dsh-ssh-tui 0.8.0 → 0.8.1

package/lib/types/subagent-model.d.ts

@@ -44,13 +44,14 @@ export declare function canonicalProviderId(provider: string | undefined): strin
  */
 export declare function subagentProviderDiffers(parent: string | undefined, child: string | undefined): boolean;
 /**
- * Identity SGR for a subagent chip title. Same provider as the parent stays
- * the violet used since the courtesy-name work; a different provider uses
- * cyan so the foreign route is visible without a second color layer.
+ * Which identity role a subagent chip title wears.
+ *
+ * The colours themselves live in `theme.ts`: the same provider as the parent
+ * gets the identity role, a different provider gets the foreign one, and the
+ * palette decides what those look like (under `mono` they become an attribute,
+ * because the distinction has to survive a terminal without colour).
  */
-export declare const SUBAGENT_IDENTITY_SGR = "38;5;141";
-export declare const SUBAGENT_FOREIGN_SGR = "38;5;80";
-export declare function subagentIdentitySgr(foreign: boolean): typeof SUBAGENT_IDENTITY_SGR | typeof SUBAGENT_FOREIGN_SGR;
+export declare function subagentIdentityRole(foreign: boolean): 'subagent-self' | 'subagent-foreign';
 /**
  * True when the stored subagent model still belongs to the parent provider
  * family. An explicit leftover DeepSeek flash id after switching to xAI is

package/lib/types/term-text.d.ts

@@ -53,25 +53,65 @@ export declare function resetAsciiChrome(): void;
  */
 export declare function mapAsciiChrome(text: string): string;
 /**
- * Terminal cell width for one string.
+ * Resolve the ambiguous-glyph policy for this process.
  *
- * Match glibc wcwidth / typical UTF-8 SSH terminals: CJK ideographs and
- * fullwidth forms occupy two cells; East-Asian Ambiguous box-drawing and
- * ornaments (`─`, `●`, `·`, `▸`, `❯`, Braille spinners) occupy one. Counting
- * those ambiguous glyphs as two made `repeatToWidth('─', cols)` paint a
- * half-width rule and parked the input cursor half a cell past the text.
+ * Cheap enough to call once per line (it compares one string) and far too
+ * expensive to call per character, which is the distinction that matters.
+ * @param env - the environment to read.
+ * @param onTerminal - whether the output is a terminal at all.
+ * @returns whether the glyphs are two cells wide, and whether the second cell is
+ *   ours to reserve.
+ */
+export declare function ambiguousPolicy(env?: NodeJS.ProcessEnv, onTerminal?: boolean): {
+    wide: boolean;
+    reserve: boolean;
+};
+/**
+ * Record what the terminal's own answer said about these glyphs.
  *
- * Emoji-bearing symbols are the exception: a terminal with an emoji font draws
- * a symbol the monospace font lacks with a colour glyph that is wider than the
- * cell it advances, so they are budgeted two cells. {@link pinEmojiCells} makes
- * the terminal actually spend both: VS15 asks for the narrow text form, and a
- * reserving space clears the second cell when the run does not already end in
- * one. Budgeting two cells without clearing the second is what left `✖`
- * overlapping the `|` beside it while every `▶` row came up a cell short.
+ * Called by the launcher after measuring; also the escape hatch for a caller
+ * that knows better than the locale (a relay that has already measured for its
+ * own accounting, or a test).
+ * @param wide - true when the terminal advances two cells, false for one, or
+ *   undefined to fall back to the locale.
+ */
+export declare function setAmbiguousWidthMeasured(wide: boolean | undefined): void;
+/**
+ * Force the reserve behaviour, for a caller that measured the same terminal for
+ * its own accounting (a relay) or a test.
+ * @param reserve - whether to spend a space after each ambiguous glyph.
+ */
+export declare function setAmbiguousWidthReserve(reserve: boolean): void;
+/** Whether the second cell is currently reserved with a space. */
+export declare function ambiguousWidthReserved(): boolean;
+/**
+ * Cells one character costs in this TUI's layout.
  *
- * Overflow into the input box is handled by clipping/padding painted rows to
- * the measured column count, not by inflating glyph width.
+ * The reserve case still costs two: the glyph advances one cell and the reserving
+ * space takes the next, so the layout must budget both or every row holding one
+ * comes up short. Non-ambiguous characters are unchanged.
+ * @param cp - the code point.
+ * @returns 0, 1 or 2 cells.
  */
+export declare function ambiguousCellCost(cp: number): number;
+/** What the last measurement decided, for diagnostics and tests. */
+export declare function ambiguousWidthMeasured(): boolean | undefined;
+/**
+ * Whether ambiguous glyphs in {@link AMBIGUOUS_WIDE_RANGES} are drawn two cells
+ * wide here.
+ *
+ * `DSH_TUI_AMBIGUOUS_WIDTH=1|2` answers outright. Otherwise the locale decides,
+ * and only when there really is a terminal: a zh/ja/ko locale means the terminal
+ * is very likely using a CJK font, where these glyphs are full width. The UI
+ * language is deliberately *not* consulted — a Chinese reader on a Western
+ * terminal has narrow glyphs, and typing in Chinese does not change the font
+ * metrics.
+ * @param env - the environment to read (tests pass their own).
+ * @param onTerminal - whether the output is a terminal at all; a pipe or a test
+ *   harness has no font metrics, so there the narrow default applies.
+ * @returns true when those glyphs should be budgeted two cells.
+ */
+export declare function ambiguousWidthIsTwo(env?: NodeJS.ProcessEnv, onTerminal?: boolean): boolean;
 export declare function displayWidth(text: string): number;
 /**
  * Make a painted row spend the two cells {@link displayWidth} budgets for every
@@ -201,14 +241,6 @@ export interface InputView {
     cursorOffset: number;
     folded: boolean;
 }
-/**
- * Fold a long input into one terminal row around the cursor.
- *
- * Newlines from a paste are display-only: they do not occupy cells, so a
- * naive `displayWidth(input)` under-counts a multi-line paste and parks the
- * caret in the middle of later text. Fold the *current line* (between the
- * surrounding newlines) and keep `\n` out of the visible slice.
- */
 export declare function foldInputView(input: string, cursor: number, maxWidth: number): InputView;
 /**
  * Map a character index in the input text to its visual (row, col) after the

package/lib/types/terminal-input.d.ts

@@ -28,6 +28,7 @@ export declare const RTT_OUTLIER_RATIO = 0.25;
 export declare function stripCursorReplies(text: string): {
     text: string;
     replies: number;
+    last?: string;
 };
 /**
  * Drop cursor replies from a byte stream that is otherwise user input.
@@ -38,6 +39,8 @@ export declare function stripCursorReplies(text: string): {
  */
 export declare class TerminalInputFilter {
     private held;
+    /** The most recent cursor reply this filter swallowed, if any. */
+    lastReply: string | undefined;
     push(text: string): {
         forward: string;
         replies: number;
@@ -103,10 +106,26 @@ export declare class TerminalInputPump {
     private slowestSampleMs;
     private holdTimer;
     private listening;
+    /** Set by {@link quiet}: the held tail is dropped instead of forwarded. */
+    private dropping;
     readonly ssh: boolean;
     constructor(options: TerminalInputPumpOptions);
     start(): void;
     stop(): void;
+    /**
+     * Wait one more round trip before letting go of the terminal.
+     *
+     * A cursor reply can still be on the wire when a relay stops. The terminal
+     * answers a Device Status Report after the round trip, so on a slow SSH link
+     * that is hundreds of milliseconds after the request; restoring cooked mode
+     * first lets the tty echo the answer as literal `^[[25;1R` text at the user's
+     * prompt, and leaves it in the tty queue for the shell to read as typing.
+     * Staying in raw mode for one round trip swallows it instead. Typing that
+     * lands in this window is forwarded as usual — the window exists to drop
+     * answers, not keystrokes.
+     * @param graceMs - how long the terminal may still owe us a reply.
+     */
+    handBack(graceMs?: number): Promise<void>;
     /**
      * Ask the terminal for its cursor a few times and report the round-trip that
      * best describes the link. `undefined` means the terminal never answered in
@@ -170,5 +189,23 @@ export declare class TerminalInputPump {
      * from being attributed to the next request.
      */
     private answer;
+    /**
+     * Ask the terminal for its cursor after printing `probe`, and report where it
+     * says the cursor ended up.
+     *
+     * This is the measurement half of the pump: `measure()` answers "how long did
+     * the round trip take", this answers "how far did the cursor move". Replies are
+     * swallowed by the same filter that swallows them for the timing probe — which
+     * matters, because a reply nobody consumes is echoed on screen as literal
+     * `^[[1;5R` text, and that is exactly what a hand-rolled version of this did.
+     * @param probe - the text to print before asking (cleared afterwards).
+     * @param timeoutMs - how long to wait for the answer.
+     * @returns the coordinates the terminal reported, or undefined when it stayed
+     *   silent.
+     */
+    askPosition(probe: string, timeoutMs?: number): Promise<{
+        row: number;
+        column: number;
+    } | undefined>;
     private scheduleHold;
 }

package/lib/types/theme.d.ts

@@ -0,0 +1,109 @@
+/**
+ * The TUI's colour system: semantic roles, and the palettes that fill them.
+ *
+ * Three rules shape this file, and each one came from a product that had to
+ * learn it the hard way:
+ *
+ * 1. **Primary text takes the terminal's own foreground.** Forcing `37` looks
+ *    right on a dark terminal and is unreadable on a light one; Codex's own TUI
+ *    style guide says "most of the time, just use the default foreground colour"
+ *    and warns against unchecked custom foregrounds. So assistant text and tool
+ *    output carry *no* colour token at all.
+ * 2. **A theme is a role table, not a palette.** Callers ask for `error`, not for
+ *    red — that is what lets the monochrome theme keep bold/underline while it
+ *    drops colour, and what lets a low-colour terminal (`color-depth.ts`)
+ *    downgrade by hue family without any theme knowing about it.
+ * 3. **A theme must survive 8 colours and no colour.** Every token here is
+ *    emitted as ordinary SGR and passes through `downgradeSgr`, so a `38;2;…`
+ *    token on a 256- or 16-colour terminal becomes the nearest hue its palette
+ *    has. `mono` goes further and never emits colour at all — the shape of the
+ *    line (bold, dim, underline) is what carries meaning, which is exactly what
+ *    Gemini CLI's first-class `no-color` theme does.
+ *
+ * @module dsh-ssh-tui/theme
+ */
+import type { DisplayKind } from './transcript-types.js';
+/**
+ * Roles that are not transcript rows: subagent chips, warning glyphs, links.
+ *
+ * They live here rather than as constants beside their callers for one reason: a
+ * colour literal anywhere outside this module is a colour the palettes cannot
+ * reach, and `tests/theme.test.mjs` fails over exactly that.
+ */
+export type ExtraRole = 'subagent-self' | 'subagent-foreign' | 'warn' | 'link' | 'accent' | 'notice' | 'md-bold' | 'md-italic' | 'md-code' | 'md-link' | 'md-muted' | 'md-h1' | 'md-h2' | 'md-h3' | 'md-quote' | 'md-rule' | 'tool-running' | 'tool-ok';
+/** One palette. Tokens are SGR parameter strings, without the escape. */
+export interface Theme {
+    /** Key used by `/theme`, `DSH_TUI_THEME`, and the `theme` setting. */
+    name: string;
+    /** Order in `/theme` output; lower is closer to the original look. */
+    rank: number;
+    /** Row role → SGR parameters. A missing role falls back to `default`'s. */
+    tokens: Partial<Record<DisplayKind, string>>;
+    /** Diff emphasis uses a second, brighter variant of the same fill. */
+    emphasis?: Partial<Record<DisplayKind, string>>;
+    /** Non-row roles. */
+    extra?: Partial<Record<ExtraRole, string>>;
+}
+export declare const THEMES: readonly Theme[];
+/** Every theme name, in the order `/theme` lists them. */
+export declare function themeNames(): string[];
+/**
+ * Resolve a theme name.
+ * @param name - a name from the environment, the settings file, or `/theme`.
+ * @returns the theme, or undefined when the name is unknown (the caller decides
+ *   whether to fall back quietly — a typo in a settings file should not crash a
+ *   session, but `/theme bogus` has to say so).
+ */
+export declare function themeByName(name: string | undefined): Theme | undefined;
+/** The theme a `DSH_TUI_THEME`/`theme` value selects, defaulting to `default`. */
+export declare function resolveTheme(name: string | undefined): Theme;
+/**
+ * Publish the active palette.
+ * @param name - the theme name, as resolved from the environment or settings.
+ * @returns the theme that is now active.
+ */
+export declare function setActiveTheme(name: string | undefined): Theme;
+/** The active palette, for renderers that have no session handle. */
+export declare function activeTheme(): Theme;
+/**
+ * The SGR parameters for one row role.
+ * @param theme - the active theme.
+ * @param kind - the display role being painted.
+ * @returns SGR parameters without the escape, or `''` for "leave it to the
+ *   terminal" (which is what primary text wants).
+ */
+export declare function themeToken(theme: Theme, kind: DisplayKind): string;
+/**
+ * The SGR parameters for a changed word inside a diff row.
+ * @param theme - the active theme.
+ * @param kind - `diff-add` or `diff-del`.
+ * @returns the emphasised variant, or undefined when the theme has none.
+ */
+export declare function themeEmphasisToken(theme: Theme, kind: DisplayKind): string | undefined;
+/**
+ * The SGR parameters for a non-row role.
+ * @param theme - the active theme.
+ * @param role - the extra role requested.
+ * @returns SGR parameters without the escape.
+ */
+export declare function themeExtraToken(theme: Theme, role: ExtraRole): string;
+/** A threshold level used by the status area's gauges. */
+export type ThresholdLevel = 'ok' | 'warn' | 'over';
+/**
+ * The token for a gauge threshold: context usage, a quota window, a spend bar.
+ *
+ * One vocabulary for all of them, so a reader learns it once — under 70% is
+ * fine, 70–89% is worth noting, 90% and up is a problem. The numbers behind the
+ * levels live in the status area; the colours live here, and `mono` answers with
+ * attributes instead of giving up the distinction.
+ * @param theme - the active theme.
+ * @param level - which threshold the gauge is in.
+ * @returns SGR parameters without the escape.
+ */
+export declare function themeThresholdToken(theme: Theme, level: ThresholdLevel): string;
+/**
+ * Whether a theme paints colour at all.
+ * @param theme - the active theme.
+ * @returns false for `mono`, whose tokens are attributes only.
+ */
+export declare function themeHasColour(theme: Theme): boolean;

package/lib/types/tool-present.d.ts

@@ -123,8 +123,8 @@ export declare function diffContentLines(text: string): string[];
 export type { DiffDisplayLine } from './transcript-types.js';
 /** Cap one flat diff/body row list to `maxLines` while preserving the final line. */
 export declare function capDisplayLines(lines: readonly DiffDisplayLine[], maxLines: number): DiffDisplayLine[];
-/** Running / ok / error → ANSI color for the status dot and status word only. */
-export declare function toolStateColor(status: 'running' | 'ok' | 'error' | undefined): '33' | '32' | '31';
+/** Running / ok / error → theme token for the status dot and status word only. */
+export declare function toolStateColor(status: 'running' | 'ok' | 'error' | undefined): string;
 export declare function toolStateLabel(status: 'running' | 'ok' | 'error' | undefined): string;
 /** Header + SGR spans: default title, dim operand, colored ●. `[ok]` is omitted — the green dot is enough. */
 export declare function buildToolHeader(input: {

package/lib/types/tui.d.ts

@@ -125,11 +125,17 @@ export interface TuiConfig {
     /** Hangup policy while busy: pause cancels the turn; continue lets it finish detached. Idle hangup always exits. */
     disconnectPolicy?: DisconnectPolicyName;
 }
-/** Lifecycle handle for a mounted interactive terminal channel. */
 export interface TuiController {
     dispose(): Promise<void>;
     handleHangup(): Promise<void>;
     disconnectPolicy(): DisconnectPolicyName;
+    /**
+     * Whether the reader ever typed into this session.
+     *
+     * The launch path uses it on the way out: a fresh session nothing was typed
+     * into is deleted rather than left for other profiles' menus to list.
+     */
+    sessionHadUserInput(): boolean;
 }
 export type WorkspaceView = 'detailed' | 'compact';
 /**
@@ -274,11 +280,78 @@ export declare class SshTui {
     private commandSuggestions;
     private suggestionIndex;
     private focusedRow;
+    /**
+     * The active palette. Roles resolve through `theme.ts`, so switching themes is
+     * a repaint, not a re-render — no row holds a colour of its own.
+     */
+    private theme;
+    /**
+     * Rendered display lines per row, keyed by the row object.
+     *
+     * Every frame used to re-render the whole transcript — markdown parsing, card
+     * layout, wrapping and clipping for thousands of rows — to show the twenty on
+     * screen. Measured on a 5000-row session that was ~550 ms per frame, which is
+     * what "rendering feels slower the longer the session runs" was: a keystroke
+     * costs the same as a full repaint because both redo all of it.
+     *
+     * The cache is `WeakMap`-keyed on the row object, so a replaced row starts a new
+     * entry and an unreferenced one is collected. What each entry stores is a
+     * *fingerprint* of every input the row's rendering depends on plus the lines it
+     * produced; a row whose fingerprint is unchanged replays instead of re-rendering,
+     * which is the common case — during a turn only the streaming row changes.
+     */
+    private displayRowCache;
+    /** Fingerprint of the state that affects *every* row's rendering. */
+    private displayBaseKey;
+    /**
+     * Fingerprint of one tool burst.
+     *
+     * A burst is a *group of tool rows drawn inside the reply above them*, so the
+     * reply's cached lines contain cards belonging to rows the reply's own
+     * fingerprint never sees. Without this, the reply kept replaying its cached
+     * burst: a finished tool went on saying "processing" and the stale card stayed
+     * on screen beside the live one — the residue a reader reported twice.
+     */
+    private static burstKey;
+    /**
+     * Whether a row's rendering depends on the clock.
+     *
+     * A running card draws a spinner and an elapsed time, and a streaming row is
+     * being appended to: their *fields* may not change between two frames while
+     * their lines must. Such a row gets a tick in its cache key, so it re-renders
+     * every frame and becomes cacheable again once it settles. A frozen spinner was
+     * the alternative — and, once the same card was also drawn live elsewhere, the
+     * duplicate a reader actually reported.
+     */
+    private static isLiveRow;
+    /**
+     * Fingerprint of everything one row's rendering reads.
+     *
+     * Written by hand rather than hashing the object: the rendering reads a known
+     * set of fields, and a generic walk would cost more per frame than the render
+     * it is meant to avoid. Scalar fields are compared by value; nested arrays the
+     * rendering walks (todos, sources, intent) get a shallow signature of their own
+     * scalars, because those are updated in place.
+     *
+     * The list is a contract: a field the rendering starts reading must be added
+     * here, or a frame replays stale lines. A test mutates one field in place and
+     * asserts the next frame notices, which is the pattern to copy for a new field.
+     */
+    private static rowKey;
+    private static rowRendersEqual;
     /**
      * The text of the last prompt the user sent, kept so an opted-in retry can
      * send the same thing again after a provider-side auth failure. Cleared when
      * the retry fires, which is what bounds it to one attempt per user message.
      */
+    /**
+     * Whether this session ever saw the reader's input.
+     *
+     * A fresh launch creates a session before anything is typed; quitting straight
+     * away leaves an artifact the TUI hides but other profiles' menus list. On the
+     * way out, a session that never saw input is deleted (see `session-blank.ts`).
+     */
+    private sawUserInput;
     private lastUserText;
     /** Set on every turn/start; a retry consumes it. */
     private authRetryArmed;
@@ -1237,6 +1310,30 @@ export declare class SshTui {
     private explainAuthFailure;
     /** Whether the opt-in retry is on (`/retryauth`, the settings form, or the env). */
     private retryProviderAuthEnabled;
+    /** Whether anything the reader typed reached this session (used on exit). */
+    sessionHadUserInput(): boolean;
+    /**
+     * `/cleanup [--dry-run]` — delete sessions that never saw user input.
+     *
+     * Every fresh start creates a session, so quitting without typing leaves an
+     * artifact behind. The picker hides those, but the web session list reads the
+     * same files without that filter, which is how an unused session still shows
+     * up in another profile's menu. This walks the whole history once and deletes
+     * the blank ones (the listing prunes as it resolves, which is the same rule the
+     * picker applies).
+     */
+    private runCleanupCommand;
+    /** The theme saved in the `ssh-tui` settings section, if any. */
+    private readThemeName;
+    /**
+     * `/theme [name]` — list the palettes, or switch to one and remember it.
+     *
+     * Switching repaints from the row cache, so it costs one frame rather than a
+     * re-render of the transcript; `mono` exists for terminals where colour is the
+     * problem rather than the answer, and it keeps every difference as an
+     * attribute instead of throwing the difference away.
+     */
+    private runThemeCommand;
     /** `/retryauth [on|off]` — the setting that lets one provider 401/403 retry itself. */
     private runRetryAuthCommand;
     private runDisconnectCommand;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-ssh-tui",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "SSH-friendly interactive terminal TUI plugin for DeepSeek Harness",
   "keywords": [
     "deepseek-harness",
@@ -59,6 +59,7 @@
     "docs/screenshots/workspace.png",
     "docs/screenshots/slow-link.gif",
     "LICENSE",
+    "docs/display-mode.md",
     "docs/terminals.md",
     "docs/windows.md"
   ],
@@ -80,7 +81,8 @@
         "0.1.5-rc.3": "incompatible",
         "0.1.7-rc.1": "compatible",
         "0.1.7-rc.2": "compatible",
-        "0.2.0-rc.1": "compatible"
+        "0.2.0-rc.1": "compatible",
+        "0.2.0-rc.2": "compatible"
       },
       "profiles": [
         "tui"
@@ -156,75 +158,75 @@
     "@deepseek-ai/cordis-plugin-include": "1.0.9",
     "@deepseek-ai/cordis-plugin-loader": "1.0.5",
     "@deepseek-ai/cordis-plugin-timer": "1.1.6",
-    "@deepseek-ai/dsh": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-default-model": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-loop": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-preset": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-atomic-write": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-attachment": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-brand": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-cmdline": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-commands": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-credentials": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-home-paths": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-invariants": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-jobs": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-llm": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-llm-mock-server": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-sandbox": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-scope": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session-persistence": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session-projection": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session-projection-cache": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-settings": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-subagent": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-timeout": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-tools": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-typert-protocol": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-user-approval": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-user-questions": "0.2.0-rc.1",
+    "@deepseek-ai/dsh": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-default-model": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-preset": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-atomic-write": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-brand": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-cmdline": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-commands": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-home-paths": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-invariants": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-jobs": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm-mock-server": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-scope": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-persistence": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-projection-cache": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-timeout": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-user-questions": "0.2.0-rc.2",
     "@types/node": "^24.0.0",
     "@xterm/headless": "^6.0.0",
     "semver": "^7.8.5",
     "typescript": "^5.9.0"
   },
   "overrides": {
-    "@deepseek-ai/dsh": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-default-model": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-loop": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-preset": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-atomic-write": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-attachment": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-brand": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-cmdline": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-commands": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-credentials": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-home-paths": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-invariants": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-jobs": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-llm": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-llm-mock-server": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-sandbox": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-scope": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session-persistence": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session-projection": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session-projection-cache": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-settings": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-subagent": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-timeout": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-tools": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-typert-protocol": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-user-approval": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-user-questions": "0.2.0-rc.1"
+    "@deepseek-ai/dsh": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-default-model": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-preset": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-atomic-write": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-brand": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-cmdline": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-commands": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-home-paths": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-invariants": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-jobs": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm-mock-server": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-scope": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-persistence": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-projection-cache": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-timeout": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-user-questions": "0.2.0-rc.2"
   }
 }