@askdkc/dsh-cli 0.12.2 → 0.13.0

package/node_modules/@askdkc/dsh-auth/lib/opencode-transport.d.ts

@@ -0,0 +1,5 @@
+/** Protocol SDKs serialize the wire; the owned descriptor controls model settings. */
+import type { GenerateOptions } from '@deepseek-ai/dsh-llm';
+import type { LanguageModelV4, LanguageModelV4Prompt } from '@ai-sdk/provider';
+import { type OpenCodeModel } from './opencode-catalog.js';
+export declare function createTransport(descriptor: OpenCodeModel, options: GenerateOptions, apiKey: string, headers: Record<string, string>, prompt: LanguageModelV4Prompt, fetcher?: typeof fetch): LanguageModelV4;

package/node_modules/@askdkc/dsh-auth/lib/opencode-transport.js

@@ -0,0 +1,69 @@
+import { createAnthropic, createOpenAI, createGoogleGenerativeAI, createOpenAICompatible } from './opencode-sdk.js';
+import { OPEN_CODE_URLS } from './opencode-catalog.js';
+export function createTransport(descriptor, options, apiKey, headers, prompt, fetcher = fetch) {
+    const baseURL = OPEN_CODE_URLS[options.provider];
+    if (!baseURL)
+        throw new Error('Unknown OpenCode route');
+    const fixedFetch = async (input, init) => {
+        const url = typeof input === 'string' ? input : input instanceof URL ? input.href : input.url;
+        if (!new URL(url).href.startsWith(`${baseURL}/`))
+            throw new Error('OpenCode SDK attempted to leave its fixed route');
+        // SDK serializers keep their protocol codecs; all model settings come
+        // from our descriptor, overriding any SDK id-based limits or enums.
+        if (typeof init?.body === 'string') {
+            const body = JSON.parse(init.body);
+            const effort = descriptor.reasoning ? options.reasoningEffort : undefined;
+            const maxTokens = options.maxTokens ?? descriptor.maxTokens;
+            const sampling = descriptor.protocol === 'google' ? (body.generationConfig ??= {}) : body;
+            if (descriptor.temperature && options.temperature !== undefined)
+                sampling.temperature = options.temperature;
+            else
+                delete sampling.temperature;
+            switch (descriptor.protocol) {
+                case 'messages':
+                    body.max_tokens = maxTokens;
+                    // Effort works independently of thinking. Do not invent an
+                    // adaptive mode or budget for models advertising only effort.
+                    // https://platform.claude.com/docs/en/build-with-claude/effort
+                    if (effort)
+                        body.output_config = { ...body.output_config, effort };
+                    break;
+                case 'responses': {
+                    body.store = false;
+                    const ids = new Map(prompt.flatMap(message => message.role === 'assistant' ? message.content.flatMap(part => part.type === 'tool-call' && typeof part.providerOptions?.openai?.itemId === 'string' ? [[part.toolCallId, part.providerOptions.openai.itemId]] : []) : []));
+                    for (const item of body.input ?? [])
+                        if (item.type === 'function_call' && ids.has(item.call_id))
+                            item.id = ids.get(item.call_id);
+                    body.max_output_tokens = maxTokens;
+                    if (descriptor.reasoning) {
+                        body.include = [...new Set([...(body.include ?? []), 'reasoning.encrypted_content'])];
+                        if (effort)
+                            body.reasoning = { effort };
+                    }
+                    else
+                        delete body.reasoning;
+                    break;
+                }
+                case 'chat':
+                    body.max_tokens = maxTokens;
+                    if (effort)
+                        body.reasoning_effort = effort;
+                    break;
+                case 'google':
+                    sampling.maxOutputTokens = maxTokens;
+                    if (effort)
+                        sampling.thinkingConfig = { ...sampling.thinkingConfig, thinkingLevel: effort, includeThoughts: true };
+                    break;
+            }
+            init = { ...init, body: JSON.stringify(body) };
+        }
+        return fetcher(input, { ...init, redirect: 'error' });
+    };
+    const settings = { baseURL, apiKey, headers, fetch: fixedFetch };
+    switch (descriptor.protocol) {
+        case 'messages': return createAnthropic(settings)(descriptor.id);
+        case 'responses': return createOpenAI(settings).responses(descriptor.id);
+        case 'google': return createGoogleGenerativeAI(settings)(descriptor.id);
+        case 'chat': return createOpenAICompatible({ ...settings, name: 'opencode' })(descriptor.id);
+    }
+}

package/node_modules/@askdkc/dsh-auth/lib/pi-ai.d.ts

@@ -1,7 +1,8 @@
 /**
  * The pi-ai instance owned by the installed dsh-llm-pi-ai adapter.
  *
- * dsh-llm-pi-ai rc.2 depends on pi-ai 0.82.x while alpha.1 depends on 0.84.x.
+ * dsh-llm-pi-ai 0.2.0-rc.2 declares pi-ai ^0.87.1; the workspace override
+ * pins @earendil-works/pi-ai to the latest verified catalog (0.99.1).
  * Loading a second catalog from dsh-auth and handing its Provider objects to
  * the adapter crosses package instances and is neither type- nor runtime-safe.
  * Resolve the adapter's own dependency instead, and derive every public type

package/node_modules/@askdkc/dsh-auth/lib/pi-ai.js

@@ -1,7 +1,8 @@
 /**
  * The pi-ai instance owned by the installed dsh-llm-pi-ai adapter.
  *
- * dsh-llm-pi-ai rc.2 depends on pi-ai 0.82.x while alpha.1 depends on 0.84.x.
+ * dsh-llm-pi-ai 0.2.0-rc.2 declares pi-ai ^0.87.1; the workspace override
+ * pins @earendil-works/pi-ai to the latest verified catalog (0.99.1).
  * Loading a second catalog from dsh-auth and handing its Provider objects to
  * the adapter crosses package instances and is neither type- nor runtime-safe.
  * Resolve the adapter's own dependency instead, and derive every public type

package/node_modules/@askdkc/dsh-auth/lib/pi-routes.d.ts

@@ -0,0 +1,32 @@
+import { PiAiAdapter, type PiAiAdapterOptions } from '@deepseek-ai/dsh-llm-pi-ai';
+import type { LlmModelInfo } from '@deepseek-ai/dsh-llm';
+import type { PiAiAuthContext } from './pi-ai.js';
+export { buildOAuthProfile } from './profiles.js';
+export { createCustomProfile, CUSTOM_PROVIDER_IDS, type CustomProviderId } from './custom-profiles.js';
+/**
+ * The ambient auth context providers may consult while resolving their own
+ * auth. `env()` answers from the process environment; `fileExists()` answers
+ * about the host process's filesystem (the paths a provider asks about —
+ * `~/.aws/credentials` and friends — are facts about where this process
+ * runs, not about the project under edit).
+ */
+export declare function hostAuthContext(): PiAiAuthContext;
+/**
+ * The adapter the plugin registers: a {@link PiAiAdapter} whose *advisory
+ * catalog* is credential-gated. A provider with no stored credential
+ * lists no models — its rows never reach any model picker, which is the
+ * whole point: picking a model that would only fail with "not signed in"
+ * is noise. The gate only shapes `listModels`; `resolveModel` and requests
+ * are untouched, so a model id already saved in a session (or named
+ * explicitly) keeps resolving exactly as the registry contract promises
+ * ("advisory and never changes routing").
+ *
+ * An expired-but-stored credential still lists: token refresh runs on the
+ * next request, and a picker that hid a refreshable provider would look
+ * signed-out when it is not.
+ */
+export declare class CredentialGatedAdapter extends PiAiAdapter {
+    private readonly hasCredential;
+    constructor(options: PiAiAdapterOptions, hasCredential: (provider: string) => Promise<boolean>);
+    listModels(provider: string): Promise<readonly LlmModelInfo[]>;
+}

package/node_modules/@askdkc/dsh-auth/lib/pi-routes.js

@@ -0,0 +1,45 @@
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { PiAiAdapter } from '@deepseek-ai/dsh-llm-pi-ai';
+export { buildOAuthProfile } from './profiles.js';
+export { createCustomProfile, CUSTOM_PROVIDER_IDS } from './custom-profiles.js';
+/**
+ * The ambient auth context providers may consult while resolving their own
+ * auth. `env()` answers from the process environment; `fileExists()` answers
+ * about the host process's filesystem (the paths a provider asks about —
+ * `~/.aws/credentials` and friends — are facts about where this process
+ * runs, not about the project under edit).
+ */
+export function hostAuthContext() {
+    return {
+        env: async (name) => process.env[name],
+        fileExists: path => Promise.resolve(path.startsWith('~/') ? existsSync(join(homedir(), path.slice(2))) : existsSync(path)),
+    };
+}
+/**
+ * The adapter the plugin registers: a {@link PiAiAdapter} whose *advisory
+ * catalog* is credential-gated. A provider with no stored credential
+ * lists no models — its rows never reach any model picker, which is the
+ * whole point: picking a model that would only fail with "not signed in"
+ * is noise. The gate only shapes `listModels`; `resolveModel` and requests
+ * are untouched, so a model id already saved in a session (or named
+ * explicitly) keeps resolving exactly as the registry contract promises
+ * ("advisory and never changes routing").
+ *
+ * An expired-but-stored credential still lists: token refresh runs on the
+ * next request, and a picker that hid a refreshable provider would look
+ * signed-out when it is not.
+ */
+export class CredentialGatedAdapter extends PiAiAdapter {
+    hasCredential;
+    constructor(options, hasCredential) {
+        super(options);
+        this.hasCredential = hasCredential;
+    }
+    async listModels(provider) {
+        if (!(await this.hasCredential(provider)))
+            return [];
+        return super.listModels(provider);
+    }
+}

package/node_modules/@askdkc/dsh-auth/lib/profiles.d.ts

@@ -11,26 +11,8 @@
  */
 import type { ResolvedPiAiProviderProfile } from '@deepseek-ai/dsh-llm-pi-ai';
 import { type PiAiProvider } from './pi-ai.js';
-/** Provider routes this build mounts, in picker order. */
-export declare const OAUTH_PROVIDER_IDS: readonly ["openai-codex", "anthropic", "xai"];
-export declare const CATALOG_PROVIDER_IDS: readonly ["openai-codex", "anthropic", "xai", "opencode", "opencode-go", "openrouter"];
-export declare const AUTH_PROVIDER_IDS: readonly ["openai-codex", "anthropic", "xai", "opencode", "opencode-go", "openrouter", "orcarouter", "nous", "infron"];
-export declare const PROVIDER_ALIASES: Readonly<Record<string, string>>;
-export declare function canonicalProvider(id: string): string;
-/** One routable provider id. */
-export type OAuthProviderId = (typeof OAUTH_PROVIDER_IDS)[number];
-/**
- * One per-model catalog override a deployment may name, keyed by model id.
- * Every field is optional; an absent field keeps the installed catalog's
- * value, so one model's capacity can be tuned without restating the rest.
- */
-export interface ModelOverride {
-    /** Override the installed catalog's context window, in tokens. */
-    contextWindow?: number;
-    /** Override the installed catalog's max output tokens. */
-    maxTokens?: number;
-}
-/** The OAuth flow object for one mounted route (login/refresh/toAuth live here). */
+export { OAUTH_PROVIDER_IDS, CATALOG_PROVIDER_IDS, AUTH_PROVIDER_IDS, canonicalProvider, type ModelOverride } from './routes.js';
+import { type ModelOverride } from './routes.js';
 export declare function oauthOf(route: PiAiProvider): NonNullable<PiAiProvider['auth']['oauth']>;
 /**
  * Build the resolved profile one route registers under. Mirrors the fields

package/node_modules/@askdkc/dsh-auth/lib/profiles.js

@@ -9,21 +9,10 @@
  *
  * @module dsh-auth/profiles
  */
-import { randomUUID } from 'node:crypto';
 import { resolveRetryPolicy } from '@deepseek-ai/dsh-llm';
 import { adapterBuiltinProviders } from './pi-ai.js';
-/** Provider routes this build mounts, in picker order. */
-export const OAUTH_PROVIDER_IDS = ['openai-codex', 'anthropic', 'xai'];
-export const CATALOG_PROVIDER_IDS = [...OAUTH_PROVIDER_IDS, 'opencode', 'opencode-go', 'openrouter'];
-export const AUTH_PROVIDER_IDS = [...CATALOG_PROVIDER_IDS, 'orcarouter', 'nous', 'infron'];
-export const PROVIDER_ALIASES = {
-    hermes: 'nous',
-    'infron.ai': 'infron',
-    'opencode-zen': 'opencode',
-};
-export function canonicalProvider(id) {
-    return PROVIDER_ALIASES[id] ?? id;
-}
+export { OAUTH_PROVIDER_IDS, CATALOG_PROVIDER_IDS, AUTH_PROVIDER_IDS, canonicalProvider } from './routes.js';
+import { CATALOG_PROVIDER_IDS } from './routes.js';
 /** llm-pi-ai `DEFAULT_MAX_REQUEST_IMAGE_BYTES` (20 MiB, base64 payload bound). */
 const MAX_REQUEST_IMAGE_BYTES = 20 * 1024 * 1024;
 /** llm-pi-ai `DEFAULT_REQUEST_IMAGE_PIXEL_BUDGET` (2048×2048 pixels). */
@@ -41,24 +30,6 @@ function catalogProviderOf(id) {
     }
     return found;
 }
-/** Add the per-request routing header that the installed pi-ai catalog omits. */
-function withOpenCodeSessionHeader(catalog) {
-    return {
-        ...catalog,
-        streamSimple(model, context, options) {
-            return catalog.streamSimple(model, context, {
-                ...options,
-                headers: {
-                    ...options?.headers,
-                    // Agent turns keep their durable id; direct calls without one still
-                    // need a distinct routing identity instead of a gateway 400.
-                    'x-opencode-session': options?.sessionId || randomUUID(),
-                },
-            });
-        },
-    };
-}
-/** The OAuth flow object for one mounted route (login/refresh/toAuth live here). */
 export function oauthOf(route) {
     const oauth = route.auth.oauth;
     if (oauth === undefined) {
@@ -110,7 +81,9 @@ export function buildOAuthProfile(id, modelOverrides) {
         throw new Error(`dsh-auth: "${id}" is not a catalog provider this build mounts (${CATALOG_PROVIDER_IDS.join(', ')})`);
     }
     const provider = catalogProviderOf(id);
-    const catalog = withModelOverrides(id === 'opencode' || id === 'opencode-go' ? withOpenCodeSessionHeader(provider) : provider, modelOverrides);
+    if (id === 'opencode' || id === 'opencode-go')
+        throw new Error('OpenCode uses the native adapter');
+    const catalog = withModelOverrides(provider, modelOverrides);
     return {
         provider: id,
         displayName: catalog.name,
@@ -118,9 +91,7 @@ export function buildOAuthProfile(id, modelOverrides) {
         retryPolicy: resolveRetryPolicy(undefined, `dsh-auth: provider "${id}" retryPolicy`),
         configuredMaxTokens: new Map(),
         piProvider: catalog,
-        // Required since 0.1.5 (per-model pre-request diagnostics); this build
-        // reports none. Older adapters never read the field, so carrying it is
-        // harmless on a pre-0.1.5 host.
+        // Per-model pre-request diagnostics.
         modelErrors: new Map(),
         maxRequestImageBytes: MAX_REQUEST_IMAGE_BYTES,
         requestImagePixelBudget: REQUEST_IMAGE_PIXEL_BUDGET,

package/node_modules/@askdkc/dsh-auth/lib/routes.d.ts

@@ -0,0 +1,20 @@
+/** Provider identities and user-owned capacity overrides; no transport imports. */
+/** Provider routes this build mounts, in picker order. */
+export declare const OAUTH_PROVIDER_IDS: readonly ["openai-codex", "anthropic", "xai"];
+export declare const CATALOG_PROVIDER_IDS: readonly ["openai-codex", "anthropic", "xai", "opencode", "opencode-go", "openrouter"];
+export declare const AUTH_PROVIDER_IDS: readonly ["openai-codex", "anthropic", "xai", "opencode", "opencode-go", "openrouter", "orcarouter", "nous", "infron"];
+export declare const PROVIDER_ALIASES: Readonly<Record<string, string>>;
+export declare function canonicalProvider(id: string): string;
+/** One routable provider id. */
+export type OAuthProviderId = (typeof OAUTH_PROVIDER_IDS)[number];
+/**
+ * One per-model catalog override a deployment may name, keyed by model id.
+ * Every field is optional; an absent field keeps the installed catalog's
+ * value, so one model's capacity can be tuned without restating the rest.
+ */
+export interface ModelOverride {
+    /** Override the installed catalog's context window, in tokens. */
+    contextWindow?: number;
+    /** Override the installed catalog's max output tokens. */
+    maxTokens?: number;
+}

package/node_modules/@askdkc/dsh-auth/lib/routes.js

@@ -0,0 +1,13 @@
+/** Provider identities and user-owned capacity overrides; no transport imports. */
+/** Provider routes this build mounts, in picker order. */
+export const OAUTH_PROVIDER_IDS = ['openai-codex', 'anthropic', 'xai'];
+export const CATALOG_PROVIDER_IDS = [...OAUTH_PROVIDER_IDS, 'opencode', 'opencode-go', 'openrouter'];
+export const AUTH_PROVIDER_IDS = [...CATALOG_PROVIDER_IDS, 'orcarouter', 'nous', 'infron'];
+export const PROVIDER_ALIASES = {
+    hermes: 'nous',
+    'infron.ai': 'infron',
+    'opencode-zen': 'opencode',
+};
+export function canonicalProvider(id) {
+    return PROVIDER_ALIASES[id] ?? id;
+}

package/node_modules/@askdkc/dsh-auth/lib/service.d.ts

@@ -9,9 +9,15 @@
  */
 import { Service } from '@deepseek-ai/cordis';
 import type { Context } from '@deepseek-ai/cordis';
-import type { ResolvedPiAiProviderProfile } from '@deepseek-ai/dsh-llm-pi-ai';
 import { asStoredCredential, CredentialFile } from './credentials.js';
+import type { OpenCodeCatalog, OpenCodeRoute, OpenCodeCatalogStatus } from './opencode-catalog.js';
 import { type AskFn } from './interaction.js';
+import type { OAuthFlow } from './auth-contract.js';
+export interface AuthRoute {
+    provider: string;
+    displayName: string;
+    oauth?: OAuthFlow;
+}
 /** One provider's sign-in state; never carries token material. */
 export interface DshAuthSignInStatus {
     provider: string;
@@ -41,6 +47,8 @@ export interface DshAuthLoginResult {
 export interface DshAuthApi {
     /** Every mounted provider with masked sign-in state. */
     providers(): Promise<readonly DshAuthSignInStatus[]>;
+    catalogStatus?(provider?: string): readonly OpenCodeCatalogStatus[];
+    refreshModels?(provider?: string, signal?: AbortSignal): Promise<readonly OpenCodeCatalogStatus[]>;
     /**
      * Run one provider's login. `provider` omitted asks the interactive
      * surface to choose among providers not currently signed in.
@@ -62,7 +70,8 @@ export declare class DshAuthService extends Service {
 }
 /** Everything the api factory needs; all cordis surface is injected, so tests run without a host. */
 export interface DshAuthApiDeps {
-    profiles: ReadonlyMap<string, ResolvedPiAiProviderProfile>;
+    profiles: ReadonlyMap<string, AuthRoute>;
+    catalogs?: ReadonlyMap<OpenCodeRoute, OpenCodeCatalog>;
     store: CredentialFile;
     /** The interactive ask surface, resolved per call so mounting order never matters. */
     resolveAsk: () => AskFn | undefined;

package/node_modules/@askdkc/dsh-auth/lib/service.js

@@ -9,21 +9,14 @@
  */
 import { Service } from '@deepseek-ai/cordis';
 import { asStoredCredential } from './credentials.js';
-import { canonicalProvider, oauthOf } from './profiles.js';
+import { canonicalProvider } from './routes.js';
 import { QuestionBridge } from './interaction.js';
 import { loginNous } from './nous-oauth.js';
-/**
- * The constructed catalog provider one mounted route carries. 0.1.5 made
- * `ResolvedPiAiProviderProfile.piProvider` optional (a stored route that
- * cannot be constructed stays editable without one); this plugin mounts only
- * constructible routes, so an absent provider here is a mount defect —
- * surfaced loudly rather than as an `undefined` dereference mid-flow.
- */
-function mountedProvider(profile) {
-    if (profile.piProvider === undefined) {
-        throw new Error(`dsh-auth: provider "${profile.provider}" mounted without a constructed catalog provider`);
-    }
-    return profile.piProvider;
+function oauthOf(profile) {
+    const oauth = profile.oauth;
+    if (!oauth)
+        throw new Error(`dsh-auth: OAuth flow unavailable for ${profile.provider}`);
+    return oauth;
 }
 /** Cordis service holder; `api` is set by the plugin's apply. */
 export class DshAuthService extends Service {
@@ -61,7 +54,7 @@ export function createDshAuthApi(deps) {
         const described = new Map((await deps.store.describe()).map(row => [row.provider, row]));
         return [...deps.profiles.entries()].map(([id, profile]) => {
             const methods = authMethodsOf(id);
-            const oauth = methods.includes('oauth') ? oauthOf(mountedProvider(profile)) : undefined;
+            const oauth = methods.includes('oauth') ? oauthOf(profile) : undefined;
             const row = described.get(id);
             return {
                 provider: id,
@@ -120,7 +113,7 @@ export function createDshAuthApi(deps) {
                 throw new Error('dsh-auth: sign-in cancelled');
             let credential;
             if (method === 'oauth') {
-                const oauth = oauthOf(mountedProvider(profile));
+                const oauth = oauthOf(profile);
                 credential = asStoredCredential(await oauth.login(bridge));
                 if (credential?.type !== 'oauth')
                     throw new Error(`dsh-auth: the ${oauth.name} flow returned an unusable credential`);
@@ -157,7 +150,7 @@ export function createDshAuthApi(deps) {
             }
             changed(provider);
             const expiresAt = credential.type === 'oauth' && provider !== 'openrouter' ? credential.expires : undefined;
-            return { provider, oauthLabel: method === 'oauth' ? oauthOf(mountedProvider(profile)).name : profile.displayName, authMethods: methods,
+            return { provider, oauthLabel: method === 'oauth' ? oauthOf(profile).name : profile.displayName, authMethods: methods,
                 credentialKind: credential.type === 'api_key' || provider === 'openrouter' ? 'api-key' : 'oauth-token',
                 ...(expiresAt === undefined ? {} : { expiresAt }),
                 ...(modelWarning === undefined ? {} : { modelWarning }) };
@@ -168,6 +161,23 @@ export function createDshAuthApi(deps) {
     };
     return {
         providers: statusOf,
+        catalogStatus: provider => [...(deps.catalogs?.values() ?? [])].filter(catalog => provider === undefined || catalog.provider === canonicalProvider(provider)).map(catalog => catalog.status()),
+        refreshModels: async (provider, signal) => {
+            signal?.throwIfAborted();
+            const selected = [...(deps.catalogs?.values() ?? [])].filter(catalog => provider === undefined || catalog.provider === canonicalProvider(provider));
+            if (!selected.length)
+                throw new Error('No matching OpenCode catalog is mounted');
+            const refresh = Promise.all(selected.map(catalog => catalog.refresh()));
+            if (!signal)
+                return refresh;
+            return new Promise((resolve, reject) => {
+                const abort = () => reject(new Error('Catalog update wait cancelled; shared background refresh may continue'));
+                signal.addEventListener('abort', abort, { once: true });
+                void refresh.then(resolve, reject).finally(() => signal.removeEventListener('abort', abort));
+                if (signal.aborted)
+                    abort();
+            });
+        },
         login: async (provider, signal) => {
             const ask = deps.resolveAsk();
             let target = provider === undefined ? undefined : canonicalProvider(provider);

package/node_modules/@askdkc/dsh-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askdkc/dsh-auth",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Provider authentication and model routes for DeepSeek Harness — no dsh source patch, bundled with dsh-cli",
   "license": "MIT",
   "author": {
@@ -42,34 +42,46 @@
     "node": "^22.19 || >=24"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "npm run clean && tsc -p tsconfig.json && node scripts/bundle-opencode.mjs",
     "clean": "node -e \"require('node:fs').rmSync('lib', { recursive: true, force: true })\"",
     "smoke": "node scripts/smoke.mjs",
-    "verify": "npm run build && npm run smoke"
+    "sync:models": "node --import tsx/esm scripts/sync-owned-opencode.mjs",
+    "verify": "npm run build && npm run smoke && node --test scripts/verify-opencode.mjs && node --loader ./scripts/reject-pi-loader.mjs scripts/verify-opencode-isolated.mjs"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1 || 0.2.0-rc.1 || 0.2.0-rc.2",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1 || 0.2.0-rc.1 || 0.2.0-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1 || 0.2.0-rc.1 || 0.2.0-rc.2",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1 || 0.2.0-rc.1 || 0.2.0-rc.2",
-    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-commands": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-user-questions": "0.2.0-rc.2",
     "@deepseek-ai/schemastery": "^3.18.1"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-attachment": {
       "optional": true
+    },
+    "@deepseek-ai/dsh-llm-pi-ai": {
+      "optional": true
     }
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1 || 0.2.0-rc.1 || 0.2.0-rc.2",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1 || 0.2.0-rc.1 || 0.2.0-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1 || 0.2.0-rc.1 || 0.2.0-rc.2",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1 || 0.2.0-rc.1 || 0.2.0-rc.2",
-    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-commands": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-user-questions": "0.2.0-rc.2",
     "@deepseek-ai/schemastery": "^3.18.1",
     "@types/node": "^22.0.0",
-    "typescript": "^6.0.3"
+    "typescript": "^6.0.3",
+    "@ai-sdk/anthropic": "4.0.71",
+    "@ai-sdk/google": "4.0.87",
+    "@ai-sdk/openai": "4.0.83",
+    "@ai-sdk/openai-compatible": "3.0.62",
+    "@ai-sdk/provider": "4.0.21",
+    "esbuild": "0.28.2",
+    "zod": "4.1.8",
+    "tsx": "4.23.13"
   }
 }