@deepseek-ai/dsh-plugin-manager 0.1.7-rc.1 → 0.1.7-rc.2

package/README.i18n.yaml

@@ -1,6 +1,55 @@
-# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
-# side as of the last confirmed-consistent state. Both languages carry equal authority;
-# after editing either side, bring the other along and re-record with:
+# Bilingual-pair consistency record for README.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/boot/plugin-manager/README.md
-README.md: c047c71476308f0123bdebed6d9ab21e8ececc2f
-README.zh.md: 1f99f67498790d997a7e345ca301b85c319c7b09
+/:
+  en: 65283627208ef4c9
+  zh: aa3f833ec24bb65a
+/deepseek-ai-dsh-plugin-manager:
+  en: e6cbfe169f5fb57b
+  zh: be378036d645a242
+/deepseek-ai-dsh-plugin-manager/summary:
+  en: d6afcaa1594efcdb
+  zh: 459cb6ac0dcb2d46
+/deepseek-ai-dsh-plugin-manager/table-of-contents:
+  en: 87679c51aa3693f5
+  zh: 11684a48a5806afb
+/deepseek-ai-dsh-plugin-manager/use-this-package:
+  en: b8d7061ee289b2a0
+  zh: 49aba7df4761fb23
+/deepseek-ai-dsh-plugin-manager/use-this-package/version-compatibility-and-exemptions:
+  en: 920c0acb3b9feaf3
+  zh: ba6e832a256880a7
+/deepseek-ai-dsh-plugin-manager/use-this-package/configuration:
+  en: d5643a06f300c30a
+  zh: 9348b6a7676a2849
+/deepseek-ai-dsh-plugin-manager/understand-the-implementation:
+  en: 1c737c375aeac163
+  zh: 009d7f139a749c79
+/deepseek-ai-dsh-plugin-manager/further-exploration:
+  en: c6538243d8702a0d
+  zh: 04a82d923353c75f
+/deepseek-ai-dsh-plugin-manager/model-experience:
+  en: 215e7ba838619b7b
+  zh: a311da3843709f90
+/deepseek-ai-dsh-plugin-manager/model-experience/management-tool:
+  en: 1815ec6ce56c80d4
+  zh: 2d7ac75d3b25eb6b
+/deepseek-ai-dsh-plugin-manager/model-experience/management-tool/what-the-model-sees:
+  en: 72d6c70869b12f22
+  zh: 45218d6f1e765fb1
+/deepseek-ai-dsh-plugin-manager/model-experience/management-tool/token-effect:
+  en: bc70208bd361dbcd
+  zh: bb651d6066066c6c
+/deepseek-ai-dsh-plugin-manager/model-experience/management-tool/kv-cache-effect:
+  en: c29f60be7f3edc1a
+  zh: d9b9388b96ef95cc
+/deepseek-ai-dsh-plugin-manager/known-limitations-and-deferred-work:
+  en: fde2d9491fe5dd4f
+  zh: ef6e6db15c4f19d2
+/deepseek-ai-dsh-plugin-manager/known-limitations-and-deferred-work/failure-behavior:
+  en: 61450cf6e03c2819
+  zh: 4d52f5306825787b
+/deepseek-ai-dsh-plugin-manager/known-limitations-and-deferred-work/dev-note:
+  en: e67f633dc6fe7773
+  zh: 3bb0c20c93f16f98

package/README.md

@@ -89,7 +89,7 @@ The CLI exposes `dsh plugin --profile <profile> version-exemptions`, `allow-vers
 <details>
 <summary>Implementation internals — click to expand</summary>
 
-The service and `dsh plugin` share the package operations in [operations.ts](src/operations.ts). The launcher supplies the current profile; [DSH HMR](../hmr/README.md) serializes module reloads, file watching and management writes. Each refresh re-reads bundle selection and patch layers, updates the original root Include, and awaits removed plugin resources as well as the remaining Loader tree. CLI and service operations share the profile manifest writer lock to prevent concurrent package and manifest writes. HMR does not acquire that lock. Pnpm runs outside the HMR queue; installation selects the bundle after pnpm succeeds, while removal deselects and unloads the bundle before pnpm runs. A service run whose captured output stays silent for `idleTimeoutMs` is terminated, reports `timedOut` alongside its exit status, is classified `timeout` whatever status the signal left behind, and is not retried on the next registry, which bounds how long one operation can hold the profile lock; the CLI inherits the terminal, captures no output, and stays unbounded for its operator to interrupt. A run completes when its process exits, and the pipes then drain under a bounded grace period, so a descendant that inherited them cannot hold the operation open. A terminated run stops its whole process tree and waits for it, because a lifecycle script outlives the pnpm process that started it (issue #4981). Dependency-only changes do not trigger configuration reloads.
+The service and `dsh plugin` share the package operations in [operations.ts](src/operations.ts). The launcher supplies the current profile; [DSH HMR](../hmr/README.md) serializes module reloads, file watching and management writes. Each refresh re-reads bundle selection and patch layers, updates the original root Include, and awaits removed plugin resources as well as the remaining Loader tree. CLI and service operations share the profile manifest writer lock to prevent concurrent package and manifest writes. HMR does not acquire that lock. Pnpm runs outside the HMR queue; installation selects the bundle after pnpm succeeds, while removal deselects and unloads the bundle before pnpm runs. A service run whose captured output stays silent for `idleTimeoutMs` is terminated, reports `timedOut` alongside its exit status, is classified `timeout` whatever status the signal left behind, and is not retried on the next registry, which bounds how long one operation can hold the profile lock; the CLI inherits the terminal, captures no output, and stays unbounded for its operator to interrupt. A run completes when its process exits, and the pipes then drain under a bounded grace period, so a descendant that inherited them cannot hold the operation open. A terminated run stops its whole process tree and waits for it, because a lifecycle script outlives the pnpm process that started it (issue #4981). Each operation records the pnpm run it starts in `.plugin-manager/run.json` and removes the record when the run ends. A lock whose holder process exited is taken over by the next writer, but that process's pnpm tree can still be running, so an operation that finds a record waits up to five seconds for the recorded run to stop and otherwise fails with a diagnostic that names the process and the record, without running pnpm. Dependency-only changes do not trigger configuration reloads.
 
 Results contain the last attempted stage, target, saved-state change, application status and error codes. Web dictionaries render management text; pnpm and Loader diagnostics remain unmodified. Unrelated pre-existing inactive entries return warnings; new or changed failures and inactive explicit enablement targets fail the operation. A failed or cancelled installation restores the manifest and lockfile it snapshotted before pnpm ran ([rationale](../../../.agents/notes/implemented/architecture/2026-09-15-guided-plugin-installation.md)); a failed removal retains its partial changes and diagnostics. Installations are tracked by request id until their call settles, so a cancellation names one run and joins its settlement without taking the profile lock. The CLI inherits authentication variables and terminal descriptors; service operations use a scrubbed environment and captured output. No invariant companion is published because the manager reads files and Loader state directly and owns no independent state projection.
 

package/README.zh.md

@@ -89,7 +89,7 @@ CLI 提供 `dsh plugin --profile <profile> version-exemptions`、`allow-version
 <details>
 <summary>实现细节——点击展开</summary>
 
-服务与 `dsh plugin` 共用 [operations.ts](src/operations.ts) 中的包管理操作。启动器提供当前 profile；[DSH HMR](../hmr/README.zh.md) 串行执行模块重载、文件监听和管理写入。每次刷新重新读取组合包选择与 patch 层，更新原有根 Include，并等待已移除插件释放资源及剩余 Loader 树稳定。CLI 与 service 操作共用 profile manifest 写锁，防止并发包操作和 manifest 写入。HMR 不获取该锁。pnpm 在 HMR 队列之外执行；安装在 pnpm 成功后选入组合包，删除则在执行 pnpm 前取消选入并完成卸载。service 运行若在 `idleTimeoutMs` 内没有任何捕获输出即被终止，与退出状态一并报告 `timedOut`，不论信号留下什么退出状态都归类为 `timeout`，且不再转问下一个注册表，因此单次操作占用 profile 锁的时长有上界；CLI 继承终端、不捕获输出，因此不受此上界约束，由操作者中断。运行以进程退出为完成点，随后只在一个有界的宽限窗口内排空管道，因此继承管道的孙进程无法让操作挂起。被终止的运行会停止整棵进程树并等待其消失，因为生命周期脚本的存活时间超过启动它的 pnpm 进程（issue #4981）。仅依赖字段变化不会触发配置重载。
+服务与 `dsh plugin` 共用 [operations.ts](src/operations.ts) 中的包管理操作。启动器提供当前 profile；[DSH HMR](../hmr/README.zh.md) 串行执行模块重载、文件监听和管理写入。每次刷新重新读取组合包选择与 patch 层，更新原有根 Include，并等待已移除插件释放资源及剩余 Loader 树稳定。CLI 与 service 操作共用 profile manifest 写锁，防止并发包操作和 manifest 写入。HMR 不获取该锁。pnpm 在 HMR 队列之外执行；安装在 pnpm 成功后选入组合包，删除则在执行 pnpm 前取消选入并完成卸载。service 运行若在 `idleTimeoutMs` 内没有任何捕获输出即被终止，与退出状态一并报告 `timedOut`，不论信号留下什么退出状态都归类为 `timeout`，且不再转问下一个注册表，因此单次操作占用 profile 锁的时长有上界；CLI 继承终端、不捕获输出，因此不受此上界约束，由操作者中断。运行以进程退出为完成点，随后只在一个有界的宽限窗口内排空管道，因此继承管道的孙进程无法让操作挂起。被终止的运行会停止整棵进程树并等待其消失，因为生命周期脚本的存活时间超过启动它的 pnpm 进程（issue #4981）。每个操作把它启动的 pnpm 运行记录在 `.plugin-manager/run.json` 中，并在运行结束时删除该记录。持有者进程已退出的锁会被下一个写入方接管，但该进程的 pnpm 进程树可能仍在运行，因此发现记录的操作最多等待五秒让记录中的运行停止，否则不运行 pnpm，并以指明该进程与记录文件的诊断失败。仅依赖字段变化不会触发配置重载。
 
 结果包含最后尝试的阶段、目标、磁盘变化、应用状态和错误码。Web 词典呈现管理文案；pnpm 与 Loader 的诊断保持原样。无关的已有故障作为警告返回；新出现、配置变化后的故障，以及显式启用目标未激活，都会使操作失败。失败或被取消的安装会恢复 pnpm 运行前快照的 manifest 与 lockfile（[理由](../../../.agents/notes/implemented/architecture/2026-09-15-guided-plugin-installation.zh.md)）；失败的删除保留部分改动和诊断。安装按 request id 跟踪到调用结束，因此取消只针对一次运行，并且不取 profile 锁就能等待它结束。CLI 继承认证环境和终端描述符；service 使用清理后的环境并捕获输出。管理器直接读取文件和 Loader 状态，不维护第二份目标状态注册表，因此不发布单独的运行时不变式伴生入口。
 

package/lib/index.js

@@ -140,29 +140,35 @@ function targetOf(pid, grouped, platform) {
 	return platform !== "win32" && grouped ? -pid : pid;
 }
 /**
-* Wait until a terminated run's tree is gone, so the caller restores and
-* unlocks the profile only after the scripts it started stopped writing.
+* Whether any member of a run's tree is still alive.
 * @param tree The run's process id and whether it leads its own group.
 * @param internals Injectable process operations.
-* @returns Fulfillment once no member remains, or the wait bound elapsed.
+* @returns True while the probe finds the process or a group member.
 */
-async function awaitTreeGone(tree, internals = {}) {
+function treeAlive(tree, internals = {}) {
 	const pid = tree.pid;
-	if (pid === void 0) return;
+	if (pid === void 0) return false;
 	const platform = internals.platform ?? process.platform;
 	const alive = internals.alive ?? ((target) => {
 		process.kill(target, 0);
 		return true;
 	});
-	const remaining = () => {
-		try {
-			return alive(targetOf(pid, tree.grouped, platform));
-		} catch {
-			return false;
-		}
-	};
+	try {
+		return alive(targetOf(pid, tree.grouped, platform));
+	} catch {
+		return false;
+	}
+}
+/**
+* Wait until a terminated run's tree is gone, so the caller restores and
+* unlocks the profile only after the scripts it started stopped writing.
+* @param tree The run's process id and whether it leads its own group.
+* @param internals Injectable process operations.
+* @returns Fulfillment once no member remains, or the wait bound elapsed.
+*/
+async function awaitTreeGone(tree, internals = {}) {
 	const deadline = Date.now() + (internals.waitMs ?? TREE_WAIT_MS);
-	while (remaining()) {
+	while (treeAlive(tree, internals)) {
 		if (Date.now() >= deadline) return;
 		await new Promise((resolve) => setTimeout(resolve, TREE_POLL_MS));
 	}
@@ -347,6 +353,44 @@ function optionalFile(path) {
 		throw error;
 	}
 }
+/** Where an operation records the pnpm run it started, for a successor when the operation's own process ends first. */
+function runRecordPath(dir) {
+	return join(dir, ".plugin-manager", "run.json");
+}
+/** Record a started run; a successor that takes over the profile lock from an exited process waits for it. */
+async function recordRun(dir, tree) {
+	if (tree.pid === void 0) return;
+	await writeFileAtomic(runRecordPath(dir), `${JSON.stringify(tree)}\n`, {
+		mode: 384,
+		dirMode: 448
+	});
+}
+/**
+* Why this operation must not run: a record left by an operation whose process
+* ended mid-run names a run that is still writing the profile. The profile
+* lock is taken over once its holder exits, but its pnpm tree can outlive it.
+* A recorded run that stopped, within a bounded wait, has its record removed.
+* @param dir Profile directory.
+* @returns The diagnostic, or undefined when no recorded run is active.
+*/
+async function activeRecordedRun(dir) {
+	const path = runRecordPath(dir);
+	const text = optionalFile(path);
+	if (text === void 0) return void 0;
+	let tree;
+	try {
+		const value = JSON.parse(text);
+		const { pid, grouped } = typeof value === "object" && value !== null ? value : {};
+		if (Number.isSafeInteger(pid) && pid > 0 && typeof grouped === "boolean") tree = {
+			pid,
+			grouped
+		};
+	} catch (error) {}
+	if (tree === void 0) return `dsh: ${path} does not name a package run; delete it once no earlier package operation is still running in this profile\n`;
+	await awaitTreeGone(tree);
+	if (treeAlive(tree)) return `dsh: process ${String(tree.pid)}, started by an earlier package operation whose own process ended, is still running in this profile; wait for it or stop it, then retry. If process ${String(tree.pid)} is not that package run, delete ${path}.\n`;
+	await rm(path, { force: true });
+}
 /** pnpm can install plugins through any direct-dependency field. */
 function directDependencies(manifest) {
 	const extra = manifest;
@@ -393,13 +437,7 @@ function bundleComponentManifests(manifest, dir, anchor) {
 */
 async function runProfilePnpm(context, args, options) {
 	const dir = context.dir ?? resolveProfileDir(context.profile, context.home);
-	const before = readProfileManifest("dsh", dir);
-	const savedFiles = ["package.json", "pnpm-lock.yaml"].map((name) => ({
-		path: join(dir, name),
-		text: optionalFile(join(dir, name))
-	}));
-	const beforeDependencies = directDependencies(before);
-	const installedBefore = new Map(Object.keys(beforeDependencies).map((name) => [name, optionalFile(join(dir, "node_modules", name, "package.json"))]));
+	const active = await activeRecordedRun(dir);
 	const logRoot = join(dir, ".plugin-manager", "logs");
 	await mkdir(logRoot, {
 		recursive: true,
@@ -407,6 +445,25 @@ async function runProfilePnpm(context, args, options) {
 	});
 	const logPath = join(await mkdtemp(join(logRoot, "operation-")), "pnpm.log");
 	const log = await open(logPath, "wx", 384);
+	if (active !== void 0) {
+		await log.write(active);
+		await log.close();
+		options.onOutput?.(active, "stderr");
+		const bytes = Buffer.from(active);
+		return {
+			exitCode: 1,
+			output: bytes.subarray(Math.max(0, bytes.length - options.outputBytes)).toString("utf8"),
+			truncated: bytes.length > options.outputBytes,
+			logPath
+		};
+	}
+	const before = readProfileManifest("dsh", dir);
+	const savedFiles = ["package.json", "pnpm-lock.yaml"].map((name) => ({
+		path: join(dir, name),
+		text: optionalFile(join(dir, name))
+	}));
+	const beforeDependencies = directDependencies(before);
+	const installedBefore = new Map(Object.keys(beforeDependencies).map((name) => [name, optionalFile(join(dir, "node_modules", name, "package.json"))]));
 	let output = Buffer.alloc(0);
 	let truncated = false;
 	const append = (bytes) => {
@@ -469,6 +526,7 @@ async function runProfilePnpm(context, args, options) {
 		stdin: options.execution === "cli" ? "inherit" : "ignore",
 		cancelSignal: options.signal === void 0 ? cancellation.signal : AbortSignal.any([cancellation.signal, options.signal])
 	});
+	const exited = once(child.nodeChildProcess, "exit").catch(() => void 0);
 	let writes = Promise.resolve();
 	/** `settled` records that the process outcome is known; `stalled` that the silence bound stopped the run. */
 	const control = {
@@ -514,8 +572,12 @@ async function runProfilePnpm(context, args, options) {
 	if (collectors.length > 0) armIdle();
 	let exitCode;
 	try {
+		await recordRun(dir, {
+			pid: child.pid,
+			grouped
+		});
 		const settled = Promise.allSettled([child]);
-		await Promise.race([once(child.nodeChildProcess, "exit").catch(() => void 0), settled]);
+		await Promise.race([exited, settled]);
 		control.settled = true;
 		clearTimeout(idleTimer);
 		if (control.stalled) await awaitTreeGone({
@@ -585,7 +647,7 @@ async function runProfilePnpm(context, args, options) {
 			if (warnings.length > 0) {
 				await restore();
 				const repair = ["install", savedFiles.some((file) => file.path.endsWith("pnpm-lock.yaml") && file.text !== void 0) ? "--frozen-lockfile" : "--config.lockfile=false"];
-				const repaired = await execa(options.command ?? "pnpm", [...options.args ?? [], ...repair], {
+				const repairing = execa(options.command ?? "pnpm", [...options.args ?? [], ...repair], {
 					cwd: dir,
 					env: environment,
 					extendEnv: false,
@@ -593,6 +655,11 @@ async function runProfilePnpm(context, args, options) {
 					stdin: "ignore",
 					...options.idleTimeoutMs === void 0 ? {} : { timeout: options.idleTimeoutMs }
 				});
+				await recordRun(dir, {
+					pid: repairing.pid,
+					grouped: false
+				});
+				const repaired = await repairing;
 				exitCode = 1;
 				const restoration = repaired.exitCode === 0 ? "restored package.json, pnpm-lock.yaml, and node_modules" : "restored package.json and pnpm-lock.yaml, but node_modules could not be reinstalled; run 'dsh plugin install'";
 				const diagnostic = `\ndsh: installation rejected: ${warnings.join("\n")}\ndsh: ${restoration}.\n`;
@@ -604,6 +671,7 @@ async function runProfilePnpm(context, args, options) {
 	} finally {
 		control.settled = true;
 		clearTimeout(idleTimer);
+		await rm(runRecordPath(dir), { force: true });
 		await log.close();
 	}
 	return {

package/lib/types/operations.js

@@ -8,7 +8,7 @@ import { withFileLock, writeFileAtomic } from '@deepseek-ai/dsh-atomic-write';
 import { DEFAULT_PROFILE_BUNDLES, bundlePatchPaths, initProfile, PROFILE_TEMPLATES, readProfileManifest, resolveBundleDir, resolveProfileDir, loadOverlayPatches, composeEntries, readProfileVersionExemptions, evaluatePluginCompatibility, pluginCompatibilityWarning, } from '@deepseek-ai/dsh-app-boot';
 import { scrubbedParentEnv } from '@deepseek-ai/dsh-subprocess';
 import { parseInstallSpec } from "./install-spec.js";
-import { awaitTreeGone, leadsOwnGroup } from "./run-tree.js";
+import { awaitTreeGone, leadsOwnGroup, treeAlive } from "./run-tree.js";
 import { incompatiblePlugin } from "./failure.js";
 export { setProfileVersionExemption, readProfileVersionExemptions } from '@deepseek-ai/dsh-app-boot';
 /** Resolve relative package specs against the caller's directory.
@@ -152,6 +152,51 @@ function optionalFile(path) {
         throw error;
     }
 }
+/** Where an operation records the pnpm run it started, for a successor when the operation's own process ends first. */
+function runRecordPath(dir) {
+    return join(dir, '.plugin-manager', 'run.json');
+}
+/** Record a started run; a successor that takes over the profile lock from an exited process waits for it. */
+async function recordRun(dir, tree) {
+    if (tree.pid === undefined)
+        return;
+    await writeFileAtomic(runRecordPath(dir), `${JSON.stringify(tree)}\n`, { mode: 0o600, dirMode: 0o700 });
+}
+/**
+ * Why this operation must not run: a record left by an operation whose process
+ * ended mid-run names a run that is still writing the profile. The profile
+ * lock is taken over once its holder exits, but its pnpm tree can outlive it.
+ * A recorded run that stopped, within a bounded wait, has its record removed.
+ * @param dir Profile directory.
+ * @returns The diagnostic, or undefined when no recorded run is active.
+ */
+async function activeRecordedRun(dir) {
+    const path = runRecordPath(dir);
+    const text = optionalFile(path);
+    if (text === undefined)
+        return undefined;
+    let tree;
+    try {
+        const value = JSON.parse(text);
+        const { pid, grouped } = (typeof value === 'object' && value !== null ? value : {});
+        if (Number.isSafeInteger(pid) && pid > 0 && typeof grouped === 'boolean')
+            tree = { pid: pid, grouped };
+    }
+    catch (error) {
+        // Records are replaced atomically, so an unparsable one was written by something else and is reported below.
+        void error;
+    }
+    if (tree === undefined) {
+        return `dsh: ${path} does not name a package run; delete it once no earlier package operation is still running in this profile\n`;
+    }
+    await awaitTreeGone(tree);
+    if (treeAlive(tree)) {
+        return `dsh: process ${String(tree.pid)}, started by an earlier package operation whose own process ended, is still running in this profile; `
+            + `wait for it or stop it, then retry. If process ${String(tree.pid)} is not that package run, delete ${path}.\n`;
+    }
+    await rm(path, { force: true });
+    return undefined;
+}
 /** pnpm can install plugins through any direct-dependency field. */
 function directDependencies(manifest) {
     const extra = manifest;
@@ -200,15 +245,24 @@ function bundleComponentManifests(manifest, dir, anchor) {
  */
 export async function runProfilePnpm(context, args, options) {
     const dir = context.dir ?? resolveProfileDir(context.profile, context.home);
-    const before = readProfileManifest('dsh', dir);
-    const savedFiles = ['package.json', 'pnpm-lock.yaml'].map(name => ({ path: join(dir, name), text: optionalFile(join(dir, name)) }));
-    const beforeDependencies = directDependencies(before);
-    const installedBefore = new Map(Object.keys(beforeDependencies).map(name => [name, optionalFile(join(dir, 'node_modules', name, 'package.json'))]));
+    // Before any profile file is read: a recorded run that is still active may be rewriting them.
+    const active = await activeRecordedRun(dir);
     const logRoot = join(dir, '.plugin-manager', 'logs');
     await mkdir(logRoot, { recursive: true, mode: 0o700 });
     const logDir = await mkdtemp(join(logRoot, 'operation-'));
     const logPath = join(logDir, 'pnpm.log');
     const log = await open(logPath, 'wx', 0o600);
+    if (active !== undefined) {
+        await log.write(active);
+        await log.close();
+        options.onOutput?.(active, 'stderr');
+        const bytes = Buffer.from(active);
+        return { exitCode: 1, output: bytes.subarray(Math.max(0, bytes.length - options.outputBytes)).toString('utf8'), truncated: bytes.length > options.outputBytes, logPath };
+    }
+    const before = readProfileManifest('dsh', dir);
+    const savedFiles = ['package.json', 'pnpm-lock.yaml'].map(name => ({ path: join(dir, name), text: optionalFile(join(dir, name)) }));
+    const beforeDependencies = directDependencies(before);
+    const installedBefore = new Map(Object.keys(beforeDependencies).map(name => [name, optionalFile(join(dir, 'node_modules', name, 'package.json'))]));
     let output = Buffer.alloc(0);
     let truncated = false;
     const append = (bytes) => {
@@ -276,6 +330,8 @@ export async function runProfilePnpm(context, args, options) {
         buffer: false, stdin: options.execution === 'cli' ? 'inherit' : 'ignore', cancelSignal: options.signal === undefined
             ? cancellation.signal : AbortSignal.any([cancellation.signal, options.signal]),
     });
+    // Listened for before the record is written, so an exit during that write is not missed.
+    const exited = once(child.nodeChildProcess, 'exit').catch(() => undefined);
     let writes = Promise.resolve();
     /** `settled` records that the process outcome is known; `stalled` that the silence bound stopped the run. */
     const control = { settled: false, stalled: false };
@@ -330,11 +386,12 @@ export async function runProfilePnpm(context, args, options) {
         armIdle();
     let exitCode;
     try {
+        await recordRun(dir, { pid: child.pid, grouped });
         // execa resolves its promise only once the piped stdio has ended, so the
         // process's own exit — the run's completion — is read from the raw child. A
         // spawn failure settles without one.
         const settled = Promise.allSettled([child]);
-        await Promise.race([once(child.nodeChildProcess, 'exit').catch(() => undefined), settled]);
+        await Promise.race([exited, settled]);
         control.settled = true;
         clearTimeout(idleTimer);
         // A stalled run stops its whole tree first, so the caller's rollback and lock
@@ -428,10 +485,12 @@ export async function runProfilePnpm(context, args, options) {
                 await restore();
                 const hadLockfile = savedFiles.some(file => file.path.endsWith('pnpm-lock.yaml') && file.text !== undefined);
                 const repair = ['install', hadLockfile ? '--frozen-lockfile' : '--config.lockfile=false'];
-                const repaired = await execa(options.command ?? 'pnpm', [...options.args ?? [], ...repair], {
+                const repairing = execa(options.command ?? 'pnpm', [...options.args ?? [], ...repair], {
                     cwd: dir, env: environment, extendEnv: false, reject: false, stdin: 'ignore',
                     ...options.idleTimeoutMs === undefined ? {} : { timeout: options.idleTimeoutMs },
                 });
+                await recordRun(dir, { pid: repairing.pid, grouped: false });
+                const repaired = await repairing;
                 exitCode = 1;
                 const restoration = repaired.exitCode === 0
                     ? 'restored package.json, pnpm-lock.yaml, and node_modules'
@@ -449,6 +508,8 @@ export async function runProfilePnpm(context, args, options) {
     finally {
         control.settled = true;
         clearTimeout(idleTimer);
+        // This process saw the run end, so no successor has to wait for it.
+        await rm(runRecordPath(dir), { force: true });
         await log.close();
     }
     return {

package/lib/types/run-tree.d.ts

@@ -26,6 +26,13 @@ export interface RunTreeInternals {
  * @returns True when the run leads its own process group.
  */
 export declare function leadsOwnGroup(execution: 'cli' | 'service', platform?: NodeJS.Platform): boolean;
+/**
+ * Whether any member of a run's tree is still alive.
+ * @param tree The run's process id and whether it leads its own group.
+ * @param internals Injectable process operations.
+ * @returns True while the probe finds the process or a group member.
+ */
+export declare function treeAlive(tree: RunTree, internals?: RunTreeInternals): boolean;
 /**
  * Wait until a terminated run's tree is gone, so the caller restores and
  * unlocks the profile only after the scripts it started stopped writing.

package/lib/types/run-tree.js

@@ -21,28 +21,34 @@ function targetOf(pid, grouped, platform) {
     return platform !== 'win32' && grouped ? -pid : pid;
 }
 /**
- * Wait until a terminated run's tree is gone, so the caller restores and
- * unlocks the profile only after the scripts it started stopped writing.
+ * Whether any member of a run's tree is still alive.
  * @param tree The run's process id and whether it leads its own group.
  * @param internals Injectable process operations.
- * @returns Fulfillment once no member remains, or the wait bound elapsed.
+ * @returns True while the probe finds the process or a group member.
  */
-export async function awaitTreeGone(tree, internals = {}) {
+export function treeAlive(tree, internals = {}) {
     const pid = tree.pid;
     if (pid === undefined)
-        return;
+        return false;
     const platform = internals.platform ?? process.platform;
     const alive = internals.alive ?? ((target) => { process.kill(target, 0); return true; });
-    const remaining = () => {
-        try {
-            return alive(targetOf(pid, tree.grouped, platform));
-        }
-        catch {
-            return false;
-        }
-    };
+    try {
+        return alive(targetOf(pid, tree.grouped, platform));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Wait until a terminated run's tree is gone, so the caller restores and
+ * unlocks the profile only after the scripts it started stopped writing.
+ * @param tree The run's process id and whether it leads its own group.
+ * @param internals Injectable process operations.
+ * @returns Fulfillment once no member remains, or the wait bound elapsed.
+ */
+export async function awaitTreeGone(tree, internals = {}) {
     const deadline = Date.now() + (internals.waitMs ?? TREE_WAIT_MS);
-    while (remaining()) {
+    while (treeAlive(tree, internals)) {
         if (Date.now() >= deadline)
             return;
         await new Promise(resolve => setTimeout(resolve, TREE_POLL_MS));

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-plugin-manager",
   "description": "Current-profile plugin and bundle management shared by dsh CLI, Web and agent tools",
-  "version": "0.1.7-rc.1",
+  "version": "0.1.7-rc.2",
   "publishConfig": {
     "access": "public"
   },
@@ -59,23 +59,23 @@
     "execa": "^10.0.0",
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@deepseek-ai/dsh-app-boot": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-atomic-write": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-atomic-write": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-app-boot": "0.1.7-rc.2",
     "@deepseek-ai/schemastery": "~3.18.4",
-    "@deepseek-ai/dsh-util-values": "0.1.7-rc.1"
+    "@deepseek-ai/dsh-util-values": "0.1.7-rc.2"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "~4.0.4",
     "@deepseek-ai/cordis-plugin-loader": "~1.0.5",
-    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-subprocess": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-tools": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-hmr": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-brand": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-sandbox": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-user-approval": "0.1.7-rc.1"
+    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-brand": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-hmr": "0.1.7-rc.2"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-hmr": {
@@ -86,22 +86,22 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-package-manifest": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-package-manifest": "0.1.7-rc.2",
     "@deepseek-ai/cordis": "~4.0.4",
-    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-subprocess": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-tools": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-hmr": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-brand": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-agent": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-session": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-session-projection": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-sandbox": "0.1.7-rc.1",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.5",
+    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-subprocess": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-brand": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.7-rc.2",
     "@deepseek-ai/cordis-plugin-timer": "~1.1.6",
-    "@deepseek-ai/dsh-user-approval": "0.1.7-rc.1",
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.5"
+    "@deepseek-ai/dsh-hmr": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-agent": "0.1.7-rc.2"
   }
 }