@dsh-electron/dsh-plugin-multi-root-workspace 0.1.11 → 0.1.12

package/CHANGELOG.en.md

@@ -8,6 +8,17 @@ This file records the user-visible changes of every **released** version.
 - For installation sources, the supported upstream runtimes, and known limitations, see the [README](./README.en.md).
 - The evidence, numbering, and release state of each version live in the [roadmap progress ledger](./docs/plans/active/2026-09-12-multi-root-workspace.md#进度总账). The body of each GitHub Release is generated from the commit history by `scripts/release-notes.mjs` and is the complete raw list behind this file.
 
+## [0.1.12] - 2026-10-30
+
+### Added
+
+- **Multiple Hosts can use additional roots at the same time (on by default)**: the bundle now configures a shared storage authority (`sharedStorageRoot`) — previously only the Host holding the store lease could use additional roots, and a second Host sharing the same registry was fail-closed. Now a single owner opens the storage medium and manages persistence, while the other Hosts read and write through their own Registry facades over kernel-authenticated local IPC; every mutation and each new operation's admission is ordered at the owner: operations that arrive after a revocation are refused immediately, ones admitted before it may finish, and a disconnect preserves the established deny boundary; when the owner exits or crashes a follower contends, takes over, and recovers under a new epoch, and a lost committed reply is never replayed. Copied exec argv and expired handles cannot stand in for a fresh admission, the synchronous confine/spawn entry points keep their return shape, and every consumer path (fs, sandbox, shell/PTC/agent PTY, LSP, Files/watch, instructions, Skills) goes through admission. Profiles without `sharedStorageRoot` keep the legacy contended-fail-closed behavior ([ADR-0024](./docs/decisions/ADR-0024-registry-operation-admission.md), [ADR-0025](./docs/decisions/ADR-0025-shared-registry-authority.md), [shared service architecture](./docs/architecture/registry-authority-service.md)).
+- **Exact support for DSH `0.2.1-rc.5`**: the delta from `0.2.1-rc.4` does not touch this plugin's interfaces, so no new adapter branch is needed; the dev pin stays at `0.2.2-alpha.2` and the support matrix now covers 20 exact releases.
+
+### Changed
+
+- **Dependency security floors raised**: the plugin's direct `zod` floor moves to `^4.6.7`; on the development side `vitest` moves to `^4.1.12`, and `@modelcontextprotocol/sdk` `^1.32.2` is declared explicitly to keep GenAI's optional `mcpToTool` capability on a fixed release. The full development tree's advisories drop from 1 critical / 17 high / 27 moderate to 5 high / 6 moderate; the remaining advisories in host trees are introduced by DSH's own exact pins (e.g. zod `4.4.3`, Undici `8.11.2`) and are not resolved by this plugin release ([dependency security review](./docs/troubleshooting/dependency-security-alerts.md)).
+
 ## [0.1.11] - 2026-10-29
 
 ### Added
@@ -192,7 +203,8 @@ The first release: the three MVP milestones (M1–M3).
 
 - All eight findings of the pre-release external review (three of them release-blocking) are fixed, each with a regression test: a registered directory replaced by a symlink transplanting its authority (which introduced `recordedPath` — **re-resolving a path is not re-authorizing it**), concurrent registry mutations losing a write or reviving a revoked grant (per-primary-root mutations are serialized), a refresh not re-checking directories, a typed path being overwritten by the directory picker, the `reveal` response contract and failure code, duplicate ids not validated, the primary root missing from nesting validation, and CI testing before building.
 
-[Unreleased]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.11...HEAD
+[Unreleased]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.12...HEAD
+[0.1.12]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.11...v0.1.12
 [0.1.11]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.10...v0.1.11
 [0.1.10]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.9...v0.1.10
 [0.1.9]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.8...v0.1.9

package/CHANGELOG.md

@@ -8,6 +8,17 @@ English: [CHANGELOG.en.md](./CHANGELOG.en.md)
 - 安装方式、受支持的上游运行时与已知限制见 [README](./README.md)。
 - 每个版本的实施证据、编号口径与发布状态见[路线图 §进度总账](./docs/plans/active/2026-09-12-multi-root-workspace.md#进度总账)；GitHub Release 的正文由 `scripts/release-notes.mjs` 从 commit 历史生成，是本文件之外的完整原始清单。
 
+## [0.1.12] - 2026-10-30
+
+### Added
+
+- **多个 Host 可同时使用附加根（默认开启）**：bundle 现默认配置共享存储权威（`sharedStorageRoot`）——此前只有持有 store 租约的 Host 能使用附加根，共享同一登记的第二个 Host 一律 fail-closed。现在唯一 owner 打开存储介质并管理持久化，其余 Host 经本机内核认证的 IPC 通过各自的 Registry facade 读写；所有变更与每个新操作的授权在 owner 处统一排序：撤权后的新操作立即被拒，撤权前已准入的操作可以完成，断线/失联时保留既有拒绝边界；owner 退出或崩溃时 follower 竞选接管并以新 epoch 恢复，丢失的已提交应答不会自动重放。已复制的执行参数与过期句柄不能顶替新准入，同步 confine/spawn 入口保持原有返回形状；fs、sandbox、shell/PTC/agent PTY、LSP、Files/watch、指令与 Skills 消费路径全部接入准入。未启用 `sharedStorageRoot` 的 profile 保留旧的「争用即 fail-closed」行为（[ADR-0024](./docs/decisions/ADR-0024-registry-operation-admission.md)、[ADR-0025](./docs/decisions/ADR-0025-shared-registry-authority.md)、[共享服务架构](./docs/architecture/registry-authority-service.md)）。
+- **精确支持 DSH `0.2.1-rc.5`**：相对 `0.2.1-rc.4` 没有触及本插件的接口变化，不新增适配分支；开发 pin 保持 `0.2.2-alpha.2`，支持矩阵现为 20 个精确版本。
+
+### Changed
+
+- **依赖安全下限提升**：本插件直接依赖的 `zod` 下限升至 `^4.6.7`；开发侧 `vitest` 升至 `^4.1.12`，并显式声明 `@modelcontextprotocol/sdk` `^1.32.2` 以保留 GenAI `mcpToTool` 的可选能力。完整开发树的公告告警从 1 critical / 17 high / 27 moderate 降为 5 high / 6 moderate；宿主树中剩余告警均由 DSH 精确 pin 引入（如 zod `4.4.3`、Undici `8.11.2`），不随本插件版本解决（[依赖安全排查](./docs/troubleshooting/dependency-security-alerts.md)）。
+
 ## [0.1.11] - 2026-10-29
 
 ### Added
@@ -192,7 +203,8 @@ English: [CHANGELOG.en.md](./CHANGELOG.en.md)
 
 - 发布前外部评审提出的 8 项发现（其中 3 项发布阻断）全部修复，每项各带一个回归测试：登记目录被替换为符号链接后授权转移（引入 `recordedPath`，**重新解析路径不等于重新授权**）、并发修改注册表丢写或复活已撤销的授权（每个主根的变更串行）、刷新不重新检查目录、手输路径被目录选择器覆盖、`reveal` 的应答契约与失败码、重复 id 未校验、主根未纳入嵌套校验、CI 先测后构建。
 
-[Unreleased]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.11...HEAD
+[Unreleased]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.12...HEAD
+[0.1.12]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.11...v0.1.12
 [0.1.11]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.10...v0.1.11
 [0.1.10]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.9...v0.1.10
 [0.1.9]: https://github.com/cherrchen/dsh-plugin-multi-root-workspace/compare/v0.1.8...v0.1.9

package/README.en.md

@@ -20,7 +20,7 @@ Not every project is a monorepo. A real development project is usually several i
 - **Additional-root Skills**: discovers `.dsh/skills` and `.agents/skills` inside additional folders, invoked through the namespaced `/alias-id:skill-name` reference and the native `skill` tool; each root has an independent toggle and editable `aliasId`, with a global setting that defaults to on.
 - **Absent when absent**: with no additional root configured, its behavior is item-for-item identical to an uninstalled harness; every misconfiguration fails loudly instead of silently degrading.
 
-Current released version: `v0.1.11`. The user-visible changes of each version live in the [CHANGELOG](./CHANGELOG.en.md); progress and release state live in the [roadmap progress ledger](./docs/plans/active/2026-09-12-multi-root-workspace.md#进度总账).
+Current released version: `v0.1.12`. The user-visible changes of each version live in the [CHANGELOG](./CHANGELOG.en.md); progress and release state live in the [roadmap progress ledger](./docs/plans/active/2026-09-12-multi-root-workspace.md#进度总账).
 
 ## Quick Start
 
@@ -49,7 +49,7 @@ The agent can now read, write, and run bash in that directory — the default is
 | `0.1.6` | `0.1.6-alpha.1`, `0.1.6-alpha.2` |
 | `0.1.7` | `0.1.7-alpha.1`, `0.1.7-alpha.2`, `0.1.7-rc.1`, `0.1.7-rc.2` |
 | `0.2.0` | `0.2.0-rc.1`, `0.2.0-rc.2` |
-| `0.2.1` | `0.2.1-alpha.1`, `0.2.1-alpha.2`, `0.2.1-alpha.3`, `0.2.1-alpha.4`, `0.2.1-alpha.5`, `0.2.1-rc.1`, `0.2.1-rc.2`, `0.2.1-rc.3`, `0.2.1-rc.4` |
+| `0.2.1` | `0.2.1-alpha.1`, `0.2.1-alpha.2`, `0.2.1-alpha.3`, `0.2.1-alpha.4`, `0.2.1-alpha.5`, `0.2.1-rc.1`, `0.2.1-rc.2`, `0.2.1-rc.3`, `0.2.1-rc.4`, `0.2.1-rc.5` |
 | `0.2.2` | `0.2.2-alpha.2` |
 
 The plugin does not start — as if it were not installed — when the DSH release is not in the table or the `@deepseek-ai/dsh-*` packages disagree on a version.
@@ -93,8 +93,8 @@ This installs pre-built artifacts; the first install needs the `allowBuilds` add
 ```sh
 pnpm pack @dsh-electron/dsh-plugin-multi-root-workspace
 # or download the tgz from the GitHub Release assets, e.g.:
-# https://github.com/cherrchen/dsh-plugin-multi-root-workspace/releases/download/v0.1.11/dsh-electron-dsh-plugin-multi-root-workspace-0.1.11.tgz
-dsh plugin --profile web add ./dsh-electron-dsh-plugin-multi-root-workspace-0.1.11.tgz
+# https://github.com/cherrchen/dsh-plugin-multi-root-workspace/releases/download/v0.1.12/dsh-electron-dsh-plugin-multi-root-workspace-0.1.12.tgz
+dsh plugin --profile web add ./dsh-electron-dsh-plugin-multi-root-workspace-0.1.12.tgz
 ```
 
 Also pre-built, handy for air-gapped or offline delivery; the first install needs the same `allowBuilds` addition.
@@ -113,10 +113,10 @@ allowBuilds:
   koffi: true
 ```
 
-Pinning a version (e.g. `#v0.1.11`) is recommended so a later push cannot silently change what actually runs:
+Pinning a version (e.g. `#v0.1.12`) is recommended so a later push cannot silently change what actually runs:
 
 ```sh
-dsh plugin --profile web add github:cherrchen/dsh-plugin-multi-root-workspace#v0.1.11
+dsh plugin --profile web add github:cherrchen/dsh-plugin-multi-root-workspace#v0.1.12
 ```
 
 ### Install from a local clone
@@ -181,6 +181,7 @@ Expected output:
 - id: multi-root-registry
   name: '@dsh-electron/dsh-plugin-multi-root-workspace/registry'
   config:
+    sharedStorageRoot: !!js dshHomePath('storages')
     leasePath: !!js dshHomePath('storages/multi_root_workspace.lock')
     maxAdditionalRoots: 16
 - id: multi-root-instructions
@@ -260,7 +261,7 @@ For multi-root reviewer context, enable the default-disabled [Auto Review row](.
 .
 ├── src/
 │   ├── roots.ts                      pure rules: canonicalization, conflict validation, record classification (available/missing/redirected/invalid)
-│   ├── registry.ts                   the root registry: dsh-storage-domain persistence, mutations of one primary root serialized in one queue
+│   ├── registry.ts                   one storage core and Host facades, store-wide ordering of mutations and admissions
 │   ├── registry-lease.ts             cross-process Registry Authority: POSIX flock (the kernel releases it on process death)
 │   ├── registry-lease-win32.ts       ditto, the Windows named-semaphore implementation
 │   ├── scope.ts                      ctx.multiRootScope: the single authorization source, plus the model-visible topology snapshot
@@ -295,7 +296,7 @@ Issues and PRs are welcome:
 ## Known Limitations
 
 - An additional root's instruction files arrive as they become relevant: the one at the root's top level is injected before the session's first step, and a subdirectory's is injected once the session has **successfully** worked in that directory. A nested file is re-examined only when its directory is examined (the root's own every step; a subdirectory's because it was delivered from, or because of a fresh touch), delivery state is in-process (so a resumed session may be told again), and only the `read` / `write` / `edit` tool names count. The primary root's chain and the user-global file remain upstream's job, and this plugin does not inject them a second time ([ADR-0010](./docs/decisions/ADR-0010-additional-root-instruction-scope.md)).
-- Single writer per store: only one DSH process at a time may hold the root registry for a given `$DSH_HOME`; another process reports the registry as unavailable (`registry-contended`) and takes over on refresh once the holder exits or crashes. That is deliberate fail-closed behavior, not a race waiting to be fixed ([ADR-0007](./docs/decisions/ADR-0007-registry-authority-lease.md)).
+- Hosts share one Registry service: one Host owns storage and each instance obtains admission for new operations. Disconnection stops new additional-root grants; a successor takes over through the kernel lease. Sharing is local to one user and lock namespace; Linux requires SO_PEERPIDFD, and Windows is limited to one login session. Existing processes and PTYs retain their launch snapshot ([architecture](./docs/architecture/registry-authority-service.md), Chinese).
 - The supported matrix is an exact-version allowlist: on a host whose release is not on the list, or whose core packages disagree about the release, the `fs` / `sandbox` / `registry` / `instructions` / `lsp` / `workspace-files` rows **do not start** and the composition degrades to "the plugin is not installed" ([ADR-0009](./docs/decisions/ADR-0009-dsh-compat-contract.md)).
 - The Windows multi-root runner inherits upstream partial enforcement, caller-owned directory requirements, and private-temp isolation. Running processes retain their initial roots; later processes use the updated set ([ADR-0011](./docs/decisions/ADR-0011-multi-root-workspace-consumers.md)).
 - **Network and device paths cannot be additional roots on Windows**: UNC (`\\server\share`), `\\?\`, `\\.\`, and mapped network drives are rejected at registration with `unsupported-path` — the restricted token's capability SID cannot be shown to bind SMB access ([ADR-0011 amendment](./docs/decisions/ADR-0011-multi-root-workspace-consumers.md)).

package/README.md

@@ -20,7 +20,7 @@
 - **附属根 Skills**：发现附属目录的 `.dsh/skills` 与 `.agents/skills`，附属根经 `/alias-id:skill-name` 命名空间调用原生 `skill` 工具；每根独立开关、可编辑 `aliasId`，全局设置默认开启。
 - **不配等于没装**：未登记附加根时行为与未装插件逐项一致；配置错误一律明确报错，从不静默降级。
 
-当前发布版本 `v0.1.11`。各版本的用户可见变更见 [CHANGELOG](./CHANGELOG.md)；进度与发布状态见[路线图 §进度总账](./docs/plans/active/2026-09-12-multi-root-workspace.md#进度总账)。
+当前发布版本 `v0.1.12`。各版本的用户可见变更见 [CHANGELOG](./CHANGELOG.md)；进度与发布状态见[路线图 §进度总账](./docs/plans/active/2026-09-12-multi-root-workspace.md#进度总账)。
 
 ## 快速开始
 
@@ -51,7 +51,7 @@ tarball、GitHub、本地源码等其他安装方式见[安装](#安装)。
 | `0.1.6` | `0.1.6-alpha.1`、`0.1.6-alpha.2` |
 | `0.1.7` | `0.1.7-alpha.1`、`0.1.7-alpha.2`、`0.1.7-rc.1`、`0.1.7-rc.2` |
 | `0.2.0` | `0.2.0-rc.1`、`0.2.0-rc.2` |
-| `0.2.1` | `0.2.1-alpha.1`、`0.2.1-alpha.2`、`0.2.1-alpha.3`、`0.2.1-alpha.4`、`0.2.1-alpha.5`、`0.2.1-rc.1`、`0.2.1-rc.2`、`0.2.1-rc.3`、`0.2.1-rc.4` |
+| `0.2.1` | `0.2.1-alpha.1`、`0.2.1-alpha.2`、`0.2.1-alpha.3`、`0.2.1-alpha.4`、`0.2.1-alpha.5`、`0.2.1-rc.1`、`0.2.1-rc.2`、`0.2.1-rc.3`、`0.2.1-rc.4`、`0.2.1-rc.5` |
 | `0.2.2` | `0.2.2-alpha.2` |
 
 DSH 版本不在表内、或 `@deepseek-ai/dsh-*` 各包版本不一致时，插件不会启动，行为等同没装。
@@ -95,8 +95,8 @@ dsh plugin --profile web add @dsh-electron/dsh-plugin-multi-root-workspace
 ```sh
 pnpm pack @dsh-electron/dsh-plugin-multi-root-workspace
 # 或从 GitHub Release 资产下载，例如：
-# https://github.com/cherrchen/dsh-plugin-multi-root-workspace/releases/download/v0.1.11/dsh-electron-dsh-plugin-multi-root-workspace-0.1.11.tgz
-dsh plugin --profile web add ./dsh-electron-dsh-plugin-multi-root-workspace-0.1.11.tgz
+# https://github.com/cherrchen/dsh-plugin-multi-root-workspace/releases/download/v0.1.12/dsh-electron-dsh-plugin-multi-root-workspace-0.1.12.tgz
+dsh plugin --profile web add ./dsh-electron-dsh-plugin-multi-root-workspace-0.1.12.tgz
 ```
 
 同样是预构建产物，适合内网或离线环境交付；首次安装同样需要添加 `allowBuilds`。
@@ -115,10 +115,10 @@ allowBuilds:
   koffi: true
 ```
 
-建议锁定版本（如 `#v0.1.11`），让后续推送无法悄悄改变实际运行的内容：
+建议锁定版本（如 `#v0.1.12`），让后续推送无法悄悄改变实际运行的内容：
 
 ```sh
-dsh plugin --profile web add github:cherrchen/dsh-plugin-multi-root-workspace#v0.1.11
+dsh plugin --profile web add github:cherrchen/dsh-plugin-multi-root-workspace#v0.1.12
 ```
 
 ### 从本地源码安装
@@ -183,6 +183,7 @@ dsh --profile web --dump-config | grep -A3 'multi-root'
 - id: multi-root-registry
   name: '@dsh-electron/dsh-plugin-multi-root-workspace/registry'
   config:
+    sharedStorageRoot: !!js dshHomePath('storages')
     leasePath: !!js dshHomePath('storages/multi_root_workspace.lock')
     maxAdditionalRoots: 16
 - id: multi-root-instructions
@@ -262,7 +263,7 @@ Settings → Plugins → Multi-root Workspace 中的 **启用附属根 Skills**
 .
 ├── src/
 │   ├── roots.ts                      纯规则层：canonical 化、冲突校验、登记状态分类（available/missing/redirected/invalid）
-│   ├── registry.ts                   根注册表：dsh-storage-domain 持久化，同一主根的变更在一条队列里串行
+│   ├── registry.ts                   根注册表：dsh-storage-domain 持久化，唯一存储核心与 Host facade，store-wide 准入/变更排序
 │   ├── registry-lease.ts             跨进程 Registry Authority：POSIX flock（进程死亡由内核释放）
 │   ├── registry-lease-win32.ts       同上，Windows named semaphore 实现
 │   ├── scope.ts                      ctx.multiRootScope：唯一的授权源，兼发模型可见的拓扑快照
@@ -297,7 +298,7 @@ Settings → Plugins → Multi-root Workspace 中的 **启用附属根 Skills**
 ## 已知限制
 
 - 附加根的指令文件按需到达模型：根目录顶层的那一份在会话第一步之前注入，子目录里的那一份在本会话**成功**触碰过该目录之后注入；nested 文件只会在其目录被考察到时重新检查（根层每一步，子目录依赖已投递或有新触碰），投递状态是进程内的（resume 后可能再告知一次），也只识别 `read` / `write` / `edit` 三个工具名。主根与 user-global 的指令链仍由上游负责，本插件不重复注入（[ADR-0010](./docs/decisions/ADR-0010-additional-root-instruction-scope.md)）。
-- 跨进程单写者：同一 `$DSH_HOME` 上同时只允许一个 DSH 进程持有根登记表；另一个进程显示登记表不可用（`registry-contended`），持锁者退出或崩溃后刷新即接管——这是刻意的 fail-closed，不是待修的竞态（[ADR-0007](./docs/decisions/ADR-0007-registry-authority-lease.md)）。
+- 多 Host 共享同一登记服务：只有一个 Host 管理存储，各实例逐操作取得授权；断线停止新附加授权，权威退出后按内核锁接管。限同机器、同用户及同锁命名空间；Linux 共享连接需要 SO_PEERPIDFD，Windows 限同登录会话。旧进程/PTY 保留启动快照（[共享架构](./docs/architecture/registry-authority-service.md)）。
 - 支持矩阵是精确版本 allowlist：宿主版本不在清单上、或核心包混装了不同版本时，`fs` / `sandbox` / `registry` / `instructions` / `lsp` / `workspace-files` 六行**不启动**，组合退化为"没装这个插件"（[ADR-0009](./docs/decisions/ADR-0009-dsh-compat-contract.md)）。
 - Windows 多根 runner 继承上游 partial enforcement、caller-owned 目录及 private temp 分离条件；已启动进程保留启动时根集合，后续进程使用更新后的集合（[ADR-0011](./docs/decisions/ADR-0011-multi-root-workspace-consumers.md)）。
 - **Windows 上的网络与设备路径不能成为附加根**：UNC（`\\server\share`）、`\\?\`、`\\.\` 与映射网络盘在登记时即以 `unsupported-path` 拒绝——restricted token 的 capability SID 无法绑定 SMB 访问（[ADR-0011 修订](./docs/decisions/ADR-0011-multi-root-workspace-consumers.md)）。

package/cordis.patch.yml

@@ -79,8 +79,9 @@
     - id: multi-root-registry
       name: '@dsh-electron/dsh-plugin-multi-root-workspace/registry'
       config:
-        # Store-wide kernel lease beside the JSON domain document. A custom
-        # storage-json.root must override this path in lockstep (ADR-0007).
+        # Shared authority owns this explicit JSON medium; followers use IPC.
+        # Change both paths together for a custom Registry store (ADR-0025).
+        sharedStorageRoot: !!js dshHomePath('storages')
         leasePath: !!js dshHomePath('storages/multi_root_workspace.lock')
         # Cap on stored additional-root records per primary root (integer,
         # 1..64; the count covers every state, so it is stable). A store that

package/lib/auto-review.js

@@ -1,4 +1,4 @@
-import { n as assertAutoReviewRelease, t as MultiRootReviewContext } from "./review-context-AH-SXHmj.js";
+import { n as assertAutoReviewRelease, t as MultiRootReviewContext } from "./review-context-NDpKeMCc.js";
 import { t as assertForkPackages } from "./auto-review-packages-nRjnb4pU.js";
 import { t as wrapMethod } from "./method-wrapper-CFY3p3j2.js";
 //#region src/compat/auto-review-loader.ts

package/lib/client.js

@@ -123,7 +123,7 @@ window.__ModuleLoader__.load({
 			return typeof count === "number" && count > 0;
 		}
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/util.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/util.js
 		function getEnumValues(entries) {
 			const numericValues = Object.values(entries).filter((v) => typeof v === "number");
 			return Object.entries(entries).filter(([k, _]) => numericValues.indexOf(+k) === -1).map(([_, v]) => v);
@@ -430,6 +430,17 @@ window.__ModuleLoader__.load({
 		function unwrapMessage(message) {
 			return typeof message === "string" ? message : message?.message;
 		}
+		/** The leading size checks of `defChecks` that set an upper bound, each paired with it. */
+		function sizeCaps(defChecks) {
+			const caps = [];
+			for (const ch of defChecks ?? []) {
+				const d = ch._zod.def;
+				if (!/_(length|size)$|_equals$/.test(d.check)) break;
+				const max = d.maximum ?? d.length ?? d.size;
+				if (max >= 0) caps.push([max, ch]);
+			}
+			return caps;
+		}
 		function attachSchema(issues, start, inst) {
 			var _a;
 			for (let i = start; i < issues.length; i++) (_a = issues[i]).schema ?? (_a.schema = inst);
@@ -506,7 +517,6 @@ window.__ModuleLoader__.load({
 				});
 				else defineBound(proto, key, desc.value);
 			}
-			for (const sym of Object.getOwnPropertySymbols(table)) defineBound(proto, sym, table[sym]);
 		}
 		/** Shadows a prototype member with an own value, so a getter that builds from the instance runs once. */
 		function own(inst, key, value, enumerable = true) {
@@ -647,7 +657,7 @@ window.__ModuleLoader__.load({
 			return fn;
 		}
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/core.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/core.js
 		var _a$1;
 		const _zodDesc = {
 			value: void 0,
@@ -692,8 +702,7 @@ window.__ModuleLoader__.load({
 					} finally {
 						_zodDesc.value = void 0;
 					}
-				}
-				if (inst._zod.traits.has(name)) return;
+				} else if (inst._zod.traits.has(name)) return;
 				inst._zod.traits.add(name);
 				initializer(inst, def);
 				if (initialized) {
@@ -754,7 +763,7 @@ window.__ModuleLoader__.load({
 			return globalConfig;
 		}
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/errors.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/errors.js
 		function _getMessage() {
 			const internals = this._zod;
 			internals.message ?? (internals.message = JSON.stringify(internals.def, jsonStringifyReplacer, 2));
@@ -870,7 +879,7 @@ window.__ModuleLoader__.load({
 			return fieldErrors;
 		}
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/parse.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/parse.js
 		function finalizeParams(callee, params) {
 			return {
 				callee: params?.callee ?? callee,
@@ -1073,7 +1082,7 @@ window.__ModuleLoader__.load({
 			return _safeParseAsync(_Err)(schema, value, _ctx);
 		};
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/regexes.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/regexes.js
 		/**
 		* @deprecated CUID v1 is deprecated by its authors due to information leakage
 		* (timestamps embedded in the id). Use {@link cuid2} instead.
@@ -1144,7 +1153,7 @@ window.__ModuleLoader__.load({
 		const lowercase = /^[^A-Z]*$/;
 		const uppercase = /^[^a-z]*$/;
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/checks.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/checks.js
 		const $ZodCheck = /*@__PURE__*/ $constructor("$ZodCheck", (inst, def) => {
 			var _a;
 			inst._zod ?? (inst._zod = {});
@@ -1440,7 +1449,7 @@ window.__ModuleLoader__.load({
 			};
 		});
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/doc.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/doc.js
 		var Doc = class {
 			constructor(args = [], closed = {}) {
 				this.content = [];
@@ -1474,14 +1483,14 @@ window.__ModuleLoader__.load({
 			}
 		};
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/versions.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/versions.js
 		const version = {
 			major: 4,
 			minor: 6,
-			patch: 2
+			patch: 7
 		};
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/schemas.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/schemas.js
 		const $ZodType = /*@__PURE__*/ $constructor("$ZodType", (inst, def) => {
 			var _a;
 			inst ?? (inst = {});
@@ -1641,10 +1650,27 @@ window.__ModuleLoader__.load({
 			def.pattern ?? (def.pattern = email);
 			$ZodStringFormat.init(inst, def);
 		});
-		/** Parses a URL for `$ZodURL`, applying the one guard the URL constructor cannot express. Returns the parsed URL, or a code naming the stage that rejected it — the runtime needs that distinction to pick an issue note, and compiled code only needs to know it is not a URL. */
+		function canParseURL(input) {
+			try {
+				if (typeof URL !== "undefined" && typeof URL.canParse === "function") return URL.canParse(input);
+				new URL(input);
+				return true;
+			} catch {
+				return false;
+			}
+		}
+		function validateURL(trimmed, def) {
+			if (!("normalize" in def) && !("hostname" in def) && !("protocol" in def)) return canParseURL(trimmed) || 2;
+			return parseURLObject(trimmed, def);
+		}
+		/** Parses a URL while preserving the non-normalizing HTTP guard. */
 		function parseURLObject(trimmed, def) {
 			if (!def.normalize && def.protocol?.source === httpProtocol.source && !/^https?:\/\//i.test(trimmed)) return 1;
 			try {
+				if (typeof URL !== "undefined") {
+					const URLStatic = URL;
+					if (typeof URLStatic.parse === "function") return URLStatic.parse(trimmed) ?? 2;
+				}
 				return new URL(trimmed);
 			} catch {
 				return 2;
@@ -1668,7 +1694,7 @@ window.__ModuleLoader__.load({
 			inst._zod.check = (payload) => {
 				try {
 					const trimmed = payload.value.trim();
-					const url = parseURLObject(trimmed, def);
+					const url = validateURL(trimmed, def);
 					if (url === 1) {
 						payload.issues.push({
 							code: "invalid_format",
@@ -1690,6 +1716,10 @@ window.__ModuleLoader__.load({
 						});
 						return;
 					}
+					if (url === true) {
+						payload.value = stripTabAndNewline(trimmed);
+						return;
+					}
 					if (def.hostname && !urlHostnameOk(url, def.hostname)) payload.issues.push({
 						code: "invalid_format",
 						format: "url",
@@ -1779,12 +1809,7 @@ window.__ModuleLoader__.load({
 		const ipv6Alphabet = /^[0-9a-fA-F:.]+$/;
 		function isValidIPv6(value) {
 			if (!ipv6Alphabet.test(value)) return false;
-			try {
-				new URL(`http://[${value}]`);
-				return true;
-			} catch {
-				return false;
-			}
+			return canParseURL(`http://[${value}]`);
 		}
 		const $ZodIPv6 = /*@__PURE__*/ $constructor("$ZodIPv6", (inst, def) => {
 			def.pattern ?? (def.pattern = ipv6);
@@ -1962,6 +1987,26 @@ window.__ModuleLoader__.load({
 				return payload;
 			};
 		});
+		function capSize(inst, size) {
+			const caps = sizeCaps(inst._zod.def.checks);
+			if (!caps.length) return;
+			const cap = Math.min(...caps.map((c) => c[0]));
+			const parse = inst._zod.parse;
+			inst._zod.parse = (payload, ctx) => {
+				const n = size(payload.value);
+				if (n > cap && !ctx?.skipChecks && ctx?.direction !== "backward") {
+					for (const [max, ch] of sizeCaps(inst._zod.def.checks)) if (n > max && ch._zod.def.when(payload)) {
+						const start = payload.issues.length;
+						ch._zod.check(payload);
+						payload.issues[start].continue = false;
+						attachSchema(payload.issues, start, inst);
+						return payload;
+					}
+				}
+				return parse(payload, ctx);
+			};
+		}
+		const arraySize = (input) => Array.isArray(input) ? input.length : -1;
 		function handleArrayResult(result, final, index) {
 			if (result.issues.length) final.issues.push(...prefixIssues(index, result.issues));
 			final.value[index] = result.value;
@@ -1999,6 +2044,7 @@ window.__ModuleLoader__.load({
 				if (proms.length) return Promise.all(proms).then(() => payload);
 				return payload;
 			};
+			capSize(inst, arraySize);
 		});
 		function handlePropertyResult(result, final, key, input, optin, optout) {
 			const isPresent = key in input;
@@ -2107,7 +2153,7 @@ window.__ModuleLoader__.load({
 				}
 				return propValues;
 			});
-			const isObject$2 = isObject;
+			const isObject$1 = isObject;
 			const catchall = def.catchall;
 			let value;
 			const memo = globalConfig.memoizer;
@@ -2115,7 +2161,7 @@ window.__ModuleLoader__.load({
 			inst._zod.parse = (payload, ctx) => {
 				value ?? (value = _normalized.value);
 				const input = payload.value;
-				if (!isObject$2(input)) {
+				if (!isObject$1(input)) {
 					payload.issues.push({
 						expected: "object",
 						code: "invalid_type",
@@ -2245,7 +2291,7 @@ window.__ModuleLoader__.load({
 				return doc.compile();
 			};
 			let fastpass;
-			const isObject$1 = isObject;
+			const isObject$2 = isObject;
 			const jit = !globalConfig.jitless;
 			const fastEnabled = jit && allowsEval.value;
 			const catchall = def.catchall;
@@ -2253,7 +2299,7 @@ window.__ModuleLoader__.load({
 			inst._zod.parse = (payload, ctx) => {
 				value ?? (value = _normalized.value);
 				const input = payload.value;
-				if (!isObject$1(input)) {
+				if (!isObject$2(input)) {
 					payload.issues.push({
 						expected: "object",
 						code: "invalid_type",
@@ -2683,7 +2729,7 @@ window.__ModuleLoader__.load({
 			}
 		}
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/memoizer.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/memoizer.js
 		var $ZodCyclicError = class extends Error {
 			constructor() {
 				super(`Cannot parse a reference cycle that closes through a transform`);
@@ -2694,7 +2740,7 @@ window.__ModuleLoader__.load({
 		const STATE = "~memo";
 		const NO_ISSUES = [];
 		function isRef(value) {
-			return value !== null && (typeof value === "object" || typeof value === "function");
+			return value !== null && typeof value === "object";
 		}
 		function cloneIssues(issues) {
 			return issues.map((iss) => iss.path ? {
@@ -2741,9 +2787,6 @@ window.__ModuleLoader__.load({
 					check(def.catchall);
 					break;
 				}
-				case "properties":
-					merge(shape(def.shape, false));
-					break;
 				case "array":
 					check(def.element);
 					break;
@@ -2939,7 +2982,7 @@ window.__ModuleLoader__.load({
 			return backEdges !== void 0 && isRef(value) && backEdges.has(value);
 		}
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/locales/en.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/locales/en.js
 		const error = () => {
 			const Sizable = {
 				string: {
@@ -2994,6 +3037,7 @@ window.__ModuleLoader__.load({
 				base64url: "base64url-encoded string",
 				json_string: "JSON string",
 				e164: "E.164 number",
+				currency_code: "currency code",
 				credit_card: "credit card number",
 				iban: "IBAN",
 				jwt: "JWT",
@@ -3046,7 +3090,7 @@ window.__ModuleLoader__.load({
 			return { localeError: error() };
 		}
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/registries.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/registries.js
 		var _a;
 		var $ZodRegistry = class {
 			constructor() {
@@ -3093,13 +3137,17 @@ window.__ModuleLoader__.load({
 		(_a = globalThis).__zod_globalRegistry ?? (_a.__zod_globalRegistry = registry());
 		const globalRegistry = globalThis.__zod_globalRegistry;
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/api.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/api.js
+		function snapshotChecks(def) {
+			if (def.checks) def.checks = [...def.checks];
+			return def;
+		}
 		// @__NO_SIDE_EFFECTS__
 		function _string(Class, params) {
-			return new Class({
+			return new Class(snapshotChecks({
 				type: "string",
 				...normalizeParams(params)
-			});
+			}));
 		}
 		// @__NO_SIDE_EFFECTS__
 		function _email(Class, params) {
@@ -3371,11 +3419,11 @@ window.__ModuleLoader__.load({
 		}
 		// @__NO_SIDE_EFFECTS__
 		function _number(Class, params) {
-			return new Class({
+			return new Class(snapshotChecks({
 				type: "number",
 				checks: [],
 				...normalizeParams(params)
-			});
+			}));
 		}
 		// @__NO_SIDE_EFFECTS__
 		function _int(Class, params) {
@@ -3598,7 +3646,7 @@ window.__ModuleLoader__.load({
 			return ch;
 		}
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/to-json-schema.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/to-json-schema.js
 		function assignProps(target, ...sources) {
 			for (const source of sources) for (const key of Reflect.ownKeys(source)) if (Object.prototype.propertyIsEnumerable.call(source, key)) assignProp(target, key, source[key]);
 			return target;
@@ -4042,7 +4090,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			return finalize(ctx, schema);
 		};
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/core/json-schema-processors.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/json-schema-processors.js
 		const narrowMin = (agg, key, value) => {
 			if (agg[key] === void 0 || value > agg[key]) agg[key] = value;
 		};
@@ -4229,13 +4277,12 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					key
 				]
 			}));
-			const allKeys = new Set(Object.keys(shape));
-			const requiredKeys = new Set([...allKeys].filter((key) => {
+			const requiredKeys = [];
+			for (const key of Object.keys(shape)) {
 				const field = def.shape[key];
-				if (ctx.io === "input") return inputOptin(field) === void 0;
-				else return field._zod.optout === void 0;
-			}));
-			if (requiredKeys.size > 0) json.required = Array.from(requiredKeys);
+				if (ctx.io === "input" ? inputOptin(field) === void 0 : field._zod.optout === void 0) requiredKeys.push(key);
+			}
+			if (requiredKeys.length > 0) json.required = requiredKeys;
 			if (def.catchall?._zod.def.type === "never") json.additionalProperties = false;
 			else if (!def.catchall) {
 				if (ctx.io === "output") json.additionalProperties = false;
@@ -4364,7 +4411,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			seen.ref = def.innerType;
 		};
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/classic/errors.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/classic/errors.js
 		const _installedErrorProtos = /* @__PURE__ */ new WeakSet([Object.prototype, Error.prototype]);
 		function _lazyMethod(proto, key, make) {
 			Object.defineProperty(proto, key, {
@@ -4414,7 +4461,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		};
 		const ZodRealError = /*@__PURE__*/ $constructor("ZodError", initializer, void 0, { Parent: Error });
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/classic/parse.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/classic/parse.js
 		const parse = /* @__PURE__ */ _parse(ZodRealError);
 		const parseAsync = /* @__PURE__ */ _parseAsync(ZodRealError);
 		const safeParse = /* @__PURE__ */ _safeParse(ZodRealError);
@@ -4428,7 +4475,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		const safeEncodeAsync = /* @__PURE__ */ _safeEncodeAsync(ZodRealError);
 		const safeDecodeAsync = /* @__PURE__ */ _safeDecodeAsync(ZodRealError);
 		//#endregion
-		//#region node_modules/.pnpm/zod@4.6.2/node_modules/zod/v4/classic/schemas.js
+		//#region node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/classic/schemas.js
 		function _ensureDefaultLocale() {
 			if (!globalConfig.localeError) config(en_default());
 		}
@@ -8349,7 +8396,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		* `@deepseek-ai/dsh-client-ui-primitives`.
 		*
 		* ```text
-		* 0.1.5-rc.2 through 0.2.1-rc.4   no `isMobileDevice` export
+		* 0.1.5-rc.2 through 0.2.1-rc.5   no `isMobileDevice` export
 		* 0.2.2-alpha.2 +                 `isMobileDevice` exported
 		* ```
 		*