@dsh-workbench/core 0.1.9 → 0.1.11

package/dist/types/app/layouts/sidebar/ProjectSwitcher.d.ts

@@ -2,9 +2,9 @@ import type { Translate, WorkspaceView } from '@dsh-workbench/shared';
 export interface ProjectSwitcherProps {
     items: readonly WorkspaceView[];
     current: WorkspaceView | null;
-    workspaceTitle: (title: string) => string;
     onPick: (workspaceId: string) => void;
     onAdd: () => void;
+    onRename: (workspaceId: string, title: string) => Promise<boolean>;
     t: Translate;
 }
-export declare function ProjectSwitcher({ items, current, workspaceTitle, onPick, onAdd, t, }: ProjectSwitcherProps): JSX.Element;
+export declare function ProjectSwitcher({ items, current, onPick, onAdd, onRename, t }: ProjectSwitcherProps): JSX.Element;

package/dist/types/app/layouts/sidebar/Sidebar.d.ts

@@ -2,7 +2,7 @@ import type { PanelEntry, PanelInfo, RenderSlot, SessionStatusSnapshot, Sessions
 export interface SidebarActions {
     listPanels: () => PanelEntry[];
     subscribePanels: (callback: () => void) => () => void;
-    workspaceDisplayTitle: (title: string) => string;
+    renameWorkspace: (workspaceId: string, title: string) => Promise<boolean>;
     openWorkspace: (workspaceId: string) => void;
     createWorkspace: (path: string) => Promise<{
         workspaceId?: string;

package/dist/types/app/layouts/sidebar/WorkspaceRenameDialog.d.ts

@@ -0,0 +1,8 @@
+import type { Translate, WorkspaceView } from '@dsh-workbench/shared';
+export interface WorkspaceRenameDialogProps {
+    readonly workspace: WorkspaceView;
+    readonly t: Translate;
+    readonly onClose: () => void;
+    readonly onSubmit: (title: string) => Promise<boolean>;
+}
+export declare function WorkspaceRenameDialog({ workspace, t, onClose, onSubmit }: WorkspaceRenameDialogProps): JSX.Element;

package/dist/types/app/layouts/sidebar/WorkspaceRowAction.d.ts

@@ -0,0 +1,7 @@
+import type { Translate, WorkspaceView } from '@dsh-workbench/shared';
+export interface WorkspaceRowActionProps {
+    readonly workspace: WorkspaceView;
+    readonly t: Translate;
+    readonly onEdit: () => void;
+}
+export declare function WorkspaceRowAction({ workspace, t, onEdit }: WorkspaceRowActionProps): JSX.Element;

package/dist/types/app/layouts/sidebar/WorkspaceRowLabel.d.ts

@@ -0,0 +1,8 @@
+import type { ReactNode, WorkspaceView } from '@dsh-workbench/shared';
+export interface WorkspaceRowLabelProps {
+    readonly workspace: WorkspaceView;
+    readonly current: boolean;
+    readonly action?: ReactNode;
+    readonly onHover?: (hovering: boolean) => void;
+}
+export declare function WorkspaceRowLabel({ workspace, current, action, onHover }: WorkspaceRowLabelProps): JSX.Element;

package/dist/types/app/layouts/sidebar/WorkspaceSearchField.d.ts

@@ -0,0 +1,9 @@
+import type { Translate } from '@dsh-workbench/shared';
+export interface WorkspaceSearchFieldProps {
+    readonly t: Translate;
+    readonly query: string;
+    readonly onQuery: (query: string) => void;
+    readonly onCursor: (step: 1 | -1) => void;
+    readonly onSubmit: () => void;
+}
+export declare function WorkspaceSearchField({ t, query, onQuery, onCursor, onSubmit, }: WorkspaceSearchFieldProps): JSX.Element;

package/dist/types/app/layouts/sidebar/__tests__/workspace-name.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/app/layouts/sidebar/workspace-items.d.ts

@@ -0,0 +1,11 @@
+import type { Translate, WorkspaceView } from '@dsh-workbench/shared';
+import type { MenuEntry } from '@deepseek-ai/dsh-client-ui-primitives';
+export interface WorkspaceItemsOptions {
+    readonly results: readonly WorkspaceView[];
+    readonly currentId: string | null;
+    readonly hoverId: string | null;
+    readonly t: Translate;
+    readonly onHover: (workspaceId: string | null) => void;
+    readonly onEdit: (workspace: WorkspaceView) => void;
+}
+export declare function workspaceMenuItems(options: WorkspaceItemsOptions): MenuEntry[];

package/dist/types/app/layouts/sidebar/workspace-name.d.ts

@@ -0,0 +1,16 @@
+export declare const WORKSPACE_NAME_MAX = 20;
+export declare const WORKSPACE_NAME_INPUT_MAX: number;
+export interface WorkspaceDisplayName {
+    readonly dir: string;
+    readonly name: string;
+}
+interface Named {
+    readonly path: string;
+    readonly title: string;
+}
+export declare function basenameOf(value: string): string;
+export declare function displayNameOf(workspace: Named): WorkspaceDisplayName;
+export declare function matchWorkspaces<T extends Named>(items: readonly T[], query: string): T[];
+export declare function titleFor(workspace: Named, draft: string): string;
+export declare function nameTooLong(draft: string): boolean;
+export {};

package/dist/types/app/units/__tests__/registry.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/app/units/fixture-unit-mock.d.ts

@@ -1,5 +1,7 @@
 import type { BoardModule, UnitClientFace, UnitManifest } from '@dsh-workbench/shared';
 export declare const FIXTURE_UNIT_ID = "wb-fixture";
+export declare const CRASH_UNIT_ID = "wb-fixture-crash";
 export declare const FIXTURE_FACE: UnitClientFace;
+export declare const CRASH_FACE: UnitClientFace;
 export declare function fixtureRoster(roster: readonly UnitManifest[]): readonly UnitManifest[];
-export declare function fixtureSeed(roster: readonly UnitManifest[], all: readonly BoardModule[]): readonly BoardModule[];
+export declare function fixtureSeed(roster: readonly UnitManifest[], all: readonly BoardModule[], crash?: boolean): readonly BoardModule[];

package/dist/types/modules/panels/__tests__/approval.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/modules/panels/model/approval.d.ts

@@ -0,0 +1,2 @@
+import type { ApprovalPolicy } from '@dsh-workbench/shared/host';
+export declare const panelsApproval: ApprovalPolicy;

package/dist/types/shared/api/diy.d.ts

@@ -0,0 +1,3 @@
+export declare const DIY_PRESET_ID = "workbench-diy";
+export declare const WORKSHOP_TITLE = "\u5DE5\u4F5C\u53F0DIY";
+export declare const WORKSHOP_PAST_TITLES: readonly string[];

package/dist/types/shared/api/diy.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/__tests__/approval-legacy.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/approval-legacy.d.ts

@@ -0,0 +1,2 @@
+import type { ApprovalPolicy } from '@dsh-workbench/shared/host';
+export declare const legacyApproval: ApprovalPolicy;

package/dist/types/shared/api/host/diy.d.ts

@@ -0,0 +1,3 @@
+import type { DshHostContext } from '@dsh-workbench/shared';
+export declare const WORKSHOP_RELATIVE = "workbench/diy";
+export declare function workshopPathOf(ctx: DshHostContext): string | null;

package/dist/types/shared/api/host/diy.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/mount-units.d.ts

@@ -3,6 +3,10 @@ import type { UnitManifest } from '@dsh-workbench/shared/host';
 import { type RouteTable } from '@dsh-workbench/shared/host';
 import type { ContextRenderer, UnitHostFace, UnitMountDeps, UnitMountResult, UnitCall } from '@dsh-workbench/shared/host';
 import { type UnitReadiness } from './unit-readiness';
+export interface UnitFailure {
+    readonly id: string;
+    readonly reason: string;
+}
 export interface MountedUnit {
     readonly face: UnitHostFace;
     readonly result: UnitMountResult;
@@ -12,15 +16,11 @@ export interface UnitsPlan {
     readonly mounted: readonly MountedUnit[];
     readonly routes: RouteTable;
     readonly gate: UnitMountResult['gate'];
-    readonly prefs: ReadonlyArray<{
-        readonly resource: string;
+    readonly prefs: ReadonlyArray<NamedEntry & {
         readonly unit: string;
-        handle(payload: unknown): unknown;
     }>;
-    readonly actions: ReadonlyArray<{
-        readonly resource: string;
+    readonly actions: ReadonlyArray<NamedEntry & {
         readonly unit: string;
-        handle(payload: unknown): unknown;
     }>;
     readonly provision: UnitMountResult['provision'];
     readonly contextRenderers: ReadonlyMap<string, ContextRenderer>;
@@ -31,9 +31,15 @@ export interface UnitsPlan {
         readonly id: string;
         readonly missing: readonly string[];
     }>;
+    readonly failed: readonly UnitFailure[];
     readonly warmReads: () => readonly (readonly string[])[];
     readonly disposeLongTasks: () => void;
 }
+interface NamedEntry {
+    readonly resource: string;
+    handle(payload: unknown): unknown;
+}
+export declare function failureReasonOf(error: unknown): string;
 export declare function mountUnits(faces: readonly UnitHostFace[], deps: {
     ctx: DshHostContext;
     logger?: {
@@ -50,3 +56,4 @@ export declare function mountUnits(faces: readonly UnitHostFace[], deps: {
         readonly bump: (facts: readonly string[]) => void;
     } | undefined;
 }): UnitsPlan;
+export {};

package/dist/types/shared/hooks/mock-mode.d.ts

@@ -1 +1,2 @@
 export declare function mockModeOn(search: string): boolean;
+export declare function crashModeOn(search: string): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-workbench/core",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "个人工作台：Agent 工作台外壳（左栏 + 常驻对话 + 自研右侧数据面板）。",
   "type": "module",
   "icon": "./icon.svg",
@@ -22,7 +22,7 @@
   "bin": {
     "dsh-workbench": "./bin/dsh-workbench"
   },
-  "//files": "npm 的兜底是 .gitignore —— 而 dist/ 在 .gitignore 里，不显式列出就会**漏掉宿主入口**（exports['.'] 指向它）。发出去之前用 npm pack --dry-run 数一遍 dist/ 有几条。",
+  "//files": "npm 的兜底是 .gitignore —— 而 dist/ 在 .gitignore 里，不显式列出就会**漏掉宿主入口**（exports['.'] 指向它）。发出去之前用 npm pack --dry-run 数一遍 dist/ 有几条。skills/ 是 DIY 模式挂给 agent 的指引（经 skill-filesystem 的 customSkillDirs 挂载），漏了不报错、只是 DIY 的 agent 什么都不知道 —— selfcheck 有一条判据盯着它。",
   "files": [
     "dist",
     "client.js",
@@ -30,6 +30,8 @@
     "icon.svg",
     "bin",
     "profile",
+    "skills",
+    "preset",
     "scripts/seed-profile.sh",
     "README.md",
     "docs/HANDOFF.md",
@@ -40,16 +42,22 @@
     "description": "个人工作台"
   },
   "//scripts": "包内不跑 check:docs —— 那份文档管理块住在仓库根的 docs/ARCHITECTURE.md，由根 `pnpm run check` 用 --config 指到本包的 arch.config.mjs 校验。prepublishOnly 走 -w 跑根那一整套。",
+  "//dsh.bundle.patch": "一份 preset 就是一个补丁层：它 insert 一行 @deepseek-ai/dsh-agent-preset，config.plugins 是整表插件清单。diy.patch.yml 是**生成的**（scripts/gen-diy-preset.mjs，从 dsh 出厂那份 standard.patch.yml 派生），selfcheck 有一条判据盯着它有没有过期。",
   "dsh": {
     "bundle": {
-      "patch": "./cordis.patch.yml"
+      "patch": [
+        "./cordis.patch.yml",
+        "./preset/diy.patch.yml"
+      ]
     },
     "client": {
       "platform": "web",
       "immediately": true,
       "inject": [
         "@deepseek-ai/dsh-client-ui-slots",
-        "@deepseek-ai/dsh-client-locale"
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-api-gateway",
+        "@deepseek-ai/dsh-api-session-controller"
       ]
     }
   },
@@ -78,7 +86,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@dsh-workbench/shared": "0.1.9"
+    "@dsh-workbench/shared": "0.1.11"
   },
   "scripts": {
     "build": "node scripts/build.mjs && node scripts/build-types.mjs",

package/preset/diy.patch.yml

@@ -0,0 +1,156 @@
+# Agent preset workbench-diy：DIY 模式。**这个文件是生成的**，别手改 ——
+# 改 packages/workbench/scripts/gen-diy-preset.mjs 再重跑它。
+#
+# 它从 dsh 出厂那份 standard.patch.yml 派生（整表 plugins 归 dsh 管，手抄会漂），
+# 只叠加三处差分：DIY skill 目录、tool-cordis、plugin-manager 打开。
+# 派生逻辑与差分理由写在生成器开头。
+- insert:
+    - id: preset-workbench-diy
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: workbench-diy
+        name: 工作台 DIY
+        description: 用大白话说你要在面板上看到什么、数据从哪来 —— agent 在工作台的工坊里把模块造出来，装上就上板。不用写代码。
+        order: 9
+        plugins:
+          - id: persona
+            name: '@deepseek-ai/dsh-persona'
+            config:
+              suffix: Your working directory is {{cwd}}.
+              prefix: You are a coding agent powered by the {{model}} model.
+          - id: agent-instructions
+            name: '@deepseek-ai/dsh-agent-instructions'
+            config:
+              maxBytes: 65536
+          - id: tool-bash
+            name: '@deepseek-ai/dsh-tool-bash'
+            disabled: !!js process.platform === 'win32'
+          - id: tool-pwsh
+            name: '@deepseek-ai/dsh-tool-pwsh'
+            disabled: !!js process.platform !== 'win32'
+          - id: tool-fs
+            name: '@deepseek-ai/dsh-tool-fs'
+          - id: tool-fs-search
+            name: '@deepseek-ai/dsh-tool-fs-search'
+            config:
+              sampleOverCapGlobResults: false
+          - id: tool-jobs
+            name: '@deepseek-ai/dsh-tool-jobs'
+          - id: command-goal
+            name: '@deepseek-ai/dsh-command-goal'
+          - id: tool-goal
+            name: '@deepseek-ai/dsh-tool-goal'
+          - id: planning
+            name: cordis:group
+            group: true
+            isolate:
+              planMode: true
+            config:
+              - id: plan-mode
+                name: '@deepseek-ai/dsh-plan-mode'
+                config:
+                  section: |
+                    You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
+
+                    Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
+
+                    The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
+
+                    Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
+
+                    Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
+
+                    When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
+          - id: compaction
+            name: cordis:group
+            group: true
+            isolate:
+              compaction: true
+              toolResultPruner: true
+            config:
+              - id: compaction-basic
+                name: '@deepseek-ai/dsh-compaction-basic'
+              - id: command-compact
+                name: '@deepseek-ai/dsh-command-compact'
+              - id: tool-result-pruner
+                name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
+                config:
+                  thresholdChars: 8192
+                  headChars: 4096
+                  tailChars: 1024
+          - id: delegation
+            name: cordis:group
+            group: true
+            isolate:
+              workflowEngine: true
+            config:
+              - id: tool-subagent-control
+                name: '@deepseek-ai/dsh-tool-subagent-control'
+              - id: tool-subagent-list-agents
+                name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
+              - id: tool-subagent
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: spawn
+                  toolName: subagent
+                  modelSelectionSettings: true
+                  backgroundMode: continuable
+              - id: tool-subagent-fork
+                name: '@deepseek-ai/dsh-tool-subagent'
+                config:
+                  provider: fork
+                  toolName: subagent_fork
+                  backgroundMode: continuable
+              - id: tool-subagent-codex
+                name: '@deepseek-ai/dsh-tool-subagent'
+                disabled: true
+                config:
+                  provider: codex
+                  toolName: subagent_codex
+                  backgroundMode: one-shot
+                  maxDepth: provider-managed
+              - id: tool-subagent-claude-code
+                name: '@deepseek-ai/dsh-tool-subagent'
+                disabled: true
+                config:
+                  provider: claude-code
+                  toolName: subagent_claude_code
+                  backgroundMode: one-shot
+                  maxDepth: provider-managed
+              - id: workflow-ptc
+                name: '@deepseek-ai/dsh-workflow-ptc'
+                config:
+                  provider: spawn
+              - id: tool-workflow
+                name: '@deepseek-ai/dsh-tool-workflow'
+              - id: tool-ralph
+                name: '@deepseek-ai/dsh-tool-ralph'
+                disabled: true
+                config:
+                  subagentProvider: spawn
+                  maxRounds: 64
+          - id: tool-ask-user
+            name: '@deepseek-ai/dsh-tool-ask-user'
+          - id: tool-todo
+            name: '@deepseek-ai/dsh-tool-todo'
+            config:
+              allowParallelInProgress: true
+          - id: tool-web
+            name: '@deepseek-ai/dsh-tool-web'
+            config:
+              fetch: true
+              searchTimeoutMs: 60000
+          - id: present
+            name: '@deepseek-ai/dsh-tool-present'
+          - id: tool-plugin-manager
+            name: '@deepseek-ai/dsh-plugin-manager/tools'
+            disabled: !!js "!ctx.get('profileContext')"
+          - id: tool-cordis
+            name: '@deepseek-ai/dsh-tool-cordis'
+          - id: skill-filesystem
+            name: '@deepseek-ai/dsh-skill-filesystem'
+            config:
+              customSkillDirs:
+                - !!js process.getBuiltinModule('node:path').join(process.getBuiltinModule('node:path').dirname(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@dsh-workbench/core/package.json')), 'skills')
+          - id: tool-skill
+            name: '@deepseek-ai/dsh-tool-skill'

package/scripts/seed-profile.sh

@@ -168,6 +168,122 @@ else
   echo "→ 依赖已齐备，跳过安装"
 fi
 
+# ── 第 6 步：建 DIY 工坊 ────────────────────────────────────────────────
+#
+# 工坊是 DIY 模式的落点：agent 在那里造模块（一个模块一个目录），
+# 而 **DIY 会话的 cwd 就是它** —— dsh 的沙箱把"会话 cwd"当作 workspace-write 的边界，
+# 所以源码写在工坊里天然放行，不需要给用户开 danger-full-access。
+#
+# 为什么它是一个 pnpm workspace 而不是随便一个目录：模块要构建就得有
+# module-tools / core / shared / react / typescript / vitest；把它做成 workspace 根，
+# 依赖只装一次，每个模块只是 packages/ 下多一个目录。而且 module-tools 的发现逻辑
+# 认 `pnpm-workspace.yaml`，于是模块单独跑 check 时能找到同仓的外壳（kit / standalone 两条判据
+# 才不会静默跳过 —— 跳过等于没验）。
+#
+# 两个身份同 bin/dsh-workbench：**仓库副本**把三个 @dsh-workbench/* 用 link 指进本仓
+# （改工具链立刻生效），**安装包副本**从源上按版本装。
+DIY_DIR="$DSH_HOME/workbench/diy"
+mkdir -p "$DIY_DIR/packages"
+
+if [ -n "$GIT_TOP" ]; then
+  CORE_SPEC="link:$REPO_DIR"
+  TOOLS_SPEC="link:$(cd "$REPO_DIR/../module-tools" && pwd)"
+  SHARED_SPEC="link:$(cd "$REPO_DIR/../shared" && pwd)"
+else
+  CORE_SPEC="@dsh-workbench/core@^$(node -p "require('$REPO_DIR/package.json').version" 2>/dev/null || echo 0)"
+  TOOLS_SPEC="@dsh-workbench/module-tools@^$(node -p "require('$REPO_DIR/package.json').version" 2>/dev/null || echo 0)"
+  SHARED_SPEC="@dsh-workbench/shared@^$(node -p "require('$REPO_DIR/package.json').version" 2>/dev/null || echo 0)"
+fi
+
+# 工坊必须**钉住自己那一代 pnpm**（与仓库根钉的同一个）。
+#
+# 不钉的话它用用户机器上那个 pnpm —— 实测这台是 11.21.0，而仓库钉的是 10.32.1，
+# 而**两代的设置住址与键名都不一样**：`store-dir` 在 pnpm 10 从 `.npmrc` 读、
+# 在 pnpm 11 只认 `pnpm-workspace.yaml` 里的 `storeDir`；放行依赖构建的键
+# 在 pnpm 10 是 `onlyBuiltDependencies`、11 是 `allowBuilds`（11 还会往
+# pnpm-workspace.yaml 里写一行 `esbuild: set this to true or false` 占位）。
+# 结果是同一份工坊配置在这台机器上对、在另一台上错，而且错法都是静默或半静默的。
+# 钉了之后两边一致，且这一整轮验证过的就是这一代。
+PNPM_PIN=""
+if [ -n "$GIT_TOP" ] && [ -f "$GIT_TOP/package.json" ]; then
+  PNPM_PIN="$(node -p "require('$GIT_TOP/package.json').packageManager || ''" 2>/dev/null || true)"
+fi
+PNPM_PIN="${PNPM_PIN:-pnpm@10.32.1}"
+
+if [ -f "$DIY_DIR/package.json" ]; then
+  echo "→ DIY 工坊已存在，跳过建骨架（要重来就先删掉 $DIY_DIR）"
+else
+  echo "→ 建 DIY 工坊 $DIY_DIR"
+  cat >"$DIY_DIR/package.json" <<EOF
+{
+  "name": "dsh-workbench-diy",
+  "version": "0.0.0",
+  "private": true,
+  "description": "DIY 工坊：工作台模块在这里造。这个目录由 dsh-workbench 的 setup 生成，手改会被覆盖。",
+  "packageManager": "$PNPM_PIN",
+  "devDependencies": {
+    "@dsh-workbench/core": "$CORE_SPEC",
+    "@dsh-workbench/module-tools": "$TOOLS_SPEC",
+    "@dsh-workbench/shared": "$SHARED_SPEC",
+    "@types/node": "^24.19.0",
+    "@types/react": "^19.3.0",
+    "esbuild": "^0.28.2",
+    "react": "^19.3.0",
+    "typescript": "5.9",
+    "vitest": "^5.0.2"
+  }
+}
+EOF
+  cat >"$DIY_DIR/pnpm-workspace.yaml" <<'EOF'
+packages:
+  - "packages/*"
+
+# esbuild 的构建脚本要放行：pnpm 默认不跑依赖的 postinstall，而模块的构建就是 esbuild。
+# 不放行的话每次 install 都会打一行
+# `[ERR_PNPM_IGNORED_BUILDS] Ignored build scripts: esbuild@0.28.2` —— 看着像失败，
+# 其实退出码是 0（实测踩过）。
+# 钉在 10.32.1 之后这个键名是对的（同一代 pnpm 也从 package.json 的 `pnpm` 段读它，
+# 仓库根就是这么放的）；换 pnpm 11 会变成 `allowBuilds`，所以上面那句「钉住 pnpm」是前提。
+onlyBuiltDependencies:
+  - esbuild
+EOF
+  cat >"$DIY_DIR/.npmrc" <<EOF
+# 工坊自己的 store 与 cache。
+#
+# 为什么必须指进来：agent 的 shell 跑在**会话沙箱**里，可写根就是会话 cwd（= 这个目录）。
+# 而 pnpm 默认的 store（例如 ~/Library/pnpm/store/v10）与 npm 默认的 cache（~/.npm）
+# 都在可写根**之外** —— 不指进来的话，agent 在会话里跑一次 pnpm install 会被沙箱拒（EPERM），
+# 而"给模块加一个依赖"只有这一条路。setup 时的安装由人跑，不受沙箱限制，但用的也是这份配置，
+# 于是装一次之后 agent 那边也能继续装。
+store-dir=$DIY_DIR/.pnpm-store
+cache-dir=$DIY_DIR/.npm-cache
+EOF
+  cat >"$DIY_DIR/README.md" <<'EOF'
+# DIY 工坊
+
+工作台模块在这里造。**一个模块一个目录**，都住在 `packages/` 下。
+
+- 这个目录是「DIY 会话」的工作目录 —— 在对话里让 agent 造模块，它就写在这里。
+- 依赖已经装好（`@dsh-workbench/core` / `module-tools` / `shared` / react / typescript / vitest）。
+- 造一个新模块：`dsh-wb-module init <名字> --dir packages/module-<名字>`
+- 每个模块自己的四件事：`pnpm build` / `pnpm typecheck` / `pnpm test` / `pnpm selfcheck`，
+  外加 `dsh-wb-module check` 的十条判据。
+
+不要手改这个目录下的 `package.json` / `pnpm-workspace.yaml` / `.npmrc`：
+它们是 `dsh-workbench setup` 生成的，模块要加依赖就加在**模块自己**的 `package.json` 里。
+EOF
+fi
+
+if [ -d "$DIY_DIR/node_modules" ]; then
+  echo "→ 工坊依赖已装，跳过"
+elif ! command -v pnpm >/dev/null 2>&1; then
+  echo "→ ⚠️ PATH 上没有 pnpm，工坊依赖没装。装好 pnpm 后跑一次：" >&2
+  echo "     cd $DIY_DIR && pnpm install" >&2
+else
+  echo "→ 装工坊依赖（第一次会下载 react / typescript / vitest，几百 MB，之后不再下）"
+  (cd "$DIY_DIR" && pnpm install 2>&1 | tail -6)
+fi
+
 # 装 bundle 的目标：开发态是这个仓库（link），安装包态是源上那个包。
 # 判据是「git 顶层在不在」—— npm pack 的产物里不含 .git（见 package.json 的 files）。
 # ⚠️ 不能判 `$REPO_DIR/.git`：workspace 之后 .git 在仓库根（同 bin/dsh-workbench）。