lody 0.84.0 → 0.85.0

package/dist/chunks/{profile-RfMzWliN.js → profile-Cxxl5hCq.js}

@@ -19,12 +19,20 @@ const DEEPSEEK_HARNESS_MODELS = [
   {
     modelId: "deepseek-v4-flash",
     name: "DeepSeek-V4-Flash",
-    description: "Faster DeepSeek Harness coding model."
+    description: "Faster DeepSeek Harness coding model.",
+    inputModalities: ["text"]
   },
   {
     modelId: "deepseek-v4-pro",
     name: "DeepSeek-V4-Pro",
-    description: "More capable DeepSeek Harness coding model."
+    description: "More capable DeepSeek Harness coding model.",
+    inputModalities: ["text"]
+  },
+  {
+    modelId: "deepseek-v4-flash-vision-exp",
+    name: "DeepSeek-V4-Flash-Vision-Exp",
+    description: "Experimental multimodal DeepSeek model with image understanding.",
+    inputModalities: ["text", "image"]
   }
 ];
 const DEEPSEEK_HARNESS_REASONING_OPTIONS = [
@@ -55,8 +63,8 @@ const DEEPSEEK_HARNESS_AGENT_PRESETS = [
   }
 ];
 const ACP_EXTENSION_DSH_VERSION = "0.1.0";
-const DEEPSEEK_HARNESS_VERSION = "0.1.0-rc.7";
-const ACP_EXTENSION_DSH_PROFILE_REVISION = "v3";
+const DEEPSEEK_HARNESS_VERSION = "0.1.1-rc.1";
+const ACP_EXTENSION_DSH_PROFILE_REVISION = "v5";
 const ACP_EXTENSION_DSH_SESSION_ROOT_ENV = "ACP_EXTENSION_DSH_SESSION_ROOT";
 const ACP_EXTENSION_DSH_QUERY_PATH_ENV = "ACP_EXTENSION_DSH_QUERY_PATH";
 const DEEPSEEK_HARNESS_DEFAULT_SESSION_COMPRESSION = "zstd";
@@ -67,6 +75,7 @@ const DEEPSEEK_HARNESS_NPX_PACKAGES = [
   "@deepseek-ai/dsh-session-persistence-jsonl",
   "@deepseek-ai/dsh-session-checkpoint-policy",
   "@deepseek-ai/dsh-session-query-sqlite",
+  "@deepseek-ai/dsh-attachment-local",
   "@deepseek-ai/dsh-llm-deepseek",
   "@deepseek-ai/dsh-sandbox-local",
   "@deepseek-ai/dsh-sandbox-policy",
@@ -122,6 +131,7 @@ const DEEPSEEK_HARNESS_NPX_PACKAGES = [
   "@deepseek-ai/dsh-terminal",
   "@deepseek-ai/dsh-terminal-bash",
   "@deepseek-ai/dsh-tool-bash-persistent",
+  "@deepseek-ai/dsh-tool-pwsh-persistent",
   "@deepseek-ai/dsh-fs-local",
   "@deepseek-ai/dsh-tool-str-replace-editor",
   // Pin the complete transitive DSH dependency and peer closure too. Harness
@@ -196,15 +206,16 @@ function createDeepSeekHarnessCordisConfig(adapterPath, presetRoot, sessionCompr
   name: '@deepseek-ai/dsh-session-query-sqlite'
   config:
     path: !!js process.env.${ACP_EXTENSION_DSH_QUERY_PATH_ENV}
+    openAt: never
+
+- id: attachment-local
+  name: '@deepseek-ai/dsh-attachment-local'
 
 - id: llm-deepseek
   name: '@deepseek-ai/dsh-llm-deepseek'
   config:
     thinking: enabled
     reasoningEffort: max
-    models:
-      - id: deepseek-v4-flash
-      - id: deepseek-v4-pro
 
 - id: sandbox
   name: '@deepseek-ai/dsh-sandbox-local'

package/dist/chunks/{review-viewer-BZC6lRid.js → review-viewer-oYzxdgq4.js}

@@ -32,7 +32,7 @@ import "perf_hooks";
 import "net";
 import "tls";
 import "url";
-import "./profile-RfMzWliN.js";
+import "./profile-Cxxl5hCq.js";
 import "assert";
 import "fs/promises";
 import "better-sqlite3";
@@ -79,7 +79,7 @@ let __tla = Promise.all([
     }
   })()
 ]).then(async () => {
-  const reviewViewerVersion = "0.84.0";
+  const reviewViewerVersion = "0.85.0";
   const reviewViewerSha256 = "2ae06d0f134be0ae82e0a9962179037cbee997a59c4240753e44e77b11d92dd6";
   const reviewViewerFileName = "standalone.html";
   const DEFAULT_CDN_BASES = [

package/dist/deepseek-acp.js

@@ -2,13 +2,15 @@ import { randomUUID, createHash } from "node:crypto";
 import { isAbsolute } from "node:path";
 import { Readable, Writable } from "node:stream";
 import { n as ndJsonStream, A as AgentSideConnection, R as RequestError, P as PROTOCOL_VERSION } from "./chunks/acp-CrvzLY5A.js";
-import { b as DEEPSEEK_HARNESS_MODELS, D as DEEPSEEK_HARNESS_PERMISSION_MODES, c as DEEPSEEK_HARNESS_REASONING_OPTIONS, e as ACP_EXTENSION_DSH_VERSION, a as DEEPSEEK_HARNESS_AGENT_PRESETS } from "./chunks/profile-RfMzWliN.js";
+import { D as DEEPSEEK_HARNESS_PERMISSION_MODES, c as DEEPSEEK_HARNESS_REASONING_OPTIONS, e as ACP_EXTENSION_DSH_VERSION, a as DEEPSEEK_HARNESS_AGENT_PRESETS } from "./chunks/profile-Cxxl5hCq.js";
 import "./chunks/schemas-Du3qLZPS.js";
 const name = "acp-extension-dsh";
 const inject = [
   "agents",
   "agentPresets",
+  "attachments",
   "loader",
+  "llm",
   "permissionPresets",
   "sessionPersistence",
   "sessionQuery"
@@ -22,7 +24,24 @@ const MCP_TOOL_CALL_TIMEOUT_MS = 6e4;
 const MCP_SERVER_NAME_MAX_LENGTH = 32;
 const MCP_SERVER_NAME_HASH_LENGTH = 8;
 const INVALID_MCP_SERVER_NAME_CHARS = /[^A-Za-z0-9_-]/gu;
-const MODEL_IDS = new Set(DEEPSEEK_HARNESS_MODELS.map((model) => model.modelId));
+const IMAGE_MEDIA_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/webp",
+  "image/gif"
+];
+const CANONICAL_BASE64 = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u;
+const IMAGE_ADMISSION_ERROR_CODES = /* @__PURE__ */ new Set([
+  "TOO_MANY_IMAGES",
+  "IMAGES_TOO_LARGE",
+  "UNSUPPORTED_IMAGE_TYPE",
+  "INVALID_IMAGE_BASE64",
+  "INVALID_IMAGE",
+  "IMAGE_TYPE_MISMATCH",
+  "IMAGE_TOO_LARGE",
+  "IMAGE_TOO_MANY_PIXELS",
+  "IMAGE_DIMENSION_TOO_LARGE"
+]);
 const PERMISSION_MODE_IDS = new Set(DEEPSEEK_HARNESS_PERMISSION_MODES.map((mode) => mode.id));
 const REASONING_EFFORT_IDS = new Set(DEEPSEEK_HARNESS_REASONING_OPTIONS.map((effort) => effort.value));
 function invalidParams(detail) {
@@ -38,9 +57,6 @@ function resolveAdapterConfig(config) {
   const provider = nonEmptyString(config?.provider, "deepseek-official");
   const model = nonEmptyString(config?.model, "deepseek-v4-pro");
   const reasoningEffort = config?.reasoningEffort ?? "max";
-  if (!MODEL_IDS.has(model)) {
-    throw new Error(`acp-extension-dsh: unsupported model ${JSON.stringify(model)}`);
-  }
   if (!REASONING_EFFORT_IDS.has(reasoningEffort)) {
     throw new Error(`acp-extension-dsh: unsupported reasoning effort ${JSON.stringify(reasoningEffort)}`);
   }
@@ -51,6 +67,27 @@ function resolveAdapterConfig(config) {
     ...config?.stream ? { stream: config.stream } : {}
   };
 }
+async function loadHarnessModels(ctx, provider) {
+  const llm = ctx.get("llm");
+  if (!llm)
+    throw new Error("acp-extension-dsh: no Harness LLM catalog is mounted");
+  const listed = await llm.listModels(provider);
+  const models = [];
+  const ids = /* @__PURE__ */ new Set();
+  for (const model of listed) {
+    if (model.provider !== provider || !model.id.trim())
+      continue;
+    if (ids.has(model.id)) {
+      throw new Error(`acp-extension-dsh: duplicate model ${JSON.stringify(model.id)} for provider ${JSON.stringify(provider)}`);
+    }
+    ids.add(model.id);
+    models.push({
+      ...model,
+      ...model.inputModalities ? { inputModalities: [...model.inputModalities] } : {}
+    });
+  }
+  return models;
+}
 async function loadMcpClientPlugin(agentContext) {
   const module = agentContext.loader.unwrapExports(await agentContext.loader.import(MCP_CLIENT_PACKAGE));
   if (typeof module !== "object" || module === null || !("apply" in module) || typeof module.apply !== "function") {
@@ -202,9 +239,9 @@ function configOptions(record) {
       category: "model",
       type: "select",
       currentValue: record.selection.current.model,
-      options: DEEPSEEK_HARNESS_MODELS.map((model) => ({
-        value: model.modelId,
-        name: model.name,
+      options: record.models.map((model) => ({
+        value: model.id,
+        name: model.name ?? model.id,
         description: model.description ?? null
       }))
     },
@@ -233,28 +270,97 @@ function modeState(record) {
     }))
   };
 }
-function acpPromptToText(prompt) {
-  return prompt.flatMap((block) => {
-    if (block.type === "text")
-      return [block.text];
-    if (block.type === "resource_link") {
-      return [
-        `
+function modelSupportsImages(models, modelId) {
+  return models.some((model) => model.id === modelId && model.inputModalities?.includes("image"));
+}
+function imageMediaType(value) {
+  return IMAGE_MEDIA_TYPES.includes(value) ? value : void 0;
+}
+function decodePromptImage(block) {
+  const mediaType = imageMediaType(block.mimeType);
+  if (!mediaType) {
+    throw invalidParams("image mimeType must be image/png, image/jpeg, image/webp, or image/gif");
+  }
+  if (!block.data || !CANONICAL_BASE64.test(block.data)) {
+    throw invalidParams("image data must be canonical base64");
+  }
+  const decoded = Buffer.from(block.data, "base64");
+  if (decoded.toString("base64") !== block.data) {
+    throw invalidParams("image data must be canonical base64");
+  }
+  return { data: new Uint8Array(decoded), mediaType };
+}
+function isImageAdmissionError(error) {
+  return error instanceof Error && "code" in error && typeof error.code === "string" && IMAGE_ADMISSION_ERROR_CODES.has(error.code);
+}
+async function admitAcpPrompt(prompt, models, modelId, attachments) {
+  const images = [];
+  for (const block of prompt) {
+    switch (block.type) {
+      case "text":
+      case "resource_link":
+        break;
+      case "image":
+        if (!modelSupportsImages(models, modelId)) {
+          throw invalidParams(`model ${JSON.stringify(modelId)} does not support image input`);
+        }
+        images.push(decodePromptImage(block));
+        break;
+      case "audio":
+        throw invalidParams("audio prompt content is not supported");
+      case "resource":
+        throw invalidParams("embedded resource prompt content is not supported");
+      default:
+        throw invalidParams("unsupported ACP prompt content");
+    }
+  }
+  let refs = [];
+  if (images.length > 0) {
+    if (!attachments)
+      throw internalError("no Harness attachment store is mounted");
+    try {
+      refs = await attachments.saveImages(images);
+    } catch (error) {
+      if (isImageAdmissionError(error))
+        throw invalidParams(error.message);
+      throw internalError("unable to persist the prompt image batch");
+    }
+  }
+  const content = [];
+  let pendingText = "";
+  let imageIndex = 0;
+  const flushText = () => {
+    if (!pendingText)
+      return;
+    content.push({ type: "text", text: pendingText });
+    pendingText = "";
+  };
+  for (const block of prompt) {
+    if (block.type === "text") {
+      pendingText += block.text;
+    } else if (block.type === "resource_link") {
+      pendingText += `
 [resource_link name=${JSON.stringify(block.name)} uri=${JSON.stringify(block.uri)}]
-`
-      ];
+`;
+    } else if (block.type === "image") {
+      flushText();
+      const attachment = refs[imageIndex++];
+      if (!attachment)
+        throw internalError("the attachment store returned an incomplete image batch");
+      content.push({ type: "image", attachment });
     }
-    return [];
-  }).join("");
-}
-function promptHasUnsupportedContent(prompt) {
-  return prompt.some((block) => block.type !== "text" && block.type !== "resource_link");
+  }
+  flushText();
+  if (!content.some((block) => block.type === "image" || block.type === "text" && block.text.trim().length > 0)) {
+    throw invalidParams("empty prompt");
+  }
+  return content;
 }
-function createUserMessage(text) {
+function createUserMessage(id, content) {
   return Object.freeze({
-    id: randomUUID(),
+    id,
     role: "user",
-    content: [Object.freeze({ type: "text", text })],
+    content: Object.freeze(content.map((block) => Object.freeze(block))),
     source: Object.freeze({ kind: "user" })
   });
 }
@@ -482,7 +588,7 @@ function apply(ctx, rawConfig) {
         throw invalidParams(`failed to select agent preset ${JSON.stringify(value)}: ${errorChain(error)}`);
       });
     } else if (params.configId === MODEL_CONFIG_ID) {
-      assertAllowed(value, MODEL_IDS, "model");
+      assertAllowed(value, new Set(record.models.map((model) => model.id)), "model");
       record.selection.current = { ...record.selection.current, model: value };
     } else if (params.configId === REASONING_EFFORT_CONFIG_ID) {
       assertAllowed(value, REASONING_EFFORT_IDS, "reasoning effort");
@@ -498,17 +604,22 @@ function apply(ctx, rawConfig) {
   const makeAgent = (connection) => {
     conn = connection;
     return {
-      initialize(_params) {
-        return Promise.resolve({
+      async initialize(_params) {
+        const models = await loadHarnessModels(ctx, config.provider);
+        return {
           protocolVersion: PROTOCOL_VERSION,
           agentInfo: { name: "acp-extension-dsh", version: ACP_EXTENSION_DSH_VERSION },
           agentCapabilities: {
-            promptCapabilities: { image: false, audio: false, embeddedContext: false },
+            promptCapabilities: {
+              image: models.some((model) => modelSupportsImages(models, model.id)),
+              audio: false,
+              embeddedContext: false
+            },
             mcpCapabilities: { http: true },
             sessionCapabilities: { close: {} }
           },
           authMethods: []
-        });
+        };
       },
       authenticate(_params) {
         return Promise.resolve();
@@ -516,6 +627,12 @@ function apply(ctx, rawConfig) {
       async newSession(params) {
         assertOpen();
         validateSessionParams(params);
+        let models;
+        try {
+          models = await loadHarnessModels(ctx, config.provider);
+        } catch (error) {
+          throw internalError(`failed to list models: ${errorChain(error)}`);
+        }
         const sessionId = randomUUID();
         const selection = {
           current: {
@@ -575,13 +692,22 @@ function apply(ctx, rawConfig) {
           permissionMode,
           agentPreset: mountedPreset,
           agentPresetOptions,
+          models,
           started: false
         };
         sessions.set(sessionId, record);
         return {
           sessionId,
           modes: modeState(record),
-          configOptions: configOptions(record)
+          configOptions: configOptions(record),
+          models: {
+            currentModelId: record.selection.current.model,
+            availableModels: record.models.map((model) => ({
+              modelId: model.id,
+              name: model.name ?? model.id,
+              description: model.description ?? null
+            }))
+          }
         };
       },
       setSessionMode(params) {
@@ -596,20 +722,29 @@ function apply(ctx, rawConfig) {
         const record = requireSession(params.sessionId);
         if (record.inflight)
           throw invalidParams("a prompt is already in flight for this session");
-        if (promptHasUnsupportedContent(params.prompt)) {
-          throw invalidParams("only text and resource_link prompt content is supported");
-        }
-        const text = acpPromptToText(params.prompt);
-        if (!text.trim())
-          throw invalidParams("empty prompt");
         if (ctx.agents.get(record.agent.id) !== record.agent) {
           throw internalError("prompt was not queued: the agent was disposed outside the bridge");
         }
-        const message = createUserMessage(text);
-        record.started = true;
-        const stopReason = await new Promise((resolve, reject) => {
-          const inflight = { resolve, reject, messageId: message.id };
-          record.inflight = inflight;
+        const attachments = ctx.get("attachments");
+        const messageId = randomUUID();
+        let resolvePrompt;
+        let rejectPrompt;
+        const completion = new Promise((resolve, reject) => {
+          resolvePrompt = resolve;
+          rejectPrompt = reject;
+        });
+        const inflight = {
+          resolve: resolvePrompt,
+          reject: rejectPrompt,
+          messageId
+        };
+        record.inflight = inflight;
+        try {
+          const content = await admitAcpPrompt(params.prompt, record.models, record.selection.current.model, attachments);
+          if (record.inflight !== inflight)
+            return { stopReason: await completion };
+          const message = createUserMessage(messageId, content);
+          record.started = true;
           try {
             record.agent.followup(message);
           } catch (error) {
@@ -624,8 +759,12 @@ function apply(ctx, rawConfig) {
             const end = inflight.endReason;
             inflight.resolve(end ? end.kind === "max-tokens" ? "end_turn" : turnEndToStopReason(end) : "cancelled");
           });
-        });
-        return { stopReason };
+        } catch (error) {
+          if (record.inflight === inflight)
+            record.inflight = void 0;
+          throw error;
+        }
+        return { stopReason: await completion };
       },
       cancel(params) {
         const record = sessions.get(params.sessionId);

package/dist/deepseek-agent-presets/code/agent.cordis.yml

@@ -198,9 +198,10 @@
         toolName: subagent_fork
         backgroundMode: continuable
 
-    # Production dsh does not install these optional providers. An opting-in
-    # Profile mounts each provider once on the host plane; copy this preset,
-    # then remove `disabled` from the matching tool row.
+    # Production dsh does not install these optional providers. Install the
+    # matching Bundle in this Profile and restart the Host, then copy this
+    # preset and remove `disabled` from the matching tool row. Host availability
+    # alone grants no tool.
     - id: tool-subagent-codex
       name: '@deepseek-ai/dsh-tool-subagent'
       disabled: true

package/dist/deepseek-agent-presets/cordis/agent.cordis.yml

@@ -185,9 +185,10 @@
         toolName: subagent_fork
         backgroundMode: continuable
 
-    # Production dsh does not install these optional providers. An opting-in
-    # Profile mounts each provider once on the host plane; copy this preset,
-    # then remove `disabled` from the matching tool row.
+    # Production dsh does not install these optional providers. Install the
+    # matching Bundle in this Profile and restart the Host, then copy this
+    # preset and remove `disabled` from the matching tool row. Host availability
+    # alone grants no tool.
     - id: tool-subagent-codex
       name: '@deepseek-ai/dsh-tool-subagent'
       disabled: true

package/dist/deepseek-agent-presets/cordis/skills/editing-cordis-compositions/SKILL.md

@@ -123,7 +123,16 @@ After a clean mount-validation, ask the user to start a session on the new prese
 
 ## Native product subagents
 
-Codex and Claude Code providers belong on the host plane but are not installed by production `dsh`. The active Profile must install and mount the selected provider before a preset can expose its ordinary delegation-tool row; never move a product provider into the preset and never add a product-specific settings field.
+Codex and Claude Code providers are independent optional Profile Bundles. Install only the products a Profile needs, then restart the Profile so its Host registers those providers:
+
+```sh
+dsh plugin --profile <name> add @deepseek-ai/dsh-subagent-codex
+dsh plugin --profile <name> add @deepseek-ai/dsh-subagent-claude-code
+dsh plugin --profile <name> remove @deepseek-ai/dsh-subagent-codex
+dsh plugin --profile <name> remove @deepseek-ai/dsh-subagent-claude-code
+```
+
+Each Bundle owns its Host availability; the preset separately grants one Agent its ordinary delegation tool. Never move a product provider into the preset and never add a product-specific settings field. Removing one package withdraws only that provider on the next Profile start.
 
 Copy these disabled templates from a shipped full preset and remove `disabled` only for the products the user requested:
 
@@ -147,7 +156,9 @@ Copy these disabled templates from a shipped full preset and remove `disabled` o
     maxDepth: provider-managed
 ```
 
-The two rows are independent. Leaving both disabled preserves the copied preset, enabling one exposes only that product tool, and enabling both exposes both. Production `dsh` does not install or mount either optional provider: before enabling a row, the Profile must install the matching `@deepseek-ai/dsh-subagent-codex` or `@deepseek-ai/dsh-subagent-claude-code` package and mount it once on the host plane. A preset cannot provide that host dependency. `backgroundMode: one-shot` keeps omitted or `false` calls in the foreground and lets explicit `run_in_background: true` return a generic Job id. Full presets already carry `tool-jobs`, while the base host carries the job registry; retain both so `job_output`, `job_list`, `job_kill`, cancellation, and completion notices stay available. The host must also provide `codex` or `claude` on `PATH`; the preset does not install, authenticate, select a model for, or probe either product.
+For additional named Codex or Claude Code instances, mount a separate host-plane provider row for each instance with a unique `providerName`, then add a separate preset tool row whose `provider` exactly matches that name and whose `toolName` is also unique. Keep the shipped rows for the default `codex` and `claude-code` names; do not reuse one tool row for several providers or derive either name from permission or environment settings.
+
+The two rows are independent. Leaving both disabled preserves the copied preset, enabling one exposes only that product tool, and enabling both exposes both. Production `dsh` does not install either optional provider: before enabling a row, install the matching `@deepseek-ai/dsh-subagent-codex` or `@deepseek-ai/dsh-subagent-claude-code` Bundle in the Profile and restart it. Each Bundle registers its dormant default provider and exclusively uses its pinned package-local platform CLI; additional named instances use extra host-plane rows from the same installed package. A preset cannot provide that host dependency. `backgroundMode: one-shot` keeps omitted or `false` calls in the foreground and lets explicit `run_in_background: true` return a generic Job id. Full presets already carry `tool-jobs`, while the base host carries the job registry; retain both so `job_output`, `job_list`, `job_kill`, cancellation, and completion notices stay available. Installing a Bundle or composing a preset row does not start a product, authenticate an account, select a model, probe credentials, or manage native product settings.
 
 ## What not to move into a preset
 

package/dist/deepseek-agent-presets/minimal/agent.cordis.yml

@@ -3,7 +3,8 @@
 # The persona is the complete system prompt, so global identity, Web orientation,
 # tool guidance, and later assembly listeners cannot add prompt text. Runtime
 # context snapshots are suppressed for this preset, and the model composes only
-# persistent `bash` and `str_replace_editor`. Context compaction is absent.
+# the persistent shell (`bash` on POSIX, `pwsh` on win32) and
+# `str_replace_editor`. Context compaction is absent.
 
 - id: persona
   name: '@deepseek-ai/dsh-persona'
@@ -15,6 +16,8 @@
 # The PTY registry is an agent-owned service, so it lives in an entry-local
 # realm. The backend still consumes the host sandbox policy and subprocess
 # implementation, while the tool registers into this agent's scoped catalog.
+# Exactly one shell stack mounts per host: the bash stack gates off win32 and
+# its pwsh twin gates off POSIX, mirroring the one-shot shell rows.
 - id: persistent-shell
   name: cordis:group
   group: true
@@ -26,11 +29,13 @@
 
     - id: terminal-bash
       name: '@deepseek-ai/dsh-terminal-bash'
+      disabled: !!js process.platform === 'win32'
       config:
         timeoutMs: 300000
 
     - id: persistent-bash
       name: '@deepseek-ai/dsh-tool-bash-persistent'
+      disabled: !!js process.platform === 'win32'
       config:
         timeoutMs: 300000
         description: |-
@@ -43,6 +48,27 @@
           * Please avoid commands that may produce a very large amount of output.
           * Please run long lived commands in the background, e.g. 'sleep 10 &' or start a server in the background.
 
+    - id: terminal-pwsh
+      name: '@deepseek-ai/dsh-terminal-bash'
+      disabled: !!js process.platform !== 'win32'
+      config:
+        shellDialect: pwsh
+        timeoutMs: 300000
+
+    - id: persistent-pwsh
+      name: '@deepseek-ai/dsh-tool-pwsh-persistent'
+      disabled: !!js process.platform !== 'win32'
+      config:
+        timeoutMs: 300000
+        description: |-
+          Run commands in a PowerShell shell
+          * When invoking this tool, the contents of the "command" parameter does NOT need to be XML-escaped.
+          * You don't have access to the internet via this tool.
+          * State is persistent across command calls and discussions with the user.
+          * Use native Windows paths (C:\...) and $env:NAME variables; this is PowerShell, not bash.
+          * Please avoid commands that may produce a very large amount of output.
+          * Please run long lived commands in the background, e.g. 'Start-Job' or start a server with Start-Process.
+
 # The bare local filesystem shadows the host's sandboxed provider only for this
 # preset. The editor shares that realm and requires absolute paths.
 - id: filesystem

package/dist/deepseek-agent-presets/standard/agent.cordis.yml

@@ -197,9 +197,10 @@
         toolName: subagent_fork
         backgroundMode: continuable
 
-    # Production dsh does not install these optional providers. An opting-in
-    # Profile mounts each provider once on the host plane; copy this preset,
-    # then remove `disabled` from the matching tool row.
+    # Production dsh does not install these optional providers. Install the
+    # matching Bundle in this Profile and restart the Host, then copy this
+    # preset and remove `disabled` from the matching tool row. Host availability
+    # alone grants no tool.
     - id: tool-subagent-codex
       name: '@deepseek-ai/dsh-tool-subagent'
       disabled: true

package/dist/grok-acp.js

@@ -200,6 +200,45 @@ function permissionNotification(clientIdentifier, mode) {
   if (!mapped) return void 0;
   return extensionNotification("permissionNotification", { clientIdentifier, ...mapped });
 }
+function stripLodySessionConfig(meta) {
+  if (!meta || typeof meta !== "object") return meta;
+  const lody = meta.lody;
+  if (!lody || typeof lody !== "object" || !Object.hasOwn(lody, "sessionConfig")) return meta;
+  const { sessionConfig: _sessionConfig, ...remainingLody } = lody;
+  const { lody: _lody, ...remainingMeta } = meta;
+  return Object.keys(remainingLody).length > 0 ? { ...remainingMeta, lody: remainingLody } : remainingMeta;
+}
+function readLodySessionConfigOption(meta, configId) {
+  if (!meta || typeof meta !== "object") return void 0;
+  const sessionConfig = meta.lody?.sessionConfig;
+  if (!sessionConfig || typeof sessionConfig !== "object" || sessionConfig.version !== 1 || !sessionConfig.configOptionValues || typeof sessionConfig.configOptionValues !== "object") {
+    return void 0;
+  }
+  const value = sessionConfig.configOptionValues[configId];
+  return typeof value === "string" || typeof value === "boolean" ? value : void 0;
+}
+function translateSessionStart(message) {
+  const params = message.params ?? {};
+  const permissionMode = readLodySessionConfigOption(params._meta, "permission_mode");
+  const mapped = typeof permissionMode === "string" ? PERMISSION_MODES[permissionMode] : void 0;
+  if (!mapped) return { message, permissionMode: void 0, notification: void 0 };
+  const clientIdentifier = params._meta?.clientIdentifier;
+  const translated = {
+    ...message,
+    params: {
+      ...params,
+      _meta: {
+        ...stripLodySessionConfig(params._meta),
+        yoloMode: mapped.yolo_mode
+      }
+    }
+  };
+  return {
+    message: translated,
+    permissionMode,
+    notification: mapped.auto_mode && typeof clientIdentifier === "string" ? permissionNotification(clientIdentifier, permissionMode) : void 0
+  };
+}
 class GrokAcpCompatibilityProxy {
   constructor() {
     this.sessions = /* @__PURE__ */ new Map();
@@ -236,8 +275,12 @@ class GrokAcpCompatibilityProxy {
   handleClient(message) {
     if (!message || typeof message !== "object") return { toRuntime: [message], toClient: [] };
     const params = message.params ?? {};
-    if (message.method === "session/new" || message.method === "session/load" || message.method === "session/resume") {
+    if (message.method === "session/new" || message.method === "session/load" || message.method === "session/resume" || message.method === "session/fork") {
       const clientIdentifier = params._meta?.clientIdentifier;
+      const translated2 = translateSessionStart(message);
+      if (translated2.permissionMode && typeof clientIdentifier === "string") {
+        this.permissionModes.set(clientIdentifier, translated2.permissionMode);
+      }
       if (message.id !== void 0) {
         this.pending.set(message.id, {
           kind: "session",
@@ -246,7 +289,10 @@ class GrokAcpCompatibilityProxy {
           clientIdentifier
         });
       }
-      return { toRuntime: [message], toClient: [] };
+      return {
+        toRuntime: translated2.notification ? [translated2.notification, translated2.message] : [translated2.message],
+        toClient: []
+      };
     }
     if (message.method === "session/prompt") {
       if (message.id !== void 0) {

package/dist/index.js

@@ -42,7 +42,7 @@ import { performance as performance$1 } from "perf_hooks";
 import require$$0$9 from "net";
 import require$$4$2 from "tls";
 import require$$7$2, { fileURLToPath as fileURLToPath$1, pathToFileURL as pathToFileURL$1 } from "url";
-import { D as DEEPSEEK_HARNESS_PERMISSION_MODES, a as DEEPSEEK_HARNESS_AGENT_PRESETS, b as DEEPSEEK_HARNESS_MODELS, c as DEEPSEEK_HARNESS_REASONING_OPTIONS, A as ACP_EXTENSION_DSH_CAPABILITY_SOURCE_VERSION, d as createDeepSeekHarnessCordisConfig, e as ACP_EXTENSION_DSH_VERSION, f as ACP_EXTENSION_DSH_PROFILE_REVISION, g as ACP_EXTENSION_DSH_QUERY_PATH_ENV, h as ACP_EXTENSION_DSH_SESSION_ROOT_ENV, i as DEEPSEEK_HARNESS_NPX_PACKAGES, j as DEEPSEEK_HARNESS_VERSION, k as DEEPSEEK_HARNESS_DEFAULT_SESSION_COMPRESSION } from "./chunks/profile-RfMzWliN.js";
+import { D as DEEPSEEK_HARNESS_PERMISSION_MODES, a as DEEPSEEK_HARNESS_AGENT_PRESETS, b as DEEPSEEK_HARNESS_MODELS, c as DEEPSEEK_HARNESS_REASONING_OPTIONS, A as ACP_EXTENSION_DSH_CAPABILITY_SOURCE_VERSION, d as createDeepSeekHarnessCordisConfig, e as ACP_EXTENSION_DSH_VERSION, f as ACP_EXTENSION_DSH_PROFILE_REVISION, g as ACP_EXTENSION_DSH_QUERY_PATH_ENV, h as ACP_EXTENSION_DSH_SESSION_ROOT_ENV, i as DEEPSEEK_HARNESS_NPX_PACKAGES, j as DEEPSEEK_HARNESS_VERSION, k as DEEPSEEK_HARNESS_DEFAULT_SESSION_COMPRESSION } from "./chunks/profile-Cxxl5hCq.js";
 import assert from "assert";
 import * as fs$2 from "fs/promises";
 import fs__default$2 from "fs/promises";
@@ -4324,7 +4324,7 @@ Upgrade Node, then re-run: npx lody@latest`;
   }
   const name$2 = "lody";
   const name$1 = "@lody/cli-cloud";
-  const version$9 = "0.84.0";
+  const version$9 = "0.85.0";
   const type$2 = "module";
   const scripts = {
     "dev": "node dev.mjs",
@@ -113527,6 +113527,9 @@ ${incoming}`).output;
       this.logger = options.logger;
       this.terminalManager = options.terminalManager;
       this.terminalEnabled = options.terminalEnabled ?? true;
+      this.configOptionValues = {
+        ...options.configOptionValues ?? {}
+      };
     }
     connection = null;
     lastSessionUpdateAtMs = Date.now();
@@ -113550,6 +113553,7 @@ ${incoming}`).output;
     sessionWorkdir = null;
     agentMcpCapabilities;
     configOptions = [];
+    configOptionValues;
     legacySessionModelState = null;
     currentModel;
     codexImageGenerationToolCallIds = /* @__PURE__ */ new Set();
@@ -114254,13 +114258,35 @@ ${incoming}`).output;
     getGrokClientIdentifier() {
       return this.options.agentConfig?.cliType === "builtin" && this.options.agentConfig.agentType === "grok" ? `lody:${this.options.sessionId}` : void 0;
     }
-    getGrokSessionMeta() {
+    getSessionStartMeta(forkSessionTurnId) {
       const clientIdentifier = this.getGrokClientIdentifier();
-      return clientIdentifier ? {
+      const lody = {
+        ...forkSessionTurnId !== void 0 ? {
+          forkAtTurn: {
+            version: 1,
+            turnId: forkSessionTurnId
+          }
+        } : {},
+        ...Object.keys(this.configOptionValues).length > 0 ? {
+          sessionConfig: {
+            version: 1,
+            configOptionValues: {
+              ...this.configOptionValues
+            }
+          }
+        } : {}
+      };
+      if (clientIdentifier === void 0 && Object.keys(lody).length === 0) return {};
+      return {
         _meta: {
-          clientIdentifier
+          ...clientIdentifier !== void 0 ? {
+            clientIdentifier
+          } : {},
+          ...Object.keys(lody).length > 0 ? {
+            lody
+          } : {}
         }
-      } : {};
+      };
     }
     isCurrentAcpSession(acpSessionId) {
       return this.acpSessionId !== null && acpSessionId === this.acpSessionId;
@@ -114280,7 +114306,7 @@ ${incoming}`).output;
       const connection2 = new ClientSideConnection(() => this, stream2);
       this.connection = connection2;
       const grokClientIdentifier = this.getGrokClientIdentifier();
-      const grokSessionMeta = this.getGrokSessionMeta();
+      const sessionStartMeta = this.getSessionStartMeta();
       this.logger.debug(`[${this.options.sessionId}] Starting ACP client (workdir=${workdir} resumeSessionId=${resumeSessionId ?? "none"} forkSessionId=${forkSessionId ?? "none"})`);
       if (resumeSessionId && forkSessionId) {
         throw new Error("[ACP_SESSION_START_INVALID] resumeSessionId and forkSessionId are exclusive");
@@ -114476,16 +114502,7 @@ ${incoming}`).output;
             sessionId: forkSessionId,
             cwd: workdir,
             mcpServers,
-            ...forkSessionTurnId ? {
-              _meta: {
-                lody: {
-                  forkAtTurn: {
-                    version: 1,
-                    turnId: forkSessionTurnId
-                  }
-                }
-              }
-            } : {}
+            ...this.getSessionStartMeta(forkSessionTurnId)
           }), startupAbort), this.logger, "connection.unstable_forkSession", this.options.sessionId, ACP_FORK_SESSION_TIMEOUT_MS);
           this.logger.debug(`[${this.options.sessionId}] ACP fork succeeded in ${Math.round(performance$1.now() - forkStart)}ms (sourceAcpSessionId=${forkSessionId}, acpSessionId=${sessionResponse.sessionId})`);
         } catch (error2) {
@@ -114520,7 +114537,7 @@ ${incoming}`).output;
             sessionId: resumeSessionId,
             cwd: workdir,
             mcpServers,
-            ...grokSessionMeta
+            ...sessionStartMeta
           }), startupAbort), this.logger, "connection.loadSession", this.options.sessionId, ACP_LOAD_SESSION_TIMEOUT_MS);
           const loadDurationMs = performance$1.now() - loadStart;
           sessionResponse = {
@@ -114562,7 +114579,7 @@ ${incoming}`).output;
             sessionId: resumeSessionId,
             cwd: workdir,
             mcpServers,
-            ...grokSessionMeta
+            ...sessionStartMeta
           }), startupAbort), this.logger, "connection.resumeSession", this.options.sessionId, ACP_RESUME_SESSION_TIMEOUT_MS);
           const resumeDurationMs = performance$1.now() - resumeStart;
           sessionResponse = {
@@ -114602,7 +114619,7 @@ ${incoming}`).output;
           sessionResponse = await withTimeout$2(withAbort(connection2.newSession({
             cwd: workdir,
             mcpServers,
-            ...grokSessionMeta
+            ...sessionStartMeta
           }), startupAbort), this.logger, "connection.newSession", this.options.sessionId, ACP_NEW_SESSION_TIMEOUT_MS);
         } catch (error2) {
           if (isAcpAuthenticationRequired(error2)) {
@@ -114669,7 +114686,7 @@ ${incoming}`).output;
           return await withTimeout$2(connection2.newSession({
             cwd: workdir,
             mcpServers,
-            ...this.getGrokSessionMeta()
+            ...this.getSessionStartMeta()
           }), this.logger, "connection.newSession.editAndResend", this.options.sessionId, timeoutMs);
         } catch (error2) {
           throw new Error(`[ACP_SESSION_PREPARE_FAILED] ${formatErrorMessage(error2)}`, {
@@ -114685,14 +114702,7 @@ ${incoming}`).output;
           sessionId: sourceSessionId,
           cwd: workdir,
           mcpServers,
-          _meta: {
-            lody: {
-              forkAtTurn: {
-                version: 1,
-                turnId: forkSessionTurnId
-              }
-            }
-          }
+          ...this.getSessionStartMeta(forkSessionTurnId)
         }), this.logger, "connection.unstable_forkSession.editAndResend", this.options.sessionId, timeoutMs);
       } catch (error2) {
         throw new Error(`[ACP_FORK_FAILED] ${formatErrorMessage(error2)}`, {
@@ -114954,6 +114964,7 @@ ${incoming}`).output;
           this.currentModel = this.resolveModelInfo(this.currentModel.modelId);
         }
       }
+      if (result) this.configOptionValues[configId] = value;
       this.logger.debug(`[${this.options.sessionId}] ACP session config option set: ${configId}=${value}`);
       return result?.configOptions;
     }
@@ -125493,6 +125504,7 @@ ${error2.message}` : execaMessage;
     return {
       command: "npx",
       args: [
+        "--force",
         "--prefer-offline",
         "-y",
         ...DEEPSEEK_HARNESS_NPX_PACKAGES.flatMap((packageName) => [
@@ -126909,6 +126921,7 @@ ${fallbackStderrTail}` : errorMessage2;
       machineId: options.machineId,
       terminalManager: options.terminalManager,
       agentConfig: options.agentConfig,
+      configOptionValues: options.configOptionValues,
       launcher: options.launcher,
       terminalEnabled: options.terminalEnabled,
       onStartupStage: options.onStartupStage,
@@ -133980,6 +133993,7 @@ The postId is ${normalizedFeedbackPostId}. Use the feedback-progress-reporter sk
           workspaceId: message.workspaceId,
           agentCliType: acpSessionConfig.cliType,
           agentType: acpSessionConfig.agentType,
+          configOptionValues: acpSessionConfig.configOptionValues,
           mcpServerIds: acpSessionConfig.mcpServerIds ?? [],
           customAcp: resumeCustomAcp,
           runtimeOverrides: resumeRuntimeOverrides,
@@ -134477,6 +134491,7 @@ The postId is ${normalizedFeedbackPostId}. Use the feedback-progress-reporter sk
         workspaceId,
         agentCliType: acpSessionConfig.cliType,
         agentType: acpSessionConfig.agentType,
+        configOptionValues: acpSessionConfig.configOptionValues,
         mcpServerIds: acpSessionConfig.mcpServerIds ?? [],
         agentConfigId: existingMeta?.agentConfigId,
         customAcp: acpSessionConfig.customAcp,
@@ -180557,6 +180572,7 @@ export PATH=${toSingleQuotedShellString(ghShimBinDir)}:"$PATH"
               cliType: callbacks.cliType,
               agentType: callbacks.agentType
             },
+            configOptionValues: this.config.configOptionValues,
             launcher,
             workspaceId: this.config.workspaceId,
             machineId: this.config.machineId,
@@ -181286,14 +181302,19 @@ export PATH=${toSingleQuotedShellString(ghShimBinDir)}:"$PATH"
       }
     };
   }
-  function buildSessionPreparationCompatibility(launchSource, mcpServerIds) {
+  function buildSessionPreparationCompatibility(launchSource, mcpServerIds, configOptionValues) {
     return {
       launch: buildSessionLaunchConfig({
         customAcp: launchSource?.customAcp,
         runtimeOverrides: launchSource?.runtimeOverrides,
         env: launchSource?.env
       }),
-      mcpServerIds: normalizeMcpServerIdsForDedup(mcpServerIds)
+      runConfig: normalizeSessionPreparationRunConfigForDedup({
+        mcpServerIds: mcpServerIds ? [
+          ...mcpServerIds
+        ] : void 0,
+        configOptionValues
+      })
     };
   }
   function agentConfigMatchesPreparation(agentConfig, spec, machineId) {
@@ -181408,7 +181429,7 @@ export PATH=${toSingleQuotedShellString(ghShimBinDir)}:"$PATH"
         return null;
       }
       const current2 = resource.readCurrentLaunchConfig(sessionMeta);
-      if (!current2 || !isDeepStrictEqual(resource.compatibility, buildSessionPreparationCompatibility(current2.config, resource.config.mcpServerIds))) {
+      if (!current2 || !isDeepStrictEqual(resource.compatibility, buildSessionPreparationCompatibility(current2.config, resource.config.mcpServerIds, resource.config.configOptionValues))) {
         return null;
       }
       return {
@@ -181449,7 +181470,7 @@ export PATH=${toSingleQuotedShellString(ghShimBinDir)}:"$PATH"
         await this.preparationService.discard(sessionId);
         return await this.createSessionInnerWithAgent(config2, agentStart);
       }
-      const compatibility = buildSessionPreparationCompatibility(config2, config2.mcpServerIds);
+      const compatibility = buildSessionPreparationCompatibility(config2, config2.mcpServerIds, config2.configOptionValues);
       const claim = this.preparationService.claim({
         sessionId,
         requesterUserId: config2.requesterUserId,
@@ -181468,7 +181489,7 @@ export PATH=${toSingleQuotedShellString(ghShimBinDir)}:"$PATH"
             cliType: config2.agentCliType,
             agentType: config2.agentType
           });
-          return current2 !== null && isDeepStrictEqual(resource.compatibility, buildSessionPreparationCompatibility(current2.config, config2.mcpServerIds));
+          return current2 !== null && isDeepStrictEqual(resource.compatibility, buildSessionPreparationCompatibility(current2.config, config2.mcpServerIds, config2.configOptionValues));
         }
       });
       if (claim.status === "miss") {
@@ -181624,6 +181645,7 @@ export PATH=${toSingleQuotedShellString(ghShimBinDir)}:"$PATH"
         agentConfigId: spec.agentConfigId,
         agentCliType: spec.cliType,
         agentType: spec.agentType,
+        configOptionValues: spec.runConfig?.configOptionValues,
         mcpServerIds: spec.runConfig?.mcpServerIds ?? [],
         customAcp: agentConfig.customAcp,
         runtimeOverrides: agentConfig.runtimeOverrides,
@@ -181638,7 +181660,7 @@ export PATH=${toSingleQuotedShellString(ghShimBinDir)}:"$PATH"
         userName: user.name,
         userEmail: user.email
       };
-      const compatibility = buildSessionPreparationCompatibility(config2, config2.mcpServerIds);
+      const compatibility = buildSessionPreparationCompatibility(config2, config2.mcpServerIds, config2.configOptionValues);
       const ghTokenInjected = await this.prepareGitHubRepoSessionConfig(config2);
       signal.throwIfAborted();
       const launch = await resolveACPProcessLaunchAsync({
@@ -219003,7 +219025,7 @@ ${page}${helpTipBottom}${choiceDescription}${ansiEscapes.cursorHide}`;
       data = createReviewBundleSnapshot(bundle);
     }
     const { injectReviewSnapshot } = await import("./chunks/index-VoI6Ds2-.js");
-    const { resolveReviewViewerTemplate } = await import("./chunks/review-viewer-BZC6lRid.js").then(async (m) => {
+    const { resolveReviewViewerTemplate } = await import("./chunks/review-viewer-oYzxdgq4.js").then(async (m) => {
       await m.__tla;
       return m;
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lody",
-  "version": "0.84.0",
+  "version": "0.85.0",
   "description": "Lody Agent CLI tool for managing remote command execution",
   "type": "module",
   "main": "dist/index.js",