@4fu/arbor-environment-dir 2026.1106.0 → 2026.1106.1

package/README.md

@@ -27,9 +27,11 @@ everything that takes judgment, such as git, merges and conflicts, to the agent.
   guarantees what an agent cannot guarantee for itself - the record, isolation,
   exactly-once effects, the checks, dispatch. Everything that takes judgment,
   such as git, merges and conflicts, is the agent's.
-- **A directory per window.** Each window gets its own directory, and a
-  continuation keeps working in its predecessor's directory in place. It is not
-  bound to a repository; the agent clones and pushes what it needs.
+- **A shared workspace with per-window checkouts.** The default workspace is
+  ovnfs: one shared folder every window reads, and a window opens its own
+  copy-on-write checkout of the project it needs, works there and merges back
+  with `apply`. It falls back to a plain directory per window when ovnfs is not
+  installed. It is not a sandbox: ovnfs isolates files, not processes.
 - **A self-changing environment.** The model adds and changes skills, MCP
   servers and resident services itself; a `reload` validates the change and
   broadcasts it to every live window as a delta of names and descriptions.
@@ -118,7 +120,8 @@ window gets, and how a continuation keeps working in it, are in
 | [`@4fu/arbor-journal-sqlite`](packages/journal-sqlite) | the default `Journal` and `BlobStore` on SQLite |
 | [`@4fu/arbor-notes-sqlite`](packages/notes-sqlite) | the default `NoteStore` on SQLite, beside the journal |
 | [`@4fu/arbor-segmenter-jieba`](packages/segmenter-jieba) | the default `Segmenter`: jieba's dictionary segmentation for the word index, optional |
-| [`@4fu/arbor-workspace-dir`](packages/workspace-dir) | the default `Workspace`: one directory per window, with a continuation working in its predecessor's directory in place |
+| [`@4fu/arbor-workspace-dir`](packages/workspace-dir) | the fallback `Workspace`: one directory per window, with a continuation working in its predecessor's directory in place |
+| [`@4fu/arbor-workspace-ovnfs`](packages/workspace-ovnfs) | the default `Workspace` when ovnfs is installed: one shared folder, per-window copy-on-write checkouts the model opens and applies back |
 | [`@4fu/arbor-environment-dir`](packages/environment-dir) | the default `Environment`: one `/env` directory, a revision per item, validation and deltas |
 | [`@4fu/arbor-supervisor-process`](packages/supervisor-process) | the default `Supervisor`: one host process per service, restart with backoff, logs |
 | [`@4fu/arbor-judge-jev`](packages/judge-jev) | the default `Judge`: Jev, TypeSafe AI's System One classifier, answering the dispatch decisions |
@@ -151,7 +154,7 @@ deployment can see what it would be taking on before it adopts one.
 | [docs/coordination.md](docs/coordination.md) | the board, expectations, deliveries and broadcasts, staying current, effects |
 | [docs/environment.md](docs/environment.md) | skills, MCP servers and services: using, changing, reload, built-in skills, deltas |
 | [docs/memory.md](docs/memory.md) | notes, the active set, anchors, links |
-| [docs/workspaces.md](docs/workspaces.md) | per-window directories: isolation, continuity, what the agent does |
+| [docs/workspaces.md](docs/workspaces.md) | the shared folder and per-window checkouts: isolation, continuity, what the agent does |
 | [docs/tools.md](docs/tools.md) | direct tools and code mode modules |
 | [docs/prompting.md](docs/prompting.md) | how every model-facing text is written: layers, notes, deliveries, errors, judge questions, terms |
 | [docs/release.md](docs/release.md) | calendar versioning, the manual release steps, how a package is published |

package/directory-environment.d.ts

@@ -1,6 +1,6 @@
 /**
- * The default `Environment`: one shared directory, mounted read-only into every
- * window at `/env` (docs/environment.md).
+ * The default `Environment`: one shared directory, read-only for every window
+ * at `/env` (docs/environment.md).
  *
  * ```text
  * <root>/env/skills/<name>/            a skill, with its scripts beside it
@@ -34,6 +34,22 @@ export interface DirectoryEnvironmentOptions {
     supervisor?: Supervisor;
     /** Where a secret's value comes from. A configuration names one, never holds it. */
     secretOf?: (name: string) => string | undefined;
+    /**
+     * One fixed string from the deployment's text table, so this implementation
+     * writes none of its own (docs/prompting.md#language-and-the-text-table).
+     * Defaults to the framework's own Chinese table.
+     */
+    text?: (key: string, args?: Record<string, string | number>) => string;
+    /**
+     * Extra built-in skills to seed read-only on first use, each a name and the
+     * directory its `SKILL.md` lives in. The workspace implementation contributes
+     * its own this way - the ovnfs workspace seeds the `ovnfs` skill
+     * (docs/workspaces.md).
+     */
+    builtinSkills?: readonly {
+        name: string;
+        source: string;
+    }[];
     /** The clock. Tests pass a fixed one. */
     now?: () => number;
 }
@@ -45,7 +61,11 @@ export declare class DirectoryEnvironment implements Environment {
     private readonly root;
     private readonly supervisor;
     private readonly secretOf;
+    /** The table every refusal this implementation raises is written from. */
+    private readonly text;
     private readonly clock;
+    /** Extra built-in skills an implementation seeds, name and source directory. */
+    private readonly extraSkills;
     private index;
     /** Every environment revision, oldest first. */
     private log;

package/directory-environment.js

@@ -1,6 +1,6 @@
 /**
- * The default `Environment`: one shared directory, mounted read-only into every
- * window at `/env` (docs/environment.md).
+ * The default `Environment`: one shared directory, read-only for every window
+ * at `/env` (docs/environment.md).
  *
  * ```text
  * <root>/env/skills/<name>/            a skill, with its scripts beside it
@@ -25,7 +25,8 @@ import { dirname, isAbsolute, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { arborError } from "@4fu/arbor-errors";
 import { StdioMcpServer } from "./mcp.js";
-/** What a window reads the environment at, which is mounted read-only. */
+import { textOf, zhTextTable } from "@4fu/arbor-prompt";
+/** What a window reads the environment at, which is read-only for it. */
 const ENV_PREFIX = "/env";
 /** The built-in skills, seeded read-only on first use. */
 export const BUILTIN_SKILLS = ["arbor-skill", "arbor-mcp", "arbor-service", "arbor-settings"];
@@ -66,7 +67,11 @@ export class DirectoryEnvironment {
     root;
     supervisor;
     secretOf;
+    /** The table every refusal this implementation raises is written from. */
+    text;
     clock;
+    /** Extra built-in skills an implementation seeds, name and source directory. */
+    extraSkills;
     index = { revision: 0, items: [] };
     /** Every environment revision, oldest first. */
     log = [];
@@ -77,7 +82,9 @@ export class DirectoryEnvironment {
         this.directory = join(options.root, "env");
         this.supervisor = options.supervisor;
         this.secretOf = options.secretOf;
+        this.text = options.text ?? ((key, args) => textOf(zhTextTable, key, args));
         this.clock = options.now ?? (() => Date.now());
+        this.extraSkills = options.builtinSkills ?? [];
     }
     async revision() {
         return `e${(await this.read()).revision}`;
@@ -120,8 +127,8 @@ export class DirectoryEnvironment {
             throw arborError({
                 code: "invalid_input",
                 rule: "env.empty",
-                message: "reload：install 和 remove 至少要给一个",
-                nextAction: "给出 install 或 remove 之一。",
+                message: this.text("refused.env.empty"),
+                nextAction: this.text("next.env.empty"),
             });
         }
         // Everything is staged and checked before anything is replaced, so a refusal
@@ -228,9 +235,9 @@ export class DirectoryEnvironment {
         if (entry === undefined) {
             throw arborError({
                 code: "not_found",
-                rule: "env.notfound",
-                message: `环境：没有 MCP 服务器 ${server}`,
-                nextAction: "用 env.list 查看当前安装的服务器。",
+                rule: "env.mcp.notfound",
+                message: this.text("refused.env.mcp.notfound", { name: server }),
+                nextAction: this.text("next.env.mcp.notfound"),
                 details: { server },
             });
         }
@@ -239,8 +246,8 @@ export class DirectoryEnvironment {
             throw arborError({
                 code: "unavailable",
                 rule: "mcp.url.unsupported",
-                message: `环境：MCP 服务器 ${server} 是一个远程地址，本实现只调用 stdio 服务器`,
-                nextAction: "把该服务器换成本地 command 形式，或给主机换一个 Environment 实现。",
+                message: this.text("refused.mcp.url.unsupported", { name: server }),
+                nextAction: this.text("next.mcp.url.unsupported"),
                 details: { server },
             });
         }
@@ -278,8 +285,8 @@ export class DirectoryEnvironment {
                 throw arborError({
                     code: "not_found",
                     rule: "env.draft.missing",
-                    message: `环境：草稿 ${draft.path} 不存在`,
-                    nextAction: "用 workspace.ls 查看工作区里的草稿路径。",
+                    message: this.text("refused.env.draft.missing", { path: draft.path }),
+                    nextAction: this.text("next.env.draft.missing"),
                     details: { path: draft.path },
                 });
             }
@@ -331,7 +338,7 @@ export class DirectoryEnvironment {
             return { ok: true, value: await this.checkService(draft) };
         }
         catch (error) {
-            return { ok: false, error: errorInfo(error, draft) };
+            return { ok: false, error: errorInfo(this.text, error, draft) };
         }
     }
     /** A skill parses: a title, then one line that says what it is for. */
@@ -341,8 +348,8 @@ export class DirectoryEnvironment {
             throw arborError({
                 code: "invalid_input",
                 rule: "env.draft.skill",
-                message: `环境：草稿 ${draft.name} 中没有 SKILL.md`,
-                nextAction: "读 /env/skills/arbor-skill/SKILL.md 的「结构」一节，按它补上 SKILL.md。",
+                message: this.text("refused.env.draft.skill", { name: draft.name }),
+                nextAction: this.text("next.env.draft.skill"),
                 details: { name: draft.name },
             });
         }
@@ -350,9 +357,9 @@ export class DirectoryEnvironment {
         if (lines[0]?.startsWith("# ") !== true) {
             throw arborError({
                 code: "invalid_input",
-                rule: "env.draft.skill",
-                message: `环境：技能 ${draft.name} 的第一行不是一级标题`,
-                nextAction: "读 /env/skills/arbor-skill/SKILL.md 的「结构」一节，把第一行写成 # 标题。",
+                rule: "env.draft.skill.title",
+                message: this.text("refused.env.draft.skill.title", { name: draft.name }),
+                nextAction: this.text("next.env.draft.skill.title"),
                 details: { name: draft.name },
             });
         }
@@ -360,9 +367,9 @@ export class DirectoryEnvironment {
         if (description === "") {
             throw arborError({
                 code: "invalid_input",
-                rule: "env.draft.skill",
-                message: `环境：技能 ${draft.name} 没有一行说明`,
-                nextAction: "读 /env/skills/arbor-skill/SKILL.md 的「结构」一节，在标题下写一行说明。",
+                rule: "env.draft.skill.line",
+                message: this.text("refused.env.draft.skill.line", { name: draft.name }),
+                nextAction: this.text("next.env.draft.skill.line"),
                 details: { name: draft.name },
             });
         }
@@ -374,9 +381,9 @@ export class DirectoryEnvironment {
         if (text === null) {
             throw arborError({
                 code: "invalid_input",
-                rule: "env.draft.settings",
-                message: `环境：草稿 ${draft.path} 中没有 ${draft.name}.json`,
-                nextAction: "读 /env/skills/arbor-settings/SKILL.md 的「结构」一节，按它写设置文件。",
+                rule: "env.draft.settings.missing",
+                message: this.text("refused.env.draft.settings.missing", { path: draft.path, name: draft.name }),
+                nextAction: this.text("next.env.draft.settings.missing"),
                 details: { name: draft.name },
             });
         }
@@ -388,16 +395,18 @@ export class DirectoryEnvironment {
             throw arborError({
                 code: "invalid_input",
                 rule: "env.draft.settings",
-                message: `环境：设置文件解析失败：${error instanceof Error ? error.message : String(error)}`,
-                nextAction: "读 /env/skills/arbor-settings/SKILL.md 的「结构」一节，修正 JSON 后重新调用 reload。",
+                message: this.text("refused.env.draft.settings", {
+                    message: error instanceof Error ? error.message : String(error),
+                }),
+                nextAction: this.text("next.env.draft.settings"),
             });
         }
         if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
             throw arborError({
                 code: "invalid_input",
-                rule: "env.draft.settings",
-                message: "环境：设置文件必须是一个 JSON 对象",
-                nextAction: "读 /env/skills/arbor-settings/SKILL.md 的「结构」一节，按字段写成一个对象。",
+                rule: "env.draft.settings.shape",
+                message: this.text("refused.env.draft.settings.shape"),
+                nextAction: this.text("next.env.draft.settings.shape"),
             });
         }
     }
@@ -412,8 +421,8 @@ export class DirectoryEnvironment {
             throw arborError({
                 code: "invalid_input",
                 rule: "env.draft.mcp",
-                message: `环境：MCP 服务器 ${draft.name} 的配置缺失或不是 JSON`,
-                nextAction: "读 /env/skills/arbor-mcp/SKILL.md 的「结构」一节，按它写配置文件。",
+                message: this.text("refused.env.draft.mcp", { name: draft.name }),
+                nextAction: this.text("next.env.draft.mcp"),
                 details: { name: draft.name },
             });
         }
@@ -422,9 +431,9 @@ export class DirectoryEnvironment {
         if (command === "" && stringField(config, "url") === "") {
             throw arborError({
                 code: "invalid_input",
-                rule: "env.draft.mcp",
-                message: `环境：MCP 服务器 ${draft.name} 的配置中没有 command 或 url`,
-                nextAction: "读 /env/skills/arbor-mcp/SKILL.md 的「结构」一节，补上 command 或 url。",
+                rule: "env.draft.mcp.command",
+                message: this.text("refused.env.draft.mcp.command", { name: draft.name }),
+                nextAction: this.text("next.env.draft.mcp.command"),
                 details: { name: draft.name },
             });
         }
@@ -447,9 +456,9 @@ export class DirectoryEnvironment {
         }).catch((error) => {
             throw arborError({
                 code: "unavailable",
-                rule: "env.draft.mcp",
-                message: `环境：MCP 服务器 ${draft.name} 启动失败`,
-                nextAction: "读 /env/skills/arbor-mcp/SKILL.md 的「自测」一节，把服务器在本窗口工作区里跑通后再调用 reload。",
+                rule: "env.draft.mcp.start",
+                message: this.text("refused.env.draft.mcp.start", { name: draft.name }),
+                nextAction: this.text("next.env.draft.mcp.start"),
                 details: { name: draft.name, upstream: error instanceof Error ? error.message : String(error) },
                 cause: error,
             });
@@ -468,8 +477,8 @@ export class DirectoryEnvironment {
             throw arborError({
                 code: "invalid_input",
                 rule: "env.draft.service",
-                message: `环境：服务 ${draft.name} 的配置缺失或不是 JSON`,
-                nextAction: "读 /env/skills/arbor-service/SKILL.md 的「结构」一节，按它写 svc.json。",
+                message: this.text("refused.env.draft.service", { name: draft.name }),
+                nextAction: this.text("next.env.draft.service"),
                 details: { name: draft.name },
             });
         }
@@ -477,9 +486,9 @@ export class DirectoryEnvironment {
         if (command === "") {
             throw arborError({
                 code: "invalid_input",
-                rule: "env.draft.service",
-                message: `环境：服务 ${draft.name} 的配置中没有 command`,
-                nextAction: "读 /env/skills/arbor-service/SKILL.md 的「结构」一节，补上 command。",
+                rule: "env.draft.service.command",
+                message: this.text("refused.env.draft.service.command", { name: draft.name }),
+                nextAction: this.text("next.env.draft.service.command"),
                 details: { name: draft.name },
             });
         }
@@ -487,8 +496,8 @@ export class DirectoryEnvironment {
             throw arborError({
                 code: "unavailable",
                 rule: "env.supervisor.absent",
-                message: `环境：本主机没有配置服务监督器，无法安装服务 ${draft.name}`,
-                nextAction: "移除该服务项，或在配置了监督器的主机上安装它。",
+                message: this.text("refused.env.supervisor", { name: draft.name }),
+                nextAction: this.text("next.env.supervisor"),
                 details: { name: draft.name },
             });
         }
@@ -568,9 +577,9 @@ export class DirectoryEnvironment {
                 await this.rollback(entry, previous);
                 throw arborError({
                     code: "unavailable",
-                    rule: "env.draft.service",
-                    message: `环境：服务 ${draft.draft.name} 没有通过健康检查`,
-                    nextAction: "用 services.logs 查看服务的输出，修好后重新调用 reload。",
+                    rule: "env.draft.service.health",
+                    message: this.text("refused.env.draft.service.health", { name: draft.draft.name }),
+                    nextAction: this.text("next.env.draft.service.health"),
                     details: { name: draft.draft.name, upstream: error instanceof Error ? error.message : String(error) },
                     cause: error,
                 });
@@ -612,8 +621,12 @@ export class DirectoryEnvironment {
             throw arborError({
                 code: "conflict",
                 rule: "env.draft.stale",
-                message: `环境：${installed.ref} 已被其他窗口更新到第 ${installed.revision} 版，草稿基于旧的 ${read} 版`,
-                nextAction: `读 ${BUILTIN_SKILL_PATH[draft.draft.kind]} 的「修订冲突」一节，把新旧内容合并进草稿，再重新调用 reload。`,
+                message: this.text("refused.env.stale", {
+                    item: installed.ref,
+                    revision: installed.revision,
+                    read,
+                }),
+                nextAction: this.text("next.env.stale", { skill: BUILTIN_SKILL_PATH[draft.draft.kind] }),
                 details: { item: installed.ref, revision: installed.revision, read },
             });
         }
@@ -628,8 +641,8 @@ export class DirectoryEnvironment {
                 throw arborError({
                     code: "not_found",
                     rule: "env.notfound",
-                    message: `环境：没有环境项 ${wanted}`,
-                    nextAction: "用 env.list 查看当前的环境项和它们的引用。",
+                    message: this.text("refused.env.notfound", { item: wanted }),
+                    nextAction: this.text("next.env.notfound"),
                     details: { item: wanted },
                 });
             }
@@ -637,8 +650,8 @@ export class DirectoryEnvironment {
                 throw arborError({
                     code: "refused",
                     rule: "env.readonly",
-                    message: `环境：${entry.ref} 是框架内置的技能，只读`,
-                    nextAction: "内置技能只读；要改就写一个自己的技能，用 env.list 看它的路径。",
+                    message: this.text("refused.env.readonly", { item: entry.ref }),
+                    nextAction: this.text("next.env.readonly"),
                     details: { item: entry.ref },
                 });
             }
@@ -673,12 +686,13 @@ export class DirectoryEnvironment {
     /** Copy the built-in skills in, read-only, when they are not there yet. */
     async seedBuiltins() {
         const here = fileURLToPath(new URL(".", import.meta.url));
-        for (const name of BUILTIN_SKILLS) {
+        const shipped = BUILTIN_SKILLS.map((name) => ({ name, source: join(here, "skills", name) }));
+        for (const { name, source } of [...shipped, ...this.extraSkills]) {
             if (this.index.items.some((entry) => entry.name === name))
                 continue;
             const target = join(this.root, "env", "skills", name);
             await mkdir(dirname(target), { recursive: true });
-            await cp(join(here, "skills", name), target, { recursive: true });
+            await cp(source, target, { recursive: true });
             const text = await readText(join(target, "SKILL.md"));
             const lines = (text ?? "").split("\n").map((line) => line.trim());
             const entry = {
@@ -763,14 +777,18 @@ async function copyTree(from, to) {
 async function discard(draft) {
     await rm(draft.path, { recursive: true, force: true }).catch(() => { });
 }
-function errorInfo(error, draft) {
+function errorInfo(text, error, draft) {
     const info = error;
     if (info.rule === undefined) {
         return {
             code: "invalid_input",
             rule: "env.draft",
-            message: `环境：草稿 ${draft.name} 无效：${error instanceof Error ? error.message : String(error)}`,
-            nextAction: "修正草稿后重新调用 reload。",
+            message: text("refused.env.draft", {
+                path: draft.path,
+                kind: draft.kind,
+                message: error instanceof Error ? error.message : String(error),
+            }),
+            nextAction: text("next.env.draft"),
         };
     }
     return {

package/mcp.js

@@ -14,6 +14,7 @@
 import { spawn } from "node:child_process";
 import { createInterface } from "node:readline";
 import { arborError } from "@4fu/arbor-errors";
+import { childEnvironment } from "@4fu/arbor-tools";
 /** The MCP protocol version this client speaks. */
 const PROTOCOL_VERSION = "2024-11-05";
 /** How long one request waits for an answer. */
@@ -38,7 +39,9 @@ export class StdioMcpServer {
         }
         this.child = spawn(options.command, [...(options.args ?? [])], {
             cwd: options.dir,
-            env: { ...process.env, ...(options.env ?? {}), ...secrets },
+            // A server gets the host's environment, its own directory, its own `env`
+            // and the secrets it names (docs/environment.md#what-a-subprocess-gets).
+            env: childEnvironment({ workspace: options.dir, env: options.env, secrets }),
             stdio: ["pipe", "pipe", "pipe"],
         });
         this.child.stderr?.on("data", (chunk) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@4fu/arbor-environment-dir",
-  "version": "2026.1106.0",
+  "version": "2026.1106.1",
   "type": "module",
   "description": "The default Environment: skills, MCP servers, services and settings in one shared /env directory, with a revision per item, validation and deltas.",
   "exports": {
@@ -36,7 +36,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@4fu/arbor-errors": "2026.1106.0",
-    "@4fu/arbor-interfaces": "2026.1106.0"
+    "@4fu/arbor-errors": "2026.1106.1",
+    "@4fu/arbor-interfaces": "2026.1106.1",
+    "@4fu/arbor-prompt": "2026.1106.1",
+    "@4fu/arbor-tools": "2026.1106.1"
   }
 }

package/skills/arbor-settings/SKILL.md

@@ -25,7 +25,9 @@
 - `modelTiers`、`defaultTier`：每一层映射到后端能跑的一个模型。
 - `window`：空闲秒数、上下文预算、预留 token。
 - `snapshot.minIntervalMs`：系统提示和记忆快照最多多久重建一次。
-- `workspaces.retentionMs`：窗口链最后一个窗口结束后，它的工作区目录再保留多久由主机回收；不设就不回收。
+- `workspaces.retentionMs`：窗口链最后一个窗口结束后，它的工作区检出再保留多久由主机回收；不设就不回收。
+- `workspaces.shared`：ovnfs 工作区的共享文件夹，所有窗口都在里面读写，按约定只读；不放多个项目和仓库时留空。
+- `workspaces.ovnfs.state` / `workspaces.ovnfs.mount`：ovnfs 守护进程的状态目录和检出挂载目录，默认在主机数据目录下。
 - `judge.modes`：每个决策是 `on`、`off` 还是 `shadow`。
 - `secrets`：允许使用的秘密的名字，只写名字，不写值。