dsh-code 1.0.6 → 1.0.7

package/README.en.md

@@ -23,21 +23,21 @@ DeepSeek Harness registers models, tools, storage, policies, and interfaces as p
 
 ## 2. Quick start
 
-Requires Node `^22.19 || >=24` and the preview `dsh` CLI (current release line: `@deepseek-ai/dsh@0.1.5-rc.1`). You can still enter the TUI, browse sessions, and use non-model features without configuring a model; press `Tab` in `/model` to manage API keys, OAuth, device-code sign-in, endpoints, and models.
+Requires Node `^22.19 || >=24` and the preview `dsh` CLI (current release line: `@deepseek-ai/dsh@0.1.5-rc.2`). You can still enter the TUI, browse sessions, and use non-model features without configuring a model; press `Tab` in `/model` to manage API keys, OAuth, device-code sign-in, endpoints, and models.
 
 ### 1. Install and update
 
 Use the same commands for the initial installation and subsequent updates:
 
 ```sh
-npm install -g @deepseek-ai/dsh@0.1.5-rc.1 dsh-code@1.0.6
+npm install -g @deepseek-ai/dsh@0.1.5-rc.2 dsh-code@1.0.7
 npm install -g pnpm
-dsh plugin --profile cli add dsh-code@1.0.6
+dsh plugin --profile cli add dsh-code@1.0.7
 ```
 
-> Note: pnpm ignores packages published less than 24 hours ago, so use the exact version `dsh-code@1.0.6` on release day; the version may be omitted after 24 hours. npm installation is not affected.
+> Note: pnpm ignores packages published less than 24 hours ago, so use the exact version `dsh-code@1.0.7` on release day; the version may be omitted after 24 hours. npm installation is not affected.
 >
-> Version alignment: dsh-code targets dsh `0.1.5-rc.1`, with every Harness dependency pinned exactly to `0.1.5-rc.1`. Keep the global dsh CLI and dsh-code aligned instead of mixing release candidates; the legacy `code` preset id maps to its renamed `ptc` automatically.
+> Version alignment: dsh-code targets dsh `0.1.5-rc.2`, with every Harness dependency pinned exactly to `0.1.5-rc.2`. Keep the global dsh CLI and dsh-code aligned instead of mixing release candidates; the legacy `code` preset id maps to its renamed `ptc` automatically.
 
 ### 2. Launch commands
 
@@ -64,7 +64,7 @@ DSH-Code brings DSH Agents, models, tools, and durable sessions directly into th
 - Create sessions with `/new`, or restore existing sessions with `/resume` and `--continue`
 - Create a new work branch from a historical point with `/fork` while preserving the original session
 - Search history by current directory, update time, and session scope
-- Recall input history with Up/Down, or search previous prompts with `/history`
+- Recall input history with Up/Down (typed slash commands included), or search previous prompts and commands with `/history`
 - Use persistent titles, Markdown export, context occupancy, token, cache, TTFT, and elapsed-time metrics
 - Restore the session's Agent Preset and model selection when resuming it
 
@@ -134,7 +134,7 @@ The following built-in commands are available inside the TUI. Additional Harness
 | `/delete [id\|prefix]` | Delete a session and its subagent sessions |
 | `/title <text>` | Change the current session title |
 | `/export [path]` | Export the current session as Markdown |
-| `/history` | Search and reuse previously submitted prompts |
+| `/history` | Search and reuse previously submitted prompts and slash commands |
 | `/clear` | Clear the current terminal display without deleting the durable session |
 
 #### Agents, models, and permissions
@@ -156,6 +156,7 @@ The following built-in commands are available inside the TUI. Additional Harness
 | `/todos` | View the complete todo list for the current session |
 | `/agents` | View subagent sessions created by the current session |
 | `/jobs` | View background jobs and their runtime status |
+| `/schedule` | Inspect active reminders (created through the model's schedule tools; read-only, overdue first) |
 | `/copy` | Copy the latest complete assistant response |
 
 #### Extensions, display, and exit
@@ -163,6 +164,7 @@ The following built-in commands are available inside the TUI. Additional Harness
 | Command | Purpose |
 | --- | --- |
 | `/plugin [query]` | Inspect loaded extensions and their status |
+| `/update` | One aligned upgrade: pins the global Harness host to the line the target release declares in its peers, moves dsh-code, the host, and profile companion plugins together, shows the full plan and refusal reasons before confirming, and prompts a restart when done |
 | `/statusline` | Select the items displayed in the status bar |
 | `/vscode-keys` | Pass Ctrl+R through VS Code-family terminals (idempotent user-level keybindings.json write) |
 | `/theme` | Switch the terminal color theme |
@@ -204,7 +206,56 @@ DSH-Code reads the live Harness registries instead of maintaining a separate loc
 
 `/plugin` provides a read-only view of the current Cordis loader state.
 
-### 2. Session-scoped Agent Presets
+### 2. Bundled and optional official plugins
+
+The following official plugins ship with DSH-Code and are enabled in the composition by default:
+
+- **Session search**: the model gets five read-only tools — `session_search`, `session_event_search`, `session_trace`, `session_event_trace`, `session_event_read` — over prior session logs (the index builds lazily on the first search; cross-session access is scoped by exact working directory; on Node 22 the first search prints a one-time `node:sqlite` experimental warning, which is expected).
+- **Reminders**: `schedule` provides durable, restart-surviving reminders (created through the `schedule_create` / `schedule_list` / `schedule_delete` tools); the `/schedule` panel shows them read-only with overdue rows first. `time-context` injects a clock reading for the model (throttled to 30s).
+- **Clock for reminders**: `time-context` injects the current time for the model (throttled to 30s), so phrasings like "remind me at 5 pm" work.
+
+The following official plugins are installed but opt-in (append rows in the user layer `~/.dsh/profiles/cli/cordis.patch.yml`, or install as noted):
+
+- **MCP servers** (`@deepseek-ai/dsh-mcp-client`, one row per server; tools register as `mcp__<server>__<tool>`):
+
+  ```yaml
+  - insert:
+      - id: mcp-memory
+        name: '@deepseek-ai/dsh-mcp-client'
+        config:
+          transport: stdio
+          serverName: memory
+          command: mcp-server-memory
+  ```
+
+  (HTTP transports use `transport: streamable-http` plus `url`; an unreachable server degrades to a reconnect loop and never breaks startup.)
+- **Claude Code / Codex hooks bridges** (`@deepseek-ai/dsh-hooks-claude-code` / `-codex`): run existing hooks configurations at the interception seams; a missing hooks file is a silent no-op:
+
+  ```yaml
+  - insert:
+      - id: hooks-claude
+        name: '@deepseek-ai/dsh-hooks-claude-code'
+        config:
+          configPath: C:/Users/you/.claude/hooks.json
+  ```
+- **LSP navigation**: the composition carries `lsp` / `lsp-stdio` / `tool-lsp` rows in a disabled state — language-server binaries resolve at mount, and a missing binary would fail the whole composition boot. Flip the three rows to `disabled: false` in the user layer and configure `lsp-stdio` `servers` (extension to language to server command); the model then gets the `lsp` tool (goToDefinition / findReferences / goToImplementation / hover).
+- **Persistent terminals**: the PTY service and platform backends (pwsh dialect on Windows, bash on POSIX) mount by default, but the six model tools `terminal_open` / `terminal_send` / `terminal_read` / `terminal_signal` / `terminal_close` / `terminal_list` ship DISABLED — enabling them grants shell capability to every session, which the preset layer is supposed to gate, so deployments opt in explicitly. Enable in the user layer:
+  ```yaml
+  - id: tool-terminal
+    disabled: false
+  ```
+  (Background sends appear in the /jobs panel.)
+- **tmux pane context** (`@deepseek-ai/dsh-tmux-context`): injects the current tmux pane into the model context when running inside tmux (`config: { refreshIntervalMs: 60000 }`); outside tmux every step degrades to a harmless no-op:
+  ```yaml
+  - insert:
+      - id: tmux-context
+        name: '@deepseek-ai/dsh-tmux-context'
+        config:
+          refreshIntervalMs: 60000
+  ```
+- **External CLI delegation**: `dsh plugin --profile cli add @deepseek-ai/dsh-subagent-claude-code` (or `-codex`) installs the dormant provider; following the upstream contract, copy the preset and enable the `tool-subagent-claude-code` / `tool-subagent-codex` row to let the model delegate tasks to the claude / codex CLIs.
+
+### 3. Session-scoped Agent Presets
 
 The Host owns the shared infrastructure—registries, persistence, session queries, permissions, and sandbox policies—while each session receives an isolated Agent scope composed by an **Agent Preset**:
 
@@ -216,7 +267,7 @@ The Host owns the shared infrastructure—registries, persistence, session queri
 
 Use `/mode` before the first turn, or start directly with `--mode <preset>`. The selected Preset is written to the session and restored when the session resumes.
 
-### 3. Session history and recovery
+### 4. Session history and recovery
 
 Prompts, streaming chunks, tool calls and results, model selections, plan state, permissions, titles, and Preset selections are all projected from durable Session events. Session recovery, export, history inspection, context metrics, and terminal replay use the same record.
 

package/README.md

@@ -25,21 +25,21 @@ DeepSeek Harness 将模型、工具、存储、策略和界面作为插件，通
 
 ## 二、快速开始
 
-需要 Node `^22.19 || >=24` 和预览版 `dsh` CLI（当前版本线：`@deepseek-ai/dsh@0.1.5-rc.1`）。未配置模型时仍可进入 TUI、查看会话和使用非模型功能；在 `/model` 中按 Tab 进入供应商管理，配置 API key、OAuth 与设备码登录。
+需要 Node `^22.19 || >=24` 和预览版 `dsh` CLI（当前版本线：`@deepseek-ai/dsh@0.1.5-rc.2`）。未配置模型时仍可进入 TUI、查看会话和使用非模型功能；在 `/model` 中按 Tab 进入供应商管理，配置 API key、OAuth 与设备码登录。
 
 ### 1. 安装与更新
 
 初次安装和更新使用同一组指令：
 
 ```sh
-npm install -g @deepseek-ai/dsh@0.1.5-rc.1 dsh-code@1.0.6
+npm install -g @deepseek-ai/dsh@0.1.5-rc.2 dsh-code@1.0.7
 npm install -g pnpm
-dsh plugin --profile cli add dsh-code@1.0.6
+dsh plugin --profile cli add dsh-code@1.0.7
 ```
 
-> 提示：pnpm 会忽略发布不足 24 小时的包，因此发布首日请使用精确版本 `dsh-code@1.0.6`；24 小时后可省略版本号。npm 安装不受此限制。
+> 提示：pnpm 会忽略发布不足 24 小时的包，因此发布首日请使用精确版本 `dsh-code@1.0.7`；24 小时后可省略版本号。npm 安装不受此限制。
 >
-> 版本对齐：dsh-code 面向 dsh `0.1.5-rc.1` 构建，全部 Harness 依赖均精确锁定为 `0.1.5-rc.1`。已安装的用户运行 `deepseek update --apply` 即可按同一条版本线一起升级全局宿主与 cli profile 中的插件，本地开发挂载（`link:`）不受影响。
+> 版本对齐：dsh-code 面向 dsh `0.1.5-rc.2` 构建，全部 Harness 依赖均精确锁定为 `0.1.5-rc.2`。已安装的用户运行 `deepseek update --apply` 即可按同一条版本线一起升级全局宿主与 cli profile 中的插件，本地开发挂载（`link:`）不受影响。
 >
 > 升级说明：旧会话与旧参数中记录的 `code` 预设会自动映射到上游已改名的 `ptc`，无需手动迁移。会话日志读取端随上游升级到格式 v3：旧格式日志在读取时由内核自动迁移，磁盘上的原始文件保持不变。
 
@@ -68,7 +68,7 @@ DSH-Code 的重点是让 DSH 的 Agent、模型、工具和持久会话可以直
 - 使用 `/new` 新建会话，或通过 `/resume`、`--continue` 恢复已有会话
 - 使用 `/fork` 从历史节点创建新的工作分支，同时保留原会话
 - 按当前目录、更新时间和会话范围搜索历史记录
-- 使用 Up/Down 召回输入历史，或通过 `/history` 搜索过去的提示词
+- 使用 Up/Down 召回输入历史（含 / 指令），或通过 `/history` 搜索过去的提示词与指令
 - 支持持久标题、Markdown 导出、上下文占用、token、缓存、TTFT 和耗时统计
 - 恢复会话时同步恢复该会话使用的 Agent Preset 和模型选择
 
@@ -142,7 +142,7 @@ dsh --profile cli --session my-id    # 使用指定 id 新建会话
 | `/delete [id\|前缀]` | 删除指定会话及其 subagent 会话 |
 | `/title <text>` | 修改当前会话标题 |
 | `/export [path]` | 将当前会话导出为 Markdown |
-| `/history` | 搜索并复用过去提交的提示词 |
+| `/history` | 搜索并复用过去提交的提示词与 / 指令 |
 | `/clear` | 清空当前终端显示，不删除持久会话 |
 
 #### Agent、模型与权限
@@ -164,6 +164,7 @@ dsh --profile cli --session my-id    # 使用指定 id 新建会话
 | `/todos` | 查看当前会话的完整 todo 列表 |
 | `/agents` | 查看当前会话创建的 subagent 会话 |
 | `/jobs` | 查看后台任务及其运行状态 |
+| `/schedule` | 查看活动提醒(模型经 schedule 工具创建/取消,面板只读展示,逾期优先) |
 | `/copy` | 复制最近一条完整助手回复 |
 
 #### 扩展、显示与退出
@@ -171,6 +172,7 @@ dsh --profile cli --session my-id    # 使用指定 id 新建会话
 | 命令 | 用途 |
 | --- | --- |
 | `/plugin [query]` | 查看已加载扩展及其状态 |
+| `/update` | 一键对齐升级：按目标版本的 peers 锁定宿主 Harness 线，同步升级 dsh-code、全局宿主与 profile 内伴生插件，升级前展示完整计划与拒绝条件，完成后提示重启生效 |
 | `/statusline` | 选择状态栏显示的项目 |
 | `/vscode-keys` | 将 Ctrl+R 放行进 VS Code 系终端（幂等写入用户级 keybindings.json） |
 | `/theme` | 切换终端配色主题 |
@@ -212,7 +214,56 @@ DSH-Code 读取 Harness 的实时注册表，不在本地维护另一套副本
 
 `/plugin` 提供当前 Cordis loader 状态的只读视图。
 
-### 2. 会话级 Agent Preset
+### 2. 内置扩展与可选官方插件
+
+以下官方插件已随 DSH-Code 一起安装并在组合中默认启用：
+
+- **会话检索**：模型获得 `session_search` / `session_event_search` / `session_trace` / `session_event_trace` / `session_event_read` 五个只读工具，可检索历史会话内容（首次搜索时才构建索引，按工作目录精确匹配授权；Node 22 上首次搜索会当场打印一次 `node:sqlite` 实验性警告，属正常现象）。
+- **定时提醒**：`schedule` 提供跨重启的持久提醒（`schedule_create` / `schedule_list` / `schedule_delete` 工具创建），`/schedule` 面板只读展示、逾期条目置顶标红；`time-context` 为模型注入时钟读数（30 秒节流）。
+- **提醒的时钟读数**：`time-context` 为模型注入当前时间（30 秒节流），「下午五点提醒我」这类表述因此可用。
+
+以下官方插件已安装但需按需启用（在用户层 `~/.dsh/profiles/cli/cordis.patch.yml` 追加行，或按说明安装）：
+
+- **MCP 服务器**（`@deepseek-ai/dsh-mcp-client`，每个服务器一行，工具注册为 `mcp__<server>__<tool>`）：
+
+  ```yaml
+  - insert:
+      - id: mcp-memory
+        name: '@deepseek-ai/dsh-mcp-client'
+        config:
+          transport: stdio
+          serverName: memory
+          command: mcp-server-memory
+  ```
+
+  （HTTP 传输改用 `transport: streamable-http` + `url`；服务器不可达时安全降级为重连循环，不影响启动。）
+- **Claude Code / Codex hooks 桥**（`@deepseek-ai/dsh-hooks-claude-code` / `-codex`）：在拦截缝上运行既有 hooks 配置；hooks 文件缺失时静默不生效：
+
+  ```yaml
+  - insert:
+      - id: hooks-claude
+        name: '@deepseek-ai/dsh-hooks-claude-code'
+        config:
+          configPath: C:/Users/you/.claude/hooks.json
+  ```
+- **LSP 导航**：组合里预置了 `lsp` / `lsp-stdio` / `tool-lsp` 三行（禁用状态——语言服务器二进制在挂载期解析，缺失会让整个组合启动失败）。在用户层将三行 `disabled: false` 并为 `lsp-stdio` 配置 `servers`（扩展名到语言再到服务器命令），模型即获得 `lsp` 工具（goToDefinition / findReferences / goToImplementation / hover）。
+- **持久终端**：PTY 服务与平台后端（Windows 走 pwsh 方言、POSIX 走 bash）已默认挂载，但六个模型工具 `terminal_open` / `terminal_send` / `terminal_read` / `terminal_signal` / `terminal_close` / `terminal_list` 出厂禁用——启用等于向所有会话放开 shell 能力，与 preset 把关原则一致，由部署显式决定。在用户层开启：
+  ```yaml
+  - id: tool-terminal
+    disabled: false
+  ```
+  （后台发送会出现在 /jobs 面板。）
+- **tmux 面板上下文**（`@deepseek-ai/dsh-tmux-context`）：在 tmux 内运行时把当前面板内容注入模型上下文（`config: { refreshIntervalMs: 60000 }`）；不在 tmux 内时逐步为无害空操作：
+  ```yaml
+  - insert:
+      - id: tmux-context
+        name: '@deepseek-ai/dsh-tmux-context'
+        config:
+          refreshIntervalMs: 60000
+  ```
+- **外部 CLI 委托**：`dsh plugin --profile cli add @deepseek-ai/dsh-subagent-claude-code`（或 `-codex`）安装休眠 provider，再按上游契约复制预设并启用 `tool-subagent-claude-code` / `tool-subagent-codex` 行，模型即可把任务委托给 claude / codex CLI。
+
+### 3. 会话级 Agent Preset
 
 Host 持有共享基础设施——注册表、持久化、会话查询、权限和 sandbox 策略；每个会话则获得一个隔离的 Agent scope，并由 **Agent Preset** 进行组合：
 
@@ -224,7 +275,7 @@ Host 持有共享基础设施——注册表、持久化、会话查询、权限
 
 在第一次 turn 之前使用 `/mode`，或通过 `--mode <preset>` 直接启动。选中的 preset 会写入会话，并在恢复时还原。
 
-### 3. 会话记录与恢复
+### 4. 会话记录与恢复
 
 提示词、工具调用与结果、模型选择、plan 状态、权限、标题和 preset 选择都由持久 Session 事件投影得到；会话恢复、导出、历史检查、上下文统计和终端重放使用同一份记录。实时流式文本经进程内流帧呈现，落盘日志只保留装配完成的回复（内嵌计时流），两者在重放时得到同一视图。
 

package/bin/deepseek.mjs

@@ -8,7 +8,8 @@ import { dirname, join, resolve } from 'node:path'
 import { fileURLToPath, pathToFileURL } from 'node:url'
 
 const packageRequire = createRequire(import.meta.url)
-const packageVersion = packageRequire('../package.json').version
+/** This launcher's release version (exported for probes and tests). */
+export const packageVersion = packageRequire('../package.json').version
 
 /** Arguments required to boot DSH-Code's conventional profile. */
 export const profileArgs = (args = []) => ['--profile', 'cli', ...args]
@@ -115,6 +116,22 @@ export function harnessLineFromPeers(peers) {
   return undefined
 }
 
+/**
+ * Refusal reason when a local-checkout profile would pair an older local
+ * build with the newer global host this upgrade installs, or undefined when
+ * the upgrade may proceed (no checkout mounted, or the checkout already
+ * matches the release). The caller prints the lines verbatim.
+ */
+export function localCheckoutRefusal(mounted, latestCode, codeSpec) {
+  if (mounted === undefined || mounted === latestCode) return undefined
+  return [
+    `dsh-code: the cli profile mounts a local checkout of dsh-code ${mounted}, while this upgrade would install ${latestCode} globally`,
+    'dsh-code: upgrading the host beside an older local checkout pairs incompatible code; refusing to install',
+    'dsh-code: update the checkout first (git pull, pnpm install, pnpm build), or switch the profile to the published package:',
+    `dsh-code:   dsh plugin --profile cli remove dsh-code && dsh plugin --profile cli add ${codeSpec}`,
+  ]
+}
+
 /**
  * Decide what `update --apply` installs. The global DSH launcher is pinned
  * to the harness line the target dsh-code release declares in its peers,
@@ -384,6 +401,57 @@ function printUpdateStatus() {
   console.log('Run `deepseek update --apply` to upgrade the global packages and the cli profile together.')
 }
 
+/**
+ * The structured form of the update status for machine consumers
+ * (`update --json`, consumed by the TUI /update panel): what is running,
+ * what npm serves, the exact steps `update --apply` would run, and every
+ * refusal that would stop it. One JSON object on stdout; `null` marks an
+ * unreadable value so the payload shape stays constant.
+ */
+export function buildUpdateStatus({
+  view = viewJson,
+  installedDsh = installedDshVersion,
+  readSpec = profileDependencySpec,
+  readMounted = profileMountedVersion,
+  readPlugins = profilePluginDependencies,
+} = {}) {
+  const codeLatest = view(['dsh-code', 'version'])
+  const installed = installedDsh()
+  const spec = readSpec()
+  const mounted = readMounted()
+  const peers = codeLatest === undefined ? undefined : view([`dsh-code@${codeLatest}`, 'peerDependencies'])
+  const plan = updatePlan({
+    latestCode: codeLatest ?? 'unknown',
+    peers,
+    profileSpec: spec,
+    profilePlugins: readPlugins(),
+  })
+  const registry = codeLatest === undefined ? 'could not read the latest dsh-code version from npm' : undefined
+  // The same refusals applyUpdate enforces, precomputed so a caller can
+  // show them BEFORE any confirmation instead of failing mid-flight.
+  const downgrade = plan.line !== undefined && installed !== undefined && compareHarnessLines(plan.line, installed) < 0
+  const localCheckout = plan.profileStep ? undefined : localCheckoutRefusal(mounted, codeLatest, plan.codeSpec)
+  const hostOnLine = installed !== undefined && (plan.line === undefined || compareHarnessLines(installed, plan.line) === 0)
+  const upToDate = registry === undefined
+    && codeLatest === packageVersion
+    && !downgrade
+    && localCheckout === undefined
+    && hostOnLine
+    && plan.pluginSpecs.length === 0
+    && (mounted === undefined || mounted === codeLatest)
+  return {
+    code: { running: packageVersion, latest: codeLatest ?? null },
+    host: { installed: installed ?? null, targetLine: plan.line ?? null },
+    profile: { spec: spec ?? null, mounted: mounted ?? null, localCheckout: !plan.profileStep },
+    plan: { dshSpec: plan.dshSpec, codeSpec: plan.codeSpec, pluginSpecs: plan.pluginSpecs },
+    // JSON.stringify drops undefined members; every unreadable value must
+    // serialize as an explicit null so machine consumers never see a missing
+    // key drift into a truthy comparison.
+    blockers: { registry: registry ?? null, downgrade, localCheckout: localCheckout ?? null },
+    upToDate,
+  }
+}
+
 /**
  * Upgrade the global launcher and the cli profile plugin together. The
  * global install is pinned to the harness line the new dsh-code release
@@ -424,6 +492,19 @@ async function applyUpdate({
     process.exitCode = 1
     return
   }
+  // Local-checkout guard: a link/file-mounted profile runs the checkout's
+  // own build, and this command would upgrade the global host beside it.
+  // When the checkout is older than the release being installed, upgrading
+  // pairs a new host with old local code — the terminal breaks on the next
+  // launch. Refuse until the checkout is updated or unmounted.
+  if (!plan.profileStep) {
+    const refusal = localCheckoutRefusal(profileMountedVersion(), latestCode, plan.codeSpec)
+    if (refusal !== undefined) {
+      for (const line of refusal) console.error(line)
+      process.exitCode = 1
+      return
+    }
+  }
   const steps = [{ command: npm.command, args: [...npm.args, 'install', '-g', plan.dshSpec, plan.codeSpec], label: 'npm install' }]
   if (plan.profileStep) {
     const command = resolveCommand(['plugin', '--profile', 'cli', 'add', plan.codeSpec])
@@ -490,6 +571,10 @@ export function launchOperation(args = process.argv.slice(2)) {
     return launchChild(command.command, command.args)
   }
   if (operation === 'update') {
+    if (args.includes('--json')) {
+      console.log(JSON.stringify(buildUpdateStatus()))
+      return true
+    }
     if (args.includes('--apply')) {
       void applyUpdate()
       return true

package/cordis.patch.yml

@@ -24,6 +24,17 @@
   config:
     mode: !!js process.env.DSH_TOOLS_MODE
 
+# The base row keeps full-text search off entirely (openAt: never) so nothing
+# imports node:sqlite at boot; the terminal replaces it with the bundle's
+# skip-tolerant subclass below. An override row cannot retarget a row's
+# MODULE (name is only honored on inserts), so the base row is disabled and
+# an equivalent row mounts the subclass: the derived index opens lazily on
+# the first search (no startup cost, no Node 22 experimental warning), and
+# one unreadable source (a pre-release artifact the frozen codecs reject)
+# is skipped with a warning instead of failing every cross-session search.
+- id: session-query-sqlite
+  disabled: true
+
 # Agent-plane rows are mounted by the selected preset. Keep this list aligned
 # with the upstream Web bundle so two sessions can use different compositions
 # without leaking model-facing registrations through the host layer.
@@ -132,6 +143,83 @@
     - id: authorization
       name: '@deepseek-ai/dsh-authorization'
 
+    # The bundle's skip-tolerant session-query engine replacing the disabled
+    # base row above: same SQLite FTS5 service, observation loop patched to
+    # skip unreadable sources instead of failing every search.
+    - id: session-query-skip
+      name: 'dsh-code/session-query'
+      config:
+        path: ':memory:'
+        openAt: first-search
+
+    # Model-facing session-log search/trace/read tools over the sessionQuery
+    # service (read-only, workspace-scoped by exact cwd). A host-plane mount
+    # is deployment-global: every preset session sees the five tools. Kept
+    # ENABLED deliberately — read-only search leaks no capability — but note
+    # it does reach minimal-preset sessions too.
+    - id: tool-session-query
+      name: '@deepseek-ai/dsh-tool-session-query'
+
+    # Durable reminders: the schedule service arms per-root timers, injects
+    # due prompts as plugin-source user messages, and writes schedule/change
+    # events the projection folds into the /schedule panel. time-context
+    # gives the model a clock reading so 'at' times are phrased against the
+    # actual time; the 30s throttle bounds durable snapshot growth.
+    - id: schedule
+      name: '@deepseek-ai/dsh-schedule'
+
+    - id: time-context
+      name: '@deepseek-ai/dsh-time-context'
+      config:
+        refreshIntervalMs: 30000
+
+    # Persistent PTY plumbing: the owner-scoped registry and the one backend
+    # package in both dialects (pwsh is the Windows/ConPTY path, bash covers
+    # POSIX) mount as host SERVICES — no model-facing surface, so they break
+    # no preset boundary. The six terminal_* TOOLS ship DISABLED like LSP:
+    # enabling them at the host plane would hand every preset (including the
+    # shell-restricted minimal one) raw shell capability, the exact leak the
+    # disables above exist to prevent. Flip tool-terminal to disabled: false
+    # in the PROFILE layer to opt the deployment into PTY tools.
+    - id: pty
+      name: '@deepseek-ai/dsh-terminal'
+
+    - id: terminal-pwsh
+      name: '@deepseek-ai/dsh-terminal-bash'
+      disabled: !!js process.platform !== 'win32'
+      config:
+        shellDialect: pwsh
+
+    - id: terminal-bash
+      name: '@deepseek-ai/dsh-terminal-bash'
+      disabled: !!js process.platform === 'win32'
+
+    - id: tool-terminal
+      name: '@deepseek-ai/dsh-tool-terminal'
+      disabled: true
+
+    # LSP navigation ships DISABLED: lsp-stdio resolves every server command
+    # at mount and a missing binary would fail the whole composition boot.
+    # Enable in the PROFILE layer with real servers, e.g.:
+    #   lsp / lsp-stdio / tool-lsp rows with disabled: false and
+    #   lsp-stdio config.servers mapping extensions to server commands.
+    - id: lsp
+      name: '@deepseek-ai/dsh-lsp'
+      disabled: true
+
+    - id: lsp-stdio
+      name: '@deepseek-ai/dsh-lsp-stdio'
+      disabled: true
+
+    - id: tool-lsp
+      name: '@deepseek-ai/dsh-tool-lsp'
+      disabled: true
+
+    # MCP servers (dsh-mcp-client) and hooks bridges (dsh-hooks-claude-code /
+    # -codex) take per-instance config (server transports, hooks.json paths),
+    # so they mount as rows in the USER profile layer, not here; the packages
+    # ship as peers so those rows resolve. README documents the row shapes.
+
     - id: tui-startup
       name: 'dsh-code/startup'