@deepseek-ai/dsh-app-boot 0.1.7-rc.1 → 0.2.0-rc.1

package/README.i18n.yaml

@@ -1,6 +1,73 @@
-# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
-# side as of the last confirmed-consistent state. Both languages carry equal authority;
-# after editing either side, bring the other along and re-record with:
+# Bilingual-pair consistency record for README.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/boot/app-boot/README.md
-README.md: c32f8e4dd9065897a7dcbe4b7a2fd2e067b25e46
-README.zh.md: 0bbdab2a5d51deeb6b63bf972e6550f9b4034db1
+/:
+  en: 822ef8977098c703
+  zh: c0673e854310840f
+/deepseek-ai-dsh-app-boot:
+  en: fdb73259898590a5
+  zh: aee057cd436da2e2
+/deepseek-ai-dsh-app-boot/summary:
+  en: e5db70f7cdcdbe9c
+  zh: 6852efb61109a349
+/deepseek-ai-dsh-app-boot/table-of-contents:
+  en: d152484eb41ac6b4
+  zh: 09388d293f9be9cb
+/deepseek-ai-dsh-app-boot/use-this-package:
+  en: f6fa378225009c8f
+  zh: 324c0e4640bb1358
+/deepseek-ai-dsh-app-boot/use-this-package/when-to-use-it:
+  en: 2fdfe02f2ed4a258
+  zh: d748228ece579c4a
+/deepseek-ai-dsh-app-boot/use-this-package/starting-the-app:
+  en: 1099528bde0e2aee
+  zh: b68772bdb9bb7856
+/deepseek-ai-dsh-app-boot/use-this-package/profiles:
+  en: d50b0fdaf62353dd
+  zh: 0fccb6968602e5de
+/deepseek-ai-dsh-app-boot/use-this-package/previewing-the-effective-configuration:
+  en: 646a0ccdd7881ad1
+  zh: e3696acb1573dd7b
+/deepseek-ai-dsh-app-boot/use-this-package/inspecting-plugin-configuration-schemas:
+  en: c4a301652b851ce9
+  zh: 784871e19cd9db0a
+/deepseek-ai-dsh-app-boot/use-this-package/reading-plugin-display-metadata:
+  en: 480ad3a4d96112f0
+  zh: 10a92f1013aa5ac4
+/deepseek-ai-dsh-app-boot/use-this-package/startup-and-reload-failures:
+  en: 09890e218ab49c84
+  zh: e3d86597e7fb1adb
+/deepseek-ai-dsh-app-boot/use-this-package/telling-the-agent-where-the-harness-lives:
+  en: 07c459f26f4f8517
+  zh: 210f1e4894731b1a
+/deepseek-ai-dsh-app-boot/understand-the-implementation:
+  en: f4a2695cb4c8a570
+  zh: 89837235d2f376cf
+/deepseek-ai-dsh-app-boot/understand-the-implementation/design-notes:
+  en: 4ac0c33806b5a5b2
+  zh: cdb56f3adfcb4364
+/deepseek-ai-dsh-app-boot/understand-the-implementation/helper-behavior:
+  en: f7bc3a8dd4b00bdd
+  zh: 30098428aa769ad0
+/deepseek-ai-dsh-app-boot/understand-the-implementation/source-map:
+  en: 25602fd8eb9b2907
+  zh: 870a33dd34a52c32
+/deepseek-ai-dsh-app-boot/further-exploration:
+  en: ffd10e94443a10ca
+  zh: cd11495bae751bdd
+/deepseek-ai-dsh-app-boot/model-experience:
+  en: 769777f1cb1a9408
+  zh: f02b2834179df50d
+/deepseek-ai-dsh-app-boot/model-experience/kv-cache-effect:
+  en: c4d49630b68ae896
+  zh: 6f450ec6ba39bb81
+/deepseek-ai-dsh-app-boot/known-limitations-and-deferred-work:
+  en: bf1a49013cad8e9c
+  zh: 41b2b010f8650ec3
+/deepseek-ai-dsh-app-boot/known-limitations-and-deferred-work/dev-note:
+  en: d2f0d68fe29fb750
+  zh: 323d21ee73a9e3f6
+/deepseek-ai-dsh-app-boot/known-limitations-and-deferred-work/dev-note/open-yaml-config-dump-stability:
+  en: 032f14ed5cd78efa
+  zh: ecc81f819f0bc39b

package/README.md

@@ -47,11 +47,11 @@ const ctx = await boot('dsh', resolveConfigPath(argv[2], process.env.DSH_SNAPSHO
 
 Import profile and bundle declaration types from [`@deepseek-ai/dsh-package-manifest`](../../util/package-manifest/README.md). App-boot adapts `DshPackageManifest` to `ProfileManifest` with optional package identity because local profiles need no published version. App-boot owns profile loading, JSON validation, and resolved runtime data.
 
-A profile is how one dsh installation ships different app surfaces: `web`, `headless`, `acp`, `sdk`, and `sdk-minimal` start distinct compositions from the same launcher. A profile lives at `$DSH_HOME/profiles/<name>` and combines installable bundles with its own `cordis.patch.yml`. A bundle's `dsh.bundle.patch` names one patch file or an ordered list of files; `bundlePatchFiles` validates the declaration and `bundlePatchPaths` resolves it to absolute paths; the layer concatenates their patch lists in that order. The YAML composition enables or disables HMR. The shipped `web` template uses live reload, while the other shipped templates apply patches only at startup. `sdk-minimal` names only its standalone bundle; the other templates retain base-plus-mode stacks. `dsh --profile <name> --from-default-profile <template>` creates a custom profile at a new non-shipped name from one shipped template, while `dsh plugin` initializes a base-backed profile and manages its installed bundles. Bundle resolution, manifest, and patch-loading failures print a diagnostic and skip that bundle without changing its selection. Remaining bundles keep their order; profile and user-patch errors still fail startup. Skipping a bundle does not guarantee that the remaining composition can provide the required services. Application-owned npm projects, such as Electron's reserved Desktop profile, use `loadProfileDirectory` to load an already initialized directory without exposing it through CLI profile lookup.
+A profile is how one dsh installation ships different app surfaces: `web`, `headless`, `acp`, `sdk`, and `sdk-minimal` start distinct compositions from the same launcher. A profile lives at `$DSH_HOME/profiles/<name>` and combines installable bundles with its own `cordis.patch.yml`. A bundle's `dsh.bundle.patch` names one patch file or an ordered list of files; `bundlePatchFiles` validates the declaration and `bundlePatchPaths` resolves it to absolute paths; the layer concatenates their patch lists in that order. The YAML composition enables or disables HMR. The shipped `web` template uses live reload, while the other shipped templates apply patches only at startup. `sdk-minimal` names only its standalone bundle; the other templates retain base-plus-mode stacks. `dsh --profile <name> --from-default-profile <template>` creates a custom profile at a new non-shipped name from one shipped template, while `dsh plugin` initializes a base-backed profile and manages its installed bundles. Bundle resolution, manifest, and patch-loading failures skip that bundle without changing its selection; the loaded profile lists each skip in `skippedBundles`, and the launcher prints them once per start with `reportSkippedBundles`. Remaining bundles keep their order; profile and user-patch errors still fail startup. Skipping a bundle does not guarantee that the remaining composition can provide the required services. Application-owned npm projects, such as Electron's reserved Desktop profile, use `loadProfileDirectory` to load an already initialized directory without exposing it through CLI profile lookup.
 
 Before a profile imports a plugin, DSH checks its `peerDependencies` on `@deepseek-ai/dsh` and `@deepseek-ai/dsh-*` against the single runtime version returned by `getDshRuntimeVersion()`. Every declared range must match; prereleases participate in range matching. Source-workspace `workspace:^`, `workspace:~`, and `workspace:*` refer to that same runtime. Missing DSH peers impose no constraint; invalid ranges are incompatible. These checks use peer declarations, not `engines.dsh`, and are not a sandbox against malicious package code.
 
-Admission happens only at composition boundaries DSH owns, and a denied row is denied in the launcher's own copy of the composition: no profile patch layer, dependency manifest, or bundle list changes. `prepareProfilePatches` composes over the launcher's empty profile root and runs while the root Include is mounted and on every profile recomposition, so a denied plugin never imports its module. `prepareProfileEntries` does the same for a preset's rows. A denied ordinary row becomes a detached `disabled: true` row; a native group stays mounted and its denied children do not load; a native Include that reaches a denied plugin is omitted whole, because its file is never rewritten. A row denied by policy keeps its configured `disabled` value in the profile, and every refusal is reported with the package, versions, and risk. A bundle is not a row, so `loadProfileDirectory` checks each bundle's own DSH peers when it loads the profile's bundle layers, at startup and on every recomposition; an incompatible bundle without an exemption is skipped like an unreadable one. These boundaries do not cover plugins another embedder mounts through its own `ctx.plugin` call. Two edits made directly to files during a session are judged only at the next recomposition or startup: a running plugin's own `package.json` peer declaration, and an entry-list file the Loader reads itself, such as the launcher's root config or a nested `cordis:include` file. `--dump-config` reports the configured composition, so a denied plugin row still appears there while a denied bundle contributes no rows, and `--dump-config-schema` imports each composed module to read its schema; run it only against a profile whose plugins you already trust.
+Admission happens only at composition boundaries DSH owns, and a denied row is denied in the launcher's own copy of the composition: no profile patch layer, dependency manifest, or bundle list changes. `prepareProfilePatches` composes over the launcher's empty profile root and runs while the root Include is mounted and on every profile recomposition, so a denied plugin never imports its module. `prepareProfileEntries` does the same for a preset's rows. A denied ordinary row becomes a detached `disabled: true` row; a native group stays mounted and its denied children do not load; a native Include that reaches a denied plugin is omitted whole, because its file is never rewritten. A row denied by policy keeps its configured `disabled` value in the profile, and every refusal is reported with the package, versions, and risk. A bundle is not a row, so `loadProfileDirectory` checks each bundle's own DSH peers when it loads the profile's bundle layers, at startup and on every recomposition; an incompatible bundle without an exemption is skipped like an unreadable one and listed in `skippedBundles`. These boundaries do not cover plugins another embedder mounts through its own `ctx.plugin` call. Two edits made directly to files during a session are judged only at the next recomposition or startup: a running plugin's own `package.json` peer declaration, and an entry-list file the Loader reads itself, such as the launcher's root config or a nested `cordis:include` file. `--dump-config` reports the configured composition, so a denied plugin row still appears there while a denied bundle contributes no rows, and `--dump-config-schema` imports each composed module to read its schema; run it only against a profile whose plugins you already trust.
 
 Exact-version exemptions live in the profile's own `compatibility.json`, not in its `package.json`, so an exemption write never touches the dependency manifest, the bundle list, or Cordis patch files. It maps exact `package-name@version` keys to lists of exact DSH runtime versions; neither a plugin upgrade nor a DSH upgrade inherits permission. A missing file means no exemptions. A malformed one never stops the profile from starting: records the reader accepts still apply, each rejected record is reported on stderr beside the plugin denials, and the file is then treated as read-only, so a grant or revocation refuses and asks the user to repair it by hand instead of overwriting their content. [Plugin Manager](../plugin-manager/README.md#version-compatibility-and-exemptions) owns the grant, revocation, and risk confirmation each change requires.
 
@@ -194,7 +194,6 @@ Boot itself changes no request prefix. `addHarnessSourceSection` places its sour
 
 <a id="known-limitations-and-deferred-work"></a>
 
-
 These limits describe when this boot library is a poor fit or needs special care. They are current package constraints, not a task backlog.
 
 - **Runtime resolution depends on Node internals** — supported Node versions require the native builtin-access addon and executable compatibility coverage. Only built Harness-owned Workers receive the runtime resolution bootstrap; third-party Workers and custom `vm` linkers keep native resolution.

package/README.zh.md

@@ -47,11 +47,11 @@ const ctx = await boot('dsh', resolveConfigPath(argv[2], process.env.DSH_SNAPSHO
 
 Profile 与组合包的声明类型从 [`@deepseek-ai/dsh-package-manifest`](../../util/package-manifest/README.zh.md) 导入。App-boot 将 `DshPackageManifest` 适配为包身份可选的 `ProfileManifest`，因为本地 profile 无需发布版本。App-boot 负责 profile 加载、JSON 校验和解析后的运行时数据。
 
-profile 是同一套 dsh 安装提供不同应用界面的方式：`web`、`headless`、`acp`、`sdk` 与 `sdk-minimal` 从同一 launcher 启动不同组合。profile 位于 `$DSH_HOME/profiles/<name>`，由可安装组合包和自身 `cordis.patch.yml` 组成。组合包的 `dsh.bundle.patch` 指定一个 patch 文件或一个有序的文件列表；`bundlePatchFiles` 校验该声明，`bundlePatchPaths` 把它解析为绝对路径；该层按此顺序拼接各文件的 patch 列表。YAML 组合决定是否启用 HMR。随产品交付的 `web` 模板实时重载，其他随附模板只在启动时应用 patch。`sdk-minimal` 只列出自身的独立组合包，其他模板保留 base 加模式的组合包栈。`dsh --profile <name> --from-default-profile <template>` 从一个随附模板，在新的非内置名称处创建自定义 profile；`dsh plugin` 则初始化以 base 为基础的 profile，并管理其中安装的组合包。组合包解析、manifest 读取或 patch 加载失败时会输出诊断并跳过该组合包，不改变其选择状态。其余组合包保持原顺序；profile 和用户 patch 错误仍会导致启动失败。跳过组合包不保证剩余组合能够提供所需服务。由应用持有的 npm 项目（例如 Electron 保留的 Desktop profile）通过 `loadProfileDirectory` 加载已经初始化的目录，而不会将它暴露给 CLI profile 查找。
+profile 是同一套 dsh 安装提供不同应用界面的方式：`web`、`headless`、`acp`、`sdk` 与 `sdk-minimal` 从同一 launcher 启动不同组合。profile 位于 `$DSH_HOME/profiles/<name>`，由可安装组合包和自身 `cordis.patch.yml` 组成。组合包的 `dsh.bundle.patch` 指定一个 patch 文件或一个有序的文件列表；`bundlePatchFiles` 校验该声明，`bundlePatchPaths` 把它解析为绝对路径；该层按此顺序拼接各文件的 patch 列表。YAML 组合决定是否启用 HMR。随产品交付的 `web` 模板实时重载，其他随附模板只在启动时应用 patch。`sdk-minimal` 只列出自身的独立组合包，其他模板保留 base 加模式的组合包栈。`dsh --profile <name> --from-default-profile <template>` 从一个随附模板，在新的非内置名称处创建自定义 profile；`dsh plugin` 则初始化以 base 为基础的 profile，并管理其中安装的组合包。组合包解析、manifest 读取或 patch 加载失败时会跳过该组合包，不改变其选择状态；加载结果在 `skippedBundles` 中列出每个被跳过的组合包，启动器每次启动时通过 `reportSkippedBundles` 输出一次。其余组合包保持原顺序；profile 和用户 patch 错误仍会导致启动失败。跳过组合包不保证剩余组合能够提供所需服务。由应用持有的 npm 项目（例如 Electron 保留的 Desktop profile）通过 `loadProfileDirectory` 加载已经初始化的目录，而不会将它暴露给 CLI profile 查找。
 
 profile 导入插件前，DSH 会检查其 `peerDependencies` 中对 `@deepseek-ai/dsh` 和 `@deepseek-ai/dsh-*` 的依赖，与 `getDshRuntimeVersion()` 返回的唯一运行时版本比较。每个声明的版本范围都必须匹配；预发布版本参与范围匹配。源码工作区的 `workspace:^`、`workspace:~` 和 `workspace:*` 指向同一个运行时。未声明 DSH peer 时不施加版本约束；无效范围视为不兼容。这些检查使用 peer 声明，而不是 `engines.dsh`，也不是防范恶意包代码的沙箱。
 
-检查只发生在 DSH 自己持有的组合入口，改写的是启动器自己的那份组合：profile 的 patch 层、依赖清单与组合包列表都不会改变。`prepareProfilePatches` 在启动器的空 profile 根之上组合，并在挂载根 Include 时以及每次 profile 重新组合时执行，因此被拒绝的插件永远不会导入其模块；`prepareProfileEntries` 对 preset 行做同样的事。被拒绝的普通行会变成游离的 `disabled: true` 行；原生 group 保持挂载，其被拒绝的子行不会加载；若某个原生 Include 会到达被拒绝的插件，则整体省略该 Include，因为它的文件不会被改写。被策略拒绝的行在 profile 中保留其配置的 `disabled` 值，每次拒绝都会报告包名、版本与风险。组合包本身不是行，因此 `loadProfileDirectory` 在启动和每次重新组合加载 profile 的组合包层时，检查每个组合包自己声明的 DSH peer；没有豁免的不兼容组合包会像无法读取的组合包一样被跳过。这些入口不覆盖其他嵌入方通过自己的 `ctx.plugin` 调用挂载的插件。会话中直接改文件的两类编辑只在下一次重新组合或启动时才被判定：正在运行的插件自己的 `package.json` peer 声明，以及 Loader 自己读取的入口清单文件（如启动器的根配置或嵌套的 `cordis:include` 文件）。`--dump-config` 报告的是配置出的组合，因此被拒绝的插件行仍会出现在其中，而被拒绝的组合包不提供任何行；`--dump-config-schema` 会导入每个组合模块以读取其 schema，请只对已经信任其插件的 profile 运行。
+检查只发生在 DSH 自己持有的组合入口，改写的是启动器自己的那份组合：profile 的 patch 层、依赖清单与组合包列表都不会改变。`prepareProfilePatches` 在启动器的空 profile 根之上组合，并在挂载根 Include 时以及每次 profile 重新组合时执行，因此被拒绝的插件永远不会导入其模块；`prepareProfileEntries` 对 preset 行做同样的事。被拒绝的普通行会变成游离的 `disabled: true` 行；原生 group 保持挂载，其被拒绝的子行不会加载；若某个原生 Include 会到达被拒绝的插件，则整体省略该 Include，因为它的文件不会被改写。被策略拒绝的行在 profile 中保留其配置的 `disabled` 值，每次拒绝都会报告包名、版本与风险。组合包本身不是行，因此 `loadProfileDirectory` 在启动和每次重新组合加载 profile 的组合包层时，检查每个组合包自己声明的 DSH peer；没有豁免的不兼容组合包会像无法读取的组合包一样被跳过，并列入 `skippedBundles`。这些入口不覆盖其他嵌入方通过自己的 `ctx.plugin` 调用挂载的插件。会话中直接改文件的两类编辑只在下一次重新组合或启动时才被判定：正在运行的插件自己的 `package.json` peer 声明，以及 Loader 自己读取的入口清单文件（如启动器的根配置或嵌套的 `cordis:include` 文件）。`--dump-config` 报告的是配置出的组合，因此被拒绝的插件行仍会出现在其中，而被拒绝的组合包不提供任何行；`--dump-config-schema` 会导入每个组合模块以读取其 schema，请只对已经信任其插件的 profile 运行。
 
 精确版本豁免保存在 profile 自己的 `compatibility.json` 中，而不是 `package.json`，因此写豁免不会触及依赖清单、组合包列表或 Cordis patch 文件。它把精确的 `package-name@version` 键映射到精确 DSH 运行时版本列表；插件升级和 DSH 升级都不继承授权。文件缺失表示没有豁免。文件损坏绝不会阻止 profile 启动：读取器接受的记录仍然生效，每条被拒绝的记录会与插件拒绝信息一起输出到 stderr，此后该文件被视为只读，因此授予或撤销会拒绝执行并要求用户手工修复，而不是覆盖用户的内容。[插件管理器](../plugin-manager/README.zh.md#version-compatibility-and-exemptions)负责每次变更所需的授权、撤销与风险确认。
 
@@ -194,7 +194,6 @@ Loader 结算后，app-boot 在仅 optional 条目未激活时输出警告。如
 
 <a id="known-limitations-and-deferred-work"></a>
 
-
 这些限制说明此启动库在何时不合适，或何时需要特别注意。它们是当前包约束，不是任务积压。
 
 - **运行时解析依赖 Node 内部机制**——受支持的 Node 版本需要 native builtin access addon 和可执行兼容验证。只有构建后的 Harness 自有 Worker 接收 runtime resolution bootstrap；第三方 Worker 与自定义 `vm` linker 保持原生解析。

package/lib/index.js

@@ -508,6 +508,14 @@ function bundlePatchPaths(packageDir, bundle) {
 	return bundlePatchFiles(bundle).map((file) => join(packageDir, file));
 }
 /**
+* Print each skipped bundle once; loading never prints, so launchers call this once per start.
+* @param binName - the diagnostic prefix.
+* @param profile - the loaded profile.
+*/
+function reportSkippedBundles(binName, profile) {
+	for (const { packageName, reason } of profile.skippedBundles) process.stderr.write(`${binName}: skipping profile bundle ${JSON.stringify(packageName)}: ${reason}\n`);
+}
+/**
 * Resolve a profile's directory under the Harness home.
 * @param name - the profile name (`dsh --profile <name>`).
 * @param home - the Harness home; defaults to {@link resolveDshHome}.
@@ -536,10 +544,17 @@ const DEFAULT_PROFILE_BUNDLES = ["@deepseek-ai/dsh-base"];
 /**
 * The bundles the dsh installation ships for a person to switch on: each a
 * runtime dependency of the installation that declares `dsh.bundle.patch`,
-* selected by no shipped template, and offered switched off by the plugin
-* manager ([rationale](../../../../.agents/notes/implemented/process/2026-09-15-shipped-optional-bundles.md)).
+* an `icon`, and `./locale/*.json` display metadata, selected by no shipped
+* template, and offered switched off by the plugin manager
+* ([rationale](../../../../.agents/notes/implemented/process/2026-09-15-shipped-optional-bundles.md),
+* [admission](../../../../.agents/notes/implemented/architecture/2026-09-21-experimental-capabilities-as-optional-bundles.md)).
 */
-const OPTIONAL_BUNDLES = ["@deepseek-ai/dsh-experimental-voice-input-bundle", "@deepseek-ai/dsh-experimental-agent-team-profile"];
+const OPTIONAL_BUNDLES = [
+	"@deepseek-ai/dsh-experimental-agent-team-profile",
+	"@deepseek-ai/dsh-experimental-voice-input-bundle",
+	"@deepseek-ai/dsh-experimental-auto-review",
+	"@deepseek-ai/dsh-experimental-schedule-bundle"
+];
 const PROFILE_PATCH_TEMPLATE = `# Your patch layer for this dsh profile, applied after every bundle layer:
 # a top-level YAML array of loader patch entries (id-targeted config
 # overrides, disables, and insert lists; \`!!js\` expressions allowed).
@@ -717,7 +732,7 @@ async function createRuntimeResolution(options) {
 	const { installAnchor, profile, home = resolveDshHome() } = options;
 	const profilesDir = join(home, PROFILES_DIR);
 	const manifest = readOptionalProfileManifest(profile);
-	const { packageNames, packageDirs, declarers, versions } = collectInstallationScopePackages(installAnchor, skippedProfileBundles(profile, manifest));
+	const { packageNames, packageDirs, declarers, versions } = collectInstallationScopePackages(installAnchor, new Set(profile?.skippedBundles.map((skipped) => skipped.packageName)));
 	const profileDeclarers = /* @__PURE__ */ new Map();
 	const profileVersions = /* @__PURE__ */ new Map();
 	const localPackageNames = profile === void 0 ? [] : installedProfilePackageNames(profile, manifest);
@@ -753,17 +768,6 @@ function readOptionalProfileManifest(profile) {
 		throw error;
 	}
 }
-/**
-* Identify selected bundles that did not produce a loaded layer.
-* @param profile - loaded profile, when present.
-* @param manifest - its parsed manifest, when present.
-* @returns selected bundle names missing from the loaded layers, for resolution and diagnostics.
-*/
-function skippedProfileBundles(profile, manifest) {
-	const selected = manifest?.dsh?.profile?.bundles ?? [];
-	const loaded = new Set(profile?.layers.map((layer) => layer.packageName));
-	return new Set(selected.filter((name) => !loaded.has(name)));
-}
 /** Return installed direct dependencies that Node resolves before profile fallback. */
 function installedProfilePackageNames(profile, manifest) {
 	if (manifest === void 0) return [];
@@ -905,8 +909,8 @@ function resolveBundleDir(binName, packageName, installAnchor, profileDir) {
 * Load an already initialized profile directory without resolving it through
 * the shared Harness home. This is used by application-owned profiles whose
 * package project and lifecycle belong to that application.
-* Unreadable bundles, and bundles whose own dsh peers the profile does not exempt, are reported
-* on stderr and skipped without changing the manifest.
+* Unreadable bundles, and bundles whose own dsh peers the profile does not exempt, are skipped
+* without changing the manifest and listed in `skippedBundles`; nothing is printed.
 * @param binName - the diagnostic prefix on thrown errors.
 * @param dir - absolute profile package directory.
 * @param installAnchor - absolute path of the owning dsh app's package.json.
@@ -916,6 +920,7 @@ function resolveBundleDir(binName, packageName, installAnchor, profileDir) {
 function loadProfileDirectory(binName, dir, installAnchor, options = {}) {
 	const bundles = readProfileManifest(binName, dir).dsh?.profile?.bundles ?? [];
 	const layers = [];
+	const skippedBundles = [];
 	const exemptions = bundles.length === 0 ? {} : readProfileVersionExemptions(dir);
 	for (const packageName of bundles) try {
 		const packageDir = resolveBundleDir(binName, packageName, installAnchor, dir);
@@ -933,7 +938,10 @@ function loadProfileDirectory(binName, dir, installAnchor, options = {}) {
 			patches
 		});
 	} catch (error) {
-		process.stderr.write(`${binName}: skipping profile bundle ${JSON.stringify(packageName)}: ${String(error)}\n`);
+		skippedBundles.push({
+			packageName,
+			reason: String(error)
+		});
 	}
 	const patchPath = join(dir, PROFILE_PATCH_FILENAME);
 	const patches = options.userLayer !== false && existsSync(patchPath) ? loadOverlayPatches(binName, patchPath) : [];
@@ -942,13 +950,14 @@ function loadProfileDirectory(binName, dir, installAnchor, options = {}) {
 		dir,
 		layers,
 		patchPath,
-		patches
+		patches,
+		skippedBundles
 	};
 }
 /**
 * Load a profile: resolve every `dsh.profile.bundles` entry to its patch
 * layer and parse the profile's own patch file. Unreadable or incompatible bundles
-* are reported on stderr and skipped; profile manifest and user patch errors still throw.
+* are skipped and listed in `skippedBundles`; profile manifest and user patch errors still throw.
 * @param binName - the diagnostic prefix on thrown errors.
 * @param name - the profile name.
 * @param installAnchor - absolute path of the dsh app's package.json (first resolution anchor).
@@ -1583,17 +1592,27 @@ function internalModules() {
 		modern
 	};
 }
+/**
+* Replace a resolver error's message and the same text in its stack.
+* Node's module-hooks thread serializes errors and returns the stack accessor as a read-only configurable
+* data property, so a rejected stack assignment redefines the property value.
+* @param error - resolver error to update in place.
+* @param message - replacement message.
+*/
+function replaceErrorMessage(error, message) {
+	const { message: originalMessage, stack } = error;
+	error.message = message;
+	/* v8 ignore next -- Node's resolver errors always carry a stack */
+	if (stack === void 0) return;
+	const replaced = stack.replace(originalMessage, message);
+	if (!Reflect.set(error, "stack", replaced)) Object.defineProperty(error, "stack", { value: replaced });
+}
 function throwWithImporter(error, routedParent, parent) {
 	const code = error.code;
 	if (error instanceof Error && (code === "ERR_MODULE_NOT_FOUND" || code === "ERR_PACKAGE_PATH_NOT_EXPORTED")) {
 		const routedPath = fileURLToPath(routedParent);
 		const parentPath = fileURLToPath(parent);
-		const originalMessage = error.message;
-		const message = originalMessage.replaceAll(routedParent, parent).replaceAll(routedPath, parentPath);
-		const stack = error.stack;
-		error.message = message;
-		/* v8 ignore next -- Node's resolver errors always carry a stack */
-		if (stack !== void 0) error.stack = stack.replace(originalMessage, message);
+		replaceErrorMessage(error, error.message.replaceAll(routedParent, parent).replaceAll(routedPath, parentPath));
 	}
 	throw error;
 }
@@ -3144,21 +3163,19 @@ async function collectConfigSchemas(profile, entries, resolution, diagnostics =
 /** Profile schema generation: composition diagnostics, runtime resolution, and boot-free discovery. */
 /**
 * Generate JSON Schema for a prepared profile's ordered patch layers without mounting plugins or evaluating expressions.
-* Reads the profile manifest; imports, Config getters, and lazy builders execute trusted code. Native validators and
+* Imports, Config getters, and lazy builders execute trusted code. Native validators and
 * transform callbacks are not executed. Calls must not overlap another profile-resolution interception; collection
 * releases its interception on success or rejection, while Node retains imported modules. Supplied layers are not mutated.
 * Profile preparation, layer selection, process streams, and exit policy belong to the caller.
-* @param binName - the diagnostic prefix on thrown manifest errors.
 * @param profile - prepared on-disk profile whose directory anchors root module and include resolution.
 * @param layers - already parsed patch lists in application order, including caller-selected home and argv overlays.
 * @param installAnchor - package manifest anchoring the installation's runtime dependencies.
 * @returns a JSON Schema document with declaration references, partial results, and diagnostics under `x-cordis`.
-* @throws when profile metadata, composition, or runtime resolution cannot be prepared.
+* @throws when composition or runtime resolution cannot be prepared.
 */
-async function generateConfigSchema(binName, profile, layers, installAnchor) {
+async function generateConfigSchema(profile, layers, installAnchor) {
 	const diagnostics = [];
-	const manifest = readProfileManifest(binName, profile.dir);
-	for (const packageName of skippedProfileBundles(profile, manifest)) diagnostics.push({
+	for (const { packageName } of profile.skippedBundles) diagnostics.push({
 		level: "error",
 		message: `Selected profile bundle ${JSON.stringify(packageName)} could not be loaded; repair or remove its bundle selection.`
 	});
@@ -4117,4 +4134,4 @@ function addHarnessSourceSection(ctx, sourceRoot) {
 	});
 }
 //#endregion
-export { DEFAULT_PROFILE_BUNDLES, FAIL_LOUD_RELEASE_TIMEOUT_MS, HARNESS_SOURCE_SECTION, LOADER_EXPRESSION_SCHEMA, OPTIONAL_BUNDLES, PROFILES_DIR, PROFILE_COMPATIBILITY_FILENAME, PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, PluginPackages, StartupError, addHarnessSourceSection, auditStartupEntries, boot, bundlePatchFiles, bundlePatchPaths, composeEntries, createConfigProjector, createRuntimeResolution, evaluatePluginCompatibility, generateConfigSchema, getDshRuntimeVersion, initProfile, installFailLoud, isNativeConfigSchema, loadEnv, loadLayeredEnv, loadOptionalPatches, loadOverlayPatches, loadProfile, loadProfileDirectory, mountRootInclude, pluginCompatibilityWarning, prepareProfileEntries, prepareProfilePatches, readPluginMeta, readProfileCompatibility, readProfileManifest, readProfilePatches, readProfilePlugins, readProfileVersionExemptions, reconcileProfilePatches, reconcileProfilePlugins, removeLinkProjections, renderConfigDump, resolveBundleDir, resolveConfigPath, resolveProfileDir, resolveTelemetryPatch, sanitizeProfile, setProfileVersionExemption, writeProfileBundles, writeProfileManifest };
+export { DEFAULT_PROFILE_BUNDLES, FAIL_LOUD_RELEASE_TIMEOUT_MS, HARNESS_SOURCE_SECTION, LOADER_EXPRESSION_SCHEMA, OPTIONAL_BUNDLES, PROFILES_DIR, PROFILE_COMPATIBILITY_FILENAME, PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, PluginPackages, StartupError, addHarnessSourceSection, auditStartupEntries, boot, bundlePatchFiles, bundlePatchPaths, composeEntries, createConfigProjector, createRuntimeResolution, evaluatePluginCompatibility, generateConfigSchema, getDshRuntimeVersion, initProfile, installFailLoud, isNativeConfigSchema, loadEnv, loadLayeredEnv, loadOptionalPatches, loadOverlayPatches, loadProfile, loadProfileDirectory, mountRootInclude, pluginCompatibilityWarning, prepareProfileEntries, prepareProfilePatches, readPluginMeta, readProfileCompatibility, readProfileManifest, readProfilePatches, readProfilePlugins, readProfileVersionExemptions, reconcileProfilePatches, reconcileProfilePlugins, removeLinkProjections, renderConfigDump, reportSkippedBundles, resolveBundleDir, resolveConfigPath, resolveProfileDir, resolveTelemetryPatch, sanitizeProfile, setProfileVersionExemption, writeProfileBundles, writeProfileManifest };

package/lib/types/config-schema/index.d.ts

@@ -5,16 +5,15 @@ import type { ConfigSchemaDump } from './types.ts';
 export type { ConfigSchemaDump, NativeConfigSchema } from './types.ts';
 /**
  * Generate JSON Schema for a prepared profile's ordered patch layers without mounting plugins or evaluating expressions.
- * Reads the profile manifest; imports, Config getters, and lazy builders execute trusted code. Native validators and
+ * Imports, Config getters, and lazy builders execute trusted code. Native validators and
  * transform callbacks are not executed. Calls must not overlap another profile-resolution interception; collection
  * releases its interception on success or rejection, while Node retains imported modules. Supplied layers are not mutated.
  * Profile preparation, layer selection, process streams, and exit policy belong to the caller.
- * @param binName - the diagnostic prefix on thrown manifest errors.
  * @param profile - prepared on-disk profile whose directory anchors root module and include resolution.
  * @param layers - already parsed patch lists in application order, including caller-selected home and argv overlays.
  * @param installAnchor - package manifest anchoring the installation's runtime dependencies.
  * @returns a JSON Schema document with declaration references, partial results, and diagnostics under `x-cordis`.
- * @throws when profile metadata, composition, or runtime resolution cannot be prepared.
+ * @throws when composition or runtime resolution cannot be prepared.
  */
-export declare function generateConfigSchema(binName: string, profile: Profile, layers: readonly PatchOptions[][], installAnchor: string): Promise<ConfigSchemaDump>;
+export declare function generateConfigSchema(profile: Profile, layers: readonly PatchOptions[][], installAnchor: string): Promise<ConfigSchemaDump>;
 //# sourceMappingURL=index.d.ts.map

package/lib/types/index.d.ts

@@ -34,7 +34,7 @@ declare module '@deepseek-ai/cordis' {
         'app-boot/config-reload'(): void;
     }
 }
-export { composeEntries, createRuntimeResolution, DEFAULT_PROFILE_BUNDLES, OPTIONAL_BUNDLES, bundlePatchFiles, bundlePatchPaths, initProfile, removeLinkProjections, loadProfile, loadProfileDirectory, PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, PROFILES_DIR, readProfileManifest, resolveBundleDir, resolveProfileDir, writeProfileManifest, type Profile, type ProfileLayer, type ProfileManifest, type LinkedRoot, type RuntimeResolutionOptions, type RuntimeResolutionEntry, type RuntimeResolution, type ProfileTemplate, } from './profile.ts';
+export { composeEntries, createRuntimeResolution, DEFAULT_PROFILE_BUNDLES, OPTIONAL_BUNDLES, bundlePatchFiles, bundlePatchPaths, initProfile, removeLinkProjections, loadProfile, loadProfileDirectory, PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, PROFILES_DIR, readProfileManifest, reportSkippedBundles, resolveBundleDir, resolveProfileDir, writeProfileManifest, type Profile, type ProfileLayer, type SkippedBundle, type ProfileManifest, type LinkedRoot, type RuntimeResolutionOptions, type RuntimeResolutionEntry, type RuntimeResolution, type ProfileTemplate, } from './profile.ts';
 export { PluginPackages, type PluginPackage, type PluginPackagesConfig, } from './profile-resolution/service.ts';
 /**
  * Resolve the config to boot. Replay swaps a `cordis.yml` basename for

package/lib/types/profile.d.ts

@@ -73,7 +73,22 @@ export interface Profile {
     patchPath: string;
     /** The profile's own patches; empty when the file is absent. */
     patches: PatchOptions[];
+    /** Selected bundles that contributed no layer, in `dsh.profile.bundles` order, with why. */
+    skippedBundles: SkippedBundle[];
 }
+/** A selected bundle the profile could not load, or whose own DSH peers the profile does not exempt. */
+export interface SkippedBundle {
+    /** The bundle's package name from `dsh.profile.bundles`. */
+    packageName: string;
+    /** The resolution, manifest, compatibility, or patch-loading failure. */
+    reason: string;
+}
+/**
+ * Print each skipped bundle once; loading never prints, so launchers call this once per start.
+ * @param binName - the diagnostic prefix.
+ * @param profile - the loaded profile.
+ */
+export declare function reportSkippedBundles(binName: string, profile: Pick<Profile, 'skippedBundles'>): void;
 /** One package the runtime resolution supplies at the interception layer. */
 export interface RuntimeResolutionEntry {
     /** Bare package name. */
@@ -124,8 +139,10 @@ export declare const DEFAULT_PROFILE_BUNDLES: readonly string[];
 /**
  * The bundles the dsh installation ships for a person to switch on: each a
  * runtime dependency of the installation that declares `dsh.bundle.patch`,
- * selected by no shipped template, and offered switched off by the plugin
- * manager ([rationale](../../../../.agents/notes/implemented/process/2026-09-15-shipped-optional-bundles.md)).
+ * an `icon`, and `./locale/*.json` display metadata, selected by no shipped
+ * template, and offered switched off by the plugin manager
+ * ([rationale](../../../../.agents/notes/implemented/process/2026-09-15-shipped-optional-bundles.md),
+ * [admission](../../../../.agents/notes/implemented/architecture/2026-09-21-experimental-capabilities-as-optional-bundles.md)).
  */
 export declare const OPTIONAL_BUNDLES: readonly string[];
 /**
@@ -159,13 +176,6 @@ export interface RuntimeResolutionOptions {
  * @returns the complete immutable runtime resolution.
  */
 export declare function createRuntimeResolution(options: RuntimeResolutionOptions): Promise<RuntimeResolution>;
-/**
- * Identify selected bundles that did not produce a loaded layer.
- * @param profile - loaded profile, when present.
- * @param manifest - its parsed manifest, when present.
- * @returns selected bundle names missing from the loaded layers, for resolution and diagnostics.
- */
-export declare function skippedProfileBundles(profile: Profile | undefined, manifest: ProfileManifest | undefined): ReadonlySet<string>;
 /**
  * Read a profile's manifest.
  * @param binName - the diagnostic prefix on the thrown error.
@@ -196,8 +206,8 @@ export declare function resolveBundleDir(binName: string, packageName: string, i
  * Load an already initialized profile directory without resolving it through
  * the shared Harness home. This is used by application-owned profiles whose
  * package project and lifecycle belong to that application.
- * Unreadable bundles, and bundles whose own dsh peers the profile does not exempt, are reported
- * on stderr and skipped without changing the manifest.
+ * Unreadable bundles, and bundles whose own dsh peers the profile does not exempt, are skipped
+ * without changing the manifest and listed in `skippedBundles`; nothing is printed.
  * @param binName - the diagnostic prefix on thrown errors.
  * @param dir - absolute profile package directory.
  * @param installAnchor - absolute path of the owning dsh app's package.json.
@@ -210,7 +220,7 @@ export declare function loadProfileDirectory(binName: string, dir: string, insta
 /**
  * Load a profile: resolve every `dsh.profile.bundles` entry to its patch
  * layer and parse the profile's own patch file. Unreadable or incompatible bundles
- * are reported on stderr and skipped; profile manifest and user patch errors still throw.
+ * are skipped and listed in `skippedBundles`; profile manifest and user patch errors still throw.
  * @param binName - the diagnostic prefix on thrown errors.
  * @param name - the profile name.
  * @param installAnchor - absolute path of the dsh app's package.json (first resolution anchor).

package/lib/worker/profile-resolution-bootstrap.js

@@ -479,17 +479,27 @@ function internalModules() {
 		modern
 	};
 }
+/**
+* Replace a resolver error's message and the same text in its stack.
+* Node's module-hooks thread serializes errors and returns the stack accessor as a read-only configurable
+* data property, so a rejected stack assignment redefines the property value.
+* @param error - resolver error to update in place.
+* @param message - replacement message.
+*/
+function replaceErrorMessage(error, message) {
+	const { message: originalMessage, stack } = error;
+	error.message = message;
+	/* v8 ignore next -- Node's resolver errors always carry a stack */
+	if (stack === void 0) return;
+	const replaced = stack.replace(originalMessage, message);
+	if (!Reflect.set(error, "stack", replaced)) Object.defineProperty(error, "stack", { value: replaced });
+}
 function throwWithImporter(error, routedParent, parent) {
 	const code = error.code;
 	if (error instanceof Error && (code === "ERR_MODULE_NOT_FOUND" || code === "ERR_PACKAGE_PATH_NOT_EXPORTED")) {
 		const routedPath = fileURLToPath(routedParent);
 		const parentPath = fileURLToPath(parent);
-		const originalMessage = error.message;
-		const message = originalMessage.replaceAll(routedParent, parent).replaceAll(routedPath, parentPath);
-		const stack = error.stack;
-		error.message = message;
-		/* v8 ignore next -- Node's resolver errors always carry a stack */
-		if (stack !== void 0) error.stack = stack.replace(originalMessage, message);
+		replaceErrorMessage(error, error.message.replaceAll(routedParent, parent).replaceAll(routedPath, parentPath));
 	}
 	throw error;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-app-boot",
   "description": "Shared boot glue for the app bins: .env loading, fail-loud Loader guards, snapshot-aware config resolution, and the Loader boot sequence",
-  "version": "0.1.7-rc.1",
+  "version": "0.2.0-rc.1",
   "publishConfig": {
     "access": "public"
   },
@@ -38,29 +38,29 @@
     "node-addon-require-builtin": "^0.1.6",
     "resolve.exports": "^2.0.3",
     "semver": "^7.8.5",
-    "@deepseek-ai/dsh-atomic-write": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-package-manifest": "0.1.7-rc.1"
+    "@deepseek-ai/dsh-atomic-write": "0.2.0-rc.1",
+    "@deepseek-ai/dsh-package-manifest": "0.2.0-rc.1"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis-plugin-include": "~1.0.9",
+    "@deepseek-ai/cordis-plugin-group": "~1.0.4",
     "@deepseek-ai/cordis-plugin-loader": "~1.0.5",
-    "@deepseek-ai/dsh-launch-environment": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-home-paths": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-home-paths": "0.2.0-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.1",
     "@deepseek-ai/cordis": "~4.0.4",
-    "@deepseek-ai/cordis-plugin-group": "~1.0.4"
+    "@deepseek-ai/dsh-launch-environment": "0.2.0-rc.1"
   },
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",
     "@types/semver": "^7.8.0",
     "@deepseek-ai/schemastery": "~3.18.4",
     "@deepseek-ai/cordis-plugin-group": "~1.0.4",
+    "@deepseek-ai/cordis-plugin-include": "~1.0.9",
     "@deepseek-ai/cordis-plugin-loader": "~1.0.5",
     "@deepseek-ai/cordis-plugin-timer": "~1.1.6",
-    "@deepseek-ai/dsh-launch-environment": "0.1.7-rc.1",
-    "@deepseek-ai/cordis-plugin-include": "~1.0.9",
-    "@deepseek-ai/dsh-home-paths": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "0.1.7-rc.1",
-    "@deepseek-ai/cordis": "~4.0.4"
+    "@deepseek-ai/dsh-launch-environment": "0.2.0-rc.1",
+    "@deepseek-ai/dsh-home-paths": "0.2.0-rc.1",
+    "@deepseek-ai/cordis": "~4.0.4",
+    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.1"
   }
 }