@chengxianglibra/dsh-data-analysis 0.3.0 → 0.3.1

package/README.en.md

@@ -1,3 +1,7 @@
+<p align="center">
+  <img src="assets/logo-horizontal.svg" alt="DSH Data Analysis" width="520">
+</p>
+
 # @chengxianglibra/dsh-data-analysis
 
 [简体中文](README.md) | English
@@ -115,14 +119,15 @@ Analysis views use `marivo_report_write` to present conclusions, charts, exact v
 - **Ask a follow-up**: Select a chart point or supported cell in a DataFrame or Frame and add it to the question draft.
 - **Read the view**: The first preview in the foreground session opens and selects a right-hand tab. Reopen it from Chat after closing it; later updates do not repeatedly open the tab. Catalog and history entries also open on the right.
 - **Suggested next steps**: After analysis, Chat offers a row of temporary follow-up buttons. Clicking uses the native Harness composer to submit the question; existing drafts are preserved. Suggestions stay in Chat and disappear on reload, reconnection or session switch.
-- **Export offline**: Download the displayed version as a single HTML file from the analysis view tab. It includes the saved snapshots and supports offline viewing and local interactions; review its data before sharing.
+- **Export offline**: With object storage publishing disabled, download the displayed version as a single HTML file from the actions menu. It includes the saved snapshots and supports offline viewing and local interactions; review its data before sharing.
+- **Publish to object storage**: With `reportPublishing` enabled in the Harness plugin configuration, choose Publish to object storage in the actions menu to upload the displayed saved version and get its URL. The menu links to Credential management if credentials are missing. The assistant can also publish an exact saved version with `marivo_publish_report`.
 - **Delete a view**: Confirm deletion in the analysis view tab’s actions menu to permanently remove the view and all its historical versions, or ask the assistant to delete a saved view. Exported HTML and Marivo results are retained.
 
 Initial previews, revisions and final saving update the same analysis view. Subtle chart motion indicates generation and updates, then stops after saving; reduced motion preferences use a static indicator. When analysis is ongoing, the assistant shows a draft early, updates it as results become ready, and saves one version at completion. Native generation also displays program candidates. Failures and cancellation preserve the last successful content. When refreshing a saved view, the assistant retains its layout, components and body while replacing component data sources. Static text is preserved, and the layout within an auto chart may adapt to the data. Refresh rejects changes to the chart type.
 
 Analysis views support tables, complete single values, Native generation previews, and updates to an exact saved version.
 Updates reuse saved snapshots; failures and cancellation preserve the previous successful version.
-Frame views support charts selected from their structure. Analysis views do not provide global filters, in-page editing or object-storage publishing.
+Frame views support charts selected from their structure. Analysis views do not provide global filters or in-page editing.
 View history requires current v4 pointers, but the saved Catalog build need not match the current one. The current reader validates report contents and reports unsupported content as an error. Successful reading does not guarantee that component defaults or rendering semantics match the original version. Current v2/v3 pointers (including earlier saved views) and Frame v1 are no longer readable or updatable. Files stay on disk; capture a current snapshot and create a new analysis view to continue.
 
 ## Analysis timeout

package/README.md

@@ -1,3 +1,7 @@
+<p align="center">
+  <img src="assets/logo-horizontal.svg" alt="DSH Data Analysis" width="520">
+</p>
+
 # @chengxianglibra/dsh-data-analysis
 
 简体中文 | [English](README.en.md)
@@ -112,13 +116,14 @@ npx @deepseek-ai/dsh web
 - **继续提问**：在 DataFrame 或 Frame 中选择图点或支持的单元格后，将选中数据加入提问草稿。
 - **阅读视图**：前台会话首次展示视图时自动打开并选中右侧标签页。关闭后可从 Chat 入口重开；后续更新不会反复打开标签页。分析视图目录及历史入口也在右侧打开。
 - **下一步推荐**：分析完成后，Chat 中提供一排临时推荐按钮。点击会使用 Harness 原生输入框直接提交对应问题；已有草稿时不会覆盖。推荐保留在 Chat，刷新、重连或切换会话后清除。
-- **离线导出**：在分析视图标签页下载当前显示版本的单个 HTML，文件包含已保存快照，可离线查看并使用本地交互；分享前请确认其中的数据。
+- **离线导出**：关闭对象存储发布时，可通过三点菜单下载当前显示版本的单个 HTML，文件包含已保存快照，可离线查看并使用本地交互；分享前请确认其中的数据。
+- **发布到对象存储**：在 Harness 插件配置中开启 `reportPublishing` 后，三点菜单显示「发布到对象存储」，可上传当前显示的已保存版本并获取访问链接。缺凭据时可直接前往「凭证管理」。也可让助手通过 `marivo_publish_report` 发布指定版本。
 - **删除视图**：在分析视图标签页的操作菜单中确认删除，永久移除该视图及其历史版本；也可让助手删除已保存的视图。已导出的 HTML 和 Marivo 结果不随视图删除。
 
 首次预览、后续修订和正式保存始终更新同一个分析视图，用轻量图表动效显示生成与更新进度，保存后停止；开启“减少动态效果”时静态显示。需要持续计算时，助手会尽早展示草稿，并在结果就绪时更新同一草稿，完成后统一保存一个正式版本。Native 生成期间还会展示程序候选；生成失败或取消保留最后成功内容。刷新已保存视图的数据时，助手保留布局、组件和正文，逐组件替换数据源；静态正文保留原文，auto 图形内部布局可随数据变化。刷新会拒绝图表类型变化。
 
 分析视图支持表格、完整单值、Native 生成期预览和按准确版本的增量更新。更新复用已保存快照，
-失败或取消保留上一成功版本。Frame 视图支持按结构选择图表；分析视图不提供全局筛选、页面编辑或对象存储发布。视图历史要求 current v4 指针，但不要求保存的 Catalog build 与当前版本相同；当前 reader 会校验报告内容，无法支持时明确报错。可读取不保证组件的默认值或渲染语义与保存时完全一致。current v2/v3（包括此前保存的新格式视图）和 Frame v1 不再读取或更新。文件保留在磁盘，需要继续使用时捕获当前快照并另建分析视图。
+失败或取消保留上一成功版本。Frame 视图支持按结构选择图表；分析视图不提供全局筛选或页面编辑。视图历史要求 current v4 指针，但不要求保存的 Catalog build 与当前版本相同；当前 reader 会校验报告内容，无法支持时明确报错。可读取不保证组件的默认值或渲染语义与保存时完全一致。current v2/v3（包括此前保存的新格式视图）和 Frame v1 不再读取或更新。文件保留在磁盘，需要继续使用时捕获当前快照并另建分析视图。
 
 ## 分析超时设置
 

package/assets/logo-horizontal.svg

@@ -0,0 +1,42 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1460" height="360" viewBox="0 0 1460 360" role="img" aria-labelledby="logo-title logo-desc">
+  <title id="logo-title">dsh-data-analysis</title>
+  <desc id="logo-desc">A black sea lion with a green M, followed by the words dsh-data-analysis.</desc>
+  <!-- Wordmark outlines use Montserrat Medium, Copyright 2024 The Montserrat Project Authors, SIL Open Font License 1.1. -->
+  <svg x="0" y="0" width="360" height="360" viewBox="0 0 512 512" aria-hidden="true">
+  <defs>
+    <mask id="face-cutouts" maskUnits="userSpaceOnUse" x="0" y="0" width="512" height="512">
+      <rect width="512" height="512" fill="#fff"/>
+      <ellipse cx="214" cy="112" rx="7" ry="9" fill="#000"/>
+      <ellipse cx="298" cy="112" rx="7" ry="9" fill="#000"/>
+      <ellipse cx="256" cy="149" rx="41" ry="33" fill="#000"/>
+      <g fill="none" stroke="#000" stroke-width="4.5" stroke-linecap="round">
+        <path d="M220 138c-11 0-21 2-30 6m30 4c-11 1-21 5-29 11"/>
+        <path d="M292 138c11 0 21 2 30 6m-30 4c11 1 21 5 29 11"/>
+      </g>
+    </mask>
+  </defs>
+  <path d="M256 62c-31 0-55 14-69 42-14 0-24 7-26 15-2 8 7 12 15 5-4 16-4 32-3 48 3 43-49 111-49 185 0 34-4 44-19 54-14 9-49 19-58 32-12 17 13 15 42 14 56-1 73-11 79-25 6-15 8-38 0-89 22 31 22 74 10 94 19 6 43 9 78 9s59-3 78-9c-12-20-12-63 10-94-8 51-6 74 0 89 6 14 23 24 79 25 29 1 54 3 42-14-9-13-44-23-58-32-15-10-19-20-19-54 0-74-52-142-49-185 1-16 1-32-3-48 8 7 17 3 15-5-2-8-12-15-26-15-14-28-38-42-69-42Z" fill="#111" mask="url(#face-cutouts)"/>
+  <path d="M241 129c0-5 7-7 15-7s15 2 15 7c0 4-5 6-9 9-3 2-4 5-6 5s-3-3-6-5c-4-3-9-5-9-9Z" fill="#111"/>
+  <path d="M256 141c-1 10-6 16-13 17-6 1-11-1-15-5m28-12c1 10 6 16 13 17 6 1 11-1 15-5" fill="none" stroke="#111" stroke-width="5" stroke-linecap="round"/>
+  <path d="M210 322v-72h19l27 32 27-32h19v72h-20v-42l-26 31-26-31v42Z" fill="#138462"/>
+  </svg>
+  <g fill="#111" transform="translate(365 214) scale(0.12 -0.12)" aria-hidden="true">
+    <path d="M310 -6Q233 -6 172.5 28Q112 62 77 123Q42 184 42 265Q42 346 77 406.5Q112 467 172.5 501Q233 535 310 535Q377 535 431 505Q485 475 517.5 415Q550 355 550 265Q550 175 518.5 115Q487 55 433 24.5Q379 -6 310 -6ZM318 78Q368 78 408.5 101Q449 124 472.5 166.5Q496 209 496 265Q496 322 472.5 363.5Q449 405 408.5 428Q368 451 318 451Q267 451 227 428Q187 405 163 363.5Q139 322 139 265Q139 209 163 166.5Q187 124 227 101Q267 78 318 78ZM499 0L499 143L505 266L495 389L495 742L591 742L591 0Z" transform="translate(0 0)"/>
+    <path d="M243 -6Q177 -6 117.5 12Q58 30 24 56L64 132Q98 109 148 93Q198 77 250 77Q317 77 346.5 96Q376 115 376 149Q376 174 358 188Q340 202 310.5 209Q281 216 245 221.5Q209 227 173 235.5Q137 244 107 259.5Q77 275 59 302.5Q41 330 41 376Q41 424 68 460Q95 496 144.5 515.5Q194 535 262 535Q314 535 367.5 522.5Q421 510 455 487L414 411Q378 435 339 444Q300 453 261 453Q198 453 167 432.5Q136 412 136 380Q136 353 154.5 338.5Q173 324 202.5 316Q232 308 268 302.5Q304 297 340 288.5Q376 280 405.5 265Q435 250 453.5 223Q472 196 472 151Q472 103 444 68Q416 33 365 13.5Q314 -6 243 -6Z" transform="translate(682 0)"/>
+    <path d="M91 0L91 742L187 742L187 387L168 425Q194 477 248 506Q302 535 374 535Q439 535 488.5 510Q538 485 566 434Q594 383 594 305L594 0L498 0L498 294Q498 371 460.5 410Q423 449 355 449Q304 449 266 429Q228 409 207.5 370Q187 331 187 273L187 0Z" transform="translate(1183 0)"/>
+    <path d="M57 233L57 316L326 316L326 233Z" transform="translate(1864 0)"/>
+    <path d="M310 -6Q233 -6 172.5 28Q112 62 77 123Q42 184 42 265Q42 346 77 406.5Q112 467 172.5 501Q233 535 310 535Q377 535 431 505Q485 475 517.5 415Q550 355 550 265Q550 175 518.5 115Q487 55 433 24.5Q379 -6 310 -6ZM318 78Q368 78 408.5 101Q449 124 472.5 166.5Q496 209 496 265Q496 322 472.5 363.5Q449 405 408.5 428Q368 451 318 451Q267 451 227 428Q187 405 163 363.5Q139 322 139 265Q139 209 163 166.5Q187 124 227 101Q267 78 318 78ZM499 0L499 143L505 266L495 389L495 742L591 742L591 0Z" transform="translate(2257 0)"/>
+    <path d="M420 0L420 112L415 133L415 324Q415 385 379.5 418.5Q344 452 273 452Q226 452 181 436.5Q136 421 105 395L65 467Q106 500 163.5 517.5Q221 535 284 535Q393 535 452 482Q511 429 511 320L511 0ZM246 -6Q187 -6 142.5 14Q98 34 74 69.5Q50 105 50 150Q50 193 70.5 228Q91 263 137.5 284Q184 305 263 305L431 305L431 236L267 236Q195 236 170 212Q145 188 145 154Q145 115 176 91.5Q207 68 262 68Q316 68 356.5 92Q397 116 415 162L434 96Q415 49 367 21.5Q319 -6 246 -6Z" transform="translate(2939 0)"/>
+    <path d="M273 -6Q193 -6 149 37Q105 80 105 160L105 646L201 646L201 164Q201 121 222.5 98Q244 75 284 75Q329 75 359 100L389 31Q367 12 336.5 3Q306 -6 273 -6ZM15 451L15 530L353 530L353 451Z" transform="translate(3537 0)"/>
+    <path d="M420 0L420 112L415 133L415 324Q415 385 379.5 418.5Q344 452 273 452Q226 452 181 436.5Q136 421 105 395L65 467Q106 500 163.5 517.5Q221 535 284 535Q393 535 452 482Q511 429 511 320L511 0ZM246 -6Q187 -6 142.5 14Q98 34 74 69.5Q50 105 50 150Q50 193 70.5 228Q91 263 137.5 284Q184 305 263 305L431 305L431 236L267 236Q195 236 170 212Q145 188 145 154Q145 115 176 91.5Q207 68 262 68Q316 68 356.5 92Q397 116 415 162L434 96Q415 49 367 21.5Q319 -6 246 -6Z" transform="translate(3931 0)"/>
+    <path d="M57 233L57 316L326 316L326 233Z" transform="translate(4529 0)"/>
+    <path d="M420 0L420 112L415 133L415 324Q415 385 379.5 418.5Q344 452 273 452Q226 452 181 436.5Q136 421 105 395L65 467Q106 500 163.5 517.5Q221 535 284 535Q393 535 452 482Q511 429 511 320L511 0ZM246 -6Q187 -6 142.5 14Q98 34 74 69.5Q50 105 50 150Q50 193 70.5 228Q91 263 137.5 284Q184 305 263 305L431 305L431 236L267 236Q195 236 170 212Q145 188 145 154Q145 115 176 91.5Q207 68 262 68Q316 68 356.5 92Q397 116 415 162L434 96Q415 49 367 21.5Q319 -6 246 -6Z" transform="translate(4912 0)"/>
+    <path d="M91 0L91 530L183 530L183 387L168 425Q194 477 248 506Q302 535 374 535Q439 535 488.5 510Q538 485 566 434Q594 383 594 305L594 0L498 0L498 294Q498 371 460.5 410Q423 449 355 449Q304 449 266 429Q228 409 207.5 370Q187 331 187 273L187 0Z" transform="translate(5510 0)"/>
+    <path d="M420 0L420 112L415 133L415 324Q415 385 379.5 418.5Q344 452 273 452Q226 452 181 436.5Q136 421 105 395L65 467Q106 500 163.5 517.5Q221 535 284 535Q393 535 452 482Q511 429 511 320L511 0ZM246 -6Q187 -6 142.5 14Q98 34 74 69.5Q50 105 50 150Q50 193 70.5 228Q91 263 137.5 284Q184 305 263 305L431 305L431 236L267 236Q195 236 170 212Q145 188 145 154Q145 115 176 91.5Q207 68 262 68Q316 68 356.5 92Q397 116 415 162L434 96Q415 49 367 21.5Q319 -6 246 -6Z" transform="translate(6191 0)"/>
+    <path d="M91 0L91 742L187 742L187 0Z" transform="translate(6789 0)"/>
+    <path d="M114 -200Q76 -200 40 -187.5Q4 -175 -22 -151L19 -79Q39 -98 63 -108Q87 -118 114 -118Q149 -118 172 -100Q195 -82 215 -36L248 37L258 49L466 530L560 530L303 -53Q280 -109 251.5 -141Q223 -173 189 -186.5Q155 -200 114 -200ZM240 -17L-2 530L98 530L304 58Z" transform="translate(7066 0)"/>
+    <path d="M243 -6Q177 -6 117.5 12Q58 30 24 56L64 132Q98 109 148 93Q198 77 250 77Q317 77 346.5 96Q376 115 376 149Q376 174 358 188Q340 202 310.5 209Q281 216 245 221.5Q209 227 173 235.5Q137 244 107 259.5Q77 275 59 302.5Q41 330 41 376Q41 424 68 460Q95 496 144.5 515.5Q194 535 262 535Q314 535 367.5 522.5Q421 510 455 487L414 411Q378 435 339 444Q300 453 261 453Q198 453 167 432.5Q136 412 136 380Q136 353 154.5 338.5Q173 324 202.5 316Q232 308 268 302.5Q304 297 340 288.5Q376 280 405.5 265Q435 250 453.5 223Q472 196 472 151Q472 103 444 68Q416 33 365 13.5Q314 -6 243 -6Z" transform="translate(7618 0)"/>
+    <path d="M91 0L91 530L187 530L187 0ZM139 632Q111 632 92.5 650Q74 668 74 694Q74 721 92.5 739Q111 757 139 757Q167 757 185.5 739.5Q204 722 204 696Q204 669 186 650.5Q168 632 139 632Z" transform="translate(8119 0)"/>
+    <path d="M243 -6Q177 -6 117.5 12Q58 30 24 56L64 132Q98 109 148 93Q198 77 250 77Q317 77 346.5 96Q376 115 376 149Q376 174 358 188Q340 202 310.5 209Q281 216 245 221.5Q209 227 173 235.5Q137 244 107 259.5Q77 275 59 302.5Q41 330 41 376Q41 424 68 460Q95 496 144.5 515.5Q194 535 262 535Q314 535 367.5 522.5Q421 510 455 487L414 411Q378 435 339 444Q300 453 261 453Q198 453 167 432.5Q136 412 136 380Q136 353 154.5 338.5Q173 324 202.5 316Q232 308 268 302.5Q304 297 340 288.5Q376 280 405.5 265Q435 250 453.5 223Q472 196 472 151Q472 103 444 68Q416 33 365 13.5Q314 -6 243 -6Z" transform="translate(8398 0)"/>
+  </g>
+</svg>

package/assets/logo-mark.svg

@@ -0,0 +1,20 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="512" height="512" viewBox="0 0 512 512" role="img" aria-labelledby="title desc">
+  <title id="title">DSH Data Analysis</title>
+  <desc id="desc">A front-facing black sea lion silhouette with a green M on its chest.</desc>
+  <defs>
+    <mask id="face-cutouts" maskUnits="userSpaceOnUse" x="0" y="0" width="512" height="512">
+      <rect width="512" height="512" fill="#fff"/>
+      <ellipse cx="214" cy="112" rx="7" ry="9" fill="#000"/>
+      <ellipse cx="298" cy="112" rx="7" ry="9" fill="#000"/>
+      <ellipse cx="256" cy="149" rx="41" ry="33" fill="#000"/>
+      <g fill="none" stroke="#000" stroke-width="4.5" stroke-linecap="round">
+        <path d="M220 138c-11 0-21 2-30 6m30 4c-11 1-21 5-29 11"/>
+        <path d="M292 138c11 0 21 2 30 6m-30 4c11 1 21 5 29 11"/>
+      </g>
+    </mask>
+  </defs>
+  <path d="M256 62c-31 0-55 14-69 42-14 0-24 7-26 15-2 8 7 12 15 5-4 16-4 32-3 48 3 43-49 111-49 185 0 34-4 44-19 54-14 9-49 19-58 32-12 17 13 15 42 14 56-1 73-11 79-25 6-15 8-38 0-89 22 31 22 74 10 94 19 6 43 9 78 9s59-3 78-9c-12-20-12-63 10-94-8 51-6 74 0 89 6 14 23 24 79 25 29 1 54 3 42-14-9-13-44-23-58-32-15-10-19-20-19-54 0-74-52-142-49-185 1-16 1-32-3-48 8 7 17 3 15-5-2-8-12-15-26-15-14-28-38-42-69-42Z" fill="#111" mask="url(#face-cutouts)"/>
+  <path d="M241 129c0-5 7-7 15-7s15 2 15 7c0 4-5 6-9 9-3 2-4 5-6 5s-3-3-6-5c-4-3-9-5-9-9Z" fill="#111"/>
+  <path d="M256 141c-1 10-6 16-13 17-6 1-11-1-15-5m28-12c1 10 6 16 13 17 6 1 11-1 15-5" fill="none" stroke="#111" stroke-width="5" stroke-linecap="round"/>
+  <path d="M210 322v-72h19l27 32 27-32h19v72h-20v-42l-26 31-26-31v42Z" fill="#138462"/>
+</svg>

package/lib/bin/environment.js

@@ -33,9 +33,41 @@ var MarivoEnvironmentError = class extends Error {
 // lib/environment/binding.js
 import { createHash } from "node:crypto";
 import { access, constants, realpath, stat } from "node:fs/promises";
-import path from "node:path";
+import path2 from "node:path";
 import process3 from "node:process";
 
+// lib/environment/identity.js
+import { realpathSync } from "node:fs";
+import path from "node:path";
+function canonicalPythonExecutable(executable) {
+  const absolute = path.resolve(executable);
+  return path.join(realpathSync(path.dirname(absolute)), path.basename(absolute));
+}
+function canonicalImportIdentity(identity) {
+  return {
+    pythonExecutable: canonicalPythonExecutable(identity.pythonExecutable),
+    marivoVersion: identity.marivoVersion,
+    packagePath: realpathSync(identity.packagePath)
+  };
+}
+var PYTHON_IMPORT_IDENTITY = String.raw`
+import os.path as _dsh_identity_path
+
+def _dsh_python_executable(executable):
+    absolute = _dsh_identity_path.abspath(executable)
+    return _dsh_identity_path.join(
+        _dsh_identity_path.realpath(_dsh_identity_path.dirname(absolute)),
+        _dsh_identity_path.basename(absolute),
+    )
+
+def _dsh_import_identity(executable, version, package_path):
+    return {
+        "python_executable": _dsh_python_executable(executable),
+        "marivo_version": version,
+        "package_path": _dsh_identity_path.realpath(package_path),
+    }
+`.trim();
+
 // lib/environment/subprocess.js
 import { spawn } from "node:child_process";
 import process2 from "node:process";
@@ -222,30 +254,25 @@ var IDENTITY_LIMITS = Object.freeze({
   stdoutMaxBytes: 16384,
   stderrMaxBytes: 16384
 });
-var CHECKED_IDENTITY_PRELUDE = String.raw`
+var CHECKED_IDENTITY_PRELUDE = `${PYTHON_IMPORT_IDENTITY}
+${String.raw`
 import json as _dsh_json
 import os as _dsh_os
 import sys as _dsh_sys
 try:
     import marivo as _dsh_marivo
-    _dsh_actual = {
-        "python_executable": _dsh_os.path.abspath(_dsh_sys.executable),
-        "marivo_version": _dsh_marivo.__version__,
-        "package_path": _dsh_os.path.abspath(_dsh_marivo.__file__ or ""),
-    }
+    _dsh_actual = _dsh_import_identity(
+        _dsh_sys.executable, _dsh_marivo.__version__, _dsh_marivo.__file__,
+    )
 except Exception:
     raise SystemExit(78) from None
 
-_dsh_expected = {
-    "python_executable": _dsh_os.path.abspath(_dsh_sys.argv[1]),
-    "marivo_version": _dsh_sys.argv[2],
-    "package_path": _dsh_os.path.abspath(_dsh_sys.argv[3]),
-}
+_dsh_expected = _dsh_import_identity(*_dsh_sys.argv[1:4])
 if _dsh_actual != _dsh_expected:
     print(_dsh_json.dumps({"kind": "identity-mismatch", "actual": _dsh_actual}), file=_dsh_sys.stderr)
     raise SystemExit(78)
 _dsh_sys.argv = [_dsh_sys.argv[0], *_dsh_sys.argv[4:]]
-`.trim();
+`.trim()}`;
 var IMPORT_IDENTITY_PROGRAM = String.raw`
 print(_dsh_json.dumps(_dsh_actual, sort_keys=True))
 `.trim();
@@ -303,9 +330,6 @@ function redactSubprocessOutput(result, environmentOverlay, secretValues = []) {
     stderr: Buffer.from(redactText(result.stderr.toString("utf8")))
   };
 }
-function normalizeAbsolute(value) {
-  return path.normalize(path.resolve(value));
-}
 async function assertExecutable(executable) {
   try {
     const info = await stat(executable);
@@ -317,12 +341,12 @@ async function assertExecutable(executable) {
   }
 }
 async function resolvePythonExecutable(projectRoot, configured) {
-  if (configured !== void 0 && !path.isAbsolute(configured)) {
+  if (configured !== void 0 && !path2.isAbsolute(configured)) {
     throw new MarivoEnvironmentError("python-path-relative", `Configured Marivo Python executable must be absolute: ${configured}`, { pythonExecutable: configured });
   }
-  const executable = configured === void 0 ? path.join(projectRoot, process3.platform === "win32" ? ".venv/Scripts/python.exe" : ".venv/bin/python") : path.normalize(configured);
+  const executable = configured === void 0 ? path2.join(projectRoot, process3.platform === "win32" ? ".venv/Scripts/python.exe" : ".venv/bin/python") : path2.normalize(configured);
   await assertExecutable(executable);
-  return executable;
+  return canonicalPythonExecutable(executable);
 }
 function fingerprint(binding) {
   const payload = [
@@ -412,8 +436,9 @@ ${request.program}`,
       });
     }
     try {
-      const identity = parseImportIdentity(result.stdout);
-      if (normalizeAbsolute(identity.pythonExecutable) !== normalizeAbsolute(this.binding.pythonExecutable) || identity.marivoVersion !== this.binding.marivoVersion || normalizeAbsolute(identity.packagePath) !== normalizeAbsolute(this.binding.packagePath))
+      const identity = canonicalImportIdentity(parseImportIdentity(result.stdout));
+      const expected = this.binding;
+      if (identity.pythonExecutable !== expected.pythonExecutable || identity.marivoVersion !== expected.marivoVersion || identity.packagePath !== expected.packagePath)
         throw new Error("identity values differ from binding");
       return identity;
     } catch (cause) {
@@ -428,9 +453,7 @@ function createRuntimeRunner(projectRoot, identity, environment) {
   const subprocessPolicy = new FixedSubprocessPolicy(projectRoot, environment);
   const partialBinding = {
     projectRoot,
-    pythonExecutable: identity.pythonExecutable,
-    marivoVersion: identity.marivoVersion,
-    packagePath: identity.packagePath,
+    ...canonicalImportIdentity(identity),
     subprocessPolicyId: subprocessPolicy.id
   };
   return new MarivoEnvironment({ ...partialBinding, fingerprint: fingerprint(partialBinding) }, subprocessPolicy);
@@ -440,7 +463,7 @@ async function bindSharedMarivoWorkspace(projectRoot, runtime) {
   const runner = createRuntimeRunner(projectRoot, {
     pythonExecutable,
     marivoVersion: runtime.marivoVersion,
-    packagePath: normalizeAbsolute(runtime.packagePath)
+    packagePath: runtime.packagePath
   });
   const result = await runner.runChecked({
     program: PROJECT_CONFIG_PROGRAM,
@@ -461,7 +484,7 @@ async function bindSharedMarivoWorkspace(projectRoot, runtime) {
 import { randomUUID } from "node:crypto";
 import { constants as constants2 } from "node:fs";
 import { access as access2, chmod, cp, lstat, mkdir, readFile, realpath as realpath2, rename, rm, stat as stat2, writeFile } from "node:fs/promises";
-import path2 from "node:path";
+import path3 from "node:path";
 import process4 from "node:process";
 
 // ../../node_modules/@deepseek-ai/dsh-home-paths/lib/index.js
@@ -475,10 +498,10 @@ var DEFAULT_AGENTS_HOME_DISPLAY = `~/${AGENTS_HOME_DIR_NAME}`;
 function defaultDshHome() {
   return join(homedir(), DSH_HOME_DIR_NAME);
 }
-function expandHomePath(path4) {
-  if (path4 === "~") return homedir();
-  if (path4.startsWith("~/") || path4.startsWith("~\\")) return join(homedir(), path4.slice(2));
-  return path4;
+function expandHomePath(path5) {
+  if (path5 === "~") return homedir();
+  if (path5.startsWith("~/") || path5.startsWith("~\\")) return join(homedir(), path5.slice(2));
+  return path5;
 }
 function resolveRoot(configured, env, envName, fallback) {
   const fromEnv = env[envName];
@@ -498,7 +521,8 @@ var INSTALLATION_SCHEMA = RUNTIME_INSTALLATION_VERSION;
 var INSTALLATION_FILENAME = "installation.json";
 var SKILL_NAMES = ["marivo-analysis", "marivo-semantic"];
 var SERVICE_SKILL = "marivo-service";
-var PROBE_SCRIPT = String.raw`
+var PROBE_SCRIPT = `${PYTHON_IMPORT_IDENTITY}
+${String.raw`
 import json
 import os
 import sys
@@ -515,22 +539,21 @@ print(json.dumps({
     "marivo_distribution_version": dist.version,
     "marivo_index_install": dist.read_text("direct_url.json") is None,
     "marivo_import_identity": os.path.realpath(marivo.__file__) == os.path.realpath(dist.locate_file("marivo/__init__.py")),
-    "python_executable": os.path.abspath(sys.executable),
-    "marivo_version": marivo.__version__,
-    "package_path": os.path.abspath(marivo.__file__ or ""),
+    **_dsh_import_identity(sys.executable, marivo.__version__, marivo.__file__),
 }, sort_keys=True))
-`.trim();
-var PYTHON_VERSION_SCRIPT = String.raw`
+`.trim()}`;
+var PYTHON_VERSION_SCRIPT = `${PYTHON_IMPORT_IDENTITY}
+${String.raw`
 import json
 import os
 import sys
 
 print(json.dumps({
-    "python_executable": os.path.abspath(sys.executable),
+    "python_executable": _dsh_python_executable(sys.executable),
     "version": list(sys.version_info[:3]),
     "prefix": os.path.abspath(sys.prefix),
 }, sort_keys=True))
-`.trim();
+`.trim()}`;
 function administratorRepair(executable) {
   const commands = [
     {
@@ -550,17 +573,17 @@ function positiveTimeout(value) {
   }
   return resolved;
 }
-function normalizeAbsolute2(name, value) {
-  if (!path2.isAbsolute(value)) {
+function normalizeAbsolute(name, value) {
+  if (!path3.isAbsolute(value)) {
     throw new MarivoEnvironmentError("shared-runtime-config-invalid", `${name} must be an absolute path: ${value}`, { [name]: value });
   }
-  return path2.normalize(value);
+  return path3.normalize(value);
 }
 function defaultRuntimeRoot() {
-  return path2.join(resolveDshHome(), "dsh-data-analysis", "runtimes", "marivo");
+  return path3.join(resolveDshHome(), "dsh-data-analysis", "runtimes", "marivo");
 }
 function venvPython(runtimeRoot) {
-  return path2.join(runtimeRoot, ".venv", process4.platform === "win32" ? "Scripts/python.exe" : "bin/python");
+  return path3.join(runtimeRoot, ".venv", process4.platform === "win32" ? "Scripts/python.exe" : "bin/python");
 }
 function boundedText(buffer, max = 4e3) {
   return buffer.toString("utf8").slice(0, max);
@@ -577,13 +600,13 @@ function requireSuccess(stage, result) {
   });
 }
 async function assertExecutable2(executable) {
-  const selected = path2.normalize(path2.resolve(executable));
+  const selected = path3.normalize(path3.resolve(executable));
   try {
     const info = await stat2(selected);
     if (!info.isFile())
       throw new Error("not a file");
     await access2(selected, process4.platform === "win32" ? constants2.F_OK : constants2.X_OK);
-    return selected;
+    return canonicalPythonExecutable(selected);
   } catch (cause) {
     throw new MarivoEnvironmentError("python-unavailable", `Shared Marivo Python executable is missing or not executable: ${selected}`, { pythonExecutable: selected }, { cause });
   }
@@ -624,8 +647,8 @@ async function probeRuntime(runtimeRoot, executable, environment, timeoutMs, adm
   if (probe.marivo_distribution_version !== probe.marivo_version || probe.marivo_import_identity !== true || typeof probe.python_executable !== "string" || typeof probe.marivo_version !== "string" || probe.marivo_version.length === 0 || typeof probe.package_path !== "string" || probe.package_path.length === 0) {
     throw new MarivoEnvironmentError("shared-runtime-identity-mismatch", "Shared Runtime returned an incomplete or mismatched package identity", { probe, ...repair === void 0 ? {} : { repairCommands: repair.commands } });
   }
-  const actualPython = await realpath2(path2.resolve(probe.python_executable));
-  const selectedPython = await realpath2(canonical);
+  const actualPython = canonicalPythonExecutable(probe.python_executable);
+  const selectedPython = canonicalPythonExecutable(canonical);
   if (expectedMarivoVersion !== void 0 && probe.marivo_version !== expectedMarivoVersion) {
     throw new MarivoEnvironmentError("shared-runtime-version-unsupported", `Shared Marivo runtime version ${probe.marivo_version} is unsupported; install ${expectedMarivoVersion}.${repair === void 0 ? "" : ` ${repair.message}`}`, {
       supportedMarivoVersion: expectedMarivoVersion,
@@ -647,12 +670,12 @@ async function probeRuntime(runtimeRoot, executable, environment, timeoutMs, adm
     marivo_import_identity: true,
     python_executable: canonical,
     marivo_version: probe.marivo_version,
-    package_path: path2.resolve(probe.package_path)
+    package_path: await realpath2(probe.package_path)
   };
 }
 async function availableSkills(skillsRoot) {
   try {
-    await lstat(path2.join(skillsRoot, SERVICE_SKILL));
+    await lstat(path3.join(skillsRoot, SERVICE_SKILL));
     return [...SKILL_NAMES, SERVICE_SKILL];
   } catch (error) {
     if (error.code === "ENOENT")
@@ -662,7 +685,7 @@ async function availableSkills(skillsRoot) {
 }
 async function validateSkills(skillsRoot, skills) {
   for (const skill of skills) {
-    const skillFile = path2.join(skillsRoot, skill, "SKILL.md");
+    const skillFile = path3.join(skillsRoot, skill, "SKILL.md");
     try {
       if (!(await stat2(skillFile)).isFile())
         throw new Error("not a file");
@@ -682,16 +705,16 @@ async function validateSkills(skillsRoot, skills) {
   }
 }
 async function syncSkills(runtimeRoot, packagePath) {
-  const sourceRoot = path2.join(path2.dirname(packagePath), "skills");
+  const sourceRoot = path3.join(path3.dirname(packagePath), "skills");
   const skills = await availableSkills(sourceRoot);
   await validateSkills(sourceRoot, skills);
-  const skillsRoot = path2.join(runtimeRoot, "skills");
-  const staging = path2.join(runtimeRoot, `.skills-staging-${randomUUID()}`);
-  const previous = path2.join(runtimeRoot, `.skills-previous-${randomUUID()}`);
+  const skillsRoot = path3.join(runtimeRoot, "skills");
+  const staging = path3.join(runtimeRoot, `.skills-staging-${randomUUID()}`);
+  const previous = path3.join(runtimeRoot, `.skills-previous-${randomUUID()}`);
   await mkdir(staging, { recursive: true });
   try {
     for (const skill of skills) {
-      await cp(path2.join(sourceRoot, skill), path2.join(staging, skill), { recursive: true });
+      await cp(path3.join(sourceRoot, skill), path3.join(staging, skill), { recursive: true });
     }
     await validateSkills(staging, skills);
     let hadPrevious = false;
@@ -718,7 +741,7 @@ async function syncSkills(runtimeRoot, packagePath) {
 }
 async function readInstallation(runtimeRoot) {
   try {
-    const value = JSON.parse(await readFile(path2.join(runtimeRoot, INSTALLATION_FILENAME), "utf8"));
+    const value = JSON.parse(await readFile(path3.join(runtimeRoot, INSTALLATION_FILENAME), "utf8"));
     if (typeof value !== "object" || value === null || Array.isArray(value))
       return void 0;
     const record = value;
@@ -738,8 +761,8 @@ async function readInstallation(runtimeRoot) {
   }
 }
 async function writeInstallation(runtimeRoot, record) {
-  const installationPath = path2.join(runtimeRoot, INSTALLATION_FILENAME);
-  const temporary = path2.join(runtimeRoot, `.installation-${randomUUID()}.json`);
+  const installationPath = path3.join(runtimeRoot, INSTALLATION_FILENAME);
+  const temporary = path3.join(runtimeRoot, `.installation-${randomUUID()}.json`);
   await writeFile(temporary, `${JSON.stringify(record, void 0, 2)}
 `, {
     encoding: "utf8",
@@ -757,17 +780,17 @@ async function validatedExisting(runtimeRoot, configuredPython, environment, tim
   if (record.marivoVersion !== PINNED_MARIVO_VERSION)
     return void 0;
   const expectedPython = configuredPython ?? venvPython(runtimeRoot);
-  const expectedSkillsRoot = path2.join(runtimeRoot, "skills");
-  if (path2.normalize(record.skillsRoot) !== path2.normalize(expectedSkillsRoot))
-    return void 0;
+  const expectedSkillsRoot = path3.join(runtimeRoot, "skills");
   try {
+    if (await realpath2(record.skillsRoot) !== await realpath2(expectedSkillsRoot))
+      return void 0;
     const selectedPython = await assertExecutable2(expectedPython);
-    if (path2.normalize(record.pythonExecutable) !== selectedPython)
+    if (canonicalPythonExecutable(record.pythonExecutable) !== selectedPython)
       return void 0;
     const probe = await probeRuntime(runtimeRoot, selectedPython, environment, timeoutMs, configuredPython !== void 0, record.marivoVersion);
-    if (path2.normalize(probe.package_path) !== path2.normalize(record.packagePath))
+    if (probe.package_path !== await realpath2(record.packagePath))
       return void 0;
-    const sourceRoot = path2.join(path2.dirname(probe.package_path), "skills");
+    const sourceRoot = path3.join(path3.dirname(probe.package_path), "skills");
     await validateSkills(record.skillsRoot, await availableSkills(sourceRoot));
     return {
       runtimeRoot,
@@ -775,7 +798,7 @@ async function validatedExisting(runtimeRoot, configuredPython, environment, tim
       marivoVersion: probe.marivo_version,
       packagePath: probe.package_path,
       skillsRoot: record.skillsRoot,
-      installationPath: path2.join(runtimeRoot, INSTALLATION_FILENAME)
+      installationPath: path3.join(runtimeRoot, INSTALLATION_FILENAME)
     };
   } catch {
     return void 0;
@@ -786,7 +809,7 @@ async function acquireLock(lockPath, timeoutMs, waitIntervalMs) {
   while (true) {
     try {
       await mkdir(lockPath);
-      await writeFile(path2.join(lockPath, "owner.json"), `${JSON.stringify({ pid: process4.pid, startedAt: (/* @__PURE__ */ new Date()).toISOString() })}
+      await writeFile(path3.join(lockPath, "owner.json"), `${JSON.stringify({ pid: process4.pid, startedAt: (/* @__PURE__ */ new Date()).toISOString() })}
 `);
       return async () => {
         await rm(lockPath, { recursive: true, force: true });
@@ -818,7 +841,7 @@ async function acquireLock(lockPath, timeoutMs, waitIntervalMs) {
 }
 async function lockOwnerAlive(lockPath) {
   try {
-    const owner = JSON.parse(await readFile(path2.join(lockPath, "owner.json"), "utf8"));
+    const owner = JSON.parse(await readFile(path3.join(lockPath, "owner.json"), "utf8"));
     if (!Number.isSafeInteger(owner.pid) || owner.pid < 1)
       return false;
     try {
@@ -859,13 +882,13 @@ async function installManagedRuntime(runtimeRoot, bootstrapPythonExecutable, env
   if (!Array.isArray(version.version) || typeof version.version[0] !== "number" || typeof version.version[1] !== "number" || version.version[0] < 3 || version.version[0] === 3 && version.version[1] < 10) {
     throw new MarivoEnvironmentError("shared-runtime-install-failed", `Local Python does not satisfy Marivo >=${SHARED_PYTHON_SPEC}; detected ${Array.isArray(version.version) ? version.version.join(".") : "unknown"}`, { version: version.version, pythonExecutable: bootstrapPythonExecutable });
   }
-  if (typeof version.python_executable !== "string" || !path2.isAbsolute(version.python_executable)) {
+  if (typeof version.python_executable !== "string" || !path3.isAbsolute(version.python_executable)) {
     throw new MarivoEnvironmentError("shared-runtime-install-failed", "Local Python returned a non-absolute interpreter path");
   }
   const canonicalPython = await assertExecutable2(version.python_executable);
   requireSuccess("create shared virtual environment (requires Python venv/ensurepip; install python3-venv on Debian/Ubuntu)", await policy.run({
     executable: canonicalPython,
-    args: ["-m", "venv", path2.join(runtimeRoot, ".venv")],
+    args: ["-m", "venv", path3.join(runtimeRoot, ".venv")],
     limits
   }));
   const executable = venvPython(runtimeRoot);
@@ -877,16 +900,16 @@ async function installManagedRuntime(runtimeRoot, bootstrapPythonExecutable, env
   return probeRuntime(runtimeRoot, executable, environment, timeoutMs, false, PINNED_MARIVO_VERSION);
 }
 async function ensureSharedMarivoRuntime(config = {}, options = {}) {
-  const runtimeRoot = config.runtimeRoot === void 0 ? defaultRuntimeRoot() : normalizeAbsolute2("runtimeRoot", config.runtimeRoot);
-  const configuredPython = config.pythonExecutable === void 0 ? void 0 : normalizeAbsolute2("pythonExecutable", config.pythonExecutable);
-  const bootstrapPythonExecutable = config.bootstrapPythonExecutable === void 0 ? process4.platform === "win32" ? "python" : "python3" : normalizeAbsolute2("bootstrapPythonExecutable", config.bootstrapPythonExecutable);
+  const runtimeRoot = config.runtimeRoot === void 0 ? defaultRuntimeRoot() : normalizeAbsolute("runtimeRoot", config.runtimeRoot);
+  const configuredPython = config.pythonExecutable === void 0 ? void 0 : normalizeAbsolute("pythonExecutable", config.pythonExecutable);
+  const bootstrapPythonExecutable = config.bootstrapPythonExecutable === void 0 ? process4.platform === "win32" ? "python" : "python3" : normalizeAbsolute("bootstrapPythonExecutable", config.bootstrapPythonExecutable);
   const timeoutMs = positiveTimeout(config.installTimeoutMs);
   const existing = await validatedExisting(runtimeRoot, configuredPython, options.environment, timeoutMs);
   if (existing !== void 0)
     return existing;
   if (options.existingOnly)
     throw new MarivoEnvironmentError("shared-runtime-installation-required", "A valid shared Marivo Runtime installation is required");
-  await mkdir(path2.dirname(runtimeRoot), { recursive: true });
+  await mkdir(path3.dirname(runtimeRoot), { recursive: true });
   const lockPath = `${runtimeRoot}.install-lock`;
   const release = await acquireLock(lockPath, timeoutMs, options.waitIntervalMs ?? 100);
   try {
@@ -920,7 +943,7 @@ async function ensureSharedMarivoRuntime(config = {}, options = {}) {
 
 // lib/environment/workspace.js
 import { realpath as realpath3, stat as stat3 } from "node:fs/promises";
-import path3 from "node:path";
+import path4 from "node:path";
 
 // lib/lifecycle.js
 var PendingTasks = class {
@@ -968,12 +991,12 @@ async function assertDirectory(target, label) {
 async function canonicalWorkspaceRoot(projectRoot) {
   let canonicalRoot;
   try {
-    canonicalRoot = await realpath3(path3.resolve(projectRoot));
+    canonicalRoot = await realpath3(path4.resolve(projectRoot));
     await assertDirectory(canonicalRoot, "root");
   } catch (cause) {
     if (cause instanceof MarivoEnvironmentError)
       throw cause;
-    throw new MarivoEnvironmentError("project-root-invalid", `Marivo project root is not an existing directory: ${path3.resolve(projectRoot)}`, { projectRoot: path3.resolve(projectRoot) }, { cause });
+    throw new MarivoEnvironmentError("project-root-invalid", `Marivo project root is not an existing directory: ${path4.resolve(projectRoot)}`, { projectRoot: path4.resolve(projectRoot) }, { cause });
   }
   return canonicalRoot;
 }