@deepseek-ai/dsh-app-boot 0.2.1-alpha.2 → 0.2.1-alpha.4

package/lib/types/index.d.ts

@@ -10,7 +10,7 @@ import { type Entry } from '@deepseek-ai/cordis-plugin-loader';
 import { type PatchOptions } from '@deepseek-ai/cordis-plugin-include';
 import { dshHomePath } from '@deepseek-ai/dsh-home-paths';
 import { type LaunchEnvironmentSnapshot } from '@deepseek-ai/dsh-launch-environment';
-export { readProfilePatches, resolveTelemetryPatch, type ProfileContext, type ProfilePnpmInvocation } from './profile-context.ts';
+export { readBundlePatches, readProfilePatches, resolveTelemetryPatch, type ProfileContext, type ProfilePnpmInvocation } from './profile-context.ts';
 export { sanitizeProfile } from './profile-sanitize.ts';
 export { getDshRuntimeVersion, evaluatePluginCompatibility, pluginCompatibilityWarning, type PluginCompatibility } from './plugin-compatibility.ts';
 export { PROFILE_COMPATIBILITY_FILENAME, readProfileCompatibility, readProfileVersionExemptions, setProfileVersionExemption, type ProfileCompatibility, } from './profile-compatibility.ts';
@@ -37,6 +37,7 @@ declare module '@deepseek-ai/cordis' {
 }
 export { composeEntries, createRuntimeResolution, ProfileRuntimeResolution, DEFAULT_PROFILE_BUNDLES, OPTIONAL_BUNDLES, bundlePatchFiles, bundlePatchPaths, initProfile, removeLinkProjections, loadProfile, loadProfileDirectory, PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, PROFILES_DIR, readProfileManifest, reportSkippedBundles, resolveBundleDir, resolveProfileDir, writeProfileManifest, type Profile, type ProfileLayer, type SkippedBundle, type ProfileManifest, type LinkedRoot, type RuntimeResolutionOptions, type RuntimeResolutionEntry, type RuntimeResolution, type ProfileTemplate, } from './profile.ts';
 export { PluginPackages, type PluginPackage, type PluginPackagesConfig, } from './profile-resolution/service.ts';
+export { ResolutionRestartRequired } from './profile-resolution/resolver.ts';
 /**
  * Resolve the config to boot. Replay swaps a `cordis.yml` basename for
  * `cordis.snapshot.yml` in the same directory; every other mode keeps the path.
@@ -67,7 +68,45 @@ export declare function loadEnv(binName: string, dir?: string, warn?: (line: str
  * @throws when either file declares a bootstrap-only variable, except {@link HOME_LAYER_PROXY_NAMES} in the Harness-home file.
  */
 export declare function loadLayeredEnv(binName: string, cwd?: string, warn?: (line: string) => void): LaunchEnvironmentSnapshot;
-/** Apply one complete patch generation and wait for Loader activation diagnostics.
+/** What a caller of {@link recomposeProfile} already did and requires. */
+export interface ProfileRecompositionOptions {
+    /** Explicit enablement targets whose existing failures also reject the recomposition. */
+    readonly requiredIds?: readonly string[];
+    /**
+     * Loader entries that ran before the caller stopped some of them. Each that no longer runs starts again, and each that
+     * failed afterwards counts as a new failure.
+     */
+    readonly running?: readonly Entry[];
+}
+/** The outcome of a {@link recomposeProfile} that applied or kept the composition. */
+export interface ProfileRecomposition {
+    /** Diagnostics for unchanged pre-existing inactive entries. */
+    warnings: string[];
+    /** Present when the runtime resolution could not publish a moved package or a changed installation mapping. */
+    restartReason?: 'package-moved';
+}
+/**
+ * Recompose the profile from its complete patch list, together with its runtime resolution. The rows the generation no
+ * longer lists are removed first and their disposal finishes while their packages are still mapped; the latest
+ * generation of an installed, recomputable resolution is published; the compatibility preflight reads the published
+ * packages; the generation is applied to the root Include; entries that ran, and enabled entries whose import failed,
+ * start afterwards when the update left them without a running fiber; and activation is judged. A failure before the generation applies,
+ * including a publication the resolution rejects, which reports `package-moved`, puts the removed rows back at their
+ * places, starting them again, and starts the entries that ran again. An entry waiting for a service is reported as a
+ * warning unless it is required. Patches are copied with `structuredClone`, so they hold no functions.
+ * @param ctx Booted root context.
+ * @param patches Complete ordered patch list.
+ * @param binName Diagnostic prefix.
+ * @param options What the caller already did and requires.
+ * @returns Diagnostics for unchanged pre-existing inactive entries, and the restart reason of a rejected publication.
+ * @throws When the root Include is missing; the latest resolution cannot be read or published; preparation or the
+ * Loader update rejects; or for a new or changed failure, an inactive required entry, a failed entry that ran, or a
+ * healthy fiber whose disposal rejected.
+ */
+export declare function recomposeProfile(ctx: Context, patches: PatchOptions[], binName: string, options?: ProfileRecompositionOptions): Promise<ProfileRecomposition>;
+/**
+ * Apply a complete patch list to the root Include and judge activation, leaving the runtime resolution and entries
+ * whose import failed as they are.
  * @param ctx Booted root context.
  * @param patches Complete ordered patch list.
  * @param binName Diagnostic prefix.
@@ -306,22 +345,4 @@ export declare function auditStartupEntries(ctx: Context, binName: string, warn?
  * diagnostic traversal without replacing the original cause.
  */
 export declare function boot(binName: string, absoluteConfigPath: string, patches?: PatchOptions[], prepare?: (ctx: Context) => Promise<void> | void, bareModuleBaseUrl?: string): Promise<Context>;
-/** Prompt-section name for the harness-source location line an app bin adds after boot. */
-export declare const HARNESS_SOURCE_SECTION = "harness:source";
-/**
- * Add a global prompt section naming the on-disk harness source checkout while
- * explicitly distinguishing it from the task workspace and current working
- * directory. The self-referential `dsh-tool-cordis` toolset reads and edits this
- * checkout. Call once on the settled boot context ({@link boot}); the section
- * uses the shared first-party placement after reusable instructions
- * and before the Web surface and persona suffix. A booted tree with no
- * `systemPrompt` service has no prompt to augment, so this is then a no-op
- * that returns `undefined`. The section is
- * registered against the `systemPrompt` service's fiber, so a dev HMR reload of
- * that plugin drops it until the next boot.
- * @param ctx - the settled boot context whose global system prompt to augment.
- * @param sourceRoot - the absolute path to the harness checkout root.
- * @returns the section disposer, or `undefined` when no `systemPrompt` service is mounted.
- */
-export declare function addHarnessSourceSection(ctx: Context, sourceRoot: string): (() => void) | undefined;
 //# sourceMappingURL=index.d.ts.map

package/lib/types/plugin-compatibility.d.ts

@@ -1,11 +1,11 @@
-/** Evaluate plugin dsh peer requirements without importing plugin code. */
-/** Incompatible dsh peers and the exact plugin/runtime exemption decision. */
+/** Evaluate plugin dsh requirements (`engines.dsh`, else dsh peers) without importing plugin code. */
+/** Unmet dsh requirements and the exact plugin/runtime exemption decision. */
 export interface PluginCompatibility {
     name: string;
     version: string;
     runtimeVersion: string;
-    /** Only peer requirements not satisfied by the running dsh version. */
-    peers: Record<string, string>;
+    /** Only requirements the running dsh version does not satisfy: `engines.dsh`, or dsh peer package names. */
+    requirements: Record<string, string>;
     exempted: boolean;
 }
 /**
@@ -15,18 +15,19 @@ export interface PluginCompatibility {
  */
 export declare function getDshRuntimeVersion(): string;
 /**
- * Check every @deepseek-ai/dsh or @deepseek-ai/dsh-* peer against the runtime.
- * Prereleases participate in ranges. workspace:^, workspace:~, and workspace:*
- * refer to the current runtime; other invalid ranges are incompatible.
+ * Check the plugin's dsh requirements against the runtime. An own `engines.dsh` range decides alone and
+ * peerDependencies are ignored; otherwise every @deepseek-ai/dsh or @deepseek-ai/dsh-* peer must match.
+ * Prereleases participate in ranges. For peers only, workspace:^, workspace:~, and workspace:* refer to
+ * the current runtime; other empty or invalid ranges, including any workspace: `engines.dsh`, are unmet.
  * @param manifest - parsed plugin package.json; inherited fields are ignored.
  * @param exemptions - exact plugin name@version keys mapped to exact runtime versions.
  * @param runtimeVersion - running dsh version, defaulting to this app-boot package.
- * @returns incompatible peers and exemption status, or undefined when none are incompatible.
- * @throws for malformed manifest peer fields, invalid runtime versions, or missing identity on a mismatch.
+ * @returns unmet requirements and exemption status, or undefined when every requirement is met.
+ * @throws for malformed manifest engines or peer fields, invalid runtime versions, or missing identity on a mismatch.
  */
 export declare function evaluatePluginCompatibility(manifest: object, exemptions?: Readonly<Record<string, readonly string[]>>, runtimeVersion?: string): PluginCompatibility | undefined;
 /**
- * Describe incompatible peers, their risk, and the exact-version remedy.
+ * Describe unmet requirements, their risk, and the exact-version remedy.
  * Surfaces with their own grant mechanism or locale render the structured result themselves.
  * @param issue - incompatible plugin/runtime result, including exempted mismatches.
  * @returns an English diagnostic for logs and stderr.

package/lib/types/profile-context.d.ts

@@ -41,6 +41,13 @@ declare module '@deepseek-ai/cordis' {
  * @returns the disable patch, or `undefined` when no hard-disable patch is required.
  */
 export declare function resolveTelemetryPatch(disabledEnv: string | undefined, hasRow: boolean): PatchOptions | undefined;
+/** Read the selected bundles' patches, which apply before the profile patch file.
+ * @param binName Diagnostic prefix for malformed or missing configuration.
+ * @param context Data supplied by the profile launcher.
+ * @param initialProfile Already loaded startup profile; omitted reads the current files.
+ * @returns Bundle patches in application order.
+ */
+export declare function readBundlePatches(binName: string, context: ProfileContext, initialProfile?: Profile): PatchOptions[];
 /** Read current bundle and user layers with the launch-time overlays.
  * @param binName Diagnostic prefix for malformed or missing configuration.
  * @param context Data supplied by the profile launcher.

package/lib/types/profile-resolution/resolver.d.ts

@@ -1,5 +1,10 @@
 /** In-memory profile package routing for Node's default ESM and CommonJS loaders. */
 import type { RuntimeResolution } from '../profile.ts';
+/** A successor resolution the running process cannot adopt, such as a retained mapping in another directory; it waits for a restart. */
+export declare class ResolutionRestartRequired extends Error {
+    /** @param message Diagnostic naming the rejected changes. */
+    constructor(message: string);
+}
 /** Active interception in one Node isolate. */
 export interface RuntimeInterception {
     /**
@@ -12,13 +17,16 @@ export interface RuntimeInterception {
     packageDir(specifier: string, parentURL: string): string | undefined;
     /**
      * Atomically publish a complete successor and fresh caches. Profile-scoped mappings, local names, and linked
-     * roots may be removed; removed roots stop intercepting uncovered directories. Existing modules and Node caches
-     * remain intact, so callers remove a package only after its plugins stop.
-     * A retained profile mapping may change its declarer if its normalized directory, version, and scope stay unchanged.
+     * roots may be removed; removed roots stop intercepting uncovered directories. A retained profile mapping may
+     * change its version and declarer when its normalized directory and scope stay unchanged, as when a package is
+     * upgraded in place. Existing modules and Node caches remain intact: callers remove a package only after its
+     * plugins stop, and replace the loaded modules of a package upgraded in place separately.
+     * A previously published link name may point to another real directory; callers stop the plugins of its previous
+     * target first, as removing and installing the package again does.
      * @param successor - fully constructed generation retaining the installation mappings.
-     * @throws when the profile scope, a retained directory, version, scope, or installation declarer changes;
-     * an installation mapping is removed; a new local name overrides an existing mapping; or a previously published
-     * link name selects a different real directory.
+     * @throws when the profile scope changes; and `ResolutionRestartRequired` when a retained profile mapping's real
+     * directory or scope, or an installation version or declarer changes; an installation mapping is removed; or a new
+     * local name overrides an existing mapping.
      */
     replace(successor: RuntimeResolution): void;
     /** Restore the native resolver methods. Interceptions dispose in reverse order. */

package/lib/types/profile-resolution/service.d.ts

@@ -33,10 +33,12 @@ export declare class PluginPackages extends Service {
     private disposeWorkerResolution;
     private current;
     constructor(ctx: Context, config?: PluginPackagesConfig);
+    /** The published runtime resolution, or `undefined` when Node resolves packages alone. */
+    get resolution(): RuntimeResolution | undefined;
     /**
      * Publish a complete successor generation for this process and subsequently created Workers.
      * Profile mappings and local package names may be removed after their plugins stop; linked roots may also be removed.
-     * Retained profile mappings may change their declarer, but not their normalized directory, version, or scope;
+     * Retained profile mappings may change their declarer and version, but not their normalized directory or scope;
      * installation mappings must remain unchanged. Publication does not unload modules or clear Node caches.
      * @param successor - fully constructed generation accepted by {@link RuntimeInterception.replace}.
      */

package/lib/types/profile.d.ts

@@ -76,7 +76,7 @@ export interface Profile {
     /** Selected bundles that contributed no layer, in `dsh.profile.bundles` order, with why. */
     skippedBundles: SkippedBundle[];
 }
-/** A selected bundle the profile could not load, or whose own DSH peers the profile does not exempt. */
+/** A selected bundle the profile could not load, or whose own DSH requirements the profile does not exempt. */
 export interface SkippedBundle {
     /** The bundle's package name from `dsh.profile.bundles`. */
     packageName: string;
@@ -237,7 +237,7 @@ export declare function resolveBundleDir(binName: string, packageName: string, i
  * the shared Harness home. This is used by application-owned profiles whose
  * package project and lifecycle belong to that application.
  * Retired bundles are removed from the stored bundle list first, rewriting the
- * manifest when it listed one. Unreadable bundles, and bundles whose own dsh peers the profile does not exempt, are skipped
+ * manifest when it listed one. Unreadable bundles, and bundles whose own dsh requirements the profile does not exempt, are skipped
  * without changing the manifest and listed in `skippedBundles`; nothing is printed.
  * @param binName - the diagnostic prefix on thrown errors.
  * @param dir - absolute profile package directory.

package/lib/worker/profile-resolution-bootstrap.js

@@ -1,7 +1,7 @@
 import { createRequire, isBuiltin } from "node:module";
 import { getEnvironmentData } from "node:worker_threads";
 import { existsSync, readFileSync, realpathSync, statSync } from "node:fs";
-import { basename, dirname, join, resolve, sep } from "node:path";
+import { basename, dirname, isAbsolute, join, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 //#region ../../../node_modules/.pnpm/resolve.exports@2.0.3/node_modules/resolve.exports/dist/index.mjs
 function e(e, n, r) {
@@ -44,6 +44,14 @@ function f(e, r, t) {
 //#region lib/types/profile-resolution/resolver.js
 /** In-memory profile package routing for Node's default ESM and CommonJS loaders. */
 const EMPTY_ATTRIBUTES = Object.freeze({});
+/** A successor resolution the running process cannot adopt, such as a retained mapping in another directory; it waits for a restart. */
+var ResolutionRestartRequired = class extends Error {
+	/** @param message Diagnostic naming the rejected changes. */
+	constructor(message) {
+		super(message);
+		this.name = "ResolutionRestartRequired";
+	}
+};
 /**
 * Split a bare request into its package name without allocating path segments.
 * @param request - module specifier to classify.
@@ -57,6 +65,15 @@ function barePackageName(request) {
 	const second = request.indexOf("/", first + 1);
 	return second < 0 ? request : request.slice(0, second);
 }
+/** The JavaScript and native real paths of an existing directory; none for a directory that no longer exists. */
+function realSpellings(path) {
+	try {
+		const native = Reflect.get(realpathSync, "native");
+		return [realpathSync(path), ...typeof native === "function" ? [String(Reflect.apply(native, realpathSync, [path]))] : []];
+	} catch (_error) {
+		return [];
+	}
+}
 function canonicalPath(path) {
 	try {
 		return realpathSync(path);
@@ -71,7 +88,10 @@ function prefixes(path) {
 }
 function compileResolution(resolution) {
 	return {
-		entries: new Map(resolution.entries.map((entry) => [entry.name, entry])),
+		entries: new Map(resolution.entries.map((entry) => [entry.name, {
+			...entry,
+			realDir: canonicalPath(entry.packageDir)
+		}])),
 		profilesDir: resolution.profilesDir,
 		profileDir: resolution.profileDir,
 		profilePaths: prefixes(resolution.profilesDir),
@@ -234,11 +254,65 @@ function sameResolution(left, right) {
 	if (left === right) return true;
 	return canonicalPath(left) === canonicalPath(right);
 }
+/** A directory as given and in its JavaScript and native real paths, each with a trailing separator. */
+function spellings(dir) {
+	const result = new Set([dir + sep]);
+	for (const real of realSpellings(dir)) result.add(real + sep);
+	return [...result];
+}
+/**
+* The previous real directories of packages that moved, each mapped to the current one. Node keeps the real path of
+* every link it resolved through and never refreshes it, so a lookup through a link that now points elsewhere still
+* selects a file below the target Node saw first; {@link MovedDirectories.relocate} selects the same file below the
+* current target instead.
+*/
+var MovedDirectories = class {
+	/** Previous directory to current directory, both with a trailing separator. */
+	targets = /* @__PURE__ */ new Map();
+	/**
+	* Record that a package moved from one directory to another. Every spelling of the previous directory leads to the
+	* current one. A directory that an earlier move led to the previous one now leads to the current one as well, since
+	* Node still selects files below the earliest target.
+	* @param from Previous real directory.
+	* @param to Current real directory.
+	*/
+	record(from, to) {
+		const previous = spellings(from);
+		const current = to + sep;
+		for (const [key, value] of this.targets) if (previous.includes(value)) this.targets.set(key, current);
+		for (const key of previous) this.targets.set(key, current);
+	}
+	/**
+	* Forget the previous directories that are current again, in any spelling, and records that lead to themselves.
+	* @param current The real directories the published resolution maps.
+	*/
+	forget(current) {
+		const active = /* @__PURE__ */ new Set();
+		for (const dir of current) for (const spelling of spellings(dir)) active.add(spelling);
+		for (const [key, value] of [...this.targets]) if (active.has(key) || key === value) this.targets.delete(key);
+	}
+	/**
+	* The same file below the current directory when it exists, for a file below a previous directory that an importer
+	* outside that directory selected. An importer inside the previous directory keeps its own package's files. The
+	* innermost previous directory decides.
+	* @param filename Selected file.
+	* @param parent Importer path.
+	* @returns The file to load.
+	*/
+	relocate(filename, parent) {
+		let from = "";
+		for (const dir of this.targets.keys()) if (filename.startsWith(dir) && dir.length > from.length) from = dir;
+		if (from === "" || parent?.startsWith(from) === true) return filename;
+		const relocated = this.targets.get(from) + filename.slice(from.length);
+		return existsSync(relocated) ? relocated : filename;
+	}
+};
 /** One mutable pointer to the immutable runtime resolution. */
 var ResolutionRouter = class {
 	nodeModulePaths;
 	current;
 	linkedTargets;
+	moved = new MovedDirectories();
 	constructor(resolution, nodeModulePaths) {
 		this.nodeModulePaths = nodeModulePaths;
 		this.current = compileResolution(resolution);
@@ -247,21 +321,49 @@ var ResolutionRouter = class {
 	replace(successor) {
 		const entries = new Map(successor.entries.map((entry) => [entry.name, entry]));
 		if (successor.profilesDir !== this.current.profilesDir || successor.profileDir !== this.current.profileDir) throw new Error("profile resolution: a successor cannot change its profile scope");
+		const rejected = [];
+		const moves = [];
 		for (const [name, current] of this.current.entries) {
 			const next = entries.get(name);
 			if (next === void 0 && current.scope === "profile") continue;
-			if (next === void 0 || !sameResolution(current.packageDir, next.packageDir) || current.scope === "installation" && !sameResolution(current.declarer, next.declarer) || current.version !== next.version || current.scope !== next.scope) throw new Error(`profile resolution: replacing ${JSON.stringify(name)} requires a process restart`);
+			if (next !== void 0 && current.scope === "profile" && next.scope === "profile") {
+				if (current.realDir === canonicalPath(next.packageDir)) continue;
+				rejected.push(`profile resolution: replacing ${JSON.stringify(name)} requires a process restart`);
+				continue;
+			}
+			if (next === void 0 || !sameResolution(current.packageDir, next.packageDir) || current.scope === "installation" && !sameResolution(current.declarer, next.declarer) || current.scope === "installation" && current.version !== next.version || current.scope !== next.scope) rejected.push(`profile resolution: replacing ${JSON.stringify(name)} requires a process restart`);
 		}
 		const localPackageNames = new Set(successor.localPackageNames);
-		for (const name of localPackageNames) if (!this.current.localPackageNames.has(name) && this.current.entries.has(name)) throw new Error(`profile resolution: overriding ${JSON.stringify(name)} locally requires a process restart`);
-		for (const root of successor.linkedRoots) {
-			const previous = this.linkedTargets.get(root.name);
-			if (previous !== void 0 && !sameResolution(previous, root.realPath)) throw new Error(`profile resolution: relinking ${JSON.stringify(root.name)} requires a process restart`);
+		for (const name of localPackageNames) if (!this.current.localPackageNames.has(name) && this.current.entries.has(name)) rejected.push(`profile resolution: overriding ${JSON.stringify(name)} locally requires a process restart`);
+		const targets = new Map(this.linkedTargets);
+		for (const [name, previous] of this.linkedTargets) {
+			const root = successor.linkedRoots.find((candidate) => candidate.name === name);
+			const entry = entries.get(name);
+			const target = root?.realPath ?? (entry?.scope === "profile" ? canonicalPath(entry.packageDir) : void 0);
+			if (target === void 0 || sameResolution(previous, target)) continue;
+			moves.push([previous, target]);
+			targets.set(name, target);
 		}
+		if (rejected.length > 0) throw new ResolutionRestartRequired(rejected.join("; "));
 		const next = compileResolution(successor);
-		for (const { name, realPath } of successor.linkedRoots) if (!this.linkedTargets.has(name)) this.linkedTargets.set(name, realPath);
+		for (const { name, realPath } of successor.linkedRoots) targets.set(name, realPath);
+		this.linkedTargets = targets;
+		for (const [from, to] of moves) this.moved.record(from, to);
+		const current = [];
+		for (const entry of next.entries.values()) current.push(entry.realDir);
+		for (const root of successor.linkedRoots) current.push(root.realPath);
+		this.moved.forget(current);
 		this.current = next;
 	}
+	/**
+	* The file to load instead of one Node selected through a link that has moved since; see {@link MovedDirectories}.
+	* @param filename Selected file.
+	* @param parent Importer path.
+	* @returns The file to load.
+	*/
+	relocate(filename, parent) {
+		return this.moved.relocate(filename, parent);
+	}
 	/** Whether a module path has an interception layer: it lies in the profiles tree, the active profile, or a linked root. */
 	hasInterceptionLayerForPath(path) {
 		return findInterceptionLayer(path, this.current) !== void 0;
@@ -580,7 +682,23 @@ function installRuntimeInterception(resolution) {
 				delegatedEsm = previous;
 			}
 		};
-		return adapted;
+		const relocate = (result, parent) => {
+			if (!result.url.startsWith("file:")) return result;
+			const url = new URL(result.url);
+			const filename = fileURLToPath(url);
+			const relocated = router.relocate(filename, parent?.startsWith("file:") === true ? fileURLToPath(parent) : void 0);
+			if (relocated === filename) return result;
+			url.pathname = pathToFileURL(relocated).pathname;
+			return {
+				...result,
+				url: url.href
+			};
+		};
+		return (request, parent, attributes) => {
+			const result = adapted(request, parent, attributes);
+			/* v8 ignore next -- Node 24+ resolves synchronously; the Node 22 matrix covers its Promise result */
+			return result instanceof Promise ? result.then((resolved) => relocate(resolved, parent)) : relocate(result, parent);
+		};
 	};
 	let restoreEsm;
 	/* v8 ignore else -- CI coverage runs Node 24 v2; the Node 22 matrix exercises the v1 adapter */
@@ -704,7 +822,11 @@ function installRuntimeInterception(resolution) {
 			delegatedCjs--;
 		}
 	};
-	cjs._resolveFilename = wrappedFilename;
+	const relocatedFilename = (request, parent, main, options) => {
+		const filename = wrappedFilename(request, parent, main, options);
+		return isAbsolute(filename) ? router.relocate(filename, parent?.filename ?? void 0) : filename;
+	};
+	cjs._resolveFilename = relocatedFilename;
 	return {
 		packageDir(specifier, parentURL) {
 			return router.packageDir(specifier, parentURL);
@@ -714,7 +836,7 @@ function installRuntimeInterception(resolution) {
 		},
 		dispose() {
 			/* v8 ignore else -- interceptions are disposed in reverse installation order */
-			if (cjs._resolveFilename === wrappedFilename) cjs._resolveFilename = originalFilename;
+			if (cjs._resolveFilename === relocatedFilename) cjs._resolveFilename = originalFilename;
 			restoreEsm();
 		}
 	};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-app-boot",
   "description": "Shared boot glue for the app bins: .env loading, fail-loud Loader guards, snapshot-aware config resolution, and the Loader boot sequence",
-  "version": "0.2.1-alpha.2",
+  "version": "0.2.1-alpha.4",
   "publishConfig": {
     "access": "public"
   },
@@ -32,8 +32,8 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@deepseek-ai/dsh-atomic-write": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-package-manifest": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-atomic-write": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-package-manifest": "0.2.1-alpha.4",
     "@eslint-community/regexpp": "^4.12.2",
     "ajv": "^8.20.0",
     "js-yaml": "^4.3.2",
@@ -42,25 +42,24 @@
     "semver": "^7.8.5"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis-plugin-group": "~1.0.5-alpha.1",
-    "@deepseek-ai/cordis-plugin-include": "~1.0.10-alpha.1",
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
-    "@deepseek-ai/dsh-launch-environment": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.2",
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1"
+    "@deepseek-ai/cordis-plugin-group": "~1.0.5-alpha.2",
+    "@deepseek-ai/cordis-plugin-include": "~1.0.10-alpha.2",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.2",
+    "@deepseek-ai/dsh-launch-environment": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.4",
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2"
   },
   "devDependencies": {
-    "@deepseek-ai/schemastery": "~3.18.5-alpha.1",
-    "@deepseek-ai/cordis-plugin-group": "~1.0.5-alpha.1",
-    "@deepseek-ai/cordis-plugin-include": "~1.0.10-alpha.1",
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
-    "@deepseek-ai/cordis-plugin-timer": "~1.1.7-alpha.1",
-    "@deepseek-ai/dsh-launch-environment": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.2",
+    "@deepseek-ai/schemastery": "~3.18.5-alpha.2",
+    "@deepseek-ai/cordis-plugin-group": "~1.0.5-alpha.2",
+    "@deepseek-ai/cordis-plugin-include": "~1.0.10-alpha.2",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.2",
+    "@deepseek-ai/cordis-plugin-timer": "~1.1.7-alpha.2",
+    "@deepseek-ai/dsh-launch-environment": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.4",
     "@types/js-yaml": "^4.0.9",
     "@types/semver": "^7.8.0",
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2"
   }
 }