better-dsh 0.3.1-b → 0.3.1-e

package/cordis.patch.yml

@@ -90,17 +90,22 @@
 # dsh-web-app bundle declares (same id), restating its full shape per the
 # patch-layer contract, with `trustedHosts` merging the DSH_TRUSTED_HOSTS
 # environment (whitespace-separated, operator-declared serving authorities)
-# ahead of the upstream webRuntime-derived ones (LAN literals from an
-# all-interface bind plus --trusted-host extras). Unset/empty env ⇒ identical
-# behavior to the unpatched row. Malformed entries fail plugin load loudly
-# (upstream assertTrustedAuthority). The browser-side twin (page-authority
-# loopback verdict) is the plugin's webserver/index-inject boot script —
-# see src/web-trust.ts.
+# ahead of the upstream invocation authorities. Since DSH 0.1.7 the parsed
+# Web flags live on the `webStartup` service and every host in the declared
+# peer range provides it, so the row injects webStartup and reads
+# `ctx.webStartup.trustedHosts` (the --trusted-host values) — the 0.2.1+
+# upstream row's own source; on pre-0.2.1 hosts this drops only the LAN
+# literals an all-interface bind used to derive (wildcard binds are rejected
+# there too, and this repo's lines always declare authorities explicitly).
+# Unset/empty env ⇒ identical behavior to the unpatched row. Malformed entries
+# fail plugin load loudly (upstream assertTrustedAuthority). The browser-side
+# twin (page-authority loopback verdict) is the plugin's
+# webserver/index-inject boot script — see src/web-trust.ts.
 - id: connection
   name: '@deepseek-ai/dsh-client-connection'
-  inject: [webRuntime]
+  inject: [webStartup]
   config:
-    trustedHosts: !!js (process.env.DSH_TRUSTED_HOSTS ?? '').split(/\s+/).filter(Boolean).concat(ctx.webRuntime.trustedHosts)
+    trustedHosts: !!js (process.env.DSH_TRUSTED_HOSTS ?? '').split(/\s+/).filter(Boolean).concat(ctx.webStartup.trustedHosts)
 
 - id: ui-settings-models
   name: '@deepseek-ai/dsh-client-ui-settings-models'

package/lib/BrowserWebSocketTransport.js

@@ -0,0 +1,4 @@
+import "./util.js";
+import { t as BrowserWebSocketTransport } from "./BrowserWebSocketTransport2.js";
+
+export { BrowserWebSocketTransport };

package/lib/{BrowserWebSocketTransport-wm99h94r.js → BrowserWebSocketTransport2.js}

@@ -1,4 +1,4 @@
-import { o as debugCatchError } from "./util-BHL_dfV_.js";
+import { o as debugCatchError } from "./util.js";
 
 //#region node_modules/puppeteer-core/lib/puppeteer/common/BrowserWebSocketTransport.js
 /**

package/lib/LaunchOptions.js

@@ -0,0 +1,4 @@
+import "./main.js";
+import { t as convertPuppeteerChannelToBrowsersChannel } from "./LaunchOptions2.js";
+
+export { convertPuppeteerChannelToBrowsersChannel };

package/lib/{LaunchOptions-iE9M-STS.js → LaunchOptions2.js}

@@ -1,4 +1,4 @@
-import { b as ChromeReleaseChannel } from "./main-uqGqYYnA.js";
+import { b as ChromeReleaseChannel } from "./main.js";
 
 //#region node_modules/puppeteer-core/lib/puppeteer/node/LaunchOptions.js
 /**

package/lib/{NodeWebSocketTransport-D9ysYGLM.js → NodeWebSocketTransport.js}

@@ -1,5 +1,5 @@
-import { n as __require, r as __toESM, t as __commonJS } from "./chunk-DQxbwPpZ.js";
-import { D as packageVersion, o as debugCatchError } from "./util-BHL_dfV_.js";
+import { n as __require, r as __toESM, t as __commonJS } from "./chunk.js";
+import { D as packageVersion, o as debugCatchError } from "./util.js";
 
 //#region node_modules/ws/lib/constants.js
 var require_constants = /* @__PURE__ */ __commonJS({ "node_modules/ws/lib/constants.js": ((exports, module) => {

package/lib/NodeWebSocketTransport2.js

@@ -0,0 +1,4 @@
+import "./util.js";
+import { t as NodeWebSocketTransport } from "./NodeWebSocketTransport.js";
+
+export { NodeWebSocketTransport };

package/lib/{bidi-CaQeBZHY.js → bidi.js}

@@ -1,7 +1,7 @@
-import { n as __require } from "./chunk-DQxbwPpZ.js";
-import { A as stringToTypedArray, G as first, H as delayWhen, K as firstValueFrom, L as combineLatest, M as assert, Q as map, S as timeout, St as debug, Tt as environment, V as defer, W as filter, at as race, b as isString, bt as TouchError, c as evaluationString, d as fromEmitterEvent, g as isDate, gt as ProtocolError, h as getSourceUrlComment, ht as ConnectionClosedError, i as SOURCE_URL_REGEX, k as stringToBase64, lt as switchMap, m as getSourcePuppeteerURLIfAvailable, o as debugCatchError, ot as raceWith, q as from, r as PuppeteerURL, rt as of, s as debugError, u as fromAbortSignal, v as isPlainObject, vt as TargetCloseError, x as parsePDFOptions, xt as UnsupportedOperation, y as isRegExp, yt as TimeoutError } from "./util-BHL_dfV_.js";
-import { $n as Deferred, $t as scriptInjector, Bt as throwIfDetached, Ct as WebWorkerEvent, Dn as DeviceRequestPrompt, Dt as normalizeHeaderValue, Fn as Browser, Hn as DisposableStack, Ht as bindIsolatedHandle, In as WEB_PERMISSION_TO_PROTOCOL_PERMISSION, It as Dialog, Jn as CallbackRegistry, Kn as disposeSymbol, Ln as CDPSession, Lt as Accessibility, Mn as invokeAtMostOnceForArguments, Mt as InterceptResolutionAction, Nn as throwIfDisposed, Nt as STATUS_TEXTS, On as BrowserContext, Ot as SecurityDetails, Pt as handleError, Rt as Frame, St as WebWorker, Ut as JSHandle, Vt as ElementHandle, Zn as isErrorLike, _t as Mouse, an as stringifyFunction, cn as Tracing, dt as ConsoleMessage, en as ARIAQueryHandler, fn as Coverage, gt as Keyboard, ht as TargetType, in as interpolateFunction, jn as inertIfDisposed, jt as HTTPRequest, kn as bubble, kt as HTTPResponse, mn as Page, mt as Target, nn as LazyArg, on as AsyncIterableUtil, sn as FileChooser, un as EmulationManager, vt as MouseButton, wt as Realm, yt as Touchscreen, zn as EventEmitter } from "./index-browser-CJzxT9Vi.js";
-import "./BrowserWebSocketTransport-wm99h94r.js";
+import { n as __require } from "./chunk.js";
+import { A as stringToTypedArray, G as first, H as delayWhen, K as firstValueFrom, L as combineLatest, M as assert, Q as map, S as timeout, St as debug, Tt as environment, V as defer, W as filter, at as race, b as isString, bt as TouchError, c as evaluationString, d as fromEmitterEvent, g as isDate, gt as ProtocolError, h as getSourceUrlComment, ht as ConnectionClosedError, i as SOURCE_URL_REGEX, k as stringToBase64, lt as switchMap, m as getSourcePuppeteerURLIfAvailable, o as debugCatchError, ot as raceWith, q as from, r as PuppeteerURL, rt as of, s as debugError, u as fromAbortSignal, v as isPlainObject, vt as TargetCloseError, x as parsePDFOptions, xt as UnsupportedOperation, y as isRegExp, yt as TimeoutError } from "./util.js";
+import { $n as Deferred, $t as scriptInjector, Bt as throwIfDetached, Ct as WebWorkerEvent, Dn as DeviceRequestPrompt, Dt as normalizeHeaderValue, Fn as Browser, Hn as DisposableStack, Ht as bindIsolatedHandle, In as WEB_PERMISSION_TO_PROTOCOL_PERMISSION, It as Dialog, Jn as CallbackRegistry, Kn as disposeSymbol, Ln as CDPSession, Lt as Accessibility, Mn as invokeAtMostOnceForArguments, Mt as InterceptResolutionAction, Nn as throwIfDisposed, Nt as STATUS_TEXTS, On as BrowserContext, Ot as SecurityDetails, Pt as handleError, Rt as Frame, St as WebWorker, Ut as JSHandle, Vt as ElementHandle, Zn as isErrorLike, _t as Mouse, an as stringifyFunction, cn as Tracing, dt as ConsoleMessage, en as ARIAQueryHandler, fn as Coverage, gt as Keyboard, ht as TargetType, in as interpolateFunction, jn as inertIfDisposed, jt as HTTPRequest, kn as bubble, kt as HTTPResponse, mn as Page, mt as Target, nn as LazyArg, on as AsyncIterableUtil, sn as FileChooser, un as EmulationManager, vt as MouseButton, wt as Realm, yt as Touchscreen, zn as EventEmitter } from "./index-browser.js";
+import "./BrowserWebSocketTransport2.js";
 
 //#region node_modules/mitt/dist/mitt.mjs
 function mitt_default(n) {

package/lib/compaction/index.d.ts

@@ -1,4 +1,4 @@
-import { t as Schema } from "../index-DTDXUe6m.js";
+import { t as Schema } from "../index2.js";
 import { Context, Volatile } from "@deepseek-ai/cordis";
 
 //#region src/compaction/config.d.ts

package/lib/compaction/index.js

@@ -1,4 +1,4 @@
-import { t as Schema } from "../lib-C8_jXvwA.js";
+import { t as Schema } from "../lib.js";
 import { Context } from "@deepseek-ai/cordis";
 
 //#region src/compaction/config.ts

package/lib/failover/index.d.ts

@@ -1,4 +1,4 @@
-import { t as Schema } from "../index-DTDXUe6m.js";
+import { t as Schema } from "../index2.js";
 import { Context, Volatile } from "@deepseek-ai/cordis";
 
 //#region src/failover/config.d.ts

package/lib/failover/index.js

@@ -1,4 +1,4 @@
-import { t as Schema } from "../lib-C8_jXvwA.js";
+import { t as Schema } from "../lib.js";
 import { Context } from "@deepseek-ai/cordis";
 import { randomUUID } from "node:crypto";
 import { RetryId } from "@deepseek-ai/dsh-llm-retry";

package/lib/fs-aware/sandbox-plugin.js

@@ -1,4 +1,4 @@
-import { f as UrlSchemesError, t as buildFsLayerResolver } from "../wrap-0VA0uFx8.js";
+import { f as UrlSchemesError, t as buildFsLayerResolver } from "../wrap.js";
 import { Context } from "@deepseek-ai/cordis";
 import { dirname, sep } from "node:path";
 import { stat } from "node:fs/promises";

package/lib/{index-browser-CJzxT9Vi.js → index-browser.js}

@@ -1,4 +1,4 @@
-import { $ as merge, A as stringToTypedArray, B as defaultIfEmpty, Et as isNode, G as first, I as catchError, K as firstValueFrom, M as assert, N as EMPTY, O as mergeUint8Arrays, P as ReplaySubject, Q as map, R as concat, S as timeout, St as debug, T as withSourcePuppeteerURLIfNone, Tt as environment, U as distinctUntilChanged, V as defer, W as filter, X as ignoreElements, Y as identity, a as UTILITY_WORLD_NAME, at as race, b as isString, bt as TouchError, c as evaluationString, ct as startWith, d as fromEmitterEvent, dt as takeUntil, et as mergeMap, f as getReadableAsTypedArray, ft as tap, gt as ProtocolError, h as getSourceUrlComment, ht as ConnectionClosedError, i as SOURCE_URL_REGEX, it as pipe, j as typedArrayToBase64, k as stringToBase64, l as filterAsync, lt as switchMap, m as getSourcePuppeteerURLIfAvailable, mt as timer, n as NETWORK_IDLE_TIME, nt as noop, o as debugCatchError, ot as raceWith, p as getReadableFromProtocolStream, pt as throwIfEmpty, q as from, r as PuppeteerURL, rt as of, s as debugError, st as retry, t as DEFAULT_VIEWPORT, tt as mergeScan, u as fromAbortSignal, ut as take, vt as TargetCloseError, w as validateDialogType, x as parsePDFOptions, xt as UnsupportedOperation, yt as TimeoutError } from "./util-BHL_dfV_.js";
+import { $ as merge, A as stringToTypedArray, B as defaultIfEmpty, Et as isNode, G as first, I as catchError, K as firstValueFrom, M as assert, N as EMPTY, O as mergeUint8Arrays, P as ReplaySubject, Q as map, R as concat, S as timeout, St as debug, T as withSourcePuppeteerURLIfNone, Tt as environment, U as distinctUntilChanged, V as defer, W as filter, X as ignoreElements, Y as identity, a as UTILITY_WORLD_NAME, at as race, b as isString, bt as TouchError, c as evaluationString, ct as startWith, d as fromEmitterEvent, dt as takeUntil, et as mergeMap, f as getReadableAsTypedArray, ft as tap, gt as ProtocolError, h as getSourceUrlComment, ht as ConnectionClosedError, i as SOURCE_URL_REGEX, it as pipe, j as typedArrayToBase64, k as stringToBase64, l as filterAsync, lt as switchMap, m as getSourcePuppeteerURLIfAvailable, mt as timer, n as NETWORK_IDLE_TIME, nt as noop, o as debugCatchError, ot as raceWith, p as getReadableFromProtocolStream, pt as throwIfEmpty, q as from, r as PuppeteerURL, rt as of, s as debugError, st as retry, t as DEFAULT_VIEWPORT, tt as mergeScan, u as fromAbortSignal, ut as take, vt as TargetCloseError, w as validateDialogType, x as parsePDFOptions, xt as UnsupportedOperation, yt as TimeoutError } from "./util.js";
 
 //#region node_modules/puppeteer-core/lib/puppeteer/util/Deferred.js
 /**
@@ -20792,7 +20792,7 @@ async function _connectToBiDiBrowser(connectionTransport, url, options) {
 	const { bidiConnection, cdpConnection, closeCallback } = await getBiDiConnection(connectionTransport, url, options);
 	return await (await import(
 		/* webpackIgnore: true */
-		"./bidi-CaQeBZHY.js"
+		"./bidi.js"
 )).BidiBrowser.create({
 		connection: bidiConnection,
 		cdpConnection,
@@ -20815,7 +20815,7 @@ async function _connectToBiDiBrowser(connectionTransport, url, options) {
 async function getBiDiConnection(connectionTransport, url, options) {
 	const BiDi = await import(
 		/* webpackIgnore: true */
-		"./bidi-CaQeBZHY.js"
+		"./bidi.js"
 );
 	const { slowMo = 0, protocolTimeout, idGenerator = createIncrementalIdGenerator() } = options;
 	const pureBidiConnection = new BiDi.BidiConnection(url, connectionTransport, idGenerator, slowMo, protocolTimeout);
@@ -20845,7 +20845,7 @@ async function getBiDiConnection(connectionTransport, url, options) {
 //#endregion
 //#region node_modules/puppeteer-core/lib/puppeteer/common/BrowserConnector.js
 const getWebSocketTransportClass = async () => {
-	return isNode ? (await import("./NodeWebSocketTransport-BRLjmu2R.js")).NodeWebSocketTransport : (await import("./BrowserWebSocketTransport-D1aFReu_.js")).BrowserWebSocketTransport;
+	return isNode ? (await import("./NodeWebSocketTransport2.js")).NodeWebSocketTransport : (await import("./BrowserWebSocketTransport.js")).BrowserWebSocketTransport;
 };
 /**
 * Users should never call this directly; it's called when calling
@@ -20887,10 +20887,10 @@ async function getConnectionTransport(options) {
 			endpointUrl: connectionURL
 		};
 	} else if (options.channel && isNode) {
-		const { detectBrowserPlatform, resolveDefaultUserDataDir, Browser: Browser$1 } = await import("./main-taSMz1KX.js");
+		const { detectBrowserPlatform, resolveDefaultUserDataDir, Browser: Browser$1 } = await import("./main2.js");
 		const platform = detectBrowserPlatform();
 		if (!platform) throw new Error("Could not detect required browser platform");
-		const { convertPuppeteerChannelToBrowsersChannel } = await import("./LaunchOptions-0Mr6meJc.js");
+		const { convertPuppeteerChannelToBrowsersChannel } = await import("./LaunchOptions.js");
 		const { join } = await import("node:path");
 		const portPath = join(resolveDefaultUserDataDir(Browser$1.CHROME, platform, convertPuppeteerChannelToBrowsersChannel(options.channel)), "DevToolsActivePort");
 		try {

package/lib/index.d.ts

@@ -1,4 +1,4 @@
-import { t as Schema } from "./index-DTDXUe6m.js";
+import { t as Schema } from "./index2.js";
 import { Context, Service } from "@deepseek-ai/cordis";
 import { ToolDefinition, ToolExecutionInput, ToolRunContext, ToolRuntime } from "@deepseek-ai/dsh-tools";
 import { ContentBlock, HarnessError } from "@deepseek-ai/dsh-llm";

package/lib/index.js

@@ -1,7 +1,7 @@
-import { t as Schema } from "./lib-C8_jXvwA.js";
-import { a as RESERVED_ERROR_MEMBERS, i as RESERVED_BINDING_GLOBALS, n as DUNDER_MEMBER, o as ReplRuntime, r as PORTABLE_RESERVED_WORDS, t as isFlatBindableName } from "./py-sdk-D7klhpWb.js";
-import { n as resolveKernelEnv } from "./kernel-env-x_WkG6Fr.js";
-import { t as captureAllTools } from "./native-capture-BEByDXYM.js";
+import { t as Schema } from "./lib.js";
+import { a as RESERVED_ERROR_MEMBERS, i as RESERVED_BINDING_GLOBALS, n as DUNDER_MEMBER, o as ReplRuntime, r as PORTABLE_RESERVED_WORDS, t as isFlatBindableName } from "./py-sdk2.js";
+import { n as resolveKernelEnv } from "./kernel-env2.js";
+import { t as captureAllTools } from "./native-capture.js";
 import { createRequire } from "node:module";
 import { Context } from "@deepseek-ai/cordis";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -1409,8 +1409,7 @@ const agentExecutor = async (rawArgs, exec, deps) => {
 	if (!exec.agent) return { error: "agent() requires a calling agent (this run has no agent to delegate from)" };
 	const subagents = deps.requireSubagents?.();
 	if (!subagents) return { error: "agent() is unavailable: no ctx.subagents service is mounted in this composition" };
-	const delegation = {
-		label: description,
+	const request = {
 		prompt: [{
 			type: "text",
 			text: prompt
@@ -1419,30 +1418,60 @@ const agentExecutor = async (rawArgs, exec, deps) => {
 		maxDepth: NATIVE_MAX_DEPTH
 	};
 	const runInBackground = a["run_in_background"] ?? true;
+	const legacyRequest = {
+		label: description,
+		...request,
+		signal: exec.signal
+	};
+	if (subagents.startActivation === void 0) try {
+		if (runInBackground) {
+			if (subagents.startContinuable === void 0) return { error: "agent() is unavailable: this DSH host exposes neither managed activations nor the legacy continuable seam" };
+			return {
+				kind: "continuable",
+				subagentId: (await subagents.startContinuable({
+					provider,
+					request: legacyRequest
+				})).childId
+			};
+		}
+		if (subagents.start === void 0) return { error: "agent() is unavailable: this DSH host exposes neither managed activations nor the legacy one-shot seam" };
+		const run = await subagents.start(provider, legacyRequest);
+		try {
+			const result = await run.result;
+			if (result.stopReason !== "completed") return { error: `agent() ${stopReasonError(result.stopReason)}` };
+			return {
+				kind: "foreground",
+				subagentId: run.id,
+				output: result.output
+			};
+		} finally {
+			await run.dispose();
+		}
+	} catch (error) {
+		return { error: `agent() failed: ${error instanceof Error ? error.message : String(error)}` };
+	}
 	try {
+		const activation = await subagents.startActivation({
+			provider,
+			label: description,
+			request,
+			signal: exec.signal,
+			delivery: runInBackground ? "parent" : "caller"
+		});
 		if (runInBackground) return {
 			kind: "continuable",
-			subagentId: (await subagents.startContinuable({
-				provider,
-				label: description,
-				request: delegation,
-				signal: exec.signal
-			})).childId
+			subagentId: activation.childId
 		};
-		const run = await subagents.start(provider, {
-			...delegation,
-			signal: exec.signal
-		});
 		try {
-			const result = await run.result;
+			const result = await activation.result;
 			if (result.stopReason !== "completed") return { error: `agent() ${stopReasonError(result.stopReason)}` };
 			return {
 				kind: "foreground",
-				runId: run.id,
+				subagentId: activation.childId,
 				output: result.output
 			};
 		} finally {
-			await run.dispose();
+			await activation.dispose();
 		}
 	} catch (error) {
 		return { error: `agent() failed: ${error instanceof Error ? error.message : String(error)}` };
@@ -1650,7 +1679,7 @@ function createAgentBridgeTools(deps) {
 								type: "string",
 								enum: ["foreground"]
 							},
-							runId: { type: "string" },
+							subagentId: { type: "string" },
 							output: { type: "json" }
 						},
 						additionalProperties: false

package/lib/kernel-env.js

@@ -1,3 +1,3 @@
-import { n as resolveKernelEnv, t as PACKAGE_ROOT } from "./kernel-env-x_WkG6Fr.js";
+import { n as resolveKernelEnv, t as PACKAGE_ROOT } from "./kernel-env2.js";
 
 export { PACKAGE_ROOT, resolveKernelEnv };

package/lib/{lsp-server-registry-BcdkHROD.js → lsp-server-registry2.js}

@@ -1,3 +1,3 @@
-import { a as primaryServerForFile, c as serversForFile, i as installServer, n as findWorkspaceRoot, o as resolveCommandPath, r as installHintFor, s as serverByName, t as clearCommandProbeCache } from "./lsp-server-registry-D4VLs1Sm.js";
+import { a as primaryServerForFile, c as serversForFile, i as installServer, n as findWorkspaceRoot, o as resolveCommandPath, r as installHintFor, s as serverByName, t as clearCommandProbeCache } from "./lsp-server-registry.js";
 
 export { clearCommandProbeCache, findWorkspaceRoot, installHintFor, installServer, primaryServerForFile, resolveCommandPath, serverByName, serversForFile };

package/lib/{main-uqGqYYnA.js → main.js}

@@ -8,8 +8,8 @@ import { URL as URL$1, urlToHttpOptions } from "node:url";
 import os from "node:os";
 import { debuglog, promisify } from "node:util";
 import { mkdir, readdir, symlink, unlink } from "node:fs/promises";
-import { pipeline } from "node:stream/promises";
 import { Writable } from "node:stream";
+import { pipeline } from "node:stream/promises";
 import { EventEmitter } from "node:events";
 import * as https from "node:https";
 

package/lib/{main-taSMz1KX.js → main2.js}

@@ -1,3 +1,3 @@
-import { _ as Browser, a as TimeoutError, b as ChromeReleaseChannel, c as computeSystemExecutablePath, d as InstalledBrowser, f as detectBrowserPlatform, g as resolveDefaultUserDataDir, h as resolveBuildId, i as Process, l as launch, m as getVersionComparator, n as uninstall, o as WEBDRIVER_BIDI_WEBSOCKET_ENDPOINT_REGEX, p as createProfile, r as CDP_WEBSOCKET_ENDPOINT_REGEX, s as computeExecutablePath, t as getInstalledBrowsers, u as Cache, v as BrowserPlatform, y as BrowserTag } from "./main-uqGqYYnA.js";
+import { _ as Browser, a as TimeoutError, b as ChromeReleaseChannel, c as computeSystemExecutablePath, d as InstalledBrowser, f as detectBrowserPlatform, g as resolveDefaultUserDataDir, h as resolveBuildId, i as Process, l as launch, m as getVersionComparator, n as uninstall, o as WEBDRIVER_BIDI_WEBSOCKET_ENDPOINT_REGEX, p as createProfile, r as CDP_WEBSOCKET_ENDPOINT_REGEX, s as computeExecutablePath, t as getInstalledBrowsers, u as Cache, v as BrowserPlatform, y as BrowserTag } from "./main.js";
 
 export { Browser, BrowserPlatform, BrowserTag, CDP_WEBSOCKET_ENDPOINT_REGEX, Cache, ChromeReleaseChannel, InstalledBrowser, Process, TimeoutError, WEBDRIVER_BIDI_WEBSOCKET_ENDPOINT_REGEX, computeExecutablePath, computeSystemExecutablePath, createProfile, detectBrowserPlatform, getInstalledBrowsers, getVersionComparator, launch, resolveBuildId, resolveDefaultUserDataDir, uninstall };

package/lib/mobile/plugin.d.ts

@@ -1,5 +1,5 @@
-import { t as Schema } from "../index-DTDXUe6m.js";
-import { r as MobileConfig } from "../web-trust-Dej_RI2B.js";
+import { t as Schema } from "../index2.js";
+import { r as MobileConfig } from "../web-trust2.js";
 import { Context } from "@deepseek-ai/cordis";
 
 //#region src/mobile/plugin.d.ts

package/lib/mobile/plugin.js

@@ -1,5 +1,5 @@
-import { t as Schema } from "../lib-C8_jXvwA.js";
-import { r as buildMobileScript } from "../web-trust-D6gJpUMf.js";
+import { t as Schema } from "../lib.js";
+import { r as buildMobileScript } from "../web-trust2.js";
 import { Context } from "@deepseek-ai/cordis";
 
 //#region src/mobile/plugin.ts

package/lib/{puppeteer-core-C-4NyOpY.js → puppeteer-core.js}

@@ -1,9 +1,9 @@
-import { _ as Browser$1, a as TimeoutError$1, c as computeSystemExecutablePath, f as detectBrowserPlatform, h as resolveBuildId, l as launch$1, n as uninstall, o as WEBDRIVER_BIDI_WEBSOCKET_ENDPOINT_REGEX, p as createProfile, r as CDP_WEBSOCKET_ENDPOINT_REGEX, s as computeExecutablePath, t as getInstalledBrowsers } from "./main-uqGqYYnA.js";
-import { C as unitToPixels, Ct as getCapturedLogs, E as paperFormats, F as bufferCount, J as fromEvent, K as firstValueFrom, M as assert, Q as map, S as timeout, St as debug, T as withSourcePuppeteerURLIfNone, Tt as environment, W as filter, Z as lastValueFrom, _ as isNumber, _t as PuppeteerError, a as UTILITY_WORLD_NAME, at as race, b as isString, bt as TouchError, c as evaluationString, d as fromEmitterEvent, dt as takeUntil, f as getReadableAsTypedArray, ft as tap, g as isDate, gt as ProtocolError, h as getSourceUrlComment, ht as ConnectionClosedError, i as SOURCE_URL_REGEX, l as filterAsync, m as getSourcePuppeteerURLIfAvailable, mt as timer, n as NETWORK_IDLE_TIME, o as debugCatchError, p as getReadableFromProtocolStream, q as from, r as PuppeteerURL, s as debugError, t as DEFAULT_VIEWPORT, u as fromAbortSignal, v as isPlainObject, vt as TargetCloseError, w as validateDialogType, wt as setLogCapture, x as parsePDFOptions, xt as UnsupportedOperation, y as isRegExp, yt as TimeoutError, z as concatMap } from "./util-BHL_dfV_.js";
-import { $ as pageBindingInitString, $n as Deferred, $t as scriptInjector, A as NetworkManager, An as guarded, At as DEFAULT_INTERCEPT_RESOLUTION_PRIORITY, B as MAIN_WORLD, Bn as AsyncDisposableStack, Bt as throwIfDetached, C as WebMCPToolCall, Cn as NodeLocator, Ct as WebWorkerEvent, D as CdpTouchscreen, Dn as DeviceRequestPrompt, Dt as normalizeHeaderValue, E as CdpTouchHandle, En as TimeoutSettings, Et as WaitTask, F as CdpFrame, Fn as Browser, Ft as headersArray, G as CdpJSHandle, Gn as asyncDisposeSymbol, Gt as XPathQueryHandler, H as FrameManagerEvent, Hn as DisposableStack, Ht as bindIsolatedHandle, I as referrerPolicyToProtocol, In as WEB_PERMISSION_TO_PROTOCOL_PERMISSION, It as Dialog, J as addPageBinding, Jn as CallbackRegistry, Jt as PQueryHandler, K as releaseObject, Kn as disposeSymbol, Kt as TextQueryHandler, L as LifecycleWatcher, Ln as CDPSession, Lt as Accessibility, M as CdpHTTPResponse, Mt as InterceptResolutionAction, N as CdpHTTPRequest, Nt as STATUS_TEXTS, O as _keyDefinitions, On as BrowserContext, Ot as SecurityDetails, P as FrameTree, Pn as Mutex, Pt as handleError, Q as createEvaluationError, Qn as rewriteError, Qt as ScriptInjector, R as IsolatedWorld, Rn as CDPSessionEvent, Rt as Frame, S as WebMCPTool, Sn as MappedLocator, St as WebWorker, T as CdpMouse, Tn as RaceLocator, Tt as TaskManager, U as ExecutionContext, Un as DisposableStackPolyfill, Ut as JSHandle, V as PUPPETEER_WORLD, Vn as AsyncDisposableStackPolyfill, Vt as ElementHandle, W as CdpElementHandle, Wn as SuppressedError, Wt as getQueryHandlerAndSelector, X as createClientError, Xn as isErrnoException, Xt as CustomQueryHandlerRegistry, Y as convertConsoleMessageLevel, Yn as createProtocolErrorMessage, Yt as PierceQueryHandler, Z as createConsoleMessage, Zn as isErrorLike, Zt as customQueryHandlers, _ as CdpBrowserContext, _n as DelegatedLocator, _t as Mouse, a as KnownDevices, at as CdpPreloadScript, b as convertSameSiteFromPuppeteerToCdp, bn as Locator, bt as createIncrementalIdGenerator, c as _connectToCdpBrowser, cn as Tracing, ct as isTargetClosedError, d as CdpTarget, dn as CSSCoverage, dt as ConsoleMessage, en as ARIAQueryHandler, et as valueFromJSHandle, f as DevToolsTarget, fn as Coverage, ft as CdpBluetoothEmulation, g as WorkerTarget, gn as supportedMetrics, gt as Keyboard, h as PageTarget, hn as setDefaultScreenshotOptions, ht as TargetType, i as assertSupportedUrlRestrictions, it as CdpDeviceRequestPromptManager, j as NetworkEventManager, jt as HTTPRequest, k as FrameManager, kt as HTTPResponse, l as CdpBrowser, ln as EmulatedState, lt as CdpCDPSession, m as OtherTarget, mn as Page, mt as Target, n as TaskQueue, nn as LazyArg, nt as valueFromRemoteObjectReference, o as PredefinedNetworkConditions, on as AsyncIterableUtil, ot as CdpDialog, p as InitializationStatus, pn as JSCoverage, pt as Binding, q as CDP_BINDING_PREFIX, qn as Callback, qt as parsePSelectors, r as Puppeteer, rn as transposeIterableHandle, rt as CdpDeviceRequestPrompt, s as ExtensionTransport, sn as FileChooser, st as Connection, t as PUPPETEER_REVISIONS, tn as QueryHandler, tt as valueFromPrimitiveRemoteObject, u as TargetManager, un as EmulationManager, ut as NetworkManagerEvent, v as CdpPage, vn as FilteredLocator, vt as MouseButton, w as CdpKeyboard, wn as RETRY_DELAY, wt as Realm, x as WebMCP, xn as LocatorEvent, xt as Extension, y as convertCookiesPartitionKeyFromPuppeteerToCdp, yn as FunctionLocator, yt as Touchscreen, z as CdpWebWorker, zn as EventEmitter, zt as FrameEvent } from "./index-browser-CJzxT9Vi.js";
-import { t as BrowserWebSocketTransport } from "./BrowserWebSocketTransport-wm99h94r.js";
-import { t as convertPuppeteerChannelToBrowsersChannel } from "./LaunchOptions-iE9M-STS.js";
-import { t as NodeWebSocketTransport } from "./NodeWebSocketTransport-D9ysYGLM.js";
+import { _ as Browser$1, a as TimeoutError$1, c as computeSystemExecutablePath, f as detectBrowserPlatform, h as resolveBuildId, l as launch$1, n as uninstall, o as WEBDRIVER_BIDI_WEBSOCKET_ENDPOINT_REGEX, p as createProfile, r as CDP_WEBSOCKET_ENDPOINT_REGEX, s as computeExecutablePath, t as getInstalledBrowsers } from "./main.js";
+import { C as unitToPixels, Ct as getCapturedLogs, E as paperFormats, F as bufferCount, J as fromEvent, K as firstValueFrom, M as assert, Q as map, S as timeout, St as debug, T as withSourcePuppeteerURLIfNone, Tt as environment, W as filter, Z as lastValueFrom, _ as isNumber, _t as PuppeteerError, a as UTILITY_WORLD_NAME, at as race, b as isString, bt as TouchError, c as evaluationString, d as fromEmitterEvent, dt as takeUntil, f as getReadableAsTypedArray, ft as tap, g as isDate, gt as ProtocolError, h as getSourceUrlComment, ht as ConnectionClosedError, i as SOURCE_URL_REGEX, l as filterAsync, m as getSourcePuppeteerURLIfAvailable, mt as timer, n as NETWORK_IDLE_TIME, o as debugCatchError, p as getReadableFromProtocolStream, q as from, r as PuppeteerURL, s as debugError, t as DEFAULT_VIEWPORT, u as fromAbortSignal, v as isPlainObject, vt as TargetCloseError, w as validateDialogType, wt as setLogCapture, x as parsePDFOptions, xt as UnsupportedOperation, y as isRegExp, yt as TimeoutError, z as concatMap } from "./util.js";
+import { $ as pageBindingInitString, $n as Deferred, $t as scriptInjector, A as NetworkManager, An as guarded, At as DEFAULT_INTERCEPT_RESOLUTION_PRIORITY, B as MAIN_WORLD, Bn as AsyncDisposableStack, Bt as throwIfDetached, C as WebMCPToolCall, Cn as NodeLocator, Ct as WebWorkerEvent, D as CdpTouchscreen, Dn as DeviceRequestPrompt, Dt as normalizeHeaderValue, E as CdpTouchHandle, En as TimeoutSettings, Et as WaitTask, F as CdpFrame, Fn as Browser, Ft as headersArray, G as CdpJSHandle, Gn as asyncDisposeSymbol, Gt as XPathQueryHandler, H as FrameManagerEvent, Hn as DisposableStack, Ht as bindIsolatedHandle, I as referrerPolicyToProtocol, In as WEB_PERMISSION_TO_PROTOCOL_PERMISSION, It as Dialog, J as addPageBinding, Jn as CallbackRegistry, Jt as PQueryHandler, K as releaseObject, Kn as disposeSymbol, Kt as TextQueryHandler, L as LifecycleWatcher, Ln as CDPSession, Lt as Accessibility, M as CdpHTTPResponse, Mt as InterceptResolutionAction, N as CdpHTTPRequest, Nt as STATUS_TEXTS, O as _keyDefinitions, On as BrowserContext, Ot as SecurityDetails, P as FrameTree, Pn as Mutex, Pt as handleError, Q as createEvaluationError, Qn as rewriteError, Qt as ScriptInjector, R as IsolatedWorld, Rn as CDPSessionEvent, Rt as Frame, S as WebMCPTool, Sn as MappedLocator, St as WebWorker, T as CdpMouse, Tn as RaceLocator, Tt as TaskManager, U as ExecutionContext, Un as DisposableStackPolyfill, Ut as JSHandle, V as PUPPETEER_WORLD, Vn as AsyncDisposableStackPolyfill, Vt as ElementHandle, W as CdpElementHandle, Wn as SuppressedError, Wt as getQueryHandlerAndSelector, X as createClientError, Xn as isErrnoException, Xt as CustomQueryHandlerRegistry, Y as convertConsoleMessageLevel, Yn as createProtocolErrorMessage, Yt as PierceQueryHandler, Z as createConsoleMessage, Zn as isErrorLike, Zt as customQueryHandlers, _ as CdpBrowserContext, _n as DelegatedLocator, _t as Mouse, a as KnownDevices, at as CdpPreloadScript, b as convertSameSiteFromPuppeteerToCdp, bn as Locator, bt as createIncrementalIdGenerator, c as _connectToCdpBrowser, cn as Tracing, ct as isTargetClosedError, d as CdpTarget, dn as CSSCoverage, dt as ConsoleMessage, en as ARIAQueryHandler, et as valueFromJSHandle, f as DevToolsTarget, fn as Coverage, ft as CdpBluetoothEmulation, g as WorkerTarget, gn as supportedMetrics, gt as Keyboard, h as PageTarget, hn as setDefaultScreenshotOptions, ht as TargetType, i as assertSupportedUrlRestrictions, it as CdpDeviceRequestPromptManager, j as NetworkEventManager, jt as HTTPRequest, k as FrameManager, kt as HTTPResponse, l as CdpBrowser, ln as EmulatedState, lt as CdpCDPSession, m as OtherTarget, mn as Page, mt as Target, n as TaskQueue, nn as LazyArg, nt as valueFromRemoteObjectReference, o as PredefinedNetworkConditions, on as AsyncIterableUtil, ot as CdpDialog, p as InitializationStatus, pn as JSCoverage, pt as Binding, q as CDP_BINDING_PREFIX, qn as Callback, qt as parsePSelectors, r as Puppeteer, rn as transposeIterableHandle, rt as CdpDeviceRequestPrompt, s as ExtensionTransport, sn as FileChooser, st as Connection, t as PUPPETEER_REVISIONS, tn as QueryHandler, tt as valueFromPrimitiveRemoteObject, u as TargetManager, un as EmulationManager, ut as NetworkManagerEvent, v as CdpPage, vn as FilteredLocator, vt as MouseButton, w as CdpKeyboard, wn as RETRY_DELAY, wt as Realm, x as WebMCP, xn as LocatorEvent, xt as Extension, y as convertCookiesPartitionKeyFromPuppeteerToCdp, yn as FunctionLocator, yt as Touchscreen, z as CdpWebWorker, zn as EventEmitter, zt as FrameEvent } from "./index-browser.js";
+import { t as BrowserWebSocketTransport } from "./BrowserWebSocketTransport2.js";
+import { t as convertPuppeteerChannelToBrowsersChannel } from "./LaunchOptions2.js";
+import { t as NodeWebSocketTransport } from "./NodeWebSocketTransport.js";
 import fs, { existsSync } from "node:fs";
 import path, { dirname, join } from "node:path";
 import { spawn, spawnSync } from "node:child_process";
@@ -240,7 +240,7 @@ var BrowserLauncher = class {
 		const bidiOnly = process.env["PUPPETEER_WEBDRIVER_BIDI_ONLY"] === "true";
 		const BiDi = await import(
 			/* webpackIgnore: true */
-			"./bidi-CaQeBZHY.js"
+			"./bidi.js"
 );
 		const bidiConnection = await BiDi.connectBidiOverCdp(cdpConnection);
 		return await BiDi.BidiBrowser.create({
@@ -262,7 +262,7 @@ var BrowserLauncher = class {
 		const transport = await NodeWebSocketTransport.create(browserWSEndpoint);
 		const BiDi = await import(
 			/* webpackIgnore: true */
-			"./bidi-CaQeBZHY.js"
+			"./bidi.js"
 );
 		const bidiConnection = new BiDi.BidiConnection(browserWSEndpoint, transport, opts.idGenerator, opts.slowMo, opts.protocolTimeout);
 		return await BiDi.BidiBrowser.create({

package/lib/py-sdk.js

@@ -1,3 +1,3 @@
-import { t as isFlatBindableName } from "./py-sdk-D7klhpWb.js";
+import { t as isFlatBindableName } from "./py-sdk2.js";
 
 export { isFlatBindableName };

package/lib/remote/helper-bin/MANIFEST.json

@@ -1,28 +1,28 @@
 {
   "format": 1,
   "name": "superd-run",
-  "ver": "0.3.1-b",
+  "ver": "0.3.1-d.b596",
   "protocol": 1,
   "targets": {
     "aarch64-apple-darwin": {
       "file": "superd-run",
       "bytes": 337808,
-      "sha256": "715c2d7bd935f3b4cc4ae0ffb10d3fab946bb62d93f592ccfe2a7446669ff76b"
+      "sha256": "a8fd11a5e6a2cb146deb599414434a299ebf78c53cfc1d3e5f42617ee11c1706"
     },
     "aarch64-unknown-linux-musl": {
       "file": "superd-run",
-      "bytes": 397416,
-      "sha256": "22ac1c7f913092d8ca8d312b93528dd2263200f9670dc183fd215bc89d2bac68"
+      "bytes": 397592,
+      "sha256": "3a8660fa099f1e71de6e08313ee2aaace00503f74365475ee46e2d2a89228397"
     },
     "x86_64-pc-windows-gnu": {
       "file": "superd-run.exe",
-      "bytes": 336896,
-      "sha256": "a638479e1ccb1c4e185085100450962e39164158a76097b5087d2a3bb8880ac0"
+      "bytes": 337408,
+      "sha256": "1372450238c5bda702b4529f4148aa79e80a255c3c125d1a6229afd4693e9d90"
     },
     "x86_64-unknown-linux-musl": {
       "file": "superd-run",
       "bytes": 447152,
-      "sha256": "79e42879509bb87d2fe9888d282151fd17113203d3172f59a16fcb5a180ba057"
+      "sha256": "05b428657942abf22a0ad609433d5cab6b6182fe389851345459a0274b5a6533"
     }
   },
   "sources": {

package/lib/remote/helper-bin/aarch64-apple-darwin/BUILT-VER

@@ -1 +1 @@
-0.3.1-b
+0.3.1-d.b596

package/lib/remote/helper-bin/aarch64-unknown-linux-musl/BUILT-VER

@@ -1 +1 @@
-0.3.1-b
+0.3.1-d.b596

package/lib/remote/helper-bin/x86_64-pc-windows-gnu/BUILT-VER

@@ -1 +1 @@
-0.3.1-b
+0.3.1-d.b596

package/lib/remote/helper-bin/x86_64-unknown-linux-musl/BUILT-VER

@@ -1 +1 @@
-0.3.1-b
+0.3.1-d.b596

package/lib/remote/plugin.d.ts

@@ -22,7 +22,9 @@ declare class SshTargets {
   clear(): void;
 }
 /** Shared by execution, probes and file/relay consumers. extraArgs is trusted
- * internal SSH argv (e.g. forwarding), never a model-provided shell string. */
+ * internal SSH argv (e.g. forwarding), never a model-provided shell string.
+ * Identity assembly lives in ssh-argv.ts (the ONE policy — 2026-10-17 ruling);
+ * this wrapper only picks the tty/batch dialect base. */
 declare function sshArgv(connection: SshConnection, options?: {
   tty?: boolean;
   extraArgs?: readonly string[];
@@ -40,7 +42,12 @@ interface TransferReceipt {
   action: 'copy';
   src: string;
   dst: string;
-  verified: boolean;
+  route: 'hub-staged';
+  /** S4: tier actually performed — sha256 digests ran and matched, or explicitly skipped. */
+  verification: 'sha256' | 'not-applicable';
+  /** S3 unified failure envelope. */
+  ok: boolean;
+  reason?: 'digest-mismatch' | 'staging-error' | 'aborted';
   sourceDigest?: string;
   destinationDigest?: string;
   bytes: number;
@@ -77,8 +84,16 @@ interface NativeCopyReceipt {
   stdout: string[];
   stderr: string[];
   outputTruncated: boolean;
-  /** Native CLI success only — no independent digest was computed for this path. */
-  verified: false;
+  /** S3/S4 (spec §3.3): verification names the tier actually performed — native routes are exit-code-only (D1=A). */
+  verification: 'native-exit-only';
+  /** S3 unified failure envelope: all native exits zero. */
+  ok: boolean;
+  /** Failure class when ok is false. */
+  reason?: 'non-zero-exit' | 'aborted';
+  /** Human context, e.g. two-segment 'push not started: pull failed' (prose moved out of route, S8). */
+  note?: string;
+  /** D3 mkdir pre-hop outcome: true = created this call, false = already existed, 'n-a' = skipped or unavailable (detail in note). */
+  created?: true | false | 'n-a';
   /** Tool-owned staging/config release: released on normal/observed exit, unknown when a channel was lost. */
   cleanup: 'released' | 'unknown' | 'none-required';
 }
@@ -126,6 +141,10 @@ interface RsyncReceipt extends RunResult {
   transferredBytes?: number;
   /** Two-SSH route actually used, when applicable. */
   route?: 'local-ssh' | 'ssh-ssh-forward' | 'ssh-ssh-stdio';
+  /** S3/S4: exit-code-only tier (D1=A) + unified failure envelope. */
+  verification: 'native-exit-only';
+  ok: boolean;
+  reason?: 'non-zero-exit' | 'aborted';
 }
 /**
  * Native rsync with ordered caller options. Local↔SSH runs rsync directly with