better-dsh 0.2.5-e → 0.3.0

package/README.md

@@ -1,3 +1,5 @@
+> Part of [Super D](../README.md). This is the independently installable `better-dsh` package. Super Dash embeds the same local build and registers it as a separate native Plugin Manager row, with its own enable/disable switch; both versions advance together toward 0.3.0. Active source is this directory, with shared specifications and references under root `docs/`.
+
 # Better Dsh — Dashr
 
 DASHR is a persistent-kernel REPL for the DeepSeek Harness (dsh): a
@@ -45,6 +47,30 @@ dsh runtime package dependencies**: only `@deepseek-ai/cordis` (peer),
   dependency imports external (`dts: { resolve: false }`): bundled copies
   would create duplicate type identities in a consumer's program.
 
+## Native Web defaults
+
+The bundle owns native DSH Web policies as independently toggleable components.
+`dashr-web-trust` accepts authenticated serving Host/Origin values while retaining
+native cookie authentication. `dashr-webserver` inherits the native server and
+waits for welcome confirmation before listening; its default address is
+`0.0.0.0`, with the native port and CLI override behavior preserved.
+Automatic credential onboarding is disabled; users can still configure models.
+
+`dashr-welcome-notice` reads the current `WELCOME_NOTICE_VERSION` from the Models
+client belonging to the actual DSH installation and acknowledges it through the
+original General settings namespace before the first HTTP read. No version is
+pinned in the plugin. Ordinary version bumps adapt at startup; changed private
+symbols or build layouts fail explicitly. Restore native welcome behavior with:
+
+```yaml
+- id: dashr-welcome-notice
+  disabled: true
+```
+
+The sibling Super Dash pack builds this repository locally and embeds its actual
+tarball. Better Dash remains independently installable. `../dev-webmcp` is an
+unshipped development-only bundle owned by this repository.
+
 ## Install
 
 ```sh
@@ -204,9 +230,7 @@ the host runtime's business, not the REPL's).
 
 ## Install
 
-The canonical path is the repo-root one-click installer (`install.sh`): it
-installs the plugin from the npm registry and notes the restart. The
-equivalent manual steps, for reference:
+Install this package independently with the native plugin command. Use Super Dash instead when you also want the Foreign Agent Hub:
 
 ```sh
 # 1. plugin — the pnpm registry-metadata cache can lag a fresh npm publish

package/cordis.patch.yml

@@ -17,6 +17,10 @@
 # `python` is only a hint: the runtime OWNS the kernel environment. An
 # explicit interpreter (DASHR_KERNEL_PYTHON) is verified; the bare
 - insert:
+    # No-op standalone; keeps a containing pack's local companion delivery current.
+    - id: dashr-bundle-delivery
+      name: 'better-dsh/bundle-delivery'
+
     - id: dashr-repl
       name: 'better-dsh'
       config:
@@ -42,6 +46,8 @@
     # config — they survive every overlay layer; an explicit value still wins).
     - id: dashr-web-trust
       name: 'better-dsh/web-trust'
+      config:
+        trustAllHosts: true
 
     # Mobile responsiveness leg of the boot script (gestures payload +
     # zoomGuard section). All knobs default ON; `enabled: false` opts out.
@@ -66,6 +72,11 @@
     - id: dashr-web-password
       name: 'better-dsh/web-password'
 
+    # Automatically acknowledge the installed Host's current welcome version.
+    # Single-row opt-out: dashr-welcome-notice: disabled.
+    - id: dashr-welcome-notice
+      name: 'better-dsh/welcome-notice'
+
 # Native compaction at the host plane: the base bundle ships the engine, the
 # `/compact` command, and the tool-result pruner as host rows; dsh-web-app
 # disables them to move compaction behind per-session presets. DASHR is
@@ -93,3 +104,36 @@
   inject: [webRuntime]
   config:
     trustedHosts: !!js (process.env.DSH_TRUSTED_HOSTS ?? '').split(/\s+/).filter(Boolean).concat(ctx.webRuntime.trustedHosts)
+
+# Replacement uses the public patch mechanism: disable the native provider,
+# then insert a distinct row providing the same native webServer service.
+- id: webserver
+  name: '@deepseek-ai/dsh-host-webserver'
+  disabled: true
+- insert:
+    - id: dashr-webserver
+      name: 'better-dsh/webserver'
+      inject: [webStartup]
+      config:
+        host: !!js ctx.webStartup.host ?? '0.0.0.0'
+        port: !!js ctx.webStartup.port ?? 3080
+        compression: gzip
+        compressionLevel: 1
+        compressionThresholdBytes: 1024
+
+- id: ui-settings-models
+  name: '@deepseek-ai/dsh-client-ui-settings-models'
+  config:
+    credentialOnboarding: false
+
+# Native watcher/queue with scoped transaction context across listener replacement.
+# Distinct row preserves whole-bundle disablement in the native manager.
+- id: hmr
+  name: '@deepseek-ai/dsh-hmr'
+  disabled: true
+- insert:
+    - id: dashr-hmr
+      name: 'better-dsh/hmr'
+      disabled: !!js "!ctx.get('profileContext')"
+      config:
+        root: []

package/docs/50_test-reports/2026-10-06-authentication-only-web-admission-4999.md

@@ -0,0 +1,63 @@
+# 2026-10-06 authentication-only Web admission — 4999 实测
+
+## 结果与范围
+
+本地测试包 `better-dsh@0.2.5-e` 已通过 tarball 的 `dsh plugin add` 安装到
+`.test/home/compat/profiles/web`。运行实例为 `dsh-4999-test123`，原测试 home、
+会话和共享 credential seed 保留，未触碰生产 3080/3081 或 Caddy 配置。
+未发布 npm；user 于 2026-10-06 确认测试「looks good」并授权在本地 main 提交。
+
+测试开启 `dashr-web-trust.config.trustAllHosts: true`。该模式仅包装原生
+Connection 实例的 `requestRejection`，通过公开 `authorizeIndex` 接口委托
+cookie 校验，不复制认证实现、不访问 private 字段、不修改上游。传入真实
+Host/Cookie 与固定无 query 的 index 路径，API 准入不会执行 token 铸 cookie。
+
+浏览器初始化脚本在任意 hostname 设置 `ownsHost: true`，已有 transport 保留。
+默认仍为 `trustAllHosts: false`。关闭/卸载模式恢复原生地址检查，页面能力需刷新。
+
+## 网络与登录
+
+- 原生服务器监听 `127.0.0.1:4999`；现有 socat 中继监听 `192.168.31.130:4999`。
+- 实际运行 argv 无 `--trusted-host`，没有给测试进程传入 `DSH_TRUSTED_HOSTS`。
+- HTTPS 入口为 `https://test.pc.randomhash.app/`，沿用已有 Caddy。
+- 本 test profile 禁用 `dashr-web-password`，以验证原生 token URL 登录；生产未变。
+- launcher 允许 `TRUSTED_HOSTS=''` 显式省略 CLI 名单。原生/clean rig 默认仍由
+  CLI 放行 loopback、LAN 与测试域名。
+
+## 运行时验证
+
+每个入口先以本次 launch token 完成原生 303 cookie 交换，再读取 HTML 与 RPC。
+额外的 unlisted Host 通过 loopback 连接模拟，未修改 DNS、服务器名单或代理。
+
+| 入口 | 页面 | 模型列表/可配置 provider | 插件列表 | 设置描述 |
+|---|---|---|---|---|
+| loopback | 200 | 通过 | 通过 | 通过 |
+| LAN | 200 | 通过 | 通过 | 通过 |
+| unlisted | 200 | 通过 | 通过 | 通过 |
+| HTTPS | 200 | 通过 | 通过 | 通过 |
+
+- 各入口 HTML 均有 all-host `ownsHost` 初始化脚本。
+- 未列入名单的请求携带不匹配 Origin 与 cross-site Fetch-Metadata，认证后仍成功。
+- LAN 与 unlisted 请求分别验证：缺失、篡改、其他 authority 的 cookie 均为 401。
+- 真实 `/api/remote.mux` WebSocket upgrade：unlisted Host + 跨域 Origin，认证后 101，
+  未认证 401。
+- HTTPS `settings/mutate` 将测试字体 17 改为 18，描述接口读回 18 且 profile 文件
+  持久化；之后按 revision 恢复 17 并复验。未改模型凭据。
+
+## 静态与自动测试
+
+- LSP 核实 Connection capability 定义、web-trust 的引用；TypeScript AST 核实脚本
+  生成与插件 apply 结构。
+- TDD：新增准入测试先复现 403，页面全地址测试先复现缺失 ownsHost；实现后通过。
+- 定向测试 16/16；包含原生 Connection 的认证、native cookie lifetime 与卸载恢复。
+- 全量 66 个测试文件通过：709 passed、1 skipped。
+- host/client typecheck 通过，构建与 pack 通过，launcher `bash -n` 通过。
+- 构建保留既有 puppeteer 相关 `eval` / 可选 `yauzl` 警告；不在本次准入改动范围。
+
+## 验收与交接
+
+当前 Computer Use 没有可用浏览器，接口验证不等于 UI 操作验收。
+user 已确认测试效果可接受。4999 实例保持运行，测试 tarball 是 profile 的本地依赖来源，
+交接时保留但不入库。仅提交本次代码、测试、rig 指引与文档，不发布 npm。
+生产 profile 仅移除旧 `dashr-repl` trustedPageAuthorities 覆盖，Python 配置继承 bundle，
+不安装测试包、不重启生产。备份保存在 `/tmp/dashr-prod-cordis.patch.before-cleanup-20261006.yml`。

package/docs/50_test-reports/2026-10-07-better-dsh-welcome-self-contained-4999.md

@@ -0,0 +1,52 @@
+# 2026-10-07 Super Dash 自包含 Better Dash / 动态 welcome 验收
+
+本轮为本地 4999 消费者验收，不是 npm 发布或 dev3 放行。两仓物理独立，Better Dash 本地源码始终参与构建。
+
+## 交付物
+
+| 包 | 本地版本 | SHA256 |
+|---|---|---|
+| Super Dash | 0.1.12-e | `243951a2ed5bfbaa6139aa045bd4314ac96f91bf6420159b940c34b2da6ab52d` |
+| Better Dash | 0.2.5-h | `3ab52507f738e3c74fb1142cc41aae9544e1f78453e80d573baa686d0885af8d` |
+
+路径为Super Dash 仓 `.scratch/superd-pack/`；完整来源、绝对路径与时间见 `pair.json`。pack 从 `/home/u1/workspaces/dashr/better-dsh` 清理并构建 lib，统一普通 npm pack，再物理展开该 tarball 供 bundledDependencies 打包。不存在 registry Better Dash 回退。每次 pack 自动对独立与内嵌 Better Dash 的 **741 个文件逐字节核验**，缺失或陈旧内容不能写入成功记录。
+
+消费者 profile 直接依赖只有 Super Dash tarball 与开发附加 WebMCP；没有 Better Dash 直接依赖/bundle、没有 pnpm Better Dash override、没有 profile-root Better Dash。实际安装的 `super-dsh/node_modules/better-dsh` 与独立本地 tarball 逐文件一致。有序 patch 文件先读内嵌 Better Dash YAML，再读 Super Dash YAML；无组件清单复制。
+
+## 用户可见行为
+
+- WebTrust 与 WebServer/default bind、credential onboarding、welcome 均归 Better Dash。Super Dash 删除重复 WebTrust 源码、导出和行。dev WebMCP 移到兄弟仓 `dev-webmcp/`，不进入两包正式 tarball。
+- `dashr-welcome-notice` 从**实际运行宿主**的 WebApp → Models client 路径读当前版本；本次读到 `2026-09-28.1`，实际 settings/describe 的 General value 相同。没有在 profile patch 写死 welcome 值；组件用 Loader 的公共 internal/config/Entry.update 对原 namespace 做可逆投影。`disabled: true` 恢复原生确认行为。
+- 发现并修复真正的首次 HTTP 竞态：原生 Models 页面 settings mirror 的 unary HTTP 不受 WebSocket appReady 门约束。Better Dash 禁用原 webserver 行，插入 `dashr-webserver` 继承原生 Service，等待 welcome settle 后才执行原生 init/bind。延迟 General 激活的真实 Loader/HTTP fixture 先复现首读 null，修复后首个 200 快照含当前版本。禁用/重启组件恢复原值且不重建 General fiber；曾复现双挂载后已修复为只在 fiber 不存在时 init。
+- 普通版本 bump 自动适配下一次启动。私有常量重命名、布局变化或多匹配时明确报错；不承诺任意未来上游结构变化也无需维护。没有直接 Settings.update 等自身 root reconciliation、没有替换 Models UI、没有本地 localStorage 假确认。
+- 默认监听实际为 `0.0.0.0:4999`，由 Better Dash YAML 提供。测试 profile 只补共用 credentials 路径，端口走原生 CLI `--port 4999`。保留压缩与显式 loopback CLI override。
+- 真页面发现异步模块挂载能颠倒 FIFO 排序。Better Dash 的 ownership 脚本现 prepend 公共 injection table；实际认证后 HTML 中 trust 先于 fusion，credentialOnboarding 为 false。公开 client graph 的 67 个 id 无重复，Better Dash 与 Super Dash client 各一份。
+
+## 实际运行验收
+
+- `bash super-dsh/test/start-4999.sh` 完整双源码构建、tarball 安装、原生 CLI 启动 exit 0；`superd-4999-test` active。使用 Node26.10.0、npm12.2.0、pnpm12.9.1。安装期脚本保持禁用，没有 approve-builds。
+- 新客户端密码页 POST 登录303、cookie签发；认证后原生 app 与 API 正常。WAN 与 LAN 匿名首页为密码表单，受保护 API 均401。共用 seed 与测试用户会话保留；生产3080/3081和上游源码未修改。
+- roster = native、agy、claude、codex、hermes、omp、pi，**7个均 ready:true、failed:false**。本轮没有重跑六个未改动 foreign adapter 的真实模型会话，不把 roster 代称其 prompt 验收。
+- 最终产物新建 standard native 会话 `session-a601281b-2ce2-42bc-86c4-7e3753609b57`：DeepSeek真实模型看到并实际调用 Better Dash `eval`，v4日志 tool/call seq17、tool/result seq18 得到 `SELF-CONTAINED-EVAL-42: 42`，turn/end completed。没有用注入探针冒充模型工具调用。
+- 服务重启及最终新产物重启后，既有会话 `session-3f8564c9-e846-4506-ac54-95bb0599dd2e` 实际续接，读取上一轮工具输出并正确回复 `LOCAL-BETTER-FOREVER`，第三轮 turn/end completed；验证了持久会话 resume。
+- CUA inventory 为 apps[]/browsers[]，无法完成视觉/交互浏览器验收；首个 HTTP fixture、真实 settings 与 client graph 是已验证范围，用户视觉复核仍需访问下面 URL。dev3 未实施，本报告不作其通过声明。
+
+## 检查
+
+- Better Dash welcome/WebTrust/connection：19 tests通过；host/client typecheck通过。
+- Super Dash fusion-transport/fusion-flag/world-mount-patches：38 tests通过。
+- Super Dash composition/login/pack-contract：7 tests通过。
+- 实际 npm pack fixture与内嵌缺失/陈旧拒绝：2 tests通过。
+- 迁移 dev WebMCP build与script测试：2 tests通过。
+- 独立审查无 Important/Critical 遗留；修正了异步脚本顺序与文档旧结论。git diff --check、launcher shell syntax通过。
+- LSP：检查上游配置更新关系、定义/引用；最后针对 Better Dash trust builder 返回真实定义及引用。TypeScript AST确认唯一注入push调用后改为prepend；无假类型/上游修改。
+
+证据保留在 `.scratch/self-contained-install-proof.json`、`self-contained-live-proof.json`、`self-contained-session-proof.json`、`self-contained-roster-proof.json`、`self-contained-client-graph-proof.json` 与 `self-contained-launch-delivery.log`。不记录 cookie、密码签名密钥或 provider keys。
+
+## 留运行线
+
+- WAN: https://test.pc.randomhash.app/
+- LAN: http://192.168.31.130:4999/
+- local: http://127.0.0.1:4999/
+
+未 npm publish，未 commit/tag/push；4999 保持运行，供 user 实际页面复核。

package/docs/specs/welcome-self-contained/spec.md

@@ -0,0 +1,13 @@
+# Super Dash 自包含 Better Dash 与 DSH 默认策略
+
+2026-10-07 user 裁决：两仓物理独立；Super Dash 每次打包都构建兄弟仓当前 Better Dash 源码，内嵌本地实际产物，不从 registry 取 Better Dash；WebTrust、dev WebMCP、webserver 默认监听及 onboarding/welcome 策略归 Better Dash。
+
+- Better Dash 独立 build/pack；Super Dash 用 npm bundledDependencies 内嵌该本地 tarball 展开的物理包。依赖版本 exact-pin 与源包一致。
+- Super Dash bundle 的有序 patch 文件先读取内嵌 Better Dash YAML，再读取自己的 YAML；消费者 profile 只声明 Super Dash，不单独声明 Better Dash。
+- Better Dash 的 WebTrust 默认组合启用 authentication-only，保留 native cookie 校验；Super Dash 删除重复实现及相关覆盖。
+- Better Dash 禁用原生 webserver 行、以独立 dashr-webserver 行继承原生 Service，并在监听前等待 welcome entry；默认 host 0.0.0.0，保留原生 port/压缩/CLI 配置机制；测试 launcher 默认仅覆盖 4999 端口，不再提供消费包未有的默认 host。
+- Better Dash 关闭 credentialOnboarding，人工模型配置保持可用。
+- `dashr-welcome-notice` 是可单行 disabled 的 Host entry：从实际安装锚的 Models 客户端读取当前 WELCOME_NOTICE_VERSION，经官方 internal/config 与 Entry.update 将确认同步投到原 ui-settings-general，不替换 Models UI，不写死版本，不用客户端 localStorage 假确认。
+- 静态私有常量没有公开 API；普通版本 bump 自动生效，符号/产物结构变化必须显式报错，不能静默保留旧版本。
+- dev WebMCP 移归 Better Dash 仓的开发测试目录，不进入正式插件 tarball；联合 launcher 仅将其作为开发附加 bundle。
+- 真实 tarball 安装、登录、native eval/create/prompt/resume、roster、首次 settings 快照、热禁用恢复为本轮验收；浏览器连接与 dev3 按可用环境如实记录。4999 保持运行。无 npm publish、commit/tag/push、上游或生产修改。

package/lib/LaunchOptions-B874eBu2.js

@@ -0,0 +1,4 @@
+import "./main-CupOhMp5.js";
+import { t as convertPuppeteerChannelToBrowsersChannel } from "./LaunchOptions-kGXcZOe0.js";
+
+export { convertPuppeteerChannelToBrowsersChannel };

package/lib/{LaunchOptions-DXdeJis3.js → LaunchOptions-kGXcZOe0.js}

@@ -1,4 +1,4 @@
-import { b as ChromeReleaseChannel } from "./main-CKFNYpqT.js";
+import { b as ChromeReleaseChannel } from "./main-CupOhMp5.js";
 
 //#region node_modules/puppeteer-core/lib/puppeteer/node/LaunchOptions.js
 /**

package/lib/{bidi-CwtLGgcA.js → bidi-BalpKaJc.js}

@@ -1,6 +1,6 @@
 import { n as __require } from "./chunk-DQxbwPpZ.js";
 import { A as stringToTypedArray, G as first, H as delayWhen, K as firstValueFrom, L as combineLatest, M as assert, Q as map, S as timeout, St as debug, Tt as environment, V as defer, W as filter, at as race, b as isString, bt as TouchError, c as evaluationString, d as fromEmitterEvent, g as isDate, gt as ProtocolError, h as getSourceUrlComment, ht as ConnectionClosedError, i as SOURCE_URL_REGEX, k as stringToBase64, lt as switchMap, m as getSourcePuppeteerURLIfAvailable, o as debugCatchError, ot as raceWith, q as from, r as PuppeteerURL, rt as of, s as debugError, u as fromAbortSignal, v as isPlainObject, vt as TargetCloseError, x as parsePDFOptions, xt as UnsupportedOperation, y as isRegExp, yt as TimeoutError } from "./util-BHL_dfV_.js";
-import { $n as Deferred, $t as scriptInjector, Bt as throwIfDetached, Ct as WebWorkerEvent, Dn as DeviceRequestPrompt, Dt as normalizeHeaderValue, Fn as Browser, Hn as DisposableStack, Ht as bindIsolatedHandle, In as WEB_PERMISSION_TO_PROTOCOL_PERMISSION, It as Dialog, Jn as CallbackRegistry, Kn as disposeSymbol, Ln as CDPSession, Lt as Accessibility, Mn as invokeAtMostOnceForArguments, Mt as InterceptResolutionAction, Nn as throwIfDisposed, Nt as STATUS_TEXTS, On as BrowserContext, Ot as SecurityDetails, Pt as handleError, Rt as Frame, St as WebWorker, Ut as JSHandle, Vt as ElementHandle, Zn as isErrorLike, _t as Mouse, an as stringifyFunction, cn as Tracing, dt as ConsoleMessage, en as ARIAQueryHandler, fn as Coverage, gt as Keyboard, ht as TargetType, in as interpolateFunction, jn as inertIfDisposed, jt as HTTPRequest, kn as bubble, kt as HTTPResponse, mn as Page, mt as Target, nn as LazyArg, on as AsyncIterableUtil, sn as FileChooser, un as EmulationManager, vt as MouseButton, wt as Realm, yt as Touchscreen, zn as EventEmitter } from "./index-browser-Bp3vxHC3.js";
+import { $n as Deferred, $t as scriptInjector, Bt as throwIfDetached, Ct as WebWorkerEvent, Dn as DeviceRequestPrompt, Dt as normalizeHeaderValue, Fn as Browser, Hn as DisposableStack, Ht as bindIsolatedHandle, In as WEB_PERMISSION_TO_PROTOCOL_PERMISSION, It as Dialog, Jn as CallbackRegistry, Kn as disposeSymbol, Ln as CDPSession, Lt as Accessibility, Mn as invokeAtMostOnceForArguments, Mt as InterceptResolutionAction, Nn as throwIfDisposed, Nt as STATUS_TEXTS, On as BrowserContext, Ot as SecurityDetails, Pt as handleError, Rt as Frame, St as WebWorker, Ut as JSHandle, Vt as ElementHandle, Zn as isErrorLike, _t as Mouse, an as stringifyFunction, cn as Tracing, dt as ConsoleMessage, en as ARIAQueryHandler, fn as Coverage, gt as Keyboard, ht as TargetType, in as interpolateFunction, jn as inertIfDisposed, jt as HTTPRequest, kn as bubble, kt as HTTPResponse, mn as Page, mt as Target, nn as LazyArg, on as AsyncIterableUtil, sn as FileChooser, un as EmulationManager, vt as MouseButton, wt as Realm, yt as Touchscreen, zn as EventEmitter } from "./index-browser-CysrjMyM.js";
 import "./BrowserWebSocketTransport-wm99h94r.js";
 
 //#region node_modules/mitt/dist/mitt.mjs

package/lib/bundle-delivery.d.ts

@@ -0,0 +1,20 @@
+import { Context } from "@deepseek-ai/cordis";
+import { ProfileContext } from "@deepseek-ai/dsh-app-boot";
+
+//#region src/bundle-delivery.d.ts
+declare const name = "dashr-bundle-delivery";
+declare const inject: string[];
+interface DeliveryResult {
+  installed: string[];
+  restartRequired: boolean;
+}
+/** First registration enables a companion; native reconciliation preserves retained disablement. */
+declare function reconcileBundledDelivery(profile: ProfileContext, signal?: AbortSignal): Promise<DeliveryResult>;
+declare function apply(ctx: Context): void;
+declare const _default: {
+  name: string;
+  inject: string[];
+  apply: typeof apply;
+};
+//#endregion
+export { apply, _default as default, inject, name, reconcileBundledDelivery };

package/lib/bundle-delivery.js

@@ -0,0 +1,209 @@
+import { createHash, randomUUID } from "node:crypto";
+import { spawn } from "node:child_process";
+import { mkdir, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { withFileLock, writeFileAtomic } from "@deepseek-ai/dsh-atomic-write";
+
+//#region src/bundle-delivery.ts
+const name = "dashr-bundle-delivery";
+const inject = ["profileContext", "appReady"];
+const hash = (bytes) => createHash("sha256").update(bytes).digest("hex");
+const json = async (path$1) => JSON.parse(await readFile(path$1, "utf8"));
+async function optionalJson(path$1) {
+	try {
+		return await json(path$1);
+	} catch (error) {
+		if (error.code === "ENOENT") return void 0;
+		throw error;
+	}
+}
+async function contained(root, path$1) {
+	if (isAbsolute(path$1)) throw new Error("Pack delivery path must be relative");
+	const base = await realpath(root), file = await realpath(resolve(base, path$1));
+	const rel = relative(base, file);
+	if (rel === ".." || rel.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute(rel)) throw new Error("Pack delivery path escapes its owner");
+	return file;
+}
+/** A child process avoids inheriting a running HMR transaction's AsyncLocalStorage. */
+async function installNative(profile, archive, expected, signal) {
+	signal?.throwIfAborted();
+	const childScript = fileURLToPath(new URL("../scripts/register-bundle.mjs", import.meta.url));
+	return new Promise((done, fail) => {
+		const child = spawn(process.execPath, [childScript], {
+			stdio: [
+				"pipe",
+				"pipe",
+				"pipe"
+			],
+			cwd: profile.dir
+		});
+		let output = "", diagnostic = "";
+		const abort = () => {
+			child.kill("SIGTERM");
+		};
+		const timeout = setTimeout(abort, 36e4);
+		signal?.addEventListener("abort", abort, { once: true });
+		child.stdout.setEncoding("utf8").on("data", (chunk) => {
+			output = (output + chunk).slice(-32768);
+		});
+		child.stderr.setEncoding("utf8").on("data", (chunk) => {
+			diagnostic = (diagnostic + chunk).slice(-4096);
+		});
+		child.on("error", fail);
+		child.on("close", (code) => {
+			clearTimeout(timeout);
+			signal?.removeEventListener("abort", abort);
+			if (signal?.aborted) {
+				fail(signal.reason);
+				return;
+			}
+			if (code !== 0) {
+				fail(/* @__PURE__ */ new Error(`Native companion registration failed (${code}): ${diagnostic.trim() || output.trim()}`));
+				return;
+			}
+			try {
+				const result = JSON.parse(output);
+				if (result.exitCode !== 0) fail(/* @__PURE__ */ new Error(`Native companion registration failed (${result.exitCode}); diagnostics: ${result.logPath ?? "unavailable"}`));
+				else if (![
+					"installed",
+					"owner-changed",
+					"companion-changed",
+					"companion-removed"
+				].includes(result.disposition)) fail(/* @__PURE__ */ new Error("Native companion registration returned an invalid disposition"));
+				else done(result.disposition);
+			} catch (error) {
+				fail(error);
+			}
+		});
+		child.stdin.on("error", () => {});
+		child.stdin.end(JSON.stringify({
+			profile,
+			archive,
+			expected
+		}));
+	});
+}
+/** First registration enables a companion; native reconciliation preserves retained disablement. */
+async function reconcileBundledDelivery(profile, signal) {
+	const directory = join(profile.home, "bundle-artifacts");
+	await mkdir(directory, {
+		recursive: true,
+		mode: 448
+	});
+	const key = hash(profile.dir);
+	return withFileLock(join(directory, key + ".delivery"), async () => {
+		signal?.throwIfAborted();
+		const receiptPath = join(directory, key + ".json");
+		const receipts = await optionalJson(receiptPath) ?? {};
+		const manifest = await json(join(profile.dir, "package.json"));
+		const result = {
+			installed: [],
+			restartRequired: false
+		};
+		for (const owner of Object.keys(manifest.dependencies ?? {})) {
+			const ownerDir = join(profile.dir, "node_modules", owner);
+			const ownerManifest = await optionalJson(join(ownerDir, "package.json"));
+			if (ownerManifest?.superd?.delivery === void 0) continue;
+			const descriptorPath = await contained(ownerDir, ownerManifest.superd.delivery);
+			const descriptor = await json(descriptorPath);
+			if (!Array.isArray(descriptor.companions)) throw new Error("Invalid pack delivery descriptor");
+			for (const item of descriptor.companions) {
+				if (item.name !== "better-dsh" || item.version !== ownerManifest.dependencies?.[item.name] || !/^[a-f0-9]{64}$/.test(item.sha256)) throw new Error("Invalid companion identity/version/digest");
+				const bytes = await readFile(await contained(dirname(descriptorPath), item.tarball));
+				if (hash(bytes) !== item.sha256) throw new Error(`Pack companion SHA256 mismatch: ${item.name}`);
+				const archive = join(directory, `${item.name}-${item.sha256}.tgz`);
+				const cached = await optionalJson(join(profile.dir, "node_modules", item.name, "package.json"));
+				const current = await json(join(profile.dir, "package.json"));
+				const ownerSpec = current.dependencies?.[owner];
+				if (ownerSpec === void 0) continue;
+				const priorSpec = current.dependencies?.[item.name];
+				const receiptKey = `${owner}:${item.name}`;
+				if (priorSpec === void 0 && receipts[receiptKey] === item.sha256) continue;
+				if (priorSpec === "file:" + archive && cached?.name === item.name && cached.version === item.version) {
+					receipts[receiptKey] = item.sha256;
+					await writeFileAtomic(receiptPath, JSON.stringify(receipts) + "\n", { mode: 384 });
+					continue;
+				}
+				try {
+					if (hash(await readFile(archive)) !== item.sha256) throw new Error(`Cached companion SHA256 mismatch: ${item.name}`);
+				} catch (error) {
+					if (error.code !== "ENOENT") throw error;
+					const temporary = archive + "." + randomUUID() + ".tmp";
+					try {
+						await writeFile(temporary, bytes, {
+							flag: "wx",
+							mode: 384
+						});
+						await rename(temporary, archive);
+					} finally {
+						await rm(temporary, { force: true });
+					}
+				}
+				signal?.throwIfAborted();
+				const disposition = await installNative(profile, archive, {
+					owner,
+					ownerSpec,
+					companion: item,
+					...priorSpec === void 0 ? {} : { priorSpec }
+				}, signal);
+				if (disposition === "owner-changed" || disposition === "companion-changed") continue;
+				receipts[receiptKey] = item.sha256;
+				await writeFileAtomic(receiptPath, JSON.stringify(receipts) + "\n", { mode: 384 });
+				if (disposition === "companion-removed") continue;
+				result.installed.push(`${item.name}@${item.version}`);
+				result.restartRequired ||= priorSpec !== void 0;
+			}
+		}
+		return result;
+	}, { waitMs: 12e4 });
+}
+function apply(ctx) {
+	const signal = new AbortController();
+	let started = false, running = false, again = false;
+	const reconcile = async () => {
+		if (!started || signal.signal.aborted) return;
+		if (running) {
+			again = true;
+			return;
+		}
+		running = true;
+		try {
+			const result = await reconcileBundledDelivery(ctx.profileContext, signal.signal);
+			if (result.installed.length) {
+				ctx.logger.info(`Registered ${result.installed.join(", ")} from its containing local pack${result.restartRequired ? "; restart DSH to use the updated code" : ""}`);
+				ctx.emit("plugin-manager/changed", { reason: "install" });
+			}
+		} catch (error) {
+			if (!signal.signal.aborted) ctx.logger.error("Local pack companion registration failed; retry by re-enabling the bundle", error);
+		} finally {
+			running = false;
+			if (again && !signal.signal.aborted) {
+				again = false;
+				reconcile();
+			}
+		}
+	};
+	ctx.effect(() => {
+		const offReady = ctx.appReady.onReady(() => {
+			started = true;
+			reconcile();
+		});
+		const offChange = ctx.on("plugin-manager/changed", () => {
+			reconcile();
+		});
+		return () => {
+			offReady();
+			offChange();
+			signal.abort();
+		};
+	}, "bundle-delivery: native registration");
+}
+var bundle_delivery_default = {
+	name,
+	inject,
+	apply
+};
+
+//#endregion
+export { apply, bundle_delivery_default as default, inject, name, reconcileBundledDelivery };

package/lib/client/index.js

@@ -64,7 +64,7 @@ const zh = {
 };
 
 //#endregion
-//#region \0dsh-css:/home/u1/workspaces/dashr/better-dsh/src/failover/client/FailoverRow.module.css.mjs
+//#region \0dsh-css:/home/u1/workspaces/superd/better-dsh/src/failover/client/FailoverRow.module.css.mjs
 const css$1 = "\n._440e1d7b_row {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  padding: 12px 0;\n}\n\n._a4f2ceec_rowText {\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n}\n\n._9865b509_title {\n  font-weight: 600;\n  font-size: 14px;\n}\n\n\n._3cfec826_slots {\n  display: flex;\n  flex-direction: column;\n  align-items: flex-end;\n  gap: 6px;\n}\n\n._11c2662d_select {\n  width: 280px;\n  max-width: 100%;\n  min-width: 0;\n}\n\n._b7c358f9_alert {\n  color: var(--dsw-alias-danger, #c0392b);\n  font-size: 12px;\n}\n";
 const tagId$1 = "better-dsh/FailoverRow.module.css";
 if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId$1) + "]") === null) {
@@ -463,7 +463,7 @@ const zh$1 = {
 };
 
 //#endregion
-//#region \0dsh-css:/home/u1/workspaces/dashr/better-dsh/src/compaction/client/CompactionRow.module.css.mjs
+//#region \0dsh-css:/home/u1/workspaces/superd/better-dsh/src/compaction/client/CompactionRow.module.css.mjs
 const css = "\n\n\n._13e3747c_thresholdRow {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  padding: 16px 0;\n  border-bottom: 0.5px solid var(--dsw-alias-border-l2);\n}\n\n._8ad3ff3f_thresholdText {\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n  padding-right: 48px;\n}\n\n._9ffb627e_thresholdTitle {\n  font-size: 14px;\n  font-weight: 400;\n  line-height: 22px;\n  color: var(--dsw-alias-label-primary);\n}\n\n._01bea389_thresholdDesc {\n  font-size: 12px;\n  font-weight: 400;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n._7f9578de_thresholdError {\n  font-size: 12px;\n  font-weight: 400;\n  line-height: 18px;\n  color: var(--dsw-alias-danger, #c0392b);\n}\n\n\n._cddd78cd_thresholdControl {\n  display: inline-flex;\n  align-items: center;\n  gap: 8px;\n}\n\n._6058fea9_thresholdStepper {\n  position: relative; \n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  min-width: 72px;\n  height: 36px;\n  border-radius: 18px;\n  background: var(--dsw-alias-bg-module-platform);\n}\n\n._39d30469_thresholdValue {\n  min-width: 18px;\n  text-align: center;\n  font-size: 14px;\n  line-height: 22px;\n  font-variant-numeric: tabular-nums;\n  color: var(--dsw-alias-label-primary);\n}\n\n._68bd35c6_thresholdUnit {\n  font-size: 14px;\n  line-height: 22px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n\n._904da366_thresholdArrows {\n  position: absolute;\n  right: 8px;\n  display: flex;\n  flex-direction: column;\n  gap: 2px;\n  opacity: 0;\n}\n\n._6058fea9_thresholdStepper:hover ._904da366_thresholdArrows,\n._6058fea9_thresholdStepper:focus-within ._904da366_thresholdArrows {\n  opacity: 1;\n}\n\n\n._ae9106b1_thresholdArrow {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 17px;\n  height: 12px;\n  padding: 0;\n  border: none;\n  border-radius: 3px;\n  background: color-mix(in srgb, var(--dsw-alias-bg-layer-1) 75%, transparent);\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n}\n\n._ae9106b1_thresholdArrow:hover:not(:disabled) {\n  background: var(--dsw-alias-bg-layer-1);\n}\n\n._ae9106b1_thresholdArrow:disabled {\n  color: var(--dsw-alias-label-caption);\n  cursor: default;\n}\n";
 const tagId = "better-dsh/CompactionRow.module.css";
 if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {

package/lib/failover/index.js

@@ -1,6 +1,6 @@
 import { t as Schema } from "../lib-C8_jXvwA.js";
-import { Context } from "@deepseek-ai/cordis";
 import { randomUUID } from "node:crypto";
+import { Context } from "@deepseek-ai/cordis";
 import { RetryId } from "@deepseek-ai/dsh-llm-retry";
 
 //#region src/failover/config.ts

package/lib/fs-aware/sandbox-plugin.js

@@ -1,10 +1,10 @@
-import { f as UrlSchemesError, t as buildFsLayerResolver } from "../wrap-kTohEeis.js";
-import { Context } from "@deepseek-ai/cordis";
-import { dirname, sep } from "node:path";
+import { f as UrlSchemesError, t as buildFsLayerResolver } from "../wrap-T4I0nfPM.js";
 import { stat } from "node:fs/promises";
+import { dirname, sep } from "node:path";
+import { Context } from "@deepseek-ai/cordis";
+import { LocalFileSystem } from "@deepseek-ai/dsh-fs-local";
 import { FsError } from "@deepseek-ai/dsh-fs";
 import { writableRoots } from "@deepseek-ai/dsh-sandbox";
-import { LocalFileSystem } from "@deepseek-ai/dsh-fs-local";
 
 //#region ../upstream/deepseek-harness/packages/fs/fs-sandbox/lib/index.js
 /**

package/lib/hmr.d.ts

@@ -0,0 +1,32 @@
+import Hmr, { HmrConfig } from "@deepseek-ai/dsh-hmr";
+import { Context } from "@deepseek-ai/cordis";
+
+//#region src/hmr.d.ts
+
+/**
+ * Native runExclusive keeps a boolean in ALS. HTTP servers created while
+ * replacing webServer inherit that boolean after the transaction finishes,
+ * so subsequent native Plugin Manager requests are refused as nested.
+ *
+ * The public runExclusive/watchConfig APIs expose no selective context reset.
+ * AsyncLocalStorage.snapshot() also resets AgentRegistry initiator attribution
+ * and its teardown lineage, so it cannot safely repair this host transaction.
+ * This compatibility bridge reads the native TS-private `executing` storage
+ * after checking its runtime shape. It never replaces that storage or changes
+ * upstream files: only exit() clears its inherited value while the unchanged
+ * native method establishes the next transaction. Native queue, closing,
+ * exact watchers, module reload and disposal retain their original semantics.
+ *
+ * The mutable token rejects nesting only while its operation is still active;
+ * resources created by that operation can initiate later transactions.
+ * A native implementation change fails initialization explicitly instead of
+ * silently dropping queue or lifecycle guarantees.
+ */
+declare class BetterHmr extends Hmr {
+  private readonly nativeTransactions;
+  private readonly liveTransactions;
+  constructor(ctx: Context, config: HmrConfig);
+  runExclusive<T>(operation: () => Promise<T>): Promise<T>;
+}
+//#endregion
+export { BetterHmr as default };

package/lib/hmr.js

@@ -0,0 +1,49 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import Hmr from "@deepseek-ai/dsh-hmr";
+
+//#region src/hmr.ts
+/**
+* Native runExclusive keeps a boolean in ALS. HTTP servers created while
+* replacing webServer inherit that boolean after the transaction finishes,
+* so subsequent native Plugin Manager requests are refused as nested.
+*
+* The public runExclusive/watchConfig APIs expose no selective context reset.
+* AsyncLocalStorage.snapshot() also resets AgentRegistry initiator attribution
+* and its teardown lineage, so it cannot safely repair this host transaction.
+* This compatibility bridge reads the native TS-private `executing` storage
+* after checking its runtime shape. It never replaces that storage or changes
+* upstream files: only exit() clears its inherited value while the unchanged
+* native method establishes the next transaction. Native queue, closing,
+* exact watchers, module reload and disposal retain their original semantics.
+*
+* The mutable token rejects nesting only while its operation is still active;
+* resources created by that operation can initiate later transactions.
+* A native implementation change fails initialization explicitly instead of
+* silently dropping queue or lifecycle guarantees.
+*/
+var BetterHmr = class extends Hmr {
+	nativeTransactions;
+	liveTransactions = new AsyncLocalStorage();
+	constructor(ctx, config) {
+		super(ctx, config);
+		const storage = this.executing;
+		if (!(storage instanceof AsyncLocalStorage) || typeof storage.getStore !== "function" || typeof storage.exit !== "function" || typeof storage.run !== "function") throw new Error("Better Dash HMR cannot reset this native HMR transaction context: expected executing AsyncLocalStorage");
+		this.nativeTransactions = storage;
+	}
+	runExclusive(operation) {
+		if (this.liveTransactions.getStore()?.active) return Promise.reject(/* @__PURE__ */ new Error("HMR transactions cannot be nested"));
+		return this.nativeTransactions.exit(() => super.runExclusive(() => {
+			const token = { active: true };
+			return this.liveTransactions.run(token, async () => {
+				try {
+					return await operation();
+				} finally {
+					token.active = false;
+				}
+			});
+		}));
+	}
+};
+
+//#endregion
+export { BetterHmr as default };