@ran-sh/dsh-crew 2.2.16 → 2.2.18

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-crew",
-  "version": "2.2.16",
+  "version": "2.2.18",
   "description": "Dispatch subtasks to DeepSeek Harness (DSH) agents as native subagents with live progress",
   "author": {
     "name": "ZSeven-W"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ran-sh/dsh-crew",
-  "version": "2.2.16",
+  "version": "2.2.18",
   "type": "module",
   "main": "./src/hub/entry.mjs",
   "bin": {
@@ -49,6 +49,7 @@
     "@deepseek-ai/dsh": "^0.1.0 || ^0.2.0-rc.1",
     "@deepseek-ai/dsh-agent": "^0.1.0 || ^0.2.0-rc.1",
     "@deepseek-ai/dsh-agent-loop": "^0.1.0 || ^0.2.0-rc.1",
+    "@deepseek-ai/dsh-agent-preset-registry": "^0.1.0 || ^0.2.0-rc.1",
     "@deepseek-ai/dsh-bash-local": "^0.1.0 || ^0.2.0-rc.1",
     "@deepseek-ai/dsh-client-locale": "^0.1.0 || ^0.2.0-rc.1",
     "@deepseek-ai/dsh-client-ui-renderer": "^0.1.0 || ^0.2.0-rc.1",
@@ -82,6 +83,9 @@
     "@deepseek-ai/dsh-agent-loop": {
       "optional": true
     },
+    "@deepseek-ai/dsh-agent-preset-registry": {
+      "optional": true
+    },
     "@deepseek-ai/dsh-bash-local": {
       "optional": true
     },
@@ -150,30 +154,30 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/dsh": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-agent-loop": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-agent-presets": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-bash-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-locale": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-compaction-basic": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-fs-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-fs-observation-policy": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm-deepseek": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sdk-client": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sdk-jsonrpc-server": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sdk-minimal": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-token-meter": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-fs": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-todo": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-bash-local": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-compaction-basic": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs-local": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs-observation-policy": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sdk-client": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sdk-jsonrpc-server": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sdk-minimal": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-token-meter": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tool-fs": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tool-todo": "0.2.0-rc.2",
     "@types/react": "^18.3.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",

package/src/dsh-cli-runtime.mjs

@@ -198,6 +198,23 @@ export function runResolvedDsh(cli, args = [], {
   };
 }
 
+/**
+ * Environment for a package-manager child that installs Crew's own runtime.
+ *
+ * `--prefix`/`--dir` already pin the destination and scripts are disabled, so the
+ * child cannot be redirected by a variable — but it must not be *told* about the
+ * official Harness home either. Crew's installer is routinely run from inside a
+ * DSH session, whose ambient `DSH_HOME` is `~/.dsh`, and the contract these two
+ * installers carry is "installs only under the Crew home". Dropping the variable
+ * keeps that true by construction instead of by caller discipline, which is what
+ * the unit contract asserts and what an operator shell can silently break.
+ */
+function packageManagerEnv(env) {
+  const child = { ...env };
+  delete child.DSH_HOME;
+  return child;
+}
+
 /**
  * Install a reusable DSH CLI into Crew-owned state. This is the only helper
  * that may invoke a package manager, and callers must explicitly opt into it.
@@ -266,11 +283,12 @@ export function ensureCrewDshRuntime({
     ? ['add', '--dir', runtimeRoot, '--ignore-scripts', packageSpec]
     : ['install', '--prefix', runtimeRoot, '--no-package-lock', '--ignore-scripts', '--omit=dev', packageSpec];
   const invocation = buildDshInvocation(packageManager, packageArgs, { platform, comspec });
+  const installEnv = packageManagerEnv(env);
   const runInstall = () => runner(invocation.command, invocation.args, {
     encoding: 'utf8',
     stdio: ['ignore', 'pipe', 'pipe'],
     shell: invocation.shell,
-    env: { ...env },
+    env: installEnv,
   });
   const result = runInstall();
   const cli = resolveDshCli({ home, env, platform, exists, findCommand, includeCompatibility: false, read });
@@ -457,11 +475,12 @@ export function installDshInto({
     ? ['add', '--dir', root, '--ignore-scripts', packageSpec]
     : ['install', '--prefix', root, '--no-package-lock', '--ignore-scripts', '--omit=dev', packageSpec];
   const invocation = buildDshInvocation(packageManager, packageArgs, { platform, comspec });
+  const installEnv = packageManagerEnv(env);
   const runInstall = () => runner(invocation.command, invocation.args, {
     encoding: 'utf8',
     stdio: ['ignore', 'pipe', 'pipe'],
     shell: invocation.shell,
-    env: { ...env },
+    env: installEnv,
   });
   const result = runInstall();
   if (result.status !== 0) {

package/src/dsh-cohort.mjs

@@ -4,7 +4,7 @@
 // resolve to this exact version. All other modules re-export from here so a
 // cohort bump touches exactly one file (plus package.json's 48 DSH pins).
 export const DSH_CLI_PACKAGE = '@deepseek-ai/dsh';
-export const TARGET_DSH_VERSION = '0.1.6-alpha.1';
+export const TARGET_DSH_VERSION = '0.2.0-rc.2';
 export const TARGET_DSH_SPEC = `${DSH_CLI_PACKAGE}@${TARGET_DSH_VERSION}`;
 
 export const DSH_SCOPE = '@deepseek-ai/';
@@ -31,12 +31,12 @@ export function isDshCohortPackage(name) {
 //     named by CREW_PROFILE_DEFAULT_BUNDLES in src/dsh-cli-runtime.mjs. They
 //     belong to the runtime tree the profile composes, not to this plugin's
 //     peer set, so they are correctly absent here. A payload never vendors them.
-//   * @deepseek-ai/dsh-agent-presets is listed but currently inert: nothing in
-//     package.json declares it, and only a declared name is pinned. It stays
-//     because it is the 0.1.6-alpha.1 provider of the `agentPresets` service this
-//     plugin resolves, and because its name dies at 0.1.7 — a host that needs the
-//     provider must not get it from the peer block, so the only way it can ever
-//     be pinned to the runtime cohort is from this list.
+//   * @deepseek-ai/dsh-agent-preset-registry is the provider of the
+//     `agentPresets` service this plugin resolves, and it is declared, so it is
+//     both pinned here and carried as a peer. Its predecessor
+//     `@deepseek-ai/dsh-agent-presets` stopped publishing at 0.1.6-alpha.2 and is
+//     named nowhere — a cohort that still listed it would be describing a package
+//     no registry can serve.
 //
 // The list is authoritative wherever a member is declared: a peer range and an
 // explicit dependency both resolve to TARGET_DSH_VERSION in the staged payload.
@@ -47,7 +47,7 @@ export const DSH_COHORT_PACKAGES = Object.freeze([
   DSH_CLI_PACKAGE,
   '@deepseek-ai/dsh-agent',
   '@deepseek-ai/dsh-agent-loop',
-  '@deepseek-ai/dsh-agent-presets',
+  '@deepseek-ai/dsh-agent-preset-registry',
   '@deepseek-ai/dsh-bash-local',
   '@deepseek-ai/dsh-client-locale',
   '@deepseek-ai/dsh-client-ui-renderer',

package/src/install/harness-config-import.mjs

@@ -9,7 +9,7 @@
 //
 // Two hazards shape the rules:
 //   1. The desktop app runs a DIFFERENT cohort than Crew pins (0.1.7-rc.2 vs
-//      0.1.6-alpha.1), so an entry may name a package Crew's runtime does not
+//      0.2.0-rc.2), so an entry may name a package Crew's runtime does not
 //      have. The Harness installs patches fail-loud, so such an entry would break
 //      the hub: it is skipped and reported instead.
 //   2. Crew's own managed blocks (the desktop bridge insert) are not user

package/src/runtime-identity.mjs

@@ -5,7 +5,7 @@
 // - HUB_PROTOCOL_VERSION changes only when Hub <-> MCP wire semantics become
 //   incompatible.
 //
-// The Harness/DSH cohort version (e.g. 0.1.6-alpha.1) is a THIRD, independent
+// The Harness/DSH cohort version (e.g. 0.2.0-rc.2) is a THIRD, independent
 // domain: it identifies the installed @deepseek-ai/dsh package generation,
 // never the Crew release. Verifiers must compare the cohort against
 // dsh_version, never against runtime_version.
@@ -36,7 +36,7 @@ export {
 // included in the identity contract.
 const RUNTIME_ID = randomUUID();
 
-export const RUNTIME_VERSION = '2.2.16';
+export const RUNTIME_VERSION = '2.2.18';
 export const HUB_PROTOCOL_VERSION = 1;
 
 export const HUB_CAPABILITIES = Object.freeze([