@deepseek-ai/dsh 0.1.7-alpha.2 → 0.1.7-rc.2

package/README.i18n.yaml

@@ -1,6 +1,22 @@
-# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
-# side as of the last confirmed-consistent state. Both languages carry equal authority;
-# after editing either side, bring the other along and re-record with:
+# Bilingual-pair consistency record for README.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write apps/cli/README.md
-README.md: 4eb113a6155433cb69f949d9e461ccfbd0142e7c
-README.zh.md: 6a0e8a38a70d2ad551b4e91619545b3def09f2ec
+/deepseek-ai-dsh:
+  en: ebdc75fa0da18801
+  zh: 5c6cd2554b8f8a98
+/deepseek-ai-dsh/entry-modes:
+  en: 093936b9e1a59bea
+  zh: 12be7d2d931d9671
+/deepseek-ai-dsh/app-arguments:
+  en: cc03e6b75206661b
+  zh: 99e41f4143198352
+/deepseek-ai-dsh/profiles:
+  en: 79cad979b0f7895c
+  zh: b0f922a4b43accf8
+/deepseek-ai-dsh/optional-overlays:
+  en: 3a40ddc44e55f79c
+  zh: 8d3949132e1ef93c
+/deepseek-ai-dsh/development:
+  en: 99a36e4f7ea3f9c7
+  zh: 07ca2934de700caa

package/README.md

@@ -36,6 +36,8 @@ dsh --help                          # the launcher's own help
 
 A profile directory holds a `package.json` (out-of-tree plugin dependencies plus the profile manifest `dsh.profile` with its ordered `bundles` list) and a `cordis.patch.yml` (the user's own patch layer). `dsh-hmr`, when enabled in YAML, watches the profile manifest and both profile and home patch files, then recomposes all layers through one serialized reload. Without HMR, changes apply on restart. Edits arriving during watcher registration use the same nonfatal reload reporting as later edits. [Plugin Manager](../../packages/boot/plugin-manager/README.md) shares package operations and the profile write lock with `dsh plugin`; package updates retain disabled bundle selections. CLI package commands inherit authentication variables and terminal descriptors, including interactive build approval; service calls retain their scrubbed environment and captured diagnostics.
 
+Installation and profile startup enforce declared DSH peer ranges against the same runtime version shown by `dsh --version`. Incompatible plugins require an explicitly acknowledged exact-version exemption. The [plugin manager's compatibility reference](../../packages/boot/plugin-manager/README.md#version-compatibility-and-exemptions) documents `version-exemptions`, `allow-version`, `revoke-version`, persistence, and risks.
+
 The tree composes over an empty root:
 - each bundle's patch in `dsh.profile.bundles` order
 - then the profile's `cordis.patch.yml`, then the home-level `$DSH_HOME/cordis.patch.yml`
@@ -49,7 +51,7 @@ The [CLI behavior reference](reference/README.md) owns exact layer precedence, f
 
 ## Optional overlays
 
-`config/examples/` ships opt-in overlays for GitHub review webhooks, session-local Schedule, memory MCP servers, and runtime Cordis tools. They are never part of a default profile; the [user guides](../../docs/user/guide/index.md) and [developer practice guides](../../docs/user/develop/practice/index.md) own setup and safety instructions.
+`config/examples/` ships opt-in overlays for GitHub review webhooks, memory MCP servers, and runtime Cordis tools. They are never part of a default profile; the [user guides](../../docs/user/guide/index.md) and [developer practice guides](../../docs/user/develop/practice/index.md) own setup and safety instructions.
 
 ## Development
 

package/README.zh.md

@@ -36,6 +36,8 @@ dsh --help                          # the launcher's own help
 
 profile 目录包含一个 `package.json`，其中记录树外插件依赖，以及 profile manifest（元数据清单）`dsh.profile`、其中按顺序排列的 `bundles` 列表；还包含一个 `cordis.patch.yml`，其中保存用户自己的 patch 层。在 YAML 中启用的 `dsh-hmr` 监视 profile manifest、profile 与 home 级 patch 文件，再通过统一串行重载重新组合所有层。未启用 HMR 时，更改在重启后生效。监听器注册期间发生的编辑与后续编辑使用相同的非致命重载错误报告。[插件管理器](../../packages/boot/plugin-manager/README.zh.md) 与 `dsh plugin` 共享包操作和 profile 写锁；更新依赖会保留已停用的组合包选择。CLI 包操作继承认证环境和终端描述符，支持交互式构建批准；service 调用保留清理后的环境并捕获诊断。
 
+安装和 profile 启动会按声明的 DSH peer 范围，检查与 `dsh --version` 显示值相同的运行时版本。不兼容插件需要用户明确确认精确版本豁免。[插件管理器的兼容性参考](../../packages/boot/plugin-manager/README.zh.md#version-compatibility-and-exemptions)说明 `version-exemptions`、`allow-version`、`revoke-version`、持久化规则与风险。
+
 配置树以空根为起点，依次叠加以下配置层：
 - `dsh.profile.bundles` 中各组合包的 patch
 - profile 自身的 `cordis.patch.yml`，然后是 home 级的 `$DSH_HOME/cordis.patch.yml`
@@ -49,7 +51,7 @@ profile 目录包含一个 `package.json`，其中记录树外插件依赖，以
 
 ## 可选覆盖层
 
-`config/examples/` 交付 GitHub 评审 webhook、会话内 Schedule、记忆 MCP 服务器与运行时 Cordis 工具的可选覆盖层。它们绝不属于默认 profile；设置与安全说明由[用户指南](../../docs/user/guide/index.zh.md)和[开发实战指南](../../docs/user/develop/practice/index.zh.md)负责。
+`config/examples/` 交付 GitHub 评审 webhook、记忆 MCP 服务器与运行时 Cordis 工具的可选覆盖层。它们绝不属于默认 profile；设置与安全说明由[用户指南](../../docs/user/guide/index.zh.md)和[开发实战指南](../../docs/user/develop/practice/index.zh.md)负责。
 
 ## 开发
 

package/lib/bin.js

@@ -1,7 +1,5 @@
 #!/usr/bin/env node
-import { readFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { StartupError, loadLayeredEnv } from "@deepseek-ai/dsh-app-boot";
+import { StartupError, getDshRuntimeVersion, loadLayeredEnv } from "@deepseek-ai/dsh-app-boot";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
 import { Command, CommanderError, InvalidArgumentError } from "commander";
 import { randomUUID } from "node:crypto";
@@ -200,16 +198,12 @@ async function reportStartupFailure(error, context, write = writeStderr) {
 * @module @deepseek-ai/dsh/bin
 */
 /* v8 ignore file -- built-bin acceptance exercises this self-executing dispatch. */
-function readVersion() {
-	const manifest = JSON.parse(readFileSync(fileURLToPath(new URL("../package.json", import.meta.url)), "utf8"));
-	return typeof manifest.version === "string" ? manifest.version : "0.0.0";
-}
 /**
 * Run the public dsh command-line interface.
 * @returns a promise that settles when the selected command mode finishes.
 */
 async function runCli() {
-	const version = readVersion();
+	const version = getDshRuntimeVersion();
 	const invocation = parseDshArgs(process.argv.slice(2), version);
 	switch (invocation.mode) {
 		case "profile": {
@@ -234,17 +228,17 @@ async function runCli() {
 			break;
 		}
 		case "plugin": {
-			const { runPlugin } = await import("./plugin-CnNK4cws.js");
+			const { runPlugin } = await import("./plugin-DkYIj96-.js");
 			process.exit(await runPlugin(invocation.profile, invocation.args));
 			break;
 		}
 		case "dump-config": {
-			const { runDumpConfig } = await import("./dump-config-DaAE0NHG.js");
+			const { runDumpConfig } = await import("./dump-config-crgOY3tW.js");
 			runDumpConfig(invocation.profile, invocation.defaultOnly, invocation.patches, invocation.fromDefaultProfile);
 			break;
 		}
 		case "dump-config-schema": {
-			const { runDumpConfigSchema } = await import("./dump-config-schema-BgEU7VYz.js");
+			const { runDumpConfigSchema } = await import("./dump-config-schema-DhhNOaro.js");
 			await runDumpConfigSchema(invocation.profile, invocation.patches, invocation.fromDefaultProfile);
 			break;
 		}

package/lib/{dump-config-C-0P1h0W.js → dump-config-BEDI-dNY.js}

@@ -1,7 +1,7 @@
-import { a as prepareProfile, n as PROFILE_ROOT_FILENAME, r as homePatchPath } from "./profile-boot-DIiro1p-.js";
-import { existsSync } from "node:fs";
+import { a as prepareProfile, n as PROFILE_ROOT_FILENAME, r as homePatchPath } from "./profile-boot-BZ2ZjNWi.js";
 import { loadOptionalPatches, loadOverlayPatches, renderConfigDump } from "@deepseek-ai/dsh-app-boot";
 import { join, resolve } from "node:path";
+import { existsSync } from "node:fs";
 //#region lib/types/dump-config.js
 /**
 * Config-dump entry for `dsh --profile <name> --dump-config`: compose the

package/lib/dump-config-crgOY3tW.js

@@ -0,0 +1,2 @@
+import { n as runDumpConfig } from "./dump-config-BEDI-dNY.js";
+export { runDumpConfig };

package/lib/{dump-config-schema-BgEU7VYz.js → dump-config-schema-DhhNOaro.js}

@@ -1,5 +1,5 @@
-import { a as prepareProfile, t as INSTALL_ANCHOR } from "./profile-boot-DIiro1p-.js";
-import { t as collectConfigDumpLayers } from "./dump-config-C-0P1h0W.js";
+import { a as prepareProfile, t as INSTALL_ANCHOR } from "./profile-boot-BZ2ZjNWi.js";
+import { t as collectConfigDumpLayers } from "./dump-config-BEDI-dNY.js";
 import { generateConfigSchema } from "@deepseek-ai/dsh-app-boot";
 //#region lib/types/dump-config-schema.js
 /**
@@ -26,7 +26,7 @@ async function runDumpConfigSchema(profile, patches, fromDefaultProfile) {
 	let dump;
 	process.stdout.write = process.stderr.write.bind(process.stderr);
 	try {
-		dump = await generateConfigSchema(NAME, loaded, layers.map((layer) => layer.patches), INSTALL_ANCHOR);
+		dump = await generateConfigSchema(loaded, layers.map((layer) => layer.patches), INSTALL_ANCHOR);
 	} finally {
 		process.stdout.write = stdoutWrite;
 	}

package/lib/plugin-DkYIj96-.js

@@ -0,0 +1,83 @@
+import { t as INSTALL_ANCHOR } from "./profile-boot-BZ2ZjNWi.js";
+import { DEFAULT_PROFILE_BUNDLES, PROFILE_TEMPLATES, initProfile, readProfileCompatibility, resolveProfileDir } from "@deepseek-ai/dsh-app-boot";
+import { mkdir } from "node:fs/promises";
+import { join } from "node:path";
+import { existsSync } from "node:fs";
+import { runPluginCommand, setProfileVersionExemption } from "@deepseek-ai/dsh-plugin-manager/operations";
+import { withFileLock } from "@deepseek-ai/dsh-atomic-write";
+//#region lib/types/plugin.js
+/** Profile package management and explicit, exact-version compatibility approvals. */
+/** Parse only DSH-owned commands; all other arguments remain pnpm's responsibility. */
+async function versionCommand(profile, args) {
+	const [command, ...rest] = args;
+	if (command !== "allow-version" && command !== "revoke-version" && command !== "version-exemptions") return void 0;
+	try {
+		let packageVersion;
+		let runtimeVersion;
+		let acceptRisk = false;
+		const argumentsIterator = rest.values();
+		for (const argument of argumentsIterator) if (argument === "--accept-risk" && command === "allow-version" && !acceptRisk) acceptRisk = true;
+		else if (argument === "--dsh-version" && runtimeVersion === void 0) runtimeVersion = argumentsIterator.next().value;
+		else if (argument.startsWith("--dsh-version=") && runtimeVersion === void 0) runtimeVersion = argument.slice(14);
+		else if (!argument.startsWith("-") && packageVersion === void 0) packageVersion = argument;
+		else throw new Error(`unexpected argument ${JSON.stringify(argument)}`);
+		if (command === "version-exemptions" && rest.length > 0) throw new Error("usage: dsh plugin version-exemptions");
+		let request;
+		if (command !== "version-exemptions") {
+			if (packageVersion === void 0 || runtimeVersion === void 0) throw new Error(`usage: dsh plugin ${command} <package@version> --dsh-version <exact>${command === "allow-version" ? " --accept-risk" : ""}`);
+			request = {
+				packageVersion,
+				runtimeVersion
+			};
+		}
+		if (command === "allow-version") process.stderr.write("dsh: warning: allowing incompatible plugin versions can break the application or corrupt data. Approval applies only to the exact package and DSH versions.\n");
+		const dir = resolveProfileDir(profile);
+		await mkdir(dir, { recursive: true });
+		await withFileLock(join(dir, "package.json"), async () => {
+			if (!existsSync(join(dir, "package.json"))) initProfile(dir, PROFILE_TEMPLATES[profile]?.bundles ?? DEFAULT_PROFILE_BUNDLES);
+			if (request === void 0) {
+				const { exemptions, warnings } = readProfileCompatibility(dir);
+				for (const warning of warnings) process.stderr.write(`dsh: warning: ${warning}\n`);
+				process.stdout.write(JSON.stringify(exemptions, void 0, 2) + "\n");
+			} else {
+				await setProfileVersionExemption(dir, request.packageVersion, request.runtimeVersion, command === "allow-version", acceptRisk);
+				process.stdout.write(`dsh: ${command === "allow-version" ? "allowed" : "revoked"} ${request.packageVersion} for DSH ${request.runtimeVersion}\n`);
+			}
+		}, { waitMs: 12e4 });
+		return 0;
+	} catch (error) {
+		process.stderr.write(`dsh: ${String(error)}\n`);
+		return 1;
+	}
+}
+/** Run package management for a profile.
+* @param profile Profile name.
+* @param args DSH exemption command or pnpm arguments relative to the invoking directory.
+* @returns Zero on success; nonzero on invalid approval or package-manager failure.
+*/
+async function runPlugin(profile, args) {
+	const versionResult = await versionCommand(profile, args);
+	if (versionResult !== void 0) return versionResult;
+	const dir = resolveProfileDir(profile);
+	if (existsSync(join(dir, "package.json"))) for (const warning of readProfileCompatibility(dir).warnings) process.stderr.write(`dsh: warning: ${warning}\n`);
+	const result = await runPluginCommand({
+		profile,
+		installAnchor: INSTALL_ANCHOR,
+		cwd: process.cwd()
+	}, args, {
+		execution: "cli",
+		outputBytes: 16384,
+		lockWaitMs: 12e4,
+		lookupTimeoutMs: 12e4,
+		onOutput: (text, stream) => {
+			process[stream].write(text);
+		}
+	});
+	if (result.exitCode === 127) process.stderr.write("dsh: pnpm was not found; install pnpm and make it available on PATH.\n");
+	for (const { name, version, runtimeVersion } of result.incompatible ?? []) process.stderr.write(`dsh: to accept the risk, run: dsh plugin --profile ${profile} allow-version ${name}@${version} --dsh-version ${runtimeVersion} --accept-risk\n`);
+	if (result.exitCode !== 0) process.stderr.write(`dsh: plugin command failed; diagnostics: ${result.logPath}\n`);
+	if (result.exitCode !== 0 && args.some((argument) => /^git\+|^github:|\.git(?:#|$)/.test(argument))) process.stderr.write(`dsh: git-hosted plugins build on install via their prepare script, which pnpm blocks until allowed — add the exact key pnpm printed above under allowBuilds in ${join(resolveProfileDir(profile), "pnpm-workspace.yaml")}, then re-run\n`);
+	return result.exitCode;
+}
+//#endregion
+export { runPlugin };

package/lib/{profile-boot-DIiro1p-.js → profile-boot-BZ2ZjNWi.js}

@@ -1,8 +1,8 @@
-import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, PluginPackages, boot, createRuntimeResolution, initProfile, installFailLoud, loadOverlayPatches, loadProfile, readProfilePatches, resolveProfileDir } from "@deepseek-ai/dsh-app-boot";
+import { PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, PluginPackages, boot, createRuntimeResolution, initProfile, installFailLoud, loadOverlayPatches, loadProfile, readProfilePatches, reportSkippedBundles, resolveProfileDir } from "@deepseek-ai/dsh-app-boot";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
 import { dirname, join, resolve } from "node:path";
+import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
 import { installProxyFromEnvironment } from "@deepseek-ai/dsh-http-proxy";
 import { DSH_LAUNCH_ENVIRONMENT_KEY } from "@deepseek-ai/dsh-launch-environment";
 import { provideCmdline } from "@deepseek-ai/dsh-cmdline";
@@ -185,6 +185,7 @@ function initializeProfileFromDefault(name, fromDefaultProfile, home = resolveDs
 function prepareProfile(name, userLayer = true, fromDefaultProfile) {
 	if (fromDefaultProfile !== void 0) initializeProfileFromDefault(name, fromDefaultProfile);
 	const profile = loadProfile(NAME, name, INSTALL_ANCHOR, void 0, { userLayer });
+	reportSkippedBundles(NAME, profile);
 	writeFileSync(join(profile.dir, PROFILE_ROOT_FILENAME), PROFILE_ROOT_CONFIG);
 	return profile;
 }

package/lib/profile-boot.js

@@ -1,2 +1,2 @@
-import { a as prepareProfile, i as initializeProfileFromDefault, n as PROFILE_ROOT_FILENAME, o as runProfile, r as homePatchPath, t as INSTALL_ANCHOR } from "./profile-boot-DIiro1p-.js";
+import { a as prepareProfile, i as initializeProfileFromDefault, n as PROFILE_ROOT_FILENAME, o as runProfile, r as homePatchPath, t as INSTALL_ANCHOR } from "./profile-boot-BZ2ZjNWi.js";
 export { INSTALL_ANCHOR, PROFILE_ROOT_FILENAME, homePatchPath, initializeProfileFromDefault, prepareProfile, runProfile };

package/lib/types/plugin.d.ts

@@ -1,7 +1,7 @@
 /** Run package management for a profile.
  * @param profile Profile name.
- * @param args Pnpm arguments relative to the invoking directory.
- * @returns Pnpm exit code.
+ * @param args DSH exemption command or pnpm arguments relative to the invoking directory.
+ * @returns Zero on success; nonzero on invalid approval or package-manager failure.
  */
 export declare function runPlugin(profile: string, args: readonly string[]): Promise<number>;
 //# sourceMappingURL=plugin.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh",
   "description": "dsh CLI: profile launch, plugin management, and configuration inspection",
-  "version": "0.1.7-alpha.2",
+  "version": "0.1.7-rc.2",
   "publishConfig": {
     "access": "public"
   },
@@ -24,82 +24,83 @@
     "js-yaml": "^4.2.0",
     "node-addon-require-builtin": "^0.1.6",
     "@deepseek-ai/cordis": "~4.0.4",
-    "@deepseek-ai/cordis-plugin-include": "~1.0.9",
+    "@deepseek-ai/dsh-hmr": "0.1.7-rc.2",
     "@deepseek-ai/cordis-plugin-loader": "~1.0.5",
+    "@deepseek-ai/cordis-plugin-include": "~1.0.9",
     "@deepseek-ai/cordis-plugin-timer": "~1.1.6",
-    "@deepseek-ai/dsh-acp-app": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-hmr": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-agent-instructions": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-app-boot": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-client-ui-agent-preset": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-client-ui-cordis": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-cmdline": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-agent-tool-presentation": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-command-compact": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-command-goal": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-compaction-basic": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-base": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-compaction-tool-result-pruner": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-cordis-client-runner": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-goal-round-driver": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-headless": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-hooks-claude-code": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-hooks-codex": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-jobs-local": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-launch-environment": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-fs-local": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-goal": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-mcp-client": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-persona": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-plan-mode": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-pwsh-local": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-pwsh-sandbox": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-sdk-app": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-sdk-minimal": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-session-reference": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-skill": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-schedule": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-skill-filesystem": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-skill-office": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-workspace-dependencies": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-terminal": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-terminal-bash": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-time-context": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tmux-context": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-token-meter": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-ask-user": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-bash": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-bash-persistent": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-cordis": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-fs-search": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-experimental-agent-team-profile": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-goal": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-jobs": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-pwsh": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-pwsh-persistent": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-ralph": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-skill": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-str-replace-editor": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-subagent": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-subagent-control": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-todo": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-web": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-workflow": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-web-app": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-webhook": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-webhook-github": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-workflow-ptc": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-acp-app": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-agent-instructions": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-agent-tool-presentation": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-app-boot": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-base": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-client-ui-agent-preset": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-client-ui-cordis": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-command-goal": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-cmdline": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-compaction-basic": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-compaction-tool-result-pruner": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-command-compact": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-cordis-client-runner": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-fs-local": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-goal": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-headless": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-goal-round-driver": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-hooks-claude-code": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-hooks-codex": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-jobs-local": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-launch-environment": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-persona": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-experimental-agent-team-profile": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-mcp-client": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-pwsh-local": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-plan-mode": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-pwsh-sandbox": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-schedule": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-sdk-app": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-sdk-minimal": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session-reference": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-skill-filesystem": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-skill-office": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-workspace-dependencies": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-terminal-bash": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-time-context": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tmux-context": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-skill": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-token-meter": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-ask-user": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-bash": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-bash-persistent": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-terminal": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-fs": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-fs-search": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-present": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-cordis": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-goal": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-jobs": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-pwsh": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-skill": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-ralph": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-str-replace-editor": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-subagent-control": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-web": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-todo": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-pwsh-persistent": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-subagent": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tool-workflow": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-web-app": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-webhook-github": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-workflow-ptc": "0.1.7-rc.2",
     "@deepseek-ai/schemastery": "~3.18.4",
-    "@deepseek-ai/dsh-mcp-resources": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-fs": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-plugin-manager": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-atomic-write": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-agent-preset": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-experimental-voice-input-bundle": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tool-present": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-http-proxy": "0.1.7-alpha.2"
+    "@deepseek-ai/dsh-http-proxy": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-webhook": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-mcp-resources": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-plugin-manager": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-atomic-write": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-experimental-voice-input-bundle": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-agent-preset": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-experimental-auto-review": "0.1.7-rc.2"
   },
   "devDependencies": {
     "@agentclientprotocol/sdk": "1.4.0",
@@ -108,44 +109,47 @@
     "ajv": "^8.20.0",
     "execa": "^10.0.0",
     "ws": "8.21.0",
-    "@deepseek-ai/dsh-acp": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-agent": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-agent-loop": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-agent-loop-testkit": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-attachment-local": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-credentials-local": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-bash-local": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-experimental-agent-team": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-experimental-ptc-runtime-python": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-experimental-tool-agent-team": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-fs-sandbox": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-fs-observation-policy": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-host-frontend-static": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-host-webserver": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-llm-deepseek": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-llm-pi-ai": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-llm-mock-server": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-llm-replay": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-plugin-package-inventory-deepseek": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-sandbox-local": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-session": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-session-checkpoint-policy": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-session-log-deepseek": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-session-query": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-settings": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-subagent": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-loader-smoke": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-system-prompt": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-shell-env": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-subagent-fork-in-process": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-user-approval": "0.1.7-alpha.2"
+    "@deepseek-ai/dsh-agent-loop": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-agent-loop-testkit": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-attachment-local": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-bash-local": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-agent": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-credentials-local": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-experimental-agent-team": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-acp": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-fs-sandbox": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-experimental-tool-agent-team": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-experimental-ptc-runtime-python": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-host-frontend-static": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-fs-observation-policy": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek-account": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm-mock-server": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm-replay": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek-api-key": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-loader-smoke": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-plugin-package-inventory-deepseek": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-sdk-client": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session-query": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session-log-deepseek": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-shell-env": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session-checkpoint-policy": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-subagent-fork-in-process": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.7-rc.2"
   },
   "exports": {
     "./profile-boot": {

package/lib/dump-config-DaAE0NHG.js

@@ -1,2 +0,0 @@
-import { n as runDumpConfig } from "./dump-config-C-0P1h0W.js";
-export { runDumpConfig };

package/lib/plugin-CnNK4cws.js

@@ -1,31 +0,0 @@
-import { t as INSTALL_ANCHOR } from "./profile-boot-DIiro1p-.js";
-import { resolveProfileDir } from "@deepseek-ai/dsh-app-boot";
-import { join } from "node:path";
-import { runPluginCommand } from "@deepseek-ai/dsh-plugin-manager/operations";
-//#region lib/types/plugin.js
-/** dsh plugin forwards pnpm through the shared profile package operations. */
-/** Run package management for a profile.
-* @param profile Profile name.
-* @param args Pnpm arguments relative to the invoking directory.
-* @returns Pnpm exit code.
-*/
-async function runPlugin(profile, args) {
-	const result = await runPluginCommand({
-		profile,
-		installAnchor: INSTALL_ANCHOR,
-		cwd: process.cwd()
-	}, args, {
-		execution: "cli",
-		outputBytes: 16384,
-		lockWaitMs: 12e4,
-		onOutput: (text, stream) => {
-			process[stream].write(text);
-		}
-	});
-	if (result.exitCode === 127) process.stderr.write("dsh: pnpm was not found; install pnpm and make it available on PATH.\n");
-	if (result.exitCode !== 0) process.stderr.write(`dsh: pnpm failed; diagnostics: ${result.logPath}\n`);
-	if (result.exitCode !== 0 && args.some((argument) => /^git\+|^github:|\.git(?:#|$)/.test(argument))) process.stderr.write(`dsh: git-hosted plugins build on install via their prepare script, which pnpm blocks until allowed — add the exact key pnpm printed above under allowBuilds in ${join(resolveProfileDir(profile), "pnpm-workspace.yaml")}, then re-run\n`);
-	return result.exitCode;
-}
-//#endregion
-export { runPlugin };