@aiwayds/dsh-dcp 0.5.1 → 0.7.0

package/README.en.md

@@ -3,6 +3,8 @@
 Deterministic context-compaction backend for dsh (DeepSeek Harness): **context
 compaction without an LLM call**, works out of the box.
 
+**Requires dsh >= 0.1.2-rc.1** — this plugin targets the dsh RC/stable line only (CI and releases resolve the newest of the `latest`/`next` dist-tags at runtime). **The alpha line is no longer supported.**
+
 > [简体中文](README.md) · **English**
 
 ## Why

package/README.md

@@ -2,6 +2,8 @@
 
 dsh（DeepSeek Harness）的确定性压缩后端：**上下文压缩不调 LLM**，开箱即用。
 
+**要求 dsh >= 0.1.2-rc.1** — 本插件只跟随 dsh RC/stable 线（CI 与发版在运行时解析 latest/next 中更新的 dist-tag）。**不再支持 alpha 线。**
+
 > **简体中文** · [English](README.en.md)
 
 ## 为什么做

package/lib/config.js

@@ -60,11 +60,11 @@ export function splitConfig(config = {}) {
   for (const key of Object.keys(config)) {
     if (!known.has(key)) throw new Error(`DcpConfig: unknown key "${key}"`)
   }
-  const basic = {}
+  const basic = /** @type {Record<string, unknown>} */ ({})
   for (const key of BASIC_CONFIG_KEYS) {
     if (config[key] !== undefined) basic[key] = config[key]
   }
-  const dcp = {}
+  const dcp = /** @type {Record<string, unknown>} */ ({})
   for (const key of DCP_CONFIG_KEYS) {
     if (config[key] !== undefined) dcp[key] = config[key]
   }
@@ -75,7 +75,7 @@ export function splitConfig(config = {}) {
  * Validate and resolve dcp defaults.
  *
  * @param {Record<string, unknown>} raw - the dcp half of {@link splitConfig}.
- * @returns {Readonly<{dedup: boolean, purgeErrors: boolean, maxItems: number, maxItemChars: number, maxSummaryTokens: number, language: 'en'|'zh', tokenEstimate: 'cjk'|'ascii', protectedTools: readonly string[]}>}
+ * @returns {Readonly<{dedup: boolean, purgeErrors: boolean, maxItems: number, maxItemChars: number, maxSummaryTokens: number, language: 'en'|'zh', tokenEstimate: 'cjk'|'ascii', protectedTools: readonly string[], roundInterval: number, notice: boolean}>}
  */
 export function resolveDcpConfig(raw = {}) {
   if (raw.dedup !== undefined && typeof raw.dedup !== 'boolean') {

package/lib/index.js

@@ -50,6 +50,11 @@ const { version: VERSION } = require('../package.json')
  * "Cannot read private member #triggerLabels from an object whose class did
  * not declare it", while symbol lookups traverse those receivers to this
  * instance's own state.
+ *
+ * Verified against dsh 0.1.2-alpha.3 (cordis 4.0.2): `withProps` /
+ * `createTraceable` / `applyTraceable` receivers and the `ctx.mixin` service
+ * forwarding are unchanged, and the base engine still brands no `#private`
+ * state — the symbol-keyed approach remains both necessary and valid.
  */
 const kRounds = Symbol('dsh-dcp.rounds')
 const kTriggerLabels = Symbol('dsh-dcp.triggerLabels')
@@ -111,6 +116,7 @@ export class DcpEngine extends BasicCompactionEngine {
   dcp
 
   /** Compaction counters surfaced by `/dcp`. */
+  /** @type {{compactions: number, shadowedTokens: number, lastAt: number|null}} */
   dcpStats
 
   /** Absolute module path, echoed by `/dcp set` for persistence snippets. */
@@ -230,6 +236,10 @@ export class DcpEngine extends BasicCompactionEngine {
    * round-interval trigger — the parent's `compactNow` bypasses
    * `compactRegion` (it drives `compactSurfaceRegion` directly), so without
    * this override the manual path would miss stats and the transcript notice.
+   *
+   * alpha.3 note: the base dereferences `signal` unguarded
+   * (`signal.throwIfAborted()`), so the signal is required — both this
+   * plugin's round trigger and the command invocation always pass one.
    */
   async compactNow(agent, signal, sourceCommandId) {
     const session = agent.session

package/lib/setup.js

@@ -68,7 +68,7 @@ export function findBundledProfiles(profilesDir, pkg) {
  *
  * @param {string|undefined} text - existing file content, or undefined when the file is absent.
  * @param {{ name: string }} options - the resolvable dsh-dcp entry specifier to mount.
- * @returns {{ action: 'create'|'patch'|'skip', block?: string, note?: string }}
+ * @returns {{ action: 'create'|'patch', block: string, note?: string } | { action: 'skip' }}
  */
 export function planPatch(text, { name }) {
   if (text === undefined || text === null) {

package/lib/summarizer.js

@@ -105,7 +105,7 @@ export function estimateTextTokens(text, mode = 'cjk') {
  * tool-result payloads (the same content the host meter prices, minus its
  * per-block overhead).
  *
- * @param {{ content?: Array<{ type: string }> }} message - any message-shaped object.
+ * @param {{ content?: Array<Record<string, any>> }} message - any message-shaped object.
  * @param {'cjk'|'ascii'} [mode] - pricing mode, see {@link estimateTextTokens}.
  * @returns {number} estimated tokens.
  */
@@ -275,7 +275,7 @@ function argDisplay(name, parsed) {
  * @returns {object} the extracted fact bundle.
  */
 export function extractFacts(messages, language = 'en') {
-  const facts = {
+  const facts = /** @type {{messageCount: number, intents: string[], files: Map<string, {reads: number, writes: number}>, commands: string[], errors: string[], pendingTodos: string[], concepts: Set<string>, dupCounts: Map<string, {name: string, parsed: any, count: number}>, toolCallCount: number, lastUserText: string, lastAssistantText: string, carried: Map<string, string[]>}} */ ({
     messageCount: messages.length,
     intents: [],
     files: new Map(),
@@ -288,7 +288,7 @@ export function extractFacts(messages, language = 'en') {
     lastUserText: '',
     lastAssistantText: '',
     carried: new Map(),
-  }
+  })
   const callsById = new Map()
   const errorRegexes = errorPatterns(language)
   const { checkbox, markers } = todoPatterns(language)
@@ -521,7 +521,7 @@ function composeTerse(facts, t, itemChars) {
  *
  * @param {{ messages: import('@deepseek-ai/dsh-llm').Message[] }} input - replayed region.
  * @param {object} dcp - resolved dcp config.
- * @param {(message: unknown) => number} [estimateMessageLike] - token estimator; defaults to {@link estimateMessageTokens}.
+ * @param {(message: any) => number} [estimateMessageLike] - token estimator; defaults to {@link estimateMessageTokens}.
  * @returns {{ summary: { type: 'text', text: string }[], provider: string, model: string }}
  */
 export function summarizeDeterministically(input, dcp, estimateMessageLike = (message) => estimateMessageTokens(message, dcp.tokenEstimate)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiwayds/dsh-dcp",
-  "version": "0.5.1",
+  "version": "0.7.0",
   "description": "Deterministic context-pruning compaction backend for dsh (DeepSeek Harness) — zero-LLM summaries, /dcp command, works out of the box. Design references Opencode-DCP/opencode-dynamic-context-pruning.",
   "type": "module",
   "main": "lib/index.js",
@@ -24,7 +24,10 @@
   ],
   "scripts": {
     "test": "node --test",
-    "setup": "node scripts/setup.mjs"
+    "setup": "node scripts/setup.mjs",
+    "link:closure": "node scripts/link-dsh-closure.mjs",
+    "check": "tsc --noEmit -p tsconfig.json",
+    "smoke": "node scripts/smoke-boot.mjs"
   },
   "keywords": [
     "dsh",
@@ -48,18 +51,18 @@
   },
   "dependencies": {},
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-brand": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-commands": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-compaction": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-compaction-basic": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-compaction-tool-result-pruner": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-invariants": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-token-meter": "0.1.0-rc.6",
-    "@deepseek-ai/schemastery": "^3.18.1"
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-agent": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-brand": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-commands": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction-basic": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction-tool-result-pruner": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-invariants": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-session": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-token-meter": ">=0.1.2-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.2"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -100,33 +103,49 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-brand": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-commands": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-compaction": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-compaction-basic": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-compaction-tool-result-pruner": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-invariants": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-token-meter": "0.1.0-rc.6",
-    "@deepseek-ai/schemastery": "^3.18.1"
+    "@types/node": "^24.0.0",
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh-agent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-brand": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-commands": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction-basic": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction-tool-result-pruner": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-invariants": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-token-meter": "0.1.2-rc.1",
+    "@deepseek-ai/schemastery": "3.18.2",
+    "typescript": "~5.9.0"
   },
   "overrides": {
-    "@deepseek-ai/dsh-agent": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-brand": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-commands": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-compaction": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-compaction-tool-result-pruner": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-invariants": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-token-meter": "0.1.0-rc.6"
+    "@deepseek-ai/dsh-agent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-brand": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-commands": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction-tool-result-pruner": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-invariants": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-token-meter": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-scope": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-attachment": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-projection": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm-retry": "0.1.2-rc.1"
   },
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
     }
+  },
+  "pnpm": {
+    "overrides": {
+      "@deepseek-ai/dsh-scope": "0.1.2-rc.1",
+      "@deepseek-ai/dsh-attachment": "0.1.2-rc.1",
+      "@deepseek-ai/dsh-session-projection": "0.1.2-rc.1",
+      "@deepseek-ai/dsh-system-prompt": "0.1.2-rc.1",
+      "@deepseek-ai/dsh-llm-retry": "0.1.2-rc.1"
+    }
   }
 }

package/scripts/compare.mjs

@@ -175,7 +175,7 @@ function fmt(n) {
  */
 function simulate(events, mode, useDcp) {
   const surface = []
-  const stats = { requests: 0, inputTokens: 0, hitTokens: 0, compactions: [] }
+  const stats = /** @type {{ requests: number, inputTokens: number, hitTokens: number, compactions: Array<{regionNodes: number, regionHost: number, regionCjk: number, summaryHost: number, summaryCjk: number, compression: string, totalAfter: number, preview: string}> }} */ ({ requests: 0, inputTokens: 0, hitTokens: 0, compactions: [] })
   let prevSurface = []
   let compactionId = 0
 

package/scripts/link-dsh-closure.mjs

@@ -0,0 +1,100 @@
+/**
+ * Closure linker: point every `node_modules/@deepseek-ai/*` entry at one dsh
+ * closure (the installed dsh CLI's own `node_modules/@deepseek-ai` tree).
+ *
+ * Why this exists: dsh-dcp is a plugin that runs *inside* the installed dsh
+ * CLI, and its source imports the `@deepseek-ai/*` host packages (cordis,
+ * dsh-compaction-basic, dsh-llm, …). This repo is lib-as-source — there is no
+ * `src/` and no build step — so typecheck (`pnpm check`, tsc checkJs) and the
+ * node:test suite must resolve those imports against exactly ONE copy of the
+ * host graph: the closure the real runtime uses. Linking also guarantees a
+ * single `@deepseek-ai/cordis` instance, which the `declare module`
+ * augmentations (e.g. `ctx.commands`) require.
+ *
+ * NOTE on the guard below: unlike a TS repo this repo has no `src/` directory
+ * — `lib/` IS the source — so the "am I inside the repo?" check looks for
+ * `lib/` (plus `.git/`, which a published tarball never carries). The script
+ * is never wired as a lifecycle hook (no postinstall); it is run explicitly
+ * (CI step, `pnpm link:closure`), and the guard only protects stray manual
+ * runs from outside the repo.
+ *
+ * Resolution order for the closure:
+ *   0) `$DSH_CLOSURE_DIR` — explicit override, e.g. a scratch closure from
+ *      `npm i --prefix ~/tmp/dsh-alpha-closure @deepseek-ai/dsh@alpha`:
+ *      DSH_CLOSURE_DIR=~/tmp/dsh-alpha-closure/node_modules/@deepseek-ai node scripts/link-dsh-closure.mjs
+ *   1) the `dsh` bin on PATH → its package's node_modules/@deepseek-ai
+ *   2) `npm root -g` nested closure, then npm's flat global @deepseek-ai scope
+ *
+ * It is a no-op (exit 0) when no dsh closure is found.
+ */
+
+import { execFileSync } from 'node:child_process'
+import { existsSync, mkdirSync, readdirSync, realpathSync, rmSync, symlinkSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const repoRoot = dirname(dirname(fileURLToPath(import.meta.url)))
+// Guard: dev convenience for THIS repo only. lib/ is this repo's source (there
+// is no src/), and .git/ only exists in a working clone — never in a packed
+// tarball — so both together prove "inside the repo, not a consumer install".
+if (!existsSync(join(repoRoot, 'lib')) || !existsSync(join(repoRoot, '.git'))) {
+  process.exit(0)
+}
+const scopeDir = join(repoRoot, 'node_modules', '@deepseek-ai')
+
+/** The dsh closure: a node_modules dir whose @deepseek-ai scope is complete. */
+function findDshClosure() {
+  // 0) Explicit override for dev/typecheck against an unreleased dsh line.
+  const override = process.env.DSH_CLOSURE_DIR
+  if (override !== undefined && override !== '') {
+    const dir = realpathSync(override)
+    if (existsSync(join(dir, 'cordis'))) return dir
+    console.warn(`[link-dsh-closure] DSH_CLOSURE_DIR=${override} lacks @deepseek-ai/cordis — ignoring override`)
+  }
+  // 1) Follow the `dsh` bin — the most faithful pointer to the installed CLI
+  //    (`/opt/homebrew/bin/dsh` → …/lib/bin.js → pkg dir → its node_modules).
+  try {
+    const bin = execFileSync('which', ['dsh'], { encoding: 'utf8' }).trim()
+    if (bin !== '') {
+      const real = realpathSync(bin)
+      const closure = join(dirname(dirname(real)), 'node_modules', '@deepseek-ai')
+      if (existsSync(join(closure, 'cordis'))) return closure
+    }
+  } catch { /* dsh not on PATH */ }
+  // 2) Fall back to the global node_modules root — the dsh package's own
+  //    nested closure (what current npm produces for a global install).
+  try {
+    const root = execFileSync('npm', ['root', '-g'], { encoding: 'utf8' }).trim()
+    const nested = join(root, '@deepseek-ai', 'dsh', 'node_modules', '@deepseek-ai')
+    if (existsSync(join(nested, 'cordis'))) return nested
+    // 3) Last resort: npm's flat global layout, where dsh's @deepseek-ai/*
+    //    deps are hoisted straight into <npm root -g>/@deepseek-ai next to
+    //    the dsh package itself.
+    const flat = join(root, '@deepseek-ai')
+    if (existsSync(join(flat, 'cordis'))) return flat
+  } catch { /* npm unavailable */ }
+  return undefined
+}
+
+const closure = findDshClosure()
+if (closure === undefined) {
+  console.warn('[link-dsh-closure] no dsh closure found — skipping @deepseek-ai links (dev without dsh)')
+  process.exit(0)
+}
+
+mkdirSync(scopeDir, { recursive: true })
+let linked = 0
+for (const name of readdirSync(closure)) {
+  const target = join(scopeDir, name)
+  const source = join(closure, name)
+  try {
+    // Replace any existing entry (stale symlink, or a local .pnpm copy a
+    // previous install created) with the closure link.
+    rmSync(target, { recursive: true, force: true })
+    symlinkSync(source, target, 'junction')
+    linked++
+  } catch (error) {
+    console.warn(`[link-dsh-closure] failed to link ${name}: ${(error instanceof Error ? error.message : String(error))}`)
+  }
+}
+console.log(`[link-dsh-closure] linked ${linked} @deepseek-ai/* packages from ${closure}`)

package/scripts/smoke-boot.mjs

@@ -0,0 +1,122 @@
+#!/usr/bin/env node
+// Boot-smoke: mount the freshly packed dsh-dcp into a scratch dsh profile and
+// boot it with the real dsh CLI.
+//
+// Unlike dsh-cron (which mounts through the bundle patch), this exercises the
+// cordis.patch.yml mechanism — the same layer scripts/setup.mjs writes for
+// users: the profile patch disables the default `compaction-basic` backend and
+// inserts dsh-dcp by absolute path.
+//
+//   1. npm pack the repo → tarball
+//   2. scratch $DSH_HOME/profiles/smoke: the dsh-base bundle plus the tarball
+//      as a file: dependency, and a cordis.patch.yml carrying the
+//      disable-compaction-basic + insert-dsh-dcp mount block
+//   3. pnpm install in the profile
+//   4. `dsh --profile smoke --dump-config` must compose dsh-dcp into the tree
+//      (mount/patch-layer proof)
+//   5. a real boot under a timeout must load the plugin tree without a loader
+//      error (a healthy boot is silent and survives to the kill signal; a
+//      broken plugin dies within ~1s with the loader error)
+//
+// The dsh CLI comes from $DSH_BIN if set (e.g. a scratch alpha closure:
+// DSH_BIN=~/tmp/dsh-alpha-closure/node_modules/@deepseek-ai/dsh/lib/bin.js),
+// otherwise `dsh` on PATH.
+//
+// Exit 0 = mounted and boots clean. Temp dir is kept and printed on failure,
+// removed on success.
+
+import { spawnSync } from 'node:child_process'
+import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs'
+import { readFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
+const pkg = JSON.parse(await readFile(path.join(repoRoot, 'package.json'), 'utf8'))
+const ownName = pkg.name // @aiwayds/dsh-dcp
+const entryId = 'dsh-dcp'
+
+const work = mkdtempSync(path.join(tmpdir(), 'dsh-dcp-smoke-'))
+const home = path.join(work, 'dsh-home')
+const profile = path.join(home, 'profiles', 'smoke')
+mkdirSync(profile, { recursive: true })
+
+function fail(message, output = '') {
+  console.error(`smoke-boot: FAIL — ${message}`)
+  if (output) console.error(output.split('\n').slice(0, 30).join('\n'))
+  console.error(`smoke-boot: scratch kept at ${work}`)
+  process.exit(1)
+}
+
+const dshBin = process.env.DSH_BIN || 'dsh'
+const dsh = (args, opts = {}) => spawnSync(dshBin, args, { cwd: profile, encoding: 'utf8', env: { ...process.env, DSH_HOME: home }, ...opts })
+
+const pack = spawnSync('npm', ['pack', '--pack-destination', work], { cwd: repoRoot, encoding: 'utf8' })
+if (pack.status !== 0 || pack.error) fail('npm pack failed', `${pack.stdout}\n${pack.stderr}`)
+const tarball = path.join(work, pack.stdout.trim().split('\n').at(-1) ?? '')
+
+writeFileSync(path.join(profile, 'cordis.yml'), '# dsh profile root — empty; the tree is composed from the bundle patches\n[]\n')
+// The mount layer under test — isomorphic with scripts/setup.mjs's output:
+// compaction-basic disabled, dsh-dcp inserted by absolute entry path.
+writeFileSync(path.join(profile, 'cordis.patch.yml'), `# scratch smoke profile: dsh-dcp mounted the setup.mjs way
+- id: compaction-basic
+  disabled: true
+- insert:
+    - id: ${entryId}
+      name: ${path.join(profile, 'node_modules', '@aiwayds', 'dsh-dcp', 'lib', 'index.js')}
+      config:
+        thresholdRatio: 0.7
+        language: zh
+`)
+writeFileSync(path.join(profile, 'pnpm-workspace.yaml'), 'packages:\n  - .\n\nnodeLinker: hoisted\nautoInstallPeers: false\n')
+writeFileSync(path.join(profile, 'package.json'), JSON.stringify({
+  name: 'dsh-profile-smoke',
+  private: true,
+  dependencies: {
+    [ownName]: `file:${tarball}`,
+  },
+  dsh: {
+    profile: {
+      // dsh-base brings the standard tree (including compaction-basic) that
+      // the patch layer then re-wires; dsh-dcp itself mounts via the patch.
+      bundles: [
+        '@deepseek-ai/dsh-base',
+      ],
+    },
+  },
+}, null, 2) + '\n')
+
+const install = spawnSync('pnpm', ['install'], { cwd: profile, encoding: 'utf8' })
+if (install.status !== 0 || install.error) fail('pnpm install in the scratch profile failed', `${install.stdout}\n${install.stderr}`)
+
+// Phase 1 — mount proof: the composed tree must carry the dsh-dcp entry, with
+// compaction-basic disabled rather than removed-by-default.
+const dump = dsh(['--profile', 'smoke', '--dump-config'])
+if (dump.status !== 0 || dump.error) fail('dsh --dump-config failed on the scratch profile', `${dump.stdout}\n${dump.stderr}`)
+if (!dump.stdout.includes(entryId)) {
+  fail(`the composed profile tree does not contain the "${entryId}" entry — the patch mount is broken`, dump.stdout)
+}
+
+// Phase 2 — boot proof: the plugin tree must LOAD without a loader error.
+const bootSeconds = 25
+const boot = dsh(['--profile', 'smoke'], { timeout: bootSeconds * 1000, killSignal: 'SIGKILL' })
+const output = `${boot.stdout ?? ''}\n${boot.stderr ?? ''}`
+const loaderErrors = [
+  /plugin tree failed to load/,
+  /failed to apply loader entry/,
+  /cannot get property ".*" without inject/,
+  /cannot get required service/,
+  /Cannot find (package|module)/,
+  /unknown key/,
+]
+const hit = loaderErrors.filter((re) => re.test(output))
+if (hit.length > 0) {
+  fail('the real host failed to load the plugin tree:', output.split('\n').filter((line) => hit.some((re) => re.test(line)) || /Error/.test(line)).slice(0, 15).join('\n'))
+}
+if (boot.signal !== 'SIGKILL' && boot.status !== 0) {
+  fail(`dsh exited early with code ${boot.status} and no loader error — unexpected`, output)
+}
+
+console.log(`smoke-boot: PASS — ${ownName} mounted via cordis.patch.yml (compaction-basic disabled), composed into the scratch profile tree, and booted clean in real dsh (${boot.signal === 'SIGKILL' ? `survived ${bootSeconds}s boot window` : `exited ${boot.status}`})`)
+rmSync(work, { recursive: true, force: true })