@songtonyli/dsh-cli 0.1.11 → 0.1.13

package/node_modules/@deepseek-ai/dsh-tui-app/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-tui-app",
   "description": "The dsh terminal-surface bundle: an interactive terminal UI over dsh-base with streaming replies, tool cards, approvals, questions, and slash commands in one process",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -39,20 +39,26 @@
     }
   },
   "dependencies": {
-    "@deepseek-ai/dsh-brand": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-cmdline": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-file-reference": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-file-reference-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-launch-environment": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-native-command": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-log-export": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-reference": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-stats": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-turn-outline": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-ask-user": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-present": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-util-values": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-cmdline": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-file-reference": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-file-reference-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-launch-environment": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-native-command": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-plugin-manager": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-log-export": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-reference": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-stats": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-turn-outline": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-ask-user": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-present": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-user-questions": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-util-values": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-workspace-changes": "0.1.6-alpha.2",
     "@deepseek-ai/schemastery": "3.18.2",
     "@earendil-works/pi-tui": "^0.85.1",
     "commander": "^15.0.0"
@@ -60,57 +66,57 @@
   "peerDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
     "@deepseek-ai/cordis-plugin-loader": "1.0.3",
-    "@deepseek-ai/dsh-agent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-agent-default-model": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-attachment": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-commands": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-compaction": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-goal": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm-retry": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-permission-presets": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-plan-mode": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-persistence": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-projection": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-query": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-stats": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-title": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-settings": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subagent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-token-meter": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-todo": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tools": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-user-approval": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-user-questions": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-attachment": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-commands": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-compaction": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-goal": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm-retry": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-permission-presets": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-plan-mode": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-persistence": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-query": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-stats": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-title": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-settings": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subagent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-token-meter": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-todo": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-user-questions": "0.1.6-alpha.2"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
     "@deepseek-ai/cordis-plugin-include": "1.0.7",
     "@deepseek-ai/cordis-plugin-loader": "1.0.3",
-    "@deepseek-ai/dsh-agent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-agent-default-model": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-attachment": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-commands": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-compaction": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-goal": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm-retry": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-permission-presets": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-plan-mode": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-persistence": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-projection": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-query": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-stats": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-title": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-settings": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subagent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-token-meter": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-todo": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tools": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-user-approval": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-user-questions": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-attachment": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-commands": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-compaction": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-goal": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm-retry": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-permission-presets": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-plan-mode": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-persistence": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-query": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-stats": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-title": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-settings": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subagent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-token-meter": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-todo": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-user-questions": "0.1.6-alpha.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-typert-loader/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-typert-loader",
   "description": "Loader integration for generated Typert package contributions",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -28,16 +28,16 @@
   "license": "MIT",
   "peerDependencies": {
     "@deepseek-ai/cordis-plugin-loader": "1.0.3",
-    "@deepseek-ai/dsh-typert-registry": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-typert-registry": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   },
   "dependencies": {
     "@deepseek-ai/schemastery": "3.18.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-app-boot": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-app-boot": "0.1.6-alpha.2",
     "@deepseek-ai/cordis-plugin-loader": "1.0.3",
-    "@deepseek-ai/dsh-typert-registry": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-typert-registry": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2",
     "zod": "^4.4.3"
   }

package/node_modules/@deepseek-ai/dsh-typert-protocol/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/typert/protocol/README.md
-README.md: 99883e322bf6e528f8fd4effe9c4fc1e418abbdb
-README.zh.md: 429c08587a5297e254ac4c0f3fb9d82fc680a455
+README.md: e41fa9fa305d8f55ce55d3eace647ad5afcea0e3
+README.zh.md: e784e771016ebec0913e0ea847258fe653ae3bd0

package/node_modules/@deepseek-ai/dsh-typert-protocol/README.md

@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-With `dsh-typert-protocol`, business packages can expose Host methods to Remote clients: mark a method with `@Remote` (or `@RemoteScope` for scoped receivers), bind the service to a wire namespace, and associate Host objects and scoped Contexts with wire identities through the merge-extensible protocol maps. Generated artifacts, the Host Gateway, and the Client API consume the same invocation descriptors, codecs, and provider contracts, so one declaration set stays in sync across every face. The package registers no Cordis service and runs no TypeScript analysis; it declares types and decorator markers only.
+With `dsh-typert-protocol`, business packages can expose Host methods to Remote clients: mark a method with `@Remote` (or `@RemoteScope` for scoped receivers), bind the service to a wire namespace, and associate Host objects and scoped Contexts with wire identities through the merge-extensible protocol maps. Generated artifacts, the Host Gateway, and the Client API consume the same invocation descriptors, codecs, and provider contracts. Invocation-owned values transfer cleanup to Gateway without adding a reference count. The package registers no Cordis service and runs no TypeScript analysis.
 
 ## Table of Contents
 
@@ -48,6 +48,8 @@ Generation turns the method into a wire endpoint under the service's namespace;
 
 Complex Host objects cannot cross the wire directly. A business package declares the association through the merge-extensible `TypertLookupMap` and `TypertContextMap`. A Host Context adapter owns the stable wire declaration and resolves wire identities to live Contexts. A Client Context adapter maps in both directions because scoped calls originate from a Client Context and forwarded Host events resolve their explicit wire identity there. Host composition may override its synchronous or asynchronous resolver. A resolver that refuses on policy grounds throws `RemoteError` with its own code, which reaches the caller unchanged.
 
+Client Context resolution is synchronous. `typertOwnedValue(value, release)` transfers a non-throwing, idempotent cleanup to the invocation owner; Gateway calls it after handler and reply settlement. A borrowed Context requires no cleanup wrapper. The shared `TYPERT_OWNED_VALUE` symbol and `isTypertOwnedValue` recognizer work across independently bundled providers and Gateway; the wrapper itself does not retain a resource.
+
 ### Reporting and reading a Remote failure
 
 One class carries every Remote failure: `RemoteError`, holding a stable `<domain>/<reason>` code and the details typed for that code. This package declares the universal carrier codes (`gateway/bad-request`, `gateway/cancelled`, `gateway/internal`) and owns `RemoteErrorDetailsMap`, the merge-extensible table every other package extends beside its own throwing code:

package/node_modules/@deepseek-ai/dsh-typert-protocol/README.zh.md

@@ -9,7 +9,7 @@ kind: "package-library"
 
 ## 概述
 
-借助 `dsh-typert-protocol`，业务包可以向 Remote 客户端暴露 Host 方法：用 `@Remote`（作用域接收者用 `@RemoteScope`）标记方法，把服务绑定到 wire 命名空间，并通过可合并扩展的协议映射把 Host 对象与作用域 Context 关联到 wire identity。生成产物、Host Gateway 与 Client API 消费同一套调用描述符、编解码器与提供方约定，因此一套声明在每个 face 上保持一致。本包不注册任何 Cordis 服务，也不运行 TypeScript 分析；它只声明类型与装饰器标记。
+借助 `dsh-typert-protocol`，业务包可以向 Remote 客户端暴露 Host 方法：用 `@Remote`（作用域接收者用 `@RemoteScope`）标记方法，把服务绑定到 wire 命名空间，并通过可合并扩展的协议映射把 Host 对象与作用域 Context 关联到 wire identity。生成产物、Host Gateway 与 Client API 消费同一套调用描述符、编解码器与提供方约定。调用持有的值把清理责任交给 Gateway，不另增引用计数。本包不注册任何 Cordis 服务，也不运行 TypeScript 分析。
 
 ## 目录
 
@@ -48,6 +48,8 @@ export class GoalService extends TypertRemoteService {
 
 复杂的 Host 对象不能直接跨 wire 传输。业务包通过可合并扩展的 `TypertLookupMap` 与 `TypertContextMap` 声明关联。Host Context 适配器拥有稳定 wire 声明，并把 wire identity 解析为活跃 Context。Client Context 适配器需要双向映射，因为作用域调用从 Client Context 发起，而转发的 Host 事件要在 Client 侧解析其显式 wire identity。Host 组合可以覆盖其同步或异步解析器。因策略原因拒绝解析的解析器会抛出带有自身错误码的 `RemoteError`，该码原样到达调用方。
 
+Client Context 解析保持同步。`typertOwnedValue(value, release)` 把不抛异常、幂等的清理交给调用 owner；Gateway 在处理器和回复均结束后调用它。借用的 Context 不需要清理包装层。共享的 `TYPERT_OWNED_VALUE` symbol 与 `isTypertOwnedValue` 识别函数可跨独立打包的提供方与 Gateway 使用；包装层自身不会 retain 资源。
+
 ### 报告与读取 Remote 失败
 
 所有 Remote 失败都由一个类承载：`RemoteError`，携带稳定的 `<domain>/<reason>` 码，以及按该码定型的 details。本包声明通用载体码（`gateway/bad-request`、`gateway/cancelled`、`gateway/internal`），并拥有 `RemoteErrorDetailsMap`——可合并扩展的码表，其他每个包都在自己的抛出点旁扩展它：

package/node_modules/@deepseek-ai/dsh-typert-protocol/lib/index.js

@@ -37,6 +37,37 @@ function remoteErrorOf(value) {
 	if (typeof value === "object" && value !== null && value.isDSHRemoteError === true && typeof value.code === "string") return value;
 }
 //#endregion
+//#region lib/types/owned-value.js
+/** Generic invocation-owned values returned by synchronous Client Context resolvers. */
+/** Shared identity across independently bundled Context providers and Gateway. */
+const TYPERT_OWNED_VALUE = Symbol.for("dsh.typert.owned-value");
+/**
+* Transfer cleanup ownership without adding another resource reference count.
+* @param value - resolved payload passed to the invocation.
+* @param release - non-throwing synchronous release, called at most once.
+* @returns an owned payload disposed after invocation and reply settlement.
+*/
+function typertOwnedValue(value, release) {
+	let active = true;
+	return {
+		[TYPERT_OWNED_VALUE]: true,
+		value,
+		[Symbol.dispose]() {
+			if (!active) return;
+			active = false;
+			release();
+		}
+	};
+}
+/**
+* Identify invocation-owned values using the shared marker.
+* @param value - borrowed or owned resolver result.
+* @returns whether the result carries invocation cleanup.
+*/
+function isTypertOwnedValue(value) {
+	return typeof value === "object" && value !== null && TYPERT_OWNED_VALUE in value && value[TYPERT_OWNED_VALUE] === true;
+}
+//#endregion
 //#region lib/types/index.js
 /**
 * Remote decorators and explicit Gateway bindings backed by versioned
@@ -181,4 +212,4 @@ function validateName(subject, value) {
 	if (!isTypertRemoteSegment(value)) throw new TypeError(`typert-protocol: ${subject} must contain only RPC endpoint segment characters`);
 }
 //#endregion
-export { Remote, RemoteError, RemoteScope, TypertRemoteService, bindTypertRemote, isTypertRemoteSegment, remoteErrorOf, remoteMethods };
+export { Remote, RemoteError, RemoteScope, TYPERT_OWNED_VALUE, TypertRemoteService, bindTypertRemote, isTypertOwnedValue, isTypertRemoteSegment, remoteErrorOf, remoteMethods, typertOwnedValue };

package/node_modules/@deepseek-ai/dsh-typert-protocol/lib/types/index.js

@@ -6,6 +6,7 @@
  */
 import { Service } from '@deepseek-ai/cordis';
 export { RemoteError, remoteErrorOf } from "./remote-error.js";
+export { TYPERT_OWNED_VALUE, isTypertOwnedValue, typertOwnedValue } from "./owned-value.js";
 const TYPERT_REMOTE_SEGMENT_PATTERN = /^[A-Za-z0-9_$.-]+$/;
 /**
  * Test one generated Remote name against the Connection endpoint grammar.

package/node_modules/@deepseek-ai/dsh-typert-protocol/lib/types/owned-value.js

@@ -0,0 +1,32 @@
+/** Generic invocation-owned values returned by synchronous Client Context resolvers. */
+/** Shared identity across independently bundled Context providers and Gateway. */
+export const TYPERT_OWNED_VALUE = Symbol.for('dsh.typert.owned-value');
+/**
+ * Transfer cleanup ownership without adding another resource reference count.
+ * @param value - resolved payload passed to the invocation.
+ * @param release - non-throwing synchronous release, called at most once.
+ * @returns an owned payload disposed after invocation and reply settlement.
+ */
+export function typertOwnedValue(value, release) {
+    let active = true;
+    return {
+        [TYPERT_OWNED_VALUE]: true,
+        value,
+        [Symbol.dispose]() {
+            if (!active)
+                return;
+            active = false;
+            release();
+        },
+    };
+}
+/**
+ * Identify invocation-owned values using the shared marker.
+ * @param value - borrowed or owned resolver result.
+ * @returns whether the result carries invocation cleanup.
+ */
+export function isTypertOwnedValue(value) {
+    return typeof value === 'object' && value !== null
+        && TYPERT_OWNED_VALUE in value && value[TYPERT_OWNED_VALUE] === true;
+}
+//# sourceMappingURL=owned-value.js.map

package/node_modules/@deepseek-ai/dsh-typert-protocol/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-typert-protocol",
   "description": "Compiler-independent Remote metadata and Typert provider protocols",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },

package/node_modules/@deepseek-ai/dsh-typert-registry/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-typert-registry",
   "description": "Runtime registry for generated package reflection and Zod schemas",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -51,6 +51,6 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-typert-protocol": "0.1.6-alpha.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-user-approval/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-user-approval",
   "description": "User-approval seam (ctx.approval) for the DeepSeek Harness: one-shot permission decisions dispatched to composed answerers over the approval/request waterfall, fail-closed by default",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -37,26 +37,26 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-agent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-brand": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-invariants": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-scope": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-invariants": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-scope": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   },
   "dependencies": {
     "@deepseek-ai/schemastery": "3.18.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-agent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-brand": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-invariants": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-scope": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-invariants": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-scope": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-user-questions/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/interaction/user-questions/README.md
-README.md: dc699c9c5ebb618c7148ce4db77e02f24969e0df
-README.zh.md: cb3cfb5383ca9dbe54435048ebadca8a77c82cc6
+README.md: 4ad85c1d4852aa459f3bde1d172edd40224cd363
+README.zh.md: 6efeb82f4e30d33976e6929c35d8c9d55f048d4c

package/node_modules/@deepseek-ai/dsh-user-questions/README.md

@@ -75,6 +75,8 @@ No direct invalidation; the named consumer owns any request-prefix changes.
 
 None.
 
+The optional plan-review `callId` identifies the logged tool invocation for document navigation. It does not change the answer or its validation.
+
 </details>
 
 **Runtime invariant:** No companion is published. The answerer waterfall is resolved per request and returns directly to its caller; the seam publishes no independent request/answer audit stream.

package/node_modules/@deepseek-ai/dsh-user-questions/README.zh.md

@@ -75,6 +75,8 @@ kind: "package-reference"
 
 无。
 
+计划审批中可选的 `callId` 标识已记录的工具调用，供文档导航使用，不改变回答及其校验。
+
 </details>
 
 **运行时不变式：** 不发布伴生入口。answerer waterfall 按请求解析并把结果直接返回调用方；该 seam 不发布独立的请求／回答审计流。

package/node_modules/@deepseek-ai/dsh-user-questions/lib/index.js

@@ -29,7 +29,8 @@ function planReviewOptions(question) {
 	const decline = options.find((option) => option.label !== intent.approve);
 	return {
 		approve,
-		...decline === void 0 ? {} : { decline }
+		...decline === void 0 ? {} : { decline },
+		...intent.callId === void 0 ? {} : { callId: intent.callId }
 	};
 }
 //#endregion

package/node_modules/@deepseek-ai/dsh-user-questions/lib/types/plan-review.js

@@ -27,6 +27,10 @@ export function planReviewOptions(question) {
     if (approve === undefined)
         return undefined;
     const decline = options.find(option => option.label !== intent.approve);
-    return { approve, ...(decline === undefined ? {} : { decline }) };
+    return {
+        approve,
+        ...(decline === undefined ? {} : { decline }),
+        ...(intent.callId === undefined ? {} : { callId: intent.callId }),
+    };
 }
 //# sourceMappingURL=plan-review.js.map

package/node_modules/@deepseek-ai/dsh-user-questions/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-user-questions",
   "description": "Abstract user-questions seam (ctx.userQuestions) for asking the human during agent runs",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -36,15 +36,15 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-agent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-scope": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-scope": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-agent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-scope": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-scope": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-util-crypto/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-util-crypto",
   "description": "Zero-dependency browser-safe UUID and byte-encoding helpers",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },

package/node_modules/@deepseek-ai/dsh-util-time/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-util-time",
   "description": "Zero-dependency time vocabulary shared by wire boundaries: canonicalClientTimeZone (IANA zone validation and canonicalization only, no formatting)",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },

package/node_modules/@deepseek-ai/dsh-util-values/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/util/values/README.md
-README.md: 65de6560d7491d3554dbf73f3d729c0f020d745c
-README.zh.md: 3319533566ef832c62c7d7483b6ca45f2b78c1a2
+README.md: a61b1c26992d8d6df6712d178563c99acd6045ca
+README.zh.md: c15ad967547bb9e449239eac167ce9e59064cc50

package/node_modules/@deepseek-ai/dsh-util-values/README.md

@@ -37,10 +37,12 @@ if (!isJsonValue(input)) throw new TypeError('expected lossless JSON')
 const snapshot = snapshotJsonValue(input) as JsonValue
 ```
 
-### Publish or compare values
+### Publish, compare, or retain keyed values
 
 `deepFreeze(value)` freezes an object graph in place and returns the same value. It walks enumerable string-keyed children and deliberately leaves live `AbortSignal` objects mutable. `deepEqualJson(a, b)` compares JSON-compatible arrays and records structurally; callers must validate hostile or unconstrained values before comparison.
 
+`WeakMapWithValues<Key, Value>` combines weak object-key lookup with a strongly retained, insertion-ordered `values` set. Each value belongs to one key. The owner must call `delete(key)` or `clear()` at the corresponding lifecycle boundary; the collection does not perform automatic cleanup.
+
 ### Close a discriminated union
 
 Use `assertNever(value, context?)` in the default branch of a closed discriminated union. A newly added variant then fails TypeScript compilation at every exhaustive switch, while a runtime value that escaped its declared type throws with the optional context label.
@@ -53,13 +55,13 @@ Use `assertNever(value, context?)` in the default branch of a closed discriminat
 <details>
 <summary>Implementation internals — click to expand</summary>
 
-The JSON validator uses an explicit work stack and tracks only the active ancestor chain, so deeply nested values do not consume the JavaScript call stack and repeated non-cyclic references remain valid. Snapshot writes use own data properties, including for names such as `__proto__`. The other helpers derive their result only from their arguments and retain no state between calls.
+The JSON validator uses an explicit work stack and tracks only the active ancestor chain, so deeply nested values do not consume the JavaScript call stack and repeated non-cyclic references remain valid. Snapshot writes use own data properties, including for names such as `__proto__`. Value operations derive their result only from their arguments; `WeakMapWithValues` stores only instance-owned associations.
 
 ### Source map
 
 | File | Role |
 |---|---|
-| [`src/index.ts`](src/index.ts) | JSON value type, validation and snapshot traversal, structural equality, deep freezing, and exhaustive-union failure |
+| [`src/index.ts`](src/index.ts) | JSON value type, validation and snapshot traversal, structural equality, deep freezing, weak-key/strong-value associations, and exhaustive-union failure |
 | — | No runtime invariant companion is published because these value operations have no shared runtime state; unit tests cover their algebra. |
 
 </details>
@@ -81,6 +83,7 @@ The JSON validator uses an explicit work stack and tracks only the active ancest
 
 - **`deepEqualJson` assumes JSON-compatible inputs** — it is not a general object comparator and does not define semantics for prototypes, symbols, accessors, cycles, maps, or sets.
 - **`deepFreeze` follows enumerable string-keyed children** — it does not turn arbitrary host objects into immutable data, and it intentionally skips live `AbortSignal` instances.
+- **`WeakMapWithValues` requires explicit cleanup and unique values** — values remain strongly held until their owning key is deleted or the collection is cleared, and one value must not be shared by several keys.
 
 <a id="dev-note"></a>
 ### Dev Note

package/node_modules/@deepseek-ai/dsh-util-values/README.zh.md

@@ -37,10 +37,12 @@ if (!isJsonValue(input)) throw new TypeError('expected lossless JSON')
 const snapshot = snapshotJsonValue(input) as JsonValue
 ```
 
-### 发布或比较值
+### 发布、比较或保留键控值
 
 `deepFreeze(value)` 原地冻结对象图并返回同一个值。它遍历可枚举字符串键的子项，并刻意让活跃 `AbortSignal` 对象保持可变。`deepEqualJson(a, b)` 按结构比较 JSON 兼容数组与记录；调用方必须先校验恶意或不受约束的值，再进行比较。
 
+`WeakMapWithValues<Key, Value>` 组合弱对象键查找与强引用且保持插入顺序的 `values` set。每个 value 只属于一个 key。owner 必须在对应生命周期边界调用 `delete(key)` 或 `clear()`；该集合不执行自动清理。
+
 ### 封闭可辨识联合类型
 
 在封闭可辨识联合类型的 default 分支中使用 `assertNever(value, context?)`。新增变体会让每个穷尽 switch 在 TypeScript 编译时失败；如果某个运行时值逃过了声明类型，该函数会抛出带可选上下文标签的错误。
@@ -53,13 +55,13 @@ const snapshot = snapshotJsonValue(input) as JsonValue
 <details>
 <summary>实现细节——点击展开</summary>
 
-JSON 校验器使用显式工作栈，并只跟踪当前祖先链，因此深层嵌套值不会消耗 JavaScript 调用栈，重复但无循环的引用仍然有效。快照写入使用自有数据属性，包括 `__proto__` 等名称。其他 helper 的结果只取决于传入参数，不在调用之间保留状态。
+JSON 校验器使用显式工作栈，并只跟踪当前祖先链，因此深层嵌套值不会消耗 JavaScript 调用栈，重复但无循环的引用仍然有效。快照写入使用自有数据属性，包括 `__proto__` 等名称。值操作的结果只取决于传入参数；`WeakMapWithValues` 仅保存实例自有的关联。
 
 ### 源码地图
 
 | 文件 | 职责 |
 |---|---|
-| [`src/index.ts`](src/index.ts) | JSON 值类型、校验与快照遍历、结构相等、深度冻结和穷尽联合类型失败 |
+| [`src/index.ts`](src/index.ts) | JSON 值类型、校验与快照遍历、结构相等、深度冻结、弱键/强值关联和穷尽联合类型失败 |
 | — | 不发布运行时不变量伴生入口；这些值操作没有共享运行时状态，其代数行为由单元测试覆盖。 |
 
 </details>
@@ -81,6 +83,7 @@ JSON 校验器使用显式工作栈，并只跟踪当前祖先链，因此深层
 
 - **`deepEqualJson` 假定输入兼容 JSON**——它不是通用对象比较器，不为 prototype、symbol、accessor、循环、map 或 set 定义语义。
 - **`deepFreeze` 沿可枚举字符串键遍历子项**——它不会把任意宿主对象变成不可变数据，并会刻意跳过活跃 `AbortSignal` 实例。
+- **`WeakMapWithValues` 要求显式清理且 value 唯一**——value 会保持强引用，直到 owner 删除其 key 或清空集合；同一 value 不得由多个 key 共享。
 
 <a id="dev-note"></a>
 ### 开发备注