lumiverse-spindle-types 0.4.71 → 0.4.73

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lumiverse-spindle-types",
-  "version": "0.4.71",
+  "version": "0.4.73",
   "types": "./src/index.ts",
   "keywords": [
     "lumiverse",

package/src/api.ts

@@ -14,6 +14,19 @@ export interface LlmMessageDTO {
   role: "system" | "user" | "assistant";
   content: string | LlmMessagePartDTO[];
   name?: string;
+  /**
+   * Thinking-mode reasoning content from the previous assistant turn, echoed
+   * back on the next request. Required by DeepSeek's thinking-mode models
+   * (`deepseek-reasoner`, `deepseek-chat` with thinking enabled) **on
+   * tool-call continuations** — DeepSeek's API rejects a continuation when
+   * an assistant turn invoked a tool call and the echo doesn't carry its
+   * reasoning_content back. Plain-text continuations don't need this; nor
+   * do non-thinking models. Other openai-compatible providers that route
+   * DeepSeek (NanoGPT, OpenRouter, etc.) inherit the same requirement;
+   * providers without a reasoning_content notion ignore the field. Set
+   * only on `role: 'assistant'` messages.
+   */
+  reasoning_content?: string;
 }
 
 export type SpindleUserRoleDTO = "operator" | "admin" | "user";
@@ -1809,6 +1822,14 @@ export interface SharedRpcRequestContextDTO {
   endpoint: string;
   /** Identifier of the extension requesting the value. */
   requesterExtensionId: string;
+  /** Gated permissions available while this delegated handler request is running. */
+  effectivePermissions: readonly string[];
+}
+
+/** Optional read policy for a shared RPC endpoint. Omit to require legacy owner-permission inheritance. */
+export interface SharedRpcEndpointPolicyDTO {
+  /** Gated permissions both owner and requester must have; `[]` means no gated permissions are delegated. */
+  requires?: readonly string[];
 }
 
 // ─── Worker → Host messages ──────────────────────────────────────────────
@@ -1893,15 +1914,16 @@ export type WorkerToHost =
       reservationId: string;
     }
   | { type: "permissions_get_granted"; requestId: string }
-  | { type: "rpc_pool_sync"; endpoint: string; value: unknown }
-  | { type: "rpc_pool_register_handler"; endpoint: string }
+  | { type: "rpc_pool_sync"; endpoint: string; value: unknown; policy?: SharedRpcEndpointPolicyDTO; rpcPermissionScopeId?: string }
+  | { type: "rpc_pool_register_handler"; endpoint: string; policy?: SharedRpcEndpointPolicyDTO; rpcPermissionScopeId?: string }
   | { type: "rpc_pool_unregister"; endpoint: string }
-  | { type: "rpc_pool_read"; requestId: string; endpoint: string }
+  | { type: "rpc_pool_read"; requestId: string; endpoint: string; rpcPermissionScopeId?: string }
   | {
       type: "rpc_pool_handler_result";
       requestId: string;
       result?: unknown;
       error?: string;
+      rpcPermissionScopeId?: string;
     }
   | { type: "connections_list"; requestId: string; userId?: string }
   | { type: "connections_get"; requestId: string; connectionId: string; userId?: string }
@@ -2271,6 +2293,8 @@ export type HostToWorker =
       requestId: string;
       endpoint: string;
       requesterExtensionId: string;
+      rpcPermissionScopeId: string;
+      effectivePermissions: string[];
     }
   | {
       type: "intercept_request";

package/src/dom.ts

@@ -232,6 +232,8 @@ export interface SpindleSandboxAPI {
   fetchAudio(url: string, options?: RequestInitDTO): Promise<SpindleSandboxMediaResource>;
   /** Fetch remote audio through the proxy and create a sandbox-local audio element. */
   createAudio(url: string, options?: SpindleSandboxAudioOptions): Promise<SpindleSandboxAudioHandle>;
+  /** Fetch a remote web font through the permission-gated proxy and expose it as a blob URL usable in `@font-face src: url(...)`. */
+  fetchFont(url: string, options?: RequestInitDTO): Promise<SpindleSandboxMediaResource>;
 }
 
 export interface SpindleUploadFile {

package/src/events.ts

@@ -38,6 +38,10 @@ export enum CoreEventType {
   WORLD_INFO_ACTIVATED = "WORLD_INFO_ACTIVATED",
   REGEX_SCRIPT_CHANGED = "REGEX_SCRIPT_CHANGED",
   REGEX_SCRIPT_DELETED = "REGEX_SCRIPT_DELETED",
+  WORLD_BOOK_CHANGED = "WORLD_BOOK_CHANGED",
+  WORLD_BOOK_DELETED = "WORLD_BOOK_DELETED",
+  WORLD_BOOK_ENTRY_CHANGED = "WORLD_BOOK_ENTRY_CHANGED",
+  WORLD_BOOK_ENTRY_DELETED = "WORLD_BOOK_ENTRY_DELETED",
   MESSAGE_TAG_INTERCEPTED = "MESSAGE_TAG_INTERCEPTED",
   TOOL_INVOCATION = "TOOL_INVOCATION",
 }

package/src/index.ts

@@ -130,6 +130,7 @@ export type {
   TokenCountOptionsDTO,
   TokenCountResultDTO,
   SharedRpcRequestContextDTO,
+  SharedRpcEndpointPolicyDTO,
   MacroInterceptorPhase,
   MacroInterceptorEnvDTO,
   MacroInterceptorCtxDTO,

package/src/spindle-api.ts

@@ -95,6 +95,7 @@ import type {
   MessageContentProcessorCtxDTO,
   MessageContentProcessorResultDTO,
   SharedRpcRequestContextDTO,
+  SharedRpcEndpointPolicyDTO,
 } from "./api";
 
 export interface FrontendProcessHandle {
@@ -860,7 +861,7 @@ export interface SpindleAPI {
      *
      * Returns the fully-qualified endpoint name.
      */
-    sync(endpoint: string, value: unknown): string;
+    sync(endpoint: string, value: unknown, policy?: SharedRpcEndpointPolicyDTO): string;
     /**
      * Register an on-demand endpoint handler. Replaces any previously synced
      * value or handler for the same endpoint.
@@ -869,7 +870,8 @@ export interface SpindleAPI {
      */
     handle(
       endpoint: string,
-      handler: (ctx: SharedRpcRequestContextDTO) => unknown | Promise<unknown>
+      handler: (ctx: SharedRpcRequestContextDTO) => unknown | Promise<unknown>,
+      policy?: SharedRpcEndpointPolicyDTO
     ): string;
     /** Read the latest value from another extension's fully-qualified endpoint. */
     read<T = unknown>(endpoint: string): Promise<T>;