diff --git a/.agents/notes/implemented/process/2026-06-17-ts-build-config.i18n.yaml b/.agents/notes/implemented/process/2026-06-17-ts-build-config.i18n.yaml
index 4319bcee3e..fe42a92f75 100644
--- a/.agents/notes/implemented/process/2026-06-17-ts-build-config.i18n.yaml
+++ b/.agents/notes/implemented/process/2026-06-17-ts-build-config.i18n.yaml
@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write .agents/notes/implemented/process/2026-06-17-ts-build-config.md
-2026-06-17-ts-build-config.md: 20dd3d8d0a11e01397c36388903cd112a170f0bf
-2026-06-17-ts-build-config.zh.md: 196ed3f2921a4be6f65cd56fc496993b7121f484
+2026-06-17-ts-build-config.md: ec4c6a4aeb1074a69d45b2cf4b4c733b410ccceb
+2026-06-17-ts-build-config.zh.md: 8115bb2557eea967d57eb6693e2bb288188792a8
diff --git a/.agents/notes/implemented/process/2026-06-17-ts-build-config.md b/.agents/notes/implemented/process/2026-06-17-ts-build-config.md
index 20dd3d8d0a..ec4c6a4aeb 100644
--- a/.agents/notes/implemented/process/2026-06-17-ts-build-config.md
+++ b/.agents/notes/implemented/process/2026-06-17-ts-build-config.md
@@ -32,7 +32,7 @@ In-package relative imports use explicit `.ts` specifiers.
 
 `pnpm run build` is a two-stage build:
 
-- Stage 1: `tsc -b` over the root solution emits per-module `.js`, declarations `.d.ts`, JS sourcemaps `.js.map`, and declaration sourcemaps `.d.ts.map` into each package's `lib/types`. This is the authoritative TypeScript compilation result. For publish we keep `.d.ts` / `.d.ts.map` and ignore `.js` / `.js.map`.
+- Stage 1: `tsc -b` over the root solution emits per-module `.js`, declarations `.d.ts`, JS sourcemaps `.js.map`, and declaration sourcemaps `.d.ts.map` into each package's `lib/types`. This is the authoritative TypeScript compilation result. Publication keeps `.d.ts`; packages whose runtime exports explicitly point into the emitted tree also keep its `.js` files. `.js.map` and `.d.ts.map` remain in the local build tree.
     - The graph is the project-reference graph reachable from the root solution `tsconfig.json` through the two aggregates ([topology](2026-07-22-tsconfig-solution-root-two-aggregates.md)). It validates and emits package/vendor build results.
 - Stage 2: a bundler reads the emitted JS under `lib/types` and writes the bundled runtime entry as `lib/index.js` or `lib/index.mjs` (follow current behavior). This stage is bundling only. It must not read TypeScript source or emit declarations.
 
@@ -77,9 +77,9 @@ Build responsibilities are clearer:
 
 - Each module under `packages/<group>/<pkg>` and `vendor/*` has one local tsconfig for build, typecheck, and tools that run source directly, such as the `dsh` source loader, `tsx`, and `vitest`.
 - The `build` command drives the root solution graph. `tsc -b` owns the publishable per-module `.js` and `.d.ts` output, and the bundler owns only `lib/index.*`.
-    - `lib/types/*.d.ts` and `.d.ts.map` are the publish declaration output.
+    - `lib/types/*.d.ts` is the publish declaration output; `.d.ts.map` remains only as a local compilation artifact.
     - `lib/types/*.d.ts` uses explicit `.ts` relative specifiers, which TypeScript's NodeNext/Node16 resolver maps to sibling `.d.ts` files.
-    - `lib/types/*.js` is only a bundler input and must not be used as a runtime entry or public import target.
+    - `lib/types/*.js` is normally only a bundler input. It is published only when an explicit runtime export points into the emitted tree.
     - `lib/index.*` is the publish runtime output and is generated by the bundler, currently `tsdown`.
 - `pnpm run verify-node-next-types` scans built declarations for relative specifiers without file extensions, then typechecks a temporary external ESM consumer with `moduleResolution: "NodeNext"` against the built `types`/`exports` surface, so declaration specifier regressions fail before publish.
 - The `typecheck` command uses `tsconfig.json`. Examples, tests, and scripts are checked by the root no-emit project, while packages and vendor modules keep the same emit behavior as `build`. Package and vendor source stays behind project-reference boundaries.
diff --git a/.agents/notes/implemented/process/2026-06-17-ts-build-config.zh.md b/.agents/notes/implemented/process/2026-06-17-ts-build-config.zh.md
index 196ed3f292..8115bb2557 100644
--- a/.agents/notes/implemented/process/2026-06-17-ts-build-config.zh.md
+++ b/.agents/notes/implemented/process/2026-06-17-ts-build-config.zh.md
@@ -32,7 +32,7 @@ Status: implemented
 
 `pnpm run build` 是两阶段构建：
 
-- 阶段 1：在根 solution 上执行 `tsc -b`，将逐模块的 `.js`、声明文件 `.d.ts`、JS sourcemap `.js.map` 和声明 sourcemap `.d.ts.map` 输出到各包的 `lib/types`。这是权威的 TypeScript 编译结果。发布时保留 `.d.ts` / `.d.ts.map`，忽略 `.js` / `.js.map`。
+- 阶段 1：在根 solution 上执行 `tsc -b`，将逐模块的 `.js`、声明文件 `.d.ts`、JS sourcemap `.js.map` 和声明 sourcemap `.d.ts.map` 输出到各包的 `lib/types`。这是权威的 TypeScript 编译结果。发布时保留 `.d.ts`；如果包的运行时 export 显式指向该输出树，也会保留其中的 `.js` 文件。`.js.map` 和 `.d.ts.map` 留在本地构建树中。
     - 该图是从根 solution `tsconfig.json` 经两个聚合可达的 project-reference 图（[拓扑](2026-07-22-tsconfig-solution-root-two-aggregates.md)），用于校验并输出包/vendor 的构建结果。
 - 阶段 2：打包器读取 `lib/types` 下输出的 JS，将打包后的运行时入口写为 `lib/index.js` 或 `lib/index.mjs`（沿用当前行为）。此阶段仅做打包，禁止读取 TypeScript 源码或输出声明文件。
 
@@ -77,9 +77,9 @@ tsx scripts/clean.ts
 
 - `packages/<group>/<pkg>` 和 `vendor/*` 下的每个模块有一份本地 tsconfig，同时服务于构建、类型检查和直接运行源码的工具（如 `dsh` 源码 loader、`tsx` 和 `vitest`）。
 - `build` 命令驱动根 solution 图。`tsc -b` 负责可发布的逐模块 `.js` 和 `.d.ts` 输出，打包器仅负责 `lib/index.*`。
-    - `lib/types/*.d.ts` 和 `.d.ts.map` 是发布用的声明输出。
+    - `lib/types/*.d.ts` 是发布用的声明输出；`.d.ts.map` 只作为本地编译产物保留。
     - `lib/types/*.d.ts` 使用显式 `.ts` 相对说明符，TypeScript 的 NodeNext/Node16 解析器会将其映射到同级的 `.d.ts` 文件。
-    - `lib/types/*.js` 仅作为打包器输入，禁止用作运行时入口或公开导入目标。
+    - `lib/types/*.js` 通常仅作为打包器输入。只有显式运行时 export 指向该输出树时，才会发布这些文件。
     - `lib/index.*` 是发布用的运行时输出，由打包器（当前为 `tsdown`）生成。
 - `pnpm run verify-node-next-types` 扫描构建出的声明文件，检查是否存在缺少文件扩展名的相对说明符，然后以 `moduleResolution: "NodeNext"` 对构建出的 `types`/`exports` 接口进行临时外部 ESM 消费方的类型检查，确保声明说明符的回归在发布前被捕获。
 - `typecheck` 命令使用 `tsconfig.json`。示例、测试和脚本由根 no-emit 项目检查，包和 vendor 模块保持与 `build` 相同的输出行为。包和 vendor 源码始终处于 project-reference 边界之后。
diff --git a/.agents/notes/proposed/process/2026-08-04-artifact-first-npm-baseline-publication.i18n.yaml b/.agents/notes/proposed/process/2026-08-04-artifact-first-npm-baseline-publication.i18n.yaml
new file mode 100644
index 0000000000..5418a920e5
--- /dev/null
+++ b/.agents/notes/proposed/process/2026-08-04-artifact-first-npm-baseline-publication.i18n.yaml
@@ -0,0 +1,6 @@
+# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
+# side as of the last confirmed-consistent state. Both languages carry equal authority;
+# after editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write .agents/notes/proposed/process/2026-08-04-artifact-first-npm-baseline-publication.md
+2026-08-04-artifact-first-npm-baseline-publication.md: e79a988531ac266d72f7d2c036bdd10f3e4520a9
+2026-08-04-artifact-first-npm-baseline-publication.zh.md: d7322547c665700aeffce77ea0bb39f622220fe3
diff --git a/.agents/notes/proposed/process/2026-08-04-artifact-first-npm-baseline-publication.md b/.agents/notes/proposed/process/2026-08-04-artifact-first-npm-baseline-publication.md
new file mode 100644
index 0000000000..e79a988531
--- /dev/null
+++ b/.agents/notes/proposed/process/2026-08-04-artifact-first-npm-baseline-publication.md
@@ -0,0 +1,114 @@
+# Agent Note: Artifact-first NPM baseline publication
+
+Status: proposed
+
+English | [中文](2026-08-04-artifact-first-npm-baseline-publication.zh.md)
+
+## Problem
+
+Runnable source in the monorepo does not prove that published packages are runnable. Workspace links, TypeScript paths, tsx source loading, and residual `lib/` files in the working tree can supply files or dependencies that are absent from a published tarball. Existing built-artifact tests still read `lib/` directly from the working tree, so they do not verify what `package.json#files` selects or the layout produced by package-manager installation. An execution that succeeds in development mode can therefore be published without a required bundle chunk, declaration, configuration file, or asset.
+
+Publishing many mutually dependent `@deepseek-ai` packages also creates a set-consistency problem. If a script publishes each package immediately after packing it, a later pack or validation failure leaves the first part of an unusable baseline in the registry. The npm registry has no cross-package transaction, so “publish once” cannot promise an atomic commit. It can promise that the complete publication set is packed and validated before any remote write, then published from that immutable set by one resumable orchestration command.
+
+The current baseline also requires a person to derive versions, authenticate, pack, publish, and retry from a local machine. A later GitHub Actions workflow must reuse the same release bundle and validation logic. It must not rebuild a different, untested set of tarballs after publication is approved.
+
+## Proposal
+
+The publication flow uses an immutable release bundle as its boundary. The pack phase builds every target package from one fixed Git commit, creates every tarball, validates tarball contents, and passes an installed-artifact integration test. The publish phase reads only those tarballs and their manifest and is forbidden from rebuilding or repacking.
+
+The target set contains only `@deepseek-ai/*` workspace packages discovered from `packages/*/*/package.json` and `apps/*/package.json`. The root project, `website/`, vendor, Python, and native workspaces are outside this NPM baseline. Discovery must reject duplicate names, mixed base versions, an unexpected publication privacy state, and unknown packages in the bundle instead of relying on another hand-maintained package-name list.
+
+The prerelease version consists of the package stable base version, a second-precision UTC timestamp captured when the command starts, and the target commit's 10-character short SHA: `<base>-<YYYYMMDDHHmmss>-<short-commit>`. The dist-tag is derived as `dev-<base>`. For example, base `0.0.1`, time `2026-08-04T00:32:00Z`, and commit `909292dd7b` produce version `0.0.1-20260804003200-909292dd7b` and tag `dev-0.0.1`. Retrying one release bundle must retain its version and manifest; repacking creates a version from the new command start time.
+
+The pack phase runs in this order:
+
+1. Resolve the ref to an immutable commit, capture the UTC timestamp, derive the version from that commit's root manifest, and display the commit, timestamp, version, tag, registry, and output path. Both `pack` and `release` wait for Enter at this point before expensive work; `--yes` skips this confirmation for automation.
+2. Install the frozen lockfile in an isolated detached worktree and run source-manifest publication constraints before staging. Uncommitted files and old build output from the caller's working tree must not affect publication.
+3. Stage every target manifest with the derived version, remove its publication-time `private` marker, and rewrite internal workspace dependencies in `dependencies`, `devDependencies`, `optionalDependencies`, and `peerDependencies` to the same exact version.
+4. Build the target commit completely, then run publint and built-package invariants.
+5. Pack every package in the target set without performing a registry write.
+6. Inspect each tarball's package manifest, file inventory, internal dependency versions, name, and version, rejecting missing, duplicate, or extra tarballs.
+7. Generate a release manifest and checksums containing the commit, version, tag, registry, and each package's tarball path, SHA-256, and npm integrity.
+8. Install an isolated consumer from the local tarballs and run the installed-artifact probes available in the current implementation; expand those probes to the complete artifact-plane integration matrix defined below.
+9. Print one directly executable publish command only after the complete set passes. The pack command itself always remains free of remote writes.
+
+The local `release` command composes pack and publish. It first uses the pack confirmation above to fix the expected timestamp and version, then waits for Enter again after a successful pack before publishing the same manifest; `release --yes` skips both confirmations. Separate `pack` and `publish --manifest` operations remain the primitives used by split CI jobs and recovery.
+
+## Current implementation boundary
+
+The checked-in pack command implements fixed-commit staging, exact internal dependency pins, static and tarball payload checks, the immutable manifest, and an isolated npm installation with every release tarball as a local top-level dependency. It runs the installed `dsh --version` and `dsh --dump-default-config` entries under plain Node, then starts the installed default TUI in a POSIX PTY, waits for its `main-session-` ready signal, and exits through `/exit` before printing the publish command. Publish supports integrity-based resumption, separates read-only registry verification from the authenticated identity check, and finishes with a complete remote integrity and dist-tag verification pass.
+
+Pull-request CI does not invoke the pack command; the installed-entry probes are local release checks rather than merge gates. Credential-free CI execution, package-owned probes for every other bin and public runtime entry, workflow-artifact transfer, and the protected publication job remain proposal scope.
+
+## Publication payload contract
+
+Published packages contain only build artifacts required by consumers. `package.json#files` must not include `src` or `lib/types/**/*.d.ts.map`; an independent tarball-content gate must also confirm that no `package/src/**` or `package/**/*.d.ts.map` entry exists, preventing manifest patterns or pack behavior from bypassing the static constraint. Runtime JavaScript, `.d.ts` declarations, configuration, assets, worker files, and dynamic bundle chunks must cover the actual entrypoint closure.
+
+Source manifests may retain `exports["./src/*"]` for this repository's source-plane resolution. That export does not place source in the publication payload and is not a consumer contract of the published package. Static gates must check the source plane and publication payload separately: deleting the source export must not hide broken workspace resolution, and publishing `src` must not repair missing build artifacts.
+
+Every tarball must be free of `workspace:` specifiers, and every internal dependency and peer dependency that points into the publication set must equal the exact derived version; `^`, `~`, and other semver ranges must not cross commit baselines. Except for `exports["./src/*"]`, which is explicitly source-plane-only, every consumer entry declared by the package manifest must point to a file present in the tarball. Dynamic imports, runtime-computed paths, and non-exported assets cannot be validated solely from the manifest and require installed execution.
+
+## Artifact-plane integration test
+
+The integration test runs after all tarballs exist and before any publish. It creates a fresh temporary project outside the monorepo, installs the declared dependency closure through local `.tgz` files from the release manifest, and executes from that installation. The test must use plain Node and package-manager-produced `node_modules`; tsx, tsconfig paths, workspace links, repository source paths, working-tree `lib/`, and the same version from the published registry are forbidden resolution inputs. The test also asserts that critical modules and bins resolve to real paths inside the temporary consumer.
+
+Installation uses the client behavior selected for this publication. Registry uploads must use the `npm` CLI because the private registry accepts only the npm client; pnpm may still orchestrate builds. Tarball tests must neither publish these packages to the real registry first nor repack after testing.
+
+The test covers at least these execution surfaces:
+
+- Installed `@deepseek-ai/dsh` runs `dsh --version` and `dsh --dump-default-config` successfully under plain Node, covering the static CLI entry and one dynamic mode entry.
+- Installed default `dsh` completes one keyless TUI startup in a PTY and exits under test control after reaching a defined ready signal. This path must load the real TUI dynamic chunk, so a missing publication file such as `lib/tui-*.js` fails the gate.
+- Every other published `bin` defines a package-owned smoke command that neither reaches a real service nor modifies user state. Different CLIs are not forced to share `--help`; the test runs the actual installed entry and checks its agreed exit or ready signal.
+- Node-compatible public runtime entries load from the installation. Browser, worker, or host-protocol-only entries use matching isolated fixtures, but their inputs must still be the current tarballs exclusively.
+
+These tests prove executability; they do not replace unit tests, snapshots, real-API e2e, or publint. Test fixtures should reuse behavior assertions from existing built-bin and PTY scenarios while changing the entry to the tarball installation. A test that runs working-tree `lib/bin.js` directly does not satisfy this gate.
+
+## Publication and recovery
+
+The publish command validates the release manifest, every local checksum, the target registry, `npm ping`, and `npm whoami` before uploading tarballs in a deterministic order. It accepts only a manifest created by the pack phase, never workspace directories. The default registry is `https://registry.npm.harnessment.com/`; every publish passes the registry and derived tag explicitly so a user-level `.npmrc` cannot redirect the operation.
+
+npm provides no multi-package atomic transaction, so uploads still occur package by package. The orchestrator reduces the failure surface through idempotent recovery: upload when remote `<name>@<version>` does not exist; skip when it exists with the release manifest's integrity; fail immediately when it exists with different content. Dist-tag inspection reads tag assignments without resolving a default tag's target, so an unrelated dangling tag cannot block recovery. At completion it must confirm every package version's integrity and every dist-tag against the release version. The workflow reports success only when the complete set passes final verification.
+
+If pack, tarball inspection, or installed-artifact integration fails, the registry must receive zero writes. If publish fails after a partial upload, the operator reruns publish with the same release manifest and must not repack into another timestamped version instead of recovering. Only a code or build-input change that requires different tarballs reruns the complete pack and test flow.
+
+## GitHub Actions integration
+
+GitHub Actions separates a credential-free pack-and-test job from a protected publish job. The first checks out the exact commit, invokes the same pack entry used locally, runs tarball-consumer tests, and uploads the complete release bundle as a workflow artifact. The second depends on the first, downloads that workflow artifact, revalidates the manifest and checksums, and invokes the same publish entry. It cannot rebuild after checkout.
+
+Pull requests and ordinary pushes may run the credential-free pack-and-test signal so payload regressions surface before merge. Actual private-registry publication starts as `workflow_dispatch` with only a target ref as input; the pack job creates the UTC timestamp, while the base version, short SHA, tag, registry, and package inventory derive from repository state or version-controlled configuration. Stable-release triggering is outside this baseline proposal.
+
+The registry token is injected only into the publish job, which uses a protected GitHub Environment to govern human approval, allowed branches or tags, and concurrency. The pack-and-test job cannot read publication credentials. The workflow artifact may have a short retention period, but the publish job must use the bundle produced by the same workflow run instead of locating tarballs from an untrusted source by version.
+
+## Alternatives considered
+
+**Publish recursively from the workspace.** Rejected because it interleaves packing and registry writes, cannot prove the complete set before the first write, and allows workspace resolution and caller working-tree state to influence publication.
+
+**Test only built `lib/` in the working tree.** Rejected because that validates the build tree rather than the tarball selected by `package.json#files`. A dynamic chunk present in the working tree but omitted from the tarball is exactly the failure this proposal must catch.
+
+**Run only `dsh --help`.** Rejected because Commander can print help and exit before loading the TUI, Web, or headless dynamic entry. It does not prove the default production startup path is complete.
+
+**Publish `src` and declaration maps to reduce missing-file risk.** Rejected because the source plane is not a production-runtime fallback. Expanding the payload hides bundle-closure errors and turns local debugging outputs into accidental publication contracts.
+
+**Require truly atomic cross-package publication.** Rejected because the npm registry has no such transaction. An immutable release bundle, complete pre-publication validation, integrity comparison, and idempotent recovery provide an implementable boundary while retaining the explicit limitation that partial uploads can be briefly visible.
+
+**Rebuild in the publish job after approval.** Rejected because the tested and uploaded tarballs would lose content identity. The workflow artifact and checksums must carry the test inputs directly into publication.
+
+## Acceptance criteria
+
+- One pack entry discovers every target under `packages/*/*` and `apps/*` from a fixed commit, derives and displays a version from the UTC second and short commit before waiting for Enter, generates the complete release bundle before any registry write, and prints one copyable publish command; `release` waits again after packing, while `--yes` skips both confirmations.
+- Static manifest and tarball-content gates both reject published `src` and `.d.ts.map` while source manifests retain `exports["./src/*"]`.
+- The release bundle records the complete package set, commit, derived version, tag, registry, and per-tarball integrity; every internal dependency is pinned exactly to that version, and publish consumes only that bundle without rebuilding.
+- An isolated integration test installs from local tarballs and starts the installed default `dsh` TUI under plain Node; deleting any required dynamic chunk makes the test fail deterministically.
+- Every published bin and applicable public runtime entry has post-tarball-install execution coverage, with resolution paths proving that no monorepo fallback occurred.
+- Publish safely resumes from the same manifest after partial success: matching integrity is skipped, conflicting integrity is rejected, and final verification requires every version and tag to agree.
+- A credential-free GitHub Actions job creates and tests the bundle, a protected job uploads the identical bundle, and the publication token exists only in the latter.
+
+## Risks
+
+Full packing, installation, and startup add CI time and workflow-artifact volume. The implementation should cache external dependencies and the pnpm store, but it must not cache or reuse installed workspace output for target packages. Safe consumer probes can run in parallel to reduce latency.
+
+Installing every tarball as a temporary project's top-level dependency can hide an undeclared internal dependency. The test generator should install each tested application's declared recursive closure and retain existing dependency gates. For `@deepseek-ai/dsh`, whose dependency surface approaches the full set, package-manifest and static graph checks remain necessary to detect undeclared edges.
+
+Platform-specific optional dependencies, native addons, PTYs, and browser entries may require platform-owned probes. The first phase must cover primary `dsh` startup on the publication Linux runner and one local macOS path, then expand the matrix with the actual publication platforms. Skipping an unstable probe must not move a production path outside the gate.
+
+Recovery cannot remove npm's partial visibility. During a failed publication, the registry may briefly contain only some package versions from the bundle. Operators and automation must treat the final bundle verification, not one successful `npm publish`, as the baseline-availability signal.
diff --git a/.agents/notes/proposed/process/2026-08-04-artifact-first-npm-baseline-publication.zh.md b/.agents/notes/proposed/process/2026-08-04-artifact-first-npm-baseline-publication.zh.md
new file mode 100644
index 0000000000..d7322547c6
--- /dev/null
+++ b/.agents/notes/proposed/process/2026-08-04-artifact-first-npm-baseline-publication.zh.md
@@ -0,0 +1,114 @@
+# Agent Note: 以产物为先的 NPM 基线发布
+
+Status: proposed
+
+[English](2026-08-04-artifact-first-npm-baseline-publication.md) | 中文
+
+## 问题
+
+monorepo 中可运行的源码并不能证明发布后的包可运行。workspace link、TypeScript paths、tsx 源码加载和工作树里残留的 `lib/` 都可能补上发布 tarball 中缺失的文件或依赖。即使现有构建产物测试使用普通 Node，它仍直接读取工作树中的 `lib/`，没有验证 `package.json#files` 最终选中了什么，也没有验证包管理器安装后的文件布局。一次开发模式正常的执行因此可能发布为缺少 bundle chunk、声明文件、配置或资源的包。
+
+发布多个互相依赖的 `@deepseek-ai` 包还会产生集合一致性问题。如果脚本每 pack 一个包就立即 publish，那么后续 pack 或验证失败时，注册表中已经存在无法作为完整基线使用的前半组版本。npm 注册表没有跨包事务，因此这里的「一次性发布」不能承诺原子提交，只能承诺在任何远端写入前完整生成并验证发布集合，再由一个可恢复的编排命令发布这个不可变集合。
+
+当前基线还需要人工在本机完成版本派生、认证、pack、发布和重试。后续 GitHub Actions 工作流必须复用同一套发布包与验证逻辑，不能在批准发布后重新构建另一组未经消费方测试的 tarball。
+
+## 提案
+
+发布流程以一个不可变的 release bundle（发布包集合）为边界。pack 阶段从一个确定的 Git commit 构建全部目标包、生成全部 tarball、检查 tarball 内容，并通过安装后集成测试；publish 阶段只读取这组 tarball 及其 manifest（元数据清单），禁止重建或重新 pack。
+
+目标集合只包含 `packages/*/*/package.json` 与 `apps/*/package.json` 中命名为 `@deepseek-ai/*` 的 workspace 包。根项目、`website/`、vendor、Python 与 native workspace 不属于该 NPM 基线。发现机制必须拒绝重复包名、不同基础版本、意外的 `private` 发布状态以及集合中的未知包，而不是维护另一份手工包名列表。
+
+预发布版本由包的稳定基础版本、命令启动时精确到秒的 UTC 时间戳和目标 commit 的 10 位短 SHA 组成：`<base>-<YYYYMMDDHHmmss>-<short-commit>`。dist-tag 由基础版本派生为 `dev-<base>`。例如，基础版本 `0.0.1`、时间 `2026-08-04T00:32:00Z` 和 commit `909292dd7b` 生成版本 `0.0.1-20260804003200-909292dd7b` 与 tag `dev-0.0.1`。同一 release bundle 的重试必须沿用原版本和 manifest；重新 pack 会按新的命令启动时间生成新版本。
+
+pack 阶段按以下顺序执行：
+
+1. 将 ref 解析成不可变 commit，采集 UTC 时间戳，从该 commit 的根 manifest 派生版本，并显示 commit、时间戳、版本、tag、注册表和输出路径。`pack` 与 `release` 此时都会在昂贵操作开始前等待 Enter；自动化可用 `--yes` 跳过该确认。
+2. 在隔离的 detached worktree 中安装 frozen lockfile，并在暂存发布 manifest 之前运行源码 manifest 发布约束；调用方工作树中的未提交文件和旧构建输出不得参与发布。
+3. 将所有目标 manifest 暂存为派生版本，移除发布时的 `private` 标记，并把 `dependencies`、`devDependencies`、`optionalDependencies` 与 `peerDependencies` 中的内部 workspace 依赖全部改写为同一精确版本。
+4. 完整构建目标 commit，再运行 publint 和已构建包不变式。
+5. 为目标集合中的每个包执行 pack，但不执行任何注册表写入。
+6. 检查 tarball 内的 package manifest、文件清单、内部依赖版本、包名和版本，并拒绝缺失、重复或额外的 tarball。
+7. 生成包含 commit、版本、tag、注册表、每个包的 tarball 路径、SHA-256 与 npm integrity 的 release manifest 和校验和文件。
+8. 从本地 tarball 安装一个隔离消费方，运行当前实现已有的安装态产物探测，并将这些探测扩展为下文定义的完整产物平面集成测试矩阵。
+9. 仅当整个集合通过时输出一个可直接执行的 publish 命令；pack 命令本身始终保持无远端写入。
+
+本地 `release` 命令组合 pack 与 publish。它先通过上述 pack 确认确定预期时间戳和版本，再在 pack 成功后等待第二次 Enter，随后发布同一 manifest；`release --yes` 跳过两次确认。独立的 `pack` 与 `publish --manifest` 仍是 CI 分 job 和断点恢复使用的基础操作。
+
+## 当前实现边界
+
+已提交的 pack 命令实现了固定 commit 暂存、内部依赖精确固化、静态与 tarball payload 检查、不可变 manifest，以及把每个发布 tarball 都作为本地顶层依赖的隔离 npm 安装。它在输出 publish 命令前，用普通 Node 运行安装后的 `dsh --version` 与 `dsh --dump-default-config` 入口，再在 POSIX PTY 中启动安装后的默认 TUI，等待其 `main-session-` 就绪信号，并通过 `/exit` 退出。Publish 支持按 integrity 恢复，将只读注册表验证与认证身份检查分离，并以完整的远端 integrity 和 dist-tag 验证结束。
+
+拉取请求 CI 不会调用 pack 命令；安装态入口探测属于本地发布检查，而不是合并门禁。免凭据 CI 执行、其他每个 bin 与公开运行时入口的包自有探测、workflow artifact 传递及受保护 publish job 仍属于提案范围。
+
+## 发布 payload 契约
+
+发布包只携带消费方需要的构建产物。`package.json#files` 禁止包含 `src` 和 `lib/types/**/*.d.ts.map`；tarball 内容门禁还要独立确认不存在任何 `package/src/**` 与 `package/**/*.d.ts.map`，避免 manifest pattern 或 pack 行为绕过静态约束。运行时 JS、声明文件 `.d.ts`、配置、资源、worker 文件和 bundle 动态 chunk 必须按实际入口闭包收齐。
+
+源码 manifest 可以保留 `exports["./src/*"]`，供本仓库的源码平面解析使用；该 export 不代表源码会进入发布 payload，也不属于已发布包的消费方契约。静态门禁必须分别检查源码平面与发布 payload，不能通过删除 source export 来掩盖错误的 workspace 解析，也不能通过发布 `src` 来修补缺失的构建产物。
+
+每个 tarball 必须不含 `workspace:` specifier，并且所有指向本次发布集合的内部依赖与对等依赖（peer dependency）都必须精确等于本次派生版本，禁止使用 `^`、`~` 或其他 semver 范围跨越 commit 基线。除了明确仅供源码平面使用的 `exports["./src/*"]`，package manifest 中声明的每个消费方入口都必须指向 tarball 内存在的文件；动态 import、运行时拼接路径和非 export 资源不能只靠 manifest 检查，必须由安装后执行覆盖。
+
+## 产物平面集成测试
+
+集成测试在全部 tarball 生成后、任何 publish 之前运行。它在 monorepo 外创建一个全新临时项目，通过本次 release manifest 中的本地 `.tgz` 文件安装声明依赖闭包，并从安装目录执行。测试必须使用普通 Node 与包管理器生成的 `node_modules`；禁止 tsx、tsconfig paths、workspace link、仓库源码路径、工作树 `lib/` 和已发布注册表中的同版本包参与解析。测试还要断言关键模块与 bin 的真实路径位于临时消费方内。
+
+安装使用本次发布选择的客户端行为。注册表上传必须使用 `npm` CLI，以满足私有注册表只接受 npm 客户端的策略；构建编排仍可使用 pnpm。tarball 测试不得先把这些包发布到真实注册表，也不得在测试后重新 pack。
+
+测试至少覆盖以下执行面：
+
+- `@deepseek-ai/dsh` 安装后的 `dsh --version` 与 `dsh --dump-default-config` 在普通 Node 下成功，分别覆盖静态 CLI 入口和一个动态模式入口。
+- 安装后的默认 `dsh` 在 PTY 中完成一次无密钥 TUI 启动，到达既定 ready 信号后由测试受控退出。这条路径必须加载真实 TUI 动态 chunk，因此缺少类似 `lib/tui-*.js` 的发布文件会使门禁失败。
+- 每个其他已发布 `bin` 都定义一个不会访问真实服务或修改用户状态的包级冒烟命令。不同 CLI 不强制共用 `--help`；测试必须运行其真实安装入口并检查约定的退出或 ready 信号。
+- Node 兼容的公开运行时入口从安装目录加载；浏览器、worker 或必须由宿主协议驱动的入口使用对应的隔离 fixture（测试前置数据），但输入仍只能是本次 tarball。
+
+这些测试验证可执行性，不替代单元测试、快照、真实 API e2e 或 publint。测试 fixture 应复用现有 built-bin 和 PTY 场景的行为断言，但必须把入口改为 tarball 安装结果；直接运行工作树 `lib/bin.js` 的测试不能算作本门禁。
+
+## 发布与恢复
+
+publish 命令先验证 release manifest、所有本地校验和、目标注册表、`npm ping` 和 `npm whoami`，再按确定顺序上传 tarball。命令只接受 pack 阶段生成的 manifest，不接受 workspace 目录作为发布输入。默认注册表为 `https://registry.npm.harnessment.com/`，每次 publish 都显式传入注册表和派生 tag，避免用户级 `.npmrc` 改变目标。
+
+npm 不提供多包原子事务，上传仍会逐包发生。编排器通过幂等恢复缩小失败面：若远端不存在 `<name>@<version>` 就上传；若已存在且 integrity 与 release manifest 相同就跳过；若已存在但内容不同就立即失败。dist-tag 检查只读取 tag 映射，不解析默认 tag 指向的版本，因此即使无关 tag 指向的版本已不存在，也不会阻断恢复。完成后必须逐包确认版本 integrity 和 dist-tag 都指向本次版本，只有整个集合通过最终验证，工作流才报告发布成功。
+
+如果 pack、tarball 检查或安装后集成测试失败，注册表必须保持零写入。如果 publish 在部分上传后失败，操作者使用同一 release manifest 重跑 publish 命令来恢复，不得重新 pack 并生成另一个时间戳版本来代替恢复。修复代码或改变构建输入后需要不同 tarball 时，才重新执行完整 pack 与测试。
+
+## GitHub Actions 集成
+
+GitHub Actions 分为无凭据的 pack-and-test job 与受保护的 publish job。前者检出精确 commit，调用与本地相同的 pack 入口，运行 tarball 消费方测试，并上传完整 release bundle 作为 workflow artifact。后者依赖前者成功，从 workflow artifact 下载 bundle、重新校验 manifest 和校验和，再调用同一个 publish 入口；它不能检出后重新构建。
+
+PR 与普通 push 可以运行无凭据的 pack-and-test 信号，从而在合并前发现 payload 回归。实际私有注册表发布先通过 `workflow_dispatch` 提供，输入只包括目标 ref；UTC 时间戳由 pack job 生成，基础版本、短 SHA、tag、注册表和包清单都由仓库状态或受版本控制的配置派生。稳定发布触发方式不在本基线提案范围内。
+
+注册表 token 只注入 publish job，并由受保护 GitHub Environment 控制人工批准、允许的分支或 tag 以及并发。pack-and-test job 不得读取发布凭据。workflow artifact 的保留期可以较短，但 publish job 必须使用同一 workflow run 生成的 bundle，不能按版本号从不受信任的位置寻找 tarball。
+
+## Alternatives considered
+
+**从 workspace 直接递归 publish。** 不采用，因为命令会把 pack 与注册表写入交错，无法在第一次写入前证明整个集合完整，也容易让 workspace 解析与调用方工作树状态影响发布结果。
+
+**只测试工作树中构建后的 `lib/`。** 不采用，因为这验证的是构建树，不是 `package.json#files` 选出的 tarball。工作树中存在而 tarball 中漏掉的动态 chunk 正是本提案必须捕获的失败。
+
+**只运行 `dsh --help`。** 不采用，因为 Commander 可以在加载 TUI、Web 或 headless 动态入口之前输出帮助并退出。它无法证明默认生产启动路径完整。
+
+**把 `src` 和声明映射一起发布以降低漏文件风险。** 不采用，因为源码平面不是生产运行时的后备路径；扩大 payload 会掩盖 bundle 闭包错误，并把本地调试产物变成无意的发布契约。
+
+**要求真正的跨包原子发布。** 不采用，因为 npm 注册表没有相应事务。不可变 release bundle、发布前全量验证、integrity 比对与幂等恢复提供可实现的边界，同时明确保留部分上传短暂可见的限制。
+
+**在批准后由发布 job 重新构建。** 不采用，因为测试通过的 tarball 与实际上传的 tarball 将不再具有内容身份。workflow artifact 与校验和必须把测试输入直接传给发布步骤。
+
+## Acceptance criteria
+
+- 一个 pack 入口从确定 commit 发现 `packages/*/*` 和 `apps/*` 的全部目标包，以 UTC 秒级时间戳与短 commit 生成并显示版本，再等待 Enter；它在任何注册表写入前生成完整 release bundle，并输出一个可复制的 publish 命令；`release` 在 pack 后再次等待，`--yes` 跳过两次确认。
+- 静态 manifest 门禁和 tarball 内容门禁都拒绝发布 `src` 与 `.d.ts.map`，同时保留源码 manifest 中的 `exports["./src/*"]`。
+- release bundle 记录完整包集合、commit、派生版本、tag、注册表和逐 tarball integrity；所有内部依赖都精确固化到该版本，publish 只消费该 bundle，绝不重建。
+- 一个隔离集成测试从本地 tarball 安装消费方，并用普通 Node 启动安装后的默认 `dsh` TUI；删除任一所需动态 chunk 会使该测试稳定失败。
+- 所有已发布 bin 和适用的公开运行时入口都有 tarball 安装后的执行覆盖，且解析路径证明没有回退到 monorepo。
+- publish 可在部分成功后用同一 manifest 安全重跑；相同 integrity 被跳过，不同 integrity 被拒绝，最终验证要求所有版本与 tag 一致。
+- GitHub Actions 的无凭据 job 生成并测试 bundle，受保护 job 上传完全相同的 bundle，发布 token 只存在于后者。
+
+## Risks
+
+全量 pack、安装和启动会增加 CI 时间与 workflow artifact 体积。实现应缓存外部依赖和 pnpm store，但不得缓存或复用目标包的已安装 workspace 输出；并行执行安全的消费方 probe 可以降低时延。
+
+把所有 tarball 都安装为临时项目的顶层依赖可能掩盖未声明的内部依赖。测试生成器应按被测应用的声明式递归闭包安装，并结合现有依赖门禁；对依赖面接近全集的 `@deepseek-ai/dsh`，仍需依靠 package manifest 与静态图检查发现未声明边。
+
+不同平台的 optional dependency、native addon、PTY 与浏览器入口可能需要平台专属 probe。第一阶段至少在发布所用 Linux runner 和一个本地 macOS 路径上覆盖主 `dsh` 启动，后续矩阵按实际发布平台扩展；不能用跳过不稳定 probe 的方式把生产路径移出门禁。
+
+恢复机制不能消除 npm 的部分可见性。发布失败期间，注册表可能短暂含有本次版本的一部分包；操作者与自动化必须以最终 bundle 验证结果而非单个 `npm publish` 的成功作为基线可用信号。
diff --git a/apps/cli/package.json b/apps/cli/package.json
index 9d0b0d9700..4ba1da7e86 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -8,9 +8,8 @@
     "dsh": "lib/bin.js"
   },
   "files": [
-    "lib/bin.js",
-    "config",
-    "src"
+    "lib/*.js",
+    "config"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
@@ -134,7 +133,8 @@
     "@deepseek-ai/dsh-workspace-context": "workspace:^",
     "commander": "^15.0.0",
     "cordis": "^4.0.0-rc.7",
-    "js-yaml": "^4.2.0"
+    "js-yaml": "^4.2.0",
+    "node-addon-require-builtin": "^0.1.4"
   },
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",
diff --git a/apps/web/package.json b/apps/web/package.json
index 3c8f90b6a0..39862701b3 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -8,6 +8,9 @@
     "./dist/*": "./dist/*",
     "./package.json": "./package.json"
   },
+  "files": [
+    "dist"
+  ],
   "scripts": {
     "build": "vite build",
     "dev": "vite",
diff --git a/docs/cookbook/adding-a-package.i18n.yaml b/docs/cookbook/adding-a-package.i18n.yaml
index 8621128e27..6232e2155d 100644
--- a/docs/cookbook/adding-a-package.i18n.yaml
+++ b/docs/cookbook/adding-a-package.i18n.yaml
@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write docs/cookbook/adding-a-package.md
-adding-a-package.md: 2dd9165c4b5a7e04ecc7af0507f364fe89b294bb
-adding-a-package.zh.md: 79f022531de500eed1d53b0915ee933b047121ff
+adding-a-package.md: 5df22b23a69e2a33a5d963970c771088ed7f3b5d
+adding-a-package.zh.md: e573657988bd67f5ff9b9191550c10bc654ef116
diff --git a/docs/cookbook/adding-a-package.md b/docs/cookbook/adding-a-package.md
index 2dd9165c4b..5df22b23a6 100644
--- a/docs/cookbook/adding-a-package.md
+++ b/docs/cookbook/adding-a-package.md
@@ -23,7 +23,7 @@ packages/<group>/<pkg>/
 
 Choose an existing group when one matches the package's role (`core`, `llm`, `bash`, `compact`, `subagent`, `todo`, `session-persistence`, `ui`, `util`, or `support`). A new group is allowed, but it is a pure container: no `package.json`, no source files, and packages still sit exactly one level below it.
 
-package.json invariants (enforced by `pnpm run constraints` / `scripts/check-workspace-constraints.ts`): `private: true`, a `version` matching the root `package.json`, `type: module`, `main: "lib/index.js"`, `types: "lib/types/index.d.ts"`, `exports["."].types: "./lib/types/index.d.ts"`, `exports["."].default: "./lib/index.js"`, `cordis` in BOTH peerDependencies and devDependencies (same range). Mirror every dsh peer dependency in devDependencies. `schemastery` goes in `dependencies` (it is a runtime validator), matching agent-loop. The `files` list is precise: `lib/index.js`, `lib/types/**/*.d.ts`, `lib/types/**/*.d.ts.map`, and `src`; do not publish `lib/types` JS or JS-map intermediates or stale root declaration files. CLI app packages with a package `bin` include `lib/bin.js` immediately after `lib/index.js` in `files`.
+package.json invariants (enforced by `pnpm run constraints` / `scripts/check-workspace-constraints.ts`): `private: true`, a `version` matching the root `package.json`, `type: module`, `main: "lib/index.js"`, `types: "lib/types/index.d.ts"`, `exports["."].types: "./lib/types/index.d.ts"`, `exports["."].default: "./lib/index.js"`, `cordis` in BOTH peerDependencies and devDependencies (same range). Mirror every dsh peer dependency in devDependencies. `schemastery` goes in `dependencies` (it is a runtime validator), matching agent-loop. The `files` list contains exactly `lib/index.js`, `lib/invariant.js`, `lib/types/**/*.d.ts`, and package-specific runtime artifacts recognized by the gate; a package whose runtime export points into the emitted tree also includes `lib/types/**/*.js`. Do not publish `src`, declaration maps, JS maps, or stale root declaration files. CLI app packages with a package `bin` include `lib/bin.js` immediately after `lib/index.js` in `files`.
 
 In-package relative imports use explicit `.ts` specifiers in source (for example, `export * from './types.ts'`). The compiler rewrites those to `.js` in emitted JS and leaves explicit `.ts` specifiers in declarations, which standard NodeNext/Node16 TypeScript consumers resolve to the sibling `.d.ts` files.
 
diff --git a/docs/cookbook/adding-a-package.zh.md b/docs/cookbook/adding-a-package.zh.md
index 79f022531d..e573657988 100644
--- a/docs/cookbook/adding-a-package.zh.md
+++ b/docs/cookbook/adding-a-package.zh.md
@@ -23,7 +23,7 @@ packages/<group>/<pkg>/
 
 当已有分组与包的角色匹配时，选择该分组（`core`、`llm`、`bash`、`compact`、`subagent`、`todo`、`session-persistence`、`ui`、`util` 或 `support`）。允许新建分组，但分组只是纯容器：没有 `package.json`，没有源文件，包仍然恰好位于其下一层。
 
-package.json 不变式（由 `pnpm run constraints` / `scripts/check-workspace-constraints.ts` 强制执行）：`private: true`，`version` 与根 `package.json` 一致，`type: module`，`main: "lib/index.js"`，`types: "lib/types/index.d.ts"`，`exports["."].types: "./lib/types/index.d.ts"`，`exports["."].default: "./lib/index.js"`，`cordis` 同时出现在 peerDependencies 和 devDependencies 中（相同范围）。每个 dsh 对等依赖（peer dependency）都要在 devDependencies 中镜像。`schemastery` 放在 `dependencies` 中（它是运行时校验器），与 agent-loop 保持一致。`files` 列表要精确：`lib/index.js`、`lib/types/**/*.d.ts`、`lib/types/**/*.d.ts.map` 和 `src`；不要发布 `lib/types` 下的 JS 或 JS-map 中间产物，也不要发布陈旧的根声明文件。带有 `bin` 的 CLI 应用包在 `files` 中将 `lib/bin.js` 紧跟在 `lib/index.js` 之后。
+package.json 不变式（由 `pnpm run constraints` / `scripts/check-workspace-constraints.ts` 强制执行）：`private: true`，`version` 与根 `package.json` 一致，`type: module`，`main: "lib/index.js"`，`types: "lib/types/index.d.ts"`，`exports["."].types: "./lib/types/index.d.ts"`，`exports["."].default: "./lib/index.js"`，`cordis` 同时出现在 peerDependencies 和 devDependencies 中（相同范围）。每个 dsh 对等依赖（peer dependency）都要在 devDependencies 中镜像。`schemastery` 放在 `dependencies` 中（它是运行时校验器），与 agent-loop 保持一致。`files` 列表精确包含 `lib/index.js`、`lib/invariant.js`、`lib/types/**/*.d.ts` 以及门禁认可的包专用运行时产物；如果包的运行时 export 指向输出树，还要包含 `lib/types/**/*.js`。不要发布 `src`、声明映射、JS map 或陈旧的根声明文件。带有 `bin` 的 CLI 应用包在 `files` 中将 `lib/bin.js` 紧跟在 `lib/index.js` 之后。
 
 包内的相对导入在源码中使用显式 `.ts` 后缀（例如 `export * from './types.ts'`）。编译器在输出的 JS 中将其重写为 `.js`，在声明文件中保留显式 `.ts` 后缀；标准的 NodeNext/Node16 TypeScript 消费方会将其解析到同目录的 `.d.ts` 文件。
 
diff --git a/package.json b/package.json
index fef0a1eb53..905c39f33b 100644
--- a/package.json
+++ b/package.json
@@ -105,6 +105,7 @@
     "constraints": "tsx scripts/check-workspace-constraints.ts",
     "doc-sync": "tsx scripts/run-gates.ts doc-sync",
     "hygiene": "pnpm run knip && pnpm run publint && pnpm run constraints && pnpm run verify-package-invariants && pnpm run verify-built-package-invariants && pnpm run verify-cordis-config && pnpm run verify-node-next-types && pnpm run verify-runtime-closure && pnpm run verify-vendored-links",
+    "publish:npm-baseline": "tsx scripts/publish-npm-baseline.ts",
     "dsh": "node --import tsx/esm apps/cli/src/bin.ts",
     "demo:headless": "node --import tsx packages/examples/cli-demo/src/bin.ts --config examples/headless-agent/cordis.yml",
     "demo:code-mode": "node scripts/demo-code-mode.mjs",
diff --git a/packages/acp/acp/package.json b/packages/acp/acp/package.json
index 6ef2f4def5..7aa9f8c4ef 100644
--- a/packages/acp/acp/package.json
+++ b/packages/acp/acp/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/bash/bash-env/package.json b/packages/bash/bash-env/package.json
index 9ea29ad57c..33243ab344 100644
--- a/packages/bash/bash-env/package.json
+++ b/packages/bash/bash-env/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/bash/bash-local/package.json b/packages/bash/bash-local/package.json
index bacc7ac92d..c3c3a5c3e6 100644
--- a/packages/bash/bash-local/package.json
+++ b/packages/bash/bash-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/bash/bash-sandbox/package.json b/packages/bash/bash-sandbox/package.json
index 0f2240630c..e3d3c3deb3 100644
--- a/packages/bash/bash-sandbox/package.json
+++ b/packages/bash/bash-sandbox/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/bash/bash/package.json b/packages/bash/bash/package.json
index b8ff310f01..71e9ed8d9f 100644
--- a/packages/bash/bash/package.json
+++ b/packages/bash/bash/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/bash/pwsh-local/package.json b/packages/bash/pwsh-local/package.json
index b7a63188b9..f65d524904 100644
--- a/packages/bash/pwsh-local/package.json
+++ b/packages/bash/pwsh-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/bash/tool-bash/package.json b/packages/bash/tool-bash/package.json
index c9734b46eb..2e304ae913 100644
--- a/packages/bash/tool-bash/package.json
+++ b/packages/bash/tool-bash/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/bash/tool-pwsh/package.json b/packages/bash/tool-pwsh/package.json
index 7f43cd57e8..0c25317faa 100644
--- a/packages/bash/tool-pwsh/package.json
+++ b/packages/bash/tool-pwsh/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/client/connection/package.json b/packages/client/connection/package.json
index b14dfc80e3..929464fdc8 100644
--- a/packages/client/connection/package.json
+++ b/packages/client/connection/package.json
@@ -41,9 +41,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "peerDependencies": {
     "@deepseek-ai/dsh-host-webserver": "^0.0.1",
diff --git a/packages/client/hmr/package.json b/packages/client/hmr/package.json
index 99f4d7a7fe..7f86a68b10 100644
--- a/packages/client/hmr/package.json
+++ b/packages/client/hmr/package.json
@@ -49,8 +49,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/locale/package.json b/packages/client/locale/package.json
index 4d75496dc8..75742a80d0 100644
--- a/packages/client/locale/package.json
+++ b/packages/client/locale/package.json
@@ -51,9 +51,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "scripts": {
     "bundle": "tsdown",
diff --git a/packages/client/modules/package.json b/packages/client/modules/package.json
index 468ffdf0bc..2283853a7d 100644
--- a/packages/client/modules/package.json
+++ b/packages/client/modules/package.json
@@ -42,9 +42,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "peerDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.0.1",
diff --git a/packages/client/runtime/package.json b/packages/client/runtime/package.json
index f9cc6a308c..b636316b68 100644
--- a/packages/client/runtime/package.json
+++ b/packages/client/runtime/package.json
@@ -59,8 +59,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/schema-form/package.json b/packages/client/schema-form/package.json
index 175133894a..c1cd5e8018 100644
--- a/packages/client/schema-form/package.json
+++ b/packages/client/schema-form/package.json
@@ -33,8 +33,6 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/test-runtime/package.json b/packages/client/test-runtime/package.json
index e892d9cd52..c93a302124 100644
--- a/packages/client/test-runtime/package.json
+++ b/packages/client/test-runtime/package.json
@@ -49,8 +49,6 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/tsdown.client.ts b/packages/client/tsdown.client.ts
index cd736883eb..1e45991080 100644
--- a/packages/client/tsdown.client.ts
+++ b/packages/client/tsdown.client.ts
@@ -69,7 +69,7 @@ function browserSourcePath(source: string, sourcemapPath: string): string {
  * own tsdown.config.ts (a preset-side glob hides it from the mechanical check).
  * @returns tsdown user configs emitting lib/*.js and lib/client.js.
  */
-export function clientBundle(id: string, libEntry: readonly string[]): UserConfig[] {
+export function clientBundle(id: string, libEntry: readonly string[]): [UserConfig, UserConfig] {
   return [{
     entry: [...libEntry],
     outDir: 'lib',
diff --git a/packages/client/ui-command/package.json b/packages/client/ui-command/package.json
index 8144aea6c8..30f23bcbf2 100644
--- a/packages/client/ui-command/package.json
+++ b/packages/client/ui-command/package.json
@@ -69,8 +69,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-conversation/package.json b/packages/client/ui-conversation/package.json
index 88c09b5550..ff4e74da5e 100644
--- a/packages/client/ui-conversation/package.json
+++ b/packages/client/ui-conversation/package.json
@@ -72,8 +72,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-goal/package.json b/packages/client/ui-goal/package.json
index 98e22fd9d2..9430da812f 100644
--- a/packages/client/ui-goal/package.json
+++ b/packages/client/ui-goal/package.json
@@ -67,8 +67,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-layout/package.json b/packages/client/ui-layout/package.json
index b816533474..1a6e2785b6 100644
--- a/packages/client/ui-layout/package.json
+++ b/packages/client/ui-layout/package.json
@@ -56,8 +56,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-model/package.json b/packages/client/ui-model/package.json
index 2e9a199805..6be5dcbc43 100644
--- a/packages/client/ui-model/package.json
+++ b/packages/client/ui-model/package.json
@@ -68,8 +68,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-models/package.json b/packages/client/ui-models/package.json
index 025cc4c440..abe8dbc0f5 100644
--- a/packages/client/ui-models/package.json
+++ b/packages/client/ui-models/package.json
@@ -65,8 +65,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-permission/package.json b/packages/client/ui-permission/package.json
index 33813d5af1..55d896dbec 100644
--- a/packages/client/ui-permission/package.json
+++ b/packages/client/ui-permission/package.json
@@ -70,8 +70,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-plan/package.json b/packages/client/ui-plan/package.json
index f80a2be1ae..2ded06429c 100644
--- a/packages/client/ui-plan/package.json
+++ b/packages/client/ui-plan/package.json
@@ -66,8 +66,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-primitives/package.json b/packages/client/ui-primitives/package.json
index 36962c90cb..49d6c2c2b6 100644
--- a/packages/client/ui-primitives/package.json
+++ b/packages/client/ui-primitives/package.json
@@ -44,9 +44,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "peerDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.0.1",
diff --git a/packages/client/ui-question/package.json b/packages/client/ui-question/package.json
index fbf1dbb098..7416596284 100644
--- a/packages/client/ui-question/package.json
+++ b/packages/client/ui-question/package.json
@@ -63,8 +63,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-settings-general/package.json b/packages/client/ui-settings-general/package.json
index 8f78ce6acb..a3e8973280 100644
--- a/packages/client/ui-settings-general/package.json
+++ b/packages/client/ui-settings-general/package.json
@@ -70,8 +70,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-settings/package.json b/packages/client/ui-settings/package.json
index d4b872173f..6fa2fdc8cb 100644
--- a/packages/client/ui-settings/package.json
+++ b/packages/client/ui-settings/package.json
@@ -63,8 +63,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-sidebar/package.json b/packages/client/ui-sidebar/package.json
index 7bff9523ed..dfbeefbe44 100644
--- a/packages/client/ui-sidebar/package.json
+++ b/packages/client/ui-sidebar/package.json
@@ -63,8 +63,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-skill/package.json b/packages/client/ui-skill/package.json
index 4ada43cd1d..20d61cdb53 100644
--- a/packages/client/ui-skill/package.json
+++ b/packages/client/ui-skill/package.json
@@ -54,8 +54,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-slash/package.json b/packages/client/ui-slash/package.json
index c7448532df..7562a536e3 100644
--- a/packages/client/ui-slash/package.json
+++ b/packages/client/ui-slash/package.json
@@ -61,8 +61,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-slots/package.json b/packages/client/ui-slots/package.json
index d0346ccf16..9c459fd0f8 100644
--- a/packages/client/ui-slots/package.json
+++ b/packages/client/ui-slots/package.json
@@ -27,9 +27,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "peerDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.0.1",
diff --git a/packages/client/ui-subagent/package.json b/packages/client/ui-subagent/package.json
index 9e6b120c1e..026b00196b 100644
--- a/packages/client/ui-subagent/package.json
+++ b/packages/client/ui-subagent/package.json
@@ -70,8 +70,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-theme/package.json b/packages/client/ui-theme/package.json
index 7046f3391b..1adad710cc 100644
--- a/packages/client/ui-theme/package.json
+++ b/packages/client/ui-theme/package.json
@@ -19,7 +19,7 @@
       "types": "./lib/types/client/index.d.ts",
       "default": "./lib/client.js"
     },
-    "./styles/*": "./src/styles/*",
+    "./styles/*": "./lib/styles/*",
     "./src/*": "./src/*",
     "./package.json": "./package.json"
   },
@@ -56,9 +56,8 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/styles",
+    "lib/types/**/*.d.ts"
   ],
   "scripts": {
     "bundle": "tsdown",
diff --git a/packages/client/ui-theme/tsdown.config.ts b/packages/client/ui-theme/tsdown.config.ts
index 1bc83af0e9..08616753ce 100644
--- a/packages/client/ui-theme/tsdown.config.ts
+++ b/packages/client/ui-theme/tsdown.config.ts
@@ -1,3 +1,11 @@
 import { clientBundle } from '../tsdown.client.ts'
 
-export default clientBundle('@deepseek-ai/dsh-client-ui-theme', ['lib/types/index.js', 'lib/types/invariant.js'])
+const [lib, client] = clientBundle(
+  '@deepseek-ai/dsh-client-ui-theme',
+  ['lib/types/index.js', 'lib/types/invariant.js'],
+)
+
+export default [{
+  ...lib,
+  copy: [{ from: 'src/styles/*', to: 'lib/styles' }],
+}, client]
diff --git a/packages/client/ui-trajectory/package.json b/packages/client/ui-trajectory/package.json
index 8da6559866..576b561711 100644
--- a/packages/client/ui-trajectory/package.json
+++ b/packages/client/ui-trajectory/package.json
@@ -58,8 +58,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/ui-workspace/package.json b/packages/client/ui-workspace/package.json
index df810c4493..71148df7b6 100644
--- a/packages/client/ui-workspace/package.json
+++ b/packages/client/ui-workspace/package.json
@@ -65,8 +65,6 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/web-react/package.json b/packages/client/web-react/package.json
index 2d5c08b53a..b5e242a00e 100644
--- a/packages/client/web-react/package.json
+++ b/packages/client/web-react/package.json
@@ -36,8 +36,6 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/web/package.json b/packages/client/web/package.json
index b235e2accb..847d126386 100644
--- a/packages/client/web/package.json
+++ b/packages/client/web/package.json
@@ -47,8 +47,6 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ]
 }
diff --git a/packages/client/web/tests/base-styles.spec.ts b/packages/client/web/tests/base-styles.spec.ts
index d87921cede..ecea9e9f2c 100644
--- a/packages/client/web/tests/base-styles.spec.ts
+++ b/packages/client/web/tests/base-styles.spec.ts
@@ -10,6 +10,9 @@ import { describe, expect, it } from 'vitest'
 
 const THEME_PACKAGE = '@deepseek-ai/dsh-client-ui-theme'
 const baseCss = readFileSync(fileURLToPath(new URL('../src/base.css', import.meta.url)), 'utf8')
+const themeManifest = JSON.parse(
+  readFileSync(fileURLToPath(new URL('../../ui-theme/package.json', import.meta.url)), 'utf8'),
+) as { exports: Record<string, string>; files: string[] }
 
 /**
  * Import specifiers of the sheet, in source order. Quote style and surrounding
@@ -24,9 +27,9 @@ function importOrder(css: string): string[] {
 }
 
 /**
- * Resolve a `<package>/styles/<file>` specifier to its path in the workspace.
- * The theme package maps `./styles/*` to `./src/styles/*`, so the sheets stay
- * on the source plane rather than needing a build.
+ * Resolve a `<package>/styles/<file>` specifier to its source path for a
+ * clean-tree test. The package build copies these sheets to their public
+ * `lib/styles` export.
  * @param specifier - import specifier from base.css.
  * @returns absolute path of the file the specifier names.
  */
@@ -38,6 +41,11 @@ function resolveThemeSheet(specifier: string): string {
 const imports = importOrder(baseCss)
 
 describe('web shell base.css', () => {
+  it('publishes theme sheets from the built artifact plane', () => {
+    expect(themeManifest.exports['./styles/*']).toBe('./lib/styles/*')
+    expect(themeManifest.files).toContain('lib/styles')
+  })
+
   it('imports every sheet from the theme package and each one exists', () => {
     expect(imports.length).toBeGreaterThan(0)
     for (const specifier of imports) {
diff --git a/packages/code-runtime/code-runtime-worker/package.json b/packages/code-runtime/code-runtime-worker/package.json
index e1e1d6a2f6..cc72bf1b12 100644
--- a/packages/code-runtime/code-runtime-worker/package.json
+++ b/packages/code-runtime/code-runtime-worker/package.json
@@ -25,9 +25,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/worker.cjs",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/code-runtime/code-runtime/package.json b/packages/code-runtime/code-runtime/package.json
index 2d59302ec9..f6e3a08ce1 100644
--- a/packages/code-runtime/code-runtime/package.json
+++ b/packages/code-runtime/code-runtime/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/compact/command-compact/package.json b/packages/compact/command-compact/package.json
index 3b009b45d7..324051b188 100644
--- a/packages/compact/command-compact/package.json
+++ b/packages/compact/command-compact/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/compact/compact-basic/package.json b/packages/compact/compact-basic/package.json
index 6a93e249a3..2b0624e06e 100644
--- a/packages/compact/compact-basic/package.json
+++ b/packages/compact/compact-basic/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/compact/compact-tool-result-prune/package.json b/packages/compact/compact-tool-result-prune/package.json
index 7cd9ff6b98..f3b0945460 100644
--- a/packages/compact/compact-tool-result-prune/package.json
+++ b/packages/compact/compact-tool-result-prune/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/compact/compact/package.json b/packages/compact/compact/package.json
index f0874990a3..100a3f56f8 100644
--- a/packages/compact/compact/package.json
+++ b/packages/compact/compact/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/context/session-reference/package.json b/packages/context/session-reference/package.json
index df2cd96c9f..48111ca09b 100644
--- a/packages/context/session-reference/package.json
+++ b/packages/context/session-reference/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/context/time-context/package.json b/packages/context/time-context/package.json
index 2b3ad9fca6..8e8421fd01 100644
--- a/packages/context/time-context/package.json
+++ b/packages/context/time-context/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/context/tmux-context/package.json b/packages/context/tmux-context/package.json
index 222cdfa55b..524036a667 100644
--- a/packages/context/tmux-context/package.json
+++ b/packages/context/tmux-context/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/context/workspace-context/package.json b/packages/context/workspace-context/package.json
index 0c50b8cc17..6548fb49a8 100644
--- a/packages/context/workspace-context/package.json
+++ b/packages/context/workspace-context/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/cordis/repository-plugin/package.json b/packages/cordis/repository-plugin/package.json
index 07bfa924c2..87e88122f6 100644
--- a/packages/cordis/repository-plugin/package.json
+++ b/packages/cordis/repository-plugin/package.json
@@ -25,9 +25,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/bin.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/cordis/tool-cordis/package.json b/packages/cordis/tool-cordis/package.json
index 7e7b75cab3..0b1c78cf8f 100644
--- a/packages/cordis/tool-cordis/package.json
+++ b/packages/cordis/tool-cordis/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/core/agent-loop/package.json b/packages/core/agent-loop/package.json
index 8e9a2b93bb..68c30d9e55 100644
--- a/packages/core/agent-loop/package.json
+++ b/packages/core/agent-loop/package.json
@@ -20,9 +20,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/core/agent/package.json b/packages/core/agent/package.json
index 58495e1a63..2e204bc7f0 100644
--- a/packages/core/agent/package.json
+++ b/packages/core/agent/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/core/scope/package.json b/packages/core/scope/package.json
index 4679e2755a..a752ee4c77 100644
--- a/packages/core/scope/package.json
+++ b/packages/core/scope/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/core/session/package.json b/packages/core/session/package.json
index 05075a9bd4..83be69528e 100644
--- a/packages/core/session/package.json
+++ b/packages/core/session/package.json
@@ -30,9 +30,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/core/system-prompt/package.json b/packages/core/system-prompt/package.json
index 6cf94f477e..d601365df7 100644
--- a/packages/core/system-prompt/package.json
+++ b/packages/core/system-prompt/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/core/tools/package.json b/packages/core/tools/package.json
index 0e719ab255..3279f17729 100644
--- a/packages/core/tools/package.json
+++ b/packages/core/tools/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/credentials/credentials-local/package.json b/packages/credentials/credentials-local/package.json
index 0b8924d7f2..6cfa6fad5f 100644
--- a/packages/credentials/credentials-local/package.json
+++ b/packages/credentials/credentials-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/credentials/credentials/package.json b/packages/credentials/credentials/package.json
index d907b0a1bb..42dd183fc4 100644
--- a/packages/credentials/credentials/package.json
+++ b/packages/credentials/credentials/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/examples/acp-demo/package.json b/packages/examples/acp-demo/package.json
index 8edf3a43d3..ce4b65466a 100644
--- a/packages/examples/acp-demo/package.json
+++ b/packages/examples/acp-demo/package.json
@@ -29,9 +29,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/bin.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/examples/agent-spine-demo/package.json b/packages/examples/agent-spine-demo/package.json
index 0d32a387ca..a4b18b9c0c 100644
--- a/packages/examples/agent-spine-demo/package.json
+++ b/packages/examples/agent-spine-demo/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/examples/cli-demo/package.json b/packages/examples/cli-demo/package.json
index f977bc5986..afd129aac9 100644
--- a/packages/examples/cli-demo/package.json
+++ b/packages/examples/cli-demo/package.json
@@ -29,9 +29,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/bin.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/examples/jsonrpc-demo/package.json b/packages/examples/jsonrpc-demo/package.json
index d103e3bd00..155660d190 100644
--- a/packages/examples/jsonrpc-demo/package.json
+++ b/packages/examples/jsonrpc-demo/package.json
@@ -29,9 +29,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/bin.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/fs/fs-local/package.json b/packages/fs/fs-local/package.json
index 098de71e6f..50135f0f50 100644
--- a/packages/fs/fs-local/package.json
+++ b/packages/fs/fs-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/fs/fs-policy/package.json b/packages/fs/fs-policy/package.json
index e74852ef7d..634fb114f5 100644
--- a/packages/fs/fs-policy/package.json
+++ b/packages/fs/fs-policy/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/fs/fs-sandbox/package.json b/packages/fs/fs-sandbox/package.json
index 2fa4ee3f5d..08d63895d0 100644
--- a/packages/fs/fs-sandbox/package.json
+++ b/packages/fs/fs-sandbox/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/fs/fs/package.json b/packages/fs/fs/package.json
index 41de454488..14989c2f77 100644
--- a/packages/fs/fs/package.json
+++ b/packages/fs/fs/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/fs/tool-fs-search/package.json b/packages/fs/tool-fs-search/package.json
index 8953aea77a..9e5b8c0374 100644
--- a/packages/fs/tool-fs-search/package.json
+++ b/packages/fs/tool-fs-search/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/fs/tool-fs/package.json b/packages/fs/tool-fs/package.json
index 737f7ac26b..8af8bc77ba 100644
--- a/packages/fs/tool-fs/package.json
+++ b/packages/fs/tool-fs/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/fs/tool-str-replace-editor/package.json b/packages/fs/tool-str-replace-editor/package.json
index 0fc6e54ec6..b9404e20d6 100644
--- a/packages/fs/tool-str-replace-editor/package.json
+++ b/packages/fs/tool-str-replace-editor/package.json
@@ -20,9 +20,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/goal/command-goal/package.json b/packages/goal/command-goal/package.json
index b1007d79f3..7313daa4af 100644
--- a/packages/goal/command-goal/package.json
+++ b/packages/goal/command-goal/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/goal/goal-session/package.json b/packages/goal/goal-session/package.json
index 190cb795ad..86b58f3cda 100644
--- a/packages/goal/goal-session/package.json
+++ b/packages/goal/goal-session/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/goal/goal/package.json b/packages/goal/goal/package.json
index eaef4e6ad2..397e5717ba 100644
--- a/packages/goal/goal/package.json
+++ b/packages/goal/goal/package.json
@@ -30,9 +30,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/goal/tool-goal/package.json b/packages/goal/tool-goal/package.json
index 3fcc0c61a9..c7c87e44db 100644
--- a/packages/goal/tool-goal/package.json
+++ b/packages/goal/tool-goal/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/guard/repeat-tool-guard/package.json b/packages/guard/repeat-tool-guard/package.json
index c892ca99e4..9978865a5d 100644
--- a/packages/guard/repeat-tool-guard/package.json
+++ b/packages/guard/repeat-tool-guard/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/hooks/hook-protocol/package.json b/packages/hooks/hook-protocol/package.json
index f357278db3..0e35d83513 100644
--- a/packages/hooks/hook-protocol/package.json
+++ b/packages/hooks/hook-protocol/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/hooks/hooks-claude/package.json b/packages/hooks/hooks-claude/package.json
index 4d52d1f0c5..cce1d3edb9 100644
--- a/packages/hooks/hooks-claude/package.json
+++ b/packages/hooks/hooks-claude/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/hooks/hooks-codex/package.json b/packages/hooks/hooks-codex/package.json
index fb598b4da3..078b58fb08 100644
--- a/packages/hooks/hooks-codex/package.json
+++ b/packages/hooks/hooks-codex/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/host/apiproxy/package.json b/packages/host/apiproxy/package.json
index 03f31c6a49..426860eebc 100644
--- a/packages/host/apiproxy/package.json
+++ b/packages/host/apiproxy/package.json
@@ -34,9 +34,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/host/directory-picker-auto/package.json b/packages/host/directory-picker-auto/package.json
index 888637231e..753f83845a 100644
--- a/packages/host/directory-picker-auto/package.json
+++ b/packages/host/directory-picker-auto/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/host/directory-picker-browse/package.json b/packages/host/directory-picker-browse/package.json
index ab0cb593dc..58f984159f 100644
--- a/packages/host/directory-picker-browse/package.json
+++ b/packages/host/directory-picker-browse/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/host/directory-picker-native/package.json b/packages/host/directory-picker-native/package.json
index 72e1d1be45..2c75ba0a5e 100644
--- a/packages/host/directory-picker-native/package.json
+++ b/packages/host/directory-picker-native/package.json
@@ -31,9 +31,7 @@
     "lib/invariant.js",
     "lib/worker.cjs",
     "lib/client.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/host/directory-picker/package.json b/packages/host/directory-picker/package.json
index 17d68c141b..c37b67a4d7 100644
--- a/packages/host/directory-picker/package.json
+++ b/packages/host/directory-picker/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/host/webserver/package.json b/packages/host/webserver/package.json
index 291294d1fe..4db9433935 100644
--- a/packages/host/webserver/package.json
+++ b/packages/host/webserver/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/llm/llm-deepseek/package.json b/packages/llm/llm-deepseek/package.json
index 2c39e2d920..9f9f305b83 100644
--- a/packages/llm/llm-deepseek/package.json
+++ b/packages/llm/llm-deepseek/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/llm/llm-pi-ai/package.json b/packages/llm/llm-pi-ai/package.json
index 43b97a14f0..cae6c07b7c 100644
--- a/packages/llm/llm-pi-ai/package.json
+++ b/packages/llm/llm-pi-ai/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/llm/llm-retry/package.json b/packages/llm/llm-retry/package.json
index 62dacddcb3..d3b6afebba 100644
--- a/packages/llm/llm-retry/package.json
+++ b/packages/llm/llm-retry/package.json
@@ -25,9 +25,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/llm/llm/package.json b/packages/llm/llm/package.json
index 7adb8e41d9..c0a6994240 100644
--- a/packages/llm/llm/package.json
+++ b/packages/llm/llm/package.json
@@ -34,9 +34,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/llm/token-meter/package.json b/packages/llm/token-meter/package.json
index b058f7cdbb..80c0d99c8a 100644
--- a/packages/llm/token-meter/package.json
+++ b/packages/llm/token-meter/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/lsp/lsp-local/package.json b/packages/lsp/lsp-local/package.json
index 1d6499d9f8..b68745d617 100644
--- a/packages/lsp/lsp-local/package.json
+++ b/packages/lsp/lsp-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/lsp/lsp/package.json b/packages/lsp/lsp/package.json
index 6a96dfdf70..b4a962fb34 100644
--- a/packages/lsp/lsp/package.json
+++ b/packages/lsp/lsp/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/lsp/tool-lsp/package.json b/packages/lsp/tool-lsp/package.json
index febc303a48..28b5a34bdb 100644
--- a/packages/lsp/tool-lsp/package.json
+++ b/packages/lsp/tool-lsp/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/mcp/mcp-client/package.json b/packages/mcp/mcp-client/package.json
index 0d214de9e8..3f65271905 100644
--- a/packages/mcp/mcp-client/package.json
+++ b/packages/mcp/mcp-client/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/plan/plan-mode/package.json b/packages/plan/plan-mode/package.json
index 6507ea4a0c..a810981357 100644
--- a/packages/plan/plan-mode/package.json
+++ b/packages/plan/plan-mode/package.json
@@ -30,9 +30,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/pty/pty-local/package.json b/packages/pty/pty-local/package.json
index e86024516e..a859f482fa 100644
--- a/packages/pty/pty-local/package.json
+++ b/packages/pty/pty-local/package.json
@@ -21,12 +21,11 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "scripts/ensure-spawn-helper.mjs",
+    "lib/types/**/*.d.ts"
   ],
   "scripts": {
-    "postinstall": "node src/ensure-spawn-helper.mjs"
+    "postinstall": "node scripts/ensure-spawn-helper.mjs"
   },
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/pty/pty-local/src/ensure-spawn-helper.mjs b/packages/pty/pty-local/scripts/ensure-spawn-helper.mjs
similarity index 100%
rename from packages/pty/pty-local/src/ensure-spawn-helper.mjs
rename to packages/pty/pty-local/scripts/ensure-spawn-helper.mjs
diff --git a/packages/pty/pty/package.json b/packages/pty/pty/package.json
index c9038f2ce9..702426a2b7 100644
--- a/packages/pty/pty/package.json
+++ b/packages/pty/pty/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/pty/tool-bash-persistent/package.json b/packages/pty/tool-bash-persistent/package.json
index 5022026733..b5cede3920 100644
--- a/packages/pty/tool-bash-persistent/package.json
+++ b/packages/pty/tool-bash-persistent/package.json
@@ -20,9 +20,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/pty/tool-pty/package.json b/packages/pty/tool-pty/package.json
index d8b2564736..5512daba92 100644
--- a/packages/pty/tool-pty/package.json
+++ b/packages/pty/tool-pty/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/sandbox/sandbox-local/package.json b/packages/sandbox/sandbox-local/package.json
index 6750b92577..2683ab3654 100644
--- a/packages/sandbox/sandbox-local/package.json
+++ b/packages/sandbox/sandbox-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/sandbox/sandbox-policy/package.json b/packages/sandbox/sandbox-policy/package.json
index 6f516c222d..6124a75ff6 100644
--- a/packages/sandbox/sandbox-policy/package.json
+++ b/packages/sandbox/sandbox-policy/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/sandbox/sandbox/package.json b/packages/sandbox/sandbox/package.json
index 84266499b3..deb703dc15 100644
--- a/packages/sandbox/sandbox/package.json
+++ b/packages/sandbox/sandbox/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/sdk/create-sdk/package.json b/packages/sdk/create-sdk/package.json
index 27102154fc..262d375563 100644
--- a/packages/sdk/create-sdk/package.json
+++ b/packages/sdk/create-sdk/package.json
@@ -24,9 +24,7 @@
     "lib/invariant.js",
     "lib/bin.js",
     "lib/assets",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/sdk/helper/package.json b/packages/sdk/helper/package.json
index 2884e04f72..bf9eacb813 100644
--- a/packages/sdk/helper/package.json
+++ b/packages/sdk/helper/package.json
@@ -20,9 +20,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/assets",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/sdk/scripts/package.json b/packages/sdk/scripts/package.json
index e4bb35491c..deef54831f 100644
--- a/packages/sdk/scripts/package.json
+++ b/packages/sdk/scripts/package.json
@@ -30,16 +30,14 @@
     "lib/dev/tsdown-config.js",
     "lib/local-plugin-loader-hooks.js",
     "lib/assets",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
     "@deepseek-ai/dsh-helper": "workspace:^",
     "@deepseek-ai/dsh-telemetry": "workspace:^",
     "commander": "^15.0.0",
-    "node-addon-require-builtin": "^0.1.3"
+    "node-addon-require-builtin": "^0.1.4"
   },
   "peerDependencies": {
     "@deepseek-ai/dsh-app-boot": "workspace:^",
diff --git a/packages/sdk/sdk-client/package.json b/packages/sdk/sdk-client/package.json
index 27341f2040..3dbb236ab3 100644
--- a/packages/sdk/sdk-client/package.json
+++ b/packages/sdk/sdk-client/package.json
@@ -20,9 +20,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/sdk/sdk-protocol/package.json b/packages/sdk/sdk-protocol/package.json
index bc4591a669..fe7d057c11 100644
--- a/packages/sdk/sdk-protocol/package.json
+++ b/packages/sdk/sdk-protocol/package.json
@@ -20,9 +20,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/sdk/telemetry/package.json b/packages/sdk/telemetry/package.json
index aeb75c4b1f..6fe62e35fc 100644
--- a/packages/sdk/telemetry/package.json
+++ b/packages/sdk/telemetry/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/session-persistence/session-checkpoint-policy/package.json b/packages/session-persistence/session-checkpoint-policy/package.json
index 5d0fe5f465..afbc62345e 100644
--- a/packages/session-persistence/session-checkpoint-policy/package.json
+++ b/packages/session-persistence/session-checkpoint-policy/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/session-persistence/session-persistence-jsonl/package.json b/packages/session-persistence/session-persistence-jsonl/package.json
index 91c8e81fdf..b09211669b 100644
--- a/packages/session-persistence/session-persistence-jsonl/package.json
+++ b/packages/session-persistence/session-persistence-jsonl/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/session-persistence/session-persistence-sqlite/package.json b/packages/session-persistence/session-persistence-sqlite/package.json
index f65bdebd16..90415bd8cc 100644
--- a/packages/session-persistence/session-persistence-sqlite/package.json
+++ b/packages/session-persistence/session-persistence-sqlite/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/session-persistence/session-persistence/package.json b/packages/session-persistence/session-persistence/package.json
index ca74dd487d..d1977d4512 100644
--- a/packages/session-persistence/session-persistence/package.json
+++ b/packages/session-persistence/session-persistence/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/session-projection/session-projection-cache/package.json b/packages/session-projection/session-projection-cache/package.json
index d06a49def0..2be692665f 100644
--- a/packages/session-projection/session-projection-cache/package.json
+++ b/packages/session-projection/session-projection-cache/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/session-projection/session-projection/package.json b/packages/session-projection/session-projection/package.json
index 473b878f3f..37a081abfa 100644
--- a/packages/session-projection/session-projection/package.json
+++ b/packages/session-projection/session-projection/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/session-query/session-query-sqlite/package.json b/packages/session-query/session-query-sqlite/package.json
index 2d4758ba3e..4813b76b10 100644
--- a/packages/session-query/session-query-sqlite/package.json
+++ b/packages/session-query/session-query-sqlite/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/session-query/session-query/package.json b/packages/session-query/session-query/package.json
index daf4d4e680..3a52808f02 100644
--- a/packages/session-query/session-query/package.json
+++ b/packages/session-query/session-query/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/session-query/tool-session-query/package.json b/packages/session-query/tool-session-query/package.json
index 791a376cec..39b5ada943 100644
--- a/packages/session-query/tool-session-query/package.json
+++ b/packages/session-query/tool-session-query/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/session-title/session-title-all-messages-llm/package.json b/packages/session-title/session-title-all-messages-llm/package.json
index 06bdaaf8a0..546387c682 100644
--- a/packages/session-title/session-title-all-messages-llm/package.json
+++ b/packages/session-title/session-title-all-messages-llm/package.json
@@ -17,7 +17,7 @@
     },
     "./package.json": "./package.json"
   },
-  "files": ["lib/index.js", "lib/invariant.js", "lib/types/**/*.d.ts", "lib/types/**/*.d.ts.map", "src"],
+  "files": ["lib/index.js", "lib/invariant.js", "lib/types/**/*.d.ts"],
   "license": "BSD-3-Clause",
   "peerDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.0.1",
diff --git a/packages/session-title/session-title-first-message-llm/package.json b/packages/session-title/session-title-first-message-llm/package.json
index f2cecb77a9..50b4a4d14c 100644
--- a/packages/session-title/session-title-first-message-llm/package.json
+++ b/packages/session-title/session-title-first-message-llm/package.json
@@ -17,7 +17,7 @@
     },
     "./package.json": "./package.json"
   },
-  "files": ["lib/index.js", "lib/invariant.js", "lib/types/**/*.d.ts", "lib/types/**/*.d.ts.map", "src"],
+  "files": ["lib/index.js", "lib/invariant.js", "lib/types/**/*.d.ts"],
   "license": "BSD-3-Clause",
   "peerDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.0.1",
diff --git a/packages/session-title/session-title-llm/package.json b/packages/session-title/session-title-llm/package.json
index b74cb4440c..64e4519662 100644
--- a/packages/session-title/session-title-llm/package.json
+++ b/packages/session-title/session-title-llm/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/session-title/session-title/package.json b/packages/session-title/session-title/package.json
index 8d6126236d..d167b257b2 100644
--- a/packages/session-title/session-title/package.json
+++ b/packages/session-title/session-title/package.json
@@ -30,9 +30,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/settings/settings-local/package.json b/packages/settings/settings-local/package.json
index 0040b65507..6a9185ec2c 100644
--- a/packages/settings/settings-local/package.json
+++ b/packages/settings/settings-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/settings/settings/package.json b/packages/settings/settings/package.json
index 7586b4bb24..09112147ec 100644
--- a/packages/settings/settings/package.json
+++ b/packages/settings/settings/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/skill/skill-local/package.json b/packages/skill/skill-local/package.json
index 8331a94a97..25306774b9 100644
--- a/packages/skill/skill-local/package.json
+++ b/packages/skill/skill-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/skill/skill/package.json b/packages/skill/skill/package.json
index 3148a3f577..73469b89a7 100644
--- a/packages/skill/skill/package.json
+++ b/packages/skill/skill/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/skill/tool-skill/package.json b/packages/skill/tool-skill/package.json
index 9d86da58dd..e3ff7520b5 100644
--- a/packages/skill/tool-skill/package.json
+++ b/packages/skill/tool-skill/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/spill/spill-local/package.json b/packages/spill/spill-local/package.json
index 25a20db1d5..f185ab2c11 100644
--- a/packages/spill/spill-local/package.json
+++ b/packages/spill/spill-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/spill/spill-policy/package.json b/packages/spill/spill-policy/package.json
index e8e9fb4631..f238acd3d6 100644
--- a/packages/spill/spill-policy/package.json
+++ b/packages/spill/spill-policy/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/spill/spill/package.json b/packages/spill/spill/package.json
index c66306ff0a..6a87d575a3 100644
--- a/packages/spill/spill/package.json
+++ b/packages/spill/spill/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/storage/storage-domain/package.json b/packages/storage/storage-domain/package.json
index 1dffd143a9..aaa277b244 100644
--- a/packages/storage/storage-domain/package.json
+++ b/packages/storage/storage-domain/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/storage/storage-json/package.json b/packages/storage/storage-json/package.json
index bcc20b6ba1..4dc9bec40b 100644
--- a/packages/storage/storage-json/package.json
+++ b/packages/storage/storage-json/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/storage/storage-sqlite/package.json b/packages/storage/storage-sqlite/package.json
index dc792fe350..cebde3d279 100644
--- a/packages/storage/storage-sqlite/package.json
+++ b/packages/storage/storage-sqlite/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/storage/storage/package.json b/packages/storage/storage/package.json
index 600eb997ee..1c78c1d434 100644
--- a/packages/storage/storage/package.json
+++ b/packages/storage/storage/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/subagent/subagent-acp/package.json b/packages/subagent/subagent-acp/package.json
index b06a5e50ea..382d2e219a 100644
--- a/packages/subagent/subagent-acp/package.json
+++ b/packages/subagent/subagent-acp/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/subagent/subagent-dsh-sdk/package.json b/packages/subagent/subagent-dsh-sdk/package.json
index 52df9c033c..07217be7c1 100644
--- a/packages/subagent/subagent-dsh-sdk/package.json
+++ b/packages/subagent/subagent-dsh-sdk/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/subagent/subagent-fork/package.json b/packages/subagent/subagent-fork/package.json
index aa93b83e03..1a77983d56 100644
--- a/packages/subagent/subagent-fork/package.json
+++ b/packages/subagent/subagent-fork/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/subagent/subagent-inprocess/package.json b/packages/subagent/subagent-inprocess/package.json
index 893fd4e342..e18752db74 100644
--- a/packages/subagent/subagent-inprocess/package.json
+++ b/packages/subagent/subagent-inprocess/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/subagent/subagent-spawn/package.json b/packages/subagent/subagent-spawn/package.json
index 647e0b005c..243e7afb52 100644
--- a/packages/subagent/subagent-spawn/package.json
+++ b/packages/subagent/subagent-spawn/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/subagent/subagent/package.json b/packages/subagent/subagent/package.json
index 8cd78c5526..c00caf7fb9 100644
--- a/packages/subagent/subagent/package.json
+++ b/packages/subagent/subagent/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/subagent/tool-subagent-control/package.json b/packages/subagent/tool-subagent-control/package.json
index 087928dbd8..f0d57c52aa 100644
--- a/packages/subagent/tool-subagent-control/package.json
+++ b/packages/subagent/tool-subagent-control/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/subagent/tool-subagent-report/package.json b/packages/subagent/tool-subagent-report/package.json
index 5b6d3c21d6..12e39c341c 100644
--- a/packages/subagent/tool-subagent-report/package.json
+++ b/packages/subagent/tool-subagent-report/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/subagent/tool-subagent/package.json b/packages/subagent/tool-subagent/package.json
index 353f67ff24..f7d4c4e84e 100644
--- a/packages/subagent/tool-subagent/package.json
+++ b/packages/subagent/tool-subagent/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/subprocess/subprocess-local/package.json b/packages/subprocess/subprocess-local/package.json
index 72ff50c422..2aa69b82e1 100644
--- a/packages/subprocess/subprocess-local/package.json
+++ b/packages/subprocess/subprocess-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/subprocess/subprocess/package.json b/packages/subprocess/subprocess/package.json
index 6771c19651..b7aa6308ad 100644
--- a/packages/subprocess/subprocess/package.json
+++ b/packages/subprocess/subprocess/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/support/acp-snapshot/package.json b/packages/support/acp-snapshot/package.json
index e5e715238a..c231591103 100644
--- a/packages/support/acp-snapshot/package.json
+++ b/packages/support/acp-snapshot/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/support/agent-loop-testkit/package.json b/packages/support/agent-loop-testkit/package.json
index aa04d85832..d6419f38dd 100644
--- a/packages/support/agent-loop-testkit/package.json
+++ b/packages/support/agent-loop-testkit/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/support/invariants/package.json b/packages/support/invariants/package.json
index d52dd0a14d..f41c6bfde6 100644
--- a/packages/support/invariants/package.json
+++ b/packages/support/invariants/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/support/llm-mock-server/package.json b/packages/support/llm-mock-server/package.json
index 4b14cb6d0b..20b1cf6d85 100644
--- a/packages/support/llm-mock-server/package.json
+++ b/packages/support/llm-mock-server/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/support/llm-replay/package.json b/packages/support/llm-replay/package.json
index 4a7e7dd8d8..708e84b57a 100644
--- a/packages/support/llm-replay/package.json
+++ b/packages/support/llm-replay/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/support/loader-smoke/package.json b/packages/support/loader-smoke/package.json
index ebdd62373a..1eeabb950d 100644
--- a/packages/support/loader-smoke/package.json
+++ b/packages/support/loader-smoke/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/tasks/tasks-local/package.json b/packages/tasks/tasks-local/package.json
index cdcc823826..446b5825d3 100644
--- a/packages/tasks/tasks-local/package.json
+++ b/packages/tasks/tasks-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/tasks/tasks/package.json b/packages/tasks/tasks/package.json
index 9bc02879cf..eea8e2af6b 100644
--- a/packages/tasks/tasks/package.json
+++ b/packages/tasks/tasks/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/tasks/tool-tasks/package.json b/packages/tasks/tool-tasks/package.json
index c63e49ddc9..dfffbf4855 100644
--- a/packages/tasks/tool-tasks/package.json
+++ b/packages/tasks/tool-tasks/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/telemetry/session-telemetry-otel/package.json b/packages/telemetry/session-telemetry-otel/package.json
index 49e9ef6cad..45de52bf3c 100644
--- a/packages/telemetry/session-telemetry-otel/package.json
+++ b/packages/telemetry/session-telemetry-otel/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/telemetry/session-telemetry/package.json b/packages/telemetry/session-telemetry/package.json
index 71646c130e..ff6e31b025 100644
--- a/packages/telemetry/session-telemetry/package.json
+++ b/packages/telemetry/session-telemetry/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/timeout/timeout-policy/package.json b/packages/timeout/timeout-policy/package.json
index 43dc9dfa28..b77bd23716 100644
--- a/packages/timeout/timeout-policy/package.json
+++ b/packages/timeout/timeout-policy/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/todo/tool-todo/package.json b/packages/todo/tool-todo/package.json
index 85bd18ea8b..0fa3eb0c4f 100644
--- a/packages/todo/tool-todo/package.json
+++ b/packages/todo/tool-todo/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/typert/generator/package.json b/packages/typert/generator/package.json
index 90fb32e5af..3e9d8f7f61 100644
--- a/packages/typert/generator/package.json
+++ b/packages/typert/generator/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/typert/loader/package.json b/packages/typert/loader/package.json
index 5826b96b5a..ca6db771e3 100644
--- a/packages/typert/loader/package.json
+++ b/packages/typert/loader/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/typert/registry/package.json b/packages/typert/registry/package.json
index 986ac55a37..b543589dc6 100644
--- a/packages/typert/registry/package.json
+++ b/packages/typert/registry/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/ui/app-boot/package.json b/packages/ui/app-boot/package.json
index 18a42a27a1..c1214953a5 100644
--- a/packages/ui/app-boot/package.json
+++ b/packages/ui/app-boot/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/ui/commands/package.json b/packages/ui/commands/package.json
index e22dee8f3b..7d35603a79 100644
--- a/packages/ui/commands/package.json
+++ b/packages/ui/commands/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/ui/jsonrpc/package.json b/packages/ui/jsonrpc/package.json
index ff51571ace..573f724ae0 100644
--- a/packages/ui/jsonrpc/package.json
+++ b/packages/ui/jsonrpc/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "dependencies": {
diff --git a/packages/ui/permission/package.json b/packages/ui/permission/package.json
index c3554e3c4d..0ae48d6e2f 100644
--- a/packages/ui/permission/package.json
+++ b/packages/ui/permission/package.json
@@ -30,9 +30,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/ui/tool-ask-user/package.json b/packages/ui/tool-ask-user/package.json
index d2523ce220..7418c7ba2c 100644
--- a/packages/ui/tool-ask-user/package.json
+++ b/packages/ui/tool-ask-user/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/ui/user-approval/package.json b/packages/ui/user-approval/package.json
index 0cc005cfa1..5b5c43cb42 100644
--- a/packages/ui/user-approval/package.json
+++ b/packages/ui/user-approval/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/ui/user-interaction/package.json b/packages/ui/user-interaction/package.json
index 07522d1d1a..5bed79e075 100644
--- a/packages/ui/user-interaction/package.json
+++ b/packages/ui/user-interaction/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/util/atomic-write/package.json b/packages/util/atomic-write/package.json
index 147ecb1e05..00de333170 100644
--- a/packages/util/atomic-write/package.json
+++ b/packages/util/atomic-write/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/util/brand/package.json b/packages/util/brand/package.json
index 51ce4d795d..83676d1d5c 100644
--- a/packages/util/brand/package.json
+++ b/packages/util/brand/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/util/native-command/package.json b/packages/util/native-command/package.json
index a20e61c33d..d282a128f7 100644
--- a/packages/util/native-command/package.json
+++ b/packages/util/native-command/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/util/paths/package.json b/packages/util/paths/package.json
index 601a2941b2..cece1ce79e 100644
--- a/packages/util/paths/package.json
+++ b/packages/util/paths/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/util/retention/package.json b/packages/util/retention/package.json
index 312bebd624..80af828263 100644
--- a/packages/util/retention/package.json
+++ b/packages/util/retention/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/util/timeout/package.json b/packages/util/timeout/package.json
index 615d21759e..853cee4d79 100644
--- a/packages/util/timeout/package.json
+++ b/packages/util/timeout/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/web/tool-web/package.json b/packages/web/tool-web/package.json
index 9e1a54b6cd..d5d655b2dd 100644
--- a/packages/web/tool-web/package.json
+++ b/packages/web/tool-web/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/web/web-fetch-local/package.json b/packages/web/web-fetch-local/package.json
index 5c42bfa09c..e6dc5791d9 100644
--- a/packages/web/web-fetch-local/package.json
+++ b/packages/web/web-fetch-local/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/web/web-search-deepseek/package.json b/packages/web/web-search-deepseek/package.json
index e1dbf720f6..546ca2ec87 100644
--- a/packages/web/web-search-deepseek/package.json
+++ b/packages/web/web-search-deepseek/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/web/web-search-exa/package.json b/packages/web/web-search-exa/package.json
index 7d6b802d2e..7bffc94331 100644
--- a/packages/web/web-search-exa/package.json
+++ b/packages/web/web-search-exa/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/web/web-search-perplexity/package.json b/packages/web/web-search-perplexity/package.json
index 9aa7080431..a6f6a6bea6 100644
--- a/packages/web/web-search-perplexity/package.json
+++ b/packages/web/web-search-perplexity/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/web/web/package.json b/packages/web/web/package.json
index 7b732ec819..4ea964ee93 100644
--- a/packages/web/web/package.json
+++ b/packages/web/web/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/workflow/tool-ralph/package.json b/packages/workflow/tool-ralph/package.json
index fb12147445..83bf0d057c 100644
--- a/packages/workflow/tool-ralph/package.json
+++ b/packages/workflow/tool-ralph/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/workflow/tool-workflow/package.json b/packages/workflow/tool-workflow/package.json
index dd055ad9ec..705e4f6e08 100644
--- a/packages/workflow/tool-workflow/package.json
+++ b/packages/workflow/tool-workflow/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/workflow/workflow-workerthread/package.json b/packages/workflow/workflow-workerthread/package.json
index a915229449..e019bcaa51 100644
--- a/packages/workflow/workflow-workerthread/package.json
+++ b/packages/workflow/workflow-workerthread/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/worker.cjs",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/workflow/workflow/package.json b/packages/workflow/workflow/package.json
index b8ce1ebc7f..53ef7e6f6e 100644
--- a/packages/workflow/workflow/package.json
+++ b/packages/workflow/workflow/package.json
@@ -21,9 +21,7 @@
   "files": [
     "lib/index.js",
     "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/packages/workspace/workspace/package.json b/packages/workspace/workspace/package.json
index 8ef0c34382..7839b29702 100644
--- a/packages/workspace/workspace/package.json
+++ b/packages/workspace/workspace/package.json
@@ -26,9 +26,7 @@
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/**/*.d.ts.map",
-    "src"
+    "lib/types/**/*.d.ts"
   ],
   "license": "BSD-3-Clause",
   "peerDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7d0ca4ff78..c5a0ab9023 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -488,6 +488,9 @@ importers:
       js-yaml:
         specifier: ^4.2.0
         version: 4.2.0
+      node-addon-require-builtin:
+        specifier: ^0.1.4
+        version: 0.1.4
     devDependencies:
       '@types/js-yaml':
         specifier: ^4.0.9
@@ -4304,8 +4307,8 @@ importers:
         specifier: ^15.0.0
         version: 15.0.0
       node-addon-require-builtin:
-        specifier: ^0.1.3
-        version: 0.1.3
+        specifier: ^0.1.4
+        version: 0.1.4
     devDependencies:
       '@deepseek-ai/dsh-app-boot':
         specifier: workspace:^
@@ -6761,8 +6764,8 @@ importers:
         specifier: ^1.8.1
         version: link:../cosmokit
       node-addon-require-builtin:
-        specifier: ^0.1.3
-        version: 0.1.3
+        specifier: ^0.1.4
+        version: 0.1.4
       pnpm:
         specifier: 11.7.0
         version: 11.7.0
@@ -10982,56 +10985,56 @@ packages:
     resolution: {integrity: sha512-c5qopltRonjW6+VinXYMp4FVi9Sxf8eQEb/9G82EksQQ+JC4CDprv+ko5URWmtyZ3wD4GFdeRTyw1AG5yCwJhQ==}
     engines: {node: '>=20'}
 
-  node-addon-native-custom-loader@0.1.3:
-    resolution: {integrity: sha512-uMG8D3aOtEMgh7dkNWAJP0fSpmpMwUf6Cj5JePQQqtxt72sW7RDzRetaLjKIKl3+DZtBX2FobAgRS6U3LO2qXQ==}
+  node-addon-native-custom-loader@0.1.4:
+    resolution: {integrity: sha512-DreegO6EoC1JHWYBv3j8Miwp2Zl/CyBeNyoeyCbnEdjyYFEulR4Gcb3wj9fXF7KMDY0ZJ5MWwHcXP8GVNyScnA==}
     engines: {node: '>=20'}
 
-  node-addon-require-builtin-darwin-arm64@0.1.3:
-    resolution: {integrity: sha512-uBZIRpq3gVG/lg4SV1w8xNfgoaAWZiv7B8Gn38/wd0uUE0LSTRikY69al3Yb4gMDmJPWBoXPN3gzTxAjhllzGg==}
+  node-addon-require-builtin-darwin-arm64@0.1.4:
+    resolution: {integrity: sha512-pqiTPbqlDKRIo8YKoWMjuFge4kyHbsdYkAcGW5MAVcJSCyU0M1hhpiLdWlvX753XKL3xlGeuPmv2NqTNRV0/hw==}
     engines: {node: '>=20'}
     cpu: [arm64]
     os: [darwin]
 
-  node-addon-require-builtin-darwin-x64@0.1.3:
-    resolution: {integrity: sha512-BLaBoaBjI7mpsgTpXvn444vCQSmrb1AC2t0tAHFuxwBtN56UT9Zaxl+gS2KZGrq5fShTPxFAUIiTcwroFXWWhg==}
+  node-addon-require-builtin-darwin-x64@0.1.4:
+    resolution: {integrity: sha512-i9oThh+w6d+H79YQuc3d3MZCx4YZ6aMWlQ0HYMgOTWvSRzppXmksa/xPV8O20G1gjpq5do/9/hgImixj3XIcjQ==}
     engines: {node: '>=20'}
     cpu: [x64]
     os: [darwin]
 
-  node-addon-require-builtin-linux-arm64-gnu@0.1.3:
-    resolution: {integrity: sha512-L+qNUfBarYxE0HSZjf2KGymS6ZKMieLs5esRXbAbO+q1k4L1t9oBNGpQuFe7/a1a98YrfHnkAg9Q6US5j/xnIw==}
+  node-addon-require-builtin-linux-arm64-gnu@0.1.4:
+    resolution: {integrity: sha512-qbmYtkiIFp7h1ZvYYHH0MGFQbc03OyvplkeS90j+t3VMomkRc/YwZ140WzVM3eYJYZ7XHq+s1GL5ZdFQFPUXBQ==}
     engines: {node: '>=20'}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  node-addon-require-builtin-linux-x64-gnu@0.1.3:
-    resolution: {integrity: sha512-Cy2ua4yy44GE5HAtf/o4LjzTa5aUJt5m0YLMjZCa8lRte5hU+C7aWm6bVkmKY82b1JnnQnHwUMEoFugLqVybSQ==}
+  node-addon-require-builtin-linux-x64-gnu@0.1.4:
+    resolution: {integrity: sha512-4jC617+yOrYYuKgNmN2KMD722G6BICpjEzAcmzA3j5tt+zmey5M/c/z9JxqdjnNmU9CQWseBaJu/fGdbHZXSOg==}
     engines: {node: '>=20'}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  node-addon-require-builtin-win32-arm64-msvc@0.1.3:
-    resolution: {integrity: sha512-8j/VcAmgT6HPQzwUo1kBNzLE2d5iVmwfraEre5KAoznuBeOiuU12oqDYpkuHGIzSjSDJiVOj/SqOe5mUMRaZOg==}
+  node-addon-require-builtin-win32-arm64-msvc@0.1.4:
+    resolution: {integrity: sha512-4TW96aPR108R3RxJbUNLXU6FLTZ7n8fWtSpPbPtvYWXa9cXojvCMdH4BvrHM6W2M+Iu42nqMxRyylP3PeTjOmA==}
     engines: {node: '>=20'}
     cpu: [arm64]
     os: [win32]
 
-  node-addon-require-builtin-win32-ia32-msvc@0.1.3:
-    resolution: {integrity: sha512-Iqh+Wxmbu6SaP2lEJpEpIMkusVZeVljn914CIcz7HZtzvxTgxHZAmfsZuRMDtRhDg2Yf4AFBHLWpcJn7SeBQ/A==}
+  node-addon-require-builtin-win32-ia32-msvc@0.1.4:
+    resolution: {integrity: sha512-a3ZRkiMKaE7uRjI+H+Ic7dvhPIk0rW9mHV47IEiqJzoRZqnDp5JPjQfAnngu979HR59Ghy+mfexJ/kStBlP3eQ==}
     engines: {node: '>=20 <23'}
     cpu: [ia32]
     os: [win32]
 
-  node-addon-require-builtin-win32-x64-msvc@0.1.3:
-    resolution: {integrity: sha512-5iI7C/BwwRemDNKXO2b1J/iK1gTRp1278Cwfoy92zgn7KXhv7xsAP8klk/fDu8RWX/o9zk736tRSFTBBGSHf/Q==}
+  node-addon-require-builtin-win32-x64-msvc@0.1.4:
+    resolution: {integrity: sha512-EGx7AcJKB7fNxo/YHV32JTUg1Hetbdnh6uPaqPhklhyRSMM13/7hZK1pTACqMS9dwnR3Lakxl9HKG9/eAoIyyg==}
     engines: {node: '>=20'}
     cpu: [x64]
     os: [win32]
 
-  node-addon-require-builtin@0.1.3:
-    resolution: {integrity: sha512-u9ZRdwDCx+ksIcYwoLeoe5Rj3151GrzSF8ln9jp7P/Zhf0OrPs1X6a8wYw6brc532ypAwjwKlhruT/V3m8MCbg==}
+  node-addon-require-builtin@0.1.4:
+    resolution: {integrity: sha512-yuXz43GmtQyMrO75u2Z8KZAafMhnMH8RTOZBJWGDU9HoD2QxT6q4PF28iLNm/OS9BkS8MHwCKpgTk3d6qW584A==}
     engines: {node: '>=20'}
 
   node-domexception@1.0.0:
@@ -16434,54 +16437,54 @@ snapshots:
       node-addon-landlock-run-linux-arm64: 0.0.0-test.0
       node-addon-landlock-run-linux-x64: 0.0.0-test.0
 
-  node-addon-native-custom-loader@0.1.3: {}
+  node-addon-native-custom-loader@0.1.4: {}
 
-  node-addon-require-builtin-darwin-arm64@0.1.3:
+  node-addon-require-builtin-darwin-arm64@0.1.4:
     dependencies:
-      node-addon-native-custom-loader: 0.1.3
+      node-addon-native-custom-loader: 0.1.4
     optional: true
 
-  node-addon-require-builtin-darwin-x64@0.1.3:
+  node-addon-require-builtin-darwin-x64@0.1.4:
     dependencies:
-      node-addon-native-custom-loader: 0.1.3
+      node-addon-native-custom-loader: 0.1.4
     optional: true
 
-  node-addon-require-builtin-linux-arm64-gnu@0.1.3:
+  node-addon-require-builtin-linux-arm64-gnu@0.1.4:
     dependencies:
-      node-addon-native-custom-loader: 0.1.3
+      node-addon-native-custom-loader: 0.1.4
     optional: true
 
-  node-addon-require-builtin-linux-x64-gnu@0.1.3:
+  node-addon-require-builtin-linux-x64-gnu@0.1.4:
     dependencies:
-      node-addon-native-custom-loader: 0.1.3
+      node-addon-native-custom-loader: 0.1.4
     optional: true
 
-  node-addon-require-builtin-win32-arm64-msvc@0.1.3:
+  node-addon-require-builtin-win32-arm64-msvc@0.1.4:
     dependencies:
-      node-addon-native-custom-loader: 0.1.3
+      node-addon-native-custom-loader: 0.1.4
     optional: true
 
-  node-addon-require-builtin-win32-ia32-msvc@0.1.3:
+  node-addon-require-builtin-win32-ia32-msvc@0.1.4:
     dependencies:
-      node-addon-native-custom-loader: 0.1.3
+      node-addon-native-custom-loader: 0.1.4
     optional: true
 
-  node-addon-require-builtin-win32-x64-msvc@0.1.3:
+  node-addon-require-builtin-win32-x64-msvc@0.1.4:
     dependencies:
-      node-addon-native-custom-loader: 0.1.3
+      node-addon-native-custom-loader: 0.1.4
     optional: true
 
-  node-addon-require-builtin@0.1.3:
+  node-addon-require-builtin@0.1.4:
     dependencies:
-      node-addon-native-custom-loader: 0.1.3
+      node-addon-native-custom-loader: 0.1.4
     optionalDependencies:
-      node-addon-require-builtin-darwin-arm64: 0.1.3
-      node-addon-require-builtin-darwin-x64: 0.1.3
-      node-addon-require-builtin-linux-arm64-gnu: 0.1.3
-      node-addon-require-builtin-linux-x64-gnu: 0.1.3
-      node-addon-require-builtin-win32-arm64-msvc: 0.1.3
-      node-addon-require-builtin-win32-ia32-msvc: 0.1.3
-      node-addon-require-builtin-win32-x64-msvc: 0.1.3
+      node-addon-require-builtin-darwin-arm64: 0.1.4
+      node-addon-require-builtin-darwin-x64: 0.1.4
+      node-addon-require-builtin-linux-arm64-gnu: 0.1.4
+      node-addon-require-builtin-linux-x64-gnu: 0.1.4
+      node-addon-require-builtin-win32-arm64-msvc: 0.1.4
+      node-addon-require-builtin-win32-ia32-msvc: 0.1.4
+      node-addon-require-builtin-win32-x64-msvc: 0.1.4
 
   node-domexception@1.0.0: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index df156af96a..fec185b114 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -61,6 +61,15 @@ minimumReleaseAgeExclude:
   # Fresh pi-ai releases carry the model catalog updates that are the whole
   # point of bumping it; waiting out the release age would defeat that.
   - '@earendil-works/pi-ai@0.82.1'
+  - node-addon-native-custom-loader@0.1.4
+  - node-addon-require-builtin-darwin-arm64@0.1.4
+  - node-addon-require-builtin-darwin-x64@0.1.4
+  - node-addon-require-builtin-linux-arm64-gnu@0.1.4
+  - node-addon-require-builtin-linux-x64-gnu@0.1.4
+  - node-addon-require-builtin-win32-arm64-msvc@0.1.4
+  - node-addon-require-builtin-win32-ia32-msvc@0.1.4
+  - node-addon-require-builtin-win32-x64-msvc@0.1.4
+  - node-addon-require-builtin@0.1.4
 
 patchedDependencies:
   node-pty@1.1.0: patches/node-pty@1.1.0.patch
diff --git a/scripts/check-workspace-constraints.ts b/scripts/check-workspace-constraints.ts
index 0a664ca988..6bd613c2ea 100644
--- a/scripts/check-workspace-constraints.ts
+++ b/scripts/check-workspace-constraints.ts
@@ -7,6 +7,7 @@
 
 import { existsSync, readdirSync, readFileSync } from 'node:fs'
 import { join, relative, resolve } from 'node:path'
+import { isForbiddenPublicationFile } from './publication-payload.ts'
 
 const root = resolve(import.meta.dirname, '..')
 // vendor/* is single-level; packages/<group>/<pkg> nests one level deeper
@@ -14,6 +15,7 @@ const root = resolve(import.meta.dirname, '..')
 const workspaceGlobs = [
   { dir: 'vendor', depth: 1 },
   { dir: 'packages', depth: 2 },
+  { dir: 'apps', depth: 1 },
 ] as const
 const vendoredPackages = new Set([
   'cordis',
@@ -28,6 +30,10 @@ const vendoredPackages = new Set([
 ])
 
 const localArtifactDirs = new Set(['node_modules'])
+const appPackageFiles: Readonly<Record<string, readonly string[]>> = {
+  '@deepseek-ai/dsh': ['lib/*.js', 'config'],
+  '@deepseek-ai/dsh-frontend': ['dist'],
+}
 
 /** The subset of package.json fields this constraint check cares about. */
 interface PackageManifest {
@@ -96,7 +102,9 @@ function workspaceManifests(): WorkspaceManifest[] {
 }
 
 const packageFileExtras: Readonly<Record<string, readonly string[]>> = {
+  '@deepseek-ai/dsh-client-ui-theme': ['lib/styles'],
   '@deepseek-ai/dsh-helper': ['lib/assets'],
+  '@deepseek-ai/dsh-pty-local': ['scripts/ensure-spawn-helper.mjs'],
   '@deepseek-ai/dsh-scripts': [
     'lib/dev/tsdown-config.js',
     'lib/local-plugin-loader-hooks.js',
@@ -133,8 +141,6 @@ function expectedDshPackageFiles(manifest: PackageManifest): readonly string[] {
     // declarations.
     ...usesEmittedTreeDefaults(manifest) ? ['lib/types/**/*.js'] : [],
     'lib/types/**/*.d.ts',
-    'lib/types/**/*.d.ts.map',
-    'src',
   ]
 }
 
@@ -164,7 +170,24 @@ function checkWorkspace({ dir, manifest }: WorkspaceManifest): string[] {
     return errors
   }
 
-  if (manifest.name?.startsWith('@deepseek-ai/dsh-') && manifest.name !== '@deepseek-ai/dsh-root') {
+  if (manifest.name?.startsWith('@deepseek-ai/')) {
+    for (const file of manifest.files ?? []) {
+      if (isForbiddenPublicationFile(file)) {
+        errors.push(`${label}: package.json files must not publish ${JSON.stringify(file)}`)
+      }
+    }
+  }
+
+  if (dir.startsWith('apps/') && manifest.name?.startsWith('@deepseek-ai/')) {
+    const expectedFiles = appPackageFiles[manifest.name]
+    if (expectedFiles === undefined) {
+      errors.push(`${label}: app package has no publication files policy`)
+    } else if (!sameStringList(manifest.files, expectedFiles)) {
+      errors.push(`${label}: package.json files must be ${JSON.stringify(expectedFiles)}`)
+    }
+  }
+
+  if (dir.startsWith('packages/') && manifest.name?.startsWith('@deepseek-ai/dsh-')) {
     const peer = manifest.peerDependencies?.cordis
     const dev = manifest.devDependencies?.cordis
 
diff --git a/scripts/package-invariants.spec.ts b/scripts/package-invariants.spec.ts
index 787202c9d1..32705c4c87 100644
--- a/scripts/package-invariants.spec.ts
+++ b/scripts/package-invariants.spec.ts
@@ -47,7 +47,7 @@ function fixture(options: {
         default: './lib/invariant.js',
       },
     },
-    files: ['lib/index.js', 'lib/invariant.js', 'src'],
+    files: ['lib/index.js', 'lib/invariant.js'],
     peerDependencies: options.invariantDependency === false ? {} : {
       '@deepseek-ai/dsh-invariants': '^0.0.1',
     },
diff --git a/scripts/publication-payload.spec.ts b/scripts/publication-payload.spec.ts
new file mode 100644
index 0000000000..0f403bee7c
--- /dev/null
+++ b/scripts/publication-payload.spec.ts
@@ -0,0 +1,54 @@
+import { describe, expect, it } from 'vitest'
+import { isForbiddenPublicationFile, validateTarballPayload } from './publication-payload.ts'
+
+function validateFixtureTarball(files: readonly string[]): () => void {
+  return () => {
+    validateTarballPayload(files, 'fixture.tgz')
+  }
+}
+
+describe('publication payload policy', () => {
+  it.each([
+    'lib/index.js',
+    'lib/types/index.d.ts',
+    'lib/styles/base.css',
+  ])('accepts %s', (file) => {
+    expect(isForbiddenPublicationFile(file)).toBe(false)
+  })
+
+  it.each([
+    'src',
+    './src',
+    'src/',
+    'src/index.ts',
+    './src/index.ts',
+    String.raw`src\index.ts`,
+    'lib/types/index.d.ts.map',
+    './lib/types/index.d.ts.map',
+  ])('rejects static manifest path %s', (file) => {
+    expect(isForbiddenPublicationFile(file)).toBe(true)
+  })
+
+  it('rejects source members in packed tarballs', () => {
+    expect(validateFixtureTarball([
+      'package/package.json',
+      'package/src/index.ts',
+    ])).toThrow('fixture.tgz publishes source file package/src/index.ts')
+  })
+
+  it('rejects declaration maps in packed tarballs', () => {
+    expect(validateFixtureTarball([
+      'package/package.json',
+      'package/lib/types/index.d.ts.map',
+    ])).toThrow('fixture.tgz publishes declaration map package/lib/types/index.d.ts.map')
+  })
+
+  it('accepts a clean packed tarball', () => {
+    expect(validateFixtureTarball([
+      'package/package.json',
+      'package/lib/index.js',
+      'package/lib/types/index.d.ts',
+      'package/lib/styles/base.css',
+    ])).not.toThrow()
+  })
+})
diff --git a/scripts/publication-payload.ts b/scripts/publication-payload.ts
new file mode 100644
index 0000000000..9c16067fe7
--- /dev/null
+++ b/scripts/publication-payload.ts
@@ -0,0 +1,27 @@
+/** Publication payload policy shared by static manifests and packed tarballs. */
+
+/** Normalize a package manifest path or npm tarball member to its payload-relative path. */
+function payloadPath(file: string): string {
+  const normalized = file.replaceAll('\\', '/').replace(/^\.\/+/, '').replace(/\/+$/, '')
+  return normalized.startsWith('package/') ? normalized.slice('package/'.length) : normalized
+}
+
+/** Whether a package payload path exposes source or declaration-map intermediates. */
+export function isForbiddenPublicationFile(file: string): boolean {
+  const normalized = payloadPath(file)
+  return normalized === 'src'
+    || normalized.startsWith('src/')
+    || normalized.endsWith('.d.ts.map')
+}
+
+/** Reject source and declaration-map members in a packed npm tarball. */
+export function validateTarballPayload(files: readonly string[], context: string): void {
+  for (const file of files) {
+    if (!isForbiddenPublicationFile(file)) continue
+    const normalized = payloadPath(file)
+    if (normalized === 'src' || normalized.startsWith('src/')) {
+      throw new Error(`${context} publishes source file ${file}`)
+    }
+    throw new Error(`${context} publishes declaration map ${file}`)
+  }
+}
diff --git a/scripts/publish-npm-baseline.ts b/scripts/publish-npm-baseline.ts
new file mode 100644
index 0000000000..92df711f3e
--- /dev/null
+++ b/scripts/publish-npm-baseline.ts
@@ -0,0 +1,1084 @@
+/** Build, publish, and verify one commit-addressed npm workspace baseline. */
+
+import { spawnSync, type SpawnSyncReturns } from 'node:child_process'
+import { createHash } from 'node:crypto'
+import {
+  existsSync,
+  globSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  realpathSync,
+  readdirSync,
+  rmSync,
+  writeFileSync,
+} from 'node:fs'
+import { tmpdir } from 'node:os'
+import { basename, dirname, isAbsolute, join, normalize, relative, resolve, sep } from 'node:path'
+import { createInterface } from 'node:readline/promises'
+import { pathToFileURL } from 'node:url'
+import { parseArgs } from 'node:util'
+import { validateTarballPayload } from './publication-payload.ts'
+
+const DEFAULT_REGISTRY = 'https://registry.npm.harnessment.com'
+const DEFAULT_OUTPUT_DIRECTORY = '.artifacts/npm-baseline'
+const PACKAGE_PATTERNS = [
+  'vendor/*/package.json',
+  'packages/*/*/package.json',
+  'apps/*/package.json',
+] as const
+const DEPENDENCY_SECTIONS = [
+  'dependencies',
+  'devDependencies',
+  'optionalDependencies',
+  'peerDependencies',
+] as const
+const RELEASE_MANIFEST_NAME = 'manifest.json'
+const RELEASE_ENTRY_PACKAGE = '@deepseek-ai/dsh'
+const LATEST_DIST_TAG = 'latest'
+const POSIX_WEB_PROBE = String.raw`
+import errno, os, pty, select, signal, sys, time
+node, bin_path, cwd, timeout_seconds = sys.argv[1:]
+pid, fd = pty.fork()
+if pid == 0:
+    os.chdir(cwd)
+    os.execvpe(node, [node, bin_path, "web", "--host", "127.0.0.1", "--port", "0"], os.environ.copy())
+
+output = bytearray()
+ready_seen = False
+termination_sent = False
+deadline = time.monotonic() + float(timeout_seconds)
+status = None
+while time.monotonic() < deadline:
+    ready, _, _ = select.select([fd], [], [], 0.05)
+    if ready:
+        try:
+            chunk = os.read(fd, 65536)
+        except OSError as error:
+            if error.errno != errno.EIO:
+                raise
+            chunk = b""
+        if chunk:
+            output.extend(chunk)
+
+    snapshot = bytes(output)
+    if not termination_sent and b"dsh web: http://127.0.0.1:" in snapshot:
+        ready_seen = True
+        os.kill(pid, signal.SIGTERM)
+        termination_sent = True
+
+    waited, candidate = os.waitpid(pid, os.WNOHANG)
+    if waited == pid:
+        status = candidate
+        break
+
+if status is None:
+    os.kill(pid, signal.SIGKILL)
+    _, status = os.waitpid(pid, 0)
+sys.stdout.buffer.write(output)
+if not ready_seen:
+    sys.stderr.write("installed dsh web did not reach its ready URL\n")
+    sys.exit(124)
+actual_exit = os.waitstatus_to_exitcode(status)
+if actual_exit != 0:
+    sys.stderr.write(f"installed dsh web exited {actual_exit}, expected 0\n")
+    sys.exit(125)
+`
+
+interface CommandResult {
+  status: number
+  stdout: string
+  stderr: string
+}
+
+interface PackageTarget {
+  name: string
+  directory: string
+  origin: PackageOrigin
+}
+
+type PackageOrigin = 'harness' | 'vendor'
+
+interface PackedPackage {
+  name: string
+  tarball: string
+  sha256: string
+  integrity: string
+  origin: PackageOrigin
+}
+
+interface ReleaseManifest {
+  schemaVersion: 1
+  commit: string
+  version: string
+  distTag: string
+  registry: string
+  packages: PackedPackage[]
+}
+
+interface PackOptions {
+  ref: string
+  registry: string
+  outputDirectory: string
+}
+
+/** Fixes the identity of one pack attempt before any expensive work begins. */
+class BaselinePackPlan {
+  constructor(
+    readonly commit: string,
+    readonly shortCommit: string,
+    readonly timestamp: string,
+    readonly baseVersion: string,
+    readonly version: string,
+    readonly distTag: string,
+    readonly registry: string,
+    readonly artifactDirectory: string,
+  ) {}
+
+  async confirm(assumeYes: boolean): Promise<void> {
+    console.log('publish-npm-baseline: planned pack')
+    console.log(`  commit:    ${this.commit}`)
+    console.log(`  timestamp: ${this.timestamp} UTC`)
+    console.log(`  version:   ${this.version}`)
+    console.log(`  dist-tag:  ${this.distTag}`)
+    console.log(`  registry:  ${this.registry}`)
+    console.log(`  output:    ${this.artifactDirectory}`)
+    if (assumeYes) return
+    await confirmEnter(
+      'Press Enter to start packing or type anything to cancel: ',
+      'pack requires an interactive terminal or --yes',
+      'pack cancelled',
+    )
+  }
+}
+
+/** Runs child processes without involving a command shell. */
+class CommandRunner {
+  run(
+    command: string,
+    args: string[],
+    cwd: string,
+    environment: NodeJS.ProcessEnv = process.env,
+  ): void {
+    const result = spawnSync(command, args, { cwd, env: environment, stdio: 'inherit' })
+    if (result.error !== undefined) throw result.error
+    if (result.status !== 0) {
+      throw new Error(`${formatCommand(command, args)} exited with status ${String(result.status)}`)
+    }
+  }
+
+  capture(
+    command: string,
+    args: string[],
+    cwd: string,
+    environment: NodeJS.ProcessEnv = process.env,
+  ): string {
+    const result = this.result(command, args, cwd, environment)
+    if (result.status !== 0) throw commandFailure(command, args, result)
+    return result.stdout.trim()
+  }
+
+  result(
+    command: string,
+    args: string[],
+    cwd: string,
+    environment: NodeJS.ProcessEnv = process.env,
+  ): CommandResult {
+    const result: SpawnSyncReturns<string> = spawnSync(command, args, {
+      cwd,
+      encoding: 'utf8',
+      env: environment,
+      maxBuffer: 16 * 1024 * 1024,
+    })
+    if (result.error !== undefined) throw result.error
+    return {
+      status: result.status ?? 1,
+      stdout: result.stdout,
+      stderr: result.stderr,
+    }
+  }
+}
+
+/** Owns a temporary detached worktree and removes it after staging. */
+class DetachedWorktree {
+  private constructor(
+    readonly path: string,
+    private readonly temporaryRoot: string,
+    private readonly repositoryRoot: string,
+    private readonly runner: CommandRunner,
+  ) {}
+
+  static create(repositoryRoot: string, commit: string, runner: CommandRunner): DetachedWorktree {
+    const temporaryRoot = mkdtempSync(join(tmpdir(), 'dsh-npm-baseline-'))
+    const path = join(temporaryRoot, 'worktree')
+    try {
+      runner.run('git', ['worktree', 'add', '--detach', path, commit], repositoryRoot)
+      return new DetachedWorktree(path, temporaryRoot, repositoryRoot, runner)
+    } catch (error: unknown) {
+      rmSync(temporaryRoot, { recursive: true, force: true })
+      throw error
+    }
+  }
+
+  dispose(): void {
+    const result = this.runner.result(
+      'git',
+      ['worktree', 'remove', '--force', this.path],
+      this.repositoryRoot,
+    )
+    if (result.status !== 0) {
+      console.error(`publish-npm-baseline: could not remove worktree ${this.path}`)
+      if (result.stderr.trim() !== '') console.error(result.stderr.trim())
+    }
+    rmSync(this.temporaryRoot, { recursive: true, force: true })
+  }
+}
+
+/** Discovers and stages every package published in one repository baseline. */
+class WorkspacePackageSet {
+  private constructor(
+    readonly packages: PackageTarget[],
+    readonly baseVersion: string,
+  ) {}
+
+  static discover(root: string): WorkspacePackageSet {
+    const manifestPaths = globSync(PACKAGE_PATTERNS, { cwd: root }).sort()
+    if (manifestPaths.length === 0) {
+      throw new Error('no package manifests found under vendor/, packages/, or apps/')
+    }
+
+    const packages: PackageTarget[] = []
+    const names = new Set<string>()
+    const baseVersion = expectString(readObject(resolve(root, 'package.json')), 'version', 'package.json')
+    if (!/^\d+\.\d+\.\d+$/.test(baseVersion)) {
+      throw new Error(`package.json must have a stable X.Y.Z version, got ${baseVersion}`)
+    }
+    for (const manifestPath of manifestPaths) {
+      const manifest = readObject(resolve(root, manifestPath))
+      const name = expectString(manifest, 'name', manifestPath)
+      const version = expectString(manifest, 'version', manifestPath)
+      const isVendored = manifestPath.startsWith('vendor/')
+      if (!isVendored && !name.startsWith('@deepseek-ai/')) {
+        throw new Error(`${manifestPath} must name an @deepseek-ai package`)
+      }
+      if (name === '@deepseek-ai/dsh-root') {
+        throw new Error(`${manifestPath} unexpectedly selected the workspace root`)
+      }
+      if (names.has(name)) throw new Error(`duplicate package name: ${name}`)
+      if (!isVendored && version !== baseVersion) {
+        throw new Error(`${manifestPath} has version ${version}; expected ${baseVersion}`)
+      }
+      names.add(name)
+      packages.push({
+        name,
+        directory: dirname(manifestPath),
+        origin: isVendored ? 'vendor' : 'harness',
+      })
+    }
+    packages.sort((left, right) => left.name.localeCompare(right.name))
+    return new WorkspacePackageSet(packages, baseVersion)
+  }
+
+  stage(root: string, releaseVersion: string): void {
+    const internalNames = new Set(this.packages.map(pkg => pkg.name))
+    for (const target of this.packages) {
+      const manifestPath = resolve(root, target.directory, 'package.json')
+      const manifest = readObject(manifestPath)
+      manifest.version = releaseVersion
+      delete manifest.private
+      stageInternalDependencies(manifest, internalNames, releaseVersion, manifestPath)
+      writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`)
+    }
+  }
+}
+
+/** Immutable local release bundle consumed by publish and verify. */
+class ReleaseBundle {
+  private constructor(
+    readonly directory: string,
+    readonly manifest: ReleaseManifest,
+  ) {}
+
+  static create(
+    directory: string,
+    expectedPackages: PackageTarget[],
+    commit: string,
+    version: string,
+    distTag: string,
+    registry: string,
+    runner: CommandRunner,
+  ): ReleaseBundle {
+    const internalNames = new Set(expectedPackages.map(pkg => pkg.name))
+    const expectedByName = new Map(expectedPackages.map(pkg => [pkg.name, pkg]))
+    const missingNames = new Set(internalNames)
+    const packages = readdirSync(directory)
+      .filter(name => name.endsWith('.tgz'))
+      .sort()
+      .map((tarball) => {
+        const artifact = inspectTarball(resolve(directory, tarball), runner)
+        const expected = expectedByName.get(artifact.name)
+        if (expected === undefined || !missingNames.delete(artifact.name)) {
+          throw new Error(`unexpected or duplicate packed package: ${artifact.name}`)
+        }
+        if (expected.origin === 'harness') validateTarballPayload(artifact.files, tarball)
+        if (artifact.version !== version) {
+          throw new Error(`${tarball} has version ${artifact.version}; expected ${version}`)
+        }
+        if (artifact.private === true) throw new Error(`${tarball} is still private`)
+        if (containsWorkspaceProtocol(artifact.manifest)) {
+          throw new Error(`${tarball} still contains a workspace: dependency`)
+        }
+        validateInternalDependencyPins(artifact.manifest, internalNames, version, tarball)
+        return packedPackage(artifact.name, resolve(directory, tarball), expected.origin)
+      })
+      .sort((left, right) => left.name.localeCompare(right.name))
+
+    if (missingNames.size !== 0) {
+      throw new Error(`missing tarballs for: ${[...missingNames].sort().join(', ')}`)
+    }
+    const manifest: ReleaseManifest = {
+      schemaVersion: 1,
+      commit,
+      version,
+      distTag,
+      registry,
+      packages,
+    }
+    writeFileSync(resolve(directory, RELEASE_MANIFEST_NAME), `${JSON.stringify(manifest, null, 2)}\n`)
+    writeFileSync(
+      resolve(directory, 'SHA256SUMS'),
+      `${packages.map(pkg => `${pkg.sha256}  ${pkg.tarball}`).join('\n')}\n`,
+    )
+    return new ReleaseBundle(directory, manifest)
+  }
+
+  static load(manifestPath: string, runner: CommandRunner): ReleaseBundle {
+    const absoluteManifestPath = resolve(manifestPath)
+    const raw = readObject(absoluteManifestPath)
+    if (raw.schemaVersion !== 1) {
+      throw new Error(`unsupported release manifest schema: ${String(raw.schemaVersion)}`)
+    }
+    const directory = dirname(absoluteManifestPath)
+    const packageValues = raw.packages
+    if (!Array.isArray(packageValues) || packageValues.length === 0) {
+      throw new Error('release manifest contains no packages')
+    }
+    const packages = packageValues.map((value, index) => parsePackedPackage(value, index))
+    const names = new Set<string>()
+    for (const pkg of packages) {
+      if (names.has(pkg.name)) throw new Error(`duplicate package in release manifest: ${pkg.name}`)
+      names.add(pkg.name)
+    }
+    const manifest: ReleaseManifest = {
+      schemaVersion: 1,
+      commit: expectString(raw, 'commit', RELEASE_MANIFEST_NAME),
+      version: expectString(raw, 'version', RELEASE_MANIFEST_NAME),
+      distTag: expectString(raw, 'distTag', RELEASE_MANIFEST_NAME),
+      registry: normalizeRegistry(expectString(raw, 'registry', RELEASE_MANIFEST_NAME)),
+      packages,
+    }
+    const bundle = new ReleaseBundle(directory, manifest)
+    bundle.verifyLocal(runner)
+    return bundle
+  }
+
+  private verifyLocal(runner: CommandRunner): void {
+    const internalNames = new Set(this.manifest.packages.map(pkg => pkg.name))
+    for (const pkg of this.manifest.packages) {
+      if (isAbsolute(pkg.tarball) || dirname(pkg.tarball) !== '.' || normalize(pkg.tarball) !== pkg.tarball) {
+        throw new Error(`invalid tarball path for ${pkg.name}: ${pkg.tarball}`)
+      }
+      const path = resolve(this.directory, pkg.tarball)
+      const actual = packedPackage(pkg.name, path, pkg.origin)
+      if (actual.sha256 !== pkg.sha256 || actual.integrity !== pkg.integrity) {
+        throw new Error(`tarball checksum mismatch: ${pkg.tarball}`)
+      }
+      const artifact = inspectTarball(path, runner)
+      if (pkg.origin === 'harness') validateTarballPayload(artifact.files, pkg.tarball)
+      if (artifact.name !== pkg.name || artifact.version !== this.manifest.version) {
+        throw new Error(`tarball identity mismatch: ${pkg.tarball}`)
+      }
+      if (artifact.private === true) throw new Error(`${pkg.tarball} is still private`)
+      if (containsWorkspaceProtocol(artifact.manifest)) {
+        throw new Error(`${pkg.tarball} still contains a workspace: dependency`)
+      }
+      validateInternalDependencyPins(
+        artifact.manifest,
+        internalNames,
+        this.manifest.version,
+        pkg.tarball,
+      )
+    }
+  }
+
+  tarballPath(pkg: PackedPackage): string {
+    return resolve(this.directory, pkg.tarball)
+  }
+}
+
+/** Installs one complete bundle outside the workspace and probes the shipped dsh entry. */
+class InstalledBundleSmoke {
+  constructor(
+    private readonly bundle: ReleaseBundle,
+    private readonly runner: CommandRunner,
+  ) {}
+
+  run(): void {
+    const consumerRoot = mkdtempSync(join(tmpdir(), 'dsh-npm-consumer-'))
+    try {
+      const dependencies = Object.fromEntries(this.bundle.manifest.packages.map(pkg => [
+        pkg.name,
+        pathToFileURL(this.bundle.tarballPath(pkg)).href,
+      ]))
+      writeFileSync(resolve(consumerRoot, 'package.json'), `${JSON.stringify({
+        name: 'dsh-npm-baseline-consumer',
+        version: '0.0.0',
+        private: true,
+        dependencies,
+      }, null, 2)}\n`)
+
+      console.log(
+        `publish-npm-baseline: installing ${this.bundle.manifest.packages.length} local tarballs`,
+      )
+      this.runner.run('npm', [
+        'install',
+        '--no-audit',
+        '--no-fund',
+        '--package-lock=false',
+        `--registry=${this.bundle.manifest.registry}`,
+      ], consumerRoot, npmClientEnvironment())
+
+      const bin = resolve(consumerRoot, 'node_modules/@deepseek-ai/dsh/lib/bin.js')
+      assertPathWithin(consumerRoot, bin, 'installed dsh bin')
+      const environment = installedArtifactEnvironment(consumerRoot)
+      const version = this.runner.capture(
+        process.execPath,
+        [bin, '--version'],
+        consumerRoot,
+        environment,
+      )
+      if (version !== this.bundle.manifest.version) {
+        throw new Error(
+          `installed dsh --version returned ${JSON.stringify(version)}; `
+          + `expected ${this.bundle.manifest.version}`,
+        )
+      }
+      const config = this.runner.capture(
+        process.execPath,
+        [bin, '--dump-default-config'],
+        consumerRoot,
+        environment,
+      )
+      if (config === '') throw new Error('installed dsh --dump-default-config returned no output')
+      this.probeWeb(bin, consumerRoot, environment)
+      console.log('publish-npm-baseline: installed dsh entry and Web startup probes passed')
+    } finally {
+      rmSync(consumerRoot, { recursive: true, force: true })
+    }
+  }
+
+  private probeWeb(bin: string, consumerRoot: string, environment: NodeJS.ProcessEnv): void {
+    if (process.platform === 'win32') {
+      throw new Error('installed dsh Web probe requires a POSIX host with python3')
+    }
+    const result = this.runner.result(
+      'python3',
+      ['-c', POSIX_WEB_PROBE, process.execPath, bin, consumerRoot, '60'],
+      consumerRoot,
+      environment,
+    )
+    if (result.status !== 0) {
+      throw commandFailure('python3', ['installed-dsh-web-probe'], result)
+    }
+  }
+}
+
+/** Builds a release bundle without mutating the caller's checkout. */
+class BaselinePackager {
+  constructor(
+    private readonly repositoryRoot: string,
+    private readonly runner: CommandRunner,
+    private readonly now: () => Date = () => new Date(),
+  ) {}
+
+  plan(options: PackOptions): BaselinePackPlan {
+    const timestamp = formatUtcTimestamp(this.now())
+    const registry = normalizeRegistry(options.registry)
+    const commit = this.runner.capture(
+      'git',
+      ['rev-parse', '--verify', `${options.ref}^{commit}`],
+      this.repositoryRoot,
+    )
+    const shortCommit = this.runner.capture(
+      'git',
+      ['rev-parse', '--short=10', commit],
+      this.repositoryRoot,
+    )
+    const rootManifest = parseObject(
+      this.runner.capture('git', ['show', `${commit}:package.json`], this.repositoryRoot),
+      `${commit}:package.json`,
+    )
+    const baseVersion = expectString(rootManifest, 'version', `${commit}:package.json`)
+    validateBaseVersion(baseVersion, `${commit}:package.json`)
+    const version = `${baseVersion}-${timestamp}-${shortCommit}`
+    const distTag = `dev-${baseVersion}`
+    validateDistTag(distTag)
+    const artifactDirectory = resolve(options.outputDirectory, version)
+    if (existsSync(artifactDirectory)) {
+      throw new Error(`output already exists: ${artifactDirectory}`)
+    }
+    return new BaselinePackPlan(
+      commit,
+      shortCommit,
+      timestamp,
+      baseVersion,
+      version,
+      distTag,
+      registry,
+      artifactDirectory,
+    )
+  }
+
+  pack(plan: BaselinePackPlan): ReleaseBundle {
+    const { artifactDirectory } = plan
+    if (existsSync(artifactDirectory)) {
+      throw new Error(`output already exists: ${artifactDirectory}`)
+    }
+    const worktree = DetachedWorktree.create(this.repositoryRoot, plan.commit, this.runner)
+    let createdArtifactDirectory = false
+    try {
+      const packageSet = WorkspacePackageSet.discover(worktree.path)
+      if (packageSet.baseVersion !== plan.baseVersion) {
+        throw new Error(
+          `workspace package version ${packageSet.baseVersion} does not match root version `
+          + `${plan.baseVersion} at ${plan.commit}`,
+        )
+      }
+
+      console.log(`publish-npm-baseline: installing detached worktree ${plan.shortCommit}`)
+      this.runner.run('pnpm', ['install', '--frozen-lockfile'], worktree.path)
+      this.runner.run('pnpm', ['run', 'constraints'], worktree.path)
+      packageSet.stage(worktree.path, plan.version)
+      mkdirSync(artifactDirectory, { recursive: true })
+      createdArtifactDirectory = true
+
+      console.log(
+        `publish-npm-baseline: building ${packageSet.packages.length} packages as ${plan.version}`,
+      )
+      this.runner.run('pnpm', ['run', 'build'], worktree.path)
+      this.runner.run('pnpm', ['run', 'publint'], worktree.path)
+      this.runner.run('pnpm', ['run', 'verify-built-package-invariants'], worktree.path)
+      this.runner.run('pnpm', [
+        '--filter', './vendor/**',
+        '--filter', './packages/**',
+        '--filter', './apps/**',
+        '--recursive',
+        'pack',
+        '--pack-destination', artifactDirectory,
+      ], worktree.path)
+
+      const bundle = ReleaseBundle.create(
+        artifactDirectory,
+        packageSet.packages,
+        plan.commit,
+        plan.version,
+        plan.distTag,
+        plan.registry,
+        this.runner,
+      )
+      new InstalledBundleSmoke(bundle, this.runner).run()
+      createdArtifactDirectory = false
+      console.log(`publish-npm-baseline: packed ${bundle.manifest.packages.length} packages`)
+      console.log(`  version:  ${bundle.manifest.version}`)
+      console.log(`  dist-tag: ${bundle.manifest.distTag}`)
+      console.log(`  manifest: ${resolve(bundle.directory, RELEASE_MANIFEST_NAME)}`)
+      console.log('  publish:  ' + formatCopyableCommand('pnpm', [
+        '--dir',
+        this.repositoryRoot,
+        'exec',
+        'tsx',
+        resolve(this.repositoryRoot, 'scripts/publish-npm-baseline.ts'),
+        'publish',
+        '--manifest',
+        resolve(bundle.directory, RELEASE_MANIFEST_NAME),
+        '--yes',
+      ]))
+      return bundle
+    } finally {
+      worktree.dispose()
+      if (createdArtifactDirectory) {
+        rmSync(artifactDirectory, { recursive: true, force: true })
+      }
+    }
+  }
+}
+
+/** Publishes and verifies a release bundle against its recorded registry. */
+class RegistryPublication {
+  private readonly npmEnvironment = npmClientEnvironment()
+  private readonly npmWorkingDirectory = tmpdir()
+
+  constructor(
+    private readonly bundle: ReleaseBundle,
+    private readonly runner: CommandRunner,
+  ) {}
+
+  async publish(assumeYes: boolean): Promise<void> {
+    this.pingRegistry()
+    this.requireIdentity()
+    if (!assumeYes) await this.confirm()
+
+    for (const pkg of this.bundle.manifest.packages) {
+      const existingIntegrity = this.remoteIntegrity(pkg.name)
+      if (existingIntegrity === undefined) {
+        this.runner.run('npm', [
+          'publish',
+          this.bundle.tarballPath(pkg),
+          `--registry=${this.bundle.manifest.registry}`,
+          `--tag=${this.bundle.manifest.distTag}`,
+        ], this.npmWorkingDirectory, this.npmEnvironment)
+      } else {
+        if (existingIntegrity !== pkg.integrity) {
+          throw new Error(
+            `${pkg.name}@${this.bundle.manifest.version} already exists with different integrity`,
+          )
+        }
+        console.log(
+          `publish-npm-baseline: already published ${pkg.name}@${this.bundle.manifest.version}`,
+        )
+      }
+      this.ensureDistTag(pkg.name, this.bundle.manifest.distTag)
+    }
+    this.ensureDistTag(RELEASE_ENTRY_PACKAGE, LATEST_DIST_TAG)
+    this.verifyRemote()
+    this.verifyReleaseEntryDistTag()
+  }
+
+  verify(): void {
+    this.pingRegistry()
+    this.verifyRemote()
+    this.verifyReleaseEntryDistTag()
+  }
+
+  private verifyRemote(): void {
+    for (const pkg of this.bundle.manifest.packages) {
+      const integrity = this.remoteIntegrity(pkg.name)
+      if (integrity === undefined) {
+        throw new Error(`package is missing: ${pkg.name}@${this.bundle.manifest.version}`)
+      }
+      if (integrity !== pkg.integrity) {
+        throw new Error(`integrity mismatch: ${pkg.name}@${this.bundle.manifest.version}`)
+      }
+      const tagVersion = this.remoteDistTag(pkg.name, this.bundle.manifest.distTag)
+      if (tagVersion !== this.bundle.manifest.version) {
+        throw new Error(
+          `${pkg.name}@${this.bundle.manifest.distTag} points to ${tagVersion ?? '<missing>'}; `
+          + `expected ${this.bundle.manifest.version}`,
+        )
+      }
+      console.log(`publish-npm-baseline: verified ${pkg.name}@${this.bundle.manifest.version}`)
+    }
+    console.log(
+      `publish-npm-baseline: verified ${this.bundle.manifest.packages.length} packages and `
+      + `dist-tag ${this.bundle.manifest.distTag}`,
+    )
+  }
+
+  private verifyReleaseEntryDistTag(): void {
+    const tagVersion = this.remoteDistTag(RELEASE_ENTRY_PACKAGE, LATEST_DIST_TAG)
+    if (tagVersion !== this.bundle.manifest.version) {
+      throw new Error(
+        `${RELEASE_ENTRY_PACKAGE}@${LATEST_DIST_TAG} points to ${tagVersion ?? '<missing>'}; `
+        + `expected ${this.bundle.manifest.version}`,
+      )
+    }
+    console.log(
+      `publish-npm-baseline: verified ${RELEASE_ENTRY_PACKAGE}@${LATEST_DIST_TAG} at `
+      + this.bundle.manifest.version,
+    )
+  }
+
+  private pingRegistry(): void {
+    const { registry } = this.bundle.manifest
+    this.runner.capture(
+      'npm', ['ping', `--registry=${registry}`], this.npmWorkingDirectory, this.npmEnvironment,
+    )
+  }
+
+  private requireIdentity(): void {
+    const { registry } = this.bundle.manifest
+    const identity = this.runner.capture(
+      'npm', ['whoami', `--registry=${registry}`], this.npmWorkingDirectory, this.npmEnvironment,
+    )
+    console.log(`publish-npm-baseline: registry identity ${identity} at ${registry}`)
+  }
+
+  private async confirm(): Promise<void> {
+    await confirmEnter(
+      `Publish ${this.bundle.manifest.packages.length} packages as `
+      + `${this.bundle.manifest.version} to ${this.bundle.manifest.registry}? `
+      + 'Press Enter to continue or type anything to cancel: ',
+      'publish requires an interactive terminal or --yes',
+      'publication cancelled',
+    )
+  }
+
+  private remoteIntegrity(name: string): string | undefined {
+    const { registry, version } = this.bundle.manifest
+    const result = this.runner.result(
+      'npm',
+      ['view', `${name}@${version}`, 'dist.integrity', '--json', `--registry=${registry}`],
+      this.npmWorkingDirectory,
+      this.npmEnvironment,
+    )
+    if (result.status !== 0) {
+      if (/E404|NOT_FOUND|404 Not Found/.test(`${result.stdout}\n${result.stderr}`)) return undefined
+      throw commandFailure('npm', ['view', `${name}@${version}`], result)
+    }
+    const value: unknown = result.stdout.trim() === '' ? undefined : JSON.parse(result.stdout)
+    if (typeof value !== 'string' || !value.startsWith('sha512-')) {
+      throw new Error(`registry returned no integrity for ${name}@${version}`)
+    }
+    return value
+  }
+
+  private remoteDistTag(name: string, distTag: string): string | undefined {
+    const { registry } = this.bundle.manifest
+    const raw = this.runner.capture(
+      'npm',
+      ['dist-tag', 'ls', name, `--registry=${registry}`],
+      this.npmWorkingDirectory,
+      this.npmEnvironment,
+    )
+    return parseDistTagListing(raw, name).get(distTag)
+  }
+
+  private ensureDistTag(name: string, distTag: string): void {
+    if (this.remoteDistTag(name, distTag) === this.bundle.manifest.version) return
+    const { registry, version } = this.bundle.manifest
+    this.runner.run(
+      'npm',
+      ['dist-tag', 'add', `${name}@${version}`, distTag, `--registry=${registry}`],
+      this.npmWorkingDirectory,
+      this.npmEnvironment,
+    )
+  }
+}
+
+interface InspectedTarball {
+  name: string
+  version: string
+  private: unknown
+  manifest: Record<string, unknown>
+  files: string[]
+}
+
+function inspectTarball(path: string, runner: CommandRunner): InspectedTarball {
+  const manifest = JSON.parse(
+    runner.capture('tar', ['-xOf', path, 'package/package.json'], dirname(path)),
+  ) as unknown
+  if (!isRecord(manifest)) throw new Error(`${path} contains an invalid package.json`)
+  return {
+    name: expectString(manifest, 'name', path),
+    version: expectString(manifest, 'version', path),
+    private: manifest.private,
+    manifest,
+    files: runner.capture('tar', ['-tf', path], dirname(path)).split(/\r?\n/),
+  }
+}
+
+function packedPackage(name: string, path: string, origin: PackageOrigin): PackedPackage {
+  const bytes = readFileSync(path)
+  return {
+    name,
+    tarball: basename(path),
+    sha256: createHash('sha256').update(bytes).digest('hex'),
+    integrity: `sha512-${createHash('sha512').update(bytes).digest('base64')}`,
+    origin,
+  }
+}
+
+function parsePackedPackage(value: unknown, index: number): PackedPackage {
+  if (!isRecord(value)) throw new Error(`invalid release manifest package at index ${index}`)
+  const context = `release manifest package at index ${index}`
+  const name = expectString(value, 'name', context)
+  const origin = value.origin === undefined ? 'harness' : value.origin
+  if (origin !== 'harness' && origin !== 'vendor') {
+    throw new Error(`invalid package origin in release manifest: ${JSON.stringify(origin)}`)
+  }
+  if (origin === 'harness' && (!name.startsWith('@deepseek-ai/') || name === '@deepseek-ai/dsh-root')) {
+    throw new Error(`invalid package name in release manifest: ${name}`)
+  }
+  return {
+    name,
+    tarball: expectString(value, 'tarball', context),
+    sha256: expectString(value, 'sha256', context),
+    integrity: expectString(value, 'integrity', context),
+    origin,
+  }
+}
+
+function containsWorkspaceProtocol(value: unknown): boolean {
+  if (typeof value === 'string') return value.startsWith('workspace:')
+  if (Array.isArray(value)) return value.some(containsWorkspaceProtocol)
+  return isRecord(value) && Object.values(value).some(containsWorkspaceProtocol)
+}
+
+function stageInternalDependencies(
+  manifest: Record<string, unknown>,
+  internalNames: ReadonlySet<string>,
+  releaseVersion: string,
+  context: string,
+): void {
+  for (const { dependencies, name } of internalDependencyEntries(manifest, internalNames, context)) {
+    dependencies[name] = releaseVersion
+  }
+}
+
+function validateInternalDependencyPins(
+  manifest: Record<string, unknown>,
+  internalNames: ReadonlySet<string>,
+  releaseVersion: string,
+  context: string,
+): void {
+  for (const { section, name, range } of internalDependencyEntries(manifest, internalNames, context)) {
+    if (range !== releaseVersion) {
+      throw new Error(
+        `${context} has internal ${section} ${name}@${String(range)}; `
+        + `expected exact version ${releaseVersion}`,
+      )
+    }
+  }
+}
+
+function* internalDependencyEntries(
+  manifest: Record<string, unknown>,
+  internalNames: ReadonlySet<string>,
+  context: string,
+): Generator<{
+  section: typeof DEPENDENCY_SECTIONS[number]
+  dependencies: Record<string, unknown>
+  name: string
+  range: unknown
+}> {
+  for (const section of DEPENDENCY_SECTIONS) {
+    const dependencies = manifest[section]
+    if (dependencies === undefined) continue
+    if (!isRecord(dependencies)) throw new Error(`${context} ${section} must be an object`)
+    for (const [name, range] of Object.entries(dependencies)) {
+      if (!internalNames.has(name)) continue
+      yield { section, dependencies, name, range }
+    }
+  }
+}
+
+function readObject(path: string): Record<string, unknown> {
+  return parseObject(readFileSync(path, 'utf8'), path)
+}
+
+function parseObject(source: string, context: string): Record<string, unknown> {
+  const value: unknown = JSON.parse(source)
+  if (!isRecord(value)) throw new Error(`${context} must contain a JSON object`)
+  return value
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value)
+}
+
+function expectString(value: Record<string, unknown>, key: string, context: string): string {
+  const result = value[key]
+  if (typeof result !== 'string' || result === '') {
+    throw new Error(`${context} must contain a non-empty ${key}`)
+  }
+  return result
+}
+
+function normalizeRegistry(value: string): string {
+  const url = new URL(value)
+  if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+    throw new Error(`registry must use HTTP or HTTPS: ${value}`)
+  }
+  return value.replace(/\/+$/, '')
+}
+
+function npmClientEnvironment(): NodeJS.ProcessEnv {
+  const environment = { ...process.env }
+  delete environment.npm_config_user_agent
+  delete environment.NPM_CONFIG_USER_AGENT
+  return environment
+}
+
+function installedArtifactEnvironment(consumerRoot: string): NodeJS.ProcessEnv {
+  const environment = npmClientEnvironment()
+  delete environment.NODE_OPTIONS
+  delete environment.NODE_PATH
+  environment.DSH_HOME = resolve(consumerRoot, '.dsh')
+  environment.DSH_AGENTS_HOME = resolve(consumerRoot, '.agents')
+  environment.DSH_TELEMETRY_DISABLED = '1'
+  environment.DEEPSEEK_API_KEY = 'keyless-installed-web-no-call'
+  environment.LANG = 'en_US.UTF-8'
+  environment.LC_ALL = 'en_US.UTF-8'
+  environment.LC_CTYPE = 'en_US.UTF-8'
+  environment.TERM = 'xterm-256color'
+  environment.COLUMNS = '100'
+  environment.LINES = '30'
+  delete environment.COLORTERM
+  return environment
+}
+
+function assertPathWithin(root: string, path: string, label: string): void {
+  const rootPath = realpathSync.native(root)
+  const candidate = realpathSync.native(path)
+  const fromRoot = relative(rootPath, candidate)
+  if (fromRoot === '..' || fromRoot.startsWith(`..${sep}`) || isAbsolute(fromRoot)) {
+    throw new Error(`${label} resolved outside the isolated consumer: ${candidate}`)
+  }
+}
+
+function validateDistTag(value: string): void {
+  if (value === '' || /\s/.test(value)) throw new Error(`invalid dist-tag: ${JSON.stringify(value)}`)
+}
+
+function validateBaseVersion(value: string, context: string): void {
+  if (!/^\d+\.\d+\.\d+$/.test(value)) {
+    throw new Error(`${context} must have a stable X.Y.Z version, got ${value}`)
+  }
+}
+
+function parseDistTagListing(raw: string, name: string): Map<string, string> {
+  const tags = new Map<string, string>()
+  for (const line of raw.split(/\r?\n/)) {
+    if (line === '') continue
+    const separator = line.indexOf(': ')
+    if (separator <= 0 || separator + 2 === line.length) {
+      throw new Error(`registry returned an invalid dist-tag for ${name}: ${line}`)
+    }
+    const tag = line.slice(0, separator)
+    if (tags.has(tag)) throw new Error(`registry returned duplicate dist-tag ${tag} for ${name}`)
+    tags.set(tag, line.slice(separator + 2))
+  }
+  return tags
+}
+
+async function confirmEnter(
+  prompt: string,
+  nonInteractiveError: string,
+  cancellationError: string,
+): Promise<void> {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) throw new Error(nonInteractiveError)
+  const readline = createInterface({ input: process.stdin, output: process.stdout })
+  try {
+    const answer = await readline.question(prompt)
+    if (answer !== '') throw new Error(cancellationError)
+  } finally {
+    readline.close()
+  }
+}
+
+function formatUtcTimestamp(value: Date): string {
+  if (!Number.isFinite(value.getTime())) throw new Error('pack timestamp must be a valid date')
+  return value.toISOString().replaceAll(/[-:TZ.]/g, '').slice(0, 14)
+}
+
+function commandFailure(command: string, args: string[], result: CommandResult): Error {
+  const detail = [result.stdout.trim(), result.stderr.trim()].filter(Boolean).join('\n')
+  return new Error(
+    `${formatCommand(command, args)} exited with status ${result.status}${detail === '' ? '' : `\n${detail}`}`,
+  )
+}
+
+function formatCommand(command: string, args: string[]): string {
+  return [command, ...args].map(value => JSON.stringify(value)).join(' ')
+}
+
+function formatCopyableCommand(command: string, args: string[]): string {
+  return [command, ...args].map(quoteShellArgument).join(' ')
+}
+
+function quoteShellArgument(value: string): string {
+  if (/^[\w./:@=+-]+$/.test(value)) return value
+  const singleQuote = String.fromCodePoint(39)
+  const escapedSingleQuote = `${singleQuote}"${singleQuote}"${singleQuote}`
+  return `${singleQuote}${value.replaceAll(singleQuote, escapedSingleQuote)}${singleQuote}`
+}
+
+function printUsage(): void {
+  console.log(`Usage:
+  pnpm exec tsx scripts/publish-npm-baseline.ts pack [options]
+  pnpm exec tsx scripts/publish-npm-baseline.ts release [options] [--yes]
+  pnpm exec tsx scripts/publish-npm-baseline.ts publish --manifest <path> [--yes]
+  pnpm exec tsx scripts/publish-npm-baseline.ts verify --manifest <path>
+
+Pack/release options:
+  --ref <git-ref>       Git commit to stage (default: HEAD)
+  --registry <url>      npm registry (default: ${DEFAULT_REGISTRY})
+  --output-dir <path>   Artifact root (default: ${DEFAULT_OUTPUT_DIRECTORY})
+  --yes                 pack/release without waiting for Enter`)
+}
+
+async function main(): Promise<void> {
+  const command = process.argv[2]
+  if (command === undefined || command === 'help' || command === '--help' || command === '-h') {
+    printUsage()
+    return
+  }
+  if (process.argv.slice(3).some(value => value === '--help' || value === '-h')) {
+    printUsage()
+    return
+  }
+  const runner = new CommandRunner()
+  const repositoryRoot = runner.capture('git', ['rev-parse', '--show-toplevel'], process.cwd())
+
+  if (command === 'pack' || command === 'release') {
+    const { values } = parseArgs({
+      args: process.argv.slice(3),
+      options: {
+        ref: { type: 'string', default: 'HEAD' },
+        registry: { type: 'string', default: DEFAULT_REGISTRY },
+        'output-dir': { type: 'string', default: resolve(repositoryRoot, DEFAULT_OUTPUT_DIRECTORY) },
+        yes: { type: 'boolean', default: false },
+      },
+      strict: true,
+    })
+    const packager = new BaselinePackager(repositoryRoot, runner)
+    const plan = packager.plan({
+      ref: values.ref,
+      registry: values.registry,
+      outputDirectory: resolve(values['output-dir']),
+    })
+    await plan.confirm(values.yes)
+    const bundle = packager.pack(plan)
+    if (command === 'release') {
+      await new RegistryPublication(bundle, runner).publish(values.yes)
+    }
+    return
+  }
+
+  if (command === 'publish' || command === 'verify') {
+    const { values } = parseArgs({
+      args: process.argv.slice(3),
+      options: {
+        manifest: { type: 'string' },
+        yes: { type: 'boolean', default: false },
+      },
+      strict: true,
+    })
+    if (values.manifest === undefined) throw new Error(`${command} requires --manifest`)
+    if (command === 'verify' && values.yes) throw new Error('verify does not accept --yes')
+    const bundle = ReleaseBundle.load(values.manifest, runner)
+    const publication = new RegistryPublication(bundle, runner)
+    if (command === 'publish') await publication.publish(values.yes)
+    else publication.verify()
+    return
+  }
+
+  throw new Error(`unknown command: ${command}`)
+}
+
+try {
+  await main()
+} catch (error: unknown) {
+  console.error(`publish-npm-baseline: ${error instanceof Error ? error.message : String(error)}`)
+  process.exitCode = 1
+}
diff --git a/vendor/README.md b/vendor/README.md
index 6788409cb3..c59a86ccca 100644
--- a/vendor/README.md
+++ b/vendor/README.md
@@ -31,7 +31,7 @@ Intentionally **not** vendored (verified unused by this set): `reggol`, `@cordis
 Keep this log exhaustive — every divergence from upstream must be listed.
 
 1. **`hmr/src/index.ts`**: removed the `./locales/en-US.yml` / `./locales/zh-CN.yml` imports, the `.i18n({...})` call on the `Config` schema, and the `src/locales/` directory. Rationale: those imports require a runtime YAML loader hook (`@cordisjs/unyaml`) that we do not vendor; the i18n texts only localize config descriptions.
-2. **All `package.json` files**: regenerated — added `private: true`, added precise `files` entries for bundled runtime files and `lib/types/**/*.d.ts` / `.d.ts.map`, preserved `src` in `files` only for packages whose previous file list already shipped it, added a `./src/*` export where missing, pointed declaration metadata at `lib/types`, and removed upstream `devDependencies`/`scripts`/`repository` fields. Dependency and peer-dependency ranges preserved, except `hmr` declares `esbuild` as a direct dev dependency because its source imports the `BuildFailure` type and pnpm's strict workspace resolution requires the owner package to name that dependency.
+2. **All `package.json` files**: regenerated — added `private: true`, added precise `files` entries for bundled runtime files and `lib/types/**/*.d.ts` / `.d.ts.map`, preserved `src` in `files` only for packages whose previous file list already shipped it, added a `./src/*` export where missing, pointed declaration metadata at `lib/types`, and removed upstream `devDependencies`/`scripts`/`repository` fields. Dependency and peer-dependency ranges are preserved except that `hmr` declares `esbuild` as a direct dev dependency because its source imports the `BuildFailure` type and pnpm's strict workspace resolution requires the owner package to name that dependency, and `loader` requires `node-addon-require-builtin@^0.1.4` to match the runtime used by published app packages.
 3. **All `tsconfig.json` files**: regenerated to extend the repo-root `tsconfig.base.json`, emit TypeScript intermediates to `lib/types`, and declare project references.
 4. **Vendored TypeScript source internal specifiers**: changed local relative imports/exports from upstream's specifier shape to explicit `.ts` specifiers so TypeScript rewrites emitted JS to `.js` while declarations keep explicit, NodeNext-safe `.ts` specifiers. This includes `loader/src/config/isolate.ts` using `declare module './entry.ts'`.
 5. **`schemastery/tsdown.config.ts` and `logger-console/tsdown.config.ts`**: ours, not upstream files — per-package build-shape overrides (dual ESM+CJS output; separate node/browser entries) for the repo-root tsdown build. They read the JS emitted under `lib/types` and then write the publish runtime entries under `lib/`. Like the regenerated tsconfigs, they are not part of the upstream sync surface.
diff --git a/vendor/loader/package.json b/vendor/loader/package.json
index e24e0657a6..509c558ed3 100644
--- a/vendor/loader/package.json
+++ b/vendor/loader/package.json
@@ -29,7 +29,7 @@
   "license": "MIT",
   "peerDependencies": {
     "cordis": "^4.0.0-rc.7",
-    "node-addon-require-builtin": "^0.1.3"
+    "node-addon-require-builtin": "^0.1.4"
   },
   "peerDependenciesMeta": {
     "node-addon-require-builtin": {