super-dsh 0.1.12 → 0.3.0

package/node_modules/better-dsh/package.json

@@ -0,0 +1,430 @@
+{
+  "name": "better-dsh",
+  "version": "0.3.0",
+  "description": "Make your dsh ready for serious coding tasks. (Tools x Schemas)^REPL. `skill://`, `ctx://`, `agent://`, `dvc://`, `dsh://`, IPython REPL, Context as Variables, cross compactions recallable, full context revive. `hash-edit`, `dvc://browser`, subagent as function, workflow as function.",
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./py-sdk": {
+      "types": "./lib/py-sdk.d.ts",
+      "default": "./lib/py-sdk.js"
+    },
+    "./url-schemes": {
+      "types": "./lib/url-schemes/index.d.ts",
+      "default": "./lib/url-schemes/index.js"
+    },
+    "./failover": {
+      "types": "./lib/failover/index.d.ts",
+      "default": "./lib/failover/index.js"
+    },
+    "./compaction-tuning": {
+      "types": "./lib/compaction/index.d.ts",
+      "default": "./lib/compaction/index.js"
+    },
+    "./web-trust": {
+      "types": "./lib/web-trust.d.ts",
+      "default": "./lib/web-trust.js"
+    },
+    "./mobile": {
+      "types": "./lib/mobile/plugin.d.ts",
+      "default": "./lib/mobile/plugin.js"
+    },
+    "./remote": {
+      "types": "./lib/remote/plugin.d.ts",
+      "default": "./lib/remote/plugin.js"
+    },
+    "./fs-aware-sandbox": {
+      "types": "./lib/fs-aware/sandbox-plugin.d.ts",
+      "default": "./lib/fs-aware/sandbox-plugin.js"
+    },
+    "./web-password": {
+      "types": "./lib/web-password.d.ts",
+      "default": "./lib/web-password.js"
+    },
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json",
+    "./client": {
+      "types": "./lib/client/index.d.ts",
+      "default": "./lib/client/index.js"
+    },
+    "./welcome-notice": {
+      "types": "./lib/welcome-notice.d.ts",
+      "default": "./lib/welcome-notice.js"
+    },
+    "./webserver": {
+      "types": "./lib/webserver.d.ts",
+      "default": "./lib/webserver.js"
+    },
+    "./bundle-delivery": {
+      "types": "./lib/bundle-delivery.d.ts",
+      "default": "./lib/bundle-delivery.js"
+    },
+    "./hmr": {
+      "types": "./lib/hmr.d.ts",
+      "default": "./lib/hmr.js"
+    }
+  },
+  "imports": {
+    "#schemastery": {
+      "types": "./third_party/schemastery/lib/index.d.mts",
+      "default": "./third_party/schemastery/lib/index.mjs"
+    }
+  },
+  "files": [
+    "lib",
+    "THIRD_PARTY_NOTICES.md",
+    "docs",
+    "dsh-docs",
+    "cordis.patch.yml",
+    "eval-description.md",
+    "url-schemes-instruction.md",
+    "scripts/kernel-provision.mjs",
+    "scripts/register-bundle.mjs"
+  ],
+  "scripts": {
+    "prebuild": "node scripts/copy-docs.mjs",
+    "build": "tsdown && npm run build-client && node scripts/copy-kernel-bridge.mjs && node scripts/copy-ast-assets.mjs",
+    "typecheck": "npm run typecheck:host && npm run typecheck:client",
+    "typecheck:host": "tsc --noEmit",
+    "typecheck:client": "tsc -p tsconfig.client.json",
+    "test": "vitest --run",
+    "test:watch": "vitest",
+    "kernel:venv": "node scripts/kernel-provision.mjs",
+    "build-client": "tsx scripts/build-client.ts"
+  },
+  "license": "MIT",
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-client-ui-layout"
+      ],
+      "platform": "web"
+    }
+  },
+  "engines": {
+    "node": ">=22.18"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/cordis-plugin-include": "^1.0.6",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
+    "@deepseek-ai/dsh": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-agent": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-agent-instructions": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-agent-loop": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-agent-presets": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-agent-tool-presentation": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-api-gateway": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-api-remotes": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-code-runtime": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-code-runtime-worker-thread": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-command-compact": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-commands": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-credentials": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-fs": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-fs-local": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-home-paths": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-invariants": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-llm": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-llm-retry": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-persona": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-plan-mode": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-sandbox": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-scope": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-session": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-settings": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-skill-filesystem": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-system-prompt": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-ask-user": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-bash": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-fs": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-fs-search": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-goal": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-jobs": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-pwsh": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-ralph": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-skill": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-subagent": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-subagent-control": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-todo": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-web": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tool-workflow": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-tools": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-typert-registry": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-user-approval": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-web-app": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-workflow-worker-thread": ">=0.1.5-0 <0.3.0-0",
+    "react": "^18.2.0",
+    "@deepseek-ai/dsh-app-boot": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-atomic-write": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-cmdline": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-plugin-manager": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-hmr": ">=0.1.5-0 <0.3.0-0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/cordis-plugin-include": {
+      "optional": true
+    },
+    "@deepseek-ai/cordis-plugin-loader": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-agent": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-agent-instructions": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-agent-loop": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-agent-presets": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-agent-tool-presentation": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-code-runtime": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-code-runtime-worker-thread": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-command-compact": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-fs": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-fs-local": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-home-paths": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-invariants": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm-retry": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-persona": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-plan-mode": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-sandbox": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-scope": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-session": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-settings": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-skill-filesystem": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-system-prompt": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-ask-user": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-bash": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-fs": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-fs-search": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-goal": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-jobs": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-pwsh": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-ralph": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-skill": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-subagent": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-subagent-control": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-todo": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-web": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-workflow": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-user-approval": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-workflow-worker-thread": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-api-gateway": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-api-remotes": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-connection": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-locale": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-conversation": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-primitives": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-settings": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-settings-plugins": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-slots": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-commands": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-credentials": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-host-webserver": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-web-app": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-typert-protocol": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-typert-registry": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-app-boot": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-atomic-write": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-cmdline": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-plugin-manager": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-hmr": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@ast-grep/wasm": "^0.45.3",
+    "@lumis-sh/wasm-bash": "^0.26.6",
+    "@lumis-sh/wasm-c": "^0.26.3",
+    "@lumis-sh/wasm-cpp": "^0.26.2",
+    "@lumis-sh/wasm-css": "^0.26.4",
+    "@lumis-sh/wasm-go": "^0.26.3",
+    "@lumis-sh/wasm-html": "^0.26.4",
+    "@lumis-sh/wasm-javascript": "^0.26.4",
+    "@lumis-sh/wasm-json": "^0.26.5",
+    "@lumis-sh/wasm-python": "^0.26.5",
+    "@lumis-sh/wasm-ruby": "^0.26.4",
+    "@lumis-sh/wasm-rust": "^0.26.5",
+    "@lumis-sh/wasm-tsx": "^0.26.3",
+    "@lumis-sh/wasm-typescript": "^0.26.3",
+    "@lumis-sh/wasm-yaml": "^0.26.3",
+    "@types/node": "^22.10.5",
+    "@types/react": "~18.3.31",
+    "diff": "^8.0.4",
+    "file-type": "21.3.4",
+    "ignore": "^7.0.12",
+    "node-addon-require-builtin": "^0.1.5",
+    "puppeteer-core": "^25.3.0",
+    "react": "^18.3.1",
+    "tsdown": "^0.15.7",
+    "tsx": "^4.22.4",
+    "typescript": "^5.9.3",
+    "use-sync-external-store": "^1.7.0",
+    "vitest": "^4.1.10",
+    "web-tree-sitter": "^0.26.12",
+    "xxhash-wasm": "1.1.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/pgmi-builds/super-dsh.git",
+    "directory": "better-dsh"
+  },
+  "keywords": [
+    "dsh",
+    "deepseek-harness",
+    "repl",
+    "eval",
+    "ipython",
+    "kernel",
+    "agent",
+    "plugin"
+  ],
+  "homepage": "https://github.com/pgmi-builds/super-dsh/tree/master/better-dsh",
+  "bugs": {
+    "url": "https://github.com/pgmi-builds/super-dsh/issues"
+  }
+}

package/node_modules/better-dsh/scripts/kernel-provision.mjs

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+/**
+ * Best-effort kernel provisioning entry — the single code path behind BOTH
+ * `postinstall` and `npm run kernel:venv`.
+ *
+ * Fail-open by design (2026-09-03 ruling): any failure logs a remedy hint and
+ * exits 0. The installation must NEVER fail because the kernel could not be
+ * provisioned here — the daemon spin-up check (primary path) and first-use
+ * lazy provisioning (final fallback) complete the three-trigger ladder.
+ */
+import { access } from 'node:fs/promises'
+
+const libUrl = new URL('../lib/kernel-env.js', import.meta.url)
+
+try {
+  await access(libUrl)
+} catch {
+  // Dev checkout before the first build, or a pruned install: nothing to call.
+  console.log('[dashr] kernel-env build output not present yet — skipping install-time pre-provision (the daemon spin-up check will provision on start)')
+  process.exit(0)
+}
+
+const { resolveKernelEnv } = await import(libUrl)
+
+try {
+  const env = await resolveKernelEnv({
+    autoInstall: true,
+    log: (level, message) => console[level === 'warn' ? 'warn' : 'log'](`[dashr] ${message}`),
+  })
+  console.log(`[dashr] kernel ready: python ${env.version} at ${env.python}${env.dill ? '' : ' (dill missing — snapshots disabled)'}`)
+} catch (error) {
+  console.warn(`[dashr] kernel pre-provision failed (non-blocking): ${error instanceof Error ? error.message : String(error)}`)
+  console.warn('[dashr] remedies: run "npm run kernel:venv" in the dashr package; or rely on the daemon spin-up check / first-use auto-install; or set python to a prepared interpreter')
+  process.exit(0)
+}

package/node_modules/better-dsh/scripts/register-bundle.mjs

@@ -0,0 +1,80 @@
+// Separate-process entry for the SAME native package operations used by dsh plugin.
+// No shell interpolation, package scripts, upstream edits, or companion registry lookup.
+import { createRequire } from 'node:module'
+import { createHash } from 'node:crypto'
+import { readFile, realpath } from 'node:fs/promises'
+import { dirname, join, relative, resolve, isAbsolute, sep } from 'node:path'
+import { pathToFileURL } from 'node:url'
+let input = ''
+for await (const bytes of process.stdin) input += bytes
+const {profile,archive,expected} = JSON.parse(input)
+const require = createRequire(profile.installAnchor)
+const {runProfilePnpm} = await import(pathToFileURL(require.resolve('@deepseek-ai/dsh-plugin-manager/operations')).href)
+const {withFileLock} = await import(pathToFileURL(require.resolve('@deepseek-ai/dsh-atomic-write')).href)
+const abort = new AbortController()
+process.once('SIGTERM', () => abort.abort())
+const json = async path => JSON.parse(await readFile(path, 'utf8'))
+const hash = bytes => createHash('sha256').update(bytes).digest('hex')
+async function contained(root, path) {
+  if (typeof path !== 'string' || isAbsolute(path)) throw new Error('Pack delivery path must be relative')
+  const base = await realpath(root), file = await realpath(resolve(base, path)), rel = relative(base, file)
+  if (rel === '..' || rel.startsWith('..' + sep) || isAbsolute(rel)) throw new Error('Pack delivery path escapes its owner')
+  return file
+}
+const skipped = disposition => ({ exitCode: 0, disposition })
+// Complete each native acquisition/release before observing cancellation;
+// exiting during its async lock-file write can strand incomplete lock metadata.
+async function withCancellableProfileLock(operation) {
+  const path = join(profile.dir, 'package.json'), deadline = Date.now() + 120000
+  for (;;) {
+    abort.signal.throwIfAborted()
+    let acquired = false
+    try {
+      return await withFileLock(path, async () => {
+        acquired = true
+        abort.signal.throwIfAborted()
+        return operation()
+      }, { waitMs: Math.min(250, Math.max(0, deadline - Date.now())) })
+    } catch (error) {
+      abort.signal.throwIfAborted()
+      if (acquired || Date.now() >= deadline
+        || error.message !== `atomic-write: timed out waiting for the writer lock at ${path}.lock`) throw error
+    }
+  }
+}
+const result = await withCancellableProfileLock(async () => {
+  abort.signal.throwIfAborted()
+  const current = await json(join(profile.dir, 'package.json'))
+  if (typeof expected.ownerSpec !== 'string' || current.dependencies?.[expected.owner] !== expected.ownerSpec) return skipped('owner-changed')
+  const ownerDir = join(profile.dir, 'node_modules', expected.owner)
+  let owner, descriptorPath, descriptor
+  try {
+    owner = await json(join(ownerDir, 'package.json'))
+    if (owner.dependencies?.[expected.companion.name] !== expected.companion.version || owner.superd?.delivery === undefined) return skipped('owner-changed')
+    descriptorPath = await contained(ownerDir, owner.superd.delivery)
+    descriptor = await json(descriptorPath)
+  } catch (error) {
+    if (error.code === 'ENOENT') return skipped('owner-changed')
+    throw error
+  }
+  const item = descriptor.companions?.find(item => item.name === expected.companion.name)
+  if (item?.version !== expected.companion.version || item.sha256 !== expected.companion.sha256
+    || hash(await readFile(await contained(dirname(descriptorPath), item.tarball))) !== expected.companion.sha256) return skipped('owner-changed')
+  const prior = current.dependencies?.[item.name]
+  if (prior !== expected.priorSpec) return skipped(prior === undefined && expected.priorSpec !== undefined ? 'companion-removed' : 'companion-changed')
+  if (hash(await readFile(archive)) !== item.sha256) throw new Error('Cached companion SHA256 mismatch')
+  abort.signal.throwIfAborted()
+  // Same public operation and writer lock used by the native Plugin Manager;
+  // intent is checked after acquisition, before a queued install can undo removal.
+  const operation = await runProfilePnpm({profile:profile.name,dir:profile.dir,installAnchor:profile.installAnchor,cwd:profile.dir,home:profile.home}, ['add','file:'+archive,'--ignore-scripts'], {
+    ...profile.packageManager, execution:'service', signal:abort.signal, outputBytes:16384,
+    lookupTimeoutMs:120000, idleTimeoutMs:120000,
+  })
+  if (operation.exitCode === 0) {
+    const installed = await json(join(profile.dir, 'node_modules', item.name, 'package.json'))
+    const after = await json(join(profile.dir, 'package.json'))
+    if (installed.name !== item.name || installed.version !== item.version || after.dependencies?.[item.name] !== 'file:' + archive) throw new Error('Native companion registration did not install the exact local artifact')
+  }
+  return { exitCode: operation.exitCode, logPath: operation.logPath, disposition: 'installed' }
+})
+process.stdout.write(JSON.stringify(result)+'\n')

package/node_modules/better-dsh/url-schemes-instruction.md

@@ -0,0 +1,22 @@
+# Internal URL Schemes
+
+- Format: `scheme://<path>[:selector]`.
+- Compatibility: Supported anywhere a filesystem path is accepted across `read`, `write`, `grep`, and `glob`.
+- `skill://`, `agent://`, `ctx://`, `dsh://`, `dvc://`, `http(s)://`.
+- Reading scheme:// lists available surfaces/help for that scheme.
+
+**Selectors:**
+- `:raw` — Accesses the full underlying content bypasses prepared faces/summaries.
+- `:N-M[,N2-M2]` — Line range selection (1-based, inclusive; `N-` reads to end). Indexes canonical full content (so `:raw:N-M` ≡ `:N-M`).
+- `:path/<a.b>` — Traverses JSON using dot-path notation.
+- `?q=<q>` — Dot-path search or plain line filter.
+
+**Schemes:**
+- `skill://<name>[/<file>]` — a registered skill's files; first level = skill names.
+- `agent://[<id>[/transcript]]` — agent roster / a LIVE agent's transcript.
+- `dsh://docs[/<doc>]` and `dsh://config` — harness docs / live resolved config.
+- `ctx://session/<face>` — THIS session's own log; faces: `transcript`, `compactions`, `compactions[<label|n>]`, `thinking`, `system`, `user_prompts[n]`, `tool_calls[n]`, `agent_responses[n]`.
+- `dvc://<device>` — device registry; devices: `ast_edit`, `ast_grep`, `browser`, `lsp`; `write` executes.
+- `http(s)://<host>/<path>` — plain fetch.
+
+Bulk: prefer grep or `:N-M` line windows over full reads.

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "super-dsh",
-  "version": "0.1.12",
-  "description": "Super D for the DeepSeek Harness (DSH) \u2014 one dsh plugin that mounts the superd hub (runtime selector, roster, per-runtime agents) and joins local foreign-agent runtimes (OMP, Codex, Claude, Pi, Hermes, Antigravity) into the DSH Web UI. Each runtime keeps its native home and session store; the hub only bridges.",
+  "version": "0.3.0",
+  "description": "Super D for the DeepSeek Harness (DSH) — one dsh plugin that mounts the superd hub (runtime selector, roster, per-runtime agents) and joins local foreign-agent runtimes (OMP, Codex, Claude, Pi, Hermes, Antigravity) into the DSH Web UI. Each runtime keeps its native home and session store; the hub only bridges.",
   "type": "module",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/pgmi-builds/super-dsh.git"
+    "url": "git+https://github.com/pgmi-builds/super-dsh.git",
+    "directory": "super-dsh"
   },
   "exports": {
     ".": "./superd-hub/dist/index.js",
@@ -24,9 +25,9 @@
     "./client": "./client/index.js",
     "./cordis.patch.yml": "./cordis.patch.yml",
     "./package.json": "./package.json",
-    "./web-trust": "./superd-hub/dist/web-trust.js",
     "./fusion-transport": "./superd-hub/dist/fusion-transport.js",
-    "./a2a": "./superd-hub/dist/a2a-row.js"
+    "./a2a": "./superd-hub/dist/a2a-row.js",
+    "./setup": "./superd-hub/dist/bundle-setup.js"
   },
   "files": [
     "cordis.patch.yml",
@@ -34,9 +35,11 @@
     "README.md",
     "superd-hub/dist",
     "superd-hub/lib",
+    "superd-hub/assets",
     "superd-hub/package.json",
     "superd-hub/cordis.patch.yml",
     "agent-omp/dist",
+    "agent-omp/lib",
     "agent-omp/package.json",
     "agent-omp/cordis.patch.yml",
     "agent-omp-sdk/dist",
@@ -65,7 +68,8 @@
     "agent-agy-sdk/dist",
     "agent-agy-sdk/package.json",
     "agent-agy-sdk/cordis.patch.yml",
-    "agent-agy-sdk/bridge"
+    "agent-agy-sdk/bridge",
+    "bundles"
   ],
   "dsh": {
     "bundle": {
@@ -79,6 +83,7 @@
     }
   },
   "dependencies": {
+    "better-dsh": "0.3.0",
     "@earendil-works/pi-coding-agent": "0.84.2",
     "zod": "4.4.3",
     "@modelcontextprotocol/sdk": "^1.29.0"
@@ -153,5 +158,15 @@
   },
   "publishConfig": {
     "access": "public"
+  },
+  "bundledDependencies": [
+    "better-dsh"
+  ],
+  "homepage": "https://github.com/pgmi-builds/super-dsh",
+  "bugs": {
+    "url": "https://github.com/pgmi-builds/super-dsh/issues"
+  },
+  "superd": {
+    "delivery": "./bundles/manifest.json"
   }
 }

package/superd-hub/assets/icons/README.md

@@ -0,0 +1,20 @@
+# Agent runtime 图标资产包（superd-hub/assets/icons）
+
+Super D 的 runtime 图标正本目录（spec `docs/specs/hub-roster-identity/spec.md` §2）。渲染层不直接引用本目录——`scripts/build-icon-assets.mjs` 按 `manifest.json` 把**被映射到的资产**内联进 `src/client/icon-assets.gen.ts`（base64 data URI），`src/client/runtime-icons.tsx` 按 `runtimeId` 查表。未映射的资产不进 bundle，只作为采集库存放在此。
+
+## runtimeId（匹配键）
+
+统一标识 = adapter 包名的 unscoped 形态（`agent-omp`、`agent-omp-sdk`、…）；native DSH 恒为 `native`。约定 codified 在 `superd-hub/src/roster.ts` 的 `runtimeIdOf(key)`，随 roster/probe 全链路传递。remote 传来本地没有映射的 runtimeId 时渲染 fallback（subagent artwork）。
+
+## 来源
+
+- **PNG（38 枚）**：ORCA（`stablyai/orca`）`src/shared/agent-icons/`，取自 commit `c8dcffce46d92ddbb1f511baf88df60d322f4ac1`，文件名保持 ORCA 原名（`antigravity.png`、`hermes.png`、`dsh.png`…），便于整目录再同步。本线此前 inline 的 hermes/agy 两枚与该集合 byte-identical（已验证）。
+- **SVG（4 枚）**：本线 bundle 早期 inline 的 mark 落盘——`omp.svg` / `pi.svg` 与 ORCA `agent-icon-glyphs.tsx` 的内联手稿同源；`claude.svg` / `codex.svg` 为早期采集，精确上游出处未记录（已知形态与 simple-icons 系一致）。
+- **`dsh-fish.svg`**：Super D 自绘的 FishLogo 几何（官方站点蓝 `#4D6BFE`），非 ORCA 资产。
+
+## 规则
+
+1. **加一个 runtime 图标**：资产文件放进本目录 → `manifest.json` 的 `map` 加一行 `runtimeId → 文件` → 跑 `node scripts/build-icon-assets.mjs`（`npm run build-client` 会自动前置）→ 提交生成物。
+2. **多对一是常态**：SDK 半线与主线路是同一个 agent 的不同 transport，映射到同一资产（`agent-omp` + `agent-omp-sdk` → `omp.svg`）。
+3. **tile**：自身墨色会在深色画框上消失的资产（codex 黑线白底、pi 白线黑底）在 `tiles` 里声明不透明衬底色，渲染层据此加圆角衬底。
+4. **新资产落盘前**确认许可与品牌使用范围；README 的来源段同步更新。