@chatcode/chatcode-cli 3.0.4-rc.3 → 3.0.4-rc.5

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@chatcode/chatcode-cli",
   "description": "ChatCode CLI: TUI-first coding agent, Web launcher, profiles, and legacy DSH-compatible plugins",
-  "version": "3.0.4-rc.3",
+  "version": "3.0.4-rc.5",
   "publishConfig": {
     "access": "public"
   },
@@ -28,7 +28,7 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "1.4.0",
     "@babel/code-frame": "^7.29.0",
-    "@chatcode/cco-better-sidebar": "0.18.0-rc.7",
+    "@chatcode/cco-better-sidebar": "0.18.0-rc.8",
     "@chatcode/cco-builtin-browser": "0.1.21",
     "@chatcode/cco-chat-import": "0.17.0",
     "@chatcode/cco-computer-use": "0.3.2",
@@ -58,7 +58,7 @@
     "commander": "^15.0.0",
     "compression": "^1.8.1",
     "diff": "^9.0.0",
-    "dsh-better-sidebar": "npm:@chatcode/cco-better-sidebar@0.18.0-rc.7",
+    "dsh-better-sidebar": "npm:@chatcode/cco-better-sidebar@0.18.0-rc.8",
     "dsh-builtin-browser": "npm:@chatcode/cco-builtin-browser@0.1.21",
     "dsh-chat-import": "npm:@chatcode/cco-chat-import@0.17.0",
     "dsh-computer-use": "npm:@chatcode/cco-computer-use@0.3.2",
@@ -98,45 +98,45 @@
     "ws": "8.21.0",
     "@deepseek-ai/dsh-acp": "0.1.7-rc.2",
     "@deepseek-ai/dsh-agent": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-agent-loop": "0.1.7-rc.2",
     "@deepseek-ai/dsh-agent-loop-testkit": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-credentials-local": "0.1.7-rc.2",
     "@deepseek-ai/dsh-bash-local": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-credentials-local": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-attachment-local": "0.1.7-rc.2",
     "@deepseek-ai/dsh-experimental-agent-team": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-experimental-ptc-runtime-python": "0.1.7-rc.2",
     "@deepseek-ai/dsh-fs-sandbox": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-experimental-tool-agent-team": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "0.1.7-rc.2",
     "@deepseek-ai/dsh-fs-observation-policy": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-attachment-local": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-experimental-ptc-runtime-python": "0.1.7-rc.2",
     "@deepseek-ai/dsh-host-frontend-static": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.7-rc.2",
     "@deepseek-ai/dsh-llm-deepseek": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-llm-pi-ai": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-llm-deepseek-api-key": "0.1.7-rc.2",
     "@deepseek-ai/dsh-llm-mock-server": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-llm-deepseek-account": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-plugin-package-inventory-deepseek": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-llm-replay": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-experimental-tool-agent-team": "0.1.7-rc.2",
     "@deepseek-ai/dsh-sandbox-local": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-loader-smoke": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.7-rc.2",
     "@deepseek-ai/dsh-sdk-client": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek-account": "0.1.7-rc.2",
     "@deepseek-ai/dsh-session-checkpoint-policy": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-plugin-package-inventory-deepseek": "0.1.7-rc.2",
     "@deepseek-ai/dsh-session-log-deepseek": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-subagent": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek-api-key": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-loader-smoke": "0.1.7-rc.2",
     "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.7-rc.2",
     "@deepseek-ai/dsh-session-query": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.7-rc.2",
     "@deepseek-ai/dsh-shell-env": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-tools": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm-replay": "0.1.7-rc.2",
     "@deepseek-ai/dsh-subagent-fork-in-process": "0.1.7-rc.2",
     "@deepseek-ai/dsh-settings": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.7-rc.2",
     "@deepseek-ai/dsh-user-approval": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.1.7-rc.2"
+    "@deepseek-ai/dsh-tools": "0.1.7-rc.2"
   },
   "exports": {
     "./headless-compat": {

package/runtime/manifest.json

@@ -282,6 +282,6 @@
     "@deepseek-ai/node-addon-system",
     "@deepseek-ai/schemastery"
   ],
-  "fileCount": 3610,
-  "byteCount": 68762823
+  "fileCount": 3611,
+  "byteCount": 68769077
 }

package/runtime/node_modules/@deepseek-ai/dsh-atomic-write/lib/index.js

@@ -1,8 +1,10 @@
 import { createHash, randomBytes } from "node:crypto";
-import { link, lstat, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { link, lstat, mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { dirname, win32 } from "node:path";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
+import { closeSync, constants, fstatSync, lstatSync, openSync, readFileSync } from "node:fs";
+import { constants as constants$1 } from "node:os";
 //#region lib/types/windows-lock.js
 /** Exclusive Windows inspection for an empty or zero-filled lock left by a failed creator. */
 const execute = promisify(execFile);
@@ -46,6 +48,68 @@ async function readUnopenedWindowsLock(path) {
 	}
 }
 //#endregion
+//#region lib/types/linux-native.js
+/** Lazy Linux file-lease inspection for incomplete legacy writer records. */
+let bindings;
+const F_SETOWN = 8;
+const F_SETSIG = 10;
+const F_SETLEASE = 1024;
+const F_GETLEASE = 1025;
+const F_RDLCK = 0;
+const SC_CLK_TCK = 2;
+async function linux() {
+	return bindings ??= (async () => {
+		const libc = (await import("koffi")).default.load(null);
+		const fcntl = libc.func("fcntl", "int", [
+			"int",
+			"int",
+			"int"
+		]);
+		const sysconf = libc.func("sysconf", "long", ["int"]);
+		return {
+			fcntl,
+			clockTicks: () => sysconf(SC_CLK_TCK)
+		};
+	})();
+}
+/**
+* Read the Linux userspace clock-tick rate used by /proc process start times.
+* @returns ticks per second, or undefined when libc cannot supply the rate.
+*/
+async function linuxClockTicks() {
+	try {
+		const value = (await linux()).clockTicks();
+		return Number.isSafeInteger(value) && value > 0 ? value : void 0;
+	} catch (error) {
+		return;
+	}
+}
+/**
+* Read a small regular lock only after the kernel excludes open writers.
+* @param path - existing lock path protected by the caller's takeover claim.
+* @returns the unchanged inode's contents, or undefined when inspection is inconclusive.
+*/
+async function readClosedLinuxLock(path) {
+	let fd;
+	try {
+		const api = await linux();
+		fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+		const held = fstatSync(fd);
+		if (!held.isFile() || held.size > 128) return void 0;
+		if (api.fcntl(fd, F_SETSIG, constants$1.signals.SIGURG) !== 0) return void 0;
+		if (api.fcntl(fd, F_SETLEASE, F_RDLCK) !== 0) return void 0;
+		if (api.fcntl(fd, F_SETOWN, 0) !== 0) return void 0;
+		const record = readFileSync(fd, "utf8");
+		const current = lstatSync(path);
+		if (current.dev !== held.dev || current.ino !== held.ino || api.fcntl(fd, F_GETLEASE, 0) !== F_RDLCK) return void 0;
+		return record;
+	} catch (error) {
+		return;
+	} finally {
+		if (fd !== void 0) closeSync(fd);
+	}
+}
+//#endregion
 //#region lib/types/linux-lock.js
 /** Linux writer identity and complete-record publication; other platforms retain PID records. */
 const RECORD = /^(\d+)\r?\n(?:linux ([a-f0-9-]{36}) (\d+) ([a-f0-9]{24})\n)?$/u;
@@ -55,9 +119,14 @@ async function identity(pid) {
 	try {
 		const [boot, stat] = await Promise.all([readFile("/proc/sys/kernel/random/boot_id", "utf8"), readFile(`/proc/${pid}/stat`, "utf8")]);
 		const end = stat.lastIndexOf(")");
-		const start = end < 0 ? void 0 : stat.slice(end + 2).trim().split(/\s+/u)[19];
+		const fields = end < 0 ? [] : stat.slice(end + 2).trim().split(/\s+/u);
+		const start = fields[19];
 		if (!/^[a-f0-9-]{36}$/u.test(boot.trim()) || start === void 0 || !/^\d+$/u.test(start)) return void 0;
-		return `${boot.trim()} ${start}`;
+		return {
+			id: `${boot.trim()} ${start}`,
+			start: Number(start),
+			state: fields[0] ?? ""
+		};
 	} catch (error) {
 		return;
 	}
@@ -69,7 +138,7 @@ async function identity(pid) {
 async function writerLockRecord() {
 	const pid = `${process.pid}\n`;
 	if (process.platform !== "linux") return pid;
-	const current = await (ownIdentity ??= identity(process.pid));
+	const current = await (ownIdentity ??= identity(process.pid).then((value) => value?.id));
 	return current === void 0 ? pid : `${pid}linux ${current} ${randomBytes(12).toString("hex")}\n`;
 }
 /**
@@ -86,7 +155,7 @@ async function createWriterLock(path, record) {
 		});
 		return;
 	}
-	const temp = `${path}.${nonce}.tmp`;
+	const temp = `${path}.${randomBytes(12).toString("hex")}.tmp`;
 	try {
 		await writeFile(temp, record, {
 			mode: 384,
@@ -94,15 +163,18 @@ async function createWriterLock(path, record) {
 		});
 		await link(temp, path);
 	} finally {
-		await rm(temp, { force: true });
+		try {
+			await rm(temp, { force: true });
+		} catch (error) {}
 	}
 }
 /**
 * Determine whether a recorded writer exited, including Linux PID reuse and a previous boot.
 * @param record - untrusted contents of an existing lock file.
-* @returns true only for ESRCH or a different observable Linux process identity.
+* @param path - optional lock path for checking legacy PID records against process creation.
+* @returns true for an exited process, changed Linux identity, or a legacy record predating its current process.
 */
-async function writerExited(record) {
+async function writerExited(record, path) {
 	const match = RECORD.exec(record);
 	if (match === null) return false;
 	const pid = Number(match[1]);
@@ -112,14 +184,29 @@ async function writerExited(record) {
 	} catch (error) {
 		return error.code === "ESRCH";
 	}
-	if (process.platform !== "linux" || match[2] === void 0) return false;
+	if (process.platform !== "linux") return false;
 	const current = await identity(pid);
-	return current !== void 0 && current !== `${match[2]} ${match[3]}`;
+	if (current === void 0) return false;
+	if (current.state === "Z" || current.state === "X") return true;
+	if (match[2] !== void 0) return current.id !== `${match[2]} ${match[3]}`;
+	if (path === void 0) return false;
+	try {
+		const [metadata, kernelStat, ticks] = await Promise.all([
+			stat(path),
+			readFile("/proc/stat", "utf8"),
+			linuxClockTicks()
+		]);
+		const bootSeconds = /^btime (\d+)$/mu.exec(kernelStat)?.[1];
+		if (bootSeconds === void 0 || ticks === void 0) return false;
+		return Number(bootSeconds) * 1e3 + current.start / ticks * 1e3 > Math.max(metadata.mtimeMs, metadata.ctimeMs, metadata.birthtimeMs) + 2e3;
+	} catch (error) {
+		return false;
+	}
 }
 //#endregion
 //#region lib/types/index.js
 /**
-* Zero-dependency atomic file replacement and writer coordination.
+* Atomic file replacement and writer coordination.
 * `writeFileAtomic` writes a random-suffix sibling with exclusive create and
 * the caller's permission bits, then renames it over the target, so readers
 * observe either the old or the new complete content and a replaced file ends
@@ -129,8 +216,9 @@ async function writerExited(record) {
 * replaced; readers stay lock-free because the rename commit is atomic. A lock
 * whose recorded holder process no longer exists is taken over. Windows also
 * recovers empty or zero-filled records after an exclusive read proves no
-* creator still has the lock file open. Linux records also distinguish
-* a previous boot or reused PID through kernel process identity.
+* creator still has the lock file open. Linux uses a read lease to exclude
+* unfinished writers, and kernel process identity to distinguish a previous
+* boot, reused PID, or zombie process.
 * @module @deepseek-ai/dsh-atomic-write
 */
 const WINDOWS_TRANSIENT_FILE_ERRORS = new Set([
@@ -207,12 +295,12 @@ async function isLockContention(error, lockPath) {
 	}
 }
 /** Whether the recorded writer is absent or has a different observable Linux identity. */
-async function holderExited(record) {
-	return writerExited(record);
+async function holderExited(record, path) {
+	return writerExited(record, path);
 }
 /** A crash can leave an empty or zero-filled record before the holder's PID reaches disk. */
-function damagedRecord(record) {
-	return record.length <= 64 && /^\0*$/.test(record);
+function damagedRecord(record, limit = 64) {
+	return record.length <= limit && /^\0*$/.test(record);
 }
 /** The lock file's content, or undefined when it cannot be read. */
 async function readLockRecord(lockPath) {
@@ -223,11 +311,11 @@ async function readLockRecord(lockPath) {
 	}
 }
 /**
-* Remove an exited holder's lock or a closed, damaged Windows lock. Contenders that read the
+* Remove an exited holder's lock or a closed, damaged Windows or Linux lock. Contenders that read the
 * same record serialize on a claim file named after it. Under the claim, the
 * claimant re-reads the lock and probes its PID again, and removes it only
-* when it still holds that record and that PID is still gone. A damaged Windows
-* record instead requires an exclusive read after claiming it. The record's
+* when it still holds that record and that PID is still gone. A damaged
+* record instead requires kernel-backed inspection after claiming it. The record's
 * holder can no longer release it, and no other contender can remove it
 * without the claim, so a removal never deletes a lock another contender
 * acquired after the dead holder's, including one whose holder reused the PID.
@@ -236,24 +324,25 @@ async function readLockRecord(lockPath) {
 async function takeOverExitedLock(lockPath) {
 	const record = await readLockRecord(lockPath);
 	if (record === void 0) return false;
-	const damaged = process.platform === "win32" && damagedRecord(record);
-	if (!damaged && !await holderExited(record)) return false;
+	const damaged = (process.platform === "win32" || process.platform === "linux") && damagedRecord(record, process.platform === "linux" ? 128 : 64);
+	const partialLinuxPid = process.platform === "linux" && /^\d{1,10}$/u.test(record);
+	if (!damaged && !partialLinuxPid && !await holderExited(record, lockPath)) return false;
 	const claim = `${lockPath}.takeover-${createHash("sha256").update(record).digest("hex").slice(0, 16)}`;
 	try {
-		await writeFile(claim, `${process.pid}\n`, {
-			mode: 384,
-			flag: "wx"
-		});
+		await createWriterLock(claim, await writerLockRecord());
 	} catch (error) {
 		const code = error.code;
-		if (code === "EEXIST" || code === "EPERM") return false;
+		if (code === "EEXIST" || code === "EPERM") {
+			if (await takeOverExitedLock(claim)) return takeOverExitedLock(lockPath);
+			return false;
+		}
 		throw error;
 	}
 	try {
 		if (await readLockRecord(lockPath) !== record) return false;
-		if (damaged) {
-			if (await readUnopenedWindowsLock(lockPath) !== record) return false;
-		} else if (!await holderExited(record)) return false;
+		if (damaged || partialLinuxPid) {
+			if ((process.platform === "win32" ? await readUnopenedWindowsLock(lockPath) : await readClosedLinuxLock(lockPath)) !== record) return false;
+		} else if (!await holderExited(record, lockPath)) return false;
 		try {
 			await rm(lockPath, { force: true });
 		} catch (error) {
@@ -295,10 +384,13 @@ const DEFAULT_LOCK_WAIT_MS = 2e3;
 * user (`EPERM`) or whose record is incomplete, is waited for. On Windows,
 * empty or zero-filled records of at most 64 bytes can also be recovered after
 * exclusive inspection proves no creator still has the file open. A failed
-* inspection preserves the lock. Windows lock release retries transient file
-* interference for a bounded interval. Contention backs
+* inspection preserves the lock. Linux also recovers empty or zero-filled
+* records of at most 128 bytes and unfinished PID records after a read lease
+* excludes open writers. Dead takeover claimants are recovered automatically.
+* Windows lock release retries transient file interference for a bounded interval. Contention backs
 * off exponentially and times out after the deadline. Linux identity records
-* distinguish PID reuse and a previous boot; legacy PID-only records cannot.
+* distinguish PID reuse, a previous boot, and zombies. Legacy PID-only records
+* are recovered when the current process began after the lock's file timestamps.
 * Missing or inaccessible identity metadata never authorizes takeover. Takeover
 * proves only that the recorded process exited: an operation that starts other
 * writers must stop them with it or leave its successor a way to find them.
@@ -326,7 +418,12 @@ async function withFileLock(filename, operation, options) {
 				retriedUnconfirmedPermissionError = true;
 			} else if (await takeOverExitedLock(lockPath)) continue;
 		}
-		if (Date.now() >= deadline) throw new Error(`atomic-write: timed out waiting for the writer lock at ${lockPath}`);
+		if (Date.now() >= deadline) {
+			const held = await readLockRecord(lockPath);
+			const pid = held === void 0 ? void 0 : /^(\d+)\r?\n/u.exec(held)?.[1];
+			const state = held === void 0 ? "unreadable" : held === "" ? "empty" : /^\0+$/u.test(held) ? `zero-filled, ${String(held.length)} bytes` : pid === void 0 ? `incomplete or unrecognized, ${String(held.length)} bytes` : `PID ${pid}`;
+			throw new Error(`atomic-write: timed out waiting for the writer lock at ${lockPath} (record: ${state})`);
+		}
 		await new Promise((resolve) => setTimeout(resolve, delay));
 		delay = Math.min(delay * 2, LOCK_RETRY_MAX_MS);
 	}

package/runtime/node_modules/@deepseek-ai/dsh-atomic-write/lib/types/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * Zero-dependency atomic file replacement and writer coordination.
+ * Atomic file replacement and writer coordination.
  * `writeFileAtomic` writes a random-suffix sibling with exclusive create and
  * the caller's permission bits, then renames it over the target, so readers
  * observe either the old or the new complete content and a replaced file ends
@@ -9,8 +9,9 @@
  * replaced; readers stay lock-free because the rename commit is atomic. A lock
  * whose recorded holder process no longer exists is taken over. Windows also
  * recovers empty or zero-filled records after an exclusive read proves no
- * creator still has the lock file open. Linux records also distinguish
- * a previous boot or reused PID through kernel process identity.
+ * creator still has the lock file open. Linux uses a read lease to exclude
+ * unfinished writers, and kernel process identity to distinguish a previous
+ * boot, reused PID, or zombie process.
  * @module @deepseek-ai/dsh-atomic-write
  */
 /**
@@ -73,10 +74,13 @@ export interface FileLockOptions {
  * user (`EPERM`) or whose record is incomplete, is waited for. On Windows,
  * empty or zero-filled records of at most 64 bytes can also be recovered after
  * exclusive inspection proves no creator still has the file open. A failed
- * inspection preserves the lock. Windows lock release retries transient file
- * interference for a bounded interval. Contention backs
+ * inspection preserves the lock. Linux also recovers empty or zero-filled
+ * records of at most 128 bytes and unfinished PID records after a read lease
+ * excludes open writers. Dead takeover claimants are recovered automatically.
+ * Windows lock release retries transient file interference for a bounded interval. Contention backs
  * off exponentially and times out after the deadline. Linux identity records
- * distinguish PID reuse and a previous boot; legacy PID-only records cannot.
+ * distinguish PID reuse, a previous boot, and zombies. Legacy PID-only records
+ * are recovered when the current process began after the lock's file timestamps.
  * Missing or inaccessible identity metadata never authorizes takeover. Takeover
  * proves only that the recorded process exited: an operation that starts other
  * writers must stop them with it or leave its successor a way to find them.

package/runtime/node_modules/@deepseek-ai/dsh-atomic-write/lib/types/linux-lock.d.ts

@@ -12,7 +12,8 @@ export declare function createWriterLock(path: string, record: string): Promise<
 /**
  * Determine whether a recorded writer exited, including Linux PID reuse and a previous boot.
  * @param record - untrusted contents of an existing lock file.
- * @returns true only for ESRCH or a different observable Linux process identity.
+ * @param path - optional lock path for checking legacy PID records against process creation.
+ * @returns true for an exited process, changed Linux identity, or a legacy record predating its current process.
  */
-export declare function writerExited(record: string): Promise<boolean>;
+export declare function writerExited(record: string, path?: string): Promise<boolean>;
 //# sourceMappingURL=linux-lock.d.ts.map

package/runtime/node_modules/@deepseek-ai/dsh-atomic-write/lib/types/linux-native.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Read the Linux userspace clock-tick rate used by /proc process start times.
+ * @returns ticks per second, or undefined when libc cannot supply the rate.
+ */
+export declare function linuxClockTicks(): Promise<number | undefined>;
+/**
+ * Read a small regular lock only after the kernel excludes open writers.
+ * @param path - existing lock path protected by the caller's takeover claim.
+ * @returns the unchanged inode's contents, or undefined when inspection is inconclusive.
+ */
+export declare function readClosedLinuxLock(path: string): Promise<string | undefined>;
+//# sourceMappingURL=linux-native.d.ts.map

package/runtime/node_modules/@deepseek-ai/dsh-atomic-write/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deepseek-ai/dsh-atomic-write",
-  "description": "Zero-dependency atomic file replacement: exclusive-create random-suffix temp + rename carrying the caller-stated permissions (writeFileAtomic)",
+  "description": "Atomic file replacement and cross-process writer coordination with automatic orphan recovery",
   "version": "0.1.7-rc.2",
   "publishConfig": {
     "access": "public"
@@ -26,6 +26,9 @@
     "lib/types/**/*.d.ts"
   ],
   "license": "MIT",
+  "dependencies": {
+    "koffi": "^3.1.0"
+  },
   "peerDependencies": {
     "@deepseek-ai/cordis": "workspace:~"
   },

package/runtime/node_modules/@deepseek-ai/dsh-client-ui-settings-account/lib/client.js

@@ -4125,7 +4125,7 @@ window.__ModuleLoader__.load({
 				for (const listener of listeners) listener();
 			};
 			/** @returns the client identity for one account call, read at call time so it carries the language and zone in effect then. */
-			const client = () => accountClientMetadata(ctx.locale.getSnapshot().active, "3.0.4-rc.3");
+			const client = () => accountClientMetadata(ctx.locale.getSnapshot().active, "3.0.4-rc.5");
 			const notices = createBonusNoticeController({
 				ackRetryDelayMs: config.bonusAckRetryDelayMs,
 				ackRetryMaxDelayMs: config.bonusAckRetryMaxDelayMs,
@@ -4256,7 +4256,7 @@ window.__ModuleLoader__.load({
 				refreshAccount,
 				contactUs() {
 					const url = contactUrl(config, {
-						version: "3.0.4-rc.3",
+						version: "3.0.4-rc.5",
 						locale: ctx.locale.getSnapshot().active === "zh" ? "zh-CN" : "en",
 						width: window.screen.width,
 						height: window.screen.height,

package/runtime/node_modules/@deepseek-ai/dsh-client-ui-settings-general/lib/client.js

@@ -657,7 +657,7 @@ window.__ModuleLoader__.load({
 		function CurrentVersionRow({ t }) {
 			return (0, react_jsx_runtime.jsx)("div", {
 				className: CurrentVersionRow_module_css_default.row,
-				children: t("general.currentVersion", { version: "3.0.4-rc.3" })
+				children: t("general.currentVersion", { version: "3.0.4-rc.5" })
 			});
 		}
 		//#endregion

package/runtime/node_modules/@deepseek-ai/dsh-client-ui-sidebar/lib/client.js

@@ -167,7 +167,7 @@ window.__ModuleLoader__.load({
 		const SCROLLBAR_LINGER_MS = 2e3;
 		/** Format complete-build metadata for the local brand badge. */
 		function localBuildVersion() {
-			return `3.0.4-rc.3-4d610ce-dirty`;
+			return `3.0.4-rc.5-b482da5-dirty`;
 		}
 		/** Each panel row subscribes only to its own selection state. */
 		function PanelRow({ id, label, wide, usePanelInfo, selectPanel, renderSlot }) {

package/runtime/node_modules/@deepseek-ai/dsh-subagent/lib/types/control.d.ts

@@ -12,8 +12,8 @@ declare const CONTROL_ID_SCHEMAS: {
         childSessionId: z.ZodString;
         mode: z.ZodLiteral<"continuable">;
         delivery: z.ZodEnum<{
-            queue: "queue";
             steer: "steer";
+            queue: "queue";
         }>;
     }, z.core.$strip>;
     readonly 'subagent.interrupt': z.ZodObject<{

package/runtime/node_modules/@deepseek-ai/dsh-workspace/lib/index.js

@@ -1153,6 +1153,15 @@ var WorkspaceRegistry = class extends Service {
 		if (sessions === void 0) return;
 		await this.indexHeaders(sessions.list().filter((session) => !this.deletedSessionIds.includes(session.id)).map((session) => session.header));
 	}
+	/** Retry unresolved membership using known headers or individual persistence lookups. */
+	async refreshUnresolvedMembers() {
+		const sessions = this.ctx.get("sessions");
+		for (const [, record] of this.requireTable().entries()) for (const id of record.sessionIds) {
+			if (this.sessionPaths.has(id)) continue;
+			const header = sessions?.get(id)?.header ?? this.headers.get(id) ?? (await this.ctx.sessionPersistence.stat(id))?.header;
+			if (header !== void 0) await this.indexHeader(header);
+		}
+	}
 	reportFilteredCandidates() {
 		for (const entity of this.entities.values()) {
 			const record = this.requireTable().get(entity.id);
@@ -1201,12 +1210,11 @@ var WorkspaceRegistry = class extends Service {
 				await domain.refresh();
 				const changed = this.snapshotIdentity() !== this.refreshedState;
 				this.state = domain.global.get();
-				const missingHeaders = [...this.requireTable().entries()].some(([, record]) => record.sessionIds.some((id) => !this.sessionPaths.has(id)));
-				if (changed || missingHeaders) {
+				if (changed) {
 					await this.replaceHeaderIndex(await this.listStoredHeaders());
 					await this.indexLiveSessions();
 					this.rebuildEntities();
-				}
+				} else await this.refreshUnresolvedMembers();
 				await this.recoverPendingMutation();
 				await this.recoverSessionDeletion();
 				const newlyDeleted = this.deletedSessionIds.filter((id) => !previousDeleted.has(id));

package/runtime/node_modules/@deepseek-ai/dsh-workspace/lib/types/index.d.ts

@@ -319,6 +319,8 @@ export declare class WorkspaceRegistry extends Service {
     /** Every stored session's header, projected from the persistence snapshot listing. */
     private listStoredHeaders;
     private indexLiveSessions;
+    /** Retry unresolved membership using known headers or individual persistence lookups. */
+    private refreshUnresolvedMembers;
     private reportFilteredCandidates;
     private readSessionHeader;
     private requireTable;

package/runtime/node_modules/@deepseek-ai/dsh-workspace/lib/types/index.js

@@ -986,6 +986,20 @@ export class WorkspaceRegistry extends Service {
             return;
         await this.indexHeaders(sessions.list().filter(session => !this.deletedSessionIds.includes(session.id)).map(session => session.header));
     }
+    /** Retry unresolved membership using known headers or individual persistence lookups. */
+    async refreshUnresolvedMembers() {
+        const sessions = this.ctx.get('sessions');
+        for (const [, record] of this.requireTable().entries()) {
+            for (const id of record.sessionIds) {
+                if (this.sessionPaths.has(id))
+                    continue;
+                const header = sessions?.get(id)?.header ?? this.headers.get(id)
+                    ?? (await this.ctx.sessionPersistence.stat(id))?.header;
+                if (header !== undefined)
+                    await this.indexHeader(header);
+            }
+        }
+    }
     reportFilteredCandidates() {
         for (const entity of this.entities.values()) {
             const record = this.requireTable().get(entity.id);
@@ -1045,12 +1059,14 @@ export class WorkspaceRegistry extends Service {
                 await domain.refresh();
                 const changed = this.snapshotIdentity() !== this.refreshedState;
                 this.state = domain.global.get();
-                const missingHeaders = [...this.requireTable().entries()].some(([, record]) => record.sessionIds.some(id => !this.sessionPaths.has(id)));
-                if (changed || missingHeaders) {
+                if (changed) {
                     await this.replaceHeaderIndex(await this.listStoredHeaders());
                     await this.indexLiveSessions();
                     this.rebuildEntities();
                 }
+                else {
+                    await this.refreshUnresolvedMembers();
+                }
                 await this.recoverPendingMutation();
                 await this.recoverSessionDeletion();
                 const newlyDeleted = this.deletedSessionIds.filter(id => !previousDeleted.has(id));