@banana-peeljj12/dsh-trellis 0.3.4 → 0.3.6

package/README.md

@@ -62,6 +62,25 @@ dsh plugin --profile web add @banana-peeljj12/dsh-trellis@latest
 
 安装完成后**重启 DSH 服务**。
 
+> **桌面版（DeepSeek Harness App）请用自带的 carrier CLI。** 普通 `dsh` CLI 会以
+> `error: profile "desktop" is managed exclusively by the Electron application` 拒绝操作
+> `desktop` profile（该名字被硬编码保护）。请改用桌面版自带的 CLI：
+>
+> ```sh
+> & "F:\DeepSeek Harness\resources\runtime\cli\bin\dsh.cmd" plugin --profile desktop add link:F:\dsh-plugins\dsh-trellis
+> ```
+>
+> 装的若是本地开发目录，用 `link:<仓库绝对路径>`；装完成后**完整退出并重启桌面版**
+> （含托盘图标，确认任务管理器中不再有 `DeepSeek Harness.exe`）才会生效。
+
+> **版本兼容性**：插件声明的 `@deepseek-ai/dsh-*` peer 范围必须覆盖当前 DSH 运行时版本。
+> DSH 会在安装前置检查（pnpm 运行之前）与 profile 启动时校验该范围，不匹配会直接
+> `installation rejected` 并拒绝加载——这不是代码问题，而是声明问题：
+> 例如运行时为 `0.2.0-rc.2` 时，`^0.1.7-rc.1`（= `>=0.1.7-rc.1 <0.2.0-0`）不覆盖它，
+> 必须提升到 `^0.2.0-rc.2`。升级 DSH 后若插件突然失效，请先核对 peer 范围。
+> 本仓库当前面向 **DSH 0.2.0-rc.2**；审计证据见
+> [`docs/ref/dsh-0.2.0-rc.2-audit.md`](docs/ref/dsh-0.2.0-rc.2-audit.md)。
+
 ### 2. 配置白名单目录（重要）
 
 为避免非预期介入，插件默认不会拦截未授权的目录。请在 Web 端或配置文件中添加生效路径：

package/README_EN.md

@@ -62,6 +62,28 @@ dsh plugin --profile web add @banana-peeljj12/dsh-trellis@latest
 
 After installation, **restart the DSH service**.
 
+> **Desktop app (DeepSeek Harness App): use the bundled carrier CLI.** The ordinary `dsh`
+> CLI refuses to touch the `desktop` profile with
+> `error: profile "desktop" is managed exclusively by the Electron application` (that name is
+> hard-coded as protected). Use the CLI shipped inside the app instead:
+>
+> ```sh
+> & "F:\DeepSeek Harness\resources\runtime\cli\bin\dsh.cmd" plugin --profile desktop add link:F:\dsh-plugins\dsh-trellis
+> ```
+>
+> For a local development checkout, install it as `link:<absolute repo path>`. Afterwards
+> **fully quit and relaunch the desktop app** (including the tray icon — confirm no
+> `DeepSeek Harness.exe` remains in Task Manager) for the change to take effect.
+
+> **Version compatibility**: the `@deepseek-ai/dsh-*` peer ranges a plugin declares must cover
+> the running DSH version. DSH validates those ranges both in the install preflight (before pnpm
+> runs) and at profile startup; a mismatch produces `installation rejected` and the plugin is not
+> loaded. This is a declaration problem, not a code problem: on a `0.2.0-rc.2` runtime,
+> `^0.1.7-rc.1` (= `>=0.1.7-rc.1 <0.2.0-0`) does not cover it and must be raised to
+> `^0.2.0-rc.2`. If the plugin suddenly stops working after a DSH upgrade, check the peer ranges
+> first. This repository currently targets **DSH 0.2.0-rc.2**; see
+> [`docs/ref/dsh-0.2.0-rc.2-audit.md`](docs/ref/dsh-0.2.0-rc.2-audit.md) for the audit evidence.
+
 ### 2. Configure Allowed Directories (Important)
 
 By default, the plugin will not intercept any unconfigured workspaces. Add your target workspace directory to the allowlist:

package/lib/client.js

@@ -1,21 +1,21 @@
 /**
- * trellis-workflow client half — Web Settings tab for the allowlist.
+ * trellis-workflow client half — configuration page on the Plugins list.
  *
- * Contributes a tab to the Plugins settings section (slot
- * `settings.plugins.tab`) that reads/writes the same `trellis-workflow`
- * settings namespace the Host half registers, so the injection allowlist and
- * related config are editable in the Web UI and take effect on the next turn
- * without a restart.
+ * Contributes the `trellis-workflow` loader entry's configuration to the
+ * Plugins page (slot `plugins.row.config`, keyed
+ * `<package name>#<row id>`) so the injection allowlist, injectStep,
+ * skipKeywords, inline, and enforceReadonlyPlanning fields are editable there
+ * and take effect on the next turn without a restart.
  *
  * This file is a client bundle in the web shell's module format
  * (`window.__ModuleLoader__.load({ id, factory })`); it is served under
  * /plugins by the harness when the package is an enabled Loader entry whose
  * manifest declares `dsh.client` with `platform: web`.
  *
- * NOTE: the harness only exposes settings namespaces listed in
- * `WEB_SETTINGS_NAMESPACES` (dsh-host-apiproxy) to the Web client. Install
- * with `--patch-harness` (scripts/install.mjs) so `trellis-workflow` joins
- * that allowlist; otherwise the tab renders the "unavailable" fallback below.
+ * DSH 0.1.7 settings are Loader-entry driven: the namespace IS the loader entry
+ * id (`trellis-workflow`) and the value is the entry's projected Config. The
+ * Web client reads and writes it through the shared `configForms` service, and
+ * the card registers into the Plugins page's `plugins.row.config` seat.
  */
 
 window.__ModuleLoader__.load({
@@ -26,6 +26,7 @@ window.__ModuleLoader__.load({
     Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
     let react = require('react');
+    let primitives = require('@deepseek-ai/dsh-client-ui-primitives');
 
     /**
      * Module-level client root context, captured in apply(ctx). Components (slot
@@ -35,38 +36,45 @@ window.__ModuleLoader__.load({
      */
     let clientCtx = null;
 
-    // #region lib/types/client/trellis-settings-tab.js
+    // #region lib/types/client/trellis-shared.js
 
-    /** Settings namespace registered by the Host half (see lib/meta.js). */
+    /**
+     * The bundle patch row id — also the settings entry id this page edits. A
+     * row inserted by a bundle patch is loaded under a namespaced entry id
+     * (`include:trellis-workflow`) while a directly-declared row keeps the bare
+     * id, so consumers match it as a suffix (see `entryIdOf`).
+     */
     const NS = 'trellis-workflow';
 
     /** Locale dictionary namespace owned by this client half. */
     const LOCALE_NS = 'settings.trellisWorkflow';
 
     /** Services required by this client half. */
-    const inject = ['slots', 'locale', 'settingsScope', 'sidebarRight', 'uiWorkspace'];
+    const inject = ['slots', 'locale', 'configForms', 'uiWorkspace', 'sidebarRight'];
 
     const zh = {
-      tab: 'Trellis 工作流',
-      loading: '正在读取配置…',
-      unavailable:
-        '当前 harness 未向 Web 暴露 trellis-workflow 命名空间（dsh-host-apiproxy 的 WEB_SETTINGS_NAMESPACES 白名单未包含它）。请用 scripts/install.mjs 的 --patch-harness 补丁后重启 DSH。',
+      unavailable: '该插件当前未加载，暂不可配置（宿主未提供 trellis-workflow 条目）。',
+      servedNamespaces: '宿主已服务的命名空间：',
+      noneServed: '（无）',
       allowlist: '注入白名单',
       allowlistHint: '命中这些项目根的会话才会收到工作流面包屑。',
-      addPlaceholder: '输入项目根路径，如 F:/Projects/FordProject',
-      add: '添加',
-      remove: '移除',
-      empty: '（空）',
       injectStep: '注入步数（injectStep）',
+      injectStepHint: '只在该步注入（1 = 每条用户消息的第一步）。',
       skipKeywords: '跳过关键词（逗号分隔）',
+      skipKeywordsHint: '出现这些词（独立单词，逗号分隔）时，本轮跳过注入。',
       inline: '按 codex-inline 调度解析阶段',
       enforceReadonlyPlanning: '规划期只读保护（enforceReadonlyPlanning）',
       enforceReadonlyPlanningHint:
         '开启后，命中白名单的项目里：新对话（未建任务）只裁剪 write/edit 与任务写工具（trellis_task_update / trellis_artifact_update / trellis_task_archive / trellis_ui_update），其余工具（含其他插件的工具）保留；规划中的任务只裁剪 write/edit 与创建/跳过/归档类 trellis 工具，其余工具保留；经 trellis_task_skip 跳过任务的会话恢复完整工具。',
-      saved: '已保存',
-      writeFailed: '保存失败',
+      save: '保存',
+      saving: '保存中…',
+      saveFailed: '本部署没有接受这些值，已保留供你修改。',
+      readOnly: '本部署的设置为只读。',
+      overridden: '已覆盖',
+      reset: '恢复默认',
+      invalidNumber: '请填数字；留空表示使用默认值。',
+      desc: 'Trellis 工作流：按会话项目注入阶段面包屑、提供任务阶段工具与看板。',
       browse: '浏览…',
-      browseBusy: '选择中…',
       browseFailed: '调用文件夹选择器失败，请手动输入路径',
       chipTitle: 'Trellis Task',
       chipNoTask: '无活动任务',
@@ -128,27 +136,30 @@ window.__ModuleLoader__.load({
     };
 
     const en = {
-      tab: 'Trellis Workflow',
-      loading: 'Loading configuration…',
       unavailable:
-        'The current harness does not expose the trellis-workflow namespace to the Web client (it is not in dsh-host-apiproxy WEB_SETTINGS_NAMESPACES). Run scripts/install.mjs --patch-harness and restart DSH.',
+        'This plugin is not loaded, so it cannot be configured right now (the Host does not serve the trellis-workflow entry).',
+      servedNamespaces: 'Namespaces the Host serves:',
+      noneServed: '(none)',
       allowlist: 'Injection allowlist',
       allowlistHint: 'Sessions whose cwd matches these project roots receive the workflow breadcrumb.',
-      addPlaceholder: 'Project root path, e.g. F:/Projects/FordProject',
-      add: 'Add',
       browse: 'Browse…',
-      browseBusy: 'Picking…',
       browseFailed: 'Could not open the directory picker — enter the path manually',
-      remove: 'Remove',
-      empty: '(empty)',
       injectStep: 'Inject step (injectStep)',
+      injectStepHint: 'Only inject on this step index (1 = the first step of each user message).',
       skipKeywords: 'Skip keywords (comma-separated)',
+      skipKeywordsHint: 'Standalone words (comma-separated) that suppress injection for a turn.',
       inline: 'Resolve phases as codex-inline dispatch',
       enforceReadonlyPlanning: 'Read-only planning (enforceReadonlyPlanning)',
       enforceReadonlyPlanningHint:
         'When enabled, in allowlisted projects: a fresh conversation (no task yet) trims only write/edit and task-write trellis tools (trellis_task_update / trellis_artifact_update / trellis_task_archive / trellis_ui_update), keeping all other tools (including other plugins\'); a task in the planning phase trims only write/edit and create/skip/archive trellis tools, keeping all other tools; a session that skipped the task via trellis_task_skip regains the full tool surface.',
-      saved: 'Saved',
-      writeFailed: 'Save failed',
+      save: 'Save',
+      saving: 'Saving…',
+      saveFailed: 'The deployment did not accept these values; they were left for you to correct.',
+      readOnly: 'This deployment stores settings read-only.',
+      overridden: 'Overridden',
+      reset: 'Reset to default',
+      invalidNumber: 'Enter a number, or leave blank to use the default.',
+      desc: 'Trellis workflow: injects a per-project phase breadcrumb and provides the task/phase tools and board.',
       chipTitle: 'Trellis Task',
       chipNoTask: 'No active task',
       chipNoSummary: 'No state yet — click to refresh',
@@ -208,217 +219,426 @@ window.__ModuleLoader__.load({
       selectTaskHint: 'Click a task on the left to view details',
     };
 
-    function TrellisSettingsTab(props) {
-      const { scope, t } = props;
-      const [draftPath, setDraftPath] = react.useState('');
-      const [skipDraft, setSkipDraft] = react.useState('');
-      const [saved, setSaved] = react.useState(false);
+    // #region lib/types/client/trellis-settings-card.js
 
-      const snapshot = react.useSyncExternalStore(
-        (listener) => scope.subscribe(listener),
-        () => scope.getSnapshot(),
-      );
-      const ready = snapshot && snapshot.status === 'ready';
-      const value = ready ? snapshot.value : undefined;
+    /**
+     * DSH 0.1.7 settings surface for the `trellis-workflow` loader entry.
+     *
+     * The old per-plugin settings-scope model is gone: namespaces are loader
+     * entry ids, and the Web client reads/writes them through the shared
+     * `configForms` service (the same path the official settings cards use).
+     * The custom page registers into the Plugins page's `plugins.row.config`
+     * seat, keyed `<package name>#<row id>` — the key the plugin list page
+     * dispatches for this bundle's `trellis-workflow` row.
+     */
 
-      react.useEffect(() => {
-        if (!saved) return undefined;
-        const timer = setTimeout(() => setSaved(false), 2000);
-        return () => clearTimeout(timer);
-      }, [saved]);
+    /** The Plugins-page row key this bundle's configuration registers under. */
+    const ROW_CONFIG_KEY = '@banana-peeljj12/dsh-trellis#trellis-workflow';
+
+    /** Minimal button style for the browse control (the form frame owns the rest). */
+    const btnStyle = {
+      height: 30,
+      padding: '0 12px',
+      fontSize: 13,
+      font: 'inherit',
+      color: 'var(--dsw-alias-label-primary)',
+      background: 'transparent',
+      border: '1px solid var(--dsw-alias-border-l2)',
+      borderRadius: 8,
+      cursor: 'pointer',
+    };
 
-      if (snapshot && snapshot.status === 'unavailable') {
-        return react.createElement('p', { style: { color: 'var(--dsw-alias-state-error-primary)' } }, t('unavailable'));
-      }
-      if (!ready) {
-        return react.createElement('p', { style: { color: 'var(--dsw-alias-label-tertiary)' } }, t('loading'));
-      }
+    /** The label frame the shared settings form renders. */
+    function formLabels(t) {
+      return {
+        unavailable: t('unavailable'),
+        readOnly: t('readOnly'),
+        saveFailed: t('saveFailed'),
+        save: t('save'),
+        saving: t('saving'),
+      };
+    }
 
-      const write = (field, next) => {
-        scope.set(field, next).then(
-          () => setSaved(true),
-          () => setSaved(false),
-        );
+    /**
+     * A comma-separated list field. The shared form model is text based, so a
+     * list stages as one line; an empty draft clears the override.
+     * @param {string} field field name inside the entry's config section.
+     * @returns {{ field: string, format: (v: unknown) => string, parse: (t: string) => unknown }}
+     */
+    function settingsListField(field) {
+      return {
+        field,
+        format: (value) => (Array.isArray(value) ? value.join(', ') : ''),
+        parse: (text) => {
+          const items = String(text)
+            .split(',')
+            .map((s) => s.trim())
+            .filter(Boolean);
+          return items.length === 0 ? { kind: 'clear' } : { kind: 'set', value: items };
+        },
       };
+    }
 
-      const allowlist = Array.isArray(value && value.allowlist) ? value.allowlist : [];
-      const skipKeywords = Array.isArray(value && value.skipKeywords) ? value.skipKeywords : [];
+    /**
+     * A boolean field staged as the text `true`/`false`, so a checkbox can ride
+     * the same staged-draft and save semantics as every other control.
+     * @param {string} field field name inside the entry's config section.
+     * @returns {{ field: string, format: (v: unknown) => string, parse: (t: string) => unknown }}
+     */
+    function settingsBoolField(field) {
+      return {
+        field,
+        format: (value) => (value === true ? 'true' : 'false'),
+        parse: (text) => ({ kind: 'set', value: String(text).trim() === 'true' }),
+      };
+    }
+
+    /** Parse a staged comma-separated draft back into a list. */
+    function listFromText(text) {
+      return String(text || '')
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+    }
+
+    /**
+     * A minimal snapshot store for the card's injected hook. The shared form
+     * model owns its own store, but the card must also render before the entry
+     * is resolved, so the controller publishes through this one.
+     * @param {object} initial the first snapshot.
+     * @returns {{ getSnapshot: () => object, subscribe: (fn: () => void) => (() => void), set: (next: object) => void }}
+     */
+    function createStore(initial) {
+      let snapshot = initial;
+      const listeners = new Set();
+      return {
+        getSnapshot: () => snapshot,
+        subscribe(listener) {
+          listeners.add(listener);
+          return () => listeners.delete(listener);
+        },
+        set(next) {
+          snapshot = next;
+          for (const listener of listeners) {
+            try {
+              listener();
+            } catch {
+              /* one listener must not break the others */
+            }
+          }
+        },
+      };
+    }
 
-      const addPath = () => {
-        const p = draftPath.trim();
-        if (!p) return;
-        if (!allowlist.includes(p)) write('allowlist', allowlist.concat(p));
-        setDraftPath('');
+    /** The form state before the entry is resolved: nothing to edit yet. */
+    function emptyFormState() {
+      const empty = { text: '', overridden: false, invalid: false };
+      return {
+        available: false,
+        writable: false,
+        dirty: false,
+        invalid: false,
+        saving: false,
+        failed: false,
+        served: [],
+        allowlist: empty,
+        injectStep: empty,
+        skipKeywords: empty,
+        inline: empty,
+        enforceReadonlyPlanning: empty,
       };
+    }
+
+    /**
+     * Resolve this bundle's loader entry id from the served namespaces.
+     *
+     * A row inserted by a bundle patch is loaded under a namespaced entry id
+     * (`include:trellis-workflow`), while the same row declared directly in a
+     * profile patch keeps the bare id — so match the row id as a suffix rather
+     * than assuming one form.
+     * @param {Iterable<string>} served namespaces the Host currently serves.
+     * @returns {string | undefined} the entry id, when served.
+     */
+    function entryIdOf(served) {
+      for (const ns of served) {
+        if (ns === NS || ns.endsWith(':' + NS)) return ns;
+      }
+      return undefined;
+    }
 
+    /**
+     * Stage this entry's config edits over the shared `configForms` form and
+     * write them on save (the same controller shape the official cards use).
+     *
+     * The entry id is resolved lazily from the describe mirror: the Web client
+     * can mount before the Host serves the entry, and the id a bundle patch
+     * produces is namespaced.
+     */
+    class TrellisConfigController {
       /**
-       * Folder picker browse button: open the Host's native directory picker
-       * (`ctx.uiWorkspace.pickDirectory()`), normalize the picked path
-       * (backslashes → forward slashes) and append it to the allowlist
-       * directly (deduped). Cancel (`null`) is a no-op; failures surface the
-       * `browseFailed` copy and keep the manual input path untouched.
+       * @param {object} configForms the shared `configForms` service.
        */
-      const [picking, setPicking] = react.useState(false);
-      const [pickError, setPickError] = react.useState(false);
-      react.useEffect(() => {
-        if (!pickError) return undefined;
-        const timer = setTimeout(() => setPickError(false), 2600);
-        return () => clearTimeout(timer);
-      }, [pickError]);
+      constructor(configForms) {
+        this.configForms = configForms;
+        this.mirror = configForms.describe();
+        this.model = null;
+        this.entryId = undefined;
+        this.store = createStore(emptyFormState());
+        this.modelStore = null;
+        this.modelOff = null;
+        this.mirrorOff = this.mirror.subscribe(() => this.settle());
+        this.mirror.ensure();
+        this.settle();
+      }
+
+      /**
+       * The namespaces the Host currently serves, read from the shared mirror.
+       * @returns {string[]} served namespace ids.
+       */
+      servedNamespaces() {
+        try {
+          const view = this.mirror.getSnapshot().view;
+          const rows = view && view.namespaces ? view.namespaces : [];
+          return rows.map((row) => row && row.ns).filter(Boolean);
+        } catch {
+          return [];
+        }
+      }
+
+      /** Build the shared form model once the Host serves this entry. */
+      settle() {
+        if (this.model) return;
+        const entryId = entryIdOf(this.servedNamespaces());
+        if (entryId === undefined) return;
+        this.entryId = entryId;
+        this.model = new primitives.SettingsFormModel(this.configForms.get(entryId), [
+          settingsListField('allowlist'),
+          primitives.settingsNumberField('injectStep'),
+          settingsListField('skipKeywords'),
+          settingsBoolField('inline'),
+          settingsBoolField('enforceReadonlyPlanning'),
+        ]);
+        this.modelStore = this.model.bind(() => this.projection());
+        this.modelOff = this.modelStore.subscribe(() => this.store.set(this.projection()));
+        this.store.set(this.projection());
+      }
+
+      /** Build the snapshot the card renders from. */
+      projection() {
+        const served = this.servedNamespaces();
+        if (!this.model) return { ...emptyFormState(), served };
+        return {
+          ...this.model.shell(),
+          served,
+          allowlist: this.model.field('allowlist'),
+          injectStep: this.model.field('injectStep'),
+          skipKeywords: this.model.field('skipKeywords'),
+          inline: this.model.field('inline'),
+          enforceReadonlyPlanning: this.model.field('enforceReadonlyPlanning'),
+        };
+      }
+
+      /**
+       * Build the face the slot registration injects.
+       * @returns the form snapshot hook and the staged-form actions.
+       */
+      inject() {
+        const call = (name) => (...args) => {
+          if (!this.model) return undefined;
+          return this.model.actions()[name](...args);
+        };
+        return {
+          hooks: { trellisConfig: this.store },
+          edit: call('edit'),
+          resetField: call('resetField'),
+          save: call('save'),
+          discard: call('discard'),
+        };
+      }
+
+      /** Release every subscription. */
+      dispose() {
+        if (this.mirrorOff) this.mirrorOff();
+        if (this.modelOff) this.modelOff();
+        if (this.model) this.model.dispose();
+        this.mirrorOff = null;
+        this.modelOff = null;
+        this.model = null;
+      }
+    }
+
+    /** One labelled checkbox row for a boolean config field. */
+    function BooleanRow(props) {
+      const { id, label, hint, checked, disabled, onToggle } = props;
+      return react.createElement(
+        'div',
+        { style: { margin: '12px 0 2px' } },
+        react.createElement(
+          'label',
+          { htmlFor: id, style: { display: 'flex', gap: 8, alignItems: 'center', fontSize: 13 } },
+          react.createElement('input', {
+            id,
+            type: 'checkbox',
+            checked,
+            disabled,
+            onChange: (e) => onToggle(e.target.checked),
+          }),
+          label,
+        ),
+        hint
+          ? react.createElement(
+              'p',
+              { style: { margin: '4px 0 0', color: 'var(--dsw-alias-label-secondary)', fontSize: 12 } },
+              hint,
+            )
+          : null,
+      );
+    }
 
-      const browsePath = () => {
-        if (picking) return;
-        const workspaces = clientCtx && clientCtx.uiWorkspace;
-        if (!workspaces || typeof workspaces.pickDirectory !== 'function') {
-          setPickError(true);
+    /**
+     * Render this entry's configuration: the one-liner when the page asks for a
+     * summary, otherwise the shared form with its staged fields and one save.
+     * @param {object} props the view asked for, locale copy, the form snapshot,
+     *   its actions, and the injected slot face.
+     * @returns {unknown} the summary line, or the form.
+     */
+    function TrellisConfigCard(props) {
+      const { t } = props;
+      if (props.view === 'summary') return t('desc');
+      const state = props.useTrellisConfig((snapshot) => snapshot);
+      const disabled = !state.writable;
+      const field = (name) => state[name] || { text: '', overridden: false, invalid: false };
+
+      const onBrowse = () => {
+        const ws = clientCtx && clientCtx.uiWorkspace;
+        if (!ws || typeof ws.pickDirectory !== 'function') {
+          setBrowseError(true);
           return;
         }
-        setPicking(true);
-        // Reuse the saved-flag effect's timer slot: browse errors auto-clear
-        // via pickError's own effect above; picking ends on any outcome.
-        workspaces
-          .pickDirectory()
+        ws.pickDirectory()
           .then((picked) => {
-            setPicking(false);
-            if (picked === null || picked === undefined) return; // user cancelled
+            if (picked === null || picked === undefined) return;
             const normalized = String(picked).trim().replace(/\\/g, '/');
-            if (!normalized) {
-              setPickError(true);
-              return;
-            }
-            if (!allowlist.includes(normalized)) write('allowlist', allowlist.concat(normalized));
-            else setSaved(true); // already present — still confirm the click landed
+            if (!normalized) return;
+            const current = listFromText(field('allowlist').text);
+            if (current.includes(normalized)) return;
+            props.edit('allowlist', current.concat(normalized).join(', '));
           })
-          .catch(() => {
-            setPicking(false);
-            setPickError(true);
-          });
+          .catch(() => setBrowseError(true));
       };
 
-      const rowStyle = { display: 'flex', gap: 8, alignItems: 'center', marginBottom: 6 };
-      const inputStyle = {
-        flex: 1,
-        height: 32,
-        padding: '0 10px',
-        fontSize: 13,
-        color: 'var(--dsw-alias-label-primary)',
-        background: TB.color.surfaceMuted,
-        border: '1px solid ' + TB.color.borderStrong,
-        borderRadius: 8,
-        font: 'inherit',
-      };
-      const btnStyle = {
-        height: 32,
-        padding: '0 12px',
-        fontSize: 13,
-        font: 'inherit',
-        color: 'var(--dsw-alias-label-primary)',
-        background: TB.color.surface,
-        border: '1px solid var(--dsw-alias-border-l2)',
-        borderRadius: 8,
-        cursor: 'pointer',
-      };
-      const labelStyle = { fontSize: 13, fontWeight: 600, margin: '14px 0 6px', color: 'var(--dsw-alias-label-primary)' };
+      const [browseError, setBrowseError] = react.useState(false);
+      react.useEffect(() => {
+        if (!browseError) return undefined;
+        const timer = setTimeout(() => setBrowseError(false), 2600);
+        return () => clearTimeout(timer);
+      }, [browseError]);
+
+      if (!state.available) {
+        // The Host does not (yet) serve this entry. Say so, and name what it
+        // does serve, so a mis-resolved entry id is diagnosable from the page
+        // itself instead of showing up as an unexplained blank.
+        const served = Array.isArray(state.served) ? state.served : [];
+        return react.createElement(
+          'div',
+          { style: { display: 'flex', flexDirection: 'column', gap: 6 } },
+          react.createElement(
+            'p',
+            { role: 'status', style: { margin: 0, color: 'var(--dsw-alias-label-tertiary)', fontSize: 13 } },
+            t('unavailable'),
+          ),
+          react.createElement(
+            'p',
+            {
+              style: {
+                margin: 0,
+                color: 'var(--dsw-alias-label-tertiary)',
+                fontSize: 12,
+                fontFamily: 'var(--ds-font-family-code)',
+                overflowWrap: 'anywhere',
+              },
+            },
+            `${t('servedNamespaces')} ${served.length ? served.join(', ') : t('noneServed')}`,
+          ),
+        );
+      }
 
       return react.createElement(
-        'div',
-        { style: { width: '100%', maxWidth: 760, display: 'flex', flexDirection: 'column', gap: 4 } },
-        react.createElement('p', { style: { margin: 0, color: TB.color.textSecondary, fontSize: 13 } }, t('allowlistHint')),
-        react.createElement('label', { style: labelStyle }, t('allowlist')),
-        allowlist.length === 0
-          ? react.createElement('p', { style: { margin: 0, color: 'var(--dsw-alias-label-tertiary)', fontSize: 13 } }, t('empty'))
-          : allowlist.map((p) =>
-              react.createElement(
-                'div',
-                { key: p, style: rowStyle },
-                react.createElement(
-                  'code',
-                  { style: { flex: 1, overflowWrap: 'anywhere', fontFamily: 'var(--ds-font-family-code)', fontSize: 12 } },
-                  p,
-                ),
-                react.createElement(
-                  'button',
-                  { type: 'button', style: btnStyle, onClick: () => write('allowlist', allowlist.filter((x) => x !== p)) },
-                  t('remove'),
-                ),
-              ),
-            ),
+        primitives.SettingsForm,
+        { labels: formLabels(t), state, onSave: props.save, onDiscard: props.discard },
+        react.createElement(primitives.SettingsValueField, {
+          id: 'trellis-config-allowlist',
+          label: t('allowlist'),
+          hint: t('allowlistHint'),
+          overriddenLabel: t('overridden'),
+          resetLabel: t('reset'),
+          invalidLabel: t('invalidNumber'),
+          disabled,
+          ...field('allowlist'),
+          onEdit: (text) => props.edit('allowlist', text),
+          onReset: () => props.resetField('allowlist'),
+        }),
         react.createElement(
           'div',
-          { style: rowStyle },
-          react.createElement('input', {
-            style: inputStyle,
-            placeholder: t('addPlaceholder'),
-            value: draftPath,
-            onChange: (e) => setDraftPath(e.target.value),
-            onKeyDown: (e) => { if (e.key === 'Enter') addPath(); },
-          }),
+          { style: { display: 'flex', gap: 8, alignItems: 'center' } },
           react.createElement(
             'button',
-            {
-              type: 'button',
-              style: { ...btnStyle, opacity: picking ? 0.6 : 1, cursor: picking ? 'wait' : 'pointer' },
-              disabled: picking,
-              onClick: browsePath,
-            },
-            picking ? t('browseBusy') : t('browse'),
+            { type: 'button', style: btnStyle, disabled, onClick: onBrowse },
+            t('browse'),
           ),
-          react.createElement('button', { type: 'button', style: btnStyle, onClick: addPath }, t('add')),
+          browseError
+            ? react.createElement(
+                'p',
+                { style: { margin: 0, color: 'var(--dsw-alias-state-error-primary)', fontSize: 12 }, role: 'alert' },
+                t('browseFailed'),
+              )
+            : null,
         ),
-        pickError
-          ? react.createElement(
-              'p',
-              {
-                style: { margin: 0, color: 'var(--dsw-alias-state-error-primary)', fontSize: 12 },
-                role: 'alert',
-              },
-              t('browseFailed'),
-            )
-          : null,
-        react.createElement('label', { style: labelStyle }, t('injectStep')),
-        react.createElement('input', {
-          type: 'number',
-          min: 1,
-          style: { ...inputStyle, maxWidth: 160 },
-          value: value && typeof value.injectStep === 'number' ? value.injectStep : 1,
-          onChange: (e) => write('injectStep', Number(e.target.value) || 1),
+        react.createElement(primitives.SettingsValueField, {
+          id: 'trellis-config-inject-step',
+          label: t('injectStep'),
+          hint: t('injectStepHint'),
+          overriddenLabel: t('overridden'),
+          resetLabel: t('reset'),
+          invalidLabel: t('invalidNumber'),
+          numeric: true,
+          disabled,
+          ...field('injectStep'),
+          onEdit: (text) => props.edit('injectStep', text),
+          onReset: () => props.resetField('injectStep'),
         }),
-        react.createElement('label', { style: labelStyle }, t('skipKeywords')),
-        react.createElement('input', {
-          style: inputStyle,
-          value: skipDraft || skipKeywords.join(', '),
-          onChange: (e) => {
-            setSkipDraft(e.target.value);
-            write('skipKeywords', e.target.value.split(',').map((s) => s.trim()).filter(Boolean));
-          },
+        react.createElement(primitives.SettingsValueField, {
+          id: 'trellis-config-skip-keywords',
+          label: t('skipKeywords'),
+          hint: t('skipKeywordsHint'),
+          overriddenLabel: t('overridden'),
+          resetLabel: t('reset'),
+          invalidLabel: t('invalidNumber'),
+          disabled,
+          ...field('skipKeywords'),
+          onEdit: (text) => props.edit('skipKeywords', text),
+          onReset: () => props.resetField('skipKeywords'),
+        }),
+        react.createElement(BooleanRow, {
+          id: 'trellis-config-inline',
+          label: t('inline'),
+          checked: field('inline').text === 'true',
+          disabled,
+          onToggle: (next) => props.edit('inline', next ? 'true' : 'false'),
+        }),
+        react.createElement(BooleanRow, {
+          id: 'trellis-config-readonly',
+          label: t('enforceReadonlyPlanning'),
+          hint: t('enforceReadonlyPlanningHint'),
+          checked: field('enforceReadonlyPlanning').text === 'true',
+          disabled,
+          onToggle: (next) => props.edit('enforceReadonlyPlanning', next ? 'true' : 'false'),
         }),
-        react.createElement(
-          'label',
-          { style: { display: 'flex', gap: 8, alignItems: 'center', margin: '14px 0 6px', fontSize: 13 } },
-          react.createElement('input', {
-            type: 'checkbox',
-            checked: !!(value && value.inline),
-            onChange: (e) => write('inline', e.target.checked),
-          }),
-          t('inline'),
-        ),
-        react.createElement(
-          'label',
-          { style: { display: 'flex', gap: 8, alignItems: 'center', margin: '14px 0 6px', fontSize: 13 } },
-          react.createElement('input', {
-            type: 'checkbox',
-            checked: !!(value && value.enforceReadonlyPlanning),
-            onChange: (e) => write('enforceReadonlyPlanning', e.target.checked),
-          }),
-          t('enforceReadonlyPlanning'),
-        ),
-        react.createElement('p', { style: { margin: 0, color: 'var(--dsw-alias-label-secondary)', fontSize: 12 } }, t('enforceReadonlyPlanningHint')),
-        saved
-          ? react.createElement('p', { style: { margin: 0, color: 'var(--dsw-alias-state-success-primary)', fontSize: 12 } }, t('saved'))
-          : null,
       );
     }
 
+    // #endregion
+
     // #region lib/types/client/trellis-task-chip.js
 
     // NOTE: stage lanes are NOT maintained here anymore — the board payload
@@ -3039,19 +3259,22 @@ window.__ModuleLoader__.load({
       clientCtx = ctx;
       ctx.effect(() => ctx.locale.register(LOCALE_NS, { zh, en }), 'trellis-workflow: dictionaries');
       const t = ctx.locale.bind(LOCALE_NS);
-      // Bound once on this plugin's fiber: the scope's disposer follows the fiber.
-      const scope = ctx.settingsScope.bind({ namespace: NS });
-      ctx.slots.inject('settings.plugins.tab', () =>
+      // The entry's configuration on the Plugins page: staged edits over the
+      // shared `configForms` form, registered under the row key that page
+      // dispatches for this bundle's `trellis-workflow` row. The controller
+      // resolves the entry's (possibly namespaced) id from the describe mirror
+      // itself, so the card also works when the Host has not served it yet.
+      const controller = new TrellisConfigController(ctx.configForms);
+      ctx.effect(() => () => controller.dispose(), 'trellis-workflow: config form');
+      ctx.slots.inject('plugins.row.config', () =>
         ctx.slots.register(
           {
-            name: 'settings.plugins.tab',
-            id: 'trellis-workflow',
-            order: 20,
-            label: () => t('tab'),
+            name: 'plugins.row.config',
+            key: ROW_CONFIG_KEY,
             locale: LOCALE_NS,
-            inject: () => ({ scope }),
+            inject: () => controller.inject(),
           },
-          TrellisSettingsTab,
+          TrellisConfigCard,
         ),
       );
       // Session-header phase chip: additive list seat; the framework injects

package/lib/index.js

@@ -269,10 +269,14 @@ function lruSet(map, key, value, cap) {
 /** The Cordis plugin. */
 export default {
   name: NAME,
-  inject: ['fs', 'skills', 'tools'],
-  config: SCHEMA,
+  inject: ['fs', 'skills', 'tools', 'agents'],
+  // The schema MUST be declared as `Config` (capital): cordis exposes a plugin's
+  // schema at `runtime.Config`, which is exactly what dsh-settings' describe()
+  // reads (`entry.fiber.runtime.Config`). With a lowercase `config` the entry is
+  // never listed, so its Plugins-page form silently disappears.
+  Config: SCHEMA,
   apply(ctx, config) {
-    // --- effective config: Web Settings namespace layered over entry config ---
+    // --- effective config: Web Settings form layered over entry config ---
     const effectiveConfig = registerTrellisSettings(ctx, config)
 
     // --- skill provisioning (project-level, not bundled registration) -------
@@ -1058,7 +1062,9 @@ export default {
       const effective = effectiveConfig.get()
       if (!effective.enforceReadonlyPlanning) return assembled
 
-      const agent = context && context.agent
+      // AssembleContext carries no `agent` (0.1.7): the assembling agent is the
+      // process-local initiator, so resolve the session cwd from it.
+      const agent = (ctx.agents && typeof ctx.agents.currentInitiator === 'function' && ctx.agents.currentInitiator()) || undefined
       const cwd = normalizePath(agent && agent.session && agent.session.header ? agent.session.header.cwd : undefined)
       const root = matchAllowlist(cwd, effective.allowlist)
       if (!root) return assembled

package/lib/meta.js

@@ -22,17 +22,26 @@ export const SETTINGS_NAMESPACE = 'trellis-workflow'
  */
 export const API_PREFIX = '/trellis-workflow/api'
 
-/** Shared config shape: plugin entry config and the user-settings namespace. */
+/**
+ * Shared config shape: plugin entry config and the user-settings form.
+ *
+ * DSH 0.1.7 settings are Loader-entry driven: the settings form for this
+ * plugin IS the `Config` schema below, keyed by the loader entry id
+ * (`trellis-workflow`). Only fields marked `.volatile()` are editable through
+ * the Web settings form; at resolve time a volatile field wraps its value in a
+ * cosmokit volatile (an object with a `get()` accessor), so consumers must
+ * unwrap before use (see `unwrapVolatileConfig`).
+ */
 function configShape() {
   return {
     /** Project roots whose cwd should receive a Trellis breadcrumb. */
-    allowlist: z.array(z.string()).default(DEFAULT_ALLOWLIST),
+    allowlist: z.array(z.string()).default(DEFAULT_ALLOWLIST).volatile(),
     /** Only inject on this step index (1 = first step of each user message). */
-    injectStep: z.number().default(1),
+    injectStep: z.number().default(1).volatile(),
     /** Standalone words that suppress injection for a turn. */
-    skipKeywords: z.array(z.string()).default(['no-trellis']),
+    skipKeywords: z.array(z.string()).default(['no-trellis']).volatile(),
     /** Assume codex-inline dispatch mode when resolving phase names. */
-    inline: z.boolean().default(false),
+    inline: z.boolean().default(false).volatile(),
     /**
      * Read-only planning enforcement: when a session is in the undecided or
      * planning authorization state, TRIM only the specified tools from the
@@ -40,13 +49,52 @@ function configShape() {
      * tools invalid for that state), keeping every other tool — including
      * tools registered by other plugins — intact.
      */
-    enforceReadonlyPlanning: z.boolean().default(false),
+    enforceReadonlyPlanning: z.boolean().default(false).volatile(),
   }
 }
 
 export const SCHEMA = z.object(configShape())
 
-/** Schema for the user-settings namespace; mirrors SCHEMA so the Web Settings page can edit the same fields. */
+/**
+ * Resolve a config value produced by a `.volatile()` schema field. schemastery
+ * wraps volatile values in a cosmokit volatile — a plain object exposing
+ * `get()` — so `.get()` returns the underlying value. Non-volatile (already
+ * plain) values pass through unchanged.
+ * @param {unknown} value a config field value (possibly volatile-wrapped).
+ * @returns {unknown} the unwrapped value.
+ */
+export function unwrapVolatile(value) {
+  if (value !== null && typeof value === 'object' && typeof value.get === 'function') {
+    try {
+      return value.get()
+    } catch {
+      return value
+    }
+  }
+  return value
+}
+
+/**
+ * Deep-unwrap a resolved config object whose `.volatile()` fields are wrapped
+ * in cosmokit volatiles. Returns a plain config safe for the existing allowlist
+ * / keyword / step reads. Non-object input passes through.
+ * @param {unknown} config resolved config (e.g. from `SCHEMA(cfg)` or `ctx.config`).
+ * @returns {object} the unwrapped config.
+ */
+export function unwrapVolatileConfig(config) {
+  if (config === null || typeof config !== 'object') return {}
+  const out = {}
+  for (const [key, value] of Object.entries(config)) {
+    out[key] = unwrapVolatile(value)
+  }
+  // Defensive: fields consumed as iterables must be arrays even if a volatile
+  // wrapper resolved to something unexpected.
+  if (!Array.isArray(out.allowlist)) out.allowlist = []
+  if (!Array.isArray(out.skipKeywords)) out.skipKeywords = ['no-trellis']
+  return out
+}
+
+/** @deprecated DSH 0.1.7 projects the Config schema directly; kept for backward imports. */
 export function settingsSchema() {
-  return z.object(configShape())
+  return SCHEMA
 }

package/lib/settings.js

@@ -1,53 +1,69 @@
 /**
- * Optional user-settings integration for the trellis trigger.
+ * Settings integration for the trellis trigger (DSH 0.1.7 model).
  *
- * When a settings provider is mounted (`ctx.get('settings')`), the plugin's
- * config (allowlist, injectStep, skipKeywords, inline) is exposed in the Web
- * GUI Settings page under the `trellis-workflow` namespace, layered as:
+ * Since 0.1.7 the settings service is Loader-entry driven: each plugin's
+ * `Config` schema is projected into a settings form keyed by the loader entry
+ * id (`trellis-workflow`), and the Web client reads/writes it through the
+ * shared `configForms` service. Plugins no longer register a namespace —
+ * `ctx.settings.register()` is gone.
  *
- *   schema defaults <- composition entry config (base) <- user document
+ * Two properties of that model shape this module:
  *
- * `scope.get()` re-resolves live, so an edit made in the GUI applies to the
- * next turn without a restart. Without a provider, resolution falls back to
- * the entry config unchanged, so every composition works with or without
- * settings (same rule as the rest of the harness).
+ *  1. The entry's form is generated by default: dsh-settings resolves
+ *     `autoGenerate` as `presentations.get(fiber)?.auto ?? true`, so a plugin
+ *     does NOT have to opt in. Calling `ctx.settings.configure()` from an
+ *     `inject` callback would in fact fail with "cannot create effect on
+ *     inactive context", so this module deliberately does not call it.
+ *  2. The live effective value must be read from the plugin's own Cordis fiber.
+ *     `ctx.config` is guard-blocked ("cannot get property \"config\" without
+ *     inject"); `ctx.fiber.config` carries the resolved config the Loader keeps
+ *     current as Web-form edits apply. The mount-time argument stays the
+ *     fallback, so a composition without a settings provider still works.
  */
 
-import { SETTINGS_NAMESPACE, SCHEMA, settingsSchema } from './meta.js'
+import { SCHEMA, unwrapVolatileConfig } from './meta.js'
 
 /**
- * Register the settings namespace for this plugin's config.
+ * Return a live getter for this plugin's effective config.
  *
- * Registration goes through `ctx.inject(['settings'], …)` rather than a
- * one-shot `ctx.get('settings')` probe: plugin activation order is
- * service-availability driven, so the settings service may not be mounted yet
- * when this plugin's `apply` runs. The inject callback fires once settings is
- * available (or never, when a composition mounts no settings provider), so the
- * namespace is registered whenever the host can serve it. Without a provider,
- * resolution falls back to the entry config unchanged.
  * @param {import('@deepseek-ai/cordis').Context} ctx plugin context.
  * @param {object} config the plugin's entry config (composition `base`).
  * @returns {{ get: () => object }} a live getter for the effective config.
  */
 export function registerTrellisSettings(ctx, config) {
-  // Normalize the entry config through the schema so the returned getter is
-  // never undefined: a plugin bundle loaded without an explicit config gives
-  // `apply(ctx, config)` an undefined `config`, and schemastery fills in the
-  // field defaults (allowlist, injectStep, ...) for us.
-  const base = SCHEMA(config ?? {})
-  let scope = null
-  ctx.inject(['settings'], (settingsCtx) => {
+  // `apply` receives the config cordis already resolved against `Config`:
+  // defaults are applied and every `.volatile()` field arrives as a cosmokit
+  // wrapper. So normalize by unwrapping (never by re-validating through the
+  // schema, which would resolve the wrappers a second time) and layering it
+  // over the schema defaults for anything the entry omitted entirely.
+  const defaults = unwrapVolatileConfig(SCHEMA({}))
+  const base = { ...defaults }
+  for (const [key, value] of Object.entries(unwrapVolatileConfig(config ?? {}))) {
+    if (value !== undefined) base[key] = value
+  }
+
+  /**
+   * Resolve the effective config, preferring the fiber's live resolved config
+   * (Web edits land there) and falling back to the mount-time config. Never
+   * throws: a throwing getter would fail every tool call and the per-turn
+   * breadcrumb with it.
+   * @returns {object} plain config values.
+   */
+  function get() {
     try {
-      scope = settingsCtx.settings.register(
-        SETTINGS_NAMESPACE,
-        settingsSchema(),
-        { base },
-      )
-    } catch (error) {
-      console.warn(
-        `[trellis-workflow] settings namespace unavailable (${error && error.message}); using entry config`,
-      )
+      const live = ctx.fiber && ctx.fiber.config
+      if (live !== null && typeof live === 'object') {
+        const out = { ...base }
+        for (const [key, value] of Object.entries(unwrapVolatileConfig(live))) {
+          if (value !== undefined) out[key] = value
+        }
+        return out
+      }
+    } catch {
+      /* unreachable fiber, or a build whose config is unreadable — use base */
     }
-  })
-  return { get: () => (scope ? scope.get() ?? base : base) }
+    return base
+  }
+
+  return { get }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@banana-peeljj12/dsh-trellis",
-  "version": "0.3.4",
+  "version": "0.3.6",
   "description": "Self-contained Trellis workflow trigger for DeepSeek Harness: per-turn breadcrumb injection via agent/pre-step, a bundled skill provider, and DSH-native task/phase state resolution. No Trellis AGPL code is vendored; workflow semantics are rewritten and licensed MIT.",
   "type": "module",
   "main": "lib/index.js",
@@ -12,9 +12,11 @@
     "client": {
       "inject": [
         "@deepseek-ai/dsh-api-remotes",
-        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-plugin-manager",
         "@deepseek-ai/dsh-client-ui-settings",
-        "@deepseek-ai/dsh-client-locale"
+        "@deepseek-ai/dsh-client-ui-sidebar-right",
+        "@deepseek-ai/dsh-client-ui-workspace"
       ],
       "platform": "web"
     }
@@ -25,8 +27,7 @@
   "scripts": {
     "test": "node --test",
     "install:trellis": "node ./scripts/install.mjs"
-  },
-  "exports": {
+  },  "exports": {
     ".": {
       "types": "./lib/types/index.d.ts",
       "default": "./lib/index.js"
@@ -54,14 +55,24 @@
     "url": "git+https://github.com/1264459640/dsh-trellis.git"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-fs": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-tools": "^0.1.0-rc.6",
-    "@deepseek-ai/schemastery": "^3.18.1"
+    "@deepseek-ai/cordis": "^4.0.4",
+    "@deepseek-ai/dsh-agent": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.2.0-rc.2",
+    "@deepseek-ai/schemastery": "^3.18.4"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.4",
+    "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
+    "@deepseek-ai/schemastery": "3.18.4"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-settings": {

package/scripts/install.mjs

@@ -13,9 +13,12 @@
  *   3. (optional)       — `--fix-deps` removes stale `link:` deps whose target
  *      path does not exist; `--uninstall` removes the config row, the
  *      dependency junction, and the package.json dep entries in one step.
- *   `--patch-harness`   — standalone: only patch the harness
- *      `WEB_SETTINGS_NAMESPACES` allowlist (no profile required), so the Web
- *      client can read/write the `trellis-workflow` settings namespace.
+ *
+ * DSH 0.1.7 note: settings are Loader-entry driven — the Web settings form is
+ * the entry's Config schema keyed by `trellis-workflow`, reached by the client
+ * through the generated `remote.settings` namespace. No harness
+ * `WEB_SETTINGS_NAMESPACES` patch is needed anymore, so this installer no
+ * longer patches dsh-host-apiproxy.
  *
  * After a successful run, restart the DSH process for the profile. The package
  * `postinstall` hook invokes this script with `--auto` (safe, idempotent, and
@@ -114,18 +117,16 @@ trellis-workflow 注入层一键安装器
   --inline              按 codex-inline 调度模式解析阶段
   --auto                幂等自动模式（postinstall 使用；无法识别时静默退出）
   --dry-run             只预览将发生的改动，不写盘
-  --uninstall           一步卸载：配置行 + 依赖 junction + package.json 依赖项 + harness 白名单回撤
+  --uninstall           一步卸载：配置行 + 依赖 junction + package.json 依赖项
   --fix-deps            清理 package.json 中指向不存在路径的 trellis link 依赖
-  --patch-harness       只对 dsh-host-apiproxy 的 WEB_SETTINGS_NAMESPACES 白名单做幂等补丁
-                       （新增 trellis-workflow，无需 profile；DSH 升级覆盖后可重跑补回）
   -h, --help            显示本帮助
 
-安装时会额外对 dsh-host-apiproxy 的 WEB_SETTINGS_NAMESPACES 白名单做幂等补丁
-（新增 trellis-workflow，Web 设置页签必需）；DSH 升级覆盖后可重跑本命令补回。
+DSH 0.1.7 起 settings 由 Loader 条目驱动：Web 设置表单即条目 Config（命名空间为
+loader 条目 id trellis-workflow），客户端经生成的 remote.settings 命名空间读写，
+不再需要打 harness 白名单补丁。
 
 示例:
   node scripts/install.mjs --profile web --allowlist "F:/Projects/FordProject"
-  node scripts/install.mjs --patch-harness
   node scripts/install.mjs --dry-run
   node scripts/install.mjs --uninstall --dry-run
   node scripts/install.mjs --uninstall
@@ -532,10 +533,9 @@ if (process.env.TRELLIS_SKIP_AUTO === '1' && args.auto) {
   process.exit(0)
 }
 if (args.patchHarness) {
-  // Standalone harness allowlist patch — no profile required.
-  console.log('== trellis-workflow harness 白名单补丁 ==')
-  for (const message of patchHarnessAllowlist(args.dryRun)) console.log(message)
-  console.log('\n补丁完成。重启 DSH（对应 profile 的进程）后，Web 设置页签生效。')
+  // DSH 0.1.7: settings are Loader-entry driven and reached by the client via
+  // the generated remote.settings namespace — no harness allowlist patch.
+  console.log('DSH 0.1.7 起 Web 设置由 Loader 条目驱动（remote.settings），无需再补丁 harness 白名单。')
   process.exit(0)
 }
 
@@ -578,8 +578,6 @@ if (args.uninstall) {
   console.log(removeLink(profileDir, args.dryRun).message)
   // 3. package.json dep entries
   for (const message of removeTrellisDeps(profileDir, args.dryRun)) console.log(message)
-  // 4. harness settings-exposure allowlist (path A reversal)
-  for (const message of unpatchHarnessAllowlist(args.dryRun)) console.log(message)
   console.log('\n卸载完成。重启 DSH（对应 profile 的进程）后，插件完全移除。')
   process.exit(0)
 }
@@ -614,8 +612,8 @@ if (args.fixDeps) {
   if (!bad.length) console.log('依赖检查：无失效 link 依赖')
 }
 
-// harness settings-exposure allowlist (path A): the Web settings tab needs it
-for (const message of patchHarnessAllowlist(args.dryRun)) console.log(message)
+// DSH 0.1.7: the Web settings form is the entry's Config reached via
+// remote.settings — no harness WEB_SETTINGS_NAMESPACES patch is required.
 
 if (ok) {
   console.log('\n完成。重启 DSH（对应 profile 的进程）后，注入层与 Web 设置页签生效。')