@deepseek-ai/dsh 0.0.1-rc.1

package/lib/plugin-Xxr7y7sa.js

@@ -0,0 +1,129 @@
+import { t as INSTALL_ANCHOR } from "./profile-boot-DQYCwKII.js";
+import { existsSync } from "node:fs";
+import { DEFAULT_PROFILE_BUNDLES, PROFILE_TEMPLATES, initProfile, readProfileManifest, resolveBundleDir, resolveProfileDir, writeProfileManifest } from "@deepseek-ai/dsh-app-boot";
+import { join, resolve } from "node:path";
+import { spawnSync } from "node:child_process";
+//#region lib/types/plugin.js
+/**
+* `dsh plugin --profile <name> <args...>` — profile plugin management as a
+* thin pnpm forwarder: initialize the profile on first use, run
+* `pnpm <args...>` in the profile directory, then reconcile the
+* `dsh.profile.bundles` layer list against the installed state (a dependency
+* resolving to a package that declares `dsh.bundle` joins the layer stack; a
+* removed or bundle-less dependency leaves it). Reconciling by installed
+* state, not by dependency diff, means `update` activates a package that
+* gained its `dsh.bundle` declaration in a newer version.
+* @module @deepseek-ai/dsh/plugin
+*/
+const NAME = "dsh";
+/**
+* Whether a resolved dependency exports a profile patch, i.e. is a bundle.
+* @param packageName - the dependency's package name.
+* @param profileDir - the profile directory (resolution anchor).
+* @returns true when the package manifest declares `dsh.bundle`.
+*/
+function exportsPatch(packageName, profileDir) {
+	let dir;
+	try {
+		dir = resolveBundleDir(NAME, packageName, INSTALL_ANCHOR, profileDir);
+	} catch {
+		return false;
+	}
+	return readProfileManifest(NAME, dir).dsh?.bundle?.patch !== void 0;
+}
+/**
+* Reconcile `dsh.profile.bundles` against the installed state: pnpm has
+* already written the real installed names (so a git/path/tarball/alias spec
+* on the command line reconciles by its true package name) and materialized
+* the packages. A dependency that resolves to a `dsh.bundle`-declaring
+* package joins the layer stack (appended in dependency order); a
+* dependency-listed name that no longer does — removed, or the installed
+* version dropped the declaration — leaves it. In-box bundles from the
+* profile template are not dependencies and are never touched. Warns once
+* per newly-added bundle-less dependency (a plain library is fine; the
+* warning is orientation).
+*/
+function reconcilePlugins(before, profileDir) {
+	const after = readProfileManifest(NAME, profileDir);
+	const beforeDeps = new Set(Object.keys(before.dependencies ?? {}));
+	const dependencies = Object.keys(after.dependencies ?? {});
+	const plugins = after.dsh?.profile?.bundles ?? [];
+	let changed = false;
+	for (const packageName of dependencies) {
+		const isBundle = exportsPatch(packageName, profileDir);
+		if (isBundle && !plugins.includes(packageName)) {
+			plugins.push(packageName);
+			changed = true;
+		} else if (!isBundle && !beforeDeps.has(packageName)) process.stderr.write(`${NAME}: warning: ${packageName} declares no dsh.bundle — installed as a plain dependency, not a profile layer (a later update that gains one activates it automatically)
+`);
+	}
+	const dependencySet = new Set(dependencies);
+	for (const packageName of [...plugins]) {
+		const wasDependency = beforeDeps.has(packageName) || dependencySet.has(packageName);
+		const stillBundle = dependencySet.has(packageName) && exportsPatch(packageName, profileDir);
+		if (wasDependency && !stillBundle) {
+			plugins.splice(plugins.indexOf(packageName), 1);
+			changed = true;
+		}
+	}
+	if (!changed) return;
+	after.dsh = {
+		...after.dsh,
+		profile: {
+			...after.dsh?.profile,
+			bundles: plugins
+		}
+	};
+	writeProfileManifest(profileDir, after);
+}
+/**
+* Rewrite relative filesystem specs against the user's invoking directory.
+* pnpm runs with cwd = the profile directory, so a bare `.` or `../plugin`
+* (or their `file:`/`link:` forms) would silently resolve inside the profile
+* — `add .` from a plugin checkout would self-link the profile. Absolute
+* specs, registry names, and every other pnpm argument pass through
+* untouched.
+* @param argument - one pnpm argument, verbatim from argv.
+* @param cwd - the directory `dsh` was invoked from.
+* @returns the argument with a relative path spec anchored to `cwd`.
+*/
+function anchorPathSpec(argument, cwd) {
+	const match = /^(?<prefix>(?:file|link):)?(?<path>\.{1,2}(?:[/\\].*)?)$/.exec(argument);
+	if (match?.groups?.path === void 0) return argument;
+	return `${match.groups.prefix ?? ""}${resolve(cwd, match.groups.path)}`;
+}
+/**
+* Run one `dsh plugin` invocation: init if needed, forward to pnpm, reconcile.
+* @param profile - the profile name.
+* @param args - pnpm arguments with relative path specs anchored to the invoking directory.
+* @returns the pnpm exit code.
+*/
+function runPlugin(profile, args) {
+	const dir = resolveProfileDir(profile);
+	if (!existsSync(join(dir, "package.json"))) {
+		initProfile(dir, PROFILE_TEMPLATES[profile] ?? DEFAULT_PROFILE_BUNDLES);
+		process.stderr.write(`${NAME}: initialized profile ${profile} at ${dir}\n`);
+	}
+	const before = readProfileManifest(NAME, dir);
+	const result = spawnSync("pnpm", args.map((argument) => anchorPathSpec(argument, process.cwd())), {
+		cwd: dir,
+		stdio: "inherit",
+		shell: process.platform === "win32"
+	});
+	if (result.error !== void 0) {
+		if (result.error.code === "ENOENT") {
+			process.stderr.write(`${NAME}: pnpm not found on PATH — install pnpm to manage profile plugins\n`);
+			return 127;
+		}
+		throw result.error;
+	}
+	const exitCode = result.status ?? 1;
+	if (exitCode === 0) reconcilePlugins(before, dir);
+	else {
+		process.stderr.write(`${NAME}: pnpm failed in profile directory ${dir}\n`);
+		if (args.some((argument) => /^git\+|^github:|\.git(?:#|$)/.test(argument))) process.stderr.write(`${NAME}: git-hosted plugins build on install via their prepare script, which pnpm blocks until allowed — add the exact key pnpm printed above under allowBuilds in ${join(dir, "pnpm-workspace.yaml")}, then re-run\n`);
+	}
+	return exitCode;
+}
+//#endregion
+export { runPlugin };

package/lib/profile-boot-DQYCwKII.js

@@ -0,0 +1,335 @@
+import { writeFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { PROFILE_PATCH_FILENAME, boot, composeEntries, healProfilesModuleFallback, installFailLoud, loadOptionalPatches, loadOverlayPatches, loadProfile, watchUserPatches } from "@deepseek-ai/dsh-app-boot";
+import { join, resolve } from "node:path";
+import { dshHomePath, resolveDshHome } from "@deepseek-ai/dsh-paths";
+import { DSH_ENVIRONMENT_KEY } from "@deepseek-ai/dsh-environment";
+import { provideCmdline } from "@deepseek-ai/dsh-cmdline";
+//#region lib/types/process-shutdown.js
+/** Bounded, escalating process shutdown for the long-lived CLI surfaces. */
+/** Maximum grace allowed for the application tree to dispose before process exit. */
+const PROCESS_SHUTDOWN_TIMEOUT_MS = 5e3;
+/**
+* Create one process-exit controller around an application disposer.
+* @param dispose - Whole-application teardown that resolves at quiescence.
+* @param forceExit - Function that exits the process immediately, replaceable by tests.
+* @param complete - Function that records the natural completion code, replaceable by tests.
+* @param timeoutMs - Grace before forced exit, replaceable by tests.
+* @returns A controller whose normal calls coalesce and whose repeated signal call escalates.
+*/
+function createProcessShutdown(dispose, forceExit = (code) => {
+	process.exit(code);
+}, complete = (code) => {
+	process.exitCode = code;
+}, timeoutMs = PROCESS_SHUTDOWN_TIMEOUT_MS) {
+	let pending;
+	let timeout;
+	let completed = false;
+	let forceExited = false;
+	const clearExitTimeout = () => {
+		/* v8 ignore else -- shutdown() arms the timer before any asynchronous exit path can run. */
+		if (timeout !== void 0) clearTimeout(timeout);
+	};
+	const forceExitOnce = (code) => {
+		if (forceExited) return;
+		forceExited = true;
+		clearExitTimeout();
+		forceExit(code);
+	};
+	const completeOnce = (code) => {
+		if (completed || forceExited) return;
+		completed = true;
+		clearExitTimeout();
+		complete(code);
+	};
+	const start = (code, forceAfterDispose) => {
+		if (pending !== void 0) return pending;
+		timeout = setTimeout(() => {
+			forceExitOnce(code);
+		}, timeoutMs);
+		pending = Promise.resolve().then(dispose).then(() => {
+			if (forceAfterDispose) forceExitOnce(code);
+			else completeOnce(code);
+		}, () => {
+			forceExitOnce(code);
+		});
+		return pending;
+	};
+	return {
+		shutdown(code) {
+			return start(code, false);
+		},
+		interrupt(code) {
+			if (pending !== void 0) {
+				forceExitOnce(code);
+				return;
+			}
+			start(code, true);
+		}
+	};
+}
+//#endregion
+//#region lib/types/windows-shell.js
+/**
+* The Windows shell platform layer: on win32 hosts the shipped profile
+* compositions swap the POSIX-only bash stack for the sandbox-confined
+* PowerShell stack (`@deepseek-ai/dsh-pwsh-sandbox` +
+* `@deepseek-ai/dsh-tool-pwsh`). The layer is the base bundle's
+* `windows.cordis.patch.yml`, injected by the launcher between the bundle
+* layers and the user layers so a user patch can still override it — the
+* only override channel is composition config, like every other roster
+* decision. POSIX hosts never receive the layer.
+* @module @deepseek-ai/dsh/windows-shell
+*/
+/** The base bundle whose package carries the Windows shell patch. */
+const BASE_BUNDLE = "@deepseek-ai/dsh-base";
+/** The Windows shell patch filename inside the base bundle package. */
+const WINDOWS_SHELL_PATCH_FILENAME = "windows.cordis.patch.yml";
+/**
+* Resolve the Windows shell platform layer for a profile composition.
+* @param platform - the host platform (`process.platform` at call sites).
+* @param layers - the profile's bundle layers, in application order.
+* @param binName - the diagnostic prefix on thrown errors (`dsh`).
+* @returns the pwsh layer on win32, else `undefined`. A custom profile that
+*   mounts no base bundle is skipped (it owns its shell stack); a base
+*   bundle whose Windows shell patch is missing fails loud in
+*   {@link loadOverlayPatches} — the shipped package always carries it, so
+*   a miss is a broken installation.
+*/
+function resolveWindowsShellLayer(platform, layers, binName) {
+	if (platform !== "win32") return void 0;
+	const base = layers.find((layer) => layer.packageName === BASE_BUNDLE);
+	if (base === void 0) return void 0;
+	const label = join(base.packageDir, WINDOWS_SHELL_PATCH_FILENAME);
+	return {
+		label,
+		patches: loadOverlayPatches(binName, label)
+	};
+}
+//#endregion
+//#region lib/types/profile-boot.js
+/**
+* Shared profile boot for every `dsh` surface: resolve the profile, stack its
+* patch layers (bundle layers in `dsh.profile.bundles` order, the profile's
+* own `cordis.patch.yml`, `--patch` overlays, the telemetry switch), mount the
+* tree over the profile's empty root config, keep the profile patch layer
+* live, and wire fail-loud plus bounded shutdown.
+*
+* App flags are not the launcher's business: the invocation's inner arguments
+* are provided to the tree through `ctx.cmdlineArgs`, where any injected app
+* plugin may read the same immutable snapshot.
+* @module @deepseek-ai/dsh/profile-boot
+*/
+/** Shipped agent-preset root: beside this app's own config, in both source and built layouts. */
+const SHIPPED_PRESET_ROOT = fileURLToPath(new URL("../config/agent-presets/", import.meta.url));
+/** Harness-home directory holding locally authored agent presets. */
+const USER_PRESET_DIR = ".agent-presets";
+const NAME = "dsh";
+/**
+* The home-level user patch layer (`$DSH_HOME/cordis.patch.yml`), applied
+* over every profile's own layer. Resolved per call, not at module load:
+* `$DSH_HOME` may be set by the test or launcher after import.
+* @returns the absolute patch-file path.
+*/
+function homePatchPath() {
+	return join(resolveDshHome(), PROFILE_PATCH_FILENAME);
+}
+/** Absolute path of this dsh installation's package.json (both anchors: src/ and lib/ sit one level under apps/cli). */
+const INSTALL_ANCHOR = fileURLToPath(new URL("../package.json", import.meta.url));
+/** The session-telemetry row id the DSH_TELEMETRY_DISABLED switch targets. */
+const TELEMETRY_ROW_ID = "telemetry-otel";
+/** The one-shot runner row: its presence means this composition exits by itself. */
+const HEADLESS_ROW_ID = "headless-runner";
+/** The empty root entry list every profile tree patches over. */
+const PROFILE_ROOT_CONFIG = `# dsh profile root — an empty entry list. The tree is composed as patches:
+# each bundle in package.json's dsh.profile.bundles, then cordis.patch.yml, then any
+# --patch overlays. Edit cordis.patch.yml, not this file.
+[]
+`;
+/** Root config filename inside a profile directory. */
+const PROFILE_ROOT_FILENAME = "cordis.yml";
+/**
+* Resolve the telemetry opt-out switch into its boot patch. ANY non-empty
+* value (including `'0'`/`'false'`) disables: a privacy switch prefers
+* off-by-mistake over on-by-mistake. A composition without the telemetry row
+* exports nothing, so the switch is then trivially satisfied and no patch is
+* generated — custom profiles need not mount telemetry to run with the
+* switch set.
+* @param disabledEnv - the raw `DSH_TELEMETRY_DISABLED` value (`undefined` when unset).
+* @param hasRow - whether the composition carries the telemetry row.
+* @returns the disable patch, or `undefined` when telemetry stays enabled or is not mounted.
+*/
+function resolveTelemetryPatch(disabledEnv, hasRow) {
+	if ((disabledEnv ?? "") === "" || !hasRow) return void 0;
+	return {
+		id: TELEMETRY_ROW_ID,
+		disabled: true
+	};
+}
+/**
+* Load a resolved profile for `name`: heal the shared module fallback, then
+* (re)write the empty root config. The root is always rewritten: the whole
+* composition is patch layers, and the vendored Loader's tree write-back (a
+* plugin self-disposing persists the current tree) can bake composed rows
+* into this file — which would duplicate every bundle insert on the next
+* boot. The file exists on disk only because the Loader needs a real include
+* root to anchor `baseUrl` at the profile directory (the config dump anchors
+* on the same file, so both compose over the identical base).
+* @param name - the profile name.
+* @param userLayer - `false` skips parsing `cordis.patch.yml` (the default dump).
+* @returns the loaded profile.
+*/
+function prepareProfile(name, userLayer = true) {
+	healProfilesModuleFallback(INSTALL_ANCHOR);
+	const profile = loadProfile(NAME, name, INSTALL_ANCHOR, void 0, { userLayer });
+	writeFileSync(join(profile.dir, PROFILE_ROOT_FILENAME), PROFILE_ROOT_CONFIG);
+	return profile;
+}
+/** The full patch stack of one composed profile, in application order. */
+function allPatches(composed) {
+	return [
+		...composed.bundlePatches,
+		...composed.windowsShellPatches,
+		...composed.profile.patches,
+		...composed.homePatches,
+		...composed.overlays
+	];
+}
+/**
+* Load `name` and compose its effective patch stack: bundle layers in
+* `dsh.profile.bundles` order, the win32 shell platform layer (when the host
+* is Windows), the profile's user layer, the home-level user layer
+* (`$DSH_HOME/cordis.patch.yml` — machine-local preferences that apply to
+* every profile, so it outranks the per-profile layer), `--patch` overlays,
+* then the telemetry switch.
+* @param name - the profile name.
+* @param patchFiles - `--patch` overlay paths, in argv order.
+* @returns the profile, its patch layers, and the composed row index.
+*/
+function composeProfile(name, patchFiles) {
+	const profile = prepareProfile(name);
+	const homePatches = loadOptionalPatches(NAME, homePatchPath()) ?? [];
+	const overlays = patchFiles.flatMap((file) => loadOverlayPatches(NAME, resolve(file)));
+	const bundlePatches = profile.layers.flatMap((layer) => layer.patches);
+	const windowsShellPatches = resolveWindowsShellLayer(process.platform, profile.layers, NAME)?.patches ?? [];
+	const rows = /* @__PURE__ */ new Map();
+	for (const row of composeEntries([
+		bundlePatches,
+		windowsShellPatches,
+		profile.patches,
+		homePatches,
+		overlays
+	])) if (typeof row.id === "string") rows.set(row.id, row);
+	const composedOverlays = [...overlays];
+	if (rows.has("agent-presets")) composedOverlays.push({
+		id: "agent-presets",
+		config: {
+			...rows.get("agent-presets")?.config ?? {},
+			roots: [{
+				path: SHIPPED_PRESET_ROOT,
+				trust: "system"
+			}, {
+				path: dshHomePath(USER_PRESET_DIR),
+				trust: "user"
+			}]
+		}
+	});
+	const telemetryPatch = resolveTelemetryPatch(process.env.DSH_TELEMETRY_DISABLED, rows.has(TELEMETRY_ROW_ID));
+	if (telemetryPatch !== void 0) composedOverlays.push(telemetryPatch);
+	return {
+		profile,
+		bundlePatches,
+		windowsShellPatches,
+		homePatches,
+		overlays: composedOverlays,
+		rows
+	};
+}
+/** Re-throw setup failures unless this invocation's signal already owns shutdown. */
+function suppressSignalShutdownError(signal, error) {
+	if (!signal.aborted) throw error;
+}
+/**
+* Boot one profile invocation end to end and leave process lifetime to the
+* mounted plugins (or to a one-shot runner the composition mounts).
+* @param options - environment snapshot, profile name, overlays, and the booted app's own arguments.
+* @returns the settled root context and the shutdown controller.
+*/
+async function runProfile(options) {
+	const composed = composeProfile(options.profile, options.patchFiles);
+	const headlessRow = composed.rows.get(HEADLESS_ROW_ID);
+	const oneShot = headlessRow !== void 0 && headlessRow.disabled !== true;
+	const app = {};
+	const shutdown = createProcessShutdown(async () => {
+		await app.current?.fiber.dispose();
+	});
+	const signalShutdown = new AbortController();
+	const interrupt = (code) => {
+		signalShutdown.abort();
+		shutdown.interrupt(code);
+	};
+	process.on("SIGTERM", () => {
+		interrupt(oneShot ? 143 : 0);
+	});
+	process.on("SIGINT", () => {
+		interrupt(130);
+	});
+	installFailLoud(NAME, process, async () => {
+		await app.current?.fiber.dispose();
+	});
+	const rootConfig = join(composed.profile.dir, PROFILE_ROOT_FILENAME);
+	const composeLive = () => structuredClone([
+		...composed.bundlePatches,
+		...composed.windowsShellPatches,
+		...loadOptionalPatches(NAME, composed.profile.patchPath) ?? [],
+		...loadOptionalPatches(NAME, homePatchPath()) ?? [],
+		...composed.overlays
+	]);
+	const watchProfilePatch = !oneShot;
+	const ctx = await boot(NAME, rootConfig, structuredClone(allPatches(composed)), (hostCtx) => {
+		app.current = hostCtx;
+		hostCtx.provide(DSH_ENVIRONMENT_KEY, options.environment);
+		provideCmdline(hostCtx, {
+			args: options.args,
+			exit: (code) => void shutdown.shutdown(code)
+		});
+		if (oneShot) {
+			const io = {
+				stdout: process.stdout,
+				stderr: process.stderr,
+				exit: (code) => {
+					shutdown.shutdown(code);
+				}
+			};
+			hostCtx.provide("headlessIo", io);
+		}
+	});
+	app.current = ctx;
+	if (watchProfilePatch && !signalShutdown.signal.aborted && ctx.fiber.state === 2 && ctx.get("loader") !== void 0) try {
+		if (ctx.get("hmr") === void 0) {
+			if (ctx.get("timer") === void 0) await ctx.loader.create({ name: "@deepseek-ai/cordis-plugin-timer" });
+			await ctx.loader.create({
+				name: "@deepseek-ai/cordis-plugin-hmr",
+				config: { root: [] }
+			});
+		}
+		await watchUserPatches(ctx, {
+			binName: NAME,
+			filename: composed.profile.patchPath,
+			compose: composeLive
+		});
+		await watchUserPatches(ctx, {
+			binName: NAME,
+			filename: homePatchPath(),
+			compose: composeLive
+		});
+	} catch (error) {
+		suppressSignalShutdownError(signalShutdown.signal, error);
+	}
+	return {
+		ctx,
+		shutdown
+	};
+}
+//#endregion
+export { resolveTelemetryPatch as a, prepareProfile as i, PROFILE_ROOT_FILENAME as n, runProfile as o, homePatchPath as r, resolveWindowsShellLayer as s, INSTALL_ANCHOR as t };

package/lib/profile-boot-T5aOCb6v.js

@@ -0,0 +1,2 @@
+import { o as runProfile } from "./profile-boot-DQYCwKII.js";
+export { runProfile };

package/package.json

@@ -0,0 +1,95 @@
+{
+  "name": "@deepseek-ai/dsh",
+  "description": "dsh CLI: profile boot, plugin management, and the browser UI alias",
+  "version": "0.0.1-rc.1",
+  "publishConfig": {
+    "access": "restricted"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+    "directory": "apps/cli"
+  },
+  "type": "module",
+  "bin": {
+    "dsh": "lib/bin.js"
+  },
+  "files": [
+    "lib/*.js",
+    "config"
+  ],
+  "license": "BSD-3-Clause",
+  "dependencies": {
+    "commander": "^15.0.0",
+    "js-yaml": "^4.2.0",
+    "node-addon-require-builtin": "^0.1.4",
+    "@deepseek-ai/cordis-plugin-hmr": "^1.0.16-rc.1",
+    "@deepseek-ai/cordis-plugin-include": "^1.0.5-rc.1",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.1-rc.1",
+    "@deepseek-ai/dsh-agent-tool-mode": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-app-boot": "^0.0.1-rc.1",
+    "@deepseek-ai/cordis-plugin-timer": "^1.1.3-rc.1",
+    "@deepseek-ai/dsh-base": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-agent-preset": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-command-compact": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-command-goal": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-compact-basic": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-compact-tool-result-prune": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-goal": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-goal-session": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-cmdline": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-environment": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-headless": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-mcp-client": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-paths": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-persona": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-plan-mode": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-pty": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-pty-local": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-pwsh-local": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-skill": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-skill-local": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tasks-local": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tmux-context": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-token-meter": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-ask-user": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-bash": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-bash-persistent": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-cordis": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-fs": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-fs-search": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-goal": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-pwsh": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-ralph": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-skill": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-session-reference": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-str-replace-editor": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-pwsh-sandbox": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-subagent": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-subagent-control": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-tasks": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-todo": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-web": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tool-workflow": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-web-app": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-workflow-workerthread": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-workspace-context": "^0.0.1-rc.1",
+    "@deepseek-ai/cordis": "^4.0.1-rc.1"
+  },
+  "devDependencies": {
+    "@types/js-yaml": "^4.0.9",
+    "execa": "^10.0.0",
+    "@deepseek-ai/dsh-frontend-static": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-agent": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-host-apiproxy": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-llm-mock-server": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-loader-smoke": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-session": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-subagent": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "^0.0.1-rc.1",
+    "@deepseek-ai/dsh-tools": "^0.0.1-rc.1"
+  }
+}