@deepseek-ai/dsh-app-boot 0.2.1-alpha.1 → 0.2.1-alpha.2

package/README.i18n.yaml

@@ -21,8 +21,8 @@
   en: 2fdfe02f2ed4a258
   zh: d748228ece579c4a
 /deepseek-ai-dsh-app-boot/use-this-package/starting-the-app:
-  en: 1099528bde0e2aee
-  zh: b68772bdb9bb7856
+  en: 4a424cd401556f20
+  zh: 0b34dd18e0db6cea
 /deepseek-ai-dsh-app-boot/use-this-package/profiles:
   en: d50b0fdaf62353dd
   zh: 0fccb6968602e5de
@@ -33,8 +33,8 @@
   en: c4a301652b851ce9
   zh: 784871e19cd9db0a
 /deepseek-ai-dsh-app-boot/use-this-package/reading-plugin-display-metadata:
-  en: 98ef2935171952c0
-  zh: 8c160bdeffd68b0f
+  en: a9afb263b03d112c
+  zh: 31f5e797cd953c15
 /deepseek-ai-dsh-app-boot/use-this-package/startup-and-reload-failures:
   en: 09890e218ab49c84
   zh: e3d86597e7fb1adb

package/README.md

@@ -40,7 +40,7 @@ installFailLoud('dsh')
 const ctx = await boot('dsh', resolveConfigPath(argv[2], process.env.DSH_SNAPSHOT))
 ```
 
-`installFailLoud` writes one labelled `util.inspect` diagnostic to stderr for an unhandled rejection or an uncaught exception, awaits the surface's release hook under a fixed timeout, and exits 1; control never returns to the failed operation, because only the throw site knows which state is intact, and the event loop runs only until the release settles or times out. With that entry point, startup keeps every plugin that can activate. An enabled failed plugin produces a labelled warning. A failed required entry makes startup dispose the whole app and exit nonzero; required ids absent from a profile and disabled required entries do not affect startup. The global required list covers shared Agent execution, application endpoints, and Web bootstrap/transport: `agent-loop`, `webserver`, `modules`, `connection`, `headless-runner`, `acp`, and `sdk-jsonrpc-server`.
+`installFailLoud` writes one labelled `util.inspect` diagnostic to stderr for an unhandled rejection or an uncaught exception, awaits the surface's release hook under a fixed timeout, and exits 1; control never returns to the failed operation, because only the throw site knows which state is intact, and the event loop runs only until the release settles or times out. With that entry point, startup keeps every plugin that can activate. An enabled failed plugin produces a labelled warning. A failed required entry makes startup dispose the whole app and exit nonzero; required ids absent from a profile and disabled required entries do not affect startup. The global required list covers shared Agent execution, application endpoints, and Web bootstrap/transport: `agent-loop`, `webserver`, `web-runtime`, `modules`, `connection`, `headless-runner`, `acp`, and `sdk-jsonrpc-server`.
 
 <a id="profiles"></a>
 ### Profiles
@@ -82,8 +82,12 @@ The projector preserves native omission behavior by checking literal defaults ag
 
 ### Reading plugin display metadata
 
+`resolvePluginResource(specifier, parentURL)` resolves a plugin module or exported resource to its local filesystem path through the active Node ESM resolver without evaluating it. It throws when the resolver is unavailable or the resource cannot resolve to a local file.
+
 Use `readPluginMeta(specifier, parentURL)` or `ctx.pluginPackages.metaOf(specifier, parentURL)` to read installed package display text without importing or activating the plugin. Lookup uses the complete package specifier and the caller's resolution base, respecting Node exports. File paths and file URLs return no metadata without resolving resources. For a package-root specifier, missing locale fields fall back to the accessible `package.json`; a subpath specifier never reads a `package.json`. Malformed metadata returns an `error` diagnostic. Results retain translations for Client-side language selection. The reader also loads an image data URL, even when locale text is complete: a package root uses its manifest `icon`, or `<package>/icon` when that field is omitted; a subpath uses `<specifier>/icon`. An icon error preserves valid text alongside the diagnostic. See [Plugin display metadata](../../../docs/cookbook/adding-a-package.md#plugin-display-metadata) for the author format.
 
+`ON_DEMAND_BUNDLES` names the public Official packages installed only on request. `OFFICIAL_ON_DEMAND_CATALOG` embeds their package-owned localized metadata and icons for offline discovery; `pnpm gen-official-bundle-catalog` explicitly updates generated content, and `verify-official-bundle-catalog` checks resource completeness and freshness; builds consume the committed catalog without importing provider code. The catalog contains no install target: [Plugin Manager](../plugin-manager/README.md#use-this-package) derives it from the running version and installation and uses the ordinary bundle installer. The [product-use check](../../../scripts/verify-product-use.ts) composes shipped and on-demand selections against Web without executing providers.
+
 <a id="startup-and-reload-failures"></a>
 ### Startup and reload failures
 

package/README.zh.md

@@ -40,7 +40,7 @@ installFailLoud('dsh')
 const ctx = await boot('dsh', resolveConfigPath(argv[2], process.env.DSH_SNAPSHOT))
 ```
 
-`installFailLoud` 会为未处理 rejection 或未捕获异常向 stderr 写一条带标签的 `util.inspect` 诊断，在固定超时内等待界面的 release 钩子，然后以 1 退出；控制流不会回到失败的操作，因为只有抛出点知道哪些状态仍然完整，事件循环只运行到 release 结束或超时。有了这个入口，启动会保留所有能够激活的插件。启用但失败的插件会产生带标签的警告。required entry 失败时，启动会拆卸整个应用并以非零码退出；profile 中不存在的 required id 和已禁用的 required entry 不影响启动。全局 required list 覆盖共享 Agent 执行、应用 endpoint，以及 Web 启动与传输：`agent-loop`、`webserver`、`modules`、`connection`、`headless-runner`、`acp` 和 `sdk-jsonrpc-server`。
+`installFailLoud` 会为未处理 rejection 或未捕获异常向 stderr 写一条带标签的 `util.inspect` 诊断，在固定超时内等待界面的 release 钩子，然后以 1 退出；控制流不会回到失败的操作，因为只有抛出点知道哪些状态仍然完整，事件循环只运行到 release 结束或超时。有了这个入口，启动会保留所有能够激活的插件。启用但失败的插件会产生带标签的警告。required entry 失败时，启动会拆卸整个应用并以非零码退出；profile 中不存在的 required id 和已禁用的 required entry 不影响启动。全局 required list 覆盖共享 Agent 执行、应用 endpoint，以及 Web 启动与传输：`agent-loop`、`webserver`、`web-runtime`、`modules`、`connection`、`headless-runner`、`acp` 和 `sdk-jsonrpc-server`。
 
 <a id="profiles"></a>
 ### Profile
@@ -82,8 +82,12 @@ profile 导入插件前，DSH 会检查其 `peerDependencies` 中对 `@deepseek-
 
 ### 读取插件展示元信息
 
+`resolvePluginResource(specifier, parentURL)` 通过活动的 Node ESM 解析器将插件模块或导出资源解析为本地文件路径，不执行其代码。解析器不可用或资源无法解析为本地文件时会抛出错误。
+
 使用 `readPluginMeta(specifier, parentURL)` 或 `ctx.pluginPackages.metaOf(specifier, parentURL)` 读取已安装包的展示文本，无需导入或激活插件。查询使用完整包标识与调用方的解析基准，并遵循 Node exports。文件路径与文件 URL 不解析资源，直接返回无元信息。包根标识缺失的 locale 字段回退到可访问的 `package.json`；子路径标识从不读取 `package.json`。格式错误的元信息返回 `error` 诊断。结果保留翻译，由 Client 选择语言。即使 locale 文本完整，读取器也会加载图片 data URL：包根使用清单 `icon`，省略该字段时使用 `<包名>/icon`；子路径使用 `<标识>/icon`。图标出错时，保留有效文本并附上诊断。作者格式见[插件展示元信息](../../../docs/cookbook/adding-a-package.zh.md#plugin-display-metadata)。
 
+`ON_DEMAND_BUNDLES` 列出仅按需安装的官方公开包。`OFFICIAL_ON_DEMAND_CATALOG` 内嵌这些包拥有的本地化元信息和图标，支持离线发现；`pnpm gen-official-bundle-catalog` 显式更新生成内容，`verify-official-bundle-catalog` 检查资源完整性与新鲜度；构建只读取已提交的目录，不导入提供者代码。目录不保存安装目标；[插件管理器](../plugin-manager/README.zh.md#use-this-package)根据当前版本和安装位置确定目标，并使用普通组合包安装器。[产品用途检查](../../../scripts/verify-product-use.ts)将随附和按需选择与 Web 组合，但不执行提供者。
+
 <a id="startup-and-reload-failures"></a>
 ### 启动与重载失败
 

package/lib/index.js

@@ -1,6 +1,6 @@
 import { createRequire, isBuiltin } from "node:module";
 import { fileURLToPath, pathToFileURL } from "node:url";
-import fs, { existsSync, mkdirSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import fs, { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { inspect, parseEnv } from "node:util";
 import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";
 import * as yaml from "js-yaml";
@@ -441,7 +441,7 @@ async function setProfileVersionExemption(profileDir, packageVersion, runtimeVer
 }
 //#endregion
 //#region lib/types/profile-resolution/legacy-links.js
-/** Package directory canonicalization through the active runtime carrier's filesystem. */
+/** Package directory and resource canonicalization through the active runtime carrier's filesystem. */
 /**
 * Return whether the process reads application modules from pkg's virtual filesystem.
 * @returns whether pkg owns the module filesystem.
@@ -457,6 +457,15 @@ function isPackagedExecutable() {
 function realModuleDirectory(path) {
 	return isPackagedExecutable() ? realpathSync(path) : realpathSync.native(path);
 }
+/** Canonicalize a module resource, preserving physical file aliases.
+* SEA archive files are symlink-free and support stat and reads, while their containing directories support realpath.
+* @param path Existing module resource path.
+* @returns Canonical resource path under the active carrier's filesystem.
+* @throws When the resource or its directory cannot be inspected or resolved.
+*/
+function realModuleFile(path) {
+	return !isPackagedExecutable() || lstatSync(path).isSymbolicLink() ? realpathSync(path) : join(realModuleDirectory(dirname(path)), basename(path));
+}
 //#endregion
 //#region lib/types/profile.js
 /**
@@ -555,10 +564,17 @@ const DEFAULT_PROFILE_BUNDLES = ["@deepseek-ai/dsh-base"];
 * [admission](../../../../.agents/notes/implemented/architecture/2026-09-21-experimental-capabilities-as-optional-bundles.md)).
 */
 const OPTIONAL_BUNDLES = [
+	"@deepseek-ai/dsh-experimental-session-search",
+	"@deepseek-ai/dsh-experimental-ralph-bundle",
+	"@deepseek-ai/dsh-experimental-terminal-bundle",
+	"@deepseek-ai/dsh-experimental-badge-skill-bundle",
+	"@deepseek-ai/dsh-experimental-session-titles-bundle",
 	"@deepseek-ai/dsh-experimental-agent-team-profile",
 	"@deepseek-ai/dsh-experimental-voice-input-bundle",
+	"@deepseek-ai/dsh-experimental-cot-translation-bundle",
 	"@deepseek-ai/dsh-experimental-auto-review",
-	"@deepseek-ai/dsh-experimental-inspector-profile"
+	"@deepseek-ai/dsh-experimental-inspector-profile",
+	"@deepseek-ai/dsh-experimental-tool-worktree"
 ];
 const PROFILE_PATCH_TEMPLATE = `# Your patch layer for this dsh profile, applied after every bundle layer:
 # a top-level YAML array of loader patch entries (id-targeted config
@@ -1931,17 +1947,17 @@ function iconOf(specifier, packageName, parentURL, manifestPath, value) {
 		label = manifestPath;
 		const root = realpathSync(dirname(manifestPath));
 		target = resolve(root, icon);
-		const local = relative(root, realpathSync(target));
+		const local = relative(root, realModuleFile(target));
 		if (local === ".." || local.startsWith(`..${sep}`) || isAbsolute(local)) throw new Error(`${label}: icon must remain inside its manifest directory`);
 	} else {
 		const exported = optionalResourcePath(`${specifier}/icon`, parentURL);
 		if (exported === void 0) return void 0;
 		target = label = exported;
-		assertPackageOwned(realpathSync(target), packageName);
+		assertPackageOwned(realModuleFile(target), packageName);
 	}
 	const mediaType = ICON_MEDIA_TYPES.get(extname(target).toLowerCase());
 	if (mediaType === void 0) throw new Error(`${label}: icon must be SVG, PNG, JPEG, or WebP`);
-	const file = realpathSync(target);
+	const file = realModuleFile(target);
 	const stat = statSync(file);
 	if (!stat.isFile()) throw new Error(`${label}: icon must be a regular file`);
 	if (stat.size > MAX_ICON_BYTES) throw new Error(`${label}: icon exceeds 256 KiB`);
@@ -1959,7 +1975,7 @@ function assertPackageOwned(file, name) {
 }
 /**
 * Resolve a plugin resource through the active Node ESM resolver without evaluating it.
-* @param specifier - complete resource module specifier, including its locale filename.
+* @param specifier - plugin module or exported resource specifier.
 * @param parentURL - owning module-resolution base.
 * @returns the local filesystem path selected by Node and the active profile.
 * @throws when the resolver is unavailable or the resource cannot resolve to a local file.
@@ -2241,6 +2257,42 @@ function prepareProfilePatches(ctx, patches, parentURL, binName = "dsh") {
 	return rows.length === 0 ? [] : [{ insert: rows }];
 }
 //#endregion
+//#region lib/types/official-bundle-packages.js
+/** Package admission shared by offline catalog generation and release ordering. */
+/** Public DSH release members available through the ordinary on-demand bundle installer. */
+const ON_DEMAND_BUNDLES = ["@deepseek-ai/dsh-subagent-claude-code", "@deepseek-ai/dsh-subagent-codex"];
+//#endregion
+//#region lib/types/official-bundles.generated.js
+/** Generated offline Official bundle metadata. Run pnpm gen-official-bundle-catalog; do not edit. */
+/** Official on-demand entries, independent of installed packages and registry availability. */
+const OFFICIAL_ON_DEMAND_CATALOG = [{
+	packageName: "@deepseek-ai/dsh-subagent-claude-code",
+	meta: {
+		title: {
+			"en": "Claude Code subagent",
+			"zh": "Claude Code 子智能体"
+		},
+		description: {
+			"en": "Delegate one task to Claude Code using its native authentication and settings.",
+			"zh": "使用 Claude Code 原生认证和设置委派单个任务。"
+		},
+		icon: "data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMzYiIGhlaWdodD0iMzYiIHZpZXdCb3g9IjAgMCAzNiAzNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48cmVjdCB4PSIxNC45ODkzIiB5PSIxNS4xODc3IiB3aWR0aD0iMTIuMjM2NSIgaGVpZ2h0PSIxMi4yMzY1IiByeD0iMiIgZmlsbD0idXJsKCNkc2hfcGx1Z2luX2FydF9SMGEpIiBmaWxsLW9wYWNpdHk9IjAuOCI+PC9yZWN0PjxyZWN0IHg9IjguODcxMDkiIHk9IjkuMDY5NyIgd2lkdGg9IjEyLjIzNjUiIGhlaWdodD0iMTIuMjM2NSIgcng9IjIiIGZpbGw9InVybCgjZHNoX3BsdWdpbl9hcnRfUjBiKSIgZmlsbC1vcGFjaXR5PSIwLjgiPjwvcmVjdD48ZGVmcz48bGluZWFyR3JhZGllbnQgaWQ9ImRzaF9wbHVnaW5fYXJ0X1IwYSIgeDE9IjIxLjEwNzUiIHkxPSIxNS4xODc3IiB4Mj0iMjEuMTA3NSIgeTI9IjI3LjQyNDMiIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIj48c3RvcCBzdG9wLWNvbG9yPSIjNDVFN0E0Ij48L3N0b3A+PHN0b3Agb2Zmc2V0PSIxIiBzdG9wLWNvbG9yPSIjMDU5MDlEIj48L3N0b3A+PC9saW5lYXJHcmFkaWVudD48bGluZWFyR3JhZGllbnQgaWQ9ImRzaF9wbHVnaW5fYXJ0X1IwYiIgeDE9IjE0Ljk4OTQiIHkxPSI5LjA2OTciIHgyPSIxNC45ODk0IiB5Mj0iMjEuMzA2MyIgZ3JhZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2UiPjxzdG9wIHN0b3AtY29sb3I9IiM2OUI5RkYiPjwvc3RvcD48c3RvcCBvZmZzZXQ9IjEiIHN0b3AtY29sb3I9IiMzMjRERTIiPjwvc3RvcD48L2xpbmVhckdyYWRpZW50PjwvZGVmcz48L3N2Zz4K"
+	}
+}, {
+	packageName: "@deepseek-ai/dsh-subagent-codex",
+	meta: {
+		title: {
+			"en": "Codex subagent",
+			"zh": "Codex 子智能体"
+		},
+		description: {
+			"en": "Delegate one task to Codex using its native authentication and settings.",
+			"zh": "使用 Codex 原生认证和设置委派单个任务。"
+		},
+		icon: "data:image/svg+xml;base64,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"
+	}
+}];
+//#endregion
 //#region lib/types/config-schema/native.js
 /** Identity checks at the plugin-export and lazy-builder boundaries. */
 /**
@@ -3939,6 +3991,7 @@ const FIBER_DISPOSED = 4;
 const requiredStartupEntryIds = new Set([
 	"agent-loop",
 	"webserver",
+	"web-runtime",
 	"modules",
 	"connection",
 	"headless-runner",
@@ -4237,4 +4290,4 @@ function addHarnessSourceSection(ctx, sourceRoot) {
 	});
 }
 //#endregion
-export { DEFAULT_PROFILE_BUNDLES, FAIL_LOUD_RELEASE_TIMEOUT_MS, HARNESS_SOURCE_SECTION, LOADER_EXPRESSION_SCHEMA, OPTIONAL_BUNDLES, PROFILES_DIR, PROFILE_COMPATIBILITY_FILENAME, PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, PluginPackages, ProfileRuntimeResolution, StartupError, addHarnessSourceSection, auditStartupEntries, boot, bundlePatchFiles, bundlePatchPaths, composeEntries, createConfigProjector, createRuntimeResolution, evaluatePluginCompatibility, generateConfigSchema, getDshRuntimeVersion, initProfile, installFailLoud, isNativeConfigSchema, loadEnv, loadLayeredEnv, loadOptionalPatches, loadOverlayPatches, loadProfile, loadProfileDirectory, mountRootInclude, pluginCompatibilityWarning, prepareProfileEntries, prepareProfilePatches, readPluginMeta, readProfileCompatibility, readProfileManifest, readProfilePatches, readProfilePlugins, readProfileVersionExemptions, reconcileProfilePatches, reconcileProfilePlugins, removeLinkProjections, renderConfigDump, reportSkippedBundles, resolveBundleDir, resolveConfigPath, resolveProfileDir, resolveTelemetryPatch, sanitizeProfile, setProfileVersionExemption, writeProfileBundles, writeProfileManifest };
+export { DEFAULT_PROFILE_BUNDLES, FAIL_LOUD_RELEASE_TIMEOUT_MS, HARNESS_SOURCE_SECTION, LOADER_EXPRESSION_SCHEMA, OFFICIAL_ON_DEMAND_CATALOG, ON_DEMAND_BUNDLES, OPTIONAL_BUNDLES, PROFILES_DIR, PROFILE_COMPATIBILITY_FILENAME, PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, PluginPackages, ProfileRuntimeResolution, StartupError, addHarnessSourceSection, auditStartupEntries, boot, bundlePatchFiles, bundlePatchPaths, composeEntries, createConfigProjector, createRuntimeResolution, evaluatePluginCompatibility, generateConfigSchema, getDshRuntimeVersion, initProfile, installFailLoud, isNativeConfigSchema, loadEnv, loadLayeredEnv, loadOptionalPatches, loadOverlayPatches, loadProfile, loadProfileDirectory, mountRootInclude, pluginCompatibilityWarning, prepareProfileEntries, prepareProfilePatches, readPluginMeta, readProfileCompatibility, readProfileManifest, readProfilePatches, readProfilePlugins, readProfileVersionExemptions, reconcileProfilePatches, reconcileProfilePlugins, removeLinkProjections, renderConfigDump, reportSkippedBundles, resolveBundleDir, resolveConfigPath, resolvePluginResource, resolveProfileDir, resolveTelemetryPatch, sanitizeProfile, setProfileVersionExemption, writeProfileBundles, writeProfileManifest };

package/lib/types/index.d.ts

@@ -15,7 +15,8 @@ export { sanitizeProfile } from './profile-sanitize.ts';
 export { getDshRuntimeVersion, evaluatePluginCompatibility, pluginCompatibilityWarning, type PluginCompatibility } from './plugin-compatibility.ts';
 export { PROFILE_COMPATIBILITY_FILENAME, readProfileCompatibility, readProfileVersionExemptions, setProfileVersionExemption, type ProfileCompatibility, } from './profile-compatibility.ts';
 export { prepareProfileEntries, prepareProfilePatches } from './compatibility-preflight.ts';
-export { readPluginMeta } from './package-meta.ts';
+export { readPluginMeta, resolvePluginResource } from './package-meta.ts';
+export { ON_DEMAND_BUNDLES, OFFICIAL_ON_DEMAND_CATALOG, type OfficialBundleCatalogEntry } from './official-bundles.ts';
 export { generateConfigSchema, type ConfigSchemaDump, type NativeConfigSchema } from './config-schema/index.ts';
 export { createConfigProjector, LOADER_EXPRESSION_SCHEMA, type ConfigProjection } from './config-schema/projector.ts';
 export { isNativeConfigSchema } from './config-schema/native.ts';

package/lib/types/official-bundle-packages.d.ts

@@ -0,0 +1,4 @@
+/** Package admission shared by offline catalog generation and release ordering. */
+/** Public DSH release members available through the ordinary on-demand bundle installer. */
+export declare const ON_DEMAND_BUNDLES: readonly string[];
+//# sourceMappingURL=official-bundle-packages.d.ts.map

package/lib/types/official-bundles.d.ts

@@ -0,0 +1,12 @@
+/** Official bundles offered without installing their provider runtimes in the DSH distribution. */
+import type { PluginLocalizedMeta } from '@deepseek-ai/dsh-package-manifest';
+export { ON_DEMAND_BUNDLES } from './official-bundle-packages.ts';
+/** Offline discovery metadata; installation state and the requested version belong to the running host. */
+export interface OfficialBundleCatalogEntry {
+    /** Exact npm package name accepted by the existing bundle installer. */
+    readonly packageName: string;
+    /** Package-owned localized text and a self-contained icon, embedded without provider code. */
+    readonly meta: Required<Pick<PluginLocalizedMeta, 'title' | 'description' | 'icon'>>;
+}
+export { OFFICIAL_ON_DEMAND_CATALOG } from './official-bundles.generated.ts';
+//# sourceMappingURL=official-bundles.d.ts.map

package/lib/types/official-bundles.generated.d.ts

@@ -0,0 +1,5 @@
+/** Generated offline Official bundle metadata. Run pnpm gen-official-bundle-catalog; do not edit. */
+import type { OfficialBundleCatalogEntry } from './official-bundles.ts';
+/** Official on-demand entries, independent of installed packages and registry availability. */
+export declare const OFFICIAL_ON_DEMAND_CATALOG: readonly OfficialBundleCatalogEntry[];
+//# sourceMappingURL=official-bundles.generated.d.ts.map

package/lib/types/package-meta.d.ts

@@ -2,7 +2,7 @@
 import type { PluginLocalizedMeta } from '@deepseek-ai/dsh-package-manifest';
 /**
  * Resolve a plugin resource through the active Node ESM resolver without evaluating it.
- * @param specifier - complete resource module specifier, including its locale filename.
+ * @param specifier - plugin module or exported resource specifier.
  * @param parentURL - owning module-resolution base.
  * @returns the local filesystem path selected by Node and the active profile.
  * @throws when the resolver is unavailable or the resource cannot resolve to a local file.

package/lib/types/profile-resolution/legacy-links.d.ts

@@ -1,8 +1,15 @@
-/** Package directory canonicalization through the active runtime carrier's filesystem. */
+/** Package directory and resource canonicalization through the active runtime carrier's filesystem. */
 /**
  * Resolve a directory through the active carrier's filesystem implementation.
  * @param path - directory path to canonicalize.
  * @returns the canonical directory path.
  */
 export declare function realModuleDirectory(path: string): string;
+/** Canonicalize a module resource, preserving physical file aliases.
+ * SEA archive files are symlink-free and support stat and reads, while their containing directories support realpath.
+ * @param path Existing module resource path.
+ * @returns Canonical resource path under the active carrier's filesystem.
+ * @throws When the resource or its directory cannot be inspected or resolved.
+ */
+export declare function realModuleFile(path: string): string;
 //# sourceMappingURL=legacy-links.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-app-boot",
   "description": "Shared boot glue for the app bins: .env loading, fail-loud Loader guards, snapshot-aware config resolution, and the Loader boot sequence",
-  "version": "0.2.1-alpha.1",
+  "version": "0.2.1-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -32,35 +32,35 @@
   ],
   "license": "MIT",
   "dependencies": {
+    "@deepseek-ai/dsh-atomic-write": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-package-manifest": "0.2.1-alpha.2",
     "@eslint-community/regexpp": "^4.12.2",
     "ajv": "^8.20.0",
-    "js-yaml": "^4.2.0",
-    "node-addon-require-builtin": "^0.1.6",
+    "js-yaml": "^4.3.2",
+    "node-addon-require-builtin": "^0.1.9",
     "resolve.exports": "^2.0.3",
-    "semver": "^7.8.5",
-    "@deepseek-ai/dsh-atomic-write": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-package-manifest": "0.2.1-alpha.1"
+    "semver": "^7.8.5"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis-plugin-group": "~1.0.5-alpha.1",
     "@deepseek-ai/cordis-plugin-include": "~1.0.10-alpha.1",
-    "@deepseek-ai/dsh-launch-environment": "0.2.1-alpha.1",
     "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.1",
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.1"
+    "@deepseek-ai/dsh-launch-environment": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.2",
+    "@deepseek-ai/cordis": "~4.0.5-alpha.1"
   },
   "devDependencies": {
-    "@types/js-yaml": "^4.0.9",
-    "@types/semver": "^7.8.0",
     "@deepseek-ai/schemastery": "~3.18.5-alpha.1",
     "@deepseek-ai/cordis-plugin-group": "~1.0.5-alpha.1",
     "@deepseek-ai/cordis-plugin-include": "~1.0.10-alpha.1",
     "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
     "@deepseek-ai/cordis-plugin-timer": "~1.1.7-alpha.1",
-    "@deepseek-ai/dsh-launch-environment": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-launch-environment": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.2",
+    "@types/js-yaml": "^4.0.9",
+    "@types/semver": "^7.8.0",
     "@deepseek-ai/cordis": "~4.0.5-alpha.1"
   }
 }