@dsh-workbench/core 0.2.5 → 0.2.7

package/dist/types/app/layouts/rightbar/market-rows.d.ts

@@ -26,9 +26,11 @@ export declare function withClientRefusals(modules: readonly InstalledWorkbenchM
 }[]): readonly InstalledWorkbenchModule[];
 export declare function refusalReasons(host: readonly string[] | undefined, client: readonly string[] | undefined): readonly string[];
 export declare function mergeTitles(known: ReadonlyMap<string, string>, manifests: readonly UnitManifest[]): ReadonlyMap<string, string>;
+export declare function installedIdSet(installed: readonly InstalledWorkbenchModule[] | undefined): ReadonlySet<string> | null;
 export declare function installedRows(modules: readonly InstalledWorkbenchModule[], manifests: readonly UnitManifest[], listed: ReadonlySet<string>, known?: ReadonlyMap<string, string> | undefined, defaults?: ReadonlySet<string>, changed?: Readonly<Record<string, number>>): MarketRow[];
 export declare function marketSwitchLocked(row: MarketRow): boolean;
 export declare function marketActions(row: MarketRow): MarketRowAction[];
+export declare function capabilityOutdated(capabilities: CapabilityMap | null, unit: string): boolean;
 export declare function marketCatalog(manifests: readonly UnitManifest[], installable: ReadonlySet<string> | null | undefined): readonly UnitManifest[];
 export declare function liveManifests(manifests: readonly UnitManifest[], capabilities: CapabilityMap | null, installed: ReadonlySet<string> | null): readonly UnitManifest[];
 export declare function marketHasUpdates(rows: readonly MarketRow[], shared?: readonly SharedRow[]): boolean;
@@ -39,5 +41,6 @@ export interface MarketSection {
     readonly titleKey: string;
     readonly rows: readonly MarketRow[];
 }
+export declare function marketOrder(rows: readonly MarketRow[], titleOf: (row: MarketRow) => string): MarketRow[];
 export declare function marketSections(rows: readonly MarketRow[]): MarketSection[];
 export declare function marketRows(manifests: readonly UnitManifest[], capabilities: CapabilityMap | null, updates?: ModuleUpdateMap, defaults?: ReadonlySet<string>, changed?: Readonly<Record<string, number>>): MarketRow[];

package/dist/types/app/layouts/rightbar/market-settle-hold.d.ts

@@ -0,0 +1,13 @@
+import type { Translate } from '@dsh-workbench/shared';
+import type { Pending } from './market-view-text';
+export declare function useSettleHold(input: {
+    readonly pending: Pending | null;
+    readonly landed: boolean;
+    readonly t: Translate;
+    readonly onChanged: () => void;
+    readonly setPending: (next: Pending | null) => void;
+    readonly setFailed: (next: {
+        readonly id: string;
+        readonly message: string;
+    } | null) => void;
+}): void;

package/dist/types/app/layouts/rightbar/market-settle.d.ts

@@ -1,2 +1,24 @@
+import type { MarketRowAction, ModuleUpdate } from './market-row-types';
 export declare const MODULE_SETTLE_MS = 15000;
 export declare function holdBack(installed: readonly string[], roster: ReadonlySet<string>, active: ReadonlySet<string>, previous: ReadonlySet<string> | null): readonly string[];
+export declare const WORKBENCH_SWAP_MS = 180000;
+export declare const WORKBENCH_SWAP_POLL_MS = 800;
+export declare function swapLanded(until: string | undefined, installed: string | undefined): boolean;
+export declare function swapUntil(action: string, application: string | undefined, latest: string | undefined): string | undefined;
+export declare function awaitsReadBack(action: MarketRowAction, application: string | undefined, version: string | undefined): boolean;
+export declare function readBackDone(input: {
+    readonly action: MarketRowAction;
+    readonly entry: ModuleUpdate | undefined;
+    readonly clicked: string | undefined;
+    readonly outdated: boolean;
+}): boolean;
+export declare function settleLanded(input: {
+    readonly action: MarketRowAction;
+    readonly until: string | undefined;
+    readonly readBack: boolean | undefined;
+    readonly installed: string | undefined;
+    readonly entry: ModuleUpdate | undefined;
+    readonly clicked: string | undefined;
+    readonly outdated: boolean;
+}): boolean;
+export declare function holdWindowMs(until: string | undefined): number;

package/dist/types/app/layouts/rightbar/market-transient-state.d.ts

@@ -0,0 +1,22 @@
+import type { MarketMock } from './market-mock';
+import type { Pending } from './market-view-text';
+export interface MarketTransient {
+    readonly pending: Pending | null;
+    readonly setPending: (next: Pending | null) => void;
+    readonly confirming: string | null;
+    readonly setConfirming: (next: string | null) => void;
+    readonly failed: {
+        readonly id: string;
+        readonly message: string;
+    } | null;
+    readonly setFailed: (next: {
+        readonly id: string;
+        readonly message: string;
+    } | null) => void;
+    readonly notice: string | null;
+    readonly setNotice: (next: string | null) => void;
+}
+export declare function useMarketTransient(input: {
+    readonly mock: MarketMock | undefined;
+    readonly onPending?: ((pending: boolean) => void) | undefined;
+}): MarketTransient;

package/dist/types/app/layouts/rightbar/market-view-text.d.ts

@@ -1,13 +1,38 @@
-import type { MarketRow, MarketRowAction } from './market-rows';
+import type { UnitManifest } from '@dsh-workbench/shared';
+import type { CapabilityMap } from '../../../shared/hooks/use-capabilities';
+import type { MarketRow, MarketRowAction, ModuleUpdateMap } from './market-rows';
 export declare const PROGRESS_KEY: Readonly<Record<MarketRowAction, string>>;
 export declare const ACTION_LABEL_KEY: Readonly<Record<MarketRowAction, string>>;
+export interface HeldRow {
+    readonly id: string;
+    readonly row: MarketRow;
+}
 export interface Pending {
     readonly id: string;
     readonly action: MarketRowAction;
     readonly titleKey?: string | undefined;
     readonly pkg?: string | undefined;
     readonly version?: string | undefined;
+    readonly row?: MarketRow | undefined;
+    readonly until?: string | undefined;
+    readonly readBack?: boolean | undefined;
 }
+export declare function holdOf(pending: Pending | null, application: string | undefined): HeldRow | undefined;
+export declare function pendingLanded(pending: Pending | null, updates: ModuleUpdateMap, capabilities: CapabilityMap | null, installed: string | undefined): boolean;
+export declare function holdExpired(held: HeldRow | undefined, backInRoster: boolean, elapsedMs: number): boolean;
+export declare function heldIdOf(pending: Pending | null, held: HeldRow | undefined): string | null;
+export declare function pinnedRowOf(pending: Pending | null, held: HeldRow | undefined): MarketRow | undefined;
+export declare function withPinnedRow(rows: readonly MarketRow[], pinned: MarketRow | undefined): MarketRow[];
+export declare function marketFootVisible(shown: readonly MarketRow[], installed: readonly MarketRow[]): boolean;
+export declare function useMarketTitles(manifests: readonly UnitManifest[], mocked: boolean): ReadonlyMap<string, string>;
+export interface HeldRowControl {
+    readonly held: HeldRow | undefined;
+    hold(next: HeldRow | undefined): void;
+}
+export declare function useHeldRow(pending: Pending | null, backInRoster: (id: string) => boolean): HeldRowControl;
+export declare function removingIdOf(pending: Pending | null, failed: {
+    readonly id: string;
+} | null): string | null;
 export declare function pendingRowOf(input: {
     readonly pending: Pending | null;
     readonly removing: string | null;

package/dist/types/app/layouts/sidebar/workspace-groups.d.ts

@@ -1,13 +1,16 @@
+export type WorkspaceSectionId = 'workspaces' | 'defaultWorkspace' | 'workshop';
 export interface WorkspaceHeadings {
     readonly workspaces: string;
+    readonly defaultWorkspace: string;
     readonly workshop: string;
 }
 export interface WorkspaceSectionPlan<T> {
-    readonly id: 'workspaces' | 'workshop';
+    readonly id: WorkspaceSectionId;
     readonly heading: string | null;
     readonly items: readonly T[];
 }
 export declare function workspaceSections<T extends {
     readonly path: string;
+    readonly title: string;
 }>(items: readonly T[], headings: WorkspaceHeadings): readonly WorkspaceSectionPlan<T>[];
 export declare function flattenSections<T>(sections: readonly WorkspaceSectionPlan<T>[]): readonly T[];

package/dist/types/modules/panels/__tests__/market-tools-harness.d.ts

@@ -2,6 +2,7 @@ import type { UnitCapability } from '../../../shared/api/host/probe-units';
 import type { BundleManager } from '../../../shared/api/host/bundle-manager';
 import type { InstalledModule, ProfileModule, ProfilePackage } from '../../../shared/api/host/installed-module';
 import type { PluginSource, UnitManifest } from '@dsh-workbench/shared';
+import { type SelfUpdateRequest } from '../../../shared/api/host/self-update';
 import { type PluginLedger } from '../model/plugin-ledger';
 export declare function unit(id: string, plugin: string, source?: PluginSource): UnitManifest;
 export declare function libUnit(id: string, libName: string): UnitManifest;
@@ -25,6 +26,7 @@ export declare function harness(options: {
     };
     npmLatest?: string;
     npmMissing?: readonly string[];
+    profileName?: string | null;
 }): {
     registered: {
         name: string;
@@ -37,6 +39,7 @@ export declare function harness(options: {
         commands: () => string[];
     };
     disposers: (() => void)[];
+    selfUpdates: SelfUpdateRequest[];
 };
 export declare function fakeBundles(over?: Partial<BundleManager>): BundleManager;
 export declare function call(h: ReturnType<typeof harness>, args: unknown): Promise<Record<string, unknown>>;

package/dist/types/modules/panels/model/market-workbench-update.d.ts

@@ -0,0 +1,19 @@
+import type { DshShell } from '@dsh-workbench/shared';
+import type { InstalledModule, ProfilePackage } from '../../../shared/api/host/installed-module';
+import { type SelfUpdateRequest, type SelfUpdateStart } from '../../../shared/api/host/self-update';
+import type { BundleInstallOutcome } from './market-types';
+export interface WorkbenchUpdateDeps {
+    readonly asked: string;
+    readonly workbench?: ((pkg: string) => ProfilePackage | undefined) | undefined;
+    readonly shell?: DshShell | undefined;
+    readonly installed?: ((pkg: string) => InstalledModule) | undefined;
+    readonly dshHome?: (() => string) | undefined;
+    readonly profileRegistry?: (() => Promise<string | undefined>) | undefined;
+    readonly profileName?: (() => string | null) | undefined;
+    readonly selfUpdate?: ((request: SelfUpdateRequest, onError: (message: string) => void) => SelfUpdateStart) | undefined;
+    readonly logger?: {
+        info?(message: string): void;
+        warn?(message: string): void;
+    } | undefined;
+}
+export declare function updateWorkbenchOnce(deps: WorkbenchUpdateDeps): Promise<BundleInstallOutcome>;

package/dist/types/modules/panels/model/market.d.ts

@@ -4,6 +4,7 @@ import type { BundleManager } from '../../../shared/api/host/bundle-manager';
 import type { InstalledModule, ProfileModule, ProfilePackage } from '../../../shared/api/host/installed-module';
 import type { RegistryNotebook } from '../../../shared/api/host/profile-registries';
 import type { UnitMountDeps } from '@dsh-workbench/shared/host';
+import type { SelfUpdateRequest, SelfUpdateStart } from '../../../shared/api/host/self-update';
 import { type PluginReferences } from './plugin-actions';
 import type { PluginLedger } from './plugin-ledger';
 import type { MarketService } from './market-types';
@@ -25,6 +26,9 @@ export declare function createMarketService(options: {
     registries?: RegistryNotebook | undefined;
     ledger?: PluginLedger | undefined;
     references?: (() => PluginReferences) | undefined;
+    dshHome?: (() => string) | undefined;
+    profileName?: (() => string | null) | undefined;
+    selfUpdate?: ((request: SelfUpdateRequest, onError: (message: string) => void) => SelfUpdateStart) | undefined;
     logger?: {
         info?(message: string): void;
         warn?(message: string): void;

package/dist/types/modules/sessions/index.d.ts

@@ -1,2 +1,2 @@
-export { currentSessionId, sessionNode, orderSessionRows, sessionRows, workspaceOfSession, sessionStatuses, visiblePendingKind, type SessionNode, type SessionStatusDot, } from './model/session-node';
+export { currentSessionId, orderByRecency, sessionNode, orderSessionRows, sessionRows, workspaceOfSession, sessionStatuses, visiblePendingKind, type SessionNode, type SessionStatusDot, } from './model/session-node';
 export { scrollEdgesOf, type ScrollEdges } from './model/scroll-edges';

package/dist/types/modules/sessions/model/session-node.d.ts

@@ -19,6 +19,7 @@ export declare function visiblePendingKind(kind: string | undefined): string | u
 export declare function sessionNode(summary: SessionSummary, statusById: SessionStatusSnapshot, list: SessionsSnapshot, pinnedIds: ReadonlySet<string>, archivedIds: ReadonlySet<string>): SessionNode;
 export declare function sessionStatuses(node: SessionNode, t: Translate): SessionStatusDot[];
 export declare function currentSessionId(list: SessionsSnapshot, panelActive: boolean): string | undefined;
+export declare function orderByRecency(rows: readonly SessionSummary[]): SessionSummary[];
 export declare function orderSessionRows(rows: readonly SessionSummary[], pinnedIds: ReadonlySet<string>, archivedIds: ReadonlySet<string>): SessionSummary[];
 export declare function workspaceOfSession<T extends {
     readonly sessionIds: readonly string[];

package/dist/types/shared/api/bundle-install.d.ts

@@ -111,6 +111,7 @@ export interface WorkbenchVersion {
     readonly pkg: string;
     readonly installed: string;
     readonly latest?: string;
+    readonly running?: string;
     readonly local?: boolean;
 }
 export interface ModuleVersionsPayload {

package/dist/types/shared/api/config-sync.d.ts

@@ -0,0 +1,35 @@
+export declare const CONFIG_SYNC_ROUTE = "config-sync";
+export declare const CONFIG_SYNC_RESOURCE = "configSync";
+export type ConfigSyncState = 'new' | 'differs';
+export interface ConfigSyncRow {
+    readonly key: string;
+    readonly id: string;
+    readonly insert: boolean;
+    readonly state: ConfigSyncState;
+    readonly body: string;
+    readonly ownBody: string | null;
+    readonly missing: readonly string[];
+}
+export interface ConfigSyncProfile {
+    readonly name: string;
+    readonly readable: boolean;
+    readonly candidates: number;
+}
+export interface ConfigSyncSnapshot {
+    readonly self: string;
+    readonly home: string;
+    readonly source: string;
+    readonly profiles: readonly ConfigSyncProfile[];
+    readonly rows: readonly ConfigSyncRow[];
+    readonly emptyProviders: boolean;
+    readonly reason?: string;
+}
+export interface ConfigSyncApplied {
+    readonly written: readonly string[];
+    readonly skipped: readonly string[];
+}
+export interface ConfigSyncRequest {
+    readonly source: string;
+    readonly keys: readonly string[];
+    readonly overwrite: readonly string[];
+}

package/dist/types/shared/api/config-sync.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/__tests__/config-sync.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/__tests__/post-channels.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/__tests__/self-update.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/shared/api/host/bundle-manager.d.ts

@@ -5,6 +5,7 @@ export interface BundleManager {
     inspect(spec: string, registry?: BundleRegistry): Promise<BundleInspection | null>;
     install(request: BundleInstallRequest): Promise<BundleChange | null>;
     remove(name: string): Promise<BundleChange | null>;
+    setEnabled?(name: string, enabled: boolean): Promise<BundleChange | null>;
     cancel(requestId: string): Promise<BundleCancellation | null>;
 }
 export declare function readBundleManager(ctx: DshHostContext): BundleManager | undefined;

package/dist/types/shared/api/host/bundle-routes.d.ts

@@ -3,5 +3,5 @@ import { type RouteHandler } from '@dsh-workbench/shared/host';
 export declare function bundleRegistriesHandler(ctx: DshHostContext): RouteHandler;
 export declare function resetRefusalLog(): void;
 export declare function resetHoldLog(): void;
-export declare function moduleVersionsHandler(ctx: DshHostContext, shell: DshShell | undefined): RouteHandler;
+export declare function moduleVersionsHandler(ctx: DshHostContext, shell: DshShell | undefined, running?: string | undefined): RouteHandler;
 export declare function bundleInspectHandler(ctx: DshHostContext): RouteHandler;

package/dist/types/shared/api/host/config-sync.d.ts

@@ -0,0 +1,46 @@
+import type { PostResource, RouteHandler } from '@dsh-workbench/shared/host';
+import type { ConfigSyncRow, ConfigSyncSnapshot } from '../config-sync.js';
+export interface PatchBlock {
+    readonly key: string;
+    readonly id: string;
+    readonly insert: boolean;
+    readonly body: string;
+    readonly names: readonly string[];
+}
+export declare function patchBlocks(text: string): PatchBlock[];
+export declare function normalizeBlock(body: string): string;
+export declare function syncRows(source: readonly PatchBlock[], own: readonly PatchBlock[], missing: (block: PatchBlock) => readonly string[]): ConfigSyncRow[];
+export declare function mergeBlocks(ownText: string, incoming: readonly PatchBlock[], overwrite: ReadonlySet<string>): {
+    ok: true;
+    text: string;
+    written: string[];
+    skipped: string[];
+} | {
+    ok: false;
+    reason: string;
+};
+export declare function readPatchBlocks(path: string): {
+    ok: true;
+    text: string;
+    blocks: PatchBlock[];
+} | {
+    ok: false;
+    reason: string;
+};
+export declare function writePatchFile(path: string, text: string): void;
+export interface ConfigSyncDeps {
+    readonly home: string;
+    readonly self: string;
+    readonly profileDir: string | null;
+}
+export declare function configSyncHandler(deps: ConfigSyncDeps): RouteHandler;
+export declare function configSyncSnapshot(deps: ConfigSyncDeps, asked?: string): ConfigSyncSnapshot;
+export declare function configSyncApply(deps: ConfigSyncDeps, payload: unknown): {
+    ok: true;
+    written: string[];
+    skipped: string[];
+} | {
+    ok: false;
+    text: string;
+};
+export declare function configSyncAction(deps: ConfigSyncDeps): PostResource;

package/dist/types/shared/api/host/post-channels.d.ts

@@ -0,0 +1,18 @@
+import type { DshHostContext } from '@dsh-workbench/shared';
+import type { PostResource, PostWrite } from '@dsh-workbench/shared/host';
+import { type UnitsPlan } from './mount-units.js';
+export interface PostChannelDeps {
+    readonly ctx: DshHostContext;
+    readonly mounted: ReadonlyMap<string, {
+        readonly plan: UnitsPlan;
+    }>;
+    readonly facts: {
+        bump(names: readonly string[]): unknown;
+    };
+    readonly shellActions: readonly PostResource[];
+}
+export interface PostChannels {
+    rebind(wrote: (resource: string, write: PostWrite) => void): void;
+    dispose(): void;
+}
+export declare function createPostChannels(deps: PostChannelDeps): PostChannels;

package/dist/types/shared/api/host/self-update.d.ts

@@ -0,0 +1,45 @@
+import { spawn } from 'node:child_process';
+import { type SeedCommand } from './runtime-seed';
+export declare const SELF_UPDATE_STATES: readonly ["running", "ok", "rolled-back", "failed"];
+export type SelfUpdateState = (typeof SELF_UPDATE_STATES)[number];
+export interface SelfUpdatePaths {
+    readonly dir: string;
+    readonly script: string;
+    readonly marker: string;
+    readonly log: string;
+}
+export interface SelfUpdateRequest {
+    readonly dshHome: string;
+    readonly profile: string;
+    readonly pkg: string;
+    readonly from: string;
+    readonly to: string;
+    readonly pinned: boolean;
+}
+export interface SelfUpdateMarker extends SelfUpdateRequest {
+    readonly state: SelfUpdateState;
+    readonly version: string;
+    readonly at: string;
+}
+export interface SelfUpdatePlan {
+    readonly paths: SelfUpdatePaths;
+    readonly script: string;
+    readonly marker: SelfUpdateMarker;
+    readonly command: SeedCommand;
+}
+export interface SelfUpdateStart {
+    readonly started: boolean;
+    readonly paths: SelfUpdatePaths;
+    readonly forward: string;
+}
+export declare function runningVersionOf(moduleUrl: string): string | undefined;
+export declare function selfUpdatePaths(dshHome: string): SelfUpdatePaths;
+export declare function recoveryCommand(input: {
+    readonly profile: string;
+    readonly pkg: string;
+    readonly version: string;
+}): string;
+export declare function selfUpdateMarker(request: SelfUpdateRequest, state: SelfUpdateState, version: string, at: string): SelfUpdateMarker;
+export declare function selfUpdateScript(request: SelfUpdateRequest, paths: SelfUpdatePaths): string;
+export declare function planSelfUpdate(request: SelfUpdateRequest, now?: Date): SelfUpdatePlan;
+export declare function startSelfUpdate(request: SelfUpdateRequest, onError: (message: string) => void, spawnImpl?: typeof spawn): SelfUpdateStart;

package/docs/HANDOFF.md

@@ -58,16 +58,19 @@ npx @dsh-workbench/core
 > `chmod +x ~/.npm/_npx/*/node_modules/@dsh-workbench/core/{scripts/seed-profile.sh,bin/opencli-isolated}`。
 > 0.1.7 起启动器已不吃 x 位，重装那个版本即可根治。
 
-### 设置从哪来：**两边都要的在 `dsh web` 里配**（单向、实时）
+### 设置从哪来：**工作台自己那份说了算**，想要 web 的行就同步一次（ADR-0044）
 
-工作台启动时会用 `--patch` 把 `profiles/web/cordis.patch.yml` 叠在自己的差异层之上
-（`bin/dsh-workbench` 里就在做这件事）。所以：
+工作台**不再**把 `profiles/web/cordis.patch.yml` 叠在自己上面 —— 叠层是最高层，
+它盖住的行在 `:3081` 的 Settings 里**改不动**（dsh 的 config-editor 会被那句
+`overridden by a home patch or command-line overlay` 挡在写文件之前）。
+现在的工作方式：
 
-- **模型供应商 / API key / 搜索源 / MCP** 这类"机器级、两边都要"的设置 ⇒ **在 `:3080` 的 Settings 里配一次**，工作台自动同源；
-- **只有工作台要的**（面板显示哪些模块、会话隔离）⇒ 在 `:3081` 里配，落在它自己的 profile patch，web 看不到；
-- 被 web 声明过的行，在工作台的 Settings 页里会显示 `overridden by a home patch or command-line overlay` —— 那是"这行由 web 管"的**提示**，不是故障。
-
-（这是 `--patch` 单向叠加，不是双向同步：工作台里配的**不会**流回 web。）
+- **要配什么就在 `:3081` 配**，落在 `profiles/workbench/cordis.patch.yml` —— 那是它唯一的那份设置文档；
+- **想用 web 那边已经配好的行**（模型供应商 / API key 引用 / 搜索源 / MCP）⇒ `:3081` →
+  `Meta+,` → 「配置同步」→ 选来源 `web` → 勾行 → 同步（即生效，不用重启）。
+  它读的是那个 profile 的 `cordis.patch.yml`，按行搬，只搬**显式配过**的行；
+  同 id 两边内容不同时**默认不覆盖**，要覆盖得自己勾；行点名的包没装会当场说出来。
+- **web 后来改了不会自动过来** —— 再打开这一页，那几行会重新以「差异」标签出现在这一页，拉一次即可。
 
 ### 一条"看起来坏了、其实没坏"的情况
 
@@ -85,14 +88,16 @@ Settings → 插件里把 `@dsh-workbench/core` 关掉后，工作台会**退化
 ### `setup` 到底做了什么（幂等，可以重复跑）
 
 1. 拿 `~/.dsh/profiles/web` 当模板建 `workbench` profile；
-2. 继承 web 的 bundle 清单 + 设置快照 + patch 点名的依赖；
+2. 继承 web 的 **bundle 清单**（装没装东西 —— 安装范畴，走 `dsh plugin` 通路）；
 3. 追加**数据隔离层**（会话 / 存储 / 附件各走 `~/.dsh/workbench/**`）；
 4. `dsh plugin --profile workbench add @dsh-workbench/core` —— 走 **dsh 自己的**
    安装通路（兼容性预检、profile 写锁、装完自动把 bundle 登记进 profile 清单）。
 
-继承是**一次性快照**，不是订阅：web 之后改设置不会流过来（这正是"互不影响"的实现方式），
-要重新同步得重跑 `setup`。有意共享的只有两样：**API 凭据**（`~/.dsh/.credentials.yaml`，
-一机一把 key）和 `$DSH_HOME/cordis.patch.yml`（机器公共层，对所有 profile 实时生效）。
+**设置不在这一步继承**（这里以前快照 web 的 patch、并继承被它点名的依赖）：新机器上
+`setup` 完的工作台**没有模型供应商**，第一次打开去 设置 → 「配置同步」拉一次即可 ——
+这样每一行都归工作台自己，改得动。有意共享的只有两样：**API 凭据**
+（`~/.dsh/.credentials.yaml`，一机一把 key）和 `$DSH_HOME/cordis.patch.yml`（机器公共层，
+对所有 profile 实时生效）。
 
 ## 四、不想用 npx？仓库副本也可以
 
@@ -183,7 +188,7 @@ manifest；彩排结束、以及「零上传」的失败，都会自动回滚。
 `pnpm publish` 的人兜底的（外壳那份 = 整仓门禁）；不关掉它们，pnpm 会在**彩排与真发各再跑
 一遍**整门禁 —— 一次发布就是 3 遍门禁 + 3 遍 vitest + 每个包多两轮构建（实测 pnpm 10.32.1：
 `--dry-run` 一样触发）。来历见
-[`.scratch/dsh-ui-alignment/spec.md`](../../../.scratch/dsh-ui-alignment/spec.md) §18.45。
+[`../../../.scratch/dsh-ui-alignment/issues/12-s18-pduiv2.md`](../../../.scratch/dsh-ui-alignment/issues/12-s18-pduiv2.md) §18.45。
 
 脚本把这几件事变成**硬失败**（都在任何上传之前）：
 
@@ -203,7 +208,7 @@ manifest；彩排结束、以及「零上传」的失败，都会自动回滚。
   自己拥有的转发脚本。这条由外壳 `selfcheck` 的判据钉着（门禁里跑）。
   这类错**本机复现不出来**，只在别人机器上炸
   （0.1.6 就是这么坏在 `seed-profile.sh: Permission denied` 上的，见
-  [`.scratch/dsh-ui-alignment/spec.md`](../../../.scratch/dsh-ui-alignment/spec.md) §18.41）。
+  [`.scratch/dsh-ui-alignment/issues/53-18-41-permission-denied-pnpm.md`](../../../.scratch/dsh-ui-alignment/issues/53-18-41-permission-denied-pnpm.md) §18.41）。
 
 ## 八、版本与兼容（实话）
 

package/docs/OPERATIONS.md

@@ -26,7 +26,8 @@
 `OPENCLI_PIN` 锁），但它连的 **daemon 是整机一个** —— 见下面「隔离边界」。
 
 前提：`dsh` 和 `pnpm` 在 PATH 上（`dsh plugin` 是转发给 pnpm 的），
-且 `~/.dsh/profiles/web` 已存在（跑过一次 `dsh web` 即可）。
+且 `~/.dsh/profiles/web` 已存在（跑过一次 `dsh web` 即可）—— seed 拿它当**模板**
+（bundle 清单），之后也是「配置同步」的默认来源。
 
 **给别人用**（两条路：插件页装进他自己的 web / 独立实例 `setup`；包在公网 npm 上）见 [`HANDOFF.md`](HANDOFF.md)。
 
@@ -58,9 +59,9 @@
 | 开工作台 | `./bin/dsh-workbench` |
 | 开发（监听改动 + 起工作台） | `pnpm run dev` —— profile 不对会先 `setup`；`:3081` 已在跑就只监听 |
 | 换端口 | `WORKBENCH_PORT=3091 ./bin/dsh-workbench` |
-| 改工作台设置 | 在 `:3081` 的 Settings 页改，落在 `profiles/workbench/cordis.patch.yml` |
-| 改 web 设置 | 在 `:3080` 改，落在 `profiles/web/cordis.patch.yml`。**两边都要的设置（模型供应商、搜索源、MCP）就在这一份里配** —— 工作台启动时会用 `--patch` 把它叠上来（web → 工作台，单向、实时），所以不必配两遍 |
-| 改只有工作台用的设置 | 在 `:3081` 改，落在 `profiles/workbench/cordis.patch.yml`。这个文件**只剩工作台自己的差异**（会话/存储/附件隔离 + 沙箱）；被 web 覆盖过的行在这里改不动（编辑器会写 `overridden`，那就是"这行由 web 管"的提示） |
+| 改工作台设置 | 在 `:3081` 的 Settings 页改，落在 `profiles/workbench/cordis.patch.yml`。**这是工作台唯一的那份设置文档**（没有别处叠在它上面），所以模型供应商 / 搜索源 / MCP 每一行都改得动 |
+| 用 web 那边已经配好的行 | `:3081` → `Meta+,` → 「配置同步」→ 选来源（默认 `web`）→ 勾行 → 同步（`dsh-hmr` 会重组，**不用重启**）。只搬你在那个 profile 里**显式配过**的行；行点名的包没装时页面会说出来（ADR-0044） |
+| 改 web 设置 | 在 `:3080` 改，落在 `profiles/web/cordis.patch.yml`。工作台**不会**再自动跟着变 —— 要就跟上面那条同步一次；不想跟就不动 |
 | 重建 profile | `mv ~/.dsh/profiles/workbench ~/.dsh/profiles/workbench.bak` 后重跑 seed |
 | **别在设置里关掉工作台** | Settings → 插件里 `@dsh-workbench/core` 那个开关**不要关**。关掉=把它从 profile 的 `bundles` 里移除 → 我们那份 bundle patch（含"禁用出厂左栏"）**整份不再应用** → 页面退化成**原版 dsh web**（左栏回来、右侧面板消失），**数据一个都不丢**。恢复：插件页把开关打开（左栏的「插件」入口也在；进不去设置就按 `Meta+,`）。实测过这条降级路径，不是推断 |
 
@@ -85,7 +86,8 @@ WORKBENCH_PORT=3091 pnpm run dev   # 换端口（监听与实例同一个端口
 | 浏览器 | Vite 重建 `client.js` → `dsh-client-hmr` 每 500ms stat-poll 到 mtime/大小变化 → `/plugins/events` 发 `rebuilt` → 浏览器作废旧模块、预取新包、换 fiber | 插件内的 React 状态会丢；会话 / 工作区 / 连接状态保留 |
 | 宿主 | Vite 重建 `dist/host/index.js` → `dsh-hmr` 按模块 realpath 匹配并重载插件 | 插件重建，进程与其它插件不受影响 |
 
-**只有这两种改动要重启**：`cordis.patch.yml`（组合层）与 `package.json` 的 `dsh.profile.bundles`。
+`cordis.patch.yml`（组合层）与 `package.json` 的 `dsh.profile.bundles` **也在监听里**：`dsh-hmr` 变了就 `recomposeProfile`，
+不用重启（它报 `restartReason` 时才按提示重启）。仍然要重启的是改 `vite.config.ts`。
 
 宿主侧监听为什么要环境变量：出厂 `hmr` 的 `root` 默认是 `[]`（不监听），
 而相对路径以 profile 目录为基准 —— 我们的包在 profile 里只是一个指向本仓库的符号链接，
@@ -102,8 +104,9 @@ WORKBENCH_PORT=3091 pnpm run dev   # 换端口（监听与实例同一个端口
 
 0. **代码接线** —— 槽位名 / key / id / locale 是否对得上（语法检查抓不到这类错）
 1. **web 是否被动过** —— 与 `--record` 的哈希逐一比对
-2. **组合树差异** —— `dsh web --dump-config` vs `dsh workbench --dump-config`，
-   差异应恰好是隔离行 + 工作台行 + `ui-sidebar` 被禁用
+2. **组合树** —— `dsh workbench --dump-config`：工作台行在位、出厂 `ui-sidebar` 被禁用、
+   启动器里没有 web 设置的叠层（脚本直接判，见 ADR-0044）。两棵树**本来就不该相同**
+   （工作台不再继承 web 的设置），差异只打出来给人看
 3. **数据是否分家** —— `~/.dsh/sessions` 与 `~/.dsh/workbench/sessions` 各自独立
 4. **隔离行是否在位** —— 三个根行都在 `profiles/workbench/cordis.patch.yml` 里
 
@@ -126,6 +129,35 @@ WORKBENCH_PORT=3091 pnpm run dev   # 换端口（监听与实例同一个端口
 | opencli **daemon** | ❌ **整机一个，隔离不了** | 端口 **19825 被扩展写死**（`background.js` 里 `DAEMON_PORT = 19825`；CLI 侧 `OPENCLI_DAEMON_PORT` 设非默认值直接报错）。所以本机的全局 opencli 与工作台的隔离运行时**抢同一个 daemon**：两边版本不一致时，谁的命令后跑谁就把 daemon 重启成自己那版 |
 | profile 的 pnpm 源（私有 scope） | ⚠️ **由工作台写进去** | `<profile>/.npmrc` 里的 `@scope:registry=…`，前面带一行 `# dsh-workbench 写的…` 标记。**为什么在工作台这一侧写**：dsh 的卸载没有源参数（`runPnpm(['remove', name])`），pnpm 只能从 profile 的 `.npmrc` 链知道源；不写它，装私有源的模块能成、卸不了。规则与边界见 [ADR-0030](../../../docs/adr/0030-private-registries-live-in-the-profile-pnpm-config.md)：只加不改、只写 scope 行、不碰 `~/.npmrc`。**删了会怎样**：下次从这个源装会再写回来；已经装着的那种，点卸载时撞 404 会自愈补回再重试一次 |
 
+## 工作台自己怎么升级、出事怎么救
+
+工作台那一行的「更新」**不会把自己摘掉**（见 [ADR-0045](../../docs/adr/0045-workbench-self-update-runs-outside-the-workbench.md)）：
+点下去之后工作台把现场写到 `$DSH_HOME/workbench/self-update.sh|json|log`，然后起一个**独立进程**去做
+`dsh plugin --profile <profile> add @dsh-workbench/core@<版本>` —— 就地换版本，一行都不摘，
+所以它换的就是工作台自己也没关系（换的是外头那个进程）。
+
+- 成功：`self-update.json` 里 `state: "ok"`，`version` 是新版；**重启一次 dsh** 才用得上（面板会这么说）。
+- 换版没成：脚本自己把旧版本装回去，`state: "rolled-back"` —— 工作台不会因此消失。
+- 回滚也没成：`state: "failed"`，日志最后一行给出救法。终端敲这一条即可：
+  `dsh plugin --profile <profile> add @dsh-workbench/core@<版本>`（`<版本>` 取源上最新，或 `latest`）。
+
+两种安装形态的差别：
+
+| 怎么装的 | profile 里那一条 | 市场自更新 |
+|---|---|---|
+| `npm i -g @dsh-workbench/core` 然后 `dsh-workbench setup` | `@dsh-workbench/core@^x.y.z`（源上） | 能（就是上面那一条） |
+| 仓库副本（`pnpm run dev` / `link:` 本目录） | `link:…` | 拒：不把开发副本换成源上那份 |
+
+全局那一份**启动器**不会跟着升级（它只是启动器：真正加载的是 profile 里那份）。换 profile 或重建之前，
+先 `npm i -g @dsh-workbench/core@latest`；已经在跑的 profile 走市场那一颗「更新」。
+
+### 起不来：`failed to parse overlay …/cordis.patch.yml`（YAMLException: end of the stream …）
+
+早期版本 `seed-profile.sh` 会把隔离层直接接到 dsh 新模板的 patch 后面，而那份模板的内容是「横幅注释 +
+一个空数组 `[]`」—— 空数组本身是一个**完整的 YAML 文档**，后面再接序列就解析不了，profile 一条都组不起来。
+现在的脚本追加前会先把那行单独的 `[]` 让位（`selfcheck` 有判据钉着）。如果你手上那份 profile 是旧脚本建出来的，
+手工把 `cordis.patch.yml` 里**单独一行**的 `[]` 删掉再起即可（其余内容不用动）。
+
 ## 排障
 
 | 症状 | 原因 |
@@ -134,7 +166,7 @@ WORKBENCH_PORT=3091 pnpm run dev   # 换端口（监听与实例同一个端口
 | 面板一直空着、`/workbench/api/issues` 返回 `coding-not-logged-in` | opencli 登录态失效：在终端跑 `opencli coding team-current` 完成登录 |
 | 面板显示"这个项目不是 Coding 仓库" | 该工作区的 git `origin` 不指向 `e.coding.net`（或没有 origin） |
 | 打开面板/按刷新要等 5–8 秒 | 正常：opencli 每次调用有**固定约 5 秒**开销（起浏览器会话；接口本身只要 ~260ms）。**没有缓存**——数据一律实时，列表 = 缺陷 + 状态目录两次调用（限并发 2，实测约 7 秒） |
-| 改了源码没变化 | 忘了 `pnpm run build`，或没重启进程（宿主缓存已加载的包） |
+| 改了源码没变化 | 忘了 `pnpm run build`，或没刷新页面；改过 `vite.config.ts` 后没重启（正在跑的 watch 用的还是旧配置） |
 | 市场页点「卸载」报 `没成功：… ERR_PNPM_FETCH_404 GET https://registry.npmjs.org/@你的私有 scope/…` 之类 | 这个 profile 里的私有包不在 pnpm 默认源上，而 dsh 的卸载**不带源**。工作台会自己补上 `<profile>/.npmrc` 的 `@scope:registry=` 再重试一次（[ADR-0030](../../../docs/adr/0030-private-registries-live-in-the-profile-pnpm-config.md)）；**还失败**说明那个包没有 scope（一行 scope 行表达不了），这时才需要人/agent 上手：`dsh plugin --profile <p> remove '<包名>' --config.registry=<那个源>`（`pnpm remove` 不认 `--registry=`），或者给 profile 自己配一行默认 `registry=` |
 | 体检那屏「检测浏览器通道 · 没连上」，可面板照样能用 | 本机全局 opencli 与隔离运行时版本不一致 ⇒ daemon 被顶成对方那版（`Stale daemon detected: daemon vX != CLI vY`）。下一条浏览器命令会自动把它重启回来，体检也会复检后改回「已连接」（[ADR-0024](../../../docs/adr/0024-warm-the-sites-before-the-panel.md) §3.2.1）。**要彻底不抖**：让两边同版本 —— 把 `OPENCLI_PIN`（`src/shared/config/constants.ts`）对齐到 `opencli --version`，再 `npm i --prefix ~/.dsh/workbench/opencli/toolchain @jackwener/opencli@<那个版本> --cache ~/.dsh/workbench/opencli/npm-cache` |
 | Settings 页报 `overridden by a home patch` | 想在 Settings 里改的行被 `$DSH_HOME/cordis.patch.yml` 或 `--patch` 覆盖了 |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-workbench/core",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "个人工作台：Agent 工作台外壳（左栏 + 常驻对话 + 自研右侧数据面板）。",
   "type": "module",
   "icon": "./icon.svg",
@@ -42,7 +42,7 @@
     "title": "Workbench",
     "description": "个人工作台"
   },
-  "//scripts": "包内不跑 check:docs —— 那份文档管理块住在仓库根的 docs/ARCHITECTURE.md，由根 `pnpm run check` 用 --config 指到本包的 arch.config.mjs 校验。prepublishOnly 走 -w 跑根那一整套。",
+  "//scripts": "包内不跑 check:docs —— 那份文档管理块住在仓库根的 docs/ARCHITECTURE.md，由根 `pnpm run check` 用 --config 指到本包的 arch.config.mjs 校验。check 与 prepublishOnly 都走 -w 跑根那一整套：包内自己串一份会漏掉 lint（react-hooks 那几条规则只在这里跑）、check:docs 与模块工具包的十一条判据 —— 2026-10-16 实测踩到（渲染期写 ref，包内全绿、根上一跑就红）。",
   "//dsh.bundle.patch": "一份 preset 就是一个补丁层：它 insert 一行 @deepseek-ai/dsh-agent-preset，config.plugins 是整表插件清单。diy.patch.yml 是**生成的**（scripts/gen-diy-preset.mjs，从 dsh 出厂那份 standard.patch.yml 派生），selfcheck 有一条判据盯着它有没有过期。",
   "dsh": {
     "bundle": {
@@ -87,7 +87,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@dsh-workbench/shared": "0.2.5"
+    "@dsh-workbench/shared": "0.2.7"
   },
   "scripts": {
     "build": "node scripts/build.mjs && node scripts/build-types.mjs",
@@ -97,7 +97,7 @@
     "arch": "arch-guard",
     "selfcheck": "node scripts/selfcheck.mjs",
     "check:runtimes": "node scripts/check-runtimes.mjs",
-    "check": "npm run typecheck && npm run coverage && npm run arch && npm run check:runtimes && npm run selfcheck",
+    "check": "pnpm -w run check",
     "test": "vitest run",
     "coverage": "vitest run --coverage",
     "dev": "node scripts/dev.mjs",