dsh-standards 0.0.3 → 1.0.1

package/40-checker/samples/entry18.json

@@ -0,0 +1,139 @@
+{
+  "schema": "dsh-entry18-manifest/1",
+  "description": "The 18 deduplicated ENTRY packages: 10 GitHub + 8 npm. id/name/version come from 40-checker/results/entry/18/summary.json. source/spec select the installable artifact: a published npm tarball at the exact version when it exists, otherwise a shallow clone of the repo.",
+  "profile": "base",
+  "targetDshVersion": "0.2.2-alpha.2",
+  "count": 18,
+  "sources": {
+    "github": 10,
+    "npm": 8
+  },
+  "rows": [
+    {
+      "id": "DDDMUC__dsh-free-search",
+      "name": "dsh-free-search",
+      "version": "0.9.26",
+      "source": "github",
+      "spec": "DDDMUC/dsh-free-search"
+    },
+    {
+      "id": "Ebony-Vinyl__dsh-our-free-model",
+      "name": "dsh-our-free-model",
+      "version": "2.1.0",
+      "source": "github",
+      "spec": "Ebony-Vinyl/dsh-our-free-model"
+    },
+    {
+      "id": "SeaOf0__dsh-redteam-model",
+      "name": "@dsh-external/dsh-redteam-model",
+      "version": "1.1.2",
+      "source": "github",
+      "spec": "SeaOf0/dsh-redteam-model"
+    },
+    {
+      "id": "YuJunZhiXue__dsh-purge",
+      "name": "dsh-purge",
+      "version": "1.1.85",
+      "source": "github",
+      "spec": "YuJunZhiXue/dsh-purge"
+    },
+    {
+      "id": "ci-diet",
+      "name": "dsh-ci-diet",
+      "version": "0.5.2",
+      "source": "npm",
+      "spec": "dsh-ci-diet"
+    },
+    {
+      "id": "daily-log",
+      "name": "@zzerx/dsh-plugin-daily-log",
+      "version": "0.4.3",
+      "source": "npm",
+      "spec": "@zzerx/dsh-plugin-daily-log"
+    },
+    {
+      "id": "howmp__dsh-pentest",
+      "name": "@howmp/dsh-pentest",
+      "version": "0.1.0-rc.37",
+      "source": "github",
+      "spec": "howmp/dsh-pentest"
+    },
+    {
+      "id": "kingcharleslzy-ai__dsh-purge",
+      "name": "dsh-purge-community",
+      "version": "1.6.67",
+      "source": "github",
+      "spec": "kingcharleslzy-ai/dsh-purge"
+    },
+    {
+      "id": "liguobao__ds-harness-remote",
+      "name": "ds-harness-remote",
+      "version": "0.6.0",
+      "source": "github",
+      "spec": "liguobao/ds-harness-remote"
+    },
+    {
+      "id": "mmparko__dsh-purge",
+      "name": "dsh-purge",
+      "version": "1.1.71",
+      "source": "github",
+      "spec": "mmparko/dsh-purge"
+    },
+    {
+      "id": "project-memory",
+      "name": "@yolk_vat-y/dsh-project-memory",
+      "version": "0.6.7",
+      "source": "npm",
+      "spec": "@yolk_vat-y/dsh-project-memory"
+    },
+    {
+      "id": "qiushi",
+      "name": "qiushi-dsh-evidence-audit",
+      "version": "0.1.0",
+      "source": "npm",
+      "spec": "qiushi-dsh-evidence-audit"
+    },
+    {
+      "id": "shaobeichen__dsh-pocket",
+      "name": "dsh-pocket",
+      "version": "2.12.0",
+      "source": "github",
+      "spec": "shaobeichen/dsh-pocket"
+    },
+    {
+      "id": "status-rotator",
+      "name": "dsh-status-rotator",
+      "version": "0.38.0",
+      "source": "npm",
+      "spec": "dsh-status-rotator"
+    },
+    {
+      "id": "telemetry",
+      "name": "dsh-telemetry-redactor",
+      "version": "0.1.0",
+      "source": "npm",
+      "spec": "dsh-telemetry-redactor"
+    },
+    {
+      "id": "ui-auth",
+      "name": "dsh-ui-auth",
+      "version": "0.7.1",
+      "source": "npm",
+      "spec": "dsh-ui-auth"
+    },
+    {
+      "id": "verification",
+      "name": "dsh-verification-receipt",
+      "version": "0.1.0",
+      "source": "npm",
+      "spec": "dsh-verification-receipt"
+    },
+    {
+      "id": "ysr666__dsh-vision-router",
+      "name": "dsh-vision-router",
+      "version": "3.1.0",
+      "source": "github",
+      "spec": "ysr666/dsh-vision-router"
+    }
+  ]
+}

package/40-checker/samples/frame.json

@@ -0,0 +1,485 @@
+{
+  "schema": "dsh-plugin-sample/1",
+  "generatedAt": "2026-10-31T14:29:24.284Z",
+  "source": "GitHub search: topic:dsh-plugin",
+  "query": {
+    "high": "topic:dsh-plugin stars:>50 size:<50000",
+    "low": "topic:dsh-plugin stars:1..50 size:<50000"
+  },
+  "seed": 20261031,
+  "frameSize": 500,
+  "sampleSize": 60,
+  "lowStarSize": 20,
+  "sample": [
+    {
+      "fullName": "gjy1992/dsh-diagram",
+      "url": "https://github.com/gjy1992/dsh-diagram",
+      "stars": 1,
+      "updatedAt": "2026-10-02T07:21:58Z"
+    },
+    {
+      "fullName": "NEAZ71eve/dsh-tool-github",
+      "url": "https://github.com/NEAZ71eve/dsh-tool-github",
+      "stars": 1,
+      "updatedAt": "2026-09-14T08:10:37Z"
+    },
+    {
+      "fullName": "Tyan66666/billion-context-dsh",
+      "url": "https://github.com/Tyan66666/billion-context-dsh",
+      "stars": 167,
+      "updatedAt": "2026-10-30T12:48:41Z"
+    },
+    {
+      "fullName": "LiarMTTT/TavernWeave",
+      "url": "https://github.com/LiarMTTT/TavernWeave",
+      "stars": 197,
+      "updatedAt": "2026-10-31T09:19:44Z"
+    },
+    {
+      "fullName": "Zxznb666/dsh-qoder-cn-subagent",
+      "url": "https://github.com/Zxznb666/dsh-qoder-cn-subagent",
+      "stars": 1,
+      "updatedAt": "2026-10-25T06:16:46Z"
+    },
+    {
+      "fullName": "tinqiao-oss/engramory",
+      "url": "https://github.com/tinqiao-oss/engramory",
+      "stars": 198,
+      "updatedAt": "2026-10-31T13:55:50Z"
+    },
+    {
+      "fullName": "MichengAI/dsh-im-connect",
+      "url": "https://github.com/MichengAI/dsh-im-connect",
+      "stars": 111,
+      "updatedAt": "2026-10-31T14:16:40Z"
+    },
+    {
+      "fullName": "RINGOLINK/dsh-desktop-shell",
+      "url": "https://github.com/RINGOLINK/dsh-desktop-shell",
+      "stars": 1,
+      "updatedAt": "2026-09-19T20:45:35Z"
+    },
+    {
+      "fullName": "wkfedor/deepseek-harness-voice-input",
+      "url": "https://github.com/wkfedor/deepseek-harness-voice-input",
+      "stars": 1,
+      "updatedAt": "2026-09-28T08:25:09Z"
+    },
+    {
+      "fullName": "mrme000m/dsh-prime-orchestrator",
+      "url": "https://github.com/mrme000m/dsh-prime-orchestrator",
+      "stars": 1,
+      "updatedAt": "2026-09-25T06:30:50Z"
+    },
+    {
+      "fullName": "MichengAI/dsh-archive-manager",
+      "url": "https://github.com/MichengAI/dsh-archive-manager",
+      "stars": 270,
+      "updatedAt": "2026-10-31T14:24:38Z"
+    },
+    {
+      "fullName": "plastic-labs/honcho",
+      "url": "https://github.com/plastic-labs/honcho",
+      "stars": 7850,
+      "updatedAt": "2026-10-31T14:27:56Z"
+    },
+    {
+      "fullName": "sopaco/terrain",
+      "url": "https://github.com/sopaco/terrain",
+      "stars": 276,
+      "updatedAt": "2026-10-31T01:30:51Z"
+    },
+    {
+      "fullName": "Ebony-Vinyl/EAC-Pack",
+      "url": "https://github.com/Ebony-Vinyl/EAC-Pack",
+      "stars": 179,
+      "updatedAt": "2026-10-31T09:57:08Z"
+    },
+    {
+      "fullName": "Jamailar/beav-deepseek-harness",
+      "url": "https://github.com/Jamailar/beav-deepseek-harness",
+      "stars": 1,
+      "updatedAt": "2026-10-20T15:35:33Z"
+    },
+    {
+      "fullName": "863683348/dsh-insight",
+      "url": "https://github.com/863683348/dsh-insight",
+      "stars": 1,
+      "updatedAt": "2026-09-12T14:35:50Z"
+    },
+    {
+      "fullName": "sjh9714/dsh-win32",
+      "url": "https://github.com/sjh9714/dsh-win32",
+      "stars": 152,
+      "updatedAt": "2026-10-31T09:53:03Z"
+    },
+    {
+      "fullName": "mmparko/dsh-purge",
+      "url": "https://github.com/mmparko/dsh-purge",
+      "stars": 2797,
+      "updatedAt": "2026-10-31T14:12:37Z"
+    },
+    {
+      "fullName": "EricWang1358/dsh-web-studyhub",
+      "url": "https://github.com/EricWang1358/dsh-web-studyhub",
+      "stars": 159,
+      "updatedAt": "2026-10-31T14:22:01Z"
+    },
+    {
+      "fullName": "tong-io/tongflow",
+      "url": "https://github.com/tong-io/tongflow",
+      "stars": 1049,
+      "updatedAt": "2026-10-31T05:29:30Z"
+    },
+    {
+      "fullName": "vibeinging/dsh-desktop",
+      "url": "https://github.com/vibeinging/dsh-desktop",
+      "stars": 486,
+      "updatedAt": "2026-10-30T23:41:46Z"
+    },
+    {
+      "fullName": "fwerkor/local-shell-mcp",
+      "url": "https://github.com/fwerkor/local-shell-mcp",
+      "stars": 106,
+      "updatedAt": "2026-10-30T11:20:42Z"
+    },
+    {
+      "fullName": "Anionex/dsh-turn-rewind",
+      "url": "https://github.com/Anionex/dsh-turn-rewind",
+      "stars": 142,
+      "updatedAt": "2026-10-31T07:43:45Z"
+    },
+    {
+      "fullName": "c3cvld7aag/fujiang-dsh",
+      "url": "https://github.com/c3cvld7aag/fujiang-dsh",
+      "stars": 413,
+      "updatedAt": "2026-10-31T13:22:07Z"
+    },
+    {
+      "fullName": "MindLab-Research/dsh-generative-ui",
+      "url": "https://github.com/MindLab-Research/dsh-generative-ui",
+      "stars": 102,
+      "updatedAt": "2026-10-31T09:08:33Z"
+    },
+    {
+      "fullName": "seriousz158/dsh-memory",
+      "url": "https://github.com/seriousz158/dsh-memory",
+      "stars": 169,
+      "updatedAt": "2026-10-22T03:11:14Z"
+    },
+    {
+      "fullName": "shanliuling/skills-link",
+      "url": "https://github.com/shanliuling/skills-link",
+      "stars": 197,
+      "updatedAt": "2026-10-24T08:39:58Z"
+    },
+    {
+      "fullName": "skymecode/deepseek-harness-for-vscode",
+      "url": "https://github.com/skymecode/deepseek-harness-for-vscode",
+      "stars": 162,
+      "updatedAt": "2026-10-31T14:26:16Z"
+    },
+    {
+      "fullName": "zed1902209846-dotcom/DPwhale-plugin",
+      "url": "https://github.com/zed1902209846-dotcom/DPwhale-plugin",
+      "stars": 1,
+      "updatedAt": "2026-08-14T10:02:18Z"
+    },
+    {
+      "fullName": "fangqiing/dsh-knowledge-lite",
+      "url": "https://github.com/fangqiing/dsh-knowledge-lite",
+      "stars": 1,
+      "updatedAt": "2026-10-22T08:41:46Z"
+    },
+    {
+      "fullName": "Tasihi89/dsh-talk-map",
+      "url": "https://github.com/Tasihi89/dsh-talk-map",
+      "stars": 104,
+      "updatedAt": "2026-10-31T08:26:01Z"
+    },
+    {
+      "fullName": "Ruler4396/dsh-launcher",
+      "url": "https://github.com/Ruler4396/dsh-launcher",
+      "stars": 196,
+      "updatedAt": "2026-10-29T02:32:51Z"
+    },
+    {
+      "fullName": "fzy0517/deepseek-harness-session-cleaner",
+      "url": "https://github.com/fzy0517/deepseek-harness-session-cleaner",
+      "stars": 1,
+      "updatedAt": "2026-10-24T03:38:57Z"
+    },
+    {
+      "fullName": "173787247/dsh-wsl-dns",
+      "url": "https://github.com/173787247/dsh-wsl-dns",
+      "stars": 1,
+      "updatedAt": "2026-10-30T04:50:45Z"
+    },
+    {
+      "fullName": "Yu-tao-Li/dsh-computer-use-win",
+      "url": "https://github.com/Yu-tao-Li/dsh-computer-use-win",
+      "stars": 377,
+      "updatedAt": "2026-10-31T14:00:59Z"
+    },
+    {
+      "fullName": "Ansellwan/DSH-Custom-Wallpaper",
+      "url": "https://github.com/Ansellwan/DSH-Custom-Wallpaper",
+      "stars": 1,
+      "updatedAt": "2026-10-14T03:23:41Z"
+    },
+    {
+      "fullName": "xfgil/dsh-hot-reloader",
+      "url": "https://github.com/xfgil/dsh-hot-reloader",
+      "stars": 1,
+      "updatedAt": "2026-10-24T10:04:35Z"
+    },
+    {
+      "fullName": "123dbl/dsh-side-session",
+      "url": "https://github.com/123dbl/dsh-side-session",
+      "stars": 1,
+      "updatedAt": "2026-10-30T12:59:03Z"
+    },
+    {
+      "fullName": "agent-mobile/dsh-mobile-gateway",
+      "url": "https://github.com/agent-mobile/dsh-mobile-gateway",
+      "stars": 1,
+      "updatedAt": "2026-09-09T00:02:59Z"
+    },
+    {
+      "fullName": "GanyuanRan/Aegis",
+      "url": "https://github.com/GanyuanRan/Aegis",
+      "stars": 1408,
+      "updatedAt": "2026-10-30T18:29:02Z"
+    },
+    {
+      "fullName": "ZSeven-W/dsh-ios",
+      "url": "https://github.com/ZSeven-W/dsh-ios",
+      "stars": 354,
+      "updatedAt": "2026-10-31T08:37:03Z"
+    },
+    {
+      "fullName": "ManoloRemiddi/DSH-Metafolder-Plugin",
+      "url": "https://github.com/ManoloRemiddi/DSH-Metafolder-Plugin",
+      "stars": 1,
+      "updatedAt": "2026-09-23T20:30:34Z"
+    },
+    {
+      "fullName": "yizhiyizhi0128/dsh-peak-scheduler",
+      "url": "https://github.com/yizhiyizhi0128/dsh-peak-scheduler",
+      "stars": 1,
+      "updatedAt": "2026-10-13T14:42:15Z"
+    },
+    {
+      "fullName": "w2112515/dsh-remote-host",
+      "url": "https://github.com/w2112515/dsh-remote-host",
+      "stars": 1,
+      "updatedAt": "2026-08-24T17:15:30Z"
+    },
+    {
+      "fullName": "yi-yezhiqiu/dsh-prompt-market",
+      "url": "https://github.com/yi-yezhiqiu/dsh-prompt-market",
+      "stars": 109,
+      "updatedAt": "2026-10-30T20:24:10Z"
+    },
+    {
+      "fullName": "yjh051108/dsh-routing-suite",
+      "url": "https://github.com/yjh051108/dsh-routing-suite",
+      "stars": 6996,
+      "updatedAt": "2026-10-31T14:17:35Z"
+    },
+    {
+      "fullName": "redstonedust/dsh-solidworks-copilot",
+      "url": "https://github.com/redstonedust/dsh-solidworks-copilot",
+      "stars": 1,
+      "updatedAt": "2026-10-31T12:09:55Z"
+    },
+    {
+      "fullName": "V1ki/dsh-plugin-subscriptions",
+      "url": "https://github.com/V1ki/dsh-plugin-subscriptions",
+      "stars": 539,
+      "updatedAt": "2026-10-31T12:24:02Z"
+    },
+    {
+      "fullName": "shengsheng90/DSH-taskboard",
+      "url": "https://github.com/shengsheng90/DSH-taskboard",
+      "stars": 324,
+      "updatedAt": "2026-10-29T10:46:22Z"
+    },
+    {
+      "fullName": "linhay/harmony-next.skills",
+      "url": "https://github.com/linhay/harmony-next.skills",
+      "stars": 366,
+      "updatedAt": "2026-10-31T10:03:41Z"
+    },
+    {
+      "fullName": "wz20/dsh-dafeiyu-dot",
+      "url": "https://github.com/wz20/dsh-dafeiyu-dot",
+      "stars": 1,
+      "updatedAt": "2026-10-31T10:04:52Z"
+    },
+    {
+      "fullName": "HiSeax/dsh-codely",
+      "url": "https://github.com/HiSeax/dsh-codely",
+      "stars": 1,
+      "updatedAt": "2026-09-09T05:35:31Z"
+    },
+    {
+      "fullName": "omdsh-dev/dsh_workflow",
+      "url": "https://github.com/omdsh-dev/dsh_workflow",
+      "stars": 154,
+      "updatedAt": "2026-10-31T10:09:47Z"
+    },
+    {
+      "fullName": "shanliuling/dsh-image-gen",
+      "url": "https://github.com/shanliuling/dsh-image-gen",
+      "stars": 1028,
+      "updatedAt": "2026-10-31T14:18:07Z"
+    },
+    {
+      "fullName": "howmp/dsh-pentest",
+      "url": "https://github.com/howmp/dsh-pentest",
+      "stars": 617,
+      "updatedAt": "2026-10-30T17:05:05Z"
+    },
+    {
+      "fullName": "SeanTolstoyevski/dsh-code-review",
+      "url": "https://github.com/SeanTolstoyevski/dsh-code-review",
+      "stars": 1,
+      "updatedAt": "2026-10-20T16:49:27Z"
+    },
+    {
+      "fullName": "dhicoc/dsh-reverse-skill",
+      "url": "https://github.com/dhicoc/dsh-reverse-skill",
+      "stars": 314,
+      "updatedAt": "2026-10-30T18:56:22Z"
+    },
+    {
+      "fullName": "liustack/modsearch",
+      "url": "https://github.com/liustack/modsearch",
+      "stars": 890,
+      "updatedAt": "2026-10-31T13:52:57Z"
+    },
+    {
+      "fullName": "sopaco/deepwiki-rs",
+      "url": "https://github.com/sopaco/deepwiki-rs",
+      "stars": 3157,
+      "updatedAt": "2026-10-30T15:04:27Z"
+    },
+    {
+      "fullName": "cxzrdxy/dsh-file-explorer",
+      "url": "https://github.com/cxzrdxy/dsh-file-explorer",
+      "stars": 1,
+      "updatedAt": "2026-08-18T06:11:20Z"
+    }
+  ],
+  "lowStar": [
+    {
+      "fullName": "gjy1992/dsh-diagram",
+      "url": "https://github.com/gjy1992/dsh-diagram",
+      "stars": 1
+    },
+    {
+      "fullName": "NEAZ71eve/dsh-tool-github",
+      "url": "https://github.com/NEAZ71eve/dsh-tool-github",
+      "stars": 1
+    },
+    {
+      "fullName": "Zxznb666/dsh-qoder-cn-subagent",
+      "url": "https://github.com/Zxznb666/dsh-qoder-cn-subagent",
+      "stars": 1
+    },
+    {
+      "fullName": "RINGOLINK/dsh-desktop-shell",
+      "url": "https://github.com/RINGOLINK/dsh-desktop-shell",
+      "stars": 1
+    },
+    {
+      "fullName": "wkfedor/deepseek-harness-voice-input",
+      "url": "https://github.com/wkfedor/deepseek-harness-voice-input",
+      "stars": 1
+    },
+    {
+      "fullName": "mrme000m/dsh-prime-orchestrator",
+      "url": "https://github.com/mrme000m/dsh-prime-orchestrator",
+      "stars": 1
+    },
+    {
+      "fullName": "Jamailar/beav-deepseek-harness",
+      "url": "https://github.com/Jamailar/beav-deepseek-harness",
+      "stars": 1
+    },
+    {
+      "fullName": "863683348/dsh-insight",
+      "url": "https://github.com/863683348/dsh-insight",
+      "stars": 1
+    },
+    {
+      "fullName": "zed1902209846-dotcom/DPwhale-plugin",
+      "url": "https://github.com/zed1902209846-dotcom/DPwhale-plugin",
+      "stars": 1
+    },
+    {
+      "fullName": "fangqiing/dsh-knowledge-lite",
+      "url": "https://github.com/fangqiing/dsh-knowledge-lite",
+      "stars": 1
+    },
+    {
+      "fullName": "fzy0517/deepseek-harness-session-cleaner",
+      "url": "https://github.com/fzy0517/deepseek-harness-session-cleaner",
+      "stars": 1
+    },
+    {
+      "fullName": "173787247/dsh-wsl-dns",
+      "url": "https://github.com/173787247/dsh-wsl-dns",
+      "stars": 1
+    },
+    {
+      "fullName": "Ansellwan/DSH-Custom-Wallpaper",
+      "url": "https://github.com/Ansellwan/DSH-Custom-Wallpaper",
+      "stars": 1
+    },
+    {
+      "fullName": "xfgil/dsh-hot-reloader",
+      "url": "https://github.com/xfgil/dsh-hot-reloader",
+      "stars": 1
+    },
+    {
+      "fullName": "123dbl/dsh-side-session",
+      "url": "https://github.com/123dbl/dsh-side-session",
+      "stars": 1
+    },
+    {
+      "fullName": "agent-mobile/dsh-mobile-gateway",
+      "url": "https://github.com/agent-mobile/dsh-mobile-gateway",
+      "stars": 1
+    },
+    {
+      "fullName": "ManoloRemiddi/DSH-Metafolder-Plugin",
+      "url": "https://github.com/ManoloRemiddi/DSH-Metafolder-Plugin",
+      "stars": 1
+    },
+    {
+      "fullName": "yizhiyizhi0128/dsh-peak-scheduler",
+      "url": "https://github.com/yizhiyizhi0128/dsh-peak-scheduler",
+      "stars": 1
+    },
+    {
+      "fullName": "w2112515/dsh-remote-host",
+      "url": "https://github.com/w2112515/dsh-remote-host",
+      "stars": 1
+    },
+    {
+      "fullName": "redstonedust/dsh-solidworks-copilot",
+      "url": "https://github.com/redstonedust/dsh-solidworks-copilot",
+      "stars": 1
+    }
+  ],
+  "negativeControls": [
+    "fixtures/negative/no-entry",
+    "fixtures/negative/no-patch",
+    "fixtures/negative/workspace-version",
+    "fixtures/negative/official-label",
+    "fixtures/negative/stale-result"
+  ],
+  "caveat": "Frame only. A sampled repo may be a listing/monorepo/no-plugin; not a pass/fail result."
+}

package/40-checker/scripts/apply-overlay.mjs

@@ -0,0 +1,59 @@
+#!/usr/bin/env node
+/**
+ * Apply a JSON overlay (deep merge, arrays replace) to a copy of a package's
+ * package.json. Never edits the source package: `--out` is required and must
+ * not exist (use --force to replace a temp copy).
+ *
+ * Usage:
+ *   node scripts/apply-overlay.mjs \
+ *     --package /tmp/dsh-verify-samples/mmparko__dsh-purge \
+ *     --overlay ../../70-cases/overlays/mmparko__dsh-purge.json \
+ *     --out /tmp/dsh-patched/mmparko__dsh-purge
+ */
+import fs from 'node:fs'
+import path from 'node:path'
+
+function parse(argv) {
+  const options = { package: null, overlay: null, out: null, force: false }
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i]
+    if (arg === '--package') options.package = argv[++i]
+    else if (arg === '--overlay') options.overlay = argv[++i]
+    else if (arg === '--out') options.out = argv[++i]
+    else if (arg === '--force') options.force = true
+    else if (arg === '--help' || arg === '-h') { console.log('usage: node scripts/apply-overlay.mjs --package <dir> --overlay <json> --out <dir> [--force]'); process.exit(0) }
+    else throw new Error(`unknown option: ${arg}`)
+  }
+  if (!options.package) throw new Error('--package is required')
+  if (!options.overlay) throw new Error('--overlay is required')
+  if (!options.out) throw new Error('--out is required (never edit the source in place)')
+  return options
+}
+
+function merge(base, overlay) {
+  if (Array.isArray(overlay)) return overlay
+  if (overlay === null || typeof overlay !== 'object') return overlay
+  const result = { ...(base && typeof base === 'object' && !Array.isArray(base) ? base : {}) }
+  for (const [key, value] of Object.entries(overlay)) result[key] = merge(result[key], value)
+  return result
+}
+
+function main() {
+  const options = parse(process.argv.slice(2))
+  const source = path.resolve(options.package)
+  const out = path.resolve(options.out)
+  if (!fs.existsSync(path.join(source, 'package.json'))) throw new Error(`not a package: ${source}`)
+  if (fs.existsSync(out)) {
+    if (!options.force) throw new Error(`--out exists: ${out} (use --force only for a temp copy)`)
+    fs.rmSync(out, { recursive: true, force: true })
+  }
+  const overlay = JSON.parse(fs.readFileSync(path.resolve(options.overlay), 'utf8'))
+  fs.cpSync(source, out, { recursive: true, dereference: false })
+  const manifestPath = path.join(out, 'package.json')
+  const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'))
+  const merged = merge(manifest, overlay)
+  fs.writeFileSync(manifestPath, `${JSON.stringify(merged, null, 2)}\n`)
+  console.log(JSON.stringify({ source, overlay: path.resolve(options.overlay), out, keys: Object.keys(overlay) }, null, 2))
+}
+
+try { main() } catch (error) { console.error(`apply-overlay: ${error.message}`); process.exitCode = 3 }