Node and Bun local Prisma Streams runtime for trusted development workflows.

The Material Components for the web menu surface component

Framework-agnostic helpers for building A2UI subagent tools — op builders, prompt assembly, history walkers, and request/envelope orchestration shared across framework adapters.

The dsh browser-surface bundle: the web patch layer over dsh-base plus the runtime glue plugin (frontend dist serving, web-surface prompt, bash runtime variables, URL line)

The Material Components for the web Ink Ripple effect for web element interactions

Framework for rapidly creating high quality, server-side node.js applications, using plugins like building blocks

Abstract compaction service seam (ctx.compaction) for the DeepSeek Harness

Replay-aware token measurement service (ctx.tokenMeter) for the DeepSeek Harness

Prisma 8 dev/build tooling: the ORM command family, emitter, config-loader, language server, telemetry, vite plugin

Zero-dependency no-shell execFile runner for host-native OS integrations: utf8 stdio capture, abort propagation, Windows hide

LiangShen (梁神) agent preset plus its composer lever for the dsh web GUI. The preset keeps a minimal persona with standing working discipline and workspace instructions in the system prompt, anchors the entire first user turn on a native foundational tool

Vite DevTools Kit

Zero-dependency timeout/deadline primitive: clampTimeout, deadline, timeoutOf, TimeoutReason (timing + classification only, no termination)

Prisma 8 target-agnostic runtime: contract, components, authoring surface

Shared transparency foundation under Kontour's products. Claims, evidence, freshness, and gaps in one inspectable shape.

Authorization seam (ctx.authorization): plugin-owned flows that obtain a credential through a conversation with the human

Abstract credential seam (ctx.credentials): settings carry references to secrets, providers own the values

Per-call sandbox policy resolver and current model context: deployment fallbacks plus each session's mode and workspace root, shared by every enforcing capability family

Zero-dependency atomic file replacement: exclusive-create random-suffix temp + rename carrying the caller-stated permissions (writeFileAtomic)

In-app directory browsing surface: the workspace directory-flow owner rendering the host's listing and creation primitives