@ran-sh/dsh-crew 2.2.0 → 2.2.2

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-crew",
-  "version": "2.2.0",
+  "version": "2.2.2",
   "description": "Dispatch subtasks to DeepSeek Harness (DSH) agents as native subagents with live progress",
   "author": {
     "name": "ZSeven-W"

package/official-web-bridge/lib/client.js

@@ -61,7 +61,7 @@ function PanelHeader({ title, eyebrow, description, href, linkText, children })
 //#endregion
 //#region src/client/quick-panel.tsx
 const API = "/_dsh/dsh-crew";
-const FULL = "http://127.0.0.1:3210/";
+const FULL = "http://127.0.0.1:3210/_dsh/dsh-crew/control-plane";
 const RESTART_KEYS = /* @__PURE__ */ new Set([]);
 const T = {
 	zh: {

package/official-web-bridge/overlay-entry.mjs

@@ -4,6 +4,10 @@ import { readFileSync } from 'node:fs';
 
 const PREFIX = '/_dsh/dsh-crew';
 const BACKEND = 'http://127.0.0.1:3210';
+// The control plane's session belongs to the hub's own process, so the only usable
+// entry is the hub's redirect: it mints the session and 302s into it. Advertising
+// the bare port here sent operators to "dsh web authentication required".
+const CONTROL_PLANE = `${BACKEND}${PREFIX}/control-plane`;
 const REVISION = JSON.parse(readFileSync(new URL('./package.json', import.meta.url), 'utf8')).dshCrewFrontendRevision ?? null;
 
 function trusted(req) {
@@ -21,7 +25,7 @@ export function registerFrontend(ctx, { fetchImpl = globalThis.fetch } = {}) {
     const disposers = [];
     disposers.push(webServer.register({ kind: 'exact', path: `${PREFIX}/bridge-status`, handler(req, res) {
       if (!trusted(req)) return send(res, 403, { ok: false, code: 'LOCAL_SAME_ORIGIN_ONLY' });
-      send(res, 200, { ok: true, surface: 'official-bridge', ui_role: 'quick-controls', frontend_revision: REVISION, full_control_plane_url: `${BACKEND}/` });
+      send(res, 200, { ok: true, surface: 'official-bridge', ui_role: 'quick-controls', frontend_revision: REVISION, full_control_plane_url: CONTROL_PLANE });
     } }));
     for (const suffix of ['/quick-config', '/quick-status']) {
       disposers.push(webServer.register({ kind: 'exact', path: `${PREFIX}${suffix}`, async handler(req, res) {

package/official-web-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ran-sh/dsh-crew-web-bridge",
-  "version": "0.3.8",
+  "version": "0.3.9",
   "private": true,
   "type": "module",
   "main": "./entry.mjs",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ran-sh/dsh-crew",
-  "version": "2.2.0",
+  "version": "2.2.2",
   "type": "module",
   "main": "./src/hub/entry.mjs",
   "bin": {

package/scripts/setup.mjs

@@ -15,12 +15,13 @@ import { crewDshHome, crewProfileDir, CREW_PROFILE_NAME, claudeIntegrationLine }
 import {
   ensureCrewDshRuntime,
   ensureCrewPluginRegistration,
+  ensureCrewWebProfile,
   resolveDshCli,
-  runResolvedDsh,
   describeDshCli,
   removeCrewPluginRegistration,
   TARGET_DSH_VERSION,
 } from '../src/dsh-cli-runtime.mjs';
+import { integrationRoot } from '../src/install/crew-paths.mjs';
 
 const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
 
@@ -81,11 +82,12 @@ function run(cmd, args, opts = {}) {
  * may use `npx -y` to fetch DSH, while status/uninstall probes never trigger a
  * network download merely by checking availability.
  *
- * The returned descriptor is the CLI base only; every invocation is built by
- * `runDsh` with the dedicated dsh-crew profile and the Crew DSH_HOME in the
- * child process environment. The official ``web`` profile is never a target.
+ * The returned descriptor is the CLI base only, reported to the operator as
+ * `description`; the dedicated dsh-crew profile and the Crew-owned DSH_HOME
+ * are supplied by the install flow. The official ``web`` profile is never a
+ * target.
  */
-export function detectDsh({ allowDownload = false, home = homedir(), includeCompatibility = true } = {}) {
+function detectDsh({ allowDownload = false, home = homedir(), includeCompatibility = true } = {}) {
   const resolved = resolveDshCli({
     home,
     allowDownload,
@@ -95,18 +97,6 @@ export function detectDsh({ allowDownload = false, home = homedir(), includeComp
   return { ...resolved, cli: resolved.command, description: describeDshCli(resolved) };
 }
 
-/**
- * Run a DSH plugin command against the dedicated Crew profile under the
- * Crew-owned DSH_HOME. `home` is the "user home" base used to derive that
- * isolated home, so tests can point it at a disposable root.
- */
-export function runDsh(dsh, args, { home = homedir() } = {}) {
-  const resolved = dsh?.command
-    ? dsh
-    : { kind: dsh?.kind ?? 'legacy', command: dsh?.cli ?? dsh, args: [] };
-  return runResolvedDsh(resolved, ['plugin', '--profile', CREW_PROFILE_NAME, ...args], { home });
-}
-
 export function readPackageName(root = ROOT) {
   try { return JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')).name; } catch { return null; }
 }
@@ -117,20 +107,11 @@ export function checkRoot(root = ROOT) {
     && existsSync(join(root, 'cordis.patch.yml'));
 }
 
-export function depsPresent(root = ROOT) {
+function depsPresent(root = ROOT) {
   return existsSync(join(root, 'node_modules', '@modelcontextprotocol', 'sdk'))
     && existsSync(join(root, 'node_modules', '.bin', 'tsdown'));
 }
 
-export function profileHasPackage(home, name, profileRoot = crewProfileDir({ home })) {
-  const pkgFile = join(profileRoot, 'package.json');
-  if (!existsSync(pkgFile)) return false;
-  try {
-    const pkg = JSON.parse(readFileSync(pkgFile, 'utf8'));
-    return Boolean(pkg.dependencies?.[name]) || Boolean((pkg.dsh?.profile?.bundles ?? []).includes(name));
-  } catch { return false; }
-}
-
 function mark(log, ok, text) {
   log(`${ok ? '✓' : '✗'} ${text}`);
   return ok;
@@ -167,6 +148,8 @@ export async function setupInstall({
   home = homedir(),
   installer = realInstaller,
   depRunner = null,
+  ensureRuntime = null,
+  ensureWebProfile = null,
 } = {}) {
   log('DSH Crew installer');
   if (!checkRoot(root)) return { ok: false, error: `not a dsh-crew checkout: ${root}` };
@@ -217,8 +200,15 @@ export async function setupInstall({
       error: `Crew runtime ${dsh.version} does not match ${TARGET_DSH_VERSION}; use the transactional update path (dsh-crew update) to migrate the cohort`,
     };
   }
-  if (!dryRun && (!dsh || dsh.kind === 'npx-local')) {
-    const boot = ensureCrewDshRuntime({ home });
+  if (!dryRun && (!dsh || !dsh.reusable)) {
+    // The Windows launcher only starts a Crew-owned CLI entry: a global
+    // official dsh or a transient npx download cannot pass its preflight, so
+    // the launcher would report "DSH CLI was not found" on a machine that has
+    // a perfectly good global dsh. A machine without a reusable runtime
+    // provisions one here — before the launcher ever runs — and the web
+    // profile scaffold below completes what that preflight and the supervisor
+    // require. Idempotent: a matching reusable runtime is reused as-is.
+    const boot = (ensureRuntime ?? ensureCrewDshRuntime)({ home });
     if (boot.ok) dsh = boot.cli;
     else log(`- reusable Crew DSH runtime unavailable (${boot.code ?? 'unknown'}); trying compatibility fallback`);
   }
@@ -240,11 +230,27 @@ export async function setupInstall({
       return { ok: false, error: 'DSH profile link failed' };
     }
     mark(log, true, `DSH crew profile linked offline (dedicated Crew DSH_HOME, profile dsh-crew; ${registration.changed ? 'updated' : 'already current'})`);
+    // The launcher preflight and the supervisor both require
+    // <crew DSH_HOME>/profiles/web; without it a fresh install deadlocked at
+    // the preflight ("The Harness web profile is missing") and the supervisor
+    // heartbeat timed out. Same idempotent scaffold the runtime step creates
+    // on the npx-managed path.
+    const webProfile = (ensureWebProfile ?? ensureCrewWebProfile)({ home });
+    if (!webProfile.ok) {
+      log(`✗ Crew web profile bootstrap failed (${webProfile.code ?? 'unknown'})`);
+      return { ok: false, error: 'Crew web profile bootstrap failed' };
+    }
+    if (webProfile.created) mark(log, true, 'Crew web profile scaffold created');
   }
 
+  // The host integrations must be written against the same root readiness
+  // derives (integrationRoot) — see activateRelease. After registration the
+  // link resolves to this checkout, so this is the loader link path.
+  const integrationWriteRoot = integrationRoot({ home, root, name });
+
   if (dryRun) mark(log, true, 'Codex Desktop integration (dry-run)');
   else {
-    const r = installer.installCodex ? installer.installCodex({ home, root }) : realInstaller.installCodex({ home, root });
+    const r = installer.installCodex ? installer.installCodex({ home, root: integrationWriteRoot }) : realInstaller.installCodex({ home, root: integrationWriteRoot });
     mark(log, r.ok !== false, r.ok === false ? `Codex Desktop integration failed: ${(r.actions ?? []).join('; ')}` : 'Codex Desktop integration');
     if (r.ok === false) return { ok: false, error: 'Codex integration failed' };
   }
@@ -252,8 +258,8 @@ export async function setupInstall({
   if (dryRun) mark(log, true, 'ZCode integration (dry-run)');
   else {
     const r = installer.installZCode
-      ? installer.installZCode({ home, root })
-      : realInstaller.installZCode({ home, root });
+      ? installer.installZCode({ home, root: integrationWriteRoot })
+      : realInstaller.installZCode({ home, root: integrationWriteRoot });
     if (r.ok === false) {
       mark(log, false, `ZCode integration failed (${r.code ?? 'unknown'})`);
       return { ok: false, error: 'ZCode integration failed' };
@@ -274,7 +280,7 @@ export async function setupInstall({
   }
 
   if (commandExists('claude')) {
-    const r = await runClaudeIntegrationStep({ dryRun, log, root, home, installer });
+    const r = await runClaudeIntegrationStep({ dryRun, log, root: integrationWriteRoot, home, installer });
     if (!r.ok) return r;
   } else log('- Claude Code not detected, skipped');
 

package/scripts/verify-npm-install.mjs

@@ -24,7 +24,7 @@ const DSH_PACKAGE = '@deepseek-ai/dsh';
 const DSH_PREFIX = '@deepseek-ai/dsh-';
 const MAX_DIRECT_PEERS = 64;
 
-export function resolveNpmInvocation({
+function resolveNpmInvocation({
   platform = process.platform,
   nodePath = process.execPath,
   fileExists = existsSync,
@@ -144,7 +144,7 @@ function manifestUrl(registryUrl, name, version) {
   return `${registryUrl.replace(/\/+$/, '')}/${encodedName}/${encodeURIComponent(version)}`;
 }
 
-export async function fetchPublicManifest(name, version, {
+async function fetchPublicManifest(name, version, {
   registryUrl = registry,
   fetchImpl = globalThis.fetch,
 } = {}) {

package/src/adaptive-routing.mjs

@@ -5,8 +5,8 @@
 // caller may record only outcomes Crew already observed, and routing decisions
 // expose bounded evidence suitable for model-selection trace metadata.
 
-export const ADAPTIVE_ROUTING_VERSION = 1;
-export const ADAPTIVE_ROUTING_DEFAULTS = Object.freeze({
+const ADAPTIVE_ROUTING_VERSION = 1;
+const ADAPTIVE_ROUTING_DEFAULTS = Object.freeze({
   enabled: false,
   window_size: 8,
   min_samples: 2,

package/src/ci-evidence.mjs

@@ -29,7 +29,7 @@
 // one; nothing here reads credentials from disk, and the value is never logged,
 // returned, or included in an evidence record.
 
-export const CI_EVIDENCE_REPO = 'Ran-sh/dsh-crew';
+const CI_EVIDENCE_REPO = 'Ran-sh/dsh-crew';
 
 // The row each CI job validates. A platform with no job in the workflow cannot
 // be evidenced by any run, so `macos_smoke` is deliberately absent rather than

package/src/client/quick-panel.tsx

@@ -9,8 +9,12 @@ import { PanelHeader, PanelStyles } from './panel-chrome';
 // (/_dsh/dsh-crew/quick-config, /quick-status). Runtime maintenance stays on 3210.
 
 const API = '/_dsh/dsh-crew';
-const CREW_CONTROL_PLANE_URL = 'http://127.0.0.1:3210/';
-const FULL = 'http://127.0.0.1:3210/';
+// The control plane needs its own session, and this panel runs in a DIFFERENT
+// harness process (the desktop app, or the 3080 frontend): its connection service
+// cannot mint a token for 3210, so linking the bare port landed the operator on
+// "dsh web authentication required". The hub's own endpoint mints the session and
+// redirects, so no token is ever published to a page or a file.
+const FULL = 'http://127.0.0.1:3210/_dsh/dsh-crew/control-plane';
 
 type ModelEntry = { provider: string; model: string };
 type QuickConfig = {

package/src/credential-lifecycle.mjs

@@ -4,9 +4,6 @@
 
 import { createHash, randomUUID } from 'node:crypto';
 
-export const CREDENTIAL_PURGE_STATES = Object.freeze([
-  'PLANNED', 'REFERENCE_RECHECKED', 'PURGE_PENDING_CONFIRMATION', 'PURGED', 'VERIFIED', 'FAILED',
-]);
 const ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,191}$/;
 const REVISION_PATTERN = /^[a-f0-9]{64}$/;
 

package/src/credential-purge-state.mjs

@@ -36,7 +36,7 @@ export function markCredentialPurged(input, plan) {
   };
 }
 
-export function markCredentialPurgeUnverified(input, plan) {
+function markCredentialPurgeUnverified(input, plan) {
   const state = normalizeCredentialPurgeState(input);
   if (!validId(plan?.reference_id) || !validId(plan?.plan_id)) return state;
   const purged = { ...state.purged };
@@ -53,7 +53,3 @@ export function recordCredentialPurgeOutcome(input, plan, result) {
   if (result?.state === 'PURGED') return markCredentialPurgeUnverified(input, plan);
   return normalizeCredentialPurgeState(input);
 }
-
-export function isCredentialPurged(input, referenceId) {
-  return Object.prototype.hasOwnProperty.call(normalizeCredentialPurgeState(input).purged, referenceId);
-}

package/src/credential-reference.mjs

@@ -28,11 +28,3 @@ export function classifyCredentialReference(value, { kind = 'env' } = {}) {
     : HANDLE_REFERENCE.test(raw) && !SECRET_LIKE.test(raw) && !EMBEDDED_SECRET.test(raw);
   return { present: true, value: valid ? raw : null, redacted: !valid };
 }
-
-export function sanitizeCredentialReference(value, options = {}) {
-  return classifyCredentialReference(value, options).value;
-}
-
-export function hasCredentialReference(value, options = {}) {
-  return classifyCredentialReference(value, options).present;
-}

package/src/crew-workspaces.mjs

@@ -32,7 +32,7 @@ import { acquireWorkspaceLock, DEFAULT_LOCK_WAIT_MS } from './workspace-lock.mjs
 
 export const CREW_WORKSPACE_WORKER = 'dsh-crew-worker';
 export const CREW_WORKSPACE_REVIEW = 'dsh-crew-review';
-export const CREW_WORKSPACE_NAMES = Object.freeze([CREW_WORKSPACE_WORKER, CREW_WORKSPACE_REVIEW]);
+const CREW_WORKSPACE_NAMES = Object.freeze([CREW_WORKSPACE_WORKER, CREW_WORKSPACE_REVIEW]);
 export const WORKSPACE_CONFLICT = 'WORKSPACE_CONFLICT';
 
 /** The workspace a role runs in. Only the reviewer is separated out. */

package/src/delivery.mjs

@@ -11,7 +11,7 @@
 
 export const DELIVERY_SECTIONS = ['Diff', 'Tests', 'Risks'];
 export const OPTIONAL_DELIVERY_SECTIONS = ['Unverified'];
-export const ALL_DELIVERY_SECTIONS = [...DELIVERY_SECTIONS, ...OPTIONAL_DELIVERY_SECTIONS];
+const ALL_DELIVERY_SECTIONS = [...DELIVERY_SECTIONS, ...OPTIONAL_DELIVERY_SECTIONS];
 
 export const REVIEW_SECTIONS = ['Review Findings', 'Evidence', 'Risks', 'Verdict'];
 
@@ -129,7 +129,7 @@ export function appendDeliveryInstructions(task, { tier, isReview } = {}) {
  * visible evidence. Two parsers gave two answers about one section; there is now
  * one, and it lives here.
  */
-export function parseTestRow(line) {
+function parseTestRow(line) {
   const normalized = String(line ?? '')
     .replace(/^\s*[-*+]\s+/, '')
     .replace(/^\|/, '')