@deepseek-ai/dsh 0.1.6-alpha.2 → 0.1.7-alpha.2

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write apps/cli/README.md
-README.md: 46c6a66336839db443a825c66ebfd71dcce398af
-README.zh.md: 14838114b04977e7668e33479d1ba84a8ddc8434
+README.md: 4eb113a6155433cb69f949d9e461ccfbd0142e7c
+README.zh.md: 6a0e8a38a70d2ad551b4e91619545b3def09f2ec

package/README.md

@@ -43,7 +43,7 @@ The tree composes over an empty root:
 
 Bundles named in `dsh.profile.bundles` resolve from the dsh installation first (`@deepseek-ai/dsh-base`, `@deepseek-ai/dsh-web-app`, `@deepseek-ai/dsh-headless`, `@deepseek-ai/dsh-sdk-app`, `@deepseek-ai/dsh-sdk-minimal`, `@deepseek-ai/dsh-acp-app`), then from the profile's own `node_modules`, where pnpm installs out-of-tree plugins.
 
-Use `--dump-default-config` and `--dump-config` to inspect the composed tree without booting it.
+Use `--dump-default-config` and `--dump-config` to inspect the composed tree without booting it. `--dump-config-schema` imports the composed tree's declared plugin schemas and prints JSON Schema for entries and patches instead of configuration values; read the [schema-dump safety and scope](reference/README.md#config-schema-dump) before inspecting untrusted plugins.
 
 The [CLI behavior reference](reference/README.md) owns exact layer precedence, flags, shutdown behavior, deployment defaults, and source execution. The [startup and reload failure table](../../packages/boot/app-boot/README.md#startup-and-reload-failures) compares optional and required plugin failures with configuration HMR.
 

package/README.zh.md

@@ -43,7 +43,7 @@ profile 目录包含一个 `package.json`，其中记录树外插件依赖，以
 
 `dsh.profile.bundles` 中列出的组合包先从 dsh 安装目录解析（`@deepseek-ai/dsh-base`、`@deepseek-ai/dsh-web-app`、`@deepseek-ai/dsh-headless`、`@deepseek-ai/dsh-sdk-app`、`@deepseek-ai/dsh-sdk-minimal`、`@deepseek-ai/dsh-acp-app`），再从 profile 自身的 `node_modules` 解析；pnpm 会将树外插件安装到该目录。
 
-使用 `--dump-default-config` 和 `--dump-config` 可在不启动的情况下检查组合后的配置树。
+使用 `--dump-default-config` 和 `--dump-config` 可在不启动的情况下检查组合后的配置树。`--dump-config-schema` 会导入组合树中插件声明的 schema，并打印描述 entry 与 patch 的 JSON Schema，而不是配置值；检查不受信任的插件前，请阅读 [schema dump 的安全性与范围](reference/README.zh.md#config-schema-dump)。
 
 层的确切优先级、flag、关闭行为、部署默认值和源码执行方式，以 [CLI 行为参考](reference/README.zh.md)为准。[启动与重载失败表](../../packages/boot/app-boot/README.zh.md#startup-and-reload-failures)对比 optional、required 插件启动失败与配置 HMR 的行为。
 

package/lib/bin.js

@@ -62,15 +62,26 @@ function resolveBoot(program, profile, options, args) {
 	const patches = options.patch ?? [];
 	if (patches.includes("")) program.error("error: --patch needs a path");
 	if (options.fromDefaultProfile === "") program.error("error: --from-default-profile needs a name");
-	if (options.dumpConfig !== true && options.dumpDefaultConfig !== true) return {
+	const dumps = [
+		options.dumpConfig,
+		options.dumpDefaultConfig,
+		options.dumpConfigSchema
+	].filter(Boolean);
+	if (dumps.length === 0) return {
 		mode: "profile",
 		profile,
 		fromDefaultProfile: options.fromDefaultProfile,
 		patches,
 		args
 	};
-	if (options.dumpConfig === true && options.dumpDefaultConfig === true) program.error("error: --dump-config and --dump-default-config are mutually exclusive");
+	if (dumps.length > 1) program.error("error: --dump-config, --dump-default-config, and --dump-config-schema are mutually exclusive");
 	if (args.length > 0) program.error(`error: config dumps take no app arguments, got ${args.map((argument) => JSON.stringify(argument)).join(" ")}`);
+	if (options.dumpConfigSchema === true) return {
+		mode: "dump-config-schema",
+		profile,
+		fromDefaultProfile: options.fromDefaultProfile,
+		patches
+	};
 	const defaultOnly = options.dumpDefaultConfig === true;
 	if (defaultOnly && patches.length > 0) program.error("error: --dump-default-config prints the bundle layers and takes no --patch");
 	return {
@@ -92,7 +103,7 @@ function parseDshArgs(argv, version) {
 	const first = argv[0];
 	let resolved;
 	const program = new Command();
-	program.name("dsh").version(version, "-V, --version", "output the version number").usage("[--profile] <name> [options] [app-args...]\n       dsh plugin --profile <name> <pnpm-args...>").description("dsh: boot a DeepSeek Harness profile — an ordered stack of plugin-bundle patch layers under your own overrides.").addHelpText("after", HELP_EXAMPLES).exitOverride().helpOption(false).helpCommand(false).allowUnknownOption().passThroughOptions().enablePositionalOptions().argument("[args...]", "arguments for the booted profile's app (see: dsh --profile <name> --help)").option("--profile <name>", "the profile under $DSH_HOME/profiles to boot", selectProfile).option("--from-default-profile <name>", "initialize a new custom profile from a shipped profile template").option("--patch <path>", "extra patch-list overlay applied after the profile layer (repeatable)", collect).option("--dump-config", "print the composed profile tree and exit").option("--dump-default-config", "print the profile tree without its user layer or --patch overlays and exit").action((args, options) => {
+	program.name("dsh").version(version, "-V, --version", "output the version number").usage("[--profile] <name> [options] [app-args...]\n       dsh plugin --profile <name> <pnpm-args...>").description("dsh: boot a DeepSeek Harness profile — an ordered stack of plugin-bundle patch layers under your own overrides.").addHelpText("after", HELP_EXAMPLES).exitOverride().helpOption(false).helpCommand(false).allowUnknownOption().passThroughOptions().enablePositionalOptions().argument("[args...]", "arguments for the booted profile's app (see: dsh --profile <name> --help)").option("--profile <name>", "the profile under $DSH_HOME/profiles to boot", selectProfile).option("--from-default-profile <name>", "initialize a new custom profile from a shipped profile template").option("--patch <path>", "extra patch-list overlay applied after the profile layer (repeatable)", collect).option("--dump-config", "print the composed profile tree and exit").option("--dump-config-schema", "print JSON Schema for profile entries and patches without mounting").option("--dump-default-config", "print the profile tree without its user layer or --patch overlays and exit").action((args, options) => {
 		if (options.profile === void 0) {
 			if (args.some((argument) => argument === "-h" || argument === "--help")) program.help();
 			program.error("error: --profile <name> is required");
@@ -223,15 +234,20 @@ async function runCli() {
 			break;
 		}
 		case "plugin": {
-			const { runPlugin } = await import("./plugin-DJ-rVHUS.js");
+			const { runPlugin } = await import("./plugin-CnNK4cws.js");
 			process.exit(await runPlugin(invocation.profile, invocation.args));
 			break;
 		}
 		case "dump-config": {
-			const { runDumpConfig } = await import("./dump-config-Bb5YvFIX.js");
+			const { runDumpConfig } = await import("./dump-config-DaAE0NHG.js");
 			runDumpConfig(invocation.profile, invocation.defaultOnly, invocation.patches, invocation.fromDefaultProfile);
 			break;
 		}
+		case "dump-config-schema": {
+			const { runDumpConfigSchema } = await import("./dump-config-schema-BgEU7VYz.js");
+			await runDumpConfigSchema(invocation.profile, invocation.patches, invocation.fromDefaultProfile);
+			break;
+		}
 		default: throw new Error(`dsh: unhandled invocation mode ${JSON.stringify(invocation)}`);
 	}
 }

package/lib/{dump-config-Bb5YvFIX.js → dump-config-C-0P1h0W.js}

@@ -1,4 +1,4 @@
-import { a as prepareProfile, n as PROFILE_ROOT_FILENAME, r as homePatchPath } from "./profile-boot-BNu17Y9U.js";
+import { a as prepareProfile, n as PROFILE_ROOT_FILENAME, r as homePatchPath } from "./profile-boot-DIiro1p-.js";
 import { existsSync } from "node:fs";
 import { loadOptionalPatches, loadOverlayPatches, renderConfigDump } from "@deepseek-ai/dsh-app-boot";
 import { join, resolve } from "node:path";
@@ -23,6 +23,17 @@ const NAME = "dsh";
 */
 function runDumpConfig(profile, defaultOnly, patches, fromDefaultProfile) {
 	const loaded = prepareProfile(profile, !defaultOnly, fromDefaultProfile);
+	const layers = collectConfigDumpLayers(loaded, defaultOnly, patches);
+	process.stdout.write(renderConfigDump(NAME, join(loaded.dir, PROFILE_ROOT_FILENAME), layers));
+}
+/**
+* Read dump layers in bundle, profile, home, then argv order without composing them.
+* @param loaded - prepared profile and parsed bundle and profile patches.
+* @param defaultOnly - omit profile, home, and argv layers without reading their files.
+* @param patches - overlay paths relative to the invoking directory, in argv order.
+* @returns the labeled layers shared by YAML and schema dumps.
+*/
+function collectConfigDumpLayers(loaded, defaultOnly, patches) {
 	const layers = loaded.layers.map((layer) => ({
 		label: layer.packageName,
 		patches: layer.patches
@@ -46,8 +57,8 @@ function runDumpConfig(profile, defaultOnly, patches, fromDefaultProfile) {
 			});
 		}
 	}
-	process.stdout.write(renderConfigDump(NAME, join(loaded.dir, PROFILE_ROOT_FILENAME), layers));
+	return layers;
 }
 /* v8 ignore stop */
 //#endregion
-export { runDumpConfig };
+export { runDumpConfig as n, collectConfigDumpLayers as t };

package/lib/dump-config-DaAE0NHG.js

@@ -0,0 +1,2 @@
+import { n as runDumpConfig } from "./dump-config-C-0P1h0W.js";
+export { runDumpConfig };

package/lib/dump-config-schema-BgEU7VYz.js

@@ -0,0 +1,41 @@
+import { a as prepareProfile, t as INSTALL_ANCHOR } from "./profile-boot-DIiro1p-.js";
+import { t as collectConfigDumpLayers } from "./dump-config-C-0P1h0W.js";
+import { generateConfigSchema } from "@deepseek-ai/dsh-app-boot";
+//#region lib/types/dump-config-schema.js
+/**
+* Schema-dump entry: inspect the composed profile without applying its plugins.
+* Imports and lazy schema builders execute trusted module code.
+* @module @deepseek-ai/dsh/dump-config-schema
+*/
+/* v8 ignore file -- built-bin acceptance drives schema collection and output. */
+const NAME = "dsh";
+/**
+* Print one JSON Schema document; incomplete collection or projection sets exitCode to 1.
+* Profile initialization writes match the YAML dump. Plugin imports may execute
+* top-level code, but collection never applies plugins or evaluates `!!js`.
+* During schema generation, ordinary stdout writes are redirected to stderr.
+* @param profile - the profile name.
+* @param patches - overlay paths, in argv order.
+* @param fromDefaultProfile - shipped template used once to initialize a missing profile.
+* @returns after collection and output, with diagnostics also written to stderr.
+*/
+async function runDumpConfigSchema(profile, patches, fromDefaultProfile) {
+	const loaded = prepareProfile(profile, true, fromDefaultProfile);
+	const layers = collectConfigDumpLayers(loaded, false, patches);
+	const stdoutWrite = process.stdout.write;
+	let dump;
+	process.stdout.write = process.stderr.write.bind(process.stderr);
+	try {
+		dump = await generateConfigSchema(NAME, loaded, layers.map((layer) => layer.patches), INSTALL_ANCHOR);
+	} finally {
+		process.stdout.write = stdoutWrite;
+	}
+	process.stdout.write(`${JSON.stringify(dump, null, 2)}\n`);
+	for (const diagnostic of dump["x-cordis"].diagnostics) {
+		const location = diagnostic.path === void 0 ? "" : ` [${diagnostic.path}]`;
+		process.stderr.write(`${NAME}: ${diagnostic.level}:${location} ${diagnostic.message}\n`);
+	}
+	if (!dump["x-cordis"].complete) process.exitCode = 1;
+}
+//#endregion
+export { runDumpConfigSchema };

package/lib/{plugin-DJ-rVHUS.js → plugin-CnNK4cws.js}

@@ -1,4 +1,4 @@
-import { t as INSTALL_ANCHOR } from "./profile-boot-BNu17Y9U.js";
+import { t as INSTALL_ANCHOR } from "./profile-boot-DIiro1p-.js";
 import { resolveProfileDir } from "@deepseek-ai/dsh-app-boot";
 import { join } from "node:path";
 import { runPluginCommand } from "@deepseek-ai/dsh-plugin-manager/operations";

package/lib/{profile-boot-BNu17Y9U.js → profile-boot-DIiro1p-.js}

@@ -1,6 +1,6 @@
 import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-import { PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, PluginPackages, boot, createProfileResolutionGeneration, healIsolatedProfileModuleFallback, healProfilesModuleFallback, initProfile, installFailLoud, loadOverlayPatches, loadProfile, readProfilePatches, resolveProfileDir } from "@deepseek-ai/dsh-app-boot";
+import { PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, PluginPackages, boot, createRuntimeResolution, initProfile, installFailLoud, loadOverlayPatches, loadProfile, readProfilePatches, resolveProfileDir } from "@deepseek-ai/dsh-app-boot";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
 import { dirname, join, resolve } from "node:path";
 import { installProxyFromEnvironment } from "@deepseek-ai/dsh-http-proxy";
@@ -197,22 +197,19 @@ function prepareProfile(name, userLayer = true, fromDefaultProfile) {
 * then the telemetry switch.
 * @param name - the profile name.
 * @param patchFiles - `--patch` overlay paths, in argv order.
-* @param resolutionMode - runtime lookup, disk links, or dual verification of both.
 * @param fromDefaultProfile - shipped template for a missing named profile.
 * @param resolvedProfile - application-owned profile and installation.
 * @returns the profile and its patch layers.
 */
-async function composeProfile(name, patchFiles, resolutionMode, fromDefaultProfile, resolvedProfile) {
+async function composeProfile(name, patchFiles, fromDefaultProfile, resolvedProfile) {
 	const profile = resolvedProfile?.profile ?? prepareProfile(name, true, fromDefaultProfile);
 	if (resolvedProfile !== void 0) writeFileSync(join(profile.dir, PROFILE_ROOT_FILENAME), PROFILE_ROOT_CONFIG);
-	const resolutionOptions = {
-		installAnchor: resolvedProfile?.installAnchor ?? INSTALL_ANCHOR,
-		profile
-	};
-	if (resolvedProfile !== void 0 && resolutionMode !== "runtime") healIsolatedProfileModuleFallback(resolvedProfile);
 	return {
 		profile,
-		resolution: resolutionMode === "runtime" || resolvedProfile !== void 0 ? await createProfileResolutionGeneration(resolutionOptions) : await healProfilesModuleFallback(resolutionOptions),
+		resolution: await createRuntimeResolution({
+			installAnchor: resolvedProfile?.installAnchor ?? INSTALL_ANCHOR,
+			profile
+		}),
 		overlays: patchFiles.flatMap((file) => loadOverlayPatches(NAME, resolve(file)))
 	};
 }
@@ -227,7 +224,6 @@ async function runProfile(options) {
 	const disposeProxy = await installProxyFromEnvironment(options.environment, (message) => {
 		process.stderr.write(`${NAME}: ${message}\n`);
 	});
-	const resolutionMode = process.pkg !== void 0 ? "runtime" : options.resolutionMode ?? "runtime";
 	const app = {};
 	let disposal;
 	const dispose = () => disposal ??= (async () => {
@@ -241,7 +237,7 @@ async function runProfile(options) {
 		if (failures.length > 1) throw new AggregateError(failures, "dsh: profile cleanup failed");
 	})();
 	try {
-		const composed = await composeProfile(options.profile, options.patchFiles, resolutionMode, options.fromDefaultProfile, options.resolvedProfile);
+		const composed = await composeProfile(options.profile, options.patchFiles, options.fromDefaultProfile, options.resolvedProfile);
 		const appReady = createAppReady();
 		const shutdown = createProcessShutdown(dispose);
 		const signalShutdown = new AbortController();
@@ -275,10 +271,7 @@ async function runProfile(options) {
 			app.current = hostCtx;
 			hostCtx.provide("profileContext", profileContext);
 			hostCtx.provide(DSH_LAUNCH_ENVIRONMENT_KEY, options.environment);
-			await hostCtx.plugin(PluginPackages, resolutionMode === "link" ? {} : {
-				generation: composed.resolution,
-				behavior: resolutionMode === "dual" ? "verify" : "enforce"
-			});
+			await hostCtx.plugin(PluginPackages, { resolution: composed.resolution });
 			provideCmdline(hostCtx, {
 				args: options.args,
 				exit: (code) => void shutdown.shutdown(code),

package/lib/profile-boot.js

@@ -1,2 +1,2 @@
-import { a as prepareProfile, i as initializeProfileFromDefault, n as PROFILE_ROOT_FILENAME, o as runProfile, r as homePatchPath, t as INSTALL_ANCHOR } from "./profile-boot-BNu17Y9U.js";
+import { a as prepareProfile, i as initializeProfileFromDefault, n as PROFILE_ROOT_FILENAME, o as runProfile, r as homePatchPath, t as INSTALL_ANCHOR } from "./profile-boot-DIiro1p-.js";
 export { INSTALL_ANCHOR, PROFILE_ROOT_FILENAME, homePatchPath, initializeProfileFromDefault, prepareProfile, runProfile };

package/lib/types/args.d.ts

@@ -35,6 +35,14 @@ interface DumpConfigInvocation {
     defaultOnly: boolean;
     patches: string[];
 }
+/** Print declared plugin schemas without mounting the profile. */
+interface DumpConfigSchemaInvocation {
+    mode: 'dump-config-schema';
+    profile: string;
+    /** Shipped template used once to initialize a missing profile. */
+    fromDefaultProfile?: string | undefined;
+    patches: string[];
+}
 /** Manage a profile's plugins: forward `args` to pnpm inside the profile directory. */
 interface PluginInvocation {
     mode: 'plugin';
@@ -43,7 +51,7 @@ interface PluginInvocation {
     args: string[];
 }
 /** The resolved `dsh` invocation. Help, version, and errors exit inside {@link parseDshArgs}. */
-export type DshInvocation = ProfileInvocation | DumpConfigInvocation | PluginInvocation;
+export type DshInvocation = ProfileInvocation | DumpConfigInvocation | DumpConfigSchemaInvocation | PluginInvocation;
 /**
  * Resolve argv into one invocation, or print and exit for help, version, or an
  * error.

package/lib/types/dump-config-schema.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Schema-dump entry: inspect the composed profile without applying its plugins.
+ * Imports and lazy schema builders execute trusted module code.
+ * @module @deepseek-ai/dsh/dump-config-schema
+ */
+/**
+ * Print one JSON Schema document; incomplete collection or projection sets exitCode to 1.
+ * Profile initialization writes match the YAML dump. Plugin imports may execute
+ * top-level code, but collection never applies plugins or evaluates `!!js`.
+ * During schema generation, ordinary stdout writes are redirected to stderr.
+ * @param profile - the profile name.
+ * @param patches - overlay paths, in argv order.
+ * @param fromDefaultProfile - shipped template used once to initialize a missing profile.
+ * @returns after collection and output, with diagnostics also written to stderr.
+ */
+export declare function runDumpConfigSchema(profile: string, patches: readonly string[], fromDefaultProfile?: string): Promise<void>;
+//# sourceMappingURL=dump-config-schema.d.ts.map

package/lib/types/dump-config.d.ts

@@ -5,6 +5,7 @@
  * profile's own patch file, and each `--patch` overlay.
  * @module @deepseek-ai/dsh/dump-config
  */
+import { type ConfigDumpLayer, type Profile } from '@deepseek-ai/dsh-app-boot';
 /**
  * Print a profile composition with comments naming each source file and patch layer.
  * @param profile - the profile name.
@@ -15,4 +16,12 @@
  * @param fromDefaultProfile - shipped template used once to initialize a missing profile.
  */
 export declare function runDumpConfig(profile: string, defaultOnly: boolean, patches: readonly string[], fromDefaultProfile?: string): void;
+/**
+ * Read dump layers in bundle, profile, home, then argv order without composing them.
+ * @param loaded - prepared profile and parsed bundle and profile patches.
+ * @param defaultOnly - omit profile, home, and argv layers without reading their files.
+ * @param patches - overlay paths relative to the invoking directory, in argv order.
+ * @returns the labeled layers shared by YAML and schema dumps.
+ */
+export declare function collectConfigDumpLayers(loaded: Profile, defaultOnly: boolean, patches: readonly string[]): ConfigDumpLayer[];
 //# sourceMappingURL=dump-config.d.ts.map

package/lib/types/profile-boot.d.ts

@@ -10,7 +10,7 @@
  * @module @deepseek-ai/dsh/profile-boot
  */
 import { type Context } from '@deepseek-ai/cordis';
-import { type ProfileContext, type Profile, type ProfileResolutionMode } from '@deepseek-ai/dsh-app-boot';
+import { type ProfileContext, type Profile } from '@deepseek-ai/dsh-app-boot';
 import { type LaunchEnvironmentSnapshot } from '@deepseek-ai/dsh-launch-environment';
 import { type ProcessShutdown } from './process-shutdown.ts';
 /**
@@ -75,8 +75,6 @@ export interface RunProfileOptions {
     args: readonly string[];
     /** Application-owned package runtime, scoped to plugin package operations. */
     packageManager?: ProfileContext['packageManager'];
-    /** Module fallback backend; defaults to runtime. Plain Node callers may override it; pkg executables always use runtime. */
-    resolutionMode?: ProfileResolutionMode;
 }
 /**
  * Boot one profile invocation end to end and leave process lifetime to the

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh",
   "description": "dsh CLI: profile launch, plugin management, and configuration inspection",
-  "version": "0.1.6-alpha.2",
+  "version": "0.1.7-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -18,140 +18,134 @@
     "lib/*.js",
     "lib/types/*.d.ts"
   ],
-  "dsh": {
-    "configTrees": [
-      {
-        "mount": "config/agent-presets",
-        "path": "../../packages/preset/agent-presets/presets",
-        "scanRoster": true
-      }
-    ]
-  },
   "license": "MIT",
   "dependencies": {
     "commander": "^15.0.0",
     "js-yaml": "^4.2.0",
     "node-addon-require-builtin": "^0.1.6",
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-hmr": "^0.1.6-alpha.2",
-    "@deepseek-ai/cordis-plugin-include": "^1.0.7",
-    "@deepseek-ai/cordis-plugin-timer": "^1.1.4",
-    "@deepseek-ai/dsh-acp-app": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-agent-instructions": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-agent-tool-presentation": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-app-boot": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-base": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-agent-preset": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-cordis": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-cmdline": "^0.1.6-alpha.2",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-command-compact": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-command-goal": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-compaction-tool-result-pruner": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-cordis-client-runner": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-experimental-agent-team-profile": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-experimental-agent-team-web-profile": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-goal": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-fs-local": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-goal-round-driver": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-headless": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-compaction-basic": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-hooks-claude-code": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-hooks-codex": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-jobs-local": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-launch-environment": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-mcp-client": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-persona": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-plan-mode": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-pwsh-local": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-pwsh-sandbox": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-schedule": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-sdk-app": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-sdk-minimal": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session-reference": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-skill": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-skill-filesystem": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-terminal": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-terminal-bash": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-time-context": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tmux-context": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-token-meter": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-bash": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-bash-persistent": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-ask-user": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-present": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-cordis": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-fs": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-fs-search": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-goal": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-jobs": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-pwsh": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-pwsh-persistent": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-ralph": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-skill": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-str-replace-editor": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-subagent": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-subagent-control": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-todo": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-web": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tool-workflow": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-web-app": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-webhook": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-webhook-github": "^0.1.6-alpha.2",
-    "@deepseek-ai/schemastery": "^3.18.2",
-    "@deepseek-ai/dsh-workflow-ptc": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-http-proxy": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-mcp-resources": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-plugin-manager": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-atomic-write": "^0.1.6-alpha.2"
+    "@deepseek-ai/cordis": "~4.0.4",
+    "@deepseek-ai/cordis-plugin-include": "~1.0.9",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.5",
+    "@deepseek-ai/cordis-plugin-timer": "~1.1.6",
+    "@deepseek-ai/dsh-acp-app": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-hmr": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-agent-instructions": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-app-boot": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-client-ui-agent-preset": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-client-ui-cordis": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-cmdline": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-agent-tool-presentation": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-command-compact": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-command-goal": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-compaction-basic": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-base": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-compaction-tool-result-pruner": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-cordis-client-runner": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-goal-round-driver": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-headless": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-hooks-claude-code": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-hooks-codex": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-jobs-local": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-launch-environment": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-fs-local": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-goal": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-mcp-client": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-persona": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-plan-mode": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-pwsh-local": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-pwsh-sandbox": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-sdk-app": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-sdk-minimal": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-session-reference": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-skill": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-schedule": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-skill-filesystem": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-skill-office": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-workspace-dependencies": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-terminal": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-terminal-bash": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-time-context": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tmux-context": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-token-meter": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-ask-user": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-bash": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-bash-persistent": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-cordis": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-fs-search": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-experimental-agent-team-profile": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-goal": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-jobs": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-pwsh": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-pwsh-persistent": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-ralph": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-skill": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-str-replace-editor": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-subagent": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-subagent-control": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-todo": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-web": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-workflow": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-web-app": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-webhook": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-webhook-github": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-workflow-ptc": "0.1.7-alpha.2",
+    "@deepseek-ai/schemastery": "~3.18.4",
+    "@deepseek-ai/dsh-mcp-resources": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-fs": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-plugin-manager": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-atomic-write": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-agent-preset": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-experimental-voice-input-bundle": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tool-present": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-http-proxy": "0.1.7-alpha.2"
   },
   "devDependencies": {
     "@agentclientprotocol/sdk": "1.4.0",
     "@types/js-yaml": "^4.0.9",
     "@types/ws": "8.18.1",
+    "ajv": "^8.20.0",
     "execa": "^10.0.0",
     "ws": "8.21.0",
-    "@deepseek-ai/dsh-acp": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-agent": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-agent-loop": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-attachment-local": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-bash-local": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-credentials-local": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-experimental-agent-team": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-experimental-ptc-runtime-python": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-experimental-tool-agent-team": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-fs-observation-policy": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-fs-sandbox": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-host-frontend-static": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-llm-deepseek": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-llm-mock-server": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-llm-replay": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-loader-smoke": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-plugin-package-inventory-deepseek": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-sandbox-local": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session-checkpoint-policy": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session-log-deepseek": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session-query": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-shell-env": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-llm": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-settings": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-settings-file": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-subagent": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-subagent-fork-in-process": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-subprocess-local": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-subagent-spawn-in-process": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-tools": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-user-approval": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.6-alpha.2"
+    "@deepseek-ai/dsh-acp": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-agent-loop": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-agent-loop-testkit": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-attachment-local": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-credentials-local": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-bash-local": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-experimental-agent-team": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-experimental-ptc-runtime-python": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-experimental-tool-agent-team": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-fs-sandbox": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-fs-observation-policy": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-host-frontend-static": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-llm-deepseek": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-llm-mock-server": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-llm-replay": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-plugin-package-inventory-deepseek": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-session-checkpoint-policy": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-session-log-deepseek": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-session-query": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-settings": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-subagent": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-loader-smoke": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-shell-env": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-subagent-fork-in-process": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.7-alpha.2"
   },
   "exports": {
     "./profile-boot": {