Merge remote-tracking branch 'origin/master' into codex/trim-ai-prose

# Conflicts:
#	docs/config-catalog.md
#	docs/event-producer-consumer.md
#	docs/rfc/implemented/feature/2026-07-05-dynamic-workflows.md
#	examples/acp-agent/tests/acp.snapshot.ts
#	packages/code-runtime/code-runtime-worker/tests/built-lib.e2e.ts
#	packages/code-runtime/code-runtime-worker/tsdown.config.ts

python/sdk-runtime/src/deepseek_harness_runtime/runtime/cordis.yml

@@ -0,0 +1,34 @@
+# Bundled default config. The runtime still requires an explicit
+# $DSH_CORDIS_CONFIG or argv path; the SDK injects this path for bundled
+# zero-config launches. SDK-set environment variables have manual-run fallbacks.
+
+# Stdio JSON-RPC serving surface; without it the agent has no SDK client.
+- id: jsonrpc
+  name: '@deepseek-ai/dsh-jsonrpc'
+
+# Agent spine; the SDK server creates agents per sessionId.
+- id: agent-core
+  name: '@deepseek-ai/dsh-agent-core'
+
+# Stock DeepSeek adapters. Loading requires an API key; initialize and shutdown
+# may use a dummy key because they do not call the model.
+- id: llm-deepseek
+  name: '@deepseek-ai/dsh-llm-deepseek'
+  config:
+    apiKey: !!js process.env.DEEPSEEK_API_KEY
+    baseURL: !!js process.env.DEEPSEEK_BASE_URL
+    models:
+      - deepseek-v4-flash
+      - deepseek-v4-pro
+
+# JSONL persistence; $DSH_SESSION_ROOT wins over ./.sessions in the process cwd.
+- id: sessions
+  name: '@deepseek-ai/dsh-session-persistence-jsonl'
+  config:
+    root: !!js process.env.DSH_SESSION_ROOT ?? './.sessions'
+
+# Local bash executor; $DSH_CWD wins over the process cwd.
+- id: bash
+  name: '@deepseek-ai/dsh-bash-local'
+  config:
+    cwd: !!js process.env.DSH_CWD ?? process.cwd()