@dsh-electron/dsh-plugin-multi-root-workspace 0.1.4 → 0.1.6

package/lib/{sandbox-D8Fw95FM.js → windows-profile-CiFsFYIV.js}

@@ -1,27 +1,6 @@
-import { SandboxUnavailableError } from "@deepseek-ai/dsh-sandbox";
-import { LocalSandboxProvider } from "@deepseek-ai/dsh-sandbox-local";
-//#region src/compat/sandbox-confine.ts
-/** Whether a value is a thenable, i.e. whether the installed `confine` is async. */
-function isThenable(value) {
-	return typeof value?.then === "function";
-}
-/**
-* Call the upstream `confine` and widen its result, preserving sync/async shape.
-*
-* @param base - the upstream `confine`, already bound to its provider.
-* @param widen - the pure transformation to apply to the upstream result. It
-*   runs exactly once per call, on whichever release; it may throw, and the
-*   throw surfaces synchronously or as a rejection to match the base shape.
-* @param argv - the caller's argv, forwarded verbatim.
-* @param policy - the per-call policy, forwarded verbatim.
-* @param signal - forwarded when the installed release accepts it.
-* @returns the widened result, in the shape the installed release uses.
-*/
-function widenConfined(base, widen, argv, policy, signal) {
-	const confined = base(argv, policy, signal);
-	return isThenable(confined) ? confined.then(widen) : widen(confined);
-}
-//#endregion
+import { createHash } from "node:crypto";
+import { canonicalPath } from "@deepseek-ai/dsh-sandbox";
+import { fileURLToPath } from "node:url";
 //#region src/dialects.ts
 /**
 * Raised when a confined argv cannot be recognized or widened. The provider
@@ -100,7 +79,7 @@ function widenProfileArgs(dialect, profileArgs, policy, additionalRoots) {
 		case "seatbelt": return widenSeatbelt(profileArgs, additionalRoots);
 		case "bwrap": return widenBwrap(profileArgs, policy.workspaceRoot, additionalRoots);
 		case "landlock": return widenLandlock(profileArgs, policy.workspaceRoot, additionalRoots);
-		case "windows-acl": return [...profileArgs];
+		case "windows-acl": throw new DialectUnrecognizedError("Windows ACL widening requires widenWindowsProfile");
 	}
 }
 /** Quote one path exactly the way the upstream Seatbelt profile builder does. */
@@ -172,119 +151,66 @@ function widenLandlock(profileArgs, workspaceRoot, additionalRoots) {
 	return [...profileArgs, ...added];
 }
 //#endregion
-//#region src/sandbox.ts
-/**
-* `MultiRootSandboxProvider`: the kernel-sandbox dialect provider mounted as
-* `ctx.sandbox`.
-*
-* Every confined execution in this composition funnels through `confine()` —
-* the bash executor wraps `['bash','-c',command]`, and the terminal backend
-* wraps its PTY spawn argv — so widening the grant here is what gives bash, PTY,
-* and the fs fence one and the same root set (requirement §13). The bash
-* executor itself is therefore left upstream: it never computes roots.
-*
-* The widening itself lives in `./dialects.ts`: the upstream profile builders
-* are unreachable in the published package, so the additional roots are grafted
-* onto the profile `super.confine` actually produced (recognize the dialect
-* structurally, clone its grant spelling, fail loudly when the shape is not
-* known). This class owns only the policy that decides WHEN to graft:
-*
-* 1. with no additional roots, or under any mode other than `workspace-write`,
-*    the upstream result is returned ELEMENT FOR ELEMENT — same argv, same
-*    `enforcement`, same `denialSignatures`, same `runnerFailureRules`;
-* 2. `enforcement`, `denialSignatures`, and `runnerFailureRules` are NEVER
-*    recomputed here, even when the argv is widened — the bash executor derives
-*    its denial and enforcement reporting from them;
-* 3. only `argv` may differ, and a dialect whose shape cannot be extended fails
-*    loudly (`SandboxUnavailableError`) instead of silently confining to the
-*    primary root alone.
-*
-* @module @dsh-electron/dsh-plugin-multi-root-workspace/sandbox
-*/
-/**
-* Local process-sandbox provider over the multi-root scope. Registers as
-* `ctx.sandbox`; the runner chain, probing, denial dialects, and Windows ACL
-* grant mechanics stay the upstream implementation's.
-*/
-var MultiRootSandboxProvider = class extends LocalSandboxProvider {
-	static inject = [
-		"multiRootCompat",
-		"sandboxPolicy",
-		"multiRootScope"
-	];
-	/** Whether the Windows ACL limitation has already been reported (once per provider). */
-	warnedAboutWindowsAcl = false;
-	/**
-	* Wrap `argv` so it executes confined under `policy` on this host, granting
-	* the scope's additional roots inside the SAME dialect profile.
-	*
-	* Under `read-only` nothing is added (the mode denies every write, additional
-	* roots included), and `danger-full-access` never reaches here at all: the
-	* bash executor and the PTY backend both hand their argv straight to the local
-	* runtime in that mode. Widening therefore only ever ADDS the scope's
-	* additional roots to an upstream `workspace-write` profile.
-	*
-	* The return shape is the INSTALLED upstream provider's: synchronous on a
-	* release with a synchronous `confine`, a promise on a release with an
-	* asynchronous one. `widenConfined` preserves whichever it is — see
-	* `./compat/sandbox-confine.ts`.
-	* @param argv - the exact argv the caller is about to spawn.
-	* @param policy - the file-effect policy this execution runs under.
-	* @param signal - cancellation, forwarded to releases that accept it.
-	* @returns the argv to spawn instead, plus the selected backend's facts.
-	*/
-	confine(argv, policy, signal) {
-		const base = super.confine;
-		return widenConfined(base.bind(this), (confined) => this.widenForScope(confined, argv, policy), argv, policy, signal);
-	}
-	/**
-	* Graft the scope's additional roots onto one upstream `confine` result.
-	*
-	* Pure with respect to the upstream call: it only ever reads the scope and
-	* rewrites `argv`. `enforcement`, `denialSignatures` and `runnerFailureRules`
-	* are passed through untouched, because the bash executor derives its denial
-	* and enforcement reporting from them.
-	* @param confined - the upstream result for this call.
-	* @param argv - the caller's argv, needed to re-split the wrapped form.
-	* @param policy - the per-call policy.
-	* @returns the upstream result element for element, or one with a widened argv.
-	*/
-	widenForScope(confined, argv, policy) {
-		if (policy.mode !== "workspace-write") return confined;
-		const scope = this.ctx.multiRootScope.resolve(policy);
-		if (scope.additionalRoots.length === 0) return confined;
-		try {
-			const shape = splitConfined(confined.argv, argv);
-			if (shape.dialect === "windows-acl") {
-				this.warnAboutWindowsAcl(scope.additionalRoots.length);
-				return confined;
-			}
-			const profileArgs = widenProfileArgs(shape.dialect, shape.profileArgs, policy, scope.additionalRoots);
-			return {
-				...confined,
-				argv: [
-					...profileArgs,
-					"--",
-					...argv
-				]
-			};
-		} catch (error) {
-			if (!(error instanceof DialectUnrecognizedError)) throw error;
-			throw new SandboxUnavailableError(policy.mode, `multi-root workspace: cannot grant the additional workspace roots [${scope.additionalRoots.join(", ")}] under the primary root ${scope.primaryRoot} — ${error.message}`);
+//#region src/windows-profile.ts
+/** Windows runner argv and capability identity. No Win32 calls at module load. */
+/** A root-set capability: removing or adding a root changes the token's identity. */
+function workspaceScopeSid(roots) {
+	const paths = [...new Set(roots.map((root) => root.toLowerCase()))].sort();
+	const hash = createHash("sha256").update("dsh-multi-root-workspace\0").update(JSON.stringify(paths)).digest();
+	return `S-1-4-${[
+		0,
+		4,
+		8,
+		12
+	].map((offset) => hash.readUInt32LE(offset) % (2 ** 30 - 1) + 1).join("-")}-2`;
+}
+/** Strictly recognize the upstream public runner contract, failing closed on new flags. */
+function parseWindowsProfile(args, allowAdditional = false) {
+	const fields = /* @__PURE__ */ new Map();
+	const additionalRoots = [];
+	const known = /* @__PURE__ */ new Set([
+		"--workspace",
+		"--temp",
+		"--mode",
+		"--write-sid",
+		"--temp-write-sid"
+	]);
+	for (let index = 0; index < args.length; index += 2) {
+		const key = args[index];
+		const value = args[index + 1];
+		if (key === void 0 || value === void 0 || value === "") throw new DialectUnrecognizedError("Windows ACL profile has a missing value");
+		if (allowAdditional && key === "--additional-root") {
+			additionalRoots.push(value);
+			continue;
 		}
+		if (!known.has(key) || fields.has(key)) throw new DialectUnrecognizedError(`Windows ACL profile has unknown or duplicate flag ${key}`);
+		fields.set(key, value);
 	}
-	/**
-	* Report the documented first-release limitation exactly once: the Windows ACL
-	* rung grants through per-workspace write SIDs rather than argv paths, so
-	* additional roots stay unenforced for confined commands there while the
-	* in-process filesystem fence still allows them.
-	* @param rootCount - how many additional roots the scope carries.
-	*/
-	warnAboutWindowsAcl(rootCount) {
-		if (this.warnedAboutWindowsAcl) return;
-		this.warnedAboutWindowsAcl = true;
-		this.ctx.logger.warn(`multi-root workspace: this scope carries ${rootCount} additional workspace root(s), but the Windows ACL runner grants write access per workspace SID and cannot express them; confined bash/PTY runs will not be able to write them, while ctx.fs still can. Kernel-level multi-root on Windows is out of scope for the first release.`);
-	}
-};
+	const workspace = fields.get("--workspace");
+	const temp = fields.get("--temp");
+	if (workspace === void 0 || temp === void 0 || fields.get("--mode") !== "workspace-write") throw new DialectUnrecognizedError("Windows multi-root requires --workspace, --temp and --mode workspace-write");
+	const writeSid = fields.get("--write-sid");
+	const tempWriteSid = fields.get("--temp-write-sid");
+	if (writeSid === void 0 !== (tempWriteSid === void 0)) throw new DialectUnrecognizedError("Windows ACL profile requires both capability SIDs or neither");
+	return {
+		workspace,
+		temp,
+		mode: "workspace-write",
+		additionalRoots,
+		...writeSid === void 0 ? {} : { writeSid },
+		...tempWriteSid === void 0 ? {} : { tempWriteSid }
+	};
+}
+function widenWindowsProfile(profile, roots, primaryRoot) {
+	if (profile.length < 2 || profile[0] === void 0 || profile[1]?.startsWith("--")) throw new DialectUnrecognizedError("Windows ACL runner invocation is not [node, runner, ...flags]");
+	const parsed = parseWindowsProfile(profile.slice(2));
+	if (primaryRoot !== void 0 && canonicalPath(parsed.workspace) !== primaryRoot) throw new DialectUnrecognizedError("Windows ACL profile workspace does not match the policy root");
+	return [
+		profile[0],
+		fileURLToPath(new URL("./windows-runner.js", import.meta.url)),
+		...profile.slice(2),
+		...roots.flatMap((root) => ["--additional-root", root])
+	];
+}
 //#endregion
-export { widenConfined as n, MultiRootSandboxProvider as t };
+export { splitConfined as a, DialectUnrecognizedError as i, widenWindowsProfile as n, widenProfileArgs as o, workspaceScopeSid as r, parseWindowsProfile as t };

package/lib/windows-runner.js

@@ -0,0 +1,68 @@
+import { r as workspaceScopeSid, t as parseWindowsProfile } from "./windows-profile-CiFsFYIV.js";
+import { join } from "node:path";
+import { canonicalPath } from "@deepseek-ai/dsh-sandbox";
+import { closeSync, mkdtempSync, rmSync, statSync } from "node:fs";
+//#region src/windows-runner.ts
+/** Standalone runner: public upstream AclSandbox with a capability for the whole root set. */
+async function main() {
+	if (process.platform !== "win32") throw new Error("Windows ACL runner requires Windows");
+	const raw = process.argv.slice(2);
+	const separator = raw.indexOf("--");
+	if (separator < 0 || raw[separator + 1] === void 0) throw new Error("missing command after --");
+	const profile = parseWindowsProfile(raw.slice(0, separator), true);
+	const roots = [.../* @__PURE__ */ new Set([profile.workspace, ...profile.additionalRoots])];
+	for (const root of roots) if (!statSync(root).isDirectory() || canonicalPath(root) !== root) throw new Error(`workspace root was removed or redirected: ${root}`);
+	const { AclSandbox, assertTempRootOutsideWorkspace, workspaceWriteSid, tempWriteSid } = await import("@deepseek-ai/dsh-sandbox-windows-acl");
+	if (profile.writeSid !== void 0 && (profile.writeSid !== workspaceWriteSid(profile.workspace) || profile.tempWriteSid !== tempWriteSid(profile.temp))) throw new Error("upstream capability SIDs do not match their paths");
+	for (const root of roots) assertTempRootOutsideWorkspace(root, profile.temp);
+	const temp = mkdtempSync(join(profile.temp, "dsh-multi-root-"));
+	const sandbox = new AclSandbox({
+		writableDirs: roots,
+		tempDir: temp,
+		writeSid: workspaceScopeSid(roots),
+		tempWriteSid: tempWriteSid(temp),
+		mode: "workspace-write"
+	});
+	let initialized = false;
+	try {
+		await sandbox.init();
+		initialized = true;
+		process.env.TMP = temp;
+		process.env.TEMP = temp;
+		process.on("SIGINT", () => {});
+		const control = process.env.DSH_SUBPROCESS_CONTROL === "pipe";
+		const child = sandbox.spawn({
+			command: raw[separator + 1],
+			args: raw.slice(separator + 2),
+			stdio: "inherit",
+			...control ? { controlFileDescriptor: 7 } : {}
+		});
+		if (control) closeSync(7);
+		return (await child.wait()).exitCode;
+	} finally {
+		try {
+			if (initialized) sandbox.dispose();
+		} catch (error) {
+			reportCleanup(error);
+		}
+		try {
+			rmSync(temp, {
+				recursive: true,
+				force: true
+			});
+		} catch (error) {
+			reportCleanup(error);
+		}
+	}
+}
+function reportCleanup(error) {
+	process.stderr.write(`windows-acl-run: cleanup: ${error instanceof Error ? error.message : String(error)}\n`);
+}
+main().then((code) => {
+	process.exitCode = code;
+}, (error) => {
+	process.stderr.write(`windows-acl-run: ${error instanceof Error ? error.message : String(error)}\n`);
+	process.exitCode = 127;
+});
+//#endregion
+export {};

package/lib/workspace-files.js

@@ -0,0 +1,68 @@
+import { n as routeWorkspacePath, t as wrapMethod } from "./method-wrapper-Zc-JlDP3.js";
+//#region src/compat/workspace-files.ts
+function adaptPathWatch(service, wrap) {
+	return wrapMethod(service, "changes", (original) => original.length < 3 ? original : wrap(original));
+}
+//#endregion
+//#region src/workspace-files.ts
+const inject = ["multiRootCompat", "multiRootScope"];
+function apply(ctx) {
+	ctx.inject(["workspaceFiles", "fs"], (scope) => {
+		const service = scope.get("workspaceFiles");
+		scope.effect(() => {
+			const rowLifetime = new AbortController();
+			const restoreList = wrapMethod(service, "list", (original) => async function(request, path, signal) {
+				if (scope.multiRootScope.scopeOf(request.workspaceRoot).length === 0) return original.call(this, request, path, signal);
+				const route = await routeWorkspacePath(scope, request.workspaceRoot, path, signal);
+				if (route === void 0 || route.workspaceRoot === route.primaryRoot) return original.call(this, request, path, signal);
+				const result = await original.call(this, {
+					...request,
+					workspaceRoot: route.workspaceRoot
+				}, route.absolutePath, signal);
+				if (!scope.multiRootScope.scopeOf(route.primaryRoot).includes(route.workspaceRoot)) throw await outside(path);
+				return result;
+			});
+			const restoreWatch = adaptPathWatch(service, (originalChanges) => async function* (request, path, signal) {
+				if (scope.multiRootScope.scopeOf(request.workspaceRoot).length === 0) {
+					yield* originalChanges.call(this, request, path, signal);
+					return;
+				}
+				const route = await routeWorkspacePath(scope, request.workspaceRoot, path, signal);
+				if (route === void 0 || route.workspaceRoot === route.primaryRoot) {
+					yield* originalChanges.call(this, request, path, signal);
+					return;
+				}
+				const lifetime = new AbortController();
+				const unsubscribe = scope.multiRootScope.subscribe(() => {
+					if (!scope.multiRootScope.scopeOf(route.primaryRoot).includes(route.workspaceRoot)) lifetime.abort(/* @__PURE__ */ new Error("the additional root was revoked"));
+				});
+				try {
+					for await (const frame of originalChanges.call(this, {
+						...request,
+						workspaceRoot: route.workspaceRoot
+					}, route.absolutePath, AbortSignal.any([
+						signal,
+						lifetime.signal,
+						rowLifetime.signal
+					]))) {
+						if (!scope.multiRootScope.scopeOf(route.primaryRoot).includes(route.workspaceRoot)) throw await outside(path);
+						yield frame;
+					}
+				} finally {
+					unsubscribe();
+				}
+			});
+			return () => {
+				rowLifetime.abort(/* @__PURE__ */ new Error("multi-root workspace-files routing unloaded"));
+				restoreList();
+				restoreWatch();
+			};
+		}, "multi-root:workspace-files routing");
+	});
+}
+async function outside(path) {
+	const { RemoteError } = await import("@deepseek-ai/dsh-typert-protocol");
+	return new RemoteError("workspace-file/outside-workspace", `"${path}" is no longer in this workspace`, { path });
+}
+//#endregion
+export { apply, inject };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dsh-electron/dsh-plugin-multi-root-workspace",
   "description": "Multi-root Workspace for DeepSeek Harness: adds N additional roots to the workspace sandbox scope as an out-of-tree bundle",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -42,7 +42,19 @@
       "types": "./lib/types/client/index.d.ts",
       "default": "./lib/client.js"
     },
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./lsp": {
+      "types": "./lib/types/lsp.d.ts",
+      "default": "./lib/lsp.js"
+    },
+    "./workspace-files": {
+      "types": "./lib/types/workspace-files.d.ts",
+      "default": "./lib/workspace-files.js"
+    },
+    "./windows-runner": {
+      "types": "./lib/types/windows-runner.d.ts",
+      "default": "./lib/windows-runner.js"
+    }
   },
   "files": [
     "lib/*.js",
@@ -67,21 +79,27 @@
   },
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/cordis": ">=4.0.1 <5.0.0",
-    "@deepseek-ai/dsh-agent": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-agent-instructions": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-commands": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-fs": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-fs-local": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-sandbox": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-sandbox-local": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-storage-domain": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-subprocess": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2"
+    "@deepseek-ai/cordis": ">=4.0.1 <5.0.0 || 4.0.5-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-agent-instructions": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-commands": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-fs": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-fs-local": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-storage-domain": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-lsp": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-lsp-stdio": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-api-workspace-files": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-sandbox-windows-acl": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-agent": {
@@ -107,38 +125,56 @@
     },
     "@deepseek-ai/dsh-system-prompt": {
       "optional": true
+    },
+    "@deepseek-ai/dsh-lsp": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-lsp-stdio": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-api-workspace-files": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-typert-protocol": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-sandbox-windows-acl": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
     }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.2",
-    "@deepseek-ai/dsh": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-agent-instructions": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-app-boot": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-base": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-sidebar": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-workspace": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-commands": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-fs": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-fs-local": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-fs-sandbox": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sandbox": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sandbox-local": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-session-projection": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-storage": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-storage-domain": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-storage-json": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-subprocess": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-workspace": "0.1.5-rc.2",
+    "@deepseek-ai/cordis": "4.0.5-alpha.1",
+    "@deepseek-ai/dsh": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-agent-instructions": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-app-boot": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-base": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-locale": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-ui-sidebar": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-commands": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-fs": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-fs-local": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-fs-sandbox": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-sandbox": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-storage": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-storage-domain": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-storage-json": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-subprocess": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-workspace": "0.2.1-alpha.2",
     "@testing-library/react": "^16.3.3",
     "@types/node": "^22.0.0",
     "@types/react": "~18.3.31",
@@ -150,7 +186,14 @@
     "tsdown": "^0.22.0",
     "typescript": "^6.0.3",
     "vitest": "^4.1.8",
-    "yaml": "^2.9.0"
+    "yaml": "^2.9.0",
+    "@deepseek-ai/dsh-lsp": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-lsp-stdio": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-api-workspace-files": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-sandbox-windows-acl": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.2.1-alpha.2"
   },
   "dsh": {
     "bundle": {