dsh-side-chat-plus 0.3.1

package/lib/index.js

@@ -0,0 +1,840 @@
+import { randomUUID } from "node:crypto";
+import { mkdir, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import * as agentApi from "@deepseek-ai/dsh-agent";
+import { dshHomePath } from "@deepseek-ai/dsh-home-paths";
+import { SettingsConflictError } from "@deepseek-ai/dsh-settings";
+import z from "schemastery";
+//#region src/settings-shared.ts
+/**
+* Shared side-chat preference vocabulary (types + constants), consumed by
+* BOTH halves: the host registers the schemastery schema over these values
+* (index.ts) and the client reads/writes them through the plugin's own
+* fenced /sidechat settings routes. Kept free of schemastery so the browser
+* bundle never pulls the schema runtime in.
+*/
+/** The user-settings namespace holding the side-chat preferences. */
+const SUBCHAT_PREFS_NS = "dsh-side-chat";
+/** Fallback prefs used whenever the settings document is unreachable or malformed. */
+const SUBCHAT_PREFS_DEFAULTS = {
+	lookupDefault: false,
+	sendImmediately: true,
+	defaultPrompt: "",
+	bringMode: "draft"
+};
+//#endregion
+//#region src/trust-fence.ts
+function header(headers, name) {
+	const value = headers[name];
+	return typeof value === "string" ? value : void 0;
+}
+function parseAuthority(authority) {
+	try {
+		return new URL(`http://${authority}`);
+	} catch {
+		return;
+	}
+}
+/** Whether a normalized URL hostname names the local loopback authority. */
+function isLoopbackHostname(hostname) {
+	if (hostname === "localhost" || hostname === "[::1]") return true;
+	const parts = hostname.split(".");
+	return parts.length === 4 && parts[0] === "127" && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255);
+}
+function canonicalAuthority(entry, entryUrl) {
+	const port = entryUrl.port !== "" ? entryUrl.port : new URL(`https://${entry}`).port;
+	return port === "" ? entryUrl.hostname : `${entryUrl.hostname}:${port}`;
+}
+function isTrustedAuthority(hostUrl, trustedHosts) {
+	return trustedHosts.some((entry) => {
+		const entryUrl = parseAuthority(entry);
+		if (entryUrl === void 0) return false;
+		return canonicalAuthority(entry, entryUrl) === entryUrl.hostname ? entryUrl.hostname === hostUrl.hostname : entryUrl.host === hostUrl.host;
+	});
+}
+/**
+* Decide whether one sidechat request may reach the plugin routes.
+* @param request - node HTTP request facts (headers).
+* @param trustedHosts - non-loopback authorities this deployment serves.
+* @returns true when the Host is ours (loopback or trusted) and browser markers are same-origin.
+*/
+function isTrustedApiRequest(request, trustedHosts) {
+	const host = header(request.headers, "host");
+	if (host === void 0) return false;
+	const hostUrl = parseAuthority(host);
+	if (hostUrl === void 0) return false;
+	if (!isLoopbackHostname(hostUrl.hostname) && !isTrustedAuthority(hostUrl, trustedHosts)) return false;
+	if (header(request.headers, "sec-fetch-site") === "cross-site") return false;
+	const origin = header(request.headers, "origin");
+	if (origin === void 0) return true;
+	try {
+		return new URL(origin).host === hostUrl.host;
+	} catch {
+		return false;
+	}
+}
+//#endregion
+//#region src/wire.ts
+/** One API failure with its wire code and HTTP status. */
+var SidechatError = class extends Error {
+	code;
+	status;
+	constructor(code, message, status = 400) {
+		super(message);
+		this.code = code;
+		this.status = status;
+	}
+};
+/** Body size bound of one JSON request. */
+const MAX_BODY_BYTES = 1 << 20;
+/** Read and parse the JSON request body (bounded; malformed → bad-request). */
+async function readJsonBody(req) {
+	const chunks = [];
+	let total = 0;
+	for await (const chunk of req) {
+		const buffer = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+		total += buffer.length;
+		if (total > MAX_BODY_BYTES) throw new SidechatError("bad-request", "request body too large");
+		chunks.push(buffer);
+	}
+	const text = Buffer.concat(chunks).toString("utf8");
+	if (text.trim() === "") return {};
+	try {
+		return JSON.parse(text);
+	} catch {
+		throw new SidechatError("bad-request", "request body is not valid JSON");
+	}
+}
+/** Write a JSON response with the given status. */
+function writeJson(res, status, body) {
+	const payload = JSON.stringify(body);
+	res.writeHead(status, { "content-type": "application/json; charset=utf-8" });
+	res.end(payload);
+}
+/** Write the success envelope. */
+function writeOk(res, value) {
+	writeJson(res, 200, {
+		ok: true,
+		value
+	});
+}
+/** Write the failure envelope for any thrown value (unknown → internal 500). */
+function writeError(res, error) {
+	if (error instanceof SidechatError) {
+		writeJson(res, error.status, {
+			ok: false,
+			error: {
+				code: error.code,
+				message: error.message
+			}
+		});
+		return;
+	}
+	writeJson(res, 500, {
+		ok: false,
+		error: {
+			code: "internal",
+			message: error instanceof Error ? error.message : String(error)
+		}
+	});
+}
+/** Narrow an unknown payload value to a string, else throw bad-request. */
+function requireString(payload, key) {
+	const value = payload?.[key];
+	if (typeof value !== "string" || value === "") throw new SidechatError("bad-request", `missing or invalid "${key}"`);
+	return value;
+}
+/** Narrow an unknown payload value to a boolean (default false). */
+function optionalBoolean(payload, key) {
+	return payload?.[key] === true;
+}
+//#endregion
+//#region src/index.ts
+/**
+* dsh-side-chat host half: the /sidechat JSON API. Every side chat is an
+* ORDINARY session (no `origin: 'subagent'`) whose `meta.parentSession` points
+* at the conversation that launched it, archived immediately so it appears in
+* neither the main session list nor the subagent catalog, and driven directly
+* through the live agent (followup). Model / reasoning-effort / permission are
+* inherited from the launching conversation at creation and adjustable later.
+*
+* All routes pass the same browser-trust fence as the /api gateway (loopback
+* or trusted authority; cross-site markers refuse).
+*/
+/** Plugin identity for cordis.yml rows. */
+const name = "dsh-side-chat-plus";
+/** Services required before mounting. */
+const inject = [
+	"webServer",
+	"sessions",
+	"agents",
+	"workspaceRegistry",
+	"sessionQuery",
+	"sandboxPolicy",
+	"permissionPresets",
+	"agentPresets",
+	"llm",
+	"attachments",
+	"commands"
+];
+/**
+* Couple a side chat's selection to its agent so prompt assembly and request
+* routing switch together. Read through the namespace object rather than a
+* named import: a named import fails the ESM link on any build that drops the
+* export, while this degrades to the request-only waterfall in `start`.
+*/
+const installModelSelection = agentApi.installModelSelection;
+/** Durable record list file (cleanup is a later feature; the list is the record). */
+const RECORD_FILE = "dsh-side-chat-sessions.json";
+/** The record-list file path under the harness home. */
+function recordFilePath() {
+	return dshHomePath(RECORD_FILE);
+}
+/** Persist the live side-chat record list (the "record" a future cleanup consumes). */
+async function writeRecords(records) {
+	const path = recordFilePath();
+	await mkdir(dirname(path), { recursive: true });
+	await writeFile(path, JSON.stringify(records, null, 2), "utf8");
+}
+/** The lookup guidance appended as an extra text block (hidden from the UI). */
+const GUIDANCE_MARKER = "[sidechat-guidance]";
+const LOOKUP_GUIDANCE = `${GUIDANCE_MARKER}[需要时，请读取工作区文件或查阅发起此问题的父会话记录来补充信息；若已尽力仍不足，请说明限制。]`;
+const NO_LOOKUP_GUIDANCE = `${GUIDANCE_MARKER}[请仅基于上述内容直接回答，不要主动查阅工作区文件或父会话记录。]`;
+/** Legacy (pre-marker) guidance prefixes, filtered so older messages hide too. */
+const LEGACY_GUIDANCE_PREFIXES = ["[需要时，请读取工作区文件", "[请仅基于上述内容"];
+/** Decode one base64 string into bytes (host-side; Node Buffer). */
+function decodeBase64(data) {
+	return new Uint8Array(Buffer.from(data, "base64"));
+}
+/** A user-role message value `agent.followup` accepts (identity + content + source). */
+function userMessage(content) {
+	return {
+		id: randomUUID(),
+		role: "user",
+		content,
+		source: { kind: "user" }
+	};
+}
+/** Fold a raw session event log into a minimal user/assistant transcript with image refs. */
+function foldTranscript(events) {
+	const fold = (content) => {
+		if (!Array.isArray(content)) return [];
+		const blocks = [];
+		for (const raw of content) {
+			const b = raw;
+			if (b?.type === "text" && typeof b.text === "string") {
+				const text = b.text;
+				if (!(text.startsWith(GUIDANCE_MARKER) || LEGACY_GUIDANCE_PREFIXES.some((prefix) => text.startsWith(prefix)))) blocks.push({
+					type: "text",
+					text
+				});
+			} else if (b?.type === "image" && b.attachment !== null && typeof b.attachment === "object") blocks.push({
+				type: "image",
+				ref: b.attachment
+			});
+			else if (b?.type === "reasoning" && typeof b.text === "string") blocks.push({
+				type: "reasoning",
+				text: b.text
+			});
+		}
+		return blocks;
+	};
+	const messages = [];
+	for (const event of events) if (event.type === "user/message") {
+		const source = event.data.source;
+		if (source !== void 0 && source.kind !== "user") continue;
+		const blocks = fold(event.data.content);
+		if (blocks.length > 0) messages.push({
+			role: "user",
+			blocks
+		});
+	} else if (event.type === "assistant/message") {
+		const message = event.data.message;
+		const blocks = fold(message?.content);
+		if (blocks.length > 0) messages.push({
+			role: "assistant",
+			blocks
+		});
+	}
+	return messages;
+}
+/** The start time of the still-open turn, or undefined when no turn is running. */
+function openTurnStart(events) {
+	let lastStart;
+	let lastEnd;
+	for (const event of events) if (event.type === "turn/start") lastStart = event.time;
+	else if (event.type === "turn/end") lastEnd = event.time;
+	if (lastStart === void 0) return void 0;
+	if (lastEnd !== void 0 && lastEnd >= lastStart) return void 0;
+	return lastStart;
+}
+/** Schemastery schema for the user-facing preferences (validated by the settings service). */
+const PrefsSchema = z.object({
+	lookupDefault: z.boolean().default(SUBCHAT_PREFS_DEFAULTS.lookupDefault),
+	sendImmediately: z.boolean().default(SUBCHAT_PREFS_DEFAULTS.sendImmediately),
+	defaultPrompt: z.string().default(SUBCHAT_PREFS_DEFAULTS.defaultPrompt),
+	bringMode: z.union(["draft", "context"]).default(SUBCHAT_PREFS_DEFAULTS.bringMode)
+});
+/** The API method table bound to the plugin context and the live side-chat map. */
+function buildApi(ctx, sideChats, getSettings) {
+	/** Persist the current live records (best-effort; never blocks the API). */
+	const persist = () => {
+		writeRecords([...sideChats.values()].map((record) => ({
+			childId: record.childId,
+			parentSessionId: record.parentSessionId,
+			createdAt: record.createdAt
+		}))).catch((error) => {
+			console.warn("[dsh-side-chat] record write failed:", error instanceof Error ? error.message : String(error));
+		});
+	};
+	/** Narrow a payload value to a non-empty prompt content array. */
+	const requireContent = (payload) => {
+		const content = payload?.content;
+		if (!Array.isArray(content) || content.length === 0) throw new SidechatError("bad-request", "missing or invalid \"content\"");
+		const parts = [];
+		for (const raw of content) {
+			const part = raw;
+			if (part?.type === "text" && typeof part.text === "string" && part.text !== "") parts.push({
+				type: "text",
+				text: part.text
+			});
+			else if (part?.type === "image" && typeof part.mediaType === "string" && typeof part.data === "string" && part.data !== "") parts.push({
+				type: "image",
+				mediaType: part.mediaType,
+				data: part.data,
+				...typeof part.name === "string" && part.name !== "" ? { name: part.name } : {}
+			});
+			else throw new SidechatError("bad-request", "invalid content block");
+		}
+		if (parts.every((p) => p.type !== "text")) throw new SidechatError("bad-request", "content must include text");
+		return parts;
+	};
+	/** Promote browser base64 images to durable references; append hidden guidance. */
+	const durableContent = async (parts, lookupEnabled) => {
+		const limits = ctx.attachments.imageLimits;
+		if (parts.filter((p) => p.type === "image").length > limits.maxImagesPerMessage) throw new SidechatError("too-many-images", `prompt exceeds the ${limits.maxImagesPerMessage}-image limit`, 400);
+		const blocks = [];
+		for (const part of parts) if (part.type === "text") blocks.push({
+			type: "text",
+			text: part.text
+		});
+		else {
+			const data = decodeBase64(part.data);
+			await ctx.attachments.validateImage({
+				data,
+				mediaType: part.mediaType,
+				...part.name === void 0 ? {} : { name: part.name }
+			});
+			const attachment = await ctx.attachments.saveImage({
+				data,
+				mediaType: part.mediaType,
+				...part.name === void 0 ? {} : { name: part.name }
+			});
+			blocks.push({
+				type: "image",
+				attachment
+			});
+		}
+		blocks.push({
+			type: "text",
+			text: lookupEnabled ? LOOKUP_GUIDANCE : NO_LOOKUP_GUIDANCE
+		});
+		return blocks;
+	};
+	/** Resolve the live launching agent (the side chat's durable parent must be live to start/continue). */
+	const parentOf = (parentSessionId) => {
+		const parent = ctx.agents.get(parentSessionId);
+		if (parent === void 0) throw new SidechatError("parent-unavailable", "the launching conversation is not live; reopen it to start or continue a side chat", 409);
+		return parent;
+	};
+	/** The parent conversation's current model selection (for staged-mode display). */
+	const inherit = (payload) => {
+		const parentSessionId = requireString(payload, "parentSessionId");
+		const parent = parentOf(parentSessionId);
+		const parentConfig = parent.session.requestHeader?.()?.config;
+		return {
+			provider: parentConfig?.provider ?? parent.options.provider ?? "",
+			model: parentConfig?.model ?? parent.options.model ?? "",
+			...parentConfig?.reasoningEffort === void 0 ? {} : { reasoningEffort: parentConfig.reasoningEffort }
+		};
+	};
+	/** Resolve the live side-chat agent behind a childId. */
+	const childOf = (childId) => {
+		const record = sideChats.get(childId);
+		if (record !== void 0) return record.handle.agent;
+		const live = ctx.agents.get(childId);
+		if (live !== void 0) return live;
+		throw new SidechatError("child-unavailable", `side chat "${childId}" is not live`, 409);
+	};
+	/** Resolve the live side-chat session (for permission writes). */
+	const sessionOf = (childId) => {
+		const child = childOf(childId);
+		const session = ctx.sessions.get(childId) ?? child.session;
+		if (session === void 0) throw new SidechatError("child-unavailable", `side chat "${childId}" has no session`, 409);
+		return session;
+	};
+	/** List the host slash commands available to one side-chat agent. */
+	const commands = (payload) => {
+		const childId = requireString(payload, "childId");
+		const child = childOf(childId);
+		return { commands: ctx.commands.list(child).map((c) => ({
+			name: c.name,
+			description: c.description
+		})) };
+	};
+	/** Execute one host slash command against a side-chat agent. */
+	const command = async (payload) => {
+		const childId = requireString(payload, "childId");
+		const line = requireString(payload, "line");
+		const child = childOf(childId);
+		return { executed: await ctx.commands.execute(child, line, new AbortController().signal) !== void 0 };
+	};
+	/** Fold one side-chat agent's plan/goal state for its composer chrome. */
+	const state = (payload) => {
+		const childId = requireString(payload, "childId");
+		const events = childOf(childId).session.events ?? [];
+		let planActive = false;
+		let planWanted = null;
+		let goal = null;
+		for (const event of events) {
+			const data = event.data;
+			if (event.type === "command/run" && data.name === "plan") {
+				if (data.args === void 0) continue;
+				const wanted = String(data.args).trim() !== "off";
+				if (wanted !== planWanted) planWanted = wanted;
+			} else if (event.type === "plan/mode") {
+				planActive = data.active === true;
+				planWanted = null;
+			} else if (event.type === "goal/change") {
+				if (data.operation === "clear") goal = null;
+				else if (data.goal !== null && typeof data.goal === "object") {
+					const g = data.goal;
+					if (typeof g.id === "string" && typeof g.objective === "string") goal = {
+						id: g.id,
+						objective: g.objective
+					};
+				}
+			}
+		}
+		return {
+			plan: {
+				active: planActive,
+				pending: planWanted !== null && planWanted !== planActive
+			},
+			goal
+		};
+	};
+	/** Create one side chat: inherit, archive, record, deliver the first prompt. */
+	const start = async (payload) => {
+		const parentSessionId = requireString(payload, "parentSessionId");
+		const content = requireContent(payload);
+		const lookupEnabled = optionalBoolean(payload, "lookupEnabled");
+		const parent = parentOf(parentSessionId);
+		const record = payload;
+		const parentConfig = parent.session.requestHeader?.()?.config;
+		const parentProvider = parentConfig?.provider ?? parent.options.provider ?? "";
+		const parentModel = parentConfig?.model ?? parent.options.model ?? "";
+		const provider = typeof record.provider === "string" && record.provider !== "" ? record.provider : parentProvider;
+		const model = typeof record.model === "string" && record.model !== "" ? record.model : parentModel;
+		const maxTokens = parentConfig?.maxTokens ?? parent.options.maxTokens;
+		const reasoningEffort = (typeof record.reasoningEffort === "string" && record.reasoningEffort !== "" ? record.reasoningEffort : void 0) ?? parentConfig?.reasoningEffort;
+		const cwd = parent.session.header.cwd;
+		const selection = {
+			current: {
+				provider,
+				model,
+				...reasoningEffort === void 0 ? {} : { reasoningEffort }
+			},
+			assembled: void 0
+		};
+		const parentCtx = parent.ctx;
+		const childId = `subchat-${randomUUID()}`;
+		const handle = await ctx.agents.create({
+			sessionId: childId,
+			meta: {
+				...cwd === void 0 ? {} : { cwd },
+				parentSession: parentSessionId
+			},
+			agentOptions: {
+				provider,
+				model,
+				...maxTokens === void 0 ? {} : { maxTokens }
+			},
+			setup: (agentCtx) => {
+				if (parentCtx !== void 0) ctx.agentPresets.composeFrom(agentCtx, parentCtx);
+				if (installModelSelection !== void 0) {
+					installModelSelection(agentCtx, selection);
+					return;
+				}
+				agentCtx.on("agent/request", async (_payload, next) => {
+					const resolved = await next();
+					const sel = selection.current;
+					if (sel === void 0) return resolved;
+					const { reasoningEffort: _drop, ...rest } = resolved;
+					return {
+						...rest,
+						provider: sel.provider,
+						model: sel.model,
+						...sel.reasoningEffort === void 0 ? {} : { reasoningEffort: sel.reasoningEffort }
+					};
+				});
+			}
+		});
+		try {
+			const explicitPreset = typeof record.preset === "string" && record.preset !== "" ? record.preset : void 0;
+			const parentPreset = ctx.permissionPresets.current(parent.session.events ?? []);
+			const preset = explicitPreset ?? parentPreset;
+			if (preset !== "custom") ctx.permissionPresets.set(handle.agent.session, preset);
+		} catch (error) {
+			console.warn("[dsh-side-chat] permission inherit failed:", error instanceof Error ? error.message : String(error));
+		}
+		await ctx.workspaceRegistry.archiveSession(childId);
+		sideChats.set(childId, {
+			childId,
+			parentSessionId,
+			handle,
+			selection,
+			createdAt: Date.now()
+		});
+		persist();
+		handle.agent.followup(userMessage(await durableContent(content, lookupEnabled)));
+		return {
+			childId,
+			provider,
+			model,
+			...reasoningEffort === void 0 ? {} : { reasoningEffort }
+		};
+	};
+	/** Deliver one later message to an existing side chat. */
+	const followup = async (payload) => {
+		const childId = requireString(payload, "childId");
+		const content = requireContent(payload);
+		const lookupEnabled = optionalBoolean(payload, "lookupEnabled");
+		childOf(childId).followup(userMessage(await durableContent(content, lookupEnabled)));
+		return { accepted: true };
+	};
+	/** List the side chats launched by one parent conversation. */
+	const list = (payload) => {
+		const parentSessionId = requireString(payload, "parentSessionId");
+		const items = [];
+		for (const record of sideChats.values()) {
+			if (record.parentSessionId !== parentSessionId) continue;
+			const runningSince = openTurnStart(record.handle.agent.session.events ?? []);
+			items.push({
+				childId: record.childId,
+				running: runningSince !== void 0,
+				...runningSince !== void 0 ? { runningSince } : {}
+			});
+		}
+		return { items };
+	};
+	/** Interrupt the active side chat's current turn (user-initiated stop). */
+	const stop = (payload) => {
+		const childId = requireString(payload, "childId");
+		childOf(childId).cancel({ kind: "user" });
+		return { accepted: true };
+	};
+	/** Fold one side chat's transcript. */
+	const history = async (payload) => {
+		const childId = requireString(payload, "childId");
+		return { messages: foldTranscript((await ctx.sessionQuery.readSession(childId)).events) };
+	};
+	/** The deployment-resolved image policy (for client-side fast-path checks). */
+	const limits = () => {
+		const l = ctx.attachments.imageLimits;
+		return {
+			mediaTypes: [...l.mediaTypes],
+			maxImageBytes: l.maxImageBytes,
+			maxImagesPerMessage: l.maxImagesPerMessage,
+			maxMessageImageBytes: l.maxMessageImageBytes,
+			maxImagePixels: l.maxImagePixels
+		};
+	};
+	/** Read one durable image's bytes for transcript rendering. */
+	const attachment = async (payload) => {
+		const childId = requireString(payload, "childId");
+		const attachmentId = requireString(payload, "attachmentId");
+		const snapshot = await ctx.sessionQuery.readSession(childId);
+		for (const message of foldTranscript(snapshot.events)) for (const block of message.blocks) if (block.type === "image" && block.ref.attachmentId === attachmentId) {
+			const stored = await ctx.attachments.readImage(block.ref);
+			return {
+				mediaType: stored.ref.mediaType,
+				data: Buffer.from(stored.data).toString("base64")
+			};
+		}
+		throw new SidechatError("not-found", `image "${attachmentId}" not found`, 404);
+	};
+	/** Adjust one side chat's model / reasoning-effort. */
+	const selectModel = (payload) => {
+		const childId = requireString(payload, "childId");
+		const provider = requireString(payload, "provider");
+		const model = requireString(payload, "model");
+		const record = sideChats.get(childId);
+		if (record === void 0) throw new SidechatError("child-unavailable", `side chat "${childId}" is not live`, 409);
+		const reasoningEffort = payload?.reasoningEffort;
+		record.selection.current = {
+			provider,
+			model,
+			...typeof reasoningEffort === "string" && reasoningEffort !== "" ? { reasoningEffort } : {}
+		};
+		return { accepted: true };
+	};
+	/** Adjust one side chat's permission preset. */
+	const selectPermission = (payload) => {
+		const childId = requireString(payload, "childId");
+		const presetName = requireString(payload, "presetName");
+		const session = sessionOf(childId);
+		ctx.permissionPresets.set(session, presetName);
+		return { accepted: true };
+	};
+	/** Close one side chat (tears down its agent and session). */
+	const dispose = async (payload) => {
+		const childId = requireString(payload, "childId");
+		const record = sideChats.get(childId);
+		if (record !== void 0) {
+			sideChats.delete(childId);
+			try {
+				await record.handle.dispose();
+			} catch (error) {
+				console.warn("[dsh-side-chat] dispose failed:", error instanceof Error ? error.message : String(error));
+			}
+			persist();
+		}
+		return { accepted: true };
+	};
+	/** Summarize one piece of text with the side chat's (inherited) model. */
+	const summarize = async (payload) => {
+		const parentSessionId = requireString(payload, "parentSessionId");
+		const text = requireString(payload, "text");
+		const record = payload;
+		const parent = parentOf(parentSessionId);
+		const parentConfig = parent.session.requestHeader?.()?.config;
+		const provider = typeof record.provider === "string" && record.provider !== "" ? record.provider : parentConfig?.provider ?? parent.options.provider ?? "";
+		const model = typeof record.model === "string" && record.model !== "" ? record.model : parentConfig?.model ?? parent.options.model ?? "";
+		if (provider === "" || model === "") throw new SidechatError("bad-request", "no model available for summarization");
+		const reasoningEffort = typeof record.reasoningEffort === "string" && record.reasoningEffort !== "" ? record.reasoningEffort : parentConfig?.reasoningEffort;
+		const prompt = (typeof record.locale === "string" && record.locale === "en" ? "en" : "zh") === "en" ? `Summarize the following content concisely. Keep the key points and output only the summary:\n\n${text}` : `请对以下内容做简明扼要的摘要，保留关键信息，只输出摘要本身：\n\n${text}`;
+		const chunks = ctx.llm.stream({
+			provider,
+			model,
+			...reasoningEffort === void 0 ? {} : { reasoningEffort },
+			maxTokens: 1024,
+			messages: [{
+				id: randomUUID(),
+				role: "user",
+				content: [{
+					type: "text",
+					text: prompt
+				}],
+				source: { kind: "user" }
+			}]
+		});
+		let summary = "";
+		for await (const chunk of chunks) if (chunk.type === "text-delta" && typeof chunk.text === "string") summary += chunk.text;
+		const trimmed = summary.trim();
+		if (trimmed === "") throw new SidechatError("summarize-empty", "the model returned no summary", 502);
+		return { summary: trimmed };
+	};
+	/** Inject one piece of text into the main conversation as a collapsed context row. */
+	const inject = (payload) => {
+		const parentSessionId = requireString(payload, "parentSessionId");
+		const text = requireString(payload, "text");
+		const record = payload;
+		const summary = typeof record.summary === "string" && record.summary.trim() !== "" ? record.summary.trim() : "从侧边聊天带回";
+		parentOf(parentSessionId).inject({
+			id: randomUUID(),
+			role: "user",
+			content: [{
+				type: "text",
+				text
+			}],
+			source: {
+				kind: "plugin",
+				plugin: "dsh-side-chat",
+				form: "notice",
+				summary
+			}
+		});
+		return { accepted: true };
+	};
+	/** Full model directory: provider groups → models → reasoning efforts. */
+	const directory = async () => {
+		const providers = ctx.llm.listProviders();
+		const groups = [];
+		for (const provider of providers) {
+			const listed = await ctx.llm.listModels(provider.id);
+			const models = [];
+			for (const model of listed) {
+				const entry = {
+					id: model.id,
+					name: model.name,
+					...model.description === void 0 ? {} : { description: model.description }
+				};
+				try {
+					const info = await ctx.llm.resolveModelInfo(provider.id, model.id);
+					if (info.reasoning !== void 0) entry.reasoning = {
+						efforts: info.reasoning.efforts.map((e) => ({
+							id: e.id,
+							name: e.name
+						})),
+						...info.reasoning.defaultEffort === void 0 ? {} : { defaultEffort: info.reasoning.defaultEffort }
+					};
+				} catch {}
+				models.push(entry);
+			}
+			groups.push({
+				id: provider.id,
+				name: provider.name,
+				models
+			});
+		}
+		return { groups };
+	};
+	/** Permission-preset options for the side-chat selector. */
+	const permissions = () => {
+		const select = ctx.permissionPresets.selectFor({});
+		return {
+			options: select.options.map((o) => ({
+				value: o.value,
+				name: o.name,
+				...o.description === void 0 ? {} : { description: o.description }
+			})),
+			current: select.currentValue
+		};
+	};
+	return {
+		"sidechat.start": start,
+		"sidechat.followup": followup,
+		"sidechat.list": list,
+		"sidechat.history": history,
+		"sidechat.stop": stop,
+		"sidechat.selectModel": selectModel,
+		"sidechat.selectPermission": selectPermission,
+		"sidechat.summarize": summarize,
+		"sidechat.inject": inject,
+		"sidechat.directory": directory,
+		"sidechat.permissions": permissions,
+		"sidechat.limits": limits,
+		"sidechat.attachment": attachment,
+		"sidechat.inherit": inherit,
+		"sidechat.commands": commands,
+		"sidechat.command": command,
+		"sidechat.state": state,
+		"sidechat.dispose": dispose,
+		"settings.get": () => {
+			return getSettings()?.get() ?? {
+				value: void 0,
+				revision: void 0
+			};
+		},
+		"settings.update": async (payload) => {
+			const settings = getSettings();
+			if (settings === void 0) throw new SidechatError("settings-rejected", "the settings service is not mounted in this deployment", 503);
+			const record = payload;
+			const patch = record?.patch;
+			if (patch === null || typeof patch !== "object" || Array.isArray(patch)) throw new SidechatError("bad-request", "patch must be a plain object");
+			const expectedRevision = typeof record?.expectedRevision === "number" ? record.expectedRevision : void 0;
+			try {
+				return await settings.update(patch, expectedRevision);
+			} catch (error) {
+				if (error instanceof SettingsConflictError) throw new SidechatError("settings-conflict", error.message, 409);
+				throw new SidechatError("settings-rejected", error instanceof Error ? error.message : String(error), 400);
+			}
+		}
+	};
+}
+/** Read the connection row's trustedHosts, or empty (loopback-only fence). */
+function trustedHostsOf(ctx) {
+	const loader = ctx.get("loader");
+	for (const entry of loader?.entries?.() ?? []) if (entry.options.name === "connection") return entry.options.config?.trustedHosts ?? [];
+	return [];
+}
+/** Host plugin body: register the /sidechat JSON API routes. */
+function apply(ctx) {
+	const sideChats = /* @__PURE__ */ new Map();
+	let settingsFace;
+	ctx.inject(["settings"], (sctx) => {
+		const ns = SUBCHAT_PREFS_NS;
+		sctx.settings.register(ns, PrefsSchema);
+		const viewOf = () => {
+			const descriptor = sctx.settings.describe({ redactSecrets: true }).find((c) => c.ns === ns);
+			return descriptor === void 0 ? {
+				value: void 0,
+				revision: void 0
+			} : {
+				value: descriptor.value,
+				revision: descriptor.revision
+			};
+		};
+		settingsFace = {
+			get: viewOf,
+			update: async (patch, expectedRevision) => {
+				await sctx.settings.update(ns, patch, expectedRevision);
+				return viewOf();
+			}
+		};
+	});
+	const api = buildApi(ctx, sideChats, () => settingsFace);
+	ctx.effect(() => {
+		return () => {
+			for (const record of sideChats.values()) record.handle.dispose().catch(() => {});
+			sideChats.clear();
+		};
+	}, "dsh-side-chat: dispose side chats");
+	ctx.effect(() => ctx.webServer.register({
+		kind: "prefix",
+		path: "/sidechat/api",
+		handler: async (req, res) => {
+			if (!isTrustedApiRequest(req, trustedHostsOf(ctx))) {
+				writeJson(res, 403, {
+					ok: false,
+					error: {
+						code: "forbidden",
+						message: "forbidden"
+					}
+				});
+				return;
+			}
+			if (req.method !== "POST") {
+				writeJson(res, 405, {
+					ok: false,
+					error: {
+						code: "method-error",
+						message: "method not allowed"
+					}
+				});
+				return;
+			}
+			const pathname = new URL(req.url ?? "/", "http://dsh.internal").pathname;
+			const method = pathname.startsWith("/sidechat/api/") ? pathname.slice(14) : void 0;
+			if (method === void 0 || method.includes("/")) {
+				writeJson(res, 404, {
+					ok: false,
+					error: {
+						code: "not-found",
+						message: "unknown sidechat API method"
+					}
+				});
+				return;
+			}
+			const handler = api[method];
+			if (handler === void 0) {
+				writeJson(res, 404, {
+					ok: false,
+					error: {
+						code: "not-found",
+						message: `unknown sidechat API method "${method}"`
+					}
+				});
+				return;
+			}
+			try {
+				writeOk(res, await handler(await readJsonBody(req)));
+			} catch (error) {
+				writeError(res, error);
+			}
+		}
+	}), "dsh-side-chat: /sidechat/api routes");
+}
+//#endregion
+export { apply, inject, name };