dsh-edge 0.16.0 → 0.17.0-alpha.1

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # last confirmed-consistent state. Both languages carry equal authority.
 # After editing either side, update both and re-record every pair with:
 #   pnpm run doc-pairs -- --write
-README.md: 8b19a725cbebc9e6399e651ead73840ab3aab970
-README.zh.md: 2cd6467a1fd9ebab0c955b3cb39b4c1b7d1774e8
+README.md: 61c8c92943e094a3e111bf006959484d73305eb8
+README.zh.md: 782384c937122aeba4615209290089361d63f035

package/README.md

@@ -152,7 +152,7 @@ This reference separates code that runs natively in Workers, code adapted at an
 | Directory picker | `ctx.directoryPicker` seam with the `-native` OS chooser or the `-browse` filesystem backend, chosen at boot by `dsh-host-directory-picker-auto`, plus the Web browse dialog | Reused with an Edge browse backend | Install the upstream seam and pin the upstream `dsh-client-ui-directory-picker-browse` dialog in the Web roster; Edge answers the `browse` capability from the `/workspace` Computer VFS one level per call, rooted at `/workspace` with the upstream hidden, bound, and failure vocabulary, so the upstream `DirectoryPickerController` serves `directoryPicker/list` and `createDirectory` and refuses the native `pick`. |
 | Conversation file links | `session/openWorkspacePath` hands a clicked path to the Host desktop opener through `dsh-native-command`; `session/canOpenWorkspacePath` gates the affordance | Adapted at the upstream `SessionControllerInternals` seam plus a Web download fallback | Compose `SessionController` with Edge internals so the native probe answers false and an open attempt fails with a readable reason instead of a `child_process` error. The V3 Web client opens file links in its right-sidebar preview. Edge composes the upstream `workspaceFiles` controller over request-scoped VFS reads, including bounded text/byte windows and metadata subscriptions. The legacy `ctx.remote.session.openWorkspacePath` fallback and owner-authenticated `GET /api/workspace/file` download remain available. |
 | Existing Web UI | Runtime-loaded shell and `dsh.client` plugin graph | Reused with generic composition fallbacks | Assemble the upstream shell and supported upstream client bundles as Worker assets. Shared slot-occupancy rules hide actions whose provider is absent; Cloudflare serves ordinary assets directly, while `/`, `/login`, and `/api/*` enter the Worker for owner access control. The assembled asset policy prevents every direct or SPA-fallback shell alias from being framed. |
-| Other tools | Web Search, filesystem editor tools, MCP, skills, workflows, jobs, and subagents | Search, file, goal, skill, and MCP tools ported; workflows not yet ported | Reuse upstream DeepSeek Web Search with its 30-second tool-call timeout. File tools (read/write/edit/read_image) adapted via `EdgeFileSystem` backed by Computer VFS. Goal tools (`ToolGoal`) composed directly with `GoalService` as upstream cordis plugins. Skill tool via `SkillRegistry` + `EdgeSkillProvider` (DO KV-backed); owner CRUD at `GET/PUT/DELETE /api/skills`. MCP client (`dsh-mcp-client`) installed; Streamable HTTP transport only (stdio unavailable on Workers). Configure servers in Settings → DSH Edge → MCP Servers; tools appear as `mcp__<serverName>__<tool>`. Add the remaining tools individually against Worker-compatible capabilities; do not advertise unavailable host behavior. |
+| Other tools | Web Search, filesystem editor tools, MCP, skills, workflows, jobs, and subagents | Search, file, goal, skill, and MCP tools ported; workflow and run_code ported for the isolated build | Reuse upstream DeepSeek Web Search with its 30-second tool-call timeout. The upstream `workflow` tool is offered only by the Dynamic Worker runtime (the isolated, Paid-plan build); the Direct build does not register it. Each run loads its script into its own Dynamic Worker with no outbound network and a 30-second Worker Loader `cpuMs` limit (enforced by the Cloudflare runtime, not by local development), because workerd forbids in-process `eval`/`new Function`/`node:vm`; `agent()`, `phase()`, and `log()` cross an RPC bridge to the Durable Object, which enforces the caps: at most 4 children run at once (below the Workers six-connection limit) and one run starts at most 100 children to bound child-session row writes. The upstream `run_code` tool (`dsh-tools` PTC mode, enabled as `both` alongside the native tools) is offered by the same runtime: each program is type-stripped with sucrase and runs in its own Dynamic Worker with a 30-second `cpuMs` limit and no outbound network; its `tools.*` calls cross an RPC bridge where the Durable Object caps them at 200 per run (each is a nested tool dispatch with its own session events), 256 KiB of arguments, and 2 MiB per result, and nested calls stay approval-gated. File tools (read/write/edit/read_image) adapted via `EdgeFileSystem` backed by Computer VFS. Goal tools (`ToolGoal`) composed directly with `GoalService` as upstream cordis plugins. Skill tool via `SkillRegistry` + `EdgeSkillProvider` (DO KV-backed); owner CRUD at `GET/PUT/DELETE /api/skills`. MCP client (`dsh-mcp-client`) installed; Streamable HTTP transport only (stdio unavailable on Workers). Configure servers in Settings → DSH Edge → MCP Servers; tools appear as `mcp__<serverName>__<tool>`. Add the remaining tools individually against Worker-compatible capabilities; do not advertise unavailable host behavior. |
 | Attachments | Local attachment storage, upstream image references, composer, gallery, lightbox, and provider conversion | Adapted at the native storage seam | Reuse upstream `AttachmentStore`, admission, protocol, authorization, UI, and DeepSeek conversion unchanged. Store immutable PNG/JPEG bytes under their SHA-256 identities in private R2 for new permanent deployments or in a 64 MiB, 512 KiB-chunked DO backend for temporary deployments and owners who select it while upgrading a pre-attachment Worker; session events retain only upstream refs. The first backend is pinned per owner instance so claiming or upgrading cannot strand existing references. |
 | Goal tracking | `GoalService` with create/edit/pause/resume/complete/clear mutations and GoalBar UI | Reused | Install upstream `GoalService` and `ToolGoal` as cordis plugins (direct composition). Browser GoalBar mutations route through `TypertGatewayService` at `/api/goals/<method>`. `SessionProjectionCache` persists goal state across DO restart. |
 | Context compaction | Token metering, automatic compaction, and session title generation | Reused | Install upstream cordis plugins directly. Context compaction, token metering, tool-result pruning, and automatic session title generation run unchanged. |

package/README.zh.md

@@ -152,7 +152,7 @@ curl -b /tmp/dsh-edge-cookie -N -X POST -H 'content-type: application/json' \
 | Directory picker | `ctx.directoryPicker` seam，由 `dsh-host-directory-picker-auto` 在启动时选择 `-native` OS 选择器或 `-browse` 文件系统 backend，加 Web browse 对话框 | 复用并提供 Edge browse backend | 安装上游 seam，并把上游 `dsh-client-ui-directory-picker-browse` 对话框固定进 Web roster；Edge 从 `/workspace` Computer VFS 按每次一层回答 `browse` capability，以 `/workspace` 为根并沿用上游的 hidden、bound 与失败词汇，因此上游 `DirectoryPickerController` 提供 `directoryPicker/list` 与 `createDirectory`，并拒绝原生 `pick`。 |
 | 对话文件链接 | `session/openWorkspacePath` 经 `dsh-native-command` 把点击的路径交给宿主桌面打开器；`session/canOpenWorkspacePath` 决定是否展示该入口 | 在上游 `SessionControllerInternals` seam 适配，加 Web 端下载回退 | 用 Edge internals 组合 `SessionController`，让原生探测返回 false、打开尝试以可读原因失败而不是 `child_process` 错误。V3 Web 客户端在右侧栏预览文件链接。Edge 将上游 `workspaceFiles` 控制器接入请求作用域内的 VFS 读取，支持有界文本/字节分页和元数据订阅。旧版 `ctx.remote.session.openWorkspacePath` 回退以及经 owner 鉴权的 `GET /api/workspace/file` 下载仍然可用。 |
 | Existing Web UI | 运行时加载的 shell 和 `dsh.client` 插件 graph | 复用并采用通用 composition fallback | 把上游 shell 和受支持的上游客户端包组装成 Worker 静态资源；共享的 slot occupancy 规则会隐藏缺少 provider 的 action。Cloudflare 直接提供普通资源，`/`、`/login` 与 `/api/*` 则进入 Worker 执行 owner access control。组装后的 asset policy 会阻止所有直接或 SPA-fallback shell alias 被嵌入 frame。 |
-| Other tools | Web Search、filesystem editor tools、MCP、skills、workflows、jobs 和 subagents | Search、文件、goal、skill 和 MCP 工具已移植；workflows 尚未移植 | 复用上游 DeepSeek Web Search 及其 30 秒 tool-call timeout。文件工具（read/write/edit/read_image）通过 `EdgeFileSystem` 适配 Computer VFS。Goal 工具（`ToolGoal`）作为上游 cordis 插件直接与 `GoalService` 组合。Skill 工具通过 `SkillRegistry` + `EdgeSkillProvider`（DO KV 存储）；owner CRUD 接口 `GET/PUT/DELETE /api/skills`。MCP client（`dsh-mcp-client`）已安装；仅支持 Streamable HTTP transport（Workers 上不可用 stdio）。在 Settings → DSH Edge → MCP Servers 中配置服务器；工具名格式为 `mcp__<serverName>__<tool>`。逐个针对 Worker-compatible capabilities 增加其余工具，不宣称不可用的 host 行为。 |
+| Other tools | Web Search、filesystem editor tools、MCP、skills、workflows、jobs 和 subagents | Search、文件、goal、skill 和 MCP 工具已移植；workflow 与 run_code 已在 isolated 构建中移植 | 复用上游 DeepSeek Web Search 及其 30 秒 tool-call timeout。上游 `workflow` 工具仅由 Dynamic Worker 运行时提供（isolated、Paid 计划构建）；Direct 构建不注册该工具。由于 workerd 禁止在进程内使用 `eval`/`new Function`/`node:vm`，每次运行都会把脚本加载到独立的 Dynamic Worker 中执行，该 Worker 无出站网络，并受 30 秒 Worker Loader `cpuMs` 上限约束（由 Cloudflare 运行时强制执行，本地开发环境不执行）；`agent()`、`phase()`、`log()` 经 RPC 桥回到 Durable Object，由其执行各项上限：同时最多运行 4 个子 agent（低于 Workers 六连接上限），单次运行最多启动 100 个子 agent，以限制子会话的行写入。上游 `run_code` 工具（`dsh-tools` PTC 模式，以 `both` 与原生工具并存）由同一运行时提供：每个程序先用 sucrase 去除类型，再在独立 Dynamic Worker 中运行，受 30 秒 `cpuMs` 上限约束且无出站网络；其中的 `tools.*` 调用经 RPC 桥回到 Durable Object，由其限制为每次运行最多 200 次（每次都是一次写入 session 事件的嵌套工具派发）、参数最多 256 KiB、单次结果最多 2 MiB，嵌套调用仍走审批。文件工具（read/write/edit/read_image）通过 `EdgeFileSystem` 适配 Computer VFS。Goal 工具（`ToolGoal`）作为上游 cordis 插件直接与 `GoalService` 组合。Skill 工具通过 `SkillRegistry` + `EdgeSkillProvider`（DO KV 存储）；owner CRUD 接口 `GET/PUT/DELETE /api/skills`。MCP client（`dsh-mcp-client`）已安装；仅支持 Streamable HTTP transport（Workers 上不可用 stdio）。在 Settings → DSH Edge → MCP Servers 中配置服务器；工具名格式为 `mcp__<serverName>__<tool>`。逐个针对 Worker-compatible capabilities 增加其余工具，不宣称不可用的 host 行为。 |
 | Attachments | 本地 attachment storage、上游 image reference、composer、gallery、lightbox 与 provider conversion | 在原生 storage seam 上适配 | 原样复用上游 `AttachmentStore`、admission、协议、授权、UI 与 DeepSeek conversion。PNG/JPEG 不可变字节按 SHA-256 identity 存入新永久部署的私有 R2，或存入临时部署以及升级旧版 Worker 时由 owner 选择的 64 MiB、按 512 KiB 分块的 DO backend；session event 只保留上游 ref。每个 owner instance 首次选择的 backend 会被固定，认领或升级不会让既有引用失联。 |
 | Goal tracking | `GoalService` 提供 create/edit/pause/resume/complete/clear mutation 与 GoalBar UI | 复用 | 作为 cordis 插件安装上游 `GoalService` 和 `ToolGoal`（直接组合）。浏览器 GoalBar mutation 通过 `TypertGatewayService` 路由到 `/api/goals/<method>`。`SessionProjectionCache` 在 DO 重启后持久化 goal 状态。 |
 | Context compaction | Token 计量、自动压缩和 session 标题生成 | 复用 | 直接安装上游 cordis 插件。上下文压缩、token 计量、工具结果修剪和自动 session 标题生成原样运行。 |

package/THIRD_PARTY_NOTICES.md

@@ -35,7 +35,7 @@ SOFTWARE.
 
 ## Bundled component inventory
 
-The following 583 package versions form the conservative, platform-neutral production closure used to assemble the Web and Worker artifacts in this distribution. Platform-specific build binaries that are not distributed in those artifacts are excluded; tree shaking can omit additional code. The inventory and legal texts are generated during packaging rather than referring recipients to a source checkout. License expressions are SPDX identifiers supplied by each package. Dependencies installed separately by npm remain declared in this package's `package.json`.
+The following 596 package versions form the conservative, platform-neutral production closure used to assemble the Web and Worker artifacts in this distribution. Platform-specific build binaries that are not distributed in those artifacts are excluded; tree shaking can omit additional code. The inventory and legal texts are generated during packaging rather than referring recipients to a source checkout. License expressions are SPDX identifiers supplied by each package. Dependencies installed separately by npm remain declared in this package's `package.json`.
 
 | Component | License |
 | --- | --- |
@@ -302,8 +302,10 @@ The following 583 package versions form the conservative, platform-neutral produ
 | `@jitl/quickjs-wasmfile-release-asyncify@0.32.0` | `MIT` |
 | `@jitl/quickjs-wasmfile-release-sync@0.32.0` | `MIT` |
 | `@joplin/turndown-plugin-gfm@1.0.67` | `MIT` |
+| `@jridgewell/gen-mapping@0.3.13` | `MIT` |
 | `@jridgewell/resolve-uri@3.1.2` | `MIT` |
 | `@jridgewell/sourcemap-codec@1.5.5` | `MIT` |
+| `@jridgewell/trace-mapping@0.3.31` | `MIT` |
 | `@jridgewell/trace-mapping@0.3.9` | `MIT` |
 | `@mixmark-io/domino@2.2.0` | `BSD-2-Clause` |
 | `@modelcontextprotocol/sdk@1.30.0` | `MIT` |
@@ -360,6 +362,7 @@ The following 583 package versions form the conservative, platform-neutral produ
 | `agent-base@7.1.4` | `MIT` |
 | `ajv@8.20.0` | `MIT` |
 | `ajv-formats@3.0.1` | `MIT` |
+| `any-promise@1.3.0` | `MIT` |
 | `anynum@1.0.1` | `MIT` |
 | `argparse@2.0.1` | `Python-2.0` |
 | `balanced-match@4.0.4` | `MIT` |
@@ -381,6 +384,7 @@ The following 583 package versions form the conservative, platform-neutral produ
 | `chokidar@5.0.0` | `MIT` |
 | `chownr@1.1.4` | `ISC` |
 | `commander@15.0.0` | `MIT` |
+| `commander@4.1.1` | `MIT` |
 | `commander@6.2.1` | `MIT` |
 | `compare-versions@6.1.1` | `MIT` |
 | `compressible@2.0.18` | `MIT` |
@@ -430,6 +434,7 @@ The following 583 package versions form the conservative, platform-neutral produ
 | `fast-uri@3.1.7` | `BSD-3-Clause` |
 | `fast-xml-builder@1.3.1` | `MIT` |
 | `fast-xml-parser@5.11.0` | `MIT` |
+| `fdir@6.5.0` | `MIT` |
 | `fetch-blob@3.2.0` | `MIT` |
 | `fflate@0.8.3` | `MIT` |
 | `figures@6.1.0` | `MIT` |
@@ -489,6 +494,7 @@ The following 583 package versions form the conservative, platform-neutral produ
 | `jws@4.0.1` | `MIT` |
 | `kleur@4.1.5` | `MIT` |
 | `koffi@3.1.6` | `MIT` |
+| `lines-and-columns@1.2.4` | `MIT` |
 | `long@5.3.2` | `Apache-2.0` |
 | `math-intrinsics@1.1.0` | `MIT` |
 | `media-typer@1.1.1` | `MIT` |
@@ -503,6 +509,7 @@ The following 583 package versions form the conservative, platform-neutral produ
 | `modern-tar@0.7.7` | `MIT` |
 | `ms@2.0.0` | `MIT` |
 | `ms@2.1.3` | `MIT` |
+| `mz@2.7.0` | `MIT` |
 | `napi-build-utils@2.0.0` | `MIT` |
 | `negotiator@0.6.4` | `MIT` |
 | `negotiator@1.1.0` | `MIT` |
@@ -535,6 +542,7 @@ The following 583 package versions form the conservative, platform-neutral produ
 | `pathe@2.0.3` | `MIT` |
 | `picocolors@1.1.1` | `ISC` |
 | `picomatch@4.0.7` | `MIT` |
+| `pirates@4.0.7` | `MIT` |
 | `pkce-challenge@5.0.1` | `MIT` |
 | `powershell-utils@0.1.0` | `MIT` |
 | `powershell-utils@0.2.0` | `MIT` |
@@ -586,12 +594,17 @@ The following 583 package versions form the conservative, platform-neutral produ
 | `strip-json-comments@2.0.1` | `MIT` |
 | `strnum@2.4.2` | `MIT` |
 | `strtok3@10.3.5` | `MIT` |
+| `sucrase@3.35.1` | `MIT` |
 | `supports-color@10.2.2` | `MIT` |
 | `tar-fs@2.1.5` | `MIT` |
 | `tar-stream@2.2.0` | `MIT` |
+| `thenify@3.3.1` | `MIT` |
+| `thenify-all@1.6.0` | `MIT` |
+| `tinyglobby@0.2.17` | `MIT` |
 | `toidentifier@1.0.1` | `MIT` |
 | `token-types@6.1.2` | `MIT` |
 | `ts-algebra@2.0.0` | `MIT` |
+| `ts-interface-checker@0.1.13` | `Apache-2.0` |
 | `tslib@2.8.1` | `0BSD` |
 | `tunnel-agent@0.6.0` | `Apache-2.0` |
 | `turndown@7.2.4` | `MIT` |
@@ -766,6 +779,36 @@ OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 ```
 
+### License/notice 0371d7e49a54
+
+Applies to:
+
+- `thenify@3.3.1` (`LICENSE`)
+
+```text
+The MIT License (MIT)
+
+Copyright (c) 2014-2016 Jonathan Ong me@jongleberry.com and contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
 ### License/notice 04acffac8ee6
 
 Applies to:
@@ -985,6 +1028,36 @@ ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
 IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 ```
 
+### License/notice 0ccfcc479458
+
+Applies to:
+
+- `mz@2.7.0` (`LICENSE`)
+
+```text
+The MIT License (MIT)
+
+Copyright (c) 2014-2016 Jonathan Ong me@jongleberry.com and Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
 ### License/notice 0e8d2550baea
 
 Applies to:
@@ -1268,6 +1341,52 @@ NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 ```
 
+### License/notice 15e7786c7e68
+
+Applies to:
+
+- `fdir@6.5.0` (`LICENSE`)
+
+```text
+Copyright 2023 Abdullah Atta
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+```
+
+### License/notice 1b31e7ac2b89
+
+Applies to:
+
+- `sucrase@3.35.1` (`LICENSE`)
+
+```text
+The MIT License (MIT)
+
+Copyright (c) 2012-2018 various contributors (see AUTHORS)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
 ### License/notice 1d660eff8965
 
 Applies to:
@@ -2916,6 +3035,36 @@ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
 WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 ```
 
+### License/notice 4918b99deb04
+
+Applies to:
+
+- `tinyglobby@0.2.17` (`LICENSE`)
+
+```text
+MIT License
+
+Copyright (c) 2024 Madeline Gurriarán
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
 ### License/notice 49e71b973753
 
 Applies to:
@@ -3165,6 +3314,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 Applies to:
 
 - `commander@15.0.0` (`LICENSE`)
+- `commander@4.1.1` (`LICENSE`)
 - `commander@6.2.1` (`LICENSE`)
 
 ```text
@@ -4351,6 +4501,7 @@ Applies to:
 - `@aws-crypto/sha256-js@5.2.0` (`LICENSE`)
 - `@aws-crypto/util@5.2.0` (`LICENSE`)
 - `detect-libc@2.1.2` (`LICENSE`)
+- `ts-interface-checker@0.1.13` (`LICENSE`)
 
 ```text
 Apache License
@@ -5244,6 +5395,34 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
+### License/notice 7b3e0db83c00
+
+Applies to:
+
+- `any-promise@1.3.0` (`LICENSE`)
+
+```text
+Copyright (C) 2014-2016 Kevin Beaty
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
 ### License/notice 7bc07978a66d
 
 Applies to:
@@ -6498,6 +6677,36 @@ MIT License
     SOFTWARE
 ```
 
+### License/notice 8ecd0fb4cd2c
+
+Applies to:
+
+- `lines-and-columns@1.2.4` (`LICENSE`)
+
+```text
+The MIT License (MIT)
+
+Copyright (c) 2015 Brian Donovan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
 ### License/notice 8f08c824b2bb
 
 Applies to:
@@ -6686,7 +6895,9 @@ SOFTWARE.
 
 Applies to:
 
+- `@jridgewell/gen-mapping@0.3.13` (`LICENSE`)
 - `@jridgewell/sourcemap-codec@1.5.5` (`LICENSE`)
+- `@jridgewell/trace-mapping@0.3.31` (`LICENSE`)
 
 ```text
 Copyright 2024 Justin Ridgewell <justin@ridgewell.name>
@@ -8422,6 +8633,36 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
+### License/notice c0c5f371c09e
+
+Applies to:
+
+- `pirates@4.0.7` (`LICENSE`)
+
+```text
+MIT License
+
+Copyright (c) 2016-2018 Ari Porad
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
 ### License/notice c216320ffa9b
 
 Applies to:
@@ -9121,6 +9362,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 Applies to:
 
 - `ee-first@1.1.1` (`LICENSE`)
+- `thenify-all@1.6.0` (`LICENSE`)
 
 ```text
 The MIT License (MIT)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-edge",
-  "version": "0.16.0",
+  "version": "0.17.0-alpha.1",
   "description": "Your DeepSeek Harness, anywhere — deploy a persistent personal coding agent to Cloudflare Workers in one command",
   "author": "pawaca",
   "license": "MIT",
@@ -70,6 +70,7 @@
     "@deepseek-ai/dsh-attachment": "0.1.5-rc.2",
     "@deepseek-ai/dsh-brand": "0.1.5-rc.2",
     "@deepseek-ai/dsh-client-store": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-code-runtime": "0.1.5-rc.2",
     "@deepseek-ai/dsh-commands": "0.1.5-rc.2",
     "@deepseek-ai/dsh-compaction": "0.1.5-rc.2",
     "@deepseek-ai/dsh-compaction-basic": "0.1.5-rc.2",
@@ -127,6 +128,7 @@
     "@deepseek-ai/dsh-tool-skill": "0.1.5-rc.2",
     "@deepseek-ai/dsh-tool-subagent": "0.1.5-rc.2",
     "@deepseek-ai/dsh-tool-web": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tool-workflow": "0.1.5-rc.2",
     "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
     "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2",
     "@deepseek-ai/dsh-typert-registry": "0.1.5-rc.2",
@@ -136,14 +138,17 @@
     "@deepseek-ai/dsh-web": "0.1.5-rc.2",
     "@deepseek-ai/dsh-web-fetch-http": "0.1.5-rc.2",
     "@deepseek-ai/dsh-web-search-deepseek": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-workflow": "0.1.5-rc.2",
     "@deepseek-ai/dsh-workspace": "0.1.5-rc.2",
     "@deepseek-ai/schemastery": "3.18.2",
     "@mixmark-io/domino": "2.2.0",
     "@modelcontextprotocol/sdk": "1.30.0",
+    "acorn": "8.18.0",
     "fast-png": "8.0.0",
     "jpeg-js": "0.4.4",
     "just-bash": "3.4.2",
     "playwright": "^1.49.0",
+    "sucrase": "3.35.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.8",
     "ws": "^8.21.0"

package/scripts/activation.mjs

@@ -1,5 +1,6 @@
 import { setTimeout as sleep } from 'node:timers/promises'
 import edgePackage from '../package.json' with { type: 'json' }
+import { isRuntimeMode, RUNTIME_MODES } from './runtime-providers.mjs'
 
 export const ACTIVATION_WAIT_MS = 45_000
 export const ACTIVATION_REQUEST_TIMEOUT_MS = 4_000
@@ -21,7 +22,7 @@ export async function observePublicActivation({
   sleepImpl = sleep,
   waitMs = ACTIVATION_WAIT_MS,
 } = {}) {
-  if (mode !== 'direct' && mode !== 'isolated') throw new Error('A runtime mode is required.')
+  if (!isRuntimeMode(mode)) throw new Error('A runtime mode is required.')
   if (!Number.isFinite(waitMs) || waitMs < 0) throw new Error('Activation wait must be non-negative.')
   if (!Number.isFinite(requestTimeoutMs) || requestTimeoutMs <= 0) {
     throw new Error('Activation request timeout must be positive.')
@@ -33,7 +34,7 @@ export async function observePublicActivation({
   const expected = {
     workerVersionId: versionId,
     deploymentId: `dsh-edge@${edgePackage.version}/${mode}`,
-    shell: mode === 'direct' ? 'just-bash-direct' : 'just-bash-isolated',
+    shell: RUNTIME_MODES[mode].expectedShell,
   }
   const startedAt = now()
   const deadline = startedAt + waitMs

package/scripts/cli.mjs

@@ -12,6 +12,7 @@ import {
   InstallerOutputError,
   installEdge,
 } from './install.mjs'
+import { runtimeModeChoices } from './runtime-providers.mjs'
 
 const INTERRUPT_EXIT_CODES = new Map([
   ['SIGHUP', 129],
@@ -93,18 +94,7 @@ export function createInstallerUi(
         message: 'Choose a runtime',
         signal,
         initialValue: 'direct',
-        options: [
-          {
-            value: 'direct',
-            label: 'Free — Direct Shell',
-            hint: 'recommended; runs on Workers Free',
-          },
-          {
-            value: 'isolated',
-            label: 'Isolated — Dynamic Worker',
-            hint: 'requires Workers Paid (starting at $5/month)',
-          },
-        ],
+        options: runtimeModeChoices(),
       })))
     },
     async selectAccount(choices) {

package/scripts/install.d.mts

@@ -1,4 +1,7 @@
-export type RuntimeMode = 'direct' | 'isolated'
+import type { RuntimeMode } from './runtime-providers.mjs'
+
+export type { RuntimeMode }
+export { RUNTIME_MODES } from './runtime-providers.mjs'
 export type InstallerCommand = 'install' | 'upgrade'
 export type AttachmentStorage = 'private-r2' | 'temporary-do'
 
@@ -77,11 +80,6 @@ export interface InstallResult {
 
 export const DEFAULT_WORKER_NAME: string
 export const LOGIN_PROFILE: string
-export const RUNTIME_MODES: Readonly<Record<RuntimeMode, Readonly<{
-  environment: string
-  expectedShell: string
-  label: string
-}>>>
 export class InstallCancelledError extends Error {}
 export class InstallerOutputError extends Error {
   readonly stream: 'stderr' | 'stdout'

package/scripts/install.mjs

@@ -8,22 +8,12 @@ import { setTimeout as sleep } from 'node:timers/promises'
 import { fileURLToPath } from 'node:url'
 import { execa } from 'execa'
 import { writePrebuiltModeWranglerConfig } from './wrangler-config.mjs'
+import { isRuntimeMode, RUNTIME_MODES } from './runtime-providers.mjs'
+
+export { RUNTIME_MODES }
 
 export const DEFAULT_WORKER_NAME = 'dsh-edge'
 export const LOGIN_PROFILE = 'dsh-edge-install'
-export const RUNTIME_MODES = Object.freeze({
-  direct: Object.freeze({
-    environment: '',
-    expectedShell: 'just-bash-direct',
-    label: 'Free — Direct Shell',
-  }),
-  isolated: Object.freeze({
-    environment: 'isolated',
-    expectedShell: 'just-bash-isolated',
-    label: 'Isolated — Dynamic Worker',
-  }),
-})
-
 const appDirectory = fileURLToPath(new URL('..', import.meta.url))
 const require = createRequire(import.meta.url)
 const WRANGLER_CLI = require.resolve('wrangler')
@@ -163,7 +153,7 @@ class R2SubscriptionUnavailableError extends Error {
 export function accountChoices(mode, accounts, command = 'install') {
   requireRuntimeMode(mode)
   const choices = []
-  if (mode === 'direct' && command === 'install') {
+  if (!RUNTIME_MODES[mode].paid && command === 'install') {
     choices.push({
       value: 'temporary',
       label: 'Temporary account — no Cloudflare login',
@@ -340,7 +330,7 @@ export function wranglerDeployArgs({
   temporary = false,
 }) {
   requireRuntimeMode(mode)
-  if (temporary && mode !== 'direct') {
+  if (temporary && RUNTIME_MODES[mode].paid) {
     throw new Error('Temporary accounts support only the Free direct runtime.')
   }
   const args = [
@@ -564,7 +554,7 @@ export async function installEdge({
     if (temporary && command === 'upgrade') {
       throw new Error('Temporary accounts cannot be upgraded before they are claimed.')
     }
-    if (temporary && mode !== 'direct') {
+    if (temporary && RUNTIME_MODES[mode].paid) {
       throw new Error('Temporary accounts support only the Free direct runtime.')
     }
     const account = temporary
@@ -646,7 +636,7 @@ export async function installEdge({
       modeLabel: RUNTIME_MODES[mode].label,
       accountLabel: temporary ? 'Temporary account' : account.name,
       workerName,
-      paid: mode === 'isolated',
+      paid: RUNTIME_MODES[mode].paid,
       temporary,
       attachmentStorage,
     })
@@ -1261,7 +1251,7 @@ function pickEnvironment(environment, keys) {
 }
 
 function requireRuntimeMode(mode) {
-  if (!Object.hasOwn(RUNTIME_MODES, mode)) {
+  if (!isRuntimeMode(mode)) {
     throw new Error(`Unsupported runtime mode: ${String(mode)}`)
   }
 }
@@ -1329,7 +1319,7 @@ function formatDeployFailure(mode, result) {
       : `Cloudflare did not accept the Worker upload${code === undefined ? '' : ` (code ${code})`}: ${firstError}`
   }
   const failure = `${detail} Run the command again with --verbose to inspect Wrangler output.`
-  if (mode !== 'isolated') return failure
+  if (RUNTIME_MODES[mode]?.paid !== true) return failure
   return `${failure}\nThe isolated runtime requires the Workers Paid plan (starting at $5/month). `
     + 'Enable Workers Paid for this account or install the Free direct runtime.'
 }

package/scripts/runtime-providers.d.mts

@@ -0,0 +1,20 @@
+export type RuntimeMode = 'direct' | 'isolated'
+export type RuntimeProviderId = 'direct' | 'dynamic-worker'
+export type RuntimeCapability = 'bash' | 'coding' | 'subprocess'
+
+export const RUNTIME_PROVIDERS: Readonly<Record<RuntimeProviderId, Readonly<{
+  id: RuntimeProviderId
+  capabilities: readonly RuntimeCapability[]
+  plan: 'free' | 'paid'
+  shell: 'just-bash-direct' | 'just-bash-isolated'
+}>>>
+export const RUNTIME_MODES: Readonly<Record<RuntimeMode, Readonly<{
+  environment: string
+  expectedShell: 'just-bash-direct' | 'just-bash-isolated'
+  label: string
+  hint: string
+  paid: boolean
+  providers: readonly RuntimeProviderId[]
+}>>>
+export function runtimeModeChoices(): Array<{ value: RuntimeMode; label: string; hint: string }>
+export function isRuntimeMode(mode: unknown): mode is RuntimeMode