dsh-ssh-tui 0.4.0 → 0.5.0

package/lib/types/tui.d.ts

@@ -17,6 +17,7 @@ import { SessionId, type SessionEvent } from '@deepseek-ai/dsh-session';
 import type { SubagentRunEndInfo, SubagentRunInfo } from '@deepseek-ai/dsh-subagent';
 import { type SubagentSelectionRef } from './subagent-model.js';
 import { type AskUserQuestionAnswer, type AskUserQuestionRequest } from '@deepseek-ai/dsh-user-questions';
+export type DisconnectPolicyName = 'pause' | 'continue';
 /** Presentation configuration for the terminal channel. */
 export interface TuiConfig {
     /** Exact shared agent/session identity driven by this terminal. */
@@ -59,6 +60,14 @@ export interface TuiConfig {
      * link. Defaults from `DSH_TUI_PAINT_MS` (160).
      */
     paintIntervalMs?: number;
+    /** Called after hangup when the Host is kept (busy) so the launcher can update the lock. */
+    onHangup?: () => void | Promise<void>;
+    /** Called when a Display relay attaches after hangup. */
+    onReattach?: () => void | Promise<void>;
+    /** Host process: no local TTY; paint only through the display socket. */
+    headlessDisplay?: boolean;
+    /** Hangup policy while busy: pause cancels the turn; continue lets it finish detached. Idle hangup always exits. */
+    disconnectPolicy?: DisconnectPolicyName;
 }
 type SubagentLogKind = 'user' | 'assistant' | 'tool' | 'result' | 'turn' | 'approval' | 'team' | 'system';
 /** One child-session event folded into a parent-side subagent card. */
@@ -101,6 +110,14 @@ type Row = {
     exitCode?: number;
     signal?: string;
     expanded: boolean;
+    /** Consecutive same-path reads/edits folded into this card. */
+    repeats?: number;
+    /** Sum of output characters across folded reads. */
+    totalChars?: number;
+    /** Sum of output lines across folded reads. */
+    totalLines?: number;
+    /** Flip-card animation until this timestamp (ms since epoch). */
+    flipUntil?: number;
 } | {
     kind: 'subagent';
     sessionId: string;
@@ -200,6 +217,8 @@ interface ToolDiffHunk {
 /** Lifecycle handle for a mounted interactive terminal channel. */
 export interface TuiController {
     dispose(): Promise<void>;
+    handleHangup(): Promise<void>;
+    disconnectPolicy(): DisconnectPolicyName;
 }
 export type PaintLinkKind = 'local' | 'ssh';
 /** Compact token count, matching the web stats line (517 / 12.2K / 1.2M). */
@@ -218,6 +237,21 @@ export declare function resolvePaintIntervalMs(configured?: number, env?: NodeJS
 }): number;
 /** True when this process is attached to an SSH session (jump host / proxy). */
 export declare function detectSshSession(env?: NodeJS.ProcessEnv): boolean;
+/** Node errno on a write/close that means the TTY is gone (SSH drop, HUP). */
+export declare function isHangupErrno(error: unknown): boolean;
+/**
+ * Replace launcher SIGTERM/SIGINT/SIGHUP handlers with `handler`. SSH drop
+ * otherwise lets `dsh` dispose the whole tree before this plugin can detach.
+ */
+export declare function captureHangupSignals(handler: () => void): void;
+export declare function releaseHangupSignals(handler: () => void): void;
+/** After detach, extra HUP/TERM from sshd must not kill the leftover Host. */
+export declare function ignoreFurtherHangupSignals(): void;
+/**
+ * Wait until `isIdle` is true or `timeoutMs` elapses. Used after cancel so a
+ * hangup can flush a settled session log instead of tearing a live write.
+ */
+export declare function waitUntilIdleOrTimeout(isIdle: () => boolean, timeoutMs: number, now?: () => number, wait?: (ms: number) => Promise<void>): Promise<'idle' | 'timeout'>;
 /** Map a CSI-6n round-trip to a paint cadence. Unknown RTT uses the SSH default. */
 export declare function paintIntervalForRtt(rttMs: number | undefined): number;
 export declare function paintLinkLabel(kind: PaintLinkKind, intervalMs: number, probed: boolean): string;
@@ -272,6 +306,7 @@ export interface FooterStatusInput {
     subDiffers: boolean;
     quotaCode?: string;
     quotaPercent?: number;
+    balanceText?: string;
     search?: {
         index: number;
         total: number;
@@ -321,6 +356,7 @@ export interface StatusReportInput {
     activeSubagents: number;
     plan: 'off' | 'pending' | 'on';
     paint: string;
+    disconnect?: DisconnectPolicyName;
     waitingQuestions: number;
     quota?: QuotaSnapshot;
     parentModel?: string;
@@ -361,22 +397,27 @@ export declare function fmtElapsedCompact(elapsedSecs: number): string;
  */
 export declare function shimmerText(text: string, nowMs: number, color: boolean): string;
 /**
- * Codex-style short status from reasoning: first `**bold**` / heading, else
- * the first short clause. Keeps the wait card in sync with what the model is
- * doing instead of repeating the user's prompt.
+ * Codex `extract_first_bold`: the first **closed** `**bold**` in the thinking
+ * stream, else the first markdown heading. An unclosed `**` means the title
+ * has not arrived yet, so return undefined and keep the default header —
+ * never fall back to hard-truncated reasoning, reply, or prompt text.
  */
-export declare function waitSummaryFromReasoning(text: string, maxChars?: number): string | undefined;
+export declare function waitSummaryFromReasoning(text: string): string | undefined;
 /** Wait-card header + optional detail. Header tracks model work when known. */
 export declare function waitCardCopy(input: {
     toolTitle?: string;
     toolSummary?: string;
     reasoning?: string;
-    reply?: string;
-    prompt?: string;
 }): {
     header: string;
     detail?: string;
 };
+/**
+ * Codex `wrapped_details_lines`: word-wrap the wait-card detail under the
+ * `  └ ` prefix, continue wrapped rows at the prefix width, cap at 3 rows and
+ * end the last one with an ellipsis when the text does not fit.
+ */
+export declare function wrapWaitDetails(detail: string, width: number, maxLines?: number): string[];
 export declare function displayWidth(text: string): number;
 /** Pad or clip one already-sanitized line so it occupies exactly `width` cells. */
 export declare function padToWidth(text: string, width: number): string;
@@ -460,12 +501,9 @@ export declare function remainingPercentFromUsed(usedPercent: number): number;
 export declare function crossedQuotaThresholds(previousRemaining: number | undefined, remaining: number): number[];
 export declare function quotaAlertText(snapshot: QuotaSnapshot, window: QuotaWindow): string;
 /**
- * How often to re-fetch quota, based on the tightest window.
- * Counted in model steps (not conversation turns): a turn with several
- * tool/LLM steps should refresh more often because it spends more quota.
- * Hourly/5h: every 10 steps, every 4 when near a threshold.
- * Weekly: every 50 steps, every 10 when near.
- * Monthly: every 80 steps, every 20 when near.
+ * How often to re-fetch quota or prepaid balance, counted in model steps.
+ * Default is every 10 steps. Near a remaining-percent threshold, hourly
+ * windows refresh every 4 steps.
  */
 export declare function quotaRefreshEverySteps(window: QuotaWindow | undefined): number;
 /** @deprecated Same cadence as {@link quotaRefreshEverySteps}; the name predates step accounting. */
@@ -495,6 +533,8 @@ export declare function joinUrl(base: string, path: string): string;
 export declare function parseDeepSeekBalance(payload: unknown, provider?: string): AccountBalanceSnapshot;
 /** Best-effort parse of OpenAI-compatible credit/balance JSON. */
 export declare function parseOpenAiCompatibleBalance(payload: unknown, provider: string, path: string): AccountBalanceSnapshot | undefined;
+/** Compact footer chip: `余额 86.42 CNY`. Prefers remaining/available lines. */
+export declare function formatFooterBalance(snapshot: AccountBalanceSnapshot): string | undefined;
 export declare function formatAccountBalance(snapshot: AccountBalanceSnapshot): string;
 /** Whether `text` could still grow into a recognized escape sequence. */
 export declare function isEscapePrefix(text: string): boolean;
@@ -510,8 +550,42 @@ export declare function parseCursorPositionReply(text: string): {
  */
 export declare function probeTerminalRttMs(stdin?: NodeJS.ReadStream, stdout?: NodeJS.WriteStream, timeoutMs?: number): Promise<number | undefined>;
 export type WorkspaceView = 'detailed' | 'compact';
+/** Sliding window of `windowSize` items that keeps `cursor` visible. */
+export declare function pickerWindowStart(cursor: number, total: number, windowSize?: number): number;
+export declare function parseDisconnectPolicy(raw: string): DisconnectPolicyName | undefined;
+/** Parse `/effort high` / `/subeffort default`. Empty or unknown → undefined. */
+export declare function parseEffortArg(raw: string): {
+    kind: 'default';
+} | {
+    kind: 'id';
+    id: string;
+} | undefined;
 export declare function parseWorkspaceView(raw: string): WorkspaceView | undefined;
 export declare function countDiffLines(hunks: readonly ToolDiffHunk[] | undefined): number;
+/** Added / removed line counts for a diff (`oldText: null` means a new file). */
+export declare function countDiffAddDel(hunks: readonly ToolDiffHunk[] | undefined): {
+    add: number;
+    del: number;
+};
+/**
+ * Git diffstat token, deletions first like `-13 +24`. Zero parts drop out
+ * (a new file shows only `+24`); empty when the diff has no counted lines.
+ */
+export declare function diffStatToken(add: number, del: number): string;
+export declare function toolTargetPath(name: string, args: string, fallback?: string): string;
+export declare function countOutputLines(text: string): number;
+/**
+ * Consecutive same-path reads (or edits) collapse onto one card.
+ * A → B → C → A becomes four cards; A ×5 stays one card with repeats=5.
+ */
+export declare function canMergeToolCall(previous: Extract<Row, {
+    kind: 'tool';
+}> | undefined, next: {
+    name: string;
+    args: string;
+}): previous is Extract<Row, {
+    kind: 'tool';
+}>;
 export declare function compactToolGroups(tools: readonly Extract<Row, {
     kind: 'tool';
 }>[]): {
@@ -521,9 +595,18 @@ export declare function compactToolGroups(tools: readonly Extract<Row, {
     calls: Extract<Row, {
         kind: 'tool';
     }>[];
-    editLines: number;
     failedCalls: number;
 };
+/**
+ * Split compact-view tools into the bursts that belong with each assistant
+ * reply: tools after reply N sit with that reply, until the next reply.
+ */
+export declare function compactToolBursts(rows: readonly Row[]): Array<{
+    after: Extract<Row, {
+        kind: 'assistant';
+    }> | undefined;
+    groups: ReturnType<typeof compactToolGroups>;
+}>;
 /** True while a plan still belongs in the dock (latest incomplete work). */
 export declare function planIsLive(plan: {
     active: boolean;
@@ -607,7 +690,7 @@ interface DiffDisplayLine {
 /** Running / ok / error → ANSI color for the status dot and status word only. */
 export declare function toolStateColor(status: 'running' | 'ok' | 'error' | undefined): '33' | '32' | '31';
 export declare function toolStateLabel(status: 'running' | 'ok' | 'error' | undefined): string;
-/** Header + SGR spans: default title, dim operand, colored ● and [ok]/[error]. */
+/** Header + SGR spans: default title, dim operand, colored ●. `[ok]` is omitted — the green dot is enough. */
 export declare function buildToolHeader(input: {
     focused: boolean;
     expanded: boolean;
@@ -618,6 +701,11 @@ export declare function buildToolHeader(input: {
     signal?: string;
     exitCode?: number;
     spinner?: string;
+    flipping?: boolean;
+    diffStat?: {
+        add: number;
+        del: number;
+    };
 }): {
     plain: string;
     segments: TextSegment[];
@@ -663,12 +751,25 @@ export declare class SshTui {
     private readonly agent;
     private readonly rows;
     private streaming;
+    private autoApprovalMode;
+    private autoAllowedCount;
+    private autoDeniedCount;
+    private aiReviewCount;
+    /** Host knobs folded from the session log: auto mode needs approval=ask to see requests. */
+    private hostSandboxMode;
+    private hostApprovalPolicy;
+    private approvalMismatchWarned;
+    /** Web-aligned provider presets from the host's pi-ai catalog (undefined until loaded / when unreachable). */
+    private catalogPresets;
+    private catalogLoad;
     private input;
     private cursor;
     private inputFolded;
     private inPaste;
     private history;
     private historyIndex;
+    /** Live input parked while browsing history with ↑. Restored by ↓ past the newest item. */
+    private historyDraft;
     private status;
     private dialog;
     private readonly dialogQueue;
@@ -676,6 +777,17 @@ export declare class SshTui {
     private dirty;
     private disposed;
     private exiting;
+    private hangingUp;
+    private readonly onDirectResize;
+    private readonly headlessDisplay;
+    private disconnectPolicy;
+    private detachedIdleTimer;
+    private displayDetached;
+    private displayHost;
+    private relayColumns;
+    private relayRows;
+    private readonly onHangup;
+    private readonly onReattach;
     private renderTimer;
     private readonly decoder;
     private readonly color;
@@ -706,6 +818,7 @@ export declare class SshTui {
     private stalledWarningShown;
     private lastPaintAt;
     private commandAbort;
+    private readonly seenCommandDoneIds;
     private activeSubagents;
     private subagentSessions;
     private openToolCalls;
@@ -721,7 +834,6 @@ export declare class SshTui {
     private escapeTimer;
     private thinkingStartedAt;
     private waitStartedAt;
-    private waitPrompt;
     private completionSignaled;
     private replaying;
     private completedAt;
@@ -743,6 +855,7 @@ export declare class SshTui {
     private sessionTitle;
     private llmRetry;
     private quotaSnapshot;
+    private balanceSnapshot;
     private quotaAlerted;
     private quotaStepsSinceRefresh;
     private quotaRefreshInFlight;
@@ -754,14 +867,22 @@ export declare class SshTui {
     constructor(ctx: Context, agent: Agent, config: TuiConfig);
     /** Enter raw mode, switch to the alternate screen, and start listening. */
     start(): void;
+    private bindAgentEvents;
+    private bootBackgroundTasks;
     private notifyPluginUpdate;
     private readSkippedUpdate;
     private persistSkippedUpdate;
     private mergeUiSettings;
     private readWorkspaceView;
+    private readDisconnectPolicy;
+    private readAutoApprovalMode;
+    private detachedIdleMs;
+    private clearDetachedIdleTimer;
+    private armDetachedIdleTimer;
     private isCompactView;
     /** Test helper: switch the workspace view without going through /view. */
     setWorkspaceView(view: WorkspaceView): void;
+    private paintCompactBurst;
     private paintCompactSummary;
     private startRenderTimer;
     private calibratePaintInterval;
@@ -772,22 +893,59 @@ export declare class SshTui {
     /** Run the provider/API-key onboarding wizard. Resolves true when saved. */
     private runOnboarding;
     private cancelOnboarding;
-    /** Restore the terminal, flush the session, and request process exit. */
+    /**
+     * Drop the TTY without disposing the agent. Safe to call when the fd is
+     * already dead: DECSET restore is best-effort and never throws.
+     */
+    detachDisplay(): void;
+    /** Restore the terminal and drop event wiring. Does not flush or exit. */
     dispose(): Promise<void>;
     /** Human-facing exit with goodbye and flush; called from key handling. */
     requestExit(code: number): Promise<void>;
+    /**
+     * True while the session is doing work the user would lose by killing the
+     * Host: a running turn (thinking / reply / tools), live subagents, in-flight
+     * compaction, or an LLM retry. Idle (including a waiting approval dialog
+     * after the turn has already settled) is not busy — hangup then exits
+     * instead of leaving a leftover process.
+     */
+    private isBusyForHangupKeepalive;
+    /**
+     * SSH / TTY hangup: drop the local display, flush, and either keep the Host
+     * (busy: thinking / reply / tools / subagents) or exit (idle).
+     * When keeping the Host, `pause` cancels the turn; `continue` lets it finish.
+     * Ctrl+C is not a hangup.
+     */
+    handleHangup(): Promise<void>;
+    private readonly handleHangupSignal;
+    private readonly handleHangupStream;
+    private readonly handleIoError;
+    private writeGoodbye;
+    private flushSession;
+    private exitProcess;
     /** Capture one painted frame. Used by README screenshot fixtures. */
     captureFrame(columns?: number, rows?: number): string[];
+    private screenColumns;
+    private screenRows;
     private write;
+    private ensureDisplayHost;
+    /** Re-open DECSET and start painting to an attached Display relay. */
+    attachRelayDisplay(): void;
+    currentDisconnectPolicy(): DisconnectPolicyName;
+    applyProbedRtt(rttMs: number | undefined): void;
     private markDirty;
+    private toolCardSummary;
+    private mergeIntoToolCard;
     /** Append one transcript row, bounding memory on long sessions. */
     private pushRow;
     /** The transcript rows that support per-row expand/collapse. */
     private collapsibleRows;
     private spinnerFrame;
     /**
-     * Codex wait card: shown while the turn is running. Thinking/reply streams
-     * feed the shimmer header; a live tool becomes the detail line.
+     * Codex wait card: shown while the turn is running. The live thinking
+     * stream feeds the shimmer header; a live tool becomes the detail rows.
+     * While the reply itself is streaming, the transcript paints those tokens
+     * and the card yields (Codex hides the status row once output commits).
      */
     private waitCardVisible;
     private beginWait;
@@ -865,6 +1023,7 @@ export declare class SshTui {
     private findCompactionRow;
     private handleCompactionEvent;
     private handleCommandRun;
+    private formatCommandText;
     private handleCommandDone;
     private handleGoalChange;
     private pushPromptInjection;
@@ -873,6 +1032,21 @@ export declare class SshTui {
     readonly handleSubagentSessionEvent: (sessionId: SessionId, event: SessionEvent) => void;
     readonly handleSubagentStart: (info: SubagentRunInfo) => void;
     readonly handleSubagentEnd: (info: SubagentRunEndInfo) => void;
+    private hasLiveDisplay;
+    private waitForLiveDisplay;
+    /**
+     * Auto mode rides the approval waterfall: when the host approval policy is
+     * `never` no request is ever produced, so the classifier silently does
+     * nothing. Say so instead of letting the user believe a guard is active.
+     */
+    private warnApprovalMismatch;
+    /**
+     * AI review for rule-table `ask` outcomes: one shot at the subagent
+     * model route with a compact, injection-fenced context. Returns
+     * 'allow' | 'deny', or undefined when the reviewer is unavailable or its
+     * output was unusable (caller falls back to prompt/reject).
+     */
+    private reviewUnknownWithModel;
     private readonly handleApproval;
     readonly handleUserQuestions: (request: AskUserQuestionRequest) => Promise<AskUserQuestionAnswer>;
     /** Queue one dialog behind an already-open one instead of overwriting it. */
@@ -900,13 +1074,9 @@ export declare class SshTui {
     private discoverEndpointModels;
     /** Add one endpoint-listed model to the stored provider profile when needed. */
     private ensureProviderModelConfigured;
-    /** How many endpoint-listed models fit on one picker page alongside navigation. */
-    private readonly MODEL_PAGE_SIZE;
-    private readonly MODEL_PAGE_PREV;
-    private readonly MODEL_PAGE_NEXT;
     /**
-     * One pick across a possibly long model list, paging through the digit
-     * dialog so an endpoint with dozens of models stays selectable.
+     * One pick across a possibly long model list. The question dialog keeps a
+     * 12-row sliding window so dozens of models stay selectable with ↑/↓.
      */
     private pickModelOption;
     /** Live adapter routes the TUI can switch to, plus the current selection. */
@@ -945,12 +1115,17 @@ export declare class SshTui {
     private subagentModelOptions;
     /** /submodel: pick (or set) the model subagent children use. */
     private runSubmodelCommand;
+    /** /effort: pick or set the reasoning effort for the current model. */
+    private runEffortCommand;
+    private setReasoningEffort;
     /** /subeffort: pick the reasoning effort subagent children use. */
     private runSubeffortCommand;
     /** /language or /lang: persist zh/en and repaint chrome immediately. */
     private runLanguageCommand;
     /** /view: detailed (see the work) vs compact (Codex-like summary). */
     private runViewCommand;
+    /** /disconnect: pause (default) or continue the turn after SSH drop. */
+    private runDisconnectCommand;
     /** /mode: pick an agent preset (standard / minimal / ptc / cordis / routing-suite / ...). */
     private runModeCommand;
     /** /resume: switch to a past session, or open a picker when no id is given. */
@@ -978,7 +1153,14 @@ export declare class SshTui {
     private handlePasteText;
     private handlePlainText;
     private handleChar;
+    private moveQuestionCursor;
     private handleDialogChar;
+    /**
+     * The wizard's first-step list: the pinned templates plus the web-catalog
+     * presets (deduped), filtered by the search box text.
+     */
+    private mergedProviderEntries;
+    private moveProviderCursor;
     private handleOnboardingChar;
     private advanceOnboarding;
     /** Fetch the endpoint's model list into the onboarding wizard's models step. */
@@ -1008,6 +1190,8 @@ export declare class SshTui {
     private moveCursor;
     private historyBack;
     private historyForward;
+    /** Typing while browsing history detaches from the saved item. */
+    private leaveHistoryBrowse;
 }
 /**
  * Mount the terminal channel once the configured agent exists.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-ssh-tui",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "SSH-friendly interactive terminal TUI plugin for DeepSeek Harness",
   "keywords": [
     "deepseek-harness",
@@ -80,20 +80,20 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-default-model": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-loop": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-presets": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-cmdline": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-commands": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-subagent": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-user-approval": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-user-questions": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-persistence": ">=0.1.1-rc.2"
+    "@deepseek-ai/dsh-agent": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-agent-default-model": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-agent-loop": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-agent-presets": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-cmdline": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-commands": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-credentials": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-llm": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-session": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-settings": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-subagent": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-user-approval": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-user-questions": ">=0.1.1-rc.2 || >=0.1.2-a",
+    "@deepseek-ai/dsh-session-persistence": ">=0.1.1-rc.2 || >=0.1.2-a"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-user-approval": {
@@ -111,21 +111,37 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-default-model": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-loop": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-presets": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-cmdline": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-commands": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-subagent": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-user-approval": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-user-questions": ">=0.1.1-rc.2",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
+    "@deepseek-ai/dsh-agent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-agent-loop": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-agent-presets": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-atomic-write": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-attachment": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-brand": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-cmdline": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-commands": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-credentials": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-home-paths": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-invariants": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-jobs": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-sandbox": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-scope": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-persistence": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-projection": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-projection-cache": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-settings": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-subagent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-timeout": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-tools": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-user-approval": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-user-questions": "0.1.2-rc.1",
     "@types/node": "^24.0.0",
-    "typescript": "^5.9.0",
-    "@deepseek-ai/dsh-session-persistence": ">=0.1.1-rc.2"
+    "typescript": "^5.9.0"
   }
 }