@gestaltrun/dsh-im-runtime 0.1.0 → 0.1.5

package/lib/types/transport.d.ts

@@ -1,6 +1,7 @@
 /** Provider-facing IM transport capability registered with the runtime. */
 import type { CredentialRecord } from '@deepseek-ai/dsh-credentials';
-import type { ImDeliveryOperationId, ImConversationPresentation, ImInboundPageResult, ImInboundSenderEvidence, ImMessageContent, ImProviderCursorCommitResult, ImProviderCursorOwner, ImProviderCursorView } from './delivery-types.ts';
+import type { ImSdkProvider } from './sdk.ts';
+import type { ImDeliveryOperationId, ImConversationPresentation, ImInboundPageResult, ImInboundSenderEvidence, ImMessageContent, ImProviderCursorCommitResult, ImProviderCursorOwner, ImProviderCursorView, ImRealDeliveryScope } from './delivery-types.ts';
 import type { ImAccountCandidate, ImAccountIdentity, ImAccountSetupRequest, ImAccountView, ImAssignedActorCandidate, ImConversationCandidate, ImConversationCandidatePage, ImConversationKind, ImDirectRecipient, ImPlatform, ImPlatformLoginAttemptId, ImPlatformLoginStatus, ImRevision, ImRouteId, ImRouteTarget } from './types.ts';
 export type { ImAccountSetupRequest, ImConversationCandidate, ImConversationCandidatePage, ImDingTalkAccountSetupRequest, ImWangwangAccountSetupRequest } from './types.ts';
 /** Safe provider result plus an optional opaque credential record for durable storage. */
@@ -16,6 +17,8 @@ export interface ImTransportAccountInspection {
 }
 /** Provider message before the runtime classifies sender evidence. */
 export interface ImTransportInboundMessage {
+    /** Provider facts for this message; absent fields stay unknown after persistence. */
+    readonly uploadIdentity?: import('./upload-types.ts').ImUploadIdentity;
     readonly externalMessageId: string;
     readonly senderEvidence: ImInboundSenderEvidence;
     /** Provider-normalized safe presentation; raw credentials, headers, and connection settings are excluded. */
@@ -31,6 +34,8 @@ export interface ImTransportConversationPage {
     readonly conversationKind: ImConversationKind;
     /** Provider-known group or peer labels; absent facts stay absent. */
     readonly presentation?: ImConversationPresentation;
+    /** Platform-provided peer identity for direct sends; never the conversation id. */
+    readonly directRecipient?: ImDirectRecipient;
     readonly messages: readonly ImTransportInboundMessage[];
 }
 /** One provider page that may span multiple conversations. */
@@ -68,11 +73,38 @@ export interface ImTransportListenPlan {
 }
 /** Provider listener lifetime returned only after the listener is ready. */
 export interface ImTransportListener {
-    /** Settles after the listener ends; rejects when an established listener fails. */
+    /** Settles after the listener ends; rejects with ImTransportListenerError when the provider can classify a failure. The runtime owns bounded retry scheduling. */
     readonly done: Promise<void>;
     /** Request an orderly stop. The `done` promise must settle after this request. @returns when provider stop has been requested. */
     dispose(): Promise<void>;
 }
+/** One SDK message; the runtime resolves its buyer into an existing SaaS conversation. */
+export interface ImRealtimeInboundRequest {
+    readonly account: ImAccountView;
+    readonly sdkGeneration: number;
+    readonly buyerUid: string;
+    readonly externalMessageId: string;
+    readonly content: ImMessageContent;
+    readonly occurredAt: string;
+}
+/** No deferred message is persisted; storage failures reject rather than returning duplicate. */
+export type ImRealtimeInboundResult = {
+    readonly state: 'admitted' | 'duplicate';
+    readonly scope: ImRealDeliveryScope;
+} | {
+    readonly state: 'deferred';
+    readonly reason: 'account-changed' | 'sdk-offline' | 'sdk-generation' | 'buyer-unknown' | 'buyer-ambiguous' | 'assignment-route' | 'route-unavailable' | 'native-sender';
+};
+/** Exact platform message lookup, optionally confined to one complete conversation identity. */
+export type ImInboundContentQuery = {
+    readonly externalMessageId: string;
+} & ({
+    readonly conversationId: string;
+    readonly conversationKind: ImConversationKind;
+} | {
+    readonly conversationId?: never;
+    readonly conversationKind?: never;
+});
 /** Sink owned by the runtime while a provider listener is active. */
 export interface ImTransportSink {
     /**
@@ -82,10 +114,16 @@ export interface ImTransportSink {
      * @returns every durable group receipt and the final cursor result.
      */
     receivePage(page: ImTransportInboundPage): Promise<ImTransportInboundPageReceipt>;
+    /** @param request - SDK account generation, peer and normalized message. @param signal - optional caller cancellation while waiting for reception; absence uses the listener lifetime. @returns admission into an existing scope, a duplicate, or a deferred reason; never advances SaaS cursors. */
+    receiveRealtime(request: ImRealtimeInboundRequest, signal?: AbortSignal): Promise<ImRealtimeInboundResult>;
+    /** @param request - exact platform message id, optionally restricted to one conversation in this listener account. @returns stored content or absence; storage failures throw. */
+    findInboundContent(request: ImInboundContentQuery): ImMessageContent | undefined;
+    /** @param uid - SDK sender UID. @returns whether it names the configured merchant, main account or an observed native service account; storage failures throw. */
+    isNativeSender(uid: string): boolean;
     /** @param owner - provider feed identity. @returns the durable merchant cursor, or a null cursor before the first listen. */
     getProviderCursor(owner: ImProviderCursorOwner): ImProviderCursorView;
 }
-/** Automatic-send authority survives preparation only within its customer's handling epoch. */
+/** Send authority survives preparation only within the caller's customer handling epoch. */
 export interface ImAutomaticSendAuthorization {
     /** Cancellation during preparation; customer revocation stops affecting it after submission. */
     readonly signal: AbortSignal;
@@ -105,7 +143,7 @@ export interface ImTransportSendRequest {
     readonly requestId: string;
     readonly text: string;
     readonly aiTag?: boolean;
-    /** Required for automatic sends; absent for manual sends. Providers must authorize immediately before external submission. */
+    /** Required for automatic sends and handling-constrained manual sends. Providers authorize immediately before external submission. */
     readonly submission?: ImAutomaticSendAuthorization;
 }
 /** Provider send outcome before or after receipt confirmation. */
@@ -133,6 +171,8 @@ export interface ImTransportConfirmRequest {
 /** Complete provider capability registered under one platform. */
 export interface ImTransport {
     readonly platform: ImPlatform;
+    /** Optional secondary SDK connection. Wangwang text and media both require an online generation of this connection. */
+    readonly sdk?: ImSdkProvider | undefined;
     /** Start or rejoin an interactive provider login. Implementations return only safe authorization instructions. */
     startLogin?(signal: AbortSignal): Promise<ImPlatformLoginStatus>;
     /** @param attemptId - provider-minted login identity. @returns its current safe state. */

package/lib/types/transports.d.ts

@@ -10,6 +10,13 @@ export declare class ImTransportError extends Error {
     /** @param code - stable failure code. @param message - diagnostic detail. */
     constructor(code: ImTransportErrorCode, message: string);
 }
+/** Provider listener failure with a safe code and an explicit authorization disposition. */
+export declare class ImTransportListenerError extends Error {
+    readonly code: string;
+    readonly authorization: boolean;
+    /** @param code - stable platform error code. @param authorization - whether credentials require operator action. @param cause - underlying provider failure, excluded from public state. */
+    constructor(code: string, authorization?: boolean, cause?: unknown);
+}
 declare module '@deepseek-ai/cordis' {
     interface Context {
         imTransports: ImTransports;

package/lib/types/types.d.ts

@@ -4,7 +4,9 @@ import type { CredentialKey } from '@deepseek-ai/dsh-credentials/types';
 import type { SessionId } from '@deepseek-ai/dsh-session/types';
 import type { WorkspaceId } from '@deepseek-ai/dsh-workspace/types';
 import type { ImDeliveryOperationId, ImSimulationDeliveryScope, ImSimulationInstanceId } from './delivery-types.ts';
+export { inlineImImage, imMessageText } from './inline-image.ts';
 export type * from './delivery-types.ts';
+export type { ImSdkStatus, ImSdkState, ImSdkFailureCode } from './sdk.ts';
 /** Identifier minted by the Host for one configured account. */
 export type ImAccountId = Branded<'ImAccountId'>;
 /** Identifier minted by the Host for one route lifecycle. */
@@ -19,6 +21,8 @@ export type ImRevision = Branded<'ImRevision'>;
 export type ImAccountSetupId = Branded<'ImAccountSetupId'>;
 /** Host-provider identifier for one interactive platform login process. */
 export type ImPlatformLoginAttemptId = Branded<'ImPlatformLoginAttemptId'>;
+/** Verified OAuth subject used by the product account authorization service. */
+export type ImTaobaoUserId = Branded<'MerchantUserId'>;
 /** Supported product IM platforms. */
 export type ImPlatform = 'dingtalk' | 'wangwang';
 /** Supported conversation categories. */
@@ -120,6 +124,8 @@ export interface ImAccountSetupPreview {
 export interface ImConfirmAccountSetupRequest {
     readonly setupId: ImAccountSetupId;
     readonly operationId: ImOperationId;
+    /** Initial automatic-handling pause, atomically persisted before publication; omission creates an unpaused account. */
+    readonly initialPaused?: boolean;
 }
 /** Result of releasing one unconfirmed setup attempt. */
 export type ImCancelAccountSetupResult = {
@@ -198,6 +204,10 @@ export interface ImAccountView {
     readonly authorization: ImAccountAuthorization;
     readonly listener: ImAccountListener;
     readonly connectionIntent: ImAccountConnectionIntent;
+    /** Explicit SDK restoration intent; absence forbids automatic login, and kicked requires operator login. */
+    readonly sdkConnectionIntent?: 'online' | 'kicked';
+    /** Changes on each explicit SDK command or persisted kickout; unrelated account refreshes preserve it. */
+    readonly sdkConnectionIntentRevision?: ImRevision;
     readonly paused: boolean;
     readonly revision: ImRevision;
     readonly createdAt: string;
@@ -367,12 +377,12 @@ export interface ImSimulationFrozenTarget {
     readonly groupTrigger?: ImGroupTrigger;
     readonly directRecipient?: ImDirectRecipient;
 }
-/** Durable two-Session simulation instance. `stopped` and `failed` are terminal. */
+/** Durable manual or two-Session simulation instance. `stopped` and `failed` are terminal. */
 export interface ImSimulationInstanceView {
     readonly instanceId: ImSimulationInstanceId;
     readonly status: 'creating' | 'running' | 'stopping' | 'stopped' | 'failed';
-    readonly simUserSessionId: SessionId;
-    readonly simUserWorkspaceId: WorkspaceId;
+    readonly simUserSessionId?: SessionId;
+    readonly simUserWorkspaceId?: WorkspaceId;
     readonly testedSessionId: SessionId;
     readonly target: ImSimulationFrozenTarget;
     readonly speakingMembers: readonly ImSimulationParticipant[];
@@ -412,14 +422,18 @@ export interface ImCreateSimulationInstanceRequest {
     readonly conversationId?: string;
     readonly speakingMembers?: readonly ImSimulationParticipant[];
 }
+/** Create an operator-driven simulation against an enabled all-direct route. */
+export interface ImCreateManualSimulationInstanceRequest {
+    readonly routeId: ImRouteId;
+}
 /** Trusted navigation and delivery facts for either Session in one instance. */
 export interface ImSimulationSessionScope {
     readonly instanceId: ImSimulationInstanceId;
     readonly role: 'sim-user' | 'tested';
     readonly sessionId: SessionId;
-    readonly peerSessionId: SessionId;
+    readonly peerSessionId?: SessionId;
     readonly workspaceId: WorkspaceId;
-    readonly peerWorkspaceId: WorkspaceId;
+    readonly peerWorkspaceId?: WorkspaceId;
     readonly deliveryScope: ImSimulationDeliveryScope;
     readonly status: ImSimulationInstanceView['status'];
 }
@@ -481,6 +495,8 @@ export interface ImRuntimeSnapshot {
 }
 /** Post-commit configuration change notification. */
 export interface ImRuntimeChange {
+    /** A successful placement import or checkpoint recovery has released reception; ordinary account edits never request SDK recovery. */
+    readonly sdkRecoveryRequested?: true;
     readonly revision: number;
     readonly kind: 'account' | 'account-listener' | 'route' | 'simulation-target' | 'simulation-instance' | 'transport';
     readonly platform?: ImPlatform;
@@ -502,3 +518,4 @@ export type ImRouteResolution = {
 } | {
     readonly state: 'unmatched';
 };
+export type * from './read-types.ts';

package/lib/types/typing.d.ts

@@ -0,0 +1,33 @@
+/** Process-local typing for observed single chats; no Session or storage writes. */
+import type { Context } from '@deepseek-ai/cordis';
+import type { ImDeliveryScope, ImRealDeliveryScope } from './delivery-types.ts';
+import type { ImDirectRecipient } from './types.ts';
+interface Identity {
+    readonly buyer: ImDirectRecipient | undefined;
+    readonly selfUid: string;
+}
+/** Runtime-owned transient observation; only watched, verified Wangwang single chats are admitted. */
+export declare class ImTyping {
+    private readonly ctx;
+    private readonly identity;
+    private readonly timeoutMs;
+    private readonly observations;
+    private sdk;
+    private readonly binding;
+    /** @param ctx - runtime lifecycle owner. @param identity - authoritative account and buyer lookup. @param timeoutMs - resolved positive auto-hide interval. */
+    constructor(ctx: Context, identity: (scope: ImRealDeliveryScope) => Identity | undefined, timeoutMs: number);
+    /** @param scope - complete delivery identity. @returns the verified online generation while typing is unexpired; otherwise absence. */
+    snapshot(scope: ImDeliveryScope): {
+        readonly generation: number;
+    } | undefined;
+    /** @param scope - immutable sidebar conversation. @param listener - transient state invalidation. @returns disposer; the last observer releases that conversation and its timer. */
+    subscribe(scope: ImDeliveryScope, listener: () => void): () => void;
+    /** Stop SDK admission and join accepted callbacks before runtime storage closes. */
+    dispose(): Promise<void>;
+    private identityOf;
+    private current;
+    private accept;
+    private clear;
+    private publish;
+}
+export {};

package/lib/types/upload-types.d.ts

@@ -0,0 +1,121 @@
+/** Host-only durable observations for the customer-message upload queue. */
+import type { Branded } from '@deepseek-ai/dsh-brand';
+import type { ImDeliveryScope, ImInboundMessageView, ImOutboundView } from './delivery-types.ts';
+/** Destination captured without credentials; retries cannot follow a different shop or server. */
+export interface ImUploadTarget {
+    readonly serverOrigin: string;
+    readonly tenantId: Branded<'MerchantTenantId'>;
+    readonly shopAccountId: string;
+    readonly traffic: 'formal' | 'test' | 'simulation';
+    readonly testRunId: string | null;
+}
+/** Host-minted identity of an immutable upload observation. */
+export type ImUploadObservationId = Branded<'ImUploadObservationId'>;
+/** Platform facts captured with a message; missing fields remain unknown on replay. */
+export interface ImUploadIdentity {
+    readonly senderAccountId: string | null;
+    readonly senderDisplayName: string | null;
+    readonly senderDomain: string | null;
+    readonly assignedAccountId: string | null;
+}
+/** Persisted control result sent through the message queue; replay never invokes control. */
+export interface ImUploadConversationEvent {
+    readonly eventId: string;
+    readonly conversationKey: string;
+    readonly accountId: string;
+    readonly kind: 'ai_to_human' | 'hosting_disabled' | 'hosting_resumed';
+    readonly occurredAt: string;
+    readonly controlRevision: string;
+    readonly relatedMessageIds: readonly string[];
+    readonly sourceOperationId: string;
+    readonly sourceKind: 'dsh-control-result';
+    readonly payloadHash: string;
+}
+/** Authorized successful operation; SQLite supplies revision and commit time. */
+export interface ImUploadControlResult {
+    readonly target: ImUploadTarget;
+    readonly accountId: string;
+    readonly kind: ImUploadConversationEvent['kind'];
+    readonly sourceOperationId: string;
+    readonly relatedMessageIds: readonly string[];
+}
+/** One immutable message revision committed with its runtime mutation. */
+export interface ImUploadObservation {
+    readonly id: ImUploadObservationId;
+    readonly target: ImUploadTarget;
+    readonly scope: ImDeliveryScope;
+    readonly observedAt: string;
+    readonly identity?: ImUploadIdentity | undefined;
+    readonly message: {
+        readonly kind: 'inbound';
+        readonly value: ImInboundMessageView;
+    } | {
+        readonly kind: 'outbound';
+        readonly value: ImOutboundView;
+    } | {
+        readonly kind: 'conversation-event';
+        readonly value: ImUploadConversationEvent;
+    };
+}
+/** T2 realtime request row; upstream message identity is mandatory. */
+export interface ImUploadMessage {
+    readonly senderAccountId: string | null;
+    readonly senderDisplayName: string | null;
+    readonly senderDomain: string | null;
+    readonly assignedAccountId: string | null;
+    readonly shopAccountId: string;
+    readonly messageId: string;
+    readonly conversationId: string;
+    readonly version: string;
+    readonly sourceUpdatedAt: string;
+    readonly sourceOrder: {
+        readonly kind: 'time';
+        readonly at: string;
+    };
+    readonly occurredAt: string;
+    readonly senderKind: 'buyer' | 'ai' | 'dsh_human' | 'native_human';
+    readonly senderAttribution: 'buyer' | 'our_ai' | 'human' | 'unknown';
+    readonly attribution: {
+        readonly method: string;
+        readonly status: string;
+        readonly version: string;
+        readonly evidence: string | null;
+    };
+    readonly senderRole: string | null;
+    readonly content: string | null;
+    readonly contentJson: unknown;
+    readonly mediaJson: unknown;
+    readonly recordStatus: string | null;
+    readonly buyerAccountId: string | null;
+    readonly traffic: 'formal' | 'test' | 'simulation';
+    readonly testRunId: string | null;
+}
+/** Transient failures retry; rejected observations remain durable for manual review. */
+export type ImUploadResult = {
+    readonly kind: 'accepted';
+} | {
+    readonly kind: 'retry';
+    readonly reason: string;
+} | {
+    readonly kind: 'deferred';
+    readonly reason: string;
+} | {
+    readonly kind: 'rejected';
+    readonly reason: string;
+};
+/** Host-owned authenticated request. It must reject redirects and honor cancellation. */
+export type ImUploadTransport = (target: ImUploadTarget, messages: readonly ImUploadMessage[], signal: AbortSignal, events?: readonly ImUploadConversationEvent[]) => Promise<ImUploadResult>;
+/** Capture eligibility at mutation time; absence leaves unrelated IM traffic local. */
+export interface ImUploadBinding {
+    /** @param scope - observed conversation. @param purpose - control-result capture, or message capture when absent. @returns original authorized shop, or absence when capture is ineligible. */
+    target(scope: ImDeliveryScope, purpose?: 'control'): ImUploadTarget | undefined;
+    /** @param scope - conversation captured by the upload. @returns verified sending account, or absence to keep identity unknown. */
+    identity?(scope: ImDeliveryScope): {
+        readonly accountId: string;
+        readonly displayName?: string;
+        readonly domain: string;
+    } | undefined;
+    /** @param scope - control whose capture failed. @returns a safe reason code without credentials or account names. */
+    captureFailure?(scope: ImDeliveryScope): string;
+    readonly send: ImUploadTransport;
+}

package/lib/types.js

@@ -1 +1,2 @@
-export {};
+import { n as inlineImImage, t as imMessageText } from "./inline-image-DuX6vSEI.js";
+export { imMessageText, inlineImImage };

package/locale/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "IM runtime",
-    "description": "Keeps IM accounts, conversation bindings, and delivery state, and routes messages to agents"
+    "description": "Manages chat accounts, takeover rules, and message status, and passes new messages to AI for replies"
   }
 }

package/locale/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "IM 运行时",
-    "description": "保存 IM 账号、会话绑定与消息投递状态，并把消息交给 Agent 处理"
+    "description": "管理聊天账号、接管规则与消息收发状态，并将新消息交给 AI 回复"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gestaltrun/dsh-im-runtime",
-  "version": "0.1.0",
+  "version": "0.1.5",
   "description": "Durable IM account and routing runtime for Gestaltrun Desktop",
   "type": "module",
   "main": "lib/index.js",
@@ -19,7 +19,11 @@
       "default": "./lib/tools.js"
     },
     "./package.json": "./package.json",
-    "./locale/*.json": "./locale/*.json"
+    "./locale/*.json": "./locale/*.json",
+    "./read-receipts": {
+      "types": "./lib/types/read-receipts.d.ts",
+      "default": "./lib/read-receipts.js"
+    }
   },
   "files": [
     "lib",
@@ -49,54 +53,76 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "4.0.5-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-agent-default-model": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-brand": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-llm": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session-persistence": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-storage-domain": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-tools": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-workspace": "0.2.1-alpha.3"
+    "@deepseek-ai/cordis": "4.0.6-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-agent-default-model": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-credentials": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session-persistence": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-storage-domain": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-workspace": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-attachment": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-fs": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-working-directory": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-storage": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-storage-json": "0.2.2-alpha.2"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.5-alpha.1",
-    "@deepseek-ai/cordis-plugin-include": "1.0.10-alpha.1",
-    "@deepseek-ai/cordis-plugin-loader": "1.0.6-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-agent-default-model": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-agent-loop": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-agent-loop-testkit": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-brand": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-credentials-local": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-llm": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session-persistence": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-storage": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-storage-domain": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-storage-json": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-tools": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-workspace": "0.2.1-alpha.3",
+    "@deepseek-ai/cordis": "4.0.6-alpha.1",
+    "@deepseek-ai/cordis-plugin-include": "1.0.11-alpha.1",
+    "@deepseek-ai/cordis-plugin-loader": "1.0.7-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-agent-default-model": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-agent-loop": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-agent-loop-testkit": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-credentials": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-credentials-local": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session-persistence": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-storage": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-storage-domain": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-storage-json": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-workspace": "0.2.2-alpha.2",
     "@types/node": "22.20.0",
     "tsdown": "0.22.2",
     "typescript": "6.0.3",
     "vite-tsconfig-paths": "6.1.1",
     "vitest": "4.1.8",
-    "@gestaltrun/dsh-workspace-bundle": "^0.1.0"
+    "@gestaltrun/dsh-workspace-bundle": "^0.1.0",
+    "@deepseek-ai/dsh-subagent": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-schedule": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session-snapshot": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-llm-replay": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-loader-smoke": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-fs-local": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-working-directory": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session-query-sqlite": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-agent-preset": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-attachment-local": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-attachment": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-fs": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-tool-testkit": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-tool-executor-native": "0.2.2-alpha.2"
   },
   "scripts": {
     "build": "node scripts/clean.mjs && tsc -p tsconfig.build.json && tsdown",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "smoke:loader": "node scripts/smoke-loader.mjs"
+    "typecheck": "tsc --noEmit && tsc -p tsconfig.test.json --noEmit",
+    "test": "vitest run && node tests/run-restart.mjs && node ../cloud-placement/tests/run.mjs ../im-runtime/tests/placement-return.test.ts ../im-runtime/tests/checkpoint-recovery.test.ts ../im-runtime/tests/checkpoint-recovery-recorded.test.ts ../im-runtime/tests/checkpoint-cursor-conflict.test.ts ../im-runtime/tests/checkpoint-lifecycle.test.ts ../im-runtime/tests/released-placement-resume.test.ts ../im-runtime/tests/placement-task-ownership.test.ts",
+    "smoke:loader": "node scripts/smoke-loader.mjs",
+    "test:restart": "node tests/run-restart.mjs",
+    "test:typecheck": "tsc -p tsconfig.test.json --noEmit"
   }
 }