@cofy-x/dsh-console 0.1.0-alpha.2 → 0.1.0-alpha.21

package/README.md

@@ -6,25 +6,39 @@
 
 ## Install
 
-DSH Console requires Node.js 24 or newer and a working DSH provider configuration.
+DSH Console requires Node.js 24 or newer, supports DeepSeek Harness `0.2.0-rc.2` through the maximum tested version `0.2.0-rc.2`, and needs a working DSH provider configuration. Console follows audited DSH releases; the compatible prerelease can differ from npm `latest`, so install the exact audited pair:
+
+Plugin admission on newer releases is still governed by DSH compatibility checks; Console never grants version exemptions or bypasses Host restrictions.
 
 ```sh
-npm install --global @deepseek-ai/dsh @cofy-x/dsh-console
+npm install --global @deepseek-ai/dsh@0.2.0-rc.2 @cofy-x/dsh-console@0.1.0-alpha.21
 dsh-console --prompt "hello"
 ```
 
-Public Alpha releases are intentionally available through npm's default `latest` channel for a simple installation path, while the published version keeps its `-alpha.x` prerelease identifier so the maturity level remains explicit.
+The launcher resolves the actual `dsh` executable on `PATH` and validates its version before changing the Console profile. Check it with `dsh --version` and `command -v dsh` on macOS/Linux, `(Get-Command dsh).Source` in PowerShell, or `where dsh` in Command Prompt. Older DSH releases are blocked with the exact repair command; newer unaudited releases receive a non-blocking warning.
+
+Public Alpha releases retain prerelease versions while the current published Console remains available through npm's default install path. The published launcher reconciles its package into the DSH profile; `pnpm start` from a source checkout resolves that checkout and is a separate development path.
 
 ## Use
 
-The launcher initializes or locates the `dsh-console` DSH profile and starts an interactive terminal session. Useful commands include:
+The launcher initializes its owned `dsh-console` DSH profile, aligns the profile package with the launcher version, and starts an interactive terminal session. It can continue persisted work before the TUI starts:
+
+```sh
+dsh-console --continue
+dsh-console --resume dsh-console-01234567-89ab-cdef-0123-456789abcdef --prompt "continue this work"
+```
+
+Startup continuation is scoped to persisted Console conversations and their persistent forks in the current directory. Useful interactive commands include:
 
 ```text
 /model       Select the active DSH model
 /new         Start a fresh conversation
-/sessions    Browse resumable sessions for the current directory
-/resume      Resume a session
+/sessions    Search, preview, rename, resume, or fork workspace Sessions
+/jobs        Inspect and stop background jobs for the interactive Session
+/goals       Inspect and manage the Session goal and its round limit
 /tools       Inspect tools exposed by the active DSH agent
+/skills      Inspect user-invocable Skills for the active DSH agent
+/preset      Show or change the blank Session's DSH Agent preset
 /permission  Select the active DSH permission preset
 /theme       Select the terminal theme
 /settings    Edit Console settings
@@ -32,4 +46,12 @@ The launcher initializes or locates the `dsh-console` DSH profile and starts an
 
 DSH owns provider credentials, model routing, session logs, and attachments. DSH Console does not maintain a separate authentication or session database.
 
+In `/sessions`, press `/` to search and Enter to preview a Session. Forking offers completed Turn boundaries, preserves the source composition and model route, and creates a durable conversation without changing files. `/jobs` never consumes the Agent's output cursor; output remains in DSH's `job_output` flow. `/goals` distinguishes durable phase from process-local activation: restored goals remain disarmed until you explicitly resume them. Native `/goal ...` commands and their attachment support remain available.
+
+Full-text search opens a DSH-managed, rebuildable SQLite index under `DSH_HOME` on the first search, not at startup. Session logs remain the durable source of truth. A user profile that explicitly disables the DSH search provider keeps that override.
+
+## Existing DSH profiles
+
+The launcher defaults to its managed `dsh-console` profile. Select an existing DSH profile with `dsh-console --profile my-profile --prompt "hello"`, or set `DSH_CONSOLE_PROFILE=my-profile` as an environment default; the explicit option wins. Create the profile through DSH first (`dsh plugin --profile my-profile add @cofy-x/dsh-console@0.1.0-alpha.21` requires `pnpm` on `PATH`). Console reconciles only its own bundle, then forwards remaining arguments to DSH. DSH owns provider, credential, package, and patch configuration. Profiles under one `DSH_HOME` share Sessions, credentials, settings, and attachments; use another `DSH_HOME` for isolation. A missing or invalid selected profile fails without falling back.
+
 See the [GitHub repository](https://github.com/cofy-x/dsh-console) for source development, architecture, alpha boundaries, and license attribution details.

package/THIRD_PARTY_NOTICES.md

@@ -1,5 +1,21 @@
 # Third-Party Notices
 
+## DeepSeek Harness preset resources
+
+The generated `dist/presets/*.patch.yml` files are copied unchanged from the public exports of the audited `@deepseek-ai/dsh-web-app` package. Their license follows.
+
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+## Other dependencies
+
 DSH Console retains and adapts portions of the terminal UI and supporting
 utilities from [Gemini CLI](https://github.com/google-gemini/gemini-cli),
 Copyright 2025 Google LLC, licensed under Apache-2.0. Files derived from that
@@ -9,37 +25,37 @@ original work are Copyright cofy-x.
 The npm package keeps third-party runtime packages external. They are resolved
 by the package manager and retain their own license files and notices.
 
-| Dependency | License |
-| --- | --- |
-| `@deepseek-ai/dsh-cmdline` | MIT |
-| `@deepseek-ai/schemastery` | MIT |
-| `@xterm/headless` | MIT |
-| `ansi-escapes` | MIT |
-| `ansi-regex` | MIT |
-| `chalk` | MIT |
-| `chardet` | MIT |
-| `clipboardy` | MIT |
-| `commander` | MIT |
-| `comment-json` | MIT |
-| `diff` | BSD-3-Clause |
-| `dotenv` | BSD-2-Clause |
-| `fdir` | MIT |
-| `fzf` | BSD-3-Clause |
-| `ignore` | MIT |
-| `ink` (`@jrichman/ink`) | MIT |
-| `ink-gradient` | MIT |
-| `ink-spinner` | MIT |
-| `lowlight` | MIT |
-| `mnemonist` | MIT |
-| `picomatch` | MIT |
-| `react` | MIT |
-| `string-width` | MIT |
-| `strip-ansi` | MIT |
-| `strip-json-comments` | MIT |
-| `tinygradient` | MIT |
-| `undici` | MIT |
-| `yargs` | MIT |
-| `zod` | MIT |
+| Dependency                 | License      |
+| -------------------------- | ------------ |
+| `@deepseek-ai/dsh-cmdline` | MIT          |
+| `@deepseek-ai/schemastery` | MIT          |
+| `@xterm/headless`          | MIT          |
+| `ansi-escapes`             | MIT          |
+| `ansi-regex`               | MIT          |
+| `chalk`                    | MIT          |
+| `chardet`                  | MIT          |
+| `clipboardy`               | MIT          |
+| `commander`                | MIT          |
+| `comment-json`             | MIT          |
+| `diff`                     | BSD-3-Clause |
+| `dotenv`                   | BSD-2-Clause |
+| `fdir`                     | MIT          |
+| `fzf`                      | BSD-3-Clause |
+| `ignore`                   | MIT          |
+| `ink` (`@jrichman/ink`)    | MIT          |
+| `ink-gradient`             | MIT          |
+| `ink-spinner`              | MIT          |
+| `lowlight`                 | MIT          |
+| `mnemonist`                | MIT          |
+| `picomatch`                | MIT          |
+| `react`                    | MIT          |
+| `string-width`             | MIT          |
+| `strip-ansi`               | MIT          |
+| `strip-json-comments`      | MIT          |
+| `tinygradient`             | MIT          |
+| `undici`                   | MIT          |
+| `yargs`                    | MIT          |
+| `zod`                      | MIT          |
 
 DeepSeek Harness services are supplied by the active DSH profile through the
 optional peer dependencies declared in `@cofy-x/dsh-console`. Those packages

package/bin/dsh-console.js

@@ -6,60 +6,313 @@
  * SPDX-License-Identifier: Apache-2.0
  */
 
-import { existsSync, readFileSync } from 'node:fs';
+import {
+  accessSync,
+  constants,
+  existsSync,
+  readFileSync,
+  realpathSync,
+  statSync,
+} from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { spawnSync } from 'node:child_process';
+import { delimiter, dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import crossSpawn from 'cross-spawn';
+import semver from 'semver';
 
 const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)));
-const manifest = JSON.parse(readFileSync(join(packageRoot, 'package.json'), 'utf8'));
-const profile = 'dsh-console';
+const manifest = JSON.parse(
+  readFileSync(join(packageRoot, 'package.json'), 'utf8'),
+);
+const packageName = '@cofy-x/dsh-console';
+const defaultProfile = 'dsh-console';
 const RESTART_EXIT_CODE = 199;
 const forwardedArgs = process.argv.slice(2);
+const compatibility = manifest.dsh?.compatibility;
 
 // Package managers preserve the conventional argument separator when running
 // scripts. It separates package-manager options and is not part of the CLI's
 // argument surface.
 if (forwardedArgs[0] === '--') forwardedArgs.shift();
 
+let cliProfile;
+let hasCliProfile = false;
+if (forwardedArgs[0] === '--profile') {
+  hasCliProfile = true;
+  forwardedArgs.shift();
+  cliProfile = forwardedArgs.shift();
+} else if (forwardedArgs[0]?.startsWith('--profile=')) {
+  hasCliProfile = true;
+  cliProfile = forwardedArgs.shift().slice('--profile='.length);
+}
+if (hasCliProfile && (!cliProfile || cliProfile.startsWith('-'))) {
+  fail(['dsh-console: --profile requires a DSH profile name.']);
+}
+if (
+  forwardedArgs[0] === '--profile' ||
+  forwardedArgs[0]?.startsWith('--profile=')
+) {
+  fail(['dsh-console: select a DSH profile only once.']);
+}
+
 if (forwardedArgs[0] === '--version' || forwardedArgs[0] === '-V') {
   process.stdout.write(`${manifest.version}\n`);
   process.exit(0);
 }
 
+function fail(lines) {
+  process.stderr.write(`${lines.join('\n')}\n`);
+  process.exit(1);
+}
+
+const profile = hasCliProfile
+  ? cliProfile
+  : process.env.DSH_CONSOLE_PROFILE || defaultProfile;
+if (
+  profile === '.' ||
+  profile === '..' ||
+  profile === 'node_modules' ||
+  profile.includes('/') ||
+  profile.includes('\\')
+) {
+  fail([`dsh-console: invalid DSH profile name ${JSON.stringify(profile)}.`]);
+}
+if (profile.toLowerCase() === 'desktop') {
+  fail([
+    'dsh-console: the desktop profile is managed by DeepSeek Harness Desktop.',
+  ]);
+}
+
+const minimumDshVersion = semver.valid(compatibility?.minimum);
+const maximumTestedDshVersion = semver.valid(compatibility?.maximumTested);
+if (
+  !minimumDshVersion ||
+  !maximumTestedDshVersion ||
+  semver.gt(minimumDshVersion, maximumTestedDshVersion)
+) {
+  fail(['dsh-console: invalid DSH compatibility metadata in package.json.']);
+}
+
+const installDshCommand = `npm install --global @deepseek-ai/dsh@${minimumDshVersion}`;
+
+function environmentValue(name) {
+  const entry = Object.entries(process.env).find(
+    ([key]) => key.toLowerCase() === name.toLowerCase(),
+  );
+  return entry?.[1];
+}
+
+function resolveDshExecutable() {
+  const searchPath = environmentValue('PATH');
+  if (!searchPath) return undefined;
+
+  const names = ['dsh'];
+  if (process.platform === 'win32') {
+    const extensions = (environmentValue('PATHEXT') || '.COM;.EXE;.BAT;.CMD')
+      .split(delimiter)
+      .filter(Boolean);
+    names.push(...extensions.map((extension) => `dsh${extension}`));
+  }
+
+  let inaccessible;
+  for (const directory of searchPath.split(delimiter)) {
+    const root = resolve(directory || process.cwd());
+    for (const name of names) {
+      const candidate = join(root, name);
+      try {
+        if (!statSync(candidate).isFile()) continue;
+        if (process.platform !== 'win32') accessSync(candidate, constants.X_OK);
+        return candidate;
+      } catch (error) {
+        if (existsSync(candidate) && error?.code === 'EACCES') {
+          inaccessible ||= candidate;
+        }
+      }
+    }
+  }
+  return inaccessible;
+}
+
+function parseDshVersion(output) {
+  const match = output.match(
+    /(?:^|[^0-9A-Za-z-])v?(\d+\.\d+\.\d+(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?)(?=$|[^0-9A-Za-z-])/,
+  );
+  return match ? semver.valid(match[1]) : null;
+}
+
+function remediation(executable = 'not found on PATH') {
+  return [
+    `DSH executable: ${executable}`,
+    `Minimum supported version: ${minimumDshVersion}`,
+    `Install the compatible release: ${installDshCommand}`,
+    'Then verify: dsh --version',
+  ];
+}
+
+const dshExecutable = resolveDshExecutable();
+if (!dshExecutable) {
+  fail([
+    'dsh-console: DeepSeek Harness is required but dsh was not found.',
+    ...remediation(),
+  ]);
+}
+
+const versionResult = crossSpawn.sync(dshExecutable, ['--version'], {
+  encoding: 'utf8',
+  env: process.env,
+  stdio: ['ignore', 'pipe', 'pipe'],
+});
+if (versionResult.error) {
+  fail([
+    'dsh-console: unable to execute DeepSeek Harness.',
+    ...remediation(dshExecutable),
+    `Reason: ${versionResult.error.message}`,
+  ]);
+}
+if (versionResult.signal || versionResult.status !== 0) {
+  fail([
+    'dsh-console: dsh --version did not complete successfully.',
+    ...remediation(dshExecutable),
+    `Exit: ${versionResult.signal || String(versionResult.status)}`,
+  ]);
+}
+
+const versionOutput = `${versionResult.stdout || ''}\n${versionResult.stderr || ''}`;
+const detectedDshVersion = parseDshVersion(versionOutput);
+if (!detectedDshVersion) {
+  const summary = versionOutput.trim().replace(/\s+/g, ' ').slice(0, 160);
+  fail([
+    'dsh-console: dsh --version returned an unrecognized version.',
+    ...remediation(dshExecutable),
+    `Output: ${summary ? JSON.stringify(summary) : '(empty)'}`,
+  ]);
+}
+if (semver.lt(detectedDshVersion, minimumDshVersion)) {
+  fail([
+    'dsh-console: the selected DeepSeek Harness release is too old.',
+    `DSH executable: ${dshExecutable}`,
+    `Detected version: ${detectedDshVersion}`,
+    `Minimum supported version: ${minimumDshVersion}`,
+    `Install the compatible release: ${installDshCommand}`,
+    'Then verify: dsh --version',
+  ]);
+}
+if (semver.gt(detectedDshVersion, maximumTestedDshVersion)) {
+  process.stderr.write(
+    `dsh-console: warning: DSH ${detectedDshVersion} at ${dshExecutable} is newer than the maximum tested version ${maximumTestedDshVersion}; continuing without a formal compatibility guarantee.\n`,
+  );
+}
+
 const dshHome = process.env.DSH_HOME || join(homedir(), '.dsh');
+const profileRoot = join(dshHome, 'profiles', profile);
+const profileManifest = join(profileRoot, 'package.json');
 const installedManifest = join(
-  dshHome,
-  'profiles',
-  profile,
+  profileRoot,
   'node_modules',
   '@cofy-x',
   'dsh-console',
   'package.json',
 );
+if (profile !== defaultProfile && !existsSync(profileManifest)) {
+  fail([
+    `dsh-console: DSH profile ${JSON.stringify(profile)} does not exist.`,
+    `Create it first with: dsh plugin --profile ${JSON.stringify(profile)} add <package>`,
+    `Profile directory: ${profileRoot}`,
+  ]);
+}
+
+function readJson(path) {
+  try {
+    return JSON.parse(readFileSync(path, 'utf8'));
+  } catch {
+    return undefined;
+  }
+}
+
+function profileNeedsInstall({ explicitPackageSpec, localCheckout }) {
+  if (explicitPackageSpec) return true;
+
+  const installed = readJson(installedManifest);
+  if (installed?.name !== packageName || installed.version !== manifest.version)
+    return true;
+
+  if (localCheckout) {
+    try {
+      return (
+        realpathSync(dirname(installedManifest)) !== realpathSync(packageRoot)
+      );
+    } catch {
+      return true;
+    }
+  }
+
+  const configured = readJson(profileManifest)?.dependencies?.[packageName];
+  return configured !== manifest.version;
+}
 
 function run(command, args) {
-  const result = spawnSync(command, args, { stdio: 'inherit', env: process.env });
+  const result = crossSpawn.sync(command, args, {
+    stdio: 'inherit',
+    env: process.env,
+  });
   if (result.error) {
-    process.stderr.write(`dsh-console: unable to run ${command}: ${result.error.message}\n`);
+    process.stderr.write(
+      `dsh-console: unable to run ${command}: ${result.error.message}\n`,
+    );
     process.exit(1);
   }
   if (result.signal) process.kill(process.pid, result.signal);
   return result.status ?? 1;
 }
 
-if (!existsSync(installedManifest)) {
-  const localCheckout = existsSync(join(packageRoot, 'src'));
-  const packageSpec =
-    process.env.DSH_CONSOLE_PACKAGE_SPEC ||
-    (localCheckout ? packageRoot : `@cofy-x/dsh-console@${manifest.version}`);
-  const status = run('dsh', ['plugin', '--profile', profile, 'add', packageSpec]);
+const localCheckout = existsSync(join(packageRoot, 'src'));
+const explicitPackageSpec = process.env.DSH_CONSOLE_PACKAGE_SPEC;
+const packageSpec =
+  explicitPackageSpec ||
+  (localCheckout ? packageRoot : `${packageName}@${manifest.version}`);
+
+const needsInstall = profileNeedsInstall({
+  explicitPackageSpec,
+  localCheckout,
+});
+if (needsInstall && profile !== defaultProfile) {
+  // Ask DSH to validate the existing bundle stack before package mutation.
+  // Its default dump does not boot the app or parse the user patch.
+  const inspection = crossSpawn.sync(
+    dshExecutable,
+    ['--profile', profile, '--dump-default-config'],
+    {
+      encoding: 'utf8',
+      env: process.env,
+      stdio: ['ignore', 'ignore', 'pipe'],
+    },
+  );
+  if (inspection.error || inspection.signal || inspection.status !== 0) {
+    const reason =
+      inspection.error?.message ||
+      inspection.stderr?.trim().slice(0, 500) ||
+      inspection.signal ||
+      `exit ${String(inspection.status)}`;
+    fail([
+      `dsh-console: DSH profile ${JSON.stringify(profile)} could not be loaded; no Console package was installed.`,
+      `Reason: ${reason}`,
+    ]);
+  }
+}
+
+if (needsInstall) {
+  const status = run(dshExecutable, [
+    'plugin',
+    '--profile',
+    profile,
+    'add',
+    packageSpec,
+  ]);
   if (status !== 0) process.exit(status);
 }
 
 let status;
 do {
-  status = run('dsh', ['--profile', profile, ...forwardedArgs]);
+  status = run(dshExecutable, ['--profile', profile, ...forwardedArgs]);
 } while (status === RESTART_EXIT_CODE);
 process.exit(status);

package/cordis.patch.yml

@@ -2,7 +2,26 @@
 - id: hmr
   disabled: true
 
+# Keep startup lazy; DSH owns and rebuilds this derived search index.
+# Config patches replace the whole row, so retain an explicit durable path.
+- id: session-query-sqlite
+  config:
+    path: !!js dshHomePath('dsh-console-session-search.sqlite')
+    openAt: first-search
+
 - insert:
+    # Standard and Cordis presets sample this Host-owned setting when they
+    # install delegation tools for a Session.
+    - id: subagent-model-selection-settings
+      name: '@deepseek-ai/dsh-tool-subagent/model-selection-settings'
+
+    # Console owns a per-Session Agent composition, including its scoped Skills.
+    # dsh-base does not mount the preset roster, so the Console bundle must.
+    - id: agent-preset-registry
+      name: '@deepseek-ai/dsh-agent-preset-registry'
+      config:
+        default: standard
+
     - id: dsh-console-startup
       name: '@cofy-x/dsh-console/dsh/startup'
 
@@ -12,3 +31,6 @@
       config:
         prompt: !!js ctx.dshConsoleStartup.prompt
         debug: !!js ctx.dshConsoleStartup.debug
+        pokemon: !!js ctx.dshConsoleStartup.pokemon
+        continueSession: !!js ctx.dshConsoleStartup.continueSession
+        resumeSessionId: !!js ctx.dshConsoleStartup.resumeSessionId