@matamt-dbg/dsh-studio 0.2.2 → 0.2.8

package/index.js

@@ -56,12 +56,14 @@ var BATCH_PLUGIN = `${PACKAGE_NAME}/batch`;
 function currentPluginName(name) {
   return name === LEGACY_PACKAGE_NAME || name.startsWith(`${LEGACY_PACKAGE_NAME}/`) ? PACKAGE_NAME + name.slice(LEGACY_PACKAGE_NAME.length) : name;
 }
+var STUDIO_VERSION = "0.2.8";
 
 // src/delegation.ts
 var ROLE_TOOL = "subagent_role";
 var LEGACY_ROLE_TOOL = "studio_role";
 var GENERIC_DELEGATION_TOOLS = ["subagent", "subagent_fork", "list_subagent_models"];
 var SUBAGENT_PLUGIN = "@deepseek-ai/dsh-tool-subagent";
+var isDelegationPlugin = (name) => name === SUBAGENT_PLUGIN || name === ROLE_PLUGIN;
 var WITHDRAWN_TOOLS = ["task_run"];
 function delegationTools(tools, hasRoles = false) {
   const delegates = hasRoles || tools.some((name) => name === ROLE_TOOL || name === LEGACY_ROLE_TOOL || GENERIC_DELEGATION_TOOLS.includes(name));
@@ -69,7 +71,7 @@ function delegationTools(tools, hasRoles = false) {
   return delegates ? [...rest, ROLE_TOOL] : rest;
 }
 function withoutDelegationPlugins(rows) {
-  return rows.filter((row) => row.name !== SUBAGENT_PLUGIN && row.name !== ROLE_PLUGIN).map((row) => row.group && Array.isArray(row.config) ? { ...row, config: withoutDelegationPlugins(row.config) } : row);
+  return rows.filter((row) => !isDelegationPlugin(row.name)).map((row) => row.group && Array.isArray(row.config) ? { ...row, config: withoutDelegationPlugins(row.config) } : row);
 }
 function renameLegacyRoleKey(entries) {
   if (!entries || !Object.hasOwn(entries, LEGACY_ROLE_TOOL)) return entries;
@@ -91,7 +93,31 @@ function migratePolicyConfig(config) {
 // src/optimized-preset.ts
 var OPTIMIZED_PRESET_ID = "studio-optimized";
 var BUILTIN_TOOL_PRESETS = ["standard", "ptc", "minimal", "cordis"];
-var excluded = /* @__PURE__ */ new Set(["get_goal", "create_goal", "update_goal", "todo_write", "task_run", "cordis_inspect_list", "cordis_inspect_query", "plugin_manager"]);
+var OPTIMIZED_TOOLS = [
+  "read_batch",
+  "read",
+  "write",
+  "edit",
+  "glob",
+  "grep",
+  "job_output",
+  "job_list",
+  "job_kill",
+  "skill",
+  "ask_user_question",
+  "web_search",
+  "web_fetch",
+  "present",
+  "bash",
+  "read_image",
+  "exit_plan_mode",
+  "send_message",
+  "interrupt_agent",
+  "list_agents",
+  "workflow",
+  "subagent_role"
+];
+var ALLOWED_TOOLS = /* @__PURE__ */ new Set([...OPTIMIZED_TOOLS, ...GENERIC_DELEGATION_TOOLS, LEGACY_ROLE_TOOL]);
 var OPTIMIZED_PROMPT = `Use glob to discover paths, grep to search contents, and read to inspect files before editing. Prefer targeted edits.
 Batch independent read-only inspections with read_batch. Start independent tool calls together; keep calls that depend on earlier results sequential. Do not guess unknown arguments.
 Wait for required work to finish before validating it. Use background execution only for independent work or intentionally long-lived services. Do not duplicate running work or busy-poll it.
@@ -99,7 +125,7 @@ Track every job you start. Before reporting completion, collect all relevant res
 Delegate self-contained independent work when useful and collect the result before relying on it.
 Keep changes within the requested scope and preserve user work. Use the smallest sufficient checks for the requested outcome and risk, then stop when the work is complete.`;
 function optimizedTemplate(tools) {
-  const selected = delegationTools(tools.filter((name) => !excluded.has(name)));
+  const selected = delegationTools(tools.filter((name) => ALLOWED_TOOLS.has(name)));
   const request = {
     preset: "studio-master",
     providers: ["@deepseek-ai/dsh-persona"],
@@ -358,7 +384,7 @@ var MasterExtensions = class {
 };
 
 // src/host/shell.ts
-import { dirname as dirname3, join as join2 } from "node:path";
+import { dirname as dirname3, join as join3 } from "node:path";
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 
@@ -378,7 +404,8 @@ var toolPromptSections = {
   web_search: ["tool:web_search"],
   get_goal: ["tool:goal"],
   create_goal: ["tool:goal"],
-  update_goal: ["tool:goal"]
+  update_goal: ["tool:goal"],
+  workflow: ["tool:workflow"]
 };
 
 // src/preset-catalog.ts
@@ -491,6 +518,8 @@ function parsePreviewRequest(value) {
   if (row.providerConfigs !== void 0 && (!record4(row.providerConfigs) || Object.values(row.providerConfigs).some((v) => !record4(v)))) throw new Error("Invalid provider configs");
   if (row.configOverrides !== void 0) validateConfigOverrides(row.configOverrides);
   if (row.execution !== void 0) validateExecutionDefaults(row.execution);
+  const filter = row.subagentToolFilter;
+  if (filter !== void 0 && (!record4(filter) || !strings(filter.deny) || filter.deny.some((name) => !name))) throw new Error("Invalid subagent tool filter");
   return {
     ...row.configOverrides !== void 0 ? { configOverrides: row.configOverrides } : {},
     ...row.execution !== void 0 ? { execution: row.execution } : {},
@@ -502,7 +531,8 @@ function parsePreviewRequest(value) {
     ...row.persona !== void 0 ? { persona: row.persona } : {},
     ...row.sections !== void 0 ? { sections: row.sections } : {},
     ...row.toolOverrides !== void 0 ? { toolOverrides: row.toolOverrides } : {},
-    ...row.providerConfigs !== void 0 ? { providerConfigs: row.providerConfigs } : {}
+    ...row.providerConfigs !== void 0 ? { providerConfigs: row.providerConfigs } : {},
+    ...filter !== void 0 && filter.deny.length ? { subagentToolFilter: { deny: [...new Set(filter.deny)] } } : {}
   };
 }
 function promptProviders(rows) {
@@ -537,12 +567,26 @@ function parseComposition(content) {
 function findProviders(rows) {
   return rows.flatMap((row) => row.disabled === true ? [] : row.group && Array.isArray(row.config) ? findProviders(row.config) : promptProviderModules.includes(row.name) ? [row] : []);
 }
+function normalizeRetention(config, overrides) {
+  if (overrides?.retainTokens !== void 0 && overrides.retainRatio !== void 0) {
+    throw new Error("Compaction retainRatio and retainTokens are mutually exclusive");
+  }
+  if (overrides?.retainTokens !== void 0) delete config.retainRatio;
+  if (overrides?.retainRatio !== void 0) delete config.retainTokens;
+}
 async function compositionPlan(ctx, input) {
   const request = parsePreviewRequest(input);
-  const base = request.preset === MASTER_PRESET_ID ? MASTER_PRESET_ID : "minimal";
+  const base = request.preset;
   if (request.configOverrides && base !== MASTER_PRESET_ID) throw new Error("Config overrides require Studio Master");
-  const minimal = applyConfigOverrides(parseComposition((await ctx.agentPresets.readDocument(base)).content), request.configOverrides ?? {});
-  const available = new Map(findProviders(minimal).map((row) => [row.name, row]));
+  const source = applyConfigOverrides(parseComposition((await ctx.agentPresets.readDocument(base)).content), request.configOverrides ?? {});
+  if (request.configOverrides && Object.keys(request.configOverrides).length) {
+    for (const { id, row } of configEntries(source)) {
+      if (row.name === "@deepseek-ai/dsh-compaction-basic") {
+        normalizeRetention(row.config, request.configOverrides[id]);
+      }
+    }
+  }
+  const available = new Map(findProviders(source).map((row) => [row.name, row]));
   const presets = await ctx.agentPresets.list();
   for (const preset of presets) {
     if (base === MASTER_PRESET_ID || !["minimal", "standard", "ptc", "cordis"].includes(preset.id)) continue;
@@ -572,33 +616,21 @@ async function compositionPlan(ctx, input) {
       if (request.persona !== void 0) config.prefix = request.persona;
     }
     if (name === "@deepseek-ai/dsh-compaction-basic") {
-      if (overrides?.retainTokens !== void 0 && overrides.retainRatio === void 0) delete config.retainRatio;
-      if (overrides?.retainRatio !== void 0 && overrides.retainTokens === void 0) delete config.retainTokens;
+      normalizeRetention(config, overrides);
     }
     return { ...row, id: `studio-provider-${index}`, config };
   });
   if (request.persona !== void 0 && !request.providers.includes("@deepseek-ai/dsh-persona")) throw new Error("Select persona before editing its prefix");
   for (const name of Object.keys(request.providerConfigs ?? {})) if (!request.providers.includes(name)) throw new Error(`Unselected provider override: ${name}`);
-  const globalNames = new Set(ctx.tools.schemas().map((tool) => tool.name));
-  const missing = request.tools.filter((name) => !globalNames.has(name));
-  if (missing.length || base === MASTER_PRESET_ID) {
-    let source;
-    const candidates = base === MASTER_PRESET_ID ? [MASTER_PRESET_ID] : ["minimal", ...presets.map((p) => p.id).filter((id) => id !== "minimal" && !id.startsWith("studio-"))];
-    for (const id of candidates) {
-      let lease;
-      try {
-        lease = await ctx.agentPresets.acquireScope(id);
-        const names2 = new Set(ctx.tools.schemas(lease.key).map((tool) => tool.name));
-        if (missing.every((name) => names2.has(name))) {
-          source = id === base ? minimal : parseComposition((await ctx.agentPresets.readDocument(id)).content);
-          break;
-        }
-      } catch {
-      } finally {
-        await lease?.[Symbol.asyncDispose]();
-      }
+  if (request.tools.length || base === MASTER_PRESET_ID) {
+    const lease = await ctx.agentPresets.acquireScope(base);
+    try {
+      const names2 = new Set(ctx.tools.schemas(lease.key).map((tool) => tool.name));
+      const missing = request.tools.filter((name) => !names2.has(name));
+      if (missing.length) throw new Error(`Requested preset ${base} does not supply tools: ${missing.join(", ")}. Tools from other source scopes cannot be substituted safely.`);
+    } finally {
+      await lease[Symbol.asyncDispose]();
     }
-    if (!source) throw new Error(`No compatible installed tool composition supplies: ${missing.join(", ")}. Tools from incompatible source scopes cannot be combined safely.`);
     plugins.push(...selectPromptProviders(source, []));
   }
   const compaction = plugins.filter((row) => ["@deepseek-ai/dsh-compaction-basic", "@deepseek-ai/dsh-compaction-tool-result-pruner"].includes(row.name));
@@ -608,7 +640,7 @@ async function compositionPlan(ctx, input) {
 }
 
 // src/host/preset-policy.ts
-import { scopeOf } from "@deepseek-ai/dsh-scope";
+import { scopeChainOf, scopeOf } from "@deepseek-ai/dsh-scope";
 var POLICY_SECTION_ORDERS = Object.freeze({
   "tool:jobs": "TOOL_JOBS",
   "tool:bash": "TOOL_BASH",
@@ -620,7 +652,8 @@ var POLICY_SECTION_ORDERS = Object.freeze({
   "tool:grep": "TOOL_GREP",
   "tool:web_fetch": "TOOL_WEB_FETCH",
   "tool:web_search": "TOOL_WEB_SEARCH",
-  "tool:goal": "TOOL_GOAL"
+  "tool:goal": "TOOL_GOAL",
+  "tool:workflow": "TOOL_WORKFLOW"
 });
 var own2 = (object3, key) => Object.prototype.hasOwnProperty.call(object3, key);
 var record3 = (value) => !!value && typeof value === "object" && !Array.isArray(value);
@@ -638,6 +671,11 @@ function validatePolicy(config) {
   for (const [name, text] of Object.entries(config.sections)) {
     if (!own2(POLICY_SECTION_ORDERS, name) || typeof text !== "string") throw new Error(`Unsupported policy section: ${name}`);
   }
+  if (config.childToolFilter !== void 0) {
+    const deny = record3(config.childToolFilter) ? config.childToolFilter.deny : void 0;
+    if (!Array.isArray(deny) || deny.some((name) => typeof name !== "string" || !name)) throw new Error("Invalid subagent tool filter");
+    for (const name of deny) if (!config.tools.includes(name)) throw new Error(`Subagent tool filter requires selected tool: ${name}`);
+  }
 }
 function patchParameter(parameters, path, description) {
   const segments = path.split(".");
@@ -651,11 +689,20 @@ function patchParameter(parameters, path, description) {
 function installPolicy(ctx, scopeKey, config) {
   validatePolicy(config);
   if (scopeOf(ctx) !== scopeKey) throw new Error("Studio policy requires its owning scoped context");
+  if (config.tools.includes("run_code") || ctx.tools.get("run_code", scopeKey) !== void 0) {
+    throw new Error("Studio policy does not support PTC presentation or the reserved run_code tool; configure this preset with native tool presentation");
+  }
   const missing = config.tools.filter((name) => ctx.tools.get(name, scopeKey) === void 0);
-  if (missing.length) console.warn(`Studio policy: ${missing.length} selected tool(s) unavailable on this host, skipped: ${missing.join(", ")}`);
-  const available = config.tools.filter((name) => !missing.includes(name));
-  const selected = new Set(available);
-  const definitions = available.map((name) => {
+  if (missing.length) throw new Error(`Studio policy selected tools unavailable: ${missing.join(", ")}`);
+  const restoreProbe = ctx.tools.restrict({ allow: [] });
+  try {
+    const local = ctx.tools.schemas(scopeKey);
+    if (local.length) throw new Error(`Studio policy does not support own-scope tools: ${local.map((tool) => tool.name).join(", ")}; register providers in an ancestor preset scope. Public API cannot hide late own-scope schemas; dynamic own-scope providers are unsupported`);
+  } finally {
+    restoreProbe();
+  }
+  const selected = new Set(config.tools);
+  const definitions = config.tools.map((name) => {
     const definition = ctx.tools.get(name, scopeKey);
     const override = config.toolOverrides[name];
     const defaults = config.execution?.defaults[name];
@@ -689,9 +736,7 @@ function installPolicy(ctx, scopeKey, config) {
     for (const release of disposers.splice(0).reverse()) release();
   };
   try {
-    disposers.push(ctx.tools.restrict({ allow: available }));
-    const excess = ctx.tools.schemas(scopeKey).filter((tool) => !selected.has(tool.name));
-    if (excess.length) throw new Error(`Unselected scoped tools must be removed from preset plugins: ${excess.map((tool) => tool.name).join(", ")}`);
+    disposers.push(ctx.tools.restrict({ allow: [...selected] }));
     disposers.push(ctx.tools.guard((execution) => selected.has(execution.name) ? void 0 : "Tool excluded by Studio preset policy"));
     for (const definition of definitions) disposers.push(ctx.tools.register(definition));
     for (const [name, text] of Object.entries(config.sections)) disposers.push(ctx.systemPrompt.section({ name, order: ctx.systemPrompt.getSectionOrder(POLICY_SECTION_ORDERS[name]), text, interpolate: false }));
@@ -758,6 +803,7 @@ function executionCapabilities(tools) {
 }
 
 // src/host/preset-store.ts
+import { createScope as createScope2 } from "@deepseek-ai/dsh-scope";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2, rename as rename2 } from "node:fs/promises";
 import { dirname as dirname2, join } from "node:path";
@@ -787,11 +833,27 @@ function parseRoles(input) {
     if (!/^[a-zA-Z0-9_-]+$/.test(reasoning)) throw new Error("Role reasoning must be inherit or an effort identifier");
     if (spawn !== "fresh" && spawn !== "fork") throw new Error("Role spawn must be fresh or fork");
     seen.add(role);
-    return { name, role, model, reasoning, spawn, persona, ..."overrides" in value ? { overrides: structuredClone(value.overrides) } : {} };
+    const filter = value.toolFilter;
+    if (filter !== void 0 && (!object2(filter) || !Array.isArray(filter.deny) || filter.deny.some((name2) => typeof name2 !== "string" || !name2) || filter.mode !== void 0 && filter.mode !== "extend" && filter.mode !== "replace")) throw new Error("Invalid role tool filter");
+    return {
+      name,
+      role,
+      model,
+      reasoning,
+      spawn,
+      persona,
+      ...filter !== void 0 ? { toolFilter: { mode: filter.mode ?? "replace", deny: [...new Set(filter.deny)] } } : {},
+      ..."overrides" in value ? { overrides: structuredClone(value.overrides) } : {}
+    };
   });
 }
 function executableRoles(roles) {
-  return roles.map(({ name, role, model, reasoning, spawn, persona }) => ({ name, role, model, reasoning, spawn, persona }));
+  return roles.map(({ name, role, model, reasoning, spawn, persona, toolFilter }) => ({ name, role, model, reasoning, spawn, persona, ...toolFilter ? { toolFilter } : {} }));
+}
+function roleToolFilter(role, presetDefault = []) {
+  const own3 = role?.toolFilter;
+  if (!own3) return [...presetDefault];
+  return own3.mode === "replace" ? [...own3.deny] : [.../* @__PURE__ */ new Set([...presetDefault, ...own3.deny])];
 }
 
 // src/host/role-validation.ts
@@ -821,7 +883,7 @@ async function validateRoleModel(llm, role, signal) {
 
 // src/host/preset-store.ts
 var owned = (id) => id === OPTIMIZED_PRESET_ID || /^studio-user-[a-f0-9-]{36}$/.test(id);
-var warning = "Work convenience settings are saved but not applied yet. Legacy role overrides are stored only; roles apply only their supported settings.";
+var retiredLegacyWarning = "Work convenience settings are saved but not applied yet. Legacy role overrides are stored only; roles apply only their supported settings.";
 function migrateLegacyNames(row) {
   const request = row.request;
   if (request.toolOverrides) {
@@ -864,6 +926,7 @@ var PresetStore = class {
           if (!owned(row.id)) throw new Error("Invalid Studio preset ownership");
           parsePreviewRequest(row.request);
           migrateLegacyNames(row);
+          if (row.applyWarning === retiredLegacyWarning) delete row.applyWarning;
         }
       } catch (error) {
         if (error.code !== "ENOENT") throw error;
@@ -879,10 +942,32 @@ var PresetStore = class {
     })();
   }
   async mount(id, definition) {
-    const dispose = await this.ctx.agentPresets.register({ id, name: definition.name, description: definition.description, plugins: parseComposition(definition.plugins) });
+    const plugins = parseComposition(definition.plugins);
+    const dispose = await this.ctx.agentPresets.register({ id, name: definition.name, description: definition.description, plugins });
     try {
       const preset = await this.ctx.agentPresets.resolve(id);
       if (preset.broken) throw new Error(preset.broken);
+      const policies = (rows) => rows.flatMap((row) => row.disabled === true ? [] : row.group && Array.isArray(row.config) ? policies(row.config) : row.name === POLICY_PLUGIN ? [row.config] : []);
+      const configs = policies(plugins);
+      if (configs.length) {
+        const lease = await this.ctx.agentPresets.acquireScope(id);
+        try {
+          const key = {};
+          const child = createScope2(this.ctx, key, { parent: lease.key });
+          const releases = [];
+          try {
+            for (const config of configs) releases.push(installPolicy(child.ctx, key, config));
+          } finally {
+            try {
+              for (const release of releases.reverse()) release();
+            } finally {
+              await child.dispose();
+            }
+          }
+        } finally {
+          await lease[Symbol.asyncDispose]();
+        }
+      }
       this.disposers.set(id, dispose);
     } catch (error) {
       await dispose();
@@ -909,27 +994,72 @@ var PresetStore = class {
     const { applied, ...value } = row;
     return structuredClone({ ...value, ...row.id === OPTIMIZED_PRESET_ID ? { template: true, nonDeletable: true } : {} });
   }
-  /** Seed once. Later startups retain user edits and explicit unapplied state. */
+  /** Compose the Optimized applied snapshot: the template request over the current base composition. */
+  optimizedApplied(request, plugins) {
+    const delegates = request.tools.includes(ROLE_TOOL);
+    const base = applyConfigOverrides(plugins, request.configOverrides ?? {});
+    return dump([...delegates ? [...withoutDelegationPlugins(base), { id: "studio-roles", name: ROLE_PLUGIN, config: { roles: [] } }] : base, { id: "studio-optimized-policy", name: POLICY_PLUGIN, config: { tools: request.tools, toolOverrides: request.toolOverrides, sections: {}, prompt: request.prompt, execution: request.execution } }], { schema: entryListSchema2, noRefs: true });
+  }
+  /**
+   * Seed the built-in on first run, then keep it aligned with the shipped template. Optimized is
+   * locked against editing, so its stored request carries no user content — only the applied or
+   * unapplied choice is the user's, and that survives. Without the alignment a profile plugin that
+   * registers a new tool would enlarge the preset forever after its first seed.
+   */
   ensureOptimized(tools, plugins) {
     return this.serial(async () => {
-      const existing = this.rows.find((row2) => row2.id === OPTIMIZED_PRESET_ID);
-      if (existing) return this.public(existing);
       const template = optimizedTemplate(tools);
-      const request = template.request;
-      const delegates = request.tools.includes(ROLE_TOOL);
-      const base = applyConfigOverrides(plugins, request.configOverrides ?? {});
-      const applied = { name: template.name, description: template.description, plugins: dump([...delegates ? [...withoutDelegationPlugins(base), { id: "studio-roles", name: ROLE_PLUGIN, config: { roles: [] } }] : base, { id: "studio-optimized-policy", name: POLICY_PLUGIN, config: { tools: request.tools, toolOverrides: request.toolOverrides, sections: {}, prompt: request.prompt, execution: request.execution } }], { schema: entryListSchema2, noRefs: true }) };
+      const existing = this.rows.find((row) => row.id === OPTIMIZED_PRESET_ID);
+      if (existing && JSON.stringify(existing.request) === JSON.stringify(template.request)) return this.public(existing);
       const now = (/* @__PURE__ */ new Date()).toISOString();
-      const row = { id: template.id, name: template.name, description: template.description, request: template.request, conveniences: {}, agents: [], updatedAt: now, appliedAt: now, status: "applied", applied, ...template.applyWarning ? { applyWarning: template.applyWarning } : {} };
-      await this.mount(row.id, applied);
+      const buildApplied = () => ({ name: template.name, description: template.description, plugins: this.optimizedApplied(template.request, plugins) });
+      if (!existing) {
+        const applied = buildApplied();
+        const row = { id: template.id, name: template.name, description: template.description, request: template.request, conveniences: {}, agents: [], updatedAt: now, appliedAt: now, status: "applied", applied, ...template.applyWarning ? { applyWarning: template.applyWarning } : {} };
+        await this.mount(row.id, applied);
+        try {
+          await this.persist([...this.rows, row]);
+        } catch (error) {
+          await this.disposers.get(row.id)?.();
+          this.disposers.delete(row.id);
+          throw error;
+        }
+        return this.public(row);
+      }
+      const refresh = { ...existing, name: template.name, description: template.description, request: template.request, updatedAt: now };
+      if (template.applyWarning) refresh.applyWarning = template.applyWarning;
+      else delete refresh.applyWarning;
+      if (existing.applied) {
+        const applied = buildApplied();
+        await this.disposers.get(existing.id)?.();
+        this.disposers.delete(existing.id);
+        try {
+          await this.mount(existing.id, applied);
+        } catch (error) {
+          try {
+            await this.mount(existing.id, existing.applied);
+          } catch {
+          }
+          throw error;
+        }
+        refresh.applied = applied;
+        refresh.appliedAt = now;
+        refresh.status = "applied";
+      }
       try {
-        await this.persist([...this.rows, row]);
+        await this.persist(this.rows.map((row) => row.id === existing.id ? refresh : row));
       } catch (error) {
-        await this.disposers.get(row.id)?.();
-        this.disposers.delete(row.id);
+        await this.disposers.get(existing.id)?.();
+        this.disposers.delete(existing.id);
+        if (existing.applied) {
+          try {
+            await this.mount(existing.id, existing.applied);
+          } catch {
+          }
+        }
         throw error;
       }
-      return this.public(row);
+      return this.public(refresh);
     });
   }
   list() {
@@ -974,21 +1104,25 @@ var PresetStore = class {
       for (const role of roles) await validateRoleModel(this.ctx.get("llm"), role);
       const delegates = tools.includes(ROLE_TOOL);
       const keep = (entries) => Object.fromEntries(Object.entries(entries).filter(([name]) => tools.includes(name)));
-      const rolePlugins = delegates ? [{ id: "studio-roles", name: ROLE_PLUGIN, config: { roles } }] : [];
+      const presetHidden = old.request.subagentToolFilter?.deny ?? [];
+      const lists = [presetHidden, ...roles.map((role) => roleToolFilter(role, presetHidden))];
+      const unknownHidden = [...new Set(lists.flat().filter((name) => !tools.includes(name) || name === ROLE_TOOL))];
+      if (delegates && unknownHidden.length) throw new Error(`Subagent Tool Filter may only list tools selected in this preset: ${unknownHidden.join(", ")}`);
+      const hideable = delegates ? [...new Set(lists.flat())] : [];
+      const childToolFilter = hideable.length ? { deny: hideable } : void 0;
+      const rolePlugins = delegates ? [{ id: "studio-roles", name: ROLE_PLUGIN, config: { roles, ...presetHidden.length ? { toolFilter: { deny: [...presetHidden] } } : {} } }] : [];
       const execution = request.execution && {
         ...request.execution,
         defaults: keep(request.execution.defaults),
         ...request.execution.batch && !tools.includes(request.execution.batch.tool) ? { batch: void 0 } : {}
       };
-      const applied = { name: old.name, description: old.description, plugins: dump([...withoutDelegationPlugins(plugins), ...rolePlugins, { id: "studio-policy", name: POLICY_PLUGIN, config: { tools: [...new Set(tools)], toolOverrides: keep(request.toolOverrides ?? {}), sections: request.sections ?? {}, prompt: request.prompt, ...execution ? { execution } : {} } }], { schema: entryListSchema2, noRefs: true }) };
+      const applied = { name: old.name, description: old.description, plugins: dump([...withoutDelegationPlugins(plugins), ...rolePlugins, { id: "studio-policy", name: POLICY_PLUGIN, config: { tools: [...new Set(tools)], toolOverrides: keep(request.toolOverrides ?? {}), sections: request.sections ?? {}, prompt: request.prompt, ...execution ? { execution } : {}, ...childToolFilter ? { childToolFilter } : {} } }], { schema: entryListSchema2, noRefs: true }) };
       await this.disposers.get(id)?.();
       this.disposers.delete(id);
       try {
         await this.mount(id, applied);
-        const hasLegacySettings = old.conveniences != null && Object.keys(Object(old.conveniences)).length > 0 || Array.isArray(old.agents) && old.agents.some((role) => role && Object.hasOwn(role, "overrides"));
         const row = { ...old, applied, appliedAt: (/* @__PURE__ */ new Date()).toISOString(), status: "applied" };
-        if (hasLegacySettings) row.applyWarning = warning;
-        else delete row.applyWarning;
+        delete row.applyWarning;
         await this.persist(this.rows.map((item) => item.id === id ? row : item));
         return this.public(row);
       } catch (error) {
@@ -1037,9 +1171,142 @@ var PresetStore = class {
   }
 };
 
+// src/host/studio-update.ts
+import { readFile as readFile3 } from "node:fs/promises";
+import { join as join2 } from "node:path";
+import { evaluatePluginCompatibility, getDshRuntimeVersion } from "@deepseek-ai/dsh-app-boot";
+
+// src/update-check.ts
+var STABLE = /^(\d+)\.(\d+)\.(\d+)$/;
+function compareStable(a, b) {
+  const x = STABLE.exec(a);
+  const y = STABLE.exec(b);
+  if (!x || !y) return Number(Boolean(x)) - Number(Boolean(y));
+  for (let i = 1; i <= 3; i++) {
+    const diff = Number(x[i]) - Number(y[i]);
+    if (diff) return Math.sign(diff);
+  }
+  return 0;
+}
+function isNewer(candidate, current) {
+  return STABLE.test(candidate) && compareStable(candidate, current.split("-")[0]) > 0;
+}
+function pickUpdate(document, current, compatible) {
+  const latest = document["dist-tags"]?.latest;
+  const candidates = Object.entries(document.versions ?? {}).filter(([version, manifest]) => isNewer(version, current) && !manifest.deprecated).sort(([a], [b]) => compareStable(b, a));
+  const available = candidates.find(([, manifest]) => compatible(manifest))?.[0];
+  const incompatibleLatest = latest !== void 0 && isNewer(latest, current) && latest !== available && candidates.some(([version]) => version === latest) ? latest : void 0;
+  return { ...latest ? { latest } : {}, ...available ? { available } : {}, ...incompatibleLatest ? { incompatibleLatest } : {} };
+}
+function packumentUrl(registry, name) {
+  return `${registry.replace(/\/+$/, "")}/${name.replace("/", "%2f")}`;
+}
+
+// src/host/studio-update.ts
+var DEFAULT_REGISTRY = "https://registry.npmjs.org";
+var CACHE_MS = 10 * 6e4;
+var StudioUpdater = class {
+  constructor(ctx, fetcher = globalThis.fetch) {
+    this.ctx = ctx;
+    this.fetcher = fetcher;
+  }
+  cached;
+  installing;
+  manager() {
+    return this.ctx.get("pluginManager");
+  }
+  /** Read the current status, reusing a recent registry answer unless `force`. */
+  status(force = false) {
+    if (!force && this.cached && Date.now() - this.cached.at < CACHE_MS) return this.cached.status;
+    const status = this.check();
+    this.cached = { at: Date.now(), status };
+    void status.catch(() => {
+      if (this.cached?.status === status) this.cached = void 0;
+    });
+    return status;
+  }
+  async check() {
+    const result = { current: STUDIO_VERSION };
+    let runtimeVersion;
+    try {
+      runtimeVersion = getDshRuntimeVersion();
+      result.runtimeVersion = runtimeVersion;
+    } catch {
+    }
+    const { source, installed } = await this.profilePackage();
+    if (source) result.source = source;
+    if (installed && installed !== STUDIO_VERSION) result.installed = installed;
+    const baseline = installed && isNewer(installed, STUDIO_VERSION) ? installed : STUDIO_VERSION;
+    const manager = this.manager();
+    if (!manager) result.blocked = "no-plugin-manager";
+    else if (!source) result.blocked = "not-profile-dependency";
+    try {
+      const registries = manager ? await manager.registries().catch(() => void 0) : void 0;
+      const registry = registries?.registry ?? registries?.resolved ?? DEFAULT_REGISTRY;
+      const response = await this.fetcher(packumentUrl(registry, PACKAGE_NAME), {
+        headers: { accept: "application/vnd.npm.install-v1+json; q=1.0, application/json; q=0.8" },
+        signal: AbortSignal.timeout(15e3)
+      });
+      if (!response.ok) throw new Error(`Registry answered ${response.status}`);
+      const document = await response.json();
+      Object.assign(result, pickUpdate(document, baseline, (manifest) => {
+        try {
+          return evaluatePluginCompatibility({ name: PACKAGE_NAME, version: "0.0.0", ...manifest }, {}, runtimeVersion) === void 0;
+        } catch {
+          return false;
+        }
+      }));
+    } catch (error) {
+      result.error = error instanceof Error ? error.message : String(error);
+    }
+    return result;
+  }
+  /** How the profile declares Studio and which version its files hold now. */
+  async profilePackage() {
+    const dir = this.ctx.get("profileContext")?.dir ?? process.env.DSH_PROFILE_DIR;
+    if (!dir) return {};
+    const json2 = async (path) => {
+      try {
+        return JSON.parse(await readFile3(path, "utf8"));
+      } catch {
+        return void 0;
+      }
+    };
+    const manifest = await json2(join2(dir, "package.json"));
+    const source = manifest?.dependencies?.[PACKAGE_NAME];
+    const installed = (await json2(join2(dir, "node_modules", ...PACKAGE_NAME.split("/"), "package.json")))?.version;
+    return { ...source ? { source } : {}, ...typeof installed === "string" ? { installed } : {} };
+  }
+  /**
+   * Install one exact version offered by {@link status}. The running Studio keeps its code until DSH restarts.
+   * @param version Exact version; must equal the current offer so arbitrary specs never reach pnpm.
+   */
+  update(version) {
+    if (this.installing) return this.installing;
+    const run = (async () => {
+      const status = await this.status();
+      if (status.available !== version) throw new Error(`Version ${version} is not the offered update`);
+      if (status.blocked) throw new Error(`Studio cannot update this install (${status.blocked})`);
+      const manager = this.manager();
+      const result = await manager.installBundle(`${PACKAGE_NAME}@${version}`, { enabled: true });
+      const installed = result.version ?? version;
+      if (result.application === "failed" || result.application === "cancelled") {
+        const detail = result.error?.diagnostic ?? result.error?.code ?? result.packageResult?.output?.trim().split("\n").slice(-3).join("\n");
+        return { status: result.application, version: installed, ...detail ? { message: detail } : {} };
+      }
+      this.cached = void 0;
+      return { status: result.application === "applied" ? "applied" : "restart-required", version: installed };
+    })();
+    this.installing = run;
+    return run.finally(() => {
+      this.installing = void 0;
+    });
+  }
+};
+
 // src/host/shell.ts
-var _preview_dec, _saveExtensions_dec, _readExtensions_dec, _read_dec, _deletePreset_dec, _roleModels_dec, _unapplyPreset_dec, _applyPreset_dec, _savePreset_dec, _listPresets_dec, _a, _init;
-var StudioCatalog = class extends (_a = TypertRemoteService, _listPresets_dec = [Remote], _savePreset_dec = [Remote], _applyPreset_dec = [Remote], _unapplyPreset_dec = [Remote], _roleModels_dec = [Remote], _deletePreset_dec = [Remote], _read_dec = [Remote], _readExtensions_dec = [Remote], _saveExtensions_dec = [Remote], _preview_dec = [Remote], _a) {
+var _preview_dec, _saveExtensions_dec, _readExtensions_dec, _read_dec, _deletePreset_dec, _updateStudio_dec, _updateStatus_dec, _roleModels_dec, _unapplyPreset_dec, _applyPreset_dec, _savePreset_dec, _listPresets_dec, _a, _init;
+var StudioCatalog = class extends (_a = TypertRemoteService, _listPresets_dec = [Remote], _savePreset_dec = [Remote], _applyPreset_dec = [Remote], _unapplyPreset_dec = [Remote], _roleModels_dec = [Remote], _updateStatus_dec = [Remote], _updateStudio_dec = [Remote], _deletePreset_dec = [Remote], _read_dec = [Remote], _readExtensions_dec = [Remote], _saveExtensions_dec = [Remote], _preview_dec = [Remote], _a) {
   constructor(ctx) {
     super(ctx, "studioCatalog");
     __runInitializers(_init, 5, this);
@@ -1049,8 +1316,9 @@ var StudioCatalog = class extends (_a = TypertRemoteService, _listPresets_dec =
     __publicField(this, "stopped", false);
     __publicField(this, "extensions");
     __publicField(this, "changes", Promise.resolve());
+    __publicField(this, "updater", new StudioUpdater(this.ctx));
     const storePath = studioStorePath(process.env, ctx.get("profileContext"));
-    this.extensions = new MasterExtensions(join2(dirname3(storePath), "master-extensions.json"));
+    this.extensions = new MasterExtensions(join3(dirname3(storePath), "master-extensions.json"));
     this.store = new PresetStore(ctx, storePath);
     this.snapshot = new Promise((resolve2) => {
       setImmediate(resolve2);
@@ -1086,6 +1354,12 @@ var StudioCatalog = class extends (_a = TypertRemoteService, _listPresets_dec =
     if (!service) throw new Error("Model catalog API unavailable");
     return service.modelCatalog();
   }
+  async updateStatus(force) {
+    return this.updater.status(force === "force");
+  }
+  async updateStudio(version) {
+    return this.updater.update(version);
+  }
   async deletePreset(id) {
     return this.store.delete(id);
   }
@@ -1186,6 +1460,8 @@ __decorateElement(_init, 1, "savePreset", _savePreset_dec, StudioCatalog);
 __decorateElement(_init, 1, "applyPreset", _applyPreset_dec, StudioCatalog);
 __decorateElement(_init, 1, "unapplyPreset", _unapplyPreset_dec, StudioCatalog);
 __decorateElement(_init, 1, "roleModels", _roleModels_dec, StudioCatalog);
+__decorateElement(_init, 1, "updateStatus", _updateStatus_dec, StudioCatalog);
+__decorateElement(_init, 1, "updateStudio", _updateStudio_dec, StudioCatalog);
 __decorateElement(_init, 1, "deletePreset", _deletePreset_dec, StudioCatalog);
 __decorateElement(_init, 1, "read", _read_dec, StudioCatalog);
 __decorateElement(_init, 1, "readExtensions", _readExtensions_dec, StudioCatalog);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@matamt-dbg/dsh-studio",
-  "version": "0.2.2",
+  "version": "0.2.8",
   "description": "DSH Studio: build, edit and apply DeepSeek Harness agent presets — tools, prompts, Configs and role-based subagents — from the web GUI.",
   "keywords": [
     "deepseek-harness",