@deepseek-ai/dsh-plugin-manager 0.1.6-alpha.2 → 0.1.7-alpha.1

package/lib/types/operations.d.ts

@@ -1,5 +1,5 @@
 import { type ProfileManifest } from '@deepseek-ai/dsh-app-boot';
-import type { PackageResult } from './types.ts';
+import type { PackageResult, Registry } from './types.ts';
 /** Profile and invocation locations supplied by the launcher. */
 export interface PackageOperationContext {
     profile: string;
@@ -80,13 +80,37 @@ export interface PackageViewOptions {
     signal?: AbortSignal;
     /** Bound on the lookup, in milliseconds. */
     timeoutMs: number;
+    /** The registry asked; null asks the one pnpm's own configuration names. */
+    registry?: Registry;
 }
+/**
+ * Read the registry pnpm's own configuration names in the profile: its `.npmrc` chain and workspace settings,
+ * as `pnpm config get registry` resolves them.
+ * @param dir Profile directory.
+ * @param options The pnpm executable and the time bound.
+ * @returns The registry URL as pnpm printed it, or null when pnpm did not answer with one.
+ */
+export declare function readProfileRegistry(dir: string, options: {
+    command?: string;
+    args?: readonly string[];
+    env?: Readonly<Record<string, string>>;
+    timeoutMs: number;
+}): Promise<string | null>;
+/**
+ * The argument that sends one pnpm command to a registry.
+ * @param registry - the registry, or null for the one pnpm's own configuration names.
+ * @returns `--registry=<url>` for a URL; nothing for null.
+ */
+export declare function registryArguments(registry: Registry): string[];
 /**
  * Ask the registry what a spec names through `pnpm view`, run in the profile
- * directory so the registry, proxy, and authentication settings of an install apply.
+ * directory so the registry, proxy, and authentication settings of an install
+ * apply. The lookup makes one request without pnpm's own retries: a registry
+ * that does not answer is reported within `timeoutMs`, and the registries
+ * configured after it are the retry.
  * @param dir Profile directory.
  * @param spec One registry spec: a package name with an optional range.
- * @param options Cancellation and the time bound.
+ * @param options The registry, cancellation, and the time bound.
  * @returns pnpm's exit, output, and how the lookup ended.
  */
 export declare function viewProfilePackage(dir: string, spec: string, options: PackageViewOptions): Promise<PackageViewResult>;

package/lib/types/operations.js

@@ -4,7 +4,7 @@ import { mkdir, mkdtemp, open } from 'node:fs/promises';
 import { join, resolve } from 'node:path';
 import { execa } from 'execa';
 import { withFileLock, writeFileAtomic } from '@deepseek-ai/dsh-atomic-write';
-import { DEFAULT_PROFILE_BUNDLES, initProfile, PROFILE_TEMPLATES, readProfileManifest, resolveBundleDir, resolveProfileDir, loadOverlayPatches, } from '@deepseek-ai/dsh-app-boot';
+import { DEFAULT_PROFILE_BUNDLES, bundlePatchPaths, initProfile, PROFILE_TEMPLATES, readProfileManifest, resolveBundleDir, resolveProfileDir, loadOverlayPatches, } from '@deepseek-ai/dsh-app-boot';
 import { scrubbedParentEnv } from '@deepseek-ai/dsh-subprocess';
 /** Resolve relative package specs against the caller's directory.
  * @param argument One pnpm argument.
@@ -54,7 +54,8 @@ async function reconcile(before, dir, anchor, options) {
             options.onOutput?.(`dsh: warning: ${name} declares no dsh.bundle — installed as a plain dependency, not a profile layer\n`, 'stderr');
             continue;
         }
-        loadOverlayPatches('dsh', join(resolveBundleDir('dsh', name, anchor, dir), metadata.dsh.bundle.patch));
+        for (const file of bundlePatchPaths(resolveBundleDir('dsh', name, anchor, dir), metadata.dsh.bundle))
+            loadOverlayPatches('dsh', file);
         if (!bundles.includes(name)) {
             bundles.push(name);
         }
@@ -153,16 +154,45 @@ export async function runPluginCommand(context, args, options) {
         return runProfilePnpm(context, args, options);
     }, options.lockWaitMs === undefined ? undefined : { waitMs: options.lockWaitMs });
 }
+/**
+ * Read the registry pnpm's own configuration names in the profile: its `.npmrc` chain and workspace settings,
+ * as `pnpm config get registry` resolves them.
+ * @param dir Profile directory.
+ * @param options The pnpm executable and the time bound.
+ * @returns The registry URL as pnpm printed it, or null when pnpm did not answer with one.
+ */
+export async function readProfileRegistry(dir, options) {
+    const result = await execa(options.command ?? 'pnpm', [...options.args ?? [], 'config', 'get', 'registry'], {
+        cwd: dir, env: { ...scrubbedParentEnv(), ...options.env }, extendEnv: false, reject: false, stdin: 'ignore', timeout: options.timeoutMs,
+    });
+    // The registry is the last line: pnpm may print a notice before it.
+    const answer = result.exitCode === 0 ? result.stdout.trim().replace(/^[\s\S]*\n/, '').trim() : '';
+    return /^https?:\/\/\S+$/.test(answer) ? answer : null;
+}
+/**
+ * The argument that sends one pnpm command to a registry.
+ * @param registry - the registry, or null for the one pnpm's own configuration names.
+ * @returns `--registry=<url>` for a URL; nothing for null.
+ */
+export function registryArguments(registry) {
+    return registry === null ? [] : [`--registry=${registry}`];
+}
 /**
  * Ask the registry what a spec names through `pnpm view`, run in the profile
- * directory so the registry, proxy, and authentication settings of an install apply.
+ * directory so the registry, proxy, and authentication settings of an install
+ * apply. The lookup makes one request without pnpm's own retries: a registry
+ * that does not answer is reported within `timeoutMs`, and the registries
+ * configured after it are the retry.
  * @param dir Profile directory.
  * @param spec One registry spec: a package name with an optional range.
- * @param options Cancellation and the time bound.
+ * @param options The registry, cancellation, and the time bound.
  * @returns pnpm's exit, output, and how the lookup ended.
  */
 export async function viewProfilePackage(dir, spec, options) {
-    const result = await execa(options.command ?? 'pnpm', [...options.args ?? [], 'view', spec, 'name', 'version', 'description', 'dsh', '--json'], {
+    const result = await execa(options.command ?? 'pnpm', [
+        ...options.args ?? [], 'view', spec, 'name', 'version', 'description', 'dsh', '--json',
+        ...registryArguments(options.registry ?? null), '--config.fetch-retries=0',
+    ], {
         cwd: dir, env: { ...scrubbedParentEnv(), ...options.env }, extendEnv: false, reject: false, stdin: 'ignore',
         timeout: options.timeoutMs, ...options.signal === undefined ? {} : { cancelSignal: options.signal },
     });

package/lib/types/registry.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Which registries one package operation asks, in order, and what a failed
+ * attempt could not reach. A registry is asked with pnpm's `--registry`;
+ * `null` is the one pnpm's own configuration names. This module runs in the
+ * browser too, through the package's `./registry` entry, so the dialog and
+ * the Host follow one rule.
+ * @module @deepseek-ai/dsh-plugin-manager/registry
+ */
+import type { ParsedInstallSpec } from './install-spec.ts';
+import type { PluginInstallFailureKind, PluginRegistries, Registry } from './types.ts';
+/** npm's own registry: what pnpm names without any configuration, and the one public registry a plan trusts as such. */
+export declare const OFFICIAL_NPM_REGISTRY = "https://registry.npmjs.org/";
+/** An http(s) URL, as pnpm's `--registry` takes it. */
+export declare const REGISTRY_URL: RegExp;
+/**
+ * Parse a registry URL into the form pnpm compares registries in: lower-case host, trailing slash.
+ * @param url - the registry as configured or requested.
+ * @returns the normalized URL.
+ * @throws {Error} for anything but an http(s) URL.
+ */
+export declare function normalizeRegistry(url: string): string;
+/**
+ * The registries one operation asks, first to last.
+ *
+ * The configured set is the configured first registry and the fallbacks; a
+ * requested registry is asked first when it is one of them, alone otherwise,
+ * so a private registry never falls through to a public one. pnpm's own
+ * registry (`null`) belongs to the set only when what it names is known to
+ * be public: npm's own registry or one of the configured fallbacks. While it
+ * names anything else, or is unknown, it is asked alone, and a public
+ * registry asked instead never falls back into it. A registry pnpm's own
+ * configuration already names is asked once.
+ * @param requested - the caller's registry; undefined defers to the configured first one.
+ * @param configured - the configured first registry, the fallbacks after it, and what pnpm's own configuration names.
+ * @returns the registries to ask, in order; never empty.
+ */
+export declare function registryPlan(requested: Registry | undefined, configured: PluginRegistries): Registry[];
+/**
+ * What a failed attempt could not reach or get an answer from.
+ * @param kind - how the attempt failed.
+ * @param log - what the attempt printed.
+ * @param spec - the spec the attempt installed.
+ * @returns `registry` for a failure another registry can change; `spec-host` when an error line names the host a git
+ * or tarball spec is fetched from, which no registry stands in for; `other` for a failure neither explains.
+ */
+export declare function attributeFailure(kind: PluginInstallFailureKind, log: string, spec: ParsedInstallSpec): 'registry' | 'spec-host' | 'other';
+//# sourceMappingURL=registry.d.ts.map

package/lib/types/registry.js

@@ -0,0 +1,95 @@
+/**
+ * Which registries one package operation asks, in order, and what a failed
+ * attempt could not reach. A registry is asked with pnpm's `--registry`;
+ * `null` is the one pnpm's own configuration names. This module runs in the
+ * browser too, through the package's `./registry` entry, so the dialog and
+ * the Host follow one rule.
+ * @module @deepseek-ai/dsh-plugin-manager/registry
+ */
+/** npm's own registry: what pnpm names without any configuration, and the one public registry a plan trusts as such. */
+export const OFFICIAL_NPM_REGISTRY = 'https://registry.npmjs.org/';
+/** An http(s) URL, as pnpm's `--registry` takes it. */
+export const REGISTRY_URL = /^https?:\/\/\S+$/;
+/**
+ * Parse a registry URL into the form pnpm compares registries in: lower-case host, trailing slash.
+ * @param url - the registry as configured or requested.
+ * @returns the normalized URL.
+ * @throws {Error} for anything but an http(s) URL.
+ */
+export function normalizeRegistry(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch { /* named below: only an http(s) URL is a registry */ }
+    if (parsed === undefined || (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')) {
+        throw new Error(`a registry must be an http(s) URL: ${url}`);
+    }
+    if (!parsed.pathname.endsWith('/'))
+        parsed.pathname += '/';
+    return parsed.href;
+}
+/**
+ * The registries one operation asks, first to last.
+ *
+ * The configured set is the configured first registry and the fallbacks; a
+ * requested registry is asked first when it is one of them, alone otherwise,
+ * so a private registry never falls through to a public one. pnpm's own
+ * registry (`null`) belongs to the set only when what it names is known to
+ * be public: npm's own registry or one of the configured fallbacks. While it
+ * names anything else, or is unknown, it is asked alone, and a public
+ * registry asked instead never falls back into it. A registry pnpm's own
+ * configuration already names is asked once.
+ * @param requested - the caller's registry; undefined defers to the configured first one.
+ * @param configured - the configured first registry, the fallbacks after it, and what pnpm's own configuration names.
+ * @returns the registries to ask, in order; never empty.
+ */
+export function registryPlan(requested, configured) {
+    const own = configured.resolved === null ? null : normalizeRegistry(configured.resolved);
+    const fallbacks = configured.fallbackRegistries.map(normalizeRegistry);
+    const ownIsPublic = own !== null && (own === OFFICIAL_NPM_REGISTRY || fallbacks.includes(own));
+    // What a registry is compared as: pnpm's own registry stands for the URL it names, once that is known.
+    const keyOf = (registry) => registry === null ? own : normalizeRegistry(registry);
+    const known = [];
+    const keys = [];
+    for (const registry of [configured.registry, ...configured.fallbackRegistries]) {
+        if (registry === null && !ownIsPublic)
+            continue;
+        const key = keyOf(registry);
+        if (keys.includes(key))
+            continue;
+        known.push(registry === null ? null : normalizeRegistry(registry));
+        keys.push(key);
+    }
+    const first = requested === undefined ? configured.registry : requested;
+    const firstKey = keyOf(first);
+    const normalizedFirst = first === null ? null : normalizeRegistry(first);
+    // A private or unknown registry of pnpm's own, whichever way it was asked for, is asked alone.
+    if ((first === null || firstKey === own) && !ownIsPublic)
+        return [normalizedFirst];
+    if (!keys.includes(firstKey))
+        return [normalizedFirst];
+    return [normalizedFirst, ...known.filter((_registry, index) => keys[index] !== firstKey)];
+}
+/** The failures after which another registry can answer differently: this one was unreachable, or its copy may be stale. */
+const NEXT_REGISTRY_KINDS = new Set(['network', 'timeout', 'not-found', 'no-matching-version']);
+/** A line of pnpm or git output that reports a failure, as opposed to a warning or progress line. */
+const ERROR_LINE = /ERR_|ERROR|\berror\b|fatal:|Could not resolve|unable to access|ssh:|\bE[A-Z]{4,}\b/;
+/**
+ * What a failed attempt could not reach or get an answer from.
+ * @param kind - how the attempt failed.
+ * @param log - what the attempt printed.
+ * @param spec - the spec the attempt installed.
+ * @returns `registry` for a failure another registry can change; `spec-host` when an error line names the host a git
+ * or tarball spec is fetched from, which no registry stands in for; `other` for a failure neither explains.
+ */
+export function attributeFailure(kind, log, spec) {
+    if (!NEXT_REGISTRY_KINDS.has(kind))
+        return 'other';
+    const host = spec.kind === 'git' || spec.kind === 'tarball' ? spec.host?.toLowerCase() : undefined;
+    if (host === undefined)
+        return 'registry';
+    const named = log.split('\n').some(line => ERROR_LINE.test(line) && line.toLowerCase().includes(host));
+    return named ? 'spec-host' : 'registry';
+}
+//# sourceMappingURL=registry.js.map

package/lib/types/tools.js

@@ -16,6 +16,7 @@ export function apply(ctx) {
             target: { type: 'string', description: 'Plugin entry id, bundle package name, or installation spec, according to action.' },
             enabled: { type: 'boolean', description: 'Required for set operations; defaults to true for installation.' },
             approvedBuilds: { type: 'array', items: { type: 'string' }, description: 'For install_bundle: pass names from pendingBuilds only after the user explicitly approves running their install scripts in the conversation. This grants persistent permission for this profile.' },
+            registry: { type: 'string', description: 'For install_bundle: the npm registry URL asked first, when the user names one; otherwise the configured registry is asked, and its configured fallbacks while a registry is unreachable.' },
             offset: { type: 'number', description: 'Zero-based list offset; defaults to 0.' },
             limit: { type: 'number', description: 'List page size, from 1 to 100; defaults to 25.' },
         },
@@ -41,7 +42,9 @@ export function apply(ctx) {
                         throw new Error('offset must be a non-negative integer and limit must be an integer from 1 to 100');
                     }
                     const rows = args.action === 'list_plugins' ? await manager.listPlugins() : await manager.listBundles();
-                    const entries = rows.slice(offset, offset + limit);
+                    const entries = rows.slice(offset, offset + limit).map(({ meta: _meta, ...row }) => 'rows' in row
+                        ? { ...row, rows: row.rows.map(({ meta: _rowMeta, ...declared }) => declared) }
+                        : row);
                     return JSON.stringify({ entries, total: rows.length,
                         nextOffset: offset + entries.length < rows.length ? offset + entries.length : null });
                 }
@@ -59,6 +62,7 @@ export function apply(ctx) {
                     return JSON.stringify(await manager.installBundle(args.target, {
                         ...args.enabled === undefined ? {} : { enabled: args.enabled },
                         ...args.approvedBuilds === undefined ? {} : { approvedBuilds: args.approvedBuilds },
+                        ...args.registry === undefined ? {} : { registry: args.registry },
                     }));
                 case 'remove_bundle':
                     if (args.target === undefined)

package/lib/types/types.d.ts

@@ -1,5 +1,6 @@
 /** Public plugin management records shared with clients. */
 import type { Branded } from '@deepseek-ai/dsh-brand';
+import type { PluginLocalizedMeta } from '@deepseek-ai/dsh-package-manifest';
 import type { PluginInventoryEntry } from '@deepseek-ai/dsh-host-plugin-inventory/types';
 export type { PluginEntryId } from '@deepseek-ai/dsh-host-plugin-inventory/types';
 import type { PluginEntryId } from '@deepseek-ai/dsh-host-plugin-inventory/types';
@@ -24,6 +25,8 @@ export interface BundleRowInfo {
     rowId: string;
     /** The module the row names. */
     moduleName: string;
+    /** Local package display metadata, including rows whose bundle is disabled. */
+    meta?: PluginLocalizedMeta;
     /** The Loader entry carrying this row, when exactly one live entry has its id. */
     entryId?: PluginEntryId;
 }
@@ -31,8 +34,11 @@ export interface BundleRowInfo {
 export interface BundleInfo {
     name: string;
     version?: string;
-    /** `description` of the package manifest. */
+    /** Local display text with available translations or literal fallbacks, or a metadata diagnostic. */
+    meta?: PluginLocalizedMeta;
+    /** Untranslated `description` of this bundle's package manifest. */
     description?: string;
+    /** Selected in the profile manifest; a load error means its layer was skipped. */
     enabled: boolean;
     /** Whether the profile's own dependencies hold the package; false for a bundle the dsh installation supplies. */
     installed: boolean;
@@ -49,6 +55,15 @@ export interface BundleInfo {
     /** Ids of rows the bundle's patch changes without declaring them: the built-in rows it configures or disables. */
     overrides: string[];
 }
+/** A registry to install from: an http(s) URL, or null for the one pnpm's own configuration names. */
+export type Registry = string | null;
+/** The registries the manager asks: the configured first one, its fallbacks in order, and what pnpm's own configuration names. */
+export interface PluginRegistries {
+    readonly registry: Registry;
+    readonly fallbackRegistries: readonly string[];
+    /** The URL pnpm's own configuration names in the profile, read from pnpm; null when it could not be read. */
+    readonly resolved: string | null;
+}
 /** How a pnpm run failed, read off how it ended and what it printed. */
 export type PluginInstallFailureKind = 'pnpm-missing' | 'timeout' | 'not-found' | 'no-matching-version' | 'network' | 'disk-full' | 'permission' | 'build-blocked' | 'integrity' | 'unknown';
 /** Pnpm completion, including a retrieval path for unabridged diagnostics. */
@@ -79,6 +94,13 @@ export interface ChangeResult {
     pendingBuilds?: string[];
     /** Package script permissions saved before this installation attempt. */
     approvedBuilds?: string[];
+    /** The registries the installation asked, in order; `packageResult` is the last one's run. */
+    registries?: Registry[];
+    /**
+     * What the last failed run could not reach or get an answer from: the registry it asked, or the host a git or
+     * tarball spec is fetched from, which no registry stands in for; absent for a failure neither explains.
+     */
+    failedAt?: 'registry' | 'spec-host';
 }
 /** Identifies one installation from its start to its settlement, including its log chunks and cancellation. */
 export type PluginInstallRequestId = Branded<'PluginInstallRequestId'>;
@@ -88,6 +110,13 @@ export interface InstallBundleOptions {
     requestId?: PluginInstallRequestId;
     /** Explicitly allow these pending packages' scripts for this profile, then install; a name no longer pending refuses the call. */
     approvedBuilds?: string[];
+    /** The registry asked first; absent, the configured one. The configured fallbacks follow while a registry is unreachable or stale. */
+    registry?: Registry;
+}
+/** Where an inspection asks. */
+export interface InspectOptions {
+    /** The registry asked first; absent, the configured one. */
+    readonly registry?: Registry;
 }
 /** The form one install spec takes, in pnpm's vocabulary. */
 export type InstallSpecKind = 'registry' | 'path' | 'git' | 'tarball';
@@ -107,16 +136,28 @@ export type PluginSpecInspection = {
     readonly description?: string;
     /** Whether the package declares a bundle patch; null when the spec's form does not say. */
     readonly bundle: boolean | null;
+    /** The registry that answered for a name, and for the other forms the one an install of the spec asks first. */
+    readonly registry: Registry;
+    /** The host a git spec or a tarball URL is fetched from, which no registry stands in for. */
+    readonly host?: string;
 } | {
     readonly status: 'refused';
     readonly problem: PluginInspectProblem;
     /** What pnpm, the registry, or the file system said. */
     readonly reason: string;
+    /** The registries asked, in order, when the refusal came from asking them; `reason` is the last one's. */
+    readonly registries?: Registry[];
 };
-/** The Host phase of one installation, before its install call settles. */
+/** The Host phase of one installation, before its install call settles; `installing` is announced once per registry asked. */
 export interface PluginInstallProgress {
     readonly requestId: PluginInstallRequestId;
     readonly phase: 'installing' | 'cancelling' | 'applying';
+    /** With `installing`: the registry this attempt asks, its one-based position, and how many the installation may ask. */
+    readonly attempt?: {
+        readonly registry: Registry;
+        readonly index: number;
+        readonly total: number;
+    };
 }
 /** Cancellation is confirmed only after process exit and file restoration. */
 export interface PluginInstallCancellation {
@@ -159,9 +200,10 @@ declare module '@deepseek-ai/cordis' {
          */
         'plugin-manager/install-log'(chunk: PluginInstallLogChunk): void;
         /**
-         * An installation moved between its Host phases.
+         * An installation moved between its Host phases. `installing` is announced once per registry the
+         * installation asks, with the attempt's registry and position; `cancelling` and `applying` once.
          * @mode emit
-         * @param progress - the installation's request id and phase.
+         * @param progress - the installation's request id and phase, with the attempt while installing.
          */
         'plugin-manager/install-state'(progress: PluginInstallProgress): void;
     }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-plugin-manager",
   "description": "Current-profile plugin and bundle management shared by dsh CLI, Web and agent tools",
-  "version": "0.1.6-alpha.2",
+  "version": "0.1.7-alpha.1",
   "publishConfig": {
     "access": "public"
   },
@@ -22,6 +22,10 @@
       "types": "./lib/types/types.d.ts",
       "default": "./lib/types/types.js"
     },
+    "./registry": {
+      "types": "./lib/types/registry.d.ts",
+      "default": "./lib/types/registry.js"
+    },
     "./typert": {
       "types": "./lib/typert.host.d.ts",
       "default": "./lib/typert.host.js"
@@ -55,23 +59,23 @@
     "execa": "^10.0.0",
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@deepseek-ai/dsh-app-boot": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-atomic-write": "^0.1.6-alpha.2",
-    "@deepseek-ai/schemastery": "^3.18.2",
-    "@deepseek-ai/dsh-util-values": "^0.1.6-alpha.2"
+    "@deepseek-ai/dsh-app-boot": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-atomic-write": "^0.1.7-alpha.1",
+    "@deepseek-ai/schemastery": "^3.18.3",
+    "@deepseek-ai/dsh-util-values": "^0.1.7-alpha.1"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-subprocess": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tools": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-host-plugin-inventory": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-brand": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-hmr": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-user-approval": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-sandbox": "^0.1.6-alpha.2"
+    "@deepseek-ai/cordis": "^4.0.3",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.4",
+    "@deepseek-ai/dsh-host-plugin-inventory": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-subprocess": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-tools": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-hmr": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-brand": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-sandbox": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-user-approval": "^0.1.7-alpha.1"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-hmr": {
@@ -82,21 +86,22 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-tools": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-subprocess": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-hmr": "^0.1.6-alpha.2",
-    "@deepseek-ai/cordis-plugin-timer": "^1.1.4",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-brand": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-agent": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-sandbox": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-user-approval": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-host-plugin-inventory": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.1.6-alpha.2"
+    "@deepseek-ai/dsh-package-manifest": "^0.1.7-alpha.1",
+    "@deepseek-ai/cordis": "^4.0.3",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.4",
+    "@deepseek-ai/dsh-host-plugin-inventory": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-subprocess": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-tools": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-hmr": "^0.1.7-alpha.1",
+    "@deepseek-ai/cordis-plugin-timer": "^1.1.5",
+    "@deepseek-ai/dsh-brand": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-session": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-session-projection": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-sandbox": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-user-approval": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-agent": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.1.7-alpha.1"
   }
 }