@songtonyli/dsh-cli 0.1.11 → 0.1.13

package/node_modules/@deepseek-ai/dsh-tool-cordis/lib/index.js

@@ -1,6 +1,36 @@
-import { CordisDynamicPackageId, CordisDynamicPluginId, HOST_BUILTIN_INSPECTION } from "@deepseek-ai/dsh-cordis-host-runner";
-import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { defineTool } from "@deepseek-ai/dsh-tools";
+import { HOST_BUILTIN_INSPECTION } from "@deepseek-ai/dsh-cordis-host-runner";
+//#region lib/types/present.js
+/**
+* Render provider-directory inspection.
+* @returns replay-safe generic call presentation.
+*/
+function presentInspectListCall() {
+	return {
+		card: "generic",
+		kind: "read",
+		title: "List Cordis Inspect Providers"
+	};
+}
+/**
+* Render one provider query.
+* @param args - target platform, provider, and method.
+* @returns replay-safe generic call presentation.
+*/
+function presentInspectQueryCall(args) {
+	return {
+		card: "generic",
+		kind: "read",
+		title: `Query Cordis ${args.platform} ${args.provider}.${args.method}`
+	};
+}
+//#endregion
+//#region lib/types/prompt.js
+/** Model guidance for read-only runtime API discovery. */
+const CORDIS_SYSTEM_PROMPT = `# Harness runtime inspection
+
+Use cordis_inspect_list to discover Host and Client providers, then cordis_inspect_query to read exact Service, Event, Tool, Theme or Slot APIs. These tools are read-only; queries do not invoke business methods.`;
+//#endregion
 //#region lib/types/api-catalog.js
 /**
 * Generated by scripts/gen-cordis-api.ts — do not edit by hand; run
@@ -964,7 +994,7 @@ const SERVICE_API = [
 			},
 			{
 				signature: "rebuilt(id: string): string | undefined",
-				description: "Re-hash one bundle (the HMR watch's registration hook — the only entry point through which bundle content changes reach the graph).",
+				description: "Publish one completed bundle generation (the HMR watch's registration hook — the only entry point through which build changes reach the graph).",
 				parameters: [{
 					name: "id",
 					description: "entry id (package name)."
@@ -1144,6 +1174,62 @@ const SERVICE_API = [
 			returns: "the effect disposer for this exact registration."
 		}]
 	},
+	{
+		key: "connection",
+		summary: "Host `ctx.connection` shape consumed by transport-independent adapters.",
+		description: "Host `ctx.connection` shape consumed by transport-independent adapters.",
+		methods: [
+			{
+				signature: "readonly rpc: HostConnectionRpc",
+				description: "Generic RPC channel registry.",
+				parameters: []
+			},
+			{
+				signature: "readonly fetch: HostConnectionFetch",
+				description: "Exact Fetch routes for streaming or browser-native responses.",
+				parameters: []
+			},
+			{
+				signature: "createSharedFetchHandler(channel: '/api'): ConnectionFetchHandler",
+				description: "Compose exact Fetch routes and the shared-channel RPC interceptor.",
+				parameters: [{
+					name: "channel",
+					description: "shared channel mounted by Connection."
+				}],
+				returns: "Fetch handler for trusted, authenticated requests."
+			},
+			{
+				signature: "requestRejection(request: ConnectionTrustRequest): ConnectionRequestRejection",
+				description: "Apply Connection's Host/Origin checks and browser authentication to another Web route.",
+				parameters: [{
+					name: "request",
+					description: "request headers from the HTTP or upgrade request."
+				}],
+				returns: "rejection status, or undefined when the route may accept the request."
+			},
+			{
+				signature: "authorizeIndex(request: ConnectionIndexRequest, response: ConnectionIndexResponse): boolean",
+				description: "Authenticate one frontend index request, owning a token redirect or 401.",
+				parameters: [{
+					name: "request",
+					description: "root or configured-index HTTP request."
+				}, {
+					name: "response",
+					description: "response owned when the result is false."
+				}],
+				returns: "true only when the frontend may serve index.html."
+			},
+			{
+				signature: "authenticatedUrl(baseUrl: string): string",
+				description: "Add the fresh process token to an ordinary Web application URL.",
+				parameters: [{
+					name: "baseUrl",
+					description: "clean canonical browser origin."
+				}],
+				returns: "root URL accepted by {@link authorizeIndex} for initial login."
+			}
+		]
+	},
 	{
 		key: "credentials",
 		summary: "Abstract credential service over two key spaces that answer two questions.",
@@ -1809,6 +1895,54 @@ const SERVICE_API = [
 			}
 		]
 	},
+	{
+		key: "hmr",
+		summary: "Hot reload service with Cordis-compatible module configuration and events.",
+		description: "Hot reload service with Cordis-compatible module configuration and events.",
+		methods: [
+			{
+				signature: "public baseDir: string",
+				description: "Absolute base directory used to resolve module watch roots.",
+				parameters: []
+			},
+			{
+				signature: "runExclusive<T>(operation: () => Promise<T>): Promise<T>",
+				description: "Serialize a caller-owned mutation with all automatic reload paths.",
+				parameters: [{
+					name: "operation",
+					description: "Work that must not overlap module or configuration replacement."
+				}],
+				returns: "The operation result after its asynchronous work completes."
+			},
+			{
+				signature: "async watchConfig(filename: string, refresh: () => Promise<void>): Promise<() => Promise<void>>",
+				description: "Watch a configuration path through the same queue as module replacement.",
+				parameters: [{
+					name: "filename",
+					description: "Absolute path, which may not exist yet."
+				}, {
+					name: "refresh",
+					description: "Rebuilds configuration from its current files and awaits Loader completion."
+				}],
+				returns: "Disposer closing this registration and waiting for its pending refresh."
+			},
+			{
+				signature: "getOuterStack: () => string[] = () => []",
+				description: "Omit internal HMR frames from module import diagnostics.",
+				parameters: [],
+				returns: "The preserved outer stack frames."
+			},
+			{
+				signature: "async getLinked(url: string): Promise<string[]>",
+				description: "Read direct module dependency URLs from the active Node loader.",
+				parameters: [{
+					name: "url",
+					description: "Module URL."
+				}],
+				returns: "Linked module URLs, or an empty list for an uncached module."
+			}
+		]
+	},
 	{
 		key: "inspector",
 		summary: "Shared Host/Client service façade over the realm's source publisher.",
@@ -2229,6 +2363,63 @@ const SERVICE_API = [
 			}
 		]
 	},
+	{
+		key: "officeToPdf",
+		summary: "A provider lifetime owns all converters, queued calls, and temporary files.",
+		description: "A provider lifetime owns all converters, queued calls, and temporary files.",
+		methods: [
+			{
+				signature: "readonly generation: OfficeToPdfGeneration = OfficeToPdfGeneration(randomUUID())",
+				description: "Changes whenever engine, font, or conversion configuration is replaced.",
+				parameters: []
+			},
+			{
+				signature: "convert(request: OfficeToPdfRequest, signal?: AbortSignal): Promise<OfficeToPdfResult>",
+				description: "Convert Office bytes without modifying the source or writing Session events.",
+				parameters: [{
+					name: "request",
+					description: "authorized metadata and deferred bounded source read."
+				}, {
+					name: "signal",
+					description: "caller cancellation; provider disposal also stops active work."
+				}],
+				returns: "caller-owned PDF bytes after conversion and scratch cleanup settle; canceled readers reject independently.",
+				throws: ["{OfficeToPdfError} Invalid input, unusable output, or engine failure; cancellation rejects with its reason."]
+			},
+			{
+				signature: "@Remote async render( workspaceFileScope: WorkspaceFileScope, path: string, priority: OfficeToPdfPriority, signal: AbortSignal, ): Promise<RenderedDocumentBytes>",
+				description: "Read and convert one Office file using the Session's ordinary filesystem authorization.",
+				parameters: [
+					{
+						name: "workspaceFileScope",
+						description: "Session header lookup shared with workspaceFiles."
+					},
+					{
+						name: "path",
+						description: "absolute or workspace-relative Office path."
+					},
+					{
+						name: "priority",
+						description: "foreground preview or speculative background work."
+					},
+					{
+						name: "signal",
+						description: "Remote cancellation; disposal also cancels outstanding reads and conversions."
+					}
+				],
+				returns: "complete base64 PDF with original source identity and missing font families."
+			},
+			{
+				signature: "@Remote('generation') getGeneration(signal: AbortSignal): OfficeToPdfGeneration",
+				description: "Read the current rendering generation before reusing a Client PDF.",
+				parameters: [{
+					name: "signal",
+					description: "Remote caller cancellation."
+				}],
+				returns: "provider lifetime, replaced with rendering, font, or engine configuration."
+			}
+		]
+	},
 	{
 		key: "permissionPresets",
 		summary: "Owns the deployment's configured permission presets, the fixed Auto integration hook, and their write path.",
@@ -2316,6 +2507,118 @@ const SERVICE_API = [
 			returns: "what happened: `committed` (logged now), `queued` (awaiting the next accepted in-turn pre-step), `cancelled` (an opposite pending selection was cleared; the logged state already matches), or `noop` (already in that state)."
 		}]
 	},
+	{
+		key: "pluginManager",
+		summary: "Manage profile files and apply their declared reload lifecycle.",
+		description: "Manage profile files and apply their declared reload lifecycle.",
+		methods: [
+			{
+				signature: "@Remote async listPlugins(): Promise<PluginInfo[]>",
+				description: "Read current plugins, including why a row cannot be changed through the profile patch.",
+				parameters: [],
+				returns: "Current runtime entries with persistent patch targets."
+			},
+			{
+				signature: "@Remote listBundles(): Promise<BundleInfo[]>",
+				description: "Read the profile's installed bundles, the bundles this dsh installation supplies, and the selected names that are not bundles. A dependency without a bundle patch is listed, as a `not-bundle` problem, only while it is selected.",
+				parameters: [],
+				returns: "Package versions, one-liners, rows, activation selections, whether the installation offers the bundle, and removal availability."
+			},
+			{
+				signature: "@Remote async inspect(spec: string, signal?: AbortSignal): Promise<PluginSpecInspection>",
+				description: "Read what a spec names before installing it.",
+				parameters: [{
+					name: "spec",
+					description: "One package spec: a registry name, an absolute path, a git address, or a tarball."
+				}, {
+					name: "signal",
+					description: "Ends a registry lookup early."
+				}],
+				returns: "The package the spec names, or why it is refused."
+			},
+			{
+				signature: "@Remote setPluginEnabled(id: PluginEntryId, enabled: boolean): Promise<ChangeResult>",
+				description: "Persist a plugin entry's desired enablement and apply it on live profiles.",
+				parameters: [{
+					name: "id",
+					description: "Loader entry identity returned by listPlugins."
+				}, {
+					name: "enabled",
+					description: "Whether the plugin should run."
+				}],
+				returns: "Saved and runtime outcomes, including higher-priority overrides."
+			},
+			{
+				signature: "@Remote setBundleEnabled(name: string, enabled: boolean): Promise<ChangeResult>",
+				description: "Select or remove a bundle layer while retaining installed dependencies.",
+				parameters: [{
+					name: "name",
+					description: "Bundle package name."
+				}, {
+					name: "enabled",
+					description: "Whether the bundle contributes its patch layer."
+				}],
+				returns: "Persisted and runtime outcomes."
+			},
+			{
+				signature: "@Remote installBundle(spec: string, options?: InstallBundleOptions): Promise<ChangeResult>",
+				description: "Install a package using the same pnpm implementation as dsh plugin. A run that fails, is cancelled, or adds a package without a bundle patch restores `package.json` and `pnpm-lock.yaml` as they were; downloaded files can stay.",
+				parameters: [{
+					name: "spec",
+					description: "One package spec, including local paths relative to the invocation directory."
+				}, {
+					name: "options",
+					description: "Whether to activate the installed bundle (defaults to true), the request id a cancellation names, and the pending build scripts to allow for this profile before pnpm runs."
+				}],
+				returns: "Package-manager diagnostics and observed activation outcome."
+			},
+			{
+				signature: "@Remote async cancelInstall(requestId: PluginInstallRequestId): Promise<PluginInstallCancellation>",
+				description: "Stop an installation this manager owns and wait until its files are back.",
+				parameters: [{
+					name: "requestId",
+					description: "The id the installation was started with."
+				}],
+				returns: "`cancelled` once pnpm exited and the files are restored, `too-late` once the bundle is being applied, `not-running` for any other id."
+			},
+			{
+				signature: "@Remote removeBundle(name: string): Promise<ChangeResult>",
+				description: "Unload and remove a profile-owned bundle dependency through dsh plugin's pnpm path.",
+				parameters: [{
+					name: "name",
+					description: "Installed dependency name."
+				}],
+				returns: "Removal diagnostics and the remaining profile state."
+			}
+		]
+	},
+	{
+		key: "profileContext",
+		summary: "Current profile facts; scheduling and mutation belong to their callers.",
+		description: "Current profile facts; scheduling and mutation belong to their callers.",
+		methods: [
+			{
+				signature: "readonly packageManager?: ProfilePnpmInvocation",
+				description: "Packaged applications supply their bundled runtime instead of a PATH executable.",
+				parameters: []
+			},
+			{
+				signature: "readonly startedBundles: readonly string[]",
+				description: "Bundle packages used to start this process, before any persisted edits.",
+				parameters: []
+			},
+			{
+				signature: "readonly overlays: readonly PatchOptions[]",
+				description: "Parsed command-line overlays, applied above profile and home patches.",
+				parameters: []
+			},
+			{
+				signature: "readonly telemetryDisabledEnv: string | undefined",
+				description: "Launch-time DSH_TELEMETRY_DISABLED value; any non-empty value opts out.",
+				parameters: []
+			}
+		]
+	},
 	{
 		key: "ptcRuntime",
 		summary: "Registers one `ctx.ptcRuntime` implementation.",
@@ -2550,8 +2853,8 @@ const SERVICE_API = [
 				returns: "the durable attachment reference and base64-encoded bytes."
 			},
 			{
-				signature: "@Remote('updateQueue') updateQueue(request: SessionUpdateQueueRequest): SessionUpdateQueueValue",
-				description: "Mutate one still-pending queue occurrence on a live Agent.",
+				signature: "@Remote('updateQueue') updateQueue(request: SessionUpdateQueueRequest): Promise<SessionUpdateQueueValue>",
+				description: "Mutate one still-pending queue occurrence, resuming a cold Agent first.",
 				parameters: [{
 					name: "request",
 					description: "Session, queue item, and requested mutation."
@@ -3122,7 +3425,7 @@ const SERVICE_API = [
 		methods: [
 			{
 				signature: "async listCandidates( agent: Agent, query: string = '', limit: number = this.config.candidateLimit, signal?: AbortSignal, ): Promise<SessionReferenceCandidate[]>",
-				description: "List reference candidates, ranked by working-directory affinity.\n\nDiscovery runs at keystroke rate, so a title only ever comes from a projection read: see SessionReferenceResolver.projectedTitle for which sessions can answer one and which fall back to their id.",
+				description: "List reference candidates, ranked by working-directory affinity.\n\nDiscovery runs at keystroke rate, so titles and subagent labels only ever come from projection reads; sessions without either fall back to their id.",
 				parameters: [
 					{
 						name: "agent",
@@ -3130,7 +3433,7 @@ const SERVICE_API = [
 					},
 					{
 						name: "query",
-						description: "optional case-insensitive session-id/cwd/title substring."
+						description: "optional case-insensitive session-id/cwd/title/display-title substring."
 					},
 					{
 						name: "limit",
@@ -3141,7 +3444,7 @@ const SERVICE_API = [
 						description: "optional cancellation boundary for host autocomplete teardown."
 					}
 				],
-				returns: "candidates labeled by latest title or, when absent, session id."
+				returns: "candidates with canonical mention labels and presentation titles."
 			},
 			{
 				signature: "@Remote('candidates') async remoteExportCandidates( agent: Agent, query: string, signal: AbortSignal, ): Promise<SessionReferenceMentionCandidate[]>",
@@ -3907,6 +4210,15 @@ const SERVICE_API = [
 		summary: "Named provider registry with one-shot runs, durable discovery, and continuable-child operations.",
 		description: "Named provider registry with one-shot runs, durable discovery, and continuable-child operations.",
 		methods: [
+			{
+				signature: "resolveMaxDepth(configured?: number | 'provider-managed'): number | undefined",
+				description: "Resolve a delegation tool's depth policy against the current user setting.",
+				parameters: [{
+					name: "configured",
+					description: "Explicit tool limit, or provider-managed for external delegation."
+				}],
+				returns: "The numeric limit, or undefined when the provider owns depth enforcement."
+			},
 			{
 				signature: "async startContinuable(spec: ContinuableStartSpec): Promise<ContinuableStart>",
 				description: "Establish one durable continuable child and deliver its initial prompt. Resolves when the child's inbox accepts that prompt, without waiting for the turn to start or for the message to reach the Session log; any earlier failure rejects with no ids and rolls back the child entirely.",
@@ -4017,7 +4329,7 @@ const SERVICE_API = [
 			},
 			{
 				signature: "@Remote('prompt') async prompt(request: SubagentPromptRequest, signal: AbortSignal): Promise<SubagentPromptReceipt>",
-				description: "Deliver one browser-authored message to a continuable child through the exact live direct parent, retaining the caller-minted request identity and validated browser zone on the accepted message. Success identifies the message the child's inbox accepted; later execution is independent of this call. Queue delivery targets a later turn; steer delivery targets the nearest step and retains the Agent loop's best-effort fallback semantics. Image parts are admitted and persisted through the attachment store before delivery, and the child's model must accept image input.",
+				description: "Deliver one browser-authored message to a continuable child through the exact live direct parent, retaining the caller-minted request identity and validated browser zone on the accepted message. Success identifies the message the child's inbox accepted; later execution is independent of this call. Queue delivery targets a later turn; steer delivery targets the nearest step and retains the Agent loop's best-effort fallback semantics. Image parts are admitted and persisted through the attachment store before delivery, and the child's model must accept image input. Cold resume at capacity rejects with `subagent/delivery-unavailable`.",
 				parameters: [{
 					name: "request",
 					description: "durable address, delivery, minted identity, content, and optional browser zone."
@@ -4259,7 +4571,7 @@ const SERVICE_API = [
 			},
 			{
 				signature: "@Remote async create(agent: Agent, request: TerminalCreateRequest, signal: AbortSignal): Promise<WebTerminalInfo>",
-				description: "Allocate an interactive shell once for a caller-generated identity.",
+				description: "Allocate a user shell once for a caller-generated identity, without Agent sandbox or approval restrictions.",
 				parameters: [
 					{
 						name: "agent",
@@ -4276,6 +4588,25 @@ const SERVICE_API = [
 				],
 				returns: "the existing or newly committed terminal."
 			},
+			{
+				signature: "@Remote({ mode: 'stream' }) retain(sessionId: SessionId, id: WebTerminalId, signal: AbortSignal): AsyncIterable<TerminalRetentionFrame>",
+				description: "Retain an existing terminal for a window without activating its Agent or taking input control.",
+				parameters: [
+					{
+						name: "sessionId",
+						description: "owning Session identity, including an inactive saved layout."
+					},
+					{
+						name: "id",
+						description: "retained Host terminal identity."
+					},
+					{
+						name: "signal",
+						description: "physical Remote stream cancellation."
+					}
+				],
+				returns: "a hold acknowledgement followed by an open lifetime stream."
+			},
 			{
 				signature: "@Remote({ mode: 'stream' }) follow(agent: Agent, id: WebTerminalId, attachmentId: TerminalAttachmentId, signal: AbortSignal): AsyncIterable<TerminalFrame>",
 				description: "Attach to a terminal without binding its process lifetime to the transport.",
@@ -4987,6 +5318,46 @@ const SERVICE_API = [
 			returns: "the live run; its `result` resolves when the script settles."
 		}]
 	},
+	{
+		key: "workspaceChanges",
+		summary: "Serves the summaries and file comparisons the recorder keeps for live Sessions.",
+		description: "Serves the summaries and file comparisons the recorder keeps for live Sessions.",
+		methods: [{
+			signature: "summary(sessionId: SessionId, seq: number): WorkspaceChangesSummary | undefined",
+			description: "The summary announced by one `workspace/changes` event.",
+			parameters: [{
+				name: "sessionId",
+				description: "the Session that appended the event."
+			}, {
+				name: "seq",
+				description: "the event's sequence number."
+			}],
+			returns: "the summary, or undefined once its Session was disposed or when this Host never recorded it."
+		}, {
+			signature: "diff(sessionId: SessionId, seq: number, index: number, signal: AbortSignal): Promise<WorkspaceFileDiff | undefined>",
+			description: "Compare one listed file's contents at turn start and turn end.",
+			parameters: [
+				{
+					name: "sessionId",
+					description: "the Session that appended the event."
+				},
+				{
+					name: "seq",
+					description: "the event's sequence number."
+				},
+				{
+					name: "index",
+					description: "the file's index in the summary's `files`."
+				},
+				{
+					name: "signal",
+					description: "cancels the reads."
+				}
+			],
+			returns: "the comparison, or undefined once its Session was disposed, when this Host never recorded it, or when no file has that index.",
+			throws: ["when a snapshot read fails for a live Session."]
+		}]
+	},
 	{
 		key: "workspaceController",
 		summary: "Host service backing the generated `ctx.remote.workspace` namespace.",
@@ -5564,6 +5935,27 @@ const EVENT_API = [
 			description: "delegate to the next recovery listener."
 		}]
 	},
+	{
+		name: "connection/request",
+		mode: "waterfall",
+		signature: "'connection/request'(request: IncomingMessage, response: ServerResponse, next: () => Promise<void>): Promise<void>",
+		summary: "Admit or wrap an authenticated shared API request, including body transfer.",
+		description: "Admit or wrap an authenticated shared API request, including body transfer. Existing requests continue when a listener refuses subsequent requests.",
+		parameters: [
+			{
+				name: "request",
+				description: "Authenticated incoming HTTP request."
+			},
+			{
+				name: "response",
+				description: "Response owned until the delegated bridge settles."
+			},
+			{
+				name: "next",
+				description: "Delegate to the next listener or the shared API bridge."
+			}
+		]
+	},
 	{
 		name: "cordis/dynamic-package",
 		mode: "emit",
@@ -5745,6 +6137,28 @@ const EVENT_API = [
 			description: ".change - fresh current projection or clear tombstone."
 		}]
 	},
+	{
+		name: "hmr/change",
+		mode: "emit",
+		signature: "'hmr/change'(url: string): void",
+		summary: "A watched file has no module or configuration handler.",
+		description: "A watched file has no module or configuration handler.",
+		parameters: [{
+			name: "url",
+			description: "Canonical file URL."
+		}]
+	},
+	{
+		name: "hmr/reload",
+		mode: "emit",
+		signature: "'hmr/reload'(reloads: Map<Plugin, Reload>): void",
+		summary: "Module replacements have finished loading.",
+		description: "Module replacements have finished loading.",
+		parameters: [{
+			name: "reloads",
+			description: "Replaced plugins and their module locations."
+		}]
+	},
 	{
 		name: "llm/adapters-updated",
 		mode: "emit",
@@ -5772,6 +6186,39 @@ const EVENT_API = [
 		description: "The selectable process catalog changed. Payload-free by design: consumers subscribe first, then re-read the complete catalog.",
 		parameters: []
 	},
+	{
+		name: "plugin-manager/changed",
+		mode: "emit",
+		signature: "'plugin-manager/changed'(change: PluginChange): void",
+		summary: "The profile's plugins, bundles, or composition changed: a manager operation completed.",
+		description: "The profile's plugins, bundles, or composition changed: a manager operation completed. A patch generation applied outside the manager, by HMR's watcher after a CLI or hand edit, announces nothing here.",
+		parameters: [{
+			name: "change",
+			description: "what changed."
+		}]
+	},
+	{
+		name: "plugin-manager/install-log",
+		mode: "emit",
+		signature: "'plugin-manager/install-log'(chunk: PluginInstallLogChunk): void",
+		summary: "One chunk of a pnpm run's output, streamed as the run produces it.",
+		description: "One chunk of a pnpm run's output, streamed as the run produces it.",
+		parameters: [{
+			name: "chunk",
+			description: "the chunk and the run it belongs to."
+		}]
+	},
+	{
+		name: "plugin-manager/install-state",
+		mode: "emit",
+		signature: "'plugin-manager/install-state'(progress: PluginInstallProgress): void",
+		summary: "An installation moved between its Host phases.",
+		description: "An installation moved between its Host phases.",
+		parameters: [{
+			name: "progress",
+			description: "the installation's request id and phase."
+		}]
+	},
 	{
 		name: "session-telemetry/record",
 		mode: "waterfall",
@@ -6196,7 +6643,7 @@ const TYPE_API = [
 	},
 	{
 		name: "ApiSessionAgentError",
-		declaration: "export type ApiSessionAgentError = RemoteError<'session/not-found' | 'session/agent-busy' | 'gateway/internal'>;"
+		declaration: "export type ApiSessionAgentError = RemoteError<'session/not-found' | 'session/agent-busy' | 'session/writer-held' | 'gateway/internal'>;"
 	},
 	{
 		name: "ApiSessionAgentResult",
@@ -6228,7 +6675,7 @@ const TYPE_API = [
 	},
 	{
 		name: "AskUserQuestionIntent",
-		declaration: "export type AskUserQuestionIntent = {\n    kind: 'plan-review';\n    approve: string;\n};"
+		declaration: "export type AskUserQuestionIntent = {\n    kind: 'plan-review';\n    approve: string;\n    callId?: ToolCallId;\n};"
 	},
 	{
 		name: "AskUserQuestionItem",
@@ -6395,11 +6842,23 @@ const TYPE_API = [
 		declaration: "export type BrowserUseProviderName = Branded<'BrowserUseProviderName'>;"
 	},
 	{
-		name: "ClientArtifactBaseline",
-		declaration: "export interface ClientArtifactBaseline {\n    readonly path: string;\n    readonly mtimeMs: number;\n    readonly size: number;\n}"
+		name: "BundleInfo",
+		declaration: "export interface BundleInfo {\n    name: string;\n    version?: string;\n    description?: string;\n    enabled: boolean;\n    installed: boolean;\n    optional: boolean;\n    removable: boolean;\n    readOnlyReason?: ReadOnlyReason;\n    error?: ManagementError;\n    rows: BundleRowInfo[];\n    overrides: string[];\n}"
 	},
 	{
-		name: "CollectedOutput",
+		name: "BundleRowInfo",
+		declaration: "export interface BundleRowInfo {\n    rowId: string;\n    moduleName: string;\n    entryId?: PluginEntryId;\n}"
+	},
+	{
+		name: "ChangeResult",
+		declaration: "export interface ChangeResult {\n    changed: boolean;\n    application: 'applied' | 'restart-required' | 'overridden' | 'failed' | 'cancelled';\n    stage: 'install' | 'enable' | 'remove';\n    target: string;\n    enabled?: boolean;\n    error?: ManagementError;\n    warnings?: string[];\n    packageResult?: PackageResult;\n    bundle?: string;\n    pendingBuilds?: string[];\n    approvedBuilds?: string[];\n}"
+	},
+	{
+		name: "ClientArtifactBaseline",
+		declaration: "export interface ClientArtifactBaseline {\n    readonly path: string;\n    readonly mtimeMs: number;\n    readonly size: number;\n}"
+	},
+	{
+		name: "CollectedOutput",
 		declaration: "export interface CollectedOutput {\n    text: string;\n    truncated: boolean;\n    spillPath?: string;\n}"
 	},
 	{
@@ -6474,6 +6933,54 @@ const TYPE_API = [
 		name: "ConfinedSandboxMode",
 		declaration: "export type ConfinedSandboxMode = Exclude<SandboxMode, 'danger-full-access'>;"
 	},
+	{
+		name: "ConnectionFetchHandler",
+		declaration: "export interface ConnectionFetchHandler {\n    requestBodyMode(request: {\n        readonly method: string;\n        readonly url: URL;\n    }): ConnectionRequestBodyMode;\n    fetch(request: Request): Promise<Response>;\n}"
+	},
+	{
+		name: "ConnectionFetchMethod",
+		declaration: "export type ConnectionFetchMethod = 'GET' | 'HEAD' | 'POST';"
+	},
+	{
+		name: "ConnectionFetchRoute",
+		declaration: "export interface ConnectionFetchRoute {\n    readonly path: string;\n    readonly methods: readonly ConnectionFetchMethod[];\n    readonly requestBody: ConnectionRequestBodyMode;\n    readonly fetch: (request: Request) => Promise<Response>;\n}"
+	},
+	{
+		name: "ConnectionIndexRequest",
+		declaration: "export interface ConnectionIndexRequest extends ConnectionTrustRequest {\n    readonly method?: string | undefined;\n    readonly url?: string | undefined;\n}"
+	},
+	{
+		name: "ConnectionIndexResponse",
+		declaration: "export interface ConnectionIndexResponse {\n    writeHead(status: number, headers?: Readonly<Record<string, string>>): unknown;\n    end(body?: string): unknown;\n}"
+	},
+	{
+		name: "ConnectionRequestBodyMode",
+		declaration: "export type ConnectionRequestBodyMode = 'buffered' | 'streaming';"
+	},
+	{
+		name: "ConnectionRequestRejection",
+		declaration: "export type ConnectionRequestRejection = 401 | 403 | undefined;"
+	},
+	{
+		name: "ConnectionRpcEndpointMatcher",
+		declaration: "export type ConnectionRpcEndpointMatcher = (endpoint: string) => boolean;"
+	},
+	{
+		name: "ConnectionRpcFailure",
+		declaration: "export interface ConnectionRpcFailure {\n    readonly code: string;\n    readonly message: string;\n    readonly details: object;\n}"
+	},
+	{
+		name: "ConnectionRpcHandler",
+		declaration: "export type ConnectionRpcHandler = (endpoint: string, payload: unknown, signal: AbortSignal) => Promise<ConnectionRpcResult<unknown>>;"
+	},
+	{
+		name: "ConnectionRpcResult",
+		declaration: "export type ConnectionRpcResult<T> = {\n    readonly ok: true;\n    readonly value: T;\n} | {\n    readonly ok: false;\n    readonly error: ConnectionRpcFailure;\n};"
+	},
+	{
+		name: "ConnectionTrustRequest",
+		declaration: "export interface ConnectionTrustRequest {\n    readonly headers: Headers | Readonly<Record<string, string | readonly string[] | undefined>>;\n}"
+	},
 	{
 		name: "ContentBlockMap",
 		declaration: "export interface ContentBlockMap {\n    'text': TextBlock;\n    'reasoning': ReasoningBlock;\n    'image': ImageBlock;\n    'file': FileBlock;\n    'tool-call': ToolCallBlock;\n    'tool-result': ToolResultBlock;\n}"
@@ -6768,7 +7275,7 @@ const TYPE_API = [
 	},
 	{
 		name: "FiberState",
-		declaration: "export type FiberState = FiberStateEnum;"
+		declaration: "export const enum FiberState {\n    PENDING,\n    LOADING,\n    ACTIVE,\n    FAILED,\n    DISPOSED,\n    UNLOADING\n}"
 	},
 	{
 		name: "FileAttachmentRef",
@@ -6906,6 +7413,14 @@ const TYPE_API = [
 		name: "GrantRecord",
 		declaration: "export interface GrantRecord {\n    readonly kind: 'grant';\n    readonly payload: unknown;\n}"
 	},
+	{
+		name: "HostConnectionFetch",
+		declaration: "export interface HostConnectionFetch {\n    register(route: ConnectionFetchRoute): () => Promise<void>;\n}"
+	},
+	{
+		name: "HostConnectionRpc",
+		declaration: "export interface HostConnectionRpc {\n    handle(channel: string, handler: ConnectionRpcHandler): () => Promise<void>;\n    intercept(channel: '/api', matches: ConnectionRpcEndpointMatcher, handler: ConnectionRpcHandler): () => Promise<void>;\n}"
+	},
 	{
 		name: "ImageAttachmentLimits",
 		declaration: "export interface ImageAttachmentLimits {\n    maxImageBytes: number;\n    maxImagesPerMessage: number;\n    maxMessageImageBytes: number;\n    maxImagePixels: number;\n    maxImageDimension: number;\n    mediaTypes: readonly ImageMediaType[];\n}"
@@ -6954,6 +7469,14 @@ const TYPE_API = [
 		name: "InspectorJsonValue",
 		declaration: "export type InspectorJsonValue = InspectorJsonPrimitive | readonly InspectorJsonValue[] | InspectorJsonObject;"
 	},
+	{
+		name: "InstallBundleOptions",
+		declaration: "export interface InstallBundleOptions {\n    enabled?: boolean;\n    requestId?: PluginInstallRequestId;\n    approvedBuilds?: string[];\n}"
+	},
+	{
+		name: "InstallSpecKind",
+		declaration: "export type InstallSpecKind = 'registry' | 'path' | 'git' | 'tarball';"
+	},
 	{
 		name: "InvariantFailure",
 		declaration: "export type InvariantFailure = (message: string) => never;"
@@ -7076,7 +7599,7 @@ const TYPE_API = [
 	},
 	{
 		name: "LlmDiscoveredModel",
-		declaration: "export interface LlmDiscoveredModel {\n    id: string;\n    name?: string;\n    contextWindow?: number;\n    maxTokens?: number;\n}"
+		declaration: "export interface LlmDiscoveredModel {\n    id: string;\n    name?: string;\n    contextWindow?: number;\n    maxTokens?: number;\n    inputModalities?: readonly ModelModality[];\n}"
 	},
 	{
 		name: "LlmFailure",
@@ -7162,6 +7685,10 @@ const TYPE_API = [
 		name: "LspRange",
 		declaration: "export interface LspRange {\n    readonly start: LspPosition;\n    readonly end: LspPosition;\n}"
 	},
+	{
+		name: "ManagementError",
+		declaration: "export interface ManagementError {\n    code: ReadOnlyReason | 'unknown-plugin' | 'invalid-spec' | 'ambiguous-install' | 'not-bundle' | 'not-removable' | 'stop-profile' | 'bundle-in-use' | 'stale-approval' | 'operation-error';\n    diagnostic?: string;\n}"
+	},
 	{
 		name: "ManualCompactAgentContext",
 		declaration: "export interface ManualCompactAgentContext extends CompactionAgentContext {\n    runMaintenance<T>(task: (signal: AbortSignal) => Promise<T>): Promise<T>;\n}"
@@ -7306,6 +7833,34 @@ const TYPE_API = [
 		name: "ObjectJsonSchema",
 		declaration: "export type ObjectJsonSchema = JsonSchemaNode & {\n    type: 'object';\n};"
 	},
+	{
+		name: "OfficeExtension",
+		declaration: "export type OfficeExtension = 'doc' | 'docx' | 'xls' | 'xlsx' | 'ppt' | 'pptx';"
+	},
+	{
+		name: "OfficeSourceKey",
+		declaration: "export type OfficeSourceKey = Branded<'OfficeSourceKey'>;"
+	},
+	{
+		name: "OfficeToPdfGeneration",
+		declaration: "export type OfficeToPdfGeneration = Branded<'OfficeToPdfGeneration'>;"
+	},
+	{
+		name: "OfficeToPdfKey",
+		declaration: "export type OfficeToPdfKey = Branded<'OfficeToPdfKey'>;"
+	},
+	{
+		name: "OfficeToPdfPriority",
+		declaration: "export type OfficeToPdfPriority = 'foreground' | 'background';"
+	},
+	{
+		name: "OfficeToPdfRequest",
+		declaration: "export interface OfficeToPdfRequest {\n    readonly extension: OfficeExtension;\n    readonly priority: OfficeToPdfPriority;\n    readonly source: {\n        readonly key: OfficeSourceKey;\n        readonly version: string;\n        readonly bytes?: number;\n        read(signal: AbortSignal, maxBytes: number): Promise<{\n            readonly bytes: Uint8Array;\n            readonly version: string;\n        }>;\n    };\n}"
+	},
+	{
+		name: "OfficeToPdfResult",
+		declaration: "export interface OfficeToPdfResult {\n    readonly pdf: Uint8Array;\n    readonly missingFonts: string[];\n    readonly cacheKey: OfficeToPdfKey;\n    readonly generation: OfficeToPdfGeneration;\n}"
+	},
 	{
 		name: "OneShotSubagentDescriptorData",
 		declaration: "export interface OneShotSubagentDescriptorData extends SubagentDescriptorBase {\n    readonly mode: 'one-shot';\n    readonly label?: string;\n}"
@@ -7314,10 +7869,62 @@ const TYPE_API = [
 		name: "OptionalSessionSeq",
 		declaration: "export type OptionalSessionSeq = SessionSeq | null;"
 	},
+	{
+		name: "PackageResult",
+		declaration: "export interface PackageResult {\n    exitCode: number;\n    output: string;\n    truncated: boolean;\n    logPath: string;\n    kind?: PluginInstallFailureKind;\n}"
+	},
 	{
 		name: "PermissionCatalog",
 		declaration: "export interface PermissionCatalog {\n    options: PresetOption[];\n}"
 	},
+	{
+		name: "PluginChange",
+		declaration: "export interface PluginChange {\n    readonly reason: 'plugin' | 'bundle' | 'install' | 'remove';\n}"
+	},
+	{
+		name: "PluginEntryId",
+		declaration: "export type PluginEntryId = Branded<'PluginEntryId'>;"
+	},
+	{
+		name: "PluginFiberPhase",
+		declaration: "export type PluginFiberPhase = 'pending' | 'loading' | 'active' | 'failed' | 'unloading' | null;"
+	},
+	{
+		name: "PluginInfo",
+		declaration: "export type PluginInfo = PluginInventoryEntry & ({\n    patchId: string;\n    readOnlyReason?: never;\n} | {\n    patchId?: never;\n    readOnlyReason: ReadOnlyReason;\n});"
+	},
+	{
+		name: "PluginInspectProblem",
+		declaration: "export type PluginInspectProblem = 'invalid-spec' | 'already-installed' | 'not-found' | 'not-a-package' | 'not-a-bundle' | 'network' | 'unknown';"
+	},
+	{
+		name: "PluginInstallCancellation",
+		declaration: "export interface PluginInstallCancellation {\n    readonly status: 'cancelled' | 'too-late' | 'not-running';\n}"
+	},
+	{
+		name: "PluginInstallFailureKind",
+		declaration: "export type PluginInstallFailureKind = 'pnpm-missing' | 'timeout' | 'not-found' | 'no-matching-version' | 'network' | 'disk-full' | 'permission' | 'build-blocked' | 'integrity' | 'unknown';"
+	},
+	{
+		name: "PluginInstallLogChunk",
+		declaration: "export interface PluginInstallLogChunk {\n    readonly requestId?: PluginInstallRequestId;\n    readonly jobId: string;\n    readonly argv: readonly string[];\n    readonly cwd: string;\n    readonly stream: 'stdout' | 'stderr';\n    readonly text: string;\n    readonly exitCode?: number | null;\n}"
+	},
+	{
+		name: "PluginInstallProgress",
+		declaration: "export interface PluginInstallProgress {\n    readonly requestId: PluginInstallRequestId;\n    readonly phase: 'installing' | 'cancelling' | 'applying';\n}"
+	},
+	{
+		name: "PluginInstallRequestId",
+		declaration: "export type PluginInstallRequestId = Branded<'PluginInstallRequestId'>;"
+	},
+	{
+		name: "PluginInventoryEntry",
+		declaration: "export interface PluginInventoryEntry {\n    readonly entryId: PluginEntryId;\n    readonly moduleName: string;\n    readonly enabled: boolean;\n    readonly fiberPhase: PluginFiberPhase;\n}"
+	},
+	{
+		name: "PluginSpecInspection",
+		declaration: "export type PluginSpecInspection = {\n    readonly status: 'accepted';\n    readonly kind: InstallSpecKind;\n    readonly name?: string;\n    readonly version?: string;\n    readonly description?: string;\n    readonly bundle: boolean | null;\n} | {\n    readonly status: 'refused';\n    readonly problem: PluginInspectProblem;\n    readonly reason: string;\n};"
+	},
 	{
 		name: "PostToolDecision",
 		declaration: "export type PostToolDecision = {\n    kind: 'accept';\n    content?: ContentBlock[];\n    value?: never;\n    additionalContexts?: UserMessage[];\n} | {\n    kind: 'accept';\n    value: JsonValue;\n    content?: never;\n    additionalContexts?: UserMessage[];\n} | {\n    kind: 'block';\n    feedback: ContentBlock[];\n    additionalContexts?: UserMessage[];\n};"
@@ -7366,6 +7973,10 @@ const TYPE_API = [
 		name: "PreToolDecision",
 		declaration: "export type PreToolDecision = {\n    kind: 'allow';\n} | {\n    kind: 'deny';\n    reason: string;\n    info?: ToolErrorInfo;\n} | {\n    kind: 'cancel';\n} | {\n    kind: 'ask';\n    reason?: string;\n};"
 	},
+	{
+		name: "ProfilePnpmInvocation",
+		declaration: "export interface ProfilePnpmInvocation {\n    readonly command: string;\n    readonly args: readonly string[];\n    readonly env: Readonly<Record<string, string>>;\n}"
+	},
 	{
 		name: "ProjectionChangeListener",
 		declaration: "export type ProjectionChangeListener = (session: Session, key: Extract<keyof SessionProjectionMap, string>, value: unknown, seq: SessionSeq) => void;"
@@ -7462,10 +8073,18 @@ const TYPE_API = [
 		name: "PtcRunSpec",
 		declaration: "export interface PtcRunSpec extends PtcRunRequest {\n    cwd: string;\n    timeoutMs: number | null;\n}"
 	},
+	{
+		name: "QueueAction",
+		declaration: "export type QueueAction = {\n    readonly kind: 'edit';\n    readonly content: readonly ContentBlock[];\n} | {\n    readonly kind: 'remove';\n} | {\n    readonly kind: 'steer';\n};"
+	},
 	{
 		name: "ReadFileLine",
 		declaration: "export interface ReadFileLine {\n    number: number;\n    text: string;\n}"
 	},
+	{
+		name: "ReadOnlyReason",
+		declaration: "export type ReadOnlyReason = 'management-required' | 'unaddressable';"
+	},
 	{
 		name: "ReadResultView",
 		declaration: "export interface ReadResultView {\n    card: 'read';\n    title?: string;\n    path: string;\n    offset: number;\n    lines: ReadFileLine[];\n    totalLines: number;\n    lang?: string;\n    content?: ContentBlock[];\n}"
@@ -7482,6 +8101,10 @@ const TYPE_API = [
 		name: "RedactedSecret",
 		declaration: "export interface RedactedSecret {\n    path: string[];\n    set: boolean;\n}"
 	},
+	{
+		name: "Reload",
+		declaration: "export interface Reload {\n    filename: string;\n    runtime?: Plugin.Runtime | undefined;\n}"
+	},
 	{
 		name: "RemoteError",
 		declaration: "export class RemoteError<Code extends RemoteErrorCode = RemoteErrorCode> extends Error {\n    readonly isDSHRemoteError: true;\n    constructor(readonly code: Code, message: string, readonly details: RemoteErrorDetailsMap[Code], options?: ErrorOptions);\n}"
@@ -7498,6 +8121,10 @@ const TYPE_API = [
 		name: "RemoteEventHostInfo",
 		declaration: "export interface RemoteEventHostInfo {\n    readonly home: string;\n}"
 	},
+	{
+		name: "RenderedDocumentBytes",
+		declaration: "export interface RenderedDocumentBytes extends WorkspaceFileBytes {\n    readonly missingFonts: string[];\n    readonly generation: OfficeToPdfGeneration;\n}"
+	},
 	{
 		name: "ReplayEnvelope",
 		declaration: "export interface ReplayEnvelope {\n    response: unknown;\n    blocks?: readonly unknown[];\n}"
@@ -7554,6 +8181,10 @@ const TYPE_API = [
 		name: "ResumeAgentOptions",
 		declaration: "export interface ResumeAgentOptions {\n    readonly resumeSessionId: SessionId;\n    readonly parentAgent?: Agent;\n    readonly agentOptions?: AgentOptions;\n    readonly signal?: AbortSignal;\n    readonly setup?: AgentSetup;\n}"
 	},
+	{
+		name: "RpcId",
+		declaration: "export type RpcId = Branded<'rpc-id'>;"
+	},
 	{
 		name: "RunnerFailureRule",
 		declaration: "export interface RunnerFailureRule {\n    allowedExitCodes?: readonly number[];\n    fatalSignatures: readonly string[];\n    informationalLines?: readonly string[];\n}"
@@ -7638,6 +8269,10 @@ const TYPE_API = [
 		name: "SendTeamMessageResult",
 		declaration: "export interface SendTeamMessageResult {\n    readonly messageId: TeamMessageId;\n    readonly status: 'accepted' | 'queued';\n}"
 	},
+	{
+		name: "ServerResponse",
+		declaration: "export interface ServerResponse {\n    readonly type: 'server-response';\n    readonly rpcId: RpcId;\n    readonly result: ConnectionRpcResult<unknown>;\n}"
+	},
 	{
 		name: "Session",
 		declaration: "export class Session {\n    get surface(): SessionSurface;\n    readonly header: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    get id(): SessionId;\n    readonly firstLiveSeq: SessionLogOffset;\n    static create(id: SessionId, seed?: readonly SessionEvent[], header?: SessionHeader, inheritedEventCount?: SessionLogOffset, projections?: readonly SessionMessageProjection[]): Session;\n    static fromRestore(id: SessionId, seed: readonly SessionEvent[], header: SessionHeader, inheritedEventCount: SessionLogOffset, eventState: SessionSeedEventState, projections?: readonly SessionMessageProjection[]): Session;\n    eventAt(seq: SessionSeq): SessionEvent | undefined;\n    snapshotEvents(fromSeq: SessionLogOffset = SessionLogOffset(0), toSeqExclusive: SessionLogOffset = this.seq): readonly SessionEvent[];\n    ownEvents(): readonly SessionEvent[];\n    isOwnSeq(seq: SessionSeq): boolean;\n    get seq(): SessionLogOffset;\n    append<T extends SessionEventType>(type: T, data: SessionEventMap[T], ...opts: T extends SurfaceEventType ? [\n        opts: SurfaceIntent<T>\n    ] : [\n    ]): SessionEvent<T>;\n    requestHeader(): EpochHeader | undefined;\n    requestContext(): RequestContext | undefined;\n    deriveMessages(): Message[];\n    deriveEventMessage(event: SessionEvent): Message | null;\n}"
@@ -7684,11 +8319,11 @@ const TYPE_API = [
 	},
 	{
 		name: "SessionControlBaseline",
-		declaration: "export interface SessionControlBaseline {\n    readonly queues: Readonly<Record<SessionId, readonly SessionQueuedItem[]>>;\n    readonly jobs: Readonly<Record<SessionId, readonly SessionJob[]>>;\n    readonly projections: Readonly<Record<SessionId, SessionProjectionBaseline>>;\n}"
+		declaration: "export interface SessionControlBaseline {\n    readonly jobs: Readonly<Record<SessionId, readonly SessionJob[]>>;\n    readonly projections: Readonly<Record<SessionId, SessionProjectionBaseline>>;\n}"
 	},
 	{
 		name: "SessionControlFrame",
-		declaration: "export type SessionControlFrame = {\n    readonly type: 'baseline';\n    readonly value: SessionControlBaseline;\n} | {\n    readonly type: 'queue';\n    readonly sessionId: SessionId;\n    readonly items: readonly SessionQueuedItem[];\n} | {\n    readonly type: 'jobs';\n    readonly sessionId: SessionId;\n    readonly jobs: readonly SessionJob[];\n} | ({\n    readonly type: 'projection';\n} & SessionProjectionUpdate);"
+		declaration: "export type SessionControlFrame = {\n    readonly type: 'baseline';\n    readonly value: SessionControlBaseline;\n} | {\n    readonly type: 'jobs';\n    readonly sessionId: SessionId;\n    readonly jobs: readonly SessionJob[];\n} | ({\n    readonly type: 'projection';\n} & SessionProjectionUpdate);"
 	},
 	{
 		name: "SessionCreateRequest",
@@ -7958,17 +8593,13 @@ const TYPE_API = [
 		name: "SessionPromptValue",
 		declaration: "export interface SessionPromptValue {\n    readonly accepted: true;\n}"
 	},
-	{
-		name: "SessionQueuedItem",
-		declaration: "export interface SessionQueuedItem {\n    readonly id: MessageId;\n    readonly placement: 'queued' | 'steering' | 'context';\n    readonly rpcId?: SessionRequestId;\n    readonly message: {\n        readonly id: MessageId;\n        readonly content: readonly JsonValue[];\n    };\n}"
-	},
 	{
 		name: "SessionRecord",
 		declaration: "export interface SessionRecord {\n    header: SessionHeader;\n    live: boolean;\n    persisted: boolean;\n}"
 	},
 	{
 		name: "SessionReferenceCandidate",
-		declaration: "export interface SessionReferenceCandidate {\n    sessionId: SessionId;\n    label: string;\n    cwd?: string;\n    sameWorkspace: boolean;\n    createdAt: number;\n}"
+		declaration: "export interface SessionReferenceCandidate {\n    sessionId: SessionId;\n    label: string;\n    displayTitle?: string;\n    cwd?: string;\n    sameWorkspace: boolean;\n    createdAt: number;\n}"
 	},
 	{
 		name: "SessionReferenceInput",
@@ -8388,7 +9019,7 @@ const TYPE_API = [
 	},
 	{
 		name: "SubagentRuntime",
-		declaration: "export class SubagentRuntime extends TypertRemoteService {\n    constructor(ctx: Context);\n    async startContinuable(spec: ContinuableStartSpec): Promise<ContinuableStart>;\n    async sendMessage(sender: Agent, targetId: SessionId, content: ContentBlock[], options: SubagentSendMessageOptions): Promise<MessageId>;\n    interrupt(targetSessionId: SessionId, authority: SubagentInterruptAuthority): void;\n    async drainContinuableDescendants(parents: readonly Agent[]): Promise<void>;\n    async drainContinuableChildren(parent: Agent, childIds: readonly SessionId[]): Promise<void>;\n    listChildren(parentSessionId: SessionId, signal?: AbortSignal): Promise<SubagentListEntry[]>;\n    listDescendants(rootSessionId: SessionId, signal?: AbortSignal): Promise<SubagentDescendantListEntry[]>;\n    @Remote('list')\n    async remoteExportList(parentSessionId: SessionId, signal: AbortSignal): Promise<SubagentCatalog>;\n    @Remote('prompt')\n    async prompt(request: SubagentPromptRequest, signal: AbortSignal): Promise<SubagentPromptReceipt>;\n    @Remote('interruptByParent')\n    interruptByParent(childSessionId: SessionId, parentSessionId: SessionId, mode: 'continuable'): SubagentInterruptReceipt;\n    registerProvider(provider: SubagentProvider): () => void;\n    getProvider(name: string): SubagentProvider | undefined;\n    list(): string[];\n    async start(name: string, request: SubagentStartRequest): Promise<SubagentRun>;\n}"
+		declaration: "export class SubagentRuntime extends TypertRemoteService {\n    static Config: z<Config>;\n    constructor(ctx: Context, config: Config);\n    resolveMaxDepth(configured?: number | 'provider-managed'): number | undefined;\n    async startContinuable(spec: ContinuableStartSpec): Promise<ContinuableStart>;\n    async sendMessage(sender: Agent, targetId: SessionId, content: ContentBlock[], options: SubagentSendMessageOptions): Promise<MessageId>;\n    interrupt(targetSessionId: SessionId, authority: SubagentInterruptAuthority): void;\n    async drainContinuableDescendants(parents: readonly Agent[]): Promise<void>;\n    async drainContinuableChildren(parent: Agent, childIds: readonly SessionId[]): Promise<void>;\n    listChildren(parentSessionId: SessionId, signal?: AbortSignal): Promise<SubagentListEntry[]>;\n    listDescendants(rootSessionId: SessionId, signal?: AbortSignal): Promise<SubagentDescendantListEntry[]>;\n    @Remote('list')\n    async remoteExportList(parentSessionId: SessionId, signal: AbortSignal): Promise<SubagentCatalog>;\n    @Remote('prompt')\n    async prompt(request: SubagentPromptRequest, signal: AbortSignal): Promise<SubagentPromptReceipt>;\n    @Remote('interruptByParent')\n    interruptByParent(childSessionId: SessionId, parentSessionId: SessionId, mode: 'continuable'): SubagentInterruptReceipt;\n    registerProvider(provider: SubagentProvider): () => void;\n    getProvider(name: string): SubagentProvider | undefined;\n    list(): string[];\n    async start(name: string, re /* …truncated — full shape in source */"
 	},
 	{
 		name: "SubagentSendMessageOptions",
@@ -8446,6 +9077,10 @@ const TYPE_API = [
 		name: "SubprocessStdio",
 		declaration: "export interface SubprocessStdio {\n    stdin: SubprocessStdinMode;\n    stdout: SubprocessOutputMode;\n    stderr: SubprocessOutputMode;\n    control?: 'pipe';\n}"
 	},
+	{
+		name: "SubprocessTerminalActivity",
+		declaration: "export interface SubprocessTerminalActivity {\n    state: 'idle' | 'busy' | 'unknown';\n    revision: number;\n}"
+	},
 	{
 		name: "SubprocessTerminalEnvironment",
 		declaration: "export interface SubprocessTerminalEnvironment {\n    platform: 'posix' | 'windows';\n    defaultShell?: string;\n}"
@@ -8456,7 +9091,7 @@ const TYPE_API = [
 	},
 	{
 		name: "SubprocessTerminalHandle",
-		declaration: "export interface SubprocessTerminalHandle {\n    readonly pid: number;\n    readonly output: Readable;\n    readonly done: Promise<SubprocessOutcome>;\n    write(data: string): Promise<void>;\n    resize(cols: number, rows: number): Promise<void>;\n    inspectForeground(): Promise<SubprocessTerminalForeground | undefined>;\n    signalForeground(signal: SubprocessTerminalSignal): Promise<number>;\n    terminate(): Promise<void>;\n}"
+		declaration: "export interface SubprocessTerminalHandle {\n    readonly pid: number;\n    readonly output: Readable;\n    readonly done: Promise<SubprocessOutcome>;\n    write(data: string): Promise<void>;\n    resize(cols: number, rows: number): Promise<void>;\n    inspectForeground(): Promise<SubprocessTerminalForeground | undefined>;\n    inspectActivity(): Promise<SubprocessTerminalActivity>;\n    signalForeground(signal: SubprocessTerminalSignal): Promise<number>;\n    terminate(): Promise<void>;\n}"
 	},
 	{
 		name: "SubprocessTerminalSignal",
@@ -8464,7 +9099,7 @@ const TYPE_API = [
 	},
 	{
 		name: "SubprocessTerminalSpawnSpec",
-		declaration: "export interface SubprocessTerminalSpawnSpec {\n    argv: readonly string[];\n    cwd: string;\n    env?: Record<string, string> | undefined;\n    rows: number;\n    cols: number;\n    terminalType: string;\n    graceMs: number;\n    signal?: AbortSignal | undefined;\n}"
+		declaration: "export interface SubprocessTerminalSpawnSpec {\n    argv: readonly string[];\n    cwd: string;\n    env?: Record<string, string> | undefined;\n    rows: number;\n    cols: number;\n    terminalType: string;\n    shellActivity?: boolean | undefined;\n    graceMs: number;\n    signal?: AbortSignal | undefined;\n}"
 	},
 	{
 		name: "SurfaceEvent",
@@ -8590,6 +9225,10 @@ const TYPE_API = [
 		name: "TerminalResultView",
 		declaration: "export interface TerminalResultView {\n    card: 'terminal';\n    title?: string;\n    output?: string;\n    exitCode?: number;\n    signal?: string;\n}"
 	},
+	{
+		name: "TerminalRetentionFrame",
+		declaration: "export interface TerminalRetentionFrame {\n    readonly type: 'retained';\n}"
+	},
 	{
 		name: "TerminalSendOperation",
 		declaration: "export interface TerminalSendOperation {\n    done: Promise<TerminalSendResult>;\n    readOutput(): TerminalSendRead;\n    cancel(): boolean;\n}"
@@ -9082,6 +9721,14 @@ const TYPE_API = [
 		name: "WorkspaceByteRange",
 		declaration: "export interface WorkspaceByteRange {\n    readonly offset?: number;\n    readonly length?: number;\n}"
 	},
+	{
+		name: "WorkspaceChangedFile",
+		declaration: "export interface WorkspaceChangedFile {\n    path: string;\n    display: string;\n    added: number;\n    deleted: number;\n    binary?: true;\n    oversized?: true;\n}"
+	},
+	{
+		name: "WorkspaceChangesSummary",
+		declaration: "export interface WorkspaceChangesSummary {\n    turn: number;\n    cwd: string;\n    files: WorkspaceChangedFile[];\n    total: number;\n    added: number;\n    deleted: number;\n    snapshot?: {\n        before: string;\n        after: string;\n    };\n}"
+	},
 	{
 		name: "WorkspaceCreateRequest",
 		declaration: "export interface WorkspaceCreateRequest {\n    readonly path: string;\n}"
@@ -9098,6 +9745,10 @@ const TYPE_API = [
 		name: "WorkspaceDeleteValue",
 		declaration: "export interface WorkspaceDeleteValue {\n    readonly deleted: true;\n}"
 	},
+	{
+		name: "WorkspaceDiffHunk",
+		declaration: "export interface WorkspaceDiffHunk {\n    oldStart: number;\n    oldLines: number;\n    newStart: number;\n    newLines: number;\n    lines: string[];\n}"
+	},
 	{
 		name: "WorkspaceDirectoryEntry",
 		declaration: "export interface WorkspaceDirectoryEntry {\n    readonly name: string;\n    readonly type: 'file' | 'directory' | 'other';\n    readonly size?: number;\n}"
@@ -9114,6 +9765,10 @@ const TYPE_API = [
 		name: "WorkspaceFileChange",
 		declaration: "export type WorkspaceFileChange = {\n    readonly absolutePath: string;\n    readonly version: string;\n} | {\n    readonly absolutePath: string;\n    readonly absent: true;\n};"
 	},
+	{
+		name: "WorkspaceFileDiff",
+		declaration: "export type WorkspaceFileDiff = {\n    kind: 'text';\n    path: string;\n    display: string;\n    before: boolean;\n    after: boolean;\n    hunks: WorkspaceDiffHunk[];\n    coarse: boolean;\n} | {\n    kind: 'binary';\n    path: string;\n    display: string;\n} | {\n    kind: 'oversized';\n    path: string;\n    display: string;\n};"
+	},
 	{
 		name: "WorkspaceFileRange",
 		declaration: "export interface WorkspaceFileRange {\n    readonly offset?: number;\n    readonly limit?: number;\n}"
@@ -9258,261 +9913,6 @@ function queryEventApi(name, events = EVENT_API) {
 	};
 }
 //#endregion
-//#region lib/types/fiber-state.js
-/**
-* Runtime mirror and labels for Cordis's `FiberState` const enum. A const enum has no runtime
-* object to import, so these values mirror the pinned vendored definition while retaining its
-* type.
-* @module @deepseek-ai/dsh-tool-cordis/fiber-state
-*/
-/** Value mirror of the cordis `FiberState` const enum (see the module doc for why a mirror exists). */
-const FiberState = {
-	PENDING: 0,
-	LOADING: 1,
-	ACTIVE: 2,
-	FAILED: 3,
-	DISPOSED: 4,
-	UNLOADING: 5
-};
-FiberState.PENDING, FiberState.LOADING, FiberState.ACTIVE, FiberState.FAILED, FiberState.DISPOSED, FiberState.UNLOADING;
-//#endregion
-//#region lib/types/inspect.js
-/** The live service registrations, read from the reflect store. */
-function liveImpls(ctx) {
-	const store = ctx.reflect.store;
-	return Object.getOwnPropertySymbols(store).map((key) => store[key]).filter((impl) => impl !== void 0);
-}
-/**
-* Whether a fiber is `root` itself or mounted anywhere inside `root`'s subtree.
-* @param fiber - the fiber to locate.
-* @param root - the subtree root to test against.
-* @returns true when `fiber` belongs to that subtree.
-*/
-function withinFiber(fiber, root) {
-	let current = fiber;
-	while (true) {
-		if (current === root) return true;
-		const parent = current.parent.fiber;
-		if (parent === current) return false;
-		current = parent;
-	}
-}
-/**
-* Service names provided by one mount's fiber subtree.
-* @param ctx - the runtime whose service registrations are inspected.
-* @param fiber - the root of the mounted fiber subtree.
-* @returns the provided service names in lexical order.
-*/
-function providedServices(ctx, fiber) {
-	return liveImpls(ctx).filter((impl) => withinFiber(impl.fiber, fiber)).map((impl) => impl.name).sort();
-}
-/**
-* Services a fiber declared in `inject` that do not exist yet — a settled fiber
-* that is not active is waiting on exactly these (legal cordis semantics: it
-* activates when the service appears).
-* @param ctx - the context to resolve service existence against.
-* @param fiber - the fiber whose `inject` declarations are checked.
-* @returns the missing service names, in declaration order.
-*/
-function missingServices(ctx, fiber) {
-	return Object.keys(fiber.inject).filter((service) => ctx.get(service) === void 0);
-}
-//#endregion
-//#region lib/types/present.js
-/**
-* Render provider-directory inspection.
-* @returns replay-safe generic call presentation.
-*/
-function presentInspectListCall() {
-	return {
-		card: "generic",
-		kind: "read",
-		title: "List Cordis Inspect Providers"
-	};
-}
-/**
-* Render one provider query.
-* @param args - target platform, provider, and method.
-* @returns replay-safe generic call presentation.
-*/
-function presentInspectQueryCall(args) {
-	return {
-		card: "generic",
-		kind: "read",
-		title: `Query Cordis ${args.platform} ${args.provider}.${args.method}`
-	};
-}
-/**
-* Render layered self-inspection.
-* @param args - optional Plugin and Package identity.
-* @returns replay-safe generic call presentation.
-*/
-function presentInspectSelfCall(args) {
-	return {
-		card: "generic",
-		kind: "read",
-		title: `Inspect ${args.pluginId === void 0 ? "dynamic Cordis Plugins" : args.packageId === void 0 ? args.pluginId : `${args.pluginId}/${args.packageId}`}`
-	};
-}
-/**
-* Render a new or appended Package definition.
-* @param args - target Plugin, Package metadata, and source halves.
-* @returns replay-safe generic call presentation with source in raw input.
-*/
-function presentDefineCall(args) {
-	const target = args.plugin.kind === "new" ? `new ${args.plugin.idPrefix}-*` : args.plugin.pluginId;
-	return {
-		card: "generic",
-		kind: "execute",
-		title: `Register Cordis Plugin "${args.name}" for ${target}: ${args.purpose}`,
-		rawInput: args.code
-	};
-}
-/**
-* Render Plugin removal.
-* @param args - Plugin identity to remove.
-* @returns replay-safe generic call presentation.
-*/
-function presentUndefineCall(args) {
-	return {
-		card: "generic",
-		kind: "delete",
-		title: `Remove Cordis Plugin ${args.pluginId}`
-	};
-}
-/**
-* Render one exact Package activation.
-* @param args - Plugin, Package, and activation mode.
-* @returns replay-safe generic call presentation.
-*/
-function presentRunCall(args) {
-	return {
-		card: "generic",
-		kind: "execute",
-		title: `${args.mode === "update" ? "Update" : "Run"} Cordis Plugin ${args.pluginId} · ${args.packageId}`
-	};
-}
-/**
-* Render Plugin stop.
-* @param args - Plugin identity to stop.
-* @returns replay-safe generic call presentation.
-*/
-function presentStopCall(args) {
-	return {
-		card: "generic",
-		kind: "execute",
-		title: `Stop Cordis Plugin ${args.pluginId}`
-	};
-}
-//#endregion
-//#region lib/types/prompt.js
-/** Model guidance shared by the Cordis dynamic-plugin tools. */
-const CORDIS_SYSTEM_PROMPT = `# Dynamic Cordis Plugins
-
-Dynamic Cordis plugins temporarily extend the current DSH process. A Plugin uses apply(ctx) to consume Services, listen to Events, provide Services, register model Tools, or register browser UI in Slots.
-
-- Plugin and Package definitions exist only in the current process. define itself does not modify repository source, configuration, or disk, and definitions do not survive a process restart.
-- The restricted execution environment prevents accidental misuse; it is not a security boundary for malicious code. Services obtained by dynamic code connect to the real runtime.
-
-## Make the user-facing plan clear first
-
-- Dynamic Cordis Plugins are one available implementation mechanism, not the default for every request. Consider whether one could help only when the user intends to design or create something, or when a temporary interface could materially aid the current work. The presence of these instructions or Tools, and discussion of Cordis itself, do not make a request a dynamic-Plugin task.
-- When Cordis is a plausible fit, infer the intended work target and lifetime from the request and conversation. Use it only when the outcome belongs to the current running harness and should be delivered as a temporary runtime extension. If that distinction is materially ambiguous, ask at most one concise question about the intended result or lifetime. Otherwise proceed with the matching workflow; do not require the user to know or choose Cordis as an implementation mechanism.
-- Once a dynamic Plugin is appropriate, decide whether the task creates a new Plugin or modifies the Plugin named by the user with @pluginId. Proceed directly when the goal is clear; do not ask for repeated confirmation.
-- Choose Host, Client, or both from the requested outcome. Do not propose a Client/browser UI when the task does not need visible page behavior, and do not avoid Client when the requested outcome is visual, interactive, or depends on page state. Host versus Client is an implementation choice; do not make the user choose it.
-- When a design direction or a potentially useful interface would materially affect the result, ask at most one concise outcome or creative-preference question and offer a few candidate directions. Otherwise proceed directly; do not conduct a multi-round interview or a complex questionnaire.
-- cordis_define only defines and presents code; it does not run it. After definition, explain the pluginId and packageId returned by the Host and whether the next step is a run or update.
-- cordis_run may require user approval. When it returns awaiting-approval, explain that the user must allow or reject it in the UI. Do not wait, retry, or claim that it is running.
-- When it returns starting, explain that the request has entered the asynchronous flow and the Client is still activating. starting does not mean success. Wait for the system to report the final result through steering context.
-- Do not request approval again after the user rejects it. After a technical failure, fix the same Plugin from its diagnostics; do not silently create a replacement Plugin.
-
-## Recommended workflow and Tools
-
-Before creating, modifying, or repairing a Plugin, load the cordis-plugin-development Skill. The Skill provides requirement navigation, capability composition, complete examples, and troubleshooting. Treat Inspect Provider results as the source of truth for exact APIs.
-
-1. cordis_inspect_list: discover the current Host and Client Providers and their read-only query methods.
-2. cordis_inspect_query: use the returned platform, provider, method, and schema to query exact Service, Event, Builtin, Slot, Theme token, or Tool information.
-3. cordis_inspect_self: inspect the current Session's Plugins, Packages, version pointers, source, and diagnostics. Source is returned only when both pluginId and packageId are specified.
-4. cordis_define: create the first Package for a new Plugin or append an immutable Package to an existing Plugin. It defines code but does not run it.
-5. cordis_run: activate an exact Package. Use run for the first activation, restarting current, or rollback; use update to switch versions.
-6. cordis_stop: remove the current Run and pending approval request while retaining definitions, grants, and version pointers.
-7. cordis_undefine: permanently stop and delete a Plugin and all of its Packages. Use it only after confirming that the user no longer needs them.
-
-- Inspect and Catalog data only confirm capabilities, names, signatures, types, and registration protocols before code is written; they do not replace business APIs.
-- Query Service.listService and Event.listEvents without input to choose from their compact signature directories, then query the exact service or event before using it. Exact queries return the structured contract and only its referenced types.
-- At runtime, a Plugin must call real Services or listen to real Events. Do not cache, display, or depend on Inspect results as business data.
-
-## Identity, versions, and approval
-
-- pluginId identifies a Plugin that can be modified over time. For a new Plugin, submit only a semantic idPrefix of 3–6 lowercase English letters; the Host allocates the final ID.
-- packageId identifies one immutable Host/Client source version under a Plugin. To change code, define a new Package; never overwrite an old version.
-- pluginRunId identifies one activation attempt and connects its approval, Host/Client loading, private RPC, Run card, and errors.
-- currentPackageId is the most recent fully successful Package. Stopping, starting an update, or failing an update does not clear it.
-- nextPackageId is the target awaiting approval, being attempted, awaiting Client activation, or most recently failed.
-- A single check mark authorizes only the current Package; double check marks authorize future versions of the same Plugin. A grant remains in effect after a technical failure.
-- An update stops the old Run before starting the target Package. Failure does not automatically restart the old version; retry next with update or roll back to current with run.
-
-When the user enters @pluginId, the system injects identity, the default base Package, version pointers, and runtime status, but not source code:
-
-1. Call cordis_inspect_self(pluginId, packageId) to read the target source.
-2. Use cordis_define in existing mode to append a Package to the same Plugin.
-3. Call cordis_run in run or update mode according to the version relationship.
-
-Never silently create another Plugin for @pluginId. If the reference is unavailable because it was removed, belongs to another Session, or was lost on process restart, tell the user directly.
-
-## High-frequency errors that must be avoided
-
-### Services: ctx.get and inject
-
-- Read an optional Service with ctx.get('serviceName') by default and handle undefined.
-- Declare inject: ['serviceName'] on the returned Plugin object only when the Service is a hard dependency and the Plugin must enter waiting until Cordis reactivates it after the Service appears.
-- Read ctx.serviceName only after declaring that Service in inject. Never access an undeclared Service as a ctx property.
-
-\`\`\`js
-return {
-  inject: ['requiredService'],
-  apply(ctx) {
-    ctx.requiredService.someMethod()
-    const optionalService = ctx.get('optionalService')
-    if (optionalService !== undefined) optionalService.someMethod()
-  },
-}
-\`\`\`
-
-### Code: use plain JavaScript only
-
-- Host and Client code is not transformed by TypeScript, JSX, or a bundler.
-- Do not use TypeScript types, as, decorators, import, require, or JSX.
-- Client React code must use React.createElement(...); never write <Component />.
-- Do not assume that process, Buffer, window, document, fetch, native timers, or any other global is available. Query the corresponding platform's Builtins and Services first.
-
-### Data: do not serialize live data
-
-- Services, Events, Slots, Sessions, and their derived Cordis/DSH objects are internal live data, not ordinary JSON that can be dumped.
-- Do not apply JSON.stringify, structuredClone, recursive enumeration, full copying, or whole-object display to live data.
-- Read only the leaf fields required by the task, then construct the smallest owned data object without Host references.
-
-### Lifecycle: every side effect must be reversible
-
-- Services, Events, Tools, handlers, timers, Slots, styles, and theme overrides must all belong to the current Fiber.
-- Use ctx.effect(), ctx.on(), or official APIs that return a disposer so stop, update, or undefine removes every side effect.
-- The cordis-plugin-development Skill contains complete timer, Waterfall, Slot, theme, Tool, RPC, and React examples and troubleshooting guidance.
-
-## Host and Client
-
-- Host runs in the DSH Node.js process and is appropriate for files, networking, commands, Agent/Session access, Host Events, Services, model Tools, and JSON methods callable by the Client.
-- Client runs in the browser page and is appropriate for themes, layout, current page state, Tool cards, and Slot UI.
-- Host and Client communicate through Package-private JSON methods: Host uses harness.handle(method, handler), and Client uses host.call(method, args). The direction is Client→Host, and only lossless JSON may cross it.
-- Client UI must be registered in a queried Slot; apply() cannot directly return a React Element. Query Slots.listSubTree without root to choose from the compact purpose/topology tree, then query the exact root for its full registration contract and props before writing code.
-- See the Skill and Inspect Providers for Run-specific panels and exact Slot registration patterns.
-
-## Asynchronous results and recovery
-
-- Do not wait inside a Tool for approval or browser work that can happen only after the current turn ends.
-- Asynchronous success, rejection, and runtime errors update Run state and notify you through steering context.
-- After a technical failure, use cordis_inspect_self to read the exact Package source and its message/stack. Define a corrected Package under the same Plugin and retry autonomously.
-- Use the cordis-plugin-development Skill for other failure causes, repair procedures, and complete extension patterns.`;
-//#endregion
 //#region lib/types/providers.js
 /** First-party Host inspect providers registered by the Cordis tool package. */
 const EMPTY_INPUT = {
@@ -9592,22 +9992,19 @@ function readExact(input, field) {
 }
 //#endregion
 //#region lib/types/index.js
-/**
-* Model-facing Cordis runtime/package inspection, define, run, stop, and remove tools.
-* @module @deepseek-ai/dsh-tool-cordis
-*/
 const name = "tool-cordis";
 const inject = [
 	"tools",
 	"systemPrompt",
-	"dynamicCordisRunner",
 	"cordisInspect"
 ];
 function requireAgent(exec) {
-	if (exec.agent === void 0) throw new Error("Cordis dynamic tools require an Agent-backed session");
+	if (exec.agent === void 0) throw new Error("Cordis inspection requires an Agent-backed session");
 	return exec.agent;
 }
-/** Register the Cordis tools and explicit `@pluginId` context injection. */
+/** Register read-only runtime inspection tools.
+* @param ctx Agent-scoped registration context.
+*/
 function apply(ctx) {
 	ctx.systemPrompt.section({
 		name: "tool:cordis",
@@ -9617,7 +10014,7 @@ function apply(ctx) {
 	for (const provider of hostInspectProviders(ctx)) ctx.effect(() => ctx.cordisInspect.register(provider), `tool-cordis: inspect ${provider.manifest.id}`);
 	ctx.tools.register(defineTool({
 		name: "cordis_inspect_list",
-		description: "List every Cordis Inspect Provider currently known to the Host, including local Host Providers and the latest manifests synchronized from the Client. Each entry includes its platform, purpose, read-only methods, and input/output schemas. Call this Tool before creating or modifying a Package, then select the provider and method for cordis_inspect_query from its result. Do not guess names or treat an Inspect method as a business Service that Plugin code can call.",
+		description: "List every Cordis Inspect Provider currently known to the Host, including local Host Providers and the latest manifests synchronized from the Client. Each entry includes its platform, purpose, read-only methods, and input/output schemas. Call this Tool before writing or configuring a plugin, then select the provider and method for cordis_inspect_query from its result. Do not guess names or treat an Inspect method as a business Service that Plugin code can call.",
 		parameters: {},
 		output: {
 			schema: { type: "json" },
@@ -9633,7 +10030,7 @@ function apply(ctx) {
 	}));
 	ctx.tools.register(defineTool({
 		name: "cordis_inspect_query",
-		description: "Run a read-only query explicitly declared by an Inspect Provider. platform, provider, and method must come from cordis_inspect_list, and input must satisfy that method's schema. Use this Tool before cordis_define to read exact Service methods, Event modes, Builtin signatures, Tool schemas, theme tokens, or live Slot trees and props. Host queries run locally. A Client query waits for the first valid page response and remains pending until a page answers or the Tool is cancelled. This Tool cannot invoke business Service methods or modify the runtime. For Service.listService and Event.listEvents, query without input to navigate the compact signature directory, then query the exact service or event for its structured contract and referenced types. For Slots.listSubTree, query without root to navigate the compact tree, then query the exact root for its complete registration contract and props.",
+		description: "Run a read-only query explicitly declared by an Inspect Provider. platform, provider, and method must come from cordis_inspect_list, and input must satisfy that method's schema. Use this Tool before writing plugin code to read exact Service methods, Event modes, Builtin signatures, Tool schemas, theme tokens, or live Slot trees and props. Host queries run locally. A Client query waits for the first valid page response and remains pending until a page answers or the Tool is cancelled. This Tool cannot invoke business Service methods or modify the runtime. For Service.listService and Event.listEvents, query without input to navigate the compact signature directory, then query the exact service or event for its structured contract and referenced types. For Slots.listSubTree, query without root to navigate the compact tree, then query an exact Slot root for its complete registration contract and props; an exact Factory root returns its identity, scope, and registrant.",
 		parameters: {
 			platform: {
 				type: "string",
@@ -9674,458 +10071,6 @@ function apply(ctx) {
 		},
 		presentCall: presentInspectQueryCall
 	}));
-	ctx.tools.register(defineTool({
-		name: "cordis_inspect_self",
-		description: "Inspect dynamic Cordis objects owned by the current Session at increasing levels of detail. With no IDs, list only Plugin summaries. With pluginId alone, return version pointers, the latest Run, and every Package summary. Only pluginId plus packageId returns that immutable Package's Host/Client source and runtime diagnostics. packageId cannot be supplied alone. Query an exact Package before handling @pluginId, repairing an asynchronous failure, or defining an updated version. This Tool is read-only: it neither executes code nor changes version pointers.",
-		parameters: {
-			pluginId: {
-				type: "string",
-				description: "Stable Plugin ID returned by cordis_define or injected by @pluginId; omit it to list every current Plugin."
-			},
-			packageId: {
-				type: "string",
-				description: "Exact immutable Package ID owned by pluginId; when specified, source and diagnostics are returned."
-			}
-		},
-		output: {
-			schema: { type: "json" },
-			render: (_args, value) => [{
-				type: "text",
-				text: JSON.stringify(value, null, 2)
-			}]
-		},
-		execute(args, exec) {
-			const agent = requireAgent(exec);
-			if (args.packageId !== void 0 && args.pluginId === void 0) throw new Error("cordis_inspect_self packageId requires pluginId");
-			if (args.pluginId === void 0) return Promise.resolve({
-				mode: "plugins",
-				plugins: ctx.dynamicCordisRunner.listPlugins(agent).map((reference) => selfSummary(reference))
-			});
-			const pluginId = CordisDynamicPluginId(args.pluginId);
-			if (args.packageId === void 0) {
-				const plugin = ctx.dynamicCordisRunner.inspectPlugin(agent, pluginId);
-				return Promise.resolve({
-					mode: "plugin",
-					...selfSummary(plugin),
-					packages: plugin.packages.map((pkg) => ({
-						...pkg,
-						packageId: String(pkg.packageId),
-						isCurrent: pkg.packageId === plugin.currentPackageId,
-						isNext: pkg.packageId === plugin.nextPackageId
-					}))
-				});
-			}
-			return Promise.resolve(inspectSelfPackage(ctx, agent, pluginId, CordisDynamicPackageId(args.packageId)));
-		},
-		presentCall: presentInspectSelfCall
-	}));
-	ctx.tools.register(defineTool({
-		name: "cordis_define",
-		description: "Define an immutable Cordis Package. For a new Plugin, use kind:\"new\" and provide only a semantic prefix of 3–6 lowercase English letters; the Host returns the final pluginId and packageId. To modify an existing Plugin, use kind:\"existing\" with its exact pluginId to append a Package without overwriting older versions. Provide at least one of code.host and code.client. Each value is a plain JavaScript function body that returns a Cordis Plugin; no TypeScript, JSX, or import transformation occurs. Query Inspect before depending on a Service, Event, Builtin, Slot, or token. Define only validates parameters and syntax and records source: it does not request approval, execute apply, or change currentPackageId. On success, call cordis_run with the returned IDs.",
-		parameters: {
-			plugin: {
-				required: true,
-				oneOf: [{
-					type: "object",
-					additionalProperties: false,
-					properties: {
-						kind: {
-							type: "string",
-							const: "new",
-							required: true
-						},
-						idPrefix: {
-							type: "string",
-							required: true,
-							description: "Suggested semantic prefix of 3–6 lowercase English letters; the Host adds a unique numeric suffix."
-						}
-					}
-				}, {
-					type: "object",
-					additionalProperties: false,
-					properties: {
-						kind: {
-							type: "string",
-							const: "existing",
-							required: true
-						},
-						pluginId: {
-							type: "string",
-							required: true,
-							description: "Exact ID of an existing Plugin; the new Package is appended to that instance."
-						}
-					}
-				}]
-			},
-			name: {
-				type: "string",
-				required: true,
-				description: "Short, readable Package name."
-			},
-			purpose: {
-				type: "string",
-				required: true,
-				description: "One-sentence, user-facing description of the Package purpose."
-			},
-			code: {
-				type: "object",
-				additionalProperties: false,
-				required: true,
-				properties: {
-					host: {
-						type: "string",
-						description: "Plain JavaScript function body that returns the Host-half Cordis Plugin."
-					},
-					client: {
-						type: "string",
-						description: "Plain JavaScript function body that returns the browser Client-half Cordis Plugin."
-					}
-				}
-			}
-		},
-		output: {
-			schema: {
-				type: "object",
-				additionalProperties: false,
-				properties: {
-					pluginId: {
-						type: "string",
-						required: true
-					},
-					packageId: {
-						type: "string",
-						required: true
-					},
-					name: {
-						type: "string",
-						required: true
-					},
-					purpose: {
-						type: "string",
-						required: true
-					},
-					hasHostHalf: {
-						type: "boolean",
-						required: true
-					},
-					hasClientHalf: {
-						type: "boolean",
-						required: true
-					}
-				}
-			},
-			render: (_args, value) => [{
-				type: "text",
-				text: `Defined ${value.pluginId}/${value.packageId} (${value.name}); it is not running yet. Use cordis_run to activate this Package.`
-			}],
-			presentationMeta: (_args, value) => ({
-				pluginId: value.pluginId,
-				packageId: value.packageId
-			})
-		},
-		execute(args, exec) {
-			const plugin = args.plugin.kind === "new" ? {
-				kind: "new",
-				idPrefix: args.plugin.idPrefix
-			} : {
-				kind: "existing",
-				pluginId: CordisDynamicPluginId(args.plugin.pluginId)
-			};
-			const receipt = ctx.dynamicCordisRunner.define({
-				sessionId: requireAgent(exec).id,
-				plugin,
-				name: args.name,
-				purpose: args.purpose,
-				code: {
-					...args.code.host === void 0 ? {} : { host: args.code.host },
-					...args.code.client === void 0 ? {} : { client: args.code.client }
-				}
-			});
-			return Promise.resolve({
-				...receipt,
-				pluginId: String(receipt.pluginId),
-				packageId: String(receipt.packageId)
-			});
-		},
-		presentCall: presentDefineCall
-	}));
-	ctx.tools.register(defineTool({
-		name: "cordis_run",
-		description: "Activate one exact Package of a dynamic Plugin. Use mode:\"run\" for the first activation, restarting currentPackageId, or rollback. When current exists, use mode:\"update\" to switch to a different Package, even if the Plugin is currently stopped. An unauthorized Client Package creates an approval request and returns awaiting-approval; an authorized Package returns starting and continues asynchronously in the browser. Neither result waits for the final outcome inside the Tool. currentPackageId changes only after complete success; on failure, the old current and target next remain. Asynchronous success, rejection, or technical failure is reported through state and steering. After a technical failure, read diagnostics with cordis_inspect_self, correct the same Plugin, and retry autonomously. Do not request approval again after the user rejects it.",
-		parameters: {
-			pluginId: {
-				type: "string",
-				required: true,
-				description: "Stable Plugin ID returned by cordis_define."
-			},
-			packageId: {
-				type: "string",
-				required: true,
-				description: "Exact immutable Package ID to activate under that Plugin."
-			},
-			mode: {
-				type: "string",
-				required: true,
-				enum: ["run", "update"],
-				description: "Use run for the first activation, restarting current, or rollback; use update to switch from current to a different Package."
-			}
-		},
-		output: {
-			schema: { type: "json" },
-			render: (_args, value) => {
-				const result = requireJsonObject(value);
-				const pluginId = requireJsonString(result, "pluginId");
-				const packageId = requireJsonString(result, "packageId");
-				const pluginRunId = requireJsonString(result, "pluginRunId");
-				return [{
-					type: "text",
-					text: result.status === "awaiting-approval" ? `${pluginId}/${packageId} is awaiting user approval (${pluginRunId}).` : result.status === "starting" ? `${pluginId}/${packageId} is starting asynchronously (${pluginRunId}).` : `${pluginId}/${packageId} is running (${pluginRunId}).`
-				}];
-			},
-			presentationMeta: (_args, value) => {
-				const result = requireJsonObject(value);
-				return {
-					pluginId: requireJsonString(result, "pluginId"),
-					packageId: requireJsonString(result, "packageId"),
-					pluginRunId: requireJsonString(result, "pluginRunId")
-				};
-			}
-		},
-		async execute(args, exec) {
-			const agent = requireAgent(exec);
-			const pluginId = CordisDynamicPluginId(args.pluginId);
-			const packageId = CordisDynamicPackageId(args.packageId);
-			const receipt = await ctx.dynamicCordisRunner.run(agent, pluginId, packageId, args.mode, exec.signal);
-			if (!receipt.ok) throw new Error(receipt.message);
-			if (receipt.status !== "running") return {
-				status: receipt.status,
-				pluginId: args.pluginId,
-				packageId: args.packageId,
-				pluginRunId: String(receipt.pluginRunId),
-				mode: receipt.mode,
-				...receipt.currentPackageId === void 0 ? {} : { currentPackageId: String(receipt.currentPackageId) },
-				nextPackageId: String(receipt.nextPackageId)
-			};
-			const row = ctx.dynamicCordisRunner.snapshot(agent).find((candidate) => candidate.pluginId === pluginId);
-			const fiber = row?.activeRun?.pluginRunId === receipt.pluginRunId ? row.activeRun.fiber : void 0;
-			return {
-				status: "running",
-				pluginId: args.pluginId,
-				packageId: args.packageId,
-				pluginRunId: String(receipt.pluginRunId),
-				currentPackageId: String(receipt.currentPackageId),
-				...receipt.nextPackageId === void 0 ? {} : { nextPackageId: String(receipt.nextPackageId) },
-				host: {
-					status: fiber === void 0 ? "absent" : missingServices(ctx, fiber).length === 0 ? "running" : "waiting",
-					provides: fiber === void 0 ? [] : providedServices(ctx, fiber),
-					waitingFor: fiber === void 0 ? [] : missingServices(ctx, fiber)
-				},
-				client: {
-					status: receipt.clientWaitingFor === void 0 ? "absent" : receipt.clientWaitingFor.length === 0 ? "running" : "waiting",
-					waitingFor: [...receipt.clientWaitingFor ?? []]
-				}
-			};
-		},
-		presentCall: presentRunCall
-	}));
-	ctx.tools.register(defineTool({
-		name: "cordis_stop",
-		description: "Stop the current Run of a dynamic Plugin and cancel unfinished approval or activation requests. Retain the Plugin, every immutable Package, grants, currentPackageId, and nextPackageId so it can later run or update directly. Stopping an already stopped Plugin succeeds idempotently. Use this Tool to disable effects temporarily; use cordis_undefine for permanent removal.",
-		parameters: { pluginId: {
-			type: "string",
-			required: true,
-			description: "Stable dynamic Plugin ID to stop."
-		} },
-		output: {
-			schema: {
-				type: "object",
-				additionalProperties: false,
-				properties: { pluginId: {
-					type: "string",
-					required: true
-				} }
-			},
-			render: (_args, value) => [{
-				type: "text",
-				text: `Dynamic Plugin ${value.pluginId} is stopped; its definition and versions remain.`
-			}]
-		},
-		async execute(args, exec) {
-			const receipt = await ctx.dynamicCordisRunner.stop(requireAgent(exec), CordisDynamicPluginId(args.pluginId));
-			if (!receipt.ok && receipt.reason !== "not-running") throw new Error(receipt.message);
-			return { pluginId: args.pluginId };
-		},
-		presentCall: presentStopCall
-	}));
-	ctx.tools.register(defineTool({
-		name: "cordis_undefine",
-		description: "Permanently remove a dynamic Plugin owned by the current Session. If it is running or awaiting approval, first stop it and cancel the request, then delete every Package, grant, and version pointer. After this returns, its pluginId, packageIds, @ reference, and Package business views are invalid; historical cards retain only a \"Plugin removed\" record. Do not call this Tool when versions must remain available for restart or rollback; use cordis_stop instead.",
-		parameters: { pluginId: {
-			type: "string",
-			required: true,
-			description: "Stable dynamic Plugin ID to remove permanently."
-		} },
-		output: {
-			schema: {
-				type: "object",
-				additionalProperties: false,
-				properties: {
-					pluginId: {
-						type: "string",
-						required: true
-					},
-					wasRunning: {
-						type: "boolean",
-						required: true
-					}
-				}
-			},
-			render: (_args, value) => [{
-				type: "text",
-				text: `Removed dynamic Plugin ${value.pluginId} and all of its Packages.`
-			}]
-		},
-		async execute(args, exec) {
-			const receipt = await ctx.dynamicCordisRunner.undefine(requireAgent(exec), CordisDynamicPluginId(args.pluginId));
-			if (!receipt.ok) throw new Error(receipt.message);
-			return {
-				pluginId: args.pluginId,
-				wasRunning: receipt.wasRunning
-			};
-		},
-		presentCall: presentUndefineCall
-	}));
-	ctx.on("agent/pre-step", async ({ agent, messages, signal }, next) => {
-		const decision = await next();
-		if (decision.kind === "reject") return decision;
-		const ids = referencedPluginIds(messages);
-		if (ids.length === 0) return decision;
-		signal.throwIfAborted();
-		const contexts = ids.map((id) => {
-			const reference = ctx.dynamicCordisRunner.reference(agent, CordisDynamicPluginId(id));
-			return createUserMessage({
-				content: [{
-					type: "text",
-					text: reference === void 0 ? renderUnavailableReference(id) : renderReference(reference)
-				}],
-				source: {
-					kind: "plugin",
-					plugin: name,
-					form: "instructions"
-				}
-			});
-		});
-		return {
-			...decision,
-			messages: [...decision.messages, ...contexts]
-		};
-	});
-}
-function requireJsonObject(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("expected a JSON object");
-	return value;
-}
-function requireJsonString(value, key) {
-	const field = value[key];
-	if (typeof field !== "string") throw new Error(`expected JSON string field "${key}"`);
-	return field;
-}
-function selfSummary(reference) {
-	const latest = reference.latestRun;
-	const state = selfState(reference);
-	return {
-		pluginId: String(reference.pluginId),
-		name: reference.name,
-		packageCount: reference.packages?.length ?? 1,
-		state,
-		...reference.currentPackageId === void 0 ? {} : { currentPackageId: String(reference.currentPackageId) },
-		...reference.nextPackageId === void 0 ? {} : { nextPackageId: String(reference.nextPackageId) },
-		...reference.activeRun === void 0 ? {} : { activeRun: {
-			pluginRunId: String(reference.activeRun.pluginRunId),
-			packageId: String(reference.activeRun.packageId)
-		} },
-		...latest?.status !== "awaiting-approval" ? {} : { pendingApproval: {
-			pluginRunId: String(latest.pluginRunId),
-			packageId: String(latest.packageId),
-			mode: latest.mode
-		} }
-	};
-}
-function selfState(reference) {
-	const status = reference.latestRun?.status;
-	if (status === "awaiting-approval") return "awaiting-approval";
-	if (status === "client-pending" || status === "starting-host") return "client-pending";
-	if (status === "failed" || status === "rejected" || status === "cancelled") return "failed";
-	if (status === "waiting") return "waiting";
-	if (status === "running") return "running";
-	if (reference.activeRun !== void 0) return "running";
-	return reference.currentPackageId === void 0 ? "defined" : "stopped";
-}
-function inspectSelfPackage(ctx, agent, pluginId, packageId) {
-	const inspected = ctx.dynamicCordisRunner.inspectPackage(agent, pluginId, packageId);
-	const row = ctx.dynamicCordisRunner.snapshot(agent).find((candidate) => candidate.pluginId === pluginId);
-	const pkg = row?.packages.find((candidate) => candidate.packageId === packageId);
-	const active = row?.activeRun?.packageId === packageId ? row.activeRun : void 0;
-	const latest = inspected.latestRun?.packageId === packageId ? inspected.latestRun : void 0;
-	const hostWaiting = active?.fiber === void 0 ? [...latest?.host.waitingFor ?? []] : missingServices(ctx, active.fiber);
-	const hostStatus = pkg?.hasHostHalf !== true ? "absent" : latest?.host.status ?? (active === void 0 ? "stopped" : hostWaiting.length === 0 ? "running" : "waiting");
-	const clientStatus = pkg?.hasClientHalf !== true ? "absent" : latest?.client.status ?? "stopped";
-	return {
-		mode: "package",
-		plugin: selfSummary(inspected),
-		packageId: String(packageId),
-		name: inspected.name,
-		purpose: inspected.purpose,
-		code: inspected.code,
-		runtime: {
-			state: selfState(inspected),
-			host: {
-				status: hostStatus,
-				provides: active?.fiber === void 0 ? [] : providedServices(ctx, active.fiber),
-				waitingFor: hostWaiting,
-				handlers: active?.handlers ?? [],
-				...latest?.host.error === void 0 ? {} : { error: latest.host.error }
-			},
-			client: {
-				status: clientStatus,
-				waitingFor: [...latest?.client.waitingFor ?? []],
-				...latest?.client.error === void 0 ? {} : { error: latest.client.error },
-				...active?.renderFailure === void 0 ? {} : { renderFailure: active.renderFailure }
-			}
-		}
-	};
-}
-function referencedPluginIds(messages) {
-	const found = /* @__PURE__ */ new Set();
-	const pattern = /(?:^|\s)@([a-z]{3,6}-\d+)(?=\s|$)/g;
-	for (const message of messages) {
-		if (message.source.kind !== "user") continue;
-		const text = message.content.flatMap((block) => block.type === "text" ? [block.text] : []).join("\n");
-		for (const match of text.matchAll(pattern)) if (match[1] !== void 0) found.add(match[1]);
-	}
-	return [...found];
-}
-function renderReference(reference) {
-	const mode = reference.currentPackageId === void 0 ? "run" : "update";
-	return [
-		"<cordis_dynamic_plugin_context>",
-		JSON.stringify(reference, null, 2),
-		"",
-		`The user explicitly referenced @${reference.pluginId}. Use Package ${reference.packageId} as the base for this modification.`,
-		`Before modifying it, call cordis_inspect_self with pluginId="${reference.pluginId}" and packageId="${reference.packageId}" to read the exact metadata and source.`,
-		`Use cordis_define with plugin.kind="existing" and the original pluginId="${reference.pluginId}" to append an immutable Package.`,
-		`Do not create a new Plugin for this request. After cordis_define succeeds, call cordis_run mode="${mode}" with the returned packageId.`,
-		"</cordis_dynamic_plugin_context>"
-	].join("\n");
-}
-function renderUnavailableReference(id) {
-	return [
-		"<cordis_dynamic_plugin_context>",
-		`The user explicitly referenced @${id}, but this Plugin is unavailable in the current Session.`,
-		"It may have been removed, belong to another Session, or have been lost when the DSH process restarted.",
-		"Do not claim that it was updated or silently create a replacement Plugin. Tell the user that the reference is currently unavailable.",
-		"</cordis_dynamic_plugin_context>"
-	].join("\n");
 }
 //#endregion
 export { apply, inject, name };