dsh-remote-local-plugin 0.8.6 → 0.8.8

package/README.md

@@ -7,7 +7,7 @@ Remote development that appears as ordinary local sessions.
 This plugin targets the official **DSH Desktop** application. Tested/supported versions:
 
 - [DSH Desktop](https://github.com/deepseek-ai/deepseek-harness) [`0.2.1-rc.2`](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.2.1-rc.2)
-- Plugin [`0.8.6`](https://www.npmjs.com/package/dsh-remote-local-plugin)
+- Plugin [`0.8.8`](https://www.npmjs.com/package/dsh-remote-local-plugin)
 - Remote DSH [`0.2.1-rc.2`](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.2.1-rc.2)
 - Remote [Node.js `22.19+`](https://nodejs.org/en/download) on Linux/macOS
 

package/lib/index.js

@@ -1,4 +1,4 @@
-/* dsh-remote-local-plugin@0.8.6 — bundled host entry */
+/* dsh-remote-local-plugin@0.8.8 — bundled host entry */
 
 // src/index.ts
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
@@ -664,14 +664,14 @@ var RemoteMirrorService = class {
     const workspaces = await this.#hosts.workspaces(hostId);
     for (const workspace of workspaces) {
       if (isTestHidden(workspace.path, workspace.workspaceId, this.#testVisibility)) continue;
-      const sessions = await this.#hosts.sessions(hostId, workspace.workspaceId);
+      const sessions = await this.#hosts.sessions(hostId, workspace.workspaceId, true);
       const summary2 = sessions.sessions.find((item) => item.sessionId === remoteSessionId);
       if (summary2 === void 0) continue;
       const localWorkspace2 = await this.#ensureWorkspace(host, workspace);
       const record = await this.#ensureMirror(host, summary2, localWorkspace2, workspace.path);
       return record?.localSessionId;
     }
-    const all = await this.#hosts.sessions(hostId);
+    const all = await this.#hosts.sessions(hostId, void 0, true);
     const summary = all.sessions.find((item) => item.sessionId === remoteSessionId);
     if (summary === void 0) return void 0;
     if (summary.cwd !== null && isTestHidden(summary.cwd, "", this.#testVisibility)) return void 0;
@@ -742,24 +742,31 @@ var RemoteMirrorService = class {
     await this.#reconcileTestHidden(host);
     const workspaces = await this.#hosts.workspaces(host.id);
     const covered = /* @__PURE__ */ new Set();
+    const subagents = /* @__PURE__ */ new Set();
     const byPath = /* @__PURE__ */ new Map();
     for (const workspace of workspaces) {
       if (isTestHidden(workspace.path, workspace.workspaceId, this.#testVisibility)) {
-        const sessions2 = await this.#hosts.sessions(host.id, workspace.workspaceId);
+        const sessions2 = await this.#hosts.sessions(host.id, workspace.workspaceId, true);
         for (const summary of sessions2.sessions) covered.add(summary.sessionId);
         continue;
       }
       const local = await this.#ensureWorkspace(host, workspace);
       byPath.set(workspace.path, { workspace: local, anchor: this.#anchorFor(local) });
-      const sessions = await this.#hosts.sessions(host.id, workspace.workspaceId);
+      const sessions = await this.#hosts.sessions(host.id, workspace.workspaceId, true);
       for (const summary of sessions.sessions) {
         covered.add(summary.sessionId);
+        if (summary.origin === "subagent") {
+          subagents.add(summary.sessionId);
+          continue;
+        }
         await this.#ensureMirror(host, summary, local, workspace.path);
       }
     }
-    const all = await this.#hosts.sessions(host.id);
+    const all = await this.#hosts.sessions(host.id, void 0, true);
     for (const summary of all.sessions) {
+      if (summary.origin === "subagent") subagents.add(summary.sessionId);
       if (covered.has(summary.sessionId)) continue;
+      if (summary.origin === "subagent") continue;
       if (summary.cwd !== null && isTestHidden(summary.cwd, "", this.#testVisibility)) continue;
       const workspace = summary.cwd === null ? void 0 : byPath.get(summary.cwd);
       if (workspace !== void 0) {
@@ -769,8 +776,47 @@ var RemoteMirrorService = class {
       const ungrouped = await this.#ensureUngroupedWorkspace(host, summary.cwd ?? "ungrouped");
       await this.#ensureMirror(host, summary, ungrouped.workspace, ungrouped.anchor);
     }
+    await this.#pruneMirroredSubagents(host.id, subagents);
+  }
+  /** Remove local mirrors for remote subagent Sessions, including stale rows. */
+  async #pruneMirroredSubagents(hostId, subagents) {
+    let changed = false;
+    for (const [ref, record] of Object.entries(this.#state.sessions)) {
+      if (record.hostId !== hostId || !subagents.has(record.remoteSessionId)) continue;
+      const runtime = this.#runtimes.get(record.localSessionId);
+      if (runtime !== void 0) {
+        runtime.stopped = true;
+        if (runtime.timer !== void 0) clearTimeout(runtime.timer);
+        runtime.stream?.abort();
+        runtime.assistant?.abort();
+        this.#runtimes.delete(record.localSessionId);
+      }
+      const registration = this.#registrations.get(record.localSessionId);
+      if (registration !== void 0) {
+        registration();
+        this.#registrations.delete(record.localSessionId);
+      }
+      await this.#archive(record.localSessionId);
+      delete this.#state.sessions[ref];
+      changed = true;
+    }
+    if (!changed) return;
+    for (const [ref, workspace] of Object.entries(this.#state.workspaces)) {
+      if (workspace.hostId !== hostId || workspace.remoteWorkspaceId !== null) continue;
+      const used = Object.values(this.#state.sessions).some(
+        (session) => session.hostId === hostId && session.anchor === workspace.anchor
+      );
+      if (used) continue;
+      try {
+        await this.#workspaceRegistry.delete(workspace.localWorkspaceId);
+      } catch {
+      }
+      delete this.#state.workspaces[ref];
+    }
+    await this.#save();
   }
   /**
+   * Apply the test-only manifest to already-mirrored workspaces. Hidden entries  /**
    * Apply the test-only manifest to already-mirrored workspaces. Hidden entries
    * archive local Sessions and remove the local workspace row; removing an
    * entry unarchives the Sessions and lets the normal sync rebuild the row.
@@ -1061,6 +1107,13 @@ var RemoteMirrorService = class {
     runtime.agent = agent;
     this.#runtimes.set(record.localSessionId, runtime);
     this.#registrations.set(record.localSessionId, this.#agents.enter(agent, void 0));
+    const localMode = this.#localSandboxMode(session);
+    const remoteMode = latestRemoteSandboxMode(snapshot.events);
+    if (localMode !== void 0 && remoteMode !== void 0 && localMode !== remoteMode) {
+      void this.#hosts.setSandboxMode(record.hostId, record.remoteSessionId, localMode).catch((error) => {
+        this.#ctx.logger.warn("dsh-remote-local: initial sandbox mode failed: %s", String(error));
+      });
+    }
     await this.#save();
     this.#schedule(runtime);
     if (live) {
@@ -1196,9 +1249,18 @@ var RemoteMirrorService = class {
   }
   #onLocalSessionEvent(session, event) {
     const candidate = event;
-    if (candidate.type !== "model/selection") return;
+    if (candidate.type !== "model/selection" && candidate.type !== "sandbox/mode") return;
     const runtime = [...this.#runtimes.values()].find((item) => item.session.id === session.id);
     if (runtime === void 0 || runtime.stopped || runtime.applyingRemote) return;
+    if (candidate.type === "sandbox/mode") {
+      const mode = candidate.data.mode;
+      if (mode !== "read-only" && mode !== "workspace-write" && mode !== "danger-full-access") return;
+      void this.#hosts.setSandboxMode(runtime.record.hostId, runtime.record.remoteSessionId, mode).catch((error) => {
+        runtime.lastError = error instanceof Error ? error.message : String(error);
+        this.#ctx.logger.warn("dsh-remote-local: remote sandbox mode failed: %s", runtime.lastError);
+      });
+      return;
+    }
     const record = candidate.data;
     if (typeof record.provider !== "string" || typeof record.model !== "string") return;
     const selection = {
@@ -1212,6 +1274,11 @@ var RemoteMirrorService = class {
       this.#ctx.logger.warn("dsh-remote-local: remote model selection failed: %s", runtime.lastError);
     });
   }
+  #localSandboxMode(session) {
+    const projections = this.#ctx.get("sessionProjections");
+    const mode = projections?.stateOf?.(session, "sandboxMode");
+    return mode === "read-only" || mode === "workspace-write" || mode === "danger-full-access" ? mode : void 0;
+  }
   #defaultSelection() {
     const defaults = this.#ctx.get("agentDefaultModel");
     const candidate = defaults?.currentSelection?.();
@@ -1468,6 +1535,15 @@ function latestSelection(session) {
   }
   return void 0;
 }
+function latestRemoteSandboxMode(events) {
+  for (let index = events.length - 1; index >= 0; index -= 1) {
+    const event = events[index];
+    if (event === void 0 || event.type !== "sandbox/mode") continue;
+    const mode = event.data.mode;
+    if (mode === "read-only" || mode === "workspace-write" || mode === "danger-full-access") return mode;
+  }
+  return void 0;
+}
 function contentText(message) {
   if (typeof message === "string") return message;
   if (typeof message !== "object" || message === null) return "";
@@ -2225,6 +2301,9 @@ function sessionPath(sessionId) {
 function sessionModelPath(sessionId) {
   return `${sessionPath(sessionId)}/model`;
 }
+function sessionSandboxModePath(sessionId) {
+  return `${sessionPath(sessionId)}/sandbox`;
+}
 function sessionPromptPath(sessionId) {
   return `${sessionPath(sessionId)}/prompt`;
 }
@@ -2363,7 +2442,7 @@ function isRemoteWorkspace(value) {
 function isRemoteSession(value) {
   if (!isRecord(value))
     return false;
-  return isString(value.sessionId) && (value.workspaceId === null || isString(value.workspaceId)) && (value.cwd === null || isString(value.cwd)) && isIsoString(value.createdAt) && typeof value.live === "boolean" && (value.eventCount === null || typeof value.eventCount === "number");
+  return isString(value.sessionId) && (value.workspaceId === null || isString(value.workspaceId)) && (value.cwd === null || isString(value.cwd)) && isIsoString(value.createdAt) && typeof value.live === "boolean" && (value.eventCount === null || typeof value.eventCount === "number") && (value.origin === void 0 || value.origin === "subagent") && (value.parentSession === void 0 || isString(value.parentSession));
 }
 function isRemoteEvent(value) {
   return isRecord(value) && typeof value.seq === "number" && isString(value.type) && typeof value.time === "number" && "data" in value;
@@ -2487,6 +2566,13 @@ var RemoteAgentClient = class {
       body: request
     });
   }
+  /** Set the file-effect sandbox mode for one remote session. */
+  async setSandboxMode(sessionId, request) {
+    await this.#request(sessionSandboxModePath(sessionId), isAcceptedResult, {
+      method: "POST",
+      body: request
+    });
+  }
   /** Send a text prompt to a remote session. */
   async promptSession(sessionId, request) {
     await this.#request(sessionPromptPath(sessionId), isAcceptedResult, {
@@ -4436,11 +4522,22 @@ var RemoteHostsService = class {
     }
   }
   /** List remote sessions, optionally within one workspace. */
-  async sessions(id, workspaceId) {
+  async sessions(id, workspaceId, includeSubagents = false) {
     const client = this.#requireClient(id);
     try {
       const sessions = await client.listSessions(workspaceId);
-      return { sessions };
+      return {
+        sessions: includeSubagents ? sessions : sessions.filter((session) => session.origin !== "subagent")
+      };
+    } catch (error) {
+      throw this.#remoteFailure(id, error);
+    }
+  }
+  /** Set the file-effect sandbox mode for one remote session. */
+  async setSandboxMode(id, sessionId, mode) {
+    const client = this.#requireClient(id);
+    try {
+      await client.setSandboxMode(sessionId, { mode });
     } catch (error) {
       throw this.#remoteFailure(id, error);
     }

package/lib/types/service.d.ts

@@ -60,7 +60,9 @@ export declare class RemoteHostsService {
     /** List remote workspaces. */
     workspaces(id: string): Promise<readonly RemoteWorkspace[]>;
     /** List remote sessions, optionally within one workspace. */
-    sessions(id: string, workspaceId?: string): Promise<ListSessionsResult>;
+    sessions(id: string, workspaceId?: string, includeSubagents?: boolean): Promise<ListSessionsResult>;
+    /** Set the file-effect sandbox mode for one remote session. */
+    setSandboxMode(id: string, sessionId: string, mode: 'read-only' | 'workspace-write' | 'danger-full-access'): Promise<void>;
     /** Follow a live remote session from a cursor as an SSE-backed stream. */
     followSessionEvents(id: string, sessionId: string, cursor: number, signal: AbortSignal): AsyncGenerator<SessionStreamFrame>;
     /** Read one session snapshot. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-local-plugin",
-  "version": "0.8.6",
+  "version": "0.8.8",
   "description": "DSH remote-development local plugin: host registry, SSH tunnels, remote workspace/session discovery, an authenticated Connection RPC surface, agent tools, and a Settings page.",
   "keywords": [
     "dsh",