@morlay/better-session ships as a profile bundle (dsh.bundle.patch), so
writing its package name into an insert row made the loader import a
module that does not exist and dsh web failed to boot. The aggregate
generator now expands bundle rows: parsePatchBlocks accepts name-less
harness patch rows (preserving extra lines such as disabled flags),
insert ids stay namespaced, later bundle patches override earlier same-id
rows, and external children are resolved from the aggregate package.
link-profile.mjs links bundle child packages so profile-root imports
resolve. Upstream republished 0.0.11, pinned with release-age excludes.
Verified by aggregate --check (19 rows / 17 deps), test:scripts,
dump-config row shape, and profile-side resolvability; runtime effect
requires the user restarting dsh web.
zhu1090093659
d05bf03350