@knyazevai/dsh 0.1.5 → 0.2.1

package/lib/types/profile-boot.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Shared profile boot for every `dsh` surface: resolve the profile, stack its
+ * patch layers (bundle layers in `dsh.profile.bundles` order, the profile's
+ * own `cordis.patch.yml`, `--patch` overlays, the telemetry switch), mount the
+ * tree over the profile's empty root config, and wire fail-loud plus bounded shutdown.
+ *
+ * App flags are not the launcher's business: the invocation's inner arguments
+ * are provided to the tree through `ctx.cmdlineArgs`, where any injected app
+ * plugin may read the same immutable snapshot.
+ * @module @knyazevai/dsh/profile-boot
+ */
+import { type Context } from '@deepseek-ai/cordis';
+import { type ProfileContext, type Profile } from '@knyazevai/dsh-app-boot';
+import { type LaunchEnvironmentSnapshot } from '@knyazevai/dsh-launch-environment';
+import { type ProcessShutdown } from './process-shutdown.ts';
+/**
+ * The home-level user patch layer (`$DSH_HOME/cordis.patch.yml`), applied
+ * over every profile's own layer. Resolved per call, not at module load:
+ * `$DSH_HOME` may be set by the test or launcher after import.
+ * @returns the absolute patch-file path.
+ */
+export declare function homePatchPath(): string;
+/** Absolute path of this dsh installation's package.json (both anchors: src/ and lib/ sit one level under apps/cli). */
+export declare const INSTALL_ANCHOR: string;
+/** Root config filename inside a profile directory. */
+export declare const PROFILE_ROOT_FILENAME = "cordis.yml";
+/**
+ * Replace the named custom profile with a fresh copy of one shipped template.
+ * This copies only the template's bundle list; local state from the
+ * same-named shipped profile is not read, and no inheritance metadata is
+ * persisted. The new profile is assembled in a `.<name>.staging-*` directory
+ * under the profiles directory and moved into place; only then is any previous
+ * target directory, including its dependencies and user patch, deleted. A
+ * failed move restores the previous directory; when restoring also fails, it
+ * stays in the staging directory. Shipped profile names, compared without
+ * case, are reserved. Concurrent replacements leave one complete copy; each
+ * one either succeeds or reports the concurrent recreation.
+ * @param name - the profile name to create or replace.
+ * @param fromDefaultProfile - shipped profile template to copy.
+ * @param home - Harness home containing the profile directory.
+ * @throws when the template is unknown, the target name is shipped, another process recreates the target
+ *   between the two renames, or a file-system operation fails; a restore failure is an `AggregateError`
+ *   that names the staging path holding the previous profile.
+ */
+export declare function initializeProfileFromDefault(name: string, fromDefaultProfile: string, home?: string): void;
+/**
+ * Load a resolved profile for `name` and (re)write the empty root config. The
+ * root is always rewritten: the whole composition is patch layers, and the
+ * vendored Loader's tree write-back (a plugin self-disposing persists the
+ * current tree) can bake composed rows into this file — which would duplicate
+ * every bundle insert on the next boot. The file exists on disk only because
+ * the Loader needs a real include root to anchor `baseUrl` at the profile
+ * directory (the config dump anchors on the same file, so both compose over
+ * the identical base).
+ * @param name - the profile name.
+ * @param userLayer - `false` skips parsing `cordis.patch.yml` (the default dump).
+ * @param fromDefaultProfile - shipped template that replaces the profile before loading it.
+ * @returns the loaded profile.
+ * @throws when explicit initialization names an unknown template or a shipped target.
+ */
+export declare function prepareProfile(name: string, userLayer?: boolean, fromDefaultProfile?: string): Profile;
+/** An application-owned profile and its independent installation fallback. */
+export interface ResolvedProfileRuntime {
+    /** Profile already loaded from the application's own directory. */
+    profile: Profile;
+    /** Absolute package.json path of the application's dsh installation. */
+    installAnchor: string;
+}
+/** Options for {@link runProfile}. */
+export interface RunProfileOptions {
+    /** This run's frozen environment snapshot, provided before any entry mounts. */
+    environment: LaunchEnvironmentSnapshot;
+    /** The profile name to boot. */
+    profile: string;
+    /** Loaded application profile; bypasses named profile initialization when supplied. */
+    resolvedProfile?: ResolvedProfileRuntime | undefined;
+    /** Shipped template that replaces the named profile before boot. */
+    fromDefaultProfile?: string | undefined;
+    /** `--patch` overlay paths, in argv order. */
+    patchFiles: readonly string[];
+    /** The invocation's inner arguments, handed to the tree through `ctx.cmdlineArgs`. */
+    args: readonly string[];
+    /** Application-owned package runtime, scoped to plugin package operations. */
+    packageManager?: ProfileContext['packageManager'];
+}
+/**
+ * Boot one profile invocation end to end and leave process lifetime to the
+ * mounted plugins (or to a one-shot runner the composition mounts).
+ * @param options - environment snapshot, profile name, overlays, and the booted app's own arguments.
+ * @returns the settled root context and the shutdown controller.
+ * @throws after disposing startup resources; cleanup failures retain the original error.
+ */
+export declare function runProfile(options: RunProfileOptions): Promise<{
+    ctx: Context;
+    shutdown: ProcessShutdown;
+}>;
+//# sourceMappingURL=profile-boot.d.ts.map

package/lib/types/startup-diagnostics.d.ts

@@ -0,0 +1,19 @@
+/** Save original startup diagnostics while keeping the terminal report concise. */
+import type { StartupError } from '@knyazevai/dsh-app-boot';
+/** Launcher-owned context; no environment values or plugin configurations are collected. */
+interface StartupDiagnosticContext {
+    home: string;
+    version: string;
+    profile: string;
+}
+/**
+ * Print the startup summary and save a private, uniquely named report under DSH_HOME/logs.
+ * Failed writes print the complete report to stderr instead of claiming a saved path.
+ * @param error - startup audit failure retaining plugin metadata and original errors.
+ * @param context - resolved Harness home, application version, and selected profile.
+ * @param write - terminal output sink; awaited before returning, defaults to stderr.
+ * @returns after saving or printing the report and completing terminal writes.
+ */
+export declare function reportStartupFailure(error: StartupError, context: StartupDiagnosticContext, write?: (text: string) => void | Promise<void>): Promise<void>;
+export {};
+//# sourceMappingURL=startup-diagnostics.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@knyazevai/dsh",
-  "description": "dsh CLI: profile boot, plugin management, and the browser UI alias",
-  "version": "0.1.5",
+  "description": "dsh CLI: profile launch, plugin management, and configuration inspection",
+  "version": "0.2.1",
   "publishConfig": {
     "access": "public"
   },
@@ -11,98 +11,170 @@
     "directory": "apps/cli"
   },
   "type": "module",
-  "engines": {
-    "node": "^22.19.0 || >=24.0.0"
-  },
   "bin": {
     "dsh": "bin.mjs"
   },
   "files": [
-    "bin.mjs",
     "lib/*.js",
-    "config"
+    "lib/types/*.d.ts",
+    "bin.mjs"
   ],
   "license": "MIT",
   "dependencies": {
+    "@deepseek-ai/cordis": "~4.0.5",
+    "@knyazevai/dsh-hmr": "0.2.1",
+    "@deepseek-ai/cordis-plugin-include": "~1.0.10",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6",
+    "@deepseek-ai/cordis-plugin-timer": "~1.1.7",
+    "@knyazevai/dsh-acp-app": "0.2.1",
+    "@knyazevai/dsh-agent-instructions": "0.2.1",
+    "@knyazevai/dsh-agent-tool-presentation": "0.2.1",
+    "@knyazevai/dsh-app-boot": "0.2.1",
+    "@knyazevai/dsh-base": "0.2.1",
+    "@knyazevai/dsh-client-ui-agent-preset": "0.2.1",
+    "@knyazevai/dsh-client-ui-cordis": "0.2.1",
+    "@knyazevai/dsh-cmdline": "0.2.1",
+    "@knyazevai/dsh-command-compact": "0.2.1",
+    "@knyazevai/dsh-command-goal": "0.2.1",
+    "@knyazevai/dsh-compaction-basic": "0.2.1",
+    "@knyazevai/dsh-compaction-tool-result-pruner": "0.2.1",
+    "@knyazevai/dsh-cordis-client-runner": "0.2.1",
+    "@knyazevai/dsh-experimental-agent-team-profile": "0.2.1",
+    "@knyazevai/dsh-experimental-inspector-profile": "0.2.1",
+    "@knyazevai/dsh-fs-local": "0.2.1",
+    "@knyazevai/dsh-goal": "0.2.1",
+    "@knyazevai/dsh-goal-round-driver": "0.2.1",
+    "@knyazevai/dsh-headless": "0.2.1",
+    "@knyazevai/dsh-home-paths": "0.2.1",
+    "@knyazevai/dsh-jobs-local": "0.2.1",
+    "@knyazevai/dsh-launch-environment": "0.2.1",
+    "@knyazevai/dsh-mcp-client": "0.2.1",
+    "@knyazevai/dsh-persona": "0.2.1",
+    "@knyazevai/dsh-plan-mode": "0.2.1",
+    "@knyazevai/dsh-pwsh-local": "0.2.1",
+    "@knyazevai/dsh-pwsh-sandbox": "0.2.1",
+    "@knyazevai/dsh-schedule": "0.2.1",
+    "@knyazevai/dsh-sdk-app": "0.2.1",
+    "@knyazevai/dsh-sdk-minimal": "0.2.1",
+    "@knyazevai/dsh-session-projection": "0.2.1",
+    "@knyazevai/dsh-session-reference": "0.2.1",
+    "@knyazevai/dsh-skill": "0.2.1",
+    "@knyazevai/dsh-skill-filesystem": "0.2.1",
+    "@knyazevai/dsh-skill-office": "0.2.1",
+    "@knyazevai/dsh-tool-workspace-dependencies": "0.2.1",
+    "@knyazevai/dsh-terminal": "0.2.1",
+    "@knyazevai/dsh-terminal-bash": "0.2.1",
+    "@knyazevai/dsh-time-context": "0.2.1",
+    "@knyazevai/dsh-tmux-context": "0.2.1",
+    "@knyazevai/dsh-token-meter": "0.2.1",
+    "@knyazevai/dsh-tool-ask-user": "0.2.1",
+    "@knyazevai/dsh-tool-bash": "0.2.1",
+    "@knyazevai/dsh-tool-bash-persistent": "0.2.1",
+    "@knyazevai/dsh-tool-cordis": "0.2.1",
+    "@knyazevai/dsh-tool-present": "0.2.1",
+    "@knyazevai/dsh-tool-fs": "0.2.1",
+    "@knyazevai/dsh-tool-fs-search": "0.2.1",
+    "@knyazevai/dsh-tool-goal": "0.2.1",
+    "@knyazevai/dsh-tool-jobs": "0.2.1",
+    "@knyazevai/dsh-tool-pwsh": "0.2.1",
+    "@knyazevai/dsh-tool-pwsh-persistent": "0.2.1",
+    "@knyazevai/dsh-tool-schedule": "0.2.1",
+    "@knyazevai/dsh-tool-skill": "0.2.1",
+    "@knyazevai/dsh-tool-str-replace-editor": "0.2.1",
+    "@knyazevai/dsh-tool-subagent": "0.2.1",
+    "@knyazevai/dsh-tool-subagent-control": "0.2.1",
+    "@knyazevai/dsh-tool-todo": "0.2.1",
+    "@knyazevai/dsh-tool-web": "0.2.1",
+    "@knyazevai/dsh-tool-workflow": "0.2.1",
+    "@knyazevai/dsh-web-app": "0.2.1",
+    "@knyazevai/dsh-workflow-ptc": "0.2.1",
+    "@deepseek-ai/schemastery": "~3.18.5",
     "commander": "^15.0.0",
-    "js-yaml": "^4.2.0",
-    "node-addon-require-builtin": "^0.1.4",
-    "@deepseek-ai/cordis-plugin-include": "^1.0.6",
-    "@deepseek-ai/cordis-plugin-timer": "^1.1.3",
-    "@deepseek-ai/cordis-plugin-hmr": "^1.0.16",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@knyazevai/dsh-app-boot": "^0.1.5",
-    "@knyazevai/dsh-agent-tool-presentation": "^0.1.5",
-    "@knyazevai/dsh-base": "^0.1.5",
-    "@knyazevai/dsh-command-compact": "^0.1.5",
-    "@knyazevai/dsh-client-ui-agent-preset": "^0.1.5",
-    "@knyazevai/dsh-client-ui-cordis": "^0.1.5",
-    "@knyazevai/dsh-compaction-basic": "^0.1.5",
-    "@knyazevai/dsh-compaction-tool-result-pruner": "^0.1.5",
-    "@knyazevai/dsh-goal": "^0.1.5",
-    "@knyazevai/dsh-cmdline": "^0.1.5",
-    "@knyazevai/dsh-goal-round-driver": "^0.1.5",
-    "@knyazevai/dsh-command-goal": "^0.1.5",
-    "@knyazevai/dsh-cordis-client-runner": "^0.1.5",
-    "@knyazevai/dsh-launch-environment": "^0.1.5",
-    "@knyazevai/dsh-fork-base": "^0.1.5",
-    "@knyazevai/dsh-fork-web": "^0.1.5",
-    "@knyazevai/dsh-mcp-client": "^0.1.5",
-    "@knyazevai/dsh-home-paths": "^0.1.5",
-    "@knyazevai/dsh-persona": "^0.1.5",
-    "@knyazevai/dsh-plan-mode": "^0.1.5",
-    "@knyazevai/dsh-headless": "^0.1.5",
-    "@knyazevai/dsh-terminal": "^0.1.5",
-    "@knyazevai/dsh-terminal-bash": "^0.1.5",
-    "@knyazevai/dsh-fs-local": "^0.1.5",
-    "@knyazevai/dsh-pwsh-local": "^0.1.5",
-    "@knyazevai/dsh-session-projection": "^0.1.5",
-    "@knyazevai/dsh-pwsh-sandbox": "^0.1.5",
-    "@knyazevai/dsh-session-reference": "^0.1.5",
-    "@knyazevai/dsh-time-context": "^0.1.5",
-    "@knyazevai/dsh-skill": "^0.1.5",
-    "@knyazevai/dsh-skill-filesystem": "^0.1.5",
-    "@knyazevai/dsh-jobs-local": "^0.1.5",
-    "@knyazevai/dsh-tmux-context": "^0.1.5",
-    "@knyazevai/dsh-tool-ask-user": "^0.1.5",
-    "@knyazevai/dsh-tool-bash": "^0.1.5",
-    "@knyazevai/dsh-tool-pwsh-persistent": "^0.1.5",
-    "@knyazevai/dsh-token-meter": "^0.1.5",
-    "@knyazevai/dsh-tool-cordis": "^0.1.5",
-    "@knyazevai/dsh-tool-bash-persistent": "^0.1.5",
-    "@knyazevai/dsh-tool-fs": "^0.1.5",
-    "@knyazevai/dsh-tool-fs-search": "^0.1.5",
-    "@knyazevai/dsh-tool-goal": "^0.1.5",
-    "@knyazevai/dsh-tool-ralph": "^0.1.5",
-    "@knyazevai/dsh-tool-pwsh": "^0.1.5",
-    "@knyazevai/dsh-schedule": "^0.1.5",
-    "@knyazevai/dsh-tool-str-replace-editor": "^0.1.5",
-    "@knyazevai/dsh-tool-subagent": "^0.1.5",
-    "@knyazevai/dsh-tool-subagent-control": "^0.1.5",
-    "@knyazevai/dsh-tool-jobs": "^0.1.5",
-    "@knyazevai/dsh-tool-skill": "^0.1.5",
-    "@knyazevai/dsh-tool-todo": "^0.1.5",
-    "@knyazevai/dsh-tool-web": "^0.1.5",
-    "@knyazevai/dsh-web-app": "^0.1.5",
-    "@knyazevai/dsh-workflow-worker-thread": "^0.1.5",
-    "@knyazevai/dsh-agent-instructions": "^0.1.5",
-    "@knyazevai/dsh-tool-workflow": "^0.1.5",
-    "@deepseek-ai/cordis": "^4.0.1"
+    "js-yaml": "^4.3.2",
+    "node-addon-require-builtin": "^0.1.9",
+    "@knyazevai/dsh-http-proxy": "0.2.1",
+    "@knyazevai/dsh-mcp-resources": "0.2.1",
+    "@knyazevai/dsh-plugin-manager": "0.2.1",
+    "@knyazevai/dsh-atomic-write": "0.2.1",
+    "@knyazevai/dsh-agent-preset": "0.2.1",
+    "@knyazevai/dsh-experimental-voice-input-bundle": "0.2.1",
+    "@knyazevai/dsh-experimental-auto-review": "0.2.1",
+    "@knyazevai/dsh-wake-scheduler": "0.2.1",
+    "@knyazevai/dsh-fork-base": "0.2.1",
+    "@knyazevai/dsh-fork-web": "0.2.1",
+    "@knyazevai/dsh-experimental-cot-translation-bundle": "0.2.1",
+    "@knyazevai/dsh-experimental-badge-skill-bundle": "0.2.1",
+    "@knyazevai/dsh-experimental-ralph-bundle": "0.2.1",
+    "@knyazevai/dsh-experimental-session-titles-bundle": "0.2.1",
+    "@knyazevai/dsh-experimental-terminal-bundle": "0.2.1",
+    "@knyazevai/dsh-experimental-session-search": "0.2.1",
+    "@knyazevai/dsh-experimental-tool-worktree": "0.2.1",
+    "@knyazevai/dsh-experimental-plugin-market-bundle": "0.2.1"
   },
   "devDependencies": {
+    "@knyazevai/dsh-skill-badge": "0.2.1",
+    "@knyazevai/dsh-webhook-github": "0.2.1",
+    "@knyazevai/dsh-webhook": "0.2.1",
+    "@knyazevai/dsh-tool-ralph": "0.2.1",
+    "@knyazevai/dsh-hooks-codex": "0.2.1",
+    "@knyazevai/dsh-hooks-claude-code": "0.2.1",
+    "@agentclientprotocol/sdk": "1.4.0",
+    "@knyazevai/dsh-acp": "0.2.1",
+    "@knyazevai/dsh-agent": "0.2.1",
+    "@knyazevai/dsh-agent-loop": "0.2.1",
+    "@knyazevai/dsh-agent-loop-testkit": "0.2.1",
+    "@knyazevai/dsh-attachment-local": "0.2.1",
+    "@knyazevai/dsh-bash-local": "0.2.1",
+    "@knyazevai/dsh-credentials-local": "0.2.1",
+    "@knyazevai/dsh-deepseek-llm-api-extensions": "0.2.1",
+    "@knyazevai/dsh-experimental-agent-team": "0.2.1",
+    "@knyazevai/dsh-experimental-ptc-runtime-python": "0.2.1",
+    "@knyazevai/dsh-experimental-tool-agent-team": "0.2.1",
+    "@knyazevai/dsh-fs-observation-policy": "0.2.1",
+    "@knyazevai/dsh-fs-sandbox": "0.2.1",
+    "@knyazevai/dsh-host-frontend-static": "0.2.1",
+    "@knyazevai/dsh-host-webserver": "0.2.1",
+    "@knyazevai/dsh-llm": "0.2.1",
+    "@knyazevai/dsh-llm-deepseek": "0.2.1",
+    "@knyazevai/dsh-llm-deepseek-api-key": "0.2.1",
+    "@knyazevai/dsh-llm-deepseek-account": "0.2.1",
+    "@knyazevai/dsh-llm-mock-server": "0.2.1",
+    "@knyazevai/dsh-llm-pi-ai": "0.2.1",
+    "@knyazevai/dsh-llm-replay": "0.2.1",
+    "@knyazevai/dsh-loader-smoke": "0.2.1",
+    "@knyazevai/dsh-plugin-package-inventory-deepseek": "0.2.1",
+    "@knyazevai/dsh-sandbox-local": "0.2.1",
+    "@knyazevai/dsh-sandbox-policy": "0.2.1",
+    "@knyazevai/dsh-sdk-client": "0.2.1",
+    "@knyazevai/dsh-session": "0.2.1",
+    "@knyazevai/dsh-session-checkpoint-policy": "0.2.1",
+    "@knyazevai/dsh-session-log-deepseek": "0.2.1",
+    "@knyazevai/dsh-session-persistence-jsonl": "0.2.1",
+    "@knyazevai/dsh-session-query": "0.2.1",
+    "@knyazevai/dsh-shell-env": "0.2.1",
+    "@knyazevai/dsh-settings": "0.2.1",
+    "@knyazevai/dsh-subagent": "0.2.1",
+    "@knyazevai/dsh-subagent-fork-in-process": "0.2.1",
+    "@knyazevai/dsh-subagent-spawn-in-process": "0.2.1",
+    "@knyazevai/dsh-subprocess-local": "0.2.1",
+    "@knyazevai/dsh-system-prompt": "0.2.1",
+    "@knyazevai/dsh-tools": "0.2.1",
+    "@knyazevai/dsh-user-approval": "0.2.1",
     "@types/js-yaml": "^4.0.9",
-    "execa": "^10.0.0",
-    "@knyazevai/dsh-agent": "^0.1.5",
-    "@knyazevai/dsh-host-frontend-static": "^0.1.5",
-    "@knyazevai/dsh-host-apiproxy": "^0.1.5",
-    "@knyazevai/dsh-host-webserver": "^0.1.5",
-    "@knyazevai/dsh-llm": "^0.1.5",
-    "@knyazevai/dsh-llm-mock-server": "^0.1.5",
-    "@knyazevai/dsh-session": "^0.1.5",
-    "@knyazevai/dsh-loader-smoke": "^0.1.5",
-    "@knyazevai/dsh-settings": "^0.1.5",
-    "@knyazevai/dsh-system-prompt": "^0.1.5",
-    "@knyazevai/dsh-subagent": "^0.1.5",
-    "@knyazevai/dsh-tools": "^0.1.5"
+    "@types/ws": "8.18.1",
+    "ajv": "^8.20.0",
+    "execa": "^10.0.1",
+    "ws": "8.21.3"
+  },
+  "exports": {
+    "./profile-boot": {
+      "types": "./lib/types/profile-boot.d.ts",
+      "default": "./lib/profile-boot.js"
+    },
+    "./lib/*": "./lib/*",
+    "./package.json": "./package.json"
+  },
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
   }
 }

package/config/agent-presets/code/agent.cordis.yml

@@ -1,263 +0,0 @@
-# The `code` agent preset: the standard coding agent, presented as Code Mode.
-#
-# Everything in `standard` is here unchanged. What is added is the `tool-presentation`
-# row: instead of one tool call per action, the model writes a TypeScript
-# program against a generated SDK and `run_code` executes it, so a sequence
-# that would be five round trips becomes one.
-#
-# The registry itself stays on the host plane — the agent loop's scheduler and
-# the API proxy's presenters are its consumers — so what this preset owns is
-# the PRESENTATION of that registry for this agent alone. Native sessions run
-# beside this one in the same process, each seeing its own catalog.
-#
-# This file is an AGENT-PLANE composition. It is mounted under one agent's
-# scope context, so every tool and prompt section it registers belongs to that
-# session alone. The host composition (`base.cordis.yml` + `web.cordis.yml`)
-# keeps everything a preset must not own: the registries themselves, the
-# sandbox and approval stack, persistence, and the model route.
-#
-# A service row here MUST sit inside a group carrying an `isolate` realm.
-# Without one it publishes into the root realm, where it is process-global
-# rather than per-session and the second session mounting this preset collides
-# with the first; `dsh-agent-presets` rejects that at mount. `true` means an
-# entry-local realm — one private instance per mounted session, which is the
-# default this deployment wants. A shared label would instead pool one instance
-# across every session naming it.
-
-# ── identity ────────────────────────────────────────────────────────────────
-
-# The preset's own persona, shadowing the deployment default for this agent.
-# `{{model}}` and `{{cwd}}` resolve from the agent's own route and workspace.
-- id: persona
-  name: '@knyazevai/dsh-persona'
-  config:
-    text: >-
-      You are a coding agent powered by the {{model}} model. Your working directory is {{cwd}}.
-
-- id: agent-instructions
-  name: '@knyazevai/dsh-agent-instructions'
-  config:
-    maxBytes: 65536
-
-# ── shell ───────────────────────────────────────────────────────────────────
-
-# `shell-env` stays in the HOST composition: `apps/cli/src/web.ts` injects it to
-# publish `DSH_WEB_URL`/`DSH_WEB_MODE`, and a host row that injects a service is
-# the criterion for host-plane ownership — injection resolves before any session
-# exists, so there is no agent to key by. Behind a preset realm those variables
-# never reached the model's shell at all. Both shell tools consume the host
-# registry from here; their executors (`bash-sandbox`/`pwsh-sandbox`) are
-# host-plane too.
-- id: tool-bash
-  name: '@knyazevai/dsh-tool-bash'
-  disabled: !!js process.platform === 'win32'
-
-- id: tool-pwsh
-  name: '@knyazevai/dsh-tool-pwsh'
-  disabled: !!js process.platform !== 'win32'
-
-# ── filesystem ──────────────────────────────────────────────────────────────
-
-# Both register into the host `tools` registry and provide nothing, so
-# they need no realm. The `fs` service and its policy stay in the host.
-- id: tool-fs
-  name: '@knyazevai/dsh-tool-fs'
-
-- id: tool-fs-search
-  name: '@knyazevai/dsh-tool-fs-search'
-  config:
-    sampleOverCapGlobResults: false
-
-# ── background jobs ────────────────────────────────────────────────────────
-
-# Only the model-facing controls. The task REGISTRY stays on the host plane:
-# its producers sit outside any realm this file could put it in — `tool-bash`
-# above resolves it with `ctx.get`, and an entry-local realm here is invisible
-# to every sibling row, so `run_in_background` would answer "background jobs
-# unavailable" while these controls sat in the catalog. The registry is keyed by
-# owning agent anyway, so one host instance serves every session. What a preset
-# chooses is whether its agent can collect and stop background work at all.
-- id: tool-jobs
-  name: '@knyazevai/dsh-tool-jobs'
-
-# ── skills ──────────────────────────────────────────────────────────────────
-
-# The skill REGISTRY lives in the host composition and is layered per scope:
-# these rows register into THIS preset's layer of it, so they need no realm.
-# `skill-filesystem` contributes local-root discovery for agents on this preset, and
-# `tool-skill` gives them the catalog and loader; the merged catalog also
-# carries whatever the deployment registered globally (repository plugins).
-- id: skill-filesystem
-  name: '@knyazevai/dsh-skill-filesystem'
-
-- id: tool-skill
-  name: '@knyazevai/dsh-tool-skill'
-
-# ── goals ───────────────────────────────────────────────────────────────────
-
-# Only the model-facing tool. The goal SERVICE, its session driver, and the
-# `/goal` command stay on the host plane: the Gateway serves the goal domain as
-# Remote endpoints whose receiver comes from a generated descriptor, so it
-# resolves `goals` on the host and an entry-local realm here would hide it. The
-# registry is keyed by session anyway, so one host instance serves every
-# session. What a preset chooses is whether its agent can call the goal tool.
-- id: tool-goal
-  name: '@knyazevai/dsh-tool-goal'
-
-# ── plan mode ───────────────────────────────────────────────────────────────
-
-# Plan state is per-agent by nature, so an entry-local realm is not a
-# workaround here — it is the correct lifetime.
-- id: planning
-  name: cordis:group
-  group: true
-  isolate:
-    planMode: true
-  config:
-    - id: plan-mode
-      name: '@knyazevai/dsh-plan-mode'
-      config:
-        section: |
-              You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
-
-              Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
-
-              The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
-
-              Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
-
-              Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
-
-              When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
-
-# ── compaction ──────────────────────────────────────────────────────────────
-
-# `compaction-basic` reads `toolResultPrune` through `ctx.get`, so the pruner must
-# share this realm rather than sit outside it.
-#
-# `tokenMeter` is deliberately NOT in this realm: the meter stays on the HOST
-# plane, and the rows here resolve that one instance. It takes no configuration,
-# keys every fold by Session, and owns the context-meter projection units the
-# browser reads for every session — behind a realm those units would come and go
-# with whichever presets happen to be mounted. What a preset chooses is whether
-# its agent compacts at all, which is `compaction-basic` below.
-- id: compaction
-  name: cordis:group
-  group: true
-  isolate:
-    compaction: true
-    toolResultPruner: true
-  config:
-    - id: compaction-basic
-      name: '@knyazevai/dsh-compaction-basic'
-
-    - id: command-compact
-      name: '@knyazevai/dsh-command-compact'
-
-    - id: tool-result-pruner
-      name: '@knyazevai/dsh-compaction-tool-result-pruner'
-      config:
-        thresholdChars: 8192
-        headChars: 4096
-        tailChars: 1024
-
-# ── delegation and workflows ────────────────────────────────────────────────
-
-# The `subagents` registry and its spawn/fork backends live in the HOST
-# composition: the registry is a process singleton whose cross-session queries
-# the api-proxy serves to the browser, and a provider name may only be
-# registered once. This preset contributes the delegation TOOLS, which resolve
-# that host registry.
-#
-# `workflows` is different — nothing outside an agent reads it — so every row
-# that reaches it shares one entry-local realm here, and a consumer left
-# outside would resolve a host registry this preset does not populate.
-- id: delegation
-  name: cordis:group
-  group: true
-  isolate:
-    workflowEngine: true
-  config:
-    - id: tool-subagent-control
-      name: '@knyazevai/dsh-tool-subagent-control'
-
-    - id: tool-subagent-list-agents
-      name: '@knyazevai/dsh-tool-subagent-control/list-agents'
-
-    - id: tool-subagent
-      name: '@knyazevai/dsh-tool-subagent'
-      config:
-        provider: spawn
-        toolName: subagent
-        backgroundMode: continuable
-
-    - id: tool-subagent-fork
-      name: '@knyazevai/dsh-tool-subagent'
-      config:
-        provider: fork
-        toolName: subagent_fork
-        backgroundMode: continuable
-
-    # Production dsh does not install these optional providers. Install the
-    # matching Bundle in this Profile and restart the Host, then copy this
-    # preset and remove `disabled` from the matching tool row. Host availability
-    # alone grants no tool.
-    - id: tool-subagent-codex
-      name: '@knyazevai/dsh-tool-subagent'
-      disabled: true
-      config:
-        provider: codex
-        toolName: subagent_codex
-        backgroundMode: one-shot
-        maxDepth: provider-managed
-
-    - id: tool-subagent-claude-code
-      name: '@knyazevai/dsh-tool-subagent'
-      disabled: true
-      config:
-        provider: claude-code
-        toolName: subagent_claude_code
-        backgroundMode: one-shot
-        maxDepth: provider-managed
-
-    - id: workflow-worker-thread
-      name: '@knyazevai/dsh-workflow-worker-thread'
-      config:
-        provider: spawn
-
-    - id: tool-workflow
-      name: '@knyazevai/dsh-tool-workflow'
-
-    - id: tool-ralph
-      name: '@knyazevai/dsh-tool-ralph'
-      config:
-        subagentProvider: spawn
-        maxRounds: 64
-
-# ── remaining model-facing rows ─────────────────────────────────────────────
-
-- id: tool-ask-user
-  name: '@knyazevai/dsh-tool-ask-user'
-
-- id: tool-todo
-  name: '@knyazevai/dsh-tool-todo'
-  config:
-    allowParallelInProgress: true
-
-# The `web` service and its search provider stay in the host composition; only
-# the model-facing tool is per-session.
-- id: tool-web
-  name: '@knyazevai/dsh-tool-web'
-  config:
-    fetch: false
-    searchTimeoutMs: 60000
-
-# ── presentation ────────────────────────────────────────────────────────────
-
-# Code Mode for this agent alone. The row waits for the host's `codeRuntime`
-# rather than assuming it: a deployment that composes no TypeScript runtime
-# fails this preset at mount, naming this id, instead of at the first request.
-- id: tool-presentation
-  name: '@knyazevai/dsh-agent-tool-presentation'
-  config:
-    mode: code

package/config/agent-presets/code/preset.yml

@@ -1,3 +0,0 @@
-name: PTC 模式
-description: 具备标准模式的全部能力，并通过 Code Mode SDK 呈现工具，让模型用一个 TypeScript 程序组合多步操作。
-order: 2