@aiwayds/dsh-tui-pi 2.0.1 → 2.0.2

package/README.md

@@ -40,7 +40,7 @@ dsh plugin --profile tui add @aiwayds/dsh-dcp                 # optional
 dsh --profile tui          # launch (or: dsh-tui-pi)
 ```
 
-The `dsh-tui-pi` launcher runs a silent preflight before booting dsh: it migrates legacy `session_projcache` records that are missing `identity.isSeeded`/`identity.inheritedEventCount` (records written before dsh 0.1.2-alpha.4 would otherwise crash the boot). It is idempotent — already-migrated records are never touched — and a preflight failure never blocks startup.
+Legacy `session_projcache` records (missing `identity.isSeeded`/`identity.inheritedEventCount`, written before dsh 0.1.2-alpha.4) are migrated at the profile layer: the bundle patch replaces the stock `session-projection-cache` row with a wrapper (`@aiwayds/dsh-tui-pi/projcache`) that backfills the records while its module loads — strictly before the stock plugin could open the domain and crash the boot — so every `dsh --profile tui` start is covered, launcher or not. Migration is idempotent, backs up every rewritten file next to the original, and never blocks startup. The `dsh-tui-pi` launcher additionally runs the same migration as a CLI preflight before `exec dsh`.
 
 Everything that used to need manual patching — the canvas background, the `@deepseek-ai` module closure, the compaction backend — now happens automatically. Upgrade an existing profile after a release:
 

package/bin/preflight-projcache.mjs

@@ -1,108 +1,26 @@
 #!/usr/bin/env node
 /**
- * Preflight migration for the dsh `session_projcache` storage domain.
+ * Preflight migration for the dsh `session_projcache` storage domain — CLI
+ * shell around the shared core (lib/preflight-projcache.js, built from
+ * src/preflight-projcache.ts). The `dsh-tui-pi` launcher (bin/dsh-tui-pi)
+ * runs this before `exec dsh`. This is one of two mount points for the
+ * migration; the other is lib/projcache.js, the wrapper module the bundle
+ * patch mounts in place of the stock session-projection-cache row, so plain
+ * `dsh --profile tui` boots are covered without the launcher.
  *
- * Background: dsh 0.1.2-alpha.4 extends the session-projection-cache record
- * schema with `identity.isSeeded: boolean` and `identity.inheritedEventCount:
- * number`. The boot plugin tree opens the storage domain (allSettled, no
- * migrate hook) and fail-fast validates those fields — records written by
- * older dsh builds (0.1.1-rc.2 era) lack them, so the whole dsh process dies
- * with a bare stack trace before the TUI ever mounts. This script runs from
- * the launcher (bin/dsh-tui-pi) before `exec dsh` and backfills the two
- * fields on every legacy record under
- *
- *   <DSH_HOME>/storages/session_projcache/sessions/session-*.json
- *
- * - records that already carry both fields are left byte-identical (no IO);
- * - every changed record is backed up next to the original, then rewritten
- *   atomically (tmp file + rename);
- * - the script NEVER blocks startup: any unexpected error is swallowed with
- *   a one-line stderr warning and a 0 exit code.
+ * Contract (unchanged since 2.0.1):
+ *   - scans <DSH_HOME||~/.dsh>/storages/session_projcache/sessions/session-*.json
+ *   - backfills identity.isSeeded:false / identity.inheritedEventCount:0
+ *   - records that already carry both fields are left byte-identical (no IO);
+ *   - every changed record is backed up next to the original, then rewritten
+ *     atomically (tmp file + rename);
+ *   - per-record problems warn on stderr and never abort the scan;
+ *   - ALWAYS exits 0: a preflight failure must never block startup.
  */
 
 import fs from 'node:fs'
-import os from 'node:os'
-import path from 'node:path'
 import { fileURLToPath } from 'node:url'
-
-const BACKFILL = { isSeeded: false, inheritedEventCount: 0 }
-
-function isPlainObject(value) {
-  return typeof value === 'object' && value !== null && !Array.isArray(value)
-}
-
-function backupPathFor(file) {
-  const stamp = new Date().toISOString()
-  let candidate = `${file}.bak-preflight-${stamp}`
-  for (let n = 2; fs.existsSync(candidate); n++) {
-    candidate = `${file}.bak-preflight-${stamp}-${n}`
-  }
-  return candidate
-}
-
-/**
- * Backfill missing identity fields on every session-*.json record under dir.
- * Returns { checked, fixed } — `fixed` counts records rewritten (or, in
- * check mode, records that would be rewritten). Unparsable records are
- * warned about on stderr and skipped.
- */
-export function preflightProjcache(dir, { check = false } = {}) {
-  const result = { checked: 0, fixed: 0 }
-  if (!fs.existsSync(dir)) return result
-
-  for (const name of fs.readdirSync(dir)) {
-    if (!/^session-.*\.json$/.test(name)) continue
-    const file = path.join(dir, name)
-    if (!fs.statSync(file).isFile()) continue
-    result.checked++
-
-    let text
-    try {
-      text = fs.readFileSync(file, 'utf8')
-    } catch (err) {
-      process.stderr.write(`[preflight-projcache] unreadable ${name}: ${err?.message ?? err}\n`)
-      continue
-    }
-    let obj
-    try {
-      obj = JSON.parse(text)
-    } catch {
-      process.stderr.write(`[preflight-projcache] skipping unparsable ${name}\n`)
-      continue
-    }
-    if (!isPlainObject(obj)) continue
-
-    let identity = obj.identity
-    if (identity === undefined) {
-      identity = {}
-      obj.identity = identity
-    }
-    if (!isPlainObject(identity)) continue
-
-    let changed = false
-    for (const [field, value] of Object.entries(BACKFILL)) {
-      if (identity[field] === undefined) {
-        identity[field] = value
-        changed = true
-      }
-    }
-    if (!changed) continue
-
-    result.fixed++
-    if (check) continue
-    try {
-      fs.writeFileSync(backupPathFor(file), text)
-      const migrated = JSON.stringify(obj, null, 2) + (text.endsWith('\n') ? '\n' : '')
-      const tmp = `${file}.tmp-preflight-${process.pid}`
-      fs.writeFileSync(tmp, migrated)
-      fs.renameSync(tmp, file)
-    } catch (err) {
-      result.fixed--
-      process.stderr.write(`[preflight-projcache] failed to rewrite ${name}: ${err?.message ?? err}\n`)
-    }
-  }
-  return result
-}
+import { preflightProjcache, projcacheSessionsDir } from '../lib/preflight-projcache.js'
 
 function isMainEntry() {
   try {
@@ -113,19 +31,13 @@ function isMainEntry() {
   }
 }
 
-function main() {
-  const home = process.env.DSH_HOME || path.join(os.homedir(), '.dsh')
-  const dir = path.join(home, 'storages', 'session_projcache', 'sessions')
-  const check = process.argv.includes('--check')
-  const { fixed } = preflightProjcache(dir, { check })
-  if (check) process.stdout.write(`${fixed} session_projcache record(s) need migration\n`)
-}
-
 // Run the CLI shell only when executed directly — importing this module
-// (from the tests) must have no side effects.
+// must have no side effects.
 if (isMainEntry()) {
   try {
-    main()
+    const check = process.argv.includes('--check')
+    const { fixed } = preflightProjcache(projcacheSessionsDir(), { check })
+    if (check) process.stdout.write(`${fixed} session_projcache record(s) need migration\n`)
   } catch (err) {
     // Never block startup: a preflight failure is a warning, not an error.
     process.stderr.write(`[preflight-projcache] skipped: ${err?.message ?? err}\n`)

package/cordis.patch.yml

@@ -14,9 +14,36 @@
 # the bundle to be wired into the model-facing tool catalog. Without this
 # insert, the `ask_user_question` tool never registers with the model and
 # the user-questions seam has no visible surface in this profile.
+#
+# The stock session-projection-cache row is REPLACED (disable + wrapper), not
+# extended: the alpha.4 record schema fail-fasts at storage-open on records
+# written by 0.1.1-rc.2-era hosts (missing identity.isSeeded /
+# identity.inheritedEventCount), and the crash happens inside the stock
+# plugin's own Service.init — the loader collects it from the parallel
+# allSettled and tears down the whole boot before any later-initializing
+# plugin could repair the data. The wrapper entry below (tui-pi-projcache)
+# mounts @aiwayds/dsh-tui-pi/projcache, which backfills the legacy fields at
+# module-evaluation time — the one hook the loader reaches strictly before
+# Service.init — and otherwise re-exports the stock module unchanged.
+#
+# The `name` field on the disable patch is a guard, not an override: if a
+# future host renames or drops the row, the patch is skipped with a loader
+# warning instead of silently disabling an unrelated entry.
+
+- id: session-projection-cache
+  name: '@deepseek-ai/dsh-session-projection-cache'
+  disabled: true
 
 - insert:
     - id: tui-pi
       name: '@aiwayds/dsh-tui-pi'
     - id: tool-ask-user
       name: '@deepseek-ai/dsh-tool-ask-user'
+    # Config mirrors the stock row's values (the plugin's Config schema
+    # requires both fields); a later upstream retune of the base row does not
+    # propagate through a disabled entry, so revisit on host upgrades.
+    - id: tui-pi-projcache
+      name: '@aiwayds/dsh-tui-pi/projcache'
+      config:
+        writeEveryEvents: 200
+        writeIntervalMs: 5000

package/lib/preflight-projcache.d.ts

@@ -0,0 +1,39 @@
+/**
+ * session_projcache record migration, shared by both mount points:
+ *
+ * - `bin/preflight-projcache.mjs` — the CLI shell the `dsh-tui-pi` launcher
+ *   runs before `exec dsh` (covers users starting through the launcher);
+ * - `src/projcache.ts` — the wrapper module the bundle patch mounts in place
+ *   of the stock `session-projection-cache` row (covers every `dsh --profile
+ *   tui` boot, launcher or not).
+ *
+ * The dsh 0.1.2-alpha.4 projection-cache schema hard-requires
+ * `identity.isSeeded: boolean` and `identity.inheritedEventCount: number`;
+ * records written by 0.1.1-rc.2-era hosts lack those fields and fail zod
+ * validation at storage-open time (`invalid-record`), which crashes the
+ * whole boot. The migration backfills exactly the missing fields, backs up
+ * every rewritten file next to the original, and always fails open — any
+ * error is a stderr warning, never a startup blocker.
+ */
+export interface PreflightResult {
+    checked: number;
+    fixed: number;
+}
+export interface PreflightOptions {
+    /** Report what would change without touching anything. */
+    check?: boolean;
+}
+/**
+ * The per-record sessions directory the stock plugin's storage domain opens
+ * at boot: `<DSH_HOME || ~/.dsh>/storages/session_projcache/sessions`.
+ */
+export declare function projcacheSessionsDir(home?: string): string;
+/**
+ * Backfill missing identity fields on every `session-*.json` record in
+ * `dir`. Already-migrated records are left byte-identical (no backup, no
+ * rewrite); unparsable or unreadable records are warned about and skipped;
+ * rewrite failures roll that record's count back and warn. Never throws for
+ * per-record problems — only a catastrophic `dir` scan failure propagates,
+ * and both callers catch it.
+ */
+export declare function preflightProjcache(dir: string, { check }?: PreflightOptions): PreflightResult;

package/lib/preflight-projcache.js

@@ -0,0 +1,116 @@
+/**
+ * session_projcache record migration, shared by both mount points:
+ *
+ * - `bin/preflight-projcache.mjs` — the CLI shell the `dsh-tui-pi` launcher
+ *   runs before `exec dsh` (covers users starting through the launcher);
+ * - `src/projcache.ts` — the wrapper module the bundle patch mounts in place
+ *   of the stock `session-projection-cache` row (covers every `dsh --profile
+ *   tui` boot, launcher or not).
+ *
+ * The dsh 0.1.2-alpha.4 projection-cache schema hard-requires
+ * `identity.isSeeded: boolean` and `identity.inheritedEventCount: number`;
+ * records written by 0.1.1-rc.2-era hosts lack those fields and fail zod
+ * validation at storage-open time (`invalid-record`), which crashes the
+ * whole boot. The migration backfills exactly the missing fields, backs up
+ * every rewritten file next to the original, and always fails open — any
+ * error is a stderr warning, never a startup blocker.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+const BACKFILL = { isSeeded: false, inheritedEventCount: 0 };
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function errorMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function warn(message) {
+    process.stderr.write(`[preflight-projcache] ${message}\n`);
+}
+/**
+ * The per-record sessions directory the stock plugin's storage domain opens
+ * at boot: `<DSH_HOME || ~/.dsh>/storages/session_projcache/sessions`.
+ */
+export function projcacheSessionsDir(home = process.env.DSH_HOME || path.join(os.homedir(), '.dsh')) {
+    return path.join(home, 'storages', 'session_projcache', 'sessions');
+}
+function backupPathFor(file) {
+    const stamp = new Date().toISOString();
+    let candidate = `${file}.bak-preflight-${stamp}`;
+    for (let n = 2; fs.existsSync(candidate); n++) {
+        candidate = `${file}.bak-preflight-${stamp}-${n}`;
+    }
+    return candidate;
+}
+/**
+ * Backfill missing identity fields on every `session-*.json` record in
+ * `dir`. Already-migrated records are left byte-identical (no backup, no
+ * rewrite); unparsable or unreadable records are warned about and skipped;
+ * rewrite failures roll that record's count back and warn. Never throws for
+ * per-record problems — only a catastrophic `dir` scan failure propagates,
+ * and both callers catch it.
+ */
+export function preflightProjcache(dir, { check = false } = {}) {
+    const result = { checked: 0, fixed: 0 };
+    if (!fs.existsSync(dir))
+        return result;
+    for (const name of fs.readdirSync(dir)) {
+        if (!/^session-.*\.json$/.test(name))
+            continue;
+        const file = path.join(dir, name);
+        if (!fs.statSync(file).isFile())
+            continue;
+        result.checked++;
+        let text;
+        try {
+            text = fs.readFileSync(file, 'utf8');
+        }
+        catch (err) {
+            warn(`unreadable ${name}: ${errorMessage(err)}`);
+            continue;
+        }
+        let obj;
+        try {
+            obj = JSON.parse(text);
+        }
+        catch {
+            warn(`skipping unparsable ${name}`);
+            continue;
+        }
+        if (!isPlainObject(obj))
+            continue;
+        let identity = obj.identity;
+        if (identity === undefined) {
+            identity = {};
+            obj.identity = identity;
+        }
+        if (!isPlainObject(identity))
+            continue;
+        let changed = false;
+        for (const [field, value] of Object.entries(BACKFILL)) {
+            if (identity[field] === undefined) {
+                identity[field] = value;
+                changed = true;
+            }
+        }
+        if (!changed)
+            continue;
+        result.fixed++;
+        if (check)
+            continue;
+        try {
+            fs.writeFileSync(backupPathFor(file), text);
+            const migrated = JSON.stringify(obj, null, 2) + (text.endsWith('\n') ? '\n' : '');
+            const tmp = `${file}.tmp-preflight-${process.pid}`;
+            fs.writeFileSync(tmp, migrated);
+            fs.renameSync(tmp, file);
+        }
+        catch (err) {
+            result.fixed--;
+            warn(`failed to rewrite ${name}: ${errorMessage(err)}`);
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=preflight-projcache.js.map

package/lib/preflight-projcache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight-projcache.js","sourceRoot":"","sources":["../src/preflight-projcache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,EAAW,CAAA;AAYrE,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,OAAO,IAAI,CAAC,CAAA;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC;IACjG,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAA;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACtC,IAAI,SAAS,GAAG,GAAG,IAAI,kBAAkB,KAAK,EAAE,CAAA;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,SAAS,GAAG,GAAG,IAAI,kBAAkB,KAAK,IAAI,CAAC,EAAE,CAAA;IACnD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,EAAE,KAAK,GAAG,KAAK,KAAuB,EAAE;IACtF,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAA;IAEtC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAQ;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;YAAE,SAAQ;QACzC,MAAM,CAAC,OAAO,EAAE,CAAA;QAEhB,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,cAAc,IAAI,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAChD,SAAQ;QACV,CAAC;QACD,IAAI,GAAY,CAAA;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAA;YACnC,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;YAAE,SAAQ;QAEjC,IAAI,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;QAC3B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,GAAG,EAAE,CAAA;YACb,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACzB,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;YAAE,SAAQ;QAEtC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBAClC,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;gBACvB,OAAO,GAAG,IAAI,CAAA;YAChB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,SAAQ;QAEtB,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,IAAI,KAAK;YAAE,SAAQ;QACnB,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACjF,MAAM,GAAG,GAAG,GAAG,IAAI,kBAAkB,OAAO,CAAC,GAAG,EAAE,CAAA;YAClD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YAC/B,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,EAAE,CAAA;YACd,IAAI,CAAC,qBAAqB,IAAI,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/lib/projcache.d.ts

@@ -0,0 +1,2 @@
+export * from '@deepseek-ai/dsh-session-projection-cache';
+export { default } from '@deepseek-ai/dsh-session-projection-cache';

package/lib/projcache.js

@@ -0,0 +1,32 @@
+/**
+ * Boot-time replacement for the stock `session-projection-cache` bundle row.
+ *
+ * cordis.patch.yml disables the stock row and inserts an entry mounting this
+ * module instead. The alpha.4 schema fail-fasts at storage-open on records
+ * written by 0.1.1-rc.2-era hosts, and that happens inside the stock
+ * plugin's own Service.init — no later-initializing plugin can intercept it,
+ * the loader tears down the whole boot. Module evaluation is the only hook
+ * the loader reaches strictly before Service.init, so the migration runs
+ * here, at import time, backfilling the legacy records on disk before the
+ * stock code opens its storage domain.
+ *
+ * The stock module itself has no import-time side effects (class and zod
+ * schema definitions only), so the hoisted re-export below evaluating first
+ * is harmless. Migration is fail-open: any error warns on stderr and leaves
+ * the boot exactly where it would have been without the wrapper.
+ *
+ * Consumers of the stock package's named exports import
+ * `@deepseek-ai/dsh-session-projection-cache` directly and share this same
+ * module instance; only the loader reaches the plugin through here.
+ */
+import { preflightProjcache, projcacheSessionsDir } from './preflight-projcache.js';
+try {
+    preflightProjcache(projcacheSessionsDir());
+}
+catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`[preflight-projcache] skipped: ${message}\n`);
+}
+export * from '@deepseek-ai/dsh-session-projection-cache';
+export { default } from '@deepseek-ai/dsh-session-projection-cache';
+//# sourceMappingURL=projcache.js.map

package/lib/projcache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projcache.js","sourceRoot":"","sources":["../src/projcache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAEnF,IAAI,CAAC;IACH,kBAAkB,CAAC,oBAAoB,EAAE,CAAC,CAAA;AAC5C,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,OAAO,IAAI,CAAC,CAAA;AACrE,CAAC;AAED,cAAc,2CAA2C,CAAA;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiwayds/dsh-tui-pi",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "description": "pi-style terminal UI for DeepSeek Harness (dsh) — pi-tui look & feel, dsh slash commands, GitHub light/dark themes, powerline footer",
   "repository": {
     "type": "git",
@@ -19,6 +19,18 @@
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./projcache": {
+      "types": "./lib/projcache.d.ts",
+      "default": "./lib/projcache.js"
+    },
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
   "bin": {
     "dsh-tui-pi": "bin/dsh-tui-pi"
   },

package/scripts/smoke-boot.mjs

@@ -8,10 +8,15 @@
 //      dsh.profile.bundles entry (same shape as the user's real profiles)
 //   3. pnpm install
 //   4. `dsh --profile smoke --dump-config` must compose the plugin into the
-//      tree (mount/patch-layer proof)
-//   5. a real boot under a timeout must load the plugin tree without a
+//      tree (mount/patch-layer proof), disable the stock projection-cache
+//      row and mount the projcache wrapper in its place
+//   5. a legacy session_projcache record (the 0.1.1-rc.2 shape that the
+//      alpha.4 schema fail-fasts on) is seeded into the scratch home; the
+//      boot below must migrate it, not crash on it
+//   6. a real boot under a timeout must load the plugin tree without a
 //      loader error (a healthy boot is silent and survives to the kill
-//      signal; a broken plugin dies within ~1s with the loader error)
+//      signal; a broken plugin dies within ~1s with the loader error), and
+//      the seeded record must come out backfilled + backed up
 //
 // The boot runs piped (no TTY). Verified empirically: the TUI plugin's
 // apply() tolerates a non-terminal (pi-tui guards raw mode), so the piped
@@ -21,7 +26,7 @@
 // removed on success.
 
 import { spawnSync } from 'node:child_process'
-import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs'
+import { mkdtempSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs'
 import { readFile } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import path from 'node:path'
@@ -75,12 +80,32 @@ if (install.status !== 0 || install.error) fail('pnpm install in the scratch pro
 
 const dshEnv = { ...process.env, DSH_HOME: home, TERM: process.env.TERM ?? 'xterm-256color' }
 
-// Phase 1 — mount proof: the composed tree must include the plugin.
+// Phase 1 — mount proof: the composed tree must include the plugin, disable
+// the stock projection-cache row and mount the projcache wrapper instead.
 const dump = spawnSync('dsh', ['--profile', 'smoke', '--dump-config'], { cwd: profile, encoding: 'utf8', env: dshEnv })
 if (dump.status !== 0 || dump.error) fail('dsh --dump-config failed on the scratch profile', `${dump.stdout}\n${dump.stderr}`)
 if (!dump.stdout.includes(ownName)) {
   fail(`the composed profile tree does not contain ${ownName} — the bundle patch insert is broken`, dump.stdout)
 }
+if (!/id: session-projection-cache[\s\S]*?disabled: true/.test(dump.stdout)) {
+  fail('the stock session-projection-cache row is not disabled — the wrapper would race a second mount', dump.stdout)
+}
+if (!dump.stdout.includes('tui-pi-projcache')) {
+  fail('the projcache wrapper entry is missing from the composed tree — legacy records would crash the boot', dump.stdout)
+}
+
+// Phase 1.5 — seed a legacy projection-cache record: the 0.1.1-rc.2 shape
+// lacks the identity fields the alpha.4 schema requires. The boot in phase 2
+// must migrate it (lib/projcache.js, module-evaluation time) instead of
+// dying on it at storage-open.
+const sessionsDir = path.join(home, 'storages', 'session_projcache', 'sessions')
+mkdirSync(sessionsDir, { recursive: true })
+const legacyName = 'session-smoke-legacy.json'
+const legacyOriginal = JSON.stringify({
+  identity: { createdAt: 1756000000000, cwd: '/tmp/smoke' },
+  events: [{ seq: 1 }],
+}, null, 2)
+writeFileSync(path.join(sessionsDir, legacyName), legacyOriginal)
 
 // Phase 2 — boot proof: the plugin tree must LOAD without a loader error.
 const bootSeconds = 25
@@ -95,6 +120,7 @@ const output = `${boot.stdout ?? ''}\n${boot.stderr ?? ''}`
 const loaderErrors = [
   /plugin tree failed to load/,
   /failed to apply loader entry/,
+  /does not match its schema/,
   /cannot get property ".*" without inject/,
   /cannot get required service/,
   /Cannot find (package|module)/,
@@ -113,5 +139,29 @@ if (!survived && boot.status !== 0) {
   fail(`dsh exited early with code ${boot.status} and no loader error — unexpected`, output)
 }
 
-console.log(`smoke-boot: PASS — ${ownName} composed into the scratch profile tree and booted clean in real dsh (${survived ? `survived the ${bootSeconds}s boot window` : `exited ${boot.status}`})`)
+// Phase 3 — rescue proof: the seeded legacy record must have been backfilled
+// by the wrapper before the stock plugin could open the domain, with the
+// original bytes backed up next to it.
+const legacyNow = path.join(sessionsDir, legacyName)
+const backups = (() => {
+  try {
+    return readdirSync(sessionsDir).filter((n) => n.startsWith(`${legacyName}.bak-preflight-`))
+  } catch {
+    return []
+  }
+})()
+if (!backups.length) {
+  fail('the seeded legacy record was never migrated — the wrapper did not run at module-evaluation time', output)
+}
+let migrated
+try {
+  migrated = JSON.parse(readFileSync(legacyNow, 'utf8'))
+} catch (err) {
+  fail(`the migrated legacy record is unparsable: ${err.message}`)
+}
+if (migrated.identity?.isSeeded !== false || migrated.identity?.inheritedEventCount !== 0) {
+  fail('the seeded legacy record survived the boot without being backfilled', JSON.stringify(migrated.identity))
+}
+
+console.log(`smoke-boot: PASS — ${ownName} composed into the scratch profile tree and booted clean in real dsh (${survived ? `survived the ${bootSeconds}s boot window` : `exited ${boot.status}`}); the seeded legacy projection-cache record was migrated with a backup`)
 rmSync(work, { recursive: true, force: true })