@feng0531/dsh-execution-bus 0.5.1 → 0.7.0

package/dist/plugin.js

@@ -2,13 +2,16 @@ import { randomUUID } from "node:crypto";
 import { ADMISSION_DEFAULTS, REQUEST_DESCRIPTION, REQUEST_PARAMETERS, STATE_PARAMETERS, } from "./product.js";
 import { ExecutionOwner } from "./execution.js";
 import { ExecutionBus, parse } from "./bus.js";
-import { testHandler, readHandler } from "./handlers.js";
+import { ERRORS } from "./error-codes.js";
+import { testHandler, readHandler, editHandler, writeHandler, } from "./handlers.js";
 export const name = "execution-bus";
 export const inject = ["tools", "jobs"];
 export function apply(ctx) {
     const bus = new ExecutionBus(undefined, ADMISSION_DEFAULTS);
     bus.register("test", testHandler);
     bus.register("host.read", readHandler);
+    bus.register("host.edit", editHandler);
+    bus.register("host.write", writeHandler);
     const executions = new ExecutionOwner();
     ctx.effect(() => () => executions.close(() => bus.close()));
     ctx.tools.register({
@@ -21,14 +24,14 @@ export function apply(ctx) {
         },
         async execute(raw, exec) {
             if (executions.phase !== "open")
-                throw Error("CLOSED");
+                throw Error(ERRORS.CLOSED);
             if (!exec.agent)
-                throw Error("OWNING_SESSION_REQUIRED");
+                throw Error(ERRORS.OWNING_SESSION_REQUIRED);
             if (!raw ||
                 typeof raw !== "object" ||
                 Array.isArray(raw) ||
                 Reflect.ownKeys(raw).length)
-                throw Error("INVALID_STATE_QUERY");
+                throw Error(ERRORS.INVALID_STATE_QUERY);
             return bus.inspect({
                 sessionId: String(exec.agent.id),
                 callId: String(exec.callId),
@@ -45,65 +48,106 @@ export function apply(ctx) {
         },
         execute(raw, exec) {
             if (executions.phase !== "open")
-                return Promise.reject(Error("CLOSED"));
+                return Promise.reject(Error(ERRORS.CLOSED));
             return executions.track(dispatch(raw, exec));
         },
     });
     async function dispatch(raw, exec) {
         if (!exec.agent)
-            throw Error("OWNING_SESSION_REQUIRED");
+            throw Error(ERRORS.OWNING_SESSION_REQUIRED);
+        const agent = exec.agent;
         const owner = {
-            sessionId: String(exec.agent.id),
+            sessionId: String(agent.id),
             callId: String(exec.callId),
-        }, m = parse(raw);
+        };
+        const m = parse(raw);
         if (m.type !== "request")
             return bus.command(owner, m);
+        // 宿主工具转发：仅 host.* handler 注入对应工具的 capability。
+        const hostTool = hostToolFor(m.payload.handler);
         let projection;
-        const attached = bus.submit(owner, m, (event) => projection?.progress(event), async (input, signal) => {
+        const attached = bus.submit(owner, m, (event) => projection?.progress(event), hostTool
+            ? makeHostInvoke(exec, agent, hostTool.name, hostTool.errorCode)
+            : undefined);
+        // 1) 终态复用：已有执行直接读结果，不是新工作受理、不再申请 Job。
+        const terminal = await readTerminal(attached);
+        if (terminal)
+            return terminal;
+        // 2) 新执行：取得或创建宿主 Job 投影。
+        const execution = await projectExecution(owner, m, attached, agent.id, (handle) => (projection = handle));
+        // 3) 挂接取消生命周期，等待投影结算后返回执行快照。
+        return await awaitProjection(exec, attached, execution);
+    }
+    /** 把 host.<tool> handler 名映射到宿主工具名与失败错误码。 */
+    function hostToolFor(handler) {
+        if (typeof handler !== "string" || !handler.startsWith("host."))
+            return undefined;
+        const name = handler.slice("host.".length);
+        if (!name)
+            return undefined;
+        return {
+            name,
+            errorCode: name === "read" ? ERRORS.HOST_READ_FAILED : ERRORS.HOST_TOOL_FAILED,
+        };
+    }
+    /** 为一类宿主工具构造转发能力：出队时重新进入宿主工具管线，沿用宿主权限与工作目录。 */
+    function makeHostInvoke(exec, agent, toolName, errorCode) {
+        return async (input, signal) => {
             const result = await ctx.tools.execute({
-                name: "read",
+                name: toolName,
                 callId: (String(exec.callId) +
                     ":bus:" +
                     randomUUID()),
                 rootCallId: exec.rootCallId,
                 parent: exec.token,
-                agent: exec.agent,
+                agent,
                 arguments: input,
                 signal,
             });
             if (result.isError)
-                throw Error("HOST_READ_FAILED");
+                throw Error(errorCode);
             return result.value;
-        });
-        // Terminal reuse is a read of an existing result, not admission of new work.
-        if (attached.accepted.payload.state !== "queued" &&
-            attached.accepted.payload.state !== "running") {
-            try {
-                const value = await attached.done;
-                attached.returned();
-                return value;
-            }
-            finally {
-                attached.detach();
-            }
+        };
+    }
+    // —— 三个职责单一的拆分函数（闭包内共享 ctx/bus/executions） ——
+    /** accepted 已是终态时直接返回现有结果；否则返回 undefined 走新执行路径。 */
+    async function readTerminal(attached) {
+        const state = attached.accepted.payload.state;
+        if (state === "queued" || state === "running")
+            return undefined;
+        try {
+            const value = await attached.done;
+            attached.returned();
+            return value;
         }
-        const abort = () => attached.cancel();
+        finally {
+            attached.detach();
+        }
+    }
+    /** 命中已存在的共享投影则复用，否则创建投影；创建失败按 HOST_JOB_UNAVAILABLE 结算。 */
+    async function projectExecution(owner, m, attached, ownerId, onProjected) {
         const jobKey = JSON.stringify([owner.sessionId, m.requestId]);
-        let execution = executions.get(jobKey);
-        if (execution)
-            attached.detach(); // only the first attachment projects progress into the shared Job
-        if (!execution) {
-            try {
-                execution = executions.create(jobKey, ctx.jobs, exec.agent.id, attached);
-                projection = execution;
-            }
-            catch {
-                abort();
-                await attached.done;
-                attached.detach();
-                throw Error("HOST_JOB_UNAVAILABLE");
-            }
+        const existing = executions.get(jobKey);
+        if (existing) {
+            // 只让第一个附着把进度投影到共享 Job；后续附着立即解除。
+            attached.detach();
+            return existing;
+        }
+        try {
+            const created = executions.create(jobKey, ctx.jobs, ownerId, attached);
+            onProjected(created);
+            return created;
         }
+        catch {
+            attached.cancel();
+            await attached.done;
+            attached.detach();
+            throw Error(ERRORS.HOST_JOB_UNAVAILABLE);
+        }
+    }
+    /** 把宿主工具调用的取消映射到执行，并等待投影结算后返回快照。 */
+    async function awaitProjection(exec, attached, execution) {
+        const abort = () => attached.cancel();
         exec.signal.addEventListener("abort", abort, { once: true });
         if (exec.signal.aborted)
             abort();

package/dist/preset.js

@@ -4,31 +4,33 @@ import { entryListSchema } from "@deepseek-ai/cordis-plugin-include";
 import { load } from "js-yaml";
 import { setTimeout as pause } from "node:timers/promises";
 import { PRODUCT } from "./product.js";
+import { ERRORS } from "./error-codes.js";
 export const PRESET_ID = PRODUCT.presetId;
+/** 校验派生源组合：拒绝已含总线，以及缺少公开基准地址的相对模块/include 子文件。 */
+function validateDerivation(rows) {
+    for (const row of rows) {
+        if (row.id === "xiao-he-execution-bus" ||
+            row.name?.startsWith("@feng0531/dsh-execution-bus"))
+            throw Error(ERRORS.PTC_PRESET_ALREADY_CONTAINS_BUS);
+        // readDocument 不发布声明方的 baseUrl，不能把相对模块/include
+        // 静默重定位到 registrar 的不同上下文。
+        if (row.name?.startsWith(".") ||
+            row.name === "@deepseek-ai/cordis-plugin-include")
+            throw Error(ERRORS.PTC_PRESET_RELATIVE_BASE_UNSUPPORTED);
+        if (row.group && Array.isArray(row.config))
+            validateDerivation(row.config);
+    }
+}
 /** Capture the host-declared composition without evaluating !!js or changing disabled rows. */
 export function derivePreset(content) {
     if (Buffer.byteLength(content) > 1048576)
-        throw Error("PTC_PRESET_TOO_LARGE");
+        throw Error(ERRORS.PTC_PRESET_TOO_LARGE);
     const plugins = load(content, { schema: entryListSchema });
     const problem = entryListProblem(plugins);
     if (problem)
         throw Error("Invalid PTC preset: " + problem);
     const rows = plugins;
-    const inspect = (entries) => {
-        for (const row of entries) {
-            if (row.id === "xiao-he-execution-bus" ||
-                row.name?.startsWith("@feng0531/dsh-execution-bus"))
-                throw Error("PTC_PRESET_ALREADY_CONTAINS_BUS");
-            // readDocument does not publish the declaring baseUrl. Do not silently
-            // rebase relative modules/includes into the registrar's different context.
-            if (row.name?.startsWith(".") ||
-                row.name === "@deepseek-ai/cordis-plugin-include")
-                throw Error("PTC_PRESET_RELATIVE_BASE_UNSUPPORTED");
-            if (row.group && Array.isArray(row.config))
-                inspect(row.config);
-        }
-    };
-    inspect(rows);
+    validateDerivation(rows);
     return {
         id: PRESET_ID,
         name: PRODUCT.name,
@@ -68,7 +70,7 @@ export default class XiaoHePreset {
             }
         }
         if (!document)
-            throw Error("PTC_PRESET_UNAVAILABLE");
+            throw Error(ERRORS.PTC_PRESET_UNAVAILABLE);
         yield await this.ctx.agentPresets.register(derivePreset(document.content));
     }
 }

package/dist/product.d.ts

@@ -18,7 +18,7 @@ export declare const ADMISSION_DEFAULTS: Readonly<{
     sessionQueueLimit: 16;
     maxQueueWaitMs: 120000;
 }>;
-export declare const LIMITS: Readonly<{
+export declare const HANDLER_LIMITS: Readonly<{
     readLines: 100;
     readPathChars: 2048;
     diagnosticDelayMs: 30000;
@@ -52,5 +52,5 @@ export declare const STATE_PARAMETERS: {
     readonly properties: {};
     readonly additionalProperties: false;
 };
-export declare const REQUEST_DESCRIPTION = "\u8427\u4F55 / Xiao He. Submit a version 1 request and WAIT for its terminal result in this tool call. Reuse requestId only for the same logical operation. Business handler: host.read {file_path,offset?,limit?<=100}. Diagnostic handler only: test {delayMs:0..30000,fail:boolean}; never use it to perform real work. Control status/result/cancel use empty payload. Acceptance is volatile, not success. No polling or restart resume.";
+export declare const REQUEST_DESCRIPTION = "\u8427\u4F55 / Xiao He. Submit a version 1 request and WAIT for its terminal result in this tool call. Reuse requestId only for the same logical operation. Business handlers: host.read {file_path,offset?,limit?<=100}; host.edit {file_path,old_string,new_string,replace_all?}; host.write {file_path,content} (mutating, terminal reuse denied). Diagnostic handler only: test {delayMs:0..30000,fail:boolean}; never use it to perform real work. Control status/result/cancel use empty payload. Acceptance is volatile, not success. No polling or restart resume.";
 export declare const MODE_INSTRUCTIONS: string;

package/dist/product.js

@@ -18,7 +18,7 @@ export const ADMISSION_DEFAULTS = Object.freeze({
     sessionQueueLimit: 16,
     maxQueueWaitMs: 120000,
 });
-export const LIMITS = Object.freeze({
+export const HANDLER_LIMITS = Object.freeze({
     readLines: 100,
     readPathChars: 2048,
     diagnosticDelayMs: 30000,
@@ -40,8 +40,8 @@ export const STATE_PARAMETERS = {
     properties: {},
     additionalProperties: false,
 };
-export const REQUEST_DESCRIPTION = "萧何 / Xiao He. Submit a version 1 request and WAIT for its terminal result in this tool call. Reuse requestId only for the same logical operation. Business handler: host.read {file_path,offset?,limit?<=100}. Diagnostic handler only: test {delayMs:0..30000,fail:boolean}; never use it to perform real work. Control status/result/cancel use empty payload. Acceptance is volatile, not success. No polling or restart resume.";
-export const MODE_INSTRUCTIONS = "你正在萧何模式中。这不是角色扮演。保留宿主 PTC 的日常工具能力与权限规则。普通编辑、搜索、命令、安装和其他工作使用原工具，不要声称此模式只读。execution_bus 是可选协调入口，实际业务 Handler 只有 host.read；test 仅用于用户明确要求的诊断，不做真实工作，不要强制所有任务走总线。通过 run_code 调用 await tools.execution_bus(...)，受原有时间预算约束。每会话排队上限 " +
+export const REQUEST_DESCRIPTION = "萧何 / Xiao He. Submit a version 1 request and WAIT for its terminal result in this tool call. Reuse requestId only for the same logical operation. Business handlers: host.read {file_path,offset?,limit?<=100}; host.edit {file_path,old_string,new_string,replace_all?}; host.write {file_path,content} (mutating, terminal reuse denied). Diagnostic handler only: test {delayMs:0..30000,fail:boolean}; never use it to perform real work. Control status/result/cancel use empty payload. Acceptance is volatile, not success. No polling or restart resume.";
+export const MODE_INSTRUCTIONS = "你正在萧何模式中。这不是角色扮演。保留宿主 PTC 的日常工具能力与权限规则。普通编辑、搜索、命令、安装和其他工作使用原工具，不要声称此模式只读。execution_bus 是可选协调入口，实际业务 Handler 为 host.read、host.edit 与 host.write（host.edit/host.write 有副作用，终态结果不可复用）；test 仅用于用户明确要求的诊断，不做真实工作，不要强制所有任务走总线。通过 run_code 调用 await tools.execution_bus(...)，受原有时间预算约束。每会话排队上限 " +
     ADMISSION_DEFAULTS.sessionQueueLimit +
     "，排队超过 " +
     ADMISSION_DEFAULTS.maxQueueWaitMs / 1000 +

package/dist/protocol.d.ts

@@ -0,0 +1,49 @@
+export type State = "queued" | "running" | "succeeded" | "failed" | "cancelled" | "unknown";
+export type Owner = {
+    sessionId: string;
+    callId: string;
+};
+export type Message = {
+    protocolVersion: 1;
+    messageId: string;
+    requestId: string;
+    type: "request" | "status" | "result" | "cancel";
+    payload: Record<string, unknown>;
+};
+export type Event = {
+    protocolVersion: 1;
+    messageId: string;
+    requestId: string;
+    correlationId: string;
+    sequence: number;
+    type: string;
+    payload: Record<string, unknown>;
+};
+export type Capability = (input: Record<string, unknown>, signal: AbortSignal) => Promise<unknown>;
+export interface Handler {
+    /** 是否可安全复用终态结果。省略默认 true（可复用，向后兼容）；
+     *  显式 false = 有副作用，终态结果复用将被拒绝（运行中等待仍放行）。 */
+    readonly idempotent?: boolean;
+    validate(input: Record<string, unknown>): void;
+    run(input: Record<string, unknown>, ctx: {
+        signal: AbortSignal;
+        progress: (sequence: number, percent: number) => void;
+        requestId: string;
+        invoke?: Capability;
+    }): Promise<unknown>;
+}
+export interface RecordView {
+    requestId: string;
+    state: State;
+    sequence: number;
+    cancelRequested: boolean;
+    delivery: "pending" | "returned";
+    result?: unknown;
+    error?: string;
+    progress?: number;
+}
+export declare function object(v: unknown): Record<string, unknown>;
+/** 规范排序后的稳定摘要，只用于同 requestId 的冲突比较，不用于跨请求去重。 */
+export declare function canonical(v: unknown): string;
+export declare function parse(raw: unknown): Message;
+export declare function freezeJson<T>(value: T): T;

package/dist/protocol.js

@@ -0,0 +1,54 @@
+import { assertJson } from "./json.js";
+import { ERRORS } from "./error-codes.js";
+import { LIMITS } from "./limits.js";
+export function object(v) {
+    if (!v || typeof v !== "object" || Array.isArray(v))
+        throw Error(ERRORS.INVALID_OBJECT);
+    return v;
+}
+/** 规范排序后的稳定摘要，只用于同 requestId 的冲突比较，不用于跨请求去重。 */
+export function canonical(v) {
+    if (v === null || typeof v !== "object")
+        return JSON.stringify(v);
+    if (Array.isArray(v))
+        return "[" + v.map(canonical).join(",") + "]";
+    return ("{" +
+        Object.keys(v)
+            .sort()
+            .map((k) => JSON.stringify(k) +
+            ":" +
+            canonical(v[k]))
+            .join(",") +
+        "}");
+}
+export function parse(raw) {
+    assertJson(raw);
+    const m = object(raw);
+    if (Object.keys(m).some((k) => ![
+        "protocolVersion",
+        "messageId",
+        "requestId",
+        "type",
+        "payload",
+    ].includes(k)))
+        throw Error(ERRORS.UNKNOWN_FIELD);
+    if (m.protocolVersion !== 1)
+        throw Error(ERRORS.UNSUPPORTED_VERSION);
+    for (const k of ["messageId", "requestId"])
+        if (typeof m[k] !== "string" || !LIMITS.idPattern.test(m[k]))
+            throw Error(ERRORS.INVALID_ID);
+    if (!["request", "status", "result", "cancel"].includes(m.type))
+        throw Error(ERRORS.UNSUPPORTED_TYPE);
+    object(m.payload);
+    if (Buffer.byteLength(JSON.stringify(m)) > LIMITS.messageMaxBytes)
+        throw Error(ERRORS.MESSAGE_TOO_LARGE);
+    return structuredClone(m);
+}
+export function freezeJson(value) {
+    if (value && typeof value === "object") {
+        for (const child of Object.values(value))
+            freezeJson(child);
+        Object.freeze(value);
+    }
+    return value;
+}

package/docs/PRODUCT.md

@@ -2,9 +2,9 @@
 
 ## 产品边界
 
-萧何是 DSH 内的可选执行协调插件，提供独立可选择的 PTC 派生预设，不是 PTC 替代传输层，也不全局接管终端、编辑或其他工具。实际业务 Handler 为 host.read；test 是兼容保留的诊断 Handler，只有明确诊断需求时使用。测试能力存在不代表其他命令已接入总线。
+萧何是 DSH 内的可选执行协调插件，提供独立可选择的 PTC 派生预设，不是 PTC 替代传输层，也不全局接管终端、编辑或其他工具。实际业务 Handler 为 host.read、host.edit 与 host.write（host.edit/host.write 有副作用、非幂等）；test 是兼容保留的诊断 Handler，只有明确诊断需求时使用。测试能力存在不代表其他命令已接入总线。
 
-0.5.1 按正式产品梳理入口和共享策略，不以更名宣称完成生产环境认证。当前真实模型、桌面 UI 和实际沙箱尚未完整验收；同进程内存状态不支持跨重启恢复。
+0.7.0 在 DSH 0.2.1-rc.2 基线上接入 host.edit 与 host.write，并以幂等声明约束有副作用 Handler 的结果复用，不以更名宣称完成生产环境认证。当前真实模型、桌面 UI 和实际沙箱尚未完整验收；同进程内存状态不支持跨重启恢复。
 
 ## 入口及配置层次
 

package/docs/protocol.md

@@ -116,4 +116,4 @@ core 实例的 `diagnostics()` 返回只读用途的独立快照：阶段计数
 
 包的 `./core` 导出 ExecutionBus、Handler、Capability 类型。Handler 只接收输入、requestId、signal、progress 和可选最小 capability，不接收聊天历史。register 返回绑定唯一注册令牌的幂等注销函数，不会误删后来同名注册；已受理请求继续持有原 Handler。
 
-内置 test 和 host.read 没有非幂等写能力。当前没有 ctx.executionBus 服务、远端传输、跨插件动态注册或外部副作用对账契约。扩展有副作用 Handler 前必须另行设计授权、幂等与崩溃对账，不能仅依赖本版请求键。
+内置 test 与 host.read 没有副作用；host.edit 与 host.write 是非幂等写 Handler，通过 `Handler.idempotent=false` 显式声明，其终态结果复用被 `MUTATING_REUSE_DENIED` 拒绝，运行中的重复附着仍只等待同一执行。当前没有 ctx.executionBus 服务、远端传输、跨插件动态注册或外部副作用对账契约。扩展有副作用 Handler 前必须显式声明幂等并另行设计授权与崩溃对账，不能仅依赖本版请求键。

package/docs/releases/0.6.0.md

@@ -0,0 +1,20 @@
+# 萧何 / Xiao He 0.6.0
+
+## DSH 0.2.1-rc.2 兼容与 Handler 幂等约束
+
+本版把兼容目标对齐到 DSH 0.2.1-rc.2，并在 core 层为扩展 Handler 增加可声明的幂等约束。
+
+- 兼容目标升级为 DSH 0.2.1-rc.2：五个宿主 peer 依赖由 0.2.0-rc.2 升至 0.2.1-rc.2，锁文件重建。0.2.0-rc.2 宿主应继续使用 0.5.x。
+- 新增 Handler.idempotent 声明。显式 idempotent:false 时，终态结果复用被拒绝并返回 MUTATING_REUSE_DENIED；运行中的重复 attach 仍只等待同一个执行，不会二次执行。省略该字段默认幂等，保持既有 handler 与调用方行为。
+- 内置 test 与 host.read 显式声明 idempotent:true。
+- 适配 0.2.1-rc.2 新增的 workingDirectory 服务：真实宿主组件测试为 read/run_code 路径注入最小 stub，不改变插件运行逻辑。
+
+## 升级说明
+
+需要 DSH 0.2.1-rc.2。升级前先停止新请求，等待已有任务完成或请求合作取消。本版不自动安装、重写日常配置或重启 DSH。
+
+历史预设 execution-bus-test、配置行 preset-execution-bus-test、工具名、协议字段和既有错误码均不变；错误词汇仅新增 MUTATING_REUSE_DENIED。
+
+## 验证与限制
+
+本地全量 76 项测试通过（含新增幂等回归、真实宿主组件与 Node PTC 组件测试），包白名单校验通过。真实模型、桌面 UI 与实际沙箱仍未完整验收；状态仍为进程内存，不支持跨重启恢复。

package/docs/releases/0.7.0.md

@@ -0,0 +1,18 @@
+# 萧何 / Xiao He 0.7.0
+
+## 宿主工具转发扩展：host.edit 与 host.write
+
+本版在既有 host.read 之外接入两个有副作用的宿主工具，并把幂等声明机制用于真实写操作。
+
+- 新增 host.edit（file_path / old_string / new_string / replace_all?）与 host.write（file_path / content），均经宿主工具管线执行，沿用宿主权限、会话工作目录与沙箱策略。
+- 两者显式声明 Handler.idempotent=false：同一 requestId 的终态结果不可复用，重复提交返回 MUTATING_REUSE_DENIED；运行中的重复附着仍只等待同一执行，不会二次执行。
+- 抽取出通用 hostToolHandler 工厂与 makeHostInvoke 能力抽象，按 host.<tool> handler 名绑定宿主工具与失败错误码；后续接入只读或写工具无需改动核心代码。
+- 新增错误码 HOST_TOOL_FAILED、INVALID_EDIT_INPUT、INVALID_WRITE_INPUT。host.read 行为不变（仍幂等，失败码 HOST_READ_FAILED）。
+
+## 升级说明
+
+需要 DSH 0.2.1-rc.2。本版不强制把原工具改成总线调用，普通任务仍使用原工具；host.edit / host.write 只在你显式提交总线请求时执行。不自动安装、重写日常配置或重启 DSH。历史预设、配置行、工具名、协议字段与既有错误码均不变。
+
+## 验证与限制
+
+本地全量 83 项测试通过（含新增 host.edit / host.write 回归与真实宿主组件测试），包白名单校验通过。真实模型、桌面 UI 与实际沙箱仍未完整验收；状态为进程内存，不支持跨重启恢复。有副作用 Handler 的外部副作用对账仍不在本版范围。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feng0531/dsh-execution-bus",
-  "version": "0.5.1",
+  "version": "0.7.0",
   "type": "module",
   "private": false,
   "license": "SEE LICENSE IN LICENSE",
@@ -52,25 +52,25 @@
   "peerDependencies": {
     "@deepseek-ai/cordis": "~4.0.4",
     "@deepseek-ai/cordis-plugin-include": "~1.0.9",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-jobs": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-scope": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-tools": "0.2.0-rc.2"
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-jobs": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-scope": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.1-rc.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-agent-loop": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-agent-preset": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-agent-tool-presentation": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-fs-local": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-jobs": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-jobs-local": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-persona": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-ptc-runtime-node": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-subprocess-local": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-tool-fs": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-tool-jobs": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-agent-preset": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-agent-tool-presentation": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-fs-local": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-jobs": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-jobs-local": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-persona": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-ptc-runtime-node": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-tool-fs": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-tool-jobs": "0.2.1-rc.2",
     "@types/js-yaml": "4.0.9",
     "@types/node": "^22",
     "prettier": "3.6.2",