@wowyuarm/dsh-agent-team 0.1.15 → 0.2.0

package/README.md

@@ -41,18 +41,22 @@ If this looks useful, a star on [GitHub](https://github.com/wowyuarm/dsh-agent-t
 
 ### 1. Check DSH
 
-This release is certified against DSH `0.1.7-rc.1`. If `dsh` is not installed yet, start DSH with the official package:
+This release is certified against DSH `0.2.0-rc.1`. The current `latest` of `@deepseek-ai/dsh` is `0.1.7-rc.2`, and `0.2.0-rc.1` is published on its `next` tag, so ask for that version explicitly — starting from `latest` skips this bundle on load. On DSH `0.1.7-rc.2`, stay on `@wowyuarm/dsh-agent-team` `0.1.15`.
 
 ```sh
-npx @deepseek-ai/dsh web
+npx @deepseek-ai/dsh@0.2.0-rc.1 web
 ```
 
+Install it globally if you want the `dsh` command for the steps below: `npm i -g @deepseek-ai/dsh@0.2.0-rc.1`.
+
 Stop it, then install Agent Team into the `web` profile:
 
 ```sh
-dsh plugin --profile web add @wowyuarm/dsh-agent-team
+dsh plugin --profile web add @wowyuarm/dsh-agent-team@0.2.0
 ```
 
+The version is pinned deliberately: pnpm skips releases published less than 24 hours ago, so an unpinned `@latest` install resolves to the previous release on release day.
+
 ### 2. Start the Web UI
 
 ```sh

package/README.zh.md

@@ -41,18 +41,22 @@ Task Thread 把 Claim、Agent 交接、Human 验收和后续回复保留在同
 
 ### 1. 检查 DSH
 
-当前版本已针对 DSH `0.1.7-rc.1` 完成认证。如果还没有安装 `dsh`，先使用官方 package 启动 DSH：
+当前版本已针对 DSH `0.2.0-rc.1` 完成认证。`@deepseek-ai/dsh` 当前的 `latest` 是 `0.1.7-rc.2`，`0.2.0-rc.1` 发布在它的 `next` 标签上，所以要显式指定这个版本——用 `latest` 启动会在加载时跳过本 bundle。若你的 DSH 是 `0.1.7-rc.2`，请停留在 `@wowyuarm/dsh-agent-team` `0.1.15`。
 
 ```sh
-npx @deepseek-ai/dsh web
+npx @deepseek-ai/dsh@0.2.0-rc.1 web
 ```
 
+需要下面步骤里的 `dsh` 命令就全局安装：`npm i -g @deepseek-ai/dsh@0.2.0-rc.1`。
+
 先停止它，再把 Agent Team 安装到 `web` profile：
 
 ```sh
-dsh plugin --profile web add @wowyuarm/dsh-agent-team
+dsh plugin --profile web add @wowyuarm/dsh-agent-team@0.2.0
 ```
 
+这里刻意写明确切版本：pnpm 会跳过发布不满 24 小时的版本，不带版本号的 `@latest` 在发布当天会装到上一版。
+
 ### 2. 启动 Web UI
 
 ```sh

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wowyuarm/dsh-agent-team",
-  "version": "0.1.15",
+  "version": "0.2.0",
   "license": "MIT",
   "description": "A persistent agent team for long-running collaboration in DeepSeek Harness",
   "repository": {
@@ -27,9 +27,10 @@
     "check:core-skills": "node scripts/check-core-skills.mjs",
     "check:boundaries": "node scripts/check-package-boundaries.mjs",
     "check:versions": "node scripts/check-version-consistency.mjs",
+    "check:facades": "node scripts/sync-paths.mjs --check",
     "check:artifact": "node scripts/check-artifact.mjs .",
     "check:public-baseline": "node scripts/check-public-baseline.mjs .",
-    "test": "npm run generate:typert && npm run check:docs && npm run check:core-skills && npm run check:boundaries && npm run check:versions && vitest run",
+    "test": "npm run generate:typert && npm run check:facades && npm run check:docs && npm run check:core-skills && npm run check:boundaries && npm run check:versions && vitest run",
     "test:browser": "npm run build && node scripts/run-browser-test.mjs",
     "preview": "node scripts/check-preview-credentials.mjs && npm run build && node scripts/run-preview.mjs",
     "preview:ui": "npm run build && node scripts/run-ui-preview.mjs",
@@ -60,7 +61,7 @@
     }
   },
   "dependencies": {
-    "@wowyuarm/dsh-context-continuity": "^0.1.4",
+    "@wowyuarm/dsh-context-continuity": "^0.1.6",
     "yaml": "^2.9.1",
     "zod": "^4.4.3"
   },
@@ -145,50 +146,51 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-agent-default-model": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-agent-preset": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-agent-preset-registry": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-agent-tool-presentation": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-api-remotes": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-api-session-controller": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-api-workspace-controller": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-brand": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-client-locale": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-client-ui-input-trigger": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-client-ui-settings-general": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-client-ui-workspace": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-command-compact": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-compaction": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-home-paths": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-invariants": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-llm": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-sandbox-policy": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-scope": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-session": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-session-format-catalog": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-session-persistence": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-skill": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-skill-filesystem": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-storage-domain": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-token-meter": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-tool-bash": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-tool-fs": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-tool-fs-search": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-tool-jobs": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-tool-pwsh": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-tool-skill": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-tool-todo": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-tool-web": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-tools": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-typert-protocol": ">=0.1.7-rc.1 <0.1.8",
-    "@deepseek-ai/dsh-workspace": ">=0.1.7-rc.1 <0.1.8",
+    "@deepseek-ai/dsh-agent": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-agent-default-model": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-agent-preset": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-agent-preset-registry": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-agent-tool-presentation": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-app-boot": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-api-remotes": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-api-session-controller": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-api-workspace-controller": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-brand": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-client-locale": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-client-ui-input-trigger": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-client-ui-layout": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-client-ui-primitives": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-client-ui-renderer": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-client-ui-settings-general": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-client-ui-workspace": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-command-compact": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-compaction": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-home-paths": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-invariants": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-llm": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-sandbox-policy": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-scope": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-session": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-session-format-catalog": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-session-persistence": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-skill": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-skill-filesystem": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-storage-domain": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-token-meter": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-tool-bash": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-tool-fs": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-tool-fs-search": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-tool-jobs": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-tool-pwsh": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-tool-skill": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-tool-todo": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-tool-web": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-tools": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.2.0-rc.1 <0.2.1",
+    "@deepseek-ai/dsh-workspace": ">=0.2.0-rc.1 <0.2.1",
     "react": "^18.2.0"
   },
   "keywords": [

package/packages/agent-team/lib/context-source.js

@@ -34,19 +34,24 @@ export const AGENT_TEAM_V3_RENAMED_KIND = `plugin:${AGENT_TEAM_PLUGIN_ID}`;
 /** The kind the read-time conversion renames one producer's released V3 sources into. */
 export const v3RenamedSourceKind = (producer) => `plugin:${producer}`;
 /**
- * Whether one message source carries this plugin's own attribution. Both
- * identities are matched by exact kind equality — never by a `plugin:`
- * prefix test, which would claim third-party producers' rows as Team facts.
+ * Whether one source kind is a producer's own: the kind it writes now and the
+ * read-time conversion of its released V3 history. Both identities are matched
+ * by exact kind equality — never by a `plugin:` prefix test, which would claim
+ * third-party producers' rows as that producer's facts.
  */
+export function matchesProducerKind(kind, producer) {
+    return kind === producer || kind === v3RenamedSourceKind(producer);
+}
+/** Whether one message source carries this plugin's own attribution. */
 export function isAgentTeamSource(source) {
-    return source.kind === AGENT_TEAM_PLUGIN_ID || source.kind === AGENT_TEAM_V3_RENAMED_KIND;
+    return matchesProducerKind(source.kind, AGENT_TEAM_PLUGIN_ID);
 }
 /**
  * Whether one source kind carries this plugin's attribution, for call sites
- * whose sources arrive untyped. Exact identities only, never a prefix test.
+ * whose sources arrive untyped.
  */
 export function isAgentTeamSourceKind(kind) {
-    return kind === AGENT_TEAM_PLUGIN_ID || kind === AGENT_TEAM_V3_RENAMED_KIND;
+    return matchesProducerKind(kind, AGENT_TEAM_PLUGIN_ID);
 }
 /** Handoff snapshot section name carrying the model-authored prose. */
 export const HANDOFF_SECTION_NAME = 'HANDOFF';

package/packages/agent-team/lib/environment-check.js

@@ -0,0 +1,102 @@
+/** The one local environment check: how the running DSH compares to the line this bundle declares. */
+import { evaluatePluginCompatibility, getDshRuntimeVersion } from '@deepseek-ai/dsh-app-boot';
+import { bundleVersionOf, readInstalledManifest } from "./installed-manifest.js";
+/** Prefix of every peer that sits on the DSH version line; the bare scope is not one. */
+const DSH_PEER_PREFIX = '@deepseek-ai/dsh-';
+/** The `>=lower <upper>` shape every DSH peer carries; a comparator series, not a single version. */
+const SUPPORT_RANGE_SHAPE = /^>=(\S+)\s+<(\S+)$/u;
+/**
+ * Read the support line from the installed manifest's DSH peers, or nothing.
+ *
+ * Every `@deepseek-ai/dsh-*` peer must carry exactly the same range, and it must
+ * be a `>=<lower> <upper>` series: the version line is the manifest's own claim
+ * and a partially drifted manifest cannot state one. `scripts/check-version-consistency.mjs`
+ * holds the same shape to the certified baseline, so a run of this bundle
+ * states the same line its README does. Returns `undefined` when the peers
+ * disagree or the shape is unreadable.
+ */
+export function supportRangeOf(manifest) {
+    const fields = manifest;
+    if (typeof fields.peerDependencies !== 'object' || fields.peerDependencies === null)
+        return undefined;
+    const ranges = new Set();
+    for (const [name, range] of Object.entries(fields.peerDependencies)) {
+        if (!name.startsWith(DSH_PEER_PREFIX))
+            continue;
+        if (typeof range !== 'string')
+            return undefined;
+        ranges.add(range);
+    }
+    const distinct = [...ranges];
+    if (distinct.length !== 1)
+        return undefined;
+    const shape = SUPPORT_RANGE_SHAPE.exec(distinct[0]);
+    if (shape === null)
+        return undefined;
+    return Object.freeze({ lower: shape[1], upper: shape[2] });
+}
+/**
+ * Judge one already-resolved triple, so every branch is testable without an
+ * environment. The verdict comes from the Harness's own
+ * `evaluatePluginCompatibility` — the plugin manager decides installability with
+ * that same function, and prerelease ordering is exactly what a hand-written
+ * comparison gets wrong.
+ *
+ * @param manifest - the installed bundle's parsed manifest, the source of the declared support line.
+ * @param runtimeVersion - the running DSH version, or `'unknown'` when it could not be read.
+ * @param bundleVersion - the installed bundle version, or `'unknown'`.
+ * @param unavailable - why the running version is not known, recorded when it is `'unknown'`.
+ * @returns the report the settings page renders.
+ */
+export function evaluateEnvironment(manifest, runtimeVersion, bundleVersion, unavailable) {
+    const range = supportRangeOf(manifest);
+    const base = {
+        bundleVersion,
+        ...(range === undefined ? {} : { certifiedDshVersion: range.lower, supportRange: range }),
+    };
+    if (runtimeVersion === 'unknown') {
+        return Object.freeze({ ...base, verdict: 'undetermined', reason: unavailable ?? 'the running dsh version is unavailable' });
+    }
+    const running = { ...base, dshVersion: runtimeVersion };
+    // A real violation is answered first, and it is never downgraded to
+    // `undetermined`: a peer that drifted to a range of its own is a genuine
+    // "not satisfied" even though no single range can then be stated for the
+    // page. Only when nothing is violated does the question become whether the
+    // declared line can be stated at all.
+    // One evaluation covers every dsh peer in the manifest, and `range` above is
+    // derived from exactly those peers: re-judging the range it prints could not
+    // change this answer.
+    const satisfied = evaluatePluginCompatibility(manifest, {}, runtimeVersion) === undefined;
+    if (!satisfied)
+        return Object.freeze({ ...running, verdict: 'out-of-range' });
+    // Nothing is violated but there is no line to state: the page withholds the
+    // range rather than inventing one.
+    if (range === undefined) {
+        return Object.freeze({ ...base, verdict: 'undetermined', reason: 'the declared dsh support range is unreadable or drifted' });
+    }
+    return Object.freeze({ ...running, verdict: 'ok' });
+}
+/**
+ * Read this Host's own environment: the installed bundle version, the declared
+ * support line, and how the running DSH compares to it.
+ *
+ * The certified DSH version is the range's lower bound, never the newest cut
+ * tested against it: `docs/dsh-release-compatibility.md` §4 records a baseline
+ * inside the declared range without moving the peers, so every version spot
+ * keeps naming the bound. Reading it from anywhere else would reintroduce the
+ * hand-maintained constant this check exists to remove.
+ *
+ * @returns the report, with `verdict: 'undetermined'` for any fact not established.
+ */
+export function reportEnvironment() {
+    const manifest = readInstalledManifest() ?? {};
+    const bundleVersion = bundleVersionOf(manifest);
+    let runtime;
+    try {
+        runtime = getDshRuntimeVersion();
+    }
+    catch (error) {
+        return evaluateEnvironment(manifest, 'unknown', bundleVersion, error instanceof Error ? error.message : String(error));
+    }
+    return evaluateEnvironment(manifest, runtime, bundleVersion);
+}

package/packages/agent-team/lib/human-profile.js

@@ -1,8 +1,6 @@
-import { readFileSync } from 'node:fs';
-import { dirname, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
 import z from '@deepseek-ai/schemastery';
 import { parse } from 'yaml';
+import { bundleVersionOf, readInstalledManifest } from "./installed-manifest.js";
 /**
  * Human identity profile: the one configurable display name plus the avatar
  * reference. `member:human` stays the durable identity everywhere; only the
@@ -17,6 +15,12 @@ import { parse } from 'yaml';
  * - avatar bytes live under a persistent directory below; the profile holds
  *   only the reference, never a data URL. The composer attachment cache is
  *   TTL-bound and must not hold avatar bytes.
+ *
+ * The legacy-section adoption below is transitional: it exists for installs
+ * upgraded from a pre-rc.1 profile document, and retires — with
+ * `LEGACY_HUMAN_PROFILE_SECTION`, `parseLegacyHumanProfile`, and
+ * `planLegacyAdoption` — once such installs are no longer supported. Nothing
+ * else in the Host reads that document.
  */
 /**
  * Settings namespace of the Human profile: the Team Host row's id in
@@ -33,36 +37,18 @@ export const HUMAN_PROFILE_DEFAULT_NAME = 'human';
 export const HUMAN_PROFILE_REPO_URL = 'https://github.com/wowyuarm/dsh-agent-team';
 /**
  * Bundle version shown in the settings footnote, and the current side of the
- * update check: the version of the package THIS Host runs from — read from the
- * installed manifest, so a `link:` checkout under the development profile and a
- * registry tarball under stable each state their own truth. It is not a
- * hand-maintained string: the 0.1.14 bundle shipped with `0.1.13` written in
- * it, which made the footnote name the previous release and the update check
- * offer the release the user already had.
+ * update check: the version of the package THIS Host runs from — the installed
+ * manifest's, read once at load through `./installed-manifest.ts`, so a `link:`
+ * checkout under the development profile and a registry tarball under stable
+ * each state their own truth. It is not a hand-maintained string: the 0.1.14
+ * bundle shipped with `0.1.13` written in it, which made the footnote name the
+ * previous release and the update check offer the release the user already had.
  *
- * Resolved once at load, three levels above this module — `packages/agent-team/{src,lib}`
- * sits that deep in both layouts, the same relative positioning
- * `member-runtime.ts` uses to find `core-skills`. An unreadable or malformed
- * manifest degrades to `'unknown'`: the Remote's `version: string` contract
- * holds and the update comparison simply compares nothing. The footnote is
- * informational only and never gates behavior.
+ * An unreadable or malformed manifest degrades to `'unknown'`: the Remote's
+ * `version: string` contract holds and the update comparison simply compares
+ * nothing. The footnote is informational only and never gates behavior.
  */
-export const HUMAN_PROFILE_VERSION = readInstalledBundleVersion();
-/** Version of the manifest this package installed from, or `'unknown'`. */
-function readInstalledBundleVersion() {
-    try {
-        const manifestPath = resolve(dirname(fileURLToPath(import.meta.url)), '../../../package.json');
-        const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
-        if (typeof manifest.version === 'string' && manifest.version !== '')
-            return manifest.version;
-    }
-    catch {
-        // Reading our own manifest must never fail the Host boot: a host that
-        // cannot find its own package.json is a broken install, and the footnote
-        // reporting 'unknown' says so more honestly than a stale number.
-    }
-    return 'unknown';
-}
+export const HUMAN_PROFILE_VERSION = bundleVersionOf(readInstalledManifest());
 /**
  * Schemastery schema of the Human profile: the Team Host row's Config. Both
  * fields are volatile, which is what lets an edit reach the running Host
@@ -139,12 +125,12 @@ export function parseLegacyHumanProfile(yamlText) {
  * Decide what adoption may write: nothing unless the stored profile is still
  * the pristine default, so a value the Human re-entered after the upgrade
  * always wins, and never the legacy default name itself. The current profile
- * carries explicit `undefined` on `avatarRef` — the Host getter spreads a
- * settings read — and so is not `HumanProfile` under
- * exactOptionalPropertyTypes; taking that shape directly keeps the Host call
- * cast-free. The returned fields are exactly the ops the profile page would
- * have written; byte existence for `avatarRef` is the caller's I/O and must
- * already hold.
+ * carries explicit `undefined` on `avatarRef` — the Host getter spreads the
+ * live Config read — and that shape does not satisfy the optional-property
+ * form under exactOptionalPropertyTypes; taking it directly keeps the Host
+ * call cast-free. The returned fields are exactly the ops the profile page
+ * would have written; byte existence for `avatarRef` is the caller's I/O and
+ * must already hold.
  */
 export function planLegacyAdoption(current, legacy) {
     if (current.name !== HUMAN_PROFILE_DEFAULT_NAME || current.avatarRef !== undefined)

package/packages/agent-team/lib/index.js

@@ -52,6 +52,7 @@ import { Session, SessionId, SessionLogOffset } from '@deepseek-ai/dsh-session';
 import { setSandboxMode } from '@deepseek-ai/dsh-sandbox-policy';
 import { Remote, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
 import { ATTACHMENT_MAX_BYTES, attachmentPayloadPath, attachmentsRoot, copyPathAttachment, newAttachmentId, readAttachment, sanitizeMediaType, sweepAttachmentCache, validatePathAttachment, writeAttachment } from "./attachments.js";
+import { reportEnvironment } from "./environment-check.js";
 import { HUMAN_PROFILE_DEFAULT_NAME, HUMAN_PROFILE_REPO_URL, HUMAN_PROFILE_SETTINGS_NAMESPACE, HUMAN_PROFILE_SETTINGS_SCHEMA, HUMAN_PROFILE_VERSION, assertValidHumanName, normalizeHumanName, parseLegacyHumanProfile, planLegacyAdoption } from "./human-profile.js";
 import { humanAvatarsRoot, readHumanAvatar, removeHumanAvatar, writeHumanAvatar } from "./human-avatar.js";
 import { createHumanUpdateChecker } from "./human-update-check.js";
@@ -91,7 +92,8 @@ class PresetCompositionError extends Error {
 const MAX_CHECKPOINT_NAME_CHARS = 120;
 /** Default and maximum number of timeline items one query returns. */
 const DEFAULT_TIMELINE_LIMIT = 12;
-const MAX_TIMELINE_LIMIT = 24;
+/** The widest timeline window there is; the ref gate reads at this width so no printed ref is unreachable. */
+export const MAX_TIMELINE_LIMIT = 24;
 /**
  * Archived generations the timeline and seed resolution walk: the timeline
  * reads this many ancestors behind the current generation, and the seed guard
@@ -195,6 +197,7 @@ let AgentTeam = (() => {
     let _sendMessage_decorators;
     let _putAttachment_decorators;
     let _getAttachment_decorators;
+    let _environmentForClient_decorators;
     let _humanProfileForClient_decorators;
     let _putHumanAvatar_decorators;
     let _getHumanAvatar_decorators;
@@ -231,6 +234,7 @@ let AgentTeam = (() => {
             _sendMessage_decorators = [Remote('sendMessage')];
             _putAttachment_decorators = [Remote('putAttachment')];
             _getAttachment_decorators = [Remote('getAttachment')];
+            _environmentForClient_decorators = [Remote('environment')];
             _humanProfileForClient_decorators = [Remote('humanProfile')];
             _putHumanAvatar_decorators = [Remote('putHumanAvatar')];
             _getHumanAvatar_decorators = [Remote('getHumanAvatar')];
@@ -264,6 +268,7 @@ let AgentTeam = (() => {
             __esDecorate(this, null, _sendMessage_decorators, { kind: "method", name: "sendMessage", static: false, private: false, access: { has: obj => "sendMessage" in obj, get: obj => obj.sendMessage }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _putAttachment_decorators, { kind: "method", name: "putAttachment", static: false, private: false, access: { has: obj => "putAttachment" in obj, get: obj => obj.putAttachment }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _getAttachment_decorators, { kind: "method", name: "getAttachment", static: false, private: false, access: { has: obj => "getAttachment" in obj, get: obj => obj.getAttachment }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _environmentForClient_decorators, { kind: "method", name: "environmentForClient", static: false, private: false, access: { has: obj => "environmentForClient" in obj, get: obj => obj.environmentForClient }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _humanProfileForClient_decorators, { kind: "method", name: "humanProfileForClient", static: false, private: false, access: { has: obj => "humanProfileForClient" in obj, get: obj => obj.humanProfileForClient }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _putHumanAvatar_decorators, { kind: "method", name: "putHumanAvatar", static: false, private: false, access: { has: obj => "putHumanAvatar" in obj, get: obj => obj.putHumanAvatar }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _getHumanAvatar_decorators, { kind: "method", name: "getHumanAvatar", static: false, private: false, access: { has: obj => "getHumanAvatar" in obj, get: obj => obj.getHumanAvatar }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -445,7 +450,8 @@ let AgentTeam = (() => {
          * The two judgements the Config schema cannot make about a Human name: the
          * same non-empty floor as Member handles, plus global uniqueness against live
          * Members. `setHumanProfile` runs it before the write, so a colliding rename
-         * rejects instead of persisting.
+         * rejects instead of persisting. It reads the one field it judges, so the
+         * caller passes the name alone rather than a whole profile shape.
          */
         validateHumanProfile(value) {
             const name = assertValidHumanName(value.name);
@@ -1316,6 +1322,26 @@ let AgentTeam = (() => {
          * `updateAvailable` is false until a background refresh actually observes a
          * newer published release.
          */
+        /**
+         * Local environment check for the settings page: which DSH line this Host
+         * runs against, and whether that line is inside the range this bundle
+         * declares. Human-scoped and read-only — the Client renders the verdict and
+         * states the range in words, and nothing here is written back.
+         *
+         * Synchronous like `humanProfile`: both read the installed manifest once and
+         * settle immediately, and the verdict comes from the Harness's own
+         * compatibility evaluator rather than a second version comparison written
+         * here.
+         *
+         * The wire type and `EnvironmentReport` keep separate top-level field lists on
+         * purpose: the contract states every fact as optional because a Transport may
+         * withhold any of them, while the report is the stricter thing the checker
+         * guarantees. This assignment is where the compiler holds the two together,
+         * and a new required contract field fails it here.
+         */
+        environmentForClient(_request) {
+            return Object.freeze(reportEnvironment());
+        }
         humanProfileForClient(_request) {
             const profile = this.humanProfile();
             const update = this.humanUpdateCheck.snapshot();

package/packages/agent-team/lib/installed-manifest.js

@@ -0,0 +1,32 @@
+/** The installed bundle's own manifest, read once for both facts taken from it. */
+import { readFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+/**
+ * Parsed manifest of the installed bundle, or `undefined` when it cannot be
+ * read.
+ *
+ * Three levels up: `packages/agent-team/{src,lib}` sits that deep in both a
+ * `link:` checkout and a registry tarball, so a development install and a
+ * published one each state their own truth. An unreadable or malformed manifest
+ * is a broken install, not a failure of whatever asked: every caller degrades to
+ * `'unknown'` or withholds the line it would have stated, so reading this can
+ * never fail the Host boot.
+ */
+export function readInstalledManifest() {
+    try {
+        const manifestPath = resolve(dirname(fileURLToPath(import.meta.url)), '../../../package.json');
+        const parsed = JSON.parse(readFileSync(manifestPath, 'utf8'));
+        return typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)
+            ? parsed
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Version of the manifest this package installed from, or `'unknown'`. */
+export function bundleVersionOf(manifest) {
+    const version = manifest?.version;
+    return typeof version === 'string' && version !== '' ? version : 'unknown';
+}

package/packages/agent-team/lib/ledger.js

@@ -1586,6 +1586,7 @@ export class AgentTeamLedger {
             })),
             taskNumbers: Object.freeze(visibleTasks.map(task => Object.freeze({ taskRef: task.taskRef, taskNumber: taskNumbers.get(task.taskRef) ?? 0 }))),
             items: Object.freeze(items),
+            activeTaskThreads: this.activeTaskThreads(visibleTasks, taskNumbers),
             claims: this.claimsForVisibleTasks(visibleTasks),
             activities: Object.freeze(selected.filter((fact) => fact.kind === 'activity').map(fact => fact.activity)),
             cursor: nextCursor,
@@ -3172,6 +3173,40 @@ export class AgentTeamLedger {
         const refs = new Set(tasks.map(task => task.taskRef));
         return Object.freeze([...this.state.claims.values()].filter(claim => refs.has(claim.taskRef)));
     }
+    /**
+     * The team_view「活跃 task thread」radar for a Workspace: every visible Task
+     * still in flight — in_progress or in_review, the two states a live Claim
+     * keeps a Task in — newest activity first. Unlike `recentInboxItems`, this is
+     * not a participation slice: admission is the Task being active in a Channel
+     * the reader can see, whether or not the reader wrote in it, and a Thread
+     * still holding the reader's unread is not excluded. Rows carry the same
+     * `liveClaimOwners`口径 the Inbox and Channel feed already use, so 「谁在这个
+     * Task 上」 never gains a second definition. Archived Channels are already
+     * absent from `visibleTasks`, so their Tasks never reach here.
+     */
+    activeTaskThreads(visibleTasks, taskNumbers) {
+        const rows = [];
+        for (const task of visibleTasks) {
+            if (task.status !== 'in_progress' && task.status !== 'in_review')
+                continue;
+            const thread = this.state.threads.get(task.threadRef);
+            if (thread === undefined)
+                continue;
+            const newest = (this.state.factsByThread.get(thread.threadRef) ?? []).at(-1);
+            if (newest === undefined)
+                continue;
+            const taskNumber = taskNumbers.get(task.taskRef);
+            rows.push({
+                row: Object.freeze({ taskRef: task.taskRef, threadRef: thread.threadRef, channelRef: task.channelRef,
+                    ...(taskNumber === undefined ? {} : { taskNumber }), status: task.status,
+                    subject: boundedInboxPreview(this.threadAnchor(thread.threadRef).body),
+                    members: this.liveClaimOwners(task), lastActivityAt: newest.occurredAt }),
+                sequence: newest.sequence,
+            });
+        }
+        rows.sort((left, right) => right.sequence - left.sequence || left.row.threadRef.localeCompare(right.row.threadRef));
+        return Object.freeze(rows.map(entry => entry.row));
+    }
     tasksForClaims(claims, projected) {
         return Object.freeze([...new Set(claims.map(claim => claim.taskRef))].map(taskRef => {
             const task = this.state.tasks.get(taskRef);

package/packages/agent-team/lib/member-context.js

@@ -2,7 +2,7 @@ import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { createUserMessage } from '@deepseek-ai/dsh-llm';
 import { SessionLogOffset } from '@deepseek-ai/dsh-session';
-import { v3RenamedSourceKind } from "./context-source.js";
+import { matchesProducerKind } from "./context-source.js";
 import { memberMemoryDirectoryPath } from "./member-runtime.js";
 export const name = 'wowyuarm-agent-team-member-context';
 const MAX_MEMORY_BYTES = 16 * 1024;
@@ -43,9 +43,7 @@ export function apply(ctx) {
             // number domains explicit (the seq = log.length contiguity contract).
             const event = agent.session.snapshotEvents(SessionLogOffset(sequence), SessionLogOffset(sequence + 1))[0];
             return event?.type === 'user/message'
-                // Both identities are this producer's own: the kind written now and
-                // the read-time conversion's rename of this producer's V3 history.
-                && (event.data.source.kind === name || event.data.source.kind === v3RenamedSourceKind(name))
+                && matchesProducerKind(event.data.source.kind, name)
                 && event.data.content[0]?.type === 'text'
                 ? [event.data.content[0].text]
                 : [];

package/packages/agent-team/lib/member-time-context.js

@@ -27,7 +27,7 @@
  * @module @wowyuarm/dsh-agent-team/member-time-context
  */
 import { createUserMessage } from '@deepseek-ai/dsh-llm';
-import { v3RenamedSourceKind } from "./context-source.js";
+import { matchesProducerKind } from "./context-source.js";
 import { formatTeamDuration, formatTeamTimestamp } from "./time-format.js";
 import { advanceOwnedSessionEventCursor } from "./session-event-cursor.js";
 export const name = 'wowyuarm-agent-team-member-time-context';
@@ -50,9 +50,7 @@ export function applyClockEvent(state, event) {
             return state.openTurn === -1 ? state : { ...state, lastTurnInjectionTime: null, openTurn: -1 };
         case 'user/message': {
             const source = event.data.source;
-            // Both identities are this producer's own: the kind written now and the
-            // read-time conversion's rename of this producer's V3 history.
-            const injected = source.kind === name || source.kind === v3RenamedSourceKind(name);
+            const injected = matchesProducerKind(source.kind, name);
             const withMessage = state.lastMessageTime === event.time ? state : { ...state, lastMessageTime: event.time };
             if (!injected)
                 return withMessage;