bowenliang123
ba074e078e
A durable `user/message` event lacking a non-empty string `data.id` passes the runtime append unchecked but makes the harness refuse the whole session at its next load (`... lacks an identified message`, issue #51). The archived wrap-up notice carried a rebuild signature (role-first key order, `id` and `summary` stripped) that no shipped harness producer emits, so the strip happens upstream of the append, outside both audited codebases. Guard the durability boundary from the plugin side: a prepended `agent/pre-step` listener runs last in the waterfall and mints a `dshctx-` prefixed id for any decision message that would persist unidentified, leaving everything else — including the decision's reference identity — verbatim, and failing open on hostile entries. The seam is pinned per baseline (the event dispatch, the user/message append that consumes it, and the prepend option) in the real-code matrix.
108 lines
4.2 KiB
TypeScript
108 lines
4.2 KiB
TypeScript
/**
|
|
* The supported harness compatibility matrix — the ONE source of truth for
|
|
* which dsh baselines this plugin must work on, and how their seams differ.
|
|
*
|
|
* Consumed by:
|
|
* - tests/host/compat/ (always-on registry-contract drivers, vitest host lane)
|
|
* - tests/client/compat/ (always-on client-face matrix, vitest jsdom lane)
|
|
* - tests/compat/ (the `compat` vitest project: the real-code matrix boots
|
|
* the REAL dsh registry + settings + platform-table sources per baseline
|
|
* tag and runs the built plugin through them; plus the bundle smoke)
|
|
*
|
|
* Adding a future harness version = adding one entry here (its tag, its
|
|
* cordis, and a face for every seam that differs), then running the matrix.
|
|
* A failing probe names the seam — the connection point to re-fit or
|
|
* refactor — not just "it broke somewhere".
|
|
*/
|
|
|
|
/** The supported dsh tags, in lockstep with the BASELINES entries below. */
|
|
export type BaselineId = 'v0.1.2-rc.1'
|
|
|
|
/** The harness web half's client faces, as far as the compat probes consume them. */
|
|
export interface ClientSeam {
|
|
/** The durable-image loader method the browser cards ride. */
|
|
imageFaceMethod: string
|
|
/** MarkdownText's chrome prop the plugin must hand every markdown render. */
|
|
markdownChrome: string
|
|
/** The platform module table the shell seeds (client-bundle requires must resolve). */
|
|
platformModules: readonly string[]
|
|
/**
|
|
* The faces the split timeline's on-demand detail channel rides
|
|
* (host/detail.ts + client/timelineSource.ts): the host's generic
|
|
* Connection RPC registry, the browser caller, and the projection
|
|
* registry's `stateOf` read. Each probe is a needle in the named source
|
|
* file of the baseline tag.
|
|
*/
|
|
detailChannel: {
|
|
/** `HostConnectionRpc` in the connection package's shared rpc source. */
|
|
hostRpcFile: string
|
|
hostRpcNeedle: string
|
|
/** The browser caller's `call(channel, endpoint, payload…)` in the connection client source. */
|
|
clientRpcFile: string
|
|
clientRpcNeedle: string
|
|
/** The registry's `stateOf` unit-state read (the detail endpoint's data source). */
|
|
registryFile: string
|
|
registryNeedle: string
|
|
}
|
|
}
|
|
|
|
export interface Baseline {
|
|
/** The dsh git tag in deepseek-ai/deepseek-harness (local checkout or CI fetch). */
|
|
id: BaselineId
|
|
tag: string
|
|
/** The vendored @deepseek-ai/cordis release that harness line ships. */
|
|
cordis: string
|
|
/**
|
|
* The @deepseek-ai/dsh-session release that line vendors. The staged
|
|
* session-projection sources import runtime values from it (SessionLogOffset /
|
|
* SessionSeq), so the compat driver must resolve the specifier to the tag's
|
|
* own generation.
|
|
*/
|
|
session: string
|
|
client: ClientSeam
|
|
/**
|
|
* The step-boundary identity guard's host seam (src/host/stepIdentity.ts):
|
|
* the agent-loop file that dispatches the `agent/pre-step` waterfall and
|
|
* appends its decision's messages, plus a shipped context plugin proving
|
|
* the `prepend` listener option this guard rides on that line.
|
|
*/
|
|
stepGuard: {
|
|
loopFile: string
|
|
loopNeedles: readonly string[]
|
|
prependProofFile: string
|
|
}
|
|
}
|
|
|
|
export const BASELINES: readonly Baseline[] = [
|
|
{
|
|
// The `next`-channel release candidate — the newest declared dsh release.
|
|
id: 'v0.1.2-rc.1',
|
|
tag: 'dsh-v0.1.2-rc.1',
|
|
cordis: '4.0.2',
|
|
session: '0.1.2-rc.1',
|
|
client: {
|
|
imageFaceMethod: 'imageUrl',
|
|
markdownChrome: 'labels',
|
|
platformModules: [
|
|
'react', 'react/jsx-runtime', 'react-dom', 'react-dom/client', '@deepseek-ai/cordis',
|
|
'@deepseek-ai/dsh-client-store',
|
|
'@deepseek-ai/dsh-client-ui-slots',
|
|
'@deepseek-ai/dsh-client-ui-primitives',
|
|
],
|
|
detailChannel: {
|
|
hostRpcFile: 'packages/client/connection/src/rpc.ts',
|
|
hostRpcNeedle: 'HostConnectionRpc',
|
|
clientRpcFile: 'packages/client/connection/src/client/rpc.ts',
|
|
clientRpcNeedle: 'call(channel, endpoint, payload',
|
|
registryFile: 'packages/session/session-projection/src/index.ts',
|
|
registryNeedle: 'stateOf<',
|
|
},
|
|
},
|
|
stepGuard: {
|
|
loopFile: 'packages/core/agent-loop/src/agent.ts',
|
|
loopNeedles: ["'agent/pre-step'", "append('user/message'"],
|
|
prependProofFile: 'packages/context/time-context/src/index.ts',
|
|
},
|
|
},
|
|
]
|