@deepseek-harness-tui/dsh-tui 0.8.3 → 0.8.5

package/node_modules/@dsh-std/storage/schema/local-storage-0.15.schema.json

@@ -1,56 +1,56 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "urn:dsh-std:storage:local-storage:0.15",
-  "title": "LocalStorage v0.15 operations",
-  "$defs": {
-    "jsonValue": {
-      "oneOf": [
-        { "type": "null" },
-        { "type": "boolean" },
-        { "type": "number" },
-        { "type": "string" },
-        { "type": "array", "items": { "$ref": "#/$defs/jsonValue" } },
-        { "type": "object", "additionalProperties": { "$ref": "#/$defs/jsonValue" } }
-      ]
-    },
-    "getInput": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["key"],
-      "properties": { "key": { "type": "string", "minLength": 1 } }
-    },
-    "getOutput": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["value"],
-      "properties": { "value": { "$ref": "#/$defs/jsonValue" } }
-    },
-    "setInput": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["key", "value"],
-      "properties": {
-        "key": { "type": "string", "minLength": 1 },
-        "value": { "$ref": "#/$defs/jsonValue" }
-      }
-    },
-    "setOutput": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["stored"],
-      "properties": { "stored": { "const": true } }
-    },
-    "deleteInput": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["key"],
-      "properties": { "key": { "type": "string", "minLength": 1 } }
-    },
-    "deleteOutput": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["deleted"],
-      "properties": { "deleted": { "type": "boolean" } }
-    }
-  }
-}
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:dsh-std:storage:local-storage:0.15",
+  "title": "LocalStorage v0.15 operations",
+  "$defs": {
+    "jsonValue": {
+      "oneOf": [
+        { "type": "null" },
+        { "type": "boolean" },
+        { "type": "number" },
+        { "type": "string" },
+        { "type": "array", "items": { "$ref": "#/$defs/jsonValue" } },
+        { "type": "object", "additionalProperties": { "$ref": "#/$defs/jsonValue" } }
+      ]
+    },
+    "getInput": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["key"],
+      "properties": { "key": { "type": "string", "minLength": 1 } }
+    },
+    "getOutput": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["value"],
+      "properties": { "value": { "$ref": "#/$defs/jsonValue" } }
+    },
+    "setInput": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["key", "value"],
+      "properties": {
+        "key": { "type": "string", "minLength": 1 },
+        "value": { "$ref": "#/$defs/jsonValue" }
+      }
+    },
+    "setOutput": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["stored"],
+      "properties": { "stored": { "const": true } }
+    },
+    "deleteInput": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["key"],
+      "properties": { "key": { "type": "string", "minLength": 1 } }
+    },
+    "deleteOutput": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["deleted"],
+      "properties": { "deleted": { "type": "boolean" } }
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deepseek-harness-tui/dsh-tui",
-  "version": "0.8.3",
+  "version": "0.8.5",
   "description": "Claude Code style interactive TUI front door for DeepSeek Harness agents, built on the ported Ink core.",
   "license": "MIT",
   "repository": {
@@ -105,13 +105,18 @@
     "verify:packaged-presets": "node scripts/verify-packaged-presets.mjs",
     "verify:minimal-preset-tools": "node scripts/verify-minimal-preset-tools.mjs",
     "verify:liangshen-bootstrap": "node scripts/verify-liangshen-bootstrap.mjs",
+    "verify:liangshen-bash": "node scripts/verify-liangshen-bash.mjs",
     "verify:package": "npm pack --dry-run --json --ignore-scripts | node scripts/verify-package.mjs",
     "verify:prompt-debug": "npm run build && node scripts/verify-prompt-debug.mjs",
     "verify:clipboard-image": "node --import tsx/esm scripts/verify-clipboard-image.ts",
     "verify:plugin-ledger": "node --import tsx/esm scripts/verify-plugin-ledger.ts",
     "verify:plugin-commands": "node --import tsx/esm scripts/verify-plugin-commands.ts",
     "verify:plugin-negotiation": "node --import tsx/esm scripts/verify-plugin-negotiation.ts",
-    "verify:plugin-lifecycle": "node --import tsx/esm scripts/verify-plugin-lifecycle.ts"
+    "verify:plugin-lifecycle": "node --import tsx/esm scripts/verify-plugin-lifecycle.ts",
+    "verify:tips": "node --import tsx/esm scripts/verify-tips.tsx",
+    "verify:thinking-preview": "node --import tsx/esm scripts/verify-thinking-preview.tsx",
+    "sync:profile": "node scripts/sync-profile.mjs",
+    "sync:profile:check": "node scripts/sync-profile.mjs --check"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
@@ -156,7 +161,7 @@
     "cli-highlight": "^2.1.11",
     "code-excerpt": "^3.0.0 || ^4.0.0",
     "diff": "^8.0.4",
-    "dsh-working-activity": "^0.2.6",
+    "dsh-working-activity": "^0.3.2",
     "emoji-regex": "^10.0.0",
     "figures": "^6.1.0",
     "get-east-asian-width": "^1.0.0",

package/presets/liangshen/.dsh-tui-managed.json

@@ -1,5 +1,5 @@
 {
   "owner": "@deepseek-harness-tui/dsh-tui",
   "preset": "liangshen",
-  "revision": "liangshen-toolcall-full-catalog-subagents-v3"
+  "revision": "liangshen-toolcall-full-catalog-subagents-v4"
 }

package/presets/liangshen/agent.cordis.yml

@@ -151,15 +151,17 @@
 # Windows-only `bash` tool (see custom-bash.mjs): registers the SAME
 # tool name as the persistent shell with a Minimal-compatible description, but
 # executes through the ordinary cross-platform subprocess seam (`bash -c`)
-# instead of a PTY. `bashPath` defaults to `bash` on PATH; point it at Git
-# Bash explicitly when the WSL shim would otherwise be picked up. No OS
-# sandbox confinement on Windows (landlock is linux-only); the tool
+# instead of a PTY. The Git Bash executable is DISCOVERED at preset mount:
+# an explicit `config.bashPath` (or DSH_TUI_LIANGSHEN_BASH_PATH) is honored as
+# the only candidate, otherwise a PATH git.exe is followed to its install tree
+# (installer/portable/Scoop layouts, Scoop shims followed), then conventional
+# roots, then bare `bash` — never the System32 WSL launcher. A miss warns and
+# skips registration, which fails the bootstrap open to the full catalog.
+# No OS sandbox confinement on Windows (landlock is linux-only); the tool
 # description says so.
 - id: custom-bash
   name: ./custom-bash.mjs
   disabled: !!js process.platform !== 'win32'
-  config:
-    bashPath: 'C:\Program Files\Git\bin\bash.exe'
 
 # ── filesystem ──────────────────────────────────────────────────────────────
 

package/presets/liangshen/custom-bash.mjs

@@ -13,9 +13,26 @@
  * the ordinary (cross-platform) subprocess seam keeps the schema anchor
  * without the PTY dependency.
  *
- * Executable resolution (config `bashPath`):
- *  - explicit absolute path (e.g. `C:\Program Files\Git\bin\bash.exe`), or
- *  - `bash` resolved through `ctx.subprocess.resolveExecutable` (PATH lookup).
+ * Executable resolution, in order (an explicit entry is the ONLY candidate:
+ * a miss fails loudly instead of silently substituting a guess):
+ *  1. explicit `config.bashPath` or the `DSH_TUI_LIANGSHEN_BASH_PATH`
+ *     environment variable (absolute path to a Git Bash bash.exe);
+ *  2. a `git` on PATH followed to its installation tree — every Windows Git
+ *     install ships bash next to git, wherever it was installed, so this
+ *     covers installer, portable, and Scoop layouts (a Scoop `.shim` sidecar
+ *     is followed to the real target) — yielding `<root>\bin\bash.exe` and
+ *     `<root>\usr\bin\bash.exe`;
+ *  3. conventional install roots (`ProgramFiles`, `ProgramFiles(x86)`,
+ *     `%LOCALAPPDATA%\Programs\Git`);
+ *  4. Scoop's conventional roots (`%SCOOP%`, else `%USERPROFILE%\scoop`)
+ *     under `apps\git\current\` — Scoop does not always export `SCOOP`;
+ *  5. bare `bash` on PATH.
+ * `C:\Windows\System32\bash.exe` (and Sysnative) is the WSL launcher, not
+ * the Git Bash executor: it is ALWAYS rejected, so a PATH lookup can never
+ * silently hand the model a WSL shell. Resolution runs ONCE at apply time —
+ * a total miss warns and SKIPS registration, so `tool-bootstrap`'s
+ * missing-tool path fails open to the full catalog instead of registering a
+ * `bash` tool whose every call would fail mid-session.
  *
  * Semantics mirror the official bash tool: `bash -c <command>` in a fresh
  * process, bounded output, non-zero exit reported not thrown. No sandbox
@@ -24,6 +41,8 @@
  * `str_replace_editor` (Minimal's two tools).
  */
 
+import { readFileSync } from 'node:fs'
+
 /** Cordis plugin name used by loader diagnostics. */
 export const name = 'custom-bash'
 
@@ -50,11 +69,167 @@ const commandSchema = {
   additionalProperties: false,
 }
 
+function addCandidate(candidates, seen, candidate) {
+  if (typeof candidate !== 'string' || candidate.length === 0) return
+  const key = candidate.toLowerCase()
+  if (seen.has(key)) return
+  seen.add(key)
+  candidates.push(candidate)
+}
+
+/** The explicit override, if any: `config.bashPath`, else the environment variable. */
+function explicitBashPath(config, environment) {
+  for (const value of [config.bashPath, environment.DSH_TUI_LIANGSHEN_BASH_PATH]) {
+    if (typeof value === 'string' && value.length > 0) return value
+  }
+  return undefined
+}
+
+/** Return conventional Git Bash locations in deterministic order (explicit config first). */
+export function windowsBashCandidates(config = {}, environment = process.env) {
+  const explicit = explicitBashPath(config, environment)
+  if (explicit !== undefined) return [explicit]
+
+  const candidates = []
+  const seen = new Set()
+  for (const root of [
+    environment.ProgramFiles,
+    environment['ProgramFiles(x86)'],
+  ]) {
+    if (typeof root !== 'string' || root.length === 0) continue
+    addCandidate(candidates, seen, `${root}\\Git\\bin\\bash.exe`)
+    addCandidate(candidates, seen, `${root}\\Git\\usr\\bin\\bash.exe`)
+  }
+  if (typeof environment.LOCALAPPDATA === 'string' && environment.LOCALAPPDATA.length > 0) {
+    addCandidate(candidates, seen, `${environment.LOCALAPPDATA}\\Programs\\Git\\bin\\bash.exe`)
+    addCandidate(candidates, seen, `${environment.LOCALAPPDATA}\\Programs\\Git\\usr\\bin\\bash.exe`)
+  }
+  // Scoop keeps Git under its own root; SCOOP is exported by some setups, but
+  // the per-user default location works without it.
+  const scoopRoots = []
+  if (typeof environment.SCOOP === 'string' && environment.SCOOP.length > 0) {
+    scoopRoots.push(environment.SCOOP)
+  }
+  if (typeof environment.USERPROFILE === 'string' && environment.USERPROFILE.length > 0) {
+    scoopRoots.push(`${environment.USERPROFILE}\\scoop`)
+  }
+  for (const root of scoopRoots) {
+    addCandidate(candidates, seen, `${root}\\apps\\git\\current\\bin\\bash.exe`)
+    addCandidate(candidates, seen, `${root}\\apps\\git\\current\\usr\\bin\\bash.exe`)
+  }
+  addCandidate(candidates, seen, 'bash')
+  return candidates
+}
+
+/** Windows' System32 bash.exe is a WSL launcher, not the Git Bash executor. */
+export function isWindowsSubsystemLauncher(path) {
+  return /[\\/]windows[\\/](?:system32|sysnative)[\\/]bash\.exe$/i.test(path)
+}
+
+/**
+ * Scoop-style shim launchers keep the real target in a sibling `.shim` text
+ * file (`path = "..."`); follow it so a PATH-resolved git.exe still yields
+ * its installation tree.
+ */
+export function resolveShimTarget(exePath, reader = readFileSync) {
+  for (const sidecar of [exePath.replace(/\.exe$/i, '') + '.shim', `${exePath}.shim`]) {
+    try {
+      const text = reader(sidecar, 'utf8')
+      const match = text.match(/^\s*path\s*=\s*"?(.+?)"?\s*$/mi)
+      if (match !== null) return match[1]
+    } catch { /* not a shim launcher */ }
+  }
+  return exePath
+}
+
+/** Bash candidates derived from a git.exe inside a Git for Windows tree. */
+export function bashCandidatesFromGit(gitPath) {
+  if (typeof gitPath !== 'string' || gitPath.length === 0) return []
+  const parts = gitPath.replace(/\//g, '\\').split('\\').filter(part => part.length > 0)
+  if (parts.at(-1)?.toLowerCase() !== 'git.exe') return []
+  const roots = []
+  const push = root => {
+    if (root.length > 0 && !roots.includes(root)) roots.push(root)
+  }
+  // <root>\cmd\git.exe and <root>\bin\git.exe -> <root>
+  if (parts.length >= 3) push(parts.slice(0, -2).join('\\'))
+  // <root>\mingw64\bin\git.exe -> <root>; a plain <root>\cmd layout must not
+  // also strip its real root.
+  if (parts.length >= 5
+    && parts.at(-2)?.toLowerCase() === 'bin'
+    && /^mingw(32|64)$/.test(parts.at(-3) ?? '')) {
+    push(parts.slice(0, -3).join('\\'))
+  }
+  const candidates = []
+  for (const root of roots) {
+    candidates.push(`${root}\\bin\\bash.exe`, `${root}\\usr\\bin\\bash.exe`)
+  }
+  return candidates
+}
+
+/**
+ * Follow the PATH-visible git executable to its installation tree: every
+ * Windows Git install ships git-bash next to git, wherever it was installed,
+ * so this covers installer, portable, and Scoop layouts without hardcoding.
+ */
+async function gitTreeCandidates(subprocess, failures) {
+  let gitPath
+  try {
+    gitPath = await subprocess.resolveExecutable('git')
+  } catch (error) {
+    failures.push(`git: ${error instanceof Error ? error.message : String(error)}`)
+    return []
+  }
+  return bashCandidatesFromGit(resolveShimTarget(gitPath))
+}
+
+/** Resolve Git Bash without accidentally accepting the WSL compatibility shim. */
+export async function resolveWindowsBash(subprocess, config = {}, environment = process.env) {
+  const failures = []
+  const explicit = explicitBashPath(config, environment)
+  const candidates = explicit !== undefined
+    // An explicit path is honored as-is: never silently substitute a guess.
+    ? [explicit]
+    : [...await gitTreeCandidates(subprocess, failures), ...windowsBashCandidates(config, environment)]
+  for (const candidate of candidates) {
+    try {
+      const resolved = await subprocess.resolveExecutable(candidate)
+      if (isWindowsSubsystemLauncher(resolved)) {
+        failures.push(`${candidate}: resolved to the Windows Subsystem for Linux launcher`)
+        continue
+      }
+      return resolved
+    } catch (error) {
+      failures.push(`${candidate}: ${error instanceof Error ? error.message : String(error)}`)
+    }
+  }
+  throw new Error(`Git Bash executable unavailable (${failures.join('; ')})`)
+}
+
+function warn(ctx, message) {
+  try {
+    ctx.logger.warn(message)
+  } catch {
+    // Logger unavailable — registration is skipped either way.
+  }
+}
+
 /** Register the model-facing `bash` tool. */
-export function apply(ctx, config) {
-  const bashPath = typeof config?.bashPath === 'string' && config.bashPath.length > 0 ? config.bashPath : 'bash'
-  const timeoutMs = Number.isSafeInteger(config?.timeoutMs) && config.timeoutMs > 0 ? config.timeoutMs : DEFAULT_TIMEOUT_MS
-  const maxOutputBytes = Number.isSafeInteger(config?.maxOutputBytes) && config.maxOutputBytes > 0 ? config.maxOutputBytes : DEFAULT_MAX_OUTPUT_BYTES
+export async function apply(ctx, config) {
+  const source = config === undefined ? {} : config
+  const timeoutMs = Number.isSafeInteger(source.timeoutMs) && source.timeoutMs > 0 ? source.timeoutMs : DEFAULT_TIMEOUT_MS
+  const maxOutputBytes = Number.isSafeInteger(source.maxOutputBytes) && source.maxOutputBytes > 0 ? source.maxOutputBytes : DEFAULT_MAX_OUTPUT_BYTES
+
+  let bashPath
+  try {
+    bashPath = await resolveWindowsBash(ctx.subprocess, source)
+  } catch (error) {
+    // Skip registration on a miss: an absent `bash` in the assembled catalog
+    // makes tool-bootstrap fail open to the full catalog, while a registered
+    // tool that cannot spawn would fail on every call mid-session.
+    warn(ctx, `custom-bash: ${error instanceof Error ? error.message : String(error)} — the Windows bootstrap bash tool is not registered; the bootstrap filter will expose the full catalog`)
+    return
+  }
 
   ctx.tools.register({
     name: 'bash',
@@ -69,6 +244,7 @@ export function apply(ctx, config) {
       '* NOTE: runs without OS sandbox confinement on Windows (no landlock); treat output as untrusted.',
     ].join('\n'),
     parameters: commandSchema,
+    timeoutMs,
     output: {
       schema: {
         type: 'object',
@@ -81,13 +257,12 @@ export function apply(ctx, config) {
       render: (_args, value) => [{ type: 'text', text: value.text }],
     },
     async execute(args, exec) {
-      const shell = await ctx.subprocess.resolveExecutable(bashPath, undefined, exec?.signal)
       const workdir = typeof args.workdir === 'string' && args.workdir.length > 0
         ? args.workdir
         : exec?.agent?.session?.header?.cwd
       const signal = exec?.signal
       const handle = ctx.subprocess.spawn({
-        argv: [shell, '-c', args.command],
+        argv: [bashPath, '-c', args.command],
         ...workdir !== undefined ? { cwd: workdir } : {},
         stdio: {
           stdin: 'ignore',

package/vendor/dsh-std/packages/command/node_modules/@dsh-std/connection/CHANGELOG.md

@@ -1,8 +1,8 @@
-# Changelog
-
-Changes to `@dsh-std/connection` are recorded here.
-
-## 0.1.0 (draft)
-
-- Defined connection services, endpoint views, participant publication, capability bindings, and attachments.
-- Added an in-memory transport for protocol conformance and host integration tests.
+# Changelog
+
+Changes to `@dsh-std/connection` are recorded here.
+
+## 0.1.0 (draft)
+
+- Defined connection services, endpoint views, participant publication, capability bindings, and attachments.
+- Added an in-memory transport for protocol conformance and host integration tests.

package/vendor/dsh-std/packages/command/node_modules/@dsh-std/connection/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 DSH Standard contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 DSH Standard contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/vendor/dsh-std/packages/command/node_modules/@dsh-std/connection/README.md

@@ -1,42 +1,42 @@
-# @dsh-std/connection
-
-English | [中文](README.zh.md)
-
-The proposed design is documented in [Endpoint Connection](../../docs/proposals/endpoint-connection.zh.md). It separates the application-facing `ConnectionService` from the Connection Host provider SPI. The remainder of this page describes the current reference implementation, which does not yet complete that split.
-
-Host-provided communication service, two-endpoint capability negotiation, and implementation-neutral invocation for the DSH Standard.
-
-## Endpoint offers
-
-An endpoint offer contains an endpoint identity, a revision, and the live participant declarations admitted by endpoint policy. It carries no component manifests, installation inventory, or plugin registry.
-
-`resolveConnection()` passes both sets of declarations to a caller-owned `ProtocolCatalog`. Each protocol definition owns its negotiation and may place invocation bindings in its agreement; connection does not impose consumer/provider semantics on every protocol. `defineCapabilityProtocol()` is an explicit helper for domain protocols that do use RPC-shaped bindings.
-
-Each invocation binding is participant-scoped and plan-revision-scoped. A client for one participant cannot discover or invoke bindings granted to another participant.
-
-## Current reference API
-
-`StandardConnection` exposes endpoint identities, the active plan, consumer-scoped clients, plan-change observation, and close. `CapabilityClient.invoke()` returns an invocation id, a result promise, an asynchronous progress stream, and cancellation. Domain protocol packages own operation names and input, output, and progress values.
-
-`ConnectionBroker` selects one registered `ConnectionConnector` for an implementation-neutral target URI. Zero matches and multiple matches are both explicit errors. The broker does not expose the selected connector type through `StandardConnection`.
-
-These types are an early reference implementation. They do not require a TUI, Web UI, GUI, or business plugin to register and operate its own connector. The protocol direction places the broker, connector/provider registry, carrier, and wire behind a Connection Host's `ConnectionService`. A consumer submits a target and uses scoped typed clients for the negotiated protocols.
-
-A Connection Host may install or discover a remote service, own authentication, ports, forwarding and reconnection, and produce the `StandardConnection`. An SSH target facet contributes resolution and bootstrap integration while system OpenSSH or another provider may supply the physical SSH implementation. Applications do not observe the selected provider, ports, credentials, or wire.
-
-## Lifecycle
-
-Renegotiation creates a complete new plan revision and publishes it atomically. An invocation admitted under the old revision retains its binding until settlement; later invocations use the new revision. Closing a connection cancels active work and rejects new work with `connection-closed`.
-
-Transport implementations must preserve invocation isolation, progress order, cancellation, and the error classification exposed by `ConnectionInvocationError`. They are also responsible for authenticating the peer and preventing one connection from reusing another connection's grants.
-
-## Reference implementation
-
-The `@dsh-std/connection/memory` export provides a process-local implementation for tests, adapters, and conformance experiments. It demonstrates symmetric calls, progress, cancellation, isolation, and renegotiation. It is not a required carrier or a wire-format specification.
-
-## Known Limitations and Deferred Work
-
-- The consumer-facing `ConnectionService` and Host provider SPI are not implemented in the current code yet.
-- The package does not yet standardize discovery, authentication, encryption, reconnect policy, framing, or serialization.
-- A connection has exactly two endpoints in `v1alpha1`; multi-party routing is composed from separate connections.
-- The capability helper requires one peer provider by default. Protocols that allow multiple providers must opt into and define that behavior explicitly.
+# @dsh-std/connection
+
+English | [中文](README.zh.md)
+
+The proposed design is documented in [Endpoint Connection](../../docs/proposals/endpoint-connection.zh.md). It separates the application-facing `ConnectionService` from the Connection Host provider SPI. The remainder of this page describes the current reference implementation, which does not yet complete that split.
+
+Host-provided communication service, two-endpoint capability negotiation, and implementation-neutral invocation for the DSH Standard.
+
+## Endpoint offers
+
+An endpoint offer contains an endpoint identity, a revision, and the live participant declarations admitted by endpoint policy. It carries no component manifests, installation inventory, or plugin registry.
+
+`resolveConnection()` passes both sets of declarations to a caller-owned `ProtocolCatalog`. Each protocol definition owns its negotiation and may place invocation bindings in its agreement; connection does not impose consumer/provider semantics on every protocol. `defineCapabilityProtocol()` is an explicit helper for domain protocols that do use RPC-shaped bindings.
+
+Each invocation binding is participant-scoped and plan-revision-scoped. A client for one participant cannot discover or invoke bindings granted to another participant.
+
+## Current reference API
+
+`StandardConnection` exposes endpoint identities, the active plan, consumer-scoped clients, plan-change observation, and close. `CapabilityClient.invoke()` returns an invocation id, a result promise, an asynchronous progress stream, and cancellation. Domain protocol packages own operation names and input, output, and progress values.
+
+`ConnectionBroker` selects one registered `ConnectionConnector` for an implementation-neutral target URI. Zero matches and multiple matches are both explicit errors. The broker does not expose the selected connector type through `StandardConnection`.
+
+These types are an early reference implementation. They do not require a TUI, Web UI, GUI, or business plugin to register and operate its own connector. The protocol direction places the broker, connector/provider registry, carrier, and wire behind a Connection Host's `ConnectionService`. A consumer submits a target and uses scoped typed clients for the negotiated protocols.
+
+A Connection Host may install or discover a remote service, own authentication, ports, forwarding and reconnection, and produce the `StandardConnection`. An SSH target facet contributes resolution and bootstrap integration while system OpenSSH or another provider may supply the physical SSH implementation. Applications do not observe the selected provider, ports, credentials, or wire.
+
+## Lifecycle
+
+Renegotiation creates a complete new plan revision and publishes it atomically. An invocation admitted under the old revision retains its binding until settlement; later invocations use the new revision. Closing a connection cancels active work and rejects new work with `connection-closed`.
+
+Transport implementations must preserve invocation isolation, progress order, cancellation, and the error classification exposed by `ConnectionInvocationError`. They are also responsible for authenticating the peer and preventing one connection from reusing another connection's grants.
+
+## Reference implementation
+
+The `@dsh-std/connection/memory` export provides a process-local implementation for tests, adapters, and conformance experiments. It demonstrates symmetric calls, progress, cancellation, isolation, and renegotiation. It is not a required carrier or a wire-format specification.
+
+## Known Limitations and Deferred Work
+
+- The consumer-facing `ConnectionService` and Host provider SPI are not implemented in the current code yet.
+- The package does not yet standardize discovery, authentication, encryption, reconnect policy, framing, or serialization.
+- A connection has exactly two endpoints in `v1alpha1`; multi-party routing is composed from separate connections.
+- The capability helper requires one peer provider by default. Protocols that allow multiple providers must opt into and define that behavior explicitly.