dsh-code 1.0.5 → 1.0.6

package/README.md

@@ -7,7 +7,7 @@
 <p align="center"><img alt="Typing SVG" src="https://readme-typing-svg.herokuapp.com?font=JetBrains+Mono&amp;weight=500&amp;size=22&amp;duration=4000&amp;pause=700&amp;color=4176E6&amp;center=true&amp;vCenter=true&amp;width=680&amp;lines=DeepSeek+Harness+Code;DSH+%E5%86%85%E6%A0%B8%E7%9A%84%E7%BB%88%E7%AB%AF%E7%BC%96%E7%A0%81%E7%95%8C%E9%9D%A2"></p>
 <p align="center">
   <a href="https://github.com/deepseek-ai/deepseek-harness"><img alt="DeepSeek Harness" src="https://img.shields.io/badge/DeepSeek-Harness-4176E6?style=for-the-badge&amp;logo=deepseek&amp;logoColor=white&amp;labelColor=1c1917"></a>
-  <a href="https://www.npmjs.com/package/@deepseek-ai/dsh"><img alt="dsh version" src="https://img.shields.io/badge/dsh-0.1.1--rc.2-4176E6?style=for-the-badge&amp;logo=deepseek&amp;logoColor=white&amp;labelColor=1c1917"></a>
+  <a href="https://www.npmjs.com/package/@deepseek-ai/dsh"><img alt="dsh version" src="https://img.shields.io/badge/dsh-0.1.5--rc.1-4176E6?style=for-the-badge&amp;logo=deepseek&amp;logoColor=white&amp;labelColor=1c1917"></a>
   <a href="https://github.com/UNLINEARITY/dsh-code/stargazers"><img alt="GitHub stars" src="https://img.shields.io/github/stars/UNLINEARITY/dsh-code?label=Stars&amp;style=for-the-badge&amp;logo=github&amp;logoColor=white&amp;color=4176E6&amp;labelColor=1c1917"></a>
   <a href="https://www.npmjs.com/package/dsh-code"><img alt="npm version" src="https://img.shields.io/npm/v/dsh-code?label=npm&amp;style=for-the-badge&amp;logo=npm&amp;color=cb3837&amp;labelColor=1c1917"></a>
   <a href="https://github.com/UNLINEARITY/dsh-code/blob/main/LICENSE"><img alt="License" src="https://img.shields.io/github/license/UNLINEARITY/dsh-code?label=License&amp;style=for-the-badge&amp;logo=opensourceinitiative&amp;color=4176E6&amp;labelColor=1c1917"></a>
@@ -25,23 +25,23 @@ DeepSeek Harness 将模型、工具、存储、策略和界面作为插件，通
 
 ## 二、快速开始
 
-需要 Node `^22.19 || >=24` 和预览版 `dsh` CLI（当前版本线：`@deepseek-ai/dsh@0.1.2-rc.1`）。未配置模型时仍可进入 TUI、查看会话和使用非模型功能；在 `/model` 中按 Tab 进入供应商管理，配置 API key、OAuth 与设备码登录。
+需要 Node `^22.19 || >=24` 和预览版 `dsh` CLI（当前版本线：`@deepseek-ai/dsh@0.1.5-rc.1`）。未配置模型时仍可进入 TUI、查看会话和使用非模型功能；在 `/model` 中按 Tab 进入供应商管理，配置 API key、OAuth 与设备码登录。
 
 ### 1. 安装与更新
 
 初次安装和更新使用同一组指令：
 
 ```sh
-npm install -g @deepseek-ai/dsh@0.1.2-rc.1 dsh-code@1.0.5
+npm install -g @deepseek-ai/dsh@0.1.5-rc.1 dsh-code@1.0.6
 npm install -g pnpm
-dsh plugin --profile cli add dsh-code@1.0.5
+dsh plugin --profile cli add dsh-code@1.0.6
 ```
 
-> 提示：pnpm 会忽略发布不足 24 小时的包，因此发布首日请使用精确版本 `dsh-code@1.0.5`；24 小时后可省略版本号。npm 安装不受此限制。
+> 提示：pnpm 会忽略发布不足 24 小时的包，因此发布首日请使用精确版本 `dsh-code@1.0.6`；24 小时后可省略版本号。npm 安装不受此限制。
 >
-> 版本对齐：dsh-code 1.0.5 面向 dsh `0.1.2-rc.1` 构建，全部 Harness 依赖均精确锁定为 `0.1.2-rc.1`。已安装的用户运行 `deepseek update --apply` 即可按同一条版本线一起升级全局宿主与 cli profile 中的插件，本地开发挂载（`link:`）不受影响。
+> 版本对齐：dsh-code 面向 dsh `0.1.5-rc.1` 构建，全部 Harness 依赖均精确锁定为 `0.1.5-rc.1`。已安装的用户运行 `deepseek update --apply` 即可按同一条版本线一起升级全局宿主与 cli profile 中的插件，本地开发挂载（`link:`）不受影响。
 >
-> 升级说明：上游从本版本起将内置 `code` 预设更名为 `ptc`；旧会话与旧参数中记录的 `code` 会自动映射到 `ptc`，无需手动迁移。
+> 升级说明：旧会话与旧参数中记录的 `code` 预设会自动映射到上游已改名的 `ptc`，无需手动迁移。会话日志读取端随上游升级到格式 v3：旧格式日志在读取时由内核自动迁移，磁盘上的原始文件保持不变。
 
 ### 2. 启动指令
 
@@ -79,7 +79,7 @@ DSH-Code 的重点是让 DSH 的 Agent、模型、工具和持久会话可以直
 ### 2. Agent、模型与扩展
 
 - 每个会话可以选择独立的 Agent Preset，用于组合工具、提示词、技能、上下文压缩、plan mode 和 subagent 能力
-- 使用 `/mode` 选择 `standard`、`code`、`minimal`、`cordis` 或用户自定义 Preset
+- 使用 `/mode` 选择 `standard`、`ptc`、`minimal`、`cordis` 或用户自定义 Preset（旧名称 `code` 自动映射到 `ptc`）
 - 使用 `/model` 切换模型，管理 provider、API key、OAuth/设备码登录、endpoint、可用模型和上下文窗口；`Tab` 进入 provider 管理（已配置供应商置顶分组），任意阶段 `Ctrl+C` 直接退出整个 /model 流程
 - 在 provider 列表中，Enter 进入统一配置页：同页填写 API key 与 endpoint（留空即官方默认）、编辑已添加模型的上下文/输出窗口，`Tab` 进入发现页拉取端点真实可用模型并勾选添加
 - 在统一配置页的模型行上按 `e` 编辑推理档位声明（格式 `low:low high:high max:max`，`false` 禁用、留空恢复继承），按 `c` 从其他已声明模型逐字复制——例如 GLM 系列按官方三档写 `low:low high:high max:max`，新模型（如 gpt-6）可一键复制 gpt-5.6 的映射
@@ -111,7 +111,7 @@ DSH-Code 的重点是让 DSH 的 Agent、模型、工具和持久会话可以直
 ### 4. 编码工作流
 
 - 使用 `@` 引用工作区文件或已有会话；选择 PNG、JPEG、WebP、GIF 时会自动作为真实图片附件
-- 支持启动 prompt、多个 `--image` 参数，以及从终端拖入一张或多张图片
+- 支持启动 prompt、多个 `--image` 参数，以及从终端拖入或粘贴附件：图片按图片附件发送，其他文件按原样文件附件发送（单文件 8 MiB、每条消息 8 个以内）
 - 使用 `/diff` 按文件检查改动，使用 `/review` 发起只读代码审查
 - 使用 `/copy` 复制最近一条完整回复，使用 Ctrl+O 查看完整历史和工具详情
 - 支持工具审批、结构化提问、plan review、多选和自定义答案
@@ -174,6 +174,7 @@ dsh --profile cli --session my-id    # 使用指定 id 新建会话
 | `/statusline` | 选择状态栏显示的项目 |
 | `/vscode-keys` | 将 Ctrl+R 放行进 VS Code 系终端（幂等写入用户级 keybindings.json） |
 | `/theme` | 切换终端配色主题 |
+| `/animation` | 开关计时动画（shimmer/追逐/闪烁/切换波浪），`/animation [on\|off]` |
 | `/help` | 查看快捷键、内置命令、Harness 命令和用户技能 |
 | `/quit` | 退出 DSH-Code |
 
@@ -216,8 +217,8 @@ DSH-Code 读取 Harness 的实时注册表，不在本地维护另一套副本
 Host 持有共享基础设施——注册表、持久化、会话查询、权限和 sandbox 策略；每个会话则获得一个隔离的 Agent scope，并由 **Agent Preset** 进行组合：
 
 - `standard`——功能完整的通用编码 Agent
-- `code`——面向 Code Mode / PTC 的多操作工作流
-- `minimal`——只保留持久 shell 和 `str_replace_editor`
+- `ptc`——面向 PTC（原 Code Mode）的多操作工作流；旧名称 `code` 仍可使用
+- `minimal`——仅保留持久 shell 的单工具精简组合
 - `cordis`——完整 Agent，加上运行时检查与 Preset 编写指导
 - 用户预设——自行定义工具、提示词段落、技能、上下文压缩、plan mode 与 subagent 行为
 
@@ -225,7 +226,7 @@ Host 持有共享基础设施——注册表、持久化、会话查询、权限
 
 ### 3. 会话记录与恢复
 
-提示词、流式 chunk、工具调用与结果、模型选择、plan 状态、权限、标题和 preset 选择都由持久 Session 事件投影得到。会话恢复、导出、历史检查、上下文统计和终端重放使用同一份记录。
+提示词、工具调用与结果、模型选择、plan 状态、权限、标题和 preset 选择都由持久 Session 事件投影得到；会话恢复、导出、历史检查、上下文统计和终端重放使用同一份记录。实时流式文本经进程内流帧呈现，落盘日志只保留装配完成的回复（内嵌计时流），两者在重放时得到同一视图。
 
 React state 只保存输入草稿、光标、当前面板、选中项和滚动位置等临时界面状态。
 

package/bin/deepseek.mjs

@@ -73,6 +73,37 @@ export function profileMountedVersion(profileDir = cliProfileDir(), fileExists =
   }
 }
 
+/**
+ * Profile-installed harness plugins that a line upgrade must carry along:
+ * every `@deepseek-ai/dsh-*` dependency except the dsh-code target itself
+ * and local checkouts (`link:`/`file:` stay untouched). Users install these
+ * through `dsh plugin add` once; without this pass `update --apply` would
+ * move the host and dsh-code forward and silently leave every other plugin
+ * pinned to the old line.
+ * @param profileDir - the cli profile root.
+ * @returns dependency entries as `{ name, spec }` in manifest order.
+ */
+export function profilePluginDependencies(profileDir = cliProfileDir(), fileExists = existsSync, readFile = readFileSync) {
+  const manifest = join(profileDir, 'package.json')
+  if (!fileExists(manifest)) return []
+  let dependencies
+  try {
+    dependencies = JSON.parse(readFile(manifest, 'utf8'))?.dependencies
+  } catch {
+    return []
+  }
+  if (typeof dependencies !== 'object' || dependencies === null) return []
+  const plugins = []
+  for (const [name, spec] of Object.entries(dependencies)) {
+    if (typeof spec !== 'string') continue
+    if (!name.startsWith('@deepseek-ai/dsh-')) continue
+    if (name === 'dsh-code' || name === '@deepseek-ai/dsh-base') continue
+    if (/^(link|file):/iu.test(spec)) continue
+    plugins.push({ name, spec })
+  }
+  return plugins
+}
+
 /** The harness release line a dsh-code release expects, read from its peers. */
 export function harnessLineFromPeers(peers) {
   if (typeof peers !== 'object' || peers === null) return undefined
@@ -90,14 +121,67 @@ export function harnessLineFromPeers(peers) {
  * so the launcher can never move ahead of the plugin it must boot. A
  * profile that mounts a local checkout (link:/file:) keeps its mount.
  */
-export function updatePlan({ latestCode, peers, profileSpec }) {
+export function updatePlan({ latestCode, peers, profileSpec, profilePlugins = [] }) {
   const line = harnessLineFromPeers(peers)
+  const profileStep = !(typeof profileSpec === 'string' && /^(link|file):/iu.test(profileSpec))
   return {
     dshSpec: line === undefined ? '@deepseek-ai/dsh@latest' : `@deepseek-ai/dsh@${line}`,
+    line: line === undefined ? undefined : line,
     lineLocked: line !== undefined,
     codeSpec: `dsh-code@${latestCode}`,
-    profileStep: !(typeof profileSpec === 'string' && /^(link|file):/iu.test(profileSpec)),
+    profileStep,
+    // Companion plugins the profile installed through `dsh plugin add`:
+    // carried to the same line so one command moves the whole profile.
+    pluginSpecs: line === undefined || !profileStep ? [] : profilePlugins
+      .filter(plugin => plugin.spec !== line)
+      .map(plugin => `${plugin.name}@${line}`),
+  }
+}
+
+/**
+ * Compare two @deepseek-ai/dsh release-line versions (`0.1.x`, `0.1.x-rc.N`,
+ * `0.1.x-alpha.N`). Positive when `left` is newer, negative when older, and 0
+ * on equality or an unparseable value (an unreadable version never blocks an
+ * update — release semantics follow semver prerelease ordering: final > rc >
+ * beta > alpha).
+ */
+export function compareHarnessLines(left, right) {
+  const parse = (value) => {
+    const match = /^(\d+)\.(\d+)\.(\d+)(?:-(alpha|beta|rc)\.(\d+))?$/.exec(String(value))
+    if (match === null) return undefined
+    return {
+      core: [Number(match[1]), Number(match[2]), Number(match[3])],
+      tag: match[4] === undefined ? 3 : { alpha: 0, beta: 1, rc: 2 }[match[4]],
+      num: match[5] === undefined ? 0 : Number(match[5]),
+    }
+  }
+  const a = parse(left)
+  const b = parse(right)
+  if (a === undefined || b === undefined) return 0
+  for (let index = 0; index < 3; index += 1) {
+    if (a.core[index] !== b.core[index]) return a.core[index] - b.core[index]
+  }
+  if (a.tag !== b.tag) return a.tag - b.tag
+  return a.num - b.num
+}
+
+/**
+ * The globally installed @deepseek-ai/dsh version, when one exists across the
+ * npm global roots this launcher may boot from. An update whose plan targets a
+ * line OLDER than this would silently downgrade the booted host.
+ */
+export function installedGlobalDshVersion(roots = globalDshRoots(), fileExists = existsSync, readFile = readFileSync) {
+  for (const root of roots) {
+    const manifest = join(root, 'node_modules', '@deepseek-ai', 'dsh', 'package.json')
+    if (!fileExists(manifest)) continue
+    try {
+      const version = JSON.parse(readFile(manifest, 'utf8'))?.version
+      if (typeof version === 'string' && version !== '') return version
+    } catch {
+      // Unreadable manifest: try the next root.
+    }
   }
+  return undefined
 }
 
 /** Run wrapper-owned child steps in order, stopping at the first failure. */
@@ -319,10 +403,27 @@ async function applyUpdate({
     return
   }
   const peers = view([`dsh-code@${latestCode}`, 'peerDependencies'], undefined, npm)
-  const plan = updatePlan({ latestCode, peers, profileSpec: profileDependencySpec() })
+  const plan = updatePlan({
+    latestCode,
+    peers,
+    profileSpec: profileDependencySpec(),
+    profilePlugins: profilePluginDependencies(),
+  })
   if (!plan.lineLocked) {
     console.log('dsh-code: could not read the compatible harness line; installing @deepseek-ai/dsh@latest')
   }
+  // Downgrade guard: the latest published dsh-code may still pin an older
+  // harness line than the host already installed globally (a release-ordering
+  // window). Installing would silently downgrade every existing session's
+  // booted host, and a link-mounted profile would end up on a mismatched pair
+  // with no warning — refuse instead and name the manual command.
+  const installed = installedGlobalDshVersion()
+  if (plan.line !== undefined && installed !== undefined && compareHarnessLines(plan.line, installed) < 0) {
+    console.error(`dsh-code: dsh-code@${latestCode} needs @deepseek-ai/dsh@${plan.line}, but ${installed} is already installed globally`)
+    console.error(`dsh-code: refusing to downgrade the host; to proceed anyway run: npm install -g @deepseek-ai/dsh@${plan.line} dsh-code@${latestCode}`)
+    process.exitCode = 1
+    return
+  }
   const steps = [{ command: npm.command, args: [...npm.args, 'install', '-g', plan.dshSpec, plan.codeSpec], label: 'npm install' }]
   if (plan.profileStep) {
     const command = resolveCommand(['plugin', '--profile', 'cli', 'add', plan.codeSpec])
@@ -332,6 +433,20 @@ async function applyUpdate({
       return
     }
     steps.push({ command: command.command, args: command.args, label: 'dsh plugin add' })
+    // Companion plugins ride the same line: without this, `dsh plugin add`-ed
+    // extras stay pinned to the old harness line after an upgrade.
+    for (const pluginSpec of plan.pluginSpecs) {
+      const pluginCommand = resolveCommand(['plugin', '--profile', 'cli', 'add', pluginSpec])
+      if (pluginCommand === undefined) {
+        console.error(`dsh-code: could not resolve the dsh command for ${pluginSpec}`)
+        process.exitCode = 1
+        return
+      }
+      steps.push({ command: pluginCommand.command, args: pluginCommand.args, label: `dsh plugin add ${pluginSpec}` })
+    }
+    if (plan.pluginSpecs.length > 0) {
+      console.log(`carrying ${plan.pluginSpecs.length} profile plugin${plan.pluginSpecs.length === 1 ? '' : 's'} to the same line: ${plan.pluginSpecs.join(', ')}`)
+    }
   } else {
     console.log('cli profile mounts a local checkout; leaving the profile untouched')
   }

package/cordis.patch.yml

@@ -7,9 +7,12 @@
 # dispatches slash commands through the shared registry, and folds submitted
 # prompts back into the same durable session until the user quits.
 
+# 0.1.5 split the deployment persona into a prefix and a suffix template
+# around the first-party guidance sections; this terminal keeps its identity
+# line as the prefix ({{variable}} interpolation stays strict upstream).
 - id: system-prompt
   config:
-    persona: >-
+    personaPrefix: >-
       You are a coding agent powered by the {{model}} model. Your working directory is {{cwd}}.
 
 # The shared module-reload HMR row stays off; the launcher's watch-only
@@ -34,10 +37,14 @@
   disabled: true
 - id: tool-fs-search
   disabled: true
-- id: tool-str-replace-editor
-  disabled: true
+# skill-filesystem stays ENABLED on the host: it only feeds the skill
+# REGISTRY (local-root discovery), never the model-facing tool surface —
+# tool-skill below stays disabled and presets mount it per session. The
+# terminal offers skills in the slash menu before any session exists, and a
+# bare launch has no preset layer yet, so the registry's global layer needs
+# this provider; presets shadow it with the same discovery on their scope.
 - id: skill-filesystem
-  disabled: true
+  disabled: false
 - id: tool-skill
   disabled: true
 - id: command-goal
@@ -70,9 +77,11 @@
   disabled: true
 - id: tool-todo
   disabled: true
-# tool-web keeps the 0.1.2-rc.1 base default (web_fetch enabled over the
+# tool-web keeps the 0.1.5-rc.1 base default (web_fetch enabled over the
 # bundled web-fetch-http provider): the host row exposes web_fetch while the
-# per-preset agent-plane rows keep their own fetch stance.
+# per-preset agent-plane rows keep their own fetch stance. The upstream base
+# bundle dropped tool-str-replace-editor entirely in 0.1.5 (the minimal
+# preset became a single-tool composition), so this patch no longer lists it.
 
 - insert:
     # Code Mode is a core execution capability, not a Web component.
@@ -111,7 +120,8 @@
     # tool-subagent rows set `modelSelectionSettings: true`, whose start
     # resolves this service and fails the whole preset mount when absent
     # ("failed to apply loader entry delegation (cordis:group)"). The upstream
-    # web-app bundle adds this host row in 0.1.2-rc.1; dsh-base does not ship it.
+    # web-app bundle carries this host row in 0.1.5-rc.1; dsh-base still does
+    # not ship it.
     - id: subagent-model-selection-settings
       name: '@deepseek-ai/dsh-tool-subagent/model-selection-settings'