dsh-gitbash-shell 0.13.2 → 0.15.0

package/README.md

@@ -2,6 +2,8 @@
 
 [![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 
+简体中文 | [English](README_EN.md)
+
 > 让 DeepSeek Harness (dsh) 在 Windows 上**全部使用 Git Bash** 的官方风格插件
 > —— 以 Git for Windows 的 `bash.exe` 替换 PowerShell 执行器,并为所有模式
 > 物化对应的 Git Bash 版 agent preset。
@@ -37,6 +39,19 @@ era。**preset id 保持 `code-gitbash` 不变**(会话钉在 id 上,改名会
 会话报 preset not found)。无论先升级插件还是先升级 dsh,都会自动收敛;用户改
 过的目录照旧不碰。
 
+### dsh 0.1.6 适配(工作流引擎行改名)
+
+dsh 0.1.6-alpha.1 把内置预设的工作流引擎行 `workflow-worker-thread` 改名为
+`workflow-ptc`,并**删除**了旧包。组合里一行 import 失败会拒绝**整棵 preset 挂载**,
+所以把旧名钉死在资产里的 preset 在新版上会直接不可用。本插件两个拼法都不钉:物化时
+**从宿主自己的内置 preset 现场抄**那一行的 id、包名与 `disabled` 状态
+(`rowFormsOf` / `alignEngineRow`),并让 `tool-ralph` 跟随新版默认的 `disabled: true`。
+改写是纯字符串手术(不解析 YAML,`!!js` 安全)且幂等;探测失败(旧宿主、无 roster)时
+资产保持逐字节原样——**一份资产通吃两个 era,升级顺序无关**。
+
+同一版还把 `LocalBashExecutor` 的受保护钩子改成了异步:插件的 `runArgv` 结果解包、
+`start` 的返回形态与 `confine` 的取消信号都按**加载期探测**自适应,新旧宿主行为一致。
+
 ## 安装(公开 npm 插件,推荐)
 
 npm: [dsh-gitbash-shell](https://www.npmjs.com/package/dsh-gitbash-shell)，
@@ -129,9 +144,30 @@ preset 会被插件自动清理;宿主 shell 回退为 PowerShell。
 > 切换生效后若 `ptc-cordis` 目录已存在且被旧版本物化,删除
 > `~/.dsh/.agent-presets/ptc-cordis` 并重启,即由新逻辑重新物化。
 
-## POSIX 路径指示(v0.7.0)
+## POSIX 路径方言(v0.7.0 引入,受 `posixPaths` 开关门控)
+
+Windows 上本插件把宿主 shell 换成 Git Bash 的同时,让**模型看到的路径**统一成 MSYS 盘根
+POSIX 形式(`/c/Users/...`、`/c/Program Files/...`)。开关是 settings 命名空间
+`gitbash-shell` 的布尔字段 `posixPaths`,**默认开启**(v0.10.0 起),可在 **设置 → 插件**
+里本插件的「Git Bash 路径方言」卡片上随时切换;不修改任何 preset / 组合文件,标准/极简/
+PTC/创造及用户自建模式一律覆盖。
+
+开启时(仅 Win32),`posixPaths` 门控以下全部行为:
+
+- **提示词源头替换**:组装期(`system-prompt/assemble`)把官方提示词 sections / contexts /
+  variables 里的 Windows 绝对路径**原位**改写成 `/c/...`——不增删任何内容、不动工具 schema;
+- **一句话指示**:经 `systemPrompt.context`(order 126)注入全局指示——shell 是 Git for
+  Windows bash,路径用 MSYS 盘根,所有工具都直接接受这种写法;
+- **参数翻译**:`tools/execute` 上把文件工具的路径参数(`file_path` / `path` / `workdir`)由
+  `/c/...` 翻回 `C:/...` 交给 Node 文件工具;bash 的 `command` 字段不动——那是 Git Bash 母语;
+- **结果回流**:成功结果里的路径元数据(`read`/`write`/`edit` 的 `path`、`glob` 的 `paths[]`、
+  `grep` 的 `matches[].path`)改写回 MSYS 形式;文件内容与错误结果不动;
+- **运行时事实**:向官方 `dsh-shell-env` 注册表贡献 `DSH_PATH_DIALECT=msys`,模型可在执行时
+  核验(随开关实时生效)。
 
-Windows 上本插件把宿主 shell 换成 Git Bash 的同时,会向**每个会话的系统提示**注入一条全局指示(仅 Win32,走 `systemPrompt.context`,不影响任何 preset/组合文本):**bash 命令里一律用 POSIX 风格路径**(`/c/Users/...`、`/c/Program Files/...`),不要 `C:/...` 或 `C:\...`。这样模型在工具调用里不会再拿 Windows 盘符路径喂给 Git Bash——标准/极简/PTC/创造及用户自建模式全部覆盖,无需任何模式单独改。
+关闭后回到 dsh 原生行为:指示文本为空(组装期直接丢弃,零提示噪声),路径参数与结果元数据
+都不再改写,文件工具收 Windows 路径。**bash 始终是 Git Bash,不受此开关影响**——它只决定
+跨工具的路径方言。
 
 ## 与 dsh-better-sidebar 联动
 
@@ -143,4 +179,4 @@ Windows 上本插件把宿主 shell 换成 Git Bash 的同时,会向**每个会
 
 ## 许可
 
-MIT © KannaKuron。参考与致敬:[dsh-ptc-cordis-preset](https://github.com/KannaKuron/dsh-ptc-cordis-preset)。
+MIT © KannaKuron。参考与致敬:[dsh-ptc-cordis-preset](https://github.com/KannaKuron/dsh-ptc-cordis-preset)。

package/README_EN.md

@@ -2,10 +2,29 @@
 
 [![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 
+[简体中文](README.md) | English
+
 > Run **every agent shell command through Git Bash** on Windows with DeepSeek
 > Harness (dsh) — replaces the PowerShell executor and materializes Git Bash
 > variants of all four agent presets.
 
+### dsh 0.1.6: the workflow-engine row was renamed
+
+dsh 0.1.6-alpha.1 renamed the built-in presets' workflow-engine row from
+`workflow-worker-thread` to `workflow-ptc` and **deleted** the old package. One row
+that fails to import rejects the **whole preset mount**, so a composition pinning the
+old name simply stops working on the new host. This plugin pins neither spelling: at
+materialization it copies that row — id, package and `disabled` state — straight out
+of the host's own built-in preset (`rowFormsOf` / `alignEngineRow`), and aligns
+`tool-ralph` with the new `disabled: true` default. The rewrite is plain string
+surgery (no YAML round-trip, so `!!js` stays safe) and idempotent; a failed probe (old
+host, no roster) leaves the assets byte-for-byte untouched — **one set of assets serves
+both eras, in either upgrade order**.
+
+The same release made `LocalBashExecutor`'s protected hooks asynchronous: the
+`runArgv` result unwrapping, the `start` return shape and the `confine` cancellation
+signal are all probed at load time, so both host generations behave identically.
+
 ## Install (public npm package)
 
 ```sh
@@ -64,9 +83,36 @@ the PTC preset is materialized as Git Bash automatically (tool-bash on,
 tool-pwsh off) — no extra mode, no manual edits. Without this plugin the PTC
 preset stays as its own plugin manages it.
 
-## POSIX path directive (v0.7.0)
-
-While replacing the host shell with Git Bash, this plugin also injects one global per-session system-prompt directive (Win32 only, via systemPrompt.context; no preset or composition text is touched): **always use POSIX-style paths in bash commands** (/c/Users/..., /c/Program Files/...) — never C:/... or C:\... . Every mode — standard/minimal/PTC/creation and user-authored presets — is covered; nothing needs a per-mode change.
+## POSIX path dialect (introduced in v0.7.0, gated by the `posixPaths` switch)
+
+While replacing the host shell with Git Bash on Windows, this plugin makes every path the
+model sees use the MSYS drive-root POSIX form (/c/Users/..., /c/Program Files/...). The switch
+is the `posixPaths` boolean in the `gitbash-shell` settings namespace; it is **on by default**
+(since v0.10.0) and can be toggled any time on this plugin's "Git Bash path dialect" card in
+**Settings → Plugins**. No preset or composition file is touched, and every mode —
+standard/minimal/PTC/creation and user-authored presets — is covered.
+
+While it is on (Windows only), `posixPaths` gates all of the following:
+
+- **Source-level rewrite**: during assembly (`system-prompt/assemble`) every Windows absolute
+  path in the official prompt's sections, contexts, and variables is rewritten in place to the
+  /c/... form — nothing is added or removed, and tool schemas stay untouched;
+- **One-sentence directive**: a global directive via `systemPrompt.context` (order 126) — the
+  shell is Git for Windows bash, paths use MSYS drive roots, and every tool accepts that form
+  directly;
+- **Argument translation**: on `tools/execute` the file tools' path arguments (`file_path` /
+  `path` / `workdir`) are translated from /c/... back to C:/... for the Node-backed file tools;
+  a bash command's `command` field is left alone — that is Git Bash's native form;
+- **Result round-trip**: path metadata in successful results (`path` of read/write/edit,
+  `paths[]` of glob, `matches[].path` of grep) flows back in the MSYS form; file contents and
+  error results are untouched;
+- **Runtime fact**: `DSH_PATH_DIALECT=msys` is contributed to the official `dsh-shell-env`
+  registry, so the model can verify the dialect at execution time (it follows the live switch).
+
+With the switch off, dsh-native behavior returns: the directive text is empty (dropped at
+assembly, so zero prompt noise), path arguments and result metadata are no longer rewritten, and
+the file tools receive Windows paths. **Bash stays Git Bash either way** — the switch only
+governs the cross-tool path dialect.
 
 ## Cooperation with dsh-better-sidebar
 
@@ -79,4 +125,4 @@ When [dsh-better-sidebar](https://github.com/omdsh-dev/DSH-better-sidebar) (v0.1
 ## License
 
 MIT © KannaKuron. Inspired by
-[dsh-ptc-cordis-preset](https://github.com/KannaKuron/dsh-ptc-cordis-preset).
+[dsh-ptc-cordis-preset](https://github.com/KannaKuron/dsh-ptc-cordis-preset).

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-external/dsh-gitbash-shell",
-  "version": "0.13.2",
+  "version": "0.15.0",
   "main": "./src/index.js",
   "description": "Windows 全模式 Git Bash:用 Git for Windows bash 替换 PowerShell 执行器,并物化 standard/minimal/code/cordis 的 Git Bash 变体 preset。双 era 适配 dsh <= 0.1.1(内置 id 'code')与 >= 0.1.2(改名 'ptc'),启动探测自动选择,preset id 永不变。联动:dsh-ptc-cordis-preset(两者同装时 PTC 创造模式自动物化为 Git Bash 版)+ dsh-better-sidebar(终端 UI 标签与模型 terminal_* 工具自动切到 Git Bash)。",
   "engines": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-gitbash-shell",
-  "version": "0.13.2",
+  "version": "0.15.0",
   "description": "DSH plugin: run every agent shell command through Git for Windows bash on Windows instead of PowerShell. Replaces the pwsh executor with a Git Bash ctx.shell provider and materializes Git Bash variants of the standard/minimal/code/cordis agent presets into your user preset root at startup. On Windows it also adopts dsh-better-sidebar's terminal shell (UI tabs and the model-facing terminal_* tools) through the sidebar's official settings seam, and pairs with dsh-ptc-cordis-preset so the PTC Creation-mode preset materializes as its Git Bash variant. Ships both composition eras for dsh <= 0.1.1 (built-in preset id 'code') and dsh >= 0.1.2 (renamed id 'ptc') — the era is probed per boot and re-materialized automatically after a dsh upgrade, in either upgrade order; preset ids never change so pinned sessions stay valid.",
   "type": "module",
   "repository": {

package/src/client.js

@@ -21,7 +21,11 @@
  *     (react and @deepseek-ai/dsh-client-ui-primitives only, smoke-enforced);
  *   - plain React.createElement, no JSX/TS; components at module level;
  *   - dsh.client.inject in package.json lists the packages that must load
- *     first so locale / settingsScope / slots exist when this applies.
+ *     first so locale / settingsScope / slots exist when this applies;
+ *   - copy ships in three layers: zh/en inline, one LOCALES entry per third
+ *     language (each preceded by a locale marker line), every dictionary
+ *     key-aligned with zh (smoke-enforced) and read through a live lookup —
+ *     DSH's language preference switches without a page reload.
  */
 window.__ModuleLoader__.load({
 	id: "dsh-gitbash-shell",
@@ -35,6 +39,7 @@ window.__ModuleLoader__.load({
 
 		var E = React.createElement;
 		var useState = React.useState;
+		var useEffect = React.useEffect;
 
 		var TAG = "[gitbash-shell/client]";
 		/** Dictionary namespace (the plugin's own t seat). */
@@ -42,11 +47,15 @@ window.__ModuleLoader__.load({
 		/** The settings namespace the HOST half serves. */
 		var SETTINGS_NAMESPACE = "gitbash-shell";
 
-		// ── dictionaries (zh/en MUST stay key-aligned; smoke-enforced) ─────────
+		// ── dictionaries ────────────────────────────────────────────────────────
+		// zh/en stay inline; the third languages live in LOCALES below, one entry
+		// per language behind a locale marker line. EVERY shipped dictionary MUST
+		// carry zh's exact key set: a missing key falls back to English at lookup
+		// time, which reads as a half-translated card (smoke-enforced).
 
 		var zh = {
 			"title": "Git Bash 路径方言",
-			"cardDesc": "所有工具统一 /c/ POSIX 路径形式(默认关闭)",
+			"cardDesc": "所有工具统一 /c/ POSIX 路径形式(默认开启)",
 			"state.label": "当前状态",
 			"state.on": "已启用",
 			"state.off": "已关闭",
@@ -58,7 +67,7 @@ window.__ModuleLoader__.load({
 
 		var en = {
 			"title": "Git Bash path dialect",
-			"cardDesc": "One /c/ POSIX path style for every tool (off by default)",
+			"cardDesc": "One /c/ POSIX path style for every tool (on by default)",
 			"state.label": "Current state",
 			"state.on": "Enabled",
 			"state.off": "Disabled",
@@ -68,6 +77,302 @@ window.__ModuleLoader__.load({
 			"hint": "Enabled: every tool (bash commands and workdir, read/write/edit/read_image/glob/grep path arguments) uses MSYS drive-root POSIX paths (/c/Users/...); the host translates path fields for the file tools automatically. Disabled restores dsh-native behavior (Windows paths for file tools). Bash is always Git Bash while the plugin is installed; this switch only governs the cross-tool path dialect.",
 		};
 
+		/* Third-language dictionaries: one entry per language, each preceded
+		   by a locale marker line the smoke test slices on. Adding a language is
+		   one entry here and nothing else — the dictionaries also ride the
+		   ctx.locale.register call below, so host-side consumers read the same
+		   copy the card does. Every key set MUST equal zh's exactly: a missing
+		   key falls back to English silently and the card looks half-translated.
+		   zh-hk and zh-mo ship one Cantonese-flavoured copy; zh-tw carries the
+		   Taiwan wording. */
+		var LOCALES = {
+			/* locale: ar */
+			"ar": {
+				"title": "لهجة مسارات Git Bash",
+				"cardDesc": "صيغة مسار POSIX موحّدة /c/ لكل الأدوات (مُفعَّلة افتراضيًا)",
+				"state.label": "الحالة الحالية",
+				"state.on": "مُفعَّلة",
+				"state.off": "مُعطَّلة",
+				"switch.on": "تفعيل",
+				"switch.off": "تعطيل",
+				"error": "فشل الكتابة",
+				"hint": "عند التفعيل: تستخدم كل الأدوات (أوامر bash و workdir، ومعاملات المسار في read/write/edit/read_image/glob/grep) مسارات POSIX من جذر قرص MSYS (/c/Users/...)؛ ويتولّى المضيف ترجمة حقول المسار لأدوات الملفات تلقائيًا. عند التعطيل يعود السلوك الأصلي لـ dsh (مسارات Windows لأدوات الملفات). يبقى bash دائمًا Git Bash ما دامت الإضافة مثبَّتة؛ هذا المفتاح لا يحكم سوى لهجة المسارات بين الأدوات.",
+			},
+			/* locale: de */
+			"de": {
+				"title": "Git-Bash-Pfaddialekt",
+				"cardDesc": "Eine einheitliche /c/-POSIX-Pfadform für alle Tools (standardmäßig an)",
+				"state.label": "Aktueller Status",
+				"state.on": "Aktiviert",
+				"state.off": "Deaktiviert",
+				"switch.on": "Aktivieren",
+				"switch.off": "Deaktivieren",
+				"error": "Schreiben fehlgeschlagen",
+				"hint": "Aktiviert: Alle Tools (bash-Befehle und workdir sowie Pfadargumente von read/write/edit/read_image/glob/grep) verwenden POSIX-Pfade ab der MSYS-Laufwerkswurzel (/c/Users/...); der Host übersetzt die Pfadfelder der Dateitools automatisch. Deaktiviert stellt das dsh-native Verhalten wieder her (Windows-Pfade für Dateitools). Bash ist bei installiertem Plugin immer Git Bash; dieser Schalter steuert nur den Pfaddialekt zwischen den Tools.",
+			},
+			/* locale: fr */
+			"fr": {
+				"title": "Dialecte de chemins Git Bash",
+				"cardDesc": "Une forme de chemin POSIX /c/ unique pour tous les outils (activée par défaut)",
+				"state.label": "État actuel",
+				"state.on": "Activé",
+				"state.off": "Désactivé",
+				"switch.on": "Activer",
+				"switch.off": "Désactiver",
+				"error": "échec de l'écriture",
+				"hint": "Activé : tous les outils (commandes bash et workdir, arguments de chemin de read/write/edit/read_image/glob/grep) utilisent des chemins POSIX à racine de lecteur MSYS (/c/Users/...) ; l'hôte traduit automatiquement les champs de chemin des outils de fichiers. Désactivé rétablit le comportement natif de dsh (chemins Windows pour les outils de fichiers). Bash reste toujours Git Bash tant que le plugin est installé ; ce commutateur ne régit que le dialecte de chemins entre outils.",
+			},
+			/* locale: hi */
+			"hi": {
+				"title": "Git Bash पथ शैली",
+				"cardDesc": "सभी टूल के लिए एक ही /c/ POSIX पथ रूप (डिफ़ॉल्ट रूप से सक्षम)",
+				"state.label": "वर्तमान स्थिति",
+				"state.on": "सक्षम",
+				"state.off": "अक्षम",
+				"switch.on": "सक्षम करें",
+				"switch.off": "अक्षम करें",
+				"error": "लिखना विफल रहा",
+				"hint": "सक्षम होने पर: सभी टूल (bash कमांड और workdir, तथा read/write/edit/read_image/glob/grep के पथ तर्क) MSYS ड्राइव-रूट POSIX पथ (/c/Users/...) का उपयोग करते हैं; फ़ाइल टूल के पथ फ़ील्ड होस्ट स्वतः अनुवादित करता है। अक्षम करने पर dsh का मूल व्यवहार बहाल होता है (फ़ाइल टूल के लिए Windows पथ)। जब तक प्लगइन इंस्टॉल है bash हमेशा Git Bash रहता है; यह स्विच केवल टूल के बीच पथ शैली नियंत्रित करता है।",
+			},
+			/* locale: id */
+			"id": {
+				"title": "Dialek path Git Bash",
+				"cardDesc": "Satu bentuk path POSIX /c/ untuk semua alat (aktif secara bawaan)",
+				"state.label": "Status saat ini",
+				"state.on": "Aktif",
+				"state.off": "Nonaktif",
+				"switch.on": "Aktifkan",
+				"switch.off": "Nonaktifkan",
+				"error": "gagal menulis",
+				"hint": "Saat aktif: semua alat (perintah bash dan workdir, serta argumen path read/write/edit/read_image/glob/grep) memakai path POSIX berakar drive MSYS (/c/Users/...); host menerjemahkan bidang path untuk alat berkas secara otomatis. Saat nonaktif, perilaku asli dsh dipulihkan (path Windows untuk alat berkas). Bash selalu Git Bash selama plugin terpasang; sakelar ini hanya mengatur dialek path antaralat.",
+			},
+			/* locale: it */
+			"it": {
+				"title": "Dialetto dei percorsi Git Bash",
+				"cardDesc": "Un'unica forma di percorso POSIX /c/ per tutti gli strumenti (attivata per impostazione predefinita)",
+				"state.label": "Stato attuale",
+				"state.on": "Attivato",
+				"state.off": "Disattivato",
+				"switch.on": "Attiva",
+				"switch.off": "Disattiva",
+				"error": "scrittura non riuscita",
+				"hint": "Attivato: tutti gli strumenti (comandi bash e workdir, argomenti di percorso di read/write/edit/read_image/glob/grep) usano percorsi POSIX con radice di unità MSYS (/c/Users/...); l'host traduce automaticamente i campi di percorso degli strumenti per i file. Disattivato ripristina il comportamento nativo di dsh (percorsi Windows per gli strumenti per i file). Bash resta sempre Git Bash finché il plugin è installato; questo interruttore governa solo il dialetto dei percorsi tra gli strumenti.",
+			},
+			/* locale: ja */
+			"ja": {
+				"title": "Git Bash パス方言",
+				"cardDesc": "すべてのツールで /c/ POSIX パス形式に統一(既定ではオン)",
+				"state.label": "現在の状態",
+				"state.on": "有効",
+				"state.off": "無効",
+				"switch.on": "有効にする",
+				"switch.off": "無効にする",
+				"error": "書き込みに失敗しました",
+				"hint": "有効にすると、すべてのツール(bash コマンドと workdir、read/write/edit/read_image/glob/grep のパス引数)が MSYS ドライブルートの POSIX パス(/c/Users/...)を使います。ファイルツールのパスフィールドはホストが自動的に変換します。無効にすると dsh 本来の動作(ファイルツールは Windows パス)に戻ります。bash はプラグインがインストールされている限り常に Git Bash で、このスイッチの影響を受けません。",
+			},
+			/* locale: ko */
+			"ko": {
+				"title": "Git Bash 경로 방언",
+				"cardDesc": "모든 도구에 하나의 /c/ POSIX 경로 형식 사용(기본값 켜짐)",
+				"state.label": "현재 상태",
+				"state.on": "사용",
+				"state.off": "사용 안 함",
+				"switch.on": "사용",
+				"switch.off": "사용 안 함",
+				"error": "쓰기 실패",
+				"hint": "켜면 모든 도구(bash 명령과 workdir, read/write/edit/read_image/glob/grep의 경로 인수)가 MSYS 드라이브 루트 POSIX 경로(/c/Users/...)를 사용합니다. 파일 도구의 경로 필드는 호스트가 자동으로 변환합니다. 끄면 dsh 기본 동작(파일 도구에 Windows 경로 사용)으로 돌아갑니다. 플러그인이 설치되어 있는 동안 bash는 항상 Git Bash이며 이 스위치의 영향을 받지 않습니다.",
+			},
+			/* locale: nl */
+			"nl": {
+				"title": "Git Bash-paddialect",
+				"cardDesc": "Eén /c/ POSIX-padvorm voor alle tools (standaard aan)",
+				"state.label": "Huidige status",
+				"state.on": "Ingeschakeld",
+				"state.off": "Uitgeschakeld",
+				"switch.on": "Inschakelen",
+				"switch.off": "Uitschakelen",
+				"error": "schrijven mislukt",
+				"hint": "Ingeschakeld: alle tools (bash-opdrachten en workdir, padargumenten van read/write/edit/read_image/glob/grep) gebruiken POSIX-paden vanaf de MSYS-schijfwortel (/c/Users/...); de host vertaalt de padvelden voor de bestandstools automatisch. Uitgeschakeld herstelt het oorspronkelijke dsh-gedrag (Windows-paden voor bestandstools). Bash is altijd Git Bash zolang de plugin is geïnstalleerd; deze schakelaar bepaalt alleen het paddialect tussen de tools.",
+			},
+			/* locale: pl */
+			"pl": {
+				"title": "Dialekt ścieżek Git Bash",
+				"cardDesc": "Jedna postać ścieżki POSIX /c/ dla wszystkich narzędzi (domyślnie włączone)",
+				"state.label": "Bieżący stan",
+				"state.on": "Włączone",
+				"state.off": "Wyłączone",
+				"switch.on": "Włącz",
+				"switch.off": "Wyłącz",
+				"error": "zapis nie powiódł się",
+				"hint": "Po włączeniu: wszystkie narzędzia (polecenia bash i workdir oraz argumenty ścieżek w read/write/edit/read_image/glob/grep) używają ścieżek POSIX od korzenia dysku MSYS (/c/Users/...); host automatycznie tłumaczy pola ścieżek narzędzi plikowych. Wyłączenie przywraca natywne zachowanie dsh (ścieżki Windows dla narzędzi plikowych). Bash jest zawsze Git Bash, dopóki wtyczka jest zainstalowana; ten przełącznik reguluje wyłącznie dialekt ścieżek między narzędziami.",
+			},
+			/* locale: pt */
+			"pt": {
+				"title": "Dialeto de caminhos do Git Bash",
+				"cardDesc": "Uma única forma de caminho POSIX /c/ para todas as ferramentas (ativada por padrão)",
+				"state.label": "Estado atual",
+				"state.on": "Ativada",
+				"state.off": "Desativada",
+				"switch.on": "Ativar",
+				"switch.off": "Desativar",
+				"error": "falha ao gravar",
+				"hint": "Ativada: todas as ferramentas (comandos bash e workdir, argumentos de caminho de read/write/edit/read_image/glob/grep) usam caminhos POSIX a partir da raiz da unidade MSYS (/c/Users/...); o host traduz automaticamente os campos de caminho das ferramentas de arquivo. Desativada restaura o comportamento nativo do dsh (caminhos Windows para as ferramentas de arquivo). O bash é sempre Git Bash enquanto o plugin estiver instalado; este interruptor rege apenas o dialeto de caminhos entre ferramentas.",
+			},
+			/* locale: ru */
+			"ru": {
+				"title": "Диалект путей Git Bash",
+				"cardDesc": "Единый POSIX-формат путей /c/ для всех инструментов (по умолчанию включено)",
+				"state.label": "Текущее состояние",
+				"state.on": "Включено",
+				"state.off": "Выключено",
+				"switch.on": "Включить",
+				"switch.off": "Выключить",
+				"error": "не удалось записать",
+				"hint": "Включено: все инструменты (команды bash и workdir, аргументы путей read/write/edit/read_image/glob/grep) используют POSIX-пути от корня диска MSYS (/c/Users/...); хост автоматически преобразует поля путей для файловых инструментов. Выключение возвращает исходное поведение dsh (пути Windows для файловых инструментов). Пока плагин установлен, bash всегда остаётся Git Bash; этот переключатель управляет только диалектом путей между инструментами.",
+			},
+			/* locale: sv */
+			"sv": {
+				"title": "Git Bash-sökvägsdialekt",
+				"cardDesc": "En /c/ POSIX-sökvägsform för alla verktyg (på som standard)",
+				"state.label": "Aktuell status",
+				"state.on": "Aktiverad",
+				"state.off": "Inaktiverad",
+				"switch.on": "Aktivera",
+				"switch.off": "Inaktivera",
+				"error": "skrivning misslyckades",
+				"hint": "Aktiverad: alla verktyg (bash-kommandon och workdir, sökvägsargument för read/write/edit/read_image/glob/grep) använder POSIX-sökvägar från MSYS-enhetsroten (/c/Users/...); värden översätter sökvägsfälten för filverktygen automatiskt. Inaktiverad återställer dsh:s ursprungliga beteende (Windows-sökvägar för filverktyg). Bash är alltid Git Bash så länge insticksprogrammet är installerat; den här växeln styr bara sökvägsdialekten mellan verktygen.",
+			},
+			/* locale: th */
+			"th": {
+				"title": "รูปแบบพาธของ Git Bash",
+				"cardDesc": "ใช้รูปแบบพาธ POSIX /c/ แบบเดียวกันกับทุกเครื่องมือ (เปิดไว้เป็นค่าเริ่มต้น)",
+				"state.label": "สถานะปัจจุบัน",
+				"state.on": "เปิดใช้งาน",
+				"state.off": "ปิดใช้งาน",
+				"switch.on": "เปิดใช้งาน",
+				"switch.off": "ปิดใช้งาน",
+				"error": "เขียนไม่สำเร็จ",
+				"hint": "เมื่อเปิดใช้งาน: เครื่องมือทั้งหมด (คำสั่ง bash และ workdir รวมถึงอาร์กิวเมนต์พาธของ read/write/edit/read_image/glob/grep) ใช้พาธ POSIX จากรากไดรฟ์ของ MSYS (/c/Users/...) โฮสต์จะแปลฟิลด์พาธของเครื่องมือจัดการไฟล์ให้อัตโนมัติ เมื่อปิดใช้งานจะกลับสู่พฤติกรรมดั้งเดิมของ dsh (เครื่องมือจัดการไฟล์ใช้พาธ Windows) bash เป็น Git Bash เสมอเมื่อติดตั้งปลั๊กอินนี้ สวิตช์นี้ควบคุมเฉพาะรูปแบบพาธระหว่างเครื่องมือเท่านั้น",
+			},
+			/* locale: tr */
+			"tr": {
+				"title": "Git Bash yol lehçesi",
+				"cardDesc": "Tüm araçlar için tek /c/ POSIX yol biçimi (varsayılan olarak açık)",
+				"state.label": "Geçerli durum",
+				"state.on": "Etkin",
+				"state.off": "Devre dışı",
+				"switch.on": "Etkinleştir",
+				"switch.off": "Devre dışı bırak",
+				"error": "yazma başarısız",
+				"hint": "Etkinleştirildiğinde: tüm araçlar (bash komutları ve workdir ile read/write/edit/read_image/glob/grep yol bağımsız değişkenleri) MSYS sürücü kökünden POSIX yolları (/c/Users/...) kullanır; ana süreç dosya araçlarının yol alanlarını otomatik olarak çevirir. Devre dışı bırakıldığında dsh yerel davranışına döner (dosya araçları için Windows yolları). Eklenti kurulu olduğu sürece bash her zaman Git Bash olarak kalır; bu anahtar yalnızca araçlar arası yol lehçesini yönetir.",
+			},
+			/* locale: vi */
+			"vi": {
+				"title": "Phương ngữ đường dẫn Git Bash",
+				"cardDesc": "Một dạng đường dẫn POSIX /c/ thống nhất cho mọi công cụ (mặc định bật)",
+				"state.label": "Trạng thái hiện tại",
+				"state.on": "Đã bật",
+				"state.off": "Đã tắt",
+				"switch.on": "Bật",
+				"switch.off": "Tắt",
+				"error": "ghi thất bại",
+				"hint": "Khi bật: mọi công cụ (lệnh bash và workdir, tham số đường dẫn của read/write/edit/read_image/glob/grep) dùng đường dẫn POSIX từ gốc ổ đĩa MSYS (/c/Users/...); máy chủ tự động chuyển đổi trường đường dẫn cho các công cụ tệp. Khi tắt, hành vi gốc của dsh được khôi phục (công cụ tệp dùng đường dẫn Windows). bash luôn là Git Bash khi plugin được cài đặt; công tắc này chỉ điều khiển phương ngữ đường dẫn giữa các công cụ.",
+			},
+			/* locale: zh-hk */
+			"zh-hk": {
+				"title": "Git Bash 路徑方言",
+				"cardDesc": "所有工具統一用 /c/ POSIX 路徑格式(預設開啟)",
+				"state.label": "目前狀態",
+				"state.on": "已啟用",
+				"state.off": "已關閉",
+				"switch.on": "啟用",
+				"switch.off": "停用",
+				"error": "寫入失敗",
+				"hint": "啟用後:所有工具(bash 指令同 workdir、read/write/edit/read_image/glob/grep 嘅路徑參數)統一使用 MSYS 磁碟根 POSIX 路徑(/c/Users/...);檔案工具嘅路徑參數由宿主自動翻譯,模型無感。停用後回復 dsh 原生行為(檔案工具用 Windows 路徑)。bash 永遠係 Git Bash,唔受呢個開關影響。",
+			},
+			/* locale: zh-mo */
+			"zh-mo": {
+				"title": "Git Bash 路徑方言",
+				"cardDesc": "所有工具統一用 /c/ POSIX 路徑格式(預設開啟)",
+				"state.label": "目前狀態",
+				"state.on": "已啟用",
+				"state.off": "已關閉",
+				"switch.on": "啟用",
+				"switch.off": "停用",
+				"error": "寫入失敗",
+				"hint": "啟用後:所有工具(bash 指令同 workdir、read/write/edit/read_image/glob/grep 嘅路徑參數)統一使用 MSYS 磁碟根 POSIX 路徑(/c/Users/...);檔案工具嘅路徑參數由宿主自動翻譯,模型無感。停用後回復 dsh 原生行為(檔案工具用 Windows 路徑)。bash 永遠係 Git Bash,唔受呢個開關影響。",
+			},
+			/* locale: zh-tw */
+			"zh-tw": {
+				"title": "Git Bash 路徑方言",
+				"cardDesc": "所有工具統一採用 /c/ POSIX 路徑格式(預設開啟)",
+				"state.label": "目前狀態",
+				"state.on": "已啟用",
+				"state.off": "已關閉",
+				"switch.on": "啟用",
+				"switch.off": "停用",
+				"error": "寫入失敗",
+				"hint": "啟用後:所有工具(bash 指令與 workdir,以及 read/write/edit/read_image/glob/grep 的路徑參數)統一使用 MSYS 磁碟根 POSIX 路徑(/c/Users/...);檔案工具的路徑參數由宿主自動轉譯,模型無感。停用後恢復 dsh 原生行為(檔案工具使用 Windows 路徑)。bash 一律是 Git Bash,不受此開關影響。",
+			},
+		};
+
+		// ── locale resolution (live: read per lookup, cached per tag) ───────────
+
+		function hasOwnKey(bag, key) {
+			return Object.prototype.hasOwnProperty.call(bag, key);
+		}
+
+		/* Resolve one locale tag against what this plugin ships: the exact tag,
+		   then the primary subtag, then English. Chinese is special-cased because
+		   the traditional variants are shipped while a bare zh-Hant-* is not
+		   spelled out. */
+		function dictionaryFor(active) {
+			var raw = active === undefined || active === null || active === "" ? "en" : String(active);
+			var tag = raw.toLowerCase().replace(/_/g, "-");
+			var primary = tag.split("-")[0];
+			if (primary === "zh") {
+				if (hasOwnKey(LOCALES, tag)) return LOCALES[tag];
+				if (tag.indexOf("hant") >= 0 || tag === "zh-hk" || tag === "zh-mo" || tag === "zh-tw") {
+					return hasOwnKey(LOCALES, "zh-hk") ? LOCALES["zh-hk"] : zh;
+				}
+				return zh;
+			}
+			if (hasOwnKey(LOCALES, primary)) return LOCALES[primary];
+			return en;
+		}
+
+		/* The active locale tag, read fresh every time: DSH's language preference
+		   switches live, so a value captured once at activation would keep answering
+		   in the language that happened to be active when the card loaded. The
+		   host-backed preference wins; the browser is the fallback. */
+		function activeLocaleOf(ctx) {
+			var active = "";
+			try {
+				var locale = ctx.get("locale");
+				if (locale !== undefined && typeof locale.getSnapshot === "function") {
+					var snapshot = locale.getSnapshot();
+					if (snapshot !== null && typeof snapshot === "object" && typeof snapshot.active === "string") active = snapshot.active;
+				}
+			} catch (error) { /* fall through to the browser */ }
+			if (active === "" && typeof navigator === "object" && navigator !== null && typeof navigator.language === "string") active = navigator.language;
+			return active;
+		}
+
+		/* A live lookup: the dictionary is picked per call and cached under the tag
+		   it was picked for, so a language switch costs one string compare per
+		   string. Falling back to EN — kept key-complete on purpose — means an
+		   unsupported language shows English, never a raw key. */
+		function translatorOf(ctx) {
+			var cachedTag = null;
+			var cachedDict = null;
+			return function (key) {
+				var tag = activeLocaleOf(ctx);
+				if (tag !== cachedTag) { cachedTag = tag; cachedDict = dictionaryFor(tag); }
+				if (hasOwnKey(cachedDict, key)) return cachedDict[key];
+				return hasOwnKey(en, key) ? en[key] : key;
+			};
+		}
+
 		// ── styles (gb- prefixed; tokens mirror PluginCard.module.css) ─────────
 
 		var STYLE_ID = "dsh-gitbash-shell-style";
@@ -140,13 +445,40 @@ window.__ModuleLoader__.load({
 			return this.props.children;
 		};
 
+		// ── live locale (repaint the card on a language switch) ─────────────────
+
+		/**
+		 * Wraps the card so a language switch repaints it instead of waiting for a
+		 * page load. DSH's own components re-render on the locale snapshot, but this
+		 * card belongs to a plugin: it subscribes for itself, and it hands the card
+		 * THIS plugin's live lookup (translatorOf) — whose resolution covers the
+		 * third languages the DSH catalog does not carry. The card stays inside the
+		 * same quiet boundary as before.
+		 */
+		function LocaleLive(props) {
+			var tickState = useState(0);
+			var tick = tickState[0];
+			var setTick = tickState[1];
+			void tick;
+
+			useEffect(function () {
+				var locale = props.ctx && typeof props.ctx.get === "function" ? props.ctx.get("locale") : undefined;
+				if (locale === undefined || typeof locale.subscribe !== "function") return undefined;
+				var unsubscribe = locale.subscribe(function () { setTick(function (value) { return value + 1; }); });
+				return typeof unsubscribe === "function" ? unsubscribe : undefined;
+			}, []);
+
+			return E(QuietBoundary, null, E(GitBashCard, Object.assign({}, props.cardProps, { t: props.t })));
+		}
+
 		// ── settings card (module-level component) ───────────────────────────────
 
 		/**
-		 * The Settings → Plugins card. t arrives through the registration's
-		 * locale field; scope arrives as a PLAIN prop from the inject factory.
-		 * Snapshots are read per render; each write bumps a local tick so the
-		 * card re-reads without an external-store hook adapter.
+		 * The Settings → Plugins card. t arrives from LocaleLive (the plugin's own
+		 * live lookup, keyed on the active locale at call time); scope arrives as a
+		 * PLAIN prop from the inject factory. Snapshots are read per render; each
+		 * write bumps a local tick so the card re-reads without an external-store
+		 * hook adapter.
 		 */
 		function GitBashCard(props) {
 			var t = typeof props.t === "function" ? props.t : function (key) { return key; };
@@ -235,11 +567,17 @@ window.__ModuleLoader__.load({
 
 		exports.apply = function (ctx) {
 			var scope = ctx.settingsScope.bind({ namespace: SETTINGS_NAMESPACE });
+			/* The card's only copy entry point: a live lookup, never a captured
+			   dictionary — the language preference switches without a reload. */
+			var t = translatorOf(ctx);
 
 			ctx.effect(function () {
 				var disposers = [ensureStyles()];
 				try {
-					var disposeDict = ctx.locale.register(NS, { zh: zh, en: en });
+					/* Every shipped dictionary rides the DSH locale registry, so host-side
+					   consumers read the same copy the card does; a missing service simply
+					   means the card is the only reader. */
+					var disposeDict = ctx.locale.register(NS, Object.assign({ zh: zh, en: en }, LOCALES));
 					if (typeof disposeDict === "function") disposers.push(disposeDict);
 				} catch (error) {
 					console.warn(TAG + " dictionary registration failed:", error && error.message ? error.message : error);
@@ -270,8 +608,11 @@ window.__ModuleLoader__.load({
 						// props: the bound settings scope rides here as a PLAIN member
 						// (top-level options fields do NOT reach the component).
 						inject: function () { return { scope: scope }; },
-					}, function CardWithBoundary(props) {
-						return E(QuietBoundary, null, E(GitBashCard, props));
+					}, function CardWithLocale(props) {
+						/* The registration's locale field also hands out the framework's own
+						   t seat; the plugin's lookup wins (21 locale tags against the catalog's
+						   zh/en), passed last so no prop merge order can override it. */
+						return E(LocaleLive, { ctx: ctx, t: t, cardProps: props });
 					});
 				});
 			} catch (error) {

package/src/index.js

@@ -231,6 +231,183 @@ async function detectPresentSupport(agentPresets) {
   }
 }
 
+/** Row ids the shipped workflow-engine row has answered to (dsh 0.1.6 renamed it). */
+const ENGINE_ROW_IDS = ['workflow-worker-thread', 'workflow-ptc']
+
+/** Which built-in preset each of this plugin's variants mirrors, for row-form lookup. */
+export const ROW_SOURCE = {
+  'standard-gitbash': 'standard',
+  'cordis-gitbash': 'cordis',
+  'code-gitbash': 'ptc',
+}
+
+/** Leading whitespace of one line (pure). */
+function indentOf(line) {
+  return line.slice(0, line.length - line.trimStart().length)
+}
+
+/** The unquoted value of a name line, or undefined when the line is not one (pure). */
+function quotedName(line) {
+  const trimmed = line.trim()
+  if (!trimmed.startsWith('name: ')) return undefined
+  const raw = trimmed.slice(6).trim()
+  if (raw.length > 1 && raw.charAt(0) === "'" && raw.charAt(raw.length - 1) === "'") return raw.slice(1, -1)
+  return raw
+}
+
+/**
+ * Read ONE row's spelling out of a composition text (pure): the name value
+ * that follows its id line and whether the row's own block turns it off before
+ * the next row starts. Returns undefined when the row is absent, and never
+ * throws, so a composition that legitimately lacks the row (minimal) is simply
+ * left alone.
+ * @param text - composition text.
+ * @param rowId - exact id value to locate.
+ * @returns the row's spelling, or undefined.
+ */
+export function rowFormOf(text, rowId) {
+  const lines = text.split('\n')
+  for (let i = 0; i < lines.length; i += 1) {
+    if (lines[i].trim() !== '- id: ' + rowId) continue
+    const nameLine = i + 1 < lines.length ? lines[i + 1] : ''
+    const name = quotedName(nameLine)
+    if (name === undefined) continue
+    let disabled = false
+    let disabledIndent = indentOf(nameLine)
+    for (let j = i + 2; j < lines.length; j += 1) {
+      if (lines[j].trim().startsWith('- id: ')) break
+      if (lines[j].trim() === 'disabled: true') {
+        disabled = true
+        disabledIndent = indentOf(lines[j])
+        break
+      }
+    }
+    return { id: rowId, name, indent: indentOf(lines[i]), nameIndent: indentOf(nameLine), disabled, disabledIndent }
+  }
+  return undefined
+}
+
+/**
+ * Read the two rows this plugin's committed compositions must track out of a
+ * SHIPPED composition text (pure). The built-in preset is the authority: it
+ * mounts on this host by construction, so whatever it spells is mountable
+ * here, on every era, without shipping one asset variant per rename.
+ * @param text - a shipped agent.cordis.yml.
+ * @returns an object with the engine row and the tool-ralph row; either may be undefined.
+ */
+export function rowFormsOf(text) {
+  let engine
+  for (const id of ENGINE_ROW_IDS) {
+    engine = rowFormOf(text, id)
+    if (engine !== undefined) break
+  }
+  return { engine, ralph: rowFormOf(text, 'tool-ralph') }
+}
+
+/**
+ * Align the workflow-engine row with the host's own spelling (pure,
+ * idempotent, plain string surgery — never a YAML round-trip, so !!js literals
+ * survive).
+ *
+ * dsh 0.1.6-alpha.1 renamed this row workflow-worker-thread to workflow-ptc
+ * AND deleted the old package. A composition row whose module fails to import
+ * rejects the WHOLE preset mount (agent-presets mount.ts), so a committed old
+ * spelling breaks every Git Bash preset on the new host while the new spelling
+ * breaks them on hosts that still ship only the old package. The materializer
+ * therefore copies the row out of the host's own built-in preset instead of
+ * pinning either spelling.
+ * @param text - composition text.
+ * @param form - the host's engine row from rowFormsOf, or undefined to leave the text alone.
+ * @param options - engineEnabled forces the row on regardless of the host's own state.
+ * @returns the aligned text.
+ */
+export function alignEngineRow(text, form, options) {
+  if (!form) return text
+  const engineEnabled = Boolean(options && options.engineEnabled)
+  let current
+  for (const id of ENGINE_ROW_IDS) {
+    current = rowFormOf(text, id)
+    if (current !== undefined) break
+  }
+  if (current === undefined) return text
+  const head = '- id: ' + current.id + '\n' + current.nameIndent + "name: '" + current.name + "'"
+  const wanted = '- id: ' + form.id + '\n' + current.nameIndent + "name: '" + form.name + "'"
+  const wantOff = engineEnabled ? false : form.disabled
+  let out = text.replace(head, wanted)
+  if (wantOff && !current.disabled) {
+    out = out.replace(wanted + '\n', wanted + '\n' + current.nameIndent + 'disabled: true\n')
+  } else if (!wantOff && current.disabled) {
+    out = out.replace(wanted + '\n' + current.disabledIndent + 'disabled: true\n', wanted + '\n')
+  }
+  return out
+}
+
+/**
+ * Align the tool-ralph row with the host's own default (pure, idempotent).
+ * dsh 0.1.6-alpha.1 ships ralph disabled in every built-in preset: its tool
+ * description restricts it to runs the human explicitly asked for. The row
+ * still imports on older hosts, so this is a semantics alignment rather than a
+ * mount fix — but a composition claiming to mirror the built-in preset should
+ * not silently re-enable a tool the deployment turned off.
+ * @param text - composition text.
+ * @param form - the host's tool-ralph row from rowFormsOf, or undefined.
+ * @returns the aligned text.
+ */
+export function alignRalphRow(text, form) {
+  if (!form) return text
+  const current = rowFormOf(text, 'tool-ralph')
+  if (current === undefined) return text
+  const head = '- id: tool-ralph\n' + current.nameIndent + "name: '" + current.name + "'"
+  if (form.disabled && !current.disabled) {
+    return text.replace(head + '\n', head + '\n' + current.nameIndent + 'disabled: true\n')
+  }
+  if (!form.disabled && current.disabled) {
+    return text.replace(head + '\n' + current.disabledIndent + 'disabled: true\n', head + '\n')
+  }
+  return text
+}
+
+/**
+ * Probe every built-in preset this plugin's variants mirror for those row
+ * spellings (never throws). The live roster is the authority — package
+ * resolution alone would lie on linked development trees and on CLI installs
+ * whose first-party packages live outside the profile.
+ * @param agentPresets - the roster service.
+ * @returns a map of row forms per available built-in id, or undefined.
+ */
+async function detectRowForms(agentPresets) {
+  try {
+    const list = await agentPresets.list()
+    const entries = Array.isArray(list) ? list : []
+    const out = {}
+    for (const id of ['ptc', 'standard', 'cordis']) {
+      const entry = entries.find((p) => p && p.id === id && typeof p.path === 'string')
+      if (!entry) continue
+      const file = /\.yml$/.test(entry.path) ? entry.path : join(entry.path, 'agent.cordis.yml')
+      out[id] = rowFormsOf(readFileSync(file, 'utf8'))
+    }
+    return Object.keys(out).length > 0 ? out : undefined
+  } catch (error) {
+    console.log(TAG + ' row-form probe failed (' + (error && error.message ? error.message : error) + ') — keeping the committed spellings')
+    return undefined
+  }
+}
+
+/**
+ * Marker fingerprint of the row spellings one variant is aligned to, so a host
+ * that renames (or re-defaults) them re-materializes on the next boot.
+ * @param rows - detectRowForms result.
+ * @param presetId - the variant being materialized.
+ * @returns a short stable string, '' when nothing was probed.
+ */
+function rowFingerprint(rows, presetId) {
+  const source = ROW_SOURCE[presetId]
+  const form = rows && source ? rows[source] : undefined
+  if (!form || !form.engine) return ''
+  const ralph = form.ralph === undefined ? 'na' : (form.ralph.disabled ? 'off' : 'on')
+  return form.engine.id + ':' + (form.engine.disabled ? 'off' : 'on') + ':' + ralph
+}
+
 /**
  * Pick the committed composition asset inside one variant directory (pure).
  * The ptc-era twin is preferred when the roster says `ptc`; the persona-split
@@ -250,11 +427,17 @@ function pickComposition(base, persona, available) {
 }
 
 /** Startup decision for an existing unmodified tree: 'refresh' or 'idle'. */
-function syncDecision({ state, marker, version, sourceHashes, base = 'code', persona = 'text', present = false }) {
+function syncDecision({ state, marker, version, sourceHashes, base = 'code', persona = 'text', present = false, rows = '' }) {
   if (state !== 'unmodified' || !marker) return 'refresh'
   if (marker.version !== version) return 'refresh'
   if (marker.base !== base) return 'refresh'
   if ((marker.persona ?? 'text') !== persona) return 'refresh'
+  // Host row-form flip: dsh 0.1.6-alpha.1 renamed the workflow-engine row and
+  // deleted the package behind the old spelling. A composition row that cannot
+  // be imported rejects the WHOLE preset mount, so a host reporting a
+  // different spelling must re-materialize (same marker-dimension pattern as
+  // persona and present).
+  if ((marker.rows ?? '') !== rows) return 'refresh'
   // Host-capability flip: @deepseek-ai/dsh-tool-present first shipped with dsh
   // 0.1.5-alpha.2. A preset composed with the row on a host that lacks the
   // package REJECTS THE WHOLE MOUNT (mount.ts: a row whose module failed to
@@ -315,7 +498,7 @@ async function hostHasToolPresent() {
 }
 
 /** Write one preset directory from scratch. Returns 'ok' or 'no-skills-source'. */
-function materialize({ target, presetId, skillsSource, version, base = 'code', persona = 'text', present = false }) {
+function materialize({ target, presetId, skillsSource, version, base = 'code', persona = 'text', present = false, rows }) {
   rmSync(target, { recursive: true, force: true })
   mkdirSync(target, { recursive: true })
 
@@ -323,6 +506,17 @@ function materialize({ target, presetId, skillsSource, version, base = 'code', p
   const compositionFile = pickComposition(base, persona, available)
   let composition = readFileSync(join(pkgDir, 'assets', presetId, compositionFile), 'utf8')
   if (present && compositionFile.includes('.ptc.')) composition = injectPresentRow(composition)
+  // Row-form alignment (v0.14.0): the committed assets pin one spelling of the
+  // workflow-engine row, but a host renames it out from under them (dsh
+  // 0.1.6-alpha.1) and a row whose module fails to import rejects the whole
+  // mount. Copy the host's own spelling rather than shipping a third asset
+  // variant per era. Absent probe = leave the frozen history untouched.
+  const rowSource = ROW_SOURCE[presetId]
+  const rowForm = rows && rowSource ? rows[rowSource] : undefined
+  if (rowForm) {
+    composition = alignEngineRow(composition, rowForm.engine)
+    composition = alignRalphRow(composition, rowForm.ralph)
+  }
   writeFileSync(join(target, 'agent.cordis.yml'), composition)
   writeFileSync(join(target, 'preset.yml'), readFileSync(join(pkgDir, 'assets', presetId, 'preset.yml')))
 
@@ -337,7 +531,7 @@ function materialize({ target, presetId, skillsSource, version, base = 'code', p
     }
   }
 
-  const marker = { managedBy: MANAGED_BY, version, presetId, base, persona, present, files: hashTree(target) }
+  const marker = { managedBy: MANAGED_BY, version, presetId, base, persona, present, rows: rowFingerprint(rows, presetId), files: hashTree(target) }
   writeFileSync(join(target, MARKER_FILE), JSON.stringify(marker, null, 2) + '\n')
   return skills
 }
@@ -729,7 +923,7 @@ export async function apply(ctx, config = {}) {
   const disposeGitBash = ctx.provide('gitBash', gitBashCapability)
   ctx.effect(() => disposeGitBash, 'dsh-gitbash-shell: gitBash capability')
 
-  // ── settings namespace: the posixPaths switch (default OFF) ──────────────
+  // ── settings namespace: the posixPaths switch (default ON, v0.10.0) ──────
   // Served on the host so the Plugins tab pairs it with the browser card
   // (the tab dispatches Host-served namespaces ∩ registered cards). Dynamic
   // imports keep the zero-dependency smoke path importable; the schema MUST
@@ -951,6 +1145,10 @@ export async function apply(ctx, config = {}) {
   // resolving from this plugin's own tree (covers hosts where the roster
   // probe is unavailable).
   const present = (await detectPresentSupport(ctx.agentPresets)) || (await hostHasToolPresent())
+  // Row spellings of the built-in presets these variants mirror: the
+  // workflow-engine row was renamed and its old package deleted in dsh
+  // 0.1.6-alpha.1, so the materializer copies whatever the host itself ships.
+  const rows = await detectRowForms(ctx.agentPresets)
   const userRootPath = userRoot.path
   purgeOrphans(userRootPath, presetIds)
 
@@ -980,12 +1178,13 @@ export async function apply(ctx, config = {}) {
 
     const sourceHashes = presetId === 'cordis-gitbash' ? skillsHashes(skillsSource) : null
     const marker = readMarker(target)
-    if (state === 'unmodified' && syncDecision({ state, marker, version, sourceHashes, base, persona, present }) === 'idle') {
+    const markerRows = rowFingerprint(rows, presetId)
+    if (state === 'unmodified' && syncDecision({ state, marker, version, sourceHashes, base, persona, present, rows: markerRows }) === 'idle') {
       ctx.logger?.('gitbash-shell')?.debug?.( `preset '${presetId}' up to date (v${version}, ${base}-era${persona === 'split' ? ', persona-split' : ''}) — idle`)
       continue
     }
 
-    const skills = materialize({ target, presetId, skillsSource, version, base, persona, present })
+    const skills = materialize({ target, presetId, skillsSource, version, base, persona, present, rows })
     const verb = state === 'absent' ? 'materialized' : 'refreshed'
     console.log(
       `${TAG} ${verb} preset '${presetId}' into ${userRootPath} (v${version}, ${base}-era composition${persona === 'split' ? ', persona-split' : ''})` +
@@ -995,4 +1194,4 @@ export async function apply(ctx, config = {}) {
 }
 
 // Test surface: pure helpers, no Cordis context required.
-export const _internal = { PRESET_IDS, translateMsysPath, translatePathArguments, readPosixPaths, windowsToMsys, rewriteResultPaths, MARKER_FILE, classify, materialize, cleanupOnDispose, firstUserRoot, hashTree, skillsHashes, syncDecision, installRegisterShim, baseForRoster, detectBase, pickComposition, personaEraForText, detectPersonaEra, injectPresentRow, hostHasToolPresent, detectPresentSupport }
+export const _internal = { PRESET_IDS, translateMsysPath, translatePathArguments, readPosixPaths, windowsToMsys, rewriteResultPaths, MARKER_FILE, classify, materialize, cleanupOnDispose, firstUserRoot, hashTree, skillsHashes, syncDecision, installRegisterShim, baseForRoster, detectBase, pickComposition, personaEraForText, detectPersonaEra, injectPresentRow, hostHasToolPresent, detectPresentSupport, rowFormOf, rowFormsOf, alignEngineRow, alignRalphRow, ROW_SOURCE }

package/src/shell.js

@@ -70,12 +70,52 @@ export class GitBashSandboxExecutor extends SandboxBashExecutor {
   /**
    * Wrap one shell command via the ctx.sandbox provider, substituting Git Bash
    * for the shipped bare `bash` argv.
+   *
+   * Signature spans both dsh eras: 0.1.6-alpha.1 made the provider's confine
+   * async and handed it the caller's abort signal (the base class now calls
+   * `this.confine(command, policy, signal)` and awaits it). The predecessor
+   * was synchronous and took two arguments. Forwarding the third argument is
+   * safe on both — the old provider ignores it and its synchronous return is
+   * what the old base class still consumes — while dropping it on the new host
+   * would silently detach sandbox preparation from cancellation.
    * @param command - shell source for the confined inner `bash -c`.
    * @param policy - resolved confined execution policy.
-   * @returns the provider's exact argv and settlement-classification facts.
+   * @param signal - caller deadline/cancellation, forwarded when the host provides one.
+   * @returns the provider's exact argv and settlement-classification facts (a promise on dsh >= 0.1.6).
    */
-  confine(command, policy) {
-    return this.ctx.sandbox.confine([this.bashPath, '-c', command], policy)
+  confine(command, policy, signal) {
+    return this.ctx.sandbox.confine([this.bashPath, '-c', command], policy, signal)
+  }
+
+  /**
+   * Whether the LOADED base class declares an async `start`, probed once
+   * (pure). dsh 0.1.6-alpha.1 turned LocalBashExecutor.start into an async
+   * method returning Promise<ShellProcess>; before that it returned the live
+   * handle directly. This override has to match whichever contract the host
+   * actually carries: handing a plain handle to a host that awaits is fine,
+   * but handing a Promise to a synchronous host would give it a thenable
+   * instead of a process. Shape is probed, never inferred from a version.
+   * @returns true when the base class start is an async function.
+   */
+  static baseStartIsAsync() {
+    return SandboxBashExecutor.prototype.start.constructor.name === 'AsyncFunction'
+  }
+
+  /**
+   * Unwrap `runArgv`'s settlement across dsh eras (pure). 0.1.6-alpha.1
+   * changed the protected hook's return value from the bare ShellRunResult to
+   * `{ result, spawnRequested }`, where spawnRequested is false when
+   * preparation was cancelled before any spawn. Spreading the wrapper as if it
+   * were the result would hand the caller an object carrying no exitCode and
+   * no streams at all, so it is unwrapped by shape — never by version.
+   * @param raw - whatever the loaded `runArgv` resolved to.
+   * @returns the bare result plus whether argv ever reached the provider.
+   */
+  static unwrapRunArgv(raw) {
+    if (raw !== null && typeof raw === 'object' && typeof raw.spawnRequested === 'boolean' && raw.result !== undefined) {
+      return { result: raw.result, spawnRequested: raw.spawnRequested }
+    }
+    return { result: raw, spawnRequested: true }
   }
 
   /**
@@ -93,13 +133,17 @@ export class GitBashSandboxExecutor extends SandboxBashExecutor {
     if (policy === undefined) return super.run(spec)
     const { mode } = policy
     if (mode === 'danger-full-access') {
-      const result = await this.runArgv(spec, [this.bashPath, '-c', spec.command])
+      const { result } = GitBashSandboxExecutor.unwrapRunArgv(
+        await this.runArgv(spec, [this.bashPath, '-c', spec.command]))
       return { ...result, sandbox: { mode, denied: false } }
     }
     if (process.platform === 'win32') {
       this.warnConfinedUnconfined(mode)
-      const result = await this.runArgv(spec, [this.bashPath, '-c', spec.command])
-      return { ...result, sandbox: { mode, denied: false, enforcement: 'unconfined' } }
+      const { result, spawnRequested } = GitBashSandboxExecutor.unwrapRunArgv(
+        await this.runArgv(spec, [this.bashPath, '-c', spec.command]))
+      // No spawn means no argv ran, so there is nothing to label as
+      // unconfined; the parent reports the same bare sandbox facts there.
+      return { ...result, sandbox: spawnRequested ? { mode, denied: false, enforcement: 'unconfined' } : { mode, denied: false } }
     }
     return super.run(spec)
   }
@@ -108,16 +152,14 @@ export class GitBashSandboxExecutor extends SandboxBashExecutor {
     const policy = spec.sandboxPolicy
     if (policy === undefined) return super.start(spec)
     const { mode } = policy
-    if (mode === 'danger-full-access') {
-      const proc = this.startArgv(spec, [this.bashPath, '-c', spec.command])
-      proc.sandbox = { mode, denied: false }
-      return proc
-    }
-    if (process.platform === 'win32') {
-      this.warnConfinedUnconfined(mode)
+    const fullAccess = mode === 'danger-full-access'
+    if (fullAccess || process.platform === 'win32') {
+      if (!fullAccess) this.warnConfinedUnconfined(mode)
       const proc = this.startArgv(spec, [this.bashPath, '-c', spec.command])
-      proc.sandbox = { mode, denied: false, enforcement: 'unconfined' }
-      return proc
+      proc.sandbox = fullAccess ? { mode, denied: false } : { mode, denied: false, enforcement: 'unconfined' }
+      // Match the loaded base contract: the async one (dsh >= 0.1.6) is
+      // awaited by its callers, the synchronous one is consumed directly.
+      return GitBashSandboxExecutor.baseStartIsAsync() ? Promise.resolve(proc) : proc
     }
     return super.start(spec)
   }