@openma/deepseek-harness-acp 0.4.22 → 0.4.23

package/README.md

@@ -29,14 +29,14 @@ config options, slash commands, skills, and MCP servers. Credentials never
 touch your editor config — it reuses the key you saved in the dsh Web UI, or
 `dsh-acp login` saves one to the same store.
 
-## Two entry points, one embeddable plugin
+## One package, standalone or plugin
 
 | | **A · dsh profile plugin (recommended)** | **B · Standalone server** |
 |---|---|---|
 | Best for | Normal installation and upgrades | Connecting an ACP client without managing a dsh profile |
 | Install | `dsh plugin --profile acp add @openma/deepseek-harness-acp@latest` | `npm i -g @openma/deepseek-harness-acp` |
 | Zed runs | `dsh --profile acp` | `dsh-acp` |
-| Harness | The dsh that owns the profile | Your installed dsh — or the npm-installed peer when none exists |
+| Harness | The dsh that owns the profile | Your installed dsh, then the package's locked private runtime |
 | Composition | dsh-base + this bundle + your profile's own patches | dsh-base + this bundle (profile machinery booted in-process) |
 
 Both shapes share `$DSH_HOME`: the same credential store, settings, presets,
@@ -95,10 +95,11 @@ dsh-acp login        # interactive; or save the key in the dsh Web UI
 ```
 
 The standalone binary finds DeepSeek Harness via `--dsh-path` / `DSH_PATH`,
-its own tree, `./node_modules`, `dsh` on PATH, or `npm root -g`. It ships an
-npm-installed harness peer as the **last** candidate, so it still prefers the
-dsh you installed. When a real `$DSH_HOME/profiles/acp` exists, that profile
-owns the composition.
+`./node_modules`, `dsh` on PATH, or `npm root -g`, then falls back to the exact
+runtime archived inside this package. DSH is only a wildcard optional peer for
+Host integration, never an npm-installed dependency: plugin mode uses the
+Host's tree, while standalone maps the same imports to the private runtime.
+When a real `$DSH_HOME/profiles/acp` exists, that profile owns the composition.
 
 ## Plugin and extension model
 
@@ -216,7 +217,7 @@ another provider.
 - **Live model catalog** — providers × models from the running composition (third-party providers added in the Web UI appear immediately), plus reasoning-effort selection that follows your product default.
 - **Slash commands** — adapter built-ins (`/status`, `/model`) plus the harness command registry (`/compact`, `/goal`, `/permission`, `/plan`, …) executed without a model turn, plus **skills** (`/skill-name` — the harness's own invocation gesture). Login and logout are ACP methods, not chat commands.
 - **Plans & usage** — `todo_write` snapshots as ACP plans; token accounting as `usage_update` and per-turn usage.
-- **Sessions** — `session/load` with full history replay, `session/list`, silent restore when a client prompts an old session after an agent restart, titles as `session_info_update`.
+- **Sessions** — `session/load` with full history replay, `session/list`, silent restore when a client prompts an old session after an agent restart, titles as `session_info_update`. Multi-root sessions are not advertised: non-empty `additionalDirectories` on `session/new` or `session/load` return `Invalid params` until [dsh supports multiple workspace roots](https://github.com/deepseek-ai/deepseek-harness/discussions/2474).
 - **MCP servers** — per-session `mcpServers` mount `@deepseek-ai/dsh-mcp-client` instances (stdio + streamable HTTP); tools join as `mcp__<server>__<tool>`; a failing server never takes the session down.
 - **Real cancellation** — `session/cancel` interrupts the live turn through the harness agent.
 
@@ -257,9 +258,10 @@ ACP client (Zed, …)
    │  ACP JSON-RPC over stdio
    ▼
 dsh-acp
+   ├─ src/bin.ts              selects one DSH tree before Host imports evaluate
    ├─ src/profile-boot.ts     boots the harness's own profile machinery
    │                          (dsh-base + this bundle + $DSH_HOME layers)
-   ├─ src/harness.ts          host discovery (DSH_PATH → cwd → PATH → npm -g → npm peer)
+   ├─ src/harness.ts          host discovery (DSH_PATH → cwd → PATH → npm -g → bundled runtime)
    └─ src/bridge/             the ACP bridge (a cordis plugin)
         ├─ index.ts           sessions, prompts, cancel, modes, options,
         │                     commands, credentials, MCP mounts
@@ -267,8 +269,8 @@ dsh-acp
         ├─ history.ts         stored-log replay for session/load (pure)
         └─ prompt.ts          ACP prompt blocks → harness content blocks (pure)
    ▼
-your @deepseek-ai/dsh installation   (agent spine, llm, persistence, sandbox,
-                                      tools, presets, skills, compaction, …)
+external or package-bundled dsh     (agent spine, llm, persistence, sandbox,
+                                     tools, presets, skills, compaction, …)
 ```
 
 When embedded by another surface, only the transport edge changes:

package/dist/bin.js

@@ -0,0 +1,328 @@
+#!/usr/bin/env node
+
+// src/bin.ts
+import { registerHooks } from "node:module";
+
+// src/harness.ts
+import { execFileSync } from "node:child_process";
+import { existsSync as existsSync2, readFileSync as readFileSync2, realpathSync } from "node:fs";
+import { delimiter, dirname as dirname2, isAbsolute, join as join2, resolve, sep } from "node:path";
+import { pathToFileURL } from "node:url";
+
+// src/log.ts
+var PREFIX = "[dsh-acp]";
+function logError(message) {
+  process.stderr.write(`${PREFIX} error: ${message}
+`);
+}
+
+// src/runtime.ts
+import { createHash } from "node:crypto";
+import {
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+  writeFileSync
+} from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import * as tar from "tar";
+function cacheRoot() {
+  const explicit = process.env["DSH_ACP_CACHE_DIR"];
+  if (explicit !== void 0 && explicit.length > 0) return explicit;
+  if (process.platform === "win32") {
+    const local = process.env["LOCALAPPDATA"];
+    if (local !== void 0 && local.length > 0) return join(local, "dsh-acp");
+  }
+  const xdg = process.env["XDG_CACHE_HOME"];
+  return join(xdg !== void 0 && xdg.length > 0 ? xdg : join(homedir(), ".cache"), "dsh-acp");
+}
+function readMetadata(packageRoot) {
+  try {
+    const parsed = JSON.parse(readFileSync(join(packageRoot, "vendor/runtime.json"), "utf8"));
+    if (typeof parsed.archive !== "string" || typeof parsed.dsh !== "string" || typeof parsed.sha256 !== "string") return void 0;
+    return parsed;
+  } catch {
+    return void 0;
+  }
+}
+function resolveVendoredRuntime() {
+  const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)));
+  const metadata = readMetadata(packageRoot);
+  if (metadata === void 0) return void 0;
+  const archive = join(packageRoot, "vendor", metadata.archive);
+  if (!existsSync(archive)) return void 0;
+  const target = join(cacheRoot(), `${metadata.dsh}-${metadata.sha256.slice(0, 12)}`);
+  const marker = join(target, ".dsh-acp-runtime");
+  if (existsSync(marker)) return target;
+  mkdirSync(dirname(target), { recursive: true });
+  const actual = createHash("sha256").update(readFileSync(archive)).digest("hex");
+  if (actual !== metadata.sha256) throw new Error(`bundled DSH runtime integrity check failed: ${archive}`);
+  if (existsSync(target)) rmSync(target, { recursive: true, force: true });
+  const temporary = mkdtempSync(join(dirname(target), ".extract-"));
+  try {
+    tar.x({ cwd: temporary, file: archive, sync: true, strict: true });
+    writeFileSync(join(temporary, ".dsh-acp-runtime"), `${metadata.dsh}
+`);
+    try {
+      renameSync(temporary, target);
+    } catch (error) {
+      if (!existsSync(marker)) throw error;
+    }
+  } finally {
+    if (existsSync(temporary)) rmSync(temporary, { recursive: true, force: true });
+  }
+  return target;
+}
+
+// src/harness.ts
+var HarnessNotFoundError = class extends Error {
+  constructor(probed) {
+    super(
+      [
+        "could not find a DeepSeek Harness installation.",
+        "",
+        "The bundled DeepSeek Harness runtime is missing or invalid.",
+        "Reinstall @openma/deepseek-harness-acp, or point it at an existing installation:",
+        "    DSH_PATH=/path/to/dsh dsh-acp        (dsh binary, package dir, or npm root)",
+        "",
+        probed.length > 0 ? `Probed:
+${probed.map((p) => `    ${p}`).join("\n")}` : ""
+      ].join("\n").trimEnd()
+    );
+  }
+};
+var ANCHOR = "@deepseek-ai/dsh-agent";
+var PROFILE_LAUNCHER = "@deepseek-ai/dsh";
+function packageDirFrom(base, name) {
+  let dir = resolve(base);
+  for (; ; ) {
+    const candidate = join2(dir, "node_modules", ...name.split("/"));
+    if (existsSync2(join2(candidate, "package.json"))) return candidate;
+    const direct = join2(dir, ...name.split("/"));
+    if (dir.endsWith(`${sep}node_modules`) && existsSync2(join2(direct, "package.json"))) return direct;
+    const parent = dirname2(dir);
+    if (parent === dir) return void 0;
+    dir = parent;
+  }
+}
+function versionOf(packageDir) {
+  try {
+    const parsed = JSON.parse(readFileSync2(join2(packageDir, "package.json"), "utf8"));
+    return typeof parsed.version === "string" ? parsed.version : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function hostAt(base, source) {
+  const anchor = packageDirFrom(base, ANCHOR);
+  const launcher = packageDirFrom(base, PROFILE_LAUNCHER);
+  if (anchor === void 0 || launcher === void 0) return void 0;
+  return { base: resolve(base), version: versionOf(anchor), source };
+}
+function hostFromExplicit(explicit) {
+  const path = resolve(explicit);
+  const bases = [];
+  let stat;
+  try {
+    stat = realpathSync(path) !== void 0 && existsSync2(join2(path, ".")) ? "dir" : "file";
+  } catch {
+    stat = void 0;
+  }
+  if (existsSync2(path)) {
+    try {
+      const real = realpathSync(path);
+      stat = real === path && existsSync2(join2(path, "package.json")) ? "dir" : stat;
+      bases.push(dirname2(real));
+    } catch {
+      bases.push(dirname2(path));
+    }
+    bases.push(path, join2(path, "node_modules"), join2(path, "lib", "node_modules"));
+  }
+  for (const base of bases) {
+    const host = hostAt(base, `--dsh-path/DSH_PATH (${explicit})`);
+    if (host !== void 0) return host;
+  }
+  return void 0;
+}
+function hostFromPathLookup() {
+  const pathEnv = process.env["PATH"] ?? "";
+  for (const dir of pathEnv.split(delimiter)) {
+    if (dir.length === 0) continue;
+    const candidate = join2(dir, "dsh");
+    if (!existsSync2(candidate)) continue;
+    try {
+      const real = realpathSync(candidate);
+      const host = hostAt(dirname2(real), `dsh on PATH (${candidate})`);
+      if (host !== void 0) return host;
+    } catch {
+      continue;
+    }
+  }
+  return void 0;
+}
+function hostFromGlobalNpm() {
+  try {
+    const root = execFileSync("npm", ["root", "-g"], { encoding: "utf8", timeout: 1e4 }).trim();
+    if (root.length > 0 && isAbsolute(root)) return hostAt(root, `npm root -g (${root})`);
+  } catch {
+  }
+  return void 0;
+}
+function resolveHost(explicit) {
+  const probed = [];
+  if (explicit !== void 0) {
+    const host = hostFromExplicit(explicit);
+    if (host !== void 0) return host;
+    probed.push(`--dsh-path/DSH_PATH: ${explicit}`);
+    throw new HarnessNotFoundError(probed);
+  }
+  const local = hostAt(process.cwd(), `invoking directory (${process.cwd()})`);
+  if (local !== void 0) return local;
+  probed.push(`invoking directory: ${process.cwd()}`);
+  const onPath = hostFromPathLookup();
+  if (onPath !== void 0) return onPath;
+  probed.push("dsh on PATH");
+  const globalNpm = hostFromGlobalNpm();
+  if (globalNpm !== void 0) return globalNpm;
+  probed.push("npm root -g");
+  const vendored = resolveVendoredRuntime();
+  if (vendored !== void 0) {
+    const host = hostAt(vendored, "bundled standalone runtime");
+    if (host !== void 0) return host;
+  }
+  probed.push("bundled standalone runtime");
+  throw new HarnessNotFoundError(probed);
+}
+function entryFile(packageDir, subpath) {
+  const manifest = JSON.parse(readFileSync2(join2(packageDir, "package.json"), "utf8"));
+  const key = subpath === void 0 ? "." : `./${subpath}`;
+  const exportsMap = manifest.exports;
+  let target;
+  if (typeof exportsMap === "string") {
+    if (key === ".") target = exportsMap;
+  } else if (exportsMap !== null && typeof exportsMap === "object") {
+    const entry = exportsMap[key];
+    target = entry;
+  }
+  if (target !== null && typeof target === "object") {
+    const conditions = target;
+    target = conditions["import"] ?? conditions["default"] ?? conditions["node"];
+    if (target !== null && typeof target === "object") {
+      const nested = target;
+      target = nested["default"] ?? nested["import"];
+    }
+  }
+  if (typeof target !== "string" && key === "." && typeof manifest.main === "string") {
+    target = manifest.main;
+  }
+  if (typeof target !== "string") {
+    throw new Error(`cannot resolve entry ${key} of ${packageDir}`);
+  }
+  return join2(packageDir, target);
+}
+function hostModuleUrl(host, specifier) {
+  const [scope, packageName, ...rest] = specifier.split("/");
+  if (scope === void 0 || packageName === void 0) throw new Error(`invalid specifier: ${specifier}`);
+  const name = `${scope}/${packageName}`;
+  const packageDir = packageDirFrom(host.base, name);
+  if (packageDir === void 0) {
+    throw new Error(
+      `the DeepSeek Harness installation at ${host.base} (${host.source}) does not provide ${name}`
+    );
+  }
+  if (rest.length === 1 && rest[0] === "package.json") {
+    return pathToFileURL(join2(packageDir, "package.json")).href;
+  }
+  return pathToFileURL(entryFile(packageDir, rest.length > 0 ? rest.join("/") : void 0)).href;
+}
+
+// src/settings.ts
+var HELP_TEXT = `Usage: dsh-acp [options]
+       dsh-acp login [--provider <route>] [api-key]
+                                 Save a provider API key (interactive when omitted)
+       dsh-acp update            Self-update via npm
+
+Agent Client Protocol (ACP) stdio server for DeepSeek Harness. Speak ACP on
+stdin/stdout from an ACP client such as Zed; diagnostics go to stderr.
+
+Options:
+  --dsh-path <path>           DeepSeek Harness installation: the dsh binary, its
+                              package dir, or any dir carrying node_modules/@deepseek-ai
+                              (DSH_PATH; auto-detected when unset \u2014 own tree, ./node_modules,
+                              dsh on PATH, npm root -g)
+  --bundle <package-dir>      Add a dsh bundle layer to the agent tree (repeatable)
+  --provider <route>          Provider route (DSH_PROVIDER, default deepseek-official)
+  --model <id>                Default model (DSH_MODEL, default deepseek-v4-flash)
+  --models <a,b,...>          Selectable models for the session "Model" option
+                              (DSH_ACP_MODELS, default deepseek-v4-flash,deepseek-v4-pro)
+  --max-tokens <n>            Per-request output-token cap (DSH_MAX_TOKENS)
+  --permission-mode <mode>    read-only | workspace-write | danger-full-access
+                              (DSH_PERMISSION_MODE; otherwise use the Host default)
+  --session-root <dir>        JSONL session store (DSH_SESSION_ROOT, default ~/.dsh-acp/sessions)
+  --persona <text>            System-prompt persona (DSH_SYSTEM_PROMPT)
+  --reasoning-effort <level>  off | high | max (DSH_REASONING_EFFORT, default high)
+  --no-thinking               Disable model thinking output
+  --bash-timeout <ms>         Foreground bash timeout (DSH_BASH_TIMEOUT_MS, default 60000)
+  --version                   Print version and exit
+  --help                      Show this help
+
+Environment:
+  DSH_PATH                    DeepSeek Harness installation (see --dsh-path)
+  DEEPSEEK_API_KEY            DeepSeek (or compatible) API credential
+  DEEPSEEK_BASE_URL           OpenAI-compatible endpoint override
+  DSH_ACP_DEBUG               Verbose stderr diagnostics
+`;
+
+// src/version.ts
+import { createRequire } from "node:module";
+var VERSION = createRequire(import.meta.url)("../package.json").version;
+
+// src/bin.ts
+var NAME = "@openma/deepseek-harness-acp";
+function explicitDshPath(argv) {
+  const index = argv.indexOf("--dsh-path");
+  if (index >= 0) return argv[index + 1];
+  const env = process.env["DSH_PATH"];
+  return env !== void 0 && env.length > 0 ? env : void 0;
+}
+async function bootstrap() {
+  const argv = process.argv.slice(2);
+  if (argv.includes("--version")) {
+    console.log(`${NAME} ${VERSION}`);
+    return;
+  }
+  if (argv.includes("--help")) {
+    console.log(HELP_TEXT.trimEnd());
+    return;
+  }
+  let host;
+  try {
+    host = resolveHost(explicitDshPath(argv));
+  } catch (error) {
+    if (error instanceof HarnessNotFoundError) {
+      logError(error.message);
+      process.exitCode = 1;
+      return;
+    }
+    throw error;
+  }
+  registerHooks({
+    resolve(specifier, context, nextResolve) {
+      if (specifier === "@deepseek-ai/cordis" || specifier.startsWith("@deepseek-ai/")) {
+        return { shortCircuit: true, url: hostModuleUrl(host, specifier) };
+      }
+      return nextResolve(specifier, context);
+    }
+  });
+  const cli = import.meta.url.endsWith(".ts") ? "./index.ts" : "./index.js";
+  await import(cli);
+}
+bootstrap().catch((error) => {
+  logError(error instanceof Error ? error.stack ?? error.message : String(error));
+  process.exit(1);
+});

package/dist/bridge.js

@@ -54,6 +54,7 @@ __export(bridge_exports, {
   answerFromElicitation: () => answerFromElicitation,
   apply: () => apply3,
   askUserQuestionsOverAcp: () => askUserQuestionsOverAcp,
+  createElicitation: () => createElicitation,
   inject: () => inject3,
   installAcpUserQuestionProvider: () => installAcpUserQuestionProvider,
   name: () => name3,
@@ -1593,6 +1594,7 @@ function apply(ctx, config) {
 var user_questions_plugin_exports = {};
 __export(user_questions_plugin_exports, {
   apply: () => apply2,
+  createElicitation: () => createElicitation,
   inject: () => inject2,
   name: () => name2
 });
@@ -1725,6 +1727,9 @@ async function askUserQuestionsOverAcp(request, sessionId, create) {
   }
   return answer;
 }
+function createElicitation(connection, request) {
+  return connection.createElicitation(request);
+}
 var ROUTERS_KEY = /* @__PURE__ */ Symbol.for("@openma/deepseek-harness-acp/user-question-routers");
 var routers = globalThis[ROUTERS_KEY] ??= /* @__PURE__ */ new WeakMap();
 function installAcpUserQuestionProvider(service, options) {
@@ -2878,6 +2883,7 @@ async function apply3(ctx, config = {}) {
         await requireCredential(config.provider);
         mark("credential");
         validateCwd(params.cwd);
+        validateAdditionalDirectories(params.additionalDirectories);
         syncMcpServers(params.mcpServers, params.cwd);
         mark("request setup");
         const sessionId = SessionId2(randomUUID());
@@ -2922,6 +2928,7 @@ async function apply3(ctx, config = {}) {
         assertOpen();
         await requireCredential(config.provider);
         validateCwd(params.cwd);
+        validateAdditionalDirectories(params.additionalDirectories);
         syncMcpServers(params.mcpServers, params.cwd);
         requirePersistence();
         const record = await restoreSession(params.sessionId, { replay: true, cwd: params.cwd });
@@ -3165,6 +3172,11 @@ async function apply3(ctx, config = {}) {
   function validateCwd(cwd) {
     if (!isAbsolute(cwd)) throw invalidParams(`cwd must be an absolute path: ${cwd}`);
   }
+  function validateAdditionalDirectories(additionalDirectories) {
+    if (additionalDirectories !== void 0 && additionalDirectories.length > 0) {
+      throw invalidParams("additionalDirectories is not supported");
+    }
+  }
   const mcpMounts = /* @__PURE__ */ new Map();
   let warnedNoMcpClient = false;
   const sanitizeServerName = (raw2) => {
@@ -3262,7 +3274,7 @@ async function apply3(ctx, config = {}) {
       const record = ownedRecord(request.agent);
       return record === void 0 ? void 0 : String(record.agent.session.id);
     },
-    create: (request) => conn.unstable_createElicitation(request)
+    create: (request) => createElicitation(conn, request)
   });
   let quiescing;
   const quiesce = () => {

package/dist/index.js

@@ -5,9 +5,8 @@ import { spawnSync } from "node:child_process";
 
 // src/harness.ts
 import { execFileSync } from "node:child_process";
-import { existsSync, readFileSync, realpathSync } from "node:fs";
-import { delimiter, dirname, isAbsolute, join, resolve, sep } from "node:path";
-import { pathToFileURL, fileURLToPath } from "node:url";
+import { existsSync as existsSync2, readFileSync as readFileSync2, realpathSync } from "node:fs";
+import { delimiter, dirname as dirname2, isAbsolute, join as join2, resolve, sep } from "node:path";
 
 // src/log.ts
 var PREFIX = "[dsh-acp]";
@@ -24,6 +23,69 @@ function logInfo(message) {
 `);
 }
 
+// src/runtime.ts
+import { createHash } from "node:crypto";
+import {
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+  writeFileSync
+} from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import * as tar from "tar";
+function cacheRoot() {
+  const explicit = process.env["DSH_ACP_CACHE_DIR"];
+  if (explicit !== void 0 && explicit.length > 0) return explicit;
+  if (process.platform === "win32") {
+    const local = process.env["LOCALAPPDATA"];
+    if (local !== void 0 && local.length > 0) return join(local, "dsh-acp");
+  }
+  const xdg = process.env["XDG_CACHE_HOME"];
+  return join(xdg !== void 0 && xdg.length > 0 ? xdg : join(homedir(), ".cache"), "dsh-acp");
+}
+function readMetadata(packageRoot) {
+  try {
+    const parsed = JSON.parse(readFileSync(join(packageRoot, "vendor/runtime.json"), "utf8"));
+    if (typeof parsed.archive !== "string" || typeof parsed.dsh !== "string" || typeof parsed.sha256 !== "string") return void 0;
+    return parsed;
+  } catch {
+    return void 0;
+  }
+}
+function resolveVendoredRuntime() {
+  const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)));
+  const metadata = readMetadata(packageRoot);
+  if (metadata === void 0) return void 0;
+  const archive = join(packageRoot, "vendor", metadata.archive);
+  if (!existsSync(archive)) return void 0;
+  const target = join(cacheRoot(), `${metadata.dsh}-${metadata.sha256.slice(0, 12)}`);
+  const marker = join(target, ".dsh-acp-runtime");
+  if (existsSync(marker)) return target;
+  mkdirSync(dirname(target), { recursive: true });
+  const actual = createHash("sha256").update(readFileSync(archive)).digest("hex");
+  if (actual !== metadata.sha256) throw new Error(`bundled DSH runtime integrity check failed: ${archive}`);
+  if (existsSync(target)) rmSync(target, { recursive: true, force: true });
+  const temporary = mkdtempSync(join(dirname(target), ".extract-"));
+  try {
+    tar.x({ cwd: temporary, file: archive, sync: true, strict: true });
+    writeFileSync(join(temporary, ".dsh-acp-runtime"), `${metadata.dsh}
+`);
+    try {
+      renameSync(temporary, target);
+    } catch (error) {
+      if (!existsSync(marker)) throw error;
+    }
+  } finally {
+    if (existsSync(temporary)) rmSync(temporary, { recursive: true, force: true });
+  }
+  return target;
+}
+
 // src/harness.ts
 var HarnessNotFoundError = class extends Error {
   constructor(probed) {
@@ -31,10 +93,8 @@ var HarnessNotFoundError = class extends Error {
       [
         "could not find a DeepSeek Harness installation.",
         "",
-        "Install it first:",
-        "    npm install -g @deepseek-ai/dsh",
-        "",
-        "or point dsh-acp at an existing installation:",
+        "The bundled DeepSeek Harness runtime is missing or invalid.",
+        "Reinstall @openma/deepseek-harness-acp, or point it at an existing installation:",
         "    DSH_PATH=/path/to/dsh dsh-acp        (dsh binary, package dir, or npm root)",
         "",
         probed.length > 0 ? `Probed:
@@ -48,18 +108,18 @@ var PROFILE_LAUNCHER = "@deepseek-ai/dsh";
 function packageDirFrom(base, name) {
   let dir = resolve(base);
   for (; ; ) {
-    const candidate = join(dir, "node_modules", ...name.split("/"));
-    if (existsSync(join(candidate, "package.json"))) return candidate;
-    const direct = join(dir, ...name.split("/"));
-    if (dir.endsWith(`${sep}node_modules`) && existsSync(join(direct, "package.json"))) return direct;
-    const parent = dirname(dir);
+    const candidate = join2(dir, "node_modules", ...name.split("/"));
+    if (existsSync2(join2(candidate, "package.json"))) return candidate;
+    const direct = join2(dir, ...name.split("/"));
+    if (dir.endsWith(`${sep}node_modules`) && existsSync2(join2(direct, "package.json"))) return direct;
+    const parent = dirname2(dir);
     if (parent === dir) return void 0;
     dir = parent;
   }
 }
 function versionOf(packageDir) {
   try {
-    const parsed = JSON.parse(readFileSync(join(packageDir, "package.json"), "utf8"));
+    const parsed = JSON.parse(readFileSync2(join2(packageDir, "package.json"), "utf8"));
     return typeof parsed.version === "string" ? parsed.version : void 0;
   } catch {
     return void 0;
@@ -76,19 +136,19 @@ function hostFromExplicit(explicit) {
   const bases = [];
   let stat;
   try {
-    stat = realpathSync(path) !== void 0 && existsSync(join(path, ".")) ? "dir" : "file";
+    stat = realpathSync(path) !== void 0 && existsSync2(join2(path, ".")) ? "dir" : "file";
   } catch {
     stat = void 0;
   }
-  if (existsSync(path)) {
+  if (existsSync2(path)) {
     try {
       const real = realpathSync(path);
-      stat = real === path && existsSync(join(path, "package.json")) ? "dir" : stat;
-      bases.push(dirname(real));
+      stat = real === path && existsSync2(join2(path, "package.json")) ? "dir" : stat;
+      bases.push(dirname2(real));
     } catch {
-      bases.push(dirname(path));
+      bases.push(dirname2(path));
     }
-    bases.push(path, join(path, "node_modules"), join(path, "lib", "node_modules"));
+    bases.push(path, join2(path, "node_modules"), join2(path, "lib", "node_modules"));
   }
   for (const base of bases) {
     const host = hostAt(base, `--dsh-path/DSH_PATH (${explicit})`);
@@ -100,11 +160,11 @@ function hostFromPathLookup() {
   const pathEnv = process.env["PATH"] ?? "";
   for (const dir of pathEnv.split(delimiter)) {
     if (dir.length === 0) continue;
-    const candidate = join(dir, "dsh");
-    if (!existsSync(candidate)) continue;
+    const candidate = join2(dir, "dsh");
+    if (!existsSync2(candidate)) continue;
     try {
       const real = realpathSync(candidate);
-      const host = hostAt(dirname(real), `dsh on PATH (${candidate})`);
+      const host = hostAt(dirname2(real), `dsh on PATH (${candidate})`);
       if (host !== void 0) return host;
     } catch {
       continue;
@@ -137,20 +197,23 @@ function resolveHost(explicit) {
   const globalNpm = hostFromGlobalNpm();
   if (globalNpm !== void 0) return globalNpm;
   probed.push("npm root -g");
-  const own = hostAt(dirname(fileURLToPath(import.meta.url)), "dsh-acp package tree (npm peer)");
-  if (own !== void 0) return own;
-  probed.push("dsh-acp package tree (npm peer)");
+  const vendored = resolveVendoredRuntime();
+  if (vendored !== void 0) {
+    const host = hostAt(vendored, "bundled standalone runtime");
+    if (host !== void 0) return host;
+  }
+  probed.push("bundled standalone runtime");
   throw new HarnessNotFoundError(probed);
 }
 
 // src/profile-boot.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "node:fs";
 import { createRequire } from "node:module";
-import { dirname as dirname2, isAbsolute as isAbsolute2, join as join2, resolve as resolve2, sep as sep2 } from "node:path";
-import { pathToFileURL as pathToFileURL2 } from "node:url";
+import { dirname as dirname3, isAbsolute as isAbsolute2, join as join3, resolve as resolve2, sep as sep2 } from "node:path";
+import { pathToFileURL } from "node:url";
 var BIN = "dsh-acp";
 function ownRoot() {
-  return dirname2(createRequire(import.meta.url).resolve("../package.json"));
+  return dirname3(createRequire(import.meta.url).resolve("../package.json"));
 }
 var OWN_BRIDGE_SPECIFIER = "@openma/deepseek-harness-acp/bridge";
 var OWN_SERVER_SPECIFIER = "@openma/deepseek-harness-acp/server";
@@ -171,19 +234,19 @@ function rewriteOwnRows(row, entries) {
   }
 }
 function bundlePatchPath(packageJsonPath) {
-  const pkg = JSON.parse(readFileSync2(packageJsonPath, "utf8"));
+  const pkg = JSON.parse(readFileSync3(packageJsonPath, "utf8"));
   const declared = pkg.dsh?.bundle?.patch;
   if (declared === void 0) {
     throw new Error(`${BIN}: bundle ${pkg.name ?? packageJsonPath} declares no dsh.bundle in its package.json`);
   }
-  return join2(dirname2(packageJsonPath), declared);
+  return join3(dirname3(packageJsonPath), declared);
 }
 function resolveBundlePackageJson(specifier) {
   const candidate = resolve2(specifier);
-  if (existsSync2(candidate)) {
-    return candidate.endsWith("package.json") ? candidate : join2(candidate, "package.json");
+  if (existsSync3(candidate)) {
+    return candidate.endsWith("package.json") ? candidate : join3(candidate, "package.json");
   }
-  const req = createRequire(join2(process.cwd(), "noop.js"));
+  const req = createRequire(join3(process.cwd(), "noop.js"));
   try {
     return req.resolve(`${specifier}/package.json`);
   } catch (cause) {
@@ -198,8 +261,8 @@ function rewriteBundleRows(row, packageJsonPath, manifest) {
       row["name"] = req.resolve(name);
     } catch (cause) {
       if (name === manifest.name && manifest.main !== void 0) {
-        const entry = resolve2(dirname2(packageJsonPath), manifest.main);
-        if (existsSync2(entry)) row["name"] = entry;
+        const entry = resolve2(dirname3(packageJsonPath), manifest.main);
+        if (existsSync3(entry)) row["name"] = entry;
         else throw new Error(`${BIN}: bundle entry does not exist: ${entry}`, { cause });
       } else {
         throw new Error(
@@ -220,45 +283,45 @@ function rewriteBundleRows(row, packageJsonPath, manifest) {
 }
 function loadBundleLayer(appBoot, specifier) {
   const packageJsonPath = resolveBundlePackageJson(specifier);
-  const manifest = JSON.parse(readFileSync2(packageJsonPath, "utf8"));
+  const manifest = JSON.parse(readFileSync3(packageJsonPath, "utf8"));
   const patches = appBoot.loadOverlayPatches(BIN, bundlePatchPath(packageJsonPath));
   for (const row of patches) rewriteBundleRows(row, packageJsonPath, manifest);
   return patches;
 }
 async function bootAcpProfile(host, overrides) {
-  const req = createRequire(join2(host.base, "noop.js"));
+  const req = createRequire(join3(host.base, "noop.js"));
   const dshPkgPath = req.resolve("@deepseek-ai/dsh/package.json");
-  const dshDir = dirname2(dshPkgPath);
-  const appBoot = await import(pathToFileURL2(req.resolve("@deepseek-ai/dsh-app-boot")).href);
-  const homePaths = await import(pathToFileURL2(req.resolve("@deepseek-ai/dsh-home-paths")).href);
+  const dshDir = dirname3(dshPkgPath);
+  const appBoot = await import(pathToFileURL(req.resolve("@deepseek-ai/dsh-app-boot")).href);
+  const homePaths = await import(pathToFileURL(req.resolve("@deepseek-ai/dsh-home-paths")).href);
   const home = homePaths.resolveDshHome();
   let bundlePatches;
   let profilePatches = [];
   let profilePatchPath;
-  let rootConfigPath = join2(ownRoot(), "profile-root.cordis.yml");
-  let bareModuleBaseUrl = pathToFileURL2(dshDir + sep2).href;
-  const distBridge = join2(ownRoot(), "dist", "bridge.js");
-  const bridgeEntry = import.meta.url.endsWith(".ts") || !existsSync2(distBridge) ? join2(ownRoot(), "src", "bundle.ts") : distBridge;
-  const distServer = join2(ownRoot(), "dist", "server.js");
-  const serverEntry = import.meta.url.endsWith(".ts") || !existsSync2(distServer) ? join2(ownRoot(), "src", "server.ts") : distServer;
-  const distPlugin = join2(ownRoot(), "dist", "plugin.js");
-  const pluginEntry = import.meta.url.endsWith(".ts") || !existsSync2(distPlugin) ? join2(ownRoot(), "src", "plugin.ts") : distPlugin;
-  const distStdio = join2(ownRoot(), "dist", "stdio.js");
-  const stdioEntry = import.meta.url.endsWith(".ts") || !existsSync2(distStdio) ? join2(ownRoot(), "src", "stdio.ts") : distStdio;
-  const realProfileDir = join2(home, "profiles", "acp");
-  if (existsSync2(join2(realProfileDir, "package.json"))) {
+  let rootConfigPath = join3(ownRoot(), "profile-root.cordis.yml");
+  let bareModuleBaseUrl = pathToFileURL(dshDir + sep2).href;
+  const distBridge = join3(ownRoot(), "dist", "bridge.js");
+  const bridgeEntry = import.meta.url.endsWith(".ts") || !existsSync3(distBridge) ? join3(ownRoot(), "src", "bundle.ts") : distBridge;
+  const distServer = join3(ownRoot(), "dist", "server.js");
+  const serverEntry = import.meta.url.endsWith(".ts") || !existsSync3(distServer) ? join3(ownRoot(), "src", "server.ts") : distServer;
+  const distPlugin = join3(ownRoot(), "dist", "plugin.js");
+  const pluginEntry = import.meta.url.endsWith(".ts") || !existsSync3(distPlugin) ? join3(ownRoot(), "src", "plugin.ts") : distPlugin;
+  const distStdio = join3(ownRoot(), "dist", "stdio.js");
+  const stdioEntry = import.meta.url.endsWith(".ts") || !existsSync3(distStdio) ? join3(ownRoot(), "src", "stdio.ts") : distStdio;
+  const realProfileDir = join3(home, "profiles", "acp");
+  if (existsSync3(join3(realProfileDir, "package.json"))) {
     appBoot.healProfilesModuleFallback(dshPkgPath);
     const profile = appBoot.loadProfile(BIN, "acp", dshPkgPath);
     bundlePatches = profile.layers.flatMap((layer) => layer.patches);
     profilePatches = profile.patches;
-    profilePatchPath = join2(profile.dir, "cordis.patch.yml");
-    const realRoot = join2(profile.dir, "cordis.yml");
-    if (existsSync2(realRoot)) rootConfigPath = realRoot;
+    profilePatchPath = join3(profile.dir, "cordis.patch.yml");
+    const realRoot = join3(profile.dir, "cordis.yml");
+    if (existsSync3(realRoot)) rootConfigPath = realRoot;
     bareModuleBaseUrl = void 0;
     logDebug(`profile: real (${profile.dir})`);
   } else {
     const basePatch = bundlePatchPath(req.resolve("@deepseek-ai/dsh-base/package.json"));
-    const ownPatch = bundlePatchPath(join2(ownRoot(), "package.json"));
+    const ownPatch = bundlePatchPath(join3(ownRoot(), "package.json"));
     bundlePatches = [
       ...appBoot.loadOverlayPatches(BIN, basePatch),
       ...appBoot.loadOverlayPatches(BIN, ownPatch)
@@ -277,15 +340,15 @@ async function bootAcpProfile(host, overrides) {
       stdio: stdioEntry
     });
   }
-  const homePatchPath = join2(home, "cordis.patch.yml");
+  const homePatchPath = join3(home, "cordis.patch.yml");
   const homePatches = appBoot.loadOptionalPatches(BIN, homePatchPath) ?? [];
   const rows = /* @__PURE__ */ new Map();
   for (const row of appBoot.composeEntries([bundlePatches, profilePatches, homePatches])) {
     if (typeof row.id === "string") rows.set(row.id, row);
   }
   const overlays = [];
-  const shippedPresets = join2(dshDir, "config", "agent-presets") + sep2;
-  if (rows.has("agent-presets") && existsSync2(shippedPresets)) {
+  const shippedPresets = join3(dshDir, "config", "agent-presets") + sep2;
+  if (rows.has("agent-presets") && existsSync3(shippedPresets)) {
     overlays.push({
       id: "agent-presets",
       config: {
@@ -315,7 +378,7 @@ async function bootAcpProfile(host, overrides) {
   }
   const allPatches = [...bundlePatches, ...profilePatches, ...homePatches, ...overlays];
   const launchEnvironment = appBoot.loadLayeredEnv("dsh");
-  const launchEnvKey = (await import(pathToFileURL2(req.resolve("@deepseek-ai/dsh-launch-environment")).href)).DSH_LAUNCH_ENVIRONMENT_KEY;
+  const launchEnvKey = (await import(pathToFileURL(req.resolve("@deepseek-ai/dsh-launch-environment")).href)).DSH_LAUNCH_ENVIRONMENT_KEY;
   const ctx = await appBoot.boot(
     BIN,
     rootConfigPath,
@@ -447,8 +510,8 @@ The dsh Web UI and every dsh surface share this credential.
 }
 
 // src/settings.ts
-import { homedir } from "node:os";
-import { join as join3 } from "node:path";
+import { homedir as homedir2 } from "node:os";
+import { join as join4 } from "node:path";
 var DEFAULT_PERSONA = `You are a coding assistant powered by the {{model}} model, working inside an editor via the Agent Client Protocol. Your working directory is {{cwd}}. Your bash tool runs under a file sandbox \u2014 a \`[sandbox: file access denied \u2026]\` result is policy, not a command bug.
 
 Verify your work by running the code or tests. Keep answers brief and factual.`;
@@ -552,7 +615,7 @@ function resolveSettings(argv) {
     models,
     maxTokens,
     permissionMode,
-    sessionRoot: stringFlag(parsed, "session-root") ?? envString("DSH_SESSION_ROOT") ?? join3(homedir(), ".dsh-acp", "sessions"),
+    sessionRoot: stringFlag(parsed, "session-root") ?? envString("DSH_SESSION_ROOT") ?? join4(homedir2(), ".dsh-acp", "sessions"),
     persona: stringFlag(parsed, "persona") ?? envString("DSH_SYSTEM_PROMPT") ?? DEFAULT_PERSONA,
     thinking: !parsed.flags.has("no-thinking"),
     reasoningEffort: reasoningRaw,

package/dist/plugin.js

@@ -56,6 +56,7 @@ __export(bridge_exports, {
   answerFromElicitation: () => answerFromElicitation,
   apply: () => apply3,
   askUserQuestionsOverAcp: () => askUserQuestionsOverAcp,
+  createElicitation: () => createElicitation,
   inject: () => inject3,
   installAcpUserQuestionProvider: () => installAcpUserQuestionProvider,
   name: () => name3,
@@ -1595,6 +1596,7 @@ function apply(ctx, config) {
 var user_questions_plugin_exports = {};
 __export(user_questions_plugin_exports, {
   apply: () => apply2,
+  createElicitation: () => createElicitation,
   inject: () => inject2,
   name: () => name2
 });
@@ -1727,6 +1729,9 @@ async function askUserQuestionsOverAcp(request, sessionId, create) {
   }
   return answer;
 }
+function createElicitation(connection, request) {
+  return connection.createElicitation(request);
+}
 var ROUTERS_KEY = /* @__PURE__ */ Symbol.for("@openma/deepseek-harness-acp/user-question-routers");
 var routers = globalThis[ROUTERS_KEY] ??= /* @__PURE__ */ new WeakMap();
 function installAcpUserQuestionProvider(service, options) {
@@ -2880,6 +2885,7 @@ async function apply3(ctx, config = {}) {
         await requireCredential(config.provider);
         mark("credential");
         validateCwd(params.cwd);
+        validateAdditionalDirectories(params.additionalDirectories);
         syncMcpServers(params.mcpServers, params.cwd);
         mark("request setup");
         const sessionId = SessionId2(randomUUID());
@@ -2924,6 +2930,7 @@ async function apply3(ctx, config = {}) {
         assertOpen();
         await requireCredential(config.provider);
         validateCwd(params.cwd);
+        validateAdditionalDirectories(params.additionalDirectories);
         syncMcpServers(params.mcpServers, params.cwd);
         requirePersistence();
         const record = await restoreSession(params.sessionId, { replay: true, cwd: params.cwd });
@@ -3167,6 +3174,11 @@ async function apply3(ctx, config = {}) {
   function validateCwd(cwd) {
     if (!isAbsolute(cwd)) throw invalidParams(`cwd must be an absolute path: ${cwd}`);
   }
+  function validateAdditionalDirectories(additionalDirectories) {
+    if (additionalDirectories !== void 0 && additionalDirectories.length > 0) {
+      throw invalidParams("additionalDirectories is not supported");
+    }
+  }
   const mcpMounts = /* @__PURE__ */ new Map();
   let warnedNoMcpClient = false;
   const sanitizeServerName = (raw2) => {
@@ -3264,7 +3276,7 @@ async function apply3(ctx, config = {}) {
       const record = ownedRecord(request.agent);
       return record === void 0 ? void 0 : String(record.agent.session.id);
     },
-    create: (request) => conn.unstable_createElicitation(request)
+    create: (request) => createElicitation(conn, request)
   });
   let quiescing;
   const quiesce = () => {

package/dist/server.js

@@ -50,6 +50,7 @@ __export(bridge_exports, {
   answerFromElicitation: () => answerFromElicitation,
   apply: () => apply3,
   askUserQuestionsOverAcp: () => askUserQuestionsOverAcp,
+  createElicitation: () => createElicitation,
   inject: () => inject3,
   installAcpUserQuestionProvider: () => installAcpUserQuestionProvider,
   name: () => name3,
@@ -1589,6 +1590,7 @@ function apply(ctx, config) {
 var user_questions_plugin_exports = {};
 __export(user_questions_plugin_exports, {
   apply: () => apply2,
+  createElicitation: () => createElicitation,
   inject: () => inject2,
   name: () => name2
 });
@@ -1721,6 +1723,9 @@ async function askUserQuestionsOverAcp(request, sessionId, create) {
   }
   return answer;
 }
+function createElicitation(connection, request) {
+  return connection.createElicitation(request);
+}
 var ROUTERS_KEY = /* @__PURE__ */ Symbol.for("@openma/deepseek-harness-acp/user-question-routers");
 var routers = globalThis[ROUTERS_KEY] ??= /* @__PURE__ */ new WeakMap();
 function installAcpUserQuestionProvider(service, options) {
@@ -2874,6 +2879,7 @@ async function apply3(ctx, config = {}) {
         await requireCredential(config.provider);
         mark("credential");
         validateCwd(params.cwd);
+        validateAdditionalDirectories(params.additionalDirectories);
         syncMcpServers(params.mcpServers, params.cwd);
         mark("request setup");
         const sessionId = SessionId2(randomUUID());
@@ -2918,6 +2924,7 @@ async function apply3(ctx, config = {}) {
         assertOpen();
         await requireCredential(config.provider);
         validateCwd(params.cwd);
+        validateAdditionalDirectories(params.additionalDirectories);
         syncMcpServers(params.mcpServers, params.cwd);
         requirePersistence();
         const record = await restoreSession(params.sessionId, { replay: true, cwd: params.cwd });
@@ -3161,6 +3168,11 @@ async function apply3(ctx, config = {}) {
   function validateCwd(cwd) {
     if (!isAbsolute(cwd)) throw invalidParams(`cwd must be an absolute path: ${cwd}`);
   }
+  function validateAdditionalDirectories(additionalDirectories) {
+    if (additionalDirectories !== void 0 && additionalDirectories.length > 0) {
+      throw invalidParams("additionalDirectories is not supported");
+    }
+  }
   const mcpMounts = /* @__PURE__ */ new Map();
   let warnedNoMcpClient = false;
   const sanitizeServerName = (raw2) => {
@@ -3258,7 +3270,7 @@ async function apply3(ctx, config = {}) {
       const record = ownedRecord(request.agent);
       return record === void 0 ? void 0 : String(record.agent.session.id);
     },
-    create: (request) => conn.unstable_createElicitation(request)
+    create: (request) => createElicitation(conn, request)
   });
   let quiescing;
   const quiesce = () => {

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.4.22",
+  "version": "0.4.23",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/openma-ai/deepseek-harness-acp.git"
@@ -15,9 +15,10 @@
   "description": "Agent Client Protocol (ACP) adapter for DeepSeek Harness — use DeepSeek Harness from ACP clients such as Zed.",
   "main": "dist/index.js",
   "bin": {
-    "dsh-acp": "dist/index.js"
+    "dsh-acp": "dist/bin.js"
   },
   "files": [
+    "dist/bin.js",
     "dist/index.js",
     "dist/bridge.js",
     "dist/server.js",
@@ -28,18 +29,21 @@
     "LICENSE",
     "package.json",
     "profile-root.cordis.yml",
+    "vendor/*.json",
+    "vendor/*.tgz",
     "assets/icon.svg"
   ],
   "scripts": {
-    "prepublishOnly": "npm run build",
+    "prepack": "npm run build && npm run runtime:pack",
     "build": "node build.mjs",
+    "runtime:pack": "node scripts/pack-runtime.mjs",
     "start": "node --import tsx src/index.ts",
     "pretest": "npm run build",
     "test": "vitest run",
     "test:host": "vitest run test/e2e.test.ts -t \"serves session controls through the host tree\"",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
-    "pack:local": "npm run build && npm pack"
+    "pack:local": "npm pack"
   },
   "license": "Apache-2.0",
   "type": "module",
@@ -49,62 +53,62 @@
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/cordis-plugin-timer": "^1.1.3",
-    "@deepseek-ai/dsh": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-agent": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-agent-instructions": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-agent-loop": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-agent-spine-demo": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-anonymous-user-id": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-bash-sandbox": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-brand": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-commands": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-compaction": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-compaction-basic": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-compaction-tool-result-pruner": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-credentials": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-credentials-local": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-fs": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-fs-local": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-fs-observation-policy": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-fs-sandbox": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-goal": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-goal-round-driver": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-home-paths": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-invariants": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-jobs-local": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-launch-environment": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-llm-deepseek": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-llm-retry": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-sandbox": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-sandbox-local": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-scope": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-session": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-session-checkpoint-policy": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-session-persistence": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-session-projection": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-session-title": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-shell": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-shell-env": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-skill": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-skill-filesystem": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-subprocess": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-subprocess-local": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-timeout": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-token-meter": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-tool-bash": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-tool-fs": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-tool-goal": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-tool-jobs": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-tool-skill": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-tool-todo": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-tools": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-user-approval": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-agent-instructions": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-agent-spine-demo": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-anonymous-user-id": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-bash-sandbox": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-brand": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-commands": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-compaction": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-compaction-basic": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-compaction-tool-result-pruner": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-fs": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-fs-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-fs-observation-policy": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-fs-sandbox": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-goal": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-goal-round-driver": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-invariants": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-jobs-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-launch-environment": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm-retry": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-scope": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-checkpoint-policy": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-persistence": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-title": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-shell": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-shell-env": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-skill": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-skill-filesystem": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-timeout": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-token-meter": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tool-bash": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tool-fs": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tool-goal": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tool-jobs": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tool-skill": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tool-todo": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.1-rc.2",
     "@types/node": "^26.1.0",
     "esbuild": "^0.28.1",
     "pnpm": "11.22.0",
@@ -114,11 +118,17 @@
     "yaml": "^2.9.0"
   },
   "dependencies": {
-    "@agentclientprotocol/sdk": "^1.3.0",
-    "zod": "^4.4.3"
+    "@agentclientprotocol/sdk": "1.4.0",
+    "tar": "7.4.3",
+    "zod": "4.4.3"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh": "0.1.1-rc.2"
+    "@deepseek-ai/dsh": "*"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh": {
+      "optional": true
+    }
   },
   "exports": {
     ".": "./dist/index.js",
@@ -133,5 +143,12 @@
     "bundle": {
       "patch": "./cordis.patch.yml"
     }
+  },
+  "dshAcp": {
+    "standaloneDsh": "0.1.1-rc.2",
+    "hostCompatibility": {
+      "cordisProtocol": 0,
+      "policy": "capability-negotiated"
+    }
   }
 }

package/vendor/runtime.json

@@ -0,0 +1,5 @@
+{
+  "archive": "dsh-runtime.tgz",
+  "dsh": "0.1.1-rc.2",
+  "sha256": "531e1458e52bdf56c4a6257062258c6e1bf697c81b09c8f5c48864758f372dff"
+}