@morlay/dsh-subagent 0.0.2 → 0.0.4

package/README.md

@@ -1,74 +1,21 @@
 # @morlay/dsh-subagent
 
-上游 `@deepseek-ai/dsh-subagent` 的**薄壳 fork**：host 半只改两件事——continuable 子代理首条任务后面的
-**回报指引**换成中文（上游是英文，且只在"会话挂着本部署那份 preset"时用，其余会话保持上游那套），以及
-**接管官方那一行**（行 id 仍是 `subagent`，见下）。服务名（`ctx.subagents`）、providers、其余子路径
-（`./internal` 等）与装配位置都不变。配置页由**官方**那张卡片承担（行 id 没换，`subagent` namespace 照旧）。
+上游 `@deepseek-ai/dsh-subagent` 的**薄壳 fork**：接管官方 `subagent` 行，改两处文案——
 
-装配由本包的装配数据完成（`cordis.patch.yml` / `rows` 出口）：**按官方行 id 复用**——插一条
-`{ id: "subagent", name: "@morlay/dsh-subagent" }`，Loader 对同 id 复用同一个 Entry、后者替换入口 options，
-所以行 id 与 settings namespace 都还是 `subagent`，官方设置卡（`ui-settings-subagent`）与它的服务行
-（`subagent-model-selection-settings`）都不动；顺序前提是本包排在 `@deepseek-ai/dsh-base` 之后。理由与被否的
-路线见 [ADR 接管官方行按 id 复用](./.agents/adrs/20260928-接管官方行按id复用而非换id.md)。
+1. continuable 子代理首条任务后面的**回报指引**换成中文，**默认对任意会话生效**（官方四个 shipped preset、还没绑
+   preset 的会话都在内）；只有在装配面给了 `localizedReturnGuidancePresets` 名单时才收窄成「只有名单里的 preset
+   用中文」，其余会话保持上游那套；
+2. 子代理自己的**委派范围说明**（运行时上下文 `subagent:delegation`）换成中文，两条派发路径（continuable 与一次性）
+   一起覆盖。
 
-回报指引的名单走这一行的 `config.localizedReturnGuidancePresets`（装配给，`.hidden()` 不进设置页）；app 的
-`dsh.profile.bundles` 里引用本包。
+## 用法
 
-## 保留文件（3 个）
+行数据在本包 `./rows` 出口（`subagentRows()`），由 [`@morlay/session-mode-profile`](../../bundles/session-mode-profile/README.md) 展开——它**不传** `localizedReturnGuidancePresets`（不配名单 = 不限 preset），传了才收窄。**按官方行 id 复用**，所以服务名（`ctx.subagents`）、providers、settings namespace 与官方设置卡都不变，限额字段（`maxDepth` / `maxActiveSubagents`）仍在那张卡上——本包没有 client 半。
 
-薄壳 fork 只留**有意改过**的文件，其余上游文件不复制——保留文件里指向它们的 import 走相对路径指向
-`vendor/deepseek-harness/packages/subagent/subagent/src/...`，构建时内联进 `dist/index.mjs`
-（发布物自包含）。
+保留文件、偏离登记与结构性约束见[设计 薄壳fork的接管面与保留文件](./.agents/designs/20260929-薄壳fork的接管面与保留文件.md)。
 
-| 保留文件（`src/`）         | 保留什么                                                                                   |
-| -------------------------- | ------------------------------------------------------------------------------------------ |
-| `continuation-messages.ts` | 中文文案 + 判定函数 `localizedReturnGuidance`（"这个会话要不要本包那份文案"）              |
-| `continuation.ts`          | 接线 + 调用点从"永远是本包文案"改成"按会话选"（读 `ctx.agentPresets` 的 `composedPreset`） |
-| `index.ts`                 | 接线 + 装配面配置字段（`localizedReturnGuidancePresets`）+ 两处结构性偏离（见下）          |
+## 委派范围说明怎么换的
 
-静态 import 链决定了复制面：`continuation-messages` ← `continuation` ← `index`，要替换中间那一份就得
-连同引用它的两个文件一起接管。原因、被否掉的路线与后果见
-[ADR 薄壳 fork 接管 subagent 行只改回报文案](./.agents/adrs/20260923-薄壳fork接管subagent行只改回报文案.md)。
-
-**偏离清单是可执行的**：`src/__tests__/upstream-wiring.spec.ts` 的 `DELTAS` 表逐条登记上面每处偏离（新增
-块、改过的行、装配面字段），偏离表里的片段没命中就红——加偏离必须同时登记，否则测试报"偏离表里的片段不在
-文件里"。
-
-## 两处结构性偏离
-
-- **`index.ts` 不复述 cordis 合并接口**：上游此处 `declare module '@deepseek-ai/cordis'` 声明
-  `Context.subagents` 与 `subagent/*` 事件；本包 `import type {} from '@deepseek-ai/dsh-subagent'`
-  引用上游那一份（同形声明复述两遍会在同一个 program 里撞 `TS2717`）。
-- **标准装饰器在构建期降级**：`@Remote(...)` 是 TC39 标准装饰器，rolldown/oxc 不降级它（上游管线里这步
-  由 tsc 完成），所以 `tsdown.config.ts` 里有一个 esbuild 预转换（只在检测到装饰器语法时生效）。
-
-本包三个保留文件**不做格式化**（`.oxfmtrc.json` 的 `ignorePatterns`）：它们与上游逐行对照是同步纪律的
-守护面，格式改了那条守护就失去意义。
-
-## 配置页
-
-**子代理用哪个模型不在这张卡上**：它跟着**父会话的模式**走（`@morlay/dsh-session-mode` 顶层 `models` 里
-「模式 → 服务商 / 模型」那两个选择器）。
-
-限额两个字段（`maxDepth` / `maxActiveSubagents`，标了 `.volatile()`）由**官方**那张设置卡承担：接管没换行 id，
-`subagent` namespace 照旧，`ui-settings-subagent` 与 `subagent-model-selection-settings` 都不动。
-
-本包**不再有 client 半**（`./client` 出口、字典与字段文案槽都删了）：卡片回来之后它是重复面——两套都注册
-`settings.subagent` 字典时，`locale.register` 对同 namespace 同 locale 直接抛错
-（`locale namespace "settings.subagent" already has locale "zh"`），官方卡片那一行会加载失败。
-
-`Config` 的 `localizedReturnGuidancePresets` 是**装配面**字段（`.hidden()`）：它不进设置页，由装配那一行给。
-
-## 文档
-
-- 决策与理由：
-  [ADR 薄壳 fork 接管 subagent 行只改回报文案](./.agents/adrs/20260923-薄壳fork接管subagent行只改回报文案.md)、
-  [ADR 接管官方行按 id 复用](./.agents/adrs/20260928-接管官方行按id复用而非换id.md)、
-  （已作废）[ADR 停掉官方设置卡的两条入口行](./.agents/adrs/20260923-停掉官方设置卡的两条入口行.md)
-- 已知的债（两处 `continuation-messages` 实例、保留文件跟随方式）：
-  [债务 continuation-messages 两份实例与保留文件跟随](./.agents/debts/20260923-continuation-messages两份实例与保留文件跟随.md)
-- 测试落点与判据：[本包规范 how-to-verify](./.agents/standards/how-to-verify.md)；薄壳 fork 的通用写法约束见
-  [`session/ui-conversation` 的 how-to-write](../../session/ui-conversation/.agents/standards/how-to-write.md)
-  （同一形态的包共享那份约束）。
-
-上游同步（patch / 裁剪 / 升级评估）走 `dsh-plugin-upstream-sync` 技能；发布走 CI，本地只构建验证。
+`subagent:delegation` 由上游在**子代理自己的 agent 作用域**上注册，两条常规接管手法都不通：同层重复注册同名 context
+会抛错；fork `child-agent.ts` 也不改变运行期（注册这条文本的调用方都在上游未复制的文件里）。所以本包改的是**装配
+结果**——`system-prompt/assemble` 瀑布里把该名字那条的文本换成中文（`src/delegation-context.ts`），在该次装配内生效。

package/dist/index.d.mts

@@ -155,7 +155,7 @@ declare module '@deepseek-ai/dsh-session/types' {
  * Supporting another composition input is a deliberate version change, never
  * an implicit extra field.
  */
-declare const SUBAGENT_DESCRIPTOR_VERSION = 3;
+export declare const SUBAGENT_DESCRIPTOR_VERSION = 3;
 /** Fields shared by every supported `subagent/descriptor` payload. */
 interface SubagentDescriptorBase {
   /** Descriptor format version ({@link SUBAGENT_DESCRIPTOR_VERSION}). */
@@ -233,14 +233,14 @@ type SubagentDescriptorInput = OneShotSubagentDescriptorInput | ContinuableSubag
  * @returns the versioned, detached descriptor payload.
  * @throws when a field is not losslessly JSON-serializable.
  */
-declare function snapshotSubagentDescriptor(input: OneShotSubagentDescriptorInput): OneShotSubagentDescriptorData;
+export declare function snapshotSubagentDescriptor(input: OneShotSubagentDescriptorInput): OneShotSubagentDescriptorData;
 /**
  * Validate and detach a continuable descriptor input.
  * @param input - the caller-collected continuable composition fields.
  * @returns the versioned, detached continuable descriptor payload.
  * @throws when a field is not losslessly JSON-serializable.
  */
-declare function snapshotSubagentDescriptor(input: ContinuableSubagentDescriptorInput): ContinuableSubagentDescriptorData;
+export declare function snapshotSubagentDescriptor(input: ContinuableSubagentDescriptorInput): ContinuableSubagentDescriptorData;
 /**
  * Fold a persisted child log to its supported descriptor. The first
  * `subagent/descriptor` event is authoritative — the establishing provider
@@ -253,17 +253,17 @@ declare function snapshotSubagentDescriptor(input: ContinuableSubagentDescriptor
  * @throws when a current-version persisted payload does not match its complete
  *   declared schema.
  */
-declare function foldSubagentDescriptor(events: readonly SessionEvent[]): SubagentDescriptorData | undefined;
+export declare function foldSubagentDescriptor(events: readonly SessionEvent[]): SubagentDescriptorData | undefined;
 //#endregion
 //#region ../../../vendor/deepseek-harness/packages/subagent/subagent/src/types.d.ts
 /** Identifies one accepted subagent run across its lifecycle event pair. */
-type SubagentRunId = Branded<'SubagentRunId'>;
+export type SubagentRunId = Branded<'SubagentRunId'>;
 /**
  * Brand a string as a {@link SubagentRunId}.
  * @param id - the raw run id.
  * @returns the same string, branded.
  */
-declare function SubagentRunId(id: string): SubagentRunId;
+export declare function SubagentRunId(id: string): SubagentRunId;
 /** What a caller asks for when starting a continuable background child. */
 interface ContinuableStartSpec {
   /** The `ctx.subagents` provider whose continuable-creation capability establishes the child. */
@@ -761,7 +761,7 @@ declare module '@deepseek-ai/dsh-session-projection/types' {
  * (`agentOptions`/`outputSchema`/`maxDepth`/`toolFilter`/`persona`), so the service rejects a
  * request needing any of them before `start` runs — never accepted-then-ignored.
  */
-declare const NO_START_CAPABILITIES: SubagentCapabilities;
+export declare const NO_START_CAPABILITIES: SubagentCapabilities;
 /**
  * Assert a configured timing bound is a positive finite number (it bounds a
  * teardown or shutdown wait; zero, negative, or NaN would skip or wedge it).
@@ -769,7 +769,7 @@ declare const NO_START_CAPABILITIES: SubagentCapabilities;
  * @param name - the config field name, for the diagnostic.
  * @param value - the configured value.
  */
-declare function assertPositiveFinite(prefix: string, name: string, value: number): void;
+export declare function assertPositiveFinite(prefix: string, name: string, value: number): void;
 /**
  * Assert `cwd` can actually host the child: absolute (it doubles as the
  * child's workspace identity, and a relative path would be re-anchored to the
@@ -780,7 +780,7 @@ declare function assertPositiveFinite(prefix: string, name: string, value: numbe
  * @param cwd - the candidate working directory.
  * @returns `cwd`, validated.
  */
-declare function assertUsableCwd(prefix: string, label: string, cwd: string): string;
+export declare function assertUsableCwd(prefix: string, label: string, cwd: string): string;
 /**
  * Validate a configured `cwd` override ONCE, at plugin load: reject the empty
  * string (`path.resolve('')` is the process cwd — it would silently
@@ -791,7 +791,7 @@ declare function assertUsableCwd(prefix: string, label: string, cwd: string): st
  * @param cwd - the configured override, or `undefined` when the config omits it.
  * @returns the validated absolute override, or `undefined` when omitted.
  */
-declare function validateConfiguredCwd(prefix: string, cwd: string | undefined): string | undefined;
+export declare function validateConfiguredCwd(prefix: string, cwd: string | undefined): string | undefined;
 /**
  * Resolve the child's working directory at start: the deployment override
  * when configured (already validated at load), else the parent session's
@@ -805,9 +805,9 @@ declare function validateConfiguredCwd(prefix: string, cwd: string | undefined):
  * @param parentCwd - the delegating parent session's workspace cwd, if any.
  * @returns the absolute child working directory.
  */
-declare function resolveChildCwd(prefix: string, configured: string | undefined, parentCwd: string | undefined): string;
+export declare function resolveChildCwd(prefix: string, configured: string | undefined, parentCwd: string | undefined): string;
 /** Inputs to {@link settleRunResult}. */
-interface RunResultSettlement {
+export interface RunResultSettlement {
   /** The turn attempt (typically racing local cancellation); returns the terminal result. */
   attempt: () => Promise<SubagentResult>;
   /** Snapshot the provider exposes when cancellation or failure wins settlement. */
@@ -833,9 +833,9 @@ interface RunResultSettlement {
  * @param parts - the attempt, output snapshot, cancellation state, sink, and signal wiring.
  * @returns the terminal result (never a rejection).
  */
-declare function settleRunResult(parts: RunResultSettlement): Promise<SubagentResult>;
+export declare function settleRunResult(parts: RunResultSettlement): Promise<SubagentResult>;
 /** Inputs to {@link subprocessRunHandle}. */
-interface SubprocessRunHandleParts {
+export interface SubprocessRunHandleParts {
   /** The parent-scoped run id. */
   id: SubagentRun['id'];
   /** The flattened, never-rejecting result (the seam contract). */
@@ -857,7 +857,7 @@ interface SubprocessRunHandleParts {
  * @param parts - the run identity, result, cancellation wiring, and teardown.
  * @returns the seam run handle (`localAgent` is `undefined` for remote runs).
  */
-declare function subprocessRunHandle(parts: SubprocessRunHandleParts): SubagentRun;
+export declare function subprocessRunHandle(parts: SubprocessRunHandleParts): SubagentRun;
 //#endregion
 //#region ../../../vendor/deepseek-harness/packages/subagent/subagent/src/assistant-output.d.ts
 /**
@@ -866,7 +866,7 @@ declare function subprocessRunHandle(parts: SubprocessRunHandleParts): SubagentR
  * transports without session events (ACP content chunks) {@link pushText} raw
  * text into the same streamed fallback.
  */
-declare class AssistantOutputFold {
+export declare class AssistantOutputFold {
   private message;
   private partial;
   /**
@@ -893,11 +893,11 @@ declare class AssistantOutputFold {
  * @param events - the child-owned events (after any seed or epoch boundary).
  * @returns the selected output, or `undefined` when the child produced none.
  */
-declare function finalAssistantOutput(events: readonly SessionEvent[]): readonly ContentBlock[] | undefined;
+export declare function finalAssistantOutput(events: readonly SessionEvent[]): readonly ContentBlock[] | undefined;
 //#endregion
 //#region ../../../vendor/deepseek-harness/packages/subagent/subagent/src/error.d.ts
 /** Typed failure for the subagent seam. */
-declare class SubagentError extends HarnessError {
+export declare class SubagentError extends HarnessError {
   constructor(message: string, code: string, options?: ErrorOptions);
 }
 //#endregion
@@ -1369,7 +1369,7 @@ declare abstract class JobRegistry extends Service {
  * @param run - live run to settle and release.
  * @returns outcome after child resources are released.
  */
-declare function settleRun(run: SubagentRun): Promise<JobOutcome>;
+export declare function settleRun(run: SubagentRun): Promise<JobOutcome>;
 //#endregion
 //#region ../../../vendor/deepseek-harness/packages/subagent/subagent/src/depth.d.ts
 declare module '@deepseek-ai/dsh-agent' {
@@ -1388,12 +1388,12 @@ declare module '@deepseek-ai/dsh-agent' {
  * @returns its non-negative safe-integer depth.
  * @throws if the runtime `AgentOptions.subagentDepth` is not a non-negative safe integer.
  */
-declare function delegationDepthOf(agent: Agent): number;
+export declare function delegationDepthOf(agent: Agent): number;
 /**
  * Reject a recursion cap that cannot represent an exact delegation depth.
  * @param maxDepth - the optional runtime value to validate.
  */
-declare function assertSubagentMaxDepth(maxDepth: unknown): void;
+export declare function assertSubagentMaxDepth(maxDepth: unknown): void;
 //#endregion
 //#region ../../../vendor/deepseek-harness/packages/sandbox/sandbox/lib/types/index.d.ts
 /**
@@ -1514,7 +1514,7 @@ declare abstract class SandboxProvider extends Service {
 //#endregion
 //#region ../../../vendor/deepseek-harness/packages/subagent/subagent/src/child-agent.d.ts
 /** Thrown when starting a child would exceed the requested depth cap. */
-declare class SubagentDepthError extends Error {
+export declare class SubagentDepthError extends Error {
   readonly attemptedDepth: number;
   readonly maxDepth: number;
   constructor(attemptedDepth: number, maxDepth: number);
@@ -1529,7 +1529,7 @@ declare class SubagentDepthError extends Error {
  * @throws {SubagentDepthError} when the resolved depth exceeds `maxDepth`.
  * @throws {RangeError} when the resolved depth leaves the safe-integer range.
  */
-declare function resolveChildDepth(parent: Agent, maxDepth: number | undefined): number;
+export declare function resolveChildDepth(parent: Agent, maxDepth: number | undefined): number;
 /**
  * Resolve the parent values inherited by a child. The latest request header
  * owns provider, model, and reasoning effort after request-time selection;
@@ -1538,7 +1538,7 @@ declare function resolveChildDepth(parent: Agent, maxDepth: number | undefined):
  * @param parent - delegating parent Agent.
  * @returns detached Agent options for child-option merging.
  */
-declare function parentAgentOptionsForDelegation(parent: Agent): AgentOptions;
+export declare function parentAgentOptionsForDelegation(parent: Agent): AgentOptions;
 /**
  * Resolve the child's `AgentOptions`: the parent's provider/model,
  * reasoning-effort, and maxTokens values unless the request overrides them,
@@ -1550,7 +1550,7 @@ declare function parentAgentOptionsForDelegation(parent: Agent): AgentOptions;
  * @param childDepth - the resolved delegation depth to stamp.
  * @returns the resolved options for `ctx.agents.create()`.
  */
-declare function resolveChildAgentOptions(parent: Agent, requested: AgentOptions | undefined, childDepth: number): AgentOptions;
+export declare function resolveChildAgentOptions(parent: Agent, requested: AgentOptions | undefined, childDepth: number): AgentOptions;
 /**
  * Build the child session's durable creation metadata: the parent's workspace,
  * its direct lineage, coarse product origin, the recursion budget that must
@@ -1568,7 +1568,7 @@ declare function resolveChildAgentOptions(parent: Agent, requested: AgentOptions
  * @param isSeeded - whether this child inherits a parent-log prefix, including an explicitly empty one.
  * @returns the `meta` for `ctx.agents.create()`.
  */
-declare function childSessionMeta(parent: Agent, childDepth: number, isSeeded: boolean): NonNullable<CreateAgentOptions['meta']>;
+export declare function childSessionMeta(parent: Agent, childDepth: number, isSeeded: boolean): NonNullable<CreateAgentOptions['meta']>;
 /** The scoped composition a child agent's creation window applies. */
 interface ChildComposition {
   /** Per-child persona shadowing the deployment persona. */
@@ -1598,7 +1598,7 @@ interface ChildComposition {
  * @param parent - the delegating parent whose composition the child joins.
  * @param composition - the per-child persona and tool filter to install.
  */
-declare function applyChildComposition(childCtx: Context, parent: Agent, composition: ChildComposition): void;
+export declare function applyChildComposition(childCtx: Context, parent: Agent, composition: ChildComposition): void;
 /** Policy seeded onto a child session's log at the delegation boundary. */
 interface DelegatedPolicyOverrides {
   /**
@@ -1626,7 +1626,7 @@ interface DelegatedPolicyOverrides {
  * @param parent - the delegating parent agent.
  * @returns the sandbox override (or `undefined` without one) and the approval pin.
  */
-declare function captureDelegatedPolicyOverrides(parent: Agent): DelegatedPolicyOverrides;
+export declare function captureDelegatedPolicyOverrides(parent: Agent): DelegatedPolicyOverrides;
 /**
  * Append the captured delegation policy onto the child's own log as
  * `source: 'delegation'` events inside the unpublished creation window, so the
@@ -1636,7 +1636,7 @@ declare function captureDelegatedPolicyOverrides(parent: Agent): DelegatedPolicy
  * @param childSession - the unpublished child's session.
  * @param overrides - the policy captured at delegation.
  */
-declare function appendDelegatedPolicyOverrides(childSession: Session, overrides: DelegatedPolicyOverrides): void;
+export declare function appendDelegatedPolicyOverrides(childSession: Session, overrides: DelegatedPolicyOverrides): void;
 //#endregion
 //#region ../../../vendor/deepseek-harness/packages/subagent/subagent/src/continuation-messages.d.ts
 /** Durable attribution for one model-authored message between adjacent Agents. */
@@ -1971,21 +1971,21 @@ declare module '@deepseek-ai/dsh-llm' {
 //#endregion
 //#region src/index.d.ts
 /** Host configuration for continuable subagent capacity. */
-interface Config {
+export interface Config {
   /** Maximum live children sharing uninterrupted continuable parent links; defaults to 8. */
   maxActiveSubagents: Volatile<number>;
   /** Default delegation depth for tools without an explicit limit; defaults to 1. */
   maxDepth: Volatile<number>;
   /**
-   * Preset ids whose sessions get this package's Chinese return guidance; default empty.
+   * Preset ids the Chinese return guidance is restricted to; empty (default) means no restriction.
    *
-   * 名单由**装配**给（这一行的 `config`）：文案是模型可见的东西，跟着 preset 走，其余会话走上游英文那套。
-   * 装配面，不是用户面——所以不进设置页（`.hidden()`）。
+   * 不配 = 任意 preset 的会话都用本包的中文回报指引（官方四个 shipped preset 也在内，还有还没绑 preset 的会话）。
+   * 要反过来只让某几份 preset 用中文，就在这里列出来。装配面，不是用户面——所以不进设置页（`.hidden()`）。
    */
   localizedReturnGuidancePresets: string[];
 }
 /** Named provider registry with one-shot runs, durable discovery, and continuable-child operations. */
-declare class SubagentRuntime extends TypertRemoteService {
+export declare class SubagentRuntime extends TypertRemoteService {
   private config;
   static Config: z<Schemastery.ObjectS<NoInfer<{
     maxDepth: z<number, number, "volatile-defined">;
@@ -2198,4 +2198,4 @@ declare class SubagentRuntime extends TypertRemoteService {
   private assertCapabilities;
 }
 //#endregion
-export { type AgentMessageSource, AssistantOutputFold, type ChildComposition, Config, type ContinuableCreateRequest, type ContinuableCreateSpec, type ContinuableStart, type ContinuableStartSpec, type ContinuableSubagentDescriptorData, type ContinuableSubagentDescriptorInput, type DelegatedPolicyOverrides, NO_START_CAPABILITIES, type OneShotSubagentDescriptorData, type OneShotSubagentDescriptorInput, type ResolvedSubagentStartRequest, RunResultSettlement, SUBAGENT_DESCRIPTOR_VERSION, type SubagentAddress, type SubagentCapabilities, type SubagentCatalogEntry, type SubagentCatalogRow, SubagentDepthError, type SubagentDescendantListEntry, type SubagentDescriptorData, type SubagentDescriptorInput, SubagentError, type SubagentIdentityProjection, type SubagentInterruptAuthority, type SubagentInterruptReceipt, type SubagentListEntry, type SubagentPromptReceipt, type SubagentPromptRequest, type SubagentPromptRequestId, type SubagentProvider, type SubagentResult, type SubagentRun, type SubagentRunEndInfo, SubagentRunId, type SubagentRunInfo, SubagentRuntime, SubagentRuntime as default, type SubagentSendMessageOptions, type SubagentSettledMessageSource, type SubagentStartRequest, type SubagentStopReason, type SubagentStopReasonMap, type SubagentTimingProjection, SubprocessRunHandleParts, appendDelegatedPolicyOverrides, applyChildComposition, assertPositiveFinite, assertSubagentMaxDepth, assertUsableCwd, captureDelegatedPolicyOverrides, childSessionMeta, delegationDepthOf, finalAssistantOutput, foldSubagentDescriptor, parentAgentOptionsForDelegation, resolveChildAgentOptions, resolveChildCwd, resolveChildDepth, settleRun, settleRunResult, snapshotSubagentDescriptor, subprocessRunHandle, validateConfiguredCwd };
+export { type AgentMessageSource, type ChildComposition, type ContinuableCreateRequest, type ContinuableCreateSpec, type ContinuableStart, type ContinuableStartSpec, type ContinuableSubagentDescriptorData, type ContinuableSubagentDescriptorInput, type DelegatedPolicyOverrides, type OneShotSubagentDescriptorData, type OneShotSubagentDescriptorInput, type ResolvedSubagentStartRequest, type SubagentAddress, type SubagentCapabilities, type SubagentCatalogEntry, type SubagentCatalogRow, type SubagentDescendantListEntry, type SubagentDescriptorData, type SubagentDescriptorInput, type SubagentIdentityProjection, type SubagentInterruptAuthority, type SubagentInterruptReceipt, type SubagentListEntry, type SubagentPromptReceipt, type SubagentPromptRequest, type SubagentPromptRequestId, type SubagentProvider, type SubagentResult, type SubagentRun, type SubagentRunEndInfo, type SubagentRunInfo, SubagentRuntime as default, type SubagentSendMessageOptions, type SubagentSettledMessageSource, type SubagentStartRequest, type SubagentStopReason, type SubagentStopReasonMap, type SubagentTimingProjection };

package/dist/index.mjs

@@ -6572,15 +6572,17 @@ function createAgentMessage(sender, content) {
 /**
 * Whether this session's return guidance takes this package's Chinese wording.
 *
-* 判据是**会话挂着的 preset**：文案是模型可见的东西，跟着 preset 走；名单由装配给（本行的
-* `config.localizedReturnGuidancePresets`），默认空——没配、或会话没挂 preset（不装 registry 的部署、还没绑的
-* agent）一律走上游英文，官方 shipped preset 的会话因此不会被换文案。
+* **默认对任意 preset 生效**：名单（本行的 `config.localizedReturnGuidancePresets`）不配就是不限制——官方四个
+* shipped preset、部署自建的、以及还没绑 preset 的会话（不装 registry 的部署、还没 join 的 agent）都拿中文。
+* 配了名单才反过来收窄成"只有这些 preset 的会话用中文"。文案是模型可见的东西，判据留在 host 平面
+* （`subagents` 是进程单例，这一行不能搬进 preset realm）。
 *
 * @param composedPreset - the preset id the session is mounted on, if any.
-* @param configured - preset ids this deployment asked to localize.
+* @param configured - preset ids this deployment restricts the Chinese wording to; empty means every session.
 * @returns whether the Chinese guidance applies to this session.
 */
 function localizedReturnGuidance(composedPreset, configured) {
+	if (configured.length === 0) return true;
 	return composedPreset !== void 0 && configured.includes(composedPreset);
 }
 /**
@@ -7207,8 +7209,8 @@ var SubagentContinuationManager = class {
 	/**
 	* Return guidance for a continuable child's initial task, per session.
 	*
-	* 会话挂着本部署名单里的 preset 时用本包的中文文案，其余（官方 shipped preset、还没绑 preset 的会话、
-	* 不装 registry 的部署）保持上游英文。文案是模型可见的东西，跟着 preset 走；但 `subagents` 是**进程单例**
+	* 默认（没配名单）对**任意**会话用本包的中文文案，官方四个 shipped preset 与还没绑 preset 的会话都覆盖；
+	* 配了名单才收窄成"只有这些 preset 的会话用中文"。文案是模型可见的东西；但 `subagents` 是**进程单例**
 	* （跨会话查询面由 host 的 api-proxy 服务、provider 名全局唯一），realm 内的服务 realm 外读不到，所以这一行
 	* 不能搬进 preset realm——只能在 host 平面按会话判。
 	* @param parent - the exact live parent whose session owns the child.
@@ -7454,6 +7456,20 @@ var SubagentContinuationManager = class {
 		return query;
 	}
 };
+const DELEGATION_CONTEXT_TEXT = "你是被派发的子代理：权限范围在创建时就固定，本会话内不能放宽——需要审批的操作一律被自动拒绝。\n任务需要超出这个范围时不要重试被拒的操作，在回复里说明这个限制，让派发你的智能体处理。";
+function installDelegationContext(ctx) {
+	ctx.on("system-prompt/assemble", async (assembly, context, next) => {
+		const assembled = await next();
+		if (context.agent?.session.header.parentSession === void 0) return assembled;
+		return {
+			...assembled,
+			contexts: assembled.contexts.map((entry) => entry.name === "subagent:delegation" ? {
+				...entry,
+				text: DELEGATION_CONTEXT_TEXT
+			} : entry)
+		};
+	});
+}
 //#endregion
 //#region ../../../vendor/deepseek-harness/packages/subagent/subagent/src/list-children.ts
 /**
@@ -8140,6 +8156,7 @@ var SubagentRuntime = class extends (_b = TypertRemoteService) {
 		* composes into the carrier.
 		*/
 		__publicField(this, "emitLifecycle");
+		installDelegationContext(ctx);
 		this.emitLifecycle = createLifecycleEmitter(this.ctx, (parent) => scopeTarget(this, parent));
 		ctx.inject(["agents"], (childCtx) => {
 			const manager = new SubagentContinuationManager(childCtx, {

package/dist/rows.d.mts

@@ -1,35 +1,16 @@
 //#region src/rows.d.ts
-/**
- * 本包作为能力包发布的**装配数据**：行本身在部署那一层装
- * （`packages/bundles/session-mode-profile` 引用它渲染 patch）。
- *
- * 接管方式是**按官方行 id 复用**，不是"禁掉官方行再插一行自己的"：Loader 对同 id 的条目复用同一个 Entry、
- * 后者替换入口 options（`EntryGroup.create` 的 `create: true`），所以行 id 与 settings namespace（namespace
- * 就是行 id）都还是 `subagent`——官方设置卡 `ui-settings-subagent` 读得到那两个 namespace，照常可用；换掉的
- * 只是实现包。顺序前提：本包排在 `@deepseek-ai/dsh-base` 之后（app 的 `dsh.profile.bundles` 已如此）。
- *
- * 模型白名单服务行（`subagent-model-selection-settings`）留给官方卡片第二段，本包不动它。
- */
-/** 一行装配条目：与 `cordis.patch.yml` 的顶层结构同形。 */
-interface PatchRow {
+export interface PatchRow {
   readonly id?: string;
   readonly disabled?: boolean;
   readonly insert?: readonly RowEntry[];
 }
-/** `insert` 里的一个条目。 */
-interface RowEntry {
+export interface RowEntry {
   readonly id: string;
   readonly name: string;
   readonly config?: Readonly<Record<string, unknown>>;
 }
-interface SubagentRowsOptions {
-  /**
-   * 哪些 preset 的会话用本包的中文回报指引（本行 `config.localizedReturnGuidancePresets`）。
-   * 由装配给：它才知道自己注册的那份 preset 叫什么；不传即一律上游英文。
-   */
+export interface SubagentRowsOptions {
   readonly localizedReturnGuidancePresets?: readonly string[];
 }
-/** 服务接管的装配行：占官方 `subagent` 那个行 id。 */
-declare function subagentRows(options?: SubagentRowsOptions): readonly PatchRow[];
-//#endregion
-export { PatchRow, RowEntry, SubagentRowsOptions, subagentRows };
+export declare function subagentRows(options?: SubagentRowsOptions): readonly PatchRow[];
+//#endregion

package/dist/rows.mjs

@@ -1,5 +1,4 @@
 //#region src/rows.ts
-/** 服务接管的装配行：占官方 `subagent` 那个行 id。 */
 function subagentRows(options = {}) {
 	const presets = options.localizedReturnGuidancePresets;
 	return [{ insert: [{

package/locale/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "Subagent Service",
-    "description": "Thin-shell fork of @deepseek-ai/dsh-subagent: takes over the `subagent` row only to replace the continuable child's return guidance with Chinese wording."
+    "description": "Thin-shell fork of @deepseek-ai/dsh-subagent: takes over the official `subagent` row for two wording changes — the continuable child's return guidance and the child's delegation-scope statement, both in Chinese — plus row-id reuse; everything not intentionally changed is imported from the vendored upstream source."
   }
 }

package/locale/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "子智能体服务",
-    "description": "上游 @deepseek-ai/dsh-subagent 的薄壳 fork：只接管 `subagent` 行，把连续子智能体的回报指引换成中文。"
+    "description": "上游 @deepseek-ai/dsh-subagent 的薄壳 fork：接管官方 `subagent` 行，改两处文案——连续子智能体的回报指引与子代理的委派范围说明都换成中文；并按官方行 id 复用（设置卡照旧）。其余未有意改动的都从 vendor 上游源码内联。"
   }
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@morlay/dsh-subagent",
-  "version": "0.0.2",
-  "description": "Thin-shell fork of @deepseek-ai/dsh-subagent: takes over the `subagent` row only to replace the continuable-child return guidance with Chinese wording; everything not intentionally changed is imported from the vendored upstream source",
+  "version": "0.0.4",
+  "description": "Thin-shell fork of @deepseek-ai/dsh-subagent: takes over the official `subagent` row for two wording changes — the continuable child's return guidance in Chinese wording and the child's Chinese delegation-scope runtime context (`subagent:delegation`) — plus the row-id reuse (same `subagent` id, so the official settings card stays); everything not intentionally changed is imported from the vendored upstream source.",
   "keywords": [
     "dsh",
     "dsh-bundle",
@@ -37,6 +37,7 @@
     "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.0-rc.1",
     "@deepseek-ai/dsh-subagent-fork-in-process": "0.2.0-rc.1",
     "@deepseek-ai/dsh-subagent-spawn-in-process": "0.2.0-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.1",
     "@deepseek-ai/dsh-tool-subagent-control": "0.2.0-rc.1",
     "@deepseek-ai/dsh-util-values": "0.2.0-rc.1",
     "@deepseek-ai/schemastery": "~3.18.4",