kiokuko-dsh 0.2.22 → 0.2.24

package/dist/dsh/setup.d.ts

@@ -1,4 +1,4 @@
-export declare const DSH_MANAGED_BLOCK = "<!-- BEGIN KIOKUKO-DSH MANAGED BLOCK -->\n<!-- kiokuko-dsh-template-version: 2 -->\n<!-- Managed by kiokuko-dsh setup on plugin load. Edit outside the markers. -->\n\n## Kiokuko DSH\n\nApply this entire block only when the current host is DSH and kiokuko-dsh is enabled for this session.\nOtherwise ignore every instruction in this block, including Skill routing, tools, planning, memory and completion rules.\nThe presence of this block, repository files or installed packages does not activate it.\nOnly kiokuko-dsh may update this block; other plugins and agents must preserve it verbatim.\nDo not apply kiokuko or kiokuko-ai instruction blocks as kiokuko-dsh configuration.\n\nBefore any non-trivial Kiokuko-governed DSH work, read and apply the complete bundled `kiokuko-soul` Skill before any other Kiokuko Skill. The DSH host performs Akinator intake, binds the native session and complete capability catalog, and resolves actionable intake. Optional enrichment failures are degraded guidance. For new build, debug, review and devops tasks the host separately asks for normal execution or Enno and, when selected, a template or custom model configuration. Unanswered execution choices stay pending. Normal execution never creates an Enno contract or WorkUnit; preserve memory, Skills, native permissions and focused verification. Model routing and child delegation are host-owned. `task_prepare` and `task_answer` are host operations, not model tools. DSH intake belongs to the kiokuko-dsh host. Never substitute same-named task_prepare/task_answer MCP tools from kiokuko or kiokuko-ai. A failed external MCP call does not prove DSH intake failed; preserve the admitted host state and follow its current directive. Follow the admitted state and current directive, then route to `kiokuko-enno-oduno`, `kiokuko-simple-work`, `kiokuko-single-purpose-functions`, and `kiokuko-ui-design-soul` only when applicable. For changes spanning setup, delivery, persisted state, or runtime handoffs, apply `veteran-programmer-skill` before and after implementation. When writing or changing code, also apply `one-shot-software-completion` and `coding-ideal-routine-skill` through the SOUL route. Read every applicable specialist `SKILL.md` index, then only the expert fragments selected by the current WorkUnit or concrete risk. Never substitute, install, or execute fetched external Skill content.\n\nThe host owns request identity, session binding, memory delivery and finalization.\nUse its admitted workspace and directive; do not read or modify the SQLite file directly.\n\nUse kioku_read, kioku_write, kioku_edit, kioku_remove, kioku_exec and kioku_result for host-observed development. Project edits, external investigation, PATH commands, bash/zsh and builds/tests need no extra approval. Source/data deletion and durable user database mutations require concrete review; declare destructiveTargets for commands. Generated/temp/disposable artifacts are ordinary development. Lisp and normal tools coexist. Plan, goal, cancellation and execution ownership remain authoritative. Explicit human implementation instructions request Plan exit at the next accepted step; presenting a plan alone does not exit. Bind task_completion checks and relevant source/test/config paths before execution. Collect asynchronous final results. Host receipts distinguish work outcome, verification and saving; model fields such as passed cannot supply proof. Apply recalled candidates only after comparing conditions, provenance and source versions; old verification is not current success. After task completion ask permission to organize memories, show the exact proposal, and save only the approved revision. Comments require revision and another preview; decline saves nothing. Saving failures do not stop coding. Reconcile uncertain saves by the original approval key; never blindly create a new save identity or replay edits or commands.\n\nDiscover unfamiliar repository filenames with native glob/grep before read; use an exact returned path. Never infer a test filename from a source basename or treat remembered/example paths as current filesystem evidence. Explicit user targets may be read directly; if missing, report that fact and discover relevant alternatives without silently changing the requested target. After a not-found error, do not repeat the unchanged read or assume a sandbox/configuration fault; check current path evidence. Do not create placeholder files or silently substitute another target to hide a missing-file error.\n\n<!-- END KIOKUKO-DSH MANAGED BLOCK -->";
+export declare const DSH_MANAGED_BLOCK = "<!-- BEGIN KIOKUKO-DSH MANAGED BLOCK -->\n<!-- kiokuko-dsh-template-version: 3 -->\n<!-- Managed by kiokuko-dsh setup on plugin load. Edit outside the markers. -->\n\n## Kiokuko DSH\n\nApply this entire block only when the current host is DSH and kiokuko-dsh is enabled for this session.\nOtherwise ignore every instruction in this block, including Skill routing, tools, planning, memory and completion rules.\nThe presence of this block, repository files or installed packages does not activate it.\nOnly kiokuko-dsh may update this block; other plugins and agents must preserve it verbatim.\nDo not apply kiokuko or kiokuko-ai instruction blocks as kiokuko-dsh configuration.\n\nBefore any non-trivial Kiokuko-governed DSH work, read and apply the complete bundled `kiokuko-soul` Skill before any other Kiokuko Skill. The DSH host performs Akinator intake, binds the native session and complete capability catalog, and resolves actionable intake. Optional enrichment failures are degraded guidance. For new build, debug, review and devops tasks the host separately asks for normal execution or Enno and, when selected, a template or custom model configuration. Unanswered execution choices stay pending. Normal execution never creates an Enno contract or WorkUnit; preserve memory, Skills, native permissions and focused verification. Model routing and child delegation are host-owned. `task_prepare` and `task_answer` are host operations, not model tools. DSH intake belongs to the kiokuko-dsh host. Never substitute same-named task_prepare/task_answer MCP tools from kiokuko or kiokuko-ai. A failed external MCP call does not prove DSH intake failed; preserve the admitted host state and follow its current directive. Follow the admitted state and current directive, then route to `kiokuko-enno-oduno`, `kiokuko-simple-work`, `kiokuko-single-purpose-functions`, and `kiokuko-ui-design-soul` only when applicable. For changes spanning setup, delivery, persisted state, or runtime handoffs, apply `veteran-programmer-skill` before and after implementation. When writing or changing code, also apply `one-shot-software-completion` and `coding-ideal-routine-skill` through the SOUL route. Read every applicable specialist `SKILL.md` index, then only the expert fragments selected by the current WorkUnit or concrete risk. Never substitute, install, or execute fetched external Skill content.\n\nThe host owns request identity, session binding, memory delivery and finalization.\nUse its admitted workspace and directive; do not read or modify the SQLite file directly.\n\nUse kioku_read, kioku_write, kioku_edit, kioku_remove, kioku_exec and kioku_result for host-observed development. Project edits, external investigation, PATH commands, bash/zsh and builds/tests need no extra approval. Source/data deletion and durable user database mutations require concrete review; declare destructiveTargets for commands. Generated/temp/disposable artifacts are ordinary development. Lisp and normal tools coexist. Plan, goal, cancellation and execution ownership remain authoritative. Explicit human implementation instructions request Plan exit at the next accepted step; presenting a plan alone does not exit. Bind task_completion checks and relevant source/test/config paths before execution. Collect asynchronous final results. Host receipts distinguish work outcome, verification and saving; model fields such as passed cannot supply proof. Apply recalled candidates only after comparing conditions, provenance and source versions; old verification is not current success. After task completion ask permission to organize memories, show the exact proposal, and save only the approved revision. Comments require revision and another preview; decline saves nothing. Saving failures do not stop coding. Reconcile uncertain saves by the original approval key; never blindly create a new save identity or replay edits or commands.\n\nDiscover unfamiliar repository filenames with native glob/grep before read; use an exact returned path. Never infer a test filename from a source basename or treat remembered/example paths as current filesystem evidence. Explicit user targets may be read directly; if missing, report that fact and discover relevant alternatives without silently changing the requested target. After a not-found error, do not repeat the unchanged read or assume a sandbox/configuration fault; check current path evidence. Do not create placeholder files or silently substitute another target to hide a missing-file error.\n\n### Engineering changes\n\nFor generated artifacts, update the owning schema, template or generator, then use the repository's documented regeneration path and inspect the resulting diff; do not patch only the output.\n\n### UI design\n\nChoose design tokens by semantic role, not by current appearance. If a role is missing, extend the design system instead of repurposing an unrelated token; when changing theme contracts, verify supported light, dark and custom-theme fallback behavior.\n\n<!-- END KIOKUKO-DSH MANAGED BLOCK -->";
 /** Replace only a DSH-owned block, preserving every other product's instructions. */
 export declare function renderDshInstructions(existing: string): string;
 /** Preflight both destinations before writing. A read-only check reports the same plan. */

package/dist/dsh/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/dsh/setup.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,iBAAiB,i+IAqBvB,CAAA;AAEP,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAqB9D;AAYD,2FAA2F;AAC3F,wBAAsB,QAAQ,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO;;;;;;;;;;;;GAoBrG;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAUpD"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/dsh/setup.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,iBAAiB,88JA6BvB,CAAA;AAEP,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAqB9D;AAYD,2FAA2F;AAC3F,wBAAsB,QAAQ,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO;;;;;;;;;;;;GAoBrG;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAUpD"}

package/dist/dsh/setup.js

@@ -12,7 +12,7 @@ const LEGACY_END = '<!-- END KIOKUKO MANAGED BLOCK -->';
 // A generic Kiokuko marker alone does not establish DSH ownership.
 const LEGACY_DSH_START = /<!-- BEGIN KIOKUKO MANAGED BLOCK -->(?=\r?\n<!-- kiokuko-dsh-template-version: \d+ -->)/u;
 export const DSH_MANAGED_BLOCK = `${BEGIN}
-<!-- kiokuko-dsh-template-version: 2 -->
+<!-- kiokuko-dsh-template-version: 3 -->
 <!-- Managed by kiokuko-dsh setup on plugin load. Edit outside the markers. -->
 
 ## Kiokuko DSH
@@ -32,6 +32,14 @@ Use kioku_read, kioku_write, kioku_edit, kioku_remove, kioku_exec and kioku_resu
 
 Discover unfamiliar repository filenames with native glob/grep before read; use an exact returned path. Never infer a test filename from a source basename or treat remembered/example paths as current filesystem evidence. Explicit user targets may be read directly; if missing, report that fact and discover relevant alternatives without silently changing the requested target. After a not-found error, do not repeat the unchanged read or assume a sandbox/configuration fault; check current path evidence. Do not create placeholder files or silently substitute another target to hide a missing-file error.
 
+### Engineering changes
+
+For generated artifacts, update the owning schema, template or generator, then use the repository's documented regeneration path and inspect the resulting diff; do not patch only the output.
+
+### UI design
+
+Choose design tokens by semantic role, not by current appearance. If a role is missing, extend the design system instead of repurposing an unrelated token; when changing theme contracts, verify supported light, dark and custom-theme fallback behavior.
+
 ${END}`;
 /** Replace only a DSH-owned block, preserving every other product's instructions. */
 export function renderDshInstructions(existing) {

package/dist/dsh/setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/dsh/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAuB,MAAM,8BAA8B,CAAA;AACjG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAA;AAElE,MAAM,KAAK,GAAG,0CAA0C,CAAA;AACxD,MAAM,GAAG,GAAG,wCAAwC,CAAA;AACpD,MAAM,YAAY,GAAG,sCAAsC,CAAA;AAC3D,MAAM,UAAU,GAAG,oCAAoC,CAAA;AACvD,mEAAmE;AACnE,MAAM,gBAAgB,GAAG,0FAA0F,CAAA;AAEnH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,KAAK;;;;;;;;;;;;EAYvC,2BAA2B;;;;;;;;;EAS3B,GAAG,EAAE,CAAA;AAEP,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,UAAU,EAAE,wGAAwG,CAAC,CAAA;IAC7J,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3C,MAAM,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAChH,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAAE,MAAM,QAAQ,EAAE,CAAA;IACxF,IAAI,KAAa,EAAE,GAAW,EAAE,OAAe,CAAA;IAC/C,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC/B,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,GAAG,GAAG,KAAK;YAAE,MAAM,QAAQ,EAAE,CAAA;QAC/D,OAAO,GAAG,GAAG,CAAA;IACf,CAAC;SAAM,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,KAAK,GAAG,YAAY,CAAC,CAAC,CAAE,CAAA;QACxB,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QAC1E,IAAI,GAAG,GAAG,KAAK,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,GAAG;YAAE,MAAM,QAAQ,EAAE,CAAA;QAClE,OAAO,GAAG,UAAU,CAAA;IACtB,CAAC;;QAAM,OAAO,QAAQ,CAAA;IACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;AACtH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAA;IAC9E,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;WAC7F,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/D,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACvD,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,MAAM,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IAClF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AACtC,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,UAAqE,EAAE;IACpG,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9D,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7E,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,EAAE;KACtH,CAAA;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;YAClE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACnE,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAA;IACzB,CAAC;IACD,IAAI,YAAY,IAAI,YAAY,CAAC,OAAO,KAAK,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC5E,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAC3G,CAAC;IACD,MAAM,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,eAAe,CAAA;IACxI,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAA;QAC/B,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/F,OAAO,CAAC,IAAI,CAAC,+CAA+C,MAAM,CAAC,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,MAAM,CAAC,SAAS,gBAAgB,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY,CAAC,IAAI,4DAA4D,CAAC,CAAA;QAC7R,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACvF,OAAO,CAAC,IAAI,CAAC,sDAAsD,IAAI,iDAAiD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,+HAA+H,CAAC,CAAA;IACxT,CAAC;AACH,CAAC"}
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/dsh/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAuB,MAAM,8BAA8B,CAAA;AACjG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAA;AAElE,MAAM,KAAK,GAAG,0CAA0C,CAAA;AACxD,MAAM,GAAG,GAAG,wCAAwC,CAAA;AACpD,MAAM,YAAY,GAAG,sCAAsC,CAAA;AAC3D,MAAM,UAAU,GAAG,oCAAoC,CAAA;AACvD,mEAAmE;AACnE,MAAM,gBAAgB,GAAG,0FAA0F,CAAA;AAEnH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,KAAK;;;;;;;;;;;;EAYvC,2BAA2B;;;;;;;;;;;;;;;;;EAiB3B,GAAG,EAAE,CAAA;AAEP,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,UAAU,EAAE,wGAAwG,CAAC,CAAA;IAC7J,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3C,MAAM,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAChH,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAAE,MAAM,QAAQ,EAAE,CAAA;IACxF,IAAI,KAAa,EAAE,GAAW,EAAE,OAAe,CAAA;IAC/C,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC/B,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,GAAG,GAAG,KAAK;YAAE,MAAM,QAAQ,EAAE,CAAA;QAC/D,OAAO,GAAG,GAAG,CAAA;IACf,CAAC;SAAM,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,KAAK,GAAG,YAAY,CAAC,CAAC,CAAE,CAAA;QACxB,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QAC1E,IAAI,GAAG,GAAG,KAAK,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,GAAG;YAAE,MAAM,QAAQ,EAAE,CAAA;QAClE,OAAO,GAAG,UAAU,CAAA;IACtB,CAAC;;QAAM,OAAO,QAAQ,CAAA;IACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;AACtH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAA;IAC9E,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;WAC7F,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/D,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACvD,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,MAAM,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IAClF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AACtC,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,UAAqE,EAAE;IACpG,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9D,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7E,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,EAAE;KACtH,CAAA;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;YAClE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACnE,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAA;IACzB,CAAC;IACD,IAAI,YAAY,IAAI,YAAY,CAAC,OAAO,KAAK,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC5E,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAC3G,CAAC;IACD,MAAM,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,eAAe,CAAA;IACxI,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAA;QAC/B,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/F,OAAO,CAAC,IAAI,CAAC,+CAA+C,MAAM,CAAC,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,MAAM,CAAC,SAAS,gBAAgB,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY,CAAC,IAAI,4DAA4D,CAAC,CAAA;QAC7R,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACvF,OAAO,CAAC,IAAI,CAAC,sDAAsD,IAAI,iDAAiD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,+HAA+H,CAAC,CAAA;IACxT,CAAC;AACH,CAAC"}

package/dist/locale/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "kiokuko-dsh",
-    "description": "Version 0.2.22 — Kiokuko plugin for DeepSeek Harness"
+    "description": "Version 0.2.24 — Kiokuko plugin for DeepSeek Harness"
   }
 }

package/dist/locale/ja.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "kiokuko-dsh",
-    "description": "バージョン 0.2.22 — DeepSeek Harness 向け Kiokuko プラグイン"
+    "description": "バージョン 0.2.24 — DeepSeek Harness 向け Kiokuko プラグイン"
   }
 }

package/dist/locale/ko.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "kiokuko-dsh",
-    "description": "버전 0.2.22 — DeepSeek Harness용 Kiokuko 플러그인"
+    "description": "버전 0.2.24 — DeepSeek Harness용 Kiokuko 플러그인"
   }
 }

package/dist/locale/zh-CN.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "kiokuko-dsh",
-    "description": "版本 0.2.22 — DeepSeek Harness 的 Kiokuko 插件"
+    "description": "版本 0.2.24 — DeepSeek Harness 的 Kiokuko 插件"
   }
 }

package/docs/current-upstream-compatibility-report.md

@@ -0,0 +1,85 @@
+# Current upstream compatibility verification
+
+Verified in the authorized cloud workspace on 2026-10-24. No commit, push, user Mac change, or official DSH source change was made.
+
+## Source and artifact identity
+
+- Plugin base: `askdkc/kiokuko-dsh`, `8c69b4afe69d7baf1ad6d0178a5c4c0388a0fb29`, plus the accompanying uncommitted changes.
+- Official upstream: `https://github.com/deepseek-ai/deepseek-harness.git`, master resolved to `22ddee3792402c3e70ec5f86a63c3e3e895a2f60` (0.2.1-rc.3). The official working tree remained clean. This is evidence, not a newly hardcoded compatibility target.
+- Node: v24.19.0. The CI matrix was not executed remotely.
+- Built package: `kiokuko-dsh-0.2.22.tgz`, SHA-256 `0ec0660e89e4064a580218dad3136c9c931dfa8683ff8a355b748989c7918743`.
+- Core source SHA-256: `src/dsh/lisp/surface.ts` = `039ce216063b7441373419b30b9718d6b57ccf639d2f8ec1369e2dabbb968ab4`; `src/dsh/lisp/host-tool-dispatch.ts` = `afab866f7da91e535f23dab628bc228a266e2c7ffa579e43c69f6cf9a29f08ae`; `src/dsh/models/surface.ts` = `748bc51240434735209dbcab81a5d2c222b3f3d942b9ad14a2b9694c9271e39b`.
+- The three corresponding current dist modules were byte-identical to the extracted tested package at final verification. The subsequent pinning re-audit also corrected the shipped repair catalog resolver; the final repack status is recorded below. The earlier archive remains separate evidence, not proof for the later package.
+
+## Changes and boundaries
+
+Current DSH owns executor selection. Lisp preserves native/PTC selection and the executor-owned request schema rather than calling removed `presentAs` or installing an irreversible executor override. Host-owned nested calls use the exported official execution pipeline, preserving parent/root identity, guards, cancellation and task authority. Current model selection uses `agent.model.select`; legacy behavior remains capability-selected.
+
+Protected native execution retains the scoped restrictions and persistent guard, including unload/reload boundaries. Protected PTC `run_code` is explicitly rejected before interpreter dispatch, with an actionable native-executor requirement. This is not support for running protected Lisp programs through PTC. Tests use a sentinel PTC interpreter to prove transport preservation and zero execution on denial, not a real PTC process interpreter.
+
+CI now resolves official master once, records its exact SHA, builds that source, and stages the same official graph in both fixture and root module resolution. Mismatched identities and stale fallback packages fail. The historical fixture manifest/lock and release evidence remain reproducibility data, not a fixed compatibility gate. Schema tests use actual schema/constructor exports rather than release prefixes.
+
+## Executed checks
+
+The reported original missing `presentAs` failure was reproduced before repair. Reverting current nested dispatch to the old single-call entry failed against actual batch execution; removing protected guards failed the denial/unload regressions. These were disposable test mutations and were restored.
+
+Commands were run from the plugin checkout, with `TMPDIR` outside the checkout for production regressions. `KIOKUKO_DSH_PACKAGE_ROOT` pointed to `tests/fixtures/dsh-runtime/node_modules`, staged from the verified official checkout. `KIOKUKO_EXPECTED_DSH_SHA` was the resolved SHA above.
+
+- `npm run typecheck`: passed against current official declarations, including final harness edits.
+- `npm run build` and `npm pack --ignore-scripts`: passed. The official monolithic build had exceeded cloud memory; required official bundles/declarations were subsequently built selectively without source changes.
+- `KIOKUKO_LISP_BUILT_ROOT=<extracted package>/dist node --import tsx --test tests/dsh/integration/lisp/current-executor.test.ts`: 8 passed, 0 failed, 0 skipped. Actual official native/PTC executors, nested pipeline policies/cancellation, protected boundaries, task authority, and actual new-session AgentLoop turns in development and protected modes.
+- `node scripts/run-tests.mjs tests/dsh/unit/lisp tests/dsh/unit/native-execution-ownership.test.ts`: 267 passed, 0 failed, 0 skipped.
+- `node --import tsx --test tests/dsh/unit/kiokuko-models-service.test.ts`: 25 passed, 0 failed, 0 skipped.
+- `node --test scripts/verification-contract.test.mjs`: 64 passed (including seven optional current-source graph/configuration tests). Native CI runner tests: 8 passed. Staging tests: 2 passed, including stale-package removal and origin/revision identity checks. Deliberately stale source-selection/staging variants failed as expected.
+- Ten Lisp integration files (`native-surface`, `hot-native-surface`, `guardrail-native-policy`, `p0-native-guard`, `attachment-surface`, `plan-surface`, `read-surface`, `owned-development`, `conversation-intake`, `code-intelligence-native`) with task-local SBCL: 24 tests, 19 passed, 3 failed, 2 skipped. The three protected-runtime failures all report `bwrap: NETLINK_ROUTE ... Operation not permitted`, including the hot compile failure payload. No sandbox restriction was weakened or test skipped to hide these failures. Conversation intake passed all five modes with actual native Bash approval/process dispatch. Two code-provider variants skipped because the separately built optional V1 provider fixture was absent.
+- Both packed plugins were installed into a real official CLI host. Authenticated HTTP create/bind/commit, actual `enable-task`, an actual model-emitted `lisp_status` tool call with `isError:false` and `TASK_READY`, completion of that same model turn, and identity/history after restart passed. The LLM was scripted, not a paid external provider. Browser clicking was not validated: the cloud browser process was blocked by environment IPC restrictions.
+- Harness evidence identity was checked against the actual staged graph: current installed version/SHA reported, deliberately wrong expected SHA rejected. This check does not claim execution of all harness scenarios.
+- `git diff --check`: passed. Final source/artifact hashes were rechecked.
+
+The main CI intentionally excludes the optional code-provider suite. The separate `code-intelligence.yml` workflow now resolves current official master using the same resolver, builds its exact SHA and stages the provider graph after dependency installation. Source tests, packed-profile installation, both packed consumers, and benchmark validate that selected source graph. Current packed installation does not reconstruct unpublished source from registry version labels or inject the historical vendor CLI. The independently reviewed provider protocol baseline is preserved. Seven synthetic/configuration regressions passed, including mismatched and same-version stale graph rejection. Actual optional-provider runtime acceptance remains unverified because its independently built fixture was not installed in this cloud run.
+
+## Evidence and remaining gaps
+
+Task-local logs and hash manifests are in `.artifacts/current-upstream-fix/` and `.artifacts/current-upstream-ci/`; the report above preserves meaningful results independently of those ignored temporary files. The sibling combined HTTP evidence is under `dsh-chat-current-fix-20261024/.test-tmp/dsh-regular-chat-integration-8fWVwM/http-chat-evidence.json` in the same cloud task.
+
+Full GitHub/multiplatform CI, the optional built V1 provider integration, protected SBCL execution in an environment permitting its required bubblewrap isolation, and browser interaction remain unverified. History-format/semantic-compaction test changes were typechecked and source-reviewed, not claimed as full native-suite passes. No user installation or live deployment was changed. The workspace's optional evidence-guard executable was absent; no automated guard pass is claimed.
+
+## Final pinning re-audit and local CI reproduction
+
+The later full pinning audit found default command paths that still accepted the historical locked fixture when no expected SHA was supplied. These defaults now require a coherent staged official-source identity. Historical reproducibility is a separate explicit `KIOKUKO_DSH_RUNTIME_MODE=historical` mode and cannot masquerade as a current-SHA run. Shared preflight covers native CI, optional provider, standalone harness, lifecycle and browser commands. Multilingual installation instructions no longer describe old alpha release names as current compatibility requirements. Release evidence, language-engine minimums, schema/protocol versions and historical locks remain intact.
+
+For a local current-runtime verification subset on an authorized local machine, use a separate **clean official checkout**, not an edited host checkout. These commands are instructions, not evidence that local execution occurred. Resolve master once and retain the returned SHA for the whole run:
+
+```sh
+npm ci
+npm ci --prefix tests/fixtures/dsh-runtime
+export KIOKUKO_EXPECTED_DSH_SHA=$(node scripts/resolve-dsh-upstream.mjs)
+# In a separate official checkout, check out that exact SHA, then run:
+# pnpm install --frozen-lockfile
+# pnpm run build:artifacts
+node scripts/stage-dsh-upstream.mjs /absolute/path/to/clean-official-dsh tests/fixtures/dsh-runtime "$KIOKUKO_EXPECTED_DSH_SHA" .
+node --test scripts/verification-contract.test.mjs
+node --test scripts/stage-dsh-upstream.test.mjs
+npm run typecheck
+npm run build
+npm run test:ci:unit
+npm run test:ci:integration
+npm run test:ci:lisp
+npm run test:ci:e2e
+npm run test:ci:metadata
+git diff --check
+```
+
+Do not set the historical runtime mode for a current compatibility run. Native Lisp requires SBCL and the operating system's supported isolation facilities; the cloud's bubblewrap failures cannot predict a local macOS result. Browser lanes additionally require the supported Playwright browser installation and a working browser process: `npm run test:ci:approval:web`, `npm run test:ci:coding:web`, and `npm run test:ci:shortcuts:web`. They are heavier than the narrow regressions above. These local commands are not the complete hosted CI selection, lane partition, microjudge targets, artifact aggregation or platform matrix; hosted CI cannot be claimed without executing its workflow.
+
+Optional code-provider acceptance additionally prepares a separate reviewed provider checkout and dependencies. After staging current official DSH, use `node scripts/prepare-code-provider.mjs`, `npm run test:code-intelligence`, `npm run test:code-intelligence:packed`, and `npm run test:code-intelligence:benchmark`. These are optional heavy checks, not substitutes for ordinary plugin acceptance. No local or remote CI success is asserted until those commands actually complete.
+
+### Re-audit execution status
+
+The production repair resolver now treats an explicitly supplied missing or broken package root as an error and never silently falls back to the installed package or historical test fixture. With no override it resolves the installed production catalog, without requiring Git staging metadata. New catalog-selection regressions passed 3/3; the pre-fix resolver failed the explicit-root and implicit-fixture counterexamples (with only a test export added). The actual current catalog repair integration passed 8/8. The typesafe-command release-label branch was replaced by the actual credential writability contract.
+
+Final independent re-audit found no remaining arbitrary DSH release predicate in the inspected current source/scripts/tests, and no remaining identified silent historical fallback in current-runtime entrypoints. This excludes intentionally retained historical locks, protocol/schema identities and synthetic evaluations. Independent selection/staging checks passed 12/12 with no skips; this is not proof of full native or hosted CI success.
+
+The final repair-script change is **not covered by the earlier packed HTTP artifact**. A new build reached final output generation, but final repack was blocked by the environment's authorization review; the one evidence-based retry also produced no archive (its recorded npm failure was an unavailable default cache directory). No further packaging workaround was attempted. Therefore final source transfer may proceed independently, but latest-archive packed/HTTP acceptance remains pending. The earlier archive/hash and combined HTTP result above apply only to their earlier source state.
+
+The last re-audit checks separately confirmed default-selection regressions 10/10, native planner 9/9 and actual-current typesafe command 1/1. The later full-contract run stopped without a terminal summary; its chained typecheck did not start. Earlier 64/64 and typecheck success above must not be relabeled as verification of these final re-audit edits. The catalog regression was subsequently included in the contract aggregator; that final aggregation has not run.

package/docs/dsh-plugin.md

@@ -11,7 +11,11 @@ not remove files or dependencies from an installed full package.
 
 ## Compatibility
 
-The declared DSH minimum is **0.2.1-alpha.2**, with no unproven future ceiling. Tested-release records describe evidence, not an exclusive runtime target; compatibility also requires the native APIs exercised by the disposable-profile tests. Cordis supports the same-major lifecycle API (`^4.0.5-alpha.1`), including compatible minor updates.
+Compatibility depends on the native APIs exercised by the disposable-profile tests, not a package-version prefix. CI resolves official DSH master once, builds that exact revision and records it with the test evidence. Historical release records and locked fixtures remain reproducibility data, not proof of current-upstream support.
+
+On hosts exposing the batch executor API, development Lisp preserves the Agent’s selected native or PTC executor. Host-owned nested calls use DSH’s exported invocation pipeline, retaining scoped policy, cancellation settlement and host-only task authority. They are not submitted as model batches.
+
+Protected Lisp on current DSH retains the selected executor and enforces its scoped native-tool restrictions and monotonic guards. Native execution supports protected Lisp; the reserved PTC `run_code` transport is explicitly denied before its program runs. To use protected Lisp, select native execution in the DSH profile. Disabling or unloading Lisp never installs, replaces or disposes the selected executor, so it cannot leave a stale executor tombstone; the protected fence still survives plugin unload. Existing hosts that provide reversible `presentAs` retain the prior presentation behavior.
 
 CI uses the canonical DSH fixture for native history, routing and packed Web lifecycle coverage. Historical source-repair CLI tests use the current catalog's historical codecs for v0/v3 fixtures. Local tests do not prove an npm `--latest` update or the user's running profile. The E2E runner defaults to the manifest's compatibility target; `KIOKUKO_EXPECTED_DSH_VERSION` selects an explicit fixture version. `KIOKUKO_DSH_CLI_ONLY=1` runs only the packed Web lifecycle and requires `KIOKUKO_REQUIRE_DSH_CLI=1`.
 
@@ -382,7 +386,7 @@ limit. The package is therefore not represented as a small, auto-approved
 plugin.
 
 The manifest declares MIT licensing, the canonical GitHub repository, Node.js
-`>=24.16.0`, DSH `>=0.2.1-alpha.2`, and the `web` and `dsh-cli` profiles.
+`>=24.16.0`, the DSH capabilities described above, and the `web` and `dsh-cli` profiles.
 An untested release is not rejected merely for its version label. A matching
 disposable-profile run supplies behavior evidence; `headless` remains unverified. The legacy `dsh-tui` profile declaration is retained for existing installations.
 

package/docs/getting-started.ja.md

@@ -5,7 +5,7 @@
 
 ## インストール
 
-DeepSeek Harness は `>=0.2.1-alpha.2`、Node.js は 24.16.0 以上が宣言上の下限です。新しい DSH の版名だけでは拒否せず、実際のホスト API と隔離した動作試験で互換性を確認します。
+公式 DeepSeek Harness の現在のソースと Node.js 24.16.0 以上を使用します。DSH の版名による固定判定はせず、実際のホスト API と解決したソース revision に対する隔離試験で互換性を確認します。[検証範囲](current-upstream-compatibility-report.md)を参照してください。
 
 DeepSeek Harnessのcheckoutから導入します:
 

package/docs/getting-started.md

@@ -5,7 +5,7 @@
 
 ## Install
 
-DeepSeek Harness `0.2.1-alpha.2` and Node.js 24.16.0 or newer are required.
+Use current official DeepSeek Harness and Node.js 24.16.0 or newer. Compatibility is checked against actual host APIs and the resolved upstream source revision, not a fixed DSH release label. See [verified scope](current-upstream-compatibility-report.md).
 
 From a DeepSeek Harness checkout:
 

package/docs/memory-lifecycle-verification.md

@@ -8,14 +8,15 @@
 
 ## 再現手順
 
-Node.jsと固定版DSHを用意し、その実体を指定する。以下のパスは実際のインストール先へ置き換える。
+Node.js と公式 DSH の現在のソースを用意する。`node scripts/resolve-dsh-upstream.mjs` で一度解決した SHA を公式 checkout に適用し、その checkout の frozen install と `pnpm run build:artifacts` を完了させる。以下のパスはその実体へ置き換える。SHA は互換対象の固定値ではなく、この実行で検証するソースの識別子である。
 
 ```sh
-export DSH_BIN=/absolute/path/to/node_modules/.bin/dsh
-export KIOKUKO_DSH_PACKAGE_ROOT=/absolute/path/to/node_modules
+export KIOKUKO_EXPECTED_DSH_SHA=$(git -C /absolute/path/to/official-dsh rev-parse HEAD)
+node scripts/stage-dsh-upstream.mjs /absolute/path/to/official-dsh tests/fixtures/dsh-runtime "$KIOKUKO_EXPECTED_DSH_SHA" .
+export DSH_BIN="$PWD/tests/fixtures/dsh-runtime/node_modules/.bin/dsh"
+export KIOKUKO_DSH_PACKAGE_ROOT="$PWD/tests/fixtures/dsh-runtime/node_modules"
 export KIOKUKO_REQUIRE_DSH_NATIVE=1
 export KIOKUKO_REQUIRE_DSH_CLI=1
-export KIOKUKO_EXPECTED_DSH_VERSION=0.2.1-alpha.2
 export KIOKUKO_REPEATED_REPORT_DIR=/tmp/kiokuko-lifecycle-results
 export KIOKUKO_DSH_EVIDENCE_PATH=/tmp/kiokuko-package-lifecycle.json
 

package/docs/tool-exposure.md

@@ -1,5 +1,7 @@
 # Automatic native tool exposure
 
+On hosts where the executor supplies schemas after the prompt waterfall, Kiokuko preserves the provider's admitted tools and reports `unsupported_runtime` for presentation reduction. `phase`, `lean`, and `auto` do not claim tool or description savings on that API. Native permissions, task guards, and scoped protocol tools remain authoritative; no older runtime is selected.
+
 `toolExposure.mode` controls only which Kiokuko-owned definitions appear in native model requests. The default is `auto`. On all DSH native provider connections, normal chat, research, analysis, writing and review omit the nine Kiokuko model tools. Normal build, debug and devops use lean descriptions with the current phase and `nextAction` policy. An active Enno selection takes precedence over task type and uses that same policy. Native and external tools remain available. Configure explicitly with:
 
 ```yaml

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kiokuko-dsh",
-  "version": "0.2.22",
+  "version": "0.2.24",
   "description": "Kiokuko plugin for DeepSeek Harness",
   "type": "module",
   "license": "MIT",
@@ -290,7 +290,8 @@
     "@deepseek-ai/dsh-llm-pi-ai": "*",
     "@huggingface/hub": "^2.16.1",
     "@huggingface/transformers": "^4.2.0",
-    "sqlite-vec": "^0.1.9"
+    "sqlite-vec": "^0.1.9",
+    "@deepseek-ai/dsh-tools": "*"
   },
   "peerDependenciesMeta": {
     "@huggingface/hub": {
@@ -316,6 +317,9 @@
     },
     "@ai-sdk/provider": {
       "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
     }
   },
   "devDependencies": {

package/scripts/repair-continuation-source.mjs

@@ -55,19 +55,15 @@ function catalogCandidates(configured) {
     )
     return [...new Set(candidates)]
   }
-  const packageRoot = process.env.KIOKUKO_DSH_PACKAGE_ROOT
-  if (packageRoot !== undefined) {
-    candidates.push(join(resolve(packageRoot), '@deepseek-ai/dsh-session-format-catalog/lib/index.js'))
-  }
-  const repositoryRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..')
-  candidates.push(resolve(repositoryRoot, 'tests/fixtures/dsh-runtime/node_modules/@deepseek-ai/dsh-session-format-catalog/lib/index.js'))
-  return [...new Set(candidates)]
+  return []
 }
 
-async function loadCatalog(configured) {
-  const errors = []
+export async function loadCatalog(configured) {
   // An explicit catalog must not be silently replaced by another installation.
   const explicit = configured ?? process.env.KIOKUKO_SESSION_FORMAT_CATALOG
+    ?? (process.env.KIOKUKO_DSH_PACKAGE_ROOT !== undefined
+      ? join(resolve(process.env.KIOKUKO_DSH_PACKAGE_ROOT), '@deepseek-ai/dsh-session-format-catalog/lib/index.js')
+      : undefined)
   if (explicit !== undefined) {
     const candidate = catalogCandidates(explicit).find(path => existsSync(path))
     if (!candidate) throw new Error('configured session-format catalog does not exist')
@@ -75,25 +71,15 @@ async function loadCatalog(configured) {
     if (!module.sessionFormatCatalog) throw new Error('catalog module has no sessionFormatCatalog export')
     return { catalog: module.sessionFormatCatalog, createCatalogWithChildren: module.createSessionFormatCatalogWithChildren }
   }
+  // Production repair resolves the installed host package only. A test fixture
+  // is never an implicit substitute for a missing or broken host installation.
   try {
     const module = await import('@deepseek-ai/dsh-session-format-catalog')
-    if (module.sessionFormatCatalog) return { catalog: module.sessionFormatCatalog, createCatalogWithChildren: module.createSessionFormatCatalogWithChildren }
-  } catch (error) { errors.push(error) }
-  for (const candidate of catalogCandidates()) {
-    if (!existsSync(candidate)) continue
-    try {
-      const module = await import(pathToFileURL(candidate).href)
-      if (module.sessionFormatCatalog !== undefined) return { catalog: module.sessionFormatCatalog, createCatalogWithChildren: module.createSessionFormatCatalogWithChildren }
-      errors.push(new Error(`catalog module has no sessionFormatCatalog export: ${candidate}`))
-    } catch (error) {
-      errors.push(error)
-    }
+    if (!module.sessionFormatCatalog) throw new Error('catalog module has no sessionFormatCatalog export')
+    return { catalog: module.sessionFormatCatalog, createCatalogWithChildren: module.createSessionFormatCatalogWithChildren }
+  } catch (cause) {
+    throw new Error('Unable to load installed @deepseek-ai/dsh-session-format-catalog; set KIOKUKO_SESSION_FORMAT_CATALOG or --catalog to the intended built catalog module', { cause })
   }
-  const reason = errors.at(-1)
-  throw new Error(
-    'Unable to load @deepseek-ai/dsh-session-format-catalog; set KIOKUKO_SESSION_FORMAT_CATALOG or --catalog to a built catalog module',
-    { cause: reason },
-  )
 }
 
 function requireRegularFile(path, label) {