@songtonyli/dsh-cli 0.1.11 → 0.1.13

package/node_modules/@deepseek-ai/dsh-app-boot/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-app-boot",
   "description": "Shared boot glue for the app bins: .env loading, fail-loud Loader guards, snapshot-aware config resolution, and the Loader boot sequence",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -32,37 +32,29 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@deepseek-ai/dsh-atomic-write": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-package-manifest": "0.1.6-alpha.1",
-    "chokidar": "4.0.3",
+    "@deepseek-ai/dsh-atomic-write": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-package-manifest": "0.1.6-alpha.2",
     "js-yaml": "^4.2.0",
     "node-addon-require-builtin": "^0.1.6",
     "resolve.exports": "^2.0.3"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis-plugin-group": "1.0.2",
-    "@deepseek-ai/cordis-plugin-hmr": "1.0.17",
     "@deepseek-ai/cordis-plugin-include": "1.0.7",
     "@deepseek-ai/cordis-plugin-loader": "1.0.3",
-    "@deepseek-ai/dsh-launch-environment": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-home-paths": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-launch-environment": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   },
-  "peerDependenciesMeta": {
-    "@deepseek-ai/cordis-plugin-hmr": {
-      "optional": true
-    }
-  },
   "devDependencies": {
     "@deepseek-ai/cordis-plugin-group": "1.0.2",
-    "@deepseek-ai/cordis-plugin-hmr": "1.0.17",
     "@deepseek-ai/cordis-plugin-include": "1.0.7",
     "@deepseek-ai/cordis-plugin-loader": "1.0.3",
     "@deepseek-ai/cordis-plugin-timer": "1.1.4",
-    "@deepseek-ai/dsh-launch-environment": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-home-paths": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-launch-environment": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.2",
     "@types/js-yaml": "^4.0.9",
     "@deepseek-ai/cordis": "4.0.2"
   }

package/node_modules/@deepseek-ai/dsh-atomic-write/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/util/atomic-write/README.md
-README.md: c3ce840f79c38fb7fac404786f0e5a7e41138d57
-README.zh.md: 9cc1f271f70e113637b88b7e3984d431e84c647f
+README.md: 89770a6d318da778e9dcb7a462dc7754244a0e41
+README.zh.md: a64771ae1266f132254c82aaa71f193dbf33cd06

package/node_modules/@deepseek-ai/dsh-atomic-write/README.md

@@ -58,6 +58,8 @@ Only writers contend — readers never take the lock — and a contender backs o
 
 ### Failures to plan for
 
+Windows retries one `EPERM` when the lock cannot be observed, because its holder can release between exclusive creation and the existence check. A repeated unconfirmed `EPERM` is rethrown without running the operation.
+
 The lock's parent directory must already exist, so `withFileLock` rejects an invalid parent hierarchy before running the operation. A process that exits while holding the lock leaves the lock sibling behind; later writers time out, and an operator removes it only after verifying that no writer still owns it.
 
 -----

package/node_modules/@deepseek-ai/dsh-atomic-write/README.zh.md

@@ -58,6 +58,8 @@ await withFileLock('/home/u/.dsh/settings.yaml', async () => {
 
 ### 需要规划的失败
 
+Windows 在无法观察到锁时会对 `EPERM` 重试一次，因为持锁方可能在独占创建与存在性检查之间释放锁。再次出现无法确认锁存在的 `EPERM` 时，会重新抛出错误且不运行操作。
+
 锁的父目录必须已经存在，因此 `withFileLock` 会在运行操作之前拒绝无效的父目录层级。持锁进程退出时会把锁文件留在原地；后续写入方超时失败，操作者只有在确认没有写入方仍持有该锁后才会移除它。
 
 -----

package/node_modules/@deepseek-ai/dsh-atomic-write/lib/index.js

@@ -109,8 +109,9 @@ const DEFAULT_LOCK_WAIT_MS = 2e3;
 * rename-based commit of {@link writeFileAtomic}, readers stay lock-free and
 * only writers contend. `EEXIST` is contention directly; an `EPERM` is
 * contention only when a fresh `lstat` confirms the lock path exists, covering
-* Windows exclusive-create behavior without hiding an unrelated permission
-* failure. Contention backs off exponentially and fails with a timed-out error
+* Windows exclusive-create behavior. Windows retries one unconfirmed EPERM
+* because the holder can release before the probe; a repeated unconfirmed
+* permission error is rethrown. Contention backs off exponentially and times out
 * after the deadline. The contender never removes an existing lock because
 * file age cannot prove that its owner stopped; orphan recovery is an operator
 * action. The parent directory must exist.
@@ -123,6 +124,7 @@ async function withFileLock(filename, operation, options) {
 	const lockPath = `${filename}.lock`;
 	const deadline = Date.now() + (options?.waitMs ?? DEFAULT_LOCK_WAIT_MS);
 	let delay = LOCK_RETRY_INITIAL_MS;
+	let retriedUnconfirmedPermissionError = false;
 	for (;;) {
 		try {
 			await writeFile(lockPath, `${process.pid}\n`, {
@@ -131,7 +133,10 @@ async function withFileLock(filename, operation, options) {
 			});
 			break;
 		} catch (error) {
-			if (!await isLockContention(error, lockPath)) throw error;
+			if (!await isLockContention(error, lockPath)) {
+				if (process.platform !== "win32" || error?.code !== "EPERM" || retriedUnconfirmedPermissionError) throw error;
+				retriedUnconfirmedPermissionError = true;
+			}
 		}
 		if (Date.now() >= deadline) throw new Error(`atomic-write: timed out waiting for the writer lock at ${lockPath}`);
 		await new Promise((resolve) => setTimeout(resolve, delay));

package/node_modules/@deepseek-ai/dsh-atomic-write/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-atomic-write",
   "description": "Zero-dependency atomic file replacement: exclusive-create random-suffix temp + rename carrying the caller-stated permissions (writeFileAtomic)",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },

package/node_modules/@deepseek-ai/dsh-attachment/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-attachment",
   "description": "Durable immutable attachment storage seam for the DeepSeek Harness",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -32,11 +32,11 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-brand": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-brand": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-brand": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-brand": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-attachment-local/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-attachment-local",
   "description": "Private content-addressed DSH_HOME attachment storage",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -27,18 +27,18 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-attachment": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-home-paths": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-attachment": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-lazy-require": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-lazy-require": "0.1.6-alpha.2",
     "@deepseek-ai/schemastery": "3.18.2",
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-attachment": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-home-paths": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-attachment": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-authorization/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-authorization",
   "description": "Authorization seam (ctx.authorization): plugin-owned flows that obtain a credential through a conversation with the human",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -37,15 +37,15 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-credentials": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-invariants": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-credentials": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-invariants": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-credentials": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-invariants": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-credentials": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-invariants": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-base/cordis.patch.yml

@@ -13,16 +13,23 @@
 # driven); the grouping is for readers.
 
 - insert:
+    - id: tool-plugin-manager
+      name: '@deepseek-ai/dsh-plugin-manager/tools'
+      disabled: true
+
+    - id: plugin-manager
+      name: '@deepseek-ai/dsh-plugin-manager'
+      disabled: !!js "!ctx.get('profileContext')"
+
     - id: timer
       name: '@deepseek-ai/cordis-plugin-timer'
 
-    # Module reload is opt-in per profile. `patchReload: live` config watching
-    # uses the launcher's watch-only fallback and does not require this row.
+    # Profile configuration reloads by default; module roots are opt-in.
     - id: hmr
-      name: '@deepseek-ai/cordis-plugin-hmr'
-      disabled: true
+      name: '@deepseek-ai/dsh-hmr'
+      disabled: !!js "!ctx.get('profileContext')"
       config:
-        root: ['.']
+        root: []
 
     - id: llm
       name: '@deepseek-ai/dsh-llm'

package/node_modules/@deepseek-ai/dsh-base/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-base",
   "description": "The shared dsh core as a profile bundle: the first patch layer of base-backed profiles, inserting core rows over the empty profile root",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -34,94 +34,95 @@
     }
   },
   "dependencies": {
-    "@deepseek-ai/cordis-plugin-hmr": "1.0.17",
+    "@deepseek-ai/dsh-hmr": "0.1.6-alpha.2",
     "@deepseek-ai/cordis-plugin-timer": "1.1.4",
-    "@deepseek-ai/dsh-agent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-agent-default-model": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-agent-instructions": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-agent-loop": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-api-gateway": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-attachment-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-authorization": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-bash-sandbox": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-command-compact": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-command-feedback": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-command-goal": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-commands": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-compaction-basic": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-compaction-image-offload": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-compaction-tool-result-pruner": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-credentials-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-fs-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-fs-observation-policy": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-fs-sandbox": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-goal": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-goal-round-driver": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-jobs-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm-deepseek": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm-pi-ai": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm-retry": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-mcp-resources": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-permission-presets": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-plan-mode": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-plugin-package-inventory-deepseek": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-ptc-runtime-node": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-pwsh-sandbox": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-repeat-tool-reminder": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-checkpoint-policy": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-log-deepseek": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-projection": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-projection-cache": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-query-sqlite": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-telemetry-otel": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-title": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-title-first-prompt-llm": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-settings-file": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-shell-env": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-skill": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-skill-badge": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-skill-filesystem": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-spill-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-spill-policy": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-storage": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-storage-domain": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-storage-json": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subagent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subagent-fork-in-process": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-token-meter": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-bash": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-call-timeout-policy": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-fs": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-fs-search": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-goal": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-jobs": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-present": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-pwsh": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-ralph": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-skill": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-subagent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-subagent-control": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-todo": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-web": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-workflow": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tools": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-typert-loader": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-typert-registry": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-user-approval": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-user-questions": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-web": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-web-fetch-http": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-web-search-deepseek": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-workflow-ptc": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-agent-loop": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-attachment-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-shell-env": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-bash-sandbox": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-command-compact": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-command-feedback": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-command-goal": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-commands": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-compaction-basic": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-compaction-image-offload": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-compaction-tool-result-pruner": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-credentials-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-plugin-package-inventory-deepseek": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-fs-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-fs-observation-policy": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-fs-sandbox": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-goal": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-goal-round-driver": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-api-gateway": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm-deepseek": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm-retry": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-mcp-resources": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-permission-presets": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-plan-mode": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-pwsh-sandbox": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-repeat-tool-reminder": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-checkpoint-policy": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-log-deepseek": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-projection-cache": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-query-sqlite": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-telemetry-otel": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-title": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-title-first-prompt-llm": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-settings-file": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-skill": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-skill-badge": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-skill-filesystem": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-spill-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-spill-policy": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-storage": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-storage-domain": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-storage-json": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subagent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subagent-fork-in-process": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-jobs-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-call-timeout-policy": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-token-meter": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-bash": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-present": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-fs": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-fs-search": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-goal": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-pwsh": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-ralph": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-skill": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-subagent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-subagent-control": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-jobs": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-todo": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-web": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-workflow": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-typert-loader": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-typert-registry": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-user-questions": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-web": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-web-fetch-http": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-web-search-deepseek": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-workflow-ptc": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-agent-instructions": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-ptc-runtime-node": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-plugin-manager": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-authorization": "0.1.6-alpha.2"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "4.0.2"

package/node_modules/@deepseek-ai/dsh-bash-local/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-bash-local",
   "description": "Local-subprocess implementation of the DeepSeek Harness bash executor seam",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -27,21 +27,21 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-shell": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subprocess": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-timeout": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-shell": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-timeout": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2",
-    "@deepseek-ai/dsh-settings": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-settings": "0.1.6-alpha.2"
   },
   "dependencies": {
     "@deepseek-ai/schemastery": "3.18.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-shell": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subprocess": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-timeout": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-shell": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-timeout": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2",
-    "@deepseek-ai/dsh-settings": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-settings": "0.1.6-alpha.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-bash-sandbox/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-bash-sandbox",
   "description": "Sandbox-consuming implementation of the DeepSeek Harness bash executor seam (confines every command via ctx.sandbox, reports denial/enforcement result facts)",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -27,21 +27,21 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-shell": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-bash-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-shell": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-bash-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-shell": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-bash-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-shell": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-bash-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2",
     "@deepseek-ai/node-addon-system": "0.1.2",
-    "@deepseek-ai/dsh-session-projection": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-session-projection": "0.1.6-alpha.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-brand/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-brand",
   "description": "Stateless branded primitive types for the DeepSeek Harness",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },

package/node_modules/@deepseek-ai/dsh-chunked-list/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-chunked-list",
   "description": "Persistent append-only chunked lists with bounded copying and JSON checkpoint validation",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },

package/node_modules/@deepseek-ai/dsh-client-connection/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/client/connection/README.md
-README.md: c8c2b2f6edb0ce43a07a664bcc2b3c9ece047b7b
-README.zh.md: 2c25c0d3520fd7e5d3eeeec98c41cc1d3d4d25d8
+README.md: f72dd40db4c6414c368e039300198151cf2bd96a
+README.zh.md: 4644dfb23074338bdd5888d20e0f0115811115d8

package/node_modules/@deepseek-ai/dsh-client-connection/README.md

@@ -25,6 +25,8 @@ The package carries browser-to-Host Remote calls, exact Fetch responses, and con
 <a id="use-this-package"></a>
 ## Use this package
 
+A static desktop page can provide `__DSH_TRANSPORT__.streamBaseUrl` for the HTTP origin of its owned Host. The Gateway uses that origin for its WebSocket while HTTP transport remains independently selected. The desktop carrier owns authentication; setting the origin alone grants no access.
+
 The browser uses HTTP POST for Remote unary calls. API Gateway owns the `/api/remote.mux` WebSocket and its logical streams; shell-owned compositions provide equivalent Remote streams through `connection.rpc.open` without opening a WebSocket. The browser plugin reads the page transport, recovery settings, and location, then delegates to `installConnection(ctx, options)`. A composition that owns its carrier may call the same installer directly; the whole-client test tier does so. Each invocation creates one Context-owned service, so several Client trees can use different carriers in one realm. The Host half always provides the carrier-neutral RPC and exact `GET`/`HEAD`/`POST` route registries. When a Web carrier is present it also owns the sole `/api` route, Fetch bridge, browser authentication, and Host/Origin checks; a shell-owned carrier dispatches the shared Fetch handler directly. Each exact route declares buffered or streaming request-body handling before the bridge reads any bytes. Typert Gateway claims generated Remote endpoints, feature packages register non-JSON responses such as Session-log downloads and raw file uploads, and unclaimed requests return 404. Loopback hostname classification remains package-internal to the browser-facing Client state. Browser raw-body transfer is provided by [`dsh-client-file-upload`](../file-upload/README.md).
 
 -----
@@ -38,6 +40,8 @@ The cookie signing secret is the owner-scoped `client-connection/browser-session
 
 Before authentication, every request still passes `src/api-request-trust.ts`. Its `Host` must be loopback or match a `trustedHosts` entry: exact on `host:port`, any port on port-less entries, both sides WHATWG-normalized. An attached `Origin` must equal that Host and `sec-fetch-site: cross-site` is refused. Malformed configured authorities fail plugin load. These checks defend DNS rebinding and cross-site browser requests; they never establish identity. A failed Host/Origin check returns 403, while a trusted but unauthenticated request returns 401. `dsh web --host 0.0.0.0` remains unsupported. Decision records: [browser request trust](../../../.agents/notes/implemented/architecture/2026-07-28-api-browser-trust-boundary.md) and [browser token authentication](../../../.agents/notes/implemented/architecture/2026-08-24-browser-token-authentication.md).
 
+Authenticated shared HTTP requests pass through the `connection/request` waterfall before body transfer. A listener may refuse new requests or await `next()` through response completion; removing its owning fiber removes admission behavior. Desktop uses this hook to lock new API work during an approved installation without canceling already-admitted work. WebSocket stream ownership remains with API Gateway.
+
 <a id="connection-generation"></a>
 ## Connection generation
 

package/node_modules/@deepseek-ai/dsh-client-connection/README.zh.md

@@ -25,6 +25,8 @@ kind: "package-reference"
 <a id="use-this-package"></a>
 ## 使用本包
 
+静态桌面页面可以通过 `__DSH_TRANSPORT__.streamBaseUrl` 提供其所拥有 Host 的 HTTP origin。Gateway 将该 origin 用于 WebSocket，HTTP 传输仍独立选择。桌面载体负责认证；仅设置 origin 不会授予访问权限。
+
 浏览器通过 HTTP POST 执行 Remote 一元调用；API Gateway 自己拥有 `/api/remote.mux` WebSocket 及其逻辑流。由 shell 持有的组合通过 `connection.rpc.open` 提供等价的 Remote 流，不打开 WebSocket。浏览器插件读取页面 transport、恢复设置与 location，再委托 `installConnection(ctx, options)`。持有自身载体的组合可以直接调用同一个安装函数；整机客户端测试档就是这一消费者。每次调用都会创建一个归所属 Context 的服务，因此同一 realm 中的多棵 Client 树可以使用不同载体。Host half 始终提供与载体无关的 RPC 注册表和精确 `GET`/`HEAD`/`POST` 路由注册表。存在 Web 载体时，它还持有唯一 `/api` route、Fetch bridge、浏览器认证与 Host/Origin 校验；由 shell 持有的载体则直接分派共享 Fetch handler。每条精确路由会在 bridge 读取任何字节前声明缓冲或流式请求体处理方式。Typert Gateway 认领生成的 Remote endpoint，功能包注册 Session 日志下载、原始文件上传等非 JSON 响应，未认领的请求返回 404。Loopback hostname 判定只供浏览器侧当前页面状态使用，留在包内。浏览器原始请求体传输由 [`dsh-client-file-upload`](../file-upload/README.zh.md) 提供。
 
 -----
@@ -38,6 +40,8 @@ cookie 签名密钥是 `ctx.credentials` 中由 `client-connection/browser-sessi
 
 认证之前，每个请求仍经过 `src/api-request-trust.ts`。其 `Host` 必须是 loopback，或与 `trustedHosts` 条目匹配：带端口的 `host:port` 精确匹配，不带端口的条目匹配任意端口，两侧均经 WHATWG 归一化。若附带 `Origin`，它必须等于该 Host；`sec-fetch-site: cross-site` 一律拒绝。畸形配置 authority 会让插件加载失败。这些检查防御 DNS rebinding 与跨站浏览器请求，绝不建立身份。Host/Origin 校验失败返回 403；Host 可信但未认证的请求返回 401。`dsh web --host 0.0.0.0` 仍不受支持。决策记录：[浏览器请求信任](../../../.agents/notes/implemented/architecture/2026-07-28-api-browser-trust-boundary.zh.md)与[浏览器令牌认证](../../../.agents/notes/implemented/architecture/2026-08-24-browser-token-authentication.zh.md)。
 
+通过认证的共享 HTTP 请求在传输请求体之前经过 `connection/request` waterfall。监听器可以拒绝新请求，或等待 `next()` 直到响应完成；释放所属 fiber 会移除准入行为。Desktop 使用此扩展点，在已批准的安装期间锁住新的 API 工作，而不取消已接纳的工作。WebSocket 流仍由 API Gateway 负责。
+
 <a id="connection-generation"></a>
 ## Connection generation
 

package/node_modules/@deepseek-ai/dsh-client-connection/lib/index.js

@@ -775,7 +775,7 @@ async function apply(ctx, config) {
 					res.end(rejection === 401 ? "unauthorized" : "forbidden");
 					return;
 				}
-				await bridge(req, res, fetchHandler, maxRequestBodyBytes);
+				await webCtx.waterfall("connection/request", req, res, () => bridge(req, res, fetchHandler, maxRequestBodyBytes));
 			}
 		};
 		webCtx.effect(() => webCtx.webServer.register(route), "client-connection: /api route");