@qlzt/dsh-subagent 0.2.1-alpha.2 → 0.2.1-rc.2

package/lib/types/child-agent.d.ts

@@ -54,23 +54,22 @@ export declare function resolveChildAgentOptions(parent: Agent, requested: Agent
  * survive persistence, the seed boundary that separates inherited parent
  * history from child work, and the composition the child runs under.
  *
- * The preset is read from the parent's LIVE scope chain rather than from its
- * header, because a parent that switched preset while blank runs on the newer
- * composition and its header still names the older one. Recording it is what
- * makes a child's history reconstructable: without it a cold read of the child
- * resolves the deployment default and rebuilds turns under a tool set the
- * child never had.
+ * Omitted selection uses the parent's live composition, including any switch
+ * made while the parent was blank.
  * @param parent - the delegating parent agent.
  * @param childDepth - the resolved delegation depth to persist.
  * @param isSeeded - whether this child inherits a parent-log prefix, including an explicitly empty one.
+ * @param selectedPreset - independent selection, or omission to inherit the parent.
  * @returns the `meta` for `ctx.agents.create()`.
  */
-export declare function childSessionMeta(parent: Agent, childDepth: number, isSeeded: boolean): NonNullable<CreateAgentOptions['meta']>;
+export declare function childSessionMeta(parent: Agent, childDepth: number, isSeeded: boolean, selectedPreset?: string): NonNullable<CreateAgentOptions['meta']>;
 /** The scoped composition a child agent's creation window applies. */
 export interface ChildComposition {
-    /** Per-child persona shadowing the deployment persona. */
+    /** Independently mounted preset; omission shares the parent's standing generation. */
+    readonly agentPreset?: string | undefined;
+    /** Historical descriptor persona reapplied only during cold resume. */
     readonly persona?: string | undefined;
-    /** Per-child tool scoping. */
+    /** Historical descriptor tool restriction reapplied only during cold resume. */
     readonly toolFilter?: ToolRestriction | undefined;
 }
 /**
@@ -80,28 +79,15 @@ export interface ChildComposition {
  */
 export declare const SUBAGENT_DELEGATION_CONTEXT: string;
 /**
- * Compose one child inside its creation window: join its parent's preset,
- * register the fixed delegation-scope statement, then apply the child's own
- * shadowing persona section and tool restriction, all owned by the child's
- * scope and therefore invisible to its parent and siblings. Creation and cold
- * resume both pass through here.
- *
- * The join comes first and the child's own registrations second, which is the
- * order the layering already implies — the nearest scope wins a name, and a
- * per-child restriction intersects with everything its chain admits — but
- * stating it here keeps the two steps from being read as independent.
- *
- * The join and the per-child registrations live in ONE call because a child
- * composed without the join is exactly the defect this function exists to
- * prevent: with every model-facing row on the agent plane, a child that joins
- * no preset sees an empty tool registry and none of its parent's prompt
- * sections. Taking the parent as a parameter is what makes that omission
- * unrepresentable at the call sites.
+ * Compose a child before publication and restore historical descriptor overrides.
+ * Explicit selection mounts the named preset; omission synchronously joins the
+ * parent's current generation. Registrations belong to the child's scope.
  * @param childCtx - the child agent's scoped creation context.
- * @param parent - the delegating parent whose composition the child joins.
- * @param composition - the per-child persona and tool filter to install.
+ * @param parent - the delegating parent used when no preset is selected.
+ * @param composition - independent preset and any overrides read from a historical descriptor.
+ * @returns A promise when mounting an independent preset; otherwise completes synchronously.
  */
-export declare function applyChildComposition(childCtx: Context, parent: Agent, composition: ChildComposition): void;
+export declare function applyChildComposition(childCtx: Context, parent: Agent, composition: ChildComposition): void | Promise<void>;
 /** Policy seeded onto a child session's log at the delegation boundary. */
 export interface DelegatedPolicyOverrides {
     /**

package/lib/types/child-agent.js

@@ -6,6 +6,7 @@
  * @module @qlzt/dsh-subagent/child-agent
  */
 import { delegationDepthOf } from "./depth.js";
+import { SubagentError } from "./error.js";
 /** Thrown when starting a child would exceed the requested depth cap. */
 export class SubagentDepthError extends Error {
     attemptedDepth;
@@ -95,20 +96,17 @@ export function resolveChildAgentOptions(parent, requested, childDepth) {
  * survive persistence, the seed boundary that separates inherited parent
  * history from child work, and the composition the child runs under.
  *
- * The preset is read from the parent's LIVE scope chain rather than from its
- * header, because a parent that switched preset while blank runs on the newer
- * composition and its header still names the older one. Recording it is what
- * makes a child's history reconstructable: without it a cold read of the child
- * resolves the deployment default and rebuilds turns under a tool set the
- * child never had.
+ * Omitted selection uses the parent's live composition, including any switch
+ * made while the parent was blank.
  * @param parent - the delegating parent agent.
  * @param childDepth - the resolved delegation depth to persist.
  * @param isSeeded - whether this child inherits a parent-log prefix, including an explicitly empty one.
+ * @param selectedPreset - independent selection, or omission to inherit the parent.
  * @returns the `meta` for `ctx.agents.create()`.
  */
-export function childSessionMeta(parent, childDepth, isSeeded) {
+export function childSessionMeta(parent, childDepth, isSeeded, selectedPreset) {
     const parentHeader = parent.session.header;
-    const agentPreset = parent.ctx.get('agentPresets')?.composedPreset(parent.ctx);
+    const agentPreset = selectedPreset ?? parent.ctx.get('agentPresets')?.composedPreset(parent.ctx);
     return {
         ...parentHeader.cwd !== undefined ? { cwd: parentHeader.cwd } : {},
         ...agentPreset === undefined ? {} : { agentPreset },
@@ -131,29 +129,28 @@ export const SUBAGENT_DELEGATION_CONTEXT = 'You are a delegated subagent: your p
     + 'When the task needs access beyond that scope, do not retry the denied operation; state the '
     + 'limitation in your reply so the delegating agent can handle it.';
 /**
- * Compose one child inside its creation window: join its parent's preset,
- * register the fixed delegation-scope statement, then apply the child's own
- * shadowing persona section and tool restriction, all owned by the child's
- * scope and therefore invisible to its parent and siblings. Creation and cold
- * resume both pass through here.
- *
- * The join comes first and the child's own registrations second, which is the
- * order the layering already implies — the nearest scope wins a name, and a
- * per-child restriction intersects with everything its chain admits — but
- * stating it here keeps the two steps from being read as independent.
- *
- * The join and the per-child registrations live in ONE call because a child
- * composed without the join is exactly the defect this function exists to
- * prevent: with every model-facing row on the agent plane, a child that joins
- * no preset sees an empty tool registry and none of its parent's prompt
- * sections. Taking the parent as a parameter is what makes that omission
- * unrepresentable at the call sites.
+ * Compose a child before publication and restore historical descriptor overrides.
+ * Explicit selection mounts the named preset; omission synchronously joins the
+ * parent's current generation. Registrations belong to the child's scope.
  * @param childCtx - the child agent's scoped creation context.
- * @param parent - the delegating parent whose composition the child joins.
- * @param composition - the per-child persona and tool filter to install.
+ * @param parent - the delegating parent used when no preset is selected.
+ * @param composition - independent preset and any overrides read from a historical descriptor.
+ * @returns A promise when mounting an independent preset; otherwise completes synchronously.
  */
 export function applyChildComposition(childCtx, parent, composition) {
+    if (composition.agentPreset !== undefined) {
+        const presets = childCtx.get('agentPresets');
+        if (presets === undefined) {
+            throw new SubagentError('selecting a child agent preset requires the agent-presets service', 'PRESET_UNAVAILABLE');
+        }
+        return presets.mount(childCtx, composition.agentPreset).then(() => {
+            applyChildOverrides(childCtx, composition);
+        });
+    }
     childCtx.get('agentPresets')?.composeFrom(childCtx, parent.ctx);
+    applyChildOverrides(childCtx, composition);
+}
+function applyChildOverrides(childCtx, composition) {
     childCtx.systemPrompt.context({
         name: 'subagent:delegation',
         order: childCtx.systemPrompt.getContextOrder('SUBAGENT_DELEGATION'),

package/lib/types/index.js

@@ -36,7 +36,7 @@ import z from '@deepseek-ai/schemastery';
 import { scopeTarget } from '@qlzt/dsh-scope';
 import { assertObjectJsonSchema } from '@qlzt/dsh-tools';
 import { canonicalClientTimeZone } from '@qlzt/dsh-util-time';
-import { Remote, RemoteError, TypertRemoteService } from '@qlzt/dsh-typert-protocol';
+import { Remote, RemoteError, TypertRemoteService, principalOf } from '@qlzt/dsh-typert-protocol';
 import { rejectPrompt, validateControlRequest, } from "./control.js";
 import { SubagentError } from "./error.js";
 import { assertSubagentMaxDepth } from "./depth.js";
@@ -306,10 +306,12 @@ let SubagentRuntime = (() => {
             if (parent === undefined) {
                 throw new RemoteError('subagent/parent-unavailable', `parent session "${parentSessionId}" is not live`, { parentSessionId });
             }
+            const principal = principalOf(this.ctx.invocation);
             const source = {
                 kind: 'user',
                 rpcId: request.requestId,
                 ...(canonicalTimeZone === undefined ? {} : { clientTimeZone: canonicalTimeZone }),
+                ...(principal === undefined ? {} : { principal }),
             };
             try {
                 // Admission precedes delivery: image parts become durable references
@@ -435,12 +437,13 @@ let SubagentRuntime = (() => {
         }
         /** Reject the first requested capability that the provider lacks. */
         assertCapabilities(provider, request) {
+            if (request.agentPreset !== undefined && (!provider.capabilities.agentPreset || provider.inheritsParentContext)) {
+                throw new SubagentError(`subagent provider "${provider.name}" does not support independent agent preset selection`, 'UNSUPPORTED_CAPABILITY');
+            }
             const needs = [
                 { when: request.agentOptions !== undefined, cap: 'agentOptions' },
                 { when: request.outputSchema !== undefined, cap: 'outputSchema' },
                 { when: request.maxDepth !== undefined, cap: 'depthLimit' },
-                { when: request.toolFilter !== undefined, cap: 'toolFilter' },
-                { when: request.persona !== undefined, cap: 'persona' },
             ];
             for (const { when, cap } of needs) {
                 if (when && !provider.capabilities[cap]) {

package/lib/types/manager.js

@@ -335,8 +335,6 @@ export class SubagentManager {
             ...agentProvider !== undefined ? { agentProvider } : {},
             ...agentModel !== undefined ? { agentModel } : {},
             ...agentReasoningEffort !== undefined ? { agentReasoningEffort } : {},
-            ...request.persona !== undefined ? { persona: request.persona } : {},
-            ...request.toolFilter !== undefined ? { toolFilter: request.toolFilter } : {},
         });
         // Capture before the first await: a later parent switch belongs to the
         // parent's future, not to this child.
@@ -379,13 +377,13 @@ export class SubagentManager {
                     create: {
                         cwd,
                         seed,
-                        meta: childSessionMeta(parent, childDepth, prepared.seed !== undefined),
+                        meta: childSessionMeta(parent, childDepth, prepared.seed !== undefined, request.agentPreset),
                         inheritedEventCount,
                         delegatedPolicies,
                         descriptor,
                     },
                     agentOptions,
-                    composition: { persona: request.persona, toolFilter: request.toolFilter },
+                    composition: { agentPreset: request.agentPreset },
                     signal: spec.signal,
                     delivery: spec.delivery,
                     outputSchema: spec.request.outputSchema,
@@ -764,7 +762,13 @@ export class SubagentManager {
             const setup = async (childCtx, child) => {
                 // Only fresh creation appends the descriptor and delegated policy after
                 // the inherited marker; a cold resume replays those persisted events.
+                if (inputs.composition.agentPreset !== undefined) {
+                    await applyChildComposition(childCtx, parent, inputs.composition);
+                }
                 if (create !== undefined) {
+                    if (inputs.composition.agentPreset !== undefined) {
+                        child.session.append('agent-preset/selected', { agentPreset: inputs.composition.agentPreset });
+                    }
                     child.session.append('subagent/descriptor', create.descriptor);
                     appendDelegatedPolicyOverrides(child.session, create.delegatedPolicies);
                     const workingDirectory = childCtx.get('workingDirectory');
@@ -772,7 +776,8 @@ export class SubagentManager {
                         throw new Error('local subagents require the working-directory service');
                     await workingDirectory.set(child, create.cwd, inputs.signal);
                 }
-                applyChildComposition(childCtx, parent, inputs.composition);
+                if (inputs.composition.agentPreset === undefined)
+                    await applyChildComposition(childCtx, parent, inputs.composition);
                 if (inputs.outputSchema !== undefined) {
                     structured = attachStructuredRuntime(childCtx, inputs.outputSchema, () => this.resident.get(childId)?.ownedChildren.size === 0
                         && child.inbox.nextStep.length === 0
@@ -1180,12 +1185,18 @@ export class SubagentManager {
             const source = __addDisposableResource(env_1, observation, false);
             this.assertAdmitting(parent);
             this.authorizeLineage(parent, childId, source.header.parentSession);
-            const descriptor = foldSubagentDescriptor(source.events.slice(source.inheritedEventCount));
+            const ownEvents = source.events.slice(source.inheritedEventCount);
+            const descriptor = foldSubagentDescriptor(ownEvents);
             if (descriptor === undefined || descriptor.mode !== 'continuable') {
                 throw new SubagentError(`subagent "${childId}" has no supported continuation state and cannot be resumed; choose a different target`, 'NOT_RESUMABLE');
             }
             let activation;
             try {
+                const independentlySelected = hasIndependentPresetSelection(ownEvents);
+                const agentPreset = independentlySelected ? source.projections?.values.agentPreset : undefined;
+                if (independentlySelected && typeof agentPreset !== 'string') {
+                    throw new SubagentError(`subagent "${childId}" has no agent preset projection for restoration`, 'NOT_RESUMABLE');
+                }
                 activation = await this.materialize({
                     kind: 'local',
                     childId,
@@ -1198,7 +1209,7 @@ export class SubagentManager {
                             ? { reasoningEffort: ReasoningEffortId(descriptor.agentReasoningEffort) }
                             : {},
                     },
-                    composition: { persona: descriptor.persona, toolFilter: descriptor.toolFilter },
+                    composition: { agentPreset: agentPreset ?? undefined, persona: descriptor.persona, toolFilter: descriptor.toolFilter },
                     signal: options.signal,
                 });
             }
@@ -1291,4 +1302,15 @@ export class SubagentManager {
     }
 }
 export default SubagentManager;
+/** Creation-time selection precedes the own descriptor; historical forks can select after it. */
+function hasIndependentPresetSelection(events) {
+    for (const event of events) {
+        if (event.type === 'subagent/descriptor')
+            return false;
+        if (event.type === 'agent-preset/selected')
+            return true;
+    }
+    /* v8 ignore next -- coldResume rejects logs without a supported own descriptor before this lookup. */
+    return false;
+}
 //# sourceMappingURL=manager.js.map

package/lib/types/out-of-process.d.ts

@@ -14,7 +14,7 @@ import type { SubagentCapabilities, SubagentResult, SubagentRun, SubagentStopRea
 /**
  * The capability advertisement of an out-of-process backend: NONE. A child in
  * another process cannot honor parent-enforced start features
- * (`agentOptions`/`outputSchema`/`maxDepth`/`toolFilter`/`persona`), so the service rejects a
+ * (`agentOptions`/`agentPreset`/`outputSchema`/`maxDepth`), so the service rejects a
  * request needing any of them before `start` runs — never accepted-then-ignored.
  */
 export declare const NO_START_CAPABILITIES: SubagentCapabilities;

package/lib/types/out-of-process.js

@@ -42,15 +42,14 @@ function normalizeSubagentDiagnostic(result) {
 /**
  * The capability advertisement of an out-of-process backend: NONE. A child in
  * another process cannot honor parent-enforced start features
- * (`agentOptions`/`outputSchema`/`maxDepth`/`toolFilter`/`persona`), so the service rejects a
+ * (`agentOptions`/`agentPreset`/`outputSchema`/`maxDepth`), so the service rejects a
  * request needing any of them before `start` runs — never accepted-then-ignored.
  */
 export const NO_START_CAPABILITIES = Object.freeze({
     agentOptions: false,
+    agentPreset: false,
     outputSchema: false,
     depthLimit: false,
-    toolFilter: false,
-    persona: false,
 });
 /**
  * Assert a configured timing bound is a positive finite number (it bounds a

package/lib/types/types.d.ts

@@ -12,7 +12,7 @@ import type { Agent, AgentOptions } from '@qlzt/dsh-agent';
 import type { Branded } from '@qlzt/dsh-brand';
 import type { ContentBlock, MessageId } from '@qlzt/dsh-llm';
 import type { SessionEvent, SessionId } from '@qlzt/dsh-session';
-import type { ObjectJsonSchema, ToolRestriction } from '@qlzt/dsh-tools';
+import type { ObjectJsonSchema } from '@qlzt/dsh-tools';
 /** Identifies one accepted subagent run across its lifecycle event pair. */
 export type SubagentRunId = Branded<'SubagentRunId'>;
 /**
@@ -114,10 +114,10 @@ export interface SubagentRunEndInfo {
  */
 export interface SubagentCapabilities {
     readonly agentOptions: boolean;
+    /** Supports selecting a preset independently of the parent's composition. */
+    readonly agentPreset: boolean;
     readonly outputSchema: boolean;
     readonly depthLimit: boolean;
-    readonly toolFilter: boolean;
-    readonly persona: boolean;
 }
 /**
  * Task and optional capabilities supplied to a backend. startActivation carries
@@ -127,6 +127,12 @@ export interface SubagentCapabilities {
 export interface SubagentStartRequest {
     /** Initial child directory; relative paths resolve against the parent's current directory. Omitted inherits that directory at start. */
     readonly cwd?: string;
+    /**
+     * Independent preset id; omission joins the parent's current generation.
+     * Requires a provider with `capabilities.agentPreset` that does not inherit
+     * parent context.
+     */
+    readonly agentPreset?: string;
     /** Optional short display label persisted with a session-backed child. */
     readonly label?: string;
     /** Content delivered as the child's user message. */
@@ -165,22 +171,6 @@ export interface SubagentStartRequest {
      * start otherwise.
      */
     readonly maxDepth?: number;
-    /**
-     * Optional child tool scoping. Requires {@link SubagentCapabilities.toolFilter};
-     * rejected at start otherwise. In-process backends apply it as a scoped
-     * `tools.restrict()` in the child's creation window: the named tools vanish
-     * from the child's prompt AND refuse to execute (one visibility), with loud
-     * unknown-name validation.
-     */
-    readonly toolFilter?: ToolRestriction;
-    /**
-     * Optional per-child persona. Requires {@link SubagentCapabilities.persona};
-     * rejected at start otherwise. In-process backends register it as a scoped
-     * `deployment:persona-prefix` section on the child, SHADOWING the deployment's
-     * persona for this child alone — same template semantics as the deployment
-     * persona (strict `{{…}}` interpolation against the registered variables).
-     */
-    readonly persona?: string;
 }
 /** Provider-facing request with an absolute directory selected before startup. */
 export interface ResolvedSubagentStartRequest extends SubagentStartRequest {

package/locale/en.json

@@ -0,0 +1,5 @@
+{
+  "meta": {
+    "title": "subagent"
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "子智能体服务",
+    "description": "管理子智能体后端，为任务委派提供统一接口。"
+  }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@qlzt/dsh-subagent",
   "description": "Abstract subagent seam (ctx.subagents): named-provider registry for delegating to child agents",
-  "version": "0.2.1-alpha.2",
+  "version": "0.2.1-rc.2",
   "publishConfig": {
     "access": "public"
   },
@@ -35,9 +35,11 @@
       "default": "./lib/typert.remote-client.js"
     },
     "./src/*": "./src/*",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
   },
   "files": [
+    "locale/*.json",
     "lib/index.js",
     "lib/types/**/*.js",
     "lib/types/**/*.d.ts",
@@ -48,33 +50,33 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@qlzt/dsh-brand": "0.2.1-alpha.2",
-    "@qlzt/dsh-chunked-list": "0.2.1-alpha.2",
-    "@qlzt/dsh-util-values": "0.2.1-alpha.2",
-    "@deepseek-ai/schemastery": "~3.18.5-alpha.1",
-    "zod": "^4.4.3"
+    "@qlzt/dsh-brand": "0.2.1-rc.2",
+    "@qlzt/dsh-chunked-list": "0.2.1-rc.2",
+    "@qlzt/dsh-util-values": "0.2.1-rc.2",
+    "@deepseek-ai/schemastery": "~3.18.5",
+    "zod": "4.4.3"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@qlzt/dsh-agent": "0.2.1-alpha.2",
-    "@qlzt/dsh-agent-preset-registry": "0.2.1-alpha.2",
-    "@qlzt/dsh-attachment": "0.2.1-alpha.2",
-    "@qlzt/dsh-llm": "0.2.1-alpha.2",
-    "@qlzt/dsh-sandbox": "0.2.1-alpha.2",
-    "@qlzt/dsh-sandbox-policy": "0.2.1-alpha.2",
-    "@qlzt/dsh-scope": "0.2.1-alpha.2",
-    "@qlzt/dsh-session": "0.2.1-alpha.2",
-    "@qlzt/dsh-session-persistence": "0.2.1-alpha.2",
-    "@qlzt/dsh-session-projection": "0.2.1-alpha.2",
-    "@qlzt/dsh-session-query": "0.2.1-alpha.2",
-    "@qlzt/dsh-system-prompt": "0.2.1-alpha.2",
-    "@qlzt/dsh-tools": "0.2.1-alpha.2",
-    "@qlzt/dsh-typert-protocol": "0.2.1-alpha.2",
-    "@qlzt/dsh-user-approval": "0.2.1-alpha.2",
-    "@qlzt/dsh-util-time": "0.2.1-alpha.2",
-    "@qlzt/dsh-permission-presets": "0.2.1-alpha.2",
-    "@qlzt/dsh-workspace": "0.2.1-alpha.2",
-    "@qlzt/dsh-working-directory": "0.2.1-alpha.2"
+    "@deepseek-ai/cordis": "~4.0.5",
+    "@qlzt/dsh-agent": "0.2.1-rc.2",
+    "@qlzt/dsh-agent-preset-registry": "0.2.1-rc.2",
+    "@qlzt/dsh-attachment": "0.2.1-rc.2",
+    "@qlzt/dsh-llm": "0.2.1-rc.2",
+    "@qlzt/dsh-sandbox": "0.2.1-rc.2",
+    "@qlzt/dsh-sandbox-policy": "0.2.1-rc.2",
+    "@qlzt/dsh-scope": "0.2.1-rc.2",
+    "@qlzt/dsh-session": "0.2.1-rc.2",
+    "@qlzt/dsh-session-persistence": "0.2.1-rc.2",
+    "@qlzt/dsh-session-projection": "0.2.1-rc.2",
+    "@qlzt/dsh-session-query": "0.2.1-rc.2",
+    "@qlzt/dsh-system-prompt": "0.2.1-rc.2",
+    "@qlzt/dsh-tools": "0.2.1-rc.2",
+    "@qlzt/dsh-typert-protocol": "0.2.1-rc.2",
+    "@qlzt/dsh-user-approval": "0.2.1-rc.2",
+    "@qlzt/dsh-util-time": "0.2.1-rc.2",
+    "@qlzt/dsh-permission-presets": "0.2.1-rc.2",
+    "@qlzt/dsh-workspace": "0.2.1-rc.2",
+    "@qlzt/dsh-working-directory": "0.2.1-rc.2"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-agent-preset-registry": {
@@ -106,33 +108,33 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-attachment": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-sandbox": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-scope": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-persistence": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-query": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-user-approval": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-util-time": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-permission-presets": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-workspace": "0.2.1-alpha.2",
-    "@deepseek-ai/cordis-plugin-include": "~1.0.10-alpha.1",
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
-    "@deepseek-ai/dsh-agent-loop": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-agent-loop-testkit": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-fs-sandbox": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tool-fs": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-working-directory": "0.2.1-alpha.2"
+    "@deepseek-ai/cordis": "~4.0.5",
+    "@deepseek-ai/dsh-agent": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-scope": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session-persistence": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session-query": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-util-time": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-permission-presets": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-workspace": "0.2.1-rc.2",
+    "@deepseek-ai/cordis-plugin-include": "~1.0.10",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6",
+    "@deepseek-ai/dsh-agent-loop": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-agent-loop-testkit": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-fs-sandbox": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-tool-fs": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-working-directory": "0.2.1-rc.2"
   },
   "dsh": {}
 }