@dsh-workbench/core 0.1.17 → 0.2.0

package/dist/types/modules/panels/model/market.d.ts

@@ -1,8 +1,8 @@
 import type { DshShell } from '@dsh-workbench/shared';
 import type { UnitManifest } from '@dsh-workbench/shared';
 import type { BundleManager } from '../../../shared/api/host/bundle-manager';
-import type { InstalledModule, ProfileModule } from '../../../shared/api/host/installed-module';
-import { type RegistryNotebook } from '../../../shared/api/host/profile-registries';
+import type { InstalledModule, ProfileModule, ProfilePackage } from '../../../shared/api/host/installed-module';
+import type { RegistryNotebook } from '../../../shared/api/host/profile-registries';
 import type { UnitMountDeps } from '@dsh-workbench/shared/host';
 import { type PluginReferences } from './plugin-actions';
 import type { PluginLedger } from './plugin-ledger';
@@ -21,6 +21,7 @@ export declare function createMarketService(options: {
     bundles?: BundleManager | undefined;
     installed?: ((pkg: string) => InstalledModule) | undefined;
     modules?: (() => readonly ProfileModule[]) | undefined;
+    workbench?: ((pkg: string) => ProfilePackage | undefined) | undefined;
     registries?: RegistryNotebook | undefined;
     ledger?: PluginLedger | undefined;
     references?: (() => PluginReferences) | undefined;

package/dist/types/modules/panels/model/plugin-panel.d.ts

@@ -0,0 +1,3 @@
+import type { PanelPluginRef } from './config';
+import type { PluginLedger } from './plugin-ledger';
+export declare function pluginPanelRefs(ledger: PluginLedger): PanelPluginRef[];

package/dist/types/modules/panels/model/prefs.d.ts

@@ -1,10 +1,12 @@
+import type { BoardTarget } from './config';
 import type { PanelsService } from './service';
 export declare const PANELS_PREF_RESOURCE = "panels";
 export interface PanelsPrefAction {
-    readonly action: 'show' | 'hide' | 'enable' | 'disable' | 'move' | 'reset';
+    readonly action: 'show' | 'hide' | 'move' | 'reset' | 'follow';
     readonly id?: string;
     readonly index?: number;
     readonly path?: string;
+    readonly scope?: BoardTarget;
 }
 export declare function parsePanelsPrefAction(payload: unknown): PanelsPrefAction;
 export declare function applyPanelsPref(panels: PanelsService, payload: unknown): {

package/dist/types/modules/panels/model/service.d.ts

@@ -1,11 +1,12 @@
 import type { WorkspaceStore } from '@dsh-workbench/shared/host';
 import type { UnitManifest } from '@dsh-workbench/shared';
-import { type BoardTarget, type PanelEntry, type ScopeBoards } from './config';
+import { type BoardTarget, type PanelEntry, type PanelPluginEntry, type PanelPluginRef, type ScopeBoards } from './config';
 export declare const PANELS_MODULE_ID = "panels";
 export declare const PANELS_FILE = "config.json";
 export declare const RELEASED_FILE = "released.json";
 export interface PanelsService {
     list(workspace: string | null, target?: BoardTarget): PanelEntry[];
+    listPlugins(workspace: string | null, target?: BoardTarget): PanelPluginEntry[];
     boards(workspace: string | null): ScopeBoards;
     isReleased(id: string): boolean;
     release(id: string): void;
@@ -16,11 +17,14 @@ export interface PanelsService {
     hide(id: string, workspace: string | null, target?: BoardTarget): PanelEntry[];
     move(id: string, index: number, workspace: string | null, target?: BoardTarget): PanelEntry[];
     reset(workspace: string | null, target?: BoardTarget): PanelEntry[];
+    follow(workspace: string | null, id?: string): PanelEntry[];
+    changedBy(): ReadonlyMap<string, number>;
 }
 export declare function createPanelsService(options: {
     manifests: () => readonly UnitManifest[];
     store: WorkspaceStore;
     owned?: (() => readonly string[]) | undefined;
+    plugins?: (() => readonly PanelPluginRef[]) | undefined;
     logger?: {
         warn?(message: string): void;
     } | undefined;

package/dist/types/shared/api/bundle-install.d.ts

@@ -26,7 +26,14 @@ export interface BundleInspectionRefused {
     readonly reason: string;
     readonly registries?: readonly BundleRegistry[];
 }
-export type BundleInspection = BundleInspectionAccepted | BundleInspectionRefused;
+export interface BundleInspectionPlugin {
+    readonly status: 'plugin';
+    readonly pkg: string;
+    readonly registry: BundleRegistry;
+    readonly pluginName?: string;
+    readonly version?: string;
+}
+export type BundleInspection = BundleInspectionAccepted | BundleInspectionRefused | BundleInspectionPlugin;
 export interface BundleRegistriesPayload {
     readonly available: boolean;
     readonly registries: BundleRegistries | null;
@@ -100,6 +107,13 @@ export interface ModuleVersion {
     readonly local?: boolean;
     readonly refused?: readonly string[];
 }
+export interface WorkbenchVersion {
+    readonly pkg: string;
+    readonly installed: string;
+    readonly latest?: string;
+    readonly local?: boolean;
+}
 export interface ModuleVersionsPayload {
     readonly modules: readonly ModuleVersion[];
+    readonly workbench?: WorkbenchVersion;
 }

package/dist/types/shared/api/host/__tests__/plugin-catalog.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/__tests__/plugin-login-hint.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/__tests__/plugin-tools.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/bundle-inspect-kind.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/bundle-routes-self.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/installed-module.d.ts

@@ -30,4 +30,14 @@ export interface DeclarationGap {
     readonly problems: readonly string[];
 }
 export declare function declarationGaps(profileDir: string | null): readonly DeclarationGap[] | undefined;
+export declare function declaredPluginCommands(profileDir: string | null): ReadonlyMap<string, ReadonlySet<string>>;
 export declare function readInstalledModule(profileDir: string | null, pkg: string): InstalledModule;
+export declare function isLocalDependencySpec(spec: string): boolean;
+export interface ProfilePackage {
+    readonly pkg: string;
+    readonly version: string;
+    readonly registry?: string;
+    readonly local?: boolean;
+}
+export declare function readProfilePackage(profileDir: string | null, pkg: string): ProfilePackage | undefined;
+export declare function packageVersionAt(packageRoot: string): string | undefined;

package/dist/types/shared/api/host/plugin-catalog.d.ts

@@ -0,0 +1,60 @@
+import type { DshShell } from '@dsh-workbench/shared';
+export interface PluginCommandArg {
+    readonly name: string;
+    readonly type: string;
+    readonly required: boolean;
+    readonly positional: boolean;
+    readonly valueRequired: boolean;
+    readonly choices: readonly string[];
+    readonly defaultValue?: unknown;
+    readonly help: string;
+}
+export interface PluginCommand {
+    readonly plugin: string;
+    readonly name: string;
+    readonly description: string;
+    readonly access: string;
+    readonly domain?: string;
+    readonly args: readonly PluginCommandArg[];
+}
+export interface PluginCommandSet {
+    readonly plugin: string;
+    readonly version: string;
+    readonly commands: readonly PluginCommand[];
+}
+export interface PluginRow {
+    readonly name: string;
+    readonly version: string;
+    readonly commands: readonly string[];
+}
+export interface CommandRow {
+    readonly site: string;
+    readonly name: string;
+    readonly description: string;
+    readonly access: string;
+    readonly args: readonly PluginCommandArg[];
+}
+export interface PluginCatalogSnapshot {
+    readonly ok: boolean;
+    readonly at: number;
+    readonly sets: readonly PluginCommandSet[];
+    readonly problems: readonly string[];
+}
+export interface PluginCatalog {
+    refresh(options?: {
+        readonly force?: boolean;
+    }): Promise<PluginCatalogSnapshot>;
+    snapshot(): PluginCatalogSnapshot;
+}
+export interface PluginCatalogOptions {
+    readonly shell?: DshShell | undefined;
+    readonly command: string;
+    readonly timeoutMs?: number;
+}
+export declare function parsePluginRows(stdout: string): PluginRow[] | undefined;
+export declare function parseCommandRows(stdout: string): CommandRow[] | undefined;
+export declare function attributeCommands(plugins: readonly PluginRow[], rows: readonly CommandRow[]): {
+    readonly sets: PluginCommandSet[];
+    readonly problems: string[];
+};
+export declare function createPluginCatalog(options: PluginCatalogOptions): PluginCatalog;

package/dist/types/shared/api/host/plugin-login-hint.d.ts

@@ -0,0 +1,2 @@
+export declare function loginUrlOfDomain(domain: string | undefined): string | undefined;
+export declare function pluginLoginHint(error: unknown, domain: string | undefined): string;

package/dist/types/shared/api/host/plugin-tools.d.ts

@@ -0,0 +1,10 @@
+import type { ApprovalDetail, ApprovalPolicy } from '@dsh-workbench/shared/host';
+import type { PluginCommand } from './plugin-catalog';
+export declare function pluginToolName(plugin: string, command: string): string;
+export declare function pluginToolParameters(command: PluginCommand): Record<string, unknown>;
+export declare function pluginToolDescription(command: PluginCommand): string;
+export declare function pluginToolWrites(command: PluginCommand): boolean;
+export declare function pluginToolArgv(command: PluginCommand, raw: unknown): string[];
+export declare function pluginKeyArgs(command: PluginCommand, raw: unknown): string;
+export declare function pluginApprovalQuestion(command: PluginCommand, raw: unknown): ApprovalDetail;
+export declare function pluginApprovalFor(command: PluginCommand): ApprovalPolicy;

package/dist/types/shared/api/host/plugin-units.d.ts

@@ -0,0 +1,47 @@
+import type { Opencli } from '@dsh-workbench/shared/host';
+import type { PluginCatalog } from './plugin-catalog';
+import type { UnitRegistry } from './unit-registry';
+export interface PluginRowRef {
+    readonly id: string;
+    readonly pkg: string;
+    readonly name?: string | undefined;
+}
+export interface PluginRowsSource {
+    listPlugins(workspace: string | null): readonly PluginRowRef[];
+    subscribe?(listener: () => void): () => void;
+}
+export interface PluginUnitRow {
+    readonly plugin: string;
+    readonly pkg: string;
+    readonly version: string;
+    readonly commands: number;
+    readonly synthesized: number;
+    readonly tools: readonly string[];
+}
+export interface PluginUnitReport {
+    readonly ok: boolean;
+    readonly at: number;
+    readonly plugins: readonly PluginUnitRow[];
+    readonly problems: readonly string[];
+}
+export interface PluginUnits {
+    refresh(options?: {
+        readonly force?: boolean;
+    }): Promise<PluginUnitReport>;
+    touch(): void;
+    report(): PluginUnitReport;
+    dispose(): void;
+}
+export interface PluginUnitsOptions {
+    readonly registry: UnitRegistry;
+    readonly catalog: PluginCatalog;
+    readonly rows: () => readonly PluginRowRef[];
+    readonly declared: (plugin: string) => ReadonlySet<string>;
+    readonly opencliFor: (plugin: string) => Opencli;
+    readonly toolNames?: () => ReadonlySet<string>;
+    readonly logger?: {
+        info?(message: string): void;
+        warn?(message: string): void;
+    } | undefined;
+}
+export declare function createPluginUnits(options: PluginUnitsOptions): PluginUnits;

package/dist/types/shared/api/host/unit-registry.d.ts

@@ -10,6 +10,8 @@ export type UnitSource = {
     readonly pkg: string;
 } | {
     readonly kind: 'owned';
+} | {
+    readonly kind: 'plugin';
 };
 export interface HostUnit {
     readonly unit: string;
@@ -24,6 +26,7 @@ export interface UnitDeclarationSource {
 export interface UnitRegistry {
     register(face: UnitModuleFace): () => void;
     registerOwned(face: UnitOwnedFace): () => void;
+    registerPlugin(face: UnitOwnedFace): () => void;
     all(): readonly HostUnit[];
     owned(): readonly string[];
     refusals(): readonly UnitRefusal[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-workbench/core",
-  "version": "0.1.17",
+  "version": "0.2.0",
   "description": "个人工作台：Agent 工作台外壳（左栏 + 常驻对话 + 自研右侧数据面板）。",
   "type": "module",
   "icon": "./icon.svg",
@@ -87,7 +87,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@dsh-workbench/shared": "0.1.17"
+    "@dsh-workbench/shared": "0.2.0"
   },
   "scripts": {
     "build": "node scripts/build.mjs && node scripts/build-types.mjs",

package/skills/workbench-module-diy/REVIEW.md

@@ -5,13 +5,13 @@
 
 | 判据 | 它防的事故 | 红了的典型说法 | 怎么修 |
 |---|---|---|---|
-| `contracts` | dsh 组合阶段**不校验**你 `package.json` 里的声明 —— 错的 `external` 要到浏览器 `require` 那一刻才炸；清单与代码、底稿与清单之间漂了也没人拦 | `单元 id "x" 与 … 撞了` / `dsh.workbenchFaces.client 指的文件不存在` / `dsh.workbenchFaces.host 没声明` / `没有对 @dsh-workbench/core 的 peer 依赖` / `没有 typecheck 脚本` / `它不是 private，却既没声明 publishConfig.access=public…` / `dsh.workbench 声明的能力与代码真正注册的对不上` / `design.json 的能力行里有「x」，清单的 tools[] 里却没有它` | 按报的那一条改 `package.json`；`unit` 换个不撞的名字；`dsh.workbenchFaces` 补上两个**源码**入口；四个脚本补全；私有不发就保持 `private: true`。**工具只声明在清单里**（`dsh.workbench.tools`）且必须与 `mount()` 里 `registerTools()` 真正注册的**不重不漏**；写了 `design.json` 的话，它的 `capabilities[].name` 与清单的 `tools[].name` 也要不重不漏（U1c 的**键集合对账**，只对名字 —— 内容各写一处）；`gate.deniedTools` 是可选的运行期收窄，门禁不再对它做声明对账（协议里的 `scope` 已删 —— 哪些工作区出现由用户的板决定） |
+| `contracts` | dsh 组合阶段**不校验**你 `package.json` 里的声明 —— 错的 `external` 要到浏览器 `require` 那一刻才炸；清单与代码、底稿与清单之间漂了也没人拦 | `单元 id "x" 与 … 撞了` / `dsh.workbenchFaces.client 指的文件不存在` / `dsh.workbenchFaces.host 没声明` / `没有对 @dsh-workbench/core 的 peer 依赖` / `没有 typecheck 脚本` / `它不是 private，却既没声明 publishConfig.access=public…` / `src/declared-tools.ts 与清单对不上（生成物过期…）` / `工具名的字面量又写回了源码` / `…没有 key` / `dsh.workbench 声明的能力与代码真正注册的对不上` / `design.json 的能力行里有「x」，清单的 tools[] 里却没有它` | 按报的那一条改 `package.json`（生成物对不上就跑 `dsh-wb-module sync`；工具名的字面量只许留在清单里）；`unit` 换个不撞的名字；`dsh.workbenchFaces` 补上两个**源码**入口；四个脚本补全；私有不发就保持 `private: true`。**工具只声明在清单里**（`dsh.workbench.tools`）且必须与 `mount()` 里 `registerTools()` 真正注册的**不重不漏**；写了 `design.json` 的话，它的 `capabilities[].name` 与清单的 `tools[].name` 也要不重不漏（U1c 的**键集合对账**，只对名字 —— 内容各写一处）；`gate.deniedTools` 是可选的运行期收窄，门禁不再对它做声明对账（协议里的 `scope` 已删 —— 哪些工作区出现由用户的板决定） |
 | `protocol` | `dsh.workbench` 是外壳读你得懂的那份声明：缺版本、形状不对、**多一个键**、枚举值不认都要在装机前拦下来。多出来的键最阴 —— 外壳会**静默忽略**它（拼错一个键 = 那句话白写） | `没有 apiVersion` / `apiVersion 是 99，这份只认 1` / `声明了 apiVersion 就要把静态半写全 —— 缺 dsh.workbench.tools` / `dsh.workbench 里有协议 v1 不认识的键 "faces"` / `card 里有不认的键 "enabledByDefault"`（这个键连外壳里都没有了 —— A-3 删的，见 [ADR-0038](../../../../docs/adr/0038-module-declaration-protocol.md) §6.7） / `tools[0] 里有协议不认的键 "scopes"` / `tools[0] 里有不认的键 "scope"`（`scope` 自本轮更正起**不在协议里**：能力在哪些工作区出现由用户的板决定，见 [ADR-0038 §2.4 / §6.16](../../../../docs/adr/0038-module-declaration-protocol.md)） | 补 `"apiVersion": 1`；把 `unit` / `card` / `tools` / `host` 四个键写全（没卡片写 `"card": null`、没工具写 `"tools": []`、一个服务都不要写 `"host": { "inject": [] }`）；删掉协议外的键（`faces` 自 A-2 起搬到 `dsh.workbenchFaces`，写回 `dsh.workbench` 里就是生字段）；`scope` **不要写**（协议不认它，写了就是生字段）。字段清单见 `dsh-wb-module` 的 README「协议」那一节 |
 | `bundles` | 两个运行时互串：浏览器产物里带 node 内置、宿主产物里带 DOM / react | `浏览器产物里出现了 node 内置 …` / `宿主产物里出现了 react` | 宿主面别 import 浏览器侧的东西；浏览器面别 import `node:*`。两侧只通过服务名相接 |
 | `source` | 非种子词的 `@deepseek-ai/*`、宿主侧碰 dsh 的浏览器包、`@/` 指到工作台源码 | `…在宿主侧可达` / `不是平台种子词` | 宿主侧只用 Node 侧的东西；dsh 原语一律走 `kit`；`@/` 只指自己的 `src/` |
 | `primitives` | 声明了 `external` 却没有产物物证 ⇒ dsh 原语被**内联**成第二份实例 | `…用了却没声明 external` / `宿主产物里出现了` | 在 `dsh.client.external` 里显式声明它；确认产物里是 `require(...)` 而不是被打包进来 |
 | `kit` | 用了 peer 下限那份外壳**还没有**的 kit 成员 ⇒ 卡片首帧 `Element type is invalid`，整块面板被 React 卸掉 | `kit.components.X 在这份外壳里没有` / `peer 下限比 devDependency 还旧` | 只用 peer 范围里真有的成员；把 `peerDependencies` 的下限提到你实际用的那档 |
-| `cards` | 卡片拿**空数据**就抛 ⇒ 用户看到"卡片一直不出来 / 点一下白屏" | `空数据下卡片抛了` / `卡片只画出一个节点` / `卡片没套外壳的卡壳` | 让卡片在没数据时也画得出来（已有的加载 / 空 / 阻断态）；外面套 `kit.components.Card` |
+| `cards` | 卡片拿**空数据**就抛 ⇒ 用户看到"卡片一直不出来 / 点一下白屏" | `空数据下卡片抛了` / `卡片只画出一个节点` / `卡片没套外壳的卡壳` / `清单的 card.titleKey「x」在模块字典的 en 里没有` / `…没有落点` | 让卡片在没数据时也画得出来（已有的加载 / 空 / 阻断态）；外面套 `kit.components.Card`；清单写了 `titleKey`，`registerUnit` 交的 `messages` 里 `zh` / `en` 都得有那一条（漏了面板上显示的是原始键名） |
 | `standalone` | "只有工作台源码在场才编得过" ⇒ 发布出去就散架 | `build 在外壳源码不在场时失败` / `typecheck 在外壳源码不在场时失败` | 别引用工作台源码；`tsconfig` 里 `paths` 的值必须是**相对路径**（`"./src/*"`，不是 `"src/*"`） |
 | `markers` | 内网域名 / 企业内部名泄进要公开发布的包 | `命中内网 npm 源` / `命中内网域名` | 那些值不该写进包里；要配就落到模块自己的配置面，或走用户自己声明的来源 |
 | `alias` | `@/` 伸进工作台源码 ⇒ 装的人手上没有那份源码 | `…指向外壳源码` | `@/` 只许指自己的 `src/`；跨包的东西走包名 |

package/skills/workbench-module-diy/TOOLS.md

@@ -79,7 +79,7 @@
 ### 6.1 写法（清单 + 两个函数；缺一个门禁就红）
 
 ```ts
-tools: [{ name: 'workbench_demo_rebuild', writes: true }],
+tools: [{ name: 'workbench_demo_rebuild', writes: true, key: 'rebuild' }],
 
 needsApproval: (call) => ({
   kind: 'ask',
@@ -91,6 +91,9 @@ needsApproval: (call) => ({
 approvalDetail: async (call) => ({ zh: '会覆盖这 3 个模块的产物，不碰源码', en: '…' }),
 ```
 
+* `key` 是代码里那个短名（lowerCamelCase）。给了它就 `dsh-wb-module sync` 一次，生成
+  `src/declared-tools.ts`，代码写 `DECLARED_TOOLS.rebuild.name` —— 工具名的字面量只剩清单这一处
+  （键写错是编译错；生成物过期、半写 key、源码里又写字面量，门禁都红）。一个 key 都不写也行（不适用那一档）。
 * `needsApproval` 回 `{ kind: 'read' }` = 这件不用问；回 `{ kind: 'ask', … }` = 要问；
   **清单写着 `writes: true` 却不认领，外壳当场 deny**（"在套件的 needsApproval 里补一条审批"）——
   但那条错误只有真跑一次才看得见，所以 `check --only contracts` 会替用户先看一遍：缺 `needsApproval`、