dsh-wsl-bridge 0.0.0-stage → 0.4.7

package/CHANGELOG.md

@@ -0,0 +1,125 @@
+# Changelog
+
+## 0.4.7 — 2026-10-19
+
+- A new conversation that selects WSL lists the current distribution's
+  folders, starting at `$HOME`, and asks which folder should become the
+  workspace. The folder control opens that directory instead of DSH's
+  `default-workspace`. The Windows path is whatever `wslpath -w` prints on
+  that computer. Esc closes the visit; choosing WSL again after leaving the
+  mode asks once more. Host-wide `wsl_*` tools still use the Windows session
+  directory.
+- The picker keeps an opaque surface when a skin makes the app background
+  translucent.
+- The WSL preset description is Chinese.
+
+## 0.4.6 — 2026-10-19
+
+- A `WSL` session now uses the current distribution's `$HOME` as its default
+  workspace. The first bash command, relative paths, and grep/glob without a
+  path all start there instead of the Windows session directory. The home path
+  is read once; an explicit absolute path does not trigger the lookup. Host-wide
+  `wsl_*` tools still default to the session directory.
+
+## 0.4.5 — 2026-10-19 (unreleased)
+
+- Fail reads when `head` fails; reject incomplete transport and invalid UTF-8
+  edits instead of silently changing file data. Base edit guards on the exact
+  bytes read and check just before rename, including deletion detection.
+- Keep replacement dollar sequences literal, preserve existing file modes,
+  and refuse directory targets without leaving a temporary file inside them.
+- Stop every command line when the requested working directory cannot be used.
+  Background jobs use the session directory even after a persistent shell exists.
+- Search prunes hidden entries and dependency trees before scanning, preserves
+  single-file grep paths, anchors its status marker, reports failures, and marks
+  the glob scan ceiling as truncated.
+- Make release dry-runs independent of login, check official-registry auth and
+  a clean working tree for publication, publish the packed tarball, and fail if
+  version verification fails. Include installation/release scripts in the pack.
+- Add regression coverage and opt-in real WSL tests; fix the CI mount test's
+  hard-coded local path.
+
+## 0.4.4 — 2026-10-19
+
+- **Fix the `WSL` preset failing to load**: the `plan-mode` row was copied
+  without its required `config.section`, so
+  `@deepseek-ai/dsh-plan-mode` refused activation and the preset showed
+  "load failed" in the mode picker while the rest of the plugin worked. The
+  shipped standard preset's section text is now carried verbatim; the roster
+  probe reports `wsl: broken=null`.
+- Add the preset-roster diagnostic recipe used to find it (see docs/TROUBLESHOOTING.md).
+
+## 0.4.3 — 2026-10-19
+
+- Self-check wording: a probe has no live agent, so the job registry's refusal
+  now reads as "registry reachable" instead of an error line.
+
+## 0.4.2 — 2026-10-19
+
+- **Fix persistent `cd`**: the bash tools passed the session directory as the
+  working directory on every call, which reset the persistent shell's cwd. The
+  default workdir is now only the shell's initial directory; an explicit
+  `workdir` still changes it for this and later calls. Verified in a real
+  desktop session (env vars persisted, cwd now does too) and pinned by the
+  integration self-check (`tool cd persistence=OK`).
+
+## 0.4.1 — 2026-10-19
+
+- Opt-in real background-job self-check (registers a job with the host registry
+  and verifies the command actually wrote its file inside the distribution).
+
+## 0.4.0 — 2026-10-19
+
+- Add `runInBackground` to `wsl_bash` and the WSL preset's `bash`: the command is
+  registered with the host job registry (`job_output` / `job_kill`) and owns its
+  own `wsl.exe` process, so the persistent shell's lifecycle cannot kill it.
+  Controlled by `backgroundJobs` (default on); refuses clearly when the
+  deployment composes no job registry.
+- The destructive guard runs before a background registration.
+- Tests: 87 cases total.
+
+## 0.3.0 — 2026-10-19
+
+- Add a deterministic destructive-command guard (`dangerGuard`, default on):
+  recursive deletes, block-device writes, power control, `find -delete` and
+  `git clean -f/-d/-x` are refused unless the call passes `allowDangerous: true`.
+  Applied to both `wsl_bash` and the WSL preset's `bash`.
+- Add `docs/ARCHITECTURE.md`, `docs/SECURITY.md`, `docs/TROUBLESHOOTING.md`.
+- Add `npm test` (78 cases), a CI workflow (Windows, Node 22/24), and
+  `scripts/install-desktop.ps1`.
+- Desktop-composition smoke test: an isolated profile replicating the desktop
+  bundle set (web-all / market / better-sidebar) boots with both bridge layers
+  active.
+
+## 0.2.3 — 2026-10-19
+
+- Packaging for publish: MIT LICENSE, bilingual `locale/*.json` display metadata,
+  SVG icon, CHANGELOG, and a publish-shaped `files` list; `npm pack` yields 20
+  files / ~37 KB with no build step.
+- Fix the integration-test hooks: environment variables (`DSH_WSL_BRIDGE_SELFCHECK`,
+  `DSH_WSL_BRIDGE_MARKER`, `DSH_WSL_BRIDGE_WORLD_*`) now override the shipped row
+  config instead of being overridden by it.
+- Dispose the shells the self-checks open, so a probe run leaves no `wsl.exe`
+  processes behind.
+- Verified a **packed** install (tarball into a fresh isolated profile, not a
+  link): host tools mount, the `WSL` preset mounts, and bash/grep/glob execute in
+  the distribution.
+
+## 0.2.0 — 2026-10-19
+
+- Add the declarative `WSL` agent preset: a session created in this mode mounts
+  `dsh-wsl-bridge/wsl-world`, so `bash`, `read`, `write`, `edit`, `grep` and
+  `glob` all operate on Linux paths inside the distribution.
+- Add in-distribution `grep` (GNU grep -E) and `glob` (find + glob matching),
+  pruning hidden entries and `node_modules`/VCS metadata.
+- Capture the `subprocess` service during `apply()`: a preset mount context is
+  inactive after activation, so a late `ctx.subprocess` lookup now never throws.
+- Persona sentence tells the model its working directory is inside WSL and that
+  Windows files live under `/mnt/<drive>`.
+
+## 0.1.0 — 2026-10-19
+
+- First host-only build: persistent `wsl_bash` (one shell per session, `cd`
+  survives between calls), binary-safe `wsl_read`/`wsl_write`, sha256-fenced
+  `wsl_edit`, `wsl_path`, `wsl_env`, and a default-on routing prompt section.
+- Zero dependencies, no build step; opt-in self-check for integration testing.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-wsl-bridge contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -0,0 +1,128 @@
+# dsh-wsl-bridge
+
+[中文](README.md)
+
+A native WSL (Linux) execution surface for [DSH](https://github.com/deepseek-ai/DeepSeek-Harness) on Windows. It starts no extra web server and installs nothing inside the distribution. Windows sessions and WSL sessions share one desktop app.
+
+Version **0.4.7**. Requires **Windows**, a working WSL distribution, and **DSH `>= 0.2.1-rc.2`**. Source: <https://github.com/TGWgulugu/dsh-wsl-bridge>
+
+## Install
+
+The plugin is published on npm as [dsh-wsl-bridge](https://www.npmjs.com/package/dsh-wsl-bridge). Run this in a normal terminal, not inside a DSH tool sandbox. DSH installs that npm package. If `dsh` is not on `PATH`, use the full path to the `dsh.cmd` that ships with DSH Desktop.
+
+```powershell
+dsh plugin --profile desktop add dsh-wsl-bridge
+```
+
+To install the source in this repository instead of the npm release:
+
+```powershell
+dsh plugin --profile desktop add .
+```
+
+From the repository root, `pwsh -File scripts/install-desktop.ps1` does the same. Quit DSH Desktop from the tray and open it again. A page refresh does not load the plugin.
+
+After the restart:
+
+- Every session gains `wsl_bash`, `wsl_read`, `wsl_write`, `wsl_edit`, `wsl_path`, and `wsl_env`.
+- The new-session mode picker has a **WSL** entry.
+
+Uninstall:
+
+```powershell
+dsh plugin --profile desktop remove dsh-wsl-bridge
+```
+
+If the app then fails to start, run `pnpm install` in that profile directory.
+
+## Two ways to use it
+
+### WSL tools in any session
+
+These tools are added beside the Windows shell and file tools. They do not replace them.
+
+| Tool | What it does |
+|---|---|
+| `wsl_bash` | Runs bash in WSL. One persistent shell per session, so `cd` and `export` survive. Output ends with `[exit code: N]` |
+| `wsl_read` | Reads a Linux path, with optional line `offset` / `limit` |
+| `wsl_write` | Atomically writes a Linux path. `expectedSha256` refuses the write when the file changed after you read it |
+| `wsl_edit` | Replaces a string. A sha256 check ties the write to the bytes that were read |
+| `wsl_path` | Converts Windows paths to Linux paths and back. Uses the distribution's `wslpath` when it can |
+| `wsl_env` | Reports the distribution, kernel, user, and whether node / python3 / git are present |
+
+A routing note is on by default: for Linux work, prefer `wsl_bash` and Linux paths; Windows files are at `/mnt/<drive>`. It does not hide or disable the host tools.
+
+`wsl_bash` accepts `runInBackground: true`. The command is registered as a host job (`job_output` to read it, `job_kill` to stop it) and owns a separate WSL process. It does not inherit the persistent shell's `cd` or `export`, and it is not killed when that shell exits.
+
+### WSL session mode
+
+Choose **WSL** when creating a session. In that session, `bash`, `read`, `write`, `edit`, `grep`, and `glob` run inside Linux and take Linux paths. Persona, skills, goals, plan mode, compaction, subagents, todos, web, and present stay the standard DSH set.
+
+**You choose the workspace inside the current distribution.** On a new conversation, selecting WSL lists that distribution's folders, starting at `$HOME`. Open a subfolder or go up a level, then confirm with "Use this folder". The chosen directory is whatever `wslpath -w` prints on that computer. No distribution name or username is built into the plugin. The folder control opens that directory instead of DSH's `default-workspace`.
+
+Esc or Cancel closes the window for this visit only. Switch the mode away from WSL and back to WSL, and the window asks again. After the first message, DSH no longer allows a mode change, so the window does not return in that conversation.
+
+The first `bash`, relative paths, and `grep` / `glob` without a `path` start in the folder you chose. Pass `/mnt/<drive>/...` when the search should cover a Windows directory. The `wsl_*` tools above do not use this window; they keep using the current Windows session directory.
+
+| Tool | What it does |
+|---|---|
+| `bash` | Persistent bash in the distribution. The syntax is bash, not PowerShell |
+| `read` / `write` / `edit` | Linux paths. Relative paths are relative to the folder you chose |
+| `grep` | GNU grep in the distribution. Rows look like `path:line: text`. Omitting `path` searches the folder you chose |
+| `glob` | Lists files matching a glob, oldest first. Omitting `path` lists the folder you chose |
+| `wsl_env` | Distribution facts |
+
+The folder list starts at `$HOME` and shows one level of directories. Text that a login profile prints is not treated as a path. If the lookup fails, the Windows session directory is not opened instead. The picker uses an opaque surface, so a skin that makes the app background translucent does not show through it.
+
+## Configuration
+
+Set these on the plugin row `config` (`cordis.patch.yml`, or a profile patch that overrides it). Every field is optional.
+
+| Field | Default | Meaning |
+|---|---|---|
+| `distro` | `''` | Distribution name. An empty string uses the system default |
+| `timeoutMs` | `120000` | Default deadline for `bash` / `wsl_bash`, in milliseconds |
+| `fileTimeoutMs` | `30000` | Deadline for one read, write, or search |
+| `maxFileBytes` | `2097152` | Maximum bytes `read` / `edit` will load |
+| `defaultWorkdir` | `session` | For the host `wsl_*` tools, `session` is the current Windows session directory. In WSL mode, `session` is the folder you chose. `home` uses the distribution's `$HOME`. An absolute Linux path is also accepted |
+| `dangerGuard` | `true` | Refuses obviously destructive commands unless that call passes `allowDangerous: true` |
+| `backgroundJobs` | `true` | Allows `runInBackground`. Refuses clearly when the host has no job registry |
+| `promptSection` | `true` | Adds the routing note to host sessions |
+| `promptOrder` | `3260` | Sort order of that note |
+| `promptText` | `''` | Replaces the built-in routing note. Empty keeps the built-in text |
+| `selfCheck` | `false` | Probes WSL once on mount. `DSH_WSL_BRIDGE_SELFCHECK=1` does the same |
+| `selfCheckMarker` | `''` | Appends the probe result to this file. Or set `DSH_WSL_BRIDGE_MARKER` |
+
+The refusal list covers recursive deletes, block-device writes, power control, `find -delete`, and `git clean -fdx`. It is a fixed list, not a kernel boundary. A different spelling can still get through.
+
+## Limits
+
+- Windows only. Both rows disable themselves on any other host.
+- The tools run through `wsl.exe` and are **not** inside DSH's Windows file sandbox. Treat them as able to write anything that WSL user can write, including Windows paths reached through `/mnt/<drive>`. See [docs/SECURITY.md](docs/SECURITY.md).
+- `grep` / `glob` use GNU grep and find. They do not read `.gitignore`. Hidden files, `node_modules`, and VCS metadata are skipped.
+- On a new conversation, WSL mode asks which folder inside the distribution should be the workspace. The folder control opens that directory. Skills and file references follow it. Esc closes that visit; leaving WSL mode and choosing it again asks once more. A conversation that has already started cannot change mode.
+- The first call waits for the distribution to start and can take several seconds. `timeoutMs` defaults to 120 seconds.
+- This plugin does not install Node or any other toolchain inside the distribution.
+
+## Docs
+
+- [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md): how the host tools and the WSL mode are split, and why shell / fs services are left alone.
+- [docs/SECURITY.md](docs/SECURITY.md): the sandbox boundary, and what the destructive-command guard does not promise.
+- [docs/TROUBLESHOOTING.md](docs/TROUBLESHOOTING.md): nothing showed up, `EPERM`, a missing mode, cold start, uninstall.
+
+## Development
+
+```powershell
+npm test
+npm run test:integration
+pwsh -NoProfile -File test/release.test.ps1
+pwsh -File scripts/release.ps1 -DryRun
+```
+
+`npm test` does not need WSL. `npm run test:integration` runs inside a real distribution and deletes its own temporary directory. The release-script check does not publish. A real publish needs a clean git tree, then `pwsh -File scripts/release.ps1`.
+
+The code is plain ESM with no build. `index.js` registers the host tools, `wsl-world.js` registers WSL session mode, and the implementation is in `src/`.
+
+## License
+
+[MIT](LICENSE)

package/README.md

@@ -1,3 +1,128 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# dsh-wsl-bridge
+
+[English](README.en.md)
+
+在 Windows 上给 [DSH](https://github.com/deepseek-ai/DeepSeek-Harness) 一个原生的 WSL（Linux）执行面。不额外启动 web 服务，也不在 WSL 里安装 dsh。Windows 会话和 WSL 会话在同一个桌面端里使用。
+
+当前版本 **0.4.7**。需要 **Windows**、一个可用的 WSL 发行版，以及 **DSH `>= 0.2.1-rc.2`**。源码：<https://github.com/TGWgulugu/dsh-wsl-bridge>
+
+## 安装
+
+插件已发布到 npm：[dsh-wsl-bridge](https://www.npmjs.com/package/dsh-wsl-bridge)。在普通终端里执行下面的命令，DSH 会从 npm 安装这个包。不要在 DSH 会话的工具沙箱里跑。`dsh` 不在 PATH 上时，换成 Desktop 自带的 `dsh.cmd` 完整路径。
+
+```powershell
+dsh plugin --profile desktop add dsh-wsl-bridge
+```
+
+要装本仓库里的源码，而不是 npm 上的版本时：
+
+```powershell
+dsh plugin --profile desktop add .
+```
+
+也可以在仓库根目录运行 `pwsh -File scripts/install-desktop.ps1`。装完后从托盘**完全退出** DSH Desktop，再打开。刷新页面不够。
+
+重启后：
+
+- 任意会话里出现 `wsl_bash`、`wsl_read`、`wsl_write`、`wsl_edit`、`wsl_path`、`wsl_env`。
+- 新建会话的模式选择器里出现 **WSL**。
+
+卸载：
+
+```powershell
+dsh plugin --profile desktop remove dsh-wsl-bridge
+```
+
+如果卸载后应用起不来，在该 profile 目录里执行一次 `pnpm install`。
+
+## 两种用法
+
+### 任意会话里的 WSL 工具
+
+这些工具加在现有会话上，不替换 Windows 自己的 shell 和文件工具。
+
+| 工具 | 作用 |
+|---|---|
+| `wsl_bash` | 在 WSL 里执行 bash。每个会话一个持久 shell，`cd` 和 `export` 会保留。输出以 `[exit code: N]` 结尾 |
+| `wsl_read` | 读 Linux 路径，支持按行 `offset` / `limit` |
+| `wsl_write` | 原子写入 Linux 路径。可带 `expectedSha256`，文件在你读过之后被改过就拒绝写入 |
+| `wsl_edit` | 按字符串替换。读和写之间用 sha256 核对内容 |
+| `wsl_path` | Windows 路径和 Linux 路径互转。优先用发行版里的 `wslpath` |
+| `wsl_env` | 查看发行版、内核、用户和是否有 node / python3 / git |
+
+默认有一段路由提示：Linux 上的工作优先用 `wsl_bash` 和 Linux 路径，Windows 文件在 `/mnt/<盘符>`。它不隐藏、也不禁用宿主工具。
+
+`wsl_bash` 可以传 `runInBackground: true`。命令会登记成宿主后台任务，用 `job_output` 看输出、用 `job_kill` 停止。这个任务独占一个 WSL 进程：不继承持久 shell 的 `cd` / `export`，会话 shell 退出时也不会把它杀掉。
+
+### WSL 会话模式
+
+新建会话时选择 **WSL**。这一会话里的 `bash`、`read`、`write`、`edit`、`grep`、`glob` 都在 Linux 里执行，参数是 Linux 路径。persona、skill、goal、plan、compaction、subagent、todo、web、present 仍用 DSH 标准会话的那一套。
+
+**工作区由你在当前发行版里选定。** 新建对话并选中 WSL 后，窗口从 `$HOME` 列出该发行版的文件夹。可以进入子文件夹，也可以回到上一级，然后用「使用此文件夹」确认。选中的目录用这台电脑上的 `wslpath -w` 现查，不写死发行版名或用户名。右上角的文件夹按钮打开这个目录，而不是 DSH 自带的 `default-workspace`。
+
+按 Esc 或「取消」只关掉这一次。把模式从 WSL 换走，再选回 WSL，窗口会再出现。对话一旦发出第一条消息，DSH 就不再允许更换模式，这个窗口也不会在那条对话里再次出现。
+
+第一次 `bash`、相对路径，以及不传 `path` 的 `grep` / `glob`，都从你选的目录开始。要搜 Windows 目录时，显式传入 `/mnt/<盘符>/...`。上面的 `wsl_*` 工具不走这个窗口，仍使用当前 Windows 会话目录。
+
+| 工具 | 作用 |
+|---|---|
+| `bash` | 发行版里的持久 bash，语法是 bash，不是 PowerShell |
+| `read` / `write` / `edit` | 读写 Linux 路径。相对路径相对你选的工作区 |
+| `grep` | 发行版内的 GNU grep。结果是 `path:line: text`。不传 `path` 时搜你选的工作区 |
+| `glob` | 按 glob 列出文件，旧文件在前。不传 `path` 时列你选的工作区 |
+| `wsl_env` | 发行版信息 |
+
+目录列表从 `$HOME` 开始，只列出这一层的文件夹。登录脚本如果往标准输出打字，不会被当成路径。查不到目录时，不会改去打开 Windows 会话目录。选择窗口使用不透明底色，不跟随会把背景透出来的皮肤。
+
+## 配置
+
+改插件行的 `config`（`cordis.patch.yml`，或 profile 里覆盖它的补丁）。字段都可以省略。
+
+| 字段 | 默认 | 说明 |
+|---|---|---|
+| `distro` | `''` | 发行版名。空字符串表示系统默认发行版 |
+| `timeoutMs` | `120000` | `bash` / `wsl_bash` 的默认时限（毫秒） |
+| `fileTimeoutMs` | `30000` | 读、写、搜索的单次时限（毫秒） |
+| `maxFileBytes` | `2097152` | `read` / `edit` 最多读取的字节数 |
+| `defaultWorkdir` | `session` | 宿主 `wsl_*` 工具的 `session` 是当前 Windows 会话目录。WSL 模式的 `session` 是你选的工作区。`home` 使用当前发行版的 `$HOME`。也可以填绝对 Linux 路径 |
+| `dangerGuard` | `true` | 拒绝明显的破坏性命令，除非该次调用带 `allowDangerous: true` |
+| `backgroundJobs` | `true` | 是否允许 `runInBackground`。宿主没有任务注册表时会明确拒绝 |
+| `promptSection` | `true` | 是否加入宿主会话的路由提示 |
+| `promptOrder` | `3260` | 这段提示的排序 |
+| `promptText` | `''` | 用来替换内置路由提示。空字符串表示用内置文本 |
+| `selfCheck` | `false` | 挂载时探测一次 WSL。也可以设环境变量 `DSH_WSL_BRIDGE_SELFCHECK=1` |
+| `selfCheckMarker` | `''` | 把探测结果追加到这个文件。也可以设 `DSH_WSL_BRIDGE_MARKER` |
+
+破坏性命令清单包括递归删除、写块设备、关机、`find -delete`、`git clean -fdx`。这是固定名单，不是内核隔离；换一种写法仍可能绕过。
+
+## 边界
+
+- 只支持 Windows。其他系统上这两行配置会禁用。
+- 工具通过 `wsl.exe` 执行，**不受** DSH 的 Windows 文件沙箱约束。把它看成：发行版里该用户能写的路径，以及通过 `/mnt/<盘符>` 能碰到的 Windows 路径，都可以写。详见 [docs/SECURITY.md](docs/SECURITY.md)。
+- `grep` / `glob` 使用 GNU grep 和 find，不读 `.gitignore`。隐藏文件、`node_modules` 和版本库元数据会跳过。
+- 新建对话选中 WSL 后，从当前发行版里选工作区。右上角的文件夹按钮打开这个目录。技能和文件引用跟着这个工作区走。Esc 只关闭这一次；换走模式再选回 WSL 会再问一次。已开始的对话不能再改模式。
+- 第一次调用要等发行版冷启动，可能要数秒。`timeoutMs` 默认 120 秒。
+- 本插件不在发行版里安装 Node 或其他工具链。
+
+## 文档
+
+- [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md)：宿主工具和 WSL 模式怎么分层，以及为什么不替换 shell / fs 服务。
+- [docs/SECURITY.md](docs/SECURITY.md)：沙箱边界和危险命令守卫做不到什么。
+- [docs/TROUBLESHOOTING.md](docs/TROUBLESHOOTING.md)：装完没出现、`EPERM`、模式缺失、冷启动、卸载。
+
+## 开发
+
+```powershell
+npm test
+npm run test:integration
+pwsh -NoProfile -File test/release.test.ps1
+pwsh -File scripts/release.ps1 -DryRun
+```
+
+`npm test` 不需要 WSL。`npm run test:integration` 会在真实 WSL 里跑，并删掉自己的临时目录。发布脚本的检查不会真的发布。正式发布要先提交干净的工作区，再执行 `pwsh -File scripts/release.ps1`。
+
+代码是纯 ESM，没有构建步骤。`index.js` 注册宿主工具，`wsl-world.js` 注册 WSL 会话模式，实现在 `src/`。
+
+## 许可证
+
+[MIT](LICENSE)