@khorsheed/dsh-local-agent-kimi 0.1.0-rc.8 → 0.2.0-rc.1

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # 变更记录
 
+## 0.2.0-rc.1（2026-09-30）
+
+- **家族折叠：委派工具收进本包**。新增 `./tool` 组合入口（`src/tool.ts`）——`subagent_kimi` 委派工具由 agent 预设点名 `name: '@khorsheed/dsh-local-agent-kimi/tool'` 按会话授予，Config 两字段（`provider` / `toolName`）全部可选、默认即本包取值，预设行无需配置；行 id `tool-subagent-kimi` 不变。bundle patch 不再插 profile 根工具行，本包自挂载恰好一行（provider 行），插件清单一个 provider 一张卡。实现共享自家族核 `@khorsheed/dsh-local-agent` 的 `./tool-factory` 导出；对 `@khorsheed/dsh-local-agent-tool-subagent` 的依赖移除（该包退役）。
+
 ## 0.1.0-rc.8（2026-09-30）
 
 家族同版联动：加宽 `@deepseek-ai/dsh-*` peer 区间以覆盖宿主 0.2.0（0.2.0 的兼容闸会禁用 peer 区间不覆盖宿主版本的已装插件）。无功能变更。

package/README.en.md

@@ -10,7 +10,7 @@ Getting the model to hand a whole chunk of work to another coding agent used to
 
 ## Features
 
-- **Delegate from any preset** — the `subagent_kimi` tool mounts at the profile root; standard/code/minimal/cordis and future presets need no per-preset variants.
+- **Per-session delegation grant** — the `subagent_kimi` tool is this package's `./tool` composition entry, granted to the sessions of an agent preset that names it (e.g. dev mode); sessions on other presets never see it.
 - **Scoped home** — config, credentials, and sessions live under `$DSH_HOME/local-agent/kimi`, never in your `~/.kimi-code`.
 - **Device-code login** — `/kimi login` shows the auth URL in the session; `/kimi logout` clears scoped credentials for a fresh account.
 - **Resumable delegations** — pass back the self-described `resume` handle to continue the same Kimi session, with real per-round usage and timing.
@@ -108,7 +108,7 @@ The rich directory uses native ACP session model/configuration metadata when a l
 
 **Scoped home and login.** Every Kimi process the bundle starts runs with `KIMI_CODE_HOME=$DSH_HOME/local-agent/kimi`. Login is device-code only: `/kimi login` surfaces the authorization URL and code in the session, the CLI polls in the background, and credentials land in the scoped home. `/kimi logout` removes the scoped credentials and OAuth cache (the kimi CLI has no logout command). On first boot the scoped home is provisioned with a `config.toml` — the user's own config with every `api_key` blanked, or a minimal managed config when the user has none — because the CLI refuses to authenticate without provider and model definitions; an existing config is never overwritten.
 
-**Mounting.** The bundle patch registers the `kimi` harness and mounts the `subagent_kimi` tool at the profile root; the `kimi-cli` one-shot provider spawns `kimi -p` under the scoped home. The family core (`local-agent` row, shared scoped-homes root) ships in `@khorsheed/dsh-local-agent`'s own patch, declared here as a dependency. The browser settings card ships with this package's own `./client` half, composing the family core's shared building blocks (the auth block, the model picker): a standalone install renders it on this package's plugin detail view, a family-bundle install renders it through the row-level configure entry on the bundle's detail view, and a 0.1.5 host renders it under Settings → Plugins → configurable plugins. The identity triangle stays consistent: the `cordis.patch.yml` row id, tsdown's `clientBundle('@khorsheed/dsh-local-agent-kimi')`, and `src/invariant.ts`'s `PACKAGE_NAME`; the invariant companion also pins one contract — a registered `kimi` harness must name `KIMI_CODE_HOME` as its scoped-home variable.
+**Mounting.** The bundle patch registers the `kimi` harness (exactly one provider row); the `subagent_kimi` tool is this package's `./tool` composition entry (sharing the family core's `./tool-factory` implementation), granted per session by an agent preset that names it — the dev preset's `tool-subagent-kimi` row is the grant point. The `kimi-cli` one-shot provider spawns `kimi -p` under the scoped home. The family core (`local-agent` row, shared scoped-homes root) ships in `@khorsheed/dsh-local-agent`'s own patch, declared here as a dependency. The browser settings card ships with this package's own `./client` half, composing the family core's shared building blocks (the auth block, the model picker): a standalone install renders it on this package's plugin detail view, a family-bundle install renders it through the row-level configure entry on the bundle's detail view, and a 0.1.5 host renders it under Settings → Plugins → configurable plugins. The identity triangle stays consistent: the `cordis.patch.yml` row id, tsdown's `clientBundle('@khorsheed/dsh-local-agent-kimi')`, and `src/invariant.ts`'s `PACKAGE_NAME`; the invariant companion also pins one contract — a registered `kimi` harness must name `KIMI_CODE_HOME` as its scoped-home variable.
 
 **Session records and transcripts.** `/kimi sessions` lists the scoped home's `session_index.jsonl` — this harness's delegations, never the user's personal sessions. `/kimi session <id>` reads that session's `wire.jsonl` and renders a readable transcript: user prompts, thinking, and assistant replies are tagged with their wire turn number (1-based, matching the child session's `turn/start` numbering), tool calls render with arguments and results paired to their calls (file-editing calls render patch-style, unknown content types keep a visible marker), and kimi's auto-permission `<system-reminder>` messages are filtered out. The settings card shows auth status and the scoped sessions narrowed to the current workspace; while a login is pending the status keeps re-probing until credentials land.
 

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # last confirmed-consistent state. Both languages carry equal authority; after
 # editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/local-agent-kimi/README.en.md
-packages/local-agent-kimi/README.en.md: 55a56e7b217fbfc9a0eb499c6d483e7ed78fad4b
-packages/local-agent-kimi/README.md: 9598f26d60e53ba2d8c934739c27ab419ecdbfcc
+packages/local-agent-kimi/README.en.md: 5e809d7abbc8245e9c97de7298af20c3cbc02b52
+packages/local-agent-kimi/README.md: d3004b6fbca63e164f6a35cd544d4681538d64c2

package/README.md

@@ -10,7 +10,7 @@
 
 ## 特性
 
-- **任意 preset 都能委派**——`subagent_kimi` 工具挂在 profile 根，standard/code/minimal/cordis 及未来的 preset 都无需逐变体。
+- **按会话授予的委派**——`subagent_kimi` 工具是本包的 `./tool` 组合入口，由点名它的 agent 预设（如开发模式）授予该预设的会话；其余预设的会话看不到它。
 - **作用域目录**——config、凭据、会话全部留在 `$DSH_HOME/local-agent/kimi`，与你自己的 `~/.kimi-code` 互不干扰。
 - **device-code 登录**——`/kimi login` 把授权 URL 呈现在会话中；`/kimi logout` 清除作用域凭据，换账号即重新登录。
 - **可续聊的委派**——把结果自述的 `resume` 句柄传回，即继续同一个 Kimi 会话，并按轮记录真实用量与耗时。
@@ -108,7 +108,7 @@ base_url = "https://your-router.example/v1"
 
 **作用域目录与登录。** 本包启动的每个 Kimi 进程都以 `KIMI_CODE_HOME=$DSH_HOME/local-agent/kimi` 运行。登录只走 device-code：`/kimi login` 把授权 URL 和验证码呈现在会话中，CLI 在后台轮询，凭据写入作用域目录。`/kimi logout` 删除作用域内的凭据与 OAuth 缓存（kimi CLI 没有 logout 命令）。首次启动时作用域目录会被预置一份 `config.toml`——把用户自己的 config 中所有 `api_key` 抹空后复制，用户没有 config 时则写入最小 managed config——因为没有 provider 与 model 定义 CLI 就拒绝认证；已存在的 config 永不覆盖。
 
-**挂载。** bundle patch 注册 `kimi` harness，并把 `subagent_kimi` 工具挂到 profile 根；`kimi-cli` 一次性 provider 在作用域目录下 spawn `kimi -p`。家族 core（`local-agent` 行，共享作用域目录根）随 `@khorsheed/dsh-local-agent` 自己的 patch 提供，本包把它声明为依赖。浏览器设置卡片由本包的 `./client` 半提供，复用家族 core 的共享构件（认证块、模型选择器）：独立安装落在本包插件详情页，随家族 bundle 安装落在 bundle 详情的行级配置入口，0.1.5 宿主落在设置 → 插件 → 可配置插件。身份三角保持一致：`cordis.patch.yml` 的行 id、tsdown 的 `clientBundle('@khorsheed/dsh-local-agent-kimi')`、`src/invariant.ts` 的 `PACKAGE_NAME`；invariant 伴生插件还钉住一条契约——`kimi` harness 注册时作用域目录变量必须是 `KIMI_CODE_HOME`。
+**挂载。** bundle patch 注册 `kimi` harness（恰好一行 provider 行）；`subagent_kimi` 工具是本包的 `./tool` 组合入口（实现共享自家族核的 `./tool-factory` 导出），由点名它的 agent 预设按会话授予——dev 预设的 `tool-subagent-kimi` 行是授予点。`kimi-cli` 一次性 provider 在作用域目录下 spawn `kimi -p`。家族 core（`local-agent` 行，共享作用域目录根）随 `@khorsheed/dsh-local-agent` 自己的 patch 提供，本包把它声明为依赖。浏览器设置卡片由本包的 `./client` 半提供，复用家族 core 的共享构件（认证块、模型选择器）：独立安装落在本包插件详情页，随家族 bundle 安装落在 bundle 详情的行级配置入口，0.1.5 宿主落在设置 → 插件 → 可配置插件。身份三角保持一致：`cordis.patch.yml` 的行 id、tsdown 的 `clientBundle('@khorsheed/dsh-local-agent-kimi')`、`src/invariant.ts` 的 `PACKAGE_NAME`；invariant 伴生插件还钉住一条契约——`kimi` harness 注册时作用域目录变量必须是 `KIMI_CODE_HOME`。
 
 **会话记录与转写。** `/kimi sessions` 列出作用域目录下的 `session_index.jsonl`——本 harness 的委派，绝不是用户的私人会话。`/kimi session <id>` 读取该会话的 `wire.jsonl` 渲染成可读转写：用户提示、思考与助手回复逐行标注 wire 轮次号（1 起，与子会话 `turn/start` 编号一致），工具调用带参数渲染、结果按调用配对（文件编辑类调用渲染成 patch 形态，不认识的内容类型保留可见标记），kimi 自动权限模式的 `<system-reminder>` 消息被过滤。设置卡片呈现认证状态与收窄到当前工作区的作用域会话；登录进行中时状态会持续重新探测，直到凭据落地。
 

package/cordis.patch.yml

@@ -1,34 +1,24 @@
-# The dsh-local-agent-kimi bundle patch: register the Kimi harness and mount
-# its delegation tool. The family core row (`local-agent`, shared scoped-homes
-# root) lives in the framework bundle @khorsheed/dsh-local-agent's own patch.
-# This bundle declares that package as an npm dependency, which makes the
-# core's module resolvable — it does NOT mount the core row: `dsh plugin add`
-# reconciles only the profile's direct dependencies, so the core must be
-# installed explicitly alongside this bundle, or this provider stays pending.
-# No other patch inserts the core row id.
+# The dsh-local-agent-kimi bundle patch: register the Kimi harness. The family
+# core row (`local-agent`, shared scoped-homes root) lives in the framework
+# bundle @khorsheed/dsh-local-agent's own patch. This bundle declares that
+# package as an npm dependency, which makes the core's module resolvable — it
+# does NOT mount the core row: `dsh plugin add` reconciles only the profile's
+# direct dependencies, so the core must be installed explicitly alongside this
+# bundle, or this provider stays pending. No other patch inserts the core row
+# id.
 #
-# Two rows are inserted:
-#   - local-agent-kimi: this bundle's plugin registers the `kimi` harness
-#     (KIMI_CODE_HOME, `kimi login`, session_index records).
-#   - tool-subagent-kimi: the family-owned delegation tool (schema
-#     description/prompt plus optional resume) over the `kimi-cli` provider.
-#     The toolName stays `subagent_kimi` — the same model-facing name the
-#     official tool-subagent row used — so presets and prompts keep working,
-#     while the family tool adds continuation: a later round may pass the dsh
-#     child session id returned by the first delegation to continue the same
-#     kimi conversation.
+# Exactly ONE row is inserted: the provider (this bundle's plugin registers the
+# `kimi` harness — KIMI_CODE_HOME, `kimi login`, session_index records). The
+# `subagent_kimi` delegation tool is no longer a profile-root row: since the
+# family fold it ships as this package's `./tool` composition entry
+# (`name: '@khorsheed/dsh-local-agent-kimi/tool'` in an agent preset), granted
+# per session — the dev preset's `tool-subagent-kimi` row is the grant point.
+# The model-facing toolName stays `subagent_kimi` and the tool keeps its
+# continuation parameter: a later round may pass the dsh child session id
+# returned by the first delegation to continue the same kimi conversation.
 #
-# The subagent_kimi tool row mounts at the profile root, so every agent
-# preset (standard/code/minimal/cordis and future ones) can delegate without
-# per-preset variants. The provider starts no Kimi process until a tool call
-# or /kimi login.
+# The provider starts no Kimi process until a tool call or /kimi login.
 
 - insert:
     - id: local-agent-kimi
       name: '@khorsheed/dsh-local-agent-kimi'
-
-    - id: tool-subagent-kimi
-      name: '@khorsheed/dsh-local-agent-tool-subagent'
-      config:
-        provider: kimi-cli
-        toolName: subagent_kimi

package/lib/client.js

@@ -243,30 +243,30 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var ProviderAuthBlock_module_css_default = {
-			"rowIdentity": "On5p7W_rowIdentity",
-			"intro": "On5p7W_intro",
-			"dotPending": "On5p7W_dotPending",
-			"rowName": "On5p7W_rowName",
-			"status": "On5p7W_status",
-			"rowActions": "On5p7W_rowActions",
-			"loginButton": "On5p7W_loginButton",
+			"rowPending": "On5p7W_rowPending",
+			"logoutButton": "On5p7W_logoutButton",
 			"dotOn": "On5p7W_dotOn",
-			"rosterError": "On5p7W_rosterError",
+			"loginButton": "On5p7W_loginButton",
+			"rows": "On5p7W_rows",
+			"intro": "On5p7W_intro",
 			"promptText": "On5p7W_promptText",
+			"section": "On5p7W_section",
+			"rosterError": "On5p7W_rosterError",
 			"loginPrompt": "On5p7W_loginPrompt",
 			"dotOff": "On5p7W_dotOff",
-			"section": "On5p7W_section",
-			"rowHead": "On5p7W_rowHead",
 			"rowCard": "On5p7W_rowCard",
+			"credentialDot": "On5p7W_credentialDot",
+			"status": "On5p7W_status",
+			"rowHead": "On5p7W_rowHead",
+			"dotPending": "On5p7W_dotPending",
 			"codeInput": "On5p7W_codeInput",
-			"retryButton": "On5p7W_retryButton",
-			"rows": "On5p7W_rows",
+			"rowTag": "On5p7W_rowTag",
 			"openPage": "On5p7W_openPage",
-			"logoutButton": "On5p7W_logoutButton",
+			"rowName": "On5p7W_rowName",
+			"rowIdentity": "On5p7W_rowIdentity",
+			"retryButton": "On5p7W_retryButton",
 			"title": "On5p7W_title",
-			"credentialDot": "On5p7W_credentialDot",
-			"rowTag": "On5p7W_rowTag",
-			"rowPending": "On5p7W_rowPending"
+			"rowActions": "On5p7W_rowActions"
 		};
 		//#endregion
 		//#region ../local-agent/src/client/ProviderAuthBlock.tsx
@@ -539,10 +539,10 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var AuthStatusDot_module_css_default = {
-			"dotOn": "OFjNUG_dotOn",
-			"dotPending": "OFjNUG_dotPending",
+			"dotOff": "OFjNUG_dotOff",
 			"credentialDot": "OFjNUG_credentialDot",
-			"dotOff": "OFjNUG_dotOff"
+			"dotOn": "OFjNUG_dotOn",
+			"dotPending": "OFjNUG_dotPending"
 		};
 		//#endregion
 		//#region ../local-agent/src/client/AuthStatusDot.tsx
@@ -568,40 +568,40 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var SettingsCard_module_css_default = {
-			"modelMenuUp": "apHkUa_modelMenuUp",
-			"errorText": "apHkUa_errorText",
-			"name": "apHkUa_name",
-			"modelSave": "apHkUa_modelSave",
+			"chevron": "apHkUa_chevron",
+			"info": "apHkUa_info",
+			"saved": "apHkUa_saved",
+			"modelMenuChevronOpen": "apHkUa_modelMenuChevronOpen",
+			"modelMenu": "apHkUa_modelMenu",
+			"chevronOpen": "apHkUa_chevronOpen",
 			"nameRow": "apHkUa_nameRow",
-			"body": "apHkUa_body",
-			"blockTitle": "apHkUa_blockTitle",
+			"headText": "apHkUa_headText",
 			"header": "apHkUa_header",
-			"modelItemDefault": "apHkUa_modelItemDefault",
-			"modelItemCheck": "apHkUa_modelItemCheck",
-			"modelMenuChevronOpen": "apHkUa_modelMenuChevronOpen",
-			"chevron": "apHkUa_chevron",
+			"name": "apHkUa_name",
+			"modelMenuUp": "apHkUa_modelMenuUp",
 			"knob": "apHkUa_knob",
-			"modelItemLabel": "apHkUa_modelItemLabel",
+			"modelItemCurrent": "apHkUa_modelItemCurrent",
+			"modelItemDefault": "apHkUa_modelItemDefault",
 			"block": "apHkUa_block",
+			"modelItemCheck": "apHkUa_modelItemCheck",
+			"row": "apHkUa_row",
+			"card": "apHkUa_card",
+			"description": "apHkUa_description",
 			"hint": "apHkUa_hint",
-			"switch": "apHkUa_switch",
+			"switchOn": "apHkUa_switchOn",
 			"modelItem": "apHkUa_modelItem",
 			"modelMenuButton": "apHkUa_modelMenuButton",
-			"modelInput": "apHkUa_modelInput",
-			"cardOpen": "apHkUa_cardOpen",
-			"modelMenu": "apHkUa_modelMenu",
+			"switch": "apHkUa_switch",
+			"modelItemLabel": "apHkUa_modelItemLabel",
 			"modelMenuChevron": "apHkUa_modelMenuChevron",
-			"switchOn": "apHkUa_switchOn",
-			"row": "apHkUa_row",
+			"modelSave": "apHkUa_modelSave",
 			"modelField": "apHkUa_modelField",
-			"info": "apHkUa_info",
-			"chevronOpen": "apHkUa_chevronOpen",
-			"card": "apHkUa_card",
-			"modelItemCurrent": "apHkUa_modelItemCurrent",
-			"headText": "apHkUa_headText",
+			"cardOpen": "apHkUa_cardOpen",
+			"blockTitle": "apHkUa_blockTitle",
+			"modelInput": "apHkUa_modelInput",
 			"rowLabel": "apHkUa_rowLabel",
-			"saved": "apHkUa_saved",
-			"description": "apHkUa_description"
+			"errorText": "apHkUa_errorText",
+			"body": "apHkUa_body"
 		};
 		//#endregion
 		//#region src/client/SettingsCard.tsx

package/lib/tool.js

@@ -0,0 +1,40 @@
+import { mountSubagentDelegationTool, subagentToolConfigSchema } from "@khorsheed/dsh-local-agent/tool-factory";
+//#region lib/types/tool.js
+const PACKAGE_NAME = "@khorsheed/dsh-local-agent-kimi";
+/** This entry's own defaults: a preset row needs no config. */
+const DEFAULT_PROVIDER = "kimi-cli";
+const DEFAULT_TOOL_NAME = "subagent_kimi";
+/** Cordis plugin name used by loader diagnostics. */
+const name = "local-agent-kimi-tool";
+/**
+* The family core's `localAgent` service is a declared inject (the
+* owning-family companion exception to the community-service probe rule): a
+* preset's standing scope mounts at registry-activation time, BEFORE the
+* profile's later bundle rows provide the core, so a one-shot ctx.get probe
+* at apply saw ABSENT there and nothing re-ran the row (rc.1 boot order; the
+* worktrees `./tool` entry documents the incident). The declared inject pends
+* the row until the core provides, then the body applies.
+*/
+const inject = [
+	"tools",
+	"subagents",
+	"localAgent"
+];
+const Config = subagentToolConfigSchema(DEFAULT_PROVIDER, DEFAULT_TOOL_NAME);
+/**
+* Plugin body: mount the delegation tool through the family factory, stamped
+* with THIS package as the tool-origin owner (AGENTS.md § Tool origin
+* tagging — the shared factory never hardcodes an owner).
+* @param ctx - Cordis context (the preset's agent-plane mount).
+* @param config - row config (schema defaults already applied; the `??`
+* fallbacks cover a direct ctx.plugin caller that bypassed validation).
+*/
+function apply(ctx, config) {
+	const resolved = {
+		provider: config.provider ?? DEFAULT_PROVIDER,
+		toolName: config.toolName ?? DEFAULT_TOOL_NAME
+	};
+	mountSubagentDelegationTool(ctx, resolved, PACKAGE_NAME);
+}
+//#endregion
+export { Config, apply, inject, name };

package/lib/types/tool.d.ts

@@ -0,0 +1,54 @@
+/**
+ * The session-granted `subagent_kimi` delegation tool — this package's
+ * `./tool` composition entry (the worktrees 0.3.0 / room 0.2.0 fold pattern)
+ * for agent-preset compositions. The row provides NO service (the
+ * preset-mount isolate-realm rule forbids service rows); it registers the
+ * model-facing tool into the host tools registry through the family factory
+ * (`@khorsheed/dsh-local-agent/tool-factory`), delegating to the `kimi-cli`
+ * provider this package's main row registers at the profile root — the
+ * official tool-row shape (the shipped `tool-bash` rows work the same way).
+ * Granting is therefore per-session: a preset names the row
+ * (`- id: tool-subagent-kimi / name: '@khorsheed/dsh-local-agent-kimi/tool'`),
+ * its sessions get the tool; every other preset's sessions do not.
+ *
+ * This row used to mount at the profile ROOT from this package's own bundle
+ * patch, pointing at the shared `@khorsheed/dsh-local-agent-tool-subagent`
+ * companion package; the family fold retired that package (the factory moved
+ * into the family core) and moved the row here. The package's bundle patch
+ * now mounts ONLY the provider row — a profile-root tool row would grant
+ * every session, exactly what the fold removed.
+ *
+ * @module @khorsheed/dsh-local-agent-kimi/tool
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type z from '@deepseek-ai/schemastery';
+/** Cordis plugin name used by loader diagnostics. */
+export declare const name = "local-agent-kimi-tool";
+/**
+ * The family core's `localAgent` service is a declared inject (the
+ * owning-family companion exception to the community-service probe rule): a
+ * preset's standing scope mounts at registry-activation time, BEFORE the
+ * profile's later bundle rows provide the core, so a one-shot ctx.get probe
+ * at apply saw ABSENT there and nothing re-ran the row (rc.1 boot order; the
+ * worktrees `./tool` entry documents the incident). The declared inject pends
+ * the row until the core provides, then the body applies.
+ */
+export declare const inject: string[];
+/** Config: every field optional, defaulting to THIS provider's own values. */
+export interface Config {
+    /** The `ctx.subagents` provider name to delegate to (default `kimi-cli`). */
+    provider?: string;
+    /** Model-facing tool name (default `subagent_kimi`). */
+    toolName?: string;
+}
+export declare const Config: z;
+/**
+ * Plugin body: mount the delegation tool through the family factory, stamped
+ * with THIS package as the tool-origin owner (AGENTS.md § Tool origin
+ * tagging — the shared factory never hardcodes an owner).
+ * @param ctx - Cordis context (the preset's agent-plane mount).
+ * @param config - row config (schema defaults already applied; the `??`
+ * fallbacks cover a direct ctx.plugin caller that bypassed validation).
+ */
+export declare function apply(ctx: Context, config: Config): void;
+//# sourceMappingURL=tool.d.ts.map

package/lib/types/tool.js

@@ -0,0 +1,34 @@
+import { mountSubagentDelegationTool, subagentToolConfigSchema } from '@khorsheed/dsh-local-agent/tool-factory';
+const PACKAGE_NAME = '@khorsheed/dsh-local-agent-kimi';
+/** This entry's own defaults: a preset row needs no config. */
+const DEFAULT_PROVIDER = 'kimi-cli';
+const DEFAULT_TOOL_NAME = 'subagent_kimi';
+/** Cordis plugin name used by loader diagnostics. */
+export const name = 'local-agent-kimi-tool';
+/**
+ * The family core's `localAgent` service is a declared inject (the
+ * owning-family companion exception to the community-service probe rule): a
+ * preset's standing scope mounts at registry-activation time, BEFORE the
+ * profile's later bundle rows provide the core, so a one-shot ctx.get probe
+ * at apply saw ABSENT there and nothing re-ran the row (rc.1 boot order; the
+ * worktrees `./tool` entry documents the incident). The declared inject pends
+ * the row until the core provides, then the body applies.
+ */
+export const inject = ['tools', 'subagents', 'localAgent'];
+// Bare `z` annotation per the shared helper's variance note.
+export const Config = subagentToolConfigSchema(DEFAULT_PROVIDER, DEFAULT_TOOL_NAME);
+/**
+ * Plugin body: mount the delegation tool through the family factory, stamped
+ * with THIS package as the tool-origin owner (AGENTS.md § Tool origin
+ * tagging — the shared factory never hardcodes an owner).
+ * @param ctx - Cordis context (the preset's agent-plane mount).
+ * @param config - row config (schema defaults already applied; the `??`
+ * fallbacks cover a direct ctx.plugin caller that bypassed validation).
+ */
+export function apply(ctx, config) {
+    const resolved = {
+        provider: config.provider ?? DEFAULT_PROVIDER,
+        toolName: config.toolName ?? DEFAULT_TOOL_NAME,
+    };
+    mountSubagentDelegationTool(ctx, resolved, PACKAGE_NAME);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@khorsheed/dsh-local-agent-kimi",
-  "description": "Kimi Code harness for dsh-local-agent: scoped KIMI_CODE_HOME, one-shot kimi -p delegation visible in the 子代理 surface, session records and preset wiring",
+  "description": "Kimi Code harness for dsh-local-agent: scoped KIMI_CODE_HOME, one-shot kimi -p delegation visible in the 子代理 surface, session records and preset wiring; the session-granted `subagent_kimi` delegation tool ships as the package's `./tool` composition entry",
   "keywords": [
     "dsh",
     "dsh-plugin",
@@ -8,7 +8,7 @@
     "local-agent",
     "kimi"
   ],
-  "version": "0.1.0-rc.8",
+  "version": "0.2.0-rc.1",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -25,6 +25,10 @@
       "types": "./lib/types/records.d.ts",
       "default": "./lib/records.js"
     },
+    "./tool": {
+      "types": "./lib/types/tool.d.ts",
+      "default": "./lib/tool.js"
+    },
     "./client": {
       "types": "./lib/types/client/index.d.ts",
       "default": "./lib/client.js"
@@ -65,8 +69,7 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@khorsheed/dsh-local-agent": "^0.1.0-rc.8",
-    "@khorsheed/dsh-local-agent-tool-subagent": "^0.1.0-rc.8"
+    "@khorsheed/dsh-local-agent": "^0.2.0-rc.1"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",