dsh-rewind-plugin 0.16.0-alpha.1 → 0.16.0-beta.1

package/SECURITY.md

@@ -91,19 +91,21 @@ hides the `[target, marker]` span from the rendered transcript.
 ## Filesystem containment
 
 - **Store root**: `<dsh home>/rewind-snapshots/` by default (resolved via
-  `resolveDshHome`, so `~/.dsh/...` when `DSH_HOME` is unset); the `snapshotDir`
-  config, then `DSH_REWIND_SNAPSHOT_DIR` env, override it. Deleting it only
-  removes file backups and the store rebuilds from scratch.
+  `resolveDshHome`, so `$DSH_HOME` feeds the base and `~/.dsh` is the fallback);
+  the `snapshotDir` config overrides the whole path. The plugin reads no
+  environment variable of its own. Deleting the root only removes file backups
+  and the store rebuilds from scratch.
 - **Path sanitization**: session ids and call ids are scrubbed to
   `[a-zA-Z0-9._-]` (`safeSessionId` / `safeFileId`) before joining the store
   root; `.` and `..` bare values are replaced — hostile ids cannot traverse
   out of the root.
-- **Never written through a link or a moved directory**: two checks guard a
-  tracked path before any write or unlink. (1) A path whose last component is a
-  symlink or a hard link (`lstat().nlink > 1`) is skipped and reported, never
-  restored — a symlink would redirect the write outside the checkpoint, and a
-  hard link would clobber every other name of the same inode (e.g.
-  pnpm-installed files). (2) Every record this build writes — entry, link and
+- **Links and moved directories are refused**: two checks guard a tracked path.
+  (1) Planning skips a path whose last component is a symlink or a hard link
+  (`lstat().nlink > 1`) and reports it, never restoring it — a symlink would
+  redirect the write outside the checkpoint, and a hard link would clobber every
+  other name of the same inode (e.g. pnpm-installed files); a link swapped in
+  after planning is not re-checked. (2) At apply time, every record this build
+  writes — entry, link and
   journal action — carries the `realpath` of the file's directory at commit time
   (the location pin; best-effort, and absent on released-v1 data or a commit
   whose parent could not be resolved), and a restore re-checks it before
@@ -145,11 +147,13 @@ hides the `[target, marker]` span from the rendered transcript.
   planned path's pre-restore ("rescue") state and persists an intent journal,
   then marks each action done as it is applied. A crash at any point leaves
   the journal on disk.
-- **Disk is truth**: after a restart, `reconcileRestores` re-derives from the
-  real disk which paths already match the goal (restored) and which are
-  pending; `continueRestore` finishes the interrupted op, `rollbackRestore`
-  undoes it to the exact pre-restore state. A journal whose goal is already
-  reached auto-heals to its terminal state.
+- **Disk is truth**: an interrupted op keeps its journal on disk, and the store's
+  recovery API re-derives the true state from the real disk — `reconcileRestores`
+  reports which paths already match the goal (restored) and which are pending,
+  `continueRestore` finishes the op, `rollbackRestore` undoes it to the exact
+  pre-restore state, and a journal whose goal is already reached auto-heals to
+  its terminal state. The plugin never runs them on its own: an interrupted op
+  stays interrupted until an explicit caller resumes or undoes it.
 - **Fail-loud vs fail-soft**: a corrupt **journal** is reported
   `recovery-required` — never silently dropped (dropping it would erase the
   interrupted restore's recovery record). Corrupt **checkpoint entries** are

package/lib/client.js

@@ -1095,6 +1095,13 @@ function hideWithdrawnSeats(chat, seats, hiddenSeqs, hidden) {
     }
   }
 }
+function showHiddenSeats(hidden) {
+  for (const element of hidden) {
+    element.style.display = "";
+    delete element.dataset.dshRewindHidden;
+  }
+  hidden.clear();
+}
 function collectTargets(chat, hiddenSeqs) {
   const rows = /* @__PURE__ */ new Map();
   for (const element of document.querySelectorAll(USER_SEAT_SELECTOR)) {
@@ -1168,7 +1175,7 @@ function sameTargets(left, right) {
 }
 function RewindPortals({ sessionId, sessionOf, chatOf, isMainViewSession, watchChat, t, subscribeLocale, setComposerText, restoreImages }) {
   const [targets, setTargets] = (0, import_react.useState)([]);
-  const hidden = (0, import_react.useRef)(/* @__PURE__ */ new WeakSet());
+  const hidden = (0, import_react.useRef)(/* @__PURE__ */ new Set());
   const [, forceRender] = (0, import_react.useReducer)((count) => count + 1, 0);
   (0, import_react.useEffect)(() => subscribeLocale(() => {
     forceRender();
@@ -1189,6 +1196,7 @@ function RewindPortals({ sessionId, sessionOf, chatOf, isMainViewSession, watchC
       const snapshot = session.getSnapshot();
       const chat = chatOf(session);
       const hiddenSeqs = chat === void 0 ? /* @__PURE__ */ new Set() : hiddenSeqsOf(chat);
+      for (const element of hidden.current) if (!element.isConnected) hidden.current.delete(element);
       hideWithdrawnSeats(
         chat,
         chat === void 0 ? [] : document.querySelectorAll(CHAT_SEAT_SELECTOR),
@@ -1225,6 +1233,7 @@ function RewindPortals({ sessionId, sessionOf, chatOf, isMainViewSession, watchC
     return () => {
       active = false;
       observer.disconnect();
+      showHiddenSeats(hidden.current);
       unsubscribeInbox?.();
       unsubscribeInbox = void 0;
       inboxOwner = void 0;
@@ -1359,9 +1368,9 @@ function createRewindBridge(deps) {
 }
 
 // src/client/build-info.ts
-var PLUGIN_VERSION = true ? "0.16.0-alpha.1" : "dev";
+var PLUGIN_VERSION = true ? "0.16.0-beta.1" : "dev";
 var PLUGIN_PACKAGE = "dsh-rewind-plugin";
-var BUILD_HASH = true ? "f36f8be8" : "dev";
+var BUILD_HASH = true ? "c6cfbc55" : "dev";
 
 // src/client/locales.ts
 var zh = {

package/lib/index.js

@@ -238,15 +238,7 @@ var LEGACY_JOURNAL_PREFIX = "restore-journal-";
 var PENDING_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
 var COMPARE_CHUNK_BYTES = 64 * 1024;
 var REPLACEMENT_CHAR = "\uFFFD";
-var SNAPSHOT_ROOT_ENV = "DSH_REWIND_SNAPSHOT_DIR";
-var MAX_FILE_BYTES_ENV = "DSH_REWIND_MAX_FILE_BYTES";
 var DEFAULT_MAX_FILE_BYTES = 8 * 1024 * 1024;
-function maxFileBytesFromEnv() {
-  const raw = process.env[MAX_FILE_BYTES_ENV]?.trim();
-  if (raw === void 0 || raw === "") return void 0;
-  const parsed = Number(raw);
-  return Number.isInteger(parsed) ? parsed : void 0;
-}
 var MAX_ANCHOR_GROUPS = 100;
 var CURRENT_STORE_VERSION = 2;
 var UnknownStoreVersionError = class extends Error {
@@ -675,6 +667,11 @@ var SnapshotStore = class _SnapshotStore {
    * and the restore planner refuses a pre-cap record over an over-cap file.
    */
   maxFileBytes;
+  /**
+   * Newest anchor groups (user messages) kept per session; `prune` evicts past
+   * this bound. A `Config` field (`maxAnchorGroups`).
+   */
+  maxAnchorGroups;
   /** Resolved checkpoint store root (absolute); see the constructor's fallback. */
   root;
   /**
@@ -700,8 +697,9 @@ var SnapshotStore = class _SnapshotStore {
   formatVersion = null;
   constructor(root, opts) {
     this.dedup = opts?.dedup ?? true;
-    this.maxFileBytes = opts?.maxFileBytes ?? maxFileBytesFromEnv() ?? DEFAULT_MAX_FILE_BYTES;
-    this.root = root ?? process.env[SNAPSHOT_ROOT_ENV] ?? join(resolveDshHome(opts?.dshHome), SNAPSHOT_DIR_NAME);
+    this.maxFileBytes = opts?.maxFileBytes ?? DEFAULT_MAX_FILE_BYTES;
+    this.maxAnchorGroups = opts?.maxAnchorGroups ?? MAX_ANCHOR_GROUPS;
+    this.root = root ?? join(resolveDshHome(opts?.dshHome), SNAPSHOT_DIR_NAME);
   }
   /** Absolute path of one session's snapshot directory (id sanitized). */
   sessionDir(sessionId) {
@@ -1679,7 +1677,7 @@ var SnapshotStore = class _SnapshotStore {
    * real is still on disk and the kept link still resolves, so nothing dangles
    * and a later prune simply re-materializes.
    */
-  async prune(sessionId, keep = MAX_ANCHOR_GROUPS, opts) {
+  async prune(sessionId, keep = this.maxAnchorGroups, opts) {
     const sessionDir = this.sessionDir(sessionId);
     let names;
     try {
@@ -2244,7 +2242,7 @@ async function runAutoCleanupCheck(deps, sessionId) {
     }
     if (!loaded.config.enabled) return;
     if (isAborted(deps.signal)) return;
-    if (!shouldRunAutoSweep(await loadLastSweepAt(deps.statePath), Date.now())) return;
+    if (!shouldRunAutoSweep(await loadLastSweepAt(deps.statePath), Date.now(), deps.intervalMs)) return;
     if (isAborted(deps.signal)) return;
     await deps.pruner.pruneStale({ keepActiveId: sessionId, maxAgeDays: loaded.config.maxAgeDays });
     if (isAborted(deps.signal)) return;
@@ -2309,8 +2307,8 @@ function parseCleanupCommand(rawInput) {
       return { error: `unknown /snapshot-auto-cleanup subcommand "${parts[0]}"` };
   }
 }
-function shouldRunAutoSweep(lastAtMs, nowMs) {
-  return nowMs - lastAtMs >= AUTO_SWEEP_INTERVAL_MS;
+function shouldRunAutoSweep(lastAtMs, nowMs, intervalMs = AUTO_SWEEP_INTERVAL_MS) {
+  return nowMs - lastAtMs >= intervalMs;
 }
 
 // src/index.ts
@@ -2321,6 +2319,9 @@ var Config = z.object({
   snapshotDir: z.string().required(false),
   dshHome: z.string().required(false),
   dedup: z.boolean().default(true),
+  maxFileBytes: z.number().step(1).min(0).default(DEFAULT_MAX_FILE_BYTES),
+  maxAnchorGroups: z.number().step(1).min(1).default(MAX_ANCHOR_GROUPS),
+  autoSweepIntervalMs: z.number().step(1).min(1).default(AUTO_SWEEP_INTERVAL_MS),
   autoCleanupEnabled: z.boolean().default(DEFAULT_CLEANUP_CONFIG.enabled).volatile(),
   autoCleanupMaxAgeDays: z.number().step(1).min(1).default(DEFAULT_CLEANUP_CONFIG.maxAgeDays).volatile()
 });
@@ -2446,11 +2447,16 @@ async function commitEntry(store, pending, anchorCache, trackedBySession, exec,
     await discardCapture(capture);
     return;
   }
-  await store.recordBackup(agent.session.id, {
-    callId: exec.callId,
-    anchorSeq,
-    path: capture.path
-  }, capture.backup);
+  try {
+    await store.recordBackup(agent.session.id, {
+      callId: exec.callId,
+      anchorSeq,
+      path: capture.path
+    }, capture.backup);
+  } catch (error) {
+    await discardCapture(capture);
+    throw error;
+  }
   let tracked = trackedBySession.get(agent.session.id);
   if (tracked === void 0) {
     tracked = /* @__PURE__ */ new Set();
@@ -2530,7 +2536,7 @@ async function syncRestoreObservations(ctx, fs, agent, outcome) {
   for (const path of outcome.restored) {
     const target = await resolveObservationTarget(fs, path);
     if (target === void 0) continue;
-    const info = await fs.stat(target);
+    const info = await fs.stat(target).catch(() => void 0);
     if (info === void 0) continue;
     ctx.emit("fs/observed", target, { kind: "present", version: info.version }, actor);
   }
@@ -2688,7 +2694,7 @@ async function handleRewind(ctx, store, fs, invocation, inflight) {
   return executeRewind(ctx, store, fs, invocation, target, mode, inflight);
 }
 var autoSweepChecked = false;
-async function maybeRunAutoCleanup(ctx, store, sessionId, dshHome, signal) {
+async function maybeRunAutoCleanup(ctx, store, sessionId, dshHome, sweepIntervalMs, signal) {
   if (autoSweepChecked || signal?.aborted === true) return;
   autoSweepChecked = true;
   try {
@@ -2697,6 +2703,7 @@ async function maybeRunAutoCleanup(ctx, store, sessionId, dshHome, signal) {
       readConfig: () => readCleanupPolicy(),
       statePath: resolveCleanupStatePath(dshHome),
       log: (msg) => ctx.logger.warn(msg),
+      ...sweepIntervalMs === void 0 ? {} : { intervalMs: sweepIntervalMs },
       ...signal === void 0 ? {} : { signal }
     }, sessionId);
   } catch (error) {
@@ -2834,7 +2841,12 @@ function apply(ctx, config) {
     child.effect(() => child.settings.configure({ auto: false }, ctx.fiber), "dsh-rewind page policy");
   });
   const dshHome = config?.dshHome;
-  const store = new SnapshotStore(config?.snapshotDir, { dedup: config?.dedup, dshHome });
+  const store = new SnapshotStore(config?.snapshotDir, {
+    dedup: config?.dedup,
+    dshHome,
+    maxFileBytes: config?.maxFileBytes,
+    maxAnchorGroups: config?.maxAnchorGroups
+  });
   const configKey = cleanupConfigKey(rewindConfigKey(ctx));
   if (config !== void 0 && configKey !== void 0) {
     const writer = {
@@ -2930,11 +2942,12 @@ function apply(ctx, config) {
   ctx.on("session/event", (session, event) => {
     if (event.type !== "user/message") return;
     if (isSubagentSession(session)) return;
+    if (inflight.has(session.id)) return;
     void (async () => {
       try {
         if (lifecycle.signal.aborted) return;
         const sessionId = session.id;
-        void maybeRunAutoCleanup(ctx, store, sessionId, dshHome, lifecycle.signal);
+        void maybeRunAutoCleanup(ctx, store, sessionId, dshHome, config?.autoSweepIntervalMs, lifecycle.signal);
         let tracked = trackedBySession.get(sessionId);
         if (tracked === void 0) {
           tracked = await store.trackedPaths(sessionId);
@@ -2952,6 +2965,9 @@ function apply(ctx, config) {
     const fs = scope.fs;
     const workingDirectory = scope.workingDirectory;
     fsService = fs;
+    scope.effect(() => () => {
+      fsService = void 0;
+    }, "dsh-rewind fs capture");
     scope.on("tools/execute", async (exec, next) => {
       try {
         await captureBefore(fs, workingDirectory, store, exec, pending);
@@ -2964,7 +2980,7 @@ function apply(ctx, config) {
       try {
         const session = exec.agent?.session;
         if (session !== void 0 && !isSubagentSession(session)) {
-          void maybeRunAutoCleanup(ctx, store, session.id, dshHome, lifecycle.signal);
+          void maybeRunAutoCleanup(ctx, store, session.id, dshHome, config?.autoSweepIntervalMs, lifecycle.signal);
         }
         await commitEntry(store, pending, anchorCache, trackedBySession, exec, result);
       } catch (error) {

package/lib/types/client/portals.d.ts

@@ -235,7 +235,19 @@ export declare function actionsContainerOf(row: HTMLElement | undefined): HTMLEl
  * @param hiddenSeqs - anchor seqs withdrawn by the executed rewinds.
  * @param hidden - elements this pass has hidden, so a re-created row is re-judged.
  */
-export declare function hideWithdrawnSeats(chat: HiddenChat | undefined, seats: Iterable<HTMLElement>, hiddenSeqs: ReadonlySet<number>, hidden: WeakSet<HTMLElement>): void;
+export declare function hideWithdrawnSeats(chat: HiddenChat | undefined, seats: Iterable<HTMLElement>, hiddenSeqs: ReadonlySet<number>, hidden: Set<HTMLElement>): void;
+/**
+ * Undo every hide the given set recorded, so a live disable (or a session-slot
+ * collapse) cannot leave the transcript truncated.
+ *
+ * The hide is the plugin's OWN mutation of host rows ({@link hideWithdrawnSeats}),
+ * and nothing else would ever revert it: a disposed bridge runs no further
+ * refresh, so rows it hid would stay hidden with no affordance to bring them
+ * back.
+ *
+ * @param hidden - the elements this bridge currently hides; emptied.
+ */
+export declare function showHiddenSeats(hidden: Set<HTMLElement>): void;
 /**
  * Collect the portal targets of one session: user rows × snapshot nodes.
  * Exported as a test seam — the DOM→targets pairing that drives the ↶ button

package/lib/types/index.d.ts

@@ -37,12 +37,18 @@ export declare const inject: string[];
 export declare const ENGINE_COMMAND = "rewind-plugin";
 /** Plugin config. */
 export interface RewindConfig {
-    /** Checkpoint store root (exact path; beats `DSH_REWIND_SNAPSHOT_DIR` and the harness-home default). */
+    /** Checkpoint store root (exact path; beats the harness-home default). */
     readonly snapshotDir?: string;
     /** Harness home override (`config.dshHome` > `$DSH_HOME` > `~/.dsh`); feeds the default snapshot/cleanup paths. */
     readonly dshHome?: string;
     /** In-place content dedup (identical before-content → link). Default `true`. */
     readonly dedup?: boolean;
+    /** Per-file backup cap in bytes; `0` disables the cap. Default {@link DEFAULT_MAX_FILE_BYTES}. */
+    readonly maxFileBytes?: number;
+    /** Newest anchor groups (user messages) kept per session. Default {@link MAX_ANCHOR_GROUPS}. */
+    readonly maxAnchorGroups?: number;
+    /** Automatic snapshot-sweep cadence in ms. Default {@link AUTO_SWEEP_INTERVAL_MS}. */
+    readonly autoSweepIntervalMs?: number;
 }
 /**
  * The plugin's full configuration: the ordinary store options plus the
@@ -62,12 +68,18 @@ export declare const Config: z<Schemastery.ObjectS<NoInfer<{
     snapshotDir: z<string, string, "plain">;
     dshHome: z<string, string, "plain">;
     dedup: z<boolean, boolean, "defined">;
+    maxFileBytes: z<number, number, "defined">;
+    maxAnchorGroups: z<number, number, "defined">;
+    autoSweepIntervalMs: z<number, number, "defined">;
     autoCleanupEnabled: z<boolean, boolean, "volatile-defined">;
     autoCleanupMaxAgeDays: z<number, number, "volatile-defined">;
 }>>, Schemastery.ObjectT<NoInfer<{
     snapshotDir: z<string, string, "plain">;
     dshHome: z<string, string, "plain">;
     dedup: z<boolean, boolean, "defined">;
+    maxFileBytes: z<number, number, "defined">;
+    maxAnchorGroups: z<number, number, "defined">;
+    autoSweepIntervalMs: z<number, number, "defined">;
     autoCleanupEnabled: z<boolean, boolean, "volatile-defined">;
     autoCleanupMaxAgeDays: z<number, number, "volatile-defined">;
 }>>, "plain">;

package/lib/types/snapshot-cleanup.d.ts

@@ -74,7 +74,7 @@ export interface CleanupConfigStore {
  * field is cleared rather than pinned.
  */
 export declare function volatileCleanupStore(settings: CleanupSettings, writer: CleanupConfigWriter): CleanupConfigStore;
-/** Auto-sweep cadence (the user's hardcoded 24h rhythm — not user-set). */
+/** Default auto-sweep cadence (once a day); `autoSweepIntervalMs` overrides it. */
 export declare const AUTO_SWEEP_INTERVAL_MS: number;
 /** The state file that records the last automatic-sweep wall-clock time. */
 export declare const STATE_FILENAME = "snapshot-cleanup-last-sweep.json";
@@ -123,6 +123,8 @@ export declare function runAutoCleanupCheck(deps: {
     }>;
     statePath: string;
     log: (msg: string) => void;
+    /** Sweep cadence in ms; defaults to {@link AUTO_SWEEP_INTERVAL_MS}. */
+    intervalMs?: number;
     /** Optional mount lifecycle signal; absent means "never cancelled". */
     signal?: AbortSignal;
 }, sessionId: string | undefined): Promise<void>;
@@ -165,8 +167,8 @@ export declare function parseCleanupCommand(rawInput: string): CleanupCommand |
     error: string;
 };
 /**
- * The 24h auto-sweep throttle. `lastAtMs` of `0` means "never ran" (a fresh
- * process), so the first call always sweeps; after that a call within 24h is
- * a no-op, matching the "every machine at most once per day" model.
+ * The auto-sweep throttle: `lastAtMs` of `0` means "never ran" (a fresh
+ * process), so the first call always sweeps; after that a call within
+ * `intervalMs` is a no-op. `autoSweepIntervalMs` sets the cadence.
  */
-export declare function shouldRunAutoSweep(lastAtMs: number, nowMs: number): boolean;
+export declare function shouldRunAutoSweep(lastAtMs: number, nowMs: number, intervalMs?: number): boolean;

package/lib/types/snapshot.d.ts

@@ -36,15 +36,12 @@
  *
  * @module dsh-rewind/snapshot
  */
-/** Environment variable overriding the store root (tests, exotic homes). */
-export declare const SNAPSHOT_ROOT_ENV = "DSH_REWIND_SNAPSHOT_DIR";
-/** Env override for the per-file backup cap (`0` = unlimited); tests set it too. */
-export declare const MAX_FILE_BYTES_ENV = "DSH_REWIND_MAX_FILE_BYTES";
 /**
  * A regular file larger than this is NOT backed up. This plugin is a
  * lightweight, conversation-scoped undo, not a backup system: copying a very
  * large file on every edit is what grows the store without bound and saturates
- * IO (issue #39). The cap is a declared limitation, not a delta scheme.
+ * IO (issue #39). The cap is a declared limitation, not a delta scheme, and is
+ * exposed as the `maxFileBytes` config field (`0` disables the cap).
  */
 export declare const DEFAULT_MAX_FILE_BYTES: number;
 /** Number of newest anchor groups (user messages) kept per session. */
@@ -453,6 +450,11 @@ export declare class SnapshotStore {
      * and the restore planner refuses a pre-cap record over an over-cap file.
      */
     private readonly maxFileBytes;
+    /**
+     * Newest anchor groups (user messages) kept per session; `prune` evicts past
+     * this bound. A `Config` field (`maxAnchorGroups`).
+     */
+    private readonly maxAnchorGroups;
     /** Resolved checkpoint store root (absolute); see the constructor's fallback. */
     readonly root: string;
     /**
@@ -481,6 +483,8 @@ export declare class SnapshotStore {
         readonly dshHome?: string;
         /** Per-file backup cap in bytes; `<= 0` disables it. */
         readonly maxFileBytes?: number;
+        /** Newest anchor groups kept per session; see {@link MAX_ANCHOR_GROUPS}. */
+        readonly maxAnchorGroups?: number;
     });
     /** Absolute path of one session's snapshot directory (id sanitized). */
     sessionDir(sessionId: string): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-rewind-plugin",
-  "version": "0.16.0-alpha.1",
+  "version": "0.16.0-beta.1",
   "description": "In-window conversation rewind with workspace file restore · 同窗口内对话回退并可还原工作区文件",
   "icon": "./assets/icon.svg",
   "keywords": [
@@ -20,7 +20,7 @@
   "license": "MIT",
   "engines": {
     "node": "^22.19.0 || >=24.0.0",
-    "dsh": ">=0.2.1-alpha.2"
+    "dsh": ">=0.2.1-rc.1 <0.3.0-0"
   },
   "type": "module",
   "main": "lib/index.js",
@@ -73,23 +73,23 @@
     "access": "public"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-client-locale": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-commands": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-plugin-manager": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-commands": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-fs": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-llm": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-sandbox": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-settings": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tools": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-working-directory": "^0.2.1-alpha.2",
-    "@deepseek-ai/schemastery": "^3.18.4"
+    "@deepseek-ai/cordis": "^4.0.5",
+    "@deepseek-ai/dsh-client-locale": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-commands": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-plugin-manager": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-commands": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-fs": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-home-paths": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-sandbox": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-session": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-tools": "^0.2.1-rc.1",
+    "@deepseek-ai/dsh-working-directory": "^0.2.1-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.5"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -145,45 +145,45 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.3",
-    "@deepseek-ai/cosmokit": "1.8.4",
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-api-session-controller": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-attachment": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-locale": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-store": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-commands": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-input-trigger": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-plugin-manager": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-session": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-command-compact": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-commands": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-compaction": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-compaction-basic": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-compaction-image-offload": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-fs": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-goal": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-plan-mode": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-sandbox": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-scope": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-stats": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-title": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-settings": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-token-meter": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-user-questions": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-working-directory": "0.2.1-alpha.2",
-    "@deepseek-ai/schemastery": "3.18.4",
+    "@deepseek-ai/cordis": "4.0.5",
+    "@deepseek-ai/cosmokit": "1.8.6",
+    "@deepseek-ai/dsh-agent": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-api-session-controller": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-attachment": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-locale": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-store": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-commands": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-plugin-manager": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-session": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-command-compact": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-commands": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-compaction": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-compaction-basic": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-compaction-image-offload": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-fs": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-goal": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-home-paths": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-llm": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-plan-mode": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-sandbox": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-scope": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-session": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-session-stats": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-session-title": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-settings": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-token-meter": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-tools": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-user-questions": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-working-directory": "0.2.1-rc.1",
+    "@deepseek-ai/schemastery": "3.18.5",
     "@types/node": "^24.0.0",
     "@types/react": "^18.3.31",
     "@types/react-dom": "^18.3.7",