@deepseek-ai/dsh-experimental-webworker-runtime 0.2.1-alpha.1 → 0.2.1-alpha.3

package/README.i18n.yaml

@@ -15,8 +15,8 @@
   en: 4e53164159b5ce41
   zh: 89582dc0294d0776
 /deepseek-ai-dsh-experimental-webworker-runtime/use-this-package:
-  en: 6dd3d8495bc6ee61
-  zh: 71f7da310233a37b
+  en: aed3c07b75b29e34
+  zh: b609ae0f5796aa34
 /deepseek-ai-dsh-experimental-webworker-runtime/model-experience:
   en: 61fce9b4c7dc96e6
   zh: dc2d931063a38327
@@ -24,8 +24,8 @@
   en: ca75c51c89c2c9b0
   zh: 64715dc7e6d02f71
 /deepseek-ai-dsh-experimental-webworker-runtime/known-limitations-and-deferred-work:
-  en: dd2469d07c86127a
-  zh: efa1be38e57bdd1e
+  en: 7a473e73cc9449f9
+  zh: 2752c65ef3a33463
 /deepseek-ai-dsh-experimental-webworker-runtime/known-limitations-and-deferred-work/dev-note:
   en: e67f633dc6fe7773
   zh: e88aeb617ffb74ea

package/README.md

@@ -32,7 +32,7 @@ Three build artifacts and one source-owned process layer:
 - **`src/shell/` (the worker's own process layer)** — a browser worker cannot fork, so `node:child_process` is not a stub but an implementation: `spawn` starts the command in its own Web Worker — this same bundle, told by its first frame to be a shell process — and reports it through the `ChildProcess` surface the subprocess service consumes. The command runs off the host's thread, `SIGKILL` terminates it whatever it is doing, and it reaches the VFS only by message (the host serves those frames). Worker platform executables preserve native-package protocols such as Landlock without replacing their JavaScript packages or coupling their implementations to `node:child_process`; `xdg-open` sends one VFS text file to the page's read-only viewer, so desktop-opener actions such as **Open configuration file** show the file in the page; ordinary commands use the package's evaluator and coreutils command table. The grammar is `@yarnpkg/parsers`' `parseShell`, while `execSync`/`fork` still refuse because they need a real process.
 - **`lib/client.js` (page half)** — startup has two independent stages. `chooseWorkerHostSource({ image?, fixtureManifest? })` optionally owns the boot barrier and fixture manifest: without `preview-fixture` it waits at the source chooser, while a valid query selects directly; either path returns ordered overlays. `connectWorkerHost(worker, { image?, overlays? })` remains the public base-runtime connector; callers that skip the chooser get an empty overlay list. `apps/web` invokes both and supplies its statically bundled Worker. The opening `init` frame carries the base and ordered overlay URLs, the boot payload delivers the structured index-injection table, and `applyIndexInjections` executes it before the shell entry runs. Script preload rows are advisory and skipped because `/plugins` resources resolve only through the tunnel; `loadBundle` fetches each combo on first demand, embeds its tunnel-only source map as a Base64 data URL, and executes the script as a Blob. The worker's unsolicited `view-text` frame opens the page's modal text viewer. The tunnel also exposes fetch-shaped transport, the independent file-upload carrier, and the API client. Request frames preserve Blob bodies through structured clone and transfer `ReadableStream<Uint8Array>` ownership. The Host Worker streams both forms into the route, so neither browser thread creates a complete byte array for a generic-file upload. A Remote stream's uplink crosses as `stream-uplink-item` / `stream-uplink-end` frames into an unbounded `TunnelUplink` that drops items arriving after `end`: the page and its worker are one trusted same-origin boundary, so the Host inbox cap does not apply.
 
-Acceptance lives in `apps/web/tests/preview-boot.e2e.ts`, which serves the real built pages and drives the pre-boot chooser plus Worker activation in headless Chromium. The empty selection exercises first-run startup. The `vfs-example` overlay supplies ordinary workspace files and plaintext persistence artifacts for cold Workspace/Session discovery, tool presentation, subagent navigation, and history paging without a model request. The [packer](../webworker-packer/README.md) prepares current-generation successors from committed historical logs in Node; those source logs remain byte-identical in the overlay. The fixture generator owns the acceptance test's current projection cache. The chooser reserves WebFS as a separate user-authorized source; that provider does not read the built-in fixture.
+Acceptance lives in `apps/web/tests/preview-boot.e2e.ts`, which serves the real built pages and drives the pre-boot chooser plus Worker activation in headless Chromium. The empty selection exercises first-run startup. The `vfs-example` overlay supplies ordinary workspace files and plaintext persistence artifacts for cold Workspace/Session discovery, tool presentation, subagent navigation, and history paging without a model request. The showcase mixes empty, whitespace-only, and non-empty reasoning with a long multiline command and a parent-path file link; these are authored fixtures, not live model output. The [packer](../webworker-packer/README.md) prepares current-generation successors from committed historical logs in Node; those source logs remain byte-identical in the overlay. The fixture generator owns the acceptance test's current projection cache. The chooser reserves WebFS as a separate user-authorized source; that provider does not read the built-in fixture.
 
 The [built-bundle import sweep](tests/compile/transform-corpus-check.ts) checks bare Node imports after the library build. Its Dockkit exception accepts Node’s unknown-`.css`-extension refusal for any stylesheet rather than one pinned path; another extension, error code, or message, and an unexpectedly successful exempt import, remain errors.
 
@@ -54,8 +54,10 @@ None; this package neither assembles nor sends a provider request.
 - **The worker composition writes plaintext session logs** (`compression: 'none'` boot patch): it carries no Zstandard codec, so exported logs are `.jsonl`, never `.jsonl.zstd`.
 - **`node:dns/promises`, `node:vm`, `node:net`, `node:sqlite`, `node:worker_threads` are structural stubs**: every call reports its refusal on the console and throws. Rows needing native DNS, a real process, or realm isolation cannot run here.
 - **`node:assert/strict` supports truthiness assertions only**: for falsy values, the callable default and `ok` throw `ERR_ASSERTION` with the supplied message or generic text, or rethrow a supplied Error unchanged. Other assertion APIs are absent.
+- **Native TLS listeners require a Node Host**: the worker's `node:https.createServer` rejects activation rather than substituting plaintext. The preview's internal HTTP tunnel does not bind sockets; browser-facing HTTPS belongs to its deployment server.
 - **Desktop product telemetry is unavailable**: `got.post` reports an explicit worker-host refusal. Got and its Node HTTP dependencies are excluded from the browser image; Desktop reporting remains disabled in the preview composition.
 - **Host package commands are unavailable**: `execa` reports an explicit worker-host refusal; the preview cannot run pnpm, install plugins, or install native dependencies.
+- **pi-ai model requests are unavailable**: the replacement exposes a fixed subset of installed provider identifiers with no models, allowing the adapter to register configuration metadata. Its identifiers must stay valid when pi-ai is upgraded; inference entry points report an explicit worker-host refusal.
 - **PTC Node programs are unavailable**: the process shim exposes `/dsh/bin/node` as its executable identity so the provider can activate, but the Worker has neither a Node executable nor `stripTypeScriptTypes`. Program execution fails before launching a child.
 - **Office conversion requires a Node Host**: the LibreOffice kit replacement rejects converter creation with `unavailable`. The browser image excludes the kit and its engine dependencies; the Office preview reports that conversion is unavailable.
 - **Filesystem watchers observe only the mounted VFS**: image seeding is silent and the VFS has no symlinks or external writers. `persistent`, `ref()`, and `unref()` preserve the Node API but cannot control a dedicated Worker's lifetime because browsers expose no ref-counted event loop.

package/README.zh.md

@@ -32,7 +32,7 @@ kind: "package-library"
 - **`src/shell/`（worker 自己的进程层）**——浏览器 worker 无法 fork，所以 `node:child_process` 不是 stub 而是实现：`spawn` 把命令放进它自己的 Web Worker——就是这同一个束，由首帧告诉它「你是 shell 进程」——并以 subprocess 服务消费的 `ChildProcess` 面报告结果。命令不占宿主线程，`SIGKILL` 不管它在干什么都能终止它，而它只能靠消息触达 VFS（由宿主应答这些帧）。Worker 平台 executable 在不替换 JavaScript 包、也不把具体实现耦合进 `node:child_process` 的情况下保持 Landlock 等 native 包协议；`xdg-open` 把一个 VFS 文本文件交给页面的只读查看器，因此 **打开配置文件** 等桌面打开操作会在页面内显示该文件；普通命令使用本包的求值器与 coreutils 命令表。语法来自 `@yarnpkg/parsers` 的 `parseShell`，而 `execSync`/`fork` 依然拒绝，因为它们需要真进程。
 - **`lib/client.js`（页面半）**——启动分为相互独立的两段。`chooseWorkerHostSource({ image?, fixtureManifest? })` 可选地拥有 boot barrier 与 fixture manifest：没有 `preview-fixture` 时停在来源选择面板，合法 query 则直接选择；两条路径都返回按序排列的 overlays。`connectWorkerHost(worker, { image?, overlays? })` 仍是公开的基础运行态连接器；调用方跳过选择器时 overlay 列表为空。`apps/web` 调用这两段并提供静态打包的 Worker。开局 `init` 帧携带基础镜像与按序排列的 overlay URL，boot 载荷送达结构化 index 注入表，`applyIndexInjections` 在壳入口运行前逐行执行。脚本 preload 行只是提示，因此会被跳过：`/plugins` 资源只能经 tunnel 解析，`loadBundle` 会在首次需要时获取 combo、把仅 tunnel 可达的 sourcemap 内嵌为 Base64 data URL，再以 Blob 执行脚本。worker 主动发出的 `view-text` 帧会打开页面的模态文本查看器。Tunnel 还暴露 fetch 形式的传输、独立文件上传载体和 API 客户端。请求帧通过结构化克隆保留 Blob 请求体，并转移 `ReadableStream<Uint8Array>` 的所有权。Host Worker 将两种请求体都逐块送入路由，因此通用文件上传不会在任何浏览器线程创建完整字节数组。Remote 流的上行以 `stream-uplink-item` / `stream-uplink-end` 帧进入没有上限的 `TunnelUplink`，`end` 之后到达的项被丢弃：页面与其 worker 是同一个可信的同源边界，Host 的 inbox 上限在此不适用。
 
-验收在 `apps/web/tests/preview-boot.e2e.ts`：静态服务真实构建页面，在 headless Chromium 里驱动 pre-boot 选择面板与 Worker 激活。空白选择验证首次启动；`vfs-example` overlay 提供普通 workspace 文件与明文 persistence 产物，无需模型请求即可验证 Workspace/Session 冷发现、工具呈现、subagent 导航和历史分页。[打包器](../webworker-packer/README.zh.md)在 Node 中根据已提交的历史日志准备当前代后继文件；这些源日志在 overlay 中逐字节保持不变。fixture 生成器负责验收测试的当前投影缓存。选择面板为 WebFS 保留独立的用户授权来源；该 provider 不读取内置 fixture。
+验收在 `apps/web/tests/preview-boot.e2e.ts`：静态服务真实构建页面，在 headless Chromium 里驱动 pre-boot 选择面板与 Worker 激活。空白选择验证首次启动；`vfs-example` overlay 提供普通 workspace 文件与明文 persistence 产物，无需模型请求即可验证 Workspace/Session 冷发现、工具呈现、subagent 导航和历史分页。showcase 混排空字符串、纯空白与非空推理块，并包含多行长命令和父路径文件链接；这些是人工构造的 fixture，不是真实模型输出。[打包器](../webworker-packer/README.zh.md)在 Node 中根据已提交的历史日志准备当前代后继文件；这些源日志在 overlay 中逐字节保持不变。fixture 生成器负责验收测试的当前投影缓存。选择面板为 WebFS 保留独立的用户授权来源；该 provider 不读取内置 fixture。
 
 [已构建 bundle 导入检查](tests/compile/transform-corpus-check.ts)在库构建后检查裸 Node 导入。Dockkit 例外接受 Node 针对任意样式表报告的未知 `.css` 扩展名错误，而不限定某一固定路径；其他扩展名、错误码或消息，以及意外成功的豁免导入，仍然报错。
 
@@ -54,8 +54,10 @@ kind: "package-library"
 - **worker 组合写明文会话日志**（`compression: 'none'` boot patch）：不带 Zstandard 编解码器，导出日志是 `.jsonl`，不会是 `.jsonl.zstd`。
 - **`node:dns/promises`、`node:vm`、`node:net`、`node:sqlite`、`node:worker_threads` 是结构化 stub**：每次调用在 console 报告拒绝并抛出。需要原生 DNS、真进程或真 realm 隔离的行在此无法运行。
 - **`node:assert/strict` 仅支持真值断言**：对于假值，可调用的默认导出和 `ok` 使用传入的消息或通用文本抛出 `ERR_ASSERTION`，或原样抛出传入的 Error。其他断言 API 未提供。
+- **原生 TLS 监听器需要 Node Host**：worker 的 `node:https.createServer` 会拒绝激活，不会替换成明文。预览内部的 HTTP 隧道不绑定套接字；面向浏览器的 HTTPS 由部署服务器提供。
 - **桌面产品埋点不可用**：`got.post` 明确报告 worker host 不支持该调用。浏览器镜像不包含 Got 及其 Node HTTP 依赖；预览组合不启用桌面上报。
 - **宿主包管理命令不可用**：`execa` 明确报告 worker host 不支持该调用；预览无法运行 pnpm、安装插件或安装原生依赖。
+- **pi-ai 模型请求不可用**：替代实现暴露已安装提供方标识的固定子集，不包含模型，使适配器能够注册配置元数据。升级 pi-ai 时必须保持这些标识有效；推理入口明确报告 worker host 不支持该调用。
 - **PTC Node 程序不可用**：process shim 用 `/dsh/bin/node` 表示可执行文件身份，使 provider 能够激活，但 Worker 既没有 Node 可执行文件，也没有 `stripTypeScriptTypes`。程序执行会在启动子进程前失败。
 - **Office 转换需要 Node Host**：LibreOffice kit 的替代模块以 `unavailable` 拒绝创建转换器。浏览器镜像排除 kit 及其引擎依赖；Office 预览提示转换不可用。
 - **文件 watcher 只能观察已挂载的 VFS**：镜像 seed 不产生事件，VFS 也没有符号链接或外部写入方。`persistent`、`ref()` 和 `unref()` 保留 Node API，但浏览器没有引用计数事件循环，因此这些接口不能控制 dedicated Worker 的生存期。

package/lib/index.js

@@ -732,6 +732,7 @@ const MODULE_PROXIES = {
 	"tty": "./node/builtin_modules/implemented/tty.ts",
 	"node:zlib": "./node/builtin_modules/implemented/zlib.ts",
 	"node:child_process": "./node/builtin_modules/implemented/child_process.ts",
+	"node:https": "./node/builtin_modules/mock/https.ts",
 	"node:dns/promises": "./node/builtin_modules/mock/dns/promises.ts",
 	"dns/promises": "./node/builtin_modules/mock/dns/promises.ts",
 	"node:net": "./node/builtin_modules/mock/net.ts",
@@ -3428,10 +3429,11 @@ function createWorkerHost(options) {
 			const handler = connection.createSharedFetchHandler("/api");
 			const usage = loader.usage();
 			console.info(`webworker host: tree active (modules=${String(usage.modules)}, data overlays=${String(overlays.length)}, direct lane=connection.createSharedFetchHandler, als causality=${options.alsCausality === void 0 ? "inert" : "snapshot/restore"}, image lowering=${LOWERING_VERSION})`);
+			const peer = connection.browserPeer;
 			tunnel.serve({
-				directFetch: (request) => handler.fetch(request),
+				directFetch: (request) => handler.fetch(request, peer),
 				bootPayload: () => readBootPayload(ctx),
-				openStream: (endpoint, payload, uplink, signal) => typertGateway.wireStream.open(endpoint, payload, uplink, void 0, signal),
+				openStream: (endpoint, payload, uplink, signal) => typertGateway.wireStream.open(endpoint, payload, uplink, peer, signal),
 				streamFailure: typertGateway.wireStream.failure
 			});
 			started.resolve();

package/lib/types/node/builtin_modules/implemented/os.d.ts

@@ -48,8 +48,7 @@ export declare function availableParallelism(): number;
 export declare function cpus(): CpuInfo[];
 /**
  * Network interfaces.
- * @returns an empty record — the worker webserver binds the loopback literal, so
- * no LAN address is ever derived.
+ * @returns an empty record — a worker has no view of the host's network.
  */
 export declare function networkInterfaces(): NodeJS.Dict<NetworkInterfaceInfo[]>;
 /** OS constants: only the signal table is read (terminal signal name mapping). */

package/lib/types/node/builtin_modules/mock/https.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Reject native TLS instead of serving plaintext for an HTTPS configuration.
+ * @returns Never; a browser worker cannot bind a TLS socket.
+ */
+export declare function createServer(): never;
+/** CommonJS interop marker for the worker module loader. */
+export declare const __esModule = true;
+/** CommonJS exports for the worker's explicit TLS-listener refusal. */
+declare const _default: {
+    createServer: typeof createServer;
+};
+export default _default;
+//# sourceMappingURL=https.d.ts.map

package/lib/types/node/external_packages/pi-ai.d.ts

@@ -6,26 +6,27 @@ export declare const createModels: (...args: never[]) => never;
 export declare const getSupportedThinkingLevels: (...args: never[]) => never;
 /** Context-overflow predicate (unavailable). */
 export declare const isContextOverflow: (...args: never[]) => never;
+/** Collection of every builtin provider (unavailable). */
+export declare const builtinModels: (...args: never[]) => never;
 /**
- * Installed catalog providers, read while `llm-pi-ai` activates. Each carries the
- * api-key auth marker the adapter filters on, and no models: the provider
- * directory therefore matches the served deployment while every request path
- * lands on a loud symbol above.
+ * Installed catalog providers, read while `llm-pi-ai` activates. `llm-pi-ai`
+ * registers the whole catalog as configurable the moment it mounts and rejects
+ * an empty registration, so these carry pi-ai's ids instead of being an empty
+ * list. Each has the api-key auth marker the adapter filters on, and no
+ * models, so every request path lands on a loud symbol above.
  * @returns one entry per builtin provider.
  */
 export declare function builtinProviders(): unknown[];
-/**
- * Provider route ids of the installed catalog. `llm-pi-ai` registers the whole
- * catalog as configurable the moment it mounts and rejects an empty
- * registration, so these are pi-ai's real ids rather than an empty list.
- * @returns the builtin provider ids.
- */
-export declare function getBuiltinProviders(): string[];
 /**
  * Models of one installed catalog provider.
  * @returns no models.
  */
 export declare function getBuiltinModels(): unknown[];
+/**
+ * Models of every type of one installed catalog provider.
+ * @returns no models.
+ */
+export declare function getAllBuiltinModels(): unknown[];
 /** Anthropic messages API binding (unavailable). */
 export declare const anthropicMessagesApi: (...args: never[]) => never;
 /** OpenAI completions API binding (unavailable). */
@@ -40,9 +41,10 @@ declare const _default: {
     createModels: (...args: never[]) => never;
     getSupportedThinkingLevels: (...args: never[]) => never;
     isContextOverflow: (...args: never[]) => never;
+    builtinModels: (...args: never[]) => never;
     builtinProviders: typeof builtinProviders;
     getBuiltinModels: typeof getBuiltinModels;
-    getBuiltinProviders: typeof getBuiltinProviders;
+    getAllBuiltinModels: typeof getAllBuiltinModels;
     anthropicMessagesApi: (...args: never[]) => never;
     openAICompletionsApi: (...args: never[]) => never;
     openAIResponsesApi: (...args: never[]) => never;

package/lib/types/worker-host.d.ts

@@ -84,8 +84,7 @@ export interface WorkerHostOptions {
     readonly configPath?: string;
     /**
      * Inner arguments the tree parses. The default binds the web server to the
-     * loopback authority the tunnel synthesizes, which also keeps
-     * `networkInterfaces()` out of the trust snapshot.
+     * loopback authority the tunnel synthesizes.
      */
     readonly cmdlineArgs?: readonly string[];
     /** Port named on the default command line; defaults to {@link DEFAULT_PORT}. */

package/lib/worker.js

@@ -2709,10 +2709,11 @@ function createWorkerHost(options) {
 			const handler = connection.createSharedFetchHandler("/api");
 			const usage = loader.usage();
 			console.info(`webworker host: tree active (modules=${String(usage.modules)}, data overlays=${String(overlays.length)}, direct lane=connection.createSharedFetchHandler, als causality=${options.alsCausality === void 0 ? "inert" : "snapshot/restore"}, image lowering=${LOWERING_VERSION})`);
+			const peer = connection.browserPeer;
 			tunnel.serve({
-				directFetch: (request) => handler.fetch(request),
+				directFetch: (request) => handler.fetch(request, peer),
 				bootPayload: () => readBootPayload(ctx),
-				openStream: (endpoint, payload, uplink, signal) => typertGateway.wireStream.open(endpoint, payload, uplink, void 0, signal),
+				openStream: (endpoint, payload, uplink, signal) => typertGateway.wireStream.open(endpoint, payload, uplink, peer, signal),
 				streamFailure: typertGateway.wireStream.failure
 			});
 			started.resolve();
@@ -4825,7 +4826,7 @@ function ok(value, message) {
 /** Callable truthiness assertion with the identical `ok` method; other assertion APIs are absent. */
 const assert = Object.assign(ok, { ok });
 //#endregion
-//#region ../../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/_u64.js
+//#region ../../../node_modules/.pnpm/@noble+hashes@2.4.0/node_modules/@noble/hashes/_u64.js
 const U32_MASK64 = /* @__PURE__ */ (() => BigInt(2 ** 32 - 1))();
 const _32n = /* @__PURE__ */ BigInt(32);
 function fromBig(n, le = false) {
@@ -4876,7 +4877,7 @@ const add4H = (low, Ah, Bh, Ch, Dh) => Ah + Bh + Ch + Dh + (low / 2 ** 32 | 0) |
 const add5L = (Al, Bl, Cl, Dl, El) => (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0) + (Dl >>> 0) + (El >>> 0);
 const add5H = (low, Ah, Bh, Ch, Dh, Eh) => Ah + Bh + Ch + Dh + Eh + (low / 2 ** 32 | 0) | 0;
 //#endregion
-//#region ../../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/utils.js
+//#region ../../../node_modules/.pnpm/@noble+hashes@2.4.0/node_modules/@noble/hashes/utils.js
 /**
 * Checks if something is Uint8Array. Be careful: nodejs Buffer will return true.
 * @param a - value to test
@@ -4936,6 +4937,12 @@ function abytes(value, length, title = "") {
 const aobject = (value, label) => {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new TypeError((label === "object" ? "" : `"${label}" `) + "expected object, got type=" + typeof value);
 };
+const aopts = (value, label) => {
+	aobject(value, label);
+	const proto = Object.getPrototypeOf(value);
+	if (proto !== Object.prototype && proto !== null) throw new TypeError(`"${label}" expected plain object`);
+	if (Object.hasOwn(value, "__proto__")) throw new TypeError(`"${label}.__proto__" is not allowed`);
+};
 /**
 * Asserts a hash instance has not been destroyed or finished.
 * @param instance - hash instance to validate
@@ -5033,7 +5040,7 @@ function rotl(word, shift) {
 * @param defaults - base option object
 * @param opts - user overrides
 * @param title - label included in thrown override errors
-* @returns Merged option object. The merge mutates `defaults` in place.
+* @returns Fresh merged option object with a null prototype.
 * @throws On wrong argument types. {@link TypeError}
 * @example
 * Merge user overrides onto default options.
@@ -5042,9 +5049,9 @@ function rotl(word, shift) {
 * ```
 */
 function checkOpts(defaults, opts, title = "opts") {
-	aobject(defaults, "defaults");
-	if (opts !== void 0) aobject(opts, title);
-	return Object.assign(defaults, opts);
+	aopts(defaults, "defaults");
+	if (opts !== void 0) aopts(opts, title);
+	return Object.assign(Object.create(null), defaults, opts);
 }
 /**
 * Creates a callable hash function from a stateful class constructor.
@@ -5102,7 +5109,7 @@ const oidNist = (suffix) => ({ oid: Uint8Array.from([
 	suffix
 ]) });
 //#endregion
-//#region ../../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/_md.js
+//#region ../../../node_modules/.pnpm/@noble+hashes@2.4.0/node_modules/@noble/hashes/_md.js
 /**
 * Internal Merkle-Damgard hash utils.
 * @module
@@ -5288,7 +5295,7 @@ const SHA512_IV = /* @__PURE__ */ Uint32Array.from([
 	327033209
 ]);
 //#endregion
-//#region ../../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/legacy.js
+//#region ../../../node_modules/.pnpm/@noble+hashes@2.4.0/node_modules/@noble/hashes/legacy.js
 /**
 
 SHA1 (RFC 3174), MD5 (RFC 1321), and RIPEMD160 legacy, weak hash functions.
@@ -5396,7 +5403,7 @@ var _SHA1 = class extends HashMD {
 */
 const sha1 = /* @__PURE__ */ createHasher(() => new _SHA1());
 //#endregion
-//#region ../../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/sha2.js
+//#region ../../../node_modules/.pnpm/@noble+hashes@2.4.0/node_modules/@noble/hashes/sha2.js
 /**
 * SHA2 hash function. A.k.a. sha256, sha384, sha512, sha512_224, sha512_256.
 * SHA256 is the fastest hash implementable in JS, even faster than Blake3.
@@ -12824,7 +12831,7 @@ var http_exports = /* @__PURE__ */ __exportAll({
 	Server: () => FakeServer,
 	ServerResponse: () => ServerResponse,
 	__esModule: () => true,
-	createServer: () => createServer$1,
+	createServer: () => createServer$2,
 	default: () => http_default,
 	get: () => get,
 	request: () => request,
@@ -12934,7 +12941,7 @@ var ServerResponse = class {};
 * @param listener - the request listener the webserver installs.
 * @returns the fake Server.
 */
-function createServer$1(listener) {
+function createServer$2(listener) {
 	if (listener !== void 0) {
 		captured = listener;
 		for (const resolve of waiting) resolve(listener);
@@ -12973,7 +12980,7 @@ const STATUS_CODES = {
 };
 /** CommonJS default export: the members `require()` hands a caller of this module. */
 var http_default = {
-	createServer: createServer$1,
+	createServer: createServer$2,
 	request,
 	get,
 	STATUS_CODES,
@@ -12981,6 +12988,23 @@ var http_default = {
 	ServerResponse
 };
 //#endregion
+//#region src/node/builtin_modules/mock/https.ts
+/** Native TLS listeners are unavailable in a browser worker's HTTP tunnel. */
+var https_exports = /* @__PURE__ */ __exportAll({
+	__esModule: () => true,
+	createServer: () => createServer$1,
+	default: () => https_default
+});
+/**
+* Reject native TLS instead of serving plaintext for an HTTPS configuration.
+* @returns Never; a browser worker cannot bind a TLS socket.
+*/
+function createServer$1() {
+	throw notAvailableError("node:https", "createServer");
+}
+/** CommonJS exports for the worker's explicit TLS-listener refusal. */
+var https_default = { createServer: createServer$1 };
+//#endregion
 //#region src/node/builtin_modules/implemented/module.ts
 /**
 * `node:module` for the worker: `createRequire` hands out the worker module
@@ -13150,8 +13174,7 @@ function cpus() {
 }
 /**
 * Network interfaces.
-* @returns an empty record — the worker webserver binds the loopback literal, so
-* no LAN address is ever derived.
+* @returns an empty record — a worker has no view of the host's network.
 */
 function networkInterfaces() {
 	return {};
@@ -16951,7 +16974,7 @@ var require_shell = /* @__PURE__ */ __commonJSMin(((exports) => {
 	]);
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/lib/constants.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/lib/constants.js
 var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const WIN_SLASH = "\\\\/";
 	const WIN_NO_SLASH = `[^${WIN_SLASH}]`;
@@ -17120,7 +17143,7 @@ var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/lib/utils.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/lib/utils.js
 var require_utils = /* @__PURE__ */ __commonJSMin(((exports) => {
 	const { REGEX_BACKSLASH, REGEX_REMOVE_BACKSLASH, REGEX_SPECIAL_CHARS, REGEX_SPECIAL_CHARS_GLOBAL } = require_constants();
 	exports.isObject = (val) => val !== null && typeof val === "object" && !Array.isArray(val);
@@ -17168,7 +17191,7 @@ var require_utils = /* @__PURE__ */ __commonJSMin(((exports) => {
 	};
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/lib/scan.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/lib/scan.js
 var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const utils = require_utils();
 	const { CHAR_ASTERISK, CHAR_AT, CHAR_BACKWARD_SLASH, CHAR_COMMA, CHAR_DOT, CHAR_EXCLAMATION_MARK, CHAR_FORWARD_SLASH, CHAR_LEFT_CURLY_BRACE, CHAR_LEFT_PARENTHESES, CHAR_LEFT_SQUARE_BRACKET, CHAR_PLUS, CHAR_QUESTION_MARK, CHAR_RIGHT_CURLY_BRACE, CHAR_RIGHT_PARENTHESES, CHAR_RIGHT_SQUARE_BRACKET } = require_constants();
@@ -17197,7 +17220,7 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const scan = (input, options) => {
 		const opts = options || {};
 		const length = input.length - 1;
-		const scanToEnd = opts.parts === true || opts.scanToEnd === true;
+		const scanToEnd = opts.parts === true || opts.tokens === true || opts.scanToEnd === true;
 		const slashes = [];
 		const tokens = [];
 		const parts = [];
@@ -17300,14 +17323,18 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					finished = true;
 					if (code === CHAR_EXCLAMATION_MARK && index === start) negatedExtglob = true;
 					if (scanToEnd === true) {
+						let parens = 0;
 						while (eos() !== true && (code = advance())) {
 							if (code === CHAR_BACKWARD_SLASH) {
 								backslashes = token.backslashes = true;
-								code = advance();
+								advance();
 								continue;
 							}
-							if (code === CHAR_RIGHT_PARENTHESES) {
-								isGlob = token.isGlob = true;
+							if (code === CHAR_LEFT_PARENTHESES) {
+								parens++;
+								continue;
+							}
+							if (code === CHAR_RIGHT_PARENTHESES && --parens === 0) {
 								finished = true;
 								break;
 							}
@@ -17355,13 +17382,18 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			if (opts.noparen !== true && code === CHAR_LEFT_PARENTHESES) {
 				isGlob = token.isGlob = true;
 				if (scanToEnd === true) {
+					let parens = 1;
 					while (eos() !== true && (code = advance())) {
-						if (code === CHAR_LEFT_PARENTHESES) {
+						if (code === CHAR_BACKWARD_SLASH) {
 							backslashes = token.backslashes = true;
-							code = advance();
+							advance();
 							continue;
 						}
-						if (code === CHAR_RIGHT_PARENTHESES) {
+						if (code === CHAR_LEFT_PARENTHESES) {
+							parens++;
+							continue;
+						}
+						if (code === CHAR_RIGHT_PARENTHESES && --parens === 0) {
 							finished = true;
 							break;
 						}
@@ -17424,7 +17456,7 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		if (opts.parts === true || opts.tokens === true) {
 			let prevIndex;
 			for (let idx = 0; idx < slashes.length; idx++) {
-				const n = prevIndex ? prevIndex + 1 : start;
+				const n = prevIndex !== void 0 ? prevIndex + 1 : start;
 				const i = slashes[idx];
 				const value = input.slice(n, i);
 				if (opts.tokens) {
@@ -17435,18 +17467,19 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					depth(tokens[idx]);
 					state.maxDepth += tokens[idx].depth;
 				}
-				if (idx !== 0 || value !== "") parts.push(value);
-				prevIndex = i;
-			}
-			if (prevIndex && prevIndex + 1 < input.length) {
-				const value = input.slice(prevIndex + 1);
-				parts.push(value);
-				if (opts.tokens) {
-					tokens[tokens.length - 1].value = value;
-					depth(tokens[tokens.length - 1]);
-					state.maxDepth += tokens[tokens.length - 1].depth;
+				if (i >= start) {
+					parts.push(value);
+					prevIndex = i;
 				}
 			}
+			const n = prevIndex !== void 0 ? prevIndex + 1 : start;
+			const value = input.slice(n);
+			parts.push(value);
+			if (opts.tokens && prevIndex && prevIndex + 1 < input.length) {
+				tokens[tokens.length - 1].value = value;
+				depth(tokens[tokens.length - 1]);
+				state.maxDepth += tokens[tokens.length - 1].depth;
+			}
 			state.slashes = slashes;
 			state.parts = parts;
 		}
@@ -17455,7 +17488,7 @@ var require_scan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = scan;
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/lib/parse.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/lib/parse.js
 var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const constants = require_constants();
 	const utils = require_utils();
@@ -17610,7 +17643,10 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			}
 		}
 	};
-	const getStarExtglobSequenceOutput = (pattern) => {
+	const buildCharClassStar = (chars) => {
+		return `${chars.length === 1 ? utils.escapeRegex(chars[0]) : `[${chars.map((ch) => utils.escapeRegex(ch)).join("")}]`}*`;
+	};
+	const getStarExtglobSequenceChars = (pattern) => {
 		let index = 0;
 		const chars = [];
 		while (index < pattern.length) {
@@ -17624,7 +17660,7 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			index += match.end + 1;
 		}
 		if (chars.length < 1) return;
-		return `${chars.length === 1 ? utils.escapeRegex(chars[0]) : `[${chars.map((ch) => utils.escapeRegex(ch)).join("")}]`}*`;
+		return chars;
 	};
 	const repeatedExtglobRecursion = (pattern) => {
 		let depth = 0;
@@ -17644,14 +17680,28 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		if (branches.length > 1) {
 			if (branches.some((branch) => branch === "") || branches.some((branch) => /^[*?]+$/.test(branch)) || hasRepeatedCharPrefixOverlap(branches)) return { risky: true };
 		}
+		const safeChars = [];
+		let sawStarSequence = false;
+		let combinable = true;
 		for (const branch of branches) {
-			const safeOutput = getStarExtglobSequenceOutput(branch);
-			if (safeOutput) return {
-				risky: true,
-				safeOutput
-			};
+			const chars = getStarExtglobSequenceChars(branch);
+			if (chars) {
+				sawStarSequence = true;
+				safeChars.push(...chars);
+				continue;
+			}
+			const literal = normalizeSimpleBranch(branch);
+			if (literal && literal.length === 1) {
+				safeChars.push(literal);
+				continue;
+			}
+			combinable = false;
 			if (repeatedExtglobRecursion(branch) > max) return { risky: true };
 		}
+		if (sawStarSequence) return combinable ? {
+			risky: true,
+			safeOutput: buildCharClassStar([...new Set(safeChars)])
+		} : { risky: true };
 		return { risky: false };
 	};
 	/**
@@ -18336,6 +18386,7 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					rest = rest.slice(3);
 					consume("/**", 3);
 				}
+				const isEnd = eos() || state.parens > 0 && rest === ")".repeat(state.parens) && !extglobs.some((extglob) => extglob.type === "negate");
 				if (prior.type === "bos" && eos()) {
 					prev.type = "globstar";
 					prev.value += value;
@@ -18345,7 +18396,7 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					consume(value);
 					continue;
 				}
-				if (prior.type === "slash" && prior.prev.type !== "bos" && !afterStar && eos()) {
+				if (prior.type === "slash" && prior.prev.type !== "bos" && !afterStar && isEnd) {
 					state.output = state.output.slice(0, -(prior.output + prev.output).length);
 					prior.output = `(?:${prior.output}`;
 					prev.type = "globstar";
@@ -18510,7 +18561,7 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = parse;
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/lib/picomatch.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/lib/picomatch.js
 var require_picomatch$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const scan = require_scan();
 	const parse = require_parse();
@@ -18531,6 +18582,18 @@ var require_picomatch$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	* const isMatch = picomatch('*.!(*a)');
 	* console.log(isMatch('a.a')); //=> false
 	* console.log(isMatch('a.b')); //=> true
+	*
+	* // For environments without `node.js`, `picomatch/posix` provides you a dependency-free matcher, without automatic OS detection.
+	* const picomatch = require('picomatch/posix');
+	* // the same API, defaulting to posix paths
+	* const isMatch = picomatch('a/*');
+	* console.log(isMatch('a\\b')); //=> false
+	* console.log(isMatch('a/b')); //=> true
+	*
+	* // you can still configure the matcher function to accept windows paths
+	* const isMatch = picomatch('a/*', { options: windows });
+	* console.log(isMatch('a\\b')); //=> true
+	* console.log(isMatch('a/b')); //=> true
 	* ```
 	* @name picomatch
 	* @param {String|Array} `globs` One or more glob patterns.
@@ -18649,8 +18712,8 @@ var require_picomatch$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	* @return {Boolean}
 	* @api public
 	*/
-	picomatch.matchBase = (input, glob, options) => {
-		return (glob instanceof RegExp ? glob : picomatch.makeRe(glob, options)).test(utils.basename(input));
+	picomatch.matchBase = (input, glob, options, posix = options && options.windows) => {
+		return (glob instanceof RegExp ? glob : picomatch.makeRe(glob, options)).test(utils.basename(input, { windows: posix }));
 	};
 	/**
 	* Returns true if **any** of the given glob `patterns` match the specified `string`.
@@ -18810,7 +18873,7 @@ var require_picomatch$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = picomatch;
 }));
 //#endregion
-//#region ../../../node_modules/.pnpm/picomatch@4.0.4/node_modules/picomatch/index.js
+//#region ../../../node_modules/.pnpm/picomatch@4.0.7/node_modules/picomatch/index.js
 var require_picomatch = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const pico = require_picomatch$1();
 	const utils = require_utils();
@@ -21653,20 +21716,22 @@ const got = { post: notImplementedFail("got", "post") };
 * statically at module scope, so the row cannot mount without it.
 *
 * Every symbol `llm-pi-ai` imports by name is present: a missing CommonJS symbol
-* would surface as `undefined` at call time instead of a link error. The three catalog readers
-* return empty collections rather than throwing — the row reads them while it
-* activates, and "this deployment ships no pi-ai provider" is the truth here.
-* Everything on a request path is loud.
+* would surface as `undefined` at call time instead of a link error. The row
+* reads the catalog while it activates, so the provider reader returns
+* providers without models and the two model readers return empty collections
+* instead of throwing: this deployment serves no pi-ai model. Everything on a
+* request path is loud.
 */
 var pi_ai_exports = /* @__PURE__ */ __exportAll({
 	__esModule: () => true,
 	anthropicMessagesApi: () => anthropicMessagesApi,
+	builtinModels: () => builtinModels,
 	builtinProviders: () => builtinProviders,
 	createModels: () => createModels,
 	createProvider: () => createProvider,
 	default: () => pi_ai_default,
+	getAllBuiltinModels: () => getAllBuiltinModels,
 	getBuiltinModels: () => getBuiltinModels,
-	getBuiltinProviders: () => getBuiltinProviders,
 	getSupportedThinkingLevels: () => getSupportedThinkingLevels,
 	isContextOverflow: () => isContextOverflow,
 	openAICompletionsApi: () => openAICompletionsApi,
@@ -21681,12 +21746,17 @@ const createModels = notImplementedFail(MODULE$1, "createModels");
 const getSupportedThinkingLevels = notImplementedFail(MODULE$1, "getSupportedThinkingLevels");
 /** Context-overflow predicate (unavailable). */
 const isContextOverflow = notImplementedFail(MODULE$1, "isContextOverflow");
-/** Builtin provider ids of pi-ai 0.84.2, in catalog order. */
+/** Collection of every builtin provider (unavailable). */
+const builtinModels = notImplementedFail(MODULE$1, "builtinModels");
+/**
+* Preview provider ids, in catalog order. This fixed subset must use valid
+* installed pi-ai identifiers so the adapter can attach authentication metadata.
+*/
 const BUILTIN_PROVIDER_IDS = [
 	"amazon-bedrock",
 	"ant-ling",
 	"anthropic",
-	"azure-openai-responses",
+	"azure",
 	"baseten",
 	"cerebras",
 	"cloudflare-ai-gateway",
@@ -21724,10 +21794,11 @@ const BUILTIN_PROVIDER_IDS = [
 	"zai-coding-cn"
 ];
 /**
-* Installed catalog providers, read while `llm-pi-ai` activates. Each carries the
-* api-key auth marker the adapter filters on, and no models: the provider
-* directory therefore matches the served deployment while every request path
-* lands on a loud symbol above.
+* Installed catalog providers, read while `llm-pi-ai` activates. `llm-pi-ai`
+* registers the whole catalog as configurable the moment it mounts and rejects
+* an empty registration, so these carry pi-ai's ids instead of being an empty
+* list. Each has the api-key auth marker the adapter filters on, and no
+* models, so every request path lands on a loud symbol above.
 * @returns one entry per builtin provider.
 */
 function builtinProviders() {
@@ -21739,19 +21810,17 @@ function builtinProviders() {
 	}));
 }
 /**
-* Provider route ids of the installed catalog. `llm-pi-ai` registers the whole
-* catalog as configurable the moment it mounts and rejects an empty
-* registration, so these are pi-ai's real ids rather than an empty list.
-* @returns the builtin provider ids.
+* Models of one installed catalog provider.
+* @returns no models.
 */
-function getBuiltinProviders() {
-	return [...BUILTIN_PROVIDER_IDS];
+function getBuiltinModels() {
+	return [];
 }
 /**
-* Models of one installed catalog provider.
+* Models of every type of one installed catalog provider.
 * @returns no models.
 */
-function getBuiltinModels() {
+function getAllBuiltinModels() {
 	return [];
 }
 /** Anthropic messages API binding (unavailable). */
@@ -21766,9 +21835,10 @@ var pi_ai_default = {
 	createModels,
 	getSupportedThinkingLevels,
 	isContextOverflow,
+	builtinModels,
 	builtinProviders,
 	getBuiltinModels,
-	getBuiltinProviders,
+	getAllBuiltinModels,
 	anthropicMessagesApi,
 	openAICompletionsApi,
 	openAIResponsesApi
@@ -21915,6 +21985,7 @@ const BUILTINS = {
 	fs: () => fs_exports,
 	"fs/promises": () => promises_exports$2,
 	http: () => http_exports,
+	https: () => https_exports,
 	module: () => module_exports,
 	net: () => net_exports,
 	os: () => os_exports,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-experimental-webworker-runtime",
   "description": "Browser-only harness runtime: in-memory VFS, module transform and loader, postMessage tunnel, and the dedicated Web Worker assembly, with the Node-compatibility layer that lets the host tree run unchanged",
-  "version": "0.2.1-alpha.1",
+  "version": "0.2.1-alpha.3",
   "publishConfig": {
     "access": "public"
   },
@@ -28,43 +28,43 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@noble/hashes": "^2.3.0",
+    "@deepseek-ai/dsh-util-crypto": "0.2.1-alpha.3",
+    "@noble/hashes": "^2.4.0",
     "@yarnpkg/parsers": "^3.1.0",
-    "acorn": "^8.17.0",
+    "acorn": "^8.18.0",
     "buffer": "^6.0.3",
-    "picomatch": "^4.0.4",
+    "picomatch": "^4.0.7",
     "readable-stream": "^4.7.0",
-    "@deepseek-ai/dsh-util-crypto": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-client-web": "0.2.1-alpha.1"
+    "@deepseek-ai/dsh-client-web": "0.2.1-alpha.3"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-client-modules": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.1"
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.2",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-client-modules": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.3"
   },
   "devDependencies": {
-    "@types/picomatch": "^3.0.2",
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.2",
+    "@deepseek-ai/dsh-api-gateway": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-app-boot": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-bash-sandbox": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-client-file-upload": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-client-modules": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-sandbox-local": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-subagent": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-subprocess-local": "0.2.1-alpha.3",
+    "@deepseek-ai/node-addon-system": "~0.1.2",
+    "@types/picomatch": "^4.0.3",
     "@types/readable-stream": "^4.0.24",
-    "chokidar": "^5.0.0",
-    "@deepseek-ai/cordis": "~4.0.5-alpha.1",
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.6-alpha.1",
-    "@deepseek-ai/dsh-api-gateway": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-app-boot": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-client-file-upload": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-client-modules": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-sandbox-local": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-bash-sandbox": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-subagent": "0.2.1-alpha.1",
-    "@deepseek-ai/dsh-subprocess-local": "0.2.1-alpha.1",
-    "@deepseek-ai/node-addon-system": "~0.1.2"
+    "chokidar": "5.0.0"
   },
   "files": [
     "lib/index.js",