dsh-interconnect 0.11.15 → 0.11.17

package/assets/dsh-interconnect.md

@@ -80,6 +80,8 @@ When a send/reply reports `delivered: false`, read `reason`:
   choose a live target instead.
 - `session-owned-by-subagent` — the session belongs to a subagent and its
   parent owns delivery; reach it through the parent.
+- `message-too-large` — the message is larger than the peer link can carry
+  (1 MiB once encoded); shorten the text instead of retrying it unchanged.
 - `no-sender-known` — a `reply` was attempted for a local session that never
   received a sender-carrying interconnect message, or whose recorded sender was
   forgotten by a receiver restart; establish contact with `interconnect_send`

package/dsh.plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-interconnect",
   "description": "Cross-instance message/event handoff for DeepSeek Harness (DSH): WebSocket link, model-facing tools, and companion skill.",
-  "version": "0.11.15",
+  "version": "0.11.17",
   "entry": {
     "name": "dsh-interconnect/interconnect",
     "inject": ["agents", "credentials"]

package/lib/index.js

@@ -835,8 +835,10 @@ var PLUGIN_SOURCE = "dsh-interconnect";
 var MAX_LINK_FRAME_BYTES = 1024 * 1024;
 var LINK_HANDSHAKE_TIMEOUT_MS = 1e4;
 var LINK_CHANNEL = "/interconnect/link";
+var MAX_INSTANCE_ID_CHARS = 256;
 var MAX_REQUEST_ID_CHARS = 256;
 var MAX_LISTED_SESSIONS = 100;
+var frameFitsLink = (frame) => Buffer.byteLength(JSON.stringify(frame), "utf8") <= MAX_LINK_FRAME_BYTES;
 var rowBytes = (row) => Buffer.byteLength(JSON.stringify(row), "utf8") + 1;
 var notificationSchema = Schema.union([
   Schema.object({ kind: Schema.const("agent/created").required(), sessionId: Schema.string().required() }),
@@ -927,7 +929,7 @@ var linkFrameSchema = Schema.union([
 var InterconnectService = class extends Service {
   static inject = ["agents", "credentials"];
   static Config = Schema.object({
-    instanceId: Schema.string().default("dsh"),
+    instanceId: Schema.string().max(MAX_INSTANCE_ID_CHARS).default("dsh"),
     requestTimeoutMs: Schema.natural().max(6e4).default(1e4),
     peers: Schema.dict(Schema.string()).default({}),
     delivery: Schema.union([Schema.const("followup"), Schema.const("steer"), Schema.const("inject")]).default("followup"),
@@ -937,7 +939,6 @@ var InterconnectService = class extends Service {
   requestTimeoutMs;
   delivery;
   allowResume;
-  subscriptions = [];
   server = new WebSocketServer({ noServer: true, maxPayload: MAX_LINK_FRAME_BYTES });
   sockets = /* @__PURE__ */ new Set();
   /** Outbound peer links keyed by the peer's `instanceId`. */
@@ -994,28 +995,28 @@ var InterconnectService = class extends Service {
         socket.ping();
       }
     }, 3e4);
-    this.subscriptions.push(ctx.on("agent/status", ({ agent, status }) => {
+    ctx.on("agent/status", ({ agent, status }) => {
       this.fanout({ kind: "agent/status", sessionId: String(agent.session.id), status });
-    }));
-    this.subscriptions.push(ctx.on("agent/created", ({ agent }) => {
+    });
+    ctx.on("agent/created", ({ agent }) => {
       this.fanout({ kind: "agent/created", sessionId: String(agent.session.id) });
-    }));
-    this.subscriptions.push(ctx.on("agent/disposed", ({ agent }) => {
+    });
+    ctx.on("agent/disposed", ({ agent }) => {
       this.fanout({ kind: "agent/disposed", sessionId: String(agent.session.id) });
-    }));
-    this.subscriptions.push(ctx.on("session/created", (session) => {
+    });
+    ctx.on("session/created", (session) => {
       const parentSessionId = session.header.parentSession === void 0 ? void 0 : String(session.header.parentSession);
       this.fanout({
         kind: "session/created",
         sessionId: String(session.id),
         ...parentSessionId === void 0 ? {} : { parentSessionId }
       });
-    }));
-    this.subscriptions.push(ctx.on("session/disposed", (session) => {
+    });
+    ctx.on("session/disposed", (session) => {
       this.senders.delete(String(session.id));
       this.fanout({ kind: "session/disposed", sessionId: String(session.id) });
-    }));
-    this.subscriptions.push(ctx.on("subagent/end", (info) => {
+    });
+    ctx.on("subagent/end", (info) => {
       if (!info.local) return;
       this.fanout({
         kind: "subagent/end",
@@ -1023,10 +1024,7 @@ var InterconnectService = class extends Service {
         childSessionId: String(info.id),
         stopReason: info.stopReason
       });
-    }));
-    ctx.effect(() => () => {
-      for (const dispose of this.subscriptions.splice(0)) dispose();
-    }, "interconnect: event subscriptions");
+    });
     ctx.effect(() => () => {
       if (this.heartbeatTimer !== void 0) clearInterval(this.heartbeatTimer);
       for (const state of this.linkStates.values()) state.close();
@@ -1123,22 +1121,30 @@ var InterconnectService = class extends Service {
    * Send a `msg` frame over the live link to a peer and resolve with its
    * correlated `msg-result`. Undefined when the peer has no live link here
    * (not configured, or the link is down) — sends can only address configured+
-   * connected peers by design.
+   * connected peers by design — and a `message-too-large` result when the
+   * encoded frame would not fit the link.
    */
   async msgRequest(instanceId, kind, payload) {
     const state = this.linkStates.get(instanceId);
     if (state === void 0 || !state.writable()) return void 0;
     const reqId = `m${++this.reqIdCounter}-${randomUUID()}`;
-    const message = {
-      kind,
-      sessionId: payload.sessionId,
-      text: payload.text,
-      ...payload.sender === void 0 ? {} : { sender: payload.sender },
-      ...payload.delivery === void 0 ? {} : { delivery: payload.delivery },
-      ...payload.resume === void 0 ? {} : { resume: payload.resume }
+    const frame = {
+      type: "msg",
+      reqId,
+      message: {
+        kind,
+        sessionId: payload.sessionId,
+        text: payload.text,
+        ...payload.sender === void 0 ? {} : { sender: payload.sender },
+        ...payload.delivery === void 0 ? {} : { delivery: payload.delivery },
+        ...payload.resume === void 0 ? {} : { resume: payload.resume }
+      }
     };
+    if (!frameFitsLink(frame)) {
+      return { delivered: false, instance: instanceId, reason: "message-too-large" };
+    }
     return this.waitForResult(reqId, "msg", (failure) => {
-      const wrote = state.sendFrame({ type: "msg", reqId, message });
+      const wrote = state.sendFrame(frame);
       if (!wrote) failure(new Error(`interconnect: peer link to ${instanceId} closed while sending`));
     });
   }
@@ -1208,10 +1214,12 @@ var InterconnectService = class extends Service {
    * dialed link plus the peer's inbound one), so one event must leave over one
    * of them. Which one is decided by local ownership, not by the peer: a dialed
    * socket is a configured peer's link and always sends. An inbound socket is
-   * skipped only when a dialed link to the id that socket itself announced is
-   * open, so an announcement can suppress nothing but a duplicate the
-   * controlled link already carries — an impostor cannot drop an event for a
-   * peer, and without a dialed link every inbound socket receives it.
+   * skipped only when an open dialed link covers the id that socket itself
+   * announced — either because `Config.peers` lists that peer under the id, or
+   * because the peer announced the id over that dialed link — so an
+   * announcement can suppress nothing but a duplicate the controlled link
+   * already carries. An impostor cannot drop an event for a peer, and without a
+   * dialed link every inbound socket receives it.
    *
    * That holds once a peer's announcement has been seen. Between this
    * instance's dialed link opening and the peer's `hello` arriving on its
@@ -1230,7 +1238,10 @@ var InterconnectService = class extends Service {
         continue;
       }
       const dialedPeer = this.dialedPeerOf.get(socket);
-      if (dialedPeer !== void 0) covered.add(dialedPeer);
+      if (dialedPeer === void 0) continue;
+      covered.add(dialedPeer);
+      const announced = this.peerOf.get(socket);
+      if (announced !== void 0) covered.add(announced);
     }
     for (const socket of this.sockets) {
       if (this.dialedPeerOf.get(socket) === void 0) {
@@ -1262,12 +1273,7 @@ var InterconnectService = class extends Service {
     if (query.kind === "ping") {
       result = { pong: true, instance: this.instanceId };
     } else if (query.kind === "list") {
-      const rowBudget = this.listRowsBudgetBytes(reqId);
-      if (rowBudget < 0) {
-        this.ctx.logger.warn("interconnect: list answer cannot fit the link frame cap; not answering");
-        return;
-      }
-      result = this.listSessions(rowBudget);
+      result = this.listSessions(this.listRowsBudgetBytes(reqId));
     } else {
       const payload = {
         sender: this.peerOf.get(socket) ?? "unknown-peer",
@@ -1299,10 +1305,11 @@ var InterconnectService = class extends Service {
    * Bytes one `list` answer may spend on its `sessions` rows: the frame cap
    * minus the serialized envelope that answer will carry. The envelope holds
    * the peer-supplied `reqId` and this instance's own id, so it is measured per
-   * answer instead of reserved with a fixed constant.
+   * answer instead of reserved with a fixed constant. Both ids are bounded
+   * ({@link MAX_REQUEST_ID_CHARS} and {@link MAX_INSTANCE_ID_CHARS} characters),
+   * so the envelope always fits and the budget is always positive.
    * @param reqId - the request id the answer has to echo.
-   * @returns the byte budget for the rows, negative when even an empty answer
-   * exceeds the cap and so cannot be sent at all.
+   * @returns the byte budget for the rows.
    */
   listRowsBudgetBytes(reqId) {
     const envelope = {

package/lib/interconnect/index.js

@@ -835,8 +835,10 @@ var PLUGIN_SOURCE = "dsh-interconnect";
 var MAX_LINK_FRAME_BYTES = 1024 * 1024;
 var LINK_HANDSHAKE_TIMEOUT_MS = 1e4;
 var LINK_CHANNEL = "/interconnect/link";
+var MAX_INSTANCE_ID_CHARS = 256;
 var MAX_REQUEST_ID_CHARS = 256;
 var MAX_LISTED_SESSIONS = 100;
+var frameFitsLink = (frame) => Buffer.byteLength(JSON.stringify(frame), "utf8") <= MAX_LINK_FRAME_BYTES;
 var rowBytes = (row) => Buffer.byteLength(JSON.stringify(row), "utf8") + 1;
 var notificationSchema = Schema.union([
   Schema.object({ kind: Schema.const("agent/created").required(), sessionId: Schema.string().required() }),
@@ -927,7 +929,7 @@ var linkFrameSchema = Schema.union([
 var InterconnectService = class extends Service {
   static inject = ["agents", "credentials"];
   static Config = Schema.object({
-    instanceId: Schema.string().default("dsh"),
+    instanceId: Schema.string().max(MAX_INSTANCE_ID_CHARS).default("dsh"),
     requestTimeoutMs: Schema.natural().max(6e4).default(1e4),
     peers: Schema.dict(Schema.string()).default({}),
     delivery: Schema.union([Schema.const("followup"), Schema.const("steer"), Schema.const("inject")]).default("followup"),
@@ -937,7 +939,6 @@ var InterconnectService = class extends Service {
   requestTimeoutMs;
   delivery;
   allowResume;
-  subscriptions = [];
   server = new WebSocketServer({ noServer: true, maxPayload: MAX_LINK_FRAME_BYTES });
   sockets = /* @__PURE__ */ new Set();
   /** Outbound peer links keyed by the peer's `instanceId`. */
@@ -994,28 +995,28 @@ var InterconnectService = class extends Service {
         socket.ping();
       }
     }, 3e4);
-    this.subscriptions.push(ctx.on("agent/status", ({ agent, status }) => {
+    ctx.on("agent/status", ({ agent, status }) => {
       this.fanout({ kind: "agent/status", sessionId: String(agent.session.id), status });
-    }));
-    this.subscriptions.push(ctx.on("agent/created", ({ agent }) => {
+    });
+    ctx.on("agent/created", ({ agent }) => {
       this.fanout({ kind: "agent/created", sessionId: String(agent.session.id) });
-    }));
-    this.subscriptions.push(ctx.on("agent/disposed", ({ agent }) => {
+    });
+    ctx.on("agent/disposed", ({ agent }) => {
       this.fanout({ kind: "agent/disposed", sessionId: String(agent.session.id) });
-    }));
-    this.subscriptions.push(ctx.on("session/created", (session) => {
+    });
+    ctx.on("session/created", (session) => {
       const parentSessionId = session.header.parentSession === void 0 ? void 0 : String(session.header.parentSession);
       this.fanout({
         kind: "session/created",
         sessionId: String(session.id),
         ...parentSessionId === void 0 ? {} : { parentSessionId }
       });
-    }));
-    this.subscriptions.push(ctx.on("session/disposed", (session) => {
+    });
+    ctx.on("session/disposed", (session) => {
       this.senders.delete(String(session.id));
       this.fanout({ kind: "session/disposed", sessionId: String(session.id) });
-    }));
-    this.subscriptions.push(ctx.on("subagent/end", (info) => {
+    });
+    ctx.on("subagent/end", (info) => {
       if (!info.local) return;
       this.fanout({
         kind: "subagent/end",
@@ -1023,10 +1024,7 @@ var InterconnectService = class extends Service {
         childSessionId: String(info.id),
         stopReason: info.stopReason
       });
-    }));
-    ctx.effect(() => () => {
-      for (const dispose of this.subscriptions.splice(0)) dispose();
-    }, "interconnect: event subscriptions");
+    });
     ctx.effect(() => () => {
       if (this.heartbeatTimer !== void 0) clearInterval(this.heartbeatTimer);
       for (const state of this.linkStates.values()) state.close();
@@ -1123,22 +1121,30 @@ var InterconnectService = class extends Service {
    * Send a `msg` frame over the live link to a peer and resolve with its
    * correlated `msg-result`. Undefined when the peer has no live link here
    * (not configured, or the link is down) — sends can only address configured+
-   * connected peers by design.
+   * connected peers by design — and a `message-too-large` result when the
+   * encoded frame would not fit the link.
    */
   async msgRequest(instanceId, kind, payload) {
     const state = this.linkStates.get(instanceId);
     if (state === void 0 || !state.writable()) return void 0;
     const reqId = `m${++this.reqIdCounter}-${randomUUID()}`;
-    const message = {
-      kind,
-      sessionId: payload.sessionId,
-      text: payload.text,
-      ...payload.sender === void 0 ? {} : { sender: payload.sender },
-      ...payload.delivery === void 0 ? {} : { delivery: payload.delivery },
-      ...payload.resume === void 0 ? {} : { resume: payload.resume }
+    const frame = {
+      type: "msg",
+      reqId,
+      message: {
+        kind,
+        sessionId: payload.sessionId,
+        text: payload.text,
+        ...payload.sender === void 0 ? {} : { sender: payload.sender },
+        ...payload.delivery === void 0 ? {} : { delivery: payload.delivery },
+        ...payload.resume === void 0 ? {} : { resume: payload.resume }
+      }
     };
+    if (!frameFitsLink(frame)) {
+      return { delivered: false, instance: instanceId, reason: "message-too-large" };
+    }
     return this.waitForResult(reqId, "msg", (failure) => {
-      const wrote = state.sendFrame({ type: "msg", reqId, message });
+      const wrote = state.sendFrame(frame);
       if (!wrote) failure(new Error(`interconnect: peer link to ${instanceId} closed while sending`));
     });
   }
@@ -1208,10 +1214,12 @@ var InterconnectService = class extends Service {
    * dialed link plus the peer's inbound one), so one event must leave over one
    * of them. Which one is decided by local ownership, not by the peer: a dialed
    * socket is a configured peer's link and always sends. An inbound socket is
-   * skipped only when a dialed link to the id that socket itself announced is
-   * open, so an announcement can suppress nothing but a duplicate the
-   * controlled link already carries — an impostor cannot drop an event for a
-   * peer, and without a dialed link every inbound socket receives it.
+   * skipped only when an open dialed link covers the id that socket itself
+   * announced — either because `Config.peers` lists that peer under the id, or
+   * because the peer announced the id over that dialed link — so an
+   * announcement can suppress nothing but a duplicate the controlled link
+   * already carries. An impostor cannot drop an event for a peer, and without a
+   * dialed link every inbound socket receives it.
    *
    * That holds once a peer's announcement has been seen. Between this
    * instance's dialed link opening and the peer's `hello` arriving on its
@@ -1230,7 +1238,10 @@ var InterconnectService = class extends Service {
         continue;
       }
       const dialedPeer = this.dialedPeerOf.get(socket);
-      if (dialedPeer !== void 0) covered.add(dialedPeer);
+      if (dialedPeer === void 0) continue;
+      covered.add(dialedPeer);
+      const announced = this.peerOf.get(socket);
+      if (announced !== void 0) covered.add(announced);
     }
     for (const socket of this.sockets) {
       if (this.dialedPeerOf.get(socket) === void 0) {
@@ -1262,12 +1273,7 @@ var InterconnectService = class extends Service {
     if (query.kind === "ping") {
       result = { pong: true, instance: this.instanceId };
     } else if (query.kind === "list") {
-      const rowBudget = this.listRowsBudgetBytes(reqId);
-      if (rowBudget < 0) {
-        this.ctx.logger.warn("interconnect: list answer cannot fit the link frame cap; not answering");
-        return;
-      }
-      result = this.listSessions(rowBudget);
+      result = this.listSessions(this.listRowsBudgetBytes(reqId));
     } else {
       const payload = {
         sender: this.peerOf.get(socket) ?? "unknown-peer",
@@ -1299,10 +1305,11 @@ var InterconnectService = class extends Service {
    * Bytes one `list` answer may spend on its `sessions` rows: the frame cap
    * minus the serialized envelope that answer will carry. The envelope holds
    * the peer-supplied `reqId` and this instance's own id, so it is measured per
-   * answer instead of reserved with a fixed constant.
+   * answer instead of reserved with a fixed constant. Both ids are bounded
+   * ({@link MAX_REQUEST_ID_CHARS} and {@link MAX_INSTANCE_ID_CHARS} characters),
+   * so the envelope always fits and the budget is always positive.
    * @param reqId - the request id the answer has to echo.
-   * @returns the byte budget for the rows, negative when even an empty answer
-   * exceeds the cap and so cannot be sent at all.
+   * @returns the byte budget for the rows.
    */
   listRowsBudgetBytes(reqId) {
     const envelope = {