ResolvedConfig, DEFAULT_ENGINES, engineById } from './config.js';
+export { EngineRouter, type AttemptView, type EngineStatus, type ProbeOutcome } from './router.js';
+export { Drawer, type DrawImage, type DrawFailureReason, type DrawOutcome, type DrawOptions, type DrawSuccess } from './drawer.js';
+export { imageGenerateTool } from './tool.js';
+export { DrawService } from './service.js';
+export { defaultHttpTransport, fusedSignal, type HttpTransport, type HttpRequest, type HttpResponse, HttpError } from './http.js';
+export { callEngine, EngineCallError, type EngineDeps, type ProducedImage } from './engine.js';
+export { translateRequest, normalizeRequest, type StandardImageRequest } from './translate.js';
+export { quotaState, checkQuotaGenerations, checkQuotaBytes, type QuotaLimits, type QuotaState } from './quota.js';
+export { sanitizeUrl, sanitizeText, sanitizeError, REDACTED } from './sanitize.js';
+export { appendDrawGenerated, commitDrawGenerated, drawGeneratedEvents, fallbackDrawGeneratedEvents, type DrawGeneratedEvent } from './session-events.js';
+export { makeEventGate, makeHostEventGate, probeIgnorableAppend, type EventGate, type EventGateDecision } from './event-gate.js';
+export { PLUGIN_VERSION } from './version.js';
+export { DRAW_INVOCATIONS, imageToWire, statusToView, probeToWire, type DrawStatusSnapshot } from './wire.js';
 /**
  * Mount the plugin: router, drawer, the `image_generate` tool, and the `draw`
  * Remote service. Every registration is an effect on this fiber, so

package/lib/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAMlD,OAAO,EAAE,MAAM,EAAiB,MAAM,aAAa,CAAA;AAOnD,eAAO,MAAM,IAAI,aAAa,CAAA;AAE9B,oEAAoE;AACpE,eAAO,MAAM,MAAM,UAAY,CAAA;AAE/B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,MAAM,IAAI,UAAU,EAAE,KAAK,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAChI,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAA;AAClG,OAAO,EAAE,MAAM,EAAE,KAAK,SAAS,EAAE,KAAK,iBAAiB,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAA;AAClI,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACjI,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAA;AAC9F,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAC9F,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,eAAe,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AAClH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAClF,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACvG,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAK7G;;;;;;;GAOG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiCvE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAMlD,OAAO,EAAE,MAAM,EAAiB,MAAM,aAAa,CAAA;AAQnD,eAAO,MAAM,IAAI,aAAa,CAAA;AAE9B,oEAAoE;AACpE,eAAO,MAAM,MAAM,UAAY,CAAA;AAE/B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,MAAM,IAAI,UAAU,EAAE,KAAK,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAChI,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAA;AAClG,OAAO,EAAE,MAAM,EAAE,KAAK,SAAS,EAAE,KAAK,iBAAiB,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAA;AAClI,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACjI,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAA;AAC9F,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAC9F,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,eAAe,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AAClH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAClF,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACzJ,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,KAAK,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAChI,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAK7G;;;;;;;GAOG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCvE"}

package/lib/types/index.js

@@ -16,6 +16,7 @@
 import { credentialRef } from '@deepseek-ai/dsh-credentials';
 import { resolveConfig } from './config.js';
 import { Drawer } from './drawer.js';
+import { makeHostEventGate } from './event-gate.js';
 import { defaultHttpTransport } from './http.js';
 import { EngineRouter } from './router.js';
 import { DrawService } from './service.js';
@@ -33,7 +34,8 @@ export { callEngine, EngineCallError } from './engine.js';
 export { translateRequest, normalizeRequest } from './translate.js';
 export { quotaState, checkQuotaGenerations, checkQuotaBytes } from './quota.js';
 export { sanitizeUrl, sanitizeText, sanitizeError, REDACTED } from './sanitize.js';
-export { appendDrawGenerated, drawGeneratedEvents } from './session-events.js';
+export { appendDrawGenerated, commitDrawGenerated, drawGeneratedEvents, fallbackDrawGeneratedEvents } from './session-events.js';
+export { makeEventGate, makeHostEventGate, probeIgnorableAppend } from './event-gate.js';
 export { PLUGIN_VERSION } from './version.js';
 export { DRAW_INVOCATIONS, imageToWire, statusToView, probeToWire } from './wire.js';
 /** Response byte ceiling: one engine call may carry several full-size images. */
@@ -58,6 +60,9 @@ export async function apply(ctx, config) {
         cooldownMs: resolved.cooldownMs,
     });
     const credentials = () => ctx.get('credentials');
+    // The draw/generated event type is declared only by this package: append it
+    // only when the host knows the type or honors the ignorable envelope;
+    // otherwise the accounting payload rides the in-memory fallback ledger.
     const drawer = new Drawer(resolved, router, {
         engine: {
             transport,
@@ -71,7 +76,7 @@ export async function apply(ctx, config) {
         },
         attachments: () => ctx.get('attachments'),
         sessions: () => ctx.get('sessions'),
-    });
+    }, { gate: makeHostEventGate(), warn: (message) => logger.warn(message) });
     ctx.effect(() => ctx.tools.register(imageGenerateTool(drawer, resolved)), 'dsh-draw: image_generate tool');
     await ctx.plugin(DrawService, { config: resolved, router, drawer, credentials: credentials() });
     logger.info(`image generation enabled: ${resolved.engines.map(engine => engine.id).join(', ')} (preferred ${resolved.defaultEngine})`);

package/lib/types/quota.d.ts

@@ -1,8 +1,12 @@
 /**
  * Per-session quota accounting. The durable source of truth is the session
- * log: every completed generation appends one `draw/generated` event, and
- * quota is computed by folding those events, so usage survives restart and
- * fork and cannot drift from what the log records.
+ * log: every completed generation commits one `draw/generated` event, and
+ * quota folds those events, so usage survives restart and fork and cannot
+ * drift from what the log records. On hosts that cannot carry the event
+ * safely (rc.6/rc.7 static whitelist without the ignorable envelope), commits
+ * land in the in-memory fallback ledger instead and quota folds both sources —
+ * live-session accounting stays exact; cross-restart durability resumes when
+ * the host gains a plugin event surface.
  *
  * @module dsh-draw/quota
  */
@@ -40,9 +44,11 @@ export interface QuotaAllowance {
 /** Quota decision. */
 export type QuotaCheck = QuotaAllowance | QuotaDenial;
 /**
- * Fold one session's `draw/generated` events into current usage.
+ * Fold one session's `draw/generated` events into current usage: logged events
+ * first, then the in-memory fallback ledger (disjoint — a commit lands in
+ * exactly one of them).
  *
- * @param session - session whose log is folded.
+ * @param session - session whose log and ledger are folded.
  * @returns generation and byte totals.
  */
 export declare function quotaState(session: Session): QuotaState;

package/lib/types/quota.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../src/quota.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAA;AAGvD,0BAA0B;AAC1B,MAAM,WAAW,WAAW;IAC1B,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAA;IACtB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,kDAAkD;AAClD,MAAM,WAAW,UAAU;IACzB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAA;IACnB,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAA;CACd;AAED,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,oBAAoB;IACpB,OAAO,EAAE,KAAK,CAAA;IACd,mCAAmC;IACnC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAA;IAC/B,8BAA8B;IAC9B,KAAK,EAAE,UAAU,CAAA;CAClB;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,oBAAoB;IACpB,OAAO,EAAE,IAAI,CAAA;IACb,8BAA8B;IAC9B,KAAK,EAAE,UAAU,CAAA;CAClB;AAED,sBAAsB;AACtB,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG,WAAW,CAAA;AAErD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,CAQvD;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,UAAU,CAMvF;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,GAAG,UAAU,CAMxG"}
+{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../src/quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAA;AAGvD,0BAA0B;AAC1B,MAAM,WAAW,WAAW;IAC1B,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAA;IACtB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,kDAAkD;AAClD,MAAM,WAAW,UAAU;IACzB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAA;IACnB,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAA;CACd;AAED,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,oBAAoB;IACpB,OAAO,EAAE,KAAK,CAAA;IACd,mCAAmC;IACnC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAA;IAC/B,8BAA8B;IAC9B,KAAK,EAAE,UAAU,CAAA;CAClB;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,oBAAoB;IACpB,OAAO,EAAE,IAAI,CAAA;IACb,8BAA8B;IAC9B,KAAK,EAAE,UAAU,CAAA;CAClB;AAED,sBAAsB;AACtB,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG,WAAW,CAAA;AAErD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,CAYvD;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,UAAU,CAMvF;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,GAAG,UAAU,CAMxG"}

package/lib/types/quota.js

@@ -1,16 +1,22 @@
 /**
  * Per-session quota accounting. The durable source of truth is the session
- * log: every completed generation appends one `draw/generated` event, and
- * quota is computed by folding those events, so usage survives restart and
- * fork and cannot drift from what the log records.
+ * log: every completed generation commits one `draw/generated` event, and
+ * quota folds those events, so usage survives restart and fork and cannot
+ * drift from what the log records. On hosts that cannot carry the event
+ * safely (rc.6/rc.7 static whitelist without the ignorable envelope), commits
+ * land in the in-memory fallback ledger instead and quota folds both sources —
+ * live-session accounting stays exact; cross-restart durability resumes when
+ * the host gains a plugin event surface.
  *
  * @module dsh-draw/quota
  */
-import { drawGeneratedEvents } from './session-events.js';
+import { drawGeneratedEvents, fallbackDrawGeneratedEvents } from './session-events.js';
 /**
- * Fold one session's `draw/generated` events into current usage.
+ * Fold one session's `draw/generated` events into current usage: logged events
+ * first, then the in-memory fallback ledger (disjoint — a commit lands in
+ * exactly one of them).
  *
- * @param session - session whose log is folded.
+ * @param session - session whose log and ledger are folded.
  * @returns generation and byte totals.
  */
 export function quotaState(session) {
@@ -20,6 +26,10 @@ export function quotaState(session) {
         generations += 1;
         bytes += event.data.bytes;
     }
+    for (const event of fallbackDrawGeneratedEvents(session)) {
+        generations += 1;
+        bytes += event.bytes;
+    }
     return { generations, bytes };
 }
 /**

package/lib/types/router.d.ts

@@ -7,9 +7,9 @@
  *
  * @module dsh-draw/router
  */
-import type { ResolvedConfig, ResolvedEngineConfig } from './config.ts';
-import { type EngineDeps, type ProducedImage } from './engine.ts';
-import { type StandardImageRequest } from './translate.ts';
+import type { ResolvedConfig, ResolvedEngineConfig } from './config.js';
+import { type EngineDeps, type ProducedImage } from './engine.js';
+import { type StandardImageRequest } from './translate.js';
 /** One recorded attempt against one engine, success or failure. */
 export interface AttemptView {
     /** Engine id. */

package/lib/types/service.d.ts

@@ -11,10 +11,10 @@
 import type { Context } from '@deepseek-ai/cordis';
 import { type CredentialProvider } from '@deepseek-ai/dsh-credentials';
 import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
-import type { ResolvedConfig } from './config.ts';
-import type { Drawer } from './drawer.ts';
-import type { EngineRouter } from './router.ts';
-import { type CredentialActionResult, type DrawProbeResult, type DrawRegenerateResult, type DrawStatusSnapshot } from './wire.ts';
+import type { ResolvedConfig } from './config.js';
+import type { Drawer } from './drawer.js';
+import type { EngineRouter } from './router.js';
+import { type CredentialActionResult, type DrawProbeResult, type DrawRegenerateResult, type DrawStatusSnapshot } from './wire.js';
 declare module '@deepseek-ai/cordis' {
     interface Context {
         /** Image-generation host service (this package). */

package/lib/types/session-events.d.ts

@@ -6,9 +6,17 @@
  * output of the call ride the loop-owned `tool/call` and `tool/result`
  * events; this event carries the accounting facts those events do not.
  *
+ * The event type is declared only here, so plugin paths append it through
+ * {@link commitDrawGenerated}: the adaptive gate (event-gate.ts) appends only
+ * when the host knows the type or honors the `ignorable` envelope, and
+ * otherwise records the payload in the in-memory fallback ledger (live-session
+ * quota keeps working; the durable trail resumes once the host gains a plugin
+ * event surface).
+ *
  * @module dsh-draw/session-events
  */
 import type { Session } from '@deepseek-ai/dsh-session';
+import type { EventGate } from './event-gate.js';
 declare module '@deepseek-ai/dsh-session/types' {
     interface SessionEventMap {
         /**
@@ -42,7 +50,9 @@ export interface DrawGeneratedEvent {
     elapsedMs: number;
 }
 /**
- * Append one `draw/generated` event to a session.
+ * Append one `draw/generated` event to a session, ungated. Plugin paths use
+ * {@link commitDrawGenerated} instead; this raw form remains for tests and
+ * hosts that know the type.
  *
  * @param session - owning session.
  * @param event - accounting payload.
@@ -55,6 +65,27 @@ export declare function appendDrawGenerated(session: Session, event: DrawGenerat
     data: DrawGeneratedEvent;
     ignorable?: true;
 } & object;
+/**
+ * Commit one completed generation: append the `draw/generated` event when the
+ * gate allows (with the ignorable envelope when required), otherwise record
+ * the payload in the in-memory fallback ledger. A failed append degrades to
+ * the same ledger and never breaks the draw.
+ *
+ * @param session - owning session.
+ * @param event - accounting payload.
+ * @param gate - the adaptive gate (event-gate.ts).
+ * @param warn - log warning sink for append failures.
+ */
+export declare function commitDrawGenerated(session: Session, event: DrawGeneratedEvent, gate: EventGate, warn: (message: string) => void): void;
+/**
+ * The in-memory fallback records of a session, in commit order. Populated
+ * only while the host cannot carry `draw/generated` in the log; quota folds
+ * these on top of the logged events.
+ *
+ * @param session - session whose ledger is read.
+ * @returns the fallback payloads.
+ */
+export declare function fallbackDrawGeneratedEvents(session: Session): readonly DrawGeneratedEvent[];
 /**
  * Collect the `draw/generated` events of a session in log order. Declaration
  * merging narrows `event.type === 'draw/generated'` to the payload type.

package/lib/types/session-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-events.d.ts","sourceRoot":"","sources":["../../src/session-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAA;AAEvD,OAAO,QAAQ,gCAAgC,CAAC;IAC9C,UAAU,eAAe;QACvB;;;WAGG;QACH,gBAAgB,EAAE,kBAAkB,CAAA;KACrC;CACF;AAED,qDAAqD;AACrD,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,yEAAyE;IACzE,MAAM,EAAE,MAAM,GAAG,YAAY,CAAA;IAC7B,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAA;IACd,qDAAqD;IACrD,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAA;IAClD,6CAA6C;IAC7C,OAAO,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAA;IAC3C,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAA;IACb,8CAA8C;IAC9C,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB;;;;;;WAI9E;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,OAAO,0BAA0B,EAAE,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAElI"}
+{"version":3,"file":"session-events.d.ts","sourceRoot":"","sources":["../../src/session-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,OAAO,QAAQ,gCAAgC,CAAC;IAC9C,UAAU,eAAe;QACvB;;;WAGG;QACH,gBAAgB,EAAE,kBAAkB,CAAA;KACrC;CACF;AAED,qDAAqD;AACrD,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,yEAAyE;IACzE,MAAM,EAAE,MAAM,GAAG,YAAY,CAAA;IAC7B,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAA;IACd,qDAAqD;IACrD,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAA;IAClD,6CAA6C;IAC7C,OAAO,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAA;IAC3C,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAA;IACb,8CAA8C;IAC9C,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB;;;;;;WAE9E;AAYD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAiBvI;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,kBAAkB,EAAE,CAE3F;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,OAAO,0BAA0B,EAAE,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAElI"}

package/lib/types/session-events.js

@@ -6,20 +6,76 @@
  * output of the call ride the loop-owned `tool/call` and `tool/result`
  * events; this event carries the accounting facts those events do not.
  *
+ * The event type is declared only here, so plugin paths append it through
+ * {@link commitDrawGenerated}: the adaptive gate (event-gate.ts) appends only
+ * when the host knows the type or honors the `ignorable` envelope, and
+ * otherwise records the payload in the in-memory fallback ledger (live-session
+ * quota keeps working; the durable trail resumes once the host gains a plugin
+ * event surface).
+ *
  * @module dsh-draw/session-events
  */
 /**
- * Append one `draw/generated` event to a session.
+ * Append one `draw/generated` event to a session, ungated. Plugin paths use
+ * {@link commitDrawGenerated} instead; this raw form remains for tests and
+ * hosts that know the type.
  *
  * @param session - owning session.
  * @param event - accounting payload.
  * @returns the logged event.
  */
 export function appendDrawGenerated(session, event) {
-    // Two-argument append: the pinned 0.1.0-rc.6 peers have no append-envelope
-    // option; the two-argument form typechecks against rc.6 and newer builds.
     return session.append('draw/generated', event);
 }
+/**
+ * In-memory accounting ledger for hosts whose session log cannot carry
+ * `draw/generated` safely (rc.6/rc.7 static whitelist, no ignorable envelope).
+ * Keyed by Session identity: the entries live exactly as long as the session.
+ */
+const fallbackLedger = new WeakMap();
+/**
+ * Commit one completed generation: append the `draw/generated` event when the
+ * gate allows (with the ignorable envelope when required), otherwise record
+ * the payload in the in-memory fallback ledger. A failed append degrades to
+ * the same ledger and never breaks the draw.
+ *
+ * @param session - owning session.
+ * @param event - accounting payload.
+ * @param gate - the adaptive gate (event-gate.ts).
+ * @param warn - log warning sink for append failures.
+ */
+export function commitDrawGenerated(session, event, gate, warn) {
+    const decision = gate('draw/generated');
+    if (decision.append) {
+        try {
+            if (decision.ignorable) {
+                ;
+                session.append('draw/generated', event, { ignorable: true });
+            }
+            else {
+                session.append('draw/generated', event);
+            }
+            return;
+        }
+        catch (error) {
+            warn(`draw session event append failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    const list = fallbackLedger.get(session) ?? [];
+    list.push(event);
+    fallbackLedger.set(session, list);
+}
+/**
+ * The in-memory fallback records of a session, in commit order. Populated
+ * only while the host cannot carry `draw/generated` in the log; quota folds
+ * these on top of the logged events.
+ *
+ * @param session - session whose ledger is read.
+ * @returns the fallback payloads.
+ */
+export function fallbackDrawGeneratedEvents(session) {
+    return fallbackLedger.get(session) ?? [];
+}
 /**
  * Collect the `draw/generated` events of a session in log order. Declaration
  * merging narrows `event.type === 'draw/generated'` to the payload type.

package/lib/types/tool.d.ts

@@ -8,8 +8,8 @@
  *
  * @module dsh-draw/tool
  */
-import type { ResolvedConfig } from './config.ts';
-import type { Drawer } from './drawer.ts';
+import type { ResolvedConfig } from './config.js';
+import type { Drawer } from './drawer.js';
 /** Tool argument surface (validated by the schema; the drawer re-normalizes). */
 export interface ImageGenerateArgs {
     prompt: string;

package/lib/types/translate.d.ts

@@ -5,7 +5,7 @@
  *
  * @module dsh-draw/translate
  */
-import type { ResolvedEngineConfig, StandardSize } from './config.ts';
+import type { ResolvedEngineConfig, StandardSize } from './config.js';
 /** Standard quality vocabulary; `auto` means "leave the engine default". */
 export type StandardQuality = 'low' | 'medium' | 'high' | 'auto';
 /** Standard style vocabulary (engines that lack styles drop it). */

package/lib/types/version.d.ts

@@ -6,5 +6,5 @@
  * @module dsh-draw/version
  */
 /** Plugin version; must equal the `version` field in `package.json`. */
-export declare const PLUGIN_VERSION = "0.1.0";
+export declare const PLUGIN_VERSION = "0.1.2";
 //# sourceMappingURL=version.d.ts.map

package/lib/types/version.js

@@ -6,4 +6,4 @@
  * @module dsh-draw/version
  */
 /** Plugin version; must equal the `version` field in `package.json`. */
-export const PLUGIN_VERSION = '0.1.0';
+export const PLUGIN_VERSION = '0.1.2';

package/lib/types/wire.d.ts

@@ -9,9 +9,9 @@
  * @module dsh-draw/wire
  */
 import { z } from 'zod';
-import type { AttemptView, EngineStatus, ProbeOutcome } from './router.ts';
-import type { QuotaLimits, QuotaState } from './quota.ts';
-import type { DrawImage } from './drawer.ts';
+import type { AttemptView, EngineStatus, ProbeOutcome } from './router.js';
+import type { QuotaLimits, QuotaState } from './quota.js';
+import type { DrawImage } from './drawer.js';
 /** Credential facts for one engine, safe for configuration UIs — never the value. */
 export interface EngineCredentialView {
     /** Whether the reference currently resolves to a value. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-draw",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Unified static-image generation router for DeepSeek Harness: one image_generate tool with standard parameters, config-driven OpenAI-compatible engine routing (OpenAI Images, Zhipu CogView, and any compatible endpoint) with health-aware fallback, durable workspace attachment results, per-session quota accounting, an in-conversation result card, and a Plugins settings panel that stores API keys as credential references.",
   "repository": {
     "type": "git",
@@ -89,9 +89,7 @@
       "attachments:write"
     ],
     "compatibility": {
-      "dshVersions": [
-        "0.1.0-rc.6"
-      ]
+      "dshVersions": ["0.1.1-rc.2"]
     },
     "capability": {
       "id": "image-generate-tool",
@@ -124,14 +122,14 @@
   "packageManager": "pnpm@11.7.0",
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/schemastery": "^3.18.0",
-    "@deepseek-ai/dsh-attachment": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-brand": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-credentials": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-tools": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.0-rc.6"
+    "@deepseek-ai/dsh-attachment": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-brand": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-credentials": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-llm": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-session": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-tools": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/schemastery": "^3.18.0"
   },
   "dependencies": {
     "tsdown": "^0.22.14",
@@ -140,27 +138,31 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/cordis-plugin-include": "1.0.6",
+    "@deepseek-ai/cordis-plugin-loader": "1.0.2",
+    "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-api-remotes": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-attachment-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-brand": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-tool": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.1-rc.2",
     "@deepseek-ai/schemastery": "^3.18.0",
-    "@deepseek-ai/dsh-agent": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-api-remotes": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-attachment": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-attachment-local": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-brand": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-connection": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-locale": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-runtime": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-tool": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-credentials": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-credentials-local": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-tools": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.0-rc.6",
     "@types/node": "^22.19.0",
     "@types/react": "18.3.31",
+    "@vitest/coverage-v8": "4.1.10",
     "jsdom": "^30.0.1",
+    "oxlint": "0.18.1",
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "vitest": "^4.1.10"
@@ -171,6 +173,9 @@
     "typecheck:ci": "tsc -p tsconfig.ci.json --noEmit",
     "test": "vitest run",
     "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "lint": "oxlint",
+    "check:readmes": "node scripts/check-readme-sync.mjs",
     "prepare": "node scripts/prepare.mjs",
     "verify:self-contained": "node scripts/verify-self-contained.mjs",
     "verify:artifacts": "node scripts/verify-artifacts.mjs"