@deepseek-harness-tui/dsh-tui 0.14.1 → 0.16.0

package/lib/types/dsh-adapter/host-dsh.d.ts

@@ -0,0 +1,112 @@
+import type { Context } from '@deepseek-ai/cordis';
+import type * as AppBoot from '@deepseek-ai/dsh-app-boot';
+import type * as HomePaths from '@deepseek-ai/dsh-home-paths';
+import type * as Cmdline from '@deepseek-ai/dsh-cmdline';
+import type * as HttpProxy from '@deepseek-ai/dsh-http-proxy';
+import { HOST_MODULES } from './host-contract.js';
+import { type ProcessExitSeam } from './process-exit.js';
+type Warn = (line: string) => void;
+/** Picking from the real module type fails the build when the contract names an undeclared export. */
+type ContractExports<K extends (typeof HOST_MODULES)[number]['key']> = Extract<(typeof HOST_MODULES)[number], {
+    key: K;
+}>['exports'][number];
+type AppBootModule = Pick<typeof AppBoot, ContractExports<'appBoot'>>;
+/** `@deepseek-ai/dsh/profile-boot`, declared locally: the host CLI is not a dependency. */
+interface ProfileBootModule {
+    prepareProfile(name: string, userLayer?: boolean, fromDefaultProfile?: string): AppBoot.Profile;
+    readonly INSTALL_ANCHOR: string;
+    readonly PROFILE_ROOT_FILENAME: 'cordis.yml';
+}
+type HomePathsModule = Pick<typeof HomePaths, ContractExports<'homePaths'>>;
+type CmdlineModule = Pick<typeof Cmdline, ContractExports<'cmdline'>>;
+type HttpProxyModule = Pick<typeof HttpProxy, ContractExports<'httpProxy'>>;
+export interface HostDsh {
+    readonly packageDir: string;
+    /** Reported, not gated on: the exports are. */
+    readonly version: string;
+    readonly Context: new () => Context;
+    readonly appBoot: AppBootModule;
+    readonly Loader: unknown;
+    readonly homePaths: HomePathsModule;
+    readonly launchEnvironmentKey: string;
+    readonly cmdline: CmdlineModule;
+    readonly profileBoot: ProfileBootModule;
+    readonly httpProxy: HttpProxyModule;
+}
+/** Where the host came from, or why there is none (shown to the user). */
+export type HostDshLocation = {
+    readonly packageDir: string;
+    readonly via: 'link' | 'shim' | 'beside' | 'volta';
+} | {
+    readonly reason: string;
+};
+/** `findHostDsh`'s reason when PATH has no `dsh` at all. */
+export declare const NO_DSH_ON_PATH = "no dsh on PATH";
+/**
+ * Find the installed host package from the first `dsh` on PATH, following
+ * what a launch would run: a link (npm on Unix) by its realpath, an npm /
+ * pnpm / yarn launcher script (sh, `.cmd`, `.ps1`) by the script path it
+ * starts, a volta shim through volta's package image. A launcher that
+ * cannot be followed is no host: the reason says what was found.
+ */
+export declare function findHostDsh(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): HostDshLocation;
+/**
+ * The script paths a launcher starts: quoted or bare tokens ending in
+ * `.js` / `.mjs` / `.cjs` (npm and pnpm cmd-shim, `.cmd` and `.ps1` shims,
+ * a hand-written `exec node …/bin.js` wrapper).
+ */
+export declare function launcherScriptPaths(text: string): string[];
+/** Expand a launcher's own-directory variables and resolve with `platform`'s path rules. */
+export declare function resolveLauncherPath(script: string, base: string, platform: NodeJS.Platform): string | undefined;
+/**
+ * The capability probe: throws naming what is missing (no host, a module that
+ * does not import, an export the entry needs); the caller falls back.
+ */
+export declare function loadHostDsh(packageDir?: string | undefined): Promise<HostDsh>;
+export interface HostRoot {
+    readonly ctx: Context;
+    /**
+     * Select the final kernel after the Loader is available and third-party
+     * backends have been assembled. This must happen before the runtime applies
+     * and before the root composes its profile.
+     */
+    selectKernel(dsh: boolean): Promise<void>;
+    /**
+     * The dsh-tui profile (DSH kernel) or the light profile (./lite-profile.ts).
+     * Rejects with the Loader's or the audit's error; the tree stays up.
+     * `stopping`: a root dispose is waiting, so skip audit and readiness.
+     */
+    compose(warn: Warn, stopping?: () => boolean): Promise<void>;
+    /**
+     * Remove the fail-loud handlers (DSH kernel; a no-op otherwise) once the
+     * TUI's process guard is up: it alone owns a fatal error, and fail-loud
+     * would exit before the funnel restored the terminal.
+     */
+    readonly uninstallFailLoud: () => void;
+    /** The host's DSH runtime version (`unknown` when it reports none). */
+    readonly kernelVersion: string;
+}
+export interface PrepareHostRootOptions {
+    readonly profile: string;
+    /** `ctx.cmdlineArgs`. */
+    readonly args: readonly string[];
+    /** Routes `ctx.appExit(code)` to the TUI's exit funnel; the bounded `shutdown` when unfilled or refused. */
+    readonly exitSeam?: ProcessExitSeam;
+}
+/**
+ * Build the entry's root from the host's `cordis` and install the host's
+ * module resolution on it before any TUI module is imported, so the TUI and
+ * the DSH plugins resolve shared packages (react, schemastery, the
+ * `@deepseek-ai/*` peers) the same way. Both kernels: otherwise the peers
+ * resolve only through `$DSH_HOME/profiles/node_modules`, which a fresh
+ * install may not have. The DSH kernel also gets the rest of `runProfile`'s prepare.
+ */
+export declare function prepareHostRoot(host: HostDsh, options: PrepareHostRootOptions): Promise<HostRoot>;
+/** A composition failure, with the startup report saved for it. */
+export declare class HostComposeError extends Error {
+    readonly original: unknown;
+    readonly logPath: string | undefined;
+    constructor(original: unknown, logPath: string | undefined);
+}
+export {};
+//# sourceMappingURL=host-dsh.d.ts.map

package/lib/types/dsh-adapter/host-dsh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-dsh.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/host-dsh.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,KAAK,OAAO,MAAM,2BAA2B,CAAA;AACzD,OAAO,KAAK,KAAK,SAAS,MAAM,6BAA6B,CAAA;AAC7D,OAAO,KAAK,KAAK,OAAO,MAAM,0BAA0B,CAAA;AACxD,OAAO,KAAK,KAAK,SAAS,MAAM,6BAA6B,CAAA;AAE7D,OAAO,EAAE,YAAY,EAAgB,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAA+B,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAOrF,KAAK,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;AAElC,sGAAsG;AACtG,KAAK,eAAe,CAAC,CAAC,SAAS,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE;IAAE,GAAG,EAAE,CAAC,CAAA;CAAE,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAA;AAE5I,KAAK,aAAa,GAAG,IAAI,CAAC,OAAO,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAA;AACrE,2FAA2F;AAC3F,UAAU,iBAAiB;IACzB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAA;IAC/F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,YAAY,CAAA;CAC7C;AACD,KAAK,eAAe,GAAG,IAAI,CAAC,OAAO,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC,CAAA;AAC3E,KAAK,aAAa,GAAG,IAAI,CAAC,OAAO,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAA;AACrE,KAAK,eAAe,GAAG,IAAI,CAAC,OAAO,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC,CAAA;AAM3E,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,UAAU,OAAO,CAAA;IACnC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CACpC;AAED,0EAA0E;AAC1E,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAA;CAAE,GACnF;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAE/B,4DAA4D;AAC5D,eAAO,MAAM,cAAc,mBAAmB,CAAA;AAE9C;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,eAAe,CA0B/H;AAmDD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAQ1D;AAED,4FAA4F;AAC5F,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,GAAG,SAAS,CAW/G;AAWD;;;GAGG;AACH,wBAAsB,WAAW,CAAC,UAAU,GAAE,MAAM,GAAG,SAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAiD9F;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;IACrB;;;;OAIG;IACH,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC;;;;OAIG;IACH,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,IAAI,CAAA;IACtC,uEAAuE;IACvE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,yBAAyB;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,4GAA4G;IAC5G,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;CACpC;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2IvG;AAED,mEAAmE;AACnE,qBAAa,gBAAiB,SAAQ,KAAK;IAE7B,QAAQ,CAAC,QAAQ,EAAE,OAAO;IADtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;gBACf,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS;CAKpE"}

package/lib/types/dsh-adapter/host-dsh.js

@@ -0,0 +1,481 @@
+/**
+ * Loads the installed dsh's modules and builds the entry's single Cordis root.
+ * Host modules come from the `dsh` on PATH by realpath, imported by file URL;
+ * `@deepseek-ai/*` is `import type` here only (contract: ./host-contract.ts).
+ * Never writes to stdout: before the mount host warnings go to stderr, the
+ * composition takes the caller's sink.
+ */
+import { randomUUID } from 'node:crypto';
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
+import { mkdir, writeFile } from 'node:fs/promises';
+import { createRequire } from 'node:module';
+import { basename, delimiter, dirname, join, posix, win32 } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { inspect } from 'node:util';
+import { HOST_MODULES, HOST_PACKAGE } from './host-contract.js';
+import { LITE_PROFILE_EXCLUDED_BUNDLES, liteProfilePlan } from './lite-profile.js';
+import { PROCESS_SHUTDOWN_TIMEOUT_MS } from './process-exit.js';
+/** The diagnostic prefix the host's own boot uses. */
+const BIN_NAME = 'dsh';
+/** Cordis fiber state "active" (dsh-app-boot FIBER_ACTIVE). */
+const FIBER_ACTIVE = 2;
+const APP_BOOT = HOST_MODULES.find(spec => spec.key === 'appBoot').specifier;
+/** `findHostDsh`'s reason when PATH has no `dsh` at all. */
+export const NO_DSH_ON_PATH = 'no dsh on PATH';
+/**
+ * Find the installed host package from the first `dsh` on PATH, following
+ * what a launch would run: a link (npm on Unix) by its realpath, an npm /
+ * pnpm / yarn launcher script (sh, `.cmd`, `.ps1`) by the script path it
+ * starts, a volta shim through volta's package image. A launcher that
+ * cannot be followed is no host: the reason says what was found.
+ */
+export function findHostDsh(env = process.env, platform = process.platform) {
+    const names = platform === 'win32' ? ['dsh.cmd', 'dsh.ps1', 'dsh'] : ['dsh'];
+    for (const dir of (env.PATH ?? env.Path ?? '').split(delimiter)) {
+        if (dir === '')
+            continue;
+        for (const name of names) {
+            const candidate = join(dir, name);
+            if (!existsSync(candidate))
+                continue;
+            // npm's Windows shims sit beside the global node_modules.
+            if (platform === 'win32') {
+                const beside = join(dir, 'node_modules', '@deepseek-ai', 'dsh');
+                if (isHostPackage(beside))
+                    return { packageDir: beside, via: 'beside' };
+            }
+            // The first `dsh` on PATH is the one a launch would run: it is the host
+            // or there is none.
+            let real;
+            try {
+                real = realpathSync(candidate);
+            }
+            catch (error) {
+                return { reason: `${candidate} cannot be resolved (${error instanceof Error ? error.message : String(error)})` };
+            }
+            const linked = hostPackageAbove(real);
+            if (linked !== undefined)
+                return { packageDir: linked, via: 'link' };
+            return followLauncher(candidate, real, env, platform);
+        }
+    }
+    return { reason: NO_DSH_ON_PATH };
+}
+function hostPackageAbove(path) {
+    for (let up = dirname(path);; up = dirname(up)) {
+        if (isHostPackage(up))
+            return up;
+        if (dirname(up) === up)
+            return undefined;
+    }
+}
+/** The largest launcher script read (npm / pnpm shims are well under 2 KiB). */
+const LAUNCHER_SCRIPT_MAX = 64 * 1024;
+/**
+ * A `dsh` that is not a link into the package: a launcher script (read the
+ * script path it starts) or a volta shim (volta's package image).
+ */
+function followLauncher(candidate, real, env, platform) {
+    if (/^volta-shim(?:\.exe)?$/iu.test(basename(real))) {
+        const volta = env.VOLTA_HOME ?? join(env.HOME ?? env.USERPROFILE ?? '', '.volta');
+        const image = join(volta, 'tools', 'image', 'packages', '@deepseek-ai', 'dsh');
+        for (const packageDir of [join(image, 'lib', 'node_modules', '@deepseek-ai', 'dsh'), join(image, 'node_modules', '@deepseek-ai', 'dsh')]) {
+            if (isHostPackage(packageDir))
+                return { packageDir, via: 'volta' };
+        }
+        return { reason: `${candidate} is a volta shim and volta's image has no @deepseek-ai/dsh under ${image}` };
+    }
+    let text;
+    try {
+        const content = readFileSync(real);
+        if (content.length > LAUNCHER_SCRIPT_MAX || content.subarray(0, 4096).includes(0)) {
+            return { reason: `${candidate} is neither a link into @deepseek-ai/dsh nor a launcher script` };
+        }
+        text = content.toString('utf8');
+    }
+    catch (error) {
+        return { reason: `${candidate} cannot be read (${error instanceof Error ? error.message : String(error)})` };
+    }
+    const base = dirname(real);
+    for (const script of launcherScriptPaths(text)) {
+        const path = resolveLauncherPath(script, base, platform);
+        if (path === undefined || !existsSync(path))
+            continue;
+        let target;
+        try {
+            target = realpathSync(path);
+        }
+        catch {
+            continue;
+        }
+        const packageDir = hostPackageAbove(target);
+        if (packageDir !== undefined)
+            return { packageDir, via: 'shim' };
+    }
+    return { reason: `${candidate} is a launcher script that starts no @deepseek-ai/dsh script found on disk` };
+}
+/**
+ * The script paths a launcher starts: quoted or bare tokens ending in
+ * `.js` / `.mjs` / `.cjs` (npm and pnpm cmd-shim, `.cmd` and `.ps1` shims,
+ * a hand-written `exec node …/bin.js` wrapper).
+ */
+export function launcherScriptPaths(text) {
+    const found = [];
+    const token = /"([^"\r\n]+?\.[cm]?js)"|'([^'\r\n]+?\.[cm]?js)'|((?:[^\s"'`;|&<>()]+?)\.[cm]?js)(?=[\s"';|&)]|$)/gmu;
+    for (const match of text.matchAll(token)) {
+        const path = match[1] ?? match[2] ?? match[3];
+        if (path !== undefined && !found.includes(path))
+            found.push(path);
+    }
+    return found;
+}
+/** Expand a launcher's own-directory variables and resolve with `platform`'s path rules. */
+export function resolveLauncherPath(script, base, platform) {
+    let path = script
+        .replace(/^\$\{?basedir\}?/u, base)
+        .replace(/^\$\(dirname\s+"?\$0"?\)/u, base)
+        .replace(/^%~dp0%?/iu, base + '\\')
+        .replace(/^%dp0%/iu, base)
+        .replace(/^\$PSScriptRoot/iu, base);
+    // Anything else still holding a variable is not a path this can follow.
+    if (/[$%]/u.test(path))
+        return undefined;
+    if (platform !== 'win32')
+        path = path.replaceAll('\\', '/');
+    return (platform === 'win32' ? win32 : posix).resolve(base, path);
+}
+function isHostPackage(dir) {
+    try {
+        const manifest = JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8'));
+        return typeof manifest === 'object' && manifest !== null && manifest.name === HOST_PACKAGE;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The capability probe: throws naming what is missing (no host, a module that
+ * does not import, an export the entry needs); the caller falls back.
+ */
+export async function loadHostDsh(packageDir = undefined) {
+    if (packageDir === undefined) {
+        const found = findHostDsh();
+        if (!('packageDir' in found))
+            throw new Error(found.reason);
+        packageDir = found.packageDir;
+    }
+    let version = 'unknown';
+    try {
+        const manifest = JSON.parse(readFileSync(join(packageDir, 'package.json'), 'utf8'));
+        if (typeof manifest.version === 'string')
+            version = manifest.version;
+    }
+    catch {
+    }
+    const hostRequire = createRequire(join(packageDir, 'package.json'));
+    const importFrom = async (require, specifier) => {
+        try {
+            return await import(pathToFileURL(require.resolve(specifier)).href);
+        }
+        catch (error) {
+            throw new Error(`dsh ${version} at ${packageDir}: ${specifier} does not load (${error instanceof Error ? error.message.split('\n')[0] : String(error)})`, { cause: error });
+        }
+    };
+    // The Loader and the home paths are app-boot's own dependencies (the
+    // Loader's builtins must be the instance app-boot mounts includes with).
+    let appBootRequire;
+    try {
+        appBootRequire = createRequire(hostRequire.resolve(APP_BOOT));
+    }
+    catch (error) {
+        throw new Error(`dsh ${version} at ${packageDir}: ${APP_BOOT} does not resolve (${error instanceof Error ? error.message.split('\n')[0] : String(error)})`, { cause: error });
+    }
+    const loaded = await Promise.all(HOST_MODULES.map(spec => importFrom(spec.via === 'app-boot' ? appBootRequire : hostRequire, spec.specifier)));
+    const modules = new Map(HOST_MODULES.map((spec, index) => [spec.key, loaded[index]]));
+    for (const spec of HOST_MODULES) {
+        const module = modules.get(spec.key);
+        for (const name of spec.exports) {
+            if (module?.[name] === undefined)
+                throw new Error(`dsh ${version} at ${packageDir} lacks ${spec.specifier.replace(/^@deepseek-ai\//u, '')}.${name}`);
+        }
+    }
+    const module = (key) => modules.get(key);
+    return {
+        packageDir,
+        version,
+        Context: module('cordis').Context,
+        appBoot: module('appBoot'),
+        Loader: module('loader').default,
+        homePaths: module('homePaths'),
+        launchEnvironmentKey: module('launchEnvironment').DSH_LAUNCH_ENVIRONMENT_KEY,
+        cmdline: module('cmdline'),
+        profileBoot: module('profileBoot'),
+        httpProxy: module('httpProxy'),
+    };
+}
+/**
+ * Build the entry's root from the host's `cordis` and install the host's
+ * module resolution on it before any TUI module is imported, so the TUI and
+ * the DSH plugins resolve shared packages (react, schemastery, the
+ * `@deepseek-ai/*` peers) the same way. Both kernels: otherwise the peers
+ * resolve only through `$DSH_HOME/profiles/node_modules`, which a fresh
+ * install may not have. The DSH kernel also gets the rest of `runProfile`'s prepare.
+ */
+export async function prepareHostRoot(host, options) {
+    const { appBoot, profileBoot } = host;
+    // bin.js: the `.env` layers fill unset variables before anything reads them
+    // (the dsh-tui row's `!!js process.env.DSH_TUI_*` included).
+    const environment = appBoot.loadLayeredEnv(BIN_NAME);
+    // 1–2. composeProfile (no `--patch` overlays from the launcher).
+    const profile = profileBoot.prepareProfile(options.profile, true, undefined);
+    const resolution = await appBoot.createRuntimeResolution({ installAnchor: profileBoot.INSTALL_ANCHOR, profile });
+    const rootConfig = join(profile.dir, profileBoot.PROFILE_ROOT_FILENAME);
+    // Build the neutral Loader root first: discovery needs its resolver before
+    // the final kernel can decide whether DSH-only preparation is appropriate.
+    const ctx = new host.Context();
+    ctx.baseUrl = pathToFileURL(dirname(rootConfig)).href + '/';
+    ctx.provide('dshHomePath', host.homePaths.dshHomePath);
+    ctx.on('internal/update', ((_config, _noSave, next) => {
+        Promise.resolve(next()).catch((error) => { ctx.logger.error(error); });
+    }), { global: true, prepend: true });
+    await ctx.plugin(host.Loader, undefined);
+    const shutdown = createProcessShutdown(() => ctx.fiber.dispose());
+    const appReady = createAppReady();
+    let uninstallFailLoud = () => undefined;
+    // `startedBundles` names what is really composed.
+    const profileContextFor = (startedBundles) => ({
+        name: options.profile,
+        dir: profile.dir,
+        patchPath: profile.patchPath,
+        installAnchor: profileBoot.INSTALL_ANCHOR,
+        startedBundles: [...startedBundles],
+        cwd: process.cwd(),
+        home: host.homePaths.resolveDshHome(),
+        overlays: [],
+        telemetryDisabledEnv: process.env.DSH_TELEMETRY_DISABLED,
+    });
+    let profileContext;
+    let kernelSelected = false;
+    try {
+        // 6. The resolution hijack (both kernels), before any TUI module loads.
+        await ctx.plugin(appBoot.PluginPackages, { resolution });
+    }
+    catch (error) {
+        // The caller falls back to another launch path in this same process:
+        // leave nothing of this root behind (runProfile disposes on failure too).
+        await ctx.fiber.dispose().catch(() => undefined);
+        throw error;
+    }
+    const selectKernel = async (dsh) => {
+        if (kernelSelected)
+            throw new Error('dsh-tui: the host kernel was already selected');
+        // A light profile needs none of runProfile's DSH-only services. The entry
+        // uses the same final answer for its slot and for this composition mode.
+        try {
+            if (dsh) {
+                const disposeProxy = await host.httpProxy.installProxyFromEnvironment(environment, message => { process.stderr.write(`${BIN_NAME}: ${message}\n`); });
+                if (disposeProxy !== undefined)
+                    ctx.effect(() => () => { void Promise.resolve(disposeProxy()).catch(() => undefined); }, 'dsh-tui host proxy');
+                // 5. runProfile: fail-loud (removable here, unlike runProfile's).
+                uninstallFailLoud = appBoot.installFailLoud(BIN_NAME, process, async () => { await ctx.fiber.dispose(); });
+                profileContext = profileContextFor(profile.layers.map(layer => layer.packageName));
+                ctx.provide('profileContext', profileContext);
+                ctx.provide(host.launchEnvironmentKey, environment);
+                // 7. App arguments and the exit / readiness seams.
+                host.cmdline.provideCmdline(ctx, {
+                    args: options.args,
+                    exit: code => {
+                        const answer = options.exitSeam?.request?.({ kind: 'code', code }) ?? 'refused';
+                        if (answer === 'refused')
+                            void shutdown(code);
+                    },
+                    ready: appReady.service,
+                });
+            }
+            kernelSelected = true;
+        }
+        catch (error) {
+            uninstallFailLoud();
+            await ctx.fiber.dispose().catch(() => undefined);
+            throw error;
+        }
+    };
+    const mountAndAudit = async (patches, warn, stopping) => {
+        // boot(): warnings and errors logged while the tree starts, for the startup report.
+        const startupLogs = [];
+        const diagnostics = new host.Context();
+        diagnostics.logger = ctx.logger;
+        diagnostics.logger.exporter({
+            levels: { default: 2 },
+            export: ({ ts, name, type, args }) => {
+                if (type === 'warn' || type === 'error')
+                    startupLogs.push({ ts, name, type, args });
+            },
+        });
+        try {
+            await appBoot.mountRootInclude(ctx, rootConfig, patches, undefined, BIN_NAME);
+            const loader = () => ctx.get('loader');
+            await loader()?.await();
+            // Disposed or about to be: no audit, and no readiness (HMR would start
+            // its profile refresh on a dying tree).
+            if (loader() === undefined || stopping())
+                return;
+            await appBoot.auditStartupEntries(ctx, BIN_NAME, warn);
+            if (ctx.fiber.state === FIBER_ACTIVE && loader() !== undefined && !stopping())
+                appReady.commit();
+        }
+        catch (error) {
+            // Unlike bin.js, a report is saved for every failure (the screen
+            // stays up and shows its path).
+            if (error instanceof appBoot.StartupError) {
+                Object.defineProperty(error, 'startup', { value: { configurationPath: rootConfig, messages: startupLogs }, enumerable: false, configurable: true, writable: true });
+            }
+            const logPath = await writeStartupReport(error, {
+                home: host.homePaths.resolveDshHome(),
+                version: hostVersion(host),
+                profile: options.profile,
+                ...(error instanceof appBoot.StartupError ? {} : { configurationPath: rootConfig, messages: startupLogs }),
+            });
+            throw new HostComposeError(error, logPath);
+        }
+        finally {
+            await diagnostics.fiber.dispose().catch(() => undefined);
+        }
+    };
+    return {
+        ctx,
+        selectKernel,
+        uninstallFailLoud: () => { uninstallFailLoud(); },
+        kernelVersion: hostVersion(host),
+        async compose(warn, stopping = () => false) {
+            if (!kernelSelected)
+                throw new Error('dsh-tui: select the host kernel before composing its profile');
+            if (profileContext !== undefined) {
+                await mountAndAudit(appBoot.readProfilePatches(BIN_NAME, profileContext, profile), warn, stopping);
+                return;
+            }
+            const plan = liteProfilePlan(profile);
+            if (!plan.trimmed) {
+                // Nothing to trim: composing the layers is the full composition, and
+                // not fatal (the screen is mounted; failing would cost every plugin).
+                warn(`dsh-tui: light profile: ${options.profile} lists none of ${LITE_PROFILE_EXCLUDED_BUNDLES.join(', ')}; composing it whole but the dsh-tui row\n`);
+            }
+            else {
+                warn(`dsh-tui: light profile: ${plan.excluded.join(', ')} left out of ${profile.layers.length} bundles; disabled ${plan.disableRows.map(row => row.id).join(', ')} (their injected services come from the excluded bundles)\n`);
+            }
+            // The trimmed layers' patches, then the disable rows applied last (a
+            // static disable in cordis.patch.yml would also hit the DSH kernel).
+            const patches = appBoot.readProfilePatches(BIN_NAME, profileContextFor(plan.layers.map(layer => layer.packageName)), { ...profile, layers: [...plan.layers] });
+            patches.push(...plan.disableRows);
+            await mountAndAudit(patches, warn, stopping);
+        },
+    };
+}
+/** A composition failure, with the startup report saved for it. */
+export class HostComposeError extends Error {
+    original;
+    logPath;
+    constructor(original, logPath) {
+        super(original instanceof Error ? original.message : String(original), { cause: original });
+        this.original = original;
+        this.name = 'HostComposeError';
+        this.logPath = logPath;
+    }
+}
+function hostVersion(host) {
+    try {
+        return host.appBoot.getDshRuntimeVersion();
+    }
+    catch {
+        return host.version;
+    }
+}
+/**
+ * dsh `bin.js` reportStartupFailure (0.2.1-rc.2), the file half only: the
+ * screen is up, so never stderr. Undefined when it could not be written.
+ */
+async function writeStartupReport(error, context) {
+    const now = new Date().toISOString();
+    const report = 'WARNING: Raw diagnostics may contain configuration or credential values from plugin errors. Review before sharing.\n\n' + inspect({
+        timestamp: now,
+        dshVersion: context.version,
+        nodeVersion: process.version,
+        platform: process.platform,
+        arch: process.arch,
+        profile: context.profile,
+        ...(context.configurationPath === undefined ? {} : { startup: { configurationPath: context.configurationPath, messages: context.messages ?? [] } }),
+        error,
+    }, {
+        depth: null,
+        maxArrayLength: null,
+        maxStringLength: null,
+        showHidden: true,
+        customInspect: false,
+        getters: false,
+        colors: false,
+    }) + '\n';
+    const logDir = join(context.home, 'logs');
+    const logPath = join(logDir, `startup-${now.replaceAll(':', '-')}-${randomUUID()}.log`);
+    try {
+        await mkdir(logDir, { recursive: true, mode: 0o700 });
+        await writeFile(logPath, report, { flag: 'wx', mode: 0o600 });
+    }
+    catch {
+        return undefined;
+    }
+    return logPath;
+}
+/** dsh `profile-boot` createAppReady (0.2.1-rc.2). */
+function createAppReady() {
+    let ready = false;
+    const listeners = new Set();
+    return {
+        service: {
+            onReady(listener) {
+                if (ready) {
+                    listener();
+                    return () => undefined;
+                }
+                listeners.add(listener);
+                return () => { listeners.delete(listener); };
+            },
+        },
+        commit() {
+            if (ready)
+                return;
+            ready = true;
+            for (const listener of [...listeners])
+                listener();
+            listeners.clear();
+        },
+    };
+}
+/** dsh `process-shutdown` createProcessShutdown (0.2.1-rc.2), the `shutdown` half only. */
+function createProcessShutdown(dispose, timeoutMs = PROCESS_SHUTDOWN_TIMEOUT_MS) {
+    let pending;
+    let settled = false;
+    return code => {
+        if (pending !== undefined)
+            return pending;
+        const timer = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            process.exit(code);
+        }, timeoutMs);
+        pending = Promise.resolve().then(dispose).then(() => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            process.exitCode = code;
+        }, () => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            process.exit(code);
+        });
+        return pending;
+    };
+}

package/lib/types/dsh-adapter/host-entry.d.ts

@@ -0,0 +1,9 @@
+/**
+ * This package's own entry (docs/standalone-host-design.md), started by
+ * bin/dsh-tui.js for every kernel: take over the installed dsh's root and
+ * module resolution before any TUI module loads, mount the runtime on it, then
+ * compose the dsh-tui profile (DSH) or the light profile (other kernels). A DSH
+ * launch without a usable installed dsh is handed to `dsh --profile` unchanged.
+ */
+import '../force-production-react.js';
+//# sourceMappingURL=host-entry.d.ts.map

package/lib/types/dsh-adapter/host-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-entry.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/host-entry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,8BAA8B,CAAA"}