better-dsh 0.3.1 → 0.3.2

package/README.md

@@ -18,7 +18,11 @@ Super Dash installs Better as a separate native bundle. `../dev-webmcp` is a dev
 npm install better-dsh
 ```
 
-The runtime requires Python >=3.9. Configure `python` (or the bundle's `DASHR_KERNEL_PYTHON` hint) to select one. The default `python3` compatibility path prepares a managed environment using uv or system Python, without kernel package installs. uv may download the selected interpreter when it is absent; an explicit interpreter path uses your existing installation. Better probes the interpreter and ships the runner, checkpoint helper and dill0.4.1 sources; it does not run pip to install kernel packages. Python is not bundled by this change. A missing or unsupported interpreter produces an actionable error.
+Better uses an existing Python interpreter. An explicit `python` setting (or `DASHR_KERNEL_PYTHON`) takes precedence; otherwise discovery checks the active virtual/Conda environment, an existing workspace `.venv` or `venv`, then PATH `python3` and `python`. Candidates are actually probed, and a broken automatically discovered candidate does not hide a working fallback. Relative explicit paths resolve against the session workspace. No CPython implementation or Python3.11 version is selected. The packaged dill0.4.1 checkpoint helper requires Python >=3.9.
+
+Better does not install Python, invoke uv/pip, or create a virtual environment. When none of the existing candidates works, the error lists the attempts and asks for an existing interpreter or a Python installation. `npm run kernel:check` checks availability without changing the environment. The runner and dill sources ship in the package; runtime checkpoints belong under the native profile home, and package upgrades do not require rebuilding a package-local Python environment.
+
+The old `kernelEnvDir`, `kernelPythonVersion` and `kernelAutoInstall` provisioning fields and `kernel:venv` command are removed. Existing package-local `.venv-kernel` / `.uv-cache` directories are no longer selected automatically or modified; an existing interpreter can still be selected explicitly. A checkpoint made with another interpreter/environment may be incompatible and produces the usual explicit recovery notice; it is never replayed into a new environment.
 
 The original OMP runner's source commit/hash and MIT license, and dill's source hashes/version and BSD-3-Clause license, accompany the packaged resources. Better's integration code is separate from these original files. OMP-specific Agent helpers are not exposed as DSH features.
 
@@ -28,7 +32,7 @@ Runtime fields remain configurable through the ordinary Cordis row. The implemen
 
 | Field | Default | Meaning |
 | --- | --- | --- |
-| `python` | `python3` | Interpreter selection; no Jupyter installation requirement. |
+| `python` | automatic discovery | Existing executable name/path; explicit selection bypasses discovery. |
 | `startupTimeoutMs` | `30000` | Budget for child startup and initialization. |
 | `runTimeoutMs` | `120000` | Wall budget per user cell. |
 | `interruptGraceMs` | `2000` | Grace after an interrupt before terminating an unresponsive child. |
@@ -38,9 +42,6 @@ Runtime fields remain configurable through the ordinary Cordis row. The implemen
 | `maxOutputBytes` | `67108864` | Cap for serialized logs, completion and error output; overflow is reported. |
 | `snapshotDir` | native profile checkpoint directory | Explicit directory overrides the native profile default; `""` disables persistence and retains only live process state. Standalone runtimes must explicitly configure persistence. |
 | `snapshotSizeCapBytes` | `268435456` | Checkpoint payload cap; failed or over-cap saves preserve the previous committed generation. |
-| `kernelEnvDir` | `<package>/.venv-kernel` | Managed environment location used by the `python3` compatibility selection. |
-| `kernelPythonVersion` | `3.11` | Interpreter version requested from uv for a new managed environment. |
-| `kernelAutoInstall` | `true` | Allow creation of the managed environment on first use. |
 | `username` | `dashr` | Retained compatibility field. |
 
 ## Cells and recovery

package/cordis.patch.yml

@@ -21,7 +21,7 @@
     - id: dashr-repl
       name: 'better-dsh'
       config:
-        python: !!js process.env.DASHR_KERNEL_PYTHON ?? 'python3'
+        python: !!js process.env.DASHR_KERNEL_PYTHON
 
     # URL-aware I/O + hashline + devices. Gates ride THIS row's config
     # (schema defaults: both ON — opt-out), no longer the core row's.
@@ -90,17 +90,22 @@
 # dsh-web-app bundle declares (same id), restating its full shape per the
 # patch-layer contract, with `trustedHosts` merging the DSH_TRUSTED_HOSTS
 # environment (whitespace-separated, operator-declared serving authorities)
-# ahead of the upstream webRuntime-derived ones (LAN literals from an
-# all-interface bind plus --trusted-host extras). Unset/empty env ⇒ identical
-# behavior to the unpatched row. Malformed entries fail plugin load loudly
-# (upstream assertTrustedAuthority). The browser-side twin (page-authority
-# loopback verdict) is the plugin's webserver/index-inject boot script —
-# see src/web-trust.ts.
+# ahead of the upstream invocation authorities. Since DSH 0.1.7 the parsed
+# Web flags live on the `webStartup` service and every host in the declared
+# peer range provides it, so the row injects webStartup and reads
+# `ctx.webStartup.trustedHosts` (the --trusted-host values) — the 0.2.1+
+# upstream row's own source; on pre-0.2.1 hosts this drops only the LAN
+# literals an all-interface bind used to derive (wildcard binds are rejected
+# there too, and this repo's lines always declare authorities explicitly).
+# Unset/empty env ⇒ identical behavior to the unpatched row. Malformed entries
+# fail plugin load loudly (upstream assertTrustedAuthority). The browser-side
+# twin (page-authority loopback verdict) is the plugin's
+# webserver/index-inject boot script — see src/web-trust.ts.
 - id: connection
   name: '@deepseek-ai/dsh-client-connection'
-  inject: [webRuntime]
+  inject: [webStartup]
   config:
-    trustedHosts: !!js (process.env.DSH_TRUSTED_HOSTS ?? '').split(/\s+/).filter(Boolean).concat(ctx.webRuntime.trustedHosts)
+    trustedHosts: !!js (process.env.DSH_TRUSTED_HOSTS ?? '').split(/\s+/).filter(Boolean).concat(ctx.webStartup.trustedHosts)
 
 - id: ui-settings-models
   name: '@deepseek-ai/dsh-client-ui-settings-models'

package/docs/20_specs/kernel-provisioning/spec.md

@@ -1,5 +1,7 @@
 # kernel-provisioning Specification
 
+> Historical iKernel contract, superseded on2026-10-12. Do not apply the provisioning requirements below to current Better. The active [existing-interpreter discovery contract](../../specs/kernel-provisioning/spec.md) removes uv/pip provisioning,3.11 selection and package-local venv creation.
+
 ## Purpose
 better-dsh 的 REPL kernel（IPython）供给契约：独占 managed venv（插件包目录内，`kernelEnvDir` 可显式覆盖）、版本锁定（ipykernel 7.3.0 / dill 0.4.1，uv 与 pip 双路径）、三级触发供给（postinstall 加速器 / daemon spin-up 主路径 / 首用 lazy 兜底）全 fail-open 且幂等、供给状态可观测；npm 包不内嵌预建 venv（供给能力随包，供给结果不随包）。
 

package/docs/remote-tools.md

@@ -8,21 +8,27 @@ Better Dash and Super Dash each provide the native `remote` tool and REPL route.
 | --- | --- |
 | List locally known targets without dialing | `{}` |
 | Probe one target | `{target:"ssh:alias"}` |
-| Register an Agent-local SSH identity | `{target:"byossh:build",ssh:{host:"host",user:"user",key:"/origin/key"}}` |
-| Stateless command and stdin | `{target:"byossh:build",cmd:"cat",stdin:"hello"}` |
-| Stream a local script to fixed `bash -s` | `{target:"ssh:alias",script:"/absolute/script.sh"}` |
-| Persistent shell | `{target:"ssh:alias",mode:"pty",cmd:"cd /tmp; export CHECK=ready"}` |
-| Official background job | `{target:"ssh:alias",cmd:"long-command",run_in_background:true}` |
+| Register an Agent-local SSH identity (no dialing) | `{target:"ssh:build",ssh:{host:"host",user:"user",key:"/origin/key"}}`; omit `target` for an auto id (`ssh-xxxx`) |
+| Stateless command and stdin over an identity | `{target:"ssh:build",cmd:"cat",stdin:"hello"}` |
+| Stream a local script to fixed `bash -s` | `{target:"ssh:alias",scriptPath:"/absolute/script.sh"}` |
+| Create a persistent shell (tab semantics) | `{target:"ssh:alias:pty",cmd:"cd /tmp; export CHECK=ready"}`; append `:label` (`ssh:alias:pty:build`) to name it |
+| Reuse a persistent shell | `{target:"pty:<id\|label>",cmd:"…"}` |
+| Session card (state + ledger, no command) | `{target:"pty:<id\|label>"}` |
+| Create a BYO PTY from a spawn command | `{spawn:"docker exec -it img bash",target:"pty:build",cmd:"…"}`; later `{target:"pty:build",cmd:"…"}` |
+| Background job (oneshot or PTY) | `{target:"ssh:alias",cmd:"long-command",run_in_background:true}` |
+| Close a PTY session | `{action:"close",target:"pty:<id\|label>",force:true}` |
 | Native CLI copy | `{action:"copy",src:"/absolute/source",dst:"ssh:alias:/absolute/destination",argv:["-p"]}` |
 | Native rsync | `{action:"rsync",src:"/absolute/source/",dst:"ssh:alias:/existing/destination/",argv:["-a","--partial","--dry-run"]}` |
 
-`script` cannot combine with cmd/stdin/spawn/PTY. Direct local command execution is not provided; use native local shell tools. Background jobs are oneshot-only, require the official jobs service/controller, and are read/killed with `job_output`/`job_kill`; they have no default foreground timeout. An explicit timeout still applies. SSH keys/config stay on the origin; BYO identities are not persisted across new/cold Agents. PTY backlog recovery and live probes are not part of this release.
+`mode` no longer exists: append `:pty` to a transport target to create, address a live shell as `pty:<id|label>`. `scriptPath` cannot combine with cmd/stdin/spawn/PTY. Direct local command execution is not provided; use native local shell tools. Background jobs require the official jobs service/controller and are read/killed with `job_output`/`job_kill`; on PTY lanes a background job's jobId is the commandId (a timeout handoff keeps them as separate ledger fields). SSH keys/config stay on the origin; BYO identities are not persisted across new/cold Agents. PTY backlog recovery and live probes are not part of this release.
+
+PTY state is durable and readable: every dispatch returns exit, cwd and `envDelta` (variable names and change markers only — values never leave the endpoint; fetch them yourself if needed). `close` is idempotent (`closed:false, reason:"not-found"|"already-closed-or-reaped"`); a session with a running job refuses close unless `force:true`, which kills the group and reports `killed`. A busy session rejects new commands instead of queueing; open another PTY or use a oneshot. Idle PTYs are reaped after 15 minutes; an Agent holds at most 10 live sessions across connections, and dead sessions do not count. `hub:<m4>:pty` selects the Hub lane's PTY but exposes no session id, label, parallelism or background works there.
 
 Native/PTY output retains at most 4,000,000 UTF-16 units per stream; Hub oneshot retains 4 MiB bytes. Normal returned tails are smaller. Read `outputStats` units and dropped/returned counters rather than treating character counts as bytes. Discarded output is not recoverable after restart.
 
 ## File operations: native CLI semantics
 
-`remote` addresses targets once (`ssh:<name>`, `byossh:<label>`, `docker:<name>`, `incus:<name>`, `hub:<machine>`, local paths) and hands the actual transfer to the native CLI. `argv` is an ordered array of native option tokens — one element = one argv token, appended verbatim before the parsed `src`/`dst`. There is no option whitelist, no shell parsing, and no forced defaults: no hidden `--dry-run`, no forced archive/timeout, no automatic verification. A dry run means passing `--dry-run` yourself; unknown or incompatible options fail in the native CLI and its exit code and stderr come back as-is. Success of a native command is never reported as independently verified — `verified:false` on native copy receipts means exactly that.
+`remote` addresses targets once (`ssh:<name>`, `ssh:<label>` for a BYO identity, `docker:<name>`, `incus:<name>`, `hub:<machine>`, local paths) and hands the actual transfer to the native CLI. `argv` is an ordered array of native option tokens — one element = one argv token, appended verbatim before the parsed `src`/`dst`. There is no option whitelist, no shell parsing, and no forced defaults: no hidden `--dry-run`, no forced archive/timeout, no automatic verification. A dry run means passing `--dry-run` yourself; unknown or incompatible options fail in the native CLI and its exit code and stderr come back as-is. Success of a native command is never reported as independently verified — `verified:false` on native copy receipts means exactly that.
 
 ### copy routes
 
@@ -39,7 +45,7 @@ The native CLIs do not create destination parents or verify results on their own
 
 ### rsync routes
 
-rsync supports SSH/byossh endpoints with at most one local endpoint. Local↔SSH runs `rsync` on the origin with the endpoint's SSH identity wired through `RSYNC_RSH`; an explicit `-e`/`--rsh` in `argv` replaces that wiring per rsync's own rules (the command must then carry its own port/key/config). Nothing else is injected — no archive, no timeout, no dry-run, no remote owner, no `--rsync-path`.
+rsync supports SSH endpoints (native aliases and BYO identities) with at most one local endpoint. Local↔SSH runs `rsync` on the origin with the endpoint's SSH identity wired through `RSYNC_RSH`; an explicit `-e`/`--rsh` in `argv` replaces that wiring per rsync's own rules (the command must then carry its own port/key/config). Nothing else is injected — no archive, no timeout, no dry-run, no remote owner, no `--rsync-path`.
 
 SSH↔SSH prefers the native forwarding route: the destination runs a temporary loopback-only rsync daemon, `ssh -L` brings it to an origin port, `ssh -R` carries it onto the source's loopback, and the source's own native rsync client performs one protocol conversation through the chain. The origin only forwards rsync protocol bytes; the destination's existing file data feeds real delta matching (`--stats` shows Matched data dominating for a small change on a large file). If an endpoint refuses TCP forwarding (`AllowTcpForwarding no`), a standard-stream route would be attempted; on the current OpenSSH/rsync combination (10.2 / 3.4.1) that route reports itself unavailable — the error says so and nothing is copied. rsync never falls back to a full copy or to Python.
 
@@ -51,6 +57,6 @@ File operations require the corresponding CLI on the origin (`scp`, `rsync`, `do
 
 ## One-shot command requirements
 
-One-shot SSH/byossh commands (foreground, background, script and literal stdin) run through ONE native SSH exec: the command executes under bash with a small POSIX wrapper whose TERM/HUP trap kills the command's whole process group, so backgrounded children do not outlive the session teardown. Remote prerequisites: bash (POSIX) — **no Python, no owner/lease protocol, no flock/monotonic clock, no extra sessions**. On normal completion the wrapper's EXIT trap reaps the command's whole process group (backgrounded children included — they neither outlive the call nor hold the channel open), and the exit code passes through verbatim. On timeout/cancellation the local transport dies at once and a dedicated cleanup session reads the pidfile the wrapper left and kills the group (TERM→KILL); sshd delivers no signal to a no-PTY session, so this explicit cleanup is the remote kill path.
+One-shot SSH commands (native alias or BYO identity; foreground, background, scriptPath and literal stdin) run through ONE native SSH exec: the command executes under bash with a small POSIX wrapper whose TERM/HUP trap kills the command's whole process group, so backgrounded children do not outlive the session teardown. Remote prerequisites: bash (POSIX) — **no Python, no owner/lease protocol, no flock/monotonic clock, no extra sessions**. On normal completion the wrapper's EXIT trap reaps the command's whole process group (backgrounded children included — they neither outlive the call nor hold the channel open), and the exit code passes through verbatim. On timeout/cancellation the local transport dies at once and a dedicated cleanup session reads the pidfile the wrapper left and kills the group (TERM→KILL); sshd delivers no signal to a no-PTY session, so this explicit cleanup is the remote kill path.
 
 Docker/Incus one-shots use the same pure-CLI lane (`docker exec` / `incus exec` with the same wrapper); container prerequisites are the container's own bash. PTY paths are unchanged (`ssh -tt bash`, docker via script(1), incus interactive) and never required Python.

package/docs/specs/kernel-provisioning/spec.md

@@ -1,53 +1,25 @@
-# kernel-provisioning Specification
+# Existing Python interpreter discovery
 
-## Purpose
-better-dsh 的 REPL kernel（IPython）供给契约：独占 managed venv（插件包目录内，`kernelEnvDir` 可显式覆盖）、版本锁定（ipykernel 7.3.0 / dill 0.4.1，uv 与 pip 双路径）、三级触发供给（postinstall 加速器 / daemon spin-up 主路径 / 首用 lazy 兜底）全 fail-open 且幂等、供给状态可观测；npm 包不内嵌预建 venv（供给能力随包，供给结果不随包）。
+Updated 2026-10-12 by explicit user correction. This replaces the former iKernel managed-provisioning contract. Execution and recovery are specified in [OMP Python REPL](../omp-python-repl-port/spec.md); consumer behavior is in its [runtime guide](../omp-python-repl-port/runtime-guide.md).
 
 ## Requirements
 
-### Requirement: Exclusive managed kernel venv
+### Existing interpreters only
 
-The plugin SHALL provision its REPL kernel interpreter exclusively inside a managed venv rooted in the plugin's own package directory (web-profile scope in production deployments, `kernelEnvDir` as the explicit override), and SHALL NOT install into, mutate, or depend on the user's global Python environment; kernel probes MUST NOT import user-site modules, and the distributed npm package MUST NOT embed a prebuilt venv (provisioning capability ships, not provisioning results).
+Better SHALL run an existing Python interpreter. It SHALL NOT invoke uv/pip, download Python, create or repair a virtual environment, or place Python environment/cache state in the installed npm package. No CPython implementation or Python3.11 preference is applied. The packaged dill0.4.1 checkpoint helper requires Python >=3.9.
 
-#### Scenario: Venv lives inside the plugin territory
+### Explicit selection
 
-- **WHEN** the plugin is installed into a web profile and the kernel is provisioned
-- **THEN** the venv root is inside the plugin's package directory (or the explicitly configured `kernelEnvDir`), and no file outside that territory is required for kernel operation
+An explicit `python` executable name/path SHALL bypass automatic discovery. Bare `python3` is an explicit executable name, not a provisioning sentinel. Relative paths SHALL resolve against the session workspace and `~/` against the user's home. An unusable explicit selection SHALL report the actual failure without silently substituting another interpreter. Existing explicit virtual environments SHALL receive their activation environment.
 
-#### Scenario: User global environment untouched
+### Automatic discovery
 
-- **WHEN** provisioning runs on a host with an existing global Python installation
-- **THEN** no package is installed into, and no configuration of, the user's global environment is modified
+Without explicit selection, Better SHALL probe an existing active virtual/Conda environment or workspace `.venv`/`venv`, then PATH `python3` and `python`. A broken automatically discovered candidate SHALL permit a working fallback without repair. Resolved executable identity and activation environment SHALL reach the spawned child. One session's project interpreter SHALL NOT be cached as the choice for another workspace.
 
-### Requirement: Robust provisioning with pinned versions
+### Readiness and failure
 
-Provisioning SHALL redirect its tool caches (uv) to a plugin-territory location so read-only home directories cannot block it, SHALL fall back to `python3 -m venv` + ensurepip when `uv` is unavailable, and SHALL install pinned, tested versions of `ipykernel` and `dill` alongside the pinned CPython version; provisioning MUST be idempotent (a complete venv is reused; a partial one is repaired).
+Availability is checked when the session needs its Python child. Plugin mounting SHALL NOT provision an environment. With no working candidate, the error SHALL identify attempted interpreters and explain how to install Python or configure an existing executable. `npm run kernel:check` SHALL perform discovery only, with no installation side effects.
 
-#### Scenario: Read-only home cache does not block
+### Runtime state and migration
 
-- **WHEN** the kernel is provisioned on a host whose `~/.cache` is read-only
-- **THEN** provisioning succeeds using the redirected cache location
-
-#### Scenario: Pinned versions installed
-
-- **WHEN** provisioning creates or repairs the venv
-- **THEN** the installed `ipykernel` and `dill` match the pinned tested versions, verifiable by the kernel probe
-
-### Requirement: Provisioning ladder — install-time, daemon spin-up, first-use
-
-The plugin SHALL provision the kernel through a three-trigger ladder converging on the same managed venv, every trigger fail-open (a failure or suppression at any level degrades to a logged status message and NEVER blocks package installation, daemon startup, or plugin mounting, and never asks the user for approval): (1) an install-time postinstall best-effort step that runs only when the package manager executes build scripts; (2) a daemon spin-up check as the PRIMARY path — when the plugin is brought up on the host plane by the host daemon, it asynchronously verifies the kernel environment and provisions it immediately when absent (uv → `python3 -m venv` → explicit configuration), so an agent session never discovers a missing kernel at first use; (3) first-use lazy provisioning as the final fallback. Provisioning status (provisioning/ready/degraded/failed) SHALL be logged, and failure messages MUST name the available remedies (`npm run kernel:venv`, `kernelAutoInstall`, explicit `python`).
-
-#### Scenario: Daemon spin-up provisions before any agent session
-
-- **WHEN** the host daemon starts and brings the plugin up on the host plane, and the managed venv is absent
-- **THEN** the plugin asynchronously provisions the kernel within the spin-up window without blocking daemon startup or plugin mounting, and a new agent session's first REPL cell finds the kernel already in place
-
-#### Scenario: Suppressed postinstall still reaches a working kernel
-
-- **WHEN** the package manager skips the plugin's postinstall script and the daemon later starts
-- **THEN** the spin-up check provisions the kernel and REPL cells execute, with the install itself never having failed and no approval ever having been requested
-
-#### Scenario: Failure is non-blocking and visible
-
-- **WHEN** provisioning fails on a constrained host at any trigger
-- **THEN** the installation, daemon startup, and plugin mounting all succeed; the surfaced error names the concrete remedy commands/configuration paths
+Checkpoints SHALL remain under the native profile home (or explicitly configured snapshot directory), isolated by profile/session. Old `kernelEnvDir`, `kernelPythonVersion`, `kernelAutoInstall` fields and `kernel:venv` command are removed. Existing package-local `.venv-kernel`/`.uv-cache` files SHALL be left untouched and SHALL NOT be selected automatically. An interpreter/environment change SHALL pass the existing checkpoint compatibility checks and report incompatible recovery explicitly; no user cell is replayed.

package/docs/specs/omp-python-repl-port/runtime-guide.md

@@ -2,12 +2,14 @@
 
 Implementation and acceptance are tracked in the [plan](../../superpowers/plans/2026-10-12-omp-python-repl-port.md). The [spec](spec.md) defines the recovery boundary; this guide explains the consumer contract being implemented.
 
-Better runs a persistent Python child for each DSH session. Node communicates with an unchanged, pinned OMP runner over JSON lines. Better owns tool bindings, cancellation, output mapping and checkpoint management. The runtime requires Python >=3.9; the compatibility managed-environment path may let uv download that interpreter, while an explicit path uses an existing installation. Better ships the Python runner and dill 0.4.1 source. It does not install Jupyter, IPython, ZeroMQ or dill into the consumer's interpreter. OMP's Agent-specific prelude is not exposed as a DSH feature.
+Better runs a persistent Python child for each DSH session. Node communicates with an unchanged, pinned OMP runner over JSON lines. Better owns tool bindings, cancellation, output mapping and checkpoint management. Interpreter discovery reuses an explicitly configured interpreter, otherwise an active/project environment then PATH `python3` or `python`. It probes candidates and falls back from broken automatically discovered environments; it never invokes uv/pip, installs Python or creates a venv. Explicit relative paths and project environments resolve against the session workspace. Python >=3.9 is required by the packaged dill0.4.1 checkpoint helper; no3.11 or CPython implementation is selected. Better ships the Python runner and dill 0.4.1 source. It does not install Jupyter, IPython, ZeroMQ or dill into the consumer's interpreter. OMP's Agent-specific prelude is not exposed as a DSH feature.
 
 Variables, functions, classes and imports remain available across cells while the child lives. Top-level await works; a top-level return is invalid. The final expression supplies the completion value and print supplies logs. Host tools remain callable with `await tool.<name>({...})`. Internal initialization and checkpoint cells do not appear as user results or user scratchpad variables.
 
 `tool.read` forwards to the current DSH native read tool with its usual permissions, scheduling and results. Better supplies the call-site helper required by OMP's compiler without enabling OMP speculative reads. Interactive `input()` is unsupported and returns an actionable error. Output uses the existing text/log/result contract; a nontext-only display produces an explicit MIME notice.
 
+`npm run kernel:check` checks existing interpreter availability without provisioning. Legacy provisioning fields `kernelEnvDir`, `kernelPythonVersion`, `kernelAutoInstall` and the `kernel:venv` command are removed. Old package-local environments/caches are left untouched and are not auto-selected. An interpreter change may make existing checkpoints incompatible; recovery reports that condition explicitly.
+
 ## Checkpoint boundary
 
 In a native DSH profile, checkpoints belong under that profile's resolved DSH home and are isolated by profile and session. An explicitly configured checkpoint directory takes precedence; `snapshotDir: ""` disables persistence and leaves process-local state only. A standalone runtime without a native profile must explicitly choose a checkpoint directory.

package/docs/specs/omp-python-repl-port/spec.md

@@ -59,3 +59,10 @@ Best effort 不应退回普通标准库 `pickle`，否则对 REPL 函数、闭
 5. 资源句柄、网络连接和其他进程副作用始终超出承诺；用户代码应能检测和重建这些资源。
 
 因此，第二阶段的目标是“尽可能恢复模型的 Python scratchpad 变量，并准确报告缺口”，不是恢复整个 Python 进程。是否加这一阶段，不影响先完成 OMP 执行链移植与去除 Jupyter/ZMQ 依赖。
+
+
+## 2026-10-12 interpreter discovery correction
+
+After the0.3.1 release, user rejected retaining the old iKernel-era uv/3.11 provisioning path and package-local venv. The correction reuses an explicitly configured interpreter; otherwise it probes an existing active/project environment and PATH `python3` then `python`. A broken automatic candidate may fall back; a broken explicit selection is reported. Relative paths/project environments belong to the session workspace. No interpreter is downloaded, no uv/pip process is launched, and no venv or cache is created in the installed package. Original OMP/dill resources and checkpoint ownership remain unchanged. Packaged dill0.4.1 has a Python >=3.9 support floor; there is no3.11 or CPython implementation preference.
+
+Legacy provisioning fields and command are removed, replaced by a read-only `kernel:check`. Existing old environment files are left untouched. Interpreter/environment changes may invalidate old checkpoints and must produce an explicit recovery notice. Delivery and target acceptance are recorded in [environment correction report](../../test-reports/2026-10-12-python-environment-discovery.md). This correction has separate test artifacts and does not authorize an npm release.

package/docs/specs/remote-pty-label/spec.md

@@ -1,5 +1,7 @@
 # remote-pty-label Specification
 
+> **Superseded（2026-10-19）**：本 spec 的 `byop:<label>` 入口、`mode` 锁定、`p:<label>` 池键与「同 label 复用」语义已被 [PTY Workbench v2 计划](../../superpowers/plans/2026-10-19-pty-workbench.md) 取代：BYO-PTY 并入 `pty:` selector（`spawn` 在场 = BYO）、`byossh:`/`byop:` 前缀移除、`mode` 字段移除且未知参数不强制拒绝、label 与机器名统一池、id 为 `pty-xxxx` / `ssh-xxxx`。下文保留为历史契约参照。
+
 ## Purpose
 
 `remote` 工具的持久化 BYO-PTY 通道从「`spawn` 命令原文即会话键」改为「`target` 选择器寻址的具名会话」。旧实现的池键就是整条 spawn 文本，于是「同一条命令」与「同一个会话」被绑死：改一个 token 就**静默**新开一个 shell（cwd/env 全丢、零提示），roster 又拿整整一条 shell 命令当会话名。本规格固定新契约——`byop:<label>` 是唯一入口、label 由调用方（模型）自选并因此成为复用入口、`spawn` 降格为该 label 首次创建时的伴生参数——并据此定义创建/复用/冲突三分支、失败面，以及裸名候选表的末位新增项。

package/docs/specs/remote-tool-enhancement/spec.md

@@ -2,6 +2,7 @@
 
 - 日期：2026-10-10（Asia/Hong_Kong）
 - 状态：2026-10-10 user 已审阅并明确授权执行；Task0–7 已独立审阅通过；Task8 完整双包消费者验收进行中，L 实装暴露的 worker/SSH cleanup 缺陷已进入修复验证。用户亲验与发布尚未放行。
+- 0.3.2-b 对齐（2026-10-19）：`script` 已定名 `scriptPath`；`mode` 字段已移除（用 `<transport>:pty[:label]` 创建、`pty:<id|label>` 复用）；`byossh:`/`byop:` 前缀已移除（`ssh`/`spawn` 参数在场即 BYO）。下文旧调用形仅作历史。
 - 输入：[2026-10-09 方向稿](../../10_plans/2026-10-09-remote-tool-optimization-directions.md)及 2026-10-10 会话裁决。
 - 执行计划：[2026-10-10-remote-tool-enhancement.md](../../superpowers/plans/2026-10-10-remote-tool-enhancement.md)。本规格优先于方向稿的冲突条款。
 

package/lib/BrowserWebSocketTransport.js

@@ -0,0 +1,4 @@
+import "./util.js";
+import { t as BrowserWebSocketTransport } from "./BrowserWebSocketTransport2.js";
+
+export { BrowserWebSocketTransport };

package/lib/{BrowserWebSocketTransport-wm99h94r.js → BrowserWebSocketTransport2.js}

@@ -1,4 +1,4 @@
-import { o as debugCatchError } from "./util-BHL_dfV_.js";
+import { o as debugCatchError } from "./util.js";
 
 //#region node_modules/puppeteer-core/lib/puppeteer/common/BrowserWebSocketTransport.js
 /**

package/lib/LaunchOptions.js

@@ -0,0 +1,4 @@
+import "./main.js";
+import { t as convertPuppeteerChannelToBrowsersChannel } from "./LaunchOptions2.js";
+
+export { convertPuppeteerChannelToBrowsersChannel };

package/lib/{LaunchOptions-5eg7E0ye.js → LaunchOptions2.js}

@@ -1,4 +1,4 @@
-import { b as ChromeReleaseChannel } from "./main-BeCgUd20.js";
+import { b as ChromeReleaseChannel } from "./main.js";
 
 //#region node_modules/puppeteer-core/lib/puppeteer/node/LaunchOptions.js
 /**

package/lib/{NodeWebSocketTransport-D9ysYGLM.js → NodeWebSocketTransport.js}

@@ -1,5 +1,5 @@
-import { n as __require, r as __toESM, t as __commonJS } from "./chunk-DQxbwPpZ.js";
-import { D as packageVersion, o as debugCatchError } from "./util-BHL_dfV_.js";
+import { n as __require, r as __toESM, t as __commonJS } from "./chunk.js";
+import { D as packageVersion, o as debugCatchError } from "./util.js";
 
 //#region node_modules/ws/lib/constants.js
 var require_constants = /* @__PURE__ */ __commonJS({ "node_modules/ws/lib/constants.js": ((exports, module) => {

package/lib/NodeWebSocketTransport2.js

@@ -0,0 +1,4 @@
+import "./util.js";
+import { t as NodeWebSocketTransport } from "./NodeWebSocketTransport.js";
+
+export { NodeWebSocketTransport };

package/lib/{bidi-CwabFH07.js → bidi.js}

@@ -1,7 +1,7 @@
-import { n as __require } from "./chunk-DQxbwPpZ.js";
-import { A as stringToTypedArray, G as first, H as delayWhen, K as firstValueFrom, L as combineLatest, M as assert, Q as map, S as timeout, St as debug, Tt as environment, V as defer, W as filter, at as race, b as isString, bt as TouchError, c as evaluationString, d as fromEmitterEvent, g as isDate, gt as ProtocolError, h as getSourceUrlComment, ht as ConnectionClosedError, i as SOURCE_URL_REGEX, k as stringToBase64, lt as switchMap, m as getSourcePuppeteerURLIfAvailable, o as debugCatchError, ot as raceWith, q as from, r as PuppeteerURL, rt as of, s as debugError, u as fromAbortSignal, v as isPlainObject, vt as TargetCloseError, x as parsePDFOptions, xt as UnsupportedOperation, y as isRegExp, yt as TimeoutError } from "./util-BHL_dfV_.js";
-import { $n as Deferred, $t as scriptInjector, Bt as throwIfDetached, Ct as WebWorkerEvent, Dn as DeviceRequestPrompt, Dt as normalizeHeaderValue, Fn as Browser, Hn as DisposableStack, Ht as bindIsolatedHandle, In as WEB_PERMISSION_TO_PROTOCOL_PERMISSION, It as Dialog, Jn as CallbackRegistry, Kn as disposeSymbol, Ln as CDPSession, Lt as Accessibility, Mn as invokeAtMostOnceForArguments, Mt as InterceptResolutionAction, Nn as throwIfDisposed, Nt as STATUS_TEXTS, On as BrowserContext, Ot as SecurityDetails, Pt as handleError, Rt as Frame, St as WebWorker, Ut as JSHandle, Vt as ElementHandle, Zn as isErrorLike, _t as Mouse, an as stringifyFunction, cn as Tracing, dt as ConsoleMessage, en as ARIAQueryHandler, fn as Coverage, gt as Keyboard, ht as TargetType, in as interpolateFunction, jn as inertIfDisposed, jt as HTTPRequest, kn as bubble, kt as HTTPResponse, mn as Page, mt as Target, nn as LazyArg, on as AsyncIterableUtil, sn as FileChooser, un as EmulationManager, vt as MouseButton, wt as Realm, yt as Touchscreen, zn as EventEmitter } from "./index-browser-B-9jm12n.js";
-import "./BrowserWebSocketTransport-wm99h94r.js";
+import { n as __require } from "./chunk.js";
+import { A as stringToTypedArray, G as first, H as delayWhen, K as firstValueFrom, L as combineLatest, M as assert, Q as map, S as timeout, St as debug, Tt as environment, V as defer, W as filter, at as race, b as isString, bt as TouchError, c as evaluationString, d as fromEmitterEvent, g as isDate, gt as ProtocolError, h as getSourceUrlComment, ht as ConnectionClosedError, i as SOURCE_URL_REGEX, k as stringToBase64, lt as switchMap, m as getSourcePuppeteerURLIfAvailable, o as debugCatchError, ot as raceWith, q as from, r as PuppeteerURL, rt as of, s as debugError, u as fromAbortSignal, v as isPlainObject, vt as TargetCloseError, x as parsePDFOptions, xt as UnsupportedOperation, y as isRegExp, yt as TimeoutError } from "./util.js";
+import { $n as Deferred, $t as scriptInjector, Bt as throwIfDetached, Ct as WebWorkerEvent, Dn as DeviceRequestPrompt, Dt as normalizeHeaderValue, Fn as Browser, Hn as DisposableStack, Ht as bindIsolatedHandle, In as WEB_PERMISSION_TO_PROTOCOL_PERMISSION, It as Dialog, Jn as CallbackRegistry, Kn as disposeSymbol, Ln as CDPSession, Lt as Accessibility, Mn as invokeAtMostOnceForArguments, Mt as InterceptResolutionAction, Nn as throwIfDisposed, Nt as STATUS_TEXTS, On as BrowserContext, Ot as SecurityDetails, Pt as handleError, Rt as Frame, St as WebWorker, Ut as JSHandle, Vt as ElementHandle, Zn as isErrorLike, _t as Mouse, an as stringifyFunction, cn as Tracing, dt as ConsoleMessage, en as ARIAQueryHandler, fn as Coverage, gt as Keyboard, ht as TargetType, in as interpolateFunction, jn as inertIfDisposed, jt as HTTPRequest, kn as bubble, kt as HTTPResponse, mn as Page, mt as Target, nn as LazyArg, on as AsyncIterableUtil, sn as FileChooser, un as EmulationManager, vt as MouseButton, wt as Realm, yt as Touchscreen, zn as EventEmitter } from "./index-browser.js";
+import "./BrowserWebSocketTransport2.js";
 
 //#region node_modules/mitt/dist/mitt.mjs
 function mitt_default(n) {

package/lib/client/index.js

@@ -172,6 +172,20 @@ function FailoverRow({ catalog, loadConfig, save, t }) {
 
 //#endregion
 //#region src/mobile/gesture.ts
+/**
+* Whether the mobile adaptation mounts at all (2026-10-18 user ruling):
+* touch-first means the device's PRIMARY input is a finger. A query
+* answering FALSE — a hover-capable or fine primary pointer — decides
+* desktop on its own (a touchscreen laptop keeps desktop behavior); the
+* pair answering true is the standard idiom; and only when the queries
+* are entirely unavailable does `maxTouchPoints` become the honest
+* degrade (every such legacy device is a phone or tablet anyway).
+*/
+function isTouchFirstDevice(input) {
+	if (input.hoverNone === false || input.pointerCoarse === false) return false;
+	if (input.hoverNone === true && input.pointerCoarse === true) return true;
+	return (input.maxTouchPoints ?? 0) > 0;
+}
 /** Resolved defaults — the `1706b81` constants (120 / viewport÷4 / 40 / 1.3)
 * plus the one addition, the velocity gate. A slow text-selection drag runs
 * ~0.13 px/ms; 0.15 px/ms filters those while any comfortable sweep (0.4
@@ -260,6 +274,18 @@ function resolveMobileConfig(pageConfig) {
 
 //#endregion
 //#region src/mobile/client/index.ts
+/**
+* One media query, or `undefined` when the environment has none (old
+* webviews throw or omit `matchMedia`) — the probe then rides the
+* touch-points fallback in {@link isTouchFirstDevice}.
+*/
+function safeMatchMedia(query) {
+	try {
+		return globalThis.matchMedia?.(query) ?? void 0;
+	} catch {
+		return;
+	}
+}
 /** Left sidebar state, live off AppFrame's semantic attribute. */
 function readLeftCollapsed() {
 	return document.querySelector("[data-sidebar-collapsed]") !== null;
@@ -340,17 +366,46 @@ function mobileCss() {
 }
 /**
 * Mount the mobile feature: style injection plus the swipe listeners.
-* Inert unless the host's boot script opted the page in.
+* Inert unless the host's boot script opted the page in AND the device is
+* touch-first (2026-10-18 user ruling). Capability flips (a tablet's
+* primary pointer hardware changing) re-evaluate and mount/unmount the
+* surface live; the media queries answer on every browser since ~2015 and
+* a webview without `matchMedia` degrades to the touch-points probe.
 *
 * @param ctx - client root context.
-* @returns the effect disposer (style tag + listeners removed on unload).
 */
 function setupMobileLayout(ctx) {
 	const pageConfig = globalThis.__DASHR_MOBILE__;
 	const config = resolveMobileConfig(pageConfig);
 	if (!config.enabled) return;
-	const styleTagId = "better-dsh/mobile";
+	const coarseQuery = safeMatchMedia("(pointer: coarse)");
+	const hoverQuery = safeMatchMedia("(hover: none)");
 	ctx.effect(() => {
+		let disposeSurface;
+		const apply$1 = () => {
+			const touchFirst = isTouchFirstDevice({
+				hoverNone: hoverQuery?.matches,
+				pointerCoarse: coarseQuery?.matches,
+				maxTouchPoints: navigator.maxTouchPoints
+			});
+			if (touchFirst && disposeSurface === void 0) disposeSurface = mountTouchSurface();
+			else if (!touchFirst && disposeSurface !== void 0) {
+				disposeSurface();
+				disposeSurface = void 0;
+			}
+		};
+		coarseQuery?.addEventListener("change", apply$1);
+		hoverQuery?.addEventListener("change", apply$1);
+		apply$1();
+		return () => {
+			coarseQuery?.removeEventListener("change", apply$1);
+			hoverQuery?.removeEventListener("change", apply$1);
+			disposeSurface?.();
+		};
+	}, "dashr: mobile layout");
+	/** The style tag + gesture listeners, mounted and disposed as one surface. */
+	function mountTouchSurface() {
+		const styleTagId = "better-dsh/mobile";
 		const tag = document.createElement("style");
 		tag.dataset.plugin = "better-dsh";
 		tag.dataset.pluginCss = styleTagId;
@@ -363,9 +418,7 @@ function setupMobileLayout(ctx) {
 			const onPointerDown = (event) => {
 				start = void 0;
 				const viewport = window.innerWidth;
-				const coarsePointer = window.matchMedia?.("(pointer: coarse)").matches === true;
 				const panels = readPanelState();
-				if (!coarsePointer && !panels.leftCollapsed && !panels.rightOpen) return;
 				if (!admitsSwipeStart(event.clientX, viewport, panels, config)) return;
 				start = {
 					x: event.clientX,
@@ -405,7 +458,7 @@ function setupMobileLayout(ctx) {
 			tag.remove();
 			Promise.resolve(offLayout.dispose());
 		};
-	}, "dashr: mobile layout");
+	}
 }
 
 //#endregion

package/lib/compaction/index.d.ts

@@ -1,4 +1,4 @@
-import { t as Schema } from "../index-DTDXUe6m.js";
+import { t as Schema } from "../index2.js";
 import { Context, Volatile } from "@deepseek-ai/cordis";
 
 //#region src/compaction/config.d.ts

package/lib/compaction/index.js

@@ -1,4 +1,4 @@
-import { t as Schema } from "../lib-C8_jXvwA.js";
+import { t as Schema } from "../lib.js";
 import { Context } from "@deepseek-ai/cordis";
 
 //#region src/compaction/config.ts

package/lib/failover/index.d.ts

@@ -1,4 +1,4 @@
-import { t as Schema } from "../index-DTDXUe6m.js";
+import { t as Schema } from "../index2.js";
 import { Context, Volatile } from "@deepseek-ai/cordis";
 
 //#region src/failover/config.d.ts

package/lib/failover/index.js

@@ -1,4 +1,4 @@
-import { t as Schema } from "../lib-C8_jXvwA.js";
+import { t as Schema } from "../lib.js";
 import { Context } from "@deepseek-ai/cordis";
 import { randomUUID } from "node:crypto";
 import { RetryId } from "@deepseek-ai/dsh-llm-retry";

package/lib/fs-aware/sandbox-plugin.js

@@ -1,4 +1,4 @@
-import { f as UrlSchemesError, t as buildFsLayerResolver } from "../wrap-0VA0uFx8.js";
+import { f as UrlSchemesError, t as buildFsLayerResolver } from "../wrap.js";
 import { Context } from "@deepseek-ai/cordis";
 import { dirname, sep } from "node:path";
 import { stat } from "node:fs/promises";

package/lib/{index-browser-B-9jm12n.js → index-browser.js}

@@ -1,4 +1,4 @@
-import { $ as merge, A as stringToTypedArray, B as defaultIfEmpty, Et as isNode, G as first, I as catchError, K as firstValueFrom, M as assert, N as EMPTY, O as mergeUint8Arrays, P as ReplaySubject, Q as map, R as concat, S as timeout, St as debug, T as withSourcePuppeteerURLIfNone, Tt as environment, U as distinctUntilChanged, V as defer, W as filter, X as ignoreElements, Y as identity, a as UTILITY_WORLD_NAME, at as race, b as isString, bt as TouchError, c as evaluationString, ct as startWith, d as fromEmitterEvent, dt as takeUntil, et as mergeMap, f as getReadableAsTypedArray, ft as tap, gt as ProtocolError, h as getSourceUrlComment, ht as ConnectionClosedError, i as SOURCE_URL_REGEX, it as pipe, j as typedArrayToBase64, k as stringToBase64, l as filterAsync, lt as switchMap, m as getSourcePuppeteerURLIfAvailable, mt as timer, n as NETWORK_IDLE_TIME, nt as noop, o as debugCatchError, ot as raceWith, p as getReadableFromProtocolStream, pt as throwIfEmpty, q as from, r as PuppeteerURL, rt as of, s as debugError, st as retry, t as DEFAULT_VIEWPORT, tt as mergeScan, u as fromAbortSignal, ut as take, vt as TargetCloseError, w as validateDialogType, x as parsePDFOptions, xt as UnsupportedOperation, yt as TimeoutError } from "./util-BHL_dfV_.js";
+import { $ as merge, A as stringToTypedArray, B as defaultIfEmpty, Et as isNode, G as first, I as catchError, K as firstValueFrom, M as assert, N as EMPTY, O as mergeUint8Arrays, P as ReplaySubject, Q as map, R as concat, S as timeout, St as debug, T as withSourcePuppeteerURLIfNone, Tt as environment, U as distinctUntilChanged, V as defer, W as filter, X as ignoreElements, Y as identity, a as UTILITY_WORLD_NAME, at as race, b as isString, bt as TouchError, c as evaluationString, ct as startWith, d as fromEmitterEvent, dt as takeUntil, et as mergeMap, f as getReadableAsTypedArray, ft as tap, gt as ProtocolError, h as getSourceUrlComment, ht as ConnectionClosedError, i as SOURCE_URL_REGEX, it as pipe, j as typedArrayToBase64, k as stringToBase64, l as filterAsync, lt as switchMap, m as getSourcePuppeteerURLIfAvailable, mt as timer, n as NETWORK_IDLE_TIME, nt as noop, o as debugCatchError, ot as raceWith, p as getReadableFromProtocolStream, pt as throwIfEmpty, q as from, r as PuppeteerURL, rt as of, s as debugError, st as retry, t as DEFAULT_VIEWPORT, tt as mergeScan, u as fromAbortSignal, ut as take, vt as TargetCloseError, w as validateDialogType, x as parsePDFOptions, xt as UnsupportedOperation, yt as TimeoutError } from "./util.js";
 
 //#region node_modules/puppeteer-core/lib/puppeteer/util/Deferred.js
 /**
@@ -20792,7 +20792,7 @@ async function _connectToBiDiBrowser(connectionTransport, url, options) {
 	const { bidiConnection, cdpConnection, closeCallback } = await getBiDiConnection(connectionTransport, url, options);
 	return await (await import(
 		/* webpackIgnore: true */
-		"./bidi-CwabFH07.js"
+		"./bidi.js"
 )).BidiBrowser.create({
 		connection: bidiConnection,
 		cdpConnection,
@@ -20815,7 +20815,7 @@ async function _connectToBiDiBrowser(connectionTransport, url, options) {
 async function getBiDiConnection(connectionTransport, url, options) {
 	const BiDi = await import(
 		/* webpackIgnore: true */
-		"./bidi-CwabFH07.js"
+		"./bidi.js"
 );
 	const { slowMo = 0, protocolTimeout, idGenerator = createIncrementalIdGenerator() } = options;
 	const pureBidiConnection = new BiDi.BidiConnection(url, connectionTransport, idGenerator, slowMo, protocolTimeout);
@@ -20845,7 +20845,7 @@ async function getBiDiConnection(connectionTransport, url, options) {
 //#endregion
 //#region node_modules/puppeteer-core/lib/puppeteer/common/BrowserConnector.js
 const getWebSocketTransportClass = async () => {
-	return isNode ? (await import("./NodeWebSocketTransport-BRLjmu2R.js")).NodeWebSocketTransport : (await import("./BrowserWebSocketTransport-D1aFReu_.js")).BrowserWebSocketTransport;
+	return isNode ? (await import("./NodeWebSocketTransport2.js")).NodeWebSocketTransport : (await import("./BrowserWebSocketTransport.js")).BrowserWebSocketTransport;
 };
 /**
 * Users should never call this directly; it's called when calling
@@ -20887,10 +20887,10 @@ async function getConnectionTransport(options) {
 			endpointUrl: connectionURL
 		};
 	} else if (options.channel && isNode) {
-		const { detectBrowserPlatform, resolveDefaultUserDataDir, Browser: Browser$1 } = await import("./main-Dv_UQqG2.js");
+		const { detectBrowserPlatform, resolveDefaultUserDataDir, Browser: Browser$1 } = await import("./main2.js");
 		const platform = detectBrowserPlatform();
 		if (!platform) throw new Error("Could not detect required browser platform");
-		const { convertPuppeteerChannelToBrowsersChannel } = await import("./LaunchOptions-DxQQ0s-A.js");
+		const { convertPuppeteerChannelToBrowsersChannel } = await import("./LaunchOptions.js");
 		const { join } = await import("node:path");
 		const portPath = join(resolveDefaultUserDataDir(Browser$1.CHROME, platform, convertPuppeteerChannelToBrowsersChannel(options.channel)), "DevToolsActivePort");
 		try {

package/lib/index.d.ts

@@ -1,4 +1,4 @@
-import { t as Schema } from "./index-DTDXUe6m.js";
+import { t as Schema } from "./index2.js";
 import { Context, Service } from "@deepseek-ai/cordis";
 import { ToolDefinition, ToolExecutionInput, ToolRunContext, ToolRuntime } from "@deepseek-ai/dsh-tools";
 import { ContentBlock, HarnessError } from "@deepseek-ai/dsh-llm";
@@ -379,7 +379,7 @@ interface ReplRuntimeSurface {
 //#region src/runtime.d.ts
 /** Plugin config: every tunable, changeable from `cordis.yml` (no hardcoded tunables). */
 interface Config$1 {
-  /** Python >=3.9 interpreter. The bare sentinel `python3` (or absent) selects a managed venv under {@link Config.kernelEnvDir}. */
+  /** Existing interpreter path/name; absent discovers active/project environments then PATH. */
   python?: string;
   /** Budget for kernel spawn → ready, in milliseconds. */
   startupTimeoutMs?: number;
@@ -402,12 +402,6 @@ interface Config$1 {
   snapshotDir?: string;
   /** Serialized graph cap in bytes; each over-cap attempt reports the last successful checkpoint. */
   snapshotSizeCapBytes?: number;
-  /** Managed venv directory (used when `python` is absent/`python3`); defaults to `<package>/.venv-kernel`. */
-  kernelEnvDir?: string;
-  /** Preferred CPython version for a managed venv. */
-  kernelPythonVersion?: string;
-  /** Provision a stdlib-only managed venv on first use; default true. */
-  kernelAutoInstall?: boolean;
   username?: string;
 }
 /**
@@ -428,8 +422,6 @@ declare class DashrRuntime extends ReplRuntime {
   private readonly kernels;
   private disposed;
   private readonly transactions;
-  /** Lazily-resolved (and, when managed, provisioned) kernel interpreter. */
-  private kernelEnvPromise;
   constructor(ctx: Context, config: Config$1);
   /**
    * The agentless-default kernel's pid, for lifecycle diagnostics; absent
@@ -480,8 +472,6 @@ declare class DashrRuntime extends ReplRuntime {
   private validateBindings;
   /** Dispatch one kernel-side host request; unknown types and bad payloads become error replies. */
   private dispatchHostRequest;
-  /** Resolve (and provision, when managed) the kernel interpreter once per runtime. */
-  private resolveKernelPython;
   /**
    * Spawn-or-reuse the kernel for one key. The lazy map guarantees one
    * entry is created here and nowhere else, so a key that never runs never