dsh-wsl-desktop 0.3.4 → 0.3.5

package/lib/icon.svg

@@ -0,0 +1,24 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64" role="img" aria-label="DSH WSL Desktop">
+  <!-- W monogram. The polyline's apex/valleys are chosen so the STROKED bounds
+       (8.5..55.5 x 13.5..50.5) center on (32,32): the mark is optically centered,
+       not merely its path data. Keep the 7px stroke when editing the path, and
+       re-center against those bounds rather than the raw vertices. -->
+  <defs>
+    <linearGradient id="wsl-base" x1="0" y1="0" x2="0" y2="1">
+      <stop offset="0" stop-color="#151D31"/>
+      <stop offset="1" stop-color="#0B111E"/>
+    </linearGradient>
+    <radialGradient id="wsl-glow" gradientUnits="userSpaceOnUse" cx="52" cy="4" r="44">
+      <stop offset="0" stop-color="#38BDF8" stop-opacity=".32"/>
+      <stop offset="1" stop-color="#38BDF8" stop-opacity="0"/>
+    </radialGradient>
+    <linearGradient id="wsl-mark" x1="12" y1="17" x2="52" y2="47" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#38BDF8"/>
+      <stop offset="1" stop-color="#4D6BFE"/>
+    </linearGradient>
+  </defs>
+  <rect width="64" height="64" rx="15" fill="url(#wsl-base)"/>
+  <rect width="64" height="64" rx="15" fill="url(#wsl-glow)"/>
+  <path d="M12 17 L22.5 47 L32 25 L41.5 47 L52 17" fill="none" stroke="url(#wsl-mark)" stroke-width="7" stroke-linecap="round" stroke-linejoin="round"/>
+  <rect x=".75" y=".75" width="62.5" height="62.5" rx="14.25" fill="none" stroke="#7DD3FC" stroke-opacity=".22" stroke-width="1.5"/>
+</svg>

package/lib/wsl/preset.js

@@ -49,6 +49,48 @@ export const WORLD_MODULE_NAMES = new Set([
   '@deepseek-ai/dsh-terminal',
 ])
 
+/**
+ * Tool-family modules whose survival in a WSL preset is a RECORDED VERDICT.
+ *
+ * The complement of WORLD_MODULE_NAMES inside the tool family, and the reason it
+ * exists: the removal rule is a closed list, so a tool-family row this plugin had
+ * never seen was neither removed NOR reported — it was copied into the WSL variant
+ * in silence, which is the leak shape this transform exists to prevent. A future
+ * DSH release that adds a host-execution tool row would have leaked exactly there,
+ * with every suite still green.
+ *
+ * Every name here was read off a shipped preset and judged world-agnostic: it
+ * neither runs host commands nor reaches host files on the model's behalf. A row
+ * outside BOTH sets is kept — the transform must not guess a row away from a preset
+ * — but reported through `unclassified`, so the next upstream tool row is a
+ * decision somebody makes rather than a leak nobody sees.
+ */
+export const VERDICTED_KEPT_MODULES = new Set([
+  '@deepseek-ai/dsh-tool-jobs',
+  '@deepseek-ai/dsh-tool-schedule',
+  '@deepseek-ai/dsh-tool-skill',
+  '@deepseek-ai/dsh-skill-filesystem',
+  '@deepseek-ai/dsh-command-goal',
+  '@deepseek-ai/dsh-tool-goal',
+  '@deepseek-ai/dsh-tool-subagent-control',
+  '@deepseek-ai/dsh-tool-subagent',
+  '@deepseek-ai/dsh-tool-workflow',
+  '@deepseek-ai/dsh-tool-ask-user',
+  '@deepseek-ai/dsh-tool-todo',
+  '@deepseek-ai/dsh-tool-web',
+  '@deepseek-ai/dsh-tool-cordis',
+  '@deepseek-ai/dsh-tool-present',
+])
+
+/**
+ * The tool / execution family, by package name.
+ *
+ * Narrow on purpose: it decides which rows need a VERDICT, and a family wide enough
+ * to catch the persona, instruction, plan-mode or compaction rows would redden the
+ * acceptance gate over rows whose survival was never in question.
+ */
+const TOOL_FAMILY = /^@deepseek-ai\/dsh-(?:tool-[a-z0-9-]+|terminal[a-z0-9-]*|skill-filesystem)$/u
+
 /** Module extensions a specifier may carry where it names the package itself. */
 const MODULE_SUFFIX = /\.(?:[cm]?js)$/u
 
@@ -76,6 +118,26 @@ function specifierSegments(specifier) {
   return readings.flatMap((reading) => reading.split(/[\\/]/u))
 }
 
+/**
+ * Every `@scope/name` package reading a specifier carries.
+ *
+ * The one place the package identity is derived, shared by the removal predicate
+ * and the verdict predicate so the two cannot disagree about which package a
+ * spelling names — the drift that made the earlier basename match miss a subpath.
+ * @param {unknown} specifier - the row's module name.
+ * @returns {string[]} each scoped pair the specifier carries, in path order.
+ */
+function scopedPackages(specifier) {
+  if (typeof specifier !== 'string' || specifier.length === 0) return []
+  const segments = specifierSegments(specifier)
+  const out = []
+  for (let index = 0; index + 1 < segments.length; index += 1) {
+    if (!segments[index].startsWith('@')) continue
+    out.push(`${segments[index]}/${segments[index + 1].replace(MODULE_SUFFIX, '')}`)
+  }
+  return out
+}
+
 /**
  * Whether one row `name` loads a host-execution-world module.
  *
@@ -100,13 +162,33 @@ function specifierSegments(specifier) {
 export function isHostWorldModule(name) {
   if (typeof name !== 'string' || name.length === 0) return false
   if (WORLD_MODULE_NAMES.has(name)) return true
-  const segments = specifierSegments(name)
-  for (let index = 0; index + 1 < segments.length; index += 1) {
-    if (!segments[index].startsWith('@')) continue
-    const scoped = `${segments[index]}/${segments[index + 1].replace(MODULE_SUFFIX, '')}`
-    if (WORLD_MODULE_NAMES.has(scoped)) return true
-  }
-  return false
+  return scopedPackages(name).some((pkg) => WORLD_MODULE_NAMES.has(pkg))
+}
+
+/**
+ * Whether a row's module belongs to the family that needs a verdict.
+ * @param {unknown} name - the row's module name.
+ * @returns {boolean} true when the module is a tool-family package.
+ */
+export function isToolFamilyModule(name) {
+  if (typeof name !== 'string' || name.length === 0) return false
+  return [name, ...scopedPackages(name)].some((candidate) => TOOL_FAMILY.test(candidate))
+}
+
+/**
+ * Whether this plugin holds an explicit verdict for a row's module.
+ *
+ * True for both verdicts — removed (WORLD_MODULE_NAMES) and deliberately kept
+ * (VERDICTED_KEPT_MODULES) — because the question it answers is "has this row been
+ * decided?", not "is it dropped?".
+ * @param {unknown} name - the row's module name.
+ * @returns {boolean} true when the module carries a verdict.
+ */
+export function hasClassifierVerdict(name) {
+  if (typeof name !== 'string' || name.length === 0) return false
+  return [name, ...scopedPackages(name)].some((candidate) => (
+    WORLD_MODULE_NAMES.has(candidate) || VERDICTED_KEPT_MODULES.has(candidate)
+  ))
 }
 
 /**
@@ -224,12 +306,12 @@ function cloneRow(row) {
  * @param {string} options.fsPath - module specifier of the WSL filesystem provider.
  * @param {string | undefined} options.distro - distribution for paths that do not name one.
  * @param {string | undefined} options.sourceDir - directory the source preset lives in.
- * @returns {{ plugins: object[], removed: string[], unclassified: { id: string | null, name: unknown }[] }} the variant rows, what was dropped, and the rows kept without a classifier verdict.
+ * @returns {{ plugins: object[], removed: string[], unclassified: { id: string | null, name: unknown }[] }} the variant rows, what was dropped, and the rows kept without a classifier verdict — an unreadable specifier, or a tool-family module that is neither removed nor verdicted-kept.
  */
 export function buildVariantPlugins(basePlugins, { subprocessPath, shellPath, fsPath, distro, sourceDir }) {
   const kept = []
   const removed = []
-  /** Rows kept without a classifier verdict — see the module-name branch in prune(). */
+  /** Rows kept without a classifier verdict — both shapes the prune() branches record. */
   const unclassified = []
   let includeEditor = false
   /** Config carried by the pruned host-world tool rows, keyed by row id. */
@@ -267,6 +349,14 @@ export function buildVariantPlugins(basePlugins, { subprocessPath, shellPath, fs
         toolConfig.set('str-replace-editor', cloneRow({ config: row.config }).config)
       }
       return null
+    } else if (isToolFamilyModule(row.name) && !hasClassifierVerdict(row.name)) {
+      // Readable specifier, tool family, NO verdict: kept and reported. The removal
+      // rule is a closed list, so without this branch a tool row this plugin has
+      // never seen was copied into the WSL variant in silence — the leak shape this
+      // transform exists to prevent, and the one a new upstream tool row would have
+      // taken. Kept rather than removed for the same reason as the unreadable case
+      // above: the transform must not guess a row away from a preset.
+      unclassified.push({ id: row.id ?? null, name: row.name })
     }
     // The registry stores the caller's objects BY REFERENCE — mutating a row
     // here would pollute the shared base definition. Clone per row;

package/package.json

@@ -1,8 +1,9 @@
 {
   "name": "dsh-wsl-desktop",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "type": "module",
   "main": "lib/index.js",
+  "icon": "./lib/icon.svg",
   "exports": {
     ".": "./lib/index.js",
     "./client": "./lib/client.js",