@khorsheed/dsh-local-agent-dsh-headless 0.2.0-rc.1 → 0.2.0-rc.3

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # 变更记录
 
+## 0.2.0-rc.3（2026-10-22）
+
+（版本号说明：本包 0.2.0-rc.2 曾被发布后又撤回，npm 永久烧掉该版本号——发布侧报错「Cannot stage previously published version」——为守住家族「同一版本线」纪律（check:release-groups），本波家族整体上移 rc.3，内容即 rc.2 计划稿。）
+
+- **persona 行适配宿主 0.2.1**：子 dsh patch 的 system-prompt 行不再引用 `{{cwd}}`——0.2.1 删除了该 prompt 变量，严格引用直接让模型请求失败（prod 3080 切到 0.2.1-rc.1 后的轮次失败即此）；工作目录改由宿主 working-directory 服务作为必需用户上下文提供，该条款随之删除。合并的 `persona` 字段按 0.2.1 的拆分改写为 `personaPrefix`/`personaSuffix`。
+- **适配宿主 0.2.1（host-021）**：`engines.dsh` 声明为 `>=0.1.5-rc.1 <0.3.0-0`（声明即独占兼容裁决，未验证的宿主线安装期 fail-closed）；invariant 伴随件随官方删除 invariants 体系退役。运行时与 peer 区间加宽——`@deepseek-ai/dsh-cmdline`、`@deepseek-ai/dsh-ptc-runtime-node` 等补齐 0.2.0 与 0.2.1 分支（semver 预发布只覆盖比较子点名的三元组，原 `^0.1.x-rc.x` 区间在严格 npm/pnpm 解析下不覆盖 0.2.x 宿主）。`dsh.compat.verifiedHost` 前移至 0.2.1-rc.1（host-021 波对 0.2.1-rc.1 树全量构建+测试绿）。
+
 ## 0.2.0-rc.1（2026-09-30）
 
 家族同版联动：家族折叠（委派工具收进各 provider 的 `./tool` 入口，`local-agent-tool-subagent` 退役）随 0.2.0-rc.1 线发布。无功能变更。

package/README.en.md

@@ -62,12 +62,12 @@ The parent `local-agent-dsh` provider supplies `--model` automatically: the harn
 ## Compatibility
 
 - npm release line (`@deepseek-ai/dsh@0.1.5-rc.1`): ✅ full — the first release line (0.1.0-rc.6) is already based on the 0.1.5-rc.1 API surface, full build+test green; minHost is 0.1.5-rc.1, and older hosts have no earlier release line to fall back to.
-- source line (deepseek-harness master): ✅ (verifiedHost: 0.1.5-rc.1)
+- source line (deepseek-harness master): ✅ (verifiedHost: 0.2.1-rc.1) — host-021 wave: full build+test green against the 0.2.1-rc.1 tree; the family delegation migrated to `ctx.subagents.startActivation` (managed activation), and run.id is now unique per execution.
 
 ## Known Limitations
 
 - **Never add this bundle to an interactive profile's `bundles`** — its sub-profile-only patch rows (persona override, `hmr` off, `tools` mode, the `ptc-runtime` insert, the member-bridge MCP) collide with an interactive composition and leak overrides into real user sessions. The package **declares no `dsh.bundle`** (the manifest carries `dsh.composition.component: "sub-profile-patch"`), so a hand-added bundles row fails loud at boot in `loadProfile` — that is the gate.
-- **`dsh plugin add` on this package mounts nothing, and need not** — the package used to declare `dsh.bundle`, and reconcilePlugins auto-mounts every `dsh.bundle`-declaring direct dependency into the composition's layer stack: both the 2026-08-23 P0 (duplicate `code-runtime` in the prod web profile) and its 2026-09-03 G3 recurrence were exactly that mount. The declaration is gone (T6); installing the package directly now earns only a "plain dependency" warning and mounts nothing — a **transitive** install through `@khorsheed/dsh-local-agent-dsh` suffices, and the parent provider auto-provisions. The package's own invariant (the `/invariant` subpath) still fails loud when it detects a web composition (the `webStartup` service).
+- **`dsh plugin add` on this package mounts nothing, and need not** — the package used to declare `dsh.bundle`, and reconcilePlugins auto-mounts every `dsh.bundle`-declaring direct dependency into the composition's layer stack: both the 2026-08-23 P0 (duplicate `code-runtime` in the prod web profile) and its 2026-09-03 G3 recurrence were exactly that mount. The declaration is gone (T6); installing the package directly now earns only a "plain dependency" warning and mounts nothing — a **transitive** install through `@khorsheed/dsh-local-agent-dsh` suffices, and the parent provider auto-provisions.
 - No other `local-agent` family bundles belong in this composition — nothing here spawns another dsh.
 - Patch edits must be boot-verified before landing (`dsh preflight` or one real sub-dsh launch): the `!!js` tag is scalar-only, and a mistagged collection fails at profile boot.
 
@@ -101,11 +101,9 @@ The startup provider parses the task positional plus the mutually exclusive `--s
 
 **The wire contract (`src/wire.ts`).** A family-internal newline-delimited JSON-RPC 2.0 over stdio, framed exactly like the official `JsonRpcLineTransport` (`@deepseek-ai/dsh-sdk-protocol`), so a future swap to the official SDK server stays mechanical — the official server is not usable today: its wire has no turn-level interrupt (`initialize` / `session/prompt` / `shutdown` only), and graceful interrupt is the live driver's reason to exist (upstream seam registry: the SDK-wire-interrupt entry). Every request is a quick acknowledgement (`turn/start` answers "accepted"), and the round's events and terminal outcome flow back as notifications, so a long turn never holds a request open. `turn/start` carries the parent's round number and echoes it on every `session/event` / `session/idle` of that round, so the parent can drop a cancelled round's late unwind instead of letting it mis-settle the next round; `session/idle` fires only AFTER the session log is flushed, so a file-based reconciliation right after it sees the complete round. The handshake (`initialize`) reports the server name and protocol version (currently 1); `session/prepare` lets the parent validate the resident process's bound model and reasoning effort before starting a round — no session created, nothing generated. One resident process serves one member.
 
-**Composition guard.** The `/invariant` subpath registers a composition invariant: detecting the `webStartup` service (the marker of a web composition) fails loud. The loader's duplicate-id failure is loud but cryptic, and only fires when ids collide — if upstream renamed a row id, the persona override would leak into real user sessions silently; the invariant is the CLEAR failure for the non-colliding case.
-
 **Preset roster (optional).** When the sub-profile's patch carries an extra `@deepseek-ai/dsh-agent-presets` layer — written by the parent provider when the scope declares a preset — the agent loader joins it inside `setup`, before the agent is published, so the preset's tools and prompt sections exist before the first prompt assembly. Without the layer it does nothing: the model-facing rows stay in the host plane and the agent reads the global layer, byte for byte the behavior before this existed. A roster that REFUSES (unknown preset id, broken composition) is not degraded past: the mount rejects, the agent creation rolls back, and the launch fails naming the preset — a sub-dsh that silently ran the global layer after being told to run preset X would attribute the round to a capability face it never had.
 
-**Exports.** `.` exports the runner plugin body (`apply` / `inject` / `Config`); `/startup` exports the command-line provider (the source of the `localAgentDshHeadlessStartup` service); `/wire` exports the wire contract types and protocol constants; `/invariant` exports the composition-guard companion.
+**Exports.** `.` exports the runner plugin body (`apply` / `inject` / `Config`); `/startup` exports the command-line provider (the source of the `localAgentDshHeadlessStartup` service); `/wire` exports the wire contract types and protocol constants.
 
 </details>
 

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # last confirmed-consistent state. Both languages carry equal authority; after
 # editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/local-agent-dsh-headless/README.en.md
-packages/local-agent-dsh-headless/README.en.md: 9b4595ebac334b200bf1ae4e799106440d19827a
-packages/local-agent-dsh-headless/README.md: f3d80d354be63982355cd1ee7eea5e9da29ae300
+packages/local-agent-dsh-headless/README.en.md: 870b188762ff71253b0d1e2e473e8a78c1ed228d
+packages/local-agent-dsh-headless/README.md: 0ae196a948c3d01ea55b63019f53a222d228e446

package/README.md

@@ -62,12 +62,12 @@ dsh --profile headless-local-agent-dsh --model deepseek-official/deepseek-v4-pro
 ## Compatibility
 
 - npm 发布线（`@deepseek-ai/dsh@0.1.5-rc.1`）：✅ 完整——首个发布线（0.1.0-rc.6）即以 0.1.5-rc.1 API 面为基线，全量构建测试通过；minHost 即 0.1.5-rc.1，更旧的宿主没有可回退的旧发布线。
-- 源码线（deepseek-harness master）：✅（verifiedHost: 0.1.5-rc.1）
+- 源码线（deepseek-harness master）：✅（verifiedHost: 0.2.1-rc.1）——host-021 波对 0.2.1-rc.1 树全量 build+test 绿；家族委派迁移到 `ctx.subagents.startActivation`（受管 activation），run.id 改为每次执行唯一。
 
 ## 已知限制
 
 - **绝不要把这个 bundle 加进交互式 profile 的 `bundles`**——它的子 profile 专属 patch 行（persona 覆盖、`hmr` 禁用、`tools` mode、`ptc-runtime` insert、member-bridge MCP）会撞交互式组合，并把覆盖泄漏进真实用户会话。本包**不声明 `dsh.bundle`**（manifest 里标的是 `dsh.composition.component: "sub-profile-patch"`），手工加的 bundles 行在 boot 的 `loadProfile` 处直接 fail loud，这正是一道闸。
-- **`dsh plugin add` 它本身不挂载任何东西，也无需如此**——本包曾声明 `dsh.bundle`，而 reconcilePlugins 会把声明该字段的直接依赖自动挂进组合的 layer 栈：2026-08-23 P0（prod web profile 撞 duplicate `code-runtime`）与 2026-09-03 G3 复发都是这一挂。声明已撤（T6），装成直接依赖只会得到一条 "plain dependency" 警告、不挂载——经 `@khorsheed/dsh-local-agent-dsh` **传递**安装即可，父级 provider 会自动 provision。包内不变量（`/invariant` 子路径）对挂进 web 组合（检出 `webStartup` 服务）依旧 fail loud。
+- **`dsh plugin add` 它本身不挂载任何东西，也无需如此**——本包曾声明 `dsh.bundle`，而 reconcilePlugins 会把声明该字段的直接依赖自动挂进组合的 layer 栈：2026-08-23 P0（prod web profile 撞 duplicate `code-runtime`）与 2026-09-03 G3 复发都是这一挂。声明已撤（T6），装成直接依赖只会得到一条 "plain dependency" 警告、不挂载——经 `@khorsheed/dsh-local-agent-dsh` **传递**安装即可，父级 provider 会自动 provision。
 - 此 composition 里不装任何其他 `local-agent` 家族 bundle——这里没有任何东西再 spawn 一个 dsh。
 - patch 改动落地前必须做启动级验证（`dsh preflight` 或真实拉起一次子 dsh）：`!!js` 标签只支持标量，误标集合会在 profile 启动时直接失败。
 
@@ -101,11 +101,9 @@ startup provider 解析 task 位置参数与互斥的 `--session-id` / `--resume
 
 **wire 契约（`src/wire.ts`）。** 家族内部的行分隔 JSON-RPC 2.0 over stdio，帧格式与官方 `JsonRpcLineTransport`（`@deepseek-ai/dsh-sdk-protocol`）完全一致，将来换成官方 SDK server 只是机械替换——官方 server 今天用不了：它的 wire 没有轮次级中断（只有 `initialize` / `session/prompt` / `shutdown`），而优雅中断正是 live driver 存在的理由（上游 seam 登记：SDK-wire-interrupt 条目）。所有请求都是快速应答（`turn/start` 应答即「已受理」），轮次的事件与结局全部以通知回流，长轮永远不占着一条请求。`turn/start` 带上父侧的轮次号，并在本轮每个 `session/event` / `session/idle` 通知上回显，父侧借此丢弃被取消轮次的迟到收尾，不让它误 settle 下一轮；`session/idle` 在会话日志落盘**之后**才发出，父侧随即做的文件对账看到的就是完整一轮。握手（`initialize`）回报 server 名与协议版本（当前 1）；`session/prepare` 让父侧在起轮之前校验常驻进程绑定的模型与推理强度——不建会话、不生成。一个常驻进程服务一个成员。
 
-**组合守卫。** `/invariant` 子路径注册一条组合不变量：检出 `webStartup` 服务（web 组合的标记）即 fail loud。loader 的 duplicate-id 失败虽响但难读，且只在 id 相撞时才触发——若上游改了 row id，persona 覆盖就会静音泄漏进真实用户会话；不变量是不相撞情形的那个清晰失败。
-
 **preset roster（可选）。** 如果子 profile 的 patch 多带一层 `@deepseek-ai/dsh-agent-presets`（父级 provider 在这个 scope 声明了 preset 时写进去的），agent loader 会在 `setup` 里 join 它——在 agent 发布之前，因此 preset 的工具与提示词片段在第一次组装提示词之前就在位。没有这一层就什么也不做，模型可见的行留在宿主面、agent 从全局层读，与本行为出现之前逐字节相同。roster **拒绝**（preset id 不存在、composition 坏了）不会被降级绕过：mount 抛错，agent 创建回滚，启动带着 preset 名失败——一个被要求跑 preset X 却悄悄跑了全局层的子 dsh，会把这一轮归到它从没有过的能力面上。
 
-**导出。** `.` 导出 runner 插件本体（`apply` / `inject` / `Config`）；`/startup` 导出命令行 provider（`localAgentDshHeadlessStartup` 服务的来源）；`/wire` 导出 wire 契约类型与协议常量；`/invariant` 导出组合守卫 companion。
+**导出。** `.` 导出 runner 插件本体（`apply` / `inject` / `Config`）；`/startup` 导出命令行 provider（`localAgentDshHeadlessStartup` 服务的来源）；`/wire` 导出 wire 契约类型与协议常量。
 
 </details>
 

package/cordis.patch.yml

@@ -20,8 +20,11 @@
 
 - id: system-prompt
   config:
-    persona: >-
-      You are a coding agent powered by the {{model}} model. Your working directory is {{cwd}}.
+    # Host 0.2.1 split `persona` into personaPrefix/personaSuffix and removed the
+    # {{cwd}} prompt variable; the working-directory service supplies the directory
+    # as required user context instead.
+    personaPrefix: >-
+      You are a coding agent powered by the {{model}} model.
 
 # The shared module-reload HMR row stays off; the launcher's watch-only
 # fallback still keeps the user patch layers live until the run exits.

package/package.json

@@ -8,7 +8,7 @@
     "local-agent",
     "headless"
   ],
-  "version": "0.2.0-rc.1",
+  "version": "0.2.0-rc.3",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -25,10 +25,6 @@
       "types": "./lib/types/wire.d.ts",
       "default": "./lib/wire.js"
     },
-    "./invariant": {
-      "types": "./lib/types/invariant.d.ts",
-      "default": "./lib/invariant.js"
-    },
     "./src/*": "./src/*",
     "./cordis.patch.yml": "./cordis.patch.yml",
     "./package.json": "./package.json"
@@ -39,7 +35,7 @@
     },
     "compat": {
       "minHost": "0.1.5-rc.1",
-      "verifiedHost": "0.1.5-rc.1"
+      "verifiedHost": "0.2.1-rc.1"
     }
   },
   "files": [
@@ -48,15 +44,17 @@
     "CHANGELOG.md"
   ],
   "license": "MIT",
+  "engines": {
+    "dsh": ">=0.1.5-rc.1 <0.3.0-0"
+  },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/dsh-agent": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-default-model": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.8 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.2.0-rc.1"
+    "@deepseek-ai/dsh-agent": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-agent-default-model": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.8 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-mcp-client": {

package/lib/invariant.js

@@ -1,36 +0,0 @@
-//#region lib/types/invariant.js
-/**
-* Package-owned invariant companion for `@khorsheed/dsh-local-agent-dsh-headless`.
-* @module @khorsheed/dsh-local-agent-dsh-headless/invariant
-*/
-const PACKAGE_NAME = "@khorsheed/dsh-local-agent-dsh-headless";
-/** Cordis companion plugin name. */
-const name = "local-agent-dsh-headless-invariant";
-/** Service required before the companion can register. */
-const inject = ["invariants"];
-/**
-* Composition guard: this bundle is sub-profile-only. Its patch rows
-* (persona override, `hmr` off, `tools` mode, the `ptc-runtime` insert, the
-* member-bridge MCP row) collide with or leak into any Host/web composition —
-* 2026-08-23 P0: reconciled into the prod web profile as a direct dependency
-* (reconcilePlugins auto-mounts every `dsh.bundle`-declaring direct dep), the
-* `code-runtime` insert (today's `ptc-runtime` row) hit the web-app row's duplicate entry id and the
-* whole instance failed to boot. The loader's duplicate-id failure is loud
-* but cryptic, and only fires when the ids collide; this invariant is the
-* CLEAR failure for the non-colliding case (e.g. an upstream row rename would
-* otherwise leak the persona override into real user sessions). The web
-* layer's `webStartup` service is the marker: in-box bundles mount before
-* dependency-managed ones, so it is already provided when this companion
-* applies.
-*/
-const install = (ctx, fail) => {
-	if (ctx.get("webStartup") !== void 0) fail("mounted into a web composition — this bundle is sub-profile-only. Remove it from the profile’s direct dependencies: the parent local-agent-dsh bundle installs it transitively, and the sub-profile symlink resolves from that closure");
-};
-/**
-* Register this package's invariant companion.
-* @param ctx - Cordis context carrying the invariant service.
-* @returns the installed registration's disposer after setup succeeds.
-*/
-const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
-//#endregion
-export { apply, inject, name };

package/lib/types/invariant.d.ts

@@ -1,16 +0,0 @@
-/**
- * Package-owned invariant companion for `@khorsheed/dsh-local-agent-dsh-headless`.
- * @module @khorsheed/dsh-local-agent-dsh-headless/invariant
- */
-import type { Context } from '@deepseek-ai/cordis';
-/** Cordis companion plugin name. */
-export declare const name = "local-agent-dsh-headless-invariant";
-/** Service required before the companion can register. */
-export declare const inject: string[];
-/**
- * Register this package's invariant companion.
- * @param ctx - Cordis context carrying the invariant service.
- * @returns the installed registration's disposer after setup succeeds.
- */
-export declare const apply: (ctx: Context) => Promise<() => void>;
-//# sourceMappingURL=invariant.d.ts.map

package/lib/types/invariant.js

@@ -1,41 +0,0 @@
-/**
- * Package-owned invariant companion for `@khorsheed/dsh-local-agent-dsh-headless`.
- * @module @khorsheed/dsh-local-agent-dsh-headless/invariant
- */
-const PACKAGE_NAME = '@khorsheed/dsh-local-agent-dsh-headless';
-/** Cordis companion plugin name. */
-export const name = 'local-agent-dsh-headless-invariant';
-/** Service required before the companion can register. */
-export const inject = ['invariants'];
-/**
- * Composition guard: this bundle is sub-profile-only. Its patch rows
- * (persona override, `hmr` off, `tools` mode, the `ptc-runtime` insert, the
- * member-bridge MCP row) collide with or leak into any Host/web composition —
- * 2026-08-23 P0: reconciled into the prod web profile as a direct dependency
- * (reconcilePlugins auto-mounts every `dsh.bundle`-declaring direct dep), the
- * `code-runtime` insert (today's `ptc-runtime` row) hit the web-app row's duplicate entry id and the
- * whole instance failed to boot. The loader's duplicate-id failure is loud
- * but cryptic, and only fires when the ids collide; this invariant is the
- * CLEAR failure for the non-colliding case (e.g. an upstream row rename would
- * otherwise leak the persona override into real user sessions). The web
- * layer's `webStartup` service is the marker: in-box bundles mount before
- * dependency-managed ones, so it is already provided when this companion
- * applies.
- */
-const install = (ctx, fail) => {
-    // Duck-typed global-store read: the web marker is not a dependency of this
-    // package, so no typed Context merge exists for it.
-    const probe = ctx;
-    if (probe.get('webStartup') !== undefined) {
-        fail('mounted into a web composition — this bundle is sub-profile-only. '
-            + 'Remove it from the profile’s direct dependencies: the parent '
-            + 'local-agent-dsh bundle installs it transitively, and the '
-            + 'sub-profile symlink resolves from that closure');
-    }
-};
-/**
- * Register this package's invariant companion.
- * @param ctx - Cordis context carrying the invariant service.
- * @returns the installed registration's disposer after setup succeeds.
- */
-export const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));