@eddyskywalker/dsh-chatgpt-subscription 0.58.0 → 0.60.0

package/lib/types/host/codemode/transport.d.ts

@@ -0,0 +1,299 @@
+/**
+ * Code Mode 的程序传输工具 `code_run`。
+ *
+ * 工具名不是 `run_code`：那个名字被内核保留（`tools.register()` 会抛错），所以本包
+ * 用自己的名字注册同一件事——把模型写的一段程序交给 `ctx.ptcRuntime` 执行，程序里的每次
+ * `tools.<name>(args)` 都是一次真实的工具调用。
+ *
+ * ## 与内核 PTC `run_code` 对齐的使用配置
+ *
+ * 1. **运行时感知 Schema**：按 `ptcRuntime` 的语言（TypeScript / Python）、程序形态
+ *    （`function-body` / 常驻 REPL）、超时预算（`defaultMs` / `maxMs`）与沙箱支持动态投影
+ *    描述和参数（含单次提权的 `sandbox_permissions` + `justification`）；同一部署下静态恒定，
+ *    不会扰动前缀缓存。
+ * 2. **完整子调用调度与上下文转发**：只读并发上限受 `maxParallelSubCalls` 约束，写类调用等待
+ *    在飞调用排空后独占执行；程序结算时中止悬空请求并等待已启动子调用落盘；子调用产生的图片块、
+ *    `additionalContexts` 与 `concludesTurn` 原样转交给外层步骤。
+ * 3. **展示元数据与输出格式化**：声明 `presentCall` 与 `output.presentationMeta`（记录语言），
+ *    深层 JSON 结果控制缩进上限，失败时保留已捕获输出与沙箱诊断信息。
+ *
+ * @module @eddyskywalker/dsh-chatgpt-subscription/host/codemode/transport
+ */
+import type { CodemodeRules } from './rules.ts';
+/**
+ * 读当前程序运行的清单快照。
+ *
+ * @returns 程序运行期间是这次运行的快照；程序之外为 `undefined`。
+ */
+export declare function currentCatalogSnapshot(): readonly CatalogEntry[] | undefined;
+/** 传输工具名（与 {@link DEFAULT_RUN_TOOL_NAME} 一致，导出方便测试引用）。 */
+export declare const TRANSPORT_TOOL_NAME = "code_run";
+/** 允许单次提权的目标沙箱模式（对齐 `@deepseek-ai/dsh-sandbox` 的 `ESCALATION_TARGETS`）。 */
+export declare const ESCALATION_TARGETS: readonly ["workspace-write", "danger-full-access"];
+export type EscalationTargetMode = (typeof ESCALATION_TARGETS)[number];
+/** 程序里可调用的一个工具（结构描述，只读需要的字段）。 */
+export interface CatalogEntry {
+    /** 工具名。 */
+    readonly name: string;
+    /** 面向模型的描述。 */
+    readonly description: string;
+    /** 完整参数 JSON Schema。 */
+    readonly parameters: unknown;
+    /** 并发分类（内核约定：只有 true 表示可并发）。 */
+    readonly isConcurrencySafe?: (args: unknown) => boolean;
+}
+/**
+ * 一次运行拿到的会话级授权。
+ *
+ * 两项都取自**会话**而不是部署默认值：文件策略决定程序拿到的沙盒模式与写根，目录决定程序
+ * 从哪里开始（`cd` 过的会话不会退回初始目录）。取不到就留空，交给内核兜底。
+ */
+export interface RunAuthority {
+    /** 会话当前工作目录。 */
+    readonly cwd?: string;
+    /** 会话级文件策略。 */
+    readonly sandboxPolicy?: unknown;
+}
+/** 单次程序沙箱提权的请求入参。 */
+export interface SandboxEscalationInput {
+    /** 目标沙箱模式。 */
+    readonly requestedMode: EscalationTargetMode;
+    /** 模型给出的单句理由。 */
+    readonly justification: string;
+    /** 会话当前的生效策略对象。 */
+    readonly standingPolicy: unknown;
+    /** 调用方 agent。 */
+    readonly agent: unknown;
+    /** 本次外层调用 id。 */
+    readonly callId: string;
+    /** 传输工具名。 */
+    readonly toolName: string;
+    /** 取消信号。 */
+    readonly signal: AbortSignal;
+}
+/** 程序的运行环境句柄：由入口提供，传输层只调用。 */
+export interface CodemodeHost {
+    /** 当前可调用的工具清单（含被遮蔽的）。 */
+    catalog(): readonly CatalogEntry[];
+    /** 执行一次子调用（内部走 `ctx.tools.execute()`）。 */
+    callTool(request: CallToolRequest): Promise<CallToolOutcome>;
+    /** 读 PTC 运行时（结构探测）。 */
+    runtime(): PtcRuntimeLike | undefined;
+    /** 常驻环境的 owner（缺省用调用方 agent 当 owner）。 */
+    stateOwner(agent: unknown): object;
+    /** 程序结束时释放 owner 的常驻环境。 */
+    releaseOwner(owner: object): Promise<void>;
+    /**
+     * 取这次运行的会话级授权（目录 + 文件策略）。
+     *
+     * 老代 harness 没有 `sandboxPolicy` / `workingDirectory` 服务，此时返回 `undefined`，
+     * 由 `runtime.resolve()` 或运行时自身兜底即可。
+     */
+    runAuthority?(agent: unknown, signal: AbortSignal): Promise<RunAuthority | undefined> | RunAuthority | undefined;
+    /**
+     * 审批并应用单次沙箱提权（返回替换了 `mode` 的新策略对象）。
+     */
+    escalateSandbox?(input: SandboxEscalationInput): Promise<unknown>;
+    /**
+     * 将携带图片块的子调用内容包装成可投递给 `exec.deferContext` 的合法用户消息。
+     */
+    createImageContext?(content: readonly unknown[]): unknown;
+}
+/** 一次子调用请求。 */
+export interface CallToolRequest {
+    /** 工具名。 */
+    readonly name: string;
+    /** 已校验的参数对象。 */
+    readonly args: unknown;
+    /** 子调用 id（`<outer>:ptc:<n>`）。 */
+    readonly callId: string;
+    /** 取消信号（已带嵌套标记）。 */
+    readonly signal: AbortSignal;
+    /** 调用方 agent。 */
+    readonly agent: unknown;
+    /** 步骤准入集合。 */
+    readonly toolSet: unknown;
+}
+/** 一次子调用的结果。 */
+export interface CallToolOutcome {
+    /** 失败时的错误文本。 */
+    readonly error?: string;
+    /** 成功时的值。 */
+    readonly value?: unknown;
+    /** 成功时的文本内容（没有 value 时用它）。 */
+    readonly text?: string;
+    /**
+     * 面向前模型的内容块，原样进回放事件。
+     *
+     * 程序拿的是 `value` / `text`，这两条是给**界面**与**图片附件传递**的。
+     */
+    readonly content?: readonly unknown[];
+    /** 工具自带的展示元数据，原样进回放事件。 */
+    readonly meta?: unknown;
+    /** 失败身份（名称 / 业务码 / 原始细节），原样进回放事件。 */
+    readonly errorInfo?: {
+        readonly name: string;
+        readonly code: string;
+        readonly reason?: string;
+    };
+    /** 子调用产生的延迟上下文（如催促消息），转交给外层步骤。 */
+    readonly additionalContexts?: readonly unknown[];
+    /** 子调用是否要求结束当前回合（如用户撤回审批）。 */
+    readonly concluded?: boolean;
+}
+/** 一次运行请求（也覆盖 {@link PtcRuntimeLike.resolve} 的产物）。 */
+export interface PtcRunRequestLike {
+    /** 程序源码。 */
+    readonly program: string;
+    /** 程序里可见的绑定命名空间。 */
+    readonly bindings: readonly unknown[];
+    /** 常驻环境的 owner。 */
+    readonly stateOwner?: object;
+    /** 程序起点目录。 */
+    readonly cwd?: string;
+    /** 已解析的文件策略（DSH 0.2.2 起 `run()` 只接受 resolve() 的产物）。 */
+    readonly sandboxPolicy?: unknown;
+    /** 超时预算；`null` 表示不限。 */
+    readonly timeoutMs?: number | null;
+    /** 取消信号。 */
+    readonly signal?: AbortSignal;
+}
+/** PTC 运行时里本模块会读到的那部分（结构契约）。 */
+export interface PtcRuntimeLike {
+    /** 源码语言（`typescript` / `python`）。 */
+    readonly language?: string;
+    /** 程序形态（`function-body` / `repl`）。 */
+    readonly programFormat?: string;
+    /** 运行时附加的执行说明文本。 */
+    readonly executionInstructions?: string;
+    /** 运行时是否执行沙箱隔离（非 `undefined` 表示启用）。 */
+    readonly sandboxMode?: unknown;
+    /** 运行时是否保留跨次执行状态。 */
+    readonly retainsState?: boolean;
+    /** 超时预算。 */
+    readonly timeout?: {
+        readonly defaultMs: number;
+        readonly maxMs: number;
+    };
+    /** 常驻状态释放。 */
+    release?(owner: object): Promise<void>;
+    /**
+     * 解析目录、超时与文件策略。
+     *
+     * DSH 0.2.2 起内核把「解析」与「执行」拆开：`run()` 只接受这一步的产物，直接喂原始请求
+     * 会抛 `ptc-runtime-node: run requires a resolved sandbox policy`。老代运行时没有这个方法，
+     * 那时 `run()` 自己兜底。
+     */
+    resolve?(request: PtcRunRequestLike): PtcRunRequestLike;
+    /** 执行一段程序。 */
+    run(request: PtcRunRequestLike): Promise<PtcRunResultLike>;
+}
+/** 沙箱执行状态摘要。 */
+export interface PtcSandboxSummary {
+    readonly mode: string;
+    readonly denied: boolean;
+    readonly enforcement?: 'full' | 'partial';
+}
+/** 一次程序运行的结果。 */
+export interface PtcRunResultLike {
+    /** 程序返回值。 */
+    readonly value?: unknown;
+    /** 捕获的输出。 */
+    readonly logs: readonly string[];
+    /** 失败信息。 */
+    readonly error?: {
+        readonly kind: string;
+        readonly message: string;
+    };
+    /** 文件策略与观察到的拒绝。 */
+    readonly sandbox?: PtcSandboxSummary;
+}
+/** 一次传输调用的规范化结果。 */
+export interface TransportOutput {
+    /** 程序捕获的输出。 */
+    readonly logs: readonly string[];
+    /** 程序返回值。 */
+    readonly result?: unknown;
+    /** 文件沙箱观察。 */
+    readonly sandbox?: PtcSandboxSummary;
+}
+/**
+ * 造 `code_run` 的工具定义。
+ *
+ * @param host - 运行环境句柄。
+ * @param rules - 已归一化的规则。
+ * @returns 可直接交给 `ctx.tools.register()` 的原始定义。
+ */
+export declare function createTransportDefinition(host: CodemodeHost, rules: CodemodeRules): {
+    name: string;
+    description: string;
+    parameters: Record<string, unknown>;
+    output: {
+        schema: {
+            type: string;
+            additionalProperties: boolean;
+            required: string[];
+            properties: {
+                logs: {
+                    type: string;
+                    items: {
+                        type: string;
+                    };
+                };
+                result: {};
+                sandbox: {
+                    type: string;
+                    additionalProperties: boolean;
+                    required: string[];
+                    properties: {
+                        mode: {
+                            type: string;
+                        };
+                        denied: {
+                            type: string;
+                        };
+                        enforcement: {
+                            type: string;
+                            enum: string[];
+                        };
+                    };
+                };
+            };
+        };
+        render: (_args: unknown, value: TransportOutput) => {
+            type: string;
+            text: string;
+        }[];
+        presentationMeta: () => {
+            language: string;
+        };
+    };
+    presentCall(args: unknown): {
+        card: "generic";
+        title: string;
+        kind: "execute";
+        rawInput: string;
+    } | undefined;
+    execute(args: unknown, exec: TransportExecution): Promise<TransportOutput>;
+};
+/** 一次传输调用的执行上下文（结构描述）。 */
+export interface TransportExecution {
+    /** 本次调用的 id。 */
+    readonly callId: string;
+    /** 取消信号。 */
+    readonly signal: AbortSignal;
+    /** 调用方 agent。 */
+    readonly agent?: unknown;
+    /** 步骤准入集合。 */
+    readonly toolSet?: unknown;
+    /** 附加延迟上下文（图片块、催促通知等）。 */
+    deferContext?(message: unknown): void;
+    /** 请求在当前批结算后结束回合。 */
+    concludeTurn?(): void;
+}
+/** 校验单次沙箱提权参数配对（对齐 `@deepseek-ai/dsh-sandbox` 的 `validateEscalationArgs`）。 */
+export declare function validateEscalationArgs(sandboxPermissions: unknown, justification: unknown): {
+    sandboxPermissions?: EscalationTargetMode;
+    justification?: string;
+};
+//# sourceMappingURL=transport.d.ts.map

package/lib/types/host/codemode/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../src/host/codemode/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAc/C;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,SAAS,YAAY,EAAE,GAAG,SAAS,CAE5E;AAED,0DAA0D;AAC1D,eAAO,MAAM,mBAAmB,aAAa,CAAA;AAE7C,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,oDAAoE,CAAA;AACnG,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAStE,iCAAiC;AACjC,MAAM,WAAW,YAAY;IAC3B,WAAW;IACX,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,eAAe;IACf,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,wBAAwB;IACxB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,gCAAgC;IAChC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAA;CACxD;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,gBAAgB;IAChB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,eAAe;IACf,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CACjC;AAED,qBAAqB;AACrB,MAAM,WAAW,sBAAsB;IACrC,cAAc;IACd,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;IAC5C,iBAAiB;IACjB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,mBAAmB;IACnB,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;IAChC,iBAAiB;IACjB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,iBAAiB;IACjB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,aAAa;IACb,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,YAAY;IACZ,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC7B;AAED,8BAA8B;AAC9B,MAAM,WAAW,YAAY;IAC3B,yBAAyB;IACzB,OAAO,IAAI,SAAS,YAAY,EAAE,CAAA;IAClC,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC5D,uBAAuB;IACvB,OAAO,IAAI,cAAc,GAAG,SAAS,CAAA;IACrC,yCAAyC;IACzC,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;IAClC,2BAA2B;IAC3B,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C;;;;;OAKG;IACH,YAAY,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,GAAG,YAAY,GAAG,SAAS,CAAA;IAChH;;OAEG;IACH,eAAe,CAAC,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACjE;;OAEG;IACH,kBAAkB,CAAC,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAAA;CAC1D;AAED,eAAe;AACf,MAAM,WAAW,eAAe;IAC9B,WAAW;IACX,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,gBAAgB;IAChB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,iCAAiC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,oBAAoB;IACpB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,iBAAiB;IACjB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,cAAc;IACd,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,gBAAgB;AAChB,MAAM,WAAW,eAAe;IAC9B,gBAAgB;IAChB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa;IACb,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,8BAA8B;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;IACrC,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,qCAAqC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/F,kCAAkC;IAClC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;IAChD,8BAA8B;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAC7B;AAED,sDAAsD;AACtD,MAAM,WAAW,iBAAiB;IAChC,YAAY;IACZ,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,oBAAoB;IACpB,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAA;IACrC,mBAAmB;IACnB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,cAAc;IACd,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,uDAAuD;IACvD,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;IAChC,wBAAwB;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,YAAY;IACZ,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,gCAAgC;AAChC,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,sCAAsC;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,oBAAoB;IACpB,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IACvC,uCAAuC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;IAC9B,qBAAqB;IACrB,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAA;IAC/B,YAAY;IACZ,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACzE,cAAc;IACd,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC;;;;;;OAMG;IACH,OAAO,CAAC,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAAA;IACvD,cAAc;IACd,GAAG,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;CAC3D;AAED,gBAAgB;AAChB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1C;AAED,iBAAiB;AACjB,MAAM,WAAW,gBAAgB;IAC/B,aAAa;IACb,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,aAAa;IACb,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,YAAY;IACZ,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACpE,mBAAmB;IACnB,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;CACrC;AAED,oBAAoB;AACpB,MAAM,WAAW,eAAe;IAC9B,eAAe;IACf,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,aAAa;IACb,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IACzB,cAAc;IACd,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;CACrC;AA+FD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA0B5D,OAAO,SAAS,eAAe;;;;;;;;sBAkB/B,OAAO;;;;;;kBAeL,OAAO,QAAQ,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC;EAgNnF;AAkCD,0BAA0B;AAC1B,MAAM,WAAW,kBAAkB;IACjC,gBAAgB;IAChB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,YAAY;IACZ,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,iBAAiB;IACjB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,cAAc;IACd,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,0BAA0B;IAC1B,YAAY,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACrC,qBAAqB;IACrB,YAAY,CAAC,IAAI,IAAI,CAAA;CACtB;AAsGD,8EAA8E;AAC9E,wBAAgB,sBAAsB,CACpC,kBAAkB,EAAE,OAAO,EAC3B,aAAa,EAAE,OAAO,GACrB;IAAE,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,CAoBvE"}

package/lib/types/host/codex-images.d.ts

@@ -1,6 +1,18 @@
 import type { AttachmentStore } from '@deepseek-ai/dsh-attachment';
 import { OAuthService } from './oauth-service.ts';
 type FetchLike = typeof fetch;
+/**
+ * Output canvases the Codex image endpoint accepts in `size`.
+ *
+ * These are the official client's own three canvases plus the default `auto`,
+ * which lets the service pick. A size outside this set is not negotiated: the
+ * backend answers it with a 400, so the tool refuses it before the request.
+ */
+export declare const CODEX_IMAGE_SIZES: readonly ["auto", "1024x1024", "1536x1024", "1024x1536"];
+/** Render effort the endpoint accepts in `quality`; `auto` is the service's own default. */
+export declare const CODEX_IMAGE_QUALITIES: readonly ["auto", "low", "medium", "high"];
+/** Reference images one edit request may carry. */
+export declare const MAX_CODEX_REFERENCE_IMAGES = 5;
 export interface CodexImageToolOptions {
     fetchFn?: FetchLike;
 }

package/lib/types/host/codex-images.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-images.d.ts","sourceRoot":"","sources":["../../../src/host/codex-images.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAsB,MAAM,6BAA6B,CAAA;AAUtF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAIjD,KAAK,SAAS,GAAG,OAAO,KAAK,CAAA;AAE7B,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,SAAS,CAAA;CACpB;AAiBD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,YAAY,EACnB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,qBAA0B,mDA6GpC"}
+{"version":3,"file":"codex-images.d.ts","sourceRoot":"","sources":["../../../src/host/codex-images.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAsC,MAAM,6BAA6B,CAAA;AAWtG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAIjD,KAAK,SAAS,GAAG,OAAO,KAAK,CAAA;AAE7B;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,0DAA2D,CAAA;AAEzF,4FAA4F;AAC5F,eAAO,MAAM,qBAAqB,4CAA6C,CAAA;AAE/E,mDAAmD;AACnD,eAAO,MAAM,0BAA0B,IAAI,CAAA;AAc3C,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,SAAS,CAAA;CACpB;AAoED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,YAAY,EACnB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,qBAA0B,mDA+MpC"}

package/lib/types/host/command-code/model-catalog.d.ts

@@ -21,8 +21,8 @@
  * `deepseek/deepseek-v4.1-flash` and `deepseek/deepseek-v4-flash-vision-exp` take
  * images, and `z-ai/glm-5.3-flash` takes images while `zai-org/GLM-5.3` does not.
  *
- * THE TABLE BELOW is the registry `command-code@1.88.2` embeds in its CLI
- * bundle (`dist/cli.mjs`), transcribed in full: 106 entries, in registry order.
+ * THE TABLE BELOW is the registry `command-code@1.88.4` embeds in its CLI
+ * bundle (`dist/cli.mjs`), transcribed in full: 109 entries, in registry order.
  * The redacted snapshot of that registry is checked in under
  * `test/fixtures/command-code/official-model-catalog.json`, and
  * `test/command-code-model-catalog.test.ts` compares this table against it
@@ -73,18 +73,18 @@ export declare const COMMAND_CODE_MODELS: readonly CommandCodeModelDef[];
 /** Registry entry for one model id, or undefined when it describes no such model. */
 export declare function commandCodeModelDef(modelId: string): CommandCodeModelDef | undefined;
 /**
- * Model ids the 1.88.2 catalog refresh added to the shipped default selection.
+ * One catalog refresh's changes to the shipped default selection, newest first.
  *
- * The shipped default is the set of models the settings card offers before the
- * user edits it, and a stored selection that still equals it counts as "never
- * edited" (see `resolveEnabledModelIds` in `./routes.ts`). A refresh that
- * changed the default without saying so would make every untouched selection
- * from the previous release look edited, and the models this release adds
- * would stay hidden behind a list nobody touched. These two lists carry that
- * change: the retired ids are the ones the previous default had and this one
- * does not, and the added ids are the ones it gained.
+ * Applying these in order reconstructs every earlier unedited selection: remove
+ * the ids that refresh added, then restore the ids it retired. Keeping each
+ * generation separate matters once two refreshes have shipped; folding their
+ * additions into one list would skip the intermediate default entirely.
  */
-export declare const SHIPPED_DEFAULT_ADDED_MODEL_IDS: readonly string[];
-/** Model ids the 1.88.2 catalog refresh dropped from the shipped default selection. */
-export declare const SHIPPED_DEFAULT_RETIRED_MODEL_IDS: readonly string[];
+export interface ShippedDefaultMigration {
+    version: string;
+    added: readonly string[];
+    retired: readonly string[];
+}
+/** Default-selection deltas recognized by `resolveEnabledModelIds` in `./routes.ts`. */
+export declare const SHIPPED_DEFAULT_MIGRATIONS: readonly ShippedDefaultMigration[];
 //# sourceMappingURL=model-catalog.d.ts.map

package/lib/types/host/command-code/model-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-catalog.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/model-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAA;AAE3D,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,0EAA0E;IAC1E,eAAe,EAAE,mBAAmB,EAAE,CAAA;IACtC,sEAAsE;IACtE,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,kEAAkE;IAClE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,2FAA2F;IAC3F,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,wEAAwE;IACxE,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,EAAE,SAAS,mBAAmB,EA27B7D,CAAA;AAED,qFAAqF;AACrF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAEpF;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAe5D,CAAA;AAED,uFAAuF;AACvF,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAM9D,CAAA"}
+{"version":3,"file":"model-catalog.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/model-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAA;AAE3D,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,0EAA0E;IAC1E,eAAe,EAAE,mBAAmB,EAAE,CAAA;IACtC,sEAAsE;IACtE,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,kEAAkE;IAClE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,2FAA2F;IAC3F,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,wEAAwE;IACxE,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,EAAE,SAAS,mBAAmB,EAs9B7D,CAAA;AAED,qFAAqF;AACrF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAEpF;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACxB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAC3B;AAED,wFAAwF;AACxF,eAAO,MAAM,0BAA0B,EAAE,SAAS,uBAAuB,EAmCxE,CAAA"}

package/lib/types/host/command-code/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAIlD,OAAO,EAAmB,WAAW,EAAE,aAAa,EAAqC,MAAM,YAAY,CAAA;AAG3G,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,uBAAuB,EAE5B,KAAK,0BAA0B,EAChC,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAE1D,OAAO,EAKL,gBAAgB,EAQjB,MAAM,aAAa,CAAA;AAGpB,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAA;AAqDrG;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,OAAO,EAAE,SAAS,uBAAuB,EAAE,EAC3C,OAAO,UAAO,GACb,MAAM,EAAE,CAOV;AAsBD,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,sFAAsF;IACtF,OAAO,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;IACnC,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAA;IAChD;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAMD,mFAAmF;AACnF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,OAAO,GAAE,wBAA6B,EACtC,WAAW,GAAE,sBAAsB,GAAG,SAA+B,GACpE,OAAO,CAAC,oBAAoB,CAAC,CA+E/B;AAED,2EAA2E;AAC3E,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,OAAO,GAAE,wBAA6B,EACtC,WAAW,GAAE,sBAAsB,GAAG,SAA+B,GACpE,MAAM,IAAI,CAkPZ;AAED,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,iBAAiB,EAAE,gBAAgB,EAAE,CAAA"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAIlD,OAAO,EAAmB,WAAW,EAAE,aAAa,EAAqC,MAAM,YAAY,CAAA;AAG3G,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,uBAAuB,EAE5B,KAAK,0BAA0B,EAChC,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAE1D,OAAO,EAKL,gBAAgB,EAQjB,MAAM,aAAa,CAAA;AAGpB,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAA;AAqDrG;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,OAAO,EAAE,SAAS,uBAAuB,EAAE,EAC3C,OAAO,UAAO,GACb,MAAM,EAAE,CAOV;AA0BD,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,sFAAsF;IACtF,OAAO,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;IACnC,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAA;IAChD;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAMD,mFAAmF;AACnF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,OAAO,GAAE,wBAA6B,EACtC,WAAW,GAAE,sBAAsB,GAAG,SAA+B,GACpE,OAAO,CAAC,oBAAoB,CAAC,CA+E/B;AAED,2EAA2E;AAC3E,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,OAAO,GAAE,wBAA6B,EACtC,WAAW,GAAE,sBAAsB,GAAG,SAA+B,GACpE,MAAM,IAAI,CAkPZ;AAED,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,iBAAiB,EAAE,gBAAgB,EAAE,CAAA"}

package/lib/types/host/preset-sync.d.ts

@@ -45,13 +45,27 @@ export declare function candidatePackageRoots(entryScript?: string | undefined):
 /**
  * Whether a package or exported subpath is installed in any candidate node_modules tree.
  * A subpath needs its own exact `exports` key; the package root alone is not enough.
+ *
+ * The nearest manifest on each Node resolution chain is authoritative. Looking
+ * farther out after that manifest rejects a subpath would let an unrelated old
+ * installation resurrect an export the running package deliberately removed.
  */
 export declare function packageInstalled(specifier: string, roots?: readonly string[]): boolean;
+/** One module-resolution attempt, injectable so stale-tree cases are testable. */
+type ModuleResolver = (specifier: string) => unknown;
+/**
+ * Resolve against the installation that will actually mount the preset.
+ *
+ * `import.meta.resolve` is based at this plugin, while the harness mounts
+ * runtime-declared preset rows from its own context. A successful plugin-side
+ * resolution is therefore not sufficient for a harness package: an old copy in
+ * the profile tree must not override the running harness's missing export.
+ * Plugin-owned rows and the plugin-borne native executor are the deliberate
+ * exceptions. With no harness entry, retain the legacy local probe behavior.
+ */
+export declare function resolvesFromInstallation(specifier: string, entryScript: string | undefined, resolveFromPlugin: ModuleResolver | undefined): boolean;
 /**
- * Whether a bare specifier resolves from this module in the running
- * installation. A harness whose Node build exposes no `import.meta.resolve`
- * or whose plugin is executed from outside the profile tree falls through to
- * checking candidate `node_modules` trees across the running harness home.
+ * Whether a bare specifier resolves in the installation that mounts presets.
  * @param specifier - bare package specifier.
  * @returns whether the specifier resolves.
  */
@@ -143,4 +157,5 @@ export declare function syncPresetTrees(sourceRoot: string, targetRoot: string,
  * @returns the effect body's disposer, for `ctx.effect`.
  */
 export declare function installBundledPresets(host: PresetHost, install: PresetInstall): () => void;
+export {};
 //# sourceMappingURL=preset-sync.d.ts.map

package/lib/types/host/preset-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"preset-sync.d.ts","sourceRoot":"","sources":["../../../src/host/preset-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAElE,+CAA+C;AAC/C,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAAiB,CAAA;AAqFjE;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,GAAE,MAAM,GAAG,SAA2B,GAAG,MAAM,EAAE,CAyBjG;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,SAAS,MAAM,EAA4B,GACjD,OAAO,CAsBT;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAW3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,GAAG,MAAM,CAUvG;AA6CD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,GAAG,MAAM,CAEjG;AAED,sEAAsE;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAA;AAEjF,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB,EAAE,iBACY,CAAA;AAE5C,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,sDAAsD;IACtD,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,iEAAiE;IACjE,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACvC,2EAA2E;IAC3E,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAQpC;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AA0FD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAa,GAChD,QAAQ,GAAG,SAAS,CA+CtB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,SAAS,MAAM,EAAO,EAC9B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,gBAAgB,CAiClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,IAAI,CAiB1F"}
+{"version":3,"file":"preset-sync.d.ts","sourceRoot":"","sources":["../../../src/host/preset-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAElE,+CAA+C;AAC/C,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAAiB,CAAA;AAwFjE;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,GAAE,MAAM,GAAG,SAA2B,GAAG,MAAM,EAAE,CAyBjG;AAOD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,SAAS,MAAM,EAA4B,GACjD,OAAO,CAsBT;AA2CD,kFAAkF;AAClF,KAAK,cAAc,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAA;AAEpD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,iBAAiB,EAAE,cAAc,GAAG,SAAS,GAC5C,OAAO,CAqBT;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAG3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,GAAG,MAAM,CAUvG;AA6CD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,GAAG,MAAM,CAEjG;AAED,sEAAsE;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAA;AAEjF,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB,EAAE,iBACY,CAAA;AAE5C,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,sDAAsD;IACtD,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,iEAAiE;IACjE,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACvC,2EAA2E;IAC3E,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAQpC;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AA0FD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAa,GAChD,QAAQ,GAAG,SAAS,CA+CtB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,SAAS,MAAM,EAAO,EAC9B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,gBAAgB,CAiClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,IAAI,CAiB1F"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eddyskywalker/dsh-chatgpt-subscription",
-  "version": "0.58.0",
+  "version": "0.60.0",
   "description": "DSH provider plugin for Codex access through a ChatGPT subscription.",
   "icon": "./icon.svg",
   "author": {
@@ -61,6 +61,10 @@
     "./tool-result-pruner": {
       "types": "./lib/types/entry-tool-result-pruner.d.ts",
       "default": "./lib/tool-result-pruner.js"
+    },
+    "./codemode": {
+      "types": "./lib/types/entry-codemode.d.ts",
+      "default": "./lib/codemode.js"
     }
   },
   "dsh": {
@@ -170,6 +174,7 @@
     "typecheck": "tsc -b --pretty false && tsc -p test/tsconfig.json --pretty false && tsc -p scripts/tsconfig.json --pretty false"
   },
   "dependencies": {
+    "@deepseek-ai/dsh-tool-executor-native": "^0.2.2-rc.1",
     "katex": "^0.18.7",
     "mermaid": "^11.17.2",
     "undici": "^8.10.0",

package/presets/dispatch/README.md

@@ -1,7 +1,16 @@
 # 调度模式（dispatch）
 
-基于内置 `ptc` preset 的调度 Agent。工具面与 PTC 模式完全一致（`run_code` 呈现），
-改变的是**身份与流程纪律**。
+基于 **Code Mode** 的调度 Agent：本预设自己注册的工具保持原生可调（schema 不变），
+预设清单以外的一切（MCP 服务端工具、profile 级插件工具、按 agent 注册的工具集）不进入模型
+上下文，只能在 `code_run` 程序里用 `code_tools_search` 现查现调。改变的是**身份与流程纪律**。
+
+> 内核的 `ptc` 呈现方式只把 `run_code` 交给模型、其余名字一律硬拒，`standard` 又完全没有程序
+> 传输；「原生工具 + 程序」这个组合在内核里表达不出来，所以本预设自带一行 `code-mode`
+> （`@eddyskywalker/dsh-chatgpt-subscription/codemode`）。代次上不可用原生 executor 时，
+> `resolveDispatchPreset` 会自动退回 PTC 呈现（见 `src/host/agent-preset.ts`）。
+
+> **缓存前提**：Code Mode 的说明段是**恒定文本**（不含任何遮蔽计数或 namespace 清单），
+> 加上既有的 `ptc-sdk-cache-guard`，kimi-code / minimax-code 的前缀缓存不因 MCP 增删而失效。
 
 ## 运行骨架
 
@@ -24,7 +33,7 @@
 | R0 | 先分诊，按复杂度决定是否展开重治理流程；绝不为 L0/L1 开启完整访谈或计划模式 |
 | R0.5 | 兼容性闸门（每个新会话一次）：判据**只有** `spawn_teammate` 是否在场——在场才说明跑的是旧代 team 运行时（它顶替协调工具），此时停下交用户决策；现行 team 只加共享任务板，与调度并行 |
 | R-G | L2 规划前必须做澄清访谈：设计树 / 前沿 / 轮次，每题给推荐答案，事实自己查、决策交用户，前沿为空且用户确认后才进入规划 |
-| R1 | L2 执行拓扑按「耦合度 × 并行收益」三选一：`Lead-Core`（紧耦合跨模块由主代理连续直执）、`Hybrid`（主代理先冻结公共契约再并行外包下游）、`Fan-out`（3+ 正交子任务并行编排） |
+| R1 | L2 执行拓扑按「耦合度 × 并行收益」三选一：`Lead-Core`（紧耦合跨模块由主代理连续直执）、`Hybrid`（主代理先冻结公共契约再并行外包下游）、`Fan-out`（3+ 正交子任务并行编排）；单次生图、改提示词和重试由当前代理直接调用工具，只有独立多方案或更复杂创意任务才委派 |
 | R2 | 允许清单唯一真源是 `list_subagent_models`（`{}` → `{ provider }`）；派发必须显式给出拆开的 `provider` 与 `model`，直接采信工具返回值，无需去翻本地配置或代码核对 |
 | R3 | 子代理对自己的模块拥有规划/执行/自检自治权 |
 | R4 | 子代理使用 DSH 默认子代理角色；选模型的权力只在主代理 |
@@ -88,9 +97,7 @@ R6 验收与 R-W 等待；R0.5 只靠 `spawn_teammate` 判代，**不能**用 `w
 claim/complete。任务 ready 不等于开工，也不许用 `reassign` 把任务挪走以绕开 R6 验收。R0.5 在缺席判据
 下会先写一行 `Orchestration ready: subagent`，把当前模式打在第一行。
 
-**缓存侧的两个注意点**：Kimi / MiniMax 的 PTC `tools:sdk` 是冻结的**未过滤**声明
-（`ptc-sdk-cache-guard`），所以 `team_task_*` 在 SDK 里**常驻可见**、与开关无关——可见不等于可调用，
-要以 `team_task_list` 能否调通为准。反过来，开关本身会让 `team:policy` 段从空串变成整段文本，
+**缓存侧的两个注意点**：Code Mode 下 `team_task_*` 属于全局层工具，只存在于 `code_run` 程序清单里（旧代回退 PTC 时则在冻结的 `tools:sdk` 里常驻可见）——无论哪种呈现，在清单里存在都不等于开关已打开，要以在 `code_run` 内调用 `team_task_list` 能否调通为准。反过来，开关本身会让 `team:policy` 段从空串变成整段文本，
 system prompt 因此改写一次；这与计划模式当初刻意用"尾部用户消息"规避的是同一类重建，只是这段文本
 由 harness 拥有。建议在**首个回合之前**决定 team 开关：开会话时就是目标状态则零成本，中途切换付一次前缀重建。
 插件默认开启的 `teamPolicyCacheGuard` 让这唯一一次重建也消失：守卫把 `team:policy` 段从装配里

package/presets/dispatch/agent.cordis.yml

@@ -1,7 +1,9 @@
-# The `dispatch` (调度模式) agent preset: PTC mode presented for an ORCHESTRATOR.
+# The `dispatch` (调度模式) agent preset: Code Mode presented for an ORCHESTRATOR.
 #
-# Derived from the builtin `ptc` preset; the tool surface is unchanged. What
-# this file changes is identity and planning discipline:
+# Built on Code Mode (`./codemode`): this preset's own tools stay natively
+# callable while MCP and external plugin tools stay reachable inside `code_run`
+# (falling back to PTC `run_code` on older harnesses). What this file changes is
+# identity and planning discipline:
 #
 #   1. persona  — the agent is a dispatcher. It triages task complexity first
 #      (L0/L1/L2), interviews the user to settle requirements before planning an
@@ -64,8 +66,8 @@
 
       ## R0.5 · Compatibility Gate (Once per New Session, Before R0)
       A legacy Agent Teams runtime (pre-#7519) registers spawn_teammate and replaces send_message / list_agents / interrupt_agent with team-scoped variants, leaving spawned subagents unreachable. The current runtime only adds a shared task board (team_task_create and its list/get/update siblings) and reuses this mode's tools.
-      Criterion: whether spawn_teammate exists (PTC: tools.spawn_teammate). Never gate on wait_agent, send_message, list_agents, or interrupt_agent: this mode mounts those itself.
-      - Absent -> Write "Orchestration ready: subagent" and proceed to R0. The board tools stay visible in the PTC SDK whether or not the board is on - frozen declaration, not availability - so confirm with team_task_list before relying on it. When the board is on it is bookkeeping, not a second dispatcher: the dispatch ledger stays the dispatch authority and R5 briefs stay the task contract; publish cross-agent dependencies (blocked_by) and write scopes on one team task per brief, claimed and completed by the child that owns it; never start work because a task is ready, and never reassign a task to skip R6.
+      Criterion: whether spawn_teammate exists (check via code_run). Never gate on wait_agent, send_message, list_agents, or interrupt_agent: this mode mounts those itself.
+      - Absent -> Write "Orchestration ready: subagent" and proceed to R0. The board tools stay declared whether or not the board is on - frozen declaration, not availability - so confirm with team_task_list before relying on it. When the board is on it is bookkeeping, not a second dispatcher: the dispatch ledger stays the dispatch authority and R5 briefs stay the task contract; publish cross-agent dependencies (blocked_by) and write scopes on one team task per brief, claimed and completed by the child that owns it; never start work because a task is ready, and never reassign a task to skip R6.
       - Present -> This session runs the legacy runtime and is **not orchestratable**. In order, and nothing else:
         1. State in one sentence that the legacy runtime shadows the coordination tools and this mode has no degraded path.
         2. Call ask_user_question once (see R-W) offering: disable the legacy runtime, restart Host, **start a new session**; switch preset; or execute this task directly.
@@ -92,9 +94,10 @@
       - Lead-Core: tightly coupled cross-module/contract changes or sequential chains where splitting duplicates reads or causes hand_back loops. -> Implement directly in continuous steps (track in todo_write, no self-briefs) and run R6 verification.
       - Hybrid: unsettled shared contracts/seams plus orthogonal downstream work. -> Implement & freeze core seams yourself first, then delegate orthogonal adapters/tests/noisy exploration per R2/R5 (or subagent_fork for warm-context isolation).
       - Fan-out: >=3 orthogonal subtasks with disjoint files, settled interfaces, and clear parallel/routing gain. -> Coordinate (plan, R2/R5 dispatch, R6 review/acceptance, docs, non-delegable or disjoint parallel modules); never edit an active child's Boundary.
+      - [Media generation] Generate/revise/retry images directly; delegate complex creative work, never a bare call.
 
       ## R2 · Model Routing (Check Availability First, Then Decide How to Dispatch)
-      Check whether list_subagent_models exists (in PTC mode: tools.list_subagent_models). The tool row and provider/model/reasoning_effort parameters are mounted statically, so they are present even in a session that authorized no route at all. Read that fact instead of inferring it from the tool's output:
+      Check whether list_subagent_models exists. The tool row and provider/model/reasoning_effort parameters are mounted statically, so they are present even in a session that authorized no route at all. Read that fact instead of inferring it from the tool's output:
       - If the output says neither—no authorized-routes block and no "No allowlist is in force" sentence—the annotation is absent and you cannot read the posture. Treat it as [State: Unlisted] for behaviour, but say "unconfirmed" rather than claiming either posture, and never report a route as authorized.
       - [State: Listed] Output ends with "Authorized child routes for this Session": enforcement is active.
         - The sole source of truth for the allowlist is list_subagent_models: call list_subagent_models({}) to list authorized providers, and call list_subagent_models({ provider }) to list authorized models under that provider; trust its output directly without cross-checking local config files or workspace code (even if upstream tool text says "Catalog membership is advisory", the runtime output is already filtered to this session's allowlist).
@@ -110,7 +113,7 @@
       Every task brief covers six elements: Goal / Boundary (which files or modules may be touched) / Constraints / Limits (see below) / Acceptance Criteria / Required Evidence to Report.
       - [Compact Delta Brief] Standing default limits and the report schema already live in [Role Identification], so use a Compact Delta Brief by default: state Goal, original file/line Source Pointers (do not paraphrase code into long prose), Module-Interface Boundary, Constraints, Acceptance Criteria, and Required Evidence, and omit repeating standing limits unless overriding them.
       - [Limits] When overriding any standing limit, write one line per limit spelling out four things: **what it bounds, in what unit, the cap, and whether it accumulates**. Write explicit caps ("at most 3 attempts", "edits at most 5 files", "test runs: unlimited"), never ranges ("2–5 files"); where an override dimension is left unstated, silence is read as a limit of zero, and a quota that resets per cycle is lost, not banked.
-      - Do not ask the child to restate your rules back as a correctness check; if a limit is genuinely unclear, instruct the child to spend one minimal tool call to verify it. Dispatch independent tasks concurrently in one message (via Promise.all in PTC mode) only after the interview has converged.
+      - Do not ask the child to restate your rules back as a correctness check; if a limit is genuinely unclear, instruct the child to spend one minimal tool call to verify it. Dispatch independent tasks concurrently in one message (native calls; use code_run Promise.all for batch filter/MCP) only after the interview has converged.
 
       ## R6 · Review & Acceptance
       Two layers: subagent self-check -> your independent review (reading diffs, running tests, checking each criterion). The completion notification is a post-hoc signal: it tells you a child stopped, not that the work passed.
@@ -421,15 +424,15 @@
 
 # ── presentation ────────────────────────────────────────────────────────────
 
-# PTC mode for this agent alone. The row waits for the host's script runtime
-# (`codeRuntime` up to harness 0.1.5, `ptcRuntime` from 0.1.6) rather than
-# assuming it. On harnesses with @deepseek-ai/dsh-tool-executor-ptc,
-# resolveDispatchPreset mounts that official executor directly; older ones keep
-# this deprecated compatibility row and its mode config.
-- id: tool-presentation
-  name: '@deepseek-ai/dsh-agent-tool-presentation'
-  config:
-    mode: ptc
+# Code Mode for this agent alone: the rows above stay natively callable, and
+# everything this preset does not own (MCP servers, profile-level plugins,
+# per-agent tool sets) is reachable only from inside `code_run`. The row brings
+# its own executor, so no `tool-executor-ptc` row is mounted beside it — one
+# executor per scope. resolveDispatchPreset swaps this row back to the PTC
+# executor (or the deprecated presentation row) on generations without
+# @deepseek-ai/dsh-tool-executor-native.
+- id: code-mode
+  name: '@eddyskywalker/dsh-chatgpt-subscription/codemode'
 
 # `present` ships from harness 0.1.5-alpha.2. On an earlier installation the
 # sync disables this row rather than leave the whole preset unresolvable, and

package/presets/dispatch/preset.yml

@@ -1,3 +1,3 @@
 name: 调度模式
-description: 基于 PTC 模式的调度 Agent：先分诊任务复杂度，L2 任务在规划前先做澄清访谈，再由主代理规划、派发子代理（显式选择子代理模型）、审查与验收。
+description: 基于 Code Mode 的调度 Agent：先分诊任务复杂度，L2 任务在规划前先做澄清访谈，再由主代理规划、派发子代理（显式选择子代理模型）、审查与验收。
 order: 5