super-dsh 0.3.1-a → 0.3.1-d

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "super-dsh",
-  "version": "0.3.1-a",
+  "version": "0.3.1-d",
   "description": "Super D for the DeepSeek Harness (DSH) — one dsh plugin that mounts the superd hub (runtime selector, roster, per-runtime agents) and joins local foreign-agent runtimes (OMP, Codex, Claude, Pi, Hermes, Antigravity) into the DSH Web UI. Each runtime keeps its native home and session store; the hub only bridges.",
   "type": "module",
   "license": "MIT",

package/remote/helper-bin/MANIFEST.json

@@ -0,0 +1,35 @@
+{
+  "format": 1,
+  "name": "superd-run",
+  "ver": "0.3.1-d.b596",
+  "protocol": 1,
+  "targets": {
+    "aarch64-apple-darwin": {
+      "file": "superd-run",
+      "bytes": 337808,
+      "sha256": "a8fd11a5e6a2cb146deb599414434a299ebf78c53cfc1d3e5f42617ee11c1706"
+    },
+    "aarch64-unknown-linux-musl": {
+      "file": "superd-run",
+      "bytes": 397592,
+      "sha256": "3a8660fa099f1e71de6e08313ee2aaace00503f74365475ee46e2d2a89228397"
+    },
+    "x86_64-pc-windows-gnu": {
+      "file": "superd-run.exe",
+      "bytes": 337408,
+      "sha256": "1372450238c5bda702b4529f4148aa79e80a255c3c125d1a6229afd4693e9d90"
+    },
+    "x86_64-unknown-linux-musl": {
+      "file": "superd-run",
+      "bytes": 447152,
+      "sha256": "05b428657942abf22a0ad609433d5cab6b6182fe389851345459a0274b5a6533"
+    }
+  },
+  "sources": {
+    "Cargo.toml": "129ab8360e9da872f9dfd6e713d81fe1389735a74d781f3d9c15e110f92d2757",
+    "build.rs": "c4fb356956b1ec700e99bdeca07d657a7d3b2a4026582db136411676da3d125e",
+    "src/main.rs": "47f1648ea1abc30583839edab219a9062c83d57be981c0505ab6bf79c6fbff54",
+    "src/unix.rs": "56c5f523b7b1a9efd50ef24ccdabc024bc065dd2f904fdbecdf0ca49fe7f3393",
+    "src/windows.rs": "6c1537424b1adc05ed17c7cf8bf376fb5711602b9da1697d596155bf21d541da"
+  }
+}

package/remote/helper-bin/aarch64-apple-darwin/BUILT-VER

@@ -0,0 +1 @@
+0.3.1-d.b596

package/remote/helper-bin/aarch64-unknown-linux-musl/BUILT-VER

@@ -0,0 +1 @@
+0.3.1-d.b596

package/remote/helper-bin/x86_64-pc-windows-gnu/BUILT-VER

@@ -0,0 +1 @@
+0.3.1-d.b596

package/remote/helper-bin/x86_64-unknown-linux-musl/BUILT-VER

@@ -0,0 +1 @@
+0.3.1-d.b596

package/remote/plugin.d.ts

@@ -99,7 +99,9 @@ declare class SshTargets {
   clear(): void;
 }
 /** Shared by execution, probes and file/relay consumers. extraArgs is trusted
- * internal SSH argv (e.g. forwarding), never a model-provided shell string. */
+ * internal SSH argv (e.g. forwarding), never a model-provided shell string.
+ * Identity assembly lives in ssh-argv.ts (the ONE policy — 2026-10-17 ruling);
+ * this wrapper only picks the tty/batch dialect base. */
 declare function sshArgv(connection: SshConnection, options?: {
   tty?: boolean;
   extraArgs?: readonly string[];
@@ -117,7 +119,12 @@ interface TransferReceipt {
   action: 'copy';
   src: string;
   dst: string;
-  verified: boolean;
+  route: 'hub-staged';
+  /** S4: tier actually performed — sha256 digests ran and matched, or explicitly skipped. */
+  verification: 'sha256' | 'not-applicable';
+  /** S3 unified failure envelope. */
+  ok: boolean;
+  reason?: 'digest-mismatch' | 'staging-error' | 'aborted';
   sourceDigest?: string;
   destinationDigest?: string;
   bytes: number;
@@ -154,8 +161,16 @@ interface NativeCopyReceipt {
   stdout: string[];
   stderr: string[];
   outputTruncated: boolean;
-  /** Native CLI success only — no independent digest was computed for this path. */
-  verified: false;
+  /** S3/S4 (spec §3.3): verification names the tier actually performed — native routes are exit-code-only (D1=A). */
+  verification: 'native-exit-only';
+  /** S3 unified failure envelope: all native exits zero. */
+  ok: boolean;
+  /** Failure class when ok is false. */
+  reason?: 'non-zero-exit' | 'aborted';
+  /** Human context, e.g. two-segment 'push not started: pull failed' (prose moved out of route, S8). */
+  note?: string;
+  /** D3 mkdir pre-hop outcome: true = created this call, false = already existed, 'n-a' = skipped or unavailable (detail in note). */
+  created?: true | false | 'n-a';
   /** Tool-owned staging/config release: released on normal/observed exit, unknown when a channel was lost. */
   cleanup: 'released' | 'unknown' | 'none-required';
 }
@@ -203,6 +218,10 @@ interface RsyncReceipt extends RunResult {
   transferredBytes?: number;
   /** Two-SSH route actually used, when applicable. */
   route?: 'local-ssh' | 'ssh-ssh-forward' | 'ssh-ssh-stdio';
+  /** S3/S4: exit-code-only tier (D1=A) + unified failure envelope. */
+  verification: 'native-exit-only';
+  ok: boolean;
+  reason?: 'non-zero-exit' | 'aborted';
 }
 /**
  * Native rsync with ordered caller options. Local↔SSH runs rsync directly with
@@ -213,6 +232,23 @@ interface RsyncReceipt extends RunResult {
  */
 declare function runRsync(request: RsyncRequest, source: RsyncEndpoint, destination: RsyncEndpoint, signal: AbortSignal, options?: RelayRsyncOptions): Promise<RsyncReceipt>;
 //#endregion
+//#region src/remote/helper.d.ts
+interface HelperManifest {
+  format: 1;
+  name: string;
+  ver: string;
+  protocol: number;
+  targets: Record<string, {
+    file: string;
+    bytes: number;
+    sha256: string;
+  }>;
+}
+interface HelperAssets {
+  dir: string;
+  manifest: HelperManifest;
+}
+//#endregion
 //#region src/remote/process.d.ts
 declare const PROCESS_CLEANUP_BOUND_MS: number;
 interface ProcessOptions {
@@ -287,6 +323,8 @@ interface RemoteCallResult {
   session?: string;
   /** 引导/教学行（同 label 重复给 spawn 时的「可省略 spawn」提示等）；无则省略。 */
   notice?: string;
+  /** oneshot 监督路径的如实标注：`superd-run <ver> (<triple>)` 或 `posix-shim`（spec remote-rescope §5）。 */
+  runner?: string;
 }
 interface RemoteAuditRecord {
   target: string;
@@ -311,6 +349,8 @@ interface RemoteDriverOptions {
   ptyArgvFor?: (plan: TargetPlan) => string[];
   spawnArgvFor?: (spawnCommand: string) => string[];
   probeRunner?: ProbeOptions['runner'];
+  /** 测试/验收缝：helper 资产来源（默认 lib 旁挂 helper-bin）；显式 null 强制 shim 路径。 */
+  helperAssetsFor?: () => HelperAssets | null;
   /** 测试缝：roster 扫描执行器（bare-name 解析复用）。 */
   rosterRunner?: RosterOptions['runner'];
   /** 测试缝：ssh config 读取（bare-name 解析复用）。 */
@@ -327,6 +367,9 @@ declare class RemoteDriver {
   private readonly starting;
   private readonly fileAbort;
   private disposed;
+  /** undefined = 未尝试；null = 资产缺失（shim-only）；registry = 每 target sticky 状态机。 */
+  private helpers;
+  private readonly runnerOf;
   private disposal;
   constructor(opts?: RemoteDriverOptions);
   call(params: RemoteCallParams, callCtx?: {
@@ -350,6 +393,10 @@ declare class RemoteDriver {
   start(input: RemoteInput, signal: AbortSignal): Promise<RemoteProcess>;
   private startPrepared;
   private nativeProcess;
+  /** Helper bootstrap is best-effort and sticky: any failure parks null for this driver
+   *  lifetime and the shim stays the path. First call to a target pays probe (+ upload). */
+  private ensureHelper;
+  private helperExec;
   private own;
   /** Ruling 16/17：on-demand 探测 + 会话层，两行如实陈述。 */
   /**