@whyshu/argent-engine 0.0.0-stage → 0.6.1

package/engine/scripts/pack-plugins.mjs

@@ -0,0 +1,140 @@
+#!/usr/bin/env node
+/**
+ * pack-plugins.mjs — 付费插件包打包上传（决策㉓：鉴权下载通道）
+ *
+ * 打包付费插件（plugins/argent-* 与 presets/argent-*）→ tarball + 版本/哈希清单
+ * → 上传到 whyshu 服务器 /home/whyshu/server/packs-store/（非 public，经 API 鉴权下载）。
+ *
+ * 用法:
+ *   node pack-plugins.mjs              # 打包并上传全部付费包
+ *   node pack-plugins.mjs kanban       # 仅打包指定包
+ *   SKIP_UPLOAD=1 node pack-plugins.mjs  # 只打包不上传（产物在 dist/packs/）
+ */
+
+import { homedir, tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { mkdirSync, mkdtempSync, readFileSync, writeFileSync, copyFileSync, existsSync, rmSync, readdirSync, statSync } from 'node:fs'
+import { execFileSync } from 'node:child_process'
+import { createHash } from 'node:crypto'
+
+const REPO = process.env.ARGENT_DISH_HOME || join(homedir(), '.argent-dsh')
+// 产物目录可覆盖（`PACKS_OUT`，与 release-argent.sh --publish-packs 同一变量名）——
+// 默认 dist/packs 在仓库工作树里，未跟踪但**未被 .gitignore 挡**，用 /tmp 可彻底避免误提交。
+const OUT = process.env.PACKS_OUT || join(REPO, 'dist', 'packs')
+const SERVER = 'ubuntu@81.69.222.211'
+const SERVER_DIR = '/home/whyshu/server/packs-store'
+const SSH = ['-i', join(homedir(), '.ssh', 'whyshu.pem')]
+
+// 付费包定义（id → 组件清单；与 whyshu-svr PLUGIN_PACKS 对齐）
+// 两种形态：
+//   · `plugins`/`presets` = 插件包：逐组件 tar（版本取仓库 VERSION）
+//   · `capability` = **能力包**：产物交给既有构建器 `capability_pack.py --build <id> --tar`
+//     （含 PACK.json，`install-argent.mjs --from-packs` 可直装），版本/摘要取自同一构建器的
+//     `--emit-server-manifest`（**不**用仓库 VERSION —— 能力包有自己的语义化版本）
+const PACKS = {
+  // P3.5（2026-09-17）：kanban 包删除（argent-kanban 已退役）；gateway 包去掉 argent-notify（已退役）
+  gateway: { plugins: ['argent-gateway'], presets: [] },
+  // P0（2026-10-06，id 对齐）：旧 id `hr-office` 是**已退役的角色名**（2026-10-04 退役，preset 只作墓碑），
+  //   而服务端 `PLUGIN_PACKS` 与注册表 `capabilities.hr` 的口径是**能力包 id `hr`**（minPlan=pro）。
+  //   本表若仍写旧 id ⇒ packs-store/manifest.json 里只有 `hr-office`、服务端按 `hr` 查不到版本
+  //   （`packs[].version = null`：unlocked=true 却拿不到产物）⇒ id 必须与**能力 id**同名。
+  hr: { capability: 'hr' },
+  'ml-daily': { plugins: ['argent-ml'], presets: ['argent-ml-daily'] },
+  'ml-fulfillment': { plugins: ['argent-ml'], presets: ['argent-ml-fulfillment'] },
+}
+
+const targets = process.argv.slice(2)
+const upload = process.env.SKIP_UPLOAD !== '1'
+
+function packDir(dir, name) {
+  // tar czf 相对路径打包（包内以 <name>/ 为顶层，便于解压到对应位置）
+  const tar = execFileSync('tar', ['czf', '-', '-C', join(dir, '..'), name], { maxBuffer: 64 * 1024 * 1024 })
+  return tar
+}
+
+function sha256(buf) {
+  return createHash('sha256').update(buf).digest('hex')
+}
+
+const PY = process.env.ARGENT_PY || 'python3'
+
+/** 能力包发布口径索引（`capability_pack.py --emit-server-manifest`）：能力 → 版本 + **整包内容摘要**。 */
+function capabilityIndex() {
+  const tmp = join(mkdtempSync(join(tmpdir(), 'pack-plugins-manifest-')), 'server-manifest.json')
+  execFileSync(PY, [join(REPO, 'scripts', 'capability_pack.py'), '--emit-server-manifest', '--out', tmp],
+    { cwd: REPO, stdio: ['ignore', 'pipe', 'pipe'] })
+  const doc = JSON.parse(readFileSync(tmp, 'utf-8'))
+  rmSync(tmp, { force: true })
+  return doc.capabilities || {}
+}
+
+mkdirSync(OUT, { recursive: true })
+const manifest = {}
+let capIndex = null
+
+for (const [id, def] of Object.entries(PACKS)) {
+  if (targets.length && !targets.includes(id)) continue
+  if (def.capability) {
+    // 能力包：现场构建。构建器**拒绝**把包装配进仓库（`REPO in out_dir.parents` ⇒ 抛错）
+    // ⇒ 先落到临时目录，再把 tgz 取进 OUT。
+    capIndex = capIndex || capabilityIndex()
+    const info = capIndex[def.capability]
+    if (!info) { console.error(`✗ ${id}: 能力清单里没有 ${def.capability}`); process.exit(1) }
+    const tmpRoot = mkdtempSync(join(tmpdir(), `pack-plugins-${def.capability}-`))
+    execFileSync(PY, [join(REPO, 'scripts', 'capability_pack.py'), '--build', def.capability,
+      '--out-dir', join(tmpRoot, def.capability), '--tar', '--force'],
+    { cwd: REPO, stdio: ['ignore', 'pipe', 'inherit'] })
+    const fname = `${def.capability}-${info.version}.tgz`
+    const built = join(tmpRoot, fname)
+    if (!existsSync(built)) { console.error(`✗ ${id}: 构建器未产出 ${fname}`); process.exit(1) }
+    const buf = readFileSync(built)
+    copyFileSync(built, join(OUT, fname))
+    rmSync(tmpRoot, { recursive: true, force: true })
+    // 两个 sha 别混（用途不同；口径与 id⇄能力⇄档位对应表见
+    // whyshu-svr `docs/ops/deploy-5cebae1-hr-pack.md`）：
+    //   · contentDigest = **整包内容摘要**（PACK.json 里 `文件:sha16` 排序求摘要 = `--expect-sha256` 口径，
+    //     也是服务端能力清单 `capability-packs.json` 的 sha256）
+    //   · sha256        = tgz **字节**摘要（传输完整性；store 清单既有口径）
+    manifest[id] = { version: info.version, files: { [def.capability]: {
+      file: fname, sha256: sha256(buf), contentDigest: info.sha256, size: buf.length } } }
+    console.log(`✓ ${id}@${info.version}：${fname}（${(buf.length / 1024).toFixed(1)} KB，内容摘要 ${info.sha256.slice(0, 16)}…）`)
+    continue
+  }
+  const parts = []
+  for (const p of def.plugins) {
+    const src = join(REPO, 'plugins', p)
+    if (!existsSync(src)) { console.error(`✗ ${id}: 插件缺失 ${p}`); process.exit(1) }
+    parts.push(packDir(src, p))
+  }
+  for (const pr of def.presets) {
+    const src = join(REPO, 'presets', pr)
+    if (!existsSync(src)) { console.error(`✗ ${id}: preset 缺失 ${pr}`); process.exit(1) }
+    parts.push(packDir(src, pr))
+  }
+  // 合并所有 part 为一个 tgz（tar 拼接：多段 tar 流合并不规范——改为逐组件独立 tgz，清单记录）
+  const version = (readFileSync(join(REPO, 'VERSION'), 'utf-8') || '0.0.0').trim()
+  const files = {}
+  for (let i = 0; i < parts.length; i++) {
+    const component = [...def.plugins, ...def.presets][i]
+    const fname = `${component}.tgz`
+    writeFileSync(join(OUT, fname), parts[i])
+    files[component] = { file: fname, sha256: sha256(parts[i]), size: parts[i].length }
+  }
+  manifest[id] = { version, files }
+  console.log(`✓ ${id}@${version}：${Object.keys(files).join(', ')}`)
+}
+
+writeFileSync(join(OUT, 'manifest.json'), JSON.stringify(manifest, null, 2))
+console.log(`\n清单: ${join(OUT, 'manifest.json')}`)
+
+if (upload) {
+  console.log(`\n上传到 ${SERVER}:${SERVER_DIR} ...`)
+  execFileSync('ssh', [...SSH, SERVER, `mkdir -p ${SERVER_DIR}`])
+  execFileSync('scp', [...SSH, join(OUT, 'manifest.json'), `${SERVER}:${SERVER_DIR}/`])
+  for (const id of Object.keys(manifest)) {
+    for (const f of Object.values(manifest[id].files)) {
+      execFileSync('scp', [...SSH, join(OUT, f.file), `${SERVER}:${SERVER_DIR}/`])
+    }
+  }
+  console.log('上传完成（经 /api/argent/packs/<id>/download 鉴权下载）')
+}

package/engine/scripts/patches/dsh-llm-deepseek--transport-diagnostics.patch

@@ -0,0 +1,297 @@
+# requires-dsh: >=0.1.7   （TRANSPORT 可诊断性；判定语义不变，只加可观测字段）
+#
+# 目标：@deepseek-ai/dsh-llm-deepseek/lib/index.js（官方 Messages 适配器；**问述代理复用同一份**，
+#       见 plugins/argent-core/src/llm-whyshu.js —— 它只把 provider 注册成 `whyshu`）。
+#
+# 为什么（2026-10-02）：`generate()` 的 catch 把"非空闲超时、非用户中断"的**一切**错误折叠成
+#   `DeepSeek Messages transport failed` / TRANSPORT，`failure` 只剩 message+code
+#   ⇒ 落到会话日志的 `llm/retry` 事件也只有这两项（实测 session-878f3e3b：6 次连败，事后完全
+#   分不清 ECONNRESET / 提前关闭 / 5xx 断流），且无法回答"这次到底产出了没有"。
+#
+# 本补丁做三件事（**都不改 TIMEOUT/ABORTED/TRANSPORT 三分支判定**）：
+#   ① 捕获 provider 侧请求标识（request-id / x-request-id / x-deepseek-request-id）与 HTTP 状态，
+#      并作为 `requestId` 塞进 LlmError.failure ⇒ 随 `llm/retry` 事件**落进会话日志**；
+#   ② 统计已产出内容（chunks / text / reasoning / toolArgs / blockStarts / settled / anyOutput）；
+#   ③ 打两行 warn：`[argent-transport] ...` 单行摘要（可 grep）+ 结构化 `TRANSPORT detail %o`。
+#
+# 回滚：git checkout 该文件（或用 patch -R）。重启不必要（模块在下次进程启动时加载）。
+--- /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-llm-deepseek/lib/index.js.orig
++++ /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-llm-deepseek/lib/index.js
+@@ -2061,6 +2061,191 @@
+ 	var e = new Error(message);
+ 	return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
+ });
++/**
++ * Argent hotfix (2026-10-02) — TRANSPORT 可诊断性（**只加可观测字段，不改判定语义**）。
++ *
++ * 事故：`generate()` 的 catch 把"非空闲超时、非用户中断"的**一切**错误折叠成
++ * `DeepSeek Messages transport failed` / TRANSPORT，`failure` 里只剩 message+code
++ * ⇒ 落到会话日志的 `llm/retry` 事件也只有这两项，事后完全分不清是
++ * 连接被对端重置（ECONNRESET）、提前关闭（socket hang up）、读超时（ETIMEDOUT）、
++ * 还是 5xx 断流；也无法回答"这次到底产出了没有"（决定能不能安全重试）。
++ * 下面这些纯函数只负责收集与格式化，**不参与** TIMEOUT/ABORTED/TRANSPORT 的分支判定。
++ */
++let argentTransportCallSeq = 0;
++/** 建一次请求的诊断累加器（每回合一个）。 */
++function argentTransportDiagnostics(options, connection) {
++	return {
++		provider: options.provider,
++		model: options.model,
++		sessionId: options.sessionId === void 0 ? void 0 : String(options.sessionId),
++		purpose: options.purpose,
++		callId: `${Date.now().toString(36)}-${++argentTransportCallSeq}`,
++		startedAt: Date.now(),
++		signalAbortedAtStart: options.signal?.aborted === true,
++		idleTimeoutMs: connection.streamIdleTimeoutMs,
++		requestId: void 0,
++		httpStatus: void 0,
++		responseAt: void 0,
++		bodySnippet: void 0,
++		produced: {
++			chunks: 0,
++			blockStarts: 0,
++			blocksEnded: 0,
++			textChars: 0,
++			reasoningChars: 0,
++			toolCallChars: 0,
++			toolCallNames: [],
++			settled: false
++		},
++		lastChunkAt: void 0
++	};
++}
++/** 记一条已产出的流分片 —— "有没有输出" = `chunks>0` 且任一类计数非零。 */
++function argentRecordProducedChunk(diagnostics, chunk) {
++	if (diagnostics === void 0 || chunk === null || typeof chunk !== "object") return;
++	const produced = diagnostics.produced;
++	produced.chunks += 1;
++	diagnostics.lastChunkAt = Date.now();
++	if (chunk.type === "text-delta") produced.textChars += typeof chunk.text === "string" ? chunk.text.length : 0;
++	else if (chunk.type === "reasoning-delta") produced.reasoningChars += typeof chunk.text === "string" ? chunk.text.length : 0;
++	else if (chunk.type === "tool-call-delta") {
++		produced.toolCallChars += typeof chunk.argumentsDelta === "string" ? chunk.argumentsDelta.length : 0;
++		if (typeof chunk.name === "string" && chunk.name.length > 0 && !produced.toolCallNames.includes(chunk.name)) produced.toolCallNames.push(chunk.name);
++	} else if (chunk.type === "block-start") produced.blockStarts += 1;
++	else if (chunk.type === "block-end") produced.blocksEnded += 1;
++	else if (chunk.type === "finish" || chunk.type === "usage") produced.settled = true;
++}
++/** `produced` 的摘要字段（写进日志，也用于"是否可安全重试"的判断依据）。 */
++function argentProducedSummary(diagnostics) {
++	const produced = diagnostics?.produced;
++	if (produced === void 0) return { chunks: 0, textChars: 0, reasoningChars: 0, toolCallChars: 0, blockStarts: 0, blocksEnded: 0, toolCallNames: [], settled: false, anyOutput: false };
++	return {
++		chunks: produced.chunks,
++		textChars: produced.textChars,
++		reasoningChars: produced.reasoningChars,
++		toolCallChars: produced.toolCallChars,
++		blockStarts: produced.blockStarts,
++		blocksEnded: produced.blocksEnded,
++		toolCallNames: [...produced.toolCallNames],
++		settled: produced.settled,
++		anyOutput: produced.textChars + produced.reasoningChars + produced.toolCallChars + produced.blockStarts > 0
++	};
++}
++/** 从响应头取 provider 侧请求标识（与 `providerError()` 同一组头、同一优先级）。 */
++function argentRequestIdOf(headers) {
++	if (headers === void 0 || headers === null || typeof headers.get !== "function") return void 0;
++	const id = headers.get("request-id") ?? headers.get("x-request-id") ?? headers.get("x-deepseek-request-id");
++	return id === null || id === void 0 || id.length === 0 ? void 0 : ProviderRequestId(id);
++}
++/** 响应一到就记下状态码与请求标识（**即便后面流断掉**，这些也已经拿到了）。 */
++function argentNoteResponse(diagnostics, response) {
++	if (diagnostics === void 0) return;
++	diagnostics.responseAt = Date.now();
++	diagnostics.httpStatus = response.status;
++	const id = argentRequestIdOf(response.headers);
++	if (id !== void 0) diagnostics.requestId = id;
++}
++/** 记非 2xx 的响应体片段（判 5xx 断流 vs 网关错误页用；截断，避免日志被 HTML 淹没）。 */
++function argentNoteHttpFailure(diagnostics, response, text) {
++	if (diagnostics === void 0) return;
++	diagnostics.httpStatus = response.status;
++	const id = argentRequestIdOf(response.headers);
++	if (id !== void 0) diagnostics.requestId = id;
++	diagnostics.bodySnippet = typeof text === "string" ? text.slice(0, 400) : void 0;
++}
++/**
++ * 把任意 error 折成**可读的 cause 形态**。覆盖：
++ *   · `ECONNRESET` / `socket hang up` / `ETIMEDOUT` / `UND_ERR_*` —— Node fetch(undici) 的
++ *     连接层错误，**通常在 `error.cause` 上**（undici 会包一层 `TypeError: fetch failed` 或
++ *     `TypeError: terminated`）；
++ *   · 非 2xx 状态码 + 响应体片段 —— provider 侧网关/上游错误；
++ *   · `AbortError` —— 区分"空闲 watchdog 触发"（已归 TIMEOUT）与"其它中断"。
++ * @param error - catch 到的原始错误。
++ * @param depth - 递归深度（只跟 cause 链，最多 4 层）。
++ * @returns 平铺的 cause 事实（可直接 JSON 化）。
++ */
++function argentDescribeTransportCause(error, depth = 0) {
++	const out = {
++		depth,
++		name: void 0,
++		message: void 0,
++		code: void 0,
++		errno: void 0,
++		syscall: void 0,
++		abort: false,
++		kind: "unknown"
++	};
++	if (error === null || error === void 0 || typeof error !== "object") {
++		out.message = String(error);
++		return out;
++	}
++	out.name = typeof error.name === "string" ? error.name : void 0;
++	out.message = typeof error.message === "string" ? error.message : String(error);
++	out.code = typeof error.code === "string" ? error.code : void 0;
++	out.errno = error.errno === void 0 ? void 0 : String(error.errno);
++	out.syscall = typeof error.syscall === "string" ? error.syscall : void 0;
++	out.abort = out.name === "AbortError" || out.code === "ABORT_ERR";
++	const text = `${out.name ?? ""} ${out.code ?? ""} ${out.message ?? ""}`;
++	if (out.abort) out.kind = "AbortError";
++	else if (out.code === "ECONNRESET" || /socket hang up|ECONNRESET/i.test(text)) out.kind = "ECONNRESET";
++	else if (out.code === "ETIMEDOUT" || /ETIMEDOUT|timed? ?out/i.test(text)) out.kind = "ETIMEDOUT";
++	else if (out.code === "ECONNREFUSED" || /ECONNREFUSED/i.test(text)) out.kind = "ECONNREFUSED";
++	else if (out.code === "EPIPE") out.kind = "EPIPE";
++	else if (out.code === "UND_ERR_SOCKET" || out.code === "ERR_STREAM_PREMATURE_CLOSE") out.kind = "EARLY_CLOSE";
++	else if (out.code === "UND_ERR_ABORTED") out.kind = "AbortError";
++	else if (out.code === "UND_ERR_CONNECT_TIMEOUT" || out.code === "UND_ERR_HEADERS_TIMEOUT" || out.code === "UND_ERR_BODY_TIMEOUT") out.kind = "ETIMEDOUT";
++	else if (typeof out.code === "string" && out.code.startsWith("UND_ERR")) out.kind = out.code;
++	else if (/terminated|premature close|other side closed/i.test(text)) out.kind = "EARLY_CLOSE";
++	else if (/fetch failed/i.test(text)) out.kind = "FETCH_FAILED";
++	return out;
++}
++/** 汇总本回合的全部诊断事实（一次调用产出日志行 + 结构化字段）。 */
++function argentTransportReport(diagnostics, error, connection) {
++	const now = Date.now();
++	const cause = argentDescribeTransportCause(error?.cause ?? error);
++	const produced = argentProducedSummary(diagnostics);
++	const requestId = diagnostics?.requestId ?? (typeof error?.failure?.requestId === "string" ? error.failure.requestId : void 0);
++	const status = diagnostics?.httpStatus;
++	return {
++		provider: diagnostics?.provider,
++		model: diagnostics?.model,
++		sessionId: diagnostics?.sessionId,
++		purpose: diagnostics?.purpose,
++		callId: diagnostics?.callId,
++		requestId,
++		httpStatus: status,
++		produced,
++		elapsedMs: diagnostics === void 0 ? void 0 : now - diagnostics.startedAt,
++		msSinceLastChunk: diagnostics?.lastChunkAt === void 0 ? void 0 : now - diagnostics.lastChunkAt,
++		idleTimeoutMs: connection.streamIdleTimeoutMs,
++		cause,
++		causeChain: (() => {
++			const chain = [];
++			let node = error;
++			for (let i = 0; i < 4 && node !== null && node !== void 0 && typeof node === "object"; i += 1) {
++				chain.push(argentDescribeTransportCause(node, i));
++				node = node.cause;
++			}
++			return chain;
++		})(),
++		bodySnippet: diagnostics?.bodySnippet,
++		aborted: false
++	};
++}
++/** 单行、可 grep 的日志文本（`[argent-transport]` 前缀固定，便于 tail/grep 定位）。 */
++function argentTransportLogLine(report) {
++	const p = report.produced;
++	return `[argent-transport] route=${report.provider ?? "?"}/${report.model ?? "?"}`
++		+ ` callId=${report.callId ?? "?"} providerRequestId=${report.requestId ?? "(none)"}`
++		+ ` httpStatus=${report.httpStatus ?? "(no response)"} cause=${report.cause.kind}`
++		+ ` causeName=${report.cause.name ?? "?"} causeCode=${report.cause.code ?? "?"} causeErrno=${report.cause.errno ?? "?"}`
++		+ ` causeMessage=${JSON.stringify(String(report.cause.message ?? "").slice(0, 200))}`
++		+ ` produced={chunks:${p.chunks},text:${p.textChars},reasoning:${p.reasoningChars},toolArgs:${p.toolCallChars},blockStarts:${p.blockStarts},settled:${p.settled},anyOutput:${p.anyOutput}}`
++		+ ` toolCalls=${JSON.stringify(report.produced.toolCallNames ?? [])}`
++		+ ` elapsedMs=${report.elapsedMs ?? "?"} msSinceLastChunk=${report.msSinceLastChunk ?? "?"}`
++		+ ` idleTimeoutMs=${report.idleTimeoutMs ?? "?"} sessionId=${report.sessionId ?? "(none)"}`
++		+ (report.bodySnippet === void 0 ? "" : ` bodySnippet=${JSON.stringify(report.bodySnippet.slice(0, 200))}`);
++}
+ /** DeepSeek provider using Messages content and native thinking replay. */
+ var DeepSeekAdapter = class extends LlmAdapter {
+ 	dependencies;
+@@ -2111,20 +2296,32 @@
+ 		try {
+ 			const consumer = new AbortController();
+ 			const watchdog = __addDisposableResource(env_1, idleWatchdog(options.signal === void 0 ? consumer.signal : AbortSignal.any([consumer.signal, options.signal]), connection.streamIdleTimeoutMs, "MESSAGES_IDLE"), false);
++			/* Argent hotfix (2026-10-02)：TRANSPORT 诊断累加器（只观测，不参与判定）。 */
++			const transportDiagnostics = argentTransportDiagnostics(options, connection);
+ 			const iterator = this.request(options, connection, watchdog.signal, () => {
+ 				watchdog.pulse();
+-			});
++			}, transportDiagnostics);
+ 			try {
+ 				while (true) {
+ 					const next = await watchdog.next(iterator);
+ 					if (next.done) return;
++					argentRecordProducedChunk(transportDiagnostics, next.value);
+ 					yield next.value;
+ 				}
+ 			} catch (error) {
+ 				if (timeoutOf(watchdog.signal, "MESSAGES_IDLE") !== void 0) throw new LlmError("DeepSeek Messages stream idle timeout", "TIMEOUT", { cause: error });
+ 				if (options.signal?.aborted) throw new LlmError("DeepSeek Messages request aborted", "ABORTED", { cause: error });
+ 				if (error instanceof LlmError) throw error;
+-				throw new LlmError("DeepSeek Messages transport failed", "TRANSPORT", { cause: error });
++				/* Argent hotfix (2026-10-02)：**判定不变**（仍是 TRANSPORT），只补可观测字段：
++				 *   ① 通过 onTransportFailure 打一行可 grep 的 cause/streamId/已产出长度；
++				 *   ② 把 provider 侧请求标识塞进 LlmError.failure ⇒ 随 llm/retry 事件**落进会话日志**
++				 *      （此前 failure 只有 message+code，事后无法复盘）。 */
++				const transportReport = argentTransportReport(transportDiagnostics, error, connection);
++				this.dependencies.onTransportFailure?.(transportReport);
++				throw new LlmError("DeepSeek Messages transport failed", "TRANSPORT", {
++					cause: error,
++					...transportReport.requestId === void 0 ? {} : { requestId: transportReport.requestId }
++				});
+ 			} finally {
+ 				consumer.abort();
+ 				try {
+@@ -2138,7 +2335,7 @@
+ 			__disposeResources(env_1);
+ 		}
+ 	}
+-	async *request(options, connection, signal, activity) {
++	async *request(options, connection, signal, activity, transportDiagnostics) {
+ 		signal.throwIfAborted();
+ 		const { messages, versions } = await prepareImages(options.messages, connection, options.model, this.dependencies.resolveAttachments?.(), this.imageAccess, signal);
+ 		const auth = await this.dependencies.resolveAuth(connection);
+@@ -2197,8 +2394,12 @@
+ 						...options.purpose === "compaction" ? { "x-deepseek-harness-compact": "1" } : {}
+ 					}
+ 				});
++				/* Argent hotfix (2026-10-02)：响应一到就记下状态码 + provider 请求标识
++				 * ——**即便随后流被对端切断**，这两个也已拿到，是事后定位的唯一线索。 */
++				argentNoteResponse(transportDiagnostics, response);
+ 				if (!response.ok) {
+ 					const text = await response.text();
++					argentNoteHttpFailure(transportDiagnostics, response, text);
+ 					let raw;
+ 					try {
+ 						raw = JSON.parse(text);
+@@ -2252,6 +2453,27 @@
+ 		onExtensionsOmitted: ({ provider, model, fields, error }) => {
+ 			ctx.logger.warn(`llm-deepseek: sending route "${provider}/${model}" without request extension fields ${fields.join(", ")} because they failed to serialize: %o`, error);
+ 		},
++		/* Argent hotfix (2026-10-02)：TRANSPORT 的可诊断性。
++		 * 一次失败打两行：① 单行、可 grep 的摘要（cause/streamId/已产出长度）；
++		 * ② 结构化对象（`%o`）供 `dsh` 日志详情/后续工具解析。判定语义不变。 */
++		onTransportFailure: (report) => {
++			ctx.logger.warn(argentTransportLogLine(report));
++			ctx.logger.warn("llm-deepseek: TRANSPORT detail %o", {
++				route: `${report.provider ?? "?"}/${report.model ?? "?"}`,
++				callId: report.callId,
++				providerRequestId: report.requestId,
++				httpStatus: report.httpStatus,
++				produced: report.produced,
++				elapsedMs: report.elapsedMs,
++				msSinceLastChunk: report.msSinceLastChunk,
++				idleTimeoutMs: report.idleTimeoutMs,
++				cause: report.cause,
++				causeChain: report.causeChain,
++				bodySnippet: report.bodySnippet,
++				sessionId: report.sessionId,
++				purpose: report.purpose
++			});
++		},
+ 		resolveAttachments: () => ctx.get("attachments"),
+ 		resolveImageAccess: (attachments, ref) => resolveImageAttachmentAccess(attachments, (hostPath) => ctx.get("fs")?.processPathFromHostPath(hostPath), ref),
+ 		prepareExtensions: (request) => ctx.get("deepseekLlmApiExtensions")?.prepare(request) ?? Promise.resolve({
+

package/engine/scripts/patches/dsh-session--append-message-shape.patch

@@ -0,0 +1,15 @@
+--- /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-session/lib/index.js.orig
++++ /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-session/lib/index.js
+@@ -1187,6 +1187,12 @@
+ 			...surfaceMetadataSnapshot
+ 		});
+ 		validateSessionEventData(event, `session event "${type}" at seq ${event.seq}`);
++		/* Hardening (2026-09-18, argent-dsh hotfix): the append boundary must reject a
++		   message event that could never be replayed. Otherwise a malformed tool/result
++		   (e.g. a render that returned a bare string) lands in the log and only fails
++		   when the session is next LOADED from disk — by then the session cannot even be
++		   opened, and a surface replace cannot repair it. Fail at the writer instead. */
++		assertMessageEventShape(event, `session event "${type}" at seq ${event.seq}`);
+ 		this.surfaceManager.validateNext(event);
+ 		if (entry !== void 0) entry.appending = true;
+ 		try {

package/engine/scripts/patches/dsh-session--tool-result-block-017.patch

@@ -0,0 +1,28 @@
+# requires-dsh: >=0.1.7   （0.1.7 重写校验器时丢了 0.1.5 的 tool-result 形状规则；本补丁恢复防毒化检查。
+#   2026-09-29 修正：初版恢复的"必须是 tool-result block"与 v4 形态矛盾（v4 里 tool-result wrapper 是
+#   retired syntax，v3→v4 迁移器展开为 text blocks），会误杀全部含 tool/result 的 v4 session 加载；
+#   现改为"content 为非空 ContentBlock 数组"——保留防裸字符串毒化的核心，兼容 v4。）
+--- /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-session/lib/index.js.orig
++++ /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-session/lib/index.js
+@@ -1172,6 +1172,21 @@
+ 	}
+ 	if (type !== "tool/result") return;
+ 	if (sourceRecord["kind"] !== "tool" || typeof sourceRecord["callId"] !== "string" || sourceRecord["callId"] === "") throw new Error(`${subject} message must have tool source`);
++	/* Hardening (2026-09-29, argent-dsh hotfix for 0.1.7): upstream rewrote this validator and
++	   dropped the "exactly one tool-result block with array content" rule that 0.1.5 had. Without
++	   it a malformed tool/result (e.g. a render that returned a bare string) is accepted at the
++	   append boundary and only blows up when the session is next LOADED from disk — by then the
++	   session cannot even be opened (see AGENTS.md 会话毒化事故). Restore the rule. */
++	{
++		const content = messageRecord["content"];
++		const block = content[0];
++		/* 2026-09-29 修正：原规则"必须是 tool-result block"与 v4 形态矛盾——v4 里 tool-result
++		   wrapper 是 retired syntax（由 v3→v4 迁移器展开为 text blocks + message.toolCallId，
++		   见 v3-to-v4 的 assertV4RetiredSyntax）。恢复旧规则会误杀**全部含 tool/result 的 v4
++		   session 加载**（实测 06732069 报 "must contain one tool-result block"）。
++		   防"毒化"（裸字符串 content）的核心 = content 为非空 ContentBlock 数组。 */
++		if (content.length === 0 || typeof block !== "object" || block === null || typeof block["type"] !== "string") throw new Error(`${subject} message must contain a non-empty content block array`);
++	}
+ 	if (messageRecord["toolCallId"] !== sourceRecord["callId"]) throw new Error(`${subject} message has mismatched tool call ids`);
+ }
+ /** Whether an unknown value carries the current provider/model pair. */

package/engine/scripts/patches/dsh-session-format-v0-to-v1--permission-preset-origin.patch

@@ -0,0 +1,11 @@
+--- /tmp/dsh-fix-test/index.js.orig	2026-09-10 16:21:27
++++ /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-session-format-v0-to-v1/lib/index.js	2026-09-10 16:21:27
+@@ -116,7 +116,7 @@
+ 		"retry"
+ 	]),
+ 	"model/selection": disposition(["provider", "model"], ["reasoningEffort"]),
+-	"permission/preset": disposition(["preset"]),
++	"permission/preset": disposition(["preset"], ["origin"]),
+ 	"plan/mode": disposition(["active"]),
+ 	"request/context": disposition(["provider", "model"], ["contextWindow"]),
+ 	"request/header": disposition(["header", "reason"], ["startsSeries"]),

package/engine/scripts/patches/dsh-session-format-v3-to-v4--turn-outside-replace.patch

@@ -0,0 +1,20 @@
+# requires-dsh: >=0.1.7   （v3→v4 迁移器 0.1.7 新增；修复"turn 外替换型 tool/result"过严拒绝）
+--- /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-session-format-v3-to-v4/lib/index.js.orig
++++ /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-session-format-v3-to-v4/lib/index.js
+@@ -617,7 +617,15 @@
+ 	}
+ 	tool(event, data) {
+ 		if (event.type === "tool/result" && event["surfaceOp"] !== "append") {
+-			this.requireTurn(event.type);
++			/* Hardening (2026-09-29, argent-dsh hotfix for 0.1.7): v3 允许"turn 结束后的替换型
++			   tool/result"（编辑/重放场景：重写早先 turn 的工具结果，如 surface 自替换）。
++			   原 requireTurn 过严 → 整个 session 迁移失败（'tool/result is outside an
++			   open turn'，实测 06732069/34c3e088 等）。现在：turn 外时校验 data.turn 指向
++			   已关闭的历史 turn（防真损坏，放行合法历史）。 */
++			if (this.turn === null) {
++				const t = data["turn"];
++				if (!Number.isSafeInteger(t) || t >= this.nextTurn) throw new SessionFormatError(`${event.type} is outside an open turn`);
++			}
+ 			return;
+ 		}
+ 		this.requireStep(event, data);

package/engine/scripts/patches/dsh-session-persistence-jsonl--worker-bundled-migrators.patch

@@ -0,0 +1,39 @@
+# requires-dsh: >=0.1.7   （迁移校验 worker 的**打包副本**——模块版 hotfix 打不到它，必须单独打）
+#
+# 背景（2026-09-29 事故，实例 session-06732069「Argent项目」）：
+#   v3→v4 迁移由 @deepseek-ai/dsh-session-persistence-jsonl 起 worker 线程做最终校验
+#   （lib/worker.cjs，539KB 打包件，内联了一整份 v0→v1 与 v3→v4 的迁移器/校验器）。
+#   此前所有 hotfix 只打在 lib/index.js 这些**模块**上 ⇒
+#     · 离线校验器（verify-session-migration.mjs）import 模块 → 一直假绿；
+#     · 真实 resume 走 worker 的**旧副本** → 抛
+#       SessionPersistenceCorruptionError: stored log is corrupt:
+#       Error: tool/result is outside an open turn
+#     ⇒ 前端发送消息弹白 toast、会话打不开。
+#   本补丁把两处 hotfix 同步进 worker 打包副本：
+#     ① v3→v4 `tool()`：turn 结束后的**替换型** tool/result 在 v3 里合法（编辑/重放），
+#        原 requireTurn 过严 → 整个迁移失败；
+#     ② v0 `permission/preset`：容忍旧数据里的 `origin` 字段（= 2026-09-10 hotfix 的镜像，
+#        此前同样只打在模块上）。
+--- /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-session-persistence-jsonl/lib/worker.cjs.orig
++++ /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-session-persistence-jsonl/lib/worker.cjs
+@@ -6749,4 +6749,4 @@
+ 	]),
+ 	"model/selection": disposition(["provider", "model"], ["reasoningEffort"]),
+-	"permission/preset": disposition(["preset"]),
++	"permission/preset": disposition(["preset"], ["origin"]),
+ 	"plan/mode": disposition(["active"]),
+@@ -11331,7 +11331,13 @@
+ 	}
+ 	tool(event, data) {
+ 		if (event.type === "tool/result" && event["surfaceOp"] !== "append") {
+-			this.requireTurn(event.type);
++			/* Hardening (2026-09-29, argent-dsh hotfix, mirrored into the bundled worker):
++			   v3 allows a REPLACEMENT tool/result after its turn closed (edit/replay); the strict
++			   requireTurn killed the entire migration. Same rule as the module patch. */
++			if (this.turn === null) {
++				const t = data["turn"];
++				if (!Number.isSafeInteger(t) || t >= this.nextTurn) throw new SessionFormatError(`${event.type} is outside an open turn`);
++			}
+ 			return;
+ 		}
+ 		this.requireStep(event, data);

package/engine/scripts/patches/dsh-tools--render-return-shape.patch

@@ -0,0 +1,50 @@
+--- /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-tools/lib/index.js.orig
++++ /opt/homebrew/lib/node_modules/@deepseek-ai/dsh-tools/lib/index.js
+@@ -834,6 +834,38 @@
+ * @param options - typed definition and optional finalizer and presenters.
+ * @returns A registry-ready definition.
+ */
++/**
++ * Normalize a tool's `output.render` return value into ContentBlock[].
++ *
++ * Hardening (2026-09-18, argent-dsh hotfix): dsh-tools used to publish the render
++ * return value as the tool-result content VERBATIM. A render that returned a bare
++ * string therefore wrote `content:"…"` into the session log, and every later request
++ * then threw `content.some is not a function` inside dsh-llm's contentHasImage() —
++ * permanently poisoning that session (it could not even be reopened: the loader
++ * rejects the event with "message must contain one tool-result block"). Wrap a
++ * non-array return instead of letting it reach the log, and name the tool.
++ * @param toolName - registered tool name, for the diagnostic.
++ * @param rendered - the value `output.render` returned.
++ * @returns the value unchanged when it already is a ContentBlock array.
++ */
++function normalizeRenderOutput(toolName, rendered) {
++	if (Array.isArray(rendered)) return rendered;
++	let text;
++	if (typeof rendered === "string") text = rendered;
++	else if (rendered === void 0) text = "undefined";
++	else {
++		try {
++			text = JSON.stringify(rendered) ?? String(rendered);
++		} catch {
++			text = String(rendered);
++		}
++	}
++	console.warn(`[dsh-tools] tool "${toolName}": output.render must return a ContentBlock array but returned ${rendered === null ? "null" : typeof rendered}; wrapping it as one text block (contract: [{type:"text",text}]).`);
++	return [{
++		type: "text",
++		text
++	}];
++}
+ function defineTool(options) {
+ 	const userExecute = options.execute;
+ 	const userFinalizeContent = options.finalizeContent;
+@@ -3423,7 +3455,7 @@
+ 		} catch (error) {
+ 			throw projectionError(tool.name, "render", error);
+ 		}
+-		const content = snapshotProjection(tool.name, "render", rendered);
++		const content = snapshotProjection(tool.name, "render", normalizeRenderOutput(tool.name, rendered));
+ 		let meta;
+ 		if (exec.parent === void 0 && tool.output.presentationMeta !== void 0) {
+ 			let projected;