@songtonyli/dsh-cli 0.1.12 → 0.1.13

package/node_modules/@deepseek-ai/dsh-plugin-manager/lib/types/install-spec.js

@@ -0,0 +1,73 @@
+/**
+ * Reading an install spec before pnpm sees it: which of pnpm's spec forms it
+ * takes, and for a registry name whether it is one the registry can accept.
+ * @module @deepseek-ai/dsh-plugin-manager/install-spec
+ */
+import { isAbsolute } from 'node:path';
+/** The forms pnpm resolves through a git host: a host shorthand, a git URL, or a hosted repository URL. */
+const GIT_SHORTHAND = /^(?:github|gitlab|bitbucket|gist):/i;
+const GIT_URL = /^git(?:\+[a-z]+)?:\/\/|^git@[^:]+:/i;
+const HOSTED_REPOSITORY_URL = /^https?:\/\/[^/]+\/[^/]+\/[^/#]+(?:\.git)?(?:#.*)?$/i;
+/** A tarball, on disk or over HTTP. */
+const TARBALL_SPEC = /\.(?:tgz|tar\.gz)(?:#.*)?$/i;
+/** An npm package name: lowercase URL-safe segments, an optional scope, no leading dot or underscore. */
+const PACKAGE_NAME = /^(?:@[a-z0-9][a-z0-9._~-]*\/)?[a-z0-9][a-z0-9._~-]*$/;
+const PACKAGE_NAME_MAX_LENGTH = 214;
+/** A spec neither pnpm nor the registry would take; `reason` is what the person reads. */
+export class InvalidInstallSpecError extends Error {
+    spec;
+    reason;
+    /**
+     * @param spec - the spec as typed, trimmed.
+     * @param reason - why it is refused, as one sentence.
+     */
+    constructor(spec, reason) {
+        super(`plugin-manager: ${reason}: ${spec}`);
+        this.spec = spec;
+        this.reason = reason;
+        this.name = 'InvalidInstallSpecError';
+    }
+}
+function invalid(spec, reason) {
+    return new InvalidInstallSpecError(spec, reason);
+}
+/**
+ * Read a spec into its form. A path must be absolute: the Host's working
+ * directory means nothing to the person typing into a browser, and a
+ * relative path resolved against the profile would point inside it.
+ * @param raw - the spec as typed.
+ * @returns the parsed spec.
+ * @throws {InvalidInstallSpecError} for an empty spec, a relative path, a name the
+ * registry would refuse, or a URL that is neither a git host nor a tarball.
+ */
+export function parseInstallSpec(raw) {
+    const spec = raw.trim();
+    if (spec === '')
+        throw invalid(spec, 'the package spec must not be empty');
+    const path = spec.replace(/^(?:file|link):/, '');
+    if (path !== spec || isAbsolute(path)) {
+        if (!isAbsolute(path))
+            throw invalid(spec, 'a local path must be absolute');
+        return TARBALL_SPEC.test(path) ? { kind: 'tarball', spec, path } : { kind: 'path', spec, path };
+    }
+    if (/^\.{1,2}(?:[\\/]|$)/.test(spec))
+        throw invalid(spec, 'a local path must be absolute');
+    const git = GIT_SHORTHAND.test(spec) || GIT_URL.test(spec) || HOSTED_REPOSITORY_URL.test(spec);
+    if (git && !TARBALL_SPEC.test(spec))
+        return { kind: 'git', spec };
+    if (/^https?:\/\//i.test(spec)) {
+        if (TARBALL_SPEC.test(spec))
+            return { kind: 'tarball', spec };
+        throw invalid(spec, 'a URL must point at a git repository or a tarball');
+    }
+    const at = spec.indexOf('@', 1);
+    const name = at === -1 ? spec : spec.slice(0, at);
+    const range = at === -1 ? undefined : spec.slice(at + 1);
+    if (name.length > PACKAGE_NAME_MAX_LENGTH || !PACKAGE_NAME.test(name)) {
+        throw invalid(spec, 'not a package name the registry accepts');
+    }
+    if (range === '')
+        throw invalid(spec, 'a version after @ must not be empty');
+    return range === undefined ? { kind: 'registry', spec, name } : { kind: 'registry', spec, name, range };
+}
+//# sourceMappingURL=install-spec.js.map

package/node_modules/@deepseek-ai/dsh-plugin-manager/lib/types/operations.js

@@ -0,0 +1,177 @@
+/** Shared profile package operations used by dsh plugin and the running manager. */
+import { existsSync } from 'node:fs';
+import { mkdir, mkdtemp, open } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { execa } from 'execa';
+import { withFileLock, writeFileAtomic } from '@deepseek-ai/dsh-atomic-write';
+import { DEFAULT_PROFILE_BUNDLES, initProfile, PROFILE_TEMPLATES, readProfileManifest, resolveBundleDir, resolveProfileDir, loadOverlayPatches, } from '@deepseek-ai/dsh-app-boot';
+import { scrubbedParentEnv } from '@deepseek-ai/dsh-subprocess';
+/** Resolve relative package specs against the caller's directory.
+ * @param argument One pnpm argument.
+ * @param cwd Invocation directory, never the profile directory.
+ * @returns Anchored argument.
+ */
+export function anchorPathSpec(argument, cwd) {
+    const match = /^(?<prefix>(?:file|link):)?(?<path>\.{1,2}(?:[/\\].*)?)$/.exec(argument);
+    if (match?.groups?.path === undefined)
+        return argument;
+    return `${match.groups.prefix ?? ''}${resolve(cwd, match.groups.path)}`;
+}
+/** Read bundle metadata without loading its JavaScript.
+ * @param name Installed dependency or installation-owned package name.
+ * @param dir Profile directory.
+ * @param anchor Installation manifest.
+ * @returns Resolved metadata, or undefined for packages without bundle metadata.
+ */
+export function bundleManifest(name, dir, anchor) {
+    const packageDir = resolveBundleDir('dsh', name, anchor, dir);
+    const manifest = readProfileManifest('dsh', packageDir);
+    return manifest.dsh?.bundle?.patch === undefined ? undefined : manifest;
+}
+/** Atomically save a profile manifest while retaining unrelated fields.
+ * @param dir Profile directory.
+ * @param manifest Updated document.
+ */
+export async function saveManifest(dir, manifest) {
+    await writeFileAtomic(join(dir, 'package.json'), JSON.stringify(manifest, undefined, 2) + '\n', { mode: 0o600 });
+}
+/** Reconcile package removals and newly installed bundles without re-enabling retained dependencies. */
+async function reconcile(before, dir, anchor, options) {
+    const after = readProfileManifest('dsh', dir);
+    const dependencies = Object.keys(after.dependencies ?? {});
+    const beforeDeps = new Set(Object.keys(before.dependencies ?? {}));
+    const previous = after.dsh?.profile?.bundles ?? [];
+    const bundles = previous.filter((name) => {
+        if (!beforeDeps.has(name) && !dependencies.includes(name))
+            return true;
+        return dependencies.includes(name) && bundleManifest(name, dir, anchor) !== undefined;
+    });
+    for (const name of dependencies) {
+        if (beforeDeps.has(name))
+            continue;
+        const metadata = bundleManifest(name, dir, anchor);
+        if (metadata?.dsh?.bundle === undefined) {
+            options.onOutput?.(`dsh: warning: ${name} declares no dsh.bundle — installed as a plain dependency, not a profile layer\n`, 'stderr');
+            continue;
+        }
+        loadOverlayPatches('dsh', join(resolveBundleDir('dsh', name, anchor, dir), metadata.dsh.bundle.patch));
+        if (!bundles.includes(name)) {
+            bundles.push(name);
+        }
+    }
+    if (JSON.stringify(previous) === JSON.stringify(bundles))
+        return;
+    after.dsh = { ...after.dsh, profile: { ...after.dsh?.profile, bundles } };
+    await saveManifest(dir, after);
+}
+/** Execute pnpm inside a profile whose caller already holds the profile write lock.
+ * @param context Launcher-owned profile and resolution locations.
+ * @param args Pnpm arguments, before relative path anchoring.
+ * @param options Output, activation and cancellation policy.
+ * @returns Exit status and diagnostic path; service output is bounded, CLI output uses inherited descriptors.
+ */
+export async function runProfilePnpm(context, args, options) {
+    const dir = context.dir ?? resolveProfileDir(context.profile, context.home);
+    const before = readProfileManifest('dsh', dir);
+    const logRoot = join(dir, '.plugin-manager', 'logs');
+    await mkdir(logRoot, { recursive: true, mode: 0o700 });
+    const logDir = await mkdtemp(join(logRoot, 'operation-'));
+    const logPath = join(logDir, 'pnpm.log');
+    const log = await open(logPath, 'wx', 0o600);
+    let output = Buffer.alloc(0);
+    let truncated = false;
+    const cancellation = new AbortController();
+    const child = execa(options.command ?? 'pnpm', [...options.args ?? [], ...args.map(arg => anchorPathSpec(arg, context.cwd))], {
+        cwd: dir, env: { ...(options.execution === 'cli' ? process.env : scrubbedParentEnv()), ...options.env }, extendEnv: false, reject: false,
+        stdout: options.execution === 'cli' ? 'inherit' : 'pipe',
+        stderr: options.execution === 'cli' ? 'inherit' : 'pipe',
+        buffer: false, stdin: options.execution === 'cli' ? 'inherit' : 'ignore', cancelSignal: options.signal === undefined
+            ? cancellation.signal : AbortSignal.any([cancellation.signal, options.signal]),
+    });
+    let writes = Promise.resolve();
+    const collect = async (stream, kind) => {
+        try {
+            for await (const chunk of stream) {
+                const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+                writes = writes.then(async () => { await log.write(bytes); });
+                await writes;
+                options.onOutput?.(bytes.toString('utf8'), kind);
+                output = Buffer.concat([output, bytes]);
+                if (output.length > options.outputBytes) {
+                    truncated = true;
+                    output = output.subarray(output.length - options.outputBytes);
+                }
+            }
+        }
+        catch (error) {
+            cancellation.abort();
+            throw error;
+        }
+    };
+    let exitCode;
+    try {
+        const [completion, ...streams] = await Promise.allSettled([child,
+            ...child.stdout === null ? [] : [collect(child.stdout, 'stdout')],
+            ...child.stderr === null ? [] : [collect(child.stderr, 'stderr')],
+        ]);
+        for (const stream of streams)
+            if (stream.status === 'rejected')
+                throw stream.reason;
+        if (completion.status === 'rejected')
+            throw completion.reason;
+        const result = completion.value;
+        exitCode = result.exitCode ?? (result.code === 'ENOENT' ? 127 : 1);
+        if (result.failed && output.length === 0) {
+            const diagnostic = result.shortMessage ?? 'pnpm failed';
+            await log.write(diagnostic);
+            truncated = Buffer.byteLength(diagnostic) > options.outputBytes;
+            output = Buffer.from(diagnostic).subarray(0, options.outputBytes);
+        }
+        if (exitCode === 0 && options.activateNewBundles !== false)
+            await reconcile(before, dir, context.installAnchor, options);
+    }
+    finally {
+        await log.close();
+    }
+    return { exitCode, output: output.toString('utf8'), truncated, logPath };
+}
+/** Initialize and run the dsh plugin command with the same write lock as the service.
+ * @param context Launcher-owned locations.
+ * @param args Pnpm arguments.
+ * @param options Output and cancellation policy.
+ * @returns Completed package-manager result.
+ */
+export async function runPluginCommand(context, args, options) {
+    const dir = context.dir ?? resolveProfileDir(context.profile, context.home);
+    await mkdir(dir, { recursive: true });
+    return withFileLock(join(dir, 'package.json'), async () => {
+        if (!existsSync(join(dir, 'package.json'))) {
+            const template = PROFILE_TEMPLATES[context.profile];
+            initProfile(dir, template?.bundles ?? DEFAULT_PROFILE_BUNDLES);
+            options.onOutput?.(`dsh: initialized profile ${context.profile} at ${dir}\n`, 'stderr');
+        }
+        return runProfilePnpm(context, args, options);
+    }, options.lockWaitMs === undefined ? undefined : { waitMs: options.lockWaitMs });
+}
+/**
+ * Ask the registry what a spec names through `pnpm view`, run in the profile
+ * directory so the registry, proxy, and authentication settings of an install apply.
+ * @param dir Profile directory.
+ * @param spec One registry spec: a package name with an optional range.
+ * @param options Cancellation and the time bound.
+ * @returns pnpm's exit, output, and how the lookup ended.
+ */
+export async function viewProfilePackage(dir, spec, options) {
+    const result = await execa(options.command ?? 'pnpm', [...options.args ?? [], 'view', spec, 'name', 'version', 'description', 'dsh', '--json'], {
+        cwd: dir, env: { ...scrubbedParentEnv(), ...options.env }, extendEnv: false, reject: false, stdin: 'ignore',
+        timeout: options.timeoutMs, ...options.signal === undefined ? {} : { cancelSignal: options.signal },
+    });
+    const cause = result.exitCode === undefined && !result.timedOut && !result.isCanceled
+        ? Object.assign(new Error(result.shortMessage), { code: result.code })
+        : undefined;
+    return {
+        exitCode: result.exitCode ?? null, stdout: result.stdout, stderr: result.stderr, timedOut: result.timedOut,
+        ...cause === undefined ? {} : { cause },
+    };
+}
+//# sourceMappingURL=operations.js.map

package/node_modules/@deepseek-ai/dsh-plugin-manager/lib/types/patch.js

@@ -0,0 +1,50 @@
+/** Comment-preserving profile plugin enablement edits. */
+import { readFile } from 'node:fs/promises';
+import { isMap, isSeq, parseDocument } from 'yaml';
+import { loadOptionalPatches } from '@deepseek-ai/dsh-app-boot';
+import { writeFileAtomic } from '@deepseek-ai/dsh-atomic-write';
+/** Replace the last matching override or append one after existing insertions.
+ * @param filename Current profile patch file.
+ * @param id Unique composition entry id.
+ * @param name Module name used to match name-qualified overrides.
+ * @param enabled Desired entry enablement.
+ * @returns Whether the file changed.
+ */
+export async function writePluginEnabled(filename, id, name, enabled) {
+    let text;
+    try {
+        text = await readFile(filename, 'utf8');
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+        text = '[]\n';
+    }
+    const document = parseDocument(text, {
+        customTags: [{ tag: 'tag:yaml.org,2002:js', resolve: (value) => value }],
+    });
+    const error = document.errors[0];
+    if (error !== undefined)
+        throw error;
+    if (!isSeq(document.contents))
+        throw new Error('Profile patch must be a YAML sequence');
+    loadOptionalPatches('dsh', filename);
+    const items = document.contents.items;
+    const target = items.findLast((item, index) => {
+        if (!isMap(item) || document.getIn([index, 'id']) !== id || item.has('insert'))
+            return false;
+        const expectedName = document.getIn([index, 'name']);
+        return !expectedName || expectedName === name;
+    });
+    if (isMap(target)) {
+        if (document.getIn([items.indexOf(target), 'disabled']) === !enabled)
+            return false;
+        document.setIn([items.indexOf(target), 'disabled'], !enabled);
+    }
+    else {
+        document.add({ id, disabled: !enabled });
+    }
+    await writeFileAtomic(filename, String(document), { mode: 0o600 });
+    return true;
+}
+//# sourceMappingURL=patch.js.map

package/node_modules/@deepseek-ai/dsh-plugin-manager/lib/types/tools.js

@@ -0,0 +1,74 @@
+/** Agent-facing current-profile management using the same service as Web controls. */
+import { assertNever } from '@deepseek-ai/dsh-util-values';
+import { approveEscalation } from '@deepseek-ai/dsh-sandbox';
+import { defineTool } from '@deepseek-ai/dsh-tools';
+/** Required services for the management tool. */
+export const inject = ['tools', 'pluginManager', 'sandboxPolicy'];
+/** Register one management tool for discovery and the four persistent actions.
+ * @param ctx Agent-scoped tool registration context.
+ */
+export function apply(ctx) {
+    ctx.tools.register(defineTool({
+        name: 'plugin_manager',
+        description: 'List plugins or bundles in the current profile, enable or disable them, install a bundle, or remove an installed bundle. Every action requires danger-full-access permission or approval for this call. Approval does not change the session permission mode. Changes affect every session in this profile. List first to obtain exact identifiers. Package installation can execute allowed build scripts. Live profiles apply changes immediately; startup profiles require restart.',
+        parameters: {
+            action: { type: 'string', required: true, enum: ['list_plugins', 'list_bundles', 'set_plugin', 'set_bundle', 'install_bundle', 'remove_bundle'], description: 'Management operation.' },
+            target: { type: 'string', description: 'Plugin entry id, bundle package name, or installation spec, according to action.' },
+            enabled: { type: 'boolean', description: 'Required for set operations; defaults to true for installation.' },
+            approvedBuilds: { type: 'array', items: { type: 'string' }, description: 'For install_bundle: pass names from pendingBuilds only after the user explicitly approves running their install scripts in the conversation. This grants persistent permission for this profile.' },
+            offset: { type: 'number', description: 'Zero-based list offset; defaults to 0.' },
+            limit: { type: 'number', description: 'List page size, from 1 to 100; defaults to 25.' },
+        },
+        output: {
+            schema: { type: 'string' },
+            render: (_args, value) => [{ type: 'text', text: value }],
+        },
+        async execute(args, exec) {
+            const policy = ctx.sandboxPolicy.resolve(exec.agent === undefined ? {} : { session: exec.agent.session });
+            await approveEscalation({
+                requestedMode: 'danger-full-access', effectiveMode: policy.mode, subject: 'plugin management operation',
+                justification: `plugin_manager ${JSON.stringify(args)}. Profile changes persist across sessions; installed Host code runs outside the workspace sandbox.`,
+            }, { approver: ctx.get('approval'), agent: exec.agent, callId: exec.callId,
+                toolName: 'plugin_manager', signal: exec.signal });
+            exec.signal.throwIfAborted();
+            const manager = ctx.pluginManager;
+            switch (args.action) {
+                case 'list_plugins':
+                case 'list_bundles': {
+                    const offset = args.offset ?? 0;
+                    const limit = args.limit ?? 25;
+                    if (!Number.isInteger(offset) || offset < 0 || !Number.isInteger(limit) || limit < 1 || limit > 100) {
+                        throw new Error('offset must be a non-negative integer and limit must be an integer from 1 to 100');
+                    }
+                    const rows = args.action === 'list_plugins' ? await manager.listPlugins() : await manager.listBundles();
+                    const entries = rows.slice(offset, offset + limit);
+                    return JSON.stringify({ entries, total: rows.length,
+                        nextOffset: offset + entries.length < rows.length ? offset + entries.length : null });
+                }
+                case 'set_plugin':
+                case 'set_bundle': {
+                    if (args.target === undefined || args.enabled === undefined)
+                        throw new Error('target and enabled are required');
+                    return JSON.stringify(await (args.action === 'set_plugin'
+                        ? manager.setPluginEnabled(args.target, args.enabled)
+                        : manager.setBundleEnabled(args.target, args.enabled)));
+                }
+                case 'install_bundle':
+                    if (args.target === undefined)
+                        throw new Error('target package spec is required');
+                    return JSON.stringify(await manager.installBundle(args.target, {
+                        ...args.enabled === undefined ? {} : { enabled: args.enabled },
+                        ...args.approvedBuilds === undefined ? {} : { approvedBuilds: args.approvedBuilds },
+                    }));
+                case 'remove_bundle':
+                    if (args.target === undefined)
+                        throw new Error('target bundle name is required');
+                    return JSON.stringify(await manager.removeBundle(args.target));
+                /* v8 ignore next -- tool JSON validation rejects actions outside the declared enum */
+                default: return assertNever(args.action);
+            }
+        },
+        presentCall: args => ({ card: 'generic', title: 'Manage profile plugins', kind: args.action.startsWith('list_') ? 'read' : 'other', rawInput: args }),
+    }));
+}
+//# sourceMappingURL=tools.js.map

package/node_modules/@deepseek-ai/dsh-plugin-manager/lib/types/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/node_modules/@deepseek-ai/dsh-plugin-manager/package.json

@@ -0,0 +1,102 @@
+{
+  "name": "@deepseek-ai/dsh-plugin-manager",
+  "description": "Current-profile plugin and bundle management shared by dsh CLI, Web and agent tools",
+  "version": "0.1.6-alpha.2",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+    "directory": "packages/boot/plugin-manager"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./types": {
+      "types": "./lib/types/types.d.ts",
+      "default": "./lib/types/types.js"
+    },
+    "./typert": {
+      "types": "./lib/typert.host.d.ts",
+      "default": "./lib/typert.host.js"
+    },
+    "./remote": {
+      "types": "./lib/typert.remote-client.d.ts",
+      "default": "./lib/typert.remote-client.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json",
+    "./operations": {
+      "types": "./lib/types/operations.d.ts",
+      "default": "./lib/types/operations.js"
+    },
+    "./tools": {
+      "types": "./lib/types/tools.d.ts",
+      "default": "./lib/types/tools.js"
+    }
+  },
+  "files": [
+    "lib/index.js",
+    "lib/types/**/*.js",
+    "lib/types/**/*.d.ts",
+    "lib/typert.host.js",
+    "lib/typert.host.d.ts",
+    "lib/typert.remote-client.js",
+    "lib/typert.remote-client.d.ts"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "@deepseek-ai/dsh-app-boot": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-atomic-write": "0.1.6-alpha.2",
+    "@deepseek-ai/schemastery": "3.18.2",
+    "execa": "^10.0.0",
+    "yaml": "^2.9.0",
+    "zod": "^4.4.3",
+    "@deepseek-ai/dsh-util-values": "0.1.6-alpha.2"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/cordis-plugin-loader": "1.0.3",
+    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-hmr": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.6-alpha.2"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-hmr": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-user-approval": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/cordis-plugin-loader": "1.0.3",
+    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-hmr": "0.1.6-alpha.2",
+    "@deepseek-ai/cordis-plugin-timer": "1.1.4",
+    "@deepseek-ai/dsh-brand": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.6-alpha.2"
+  }
+}

package/node_modules/@deepseek-ai/dsh-plugin-package-inventory-deepseek/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-plugin-package-inventory-deepseek",
   "description": "Active Loader-backed plugin package inventory for official DeepSeek LLM API requests",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -32,16 +32,16 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@deepseek-ai/dsh-brand": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-brand": "0.1.6-alpha.2",
     "@deepseek-ai/schemastery": "3.18.2"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
     "@deepseek-ai/cordis-plugin-loader": "1.0.3",
-    "@deepseek-ai/dsh-agent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-agent-presets": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-agent-presets": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-agent-presets": {
@@ -49,15 +49,15 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-app-boot": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-app-boot": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2",
     "@deepseek-ai/cordis-plugin-include": "1.0.7",
     "@deepseek-ai/cordis-plugin-loader": "1.0.3",
-    "@deepseek-ai/dsh-agent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-agent-presets": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-scope": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-projection": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-agent-presets": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-deepseek-llm-api-extensions": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-scope": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.6-alpha.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-ptc-runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-ptc-runtime",
   "description": "Abstract PTC execution seam (ctx.ptcRuntime) for the DeepSeek Harness",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -28,10 +28,10 @@
   "license": "MIT",
   "peerDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
-    "@deepseek-ai/dsh-sandbox": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-sandbox": "0.1.6-alpha.2"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
-    "@deepseek-ai/dsh-sandbox": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-sandbox": "0.1.6-alpha.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-ptc-runtime-node/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/ptc-runtime/ptc-runtime-node/README.md
-README.md: f8f7b5535ba8ed1594b898d410df04e24f5dc8ef
-README.zh.md: dd4e33e70f05ae3917f128e33bf26af5d1a915c4
+README.md: 5196d6982c3bf8edda3b8b825e41db83f6994141
+README.zh.md: 16c9f8fc426b1f2d28eaa039ba259f08088664a8

package/node_modules/@deepseek-ai/dsh-ptc-runtime-node/README.md

@@ -85,7 +85,7 @@ The host owns policy, deadlines, binding lookup and process cleanup. The child o
 
 ### Launch and control
 
-The host strips erasable types, resolves the executable and bootstrap in the configured execution world, awaits argv confinement through `ctx.sandbox`, then spawns through `ctx.subprocess`. Cancellation is checked again after confinement, so a provider returning after cancellation cannot start the program. After adopting the inherited control channel, the child retains only executable-search, Windows system, and temporary paths in its OS environment and replaces the program-visible `process.env` with an empty dictionary. Windows ACL setup receives the parent's distinct `TEMP` and `TMP` values for shared grant locks, then replaces both with its private directory before starting the program. These native paths keep nested process creation and native temporary-file APIs functional. The heap limit uses Node argv or a provider-created `NODE_OPTIONS` value for packaged executables; ambient loader and inspector flags are discarded.
+The host strips erasable types, resolves the executable and bootstrap in the configured execution world, awaits argv confinement through `ctx.sandbox`, then spawns through `ctx.subprocess`. Cancellation is checked again after confinement, so a provider returning after cancellation cannot start the program. After adopting the inherited control channel, the child retains only executable-search, Windows system, and temporary paths in its OS environment and replaces the program-visible `process.env` with an empty dictionary. Windows ACL setup receives the parent's distinct `TEMP` and `TMP` values for shared grant locks, then replaces both with its private directory before starting the program. These native paths keep nested process creation and native temporary-file APIs functional. The host preserves `ELECTRON_RUN_AS_NODE` only for child startup so the Desktop executable runs the Node bootstrap; the bootstrap removes the selector before evaluating model code. The heap limit uses Node argv or a provider-created `NODE_OPTIONS` value for packaged executables; ambient loader and inspector flags are discarded.
 
 Length-framed JSON travels separately from stdout/stderr. The host bounds frames and queued writes, validates call identity and declared binding names before dispatch, and refuses invalid traffic. The child flushes its terminal frame and keeps the control channel open until the host closes it. After submitting that frame, it ignores later binding replies and sends no further program control messages. Output capture meters serialized logs plus the completion or diagnostic; fixed result-envelope fields and sandbox metadata are outside that ledger.
 

package/node_modules/@deepseek-ai/dsh-ptc-runtime-node/README.zh.md

@@ -85,7 +85,7 @@ Host 负责策略、截止时间、绑定查找和进程清理。子进程负责
 
 ### 启动与控制
 
-Host 擦除可擦除类型，在配置的执行世界中解析可执行文件与 bootstrap，通过 `ctx.sandbox` 等待 argv 限制准备完成，再通过 `ctx.subprocess` 启动。限制准备完成后会再次检查取消状态，因此提供方在取消后返回也无法启动程序。接管继承的控制通道后，子进程在 OS 环境中只保留可执行文件搜索路径、Windows 系统路径和临时路径，并将程序可见的 `process.env` 替换为空字典。Windows ACL 初始化接收父进程各自的 `TEMP` 和 `TMP` 值以使用共享授权锁，然后在启动程序前将二者替换为私有目录。这些原生路径使嵌套进程创建和原生临时文件 API 仍可正常工作。堆上限通过 Node argv 或为打包可执行文件由提供方构造的 `NODE_OPTIONS` 值传递；环境中的加载器和调试器标志会被丢弃。
+Host 擦除可擦除类型，在配置的执行世界中解析可执行文件与 bootstrap，通过 `ctx.sandbox` 等待 argv 限制准备完成，再通过 `ctx.subprocess` 启动。限制准备完成后会再次检查取消状态，因此提供方在取消后返回也无法启动程序。接管继承的控制通道后，子进程在 OS 环境中只保留可执行文件搜索路径、Windows 系统路径和临时路径，并将程序可见的 `process.env` 替换为空字典。Windows ACL 初始化接收父进程各自的 `TEMP` 和 `TMP` 值以使用共享授权锁，然后在启动程序前将二者替换为私有目录。这些原生路径使嵌套进程创建和原生临时文件 API 仍可正常工作。Host 仅在子进程启动时保留 `ELECTRON_RUN_AS_NODE`，使桌面端可执行文件运行 Node bootstrap；bootstrap 在求值模型代码前删除该选择变量。堆上限通过 Node argv 或为打包可执行文件由提供方构造的 `NODE_OPTIONS` 值传递；环境中的加载器和调试器标志会被丢弃。
 
 带长度分帧的 JSON 与 stdout/stderr 分开传输。Host 限制帧与排队写入，在分派前验证调用身份和已声明的绑定名，并拒绝无效通信。子进程刷新终态帧后仍保持控制通道打开，直到 Host 关闭通道。提交终态帧后，子进程忽略后续绑定回复，不再发送程序控制消息。输出捕获计量序列化日志加完成值或诊断；固定结果信封字段与沙箱元数据不计入该账本。
 

package/node_modules/@deepseek-ai/dsh-ptc-runtime-node/lib/index.js

@@ -953,7 +953,7 @@ var NodePtcRuntime = class extends PtcRuntime {
 			}, signal);
 			if (settled) return await result.promise;
 			if (confined !== void 0) sandbox.enforcement = confined.enforcement;
-			const env = Object.fromEntries(Object.keys(process.env).filter((key) => !STARTUP_ENVIRONMENT_NAMES.has(key.toUpperCase())).map((key) => [key, void 0]));
+			const env = Object.fromEntries(Object.keys(process.env).filter((key) => !STARTUP_ENVIRONMENT_NAMES.has(key.toUpperCase()) && key.toUpperCase() !== "ELECTRON_RUN_AS_NODE").map((key) => [key, void 0]));
 			if (packaged) {
 				env.DSH_PTC_RUNTIME_NODE = "1";
 				env.NODE_OPTIONS = heapFlag;