@khorsheed/dsh-local-agent-dsh 0.2.0-rc.1 → 0.2.0

package/lib/client.js

@@ -100,7 +100,7 @@ window.__ModuleLoader__.load({
 		const NS = "local-agent-dsh";
 		/** Simplified Chinese dictionary (the key-set source of truth). */
 		const zh = {
-			"card.title": "Local Agent · dsh",
+			"card.title": "本机 DSH 委派",
 			"card.description": "dsh 自委派：开关、认证状态与常驻模式（live）",
 			"card.expand": "展开",
 			"card.collapse": "收起",
@@ -132,7 +132,7 @@ window.__ModuleLoader__.load({
 		};
 		/** English dictionary, checked complete against the zh key set. */
 		const en = {
-			"card.title": "Local Agent · dsh",
+			"card.title": "Local DSH Delegation",
 			"card.description": "dsh self-delegation: toggle, credential status, and resident (live) mode",
 			"card.expand": "Expand",
 			"card.collapse": "Collapse",
@@ -219,6 +219,14 @@ window.__ModuleLoader__.load({
 			};
 		}
 		/**
+		* Subscribe one harness's published status (no probe of its own): a sibling
+		* surface that WRITES the credential (the endpoint form's save) publishes
+		* through the same bus, and every block showing the status flips at once.
+		*/
+		function usePublishedAuthStatus(harnessId) {
+			return (0, react.useSyncExternalStore)(subscribe, () => statuses.get(harnessId));
+		}
+		/**
 		* Read one harness's latest known auth status. Every mount probes once and
 		* publishes — a published value only snapshots the past (a credential expiring
 		* mid-session must flip the dot at the next view, not stay green forever);
@@ -255,30 +263,30 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var ProviderAuthBlock_module_css_default = {
+			"rowCard": "On5p7W_rowCard",
+			"rowName": "On5p7W_rowName",
 			"rowHead": "On5p7W_rowHead",
-			"rows": "On5p7W_rows",
-			"rowTag": "On5p7W_rowTag",
-			"status": "On5p7W_status",
-			"intro": "On5p7W_intro",
 			"section": "On5p7W_section",
-			"rowCard": "On5p7W_rowCard",
+			"dotOff": "On5p7W_dotOff",
+			"logoutButton": "On5p7W_logoutButton",
+			"rosterError": "On5p7W_rosterError",
+			"dotOn": "On5p7W_dotOn",
+			"promptText": "On5p7W_promptText",
 			"title": "On5p7W_title",
+			"rowTag": "On5p7W_rowTag",
+			"intro": "On5p7W_intro",
+			"rows": "On5p7W_rows",
 			"dotPending": "On5p7W_dotPending",
-			"rosterError": "On5p7W_rosterError",
-			"retryButton": "On5p7W_retryButton",
-			"loginPrompt": "On5p7W_loginPrompt",
-			"codeInput": "On5p7W_codeInput",
-			"logoutButton": "On5p7W_logoutButton",
-			"loginButton": "On5p7W_loginButton",
 			"rowActions": "On5p7W_rowActions",
-			"promptText": "On5p7W_promptText",
+			"loginButton": "On5p7W_loginButton",
 			"rowPending": "On5p7W_rowPending",
+			"retryButton": "On5p7W_retryButton",
 			"openPage": "On5p7W_openPage",
-			"dotOff": "On5p7W_dotOff",
-			"dotOn": "On5p7W_dotOn",
+			"status": "On5p7W_status",
 			"credentialDot": "On5p7W_credentialDot",
-			"rowName": "On5p7W_rowName",
-			"rowIdentity": "On5p7W_rowIdentity"
+			"loginPrompt": "On5p7W_loginPrompt",
+			"rowIdentity": "On5p7W_rowIdentity",
+			"codeInput": "On5p7W_codeInput"
 		};
 		//#endregion
 		//#region ../local-agent/src/client/ProviderAuthBlock.tsx
@@ -312,12 +320,13 @@ window.__ModuleLoader__.load({
 		* for the retainedBy.mainView count on each summary (the label is ui-session's
 		* declaration merge, read here as a plain duck-typed count so this package
 		* needs no ui-session edge), with the legacy field as the older-host fallback.
+		* Exported for sibling cards that run slash commands from their own rows.
 		*/
 		const mainSessionId = (list) => Object.values(list.byId ?? {}).find((session) => (session.retainedBy?.mainView ?? 0) > 0)?.id ?? list.current;
 		/**
 		* One harness's auth interactions, shared between the per-provider settings
-		* cards (the alpha.2 `plugins.bundle.config` pages and the 0.1.5
-		* `settings.plugin.item` tab): auth status through
+		* cards (each a `plugins.item` entry on the Plugins page, registered while
+		* the Host serves the provider's namespace): auth status through
 		* the read-only Remote channel and a web-login action that runs
 		* `/<harness> login`, surfaces the device-code prompt, and offers a link to
 		* the authorization page. The login command returns at prompt time while the
@@ -350,7 +359,8 @@ window.__ModuleLoader__.load({
 					const capabilities = probe === void 0 ? {} : {
 						loginable: probe.loginable ?? true,
 						logoutable: probe.logoutable ?? true,
-						...probe.loginAwaitingCode === true ? { loginAwaitingCode: true } : {}
+						...probe.loginAwaitingCode === true ? { loginAwaitingCode: true } : {},
+						...probe.effectiveSettings?.cliVersion === void 0 ? {} : { cliVersion: probe.effectiveSettings.cliVersion }
 					};
 					setView((prev) => statusKind === "authenticated" ? {
 						status: statusKind,
@@ -426,7 +436,7 @@ window.__ModuleLoader__.load({
 					setView({ status: "unavailable" });
 				});
 			};
-			const statusKind = view.status;
+			const statusKind = usePublishedAuthStatus(harness.id) ?? view.status;
 			const authenticated = statusKind === "authenticated";
 			const loginPending = pendingSince !== void 0;
 			const loginable = view.loginable ?? true;
@@ -450,6 +460,10 @@ window.__ModuleLoader__.load({
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 									className: ProviderAuthBlock_module_css_default.rowTag,
 									children: harness.id
+								}),
+								view.cliVersion !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: ProviderAuthBlock_module_css_default.rowTag,
+									children: view.cliVersion
 								})
 							]
 						}),
@@ -551,9 +565,9 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var AuthStatusDot_module_css_default = {
-			"dotOn": "OFjNUG_dotOn",
 			"credentialDot": "OFjNUG_credentialDot",
 			"dotOff": "OFjNUG_dotOff",
+			"dotOn": "OFjNUG_dotOn",
 			"dotPending": "OFjNUG_dotPending"
 		};
 		//#endregion
@@ -580,40 +594,40 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var SettingsCard_module_css_default = {
-			"modelMenuButton": "_3LBPpW_modelMenuButton",
-			"modelMenuUp": "_3LBPpW_modelMenuUp",
-			"modelField": "_3LBPpW_modelField",
-			"modelItemLabel": "_3LBPpW_modelItemLabel",
-			"modelSave": "_3LBPpW_modelSave",
+			"errorText": "_3LBPpW_errorText",
+			"modelMenu": "_3LBPpW_modelMenu",
+			"rowLabel": "_3LBPpW_rowLabel",
+			"description": "_3LBPpW_description",
+			"body": "_3LBPpW_body",
 			"chevron": "_3LBPpW_chevron",
+			"modelMenuButton": "_3LBPpW_modelMenuButton",
+			"modelItemCheck": "_3LBPpW_modelItemCheck",
+			"headText": "_3LBPpW_headText",
 			"modelItemCurrent": "_3LBPpW_modelItemCurrent",
+			"header": "_3LBPpW_header",
+			"chevronOpen": "_3LBPpW_chevronOpen",
+			"knob": "_3LBPpW_knob",
+			"modelMenuChevronOpen": "_3LBPpW_modelMenuChevronOpen",
+			"modelItemDefault": "_3LBPpW_modelItemDefault",
+			"modelItemLabel": "_3LBPpW_modelItemLabel",
 			"switch": "_3LBPpW_switch",
-			"name": "_3LBPpW_name",
-			"modelMenuChevron": "_3LBPpW_modelMenuChevron",
-			"row": "_3LBPpW_row",
+			"blockTitle": "_3LBPpW_blockTitle",
+			"modelItem": "_3LBPpW_modelItem",
+			"modelInput": "_3LBPpW_modelInput",
+			"card": "_3LBPpW_card",
 			"cardOpen": "_3LBPpW_cardOpen",
-			"block": "_3LBPpW_block",
+			"row": "_3LBPpW_row",
+			"modelSave": "_3LBPpW_modelSave",
+			"modelMenuUp": "_3LBPpW_modelMenuUp",
 			"saved": "_3LBPpW_saved",
-			"card": "_3LBPpW_card",
-			"rowLabel": "_3LBPpW_rowLabel",
-			"headText": "_3LBPpW_headText",
-			"modelInput": "_3LBPpW_modelInput",
-			"modelItemDefault": "_3LBPpW_modelItemDefault",
-			"body": "_3LBPpW_body",
-			"chevronOpen": "_3LBPpW_chevronOpen",
-			"blockTitle": "_3LBPpW_blockTitle",
-			"errorText": "_3LBPpW_errorText",
+			"hint": "_3LBPpW_hint",
+			"modelMenuChevron": "_3LBPpW_modelMenuChevron",
+			"switchOn": "_3LBPpW_switchOn",
+			"block": "_3LBPpW_block",
 			"nameRow": "_3LBPpW_nameRow",
-			"modelMenuChevronOpen": "_3LBPpW_modelMenuChevronOpen",
-			"modelMenu": "_3LBPpW_modelMenu",
-			"modelItem": "_3LBPpW_modelItem",
-			"modelItemCheck": "_3LBPpW_modelItemCheck",
-			"header": "_3LBPpW_header",
+			"modelField": "_3LBPpW_modelField",
 			"info": "_3LBPpW_info",
-			"knob": "_3LBPpW_knob",
-			"description": "_3LBPpW_description",
-			"switchOn": "_3LBPpW_switchOn",
-			"hint": "_3LBPpW_hint"
+			"name": "_3LBPpW_name"
 		};
 		//#endregion
 		//#region src/client/SettingsCard.tsx
@@ -959,8 +973,9 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/**
-		* The dsh harness settings card in the 0.1.5 plugin configuration tab: the
-		* same collapsible chrome the official plugin cards use, re-implemented
+		* The dsh harness settings card of the retired 0.1.5 plugin configuration
+		* tab (no longer registered; the live surface is the plugins.item entry
+		* below): the same collapsible chrome the official plugin cards use, re-implemented
 		* locally (the bundle-purity gate forbids value-importing the official chrome
 		* — the context-guard pattern), with the at-a-glance credential dot in the
 		* header. Explanation copy lives in hover/focus bubbles behind ⓘ anchors —
@@ -1012,10 +1027,12 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/**
-		* The bundle's configuration on the alpha.2 Plugins page
-		* (`plugins.bundle.config`, keyed by package name): the page draws the title,
-		* the icon, and the crumb itself, so the entry renders the one-liner for the
-		* `summary` view and the bare form — with its own save control — for `page`.
+		* The provider's card on the Plugins page (the `plugins.item` entry
+		* client/index.ts registers while the Host serves the namespace AND the core
+		* predates the family card): the page
+		* draws the title, the icon, and the crumb itself, so the entry renders the
+		* one-liner for the `summary` view and the bare form — with its own save
+		* control — for `page`.
 		* @param props - the owner view, the injected scope/auth faces, and copy.
 		* @returns the entry.
 		*/
@@ -1034,21 +1051,59 @@ window.__ModuleLoader__.load({
 				t
 			});
 		}
+		/**
+		* The harness's section inside the core's「本机 Agent 委派」family card: the
+		* same useCardState + CardBody the plugins.item page view renders — the
+		* collapsible chrome belongs to the family card now. The delegation enable
+		* switch keeps its semantics: it writes the scope, the host mounts/unmounts
+		* the harness on the served value, and the section itself stays put.
+		* @param props - the injected scope/auth faces, the forwarded session seat, and copy.
+		* @returns the section body.
+		*/
+		function DshCardSection({ active, useSettings, scope, auth, authT, renderModelPicker, harnessModel, useSessions, t }) {
+			const state = useCardState(active, useSettings, scope, harnessModel, t);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CardBody, {
+				state,
+				auth,
+				authT,
+				renderModelPicker,
+				useSessions,
+				t
+			});
+		}
 		//#endregion
 		//#region src/client/index.ts
 		/**
-		* This bundle's package name — the key the Plugins page dispatches
-		* `plugins.bundle.config` entries on (identity triangle: cordis.patch.yml,
-		* tsdown.config.ts, invariant.ts).
+		* Local-agent-dsh plugin, browser half: the dsh settings card — a section of
+		* the family core's「本机 Agent 委派」family card on the Plugins page
+		* (registered through the core's `localAgentUi.registerHarnessCard` while the
+		* Host serves the `local-agent-dsh` namespace), or this package's own
+		* `plugins.item` entry when the core predates the family card (the
+		* declare-and-degrade fallback). Every
+		* install shape serves the row's volatile Config under the row id —
+		* standalone install, family bundle, or mode pack — so the card follows the
+		* served namespace rather than any carrier bundle, and a composition without
+		* the row shows no trace of it. The card carries the family core's shared
+		* ProviderAuthBlock (dsh authenticates through the host credentials, so the
+		* block renders status only), the DeepSeek delegation switch — migrated from
+		* the core section's `local-agent.settings.row-action` seat, which this
+		* plugin no longer contributes to — and the resident-mode block (live switch)
+		* plus the default-model block (free-text input, the broker's effective-model
+		* line and suggestion vocabulary), whose writes ride the bound settingsScope:
+		* the host watcher hot-applies them, no reload. Every read degrades: an
+		* absent gateway renders the auth block's 'unavailable' state and drops the
+		* model surface to the bare input, an unregistered namespace disables the
+		* controls.
+		* @module @khorsheed/dsh-local-agent-dsh/client
 		*/
-		const PACKAGE_NAME = "@khorsheed/dsh-local-agent-dsh";
 		/**
 		* Required services: slot registry, command Remote, and locale registry. The
 		* settings scope is NOT a static inject — its service name differs per host
 		* line (`settingsScope` on 0.1.5, `configForms` on rc.1), so a static entry
 		* would pend the whole client plugin on the other line; bindSettingsScope
 		* probes the serving one instead (the settings client package is a declared
-		* client inject, so one of them is always already up).
+		* client inject, so one of them is always already up). The card track probes
+		* `configForms` through the same kind of deferred inject (see apply).
 		*/
 		const inject = [
 			"slots",
@@ -1057,7 +1112,7 @@ window.__ModuleLoader__.load({
 			"locale"
 		];
 		/**
-		* Client plugin body: register the dictionaries and the dsh settings surfaces
+		* Client plugin body: register the dictionaries and the dsh settings card
 		* bound to the local-agent-dsh namespace.
 		* @param ctx - client root context.
 		*/
@@ -1066,12 +1121,12 @@ window.__ModuleLoader__.load({
 				zh,
 				en
 			}), "local-agent-dsh: dictionaries");
+			const t = ctx.locale.bind(NS);
 			const scope = bindSettingsScope(ctx, "local-agent-dsh");
 			const authT = ctx.locale.bind("local-agent");
 			const gateway = () => ctx.get("remote.localAgentGateway");
-			const cardInject = () => ({
+			const cardFace = () => ({
 				scope,
-				hooks: { settings: scope },
 				authT,
 				renderModelPicker: (props) => ctx.get("localAgentUi")?.renderHarnessModelPicker("dsh", props),
 				harnessModel: () => gateway()?.harnessModel("dsh").then((result) => result.ok ? result.value : void 0) ?? Promise.resolve(void 0),
@@ -1080,28 +1135,45 @@ window.__ModuleLoader__.load({
 					runCommand: (sessionId, line) => ctx.remote.commands.execute(sessionId, line, []).then((result) => result.ok ? result.value?.result.text : void 0)
 				}
 			});
-			ctx.slots.inject("plugins.bundle.config", () => ctx.slots.register({
-				name: "plugins.bundle.config",
-				key: PACKAGE_NAME,
-				locale: NS,
-				inject: cardInject
-			}, DshBundleConfig));
-			ctx.slots.inject("plugins.row.config", () => ctx.slots.register({
-				name: "plugins.row.config",
-				key: "@khorsheed/dsh-bundle-local-agent#local-agent-dsh",
-				locale: NS,
-				inject: cardInject
-			}, DshBundleConfig));
-			const legacy = ctx.slots;
-			legacy.inject("settings.plugin.item", () => legacy.register({
-				name: "settings.plugin.item",
-				key: "local-agent-dsh",
-				locale: NS,
-				inject: cardInject
-			}, DshSettingsCard));
+			const cardInject = () => ({
+				...cardFace(),
+				hooks: { settings: scope }
+			});
+			const subscribeScope = (listener) => scope.subscribe(listener);
+			const readScope = () => scope.getSnapshot();
+			const useSettings = (select) => select((0, react.useSyncExternalStore)(subscribeScope, readScope));
+			ctx.inject(["configForms"], (formsCtx) => {
+				const forms = formsCtx.configForms;
+				if (typeof forms.whileServed !== "function") return;
+				return forms.whileServed(["local-agent-dsh"], () => {
+					const ui = ctx.get("localAgentUi");
+					if (typeof ui?.registerHarnessCard === "function") return ui.registerHarnessCard({
+						name: "dsh",
+						order: 140,
+						locale: NS,
+						label: () => t("card.title"),
+						render: ({ active, useSessions }) => (0, react.createElement)(DshCardSection, {
+							active,
+							useSessions,
+							...cardFace(),
+							useSettings,
+							t
+						})
+					});
+					return ctx.slots.inject("plugins.item", () => ctx.slots.register({
+						name: "plugins.item",
+						id: "local-agent-dsh",
+						order: 140,
+						label: () => t("card.title"),
+						locale: NS,
+						inject: cardInject
+					}, DshBundleConfig));
+				});
+			});
 		}
 		//#endregion
 		exports.DshBundleConfig = DshBundleConfig;
+		exports.DshCardSection = DshCardSection;
 		exports.DshSettingsCard = DshSettingsCard;
 		exports.NS = NS;
 		exports.apply = apply;

package/lib/{dsh-cli-provider-UhWvivte.js → dsh-cli-provider-B7s3zH0m.js}

@@ -1,11 +1,11 @@
-import { provisionDshScope } from "./provision.js";
+import { provisionDshScope, unitSubProfileName } from "./provision.js";
 import { t as resolveDshSessionLog } from "./session-log-DOsSz56-.js";
 import { join } from "node:path";
-import { credentialRef } from "@deepseek-ai/dsh-credentials";
 import { LiveFlush, LiveStreamPublisher, assertResumeCwdUnchanged, assertResumeScopeUnchanged, containerExecSpawn, containerScopedHome, delegationEnv, establishSubagentCatalogChild, persistChildSession, probeCliVersion, resolveChildCwd, resolveRoundModel, subagentDelegationLabel } from "@khorsheed/dsh-local-agent";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
+import { credentialRef } from "@deepseek-ai/dsh-credentials";
 import { SessionId } from "@deepseek-ai/dsh-session";
-import { NO_START_CAPABILITIES, settleRunResult, subprocessRunHandle } from "@deepseek-ai/dsh-subagent";
+import { NO_START_CAPABILITIES, SUBAGENT_DESCRIPTOR_VERSION, settleRunResult, subprocessRunHandle } from "@deepseek-ai/dsh-subagent";
 import { MEMBER_BRIDGE_SOCKET_ENV, MEMBER_BRIDGE_TOKEN_ENV } from "@khorsheed/dsh-local-agent/types";
 import { StringDecoder } from "node:string_decoder";
 import { BlockAssembler, createAssistantMessage } from "@deepseek-ai/dsh-llm";
@@ -13,6 +13,67 @@ import { LIVE_SERVER_NAME, LIVE_WIRE_PROTOCOL_VERSION } from "@khorsheed/dsh-loc
 import { readFile, readdir } from "node:fs/promises";
 import { promisify } from "node:util";
 import { zstdDecompress } from "node:zlib";
+//#region lib/types/model-launch.js
+/** Private launch environment: never persisted in a profile, transcript or argv. */
+const MODEL_CONFIG_ENV = "DSH_LOCAL_AGENT_MODEL_CONFIG";
+const MODEL_KEY_ENV = "DSH_LOCAL_AGENT_MODEL_API_KEY";
+function object(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function settings(ctx) {
+	return new Map((ctx.get("settings")?.describe?.() ?? []).flatMap((row) => {
+		const value = object(row.value);
+		return value === void 0 ? [] : [[String(row.ns), value]];
+	}));
+}
+function piProfile(ctx, provider, values) {
+	const directory = ctx.get("llm")?.listConfigurableProviders?.().find((row) => row.provider === provider);
+	const ns = directory?.settingsNs ?? "llm-pi-ai";
+	if (ns !== "llm-pi-ai") return void 0;
+	if (directory && (directory.settingsPath.length !== 2 || directory.settingsPath[0] !== "providers" || directory.settingsPath[1] !== provider)) return void 0;
+	return object(object(values.get(ns)?.providers)?.[provider]);
+}
+/** Whether this provider has a supported local configuration transfer contract. */
+function canInheritModelProvider(ctx, provider) {
+	if (provider === "deepseek-official") return true;
+	const profile = piProfile(ctx, provider, settings(ctx));
+	return typeof profile?.apiKeyEnv === "string" && profile.apiKeyEnv.trim() !== "";
+}
+/** Snapshot only the selected local route and resolve only its explicitly named credential. */
+async function localModelLaunch(ctx, config, model) {
+	const provider = model?.includes("/") ? model.slice(0, model.indexOf("/")) : "deepseek-official";
+	const values = settings(ctx);
+	let inherited, ref, keyName;
+	if (provider === "deepseek-official") {
+		const profile = structuredClone(values.get("llm-deepseek") ?? {});
+		ref = config.apiKeyRef ?? (typeof profile.apiKeyEnv === "string" ? profile.apiKeyEnv : "DEEPSEEK_API_KEY");
+		inherited = { deepseek: {
+			...profile,
+			apiKeyEnv: "DEEPSEEK_API_KEY"
+		} };
+		keyName = "DEEPSEEK_API_KEY";
+	} else {
+		const profile = piProfile(ctx, provider, values);
+		if (typeof profile?.apiKeyEnv !== "string" || profile.apiKeyEnv.trim() === "") throw new Error(`subagent-dsh: model provider "${provider}" has no inheritable API-key route; configure its credential reference in the host Models settings`);
+		ref = profile.apiKeyEnv;
+		inherited = { piAi: { providers: { [provider]: {
+			...structuredClone(profile),
+			apiKeyEnv: MODEL_KEY_ENV
+		} } } };
+		keyName = MODEL_KEY_ENV;
+	}
+	const credential = await ctx.get("credentials")?.resolve(credentialRef(ref));
+	if (!credential?.value) throw new Error(`subagent-dsh: credential ${ref} is unavailable for model provider "${provider}"`);
+	const env = {
+		[MODEL_CONFIG_ENV]: JSON.stringify(inherited),
+		[keyName]: credential.value
+	};
+	return {
+		env,
+		fingerprint: createHash("sha256").update(JSON.stringify(env)).digest("hex")
+	};
+}
+//#endregion
 //#region lib/types/session-mirror.js
 /**
 * Mirror a sub-dsh session's events into the parent-side dsh subagent session,
@@ -428,6 +489,7 @@ var LiveRuntime = class {
 	* spawned with no model flag at all. A round whose start model differs
 	* retires the runtime instead of silently running the old one.
 	*/
+	modelLaunchFingerprint;
 	configurationKey;
 	boundModel;
 	reclaimed = false;
@@ -695,12 +757,12 @@ var DshLiveDriver = class {
 	* The member's live runtime, spawning it (once per member at a time) when
 	* absent or dead. `signal` abandons the spawn on cancellation.
 	*/
-	async ensureRuntime(spec, apiKey, signal) {
+	async ensureRuntime(spec, launch, signal) {
 		const key = spec.sessionId;
 		const startModel = spec.startModel?.trim();
 		const existing = this.runtimes.get(key);
 		if (existing !== void 0 && !existing.dead) {
-			if (spec.configuration !== void 0 && existing.configurationKey !== JSON.stringify(spec.configuration) || spec.configuration === void 0 && existing.configurationKey !== void 0 || startModel !== void 0 && startModel !== "" && existing.boundModel !== startModel) await this.reclaim(key);
+			if (existing.modelLaunchFingerprint !== launch.fingerprint || spec.configuration !== void 0 && existing.configurationKey !== JSON.stringify(spec.configuration) || spec.configuration === void 0 && existing.configurationKey !== void 0 || startModel !== void 0 && startModel !== "" && existing.boundModel !== startModel) await this.reclaim(key);
 			else {
 				this.clearIdleTimer(key);
 				return existing;
@@ -708,7 +770,7 @@ var DshLiveDriver = class {
 		} else if (existing !== void 0) this.runtimes.delete(key);
 		const pending = this.ensuring.get(key);
 		if (pending !== void 0) return pending;
-		const spawn = this.spawnRuntime(spec, apiKey, signal).finally(() => {
+		const spawn = this.spawnRuntime(spec, launch, signal).finally(() => {
 			this.ensuring.delete(key);
 		});
 		this.ensuring.set(key, spawn);
@@ -722,7 +784,7 @@ var DshLiveDriver = class {
 	* cancellation mid-spawn reclaims the half-started runtime and throws the
 	* abort instead, without touching the breaker.
 	*/
-	async spawnRuntime(spec, apiKey, signal) {
+	async spawnRuntime(spec, launch, signal) {
 		const key = spec.sessionId;
 		if (this.disposed) throw new LiveChannelUnavailableError("the live driver is disposed");
 		const profileName = this.config.profileName ?? "headless-local-agent-dsh";
@@ -747,7 +809,7 @@ var DshLiveDriver = class {
 			graceMs: DEFAULT_DISPOSE_GRACE_MS,
 			env: delegationEnv({
 				DSH_HOME: spec.homeDir,
-				DEEPSEEK_API_KEY: apiKey,
+				...launch.env,
 				...process.env.TSX_TSCONFIG_PATH === void 0 ? {} : { TSX_TSCONFIG_PATH: process.env.TSX_TSCONFIG_PATH },
 				...member === void 0 ? {} : member.env
 			})
@@ -764,6 +826,7 @@ var DshLiveDriver = class {
 			this.ctx.logger.warn(message);
 		});
 		runtime.boundModel = model === void 0 || model === "" ? void 0 : model;
+		runtime.modelLaunchFingerprint = launch.fingerprint;
 		runtime.configurationKey = spec.configuration === void 0 ? void 0 : JSON.stringify(spec.configuration);
 		runtime.onDead = () => {
 			if (this.runtimes.get(key) === runtime) this.runtimes.delete(key);
@@ -821,9 +884,12 @@ var DshLiveDriver = class {
 		signal.throwIfAborted();
 		if (this.draining || this.disabled) throw new LiveChannelUnavailableError("the live driver is unavailable for preparation");
 		try {
-			provisionDshScope(spec.homeDir, this.config);
-			const apiKey = await resolveApiKey(this.ctx, this.config);
-			await (await this.ensureRuntime(spec, apiKey, signal)).request("session/prepare", {
+			provisionDshScope(spec.homeDir, {
+				...this.config,
+				inheritModelConfiguration: true
+			});
+			const launch = await localModelLaunch(this.ctx, this.config, spec.configuration?.model ?? spec.startModel ?? this.config.modelFor?.(spec.sessionId));
+			await (await this.ensureRuntime(spec, launch, signal)).request("session/prepare", {
 				sessionId: spec.sessionId,
 				resume: spec.resume !== void 0
 			});
@@ -942,6 +1008,7 @@ var DshLiveDriver = class {
 			for (const entry of bufferedEvents.splice(0)) if (entry.kind === "event") mirrorOne(entry.event);
 			else acceptStream(entry.frame);
 		};
+		let nativeFailure;
 		let resolveIdle;
 		const idle = new Promise((resolve) => {
 			resolveIdle = resolve;
@@ -971,10 +1038,13 @@ var DshLiveDriver = class {
 				resolveIdle({ reason });
 			};
 		};
-		provisionDshScope(spec.homeDir, this.config);
-		const apiKey = await resolveApiKey(this.ctx, this.config);
+		provisionDshScope(spec.homeDir, {
+			...this.config,
+			inheritModelConfiguration: true
+		});
+		const launch = await localModelLaunch(this.ctx, this.config, spec.configuration?.model ?? spec.startModel ?? this.config.modelFor?.(spec.sessionId));
 		const accepted = (async () => {
-			const rt = await this.ensureRuntime(spec, apiKey, request.signal);
+			const rt = await this.ensureRuntime(spec, launch, request.signal);
 			runtime = rt;
 			if (runAbort.signal.aborted) {
 				await this.reclaim(spec.sessionId);
@@ -1004,7 +1074,13 @@ var DshLiveDriver = class {
 				output: collectOutput(),
 				stopReason: "aborted"
 			};
-			if (reason?.kind === "error") throw new Error(`subagent-dsh live: the turn failed: ${reason.error.message}`);
+			if (reason?.kind === "error") {
+				nativeFailure = {
+					message: reason.error.message,
+					code: reason.error.code
+				};
+				throw new Error(`subagent-dsh live: the turn failed: ${reason.error.message}`);
+			}
 			if (reason?.kind !== "completed") throw new Error("subagent-dsh live: the turn produced no outcome");
 			const output = collectOutput();
 			if (output.length === 0) throw new Error("subagent-dsh live: the turn completed but produced no answer");
@@ -1068,7 +1144,7 @@ var DshLiveDriver = class {
 					turn,
 					reason: {
 						kind: "error",
-						error: {
+						error: nativeFailure ?? {
 							message: "the live round did not complete",
 							code: "UNKNOWN"
 						}
@@ -1118,7 +1194,7 @@ var DshLiveDriver = class {
 		});
 		await Promise.race([accepted, abortBranch.catch(() => void 0)]);
 		return subprocessRunHandle({
-			id: childSession.id,
+			id: SessionId(randomUUID()),
 			result,
 			signal: request.signal,
 			onAbort,
@@ -1272,7 +1348,7 @@ var DshCliProvider = class {
 				...record?.configurationLock === void 0 ? {} : { configurationLock: record.configurationLock }
 			}, (configuration) => this.startDshResume(request, intent, cwd, homeDir, exec, scope, record?.model, configuration), request.signal, intent?.onAdmitted);
 		}
-		const childSessionId = SessionId(intent?.preparedMemberId ?? randomUUID());
+		const childSessionId = SessionId(intent?.preparedMemberId ?? intent?.childSessionId ?? randomUUID());
 		if (typeof this.ctx.localAgent.withMemberConfigurationRound !== "function") {
 			if (intent?.effort !== void 0) throw new Error("DSH effort requires the configuration admission core");
 			return this.startDshFresh(request, cwd, homeDir, exec, scope, intent?.model, childSessionId);
@@ -1301,9 +1377,11 @@ var DshCliProvider = class {
 				delegationDepth: (request.parent.session.header.delegationDepth ?? 0) + 1
 			} });
 			const harness = this.ctx.localAgent.get("dsh");
-			const label = subagentDelegationLabel(harness?.displayName ?? "dsh", request.descriptor.label);
+			const label = subagentDelegationLabel(harness?.displayName ?? "dsh", request.label || void 0);
 			childSession.append("subagent/descriptor", {
-				...request.descriptor,
+				version: SUBAGENT_DESCRIPTOR_VERSION,
+				mode: "one-shot",
+				provider: this.name,
 				label
 			});
 			establishSubagentCatalogChild(request.parent.session, childSession.header, label);
@@ -1505,9 +1583,12 @@ async function startDshCliRun(request, spec) {
 	const { config, ctx } = spec;
 	const task = dshTextTask(request.prompt);
 	if (request.signal.aborted) throw new Error("subagent-dsh: request was aborted before the CLI started");
-	const profileName = config.profileName ?? "headless-local-agent-dsh";
-	if (spec.exec === void 0) provisionDshScope(spec.homeDir, config);
-	const apiKey = await resolveApiKey(ctx, config);
+	const profileName = spec.exec === void 0 ? config.profileName ?? "headless-local-agent-dsh" : unitSubProfileName(config);
+	if (spec.exec === void 0) provisionDshScope(spec.homeDir, {
+		...config,
+		inheritModelConfiguration: true
+	});
+	const modelEnv = spec.exec === void 0 ? (await localModelLaunch(ctx, config, spec.model)).env : { DEEPSEEK_API_KEY: await resolveApiKey(ctx, config) };
 	const turn = spec.resume?.turn ?? 1;
 	spec.childSession?.append("turn/start", { turn });
 	const launch = dshLaunchArgv(config);
@@ -1531,7 +1612,7 @@ async function startDshCliRun(request, spec) {
 	];
 	const env = delegationEnv({
 		DSH_HOME: spec.homeDir,
-		DEEPSEEK_API_KEY: apiKey,
+		...modelEnv,
 		...spec.exec !== void 0 || process.env.TSX_TSCONFIG_PATH === void 0 ? {} : { TSX_TSCONFIG_PATH: process.env.TSX_TSCONFIG_PATH },
 		...spec.exec === void 0 || spec.exec.env?.["NODE_OPTIONS"] !== void 0 ? {} : { NODE_OPTIONS: CONTAINER_NODE_OPTIONS },
 		...spec.memberEnv
@@ -1682,7 +1763,7 @@ async function startDshCliRun(request, spec) {
 		}
 	}, () => {});
 	return Promise.resolve(subprocessRunHandle({
-		id: spec.childSession?.id ?? SessionId(randomUUID()),
+		id: SessionId(randomUUID()),
 		result,
 		signal: request.signal,
 		onAbort,
@@ -1698,4 +1779,4 @@ async function resolveApiKey(ctx, config) {
 	return resolved.value;
 }
 //#endregion
-export { MEMBER_BRIDGE_ENTRY_ENV as a, dshTextTask as c, startDshCliRun as d, DEFAULT_LIVE_IDLE_MS as f, DshCliProvider as i, registerMemberRun as l, DEFAULT_DISPOSE_GRACE_MS as n, dshCliVersion as o, DshLiveDriver as p, DEFAULT_LIVE_MIRROR_INTERVAL_MS as r, dshLaunchArgv as s, CONTAINER_NODE_OPTIONS as t, resolveApiKey as u };
+export { MEMBER_BRIDGE_ENTRY_ENV as a, dshTextTask as c, startDshCliRun as d, DEFAULT_LIVE_IDLE_MS as f, localModelLaunch as h, DshCliProvider as i, registerMemberRun as l, canInheritModelProvider as m, DEFAULT_DISPOSE_GRACE_MS as n, dshCliVersion as o, DshLiveDriver as p, DEFAULT_LIVE_MIRROR_INTERVAL_MS as r, dshLaunchArgv as s, CONTAINER_NODE_OPTIONS as t, resolveApiKey as u };