@dsh-electron/dsh-plugin-multi-root-workspace 0.1.11 → 0.1.13

package/lib/types/registry.d.ts

@@ -22,8 +22,8 @@
  *   only when the operator removes it (or when the store is repaired). Storage
  *   that cannot be parsed at all is backed up and skipped by the domain layer,
  *   with a warning.
- * - **Mutations are serialized per primary root.** Every mutation runs its
- *   whole read → validate → persist sequence inside one queue per key. The
+ * - **Mutations and fs admissions are serialized store-wide.** Every mutation
+ *   runs its whole read → validate → persist sequence inside the store queue. The
  *   storage domain serializes individual `put()`/`delete()` calls, which is not
  *   enough: two concurrent `add()` calls would both read the same snapshot and
  *   the later write would drop the earlier one, and a removal racing an add
@@ -45,7 +45,10 @@
  */
 import { Context, Service } from '@deepseek-ai/cordis';
 import type { SandboxExecutionPolicy } from '@deepseek-ai/dsh-sandbox';
+import type { RegistryOperation, RegistryOperationKind } from './registry-operation.ts';
 import { type AdditionalRootId, type RegisteredRoot, type RootAccess, type RootRef, type RootStatus } from './roots.ts';
+/** Operator/test capability diagnostics; never bypasses peer authentication. */
+export { nativeHostAvailability } from './authority/native.ts';
 /** The domain name; also the store file stem (`$DSH_HOME/storages/<name>.json`). */
 export declare const DOMAIN_NAME = "multi_root_workspace";
 /** The single table name inside the domain. */
@@ -67,6 +70,28 @@ export declare const REGISTRY_CONTENDED_MESSAGE = "the root registry is owned by
 export declare const DEFAULT_MAX_ADDITIONAL_ROOTS = 16;
 /** Hard ceiling for `maxAdditionalRoots`: values above it are config-invalid. */
 export declare const MAX_ADDITIONAL_ROOTS_CEILING = 64;
+/**
+ * The recovery class of a `storage-failed` authority: `retryable` failures
+ * (open/listen/acquire) may be re-attempted by `ensureAuthority`, while
+ * `config` (a row the operator must fix) and `quarantine` (an unknown durable
+ * outcome, isolated until restart) make the state terminal.
+ */
+export type StorageFailureRecovery = 'retryable' | 'config' | 'quarantine';
+/** The recovery class a degraded authority belongs to (see {@link StorageFailureRecovery}). */
+export type RecoveryClass = 'retryable' | 'config' | 'quarantine';
+/** Operator-facing read-only picture of the registry authority and its recovery. */
+export interface RegistryDiagnostics {
+    readonly authorityState: RegistryAuthorityState;
+    readonly epoch: string | undefined;
+    readonly connectionFailure: string | undefined;
+    readonly recoveryClass: RecoveryClass | undefined;
+    readonly recovery: {
+        readonly phase: 'idle' | 'waiting' | 'attempting' | 'disabled' | 'requires-restart';
+        readonly attempts: number;
+        readonly nextRetryAt: number | undefined;
+        readonly pendingSync: number;
+    };
+}
 /**
  * Whether this process is the Registry Authority for the store-wide domain
  * medium. Contended and storage-failed are both fail-closed: the scope stays
@@ -76,9 +101,13 @@ export type RegistryAuthorityState = {
     readonly kind: 'active';
 } | {
     readonly kind: 'contended';
+} | {
+    readonly kind: 'follower';
+    readonly epoch: string;
 } | {
     readonly kind: 'storage-failed';
     readonly reason: string;
+    readonly recovery: StorageFailureRecovery;
 } | {
     readonly kind: 'config-invalid';
     readonly reason: string;
@@ -92,6 +121,8 @@ export type RegistryAuthorityState = {
 export interface Config {
     /** Absolute path of the store-wide kernel lock file. */
     readonly leasePath?: string;
+    /** Explicit medium binding for the multi-Host authority service. */
+    readonly sharedStorageRoot?: string;
     /**
      * Cap on STORED additional-root records per primary root (every state
      * counts, including withheld and unusable ones, so the count is stable and
@@ -102,6 +133,12 @@ export interface Config {
      * exactly what classification grants — only new adds are refused.
      */
     readonly maxAdditionalRoots?: number;
+    /**
+     * Whether the registry retries a degraded authority in the background
+     * (bounded backoff, `unref`ed). Defaults to `true`; `false` leaves
+     * recovery to on-demand calls (refresh, the panel Retry button).
+     */
+    readonly backgroundRecovery?: boolean;
 }
 declare module '@deepseek-ai/cordis' {
     interface Context {
@@ -191,20 +228,46 @@ export declare class MultiRootRegistry extends Service {
     static inject: string[];
     /** Absolute lock path; absent means the row was composed without `leasePath`. */
     private readonly leasePath;
+    private readonly sharedStorageRoot;
+    private readonly authorityStorageContext;
+    private medium;
+    private server;
+    private client;
+    private connectionFailure;
+    private connectionGeneration;
+    /** Local cancel of the in-flight handshake; teardown must not wait out hello. */
+    private connectionAbort;
+    private remoteProjectionReady;
+    private readonly remoteRevisions;
+    /**
+     * Primary roots whose projection must still be synced after a follower
+     * reconnect — populated from the tracked cache keys at adoption, removed as
+     * each `applySnapshot` lands. Recovery completes only when it empties.
+     */
+    private pendingSync;
+    /** Bounded background retry for degraded authority states (ADR-0026 R1). */
+    private readonly recovery;
+    private readonly operationProof;
     /** Whether this process currently owns the store. */
     private authorityState;
     /** Held kernel lease; present once acquire succeeded, including after a failed open. */
     private lease;
     /** Open domain handle; present only while {@link authority} is `active`. */
     private domain;
+    /** The last failed `openDomain` reason; a repeat failure is not re-logged. */
+    private lastOpenFailure;
     /** The open table; present once this process is the authority. */
     private table;
     /** Last classified status list per canonical primary root. */
     private readonly cache;
     /** Signature of the last published grant per key, so a no-op refresh stays a no-op. */
     private readonly published;
-    /** One promise chain per canonical primary root: mutations never interleave. */
+    /** Pending store-ordered work, grouped by primary for teardown accounting. */
     private readonly chains;
+    /** Admissions and mutations share one order, including across primary roots. */
+    private operationChain;
+    private operationEpoch;
+    private operationRevision;
     /** Store-wide queue for lease acquire / open / release. */
     private authorityChain;
     /** Change listeners, keyed by their own disposer identity. */
@@ -245,7 +308,27 @@ export declare class MultiRootRegistry extends Service {
      * Whether this process is the Registry Authority for the store-wide medium.
      * Tests and diagnostics read this; surfaces use {@link unavailable}.
      */
+    get epoch(): string | undefined;
+    get shared(): boolean;
+    get available(): boolean;
     get authority(): RegistryAuthorityState;
+    /** The class a degraded authority belongs to; `undefined` when healthy. */
+    private get recoveryClass();
+    /**
+     * Read-only diagnostics for operators: the authority state, the epoch, the
+     * last connection failure, and what the recovery scheduler is doing.
+     * `requires-restart` marks classes no timer will ever fix — a `config`
+     * row or a `quarantine`d store must NOT read as "retrying". Purely a read;
+     * it never arms or runs anything.
+     */
+    get diagnostics(): RegistryDiagnostics;
+    /** The last logged `(kind, recoveryClass)` pair; dedupes transition logs. */
+    private loggedRecovery;
+    /**
+     * Log one line per authority/recovery-class TRANSITION — never per tick:
+     * waiting↔attempting moves say nothing an operator did not already know.
+     */
+    private noteRecoveryTransition;
     /**
      * The configured cap on stored additional-root records per primary root.
      * Surfaces show it next to the count so "N of LIMIT" is always explainable.
@@ -289,6 +372,13 @@ export declare class MultiRootRegistry extends Service {
      * @returns the refreshed status list.
      */
     refresh(primaryRoot: string): Promise<readonly RootStatus[]>;
+    /**
+     * Admit one fs invocation in the same order as mutations, then run its I/O
+     * OUTSIDE the queue. Revocation does not wait for already-admitted work.
+     * Shared followers obtain the same ordered snapshot through attested IPC.
+     */
+    withOperation<T>(policy: SandboxExecutionPolicy, kind: RegistryOperationKind, body: (operation: RegistryOperation) => T | Promise<T>): Promise<T>;
+    withPrimaryOperation<T>(policy: SandboxExecutionPolicy, body: () => T): T;
     /**
      * Registers one additional root.
      * @param primaryRoot - the session workspace root the root belongs to.
@@ -391,6 +481,12 @@ export declare class MultiRootRegistry extends Service {
     grantedFor(policy: SandboxExecutionPolicy): readonly string[];
     /** Classify one stored record set and cache it. */
     private accept;
+    /**
+     * The pure half of {@link accept}: classification plus the over-limit
+     * warning, without writing the cache or the scope. {@link openDomain}
+     * staging uses it so a half-opened domain cannot materialize rows.
+     */
+    private classify;
     /**
      * The statuses of one key, from memory where possible: the cache, else what
      * storage holds, else empty. A cached answer is never re-checked here — that
@@ -419,8 +515,8 @@ export declare class MultiRootRegistry extends Service {
      */
     private persist;
     /**
-     * Run one job for one primary root after every job already queued for that
-     * root. The whole read → validate → write sequence belongs inside the job:
+     * Run one job after every store job already queued. The whole
+     * read → validate → write sequence belongs inside the job:
      * the storage domain serializes individual writes, so without this the loser
      * of a race reads a snapshot that is already stale and writes it back.
      */
@@ -446,6 +542,49 @@ export declare class MultiRootRegistry extends Service {
      */
     private readonly metadataPublished;
     private publish;
+    private projectRoots;
+    private snapshotOf;
+    private captureSnapshot;
+    private notifyShared;
+    /** Depth of {@link commit}; nested calls share the outer round's buffers. */
+    private commitDepth;
+    /** Keys whose publish inside a commit produced deferred notifications, first-seen order. */
+    private readonly commitNotifications;
+    /**
+     * Run `body` as one Registry commit: scope writes inside it go through
+     * `multiRootScope.batch`, and the `notifyShared` broadcasts plus Registry
+     * listener calls `publish()` produces are collected per key instead of
+     * delivered. When the OUTERMOST commit ends — also when `body` throws — the
+     * scope batch flushes first, then the broadcasts go out in first-seen key
+     * order, then the listeners: no synchronous callback can observe a
+     * half-committed state.
+     */
+    private commit;
+    /** Deliver one key's notifications now, or collect them inside a commit. */
+    private deliverNotifications;
+    private applySnapshot;
+    private remoteUnavailable;
+    /**
+     * Resynchronize each still-pending tracked primary outside the authority
+     * queue: per-key snapshots through the live client. A failed key stays in
+     * `pendingSync` for the next tick; a lost connection abandons the round —
+     * `remoteUnavailable` already emptied the set.
+     */
+    private syncProjection;
+    /**
+     * Write one key's withheld-only projection into the scope, keeping
+     * `published` truthful: the signature records what the scope HOLDS, never
+     * what `publish()` last computed — a withheld signature can never equal a
+     * publish signature, so an empty snapshot afterwards really writes the
+     * retraction. A repeated write of the same withheld projection is a no-op
+     * (the same-signature skip is also the republish gate of a repeated
+     * downgrade). `metadataPublished` is untouched: a withheld write announces
+     * nothing to the Registry view.
+     */
+    private withholdScope;
+    private remoteSnapshot;
+    private remote;
+    private dispatchShared;
     /**
      * The open table.
      * @returns the live table.
@@ -494,7 +633,7 @@ export declare class MultiRootRegistry extends Service {
      */
     private releaseAuthority;
     /**
-     * Wait until no per-primary-root mutation is queued or running.
+     * Wait until no store work is queued or running (operation I/O is outside).
      *
      * One pass is enough, and only because the authority state has already been
      * flipped: no further mutation can be admitted (it would fail in

package/lib/types/scope.d.ts

@@ -208,6 +208,11 @@ export declare class MultiRootScopeService extends Service {
     /** Additional roots keyed by canonical primary root; empty until roots are registered. */
     private readonly rootsByPrimary;
     private readonly listeners;
+    /** Enclosing {@link MultiRootScopeService.batch} depth; inner calls nest. */
+    private batchDepth;
+    /** True when a batched write coalesced its notification into the flush. */
+    private batchDirty;
+    private admissionProof;
     /**
      * The registry-authority fact the registry row publishes. Defaults to
      * `available`: a composition without a registry row can never have
@@ -230,6 +235,20 @@ export declare class MultiRootScopeService extends Service {
     private readonly dshHome;
     /** Observe registry publications; consumers still resolve authority from scopeOf(). */
     subscribe(listener: () => void): () => void;
+    /**
+     * Run `body` as one notification round: `setAdditionalRoots()` and
+     * `setRegistryAuthority()` apply their state immediately (a same-value
+     * authority write still stays silent), but subscriber invocations coalesce
+     * into a single flush when the OUTERMOST batch ends — also when `body`
+     * throws, because the state already landed. A write a subscriber makes
+     * during the flush is not part of the batch and notifies synchronously
+     * under the normal rules.
+     * @param body - the writes to run as one round.
+     * @returns the body's return value.
+     */
+    batch<T>(body: () => T): T;
+    /** Notify subscribers now, or coalesce into the enclosing batch's flush. */
+    private notifySubscribers;
     /**
      * The sorted names of the tools `toolAccess` caps — read-only for the
      * prompt contribution. An invalid config is not enumerated (it caps every
@@ -244,6 +263,15 @@ export declare class MultiRootScopeService extends Service {
      * @param policy - the upstream policy whose workspace root is the primary root.
      * @returns the canonical scope; `additionalRoots` is empty when none are registered.
      */
+    requireAdmission(proof: object): void;
+    rememberProfile(argv: readonly string[]): void;
+    permitsProfile(argv: readonly string[]): boolean;
+    get admissionRequired(): boolean;
+    admissionPathsValid(): boolean;
+    hasAdmission(): boolean;
+    /** Trusted display/review projection, never an execution permit. */
+    snapshot(policy: SandboxExecutionPolicy): FilesystemScope;
+    resolveSnapshot(policy: SandboxExecutionPolicy, roots: readonly AdditionalWorkspaceRoot[], available: boolean): FilesystemScope;
     resolve(policy: SandboxExecutionPolicy): FilesystemScope;
     /** Read-only pending-dispatch projection. Does not mint an ALS execution grant. */
     previewForTool(policy: SandboxExecutionPolicy, toolName: string): FilesystemScope;

package/lib/types/skills/catalog.d.ts

@@ -7,6 +7,7 @@ export declare const SKILLS_PROVIDER = "multi-root-workspace";
 export declare function internalSkillName(primary: string, rootId: string, skillName: string): string;
 export interface LocatedSkill {
     readonly primary: string;
+    readonly authorityEpoch?: string | undefined;
     readonly rootId: string;
     readonly aliasId: string;
     readonly candidate: SkillCandidate;
@@ -27,8 +28,10 @@ export declare class AdditionalSkillCatalog {
     current(primary: string, id: string): RootStatus | undefined;
     private withReader;
     list(primary: string, options: SkillLookupOptions): Promise<SkillCandidate[]>;
+    private listAdmitted;
     /** Locators are created here and are not accepted from a client path or object. */
     load(primary: string, entry: SkillCandidate, options: SkillLookupOptions, user: boolean): Promise<SkillDefinition | undefined>;
+    private loadAdmitted;
     admissionValid(definition: SkillDefinition): Promise<boolean>;
     dispose(): Promise<void>;
 }

package/lib/types/skills/pool.d.ts

@@ -10,7 +10,7 @@ export declare class SkillReaderPool {
     constructor(invalidate: () => void, capacity?: number, intervalMs?: number);
     get size(): number;
     get roots(): readonly string[];
-    use<T>(key: string, create: (signal: AbortSignal) => Promise<Reader | undefined>, run: (reader: Reader | undefined) => Promise<T>, signal?: AbortSignal): Promise<T>;
+    use<T>(root: string, create: (signal: AbortSignal) => Promise<Reader | undefined>, run: (reader: Reader | undefined) => Promise<T>, signal?: AbortSignal, identity?: string): Promise<T>;
     poll(): Promise<void>;
     dispose(): Promise<void>;
     private closeEntry;

package/lib/workspace-files.js

@@ -1,4 +1,5 @@
 import { t as wrapMethod } from "./method-wrapper-CFY3p3j2.js";
+import { c as withRegistryRead } from "./registry-operation-C2ZV3Jhw.js";
 import { l as isCanonicallyUnder } from "./roots-Ca_W1S9n.js";
 import { t as routeWorkspacePath } from "./workspace-routing-YPxaQ4V3.js";
 import { posix, resolve, win32 } from "node:path";
@@ -78,19 +79,35 @@ function apply(ctx) {
 				return original.call(this, routed.request, routed.path, relativePath, signal);
 			})) : void 0;
 			const restoreWatch = adaptPathWatch(service, (originalChanges) => async function* (request, path, signal) {
-				if (scope.multiRootScope.scopeOf(request.workspaceRoot).length === 0 && registeredRoots(scope, request.workspaceRoot).length === 0) {
-					yield* originalChanges.call(this, request, path, signal);
+				const check = async () => {
+					if (await withRegistryRead(scope, request.workspaceRoot, "files", () => routeRead(scope, request, path, signal)) === "deny") throw await outside(path);
+				};
+				if (scope.get("multiRootRegistry")?.shared) await check();
+				if (scope.multiRootScope.snapshot({
+					workspaceRoot: request.workspaceRoot,
+					mode: "read-only"
+				}).additionalRoots.length === 0 && registeredRoots(scope, request.workspaceRoot).length === 0) {
+					for await (const frame of originalChanges.call(this, request, path, signal)) {
+						if (scope.get("multiRootRegistry")?.shared) await check();
+						yield frame;
+					}
 					return;
 				}
-				const route = await routeWorkspacePath(scope, request.workspaceRoot, path, signal);
+				const route = await withRegistryRead(scope, request.workspaceRoot, "files", () => routeWorkspacePath(scope, request.workspaceRoot, path, signal));
 				if (route === void 0 || route.workspaceRoot === route.primaryRoot) {
 					if (underWithheldRoot(scope, request.workspaceRoot, path)) throw await outside(path);
-					yield* originalChanges.call(this, request, path, signal);
+					for await (const frame of originalChanges.call(this, request, path, signal)) {
+						if (scope.get("multiRootRegistry")?.shared) await check();
+						yield frame;
+					}
 					return;
 				}
 				const lifetime = new AbortController();
 				const unsubscribe = scope.multiRootScope.subscribe(() => {
-					if (!scope.multiRootScope.scopeOf(route.primaryRoot).includes(route.workspaceRoot)) lifetime.abort(/* @__PURE__ */ new Error("the additional root was revoked"));
+					if (!scope.multiRootScope.snapshot({
+						workspaceRoot: route.primaryRoot,
+						mode: "read-only"
+					}).additionalRoots.includes(route.workspaceRoot)) lifetime.abort(/* @__PURE__ */ new Error("the additional root was revoked"));
 				});
 				try {
 					for await (const frame of originalChanges.call(this, {
@@ -101,14 +118,35 @@ function apply(ctx) {
 						lifetime.signal,
 						rowLifetime.signal
 					]))) {
-						if (!scope.multiRootScope.scopeOf(route.primaryRoot).includes(route.workspaceRoot)) throw await outside(path);
+						await withRegistryRead(scope, route.primaryRoot, "files", async () => {
+							if (!scope.multiRootScope.scopeOf(route.primaryRoot).includes(route.workspaceRoot)) throw await outside(path);
+						});
 						yield frame;
 					}
 				} finally {
 					unsubscribe();
 				}
 			});
+			const admissionRestores = [];
+			{
+				const methods = service;
+				for (const key of [
+					"list",
+					"stat",
+					"read",
+					"readBytes",
+					"readAll",
+					"readRelated"
+				]) {
+					if (typeof methods[key] !== "function") continue;
+					admissionRestores.push(wrapMethod(methods, key, (original) => async function(...args) {
+						const request = args[0];
+						return withRegistryRead(scope, request.workspaceRoot, "files", () => original.apply(this, args));
+					}));
+				}
+			}
 			return () => {
+				for (const restore of admissionRestores.reverse()) restore();
 				rowLifetime.abort(/* @__PURE__ */ new Error("multi-root workspace-files routing unloaded"));
 				restoreList();
 				restoreStat();
@@ -134,6 +172,16 @@ function apply(ctx) {
 * root, genuinely unrelated paths) keeps upstream's default read access.
 */
 async function routeRead(scope, request, path, signal) {
+	if (scope.get("multiRootRegistry")?.shared && scope.multiRootScope.resolve({
+		workspaceRoot: request.workspaceRoot,
+		mode: "read-only"
+	}).authority === "unavailable") {
+		const route = await routeWorkspacePath(scope, request.workspaceRoot, path, signal);
+		return route !== void 0 && route.workspaceRoot === route.primaryRoot ? {
+			request,
+			path: route.absolutePath
+		} : "deny";
+	}
 	if (scope.multiRootScope.scopeOf(request.workspaceRoot).length === 0 && registeredRoots(scope, request.workspaceRoot).length === 0) return {
 		request,
 		path
@@ -187,12 +235,20 @@ function underWithheldRoot(scope, primaryRoot, path) {
 * file, so the granted base must not reach back into a dead grant.
 */
 async function relatedTailWithheld(scope, primaryRoot, base, tail, signal) {
-	if (registeredRoots(scope, primaryRoot).length === 0) return void 0;
+	const unknown = scope.get("multiRootRegistry")?.shared && scope.multiRootScope.resolve({
+		workspaceRoot: primaryRoot,
+		mode: "read-only"
+	}).authority === "unavailable";
+	if (registeredRoots(scope, primaryRoot).length === 0 && !unknown) return void 0;
 	const targetBase = await scope.fs.resolve(base.path, {
 		cwd: base.request.workspaceRoot,
 		signal
 	});
 	const target = resolveRelatedWorkspacePath(scope.fs.processPath(targetBase), tail);
+	if (unknown && await routeRead(scope, {
+		...base.request,
+		workspaceRoot: primaryRoot
+	}, target, signal) === "deny") return target;
 	return underWithheldRoot(scope, primaryRoot, target) ? target : void 0;
 }
 async function outside(path) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dsh-electron/dsh-plugin-multi-root-workspace",
   "description": "Multi-root Workspace for DeepSeek Harness: adds N additional roots to the workspace sandbox scope as an out-of-tree bundle",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -106,33 +106,34 @@
   "license": "MIT",
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.1 <5.0.0 || 4.0.5-alpha.1 || 4.0.5-alpha.2 || 4.0.6-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-agent-instructions": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-api-workspace-files": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-commands": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-fs": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-fs-local": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-lsp": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-lsp-stdio": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-sandbox": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-sandbox-local": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-sandbox-windows-acl": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-session": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-storage-domain": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-subprocess": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-permission-presets": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-util-values": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-skill": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-skill-filesystem": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-settings": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-api-session-controller": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
-    "@deepseek-ai/dsh-session-query": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2"
+    "@deepseek-ai/dsh-agent": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-agent-instructions": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-api-workspace-files": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-commands": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-fs": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-fs-local": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-lsp": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-lsp-stdio": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-sandbox-windows-acl": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-storage-domain": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-permission-presets": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-util-values": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-skill": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-skill-filesystem": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-api-session-controller": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session-query": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-storage-json": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.1-rc.5 || 0.2.2-alpha.2"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-agent": {
@@ -197,6 +198,9 @@
     },
     "@deepseek-ai/dsh-session-query": {
       "optional": true
+    },
+    "@deepseek-ai/dsh-storage-json": {
+      "optional": true
     }
   },
   "devDependencies": {
@@ -243,6 +247,7 @@
     "@deepseek-ai/dsh-util-workspace-path": "0.2.2-alpha.2",
     "@deepseek-ai/dsh-workspace": "0.2.2-alpha.2",
     "@testing-library/react": "^16.3.3",
+    "@modelcontextprotocol/sdk": "^1.32.2",
     "@types/node": "^22.0.0",
     "@types/react": "~18.3.31",
     "@types/react-dom": "~18.3.7",
@@ -254,7 +259,7 @@
     "react-dom": "^18.3.1",
     "tsdown": "^0.22.0",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.8",
+    "vitest": "^4.1.12",
     "yaml": "^2.9.0",
     "zustand": "~4.5.7",
     "@deepseek-ai/dsh-skill": "0.2.2-alpha.2",
@@ -281,7 +286,7 @@
   "dependencies": {
     "@deepseek-ai/node-addon-system": "^0.1.2",
     "koffi": "^3.1.0",
-    "zod": "^4.6.2",
+    "zod": "^4.6.7",
     "@deepseek-ai/schemastery": "^3.18.2"
   },
   "scripts": {
@@ -305,6 +310,8 @@
     "typecheck": "tsc -p tsconfig.host.json --noEmit && tsc -p tsconfig.client.json --noEmit && node scripts/build-auto-review.mjs",
     "verify:all": "pnpm lint && pnpm typecheck && pnpm build && pnpm kernel:probe && pnpm test && pnpm smoke && pnpm pack:check && pnpm smoke:packed && pnpm auto-review:fork && pnpm smoke:auto-review",
     "auto-review:fork": "node scripts/check-auto-review-fork.mjs",
-    "smoke:auto-review": "node scripts/verify-auto-review.mjs"
+    "smoke:auto-review": "node scripts/verify-auto-review.mjs",
+    "registry:probe": "node scripts/check-registry-authority.mjs",
+    "soak:tui-registry": "node scripts/observe-tui-registry.mjs"
   }
 }