@qlzt/dsh-tool-subagent 0.2.1-alpha.3 → 0.2.1-rc.2

package/README.i18n.yaml

@@ -9,8 +9,8 @@
   en: 686fb5136bef0a3b
   zh: d25d6569174a01b5
 /deepseek-ai-dsh-tool-subagent/summary:
-  en: 958d2b1c56ac6ec7
-  zh: cc1997a9ac09e7a5
+  en: c09d40329253a9d8
+  zh: 91c1bbe5557bdda9
 /deepseek-ai-dsh-tool-subagent/table-of-contents:
   en: d152484eb41ac6b4
   zh: 09388d293f9be9cb
@@ -18,11 +18,14 @@
   en: 93f1701f5209ecb5
   zh: 6310fd012400aead
 /deepseek-ai-dsh-tool-subagent/use-this-package/minimal-configuration:
-  en: d01d4425bc1875dd
-  zh: f3d36c8a1e5ed0fa
+  en: 6a82283a51912841
+  zh: 35728acc16931bb4
 /deepseek-ai-dsh-tool-subagent/use-this-package/managed-delegation:
-  en: 42673064ba88a211
-  zh: 8fa26285bd649dc9
+  en: bb715d037cde14bd
+  zh: a88e98c07115fbd1
+/deepseek-ai-dsh-tool-subagent/use-this-package/selecting-a-child-preset:
+  en: 1950ef92bab0f46e
+  zh: 593f5f64ed9b5631
 /deepseek-ai-dsh-tool-subagent/use-this-package/selecting-a-child-llm:
   en: 0d37e3b3957515e4
   zh: ea1a94b2f29e7d9a
@@ -30,8 +33,8 @@
   en: 6ce5f749256a7e6c
   zh: a4f2adb04a70d9cf
 /deepseek-ai-dsh-tool-subagent/understand-the-implementation/design-concept:
-  en: 5ceacfed4ea0c648
-  zh: 005284534923d854
+  en: e9df1e3d504a3625
+  zh: 4eca7bb1bc6def62
 /deepseek-ai-dsh-tool-subagent/understand-the-implementation/activation-ownership:
   en: ef692c4d17290920
   zh: b1d0d3dab011e2cd
@@ -42,8 +45,8 @@
   en: 1733728ac5aa6bb0
   zh: 341ffc6e21a289af
 /deepseek-ai-dsh-tool-subagent/understand-the-implementation/source-map:
-  en: 255f6edd3064ff2f
-  zh: c3ebfe1e845dfb4b
+  en: ce5147d9e1b2849c
+  zh: 67a707f05b2b7dc5
 /deepseek-ai-dsh-tool-subagent/further-exploration:
   en: fa3c9a967b636afb
   zh: a9ce930a9766d5cb
@@ -54,11 +57,11 @@
   en: e4c7376d4f29dbd5
   zh: 6b7a9eaf69c9ea53
 /deepseek-ai-dsh-tool-subagent/model-experience/tool-schema/what-the-model-sees:
-  en: 12c872e4264bb6c0
-  zh: 20f870a78ebf8d29
+  en: cdaa88b47ba03e23
+  zh: 2b7429db53e0aea7
 /deepseek-ai-dsh-tool-subagent/model-experience/tool-schema/token-effect:
-  en: 02da2a5e0a75fd91
-  zh: fd2d8b11386fc83d
+  en: 0c6cf11d65ba83dc
+  zh: 6e2b2e64bf1f18f2
 /deepseek-ai-dsh-tool-subagent/model-experience/tool-schema/kv-cache-effect:
   en: 46f736c6c389052a
   zh: a7765541030e9104
@@ -78,8 +81,8 @@
   en: cf78b9dd5596495f
   zh: bd44560f8c2435e8
 /deepseek-ai-dsh-tool-subagent/model-experience/system-prompt/what-the-model-sees:
-  en: 5f6611a932063e58
-  zh: effededa44c716af
+  en: 64a1c2edb455950c
+  zh: 15d280ff2c918672
 /deepseek-ai-dsh-tool-subagent/model-experience/system-prompt/what-the-model-sees/tool-guidance-section:
   en: 82b3cd08b3961c98
   zh: bdc2a34bcea16cac
@@ -89,6 +92,21 @@
 /deepseek-ai-dsh-tool-subagent/model-experience/system-prompt/kv-cache-effect:
   en: eaee0378bf87c980
   zh: 2783a481ee349f1e
+/deepseek-ai-dsh-tool-subagent/model-experience/runtime-depth-context:
+  en: 1e58e87365d88e45
+  zh: 7648aa3b3865057f
+/deepseek-ai-dsh-tool-subagent/model-experience/runtime-depth-context/what-the-model-sees:
+  en: fde048c427103086
+  zh: 6614730cc00f02e4
+/deepseek-ai-dsh-tool-subagent/model-experience/runtime-depth-context/what-the-model-sees/depth-limit-notice:
+  en: 0ae8dbcee66d0cd6
+  zh: 5a69283739ae59e0
+/deepseek-ai-dsh-tool-subagent/model-experience/runtime-depth-context/token-effect:
+  en: dae9cd59b9649b5a
+  zh: 8bb35289ebaeaf7b
+/deepseek-ai-dsh-tool-subagent/model-experience/runtime-depth-context/kv-cache-effect:
+  en: 9e6e8bc993992908
+  zh: 4de1e9d85ab3bfca
 /deepseek-ai-dsh-tool-subagent/model-experience/start-result:
   en: 45854c8f4da73af7
   zh: 7a9803ca8c03c40f
@@ -114,8 +132,8 @@
   en: f5d5f97a153f7c70
   zh: 3d6bc05b9eadfbc2
 /deepseek-ai-dsh-tool-subagent/known-limitations-and-deferred-work:
-  en: 40e99fb684ccffc4
-  zh: 08c6820c7a5343e8
+  en: c17c91a188bb0d8c
+  zh: d77c1ffcf1eca737
 /deepseek-ai-dsh-tool-subagent/known-limitations-and-deferred-work/dev-note:
   en: e67f633dc6fe7773
   zh: 3bb0c20c93f16f98

package/README.md

@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-Use this package to give an agent a named tool that delegates work to a configured backend. Every call starts a managed activation and returns a child id; the runtime owns completion notices and cleanup. Local children support messages and restoration, while external backends execute one task and return their final answer through the completion notice. Supported backends can expose approved child LLM routes. Each instance can set child persona, tool access, and depth limits.
+Use this package to give an agent a named tool that delegates work to a configured backend. Every call starts a managed activation and returns a child id; the runtime owns completion notices and cleanup. Local children support messages and restoration, while external backends execute one task and return their final answer through the completion notice. Supported backends can expose approved child LLM routes. Each instance can select a child preset and depth limit.
 
 ## Table of Contents
 
@@ -48,8 +48,8 @@ Load the subagent service, an in-process or remote backend, and this tool; then
 | `toolName` | `subagent` | Model-facing tool name; distinct for every loaded instance |
 | `modelSelectionSettings` | `false` | Sample the Host's exact-route authorization preference for each top-level Session; a standing preset observes matching Sessions, while direct Agent setup passes its Session explicitly; requires provider `agentOptions` support |
 | `agentOptions` | — | Configured child `provider`, `model`, adapter-owned `reasoningEffort`, and positive `maxTokens` defaults; requires provider `agentOptions` support and overlays any provider-owned route defaults |
-| `persona` | — | Per-child persona; requires the provider's `persona` capability |
-| `toolFilter` | — | Per-child global-tool restriction; requires the `toolFilter` capability |
+| `agentPreset` | — | Default independent child preset id; requires in-process spawn |
+| `allowedAgentPresets` | — | Non-empty preset-id allowlist exposed as the model's optional `agent_preset` enum; must include `agentPreset` when both are set |
 | `maxDepth` | Host setting (`1`) | Absolute delegation-depth cap (`0` forbids delegation); `'provider-managed'` sends no cap to an out-of-process provider |
 
 The generated [configuration catalog](../../../docs/config-catalog.md#deepseek-aidsh-tool-subagent) is the exhaustive source for every accepted field and its JSDoc.
@@ -60,7 +60,16 @@ Every call returns `started subagent <childId>` after the runtime accepts the ch
 
 Every backend’s completion notice carries its final answer. Local Spawn and Fork children can also send messages, accept more work through `send_message` while active, or resume after settling. Codex, Claude Code, ACP, and DSH SDK backends do not accept follow-up messages.
 
-`maxDepth` caps recursion (`0` forbids delegation); omission reads the current Host `subagent.maxDepth` setting, initially `1`, at each delegation. A numeric depth requires a provider with the `depthLimit` capability; `'provider-managed'` leaves the budget to an out-of-process provider. `persona` and `toolFilter` configure every child when the provider supports them, and the tool stays visible at the cap — each attempted start checks the calling agent's current depth and rejects with an errored result.
+`maxDepth` caps recursion (`0` forbids delegation); omission reads the current Host `subagent.maxDepth` setting, initially `1`, at each delegation. A numeric depth requires a provider with the `depthLimit` capability; `'provider-managed'` leaves the budget to an out-of-process provider. The tool stays visible at the cap; each attempted start checks the calling agent's current depth and rejects with an errored result.
+
+<a id="selecting-a-child-preset"></a>
+### Selecting a child preset
+
+Set `agentPreset` to give every child an independent preset by default. Set `allowedAgentPresets` to let the model choose an id through `agent_preset`; without this allowlist, the model cannot override the configured choice. Only in-process spawn supports these options; fork and external backends reject them.
+
+The configured default and allowlist must name declared presets. A tool inside a preset checks these ids and reads their descriptions during Agent initialization; a Host-mounted tool performs this check when it loads. This check does not activate candidate presets. Activation failures reject the selected preset when the child is composed. Without either selection field, the tool does not require the preset service. An omitted model choice uses the configured `agentPreset`, or joins the parent's current preset revision when no default is configured. Any explicit id mounts the currently available revision, even when it matches the parent's id.
+
+Compose persona and tools in the [preset plugin list](../../preset/agent-preset-registry/README.md). Tool configuration containing `persona` or `toolFilter` fails at load with a migration error. Local children use the shared [preset restoration rules](../subagent/README.md#restoring-child-composition).
 
 ### Selecting a child LLM
 
@@ -80,7 +89,7 @@ This section explains how the tool mirrors provider lifecycle and settles runs;
 
 ### Design concept
 
-One instance is one provider plus one tool name. The plugin mirrors provider lifecycle: it registers the tool when the named provider appears and disposes it when the provider leaves, so sibling load order and HMR replacement cannot strand a dangling tool. Direct Agent setup passes its unpublished Session explicitly and awaits installation before publication. A settings-backed standing preset receives each matching Agent through `agent/created`, selects policy from its Session, and awaits installation through its Context; installation failure rejects creation. A numeric `maxDepth` or configured LLM selection the provider cannot enforce fails the mount instead of the first delegation. At most one instance in a tool scope may own model selection because `list_subagent_models` has a global name.
+One instance is one provider plus one tool name. The plugin mirrors provider lifecycle: it registers the tool when the named provider appears and disposes it when the provider leaves, so sibling load order and HMR replacement cannot strand a dangling tool. Direct Agent setup passes its unpublished Session explicitly and awaits installation before publication. A standing preset with model or preset selection receives each matching Agent through `agent/created`, validates preset references, selects any model policy from its Session, and awaits installation through its Context; installation failure rejects creation. A numeric `maxDepth` or configured LLM selection the provider cannot enforce fails the mount instead of the first delegation. At most one instance in a tool scope may own model selection because `list_subagent_models` has a global name.
 
 ### Activation ownership
 
@@ -99,6 +108,7 @@ The tool's description derives from `provider.inheritsParentContext`: a fresh ch
 | File | Role |
 |---|---|
 | [`src/index.ts`](src/index.ts) | Tool registration, provider lifecycle mirroring, activation requests |
+| [`src/preset-selection.ts`](src/preset-selection.ts) | Configured preset validation, model allowlist, and description guidance |
 | [`src/model-selection.ts`](src/model-selection.ts) | Request/config merge and live LLM route preflight |
 | [`src/model-selection-settings.ts`](src/model-selection-settings.ts) | Host-owned opt-in setting sampled for new Sessions |
 | [`src/model-selection-state.ts`](src/model-selection-state.ts) | Session event that records and inherits the sampled decision |
@@ -128,11 +138,11 @@ Read these pages when the package-level contract is not enough; they move from t
 
 #### What the model sees
 
-The generated default [`subagent` schema](../../../docs/tool-catalog.md#deepseek-aidsh-tool-subagent) appears under the configured tool name while its provider exists. An enabled Session policy adds `provider`, `model`, and `reasoning_effort` plus route guidance; the backend must support `agentOptions`. Context inheritance and continuation support determine the task and follow-up descriptions. A tool restriction removes both the schema and its `tool:<toolName>` guidance section.
+The generated default [`subagent` schema](../../../docs/tool-catalog.md#deepseek-aidsh-tool-subagent) appears under the configured tool name while its provider exists. An enabled Session policy adds `provider`, `model`, and `reasoning_effort` plus route guidance; the backend must support `agentOptions`. `allowedAgentPresets` adds the `agent_preset` enum and guidance from the presets' display descriptions. Context inheritance and continuation support determine the task and follow-up descriptions. A tool restriction removes both the schema and its `tool:<toolName>` guidance section.
 
 #### Token effect
 
-Fixed schema cost per parent request; model selection adds three parameters. Each tool instance adds one schema and one short system-prompt section.
+Fixed schema cost per parent request; LLM selection adds three parameters, while preset selection adds one enum parameter and preset descriptions. Each tool instance adds one schema and one short system-prompt section.
 
 #### KV Cache effect
 
@@ -156,7 +166,7 @@ The schema is prefix-stable across adapter registration and catalog changes. Eac
 
 #### What the model sees
 
-Visible delegation tools share one guidance paragraph, listing tools in name order and instructing the model to start independent delegations together and keep working while they run. Hidden or unavailable tools are omitted; no guidance appears when none are visible. With both `subagent` and `subagent_fork` visible, the text is:
+Visible delegation tools share one guidance paragraph, listing tools in name order and instructing the model to start independent delegations together and keep working while they run, and to end its turn instead of sleeping or polling when only waiting for their results remains. Hidden or unavailable tools are omitted; no guidance appears when none are visible. With both `subagent` and `subagent_fork` visible, the text is:
 
 ##### Tool-guidance section
 
@@ -172,6 +182,26 @@ At most one short delegation paragraph per parent request, listing the tool name
 
 Prefix-stable while the visible tool names are unchanged; adding or removing a visible tool changes the paragraph.
 
+### Runtime depth context
+
+#### What the model sees
+
+When the calling agent reaches or exceeds a visible tool's effective numeric depth cap, an optional runtime-context snapshot tells it to do the work directly. The cap is resolved again at each request, including after settings changes or session resume. Hidden tools and `provider-managed` limits contribute no depth text. For a child at depth one with a cap of one:
+
+##### Depth-limit notice
+
+```markdown
+Delegation depth for `subagent`: current 1, maximum 1, remaining levels 0. Do not call `subagent` at this depth; carry out the work directly.
+```
+
+#### Token effect
+
+One short contribution per capped tool joins the user-role runtime-context snapshot. Unchanged snapshots are not appended again; agents below the cap receive no additional text. `includeRuntimeContext: false` suppresses this notice without changing runtime depth enforcement.
+
+#### KV Cache effect
+
+Depth changes do not alter the system prompt or tool schemas. Updated runtime context appends after existing history; the provider still enforces the cap if the model attempts delegation.
+
 ### Start result
 
 #### What the model sees
@@ -209,7 +239,7 @@ These limits define what this tool does not return or enforce; they are current
 
 - **This tool does not wait for results** — use the completion notice or child messages. Programmatic result waiting belongs to the subagent service.
 - **Shipped fork tools cannot select a child LLM route** — they inherit the parent's provider and model to keep the copied conversation prefix eligible for KV Cache reuse. Re-enable selection only when route changes preserve reuse or expose a bounded recomputation cost.
-- **Non-routing child policy is fixed per instance** — another persona, tool filter, or depth cap requires another distinctly named tool. LLM selection requires an enabled per-Session preference and a provider that advertises `agentOptions`; both in-process providers and DSH SDK advertise it, while ACP, Codex, and Claude Code reject it rather than ignore it.
+- **Depth limits are fixed per instance** — independently named tools can set different caps. LLM selection requires an enabled per-Session preference and a provider that advertises `agentOptions`; both in-process providers and DSH SDK advertise it, while ACP, Codex, and Claude Code reject it rather than ignore it.
 
 <a id="dev-note"></a>
 ### Dev Note

package/README.zh.md

@@ -9,7 +9,7 @@ kind: "package-reference"
 
 ## 概述
 
-使用本包可为 agent 提供具名工具，把工作委派给配置的后端。每次调用都会启动受管理的 activation 并返回子任务 id；运行时负责完成通知与清理。本地子任务支持消息和恢复，外部后端执行一次任务，并通过完成通知返回最终回答。受支持的后端可以公开获准的子级 LLM 路由。每个实例均可设置子 agent 的 persona、工具权限与深度限制。
+使用本包可为 agent 提供具名工具，把工作委派给配置的后端。每次调用都会启动受管理的 activation 并返回子任务 id；运行时负责完成通知与清理。本地子任务支持消息和恢复，外部后端执行一次任务，并通过完成通知返回最终回答。受支持的后端可以公开获准的子级 LLM 路由。每个实例可选择子级 preset 和深度限制。
 
 ## 目录
 
@@ -48,8 +48,8 @@ kind: "package-reference"
 | `toolName` | `subagent` | 面向模型的工具名称；每个已加载实例必须不同 |
 | `modelSelectionSettings` | `false` | 为每个顶层 Session 读取宿主的精确路由授权偏好；常驻 preset 观察匹配 Session，直接 Agent setup 则显式传入其 Session；要求提供方支持 `agentOptions` |
 | `agentOptions` | — | 配置的子级 `provider`、`model`、适配器所有的 `reasoningEffort` 与正整数 `maxTokens` 默认值；要求提供方支持 `agentOptions`，并会覆盖提供方持有的路由默认值 |
-| `persona` | — | 每个子 agent 独立的 persona；要求提供方具备 `persona` 能力 |
-| `toolFilter` | — | 每个子 agent 独立的全局工具限制；要求提供方具备 `toolFilter` 能力 |
+| `agentPreset` | — | 独立子级 preset 的默认 id；要求进程内 spawn |
+| `allowedAgentPresets` | — | 非空 preset-id 白名单，作为模型可选的 `agent_preset` 枚举；与 `agentPreset` 同时配置时必须包含后者 |
 | `maxDepth` | Host 设置（`1`） | 绝对委派深度上限（`0` 禁止委派）；`'provider-managed'` 不向进程外提供方发送上限 |
 
 生成的[配置目录](../../../docs/config-catalog.zh.md#deepseek-aidsh-tool-subagent)是每个受支持字段及其 JSDoc 的穷尽式真源。
@@ -60,7 +60,16 @@ kind: "package-reference"
 
 所有后端的完成通知都会附带最终回答。本地 Spawn 和 Fork 子任务还可以发送消息，在活跃期间通过 `send_message` 接受更多工作，或在结束后恢复。Codex、Claude Code、ACP 与 DSH SDK 后端不接受后续消息。
 
-`maxDepth` 限制递归深度（`0` 禁止委派）；省略时，每次委派读取 Host 当前的 `subagent.maxDepth` 设置，初始值为 `1`。数值深度要求提供方具备 `depthLimit` 能力；`'provider-managed'` 把预算留给进程外提供方。当提供方支持时，`persona` 与 `toolFilter` 会配置每个子 agent；工具在达到上限时仍然可见——每次尝试启动都会检查调用 agent 的当前深度，被拒绝时返回出错的工具结果。
+`maxDepth` 限制递归深度（`0` 禁止委派）；省略时，每次委派读取 Host 当前的 `subagent.maxDepth` 设置，初始值为 `1`。数值深度要求提供方具备 `depthLimit` 能力；`'provider-managed'` 把预算留给进程外提供方。工具在达到上限时仍然可见；每次尝试启动都会检查调用 agent 的当前深度，被拒绝时返回出错的工具结果。
+
+<a id="selecting-a-child-preset"></a>
+### 选择子级 preset
+
+设置 `agentPreset`，为每个子级指定默认的独立 preset。设置 `allowedAgentPresets`，允许模型通过 `agent_preset` 选择 id；没有此白名单时，模型不能覆盖配置中的选择。只有进程内 spawn 支持这些选项；fork 与外部后端会拒绝它们。
+
+配置的默认值与白名单必须引用已声明 preset。preset 内的工具在 Agent 初始化期间检查这些 id 并读取描述；直接挂载在 Host 的工具在加载时检查。此检查不激活候选 preset。创建子级时，选中 preset 的激活失败会拒绝组装。两个选择字段都省略时，工具不要求 preset 服务。模型省略选择时使用配置的 `agentPreset`；若也没有默认值，则加入父方当前 preset 代际。任何显式 id 都挂载当前可用代际，即使与父方 id 相同。
+
+在 [preset 插件列表](../../preset/agent-preset-registry/README.zh.md)中配置 persona 与工具。包含 `persona` 或 `toolFilter` 的工具配置在加载时会报迁移错误。本地子级采用共享的 [preset 恢复规则](../subagent/README.zh.md#restoring-child-composition)。
 
 ### 选择子级 LLM
 
@@ -80,7 +89,7 @@ kind: "package-reference"
 
 ### 设计理念
 
-一个实例就是一个提供方加一个工具名称。插件镜像提供方生命周期：具名提供方出现时注册工具，提供方离开时释放工具，因此同级加载顺序与 HMR 替换不会让工具悬空。直接 Agent setup 显式传入尚未发布的 Session，并在发布前等待安装完成。由设置控制的常驻 preset 通过 `agent/created` 接收每个匹配 Agent，从其 Session 选择策略，并等待通过其 Context 发起的安装；安装失败会拒绝创建。提供方无法执行的数值型 `maxDepth` 或已配置 LLM 选择会在挂载时失败，而不是在首次委派时失败。每个工具作用域内最多一个实例可以拥有模型选择，因为 `list_subagent_models` 使用全局名称。
+一个实例就是一个提供方加一个工具名称。插件镜像提供方生命周期：具名提供方出现时注册工具，提供方离开时释放工具，因此同级加载顺序与 HMR 替换不会让工具悬空。直接 Agent setup 显式传入尚未发布的 Session，并在发布前等待安装完成。启用模型选择或 preset 选择的常驻 preset 通过 `agent/created` 接收每个匹配 Agent，校验 preset 引用，从其 Session 选择适用的模型策略，并等待通过其 Context 发起的安装；安装失败会拒绝创建。提供方无法执行的数值型 `maxDepth` 或已配置 LLM 选择会在挂载时失败，而不是在首次委派时失败。每个工具作用域内最多一个实例可以拥有模型选择，因为 `list_subagent_models` 使用全局名称。
 
 ### Activation 所有权
 
@@ -99,6 +108,7 @@ kind: "package-reference"
 | 文件 | 职责 |
 |---|---|
 | [`src/index.ts`](src/index.ts) | 工具注册、提供方生命周期镜像、activation 请求 |
+| [`src/preset-selection.ts`](src/preset-selection.ts) | 配置的 preset 校验、模型白名单与描述引导 |
 | [`src/model-selection.ts`](src/model-selection.ts) | 请求／配置合并与实时 LLM 路由预检 |
 | [`src/model-selection-settings.ts`](src/model-selection-settings.ts) | 为新 Session 读取的宿主所有 opt-in 设置 |
 | [`src/model-selection-state.ts`](src/model-selection-state.ts) | 记录并继承已读取决定的 Session 事件 |
@@ -128,11 +138,11 @@ kind: "package-reference"
 
 #### 模型看到什么
 
-提供方存在时，以配置的工具名称公开生成的默认 [`subagent` schema](../../../docs/tool-catalog.zh.md#deepseek-aidsh-tool-subagent)。启用的 Session 策略会添加 `provider`、`model`、`reasoning_effort` 和路由指引；后端必须支持 `agentOptions`。上下文继承和继续执行能力决定任务与后续消息的描述。工具限制会同时移除 schema 及其 `tool:<toolName>` 指引 section。
+提供方存在时，以配置的工具名称公开生成的默认 [`subagent` schema](../../../docs/tool-catalog.zh.md#deepseek-aidsh-tool-subagent)。启用的 Session 策略会添加 `provider`、`model`、`reasoning_effort` 和路由指引；后端必须支持 `agentOptions`。`allowedAgentPresets` 增加 `agent_preset` 枚举和来自 preset 显示描述的引导。上下文继承和继续执行能力决定任务与后续消息的描述。工具限制会同时移除 schema 及其 `tool:<toolName>` 指引 section。
 
 #### Token 影响
 
-每个父级请求支付固定的 schema 成本；模型选择增加三个参数。每个工具实例增加一个 schema 和一个简短的系统提示词 section。
+每个父级请求支付固定的 schema 成本；LLM 选择增加三个参数，preset 选择增加一个枚举参数和 preset 描述。每个工具实例增加一个 schema 和一个简短的系统提示词 section。
 
 #### KV Cache 影响
 
@@ -156,7 +166,7 @@ Session 携带策略的 settings 控制实例会公开子级 LLM 选择字段与
 
 #### 模型看到什么
 
-可见的委派工具共享一段指导，列出按名称排序的工具，指示模型一起启动相互独立的委派，并在它们运行时继续工作。隐藏或不可用的工具不列入其中；没有可见工具时，不输出指导。`subagent` 和 `subagent_fork` 都可见时，文本为：
+可见的委派工具共享一段指导，列出按名称排序的工具，指示模型一起启动相互独立的委派，并在它们运行时继续工作；当只剩等待它们的结果时，结束本轮，而不是休眠或轮询。隐藏或不可用的工具不列入其中；没有可见工具时，不输出指导。`subagent` 和 `subagent_fork` 都可见时，文本为：
 
 ##### 工具指导 section
 
@@ -172,6 +182,26 @@ Start independent delegations with `subagent` or `subagent_fork` together in one
 
 可见工具名不变时，前缀保持稳定；增加或移除可见工具会更改这段指导。
 
+### 运行时深度上下文
+
+#### 模型看到什么
+
+当调用方 agent 达到或超过某个可见工具实际生效的数值深度上限时，可选的运行时上下文快照会提示它直接完成工作。每次请求都会重新解析上限，包括 settings 变更或会话恢复之后。隐藏的工具和 `provider-managed` 上限不贡献深度文本。深度和上限都为一时，子 agent 看到：
+
+##### 深度上限提示
+
+```markdown
+Delegation depth for `subagent`: current 1, maximum 1, remaining levels 0. Do not call `subagent` at this depth; carry out the work directly.
+```
+
+#### Token 影响
+
+每个达到上限的工具向用户角色的运行时上下文快照贡献一小段文本。未变化的快照不会重复追加；未达到上限的 agent 不收到额外文本。`includeRuntimeContext: false` 会抑制这条提示，但不改变运行时对深度上限的强制执行。
+
+#### KV Cache 影响
+
+深度变化不改变系统提示词或工具 schema。更新的运行时上下文追加在已有历史之后；模型尝试委派时，提供方仍会强制执行上限。
+
 ### 启动结果
 
 #### 模型看到什么
@@ -209,7 +239,7 @@ Start independent delegations with `subagent` or `subagent_fork` together in one
 
 - **本工具不等待结果**——使用完成通知或子任务消息。程序化结果等待由 subagent 服务提供。
 - **随附 fork 工具不能选择子级 LLM 路由**——它们继承父级提供方与模型，使复制的对话前缀仍有资格复用 KV Cache。仅当路由变更能保留复用或公开有界重算成本时，才重新启用选择。
-- **非路由子 agent 策略按实例固定**——另一个 persona、工具过滤器或深度上限需要另一个名称不同的工具。LLM 选择要求启用逐 Session 偏好，且提供方必须声明 `agentOptions`；两个进程内提供方和 DSH SDK 会声明该能力，而 ACP、Codex 与 Claude Code 会拒绝它，而不是忽略它。
+- **深度上限按实例固定**——不同名称的工具可设置不同上限。LLM 选择要求启用逐 Session 偏好，且提供方必须声明 `agentOptions`；两个进程内提供方和 DSH SDK 会声明该能力，而 ACP、Codex 与 Claude Code 会拒绝它，而不是忽略它。
 
 <a id="dev-note"></a>
 ### 开发备注

package/lib/index.js

@@ -2,7 +2,7 @@ import z from "@deepseek-ai/schemastery";
 import { scopeChainOf, scopeOf } from "@qlzt/dsh-scope";
 import { defineTool } from "@qlzt/dsh-tools";
 import { SessionSeq } from "@qlzt/dsh-session";
-import { assertSubagentMaxDepth, parentAgentOptionsForDelegation } from "@qlzt/dsh-subagent";
+import { assertSubagentMaxDepth, delegationDepthOf, parentAgentOptionsForDelegation } from "@qlzt/dsh-subagent";
 import { ReasoningEffortId } from "@qlzt/dsh-llm";
 import { z as z$1 } from "zod";
 z.object({
@@ -195,6 +195,66 @@ function registerListSubagentModels(ctx, policy) {
 		}
 	}));
 }
+//#endregion
+//#region lib/types/preset-selection.js
+/** Validates configured references and resolves model input against the allowlist. */
+var SubagentPresetSelection = class {
+	config;
+	descriptions = [];
+	constructor(config) {
+		this.config = config;
+		const { agentPreset, allowedAgentPresets } = config;
+		if (allowedAgentPresets === void 0) return;
+		if (new Set(allowedAgentPresets).size !== allowedAgentPresets.length) throw new Error("tool-subagent: allowedAgentPresets contains duplicate preset ids");
+		if (agentPreset !== void 0 && !allowedAgentPresets.includes(agentPreset)) throw new Error("tool-subagent: agentPreset must be included in allowedAgentPresets");
+	}
+	/** Whether this tool requires the preset service and an independently composing provider. */
+	get configured() {
+		return this.config.agentPreset !== void 0 || this.config.allowedAgentPresets !== void 0;
+	}
+	/** Preset ids advertised in the model parameter. */
+	get choices() {
+		return this.config.allowedAgentPresets;
+	}
+	/** Model-visible selection guidance and configured preset descriptions. */
+	get description() {
+		return `Agent preset for this child. ${this.config.agentPreset === void 0 ? "Omit to inherit the parent agent's current preset." : `Omit to use ${this.config.agentPreset}.`}` + (this.descriptions.length === 0 ? "" : ` Available presets: ${this.descriptions.join("; ")}`);
+	}
+	/**
+	* Read configured preset declarations before publishing the tool; mounting validates their activation.
+	* @param ctx - Tool composition containing the preset service.
+	*/
+	async validate(ctx) {
+		const presets = ctx.get("agentPresets");
+		if (presets === void 0) throw new Error("tool-subagent: agent preset selection requires the agent-presets service");
+		const ids = new Set([...this.config.agentPreset === void 0 ? [] : [this.config.agentPreset], ...this.config.allowedAgentPresets ?? []]);
+		const descriptions = [];
+		for (const id of ids) {
+			const preset = await presets.readDocument(id);
+			if (this.choices?.includes(id) && preset.description !== void 0) descriptions.push(`${id}: ${preset.description}`);
+		}
+		this.descriptions = descriptions;
+	}
+	/**
+	* Reject independent selection for providers that inherit conversation history or lack support.
+	* @param provider - Currently registered delegation provider.
+	*/
+	assertProvider(provider) {
+		if (this.configured && (!provider.capabilities.agentPreset || provider.inheritsParentContext)) throw new Error(`tool-subagent: provider "${provider.name}" does not support independent agent preset selection`);
+	}
+	/**
+	* Validate model input and apply the deployment default.
+	* @param request - Model-supplied tool arguments.
+	* @returns Selected preset id, or omission to inherit the parent.
+	*/
+	resolve(request) {
+		const id = request.agent_preset;
+		if (id === void 0) return this.config.agentPreset;
+		if (this.choices === void 0) throw new Error("agent_preset selection is disabled for this tool instance");
+		if (typeof id !== "string" || !this.choices.includes(id)) throw new Error(`agent_preset must be one of: ${this.choices.join(", ")}`);
+		return id;
+	}
+};
 /** Host-only projection of the durable model-selection policy. */
 const subagentModelSelectionProjectionDefinition = {
 	key: "subagentModelSelectionPolicy",
@@ -258,11 +318,8 @@ const Config = z.object({
 		reasoningEffort: z.string().min(1),
 		maxTokens: z.number().step(1).min(1).max(Number.MAX_SAFE_INTEGER)
 	}).default(void 0),
-	persona: z.string(),
-	toolFilter: z.object({
-		allow: z.array(z.string()).default(void 0),
-		deny: z.array(z.string()).default(void 0)
-	}).default(void 0),
+	agentPreset: z.string().min(1),
+	allowedAgentPresets: z.array(z.string().min(1)).min(1).default(void 0),
 	maxDepth: z.union([z.natural().max(Number.MAX_SAFE_INTEGER), z.const("provider-managed")])
 });
 /**
@@ -289,17 +346,21 @@ function providerWording(inheritsConversation) {
 }
 /**
 * Install one delegation-tool composition.
+* Standing preset choices are validated for each Agent before its tool is installed.
 * @param ctx - Context that owns the registrations.
 * @param config - delegation-tool configuration.
 * @param session - unpublished Session supplied by a direct Agent setup; omit for a standing composition.
 */
-function apply(ctx, config, session) {
+async function apply(ctx, config, session) {
+	for (const field of ["persona", "toolFilter"]) if (Object.hasOwn(config, field)) throw new Error(`tool-subagent: ${field} is no longer supported; configure persona and tool plugins in an Agent Preset and select it with agentPreset (spawn only)`);
+	const presets = new SubagentPresetSelection(config);
+	if (presets.configured && ctx.get("agentPresets") === void 0) throw new Error("tool-subagent: agent preset selection requires the agent-presets service");
 	if (config.maxDepth !== "provider-managed") assertSubagentMaxDepth(config.maxDepth);
-	if (config.toolFilter !== void 0 && config.toolFilter.allow === void 0 && config.toolFilter.deny === void 0) throw new Error("tool-subagent: `toolFilter` is configured but names neither `allow` nor `deny` — remove the key or fill the filter");
 	const toolName = config.toolName ?? "subagent";
 	const modelSelectionCapable = config.modelSelectionSettings === true;
 	ctx.sessionProjections.register(subagentModelSelectionProjectionDefinition);
 	const assertSubagentProviderConfiguration = (subagentProvider) => {
+		presets.assertProvider(subagentProvider);
 		if (ctx.subagents.resolveMaxDepth(config.maxDepth) !== void 0 && !subagentProvider.capabilities.depthLimit) throw new Error(`tool-subagent: provider "${subagentProvider.name}" cannot enforce maxDepth (no depthLimit capability) — set maxDepth: 'provider-managed' to leave the recursion budget to the provider`);
 		if (config.agentOptions !== void 0 && !subagentProvider.capabilities.agentOptions) throw new Error(`tool-subagent: provider "${subagentProvider.name}" does not support child agentOptions`);
 		if (modelSelectionCapable && !subagentProvider.capabilities.agentOptions) throw new Error(`tool-subagent: provider "${subagentProvider.name}" does not support child model selection`);
@@ -336,6 +397,11 @@ function apply(ctx, config, session) {
 						required: true,
 						description: wording.promptDescription
 					},
+					...presets.choices === void 0 ? {} : { agent_preset: {
+						type: "string",
+						enum: [...presets.choices],
+						description: presets.description
+					} },
 					...modelSelectionEnabled ? {
 						provider: {
 							type: "string",
@@ -376,6 +442,7 @@ function apply(ctx, config, session) {
 				async execute(args, exec) {
 					const parent = exec.agent;
 					if (!parent) throw new Error("subagent tool requires a calling agent (exec.agent was undefined)");
+					const agentPreset = presets.resolve(args);
 					const modelRequest = args;
 					const parentOptions = parentAgentOptionsForDelegation(parent);
 					const requiresRoutePreflight = hasDelegationModelRequest(modelRequest) || hasConfiguredLlmSelection(config.agentOptions);
@@ -399,9 +466,8 @@ function apply(ctx, config, session) {
 							text: args.prompt
 						}],
 						parent,
+						...agentPreset === void 0 ? {} : { agentPreset },
 						...requestedChildAgentOptions !== void 0 ? { agentOptions: requestedChildAgentOptions } : {},
-						...config.persona !== void 0 ? { persona: config.persona } : {},
-						...config.toolFilter !== void 0 ? { toolFilter: config.toolFilter } : {},
 						...maxDepth !== void 0 ? { maxDepth } : {}
 					};
 					return {
@@ -418,6 +484,7 @@ function apply(ctx, config, session) {
 			});
 			mounted = {
 				subagentProvider,
+				definition,
 				disposeTool: runtimeCtx.effect(() => {
 					const unregister = runtimeCtx.tools.register(definition);
 					delegationTools.add(definition);
@@ -449,14 +516,29 @@ function apply(ctx, config, session) {
 				return `Start independent delegations with ${visible.map((name) => `\`${name}\``).join(" or ")} together in one assistant message and continue useful work while they run.`;
 			}
 		});
+		runtimeCtx.systemPrompt.context({
+			name: `tool:${toolName}:depth`,
+			order: runtimeCtx.systemPrompt.getContextOrder("SUBAGENT_DELEGATION"),
+			text: (context) => {
+				if (context.agent === void 0 || mounted === void 0 || runtimeCtx.tools.get(toolName, context.scope) !== mounted.definition) return "";
+				const maxDepth = runtimeCtx.subagents.resolveMaxDepth(config.maxDepth);
+				if (maxDepth === void 0) return "";
+				const depth = delegationDepthOf(context.agent);
+				if (depth < maxDepth) return "";
+				return `Delegation depth for \`${toolName}\`: current ${depth}, maximum ${maxDepth}, remaining levels 0. Do not call \`${toolName}\` at this depth; carry out the work directly.`;
+			}
+		});
 	};
-	if (config.modelSelectionSettings !== true) {
+	const compositionScope = scopeOf(ctx);
+	if (presets.configured && (session !== void 0 || compositionScope === void 0)) await presets.validate(ctx);
+	if (!modelSelectionCapable && (!presets.configured || session !== void 0 || compositionScope === void 0)) {
 		install(ctx, void 0);
 		return;
 	}
 	const settings = ctx.get("subagentModelSelection");
-	if (settings === void 0) throw new Error("tool-subagent: `modelSelectionSettings` requires @qlzt/dsh-tool-subagent/model-selection-settings in the Host scope");
+	if (modelSelectionCapable && settings === void 0) throw new Error("tool-subagent: `modelSelectionSettings` requires @qlzt/dsh-tool-subagent/model-selection-settings in the Host scope");
 	const selectForSession = (target) => {
+		if (!modelSelectionCapable || settings === void 0) return void 0;
 		const freshSession = target.firstLiveSeq === 0 && target.eventAt(SessionSeq(0))?.type !== "session/end-seed";
 		let allowedModels = subagentModelSelectionPolicy(ctx.sessionProjections, target);
 		if (allowedModels === void 0) {
@@ -478,7 +560,6 @@ function apply(ctx, config, session) {
 		install(ctx, selectForSession(session));
 		return;
 	}
-	const compositionScope = scopeOf(ctx);
 	if (compositionScope === void 0) throw new Error("tool-subagent: standing `modelSelectionSettings` requires a scoped preset Context");
 	const agents = ctx.get("agents");
 	/* v8 ignore next -- shipped preset compositions always include the Agent registry. */
@@ -498,7 +579,8 @@ function apply(ctx, config, session) {
 				"tools",
 				"subagents",
 				"systemPrompt"
-			], (runtimeCtx) => {
+			], async (runtimeCtx) => {
+				if (presets.configured) await presets.validate(ctx);
 				install(runtimeCtx, policy);
 			});
 		} finally {

package/lib/types/index.d.ts

@@ -9,10 +9,11 @@ import type { Context } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
 import type { AgentOptions } from '@qlzt/dsh-agent';
 import type { Session } from '@qlzt/dsh-session';
+import { type PresetSelectionConfig } from './preset-selection.ts';
 export declare const name = "tool-subagent";
 export declare const inject: string[];
 /** Config: which registered provider this tool delegates to, plus child defaults. */
-export interface Config {
+export interface Config extends PresetSelectionConfig {
     /** The `ctx.subagents` provider name to start runs on (e.g. `spawn`, `acp`). */
     provider: string;
     /**
@@ -29,22 +30,6 @@ export interface Config {
      * Agent options applied to every child; omitted fields use child-loop defaults.
      */
     agentOptions?: AgentOptions;
-    /**
-     * Per-child persona that shadows `deployment:persona-prefix`. Requires the
-     * provider's `persona` capability; omission preserves the deployment persona.
-     */
-    persona?: string;
-    /**
-     * Tool filter applied to every child. Filtered tools disappear from its
-     * prompt and reject execution. Requires the provider's `toolFilter`
-     * capability; unknown names fail startup.
-     */
-    toolFilter?: {
-        /** Global tool names the child keeps; everything else is removed. */
-        allow?: string[];
-        /** Global tool names removed from the child. */
-        deny?: string[];
-    };
     /**
      * Maximum child depth: a non-negative safe integer (`0` forbids delegation),
      * or `'provider-managed'` to send no cap. A numeric cap
@@ -60,9 +45,10 @@ export interface Config {
 export declare const Config: z<Config>;
 /**
  * Install one delegation-tool composition.
+ * Standing preset choices are validated for each Agent before its tool is installed.
  * @param ctx - Context that owns the registrations.
  * @param config - delegation-tool configuration.
  * @param session - unpublished Session supplied by a direct Agent setup; omit for a standing composition.
  */
-export declare function apply(ctx: Context, config: Config, session?: Session): void;
+export declare function apply(ctx: Context, config: Config, session?: Session): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/lib/types/preset-selection.d.ts

@@ -0,0 +1,43 @@
+/** Deployment-owned preset choices for one delegation tool. */
+import type { Context } from '@deepseek-ai/cordis';
+import type { SubagentProvider } from '@qlzt/dsh-subagent';
+/** Optional default and model-selectable preset ids for a spawn tool. */
+export interface PresetSelectionConfig {
+    /** Default independent preset; omission inherits the parent when the model makes no selection. */
+    agentPreset?: string;
+    /** Non-empty allowlist exposing agent_preset to the model; omission disables model selection. */
+    allowedAgentPresets?: string[] | undefined;
+}
+/** Untrusted preset selection from model/tool JSON. */
+export interface PresetSelectionRequest {
+    readonly agent_preset?: unknown;
+}
+/** Validates configured references and resolves model input against the allowlist. */
+export declare class SubagentPresetSelection {
+    private readonly config;
+    private descriptions;
+    constructor(config: PresetSelectionConfig);
+    /** Whether this tool requires the preset service and an independently composing provider. */
+    get configured(): boolean;
+    /** Preset ids advertised in the model parameter. */
+    get choices(): readonly string[] | undefined;
+    /** Model-visible selection guidance and configured preset descriptions. */
+    get description(): string;
+    /**
+     * Read configured preset declarations before publishing the tool; mounting validates their activation.
+     * @param ctx - Tool composition containing the preset service.
+     */
+    validate(ctx: Context): Promise<void>;
+    /**
+     * Reject independent selection for providers that inherit conversation history or lack support.
+     * @param provider - Currently registered delegation provider.
+     */
+    assertProvider(provider: SubagentProvider): void;
+    /**
+     * Validate model input and apply the deployment default.
+     * @param request - Model-supplied tool arguments.
+     * @returns Selected preset id, or omission to inherit the parent.
+     */
+    resolve(request: PresetSelectionRequest): string | undefined;
+}
+//# sourceMappingURL=preset-selection.d.ts.map

package/locale/en.json

@@ -0,0 +1,5 @@
+{
+  "meta": {
+    "title": "tool-subagent"
+  }
+}

package/locale/model-selection-settings/en.json

@@ -0,0 +1,5 @@
+{
+  "meta": {
+    "title": "tool-subagent/model-selection-settings"
+  }
+}

package/locale/model-selection-settings/zh.json

@@ -0,0 +1,5 @@
+{
+  "meta": {
+    "title": "子智能体模型选择设置"
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "子智能体委派工具",
+    "description": "让 AI 将任务交给子智能体，并获取运行结果。"
+  }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@qlzt/dsh-tool-subagent",
   "description": "Model-facing subagent delegation tool over the ctx.subagents seam",
-  "version": "0.2.1-alpha.3",
+  "version": "0.2.1-rc.2",
   "publishConfig": {
     "access": "public"
   },
@@ -23,43 +23,54 @@
       "default": "./lib/model-selection-settings.js"
     },
     "./src/*": "./src/*",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json",
+    "./model-selection-settings/locale/*.json": "./locale/model-selection-settings/*.json"
   },
   "files": [
+    "locale/*.json",
+    "locale/model-selection-settings/*.json",
     "lib/index.js",
     "lib/model-selection-settings.js",
     "lib/types/**/*.d.ts"
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@qlzt/dsh-agent": "0.2.1-alpha.3",
-    "@qlzt/dsh-llm": "0.2.1-alpha.3",
-    "@qlzt/dsh-session": "0.2.1-alpha.3",
-    "@qlzt/dsh-session-projection": "0.2.1-alpha.3",
-    "@qlzt/dsh-scope": "0.2.1-alpha.3",
-    "@qlzt/dsh-subagent": "0.2.1-alpha.3",
-    "@qlzt/dsh-system-prompt": "0.2.1-alpha.3",
-    "@qlzt/dsh-tools": "0.2.1-alpha.3",
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1"
+    "@qlzt/dsh-agent": "0.2.1-rc.2",
+    "@qlzt/dsh-agent-preset-registry": "0.2.1-rc.2",
+    "@qlzt/dsh-llm": "0.2.1-rc.2",
+    "@qlzt/dsh-session": "0.2.1-rc.2",
+    "@qlzt/dsh-session-projection": "0.2.1-rc.2",
+    "@qlzt/dsh-scope": "0.2.1-rc.2",
+    "@qlzt/dsh-subagent": "0.2.1-rc.2",
+    "@qlzt/dsh-system-prompt": "0.2.1-rc.2",
+    "@qlzt/dsh-tools": "0.2.1-rc.2",
+    "@deepseek-ai/cordis": "~4.0.5"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-agent-preset-registry": {
+      "optional": true
+    }
   },
   "dependencies": {
-    "@deepseek-ai/schemastery": "~3.18.5-alpha.1",
-    "zod": "^4.4.3"
+    "@deepseek-ai/schemastery": "~3.18.5",
+    "zod": "4.4.3"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-llm": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-scope": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session-persistence": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-subagent": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-tools": "0.2.1-alpha.3",
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.3"
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6",
+    "@deepseek-ai/dsh-agent": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-scope": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session-persistence": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.1-rc.2",
+    "@deepseek-ai/cordis": "~4.0.5",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-rc.2"
   },
   "dsh": {}
 }