2026-06-16 21:00:24 +08:00
<!-- Generated by scripts/gen - module - graph.ts — do not edit by hand.
Run `pnpm run gen-module-graph` to regenerate. -->
# Module dependency graph
2026-07-05 01:25:58 +08:00
Inter-package dependencies among the `@deepseek-ai/dsh-*` harness packages, derived from each package's `peerDependencies` (the canonical runtime-dependency signal) and grouped by the `packages/<group>/<pkg>` hierarchy. An edge `a --> b` means package `a` depends on package `b` . Names have the `@deepseek-ai/dsh-` prefix stripped.
2026-06-16 21:00:24 +08:00
```mermaid
2026-07-05 01:25:58 +08:00
flowchart TD
subgraph group_util["packages/util"]
pkg_brand["brand"]
2026-07-06 16:23:52 +08:00
pkg_timeout["timeout"]
2026-07-05 01:25:58 +08:00
end
subgraph group_llm["packages/llm"]
pkg_llm["llm"]
pkg_llm_deepseek["llm-deepseek"]
pkg_llm_pi_ai["llm-pi-ai"]
end
subgraph group_core["packages/core"]
pkg_agent["agent"]
pkg_agent_core["agent-core"]
pkg_agent_loop["agent-loop"]
pkg_session["session"]
pkg_system_prompt["system-prompt"]
pkg_tools["tools"]
end
subgraph group_bash["packages/bash"]
pkg_bash["bash"]
pkg_bash_local["bash-local"]
2026-07-09 16:05:44 +08:00
pkg_bash_sandbox["bash-sandbox"]
2026-07-05 01:25:58 +08:00
pkg_tool_bash["tool-bash"]
end
subgraph group_fs["packages/fs"]
pkg_fs["fs"]
pkg_fs_local["fs-local"]
pkg_fs_policy["fs-policy"]
pkg_tool_fs["tool-fs"]
end
2026-07-10 14:19:06 +08:00
subgraph group_skill["packages/skill"]
pkg_skill["skill"]
pkg_skill_local["skill-local"]
pkg_tool_skill["tool-skill"]
end
2026-07-05 01:25:58 +08:00
subgraph group_compact["packages/compact"]
pkg_compact["compact"]
pkg_compact_basic["compact-basic"]
end
subgraph group_subagent["packages/subagent"]
pkg_subagent["subagent"]
pkg_subagent_acp["subagent-acp"]
pkg_subagent_fork["subagent-fork"]
pkg_subagent_inprocess["subagent-inprocess"]
pkg_subagent_spawn["subagent-spawn"]
rename: @deepseek-ai/dsh-subagent-process -> @deepseek-ai/dsh-subagent-subprocess
The extracted library's name sat one edit away from @deepseek-ai/dsh-subagent-inprocess
(process/inprocess), inviting a typo'd import to silently resolve to the wrong
package. subagent-subprocess also reads as the deliberate counterpart to
subagent-inprocess (in-process vs. subprocess), matching how the two shared
drivers actually differ.
Package directory, npm name, module doc, JSDoc module tags, test-file name and
its temp-dir prefixes, the subagent-acp import and its Config/tsconfig/package.json
references, root tsconfig.json/tsconfig.build.json/knip.json entries, and the
packages/subagent group README all renamed together; regenerated
docs/module-graph.md and docs/config-catalog.md. Pure rename — no behavior,
export, or Config shape changed.
2026-07-09 13:42:03 +08:00
pkg_subagent_subprocess["subagent-subprocess"]
2026-07-05 01:25:58 +08:00
pkg_tool_subagent["tool-subagent"]
end
subgraph group_web["packages/web"]
pkg_tool_web["tool-web"]
pkg_web["web"]
pkg_web_fetch_local["web-fetch-local"]
pkg_web_search_deepseek["web-search-deepseek"]
pkg_web_search_exa["web-search-exa"]
pkg_web_search_perplexity["web-search-perplexity"]
end
2026-07-08 10:06:07 +08:00
subgraph group_timeout["packages/timeout"]
pkg_timeout_policy["timeout-policy"]
end
2026-07-05 01:25:58 +08:00
subgraph group_todo["packages/todo"]
pkg_tool_todo["tool-todo"]
end
2026-07-08 11:50:12 +08:00
subgraph group_cordis["packages/cordis"]
pkg_tool_cordis["tool-cordis"]
end
2026-07-05 01:25:58 +08:00
subgraph group_hooks["packages/hooks"]
pkg_hook_protocol["hook-protocol"]
pkg_hooks_claude["hooks-claude"]
pkg_hooks_codex["hooks-codex"]
end
subgraph group_session_persistence["packages/session-persistence"]
pkg_session_persistence["session-persistence"]
pkg_session_persistence_jsonl["session-persistence-jsonl"]
pkg_session_persistence_sqlite["session-persistence-sqlite"]
end
subgraph group_support["packages/support"]
feat(acp-snapshot): extract the ACP snapshot suite into a support package
The snapshot tier's machinery leaves examples/acp-agent/tests for
packages/support/acp-snapshot (@deepseek-ai/dsh-acp-snapshot), where the
coverage gate measures it and a second example can consume it instead of
forking it: harness.ts (runScenario, parameterized by an AgentUnderTest
{binScript, configPath, tsconfigPath} instead of module constants),
normalize.ts (moved verbatim), and suite.ts (defineAcpSnapshotSuite — the
per-scenario golden/log compares, record write-back, per-suite header pin
with its uniformity guard, and the fixture guard block, lifted from
acp.snapshot.ts). The example file collapses to its scenario table plus
one factory call; env reading (DSH_SNAPSHOT) stays at that edge.
The exactly-one-pin meta-test generalizes from the hardcoded text-turn
name to "exactly one per suite" — which scenario pins is the scenario
table's reviewable choice (per-suite pinning per the proposal RFC).
Extraction parity: pnpm run test:snapshot is 36 passed + fs-policy-reject
failing BEFORE AND AFTER (BSD-sed environment failure, reproduced at the
base commit in a clean worktree — the recorded golden's sed -i syntax is
GNU-only), with zero byte changes under examples/acp-agent/tests/snapshots/.
Coverage for the new src files lands in the next commit.
2026-07-08 01:44:20 +08:00
pkg_acp_snapshot["acp-snapshot"]
2026-07-05 01:25:58 +08:00
pkg_invariants["invariants"]
pkg_llm_replay["llm-replay"]
pkg_subagent_mock["subagent-mock"]
end
subgraph group_ui["packages/ui"]
pkg_acp["acp"]
pkg_acp_agent["acp-agent"]
2026-07-05 01:53:13 +08:00
pkg_app_boot["app-boot"]
2026-07-05 01:25:58 +08:00
pkg_stdio_agent["stdio-agent"]
2026-07-05 17:05:33 +08:00
pkg_tool_ask_user["tool-ask-user"]
2026-07-11 21:37:38 +08:00
pkg_user_approval["user-approval"]
2026-07-09 17:55:01 +08:00
pkg_user_interaction["user-interaction"]
2026-07-05 01:25:58 +08:00
end
2026-07-08 02:17:24 +08:00
subgraph group_code_runtime["packages/code-runtime"]
pkg_code_runtime["code-runtime"]
feat: add the worker-thread code runtime (dsh-code-runtime-worker)
The shipped backend of the code-execution seam, per the Code Mode RFC's
worker-thread section: one fresh Node worker per run, executing the
model's TypeScript after a host-side type-strip (wrapped in an
async-function shell so top-level return/await parse, sliced back out
position-preserved), bindings bridged over the message port under
hostile-peer rules (own-property name lookup, at-most-once replies,
post-settlement drops, null-prototype namespaces), logs streamed eagerly
with an in-band truncation marker, and two independent budgets — measured
event-loop busy time (computeMs) plus a never-pausing wall ceiling
(maxWallMs) — funneling into worker.terminate(). env: {} and execArgv: []
keep the isolate hermetic; disposal aborts in-flight runs and awaits
worker exits.
The worker entry loads unbuilt via Node's native type stripping
(src/worker.ts, erasable-only) and ships built as a sibling tsdown bundle
(lib/worker.js); tests/built-lib.e2e.ts pins the built load path under
plain node and joins the built-artifact smoke gate. Unit suites cover the
bootstrap in-process (fake port) and the runtime over real workers,
per-file 100%.
2026-07-08 11:00:06 +08:00
pkg_code_runtime_worker["code-runtime-worker"]
2026-07-08 02:17:24 +08:00
end
2026-07-08 14:24:20 +08:00
subgraph group_guard["packages/guard"]
pkg_repeat_tool_guard["repeat-tool-guard"]
2026-07-08 02:17:24 +08:00
end
2026-07-09 15:42:37 +08:00
subgraph group_sandbox["packages/sandbox"]
pkg_sandbox["sandbox"]
pkg_sandbox_local["sandbox-local"]
end
2026-07-06 03:14:07 +08:00
subgraph group_workflow["packages/workflow"]
pkg_tool_workflow["tool-workflow"]
pkg_workflow["workflow"]
2026-07-09 19:06:55 +08:00
pkg_workflow_workerthread["workflow-workerthread"]
2026-07-06 03:14:07 +08:00
end
2026-07-05 01:25:58 +08:00
pkg_llm --> pkg_brand
feat: add the worker-thread code runtime (dsh-code-runtime-worker)
The shipped backend of the code-execution seam, per the Code Mode RFC's
worker-thread section: one fresh Node worker per run, executing the
model's TypeScript after a host-side type-strip (wrapped in an
async-function shell so top-level return/await parse, sliced back out
position-preserved), bindings bridged over the message port under
hostile-peer rules (own-property name lookup, at-most-once replies,
post-settlement drops, null-prototype namespaces), logs streamed eagerly
with an in-band truncation marker, and two independent budgets — measured
event-loop busy time (computeMs) plus a never-pausing wall ceiling
(maxWallMs) — funneling into worker.terminate(). env: {} and execArgv: []
keep the isolate hermetic; disposal aborts in-flight runs and awaits
worker exits.
The worker entry loads unbuilt via Node's native type stripping
(src/worker.ts, erasable-only) and ships built as a sibling tsdown bundle
(lib/worker.js); tests/built-lib.e2e.ts pins the built load path under
plain node and joins the built-artifact smoke gate. Unit suites cover the
bootstrap in-process (fake port) and the runtime over real workers,
per-file 100%.
2026-07-08 11:00:06 +08:00
pkg_code_runtime_worker --> pkg_code_runtime
2026-07-05 01:25:58 +08:00
pkg_llm_deepseek --> pkg_llm
pkg_llm_pi_ai --> pkg_llm
pkg_session --> pkg_brand
pkg_session --> pkg_llm
pkg_system_prompt --> pkg_llm
pkg_fs --> pkg_brand
pkg_fs --> pkg_llm
pkg_web --> pkg_llm
2026-07-09 15:42:37 +08:00
pkg_sandbox --> pkg_llm
2026-07-05 01:25:58 +08:00
pkg_agent --> pkg_brand
pkg_agent --> pkg_llm
pkg_agent --> pkg_session
2026-07-05 20:54:48 +08:00
pkg_agent --> pkg_system_prompt
2026-07-09 16:05:44 +08:00
pkg_bash --> pkg_brand
pkg_bash --> pkg_sandbox
pkg_bash --> pkg_session
2026-07-05 01:25:58 +08:00
pkg_fs_local --> pkg_fs
pkg_fs_policy --> pkg_fs
2026-07-10 14:19:06 +08:00
pkg_skill_local --> pkg_fs
pkg_skill_local --> pkg_skill
2026-07-05 01:25:58 +08:00
pkg_compact --> pkg_llm
pkg_compact --> pkg_session
2026-07-06 16:23:52 +08:00
pkg_web_fetch_local --> pkg_timeout
2026-07-05 01:25:58 +08:00
pkg_web_fetch_local --> pkg_web
pkg_web_search_deepseek --> pkg_web
pkg_web_search_exa --> pkg_web
pkg_web_search_perplexity --> pkg_web
pkg_session_persistence --> pkg_session
pkg_llm_replay --> pkg_llm
pkg_llm_replay --> pkg_session
2026-07-09 15:42:37 +08:00
pkg_sandbox_local --> pkg_llm
pkg_sandbox_local --> pkg_sandbox
2026-07-09 16:05:44 +08:00
pkg_bash_local --> pkg_bash
pkg_bash_local --> pkg_timeout
2026-07-05 01:25:58 +08:00
pkg_compact_basic --> pkg_agent
pkg_compact_basic --> pkg_compact
pkg_compact_basic --> pkg_llm
pkg_compact_basic --> pkg_session
2026-07-09 16:05:44 +08:00
pkg_hook_protocol --> pkg_bash
pkg_hook_protocol --> pkg_session
2026-07-05 01:25:58 +08:00
pkg_session_persistence_jsonl --> pkg_session
pkg_session_persistence_jsonl --> pkg_session_persistence
pkg_session_persistence_sqlite --> pkg_session
pkg_session_persistence_sqlite --> pkg_session_persistence
pkg_invariants --> pkg_agent
pkg_invariants --> pkg_llm
pkg_invariants --> pkg_session
2026-07-11 21:37:38 +08:00
pkg_user_approval --> pkg_agent
pkg_user_approval --> pkg_brand
pkg_user_approval --> pkg_llm
pkg_user_approval --> pkg_session
pkg_user_approval --> pkg_system_prompt
2026-07-09 17:55:01 +08:00
pkg_user_interaction --> pkg_agent
pkg_user_interaction --> pkg_llm
2026-07-06 03:14:07 +08:00
pkg_workflow --> pkg_agent
pkg_workflow --> pkg_brand
pkg_workflow --> pkg_llm
2026-07-09 15:25:18 +08:00
pkg_tools --> pkg_agent
pkg_tools --> pkg_code_runtime
pkg_tools --> pkg_llm
pkg_tools --> pkg_session
pkg_tools --> pkg_system_prompt
2026-07-11 21:37:38 +08:00
pkg_tools --> pkg_user_approval
2026-07-09 16:05:44 +08:00
pkg_bash_sandbox --> pkg_bash
pkg_bash_sandbox --> pkg_bash_local
pkg_bash_sandbox --> pkg_sandbox
2026-07-05 01:25:58 +08:00
pkg_agent_loop --> pkg_agent
pkg_agent_loop --> pkg_llm
pkg_agent_loop --> pkg_session
pkg_agent_loop --> pkg_session_persistence
pkg_agent_loop --> pkg_system_prompt
pkg_agent_loop --> pkg_tools
pkg_tool_bash --> pkg_agent
pkg_tool_bash --> pkg_bash
pkg_tool_bash --> pkg_llm
2026-07-09 16:05:44 +08:00
pkg_tool_bash --> pkg_sandbox
2026-07-10 20:52:27 +08:00
pkg_tool_bash --> pkg_session_persistence
2026-07-05 20:54:48 +08:00
pkg_tool_bash --> pkg_system_prompt
2026-07-05 01:25:58 +08:00
pkg_tool_bash --> pkg_tools
2026-07-11 21:37:38 +08:00
pkg_tool_bash --> pkg_user_approval
2026-07-05 01:25:58 +08:00
pkg_tool_fs --> pkg_fs
pkg_tool_fs --> pkg_llm
pkg_tool_fs --> pkg_session
pkg_tool_fs --> pkg_system_prompt
pkg_tool_fs --> pkg_tools
2026-07-10 14:19:06 +08:00
pkg_tool_skill --> pkg_agent
pkg_tool_skill --> pkg_llm
pkg_tool_skill --> pkg_skill
pkg_tool_skill --> pkg_tools
2026-07-05 01:25:58 +08:00
pkg_subagent --> pkg_agent
pkg_subagent --> pkg_llm
pkg_subagent --> pkg_tools
pkg_tool_web --> pkg_llm
pkg_tool_web --> pkg_system_prompt
pkg_tool_web --> pkg_tools
pkg_tool_web --> pkg_web
2026-07-08 10:06:07 +08:00
pkg_timeout_policy --> pkg_llm
pkg_timeout_policy --> pkg_timeout
pkg_timeout_policy --> pkg_tools
2026-07-05 01:25:58 +08:00
pkg_tool_todo --> pkg_agent
pkg_tool_todo --> pkg_session
pkg_tool_todo --> pkg_tools
2026-07-08 11:50:12 +08:00
pkg_tool_cordis --> pkg_tools
2026-07-05 01:25:58 +08:00
pkg_hooks_codex --> pkg_agent
pkg_hooks_codex --> pkg_hook_protocol
pkg_hooks_codex --> pkg_llm
pkg_hooks_codex --> pkg_session
2026-07-10 20:52:27 +08:00
pkg_hooks_codex --> pkg_session_persistence
2026-07-05 01:25:58 +08:00
pkg_hooks_codex --> pkg_tools
pkg_acp --> pkg_agent
feat(modes): per-session sandbox/approval switching — the session log as the store, ACP config options
effective(session) = findLast(the session own knob events)?.value ?? the
composition-config default. One log-only event per knob, owned by its
domain (bash/sandbox-mode in dsh-bash, approval/policy in dsh-approval),
each exporting the same three-piece kit: the event declaration, a pure
fold, and THE write path — a switch IS its event; no owner service, no
facts map. Restart immunity and multi-session isolation fall out of the
log replay by construction.
Execution follows the fold on both sides: the bash tool stamps
escalation grant > session override > executor default, and the approval
seam prepends the never-gate that auto-rejects before any interactive
answerer. Visibility is two layers per knob: a per-agent prompt section
states the effective value on every request (logged through
request/header*, so what-the-model-was-told replays from the log), and an
agent/pre-step narrator injects at most one coalesced delta notice with
positional attribution (user switch vs operator/config drift). The ACP
bridge advertises one capability-gated select per composable knob with
currentValue folded per session, validates set_config_option against the
closed vocabularies, and anchors idle switches at the next turn
prompt-submit under the turn-enclosure contract.
2026-07-09 16:41:03 +08:00
pkg_acp --> pkg_bash
2026-07-05 01:25:58 +08:00
pkg_acp --> pkg_llm
feat(modes): per-session sandbox/approval switching — the session log as the store, ACP config options
effective(session) = findLast(the session own knob events)?.value ?? the
composition-config default. One log-only event per knob, owned by its
domain (bash/sandbox-mode in dsh-bash, approval/policy in dsh-approval),
each exporting the same three-piece kit: the event declaration, a pure
fold, and THE write path — a switch IS its event; no owner service, no
facts map. Restart immunity and multi-session isolation fall out of the
log replay by construction.
Execution follows the fold on both sides: the bash tool stamps
escalation grant > session override > executor default, and the approval
seam prepends the never-gate that auto-rejects before any interactive
answerer. Visibility is two layers per knob: a per-agent prompt section
states the effective value on every request (logged through
request/header*, so what-the-model-was-told replays from the log), and an
agent/pre-step narrator injects at most one coalesced delta notice with
positional attribution (user switch vs operator/config drift). The ACP
bridge advertises one capability-gated select per composable knob with
currentValue folded per session, validates set_config_option against the
closed vocabularies, and anchors idle switches at the next turn
prompt-submit under the turn-enclosure contract.
2026-07-09 16:41:03 +08:00
pkg_acp --> pkg_sandbox
2026-07-05 01:25:58 +08:00
pkg_acp --> pkg_session
pkg_acp --> pkg_session_persistence
pkg_acp --> pkg_tools
2026-07-11 21:37:38 +08:00
pkg_acp --> pkg_user_approval
2026-07-05 17:05:33 +08:00
pkg_acp --> pkg_user_interaction
pkg_tool_ask_user --> pkg_agent
pkg_tool_ask_user --> pkg_tools
pkg_tool_ask_user --> pkg_user_interaction
2026-07-08 14:24:20 +08:00
pkg_repeat_tool_guard --> pkg_agent
pkg_repeat_tool_guard --> pkg_tools
2026-07-06 03:14:07 +08:00
pkg_tool_workflow --> pkg_agent
pkg_tool_workflow --> pkg_llm
pkg_tool_workflow --> pkg_system_prompt
pkg_tool_workflow --> pkg_tools
pkg_tool_workflow --> pkg_workflow
2026-07-05 01:25:58 +08:00
pkg_agent_core --> pkg_agent
pkg_agent_core --> pkg_agent_loop
pkg_agent_core --> pkg_invariants
pkg_agent_core --> pkg_llm
pkg_agent_core --> pkg_session
2026-07-05 16:50:29 +08:00
pkg_agent_core --> pkg_skill
2026-07-08 15:50:38 +08:00
pkg_agent_core --> pkg_skill_local
2026-07-05 01:25:58 +08:00
pkg_agent_core --> pkg_system_prompt
pkg_agent_core --> pkg_tool_bash
2026-07-05 16:50:29 +08:00
pkg_agent_core --> pkg_tool_skill
2026-07-05 01:25:58 +08:00
pkg_agent_core --> pkg_tools
pkg_subagent_acp --> pkg_agent
pkg_subagent_acp --> pkg_llm
pkg_subagent_acp --> pkg_subagent
rename: @deepseek-ai/dsh-subagent-process -> @deepseek-ai/dsh-subagent-subprocess
The extracted library's name sat one edit away from @deepseek-ai/dsh-subagent-inprocess
(process/inprocess), inviting a typo'd import to silently resolve to the wrong
package. subagent-subprocess also reads as the deliberate counterpart to
subagent-inprocess (in-process vs. subprocess), matching how the two shared
drivers actually differ.
Package directory, npm name, module doc, JSDoc module tags, test-file name and
its temp-dir prefixes, the subagent-acp import and its Config/tsconfig/package.json
references, root tsconfig.json/tsconfig.build.json/knip.json entries, and the
packages/subagent group README all renamed together; regenerated
docs/module-graph.md and docs/config-catalog.md. Pure rename — no behavior,
export, or Config shape changed.
2026-07-09 13:42:03 +08:00
pkg_subagent_acp --> pkg_subagent_subprocess
2026-07-05 01:25:58 +08:00
pkg_subagent_inprocess --> pkg_agent
pkg_subagent_inprocess --> pkg_llm
pkg_subagent_inprocess --> pkg_session
pkg_subagent_inprocess --> pkg_subagent
Structured output on the subagent seam: schema subset, capture runtime, spawn/fork support
Carved out of #170 per review feedback — the foundation the workflow tool
builds on, now standing alone on master:
- dsh-tools: the structured-output JSON Schema subset (StructuredOutputSchema,
assertSupportedOutputSchema, validateStructuredValue) — rejects loud outside
the enforced subset, listing every violation
- dsh-subagent: SubagentStartRequest.outputSchema / SubagentResult.structured
become a real capability; the service rejects a schema'd request whose
provider lacks it
- dsh-subagent-inprocess: the shared structured runtime — one global
structured_output capture tool, a prepend final-assembly listener that
strips the placeholder for plain agents and swaps in the run's own schema
(plus the calling instruction as a trailing section) for structured
children, an agent/turn-continuation veto once captured, and the
capture/nudge loop in the run driver (structuredNudgeRetries, cancellation
honored mid-nudge); lifetime refcounted by backends and live runs
- subagent-spawn / subagent-fork flip outputSchema: true
One deliberate divergence from the #170 revision: the backends do NOT add
'tools' to their plugin inject. Doing so deferred their apply past the todo
plugin, and the delegation tool mirrors provider lifecycle — so the
model-visible tool order of every existing prompt changed, invalidating every
recorded snapshot fixture. The runtime now gates its capture-tool registration
on tools availability itself (sync when live, a scoped inject fiber when the
Loader starts the backend first), keeping this PR byte-invisible to existing
transcripts: all 35 snapshot scenarios pass against master's fixtures
unchanged.
2026-07-06 23:29:08 +08:00
pkg_subagent_inprocess --> pkg_system_prompt
pkg_subagent_inprocess --> pkg_tools
2026-07-05 01:25:58 +08:00
pkg_tool_subagent --> pkg_agent
pkg_tool_subagent --> pkg_llm
pkg_tool_subagent --> pkg_subagent
pkg_tool_subagent --> pkg_tools
pkg_hooks_claude --> pkg_agent
pkg_hooks_claude --> pkg_hook_protocol
pkg_hooks_claude --> pkg_llm
pkg_hooks_claude --> pkg_session
2026-07-10 20:52:27 +08:00
pkg_hooks_claude --> pkg_session_persistence
2026-07-05 01:25:58 +08:00
pkg_hooks_claude --> pkg_subagent
pkg_hooks_claude --> pkg_tools
pkg_subagent_mock --> pkg_agent
pkg_subagent_mock --> pkg_llm
pkg_subagent_mock --> pkg_subagent
2026-07-09 19:06:55 +08:00
pkg_workflow_workerthread --> pkg_agent
pkg_workflow_workerthread --> pkg_brand
pkg_workflow_workerthread --> pkg_llm
pkg_workflow_workerthread --> pkg_subagent
pkg_workflow_workerthread --> pkg_tools
pkg_workflow_workerthread --> pkg_workflow
2026-07-05 01:25:58 +08:00
pkg_subagent_fork --> pkg_agent
pkg_subagent_fork --> pkg_session
pkg_subagent_fork --> pkg_subagent
pkg_subagent_fork --> pkg_subagent_inprocess
pkg_subagent_spawn --> pkg_subagent
pkg_subagent_spawn --> pkg_subagent_inprocess
pkg_acp_agent --> pkg_acp
pkg_acp_agent --> pkg_agent_core
2026-07-05 01:53:13 +08:00
pkg_acp_agent --> pkg_app_boot
2026-07-05 01:25:58 +08:00
pkg_acp_agent --> pkg_session_persistence_jsonl
2026-07-09 21:23:45 +08:00
pkg_acp_agent --> pkg_tools
2026-07-05 17:05:33 +08:00
pkg_acp_agent --> pkg_user_interaction
2026-07-05 01:25:58 +08:00
pkg_stdio_agent --> pkg_agent
pkg_stdio_agent --> pkg_agent_core
2026-07-05 01:53:13 +08:00
pkg_stdio_agent --> pkg_app_boot
2026-07-05 01:25:58 +08:00
pkg_stdio_agent --> pkg_llm
pkg_stdio_agent --> pkg_session
pkg_stdio_agent --> pkg_session_persistence_jsonl
2026-07-05 17:05:33 +08:00
pkg_stdio_agent --> pkg_tool_ask_user
2026-07-09 21:23:45 +08:00
pkg_stdio_agent --> pkg_tools
2026-07-05 17:05:33 +08:00
pkg_stdio_agent --> pkg_user_interaction
2026-06-16 21:00:24 +08:00
```
2026-07-05 01:25:58 +08:00
| Package | Group | Depends on |
| --- | --- | --- |
| [`brand` ](../packages/util/brand ) | `util` | — |
2026-07-06 16:23:52 +08:00
| [`timeout` ](../packages/util/timeout ) | `util` | — |
2026-07-10 14:19:06 +08:00
| [`skill` ](../packages/skill/skill ) | `skill` | — |
2026-07-09 14:19:36 +08:00
| [`subagent-subprocess` ](../packages/subagent/subagent-subprocess ) | `subagent` | — |
feat(acp-snapshot): extract the ACP snapshot suite into a support package
The snapshot tier's machinery leaves examples/acp-agent/tests for
packages/support/acp-snapshot (@deepseek-ai/dsh-acp-snapshot), where the
coverage gate measures it and a second example can consume it instead of
forking it: harness.ts (runScenario, parameterized by an AgentUnderTest
{binScript, configPath, tsconfigPath} instead of module constants),
normalize.ts (moved verbatim), and suite.ts (defineAcpSnapshotSuite — the
per-scenario golden/log compares, record write-back, per-suite header pin
with its uniformity guard, and the fixture guard block, lifted from
acp.snapshot.ts). The example file collapses to its scenario table plus
one factory call; env reading (DSH_SNAPSHOT) stays at that edge.
The exactly-one-pin meta-test generalizes from the hardcoded text-turn
name to "exactly one per suite" — which scenario pins is the scenario
table's reviewable choice (per-suite pinning per the proposal RFC).
Extraction parity: pnpm run test:snapshot is 36 passed + fs-policy-reject
failing BEFORE AND AFTER (BSD-sed environment failure, reproduced at the
base commit in a clean worktree — the recorded golden's sed -i syntax is
GNU-only), with zero byte changes under examples/acp-agent/tests/snapshots/.
Coverage for the new src files lands in the next commit.
2026-07-08 01:44:20 +08:00
| [`acp-snapshot` ](../packages/support/acp-snapshot ) | `support` | — |
2026-07-05 01:53:13 +08:00
| [`app-boot` ](../packages/ui/app-boot ) | `ui` | — |
2026-07-08 02:17:24 +08:00
| [`code-runtime` ](../packages/code-runtime/code-runtime ) | `code-runtime` | — |
2026-07-05 01:25:58 +08:00
| [`llm` ](../packages/llm/llm ) | `llm` | [`brand` ](../packages/util/brand ) |
feat: add the worker-thread code runtime (dsh-code-runtime-worker)
The shipped backend of the code-execution seam, per the Code Mode RFC's
worker-thread section: one fresh Node worker per run, executing the
model's TypeScript after a host-side type-strip (wrapped in an
async-function shell so top-level return/await parse, sliced back out
position-preserved), bindings bridged over the message port under
hostile-peer rules (own-property name lookup, at-most-once replies,
post-settlement drops, null-prototype namespaces), logs streamed eagerly
with an in-band truncation marker, and two independent budgets — measured
event-loop busy time (computeMs) plus a never-pausing wall ceiling
(maxWallMs) — funneling into worker.terminate(). env: {} and execArgv: []
keep the isolate hermetic; disposal aborts in-flight runs and awaits
worker exits.
The worker entry loads unbuilt via Node's native type stripping
(src/worker.ts, erasable-only) and ships built as a sibling tsdown bundle
(lib/worker.js); tests/built-lib.e2e.ts pins the built load path under
plain node and joins the built-artifact smoke gate. Unit suites cover the
bootstrap in-process (fake port) and the runtime over real workers,
per-file 100%.
2026-07-08 11:00:06 +08:00
| [`code-runtime-worker` ](../packages/code-runtime/code-runtime-worker ) | `code-runtime` | [`code-runtime` ](../packages/code-runtime/code-runtime ) |
2026-07-05 01:25:58 +08:00
| [`llm-deepseek` ](../packages/llm/llm-deepseek ) | `llm` | [`llm` ](../packages/llm/llm ) |
| [`llm-pi-ai` ](../packages/llm/llm-pi-ai ) | `llm` | [`llm` ](../packages/llm/llm ) |
| [`session` ](../packages/core/session ) | `core` | [`brand` ](../packages/util/brand ), [`llm` ](../packages/llm/llm ) |
| [`system-prompt` ](../packages/core/system-prompt ) | `core` | [`llm` ](../packages/llm/llm ) |
| [`fs` ](../packages/fs/fs ) | `fs` | [`brand` ](../packages/util/brand ), [`llm` ](../packages/llm/llm ) |
| [`web` ](../packages/web/web ) | `web` | [`llm` ](../packages/llm/llm ) |
2026-07-09 15:42:37 +08:00
| [`sandbox` ](../packages/sandbox/sandbox ) | `sandbox` | [`llm` ](../packages/llm/llm ) |
2026-07-05 20:54:48 +08:00
| [`agent` ](../packages/core/agent ) | `core` | [`brand` ](../packages/util/brand ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ), [`system-prompt` ](../packages/core/system-prompt ) |
2026-07-09 16:05:44 +08:00
| [`bash` ](../packages/bash/bash ) | `bash` | [`brand` ](../packages/util/brand ), [`sandbox` ](../packages/sandbox/sandbox ), [`session` ](../packages/core/session ) |
2026-07-05 01:25:58 +08:00
| [`fs-local` ](../packages/fs/fs-local ) | `fs` | [`fs` ](../packages/fs/fs ) |
| [`fs-policy` ](../packages/fs/fs-policy ) | `fs` | [`fs` ](../packages/fs/fs ) |
2026-07-10 14:19:06 +08:00
| [`skill-local` ](../packages/skill/skill-local ) | `skill` | [`fs` ](../packages/fs/fs ), [`skill` ](../packages/skill/skill ) |
2026-07-05 01:25:58 +08:00
| [`compact` ](../packages/compact/compact ) | `compact` | [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ) |
2026-07-06 16:23:52 +08:00
| [`web-fetch-local` ](../packages/web/web-fetch-local ) | `web` | [`timeout` ](../packages/util/timeout ), [`web` ](../packages/web/web ) |
2026-07-05 01:25:58 +08:00
| [`web-search-deepseek` ](../packages/web/web-search-deepseek ) | `web` | [`web` ](../packages/web/web ) |
| [`web-search-exa` ](../packages/web/web-search-exa ) | `web` | [`web` ](../packages/web/web ) |
| [`web-search-perplexity` ](../packages/web/web-search-perplexity ) | `web` | [`web` ](../packages/web/web ) |
| [`session-persistence` ](../packages/session-persistence/session-persistence ) | `session-persistence` | [`session` ](../packages/core/session ) |
| [`llm-replay` ](../packages/support/llm-replay ) | `support` | [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ) |
2026-07-09 15:42:37 +08:00
| [`sandbox-local` ](../packages/sandbox/sandbox-local ) | `sandbox` | [`llm` ](../packages/llm/llm ), [`sandbox` ](../packages/sandbox/sandbox ) |
2026-07-09 16:05:44 +08:00
| [`bash-local` ](../packages/bash/bash-local ) | `bash` | [`bash` ](../packages/bash/bash ), [`timeout` ](../packages/util/timeout ) |
2026-07-05 01:25:58 +08:00
| [`compact-basic` ](../packages/compact/compact-basic ) | `compact` | [`agent` ](../packages/core/agent ), [`compact` ](../packages/compact/compact ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ) |
2026-07-09 16:05:44 +08:00
| [`hook-protocol` ](../packages/hooks/hook-protocol ) | `hooks` | [`bash` ](../packages/bash/bash ), [`session` ](../packages/core/session ) |
2026-07-05 01:25:58 +08:00
| [`session-persistence-jsonl` ](../packages/session-persistence/session-persistence-jsonl ) | `session-persistence` | [`session` ](../packages/core/session ), [`session-persistence` ](../packages/session-persistence/session-persistence ) |
| [`session-persistence-sqlite` ](../packages/session-persistence/session-persistence-sqlite ) | `session-persistence` | [`session` ](../packages/core/session ), [`session-persistence` ](../packages/session-persistence/session-persistence ) |
| [`invariants` ](../packages/support/invariants ) | `support` | [`agent` ](../packages/core/agent ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ) |
2026-07-11 21:37:38 +08:00
| [`user-approval` ](../packages/ui/user-approval ) | `ui` | [`agent` ](../packages/core/agent ), [`brand` ](../packages/util/brand ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ), [`system-prompt` ](../packages/core/system-prompt ) |
2026-07-09 17:55:01 +08:00
| [`user-interaction` ](../packages/ui/user-interaction ) | `ui` | [`agent` ](../packages/core/agent ), [`llm` ](../packages/llm/llm ) |
2026-07-06 03:14:07 +08:00
| [`workflow` ](../packages/workflow/workflow ) | `workflow` | [`agent` ](../packages/core/agent ), [`brand` ](../packages/util/brand ), [`llm` ](../packages/llm/llm ) |
2026-07-11 21:37:38 +08:00
| [`tools` ](../packages/core/tools ) | `core` | [`agent` ](../packages/core/agent ), [`code-runtime` ](../packages/code-runtime/code-runtime ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ), [`system-prompt` ](../packages/core/system-prompt ), [`user-approval` ](../packages/ui/user-approval ) |
2026-07-09 16:05:44 +08:00
| [`bash-sandbox` ](../packages/bash/bash-sandbox ) | `bash` | [`bash` ](../packages/bash/bash ), [`bash-local` ](../packages/bash/bash-local ), [`sandbox` ](../packages/sandbox/sandbox ) |
2026-07-05 01:25:58 +08:00
| [`agent-loop` ](../packages/core/agent-loop ) | `core` | [`agent` ](../packages/core/agent ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ), [`session-persistence` ](../packages/session-persistence/session-persistence ), [`system-prompt` ](../packages/core/system-prompt ), [`tools` ](../packages/core/tools ) |
2026-07-11 22:57:27 +08:00
| [`tool-bash` ](../packages/bash/tool-bash ) | `bash` | [`agent` ](../packages/core/agent ), [`bash` ](../packages/bash/bash ), [`llm` ](../packages/llm/llm ), [`sandbox` ](../packages/sandbox/sandbox ), [`session-persistence` ](../packages/session-persistence/session-persistence ), [`system-prompt` ](../packages/core/system-prompt ), [`tools` ](../packages/core/tools ), [`user-approval` ](../packages/ui/user-approval ) |
2026-07-05 01:25:58 +08:00
| [`tool-fs` ](../packages/fs/tool-fs ) | `fs` | [`fs` ](../packages/fs/fs ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ), [`system-prompt` ](../packages/core/system-prompt ), [`tools` ](../packages/core/tools ) |
2026-07-10 14:19:06 +08:00
| [`tool-skill` ](../packages/skill/tool-skill ) | `skill` | [`agent` ](../packages/core/agent ), [`llm` ](../packages/llm/llm ), [`skill` ](../packages/skill/skill ), [`tools` ](../packages/core/tools ) |
2026-07-05 01:25:58 +08:00
| [`subagent` ](../packages/subagent/subagent ) | `subagent` | [`agent` ](../packages/core/agent ), [`llm` ](../packages/llm/llm ), [`tools` ](../packages/core/tools ) |
| [`tool-web` ](../packages/web/tool-web ) | `web` | [`llm` ](../packages/llm/llm ), [`system-prompt` ](../packages/core/system-prompt ), [`tools` ](../packages/core/tools ), [`web` ](../packages/web/web ) |
2026-07-08 10:06:07 +08:00
| [`timeout-policy` ](../packages/timeout/timeout-policy ) | `timeout` | [`llm` ](../packages/llm/llm ), [`timeout` ](../packages/util/timeout ), [`tools` ](../packages/core/tools ) |
2026-07-05 01:25:58 +08:00
| [`tool-todo` ](../packages/todo/tool-todo ) | `todo` | [`agent` ](../packages/core/agent ), [`session` ](../packages/core/session ), [`tools` ](../packages/core/tools ) |
2026-07-08 11:50:12 +08:00
| [`tool-cordis` ](../packages/cordis/tool-cordis ) | `cordis` | [`tools` ](../packages/core/tools ) |
2026-07-10 20:52:27 +08:00
| [`hooks-codex` ](../packages/hooks/hooks-codex ) | `hooks` | [`agent` ](../packages/core/agent ), [`hook-protocol` ](../packages/hooks/hook-protocol ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ), [`session-persistence` ](../packages/session-persistence/session-persistence ), [`tools` ](../packages/core/tools ) |
2026-07-11 21:37:38 +08:00
| [`acp` ](../packages/ui/acp ) | `ui` | [`agent` ](../packages/core/agent ), [`bash` ](../packages/bash/bash ), [`llm` ](../packages/llm/llm ), [`sandbox` ](../packages/sandbox/sandbox ), [`session` ](../packages/core/session ), [`session-persistence` ](../packages/session-persistence/session-persistence ), [`tools` ](../packages/core/tools ), [`user-approval` ](../packages/ui/user-approval ), [`user-interaction` ](../packages/ui/user-interaction ) |
2026-07-09 17:55:01 +08:00
| [`tool-ask-user` ](../packages/ui/tool-ask-user ) | `ui` | [`agent` ](../packages/core/agent ), [`tools` ](../packages/core/tools ), [`user-interaction` ](../packages/ui/user-interaction ) |
2026-07-08 14:24:20 +08:00
| [`repeat-tool-guard` ](../packages/guard/repeat-tool-guard ) | `guard` | [`agent` ](../packages/core/agent ), [`tools` ](../packages/core/tools ) |
2026-07-06 03:14:07 +08:00
| [`tool-workflow` ](../packages/workflow/tool-workflow ) | `workflow` | [`agent` ](../packages/core/agent ), [`llm` ](../packages/llm/llm ), [`system-prompt` ](../packages/core/system-prompt ), [`tools` ](../packages/core/tools ), [`workflow` ](../packages/workflow/workflow ) |
2026-07-10 14:19:06 +08:00
| [`agent-core` ](../packages/core/agent-core ) | `core` | [`agent` ](../packages/core/agent ), [`agent-loop` ](../packages/core/agent-loop ), [`invariants` ](../packages/support/invariants ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ), [`skill` ](../packages/skill/skill ), [`skill-local` ](../packages/skill/skill-local ), [`system-prompt` ](../packages/core/system-prompt ), [`tool-bash` ](../packages/bash/tool-bash ), [`tool-skill` ](../packages/skill/tool-skill ), [`tools` ](../packages/core/tools ) |
rename: @deepseek-ai/dsh-subagent-process -> @deepseek-ai/dsh-subagent-subprocess
The extracted library's name sat one edit away from @deepseek-ai/dsh-subagent-inprocess
(process/inprocess), inviting a typo'd import to silently resolve to the wrong
package. subagent-subprocess also reads as the deliberate counterpart to
subagent-inprocess (in-process vs. subprocess), matching how the two shared
drivers actually differ.
Package directory, npm name, module doc, JSDoc module tags, test-file name and
its temp-dir prefixes, the subagent-acp import and its Config/tsconfig/package.json
references, root tsconfig.json/tsconfig.build.json/knip.json entries, and the
packages/subagent group README all renamed together; regenerated
docs/module-graph.md and docs/config-catalog.md. Pure rename — no behavior,
export, or Config shape changed.
2026-07-09 13:42:03 +08:00
| [`subagent-acp` ](../packages/subagent/subagent-acp ) | `subagent` | [`agent` ](../packages/core/agent ), [`llm` ](../packages/llm/llm ), [`subagent` ](../packages/subagent/subagent ), [`subagent-subprocess` ](../packages/subagent/subagent-subprocess ) |
Structured output on the subagent seam: schema subset, capture runtime, spawn/fork support
Carved out of #170 per review feedback — the foundation the workflow tool
builds on, now standing alone on master:
- dsh-tools: the structured-output JSON Schema subset (StructuredOutputSchema,
assertSupportedOutputSchema, validateStructuredValue) — rejects loud outside
the enforced subset, listing every violation
- dsh-subagent: SubagentStartRequest.outputSchema / SubagentResult.structured
become a real capability; the service rejects a schema'd request whose
provider lacks it
- dsh-subagent-inprocess: the shared structured runtime — one global
structured_output capture tool, a prepend final-assembly listener that
strips the placeholder for plain agents and swaps in the run's own schema
(plus the calling instruction as a trailing section) for structured
children, an agent/turn-continuation veto once captured, and the
capture/nudge loop in the run driver (structuredNudgeRetries, cancellation
honored mid-nudge); lifetime refcounted by backends and live runs
- subagent-spawn / subagent-fork flip outputSchema: true
One deliberate divergence from the #170 revision: the backends do NOT add
'tools' to their plugin inject. Doing so deferred their apply past the todo
plugin, and the delegation tool mirrors provider lifecycle — so the
model-visible tool order of every existing prompt changed, invalidating every
recorded snapshot fixture. The runtime now gates its capture-tool registration
on tools availability itself (sync when live, a scoped inject fiber when the
Loader starts the backend first), keeping this PR byte-invisible to existing
transcripts: all 35 snapshot scenarios pass against master's fixtures
unchanged.
2026-07-06 23:29:08 +08:00
| [`subagent-inprocess` ](../packages/subagent/subagent-inprocess ) | `subagent` | [`agent` ](../packages/core/agent ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ), [`subagent` ](../packages/subagent/subagent ), [`system-prompt` ](../packages/core/system-prompt ), [`tools` ](../packages/core/tools ) |
2026-07-05 01:25:58 +08:00
| [`tool-subagent` ](../packages/subagent/tool-subagent ) | `subagent` | [`agent` ](../packages/core/agent ), [`llm` ](../packages/llm/llm ), [`subagent` ](../packages/subagent/subagent ), [`tools` ](../packages/core/tools ) |
2026-07-10 20:52:27 +08:00
| [`hooks-claude` ](../packages/hooks/hooks-claude ) | `hooks` | [`agent` ](../packages/core/agent ), [`hook-protocol` ](../packages/hooks/hook-protocol ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ), [`session-persistence` ](../packages/session-persistence/session-persistence ), [`subagent` ](../packages/subagent/subagent ), [`tools` ](../packages/core/tools ) |
2026-07-05 01:25:58 +08:00
| [`subagent-mock` ](../packages/support/subagent-mock ) | `support` | [`agent` ](../packages/core/agent ), [`llm` ](../packages/llm/llm ), [`subagent` ](../packages/subagent/subagent ) |
2026-07-09 19:06:55 +08:00
| [`workflow-workerthread` ](../packages/workflow/workflow-workerthread ) | `workflow` | [`agent` ](../packages/core/agent ), [`brand` ](../packages/util/brand ), [`llm` ](../packages/llm/llm ), [`subagent` ](../packages/subagent/subagent ), [`tools` ](../packages/core/tools ), [`workflow` ](../packages/workflow/workflow ) |
2026-07-05 01:25:58 +08:00
| [`subagent-fork` ](../packages/subagent/subagent-fork ) | `subagent` | [`agent` ](../packages/core/agent ), [`session` ](../packages/core/session ), [`subagent` ](../packages/subagent/subagent ), [`subagent-inprocess` ](../packages/subagent/subagent-inprocess ) |
| [`subagent-spawn` ](../packages/subagent/subagent-spawn ) | `subagent` | [`subagent` ](../packages/subagent/subagent ), [`subagent-inprocess` ](../packages/subagent/subagent-inprocess ) |
2026-07-09 21:23:45 +08:00
| [`acp-agent` ](../packages/ui/acp-agent ) | `ui` | [`acp` ](../packages/ui/acp ), [`agent-core` ](../packages/core/agent-core ), [`app-boot` ](../packages/ui/app-boot ), [`session-persistence-jsonl` ](../packages/session-persistence/session-persistence-jsonl ), [`tools` ](../packages/core/tools ), [`user-interaction` ](../packages/ui/user-interaction ) |
| [`stdio-agent` ](../packages/ui/stdio-agent ) | `ui` | [`agent` ](../packages/core/agent ), [`agent-core` ](../packages/core/agent-core ), [`app-boot` ](../packages/ui/app-boot ), [`llm` ](../packages/llm/llm ), [`session` ](../packages/core/session ), [`session-persistence-jsonl` ](../packages/session-persistence/session-persistence-jsonl ), [`tool-ask-user` ](../packages/ui/tool-ask-user ), [`tools` ](../packages/core/tools ), [`user-interaction` ](../packages/ui/user-interaction ) |
