dsh-session-bridge 0.3.2-alpha.1 → 0.3.2-alpha.2

package/README.md

@@ -131,10 +131,13 @@ That checkout frequently lags the harness the plugin is loaded into, so a green
 `build.sh` does **not** prove the plugin works on the running DSH — `build.sh`
 warns when the two versions differ. Use `npm run check:compat` for that: it
 type-checks `src/` against the `lib/types/*.d.ts` shipped inside the installed
-DSH package, which is the exact API surface the plugin loads against.
+DSH package, then reads the built `lib/index.js.map` to verify the
+self-contained bundle actually inlined that same DSH version. (Type-checking
+alone is not enough — a stale checkout type-checks green while the artifact
+ships old DSH code.)
 
 The GitHub Actions CI (`ci.yml`) instead resolves the `@deepseek-ai/dsh-*`
-prereleases from the registry — pinned to the `0.1.6-alpha.1` line, which is
+prereleases from the registry — pinned to the `0.1.6-alpha.2` line, which is
 the DSH API surface this code targets — then runs `pnpm typecheck` and
 `pnpm build:client` (the self-contained `tsdown` bundle). Bump that pin
 together with the code when you migrate to a newer DSH API.
@@ -276,6 +279,19 @@ scripts/
   build.sh    type-check + link types against the DSH checkout
 ```
 
+## Lifecycle and unloading
+
+DSH ≥ 0.1.6 mounts and **unloads plugins at runtime** (Settings → Plugins, and
+the injector's hot reload). This plugin unloads cleanly: it registers no
+loader-level state, its tools are disposed with the plugin fiber, and the
+monitor's timer is released through `ctx.effect` on unload.
+
+One consequence of that ownership model: sessions created by
+`session_bridge_create` are owned by the plugin fiber (the agent is created
+under the plugin's context), so **unloading or reloading the plugin stops their
+live agents**. The sessions themselves are persisted and show as offline; bring
+one back with `session_bridge_resume`. Monitor watchdogs also stop on unload.
+
 ## License
 
 MIT

package/README.zh.md

@@ -224,6 +224,17 @@ scripts/
   build.sh    类型检查 + 链接 DSH checkout 类型
 ```
 
+## 生命周期与卸载
+
+DSH ≥ 0.1.6 支持**运行时挂载/卸载**插件（设置 → 插件页开关、注入器热重载）。
+本插件可干净卸载：不注册 loader 级状态，工具随插件 fiber 一并释放，监控定时器
+经 `ctx.effect` 在卸载时清理。
+
+该所有权模型带来一个后果：`session_bridge_create` 创建的会话归插件 fiber 所有
+（agent 在插件上下文下创建），因此**卸载/重载插件会停止这些会话的活动 agent**。
+会话本身已持久化并显示为离线，可用 `session_bridge_resume` 重新上线；守护循环
+同样在卸载时停止。
+
 ## License
 
 MIT

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-external/dsh-session-bridge",
-  "version": "0.3.2-alpha.1",
+  "version": "0.3.2-alpha.2",
   "main": "./lib/index.js",
   "description": "会话桥：创建主会话 / 向任意会话发消息 / 等待回复 / 读取消息 / 按名或 id 查找会话（支持跨工作区）；另含监控/调度主任务与归档会话。",
   "engines": {

package/lib/index.js

@@ -4,7 +4,7 @@ import { homedir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { appendFileSync, mkdirSync } from "node:fs";
 import { randomUUID } from "node:crypto";
-//#region node_modules/.pnpm/@deepseek-ai+dsh-home-paths@0.1.6-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-home-paths/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-home-paths@0.1.6-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-home-paths/lib/index.js
 /**
 * Shared filesystem path helpers for DeepSeek Harness user data.
 *
@@ -2200,7 +2200,7 @@ var Service = class Service {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-typert-protocol@0.1.6-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-typert-protocol/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-typert-protocol@0.1.6-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-typert-protocol/lib/index.js
 /** The one Remote failure class shared by owners, the Gateway, and consumers. */
 /**
 * One Remote call failure: a real Error carrying its stable code and typed
@@ -2345,7 +2345,7 @@ function validateName(subject, value) {
 	if (!isTypertRemoteSegment(value)) throw new TypeError(`typert-protocol: ${subject} must contain only RPC endpoint segment characters`);
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-util-values@0.1.6-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-util-values/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-util-values@0.1.6-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-util-values/lib/index.js
 /** Duplicate-install-safe JSON and immutable-value helpers. @module @deepseek-ai/dsh-util-values */
 /**
 * Mark an unreachable closed-union branch.
@@ -2557,7 +2557,7 @@ function deepFreeze(value) {
 	return value;
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-util-crypto@0.1.6-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-util-crypto/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-util-crypto@0.1.6-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-util-crypto/lib/index.js
 /**
 * Random v4 UUID, minted from `crypto.getRandomValues`.
 * @returns the UUID string.
@@ -2570,7 +2570,7 @@ function randomUUID$1() {
 	return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-brand@0.1.6-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-brand/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-brand@0.1.6-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-brand/lib/index.js
 /**
 * Duplicate-install-safe nominal primitive helpers.
 *
@@ -3187,11 +3187,11 @@ defineMethod("transform", [
 	"preserve"
 ], ({ inner }, isInner) => inner.toString(isInner));
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-timeout@0.1.6-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-timeout/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-timeout@0.1.6-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-timeout/lib/index.js
 /** Largest delay Node schedules without clamping it to one millisecond. */
 const MAX_TIMER_DELAY_MS = 2147483647;
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-llm@0.1.6-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-llm/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-llm@0.1.6-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-llm/lib/index.js
 /**
 * Bound one `notice` summary to {@link CONTEXT_SUMMARY_MAX_CHARS}.
 * @param summary - the producer's one-line account, of any length.
@@ -3957,7 +3957,8 @@ var LlmError = class extends HarnessError {
 					id: model.id,
 					...model.name === void 0 ? {} : { name: model.name },
 					...model.contextWindow === void 0 ? {} : { contextWindow: model.contextWindow },
-					...model.maxTokens === void 0 ? {} : { maxTokens: model.maxTokens }
+					...model.maxTokens === void 0 ? {} : { maxTokens: model.maxTokens },
+					...model.inputModalities === void 0 ? {} : { inputModalities: [...model.inputModalities] }
 				});
 			}
 			return models;
@@ -9080,7 +9081,7 @@ function superRefine(fn, params) {
 	return /* @__PURE__ */ _superRefine(fn, params);
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-storage@0.1.6-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-storage/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-storage@0.1.6-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-storage/lib/index.js
 /**
 * Backend-facing vocabulary of the storage hub: a backend owns one medium
 * (a file-tree root, a database file) and exposes operation groups over it.
@@ -9091,7 +9092,7 @@ function superRefine(fn, params) {
 /** Allowed format for unit and table names: safe as a file name and as a SQL identifier segment without escaping. */
 const UNIT_NAME_RE = /^[a-z][a-z0-9_]*$/;
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-storage-domain@0.1.6-alpha.1_@deepseek-ai+cordis@4.0.2_@deepseek-ai+ds_404bb44176e435660710548cd6a4e0aa/node_modules/@deepseek-ai/dsh-storage-domain/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-storage-domain@0.1.6-alpha.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+ds_5fa439225de576bdb2338dd42cd57e82/node_modules/@deepseek-ai/dsh-storage-domain/lib/index.js
 /**
 * Domain declaration vocabulary. A spec object is the single source of a
 * domain's identity, layout, and record schemas: the owning package defines
@@ -9214,11 +9215,19 @@ Service.init;
 */
 /**
 * 兼容读取不同 dsh-session 版本上的会话事件：
-* - 旧版 `Session` 暴露 `get events(): readonly SessionEvent[]`；
-* - 新版（如宿主实际运行的 0.1.2-rc.x）将 `get events` 改为
-*   `snapshotEvents(fromSeq?, toSeqExclusive?)` 方法——`.events` 直接读取会
-*   得到 `undefined`，对 for...of 迭代即抛 `events is not iterable`。
+* - 旧版 \`Session\` 暴露 \`get events(): readonly SessionEvent[]\`；
+* - 新版将 \`get events\` 改为 \`snapshotEvents(fromSeq?, toSeqExclusive?)\` 方法——
+*   \`.events\` 直接读取会得到 \`undefined\`，对 for...of 迭代即抛
+*   \`events is not iterable\`。
 * 两者都读不到（或 session 不存在）时回退为空数组，绝不抛迭代错误。
+*
+* 注意：dsh 0.1.6-alpha.1 起 \`snapshotEvents()\`（连同 \`eventAt()\` /
+* \`ownEvents()\`）已标记 @deprecated —— 官方策略是"现有逻辑可暂不迁移，但禁止
+* 新增调用"；其替代不是同步读，而是（a）恢复后读取 Session 投影/派生状态，或
+* （b）按需异步分页读取历史窗口（见 dsh 决策
+* 2026-09-09-deprecate-synchronous-session-event-reads）。本函数的调用方
+* （foldMessages / segmentsSince / wait 基线）仍依赖完整同步快照，故按该决定暂缓
+* 迁移；将来官方补齐分页读后，只需改造这一个入口。
 */
 function sessionEvents(session) {
 	const s = session;
@@ -10041,7 +10050,7 @@ var SessionMonitor = class {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-scope@0.1.6-alpha.1_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-invaria_eaf7046112a9b60866fe7f69bc8f6f64/node_modules/@deepseek-ai/dsh-scope/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-scope@0.1.6-alpha.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-invaria_8802cbeca2a66ef97a5b4e663664f4cd/node_modules/@deepseek-ai/dsh-scope/lib/index.js
 /**
 * Shared insertion-ordered storage and effect ownership for scope-aware registries.
 *
@@ -10320,7 +10329,7 @@ function scopeTarget(base, key) {
 	return carrier;
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-sandbox@0.1.6-alpha.1_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-llm@0_1d3a97f96d2766469566ca2b01247bfa/node_modules/@deepseek-ai/dsh-sandbox/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-sandbox@0.1.6-alpha.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-llm@0_5328c6913d63e98a7878ca36cab93ca2/node_modules/@deepseek-ai/dsh-sandbox/lib/index.js
 /**
 * The escalation vocabulary and choreography shared by every sandbox-enforcing
 * tool family (`@deepseek-ai/dsh-tool-bash`, `@deepseek-ai/dsh-tool-fs`): the
@@ -10371,21 +10380,18 @@ function validateEscalationArgs(sandboxPermissions, justification) {
 	if (justification !== void 0 && justification.trim().length === 0) throw new Error("invalid justification: expected a non-empty sentence");
 }
 /**
-* Resolve a sandbox-escalation request BEFORE anything executes: check strict
-* widening against the call's effective mode, then resolve the approval
-* channel, then map every outcome — the ordered fail-closed sequence both
-* enforcing families share. Returns the granted mode to stamp onto exactly
-* this call; throws the distinct verbatim text for every other path (a
-* non-widening request, a missing approval service, an agent-less execution,
-* a rejection, a cancellation, an unanswerable ask) — the tool registry turns
-* the throw into the call's isError result, and nothing has run. A
-* non-widening request never prompts a human.
+* Resolve a sandbox permission request before execution. Repeating the call's
+* effective mode returns it without approval. A strictly wider mode requires
+* approval and applies only to this call. Narrower or unsupported targets,
+* missing approval services or agents for widening, and non-grant outcomes
+* throw before execution.
 * @param request - the escalation to judge (see {@link EscalationRequest}).
 * @param approval - the approval ingredients the tool holds (see {@link EscalationApproval}).
 * @returns the granted mode, consumed by the one call that asked.
 */
 async function approveEscalation(request, approval) {
 	const { requestedMode: mode, effectiveMode, justification, subject } = request;
+	if (mode === effectiveMode) return effectiveMode;
 	if (!(WIDER_MODES[effectiveMode] ?? []).includes(mode)) throw new Error(`sandbox escalation to "${mode}" is not strictly wider than this call's current "${effectiveMode}" mode`);
 	if (approval.approver === void 0) throw new Error(`sandbox escalation to "${mode}" requires approval, but no approval service is composed`);
 	if (approval.agent === void 0) throw new Error(`sandbox escalation to "${mode}" requires approval, but the call has no agent to route it through`);
@@ -10405,7 +10411,7 @@ async function approveEscalation(request, approval) {
 	}
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-tools@0.1.6-alpha.1_e89197212305e1b19bd6df05221bc44b/node_modules/@deepseek-ai/dsh-tools/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-tools@0.1.6-alpha.2_e8d664b8446198a3dac4043bd11091d7/node_modules/@deepseek-ai/dsh-tools/lib/index.js
 /**
 * Enforced JSON Schema subset shared by tool outputs, generated PTC mode
 * types, subagents, and workflows. The subset accepts any JSON root, an
@@ -14018,7 +14024,7 @@ function toolAbortedBeforeDispatchResult(prior) {
 	};
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-agent@0.1.6-alpha.1_ce40d13c69e7e1ce48818baba37665e1/node_modules/@deepseek-ai/dsh-agent/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-agent@0.1.6-alpha.2_44110910133b3cc261ea9dfdcaed39ee/node_modules/@deepseek-ai/dsh-agent/lib/index.js
 /**
 * Agent-scoped model selection shared by runtime entry points.
 * @module @deepseek-ai/dsh-agent/model-selection

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-session-bridge",
-  "version": "0.3.2-alpha.1",
+  "version": "0.3.2-alpha.2",
   "description": "会话桥（dsh-session-bridge）：通过提示词创建新的主会话（顶层 UI 会话）、向任意会话发送消息、等待会话的下一条回复、读取会话消息，并按会话名或 id 跨工作区查找会话；此外支持监控/调度主任务与归档会话。",
   "private": false,
   "type": "module",

package/scripts/check-dsh-compat.mjs

@@ -118,6 +118,44 @@ function dshVersionOf(scopeDir) {
   return undefined
 }
 
+/**
+ * Inspect the built tsdown bundle's source map for the DSH version it INLINED.
+ *
+ * `check:compat` type-checks src/ against the installed harness, but src/ is not
+ * what loads: lib/index.js is a self-contained bundle that inlines every
+ * @deepseek-ai/* import. A stale checkout therefore type-checks green while the
+ * artifact ships old DSH code (observed: checkout 0.1.5-alpha.2 / host
+ * 0.1.6-alpha.2). This reads the map's sources — a checkout path names the root
+ * whose package.json carries the version; a .pnpm path encodes it.
+ *
+ * @returns { versions: Set<string>, roots: Set<string> } or undefined when no map exists.
+ */
+function artifactProvenance() {
+  const mapPath = join(ROOT, 'lib', 'index.js.map')
+  if (!existsSync(mapPath)) return undefined
+  let map
+  try { map = JSON.parse(readFileSync(mapPath, 'utf8')) } catch { return undefined }
+  const versions = new Set()
+  const roots = new Set()
+  for (const source of Array.isArray(map.sources) ? map.sources : []) {
+    if (typeof source !== 'string') continue
+    // Source checkout: <root>/packages/... or <root>/vendor/... (relative to the map in lib/).
+    const checkout = source.match(/^(.*?)[/\\](?:packages|vendor)[/\\]/)
+    if (checkout !== null) { roots.add(resolve(ROOT, 'lib', checkout[1])); continue }
+    // Registry install: .../.pnpm/@deepseek-ai+<name>@<version>[_hash]/node_modules/...
+    const registry = source.match(/[\\/]\.pnpm[\\/]@deepseek-ai\+[a-z0-9-]+@([^\\/]+)[\\/]node_modules/)
+    if (registry !== null) {
+      const version = registry[1].replace(/_.*$/, '')
+      if (/^\d/.test(version)) versions.add(version)
+    }
+  }
+  for (const root of roots) {
+    const manifest = readJson(join(root, 'package.json'))
+    if (typeof manifest?.version === 'string') versions.add(manifest.version)
+  }
+  return { versions, roots }
+}
+
 const dshVersion = dshVersionOf(scope) ?? '(unknown)'
 
 // Every DSH package src/ imports, plus the plain `cordis` specifier that
@@ -170,4 +208,18 @@ if (failure !== undefined) {
   const status = typeof failure.status === 'number' ? ' (tsc exit ' + failure.status + ')' : ''
   fail('src/ does NOT type-check against installed dsh ' + dshVersion + status + ' — this is a real incompatibility with the running harness.')
 }
-console.log('check-dsh-compat: OK — src/ type-checks against installed dsh ' + dshVersion)
+console.log('check-dsh-compat: OK — src/ type-checks against installed dsh ' + dshVersion)
+
+const provenance = artifactProvenance()
+if (provenance === undefined) {
+  console.log('check-dsh-compat: no lib/index.js.map — skipping bundle provenance check (run pnpm build:client to enable it)')
+} else if (provenance.versions.size === 0) {
+  console.log('check-dsh-compat: bundle provenance not resolvable from the source map — skipped')
+} else {
+  const inlined = [...provenance.versions].sort().join(', ')
+  console.log('check-dsh-compat: lib/index.js inlined DSH ' + inlined + ' (from ' + provenance.roots.size + ' checkout(s) / registry entries)')
+  if (dshVersion !== '(unknown)' && !(provenance.versions.size === 1 && provenance.versions.has(dshVersion))) {
+    fail('the built lib/index.js inlines DSH ' + inlined + ' but the installed harness is ' + dshVersion
+      + ' — rebuild the bundle against the running harness (a stale checkout type-checks green while shipping old DSH code).')
+  }
+}

package/src/core.ts

@@ -64,11 +64,19 @@ export interface BridgeFindItem {
 
 /**
  * 兼容读取不同 dsh-session 版本上的会话事件：
- * - 旧版 `Session` 暴露 `get events(): readonly SessionEvent[]`；
- * - 新版（如宿主实际运行的 0.1.2-rc.x）将 `get events` 改为
- *   `snapshotEvents(fromSeq?, toSeqExclusive?)` 方法——`.events` 直接读取会
- *   得到 `undefined`，对 for...of 迭代即抛 `events is not iterable`。
+ * - 旧版 \`Session\` 暴露 \`get events(): readonly SessionEvent[]\`；
+ * - 新版将 \`get events\` 改为 \`snapshotEvents(fromSeq?, toSeqExclusive?)\` 方法——
+ *   \`.events\` 直接读取会得到 \`undefined\`，对 for...of 迭代即抛
+ *   \`events is not iterable\`。
  * 两者都读不到（或 session 不存在）时回退为空数组，绝不抛迭代错误。
+ *
+ * 注意：dsh 0.1.6-alpha.1 起 \`snapshotEvents()\`（连同 \`eventAt()\` /
+ * \`ownEvents()\`）已标记 @deprecated —— 官方策略是"现有逻辑可暂不迁移，但禁止
+ * 新增调用"；其替代不是同步读，而是（a）恢复后读取 Session 投影/派生状态，或
+ * （b）按需异步分页读取历史窗口（见 dsh 决策
+ * 2026-09-09-deprecate-synchronous-session-event-reads）。本函数的调用方
+ * （foldMessages / segmentsSince / wait 基线）仍依赖完整同步快照，故按该决定暂缓
+ * 迁移；将来官方补齐分页读后，只需改造这一个入口。
  */
 export function sessionEvents(session: unknown): readonly SessionEvent[] {
   const s = session as {