@deepseek-ai/dsh 0.1.1-rc.2 → 0.1.2-alpha.3

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write apps/cli/README.md
-README.md: 9a8d722b044ed5d8e31e3c27e54f8c9ef0839f82
-README.zh.md: c092414e2d15e90133d8ea27f0af5cadbe527b22
+README.md: 850a9371c1515d1e0219e9a685b638063c498ff4
+README.zh.md: 02de213d7a7158971b445511a00661183b37234c

package/README.md

@@ -2,22 +2,25 @@
 
 English | [中文](README.zh.md)
 
-The `dsh` command is the product launcher for profiles: ordered stacks of plugin-bundle patch layers under the user's own overrides. [`src/args.ts`](src/args.ts) owns the command grammar, and [`src/bin.ts`](src/bin.ts) loads only the selected runner. Invalid commands, options from another mode, configuration errors, and boot failures exit nonzero.
+The `dsh` command is the sole supported Node application launcher: profiles are ordered stacks of plugin-bundle patch layers under the user's own overrides. SDK and ACP are profiles, not separate public bins. The Python runtime wheel packages this same command; the SDK defaults to `sdk`, and the minimal example selects `sdk-minimal`. [`src/args.ts`](src/args.ts) owns the command grammar, and [`src/bin.ts`](src/bin.ts) loads only the selected runner. Invalid commands, options from another mode, configuration errors, and boot failures exit nonzero.
 
 ## Entry modes
 
 | Command | Purpose |
 |---|---|
 | `dsh --profile <name>` | Boot the named profile under `$DSH_HOME/profiles/<name>`. |
+| `dsh --profile acp` | Serve automation clients over ACP stdio until disconnect. |
 | `dsh --profile headless "job"` | Run one fresh persisted session, print the final answer, and exit. |
+| `dsh --profile sdk` | Serve SDK clients over JSON-RPC stdio until shutdown or disconnect. |
+| `dsh --profile sdk-minimal` | Serve SDK clients with the standalone minimal agent tree. |
 | `dsh web` | Alias of `--profile web`. |
 | `dsh plugin --profile <name> <pnpm args>` | Manage a profile's plugins by forwarding to pnpm in the profile directory. |
 
-The invoking directory is the default workspace root. The `web` and `headless` profiles auto-initialize on first use from shipped templates; any other profile must be created through `dsh plugin`.
+The invoking directory is the default workspace root. The `web`, `headless`, `sdk`, `sdk-minimal`, and `acp` profiles auto-initialize on first use from shipped templates; any other profile must be created through `dsh plugin`.
 
 ## App arguments
 
-The launcher parses only its own flags and hands everything after them to the booted profile, where any injected app plugin may parse the shared immutable snapshot ([`dsh-cmdline`](../../packages/boot/cmdline/README.md)). Launcher flags therefore come first, and the first token the launcher does not recognize starts the app's arguments:
+The launcher parses only its own flags and hands everything after them to the booted profile, where any injected app plugin may parse the shared immutable snapshot ([`dsh-cmdline`](../../packages/boot/cmdline/README.md)). The first token the launcher does not recognize starts the app's arguments:
 
 ```sh
 dsh --profile web --port 8080       # --port belongs to the web app
@@ -27,21 +30,26 @@ dsh --profile web --help            # the web app's flags, not the launcher's
 dsh --help                          # the launcher's own help
 ```
 
+<a id="profiles"></a>
 ## Profiles
 
-A profile directory holds a `package.json` (out-of-tree plugin dependencies plus the profile manifest `dsh.profile` with its ordered `bundles` list) and a `cordis.patch.yml` (the user's own patch layer).
+A profile directory holds a `package.json` (out-of-tree plugin dependencies plus the profile manifest `dsh.profile` with its ordered `bundles` list and `patchReload` lifecycle) and a `cordis.patch.yml` (the user's own patch layer). `patchReload: live` watches the profile and home-level patch files; `startup` applies them once.
 
 The tree composes over an empty root:
 - each bundle's patch in `dsh.profile.bundles` order
 - then the profile's `cordis.patch.yml`, then the home-level `$DSH_HOME/cordis.patch.yml`
 - then `--patch` overlays
 
-Bundles named in `dsh.profile.bundles` resolve from the dsh installation first (`@deepseek-ai/dsh-base`, `@deepseek-ai/dsh-web-app`, `@deepseek-ai/dsh-headless`), then from the profile's own `node_modules`, where pnpm installs out-of-tree plugins.
+Bundles named in `dsh.profile.bundles` resolve from the dsh installation first (`@deepseek-ai/dsh-base`, `@deepseek-ai/dsh-web-app`, `@deepseek-ai/dsh-headless`, `@deepseek-ai/dsh-sdk-app`, `@deepseek-ai/dsh-sdk-minimal`, `@deepseek-ai/dsh-acp-app`), then from the profile's own `node_modules`, where pnpm installs out-of-tree plugins.
 
 Use `--dump-default-config` and `--dump-config` to inspect the composed tree without booting it.
 
 The [CLI behavior reference](reference/README.md) owns exact layer precedence, flags, shutdown behavior, deployment defaults, and source execution.
 
+## Optional overlays
+
+`config/examples/` ships opt-in overlays for GitHub review webhooks, session-local Schedule, memory MCP servers, and runtime Cordis tools. They are never part of a default profile; the [user guides](../../docs/user/guide/index.md) and [developer practice guides](../../docs/user/develop/practice/index.md) own setup and safety instructions.
+
 ## Development
 
 Production runs require built package and frontend artifacts. From the repository root, run `pnpm run build` separately, then use `pnpm dsh <args...>` to run the TypeScript entry and forward every argument; the [source-execution reference](reference/README.md#source-execution) owns the module-resolution contract.

package/README.zh.md

@@ -2,22 +2,25 @@
 
 [English](README.md) | 中文
 
-`dsh` 是 DeepSeek Harness 中用于启动 profile 的命令；profile 由多个插件组合包 patch 层按顺序叠加而成，其上再应用用户自己的覆盖配置。[`src/args.ts`](src/args.ts) 负责命令语法，[`src/bin.ts`](src/bin.ts) 只加载选中的运行器。无效命令、来自其他模式的选项、配置错误和启动失败都会以非零状态退出。
+`dsh` 是唯一受支持的 Node 应用启动器；profile 由多个插件组合包 patch 层按顺序叠加而成，其上再应用用户自己的覆盖配置。SDK 与 ACP 都是 profile，而不是独立的公开 bin。Python 运行时 wheel 会打包同一个命令；SDK 默认使用 `sdk`，极简示例选择 `sdk-minimal`。[`src/args.ts`](src/args.ts) 负责命令语法，[`src/bin.ts`](src/bin.ts) 只加载选中的运行器。无效命令、来自其他模式的选项、配置错误和启动失败都会以非零状态退出。
 
 ## 入口模式
 
 | 命令 | 用途 |
 |---|---|
 | `dsh --profile <name>` | 启动位于 `$DSH_HOME/profiles/<name>` 的指定 profile。 |
+| `dsh --profile acp` | 通过 ACP stdio 为自动化 client 提供服务，直至断开连接。 |
 | `dsh --profile headless "job"` | 运行一个全新的持久化会话，打印最终答案并退出。 |
+| `dsh --profile sdk` | 通过 JSON-RPC stdio 为 SDK client 提供服务，直至关闭或断开连接。 |
+| `dsh --profile sdk-minimal` | 以独立极简 agent 配置树为 SDK client 提供服务。 |
 | `dsh web` | `--profile web` 的别名。 |
 | `dsh plugin --profile <name> <pnpm args>` | 通过在 profile 目录中转发给 pnpm 来管理该 profile 的插件。 |
 
-运行命令时所在的目录将作为默认 workspace 根目录。`web` 和 `headless` profile 在首次使用时会从随附模板自动初始化；其他任何 profile 都必须通过 `dsh plugin` 创建。
+运行命令时所在的目录将作为默认 workspace 根目录。`web`、`headless`、`sdk`、`sdk-minimal` 和 `acp` profile 在首次使用时会从随附模板自动初始化；其他任何 profile 都必须通过 `dsh plugin` 创建。
 
 ## 应用参数
 
-启动器只解析自身的 flag，并将其后的所有内容交给已启动的 profile；注入该 profile 的任意应用插件都可以解析这份共享的不可变快照（[`dsh-cmdline`](../../packages/boot/cmdline/README.zh.md)）。因此，启动器的 flag 必须写在最前面；启动器无法识别的第一个 token 标志着应用参数的开始：
+启动器只解析自身的 flag，并将其后的所有内容交给已启动的 profile；注入该 profile 的任意应用插件都可以解析这份共享的不可变快照（[`dsh-cmdline`](../../packages/boot/cmdline/README.zh.md)）。启动器无法识别的第一个 token 标志着应用参数的开始：
 
 ```sh
 dsh --profile web --port 8080       # --port belongs to the web app
@@ -28,22 +31,25 @@ dsh --help                          # the launcher's own help
 ```
 
 <a id="profiles"></a>
-
 ## Profile
 
-profile 目录包含一个 `package.json`，其中记录树外插件依赖，以及 profile manifest（元数据清单）`dsh.profile` 和其中按顺序排列的 `bundles` 列表；还包含一个 `cordis.patch.yml`，其中保存用户自己的 patch 层。
+profile 目录包含一个 `package.json`，其中记录树外插件依赖，以及 profile manifest（元数据清单）`dsh.profile`、其中按顺序排列的 `bundles` 列表与 `patchReload` 生命周期；还包含一个 `cordis.patch.yml`，其中保存用户自己的 patch 层。`patchReload: live` 监视 profile 与 home 级 patch 文件，`startup` 则只应用一次。
 
 配置树以空根为起点，依次叠加以下配置层：
 - `dsh.profile.bundles` 中各组合包的 patch
 - profile 自身的 `cordis.patch.yml`，然后是 home 级的 `$DSH_HOME/cordis.patch.yml`
 - `--patch` 指定的覆盖层
 
-`dsh.profile.bundles` 中列出的组合包先从 dsh 安装目录解析（`@deepseek-ai/dsh-base`、`@deepseek-ai/dsh-web-app`、`@deepseek-ai/dsh-headless`），再从 profile 自身的 `node_modules` 解析；pnpm 会将树外插件安装到该目录。
+`dsh.profile.bundles` 中列出的组合包先从 dsh 安装目录解析（`@deepseek-ai/dsh-base`、`@deepseek-ai/dsh-web-app`、`@deepseek-ai/dsh-headless`、`@deepseek-ai/dsh-sdk-app`、`@deepseek-ai/dsh-sdk-minimal`、`@deepseek-ai/dsh-acp-app`），再从 profile 自身的 `node_modules` 解析；pnpm 会将树外插件安装到该目录。
 
 使用 `--dump-default-config` 和 `--dump-config` 可在不启动的情况下检查组合后的配置树。
 
 层的确切优先级、flag、关闭行为、部署默认值和源码执行方式，以 [CLI（命令行界面）行为参考](reference/README.zh.md)为准。
 
+## 可选 Overlay
+
+`config/examples/` 交付 GitHub 评审 webhook、会话内 Schedule、记忆 MCP 服务与运行时 Cordis 工具的可选 overlay。它们绝不属于默认 profile；安装与安全说明由[用户指南](../../docs/user/guide/index.zh.md)和[开发实战指南](../../docs/user/develop/practice/index.zh.md)负责。
+
 ## 开发
 
 生产运行需要已构建的包与前端产物。请在仓库根目录单独运行 `pnpm run build`，然后使用 `pnpm dsh <args...>` 运行 TypeScript 入口并转发所有参数；模块解析约定以[源码执行参考](reference/README.zh.md#source-execution)为准。

package/lib/bin.js

@@ -115,13 +115,10 @@ function parseDshArgs(argv, version) {
 //#endregion
 //#region lib/types/bin.js
 /**
-* dsh — command-line entry. Dynamic imports per mode keep unrelated modes out
-* of each dispatch path; the adapter prints and exits for
-* `--help`/`--version`/a parse error, so only a valid mode reaches the switch.
+* Command-line entry for dsh.
 * @module @deepseek-ai/dsh/bin
 */
 /* v8 ignore file -- built-bin acceptance exercises this self-executing dispatch. */
-/** This app's version, read from its checked-in package.json. */
 function readVersion() {
 	const manifest = JSON.parse(readFileSync(fileURLToPath(new URL("../package.json", import.meta.url)), "utf8"));
 	return typeof manifest.version === "string" ? manifest.version : "0.0.0";
@@ -129,7 +126,7 @@ function readVersion() {
 const invocation = parseDshArgs(process.argv.slice(2), readVersion());
 switch (invocation.mode) {
 	case "profile": {
-		const { runProfile } = await import("./profile-boot-BnJoK_kl.js");
+		const { runProfile } = await import("./profile-boot-x7_BzdeW.js");
 		await runProfile({
 			environment: loadLayeredEnv("dsh"),
 			profile: invocation.profile,
@@ -139,12 +136,12 @@ switch (invocation.mode) {
 		break;
 	}
 	case "plugin": {
-		const { runPlugin } = await import("./plugin-9h8shc4d.js");
+		const { runPlugin } = await import("./plugin-F7ZVfRyo.js");
 		process.exit(runPlugin(invocation.profile, invocation.args));
 		break;
 	}
 	case "dump-config": {
-		const { runDumpConfig } = await import("./dump-config-D-jtgwY3.js");
+		const { runDumpConfig } = await import("./dump-config-BNQ_bV66.js");
 		runDumpConfig(invocation.profile, invocation.defaultOnly, invocation.patches);
 		break;
 	}

package/lib/{dump-config-D-jtgwY3.js → dump-config-BNQ_bV66.js}

@@ -1,4 +1,4 @@
-import { i as prepareProfile, n as PROFILE_ROOT_FILENAME, r as homePatchPath } from "./profile-boot-DG5t9aNs.js";
+import { i as prepareProfile, n as PROFILE_ROOT_FILENAME, r as homePatchPath } from "./profile-boot-BTzzdrGY.js";
 import { existsSync } from "node:fs";
 import { loadOptionalPatches, loadOverlayPatches, renderConfigDump } from "@deepseek-ai/dsh-app-boot";
 import { join, resolve } from "node:path";

package/lib/{plugin-9h8shc4d.js → plugin-F7ZVfRyo.js}

@@ -1,4 +1,4 @@
-import { t as INSTALL_ANCHOR } from "./profile-boot-DG5t9aNs.js";
+import { t as INSTALL_ANCHOR } from "./profile-boot-BTzzdrGY.js";
 import { existsSync } from "node:fs";
 import { DEFAULT_PROFILE_BUNDLES, PROFILE_TEMPLATES, initProfile, readProfileManifest, resolveBundleDir, resolveProfileDir, writeProfileManifest } from "@deepseek-ai/dsh-app-boot";
 import { join, resolve } from "node:path";
@@ -101,7 +101,8 @@ function anchorPathSpec(argument, cwd) {
 function runPlugin(profile, args) {
 	const dir = resolveProfileDir(profile);
 	if (!existsSync(join(dir, "package.json"))) {
-		initProfile(dir, PROFILE_TEMPLATES[profile] ?? DEFAULT_PROFILE_BUNDLES);
+		const template = PROFILE_TEMPLATES[profile];
+		initProfile(dir, template?.bundles ?? DEFAULT_PROFILE_BUNDLES, template?.patchReload);
 		process.stderr.write(`${NAME}: initialized profile ${profile} at ${dir}\n`);
 	}
 	const before = readProfileManifest(NAME, dir);

package/lib/{profile-boot-DG5t9aNs.js → profile-boot-BTzzdrGY.js}

@@ -74,17 +74,38 @@ function createProcessShutdown(dispose, forceExit = (code) => {
 * Shared profile boot for every `dsh` surface: resolve the profile, stack its
 * patch layers (bundle layers in `dsh.profile.bundles` order, the profile's
 * own `cordis.patch.yml`, `--patch` overlays, the telemetry switch), mount the
-* tree over the profile's empty root config, keep the profile patch layer
-* live, and wire fail-loud plus bounded shutdown.
+* tree over the profile's empty root config, apply its selected patch-reload
+* lifecycle, and wire fail-loud plus bounded shutdown.
 *
 * App flags are not the launcher's business: the invocation's inner arguments
 * are provided to the tree through `ctx.cmdlineArgs`, where any injected app
 * plugin may read the same immutable snapshot.
 * @module @deepseek-ai/dsh/profile-boot
 */
-/** Shipped agent-preset root: beside this app's own config, in both source and built layouts. */
-const SHIPPED_PRESET_ROOT = fileURLToPath(new URL("../config/agent-presets/", import.meta.url));
 const NAME = "dsh";
+/** Launcher-owned readiness signal committed only after boot and host setup succeed. */
+function createAppReady() {
+	let ready = false;
+	const listeners = /* @__PURE__ */ new Set();
+	return {
+		service: { onReady(listener) {
+			if (ready) {
+				listener();
+				return () => {};
+			}
+			listeners.add(listener);
+			return () => {
+				listeners.delete(listener);
+			};
+		} },
+		commit() {
+			if (ready) return;
+			ready = true;
+			for (const listener of [...listeners]) listener();
+			listeners.clear();
+		}
+	};
+}
 /**
 * The home-level user patch layer (`$DSH_HOME/cordis.patch.yml`), applied
 * over every profile's own layer. Resolved per call, not at module load:
@@ -125,20 +146,19 @@ function resolveTelemetryPatch(disabledEnv, hasRow) {
 	};
 }
 /**
-* Load a resolved profile for `name`: heal the shared module fallback, then
-* (re)write the empty root config. The root is always rewritten: the whole
-* composition is patch layers, and the vendored Loader's tree write-back (a
-* plugin self-disposing persists the current tree) can bake composed rows
-* into this file — which would duplicate every bundle insert on the next
-* boot. The file exists on disk only because the Loader needs a real include
-* root to anchor `baseUrl` at the profile directory (the config dump anchors
-* on the same file, so both compose over the identical base).
+* Load a resolved profile for `name` and (re)write the empty root config. The
+* root is always rewritten: the whole composition is patch layers, and the
+* vendored Loader's tree write-back (a plugin self-disposing persists the
+* current tree) can bake composed rows into this file — which would duplicate
+* every bundle insert on the next boot. The file exists on disk only because
+* the Loader needs a real include root to anchor `baseUrl` at the profile
+* directory (the config dump anchors on the same file, so both compose over
+* the identical base).
 * @param name - the profile name.
 * @param userLayer - `false` skips parsing `cordis.patch.yml` (the default dump).
 * @returns the loaded profile.
 */
 function prepareProfile(name, userLayer = true) {
-	healProfilesModuleFallback(INSTALL_ANCHOR);
 	const profile = loadProfile(NAME, name, INSTALL_ANCHOR, void 0, { userLayer });
 	writeFileSync(join(profile.dir, PROFILE_ROOT_FILENAME), PROFILE_ROOT_CONFIG);
 	return profile;
@@ -154,17 +174,21 @@ function allPatches(composed) {
 }
 /**
 * Load `name` and compose its effective patch stack: bundle layers in
-* `dsh.profile.bundles` order (the base bundle gates the shell stacks by
-* platform on its own rows), the profile's user layer, the home-level user
+* `dsh.profile.bundles` order (a base-backed profile gets the base bundle's
+* platform-gated shell rows), the profile's user layer, the home-level user
 * layer (`$DSH_HOME/cordis.patch.yml` — machine-local preferences that apply
 * to every profile, so it outranks the per-profile layer), `--patch` overlays,
 * then the telemetry switch.
 * @param name - the profile name.
 * @param patchFiles - `--patch` overlay paths, in argv order.
-* @returns the profile, its patch layers, and the composed row index.
+* @returns the profile and its patch layers.
 */
-function composeProfile(name, patchFiles) {
+async function composeProfile(name, patchFiles) {
 	const profile = prepareProfile(name);
+	await healProfilesModuleFallback({
+		installAnchor: INSTALL_ANCHOR,
+		profile
+	});
 	const homePatches = loadOptionalPatches(NAME, homePatchPath()) ?? [];
 	const overlays = patchFiles.flatMap((file) => loadOverlayPatches(NAME, resolve(file)));
 	const bundlePatches = profile.layers.flatMap((layer) => layer.patches);
@@ -176,24 +200,13 @@ function composeProfile(name, patchFiles) {
 		overlays
 	])) if (typeof row.id === "string") rows.set(row.id, row);
 	const composedOverlays = [...overlays];
-	if (rows.has("agent-presets")) composedOverlays.push({
-		id: "agent-presets",
-		config: {
-			...rows.get("agent-presets")?.config ?? {},
-			roots: [{
-				path: SHIPPED_PRESET_ROOT,
-				trust: "system"
-			}]
-		}
-	});
 	const telemetryPatch = resolveTelemetryPatch(process.env.DSH_TELEMETRY_DISABLED, rows.has(TELEMETRY_ROW_ID));
 	if (telemetryPatch !== void 0) composedOverlays.push(telemetryPatch);
 	return {
 		profile,
 		bundlePatches,
 		homePatches,
-		overlays: composedOverlays,
-		rows
+		overlays: composedOverlays
 	};
 }
 /**
@@ -218,8 +231,9 @@ function suppressShutdownError(ctx, signal, error) {
 * @returns the settled root context and the shutdown controller.
 */
 async function runProfile(options) {
-	const composed = composeProfile(options.profile, options.patchFiles);
+	const composed = await composeProfile(options.profile, options.patchFiles);
 	const app = {};
+	const appReady = createAppReady();
 	const shutdown = createProcessShutdown(async () => {
 		await app.current?.fiber.dispose();
 	});
@@ -249,11 +263,12 @@ async function runProfile(options) {
 		hostCtx.provide(DSH_LAUNCH_ENVIRONMENT_KEY, options.environment);
 		provideCmdline(hostCtx, {
 			args: options.args,
-			exit: (code) => void shutdown.shutdown(code)
+			exit: (code) => void shutdown.shutdown(code),
+			ready: appReady.service
 		});
 	});
 	app.current = ctx;
-	if (!signalShutdown.signal.aborted && ctx.fiber.state === 2 && ctx.get("loader") !== void 0) try {
+	if (composed.profile.patchReload === "live" && !signalShutdown.signal.aborted && ctx.fiber.state === 2 && ctx.get("loader") !== void 0) try {
 		if (ctx.get("hmr") === void 0) {
 			if (ctx.get("timer") === void 0) await ctx.loader.create({ name: "@deepseek-ai/cordis-plugin-timer" });
 			await ctx.loader.create({
@@ -274,6 +289,7 @@ async function runProfile(options) {
 	} catch (error) {
 		suppressShutdownError(ctx, signalShutdown.signal, error);
 	}
+	if (!signalShutdown.signal.aborted && ctx.fiber.state === 2 && ctx.get("loader") !== void 0) appReady.commit();
 	return {
 		ctx,
 		shutdown

package/lib/profile-boot-x7_BzdeW.js

@@ -0,0 +1,2 @@
+import { o as runProfile } from "./profile-boot-BTzzdrGY.js";
+export { runProfile };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh",
   "description": "dsh CLI: profile boot, plugin management, and the browser UI alias",
-  "version": "0.1.1-rc.2",
+  "version": "0.1.2-alpha.3",
   "publishConfig": {
     "access": "public"
   },
@@ -15,88 +15,133 @@
     "dsh": "lib/bin.js"
   },
   "files": [
-    "lib/*.js",
-    "config"
+    "lib/*.js"
   ],
+  "dsh": {
+    "configTrees": [
+      {
+        "mount": "config/agent-presets",
+        "path": "../../packages/preset/agent-presets/presets",
+        "scanRoster": true
+      }
+    ]
+  },
   "license": "MIT",
   "dependencies": {
     "commander": "^15.0.0",
     "js-yaml": "^4.2.0",
     "node-addon-require-builtin": "^0.1.4",
-    "@deepseek-ai/cordis-plugin-include": "^1.0.6",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/cordis-plugin-timer": "^1.1.3",
-    "@deepseek-ai/cordis-plugin-hmr": "^1.0.16",
-    "@deepseek-ai/dsh-agent-tool-presentation": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-app-boot": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-cordis-client-runner": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-base": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-agent-preset": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-cordis": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-command-compact": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-command-goal": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-compaction-basic": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-compaction-tool-result-pruner": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-goal": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-goal-round-driver": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-launch-environment": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-fs-local": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-headless": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-mcp-client": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-persona": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-plan-mode": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-terminal-bash": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-pwsh-local": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-pwsh-sandbox": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-projection": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-terminal": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-reference": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-time-context": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-skill": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-skill-filesystem": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tmux-context": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-token-meter": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-ask-user": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-jobs-local": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-bash": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-bash-persistent": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-pwsh-persistent": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-cordis": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-fs": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-fs-search": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-goal": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-pwsh": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-ralph": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-schedule": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-str-replace-editor": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-cmdline": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-subagent": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-subagent-control": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-jobs": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-todo": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-workflow": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-web-app": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-instructions": "^0.1.1-rc.2",
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-tool-web": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tool-skill": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-workflow-worker-thread": "^0.1.1-rc.2"
+    "@deepseek-ai/cordis-plugin-hmr": "^1.0.17",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/cordis-plugin-include": "^1.0.7",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
+    "@deepseek-ai/cordis-plugin-timer": "^1.1.4",
+    "@deepseek-ai/dsh-acp-app": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-agent-instructions": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-agent-tool-presentation": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-app-boot": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-base": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-cmdline": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-command-compact": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-command-goal": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-compaction-basic": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-ui-cordis": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-ui-agent-preset": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-compaction-tool-result-pruner": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-cordis-client-runner": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-fs-local": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-goal": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-goal-round-driver": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-home-paths": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-hooks-claude-code": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-hooks-codex": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-jobs-local": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-launch-environment": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-mcp-client": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-persona": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-plan-mode": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-pwsh-local": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-pwsh-sandbox": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-schedule": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-sdk-app": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-sdk-minimal": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-session-projection": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-session-reference": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-skill": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-skill-filesystem": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-terminal": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tmux-context": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-headless": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-token-meter": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-ask-user": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-bash": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-bash-persistent": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-time-context": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-terminal-bash": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-cordis": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-fs": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-fs-search": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-goal": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-jobs": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-pwsh": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-pwsh-persistent": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-skill": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-ralph": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-str-replace-editor": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-subagent": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-subagent-control": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-todo": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-web": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-webhook": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-webhook-github": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-workflow-worker-thread": "^0.1.2-alpha.3",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@deepseek-ai/dsh-tool-workflow": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-web-app": "^0.1.2-alpha.3"
   },
   "devDependencies": {
+    "@agentclientprotocol/sdk": "1.4.0",
     "@types/js-yaml": "^4.0.9",
+    "@types/ws": "8.18.1",
     "execa": "^10.0.0",
-    "@deepseek-ai/dsh-agent": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-apiproxy": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm-mock-server": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-frontend-static": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-subagent": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tools": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-loader-smoke": "^0.1.1-rc.2"
+    "ws": "8.21.0",
+    "@deepseek-ai/dsh-acp": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-agent": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-attachment-local": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-bash-local": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-credentials-local": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-experimental-agent-team": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-experimental-agent-team-profile": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-experimental-tool-agent-team": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-fs-observation-policy": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-fs-sandbox": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-host-frontend-static": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-llm-mock-server": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-llm-deepseek": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-llm-replay": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-plugin-package-inventory-deepseek": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-loader-smoke": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-sandbox-local": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-session": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-session-query": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-settings": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-settings-file": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-subagent": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-subagent-fork-in-process": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-subagent-spawn-in-process": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-subprocess-local": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-session-checkpoint-policy": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-session-log-deepseek": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-shell-env": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-user-approval": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tool-subagent-report": "^0.1.2-alpha.3"
   }
 }