dsh-plugin-subagent-director 0.1.0

package/lib/remote.js

@@ -0,0 +1,254 @@
+import { SettingsConflictError, settingsNamespace, } from '@deepseek-ai/dsh-settings';
+import { SettingsSchema, SUBAGENT_DIRECTOR_SETTINGS_NAMESPACE, } from './settings.js';
+import { SUBAGENT_DIRECTOR_RPC_VIEW, SUBAGENT_DIRECTOR_RPC_MUTATE, } from './bridge-contract.js';
+import { SUBAGENT_DIRECTOR_ROUTE_PATH, buildServerResponse, buildMethodMismatchResponse, buildBadRequestResponse, parseClientRequestEnvelope, isLoopbackHost, endpointFromPath, } from './envelope.js';
+/** Wire route path the bridge owns on the Host web server. */
+export { SUBAGENT_DIRECTOR_ROUTE_PATH as SUBAGENT_DIRECTOR_RPC_CHANNEL };
+/** Endpoint that returns the namespace's redacted wire view. */
+export { SUBAGENT_DIRECTOR_RPC_VIEW };
+/** Endpoint that applies one path-op mutation. */
+export { SUBAGENT_DIRECTOR_RPC_MUTATE };
+/**
+ * Map one redacted settings descriptor to its wire view — mirrors apiproxy's
+ * `namespaceView` (dsh-host-apiproxy/lib/index.js:2385-2399) exactly, so the
+ * client store sees the same `SettingsNamespaceView` shape it already renders.
+ */
+export function toDirectorNamespaceView(descriptor) {
+    return {
+        ns: String(descriptor.ns),
+        schema: descriptor.schema,
+        value: descriptor.value,
+        ...(descriptor.base === undefined ? {} : { base: descriptor.base }),
+        ...(descriptor.user === undefined ? {} : { user: descriptor.user }),
+        applies: descriptor.applies,
+        secrets: (descriptor.secrets ?? []).map((secret) => ({
+            path: [...secret.path],
+            set: secret.set,
+        })),
+        revision: descriptor.revision,
+    };
+}
+/**
+ * Find the Subagent Director namespace in a redacted describe result and map
+ * it to its wire view; `undefined` when the namespace is not registered.
+ */
+export function pickDirectorNamespaceView(descriptors) {
+    for (const descriptor of descriptors) {
+        if (descriptor.ns === SUBAGENT_DIRECTOR_SETTINGS_NAMESPACE) {
+            return toDirectorNamespaceView(descriptor);
+        }
+    }
+    return undefined;
+}
+/**
+ * Read the current redacted namespace view straight from the settings seam.
+ * Exported for reuse by tests and by the bridge handler.
+ */
+export function readDirectorNamespaceView(settings) {
+    const descriptors = settings.describe({ redactSecrets: true });
+    return {
+        writable: settings.writable,
+        view: pickDirectorNamespaceView(descriptors),
+    };
+}
+/** Build the `settings-rejected` RPC error for one seam failure. */
+export function directorRejected(ns, error) {
+    return {
+        code: 'settings-rejected',
+        message: error instanceof Error ? error.message : String(error),
+        details: { ns },
+    };
+}
+/** Build the `settings-conflict` RPC error, mirroring apiproxy's mapping. */
+export function directorConflict(conflict) {
+    // The runtime carries the branded namespace; the service type does not
+    // declare it, so recover it structurally for the details payload.
+    const ns = conflict.ns;
+    return {
+        code: 'settings-conflict',
+        message: conflict.message,
+        details: {
+            ns: ns === undefined ? 'subagent-director' : String(ns),
+            expected: conflict.expected,
+            actual: conflict.actual,
+        },
+    };
+}
+/**
+ * Build the ok payload for the settingsView endpoint.
+ * Mirrors the apiproxy `settings.describe` value minus `hasDocument` (the
+ * bridge does not own the document affordance; the client ignores it).
+ */
+export function directorViewOk(settings) {
+    return { ok: true, value: readDirectorNamespaceView(settings) };
+}
+/**
+ * Execute one path-op mutation against the settings seam and map the outcome
+ * to an RpcResult carrying the new redacted view (or a `settings-conflict` /
+ * `settings-rejected` error). Pure over the injected primitives for testing.
+ */
+export async function directorMutate(mutate, describe, ns, ops, expectedRevision) {
+    const branded = settingsNamespace(ns);
+    try {
+        await mutate(branded, ops, expectedRevision);
+    }
+    catch (error) {
+        if (error instanceof SettingsConflictError) {
+            return { ok: false, error: directorConflict(error) };
+        }
+        return { ok: false, error: directorRejected(ns, error) };
+    }
+    const descriptor = describe({ redactSecrets: true }).find((candidate) => candidate.ns === branded);
+    if (descriptor === undefined) {
+        return {
+            ok: false,
+            error: {
+                code: 'internal',
+                message: 'settings namespace "' + ns + '" was disposed after the mutate',
+                details: {},
+            },
+        };
+    }
+    return { ok: true, value: toDirectorNamespaceView(descriptor) };
+}
+/** Re-export the wire-envelope helpers so tests import them from one place. */
+export { parseClientRequestEnvelope, isLoopbackHost, isLoopbackHostname, endpointFromPath, buildServerResponse, buildMethodMismatchResponse, buildBadRequestResponse, INVALID_REQUEST_RPC_ID, } from './envelope.js';
+/**
+ * The node:http handler for the "/subagent-director" prefix route. Owns the
+ * full response lifecycle. Wire contract mirrors the generic Connection RPC
+ * channel (dsh-client-connection/lib/index.js:275-328):
+ *   - non-POST        → 404 "not found"
+ *   - wrong content-type → 415
+ *   - unparseable JSON body → 400 "body is not JSON"
+ *   - malformed client-request envelope → 200 bad-request (fixed rpcId)
+ *   - method vs endpoint mismatch → 200 bad-request
+ *   - non-loopback Host header → 403 "forbidden" (lightweight trust fence)
+ *   - dispatch error → 500 "handler failure: ..."
+ */
+export function handleDirectorBridgeRequest(settings, req, res) {
+    return handleDirectorBridgeRequestInner(settings, req.url ?? '/', req.headers.host, req, res);
+}
+async function handleDirectorBridgeRequestInner(settings, rawUrl, hostHeader, req, res) {
+    // Non-POST → 404.
+    if (req.method !== 'POST') {
+        sendPlain(res, 404, 'not found');
+        return;
+    }
+    // Content type must be application/json → 415.
+    const contentType = (req.headers['content-type'] ?? '').split(';', 1)[0].trim().toLowerCase();
+    if (contentType !== 'application/json') {
+        sendPlain(res, 415, 'content type must be application/json');
+        return;
+    }
+    // Loopback Host fence → 403.
+    if (hostHeader === undefined || !isLoopbackHost(hostHeader)) {
+        sendPlain(res, 403, 'forbidden');
+        return;
+    }
+    // Read the JSON body → 400 on unparseable.
+    const raw = await readBody(req);
+    let body;
+    try {
+        body = raw.length === 0 ? {} : JSON.parse(raw);
+    }
+    catch {
+        sendPlain(res, 400, 'body is not JSON');
+        return;
+    }
+    // Envelope validation → 200 bad-request.
+    const parsed = parseClientRequestEnvelope(body);
+    if (!parsed.ok) {
+        sendJson(res, 200, buildBadRequestResponse(parsed.issues));
+        return;
+    }
+    const envelope = parsed.envelope;
+    // Method must match the path-derived endpoint.
+    const endpoint = endpointFromPath(SUBAGENT_DIRECTOR_ROUTE_PATH, pathnameOf(rawUrl));
+    if (endpoint === undefined || envelope.method !== endpoint) {
+        sendJson(res, 200, buildMethodMismatchResponse(envelope.rpcId, envelope.method, endpoint ?? '(invalid path)'));
+        return;
+    }
+    // Dispatch.
+    const result = await dispatchBridgeEndpoint(settings, endpoint, envelope.payload);
+    sendJson(res, 200, buildServerResponse(envelope.rpcId, result));
+}
+/** Dispatch one validated endpoint to the settings seam. Throws on unknown endpoint. */
+async function dispatchBridgeEndpoint(settings, endpoint, payload) {
+    if (endpoint === SUBAGENT_DIRECTOR_RPC_VIEW) {
+        return directorViewOk(settings);
+    }
+    if (endpoint === SUBAGENT_DIRECTOR_RPC_MUTATE) {
+        const request = payload;
+        if (request?.ns !== String(SUBAGENT_DIRECTOR_SETTINGS_NAMESPACE)) {
+            return {
+                ok: false,
+                error: {
+                    code: 'bad-request',
+                    message: 'settingsMutate: expected ns "' + String(SUBAGENT_DIRECTOR_SETTINGS_NAMESPACE) + '"',
+                    details: { issues: [] },
+                },
+            };
+        }
+        const ops = (request?.ops ?? []);
+        return directorMutate((n, o, r) => settings.mutate(n, o, r), (opts) => settings.describe(opts), String(SUBAGENT_DIRECTOR_SETTINGS_NAMESPACE), ops, request?.expectedRevision);
+    }
+    throw new Error('unknown bridge endpoint ' + JSON.stringify(endpoint));
+}
+/**
+ * Install the Subagent Director setting bridge on the Host web server via a
+ * self-published prefix route. Lazy-acquires `ctx.webServer`; a deployment
+ * without that service (e.g. headless) logs a debug line naming the missing
+ * service and installs nothing. Returns a disposer.
+ */
+export function installDirectorRemoteBridge(ctx) {
+    const settings = ctx.get('settings');
+    const webServer = ctx.get('webServer');
+    if (settings === undefined || webServer === undefined) {
+        ctx.logger.debug('[subagent-director] settings bridge not installed ' +
+            '(settings:' + String(settings !== undefined) +
+            ', webServer:' + String(webServer !== undefined) + ')');
+        return () => { };
+    }
+    const handler = (req, res) => {
+        handleDirectorBridgeRequest(settings, req, res).catch((error) => {
+            // Dispatch throw (unknown endpoint or a settings seam blow-up) → 500.
+            if (res.headersSent) {
+                res.destroy();
+                return;
+            }
+            sendPlain(res, 500, 'handler failure: ' + String(error));
+        });
+    };
+    return ctx.effect(() => webServer.register({ kind: 'prefix', path: SUBAGENT_DIRECTOR_ROUTE_PATH, handler }), 'subagent-director: settings bridge route');
+}
+/** Collect the full request body as a UTF-8 string. */
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        req.on('data', (chunk) => chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)));
+        req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
+        req.on('error', reject);
+    });
+}
+/** Pathname portion of a raw request URL (safe for endpointFromPath). */
+function pathnameOf(rawUrl) {
+    try {
+        return new URL(rawUrl, 'http://dsh.internal').pathname;
+    }
+    catch {
+        return rawUrl;
+    }
+}
+/** Write a plain-text response with the given status. */
+function sendPlain(res, status, text) {
+    res.writeHead(status, { 'content-type': 'text/plain; charset=utf-8' });
+    res.end(text);
+}
+/** Write a JSON response with the given status. */
+function sendJson(res, status, payload) {
+    res.writeHead(status, { 'content-type': 'application/json; charset=utf-8' });
+    res.end(JSON.stringify(payload));
+}
+/** Convenience re-export for the namespaced schema used to document the view. */
+export { SettingsSchema };
+//# sourceMappingURL=remote.js.map

package/lib/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../src/remote.ts"],"names":[],"mappings":"AAgCA,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAGlB,MAAM,2BAA2B,CAAC;AAQnC,OAAO,EACL,cAAc,EACd,oCAAoC,GACrC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAG7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,cAAc,EACd,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AAEvB,8DAA8D;AAC9D,OAAO,EAAE,4BAA4B,IAAI,6BAA6B,EAAE,CAAC;AACzE,gEAAgE;AAChE,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACtC,kDAAkD;AAClD,OAAO,EAAE,4BAA4B,EAAE,CAAC;AAIxC;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAA8B;IACpE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACzB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QACnE,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QACnE,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACnD,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;YACtB,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,CAAC,CAAC;QACH,QAAQ,EAAE,UAAU,CAAC,QAAQ;KAC9B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,WAA0C;IAE1C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,EAAE,KAAK,oCAAoC,EAAE,CAAC;YAC3D,OAAO,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAA0B;IAClE,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,yBAAyB,CAAC,WAAW,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,EAAU,EAAE,KAAc;IACzD,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/D,OAAO,EAAE,EAAE,EAAE,EAAE;KAChB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,QAA+B;IAC9D,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,EAAE,GAAI,QAAwC,CAAC,EAAE,CAAC;IACxD,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE;YACP,EAAE,EAAE,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAA0B;IACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAkC,EAClC,QAAsC,EACtC,EAAU,EACV,GAAkC,EAClC,gBAAoC;IAEpC,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACvD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CACxC,CAAC;IACF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,sBAAsB,GAAG,EAAE,GAAG,iCAAiC;gBACxE,OAAO,EAAE,EAAE;aACZ;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,+EAA+E;AAC/E,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAA0B,EAC1B,GAAoB,EACpB,GAAmB;IAEnB,OAAO,gCAAgC,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAChG,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,QAA0B,EAC1B,MAAc,EACd,UAA8B,EAC9B,GAAoB,EACpB,GAAmB;IAEnB,kBAAkB;IAClB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,+CAA+C;IAC/C,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9F,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;QACvC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uCAAuC,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IACD,6BAA6B;IAC7B,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,2CAA2C;IAC3C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,yCAAyC;IACzC,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,4BAA4B,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACpF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,2BAA2B,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,IAAI,gBAAgB,CAAC,CAAC,CAAC;QAC/G,OAAO;IACT,CAAC;IACD,YAAY;IACZ,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,wFAAwF;AACxF,KAAK,UAAU,sBAAsB,CACnC,QAA0B,EAC1B,QAAgB,EAChB,OAAgB;IAEhB,IAAI,QAAQ,KAAK,0BAA0B,EAAE,CAAC;QAC5C,OAAO,cAAc,CAAC,QAAQ,CAAuB,CAAC;IACxD,CAAC;IACD,IAAI,QAAQ,KAAK,4BAA4B,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAuC,CAAC;QACxD,IAAI,OAAO,EAAE,EAAE,KAAK,MAAM,CAAC,oCAAoC,CAAC,EAAE,CAAC;YACjE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,+BAA+B,GAAG,MAAM,CAAC,oCAAoC,CAAC,GAAG,GAAG;oBAC7F,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;iBACxB;aACF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAyB,CAAC;QACzD,OAAO,cAAc,CACnB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EACrC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EACjC,MAAM,CAAC,oCAAoC,CAAC,EAC5C,GAAG,EACH,OAAO,EAAE,gBAAgB,CAC1B,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAY;IACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiC,CAAC;IACrE,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CACd,oDAAoD;YAClD,YAAY,GAAG,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC;YAC7C,cAAc,GAAG,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,GAAG,GAAG,CACzD,CAAC;QACF,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAoB,EAAE,GAAmB,EAAwB,EAAE;QAClF,2BAA2B,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9D,sEAAsE;YACtE,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,GAAG,CAAC,MAAM,CACf,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,CAAC,EACzF,0CAA0C,CAC3C,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5F,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAY;IAClE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACvE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,mDAAmD;AACnD,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,OAA+B;IACpF,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC;IAC7E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,iFAAiF;AACjF,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/lib/route-resolver.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Route resolver - the pure-function core of Subagent Director (design section 6).
+ *
+ * Resolves which LLM provider/model an agentOptions should carry for one
+ * subagent delegation, walking the four-layer fallback chain:
+ *
+ *   1. call     - explicit arguments on the tool call (per-call override)
+ *   2. role     - the role template bound by args.role (or defaultRole)
+ *   3. default  - plugin default provider/model from settings
+ *   4. inherit  - nothing configured: do NOT inject anything, let the seam
+ *                 inherit the parent agent (zero intrusion, AC-3.2)
+ *
+ * Field resolution is independent: each of provider/model/reasoningEffort is
+ * filled by the highest-priority layer that specifies it. persona and
+ * toolFilter come ONLY from the role layer.
+ *
+ * The function is pure, synchronous, and side-effect-free (<1ms) so it is
+ * trivially unit-testable and replayable (FR-3.3, NFR-2).
+ *
+ * NOTE on the layer field: because resolution is field-level independent, one
+ * delegation can draw different fields from different layers. layer reports
+ * the highest-priority layer that contributed at least one resolved
+ * agentOptions field ('inherit' when none did) - a single value kept for
+ * observability (section 10), while per-field provenance lives implicitly in
+ * the resolved fields.
+ *
+ * NOTE on reasoningEffort: the DSH AgentOptions shape only carries
+ * provider/model/maxTokens (dsh-agent runtime-types). reasoningEffort is
+ * therefore surfaced on the result SEPARATELY from agentOptions so a caller
+ * can surface/validate it without pretending it belongs on
+ * SubagentStartRequest.agentOptions.
+ */
+import type { AgentOptions } from '@deepseek-ai/dsh-agent';
+/** Which layer supplied the resolved agentOptions fields. */
+export type RouteLayer = 'call' | 'role' | 'default' | 'inherit';
+/** A user-defined role template (design section 5.2). */
+export interface RoleTemplate {
+    /** Required, non-empty display name. */
+    displayName: string;
+    /** Required, non-empty delegation guidance shown to the main agent. */
+    description: string;
+    /** Persona text injected into the subagent (role-layer only). */
+    persona?: string;
+    /** LLM route provider override (role-layer only). */
+    provider?: string;
+    /** Model id override (role-layer only). */
+    model?: string;
+    /** Reasoning effort override (role-layer only; advisory). */
+    reasoningEffort?: string;
+    /** Tool scoping (role-layer only; requires toolFilter capability at runtime). */
+    toolFilter?: {
+        allow?: string[];
+        deny?: string[];
+    };
+}
+/** Subagent Director settings namespace (design section 5.2). */
+export interface SubagentDirectorSettings {
+    /** Default LLM route provider (default-layer). */
+    defaultProvider?: string;
+    /** Default model id (default-layer). */
+    defaultModel?: string;
+    /** Default reasoning effort (default-layer; advisory). */
+    defaultReasoningEffort?: string;
+    /** Id of the role template used when no role is given (default-layer). */
+    defaultRole?: string;
+    /** Whether an invalid role-bound model falls back to the parent (default true). */
+    fallbackOnInvalid?: boolean;
+    /** Named role templates. */
+    roles?: Record<string, RoleTemplate>;
+}
+/** Explicit per-call arguments accepted by the subagent_role tool. */
+export interface RouteCallArgs {
+    role?: string;
+    provider?: string;
+    model?: string;
+    reasoningEffort?: string;
+}
+/** The parent agent's options (inherit-layer reference; not injected). */
+export interface RouteParent {
+    provider?: string;
+    model?: string;
+}
+/** Inputs to a single route resolution. */
+export interface RouteInput {
+    args?: RouteCallArgs;
+    settings: SubagentDirectorSettings;
+    parent?: RouteParent;
+}
+/** A tool scoping restriction mirroring dsh-tools ToolRestriction. */
+export interface RouteToolFilter {
+    allow?: string[];
+    deny?: string[];
+}
+/** The result of one route resolution. */
+export interface RouteResult {
+    /** Highest-priority layer that supplied a resolved agentOptions field. */
+    layer: RouteLayer;
+    /**
+     * Resolved provider/model overrides to inject into
+     * SubagentStartRequest.agentOptions. Present (non-empty) only when a
+     * non-inherit layer configured at least one of these fields; otherwise
+     * undefined so the seam inherits the parent (AC-3.2).
+     */
+    agentOptions?: Pick<AgentOptions, 'provider' | 'model'>;
+    /** Resolved reasoning effort (advisory; NOT part of AgentOptions). */
+    reasoningEffort?: string;
+    /** Resolved role id when a valid role template was bound (role layer). */
+    roleId?: string;
+    /** Persona contributed by the role layer, when a valid role was bound. */
+    persona?: string;
+    /** Tool filter contributed by the role layer, when a valid role was bound. */
+    toolFilter?: RouteToolFilter;
+    /** Human-readable warnings for degraded references (nonexistent role, etc.). */
+    warnings: string[];
+}
+/** Core pure resolution logic. */
+export declare function resolveRoute(input: RouteInput): RouteResult;
+//# sourceMappingURL=route-resolver.d.ts.map

package/lib/route-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-resolver.d.ts","sourceRoot":"","sources":["../src/route-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D,6DAA6D;AAC7D,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAEjE,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,UAAU,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACpD;AAED,iEAAiE;AACjE,MAAM,WAAW,wBAAwB;IACvC,kDAAkD;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,4BAA4B;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACtC;AAED,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,2CAA2C;AAC3C,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,wBAAwB,CAAC;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,0CAA0C;AAC1C,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,KAAK,EAAE,UAAU,CAAC;IAClB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC;IACxD,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,gFAAgF;IAChF,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAMD,kCAAkC;AAClC,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CA2E3D"}

package/lib/route-resolver.js

@@ -0,0 +1,71 @@
+function isEmpty(value) {
+    return value === undefined || value === '';
+}
+/** Core pure resolution logic. */
+export function resolveRoute(input) {
+    const { args = {}, settings, parent } = input;
+    const warnings = [];
+    // ---- Layer 1: per-call explicit arguments -------------------------------
+    const callProvider = isEmpty(args.provider) ? undefined : args.provider;
+    const callModel = isEmpty(args.model) ? undefined : args.model;
+    const callEffort = isEmpty(args.reasoningEffort) ? undefined : args.reasoningEffort;
+    // ---- Layer 2: role template ----------------------------------------------
+    const roles = settings.roles ?? {};
+    const explicitRole = isEmpty(args.role) ? undefined : args.role;
+    const roleIdRaw = explicitRole ?? settings.defaultRole;
+    let role;
+    let resolvedRoleId;
+    if (roleIdRaw !== undefined) {
+        const bound = roles[roleIdRaw];
+        if (bound !== undefined) {
+            role = bound;
+            resolvedRoleId = roleIdRaw;
+        }
+        else {
+            warnings.push('subagent-director: role "' + roleIdRaw + '" does not exist; its binding (persona/provider/model) is skipped');
+        }
+    }
+    const roleProvider = role === undefined || isEmpty(role.provider) ? undefined : role.provider;
+    const roleModel = role === undefined || isEmpty(role.model) ? undefined : role.model;
+    const roleEffort = role === undefined || isEmpty(role.reasoningEffort) ? undefined : role.reasoningEffort;
+    // ---- Layer 3: plugin defaults ----------------------------------------------
+    const defaultProvider = isEmpty(settings.defaultProvider) ? undefined : settings.defaultProvider;
+    const defaultModel = isEmpty(settings.defaultModel) ? undefined : settings.defaultModel;
+    const defaultEffort = isEmpty(settings.defaultReasoningEffort)
+        ? undefined
+        : settings.defaultReasoningEffort;
+    // ---- Field-level resolution: highest-priority layer per field --------------
+    const provider = callProvider ?? roleProvider ?? defaultProvider;
+    const model = callModel ?? roleModel ?? defaultModel;
+    const reasoningEffort = callEffort ?? roleEffort ?? defaultEffort;
+    // ---- Build the output -------------------------------------------------------
+    const agentOptions = provider !== undefined || model !== undefined
+        ? {
+            ...(provider !== undefined ? { provider } : {}),
+            ...(model !== undefined ? { model } : {}),
+        }
+        : undefined;
+    // Determine the dominant (highest-priority) contributing layer for agentOptions.
+    let layer = 'inherit';
+    if (provider !== undefined || model !== undefined) {
+        if (callProvider !== undefined || callModel !== undefined) {
+            layer = 'call';
+        }
+        else if (roleProvider !== undefined || roleModel !== undefined) {
+            layer = 'role';
+        }
+        else {
+            layer = 'default';
+        }
+    }
+    return {
+        layer,
+        ...(agentOptions !== undefined ? { agentOptions } : {}),
+        ...(reasoningEffort !== undefined ? { reasoningEffort } : {}),
+        ...(resolvedRoleId !== undefined ? { roleId: resolvedRoleId } : {}),
+        ...(role !== undefined && !isEmpty(role.persona) ? { persona: role.persona } : {}),
+        ...(role !== undefined && role.toolFilter !== undefined ? { toolFilter: role.toolFilter } : {}),
+        warnings,
+    };
+}
+//# sourceMappingURL=route-resolver.js.map

package/lib/route-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-resolver.js","sourceRoot":"","sources":["../src/route-resolver.ts"],"names":[],"mappings":"AAyHA,SAAS,OAAO,CAAC,KAAyB;IACxC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC;AAC7C,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,4EAA4E;IAC5E,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IACxE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAC/D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;IAEpF,6EAA6E;IAC7E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAChE,MAAM,SAAS,GAAG,YAAY,IAAI,QAAQ,CAAC,WAAW,CAAC;IAEvD,IAAI,IAA8B,CAAC;IACnC,IAAI,cAAkC,CAAC;IACvC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,GAAG,KAAK,CAAC;YACb,cAAc,GAAG,SAAS,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CACX,2BAA2B,GAAG,SAAS,GAAG,mEAAmE,CAC9G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC9F,MAAM,SAAS,GAAG,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IACrF,MAAM,UAAU,GACd,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;IAEzF,+EAA+E;IAC/E,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;IACjG,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IACxF,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAC5D,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAEpC,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,YAAY,IAAI,YAAY,IAAI,eAAe,CAAC;IACjE,MAAM,KAAK,GAAG,SAAS,IAAI,SAAS,IAAI,YAAY,CAAC;IACrD,MAAM,eAAe,GAAG,UAAU,IAAI,UAAU,IAAI,aAAa,CAAC;IAElE,gFAAgF;IAChF,MAAM,YAAY,GAChB,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;QAC3C,CAAC,CAAC;YACE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C;QACH,CAAC,CAAC,SAAS,CAAC;IAEhB,iFAAiF;IACjF,IAAI,KAAK,GAAe,SAAS,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAClD,IAAI,YAAY,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1D,KAAK,GAAG,MAAM,CAAC;QACjB,CAAC;aAAM,IAAI,YAAY,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACjE,KAAK,GAAG,MAAM,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/lib/settings.d.ts

@@ -0,0 +1,157 @@
+/**
+ * Settings namespace, schema, and write-time validation for Subagent Director
+ * (design section 5.2).
+ *
+ * This module owns the "subagent-director" settings namespace. It re-exports
+ * the role/settings types from ./route-resolver (single source of truth) and
+ * registers them with the canonical optional-settings consumer wiring so a
+ * deployment without a settings provider keeps working off its composition
+ * config (zero intrusion).
+ *
+ * Layering (design 5.2): the schemastery schema stays coercive/permissive
+ * (all fields optional, roles a string-keyed dict) so an absent section
+ * resolves cleanly; cross-field / semantic constraints that the schema cannot
+ * express are enforced at WRITE time by validate(), which throws to refuse the
+ * write exactly as SettingsRegisterOptions.validate / SettingsSectionHooks.validate
+ * demand (dsh-settings/lib/types/index.d.ts:24-48, 307-341).
+ */
+import { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+import { type SettingsSectionHooks } from '@deepseek-ai/dsh-settings';
+import type { SubagentDirectorSettings } from './route-resolver.js';
+/** Settings namespace for Subagent Director (design section 0 naming resolution). */
+export declare const SUBAGENT_DIRECTOR_SETTINGS_NAMESPACE: import("@deepseek-ai/dsh-settings").SettingsNamespace;
+export type { RoleTemplate, SubagentDirectorSettings } from './route-resolver.js';
+/** Schemastery schema for one role template. All fields optional so a partial /
+ * absent role resolves; semantic requirements are enforced by validate(). */
+export declare const RoleTemplateSchema: z<Schemastery.ObjectS<{
+    displayName: z<string, string>;
+    description: z<string, string>;
+    persona: z<string, string>;
+    provider: z<string, string>;
+    model: z<string, string>;
+    reasoningEffort: z<string, string>;
+    toolFilter: z<Schemastery.ObjectS<{
+        allow: z<string[], string[]>;
+        deny: z<string[], string[]>;
+    }>, Schemastery.ObjectT<{
+        allow: z<string[], string[]>;
+        deny: z<string[], string[]>;
+    }>>;
+}>, Schemastery.ObjectT<{
+    displayName: z<string, string>;
+    description: z<string, string>;
+    persona: z<string, string>;
+    provider: z<string, string>;
+    model: z<string, string>;
+    reasoningEffort: z<string, string>;
+    toolFilter: z<Schemastery.ObjectS<{
+        allow: z<string[], string[]>;
+        deny: z<string[], string[]>;
+    }>, Schemastery.ObjectT<{
+        allow: z<string[], string[]>;
+        deny: z<string[], string[]>;
+    }>>;
+}>>;
+/**
+ * Schemastery schema for the Subagent Director settings section. Every field is
+ * optional (schemastery object fields are optional by default); roles is a
+ * string-keyed dict of RoleTemplateSchema.
+ */
+export declare const SettingsSchema: z<Schemastery.ObjectS<{
+    defaultProvider: z<string, string>;
+    defaultModel: z<string, string>;
+    defaultReasoningEffort: z<string, string>;
+    defaultRole: z<string, string>;
+    fallbackOnInvalid: z<boolean, boolean>;
+    roles: z<import("@deepseek-ai/cosmokit").Dict<{
+        displayName?: string | null | undefined;
+        description?: string | null | undefined;
+        persona?: string | null | undefined;
+        provider?: string | null | undefined;
+        model?: string | null | undefined;
+        reasoningEffort?: string | null | undefined;
+        toolFilter?: ({
+            allow?: string[] | null | undefined;
+            deny?: string[] | null | undefined;
+        } & import("@deepseek-ai/cosmokit").Dict) | null | undefined;
+    } & import("@deepseek-ai/cosmokit").Dict, string>, import("@deepseek-ai/cosmokit").Dict<Schemastery.ObjectT<{
+        displayName: z<string, string>;
+        description: z<string, string>;
+        persona: z<string, string>;
+        provider: z<string, string>;
+        model: z<string, string>;
+        reasoningEffort: z<string, string>;
+        toolFilter: z<Schemastery.ObjectS<{
+            allow: z<string[], string[]>;
+            deny: z<string[], string[]>;
+        }>, Schemastery.ObjectT<{
+            allow: z<string[], string[]>;
+            deny: z<string[], string[]>;
+        }>>;
+    }>, string>>;
+}>, Schemastery.ObjectT<{
+    defaultProvider: z<string, string>;
+    defaultModel: z<string, string>;
+    defaultReasoningEffort: z<string, string>;
+    defaultRole: z<string, string>;
+    fallbackOnInvalid: z<boolean, boolean>;
+    roles: z<import("@deepseek-ai/cosmokit").Dict<{
+        displayName?: string | null | undefined;
+        description?: string | null | undefined;
+        persona?: string | null | undefined;
+        provider?: string | null | undefined;
+        model?: string | null | undefined;
+        reasoningEffort?: string | null | undefined;
+        toolFilter?: ({
+            allow?: string[] | null | undefined;
+            deny?: string[] | null | undefined;
+        } & import("@deepseek-ai/cosmokit").Dict) | null | undefined;
+    } & import("@deepseek-ai/cosmokit").Dict, string>, import("@deepseek-ai/cosmokit").Dict<Schemastery.ObjectT<{
+        displayName: z<string, string>;
+        description: z<string, string>;
+        persona: z<string, string>;
+        provider: z<string, string>;
+        model: z<string, string>;
+        reasoningEffort: z<string, string>;
+        toolFilter: z<Schemastery.ObjectS<{
+            allow: z<string[], string[]>;
+            deny: z<string[], string[]>;
+        }>, Schemastery.ObjectT<{
+            allow: z<string[], string[]>;
+            deny: z<string[], string[]>;
+        }>>;
+    }>, string>>;
+}>>;
+/**
+ * Write-time validator for a resolved settings section (design 5.2).
+ *
+ * Throws to refuse the write that produced value, as the settings seam
+ * contract requires. Checks:
+ *  - every role key is kebab-case;
+ *  - every role's displayName and description are present and non-empty;
+ *  - defaultRole, when set, references an existing role key;
+ *  - every explicitly-set provider is a non-empty string.
+ *
+ * @param value - the resolved section, schema-valid by construction.
+ */
+export declare function validateDirectorSettings(value: SubagentDirectorSettings): void;
+/**
+ * Install the Subagent Director settings section through the canonical
+ * optional-settings consumer wiring.
+ *
+ * Mirrors dsh-agent-default-model/lib/index.js's optional pattern: the
+ * registration rides the scoped fiber, so a deployment with no settings
+ * service simply never mounts it. This helper guards that explicitly for
+ * readability and logs a debug line when the service is absent so the gradual
+ * fall-back to the composition config is observable.
+ *
+ * @param ctx - consumer plugin context owning the wiring.
+ * @param entry - the consumer's composition-layer config, used as the settings
+ *   base while a provider is absent.
+ * @param hooks - source sink and change notification (plus optional validate).
+ */
+export declare function installDirectorSettings(ctx: Context, entry: SubagentDirectorSettings, hooks: SettingsSectionHooks<SubagentDirectorSettings>): void;
+/** Convenience exported alias used by tests. */
+export { SettingsSchema as SubagentDirectorSettingsSchema };
+//# sourceMappingURL=settings.d.ts.map

package/lib/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,CAAC,MAAM,0BAA0B,CAAC;AACzC,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAgB,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAElF,qFAAqF;AACrF,eAAO,MAAM,oCAAoC,uDAAyC,CAAC;AAE3F,YAAY,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAKlF;6EAC6E;AAC7E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAW7B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAOzB,CAAC;AAWH;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,wBAAwB,GAAG,IAAI,CA4B9E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,wBAAwB,EAC/B,KAAK,EAAE,oBAAoB,CAAC,wBAAwB,CAAC,GACpD,IAAI,CAQN;AAED,gDAAgD;AAChD,OAAO,EAAE,cAAc,IAAI,8BAA8B,EAAE,CAAC"}