@toddzheng024/dscode-bundle 0.7.27 → 0.7.29

package/plugins/i18n/messages.mjs

@@ -53,6 +53,40 @@ export const MESSAGES = {
     'doctor.noRoute': 'No model route is available, so the model analysis could not run.',
     'doctor.scope': 'Evidence scope: {traces} recent sessions, {logs} warnings/errors; conversation text, tool arguments and tool output were not read.',
     'doctor.failed': 'Model analysis did not finish: {error}.',
+    'account.signedIn': 'DeepSeek account: signed in on this machine (the stored grant is not re-checked here).',
+    'account.signedOut': 'DeepSeek account: signed out. The DeepSeek route falls back to an API key.',
+    'account.profile': 'Identity: {identity}',
+    'account.profileFailed': 'Identity: could not be read just now.',
+    'account.unknownIdentity': 'no display name',
+    'account.balance': 'Balance: {wallets}',
+    'account.bonus': 'bonus {wallets}',
+    'account.balanceFailed': 'Balance: could not be read just now.',
+    'account.balanceEmpty': 'Balance: no wallet reported.',
+    'account.attempt': 'Last sign-in: {phase}',
+    'account.attemptFailed': 'Last sign-in: {phase} ({reason})',
+    'account.phase.initializing': 'starting',
+    'account.phase.waiting-browser': 'waiting for the browser',
+    'account.phase.exchanging': 'exchanging the code',
+    'account.phase.committing': 'saving the grant',
+    'account.phase.succeeded': 'signed in',
+    'account.phase.cancelled': 'cancelled',
+    'account.phase.expired': 'expired',
+    'account.phase.failed': 'failed',
+    'account.error.network': 'the platform could not be reached',
+    'account.error.protocol': 'the platform answered unexpectedly',
+    'account.error.expired': 'the attempt timed out',
+    'account.error.storage': 'the credential store refused the grant',
+    'account.links': 'Usage: {usage} · Top-up: {topUp}',
+    'account.hintSignedIn': '/account logout signs out on this machine.',
+    'account.hintSignedOut': '/account login opens the browser to sign in.',
+    'account.unavailable': 'This deployment composes no DeepSeek account service.',
+    'account.noCallback': 'Account login needs the loopback callback server; it is disabled (DSCODE_ACCOUNT_LOGIN=0).',
+    'account.usage': 'Usage: /account [login|cancel|logout]',
+    'account.startFailed': 'The sign-in did not start.',
+    'account.nothingToCancel': 'No sign-in is in progress.',
+    'account.starting': 'Signing in to DeepSeek through the browser…',
+    'account.browserOpened': 'The browser was opened. Finish the sign-in there; it lands back on this machine.',
+    'account.browserManual': 'Open this URL to finish the sign-in:',
   },
   'zh-CN': {
     'activity.replying': '正在回复', 'activity.thinking': '正在思考', 'activity.running': '正在执行',
@@ -83,6 +117,40 @@ export const MESSAGES = {
     'doctor.noRoute': '没有可用的模型路由，无法运行模型分析。',
     'doctor.scope': '证据范围：{traces} 个近期会话、{logs} 条 warning/error；未读取对话正文、工具参数或工具输出。',
     'doctor.failed': '模型分析未完成：{error}。',
+    'account.signedIn': 'DeepSeek 账号：本机已登录（此处不重新校验凭据是否仍被服务端接受）。',
+    'account.signedOut': 'DeepSeek 账号：未登录。DeepSeek 路由将回退到 API key。',
+    'account.profile': '身份：{identity}',
+    'account.profileFailed': '身份：暂时读取失败。',
+    'account.unknownIdentity': '无显示名',
+    'account.balance': '余额：{wallets}',
+    'account.bonus': '赠额 {wallets}',
+    'account.balanceFailed': '余额：暂时读取失败。',
+    'account.balanceEmpty': '余额：未返回任何钱包。',
+    'account.attempt': '最近一次登录：{phase}',
+    'account.attemptFailed': '最近一次登录：{phase}（{reason}）',
+    'account.phase.initializing': '正在开始',
+    'account.phase.waiting-browser': '等待浏览器',
+    'account.phase.exchanging': '正在兑换授权码',
+    'account.phase.committing': '正在保存凭据',
+    'account.phase.succeeded': '已登录',
+    'account.phase.cancelled': '已取消',
+    'account.phase.expired': '已过期',
+    'account.phase.failed': '失败',
+    'account.error.network': '无法连接平台',
+    'account.error.protocol': '平台返回异常',
+    'account.error.expired': '尝试超时',
+    'account.error.storage': '凭据存储拒绝写入',
+    'account.links': '用量：{usage} · 充值：{topUp}',
+    'account.hintSignedIn': '/account logout 在本机退出登录。',
+    'account.hintSignedOut': '/account login 打开浏览器登录。',
+    'account.unavailable': '当前部署没有挂载 DeepSeek 账号服务。',
+    'account.noCallback': '账号登录需要回环回调服务，它已被关闭（DSCODE_ACCOUNT_LOGIN=0）。',
+    'account.usage': '用法：/account [login|cancel|logout]',
+    'account.startFailed': '登录没有启动。',
+    'account.nothingToCancel': '当前没有正在进行的登录。',
+    'account.starting': '正在通过浏览器登录 DeepSeek……',
+    'account.browserOpened': '已打开浏览器，请在那里完成登录，完成后会回到本机。',
+    'account.browserManual': '打开这个地址完成登录：',
   },
   'zh-TW': {
     'activity.replying': '正在回覆', 'activity.thinking': '正在思考', 'activity.running': '正在執行',
@@ -113,6 +181,40 @@ export const MESSAGES = {
     'doctor.noRoute': '沒有可用的模型路由，無法執行模型分析。',
     'doctor.scope': '證據範圍：{traces} 個近期工作階段、{logs} 筆 warning/error；未讀取對話內容、工具參數或工具輸出。',
     'doctor.failed': '模型分析未完成：{error}。',
+    'account.signedIn': 'DeepSeek 帳號：本機已登入（此處不重新驗證憑證是否仍被服務端接受）。',
+    'account.signedOut': 'DeepSeek 帳號：未登入。DeepSeek 路由將回退到 API key。',
+    'account.profile': '身分：{identity}',
+    'account.profileFailed': '身分：暫時讀取失敗。',
+    'account.unknownIdentity': '無顯示名稱',
+    'account.balance': '餘額：{wallets}',
+    'account.bonus': '贈額 {wallets}',
+    'account.balanceFailed': '餘額：暫時讀取失敗。',
+    'account.balanceEmpty': '餘額：未回傳任何錢包。',
+    'account.attempt': '最近一次登入：{phase}',
+    'account.attemptFailed': '最近一次登入：{phase}（{reason}）',
+    'account.phase.initializing': '正在開始',
+    'account.phase.waiting-browser': '等待瀏覽器',
+    'account.phase.exchanging': '正在兌換授權碼',
+    'account.phase.committing': '正在儲存憑證',
+    'account.phase.succeeded': '已登入',
+    'account.phase.cancelled': '已取消',
+    'account.phase.expired': '已過期',
+    'account.phase.failed': '失敗',
+    'account.error.network': '無法連線平台',
+    'account.error.protocol': '平台回應異常',
+    'account.error.expired': '嘗試逾時',
+    'account.error.storage': '憑證儲存拒絕寫入',
+    'account.links': '用量：{usage} · 充值：{topUp}',
+    'account.hintSignedIn': '/account logout 在本機登出。',
+    'account.hintSignedOut': '/account login 開啟瀏覽器登入。',
+    'account.unavailable': '目前部署沒有掛載 DeepSeek 帳號服務。',
+    'account.noCallback': '帳號登入需要回環回呼服務，它已被關閉（DSCODE_ACCOUNT_LOGIN=0）。',
+    'account.usage': '用法：/account [login|cancel|logout]',
+    'account.startFailed': '登入沒有啟動。',
+    'account.nothingToCancel': '目前沒有進行中的登入。',
+    'account.starting': '正在透過瀏覽器登入 DeepSeek……',
+    'account.browserOpened': '已開啟瀏覽器，請在那裡完成登入，完成後會回到本機。',
+    'account.browserManual': '開啟這個網址完成登入：',
   },
   ja: {
     'activity.replying': '応答中', 'activity.thinking': '思考中', 'activity.running': '実行中',
@@ -143,6 +245,40 @@ export const MESSAGES = {
     'doctor.noRoute': '利用できるモデルルートがないため、モデル分析を実行できません。',
     'doctor.scope': '根拠の範囲：直近のセッション {traces} 件、warning/error {logs} 件。会話本文、ツール引数、ツール出力は読んでいません。',
     'doctor.failed': 'モデル分析が完了しませんでした：{error}。',
+    'account.signedIn': 'DeepSeek アカウント：このマシンでサインイン済み（保存済み認可の有効性はここでは再確認しません）。',
+    'account.signedOut': 'DeepSeek アカウント：サインアウト。DeepSeek ルートは API キーにフォールバックします。',
+    'account.profile': 'アカウント：{identity}',
+    'account.profileFailed': 'アカウント：今は取得できませんでした。',
+    'account.unknownIdentity': '表示名なし',
+    'account.balance': '残高：{wallets}',
+    'account.bonus': 'ボーナス {wallets}',
+    'account.balanceFailed': '残高：今は取得できませんでした。',
+    'account.balanceEmpty': '残高：ウォレットの報告がありません。',
+    'account.attempt': '直近のサインイン：{phase}',
+    'account.attemptFailed': '直近のサインイン：{phase}（{reason}）',
+    'account.phase.initializing': '開始中',
+    'account.phase.waiting-browser': 'ブラウザ待ち',
+    'account.phase.exchanging': 'コード交換中',
+    'account.phase.committing': '認可を保存中',
+    'account.phase.succeeded': 'サインイン済み',
+    'account.phase.cancelled': 'キャンセル',
+    'account.phase.expired': '期限切れ',
+    'account.phase.failed': '失敗',
+    'account.error.network': 'プラットフォームに接続できません',
+    'account.error.protocol': 'プラットフォームの応答が不正です',
+    'account.error.expired': 'タイムアウトしました',
+    'account.error.storage': '認証情報ストアが保存を拒否しました',
+    'account.links': '使用量：{usage} · チャージ：{topUp}',
+    'account.hintSignedIn': '/account logout でこのマシンからサインアウトします。',
+    'account.hintSignedOut': '/account login でブラウザを開いてサインインします。',
+    'account.unavailable': 'この構成には DeepSeek アカウントサービスがありません。',
+    'account.noCallback': 'アカウントサインインにはループバックのコールバックサーバーが必要ですが、無効です（DSCODE_ACCOUNT_LOGIN=0）。',
+    'account.usage': '使い方：/account [login|cancel|logout]',
+    'account.startFailed': 'サインインを開始できませんでした。',
+    'account.nothingToCancel': '進行中のサインインはありません。',
+    'account.starting': 'ブラウザで DeepSeek にサインインしています……',
+    'account.browserOpened': 'ブラウザを開きました。そこでサインインを完了すると、このマシンに戻ります。',
+    'account.browserManual': 'この URL を開いてサインインを完了してください：',
   },
   ko: {
     'activity.replying': '응답 중', 'activity.thinking': '생각 중', 'activity.running': '실행 중',
@@ -173,6 +309,40 @@ export const MESSAGES = {
     'doctor.noRoute': '사용 가능한 모델 경로가 없어 모델 분석을 실행할 수 없습니다.',
     'doctor.scope': '근거 범위: 최근 세션 {traces}개, warning/error {logs}건. 대화 본문, 도구 인수, 도구 출력은 읽지 않았습니다.',
     'doctor.failed': '모델 분석이 완료되지 않았습니다: {error}.',
+    'account.signedIn': 'DeepSeek 계정: 이 기기에서 로그인됨(저장된 인증이 여전히 유효한지는 여기서 다시 확인하지 않습니다).',
+    'account.signedOut': 'DeepSeek 계정: 로그아웃 상태. DeepSeek 경로는 API 키로 대체됩니다.',
+    'account.profile': '계정: {identity}',
+    'account.profileFailed': '계정: 지금은 읽을 수 없습니다.',
+    'account.unknownIdentity': '표시 이름 없음',
+    'account.balance': '잔액: {wallets}',
+    'account.bonus': '보너스 {wallets}',
+    'account.balanceFailed': '잔액: 지금은 읽을 수 없습니다.',
+    'account.balanceEmpty': '잔액: 보고된 지갑이 없습니다.',
+    'account.attempt': '최근 로그인: {phase}',
+    'account.attemptFailed': '최근 로그인: {phase} ({reason})',
+    'account.phase.initializing': '시작 중',
+    'account.phase.waiting-browser': '브라우저 대기 중',
+    'account.phase.exchanging': '코드 교환 중',
+    'account.phase.committing': '인증 저장 중',
+    'account.phase.succeeded': '로그인됨',
+    'account.phase.cancelled': '취소됨',
+    'account.phase.expired': '만료됨',
+    'account.phase.failed': '실패',
+    'account.error.network': '플랫폼에 연결할 수 없습니다',
+    'account.error.protocol': '플랫폼 응답이 올바르지 않습니다',
+    'account.error.expired': '시간이 초과되었습니다',
+    'account.error.storage': '자격 증명 저장소가 저장을 거부했습니다',
+    'account.links': '사용량: {usage} · 충전: {topUp}',
+    'account.hintSignedIn': '/account logout 으로 이 기기에서 로그아웃합니다.',
+    'account.hintSignedOut': '/account login 으로 브라우저를 열어 로그인합니다.',
+    'account.unavailable': '이 구성에는 DeepSeek 계정 서비스가 없습니다.',
+    'account.noCallback': '계정 로그인에는 루프백 콜백 서버가 필요하지만 비활성화되어 있습니다(DSCODE_ACCOUNT_LOGIN=0).',
+    'account.usage': '사용법: /account [login|cancel|logout]',
+    'account.startFailed': '로그인이 시작되지 않았습니다.',
+    'account.nothingToCancel': '진행 중인 로그인이 없습니다.',
+    'account.starting': '브라우저로 DeepSeek에 로그인하고 있습니다……',
+    'account.browserOpened': '브라우저를 열었습니다. 거기서 로그인을 완료하면 이 기기로 돌아옵니다.',
+    'account.browserManual': '이 URL을 열어 로그인을 완료하세요:',
   },
   es: {
     'activity.replying': 'Respondiendo', 'activity.thinking': 'Pensando', 'activity.running': 'Ejecutando',
@@ -203,6 +373,40 @@ export const MESSAGES = {
     'doctor.noRoute': 'No hay una ruta de modelo disponible, así que el análisis con modelo no se pudo ejecutar.',
     'doctor.scope': 'Alcance de la evidencia: {traces} sesiones recientes, {logs} warnings/errores; no se leyó el texto de la conversación, los argumentos ni la salida de las herramientas.',
     'doctor.failed': 'El análisis con modelo no terminó: {error}.',
+    'account.signedIn': 'Cuenta DeepSeek: sesión iniciada en esta máquina (aquí no se vuelve a comprobar la concesión guardada).',
+    'account.signedOut': 'Cuenta DeepSeek: sin sesión. La ruta DeepSeek recurre a una clave de API.',
+    'account.profile': 'Identidad: {identity}',
+    'account.profileFailed': 'Identidad: no se pudo leer ahora.',
+    'account.unknownIdentity': 'sin nombre visible',
+    'account.balance': 'Saldo: {wallets}',
+    'account.bonus': 'bonificación {wallets}',
+    'account.balanceFailed': 'Saldo: no se pudo leer ahora.',
+    'account.balanceEmpty': 'Saldo: ninguna cartera informada.',
+    'account.attempt': 'Último inicio de sesión: {phase}',
+    'account.attemptFailed': 'Último inicio de sesión: {phase} ({reason})',
+    'account.phase.initializing': 'iniciando',
+    'account.phase.waiting-browser': 'esperando el navegador',
+    'account.phase.exchanging': 'canjeando el código',
+    'account.phase.committing': 'guardando la concesión',
+    'account.phase.succeeded': 'sesión iniciada',
+    'account.phase.cancelled': 'cancelado',
+    'account.phase.expired': 'caducado',
+    'account.phase.failed': 'fallido',
+    'account.error.network': 'no se pudo contactar con la plataforma',
+    'account.error.protocol': 'la plataforma respondió de forma inesperada',
+    'account.error.expired': 'el intento caducó',
+    'account.error.storage': 'el almacén de credenciales rechazó la concesión',
+    'account.links': 'Uso: {usage} · Recarga: {topUp}',
+    'account.hintSignedIn': '/account logout cierra la sesión en esta máquina.',
+    'account.hintSignedOut': '/account login abre el navegador para iniciar sesión.',
+    'account.unavailable': 'Esta composición no incluye el servicio de cuenta DeepSeek.',
+    'account.noCallback': 'El inicio de sesión necesita el servidor de retorno en loopback; está desactivado (DSCODE_ACCOUNT_LOGIN=0).',
+    'account.usage': 'Uso: /account [login|cancel|logout]',
+    'account.startFailed': 'El inicio de sesión no comenzó.',
+    'account.nothingToCancel': 'No hay ningún inicio de sesión en curso.',
+    'account.starting': 'Iniciando sesión en DeepSeek a través del navegador…',
+    'account.browserOpened': 'Se abrió el navegador. Termina ahí el inicio de sesión y volverá a esta máquina.',
+    'account.browserManual': 'Abre esta URL para terminar el inicio de sesión:',
   },
 };
 

package/plugins/memory/index.mjs

@@ -48,7 +48,7 @@ export function apply(ctx, options = {}) {
       await chargeTo(live.has(lastSession) ? lastSession : undefined, 'memory', async () => {
         for await (const chunk of ctx.llm.stream({
           ...target, ...(reasoningEffort ? { reasoningEffort } : {}),
-          system, messages: [createUserMessage({ content: [{ type: 'text', text: JSON.stringify(input) }], source: { kind: 'plugin', plugin: name } })],
+          system, messages: [createUserMessage({ content: [{ type: 'text', text: JSON.stringify(input) }], source: { kind: name } })],
           maxTokens: 12000, signal: deadline,
         })) {
           deadline.throwIfAborted(); assembler.push(chunk);

package/plugins/message-source/kind.mjs

@@ -0,0 +1,20 @@
+/**
+ * Producer identity of one message source.
+ *
+ * DSH 0.1.7 retired the shared `plugin` kind: every producer now declares its own
+ * `kind`, and DSCODE's plugins name themselves the same way. Durable history carries two
+ * older shapes — the raw `{ kind: 'plugin', plugin: '<producer>' }` of a session written
+ * before the upgrade, and the `plugin:<producer>` kind the session format's v3-to-v4
+ * migration writes for a producer it does not know — so every reader of history resolves
+ * all three through this one function.
+ *
+ * @param source - a message source from any release.
+ * @returns the producing subsystem's name, or `''` when the source names none.
+ */
+export function producerKind(source) {
+  if (source === null || typeof source !== 'object') return '';
+  const { kind, plugin } = source;
+  if (kind === 'plugin') return typeof plugin === 'string' ? plugin : '';
+  if (typeof kind !== 'string') return '';
+  return kind.startsWith('plugin:') ? kind.slice('plugin:'.length) : kind;
+}

package/plugins/openrouter/adapter.mjs

@@ -1,4 +1,4 @@
-import { LlmAdapter, LlmError, ReasoningEffortId, attributionHeaders, contentHasImage, offloadRequestImagesWithPolicy, offloadedImageText } from '@deepseek-ai/dsh-llm';
+import { IMAGE_OFFLOAD_REQUIRED_CODE, LlmAdapter, LlmError, ReasoningEffortId, attributionHeaders, contentHasImage, offloadedImageText, projectOffloadedImages, requiredImageOffload } from '@deepseek-ai/dsh-llm';
 import { listOpenRouterModels, openRouterModel } from './models.mjs';
 import { PROVIDER, effortInfo, errorCode, errorMessage, modelReasoning, requestBody, retryAfterMs, sseData, translate } from './wire.mjs';
 
@@ -157,22 +157,38 @@ export class OpenRouterAdapter extends LlmAdapter {
     }
   }
 
-  /** Read request versions of every image, oldest beyond the byte budget replaced by text first. */
+  /**
+   * Read request versions of every retained image.
+   *
+   * DSH 0.1.7 made the offloaded set a durable surface fact: a route projects what the
+   * surface already offloaded into text and reports how much more must go with
+   * `IMAGE_OFFLOAD_REQUIRED`, instead of dropping the oldest occurrences itself. The
+   * `compaction-image-offload` executor records that choice and retries, so the decision
+   * survives a route change, resume and replay rather than being remade per request.
+   */
   async prepareImages(options, entry, connection, signal) {
-    if (!options.messages.some(message => contentHasImage(message.content))) return undefined;
-    if (!entry?.inputModalities?.includes('image')) throw new LlmError(`OpenRouter model "${options.model}" does not accept image input.`, 'UNSUPPORTED_CONTENT');
     const attachments = this.config.resolveAttachments?.();
+    const access = ref => (attachments === undefined ? undefined : this.config.resolveImageAccess?.(attachments, ref));
+    const messages = projectOffloadedImages(options.messages, ref => offloadedImageText(ref, access(ref)));
+    const withImages = messages.some(message => contentHasImage(message.content));
+    if (!withImages) return messages === options.messages ? undefined : { options: { ...options, messages: [...messages] }, versions: new Map(), access };
+    if (!entry?.inputModalities?.includes('image')) throw new LlmError(`OpenRouter model "${options.model}" does not accept image input.`, 'UNSUPPORTED_CONTENT');
     if (attachments === undefined) throw new LlmError('OpenRouter image input requires the durable attachment service.', 'UNSUPPORTED_CONTENT');
-    const access = ref => this.config.resolveImageAccess?.(attachments, ref);
-    const bounded = policyBytes => offloadRequestImagesWithPolicy(policyBytes.messages, {
-      representation: 'base64', maxBytes: connection.maxRequestImageBytes, byteQuantum: 1,
-      byteLength: policyBytes.byteLength, placeholder: ref => offloadedImageText(ref, access(ref)),
-    });
-    const estimated = bounded({ messages: options.messages, byteLength: ref => Math.min(ref.bytes, IMAGE_POLICY.maxBytes) });
     const refs = new Map();
-    for (const message of estimated) collectImages(message.content, refs);
+    for (const message of messages) collectImages(message.content, refs);
     const versions = new Map(await Promise.all([...refs.values()].map(async ref => [ref.attachmentId, await attachments.readImageRequest(ref, IMAGE_POLICY, signal)])));
-    const exact = bounded({ messages: estimated, byteLength: ref => versions.get(ref.attachmentId).bytes });
-    return { options: { ...options, messages: [...exact] }, versions, access };
+    const offloadImages = requiredImageOffload(
+      messages,
+      { representation: 'base64', maxBytes: connection.maxRequestImageBytes, byteQuantum: 1 },
+      block => versions.get(block.attachment.attachmentId).bytes,
+    );
+    if (offloadImages > 0) {
+      throw new LlmError(
+        `OpenRouter request images exceed ${connection.maxRequestImageBytes} bytes; ${offloadImages} more oldest occurrence(s) must be offloaded.`,
+        IMAGE_OFFLOAD_REQUIRED_CODE,
+        { offloadImages },
+      );
+    }
+    return { options: { ...options, messages: [...messages] }, versions, access };
   }
 }

package/plugins/openrouter/index.mjs

@@ -1,28 +1,34 @@
 import z from '@deepseek-ai/schemastery';
 import { LlmError, RetryPolicySchema, assertUsableApiKey, resolveImageAttachmentAccess, resolveRetryPolicy } from '@deepseek-ai/dsh-llm';
 import { credentialRef } from '@deepseek-ai/dsh-credentials';
+import { deepEqualJson } from '@deepseek-ai/dsh-util-values';
+import { plainConfig } from '../cordis-config/plain.mjs';
 import { launchEnvironmentOf } from '@deepseek-ai/dsh-launch-environment';
 import { OpenRouterAdapter, PROVIDER } from './adapter.mjs';
 import { ensureOpenRouterModels } from './models.mjs';
 import { OpenRouterSearchProvider, RoutedSearchProvider } from './search.mjs';
 
 // The `openrouter` route: DSCODE's own OpenRouter adapter over its live model
-// listing, configured by the `llm-openrouter` settings section, plus web search
-// that follows the session's route.
+// listing, configured by this entry's own profile row, plus web search that
+// follows the session's route.
 export const name = 'dscode-openrouter';
 export const inject = ['llm'];
 const NS = 'llm-openrouter';
 const DEFAULT_BASE_URL = 'https://openrouter.ai/api/v1';
 
+// DSH 0.1.7 replaced settings sections with volatile configuration: a field marked
+// `.volatile()` reaches the plugin as a reference the Settings form and a profile edit
+// both write, so each read below sees the current value without a change callback.
 export const Config = z.object({
-  apiKeyEnv: z.string().role('credential-ref').default('OPENROUTER_API_KEY'),
-  baseURL: z.string().default(DEFAULT_BASE_URL),
-  streamIdleTimeoutMs: z.number().min(1).default(300000),
-  maxRequestImageBytes: z.number().step(1).min(1).default(20 * 1024 * 1024),
-  searchModel: z.string().default('deepseek/deepseek-v4-flash'),
-  retryPolicy: RetryPolicySchema,
+  apiKeyEnv: z.string().role('credential-ref').default('OPENROUTER_API_KEY').volatile(),
+  baseURL: z.string().default(DEFAULT_BASE_URL).volatile(),
+  streamIdleTimeoutMs: z.number().min(1).default(300000).volatile(),
+  maxRequestImageBytes: z.number().step(1).min(1).default(20 * 1024 * 1024).volatile(),
+  searchModel: z.string().default('deepseek/deepseek-v4-flash').volatile(),
+  retryPolicy: RetryPolicySchema.volatile(),
 });
 
+
 /** Validated connection facts from one config snapshot. */
 export function resolveOptions(config = {}) {
   const streamIdleTimeoutMs = config.streamIdleTimeoutMs ?? 300000;
@@ -40,18 +46,18 @@ export function resolveOptions(config = {}) {
 }
 
 export function apply(ctx, config = {}) {
-  let current = () => config, lastRaw, lastGood;
+  // The TUI renders this route's own page, so Settings must not generate a form for it.
+  ctx.inject(['settings'], settingsCtx => {
+    settingsCtx.effect(() => settingsCtx.settings.configure({ auto: false }, ctx.fiber));
+  });
+  let lastGood;
   const options = () => {
-    const raw = current();
-    if (raw === lastRaw && lastGood !== undefined) return lastGood;
     try {
-      lastGood = resolveOptions(raw);
-      lastRaw = raw;
+      lastGood = resolveOptions(plainConfig(config));
       return lastGood;
     } catch (error) {
       if (lastGood === undefined) throw error;
-      lastRaw = raw;
-      ctx.logger.error(`${name}: keeping the last good configuration after an invalid settings section`);
+      ctx.logger.error(`${name}: keeping the last good configuration after an invalid edit`);
       ctx.logger.error(error);
       return lastGood;
     }
@@ -75,20 +81,17 @@ export function apply(ctx, config = {}) {
     resolveAttachments: () => ctx.get('attachments'),
     resolveImageAccess: (attachments, ref) => resolveImageAttachmentAccess(attachments, hostPath => ctx.get('fs')?.processPathFromHostPath(hostPath), ref),
   });
-  ctx.llm.registerConfigurableProviders([{ provider: PROVIDER, displayName: 'OpenRouter', settingsNs: NS, settingsPath: [] }]);
+  ctx.llm.registerConfigurableProviders([{ provider: PROVIDER, displayName: 'OpenRouter', settingsNs: ctx.fiber.entry?.options.id ?? NS, settingsPath: [] }]);
   const registration = ctx.llm.registerAdapter([PROVIDER], adapter);
-  let registeredPolicy = JSON.stringify(options().retryPolicy);
-  ctx.inject(['settings'], settingsCtx => {
-    settingsCtx.settings.installSection(ctx, NS, Config, config, {
-      setSource: source => { current = source; },
-      // The retry policy is captured at registration: re-register the route when it changes.
-      onChange: () => {
-        const policy = JSON.stringify(options().retryPolicy);
-        if (policy === registeredPolicy) return;
-        registration.replace([PROVIDER]);
-        registeredPolicy = policy;
-      },
-    });
+  // The retry policy is captured at registration, and a reference carries no change
+  // callback: re-register the route when an edit lands on a different policy.
+  let registeredPolicy = options().retryPolicy;
+  ctx.on('loader/volatile-update', () => {
+    let policy;
+    try { policy = options().retryPolicy; } catch (error) { ctx.logger.warn(error); return; }
+    if (deepEqualJson(policy, registeredPolicy)) return;
+    registration.replace([PROVIDER]);
+    registeredPolicy = policy;
   });
   ctx.inject(['web'], webCtx => {
     const openrouter = new OpenRouterSearchProvider(() => {

package/plugins/session-bridge/communication.mjs

@@ -1,9 +1,10 @@
 import { createUserMessage, freezeMessage } from '@deepseek-ai/dsh-llm';
 import { Mailbox, fail } from './mailbox.mjs';
+import { producerKind } from '../message-source/kind.mjs';
 import { discover, request as socketRequest } from './client.mjs';
 
 const plugin = 'dscode-session-bridge';
-export const communicationId = m => m?.source?.plugin === plugin ? m.source.communicationId : undefined;
+export const communicationId = m => producerKind(m?.source) === plugin ? m.source.communicationId : undefined;
 export const isHuman = m => ['user', 'human'].includes(m?.source?.kind);
 const eligible = a => a?.session.header.agentPreset === 'dscode' || a?.session.header.origin === 'subagent';
 
@@ -17,7 +18,9 @@ export class CommunicationService {
     this.pending = new Set();
     this.closed = false;
     this.disposers = [
-      ctx.on('agent/session-start', ({ agent }) => this.start(agent)),
+      // DSH 0.1.7 retired `agent/session-start`: `agent/created` is awaited at the same
+      // point, once the session is entered and announced.
+      ctx.on('agent/created', ({ agent }) => this.start(agent)),
       ctx.on('agent/pre-step', (payload, next) => this.preStep(payload, next)),
       ctx.on('session/event', (session, event) => this.observe(session, event)),
       ctx.on('agent/inbox/discarded', ({ agent, message }) => {
@@ -102,7 +105,7 @@ export class CommunicationService {
     // Identity must survive retries even when the prior native inbox insertion did not persist.
     return freezeMessage({ ...createUserMessage({ content: [{ type: 'text', text:
       `[External source: ${e.from.kind === 'session' ? `session:${e.from.sessionId}` : e.from.source}] [${e.kind}/${e.mode}]\nMessage ID: ${e.messageId}${e.inReplyTo ? `; reply to: ${e.inReplyTo}` : ''}\n${e.text}` }],
-      source: { kind: 'plugin', plugin, form: 'relay', communicationId: e.messageId, requestId: e.idempotencyKey,
+      source: { kind: plugin, form: 'relay', communicationId: e.messageId, requestId: e.idempotencyKey,
         label: e.from.kind === 'session' ? `session:${e.from.sessionId}` : e.from.source, mode: e.mode, composedAt: e.createdAt } }), id: e.messageId });
   }
   async confirm(state) {

package/plugins/session-bridge/server.mjs

@@ -5,6 +5,7 @@ import { randomUUID, createHash } from 'node:crypto';
 import { createUserMessage } from '@deepseek-ai/dsh-llm';
 import { normalizeSessionTitle } from '@deepseek-ai/dsh-session-title';
 import { ensureSocketDirectory } from './paths.mjs';
+import { producerKind } from '../message-source/kind.mjs';
 
 export const BRIDGE_SOURCE = 'dscode-session-bridge';
 const MAX_REQUEST = 128 * 1024, MAX_BUFFER = 8 * 1024 * 1024;
@@ -51,7 +52,7 @@ export class SessionBridge {
     if (!cache) { cache = { seq: 0, values: new Map() }; this.receipts.set(session, cache); }
     for (const event of session.snapshotEvents(cache.seq)) {
       const messages = event.type === 'agent/inbox/spliced' ? event.data.inserted : event.type === 'user/message' ? [event.data] : [];
-      for (const message of messages) if (message.source.kind === 'plugin' && message.source.plugin === BRIDGE_SOURCE && message.source.requestId) {
+      for (const message of messages) if (producerKind(message.source) === BRIDGE_SOURCE && message.source.requestId) {
         cache.values.set(message.source.requestId, { digest: message.source.digest, messageId: message.id });
       }
     }
@@ -82,7 +83,7 @@ export class SessionBridge {
     let messageId = previous?.messageId;
     if (!previous) {
       const message = createUserMessage({ content: [{ type: 'text', text: `[External source: ${source}]\n${text}` }],
-        source: { kind: 'plugin', plugin: BRIDGE_SOURCE, form: 'relay', requestId, digest, label: source, mode } });
+        source: { kind: BRIDGE_SOURCE, form: 'relay', requestId, digest, label: source, mode } });
       // Explicit naming uses the native title service, including sanitization,
       // persistence, UI events and cancellation of stale automatic title work.
       // A duplicate request must never undo a newer title.

package/plugins/session-bridge/tasks.mjs

@@ -21,6 +21,8 @@ const MAX_WAITING_REQUESTS = 16
 const MAX_PREVIEW_CHARS = 72
 
 /** The plugin name the session bridge stamps on its relayed messages. */
+import { producerKind } from '../message-source/kind.mjs'
+
 const BRIDGE_PLUGIN = 'dscode-session-bridge'
 
 /** Tool names that address another session. */
@@ -67,7 +69,7 @@ function relayFields(data) {
   if (data === null || typeof data !== 'object') return undefined
   const source = data.source
   if (source === null || typeof source !== 'object') return undefined
-  if (source.kind !== 'plugin' || source.plugin !== BRIDGE_PLUGIN || source.form !== 'relay') return undefined
+  if (producerKind(source) !== BRIDGE_PLUGIN || source.form !== 'relay') return undefined
   const label = typeof source.label === 'string' && source.label !== '' ? source.label : undefined
   const id = typeof source.communicationId === 'string' && source.communicationId !== '' ? source.communicationId : undefined
   if (label === undefined && id === undefined) return undefined

package/plugins/session-cards/index.mjs

@@ -16,7 +16,7 @@ export function apply(ctx, config = {}) {
     const reasoningEffort = await effortFor(ctx.llm, base, 'low', signal);
     await chargeTo(sessionId, 'session-card', async () => {
       for await (const chunk of ctx.llm.stream({ ...base, ...(reasoningEffort ? { reasoningEffort } : {}), system: TOPIC_PROMPT,
-        messages: [createUserMessage({ content: [{ type: 'text', text: JSON.stringify(input) }], source: { kind: 'plugin', plugin: name } })],
+        messages: [createUserMessage({ content: [{ type: 'text', text: JSON.stringify(input) }], source: { kind: name } })],
         maxTokens: 2000, signal })) {
         signal.throwIfAborted(); assembler.push(chunk);
         if (chunk.type === 'finish') finished = true;

package/plugins/time-marks/index.mjs

@@ -12,6 +12,7 @@
 import z from '@deepseek-ai/schemastery';
 import { createUserMessage } from '@deepseek-ai/dsh-llm';
 import { arrivalMark, resolveTimeZone, turnEndMark } from './marks.mjs';
+import { producerKind } from '../message-source/kind.mjs';
 export const name = 'dscode-time-marks';
 export const Config = z.object({
   /** Fallback display zone; empty uses the host zone. */
@@ -42,7 +43,7 @@ export function apply(ctx, config = {}) {
     for (const message of payload.messages) {
       // Marks are injected context, never an inbox arrival; skipping our own
       // producer keeps a future delivery path from marking itself.
-      if (message.source?.plugin === name) continue;
+      if (producerKind(message.source) === name) continue;
       const line = arrivalMark(message, at, timeZone);
       if (line !== null && lines.length < MARK_LIMIT) lines.push(line);
     }
@@ -60,7 +61,7 @@ export function apply(ctx, config = {}) {
       // the prompt there, not this mark.
       messages: [createUserMessage({
         content: [{ type: 'text', text: lines.join('\n') }],
-        source: { kind: 'plugin', plugin: name, form: 'snapshot' },
+        source: { kind: name, form: 'snapshot' },
       }), ...decision.messages],
     };
   }, { prepend: true });

package/plugins/time-marks/marks.mjs

@@ -7,6 +7,8 @@
  * @module dscode-time-marks/marks
  */
 
+import { producerKind } from '../message-source/kind.mjs'
+
 /** Shortest queue wait worth naming; below it the message simply arrived. */
 const WAIT_FLOOR_MS = 1_000
 
@@ -108,15 +110,14 @@ export function elapsedText(ms) {
  * @returns the attribution clause.
  */
 export function describeSource(source) {
-  const kind = plain(source?.kind)
-  if (kind === 'user') return 'user message'
-  if (kind !== 'plugin') return kind === '' ? 'message' : `message via ${kind}`
-  if (source.form === 'relay') {
+  const producer = producerKind(source)
+  if (producer === 'user') return 'user message'
+  if (source?.form === 'relay') {
     const mode = plain(source.mode) || 'queue'
     const label = plain(source.label) || 'another session'
     return `${mode} relay from ${label}`
   }
-  return `message from ${plain(source.plugin) || 'a plugin'}`
+  return producer === '' ? 'message' : `message from ${producer}`
 }
 
 /**

package/plugins/triggers/config.mjs

@@ -34,7 +34,7 @@ export const DEFAULTS = Object.freeze({
 });
 
 /** Permission presets an unattended run may use; `ask` can never complete. */
-const UNATTENDED_PERMISSIONS = Object.freeze(['auto', 'workspace-write', 'read-only', 'danger-full-access']);
+const UNATTENDED_PERMISSIONS = Object.freeze(['auto-review', 'auto', 'workspace-write', 'read-only', 'danger-full-access']);
 
 const ID_PATTERN = /^[a-z0-9][a-z0-9._-]*$/u;
 

package/plugins/triggers/tools.mjs

@@ -12,7 +12,7 @@ export function mutationProblem(ctx, agent) {
   const plan = ctx.get('planMode')?.get(agent);
   if (plan?.active || plan?.pending) return 'Schedule management is unavailable in plan mode';
   const permission = ctx.permissionPresets.current(agent.session);
-  if (!['auto', 'ask', 'workspace-write', 'danger-full-access'].includes(permission)) return 'Schedule management requires a writable permission preset';
+  if (!['auto-review', 'auto', 'ask', 'workspace-write', 'danger-full-access'].includes(permission)) return 'Schedule management requires a writable permission preset';
 }
 
 export function registerTriggerTools(ctx, { home, ...deps }) {

package/plugins/tui-tools/doctor.mjs

@@ -131,7 +131,7 @@ export async function analyzeDoctorEvidence(ctx, evidence, route, signal, { mode
     const reasoningEffort = await effortFor(ctx.llm, route, 'low', deadline);
     await chargeTo(sessionId, 'doctor', async () => {
       for await (const chunk of ctx.llm.stream({ provider: route.provider, model: route.model, ...(reasoningEffort ? { reasoningEffort } : {}), maxTokens: 4096, system: SYSTEM,
-        messages: [createUserMessage({ content: [{ type: 'text', text: JSON.stringify(evidence) }], source: { kind: 'plugin', plugin: 'dscode-doctor' } })], signal: deadline })) {
+        messages: [createUserMessage({ content: [{ type: 'text', text: JSON.stringify(evidence) }], source: { kind: 'dscode-doctor' } })], signal: deadline })) {
         deadline.throwIfAborted(); assembler.push(chunk);
         if (chunk.type === 'finish') finished = true;
       }