dsh-plugin-wsl-env 0.13.0 → 0.13.1

package/CHANGELOG.md

@@ -16,6 +16,47 @@ were part of the record.
 
 ## [Unreleased]
 
+## [0.13.1] - 2026-10-19
+
+A patch release restoring `wsl-shell-env`: the component mounts again, and the
+managed `DSH_*` facts it contributes now reach commands on the default
+resident-agent path.
+
+### Changed
+
+- **Upstream proposals filed.** The session-notice seam
+  ([#10263](https://github.com/deepseek-ai/deepseek-harness/discussions/10263)),
+  the `spawnSpec` seam (#10261), the fsio export (#10262), the UNC-workspace bug
+  (#10260) and the WSL-workspaces RFC (#10264) now point at their discussions;
+  the local drafts carry the links.
+
+### Fixed
+
+- **`wsl-shell-env` no longer fails to activate.** The row sweeps the
+  live-agent list at mount to warm facts for sessions that opened before it,
+  but declared only `shellEnv` in `inject` and read `ctx.agents` as a property.
+  Cordis 4 refuses that read — `cannot get property "agents" without inject` —
+  so `apply()` rejected and the plugin manager listed the component as 异常
+  (`包含的组件 → 异常`), with the whole contribution missing from shell calls.
+  The sweep now reads the service through `ctx.get("agents")`, the sanctioned
+  access for a service this row does not inject: activation no longer depends
+  on an agent loop, and the sweep still runs when one is composed.
+  `wsl-preflight` carried the same property read inside a `try`/`catch`, where
+  the throw silently disabled its mount sweep; it gets the same fix.
+  `test/shell-env.test.mjs` and the real-cordis check in
+  `test/preflight.test.mjs` mount both rows against the guard.
+
+- **The managed `DSH_*` namespace now reaches commands on the default
+  resident-agent path.** `ShellExecSpec.dshEnv` was forwarded only by the
+  one-shot `wsl.exe` fallback; `executeViaAgent` dropped it before
+  `agent.exec` — after the mount fix above, the row registered its facts but
+  no model shell call could see `DSH_HOME`, `DSH_SESSION_ID` or any
+  `DSH_WSL_*` value (`env | grep '^DSH_'` was empty). The handle now carries
+  the merged map (`env` first, `dshEnv` last — the same order the one-shot
+  path uses) into the agent's `SETENV` frames. `test/agent-exec.test.mjs` and
+  `test/provider.test.mjs` pin the frame, and both checks fail against the
+  previous build.
+
 ## [0.13.0] - 2026-10-19
 
 This release ships the P0/P1 hardening batch: session-scoped `auto`

package/docs/ROADMAP-1.0.md

@@ -339,9 +339,9 @@ command.
 - [x] The preflight checks bwrap, systemd PID 1, `systemd-run` and Linger.
 - [x] The warning is visibly attached to the session through the
       runtime-context entry (not only logs).
-- [ ] A GUI notice/banner renders it: upstream seam missing; the filing payload
-      is ready at [proposal-session-notice.md](upstream/proposal-session-notice.md)
-      and has not been submitted (a maintainer action).
+- [ ] A GUI notice/banner renders it: filed upstream as
+      [#10263](https://github.com/deepseek-ai/deepseek-harness/discussions/10263);
+      until a seam lands, the advisory stays in the log and runtime context.
 - [x] The warning never installs anything and never changes fail-closed
       behavior.
 - [x] A session with a usable environment produces no warning.

package/docs/UPSTREAM-FSIO-EXPORT.md

@@ -1,7 +1,8 @@
 # Upstream proposal: export the fsio text helpers from `dsh-fs-local`
 
-Status: draft, not yet filed upstream — no discussion link yet (the filing
-convention is [UPSTREAM-TERMINAL-TITLE.md](UPSTREAM-TERMINAL-TITLE.md)).
+Status: filed upstream as
+[deepseek-ai/deepseek-harness#10262](https://github.com/deepseek-ai/deepseek-harness/discussions/10262)
+(Ideas); the filing convention is [UPSTREAM-TERMINAL-TITLE.md](UPSTREAM-TERMINAL-TITLE.md).
 Targeting `deepseek-harness` @ `packages/fs/fs-local`, the `0.2.1-rc.x` line
 this plugin pins exactly (`@deepseek-ai/dsh-fs-local@0.2.1-rc.2`, in both the
 dev and peer dependency blocks of `package.json`). This is the Shape-A

package/lib/agent-exec.d.ts

@@ -129,10 +129,10 @@ export interface AgentExecutionHandle {
  * @returns the execution handle (`status`, `exitCode`, `signal`, `observed`,
  *   `done`, `readOutput`, `kill`, `result`).
  */
-export declare function agentExecutionHandle({ agent, cwd, argv, timeoutMs, maxOutputBytes, signal, onStarted }: {
+export declare function agentExecutionHandle({ agent, cwd, argv, timeoutMs, maxOutputBytes, env, signal, onStarted }: {
     /**
      * The {@link WslAgent}-like runner: `exec` accepting
-     * `{cwd, argv, timeoutMs, signal}` and resolving `{exitCode, stdout, stderr}`;
+     * `{cwd, argv, timeoutMs, env, signal}` and resolving `{exitCode, stdout, stderr}`;
      * throws `AgentUnavailableError` when out.
      */
     agent: AgentExecRunner;
@@ -150,6 +150,13 @@ export declare function agentExecutionHandle({ agent, cwd, argv, timeoutMs, maxO
      * stream as `truncated: true`.
      */
     maxOutputBytes?: number;
+    /**
+     * Environment for this command: the caller's entries with the managed
+     * `DSH_*` snapshot merged last. The agent applies it as `SETENV` frames
+     * immediately before the command's `EXEC` (see `WslAgent.exec`); dropping it
+     * here is what kept every managed fact out of the resident-agent path.
+     */
+    env?: Record<string, string>;
     /** The caller's cancellation. */
     signal?: AbortSignal;
     /**

package/lib/agent-exec.js

@@ -54,7 +54,7 @@ function memoryReader(buffer) {
  * @returns the execution handle (`status`, `exitCode`, `signal`, `observed`,
  *   `done`, `readOutput`, `kill`, `result`).
  */
-export function agentExecutionHandle({ agent, cwd, argv, timeoutMs = 0, maxOutputBytes = 0, signal, onStarted }) {
+export function agentExecutionHandle({ agent, cwd, argv, timeoutMs = 0, maxOutputBytes = 0, env, signal, onStarted }) {
     // Our own controller is the kill channel; the caller's signal races it.
     const controller = new AbortController();
     let timedOut = false;
@@ -72,7 +72,7 @@ export function agentExecutionHandle({ agent, cwd, argv, timeoutMs = 0, maxOutpu
             controller.abort(new Error(BASH_TIMEOUT_REASON));
         }, timeoutMs).unref?.();
     }
-    const settle = agent.exec({ cwd, argv, timeoutMs, maxOutputBytes, signal: controller.signal }).then((result) => ({ ok: true, result }), (error) => {
+    const settle = agent.exec({ cwd, argv, timeoutMs, maxOutputBytes, env, signal: controller.signal }).then((result) => ({ ok: true, result }), (error) => {
         // A workdir the distro cannot enter is the command's own failure, not
         // the agent's: synthesize the relay-shaped stderr the one-shot path
         // produces, so the executor's `workdirFailure` check reports it the

package/lib/index.js

@@ -831,6 +831,13 @@ export class WslShellExecutor extends LocalBashExecutor {
         const argv = runtime !== undefined
             ? this.distroArgv(resolved, shell)
             : confined !== undefined ? confined.argv : this.distroArgv(resolved, shell);
+        // The managed `DSH_*` snapshot merges last, exactly as the one-shot path's
+        // spawn env does (`ShellExecSpec`: `dshEnv` wins over `env`). The agent
+        // applies these as SETENV frames immediately before the command's EXEC, so
+        // the resident path now carries `DSH_HOME`, `DSH_SESSION_ID` and the
+        // `DSH_WSL_*` facts too — without this the whole registry was invisible on
+        // the default path while the one-shot fallback forwarded it.
+        const env = { ...resolved.env, ...resolved.dshEnv };
         const execution = agentExecutionHandle({
             agent,
             // The one-shot path converts the spec's workdir into the distro's
@@ -839,6 +846,7 @@ export class WslShellExecutor extends LocalBashExecutor {
             // reach `chdir` (that is the bug this line fixes).
             cwd: toLinuxPath(resolved.workdir, { distro }),
             argv,
+            env: Object.keys(env).length > 0 ? env : undefined,
             timeoutMs: resolved.timeoutMs,
             // The agent enforces the collect budget distro-side (the EXEC frame
             // carries it); `maxSpillBytes` stays one-shot-only — the agent path has

package/lib/preflight.js

@@ -176,8 +176,14 @@ export async function apply(ctx, config = {}) {
     // Mount order is not a guarantee: a session created during startup can finish
     // before this service mounts and miss the event entirely (dsh-headless does
     // exactly that, and auto-preset sweeps for the same reason).
+    //
+    // `agents` is optional (this row injects nothing), so read it with `ctx.get`:
+    // a property read of an undeclared service throws in cordis 4, and the catch
+    // below would turn that into a silent no-op — exactly the sweep this block
+    // exists to perform.
     try {
-        for (const agent of ctx.agents?.list() ?? [])
+        const agents = ctx.get("agents");
+        for (const agent of agents?.list() ?? [])
             void check(agent);
     }
     catch (error) {

package/lib/shell-env.js

@@ -157,7 +157,14 @@ export async function apply(ctx, config = {}) {
         ensurePorts(parsed.distro);
     };
     const off = lifecycle.on?.("agent/created", (payload) => consider(payload?.agent));
-    for (const agent of lifecycle.agents?.list?.() ?? [])
+    // The live-agent sweep is a convenience, not a dependency: `inject` names
+    // only `shellEnv`, so reading `ctx.agents` as a property makes cordis 4
+    // throw "cannot get property \"agents\" without inject" and marks the whole
+    // component failed. `ctx.get` is the sanctioned read for a service this
+    // plugin did not inject, and it answers undefined when no agent loop is
+    // composed — the row still activates and resolves facts per shell call.
+    const live = ctx.get("agents");
+    for (const agent of live?.list?.() ?? [])
         consider(agent);
     const dispose = ctx.shellEnv.register({
         name: "dsh-plugin-wsl-env",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-wsl-env",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "description": "\u8ba9 DeepSeek Harness \u4ee5 WSL \u5b50\u7cfb\u7edf\u4f5c\u4e3a\u4f1a\u8bdd\u7684\u6267\u884c\u73af\u5883\uff1ashell\u3001\u6587\u4ef6\u8bfb\u5199\u4e0e\u547d\u4ee4\u6267\u884c\u5747\u5728\u5b50\u7cfb\u7edf\u5185\u5b8c\u6210\uff0c\u76ee\u5f55\u9009\u62e9\u5668\u4e0e GUI \u7ec8\u7aef\u540c\u6837\u5b9a\u4f4d\u5230\u5b50\u7cfb\u7edf\u8def\u5f84\uff0c\u5e76\u901a\u8fc7\u5b50\u7cfb\u7edf\u5185\u7684 bubblewrap \u5bf9\u547d\u4ee4\u8fdb\u884c\u6c99\u7bb1\u9694\u79bb",
   "keywords": [
     "deepseek-harness",
@@ -125,9 +125,9 @@
     "lint:types": "tsc --noEmit",
     "build": "node scripts/build.mjs",
     "lint:build": "node test/build-freshness.mjs",
-    "test:coverage": "node --test --experimental-test-coverage --test-coverage-lines=85 --test-coverage-branches=84 --test-coverage-functions=70 --test-coverage-exclude='scripts/**' test/agent-exec.test.mjs test/agent-fs-script.test.mjs test/agent-protocol.test.mjs test/agent.test.mjs test/fs-substrate.test.mjs test/fs.boot.test.mjs test/composition.test.mjs test/provider.test.mjs test/file-reference-wsl.test.mjs test/fsio-agent.test.mjs test/fsio-text.test.mjs test/git-route.test.mjs test/listing.test.mjs test/paths.test.mjs test/ports.test.mjs test/preset-choice.test.mjs test/probe-cache.test.mjs test/preflight.test.mjs test/sandbox.test.mjs test/search-exec.test.mjs test/search-route.test.mjs test/shell.test.mjs test/terminal-activity.test.mjs test/terminal.test.mjs test/watcher.test.mjs test/wsl.test.mjs test/fs-decisions.test.mjs test/session-scope.test.mjs test/session-runtime.test.mjs test/native-agent.test.mjs test/peers.test.mjs test/agent-shared.test.mjs test/distro-route.test.mjs test/fs-routing.test.mjs test/doctor.test.mjs test/profile-preset.test.mjs test/packaging.test.mjs test/peer-canary.test.mjs",
+    "test:coverage": "node --test --experimental-test-coverage --test-coverage-lines=85 --test-coverage-branches=84 --test-coverage-functions=70 --test-coverage-exclude='scripts/**' test/agent-exec.test.mjs test/agent-fs-script.test.mjs test/agent-protocol.test.mjs test/agent.test.mjs test/fs-substrate.test.mjs test/fs.boot.test.mjs test/composition.test.mjs test/provider.test.mjs test/file-reference-wsl.test.mjs test/fsio-agent.test.mjs test/fsio-text.test.mjs test/git-route.test.mjs test/listing.test.mjs test/paths.test.mjs test/ports.test.mjs test/preset-choice.test.mjs test/probe-cache.test.mjs test/preflight.test.mjs test/sandbox.test.mjs test/search-exec.test.mjs test/search-route.test.mjs test/shell.test.mjs test/shell-env.test.mjs test/terminal-activity.test.mjs test/terminal.test.mjs test/watcher.test.mjs test/wsl.test.mjs test/fs-decisions.test.mjs test/session-scope.test.mjs test/session-runtime.test.mjs test/native-agent.test.mjs test/peers.test.mjs test/agent-shared.test.mjs test/distro-route.test.mjs test/fs-routing.test.mjs test/doctor.test.mjs test/profile-preset.test.mjs test/packaging.test.mjs test/peer-canary.test.mjs",
     "test:syntax": "node test/syntax.mjs",
-    "test:unit": "node --test test/fs.boot.test.mjs test/fsio-text.test.mjs test/composition.test.mjs test/provider.test.mjs test/file-reference-wsl.test.mjs test/paths.test.mjs test/listing.test.mjs test/shell.test.mjs test/terminal.test.mjs test/probe-cache.test.mjs test/preflight.test.mjs test/preset-choice.test.mjs test/sandbox.test.mjs test/agent-protocol.test.mjs test/agent.test.mjs test/agent-fs-script.test.mjs test/fsio-agent.test.mjs test/fs-substrate.test.mjs test/agent-exec.test.mjs test/ports.test.mjs test/watcher.test.mjs test/wsl.test.mjs test/fs-decisions.test.mjs test/git-route.test.mjs test/search-route.test.mjs test/search-exec.test.mjs test/terminal-activity.test.mjs test/session-scope.test.mjs test/session-runtime.test.mjs test/native-agent.test.mjs test/peers.test.mjs test/agent-shared.test.mjs test/distro-route.test.mjs test/fs-routing.test.mjs test/doctor.test.mjs test/profile-preset.test.mjs test/packaging.test.mjs test/peer-canary.test.mjs",
+    "test:unit": "node --test test/fs.boot.test.mjs test/fsio-text.test.mjs test/composition.test.mjs test/provider.test.mjs test/file-reference-wsl.test.mjs test/paths.test.mjs test/listing.test.mjs test/shell.test.mjs test/shell-env.test.mjs test/terminal.test.mjs test/probe-cache.test.mjs test/preflight.test.mjs test/preset-choice.test.mjs test/sandbox.test.mjs test/agent-protocol.test.mjs test/agent.test.mjs test/agent-fs-script.test.mjs test/fsio-agent.test.mjs test/fs-substrate.test.mjs test/agent-exec.test.mjs test/ports.test.mjs test/watcher.test.mjs test/wsl.test.mjs test/fs-decisions.test.mjs test/git-route.test.mjs test/search-route.test.mjs test/search-exec.test.mjs test/terminal-activity.test.mjs test/session-scope.test.mjs test/session-runtime.test.mjs test/native-agent.test.mjs test/peers.test.mjs test/agent-shared.test.mjs test/distro-route.test.mjs test/fs-routing.test.mjs test/doctor.test.mjs test/profile-preset.test.mjs test/packaging.test.mjs test/peer-canary.test.mjs",
     "lint:style": "node test/style.mjs",
     "lint:links": "node scripts/check-links.mjs",
     "prepublishOnly": "pnpm test",