dsh-code 1.0.5 → 1.0.7

package/README.md

@@ -7,7 +7,7 @@
 <p align="center"><img alt="Typing SVG" src="https://readme-typing-svg.herokuapp.com?font=JetBrains+Mono&amp;weight=500&amp;size=22&amp;duration=4000&amp;pause=700&amp;color=4176E6&amp;center=true&amp;vCenter=true&amp;width=680&amp;lines=DeepSeek+Harness+Code;DSH+%E5%86%85%E6%A0%B8%E7%9A%84%E7%BB%88%E7%AB%AF%E7%BC%96%E7%A0%81%E7%95%8C%E9%9D%A2"></p>
 <p align="center">
   <a href="https://github.com/deepseek-ai/deepseek-harness"><img alt="DeepSeek Harness" src="https://img.shields.io/badge/DeepSeek-Harness-4176E6?style=for-the-badge&amp;logo=deepseek&amp;logoColor=white&amp;labelColor=1c1917"></a>
-  <a href="https://www.npmjs.com/package/@deepseek-ai/dsh"><img alt="dsh version" src="https://img.shields.io/badge/dsh-0.1.1--rc.2-4176E6?style=for-the-badge&amp;logo=deepseek&amp;logoColor=white&amp;labelColor=1c1917"></a>
+  <a href="https://www.npmjs.com/package/@deepseek-ai/dsh"><img alt="dsh version" src="https://img.shields.io/badge/dsh-0.1.5--rc.1-4176E6?style=for-the-badge&amp;logo=deepseek&amp;logoColor=white&amp;labelColor=1c1917"></a>
   <a href="https://github.com/UNLINEARITY/dsh-code/stargazers"><img alt="GitHub stars" src="https://img.shields.io/github/stars/UNLINEARITY/dsh-code?label=Stars&amp;style=for-the-badge&amp;logo=github&amp;logoColor=white&amp;color=4176E6&amp;labelColor=1c1917"></a>
   <a href="https://www.npmjs.com/package/dsh-code"><img alt="npm version" src="https://img.shields.io/npm/v/dsh-code?label=npm&amp;style=for-the-badge&amp;logo=npm&amp;color=cb3837&amp;labelColor=1c1917"></a>
   <a href="https://github.com/UNLINEARITY/dsh-code/blob/main/LICENSE"><img alt="License" src="https://img.shields.io/github/license/UNLINEARITY/dsh-code?label=License&amp;style=for-the-badge&amp;logo=opensourceinitiative&amp;color=4176E6&amp;labelColor=1c1917"></a>
@@ -25,23 +25,23 @@ DeepSeek Harness 将模型、工具、存储、策略和界面作为插件，通
 
 ## 二、快速开始
 
-需要 Node `^22.19 || >=24` 和预览版 `dsh` CLI（当前版本线：`@deepseek-ai/dsh@0.1.2-rc.1`）。未配置模型时仍可进入 TUI、查看会话和使用非模型功能；在 `/model` 中按 Tab 进入供应商管理，配置 API key、OAuth 与设备码登录。
+需要 Node `^22.19 || >=24` 和预览版 `dsh` CLI（当前版本线：`@deepseek-ai/dsh@0.1.5-rc.2`）。未配置模型时仍可进入 TUI、查看会话和使用非模型功能；在 `/model` 中按 Tab 进入供应商管理，配置 API key、OAuth 与设备码登录。
 
 ### 1. 安装与更新
 
 初次安装和更新使用同一组指令：
 
 ```sh
-npm install -g @deepseek-ai/dsh@0.1.2-rc.1 dsh-code@1.0.5
+npm install -g @deepseek-ai/dsh@0.1.5-rc.2 dsh-code@1.0.7
 npm install -g pnpm
-dsh plugin --profile cli add dsh-code@1.0.5
+dsh plugin --profile cli add dsh-code@1.0.7
 ```
 
-> 提示：pnpm 会忽略发布不足 24 小时的包，因此发布首日请使用精确版本 `dsh-code@1.0.5`；24 小时后可省略版本号。npm 安装不受此限制。
+> 提示：pnpm 会忽略发布不足 24 小时的包，因此发布首日请使用精确版本 `dsh-code@1.0.7`；24 小时后可省略版本号。npm 安装不受此限制。
 >
-> 版本对齐：dsh-code 1.0.5 面向 dsh `0.1.2-rc.1` 构建，全部 Harness 依赖均精确锁定为 `0.1.2-rc.1`。已安装的用户运行 `deepseek update --apply` 即可按同一条版本线一起升级全局宿主与 cli profile 中的插件，本地开发挂载（`link:`）不受影响。
+> 版本对齐：dsh-code 面向 dsh `0.1.5-rc.2` 构建，全部 Harness 依赖均精确锁定为 `0.1.5-rc.2`。已安装的用户运行 `deepseek update --apply` 即可按同一条版本线一起升级全局宿主与 cli profile 中的插件，本地开发挂载（`link:`）不受影响。
 >
-> 升级说明：上游从本版本起将内置 `code` 预设更名为 `ptc`；旧会话与旧参数中记录的 `code` 会自动映射到 `ptc`，无需手动迁移。
+> 升级说明：旧会话与旧参数中记录的 `code` 预设会自动映射到上游已改名的 `ptc`，无需手动迁移。会话日志读取端随上游升级到格式 v3：旧格式日志在读取时由内核自动迁移，磁盘上的原始文件保持不变。
 
 ### 2. 启动指令
 
@@ -68,7 +68,7 @@ DSH-Code 的重点是让 DSH 的 Agent、模型、工具和持久会话可以直
 - 使用 `/new` 新建会话，或通过 `/resume`、`--continue` 恢复已有会话
 - 使用 `/fork` 从历史节点创建新的工作分支，同时保留原会话
 - 按当前目录、更新时间和会话范围搜索历史记录
-- 使用 Up/Down 召回输入历史，或通过 `/history` 搜索过去的提示词
+- 使用 Up/Down 召回输入历史（含 / 指令），或通过 `/history` 搜索过去的提示词与指令
 - 支持持久标题、Markdown 导出、上下文占用、token、缓存、TTFT 和耗时统计
 - 恢复会话时同步恢复该会话使用的 Agent Preset 和模型选择
 
@@ -79,7 +79,7 @@ DSH-Code 的重点是让 DSH 的 Agent、模型、工具和持久会话可以直
 ### 2. Agent、模型与扩展
 
 - 每个会话可以选择独立的 Agent Preset，用于组合工具、提示词、技能、上下文压缩、plan mode 和 subagent 能力
-- 使用 `/mode` 选择 `standard`、`code`、`minimal`、`cordis` 或用户自定义 Preset
+- 使用 `/mode` 选择 `standard`、`ptc`、`minimal`、`cordis` 或用户自定义 Preset（旧名称 `code` 自动映射到 `ptc`）
 - 使用 `/model` 切换模型，管理 provider、API key、OAuth/设备码登录、endpoint、可用模型和上下文窗口；`Tab` 进入 provider 管理（已配置供应商置顶分组），任意阶段 `Ctrl+C` 直接退出整个 /model 流程
 - 在 provider 列表中，Enter 进入统一配置页：同页填写 API key 与 endpoint（留空即官方默认）、编辑已添加模型的上下文/输出窗口，`Tab` 进入发现页拉取端点真实可用模型并勾选添加
 - 在统一配置页的模型行上按 `e` 编辑推理档位声明（格式 `low:low high:high max:max`，`false` 禁用、留空恢复继承），按 `c` 从其他已声明模型逐字复制——例如 GLM 系列按官方三档写 `low:low high:high max:max`，新模型（如 gpt-6）可一键复制 gpt-5.6 的映射
@@ -111,7 +111,7 @@ DSH-Code 的重点是让 DSH 的 Agent、模型、工具和持久会话可以直
 ### 4. 编码工作流
 
 - 使用 `@` 引用工作区文件或已有会话；选择 PNG、JPEG、WebP、GIF 时会自动作为真实图片附件
-- 支持启动 prompt、多个 `--image` 参数，以及从终端拖入一张或多张图片
+- 支持启动 prompt、多个 `--image` 参数，以及从终端拖入或粘贴附件：图片按图片附件发送，其他文件按原样文件附件发送（单文件 8 MiB、每条消息 8 个以内）
 - 使用 `/diff` 按文件检查改动，使用 `/review` 发起只读代码审查
 - 使用 `/copy` 复制最近一条完整回复，使用 Ctrl+O 查看完整历史和工具详情
 - 支持工具审批、结构化提问、plan review、多选和自定义答案
@@ -142,7 +142,7 @@ dsh --profile cli --session my-id    # 使用指定 id 新建会话
 | `/delete [id\|前缀]` | 删除指定会话及其 subagent 会话 |
 | `/title <text>` | 修改当前会话标题 |
 | `/export [path]` | 将当前会话导出为 Markdown |
-| `/history` | 搜索并复用过去提交的提示词 |
+| `/history` | 搜索并复用过去提交的提示词与 / 指令 |
 | `/clear` | 清空当前终端显示，不删除持久会话 |
 
 #### Agent、模型与权限
@@ -164,6 +164,7 @@ dsh --profile cli --session my-id    # 使用指定 id 新建会话
 | `/todos` | 查看当前会话的完整 todo 列表 |
 | `/agents` | 查看当前会话创建的 subagent 会话 |
 | `/jobs` | 查看后台任务及其运行状态 |
+| `/schedule` | 查看活动提醒(模型经 schedule 工具创建/取消,面板只读展示,逾期优先) |
 | `/copy` | 复制最近一条完整助手回复 |
 
 #### 扩展、显示与退出
@@ -171,9 +172,11 @@ dsh --profile cli --session my-id    # 使用指定 id 新建会话
 | 命令 | 用途 |
 | --- | --- |
 | `/plugin [query]` | 查看已加载扩展及其状态 |
+| `/update` | 一键对齐升级：按目标版本的 peers 锁定宿主 Harness 线，同步升级 dsh-code、全局宿主与 profile 内伴生插件，升级前展示完整计划与拒绝条件，完成后提示重启生效 |
 | `/statusline` | 选择状态栏显示的项目 |
 | `/vscode-keys` | 将 Ctrl+R 放行进 VS Code 系终端（幂等写入用户级 keybindings.json） |
 | `/theme` | 切换终端配色主题 |
+| `/animation` | 开关计时动画（shimmer/追逐/闪烁/切换波浪），`/animation [on\|off]` |
 | `/help` | 查看快捷键、内置命令、Harness 命令和用户技能 |
 | `/quit` | 退出 DSH-Code |
 
@@ -211,21 +214,70 @@ DSH-Code 读取 Harness 的实时注册表，不在本地维护另一套副本
 
 `/plugin` 提供当前 Cordis loader 状态的只读视图。
 
-### 2. 会话级 Agent Preset
+### 2. 内置扩展与可选官方插件
+
+以下官方插件已随 DSH-Code 一起安装并在组合中默认启用：
+
+- **会话检索**：模型获得 `session_search` / `session_event_search` / `session_trace` / `session_event_trace` / `session_event_read` 五个只读工具，可检索历史会话内容（首次搜索时才构建索引，按工作目录精确匹配授权；Node 22 上首次搜索会当场打印一次 `node:sqlite` 实验性警告，属正常现象）。
+- **定时提醒**：`schedule` 提供跨重启的持久提醒（`schedule_create` / `schedule_list` / `schedule_delete` 工具创建），`/schedule` 面板只读展示、逾期条目置顶标红；`time-context` 为模型注入时钟读数（30 秒节流）。
+- **提醒的时钟读数**：`time-context` 为模型注入当前时间（30 秒节流），「下午五点提醒我」这类表述因此可用。
+
+以下官方插件已安装但需按需启用（在用户层 `~/.dsh/profiles/cli/cordis.patch.yml` 追加行，或按说明安装）：
+
+- **MCP 服务器**（`@deepseek-ai/dsh-mcp-client`，每个服务器一行，工具注册为 `mcp__<server>__<tool>`）：
+
+  ```yaml
+  - insert:
+      - id: mcp-memory
+        name: '@deepseek-ai/dsh-mcp-client'
+        config:
+          transport: stdio
+          serverName: memory
+          command: mcp-server-memory
+  ```
+
+  （HTTP 传输改用 `transport: streamable-http` + `url`；服务器不可达时安全降级为重连循环，不影响启动。）
+- **Claude Code / Codex hooks 桥**（`@deepseek-ai/dsh-hooks-claude-code` / `-codex`）：在拦截缝上运行既有 hooks 配置；hooks 文件缺失时静默不生效：
+
+  ```yaml
+  - insert:
+      - id: hooks-claude
+        name: '@deepseek-ai/dsh-hooks-claude-code'
+        config:
+          configPath: C:/Users/you/.claude/hooks.json
+  ```
+- **LSP 导航**：组合里预置了 `lsp` / `lsp-stdio` / `tool-lsp` 三行（禁用状态——语言服务器二进制在挂载期解析，缺失会让整个组合启动失败）。在用户层将三行 `disabled: false` 并为 `lsp-stdio` 配置 `servers`（扩展名到语言再到服务器命令），模型即获得 `lsp` 工具（goToDefinition / findReferences / goToImplementation / hover）。
+- **持久终端**：PTY 服务与平台后端（Windows 走 pwsh 方言、POSIX 走 bash）已默认挂载，但六个模型工具 `terminal_open` / `terminal_send` / `terminal_read` / `terminal_signal` / `terminal_close` / `terminal_list` 出厂禁用——启用等于向所有会话放开 shell 能力，与 preset 把关原则一致，由部署显式决定。在用户层开启：
+  ```yaml
+  - id: tool-terminal
+    disabled: false
+  ```
+  （后台发送会出现在 /jobs 面板。）
+- **tmux 面板上下文**（`@deepseek-ai/dsh-tmux-context`）：在 tmux 内运行时把当前面板内容注入模型上下文（`config: { refreshIntervalMs: 60000 }`）；不在 tmux 内时逐步为无害空操作：
+  ```yaml
+  - insert:
+      - id: tmux-context
+        name: '@deepseek-ai/dsh-tmux-context'
+        config:
+          refreshIntervalMs: 60000
+  ```
+- **外部 CLI 委托**：`dsh plugin --profile cli add @deepseek-ai/dsh-subagent-claude-code`（或 `-codex`）安装休眠 provider，再按上游契约复制预设并启用 `tool-subagent-claude-code` / `tool-subagent-codex` 行，模型即可把任务委托给 claude / codex CLI。
+
+### 3. 会话级 Agent Preset
 
 Host 持有共享基础设施——注册表、持久化、会话查询、权限和 sandbox 策略；每个会话则获得一个隔离的 Agent scope，并由 **Agent Preset** 进行组合：
 
 - `standard`——功能完整的通用编码 Agent
-- `code`——面向 Code Mode / PTC 的多操作工作流
-- `minimal`——只保留持久 shell 和 `str_replace_editor`
+- `ptc`——面向 PTC（原 Code Mode）的多操作工作流；旧名称 `code` 仍可使用
+- `minimal`——仅保留持久 shell 的单工具精简组合
 - `cordis`——完整 Agent，加上运行时检查与 Preset 编写指导
 - 用户预设——自行定义工具、提示词段落、技能、上下文压缩、plan mode 与 subagent 行为
 
 在第一次 turn 之前使用 `/mode`，或通过 `--mode <preset>` 直接启动。选中的 preset 会写入会话，并在恢复时还原。
 
-### 3. 会话记录与恢复
+### 4. 会话记录与恢复
 
-提示词、流式 chunk、工具调用与结果、模型选择、plan 状态、权限、标题和 preset 选择都由持久 Session 事件投影得到。会话恢复、导出、历史检查、上下文统计和终端重放使用同一份记录。
+提示词、工具调用与结果、模型选择、plan 状态、权限、标题和 preset 选择都由持久 Session 事件投影得到；会话恢复、导出、历史检查、上下文统计和终端重放使用同一份记录。实时流式文本经进程内流帧呈现，落盘日志只保留装配完成的回复（内嵌计时流），两者在重放时得到同一视图。
 
 React state 只保存输入草稿、光标、当前面板、选中项和滚动位置等临时界面状态。
 

package/bin/deepseek.mjs

@@ -8,7 +8,8 @@ import { dirname, join, resolve } from 'node:path'
 import { fileURLToPath, pathToFileURL } from 'node:url'
 
 const packageRequire = createRequire(import.meta.url)
-const packageVersion = packageRequire('../package.json').version
+/** This launcher's release version (exported for probes and tests). */
+export const packageVersion = packageRequire('../package.json').version
 
 /** Arguments required to boot DSH-Code's conventional profile. */
 export const profileArgs = (args = []) => ['--profile', 'cli', ...args]
@@ -73,6 +74,37 @@ export function profileMountedVersion(profileDir = cliProfileDir(), fileExists =
   }
 }
 
+/**
+ * Profile-installed harness plugins that a line upgrade must carry along:
+ * every `@deepseek-ai/dsh-*` dependency except the dsh-code target itself
+ * and local checkouts (`link:`/`file:` stay untouched). Users install these
+ * through `dsh plugin add` once; without this pass `update --apply` would
+ * move the host and dsh-code forward and silently leave every other plugin
+ * pinned to the old line.
+ * @param profileDir - the cli profile root.
+ * @returns dependency entries as `{ name, spec }` in manifest order.
+ */
+export function profilePluginDependencies(profileDir = cliProfileDir(), fileExists = existsSync, readFile = readFileSync) {
+  const manifest = join(profileDir, 'package.json')
+  if (!fileExists(manifest)) return []
+  let dependencies
+  try {
+    dependencies = JSON.parse(readFile(manifest, 'utf8'))?.dependencies
+  } catch {
+    return []
+  }
+  if (typeof dependencies !== 'object' || dependencies === null) return []
+  const plugins = []
+  for (const [name, spec] of Object.entries(dependencies)) {
+    if (typeof spec !== 'string') continue
+    if (!name.startsWith('@deepseek-ai/dsh-')) continue
+    if (name === 'dsh-code' || name === '@deepseek-ai/dsh-base') continue
+    if (/^(link|file):/iu.test(spec)) continue
+    plugins.push({ name, spec })
+  }
+  return plugins
+}
+
 /** The harness release line a dsh-code release expects, read from its peers. */
 export function harnessLineFromPeers(peers) {
   if (typeof peers !== 'object' || peers === null) return undefined
@@ -84,22 +116,91 @@ export function harnessLineFromPeers(peers) {
   return undefined
 }
 
+/**
+ * Refusal reason when a local-checkout profile would pair an older local
+ * build with the newer global host this upgrade installs, or undefined when
+ * the upgrade may proceed (no checkout mounted, or the checkout already
+ * matches the release). The caller prints the lines verbatim.
+ */
+export function localCheckoutRefusal(mounted, latestCode, codeSpec) {
+  if (mounted === undefined || mounted === latestCode) return undefined
+  return [
+    `dsh-code: the cli profile mounts a local checkout of dsh-code ${mounted}, while this upgrade would install ${latestCode} globally`,
+    'dsh-code: upgrading the host beside an older local checkout pairs incompatible code; refusing to install',
+    'dsh-code: update the checkout first (git pull, pnpm install, pnpm build), or switch the profile to the published package:',
+    `dsh-code:   dsh plugin --profile cli remove dsh-code && dsh plugin --profile cli add ${codeSpec}`,
+  ]
+}
+
 /**
  * Decide what `update --apply` installs. The global DSH launcher is pinned
  * to the harness line the target dsh-code release declares in its peers,
  * so the launcher can never move ahead of the plugin it must boot. A
  * profile that mounts a local checkout (link:/file:) keeps its mount.
  */
-export function updatePlan({ latestCode, peers, profileSpec }) {
+export function updatePlan({ latestCode, peers, profileSpec, profilePlugins = [] }) {
   const line = harnessLineFromPeers(peers)
+  const profileStep = !(typeof profileSpec === 'string' && /^(link|file):/iu.test(profileSpec))
   return {
     dshSpec: line === undefined ? '@deepseek-ai/dsh@latest' : `@deepseek-ai/dsh@${line}`,
+    line: line === undefined ? undefined : line,
     lineLocked: line !== undefined,
     codeSpec: `dsh-code@${latestCode}`,
-    profileStep: !(typeof profileSpec === 'string' && /^(link|file):/iu.test(profileSpec)),
+    profileStep,
+    // Companion plugins the profile installed through `dsh plugin add`:
+    // carried to the same line so one command moves the whole profile.
+    pluginSpecs: line === undefined || !profileStep ? [] : profilePlugins
+      .filter(plugin => plugin.spec !== line)
+      .map(plugin => `${plugin.name}@${line}`),
   }
 }
 
+/**
+ * Compare two @deepseek-ai/dsh release-line versions (`0.1.x`, `0.1.x-rc.N`,
+ * `0.1.x-alpha.N`). Positive when `left` is newer, negative when older, and 0
+ * on equality or an unparseable value (an unreadable version never blocks an
+ * update — release semantics follow semver prerelease ordering: final > rc >
+ * beta > alpha).
+ */
+export function compareHarnessLines(left, right) {
+  const parse = (value) => {
+    const match = /^(\d+)\.(\d+)\.(\d+)(?:-(alpha|beta|rc)\.(\d+))?$/.exec(String(value))
+    if (match === null) return undefined
+    return {
+      core: [Number(match[1]), Number(match[2]), Number(match[3])],
+      tag: match[4] === undefined ? 3 : { alpha: 0, beta: 1, rc: 2 }[match[4]],
+      num: match[5] === undefined ? 0 : Number(match[5]),
+    }
+  }
+  const a = parse(left)
+  const b = parse(right)
+  if (a === undefined || b === undefined) return 0
+  for (let index = 0; index < 3; index += 1) {
+    if (a.core[index] !== b.core[index]) return a.core[index] - b.core[index]
+  }
+  if (a.tag !== b.tag) return a.tag - b.tag
+  return a.num - b.num
+}
+
+/**
+ * The globally installed @deepseek-ai/dsh version, when one exists across the
+ * npm global roots this launcher may boot from. An update whose plan targets a
+ * line OLDER than this would silently downgrade the booted host.
+ */
+export function installedGlobalDshVersion(roots = globalDshRoots(), fileExists = existsSync, readFile = readFileSync) {
+  for (const root of roots) {
+    const manifest = join(root, 'node_modules', '@deepseek-ai', 'dsh', 'package.json')
+    if (!fileExists(manifest)) continue
+    try {
+      const version = JSON.parse(readFile(manifest, 'utf8'))?.version
+      if (typeof version === 'string' && version !== '') return version
+    } catch {
+      // Unreadable manifest: try the next root.
+    }
+  }
+  return undefined
+}
+
 /** Run wrapper-owned child steps in order, stopping at the first failure. */
 export function runSequence(steps, spawnProcess = spawn) {
   return new Promise(resolve => {
@@ -300,6 +401,57 @@ function printUpdateStatus() {
   console.log('Run `deepseek update --apply` to upgrade the global packages and the cli profile together.')
 }
 
+/**
+ * The structured form of the update status for machine consumers
+ * (`update --json`, consumed by the TUI /update panel): what is running,
+ * what npm serves, the exact steps `update --apply` would run, and every
+ * refusal that would stop it. One JSON object on stdout; `null` marks an
+ * unreadable value so the payload shape stays constant.
+ */
+export function buildUpdateStatus({
+  view = viewJson,
+  installedDsh = installedDshVersion,
+  readSpec = profileDependencySpec,
+  readMounted = profileMountedVersion,
+  readPlugins = profilePluginDependencies,
+} = {}) {
+  const codeLatest = view(['dsh-code', 'version'])
+  const installed = installedDsh()
+  const spec = readSpec()
+  const mounted = readMounted()
+  const peers = codeLatest === undefined ? undefined : view([`dsh-code@${codeLatest}`, 'peerDependencies'])
+  const plan = updatePlan({
+    latestCode: codeLatest ?? 'unknown',
+    peers,
+    profileSpec: spec,
+    profilePlugins: readPlugins(),
+  })
+  const registry = codeLatest === undefined ? 'could not read the latest dsh-code version from npm' : undefined
+  // The same refusals applyUpdate enforces, precomputed so a caller can
+  // show them BEFORE any confirmation instead of failing mid-flight.
+  const downgrade = plan.line !== undefined && installed !== undefined && compareHarnessLines(plan.line, installed) < 0
+  const localCheckout = plan.profileStep ? undefined : localCheckoutRefusal(mounted, codeLatest, plan.codeSpec)
+  const hostOnLine = installed !== undefined && (plan.line === undefined || compareHarnessLines(installed, plan.line) === 0)
+  const upToDate = registry === undefined
+    && codeLatest === packageVersion
+    && !downgrade
+    && localCheckout === undefined
+    && hostOnLine
+    && plan.pluginSpecs.length === 0
+    && (mounted === undefined || mounted === codeLatest)
+  return {
+    code: { running: packageVersion, latest: codeLatest ?? null },
+    host: { installed: installed ?? null, targetLine: plan.line ?? null },
+    profile: { spec: spec ?? null, mounted: mounted ?? null, localCheckout: !plan.profileStep },
+    plan: { dshSpec: plan.dshSpec, codeSpec: plan.codeSpec, pluginSpecs: plan.pluginSpecs },
+    // JSON.stringify drops undefined members; every unreadable value must
+    // serialize as an explicit null so machine consumers never see a missing
+    // key drift into a truthy comparison.
+    blockers: { registry: registry ?? null, downgrade, localCheckout: localCheckout ?? null },
+    upToDate,
+  }
+}
+
 /**
  * Upgrade the global launcher and the cli profile plugin together. The
  * global install is pinned to the harness line the new dsh-code release
@@ -319,10 +471,40 @@ async function applyUpdate({
     return
   }
   const peers = view([`dsh-code@${latestCode}`, 'peerDependencies'], undefined, npm)
-  const plan = updatePlan({ latestCode, peers, profileSpec: profileDependencySpec() })
+  const plan = updatePlan({
+    latestCode,
+    peers,
+    profileSpec: profileDependencySpec(),
+    profilePlugins: profilePluginDependencies(),
+  })
   if (!plan.lineLocked) {
     console.log('dsh-code: could not read the compatible harness line; installing @deepseek-ai/dsh@latest')
   }
+  // Downgrade guard: the latest published dsh-code may still pin an older
+  // harness line than the host already installed globally (a release-ordering
+  // window). Installing would silently downgrade every existing session's
+  // booted host, and a link-mounted profile would end up on a mismatched pair
+  // with no warning — refuse instead and name the manual command.
+  const installed = installedGlobalDshVersion()
+  if (plan.line !== undefined && installed !== undefined && compareHarnessLines(plan.line, installed) < 0) {
+    console.error(`dsh-code: dsh-code@${latestCode} needs @deepseek-ai/dsh@${plan.line}, but ${installed} is already installed globally`)
+    console.error(`dsh-code: refusing to downgrade the host; to proceed anyway run: npm install -g @deepseek-ai/dsh@${plan.line} dsh-code@${latestCode}`)
+    process.exitCode = 1
+    return
+  }
+  // Local-checkout guard: a link/file-mounted profile runs the checkout's
+  // own build, and this command would upgrade the global host beside it.
+  // When the checkout is older than the release being installed, upgrading
+  // pairs a new host with old local code — the terminal breaks on the next
+  // launch. Refuse until the checkout is updated or unmounted.
+  if (!plan.profileStep) {
+    const refusal = localCheckoutRefusal(profileMountedVersion(), latestCode, plan.codeSpec)
+    if (refusal !== undefined) {
+      for (const line of refusal) console.error(line)
+      process.exitCode = 1
+      return
+    }
+  }
   const steps = [{ command: npm.command, args: [...npm.args, 'install', '-g', plan.dshSpec, plan.codeSpec], label: 'npm install' }]
   if (plan.profileStep) {
     const command = resolveCommand(['plugin', '--profile', 'cli', 'add', plan.codeSpec])
@@ -332,6 +514,20 @@ async function applyUpdate({
       return
     }
     steps.push({ command: command.command, args: command.args, label: 'dsh plugin add' })
+    // Companion plugins ride the same line: without this, `dsh plugin add`-ed
+    // extras stay pinned to the old harness line after an upgrade.
+    for (const pluginSpec of plan.pluginSpecs) {
+      const pluginCommand = resolveCommand(['plugin', '--profile', 'cli', 'add', pluginSpec])
+      if (pluginCommand === undefined) {
+        console.error(`dsh-code: could not resolve the dsh command for ${pluginSpec}`)
+        process.exitCode = 1
+        return
+      }
+      steps.push({ command: pluginCommand.command, args: pluginCommand.args, label: `dsh plugin add ${pluginSpec}` })
+    }
+    if (plan.pluginSpecs.length > 0) {
+      console.log(`carrying ${plan.pluginSpecs.length} profile plugin${plan.pluginSpecs.length === 1 ? '' : 's'} to the same line: ${plan.pluginSpecs.join(', ')}`)
+    }
   } else {
     console.log('cli profile mounts a local checkout; leaving the profile untouched')
   }
@@ -375,6 +571,10 @@ export function launchOperation(args = process.argv.slice(2)) {
     return launchChild(command.command, command.args)
   }
   if (operation === 'update') {
+    if (args.includes('--json')) {
+      console.log(JSON.stringify(buildUpdateStatus()))
+      return true
+    }
     if (args.includes('--apply')) {
       void applyUpdate()
       return true

package/cordis.patch.yml

@@ -7,9 +7,12 @@
 # dispatches slash commands through the shared registry, and folds submitted
 # prompts back into the same durable session until the user quits.
 
+# 0.1.5 split the deployment persona into a prefix and a suffix template
+# around the first-party guidance sections; this terminal keeps its identity
+# line as the prefix ({{variable}} interpolation stays strict upstream).
 - id: system-prompt
   config:
-    persona: >-
+    personaPrefix: >-
       You are a coding agent powered by the {{model}} model. Your working directory is {{cwd}}.
 
 # The shared module-reload HMR row stays off; the launcher's watch-only
@@ -21,6 +24,17 @@
   config:
     mode: !!js process.env.DSH_TOOLS_MODE
 
+# The base row keeps full-text search off entirely (openAt: never) so nothing
+# imports node:sqlite at boot; the terminal replaces it with the bundle's
+# skip-tolerant subclass below. An override row cannot retarget a row's
+# MODULE (name is only honored on inserts), so the base row is disabled and
+# an equivalent row mounts the subclass: the derived index opens lazily on
+# the first search (no startup cost, no Node 22 experimental warning), and
+# one unreadable source (a pre-release artifact the frozen codecs reject)
+# is skipped with a warning instead of failing every cross-session search.
+- id: session-query-sqlite
+  disabled: true
+
 # Agent-plane rows are mounted by the selected preset. Keep this list aligned
 # with the upstream Web bundle so two sessions can use different compositions
 # without leaking model-facing registrations through the host layer.
@@ -34,10 +48,14 @@
   disabled: true
 - id: tool-fs-search
   disabled: true
-- id: tool-str-replace-editor
-  disabled: true
+# skill-filesystem stays ENABLED on the host: it only feeds the skill
+# REGISTRY (local-root discovery), never the model-facing tool surface —
+# tool-skill below stays disabled and presets mount it per session. The
+# terminal offers skills in the slash menu before any session exists, and a
+# bare launch has no preset layer yet, so the registry's global layer needs
+# this provider; presets shadow it with the same discovery on their scope.
 - id: skill-filesystem
-  disabled: true
+  disabled: false
 - id: tool-skill
   disabled: true
 - id: command-goal
@@ -70,9 +88,11 @@
   disabled: true
 - id: tool-todo
   disabled: true
-# tool-web keeps the 0.1.2-rc.1 base default (web_fetch enabled over the
+# tool-web keeps the 0.1.5-rc.1 base default (web_fetch enabled over the
 # bundled web-fetch-http provider): the host row exposes web_fetch while the
-# per-preset agent-plane rows keep their own fetch stance.
+# per-preset agent-plane rows keep their own fetch stance. The upstream base
+# bundle dropped tool-str-replace-editor entirely in 0.1.5 (the minimal
+# preset became a single-tool composition), so this patch no longer lists it.
 
 - insert:
     # Code Mode is a core execution capability, not a Web component.
@@ -111,7 +131,8 @@
     # tool-subagent rows set `modelSelectionSettings: true`, whose start
     # resolves this service and fails the whole preset mount when absent
     # ("failed to apply loader entry delegation (cordis:group)"). The upstream
-    # web-app bundle adds this host row in 0.1.2-rc.1; dsh-base does not ship it.
+    # web-app bundle carries this host row in 0.1.5-rc.1; dsh-base still does
+    # not ship it.
     - id: subagent-model-selection-settings
       name: '@deepseek-ai/dsh-tool-subagent/model-selection-settings'
 
@@ -122,6 +143,83 @@
     - id: authorization
       name: '@deepseek-ai/dsh-authorization'
 
+    # The bundle's skip-tolerant session-query engine replacing the disabled
+    # base row above: same SQLite FTS5 service, observation loop patched to
+    # skip unreadable sources instead of failing every search.
+    - id: session-query-skip
+      name: 'dsh-code/session-query'
+      config:
+        path: ':memory:'
+        openAt: first-search
+
+    # Model-facing session-log search/trace/read tools over the sessionQuery
+    # service (read-only, workspace-scoped by exact cwd). A host-plane mount
+    # is deployment-global: every preset session sees the five tools. Kept
+    # ENABLED deliberately — read-only search leaks no capability — but note
+    # it does reach minimal-preset sessions too.
+    - id: tool-session-query
+      name: '@deepseek-ai/dsh-tool-session-query'
+
+    # Durable reminders: the schedule service arms per-root timers, injects
+    # due prompts as plugin-source user messages, and writes schedule/change
+    # events the projection folds into the /schedule panel. time-context
+    # gives the model a clock reading so 'at' times are phrased against the
+    # actual time; the 30s throttle bounds durable snapshot growth.
+    - id: schedule
+      name: '@deepseek-ai/dsh-schedule'
+
+    - id: time-context
+      name: '@deepseek-ai/dsh-time-context'
+      config:
+        refreshIntervalMs: 30000
+
+    # Persistent PTY plumbing: the owner-scoped registry and the one backend
+    # package in both dialects (pwsh is the Windows/ConPTY path, bash covers
+    # POSIX) mount as host SERVICES — no model-facing surface, so they break
+    # no preset boundary. The six terminal_* TOOLS ship DISABLED like LSP:
+    # enabling them at the host plane would hand every preset (including the
+    # shell-restricted minimal one) raw shell capability, the exact leak the
+    # disables above exist to prevent. Flip tool-terminal to disabled: false
+    # in the PROFILE layer to opt the deployment into PTY tools.
+    - id: pty
+      name: '@deepseek-ai/dsh-terminal'
+
+    - id: terminal-pwsh
+      name: '@deepseek-ai/dsh-terminal-bash'
+      disabled: !!js process.platform !== 'win32'
+      config:
+        shellDialect: pwsh
+
+    - id: terminal-bash
+      name: '@deepseek-ai/dsh-terminal-bash'
+      disabled: !!js process.platform === 'win32'
+
+    - id: tool-terminal
+      name: '@deepseek-ai/dsh-tool-terminal'
+      disabled: true
+
+    # LSP navigation ships DISABLED: lsp-stdio resolves every server command
+    # at mount and a missing binary would fail the whole composition boot.
+    # Enable in the PROFILE layer with real servers, e.g.:
+    #   lsp / lsp-stdio / tool-lsp rows with disabled: false and
+    #   lsp-stdio config.servers mapping extensions to server commands.
+    - id: lsp
+      name: '@deepseek-ai/dsh-lsp'
+      disabled: true
+
+    - id: lsp-stdio
+      name: '@deepseek-ai/dsh-lsp-stdio'
+      disabled: true
+
+    - id: tool-lsp
+      name: '@deepseek-ai/dsh-tool-lsp'
+      disabled: true
+
+    # MCP servers (dsh-mcp-client) and hooks bridges (dsh-hooks-claude-code /
+    # -codex) take per-instance config (server transports, hooks.json paths),
+    # so they mount as rows in the USER profile layer, not here; the packages
+    # ship as peers so those rows resolve. README documents the row shapes.
+
     - id: tui-startup
       name: 'dsh-code/startup'