npm:@michengai/dsh-archive-manager@1.0.11

dsh.manifestVersion is not declared; the reader does not infer a default

tarball ships no src/ paths, so capability findings are limited to build output

{
  "fileCount": 24,
  "unpackedBytes": 1662279,
  "patchPaths": [
    "./cordis.patch.yml"
  ],
  "declaredEnginesDsh": null,
  "shipsSource": false
}

the CLI completed the install with exit code 0

no dependency build script was approved by the verifier; approval permits commands with the host user permissions

{
  "durationMs": 2176,
  "exitCode": 0,
  "declaredPeers": null,
  "bundlesAfterInstall": [
    "@deepseek-ai/dsh-base",
    "@michengai/dsh-archive-manager"
  ],
  "pendingBuildScripts": [],
  "buildScriptsApproved": 0,
  "diagnosticsLog": null
}

the process was still running when the wall-clock bound reached it and reported no failure diagnostics, so the bundle was neither skipped nor rejected

the fiber phase is not read directly: an early exit with diagnostics is the load-failure signal, and a boot that settles and waits is the success signal

{
  "bootBoundMs": 25000,
  "durationMs": 25070,
  "signal": null
}

the model call was served by the official replay adapter from a fixture authored in this repository; no provider was contacted and no credential was present

probe task, stated verbatim: "reply with any text"

{
  "replayAdapter": "@deepseek-ai/dsh-llm-replay@0.2.0-rc.2",
  "probeTask": "reply with any text",
  "events": {
    "session": "session-cfb1a1b2-09ca-418f-94f2-49e23a7de350",
    "turnEndReason": {
      "kind": "completed"
    },
    "finalText": "Replay fixture: no provider was called.",
    "textEventCount": 1,
    "error": null,
    "exitCode": 0,
    "durationMs": 1271,
    "eventCount": 7
  }
}

the package ships build output; code inside a bundle cannot be reliably attributed to the author or to an inlined dependency

static analysis cannot see dynamically constructed code or prove intent

{
  "scannedFiles": 11,
  "scannedBytes": 1086465,
  "skippedFiles": 0
}

no metric moved beyond the significance thresholds; that is the finding

differential attribution: baseline profile first, then the subject activated, same container and order

thresholds are coarse on purpose — order-of-magnitude watcher changes, RSS growth beyond 100 MiB, steady state more than 2 s later

{
  "samples": 6,
  "baseline": {
    "atMs": 8040,
    "rss": 199651328,
    "heapUsed": 68538392,
    "external": 5188103,
    "activeTotal": 10,
    "watchers": 7,
    "timers": 0,
    "libuvHandles": 22,
    "libuvActiveHandles": 17,
    "fds": 20
  },
  "activated": {
    "atMs": 8039,
    "rss": 200302592,
    "heapUsed": 75331040,
    "external": 5140271,
    "activeTotal": 11,
    "watchers": 8,
    "timers": 0,
    "libuvHandles": 23,
    "libuvActiveHandles": 18,
    "fds": 20
  },
  "delta": {
    "atMs": -1,
    "rss": 651264,
    "heapUsed": 6792648,
    "external": -47832,
    "activeTotal": 1,
    "watchers": 1,
    "timers": 0,
    "libuvHandles": 1,
    "libuvActiveHandles": 1,
    "fds": 0
  }
}

the profile retains no bundle selection, dependency entry or files for the subject

{
  "residue": [],
  "durationMs": 262
}

{
  "name": "@michengai/dsh-archive-manager",
  "version": "1.0.11",
  "registry": "https://registry.npmjs.org",
  "tarball": "https://registry.npmjs.org/@michengai/dsh-archive-manager/-/dsh-archive-manager-1.0.11.tgz",
  "advertisedIntegrity": "sha512-fg6bs3GMxHjDHdqH9rQsLIC4DKeTxRygIrim/HP+ID8xjhoaF4RYJx6SuODiBPEes7oTLS2GUvljnOssdzuq/Q==",
  "publishedAt": "2026-10-01T10:44:43.699Z"
}

{
  "bytes": 841746,
  "resolvedIntegrity": "sha512-fg6bs3GMxHjDHdqH9rQsLIC4DKeTxRygIrim/HP+ID8xjhoaF4RYJx6SuODiBPEes7oTLS2GUvljnOssdzuq/Q==",
  "advertisedIntegrity": "sha512-fg6bs3GMxHjDHdqH9rQsLIC4DKeTxRygIrim/HP+ID8xjhoaF4RYJx6SuODiBPEes7oTLS2GUvljnOssdzuq/Q==",
  "integrityMatchesRegistry": true,
  "sha256": "45dc0aec0a272db99db1119c206fd57f7c727153c8c1448f7d22cbed2c82b83a"
}

{
  "status": "pass",
  "reasons": [],
  "declared": {
    "manifestVersion": null,
    "bundlePatch": [
      "./cordis.patch.yml"
    ],
    "clientPlatform": "web",
    "enginesDsh": null,
    "enginesNode": "^22.19.0 || >=24.0.0"
  },
  "missingPatchPaths": [],
  "fileCount": 24,
  "unpackedBytes": 1662279,
  "shipsSource": false
}

# 保留官方工作区 UI，仅替换归档需要的后端服务。
# 自定义侧栏通过优先级覆盖插槽；发布后的安装命令：
#   dsh plugin --profile web add @michengai/dsh-archive-manager
#
# workspace / session-projection-cache：宿主注册表与投影缓存，不是设置页。
# 换成本插件子类，才能加批量归档、永久删除和安全缓存域。
# ui-settings-unarchive-sessions：DSH 0.1.6+官方「已归档会话」设置页，只能单条恢复；
# 禁用后只保留本插件的归档管理入口。旧宿主没有该 id 时补丁被忽略。
- id: workspace
  disabled: true
- id: session-projection-cache
  disabled: true
- id: ui-settings-unarchive-sessions
  disabled: true
- id: ui-workspace
  disabled: false
- insert:
    - id: workspace-archive-manager
      name: '@michengai/dsh-archive-manager/workspace'
    - id: session-projection-cache-archive-manager
      name: '@michengai/dsh-archive-manager/projcache'
      config:
        writeEveryEvents: 200
        writeIntervalMs: 5000
    - id: ui-workspace-archive-manager
      name: '@michengai/dsh-archive-manager'

{
  "present": [
    {
      "id": "network_egress",
      "confidence": "medium",
      "attribution": "unknown",
      "firstEvidence": {
        "file": "package/lib/plugin-updater.js",
        "line": 123,
        "snippet": "const response = await fetch(`https://registry.npmjs.org/${encodeURIComponent(packageName)}/latest`, { signal: AbortSignal.timeout(8e3) });"
      }
    },
    {
      "id": "spawns_process",
      "confidence": "medium",
      "attribution": "unknown",
      "firstEvidence": {
        "file": "package/lib/plugin-updater.js",
        "line": 2,
        "snippet": "import { spawn } from \"node:child_process\";"
      }
    }
  ],
  "scannedFiles": 11,
  "skippedFiles": 0,
  "limits": [
    "the package ships build output; code inside a bundle cannot be reliably attributed to the author or to an inlined dependency",
    "static analysis cannot see dynamically constructed code or prove intent"
  ]
}

Progress: resolved 1, reused 0, downloaded 0, added 0
Packages are hard linked from the content-addressable store to the virtual store.
  Content-addressable store is at: /home/verifier/.local/share/pnpm/store/v11
  Virtual store is at:             node_modules/.pnpm
Packages: +1
+
Progress: resolved 1, reused 0, downloaded 1, added 1, done
[WARN] Issues with peer dependencies found. Run "pnpm peers check" to list them.

dependencies:
+ @michengai/dsh-archive-manager 1.0.11

Done in 343ms using pnpm v12.8.1
dsh: initialized profile verify at /work/dsh-home/profiles/verify

dsh: warning: 1 entry did not activate
ui-workspace-archive-manager (@michengai/dsh-archive-manager): pending (waiting for service: webServer)

Packages: -1
-

dependencies:
- @michengai/dsh-archive-manager 1.0.11

Done in 11ms using pnpm v12.8.1

{
  "method": "differential",
  "status": "no-significant-delta",
  "samples": 6,
  "baselineMedian": {
    "atMs": 8040,
    "rss": 199651328,
    "heapUsed": 68538392,
    "external": 5188103,
    "activeTotal": 10,
    "watchers": 7,
    "timers": 0,
    "libuvHandles": 22,
    "libuvActiveHandles": 17,
    "fds": 20
  },
  "activatedMedian": {
    "atMs": 8039,
    "rss": 200302592,
    "heapUsed": 75331040,
    "external": 5140271,
    "activeTotal": 11,
    "watchers": 8,
    "timers": 0,
    "libuvHandles": 23,
    "libuvActiveHandles": 18,
    "fds": 20
  },
  "delta": {
    "atMs": -1,
    "rss": 651264,
    "heapUsed": 6792648,
    "external": -47832,
    "activeTotal": 1,
    "watchers": 1,
    "timers": 0,
    "libuvHandles": 1,
    "libuvActiveHandles": 1,
    "fds": 0
  },
  "significant": []
}

{"type":"session","sessionId":"session-cfb1a1b2-09ca-418f-94f2-49e23a7de350","cwd":"/work"}
{"type":"status","phase":"turn_start","turn":1}
{"type":"status","phase":"step_start","turn":1,"step":1}
{"type":"text","text":"Replay fixture: no provider was called."}
{"type":"status","phase":"step_end","turn":1,"step":1}
{"type":"status","phase":"turn_end","turn":1,"reason":{"kind":"completed"}}
{"type":"final","text":"Replay fixture: no provider was called."}
dsh: warning: 1 entry did not activate
ui-workspace-archive-manager (@michengai/dsh-archive-manager): pending (waiting for service: webServer)