Profile bundles: npm packages whose manifest declares "dsh": { "bundle": { "patch": "./cordis.patch.yml" } }, making them installable patch layers for dsh --profile compositions (profile contract). A bundle's substance is its patch list; some also ship runtime glue plugins their patch mounts.

The manifest declaration, not this directory, defines Bundle identity. Domain packages can carry their own optional Profile layer; the Codex and Claude Code subagent packages are directly installable examples.

Package	Role	ctx key
`base/`	The shared dsh core applied first by base-backed profiles	— (patch only)
`acp-app/`	Automation-only ACP stdio application over base	mounts the ACP bridge
`web-app/`	Browser surface: web patch layer + runtime glue plugin	mounts rows
`headless/`	Direct one-shot task mode over base, with no Host or Web layer	mounts `headless-runner`
`sdk-app/`	SDK stdio JSON-RPC application over base	mounts the SDK server
`sdk-minimal/`	Standalone minimal SDK application without base or Web	— (complete patch tree)

In-box bundles resolve from the dsh installation; out-of-tree bundles install into a profile through dsh plugin --profile <name> add <package>.