@khorsheed/dsh-local-agent 0.2.0-rc.1 → 0.2.0

package/lib/types/preset-tool-host.d.ts

@@ -0,0 +1,70 @@
+import type { Context } from '@deepseek-ai/cordis';
+/** One plugin tool as the bridge lists it (MCP `tools/list` shape). */
+export interface BridgedTool {
+    readonly name: string;
+    readonly description: string;
+    readonly inputSchema: Record<string, unknown>;
+}
+/** One bridged call's outcome (MCP `tools/call` result shape). */
+export interface BridgedToolResult {
+    readonly content: readonly Record<string, unknown>[];
+    readonly isError: boolean;
+}
+/** One skill the mode itself contributes (absent from the global view). */
+export interface ModeSkill {
+    readonly name: string;
+    readonly description: string;
+    readonly content: string;
+}
+/** The per-member preset agents and the list/call operations the bridge forwards. */
+export declare class PresetToolHost {
+    private readonly ctx;
+    private readonly diagnostics?;
+    private readonly hosts;
+    /** Stand-in → the member's child session, for routing approvals its calls raise. */
+    private readonly standIns;
+    /** The member a stand-in agent acts for, if it is one of ours. */
+    memberOf(agent: unknown): string | undefined;
+    /**
+     * @param ctx - the local-agent plugin context.
+     * @param diagnostics - optional JSONL file each listing appends a summary to
+     *   (what the preset agent's scope saw and which tools passed the filter).
+     */
+    constructor(ctx: Context, diagnostics?: string | undefined);
+    /** Append one diagnostics line (best-effort). */
+    note(entry: Record<string, unknown>): void;
+    private probe;
+    /** The member's stand-in, scoped with its preset on first use (and re-scoped when the preset changed). */
+    private agentFor;
+    /**
+     * The preset's plugin tools, for a member's `tools/list`.
+     * @param childSessionId - the member's child session.
+     * @param preset - the member's mode.
+     * @param cwd - the member's working directory.
+     * @returns the tools, empty when the host lacks the capabilities.
+     */
+    list(childSessionId: string, preset: string, cwd?: string): Promise<BridgedTool[]>;
+    /**
+     * Run one plugin tool for a member through the registry's execution
+     * pipeline (policies, approvals, timeouts), as the member's preset agent.
+     * @param childSessionId - the member's child session.
+     * @param preset - the member's mode.
+     * @param name - the tool name.
+     * @param args - the tool arguments.
+     * @param signal - cancellation.
+     * @param cwd - the member's working directory.
+     * @returns the MCP result.
+     */
+    call(childSessionId: string, preset: string, name: string, args: unknown, signal: AbortSignal, cwd?: string): Promise<BridgedToolResult>;
+    /**
+     * The skills the member's mode contributes: visible in its scope, absent
+     * from the global view (installed skills every CLI already sees stay out).
+     * @param childSessionId - the member's child session.
+     * @param preset - the member's mode.
+     * @returns the mode's skills with their content; empty without a skill registry.
+     */
+    skills(childSessionId: string, preset: string): Promise<ModeSkill[]>;
+    /** Dispose every preset agent. */
+    dispose(): Promise<void>;
+}
+//# sourceMappingURL=preset-tool-host.d.ts.map

package/lib/types/preset-tool-host.js

@@ -0,0 +1,210 @@
+/**
+ * Preset tool host: lets an external CLI member use the plugin tools of a
+ * host agent preset (a mode), through its member bridge, ON THE MEMBER'S OWN
+ * SESSION. The tool registry keys scoped tools by an agent identity, and
+ * plugin tools read only `agent.id` and `agent.session` from it — so the
+ * member gets a model-less stand-in: `{ id, session }` over its own child
+ * session, given a scope (`createScope`) with the preset mounted. Calls run
+ * through the registry's normal pipeline (policies, approvals, timeouts) as
+ * that stand-in, so plugin state (a video project) belongs to the member's
+ * session and the mode's panels show there; the session also records the mode
+ * (`agent-preset/selected`), so per-session plugin visibility follows it.
+ * Only PLUGIN tools are offered (`Symbol.for('dsh.tool.origin')` channel
+ * `plugin`; the CLI brings its own shell, files and todo).
+ *
+ * Everything host-side is probed, never injected: without `sessions`,
+ * `agentPresets` or `tools` the member simply gets no extra tools.
+ * @module @khorsheed/dsh-local-agent/preset-tool-host
+ */
+import { randomUUID } from 'node:crypto';
+import { appendFileSync } from 'node:fs';
+import { createScope } from '@deepseek-ai/dsh-scope';
+import { SessionId } from '@deepseek-ai/dsh-session';
+/** Owners whose tools the bridge already serves itself (room), or that delegate from dsh (the local-agent family). */
+const skippedOwner = (owner) => owner === '@khorsheed/dsh-room' || owner.startsWith('@khorsheed/dsh-local-agent');
+/** How long a freshly mounted preset may take to finish registering its tools, and how often to look. */
+const SETTLE_MS = 3_000;
+const SETTLE_STEP_MS = 150;
+const ORIGIN = Symbol.for('dsh.tool.origin');
+/** The mode a session records: its header, overridden by the latest selection. */
+function sessionPreset(session) {
+    let preset = session.header.agentPreset ?? undefined;
+    for (const event of session.snapshotEvents()) {
+        if (event.type === 'agent-preset/selected')
+            preset = event.data?.agentPreset ?? preset;
+    }
+    return preset;
+}
+/** Whether a definition is a plugin tool the bridge may forward. */
+function isPluginTool(definition) {
+    const origin = definition?.[ORIGIN];
+    return origin?.channel === 'plugin' && !skippedOwner(String(origin.owner));
+}
+/** Map registry content blocks to MCP content (text and images; anything else as text). */
+function mcpContent(blocks) {
+    return blocks.map((block) => {
+        if (block.type === 'text')
+            return { type: 'text', text: block.text ?? '' };
+        if (block.type === 'image' && typeof block.data === 'string')
+            return { type: 'image', data: block.data, mimeType: block.mediaType ?? block.mimeType ?? 'image/png' };
+        return { type: 'text', text: JSON.stringify(block) };
+    });
+}
+/** The per-member preset agents and the list/call operations the bridge forwards. */
+export class PresetToolHost {
+    ctx;
+    diagnostics;
+    hosts = new Map();
+    /** Stand-in → the member's child session, for routing approvals its calls raise. */
+    standIns = new WeakMap();
+    /** The member a stand-in agent acts for, if it is one of ours. */
+    memberOf(agent) {
+        return typeof agent === 'object' && agent !== null ? this.standIns.get(agent) : undefined;
+    }
+    /**
+     * @param ctx - the local-agent plugin context.
+     * @param diagnostics - optional JSONL file each listing appends a summary to
+     *   (what the preset agent's scope saw and which tools passed the filter).
+     */
+    constructor(ctx, diagnostics) {
+        this.ctx = ctx;
+        this.diagnostics = diagnostics;
+    }
+    /** Append one diagnostics line (best-effort). */
+    note(entry) {
+        if (this.diagnostics === undefined)
+            return;
+        try {
+            appendFileSync(this.diagnostics, `${JSON.stringify({ time: new Date().toISOString(), ...entry })}\n`);
+        }
+        catch { /* diagnostics never fail a call */ }
+    }
+    probe(name) {
+        return this.ctx.get.call(this.ctx, name);
+    }
+    /** The member's stand-in, scoped with its preset on first use (and re-scoped when the preset changed). */
+    async agentFor(childSessionId, preset, _cwd) {
+        const sessions = this.probe('sessions');
+        const presets = this.probe('agentPresets');
+        const session = sessions?.get(SessionId(childSessionId));
+        if (presets?.mount === undefined || session === undefined)
+            return undefined;
+        const current = this.hosts.get(childSessionId);
+        if (current !== undefined && current.preset === preset && (await current.agent).agent.session === session)
+            return (await current.agent).agent;
+        if (current !== undefined) {
+            this.hosts.delete(childSessionId);
+            void current.agent.then(handle => handle.dispose()).catch(() => { });
+        }
+        const agent = (async () => {
+            const resolved = await presets.resolve(preset);
+            const member = { id: childSessionId, session };
+            this.standIns.set(member, childSessionId);
+            const scope = createScope(this.ctx, member);
+            member.ctx = scope.ctx;
+            try {
+                await presets.mount(scope.ctx, resolved.id);
+            }
+            catch (error) {
+                await scope.dispose();
+                throw error;
+            }
+            // The member's session runs this mode now: the host's per-session
+            // plugin visibility reads it from here.
+            if (sessionPreset(session) !== resolved.id)
+                session.append('agent-preset/selected', { agentPreset: resolved.id });
+            return { agent: member, dispose: () => scope.dispose() };
+        })();
+        this.hosts.set(childSessionId, { preset, agent });
+        try {
+            return (await agent).agent;
+        }
+        catch (error) {
+            this.hosts.delete(childSessionId);
+            throw error;
+        }
+    }
+    /**
+     * The preset's plugin tools, for a member's `tools/list`.
+     * @param childSessionId - the member's child session.
+     * @param preset - the member's mode.
+     * @param cwd - the member's working directory.
+     * @returns the tools, empty when the host lacks the capabilities.
+     */
+    async list(childSessionId, preset, cwd) {
+        const tools = this.probe('tools');
+        const fresh = this.hosts.get(childSessionId)?.preset !== preset;
+        const agent = await this.agentFor(childSessionId, preset, cwd);
+        if (tools === undefined || agent === undefined) {
+            this.note({ childSessionId, preset, tools: tools !== undefined, agent: agent !== undefined });
+            return [];
+        }
+        // A preset mounted for the first time registers some rows' tools a
+        // moment later (deferred injects): wait until the scope stops growing.
+        let schemas = tools.schemas(agent);
+        if (fresh) {
+            for (let waited = 0; waited < SETTLE_MS; waited += SETTLE_STEP_MS) {
+                await new Promise(resolve => setTimeout(resolve, SETTLE_STEP_MS));
+                const next = tools.schemas(agent);
+                if (next.length === schemas.length && waited >= SETTLE_STEP_MS * 3)
+                    break;
+                schemas = next;
+            }
+        }
+        const listed = schemas.filter(schema => isPluginTool(tools.get(schema.name, agent)));
+        this.note({ childSessionId, preset, agent: agent.id, scope: schemas.map(schema => {
+                const origin = tools.get(schema.name, agent)?.[ORIGIN];
+                return origin === undefined ? schema.name : `${schema.name}<${String(origin.channel)}:${String(origin.owner)}>`;
+            }), listed: listed.map(schema => schema.name) });
+        return listed
+            .map(schema => ({
+            name: schema.name,
+            description: schema.description ?? '',
+            inputSchema: (schema.parameters ?? { type: 'object', properties: {} }),
+        }));
+    }
+    /**
+     * Run one plugin tool for a member through the registry's execution
+     * pipeline (policies, approvals, timeouts), as the member's preset agent.
+     * @param childSessionId - the member's child session.
+     * @param preset - the member's mode.
+     * @param name - the tool name.
+     * @param args - the tool arguments.
+     * @param signal - cancellation.
+     * @param cwd - the member's working directory.
+     * @returns the MCP result.
+     */
+    async call(childSessionId, preset, name, args, signal, cwd) {
+        const tools = this.probe('tools');
+        const agent = await this.agentFor(childSessionId, preset, cwd);
+        if (tools === undefined || agent === undefined)
+            return { content: [{ type: 'text', text: 'Mode tools are unavailable on this host' }], isError: true };
+        if (!isPluginTool(tools.get(name, agent)))
+            return { content: [{ type: 'text', text: `Unknown tool ${name} in mode ${preset}` }], isError: true };
+        const result = await tools.execute({ callId: `bridge-${randomUUID()}`, name, arguments: args, agent, signal });
+        return { content: mcpContent(result.content), isError: result.isError };
+    }
+    /**
+     * The skills the member's mode contributes: visible in its scope, absent
+     * from the global view (installed skills every CLI already sees stay out).
+     * @param childSessionId - the member's child session.
+     * @param preset - the member's mode.
+     * @returns the mode's skills with their content; empty without a skill registry.
+     */
+    async skills(childSessionId, preset) {
+        const registry = this.probe('skills');
+        const agent = await this.agentFor(childSessionId, preset, undefined);
+        if (registry?.list === undefined || agent === undefined)
+            return [];
+        const global = new Set((await registry.list()).map(skill => skill.name));
+        const own = (await registry.list({ scope: agent })).filter(skill => !global.has(skill.name));
+        const loaded = await Promise.all(own.map(skill => registry.get(skill.name, { scope: agent })));
+        return loaded.flatMap(skill => skill === undefined ? [] : [{ name: skill.name, description: skill.description, content: skill.content }]);
+    }
+    /** Dispose every preset agent. */
+    async dispose() {
+        const hosts = [...this.hosts.values()];
+        this.hosts.clear();
+        await Promise.all(hosts.map(host => host.agent.then(handle => handle.dispose()).catch(() => { })));
+    }
+}

package/lib/types/tool-factory.d.ts

@@ -14,9 +14,15 @@
  * The tool instead carries the handle as a first-class `resume` parameter and
  * resolves it through the localAgent service, which rejects any handle that
  * does not name a delegation recorded for THIS parent session and provider.
- * Continuation rounds still go through `ctx.subagents.start()`, so lifecycle
- * events (`subagent/start`/`subagent/end`) and the standard 子代理 surface are
- * unchanged.
+ * Continuation rounds still go through `ctx.subagents.startActivation()` with
+ * caller delivery, so lifecycle events (`subagent/start`/`subagent/end`) and
+ * the standard 子代理 surface are unchanged.
+ *
+ * Host 0.2.1 note: `startActivation` rejects a provider run id that names a
+ * live Session (DUPLICATE_CHILD) — and every family provider's child session
+ * IS live. Providers therefore publish per-execution run ids, and the durable
+ * dsh child session id is minted HERE (the tool), staged on the delegation
+ * intent, and re-attached to the run adapter the rest of the family tracks.
  *
  * This module used to ship as the standalone companion package
  * `@khorsheed/dsh-local-agent-tool-subagent` (0.1.x); the family fold moved it

package/lib/types/tool-factory.js

@@ -14,9 +14,15 @@
  * The tool instead carries the handle as a first-class `resume` parameter and
  * resolves it through the localAgent service, which rejects any handle that
  * does not name a delegation recorded for THIS parent session and provider.
- * Continuation rounds still go through `ctx.subagents.start()`, so lifecycle
- * events (`subagent/start`/`subagent/end`) and the standard 子代理 surface are
- * unchanged.
+ * Continuation rounds still go through `ctx.subagents.startActivation()` with
+ * caller delivery, so lifecycle events (`subagent/start`/`subagent/end`) and
+ * the standard 子代理 surface are unchanged.
+ *
+ * Host 0.2.1 note: `startActivation` rejects a provider run id that names a
+ * live Session (DUPLICATE_CHILD) — and every family provider's child session
+ * IS live. Providers therefore publish per-execution run ids, and the durable
+ * dsh child session id is minted HERE (the tool), staged on the delegation
+ * intent, and re-attached to the run adapter the rest of the family tracks.
  *
  * This module used to ship as the standalone companion package
  * `@khorsheed/dsh-local-agent-tool-subagent` (0.1.x); the family fold moved it
@@ -29,8 +35,10 @@
  *
  * @module @khorsheed/dsh-local-agent/tool-factory
  */
+import { randomUUID } from 'node:crypto';
 import z from '@deepseek-ai/schemastery';
 import { defineTool } from '@deepseek-ai/dsh-tools';
+import { SessionId } from '@deepseek-ai/dsh-session';
 /**
  * Tag the model-visible tool with its origin (AGENTS.md § Tool origin tagging;
  * seam S12): the capability catalog reads this `Symbol.for`-keyed tag back
@@ -97,8 +105,10 @@ function stopReasonError(result) {
 /**
  * Fuse a caller-owned controller with the tool execution's signal so EITHER
  * abort cancels the run — the same shape the facade's tracked controller
- * uses. The active-delegation registry's stop lever aborts the controller;
- * the tool's own execution abort flows through the execution signal.
+ * uses. The fused signal reaches `startActivation`'s `spec.signal`, which
+ * owns cancellation only until publication (host 0.2.1); the published
+ * activation's `dispose()` is the post-publication channel, wired below in
+ * the exec body and in the registry's stop lever.
  */
 function fusedSignal(controller, caller) {
     return caller === undefined ? controller.signal : AbortSignal.any([controller.signal, caller]);
@@ -245,8 +255,14 @@ export function mountSubagentDelegationTool(ctx, config, owner) {
                         provider: config.provider,
                         parentSessionId,
                     });
+                // The durable child identity: the recorded resume handle, or minted
+                // here for a fresh delegation (host 0.2.1 activations never surface
+                // it — a provider run id naming a live Session is DUPLICATE_CHILD,
+                // so the provider publishes a per-execution id and this id rides the
+                // staged intent instead).
+                const childSessionId = resumeHandle ?? randomUUID();
                 if (resumeHandle === undefined) {
-                    ctx.localAgent.stageDelegationIntent(parentSessionId, config.provider, { kind: 'fresh' });
+                    ctx.localAgent.stageDelegationIntent(parentSessionId, config.provider, { kind: 'fresh', childSessionId });
                 }
                 else if (resume !== undefined) {
                     // A host restart evicts the child session from the live store, and
@@ -261,19 +277,35 @@ export function mountSubagentDelegationTool(ctx, config, owner) {
                         cliSessionId: resume.cliSessionId,
                     });
                 }
-                const request = {
-                    label: args.description,
-                    prompt: [{ type: 'text', text: args.prompt }],
-                    parent,
-                };
                 // The run's own cancel lever: a controller fused with the tool
                 // execution signal, so the active-delegation registry's stop can
-                // abort it without touching the execution's own signal.
+                // abort it without touching the execution's own signal. The fused
+                // signal cancels only up to publication (host 0.2.1); after that the
+                // activation's dispose() is the cancel channel, wired below.
                 const controller = new AbortController();
-                const run = await ctx.subagents.start(config.provider, {
-                    ...request,
+                // Caller delivery: the tool awaits and reports the result itself; the
+                // parent agent gets no completion notice doubling the tool result.
+                const activation = await ctx.subagents.startActivation({
+                    provider: config.provider,
+                    label: args.description,
+                    request: {
+                        prompt: [{ type: 'text', text: args.prompt }],
+                        parent,
+                    },
                     signal: fusedSignal(controller, exec.signal),
+                    delivery: 'caller',
                 });
+                const dispose = () => activation.dispose();
+                const onExecAbort = () => {
+                    void dispose().catch((error) => {
+                        ctx.logger.warn(`subagent tool: execution-signal disposal of ${childSessionId} failed: ${String(error)}`);
+                    });
+                };
+                exec.signal.addEventListener('abort', onExecAbort, { once: true });
+                void activation.result.then(() => exec.signal.removeEventListener('abort', onExecAbort), () => exec.signal.removeEventListener('abort', onExecAbort));
+                // The run the family tracks: keyed by the dsh child session id (the
+                // resume handle the model sees), not the activation's per-execution id.
+                const run = { id: SessionId(childSessionId), result: activation.result, dispose };
                 // Register the in-flight run with the family's active-delegation
                 // registry (keyed by child session id) so `/local-agent stop
                 // <childSessionId>` — and the taskpilot stop button that dispatches
@@ -283,18 +315,23 @@ export function mountSubagentDelegationTool(ctx, config, owner) {
                 // predates the registry simply leaves the run untracked, as before.
                 const registry = ctx.localAgent;
                 if (typeof registry.trackDelegationRun === 'function') {
-                    registry.trackDelegationRun(String(run.id), run, () => controller.abort());
+                    registry.trackDelegationRun(childSessionId, run, () => {
+                        controller.abort();
+                        void dispose().catch((error) => {
+                            ctx.logger.warn(`subagent tool: stop disposal of ${childSessionId} failed: ${String(error)}`);
+                        });
+                    });
                 }
                 const settled = await settleForegroundRun(run);
                 if (resume === undefined) {
                     // Fresh delegation: self-describe the resume handle (the dsh child
-                    // session id, which equals the run id for a session-backed run) so
-                    // the model can continue the same conversation in a later round.
+                    // session id minted above and staged on the intent) so the model
+                    // can continue the same conversation in a later round.
                     return {
                         ...settled,
                         output: [...settled.output, {
                                 type: 'text',
-                                text: `${RESUME_HINT_PREFIX}${run.id}"`,
+                                text: `${RESUME_HINT_PREFIX}${childSessionId}"`,
                             }],
                     };
                 }

package/lib/types/types.d.ts

@@ -94,6 +94,29 @@ export interface LocalAgentSessionRecord {
  * this field's job.
  */
 export type LocalAgentCredentialState = 'absent' | 'present-unverified' | 'verified' | 'rejected';
+/**
+ * One harness's endpoint state, per field, for the settings card: the
+ * resolved baseUrl verbatim (not a secret) and the two credentials as
+ * presence booleans — secrets never cross this seam. The state is the
+ * RESOLVED view (scope file over the deployment config), which is exactly
+ * what a delegation round would use.
+ */
+export interface LocalAgentEndpointAuthState {
+    readonly baseUrl?: string;
+    readonly apiKeySet: boolean;
+    readonly authTokenSet: boolean;
+}
+/**
+ * One endpoint-credential edit: a string SETS the field, `null` (or a blank
+ * string) CLEARS it, and an absent key LEAVES it. Clearing lets the
+ * deployment-config layer answer for that field again (the merge is per
+ * field, file over config).
+ */
+export interface LocalAgentEndpointAuthFields {
+    readonly baseUrl?: string | null;
+    readonly apiKey?: string | null;
+    readonly authToken?: string | null;
+}
 /** One harness's auth-status snapshot, shared by the command and Remote channels. */
 export interface LocalAgentStatus {
     /** Harness command prefix. */
@@ -630,6 +653,14 @@ export interface LocalAgentMemberMessage {
     parentSessionId: string;
     /** The sender's delegation view, recorded as the delivery's provenance. */
     provenance: Record<string, string>;
+    /** `task` (default): a claiming room reports the reply back; `notify`: FYI only. */
+    kind?: 'task' | 'notify';
+    /** The message id this one answers (e.g. `m12`). */
+    inReplyTo?: string;
+    /** What the sender waits for before acting on the result (a claiming room's report gate reads it). */
+    note?: string;
+    /** `new` or a task number (a claiming room files the message under it). */
+    task?: string;
 }
 /**
  * The room gate's answer to a member notification, passed back to the sender
@@ -638,7 +669,7 @@ export interface LocalAgentMemberMessage {
  * DECLINE is not a value: the gate throws (the parent session is not a room
  * this instance manages) and the family direct-sends.
  */
-export type RoomMemberMessageReceipt = 'sent' | 'pending-confirm' | 'busy';
+export type RoomMemberMessageReceipt = 'sent' | 'pending-confirm' | 'busy' | `sent ${string}` | `pending-confirm ${string}`;
 /**
  * Duck-typed shape of the room service's member-message gate, probed via
  * `ctx.get('room')` — deliberately NO import of any room package, so the
@@ -646,7 +677,7 @@ export type RoomMemberMessageReceipt = 'sent' | 'pending-confirm' | 'busy';
  * independence-checker sanction: room absent or declining is invisible to the
  * family path. Room implements this shape to own the dispatch gate.
  */
-export type MemberRoomCommandName = 'room_plan' | 'room_read' | 'room_invite' | 'room_message';
+export type MemberRoomCommandName = 'room_plan' | 'room_read' | 'room_invite' | 'room_message' | 'ask_user_question' | 'room_help';
 export interface MemberRoomCommand {
     name: MemberRoomCommandName;
     arguments: Record<string, unknown>;
@@ -658,6 +689,23 @@ export interface RoomMemberMessageGate {
     }): Promise<boolean>;
     receiveMemberCommand?(actor: LocalAgentMemberRun, command: MemberRoomCommand): Promise<MemberMessageOutcome>;
     receiveMemberMessage(message: LocalAgentMemberMessage): Promise<RoomMemberMessageReceipt>;
+    /**
+     * The member's mode (a host agent preset id) whose plugin tools its bridge
+     * offers, with the member's working directory; undefined = no mode tools.
+     */
+    memberMode?(member: LocalAgentMemberRun): Promise<{
+        readonly preset: string;
+        readonly cwd?: string;
+    } | undefined>;
+    /**
+     * A member's mode tool needs the human's approval: the room asks in its
+     * conversation and answers with the registry's approval outcome.
+     */
+    askMemberApproval?(member: LocalAgentMemberRun, request: {
+        readonly toolName: string;
+        readonly reason?: string;
+        readonly signal?: AbortSignal;
+    }): Promise<'allowed-once' | 'rejected' | 'cancelled' | 'unavailable'>;
 }
 /**
  * Outcome of one `member_message` delivery. Channel-level failures (unknown or
@@ -696,14 +744,23 @@ export interface LocalAgentMemberRun {
 /**
  * What one delegation tool call intends for the provider's next `start()`.
  * The tool stages exactly one intent per call before awaiting
- * `ctx.subagents.start()`, and the provider consumes exactly one per start,
- * so a per-(parent, provider) FIFO keeps fresh and resume rounds paired even
- * under parallel delegation.
+ * `ctx.subagents.startActivation()`, and the provider consumes exactly one per
+ * start, so a per-(parent, provider) FIFO keeps fresh and resume rounds
+ * paired even under parallel delegation.
  */
 export type LocalAgentDelegationIntent = {
     readonly kind: 'fresh';
     readonly onAdmitted?: () => void | Promise<void>;
     readonly preparedMemberId?: string;
+    /**
+     * The dsh child session id the caller minted for this round (facade/tool
+     * fresh starts). Host 0.2.1 activation semantics forbid a provider run id
+     * that names a live Session (`startActivation` rejects it as
+     * DUPLICATE_CHILD), so the provider's returned run carries a per-execution
+     * id and the durable child identity rides this channel instead. Absent
+     * means the provider mints one (a direct start with no staged intent).
+     */
+    readonly childSessionId?: string;
     readonly effort?: string;
     readonly configurationLock?: string;
     /**

package/package.json

@@ -8,7 +8,7 @@
     "local-agent",
     "cli"
   ],
-  "version": "0.2.0-rc.1",
+  "version": "0.2.0",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -20,10 +20,6 @@
       "types": "./lib/types/index.d.ts",
       "default": "./lib/index.js"
     },
-    "./invariant": {
-      "types": "./lib/types/invariant.d.ts",
-      "default": "./lib/invariant.js"
-    },
     "./tool-factory": {
       "types": "./lib/types/tool-factory.d.ts",
       "default": "./lib/tool-factory.js"
@@ -55,6 +51,7 @@
         "@deepseek-ai/dsh-client-locale",
         "@deepseek-ai/dsh-client-ui-conversation",
         "@deepseek-ai/dsh-client-ui-primitives",
+        "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-chat"
       ],
       "platform": "web"
@@ -62,9 +59,13 @@
     "bundle": {
       "patch": "./cordis.patch.yml"
     },
+    "references": [
+      "@khorsheed/dsh-room"
+    ],
     "compat": {
       "minHost": "0.1.5-rc.1",
-      "verifiedHost": "0.1.5-rc.1"
+      "verifiedHost": "0.2.1-rc.1",
+      "notes": "The「本机 Agent 委派」family card (one Plugins-page plugins.item entry rendering each harness's registered settings section) mounts only on host 0.1.7-alpha.1+ (the Plugins page plugins.item seat, gated by configForms.whileServed on the served local-agent namespace); older hosts render no card, and companions on such a composition keep their own standalone cards — every other surface is unchanged."
     }
   },
   "files": [
@@ -78,28 +79,31 @@
     "CHANGELOG.md"
   ],
   "license": "MIT",
+  "engines": {
+    "dsh": ">=0.1.5-rc.1 <0.3.0-0"
+  },
   "dependencies": {
     "zod": "^4.4.3"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-subagent": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-subprocess": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-token-meter": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-tool-todo": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-tools": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-chat": "^0.1.0-rc.6 || ^0.2.0-rc.1"
+    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-commands": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-scope": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-subagent": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-subprocess": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-token-meter": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-tool-todo": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-tools": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-chat": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-token-meter": {