@deepseek-ai/dsh-experimental-webworker-runtime 0.1.6-alpha.1 → 0.1.6-alpha.2

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/experimental/webworker-runtime/README.md
-README.md: ab54ec689664adc1c0e01cc3387777c77f36bc66
-README.zh.md: d6593eeff22e642e2423fa9348f64d751d5de62f
+README.md: 6a6911824c8c71b3deb5037d1ecf629771211a26
+README.zh.md: c0ef4275507725bc6f1178ab2568c4fb6127479a

package/README.md

@@ -53,7 +53,9 @@ None; this package neither assembles nor sends a provider request.
 
 - **The worker composition writes plaintext session logs** (`compression: 'none'` boot patch): it carries no Zstandard codec, so exported logs are `.jsonl`, never `.jsonl.zstd`.
 - **`node:dns/promises`, `node:vm`, `node:net`, `node:sqlite`, `node:worker_threads` are structural stubs**: every call reports its refusal on the console and throws. Rows needing native DNS, a real process, or realm isolation cannot run here.
+- **Host package commands are unavailable**: `execa` reports an explicit worker-host refusal; the preview cannot run pnpm or install native dependencies.
 - **PTC Node programs are unavailable**: the process shim exposes `/dsh/bin/node` as its executable identity so the provider can activate, but the Worker has neither a Node executable nor `stripTypeScriptTypes`. Program execution fails before launching a child.
+- **Office conversion requires a Node Host**: the LibreOffice kit replacement rejects converter creation with `unavailable`. The browser image excludes the kit and its engine dependencies; the Office preview reports that conversion is unavailable.
 - **Filesystem watchers observe only the mounted VFS**: image seeding is silent and the VFS has no symlinks or external writers. `persistent`, `ref()`, and `unref()` preserve the Node API but cannot control a dedicated Worker's lifetime because browsers expose no ref-counted event loop.
 - **Worker confinement is a VFS boundary, not kernel Landlock**: `read-only` and `workspace-write` run the unchanged `@deepseek-ai/node-addon-system/landlock-run` JavaScript and launcher argv, but the process layer implements the logical `landlock-run` executable and enforces its grants on every shell filesystem request. `full` therefore covers the Worker command table and mounted VFS only; it does not claim arbitrary native-process execution or Linux kernel isolation.
 - **The worker bundle pins a path inside `@yarnpkg/parsers`** — the build resolves the package's own `lib/shell.js` instead of its root, whose barrel also re-exports the Syml parser and so drags js-yaml into a bundle that never parses that format (around 175 kB, plus its module body at worker start). The path is derived from the package manifest, so a layout change fails the build rather than reinstating the barrel; upgrading the dependency means re-checking that the shell parser still lives there.

package/README.zh.md

@@ -53,7 +53,9 @@ kind: "package-library"
 
 - **worker 组合写明文会话日志**（`compression: 'none'` boot patch）：不带 Zstandard 编解码器，导出日志是 `.jsonl`，不会是 `.jsonl.zstd`。
 - **`node:dns/promises`、`node:vm`、`node:net`、`node:sqlite`、`node:worker_threads` 是结构化 stub**：每次调用在 console 报告拒绝并抛出。需要原生 DNS、真进程或真 realm 隔离的行在此无法运行。
+- **宿主包管理命令不可用**：`execa` 明确报告 worker host 不支持该调用；预览无法运行 pnpm 或安装原生依赖。
 - **PTC Node 程序不可用**：process shim 用 `/dsh/bin/node` 表示可执行文件身份，使 provider 能够激活，但 Worker 既没有 Node 可执行文件，也没有 `stripTypeScriptTypes`。程序执行会在启动子进程前失败。
+- **Office 转换需要 Node Host**：LibreOffice kit 的替代模块以 `unavailable` 拒绝创建转换器。浏览器镜像排除 kit 及其引擎依赖；Office 预览提示转换不可用。
 - **文件 watcher 只能观察已挂载的 VFS**：镜像 seed 不产生事件，VFS 也没有符号链接或外部写入方。`persistent`、`ref()` 和 `unref()` 保留 Node API，但浏览器没有引用计数事件循环，因此这些接口不能控制 dedicated Worker 的生存期。
 - **Worker confinement 是 VFS 边界，不是内核 Landlock**：`read-only` 和 `workspace-write` 运行未经修改的 `@deepseek-ai/node-addon-system/landlock-run` JavaScript 与 launcher argv，进程层则实现逻辑 `landlock-run` 可执行文件，并在 shell 的每次文件系统请求上执行其授权。`full` 仅覆盖 Worker 命令表和已挂载 VFS，不表示能够执行任意 native 进程，也不表示 Linux 内核隔离。
 - **worker 束钉住了 `@yarnpkg/parsers` 的包内路径**——构建解析到该包自己的 `lib/shell.js` 而非包根，因为包根 barrel 还 re-export 了 Syml 解析器，会把 js-yaml 拖进一个从不解析该格式的束（约 175 kB，外加 worker 启动时的模块体求值）。该路径由包 manifest 派生，包内布局一变即构建期失败、不会静默退回 barrel；升级这个依赖时须复核 shell 解析器是否仍在那里。

package/lib/client.js

@@ -1,3 +1,4 @@
+import { applyIndexInjections } from "@deepseek-ai/dsh-client-web/injections";
 //#region src/image-layout.ts
 /**
 * Leaf name of the packed base image: one gzip member holding the ustar archive.
@@ -481,44 +482,6 @@ var WorkerTunnel = class {
 	}
 };
 //#endregion
-//#region src/client/apply-injections.ts
-function assertNever(row) {
-	throw new Error(`webworker-runtime: unknown index injection row ${JSON.stringify(row)}`);
-}
-/**
-* Execute every row in table order.
-* @param rows - Injection table from the boot payload.
-* @param loadScript - Executes one script-src row; the tunnel's `loadBundle`,
-* because the row URLs (`/plugins/...`) resolve only through the worker.
-*/
-async function applyIndexInjections(rows, loadScript) {
-	for (const row of rows) switch (row.kind) {
-		case "global":
-			globalThis[row.name] = row.value;
-			break;
-		case "script": {
-			const el = document.createElement("script");
-			el.textContent = row.text;
-			(row.placement === "head" ? document.head : document.body).append(el);
-			break;
-		}
-		case "script-src":
-			await loadScript(row.src);
-			break;
-		case "script-preload": break;
-		case "style": {
-			const el = document.createElement("style");
-			el.textContent = row.text;
-			document.head.append(el);
-			break;
-		}
-		case "html":
-			(row.placement === "head" ? document.head : document.body).insertAdjacentHTML("beforeend", row.html);
-			break;
-		default: assertNever(row);
-	}
-}
-//#endregion
 //#region src/client/source-chooser.ts
 /** Pre-boot filesystem-source chooser for static WebWorker previews. */
 const EMPTY_SOURCE = "none";

package/lib/index.js

@@ -728,10 +728,12 @@ const MODULE_PROXIES = {
 	"node:vm": "./node/builtin_modules/mock/vm.ts",
 	"node:worker_threads": "./node/builtin_modules/mock/worker_threads.ts",
 	"node:sqlite": "./node/builtin_modules/mock/sqlite.ts",
+	"@deepseek-ai/libreoffice-kit": "./node/external_packages/libreoffice-kit.ts",
 	"@deepseek-ai/node-addon-system/flock": "./node/external_packages/node-addon-system-flock.ts",
 	"koffi": "./node/external_packages/koffi.ts",
 	"sharp": "./node/external_packages/sharp.ts",
 	"node-pty": "./node/external_packages/node-pty.ts",
+	"execa": "./node/external_packages/execa.ts",
 	"@vscode/ripgrep": "./node/external_packages/ripgrep.ts",
 	"@earendil-works/pi-ai": "./node/external_packages/pi-ai.ts",
 	"ws": "./node/external_packages/ws.ts"
@@ -750,9 +752,11 @@ const MODULE_PROXY_PREFIXES = { "@earendil-works/pi-ai/": "./node/external_packa
 const REPLACED_EXTERNAL_PACKAGES = [
 	"@earendil-works/pi-ai",
 	"@vscode/ripgrep",
+	"@deepseek-ai/libreoffice-kit",
 	"@deepseek-ai/node-addon-system/flock",
 	"koffi",
 	"node-pty",
+	"execa",
 	"sharp",
 	"ws"
 ];

package/lib/types/client/apply-injections.d.ts

@@ -1,15 +1,3 @@
-/**
- * Page-side interpreter for the structured index injection table. The served
- * form renders the same rows into index.html text; a static worker page has
- * no served HTML, so it executes the table directly. Rows execute strictly in
- * table order, so a global row lands before the scripts that read it.
- */
-import type { IndexInjection } from '@deepseek-ai/dsh-host-webserver';
-/**
- * Execute every row in table order.
- * @param rows - Injection table from the boot payload.
- * @param loadScript - Executes one script-src row; the tunnel's `loadBundle`,
- * because the row URLs (`/plugins/...`) resolve only through the worker.
- */
-export declare function applyIndexInjections(rows: readonly IndexInjection[], loadScript: (src: string) => Promise<void>): Promise<void>;
+/** Shared page-side interpreter for asynchronous Host startup. */
+export { applyIndexInjections } from '@deepseek-ai/dsh-client-web/injections';
 //# sourceMappingURL=apply-injections.d.ts.map

package/lib/types/node/external_packages/execa.d.ts

@@ -0,0 +1,3 @@
+/** Refuse external package commands in the worker host. */
+export declare const execa: (...args: never[]) => never;
+//# sourceMappingURL=execa.d.ts.map

package/lib/types/node/external_packages/libreoffice-kit.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Refuse converter creation with the kit's unavailable error code.
+ * @returns A rejected promise consumed by the Host office-to-pdf provider.
+ */
+export declare function createConverter(): Promise<never>;
+//# sourceMappingURL=libreoffice-kit.d.ts.map

package/lib/worker.js

@@ -21402,6 +21402,17 @@ const koffi = {
 	call: notImplementedFail(MODULE$3, "call")
 };
 //#endregion
+//#region src/node/external_packages/libreoffice-kit.ts
+/** Office conversion requires a Node Host; the browser preview carries no engine assets. */
+var libreoffice_kit_exports = /* @__PURE__ */ __exportAll({ createConverter: () => createConverter });
+/**
+* Refuse converter creation with the kit's unavailable error code.
+* @returns A rejected promise consumed by the Host office-to-pdf provider.
+*/
+function createConverter() {
+	return Promise.reject(Object.assign(notAvailableError("@deepseek-ai/libreoffice-kit", "createConverter"), { code: "unavailable" }));
+}
+//#endregion
 //#region src/node/external_packages/node-pty.ts
 /**
 * `node-pty` stub: pseudo-terminals belong to the excluded surface. Terminal
@@ -21424,6 +21435,12 @@ var node_pty_default = {
 	open
 };
 //#endregion
+//#region src/node/external_packages/execa.ts
+/** Host package commands cannot install dependencies in the browser preview. */
+var execa_exports = /* @__PURE__ */ __exportAll({ execa: () => execa });
+/** Refuse external package commands in the worker host. */
+const execa = notImplementedFail("execa", "execa");
+//#endregion
 //#region src/node/external_packages/pi-ai.ts
 /**
 * `@earendil-works/pi-ai` stub, including its `/providers/all` and `/api/*.lazy`
@@ -21648,9 +21665,11 @@ const Server = WebSocketServer;
 const REPLACED_EXTERNAL_PACKAGES = [
 	"@earendil-works/pi-ai",
 	"@vscode/ripgrep",
+	"@deepseek-ai/libreoffice-kit",
 	"@deepseek-ai/node-addon-system/flock",
 	"koffi",
 	"node-pty",
+	"execa",
 	"sharp",
 	"ws"
 ];
@@ -21709,10 +21728,12 @@ const BUILTINS = {
 };
 /** Exact package or subpath specifiers served by worker stubs and fakes. */
 const EXTERNALS = {
+	"@deepseek-ai/libreoffice-kit": () => libreoffice_kit_exports,
 	"@deepseek-ai/node-addon-system/flock": () => node_addon_system_flock_exports,
 	"koffi": () => koffi_exports,
 	"sharp": () => sharp_exports,
 	"node-pty": () => node_pty_exports,
+	"execa": () => execa_exports,
 	"ws": () => ws_exports,
 	"@vscode/ripgrep": () => ripgrep_exports,
 	"@earendil-works/pi-ai": () => pi_ai_exports

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-experimental-webworker-runtime",
   "description": "Browser-only harness runtime: in-memory VFS, module transform and loader, postMessage tunnel, and the dedicated Web Worker assembly, with the Node-compatibility layer that lets the host tree run unchanged",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -34,14 +34,15 @@
     "buffer": "^6.0.3",
     "picomatch": "^4.0.4",
     "readable-stream": "^4.7.0",
-    "@deepseek-ai/dsh-util-crypto": "^0.1.6-alpha.1"
+    "@deepseek-ai/dsh-client-web": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-util-crypto": "^0.1.6-alpha.2"
   },
   "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-client-modules": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.6-alpha.1",
-    "@deepseek-ai/cordis": "^4.0.2"
+    "@deepseek-ai/dsh-client-connection": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-modules": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.6-alpha.2"
   },
   "devDependencies": {
     "@types/picomatch": "^3.0.2",
@@ -49,20 +50,20 @@
     "chokidar": "^5.0.0",
     "@deepseek-ai/cordis": "^4.0.2",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-bash-sandbox": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-api-gateway": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-file-upload": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-modules": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-local": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-projection": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subagent": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subprocess-local": "^0.1.6-alpha.1",
-    "@deepseek-ai/node-addon-system": "^0.1.2"
+    "@deepseek-ai/dsh-api-gateway": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-bash-sandbox": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-connection": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-file-upload": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-modules": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox-local": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-subagent": "^0.1.6-alpha.2",
+    "@deepseek-ai/node-addon-system": "^0.1.2",
+    "@deepseek-ai/dsh-subprocess-local": "^0.1.6-alpha.2"
   },
   "files": [
     "lib/index.js",