@arcfold/dsh 0.0.0-stage → 0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Arcfold contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,9 @@
-# Temporary Holding Version
+# Arcfold for DeepSeek Harness Desktop
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Arcfold 0.4.0 runs in DSH 0.2.2-rc.1 on macOS with Apple silicon.
+
+Open Plugins, choose Add plugin, and enter `@arcfold/dsh`. Enable Arcfold and complete its first-run setup. It creates its own workspace and data. Configure DeepSeek in DSH's Models settings when ready.
+
+To update, open the installed Arcfold entry in Plugins, choose a compatible version, and confirm. Back up your Desktop data before replacing the installed version.
+
+The Desktop plugin currently supports DeepSeek Pro and Flash.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,11 @@
+# 第三方组件说明（待公开审查）
+
+Arcfold 自身贡献采用 [MIT 许可证](LICENSE)。本仓库同时包含或依赖第三方组件，它们的版权与许可不因项目选择 MIT 而改变：
+
+- `src/desktop/vendor/` 包含 DeepSeek 的适配代码及其 [MIT 许可](src/desktop/vendor/LICENSE.deepseek)和[来源说明](src/desktop/vendor/NOTICE.md)。
+- `src/tree/tokenizer-resources/` 包含 DeepSeek 的分词资源及其 [MIT 许可](src/tree/tokenizer-resources/LICENSE)、[V4 说明](src/tree/tokenizer-resources/tokenizer-v4-NOTICE.md)和 [V4.1 说明](src/tree/tokenizer-resources/tokenizer-NOTICE.md)。
+- 同目录的 `deepseek_recipe` wheel 包内自带 `LICENSE`、`THIRD_PARTY_LICENSES` 和材料清单；其中还包含其他依赖，需一并保留和核查。
+- Desktop 核心包内的 `runtime/desktop-python.tar.gz` 保留 [Astral Python Build Standalone](https://github.com/astral-sh/python-build-standalone/releases/tag/20260901) 提供的完整原包。CPython 许可位于包内的 `python/lib/python3.12/LICENSE.txt`，pip 及其随附依赖的许可也在原包内。进一步的发行核查仍按本页下方的范围执行。
+- 安装过程中取得的其他依赖以锁定文件和各依赖自身的许可为准；完整依赖许可核查尚未完成。
+
+本页是公开准备的索引，不代表全部第三方授权已经审核完成。

package/cordis.patch.yml

@@ -0,0 +1,138 @@
+# Arcfold's host layer, after the official dsh-base and dsh-web-app bundles.
+# A later profile/home/CLI patch provides every deployment-specific config.
+# Cordis replaces a row's WHOLE config; it does not deep-merge these values.
+# No personal paths, credentials, model prices, budget or new ledger live here.
+
+# Keep the native DSH mark and name; Arcfold remains a conversation view.
+- id: ui-brand-official
+  disabled: false
+
+# Remove the three alternative model routes, not the official LLM runtime.
+- id: llm-deepseek
+  disabled: true
+- id: llm-deepseek-account
+  disabled: true
+- id: llm-pi-ai
+  disabled: true
+
+# These request extensions are outside the metered Messages contract.
+# Native local persistence/query/observations remain enabled.
+- id: deepseek-llm-api-extensions
+  disabled: true
+- id: session-log-deepseek
+  disabled: true
+- id: plugin-package-inventory-deepseek
+  disabled: true
+
+# The current transport owns one main/native step or one frozen Learn call.
+# Do not expose unaccounted retries, purpose calls, child sessions or scheduling.
+- id: llm-retry
+  disabled: true
+- id: session-title-llm
+  disabled: true
+- id: goal-round-driver
+  # The native module identity is immutable in the official patch protocol.
+  # Wait for an explicit old-mode decision; new mode has no round driver.
+  disabled: false
+  inject: [arcfoldLegacyMode]
+- id: fs-sandbox
+  inject: [arcfoldLegacyMode]
+- id: bash-sandbox
+  inject: [arcfoldLegacyMode]
+- id: compaction-basic
+  inject: [arcfoldLegacyMode]
+- id: schedule
+  disabled: true
+- id: ui-schedule
+  disabled: true
+- id: subagent-spawn-in-process
+  disabled: true
+- id: subagent-fork-in-process
+  disabled: true
+
+# Preserve native no-clobber/version guards for main and preparation writes.
+- id: fs-observation-policy
+  disabled: false
+
+# Search has a separate paid HTTP path; plain public URL fetch stays native.
+- id: web-search-deepseek
+  disabled: true
+- id: web-deepseek-api
+  disabled: true
+
+# The official alternative presets lack Arcfold's main ownership hook.
+- id: preset-standard
+  disabled: true
+- id: preset-minimal
+  disabled: true
+- id: preset-ptc
+  disabled: true
+- id: preset-cordis
+  disabled: true
+
+# Launcher defaults belong below native user/home settings. Without a launcher,
+# the independent plugin still requires its explicit deployment configuration.
+- id: agent-default-model
+  # Fixed object paths let the official Loader update only volatile fields.
+  config:
+    provider: !!js "ctx.get('arcfoldRuntimeGuard')?.configuration.initialMain?.provider ?? ''"
+    model: !!js "ctx.get('arcfoldRuntimeGuard')?.configuration.initialMain?.model ?? ''"
+    reasoningEffort: !!js "ctx.get('arcfoldRuntimeGuard')?.configuration.initialMain?.reasoningEffort"
+
+- id: agent-preset-registry
+  config:
+    default: arcfold-main
+
+- insert:
+    - id: arcfold-tree-filesystem
+      name: '@arcfold/dsh/tree-host'
+      config:
+        component: filesystem
+    - id: arcfold-tree-shell
+      name: '@arcfold/dsh/tree-host'
+      config:
+        component: shell
+        timeoutMs: 60000
+    - id: arcfold-tree-compaction
+      name: '@arcfold/dsh/tree-host'
+      config:
+        component: compaction
+    - id: arcfold-desktop-bootstrap
+      name: '@arcfold/dsh/desktop-bootstrap'
+    - id: arcfold-business
+      name: '@arcfold/dsh'
+      inject: [arcfoldDesktopSetup]
+      config: {}
+
+    - id: arcfold-metered-budget
+      # Desktop tree mode supplies its own services after first-run setup.
+      disabled: !!js "Boolean(process.versions.electron && process.argv.some(value => value.includes('dsh-desktop-host')))"
+      name: '@arcfold/dsh/deepseek-budget'
+      config: {}
+
+    - id: arcfold-metered-provider
+      # Desktop tree mode supplies its own services after first-run setup.
+      disabled: !!js "Boolean(process.versions.electron && process.argv.some(value => value.includes('dsh-desktop-host')))"
+      name: '@arcfold/dsh/deepseek'
+      config: {}
+
+    - id: arcfold-shared-metered-host
+      name: '@arcfold/dsh/metered-budget'
+      disabled: true
+      config: {}
+
+
+    - id: arcfold-learning
+      # Desktop tree mode supplies its own services after first-run setup.
+      disabled: !!js "Boolean(process.versions.electron && process.argv.some(value => value.includes('dsh-desktop-host')))"
+      name: '@arcfold/dsh/learning'
+      config: {}
+
+    - id: arcfold-preparation
+      # Desktop tree mode supplies its own services after first-run setup.
+      disabled: !!js "Boolean(process.versions.electron && process.argv.some(value => value.includes('dsh-desktop-host')))"
+      name: '@arcfold/dsh/preparation'
+      config: {}
+
+    - id: arcfold-ui
+      name: '@arcfold/dsh-method-ui'

package/package.json

@@ -1,6 +1,72 @@
 {
   "name": "@arcfold/dsh",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.4.0",
+  "type": "module",
+  "main": "./src/index.mjs",
+  "exports": {
+    ".": "./src/index.mjs",
+    "./agent": "./src/agent.mjs",
+    "./tree-host": "./src/tree/host.mjs",
+    "./learning": "./src/learning-plugin.mjs",
+    "./deepseek-budget": "./src/deepseek-budget-plugin.mjs",
+    "./deepseek": "./src/deepseek-provider.mjs",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./presets/*.patch.yml": "./presets/*.patch.yml",
+    "./package.json": "./package.json",
+    "./metered-budget": "./src/metered-provider-host.mjs",
+    "./preparation": "./src/preparation-plugin.mjs",
+    "./desktop-deepseek": "./src/desktop/provider.mjs",
+    "./desktop-configuration": "./src/desktop/configuration.mjs",
+    "./desktop-bootstrap": "./src/desktop/bootstrap.mjs"
+  },
+  "files": [
+    "src",
+    "runtime",
+    "cordis.patch.yml",
+    "presets",
+    "scripts/patch-deepseek-transport.mjs",
+    "patches",
+    "scripts/exact-package-patch.mjs",
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md"
+  ],
+  "engines": {
+    "node": ">=24.15.0",
+    "dsh": "0.2.2-rc.1"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "4.1.0"
+  },
+  "dependencies": {
+    "@deepseek-ai/dsh-llm": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-llm-deepseek": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-llm-deepseek-api-key": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-launch-environment": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-tools": "0.2.2-rc.1",
+    "@deepseek-ai/node-addon-system": "0.1.2",
+    "eventsource-parser": "3.1.1",
+    "undici": "7.29.1",
+    "stream-json": "3.7.0",
+    "stream-chain": "4.2.5",
+    "@deepseek-ai/cosmokit": "1.9.0",
+    "@deepseek-ai/dsh-anonymous-user-id": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-atomic-write": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-attachment": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-home-paths": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-timeout": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-util-values": "0.2.2-rc.1",
+    "@deepseek-ai/schemastery": "3.19.0",
+    "semver": "7.8.6",
+    "@arcfold/dsh-method-ui": "0.4.0"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": [
+        "./cordis.patch.yml",
+        "./presets/arcfold.patch.yml"
+      ]
+    }
+  },
+  "license": "MIT",
+  "description": "Arcfold for DeepSeek Harness Desktop"
+}

package/patches/deepseek-0.2.2-rc.1-transport.json

@@ -0,0 +1,65 @@
+{
+  "id": "deepseek-0.2.2-rc.1-transport-v1",
+  "package": "@deepseek-ai/dsh-llm-deepseek",
+  "version": "0.2.2-rc.1",
+  "upstreamCommit": "66491b05e3f05ad35bcdd4f6cd7ed26041d9e3db",
+  "scope": "Published npm dist only; optional per-stream Messages sender; no serializer/translator or Arcfold-specific upstream service",
+  "files": [
+    {
+      "path": "lib/index.js",
+      "beforeSha256": "955dc7bc7ca6c857ff4a7e373b87c143b96a4c43fc80325b67dc0982600dcc75",
+      "afterSha256": "fc27ceacbed59c8d32100f3aa41cf79e1acab403ac0bc12b0e7f807a6274c752",
+      "edits": [
+        {
+          "before": "\tasync *request(options, connection, signal, activity) {\n\t\tsignal.throwIfAborted();\n",
+          "after": "\tasync *request(options, connection, signal, activity) {\n\t\tsignal.throwIfAborted();\n\t\tconst transport = this.dependencies.createTransport === void 0 ? { send: (url, init) => fetch(url, init) } : this.dependencies.createTransport(options);\n\t\tif (transport === null || typeof transport !== \"object\" || typeof transport.send !== \"function\") throw new TypeError(\"DeepSeek createTransport must return an object with send(url, init)\");\n"
+        },
+        {
+          "before": "const response = await fetch(`${messagesApiRoot(connection.baseURL)}/messages`, {",
+          "after": "const response = await transport.send(`${messagesApiRoot(connection.baseURL)}/messages`, {"
+        },
+        {
+          "before": "}\n//#endregion\n//#region lib/types/listing-config.js",
+          "after": "}\nObject.defineProperty(registerDeepSeekProvider, \"transportSeam\", { value: \"deepseek-messages-create-transport-v1\", enumerable: true });\n//#endregion\n//#region lib/types/listing-config.js"
+        }
+      ]
+    },
+    {
+      "path": "lib/types/types.d.ts",
+      "beforeSha256": "8949419d7ed87dd227132dc331909c3e234ee2aebe72ca9c57569fa426ee062d",
+      "afterSha256": "a3a7284f64c5467e4bc359b9e79050f190c389c6807e6f30c75f475d9ab95c7a",
+      "edits": [
+        {
+          "before": "import type { LlmModelInfo, ModelModality, SystemPromptUpdate, ToolUpdate, ResolvedRetryPolicy, ImageAttachmentAccess }",
+          "after": "import type { GenerateOptions, LlmModelInfo, ModelModality, SystemPromptUpdate, ToolUpdate, ResolvedRetryPolicy, ImageAttachmentAccess }"
+        },
+        {
+          "before": "export interface DeepSeekAdapterOptions<Connection extends DeepSeekConnectionOptions = DeepSeekConnectionOptions> {\n",
+          "after": "export interface DeepSeekAdapterOptions<Connection extends DeepSeekConnectionOptions = DeepSeekConnectionOptions> {\n    /** Create one stream-local Messages sender before image preparation or authentication. A supplied callback must return a valid sender; errors never fall back to fetch. */\n    createTransport?: (options: GenerateOptions<string>) => {\n        send(url: string, init: RequestInit): Promise<Response>;\n    };\n"
+        }
+      ]
+    },
+    {
+      "path": "lib/types/host.d.ts",
+      "beforeSha256": "c80712e47c5909c85d1e1736c84fa5da698f3493201b7870b4a02dc1e801a4ef",
+      "afterSha256": "7b8cf687eacc9045b1ac840c08f6cdbc018e140725c1785cffdcb4c54632b7ea",
+      "edits": [
+        {
+          "before": "'options' | 'resolveAuth' | 'providerName' | 'discoverModels' | 'connect' | 'admit'",
+          "after": "'options' | 'resolveAuth' | 'providerName' | 'discoverModels' | 'connect' | 'admit' | 'createTransport'"
+        },
+        {
+          "before": "//# sourceMappingURL=host.d.ts.map",
+          "after": "/** Runtime capability of the loaded function, independent of the package files currently on disk. */\nexport declare namespace registerDeepSeekProvider {\n    const transportSeam: 'deepseek-messages-create-transport-v1';\n}\n//# sourceMappingURL=host.d.ts.map"
+        }
+      ]
+    }
+  ],
+  "runtimeCapability": {
+    "export": "registerDeepSeekProvider",
+    "property": "transportSeam",
+    "value": "deepseek-messages-create-transport-v1",
+    "writable": false,
+    "configurable": false
+  }
+}

package/patches/deepseek-0.2.2-rc.1-transport.patch

@@ -0,0 +1,61 @@
+--- a/lib/index.js
++++ b/lib/index.js
+@@ -2181,6 +2181,8 @@
+ 	}
+ 	async *request(options, connection, signal, activity) {
+ 		signal.throwIfAborted();
++		const transport = this.dependencies.createTransport === void 0 ? { send: (url, init) => fetch(url, init) } : this.dependencies.createTransport(options);
++		if (transport === null || typeof transport !== "object" || typeof transport.send !== "function") throw new TypeError("DeepSeek createTransport must return an object with send(url, init)");
+ 		const { messages, versions } = await prepareImages(options.messages, connection, options.model, this.dependencies.resolveAttachments?.(), this.imageAccess, signal);
+ 		const auth = await this.dependencies.resolveAuth(connection);
+ 		try {
+@@ -2228,7 +2230,7 @@
+ 				});
+ 				signal.throwIfAborted();
+ 				const betas = [...fileIds !== void 0 && fileIds.size > 0 ? [MESSAGES_FILES_BETA] : [], ...body.messages.some((message) => message.content.some((block) => block.type === "tool_addition" || block.type === "tool_removal")) ? [MESSAGES_TOOL_CHANGES_BETA] : []];
+-				const response = await fetch(`${messagesApiRoot(connection.baseURL)}/messages`, {
++				const response = await transport.send(`${messagesApiRoot(connection.baseURL)}/messages`, {
+ 					method: "POST",
+ 					signal,
+ 					body: extensions.payload,
+@@ -2747,6 +2749,7 @@
+ 		registeredPolicy = policy;
+ 	});
+ }
++Object.defineProperty(registerDeepSeekProvider, "transportSeam", { value: "deepseek-messages-create-transport-v1", enumerable: true });
+ //#endregion
+ //#region lib/types/listing-config.js
+ /** Default deadline of one model-listing request and of a first-use wait. */
+--- a/lib/types/types.d.ts
++++ b/lib/types/types.d.ts
+@@ -1,5 +1,5 @@
+ /** Model catalog and request-local dependencies for DeepSeek Messages. */
+-import type { LlmModelInfo, ModelModality, SystemPromptUpdate, ToolUpdate, ResolvedRetryPolicy, ImageAttachmentAccess } from '@deepseek-ai/dsh-llm';
++import type { GenerateOptions, LlmModelInfo, ModelModality, SystemPromptUpdate, ToolUpdate, ResolvedRetryPolicy, ImageAttachmentAccess } from '@deepseek-ai/dsh-llm';
+ import type { AttachmentStore, ImageAttachmentRef } from '@deepseek-ai/dsh-attachment';
+ import type { AnonymousUserId } from '@deepseek-ai/dsh-anonymous-user-id';
+ import type { DeepSeekLlmApiExtensionRequest, PreparedDeepSeekLlmApiExtensions } from '@deepseek-ai/dsh-deepseek-llm-api-extensions';
+@@ -87,6 +87,10 @@
+ }
+ /** Constructor options for {@link DeepSeekAdapter}: the operation-local resolution hooks the plugin owns. */
+ export interface DeepSeekAdapterOptions<Connection extends DeepSeekConnectionOptions = DeepSeekConnectionOptions> {
++    /** Create one stream-local Messages sender before image preparation or authentication. A supplied callback must return a valid sender; errors never fall back to fetch. */
++    createTransport?: (options: GenerateOptions<string>) => {
++        send(url: string, init: RequestInit): Promise<Response>;
++    };
+     /** Report unusable native Messages replay metadata without exposing content or signatures. */
+     onReplayDegrade?: (detail: {
+         provider: string;
+--- a/lib/types/host.d.ts
++++ b/lib/types/host.d.ts
+@@ -17,5 +17,9 @@
+  * @param provider - exact route owned by this plugin.
+  * @param dependencies - provider-owned discovery, credential, and configuration callbacks.
+  */
+-export declare function registerDeepSeekProvider<C extends DeepSeekConnectionOptions>(ctx: Context, provider: string, dependencies: Pick<DeepSeekAdapterOptions<C>, 'options' | 'resolveAuth' | 'providerName' | 'discoverModels' | 'connect' | 'admit'>): void;
++export declare function registerDeepSeekProvider<C extends DeepSeekConnectionOptions>(ctx: Context, provider: string, dependencies: Pick<DeepSeekAdapterOptions<C>, 'options' | 'resolveAuth' | 'providerName' | 'discoverModels' | 'connect' | 'admit' | 'createTransport'>): void;
++/** Runtime capability of the loaded function, independent of the package files currently on disk. */
++export declare namespace registerDeepSeekProvider {
++    const transportSeam: 'deepseek-messages-create-transport-v1';
++}
+ //# sourceMappingURL=host.d.ts.map

package/presets/arcfold.patch.yml

@@ -0,0 +1,110 @@
+# Native per-session composition. Only this main preset owns the Arcfold
+# preparation/tool hooks; Learn mounts an empty preset plus its existing setup.
+# This file does not change the host's approval or permission configuration.
+- insert:
+    - id: preset-arcfold-tree-reader
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: arcfold-tree-reader
+        name: Arcfold tree reader
+        description: 新版内部只读角色；输入、提示词和结果由持久任务拥有。
+        order: 110
+        plugins: []
+    - id: preset-arcfold-tree-writer
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: arcfold-tree-writer
+        name: Arcfold script writer
+        description: 专用脚本作者；六个受限工具由当前任务绑定，不取得普通文件或命令权限。
+        order: 111
+        plugins: []
+    - id: preset-arcfold-main
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: arcfold-main
+        name: Arcfold
+        description: 当前委托、原生工具、已完成学习与长期目标；工具仍受宿主审批约束。
+        order: 1
+        plugins:
+          - id: persona
+            name: '@deepseek-ai/dsh-persona'
+            config:
+              prefix: You are a coding agent powered by the {{model}} model.
+          - id: agent-instructions
+            name: '@deepseek-ai/dsh-agent-instructions'
+            config:
+              maxBytes: 65536
+          - id: time-context
+            name: '@deepseek-ai/dsh-time-context'
+          - id: arcfold-agent
+            name: '@arcfold/dsh/agent'
+          - id: tool-bash
+            name: '@deepseek-ai/dsh-tool-bash'
+            disabled: !!js process.platform === 'win32'
+          - id: tool-pwsh
+            name: '@deepseek-ai/dsh-tool-pwsh'
+            disabled: !!js process.platform !== 'win32'
+          - id: tool-fs
+            name: '@deepseek-ai/dsh-tool-fs'
+            config:
+              read: true
+              readImage: false
+              write: true
+              edit: true
+              applyPatch: false
+          - id: tool-fs-search
+            name: '@deepseek-ai/dsh-tool-fs-search'
+            config:
+              sampleOverCapGlobResults: false
+          - id: tool-jobs
+            name: '@deepseek-ai/dsh-tool-jobs'
+            config:
+              completionDelivery: quiet
+          - id: skill-filesystem
+            name: '@deepseek-ai/dsh-skill-filesystem'
+          - id: tool-skill
+            name: '@deepseek-ai/dsh-tool-skill'
+          - id: tool-ask-user
+            name: '@deepseek-ai/dsh-tool-ask-user'
+          - id: tool-todo
+            name: '@deepseek-ai/dsh-tool-todo'
+            config:
+              allowParallelInProgress: true
+          - id: tool-web
+            name: '@deepseek-ai/dsh-tool-web'
+            config:
+              fetch: true
+              search: false
+          - id: present
+            name: '@deepseek-ai/dsh-tool-present'
+
+    - id: preset-arcfold-learning
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: arcfold-learning
+        name: Arcfold learning
+        description: 内部冻结材料学习；不用于普通对话、不取得工具或用户控制权限。
+        order: 100
+        plugins: []
+
+    - id: preset-arcfold-preparation
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: arcfold-preparation
+        name: Arcfold preparation
+        description: 已授权范围内的一次机会准备，只写新稿并全文回读。
+        order: 101
+        plugins:
+          - id: tool-executor-native
+            name: '@deepseek-ai/dsh-tool-executor-native'
+          - id: tool-fs
+            name: '@deepseek-ai/dsh-tool-fs'
+            config:
+              read: true
+              readImage: false
+              write: true
+              edit: false
+              applyPatch: false
+              readLimit: 262144
+              readMaxLineLength: 262144
+              readMaxBytes: 262144

package/runtime/README.md

@@ -0,0 +1,19 @@
+# Runtime supply preparation
+
+These are installer inputs, not a completed host lock. `host/package.json` names only the official complete DSH CLI and the fixed shared Cordis version. The maintenance command must create a **real** host lock by installing these public dependencies, then initialize a new official Web profile and add the already-built core/UI archives to obtain its real profile lock.
+
+Run only through the coordinated engineering task:
+
+```
+node scripts/prepare-runtime-locks.mjs --release-dir <accepted-release> --output <new-output>
+```
+
+The output keeps the actual installation, commands, failures and generated `runtime/supply.json` companion. It is outside the core archive: the profile lock includes the core archive integrity, so embedding that lock back into the same archive would be circular. No development lock or cache seed is copied as a host/profile lock.
+
+The optional `--offline-store <json>` describes `{storeDir,pnpmArchive,cacheDir?}`. Supply preparation needs the registry metadata cache as well as package contents for a new offline resolution. The installer copies these inputs before use and forbids links back into the immutable resources. Without them, the pinned pnpm archive and public registry packages are obtained from their declared public locations. A private research installation is never an installation source.
+
+The generated `packages.json` records every concrete host/profile package consumer and each declared dependency, optional dependency and peer resolved by the official DSH resolver. Comparison preserves package contents, scope, duplicate consumers and shared-target groups; it permits only a change in physical hoist location. All declared Cordis consumers must use the one host instance. The UI React peer uses the fixed official browser shell/loader supply instead of pretending it is a server dependency. Its actual frontend assets and UI factory are bound. No host or browser is started by supply preparation.
+
+The new profile's workspace policy is copied from `runtime/profile/pnpm-workspace.yaml`: official hoisted layout, peer auto-install disabled, lifecycle scripts disabled. The fresh default profile is also checked for those official layout/peer settings before applying the explicit release policy. A real `pnpm add` produces the profile lock; no cache lock is read as an installation lock.
+
+Supported preparation target is currently macOS arm64 with Node 24.15.0 and pnpm 11.28.5. Other targets require their own verified supply, not a platform flag override. No lifecycle scripts, app boot, model calls, credentials or ledgers are involved. Generated version-profile assets and bootstrap home are separate from the durable native home supplied at runtime.

package/runtime/bootstrap.json

@@ -0,0 +1,15 @@
+{
+  "schema": "arcfold-runtime-bootstrap-v1",
+  "platform": "darwin",
+  "arch": "arm64",
+  "node": "24.15.0",
+  "dsh": "0.2.2-rc.1",
+  "cordis": "4.1.0",
+  "pnpm": {
+    "version": "11.28.5",
+    "url": "https://registry.npmjs.org/pnpm/-/pnpm-11.28.5.tgz",
+    "sha256": "1ef4e447a68713656064f3f174c0f44719960a043a3fe2299169d08cf1dbf8ee",
+    "integrity": "sha512-SEVj0wtMKtJ8tIqpT/KzAtvOvI/2vyiBbCWJiG4UbOf3bzVPO8GkOOb16XaMMCqgpvet2CMpA81M+BQmy8FNng==",
+    "bytes": 5736887
+  }
+}

package/runtime/host/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "arcfold-official-host",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "packageManager": "pnpm@11.28.5",
+  "dependencies": {
+    "@deepseek-ai/dsh": "0.2.2-rc.1",
+    "@deepseek-ai/cordis": "4.1.0"
+  }
+}

package/runtime/host/pnpm-workspace.yaml

@@ -0,0 +1,9 @@
+packages:
+  - .
+nodeLinker: hoisted
+autoInstallPeers: true
+ignoreScripts: true
+ignorePnpmfile: true
+packageImportMethod: copy
+overrides:
+  '@deepseek-ai/cordis': 4.1.0

package/runtime/initial-policy.json

@@ -0,0 +1,94 @@
+{
+  "schema": "arcfold-initial-policy-v1",
+  "version": "2026-11-08-current-model-options",
+  "reviewedAt": "2026-11-08",
+  "initialMain": {
+    "provider": "deepseek-official",
+    "model": "deepseek-v4-pro",
+    "reasoningEffort": "high"
+  },
+  "requestMaxTokens": 128000,
+  "sources": [
+    "https://api-docs.deepseek.com/zh-cn/quick_start/pricing/",
+    "https://api-docs.deepseek.com/api/list-models/",
+    "https://developers.openai.com/api/docs/models/gpt-6-astra",
+    "https://developers.openai.com/api/docs/models/gpt-6.1-sol"
+  ],
+  "boundaries": {
+    "deepseekPrices": "Peak prices are a conservative local CNY estimate, not exact off-peak billing.",
+    "openai": "Token accounting only; context bound preserves pinned pi-ai 1.5.0 catalog 272000, not official advertised 1050000.",
+    "learning": "Initial copy only. Future main choices do not change independent learning defaults."
+  },
+  "routes": {
+    "deepseek-official": {
+      "kind": "deepseek",
+      "endpoint": "https://api.deepseek.com/anthropic/v1/messages",
+      "modelPolicies": {
+        "deepseek-v4-pro": {
+          "contextWindow": 1048576,
+          "maxOutputTokens": 393216,
+          "requestMaxTokens": 128000,
+          "reasoningEfforts": [
+            "off",
+            "low",
+            "high",
+            "max"
+          ],
+          "prices": {
+            "input": 9,
+            "output": 27,
+            "cachedInput": 0.3
+          },
+          "priceVersion": "DeepSeek-V4-Pro-0813/2026-08-17-Asia-Shanghai-peak-conservative-estimate"
+        },
+        "deepseek-flash": {
+          "contextWindow": 1048576,
+          "maxOutputTokens": 393216,
+          "requestMaxTokens": 128000,
+          "reasoningEfforts": [
+            "off",
+            "low",
+            "high",
+            "max"
+          ],
+          "prices": {
+            "input": 2,
+            "output": 8,
+            "cachedInput": 0.04
+          },
+          "priceVersion": "DeepSeek-V4.1-Flash-1017/2026-11-08-verified/peak-conservative-estimate"
+        }
+      }
+    },
+    "openai": {
+      "kind": "openai",
+      "endpoint": "https://api.openai.com/v1/responses",
+      "modelPolicies": {
+        "gpt-6-astra": {
+          "contextWindow": 272000,
+          "maxOutputTokens": 128000,
+          "requestMaxTokens": 128000,
+          "reasoningEfforts": [
+            "low",
+            "medium",
+            "high",
+            "xhigh",
+            "max"
+          ]
+        },
+        "gpt-6.1-sol": {
+          "contextWindow": 272000,
+          "maxOutputTokens": 128000,
+          "requestMaxTokens": 128000,
+          "reasoningEfforts": [
+            "low",
+            "medium",
+            "high",
+            "xhigh",
+            "max"
+          ]
+        }
+      }
+    }
+  }
+}