@deepseek-ai/dsh-api-gateway

@deepseek-ai/dsh-api-gateway

English | 中文

Two-sided TypeRT RPC endpoint for Host and Client Cordis environments. The Host entry provides ctx.typertGateway, while @deepseek-ai/dsh-api-gateway/client provides ctx.remote; both consume the same generated InvocationDescriptor contract and leave business selection to API Remotes and transport, request correlation, trust, and response envelopes to Connection.

Host service: TypertGatewayService (ctx key: typertGateway)

ctx.typertGateway.invoke() resolves the current descriptor and Cordis Service for each call, validates exact named arguments, resolves registered object or Context identities, invokes the public business method, and validates its result. Business Services extend GatewayService and mark methods with @Remote or @RemoteScope from dsh-type-meta; bindTypeRTGateway() remains available when another base class owns inheritance.

Strict mode reads generated invocation descriptors from ctx.typert.local. Lookup parameters use the currently active resolver in ctx.typert.lookups: the business package registers the stable declaration and default policy, while Host composition can override resolution behavior with effect-scoped configure(); @RemoteScope resolves its receiver through a registered Host Context provider. SRC mode is a development fallback for endpoints that have never had a strict definition; it parses simple parameter names and accepts only JSON-safe values for non-lookup parameters. Withdrawing an observed strict definition fails instead of weakening validation.

The Host entry registers a trusted-host interceptor on Connection's shared /api FetchHandler. Connection passes this composite handler through its HTTP bridge; the handler dispatches claimed endpoints to Gateway and unclaimed endpoints to API Proxy. Direct invoke() calls preserve business errors; TypertGatewayError distinguishes failures owned by dispatch, binding, providers, lookup, Context, arguments, and codecs. A resolver may use TypeRTLookupFailure to carry an existing RPC error, preserving its original error code for policy rejections such as cold-resume failures or ownership fences.

A cancellation-aware Remote method declares signal: AbortSignal as its final Host parameter. The signal is descriptor metadata rather than a wire argument: Connection supplies it to the Gateway, and the Gateway injects it after decoded business parameters. SRC recognizes the reserved final name, while strict generation additionally requires the global AbortSignal type.

Client service: ClientRemote (ctx key: remote)

ctx.remote.$mount() validates and registers a generated Host-for-Client contribution, then installs concrete direct and scoped methods for the calling Cordis fiber. Each namespace is a traced remote.<namespace> child Service and unloads after its last method is withdrawn. Duplicate endpoints, namespace collisions, and descriptors without strict generated codecs fail before methods become callable.

Each call validates positional inputs, constructs the descriptor's exact named args, and sends it through ctx.connection.rpc.call('/api', endpoint, ...). Generated cancellation-aware methods accept a final optional AbortSignal; the Client combines it with the contribution mount lifetime before calling Connection. The returned value is validated before reaching application code. Withdrawing a contribution removes its descriptors and methods together, aborts in-flight calls, and makes retained method handles reject.

Generated declaration merges provide the TypeScript API through the shared TypeRTClientRemote contract. The Client entry contains no Host Service or Host Cordis interface merge, and method lookup and invocation use ordinary objects and functions rather than a JavaScript Proxy.

Model Experience

None, as the package dispatches application calls and registers no prompt, tool, or session event.

KV Cache effect

No direct effect; invoked business Services own any model-visible result.

Known Limitations and Deferred Work

• The Connection adapter maps ordinary dispatch failures and business exceptions to the RPC internal code with empty details; lookup-policy errors carried by TypeRTLookupFailure are returned unchanged. Structured TypertGatewayError categories remain available only to same-process callers.
• SRC mode supports unique identifier parameters without destructuring, defaults, or rest parameters. It validates JSON safety rather than generated business types and never infers optional fields.
• Only strict generated contributions can mount on the Client face. SRC markers have no Client codec or type projection.
• The package dispatches unary methods only. Incremental Session data uses a separate named-stream protocol over the same Connection.
• Lookup resolvers are configured per key; an individual Remote parameter or endpoint cannot currently select a live-only policy under the same agent/session key.