@zleap-ai/dsh-sag 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.1 - 2026-09-11
+
+- Keep settings namespace branding type-only so dsh host helper-export changes cannot prevent plugin startup.
+- Validate the packaged bundle against the dsh host selected by `DSH_BIN` instead of a fixed historical version.
+
 ## 0.1.0 - 2026-08-29
 
 - Validate the published bundle against the npm `latest` DeepSeek Harness `0.1.1-rc.2` release.

package/README.md

@@ -2,7 +2,7 @@
 
 dsh-sag lets DeepSeek Harness use the local SAG personal knowledge base for search, reading, upload, note ingestion, and document management.
 
-Compatible with DeepSeek Harness `0.1.1-rc.2`, the current npm `latest` (there is no final `0.1.1` release yet). SAG must include the Connect dsh setting and local connector API. The unmodified SAG `1.8.3` release does not include this capability; use the build from [SAG PR #154](https://github.com/Zleap-AI/SAG/pull/154), or a later SAG release that includes it.
+Compatible with DeepSeek Harness `0.1.x`, starting at `0.1.1-rc.2`. SAG must include the Connect dsh setting and local connector API. The unmodified SAG `1.8.3` release does not include this capability; use the build from [SAG PR #154](https://github.com/Zleap-AI/SAG/pull/154), or a later SAG release that includes it.
 
 ## Quick start
 

package/README.zh.md

@@ -2,7 +2,7 @@
 
 dsh-sag 让 DeepSeek Harness 直接使用运行在本机的 SAG 个人知识库，包括检索、阅读、上传、写入和文档管理。
 
-适用于 DeepSeek Harness `0.1.1-rc.2`（当前 npm `latest`；目前没有正式的 `0.1.1` 稳定版）。SAG 需要包含“连接 dsh”设置和本地连接器 API；当前未修改的 SAG `1.8.3` 尚未包含该能力，请使用 [SAG PR #154](https://github.com/Zleap-AI/SAG/pull/154) 对应构建，或后续包含该能力的正式版本。
+适用于 DeepSeek Harness `0.1.x`，最低版本为 `0.1.1-rc.2`。SAG 需要包含“连接 dsh”设置和本地连接器 API；当前未修改的 SAG `1.8.3` 尚未包含该能力，请使用 [SAG PR #154](https://github.com/Zleap-AI/SAG/pull/154) 对应构建，或后续包含该能力的正式版本。
 
 ## 开始使用
 

package/THIRD_PARTY_NOTICES

@@ -2,7 +2,7 @@
 
 Generated from the package manifests and license files used by the standalone dsh-sag CLI build.
 
-## @deepseek-ai/cordis@4.0.1
+## @deepseek-ai/cordis@4.0.2
 
 Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: vendor/cordis)
 License: MIT
@@ -30,7 +30,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-## @deepseek-ai/cosmokit@1.8.2
+## @deepseek-ai/cosmokit@1.8.3
 
 Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: vendor/cosmokit)
 License: MIT
@@ -58,7 +58,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-## @deepseek-ai/dsh-atomic-write@0.1.1-rc.2
+## @deepseek-ai/dsh-atomic-write@0.1.5-rc.2
 
 Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: packages/util/atomic-write)
 License: MIT
@@ -86,7 +86,35 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-## @deepseek-ai/dsh-credentials-local@0.1.1-rc.2
+## @deepseek-ai/dsh-brand@0.1.5-rc.2
+
+Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: packages/util/brand)
+License: MIT
+License file: LICENSE
+
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+## @deepseek-ai/dsh-credentials-local@0.1.5-rc.2
 
 Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: packages/credentials/credentials-local)
 License: MIT
@@ -114,7 +142,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-## @deepseek-ai/dsh-credentials@0.1.1-rc.2
+## @deepseek-ai/dsh-credentials@0.1.5-rc.2
 
 Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: packages/credentials/credentials)
 License: MIT
@@ -142,7 +170,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-## @deepseek-ai/dsh-home-paths@0.1.1-rc.2
+## @deepseek-ai/dsh-home-paths@0.1.5-rc.2
 
 Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: packages/util/home-paths)
 License: MIT
@@ -170,7 +198,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-## @deepseek-ai/dsh-launch-environment@0.1.1-rc.2
+## @deepseek-ai/dsh-launch-environment@0.1.5-rc.2
 
 Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: packages/util/launch-environment)
 License: MIT
@@ -198,7 +226,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-## @deepseek-ai/dsh-settings-file@0.1.1-rc.2
+## @deepseek-ai/dsh-settings-file@0.1.5-rc.2
 
 Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: packages/settings/settings-file)
 License: MIT
@@ -226,7 +254,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-## @deepseek-ai/dsh-settings@0.1.1-rc.2
+## @deepseek-ai/dsh-settings@0.1.5-rc.2
 
 Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: packages/settings/settings)
 License: MIT
@@ -254,7 +282,35 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-## @deepseek-ai/schemastery@3.18.1
+## @deepseek-ai/dsh-util-values@0.1.5-rc.2
+
+Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: packages/util/values)
+License: MIT
+License file: LICENSE
+
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+## @deepseek-ai/schemastery@3.18.2
 
 Source: git+https://github.com/deepseek-ai/deepseek-harness.git (directory: vendor/schemastery)
 License: MIT

package/lib/connection/store.d.ts

@@ -1,9 +1,9 @@
 import type { Context } from '@deepseek-ai/cordis';
 import { type CredentialProvider } from '@deepseek-ai/dsh-credentials';
-import { type SettingsScope } from '@deepseek-ai/dsh-settings';
+import type { SettingsNamespace, SettingsScope } from '@deepseek-ai/dsh-settings';
 import type { SagConnectionDescriptor, SagLocalSettings } from './types.js';
-/** The fixed settings namespace for the locally managed SAG connection. */
-export declare const SAG_SETTINGS_NAMESPACE: import("@deepseek-ai/dsh-settings").SettingsNamespace;
+/** The fixed settings namespace; its brand is type-only so host loading needs no helper export. */
+export declare const SAG_SETTINGS_NAMESPACE: SettingsNamespace;
 /** The only credential record owned by the local SAG connection. */
 export declare const SAG_CREDENTIAL_KEY: import("@deepseek-ai/dsh-credentials").CredentialKey;
 /** Machine-readable error for saved connection data that cannot be used safely. */

package/lib/connection/store.js

@@ -1,9 +1,8 @@
 import { credentialKey } from '@deepseek-ai/dsh-credentials';
-import { settingsNamespace } from '@deepseek-ai/dsh-settings';
 import z from '@deepseek-ai/schemastery';
 import { parseConnectionDescriptor } from './descriptor.js';
-/** The fixed settings namespace for the locally managed SAG connection. */
-export const SAG_SETTINGS_NAMESPACE = settingsNamespace('dsh-sag');
+/** The fixed settings namespace; its brand is type-only so host loading needs no helper export. */
+export const SAG_SETTINGS_NAMESPACE = 'dsh-sag';
 /** The only credential record owned by the local SAG connection. */
 export const SAG_CREDENTIAL_KEY = credentialKey('dsh-sag', 'local');
 /** Machine-readable error for saved connection data that cannot be used safely. */

package/lib/dsh-sag-cli.js

@@ -25639,7 +25639,7 @@ import { readFile as readFile3 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
 import { resolve as resolve7 } from "node:path";
 
-// ../../node_modules/.pnpm/@deepseek-ai+cosmokit@1.8.2/node_modules/@deepseek-ai/cosmokit/lib/index.js
+// ../../node_modules/.pnpm/@deepseek-ai+cosmokit@1.8.3/node_modules/@deepseek-ai/cosmokit/lib/index.js
 function isNullable(value) {
   return value === null || value === void 0;
 }
@@ -25861,7 +25861,7 @@ var Time;
   Time2.template = template;
 })(Time || (Time = {}));
 
-// ../../node_modules/.pnpm/@deepseek-ai+cordis@4.0.1/node_modules/@deepseek-ai/cordis/lib/index.js
+// ../../node_modules/.pnpm/@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/cordis/lib/index.js
 var DisposableList = class {
   sn = 0;
   map = /* @__PURE__ */ new Map();
@@ -27584,7 +27584,7 @@ var Service = class Service2 {
   }
 };
 
-// ../../node_modules/.pnpm/@deepseek-ai+schemastery@3.18.1/node_modules/@deepseek-ai/schemastery/lib/index.mjs
+// ../../node_modules/.pnpm/@deepseek-ai+schemastery@3.18.2/node_modules/@deepseek-ai/schemastery/lib/index.mjs
 var kSchema = /* @__PURE__ */ Symbol.for("schemastery");
 var kValidationError2 = /* @__PURE__ */ Symbol.for("ValidationError");
 globalThis.__schemastery_index__ ??= 0;
@@ -29876,15 +29876,41 @@ function watch(paths, options = {}) {
   return watcher;
 }
 
-// ../../node_modules/.pnpm/@deepseek-ai+dsh-credentials-local@0.1.1-rc.2_@deepseek-ai+cordis@4.0.1_@deepseek-ai+ds_7bb67d14430a2d1ff3cabd2ed2468913/node_modules/@deepseek-ai/dsh-credentials-local/lib/index.js
+// ../../node_modules/.pnpm/@deepseek-ai+dsh-credentials-local@0.1.5-rc.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+ds_2d5b638b86a42b295b9688f1f1de1a2b/node_modules/@deepseek-ai/dsh-credentials-local/lib/index.js
 var import_yaml = __toESM(require_dist2(), 1);
 import { mkdir as mkdir2, readFile, stat as stat4 } from "node:fs/promises";
 import { dirname as dirname5, join as join4, resolve as resolve5 } from "node:path";
 
-// ../../node_modules/.pnpm/@deepseek-ai+dsh-atomic-write@0.1.1-rc.2_@deepseek-ai+cordis@4.0.1_@deepseek-ai+dsh-inv_762db61a27c1f9c9369d223d4c8b5b1f/node_modules/@deepseek-ai/dsh-atomic-write/lib/index.js
+// ../../node_modules/.pnpm/@deepseek-ai+dsh-atomic-write@0.1.5-rc.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-atomic-write/lib/index.js
 import { randomBytes } from "node:crypto";
 import { lstat as lstat3, mkdir, rename, rm, writeFile } from "node:fs/promises";
 import { dirname as dirname3 } from "node:path";
+var WINDOWS_TRANSIENT_RENAME_ERRORS = /* @__PURE__ */ new Set([
+  "EACCES",
+  "EBUSY",
+  "EPERM"
+]);
+var WINDOWS_RENAME_RETRY_INITIAL_MS = 20;
+var WINDOWS_RENAME_RETRY_MAX_MS = 200;
+var WINDOWS_RENAME_RETRY_LIMIT = 8;
+function isTransientWindowsRenameError(error2) {
+  if (process.platform !== "win32") return false;
+  return WINDOWS_TRANSIENT_RENAME_ERRORS.has(error2?.code ?? "");
+}
+async function renameAtomicTemp(temp, filename) {
+  let delay = WINDOWS_RENAME_RETRY_INITIAL_MS;
+  for (let retries = 0; ; retries += 1) {
+    try {
+      await rename(temp, filename);
+      return;
+    } catch (error2) {
+      if (!isTransientWindowsRenameError(error2)) throw error2;
+      if (retries >= WINDOWS_RENAME_RETRY_LIMIT) throw error2;
+    }
+    await new Promise((resolve8) => setTimeout(resolve8, delay));
+    delay = Math.min(delay * 2, WINDOWS_RENAME_RETRY_MAX_MS);
+  }
+}
 async function writeFileAtomic(filename, content, options) {
   await mkdir(dirname3(filename), {
     recursive: true,
@@ -29896,7 +29922,7 @@ async function writeFileAtomic(filename, content, options) {
       mode: options.mode,
       flag: "wx"
     });
-    await rename(temp, filename);
+    await renameAtomicTemp(temp, filename);
   } catch (error2) {
     await rm(temp, { force: true });
     throw error2;
@@ -29942,7 +29968,7 @@ async function withFileLock(filename, operation, options) {
   }
 }
 
-// ../../node_modules/.pnpm/@deepseek-ai+dsh-home-paths@0.1.1-rc.2_@deepseek-ai+cordis@4.0.1_@deepseek-ai+dsh-invar_260f8dde1d5adbe84fd51b779f4f83da/node_modules/@deepseek-ai/dsh-home-paths/lib/index.js
+// ../../node_modules/.pnpm/@deepseek-ai+dsh-home-paths@0.1.5-rc.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-home-paths/lib/index.js
 import { opendir, realpath as realpath2 } from "node:fs/promises";
 import { homedir } from "node:os";
 import { basename as basename3, dirname as dirname4, join as join3, resolve as resolve4 } from "node:path";
@@ -29977,7 +30003,7 @@ function resolveDshHome(configured, env = process.env) {
   return resolve4(expandHomePath(configured ?? (fromEnv !== void 0 && fromEnv.trim().length > 0 ? fromEnv : defaultDshHome())));
 }
 
-// ../../node_modules/.pnpm/@deepseek-ai+dsh-launch-environment@0.1.1-rc.2_@deepseek-ai+cordis@4.0.1_@deepseek-ai+d_bf942fcb3d7f6e25f5c2c0613a680229/node_modules/@deepseek-ai/dsh-launch-environment/lib/index.js
+// ../../node_modules/.pnpm/@deepseek-ai+dsh-launch-environment@0.1.5-rc.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-launch-environment/lib/index.js
 var SOURCE_ORDER = [
   "process",
   "project-env",
@@ -30018,19 +30044,24 @@ function launchEnvironmentOf(ctx) {
   }]);
 }
 
-// ../../node_modules/.pnpm/@deepseek-ai+dsh-credentials@0.1.1-rc.2_@deepseek-ai+cordis@4.0.1_@deepseek-ai+dsh-bran_07859f6f9ce036fd17600077e6a695b1/node_modules/@deepseek-ai/dsh-credentials/lib/index.js
+// ../../node_modules/.pnpm/@deepseek-ai+dsh-brand@0.1.5-rc.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-brand/lib/index.js
+function brandString(value) {
+  return value;
+}
+
+// ../../node_modules/.pnpm/@deepseek-ai+dsh-credentials@0.1.5-rc.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-inva_51080d1f5daa97dd95d6cec6dfb5ca6d/node_modules/@deepseek-ai/dsh-credentials/lib/index.js
 var REF_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
 var KEY_SEGMENT_PATTERN = /^[a-z][a-z0-9-]*$/;
 function credentialRef(value) {
   if (!isCredentialRefName(value)) throw new TypeError(`credential ref "${value}" must match ${String(REF_PATTERN)}`);
-  return value;
+  return brandString(value);
 }
 function isCredentialRefName(value) {
   return REF_PATTERN.test(value);
 }
 function credentialKey(scope, id) {
   for (const segment of [scope, id]) if (!KEY_SEGMENT_PATTERN.test(segment)) throw new TypeError(`credential key segment "${segment}" must match ${String(KEY_SEGMENT_PATTERN)}`);
-  return `${scope}/${id}`;
+  return brandString(`${scope}/${id}`);
 }
 function parseCredentialKey(value) {
   const segments = value.split("/");
@@ -30089,7 +30120,7 @@ var CredentialProvider = class extends Service {
   }
 };
 
-// ../../node_modules/.pnpm/@deepseek-ai+dsh-credentials-local@0.1.1-rc.2_@deepseek-ai+cordis@4.0.1_@deepseek-ai+ds_7bb67d14430a2d1ff3cabd2ed2468913/node_modules/@deepseek-ai/dsh-credentials-local/lib/index.js
+// ../../node_modules/.pnpm/@deepseek-ai+dsh-credentials-local@0.1.5-rc.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+ds_2d5b638b86a42b295b9688f1f1de1a2b/node_modules/@deepseek-ai/dsh-credentials-local/lib/index.js
 function resolveSpec(config2) {
   return {
     filename: resolve5(config2.path ?? join4(resolveDshHome(config2.dshHome), ".credentials.yaml")),
@@ -30650,12 +30681,62 @@ var LocalCredentialProvider = class extends CredentialProvider {
   }
 };
 
-// ../../node_modules/.pnpm/@deepseek-ai+dsh-settings-file@0.1.1-rc.2_@deepseek-ai+cordis@4.0.1_@deepseek-ai+dsh-at_07dac851674f547bcb0fed2f2776d133/node_modules/@deepseek-ai/dsh-settings-file/lib/index.js
+// ../../node_modules/.pnpm/@deepseek-ai+dsh-settings-file@0.1.5-rc.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-at_0e4791dacea9086d39c0e6f7037cd78b/node_modules/@deepseek-ai/dsh-settings-file/lib/index.js
 var import_yaml2 = __toESM(require_dist2(), 1);
 import { mkdir as mkdir3, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
 import { dirname as dirname6, extname as extname2, join as join5, resolve as resolve6 } from "node:path";
 
-// ../../node_modules/.pnpm/@deepseek-ai+dsh-settings@0.1.1-rc.2_@deepseek-ai+cordis@4.0.1_@deepseek-ai+dsh-brand@0_02aaf429ec98c58247037e2222c17a8f/node_modules/@deepseek-ai/dsh-settings/lib/index.js
+// ../../node_modules/.pnpm/@deepseek-ai+dsh-util-values@0.1.5-rc.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-util-values/lib/index.js
+function deepEqualJson(a, b) {
+  if (a === b) return true;
+  if (typeof a !== "object" || typeof b !== "object" || a === null || b === null) return false;
+  if (Array.isArray(a) || Array.isArray(b)) {
+    if (!Array.isArray(a) || !Array.isArray(b) || a.length !== b.length) return false;
+    return a.every((entry, index) => deepEqualJson(entry, b[index]));
+  }
+  const left = a;
+  const right = b;
+  const keys = Object.keys(left);
+  if (keys.length !== Object.keys(right).length) return false;
+  return keys.every((key) => key in right && deepEqualJson(left[key], right[key]));
+}
+function deepFreeze(value) {
+  const seen = /* @__PURE__ */ new WeakSet();
+  const pending = [{
+    kind: "visit",
+    node: value
+  }];
+  while (pending.length > 0) {
+    const task = pending.pop();
+    if (task === void 0) continue;
+    if (task.kind === "property") {
+      pending.push({
+        kind: "visit",
+        node: task.source[task.key]
+      });
+      continue;
+    }
+    const node = task.node;
+    if (node === null || typeof node !== "object") continue;
+    if (node instanceof AbortSignal) continue;
+    if (seen.has(node)) continue;
+    seen.add(node);
+    Object.freeze(node);
+    const keys = Object.keys(node);
+    for (let index = keys.length - 1; index >= 0; index--) {
+      const key = keys[index];
+      if (key === void 0) continue;
+      pending.push({
+        kind: "property",
+        source: node,
+        key
+      });
+    }
+  }
+  return value;
+}
+
+// ../../node_modules/.pnpm/@deepseek-ai+dsh-settings@0.1.5-rc.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-brand@0_5ca2e2f4bdf76868bb49b995ddcd3d9b/node_modules/@deepseek-ai/dsh-settings/lib/index.js
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -30707,23 +30788,10 @@ function redactSecrets(schema, value) {
   };
 }
 var NAMESPACE_PATTERN = /^[a-z][a-z0-9-]*$/;
-function settingsNamespace(value) {
+function parseSettingsNamespace(value) {
   if (!NAMESPACE_PATTERN.test(value)) throw new TypeError(`settings namespace "${value}" must match ${String(NAMESPACE_PATTERN)}`);
   return value;
 }
-function deepEqualJson(a, b) {
-  if (a === b) return true;
-  if (typeof a !== "object" || typeof b !== "object" || a === null || b === null) return false;
-  if (Array.isArray(a) || Array.isArray(b)) {
-    if (!Array.isArray(a) || !Array.isArray(b) || a.length !== b.length) return false;
-    return a.every((entry, index) => deepEqualJson(entry, b[index]));
-  }
-  const left = a;
-  const right = b;
-  const keys = Object.keys(left);
-  if (keys.length !== Object.keys(right).length) return false;
-  return keys.every((key) => key in right && deepEqualJson(left[key], right[key]));
-}
 var SettingsConflictError = class extends Error {
   /** Stable machine code for wire layers mapping this to their own taxonomy. */
   code = "SETTINGS_CONFLICT";
@@ -30827,11 +30895,6 @@ function mergeLayers(under, over) {
   for (const [key, value] of Object.entries(over)) merged[key] = key in merged ? mergeLayers(merged[key], value) : value;
   return merged;
 }
-function deepFreeze(value) {
-  if (typeof value !== "object" || value === null || Object.isFrozen(value)) return value;
-  for (const entry of Object.values(value)) deepFreeze(entry);
-  return Object.freeze(value);
-}
 var SettingsProvider = class extends Service {
   registrations = /* @__PURE__ */ new Map();
   /** Latest published raw document; empty until the provider's first publish. */
@@ -30889,23 +30952,25 @@ var SettingsProvider = class extends Service {
   * @param schema - schemastery schema resolving this namespace's value.
   * @param options - composition `base` layer and effect timing.
   * @returns the owner scope for reads, observation, and updates.
+  * @throws {TypeError} when `ns` is not a lowercase hyphenated identifier.
   */
   register(ns, schema, options) {
-    if (this.registrations.has(ns)) throw new Error(`settings namespace "${ns}" is already registered`);
+    const parsedNs = parseSettingsNamespace(ns);
+    if (this.registrations.has(parsedNs)) throw new Error(`settings namespace "${parsedNs}" is already registered`);
     const registration = {
-      ns,
+      ns: parsedNs,
       schema,
       base: options?.base,
       applies: options?.applies ?? "live",
       ...options?.validate === void 0 ? {} : { validate: options.validate },
-      resolved: deepFreeze(this.resolve(schema, options?.base, this.section(ns), options?.validate)),
+      resolved: deepFreeze(this.resolve(schema, options?.base, this.section(parsedNs), options?.validate)),
       revision: 0,
       watchers: /* @__PURE__ */ new Set()
     };
     this.ctx.effect(() => {
-      this.registrations.set(ns, registration);
-      return () => this.registrations.delete(ns);
-    }, `settings.register(${JSON.stringify(String(ns))})`);
+      this.registrations.set(parsedNs, registration);
+      return () => this.registrations.delete(parsedNs);
+    }, `settings.register(${JSON.stringify(String(parsedNs))})`);
     return {
       get: () => registration.resolved,
       watch: (callback) => {
@@ -30920,11 +30985,39 @@ var SettingsProvider = class extends Service {
           registration.watchers.delete(watcher);
         };
       },
-      update: (patch) => this.update(ns, patch),
-      replace: (section) => this.replace(ns, section)
+      update: (patch) => this.update(parsedNs, patch),
+      replace: (section) => this.replace(parsedNs, section)
     };
   }
   /**
+  * Attach one optional-settings consumer to this provider. The consumer
+  * registers its composition entry as the base layer while this provider is
+  * present, then falls back to that entry if the provider detaches.
+  * @param owner - consumer context whose unload suppresses fallback work.
+  * @param ns - consumer-owned settings namespace.
+  * @param schema - schema resolving the namespace.
+  * @param entry - composition entry used as the base and fallback value.
+  * @param hooks - source sink, change notification, and optional validation.
+  * @throws {TypeError} when `ns` is not a lowercase hyphenated identifier.
+  */
+  installSection(owner, ns, schema, entry, hooks) {
+    const scope = this.register(ns, schema, {
+      base: entry,
+      ...hooks.validate === void 0 ? {} : { validate: hooks.validate }
+    });
+    hooks.setSource(() => scope.get());
+    this.ctx.effect(() => () => {
+      if (isUnloading(owner)) return;
+      hooks.setSource(() => entry);
+      hooks.onChange();
+    });
+    hooks.onChange();
+    scope.watch(() => {
+      if (isUnloading(owner)) return;
+      hooks.onChange();
+    });
+  }
+  /**
   * Describe every registered namespace for configuration surfaces, including
   * the composition `base` and raw user layers so a form can mark which fields
   * the user overrode (presence in `user`) and what a reset returns to.
@@ -30966,9 +31059,10 @@ var SettingsProvider = class extends Service {
   * Read one registered namespace's resolved value.
   * @param ns - the namespace to read.
   * @returns the resolved value, or `undefined` while unregistered.
+  * @throws {TypeError} when `ns` is not a lowercase hyphenated identifier.
   */
   get(ns) {
-    return this.registrations.get(ns)?.resolved;
+    return this.registrations.get(parseSettingsNamespace(ns))?.resolved;
   }
   /**
   * Merge a patch into one registered namespace's user layer, validate the
@@ -30980,9 +31074,10 @@ var SettingsProvider = class extends Service {
   * @param patch - plain-object patch over the user section.
   * @param expectedRevision - the descriptor `revision` the caller read; a
   *   namespace that moved past it rejects with {@link SettingsConflictError}.
+  * @throws {TypeError} when `ns` is not a lowercase hyphenated identifier.
   */
   async update(ns, patch, expectedRevision) {
-    return this.write(ns, patch, "merge", expectedRevision);
+    return this.write(parseSettingsNamespace(ns), patch, "merge", expectedRevision);
   }
   /**
   * Replace one registered namespace's user section wholesale, validate,
@@ -30993,9 +31088,10 @@ var SettingsProvider = class extends Service {
   * @param section - the complete next user section.
   * @param expectedRevision - the descriptor `revision` the caller read; a
   *   namespace that moved past it rejects with {@link SettingsConflictError}.
+  * @throws {TypeError} when `ns` is not a lowercase hyphenated identifier.
   */
   async replace(ns, section, expectedRevision) {
-    return this.write(ns, section, "replace", expectedRevision);
+    return this.write(parseSettingsNamespace(ns), section, "replace", expectedRevision);
   }
   /**
   * Apply path-addressed edits to one registered namespace's user section,
@@ -31008,14 +31104,16 @@ var SettingsProvider = class extends Service {
   * @param ops - ordered path edits; later ops observe earlier ones.
   * @param expectedRevision - the descriptor `revision` the caller read; a
   *   namespace that moved past it rejects with {@link SettingsConflictError}.
+  * @throws {TypeError} when `ns` is not a lowercase hyphenated identifier.
   */
   async mutate(ns, ops, expectedRevision) {
-    if (!Array.isArray(ops)) throw new TypeError(`settings mutate for "${ns}" must be an array of path ops`);
+    const parsedNs = parseSettingsNamespace(ns);
+    if (!Array.isArray(ops)) throw new TypeError(`settings mutate for "${parsedNs}" must be an array of path ops`);
     for (const op of ops) {
-      if (!isPlainObject5(op) || op["op"] !== "set" && op["op"] !== "unset") throw new TypeError(`settings mutate for "${ns}" ops must be {op:'set'|'unset', path}`);
-      if (!Array.isArray(op["path"]) || op["path"].some((part) => typeof part !== "string")) throw new TypeError(`settings mutate for "${ns}" op paths must be arrays of strings`);
+      if (!isPlainObject5(op) || op["op"] !== "set" && op["op"] !== "unset") throw new TypeError(`settings mutate for "${parsedNs}" ops must be {op:'set'|'unset', path}`);
+      if (!Array.isArray(op["path"]) || op["path"].some((part) => typeof part !== "string")) throw new TypeError(`settings mutate for "${parsedNs}" op paths must be arrays of strings`);
     }
-    return this.write(ns, ops, "mutate", expectedRevision);
+    return this.write(parsedNs, ops, "mutate", expectedRevision);
   }
   /** Validate a write, then queue it on the namespace's serialized write chain. */
   write(ns, input, mode, expectedRevision) {
@@ -31172,8 +31270,14 @@ var SettingsProvider = class extends Service {
     this.ctx.logger.warn(error2);
   }
 };
+var FIBER_DISPOSED = 4;
+var FIBER_UNLOADING = 5;
+function isUnloading(ctx) {
+  const state = ctx.fiber.state;
+  return state === FIBER_UNLOADING || state === FIBER_DISPOSED;
+}
 
-// ../../node_modules/.pnpm/@deepseek-ai+dsh-settings-file@0.1.1-rc.2_@deepseek-ai+cordis@4.0.1_@deepseek-ai+dsh-at_07dac851674f547bcb0fed2f2776d133/node_modules/@deepseek-ai/dsh-settings-file/lib/index.js
+// ../../node_modules/.pnpm/@deepseek-ai+dsh-settings-file@0.1.5-rc.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-at_0e4791dacea9086d39c0e6f7037cd78b/node_modules/@deepseek-ai/dsh-settings-file/lib/index.js
 var FORMATS = {
   ".yaml": "yaml",
   ".yml": "yaml",
@@ -31677,7 +31781,7 @@ async function discoverConnection(options, signal) {
 }
 
 // lib/connection/store.js
-var SAG_SETTINGS_NAMESPACE = settingsNamespace("dsh-sag");
+var SAG_SETTINGS_NAMESPACE = "dsh-sag";
 var SAG_CREDENTIAL_KEY = credentialKey("dsh-sag", "local");
 var SagConnectionConfigurationError = class extends Error {
   /** Stable error code for interactive configuration surfaces. */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zleap-ai/dsh-sag",
   "description": "Local SAG personal knowledge base plugin for DeepSeek Harness",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "keywords": [
     "deepseek-harness",
     "dsh",
@@ -52,36 +52,45 @@
     "node": "^22.19.0 || >=24.0.0"
   },
   "dependencies": {
-    "@deepseek-ai/schemastery": "3.18.1",
+    "@deepseek-ai/schemastery": "3.18.2",
     "@modelcontextprotocol/sdk": "^1.12.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials-local": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-fs": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings-file": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-subprocess": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.1.1-rc.2"
+    "@deepseek-ai/dsh-credentials": ">=0.1.1-rc.2 <0.2.0-0",
+    "@deepseek-ai/dsh-credentials-local": ">=0.1.1-rc.2 <0.2.0-0",
+    "@deepseek-ai/dsh-fs": ">=0.1.1-rc.2 <0.2.0-0",
+    "@deepseek-ai/dsh-llm": ">=0.1.1-rc.2 <0.2.0-0",
+    "@deepseek-ai/dsh-session": ">=0.1.1-rc.2 <0.2.0-0",
+    "@deepseek-ai/dsh-settings": ">=0.1.1-rc.2 <0.2.0-0",
+    "@deepseek-ai/dsh-settings-file": ">=0.1.1-rc.2 <0.2.0-0",
+    "@deepseek-ai/dsh-subprocess": ">=0.1.1-rc.2 <0.2.0-0",
+    "@deepseek-ai/dsh-subprocess-local": ">=0.1.1-rc.2 <0.2.0-0",
+    "@deepseek-ai/dsh-system-prompt": ">=0.1.1-rc.2 <0.2.0-0",
+    "@deepseek-ai/dsh-tools": ">=0.1.1-rc.2 <0.2.0-0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.1",
-    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials-local": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-fs": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings-file": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-subprocess": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.1.1-rc.2",
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-atomic-write": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-code-runtime": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-credentials-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-fs": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-invariants": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-launch-environment": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings-file": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-scope": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.5-rc.2",
     "@types/node": "^24.3.0",
     "typescript": "^5.9.2"
   },