Merge master and integrate image offload with both DeepSeek protocols

python/sdk-runtime/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write python/sdk-runtime/README.md
-README.md: ce733b8f293e974ec051e600c187e0741117ab46
+README.md: 8ab226427f89d2746d6da13bcd8bd254731f2460
 README.zh.md: 23a042006c38425a83347322fa63f0fafb319d0d

python/sdk-runtime/README.md

@@ -35,4 +35,4 @@ Production deployment permits unused workspace patches for packages outside the
 
 From the repository root, `pnpm exec tsx scripts/build-exe-for-python-sdk.ts` verifies the closure, builds packages, deploys a symlink-free tree, packages the selected target, and syncs the executable and sidecars into this module. `scripts/build-python-release.py` stages release-shaped wheels at the root repository version and pins `deepseek-harness-sdk` to the exact runtime version.
 
-The installed-wheel smoke creates a clean virtual environment outside the checkout, proves distribution and executable provenance, then exercises default and customized SDK profiles, external plugins, MCP, native tools, direct JSON-RPC, committed snapshots, and the real provider on trusted runs. See the [Python contributor workflow](../development.md) and [installed-wheel testing decision](../../.agents/notes/implemented/testing/2026-08-23-installed-python-wheel-black-box-ci.md).
+The installed-wheel smoke creates a clean virtual environment outside the checkout, proves the installed distribution and executable identities, then exercises default and customized SDK profiles, external plugins, MCP, native tools, direct JSON-RPC, committed snapshots, and the real provider on trusted runs. See the [Python contributor workflow](../development.md) and [installed-wheel testing decision](../../.agents/notes/implemented/testing/2026-08-23-installed-python-wheel-black-box-ci.md).

python/sdk-runtime/package.json

@@ -24,8 +24,8 @@
     "@deepseek-ai/dsh-authorization": "workspace:^",
     "@deepseek-ai/dsh-bash-local": "workspace:^",
     "@deepseek-ai/dsh-brand": "workspace:^",
-    "@deepseek-ai/dsh-code-runtime": "workspace:^",
-    "@deepseek-ai/dsh-code-runtime-worker-thread": "workspace:^",
+    "@deepseek-ai/dsh-ptc-runtime": "workspace:^",
+    "@deepseek-ai/dsh-ptc-runtime-node": "workspace:^",
     "@deepseek-ai/dsh-command-compact": "workspace:^",
     "@deepseek-ai/dsh-command-goal": "workspace:^",
     "@deepseek-ai/dsh-commands": "workspace:^",
@@ -130,7 +130,7 @@
     "@deepseek-ai/dsh-web-search-exa": "workspace:^",
     "@deepseek-ai/dsh-web-search-perplexity": "workspace:^",
     "@deepseek-ai/dsh-workflow": "workspace:^",
-    "@deepseek-ai/dsh-workflow-worker-thread": "workspace:^",
+    "@deepseek-ai/dsh-workflow-ptc": "workspace:^",
     "@deepseek-ai/schemastery": "workspace:^"
   }
 }

python/sdk-runtime/runtime-bootstrap.mjs

@@ -1,10 +1,20 @@
 #!/usr/bin/env node
 /** Private entry owned by the Python single-file runtime packaging. */
+import { fileURLToPath } from 'node:url'
 
 const selectorName = 'DSH_SUBPROCESS_RUNNER'
 const selection = process.env[selectorName]
+const aclRunner = process.platform === 'win32'
+  ? fileURLToPath(import.meta.resolve('@deepseek-ai/dsh-sandbox-windows-acl/runner'))
+  : undefined
 
-if (selection === undefined) {
+if (aclRunner !== undefined && process.argv[2] === aclRunner) {
+  process.argv.splice(1, 1)
+  await import('@deepseek-ai/dsh-sandbox-windows-acl/runner')
+} else if (process.env.DSH_PTC_RUNTIME_NODE === '1') {
+  Reflect.deleteProperty(process.env, 'DSH_PTC_RUNTIME_NODE')
+  await import('@deepseek-ai/dsh-ptc-runtime-node/process')
+} else if (selection === undefined) {
   const { runCli } = await import('@deepseek-ai/dsh/lib/bin.js')
   await runCli()
 } else {