@softspark/ai-toolkit 4.32.4 → 4.33.0

package/CHANGELOG.md

@@ -7,6 +7,31 @@ Versioning follows [Semantic Versioning](https://semver.org/).
 
 ---
 
+## v4.33.0 - DSH refresh and maintenance contracts (2026-09-06)
+
+### Changed
+
+- Explicit DSH profile lifecycle targets runtime `0.1.2-rc.1` and exact packages
+  `@softspark/dsh-codex@1.5.0` and `@softspark/dsh-orchestrator@2.0.0`.
+  Upgrade the DSH runtime before updating the managed profile packages.
+- Refresh the ecosystem source references and retain the pnpm 11 support range
+  declared by the reviewed upstream release.
+
+### Fixed
+
+- Automatically select Claude Agent SDK `0.3.263` for the DSH Claude provider,
+  replacing the bundled CLI rejected by current models. Preserve unrelated
+  profile settings and restore prior configuration after failed installation
+  or update; concurrent file replacements remain preserved for recovery.
+- Align the security support table with the current 4.x release line and describe
+  the actual scope of hooks, network-aware commands, and managed installation files.
+- Require documentation, generated surfaces, and counts to change in the same
+  pull request as the corresponding behavior.
+- Cover migration from the previously shipped DSH package pair and retain
+  rollback tests that restore the exact recorded package versions.
+- Canonicalize temporary test roots on macOS so recovery assertions compare
+  the same paths reported by the lifecycle without weakening the assertions.
+
 ## v4.32.4 - Validation parity and API error contracts (2026-09-06)
 
 ### Changed

package/README.md

@@ -6,24 +6,21 @@
 [![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](LICENSE)
 [![Skills](https://img.shields.io/badge/skills-114-brightgreen)](app/skills/)
 [![Agents](https://img.shields.io/badge/agents-44-blue)](app/agents/)
-[![Tests](https://img.shields.io/badge/tests-1978%20passing-success)](tests/)
+[![Tests](https://img.shields.io/badge/tests-1989%20passing-success)](tests/)
 
-## What's New in v4.32.4
+## What's New in v4.33.0
 
-**v4.32.4** documents validation parity and reliable API error handling:
+**v4.33.0** refreshes the explicit DSH lifecycle and public maintenance policies:
 
-- **One validation contract for frontend and backend.** Existing skills cover
-  DTO groups/defaults, nested collections, Unicode, explicit server-only checks
-  and shared regression fixtures, with backend enforcement kept authoritative.
-- **Errors preserve the API contract.** Guidance separates local refusals,
-  domain conflicts and technical failures, retaining field paths, machine
-  codes and safe recovery when a write outcome is uncertain.
-- **Schema examples match validator behavior.** Correct JSON Schema
-  conditional requirements and Ajv strict-mode guidance; keep state-dependent
-  domain checks alongside validation at the request boundary.
-- **Release smoke tests verify the installed artifact.** Procedures use
-  disposable environments, current inventories and assertions for missing
-  generated files, without modifying the operator's live installation.
+- **Current DSH package pins.** Explicit profile installation and updates target
+  DSH `0.1.2-rc.1`, `dsh-codex 1.5.0`, and `dsh-orchestrator 2.0.0`.
+- **Existing profile ownership survives the update.** Regression tests cover
+  refreshing the previously shipped package pair and restoring the recorded
+  versions when an update fails.
+- **Accurate security scope.** The support table follows the current release
+  line, and the policy describes the actual installation and network boundaries.
+- **Documentation travels with code.** Contributions update affected KB pages,
+  manifests, counts, and generated instructions in the same pull request.
 
 See [CHANGELOG.md](CHANGELOG.md) for full history.
 
@@ -96,7 +93,7 @@ ai-toolkit dsh doctor --profile web
 ai-toolkit dsh uninstall --profile web --yes
 ```
 
-DSH is excluded from `--editors all`, auto-detection, and defaults. Its only DSH-specific project output is `.agents/skills`; the normal `--local` Claude files, detected language rules, and other generic project outputs still apply. Project and profile `--dry-run` commands are read-only. The reviewed pins are DSH `0.1.1-rc.2`, `@softspark/dsh-codex@1.0.0`, and `@softspark/dsh-orchestrator@1.0.1`. Codex, Claude Code, and GitHub Copilot own their logins. ai-toolkit accepts no provider API keys, and GitHub AI credits apply to the Copilot Gemini route. Isolated pre-tag and exact-registry post-release qualification completed both Claude Code and Copilot Gemini marker roundtrips through the Codex parent. See [DSH Compatibility](kb/reference/dsh-compatibility.md).
+DSH is excluded from `--editors all`, auto-detection, and defaults. Its only DSH-specific project output is `.agents/skills`; the normal `--local` Claude files, detected language rules, and other generic project outputs still apply. Project and profile `--dry-run` commands are read-only. The lifecycle targets DSH `0.1.2-rc.1`, `@softspark/dsh-codex@1.5.0`, and `@softspark/dsh-orchestrator@2.0.0`. Update the DSH runtime before updating this profile integration. Codex, Claude Code, and GitHub Copilot own their logins. ai-toolkit accepts no provider API keys, and GitHub AI credits apply to the Copilot Gemini route. See [DSH Compatibility](kb/reference/dsh-compatibility.md) for the exact contract and version-specific qualification evidence.
 
 ### Plugin Management
 

package/app/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "ai-toolkit",
   "displayName": "AI Toolkit",
   "description": "Professional-grade engineering skills, agents, rules, and lifecycle guardrails for Claude Code, Claude Chat, and Cowork.",
-  "version": "4.32.4",
+  "version": "4.33.0",
   "author": {
     "name": "SoftSpark",
     "url": "https://github.com/softspark"

package/kb/procedures/sop-release-verification.md

@@ -3,7 +3,7 @@ title: "SOP: Release Verification"
 category: procedures
 service: ai-toolkit
 tags: [sop, verification, release, smoke-test, install, update, qa, provenance, sarif, dsh]
-version: "1.8.1"
+version: "1.8.2"
 created: "2026-04-08"
 last_updated: "2026-09-06"
 description: "End-to-end smoke test after installing or updating @softspark/ai-toolkit. Verifies CLI, native Codex and GitHub Copilot surfaces, explicit DSH lifecycle, Claude app export, doctor, validation, tests, eject, provenance, SARIF, and per-skill permissions."
@@ -473,15 +473,17 @@ app-native rules skill, bundled agents/skills, and plugin-relative Cowork hooks.
 
 Run this phase whenever the release changes the `dsh` target, package pins, preset lifecycle, or DSH compatibility documentation. Use a new task-specific `DSH_HOME`; never replace `HOME` or reuse a regular profile.
 
-Prerequisites: DSH `0.1.1-rc.2`, pnpm `>=11.7.0,<12.0.0`, Codex logged in through ChatGPT, Claude Code logged in natively, and GitHub Copilot CLI logged in natively. Do not supply provider API keys.
+Prerequisites: DSH `0.1.2-rc.1`, pnpm `>=11.7.0,<12.0.0`, Codex logged in through ChatGPT, Claude Code logged in natively, and GitHub Copilot CLI logged in natively. Do not supply provider API keys. The lifecycle automatically installs the scoped Claude Agent SDK `0.3.263` override and checks the actual provider and SDK metadata; no manual vendor configuration is needed.
 
 ```bash
 DSH_SMOKE_ROOT="$(mktemp -d)"
 export DSH_HOME="$DSH_SMOKE_ROOT/dsh-home"
+export AI_TOOLKIT_HOME="$DSH_SMOKE_ROOT/toolkit-state"
+mkdir -p "$DSH_HOME"
 
 ai-toolkit dsh install --profile web
 ai-toolkit dsh doctor --profile web
-dsh --profile web --host 127.0.0.1 --port 0 --no-open
+DSH_TELEMETRY_DISABLED=1 dsh --profile web --host 127.0.0.1 --port 0 --no-open
 ```
 
 In a new `softspark-orchestrator` session, select the `codex` provider and run two standalone marker prompts:
@@ -495,7 +497,7 @@ Stop DSH, then remove only the managed profile artifacts:
 ai-toolkit dsh uninstall --profile web --yes
 ```
 
-**Verify:** both tool results have `isError=false`, both turns end as `completed`, `doctor` reports no recovery requirement before uninstall, and an unrelated preset fixture remains unchanged. Preserve only redacted event sequence evidence; never attach credentials, auth files, or full private prompts.
+**Verify:** both tool results have `isError=false`, both turns end as `completed`, `doctor` reports `Claude SDK: compatible (0.3.263)` and no recovery requirement before uninstall, and an unrelated preset fixture remains unchanged. The task-specific `AI_TOOLKIT_HOME` keeps lifecycle state separate from the operator's installation; `HOME` remains unchanged. Preserve only redacted event sequence evidence; never attach credentials, auth files, or full private prompts.
 
 ---
 

package/kb/reference/dsh-compatibility.md

@@ -3,9 +3,9 @@ title: "AI Toolkit - DSH Compatibility"
 category: reference
 service: ai-toolkit
 tags: [dsh, deepseek-harness, subscriptions, lifecycle, compatibility]
-version: "1.7.0"
+version: "1.8.0"
 created: "2026-08-31"
-last_updated: "2026-09-01"
+last_updated: "2026-09-06"
 description: "Compatibility contract for project skills and the explicit SoftSpark package lifecycle in DeepSeek Harness."
 ---
 
@@ -15,14 +15,14 @@ description: "Compatibility contract for project skills and the explicit SoftSpa
 
 ai-toolkit supports DeepSeek Harness as an explicit developer-preview target. The integration is maintained by SoftSpark as a community compatibility layer. DeepSeek AI has not endorsed it.
 
-The reviewed runtime is DSH `0.1.1-rc.2`. Newer upstream prereleases are not covered until they pass the same qualification. Isolated pre-tag and exact-registry post-release profiles completed the Claude Code and Copilot Gemini marker roundtrips through a Codex parent on 2026-09-01.
+The 4.33.0 lifecycle targets DSH `0.1.2-rc.1`, with the exact package pair below. Other upstream prereleases require their own qualification. Historical marker roundtrips from 2026-09-01 used DSH `0.1.1-rc.2`; version-specific evidence is recorded under Qualification below.
 
 ## Project vs Profile Outputs
 
 | Surface | Command | Managed output | Explicit non-output |
 |---|---|---|---|
 | Project install | `ai-toolkit install --local --editors dsh` | `CLAUDE.md`, `.claude/settings.local.json`, `.claude/constitution.md`, detected language rules, other generic local outputs, and the DSH-specific one-level `.agents/skills/<name>/SKILL.md` catalog with bundled resources | No `$DSH_HOME` writes, npm package changes, profile changes, preset changes, or credential reads |
-| DSH profile | `ai-toolkit dsh install --profile web` | Two exact npm dependencies in the named profile, the released `softspark-orchestrator` preset, and ai-toolkit ownership state | No project files, provider login, API keys, unrelated plugins, or user presets |
+| DSH profile | `ai-toolkit dsh install --profile web` | Two exact npm dependencies, the scoped Claude SDK override and missing profile initialization files, the released `softspark-orchestrator` preset, and ai-toolkit ownership state | No project files, provider login, API keys, unrelated plugins, or user presets |
 
 DSH is excluded from `--editors all`, auto-detection, default profiles, and default editor selection. Naming `dsh` without `--local` is not a supported project install route.
 
@@ -50,13 +50,31 @@ The DSH profile defaults to `web` when `--profile` is omitted. `DSH_HOME` select
 
 | Component | Reviewed version | Role |
 |---|---:|---|
-| DeepSeek Harness | `0.1.1-rc.2` | Profile host and plugin manager |
+| DeepSeek Harness | `0.1.2-rc.1` | Profile host and plugin manager |
 | pnpm | `>=11.7.0,<12.0.0` | Package manager used by the DSH plugin command |
-| `@softspark/dsh-codex` | `1.0.0` | Codex parent provider through local `codex app-server` |
-| `@softspark/dsh-orchestrator` | `1.0.1` | Claude Code and GitHub Copilot Gemini delegation bundle plus released preset |
+| `@softspark/dsh-codex` | `1.5.0` | Codex parent provider through local `codex app-server` |
+| `@softspark/dsh-orchestrator` | `2.0.0` | Claude Code and GitHub Copilot Gemini delegation bundle plus released preset |
+| Claude Agent SDK | `0.3.263` | Exact profile override for the DSH Claude provider's bundled CLI |
 
 Install and update use exact package arguments with `--save-exact`. Arbitrary DSH prereleases and unpinned SoftSpark packages are outside this contract.
 
+Install and update also configure the exact profile selector
+`@deepseek-ai/dsh-subagent-claude-code@0.1.2-rc.1>@anthropic-ai/claude-agent-sdk`
+to `0.3.263`. DSH's original SDK `0.3.241` embeds Claude Code `2.1.241`, which
+current models reject even when the standalone Claude command is up to date.
+The override is applied through pnpm's JSON configuration API. Unrelated
+settings and overrides are preserved; an incompatible SDK override or an
+explicit non-hoisted package layout fails with guidance before modification.
+The installed SDK's actual package metadata is checked before state is committed.
+
+Upgrade the DSH runtime to `0.1.2-rc.1` before running this release's profile
+update. Ownership records for the earlier exact package pair remain valid and
+are migrated by `ai-toolkit dsh update`. On failure, rollback uses the versions
+recorded before the operation. The optional `dsh-file-preview` and
+`dsh-process-console` UI bundles are separate profile additions; their `2.0.0`
+line targets the new DSH client APIs, and the toolkit preserves them as unrelated
+dependencies.
+
 The reviewed DSH tag declares `pnpm@11.7.0`. The isolated cold-install environment used Corepack pnpm `11.24.0`, so the lifecycle accepts stable pnpm releases from `11.7.0` through the end of major 11. Before it creates the lifecycle lock or changes a profile, it resolves exact DSH and pnpm command paths from the minimal child `PATH`, records their command and resolved-file identities, and runs their version probes with a five-second bound. Missing, nonzero, timed-out, malformed, or unsupported pnpm probes fail with no package, preset, state, or lifecycle artifact.
 
 ## Subscription and Authentication Boundaries
@@ -111,6 +129,17 @@ The DSH record stores the canonical DSH home, profile, exact package versions, p
 
 The published npm packages own their installed code. The canonical preset source is `@softspark/dsh-orchestrator/agent-presets/softspark-orchestrator` inside the exact installed package. ai-toolkit copies and verifies that tree. It does not reconstruct the preset.
 
+Missing profile initialization files are created exclusively under pinned
+directories using the qualified DSH profile schema before invoking the external
+configuration command. A file appearing concurrently is never adopted as owned,
+even when its bytes match. The transaction snapshots `pnpm-workspace.yaml` bytes, mode and file identity in
+addition to package state. Ordinary failures restore that prestate through the
+same guarded file restoration used for the profile manifest. Default profile
+files created during initialization are removed only while their recorded
+identities still match. Unexpected settings changes or ambiguous failed
+external writes remain preserved behind a recovery marker. Configuration
+contents are never copied into lifecycle state, receipts, or error messages.
+
 Mutations first take a nonblocking exclusive POSIX `flock` on the already pinned `DSH_HOME` directory descriptor, then claim the bounded canonical lifecycle lock and use the shared state lock with compare-and-swap publication. Directory locking is independent of the replaceable lock filename. It remains held across sentinel scans, package and preset mutation, normal canonical-lock release, or recovery-sentinel creation plus file and directory `fsync`. A competing lifecycle must acquire the same directory lock before it can scan recovery state or claim the canonical name. The immutable prerequisite record is revalidated after lock acquisition and before every package mutation or package rollback. A replaced or removed executable, or a new earlier `pnpm` PATH shadow, blocks the command. The verified pnpm command directory is placed first in the child PATH so DSH's literal `pnpm` lookup resolves to the probed command. Install, update, and uninstall verify the profile manifest, package trees, preset identity, and unrelated dependencies before and after each external package-manager command. Rollback restores the immutable pre-operation target. It does not reinterpret concurrent bytes as owned data.
 
 Each DSH plugin add, update, remove, or rollback command has a 300-second process bound, separate from the short prerequisite probe. This bound accommodates cold package resolution without promising registry or network latency. Every mutation starts DSH in a dedicated POSIX session and process group. A timeout or interruption signals the complete group, escalates from `SIGTERM` to `SIGKILL` when needed, and waits for confirmed group exit before rollback. If exit cannot be confirmed, package rollback is blocked and deterministic inspection steps are reported. Child stdout and stderr remain suppressed from user-facing errors.
@@ -144,8 +173,17 @@ The first native target also excludes DSH hook bridging, MCP bridging, arbitrary
 
 `ai-toolkit dsh doctor` is read-only. It reports the DSH runtime version, pnpm availability and version, package pins, package-tree and preset ownership, state consistency, lifecycle lock recovery artifacts, staging paths, and recovery markers. A recovery marker keeps `Recovery needed: yes` visible until the operator resolves the named paths.
 
+Doctor also checks the required SDK override and installed SDK version. It
+queries pnpm directly only when the profile directory exists. It never uses
+`dsh plugin` for inspection, because that command initializes missing profiles.
+
 `ai-toolkit dsh uninstall --yes` removes only the recorded SoftSpark packages, preset, and profile state. Drift or ownership ambiguity stops removal. Unrelated profile dependencies, patch files, presets, and state keys remain unchanged.
 
+Successful uninstall retains the scoped SDK compatibility setting and the
+profile's pnpm layout. They are runtime prerequisites for a later reinstall,
+not ownership of the user's entire profile. Failed operations restore their
+pre-operation configuration unless concurrent edits make that unsafe.
+
 ## Verification
 
 Run the static and isolated checks without modifying a regular DSH profile:
@@ -163,11 +201,45 @@ ai-toolkit dsh doctor --profile web
 ai-toolkit dsh uninstall --profile web --dry-run --yes
 ```
 
-Phase 3 real-profile qualification completed with a task-specific `DSH_HOME`, exact published package artifacts, and native vendor logins. The pre-tag candidate and exact npm registry package both produced successful child and parent markers through `subagent_claude_code` and `subagent_gemini_copilot`; no provider API key was supplied or handled. The isolated DSH processes stopped cleanly and the unrelated profile fixture remained intact.
+### Historical qualification, 2026-09-01
+
+The earlier DSH `0.1.1-rc.2` package pair completed real-profile qualification
+with a task-specific `DSH_HOME`, exact published package artifacts, and native
+vendor logins. The pre-tag candidate and registry package produced successful
+child and parent markers through `subagent_claude_code` and
+`subagent_gemini_copilot`. No provider API key was supplied or handled; the
+isolated processes stopped and the unrelated profile fixture remained intact.
+
+### DSH 0.1.2-rc.1 qualification
+
+On 2026-09-06, the installed 4.33.0 candidate completed install, doctor,
+update, doctor, a controlled second-package failure with real pnpm rollback,
+doctor and uninstall against the published Codex 1.5.0/orchestrator 2.0.0
+pair. Rollback preserved the manifest, pnpm settings, ownership state and
+unrelated preset byte for byte. Doctor reported the exact package versions,
+Claude SDK 0.3.263 and no recovery requirement. Uninstall removed the managed
+packages, preset and profile ownership while retaining the unrelated preset
+and runtime SDK prerequisite. Both state roots were disposable; HOME stayed
+unchanged.
+
+The composed web host returned the Claude and Gemini child markers through
+the Codex parent. Browser checks covered cancellation, restart, the native
+child transcript and preservation of the parent session. The DSH package
+verification records retain those runtime results and their separate exact
+registry signature/provenance checks.
+
+The toolkit candidate also passed 1,989 Bats and 354 Python tests. An
+unmounted disposable container passed global install, status, doctor, local
+installation for all editors, repeated installation, eject and the official
+Claude 2.1.263 plugin validator. Exact published toolkit artifact results are
+recorded on the 4.33.0 release page after publication.
 
 ## Preview and Upstream Drift
 
-DeepSeek Harness describes itself as a developer preview with compatibility-breaking changes. The upstream release feed published `0.1.2-alpha.2` after the reviewed `0.1.1-rc.2` line. ai-toolkit does not adopt that prerelease by inference.
+DeepSeek Harness is a developer preview with compatibility-breaking changes.
+On 2026-09-06, npm `latest` pointed to `0.1.2-rc.1`. GitHub also listed
+`0.1.3-alpha.1`, but that exact CLI version was absent from npm. It is outside
+this lifecycle contract.
 
 Use the registry doctor to detect documentation, capability-marker, and local version changes. A new upstream version requires source review, focused fixture updates, isolated real-profile qualification, and explicit pin changes before support moves.
 
@@ -175,9 +247,9 @@ Use the registry doctor to detect documentation, capability-marker, and local ve
 
 - [DeepSeek Harness documentation](https://deepseek-harness.github.io/deepseek-harness/)
 - [DeepSeek Harness releases](https://github.com/deepseek-ai/deepseek-harness/releases)
-- [Reviewed DSH 0.1.1-rc.2 release](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.1-rc.2)
-- [Reviewed DSH package-manager declaration](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.1-rc.2/package.json)
-- [Reviewed DSH CLI profile and plugin contract](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.1-rc.2/apps/cli/reference/README.md)
-- [Reviewed DSH skill discovery contract](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.1-rc.2/docs/subsystems/skills.md)
+- [Reviewed DSH 0.1.2-rc.1 release](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.2-rc.1)
+- [Reviewed DSH package-manager declaration](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.2-rc.1/package.json)
+- [Reviewed DSH CLI profile and plugin contract](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.2-rc.1/apps/cli/reference/README.md)
+- [Reviewed DSH skill discovery contract](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.2-rc.1/docs/subsystems/skills.md)
 - [PATH: kb/reference/manifest-install.md]
 - [PATH: kb/history/completed/dsh-native-install-target-plan.md]

package/llms-full.txt

@@ -8243,7 +8243,7 @@ title: "SOP: Release Verification"
 category: procedures
 service: ai-toolkit
 tags: [sop, verification, release, smoke-test, install, update, qa, provenance, sarif, dsh]
-version: "1.8.1"
+version: "1.8.2"
 created: "2026-04-08"
 last_updated: "2026-09-06"
 description: "End-to-end smoke test after installing or updating @softspark/ai-toolkit. Verifies CLI, native Codex and GitHub Copilot surfaces, explicit DSH lifecycle, Claude app export, doctor, validation, tests, eject, provenance, SARIF, and per-skill permissions."
@@ -8713,15 +8713,17 @@ app-native rules skill, bundled agents/skills, and plugin-relative Cowork hooks.
 
 Run this phase whenever the release changes the `dsh` target, package pins, preset lifecycle, or DSH compatibility documentation. Use a new task-specific `DSH_HOME`; never replace `HOME` or reuse a regular profile.
 
-Prerequisites: DSH `0.1.1-rc.2`, pnpm `>=11.7.0,<12.0.0`, Codex logged in through ChatGPT, Claude Code logged in natively, and GitHub Copilot CLI logged in natively. Do not supply provider API keys.
+Prerequisites: DSH `0.1.2-rc.1`, pnpm `>=11.7.0,<12.0.0`, Codex logged in through ChatGPT, Claude Code logged in natively, and GitHub Copilot CLI logged in natively. Do not supply provider API keys. The lifecycle automatically installs the scoped Claude Agent SDK `0.3.263` override and checks the actual provider and SDK metadata; no manual vendor configuration is needed.
 
 ```bash
 DSH_SMOKE_ROOT="$(mktemp -d)"
 export DSH_HOME="$DSH_SMOKE_ROOT/dsh-home"
+export AI_TOOLKIT_HOME="$DSH_SMOKE_ROOT/toolkit-state"
+mkdir -p "$DSH_HOME"
 
 ai-toolkit dsh install --profile web
 ai-toolkit dsh doctor --profile web
-dsh --profile web --host 127.0.0.1 --port 0 --no-open
+DSH_TELEMETRY_DISABLED=1 dsh --profile web --host 127.0.0.1 --port 0 --no-open
 ```
 
 In a new `softspark-orchestrator` session, select the `codex` provider and run two standalone marker prompts:
@@ -8735,7 +8737,7 @@ Stop DSH, then remove only the managed profile artifacts:
 ai-toolkit dsh uninstall --profile web --yes
 ```
 
-**Verify:** both tool results have `isError=false`, both turns end as `completed`, `doctor` reports no recovery requirement before uninstall, and an unrelated preset fixture remains unchanged. Preserve only redacted event sequence evidence; never attach credentials, auth files, or full private prompts.
+**Verify:** both tool results have `isError=false`, both turns end as `completed`, `doctor` reports `Claude SDK: compatible (0.3.263)` and no recovery requirement before uninstall, and an unrelated preset fixture remains unchanged. The task-specific `AI_TOOLKIT_HOME` keeps lifecycle state separate from the operator's installation; `HOME` remains unchanged. Preserve only redacted event sequence evidence; never attach credentials, auth files, or full private prompts.
 
 ---
 
@@ -12072,9 +12074,9 @@ title: "AI Toolkit - DSH Compatibility"
 category: reference
 service: ai-toolkit
 tags: [dsh, deepseek-harness, subscriptions, lifecycle, compatibility]
-version: "1.7.0"
+version: "1.8.0"
 created: "2026-08-31"
-last_updated: "2026-09-01"
+last_updated: "2026-09-06"
 description: "Compatibility contract for project skills and the explicit SoftSpark package lifecycle in DeepSeek Harness."
 ---
 
@@ -12084,14 +12086,14 @@ description: "Compatibility contract for project skills and the explicit SoftSpa
 
 ai-toolkit supports DeepSeek Harness as an explicit developer-preview target. The integration is maintained by SoftSpark as a community compatibility layer. DeepSeek AI has not endorsed it.
 
-The reviewed runtime is DSH `0.1.1-rc.2`. Newer upstream prereleases are not covered until they pass the same qualification. Isolated pre-tag and exact-registry post-release profiles completed the Claude Code and Copilot Gemini marker roundtrips through a Codex parent on 2026-09-01.
+The 4.33.0 lifecycle targets DSH `0.1.2-rc.1`, with the exact package pair below. Other upstream prereleases require their own qualification. Historical marker roundtrips from 2026-09-01 used DSH `0.1.1-rc.2`; version-specific evidence is recorded under Qualification below.
 
 ## Project vs Profile Outputs
 
 | Surface | Command | Managed output | Explicit non-output |
 |---|---|---|---|
 | Project install | `ai-toolkit install --local --editors dsh` | `CLAUDE.md`, `.claude/settings.local.json`, `.claude/constitution.md`, detected language rules, other generic local outputs, and the DSH-specific one-level `.agents/skills/<name>/SKILL.md` catalog with bundled resources | No `$DSH_HOME` writes, npm package changes, profile changes, preset changes, or credential reads |
-| DSH profile | `ai-toolkit dsh install --profile web` | Two exact npm dependencies in the named profile, the released `softspark-orchestrator` preset, and ai-toolkit ownership state | No project files, provider login, API keys, unrelated plugins, or user presets |
+| DSH profile | `ai-toolkit dsh install --profile web` | Two exact npm dependencies, the scoped Claude SDK override and missing profile initialization files, the released `softspark-orchestrator` preset, and ai-toolkit ownership state | No project files, provider login, API keys, unrelated plugins, or user presets |
 
 DSH is excluded from `--editors all`, auto-detection, default profiles, and default editor selection. Naming `dsh` without `--local` is not a supported project install route.
 
@@ -12119,13 +12121,31 @@ The DSH profile defaults to `web` when `--profile` is omitted. `DSH_HOME` select
 
 | Component | Reviewed version | Role |
 |---|---:|---|
-| DeepSeek Harness | `0.1.1-rc.2` | Profile host and plugin manager |
+| DeepSeek Harness | `0.1.2-rc.1` | Profile host and plugin manager |
 | pnpm | `>=11.7.0,<12.0.0` | Package manager used by the DSH plugin command |
-| `@softspark/dsh-codex` | `1.0.0` | Codex parent provider through local `codex app-server` |
-| `@softspark/dsh-orchestrator` | `1.0.1` | Claude Code and GitHub Copilot Gemini delegation bundle plus released preset |
+| `@softspark/dsh-codex` | `1.5.0` | Codex parent provider through local `codex app-server` |
+| `@softspark/dsh-orchestrator` | `2.0.0` | Claude Code and GitHub Copilot Gemini delegation bundle plus released preset |
+| Claude Agent SDK | `0.3.263` | Exact profile override for the DSH Claude provider's bundled CLI |
 
 Install and update use exact package arguments with `--save-exact`. Arbitrary DSH prereleases and unpinned SoftSpark packages are outside this contract.
 
+Install and update also configure the exact profile selector
+`@deepseek-ai/dsh-subagent-claude-code@0.1.2-rc.1>@anthropic-ai/claude-agent-sdk`
+to `0.3.263`. DSH's original SDK `0.3.241` embeds Claude Code `2.1.241`, which
+current models reject even when the standalone Claude command is up to date.
+The override is applied through pnpm's JSON configuration API. Unrelated
+settings and overrides are preserved; an incompatible SDK override or an
+explicit non-hoisted package layout fails with guidance before modification.
+The installed SDK's actual package metadata is checked before state is committed.
+
+Upgrade the DSH runtime to `0.1.2-rc.1` before running this release's profile
+update. Ownership records for the earlier exact package pair remain valid and
+are migrated by `ai-toolkit dsh update`. On failure, rollback uses the versions
+recorded before the operation. The optional `dsh-file-preview` and
+`dsh-process-console` UI bundles are separate profile additions; their `2.0.0`
+line targets the new DSH client APIs, and the toolkit preserves them as unrelated
+dependencies.
+
 The reviewed DSH tag declares `pnpm@11.7.0`. The isolated cold-install environment used Corepack pnpm `11.24.0`, so the lifecycle accepts stable pnpm releases from `11.7.0` through the end of major 11. Before it creates the lifecycle lock or changes a profile, it resolves exact DSH and pnpm command paths from the minimal child `PATH`, records their command and resolved-file identities, and runs their version probes with a five-second bound. Missing, nonzero, timed-out, malformed, or unsupported pnpm probes fail with no package, preset, state, or lifecycle artifact.
 
 ## Subscription and Authentication Boundaries
@@ -12180,6 +12200,17 @@ The DSH record stores the canonical DSH home, profile, exact package versions, p
 
 The published npm packages own their installed code. The canonical preset source is `@softspark/dsh-orchestrator/agent-presets/softspark-orchestrator` inside the exact installed package. ai-toolkit copies and verifies that tree. It does not reconstruct the preset.
 
+Missing profile initialization files are created exclusively under pinned
+directories using the qualified DSH profile schema before invoking the external
+configuration command. A file appearing concurrently is never adopted as owned,
+even when its bytes match. The transaction snapshots `pnpm-workspace.yaml` bytes, mode and file identity in
+addition to package state. Ordinary failures restore that prestate through the
+same guarded file restoration used for the profile manifest. Default profile
+files created during initialization are removed only while their recorded
+identities still match. Unexpected settings changes or ambiguous failed
+external writes remain preserved behind a recovery marker. Configuration
+contents are never copied into lifecycle state, receipts, or error messages.
+
 Mutations first take a nonblocking exclusive POSIX `flock` on the already pinned `DSH_HOME` directory descriptor, then claim the bounded canonical lifecycle lock and use the shared state lock with compare-and-swap publication. Directory locking is independent of the replaceable lock filename. It remains held across sentinel scans, package and preset mutation, normal canonical-lock release, or recovery-sentinel creation plus file and directory `fsync`. A competing lifecycle must acquire the same directory lock before it can scan recovery state or claim the canonical name. The immutable prerequisite record is revalidated after lock acquisition and before every package mutation or package rollback. A replaced or removed executable, or a new earlier `pnpm` PATH shadow, blocks the command. The verified pnpm command directory is placed first in the child PATH so DSH's literal `pnpm` lookup resolves to the probed command. Install, update, and uninstall verify the profile manifest, package trees, preset identity, and unrelated dependencies before and after each external package-manager command. Rollback restores the immutable pre-operation target. It does not reinterpret concurrent bytes as owned data.
 
 Each DSH plugin add, update, remove, or rollback command has a 300-second process bound, separate from the short prerequisite probe. This bound accommodates cold package resolution without promising registry or network latency. Every mutation starts DSH in a dedicated POSIX session and process group. A timeout or interruption signals the complete group, escalates from `SIGTERM` to `SIGKILL` when needed, and waits for confirmed group exit before rollback. If exit cannot be confirmed, package rollback is blocked and deterministic inspection steps are reported. Child stdout and stderr remain suppressed from user-facing errors.
@@ -12213,8 +12244,17 @@ The first native target also excludes DSH hook bridging, MCP bridging, arbitrary
 
 `ai-toolkit dsh doctor` is read-only. It reports the DSH runtime version, pnpm availability and version, package pins, package-tree and preset ownership, state consistency, lifecycle lock recovery artifacts, staging paths, and recovery markers. A recovery marker keeps `Recovery needed: yes` visible until the operator resolves the named paths.
 
+Doctor also checks the required SDK override and installed SDK version. It
+queries pnpm directly only when the profile directory exists. It never uses
+`dsh plugin` for inspection, because that command initializes missing profiles.
+
 `ai-toolkit dsh uninstall --yes` removes only the recorded SoftSpark packages, preset, and profile state. Drift or ownership ambiguity stops removal. Unrelated profile dependencies, patch files, presets, and state keys remain unchanged.
 
+Successful uninstall retains the scoped SDK compatibility setting and the
+profile's pnpm layout. They are runtime prerequisites for a later reinstall,
+not ownership of the user's entire profile. Failed operations restore their
+pre-operation configuration unless concurrent edits make that unsafe.
+
 ## Verification
 
 Run the static and isolated checks without modifying a regular DSH profile:
@@ -12232,11 +12272,45 @@ ai-toolkit dsh doctor --profile web
 ai-toolkit dsh uninstall --profile web --dry-run --yes
 ```
 
-Phase 3 real-profile qualification completed with a task-specific `DSH_HOME`, exact published package artifacts, and native vendor logins. The pre-tag candidate and exact npm registry package both produced successful child and parent markers through `subagent_claude_code` and `subagent_gemini_copilot`; no provider API key was supplied or handled. The isolated DSH processes stopped cleanly and the unrelated profile fixture remained intact.
+### Historical qualification, 2026-09-01
+
+The earlier DSH `0.1.1-rc.2` package pair completed real-profile qualification
+with a task-specific `DSH_HOME`, exact published package artifacts, and native
+vendor logins. The pre-tag candidate and registry package produced successful
+child and parent markers through `subagent_claude_code` and
+`subagent_gemini_copilot`. No provider API key was supplied or handled; the
+isolated processes stopped and the unrelated profile fixture remained intact.
+
+### DSH 0.1.2-rc.1 qualification
+
+On 2026-09-06, the installed 4.33.0 candidate completed install, doctor,
+update, doctor, a controlled second-package failure with real pnpm rollback,
+doctor and uninstall against the published Codex 1.5.0/orchestrator 2.0.0
+pair. Rollback preserved the manifest, pnpm settings, ownership state and
+unrelated preset byte for byte. Doctor reported the exact package versions,
+Claude SDK 0.3.263 and no recovery requirement. Uninstall removed the managed
+packages, preset and profile ownership while retaining the unrelated preset
+and runtime SDK prerequisite. Both state roots were disposable; HOME stayed
+unchanged.
+
+The composed web host returned the Claude and Gemini child markers through
+the Codex parent. Browser checks covered cancellation, restart, the native
+child transcript and preservation of the parent session. The DSH package
+verification records retain those runtime results and their separate exact
+registry signature/provenance checks.
+
+The toolkit candidate also passed 1,989 Bats and 354 Python tests. An
+unmounted disposable container passed global install, status, doctor, local
+installation for all editors, repeated installation, eject and the official
+Claude 2.1.263 plugin validator. Exact published toolkit artifact results are
+recorded on the 4.33.0 release page after publication.
 
 ## Preview and Upstream Drift
 
-DeepSeek Harness describes itself as a developer preview with compatibility-breaking changes. The upstream release feed published `0.1.2-alpha.2` after the reviewed `0.1.1-rc.2` line. ai-toolkit does not adopt that prerelease by inference.
+DeepSeek Harness is a developer preview with compatibility-breaking changes.
+On 2026-09-06, npm `latest` pointed to `0.1.2-rc.1`. GitHub also listed
+`0.1.3-alpha.1`, but that exact CLI version was absent from npm. It is outside
+this lifecycle contract.
 
 Use the registry doctor to detect documentation, capability-marker, and local version changes. A new upstream version requires source review, focused fixture updates, isolated real-profile qualification, and explicit pin changes before support moves.
 
@@ -12244,10 +12318,10 @@ Use the registry doctor to detect documentation, capability-marker, and local ve
 
 - [DeepSeek Harness documentation](https://deepseek-harness.github.io/deepseek-harness/)
 - [DeepSeek Harness releases](https://github.com/deepseek-ai/deepseek-harness/releases)
-- [Reviewed DSH 0.1.1-rc.2 release](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.1-rc.2)
-- [Reviewed DSH package-manager declaration](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.1-rc.2/package.json)
-- [Reviewed DSH CLI profile and plugin contract](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.1-rc.2/apps/cli/reference/README.md)
-- [Reviewed DSH skill discovery contract](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.1-rc.2/docs/subsystems/skills.md)
+- [Reviewed DSH 0.1.2-rc.1 release](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.2-rc.1)
+- [Reviewed DSH package-manager declaration](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.2-rc.1/package.json)
+- [Reviewed DSH CLI profile and plugin contract](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.2-rc.1/apps/cli/reference/README.md)
+- [Reviewed DSH skill discovery contract](https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.2-rc.1/docs/subsystems/skills.md)
 - [PATH: kb/reference/manifest-install.md]
 - [PATH: kb/history/completed/dsh-native-install-target-plan.md]
 

package/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.32.4",
+  "version": "4.33.0",
   "components": {
     "agents": {
       "description": "44 specialized agents (orchestrator, backend, frontend, security, devops, etc.)",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softspark/ai-toolkit",
-  "version": "4.32.4",
+  "version": "4.33.0",
   "description": "AI coding toolkit: 114 skills, 44 agents, 14 developer-tool integrations, Claude Chat/Cowork export, safety constitution, SARIF audit, and signed npm provenance.",
   "keywords": [
     "claude",

package/scripts/ecosystem_tools.json

@@ -136,7 +136,7 @@
       "kind": "harness",
       "status": "developer-preview",
       "selection_policy": "explicit-only",
-      "reviewed_version": "0.1.1-rc.2",
+      "reviewed_version": "0.1.2-rc.1",
       "excluded_from": [
         "editors-all",
         "auto-detect",
@@ -145,9 +145,9 @@
       "urls": {
         "docs": "https://deepseek-harness.github.io/deepseek-harness/",
         "release_notes": "https://github.com/deepseek-ai/deepseek-harness/releases",
-        "reviewed_release": "https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.1-rc.2",
-        "reviewed_cli_docs": "https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.1-rc.2/apps/cli/reference/README.md",
-        "reviewed_skill_docs": "https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.1-rc.2/docs/subsystems/skills.md"
+        "reviewed_release": "https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.2-rc.1",
+        "reviewed_cli_docs": "https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.2-rc.1/apps/cli/reference/README.md",
+        "reviewed_skill_docs": "https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.2-rc.1/docs/subsystems/skills.md"
       },
       "config_paths": [
         ".agents/skills/*/SKILL.md",
@@ -167,7 +167,7 @@
         "ai-toolkit dsh doctor --profile web",
         "ai-toolkit dsh uninstall --profile web"
       ],
-      "status_note": "Community compatibility target maintained by SoftSpark. DeepSeek AI has not endorsed this integration. ai-toolkit reuses its native skill generator for project .agents/skills output and manages exact @softspark/dsh-codex@1.0.0 and @softspark/dsh-orchestrator@1.0.1 packages only through explicit profile lifecycle commands. Upstream has newer prereleases, but this entry remains pinned to the reviewed DSH 0.1.1-rc.2 contract pending qualification.",
+      "status_note": "Community compatibility target maintained by SoftSpark. DeepSeek AI has not endorsed this integration. ai-toolkit reuses its native skill generator for project .agents/skills output and manages exact @softspark/dsh-codex@1.5.0 and @softspark/dsh-orchestrator@2.0.0 packages only through explicit profile lifecycle commands. The lifecycle targets DSH 0.1.2-rc.1. Other prereleases require separate qualification before these pins change.",
       "capability_markers": [
         "Developer preview",
         "profiles",