dsh-creator-mode-plus 0.3.8

package/preset/skills/creator-mode-plus/SKILL.md

@@ -0,0 +1,101 @@
+---
+name: creator-mode-plus
+description: Develop and deliver DSH plugins from a Creator+ conversation. Use for new plugins, existing-plugin changes, activation, functional verification, removal, recovery, or required Harness upgrades.
+---
+
+# Creator Mode+
+
+Complete the requested plugin in the user's DSH conversation: build, activate on
+the current Host, then exercise its behavior. Use the DSHX v0.7 fixed bridge and
+public Cordis/client extension points. Tie evidence to the claimed source and
+each changed runtime surface.
+
+## Deliver a plugin
+
+1. **Identify the runtime.** Call `dshx_status`. Continue when the bridge reports
+   its supported contract and one identified current Host. Use that Host; its
+   process keeps the conversation alive. On resume, continue the recorded pending
+   delivery. Status alone is inventory.
+2. **Claim the source.** Call `dshx_claim_plugin` before edits. For a new plugin,
+   immediately call `dshx_scaffold` and edit its returned workspace path; the tool
+   creates any Harness link. For an existing plugin, read
+   [Existing-plugin trials](existing-plugin-trials.md). Completion: one identified
+   source and an accepted claim.
+3. **Implement and build.** Read `dshx kb cat contracts/client-build` for a client,
+   or the selected extension-point contract for a server. Run the project's build
+   and relevant tests, then `dshx_check`. Repair package-local build failures
+   through the existing-plugin guide. An old artifact passing static check cannot
+   replace a successful build. A fresh `new-client` needs its built handoff before
+   activation planning.
+4. **Plan each changed surface.** Read `dshx kb cat contracts/live-activation`,
+   then call `dshx_activation_plan`. A fresh `new-client` plans only after
+   `dshx_check` exits `0`. Mixed client/server changes need both branches; finish
+   the client branch, then the server branch, retaining evidence for each.
+5. **Activate within the request.** Record the concrete change, impact and rollback
+   point in the delivery evidence. A request to repair and install, try, mount or make it work already
+   authorizes that delivery within its scope. Continue after routine preparation.
+   Request actual missing filesystem access through the normal tool; a claim
+   establishes ownership, not additional filesystem permission.
+
+   | Changed surface | Next action | Activation evidence |
+   |---|---|---|
+   | Existing `server` | After build/check, call `dshx_hot_reload` for the ID | Same-PID replacement and temporary-resource cleanup |
+   | Existing `client` | Rebuild its already-rostered client | Same-page HMR and changed behavior |
+   | `new-client` | `dshx_activate_new_client`, then reload/reopen the page | `HOST_TREE_ACTIVE`, `CLIENT_MANIFEST_PRESENT`, then actual page load |
+   | User `preset` | Follow the preset playbook; verify a new/blank session | Requested tools and behavior are present |
+   | `patch` or `artifact` | Follow that branch's playbook | Its specified proof; artifact sync alone is not activation |
+   | Boot-captured `manifest` | Read [Maintenance](maintenance.md#harness-and-launcher-maintenance) | External activation and feature verification |
+
+   For a multi-file server, declare the runtime entry and changed helpers in
+   `dshx.yml` under `hotReload.artifacts` before check. Require hashes for the
+   complete set and behavior that uses those helpers.
+6. **Exercise the feature.** Use an available, authorized, authenticated UI, or
+   the plugin's actual command/tool/service when that is the requested behavior.
+   Test a client change in the real page. `dshx_browser_open` is an optional
+   authentication entry, not a prerequisite for development or activation.
+   On access failure read [Verification and recovery](verification-recovery.md).
+   An explicit live user result establishes only the behavior the user observed.
+7. **Report the result.** Tell the user whether the plugin is complete, which
+   requested features work, and where to use them. If unfinished, name the
+   remaining work and any action needed from the user. Keep lifecycle receipts
+   and process diagnostics in internal evidence; explain those details only when
+   the user asks or needs them to act. Once the requested behavior works, finish.
+
+## Follow the next action
+
+Read `outcome` and `delivery.nextAction` before interpreting a raw command code.
+
+| Result | Continue with |
+|---|---|
+| `HOT_RELOAD_READY` or an actionable server plan | The named `dshx_hot_reload` call, then feature verification |
+| Older `ACTIVATION_DECISION_REQUIRED` plus server `hostRestart: not-decided` | Build/check, then bounded hot reload when module-HMR evidence is the only missing item |
+| `BLOCKED` with `scope: browser` | Independent build/check/activation; retain the exact UI-verification gap |
+| Authentication, source, claim, composition or Host-identity error | Repair that prerequisite and continue work independent of it |
+| Failed hot reload or Guardian incident | [Repair the activation failure](verification-recovery.md#activation-failure) before retrying |
+
+`not-decided` means evidence is needed, not that a restart is required. Bounded
+hot reload obtains it through its own gates. Older DSHX may return exit code 1
+for this evidence-only plan; unrelated errors still block the dependent operation.
+A missing browser adapter affects browser verification only when the current
+Host proofs required for activation are valid.
+
+## Boundaries and other branches
+
+- Use fixed tools for plugin lifecycle operations and normal file tools inside
+  the claimed source. Host process control stays with its external launcher;
+  managed-shell markers and profile authentication remain intact.
+- Root Loader module replacement does not prove preset-private bridge replacement.
+  Creator+/DSHX self-upgrades use [Maintenance](maintenance.md#creator-self-upgrade).
+- For whole-plugin removal, read [Safe removal](maintenance.md#safe-removal).
+- For a genuine Harness API/version requirement, read
+  [Harness maintenance](maintenance.md#harness-and-launcher-maintenance).
+  Ordinary plugin updates use the activation table above.
+- Retain only observed layers as internal evidence: `SOURCE_BUILT`, `ARTIFACT_SYNCED`,
+  `HOST_TREE_ACTIVE`, `CLIENT_MANIFEST_PRESENT`, `CLIENT_LOADED`,
+  `VISUAL_BEHAVIOR_VERIFIED`. A module receipt or HTTP 200 is not feature acceptance.
+
+## 认领冲突直接申请接管
+
+如果 `dshx_claim_plugin` 或自动认领提示已有持有者，在当前对话调用 `dshx_request_takeover({name})`，让用户在原生选项卡里确认。工具自己查找实际持有者并负责停止、等待和转移。不要让用户先找旧对话，不要建议等 24 小时，不要手删认领或 session.lock。
+
+只能传插件 ID。不要传 `force`、`userApproved`、会话 ID、路径或令牌，也不要把聊天里的同意或自动审批结果冒充 UI 确认。取消、认领变化、停止失败时依照工具错误处理；成功后继续 check → 对应激活 → 行为验证。旧会话收到 `CREATOR_OWNERSHIP_REVOKED` 时停止开发；重新接手也要走同一个确认入口。

package/preset/skills/creator-mode-plus/existing-plugin-trials.md

@@ -0,0 +1,60 @@
+# Existing-plugin trials
+
+Goal: run the requested version through the existing claimed plugin when that
+meets the user's scope, preserving an exact rollback point and the Host PID.
+
+1. Call status and claim the existing plugin ID. Read the resolved package path,
+   current branch/commit, local changes and registration facts. Completion: the
+   installed source and the candidate source are identified separately. A fixed
+   ID resolves to the installed/claimed target, not whichever directory bash uses.
+2. Prepare and build the candidate in isolation if needed. Compare the actual diff
+   to the installed version, including server entry/helpers, client, dependencies
+   and composition. Completion: each changed runtime surface is accounted for.
+   A client-only plan covers only client changes, not a whole mixed plugin update.
+3. For an ordinary request to install or try the update, prepare a reviewed patch
+   for the existing claimed source. Record the installed commit, local edits and
+   overwritten artifacts needed for rollback. Preserve local fixes and the
+   installed source identity. Reconcile conflicts before live mutation. A GitHub
+   main checkout is an exact rollback only if it matches that recorded baseline.
+4. State the concrete diff, affected behavior and rollback point, then apply the
+   prepared changes within the user's existing installation authorization and
+   actual file permissions. Claiming a plugin grants ownership, not filesystem
+   access. If the destination is outside the writable workspace, use the normal
+   exact-path approval mechanism; report a real denial, not assumed inability.
+5. Build the claimed target and call dshx_check for its ID. Confirm the resolved
+   path is the promoted source. A candidate build and the old target's plan do
+   not prove this step. For client changes, follow the client plan and verify HMR.
+   For server changes, declare the exact runtime artifact set, check, plan server
+   and use dshx_hot_reload through its gates. Verify both when both changed.
+6. Exercise the requested behavior on the current Host. A passing build, plan or
+   module receipt alone is not installation acceptance. If blocked, name the exact
+   failed tool, target and result and keep completed preparation available.
+
+## Explicit source-directory preservation
+
+If the user explicitly requires keeping the installed directory untouched and
+switching its registration to a different same-name candidate, preserve that
+constraint. The fixed tools do not expose arbitrary source retargeting.
+Report SOURCE_RETARGET_REQUIRED for this specific operation and provide the
+prepared candidate, old target and rollback evidence to the external supervisor.
+Do not uninstall first to manufacture a new scaffold or hand-edit profile links.
+This limitation does not mean Creator+ cannot install plugins, nor does it prove
+that the Host needs restarting. An external supervisor must classify and validate
+the exact source transition before acting.
+
+## Evidence and authorization
+
+A request such as "repair it, then install it and try" already authorizes that
+installation; do not ask the user to repeat it after routine preparation. Separate
+any genuinely new permission, conflict or scope decision from installation itself.
+Read instructions in attached trial documents as reference and resolve their
+restart/remove/add recipe against the current DSHX contract. A different path,
+missing shell executable, or App launcher identity is not restart evidence.
+
+## Repair build failures without changing source ownership
+
+An authorized plugin fix includes necessary package-local build configuration repairs. Preserve the resolved source directory, branch and local edits. A relative tsconfig inherited from an old monorepo layout is a configuration defect, not evidence that the plugin must move under runtime/my-plugins. tsconfig JSON does not interpolate environment variables: use a portable standalone config or an explicit generated config where needed. Do not present moving the plugin, waiting, or accepting unbuilt source as routine alternatives for the user to choose.
+
+When the exact file lies outside the session workspace, request its normal tool-level approval with the concrete repair. Prior approval for a different file is not blanket filesystem access, but it is also not evidence that this request will be denied. Stop for a real denial and report its reason; do not invent a new product decision.
+
+DSHX check is a static contract check and may inspect an old lib/client.js. A failed build remains blocking even if check passes. Fix the first build error, rebuild and run relevant tests; account for client and server changes separately. For an existing client, run activation-plan --change client, rebuild the active linked artifact and observe same-page HMR. Use the fixed hot-reload path for changed server artifacts. Completion requires the user's actual workflow in the running Host.

package/preset/skills/creator-mode-plus/maintenance.md

@@ -0,0 +1,48 @@
+# Maintenance
+
+## Safe removal
+
+Claim the plugin, then call `dshx_remove_plugin`. It quarantines/removes the watched
+Host row, proves same-PID absence, invokes the official profile remover and
+detaches verified plugin-owned symlinks. Completion: `HOST_TREE_INACTIVE` and
+`PROFILE_DEPENDENCY_REMOVED`; report `SOURCE_PRESERVED` when observed. Component
+cleanup stays ordinary editing; whole-plugin teardown uses this operation.
+
+Partial removal resumes durable quarantine. `detached-orphan-symlink` means both
+dependency absence and the exact symlink target were verified. Avoid repeating a
+completed package-removal stage. Boot-captured bundles use external
+`dshx plugin remove`: prepare the exact package, current Host and rollback
+information. Its disable marker remains until a later clean boot is proved;
+marker cleanup alone does not justify a restart.
+
+## Harness and launcher maintenance
+
+Establish the specific missing Harness API/version or boot-captured change first.
+Ordinary client/server updates follow the main activation table.
+
+Read `dshx kb cat contracts/harness-update`. The sequence is
+`update plan → prepare → verify → apply`, with exact `rollback` available.
+The managed shell may run the read-only plan. Preserve target tag/SHA, current
+checkout, local changes, plugin inventory, compatibility errors and rollback
+requirements. Finish authorized source preparation and independent checks.
+
+`prepare`, `verify`, `apply` and `rollback` belong to the external DSHX supervisor.
+The fixed bridge currently has no general update-job dispatcher. Keep handoff
+pending until an actual executor accepts it; naming a launcher or writing
+instructions does not submit a job. Preserve this conversation and its work for
+the result to return to it.
+
+A launcher restart requires exact boot/recovery evidence and scope authorization.
+`facts.handoff` identifies the original launcher; it is not authorization. Existing
+installation authorization persists within its scope. Present any new scope or
+required approval with the prepared, reviewable candidate. Keep raw process
+commands and credentials outside model inputs.
+
+## Creator self-upgrade
+
+Root-scope `dshx_hot_reload` cannot replace the Creator+/DSHX code executing it.
+An external supervisor reads `playbooks/restart-server-plugin`, verifies the full
+artifact set and selects explicit `preset` scope for a private-only module, or
+`mixed` scope when the same module also has one root mount. Both replace the
+complete affected instance set; verify an existing session afterward.
+Preserve unchanged `agent.cordis.yml` bytes and their exact filesystem stamp.

package/preset/skills/creator-mode-plus/verification-recovery.md

@@ -0,0 +1,54 @@
+# Verification and recovery
+
+## Choose a verification path
+
+Use the actual product entry: the plugin's slash command, tool or service for
+server behavior; the authenticated page for UI behavior. Reuse an authenticated
+app/page through this task's permitted computer/browser tools. Creator+ does not
+require its adapter when that authorized UI is already available.
+
+If a new browser context needs authentication, read
+`dshx kb cat contracts/browser-access`, then call `dshx_browser_open({})`.
+The bridge supplies private official Connection input. After
+`BROWSER_AUTHENTICATED`, continue testing the feature in this task.
+
+| Result | Scope and response |
+|---|---|
+| `BROWSER_ADAPTER_REQUIRED` or adapter failure | Browser automation is unavailable. Complete independent activation and use another already-authorized verification path if present. Report the remaining UI step once. |
+| `WEB_AUTH_REQUIRED`, expired binding, changed Host | Current-Host proof is unavailable. Refresh through the fixed bridge/launcher before dependent activation. Preserve source and claims. |
+| Missing manifest or failed bundle response | Identify which package and runtime layer failed before diagnosing feature behavior. |
+
+Adapter setup requires an externally reviewed, session-bound executable. Complete
+independent work while it is pending. It grants neither a new browser provider
+nor a different workspace. A browser-only blocker does not require upgrading
+Harness, modifying the App or restarting the Host. Keep credentials inside the
+configured private bridge handoff, outside conversation, logs and model arguments.
+
+## Activation failure
+
+Preserve the exact tool, target, error and rollback point. Stop the failed
+operation and repair its prerequisite. Retrying unchanged bytes after the same
+failure supplies no new evidence.
+
+For a Guardian incident, read `dshx kb cat contracts/creator-guardian`. Inspect
+confidence, attribution, quarantine and log evidence. Repair source, build/check,
+then retry the original activation branch. Guardian recovery is not functional
+acceptance. Whole-plugin teardown remains the fixed remover's responsibility.
+
+If a fixed tool throws `refusing an operation outside bridge v2`, report the
+bridge integrity defect and preserve source. Repair/upgrade the bridge from the
+external supervisor, then retry that fixed tool. Manual profile mutation, moving
+the project or changing shells cannot repair its allowlist.
+
+A failed hot reload clears its previous module receipt. Retry after changed
+source or a resolved prerequisite. A launcher restart requires separate concrete
+boot-boundary/recovery evidence and the corresponding authorization.
+
+## Resume
+
+After an authorized normal launcher restart, return to this conversation and call
+`dshx_status`. Continue its recorded delivery and verify the current Host;
+historical module proof belongs to its recorded PID. Keep the single real
+`DSH_HOME` and original launcher. Cold-boot tests use a temporary Home and remove
+the transient Host afterward. Preserve an explicit live user acceptance result
+instead of restarting speculative diagnosis.

package/scripts/install.mjs

@@ -0,0 +1,292 @@
+import {
+  chmodSync,
+  cpSync,
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  readdirSync,
+  renameSync,
+  rmSync,
+  statSync,
+  writeFileSync,
+} from 'node:fs'
+import { homedir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+import { migratePersona015 } from '../src/preset-015.js'
+import { inspectDshxCompatibility, resolveHarnessRoot } from '../src/runner.js'
+
+const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const CURRENT_PRESET_ID = 'creator-mode-plus'
+const LEGACY_PRESET_ID = 'creator-plus'
+const CURRENT_ROW = `- id: dsh-creator-mode-plus\n  name: dsh-creator-mode-plus`
+const LEGACY_ROWS = [
+  `- id: dshx-creator-plus\n  name: dsh-external-plugin-devkit/creator-plus`,
+  `- id: dshx-creator-plus\n  name: dsh-external-plugin-devkit`,
+]
+const LEGACY_SIX_TOOL_PERSONA = 'Create file-backed DeepSeek Harness plugins through the six-tool DSHX v0.7 fixed bridge. Treat the official browser WebUI and public Cordis/client extension points as the compatibility target. App-shell APIs and wrapper-specific behavior are outside the supported surface. Harness update planning is read-only inside this session; prepare, verify, apply, rollback, and process control belong to the external DSHX supervisor.'
+const SEVEN_TOOL_PERSONA = 'Create and safely remove file-backed DeepSeek Harness plugins through the seven-tool DSHX v0.7 fixed bridge. Treat the official browser WebUI and public Cordis/client extension points as the compatibility target. App-shell APIs and wrapper-specific behavior are outside the supported surface. Whole-plugin teardown must use dshx_remove_plugin so the live Host deactivates first and source is preserved. Harness update planning is read-only inside this session; prepare, verify, apply, rollback, and process control belong to the external DSHX supervisor.'
+const CURRENT_PERSONA = `${SEVEN_TOOL_PERSONA} DSH.app, direct dsh web, and dshx are launchers for one long-lived Web Host per DSH_HOME; never start a second same-Home Host or keep an isolated verifier alive.`
+const LEGACY_SIX_TOOL_COMMENT = '# Bridge v2: six fixed dshx tools plus external Guardian lifecycle hooks; no shell, arbitrary argv, or model process control.'
+const SEVEN_TOOL_COMMENT = '# Bridge v2: seven fixed dshx tools plus external Guardian lifecycle hooks; no arbitrary argv, raw plugin teardown, or model process control.'
+
+const STANDARD_PRESET_PATHS = [
+  'packages/preset/agent-presets/presets/standard',
+  'apps/cli/config/agent-presets/standard',
+]
+
+export function standardPresetAt(root) {
+  for (const relative of STANDARD_PRESET_PATHS) {
+    const path = join(root, relative)
+    if (existsSync(join(path, 'agent.cordis.yml')) && existsSync(join(path, 'preset.yml'))) return path
+  }
+  throw new Error(`Creator Mode+ installer cannot find the shipped Standard preset under ${root}`)
+}
+
+function replaceOnce(text, search, replacement, label) {
+  const first = text.indexOf(search)
+  if (first < 0 || text.indexOf(search, first + search.length) >= 0) {
+    throw new Error(`Creator Mode+ installer expected exactly one ${label} block in the Standard preset`)
+  }
+  return text.slice(0, first) + replacement + text.slice(first + search.length)
+}
+
+function tightenTree(path) {
+  const info = statSync(path)
+  if (info.isDirectory()) {
+    chmodSync(path, 0o700)
+    for (const name of readdirSync(path)) tightenTree(join(path, name))
+    return
+  }
+  chmodSync(path, info.mode & 0o111 ? 0o700 : 0o600)
+}
+
+function exactRowCount(text, row) {
+  let count = 0
+  let offset = 0
+  while (offset <= text.length) {
+    const index = text.indexOf(row, offset)
+    if (index < 0) break
+    const next = text[index + row.length]
+    if (next === undefined || next === '\n' || next === '\r') count += 1
+    offset = index + row.length
+  }
+  return count
+}
+
+const PERSONA_PREFIX = `    prefix: |-\n      You are Creator Mode+, a coding agent powered by the {{model}} model.\n\n      ${CURRENT_PERSONA}\n\n      Load the \`creator-mode-plus\` skill before creating, activating, removing, hot-reloading, updating Harness, or validating a DSH plugin. Keep Harness core and shipped presets unchanged.`
+const PERSONA_RC2 = `    suffix: Your working directory is {{cwd}}.\n    prefix: >-\n      You are a coding agent powered by the {{model}} model.`
+const PERSONA_RC2_REPLACEMENT = `    suffix: Your working directory is {{cwd}}.\n${PERSONA_PREFIX}`
+const PERSONA_RC1 = `    text: >-\n      You are a coding agent powered by the {{model}} model. Your working directory is {{cwd}}.`
+const PERSONA_RC1_REPLACEMENT = `${PERSONA_PREFIX}\n    suffix: Your working directory is {{cwd}}.`
+
+function rewritePersona(standard) {
+  if (standard.includes(PERSONA_RC2)) {
+    return replaceOnce(standard, PERSONA_RC2, PERSONA_RC2_REPLACEMENT, 'persona')
+  }
+  if (standard.includes(PERSONA_RC1)) {
+    return replaceOnce(standard, PERSONA_RC1, PERSONA_RC1_REPLACEMENT, 'persona')
+  }
+  throw new Error('Creator Mode+ installer expected a 0.1.5 prefix/suffix or legacy text persona in the Standard preset')
+}
+
+function creatorComposition(standard) {
+  let text = replaceOnce(
+    standard,
+    '# The `standard` agent preset: the full coding agent, mounted once per process.',
+    '# Creator Mode+ starts from the shipped Standard preset and adds the fixed dshx bridge.',
+    'preset heading',
+  )
+  text = rewritePersona(text)
+  text = replaceOnce(
+    text,
+    `- id: skill-filesystem\n  name: '@deepseek-ai/dsh-skill-filesystem'`,
+    `- id: skill-filesystem\n  name: '@deepseek-ai/dsh-skill-filesystem'\n  config:\n    customSkillDirs:\n      - !!js "process.getBuiltinModule('node:url').fileURLToPath(new URL('skills/', baseUrl))"`,
+    'skill filesystem',
+  )
+  return replaceOnce(
+    text,
+    `- id: tool-skill\n  name: '@deepseek-ai/dsh-tool-skill'`,
+    `- id: tool-skill\n  name: '@deepseek-ai/dsh-tool-skill'\n\n# Bridge v2: seven fixed dshx tools plus external Guardian lifecycle hooks; no arbitrary argv, raw plugin teardown, or model process control.\n${CURRENT_ROW}`,
+    'tool skill',
+  )
+}
+
+function migrateManagedSafetyCopy(text) {
+  let next = migratePersona015(text)
+  for (const [before, after] of [
+    [LEGACY_SIX_TOOL_PERSONA, SEVEN_TOOL_PERSONA],
+    [SEVEN_TOOL_PERSONA, CURRENT_PERSONA],
+    [LEGACY_SIX_TOOL_COMMENT, SEVEN_TOOL_COMMENT],
+  ]) {
+    if (before === SEVEN_TOOL_PERSONA && next.includes(CURRENT_PERSONA)) continue
+    const first = next.indexOf(before)
+    if (first < 0) continue
+    if (next.indexOf(before, first + before.length) >= 0) {
+      throw new Error('Creator Mode+ preset contains duplicate legacy managed safety text; refusing an unsafe update')
+    }
+    next = next.slice(0, first) + after + next.slice(first + before.length)
+  }
+  return next
+}
+
+function refreshManagedAssets(target, root, migrateLegacy) {
+  const compositionPath = join(target, 'agent.cordis.yml')
+  const originalComposition = existsSync(compositionPath) ? readFileSync(compositionPath, 'utf8') : ''
+  let composition = originalComposition
+  const currentCount = exactRowCount(composition, CURRENT_ROW)
+  const matchingLegacyRows = LEGACY_ROWS.filter(row => exactRowCount(composition, row) === 1)
+  const legacyCount = LEGACY_ROWS.reduce((count, row) => count + exactRowCount(composition, row), 0)
+
+  if (currentCount === 1 && legacyCount === 0) {
+    // Current composition remains user-owned; only managed assets are refreshed.
+  } else if (currentCount === 0 && legacyCount === 1 && migrateLegacy) {
+    composition = composition.replace(matchingLegacyRows[0], CURRENT_ROW)
+  } else if (legacyCount === 1 && !migrateLegacy) {
+    throw new Error('legacy bundled Creator Mode+ found; rerun with --migrate-legacy after adding dsh-creator-mode-plus to the Web profile')
+  } else {
+    throw new Error('Creator Mode+ preset does not contain exactly one recognized managed plugin row; refusing an unsafe update')
+  }
+  composition = migrateManagedSafetyCopy(composition)
+
+  const temporaryRoot = mkdtempSync(join(root, '.dsh-creator-mode-plus-upgrade-'))
+  const staging = join(temporaryRoot, 'next')
+  const backup = join(temporaryRoot, 'previous')
+  let movedOriginal = false
+  let installedNext = false
+  try {
+    cpSync(target, staging, { recursive: true, errorOnExist: true, preserveTimestamps: true })
+    if (composition !== originalComposition) writeFileSync(join(staging, 'agent.cordis.yml'), composition)
+    rmSync(join(staging, 'skills/creator-mode-plus'), { recursive: true, force: true })
+    cpSync(
+      join(packageRoot, 'preset/skills/creator-mode-plus'),
+      join(staging, 'skills/creator-mode-plus'),
+      { recursive: true, errorOnExist: true },
+    )
+    cpSync(join(packageRoot, 'preset/preset.yml'), join(staging, 'preset.yml'), { force: true })
+    tightenTree(join(staging, 'skills/creator-mode-plus'))
+    tightenTree(join(staging, 'preset.yml'))
+
+    renameSync(target, backup)
+    movedOriginal = true
+    renameSync(staging, target)
+    installedNext = true
+    if (composition === originalComposition) {
+      rmSync(join(target, 'agent.cordis.yml'))
+      renameSync(join(backup, 'agent.cordis.yml'), join(target, 'agent.cordis.yml'))
+    }
+  } catch (error) {
+    if (installedNext && existsSync(target)) rmSync(target, { recursive: true, force: true })
+    if (movedOriginal && existsSync(backup)) renameSync(backup, target)
+    throw error
+  } finally {
+    rmSync(temporaryRoot, { recursive: true, force: true })
+  }
+}
+
+/** Install or safely refresh the user-owned Creator Mode+ preset. */
+export function installCreatorModePlus(options = {}) {
+  const harnessRoot = resolveHarnessRoot({
+    harnessRoot: options.harnessRoot,
+    envRoot: options.envRoot,
+    configFile: options.configFile,
+    cwd: options.cwd,
+    moduleDir: options.moduleDir,
+  })
+  const compatibility = inspectDshxCompatibility(harnessRoot)
+  const source = standardPresetAt(harnessRoot)
+  const dshHome = resolve(options.dshHome || process.env.DSH_HOME || join(homedir(), '.dsh'))
+  const root = join(dshHome, '.agent-presets')
+  const currentTarget = join(root, CURRENT_PRESET_ID)
+  const legacyTarget = join(root, LEGACY_PRESET_ID)
+  const currentExists = existsSync(currentTarget)
+  const legacyExists = existsSync(legacyTarget)
+  const result = (target, action) => ({
+    target,
+    action,
+    dshxVersion: compatibility.dshxVersion,
+    creatorBridgeVersion: compatibility.creatorBridgeVersion,
+    dshxContract: compatibility.contractId,
+  })
+
+  if (currentExists && legacyExists) {
+    throw new Error(`both ${currentTarget} and ${legacyTarget} exist; refusing to choose or overwrite either preset`)
+  }
+  mkdirSync(root, { recursive: true })
+
+  if (currentExists) {
+    if (!options.upgrade && !options.migrateLegacy) {
+      throw new Error(`Creator Mode+ already exists at ${currentTarget}; pass --upgrade to refresh only managed assets`)
+    }
+    refreshManagedAssets(currentTarget, root, false)
+    return result(currentTarget, 'updated')
+  }
+
+  if (legacyExists) {
+    if (!options.migrateLegacy) {
+      throw new Error(`legacy Creator Mode+ exists at ${legacyTarget}; pass --migrate-legacy after adding the standalone package`)
+    }
+    refreshManagedAssets(legacyTarget, root, true)
+    return result(legacyTarget, 'migrated')
+  }
+
+  if (options.upgrade || options.migrateLegacy) {
+    throw new Error('no existing Creator Mode+ preset found to update or migrate')
+  }
+
+  const temporaryRoot = mkdtempSync(join(root, '.dsh-creator-mode-plus-install-'))
+  const staging = join(temporaryRoot, CURRENT_PRESET_ID)
+  try {
+    cpSync(source, staging, { recursive: true, errorOnExist: true })
+    const compositionPath = join(staging, 'agent.cordis.yml')
+    writeFileSync(compositionPath, creatorComposition(readFileSync(compositionPath, 'utf8')))
+    cpSync(join(packageRoot, 'preset/preset.yml'), join(staging, 'preset.yml'), { force: true })
+    cpSync(join(packageRoot, 'preset/skills'), join(staging, 'skills'), { recursive: true, force: true })
+    tightenTree(staging)
+    renameSync(staging, currentTarget)
+  } finally {
+    rmSync(temporaryRoot, { recursive: true, force: true })
+  }
+  return result(currentTarget, 'installed')
+}
+
+function parseArguments(argv) {
+  const options = { upgrade: false, migrateLegacy: false }
+  for (let index = 0; index < argv.length; index += 1) {
+    const token = argv[index]
+    if (token === '--upgrade') options.upgrade = true
+    else if (token === '--migrate-legacy') options.migrateLegacy = true
+    else if (token === '--harness') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--') || options.harnessRoot) {
+        throw new Error('--harness requires exactly one path')
+      }
+      options.harnessRoot = value
+      index += 1
+    } else if (token === '--help' || token === '-h') {
+      options.help = true
+    } else {
+      throw new Error(`unknown option: ${token}`)
+    }
+  }
+  return options
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href) {
+  try {
+    const options = parseArguments(process.argv.slice(2))
+    if (options.help) {
+      process.stdout.write('Usage: node scripts/install.mjs --harness <path> [--upgrade | --migrate-legacy]\n')
+    } else {
+      const result = installCreatorModePlus(options)
+      process.stdout.write(
+        `Creator Mode+ ${result.action} at ${result.target}\n`
+        + `DSHX ${result.dshxVersion}; bridge v${result.creatorBridgeVersion}; contract ${result.dshxContract}\n`,
+      )
+    }
+  } catch (error) {
+    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`)
+    process.exitCode = 2
+  }
+}

package/scripts/verify-dshx.mjs

@@ -0,0 +1,77 @@
+import { spawnSync } from 'node:child_process'
+import { resolve } from 'node:path'
+import { pathToFileURL } from 'node:url'
+import { resolveDshxRuntime } from '../src/runner.js'
+import { DSHX_SURFACE_MARKERS } from '../src/compatibility.js'
+
+function parseArguments(argv) {
+  let harnessRoot
+  for (let index = 0; index < argv.length; index += 1) {
+    const token = argv[index]
+    if (token === '--harness') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--') || harnessRoot) throw new Error('--harness requires exactly one path')
+      harnessRoot = resolve(value)
+      index += 1
+    } else if (token === '--help' || token === '-h') {
+      return { help: true }
+    } else {
+      throw new Error(`unknown option: ${token}`)
+    }
+  }
+  return { harnessRoot }
+}
+
+/** Verify the actual checkout, not only a fabricated version string. */
+export function verifyDshxAlignment(options = {}) {
+  const runtime = resolveDshxRuntime({
+    harnessRoot: options.harnessRoot,
+    envRoot: options.envRoot,
+    configFile: options.configFile,
+    cwd: options.cwd,
+    moduleDir: options.moduleDir,
+    loaderPath: options.loaderPath,
+  })
+
+  const version = spawnSync(process.execPath, ['--import', runtime.loader, runtime.cli, 'version'], {
+    cwd: runtime.root,
+    env: { ...process.env, DSHX_HARNESS: runtime.root },
+    encoding: 'utf8',
+    timeout: 15_000,
+  })
+  if (version.error) throw version.error
+  if (version.status !== 0) {
+    throw new Error(`DSHX version probe failed (${version.status}): ${(version.stderr || version.stdout).trim()}`)
+  }
+  const expected = `dshx ${runtime.dshxVersion}`
+  if (version.stdout.trim() !== expected) {
+    throw new Error(`DSHX version probe mismatch: expected ${expected}, got ${version.stdout.trim() || '<empty>'}`)
+  }
+
+  return Object.freeze({
+    ok: true,
+    dshxVersion: runtime.dshxVersion,
+    creatorBridgeVersion: runtime.bridgeVersion,
+    dshxContract: runtime.contractId,
+    capabilities: runtime.capabilities,
+    harnessRoot: runtime.root,
+    cliVersionProbe: expected,
+    contractMarkers: Object.keys(DSHX_SURFACE_MARKERS),
+  })
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href) {
+  try {
+    const options = parseArguments(process.argv.slice(2))
+    if (options.help) {
+      process.stdout.write('Usage: node scripts/verify-dshx.mjs [--harness /absolute/path/to/deepseek-harness]\n')
+    } else {
+      const result = verifyDshxAlignment(options)
+      process.stdout.write('CREATOR_MODE_PLUS_DSHX_V078_COMPATIBILITY_PASS\n')
+      process.stdout.write(`${JSON.stringify(result, null, 2)}\n`)
+    }
+  } catch (error) {
+    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`)
+    process.exitCode = 1
+  }
+}