@monotykamary/dsh 0.1.7 → 0.1.9

package/README.i18n.yaml

@@ -1,6 +1,6 @@
 # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
-#   pnpm run verify-translation-pairing --write apps/cli/README.md
-README.md: 98048c14ccc99fc1f86f17f75fb3b822318e4849
-README.zh.md: 412687905628248f32227e024d3467c801d66599
+#   bun run verify-translation-pairing --write apps/cli/README.md
+README.md: 4978c08597b54d0f2bc33d5764366eede43e3d16
+README.zh.md: 1ec6a471b318549ef7e9842a0758dbf813e43aa8

package/README.md

@@ -11,7 +11,7 @@ The `dsh` command is the product launcher for profiles: ordered stacks of plugin
 | `dsh --profile <name>` | Boot the named profile under `$DSH_HOME/profiles/<name>`. |
 | `dsh --profile headless "job"` | Run one fresh persisted session, print the final answer, and exit. |
 | `dsh web` | Alias of `--profile web`. |
-| `dsh plugin --profile <name> <pnpm args>` | Manage a profile's plugins by forwarding to pnpm in the profile directory. |
+| `dsh plugin --profile <name> <bun args>` | Manage a profile's plugins by forwarding to bun in the profile directory. |
 | `dsh version [--json]` | Report the installed DSH, Fabric, and Fovea closure. |
 | `dsh update [--check] [--json]` | Check versions or hand an npm-global update to a detached worker. |
 | `dsh doctor [--json]` | Report the installation channel, Node version, DSH home, and package versions. |
@@ -39,7 +39,7 @@ The tree composes over an empty root:
 - then the profile's `cordis.patch.yml`, then the home-level `$DSH_HOME/cordis.patch.yml`
 - then `--patch` overlays
 
-Bundles named in `dsh.profile.bundles` resolve from the dsh installation first (`@monotykamary/dsh-base`, `@monotykamary/dsh-web-app`, `@monotykamary/dsh-headless`), then from the profile's own `node_modules`, where pnpm installs out-of-tree plugins.
+Bundles named in `dsh.profile.bundles` resolve from the dsh installation first (`@monotykamary/dsh-base`, `@monotykamary/dsh-web-app`, `@monotykamary/dsh-headless`), then from the profile's own `node_modules`, where bun installs out-of-tree plugins.
 
 Use `--dump-default-config` and `--dump-config` to inspect the composed tree without booting it.
 
@@ -47,4 +47,4 @@ The [CLI behavior reference](reference/README.md) owns exact layer precedence, f
 
 ## Development
 
-Production runs require built package and frontend artifacts. From the repository root, run `pnpm run build` separately, then use `pnpm dsh <args...>` to run the TypeScript entry and forward every argument; the [source-execution reference](reference/README.md#source-execution) owns the module-resolution contract.
+Production runs require built package and frontend artifacts. From the repository root, run `bun run build` separately, then use `bun dsh <args...>` to run the TypeScript entry and forward every argument; the [source-execution reference](reference/README.md#source-execution) owns the module-resolution contract.

package/README.zh.md

@@ -11,7 +11,7 @@
 | `dsh --profile <name>` | 启动位于 `$DSH_HOME/profiles/<name>` 的指定 profile。 |
 | `dsh --profile headless "job"` | 运行一个全新的持久化会话，打印最终答案并退出。 |
 | `dsh web` | `--profile web` 的别名。 |
-| `dsh plugin --profile <name> <pnpm args>` | 通过在 profile 目录中转发给 pnpm 来管理该 profile 的插件。 |
+| `dsh plugin --profile <name> <bun args>` | 通过在 profile 目录中转发给 bun 来管理该 profile 的插件。 |
 | `dsh version [--json]` | 报告已安装的 DSH、Fabric 与 Fovea 闭包。 |
 | `dsh update [--check] [--json]` | 检查版本，或把 npm 全局更新交给分离 Worker。 |
 | `dsh doctor [--json]` | 报告安装渠道、Node 版本、DSH home 与包版本。 |
@@ -41,7 +41,7 @@ profile 目录包含一个 `package.json`，其中记录树外插件依赖、由
 - profile 自身的 `cordis.patch.yml`，然后是 home 级的 `$DSH_HOME/cordis.patch.yml`
 - `--patch` 指定的覆盖层
 
-`dsh.profile.bundles` 中列出的组合包先从 dsh 安装目录解析（`@monotykamary/dsh-base`、`@monotykamary/dsh-web-app`、`@monotykamary/dsh-headless`），再从 profile 自身的 `node_modules` 解析；pnpm 会将树外插件安装到该目录。
+`dsh.profile.bundles` 中列出的组合包先从 dsh 安装目录解析（`@monotykamary/dsh-base`、`@monotykamary/dsh-web-app`、`@monotykamary/dsh-headless`），再从 profile 自身的 `node_modules` 解析；bun 会将树外插件安装到该目录。
 
 使用 `--dump-default-config` 和 `--dump-config` 可在不启动的情况下检查组合后的配置树。
 
@@ -49,4 +49,4 @@ profile 目录包含一个 `package.json`，其中记录树外插件依赖、由
 
 ## 开发
 
-生产运行需要已构建的包与前端产物。请在仓库根目录单独运行 `pnpm run build`，然后使用 `pnpm dsh <args...>` 运行 TypeScript 入口并转发所有参数；模块解析约定以[源码执行参考](reference/README.zh.md#source-execution)为准。
+生产运行需要已构建的包与前端产物。请在仓库根目录单独运行 `bun run build`，然后使用 `bun dsh <args...>` 运行 TypeScript 入口并转发所有参数；模块解析约定以[源码执行参考](reference/README.zh.md#source-execution)为准。

package/lib/bin.js

@@ -17,7 +17,7 @@ import { Command, CommanderError } from "commander";
 * and `dsh --profile web -h` prints the web app's help, not this one's.
 *
 * `web` is a hardcoded alias for `--profile web`; `plugin` manages a profile's
-* plugin dependencies by forwarding to pnpm.
+* plugin dependencies by forwarding to Bun.
 * @module @monotykamary/dsh/args
 */
 /**
@@ -96,10 +96,10 @@ function parseDshArgs(argv, version) {
 		rejectParentOptions("web");
 		resolved = resolveBoot(web, "web", options, args);
 	});
-	program.command("plugin").description("manage a profile's plugins by forwarding the remaining arguments to pnpm in the profile directory").requiredOption("--profile <name>", "the profile whose plugins to manage (initialized on first use)").allowUnknownOption().argument("[args...]", "pnpm arguments, forwarded verbatim (add <pkg>, remove <pkg>, why <pkg>, ...)").action((args, options) => {
+	program.command("plugin").description("manage a profile's plugins by forwarding the remaining arguments to Bun in the profile directory").requiredOption("--profile <name>", "the profile whose plugins to manage (initialized on first use)").allowUnknownOption().argument("[args...]", "Bun arguments, forwarded verbatim (add <pkg>, remove <pkg>, why <pkg>, ...)").action((args, options) => {
 		rejectParentOptions("plugin");
 		if (options.profile === "") program.error("error: --profile needs a name");
-		if (args.length === 0) program.error("error: plugin needs pnpm arguments to forward (e.g. add <package>)");
+		if (args.length === 0) program.error("error: plugin needs Bun arguments to forward (e.g. add <package>)");
 		resolved = {
 			mode: "plugin",
 			profile: options.profile,
@@ -163,7 +163,7 @@ switch (invocation.mode) {
 		break;
 	}
 	case "plugin": {
-		const { runPlugin } = await import("./plugin-Cgl0ZnNV.js");
+		const { runPlugin } = await import("./plugin-BcPTOxhP.js");
 		process.exit(runPlugin(invocation.profile, invocation.args));
 		break;
 	}

package/lib/dump-config-BbrCcLKe.js

@@ -0,0 +1,64 @@
+import { i as prepareProfile, n as PROFILE_ROOT_FILENAME, r as homePatchPath } from "./profile-boot-EVnLskjy.js";
+import { existsSync } from "node:fs";
+import { loadOptionalPatches, loadOverlayPatches, renderConfigDump } from "@monotykamary/dsh-app-boot";
+import { join, resolve } from "node:path";
+//#region lib/types/dump-config.js
+/**
+* Config-dump entry for `dsh --profile <name> --dump-config`: compose the
+* profile's patch layers through the include plugin's patch algorithm without
+* booting or evaluating `!!js`, with one source layer per bundle, the
+* profile's own patch file, and each `--patch` overlay.
+* @module @monotykamary/dsh/dump-config
+*/
+const NAME = "dsh";
+/**
+* Print a profile composition with comments naming each source file and patch layer.
+* @param profile - the profile name.
+* @param defaultOnly - omit the profile's user layer and `--patch` overlays
+* (the recovery diagnostic for a broken `cordis.patch.yml`, which is then
+* never parsed).
+* @param patches - `--patch` overlay paths, in argv order.
+*/
+function runDumpConfig(profile, defaultOnly, patches) {
+	const loaded = prepareProfile(profile, !defaultOnly);
+	const layers = loaded.layers.map((layer) => ({
+		label: layer.packageName,
+		patches: layer.patches
+	}));
+	if (process.env.DSH_TOOLS_MODE !== void 0) {
+		const lastBundleTools = loaded.layers.flatMap((layer) => layer.patches).reverse().find((patch) => patch.id === "tools" && !Array.isArray(patch.insert));
+		const toolsConfig = lastBundleTools?.config !== void 0 && typeof lastBundleTools.config === "object" ? { ...lastBundleTools.config } : {};
+		layers.push({
+			label: "dsh launcher (DSH_TOOLS_MODE)",
+			patches: [{
+				id: "tools",
+				config: {
+					...toolsConfig,
+					mode: process.env.DSH_TOOLS_MODE
+				}
+			}]
+		});
+	}
+	if (!defaultOnly) {
+		if (existsSync(loaded.patchPath)) layers.push({
+			label: loaded.patchPath,
+			patches: loaded.patches
+		});
+		const homePatchFile = homePatchPath();
+		const homePatches = loadOptionalPatches(NAME, homePatchFile);
+		if (homePatches !== void 0) layers.push({
+			label: homePatchFile,
+			patches: homePatches
+		});
+		for (const file of patches) {
+			const absolute = resolve(file);
+			layers.push({
+				label: absolute,
+				patches: loadOverlayPatches(NAME, absolute)
+			});
+		}
+	}
+	process.stdout.write(renderConfigDump(NAME, join(loaded.dir, PROFILE_ROOT_FILENAME), layers));
+}
+//#endregion
+export { runDumpConfig };

package/lib/plugin-BcPTOxhP.js

@@ -0,0 +1,128 @@
+import { t as INSTALL_ANCHOR } from "./profile-boot-Bt4vObgm.js";
+import { existsSync } from "node:fs";
+import { DEFAULT_PROFILE_BUNDLES, PROFILE_TEMPLATES, initProfile, readProfileManifest, resolveBundleDir, resolveProfileDir, writeProfileManifest } from "@monotykamary/dsh-app-boot";
+import { join, resolve } from "node:path";
+import { spawnSync } from "node:child_process";
+//#region lib/types/plugin.js
+/**
+* `dsh plugin --profile <name> <args...>` — profile plugin management as a
+* thin Bun forwarder: initialize the profile on first use, run
+* `Bun <args...>` in the profile directory, then reconcile the
+* `dsh.profile.bundles` layer list against the installed state (a dependency
+* resolving to a package that declares `dsh.bundle` joins the layer stack; a
+* removed or bundle-less dependency leaves it). Reconciling by installed
+* state, not by dependency diff, means `update` activates a package that
+* gained its `dsh.bundle` declaration in a newer version.
+* @module @monotykamary/dsh/plugin
+*/
+const NAME = "dsh";
+/**
+* Whether a resolved dependency exports a profile patch, i.e. is a bundle.
+* @param packageName - the dependency's package name.
+* @param profileDir - the profile directory (resolution anchor).
+* @returns true when the package manifest declares `dsh.bundle`.
+*/
+function exportsPatch(packageName, profileDir) {
+	let dir;
+	try {
+		dir = resolveBundleDir(NAME, packageName, INSTALL_ANCHOR, profileDir);
+	} catch {
+		return false;
+	}
+	return readProfileManifest(NAME, dir).dsh?.bundle?.patch !== void 0;
+}
+/**
+* Reconcile `dsh.profile.bundles` against the installed state: Bun has
+* already written the real installed names (so a git/path/tarball/alias spec
+* on the command line reconciles by its true package name) and materialized
+* the packages. A dependency that resolves to a `dsh.bundle`-declaring
+* package joins the layer stack (appended in dependency order); a
+* dependency-listed name that no longer does — removed, or the installed
+* version dropped the declaration — leaves it. In-box bundles from the
+* profile template are not dependencies and are never touched. Warns once
+* per newly-added bundle-less dependency (a plain library is fine; the
+* warning is orientation).
+*/
+function reconcilePlugins(before, profileDir) {
+	const after = readProfileManifest(NAME, profileDir);
+	const beforeDeps = new Set(Object.keys(before.dependencies ?? {}));
+	const dependencies = Object.keys(after.dependencies ?? {});
+	const plugins = after.dsh?.profile?.bundles ?? [];
+	let changed = false;
+	for (const packageName of dependencies) {
+		const isBundle = exportsPatch(packageName, profileDir);
+		if (isBundle && !plugins.includes(packageName)) {
+			plugins.push(packageName);
+			changed = true;
+		} else if (!isBundle && !beforeDeps.has(packageName)) process.stderr.write(`${NAME}: warning: ${packageName} declares no dsh.bundle — installed as a plain dependency, not a profile layer (a later update that gains one activates it automatically)
+`);
+	}
+	const dependencySet = new Set(dependencies);
+	for (const packageName of [...plugins]) {
+		const wasDependency = beforeDeps.has(packageName) || dependencySet.has(packageName);
+		const stillBundle = dependencySet.has(packageName) && exportsPatch(packageName, profileDir);
+		if (wasDependency && !stillBundle) {
+			plugins.splice(plugins.indexOf(packageName), 1);
+			changed = true;
+		}
+	}
+	if (!changed) return;
+	after.dsh = {
+		...after.dsh,
+		profile: {
+			...after.dsh?.profile,
+			bundles: plugins
+		}
+	};
+	writeProfileManifest(profileDir, after);
+}
+/**
+* Rewrite relative filesystem specs against the user's invoking directory.
+* Bun runs with cwd = the profile directory, so a bare `.` or `../plugin`
+* (or their `file:`/`link:` forms) would silently resolve inside the profile
+* — `add .` from a plugin checkout would self-link the profile. Absolute
+* specs, registry names, and every other Bun argument pass through
+* untouched.
+* @param argument - one Bun argument, verbatim from argv.
+* @param cwd - the directory `dsh` was invoked from.
+* @returns the argument with a relative path spec anchored to `cwd`.
+*/
+function anchorPathSpec(argument, cwd) {
+	const match = /^(?<prefix>(?:file|link):)?(?<path>\.{1,2}(?:[/\\].*)?)$/.exec(argument);
+	if (match?.groups?.path === void 0) return argument;
+	return `${match.groups.prefix ?? ""}${resolve(cwd, match.groups.path)}`;
+}
+/**
+* Run one `dsh plugin` invocation: init if needed, forward to Bun, reconcile.
+* @param profile - the profile name.
+* @param args - Bun arguments with relative path specs anchored to the invoking directory.
+* @returns the Bun exit code.
+*/
+function runPlugin(profile, args) {
+	const dir = resolveProfileDir(profile);
+	const template = PROFILE_TEMPLATES[profile];
+	const initialized = !existsSync(join(dir, "package.json"));
+	initProfile(dir, template ?? DEFAULT_PROFILE_BUNDLES, template === void 0 ? void 0 : profile);
+	if (initialized) process.stderr.write(`${NAME}: initialized profile ${profile} at ${dir}\n`);
+	const before = readProfileManifest(NAME, dir);
+	const result = spawnSync(process.platform === "win32" ? "bun.exe" : "bun", args.map((argument) => anchorPathSpec(argument, process.cwd())), {
+		cwd: dir,
+		stdio: "inherit"
+	});
+	if (result.error !== void 0) {
+		if (result.error.code === "ENOENT") {
+			process.stderr.write(`${NAME}: Bun not found on PATH — install Bun to manage profile plugins\n`);
+			return 127;
+		}
+		throw result.error;
+	}
+	const exitCode = result.status ?? 1;
+	if (exitCode === 0) reconcilePlugins(before, dir);
+	else {
+		process.stderr.write(`${NAME}: Bun failed in profile directory ${dir}\n`);
+		if (args.some((argument) => /^git\+|^github:|\.git(?:#|$)/.test(argument))) process.stderr.write(`${NAME}: if this git-hosted plugin requires a prepare script, re-run the add with --trust or trust it from ${dir} with bun pm trust <package>\n`);
+	}
+	return exitCode;
+}
+//#endregion
+export { runPlugin };

package/lib/plugin-BdpZPnfp.js

@@ -0,0 +1,129 @@
+import { t as INSTALL_ANCHOR } from "./profile-boot-Bt4vObgm.js";
+import { existsSync } from "node:fs";
+import { DEFAULT_PROFILE_BUNDLES, PROFILE_TEMPLATES, initProfile, readProfileManifest, resolveBundleDir, resolveProfileDir, writeProfileManifest } from "@monotykamary/dsh-app-boot";
+import { join, resolve } from "node:path";
+import { spawnSync } from "node:child_process";
+//#region lib/types/plugin.js
+/**
+* `dsh plugin --profile <name> <args...>` — profile plugin management as a
+* thin Bun forwarder: initialize the profile on first use, run
+* `Bun <args...>` in the profile directory, then reconcile the
+* `dsh.profile.bundles` layer list against the installed state (a dependency
+* resolving to a package that declares `dsh.bundle` joins the layer stack; a
+* removed or bundle-less dependency leaves it). Reconciling by installed
+* state, not by dependency diff, means `update` activates a package that
+* gained its `dsh.bundle` declaration in a newer version.
+* @module @monotykamary/dsh/plugin
+*/
+const NAME = "dsh";
+/**
+* Whether a resolved dependency exports a profile patch, i.e. is a bundle.
+* @param packageName - the dependency's package name.
+* @param profileDir - the profile directory (resolution anchor).
+* @returns true when the package manifest declares `dsh.bundle`.
+*/
+function exportsPatch(packageName, profileDir) {
+	let dir;
+	try {
+		dir = resolveBundleDir(NAME, packageName, INSTALL_ANCHOR, profileDir);
+	} catch {
+		return false;
+	}
+	return readProfileManifest(NAME, dir).dsh?.bundle?.patch !== void 0;
+}
+/**
+* Reconcile `dsh.profile.bundles` against the installed state: Bun has
+* already written the real installed names (so a git/path/tarball/alias spec
+* on the command line reconciles by its true package name) and materialized
+* the packages. A dependency that resolves to a `dsh.bundle`-declaring
+* package joins the layer stack (appended in dependency order); a
+* dependency-listed name that no longer does — removed, or the installed
+* version dropped the declaration — leaves it. In-box bundles from the
+* profile template are not dependencies and are never touched. Warns once
+* per newly-added bundle-less dependency (a plain library is fine; the
+* warning is orientation).
+*/
+function reconcilePlugins(before, profileDir) {
+	const after = readProfileManifest(NAME, profileDir);
+	const beforeDeps = new Set(Object.keys(before.dependencies ?? {}));
+	const dependencies = Object.keys(after.dependencies ?? {});
+	const plugins = after.dsh?.profile?.bundles ?? [];
+	let changed = false;
+	for (const packageName of dependencies) {
+		const isBundle = exportsPatch(packageName, profileDir);
+		if (isBundle && !plugins.includes(packageName)) {
+			plugins.push(packageName);
+			changed = true;
+		} else if (!isBundle && !beforeDeps.has(packageName)) process.stderr.write(`${NAME}: warning: ${packageName} declares no dsh.bundle — installed as a plain dependency, not a profile layer (a later update that gains one activates it automatically)
+`);
+	}
+	const dependencySet = new Set(dependencies);
+	for (const packageName of [...plugins]) {
+		const wasDependency = beforeDeps.has(packageName) || dependencySet.has(packageName);
+		const stillBundle = dependencySet.has(packageName) && exportsPatch(packageName, profileDir);
+		if (wasDependency && !stillBundle) {
+			plugins.splice(plugins.indexOf(packageName), 1);
+			changed = true;
+		}
+	}
+	if (!changed) return;
+	after.dsh = {
+		...after.dsh,
+		profile: {
+			...after.dsh?.profile,
+			bundles: plugins
+		}
+	};
+	writeProfileManifest(profileDir, after);
+}
+/**
+* Rewrite relative filesystem specs against the user's invoking directory.
+* Bun runs with cwd = the profile directory, so a bare `.` or `../plugin`
+* (or their `file:`/`link:` forms) would silently resolve inside the profile
+* — `add .` from a plugin checkout would self-link the profile. Absolute
+* specs, registry names, and every other Bun argument pass through
+* untouched.
+* @param argument - one Bun argument, verbatim from argv.
+* @param cwd - the directory `dsh` was invoked from.
+* @returns the argument with a relative path spec anchored to `cwd`.
+*/
+function anchorPathSpec(argument, cwd) {
+	const match = /^(?<prefix>(?:file|link):)?(?<path>\.{1,2}(?:[/\\].*)?)$/.exec(argument);
+	if (match?.groups?.path === void 0) return argument;
+	return `${match.groups.prefix ?? ""}${resolve(cwd, match.groups.path)}`;
+}
+/**
+* Run one `dsh plugin` invocation: init if needed, forward to Bun, reconcile.
+* @param profile - the profile name.
+* @param args - Bun arguments with relative path specs anchored to the invoking directory.
+* @returns the Bun exit code.
+*/
+function runPlugin(profile, args) {
+	const dir = resolveProfileDir(profile);
+	const template = PROFILE_TEMPLATES[profile];
+	const initialized = !existsSync(join(dir, "package.json"));
+	initProfile(dir, template ?? DEFAULT_PROFILE_BUNDLES, template === void 0 ? void 0 : profile);
+	if (initialized) process.stderr.write(`${NAME}: initialized profile ${profile} at ${dir}\n`);
+	const before = readProfileManifest(NAME, dir);
+	const executable = process.platform === "win32" ? "bun.exe" : "bun";
+	const result = spawnSync(executable, args.map((argument) => anchorPathSpec(argument, process.cwd())), {
+		cwd: dir,
+		stdio: "inherit"
+	});
+	if (result.error !== void 0) {
+		if (result.error.code === "ENOENT") {
+			process.stderr.write(`${NAME}: Bun not found on PATH — install Bun to manage profile plugins\n`);
+			return 127;
+		}
+		throw result.error;
+	}
+	const exitCode = result.status ?? 1;
+	if (exitCode === 0) reconcilePlugins(before, dir);
+	else {
+		process.stderr.write(`${NAME}: Bun failed in profile directory ${dir}\n`);
+		if (args.some((argument) => /^git\+|^github:|\.git(?:#|$)/.test(argument))) process.stderr.write(`${NAME}: if this git-hosted plugin requires a prepare script, re-run the add with --trust or trust it from ${dir} with bun pm trust <package>\n`);
+	}
+	return exitCode;
+}
+//#endregion
+export { runPlugin };

package/lib/plugin-C5ETIpfg.js

@@ -0,0 +1,130 @@
+import { t as INSTALL_ANCHOR } from "./profile-boot-EVnLskjy.js";
+import { existsSync } from "node:fs";
+import { DEFAULT_PROFILE_BUNDLES, PROFILE_TEMPLATES, initProfile, readProfileManifest, resolveBundleDir, resolveProfileDir, writeProfileManifest } from "@monotykamary/dsh-app-boot";
+import { join, resolve } from "node:path";
+import { spawnSync } from "node:child_process";
+//#region lib/types/plugin.js
+/**
+* `dsh plugin --profile <name> <args...>` — profile plugin management as a
+* thin pnpm forwarder: initialize the profile on first use, run
+* `pnpm <args...>` in the profile directory, then reconcile the
+* `dsh.profile.bundles` layer list against the installed state (a dependency
+* resolving to a package that declares `dsh.bundle` joins the layer stack; a
+* removed or bundle-less dependency leaves it). Reconciling by installed
+* state, not by dependency diff, means `update` activates a package that
+* gained its `dsh.bundle` declaration in a newer version.
+* @module @monotykamary/dsh/plugin
+*/
+const NAME = "dsh";
+/**
+* Whether a resolved dependency exports a profile patch, i.e. is a bundle.
+* @param packageName - the dependency's package name.
+* @param profileDir - the profile directory (resolution anchor).
+* @returns true when the package manifest declares `dsh.bundle`.
+*/
+function exportsPatch(packageName, profileDir) {
+	let dir;
+	try {
+		dir = resolveBundleDir(NAME, packageName, INSTALL_ANCHOR, profileDir);
+	} catch {
+		return false;
+	}
+	return readProfileManifest(NAME, dir).dsh?.bundle?.patch !== void 0;
+}
+/**
+* Reconcile `dsh.profile.bundles` against the installed state: pnpm has
+* already written the real installed names (so a git/path/tarball/alias spec
+* on the command line reconciles by its true package name) and materialized
+* the packages. A dependency that resolves to a `dsh.bundle`-declaring
+* package joins the layer stack (appended in dependency order); a
+* dependency-listed name that no longer does — removed, or the installed
+* version dropped the declaration — leaves it. In-box bundles from the
+* profile template are not dependencies and are never touched. Warns once
+* per newly-added bundle-less dependency (a plain library is fine; the
+* warning is orientation).
+*/
+function reconcilePlugins(before, profileDir) {
+	const after = readProfileManifest(NAME, profileDir);
+	const beforeDeps = new Set(Object.keys(before.dependencies ?? {}));
+	const dependencies = Object.keys(after.dependencies ?? {});
+	const plugins = after.dsh?.profile?.bundles ?? [];
+	let changed = false;
+	for (const packageName of dependencies) {
+		const isBundle = exportsPatch(packageName, profileDir);
+		if (isBundle && !plugins.includes(packageName)) {
+			plugins.push(packageName);
+			changed = true;
+		} else if (!isBundle && !beforeDeps.has(packageName)) process.stderr.write(`${NAME}: warning: ${packageName} declares no dsh.bundle — installed as a plain dependency, not a profile layer (a later update that gains one activates it automatically)
+`);
+	}
+	const dependencySet = new Set(dependencies);
+	for (const packageName of [...plugins]) {
+		const wasDependency = beforeDeps.has(packageName) || dependencySet.has(packageName);
+		const stillBundle = dependencySet.has(packageName) && exportsPatch(packageName, profileDir);
+		if (wasDependency && !stillBundle) {
+			plugins.splice(plugins.indexOf(packageName), 1);
+			changed = true;
+		}
+	}
+	if (!changed) return;
+	after.dsh = {
+		...after.dsh,
+		profile: {
+			...after.dsh?.profile,
+			bundles: plugins
+		}
+	};
+	writeProfileManifest(profileDir, after);
+}
+/**
+* Rewrite relative filesystem specs against the user's invoking directory.
+* pnpm runs with cwd = the profile directory, so a bare `.` or `../plugin`
+* (or their `file:`/`link:` forms) would silently resolve inside the profile
+* — `add .` from a plugin checkout would self-link the profile. Absolute
+* specs, registry names, and every other pnpm argument pass through
+* untouched.
+* @param argument - one pnpm argument, verbatim from argv.
+* @param cwd - the directory `dsh` was invoked from.
+* @returns the argument with a relative path spec anchored to `cwd`.
+*/
+function anchorPathSpec(argument, cwd) {
+	const match = /^(?<prefix>(?:file|link):)?(?<path>\.{1,2}(?:[/\\].*)?)$/.exec(argument);
+	if (match?.groups?.path === void 0) return argument;
+	return `${match.groups.prefix ?? ""}${resolve(cwd, match.groups.path)}`;
+}
+/**
+* Run one `dsh plugin` invocation: init if needed, forward to pnpm, reconcile.
+* @param profile - the profile name.
+* @param args - pnpm arguments with relative path specs anchored to the invoking directory.
+* @returns the pnpm exit code.
+*/
+function runPlugin(profile, args) {
+	const dir = resolveProfileDir(profile);
+	if (!existsSync(join(dir, "package.json"))) {
+		const template = PROFILE_TEMPLATES[profile];
+		initProfile(dir, template ?? DEFAULT_PROFILE_BUNDLES, template === void 0 ? void 0 : profile);
+		process.stderr.write(`${NAME}: initialized profile ${profile} at ${dir}\n`);
+	}
+	const before = readProfileManifest(NAME, dir);
+	const result = spawnSync("pnpm", args.map((argument) => anchorPathSpec(argument, process.cwd())), {
+		cwd: dir,
+		stdio: "inherit",
+		shell: process.platform === "win32"
+	});
+	if (result.error !== void 0) {
+		if (result.error.code === "ENOENT") {
+			process.stderr.write(`${NAME}: pnpm not found on PATH — install pnpm to manage profile plugins\n`);
+			return 127;
+		}
+		throw result.error;
+	}
+	const exitCode = result.status ?? 1;
+	if (exitCode === 0) reconcilePlugins(before, dir);
+	else {
+		process.stderr.write(`${NAME}: pnpm failed in profile directory ${dir}\n`);
+		if (args.some((argument) => /^git\+|^github:|\.git(?:#|$)/.test(argument))) process.stderr.write(`${NAME}: git-hosted plugins build on install via their prepare script, which pnpm blocks until allowed — add the exact key pnpm printed above under allowBuilds in ${join(dir, "pnpm-workspace.yaml")}, then re-run\n`);
+	}
+	return exitCode;
+}
+//#endregion
+export { runPlugin };

package/lib/profile-boot-DINOELNp.js

@@ -0,0 +1,2 @@
+import { a as runProfile } from "./profile-boot-EVnLskjy.js";
+export { runProfile };

package/lib/profile-boot-EVnLskjy.js

@@ -0,0 +1,276 @@
+import { writeFileSync } from "node:fs";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { PROFILE_PATCH_FILENAME, boot, composeEntries, healProfilesModuleFallback, installFailLoud, loadOptionalPatches, loadOverlayPatches, loadProfile, watchUserPatches } from "@monotykamary/dsh-app-boot";
+import { resolveDshHome } from "@monotykamary/dsh-home-paths";
+import { join, resolve } from "node:path";
+import { DSH_LAUNCH_ENVIRONMENT_KEY } from "@monotykamary/dsh-launch-environment";
+import { provideCmdline } from "@monotykamary/dsh-cmdline";
+//#region lib/types/process-shutdown.js
+/** Bounded, escalating process shutdown for the long-lived CLI surfaces. */
+/** Maximum grace allowed for the application tree to dispose before process exit. */
+const PROCESS_SHUTDOWN_TIMEOUT_MS = 5e3;
+/**
+* Create one process-exit controller around an application disposer.
+* @param dispose - Whole-application teardown that resolves at quiescence.
+* @param forceExit - Function that exits the process immediately, replaceable by tests.
+* @param complete - Function that records the natural completion code, replaceable by tests.
+* @param timeoutMs - Grace before forced exit, replaceable by tests.
+* @returns A controller whose normal calls coalesce and whose repeated signal call escalates.
+*/
+function createProcessShutdown(dispose, forceExit = (code) => {
+	process.exit(code);
+}, complete = (code) => {
+	process.exitCode = code;
+}, timeoutMs = PROCESS_SHUTDOWN_TIMEOUT_MS) {
+	let pending;
+	let timeout;
+	let completed = false;
+	let forceExited = false;
+	const clearExitTimeout = () => {
+		if (timeout !== void 0) clearTimeout(timeout);
+	};
+	const forceExitOnce = (code) => {
+		if (forceExited) return;
+		forceExited = true;
+		clearExitTimeout();
+		forceExit(code);
+	};
+	const completeOnce = (code) => {
+		if (completed || forceExited) return;
+		completed = true;
+		clearExitTimeout();
+		complete(code);
+	};
+	const start = (code, forceAfterDispose) => {
+		if (pending !== void 0) return pending;
+		timeout = setTimeout(() => {
+			forceExitOnce(code);
+		}, timeoutMs);
+		pending = Promise.resolve().then(dispose).then(() => {
+			if (forceAfterDispose) forceExitOnce(code);
+			else completeOnce(code);
+		}, () => {
+			forceExitOnce(code);
+		});
+		return pending;
+	};
+	return {
+		shutdown(code) {
+			return start(code, false);
+		},
+		interrupt(code) {
+			if (pending !== void 0) {
+				forceExitOnce(code);
+				return;
+			}
+			start(code, true);
+		}
+	};
+}
+//#endregion
+//#region lib/types/profile-boot.js
+/**
+* Shared profile boot for every `dsh` surface: resolve the profile, stack its
+* patch layers (bundle layers in `dsh.profile.bundles` order, the profile's
+* own `cordis.patch.yml`, `--patch` overlays), mount the
+* tree over the profile's empty root config, keep the profile patch layer
+* live, and wire fail-loud plus bounded shutdown.
+*
+* App flags are not the launcher's business: the invocation's inner arguments
+* are provided to the tree through `ctx.cmdlineArgs`, where any injected app
+* plugin may read the same immutable snapshot.
+* @module @monotykamary/dsh/profile-boot
+*/
+/** Shipped agent-preset root: beside this app's own config, in both source and built layouts. */
+const SHIPPED_PRESET_ROOT = fileURLToPath(new URL("../config/agent-presets/", import.meta.url));
+const NAME = "dsh";
+/**
+* The home-level user patch layer (`$DSH_HOME/cordis.patch.yml`), applied
+* over every profile's own layer. Resolved per call, not at module load:
+* `$DSH_HOME` may be set by the test or launcher after import.
+* @returns the absolute patch-file path.
+*/
+function homePatchPath() {
+	return join(resolveDshHome(), PROFILE_PATCH_FILENAME);
+}
+/** Absolute path of this dsh installation's package.json (both anchors: src/ and lib/ sit one level under apps/cli). */
+const INSTALL_ANCHOR = fileURLToPath(new URL("../package.json", import.meta.url));
+/** The empty root entry list every profile tree patches over. */
+const PROFILE_ROOT_CONFIG = `# dsh profile root — an empty entry list. The tree is composed as patches:
+# each bundle in package.json's dsh.profile.bundles, then cordis.patch.yml, then any
+# --patch overlays. Edit cordis.patch.yml, not this file.
+[]
+`;
+/** Root config filename inside a profile directory. */
+const PROFILE_ROOT_FILENAME = "cordis.yml";
+/**
+* Load a resolved profile for `name`: heal the shared module fallback, then
+* (re)write the empty root config. The root is always rewritten: the whole
+* composition is patch layers, and the vendored Loader's tree write-back (a
+* plugin self-disposing persists the current tree) can bake composed rows
+* into this file — which would duplicate every bundle insert on the next
+* boot. The file exists on disk only because the Loader needs a real include
+* root to anchor `baseUrl` at the profile directory (the config dump anchors
+* on the same file, so both compose over the identical base).
+* @param name - the profile name.
+* @param userLayer - `false` skips parsing `cordis.patch.yml` (the default dump).
+* @returns the loaded profile.
+*/
+function prepareProfile(name, userLayer = true) {
+	healProfilesModuleFallback(INSTALL_ANCHOR);
+	const profile = loadProfile(NAME, name, INSTALL_ANCHOR, void 0, { userLayer });
+	writeFileSync(join(profile.dir, PROFILE_ROOT_FILENAME), PROFILE_ROOT_CONFIG);
+	return profile;
+}
+/** The full patch stack of one composed profile, in application order. */
+function allPatches(composed) {
+	return [
+		...composed.bundlePatches,
+		...composed.profile.patches,
+		...composed.homePatches,
+		...composed.overlays
+	];
+}
+/**
+* Load `name` and compose its effective patch stack: bundle layers in
+* `dsh.profile.bundles` order (the base bundle gates the shell stacks by
+* platform on its own rows), the profile's user layer, the home-level user
+* layer (`$DSH_HOME/cordis.patch.yml` — machine-local preferences that apply
+* to every profile, so it outranks the per-profile layer), and `--patch`
+* overlays.
+* @param name - the profile name.
+* @param patchFiles - `--patch` overlay paths, in argv order.
+* @returns the profile, its patch layers, and the composed row index.
+*/
+function composeProfile(name, patchFiles) {
+	const profile = prepareProfile(name);
+	const homePatches = loadOptionalPatches(NAME, homePatchPath()) ?? [];
+	const overlays = patchFiles.flatMap((file) => loadOverlayPatches(NAME, resolve(file)));
+	const bundlePatches = profile.layers.flatMap((layer) => layer.patches);
+	const toolMode = process.env.DSH_TOOLS_MODE;
+	if (toolMode !== void 0) {
+		const lastTools = [...bundlePatches].reverse().find((patch) => patch.id === "tools" && !Array.isArray(patch.insert));
+		const toolsConfig = lastTools?.config !== void 0 && typeof lastTools.config === "object" ? { ...lastTools.config } : {};
+		bundlePatches.push({
+			id: "tools",
+			config: {
+				...toolsConfig,
+				mode: toolMode
+			}
+		});
+	}
+	if (bundlePatches.some((patch) => patch.id === "distribution-update" || Array.isArray(patch.insert) && patch.insert.some((row) => row.id === "distribution-update"))) bundlePatches.push({
+		id: "distribution-update",
+		config: { appManifest: INSTALL_ANCHOR }
+	});
+	const rows = /* @__PURE__ */ new Map();
+	for (const row of composeEntries([
+		bundlePatches,
+		profile.patches,
+		homePatches,
+		overlays
+	])) if (typeof row.id === "string") rows.set(row.id, row);
+	const composedOverlays = [...overlays];
+	if (rows.has("agent-presets")) composedOverlays.push({
+		id: "agent-presets",
+		config: {
+			...rows.get("agent-presets")?.config ?? {},
+			roots: [{
+				path: SHIPPED_PRESET_ROOT,
+				trust: "system"
+			}]
+		}
+	});
+	return {
+		profile,
+		bundlePatches,
+		homePatches,
+		overlays: composedOverlays,
+		rows
+	};
+}
+/**
+* Re-throw a watcher-setup failure unless a shutdown already owns the tree:
+* a signal aborted this invocation, or an app requested exit (`ctx.appExit`
+* from a fast one-shot) and the root's disposal rejected the in-flight setup
+* await. Either way the failure describes a tree that is exiting as asked,
+* not a broken watch.
+* @param ctx - the booted root context.
+* @param signal - this invocation's signal-shutdown fact.
+* @param error - the setup failure.
+*/
+function suppressShutdownError(ctx, signal, error) {
+	if (signal.aborted) return;
+	if (ctx.fiber.state !== 2 || ctx.get("loader") === void 0) return;
+	throw error;
+}
+/**
+* Boot one profile invocation end to end and leave process lifetime to the
+* mounted plugins (or to a one-shot runner the composition mounts).
+* @param options - environment snapshot, profile name, overlays, and the booted app's own arguments.
+* @returns the settled root context and the shutdown controller.
+*/
+async function runProfile(options) {
+	const composed = composeProfile(options.profile, options.patchFiles);
+	const app = {};
+	const shutdown = createProcessShutdown(async () => {
+		await app.current?.fiber.dispose();
+	});
+	const signalShutdown = new AbortController();
+	const interrupt = (code) => {
+		signalShutdown.abort();
+		shutdown.interrupt(code);
+	};
+	process.on("SIGTERM", () => {
+		interrupt(0);
+	});
+	process.on("SIGINT", () => {
+		interrupt(130);
+	});
+	installFailLoud(NAME, process, async () => {
+		await app.current?.fiber.dispose();
+	});
+	const rootConfig = join(composed.profile.dir, PROFILE_ROOT_FILENAME);
+	const composeLive = () => structuredClone([
+		...composed.bundlePatches,
+		...loadOptionalPatches(NAME, composed.profile.patchPath) ?? [],
+		...loadOptionalPatches(NAME, homePatchPath()) ?? [],
+		...composed.overlays
+	]);
+	const ctx = await boot(NAME, rootConfig, structuredClone(allPatches(composed)), (hostCtx) => {
+		app.current = hostCtx;
+		hostCtx.provide(DSH_LAUNCH_ENVIRONMENT_KEY, options.environment);
+		provideCmdline(hostCtx, {
+			args: options.args,
+			exit: (code) => void shutdown.shutdown(code)
+		});
+	}, pathToFileURL(rootConfig).href);
+	app.current = ctx;
+	if (!signalShutdown.signal.aborted && ctx.fiber.state === 2 && ctx.get("loader") !== void 0 && ctx.get("headlessStartup") === void 0) try {
+		if (ctx.get("hmr") === void 0) {
+			if (ctx.get("timer") === void 0) await ctx.loader.create({ name: "@monotykamary/cordis-plugin-timer" });
+			await ctx.loader.create({
+				name: "@monotykamary/cordis-plugin-hmr",
+				config: { root: [] }
+			});
+		}
+		await watchUserPatches(ctx, {
+			binName: NAME,
+			filename: composed.profile.patchPath,
+			compose: composeLive
+		});
+		await watchUserPatches(ctx, {
+			binName: NAME,
+			filename: homePatchPath(),
+			compose: composeLive
+		});
+	} catch (error) {
+		suppressShutdownError(ctx, signalShutdown.signal, error);
+	}
+	return {
+		ctx,
+		shutdown
+	};
+}
+//#endregion
+export { runProfile as a, prepareProfile as i, PROFILE_ROOT_FILENAME as n, homePatchPath as r, INSTALL_ANCHOR as t };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@monotykamary/dsh",
   "description": "dsh CLI: profile boot, plugin management, and the browser UI alias",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "publishConfig": {
     "access": "public"
   },
@@ -20,101 +20,101 @@
   ],
   "license": "MIT",
   "dependencies": {
+    "@monotykamary/cordis-plugin-group": "^1.0.1",
+    "@monotykamary/cordis-plugin-hmr": "^1.0.16",
+    "@monotykamary/cordis-plugin-include": "^1.0.6",
+    "@monotykamary/cordis-plugin-loader": "^1.0.2",
+    "@monotykamary/cordis-plugin-timer": "^1.1.3",
+    "@monotykamary/dsh-agent-tool-presentation": "^0.1.9",
+    "@monotykamary/dsh-app-boot": "^0.1.9",
+    "@monotykamary/dsh-base": "^0.1.9",
+    "@monotykamary/dsh-cordis-client-runner": "^0.1.9",
+    "@monotykamary/dsh-client-ui-agent-preset": "^0.1.9",
+    "@monotykamary/dsh-client-ui-cordis": "^0.1.9",
+    "@monotykamary/dsh-command-compact": "^0.1.9",
+    "@monotykamary/dsh-command-goal": "^0.1.9",
+    "@monotykamary/dsh-compaction-basic": "^0.1.9",
+    "@monotykamary/dsh-compaction-tool-result-pruner": "^0.1.9",
+    "@monotykamary/dsh-goal": "^0.1.9",
+    "@monotykamary/dsh-goal-round-driver": "^0.1.9",
+    "@monotykamary/dsh-cmdline": "^0.1.9",
+    "@monotykamary/dsh-launch-environment": "^0.1.9",
+    "@monotykamary/dsh-fs-local": "^0.1.9",
+    "@monotykamary/dsh-headless": "^0.1.9",
+    "@monotykamary/dsh-mcp-client": "^0.1.9",
+    "@monotykamary/dsh-home-paths": "^0.1.9",
+    "@monotykamary/dsh-persona": "^0.1.9",
+    "@monotykamary/dsh-plan-mode": "^0.1.9",
+    "@monotykamary/dsh-terminal": "^0.1.9",
+    "@monotykamary/dsh-terminal-bash": "^0.1.9",
+    "@monotykamary/dsh-pwsh-local": "^0.1.9",
+    "@monotykamary/dsh-pwsh-sandbox": "^0.1.9",
+    "@monotykamary/dsh-session-projection": "^0.1.9",
+    "@monotykamary/dsh-session-reference": "^0.1.9",
+    "@monotykamary/dsh-time-context": "^0.1.9",
+    "@monotykamary/dsh-skill": "^0.1.9",
+    "@monotykamary/dsh-skill-filesystem": "^0.1.9",
+    "@monotykamary/dsh-jobs-local": "^0.1.9",
+    "@monotykamary/dsh-tmux-context": "^0.1.9",
+    "@monotykamary/dsh-token-meter": "^0.1.9",
+    "@monotykamary/dsh-tool-ask-user": "^0.1.9",
+    "@monotykamary/dsh-tool-bash": "^0.1.9",
+    "@monotykamary/dsh-tool-bash-persistent": "^0.1.9",
+    "@monotykamary/dsh-tool-pwsh-persistent": "^0.1.9",
+    "@monotykamary/dsh-tool-cordis": "^0.1.9",
+    "@monotykamary/dsh-tool-fs": "^0.1.9",
+    "@monotykamary/dsh-tool-fs-search": "^0.1.9",
+    "@monotykamary/dsh-tool-goal": "^0.1.9",
+    "@monotykamary/dsh-tool-pwsh": "^0.1.9",
+    "@monotykamary/dsh-tool-ralph": "^0.1.9",
+    "@monotykamary/dsh-schedule": "^0.1.9",
+    "@monotykamary/dsh-tool-skill": "^0.1.9",
+    "@monotykamary/dsh-tool-str-replace-editor": "^0.1.9",
+    "@monotykamary/dsh-tool-subagent": "^0.1.9",
+    "@monotykamary/dsh-tool-subagent-control": "^0.1.9",
+    "@monotykamary/dsh-tool-jobs": "^0.1.9",
+    "@monotykamary/dsh-tool-todo": "^0.1.9",
+    "@monotykamary/dsh-tool-web": "^0.1.9",
+    "@monotykamary/dsh-tool-workflow": "^0.1.9",
+    "@monotykamary/dsh-web-app": "^0.1.9",
+    "@monotykamary/dsh-workflow-worker-thread": "^0.1.9",
+    "@monotykamary/dsh-agent-instructions": "^0.1.9",
     "commander": "^15.0.0",
+    "@monotykamary/cordis": "^4.0.1",
     "js-yaml": "^4.2.0",
     "node-addon-require-builtin": "^0.1.4",
     "dsh-tool-repair": "0.1.1",
     "dsh-multiprovider": "0.1.1",
-    "dsh-fabric": "0.1.7",
+    "dsh-fabric": "0.1.12",
     "dsh-fovea": "0.5.1",
-    "dsh-factory": "0.1.8",
-    "@monotykamary/cordis-plugin-group": "^1.0.1",
-    "@monotykamary/cordis-plugin-include": "^1.0.6",
-    "@monotykamary/cordis-plugin-loader": "^1.0.2",
-    "@monotykamary/cordis-plugin-hmr": "^1.0.16",
-    "@monotykamary/cordis-plugin-timer": "^1.1.3",
-    "@monotykamary/dsh-agent-tool-presentation": "^0.1.7",
-    "@monotykamary/dsh-app-boot": "^0.1.7",
-    "@monotykamary/dsh-base": "^0.1.7",
-    "@monotykamary/dsh-client-ui-agent-preset": "^0.1.7",
-    "@monotykamary/dsh-client-ui-cordis": "^0.1.7",
-    "@monotykamary/dsh-command-compact": "^0.1.7",
-    "@monotykamary/dsh-command-goal": "^0.1.7",
-    "@monotykamary/dsh-cordis-client-runner": "^0.1.7",
-    "@monotykamary/dsh-compaction-basic": "^0.1.7",
-    "@monotykamary/dsh-goal": "^0.1.7",
-    "@monotykamary/dsh-compaction-tool-result-pruner": "^0.1.7",
-    "@monotykamary/dsh-goal-round-driver": "^0.1.7",
-    "@monotykamary/dsh-cmdline": "^0.1.7",
-    "@monotykamary/dsh-launch-environment": "^0.1.7",
-    "@monotykamary/dsh-headless": "^0.1.7",
-    "@monotykamary/dsh-fs-local": "^0.1.7",
-    "@monotykamary/dsh-mcp-client": "^0.1.7",
-    "@monotykamary/dsh-home-paths": "^0.1.7",
-    "@monotykamary/dsh-plan-mode": "^0.1.7",
-    "@monotykamary/dsh-terminal": "^0.1.7",
-    "@monotykamary/dsh-terminal-bash": "^0.1.7",
-    "@monotykamary/dsh-pwsh-sandbox": "^0.1.7",
-    "@monotykamary/dsh-session-projection": "^0.1.7",
-    "@monotykamary/dsh-persona": "^0.1.7",
-    "@monotykamary/dsh-pwsh-local": "^0.1.7",
-    "@monotykamary/dsh-time-context": "^0.1.7",
-    "@monotykamary/dsh-skill": "^0.1.7",
-    "@monotykamary/dsh-session-reference": "^0.1.7",
-    "@monotykamary/dsh-skill-filesystem": "^0.1.7",
-    "@monotykamary/dsh-jobs-local": "^0.1.7",
-    "@monotykamary/dsh-token-meter": "^0.1.7",
-    "@monotykamary/dsh-tool-ask-user": "^0.1.7",
-    "@monotykamary/dsh-tool-bash": "^0.1.7",
-    "@monotykamary/dsh-tool-pwsh-persistent": "^0.1.7",
-    "@monotykamary/dsh-tool-cordis": "^0.1.7",
-    "@monotykamary/dsh-tool-bash-persistent": "^0.1.7",
-    "@monotykamary/dsh-tmux-context": "^0.1.7",
-    "@monotykamary/dsh-tool-fs": "^0.1.7",
-    "@monotykamary/dsh-tool-fs-search": "^0.1.7",
-    "@monotykamary/dsh-tool-pwsh": "^0.1.7",
-    "@monotykamary/dsh-tool-goal": "^0.1.7",
-    "@monotykamary/dsh-tool-ralph": "^0.1.7",
-    "@monotykamary/dsh-schedule": "^0.1.7",
-    "@monotykamary/dsh-tool-skill": "^0.1.7",
-    "@monotykamary/dsh-tool-str-replace-editor": "^0.1.7",
-    "@monotykamary/dsh-tool-subagent-control": "^0.1.7",
-    "@monotykamary/dsh-tool-jobs": "^0.1.7",
-    "@monotykamary/dsh-tool-todo": "^0.1.7",
-    "@monotykamary/dsh-tool-subagent": "^0.1.7",
-    "@monotykamary/dsh-tool-workflow": "^0.1.7",
-    "@monotykamary/dsh-tool-web": "^0.1.7",
-    "@monotykamary/dsh-web-app": "^0.1.7",
-    "@monotykamary/dsh-workflow-worker-thread": "^0.1.7",
-    "@monotykamary/dsh-agent-instructions": "^0.1.7",
-    "@monotykamary/dsh-distribution-update": "^0.1.7",
-    "@monotykamary/cordis": "^4.0.1"
+    "dsh-factory": "0.1.9",
+    "@monotykamary/dsh-distribution-update": "^0.1.9"
   },
   "devDependencies": {
+    "@monotykamary/dsh-agent": "^0.1.9",
+    "@monotykamary/dsh-host-frontend-static": "^0.1.9",
+    "@monotykamary/dsh-host-apiproxy": "^0.1.9",
+    "@monotykamary/dsh-host-webserver": "^0.1.9",
+    "@monotykamary/dsh-llm": "^0.1.9",
+    "@monotykamary/dsh-llm-mock-server": "^0.1.9",
+    "@monotykamary/dsh-loader-smoke": "^0.1.9",
+    "@monotykamary/dsh-session": "^0.1.9",
+    "@monotykamary/dsh-settings": "^0.1.9",
+    "@monotykamary/dsh-subagent": "^0.1.9",
+    "@monotykamary/dsh-system-prompt": "^0.1.9",
+    "@monotykamary/dsh-tools": "^0.1.9",
     "@types/js-yaml": "^4.0.9",
-    "execa": "^10.0.0",
-    "@monotykamary/dsh-agent": "^0.1.7",
-    "@monotykamary/dsh-host-frontend-static": "^0.1.7",
-    "@monotykamary/dsh-host-webserver": "^0.1.7",
-    "@monotykamary/dsh-llm": "^0.1.7",
-    "@monotykamary/dsh-loader-smoke": "^0.1.7",
-    "@monotykamary/dsh-llm-mock-server": "^0.1.7",
-    "@monotykamary/dsh-session": "^0.1.7",
-    "@monotykamary/dsh-host-apiproxy": "^0.1.7",
-    "@monotykamary/dsh-subagent": "^0.1.7",
-    "@monotykamary/dsh-settings": "^0.1.7",
-    "@monotykamary/dsh-tools": "^0.1.7",
-    "@monotykamary/dsh-system-prompt": "^0.1.7"
+    "execa": "^10.0.0"
   },
   "dsh": {
     "distribution": {
       "companions": {
         "dsh-tool-repair": "0.1.1",
         "dsh-multiprovider": "0.1.1",
-        "dsh-fabric": "0.1.7",
+        "dsh-fabric": "0.1.12",
         "dsh-fovea": "0.5.1",
-        "dsh-factory": "0.1.8"
+        "dsh-factory": "0.1.9"
       }
     }
   }
-}
+}

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 DeepSeek
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.