@sparkelf/dsh-plus 0.2.0-rc.17 → 0.2.0-rc.19

package/cordis.patch.yml

@@ -28,17 +28,9 @@
     - id: plus-backup
       name: '@sparkelf/dsh-plugin-backup'
 
-    - id: plus-dataops
-      name: '@sparkelf/dsh-plugin-dataops'
-      disabled: !!js "!process.env.DSH_DATAOPS_BASE_URL"
-      config:
-        baseUrl: !!js process.env.DSH_DATAOPS_BASE_URL
-        serverName: dataops
-        credentialRef: dataops_access_token
-        targetCredentialRef: dataops_target_ref
-        callbackOrigin: !!js process.env.DSH_DATAOPS_CALLBACK_ORIGIN
-        toolCallTimeoutMs: 60000
-        failOnStartupError: false
+    # DataOps tools belong to the DataOps-managed workspace profile only. A
+    # standalone profile must not carry DataOps identity or endpoint config, so
+    # this layer mounts no DataOps plugin.
 
     # A disabled root node carries the package's Web Settings entry into the
     # client inventory; the startup nodes below exclusively own Host schemas.

package/lib/bin.js

@@ -210,6 +210,7 @@ function capabilityPatchLayer(answers) {
 	if (enabled.has("computer-use")) rows.push("    - id: computer-use", "      name: '@deepseek-ai/dsh-computer-use'", "    - id: computer-use-cua-driver-mcp", "      name: '@deepseek-ai/dsh-experimental-computer-use-cua-driver-mcp'");
 	const lines = ["# Written by dsh-plus start from the capability interview. Enabling or disabling a capability", "# rewrites this file; edits here are replaced."];
 	if (rows.length > 0) lines.push("- insert:", ...rows);
+	else lines.push("[]");
 	if (enabled.has("exa")) lines.push("", "# Route web_search through Exa rather than the built-in provider.", "- id: web", "  config:", "    searchProvider: exa");
 	return lines.join("\n") + "\n";
 }
@@ -532,8 +533,55 @@ async function waitForAuthenticatedUrl(logPath, timeoutMilliseconds) {
 * the launcher mounts exactly the bundles the profile names and nothing expands a
 * bundle's own list.
 */
-/** Profile name a standalone installation owns. */
+/** Profile name a standalone installation owns when its package declares none. */
 const STANDALONE_PROFILE = "plus";
+/**
+* Read the deployment facts the installing package declares.
+*
+* A standalone package describes the profile it materializes and the capabilities it
+* omits, so a reduced variant owns a differently named profile and a reduced install
+* without the distribution naming either. The declaration travels with the package
+* because npm resolves the tree long before any command of ours runs.
+*
+* @param anchor - path inside the installing package's tree.
+* @param fallback - profile name to use when the declaration is absent.
+* @returns the declared profile name and omitted capabilities.
+*/
+function readStandaloneDeclaration(anchor, fallback = STANDALONE_PROFILE) {
+	let current = resolve(anchor);
+	for (;;) {
+		const declared = readStandaloneFacts(join(current, "package.json"));
+		if (declared !== void 0) return declared;
+		const parent = dirname(current);
+		if (parent === current) return {
+			profileName: fallback,
+			omittedPackages: {}
+		};
+		current = parent;
+	}
+}
+/** Read one manifest's standalone declaration, or undefined when it carries none. */
+function readStandaloneFacts(manifestPath) {
+	if (!existsSync(manifestPath)) return void 0;
+	let standalone;
+	try {
+		standalone = JSON.parse(readFileSync(manifestPath, "utf8")).dshPlusStandalone;
+	} catch {
+		return;
+	}
+	const profile = standalone?.profile;
+	if (standalone === void 0 || typeof profile !== "string" || profile === "") return void 0;
+	const rawOmitted = standalone.omittedPackages;
+	const omittedPackages = {};
+	if (rawOmitted !== void 0 && typeof rawOmitted === "object" && !Array.isArray(rawOmitted)) for (const [name, spec] of Object.entries(rawOmitted)) {
+		if (typeof spec !== "string" || spec === "") throw new Error("dshPlusStandalone.omittedPackages." + name + " must be a non-empty string");
+		omittedPackages[name] = spec;
+	}
+	return {
+		profileName: profile,
+		omittedPackages
+	};
+}
 function requireRecord(value, label) {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(label + " must be an object");
 	return value;
@@ -814,9 +862,12 @@ function linkBundle(consumerModules, name, source) {
 /** Resolve every path a command needs, without creating anything. */
 function resolvePaths(anchor, env = process.env) {
 	const home = resolveHome(env);
+	const declaration = readStandaloneDeclaration(anchor);
 	return {
 		home,
-		profileDirectory: join(home, "profiles", STANDALONE_PROFILE),
+		profileName: declaration.profileName,
+		omittedPackages: declaration.omittedPackages,
+		profileDirectory: join(home, "profiles", declaration.profileName),
 		distributionDirectory: resolveDistributionDirectory(anchor)
 	};
 }
@@ -840,7 +891,7 @@ function ensureProfile(paths, consumerDirectory) {
 	const manifestPath = join(paths.profileDirectory, "package.json");
 	const distribution = readDistributionProfile(paths.distributionDirectory);
 	if (existsSync(manifestPath)) {
-		writeProfileOverrides(paths.profileDirectory, distribution.overrides, distribution.allowBuilds);
+		writeProfileOverrides(paths.profileDirectory, distribution.overrides, distribution.allowBuilds, paths.omittedPackages);
 		installProfilePackages(paths, consumerDirectory);
 		return false;
 	}
@@ -860,7 +911,7 @@ function ensureProfile(paths, consumerDirectory) {
 		} }
 	};
 	writeFileSync(manifestPath, JSON.stringify(manifest, null, 2) + "\n");
-	writeProfileOverrides(paths.profileDirectory, distribution.overrides, distribution.allowBuilds);
+	writeProfileOverrides(paths.profileDirectory, distribution.overrides, distribution.allowBuilds, paths.omittedPackages);
 	installProfilePackages(paths, consumerDirectory);
 	return true;
 }
@@ -874,13 +925,14 @@ function ensureProfile(paths, consumerDirectory) {
 * @param profileDirectory - the standalone profile directory.
 * @param overrides - official package name to published replacement spec.
 */
-function writeProfileOverrides(profileDirectory, overrides, allowBuilds) {
+function writeProfileOverrides(profileDirectory, overrides, allowBuilds, omittedPackages) {
 	const workspacePath = join(profileDirectory, "pnpm-workspace.yaml");
 	const document = parseDocument(existsSync(workspacePath) ? readFileSync(workspacePath, "utf8") : "");
 	const [documentError] = document.errors;
 	if (documentError !== void 0) throw new Error("Plus profile workspace is not valid YAML", { cause: documentError });
 	if (document.get("packages") === void 0) document.set("packages", ["."]);
 	for (const [name, spec] of Object.entries(overrides)) document.setIn(["overrides", name], spec);
+	for (const [name, spec] of Object.entries(omittedPackages)) document.setIn(["overrides", name], spec);
 	for (const [name, allowed] of Object.entries(allowBuilds)) document.setIn(["allowBuilds", name], allowed);
 	if (document.get("nodeLinker") === void 0) document.set("nodeLinker", "hoisted");
 	if (document.get("autoInstallPeers") === void 0) document.set("autoInstallPeers", false);
@@ -978,6 +1030,7 @@ function parseStartOptions(argv) {
 	let host = "127.0.0.1";
 	let open = true;
 	let foreground = false;
+	let capabilities;
 	for (let index = 0; index < argv.length; index += 1) {
 		const token = argv[index];
 		if (token === "--port" || token === "-p") {
@@ -1002,13 +1055,41 @@ function parseStartOptions(argv) {
 			foreground = true;
 			continue;
 		}
+		if (token === "--capabilities") {
+			const value = argv[index + 1];
+			if (value === void 0) throw new Error("--capabilities requires a comma-separated list, or an empty string for none");
+			const stated = value === "" ? [] : value.split(",").map((entry) => entry.trim()).filter((entry) => entry !== "");
+			const offered = new Set(CAPABILITIES.map((capability) => capability.id));
+			for (const id of stated) if (!offered.has(id)) throw new Error("unknown capability \"" + id + "\"; this release offers " + [...offered].join(", "));
+			capabilities = stated;
+			index += 1;
+			continue;
+		}
 		throw new Error("unknown option: " + String(token));
 	}
 	return {
 		port,
 		host,
 		open,
-		foreground
+		foreground,
+		capabilities
+	};
+}
+/**
+* Resolve a stated capability selection.
+*
+* An unattended install states what it wants instead of answering the interview, so a
+* name it does not offer has to fail here rather than silently enable nothing: the
+* deployment would otherwise start with a capability the caller believes it selected.
+*
+* @param ids - capability ids the caller selected.
+* @returns the answers the interview would have returned.
+*/
+function selectCapabilities(ids) {
+	const selected = [...new Set(ids)];
+	return {
+		enabled: selected,
+		...selected.includes("mineru") ? { mineruEndpoint: DEFAULT_MINERU_ENDPOINT } : {}
 	};
 }
 /**
@@ -1039,16 +1120,35 @@ function installationRoot() {
 function installationAnchor() {
 	return join(installationRoot(), "package.json");
 }
+/**
+* Path to the installed command's own file, which is where a declaration lookup starts.
+*
+* The declaration belongs to the package the user installed, and that package is a
+* sibling of this module rather than an ancestor: a variant's forwarder imports this
+* CLI in-process, so `import.meta.url` names `@sparkelf/dsh-plus` while the installed
+* command is the variant. `process.argv[1]` is the entry that was actually invoked,
+* which is the package whose declaration applies.
+*
+* Walking out from the installation root cannot reach it either: that root is the
+* project the user ran the command in, so every variant would fall back to the full
+* profile and keep the capabilities it excluded.
+*
+* @returns absolute path to the invoked command, or this module when argv carries none.
+*/
+function declarationAnchor() {
+	const invoked = process.argv[1];
+	return invoked === void 0 || invoked === "" ? fileURLToPath(import.meta.url) : resolve(invoked);
+}
 /** The launcher entry this installation must drive. */
 function launcherEntry(anchor) {
 	return createRequire(anchor).resolve("@deepseek-ai/dsh/lib/bin.js");
 }
 /** Run the server in this process, inheriting stdio. */
-function runForeground(entry, port, host, open) {
+function runForeground(entry, profileName, port, host, open) {
 	const args = [
 		entry,
 		"--profile",
-		STANDALONE_PROFILE,
+		profileName,
 		"--port",
 		String(port),
 		"--host",
@@ -1060,7 +1160,7 @@ function runForeground(entry, port, host, open) {
 async function start(argv) {
 	const options = parseStartOptions(argv);
 	const anchor = installationAnchor();
-	const paths = resolvePaths(anchor);
+	const paths = resolvePaths(declarationAnchor());
 	if (!pnpmAvailable()) {
 		const command = pnpmInstallCommand();
 		console.log("pnpm is required to install the plus profile, and was not found.");
@@ -1091,9 +1191,9 @@ async function start(argv) {
 		console.log("pnpm installed.");
 	}
 	const created = ensureProfile(paths, installationRoot());
-	console.log(created ? "Created the plus profile at " + paths.profileDirectory : "Using the existing plus profile");
+	console.log(created ? "Created the " + paths.profileName + " profile at " + paths.profileDirectory : "Using the existing " + paths.profileName + " profile");
 	for (const label of applyProfileNpmPatches(paths.distributionDirectory, paths.profileDirectory)) console.log("Applied the reviewed patch " + label);
-	const answers = created || !existsSync(join(paths.home, "capabilities.json")) ? await interviewCapabilities(true) : void 0;
+	const answers = created || !existsSync(join(paths.home, "capabilities.json")) ? options.capabilities === void 0 ? await interviewCapabilities(true) : selectCapabilities(options.capabilities) : void 0;
 	if (answers !== void 0) {
 		const ready = await installCapabilityServices(answers, paths.home);
 		writeCapabilityPatch(paths.profileDirectory, answers);
@@ -1103,16 +1203,17 @@ async function start(argv) {
 		if (answers.enabled.includes("exa") && answers.exaApiKey === void 0) console.log("  Exa: add EXA_API_KEY to " + join(paths.home, CAPABILITY_ENV_FILE) + " when you have a key.");
 	}
 	const entry = launcherEntry(anchor);
-	if (options.foreground) return runForeground(entry, options.port, options.host, options.open);
+	if (options.foreground) return runForeground(entry, paths.profileName, options.port, options.host, options.open);
 	const existing = readState(paths.home);
 	if (existing !== void 0) {
 		console.log("Plus is already running at " + existing.url);
 		console.log("Stop it with: dsh-plus stop");
 		return 0;
 	}
-	return startDetached(paths.home, entry, options);
+	return startDetached(paths, entry, options);
 }
-async function startDetached(home, entry, options) {
+async function startDetached(paths, entry, options) {
+	const home = paths.home;
 	const port = await choosePort(options.port, options.host);
 	if (port === void 0) {
 		console.error("No free port in the range " + String(options.port) + "-" + String(options.port + 9) + ".");
@@ -1120,15 +1221,15 @@ async function startDetached(home, entry, options) {
 		return 1;
 	}
 	if (port !== options.port) console.log("Port " + String(options.port) + " is in use; using " + String(port) + ".");
-	const logPath = join(stateDirectory(home), "server.log");
+	const logPath = join(stateDirectory(paths.home), "server.log");
 	const env = {
 		...process.env,
-		DSH_HOME: home
+		DSH_HOME: paths.home
 	};
 	const args = [
 		entry,
 		"--profile",
-		STANDALONE_PROFILE,
+		paths.profileName,
 		"--port",
 		String(port),
 		"--host",

package/lib/types/standalone-capabilities.js

@@ -159,8 +159,16 @@ export function capabilityPatchLayer(answers) {
         '# ' + CAPABILITY_MARKER + ' Enabling or disabling a capability',
         '# rewrites this file; edits here are replaced.',
     ];
-    if (rows.length > 0)
+    // The loader requires a top-level YAML array, so a selection that mounts nothing
+    // still has to produce one. Comments alone parse as `null`, and the profile then
+    // refuses to boot with "must be a top-level YAML array of loader patch entries" —
+    // which is the whole deployment, not just the missing capability.
+    if (rows.length > 0) {
         lines.push('- insert:', ...rows);
+    }
+    else {
+        lines.push('[]');
+    }
     if (enabled.has('exa')) {
         lines.push('', '# Route web_search through Exa rather than the built-in provider.', '- id: web', '  config:', '    searchProvider: exa');
     }

package/lib/types/standalone-cli.js

@@ -10,10 +10,10 @@
 import { spawnSync } from 'node:child_process';
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { newerVersion } from "./registry-versions.js";
-import { CAPABILITY_ENV_FILE, CAPABILITY_MARKER, CAPABILITY_RECORD, capabilityEnvironment, capabilityPatchLayer, installCapabilityServices, interviewCapabilities, } from "./standalone-capabilities.js";
+import { CAPABILITIES, CAPABILITY_ENV_FILE, CAPABILITY_MARKER, CAPABILITY_RECORD, DEFAULT_MINERU_ENDPOINT, capabilityEnvironment, capabilityPatchLayer, installCapabilityServices, interviewCapabilities, } from "./standalone-capabilities.js";
 import { DEFAULT_PORT, STOP_GRACE_MILLISECONDS, choosePort, clearState, isRunning, portAvailable, readState, spawnServer, stateDirectory, waitForAuthenticatedUrl, waitForServer, writeState, } from "./standalone-server.js";
 import { STANDALONE_PROFILE, applyProfileNpmPatches, ensureProfile, pnpmAvailable, pnpmInstallCommand, pnpmInstallCommands, registryOrder, readDistributionProfile, resolvePaths, } from "./standalone-profile.js";
 /** Milliseconds a start waits for the server to answer before reporting failure. */
@@ -25,6 +25,7 @@ function parseStartOptions(argv) {
     let host = '127.0.0.1';
     let open = true;
     let foreground = false;
+    let capabilities;
     for (let index = 0; index < argv.length; index += 1) {
         const token = argv[index];
         if (token === '--port' || token === '-p') {
@@ -51,9 +52,47 @@ function parseStartOptions(argv) {
             foreground = true;
             continue;
         }
+        if (token === '--capabilities') {
+            const value = argv[index + 1];
+            if (value === undefined)
+                throw new Error('--capabilities requires a comma-separated list, or an empty string for none');
+            const stated = value === '' ? [] : value.split(',').map(entry => entry.trim()).filter(entry => entry !== '');
+            // A stated selection is the only way an unattended install chooses capabilities, so
+            // a name this release does not offer fails here: the deployment would otherwise
+            // start without a capability its caller believes it selected. Validating at parse
+            // time also makes the failure independent of what is installed.
+            const offered = new Set(CAPABILITIES.map(capability => capability.id));
+            for (const id of stated) {
+                if (!offered.has(id)) {
+                    throw new Error('unknown capability "' + id + '"; this release offers ' + [...offered].join(', '));
+                }
+            }
+            capabilities = stated;
+            index += 1;
+            continue;
+        }
         throw new Error('unknown option: ' + String(token));
     }
-    return { port, host, open, foreground };
+    return { port, host, open, foreground, capabilities };
+}
+/**
+ * Resolve a stated capability selection.
+ *
+ * An unattended install states what it wants instead of answering the interview, so a
+ * name it does not offer has to fail here rather than silently enable nothing: the
+ * deployment would otherwise start with a capability the caller believes it selected.
+ *
+ * @param ids - capability ids the caller selected.
+ * @returns the answers the interview would have returned.
+ */
+function selectCapabilities(ids) {
+    const selected = [...new Set(ids)];
+    // MinerU is started from an endpoint the interview collects; an unattended install
+    // gets the documented default rather than an unset one.
+    return {
+        enabled: selected,
+        ...selected.includes('mineru') ? { mineruEndpoint: DEFAULT_MINERU_ENDPOINT } : {},
+    };
 }
 /**
  * Where the installation that owns this command keeps its packages.
@@ -87,13 +126,32 @@ function installationRoot() {
 function installationAnchor() {
     return join(installationRoot(), 'package.json');
 }
+/**
+ * Path to the installed command's own file, which is where a declaration lookup starts.
+ *
+ * The declaration belongs to the package the user installed, and that package is a
+ * sibling of this module rather than an ancestor: a variant's forwarder imports this
+ * CLI in-process, so `import.meta.url` names `@sparkelf/dsh-plus` while the installed
+ * command is the variant. `process.argv[1]` is the entry that was actually invoked,
+ * which is the package whose declaration applies.
+ *
+ * Walking out from the installation root cannot reach it either: that root is the
+ * project the user ran the command in, so every variant would fall back to the full
+ * profile and keep the capabilities it excluded.
+ *
+ * @returns absolute path to the invoked command, or this module when argv carries none.
+ */
+function declarationAnchor() {
+    const invoked = process.argv[1];
+    return invoked === undefined || invoked === '' ? fileURLToPath(import.meta.url) : resolve(invoked);
+}
 /** The launcher entry this installation must drive. */
 function launcherEntry(anchor) {
     return createRequire(anchor).resolve('@deepseek-ai/dsh/lib/bin.js');
 }
 /** Run the server in this process, inheriting stdio. */
-function runForeground(entry, port, host, open) {
-    const args = [entry, '--profile', STANDALONE_PROFILE, '--port', String(port), '--host', host];
+function runForeground(entry, profileName, port, host, open) {
+    const args = [entry, '--profile', profileName, '--port', String(port), '--host', host];
     if (!open)
         args.push('--no-open');
     const result = spawnSync(process.execPath, args, { stdio: 'inherit' });
@@ -102,7 +160,9 @@ function runForeground(entry, port, host, open) {
 async function start(argv) {
     const options = parseStartOptions(argv);
     const anchor = installationAnchor();
-    const paths = resolvePaths(anchor);
+    // The profile's own name and omissions come from the package that installed this
+    // command, which is a different tree position than the dependencies it resolves.
+    const paths = resolvePaths(declarationAnchor());
     // The profile installs its own dependency tree, which needs pnpm. Asking here rather
     // than failing inside the install turns a missing prerequisite into a decision the
     // consumer makes, and the install it can run is the one command that provides it.
@@ -144,8 +204,8 @@ async function start(argv) {
     }
     const created = ensureProfile(paths, installationRoot());
     console.log(created
-        ? 'Created the ' + STANDALONE_PROFILE + ' profile at ' + paths.profileDirectory
-        : 'Using the existing ' + STANDALONE_PROFILE + ' profile');
+        ? 'Created the ' + paths.profileName + ' profile at ' + paths.profileDirectory
+        : 'Using the existing ' + paths.profileName + ' profile');
     // The profile symlinks the consumer's packages, so a patch lands on the installed
     // copy the launcher loads. A reinstall restores the published bytes, which is why
     // this runs on every start rather than only when the profile was created.
@@ -157,7 +217,9 @@ async function start(argv) {
     // on every start would make a restart look like a first install.
     const needsInterview = created || !existsSync(join(paths.home, CAPABILITY_RECORD));
     const answers = needsInterview
-        ? await interviewCapabilities(true)
+        ? options.capabilities === undefined
+            ? await interviewCapabilities(true)
+            : selectCapabilities(options.capabilities)
         : undefined;
     if (answers !== undefined) {
         const ready = await installCapabilityServices(answers, paths.home);
@@ -172,16 +234,17 @@ async function start(argv) {
     }
     const entry = launcherEntry(anchor);
     if (options.foreground)
-        return runForeground(entry, options.port, options.host, options.open);
+        return runForeground(entry, paths.profileName, options.port, options.host, options.open);
     const existing = readState(paths.home);
     if (existing !== undefined) {
         console.log('Plus is already running at ' + existing.url);
         console.log('Stop it with: dsh-plus stop');
         return 0;
     }
-    return startDetached(paths.home, entry, options);
+    return startDetached(paths, entry, options);
 }
-async function startDetached(home, entry, options) {
+async function startDetached(paths, entry, options) {
+    const home = paths.home;
     const port = await choosePort(options.port, options.host);
     if (port === undefined) {
         console.error('No free port in the range ' + String(options.port) + '-' + String(options.port + 9) + '.');
@@ -190,9 +253,9 @@ async function startDetached(home, entry, options) {
     }
     if (port !== options.port)
         console.log('Port ' + String(options.port) + ' is in use; using ' + String(port) + '.');
-    const logPath = join(stateDirectory(home), 'server.log');
-    const env = { ...process.env, DSH_HOME: home };
-    const args = [entry, '--profile', STANDALONE_PROFILE, '--port', String(port), '--host', options.host, '--no-open'];
+    const logPath = join(stateDirectory(paths.home), 'server.log');
+    const env = { ...process.env, DSH_HOME: paths.home };
+    const args = [entry, '--profile', paths.profileName, '--port', String(port), '--host', options.host, '--no-open'];
     const pid = spawnServer({ command: process.execPath, args, env, logPath });
     const url = 'http://' + options.host + ':' + String(port) + '/';
     const ready = await waitForServer(url, READY_TIMEOUT_MILLISECONDS);

package/lib/types/standalone-profile.d.ts

@@ -8,12 +8,56 @@
  * the launcher mounts exactly the bundles the profile names and nothing expands a
  * bundle's own list.
  */
-/** Profile name a standalone installation owns. */
+/** Profile name a standalone installation owns when its package declares none. */
 export declare const STANDALONE_PROFILE = "plus";
+/**
+ * Read the profile name the installing package declares.
+ *
+ * A standalone package describes the profile it materializes, so a reduced variant can
+ * own a differently named profile beside the full one instead of overwriting it. The
+ * declaration travels with the package because npm resolves the tree long before any
+ * command of ours runs, and the distribution cannot name a profile for a package it
+ * does not own.
+ *
+ * @param anchor - path inside the installing package's tree.
+ * @param fallback - profile name to use when the declaration is absent.
+ * @returns the declared profile name, or the fallback.
+ */
+export declare function resolveStandaloneProfile(anchor: string, fallback?: string): string;
+/** What the installing package declares about the deployment it owns. */
+export interface StandaloneDeclaration {
+    /** Profile name the launcher materializes. */
+    readonly profileName: string;
+    /**
+     * Capabilities the deployment must not install, as package name to override spec.
+     *
+     * npm substitutes rather than deletes, so each entry names the placeholder the
+     * capability is replaced with. The profile workspace applies these as overrides,
+     * which is where pnpm reads them.
+     */
+    readonly omittedPackages: Readonly<Record<string, string>>;
+}
+/**
+ * Read the deployment facts the installing package declares.
+ *
+ * A standalone package describes the profile it materializes and the capabilities it
+ * omits, so a reduced variant owns a differently named profile and a reduced install
+ * without the distribution naming either. The declaration travels with the package
+ * because npm resolves the tree long before any command of ours runs.
+ *
+ * @param anchor - path inside the installing package's tree.
+ * @param fallback - profile name to use when the declaration is absent.
+ * @returns the declared profile name and omitted capabilities.
+ */
+export declare function readStandaloneDeclaration(anchor: string, fallback?: string): StandaloneDeclaration;
 /** Resolved locations for one standalone installation. */
 export interface StandalonePaths {
     /** DSH home holding profiles, credentials, and session data. */
     readonly home: string;
+    /** Profile name the launcher boots, as the installing package declares it. */
+    readonly profileName: string;
+    /** Capabilities the deployment omits, as package name to override spec. */
+    readonly omittedPackages: Readonly<Record<string, string>>;
     /** Profile directory the launcher boots. */
     readonly profileDirectory: string;
     /** Installed Plus distribution directory. */

package/lib/types/standalone-profile.js

@@ -14,8 +14,79 @@ import { createRequire } from 'node:module';
 import { homedir } from 'node:os';
 import { dirname, join, posix, resolve, win32 } from 'node:path';
 import { parseDocument } from 'yaml';
-/** Profile name a standalone installation owns. */
+/** Profile name a standalone installation owns when its package declares none. */
 export const STANDALONE_PROFILE = 'plus';
+/**
+ * Read the profile name the installing package declares.
+ *
+ * A standalone package describes the profile it materializes, so a reduced variant can
+ * own a differently named profile beside the full one instead of overwriting it. The
+ * declaration travels with the package because npm resolves the tree long before any
+ * command of ours runs, and the distribution cannot name a profile for a package it
+ * does not own.
+ *
+ * @param anchor - path inside the installing package's tree.
+ * @param fallback - profile name to use when the declaration is absent.
+ * @returns the declared profile name, or the fallback.
+ */
+export function resolveStandaloneProfile(anchor, fallback = STANDALONE_PROFILE) {
+    return readStandaloneDeclaration(anchor, fallback).profileName;
+}
+/**
+ * Read the deployment facts the installing package declares.
+ *
+ * A standalone package describes the profile it materializes and the capabilities it
+ * omits, so a reduced variant owns a differently named profile and a reduced install
+ * without the distribution naming either. The declaration travels with the package
+ * because npm resolves the tree long before any command of ours runs.
+ *
+ * @param anchor - path inside the installing package's tree.
+ * @param fallback - profile name to use when the declaration is absent.
+ * @returns the declared profile name and omitted capabilities.
+ */
+export function readStandaloneDeclaration(anchor, fallback = STANDALONE_PROFILE) {
+    // The anchor is the CLI file; walk out to the package that declares the forwarder.
+    let current = resolve(anchor);
+    for (;;) {
+        const manifestPath = join(current, 'package.json');
+        const declared = readStandaloneFacts(manifestPath);
+        if (declared !== undefined)
+            return declared;
+        const parent = dirname(current);
+        if (parent === current)
+            return { profileName: fallback, omittedPackages: {} };
+        current = parent;
+    }
+}
+/** Read one manifest's standalone declaration, or undefined when it carries none. */
+function readStandaloneFacts(manifestPath) {
+    if (!existsSync(manifestPath))
+        return undefined;
+    let standalone;
+    try {
+        const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
+        standalone = manifest.dshPlusStandalone;
+    }
+    catch {
+        // A package whose manifest cannot be read declares nothing; the caller keeps walking
+        // because the declaring package may sit above it.
+        return undefined;
+    }
+    const profile = standalone?.profile;
+    if (standalone === undefined || typeof profile !== 'string' || profile === '')
+        return undefined;
+    const rawOmitted = standalone.omittedPackages;
+    const omittedPackages = {};
+    if (rawOmitted !== undefined && typeof rawOmitted === 'object' && !Array.isArray(rawOmitted)) {
+        for (const [name, spec] of Object.entries(rawOmitted)) {
+            if (typeof spec !== 'string' || spec === '') {
+                throw new Error('dshPlusStandalone.omittedPackages.' + name + ' must be a non-empty string');
+            }
+            omittedPackages[name] = spec;
+        }
+    }
+    return { profileName: profile, omittedPackages };
+}
 function requireRecord(value, label) {
     if (value === null || typeof value !== 'object' || Array.isArray(value))
         throw new Error(label + ' must be an object');
@@ -336,9 +407,12 @@ function linkBundle(consumerModules, name, source) {
 /** Resolve every path a command needs, without creating anything. */
 export function resolvePaths(anchor, env = process.env) {
     const home = resolveHome(env);
+    const declaration = readStandaloneDeclaration(anchor);
     return {
         home,
-        profileDirectory: join(home, 'profiles', STANDALONE_PROFILE),
+        profileName: declaration.profileName,
+        omittedPackages: declaration.omittedPackages,
+        profileDirectory: join(home, 'profiles', declaration.profileName),
         distributionDirectory: resolveDistributionDirectory(anchor),
     };
 }
@@ -366,7 +440,7 @@ export function ensureProfile(paths, consumerDirectory) {
         // script allowlist — and a distribution release changes them. Rewriting on every
         // start is what lets an upgraded installation receive the new values; a profile
         // written once keeps whatever its own release decided and can never be corrected.
-        writeProfileOverrides(paths.profileDirectory, distribution.overrides, distribution.allowBuilds);
+        writeProfileOverrides(paths.profileDirectory, distribution.overrides, distribution.allowBuilds, paths.omittedPackages);
         installProfilePackages(paths, consumerDirectory);
         return false;
     }
@@ -392,7 +466,7 @@ export function ensureProfile(paths, consumerDirectory) {
     };
     writeFileSync(manifestPath, JSON.stringify(manifest, null, 2) + '\n');
     // The overrides must reach the workspace before the install that reads them.
-    writeProfileOverrides(paths.profileDirectory, distribution.overrides, distribution.allowBuilds);
+    writeProfileOverrides(paths.profileDirectory, distribution.overrides, distribution.allowBuilds, paths.omittedPackages);
     installProfilePackages(paths, consumerDirectory);
     return true;
 }
@@ -406,7 +480,7 @@ export function ensureProfile(paths, consumerDirectory) {
  * @param profileDirectory - the standalone profile directory.
  * @param overrides - official package name to published replacement spec.
  */
-function writeProfileOverrides(profileDirectory, overrides, allowBuilds) {
+function writeProfileOverrides(profileDirectory, overrides, allowBuilds, omittedPackages) {
     const workspacePath = join(profileDirectory, 'pnpm-workspace.yaml');
     const document = parseDocument(existsSync(workspacePath) ? readFileSync(workspacePath, 'utf8') : '');
     const [documentError] = document.errors;
@@ -416,6 +490,11 @@ function writeProfileOverrides(profileDirectory, overrides, allowBuilds) {
         document.set('packages', ['.']);
     for (const [name, spec] of Object.entries(overrides))
         document.setIn(['overrides', name], spec);
+    // A capability the deployment omits is substituted rather than deleted, because npm's
+    // override has no removal form. Writing it here keeps the omission in the one place
+    // pnpm reads, so an install never receives the capability the variant excluded.
+    for (const [name, spec] of Object.entries(omittedPackages))
+        document.setIn(['overrides', name], spec);
     // pnpm refuses an install whose packages want to run build scripts until each is
     // decided, so the distribution's reviewed decisions travel with the install rather
     // than waiting for an interactive approval no start can offer.

package/package.json

@@ -3,12 +3,8 @@
     "dsh-plus": "lib/bin.js"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-computer-use": ">=0.1.6-alpha.1",
-    "@deepseek-ai/dsh-experimental-computer-use-cua-driver-mcp": ">=0.1.6-alpha.1",
     "@deepseek-ai/dsh-tool-session-query": ">=0.1.6-alpha.1",
-    "@deepseek-ai/dsh-web-search-exa": ">=0.1.6-alpha.1",
     "@sparkelf/dsh-client-ui-skill-center": ">=0.2.0-rc.17",
-    "@sparkelf/dsh-mobile-bridge": ">=0.2.11",
     "@sparkelf/dsh-patch-better-sidebar-browser-url-seed": ">=0.2.0-rc.17",
     "@sparkelf/dsh-patch-better-sidebar-html-preview-path": ">=0.2.0-rc.17",
     "@sparkelf/dsh-patch-better-sidebar-main-view-session": ">=0.2.0-rc.17",
@@ -29,7 +25,6 @@
     "@sparkelf/dsh-patch-workspace-storage-restore": ">=0.2.0-rc.17",
     "@sparkelf/dsh-patch-wsl-native-open": ">=0.2.0-rc.17",
     "@sparkelf/dsh-plugin-backup": ">=0.2.0-rc.17",
-    "@sparkelf/dsh-plugin-dataops": ">=0.2.0-rc.17",
     "@sparkelf/dsh-plugin-mcp-credentials": ">=0.2.0-rc.17",
     "@sparkelf/dsh-plugin-subagent-settings": ">=0.2.0-rc.17",
     "dshmarket": ">=1.45.1",
@@ -67,11 +62,11 @@
       "@sparkelf/dsh-patch-ptc-mcp-schema-types",
       "@sparkelf/dsh-patch-web-base-path",
       "@sparkelf/dsh-patch-composer-popover-boundaries",
-      "@sparkelf/dsh-patch-mobile-journal-generation",
       "@sparkelf/dsh-patch-session-format-legacy-restart",
       "@sparkelf/dsh-patch-wsl-native-open",
       "@sparkelf/dsh-patch-better-sidebar-html-preview-path",
-      "@sparkelf/dsh-patch-session-query-unindexable-session"
+      "@sparkelf/dsh-patch-session-query-unindexable-session",
+      "@sparkelf/dsh-patch-mobile-journal-generation"
     ],
     "profile": {
       "allowBuilds": {
@@ -92,7 +87,6 @@
         "@deepseek-ai/dsh-experimental-agent-team-web-profile",
         "@sparkelf/dsh-mineru",
         "@sparkelf/dsh-officecli",
-        "@sparkelf/dsh-mobile-bridge",
         "dshmarket",
         "@huanlin/dsh-plugin-better-locale",
         "dsh-better-sidebar",
@@ -104,7 +98,8 @@
         "@sparkelf/dsh-plus",
         "dsh-sql-workbench",
         "@sparkelf/dsh-ssh-manager",
-        "@sparkelf/dsh-api-client"
+        "@sparkelf/dsh-api-client",
+        "dsh-right-bg-anim"
       ],
       "dependencies": {
         "@changfenhuang/dsh-genui": "0.11.0",
@@ -120,13 +115,15 @@
         "@sparkelf/dsh-ssh-manager": "0.7.2",
         "@sparkelf/dsh-workbench-vault": "0.1.2",
         "dsh-better-sidebar": "0.19.1",
+        "dsh-right-bg-anim": "1.1.0",
         "dsh-sql-workbench": "0.5.1",
         "dsh-video-preview": "0.1.4"
       },
       "overrides": {
-        "@deepseek-ai/dsh-agent-presets": "npm:@sparkelf/dsh-agent-presets@0.1.6-alpha.2",
+        "@deepseek-ai/dsh-agent-presets": "npm:@sparkelf/dsh-agent-presets@0.1.6-alpha.3",
         "@deepseek-ai/dsh-api-gateway": "npm:@sparkelf/dsh-api-gateway@0.1.6-alpha.2",
-        "@deepseek-ai/dsh-api-session-controller": "npm:@sparkelf/dsh-api-session-controller@0.1.6-alpha.2",
+        "@deepseek-ai/dsh-api-session-controller": "npm:@sparkelf/dsh-api-session-controller@0.1.6-alpha.3",
+        "@deepseek-ai/dsh-api-terminal-controller": "npm:@sparkelf/dsh-api-terminal-controller@0.1.6-alpha.3",
         "@deepseek-ai/dsh-client-connection": "npm:@sparkelf/dsh-client-connection@0.1.6-alpha.2",
         "@deepseek-ai/dsh-client-ui-agent-preset": "npm:@sparkelf/dsh-client-ui-agent-preset@0.1.6-alpha.2",
         "@deepseek-ai/dsh-client-ui-deliverables": "npm:@sparkelf/dsh-client-ui-deliverables@0.1.6-alpha.2",
@@ -143,10 +140,23 @@
         "@deepseek-ai/dsh-native-command": "npm:@sparkelf/dsh-native-command@0.1.6-alpha.2",
         "@deepseek-ai/dsh-session-format-v0-to-v1": "npm:@sparkelf/dsh-session-format-v0-to-v1@0.1.6-alpha.2",
         "@deepseek-ai/dsh-session-log-export": "npm:@sparkelf/dsh-session-log-export@0.1.6-alpha.2",
+        "@deepseek-ai/dsh-session-query-sqlite": "npm:@sparkelf/dsh-session-query-sqlite@0.1.6-alpha.2",
         "@deepseek-ai/dsh-tools": "npm:@sparkelf/dsh-tools@0.1.6-alpha.2",
         "@deepseek-ai/dsh-web-app": "npm:@sparkelf/dsh-web-app@0.1.6-alpha.2",
         "@deepseek-ai/dsh-web-frontend": "npm:@sparkelf/dsh-web-frontend@0.1.6-alpha.2",
         "@deepseek-ai/dsh-workspace": "npm:@sparkelf/dsh-workspace@0.1.6-alpha.2"
+      },
+      "standaloneVariants": {
+        "dataops": {
+          "excludeBundles": [],
+          "excludePackages": [
+            "@deepseek-ai/dsh-computer-use",
+            "@deepseek-ai/dsh-experimental-computer-use-cua-driver-mcp",
+            "@deepseek-ai/dsh-web-search-exa"
+          ],
+          "packageName": "@sparkelf/dsh-dataops-standalone",
+          "profile": "dataops-web"
+        }
       }
     },
     "sourceBase": {
@@ -176,6 +186,11 @@
   "license": "MIT",
   "main": "lib/index.js",
   "name": "@sparkelf/dsh-plus",
+  "optionalDependencies": {
+    "@deepseek-ai/dsh-computer-use": ">=0.1.6-alpha.1",
+    "@deepseek-ai/dsh-experimental-computer-use-cua-driver-mcp": ">=0.1.6-alpha.1",
+    "@deepseek-ai/dsh-web-search-exa": ">=0.1.6-alpha.1"
+  },
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.1"
   },
@@ -189,5 +204,5 @@
   },
   "type": "module",
   "types": "lib/types/index.d.ts",
-  "version": "0.2.0-rc.17"
+  "version": "0.2.0-rc.19"
 }