@yugoo-design/companion 0.1.0-beta.1 → 0.1.0-beta.2

package/README.md

@@ -1,6 +1,6 @@
 # Yugoo Design Companion — beta
 
-Package: `@yugoo-design/companion@0.1.0-beta.1`.
+Package: `@yugoo-design/companion@0.1.0-beta.2`.
 
 Yugoo Design (语构设计系统) is an interactive design plugin for native Agent Hosts.
 It combines domain methods, Design Projects, versioned Design Files and shared
@@ -16,26 +16,44 @@ selected beta to the exact version and integrity before acquisition; keep the
 previous installed version available during updates. Do not substitute `latest`.
 
 ```sh
-npm install --ignore-scripts --save-exact @yugoo-design/companion@0.1.0-beta.1 --registry=https://registry.npmjs.org
+npm install --ignore-scripts --save-exact @yugoo-design/companion@0.1.0-beta.2 --registry=https://registry.npmjs.org
 npx --no-install design-system --help
 ```
 
-Have the Agent in your intended host follow the installed CLI's parameters and
-that host's setup requirements:
+Ask the Agent in your current host to install or update Yugoo Design as one
+product. It should identify the host from its actual execution context or your
+explicit choice, not from which CLIs happen to be installed. If identity is
+unclear, ask only for the missing host choice. Follow this acquired version's
+CLI parameters and host requirements; a newer source guide does not add commands
+to an already published package. Users do not install DSH and Companion separately:
 
 | Host | Native installation route |
 | --- | --- |
-| Codex | `install --host codex`: matching runtime receipt and saved-plan route. |
+| Codex | `install --host codex`: run the existing plan, runtime check and apply transaction, retaining each receipt. |
 | Claude Code | `install --host claude-code`: native user-scope registration. |
 | Qoder CLI | `install --host qoder`: native user-scope registration and independent readback. |
-| QwenWork | `prepare-desktop --target qwenwork`: prepare the expert suite and its MCP configuration; import through the host. |
-| WorkBuddy | `prepare-desktop --target workbuddy`: prepare the stable marketplace and plugin; import or update through the host. |
-| DSH | `install --host dsh`: use the bound aggregate, official CLI/Loader and an explicitly selected existing profile. |
+| QwenWork | `install --host qwenwork`: prepare the expert suite and its MCP configuration; import and enable through the host. |
+| WorkBuddy | `install --host workbuddy`: prepare the stable marketplace and plugin; import or update and enable through the host. |
+| DSH | `install --host dsh`: run the existing plan/apply transaction with the bound aggregate, official CLI/Loader and an explicitly selected existing profile. |
+
+Supply the required host inputs shown by `design-system --help`. Without a host,
+the entry returns `host-selection-required`; missing inputs return
+`inputs-required`, both with exit code 2 and no installation attempted. The
+Agent should obtain supported native facts itself and ask only for missing
+choices. Explicit saved-plan and `prepare-desktop` routes remain available.
+
+The Agent completes executable steps and reports only the required human
+authorization, import, enable, restart or new-session action. Report acquisition,
+registration/import, activation and verified use separately; do not report an
+untested phase as complete. DSH uses its native integration, not a second
+Companion runtime inside the host.
 
 Desktop preparation alone does not register or activate a plugin. Native suite
 versions are separate from npm versions. Preserve unrelated registrations,
 models, credentials and Design Projects; do not overwrite an owned previous
 installation path or automatically repeat an uncertain operation.
+Same-version retries and updates must follow the owning adapter's receipt rules;
+this entry does not introduce a universal replacement or rollback mechanism.
 
 Start the host normally, then invoke Yugoo Design in the intended conversation.
 Confirm the actual loaded skill and tools, open a project, edit and save a Panel,

package/bin/design-system.mjs

@@ -6,4 +6,9 @@ try {
   console.log(JSON.stringify(result))
   if(process.argv[2]==='check-runtime'&&!['load-verified','disabled','not-applicable'].includes(result.status))process.exitCode=1
   if(result.status==='failed-partial-state-retained')process.exitCode=1
-} catch(error) { console.error(error.message);process.exitCode=1 }
+  if(['runtime-not-ready','unsupported-host'].includes(result.status))process.exitCode=1
+  if(['host-selection-required','inputs-required'].includes(result.status))process.exitCode=2
+} catch(error) {
+  console.error(error.installation ? JSON.stringify({error:error.message,installation:error.installation}) : error.message)
+  process.exitCode=1
+}

package/bin/installer.mjs

@@ -12,7 +12,8 @@ import { createClaudeNativeAdapter, planClaudeInstallation, applyClaudeInstallat
 import { installQoderPlugin } from './npm-installer-qoder.mjs'
 import { checkRuntime, inspectRuntime } from './npm-runtime-check.mjs'
 import { runDesktopDshInstaller } from './npm-installer-dsh-desktop.mjs'
-import { desktopPreparationMain } from './npm-desktop-preparation.mjs'
+import { desktopPreparationMain, desktopPreparationReuseMain } from './npm-desktop-preparation.mjs'
+import { agentInstallation, AGENT_INSTALL_HOSTS, DESKTOP_INSTALL_OPTIONS } from './npm-agent-installation.mjs'
 import { createDshInstallerAdapter, planDshInstallation, applyDshInstallation } from './npm-installer-dsh.mjs'
 
 export const INSTALL_HOSTS = ['dsh','codex','claude-code','qoder','codex-desktop','qwenwork']
@@ -786,18 +787,19 @@ export async function nativePluginDirectory({npmRoot,host}) {
   }
 }
 
-export async function installerMain(args,{npmRoot,userRoot=homedir(),adapter=codexAdapter,dshAdapterFactory=createDshInstallerAdapter,claudeAdapterFactory=createClaudeNativeAdapter,qoderInstaller=installQoderPlugin}={}) {
+export async function installerMain(args,{npmRoot,userRoot=homedir(),adapter=codexAdapter,dshAdapterFactory=createDshInstallerAdapter,claudeAdapterFactory=createClaudeNativeAdapter,qoderInstaller=installQoderPlugin,agentDispatch=true}={}) {
   if(args[0]==='prepare-desktop')return desktopPreparationMain(args.slice(1),{npmRoot})
   const {values,positionals}=parseArgs({args,allowPositionals:true,options:{host:{type:'string'},'dry-run':{type:'boolean'},
     help:{type:'boolean',short:'h'},apply:{type:'boolean'},plan:{type:'string'},'receipt-dir':{type:'string'},receipt:{type:'string'},'runtime-receipt':{type:'string'},'codex-executable':{type:'string'},'claude-executable':{type:'string'},'user-root':{type:'string'},'disable-embedding':{type:'boolean'},
     'qoder-executable':{type:'string'},'qoder-config-dir':{type:'string'},
-    'dsh-config':{type:'string'},profile:{type:'string'},'aggregate-selector':{type:'string'},registry:{type:'string'}}})
+    'dsh-config':{type:'string'},profile:{type:'string'},'aggregate-selector':{type:'string'},registry:{type:'string'},
+    ...Object.fromEntries(DESKTOP_INSTALL_OPTIONS.map(key=>[key,{type:key==='separate-mcp'?'boolean':'string'}]))}})
   if(values.help)return {
     schemaVersion:1,kind:'installer-help',status:'not-applicable',
     usage:'design-system <command> [options]',
     commands:{
       'prepare-desktop':'Prepare a small QwenWork suite or stable WorkBuddy market from this exact acquired npm package. Uses --target, --package-name/--package-version, --suite-version, --node-executable and an external --destination; does not register a host. Updates use the previous preparation receipt.',
-      install:'Install persistently through the selected native host. Claude accepts a direct install with executable and receipt directory, or --dry-run / --apply. DSH/Codex use their existing saved-plan routes.',
+      install:'The current Agent selects --host from trusted context or one user choice. Direct install orchestrates the existing DSH/Codex saved-plan routes, native Claude/Qoder registration, or QwenWork/WorkBuddy import preparation. Missing inputs and pending activation are explicit. Existing --dry-run / --apply remain available.',
       'plugin-directory':'Inspect the optional Claude/Qoder session-only --plugin-dir entry; this is not persistent installation.',
       'check-runtime':'Check runtime prerequisites and write an external runtime receipt; does not install.',
       recover:'Recover an owned Codex or Claude installation transaction using --receipt.',
@@ -805,7 +807,7 @@ export async function installerMain(args,{npmRoot,userRoot=homedir(),adapter=cod
     },
     options:{
       '--help, -h':'Show this JSON usage without reading configuration or registering a host.',
-      '--host <host>':`Explicit host: ${INSTALL_HOSTS.join(', ')}. Names do not imply verified registration.`,
+      '--host <host>':`Current host: ${AGENT_INSTALL_HOSTS.join(', ')}. Omission requests one choice; installed binaries are not active-host identity. Explicit legacy codex-desktop remains plan-only.`,
       '--dry-run':'Prepare an install plan; requires --receipt-dir and writes that plan.',
       '--apply':'Apply a saved plan. Codex and Claude require --runtime-receipt; DSH requires explicit pins and external --receipt-dir.',
       '--plan <file>':'Saved installation plan used by --apply.',
@@ -822,12 +824,27 @@ export async function installerMain(args,{npmRoot,userRoot=homedir(),adapter=cod
       '--profile <name>':'DSH install only: explicitly selected existing profile; never initialized implicitly.',
       '--aggregate-selector <name@version>':'DSH install only: optional exact aggregate override matching the product release mapping; required for old or unbound candidates.',
       '--registry <https-url>':'DSH install only: optional credential-free HTTPS registry override matching the product mapping; required for old or unbound candidates.',
+      '--destination <directory>':'QwenWork/WorkBuddy direct install: exclusive external preparation directory, or the same owned directory with --previous-receipt.',
+      '--suite-version <version>':'QwenWork/WorkBuddy: exact native suite version, separate from the acquired npm version.',
+      '--node-executable <path>':'QwenWork/WorkBuddy: absolute Windows Node path used by the imported suite.',
+      '--qwenwork-runtime <file>':'QwenWork: verified native executable/worker/Node paths and byte pins. Agent obtains these through supported native inspection; no credentials.',
+      '--separate-mcp':'QwenWork: emit one external connector instead of bundling it when organization policy requires this.',
+      '--previous-receipt <file>':'Desktop: verify and reuse this owned preparation for a same-version repeat, or prepare a strictly newer native suite/npm version using its update boundary.',
+      '--npm-root-windows, --destination-windows':'Desktop: explicit Windows path mappings required when preparing from another platform; native Windows paths must match actual roots.',
     },
-    limitations:['plugin-directory is an optional session-only diagnostic, not installation. Persistent installation uses native host registration. Codex requires an admitted adapter; DSH requires pinned public CLI inputs; unimplemented hosts are plan-only.',
+    limitations:['plugin-directory is an optional session-only diagnostic, not installation. Codex requires an admitted adapter; DSH requires pinned public CLI inputs. Desktop preparation needs native import and activation. Exit 2 means host selection or inputs are required; exit 0 does not establish a usable native session.',
       'DSH failures retain partial state without rollback. Configuration parsing is not actual host runtime or release acceptance.',
       'Uninstall requires a successful owned receipt. Package installation is not Bundle/Panel/GRA/KAG acceptance.'],
   }
   assert.equal(positionals.length,1,'Exactly one installer command required')
+  if(agentDispatch&&positionals[0]==='install'&&!values['dry-run']&&!values.apply) {
+    const context={npmRoot,userRoot,adapter,dshAdapterFactory,claudeAdapterFactory,qoderInstaller,agentDispatch:false}
+    return agentInstallation(values,{npmRoot,admittedCodexAdapter:adapter!==codexAdapter,
+      invoke:nextArgs=>installerMain(nextArgs,context),
+      desktopPrepare:nextArgs=>desktopPreparationMain(nextArgs,{npmRoot}),
+      desktopReuse:nextArgs=>desktopPreparationReuseMain(nextArgs,{npmRoot})})
+  }
+  for(const key of DESKTOP_INSTALL_OPTIONS)assert.ok(!Object.hasOwn(values,key),`--${key} is only valid for direct desktop install`)
   if(positionals[0]==='plugin-directory'&&['claude-code','qoder'].includes(values.host)) {
     assert.deepEqual(Object.keys(values),['host'],'Native directory entry accepts only --host; transaction/runtime options must not be silently ignored')
     return nativePluginDirectory({npmRoot,host:values.host})

package/bin/npm-agent-installation.mjs

@@ -0,0 +1,141 @@
+/** Agent-facing orchestration of the existing native installers, not a registration authority. */
+import assert from 'node:assert/strict'
+import { randomUUID } from 'node:crypto'
+import { lstat, readFile } from 'node:fs/promises'
+import { join } from 'node:path'
+
+export const AGENT_INSTALL_HOSTS = ['dsh', 'codex', 'claude-code', 'qoder', 'qwenwork', 'workbuddy']
+export const DESKTOP_INSTALL_OPTIONS = ['destination', 'node-executable', 'suite-version', 'npm-root-windows',
+  'destination-windows', 'qwenwork-runtime', 'separate-mcp', 'previous-receipt']
+const nativeOptions = {
+  dsh: ['host', 'receipt-dir', 'dsh-config', 'profile', 'aggregate-selector', 'registry'],
+  codex: ['host', 'receipt-dir', 'codex-executable', 'user-root', 'disable-embedding'],
+  'claude-code': ['host', 'receipt-dir', 'claude-executable', 'user-root', 'disable-embedding'],
+  qoder: ['host', 'receipt-dir', 'qoder-executable', 'qoder-config-dir'],
+}
+
+function argv(command, values, keys) {
+  const args = [command]
+  for (const key of keys) if (Object.hasOwn(values, key)) {
+    args.push('--' + key)
+    if (typeof values[key] !== 'boolean') args.push(values[key])
+    else assert.equal(values[key], true, 'False CLI flags are not supported')
+  }
+  return args
+}
+function pending(host, status, missing, message) {
+  return { schemaVersion: 1, kind: 'agent-installation', status, host: host ?? null,
+    hostRegistered: false, usable: false, missing,
+    installation: { host: host ?? null, acquisition: 'unverified', registration: 'not-performed',
+      activation: 'not-performed', usability: 'unverified', nextActions: [{ action: 'supply-inputs', automatic: false, message }] } }
+}
+function activationActions(host, result) {
+  const verify = { action: 'verify-native-session', automatic: true,
+    message: 'In the intended native conversation, verify the actually loaded Yugoo Design version and tools; then open a project and verify Panel save/reopen and original-conversation receipt. Registration alone is not usability.' }
+  if (host === 'qwenwork') return [
+    { action: 'import-expert-suite', automatic: false, path: result.nativeImport?.archive,
+      message: 'Import this exact expert-suite ZIP through QwenWork. If bundled MCP is disabled by organization policy, use the emitted connector configuration and retain exactly one Yugoo Design connector.' },
+    { action: 'activate-native-suite', automatic: false,
+      message: 'Enable the imported suite; start a new native conversation if QwenWork requires it. Retain the acquired npm runtime and confirm the actually loaded suite version.' }, verify]
+  if (host === 'workbuddy') return [
+    { action: 'import-or-update-market', automatic: false, path: result.nativeImport?.market,
+      message: 'Import this stable marketplace through WorkBuddy, or refresh the same market and update its existing Yugoo Design plugin. Preparation has not registered or activated it.' },
+    { action: 'activate-native-plugin', automatic: false,
+      message: 'Enable the plugin and start a new native conversation if WorkBuddy requires it; confirm the actually loaded suite version.' }, verify]
+  return [{ action: 'activate-native-session', automatic: false,
+    message: host === 'dsh'
+      ? 'Use the selected existing DSH profile and the host-supported plugin activation/restart flow; verify runtime loading in a new native session.'
+      : host === 'codex'
+        ? 'Start a new Codex conversation normally in the intended workspace and invoke the installed yugoo Skill through the native Skill entry. Retain the registered npm runtime.'
+        : 'Start a new native host conversation normally in the intended workspace and invoke /yugoo-design:yugoo. Retain the registered npm runtime; no --plugin-dir is needed.' }, verify]
+}
+
+/** Project only verified facts from the owning native/preparation receipt. */
+export function installationResult(host, result, packageIdentity) {
+  const failed = result.status === 'failed-partial-state-retained'
+  const desktop = host === 'qwenwork' || host === 'workbuddy'
+  const registered = !desktop && !failed && (result.hostRegistered === true
+    || host === 'dsh' && result.status === 'registered-config-parsed' && result.readback?.bundleRegistered === true)
+  const identity = result.package ?? packageIdentity
+  return { ...result, host, usable: false,
+    installation: { host, package: identity ?? null,
+      acquisition: identity?.name && identity?.version && (host !== 'dsh' || result.readback?.packageInstalled === true) ? 'available' : 'unverified',
+      // This entry consumes an acquired installation; it never verifies a registry download.
+      registryAcquisitionVerified: false,
+      registration: failed ? 'failed-partial-state-retained' : registered ? 'verified' : 'not-performed',
+      activation: failed ? 'not-performed' : 'required', usability: 'unverified',
+      nextActions: failed ? [{ action: 'inspect-retained-state', automatic: false, path: result.receiptFile,
+        message: 'Inspect the owning receipt and retained DSH state before another operation. No automatic rollback or retry was attempted.' }]
+        : activationActions(host, result) } }
+}
+
+export async function agentInstallation(values, { npmRoot, invoke, desktopPrepare, desktopReuse,
+  admittedCodexAdapter = false, platform = process.platform } = {}) {
+  const host = values.host
+  // Installed executables, PATH, host profiles and process names cannot identify this conversation.
+  if (!host) return { ...pending(null, 'host-selection-required', ['host'],
+    'Select the host of this conversation. If trusted native context identifies it, the current Agent should supply --host; otherwise ask one host-selection question.'), hosts: AGENT_INSTALL_HOSTS }
+  if (host === 'codex-desktop') return pending(host, 'unsupported-host', [],
+    'Codex Desktop native registration is not implemented by this entry. Select the actual supported host; do not substitute a CLI or infer usability from a prepared plan.')
+  assert.ok(AGENT_INSTALL_HOSTS.includes(host), 'Explicit supported host required')
+  const desktop = host === 'qwenwork' || host === 'workbuddy'
+  const allowed = desktop ? ['host', ...DESKTOP_INSTALL_OPTIONS] : nativeOptions[host]
+  for (const key of Object.keys(values)) assert.ok(allowed.includes(key), `${host} install accepts only ${allowed.map(k => '--' + k).join(', ')}; unsupported option --${key}`)
+  const required = desktop ? ['destination', 'node-executable', 'suite-version'] : ['receipt-dir']
+  if (host === 'dsh') required.push('dsh-config', 'profile')
+  if (host === 'codex' && !admittedCodexAdapter) required.push('codex-executable')
+  if (host === 'claude-code') required.push('claude-executable')
+  if (host === 'qwenwork') required.push('qwenwork-runtime')
+  if (host === 'workbuddy') for (const key of ['qwenwork-runtime', 'separate-mcp'])
+    assert.ok(!Object.hasOwn(values, key), `WorkBuddy install does not accept --${key}`)
+  if (desktop && platform !== 'win32') required.push('npm-root-windows', 'destination-windows')
+  const missing = required.filter(key => typeof values[key] !== 'string' || !values[key])
+  if (missing.length) return pending(host, 'inputs-required', missing,
+    `The current Agent should obtain verified values for ${missing.map(key => '--' + key).join(', ')}. Ask only for information or host actions it cannot obtain through supported native inspection. No installation was attempted.`)
+
+  let plan
+  try {
+    if (desktop) {
+      const path = join(npmRoot, 'package.json'), info = await lstat(path)
+      assert.ok(info.isFile() && info.size <= 1024 * 1024, 'Expected bounded regular acquired package manifest')
+      const manifest = JSON.parse(await readFile(path, 'utf8'))
+      const args = argv('prepare-desktop', values, DESKTOP_INSTALL_OPTIONS).slice(1)
+      args.push('--target', host, '--package-name', manifest.name, '--package-version', manifest.version)
+      const reused = values['previous-receipt'] && await desktopReuse(args)
+      return installationResult(host, reused || await desktopPrepare(args))
+    }
+    if (host === 'claude-code' || host === 'qoder')
+      return installationResult(host, await invoke(argv('install', values, allowed)))
+    // DSH's exclusive plan files are never overwritten. Each direct operation gets
+    // its own receipt subdirectory; Codex keeps the stable directory needed by upgrades.
+    const nativeValues = host === 'dsh' ? { ...values, 'receipt-dir': join(values['receipt-dir'], randomUUID()) } : values
+    const dryArgs = argv('install', nativeValues, allowed)
+    dryArgs.push('--dry-run')
+    plan = await invoke(dryArgs)
+    assert.ok(plan.planFile, 'The owning installer did not retain an installation plan')
+    if (host === 'codex') {
+      assert.equal(plan.applySupported, true, 'Codex native installation is not admitted by the owning adapter')
+      const runtime = await invoke(argv('check-runtime', values, ['host', 'receipt-dir', 'disable-embedding']))
+      if (!['load-verified', 'disabled'].includes(runtime.status)) return {
+        ...pending(host, 'runtime-not-ready', [], 'Inspect the runtime receipt. No native apply was attempted; repair the reported prerequisites before re-running install.'),
+        runtimeReceipt: runtime, planFile: plan.planFile }
+      assert.ok(runtime.receiptFile, 'The owning runtime checker did not retain its receipt')
+      const applyArgs = argv('install', values, allowed.filter(key => !['receipt-dir', 'disable-embedding'].includes(key)))
+      applyArgs.push('--apply', '--plan', plan.planFile, '--runtime-receipt', runtime.receiptFile)
+      return installationResult(host, await invoke(applyArgs), plan.package)
+    }
+    const applyArgs = argv('install', nativeValues, allowed)
+    applyArgs.push('--apply', '--plan', plan.planFile)
+    return installationResult(host, await invoke(applyArgs), plan.package)
+  } catch (error) {
+    const receipt = error.receiptFile ?? error.receiptPath ?? null
+    error.installation = { host, acquisition: 'unverified', registration: 'failed-or-unconfirmed',
+      activation: 'not-performed', usability: 'unverified', receiptFile: receipt,
+      planFile: plan?.planFile ?? null,
+      nextActions: [{ action: receipt ? 'inspect-owned-receipt' : 'inspect-failure', automatic: false,
+        message: host === 'codex' || host === 'claude-code'
+          ? 'Inspect the failure and matching owned receipt; use the existing recover --host route only when that receipt requires recovery. Do not delete profiles, projects or unrelated plugins.'
+          : 'Inspect retained state before retrying. This host has no general automatic rollback in this entry; use its supported update/recovery flow.' }] }
+    throw error
+  }
+}

package/bin/npm-desktop-preparation.mjs

@@ -201,11 +201,61 @@ export async function prepareDesktopPackage({ npmRoot, packageName, packageVersi
   }
 }
 
-export async function desktopPreparationMain(args, { npmRoot } = {}) {
+function preparationArguments(args) {
   const { values, positionals } = parseArgs({ args, options: { help: { type: 'boolean', short: 'h' }, target: { type: 'string' }, 'package-name': { type: 'string' }, 'package-version': { type: 'string' },
     destination: { type: 'string' }, 'node-executable': { type: 'string' }, 'suite-version': { type: 'string' }, 'npm-root-windows': { type: 'string' }, 'destination-windows': { type: 'string' },
     'qwenwork-runtime': { type: 'string' }, 'separate-mcp': { type: 'boolean' }, 'previous-receipt': { type: 'string' } }, allowPositionals: true })
   assert.equal(positionals.length, 0, 'No positional preparation arguments allowed')
+  return values
+}
+
+/** Same-version reuse under the owning preparation lease; no artifact or receipt rewrite. */
+export async function desktopPreparationReuseMain(args, { npmRoot } = {}) {
+  const values = preparationArguments(args)
+  if (!values['previous-receipt']) return null
+  const output = resolve(values.destination), root = resolve(npmRoot)
+  await safe(root); await safe(output)
+  assert.equal(await realpath(root), root)
+  assert.ok(output !== root && !confined(root, output) && !confined(output, root), 'Preparation must be outside npm package')
+  assert.ok(outsideHostProfile(output), 'Do not prepare inside native host profiles')
+  const prior = await priorReceipt(resolve(values['previous-receipt'])), body = prior.body
+  const manifestBytes = await file(join(npmRoot, 'package.json')), manifest = JSON.parse(manifestBytes)
+  if (manifest.version !== body.package.version) return null // The existing preparer owns new-version updates.
+  assert.equal(manifest.name, values['package-name']); assert.equal(manifest.version, values['package-version'])
+  assert.equal(manifest['x-design-release-review']?.fixture, false, 'Fixture packages cannot reuse desktop imports')
+  assert.equal(body.package.npmRoot, resolve(npmRoot), 'Same-version reuse requires the same retained npm directory')
+  assert.equal(body.package.manifestSha256, sha(manifestBytes), 'Same-version acquired manifest changed')
+  assert.equal(body.target, values.target); assert.equal(body.destination, resolve(values.destination))
+  assert.equal(body.suiteVersion, values['suite-version'], 'Same npm version cannot change the native suite version')
+  const windowsNpm = windowsPath(values['npm-root-windows'] ?? (process.platform === 'win32' ? npmRoot : undefined))
+  const windowsOutput = windowsPath(values['destination-windows'] ?? (process.platform === 'win32' ? body.destination : undefined))
+  assert.ok(outsideHostProfile(windowsOutput), 'Do not prepare inside native host profiles')
+  if (process.platform === 'win32') { assert.equal(windowsNpm.toLowerCase(), win32.normalize(root).toLowerCase()); assert.equal(windowsOutput.toLowerCase(), win32.normalize(output).toLowerCase()) }
+  assert.equal(body.windows.npmRoot, windowsNpm); assert.equal(body.windows.destination, windowsOutput)
+  assert.equal(body.windows.nodeExecutable, windowsPath(values['node-executable']), 'Same-version Node path changed')
+  if (body.target === 'qwenwork') {
+    assert.equal(body.nativeImport.includeMcp, !values['separate-mcp'], 'Same-version connector policy changed')
+    const nativePins = JSON.parse(await file(resolve(values['qwenwork-runtime'])))
+    assert.deepEqual(nativePins, JSON.parse(await file(join(dirname(body.nativeImport.suite), 'runtime-pins.json'))), 'Same-version native pins changed')
+    if (process.platform === 'win32') for (const [path, expected] of [[nativePins.executable, nativePins.executableSha256], [nativePins.worker, nativePins.workerSha256]])
+      assert.equal(await streamHash(path), expected, 'QwenWork native bytes do not match provided pins')
+  }
+  const lock = join(output, '.preparation.lock'), owner = randomUUID()
+  // The inventory excludes this transient file, so bytes alone cannot admit a
+  // repeat while another preparation is active or interrupted. Reuse its exact
+  // exclusive boundary and recheck the snapshot under our own reservation.
+  await writeFile(lock, owner, { flag: 'wx', mode: 0o600 })
+  try {
+    assert.deepEqual(await priorReceipt(resolve(values['previous-receipt'])), prior, 'Preparation changed while acquiring its reuse lock')
+    return { ...body, receiptFile: resolve(values['previous-receipt']), receiptSha256: prior.sha256, idempotent: true }
+  } finally {
+    assert.equal((await file(lock)).toString(), owner, 'Preparation reuse lock ownership changed; retained for inspection')
+    await unlink(lock)
+  }
+}
+
+export async function desktopPreparationMain(args, { npmRoot } = {}) {
+  const values = preparationArguments(args)
   if (values.help) return { kind: 'desktop-preparation-help', status: 'not-applicable', usage: 'design-system prepare-desktop --target qwenwork|workbuddy --package-name EXACT_SCOPED_NAME --package-version EXACT_NPM_VERSION --suite-version NATIVE_RELEASE_VERSION --destination EXTERNAL_DIRECTORY --node-executable ABSOLUTE_WINDOWS_NODE',
     options: { '--qwenwork-runtime': 'Explicit JSON with existing QwenWork executable/worker/Node paths and exact executable/worker hashes.', '--separate-mcp': 'QwenWork only: omit the suite connector and emit one external connector JSON for organization policy.', '--previous-receipt': 'Verified successful preparation receipt for an owned new-version update; preserves the same WorkBuddy market.', '--npm-root-windows, --destination-windows': 'Explicit target path mapping required for cross-platform preparation; native Windows paths must match actual roots.' },
     limits: ['Preparation does not acquire from registry, register a host, grant native admission, verify loaded versions or alter a host profile.', 'Acquire the exact npm release first; retain its durable installation and old version until the native update is verified.'] }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yugoo-design/companion",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.2",
   "description": "Yugoo Design Companion beta: interactive Design Projects and Panels in supported native Agent Hosts.",
   "license": "Apache-2.0",
   "type": "module",

package/payload/overlays/claude-code/.claude-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "yugoo-design",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.2",
   "description": "Yugoo Design: interactive Design Panels with Claude Code native agents and background design reviews."
 }

package/payload/overlays/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "yugoo-design",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.2",
   "description": "Yugoo Design: local Design Project Panels for an explicitly bound Codex conversation (development preview).",
   "author": {
     "name": "yugoo-design contributors"

package/payload/overlays/qoder/.qoder-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "yugoo-design",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.2",
   "description": "Yugoo Design: interactive Design Panels with Qoder-native Producers, Workers and background reviews."
 }

package/release-manifest.json

@@ -3,20 +3,21 @@
   "fixture": false,
   "distribution": "beta",
   "publishReady": false,
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.2",
   "readmeSource": {
     "path": "packages/companion/README.md",
-    "sourceSha256": "840a0bec3965a8c66c984a56a2cb4023c1882fa7d19d8c87163ef102214be6b9",
-    "sectionSha256": "8e52fade20de7dc2f452fe63fa6634d0f8996ef99f3d9e775e011009c0d0a626"
+    "sourceSha256": "ff913a08a4c91a7136a2cfc528608ac6e1ab1b12bab9b11000266c0108f381cf",
+    "sectionSha256": "35243cc02309bc13cc7e5f9a23c52520f3071ecfadf1bad6bd1a30231c0f71a0"
   },
   "assets": {
     "LICENSE": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30",
     "NOTICE": "6119b21e1fa5d37ec3ab337ad43685970310aa5c97a0e90ecf6603d17091f371",
-    "README.md": "df9f588f656b0abad96c7eaa7e7db398f55caeca422a185633605453944c9605",
+    "README.md": "7a1db4c01cecbfb03294112c32ac00422f6ef6ec672aff13379d7613f635ff27",
     "THIRD_PARTY_NOTICES.md": "bfcab921c6c15ccc47f9b1a6cc5941675c95962de5ea5b0edc50fbfa2aef136a",
-    "bin/design-system.mjs": "a0bbc5a1226f7b21a7ed9169a31690e77426727c8fcdee596d23d54f51459c1a",
-    "bin/installer.mjs": "508e7bdde776ebadca3a008e9e84fb47fd5bc5fde0fc4cacccaea03269a300d0",
-    "bin/npm-desktop-preparation.mjs": "3c532e036d8f1046840ed279f74ca62341843064d9f9b61859260ecfc0fd2f3e",
+    "bin/design-system.mjs": "9bf4f4d733f71cf33a2fe239de9dcfcd887ebdd1e8026b5b29cfd89309ca2444",
+    "bin/installer.mjs": "d769c4e66c8029c9fd054ab5e0ce950ea788efb43d7d587862c0aae8b136582e",
+    "bin/npm-agent-installation.mjs": "419ec607ea1003baf560c768c6642c4342c057121faa61ccf61bec51439a498c",
+    "bin/npm-desktop-preparation.mjs": "d78bc2a529965011cc360d4bc731fc624114cd83bd634be71f34367d6fc424d0",
     "bin/npm-installer-claude.mjs": "c9336fed52319c924214b4e4c4f1ffc714db0e97bb587214cd7c67ebb6637925",
     "bin/npm-installer-codex.mjs": "ca18b3cc18d20aae66526797dedcf232322d027a7cf1251fd02943f1f2765d73",
     "bin/npm-installer-dsh-desktop.mjs": "93f9e7adf4457508e0013f25c4357ae3965ae205d268262d78a6fdd8aa2b9866",
@@ -417,7 +418,7 @@
     "licenses/third-party/whiteboard-fonts/licenses/JetBrainsMono-OFL.txt": "30f0c136e3c88e422d0791acd97238870f9054a9729bc34cf2ff0d4ed8cac4ad",
     "licenses/third-party/whiteboard-fonts/licenses/source-han-sans-LICENSE.txt": "fcac737e761ec63dbfbdce11030a1780161920d80315edba9c8beff1c2bac5a2",
     "licenses/third-party/whiteboard-fonts/manifest.json": "c164438115a40cdead905085e95298f28a4ffa2a3947512b9a98509f33c26972",
-    "package.json": "8d95243ebeda80d8e581d72e094a3f6547af4367781e909b5afd69b32f74059e",
+    "package.json": "4810e2a27f32848524c97af325fef90faacba09634671311304cf915d27d29d9",
     "payload/desktop-preparation/LICENSE": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30",
     "payload/desktop-preparation/NOTICE": "6b4eec391144fcbd96ec7b45a28764ab1932722a96325248377c3e28aac2c62d",
     "payload/desktop-preparation/THIRD_PARTY_NOTICES.md": "bfcab921c6c15ccc47f9b1a6cc5941675c95962de5ea5b0edc50fbfa2aef136a",
@@ -454,7 +455,7 @@
     "payload/desktop-preparation/src/workbuddy-relay-service.mjs": "44d60d6956250417507fb76c71c3030a01bc38e565e4572a761b46f255f8e669",
     "payload/desktop-preparation/src/workbuddy-ui-probes.mjs": "a91d4651248125769254755bdf66a44bbc9e5a793dad0a137c35acbb10a89a88",
     "payload/desktop-preparation/workbuddy-package.mjs": "56ff591047d83ec742f22b286a9574ab9e05d5850ebed6f002a6e0bebfcd89c9",
-    "payload/overlays/claude-code/.claude-plugin/plugin.json": "7f397e6ae09e3acdac9a50952efccb986b976fb8e8c1ba2c9d1a7404a08a04da",
+    "payload/overlays/claude-code/.claude-plugin/plugin.json": "b15a0cc6401481180bbadb1c04f050f53d7ceb45614a6fff83f95745ff8c6b1a",
     "payload/overlays/claude-code/.mcp.json": "1108847d27abd953a52cd7c3ea4cd416898d67dcfdb80a92255d889186b12b66",
     "payload/overlays/claude-code/hooks/hooks.json": "e8bea6fdf13dce4023a2112dd4a31fd1a77e0f4ca2d4c506882ea80ef86b6482",
     "payload/overlays/claude-code/scripts/claude-connection.mjs": "83a6a2de1b28d1b5dd230b1447abac6f2209a80d6681f08766a53e7b6f63200f",
@@ -468,7 +469,7 @@
     "payload/overlays/claude-code/skills/design-component/SKILL.md": "85a1f2a016174787226eaa9e9e6675e86057212d322a65014edd71f3e4861b34",
     "payload/overlays/claude-code/skills/yugoo/SKILL.md": "e1b2284a94c5d113ef0cd2e58fce4f3405a21905fef741296baeae3cd45adb33",
     "payload/overlays/claude-code/skills/yugoo/native-execution.md": "8d27e523ddaad770e261300f7b74db5cff322d2342a838f87b253361a51404d3",
-    "payload/overlays/codex/.codex-plugin/plugin.json": "9f3ebf93daee64ff0c66a968a7d2acf19213d68fc4012ced2c3a7ee44460fd2a",
+    "payload/overlays/codex/.codex-plugin/plugin.json": "d52986e0e9503926f4a5903b2604f87633a8105af24202c066b710ebefe2d254",
     "payload/overlays/codex/.mcp.json": "ee6450b4f9a5239ae9c173d07198d37041fad65f9f65ecf4ff88ccf8528a609a",
     "payload/overlays/codex/README.md": "82f392681e120723fb90be5a8d2eb36c10113811f9eb355fcfc24167614b2373",
     "payload/overlays/codex/scripts/design.mjs": "c116e3a9f60830923692a9f8785640d9a13a97320771bf9201de0e5089618a74",
@@ -477,7 +478,7 @@
     "payload/overlays/codex/skills/design-panel/native-execution.md": "8d27e523ddaad770e261300f7b74db5cff322d2342a838f87b253361a51404d3",
     "payload/overlays/codex/skills/yugoo/SKILL.md": "fdb035c4c9f43a2c1fbd1ceac6a2bd19e9cdec6cd5e068efa804b1c86bec513a",
     "payload/overlays/qoder/.mcp.json": "7f86b52fffd552312441b9bd99dd39a3b80b2893dc4a85519614d906bdc6884e",
-    "payload/overlays/qoder/.qoder-plugin/plugin.json": "a4e205b8c3fea0a77549abaa5050e72758f65874dd00dbf6ad84426fe5fd707e",
+    "payload/overlays/qoder/.qoder-plugin/plugin.json": "c423856f4dd4e4a1d58e1de72dd4deb9b722d5151b3fa7da95d6c8d522574187",
     "payload/overlays/qoder/commands/yugoo.md": "4e9d0e4a3da232b44a3d2c8495c7d3dd40bbb9ba2dff4b389ab8ca587522793d",
     "payload/overlays/qoder/hooks/hooks.json": "6452852583af61a7b4f0ed501a41d02a212a8487e5d920bcb0b2ee7e7e643d7d",
     "payload/overlays/qoder/scripts/design.mjs": "c116e3a9f60830923692a9f8785640d9a13a97320771bf9201de0e5089618a74",