@deepseek-ai/dsh-experimental-webworker-runtime 0.2.1-alpha.1 → 0.2.1-alpha.2

package/README.i18n.yaml

@@ -24,8 +24,8 @@
   en: ca75c51c89c2c9b0
   zh: 64715dc7e6d02f71
 /deepseek-ai-dsh-experimental-webworker-runtime/known-limitations-and-deferred-work:
-  en: dd2469d07c86127a
-  zh: efa1be38e57bdd1e
+  en: 1bc41bcc7a7e065e
+  zh: 9e9558ff06c508bc
 /deepseek-ai-dsh-experimental-webworker-runtime/known-limitations-and-deferred-work/dev-note:
   en: e67f633dc6fe7773
   zh: e88aeb617ffb74ea

package/README.md

@@ -54,6 +54,7 @@ None; this package neither assembles nor sends a provider request.
 - **The worker composition writes plaintext session logs** (`compression: 'none'` boot patch): it carries no Zstandard codec, so exported logs are `.jsonl`, never `.jsonl.zstd`.
 - **`node:dns/promises`, `node:vm`, `node:net`, `node:sqlite`, `node:worker_threads` are structural stubs**: every call reports its refusal on the console and throws. Rows needing native DNS, a real process, or realm isolation cannot run here.
 - **`node:assert/strict` supports truthiness assertions only**: for falsy values, the callable default and `ok` throw `ERR_ASSERTION` with the supplied message or generic text, or rethrow a supplied Error unchanged. Other assertion APIs are absent.
+- **Native TLS listeners require a Node Host**: the worker's `node:https.createServer` rejects activation rather than substituting plaintext. The preview's internal HTTP tunnel does not bind sockets; browser-facing HTTPS belongs to its deployment server.
 - **Desktop product telemetry is unavailable**: `got.post` reports an explicit worker-host refusal. Got and its Node HTTP dependencies are excluded from the browser image; Desktop reporting remains disabled in the preview composition.
 - **Host package commands are unavailable**: `execa` reports an explicit worker-host refusal; the preview cannot run pnpm, install plugins, or install native dependencies.
 - **PTC Node programs are unavailable**: the process shim exposes `/dsh/bin/node` as its executable identity so the provider can activate, but the Worker has neither a Node executable nor `stripTypeScriptTypes`. Program execution fails before launching a child.

package/README.zh.md

@@ -54,6 +54,7 @@ kind: "package-library"
 - **worker 组合写明文会话日志**（`compression: 'none'` boot patch）：不带 Zstandard 编解码器，导出日志是 `.jsonl`，不会是 `.jsonl.zstd`。
 - **`node:dns/promises`、`node:vm`、`node:net`、`node:sqlite`、`node:worker_threads` 是结构化 stub**：每次调用在 console 报告拒绝并抛出。需要原生 DNS、真进程或真 realm 隔离的行在此无法运行。
 - **`node:assert/strict` 仅支持真值断言**：对于假值，可调用的默认导出和 `ok` 使用传入的消息或通用文本抛出 `ERR_ASSERTION`，或原样抛出传入的 Error。其他断言 API 未提供。
+- **原生 TLS 监听器需要 Node Host**：worker 的 `node:https.createServer` 会拒绝激活，不会替换成明文。预览内部的 HTTP 隧道不绑定套接字；面向浏览器的 HTTPS 由部署服务器提供。
 - **桌面产品埋点不可用**：`got.post` 明确报告 worker host 不支持该调用。浏览器镜像不包含 Got 及其 Node HTTP 依赖；预览组合不启用桌面上报。
 - **宿主包管理命令不可用**：`execa` 明确报告 worker host 不支持该调用；预览无法运行 pnpm、安装插件或安装原生依赖。
 - **PTC Node 程序不可用**：process shim 用 `/dsh/bin/node` 表示可执行文件身份，使 provider 能够激活，但 Worker 既没有 Node 可执行文件，也没有 `stripTypeScriptTypes`。程序执行会在启动子进程前失败。

package/lib/index.js

@@ -732,6 +732,7 @@ const MODULE_PROXIES = {
 	"tty": "./node/builtin_modules/implemented/tty.ts",
 	"node:zlib": "./node/builtin_modules/implemented/zlib.ts",
 	"node:child_process": "./node/builtin_modules/implemented/child_process.ts",
+	"node:https": "./node/builtin_modules/mock/https.ts",
 	"node:dns/promises": "./node/builtin_modules/mock/dns/promises.ts",
 	"dns/promises": "./node/builtin_modules/mock/dns/promises.ts",
 	"node:net": "./node/builtin_modules/mock/net.ts",

package/lib/types/node/builtin_modules/implemented/os.d.ts

@@ -48,8 +48,7 @@ export declare function availableParallelism(): number;
 export declare function cpus(): CpuInfo[];
 /**
  * Network interfaces.
- * @returns an empty record — the worker webserver binds the loopback literal, so
- * no LAN address is ever derived.
+ * @returns an empty record — a worker has no view of the host's network.
  */
 export declare function networkInterfaces(): NodeJS.Dict<NetworkInterfaceInfo[]>;
 /** OS constants: only the signal table is read (terminal signal name mapping). */

package/lib/types/node/builtin_modules/mock/https.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Reject native TLS instead of serving plaintext for an HTTPS configuration.
+ * @returns Never; a browser worker cannot bind a TLS socket.
+ */
+export declare function createServer(): never;
+/** CommonJS interop marker for the worker module loader. */
+export declare const __esModule = true;
+/** CommonJS exports for the worker's explicit TLS-listener refusal. */
+declare const _default: {
+    createServer: typeof createServer;
+};
+export default _default;
+//# sourceMappingURL=https.d.ts.map

package/lib/types/node/external_packages/pi-ai.d.ts

@@ -6,26 +6,27 @@ export declare const createModels: (...args: never[]) => never;
 export declare const getSupportedThinkingLevels: (...args: never[]) => never;
 /** Context-overflow predicate (unavailable). */
 export declare const isContextOverflow: (...args: never[]) => never;
+/** Collection of every builtin provider (unavailable). */
+export declare const builtinModels: (...args: never[]) => never;
 /**
- * Installed catalog providers, read while `llm-pi-ai` activates. Each carries the
- * api-key auth marker the adapter filters on, and no models: the provider
- * directory therefore matches the served deployment while every request path
- * lands on a loud symbol above.
+ * Installed catalog providers, read while `llm-pi-ai` activates. `llm-pi-ai`
+ * registers the whole catalog as configurable the moment it mounts and rejects
+ * an empty registration, so these carry pi-ai's ids instead of being an empty
+ * list. Each has the api-key auth marker the adapter filters on, and no
+ * models, so every request path lands on a loud symbol above.
  * @returns one entry per builtin provider.
  */
 export declare function builtinProviders(): unknown[];
-/**
- * Provider route ids of the installed catalog. `llm-pi-ai` registers the whole
- * catalog as configurable the moment it mounts and rejects an empty
- * registration, so these are pi-ai's real ids rather than an empty list.
- * @returns the builtin provider ids.
- */
-export declare function getBuiltinProviders(): string[];
 /**
  * Models of one installed catalog provider.
  * @returns no models.
  */
 export declare function getBuiltinModels(): unknown[];
+/**
+ * Models of every type of one installed catalog provider.
+ * @returns no models.
+ */
+export declare function getAllBuiltinModels(): unknown[];
 /** Anthropic messages API binding (unavailable). */
 export declare const anthropicMessagesApi: (...args: never[]) => never;
 /** OpenAI completions API binding (unavailable). */
@@ -40,9 +41,10 @@ declare const _default: {
     createModels: (...args: never[]) => never;
     getSupportedThinkingLevels: (...args: never[]) => never;
     isContextOverflow: (...args: never[]) => never;
+    builtinModels: (...args: never[]) => never;
     builtinProviders: typeof builtinProviders;
     getBuiltinModels: typeof getBuiltinModels;
-    getBuiltinProviders: typeof getBuiltinProviders;
+    getAllBuiltinModels: typeof getAllBuiltinModels;
     anthropicMessagesApi: (...args: never[]) => never;
     openAICompletionsApi: (...args: never[]) => never;
     openAIResponsesApi: (...args: never[]) => never;

package/lib/types/worker-host.d.ts

@@ -84,8 +84,7 @@ export interface WorkerHostOptions {
     readonly configPath?: string;
     /**
      * Inner arguments the tree parses. The default binds the web server to the
-     * loopback authority the tunnel synthesizes, which also keeps
-     * `networkInterfaces()` out of the trust snapshot.
+     * loopback authority the tunnel synthesizes.
      */
     readonly cmdlineArgs?: readonly string[];
     /** Port named on the default command line; defaults to {@link DEFAULT_PORT}. */

package/lib/worker.js

@@ -4825,7 +4825,7 @@ function ok(value, message) {
 /** Callable truthiness assertion with the identical `ok` method; other assertion APIs are absent. */
 const assert = Object.assign(ok, { ok });
 //#endregion
-//#region ../../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/_u64.js
+//#region ../../../node_modules/.pnpm/@noble+hashes@2.4.0/node_modules/@noble/hashes/_u64.js
 const U32_MASK64 = /* @__PURE__ */ (() => BigInt(2 ** 32 - 1))();
 const _32n = /* @__PURE__ */ BigInt(32);
 function fromBig(n, le = false) {
@@ -4876,7 +4876,7 @@ const add4H = (low, Ah, Bh, Ch, Dh) => Ah + Bh + Ch + Dh + (low / 2 ** 32 | 0) |
 const add5L = (Al, Bl, Cl, Dl, El) => (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0) + (Dl >>> 0) + (El >>> 0);
 const add5H = (low, Ah, Bh, Ch, Dh, Eh) => Ah + Bh + Ch + Dh + Eh + (low / 2 ** 32 | 0) | 0;
 //#endregion
-//#region ../../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/utils.js
+//#region ../../../node_modules/.pnpm/@noble+hashes@2.4.0/node_modules/@noble/hashes/utils.js
 /**
 * Checks if something is Uint8Array. Be careful: nodejs Buffer will return true.
 * @param a - value to test
@@ -4936,6 +4936,12 @@ function abytes(value, length, title = "") {
 const aobject = (value, label) => {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new TypeError((label === "object" ? "" : `"${label}" `) + "expected object, got type=" + typeof value);
 };
+const aopts = (value, label) => {
+	aobject(value, label);
+	const proto = Object.getPrototypeOf(value);
+	if (proto !== Object.prototype && proto !== null) throw new TypeError(`"${label}" expected plain object`);
+	if (Object.hasOwn(value, "__proto__")) throw new TypeError(`"${label}.__proto__" is not allowed`);
+};
 /**
 * Asserts a hash instance has not been destroyed or finished.
 * @param instance - hash instance to validate
@@ -5033,7 +5039,7 @@ function rotl(word, shift) {
 * @param defaults - base option object
 * @param opts - user overrides
 * @param title - label included in thrown override errors
-* @returns Merged option object. The merge mutates `defaults` in place.
+* @returns Fresh merged option object with a null prototype.
 * @throws On wrong argument types. {@link TypeError}
 * @example
 * Merge user overrides onto default options.
@@ -5042,9 +5048,9 @@ function rotl(word, shift) {
 * ```
 */
 function checkOpts(defaults, opts, title = "opts") {
-	aobject(defaults, "defaults");
-	if (opts !== void 0) aobject(opts, title);
-	return Object.assign(defaults, opts);
+	aopts(defaults, "defaults");
+	if (opts !== void 0) aopts(opts, title);
+	return Object.assign(Object.create(null), defaults, opts);
 }
 /**
 * Creates a callable hash function from a stateful class constructor.
@@ -5102,7 +5108,7 @@ const oidNist = (suffix) => ({ oid: Uint8Array.from([
 	suffix
 ]) });
 //#endregion
-//#region ../../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/_md.js
+//#region ../../../node_modules/.pnpm/@noble+hashes@2.4.0/node_modules/@noble/hashes/_md.js
 /**
 * Internal Merkle-Damgard hash utils.
 * @module
@@ -5288,7 +5294,7 @@ const SHA512_IV = /* @__PURE__ */ Uint32Array.from([
 	327033209
 ]);
 //#endregion
-//#region ../../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/legacy.js
+//#region ../../../node_modules/.pnpm/@noble+hashes@2.4.0/node_modules/@noble/hashes/legacy.js
 /**
 
 SHA1 (RFC 3174), MD5 (RFC 1321), and RIPEMD160 legacy, weak hash functions.
@@ -5396,7 +5402,7 @@ var _SHA1 = class extends HashMD {
 */
 const sha1 = /* @__PURE__ */ createHasher(() => new _SHA1());
 //#endregion
-//#region ../../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/sha2.js
+//#region ../../../node_modules/.pnpm/@noble+hashes@2.4.0/node_modules/@noble/hashes/sha2.js
 /**
 * SHA2 hash function. A.k.a. sha256, sha384, sha512, sha512_224, sha512_256.
 * SHA256 is the fastest hash implementable in JS, even faster than Blake3.
@@ -12824,7 +12830,7 @@ var http_exports = /* @__PURE__ */ __exportAll({
 	Server: () => FakeServer,
 	ServerResponse: () => ServerResponse,
 	__esModule: () => true,
-	createServer: () => createServer$1,
+	createServer: () => createServer$2,
 	default: () => http_default,
 	get: () => get,
 	request: () => request,
@@ -12934,7 +12940,7 @@ var ServerResponse = class {};
 * @param listener - the request listener the webserver installs.
 * @returns the fake Server.
 */
-function createServer$1(listener) {
+function createServer$2(listener) {
 	if (listener !== void 0) {
 		captured = listener;
 		for (const resolve of waiting) resolve(listener);
@@ -12973,7 +12979,7 @@ const STATUS_CODES = {
 };
 /** CommonJS default export: the members `require()` hands a caller of this module. */
 var http_default = {
-	createServer: createServer$1,
+	createServer: createServer$2,
 	request,
 	get,
 	STATUS_CODES,
@@ -12981,6 +12987,23 @@ var http_default = {
 	ServerResponse
 };
 //#endregion
+//#region src/node/builtin_modules/mock/https.ts
+/** Native TLS listeners are unavailable in a browser worker's HTTP tunnel. */
+var https_exports = /* @__PURE__ */ __exportAll({
+	__esModule: () => true,
+	createServer: () => createServer$1,
+	default: () => https_default
+});
+/**
+* Reject native TLS instead of serving plaintext for an HTTPS configuration.
+* @returns Never; a browser worker cannot bind a TLS socket.
+*/
+function createServer$1() {
+	throw notAvailableError("node:https", "createServer");
+}
+/** CommonJS exports for the worker's explicit TLS-listener refusal. */
+var https_default = { createServer: createServer$1 };
+//#endregion
 //#region src/node/builtin_modules/implemented/module.ts
 /**
 * `node:module` for the worker: `createRequire` hands out the worker module
@@ -13150,8 +13173,7 @@ function cpus() {
 }
 /**
 * Network interfaces.
-* @returns an empty record — the worker webserver binds the loopback literal, so
-* no LAN address is ever derived.
+* @returns an empty record — a worker has no view of the host's network.
 */
 function networkInterfaces() {
 	return {};
@@ -16951,7 +16973,7 @@ var require_shell = /* @__PURE__ */ __commonJSMin(((exports) => {
 	]);
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/lib/constants.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/lib/constants.js
 var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const WIN_SLASH = "\\\\/";
 	const WIN_NO_SLASH = `[^${WIN_SLASH}]`;
@@ -17120,7 +17142,7 @@ var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/lib/utils.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/lib/utils.js
 var require_utils = /* @__PURE__ */ __commonJSMin(((exports) => {
 	const { REGEX_BACKSLASH, REGEX_REMOVE_BACKSLASH, REGEX_SPECIAL_CHARS, REGEX_SPECIAL_CHARS_GLOBAL } = require_constants();
 	exports.isObject = (val) => val !== null && typeof val === "object" && !Array.isArray(val);
@@ -17168,7 +17190,7 @@ var require_utils = /* @__PURE__ */ __commonJSMin(((exports) => {
 	};
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/lib/scan.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/lib/scan.js
 var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const utils = require_utils();
 	const { CHAR_ASTERISK, CHAR_AT, CHAR_BACKWARD_SLASH, CHAR_COMMA, CHAR_DOT, CHAR_EXCLAMATION_MARK, CHAR_FORWARD_SLASH, CHAR_LEFT_CURLY_BRACE, CHAR_LEFT_PARENTHESES, CHAR_LEFT_SQUARE_BRACKET, CHAR_PLUS, CHAR_QUESTION_MARK, CHAR_RIGHT_CURLY_BRACE, CHAR_RIGHT_PARENTHESES, CHAR_RIGHT_SQUARE_BRACKET } = require_constants();
@@ -17197,7 +17219,7 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const scan = (input, options) => {
 		const opts = options || {};
 		const length = input.length - 1;
-		const scanToEnd = opts.parts === true || opts.scanToEnd === true;
+		const scanToEnd = opts.parts === true || opts.tokens === true || opts.scanToEnd === true;
 		const slashes = [];
 		const tokens = [];
 		const parts = [];
@@ -17300,14 +17322,18 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					finished = true;
 					if (code === CHAR_EXCLAMATION_MARK && index === start) negatedExtglob = true;
 					if (scanToEnd === true) {
+						let parens = 0;
 						while (eos() !== true && (code = advance())) {
 							if (code === CHAR_BACKWARD_SLASH) {
 								backslashes = token.backslashes = true;
-								code = advance();
+								advance();
 								continue;
 							}
-							if (code === CHAR_RIGHT_PARENTHESES) {
-								isGlob = token.isGlob = true;
+							if (code === CHAR_LEFT_PARENTHESES) {
+								parens++;
+								continue;
+							}
+							if (code === CHAR_RIGHT_PARENTHESES && --parens === 0) {
 								finished = true;
 								break;
 							}
@@ -17355,13 +17381,18 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			if (opts.noparen !== true && code === CHAR_LEFT_PARENTHESES) {
 				isGlob = token.isGlob = true;
 				if (scanToEnd === true) {
+					let parens = 1;
 					while (eos() !== true && (code = advance())) {
-						if (code === CHAR_LEFT_PARENTHESES) {
+						if (code === CHAR_BACKWARD_SLASH) {
 							backslashes = token.backslashes = true;
-							code = advance();
+							advance();
 							continue;
 						}
-						if (code === CHAR_RIGHT_PARENTHESES) {
+						if (code === CHAR_LEFT_PARENTHESES) {
+							parens++;
+							continue;
+						}
+						if (code === CHAR_RIGHT_PARENTHESES && --parens === 0) {
 							finished = true;
 							break;
 						}
@@ -17424,7 +17455,7 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		if (opts.parts === true || opts.tokens === true) {
 			let prevIndex;
 			for (let idx = 0; idx < slashes.length; idx++) {
-				const n = prevIndex ? prevIndex + 1 : start;
+				const n = prevIndex !== void 0 ? prevIndex + 1 : start;
 				const i = slashes[idx];
 				const value = input.slice(n, i);
 				if (opts.tokens) {
@@ -17435,18 +17466,19 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					depth(tokens[idx]);
 					state.maxDepth += tokens[idx].depth;
 				}
-				if (idx !== 0 || value !== "") parts.push(value);
-				prevIndex = i;
-			}
-			if (prevIndex && prevIndex + 1 < input.length) {
-				const value = input.slice(prevIndex + 1);
-				parts.push(value);
-				if (opts.tokens) {
-					tokens[tokens.length - 1].value = value;
-					depth(tokens[tokens.length - 1]);
-					state.maxDepth += tokens[tokens.length - 1].depth;
+				if (i >= start) {
+					parts.push(value);
+					prevIndex = i;
 				}
 			}
+			const n = prevIndex !== void 0 ? prevIndex + 1 : start;
+			const value = input.slice(n);
+			parts.push(value);
+			if (opts.tokens && prevIndex && prevIndex + 1 < input.length) {
+				tokens[tokens.length - 1].value = value;
+				depth(tokens[tokens.length - 1]);
+				state.maxDepth += tokens[tokens.length - 1].depth;
+			}
 			state.slashes = slashes;
 			state.parts = parts;
 		}
@@ -17455,7 +17487,7 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = scan;
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/lib/parse.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/lib/parse.js
 var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const constants = require_constants();
 	const utils = require_utils();
@@ -17610,7 +17642,10 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			}
 		}
 	};
-	const getStarExtglobSequenceOutput = (pattern) => {
+	const buildCharClassStar = (chars) => {
+		return `${chars.length === 1 ? utils.escapeRegex(chars[0]) : `[${chars.map((ch) => utils.escapeRegex(ch)).join("")}]`}*`;
+	};
+	const getStarExtglobSequenceChars = (pattern) => {
 		let index = 0;
 		const chars = [];
 		while (index < pattern.length) {
@@ -17624,7 +17659,7 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			index += match.end + 1;
 		}
 		if (chars.length < 1) return;
-		return `${chars.length === 1 ? utils.escapeRegex(chars[0]) : `[${chars.map((ch) => utils.escapeRegex(ch)).join("")}]`}*`;
+		return chars;
 	};
 	const repeatedExtglobRecursion = (pattern) => {
 		let depth = 0;
@@ -17644,14 +17679,28 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		if (branches.length > 1) {
 			if (branches.some((branch) => branch === "") || branches.some((branch) => /^[*?]+$/.test(branch)) || hasRepeatedCharPrefixOverlap(branches)) return { risky: true };
 		}
+		const safeChars = [];
+		let sawStarSequence = false;
+		let combinable = true;
 		for (const branch of branches) {
-			const safeOutput = getStarExtglobSequenceOutput(branch);
-			if (safeOutput) return {
-				risky: true,
-				safeOutput
-			};
+			const chars = getStarExtglobSequenceChars(branch);
+			if (chars) {
+				sawStarSequence = true;
+				safeChars.push(...chars);
+				continue;
+			}
+			const literal = normalizeSimpleBranch(branch);
+			if (literal && literal.length === 1) {
+				safeChars.push(literal);
+				continue;
+			}
+			combinable = false;
 			if (repeatedExtglobRecursion(branch) > max) return { risky: true };
 		}
+		if (sawStarSequence) return combinable ? {
+			risky: true,
+			safeOutput: buildCharClassStar([...new Set(safeChars)])
+		} : { risky: true };
 		return { risky: false };
 	};
 	/**
@@ -18336,6 +18385,7 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					rest = rest.slice(3);
 					consume("/**", 3);
 				}
+				const isEnd = eos() || state.parens > 0 && rest === ")".repeat(state.parens) && !extglobs.some((extglob) => extglob.type === "negate");
 				if (prior.type === "bos" && eos()) {
 					prev.type = "globstar";
 					prev.value += value;
@@ -18345,7 +18395,7 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					consume(value);
 					continue;
 				}
-				if (prior.type === "slash" && prior.prev.type !== "bos" && !afterStar && eos()) {
+				if (prior.type === "slash" && prior.prev.type !== "bos" && !afterStar && isEnd) {
 					state.output = state.output.slice(0, -(prior.output + prev.output).length);
 					prior.output = `(?:${prior.output}`;
 					prev.type = "globstar";
@@ -18510,7 +18560,7 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = parse;
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/lib/picomatch.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/lib/picomatch.js
 var require_picomatch$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const scan = require_scan();
 	const parse = require_parse();
@@ -18531,6 +18581,18 @@ var require_picomatch$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	* const isMatch = picomatch('*.!(*a)');
 	* console.log(isMatch('a.a')); //=> false
 	* console.log(isMatch('a.b')); //=> true
+	*
+	* // For environments without `node.js`, `picomatch/posix` provides you a dependency-free matcher, without automatic OS detection.
+	* const picomatch = require('picomatch/posix');
+	* // the same API, defaulting to posix paths
+	* const isMatch = picomatch('a/*');
+	* console.log(isMatch('a\\b')); //=> false
+	* console.log(isMatch('a/b')); //=> true
+	*
+	* // you can still configure the matcher function to accept windows paths
+	* const isMatch = picomatch('a/*', { options: windows });
+	* console.log(isMatch('a\\b')); //=> true
+	* console.log(isMatch('a/b')); //=> true
 	* ```
 	* @name picomatch
 	* @param {String|Array} `globs` One or more glob patterns.
@@ -18649,8 +18711,8 @@ var require_picomatch$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	* @return {Boolean}
 	* @api public
 	*/
-	picomatch.matchBase = (input, glob, options) => {
-		return (glob instanceof RegExp ? glob : picomatch.makeRe(glob, options)).test(utils.basename(input));
+	picomatch.matchBase = (input, glob, options, posix = options && options.windows) => {
+		return (glob instanceof RegExp ? glob : picomatch.makeRe(glob, options)).test(utils.basename(input, { windows: posix }));
 	};
 	/**
 	* Returns true if **any** of the given glob `patterns` match the specified `string`.
@@ -18810,7 +18872,7 @@ var require_picomatch$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = picomatch;
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/index.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/index.js
 var require_picomatch = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const pico = require_picomatch$1();
 	const utils = require_utils();
@@ -21653,20 +21715,22 @@ const got = { post: notImplementedFail("got", "post") };
 * statically at module scope, so the row cannot mount without it.
 *
 * Every symbol `llm-pi-ai` imports by name is present: a missing CommonJS symbol
-* would surface as `undefined` at call time instead of a link error. The three catalog readers
-* return empty collections rather than throwing — the row reads them while it
-* activates, and "this deployment ships no pi-ai provider" is the truth here.
-* Everything on a request path is loud.
+* would surface as `undefined` at call time instead of a link error. The row
+* reads the catalog while it activates, so the provider reader returns
+* providers without models and the two model readers return empty collections
+* instead of throwing: this deployment serves no pi-ai model. Everything on a
+* request path is loud.
 */
 var pi_ai_exports = /* @__PURE__ */ __exportAll({
 	__esModule: () => true,
 	anthropicMessagesApi: () => anthropicMessagesApi,
+	builtinModels: () => builtinModels,
 	builtinProviders: () => builtinProviders,
 	createModels: () => createModels,
 	createProvider: () => createProvider,
 	default: () => pi_ai_default,
+	getAllBuiltinModels: () => getAllBuiltinModels,
 	getBuiltinModels: () => getBuiltinModels,
-	getBuiltinProviders: () => getBuiltinProviders,
 	getSupportedThinkingLevels: () => getSupportedThinkingLevels,
 	isContextOverflow: () => isContextOverflow,
 	openAICompletionsApi: () => openAICompletionsApi,
@@ -21681,7 +21745,13 @@ const createModels = notImplementedFail(MODULE$1, "createModels");
 const getSupportedThinkingLevels = notImplementedFail(MODULE$1, "getSupportedThinkingLevels");
 /** Context-overflow predicate (unavailable). */
 const isContextOverflow = notImplementedFail(MODULE$1, "isContextOverflow");
-/** Builtin provider ids of pi-ai 0.84.2, in catalog order. */
+/** Collection of every builtin provider (unavailable). */
+const builtinModels = notImplementedFail(MODULE$1, "builtinModels");
+/**
+* Builtin provider ids as pi-ai 0.84.2 listed them, in catalog order. The list
+* is a fixed copy that pi-ai upgrades do not regenerate, so it omits providers
+* added since.
+*/
 const BUILTIN_PROVIDER_IDS = [
 	"amazon-bedrock",
 	"ant-ling",
@@ -21724,10 +21794,11 @@ const BUILTIN_PROVIDER_IDS = [
 	"zai-coding-cn"
 ];
 /**
-* Installed catalog providers, read while `llm-pi-ai` activates. Each carries the
-* api-key auth marker the adapter filters on, and no models: the provider
-* directory therefore matches the served deployment while every request path
-* lands on a loud symbol above.
+* Installed catalog providers, read while `llm-pi-ai` activates. `llm-pi-ai`
+* registers the whole catalog as configurable the moment it mounts and rejects
+* an empty registration, so these carry pi-ai's ids instead of being an empty
+* list. Each has the api-key auth marker the adapter filters on, and no
+* models, so every request path lands on a loud symbol above.
 * @returns one entry per builtin provider.
 */
 function builtinProviders() {
@@ -21739,19 +21810,17 @@ function builtinProviders() {
 	}));
 }
 /**
-* Provider route ids of the installed catalog. `llm-pi-ai` registers the whole
-* catalog as configurable the moment it mounts and rejects an empty
-* registration, so these are pi-ai's real ids rather than an empty list.
-* @returns the builtin provider ids.
+* Models of one installed catalog provider.
+* @returns no models.
 */
-function getBuiltinProviders() {
-	return [...BUILTIN_PROVIDER_IDS];
+function getBuiltinModels() {
+	return [];
 }
 /**
-* Models of one installed catalog provider.
+* Models of every type of one installed catalog provider.
 * @returns no models.
 */
-function getBuiltinModels() {
+function getAllBuiltinModels() {
 	return [];
 }
 /** Anthropic messages API binding (unavailable). */
@@ -21766,9 +21835,10 @@ var pi_ai_default = {
 	createModels,
 	getSupportedThinkingLevels,
 	isContextOverflow,
+	builtinModels,
 	builtinProviders,
 	getBuiltinModels,
-	getBuiltinProviders,
+	getAllBuiltinModels,
 	anthropicMessagesApi,
 	openAICompletionsApi,
 	openAIResponsesApi
@@ -21915,6 +21985,7 @@ const BUILTINS = {
 	fs: () => fs_exports,
 	"fs/promises": () => promises_exports$2,
 	http: () => http_exports,
+	https: () => https_exports,
 	module: () => module_exports,
 	net: () => net_exports,
 	os: () => os_exports,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-experimental-webworker-runtime",
   "description": "Browser-only harness runtime: in-memory VFS, module transform and loader, postMessage tunnel, and the dedicated Web Worker assembly, with the Node-compatibility layer that lets the host tree run unchanged",
-  "version": "0.2.1-alpha.1",
+  "version": "0.2.1-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -28,43 +28,43 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@noble/hashes": "^2.3.0",
+    "@deepseek-ai/dsh-util-crypto": "0.2.1-alpha.2",
+    "@noble/hashes": "^2.4.0",
     "@yarnpkg/parsers": "^3.1.0",
-    "acorn": "^8.17.0",
+    "acorn": "^8.18.0",
     "buffer": "^6.0.3",
-    "picomatch": "^4.0.4",
+    "picomatch": "^4.0.7",
     "readable-stream": "^4.7.0",
-    "@deepseek-ai/dsh-util-crypto": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-client-web": "0.2.1-alpha.1"
+    "@deepseek-ai/dsh-client-web": "0.2.1-alpha.2"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
     "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-client-modules": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.1"
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-modules": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.2"
   },
   "devDependencies": {
-    "@types/picomatch": "^3.0.2",
-    "@types/readable-stream": "^4.0.24",
-    "chokidar": "^5.0.0",
     "@deepseek-ai/cordis": "~4.0.5-alpha.1",
     "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
-    "@deepseek-ai/dsh-api-gateway": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-app-boot": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-client-file-upload": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-client-modules": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-sandbox-local": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-bash-sandbox": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-subagent": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-subprocess-local": "0.2.1-alpha.1",
-    "@deepseek-ai/node-addon-system": "~0.1.2"
+    "@deepseek-ai/dsh-api-gateway": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-app-boot": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-bash-sandbox": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-file-upload": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-client-modules": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-subagent": "0.2.1-alpha.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.2.1-alpha.2",
+    "@deepseek-ai/node-addon-system": "~0.1.2",
+    "@types/picomatch": "^4.0.3",
+    "@types/readable-stream": "^4.0.24",
+    "chokidar": "^5.0.0"
   },
   "files": [
     "lib/index.js",