@deepseek-ai/dsh-experimental-webworker-runtime 0.1.6-alpha.1 → 0.1.7-alpha.1

package/lib/types/index.d.ts

@@ -3,7 +3,7 @@
  * @module @deepseek-ai/dsh-experimental-webworker-runtime
  */
 export { createAlsRuntime, type AlsCausality, type AlsRuntime, type AlsSnapshot, type AlsToken, } from './polyfill/async-context/als-runtime.ts';
-export { parseInboundFrame, type TunnelAbortFrame, type TunnelInboundFrame, type TunnelOutboundFrame, type TunnelRequestFrame, type TunnelRequestId, type TunnelResponseChunkFrame, type TunnelResponseEndFrame, type TunnelResponseErrorFrame, type TunnelResponseFrame, type TunnelResponseHeadFrame, type TunnelStreamEndFrame, type TunnelStreamErrorFrame, type TunnelStreamItemFrame, type TunnelStreamOpenFrame, } from './transport/frames.ts';
+export { parseInboundFrame, type TunnelAbortFrame, type TunnelInboundFrame, type TunnelOutboundFrame, type TunnelRequestFrame, type TunnelRequestId, type TunnelResponseChunkFrame, type TunnelResponseEndFrame, type TunnelResponseErrorFrame, type TunnelResponseFrame, type TunnelResponseHeadFrame, type TunnelStreamEndFrame, type TunnelStreamErrorFrame, type TunnelStreamUplinkEndFrame, type TunnelStreamUplinkItemFrame, type TunnelStreamItemFrame, type TunnelStreamOpenFrame, } from './transport/frames.ts';
 export { DEFAULT_CONDITIONS, requireActiveModuleLoader, setActiveModuleLoader, WorkerModuleLoader, type Resolution, type StaticModuleFactory, type WorkerModuleLoaderOptions, type WorkerRequire, } from './module-system/module-loader.ts';
 export * as posixPath from './module-system/posix-path.ts';
 export { MODULE_PROXIES, MODULE_PROXY_PREFIXES } from './module-proxies.ts';

package/lib/types/node/builtin_modules/implemented/stream/promises.d.ts

@@ -0,0 +1,11 @@
+/** Promise-based stream completion and pipelines from the shared readable-stream implementation. */
+import { promises } from '../stream.ts';
+/** Shared stream completion promise, including abort and listener cleanup options. */
+export declare const finished: typeof import("stream/promises").finished;
+/** Shared stream pipeline promise, including backpressure and error propagation. */
+export declare const pipeline: typeof import("stream/promises").pipeline;
+/** CommonJS interop marker consumed by the worker module loader. */
+export declare const __esModule = true;
+/** CommonJS-compatible promise namespace. */
+export default promises;
+//# sourceMappingURL=promises.d.ts.map

package/lib/types/node/builtin_modules/implemented/util.d.ts

@@ -30,7 +30,7 @@ export declare function inspect(value: unknown): string;
  */
 export declare function format(template: unknown, ...args: unknown[]): string;
 /**
- * Structural deep equality, as `isDeepStrictEqual` defines it for plain data.
+ * Structural deep equality over own enumerable properties, as `isDeepStrictEqual` defines it for plain data.
  * @param left - first value.
  * @param right - second value.
  * @returns true when both sides are structurally identical.

package/lib/types/node/external_packages/execa.d.ts

@@ -0,0 +1,3 @@
+/** Refuse external package commands in the worker host. */
+export declare const execa: (...args: never[]) => never;
+//# sourceMappingURL=execa.d.ts.map

package/lib/types/node/external_packages/libreoffice-kit.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Refuse converter creation with the kit's unavailable error code.
+ * @returns A rejected promise consumed by the Host office-to-pdf provider.
+ */
+export declare function createConverter(): Promise<never>;
+//# sourceMappingURL=libreoffice-kit.d.ts.map

package/lib/types/storage/paths.d.ts

@@ -9,7 +9,7 @@ export declare const DSH_ROOT = "/dsh";
 export declare const DSH_HOME = "/dsh/home";
 /** Flat, symlink-free package tree resolved by the worker module loader. */
 export declare const DSH_NODE_MODULES = "/dsh/node_modules";
-/** Directory holding the composed cordis.yml and the agent-preset tree. */
+/** Directory holding the composed cordis.yml. */
 export declare const DSH_CONFIG = "/dsh/config";
 /** Default (empty) workspace directory. */
 export declare const DSH_WORKSPACE = "/dsh/workspace";

package/lib/types/transport/frames.d.ts

@@ -21,6 +21,17 @@ export interface TunnelStreamOpenFrame {
     readonly endpoint: string;
     readonly payload: unknown;
 }
+/** One uplink item for an open Remote stream; `value` absent and `undefined` are equivalent. */
+export interface TunnelStreamUplinkItemFrame {
+    readonly t: 'stream-uplink-item';
+    readonly id: TunnelRequestId;
+    readonly value?: unknown;
+}
+/** Page-side half-close of a Remote stream's uplink. */
+export interface TunnelStreamUplinkEndFrame {
+    readonly t: 'stream-uplink-end';
+    readonly id: TunnelRequestId;
+}
 /** Page-side cancellation of an in-flight request or stream. */
 export interface TunnelAbortFrame {
     readonly t: 'abort';
@@ -37,7 +48,7 @@ export interface TunnelInitFrame {
     readonly overlays: readonly string[];
 }
 /** Every frame the page sends the worker. */
-export type TunnelInboundFrame = TunnelInitFrame | TunnelRequestFrame | TunnelStreamOpenFrame | TunnelAbortFrame;
+export type TunnelInboundFrame = TunnelInitFrame | TunnelRequestFrame | TunnelStreamOpenFrame | TunnelStreamUplinkItemFrame | TunnelStreamUplinkEndFrame | TunnelAbortFrame;
 /** Complete response for unary requests and static files. */
 export interface TunnelResponseFrame {
     readonly t: 'res';

package/lib/types/transport/tunnel.d.ts

@@ -47,8 +47,8 @@ export interface TunnelSeams {
     readonly directFetch: (request: Request) => Promise<Response>;
     /** Boot payload for `GET /__boot__`: the structured index injection table. */
     readonly bootPayload: () => unknown;
-    /** Open one decoded Gateway Remote stream without another network carrier. */
-    readonly openStream: (endpoint: string, payload: unknown, signal: AbortSignal) => Promise<AsyncIterable<unknown>>;
+    /** Open one decoded Gateway Remote stream without another network carrier; `uplink` carries the page's items. */
+    readonly openStream: (endpoint: string, payload: unknown, uplink: AsyncIterable<unknown>, signal: AbortSignal) => Promise<AsyncIterable<unknown>>;
     /** Convert a Gateway stream failure to stable Client fields. */
     readonly streamFailure: (error: unknown) => {
         readonly code: string;
@@ -85,6 +85,8 @@ export declare class TunnelServer {
     private readonly unaryApiLane;
     private readonly queue;
     private readonly inFlight;
+    /** Uplinks of accepted `stream-open` frames, buffering items that arrive before or while the stream serves. */
+    private readonly uplinks;
     private seams;
     private failure;
     private listener;
@@ -109,6 +111,8 @@ export declare class TunnelServer {
     private refuse;
     private dispatchFrame;
     private serveStream;
+    /** The stream is over: settle any Host read still waiting on its uplink and stop buffering. */
+    private dropUplink;
     private sinkFor;
     /** The page sends an absolute URL; route handlers read `req.url` as a path. */
     private pathFrame;

package/lib/types/worker-host.d.ts

@@ -17,8 +17,8 @@
  *
  * The tree itself boots through the host's own `boot()` glue loaded from the
  * image, so entry mounting, the activation audit, and its diagnostics are the
- * same code the Node deployment runs. Only the module seam and the command line
- * are supplied from here.
+ * same code the Node deployment runs. The Worker supplies module loading,
+ * profile locations, and the command line.
  * @module @deepseek-ai/dsh-experimental-webworker-runtime/src/worker-host
  */
 import { WorkerModuleLoader, type StaticModuleFactory } from './module-system/module-loader.ts';

package/lib/worker.js

@@ -717,6 +717,15 @@ function parseInboundFrame(data) {
 		t: "abort",
 		id
 	};
+	if (frame.t === "stream-uplink-end") return {
+		t: "stream-uplink-end",
+		id
+	};
+	if (frame.t === "stream-uplink-item") return {
+		t: "stream-uplink-item",
+		id,
+		value: frame.value
+	};
 	if (frame.t === "stream-open") {
 		if (typeof frame.endpoint !== "string" || frame.endpoint.length === 0) throw new Error(`webworker tunnel: stream ${String(id)} needs a non-empty endpoint`);
 		return {
@@ -962,6 +971,61 @@ var BufferedSink = class {
 		for (const call of this.calls.splice(0)) call();
 	}
 };
+/** Uplink items of one worker-local logical stream, read once by the Host method as its `uplink`. */
+var TunnelUplink = class {
+	items = [];
+	ended = false;
+	closed = false;
+	wake;
+	push(value) {
+		if (this.ended || this.closed) return;
+		this.items.push(value);
+		this.signal();
+	}
+	/** Page half-close or stream end; buffered items still drain. */
+	end() {
+		this.ended = true;
+		this.signal();
+	}
+	[Symbol.asyncIterator]() {
+		return this;
+	}
+	async next() {
+		while (true) {
+			if (this.closed) return {
+				value: void 0,
+				done: true
+			};
+			if (this.items.length > 0) return {
+				value: this.items.shift(),
+				done: false
+			};
+			if (this.ended) return {
+				value: void 0,
+				done: true
+			};
+			if (this.wake !== void 0) throw new Error("webworker tunnel: stream uplink has one pending read");
+			await new Promise((resolve) => {
+				this.wake = resolve;
+			});
+		}
+	}
+	/** The Host stopped reading: buffered and later items are dropped. */
+	return() {
+		this.closed = true;
+		this.items.length = 0;
+		this.signal();
+		return Promise.resolve({
+			value: void 0,
+			done: true
+		});
+	}
+	signal() {
+		const wake = this.wake;
+		this.wake = void 0;
+		wake?.();
+	}
+};
 /** One tunnel per worker; wire {@link TunnelServer.handleMessage} to `onmessage` first. */
 var TunnelServer = class {
 	port;
@@ -970,6 +1034,8 @@ var TunnelServer = class {
 	unaryApiLane;
 	queue = [];
 	inFlight = /* @__PURE__ */ new Map();
+	/** Uplinks of accepted `stream-open` frames, buffering items that arrive before or while the stream serves. */
+	uplinks = /* @__PURE__ */ new Map();
 	seams;
 	failure;
 	listener;
@@ -986,9 +1052,18 @@ var TunnelServer = class {
 	handleMessage(data) {
 		const frame = parseInboundFrame(data);
 		if (frame.t === "init") throw new Error("webworker tunnel: duplicate init frame; the tunnel is already open");
+		if (frame.t === "stream-uplink-item") {
+			this.uplinks.get(frame.id)?.push(frame.value);
+			return;
+		}
+		if (frame.t === "stream-uplink-end") {
+			this.uplinks.get(frame.id)?.end();
+			return;
+		}
 		if (frame.t === "abort") {
 			this.inFlight.get(frame.id)?.abort();
 			this.inFlight.delete(frame.id);
+			this.dropUplink(frame.id);
 			const queued = this.queue.findIndex((request) => request.id === frame.id);
 			if (queued !== -1) this.queue.splice(queued, 1);
 			return;
@@ -997,6 +1072,7 @@ var TunnelServer = class {
 			this.refuse(frame, this.failure);
 			return;
 		}
+		if (frame.t === "stream-open") this.uplinks.set(frame.id, new TunnelUplink());
 		if (this.seams === void 0) {
 			this.queue.push(frame);
 			return;
@@ -1027,6 +1103,7 @@ var TunnelServer = class {
 	}
 	refuse(frame, message) {
 		if (frame.t === "stream-open") {
+			this.dropUplink(frame.id);
 			this.send({
 				t: "stream-error",
 				id: frame.id,
@@ -1057,12 +1134,13 @@ var TunnelServer = class {
 			return;
 		}
 		const seams = this.seams;
+		const uplink = this.uplinks.get(frame.id) ?? new TunnelUplink();
 		const controller = new AbortController();
 		this.inFlight.set(frame.id, { abort: () => {
 			controller.abort();
 		} });
 		try {
-			const source = await seams.openStream(frame.endpoint, frame.payload, controller.signal);
+			const source = await seams.openStream(frame.endpoint, frame.payload, uplink, controller.signal);
 			for await (const value of source) {
 				if (controller.signal.aborted) return;
 				this.send({
@@ -1089,8 +1167,15 @@ var TunnelServer = class {
 			}
 		} finally {
 			this.inFlight.delete(frame.id);
+			this.dropUplink(frame.id);
 		}
 	}
+	/** The stream is over: settle any Host read still waiting on its uplink and stop buffering. */
+	dropUplink(id) {
+		const uplink = this.uplinks.get(id);
+		this.uplinks.delete(id);
+		uplink?.end();
+	}
 	sinkFor(id) {
 		const send = this.send.bind(this);
 		const inFlight = this.inFlight;
@@ -2526,8 +2611,10 @@ function createWorkerHost(options) {
 			const require = loader.requireFrom(dirname$1(configPath));
 			const appBoot = require("@deepseek-ai/dsh-app-boot");
 			const cmdline = require("@deepseek-ai/dsh-cmdline");
-			const { patches, presetOverlay } = bootPatches(loader, mounted, configPath, root);
-			const ctx = await appBoot.boot("dsh-webworker", configPath, patches, (hostCtx) => {
+			const { patches, profile } = bootPatches(loader, mounted, configPath, root);
+			const profileConfig = join$1(profile.dir, "cordis.yml");
+			const ctx = await appBoot.boot("dsh-webworker", profileConfig, patches, (hostCtx) => {
+				hostCtx.provide("profileContext", profile);
 				hostCtx.loader.internal = loader.internal;
 				installLogSink(hostCtx, require);
 				cmdline.provideCmdline(hostCtx, {
@@ -2550,11 +2637,11 @@ function createWorkerHost(options) {
 			if (typertGateway === void 0) throw new Error("webworker host: the tree activated without a typertGateway service");
 			const handler = connection.createSharedFetchHandler("/api");
 			const usage = loader.usage();
-			console.info(`webworker host: tree active (modules=${String(usage.modules)}, data overlays=${String(overlays.length)}, preset root overlay=${presetOverlay ? "applied" : "already in roster"}, direct lane=connection.createSharedFetchHandler, als causality=${options.alsCausality === void 0 ? "inert" : "snapshot/restore"}, image lowering=${LOWERING_VERSION})`);
+			console.info(`webworker host: tree active (modules=${String(usage.modules)}, data overlays=${String(overlays.length)}, direct lane=connection.createSharedFetchHandler, als causality=${options.alsCausality === void 0 ? "inert" : "snapshot/restore"}, image lowering=${LOWERING_VERSION})`);
 			tunnel.serve({
 				directFetch: (request) => handler.fetch(request),
 				bootPayload: () => readBootPayload(ctx),
-				openStream: typertGateway.wireStream.open,
+				openStream: (endpoint, payload, uplink, signal) => typertGateway.wireStream.open(endpoint, payload, uplink, void 0, signal),
 				streamFailure: typertGateway.wireStream.failure
 			});
 		} catch (reason) {
@@ -2626,30 +2713,22 @@ function requireLoweredImage(vfs, path) {
 	if (lowered !== "dsh-worker-transform/1") throw new Error(`webworker host: image was lowered by ${String(lowered)}, this build runs ${LOWERING_VERSION}; rebuild the image`);
 }
 /**
-* The shipped preset root, as the application layer that owns the composition
-* supplies it.
-*
-* A launcher appends this root itself rather than writing it into the roster —
-* `apps/cli` does it in `composeProfile` (`profile-boot.ts:159-166`) because only
-* the application knows where its own presets sit. The worker's presets travel
-* in the image, so the same overlay names their virtual path. Patching replaces
-* a row's whole `config`, so the current one is read and spread, and a roster
-* that already names roots keeps them.
+* Prepare an editable VFS profile from the packed rows and deployment overlays.
+* ConfigEditor writes overrides beside the insertion rows; reconciliation starts
+* at the empty profile root and retains the Worker deployment overlays.
 * @param loader - Module loader, for the image's YAML reader.
 * @param vfs - Filesystem holding the composed configuration.
 * @param configPath - Composed configuration path.
 * @param root - Virtual root.
-* @returns Boot patches (preset root overlay, frontend serving off) and
-* whether the preset overlay was applied.
+* @returns Profile locations and effective boot patches.
 */
 function bootPatches(loader, vfs, configPath, root) {
 	const text = vfs.readFileSync(configPath, "utf8");
+	const include = loader.load(loader.resolve("@deepseek-ai/cordis-plugin-include", root));
+	const yaml = loader.load(loader.resolve("js-yaml", root));
 	let rows;
 	if (configPath.endsWith(".json")) rows = JSON.parse(text);
-	else {
-		const include = loader.load(loader.resolve("@deepseek-ai/cordis-plugin-include", root));
-		rows = loader.load(loader.resolve("js-yaml", root)).load(text, { schema: include.entryListSchema });
-	}
+	else rows = yaml.load(text, { schema: include.entryListSchema });
 	const find = (entries, id) => {
 		if (!Array.isArray(entries)) return void 0;
 		for (const entry of entries) {
@@ -2660,21 +2739,10 @@ function bootPatches(loader, vfs, configPath, root) {
 	};
 	const configOf = (row) => typeof row.config === "object" && row.config !== null && !Array.isArray(row.config) ? row.config : {};
 	const patches = [];
-	let presetOverlay = false;
-	const presets = find(rows, "agent-presets");
-	if (presets !== void 0 && configOf(presets).roots === void 0) {
-		presetOverlay = true;
-		patches.push({
-			id: "agent-presets",
-			config: {
-				...configOf(presets),
-				roots: [{
-					path: join$1(root, "config/agent-presets"),
-					trust: "system"
-				}]
-			}
-		});
-	}
+	for (const id of ["hmr", "plugin-manager"]) if (find(rows, id) !== void 0) patches.push({
+		id,
+		disabled: true
+	});
 	const jsonl = find(rows, "session-persistence-jsonl");
 	if (jsonl !== void 0) patches.push({
 		id: "session-persistence-jsonl",
@@ -2683,9 +2751,24 @@ function bootPatches(loader, vfs, configPath, root) {
 			compression: "none"
 		}
 	});
+	const dir = join$1(root, IMAGE_HOME_DIRECTORY, "profiles/preview");
+	const profile = {
+		name: "preview",
+		dir,
+		patchPath: join$1(dir, "cordis.patch.yml"),
+		installAnchor: join$1(dir, "package.json"),
+		cwd: root,
+		home: join$1(root, IMAGE_HOME_DIRECTORY),
+		startedBundles: [],
+		overlays: patches,
+		telemetryDisabledEnv: void 0
+	};
+	vfs.seed(join$1(dir, "package.json"), "{\"private\":true,\"dsh\":{\"profile\":{\"bundles\":[]}}}\n");
+	vfs.seed(join$1(dir, "cordis.yml"), "[]\n");
+	if (!vfs.existsSync(profile.patchPath)) vfs.seed(profile.patchPath, yaml.dump([{ insert: rows }], { schema: include.entryListSchema }));
 	return {
-		patches,
-		presetOverlay
+		patches: loader.load(loader.resolve("@deepseek-ai/dsh-app-boot", root)).readProfilePatches("dsh-webworker", profile),
+		profile
 	};
 }
 /**
@@ -5782,15 +5865,15 @@ var crypto_default = {
 * reaching public-address preflight must fail loud instead of inventing an
 * address or bypassing the native HTTP provider's SSRF policy.
 */
-var promises_exports$2 = /* @__PURE__ */ __exportAll({
+var promises_exports$3 = /* @__PURE__ */ __exportAll({
 	__esModule: () => true,
-	default: () => promises_default$2,
+	default: () => promises_default$3,
 	lookup: () => lookup
 });
 /** DNS lookup (unavailable in the worker host). */
 const lookup = notImplementedFail("node:dns/promises", "lookup");
 /** CommonJS default export: the members `require()` hands a caller of this module. */
-var promises_default$2 = { lookup };
+var promises_default$3 = { lookup };
 //#endregion
 //#region src/node/builtin_modules/implemented/events.ts
 var events_exports = /* @__PURE__ */ __exportAll({
@@ -11044,18 +11127,18 @@ var stream_exports = /* @__PURE__ */ __exportAll({
 	compose: () => compose,
 	default: () => streamDefault,
 	destroy: () => destroy,
-	finished: () => finished,
+	finished: () => finished$1,
 	getDefaultHighWaterMark: () => getDefaultHighWaterMark,
 	isDestroyed: () => isDestroyed,
 	isDisturbed: () => isDisturbed,
 	isErrored: () => isErrored,
 	isReadable: () => isReadable,
 	isWritable: () => isWritable,
-	pipeline: () => pipeline,
+	pipeline: () => pipeline$1,
 	promises: () => promises$1,
 	setDefaultHighWaterMark: () => setDefaultHighWaterMark
 });
-const { Duplex, PassThrough, Readable, Stream: StreamBase, Transform, Writable, addAbortSignal, compose, destroy, finished, isDisturbed, isErrored, isReadable, pipeline, promises: promises$1 } = (/* @__PURE__ */ __toESM(require_browser(), 1)).default;
+const { Duplex, PassThrough, Readable, Stream: StreamBase, Transform, Writable, addAbortSignal, compose, destroy, finished: finished$1, isDisturbed, isErrored, isReadable, pipeline: pipeline$1, promises: promises$1 } = (/* @__PURE__ */ __toESM(require_browser(), 1)).default;
 const { getDefaultHighWaterMark, isDestroyed, isWritable, setDefaultHighWaterMark } = StreamBase;
 if (getDefaultHighWaterMark(false) !== 64 * 1024) setDefaultHighWaterMark(false, 64 * 1024);
 /**
@@ -12609,7 +12692,7 @@ var fs_default = {
 * member set is checked against Node where it is built, on `promises` in
 * `../fs.ts`.
 */
-var promises_exports$1 = /* @__PURE__ */ __exportAll({
+var promises_exports$2 = /* @__PURE__ */ __exportAll({
 	Dirent: () => Dirent,
 	__esModule: () => true,
 	access: () => access,
@@ -12617,7 +12700,7 @@ var promises_exports$1 = /* @__PURE__ */ __exportAll({
 	chmod: () => chmod,
 	constants: () => constants$2,
 	cp: () => cp$1,
-	default: () => promises_default$1,
+	default: () => promises_default$2,
 	link: () => link,
 	lstat: () => lstat,
 	mkdir: () => mkdir$1,
@@ -12637,7 +12720,7 @@ var promises_exports$1 = /* @__PURE__ */ __exportAll({
 });
 /** The promise members of the VFS bridge, as `node:fs/promises` names them. */
 const { readFile, writeFile, appendFile, mkdir: mkdir$1, mkdtemp, readdir, stat: stat$1, lstat, realpath, rm: rm$1, unlink, rename, access, chmod, cp: cp$1, link, open: open$1, opendir, truncate, watch, constants: constants$2 } = promises;
-var promises_default$1 = promises;
+var promises_default$2 = promises;
 //#endregion
 //#region src/node/builtin_modules/implemented/http.ts
 var http_exports = /* @__PURE__ */ __exportAll({
@@ -13035,6 +13118,21 @@ var perf_hooks_default = {
 	PerformanceObserver
 };
 //#endregion
+//#region src/node/builtin_modules/implemented/stream/promises.ts
+/** Promise-based stream completion and pipelines from the shared readable-stream implementation. */
+var promises_exports$1 = /* @__PURE__ */ __exportAll({
+	__esModule: () => true,
+	default: () => promises_default$1,
+	finished: () => finished,
+	pipeline: () => pipeline
+});
+/** Shared stream completion promise, including abort and listener cleanup options. */
+const finished = promises$1.finished;
+/** Shared stream pipeline promise, including backpressure and error propagation. */
+const pipeline = promises$1.pipeline;
+/** CommonJS-compatible promise namespace. */
+var promises_default$1 = promises$1;
+//#endregion
 //#region src/node/builtin_modules/implemented/timers/promises.ts
 var promises_exports = /* @__PURE__ */ __exportAll({
 	__esModule: () => true,
@@ -13255,7 +13353,7 @@ function format(template, ...args) {
 	return rest.length === 0 ? substituted : `${substituted} ${rest.map((value) => inspect(value)).join(" ")}`;
 }
 /**
-* Structural deep equality, as `isDeepStrictEqual` defines it for plain data.
+* Structural deep equality over own enumerable properties, as `isDeepStrictEqual` defines it for plain data.
 * @param left - first value.
 * @param right - second value.
 * @returns true when both sides are structurally identical.
@@ -13267,7 +13365,7 @@ function isDeepStrictEqual(left, right) {
 	const leftKeys = Object.keys(left);
 	const rightKeys = Object.keys(right);
 	if (leftKeys.length !== rightKeys.length) return false;
-	return leftKeys.every((key) => key in right && isDeepStrictEqual(left[key], right[key]));
+	return leftKeys.every((key) => Object.hasOwn(right, key) && isDeepStrictEqual(left[key], right[key]));
 }
 /** Runtime type predicates (`node:util/types`), checked against the Node module of that name. */
 const types$1 = {
@@ -21402,6 +21500,17 @@ const koffi = {
 	call: notImplementedFail(MODULE$3, "call")
 };
 //#endregion
+//#region src/node/external_packages/libreoffice-kit.ts
+/** Office conversion requires a Node Host; the browser preview carries no engine assets. */
+var libreoffice_kit_exports = /* @__PURE__ */ __exportAll({ createConverter: () => createConverter });
+/**
+* Refuse converter creation with the kit's unavailable error code.
+* @returns A rejected promise consumed by the Host office-to-pdf provider.
+*/
+function createConverter() {
+	return Promise.reject(Object.assign(notAvailableError("@deepseek-ai/libreoffice-kit", "createConverter"), { code: "unavailable" }));
+}
+//#endregion
 //#region src/node/external_packages/node-pty.ts
 /**
 * `node-pty` stub: pseudo-terminals belong to the excluded surface. Terminal
@@ -21424,6 +21533,12 @@ var node_pty_default = {
 	open
 };
 //#endregion
+//#region src/node/external_packages/execa.ts
+/** Host package commands cannot install dependencies in the browser preview. */
+var execa_exports = /* @__PURE__ */ __exportAll({ execa: () => execa });
+/** Refuse external package commands in the worker host. */
+const execa = notImplementedFail("execa", "execa");
+//#endregion
 //#region src/node/external_packages/pi-ai.ts
 /**
 * `@earendil-works/pi-ai` stub, including its `/providers/all` and `/api/*.lazy`
@@ -21648,9 +21763,11 @@ const Server = WebSocketServer;
 const REPLACED_EXTERNAL_PACKAGES = [
 	"@earendil-works/pi-ai",
 	"@vscode/ripgrep",
+	"@deepseek-ai/libreoffice-kit",
 	"@deepseek-ai/node-addon-system/flock",
 	"koffi",
 	"node-pty",
+	"execa",
 	"sharp",
 	"ws"
 ];
@@ -21685,10 +21802,10 @@ const BUILTINS = {
 	buffer: () => buffer_exports,
 	child_process: () => child_process_exports,
 	crypto: () => crypto_exports,
-	"dns/promises": () => promises_exports$2,
+	"dns/promises": () => promises_exports$3,
 	events: () => events_exports,
 	fs: () => fs_exports,
-	"fs/promises": () => promises_exports$1,
+	"fs/promises": () => promises_exports$2,
 	http: () => http_exports,
 	module: () => module_exports,
 	net: () => net_exports,
@@ -21698,6 +21815,7 @@ const BUILTINS = {
 	perf_hooks: () => perf_hooks_exports,
 	sqlite: () => sqlite_exports,
 	stream: () => stream_exports,
+	"stream/promises": () => promises_exports$1,
 	"timers/promises": () => promises_exports,
 	tty: () => tty_exports,
 	url: () => url_exports,
@@ -21709,10 +21827,12 @@ const BUILTINS = {
 };
 /** Exact package or subpath specifiers served by worker stubs and fakes. */
 const EXTERNALS = {
+	"@deepseek-ai/libreoffice-kit": () => libreoffice_kit_exports,
 	"@deepseek-ai/node-addon-system/flock": () => node_addon_system_flock_exports,
 	"koffi": () => koffi_exports,
 	"sharp": () => sharp_exports,
 	"node-pty": () => node_pty_exports,
+	"execa": () => execa_exports,
 	"ws": () => ws_exports,
 	"@vscode/ripgrep": () => ripgrep_exports,
 	"@earendil-works/pi-ai": () => pi_ai_exports

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-experimental-webworker-runtime",
   "description": "Browser-only harness runtime: in-memory VFS, module transform and loader, postMessage tunnel, and the dedicated Web Worker assembly, with the Node-compatibility layer that lets the host tree run unchanged",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.7-alpha.1",
   "publishConfig": {
     "access": "public"
   },
@@ -34,35 +34,37 @@
     "buffer": "^6.0.3",
     "picomatch": "^4.0.4",
     "readable-stream": "^4.7.0",
-    "@deepseek-ai/dsh-util-crypto": "^0.1.6-alpha.1"
+    "@deepseek-ai/dsh-client-web": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-util-crypto": "^0.1.7-alpha.1"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-client-modules": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.6-alpha.1",
-    "@deepseek-ai/cordis": "^4.0.2"
+    "@deepseek-ai/cordis": "^4.0.3",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.4",
+    "@deepseek-ai/dsh-client-connection": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-modules": "^0.1.7-alpha.1"
   },
   "devDependencies": {
     "@types/picomatch": "^3.0.2",
     "@types/readable-stream": "^4.0.24",
     "chokidar": "^5.0.0",
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-bash-sandbox": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-api-gateway": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-file-upload": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-modules": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-local": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-projection": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subagent": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-subprocess-local": "^0.1.6-alpha.1",
-    "@deepseek-ai/node-addon-system": "^0.1.2"
+    "@deepseek-ai/cordis": "^4.0.3",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.4",
+    "@deepseek-ai/dsh-api-gateway": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-app-boot": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-bash-sandbox": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-file-upload": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-connection": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-modules": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-sandbox-local": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-session": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-session-projection": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-subagent": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-subprocess-local": "^0.1.7-alpha.1",
+    "@deepseek-ai/node-addon-system": "^0.1.2",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.7-alpha.1"
   },
   "files": [
     "lib/index.js",