@crazx/dsh 0.1.0-rc.7.zw.2

package/config/agent-presets/standard/agent.cordis.yml

@@ -0,0 +1,251 @@
+# The `standard` agent preset: the full coding agent, mounted once per process.
+#
+# This file is an AGENT-PLANE composition. The roster mounts it ONCE under a
+# standing scope; every session naming it joins by scope parentage, so the
+# tools and prompt sections registered here cover each joined agent while a
+# session's own state stays keyed per Session/Agent inside the plugins. The
+# host composition (`base.cordis.yml` + `web.cordis.yml`) keeps everything a
+# preset must not own: the registries themselves, the sandbox and approval
+# stack, persistence, and the model route.
+#
+# A service row here MUST sit inside a group carrying an `isolate` realm.
+# Without one it publishes into the root realm, where it is process-global —
+# another preset publishing the same name collides, and a host reader would
+# resolve one preset's instance for every session; `dsh-agent-presets` rejects
+# that at mount. `true` means an entry-local realm: this standing mount's own
+# private instance, apart from every other preset's. (A shared label does NOT
+# pool instances — `provide()` throws on the second registration under the
+# same realm symbol; labels join REALMS, and are not what this file needs.)
+
+# ── identity ────────────────────────────────────────────────────────────────
+
+# The preset's own persona, shadowing the deployment default for this agent.
+# `{{model}}` and `{{cwd}}` resolve from the agent's own route and workspace.
+- id: persona
+  name: '@deepseek-ai/dsh-persona'
+  config:
+    text: >-
+      You are a coding agent powered by the {{model}} model. Your working directory is {{cwd}}.
+
+- id: agent-instructions
+  name: '@deepseek-ai/dsh-agent-instructions'
+  config:
+    maxBytes: 65536
+
+# ── shell ───────────────────────────────────────────────────────────────────
+
+# `shell-env` stays in the HOST composition: `apps/cli/src/web.ts` injects it to
+# publish `DSH_WEB_URL`/`DSH_WEB_MODE`, and a host row that injects a service is
+# the criterion for host-plane ownership — injection resolves before any session
+# exists, so there is no agent to key by. Behind a preset realm those variables
+# never reached the model's shell at all. Both shell tools consume the host
+# registry from here; their executors (`bash-sandbox`/`pwsh-sandbox`) are
+# host-plane too.
+- id: tool-bash
+  name: '@deepseek-ai/dsh-tool-bash'
+  disabled: !!js process.platform === 'win32'
+
+- id: tool-pwsh
+  name: '@deepseek-ai/dsh-tool-pwsh'
+  disabled: !!js process.platform !== 'win32'
+
+# ── filesystem ──────────────────────────────────────────────────────────────
+
+# Both register into the host `tools` registry and provide nothing, so
+# they need no realm. The `fs` service and its policy stay in the host.
+- id: tool-fs
+  name: '@deepseek-ai/dsh-tool-fs'
+
+- id: tool-fs-search
+  name: '@deepseek-ai/dsh-tool-fs-search'
+  config:
+    sampleOverCapGlobResults: false
+
+# ── background jobs ────────────────────────────────────────────────────────
+
+# Only the model-facing controls. The task REGISTRY stays on the host plane:
+# its producers sit outside any realm this file could put it in — `tool-bash`
+# above resolves it with `ctx.get`, and an entry-local realm here is invisible
+# to every sibling row, so `run_in_background` would answer "background jobs
+# unavailable" while these controls sat in the catalog. The registry is keyed by
+# owning agent anyway, so one host instance serves every session. What a preset
+# chooses is whether its agent can collect and stop background work at all.
+- id: tool-jobs
+  name: '@deepseek-ai/dsh-tool-jobs'
+
+# ── skills ──────────────────────────────────────────────────────────────────
+
+# The skill REGISTRY lives in the host composition and is layered per scope:
+# these rows register into THIS preset's layer of it, so they need no realm.
+# `skill-filesystem` contributes local-root discovery for agents on this preset, and
+# `tool-skill` gives them the catalog and loader; the merged catalog also
+# carries whatever the deployment registered globally (repository plugins).
+- id: skill-filesystem
+  name: '@deepseek-ai/dsh-skill-filesystem'
+
+- id: tool-skill
+  name: '@deepseek-ai/dsh-tool-skill'
+
+# ── goals ───────────────────────────────────────────────────────────────────
+
+# Only the model-facing tool. The goal SERVICE, its session driver, and the
+# `/goal` command stay on the host plane: the Gateway serves the goal domain as
+# Remote endpoints whose receiver comes from a generated descriptor, so it
+# resolves `goals` on the host and an entry-local realm here would hide it. The
+# registry is keyed by session anyway, so one host instance serves every
+# session. What a preset chooses is whether its agent can call the goal tool.
+- id: tool-goal
+  name: '@deepseek-ai/dsh-tool-goal'
+
+# ── plan mode ───────────────────────────────────────────────────────────────
+
+# Plan state is per-agent by nature, so an entry-local realm is not a
+# workaround here — it is the correct lifetime.
+- id: planning
+  name: cordis:group
+  group: true
+  isolate:
+    planMode: true
+  config:
+    - id: plan-mode
+      name: '@deepseek-ai/dsh-plan-mode'
+      config:
+        section: |
+              You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
+
+              Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
+
+              The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
+
+              Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
+
+              Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
+
+              When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
+
+# ── compaction ──────────────────────────────────────────────────────────────
+
+# `compaction-basic` reads `toolResultPrune` through `ctx.get`, so the pruner must
+# share this realm rather than sit outside it.
+#
+# `tokenMeter` is deliberately NOT in this realm: the meter stays on the HOST
+# plane, and the rows here resolve that one instance. It takes no configuration,
+# keys every fold by Session, and owns the context-meter projection units the
+# browser reads for every session — behind a realm those units would come and go
+# with whichever presets happen to be mounted. What a preset chooses is whether
+# its agent compacts at all, which is `compaction-basic` below.
+- id: compaction
+  name: cordis:group
+  group: true
+  isolate:
+    compaction: true
+    toolResultPruner: true
+  config:
+    - id: compaction-basic
+      name: '@deepseek-ai/dsh-compaction-basic'
+
+    - id: command-compact
+      name: '@deepseek-ai/dsh-command-compact'
+
+    - id: tool-result-pruner
+      name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
+      config:
+        thresholdChars: 8192
+        headChars: 4096
+        tailChars: 1024
+
+# ── delegation and workflows ────────────────────────────────────────────────
+
+# The `subagents` registry and its spawn/fork backends live in the HOST
+# composition: the registry is a process singleton whose cross-session queries
+# the api-proxy serves to the browser, and a provider name may only be
+# registered once. This preset contributes the delegation TOOLS, which resolve
+# that host registry.
+#
+# `workflows` is different — nothing outside an agent reads it — so every row
+# that reaches it shares one entry-local realm here, and a consumer left
+# outside would resolve a host registry this preset does not populate.
+#
+# `tool-subagent-report` is host-plane for the same reason as the registry,
+# not because a preset may not want it: it registers a CONTINUABLE SETUP on
+# that singleton rather than a tool this agent calls, and the setup list is
+# not scope-aware — one copy per mounted preset means every child gets
+# `report` registered once per live session, which throws on the second.
+- id: delegation
+  name: cordis:group
+  group: true
+  isolate:
+    workflowEngine: true
+  config:
+    - id: tool-subagent-control
+      name: '@deepseek-ai/dsh-tool-subagent-control'
+
+    - id: tool-subagent-list-agents
+      name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
+
+    - id: tool-subagent
+      name: '@deepseek-ai/dsh-tool-subagent'
+      config:
+        provider: spawn
+        toolName: subagent
+        backgroundMode: continuable
+
+    - id: tool-subagent-fork
+      name: '@deepseek-ai/dsh-tool-subagent'
+      config:
+        provider: fork
+        toolName: subagent_fork
+        backgroundMode: continuable
+
+    # Production dsh does not install these optional providers. An opting-in
+    # Profile mounts each provider once on the host plane; copy this preset,
+    # then remove `disabled` from the matching tool row.
+    - id: tool-subagent-codex
+      name: '@deepseek-ai/dsh-tool-subagent'
+      disabled: true
+      config:
+        provider: codex
+        toolName: subagent_codex
+        backgroundMode: one-shot
+        maxDepth: provider-managed
+
+    - id: tool-subagent-claude-code
+      name: '@deepseek-ai/dsh-tool-subagent'
+      disabled: true
+      config:
+        provider: claude-code
+        toolName: subagent_claude_code
+        backgroundMode: one-shot
+        maxDepth: provider-managed
+
+    - id: workflow-worker-thread
+      name: '@deepseek-ai/dsh-workflow-worker-thread'
+      config:
+        provider: spawn
+
+    - id: tool-workflow
+      name: '@deepseek-ai/dsh-tool-workflow'
+
+    - id: tool-ralph
+      name: '@deepseek-ai/dsh-tool-ralph'
+      config:
+        subagentProvider: spawn
+        maxRounds: 64
+
+# ── remaining model-facing rows ─────────────────────────────────────────────
+
+- id: tool-ask-user
+  name: '@deepseek-ai/dsh-tool-ask-user'
+
+- id: tool-todo
+  name: '@deepseek-ai/dsh-tool-todo'
+  config:
+    allowParallelInProgress: true
+
+# The `web` service and its search provider stay in the host composition; only
+# the model-facing tool is per-session.
+- id: tool-web
+  name: '@deepseek-ai/dsh-tool-web'
+  config:
+    fetch: false
+    searchTimeoutMs: 60000

package/config/agent-presets/standard/preset.yml

@@ -0,0 +1,3 @@
+name: 标准模式
+description: 功能完整的编码 Agent，支持文件编辑、Shell、文件与网页检索、Skills、计划、目标、子代理和工作流。
+order: 1

package/lib/bin.js

@@ -0,0 +1,185 @@
+#!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { loadLayeredEnv } from "@deepseek-ai/dsh-app-boot";
+import { Command, CommanderError } from "commander";
+//#region lib/types/args.js
+/**
+* Commander adapter for the `dsh` command line.
+*
+* The launcher parses only what it owns — which profile to boot, which extra
+* patch overlays to apply, and the config dumps — and hands **everything after
+* its own flags** to the booted tree verbatim, where injected app plugins parse
+* their own flag families and print their own `--help` (see
+* `@deepseek-ai/dsh-cmdline`). Launcher flags therefore come first: the first
+* token this parser does not recognize starts the inner arguments, so
+* `dsh --profile tui --resume abc` boots the tui profile with `--resume abc`,
+* and `dsh --profile web -h` prints the web app's help, not this one's.
+*
+* `web` is a hardcoded alias for `--profile web`; `plugin` manages a profile's
+* plugin dependencies by forwarding to pnpm. The fork adds `web:log` /
+* `web:log:tmp`, which boot the web profile while teeing output to a log file.
+* @module @deepseek-ai/dsh/args
+*/
+/**
+* Repeatable single-value collector: `--patch a.yml --patch b.yml`. Never
+* variadic — a variadic `--patch` would swallow the inner arguments.
+*/
+const collect = (value, previous = []) => [...previous, value];
+/** The launcher's own help text; each app prints its own. */
+const HELP_EXAMPLES = `
+Examples:
+  dsh --profile web                          boot the web profile (same as: dsh web)
+  dsh --profile headless "run the tests"     answer one task, print the result, and exit
+  dsh --profile tui --patch ./extra.yml      boot a custom profile with one extra overlay
+  dsh --profile tui --resume <session>       arguments after the launcher flags reach the app
+  dsh --profile web --help                   the web app's own flags and help
+  dsh plugin --profile tui add <package>     install a plugin into the tui profile
+  dsh web:log --port 0                       boot web with output teed to a timestamped log file (fork-local)
+`;
+/**
+* Resolve a boot or dump invocation from the launcher flags and the leftover
+* inner arguments.
+* @param program - the command whose options were parsed (the root, or the `web` alias).
+* @param profile - the profile these flags boot.
+* @param options - the launcher flags commander collected.
+* @param args - the leftover arguments, in argv order.
+* @returns the resolved invocation.
+*/
+function resolveBoot(program, profile, options, args) {
+	const patches = options.patch ?? [];
+	if (patches.includes("")) program.error("error: --patch needs a path");
+	if (options.dumpConfig !== true && options.dumpDefaultConfig !== true) return {
+		mode: "profile",
+		profile,
+		patches,
+		args
+	};
+	if (options.dumpConfig === true && options.dumpDefaultConfig === true) program.error("error: --dump-config and --dump-default-config are mutually exclusive");
+	if (args.length > 0) program.error(`error: config dumps take no app arguments, got ${args.map((argument) => JSON.stringify(argument)).join(" ")}`);
+	const defaultOnly = options.dumpDefaultConfig === true;
+	if (defaultOnly && patches.length > 0) program.error("error: --dump-default-config prints the bundle layers and takes no --patch");
+	return {
+		mode: "dump-config",
+		profile,
+		defaultOnly,
+		patches
+	};
+}
+/**
+* Resolve argv into one invocation, or print and exit for help, version, or an
+* error.
+* @param argv - arguments after the Node binary and script.
+* @param version - version string printed by `--version`.
+* @returns the resolved invocation.
+*/
+function parseDshArgs(argv, version) {
+	let resolved;
+	const program = new Command();
+	program.name("dsh").version(version, "-V, --version", "output the version number").description("dsh: boot a DeepSeek Harness profile — an ordered stack of plugin-bundle patch layers under your own overrides.").addHelpText("after", HELP_EXAMPLES).exitOverride().helpOption(false).allowUnknownOption().passThroughOptions().enablePositionalOptions().argument("[args...]", "arguments for the booted profile's app (see: dsh --profile <name> --help)").option("--profile <name>", "the profile under $DSH_HOME/profiles to boot").option("--patch <path>", "extra patch-list overlay applied after the profile layer (repeatable)", collect).option("--dump-config", "print the composed profile tree and exit").option("--dump-default-config", "print the profile tree without its user layer or --patch overlays and exit").action((args, options) => {
+		if (options.profile === void 0) {
+			if (args.some((argument) => argument === "-h" || argument === "--help")) program.help();
+			program.error("error: --profile <name> is required");
+		}
+		const profile = options.profile;
+		if (profile === "") program.error("error: --profile needs a name");
+		resolved = resolveBoot(program, profile, options, args);
+	});
+	/** Reject parent options supplied before a subcommand. */
+	const rejectParentOptions = (command) => {
+		const parent = program.opts();
+		if (parent.profile !== void 0 || parent.patch !== void 0 || parent.dumpConfig !== void 0 || parent.dumpDefaultConfig !== void 0) program.error(`error: ${command} takes none of parent --profile, --patch, --dump-config, or --dump-default-config`);
+	};
+	const web = program.command("web").description("boot the web profile (alias of --profile web); the web app's own flags follow");
+	web.helpOption(false).allowUnknownOption().passThroughOptions().enablePositionalOptions().argument("[args...]", "arguments for the web app (see: dsh web --help)").option("--patch <path>", "extra patch-list overlay applied after the profile layer (repeatable)", collect).option("--dump-config", "print the composed web-profile tree (with the user layer and any --patch) and exit").option("--dump-default-config", "print the web profile's bundle layers (no user layer) and exit").action((args, options) => {
+		rejectParentOptions("web");
+		resolved = resolveBoot(web, "web", options, args);
+	});
+	/**
+	* Fork-local logged web boots: `dsh web:log` tees the web app's output to a
+	* timestamped file under $DSH_HOME/logs, `dsh web:log:tmp` under the OS temp
+	* dir. Flag shape mirrors the `web` alias minus the boot-free dumps.
+	*/
+	const registerWebLog = (name, tmp) => {
+		program.command(name).description(tmp ? "boot the web profile, teeing its output to a log file under the OS temp dir (fork-local)" : "boot the web profile, teeing its output to a log file under $DSH_HOME/logs (fork-local)").helpOption(false).allowUnknownOption().passThroughOptions().enablePositionalOptions().argument("[args...]", "arguments for the web app (see: dsh web --help)").option("--patch <path>", "extra patch-list overlay applied after the profile layer (repeatable)", collect).action((args, options) => {
+			rejectParentOptions(name);
+			const patches = options.patch ?? [];
+			if (patches.includes("")) program.error("error: --patch needs a path");
+			resolved = {
+				mode: "web-log",
+				tmp,
+				patches,
+				args
+			};
+		});
+	};
+	registerWebLog("web:log", false);
+	registerWebLog("web:log:tmp", true);
+	program.command("plugin").description("manage a profile's plugins by forwarding the remaining arguments to pnpm in the profile directory").requiredOption("--profile <name>", "the profile whose plugins to manage (initialized on first use)").allowUnknownOption().argument("[args...]", "pnpm arguments, forwarded verbatim (add <pkg>, remove <pkg>, why <pkg>, ...)").action((args, options) => {
+		rejectParentOptions("plugin");
+		if (options.profile === "") program.error("error: --profile needs a name");
+		if (args.length === 0) program.error("error: plugin needs pnpm arguments to forward (e.g. add <package>)");
+		resolved = {
+			mode: "plugin",
+			profile: options.profile,
+			args
+		};
+	});
+	try {
+		program.parse(argv, { from: "user" });
+	} catch (error) {
+		return process.exit(error instanceof CommanderError ? error.exitCode : 1);
+	}
+	/* v8 ignore next -- an action resolves or Commander throws */
+	if (resolved === void 0) throw new Error("dsh: no invocation resolved");
+	return resolved;
+}
+//#endregion
+//#region lib/types/bin.js
+/**
+* dsh — command-line entry. Dynamic imports per mode keep unrelated modes out
+* of each dispatch path; the adapter prints and exits for
+* `--help`/`--version`/a parse error, so only a valid mode reaches the switch.
+* @module @deepseek-ai/dsh/bin
+*/
+/* v8 ignore file -- built-bin acceptance exercises this self-executing dispatch. */
+/** This app's version, read from its checked-in package.json. */
+function readVersion() {
+	const manifest = JSON.parse(readFileSync(fileURLToPath(new URL("../package.json", import.meta.url)), "utf8"));
+	return typeof manifest.version === "string" ? manifest.version : "0.0.0";
+}
+const invocation = parseDshArgs(process.argv.slice(2), readVersion());
+switch (invocation.mode) {
+	case "profile": {
+		const { runProfile } = await import("./profile-boot-BnJoK_kl.js");
+		await runProfile({
+			environment: loadLayeredEnv("dsh"),
+			profile: invocation.profile,
+			patchFiles: invocation.patches,
+			args: invocation.args
+		});
+		break;
+	}
+	case "plugin": {
+		const { runPlugin } = await import("./plugin-9h8shc4d.js");
+		process.exit(runPlugin(invocation.profile, invocation.args));
+		break;
+	}
+	case "web-log": {
+		const { runWebLog } = await import("./web-log-DZLBFfre.js");
+		runWebLog({
+			tmp: invocation.tmp,
+			patches: invocation.patches,
+			args: invocation.args
+		});
+		break;
+	}
+	case "dump-config": {
+		const { runDumpConfig } = await import("./dump-config-D-jtgwY3.js");
+		runDumpConfig(invocation.profile, invocation.defaultOnly, invocation.patches);
+		break;
+	}
+	default: throw new Error(`dsh: unhandled invocation mode ${JSON.stringify(invocation)}`);
+}
+//#endregion
+export {};

package/lib/dump-config-D-jtgwY3.js

@@ -0,0 +1,52 @@
+import { i as prepareProfile, n as PROFILE_ROOT_FILENAME, r as homePatchPath } from "./profile-boot-DG5t9aNs.js";
+import { existsSync } from "node:fs";
+import { loadOptionalPatches, loadOverlayPatches, renderConfigDump } from "@deepseek-ai/dsh-app-boot";
+import { join, resolve } from "node:path";
+//#region lib/types/dump-config.js
+/**
+* Config-dump entry for `dsh --profile <name> --dump-config`: compose the
+* profile's patch layers through the include plugin's patch algorithm without
+* booting or evaluating `!!js`, with one source layer per bundle, the
+* profile's own patch file, and each `--patch` overlay.
+* @module @deepseek-ai/dsh/dump-config
+*/
+const NAME = "dsh";
+/* v8 ignore start -- built-bin acceptance drives this boot-free dispatch */
+/**
+* Print a profile composition with comments naming each source file and patch layer.
+* @param profile - the profile name.
+* @param defaultOnly - omit the profile's user layer and `--patch` overlays
+* (the recovery diagnostic for a broken `cordis.patch.yml`, which is then
+* never parsed).
+* @param patches - `--patch` overlay paths, in argv order.
+*/
+function runDumpConfig(profile, defaultOnly, patches) {
+	const loaded = prepareProfile(profile, !defaultOnly);
+	const layers = loaded.layers.map((layer) => ({
+		label: layer.packageName,
+		patches: layer.patches
+	}));
+	if (!defaultOnly) {
+		if (existsSync(loaded.patchPath)) layers.push({
+			label: loaded.patchPath,
+			patches: loaded.patches
+		});
+		const homePatchFile = homePatchPath();
+		const homePatches = loadOptionalPatches(NAME, homePatchFile);
+		if (homePatches !== void 0) layers.push({
+			label: homePatchFile,
+			patches: homePatches
+		});
+		for (const file of patches) {
+			const absolute = resolve(file);
+			layers.push({
+				label: absolute,
+				patches: loadOverlayPatches(NAME, absolute)
+			});
+		}
+	}
+	process.stdout.write(renderConfigDump(NAME, join(loaded.dir, PROFILE_ROOT_FILENAME), layers));
+}
+/* v8 ignore stop */
+//#endregion
+export { runDumpConfig };

package/lib/plugin-9h8shc4d.js

@@ -0,0 +1,129 @@
+import { t as INSTALL_ANCHOR } from "./profile-boot-DG5t9aNs.js";
+import { existsSync } from "node:fs";
+import { DEFAULT_PROFILE_BUNDLES, PROFILE_TEMPLATES, initProfile, readProfileManifest, resolveBundleDir, resolveProfileDir, writeProfileManifest } from "@deepseek-ai/dsh-app-boot";
+import { join, resolve } from "node:path";
+import { spawnSync } from "node:child_process";
+//#region lib/types/plugin.js
+/**
+* `dsh plugin --profile <name> <args...>` — profile plugin management as a
+* thin pnpm forwarder: initialize the profile on first use, run
+* `pnpm <args...>` in the profile directory, then reconcile the
+* `dsh.profile.bundles` layer list against the installed state (a dependency
+* resolving to a package that declares `dsh.bundle` joins the layer stack; a
+* removed or bundle-less dependency leaves it). Reconciling by installed
+* state, not by dependency diff, means `update` activates a package that
+* gained its `dsh.bundle` declaration in a newer version.
+* @module @deepseek-ai/dsh/plugin
+*/
+const NAME = "dsh";
+/**
+* Whether a resolved dependency exports a profile patch, i.e. is a bundle.
+* @param packageName - the dependency's package name.
+* @param profileDir - the profile directory (resolution anchor).
+* @returns true when the package manifest declares `dsh.bundle`.
+*/
+function exportsPatch(packageName, profileDir) {
+	let dir;
+	try {
+		dir = resolveBundleDir(NAME, packageName, INSTALL_ANCHOR, profileDir);
+	} catch {
+		return false;
+	}
+	return readProfileManifest(NAME, dir).dsh?.bundle?.patch !== void 0;
+}
+/**
+* Reconcile `dsh.profile.bundles` against the installed state: pnpm has
+* already written the real installed names (so a git/path/tarball/alias spec
+* on the command line reconciles by its true package name) and materialized
+* the packages. A dependency that resolves to a `dsh.bundle`-declaring
+* package joins the layer stack (appended in dependency order); a
+* dependency-listed name that no longer does — removed, or the installed
+* version dropped the declaration — leaves it. In-box bundles from the
+* profile template are not dependencies and are never touched. Warns once
+* per newly-added bundle-less dependency (a plain library is fine; the
+* warning is orientation).
+*/
+function reconcilePlugins(before, profileDir) {
+	const after = readProfileManifest(NAME, profileDir);
+	const beforeDeps = new Set(Object.keys(before.dependencies ?? {}));
+	const dependencies = Object.keys(after.dependencies ?? {});
+	const plugins = after.dsh?.profile?.bundles ?? [];
+	let changed = false;
+	for (const packageName of dependencies) {
+		const isBundle = exportsPatch(packageName, profileDir);
+		if (isBundle && !plugins.includes(packageName)) {
+			plugins.push(packageName);
+			changed = true;
+		} else if (!isBundle && !beforeDeps.has(packageName)) process.stderr.write(`${NAME}: warning: ${packageName} declares no dsh.bundle — installed as a plain dependency, not a profile layer (a later update that gains one activates it automatically)
+`);
+	}
+	const dependencySet = new Set(dependencies);
+	for (const packageName of [...plugins]) {
+		const wasDependency = beforeDeps.has(packageName) || dependencySet.has(packageName);
+		const stillBundle = dependencySet.has(packageName) && exportsPatch(packageName, profileDir);
+		if (wasDependency && !stillBundle) {
+			plugins.splice(plugins.indexOf(packageName), 1);
+			changed = true;
+		}
+	}
+	if (!changed) return;
+	after.dsh = {
+		...after.dsh,
+		profile: {
+			...after.dsh?.profile,
+			bundles: plugins
+		}
+	};
+	writeProfileManifest(profileDir, after);
+}
+/**
+* Rewrite relative filesystem specs against the user's invoking directory.
+* pnpm runs with cwd = the profile directory, so a bare `.` or `../plugin`
+* (or their `file:`/`link:` forms) would silently resolve inside the profile
+* — `add .` from a plugin checkout would self-link the profile. Absolute
+* specs, registry names, and every other pnpm argument pass through
+* untouched.
+* @param argument - one pnpm argument, verbatim from argv.
+* @param cwd - the directory `dsh` was invoked from.
+* @returns the argument with a relative path spec anchored to `cwd`.
+*/
+function anchorPathSpec(argument, cwd) {
+	const match = /^(?<prefix>(?:file|link):)?(?<path>\.{1,2}(?:[/\\].*)?)$/.exec(argument);
+	if (match?.groups?.path === void 0) return argument;
+	return `${match.groups.prefix ?? ""}${resolve(cwd, match.groups.path)}`;
+}
+/**
+* Run one `dsh plugin` invocation: init if needed, forward to pnpm, reconcile.
+* @param profile - the profile name.
+* @param args - pnpm arguments with relative path specs anchored to the invoking directory.
+* @returns the pnpm exit code.
+*/
+function runPlugin(profile, args) {
+	const dir = resolveProfileDir(profile);
+	if (!existsSync(join(dir, "package.json"))) {
+		initProfile(dir, PROFILE_TEMPLATES[profile] ?? DEFAULT_PROFILE_BUNDLES);
+		process.stderr.write(`${NAME}: initialized profile ${profile} at ${dir}\n`);
+	}
+	const before = readProfileManifest(NAME, dir);
+	const result = spawnSync("pnpm", args.map((argument) => anchorPathSpec(argument, process.cwd())), {
+		cwd: dir,
+		stdio: "inherit",
+		shell: process.platform === "win32"
+	});
+	if (result.error !== void 0) {
+		if (result.error.code === "ENOENT") {
+			process.stderr.write(`${NAME}: pnpm not found on PATH — install pnpm to manage profile plugins\n`);
+			return 127;
+		}
+		throw result.error;
+	}
+	const exitCode = result.status ?? 1;
+	if (exitCode === 0) reconcilePlugins(before, dir);
+	else {
+		process.stderr.write(`${NAME}: pnpm failed in profile directory ${dir}\n`);
+		if (args.some((argument) => /^git\+|^github:|\.git(?:#|$)/.test(argument))) process.stderr.write(`${NAME}: git-hosted plugins build on install via their prepare script, which pnpm blocks until allowed — add the exact key pnpm printed above under allowBuilds in ${join(dir, "pnpm-workspace.yaml")}, then re-run\n`);
+	}
+	return exitCode;
+}
+//#endregion
+export { runPlugin };

package/lib/profile-boot-BnJoK_kl.js

@@ -0,0 +1,2 @@
+import { o as runProfile } from "./profile-boot-DG5t9aNs.js";
+export { runProfile };