dsh-session-recall 0.5.1 → 0.6.0

package/lib/index.d.ts

@@ -1,5 +1,5 @@
 import { ToolDefinition, ToolRunContext } from "@deepseek-ai/dsh-tools";
-import { SessionEventResultFilter, SessionEventSearchDocument, SessionEventSearchPage, SessionEventSearchRequest, SessionRecord, SessionSearchExecContext, SessionSearchHit, SessionSearchPage, SessionSearchRequest, SessionTitleObservationResult } from "@deepseek-ai/dsh-session-query";
+import { SessionEventResultFilter, SessionEventSearchDocument, SessionEventSearchPage, SessionEventSearchRequest, SessionLineageTrace, SessionRecord, SessionSearchExecContext, SessionSearchHit, SessionSearchPage, SessionSearchRequest, SessionTitleObservationResult } from "@deepseek-ai/dsh-session-query";
 import { JsonValue, SessionId } from "@deepseek-ai/dsh-session";
 import { Context } from "@deepseek-ai/cordis";
 import { ContentBlock } from "@deepseek-ai/dsh-llm";
@@ -50,6 +50,12 @@ interface RecallConfig {
   recencyHalfLifeDays?: number;
   /** Sessions started in these project directories rank first. Default: none. */
   pinnedCwds?: readonly string[];
+  /**
+   * Restrict recall results to sessions in the calling agent's own lineage
+   * (ancestors + self + descendants). Default `true` — other agents in the
+   * same project are invisible unless this is set to `false`.
+   */
+  callerTreeOnly?: boolean;
 }
 /** Validated, fully defaulted configuration. */
 interface NormalizedRecallConfig {
@@ -65,6 +71,7 @@ interface NormalizedRecallConfig {
   readonly allProjectsPolicy: AllProjectsPolicy;
   readonly recencyHalfLifeDays: number | undefined;
   readonly pinnedCwds: readonly string[];
+  readonly callerTreeOnly: boolean;
 }
 /** Default, clamp, and cross-check every optional field. */
 declare function normalizeRecallConfig(config?: RecallConfig): NormalizedRecallConfig;
@@ -186,6 +193,8 @@ interface RecallQueryEngine {
   readTitleSnapshots(sessionIds: readonly string[], signal?: AbortSignal): Promise<SessionTitleObservationResult[]>;
   listSessions(signal?: AbortSignal): Promise<SessionRecord[]>;
   filterEvents(sessionId: SessionId, filters: readonly SessionEventResultFilter[]): Promise<SessionEventSearchDocument[]>;
+  /** Trace the caller's session lineage for caller-authorization gating. */
+  traceSession(sessionId: SessionId, signal?: AbortSignal): Promise<SessionLineageTrace>;
 }
 declare const RECALL_TOOL_DESCRIPTION: string;
 /** The approval verdict vocabulary mirrored from `@deepseek-ai/dsh-user-approval`. */

package/lib/index.js

@@ -97,7 +97,8 @@ function normalizeRecallConfig(config) {
 		cwdDenylist: stringList(config?.cwdDenylist),
 		allProjectsPolicy: normalizePolicy(config?.allProjectsPolicy),
 		recencyHalfLifeDays: typeof config?.recencyHalfLifeDays === "number" && Number.isFinite(config.recencyHalfLifeDays) && config.recencyHalfLifeDays > 0 ? Math.min(3650, Math.trunc(config.recencyHalfLifeDays)) : void 0,
-		pinnedCwds: stringList(config?.pinnedCwds)
+		pinnedCwds: stringList(config?.pinnedCwds),
+		callerTreeOnly: config?.callerTreeOnly !== false
 	};
 }
 /** Whether a session cwd is searchable under the allowlist/denylist policy. */
@@ -296,6 +297,20 @@ function cjkZeroHitHint(query, zeroHits, enabled) {
 * calling agent's own project cwd unless the model explicitly widens the
 * scope and the deployment allows it.
 */
+/** Walk a lineage trace and collect every session id in the tree. */
+function collectLineageIds(trace) {
+	const ids = /* @__PURE__ */ new Set();
+	ids.add(trace.target.header.id);
+	for (const ancestor of trace.ancestors) ids.add(ancestor.header.id);
+	const walk = (nodes) => {
+		for (const node of nodes) {
+			ids.add(node.session.header.id);
+			walk(node.descendants);
+		}
+	};
+	walk(trace.descendants);
+	return ids;
+}
 const RECALL_TOOL_DESCRIPTION = [
 	"Search the FULL TEXT of past and current session transcripts on this machine (your own conversation history with this user).",
 	"Use it when the user refers to earlier work (\"that bug we fixed last week\", \"the font we chose for my resume\") or when prior context was compacted away.",
@@ -598,6 +613,11 @@ function createRecallTool(config, engine, approver) {
 			if (query === "") return recallError(query, Object.assign(/* @__PURE__ */ new Error("empty query"), { code: "SESSION_QUERY_INVALID_QUERY" }));
 			const limit = clamp(Math.trunc(args.limit ?? cfg.defaultLimit), 1, cfg.maxLimit);
 			const agentCwd = exec.agent?.session.header?.cwd ?? null;
+			const callerSessionId = exec.agent?.session?.id;
+			let allowedIds = null;
+			if (cfg.callerTreeOnly && callerSessionId != null) try {
+				allowedIds = collectLineageIds(await engine.traceSession(SessionId(callerSessionId), exec.signal));
+			} catch {}
 			const scopeHints = [];
 			let wantAll = false;
 			if (args.session_id == null && args.all_projects === true) {
@@ -633,6 +653,17 @@ function createRecallTool(config, engine, approver) {
 						limit,
 						cursor: brand(args.cursor)
 					}, { signal: exec.signal });
+					if (allowedIds != null && !allowedIds.has(args.session_id)) return {
+						query,
+						scope,
+						count: 0,
+						hasMore: false,
+						items: [],
+						nextCursor: null,
+						hint: "that session is outside your conversation lineage. Search without session_id to find sessions in your own tree, or ask the user to disable callerTreeOnly.",
+						redacted: 0,
+						diagnostics: null
+					};
 					if (!cwdAllowed(page.session.cwd ?? null, cfg)) return {
 						query,
 						scope,
@@ -706,6 +737,7 @@ function createRecallTool(config, engine, approver) {
 				};
 				const ranked = rankingActive(rankingOptions);
 				let items = rankItems(toItems(page.items, titles).filter((item) => cwdAllowed(item.cwd, cfg)), rankingOptions);
+				if (allowedIds != null) items = items.filter((item) => allowedIds.has(item.sessionId));
 				let hint = null;
 				let fallbackRan = false;
 				let diagnostics = {
@@ -716,7 +748,7 @@ function createRecallTool(config, engine, approver) {
 					fallbackRan = true;
 					const scan = await cjkScanSessions(engine, query, agentCwd, wantAll, cfg, cfg.cjkFallbackScanMax, limit, exec.signal);
 					const scanTitles = await titlesFor(engine, scan.items.map((item) => item.sessionId), exec.signal);
-					items = rankItems(scan.items.map((item) => ({
+					items = rankItems(scan.items.filter((item) => allowedIds == null || allowedIds.has(item.sessionId)).map((item) => ({
 						...item,
 						title: scanTitles.get(item.sessionId) ?? null
 					})), rankingOptions);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-session-recall",
   "description": "Deterministic cross-session transcript retrieval for DeepSeek Harness: the model-facing `recall` tool searches past session logs with explicit scope control",
-  "version": "0.5.1",
+  "version": "0.6.0",
   "publishConfig": {
     "access": "public"
   },