dsh-interconnect 0.6.4 → 0.9.0

package/lib/tool-interconnect/index.js

@@ -7,10 +7,10 @@ function apply(ctx) {
     name: "interconnect_send",
     description: 'Deliver one text message to a live session on another DSH instance (same machine, another machine, or another session), over a shared-secret-authenticated channel. Returns whether the peer instance received it and which instance answered. Only a session with a running agent can receive a message; when none is running the result reports reason "session-not-live", and interconnect_list shows which sessions are live there.',
     parameters: {
-      baseUrl: {
+      instanceId: {
         type: "string",
         required: true,
-        description: "Receiver instance origin, e.g. http://127.0.0.1:3080 or http://peer-host:9001."
+        description: "The peer instance id to deliver to, as configured under this instance's interconnect peers map. Deliveries go over the persistent link to that instance."
       },
       sessionId: {
         type: "string",
@@ -67,11 +67,16 @@ function apply(ctx) {
         return [{ type: "text", text }];
       }
     },
-    async execute(args) {
+    async execute(args, exec) {
+      const sessionId = exec.agent?.session.id;
+      const self = interconnect.selfSender(sessionId === void 0 ? "" : String(sessionId));
       const result = await interconnect.send({
-        baseUrl: args.baseUrl,
+        instanceId: args.instanceId,
         sessionId: args.sessionId,
         text: args.text,
+        // Attribute this instance as the sender so the peer can reply back. The
+        // calling session id comes from the executing agent (the session sending).
+        sender: self,
         ...args.delivery === void 0 ? {} : { delivery: args.delivery },
         ...args.resume === void 0 ? {} : { resume: args.resume }
       });
@@ -87,10 +92,10 @@ function apply(ctx) {
     name: "interconnect_ping",
     description: "Probe a peer DSH instance for liveness and identity over the shared-secret channel. Returns the peer instance id when reachable, or null on transport/auth failure.",
     parameters: {
-      baseUrl: {
+      instanceId: {
         type: "string",
         required: true,
-        description: "Peer instance origin, e.g. http://127.0.0.1:3080."
+        description: "The peer instance id to probe, as configured under this instance's interconnect peers map."
       }
     },
     output: {
@@ -108,7 +113,7 @@ function apply(ctx) {
       }]
     },
     async execute(args) {
-      const result = await interconnect.ping(args.baseUrl);
+      const result = await interconnect.ping(args.instanceId);
       if (result === void 0) return { reachable: false };
       return { reachable: true, instance: result.instance };
     }
@@ -117,10 +122,10 @@ function apply(ctx) {
     name: "interconnect_list",
     description: "List the live sessions on a peer DSH instance, so a message can be addressed without knowing a session id in advance. Every returned sessionId is a valid interconnect_send target at the time of the call. Only live sessions appear: a session that exists on the peer but has no running agent is not listed and cannot receive a message.",
     parameters: {
-      baseUrl: {
+      instanceId: {
         type: "string",
         required: true,
-        description: "Peer instance origin, e.g. http://127.0.0.1:3080."
+        description: "The peer instance id to list, as configured under this instance's interconnect peers map."
       }
     },
     output: {
@@ -159,7 +164,7 @@ function apply(ctx) {
       }
     },
     async execute(args) {
-      const result = await interconnect.list(args.baseUrl);
+      const result = await interconnect.list(args.instanceId);
       if (result === void 0) return { reachable: false };
       return {
         reachable: true,
@@ -174,6 +179,84 @@ function apply(ctx) {
       };
     }
   }));
+  ctx.tools.register(defineTool({
+    name: "interconnect_reply",
+    description: 'Deliver one text message back to the peer that this session last received an interconnect message from. Only the LOCAL session id and the reply text are needed: the outbound target (the peer origin and its session id) is recalled from the message this session received, so you do not ask for an address twice. A session that never received a message through interconnect \u2014 or received one without a sender identity \u2014 reports reason "no-sender-known".',
+    parameters: {
+      sessionId: {
+        type: "string",
+        required: true,
+        description: "The LOCAL session id that received the message being replied to."
+      },
+      text: {
+        type: "string",
+        required: true,
+        description: "Message text delivered back to the recorded sender session."
+      },
+      delivery: {
+        type: "string",
+        enum: ["followup", "steer", "inject"],
+        description: "How the reply reaches the target agent, as in interconnect_send. Omit to use the receiver's configured default."
+      },
+      resume: {
+        type: "boolean",
+        description: "Wake the target session if it is persisted but has no running agent, as in interconnect_send. Off by default; the receiver may refuse."
+      }
+    },
+    output: {
+      schema: {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+          delivered: { type: "boolean", required: true },
+          instance: { type: "string", required: true },
+          delivery: { type: "string" },
+          reason: { type: "string" }
+        }
+      },
+      render: (_args, value) => {
+        if (value.delivered) {
+          return [{
+            type: "text",
+            text: `replied to ${value.instance}${value.delivery === void 0 ? "" : ` via ${value.delivery}`}`
+          }];
+        }
+        const text = (() => {
+          if (value.reason === "no-sender-known") {
+            return `not delivered: no sender recorded for "${_args.sessionId}" \u2014 this session never received an interconnect message with a sender identity`;
+          }
+          if (value.reason === "session-owned-by-subagent") {
+            return `not delivered: "${_args.sessionId}" is a subagent's session \u2014 its parent agent owns delivery`;
+          }
+          if (value.reason === "unreachable") {
+            return `not delivered: the recorded sender did not answer (unreachable or unauthorized)`;
+          }
+          if (value.reason === "resume-refused") {
+            return `not delivered: the recorded sender does not allow waking persisted sessions`;
+          }
+          if (value.reason === "resume-failed") {
+            return `not delivered: could not wake the recorded sender's session`;
+          }
+          return `not delivered: the recorded sender's session is not live`;
+        })();
+        return [{ type: "text", text }];
+      }
+    },
+    async execute(args) {
+      const result = await interconnect.reply({
+        sessionId: args.sessionId,
+        text: args.text,
+        ...args.delivery === void 0 ? {} : { delivery: args.delivery },
+        ...args.resume === void 0 ? {} : { resume: args.resume }
+      });
+      return {
+        delivered: result.delivered,
+        instance: result.instance,
+        ...result.delivery === void 0 ? {} : { delivery: result.delivery },
+        ...result.reason === void 0 ? {} : { reason: result.reason }
+      };
+    }
+  }));
 }
 export {
   apply,

package/lib/tool-interconnect/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/tool-interconnect/index.ts"],
-  "sourcesContent": ["/**\n * Model-facing tools for cross-instance message handoff: `interconnect_send`\n * delivers one text message to a live session on a peer DSH instance, and\n * `interconnect_ping` probes a peer's liveness and identity.\n *\n * The tools consume the host-plane `interconnect` service and publish nothing\n * themselves, so this row sits as an ordinary tool plugin in a preset while\n * the service it reaches stays host-side (the same split `tool-goal` uses\n * against `goals`).\n * @module @deepseek-ai/dsh-tool-interconnect\n */\n\nimport { Context } from '@deepseek-ai/cordis'\nimport { defineTool } from '@deepseek-ai/dsh-tools'\n// Activates the `Context.interconnect` merge declared by the interconnect service plugin.\nimport type {} from '../interconnect/index.ts'\n\n/** Services required before the tools can register. */\nexport const inject = ['interconnect', 'tools']\n\n/**\n * Register the two tool surfaces. Registration is idempotent per fiber; the\n * tools unregister with the owning fiber.\n * @param ctx - connection context carrying the interconnect service and the tool registry.\n */\nexport function apply(ctx: Context): void {\n  const interconnect = ctx.interconnect\n\n  ctx.tools.register(defineTool({\n    name: 'interconnect_send',\n    description: 'Deliver one text message to a live session on another DSH instance (same machine, '\n      + 'another machine, or another session), over a shared-secret-authenticated channel. '\n      + 'Returns whether the peer instance received it and which instance answered. '\n      + 'Only a session with a running agent can receive a message; when none is running the result '\n      + 'reports reason \"session-not-live\", and interconnect_list shows which sessions are live there.',\n    parameters: {\n      baseUrl: {\n        type: 'string',\n        required: true,\n        description: 'Receiver instance origin, e.g. http://127.0.0.1:3080 or http://peer-host:9001.',\n      },\n      sessionId: {\n        type: 'string',\n        required: true,\n        description: 'Target session id on the receiving instance to deliver the message to.',\n      },\n      text: {\n        type: 'string',\n        required: true,\n        description: 'Message text delivered to the peer session.',\n      },\n      delivery: {\n        type: 'string',\n        enum: ['followup', 'steer', 'inject'],\n        description: 'How the message reaches the target agent. `followup` queues it as its own turn '\n          + 'behind whatever that agent is doing now. `steer` cuts into the nearest step boundary of a '\n          + 'running turn, so an urgent message does not wait for that turn to end. `inject` seeds '\n          + 'context without waking an idle agent, so it may sit unread. Omit to use the receiver\\'s '\n          + 'configured default.',\n      },\n      resume: {\n        type: 'boolean',\n        description: 'Wake the target session if it is persisted but has no running agent. Off by '\n          + 'default because delivery to a woken session starts a real agent turn \u2014 a billed model call '\n          + 'with that session\\'s full toolset \u2014 in a conversation nobody is watching. Prefer '\n          + 'interconnect_list and an already-live target; set this only when that specific session must '\n          + 'be reached. The receiver may refuse, answering reason \"resume-refused\".',\n      },\n    },\n    output: {\n      schema: {\n        type: 'object',\n        additionalProperties: false,\n        properties: {\n          delivered: { type: 'boolean', required: true },\n          instance: { type: 'string', required: true },\n          delivery: { type: 'string' },\n          reason: { type: 'string' },\n        },\n      },\n      render: (_args, value) => {\n        if (value.delivered) {\n          return [{\n            type: 'text',\n            text: `delivered to ${value.instance}${value.delivery === undefined ? '' : ` via ${value.delivery}`}`,\n          }]\n        }\n        // Each failure gets the response it actually needs: a not-live target is\n        // the caller's to re-choose, while an unreachable peer may just be worth\n        // retrying. The old single line claimed \"no live session\" even when the\n        // peer never answered, which pointed at the wrong thing entirely.\n        const text = ((): string => {\n          switch (value.reason) {\n            case 'unreachable':\n              return `not delivered: ${value.instance} did not answer (unreachable or unauthorized)`\n            case 'resume-refused':\n              return `not delivered: ${value.instance} does not allow waking persisted sessions`\n            case 'resume-failed':\n              return `not delivered: could not wake \"${_args.sessionId}\" on ${value.instance}`\n                + ' (no such persisted session, or another owner holds it)'\n            case 'session-owned-by-subagent':\n              return `not delivered: \"${_args.sessionId}\" is a subagent's session on ${value.instance}`\n                + ' \u2014 its parent agent owns delivery, so reach it through that parent'\n            default:\n              return `not delivered: no live session \"${_args.sessionId}\" on ${value.instance}`\n                + ' \u2014 use interconnect_list to see which sessions are live there,'\n                + ' or set resume to wake this one'\n          }\n        })()\n        return [{ type: 'text', text }]\n      },\n    },\n    async execute(args) {\n      const result = await interconnect.send({\n        baseUrl: args.baseUrl,\n        sessionId: args.sessionId,\n        text: args.text,\n        ...(args.delivery === undefined ? {} : { delivery: args.delivery }),\n        ...(args.resume === undefined ? {} : { resume: args.resume }),\n      })\n      return {\n        delivered: result.delivered,\n        instance: result.instance,\n        ...(result.delivery === undefined ? {} : { delivery: result.delivery }),\n        ...(result.reason === undefined ? {} : { reason: result.reason }),\n      }\n    },\n  }))\n\n  ctx.tools.register(defineTool({\n    name: 'interconnect_ping',\n    description: 'Probe a peer DSH instance for liveness and identity over the shared-secret channel. '\n      + 'Returns the peer instance id when reachable, or null on transport/auth failure.',\n    parameters: {\n      baseUrl: {\n        type: 'string',\n        required: true,\n        description: 'Peer instance origin, e.g. http://127.0.0.1:3080.',\n      },\n    },\n    output: {\n      schema: {\n        type: 'object',\n        additionalProperties: false,\n        properties: {\n          reachable: { type: 'boolean', required: true },\n          instance: { type: 'string' },\n        },\n      },\n      render: (_args, value) => [{\n        type: 'text',\n        text: value.reachable\n          ? `reachable: ${value.instance ?? '(unknown instance)'}`\n          : 'unreachable or unauthorized',\n      }],\n    },\n    async execute(args) {\n      const result = await interconnect.ping(args.baseUrl)\n      if (result === undefined) return { reachable: false }\n      return { reachable: true, instance: result.instance }\n    },\n  }))\n\n  ctx.tools.register(defineTool({\n    name: 'interconnect_list',\n    description: 'List the live sessions on a peer DSH instance, so a message can be addressed without '\n      + 'knowing a session id in advance. Every returned sessionId is a valid interconnect_send target at '\n      + 'the time of the call. Only live sessions appear: a session that exists on the peer but has no '\n      + 'running agent is not listed and cannot receive a message.',\n    parameters: {\n      baseUrl: {\n        type: 'string',\n        required: true,\n        description: 'Peer instance origin, e.g. http://127.0.0.1:3080.',\n      },\n    },\n    output: {\n      schema: {\n        type: 'object',\n        additionalProperties: false,\n        properties: {\n          reachable: { type: 'boolean', required: true },\n          instance: { type: 'string' },\n          sessions: {\n            type: 'array',\n            items: {\n              type: 'object',\n              additionalProperties: false,\n              properties: {\n                sessionId: { type: 'string', required: true },\n                title: { type: 'string' },\n                status: { type: 'string' },\n              },\n            },\n          },\n        },\n      },\n      render: (_args, value) => {\n        if (!value.reachable) return [{ type: 'text', text: 'unreachable or unauthorized' }]\n        const sessions = value.sessions ?? []\n        if (sessions.length === 0) {\n          return [{ type: 'text', text: `no live sessions on ${value.instance ?? '(unknown instance)'}` }]\n        }\n        const lines = sessions.map((session) => {\n          const title = session.title === undefined ? '' : ` ${session.title}`\n          const status = session.status === undefined ? '' : ` [${session.status}]`\n          return `${session.sessionId}${title}${status}`\n        })\n        return [{ type: 'text', text: lines.join('\\n') }]\n      },\n    },\n    async execute(args) {\n      const result = await interconnect.list(args.baseUrl)\n      if (result === undefined) return { reachable: false }\n      return {\n        reachable: true,\n        instance: result.instance,\n        // Rebuild each row so an optional key stays absent rather than\n        // becoming an explicit undefined the wire schema would reject.\n        sessions: result.sessions.map(session => ({\n          sessionId: session.sessionId,\n          ...(session.title === undefined ? {} : { title: session.title }),\n          ...(session.status === undefined ? {} : { status: session.status }),\n        })),\n      }\n    },\n  }))\n}\n"],
-  "mappings": ";AAaA,SAAS,kBAAkB;AAKpB,IAAM,SAAS,CAAC,gBAAgB,OAAO;AAOvC,SAAS,MAAM,KAAoB;AACxC,QAAM,eAAe,IAAI;AAEzB,MAAI,MAAM,SAAS,WAAW;AAAA,IAC5B,MAAM;AAAA,IACN,aAAa;AAAA,IAKb,YAAY;AAAA,MACV,SAAS;AAAA,QACP,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MACf;AAAA,MACA,MAAM;AAAA,QACJ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MACf;AAAA,MACA,UAAU;AAAA,QACR,MAAM;AAAA,QACN,MAAM,CAAC,YAAY,SAAS,QAAQ;AAAA,QACpC,aAAa;AAAA,MAKf;AAAA,MACA,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,aAAa;AAAA,MAKf;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,sBAAsB;AAAA,QACtB,YAAY;AAAA,UACV,WAAW,EAAE,MAAM,WAAW,UAAU,KAAK;AAAA,UAC7C,UAAU,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,UAC3C,UAAU,EAAE,MAAM,SAAS;AAAA,UAC3B,QAAQ,EAAE,MAAM,SAAS;AAAA,QAC3B;AAAA,MACF;AAAA,MACA,QAAQ,CAAC,OAAO,UAAU;AACxB,YAAI,MAAM,WAAW;AACnB,iBAAO,CAAC;AAAA,YACN,MAAM;AAAA,YACN,MAAM,gBAAgB,MAAM,QAAQ,GAAG,MAAM,aAAa,SAAY,KAAK,QAAQ,MAAM,QAAQ,EAAE;AAAA,UACrG,CAAC;AAAA,QACH;AAKA,cAAM,QAAQ,MAAc;AAC1B,kBAAQ,MAAM,QAAQ;AAAA,YACpB,KAAK;AACH,qBAAO,kBAAkB,MAAM,QAAQ;AAAA,YACzC,KAAK;AACH,qBAAO,kBAAkB,MAAM,QAAQ;AAAA,YACzC,KAAK;AACH,qBAAO,kCAAkC,MAAM,SAAS,QAAQ,MAAM,QAAQ;AAAA,YAEhF,KAAK;AACH,qBAAO,mBAAmB,MAAM,SAAS,gCAAgC,MAAM,QAAQ;AAAA,YAEzF;AACE,qBAAO,mCAAmC,MAAM,SAAS,QAAQ,MAAM,QAAQ;AAAA,UAGnF;AAAA,QACF,GAAG;AACH,eAAO,CAAC,EAAE,MAAM,QAAQ,KAAK,CAAC;AAAA,MAChC;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,MAAM;AAClB,YAAM,SAAS,MAAM,aAAa,KAAK;AAAA,QACrC,SAAS,KAAK;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,MAAM,KAAK;AAAA,QACX,GAAI,KAAK,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;AAAA,QACjE,GAAI,KAAK,WAAW,SAAY,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO;AAAA,MAC7D,CAAC;AACD,aAAO;AAAA,QACL,WAAW,OAAO;AAAA,QAClB,UAAU,OAAO;AAAA,QACjB,GAAI,OAAO,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,OAAO,SAAS;AAAA,QACrE,GAAI,OAAO,WAAW,SAAY,CAAC,IAAI,EAAE,QAAQ,OAAO,OAAO;AAAA,MACjE;AAAA,IACF;AAAA,EACF,CAAC,CAAC;AAEF,MAAI,MAAM,SAAS,WAAW;AAAA,IAC5B,MAAM;AAAA,IACN,aAAa;AAAA,IAEb,YAAY;AAAA,MACV,SAAS;AAAA,QACP,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,sBAAsB;AAAA,QACtB,YAAY;AAAA,UACV,WAAW,EAAE,MAAM,WAAW,UAAU,KAAK;AAAA,UAC7C,UAAU,EAAE,MAAM,SAAS;AAAA,QAC7B;AAAA,MACF;AAAA,MACA,QAAQ,CAAC,OAAO,UAAU,CAAC;AAAA,QACzB,MAAM;AAAA,QACN,MAAM,MAAM,YACR,cAAc,MAAM,YAAY,oBAAoB,KACpD;AAAA,MACN,CAAC;AAAA,IACH;AAAA,IACA,MAAM,QAAQ,MAAM;AAClB,YAAM,SAAS,MAAM,aAAa,KAAK,KAAK,OAAO;AACnD,UAAI,WAAW,OAAW,QAAO,EAAE,WAAW,MAAM;AACpD,aAAO,EAAE,WAAW,MAAM,UAAU,OAAO,SAAS;AAAA,IACtD;AAAA,EACF,CAAC,CAAC;AAEF,MAAI,MAAM,SAAS,WAAW;AAAA,IAC5B,MAAM;AAAA,IACN,aAAa;AAAA,IAIb,YAAY;AAAA,MACV,SAAS;AAAA,QACP,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,sBAAsB;AAAA,QACtB,YAAY;AAAA,UACV,WAAW,EAAE,MAAM,WAAW,UAAU,KAAK;AAAA,UAC7C,UAAU,EAAE,MAAM,SAAS;AAAA,UAC3B,UAAU;AAAA,YACR,MAAM;AAAA,YACN,OAAO;AAAA,cACL,MAAM;AAAA,cACN,sBAAsB;AAAA,cACtB,YAAY;AAAA,gBACV,WAAW,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,gBAC5C,OAAO,EAAE,MAAM,SAAS;AAAA,gBACxB,QAAQ,EAAE,MAAM,SAAS;AAAA,cAC3B;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,QAAQ,CAAC,OAAO,UAAU;AACxB,YAAI,CAAC,MAAM,UAAW,QAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,8BAA8B,CAAC;AACnF,cAAM,WAAW,MAAM,YAAY,CAAC;AACpC,YAAI,SAAS,WAAW,GAAG;AACzB,iBAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,uBAAuB,MAAM,YAAY,oBAAoB,GAAG,CAAC;AAAA,QACjG;AACA,cAAM,QAAQ,SAAS,IAAI,CAAC,YAAY;AACtC,gBAAM,QAAQ,QAAQ,UAAU,SAAY,KAAK,IAAI,QAAQ,KAAK;AAClE,gBAAM,SAAS,QAAQ,WAAW,SAAY,KAAK,KAAK,QAAQ,MAAM;AACtE,iBAAO,GAAG,QAAQ,SAAS,GAAG,KAAK,GAAG,MAAM;AAAA,QAC9C,CAAC;AACD,eAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,MAAM,KAAK,IAAI,EAAE,CAAC;AAAA,MAClD;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,MAAM;AAClB,YAAM,SAAS,MAAM,aAAa,KAAK,KAAK,OAAO;AACnD,UAAI,WAAW,OAAW,QAAO,EAAE,WAAW,MAAM;AACpD,aAAO;AAAA,QACL,WAAW;AAAA,QACX,UAAU,OAAO;AAAA;AAAA;AAAA,QAGjB,UAAU,OAAO,SAAS,IAAI,cAAY;AAAA,UACxC,WAAW,QAAQ;AAAA,UACnB,GAAI,QAAQ,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;AAAA,UAC9D,GAAI,QAAQ,WAAW,SAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;AAAA,QACnE,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAC,CAAC;AACJ;",
+  "sourcesContent": ["/**\n * Model-facing tools for cross-instance message handoff: `interconnect_send`\n * delivers one text message to a live session on a peer DSH instance, and\n * `interconnect_ping` probes a peer's liveness and identity.\n *\n * The tools consume the host-plane `interconnect` service and publish nothing\n * themselves, so this row sits as an ordinary tool plugin in a preset while\n * the service it reaches stays host-side (the same split `tool-goal` uses\n * against `goals`).\n * @module @deepseek-ai/dsh-tool-interconnect\n */\n\nimport { Context } from '@deepseek-ai/cordis'\nimport { defineTool } from '@deepseek-ai/dsh-tools'\n// Activates the `Context.interconnect` merge declared by the interconnect service plugin.\nimport type {} from '../interconnect/index.ts'\n\n/** Services required before the tools can register. */\nexport const inject = ['interconnect', 'tools']\n\n/**\n * Register the two tool surfaces. Registration is idempotent per fiber; the\n * tools unregister with the owning fiber.\n * @param ctx - connection context carrying the interconnect service and the tool registry.\n */\nexport function apply(ctx: Context): void {\n  const interconnect = ctx.interconnect\n\n  ctx.tools.register(defineTool({\n    name: 'interconnect_send',\n    description: 'Deliver one text message to a live session on another DSH instance (same machine, '\n      + 'another machine, or another session), over a shared-secret-authenticated channel. '\n      + 'Returns whether the peer instance received it and which instance answered. '\n      + 'Only a session with a running agent can receive a message; when none is running the result '\n      + 'reports reason \"session-not-live\", and interconnect_list shows which sessions are live there.',\n    parameters: {\n      instanceId: {\n        type: 'string',\n        required: true,\n        description: 'The peer instance id to deliver to, as configured under this instance\\'s '\n          + 'interconnect peers map. Deliveries go over the persistent link to that instance.',\n      },\n      sessionId: {\n        type: 'string',\n        required: true,\n        description: 'Target session id on the receiving instance to deliver the message to.',\n      },\n      text: {\n        type: 'string',\n        required: true,\n        description: 'Message text delivered to the peer session.',\n      },\n      delivery: {\n        type: 'string',\n        enum: ['followup', 'steer', 'inject'],\n        description: 'How the message reaches the target agent. `followup` queues it as its own turn '\n          + 'behind whatever that agent is doing now. `steer` cuts into the nearest step boundary of a '\n          + 'running turn, so an urgent message does not wait for that turn to end. `inject` seeds '\n          + 'context without waking an idle agent, so it may sit unread. Omit to use the receiver\\'s '\n          + 'configured default.',\n      },\n      resume: {\n        type: 'boolean',\n        description: 'Wake the target session if it is persisted but has no running agent. Off by '\n          + 'default because delivery to a woken session starts a real agent turn \u2014 a billed model call '\n          + 'with that session\\'s full toolset \u2014 in a conversation nobody is watching. Prefer '\n          + 'interconnect_list and an already-live target; set this only when that specific session must '\n          + 'be reached. The receiver may refuse, answering reason \"resume-refused\".',\n      },\n    },\n    output: {\n      schema: {\n        type: 'object',\n        additionalProperties: false,\n        properties: {\n          delivered: { type: 'boolean', required: true },\n          instance: { type: 'string', required: true },\n          delivery: { type: 'string' },\n          reason: { type: 'string' },\n        },\n      },\n      render: (_args, value) => {\n        if (value.delivered) {\n          return [{\n            type: 'text',\n            text: `delivered to ${value.instance}${value.delivery === undefined ? '' : ` via ${value.delivery}`}`,\n          }]\n        }\n        // Each failure gets the response it actually needs: a not-live target is\n        // the caller's to re-choose, while an unreachable peer may just be worth\n        // retrying. The old single line claimed \"no live session\" even when the\n        // peer never answered, which pointed at the wrong thing entirely.\n        const text = ((): string => {\n          switch (value.reason) {\n            case 'unreachable':\n              return `not delivered: ${value.instance} did not answer (unreachable or unauthorized)`\n            case 'resume-refused':\n              return `not delivered: ${value.instance} does not allow waking persisted sessions`\n            case 'resume-failed':\n              return `not delivered: could not wake \"${_args.sessionId}\" on ${value.instance}`\n                + ' (no such persisted session, or another owner holds it)'\n            case 'session-owned-by-subagent':\n              return `not delivered: \"${_args.sessionId}\" is a subagent's session on ${value.instance}`\n                + ' \u2014 its parent agent owns delivery, so reach it through that parent'\n            default:\n              return `not delivered: no live session \"${_args.sessionId}\" on ${value.instance}`\n                + ' \u2014 use interconnect_list to see which sessions are live there,'\n                + ' or set resume to wake this one'\n          }\n        })()\n        return [{ type: 'text', text }]\n      },\n    },\n    async execute(args, exec) {\n      const sessionId = exec.agent?.session.id\n      const self = interconnect.selfSender(sessionId === undefined ? '' : String(sessionId))\n      const result = await interconnect.send({\n        instanceId: args.instanceId,\n        sessionId: args.sessionId,\n        text: args.text,\n        // Attribute this instance as the sender so the peer can reply back. The\n        // calling session id comes from the executing agent (the session sending).\n        sender: self,\n        ...(args.delivery === undefined ? {} : { delivery: args.delivery }),\n        ...(args.resume === undefined ? {} : { resume: args.resume }),\n      })\n      return {\n        delivered: result.delivered,\n        instance: result.instance,\n        ...(result.delivery === undefined ? {} : { delivery: result.delivery }),\n        ...(result.reason === undefined ? {} : { reason: result.reason }),\n      }\n    },\n  }))\n\n  ctx.tools.register(defineTool({\n    name: 'interconnect_ping',\n    description: 'Probe a peer DSH instance for liveness and identity over the shared-secret channel. '\n      + 'Returns the peer instance id when reachable, or null on transport/auth failure.',\n    parameters: {\n      instanceId: {\n        type: 'string',\n        required: true,\n        description: 'The peer instance id to probe, as configured under this instance\\'s '\n          + 'interconnect peers map.',\n      },\n    },\n    output: {\n      schema: {\n        type: 'object',\n        additionalProperties: false,\n        properties: {\n          reachable: { type: 'boolean', required: true },\n          instance: { type: 'string' },\n        },\n      },\n      render: (_args, value) => [{\n        type: 'text',\n        text: value.reachable\n          ? `reachable: ${value.instance ?? '(unknown instance)'}`\n          : 'unreachable or unauthorized',\n      }],\n    },\n    async execute(args) {\n      const result = await interconnect.ping(args.instanceId)\n      if (result === undefined) return { reachable: false }\n      return { reachable: true, instance: result.instance }\n    },\n  }))\n\n  ctx.tools.register(defineTool({\n    name: 'interconnect_list',\n    description: 'List the live sessions on a peer DSH instance, so a message can be addressed without '\n      + 'knowing a session id in advance. Every returned sessionId is a valid interconnect_send target at '\n      + 'the time of the call. Only live sessions appear: a session that exists on the peer but has no '\n      + 'running agent is not listed and cannot receive a message.',\n    parameters: {\n      instanceId: {\n        type: 'string',\n        required: true,\n        description: 'The peer instance id to list, as configured under this instance\\'s '\n          + 'interconnect peers map.',\n      },\n    },\n    output: {\n      schema: {\n        type: 'object',\n        additionalProperties: false,\n        properties: {\n          reachable: { type: 'boolean', required: true },\n          instance: { type: 'string' },\n          sessions: {\n            type: 'array',\n            items: {\n              type: 'object',\n              additionalProperties: false,\n              properties: {\n                sessionId: { type: 'string', required: true },\n                title: { type: 'string' },\n                status: { type: 'string' },\n              },\n            },\n          },\n        },\n      },\n      render: (_args, value) => {\n        if (!value.reachable) return [{ type: 'text', text: 'unreachable or unauthorized' }]\n        const sessions = value.sessions ?? []\n        if (sessions.length === 0) {\n          return [{ type: 'text', text: `no live sessions on ${value.instance ?? '(unknown instance)'}` }]\n        }\n        const lines = sessions.map((session) => {\n          const title = session.title === undefined ? '' : ` ${session.title}`\n          const status = session.status === undefined ? '' : ` [${session.status}]`\n          return `${session.sessionId}${title}${status}`\n        })\n        return [{ type: 'text', text: lines.join('\\n') }]\n      },\n    },\n    async execute(args) {\n      const result = await interconnect.list(args.instanceId)\n      if (result === undefined) return { reachable: false }\n      return {\n        reachable: true,\n        instance: result.instance,\n        // Rebuild each row so an optional key stays absent rather than\n        // becoming an explicit undefined the wire schema would reject.\n        sessions: result.sessions.map(session => ({\n          sessionId: session.sessionId,\n          ...(session.title === undefined ? {} : { title: session.title }),\n          ...(session.status === undefined ? {} : { status: session.status }),\n        })),\n      }\n    },\n  }))\n\n  ctx.tools.register(defineTool({\n    name: 'interconnect_reply',\n    description: 'Deliver one text message back to the peer that this session last received an '\n      + 'interconnect message from. Only the LOCAL session id and the reply text are needed: the '\n      + 'outbound target (the peer origin and its session id) is recalled from the message this '\n      + 'session received, so you do not ask for an address twice. A session that never received a '\n      + 'message through interconnect \u2014 or received one without a sender identity \u2014 reports reason '\n      + '\"no-sender-known\".',\n    parameters: {\n      sessionId: {\n        type: 'string',\n        required: true,\n        description: 'The LOCAL session id that received the message being replied to.',\n      },\n      text: {\n        type: 'string',\n        required: true,\n        description: 'Message text delivered back to the recorded sender session.',\n      },\n      delivery: {\n        type: 'string',\n        enum: ['followup', 'steer', 'inject'],\n        description: 'How the reply reaches the target agent, as in interconnect_send. Omit to use '\n          + \"the receiver's configured default.\",\n      },\n      resume: {\n        type: 'boolean',\n        description: 'Wake the target session if it is persisted but has no running agent, as in '\n          + 'interconnect_send. Off by default; the receiver may refuse.',\n      },\n    },\n    output: {\n      schema: {\n        type: 'object',\n        additionalProperties: false,\n        properties: {\n          delivered: { type: 'boolean', required: true },\n          instance: { type: 'string', required: true },\n          delivery: { type: 'string' },\n          reason: { type: 'string' },\n        },\n      },\n      render: (_args, value) => {\n        if (value.delivered) {\n          return [{\n            type: 'text',\n            text: `replied to ${value.instance}${value.delivery === undefined ? '' : ` via ${value.delivery}`}`,\n          }]\n        }\n        const text = ((): string => {\n          if (value.reason === 'no-sender-known') {\n            return `not delivered: no sender recorded for \"${_args.sessionId}\"`\n              + ' \u2014 this session never received an interconnect message with a sender identity'\n          }\n          if (value.reason === 'session-owned-by-subagent') {\n            return `not delivered: \"${_args.sessionId}\" is a subagent's session \u2014 its parent agent owns delivery`\n          }\n          if (value.reason === 'unreachable') {\n            return `not delivered: the recorded sender did not answer (unreachable or unauthorized)`\n          }\n          if (value.reason === 'resume-refused') {\n            return `not delivered: the recorded sender does not allow waking persisted sessions`\n          }\n          if (value.reason === 'resume-failed') {\n            return `not delivered: could not wake the recorded sender's session`\n          }\n          return `not delivered: the recorded sender's session is not live`\n        })()\n        return [{ type: 'text', text }]\n      },\n    },\n    async execute(args) {\n      const result = await interconnect.reply({\n        sessionId: args.sessionId,\n        text: args.text,\n        ...(args.delivery === undefined ? {} : { delivery: args.delivery }),\n        ...(args.resume === undefined ? {} : { resume: args.resume }),\n      })\n      return {\n        delivered: result.delivered,\n        instance: result.instance,\n        ...(result.delivery === undefined ? {} : { delivery: result.delivery }),\n        ...(result.reason === undefined ? {} : { reason: result.reason }),\n      }\n    },\n  }))\n}\n"],
+  "mappings": ";AAaA,SAAS,kBAAkB;AAKpB,IAAM,SAAS,CAAC,gBAAgB,OAAO;AAOvC,SAAS,MAAM,KAAoB;AACxC,QAAM,eAAe,IAAI;AAEzB,MAAI,MAAM,SAAS,WAAW;AAAA,IAC5B,MAAM;AAAA,IACN,aAAa;AAAA,IAKb,YAAY;AAAA,MACV,YAAY;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MAEf;AAAA,MACA,WAAW;AAAA,QACT,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MACf;AAAA,MACA,MAAM;AAAA,QACJ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MACf;AAAA,MACA,UAAU;AAAA,QACR,MAAM;AAAA,QACN,MAAM,CAAC,YAAY,SAAS,QAAQ;AAAA,QACpC,aAAa;AAAA,MAKf;AAAA,MACA,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,aAAa;AAAA,MAKf;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,sBAAsB;AAAA,QACtB,YAAY;AAAA,UACV,WAAW,EAAE,MAAM,WAAW,UAAU,KAAK;AAAA,UAC7C,UAAU,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,UAC3C,UAAU,EAAE,MAAM,SAAS;AAAA,UAC3B,QAAQ,EAAE,MAAM,SAAS;AAAA,QAC3B;AAAA,MACF;AAAA,MACA,QAAQ,CAAC,OAAO,UAAU;AACxB,YAAI,MAAM,WAAW;AACnB,iBAAO,CAAC;AAAA,YACN,MAAM;AAAA,YACN,MAAM,gBAAgB,MAAM,QAAQ,GAAG,MAAM,aAAa,SAAY,KAAK,QAAQ,MAAM,QAAQ,EAAE;AAAA,UACrG,CAAC;AAAA,QACH;AAKA,cAAM,QAAQ,MAAc;AAC1B,kBAAQ,MAAM,QAAQ;AAAA,YACpB,KAAK;AACH,qBAAO,kBAAkB,MAAM,QAAQ;AAAA,YACzC,KAAK;AACH,qBAAO,kBAAkB,MAAM,QAAQ;AAAA,YACzC,KAAK;AACH,qBAAO,kCAAkC,MAAM,SAAS,QAAQ,MAAM,QAAQ;AAAA,YAEhF,KAAK;AACH,qBAAO,mBAAmB,MAAM,SAAS,gCAAgC,MAAM,QAAQ;AAAA,YAEzF;AACE,qBAAO,mCAAmC,MAAM,SAAS,QAAQ,MAAM,QAAQ;AAAA,UAGnF;AAAA,QACF,GAAG;AACH,eAAO,CAAC,EAAE,MAAM,QAAQ,KAAK,CAAC;AAAA,MAChC;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,MAAM,MAAM;AACxB,YAAM,YAAY,KAAK,OAAO,QAAQ;AACtC,YAAM,OAAO,aAAa,WAAW,cAAc,SAAY,KAAK,OAAO,SAAS,CAAC;AACrF,YAAM,SAAS,MAAM,aAAa,KAAK;AAAA,QACrC,YAAY,KAAK;AAAA,QACjB,WAAW,KAAK;AAAA,QAChB,MAAM,KAAK;AAAA;AAAA;AAAA,QAGX,QAAQ;AAAA,QACR,GAAI,KAAK,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;AAAA,QACjE,GAAI,KAAK,WAAW,SAAY,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO;AAAA,MAC7D,CAAC;AACD,aAAO;AAAA,QACL,WAAW,OAAO;AAAA,QAClB,UAAU,OAAO;AAAA,QACjB,GAAI,OAAO,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,OAAO,SAAS;AAAA,QACrE,GAAI,OAAO,WAAW,SAAY,CAAC,IAAI,EAAE,QAAQ,OAAO,OAAO;AAAA,MACjE;AAAA,IACF;AAAA,EACF,CAAC,CAAC;AAEF,MAAI,MAAM,SAAS,WAAW;AAAA,IAC5B,MAAM;AAAA,IACN,aAAa;AAAA,IAEb,YAAY;AAAA,MACV,YAAY;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MAEf;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,sBAAsB;AAAA,QACtB,YAAY;AAAA,UACV,WAAW,EAAE,MAAM,WAAW,UAAU,KAAK;AAAA,UAC7C,UAAU,EAAE,MAAM,SAAS;AAAA,QAC7B;AAAA,MACF;AAAA,MACA,QAAQ,CAAC,OAAO,UAAU,CAAC;AAAA,QACzB,MAAM;AAAA,QACN,MAAM,MAAM,YACR,cAAc,MAAM,YAAY,oBAAoB,KACpD;AAAA,MACN,CAAC;AAAA,IACH;AAAA,IACA,MAAM,QAAQ,MAAM;AAClB,YAAM,SAAS,MAAM,aAAa,KAAK,KAAK,UAAU;AACtD,UAAI,WAAW,OAAW,QAAO,EAAE,WAAW,MAAM;AACpD,aAAO,EAAE,WAAW,MAAM,UAAU,OAAO,SAAS;AAAA,IACtD;AAAA,EACF,CAAC,CAAC;AAEF,MAAI,MAAM,SAAS,WAAW;AAAA,IAC5B,MAAM;AAAA,IACN,aAAa;AAAA,IAIb,YAAY;AAAA,MACV,YAAY;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MAEf;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,sBAAsB;AAAA,QACtB,YAAY;AAAA,UACV,WAAW,EAAE,MAAM,WAAW,UAAU,KAAK;AAAA,UAC7C,UAAU,EAAE,MAAM,SAAS;AAAA,UAC3B,UAAU;AAAA,YACR,MAAM;AAAA,YACN,OAAO;AAAA,cACL,MAAM;AAAA,cACN,sBAAsB;AAAA,cACtB,YAAY;AAAA,gBACV,WAAW,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,gBAC5C,OAAO,EAAE,MAAM,SAAS;AAAA,gBACxB,QAAQ,EAAE,MAAM,SAAS;AAAA,cAC3B;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,QAAQ,CAAC,OAAO,UAAU;AACxB,YAAI,CAAC,MAAM,UAAW,QAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,8BAA8B,CAAC;AACnF,cAAM,WAAW,MAAM,YAAY,CAAC;AACpC,YAAI,SAAS,WAAW,GAAG;AACzB,iBAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,uBAAuB,MAAM,YAAY,oBAAoB,GAAG,CAAC;AAAA,QACjG;AACA,cAAM,QAAQ,SAAS,IAAI,CAAC,YAAY;AACtC,gBAAM,QAAQ,QAAQ,UAAU,SAAY,KAAK,IAAI,QAAQ,KAAK;AAClE,gBAAM,SAAS,QAAQ,WAAW,SAAY,KAAK,KAAK,QAAQ,MAAM;AACtE,iBAAO,GAAG,QAAQ,SAAS,GAAG,KAAK,GAAG,MAAM;AAAA,QAC9C,CAAC;AACD,eAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,MAAM,KAAK,IAAI,EAAE,CAAC;AAAA,MAClD;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,MAAM;AAClB,YAAM,SAAS,MAAM,aAAa,KAAK,KAAK,UAAU;AACtD,UAAI,WAAW,OAAW,QAAO,EAAE,WAAW,MAAM;AACpD,aAAO;AAAA,QACL,WAAW;AAAA,QACX,UAAU,OAAO;AAAA;AAAA;AAAA,QAGjB,UAAU,OAAO,SAAS,IAAI,cAAY;AAAA,UACxC,WAAW,QAAQ;AAAA,UACnB,GAAI,QAAQ,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;AAAA,UAC9D,GAAI,QAAQ,WAAW,SAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;AAAA,QACnE,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAC,CAAC;AAEF,MAAI,MAAM,SAAS,WAAW;AAAA,IAC5B,MAAM;AAAA,IACN,aAAa;AAAA,IAMb,YAAY;AAAA,MACV,WAAW;AAAA,QACT,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MACf;AAAA,MACA,MAAM;AAAA,QACJ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa;AAAA,MACf;AAAA,MACA,UAAU;AAAA,QACR,MAAM;AAAA,QACN,MAAM,CAAC,YAAY,SAAS,QAAQ;AAAA,QACpC,aAAa;AAAA,MAEf;AAAA,MACA,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,aAAa;AAAA,MAEf;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,sBAAsB;AAAA,QACtB,YAAY;AAAA,UACV,WAAW,EAAE,MAAM,WAAW,UAAU,KAAK;AAAA,UAC7C,UAAU,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,UAC3C,UAAU,EAAE,MAAM,SAAS;AAAA,UAC3B,QAAQ,EAAE,MAAM,SAAS;AAAA,QAC3B;AAAA,MACF;AAAA,MACA,QAAQ,CAAC,OAAO,UAAU;AACxB,YAAI,MAAM,WAAW;AACnB,iBAAO,CAAC;AAAA,YACN,MAAM;AAAA,YACN,MAAM,cAAc,MAAM,QAAQ,GAAG,MAAM,aAAa,SAAY,KAAK,QAAQ,MAAM,QAAQ,EAAE;AAAA,UACnG,CAAC;AAAA,QACH;AACA,cAAM,QAAQ,MAAc;AAC1B,cAAI,MAAM,WAAW,mBAAmB;AACtC,mBAAO,0CAA0C,MAAM,SAAS;AAAA,UAElE;AACA,cAAI,MAAM,WAAW,6BAA6B;AAChD,mBAAO,mBAAmB,MAAM,SAAS;AAAA,UAC3C;AACA,cAAI,MAAM,WAAW,eAAe;AAClC,mBAAO;AAAA,UACT;AACA,cAAI,MAAM,WAAW,kBAAkB;AACrC,mBAAO;AAAA,UACT;AACA,cAAI,MAAM,WAAW,iBAAiB;AACpC,mBAAO;AAAA,UACT;AACA,iBAAO;AAAA,QACT,GAAG;AACH,eAAO,CAAC,EAAE,MAAM,QAAQ,KAAK,CAAC;AAAA,MAChC;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,MAAM;AAClB,YAAM,SAAS,MAAM,aAAa,MAAM;AAAA,QACtC,WAAW,KAAK;AAAA,QAChB,MAAM,KAAK;AAAA,QACX,GAAI,KAAK,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;AAAA,QACjE,GAAI,KAAK,WAAW,SAAY,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO;AAAA,MAC7D,CAAC;AACD,aAAO;AAAA,QACL,WAAW,OAAO;AAAA,QAClB,UAAU,OAAO;AAAA,QACjB,GAAI,OAAO,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,OAAO,SAAS;AAAA,QACrE,GAAI,OAAO,WAAW,SAAY,CAAC,IAAI,EAAE,QAAQ,OAAO,OAAO;AAAA,MACjE;AAAA,IACF;AAAA,EACF,CAAC,CAAC;AACJ;",
   "names": []
 }

package/lib/types/interconnect/index.d.ts

@@ -14,9 +14,9 @@
 import { Context, Service } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
 import WebSocket from 'ws';
-import { type Config, type EventNotification, type ListResult, type PingResult, type SendResult, type SendRequest, type WebSocketLinkHandle } from './types.ts';
+import { type Config, type EventNotification, type ListResult, type PingResult, type ReplyRequest, type SendResult, type SendRequest, type SenderIdentity, type WebSocketLinkHandle } from './types.ts';
 export type * from './types.ts';
-export { INTERCONNECT_CHANNEL, INTERCONNECT_TOKEN_REF } from './types.ts';
+export { INTERCONNECT_TOKEN_REF } from './types.ts';
 declare module '@deepseek-ai/cordis' {
     interface Context {
         interconnect: InterconnectService;
@@ -42,52 +42,92 @@ export declare class InterconnectService extends Service {
     private readonly requestTimeoutMs;
     private readonly delivery;
     private readonly allowResume;
-    private readonly peers;
     private readonly subscriptions;
     private readonly server;
     private readonly sockets;
+    /** Outbound peer links keyed by the peer's `instanceId`. */
     private readonly linkStates;
     private heartbeatTimer;
     /** Peer identity each live socket announced via its `hello` frame, if any. */
     private readonly peerOf;
+    /** Sender each local session last received a send from, keyed by local session id. */
+    private readonly senders;
+    /** In-flight frames sent over a peer link, keyed by `reqId`, awaiting a correlated result. */
+    private readonly pendingMessages;
+    private reqIdCounter;
     constructor(ctx: Context, config: Config);
+    /**
+     * This instance's identity to attach to outbound messages. Always present:
+     * it needs no address, only this instance's id and the calling session.
+     * @param sessionId - the local session that is sending, used as the reply target.
+     */
+    selfSender(sessionId: string): SenderIdentity;
     send(request: SendRequest): Promise<SendResult>;
-    ping(baseUrl: string): Promise<PingResult | undefined>;
     /**
-     * List the peer's live sessions so a caller can discover a valid `send`
-     * target. `undefined` on transport or auth failure, matching `ping`.
+     * Deliver one text message back to the peer that a local session last
+     * received a send from. `sessionId` names the LOCAL replying session; the
+     * outbound target is the `sender` that session recorded, addressed through
+     * this instance's own link to the sender's instance.
+     */
+    reply(request: ReplyRequest): Promise<SendResult>;
+    /**
+     * Probe a peer instance for liveness and identity over its persistent link.
+     * Returns the peer identity when reachable, or undefined when the link is
+     * not up or no answer arrives.
+     */
+    ping(instanceId: string): Promise<PingResult | undefined>;
+    /**
+     * List a peer instance's live sessions over its persistent link. Undefined on
+     * transport failure, matching `ping`.
      */
-    list(baseUrl: string): Promise<ListResult | undefined>;
+    list(instanceId: string): Promise<ListResult | undefined>;
+    /** The origin this instance dials to reach a configured peer, or undefined. */
+    private originOf;
     /**
-     * Add a peer origin to the event fan-out set at runtime. Returns a disposer
-     * that removes it. Duplicate origins are idempotent.
-     * @param peer - receiver origin, e.g. `http://127.0.0.1:3080`.
-     * @returns disposer removing the peer from the fan-out set.
+     * Send a `msg` frame over the live link to a peer and resolve with its
+     * correlated `msg-result`. Undefined when the peer has no live link here
+     * (not configured, or the link is down) — sends can only address configured+
+     * connected peers by design.
      */
-    subscribe(peer: string): () => void;
-    /** Remove a peer origin from the event fan-out set. */
-    unsubscribe(peer: string): void;
+    private msgRequest;
+    /** Send a `query` frame over the live link to a peer and resolve its result. */
+    private queryRequest;
+    /** Settle a `reqId` frame against its `*-result`, timing out at `requestTimeoutMs`. */
+    private waitForResult;
+    /**
+     * Add a peer route at runtime. Returns a disposer that removes it. Re-adding
+     * an existing instanceId re-routes it to the new origin.
+     * @param instanceId - the peer's `instanceId`.
+     * @param origin - origin this instance dials to reach that peer.
+     * @returns disposer removing the peer route.
+     */
+    subscribe(instanceId: string, origin: string): () => void;
+    /** Remove a peer route, closing its outbound link. */
+    unsubscribe(instanceId: string): void;
     /**
      * Open (and, on drop, re-open) a persistent WebSocket link to a peer. Local
      * events stream over the link in real time, and events the peer pushes are
-     * surfaced as `interconnect/event`. Repeating for the same peer returns the
-     * existing handle.
-     * @param peer - receiver origin, e.g. `http://127.0.0.1:3080` (dialed as `ws:`).
+     * surfaced as `interconnect/event`. Repeating for the same instanceId
+     * re-routes the link to the new origin.
+     * @param instanceId - the peer's `instanceId`.
+     * @param origin - receiver origin this instance dials, e.g. `http://127.0.0.1:13080`.
      * @returns a handle closing the link and cancelling reconnection.
      */
-    link(peer: string): WebSocketLinkHandle;
+    link(instanceId: string, origin: string): WebSocketLinkHandle;
     /** Remove a closed outbound link's state so a later `link` re-dials fresh. */
-    forgetLink(peer: string): void;
-    /** Fan one serialized lifecycle fact out to every registered peer, fire-and-forget. */
+    forgetLink(instanceId: string): void;
+    /** Push one serialized lifecycle fact out to every linked peer over WS. */
     private fanout;
     /** Push one fact over every live WebSocket link, dropping closed sockets. */
     private broadcast;
-    /** Inbound route handler: bearer auth first, then envelope dispatch. */
-    private handle;
-    /** Parse the ClientRequest envelope and route to the named endpoint. */
-    private dispatch;
-    /** Dispatch one authenticated business call. */
-    private runEndpoint;
+    /**
+     * Dispatch one inbound `msg` frame: deliver a `send`/`reply` and answer the
+     * correlated `msg-result` on the same socket. Errors are surfaced as the
+     * result so a throwing handler cannot escape the socket's message callback.
+     */
+    private handleMsgFrame;
+    /** Dispatch one inbound `query` frame (ping/list/event) and answer on the socket. */
+    private handleQueryFrame;
     /** Surface one remote notification to local listeners and the log. */
     private receiveEvent;
     /**
@@ -120,8 +160,12 @@ export declare class InterconnectService extends Service {
      * when the sender asked and this receiver allows it.
      */
     private deliver;
-    /** POST one business call to a peer instance; undefined on transport/auth failure. */
-    private post;
+    /**
+     * Inbound `reply` dispatch: forward a request to {link reply}, resolving the
+     * outbound sender for the named local session. Kept separate from {link
+     * deliver} so the two wire endpoints stay distinct in the request pipeline.
+     */
+    private replyForSession;
     private resolveToken;
     /** Resolve the shared token for an outbound dial (same source as inbound). */
     resolveTokenForDial(): Promise<string | undefined>;
@@ -135,6 +179,8 @@ export declare class InterconnectService extends Service {
     attachSocket(websocket: WebSocket): void;
     /** Parse and route one inbound link frame, attributing events to the socket's announced peer. */
     private handleFrame;
+    /** Write one frame to a socket, returning false when the socket cannot take it. */
+    private sendFrame;
 }
 export default InterconnectService;
 //# sourceMappingURL=index.d.ts.map

package/lib/types/interconnect/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/interconnect/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAkBtD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,SAA8B,MAAM,IAAI,CAAA;AAE/C,OAAO,EAGL,KAAK,MAAM,EAEX,KAAK,iBAAiB,EAGtB,KAAK,UAAU,EACf,KAAK,UAAU,EAEf,KAAK,UAAU,EACf,KAAK,WAAW,EAGhB,KAAK,mBAAmB,EACzB,MAAM,YAAY,CAAA;AAEnB,mBAAmB,YAAY,CAAA;AAC/B,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAEzE,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,YAAY,EAAE,mBAAmB,CAAA;KAClC;IACD,UAAU,MAAM;QACd;;;;WAIG;QACH,oBAAoB,CAAC,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAC1E;CACF;AA+CD;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,OAAO;IAC9C,MAAM,CAAC,MAAM,WAAyC;IACtD,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAMtB;IAEF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAc;IACvC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,cAAc,CAA4B;IAClD,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;gBAE9C,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IAkGlC,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAiB/C,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAI5D;;;OAGG;IACG,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAI5D;;;;;OAKG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,IAAI;IAMnC,uDAAuD;IACvD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI/B;;;;;;;OAOG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB;IAUvC,8EAA8E;IAC9E,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI9B,uFAAuF;IACvF,OAAO,CAAC,MAAM;IAcd,6EAA6E;IAC7E,OAAO,CAAC,SAAS;IAajB,wEAAwE;YAC1D,MAAM;IAkBpB,wEAAwE;YAC1D,QAAQ;IAmFtB,gDAAgD;YAClC,WAAW;IA6BzB,sEAAsE;IACtE,OAAO,CAAC,YAAY;IAKpB;;;;;;;;;OASG;IACH,OAAO,CAAC,YAAY;IAyBpB;;;;;;;;;;;;OAYG;YACW,IAAI;IAyBlB;;;OAGG;YACW,OAAO;IAmDrB,sFAAsF;YACxE,IAAI;YA8BJ,YAAY;IAK1B,8EAA8E;IAC9E,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAIlD,8EAA8E;YAChE,aAAa;IA4B3B;;;;OAIG;IACH,YAAY,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI;IAoBxC,iGAAiG;IACjG,OAAO,CAAC,WAAW;CA0BpB;AAuJD,eAAe,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/interconnect/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAYtD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,SAA8B,MAAM,IAAI,CAAA;AAE/C,OAAO,EAEL,KAAK,MAAM,EAEX,KAAK,iBAAiB,EAItB,KAAK,UAAU,EACf,KAAK,UAAU,EAGf,KAAK,YAAY,EAEjB,KAAK,UAAU,EACf,KAAK,WAAW,EAEhB,KAAK,cAAc,EAEnB,KAAK,mBAAmB,EACzB,MAAM,YAAY,CAAA;AAEnB,mBAAmB,YAAY,CAAA;AAC/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAEnD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,YAAY,EAAE,mBAAmB,CAAA;KAClC;IACD,UAAU,MAAM;QACd;;;;WAIG;QACH,oBAAoB,CAAC,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAC1E;CACF;AA8DD;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,OAAO;IAC9C,MAAM,CAAC,MAAM,WAAyC;IACtD,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAMtB;IAEF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAc;IACvC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,4DAA4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,cAAc,CAA4B;IAClD,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAC1D,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,8FAA8F;IAC9F,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoC;IACpE,OAAO,CAAC,YAAY,CAAI;gBAEZ,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IA+FxC;;;;OAIG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc;IAIvC,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAYrD;;;;;OAKG;IACG,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;IAkBvD;;;;OAIG;IACG,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAI/D;;;OAGG;IACG,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAI/D,+EAA+E;IAC/E,OAAO,CAAC,QAAQ;IAKhB;;;;;OAKG;YACW,UAAU;IAsBxB,gFAAgF;YAClE,YAAY;IAU1B,uFAAuF;IACvF,OAAO,CAAC,aAAa;IA2BrB;;;;;;OAMG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI;IAOzD,sDAAsD;IACtD,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAMrC;;;;;;;;OAQG;IACH,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB;IAY7D,8EAA8E;IAC9E,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIpC,2EAA2E;IAC3E,OAAO,CAAC,MAAM;IAId,6EAA6E;IAC7E,OAAO,CAAC,SAAS;IAajB;;;;OAIG;YACW,cAAc;IAqB5B,qFAAqF;YACvE,gBAAgB;IAiB9B,sEAAsE;IACtE,OAAO,CAAC,YAAY;IAKpB;;;;;;;;;OASG;IACH,OAAO,CAAC,YAAY;IAyBpB;;;;;;;;;;;;OAYG;YACW,IAAI;IAyBlB;;;OAGG;YACW,OAAO;IAqErB;;;;OAIG;YACW,eAAe;YASf,YAAY;IAK1B,8EAA8E;IAC9E,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAIlD,8EAA8E;YAChE,aAAa;IA4B3B;;;;OAIG;IACH,YAAY,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI;IAoBxC,iGAAiG;IACjG,OAAO,CAAC,WAAW;IAgEnB,mFAAmF;IACnF,OAAO,CAAC,SAAS;CAKlB;AAyID,eAAe,mBAAmB,CAAA"}

package/lib/types/interconnect/types.d.ts

@@ -29,6 +29,22 @@ export declare const INTERCONNECT_TOKEN_REF = "DSH_INTERCONNECT_TOKEN";
  *   an idle agent, so it can sit unread until something else wakes it.
  */
 export type DeliveryMode = 'followup' | 'steer' | 'inject';
+/**
+ * Self-reported identity of the peer that sent a message, carried for reply
+ * attribution and echoed `sessionId` of the sending instance. Address-free on
+ * purpose: every delivery goes over an already-established WebSocket link, so
+ * the receiver addresses a `reply` by recalling the sender's `instanceId` and
+ * using its OWN outbound link to that instance — no origin crosses the wire.
+ * Both fields are sender-supplied and self-reported; the receiver stores them
+ * only to address a `reply`, never as an auth or routing authority (the shared
+ * secret still authenticates the connection itself).
+ */
+export interface SenderIdentity {
+    /** The sender's self-reported instance id (diagnostic, as in `ping`). */
+    readonly instanceId: string;
+    /** Session id on the sender's instance to which a `reply` is addressed. */
+    readonly sessionId: string;
+}
 /**
  * Business payload for the `send` endpoint: deliver one text message to one
  * live session of the receiving instance.
@@ -38,6 +54,12 @@ export interface SendPayload {
     readonly sessionId: string;
     /** Message text delivered to the peer session's inbox. */
     readonly text: string;
+    /**
+     * The sender's identity, so the receiver can attribute the message and
+     * address a reply back. Optional for backward compatibility: a peer running
+     * an older version omits it, and the receiver simply has nothing to reply to.
+     */
+    readonly sender?: SenderIdentity;
     /**
      * Per-message override of the receiver's configured delivery mode. Urgency is
      * a property of one message, not of the link, so a sender may ask to cut into
@@ -72,8 +94,12 @@ export interface SendPayload {
  * - `session-owned-by-subagent` — the session is reserved to subagent routing,
  *   so its parent agent owns delivery. Injecting here would race that parent;
  *   the sender must reach the child through its parent instead.
+ * - `no-sender-known` — a `reply` was addressed to a local session that never
+ *   recorded a sender, either because that session did not receive a message
+ *   through this service or the incoming message carried no `sender` identity
+ *   (an older peer omitted it).
  */
-export type SendFailure = 'session-not-live' | 'unreachable' | 'resume-refused' | 'resume-failed' | 'session-owned-by-subagent';
+export type SendFailure = 'session-not-live' | 'unreachable' | 'resume-refused' | 'resume-failed' | 'session-owned-by-subagent' | 'no-sender-known';
 /** Business result of a `send` endpoint call. */
 export interface SendResult {
     /** True when the target session is live on the receiving instance and the message was delivered. */
@@ -123,22 +149,57 @@ export interface ListResult {
     /** Echoed receiver instance id (diagnostic; never trusted for routing). */
     readonly instance: string;
 }
-/** Outbound listing request: just the receiver origin. */
+/** Outbound listing request: which peer instance to list. */
 export interface ListRequest {
-    /** Receiver origin, e.g. `http://127.0.0.1:3080`. */
-    readonly baseUrl: string;
+    /** Peers' `instanceId` as configured under {@link Config.peers}. */
+    readonly instanceId: string;
 }
-/** Outbound delivery request: receiver origin plus a `send` business payload. */
+/** Outbound delivery request: which peer instance plus a `send` business payload. */
 export interface SendRequest {
-    /** Receiver origin, e.g. `http://127.0.0.1:3080`. */
-    readonly baseUrl: string;
+    /**
+     * The peer instance to deliver to, as configured under {@link Config.peers}.
+     * The origin used to reach it comes from that instance's own link.
+     */
+    readonly instanceId: string;
     readonly sessionId: string;
     readonly text: string;
+    /**
+     * This sender's identity, forwarded so the receiver can attribute the
+     * message and address a reply back.
+     */
+    readonly sender?: SenderIdentity;
     /** Per-message delivery override forwarded to the receiver. */
     readonly delivery?: DeliveryMode;
     /** Ask the receiver to wake a persisted session; see {@link SendPayload.resume}. */
     readonly resume?: boolean;
 }
+/**
+ * Business payload for the `reply` endpoint: deliver one text message back to
+ * the peer that a given local session most recently received a message from.
+ * `sessionId` names the LOCAL session; the outbound target is the sender this
+ * session recorded, so the caller does not need to know the peer's origin or
+ * session id again.
+ */
+export interface ReplyPayload {
+    /** Local session id that received the message being replied to. */
+    readonly sessionId: string;
+    /** Message text delivered back to the recorded sender's session. */
+    readonly text: string;
+    /** Per-message delivery override forwarded to the recalled sender. */
+    readonly delivery?: DeliveryMode;
+    /** Ask the recalled sender's receiver to wake a persisted session. */
+    readonly resume?: boolean;
+}
+/** Outbound reply request: which local session is replying, plus the text. */
+export interface ReplyRequest {
+    /** Local session id that received the message being replied to. */
+    readonly sessionId: string;
+    readonly text: string;
+    /** Per-message delivery override forwarded to the recalled sender. */
+    readonly delivery?: DeliveryMode;
+    /** Ask the recalled sender's receiver to wake a persisted session. */
+    readonly resume?: boolean;
+}
 /**
  * One serializable lifecycle fact pushed from an emitting instance to its
  * peers. `kind` discriminates the union; the remaining fields are the compact
@@ -180,8 +241,10 @@ export interface EventPayload {
 /**
  * One text frame exchanged over a persistent WebSocket peer link. `hello`
  * opens a link with the dialing side's identity; `event` pushes one
- * notification in either direction. Native ws ping/pong carries the heartbeat,
- * so no application-level keepalive frame exists.
+ * notification in either direction; `msg`/`msg-result` carry a
+ * request/response message delivery over the same long-lived link (correlated
+ * by `reqId`). Native ws ping/pong carries the heartbeat, so no application
+ * keepalive frame exists.
  */
 export type LinkFrame = {
     readonly type: 'hello';
@@ -189,6 +252,59 @@ export type LinkFrame = {
 } | {
     readonly type: 'event';
     readonly notification: EventNotification;
+} | {
+    readonly type: 'msg';
+    readonly reqId: string;
+    readonly message: LinkMessage;
+} | {
+    readonly type: 'msg-result';
+    readonly reqId: string;
+    readonly result: SendResult;
+} | {
+    readonly type: 'query';
+    readonly reqId: string;
+    readonly query: QueryMessage;
+} | {
+    readonly type: 'query-result';
+    readonly reqId: string;
+    readonly result: unknown;
+};
+/**
+ * A request/response query carried by `query`/`query-result` frames, used for
+ * the discovery endpoints (`ping`, `list`) over the persistent link. `ping`
+ * answers the peer's identity; `list` answers the peer's live session rows.
+ */
+export type QueryMessage = {
+    readonly kind: 'ping';
+} | {
+    readonly kind: 'list';
+} | {
+    readonly kind: 'event';
+    readonly notification: EventNotification;
+};
+/**
+ * The message-shaped business payload carried by a `msg` link frame. `kind`
+ * picks the delivery semantics: `send` targets the named remote session,
+ * `reply` targets the sender a local session recorded. One tagged union keeps
+ * the frame count down while the receiver dispatches on `kind`.
+ */
+export type LinkMessage = {
+    readonly kind: 'send';
+    readonly sessionId: string;
+    readonly text: string;
+    /** Delivered and attributed upstream exactly as in `SendPayload`. */
+    readonly sender?: SenderIdentity;
+    readonly delivery?: DeliveryMode;
+    readonly resume?: boolean;
+} | {
+    readonly kind: 'reply';
+    /** LOCAL session id that received the message being replied to. */
+    readonly sessionId: string;
+    readonly text: string;
+    /** Attribution for the replying instance, so the peer can reply back. */
+    readonly sender?: SenderIdentity;
+    readonly delivery?: DeliveryMode;
+    readonly resume?: boolean;
 };
 /**
  * Handle to one established outbound WebSocket peer link. `close` tears the
@@ -207,11 +323,19 @@ export interface Config {
     /** Request timeout for outbound deliveries, in milliseconds. */
     readonly requestTimeoutMs: number;
     /**
-     * Peer instance origins to fan local events out to at startup. A runtime
-     * `subscribe` can extend the set without restart; an unset list fans nothing
-     * out until a peer subscribes.
+     * Peer instance routes, keyed by the peer's `instanceId`, valued by the
+     * origin this instance dials to reach that peer (e.g. a tunnel endpoint
+     * `http://127.0.0.1:13080`). At activation each peer is linked over a
+     * persistent WebSocket (heartbeat + reconnect), and every outbound
+     * `send`/`reply`/`ping`/`list` is addressed by `instanceId` through that
+     * instance's own link. An origin is the ONLY routing authority — `instanceId`
+     * is never used to derive an address.
+     *
+     * Fan-out of local lifecycle events also goes to every peer in this map.
+     * A runtime `subscribe(instanceId, origin)` can extend the map without
+     * restart; retuning the origin of an existing peer re-routes it.
      */
-    readonly peers?: string[];
+    readonly peers?: Record<string, string>;
     /**
      * Default mode for inbound `send` messages that carry no per-message
      * override. See {@link DeliveryMode} for what each mode does.