@deepseek-ai/dsh-host-directory-picker-auto 0.2.0-rc.2 → 0.2.1-alpha.2

package/README.i18n.yaml

@@ -9,8 +9,8 @@
   en: 919d44a5781ac8be
   zh: 0e7a812a5af49125
 /deepseek-ai-dsh-host-directory-picker-auto/summary:
-  en: e50d48e63294e9c5
-  zh: b53e3aeb1fa4b892
+  en: 3ff3bda883cccfc0
+  zh: a01af7bac5580514
 /deepseek-ai-dsh-host-directory-picker-auto/table-of-contents:
   en: d152484eb41ac6b4
   zh: 09388d293f9be9cb
@@ -18,8 +18,8 @@
   en: 9ed11c3e0a03da01
   zh: ffa5e373dfc99bb8
 /deepseek-ai-dsh-host-directory-picker-auto/use-this-package/how-the-choice-is-made:
-  en: b7705f6a53ed31f3
-  zh: 561d3b42170a513a
+  en: 8489d65845345ada
+  zh: d0b1f92cfa6aba9b
 /deepseek-ai-dsh-host-directory-picker-auto/use-this-package/what-you-get:
   en: 6571c17daecc1e29
   zh: d70089d67e41a32e
@@ -36,8 +36,8 @@
   en: abc8d3962e4580c3
   zh: 4442dde69faf680f
 /deepseek-ai-dsh-host-directory-picker-auto/understand-the-implementation/the-resolution-table:
-  en: 70aa594193336a2a
-  zh: 9ff39c2878e8f471
+  en: 0edb097d5df327e8
+  zh: e9b59fc2070dfc42
 /deepseek-ai-dsh-host-directory-picker-auto/understand-the-implementation/source-map:
   en: 43a0268a54380a72
   zh: a8f8cd0c3f502e6b
@@ -51,8 +51,8 @@
   en: ca75c51c89c2c9b0
   zh: de54f3467ef3b9be
 /deepseek-ai-dsh-host-directory-picker-auto/known-limitations-and-deferred-work:
-  en: 2caf1f412c050856
-  zh: 0e71bc66bc54bbb4
+  en: 77982e87798474a3
+  zh: b60a3ec8b4ce49e8
 /deepseek-ai-dsh-host-directory-picker-auto/known-limitations-and-deferred-work/dev-note:
-  en: ac7266ba5ad8bd79
-  zh: d9143a2061a07cfd
+  en: e67f633dc6fe7773
+  zh: 3bb0c20c93f16f98

package/README.md

@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-`dsh-host-directory-picker-auto` picks the right directory-picking interaction for every boot: it resolves the host's situation once at boot and mounts the matching backend — [native](../directory-picker-native/README.md) or [browse](../directory-picker-browse/README.md) — together with its browser half, as real Loader entries in the in-memory root tree. The resolution is one pure boot-time sample: `native` requires a loopback-only bind, a non-SSH launch, and a servable display session; anything ambiguous resolves to `browse`, which works everywhere. Pinning an interaction means composing that backend directly. The mounted capability stays stable for the service lifetime, as the seam requires.
+`dsh-host-directory-picker-auto` picks the right directory-picking interaction for every boot: it resolves the host's situation once at boot and mounts the matching backend — [native](../directory-picker-native/README.md) or [browse](../directory-picker-browse/README.md) — together with its browser half, as real Loader entries in the in-memory root tree. The resolution is one pure boot-time sample: `native` requires no remote-authority trust, a loopback-only bind, a non-SSH launch, and a servable display session; anything ambiguous resolves to `browse`, which works everywhere. Pinning an interaction means composing that backend directly. The mounted capability stays stable for the service lifetime, as the seam requires.
 
 ## Table of Contents
 
@@ -29,7 +29,7 @@ Compose this plugin instead of a concrete backend when the same composition must
 
 ### How the choice is made
 
-`native` requires every signal that the operator can see the host display and the native backend can serve it: a loopback-only bind (read from the injected `webServer`; an all-interfaces bind admits remote browsers no OS chooser can reach), no SSH launch (the shared [launch-environment](../../util/launch-environment/README.md) predicate ignores project/user `.env` values and checks only inherited non-empty `SSH_CONNECTION`/`SSH_TTY`), and a servable display session — assumed on darwin and win32; on linux, `DISPLAY`/`WAYLAND_DISPLAY` plus a zenity or kdialog binary on `PATH`; never on any other platform. Anything ambiguous resolves to `browse`, which works everywhere.
+`native` requires every signal that the operator can see the host display and the native backend can serve it: no remote-authority trust (`allowsRemoteAuthorities` is false — every validated `trustedHosts` entry names a loopback hostname), a loopback-only bind (read from the injected `webServer`; remote-authority trust or a non-loopback bind admits remote browsers no OS chooser can reach), no SSH launch (the shared [launch-environment](../../util/launch-environment/README.md) predicate ignores project/user `.env` values and checks only inherited non-empty `SSH_CONNECTION`/`SSH_TTY`), and a servable display session — assumed on darwin and win32; on linux, `DISPLAY`/`WAYLAND_DISPLAY` plus a zenity or kdialog binary on `PATH`; never on any other platform. Anything ambiguous resolves to `browse`, which works everywhere.
 
 ### What you get
 
@@ -59,7 +59,8 @@ The chooser is a pure decision plus a mount: `resolveDirectoryPickerBackend` sam
 
 | Condition | Backend |
 |---|---|
-| Bind host is not `127.0.0.1` | `browse` |
+| A `trustedHosts` entry admits a non-loopback authority | `browse` |
+| Bind host is not loopback (`isLoopbackHost`) | `browse` |
 | `SSH_CONNECTION` or `SSH_TTY` present | `browse` |
 | darwin or win32 | `native` |
 | linux with a chooser binary and a display | `native` |
@@ -108,6 +109,7 @@ These limits define when the boot-time sample can misjudge the host. They are cu
 - **Detection infers operator location from launch context, which no launch-side signal can prove** — a tmux session detached from its SSH launch loses the `SSH_*` markers; a Darwin process outside an Aqua session still counts as displayed; and a workstation-local launch later reached through `ssh -L` arrives from `127.0.0.1`, resolves `native`, and opens the chooser on the unattended workstation. A wrong `native` choice degrades to the backend's existing retryable failure dialog, and composing `-browse` directly selects the safe interaction for such deployments.
 - **The Linux chooser probe reads `PATH` only** — a zenity/kdialog reachable some other way (shell alias, non-PATH install) still resolves `browse`; installing either binary on `PATH` restores `native` eligibility at the next boot.
 - **Boot-time only** — one resolution serves every client of the boot; per-connection adaptivity (native for a local browser, browse for a remote one, same server) would need a per-client capability and the wire advertisement the seam does not carry, and waits for a deployment that serves both at once.
+- **A loopback-presenting proxy hides a remote browser** — a reverse proxy that rewrites both the request `Host` and `Origin` to a loopback authority (say `127.0.0.1:3080`), with no non-loopback `trustedHosts` entry, passes the browser-trust fence: a browser's `/api` POST carries `Origin: https://app.example`, which the Origin fence rejects unless the proxy rewrites that header too. Only then does a remote browser still resolve `native` and open the chooser on the host display.
 
 <a id="dev-note"></a>
 ### Dev Note
@@ -118,5 +120,3 @@ These limits define when the boot-time sample can misjudge the host. They are cu
 None.
 
 </details>
-
-**Runtime invariant:** No companion is published. The sole effect is one boot-time Loader-entry mount owned by the plugin fiber; the store is authoritative.

package/README.zh.md

@@ -9,7 +9,7 @@ kind: "package-reference"
 
 ## 概述
 
-`dsh-host-directory-picker-auto` 为每次启动选出正确的目录选择交互：它在启动时一次性判定宿主处境，并把匹配的后端——[原生](../directory-picker-native/README.zh.md)或[浏览](../directory-picker-browse/README.zh.md)——连同其 browser 半侧一起，作为真实的 Loader 条目挂进内存根树。判定是一次纯函数的启动时采样：`native` 要求仅回环绑定、非 SSH 启动与可服务的显示会话；任何含糊情形都判定为处处可用的 `browse`。固定某种交互就是直接组合那个后端。挂载的能力在服务生命周期内保持稳定，符合 seam 的要求。
+`dsh-host-directory-picker-auto` 为每次启动选出正确的目录选择交互：它在启动时一次性判定宿主处境，并把匹配的后端——[原生](../directory-picker-native/README.zh.md)或[浏览](../directory-picker-browse/README.zh.md)——连同其 browser 半侧一起，作为真实的 Loader 条目挂进内存根树。判定是一次纯函数的启动时采样：`native` 要求无远程 authority 信任、仅回环绑定、非 SSH 启动与可服务的显示会话；任何含糊情形都判定为处处可用的 `browse`。固定某种交互就是直接组合那个后端。挂载的能力在服务生命周期内保持稳定，符合 seam 的要求。
 
 ## 目录
 
@@ -29,7 +29,7 @@ kind: "package-reference"
 
 ### 选择是如何作出的
 
-`native` 要求「操作者看得到宿主屏幕、且原生后端能服务它」的全部信号：仅回环的绑定（从注入的 `webServer` 读取；全网卡绑定会接入任何 OS 选择器都触及不到的远程浏览器）；非 SSH 启动（共用的 [launch-environment](../../util/launch-environment/README.zh.md) 判断忽略项目与用户 `.env` 中的值，只检查继承的非空 `SSH_CONNECTION`／`SSH_TTY`）；以及可服务的显示会话——darwin 与 win32 上视为存在；linux 上要求 `DISPLAY`／`WAYLAND_DISPLAY`，外加 `PATH` 上有 zenity 或 kdialog 二进制；其余任何平台上都不成立。任何含糊情形都判定为处处可用的 `browse`。
+`native` 要求「操作者看得到宿主屏幕、且原生后端能服务它」的全部信号：无远程 authority 信任（`allowsRemoteAuthorities` 为 false——每条通过校验的 `trustedHosts` 条目都只命名回环主机名）；仅回环的绑定（从注入的 `webServer` 读取；远程 authority 信任或非回环绑定都会接入任何 OS 选择器都触及不到的远程浏览器）；非 SSH 启动（共用的 [launch-environment](../../util/launch-environment/README.zh.md) 判断忽略项目与用户 `.env` 中的值，只检查继承的非空 `SSH_CONNECTION`／`SSH_TTY`）；以及可服务的显示会话——darwin 与 win32 上视为存在；linux 上要求 `DISPLAY`／`WAYLAND_DISPLAY`，外加 `PATH` 上有 zenity 或 kdialog 二进制；其余任何平台上都不成立。任何含糊情形都判定为处处可用的 `browse`。
 
 ### 你会得到什么
 
@@ -59,7 +59,8 @@ kind: "package-reference"
 
 | 条件 | 后端 |
 |---|---|
-| 绑定宿主不是 `127.0.0.1` | `browse` |
+| 某条 `trustedHosts` 条目信任非回环 authority | `browse` |
+| 绑定地址不是 loopback（`isLoopbackHost`） | `browse` |
 | 存在 `SSH_CONNECTION` 或 `SSH_TTY` | `browse` |
 | darwin 或 win32 | `native` |
 | linux 且带选择器二进制与显示 | `native` |
@@ -108,6 +109,7 @@ kind: "package-reference"
 - **探测是从启动上下文推断操作者位置，而任何启动侧信号都无法证明这一点**——从 SSH 启动中脱离的 tmux 会话会丢失 `SSH_*` 标记；Aqua 会话之外的 Darwin 进程仍被算作有显示；在工作站本地启动、之后经 `ssh -L` 访问时，请求会从 `127.0.0.1` 到达，系统会判定 `native`，并把选择器弹在无人值守的工作站上。错误的 `native` 选择会退化为后端既有的可重试失败对话框，而对这类部署，直接组合 `-browse` 即选择安全的交互。
 - **Linux 选择器探查只读 `PATH`**——以其他途径可用的 zenity／kdialog（shell 别名、未装在 PATH 上）仍判定为 `browse`；把任一二进制装到 `PATH` 上，下次启动即恢复 `native` 资格。
 - **仅在启动时判定**——一次判定服务本次启动的所有客户端；按连接自适应（同一台服务器，本地浏览器用 native、远程浏览器用 browse）需要按客户端的能力对象以及 seam 未携带的协议通告，等到出现同时服务两种形态的部署再做。
+- **以 loopback authority 呈现的代理会藏起远程浏览器**——反向代理把请求 `Host` 和 `Origin` 一并改写为 loopback authority（如 `127.0.0.1:3080`），且没有任何非 loopback 的 `trustedHosts` 条目时，请求才会通过浏览器信任栅栏：浏览器对 `/api` 的 POST 会附带 `Origin: https://app.example`，代理若不改写该头就会被 Origin 栅栏拒绝。也只有在两者都被改写时，远程浏览器才会仍判定为 `native`，选择器在宿主屏幕上打开。
 
 <a id="dev-note"></a>
 ### 开发备注
@@ -118,5 +120,3 @@ kind: "package-reference"
 无。
 
 </details>
-
-**运行时不变式：** 不发布伴生入口。唯一 effect 是由插件 fiber 持有的 boot-time Loader-entry mount，存储是权威来源。

package/lib/index.js

@@ -1,6 +1,7 @@
 import { launchEnvironmentOf, launchedThroughSsh } from "@deepseek-ai/dsh-launch-environment";
 import { accessSync, constants } from "node:fs";
 import { delimiter, join } from "node:path";
+import { isLoopbackHost } from "@deepseek-ai/dsh-host-webserver";
 //#region lib/types/probe.js
 /**
 * PATH probe for the native backend's Linux chooser binaries: one boot-time
@@ -51,18 +52,19 @@ const present = (value) => value !== void 0 && value !== "";
 /**
 * Resolve which backend serves this boot. `native` requires every signal that
 * the operator can see the host display and the native backend can serve it:
-* a loopback-only bind (an all-interfaces bind admits remote browsers no OS
-* chooser can reach), no SSH launch (under SSH port-forwarding the chooser
-* would open on the unattended server), and a servable display session —
-* assumed on darwin/win32, requiring `DISPLAY`/`WAYLAND_DISPLAY` plus a
-* chooser binary on linux, and never true elsewhere (the native backend
-* drives exactly darwin/win32/linux). Anything ambiguous resolves to
+* no remote-authority trust, a loopback bind (remote-authority trust or a
+* non-loopback bind admits remote browsers no OS chooser can reach), no SSH
+* launch (a forwarded connection cannot display the server's chooser), and a
+* servable display session — assumed on darwin/win32, requiring
+* `DISPLAY`/`WAYLAND_DISPLAY` plus a chooser binary on linux, and never true
+* elsewhere (the native backend drives exactly darwin/win32/linux). Anything
+* ambiguous resolves to
 * `browse`, which works everywhere.
 * @param facts - the sampled host facts.
 * @returns the backend kind to mount.
 */
 function resolveDirectoryPickerBackend(facts) {
-	if (facts.bindHost !== "127.0.0.1") return "browse";
+	if (facts.allowsRemoteAuthorities || !isLoopbackHost(facts.bindHost)) return "browse";
 	if (facts.ssh) return "browse";
 	if (facts.platform === "darwin" || facts.platform === "win32") return "native";
 	if (facts.platform !== "linux" || !facts.linuxChooser) return "browse";
@@ -72,20 +74,29 @@ function resolveDirectoryPickerBackend(facts) {
 //#region lib/types/index.js
 /**
 * Adaptive chooser of the directory-picker seam: resolves the host's
-* situation once at boot (bind host, SSH launch, display session, Linux
-* chooser binary) and mounts the matching interaction — `native` or `browse`
-* — as real Loader entries in the in-memory root tree. Each interaction is a
-* pair: the Host backend serving the seam capability and the client surface
-* occupying ui-workspace's directory-flow holes. Both arrive as ordinary
-* entries, so the surface is discovered exactly as a config-row's would be
-* and one resolved choice still swaps both faces; pinning an interaction
-* remains composing that pair directly instead of this row.
+* situation once at boot (remote-authority trust, bind host, SSH launch,
+* display session, chooser binary) and mounts the matching interaction —
+* `native` or `browse` — as real Loader entries in the in-memory root tree.
+* Each interaction is a pair: the Host backend serving the seam capability and
+* the client surface occupying ui-workspace's directory-flow holes. Both
+* arrive as ordinary entries, so the surface is discovered exactly as a
+* config-row's would be and one resolved choice still swaps both faces;
+* pinning an interaction remains composing that pair directly instead of this
+* row.
 * @module @deepseek-ai/dsh-host-directory-picker-auto
 */
 /** Cordis plugin name. */
 const name = "directory-picker-auto";
-/** Required services: the effective bind host (`webServer`) and the entry tree the backend mounts into (`loader`). */
-const inject = ["webServer", "loader"];
+/**
+* Required services: HTTP deployment settings (`webServer`), the Connection
+* trust policy (`connection`), and the entry tree the backend mounts into
+* (`loader`).
+*/
+const inject = [
+	"webServer",
+	"connection",
+	"loader"
+];
 /**
 * Host backend package per resolved kind — fixed composition vocabulary, not a
 * tunable. Exported because the reference is a runtime string the static
@@ -112,11 +123,12 @@ const SURFACE_PACKAGES = {
 * surface as Loader entries; the effect's disposer removes both entries and
 * joins their fibers' teardown, so unloading this plugin returns only after
 * both faces of the mounted interaction (and their dependents) quiesced.
-* @param ctx - cordis context carrying the injected `webServer` and `loader`.
+* @param ctx - cordis context carrying the injected services.
 */
 async function apply(ctx) {
 	const backend = resolveDirectoryPickerBackend({
 		bindHost: ctx.webServer.host,
+		allowsRemoteAuthorities: ctx.connection.allowsRemoteAuthorities,
 		platform: process.platform,
 		ssh: launchedThroughSsh(launchEnvironmentOf(ctx)),
 		env: process.env,

package/lib/types/index.d.ts

@@ -1,13 +1,14 @@
 /**
  * Adaptive chooser of the directory-picker seam: resolves the host's
- * situation once at boot (bind host, SSH launch, display session, Linux
- * chooser binary) and mounts the matching interaction — `native` or `browse`
- * — as real Loader entries in the in-memory root tree. Each interaction is a
- * pair: the Host backend serving the seam capability and the client surface
- * occupying ui-workspace's directory-flow holes. Both arrive as ordinary
- * entries, so the surface is discovered exactly as a config-row's would be
- * and one resolved choice still swaps both faces; pinning an interaction
- * remains composing that pair directly instead of this row.
+ * situation once at boot (remote-authority trust, bind host, SSH launch,
+ * display session, chooser binary) and mounts the matching interaction —
+ * `native` or `browse` — as real Loader entries in the in-memory root tree.
+ * Each interaction is a pair: the Host backend serving the seam capability and
+ * the client surface occupying ui-workspace's directory-flow holes. Both
+ * arrive as ordinary entries, so the surface is discovered exactly as a
+ * config-row's would be and one resolved choice still swaps both faces;
+ * pinning an interaction remains composing that pair directly instead of this
+ * row.
  * @module @deepseek-ai/dsh-host-directory-picker-auto
  */
 import type { Context } from '@deepseek-ai/cordis';
@@ -17,7 +18,11 @@ export type { DirectoryPickerBackendKind, DirectoryPickerEnv, DirectoryPickerHos
 export { resolveDirectoryPickerBackend } from './resolve.ts';
 /** Cordis plugin name. */
 export declare const name = "directory-picker-auto";
-/** Required services: the effective bind host (`webServer`) and the entry tree the backend mounts into (`loader`). */
+/**
+ * Required services: HTTP deployment settings (`webServer`), the Connection
+ * trust policy (`connection`), and the entry tree the backend mounts into
+ * (`loader`).
+ */
 export declare const inject: string[];
 /**
  * Host backend package per resolved kind — fixed composition vocabulary, not a
@@ -39,7 +44,7 @@ export declare const SURFACE_PACKAGES: Record<DirectoryPickerBackendKind, string
  * surface as Loader entries; the effect's disposer removes both entries and
  * joins their fibers' teardown, so unloading this plugin returns only after
  * both faces of the mounted interaction (and their dependents) quiesced.
- * @param ctx - cordis context carrying the injected `webServer` and `loader`.
+ * @param ctx - cordis context carrying the injected services.
  */
 export declare function apply(ctx: Context): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/lib/types/resolve.d.ts

@@ -5,15 +5,20 @@
  * stable for the service lifetime as the seam requires.
  * @module @deepseek-ai/dsh-host-directory-picker-auto/resolve
  */
-import type { Config as HttpServerConfig } from '@deepseek-ai/dsh-host-webserver';
+import { type Config as HttpServerConfig } from '@deepseek-ai/dsh-host-webserver';
 /** Concrete interaction backend the resolver chooses between. */
 export type DirectoryPickerBackendKind = 'native' | 'browse';
 /** Environment keys the resolution reads (a `process.env` subset). */
 export type DirectoryPickerEnv = Readonly<Partial<Record<'DISPLAY' | 'WAYLAND_DISPLAY', string>>>;
 /** Host facts the backend choice is a pure function of, sampled once at boot. */
 export interface DirectoryPickerHostFacts {
-    /** Effective webserver bind host (the schema's closed loopback/all-interfaces union). */
+    /** Effective webserver bind address (a concrete IP literal of one local interface). */
     bindHost: HttpServerConfig['host'];
+    /**
+     * Whether the Connection trust policy admits a non-loopback authority (a
+     * validated `trustedHosts` entry naming a remote hostname).
+     */
+    allowsRemoteAuthorities: boolean;
     /** Host process platform. */
     platform: NodeJS.Platform;
     /** SSH launch fact from the inherited process layer, independent of `.env` values. */
@@ -26,12 +31,13 @@ export interface DirectoryPickerHostFacts {
 /**
  * Resolve which backend serves this boot. `native` requires every signal that
  * the operator can see the host display and the native backend can serve it:
- * a loopback-only bind (an all-interfaces bind admits remote browsers no OS
- * chooser can reach), no SSH launch (under SSH port-forwarding the chooser
- * would open on the unattended server), and a servable display session —
- * assumed on darwin/win32, requiring `DISPLAY`/`WAYLAND_DISPLAY` plus a
- * chooser binary on linux, and never true elsewhere (the native backend
- * drives exactly darwin/win32/linux). Anything ambiguous resolves to
+ * no remote-authority trust, a loopback bind (remote-authority trust or a
+ * non-loopback bind admits remote browsers no OS chooser can reach), no SSH
+ * launch (a forwarded connection cannot display the server's chooser), and a
+ * servable display session — assumed on darwin/win32, requiring
+ * `DISPLAY`/`WAYLAND_DISPLAY` plus a chooser binary on linux, and never true
+ * elsewhere (the native backend drives exactly darwin/win32/linux). Anything
+ * ambiguous resolves to
  * `browse`, which works everywhere.
  * @param facts - the sampled host facts.
  * @returns the backend kind to mount.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-host-directory-picker-auto",
   "description": "Adaptive chooser of the directory-picker seam: resolves the host situation at boot and mounts the native or browse backend for the DeepSeek Harness web GUI host",
-  "version": "0.2.0-rc.2",
+  "version": "0.2.1-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -27,26 +27,28 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.5",
-    "@deepseek-ai/dsh-client-ui-directory-picker-browse": "0.2.0-rc.2",
-    "@deepseek-ai/cordis": "~4.0.4",
-    "@deepseek-ai/dsh-client-ui-directory-picker-native": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-host-directory-picker-browse": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-host-directory-picker-native": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.2.0-rc.2"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-ui-directory-picker-browse": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-ui-directory-picker-native": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-host-directory-picker-browse": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-host-directory-picker-native": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.2"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis-plugin-include": "~1.0.9",
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.5",
-    "@deepseek-ai/dsh-client-ui-directory-picker-browse": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-directory-picker-native": "0.2.0-rc.2",
-    "@deepseek-ai/cordis": "~4.0.4",
-    "@deepseek-ai/dsh-host-directory-picker": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-host-directory-picker-browse": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-host-directory-picker-native": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.2.0-rc.2"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
+    "@deepseek-ai/cordis-plugin-include": "~1.0.10-alpha.1",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-ui-directory-picker-browse": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-ui-directory-picker-native": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-host-directory-picker": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-host-directory-picker-browse": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-host-directory-picker-native": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.2"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-launch-environment": "0.2.0-rc.2"
+    "@deepseek-ai/dsh-launch-environment": "0.2.1-alpha.2"
   }
 }