dsh-edge 0.24.0 → 0.26.0-alpha.1

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # last confirmed-consistent state. Both languages carry equal authority.
 # After editing either side, update both and re-record every pair with:
 #   pnpm run doc-pairs -- --write
-README.md: efb4b53db167097078b8f4877d69025cc3b90bcf
-README.zh.md: a16df51c6e92cf0f2a7de50aa98099d98084be00
+README.md: 9a90840708b0550751ddd08934ef278e98b85067
+README.zh.md: d5903302c32ad467b52b23f05bb75bbb14c3e438

package/README.md

@@ -140,7 +140,7 @@ This reference separates code that runs natively in Workers, code adapted at an
 | --- | --- | --- | --- |
 | DeepSeek transport | Fetch, SSE parsing, wire translation, retry metadata | Reused | Construct the upstream `DeepSeekAdapter` per request. `nodejs_compat` supplies its compatible Node APIs. |
 | Provider attribution | Package version loaded with Node `createRequire` | Reused after portability fix | Import package metadata statically so bundlers preserve the same version source without requiring `import.meta.url` at runtime. |
-| LLM protocol | DSH messages, content blocks, stream chunks, tool calls, usage, and finish reasons | Reused | Let upstream `LlmRuntime` and `ReactLoopAgent` assemble, stream, and log the model exchange. |
+| LLM protocol | DSH messages, content blocks, stream chunks, tool calls, usage, and finish reasons | Reused | Let upstream `LlmRuntime` and `ReactLoopAgent` assemble, stream, and log the model exchange. DeepSeek is served by `dsh-llm-deepseek-api-key` (`llm-deepseek`). Other providers are added on the Settings → Models page as upstream does it, through `dsh-llm-pi-ai` (`llm-pi-ai`): OpenAI chat completions, OpenAI responses, or Anthropic messages, any HTTP(S) Base URL without credentials, a query, or a fragment (OpenRouter, Cloudflare Workers AI or AI Gateway, a self-hosted gateway), and model discovery from the endpoint. A saved route serves turns without a restart and can be picked in the model menu, as a new-session default, and for subagents. Providers that sign in through a local login or read local credential files (GitHub Copilot, OpenAI Codex, and Amazon Bedrock or Google Vertex through local credentials) are not offered. |
 | Agent loop | Cordis-composed `ReactLoopAgent` with hooks, guards, sessions, and tools | Reused | Create and cold-resume agents through `AgentRegistry`. Context compaction, token metering, tool-result pruning, automatic session title generation, the repeated-tool-call reminder (after 3, 5, and 8 identical consecutive calls), model-request retry (a rate limit, server error, timeout, transport error, or empty response is retried up to five times within the turn, with 0.5–10 s backoff or the provider's `Retry-After`), and durability checkpoints (the session log is stored before each model request, each top-level tool call, and each step) run as upstream cordis plugins. The upstream `/compact` command (`dsh-command-compact`) compacts the session's history on request. |
 | Bash tool | Node subprocess, sandbox, terminal, and job services | Adapted at the native tool seam | Register an upstream `ToolDefinition`, but execute its body through the configured Computer workspace backend and just-bash. The default direct backend runs inside the owner Durable Object with hardened interpreter limits and no network command; adding a `LOADER` binding selects Computer's isolated Worker Shell backend. Native tool cancellation sends `SIGINT` through the Computer execution handle. Deployment configuration supplies an explicit default timeout and caller-selectable ceiling, while `timedOut` reports the deadline independently from exit and cancellation status. Native binaries, background processes, PTYs, and arbitrary Linux behavior are unavailable. |
 | Workspace filesystem | Local filesystem services and host paths | Adapted | Store `/workspace` in the owner's SQLite-backed Durable Object VFS. |
@@ -210,6 +210,8 @@ A focused failure test proves that post-enqueue durability failure blocks model
 
 `DEEPSEEK_API_KEY` may be set as a Worker secret at deployment or entered later through the Settings → Models page. The Edge credential provider checks Durable Object KV first, then falls back to the Worker environment variable; resolved values remain request-scoped and are never written to session events or responses. Surrounding whitespace is removed; a blank value is unconfigured.
 
+An API key for another provider is entered on the same Models page, which stores it under the credential name the provider's route names (for example `OPENROUTER_API_KEY`) in Durable Object KV. These keys are not read from Worker variables: only `DEEPSEEK_API_KEY` keeps that fallback, for deployments from before the Models page. A route's extra headers are stored in the settings document in plain text, so only headers that never carry a secret are accepted: `HTTP-Referer`, `Referer`, `X-Title`, `OpenAI-Organization`, `OpenAI-Project`, and `anthropic-beta`. A gateway that needs a second credential header, such as an authenticated Cloudflare AI Gateway's `cf-aig-authorization`, cannot be configured yet. A route's key name may not be one that belongs to DeepSeek or another Edge feature (`DEEPSEEK_*`, `MCP_TOKEN_*`, `DSH_EDGE_*`), so the deployment's DeepSeek key is never sent to another endpoint. Every route needs its own key name: without one pi-ai would look for a key in the process environment, where Workers expose the deployment's secrets.
+
 | Variable | Purpose and validation |
 | --- | --- |
 | `DEEPSEEK_BASE_URL` | Anthropic-compatible Messages endpoint. Defaults to `https://api.deepseek.com/anthropic`. DeepSeek's former OpenAI-compatible root (`https://api.deepseek.com`, `/v1`, or `/beta`), here or saved as the Models page Base URL, is moved to that default on start; a 404 from another endpoint keeps its message and adds that the endpoint may not serve the Messages API and where to change it. Must be HTTP(S) without URL userinfo. The browser projection omits query and fragment components that may carry gateway credentials. |
@@ -252,7 +254,7 @@ Direct mode is lighter isolation than a separate Worker; do not expose the singl
 - Isolated preserves that shell core and replaces the unreachable Direct backend with a fail-closed module. Each artifact therefore carries only its selected command runtime.
 - The installer generates a private mode-specific config, points it at the selected artifact, and uploads with `no_bundle`. The user's machine does not rebuild dsh-edge or resolve Harness packages into a new Worker.
 - Container mode deploys the isolated artifact with `docker.io/pawaca/dsh-edge-computer:<version>`, which the release workflow builds from `container/Dockerfile` and pushes once per version before npm publication. Installing it needs no local Docker; `pnpm dev:container` and `pnpm test:container` build the Dockerfile locally and do.
-- CI starts the Direct artifact from an installed tarball and rejects gzip output above 900 KiB, preserving headroom below the 1 MiB anonymous temporary-account limit.
+- CI starts the Direct artifact from an installed tarball. Bundling rejects a Worker above Cloudflare's 64 MiB uncompressed limit (Cloudflare has no compressed-size limit, temporary accounts included), and CI profiles each artifact's startup against Cloudflare's 1 s startup limit.
 
 ### Install and upgrade
 
@@ -304,7 +306,7 @@ The installer asks in this order: account, Worker name, then what to change. Eve
 - If upload succeeds but handoff fails, a recovery card prints the active owner key and all known URLs before the command exits unsuccessfully.
 - Installation uploads directly through Wrangler; it does not create or bind a GitHub repository, Cloudflare Builds project, or source-build pipeline.
 
-Contributors working from a checkout can reproduce the two release artifacts locally with `pnpm --filter dsh-edge bundle:direct` and `pnpm --filter dsh-edge bundle:isolated`. The first command also enforces the compressed-size budget.
+Contributors working from a checkout can reproduce the two release artifacts locally with `pnpm --filter dsh-edge bundle:direct` and `pnpm --filter dsh-edge bundle:isolated`. Both commands enforce Cloudflare's 64 MiB uncompressed Worker size limit (Cloudflare has no compressed-size limit), and `pnpm --filter dsh-edge check:startup` profiles the promoted artifacts' startup against Cloudflare's 1 s startup limit.
 
 Contributors can replay the complete Free temporary-account journey without a key or network call. This example runs the shipped bin, real prompts, Wrangler subprocess, structured deployment-output parsing, public-activation observation, and final handoff while replacing the external Cloudflare boundaries:
 

package/README.zh.md

@@ -140,7 +140,7 @@ curl -b /tmp/dsh-edge-cookie -N -X POST -H 'content-type: application/json' \
 | --- | --- | --- | --- |
 | DeepSeek transport | Fetch、SSE 解析、wire translation 和 retry metadata | 复用 | 每个请求构造一个上游 `DeepSeekAdapter`；其兼容的 Node API 由 `nodejs_compat` 提供。 |
 | Provider attribution | 用 Node `createRequire` 加载 package version | 完成可移植修复后复用 | 静态导入 package metadata，让 bundler 保留同一个版本来源，运行时不再依赖 `import.meta.url`。 |
-| LLM protocol | DSH messages、content blocks、stream chunks、tool calls、usage 和 finish reasons | 复用 | 由上游 `LlmRuntime` 和 `ReactLoopAgent` 组装、流式处理并记录 model exchange。 |
+| LLM protocol | DSH messages、content blocks、stream chunks、tool calls、usage 和 finish reasons | 复用 | 由上游 `LlmRuntime` 和 `ReactLoopAgent` 组装、流式处理并记录 model exchange。 DeepSeek 由 `dsh-llm-deepseek-api-key`（`llm-deepseek`）提供。其他服务商与上游一样在"设置 → Models"页面添加，通过 `dsh-llm-pi-ai`（`llm-pi-ai`）接入：支持 OpenAI chat completions、OpenAI responses 和 Anthropic messages 协议，Base URL 可以是任意不带账号密码、查询参数或片段的 HTTP(S) 地址（OpenRouter、Cloudflare Workers AI 或 AI Gateway、自建网关），并可从端点发现模型。保存的路由无需重启即可用于对话，可以在模型菜单中选择，可以作为新会话的默认模型，也可以给子 agent 使用。依赖本地登录或读取本地凭据文件的服务商（GitHub Copilot、OpenAI Codex，以及通过本地凭据使用的 Amazon Bedrock 或 Google Vertex）不提供。 |
 | Agent loop | 由 Cordis 组合、带 hooks、guards、sessions 和 tools 的 `ReactLoopAgent` | 复用 | 通过 `AgentRegistry` 创建和冷恢复 agent。上下文压缩、token 计量、工具结果修剪、自动 session 标题生成、重复工具调用提醒（连续 3、5、8 次完全相同的调用时提醒）、模型请求重试（遇到限流、服务端错误、超时、网络错误或空响应时，在同一轮内最多重试 5 次，等待 0.5–10 秒，或按服务端的 `Retry-After`），以及持久化检查点（每次模型请求、每次顶层工具调用和每一步之前先保存 session 日志），作为上游 cordis 插件运行。上游的 `/compact` 命令（`dsh-command-compact`）按需压缩会话历史。 |
 | Bash tool | Node subprocess、sandbox、terminal 和 job services | 在原生 tool seam 上适配 | 注册上游 `ToolDefinition`，但通过配置的 Computer workspace backend 和 just-bash 执行其 body。默认 direct backend 在 owner Durable Object 内运行，启用 hardened interpreter limits 且不提供网络命令；添加 `LOADER` binding 后会选择 Computer 的 isolated Worker Shell backend。原生 tool cancellation 会通过 Computer execution handle 发送 `SIGINT`。部署配置提供明确的默认 timeout 与调用方可选值上限，`timedOut` 则独立于 exit 与 cancellation status 报告 deadline。不支持原生二进制、后台进程、PTY 和任意 Linux 行为。 |
 | Workspace filesystem | 本地 filesystem services 和 host paths | 适配 | 在 owner 基于 SQLite 的 Durable Object VFS 中保存 `/workspace`。 |
@@ -210,6 +210,8 @@ Cloudflare static assets -> upstream Web shell + client plugin graph
 
 `DEEPSEEK_API_KEY` 可以在部署时作为 Worker secret 设置，也可以之后通过 Settings → Models 页面输入。Edge credential provider 先查 Durable Object KV，再降级到 Worker 环境变量；解析值保持请求级作用域，绝不写入 session event 或 response。首尾空白会被移除；空白值视为未配置。
 
+其他服务商的 API key 也在同一个 Models 页面填写，按该服务商路由所指定的凭据名（例如 `OPENROUTER_API_KEY`）存入 Durable Object KV。这些 key 不从 Worker 变量读取：只有 `DEEPSEEK_API_KEY` 为了兼容 Models 页面出现之前的部署而保留这一兜底。路由的附加请求头以明文存在设置文档里，所以只接受不会携带密钥的请求头：`HTTP-Referer`、`Referer`、`X-Title`、`OpenAI-Organization`、`OpenAI-Project` 和 `anthropic-beta`。需要第二个认证头的网关（例如开启认证的 Cloudflare AI Gateway 所需的 `cf-aig-authorization`）暂时无法配置。路由的 key 名不能使用属于 DeepSeek 或其他 Edge 功能的名字（`DEEPSEEK_*`、`MCP_TOKEN_*`、`DSH_EDGE_*`），因此部署的 DeepSeek 密钥不会被发到其他地址。每个路由都必须有自己的 key 名：没有的话，pi-ai 会到进程环境里找 key，而 Workers 会把部署的 secret 暴露在那里。
+
 | 变量 | 用途与校验 |
 | --- | --- |
 | `DEEPSEEK_BASE_URL` | Anthropic-compatible Messages endpoint。默认为 `https://api.deepseek.com/anthropic`。DeepSeek 以前的 OpenAI-compatible 根地址（`https://api.deepseek.com`、`/v1` 或 `/beta`），无论设在这里还是保存为 Models 页的 Base URL，启动时都会改成该默认值；其他地址返回 404 时，保留原报错并补充提示：该地址可能不支持 Messages API，以及在哪里修改。必须是不含 URL userinfo 的 HTTP(S) URL。Browser 投影会省略可能携带 gateway credential 的 query 与 fragment。 |
@@ -252,7 +254,7 @@ Direct 模式比独立 Worker 的隔离更轻；不要把 single-owner 部署暴
 - Isolated 保留该 shell core，并把不可达的 Direct backend 替换成 fail-closed module。因此每个 artifact 只携带所选 command runtime。
 - 安装器生成私有 mode-specific config，指向所选 artifact，并通过 `no_bundle` 上传。用户机器不会重新构建 dsh-edge，也不会把 Harness package 解析进新 Worker。
 - Container 模式部署 isolated 产物，并使用 `docker.io/pawaca/dsh-edge-computer:<version>` 镜像。该镜像由发版流程从 `container/Dockerfile` 构建，每个版本在 npm 发布前推送一次。安装时不需要本地 Docker；`pnpm dev:container` 和 `pnpm test:container` 会在本地构建 Dockerfile，因此需要。
-- CI 从已安装 tarball 启动 Direct artifact，并拒绝 gzip 后超过 900 KiB 的产物，为 Cloudflare 匿名临时账户的 1 MiB 上限保留余量。
+- CI 从已安装 tarball 启动 Direct artifact。打包时会拒绝超过 Cloudflare 未压缩 64 MiB 上限的 Worker（Cloudflare 不限制压缩后体积，临时账户也一样），CI 还会对照 Cloudflare 1 秒的启动上限检查每个产物的启动耗时。
 
 ### 安装与升级
 
@@ -304,7 +306,7 @@ npx dsh-edge upgrade
 - 上传成功但交接失败时，恢复卡片会在命令按失败退出前输出已生效 owner key 与所有已知 URL。
 - 安装直接通过 Wrangler 上传；不会创建或绑定 GitHub 仓库、Cloudflare Builds 项目或源码构建流水线。
 
-从 checkout 开发的贡献者可以用 `pnpm --filter dsh-edge bundle:direct` 和 `pnpm --filter dsh-edge bundle:isolated` 在本地复现两种 release artifact。第一条命令还会执行压缩体积预算检查。
+从 checkout 开发的贡献者可以用 `pnpm --filter dsh-edge bundle:direct` 和 `pnpm --filter dsh-edge bundle:isolated` 在本地复现两种 release artifact。两条命令都会检查 Cloudflare 未压缩 64 MiB 的 Worker 体积上限（Cloudflare 不限制压缩后体积），`pnpm --filter dsh-edge check:startup` 会对照 Cloudflare 1 秒的启动上限分析已提升产物的启动耗时。
 
 贡献者可以在没有 key 且不发起网络请求的情况下重放完整的 Free 临时账户流程。这个 example 会运行实际交付的 bin、真实 prompt、Wrangler 子进程、结构化部署输出解析、公开激活观察与最终交接，并替换外部 Cloudflare 边界：
 

package/THIRD_PARTY_NOTICES.md

@@ -37,13 +37,12 @@ SOFTWARE.
 
 `dsh-edge` also applies a version-bound fix to `@cloudflare/computer@0.3.1`, recorded with its reason in `standalone/patches/audit.json`; the component's license below is unchanged.
 
-The following 674 package versions form the conservative, platform-neutral production closure used to assemble the Web and Worker artifacts in this distribution. Platform-specific build binaries that are not distributed in those artifacts are excluded; tree shaking can omit additional code. The inventory and legal texts are generated during packaging rather than referring recipients to a source checkout. License expressions are SPDX identifiers supplied by each package. Dependencies installed separately by npm remain declared in this package's `package.json`.
+The following 665 package versions form the conservative, platform-neutral production closure used to assemble the Web and Worker artifacts in this distribution. Platform-specific build binaries that are not distributed in those artifacts are excluded; tree shaking can omit additional code. The inventory and legal texts are generated during packaging rather than referring recipients to a source checkout. License expressions are SPDX identifiers supplied by each package. Dependencies installed separately by npm remain declared in this package's `package.json`.
 
 | Component | License |
 | --- | --- |
 | `@anthropic-ai/sdk@0.124.0` | `MIT` |
 | `@aws-sdk/client-bedrock-runtime@3.1127.0` | `Apache-2.0` |
-| `@aws-sdk/core@3.977.9` | `Apache-2.0` |
 | `@aws-sdk/core@3.978.1` | `Apache-2.0` |
 | `@aws-sdk/credential-provider-env@3.972.72` | `Apache-2.0` |
 | `@aws-sdk/credential-provider-http@3.972.74` | `Apache-2.0` |
@@ -56,15 +55,11 @@ The following 674 package versions form the conservative, platform-neutral produ
 | `@aws-sdk/eventstream-handler-node@3.972.34` | `Apache-2.0` |
 | `@aws-sdk/middleware-eventstream@3.972.29` | `Apache-2.0` |
 | `@aws-sdk/middleware-websocket@3.972.52` | `Apache-2.0` |
-| `@aws-sdk/nested-clients@3.997.44` | `Apache-2.0` |
 | `@aws-sdk/nested-clients@3.997.46` | `Apache-2.0` |
-| `@aws-sdk/signature-v4-multi-region@3.996.46` | `Apache-2.0` |
 | `@aws-sdk/signature-v4-multi-region@3.996.47` | `Apache-2.0` |
 | `@aws-sdk/token-providers@3.1127.0` | `Apache-2.0` |
 | `@aws-sdk/token-providers@3.1138.0` | `Apache-2.0` |
-| `@aws-sdk/types@3.974.5` | `Apache-2.0` |
 | `@aws-sdk/types@3.974.6` | `Apache-2.0` |
-| `@aws-sdk/xml-builder@3.972.40` | `Apache-2.0` |
 | `@aws-sdk/xml-builder@3.972.41` | `Apache-2.0` |
 | `@aws/lambda-invoke-store@0.3.0` | `Apache-2.0` |
 | `@babel/code-frame@7.29.7` | `MIT` |
@@ -380,15 +375,11 @@ The following 674 package versions form the conservative, platform-neutral produ
 | `@sec-ant/readable-stream@0.4.1` | `MIT` |
 | `@sindresorhus/is@7.2.0` | `MIT` |
 | `@sindresorhus/merge-streams@4.0.0` | `MIT` |
-| `@smithy/core@3.33.3` | `Apache-2.0` |
 | `@smithy/core@3.35.1` | `Apache-2.0` |
 | `@smithy/credential-provider-imds@4.5.2` | `Apache-2.0` |
-| `@smithy/fetch-http-handler@5.7.2` | `Apache-2.0` |
 | `@smithy/fetch-http-handler@5.8.0` | `Apache-2.0` |
-| `@smithy/node-http-handler@4.11.3` | `Apache-2.0` |
 | `@smithy/node-http-handler@4.12.1` | `Apache-2.0` |
 | `@smithy/signature-v4@5.7.3` | `Apache-2.0` |
-| `@smithy/types@4.17.2` | `Apache-2.0` |
 | `@smithy/types@4.19.0` | `Apache-2.0` |
 | `@speed-highlight/core@1.2.24` | `CC0-1.0` |
 | `@stablelib/base64@1.0.1` | `MIT` |
@@ -2018,11 +2009,8 @@ Applies to:
 - `@aws-sdk/credential-provider-web-identity@3.972.78` (`LICENSE`)
 - `@aws-sdk/eventstream-handler-node@3.972.34` (`LICENSE`)
 - `@aws-sdk/middleware-websocket@3.972.52` (`LICENSE`)
-- `@aws-sdk/signature-v4-multi-region@3.996.46` (`LICENSE`)
 - `@aws-sdk/signature-v4-multi-region@3.996.47` (`LICENSE`)
-- `@smithy/core@3.33.3` (`LICENSE`)
 - `@smithy/core@3.35.1` (`LICENSE`)
-- `@smithy/types@4.17.2` (`LICENSE`)
 - `@smithy/types@4.19.0` (`LICENSE`)
 
 ```text
@@ -10830,14 +10818,10 @@ Applies to:
 - `@aws-sdk/middleware-eventstream@3.972.29` (`LICENSE`)
 - `@aws-sdk/token-providers@3.1127.0` (`LICENSE`)
 - `@aws-sdk/token-providers@3.1138.0` (`LICENSE`)
-- `@aws-sdk/types@3.974.5` (`LICENSE`)
 - `@aws-sdk/types@3.974.6` (`LICENSE`)
-- `@aws-sdk/xml-builder@3.972.40` (`LICENSE`)
 - `@aws-sdk/xml-builder@3.972.41` (`LICENSE`)
 - `@smithy/credential-provider-imds@4.5.2` (`LICENSE`)
-- `@smithy/fetch-http-handler@5.7.2` (`LICENSE`)
 - `@smithy/fetch-http-handler@5.8.0` (`LICENSE`)
-- `@smithy/node-http-handler@4.11.3` (`LICENSE`)
 - `@smithy/node-http-handler@4.12.1` (`LICENSE`)
 - `@smithy/signature-v4@5.7.3` (`LICENSE`)
 
@@ -11862,7 +11846,6 @@ SOFTWARE.
 
 Applies to:
 
-- `@aws-sdk/core@3.977.9` (`LICENSE`)
 - `@aws-sdk/core@3.978.1` (`LICENSE`)
 
 ```text
@@ -12135,218 +12118,6 @@ FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TOR
 ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 ```
 
-### License/notice f1aac97cee45
-
-Applies to:
-
-- `@aws-sdk/nested-clients@3.997.44` (`package metadata fallback`)
-
-```text
-The published @aws-sdk/nested-clients@3.997.44 package declared Apache-2.0 but did not include a license or notice file. Attribution from its package metadata: AWS SDK for JavaScript Team. Repository: https://github.com/aws/aws-sdk-js-v3.git.
-
-Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "{}"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright 2018-2023 Amazon.com, Inc. or its affiliates. All Rights Reserved.
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
-```
-
 ### License/notice f2b90afb27a6
 
 Applies to:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-edge",
-  "version": "0.24.0",
+  "version": "0.26.0-alpha.1",
   "description": "Your DeepSeek Harness, anywhere — deploy a persistent personal coding agent to Cloudflare Workers in one command",
   "author": "pawaca",
   "license": "MIT",
@@ -103,6 +103,7 @@
     "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
     "@deepseek-ai/dsh-llm-deepseek": "0.2.0-rc.2",
     "@deepseek-ai/dsh-llm-deepseek-api-key": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.2.0-rc.2",
     "@deepseek-ai/dsh-llm-retry": "0.2.0-rc.2",
     "@deepseek-ai/dsh-message-feedback": "0.2.0-rc.2",
     "@deepseek-ai/dsh-output-retention": "0.2.0-rc.2",
@@ -192,6 +193,7 @@
     "example:install": "node examples/install-keyless.mjs",
     "install:cloudflare": "pnpm run bundle:workers && node scripts/cli.mjs install",
     "legal:write": "node scripts/legal-files.mjs write",
+    "check:startup": "node scripts/check-startup.mjs",
     "pack:verify": "node scripts/verify-packed.mjs",
     "web:build": "pnpm --dir standalone run build:web && node standalone/scripts/promote.mjs web",
     "test": "vitest run --root ../.. --project edge-runtime",

package/scripts/bundle-size.d.mts

@@ -1,2 +1,3 @@
-export function parseWranglerGzipBytes(output: string): number
-export function requireGzipBudget(output: string, maxBytes: number): number
+export const WORKER_SIZE_LIMIT_BYTES: number
+export function parseWranglerUploadSizes(output: string): { bytes: number, gzipBytes: number }
+export function requireWorkerSizeLimit(output: string, maxBytes?: number): { bytes: number, gzipBytes: number }

package/scripts/bundle-size.mjs

@@ -4,23 +4,33 @@ const SIZE_UNITS = Object.freeze({
   MiB: 1024 * 1024,
 })
 
-/** Extract Wrangler's total compressed upload size in bytes. */
-export function parseWranglerGzipBytes(output) {
-  const match = /Total Upload:[^\n/]+\/ gzip:\s*([0-9]+(?:\.[0-9]+)?)\s*(B|KiB|MiB)/u.exec(output)
-  if (match === null) throw new Error('Wrangler did not report a compressed upload size.')
-  return Math.ceil(Number(match[1]) * SIZE_UNITS[match[2]])
+/**
+ * Cloudflare's Worker size limit: 64 MiB uncompressed on Workers Free and Paid.
+ * There is no compressed-size limit; Wrangler's gzip figure is for reference.
+ * https://developers.cloudflare.com/workers/platform/limits/
+ */
+export const WORKER_SIZE_LIMIT_BYTES = 64 * 1024 * 1024
+
+/** Extract Wrangler's total upload sizes (uncompressed and gzip) in bytes. */
+export function parseWranglerUploadSizes(output) {
+  const match = /Total Upload:\s*([0-9]+(?:\.[0-9]+)?)\s*(B|KiB|MiB)\s*\/ gzip:\s*([0-9]+(?:\.[0-9]+)?)\s*(B|KiB|MiB)/u.exec(output)
+  if (match === null) throw new Error('Wrangler did not report the upload size.')
+  return {
+    bytes: Math.ceil(Number(match[1]) * SIZE_UNITS[match[2]]),
+    gzipBytes: Math.ceil(Number(match[3]) * SIZE_UNITS[match[4]]),
+  }
 }
 
-/** Reject a compressed Worker artifact above the repository budget. */
-export function requireGzipBudget(output, maxBytes) {
+/** Reject a Worker artifact above Cloudflare's uncompressed size limit. */
+export function requireWorkerSizeLimit(output, maxBytes = WORKER_SIZE_LIMIT_BYTES) {
   if (!Number.isSafeInteger(maxBytes) || maxBytes <= 0) {
     throw new TypeError('maxBytes must be a positive safe integer.')
   }
-  const actualBytes = parseWranglerGzipBytes(output)
-  if (actualBytes > maxBytes) {
+  const sizes = parseWranglerUploadSizes(output)
+  if (sizes.bytes > maxBytes) {
     throw new Error(
-      `Direct Worker gzip size ${actualBytes} bytes exceeds the ${maxBytes}-byte budget.`,
+      `Worker size ${sizes.bytes} bytes exceeds Cloudflare's ${maxBytes}-byte uncompressed limit.`,
     )
   }
-  return actualBytes
+  return sizes
 }

package/scripts/check-startup.d.mts

@@ -0,0 +1,2 @@
+export const STARTUP_BUDGET_MS: number
+export function profileDurationMs(profile: { startTime?: unknown, endTime?: unknown }): number

package/scripts/check-startup.mjs

@@ -0,0 +1,74 @@
+/**
+ * Profile the promoted Worker artifacts' startup with `wrangler check startup`
+ * and reject one whose global scope takes longer than the budget.
+ *
+ * Cloudflare gives a Worker 1 second of startup CPU to parse and run its
+ * global scope (https://developers.cloudflare.com/workers/platform/limits/).
+ * The profile runs locally on a different CPU, so the budget leaves margin
+ * below that limit and serves as a regression guard, not a measurement of the
+ * deployed startup time.
+ *
+ * Usage: node scripts/check-startup.mjs [direct|isolated|all]
+ */
+
+import { mkdtemp, readFile, rm } from 'node:fs/promises'
+import { createRequire } from 'node:module'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { execa } from 'execa'
+import { writePrebuiltModeWranglerConfig } from './wrangler-config.mjs'
+
+export const STARTUP_BUDGET_MS = 600
+
+/** Startup duration of a V8 CPU profile, in milliseconds. */
+export function profileDurationMs(profile) {
+  if (typeof profile?.startTime !== 'number' || typeof profile?.endTime !== 'number' || profile.endTime < profile.startTime) {
+    throw new Error('The startup profile has no valid start and end times.')
+  }
+  return (profile.endTime - profile.startTime) / 1000
+}
+
+const appDirectory = fileURLToPath(new URL('..', import.meta.url))
+const wranglerCli = createRequire(import.meta.url).resolve('wrangler')
+
+async function checkStartup(mode) {
+  const directory = await mkdtemp(join(tmpdir(), `dsh-edge-startup-${mode}-`))
+  try {
+    const config = join(directory, 'wrangler.json')
+    const profile = join(directory, 'startup.cpuprofile')
+    await writePrebuiltModeWranglerConfig(mode, config, { r2BucketName: 'dsh-edge-startup-check' })
+    const result = await execa(process.execPath, [
+      wranglerCli, 'check', 'startup',
+      '--config', config,
+      ...mode === 'isolated' ? ['--env', 'isolated'] : [],
+      '--outfile', profile,
+    ], { cwd: appDirectory, reject: false, all: true })
+    if (result.exitCode !== 0) {
+      throw new Error(`wrangler check startup failed for the ${mode} Worker:\n${result.all ?? ''}`)
+    }
+    const durationMs = profileDurationMs(JSON.parse(await readFile(profile, 'utf8')))
+    process.stdout.write(`${mode} Worker startup: ${durationMs.toFixed(0)} ms (budget ${STARTUP_BUDGET_MS} ms, local CPU).\n`)
+    if (durationMs > STARTUP_BUDGET_MS) {
+      throw new Error(`The ${mode} Worker startup took ${durationMs.toFixed(0)} ms, above the ${STARTUP_BUDGET_MS} ms budget (Cloudflare allows 1000 ms).`)
+    }
+  } finally {
+    await rm(directory, { recursive: true, force: true })
+  }
+}
+
+if (process.argv[1] === fileURLToPath(import.meta.url)) {
+  const requested = process.argv[2] ?? 'all'
+  const modes = requested === 'all' ? ['direct', 'isolated'] : [requested]
+  if (!modes.every(mode => mode === 'direct' || mode === 'isolated')) {
+    process.stderr.write('Usage: node scripts/check-startup.mjs [direct|isolated|all]\n')
+    process.exitCode = 2
+  } else {
+    try {
+      for (const mode of modes) await checkStartup(mode)
+    } catch (error) {
+      process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`)
+      process.exitCode = 1
+    }
+  }
+}