@crazx/dsh-client-test-runtime 0.1.6-alpha.2.zw.2 → 0.2.1-rc.2.zw.7

package/README.i18n.yaml

@@ -1,6 +1,67 @@
-# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
-# side as of the last confirmed-consistent state. Both languages carry equal authority;
-# after editing either side, bring the other along and re-record with:
+# Bilingual-pair consistency record for README.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/test-support/client-runtime/README.md
-README.md: 819892dfb5b433c6b4dcbe40a445e974137eff71
-README.zh.md: ee63f4d930410f7f5069be9027327559249b56ca
+/:
+  en: 6fd77b7a27000bf1
+  zh: 4a9606aa75285111
+/deepseek-ai-dsh-client-test-runtime:
+  en: edb01d7d9545062d
+  zh: de5e5ac8a9ff2f9b
+/deepseek-ai-dsh-client-test-runtime/summary:
+  en: ff69de920b4ab273
+  zh: 225437473535326a
+/deepseek-ai-dsh-client-test-runtime/table-of-contents:
+  en: d152484eb41ac6b4
+  zh: 09388d293f9be9cb
+/deepseek-ai-dsh-client-test-runtime/use-this-package:
+  en: 12afbb217bc06678
+  zh: c07f001ed8bb3300
+/deepseek-ai-dsh-client-test-runtime/use-this-package/setting-up-a-feature-spec:
+  en: 620906bcbaba405a
+  zh: b7c34920ba5873d1
+/deepseek-ai-dsh-client-test-runtime/use-this-package/local-dom-snapshots:
+  en: 1abbbed6cc4cf57b
+  zh: ab3975178b589653
+/deepseek-ai-dsh-client-test-runtime/use-this-package/scripting-remote-answers-and-failures:
+  en: cbcfc9a331783c98
+  zh: 1cc2f8e21a3d0dd4
+/deepseek-ai-dsh-client-test-runtime/use-this-package/whole-client-tier:
+  en: 1442fc215c8128e8
+  zh: 8439861b08e46ea2
+/deepseek-ai-dsh-client-test-runtime/use-this-package/roster-and-startup-behavior:
+  en: 95c5c2121547bd60
+  zh: 4dfb089ba7aac04d
+/deepseek-ai-dsh-client-test-runtime/use-this-package/when-to-use-it:
+  en: eb2f9bc90acb7a62
+  zh: cb59a2134bc83106
+/deepseek-ai-dsh-client-test-runtime/use-this-package/what-can-go-wrong:
+  en: c6bfe837a9221cf5
+  zh: 8d8fadea54f9e295
+/deepseek-ai-dsh-client-test-runtime/understand-the-implementation:
+  en: 70d19a7761d06ac9
+  zh: 2a3e648ee3dc51c1
+/deepseek-ai-dsh-client-test-runtime/understand-the-implementation/design:
+  en: 3264640018c1a0e8
+  zh: d777e0b8ad8b602f
+/deepseek-ai-dsh-client-test-runtime/understand-the-implementation/source-map:
+  en: e3ef8397426d484b
+  zh: 23f735f4bda1534a
+/deepseek-ai-dsh-client-test-runtime/understand-the-implementation/lifecycle:
+  en: b42779f364504719
+  zh: a10bad7ea1161388
+/deepseek-ai-dsh-client-test-runtime/further-exploration:
+  en: 7da91d03f5e40b35
+  zh: c35021982fdde126
+/deepseek-ai-dsh-client-test-runtime/model-experience:
+  en: 53b590e95981d312
+  zh: 326a89a5a4e15155
+/deepseek-ai-dsh-client-test-runtime/model-experience/kv-cache-effect:
+  en: ca75c51c89c2c9b0
+  zh: f57cc48a1b5cbfa9
+/deepseek-ai-dsh-client-test-runtime/known-limitations-and-deferred-work:
+  en: da5c7983453b2515
+  zh: 7f558354e84abff5
+/deepseek-ai-dsh-client-test-runtime/known-limitations-and-deferred-work/dev-note:
+  en: e67f633dc6fe7773
+  zh: 3bb0c20c93f16f98

package/README.md

@@ -11,6 +11,8 @@ English | [中文](README.zh.md)
 
 `SlotTestRuntime.create()` lets Vitest suites drive production slots, stores, typed Session and Workspace fixtures, and local DOM assertions in jsdom. For plugin activation, reload, reconnect, and cleanup tests, `createClientTest` starts the web profile's bundle roster with endpoint-named Remote mocks, without a business Host. Missing services and unstubbed calls fail explicitly. The whole-client fixture owns startup and disposal; the local runtime provides idempotent disposal. Use this package through `devDependencies` for client tests; it is not a product plugin.
 
+Linked bundles resolve dependencies from their real package directories; dependencies next to any bundle take precedence over packages inherited from ancestor directories.
+
 ## Table of Contents
 
 - [Use this package](#use-this-package)
@@ -42,8 +44,12 @@ await runtime.dispose()
 
 `mount` prechecks required services and fails loud when one is missing — `provide(name, value)` supplies an extra service first. The runtime provides a `fileUpload` stub that rejects every call until a suite replaces `runtime.fileUpload.upload`. `storeOf(key, scopeKey)` returns the live store instance the renderer hands a slot's component for identity and action-driven-write assertions.
 
+The runtime installs `allowAllAccessPlugin` before ui-session: its `remoteAccess` service answers true for every resource, so every access Hook allows every action. Hand-built component props spread `...allowAllAccess` to receive the same Hooks; a spec of a refused path overrides one Hook.
+
 The optional render options select a keyed entry with `entryKey` or a list item with `only`; `view.update(owner)` retains that selection. `runtime.panelInfo` supplies the default `usePanelInfo` source with no global panel selected. Release it with `releasePanelInfoSource()` before mounting the production Layout owner. `dispose()` releases both default Workspace and panel-info root sources; early release is idempotent and does not remove replacement owners.
 
+The Session fixture resolves subagent addresses from explicitly supplied addresses or loaded parent projections without retaining a Session generation. External catalog entries have no local browsing address.
+
 ### Local DOM snapshots
 
 A registered snapshot serializer folds CSS-module class hashes (`_frame_a1b2c3` → `frame`) so `.snap` files stay structural, and collapses `<svg>` internals to a `data-content` fingerprint. Suites needing a custom page frame use `root.declare(children, Frame)` instead of the auto frame; `dispose()` tears down views, feature fibers, minted scopes, and persisted store state on one axis and is idempotent.
@@ -87,7 +93,7 @@ The [generic Remote proxy](../remote-mock/README.md#remote-proxy) supports every
 
 ### Roster and startup behavior
 
-`webApp` is the `web` profile's browser roster, read when the assembly entry is first imported from its bundles (`dsh-base`, then `dsh-web-app`) as the launcher composes them, except that a patch matching nothing throws here where the launcher warns: each bundle's `dsh.bundle.patch` list is parsed with the include plugin's YAML dialect and composed by its `applyEntryPatches`, and every enabled row whose package declares `dsh.client.platform === 'web'` becomes a row carrying that declaration's `inject` and `immediately`; `bundleRoster(bundles)` does the same for any bundle list. Nothing is copied from the bundles, so a bundle change is visible at the next test run. `webApp.closure(names)` keeps the named rows plus everything they inject, transitively (the rows a spec needs to boot those plugins as the bundle composes them), `webApp.pick(names)` and `webApp.without(names)` cut it down by hand, all three throw on unknown names, and `ClientRoster.of(rows)` builds one inline. `remoteDefaultResponses` holds default responses for exactly the Remote endpoints the roster calls while booting with no sessions, no workspaces, and default settings; a spec layers its own `RemoteTable` on top with `mock.load(table)`, and any call without a rule fails the test at `dispose()` through `mock.assertNoUnmatched()`. `mount` requires a roster that provides `uiRenderer`; `start` fails loud otherwise instead of returning an empty container. `client.connection` is the roster's Connection service (no `Context` augmentation declares it), and `connectTimeoutMs` bounds the readiness wait, whose failure message lists the mock log. `reload(name)` rebuilds one Loader entry through the shared Client Modules helper (registry-first teardown, then `entry.refresh()`); each client retains its own module system and instance-bound Connection replacement, so starts and reloads can overlap without changing a page global. `unload(name)` removes an entry and waits for plugin cleanup; `flush()` settles React inside `act`. jsdom implements neither `EventSource` (client-hmr opens one at apply) nor `ResizeObserver` (layout components observe size at mount), so `start` reference-counts inert stubs for whichever global is absent and `dispose` removes exactly those — a jsdom gap, not a client identity channel. The `@deepseek-ai/dsh-api-remotes` row is dropped from every roster: its generated Remote clients exist only in built `lib/`, and `remote.<ns>` is what the tier replaces anyway. `start` instead provides one contract-free proxy per `remote.<ns>` service the roster injects (plus the namespaces the mock has rules for at that point; a namespace first registered later has no proxy); `ctx.remote.<ns>.<method>(...args)` becomes a call on the endpoint `<ns>/<method>` carrying the positional args, a stream when the mock registered a `stream()` script and a unary call otherwise, with the generated client's outcome folding (`gateway/internal` for carrier throws, `gateway/cancelled` on abort). An endpoint without a rule is still dispatched, so the mock logs it and `dispose()` fails the test.
+`webApp` is the `web` profile's browser roster, read when the assembly entry is first imported from its bundles (`dsh-base`, then `dsh-web-app`) as the launcher composes them, except that a patch matching nothing throws here where the launcher warns: each bundle's `dsh.bundle.patch` list is parsed with the include plugin's YAML dialect and composed by its `applyEntryPatches`, and every enabled row whose package declares `dsh.client.platform === 'web'` becomes a row carrying that declaration's `inject` and `immediately`; `bundleRoster(bundles, anchor, disabledContext)` accepts an explicit Loader evaluation scope for conditional `disabled` flags; without one, browser expressions are rejected. `webApp` supplies the Web profile name, not business Host services. Nothing is copied from the bundles, so a bundle change is visible at the next test run. `webApp.closure(names)` keeps the named rows plus everything they inject, transitively (the rows a spec needs to boot those plugins as the bundle composes them), `webApp.pick(names)` and `webApp.without(names)` cut it down by hand, all three throw on unknown names, and `ClientRoster.of(rows)` builds one inline. `remoteDefaultResponses` holds default responses for exactly the Remote endpoints the roster calls while booting with no sessions, no workspaces, and default settings; a spec layers its own `RemoteTable` on top with `mock.load(table)`, and any call without a rule fails the test at `dispose()` through `mock.assertNoUnmatched()`. `mount` requires a roster that provides `uiRenderer`; `start` fails loud otherwise instead of returning an empty container. `client.connection` is the roster's Connection service (no `Context` augmentation declares it), and `connectTimeoutMs` bounds the readiness wait, whose failure message lists the mock log. `reload(name)` rebuilds one Loader entry through the shared Client Modules helper (registry-first teardown, then `entry.refresh()`); each client retains its own module system and instance-bound Connection replacement, so starts and reloads can overlap without changing a page global. `unload(name)` removes an entry and waits for plugin cleanup; `flush()` settles React inside `act`. jsdom implements neither `EventSource` (client-hmr opens one at apply) nor `ResizeObserver` nor the `document.fonts` event target (layout components observe size and font loading at mount), so `start` reference-counts inert stubs for whichever global is absent and `dispose` removes exactly those — a jsdom gap, not a client identity channel. The `@deepseek-ai/dsh-api-remotes` row is dropped from every roster: its generated Remote clients exist only in built `lib/`, and `remote.<ns>` is what the tier replaces anyway. The `@deepseek-ai/dsh-api-remote-access` row, which mounts its own generated contribution, is dropped too, and `start` installs `allowAllAccessPlugin` in its place; a plan `provide` entry for either row is refused. `start` instead provides one contract-free proxy per `remote.<ns>` service the roster injects (plus the namespaces the mock has rules for at that point; a namespace first registered later has no proxy); `ctx.remote.<ns>.<method>(...args)` becomes a call on the endpoint `<ns>/<method>` carrying the positional args, a stream when the mock registered a `stream()` script and a unary call otherwise, with the generated client's outcome folding (`gateway/internal` for carrier throws, `gateway/cancelled` on abort). An endpoint without a rule is still dispatched, so the mock logs it and `dispose()` fails the test.
 
 ### When to use it
 
@@ -111,7 +117,7 @@ This section explains the design of the bench; the observable behavior is fully
 
 ### Design
 
-The bench copies no production logic: it mounts the production `SlotRegistry`, production renderer, and `UiSession` adapter. `TestSessions` and `TestWorkspaces` implement the owner interfaces that features consume through Cordis, each fixture Session implements `SessionFace`, and `stubSettingsScope` implements `SettingsScope`. `UiSession` derives standard renderer sources from those Controller bindings. Unstubbed `ISession` behavior fails with the missing method name.
+The bench copies no production logic: it mounts the production `SlotRegistry`, production renderer, and `UiSession` adapter. `TestSessions` and `TestWorkspaces` implement the owner interfaces that features consume through Cordis, each fixture Session implements `SessionFace`, and `stubConfigForm` implements `ConfigForm`. `UiSession` derives standard renderer sources from those Controller bindings. Unstubbed `ISession` behavior fails with the missing method name.
 
 ### Source map
 
@@ -121,9 +127,10 @@ The bench copies no production logic: it mounts the production `SlotRegistry`, p
 | [`src/sessions.ts`](src/sessions.ts) + [`src/workspaces.ts`](src/workspaces.ts) | `ISessions`/`IWorkspaces` test doubles and `FixtureSession` behavior stubs |
 | [`src/fixtures.ts`](src/fixtures.ts) | Plain fixture builders: conversation snapshots, workspace list state |
 | [`src/snapshot.ts`](src/snapshot.ts) | DOM snapshot serializer (class-hash folding, `<svg>` fingerprint) |
+| [`src/access.ts`](src/access.ts) | `allowAllAccess` props and `allowAllAccessPlugin`, the allow-all stand-in for the remote-access Client row |
 | [`src/remote.ts`](src/remote.ts) | `TestRemote` double for host RPC, `RemoteError` value re-export |
 | [`src/translate.ts`](src/translate.ts) + [`src/locale-env.ts`](src/locale-env.ts) | Translation and pinned-browser-language test helpers |
-| [`src/settings-scope.ts`](src/settings-scope.ts) | `stubSettingsScope` with test-driven publications and a write spy |
+| [`src/config-form.ts`](src/config-form.ts) | `stubConfigForm` with test-driven publications and write spies |
 | [`src/assembly/roster.ts`](src/assembly/roster.ts) | `ClientRosterRow`, `ClientRoster` (`of`/`closure`/`pick`/`without`), the `AssemblyPlan` it annotates, and `graphFromRoster` |
 | [`src/assembly/modules.ts`](src/assembly/modules.ts) | Source `/client` imports and replacements, registered through the production module facade's pending factory queue |
 | [`src/assembly/test-client.ts`](src/assembly/test-client.ts) | `TestClient`: instance-bound Connection, shared jsdom shims, `bootClient`, mount, readiness wait, `reload`/`unload`/`dispose` |
@@ -131,7 +138,6 @@ The bench copies no production logic: it mounts the production `SlotRegistry`, p
 | [`src/assembly/remote-default-responses.ts`](src/assembly/remote-default-responses.ts) | `remoteDefaultResponses`: default responses of the Remote endpoints the roster calls at boot |
 | [`src/assembly/remote-proxies.ts`](src/assembly/remote-proxies.ts) | Contract-free `remote.<ns>` proxies over the Connection: `remoteNamespacesOf`, `remoteProxiesPlugin` |
 | [`src/assembly/bundle-roster.ts`](src/assembly/bundle-roster.ts) | `bundleRoster` and `webApp`: the browser roster read from bundle patch files with the include plugin's own schema and patch application |
-| — | No runtime invariant companion is published; this test-support package owns no production event stream or mutable data — it assembles the runtime SlotRegistry and renderer (whose packages own their invariants) around test doubles; its own behavior is exercised by its package tests. |
 
 ### Lifecycle
 

package/README.zh.md

@@ -11,6 +11,8 @@ kind: "package-library"
 
 `SlotTestRuntime.create()` 让 Vitest 套件在 jsdom 中驱动生产 slot、store、带类型的 Session 与 Workspace fixture，并对局部 DOM 断言。面向插件激活、重载、重连与清理的测试，`createClientTest` 使用具名端点 Remote mock 启动 web profile 的 bundle roster，无需业务 Host。缺失服务与未打桩调用会明确失败。整机 fixture 拥有启动和销毁，局部 runtime 提供幂等销毁。通过 `devDependencies` 将本包用于客户端测试；它不是产品插件。
 
+链接到工作区的 bundle 从实际包目录解析依赖；各 bundle 自身目录中的依赖优先于祖先目录中继承的包。
+
 ## 目录
 
 - [使用本包](#use-this-package)
@@ -42,8 +44,12 @@ await runtime.dispose()
 
 `mount` 会预检必需服务，缺失时自明报错——先用 `provide(name, value)` 提供额外服务。运行时提供的 `fileUpload` 替身会拒绝每次调用，直到测试套件替换 `runtime.fileUpload.upload`。`storeOf(key, scopeKey)` 返回渲染器交给 slot 组件的实时存储实例，用于身份与动作驱动写入断言。
 
+运行时在 ui-session 之前安装 `allowAllAccessPlugin`：它的 `remoteAccess` 服务对每个资源都回答 true，因此每个访问 Hook 都允许每个 action。手工构造的组件 props 展开 `...allowAllAccess` 以获得同样的 Hook；测试被拒绝路径的 spec 覆盖其中一个 Hook。
+
 可选渲染参数通过 `entryKey` 选择 keyed 条目，或通过 `only` 选择 list 条目；`view.update(owner)` 保留该选择。`runtime.panelInfo` 提供默认的 `usePanelInfo` 数据源，初始不选中全局面板。挂载生产 Layout 所有者之前，先调用 `releasePanelInfoSource()` 释放该数据源。`dispose()` 同时释放默认的工作区与面板信息根数据源；提前释放是幂等的，不会移除替代它们的所有者。
 
+Session fixture 从显式提供的地址或已加载的父级投影解析子代理地址，不会保留 Session generation。外部目录项没有本地浏览地址。
+
 ### 局部 DOM 快照
 
 注册的快照序列化器把 CSS-module 哈希类名折回语义名（`_frame_a1b2c3` → `frame`），使 `.snap` 文件只含结构，并把 `<svg>` 内部折叠为 `data-content` 指纹。需要自定义页面 frame 的套件改用 `root.declare(children, Frame)` 而非自动 frame；`dispose()` 沿单一轴拆除视图、功能 fiber、已铸 scope 与持久化存储状态，且幂等。
@@ -87,7 +93,7 @@ test('registers into the sidebar', async ({ remote, start }) => {
 
 ### Roster 与启动行为
 
-`webApp` 是 `web` profile 的浏览器 roster，首次 import 装配入口时从它的 bundle（先 `dsh-base`、再 `dsh-web-app`）按启动器的方式现读，只是匹配不到任何行的补丁在这里抛错、启动器只警告：每个 bundle 的 `dsh.bundle.patch` 列表用 include 插件的 YAML 方言解析、用它的 `applyEntryPatches` 合成，每个未禁用且其包声明 `dsh.client.platform === 'web'` 的行成为一行，带上该声明的 `inject` 与 `immediately`；`bundleRoster(bundles)` 对任意 bundle 列表做同样的事。没有任何东西从 bundle 拷贝出来，bundle 一改下次跑测试就能看见。`webApp.closure(names)` 保留点名的行及其传递注入的全部行（即按 bundle 组合方式起这些插件所需的行），`webApp.pick(names)` 与 `webApp.without(names)` 手工裁剪，三者都对未知名字抛错，`ClientRoster.of(rows)` 内联构造一份。`remoteDefaultResponses` 是 roster 在没有 session、没有 workspace、默认设置下启动时恰好会打的那些 Remote 端点的默认响应；测试用 `mock.load(table)` 在其上叠加自己的 `RemoteTable`，任何没有规则的调用都会在 `dispose()` 时经 `mock.assertNoUnmatched()` 让测试失败。`mount` 要求 roster 提供 `uiRenderer`；否则 `start` 响亮失败而不是返回一个空容器。`client.connection` 是 roster 的 Connection 服务（没有任何 `Context` 增强声明它），`connectTimeoutMs` 限定等就绪的时长，超时消息列出 mock log。`reload(name)` 通过共享的 Client Modules 辅助函数重建一个 Loader entry（先拆 registry，再 `entry.refresh()`）；每个客户端都保留自己的模块系统和绑定实例的 Connection 替换，因此启动与重载可以重叠而无需改写页面全局变量。`unload(name)` 移除 entry 并等待插件清理完成，`flush()` 在 `act` 内让 React 落定。jsdom 既没有 `EventSource`（client-hmr 在 apply 时打开一个）也没有 `ResizeObserver`（布局组件挂载时观察尺寸），所以 `start` 对缺失的全局惰性桩做引用计数，`dispose` 只移除它装的那些——这是 jsdom 的缺口，不是客户端身份通道。每个 roster 里的 `@deepseek-ai/dsh-api-remotes` 行都会被去掉：它生成的 Remote 客户端只存在于构建后的 `lib/`，而 `remote.<ns>` 正是本档要替掉的东西。`start` 改为给 roster 注入的每个 `remote.<ns>` 服务（加上此刻 mock 登记过规则的命名空间；之后才首次登记的命名空间没有代理）提供一个无契约代理；`ctx.remote.<ns>.<method>(...args)` 变成对端点 `<ns>/<method>` 的调用，携带位置参数，mock 登记了 `stream()` 脚本的走流、否则走一元，并沿用生成客户端的结果折叠（载体抛错折成 `gateway/internal`，中止折成 `gateway/cancelled`）。没有规则的端点照样发出，所以 mock 会记下它、`dispose()` 让测试失败。
+`webApp` 是 `web` profile 的浏览器 roster，首次 import 装配入口时从它的 bundle（先 `dsh-base`、再 `dsh-web-app`）按启动器的方式现读，只是匹配不到任何行的补丁在这里抛错、启动器只警告：每个 bundle 的 `dsh.bundle.patch` 列表用 include 插件的 YAML 方言解析、用它的 `applyEntryPatches` 合成，每个未禁用且其包声明 `dsh.client.platform === 'web'` 的行成为一行，带上该声明的 `inject` 与 `immediately`；`bundleRoster(bundles, anchor, disabledContext)` 接受显式 Loader 求值作用域来处理条件 `disabled` 标记；未提供作用域时拒绝浏览器表达式。`webApp` 仅提供 Web profile 名称，不提供业务 Host 服务。没有任何东西从 bundle 拷贝出来，bundle 一改下次跑测试就能看见。`webApp.closure(names)` 保留点名的行及其传递注入的全部行（即按 bundle 组合方式起这些插件所需的行），`webApp.pick(names)` 与 `webApp.without(names)` 手工裁剪，三者都对未知名字抛错，`ClientRoster.of(rows)` 内联构造一份。`remoteDefaultResponses` 是 roster 在没有 session、没有 workspace、默认设置下启动时恰好会打的那些 Remote 端点的默认响应；测试用 `mock.load(table)` 在其上叠加自己的 `RemoteTable`，任何没有规则的调用都会在 `dispose()` 时经 `mock.assertNoUnmatched()` 让测试失败。`mount` 要求 roster 提供 `uiRenderer`；否则 `start` 响亮失败而不是返回一个空容器。`client.connection` 是 roster 的 Connection 服务（没有任何 `Context` 增强声明它），`connectTimeoutMs` 限定等就绪的时长，超时消息列出 mock log。`reload(name)` 通过共享的 Client Modules 辅助函数重建一个 Loader entry（先拆 registry，再 `entry.refresh()`）；每个客户端都保留自己的模块系统和绑定实例的 Connection 替换，因此启动与重载可以重叠而无需改写页面全局变量。`unload(name)` 移除 entry 并等待插件清理完成，`flush()` 在 `act` 内让 React 落定。jsdom 既没有 `EventSource`（client-hmr 在 apply 时打开一个）也没有 `ResizeObserver` 和 `document.fonts` 事件目标（布局组件挂载时观察尺寸与字体加载），所以 `start` 对缺失的全局惰性桩做引用计数，`dispose` 只移除它装的那些——这是 jsdom 的缺口，不是客户端身份通道。每个 roster 里的 `@deepseek-ai/dsh-api-remotes` 行都会被去掉：它生成的 Remote 客户端只存在于构建后的 `lib/`，而 `remote.<ns>` 正是本档要替掉的东西。自行挂载其生成 contribution 的 `@deepseek-ai/dsh-api-remote-access` 行同样会被去掉，`start` 改为安装 `allowAllAccessPlugin`；计划中为这两行之一提供的 `provide` 项会被拒绝。`start` 改为给 roster 注入的每个 `remote.<ns>` 服务（加上此刻 mock 登记过规则的命名空间；之后才首次登记的命名空间没有代理）提供一个无契约代理；`ctx.remote.<ns>.<method>(...args)` 变成对端点 `<ns>/<method>` 的调用，携带位置参数，mock 登记了 `stream()` 脚本的走流、否则走一元，并沿用生成客户端的结果折叠（载体抛错折成 `gateway/internal`，中止折成 `gateway/cancelled`）。没有规则的端点照样发出，所以 mock 会记下它、`dispose()` 让测试失败。
 
 ### 何时使用
 
@@ -111,7 +117,7 @@ test('registers into the sidebar', async ({ remote, start }) => {
 
 ### 设计
 
-测试台不复制生产逻辑：它挂载生产 `SlotRegistry`、生产渲染器与 `UiSession` 适配器。`TestSessions` 与 `TestWorkspaces` 实现功能通过 Cordis 消费的 owner 接口，每个 fixture Session 实现 `SessionFace`，`stubSettingsScope` 实现 `SettingsScope`。`UiSession` 从这些控制器绑定派生标准渲染器数据源。未 stub 的 `ISession` 行为会携缺失方法名失败。
+测试台不复制生产逻辑：它挂载生产 `SlotRegistry`、生产渲染器与 `UiSession` 适配器。`TestSessions` 与 `TestWorkspaces` 实现功能通过 Cordis 消费的 owner 接口，每个 fixture Session 实现 `SessionFace`，`stubConfigForm` 实现 `ConfigForm`。`UiSession` 从这些控制器绑定派生标准渲染器数据源。未 stub 的 `ISession` 行为会携缺失方法名失败。
 
 ### 源码地图
 
@@ -121,9 +127,10 @@ test('registers into the sidebar', async ({ remote, start }) => {
 | [`src/sessions.ts`](src/sessions.ts) + [`src/workspaces.ts`](src/workspaces.ts) | `ISessions`/`IWorkspaces` 测试替身与 `FixtureSession` 行为桩 |
 | [`src/fixtures.ts`](src/fixtures.ts) | 普通 fixture 构造器：会话快照、workspace 列表状态 |
 | [`src/snapshot.ts`](src/snapshot.ts) | DOM 快照序列化器（类名哈希折叠、`<svg>` 指纹） |
+| [`src/access.ts`](src/access.ts) | `allowAllAccess` props 与 `allowAllAccessPlugin`：remote-access Client 行的全允许替身 |
 | [`src/remote.ts`](src/remote.ts) | 用于 host RPC 的 `TestRemote` 替身、`RemoteError` 值转出 |
 | [`src/translate.ts`](src/translate.ts) + [`src/locale-env.ts`](src/locale-env.ts) | 翻译与固定浏览器语言测试辅助 |
-| [`src/settings-scope.ts`](src/settings-scope.ts) | 带测试驱动发布与写入 spy 的 `stubSettingsScope` |
+| [`src/config-form.ts`](src/config-form.ts) | 带测试驱动发布与写入 spy 的 `stubConfigForm` |
 | [`src/assembly/roster.ts`](src/assembly/roster.ts) | `ClientRosterRow`、`ClientRoster`（`of`/`closure`/`pick`/`without`）、它所标注的 `AssemblyPlan`，以及 `graphFromRoster` |
 | [`src/assembly/modules.ts`](src/assembly/modules.ts) | 源码 `/client` 导入及替换，通过生产模块 facade 的待注册工厂队列登记 |
 | [`src/assembly/test-client.ts`](src/assembly/test-client.ts) | `TestClient`：绑定实例的 Connection、共享 jsdom 桩、`bootClient`、挂载、等就绪、`reload`/`unload`/`dispose` |
@@ -131,7 +138,6 @@ test('registers into the sidebar', async ({ remote, start }) => {
 | [`src/assembly/remote-default-responses.ts`](src/assembly/remote-default-responses.ts) | `remoteDefaultResponses`：roster 启动期 Remote 端点的默认响应 |
 | [`src/assembly/remote-proxies.ts`](src/assembly/remote-proxies.ts) | 经 Connection 的无契约 `remote.<ns>` 代理：`remoteNamespacesOf`、`remoteProxiesPlugin` |
 | [`src/assembly/bundle-roster.ts`](src/assembly/bundle-roster.ts) | `bundleRoster` 与 `webApp`：用 include 插件自己的 schema 与补丁应用从 bundle 补丁文件读出浏览器 roster |
-| — | 不发布运行时不变式伴生入口；本测试支持包不拥有生产事件流或可变数据，而是围绕测试替身组装生产 SlotRegistry 与渲染器。所挂载的生产包拥有各自的不变式，本包行为由本包测试检验。 |
 
 ### 生命周期
 

package/lib/index.js

@@ -232,6 +232,7 @@ function workspaceSnapshot() {
 	return {
 		items: [],
 		archivedSessionIds: [],
+		pinnedSessionIds: [],
 		state: "idle",
 		phase: "ready",
 		error: null
@@ -482,8 +483,7 @@ var TestSessions = class {
 			ids: [],
 			byId: {},
 			phase: "ready",
-			subagentsByParent: {},
-			jobsBySession: {}
+			projectionsBySession: {}
 		});
 		rootCtx.effect(() => async () => {
 			this.closed = true;
@@ -557,9 +557,20 @@ var TestSessions = class {
 	async setProjection(id, key, value) {
 		const record = this.require(id);
 		record.projections.set(key, value);
+		const values = {
+			...record.summary.projectionValues ?? {},
+			[key]: value
+		};
+		record.summary = {
+			...record.summary,
+			projectionValues: values
+		};
 		await this.stabilize(() => {
 			record.session.projections.set(key, value);
 			this.generations.get(id)?.session.projections.set(key, value);
+			this.list.update((draft) => {
+				draft.byId[id] = record.summary;
+			});
 		});
 	}
 	/**
@@ -743,27 +754,20 @@ var TestSessions = class {
 	subagentAddress(id) {
 		const retained = this.addresses.get(id);
 		if (retained !== void 0) return retained;
-		for (const [parentSessionId, catalog] of Object.entries(this.list.getSnapshot().subagentsByParent)) {
-			const child = catalog.entries.find((entry) => entry.kind === "child" && entry.id === id);
-			if (child?.kind === "child") return {
+		for (const [parentSessionId, projections] of Object.entries(this.list.getSnapshot().projectionsBySession)) {
+			const child = projections.values.subagentCatalog?.find((entry) => entry.id === id);
+			if (child !== void 0 && child.mode !== "external") return {
 				parentSessionId,
 				childSessionId: id,
 				mode: child.mode
 			};
 		}
 	}
-	/** Record catalog consumption; fixture callers drive snapshots explicitly. */
-	setSubagentCatalogOpen(parentSessionId, open) {
+	/** Record a projection refresh; fixture callers drive snapshots explicitly. */
+	refreshProjections(sessionId) {
 		this.calls.push({
-			method: "setSubagentCatalogOpen",
-			args: [parentSessionId, open]
-		});
-	}
-	/** Record a catalog refresh; fixture callers drive snapshots explicitly. */
-	refreshSubagents(parentSessionId) {
-		this.calls.push({
-			method: "refreshSubagents",
-			args: [parentSessionId]
+			method: "refreshProjections",
+			args: [sessionId]
 		});
 		return Promise.resolve();
 	}
@@ -1025,6 +1029,18 @@ var TestWorkspaces = class {
 		};
 	}
 	/**
+	* Initialize the default Workspace through a test stub; defaults to an ineligible first use.
+	* @param signal - caller lifetime.
+	* @returns the stubbed Workspace, or undefined when initialization is ineligible.
+	*/
+	async initializeDefault(signal) {
+		this.calls.push({
+			method: "initializeDefault",
+			args: [signal]
+		});
+		return await this.stubs.get("initializeDefault")?.(signal);
+	}
+	/**
 	* Rename a Workspace (recorded). The default echoes a minimal view.
 	* @param workspaceId - target workspace.
 	* @param title - new title.
@@ -1130,29 +1146,108 @@ var TestWorkspaces = class {
 			draft.archivedSessionIds = draft.archivedSessionIds.filter((id) => id !== sessionId);
 		});
 	}
+	/**
+	* Pin a session (recorded). The default mirrors the production face's
+	* observable effect: the id leads the list state's pin set.
+	* @param sessionId - session to pin.
+	*/
+	async pinSession(sessionId) {
+		this.calls.push({
+			method: "pinSession",
+			args: [sessionId]
+		});
+		const stub = this.stubs.get("pinSession");
+		if (stub !== void 0) {
+			await stub(sessionId);
+			return;
+		}
+		await this.update((draft) => {
+			draft.pinnedSessionIds = [sessionId, ...draft.pinnedSessionIds.filter((id) => id !== sessionId)];
+		});
+	}
+	/**
+	* Unpin a session (recorded). The default mirrors the production face's
+	* observable effect: the id leaves the list state's pin set.
+	* @param sessionId - session to unpin.
+	*/
+	async unpinSession(sessionId) {
+		this.calls.push({
+			method: "unpinSession",
+			args: [sessionId]
+		});
+		const stub = this.stubs.get("unpinSession");
+		if (stub !== void 0) {
+			await stub(sessionId);
+			return;
+		}
+		await this.update((draft) => {
+			draft.pinnedSessionIds = draft.pinnedSessionIds.filter((id) => id !== sessionId);
+		});
+	}
+};
+//#endregion
+//#region lib/types/access.js
+/**
+* Allow-all access for client specs. Production pages receive the
+* `remoteAccess` Client service and the global-resource `useRemoteAccess` Hook
+* from the remote-access Client plugin, and the Session and Workspace access
+* Hooks (Session-scope `useAccess`, `useSessionAccess`, `useWorkspaceAccess`)
+* from ui-session and ui-workspace over that service. The test runtimes
+* install an allow-all service and `useRemoteAccess` Hook instead, and
+* hand-built component props spread {@link allowAllAccess}; a spec of a
+* refused path overrides one Hook.
+* @module @deepseek-ai/dsh-client-test-runtime/src/access
+*/
+/** Access Hooks that allow every action on every resource, for hand-built component props. */
+const allowAllAccess = {
+	useRemoteAccess: () => true,
+	useAccess: () => true,
+	useSessionAccess: () => true,
+	useWorkspaceAccess: () => true
+};
+const ALLOWED = {
+	getSnapshot: () => true,
+	subscribe: () => () => {}
+};
+const allowed = () => ALLOWED;
+/** The `remoteAccess` Client service answering true for every resource. */
+const allowAllRemoteAccess = { source: allowed };
+/**
+* Plugin standing in for the remote-access Client row: it provides an
+* allow-all `remoteAccess` service, so ui-session and ui-workspace publish
+* their resource Hooks over it, and the allow-all `useRemoteAccess` Hook on
+* the global resource.
+*/
+const allowAllAccessPlugin = {
+	name: "client-test-runtime:allow-all-access",
+	inject: ["slots"],
+	/** @param ctx - plugin Context with the Slot registry injected. */
+	apply(ctx) {
+		ctx.provide("remoteAccess", allowAllRemoteAccess);
+		ctx.slots.provideRoot({ keyedHooks: { remoteAccess: allowed } });
+	}
 };
 //#endregion
-//#region lib/types/settings-scope.js
-/** Test double for the client settings-scope seam. */
+//#region lib/types/config-form.js
+/** Test doubles for settings transport. */
 /**
-* Build an in-memory settings scope for service specs: starts in the host
-* loading state, records writes, and lets the test publish Host acceptances.
+* Build an in-memory settings scope for service specs: starts in the loading
+* state, records writes, and lets the test publish Host acceptances.
 * @returns the stub handle.
 */
-function stubSettingsScope() {
+function stubConfigForm() {
 	let snapshot = {
 		status: "loading",
 		value: void 0,
 		base: void 0,
 		user: void 0,
 		revision: void 0,
-		writable: false,
-		mode: "host"
+		writable: false
 	};
 	const listeners = /* @__PURE__ */ new Set();
-	const set = vi.fn(() => Promise.resolve());
-	const mutate = vi.fn(() => Promise.resolve());
-	const unset = vi.fn(() => Promise.resolve());
+	const set = vi.fn(() => Promise.resolve(true));
+	const mutate = vi.fn(() => Promise.resolve(true));
+	const unset = vi.fn(() => Promise.resolve(true));
 	return {
 		scope: {
 			getSnapshot: () => snapshot,
@@ -1373,8 +1468,6 @@ var SlotTestRuntime = class SlotTestRuntime {
 	workspaces;
 	/** Test-owned panel selection used by the framework's usePanelInfo hook. */
 	panelInfo = createSnapshotStore({ activePanelId: null });
-	/** Test-owned toolbar portal hosts used by the framework's useToolbarHosts hook (null = no toolbar). */
-	toolbarHosts = createSnapshotStore(null);
 	/** Mutable file-upload stub; replace `upload` in suites that exercise the capability. */
 	fileUpload;
 	stabilizer = async (fn) => {
@@ -1392,7 +1485,6 @@ var SlotTestRuntime = class SlotTestRuntime {
 	autoRootView;
 	disposeWorkspaceSource;
 	disposePanelInfoSource;
-	disposeToolbarHostsSource;
 	constructor(ctx, slots) {
 		this.ctx = ctx;
 		this.slots = slots;
@@ -1406,7 +1498,6 @@ var SlotTestRuntime = class SlotTestRuntime {
 		ctx.provide("fileUpload", this.fileUpload);
 		this.disposeWorkspaceSource = slots.provideRoot({ hooks: { workspaces: this.workspaces.list } });
 		this.disposePanelInfoSource = slots.provideRoot({ hooks: { panelInfo: this.panelInfo } });
-		this.disposeToolbarHostsSource = slots.provideRoot({ hooks: { toolbarHosts: this.toolbarHosts } });
 		const renderer = createSlotRenderer();
 		slots.install({ renderRoot: (host, ownerProps) => {
 			this.host = host;
@@ -1423,6 +1514,7 @@ var SlotTestRuntime = class SlotTestRuntime {
 		const ctx = new Context();
 		await ctx.plugin(SlotRegistry).await();
 		const runtime = new SlotTestRuntime(ctx, ctx.get("slots"));
+		await ctx.plugin(allowAllAccessPlugin).await();
 		await ctx.plugin({
 			inject: [...inject],
 			apply
@@ -1462,7 +1554,6 @@ var SlotTestRuntime = class SlotTestRuntime {
 	/** Release the default panel hook before mounting the production Layout owner. */
 	releasePanelInfoSource() {
 		this.disposePanelInfoSource();
-		this.disposeToolbarHostsSource();
 	}
 	/**
 	* Render the root slot tree through the ctx-level entry (the shell's own
@@ -1588,11 +1679,10 @@ var SlotTestRuntime = class SlotTestRuntime {
 		this.root.release();
 		this.disposeWorkspaceSource();
 		this.disposePanelInfoSource();
-		this.disposeToolbarHostsSource();
 		await this.sessions.disposeScopes();
 		await this.stabilizer(() => this.ctx.fiber.dispose());
 		localStorage.clear();
 	}
 };
 //#endregion
-export { FixtureSession, RemoteError, SlotTestRuntime, TestRemote, TestRoot, TestSessions, TestWorkspaces, bindSnapshotSelector, chatSnapshot, conversationSnapshot, createSlotRenderer, domSnapshotSerializer, makeTranslate, registerDomSnapshotSerializer, sessionSnapshot, stubSettingsScope, usePinnedBrowserLanguages, workspaceSnapshot };
+export { FixtureSession, RemoteError, SlotTestRuntime, TestRemote, TestRoot, TestSessions, TestWorkspaces, allowAllAccess, allowAllAccessPlugin, bindSnapshotSelector, chatSnapshot, conversationSnapshot, createSlotRenderer, domSnapshotSerializer, makeTranslate, registerDomSnapshotSerializer, sessionSnapshot, stubConfigForm, usePinnedBrowserLanguages, workspaceSnapshot };

package/lib/types/access.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Allow-all access for client specs. Production pages receive the
+ * `remoteAccess` Client service and the global-resource `useRemoteAccess` Hook
+ * from the remote-access Client plugin, and the Session and Workspace access
+ * Hooks (Session-scope `useAccess`, `useSessionAccess`, `useWorkspaceAccess`)
+ * from ui-session and ui-workspace over that service. The test runtimes
+ * install an allow-all service and `useRemoteAccess` Hook instead, and
+ * hand-built component props spread {@link allowAllAccess}; a spec of a
+ * refused path overrides one Hook.
+ * @module @deepseek-ai/dsh-client-test-runtime/src/access
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { GlobalStandardProps, SessionStandardProps } from '@deepseek-ai/dsh-client-ui-slots';
+/** The access Hooks every Slot component receives. */
+export type AccessStandardProps = Pick<GlobalStandardProps, 'useRemoteAccess' | 'useSessionAccess' | 'useWorkspaceAccess'> & Pick<SessionStandardProps, 'useAccess'>;
+/** Access Hooks that allow every action on every resource, for hand-built component props. */
+export declare const allowAllAccess: AccessStandardProps;
+/**
+ * Plugin standing in for the remote-access Client row: it provides an
+ * allow-all `remoteAccess` service, so ui-session and ui-workspace publish
+ * their resource Hooks over it, and the allow-all `useRemoteAccess` Hook on
+ * the global resource.
+ */
+export declare const allowAllAccessPlugin: {
+    name: string;
+    inject: string[];
+    /** @param ctx - plugin Context with the Slot registry injected. */
+    apply(ctx: Context): void;
+};
+//# sourceMappingURL=access.d.ts.map

package/lib/types/assembly/bundle-roster.d.ts

@@ -5,11 +5,12 @@ export declare const WEB_PROFILE_BUNDLES: readonly string[];
  * Compose the browser roster of `bundles`, applied in order.
  * @param bundles - bundle package names in application order.
  * @param anchor - file whose package resolution locates the bundles; default this package.
+ * @param disabledContext - optional Loader evaluation scope for trusted `disabled` expressions.
  * @returns the roster in composition order, one row per package.
  * @throws {Error} when a bundle, its patch file, or an enabled row's package does not resolve, when the patch list
- * is not a list or does not apply as written, or when a browser row's `disabled` is a `!!js` expression.
+ * is not a list or does not apply as written, or when a browser row has an unevaluated `disabled` expression.
  */
-export declare function bundleRoster(bundles: readonly string[], anchor?: string): ClientRoster;
-/** The `web` profile's browser roster, composed from its bundles at import. */
+export declare function bundleRoster(bundles: readonly string[], anchor?: string, disabledContext?: object): ClientRoster;
+/** The `web` profile's browser roster, composed with its profile name and no business Host services. */
 export declare const webApp: ClientRoster;
 //# sourceMappingURL=bundle-roster.d.ts.map

package/lib/types/assembly/roster.d.ts

@@ -18,10 +18,10 @@ export interface ClientRosterRow {
 }
 /**
  * Synthesize the raw `WebBootGraph` for `rows`: one `application` batch
- * holding every row, `rev: 'local'`, placeholder `/plugins/<name>/client.js`
- * URLs, since every module is seeded in process and never fetched. Validation
- * stays with the production `parseBootManifest` inside the module system:
- * duplicate names and an empty roster are rejected there, not here.
+ * holding every row, `rev: 'local'`, placeholder `plugins/<name>/client.js`
+ * references, since every module is seeded in process and never fetched.
+ * Validation stays with the production `parseBootManifest` inside the module
+ * system: duplicate names and an empty roster are rejected there, not here.
  * @param rows - roster rows in composition order.
  * @returns the unparsed graph, as `createClientModuleSystem` consumes it.
  */

package/lib/types/assembly/test-client.d.ts

@@ -38,8 +38,10 @@ export declare class TestClient {
      * dropped from the roster: its generated Remote clients exist only in built
      * `lib/`, and the `remote.<ns>` services the roster injects (plus the
      * namespaces the mock has rules for at this point) are provided as
-     * contract-free proxies over the same Connection instead; a `provide` entry
-     * for that row is refused. On any failure the context is disposed, an owned
+     * contract-free proxies over the same Connection instead. The
+     * `@deepseek-ai/dsh-api-remote-access` row, which mounts its own generated
+     * contribution, is dropped too, and allow-all access Hooks replace it. A
+     * `provide` entry for either row is refused. On any failure the context is disposed, an owned
      * mount removed, and this client's hold on the shims released before the
      * original error is rethrown.
      * @param plan - roster and annotations.

package/lib/types/config-form.d.ts

@@ -0,0 +1,29 @@
+/** Test doubles for settings transport. */
+import { vi } from 'vitest';
+import type { ConfigForm, ConfigFormSnapshot } from '@deepseek-ai/dsh-client-ui-settings/client';
+/** Handle over one stubbed scope: the scope, its write spy, and publication controls. */
+export interface StubConfigForm<T> {
+    /** The scope face handed to the service under test. */
+    scope: ConfigForm<T>;
+    /** Spy behind `scope.set`; resolves immediately. */
+    set: ReturnType<typeof vi.fn>;
+    /** Spy behind `scope.mutate`; resolves immediately. */
+    mutate: ReturnType<typeof vi.fn<ConfigForm<T>['mutate']>>;
+    /** Spy behind `scope.unset`; resolves immediately. */
+    unset: ReturnType<typeof vi.fn>;
+    /** @returns how many listeners are currently subscribed (disposal assertions). */
+    listenerCount(): number;
+    /**
+     * Replace part of the snapshot and notify subscribers, as a Host
+     * acceptance would.
+     * @param next - snapshot fields to replace.
+     */
+    publish(next: Partial<ConfigFormSnapshot<T>>): void;
+}
+/**
+ * Build an in-memory settings scope for service specs: starts in the loading
+ * state, records writes, and lets the test publish Host acceptances.
+ * @returns the stub handle.
+ */
+export declare function stubConfigForm<T>(): StubConfigForm<T>;
+//# sourceMappingURL=config-form.d.ts.map

package/lib/types/index.d.ts

@@ -18,7 +18,7 @@ import type { BoundFunctions } from '@testing-library/dom';
 import { SlotRegistry } from '@deepseek-ai/dsh-client-ui-renderer/client';
 import type { SessionReference } from '@deepseek-ai/dsh-api-session-controller/client';
 import type { SessionId } from '@deepseek-ai/dsh-session/types';
-import type { PanelInfo, ToolbarHosts } from '@deepseek-ai/dsh-client-ui-layout/client';
+import type { PanelInfo } from '@deepseek-ai/dsh-client-ui-layout/client';
 import type { ChildrenDecl, ComposedProps, HostObservable, OwnerOf, RenderOpts, SlotComponent, SlotMap, SlotRenderer, SlotFactoryMap, SnapshotSelectorHook, StoredFactory, StoreInstanceLike } from '@deepseek-ai/dsh-client-ui-slots';
 import { TestRemote } from './remote.ts';
 import { TestSessions } from './sessions.ts';
@@ -27,13 +27,15 @@ import type { Stabilizer } from './fixtures.ts';
 export type { UseSession } from '@deepseek-ai/dsh-client-ui-session/client';
 export { domSnapshotSerializer, registerDomSnapshotSerializer } from './snapshot.ts';
 export { FixtureSession, TestSessions } from './sessions.ts';
-export { stubSettingsScope } from './settings-scope.ts';
-export type { StubSettingsScope } from './settings-scope.ts';
+export { stubConfigForm } from './config-form.ts';
+export type { StubConfigForm } from './config-form.ts';
 export { TestWorkspaces } from './workspaces.ts';
 export { RemoteError, TestRemote } from './remote.ts';
 export { chatSnapshot, conversationSnapshot, sessionSnapshot, workspaceSnapshot, } from './fixtures.ts';
 export type { FixtureSnapshot, SessionBehaviorOverrides, SessionFixture, SessionFixtureSnapshot, Stabilizer, } from './fixtures.ts';
 export { makeTranslate } from './translate.ts';
+export { allowAllAccess, allowAllAccessPlugin } from './access.ts';
+export type { AccessStandardProps } from './access.ts';
 export { usePinnedBrowserLanguages } from './locale-env.ts';
 /**
  * Bind an observable source to the production renderer's selector hook.
@@ -136,8 +138,6 @@ export declare class SlotTestRuntime {
     readonly workspaces: TestWorkspaces;
     /** Test-owned panel selection used by the framework's usePanelInfo hook. */
     readonly panelInfo: import("@deepseek-ai/dsh-client-store").SnapshotStore<PanelInfo>;
-    /** Test-owned toolbar portal hosts used by the framework's useToolbarHosts hook (null = no toolbar). */
-    readonly toolbarHosts: import("@deepseek-ai/dsh-client-store").SnapshotStore<ToolbarHosts | null>;
     /** Mutable file-upload stub; replace `upload` in suites that exercise the capability. */
     readonly fileUpload: TestFileUpload;
     private readonly stabilizer;
@@ -151,7 +151,6 @@ export declare class SlotTestRuntime {
     private autoRootView;
     private readonly disposeWorkspaceSource;
     private readonly disposePanelInfoSource;
-    private readonly disposeToolbarHostsSource;
     private constructor();
     /**
      * Assemble a runtime: real Context, mounted SlotRegistry, installed

package/lib/types/invariant.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Package-owned invariant companion for `@deepseek-ai/dsh-client-test-runtime`.
+ * @module @deepseek-ai/dsh-client-test-runtime/invariant
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/** Cordis companion plugin name. */
+export declare const name = "client-test-runtime-invariant";
+/** Service required before the companion can reserve package ownership. */
+export declare const inject: string[];
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Cordis context carrying the invariant service.
+ * @returns the installed registration's disposer after setup succeeds.
+ */
+export declare const apply: (ctx: Context) => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/lib/types/sessions.d.ts

@@ -120,7 +120,7 @@ export declare class TestSessions implements ISessions {
     private closed;
     /** Calls observed on the service-level face, newest last. */
     readonly calls: {
-        method: 'create' | 'setSubagentCatalogOpen' | 'refreshSubagents' | 'refresh' | 'search' | 'fork';
+        method: 'create' | 'refreshProjections' | 'refresh' | 'search' | 'fork';
         args: unknown[];
     }[];
     /** The wire schema's `session.search` result bound (production parity). */
@@ -229,10 +229,8 @@ export declare class TestSessions implements ISessions {
     create(opts?: Parameters<ISessions['create']>[0]): Promise<SessionId>;
     /** Resolve a retained or catalog-derived address independently of a view. */
     subagentAddress(id: SessionId): SubagentAddress | undefined;
-    /** Record catalog consumption; fixture callers drive snapshots explicitly. */
-    setSubagentCatalogOpen(parentSessionId: SessionId, open: boolean): void;
-    /** Record a catalog refresh; fixture callers drive snapshots explicitly. */
-    refreshSubagents(parentSessionId: SessionId): Promise<void>;
+    /** Record a projection refresh; fixture callers drive snapshots explicitly. */
+    refreshProjections(sessionId: SessionId): Promise<void>;
     /** Record a list refresh; fixture callers publish list state explicitly. */
     refresh(): Promise<void>;
     /**
@@ -258,11 +256,7 @@ export declare class TestSessions implements ISessions {
      * @param opts - source session id, optional cut anchor, and client title policy.
      * @returns the source id (no child record is created).
      */
-    fork(opts: {
-        sessionId: SessionId;
-        atSeq?: number;
-        increaseTitle?: boolean;
-    }): Promise<SessionId>;
+    fork(opts: Parameters<ISessions['fork']>[0]): Promise<SessionId>;
     /**
      * The session face of a fixture (typed view for assertions; fixture
      * behavior methods are grafted onto it).

package/lib/types/settings-scope.d.ts

@@ -1,14 +1,12 @@
 /** Test double for the client settings-scope seam. */
 import { vi } from 'vitest';
-import type { SettingsScope, SettingsScopeSnapshot } from '@deepseek-ai/dsh-client-ui-settings/client';
+import type { SettingsScope, SettingsScopeSnapshot } from '@deepseek-ai/dsh-client-runtime/client';
 /** Handle over one stubbed scope: the scope, its write spy, and publication controls. */
 export interface StubSettingsScope<T> {
     /** The scope face handed to the service under test. */
     scope: SettingsScope<T>;
     /** Spy behind `scope.set`; resolves immediately. */
     set: ReturnType<typeof vi.fn>;
-    /** Spy behind `scope.mutate`; resolves immediately. */
-    mutate: ReturnType<typeof vi.fn>;
     /** Spy behind `scope.unset`; resolves immediately. */
     unset: ReturnType<typeof vi.fn>;
     /** @returns how many listeners are currently subscribed (disposal assertions). */

package/lib/types/workspaces.d.ts

@@ -52,6 +52,12 @@ export declare class TestWorkspaces implements IWorkspaces {
     create(input: {
         path: string;
     }): Promise<WorkspaceView>;
+    /**
+     * Initialize the default Workspace through a test stub; defaults to an ineligible first use.
+     * @param signal - caller lifetime.
+     * @returns the stubbed Workspace, or undefined when initialization is ineligible.
+     */
+    initializeDefault(signal?: AbortSignal): Promise<WorkspaceView | undefined>;
     /**
      * Rename a Workspace (recorded). The default echoes a minimal view.
      * @param workspaceId - target workspace.
@@ -90,6 +96,18 @@ export declare class TestWorkspaces implements IWorkspaces {
      * @param sessionId - session to unarchive.
      */
     unarchiveSession(sessionId: SessionId): Promise<void>;
+    /**
+     * Pin a session (recorded). The default mirrors the production face's
+     * observable effect: the id leads the list state's pin set.
+     * @param sessionId - session to pin.
+     */
+    pinSession(sessionId: SessionId): Promise<void>;
+    /**
+     * Unpin a session (recorded). The default mirrors the production face's
+     * observable effect: the id leaves the list state's pin set.
+     * @param sessionId - session to unpin.
+     */
+    unpinSession(sessionId: SessionId): Promise<void>;
 }
 export {};
 //# sourceMappingURL=workspaces.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@crazx/dsh-client-test-runtime",
   "description": "Browser test runtimes: a jsdom slot bench with test-owned Session and Workspace doubles, and a whole-client tier that boots the web roster through the production bootClient over an endpoint-named Remote mock",
-  "version": "0.1.6-alpha.2.zw.2",
+  "version": "0.2.1-rc.2.zw.7",
   "publishConfig": {
     "access": "public"
   },
@@ -24,68 +24,68 @@
   "license": "MIT",
   "dependencies": {
     "@testing-library/dom": "^10.4.1",
-    "@testing-library/react": "^16.3.2",
-    "js-yaml": "^4.2.0",
-    "vitest": "^4.1.8"
+    "@testing-library/react": "^16.3.3",
+    "js-yaml": "^4.3.2",
+    "vitest": "^4.1.11"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/cordis-plugin-include": "^1.0.7",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-api-gateway": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-api-session-controller": "0.1.6-alpha.2.zw.2",
-    "@deepseek-ai/dsh-api-workspace-controller": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-attachment": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-connection": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-hmr": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-modules": "0.1.6-alpha.2.zw.2",
-    "@deepseek-ai/dsh-client-store": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-chat": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.6-alpha.2.zw.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-session": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-web": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-remote-mock": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-subagent": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.6-alpha.2",
+    "@deepseek-ai/cordis": "~4.0.5",
+    "@deepseek-ai/cordis-plugin-include": "~1.0.10",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6",
+    "@deepseek-ai/dsh-api-gateway": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-api-session-controller": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-api-workspace-controller": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-hmr": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-modules": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-store": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-chat": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-session": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-web": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-remote-mock": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.1-rc.2",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/cordis-plugin-include": "^1.0.7",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-api-gateway": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-api-remotes": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-api-session-controller": "npm:@crazx/dsh-api-session-controller@0.1.6-alpha.2.zw.2",
-    "@deepseek-ai/dsh-api-workspace-controller": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-attachment": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-base": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-connection": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-hmr": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-locale": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-modules": "npm:@crazx/dsh-client-modules@0.1.6-alpha.2.zw.2",
-    "@deepseek-ai/dsh-client-store": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-chat": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "npm:@crazx/dsh-client-ui-conversation@0.1.6-alpha.2.zw.2",
-    "@deepseek-ai/dsh-client-ui-layout": "npm:@crazx/dsh-client-ui-layout@0.1.6-alpha.2.zw.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-session": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-client-web": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-remote-mock": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-settings": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-subagent": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.6-alpha.2",
-    "@deepseek-ai/dsh-web-app": "^0.1.6-alpha.2",
+    "@deepseek-ai/cordis": "~4.0.5",
+    "@deepseek-ai/cordis-plugin-include": "~1.0.10",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.6",
+    "@deepseek-ai/dsh-api-gateway": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-api-remote-access": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-api-remotes": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-api-session-controller": "npm:@crazx/dsh-api-session-controller@0.2.1-rc.2.zw.7",
+    "@deepseek-ai/dsh-api-workspace-controller": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-base": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-hmr": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-modules": "npm:@crazx/dsh-client-modules@0.2.1-rc.2.zw.7",
+    "@deepseek-ai/dsh-client-store": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-chat": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-layout": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-session": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "npm:@crazx/dsh-client-ui-workspace@0.2.1-rc.2.zw.7",
+    "@deepseek-ai/dsh-client-web": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-remote-mock": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-settings": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-web-app": "0.2.1-rc.2",
     "@types/js-yaml": "^4.0.9",
-    "@types/react": "~18.3.1",
-    "@types/react-dom": "~18.3.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
   },

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 DeepSeek
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.