@dsh-workbench/core 1.1.14-beta.1 → 1.1.14

package/dist/host/index.js

@@ -1,14 +1,14 @@
-import path, { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { homedir, tmpdir } from "node:os";
 import dayjs from "dayjs";
-import fs, { accessSync, constants, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { fileURLToPath, pathToFileURL } from "node:url";
+import fs, { accessSync, closeSync, constants, copyFileSync, existsSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import path, { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import writeFileAtomic from "write-file-atomic";
 import utc from "dayjs/plugin/utc.js";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import { createHash, randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
-import { createRequire } from "node:module";
-import writeFileAtomic from "write-file-atomic";
 import { execa } from "execa";
+import { createRequire } from "node:module";
 import { deflateSync, inflateSync } from "node:zlib";
 //#region \0rolldown/runtime.js
 var __create = Object.create;
@@ -566,7 +566,12 @@ var TOOL_KEYS = [
 	"key"
 ];
 var TOOL_KEY_SHAPE = /^[a-z][a-zA-Z0-9]*$/;
-var HOST_KEYS = ["inject", "optional"];
+var HOST_KEYS = [
+	"inject",
+	"optional",
+	"writes"
+];
+var UNIT_WRITE_SCOPES = ["unit", "workspace"];
 function text$2(value) {
 	return typeof value === "string" ? value.trim() : "";
 }
@@ -666,6 +671,14 @@ function declarationProblemsOf(subject, raw) {
 			if (host.inject === void 0) problems.push(`${subject}: dsh.workbench.host.inject 没写 —— 它声明这个模块要外壳的哪几个服务，外壳靠它判"能不能挂"。一个都不要也要写 \`"inject": []\``);
 			else problems.push(...stringArrayProblems(`${subject}: dsh.workbench.host.inject`, host.inject));
 			if (host.optional !== void 0) problems.push(...stringArrayProblems(`${subject}: dsh.workbench.host.optional`, host.optional));
+			if (host.writes !== void 0) {
+				const shape = stringArrayProblems(`${subject}: dsh.workbench.host.writes`, host.writes);
+				problems.push(...shape);
+				if (shape.length === 0) {
+					const outsideScopes = host.writes.filter((scope) => !UNIT_WRITE_SCOPES.includes(scope));
+					if (outsideScopes.length > 0) problems.push(`${subject}: dsh.workbench.host.writes 里有不认的写入域 ${listOf(outsideScopes)} —— 只认 "unit"（模块自己的数据目录）与 "workspace"（当前会话工作区）两档；模块拿不到产品域与任意路径，别写别的名字（缺省 [] = 不给执行缝门面）`);
+				}
+			}
 		}
 	}
 	return problems;
@@ -707,7 +720,8 @@ function readDeclaration(subject, raw) {
 			})),
 			host: {
 				inject: [...declaration.host.inject ?? []],
-				...declaration.host.optional === void 0 ? {} : { optional: [...declaration.host.optional] }
+				...declaration.host.optional === void 0 ? {} : { optional: [...declaration.host.optional] },
+				writes: [...declaration.host.writes ?? []]
 			},
 			...declaration.needs === void 0 ? {} : { needs: declaration.needs }
 		},
@@ -734,6 +748,88 @@ var BUNDLE_REGISTRIES_ROUTE = "bundle-registries";
 var BUNDLE_INSPECT_ROUTE = "bundle-inspect";
 var MODULE_VERSIONS_ROUTE = "module-versions";
 //#endregion
+//#region ../shared/dist/host/fs-write.js
+function modeOf(path, mode) {
+	if (typeof mode === "number") return mode;
+	try {
+		return statSync(path).mode & 511;
+	} catch {
+		return 420;
+	}
+}
+function prepareOf(path, options) {
+	if (options.mkdir !== false) mkdirSync(dirname(path), { recursive: true });
+	return modeOf(path, options.mode);
+}
+function atomicOptionsOf(mode, options) {
+	return options.fsync === true ? {
+		mode,
+		fsync: true
+	} : { mode };
+}
+/**
+* 把文本写进文件；默认原子写（temp + rename）、目录不存在就建、已有文件保留原权限。
+* @param path 目标文件；父目录按 `mkdir` 决定是否创建。
+* @param text 文本内容。
+* @param options 原子/目录/权限/fsync；`mode` 默认 `'keep'`（新文件 0644）。
+*/
+function writeTextFile(path, text, options = {}) {
+	const mode = prepareOf(path, options);
+	if (options.atomic === false) {
+		writeFileSync(path, text, { mode });
+		return;
+	}
+	writeFileAtomic.sync(path, text, atomicOptionsOf(mode, options));
+}
+/**
+* `writeTextFile` 的异步版；语义与默认值相同。
+* @param path 目标文件。
+* @param text 文本内容。
+* @param options 原子/目录/权限/fsync。
+* @returns 落盘完成。
+*/
+async function writeTextFileAsync(path, text, options = {}) {
+	const mode = prepareOf(path, options);
+	if (options.atomic === false) {
+		writeFileSync(path, text, { mode });
+		return;
+	}
+	await writeFileAtomic(path, text, atomicOptionsOf(mode, options));
+}
+/**
+* 把二进制写进文件；语义与默认值同 `writeTextFile`。
+* @param path 目标文件。
+* @param bytes 二进制内容。
+* @param options 原子/目录/权限/fsync。
+*/
+function writeBytesFile(path, bytes, options = {}) {
+	const mode = prepareOf(path, options);
+	if (options.atomic === false) {
+		writeFileSync(path, bytes, { mode });
+		return;
+	}
+	writeFileAtomic.sync(path, Buffer.from(bytes), atomicOptionsOf(mode, options));
+}
+/**
+* 把 JSON 写进文件：`JSON.stringify(value, null, 2)` 加末尾换行；语义与默认值同 `writeTextFile`。
+* @param path 目标文件。
+* @param value 可序列化的值。
+* @param options 原子/目录/权限/fsync。
+*/
+function writeJsonFile(path, value, options = {}) {
+	writeTextFile(path, `${JSON.stringify(value, null, 2)}\n`, options);
+}
+/**
+* `writeJsonFile` 的异步版；语义与默认值相同。
+* @param path 目标文件。
+* @param value 可序列化的值。
+* @param options 原子/目录/权限/fsync。
+* @returns 落盘完成。
+*/
+async function writeJsonFileAsync(path, value, options = {}) {
+	await writeTextFileAsync(path, `${JSON.stringify(value, null, 2)}\n`, options);
+}
+//#endregion
 //#region ../shared/dist/host/installed-sources.js
 var FILE_NAME = ".dsh-workbench-sources.json";
 var FILE_VERSION = 1;
@@ -774,14 +870,10 @@ function packageSourceOf(profileDir, pkg) {
 	return readInstalledSources(profileDir)[pkg];
 }
 function writeInstalledSources(profileDir, sources) {
-	const file = installedSourcesFile(profileDir);
-	const temp = `${file}.tmp`;
-	const text = `${JSON.stringify({
+	writeTextFile(installedSourcesFile(profileDir), `${JSON.stringify({
 		version: FILE_VERSION,
 		packages: sources
-	}, null, 2)}\n`;
-	fs.writeFileSync(temp, text, { mode: 384 });
-	fs.renameSync(temp, file);
+	}, null, 2)}\n`, { mode: 384 });
 }
 function rememberPackageSource(profileDir, pkg, source) {
 	const trimmed = pkg.trim();
@@ -847,54 +939,58 @@ function refusalReason() {
 	return "这个包既不是工作台的模块，也不是运行时的插件，装了也用不上";
 }
 //#endregion
-//#region ../shared/dist/host/shell.js
-var DEFAULT_MAX_BYTES$3 = 8388608;
-var GUARD_SLACK_MS = 1e3;
-function stalledResult() {
-	return {
-		exitCode: null,
-		timedOut: true,
-		aborted: false,
-		stdout: "",
-		stderr: "",
-		truncated: false,
-		stalled: true
-	};
+//#region ../shared/dist/host/time.js
+dayjs.extend(utc);
+/**
+* 把时间戳/ISO 字符串转成毫秒；非法输入给 `NaN`（调用方据此回退）。
+* @param value ISO 字符串、时间戳或 Date。
+* @returns 毫秒时间戳或 `NaN`。
+*/
+function epochOf(value) {
+	return dayjs(value).valueOf();
 }
-async function settleWithin(work, limitMs) {
-	let timer;
-	const guard = new Promise((resolve) => {
-		timer = setTimeout(() => resolve(null), limitMs);
-	});
-	try {
-		return await Promise.race([work, guard]);
-	} finally {
-		if (timer !== void 0) clearTimeout(timer);
+/**
+* 当前时间（毫秒）。宿主里要「现在几点」只走这里，测试可以点住 `Date.now`。
+* @returns 毫秒时间戳。
+*/
+function now() {
+	return Date.now();
+}
+/**
+* 当前时间的 ISO 字符串。
+* @returns `new Date().toISOString()` 的等价物。
+*/
+function nowIso() {
+	return new Date(now()).toISOString();
+}
+//#endregion
+//#region ../shared/dist/host/seam/intent.js
+var SeamError = class extends Error {
+	code;
+	path;
+	scope;
+	constructor(code, message, extra = {}) {
+		super(message);
+		this.name = "SeamError";
+		this.code = code;
+		this.path = extra.path;
+		this.scope = extra.scope;
 	}
+};
+function productWrite() {
+	return { kind: "product" };
 }
-async function runShell(shell, command, options = {}) {
-	const { workdir, timeoutMs = GIT_TIMEOUT_MS, signal, env } = options;
-	const spec = shell.resolve({
-		command,
-		...workdir === void 0 ? {} : { workdir },
-		timeoutMs,
-		onExpiry: "kill",
-		stdoutMaxBytes: DEFAULT_MAX_BYTES$3,
-		...signal === void 0 ? {} : { signal },
-		...env === void 0 ? {} : { env }
-	});
-	return await settleWithin((async () => {
-		const result = await (await shell.execute(spec)).result();
-		return {
-			exitCode: result.exitCode,
-			timedOut: result.timedOut === true,
-			aborted: result.aborted === true,
-			stdout: result.stdout.text,
-			stderr: result.stderr.text,
-			truncated: result.stdout.truncated || result.stderr.truncated,
-			stalled: false
-		};
-	})(), timeoutMs + GUARD_SLACK_MS) ?? stalledResult();
+function workspaceWrite() {
+	return { kind: "workspace" };
+}
+function pathsWrite(paths) {
+	return {
+		kind: "paths",
+		paths
+	};
+}
+function noWrite() {
+	return { kind: "none" };
 }
 //#endregion
 //#region ../shared/dist/host/shell-text.js
@@ -2406,6 +2502,73 @@ function npmRegistryOf(source, env) {
 //#region ../shared/dist/contract/protocol/config-sync.js
 var CONFIG_SYNC_ROUTE = "config-sync";
 //#endregion
+//#region ../shared/dist/host/patch-blocks.js
+var ID_LINE = /^- id:[ \t]*"?([^"\s#]+)/;
+var INSERT_LINE = /^- insert:[ \t]*$/;
+var NESTED_ID = /^[ \t]+-[ \t]*id:[ \t]*"?([^"\s#]+)/;
+var NAME_LINE = /^[ \t]*-?[ \t]*name:[ \t]*['"]?([^'"\s#]+)/;
+function trimmedTail(lines) {
+	let end = lines.length;
+	while (end > 0 && (lines[end - 1] ?? "").trim() === "") end -= 1;
+	return lines.slice(0, end);
+}
+function matched(text, pattern) {
+	const found = pattern.exec(text);
+	return found === null ? void 0 : found[1];
+}
+function blockOf$1(body, index) {
+	const lines = body.split("\n");
+	const first = lines[0] ?? "";
+	const id = matched(first, ID_LINE);
+	const nested = lines.flatMap((line) => {
+		const one = matched(line, NESTED_ID);
+		return one === void 0 ? [] : [one];
+	});
+	const insert = id === void 0 && INSERT_LINE.test(first);
+	const label = id ?? nested.join(", ");
+	const key = id !== void 0 ? `id:${id}` : insert ? `insert:${nested.join(", ")}` : `block:${String(index)}`;
+	const names = lines.flatMap((line) => {
+		const one = matched(line, NAME_LINE);
+		return one === void 0 ? [] : [one];
+	});
+	return {
+		key,
+		id: label === "" ? key : label,
+		insert,
+		body,
+		names
+	};
+}
+function spannedBlocks(text) {
+	const lines = text.split("\n");
+	const starts = [];
+	lines.forEach((line, index) => {
+		if (/^- /.test(line) || line === "-") starts.push(index);
+	});
+	const blocks = [];
+	for (let i = 0; i < starts.length; i += 1) {
+		const from = starts[i] ?? 0;
+		const to = i + 1 < starts.length ? starts[i + 1] ?? lines.length : lines.length;
+		const body = trimmedTail(lines.slice(from, to)).join("\n");
+		if (body.trim() === "") continue;
+		blocks.push({
+			...blockOf$1(body, blocks.length),
+			from,
+			to
+		});
+	}
+	return blocks;
+}
+function patchBlocks(text) {
+	return spannedBlocks(text).map(({ from: _from, to: _to, ...block }) => block);
+}
+//#endregion
+//#region ../shared/dist/host/patch.js
+/** 把 patch 文本写回原文件：原子写，保留已有权限位（新文件 0644）。 */
+function writePatchFile(path, text) {
+	writeTextFile(path, text, { mode: "keep" });
+}
+//#endregion
 //#region ../shared/dist/contract/protocol/profile-create.js
 var PROFILE_CREATE_ROUTE = "profile-create";
 //#endregion
@@ -2448,17 +2611,6 @@ function parseMarkers(text) {
 	return refs;
 }
 //#endregion
-//#region ../shared/dist/host/time.js
-dayjs.extend(utc);
-/**
-* 把时间戳/ISO 字符串转成毫秒；非法输入给 `NaN`（调用方据此回退）。
-* @param value ISO 字符串、时间戳或 Date。
-* @returns 毫秒时间戳或 `NaN`。
-*/
-function epochOf(value) {
-	return dayjs(value).valueOf();
-}
-//#endregion
 //#region ../shared/dist/host/diy-debug.js
 /**
 * 把工具入参收成人话动作。
@@ -2764,6 +2916,121 @@ function createRecordStore() {
 	};
 }
 //#endregion
+//#region ../shared/dist/host/data-root.js
+function dshHome() {
+	const configured = process.env.DSH_HOME?.trim();
+	if (configured !== void 0 && configured !== "") return configured;
+	return join(homedir(), ".dsh");
+}
+function workbenchRoot() {
+	const configured = process.env.DSH_WORKBENCH_HOME?.trim();
+	if (configured !== void 0 && configured !== "") return configured;
+	return join(dshHome(), "workbench");
+}
+function workspacesRoot() {
+	return join(workbenchRoot(), "workspaces");
+}
+//#endregion
+//#region ../shared/dist/host/env-policy.js
+/**
+* 把父进程环境里的字符串值拷成一层 env（丢掉 undefined）。
+* @param parent 父环境（通常是 `process.env`）。
+* @returns 可继续叠加的 env 层。
+*/
+function inheritedEnvOf(parent) {
+	const out = {};
+	for (const [key, value] of Object.entries(parent)) if (typeof value === "string") out[key] = value;
+	return out;
+}
+function existingPointer(realHome, name) {
+	const file = join(realHome, name);
+	return existsSync(file) ? file : void 0;
+}
+/**
+* 产品域（运行时根）的受控 env：隔离 HOME、npm/pnpm 缓存都钉在运行时根，真 npmrc/gitconfig 只读指过去。
+* @param input 运行时根、可选的 HOME 与真实用户目录。
+* @returns 产品域 env。
+*/
+function productEnvOf(input) {
+	const runtimeRoot = input.runtimeRoot;
+	const realHome = input.realHome ?? homedir();
+	const env = {
+		HOME: input.home ?? join(runtimeRoot, "home"),
+		DSH_HOME: dshHome(),
+		DSH_WORKBENCH_HOME: runtimeRoot,
+		npm_config_cache: join(runtimeRoot, "npm-cache"),
+		NPM_CONFIG_CACHE: join(runtimeRoot, "npm-cache"),
+		npm_config_logs_dir: join(runtimeRoot, "npm-logs"),
+		npm_config_store_dir: join(runtimeRoot, "pnpm-store"),
+		npm_config_cache_dir: join(runtimeRoot, "pnpm-cache"),
+		npm_config_state_dir: join(runtimeRoot, "pnpm-state"),
+		npm_config_update_notifier: "false",
+		npm_config_fund: "false",
+		NO_UPDATE_NOTIFIER: "1"
+	};
+	const npmrc = existingPointer(realHome, ".npmrc");
+	if (npmrc !== void 0) env["NPM_CONFIG_USERCONFIG"] = npmrc;
+	const gitconfig = existingPointer(realHome, ".gitconfig");
+	if (gitconfig !== void 0) env["GIT_CONFIG_GLOBAL"] = gitconfig;
+	return env;
+}
+/**
+* 模块单元的受控 env：在产品域基础上把 HOME 与 npm/pnpm 目录全钉到单元数据目录。
+* @param input 运行时根、单元数据目录、可选的 TRUE 用户目录。
+* @returns 单元 env。
+*/
+function unitEnvOf(input) {
+	const unitRoot = input.unitRoot;
+	return {
+		...productEnvOf({
+			...input,
+			home: join(unitRoot, "home")
+		}),
+		npm_config_cache: join(unitRoot, "npm-cache"),
+		NPM_CONFIG_CACHE: join(unitRoot, "npm-cache"),
+		npm_config_logs_dir: join(unitRoot, "npm-logs"),
+		npm_config_store_dir: join(unitRoot, "pnpm-store"),
+		npm_config_cache_dir: join(unitRoot, "pnpm-cache"),
+		npm_config_state_dir: join(unitRoot, "pnpm-state")
+	};
+}
+/**
+* git 的非交互 env：关掉终端提示/askpass；Windows 上不给 askpass 指 POSIX 路径（那台机器上没有）。
+* @param platform 宿主平台。
+* @returns git 非交互 env。
+*/
+function promptlessGitEnvOf(platform) {
+	const shared = {
+		GIT_TERMINAL_PROMPT: "0",
+		SSH_ASKPASS_REQUIRE: "never",
+		GCM_INTERACTIVE: "never",
+		GIT_SSH_COMMAND: "ssh -o BatchMode=yes -o StrictHostKeyChecking=accept-new"
+	};
+	if (platform === "win32") return shared;
+	return {
+		...shared,
+		GIT_ASKPASS: "/usr/bin/false",
+		SSH_ASKPASS: "/usr/bin/false"
+	};
+}
+/**
+* 在父环境上叠加 `promptlessGitEnvOf`，得到可传给执行缝的 git env。
+* @param parent 父环境。
+* @param platform 宿主平台。
+* @returns 只含字符串的 env。
+*/
+function promptlessProcessEnvOf(parent, platform) {
+	const env = {
+		...inheritedEnvOf(parent),
+		...promptlessGitEnvOf(platform)
+	};
+	if (platform === "win32") {
+		delete env["GIT_ASKPASS"];
+		delete env["SSH_ASKPASS"];
+	}
+	return env;
+}
+//#endregion
 //#region ../shared/dist/host/facts.js
 function createFactLog(options = {}) {
 	const epoch = options.epoch ?? `e${randomUUID()}`;
@@ -2938,7 +3205,7 @@ function parseCrashReport(payload) {
 			workspace,
 			unit,
 			reason,
-			at: atOf(record["at"]) ?? Date.now()
+			at: atOf(record["at"]) ?? now()
 		}
 	};
 }
@@ -3459,7 +3726,7 @@ function healthHandler(ctx, runtimes) {
 			profile: dir === void 0 ? null : dir.split("/").pop(),
 			profileDir: dir ?? null,
 			pid: process.pid,
-			now: (/* @__PURE__ */ new Date()).toISOString(),
+			now: nowIso(),
 			...runtimes === void 0 ? {} : { runtimes }
 		};
 	};
@@ -3498,7 +3765,7 @@ function registerPanelState(ctx, store) {
 				store.cards(parsed.value);
 				return {
 					ok: true,
-					at: Date.now()
+					at: now()
 				};
 			}
 		}, {
@@ -3512,7 +3779,7 @@ function registerPanelState(ctx, store) {
 				store.crash(parsed.value);
 				return {
 					ok: true,
-					at: Date.now()
+					at: now()
 				};
 			}
 		}]
@@ -3543,9 +3810,9 @@ var RECENT_MS = 6e5;
 function createLongTaskRegistry(deps) {
 	const runs = /* @__PURE__ */ new Map();
 	const controls = /* @__PURE__ */ new Map();
-	const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
+	const now$7 = deps.now ?? (() => nowIso());
 	let counter = 0;
-	const nextId = deps.nextId ?? (() => `run-${Date.now()}-${counter += 1}`);
+	const nextId = deps.nextId ?? (() => `run-${now()}-${counter += 1}`);
 	const recentMs = deps.recentMs ?? RECENT_MS;
 	const listeners = /* @__PURE__ */ new Set();
 	const live = (id) => {
@@ -3564,7 +3831,7 @@ function createLongTaskRegistry(deps) {
 		const patched = {
 			...current,
 			...next,
-			at: now()
+			at: now$7()
 		};
 		runs.set(id, patched);
 		notify({
@@ -3581,7 +3848,7 @@ function createLongTaskRegistry(deps) {
 			return null;
 		},
 		current(workspace) {
-			const floor = epochOf(now()) - recentMs;
+			const floor = epochOf(now$7()) - recentMs;
 			const newest = /* @__PURE__ */ new Map();
 			for (const snapshot of runs.values()) {
 				if (snapshot.workspace !== workspace) continue;
@@ -3599,7 +3866,7 @@ function createLongTaskRegistry(deps) {
 			const running = this.active(options.workspace, options.target);
 			if (running !== null) return running;
 			const id = nextId();
-			const startedAt = now();
+			const startedAt = now$7();
 			runs.set(id, {
 				id,
 				workspace: options.workspace,
@@ -4010,7 +4277,7 @@ function defaultSleep(ms, signal) {
 		signal.addEventListener("abort", onAbort, { once: true });
 	});
 }
-function targetOf(flow, scope) {
+function targetOf$1(flow, scope) {
 	if (flow.target === void 0) return flow.id;
 	const value = resolveValue(flow.target, scope);
 	return typeof value === "string" && value.trim() !== "" ? value.trim() : flow.id;
@@ -4148,14 +4415,14 @@ async function runOne(options) {
 async function runFlow(options) {
 	const { flow, input, actions, signal, runId, workspace, onStep } = options;
 	const sleep = options.sleep ?? defaultSleep;
-	const now = options.now ?? (() => Date.now());
+	const now$6 = options.now ?? (() => now());
 	const steps = {};
 	const emit = (event) => {
 		try {
 			onStep(event);
 		} catch {}
 	};
-	const target = targetOf(flow, {
+	const target = targetOf$1(flow, {
 		in: input,
 		steps
 	});
@@ -4218,7 +4485,7 @@ async function runFlow(options) {
 						});
 					},
 					sleep,
-					now
+					now: now$6
 				});
 				if (nested.status === "failed") {
 					const failed = nested.failedStep === void 0 ? step.id : `${step.id}.${nested.failedStep}`;
@@ -4263,7 +4530,7 @@ async function runFlow(options) {
 						runId,
 						workspace,
 						sleep,
-						now,
+						now: now$6,
 						emit
 					}));
 				}
@@ -4293,7 +4560,7 @@ async function runFlow(options) {
 				runId,
 				workspace,
 				sleep,
-				now,
+				now: now$6,
 				emit
 			});
 			emit({
@@ -4373,7 +4640,8 @@ function sessionIdOf(exec) {
 * 建一份宿主 kit；每个挂载点一份，没有模块级状态。
 * @param parts.libInstallCommand 拼「装这个共用依赖」的那条命令。
 * @param parts.surface 宿主平台事实；由组合根按 profile 与宿主进程算好再交进来。
-* @returns flow / sessionIdOf / sessionWorkspace / libInstallCommand / surface。
+* @param parts.seam 按 unit 绑定好的执行缝门面；模块清单没声明写入域时缺省不给。
+* @returns flow / sessionIdOf / sessionWorkspace / libInstallCommand / surface，有门面时带上 seam。
 */
 function createHostKit(parts) {
 	return {
@@ -4381,7 +4649,8 @@ function createHostKit(parts) {
 		sessionIdOf,
 		sessionWorkspace,
 		libInstallCommand: parts.libInstallCommand,
-		surface: parts.surface
+		surface: parts.surface,
+		...parts.seam === void 0 ? {} : { seam: parts.seam }
 	};
 }
 //#endregion
@@ -4751,37 +5020,22 @@ function createValueHandoff(options = {}) {
 	const ttlMs = options.ttlMs ?? 15e3;
 	const held = /* @__PURE__ */ new Map();
 	return {
-		hand(entry, value, now = Date.now()) {
+		hand(entry, value, now$4 = now()) {
 			held.set(handoffId(entry), {
 				value,
-				at: now
+				at: now$4
 			});
 		},
-		take(entry, now = Date.now()) {
+		take(entry, now$5 = now()) {
 			const id = handoffId(entry);
 			const hit = held.get(id);
 			if (hit === void 0) return void 0;
 			held.delete(id);
-			return now - hit.at >= ttlMs ? void 0 : hit;
+			return now$5 - hit.at >= ttlMs ? void 0 : hit;
 		}
 	};
 }
 //#endregion
-//#region ../shared/dist/host/data-root.js
-function dshHome() {
-	const configured = process.env.DSH_HOME?.trim();
-	if (configured !== void 0 && configured !== "") return configured;
-	return join(homedir(), ".dsh");
-}
-function workbenchRoot() {
-	const configured = process.env.DSH_WORKBENCH_HOME?.trim();
-	if (configured !== void 0 && configured !== "") return configured;
-	return join(dshHome(), "workbench");
-}
-function workspacesRoot() {
-	return join(workbenchRoot(), "workspaces");
-}
-//#endregion
 //#region ../shared/dist/host/workspace-store.js
 function slug(raw, max = 40) {
 	const cleaned = raw.replace(/[^A-Za-z0-9._-]+/g, "-").replace(/^[-.]+|[-.]+$/g, "").slice(0, max);
@@ -4823,9 +5077,6 @@ function memoryStore(dir) {
 	};
 }
 function fileStore(dir) {
-	const ensureFor = (file) => {
-		fs.mkdirSync(path.dirname(file), { recursive: true });
-	};
 	return {
 		dir,
 		read: (name) => {
@@ -4837,11 +5088,7 @@ function fileStore(dir) {
 			}
 		},
 		write: (name, value) => {
-			const file = inside(dir, name);
-			ensureFor(file);
-			const tmp = `${file}.tmp`;
-			fs.writeFileSync(tmp, `${JSON.stringify(value, null, 2)}\n`, "utf8");
-			fs.renameSync(tmp, file);
+			writeJsonFile(inside(dir, name), value);
 		},
 		remove: (name) => {
 			const file = inside(dir, name);
@@ -4890,6 +5137,703 @@ function createWorkspaceStore(options) {
 	};
 }
 //#endregion
+//#region ../shared/dist/host/shell.js
+var DEFAULT_MAX_BYTES$3 = 8388608;
+var GUARD_SLACK_MS = 1e3;
+function stalledResult() {
+	return {
+		exitCode: null,
+		timedOut: true,
+		aborted: false,
+		stdout: "",
+		stderr: "",
+		truncated: false,
+		stalled: true
+	};
+}
+async function settleWithin(work, limitMs) {
+	let timer;
+	const guard = new Promise((resolve) => {
+		timer = setTimeout(() => resolve(null), limitMs);
+	});
+	try {
+		return await Promise.race([work, guard]);
+	} finally {
+		if (timer !== void 0) clearTimeout(timer);
+	}
+}
+async function runShell(shell, command, options = {}) {
+	const { workdir, timeoutMs = GIT_TIMEOUT_MS, signal, env, sandboxPolicy } = options;
+	const spec = shell.resolve({
+		command,
+		...workdir === void 0 ? {} : { workdir },
+		timeoutMs,
+		onExpiry: "kill",
+		stdoutMaxBytes: DEFAULT_MAX_BYTES$3,
+		...signal === void 0 ? {} : { signal },
+		...env === void 0 ? {} : { env },
+		...sandboxPolicy === void 0 ? {} : { sandboxPolicy }
+	});
+	return await settleWithin((async () => {
+		const result = await (await shell.execute(spec)).result();
+		return {
+			exitCode: result.exitCode,
+			timedOut: result.timedOut === true,
+			aborted: result.aborted === true,
+			stdout: result.stdout.text,
+			stderr: result.stderr.text,
+			truncated: result.stdout.truncated || result.stderr.truncated,
+			stalled: false,
+			...result.sandbox === void 0 ? {} : { sandbox: result.sandbox }
+		};
+	})(), timeoutMs + GUARD_SLACK_MS) ?? stalledResult();
+}
+//#endregion
+//#region ../shared/dist/host/seam/policy.js
+function seamModeOf(value) {
+	const text = value?.trim();
+	return text === "read-only" || text === "workspace-write" || text === "danger-full-access" ? text : "workspace-write";
+}
+function rank(mode) {
+	return mode === "read-only" ? 0 : mode === "workspace-write" ? 1 : 2;
+}
+function narrowerMode(left, right) {
+	return rank(left) <= rank(right) ? left : right;
+}
+function insideOf(root, path) {
+	const confined = resolve(root);
+	const target = resolve(path);
+	if (target === confined) return true;
+	return target.startsWith(confined.endsWith(sep) ? confined : `${confined}${sep}`);
+}
+function productPolicy(ceiling, productRoot) {
+	return {
+		mode: ceiling === "read-only" ? "read-only" : "workspace-write",
+		workspaceRoot: resolve(productRoot)
+	};
+}
+function workspacePolicy(ceiling, grant) {
+	if (grant === void 0) throw new SeamError("workspace-unknown", "这条会话解析不到工作区：先在左栏选一个工作区再跑需要写工作区的命令");
+	const mode = narrowerMode(ceiling, grant.mode);
+	if (mode === "read-only") throw new SeamError("read-only", "当前会话是只读模式：要写工作区，先在权限设置里切换模式");
+	return {
+		mode,
+		workspaceRoot: resolve(grant.workspaceRoot)
+	};
+}
+function commonDirectory(paths) {
+	const dirs = paths.map((path) => dirname(resolve(path)));
+	let shared = dirs[0];
+	if (shared === void 0) return void 0;
+	for (const dir of dirs.slice(1)) while (shared !== dirname(shared) && !insideOf(shared, dir)) shared = dirname(shared);
+	return shared;
+}
+function pathsPolicy(ceiling, paths) {
+	if (paths.length === 0) throw new SeamError("paths-span-trees", "这次写入没有给出任何路径");
+	if (!paths.every((path) => isAbsolute(path))) throw new SeamError("paths-span-trees", "外部路径必须是绝对路径");
+	if (ceiling === "read-only") throw new SeamError("read-only", "当前部署是只读模式：这条命令不能写外部路径");
+	const root = commonDirectory(paths);
+	if (root === void 0 || root === sep && paths.length > 1) throw new SeamError("paths-span-trees", "这次写入跨了多个目录：请分开做，或把产物改到工作台目录");
+	if (root === sep) throw new SeamError("paths-span-trees", "不能把整个文件系统声明成写入域");
+	return {
+		mode: "workspace-write",
+		workspaceRoot: root
+	};
+}
+function denialScopeOf(path, policy, productRoot, grant) {
+	if (path === void 0) return "unknown";
+	if (insideOf(productRoot, path)) return "product";
+	if (grant !== void 0 && insideOf(grant.workspaceRoot, path)) return "workspace";
+	if (insideOf(policy.workspaceRoot, path)) return policy.workspaceRoot === resolve(productRoot) ? "product" : "workspace";
+	return "external";
+}
+function policyOf(intent, ceiling, productRoot, grant) {
+	if (intent.kind === "product" || intent.kind === "none") return productPolicy(ceiling, productRoot);
+	if (intent.kind === "workspace") return workspacePolicy(ceiling, grant);
+	return pathsPolicy(ceiling, intent.paths);
+}
+//#endregion
+//#region ../shared/dist/host/seam/env.js
+/**
+* 产品域（运行时根）的受控 env：隔离 HOME、npm/pnpm 缓存钉在运行时根、真 npmrc/gitconfig 只读指过去。
+* @param input 运行时根、可选的 HOME 与真实用户目录。
+* @returns 产品域 env。
+*/
+function seamProductEnv(input) {
+	return productEnvOf(input);
+}
+/**
+* 模块单元的受控 env：HOME 与 npm/pnpm 目录钉到单元数据目录。
+* @param input 运行时根、单元数据目录、可选的 TRUE 用户目录。
+* @returns 单元 env。
+*/
+function seamUnitEnv(input) {
+	return unitEnvOf(input);
+}
+//#endregion
+//#region ../shared/dist/host/seam/denial.js
+var PATTERNS = [
+	/npm (?:error|ERR!) path (.+)$/m,
+	/(?:EPERM|EACCES):[^,\n]*, (?:open|unlink|mkdir|scandir|rename|access|stat|lstat|read|write|copyfile|rmdir|opendir|utimes|chmod|chown) '([^']+)'/i,
+	/(?:Operation not permitted|Permission denied)[^\n]*?'([^']+)'/i,
+	/fatal: could not create work tree dir '([^']+)'/i,
+	/mkdir: cannot create directory '([^']+)'/i,
+	/cannot (?:create|mkdir) (?:directory )?'([^']+)'/i,
+	/(?:Operation not permitted|Permission denied):\s*([^\s'\n]+)/i
+];
+function firstMatch(text) {
+	for (const pattern of PATTERNS) {
+		const value = pattern.exec(text)?.[1]?.trim();
+		if (value !== void 0 && value !== "") return value;
+	}
+}
+function deniedPathOf(stderr, stdout = "") {
+	return firstMatch(stderr) ?? firstMatch(stdout);
+}
+function sandboxDeniedOf(facts) {
+	return facts?.denied === true;
+}
+//#endregion
+//#region ../shared/dist/host/seam/host-env.js
+function hostEnvOf(env) {
+	const merged = { ...process.env };
+	for (const [key, value] of Object.entries(env ?? {})) if (value === void 0) delete merged[key];
+	else merged[key] = value;
+	return merged;
+}
+function definedEnvOf(env) {
+	const out = {};
+	for (const [key, value] of Object.entries(env ?? {})) if (value !== void 0) out[key] = value;
+	return out;
+}
+//#endregion
+//#region ../shared/dist/host/seam/process.js
+function streamOf(readable) {
+	if (readable === null || readable === void 0) return null;
+	return { onData(listener) {
+		const handler = (chunk) => listener(String(chunk));
+		readable.on("data", handler);
+		return () => {
+			readable.off("data", handler);
+		};
+	} };
+}
+function createNodeProcessHost() {
+	return { spawn(options) {
+		const logFd = options.stdio === "log" && options.logFile !== void 0 ? openSync(options.logFile, "a") : void 0;
+		const stdio = options.stdio === "pipe" ? "pipe" : logFd === void 0 ? "ignore" : [
+			"ignore",
+			logFd,
+			logFd
+		];
+		let logClosed = false;
+		const closeLog = () => {
+			if (logClosed || logFd === void 0) return;
+			logClosed = true;
+			closeSync(logFd);
+		};
+		let child;
+		try {
+			child = execa(options.file, [...options.args], {
+				...options.cwd === void 0 ? {} : { cwd: options.cwd },
+				env: { ...options.env },
+				detached: options.detached,
+				stdio,
+				windowsHide: options.windowsHide,
+				reject: false,
+				buffer: false
+			});
+		} catch (error) {
+			closeLog();
+			throw error;
+		}
+		if (logFd !== void 0) {
+			child.nodeChildProcess.once("spawn", closeLog);
+			child.nodeChildProcess.once("error", closeLog);
+		}
+		const stdin = child.stdin;
+		return {
+			pid: child.pid,
+			stdin: stdin === null || stdin === void 0 ? null : { write: (chunk) => stdin.write(chunk) },
+			stdout: streamOf(child.stdout),
+			stderr: streamOf(child.stderr),
+			onExit(listener) {
+				const handler = (code, signal) => listener({
+					code,
+					signal
+				});
+				child.nodeChildProcess.on("exit", handler);
+				return () => {
+					child.nodeChildProcess.off("exit", handler);
+				};
+			},
+			onError(listener) {
+				child.nodeChildProcess.on("error", listener);
+				return () => {
+					child.nodeChildProcess.off("error", listener);
+				};
+			},
+			unref() {
+				child.nodeChildProcess.unref();
+			},
+			kill(signal) {
+				child.kill(signal);
+			}
+		};
+	} };
+}
+//#endregion
+//#region ../shared/dist/host/seam/run.js
+var DENIAL_MARKER = /\[sandbox: file access denied under [a-z-]+ mode\]/i;
+var DEFAULT_MAX_BYTES$2 = 8388608;
+function scopeText(scope) {
+	if (scope === "product") return "工作台自己的目录";
+	if (scope === "workspace") return "会话工作区";
+	if (scope === "external") return "工作区之外的路径";
+	return "没认出来的路径";
+}
+function denialMessageOf(scope, path, output) {
+	const where = path === void 0 ? "" : `：${path}`;
+	const marker = DENIAL_MARKER.test(output) ? "" : "（输出里没有沙箱标记，按拒绝处理）";
+	const next = scope === "external" ? "要写工作区外的路径得先让用户点头：把目标改到工作区，或让工具补上审批后再试" : "这是工作台自己的声明问题，不是用户的配置问题：把命令、域与路径一起记下来交给维护者";
+	return `被沙箱挡住了（${scopeText(scope)}${where}）${marker}。${next}`;
+}
+function settle$1(result, denial) {
+	return {
+		exitCode: result.exitCode,
+		timedOut: result.timedOut,
+		aborted: result.aborted,
+		stdout: result.stdout,
+		stderr: result.stderr,
+		truncated: result.truncated,
+		stalled: result.stalled,
+		...denial === void 0 ? {} : { denial }
+	};
+}
+function targetOf(request) {
+	const hasCommand = request.command !== void 0;
+	const hasArgv = request.argv !== void 0;
+	if (hasArgv && !hasCommand) {
+		const argv = request.argv ?? [];
+		if (argv.length === 0) throw new SeamError("scope-not-declared", "argv 是空的：至少给一个可执行文件");
+		return { argv };
+	}
+	if (hasCommand && !hasArgv) return { line: request.command ?? "" };
+	throw new SeamError("scope-not-declared", "这条执行请求要么给 argv，要么给一条命令行，不能两个都给或都不给");
+}
+function displayOf(target) {
+	return "argv" in target ? target.argv.map((one) => quoteShellArg(one)).join(" ") : target.line;
+}
+function shellInvocationOf(shellKind, line) {
+	return shellKind === "pwsh" ? {
+		file: "pwsh",
+		args: [
+			"-NoProfile",
+			"-NonInteractive",
+			"-Command",
+			line
+		]
+	} : {
+		file: "bash",
+		args: ["-c", line]
+	};
+}
+function invocationOf(target, shellKind) {
+	if ("argv" in target) {
+		const [file, ...args] = target.argv;
+		if (file === void 0) throw new SeamError("scope-not-declared", "argv 是空的：至少给一个可执行文件");
+		return {
+			file,
+			args
+		};
+	}
+	return shellInvocationOf(shellKind ?? shellKindOf(), target.line);
+}
+function sandboxedLineOf(target, shellKind) {
+	if ("argv" in target) return target.argv.map((one) => quoteShellArg(one)).join(" ");
+	if (shellKind === void 0) return target.line;
+	const invocation = shellInvocationOf(shellKind, target.line);
+	return [invocation.file, ...invocation.args].map((one) => quoteShellArg(one)).join(" ");
+}
+function createSeam(ports) {
+	const runtimeRoot = ports.runtimeRoot ?? workbenchRoot();
+	const ceiling = ports.ceiling ?? seamModeOf(process.env["DSH_PERMISSION_MODE"]);
+	const allowHost = ports.allowHost === true;
+	const processes = ports.processes ?? createNodeProcessHost();
+	const limit = ports.factLimit ?? 80;
+	const facts = [];
+	function record(fact) {
+		facts.push(fact);
+		if (facts.length > limit) facts.splice(0, facts.length - limit);
+	}
+	function grantFor(session) {
+		if (ports.grantOf === void 0 || session === void 0 || session === null) return void 0;
+		try {
+			return ports.grantOf(session);
+		} catch {
+			return;
+		}
+	}
+	function requireHost(intent) {
+		if (intent.kind !== "host") throw new SeamError("scope-not-declared", "这条调用要走宿主进程执行，但写入域不是 host");
+		if (!allowHost) throw new SeamError("scope-not-declared", "宿主域只给宿主侧接线开出来；模块与普通调用点拿不到");
+	}
+	async function attempt(request, policy, line) {
+		return runShell(ports.shell, line, {
+			...request.workdir === void 0 ? {} : { workdir: request.workdir },
+			...request.timeoutMs === void 0 ? {} : { timeoutMs: request.timeoutMs },
+			...request.signal === void 0 ? {} : { signal: request.signal },
+			env: {
+				...seamProductEnv({
+					runtimeRoot,
+					realHome: ports.realHome
+				}),
+				...definedEnvOf(request.env)
+			},
+			sandboxPolicy: policy
+		});
+	}
+	function healPolicyOf(intent, scope, granted) {
+		if (scope === "product" && intent.kind !== "product") return productPolicy(ceiling, runtimeRoot);
+		if (scope === "workspace" && intent.kind === "workspace") {
+			if (granted === void 0) return void 0;
+			try {
+				return workspacePolicy(ceiling, granted);
+			} catch {
+				return;
+			}
+		}
+	}
+	async function runHost(request, target) {
+		const invocation = invocationOf(target, request.shellKind);
+		const child = processes.spawn({
+			file: invocation.file,
+			args: invocation.args,
+			env: hostEnvOf(request.env),
+			...request.workdir === void 0 ? {} : { cwd: request.workdir },
+			detached: false,
+			stdio: "pipe",
+			windowsHide: true
+		});
+		const state = {
+			stdout: "",
+			stderr: "",
+			truncated: false
+		};
+		const append = (which, chunk) => {
+			const total = state.stdout.length + state.stderr.length;
+			const room = (request.maxBytes ?? DEFAULT_MAX_BYTES$2) - total;
+			if (room <= 0) {
+				state.truncated = true;
+				return;
+			}
+			const text = chunk.length > room ? chunk.slice(0, room) : chunk;
+			state[which] += text;
+			if (chunk.length > room) state.truncated = true;
+		};
+		child.stdout?.onData((chunk) => append("stdout", chunk));
+		child.stderr?.onData((chunk) => append("stderr", chunk));
+		let timer;
+		let timedOut = false;
+		if (request.timeoutMs !== void 0) timer = setTimeout(() => {
+			timedOut = true;
+			child.kill("SIGKILL");
+		}, request.timeoutMs);
+		const exit = await new Promise((resolve) => {
+			child.onExit((event) => resolve(event));
+			child.onError((error) => {
+				state.stderr = `${state.stderr}${String(error)}`;
+				resolve({
+					code: null,
+					signal: null
+				});
+			});
+		});
+		if (timer !== void 0) clearTimeout(timer);
+		return {
+			exitCode: exit.code,
+			timedOut,
+			aborted: false,
+			stdout: state.stdout,
+			stderr: state.stderr,
+			truncated: state.truncated,
+			stalled: false
+		};
+	}
+	function spawnHost(request) {
+		const invocation = invocationOf(request.target, void 0);
+		const logFile = request.logFile ?? join(runtimeRoot, "logs", `${request.label ?? "spawn"}-${String(now())}.log`);
+		mkdirSync(dirname(logFile), { recursive: true });
+		const child = processes.spawn({
+			file: invocation.file,
+			args: invocation.args,
+			env: hostEnvOf(request.env),
+			...request.cwd === void 0 ? {} : { cwd: request.cwd },
+			detached: true,
+			stdio: "log",
+			logFile,
+			windowsHide: true
+		});
+		child.unref();
+		record({
+			at: now(),
+			verb: "spawn",
+			command: displayOf(request.target),
+			intent: "host",
+			mode: "host",
+			workspaceRoot: "",
+			exitCode: null,
+			timedOut: false,
+			stalled: false
+		});
+		const display = displayOf(request.target);
+		const errorListeners = /* @__PURE__ */ new Set();
+		const exitWaiters = [];
+		let settled;
+		let failure;
+		const settleExit = (event) => {
+			if (settled !== void 0) return;
+			settled = event;
+			for (const waiter of exitWaiters.splice(0)) waiter(event);
+		};
+		child.onExit((event) => settleExit(event));
+		child.onError((error) => {
+			failure = error;
+			settleExit({
+				code: null,
+				signal: null
+			});
+			if (errorListeners.size === 0) {
+				ports.logger?.warn?.(`[dsh-workbench] 起进程没跑起来（${display}）：${String(error)}`);
+				return;
+			}
+			for (const listener of errorListeners) listener(error);
+		});
+		return {
+			pid: child.pid,
+			logFile,
+			exit: () => settled === void 0 ? new Promise((resolve) => exitWaiters.push(resolve)) : Promise.resolve(settled),
+			onError(listener) {
+				if (failure !== void 0) {
+					listener(failure);
+					return () => {};
+				}
+				errorListeners.add(listener);
+				return () => errorListeners.delete(listener);
+			},
+			kill: (signal) => child.kill(signal ?? "SIGTERM")
+		};
+	}
+	function openHost(request) {
+		const invocation = invocationOf(request.target, void 0);
+		const child = processes.spawn({
+			file: invocation.file,
+			args: invocation.args,
+			env: hostEnvOf(request.env),
+			...request.cwd === void 0 ? {} : { cwd: request.cwd },
+			detached: false,
+			stdio: "pipe",
+			windowsHide: true
+		});
+		record({
+			at: now(),
+			verb: "open",
+			command: displayOf(request.target),
+			intent: "host",
+			mode: "host",
+			workspaceRoot: "",
+			exitCode: null,
+			timedOut: false,
+			stalled: false
+		});
+		const display = displayOf(request.target);
+		const errorListeners = /* @__PURE__ */ new Set();
+		const exitListeners = /* @__PURE__ */ new Set();
+		let failure;
+		let settled;
+		const settleExit = (event) => {
+			if (settled !== void 0) return;
+			settled = event;
+			for (const listener of exitListeners) listener(event);
+		};
+		child.onExit((event) => settleExit(event));
+		child.onError((error) => {
+			failure = error;
+			settleExit({
+				code: null,
+				signal: null
+			});
+			if (errorListeners.size === 0) {
+				ports.logger?.warn?.(`[dsh-workbench] 双向通道起不来（${display}）：${String(error)}`);
+				return;
+			}
+			for (const listener of errorListeners) listener(error);
+		});
+		return {
+			pid: child.pid,
+			write: (chunk) => child.stdin?.write(chunk),
+			onData(listener) {
+				const offOut = child.stdout?.onData(listener) ?? (() => {});
+				const offErr = child.stderr?.onData(listener) ?? (() => {});
+				return () => {
+					offOut();
+					offErr();
+				};
+			},
+			onExit(listener) {
+				if (settled !== void 0) {
+					listener(settled);
+					return () => {};
+				}
+				exitListeners.add(listener);
+				return () => exitListeners.delete(listener);
+			},
+			onError(listener) {
+				if (failure !== void 0) {
+					listener(failure);
+					return () => {};
+				}
+				errorListeners.add(listener);
+				return () => errorListeners.delete(listener);
+			},
+			kill: (signal) => child.kill(signal ?? "SIGTERM")
+		};
+	}
+	return {
+		async run(request) {
+			const target = targetOf(request);
+			if (request.intent.kind === "host") {
+				requireHost(request.intent);
+				const started = now();
+				const result = await runHost(request, target);
+				record({
+					at: started,
+					verb: "run",
+					command: displayOf(target),
+					intent: "host",
+					mode: "host",
+					workspaceRoot: "",
+					exitCode: result.exitCode,
+					timedOut: result.timedOut,
+					stalled: result.stalled
+				});
+				return settle$1(result);
+			}
+			const granted = grantFor(request.session);
+			const intent = request.intent;
+			const policy = policyOf(intent, ceiling, runtimeRoot, granted);
+			const line = sandboxedLineOf(target, request.shellKind);
+			let result = await attempt(request, policy, line);
+			if (!sandboxDeniedOf(result.sandbox)) {
+				record({
+					at: now(),
+					verb: "run",
+					command: line,
+					intent: intent.kind,
+					mode: policy.mode,
+					workspaceRoot: policy.workspaceRoot,
+					exitCode: result.exitCode,
+					timedOut: result.timedOut,
+					stalled: result.stalled
+				});
+				return settle$1(result);
+			}
+			const path = deniedPathOf(result.stderr, result.stdout);
+			const scope = denialScopeOf(path, policy, runtimeRoot, granted);
+			const healedPolicy = request.retry === "safe" ? healPolicyOf(intent, scope, granted) : void 0;
+			let healed = false;
+			if (healedPolicy !== void 0) {
+				const retried = await attempt(request, healedPolicy, line).catch(() => void 0);
+				if (retried !== void 0 && !sandboxDeniedOf(retried.sandbox)) {
+					result = retried;
+					healed = true;
+				}
+			}
+			const denial = {
+				...path === void 0 ? {} : { path },
+				scope,
+				...healed ? { healed: true } : {}
+			};
+			record({
+				at: now(),
+				verb: "run",
+				command: line,
+				intent: intent.kind,
+				mode: policy.mode,
+				workspaceRoot: policy.workspaceRoot,
+				exitCode: result.exitCode,
+				timedOut: result.timedOut,
+				stalled: result.stalled,
+				denial
+			});
+			if (healed) return settle$1(result, denial);
+			if (request.bestEffort === true) {
+				ports.logger?.warn?.(`[dsh-workbench] ${denialMessageOf(scope, path, `${result.stderr}\n${result.stdout}`)}`);
+				return settle$1(result, denial);
+			}
+			throw new SeamError("sandbox-denied", denialMessageOf(scope, path, `${result.stderr}\n${result.stdout}`), {
+				...path === void 0 ? {} : { path },
+				scope
+			});
+		},
+		spawn(request) {
+			requireHost(request.intent);
+			return spawnHost(request);
+		},
+		open(request) {
+			requireHost(request.intent);
+			return openHost(request);
+		},
+		facts: () => facts
+	};
+}
+//#endregion
+//#region ../shared/dist/host/seam/unit-seam.js
+function unitDataRoot(runtimeRoot, unit) {
+	return join(runtimeRoot, "units", unit);
+}
+function createUnitSeam(ports) {
+	const unitRoot = unitDataRoot(ports.runtimeRoot, ports.unit);
+	mkdirSync(unitRoot, { recursive: true });
+	const declared = new Set(ports.declared ?? []);
+	const env = seamUnitEnv({
+		runtimeRoot: ports.runtimeRoot,
+		unitRoot,
+		realHome: ports.realHome
+	});
+	return { async run(request) {
+		const common = {
+			command: request.command,
+			...request.workdir === void 0 ? {} : { workdir: request.workdir },
+			...request.timeoutMs === void 0 ? {} : { timeoutMs: request.timeoutMs },
+			...request.signal === void 0 ? {} : { signal: request.signal },
+			...request.retry === void 0 ? {} : { retry: request.retry }
+		};
+		if (request.scope === "unit") return ports.seam.run({
+			...common,
+			intent: { kind: "product" },
+			env: {
+				...env,
+				...request.env ?? {}
+			}
+		});
+		if (!declared.has("workspace")) throw new SeamError("scope-not-declared", `${ports.unit} 的清单没有声明 host.writes 里的 workspace：要写当前工作区，先在清单里声明`);
+		if (request.session === void 0 || request.session === null) throw new SeamError("workspace-unknown", `${ports.unit} 请求写工作区，但这次调用没有会话`);
+		return ports.seam.run({
+			...common,
+			intent: { kind: "workspace" },
+			session: request.session,
+			env: { ...request.env ?? {} }
+		});
+	} };
+}
+//#endregion
+//#region ../shared/dist/host/seam/service.js
+var WORKBENCH_SEAM = "workbenchSeam";
+function seamOf(ctx) {
+	return ctx.get(WORKBENCH_SEAM, false);
+}
+//#endregion
 //#region ../shared/dist/host/install-failure.js
 var TARGET_FLAGS = [
 	"--prefix",
@@ -5316,123 +6260,40 @@ function buildSupplyIndex(declarations, options = {}) {
 			const detail = `${need.kind === "extension" ? "插件" : "共用库"} ${need.name} 来自不同的包：${seen.package} / ${entry.package}`;
 			entry.conflicted = true;
 			seen.conflicted = true;
-			conflicts.push({
-				kind: "name-mismatch",
-				key: entry.key,
-				names: [need.name],
-				declarers: [.../* @__PURE__ */ new Set([...seen.declarers, ...entry.declarers])],
-				detail
-			});
-		} else if (seen === void 0) byName.set(nameKey, entry);
-	}
-	const deduped = /* @__PURE__ */ new Map();
-	for (const conflict of conflicts) deduped.set(`${conflict.kind}:${conflict.key}`, conflict);
-	const frozenEntries = /* @__PURE__ */ new Map();
-	for (const [key, entry] of entries) frozenEntries.set(key, {
-		key: entry.key,
-		kind: entry.kind,
-		names: [...entry.names],
-		package: entry.package,
-		...entry.runtime === void 0 ? {} : { runtime: entry.runtime },
-		sources: entry.sources.map((source) => ({ ...source })),
-		declarers: [...entry.declarers],
-		commands: [...entry.commands],
-		conflicted: entry.conflicted
-	});
-	const entryOf = (kind, name) => byName.get(`${kind}:${name}`);
-	return {
-		entries: frozenEntries,
-		conflicts: [...deduped.values()],
-		problems: [...deduped.values()].map((conflict) => conflict.detail),
-		entryOf,
-		sourcesOf: (kind, name) => {
-			const entry = entryOf(kind, name);
-			return entry === void 0 || entry.conflicted ? [] : entry.sources;
-		}
-	};
-}
-//#endregion
-//#region ../shared/dist/host/patch.js
-var ID_LINE = /^- id:[ \t]*"?([^"\s#]+)/;
-var INSERT_LINE = /^- insert:[ \t]*$/;
-var NESTED_ID = /^[ \t]+-[ \t]*id:[ \t]*"?([^"\s#]+)/;
-var NAME_LINE = /^[ \t]*-?[ \t]*name:[ \t]*['"]?([^'"\s#]+)/;
-function trimmedTail(lines) {
-	let end = lines.length;
-	while (end > 0 && (lines[end - 1] ?? "").trim() === "") end -= 1;
-	return lines.slice(0, end);
-}
-function matched(text, pattern) {
-	const found = pattern.exec(text);
-	return found === null ? void 0 : found[1];
-}
-function blockOf$1(body, index) {
-	const lines = body.split("\n");
-	const first = lines[0] ?? "";
-	const id = matched(first, ID_LINE);
-	const nested = lines.flatMap((line) => {
-		const one = matched(line, NESTED_ID);
-		return one === void 0 ? [] : [one];
-	});
-	const insert = id === void 0 && INSERT_LINE.test(first);
-	const label = id ?? nested.join(", ");
-	const key = id !== void 0 ? `id:${id}` : insert ? `insert:${nested.join(", ")}` : `block:${String(index)}`;
-	const names = lines.flatMap((line) => {
-		const one = matched(line, NAME_LINE);
-		return one === void 0 ? [] : [one];
-	});
-	return {
-		key,
-		id: label === "" ? key : label,
-		insert,
-		body,
-		names
-	};
-}
-function spannedBlocks(text) {
-	const lines = text.split("\n");
-	const starts = [];
-	lines.forEach((line, index) => {
-		if (/^- /.test(line) || line === "-") starts.push(index);
-	});
-	const blocks = [];
-	for (let i = 0; i < starts.length; i += 1) {
-		const from = starts[i] ?? 0;
-		const to = i + 1 < starts.length ? starts[i + 1] ?? lines.length : lines.length;
-		const body = trimmedTail(lines.slice(from, to)).join("\n");
-		if (body.trim() === "") continue;
-		blocks.push({
-			...blockOf$1(body, blocks.length),
-			from,
-			to
-		});
-	}
-	return blocks;
-}
-function patchBlocks(text) {
-	return spannedBlocks(text).map(({ from: _from, to: _to, ...block }) => block);
-}
-function patchMode(path) {
-	try {
-		return statSync(path).mode & 511;
-	} catch {
-		return 420;
+			conflicts.push({
+				kind: "name-mismatch",
+				key: entry.key,
+				names: [need.name],
+				declarers: [.../* @__PURE__ */ new Set([...seen.declarers, ...entry.declarers])],
+				detail
+			});
+		} else if (seen === void 0) byName.set(nameKey, entry);
 	}
-}
-function writePatchFile(path, text) {
-	const mode = patchMode(path);
-	const tmp = `${path}.wb-sync-${String(process.pid)}`;
-	writeFileSync(tmp, text, { mode });
-	try {
-		renameSync(tmp, path);
-	} catch (error) {
-		try {
-			unlinkSync(tmp);
-		} catch {
-			throw error;
+	const deduped = /* @__PURE__ */ new Map();
+	for (const conflict of conflicts) deduped.set(`${conflict.kind}:${conflict.key}`, conflict);
+	const frozenEntries = /* @__PURE__ */ new Map();
+	for (const [key, entry] of entries) frozenEntries.set(key, {
+		key: entry.key,
+		kind: entry.kind,
+		names: [...entry.names],
+		package: entry.package,
+		...entry.runtime === void 0 ? {} : { runtime: entry.runtime },
+		sources: entry.sources.map((source) => ({ ...source })),
+		declarers: [...entry.declarers],
+		commands: [...entry.commands],
+		conflicted: entry.conflicted
+	});
+	const entryOf = (kind, name) => byName.get(`${kind}:${name}`);
+	return {
+		entries: frozenEntries,
+		conflicts: [...deduped.values()],
+		problems: [...deduped.values()].map((conflict) => conflict.detail),
+		entryOf,
+		sourcesOf: (kind, name) => {
+			const entry = entryOf(kind, name);
+			return entry === void 0 || entry.conflicted ? [] : entry.sources;
 		}
-		throw error;
-	}
+	};
 }
 //#endregion
 //#region ../shared/dist/host/adapter-set.js
@@ -5492,7 +6353,6 @@ var FULL_METHODS = [
 	["runtime", "runners"],
 	["runtime", "health"],
 	["runtime", "seed"],
-	["runtime", "warnUnwritableRoot"],
 	["plugins", "declarationLookup"],
 	["plugins", "createUnits"],
 	["actions", "configSyncHandler"],
@@ -6297,8 +7157,8 @@ var SUBSECTION = /^###[ \t]/;
 function changelogVersion(value) {
 	return String(value ?? "").trim().replace(/^v/, "");
 }
-function changelogDate(now = /* @__PURE__ */ new Date()) {
-	return dayjs(now).format("YYYY-MM-DD");
+function changelogDate(now$3 = new Date(now())) {
+	return dayjs(now$3).format("YYYY-MM-DD");
 }
 function normalizeChangelogText(text) {
 	return String(text ?? "").replace(/\r\n?/g, "\n");
@@ -6458,6 +7318,82 @@ function normalizeWhitespace(rows) {
 	return out.join("\n").replace(/\n+$/, "");
 }
 //#endregion
+//#region src/shared/api/host/workbench-seam.ts
+function provideWorkbenchSeam(ctx) {
+	const shell = ctx.get("shell");
+	if (shell === void 0) return void 0;
+	const runtimeRoot = workbenchRoot();
+	const seam = createSeam({
+		shell,
+		runtimeRoot,
+		realHome: homedir(),
+		allowHost: true,
+		logger: ctx.logger,
+		grantOf: (session) => {
+			const resolved = ctx.get("sandboxPolicy")?.resolve?.({ session });
+			if (resolved === void 0 || resolved.mode === void 0 || resolved.workspaceRoot === void 0) return;
+			return {
+				mode: seamModeOf(resolved.mode),
+				workspaceRoot: resolved.workspaceRoot
+			};
+		}
+	});
+	ctx.provide(WORKBENCH_SEAM, seam);
+	ctx.logger?.info?.(`[dsh-workbench] 执行缝：产品域 ${runtimeRoot}`);
+	return seam;
+}
+//#endregion
+//#region src/shared/api/host/git-exec.ts
+function gitNoPromptProcessEnv(parent = process.env, platform = process.platform) {
+	return promptlessProcessEnvOf(parent, platform);
+}
+function withoutAskpassNoise(text) {
+	return text.split("\n").filter((line) => !/unable to read askpass response/i.test(line)).join("\n").trim();
+}
+//#endregion
+//#region src/shared/api/host/git-process.ts
+var gitSeam;
+function promptlessEnv() {
+	return gitNoPromptProcessEnv();
+}
+function provideGitProcessSeam(seam) {
+	gitSeam = seam;
+}
+function createGitRunner(seam) {
+	return async (args, options = {}) => {
+		const outcome = await seam.run({
+			argv: ["git", ...args],
+			intent: { kind: "host" },
+			env: promptlessEnv(),
+			...options.cwd === void 0 ? {} : { workdir: options.cwd },
+			...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
+		});
+		return {
+			exitCode: outcome.exitCode ?? null,
+			stdout: outcome.stdout,
+			stderr: outcome.stderr,
+			timedOut: outcome.timedOut
+		};
+	};
+}
+var runGitProcess = async (args, options = {}) => {
+	if (gitSeam === void 0) throw new Error("git 命令还没接上执行缝（宿主域）—— 这个进程里没有可用的 shell 服务。");
+	return createGitRunner(gitSeam)(args, options);
+};
+//#endregion
+//#region src/shared/api/host/shipped-adapter-set.ts
+function shippedAdapterSetSpec(moduleUrl) {
+	const spec = JSON.parse(readFileSync(new URL("../../package.json", moduleUrl), "utf8")).workbench?.adapterSet;
+	if (typeof spec !== "string" || spec.trim() === "") throw new Error("package.json 没写 workbench.adapterSet：外壳不知道该装哪份适配器集合");
+	return spec.trim();
+}
+async function shippedAdapterSet(ctx) {
+	const spec = shippedAdapterSetSpec(import.meta.url);
+	const factory = (await import(spec)).createAdapterSet;
+	if (typeof factory !== "function") throw new Error(`随包的适配器集合 ${spec} 没导出 createAdapterSet(ctx)`);
+	return await factory(ctx);
+}
+//#endregion
 //#region ../shared/dist/contract/protocol/dsh-plugins.js
 var DSH_PLUGINS_ROUTE = "dsh-plugins";
 //#endregion
@@ -6481,13 +7417,11 @@ function isFollowUpDismissed(runtimeRoot, id) {
 	return Object.prototype.hasOwnProperty.call(readDismissed(runtimeRoot), id);
 }
 function dismissFollowUp(runtimeRoot, id) {
-	const file = fileOf$1(runtimeRoot);
-	mkdirSync(dirname(file), { recursive: true });
 	const dismissed = {
 		...readDismissed(runtimeRoot),
-		[id]: { at: (/* @__PURE__ */ new Date()).toISOString() }
+		[id]: { at: nowIso() }
 	};
-	writeFileAtomic.sync(file, `${JSON.stringify({ dismissed }, null, 2)}\n`);
+	writeJsonFile(fileOf$1(runtimeRoot), { dismissed });
 }
 //#endregion
 //#region src/shared/api/host/migration-follow-up.ts
@@ -6609,7 +7543,7 @@ function titleOf(raw) {
 }
 async function latestIfReleaseReady(supply, input) {
 	const missing = await supply.missingReleaseParts({
-		shell: input.shell,
+		seam: input.seam,
 		name: input.pkg,
 		registry: input.registry,
 		version: input.version,
@@ -6630,18 +7564,18 @@ async function workbenchVersion(supply, input) {
 	if (read === void 0) return void 0;
 	const spec = dependencyReader(input.dir)(PLUGIN_ID);
 	const registry = read.registry ?? input.fallback;
-	const shell = input.shell;
-	const queried = read.local === true || !input.check || shell === void 0 || registry === void 0 ? void 0 : await supply.latestVersion({
-		shell,
+	const seam = input.seam;
+	const queried = read.local === true || !input.check || seam === void 0 || registry === void 0 ? void 0 : await supply.latestVersion({
+		seam,
 		name: read.pkg,
 		registry,
 		force: input.force
 	});
-	const latest = queried === void 0 || shell === void 0 || registry === void 0 || !supply.isNewerVersion(queried, read.version) ? void 0 : await latestIfReleaseReady(supply, {
+	const latest = queried === void 0 || seam === void 0 || registry === void 0 || !supply.isNewerVersion(queried, read.version) ? void 0 : await latestIfReleaseReady(supply, {
 		pkg: read.pkg,
 		version: queried,
 		registry,
-		shell,
+		seam,
 		force: input.force,
 		logger: input.logger
 	});
@@ -6656,7 +7590,7 @@ async function workbenchVersion(supply, input) {
 		...registry === void 0 || read.local === true ? {} : { registry }
 	};
 }
-function moduleVersionsHandler(ctx, shell, running, selfUpdate) {
+function moduleVersionsHandler(ctx, seam, running, selfUpdate) {
 	return async (search) => {
 		const supply = supplyPortOf(ctx);
 		const manager = supply.readBundleManager(ctx);
@@ -6676,8 +7610,8 @@ function moduleVersionsHandler(ctx, shell, running, selfUpdate) {
 			const fromRegistry = module.fromRegistry !== false;
 			const registry = fromRegistry ? module.registry ?? fallback : void 0;
 			const spec = dependencyOf(module.pkg);
-			const latest = local || !fromRegistry || !check || shell === void 0 || registry === void 0 ? void 0 : await supply.latestVersion({
-				shell,
+			const latest = local || !fromRegistry || !check || seam === void 0 || registry === void 0 ? void 0 : await supply.latestVersion({
+				seam,
 				name: module.pkg,
 				registry,
 				force
@@ -6686,8 +7620,8 @@ function moduleVersionsHandler(ctx, shell, running, selfUpdate) {
 			const declared = raw === void 0 ? [] : declarationProblemsOf(module.pkg, raw);
 			const title = titleOf(raw);
 			const refused = refusals.get(module.unit) ?? (declared.length === 0 ? void 0 : declared);
-			const latestRaw = latest === void 0 || latest === module.version || shell === void 0 || registry === void 0 ? void 0 : await supply.registryDeclarationOf({
-				shell,
+			const latestRaw = latest === void 0 || latest === module.version || seam === void 0 || registry === void 0 ? void 0 : await supply.registryDeclarationOf({
+				seam,
 				name: module.pkg,
 				registry,
 				force
@@ -6727,7 +7661,7 @@ function moduleVersionsHandler(ctx, shell, running, selfUpdate) {
 		});
 		const workbench = await workbenchVersion(supply, {
 			dir,
-			shell,
+			seam,
 			fallback,
 			force,
 			check,
@@ -6755,23 +7689,23 @@ async function declarationRefusal(supply, spec, inspection, ctx, manager) {
 	if (inspection.status !== "accepted" || inspection.name === void 0) return void 0;
 	if (inspection.kind === "path") return refusedInspection(supply.declarationRefusalOf(inspection.name, supply.pathDeclarationOf(spec)));
 	if (inspection.kind !== "registry") return void 0;
-	const shell = ctx.get("shell");
-	if (shell === void 0) return void 0;
+	const seam = seamOf(ctx);
+	if (seam === void 0) return void 0;
 	const registry = typeof inspection.registry === "string" ? inspection.registry : (await manager.registries())?.resolved ?? void 0;
 	if (registry === void 0) return void 0;
 	const raw = await supply.registryDeclarationOf({
-		shell,
+		seam,
 		name: inspection.name,
 		registry
 	});
 	return refusedInspection(supply.declarationRefusalOf(inspection.name, raw));
 }
 async function packageOverride(supply, spec, inspection, ctx, manager, asked) {
-	const shell = ctx.get("shell");
+	const seam = seamOf(ctx);
 	const registry = (inspection.status === "accepted" && typeof inspection.registry === "string" ? inspection.registry : void 0) ?? (typeof asked === "string" ? asked : (await manager.registries())?.resolved ?? void 0);
 	const route = await supply.packageRouteOf({
 		spec,
-		...shell === void 0 ? {} : { shell },
+		...seam === void 0 ? {} : { seam },
 		...registry === void 0 ? {} : { registry }
 	});
 	if (route !== void 0 && route.kind === "runtime-plugin") {
@@ -6826,57 +7760,6 @@ function bundleInspectHandler(ctx) {
 	};
 }
 //#endregion
-//#region src/shared/api/host/git-exec.ts
-function gitNoPromptEnv(platform = process.platform) {
-	const shared = {
-		GIT_TERMINAL_PROMPT: "0",
-		SSH_ASKPASS_REQUIRE: "never",
-		GCM_INTERACTIVE: "never",
-		GIT_SSH_COMMAND: "ssh -o BatchMode=yes -o StrictHostKeyChecking=accept-new"
-	};
-	if (platform === "win32") return shared;
-	return {
-		...shared,
-		GIT_ASKPASS: "/usr/bin/false",
-		SSH_ASKPASS: "/usr/bin/false"
-	};
-}
-function gitNoPromptProcessEnv(parent = process.env, platform = process.platform) {
-	const env = {
-		...parent,
-		...gitNoPromptEnv(platform)
-	};
-	if (platform === "win32") {
-		delete env.GIT_ASKPASS;
-		delete env.SSH_ASKPASS;
-	}
-	return env;
-}
-function withoutAskpassNoise(text) {
-	return text.split("\n").filter((line) => !/unable to read askpass response/i.test(line)).join("\n").trim();
-}
-//#endregion
-//#region src/shared/api/host/git-process.ts
-var DEFAULT_MAX_BYTES$2 = 8388608;
-var runGitProcess = async (args, options = {}) => {
-	const result = await execa("git", [...args], {
-		...options.cwd === void 0 ? {} : { cwd: options.cwd },
-		env: gitNoPromptProcessEnv(),
-		stdin: "ignore",
-		reject: false,
-		...options.timeoutMs === void 0 ? {} : { timeout: options.timeoutMs },
-		killSignal: "SIGKILL",
-		maxBuffer: options.maxBytes ?? DEFAULT_MAX_BYTES$2,
-		stripFinalNewline: false
-	});
-	return {
-		exitCode: result.exitCode ?? null,
-		stdout: result.stdout ?? "",
-		stderr: result.stderr ?? "",
-		timedOut: result.timedOut === true
-	};
-};
-//#endregion
 //#region src/shared/api/host/git-probe.ts
 var PROBE_TIMEOUT_MS = 1e4;
 var AUTH_TEXT = /authentication failed|could not read (username|password)|permission denied|terminal prompts disabled|host key verification failed|repository not found|no such identity|access denied|unauthorized|forbidden/;
@@ -6910,10 +7793,10 @@ var PROBE_CACHE_MS = 6e4;
 var probeCache = /* @__PURE__ */ new Map();
 async function probeGitAddressCached(url, options = {}) {
 	const hit = probeCache.get(url);
-	if (hit !== void 0 && Date.now() - hit.at < PROBE_CACHE_MS) return hit.payload;
+	if (hit !== void 0 && now() - hit.at < PROBE_CACHE_MS) return hit.payload;
 	const payload = await probeGitAddress(url, options);
 	probeCache.set(url, {
-		at: Date.now(),
+		at: now(),
 		payload
 	});
 	return payload;
@@ -6947,18 +7830,15 @@ function createHostRoutes(input) {
 		[BUNDLE_REGISTRIES_ROUTE]: bundleRegistriesHandler(ctx),
 		[BUNDLE_INSPECT_ROUTE]: bundleInspectHandler(ctx),
 		[MARKET_GIT_PROBE_ROUTE]: gitProbeHandler(),
-		[MODULE_VERSIONS_ROUTE]: moduleVersionsHandler(ctx, ctx.get("shell"), running, () => profile.selfUpdateView(dshHome(), basename(profile.dirOf(ctx) ?? "")))
+		[MODULE_VERSIONS_ROUTE]: moduleVersionsHandler(ctx, seamOf(ctx), running, () => profile.selfUpdateView(dshHome(), basename(profile.dirOf(ctx) ?? "")))
 	};
 }
-var WORKSHOP_RELATIVE = "workbench/diy";
 var WORKSHOP_TITLE = "工作台DIY";
 //#endregion
 //#region src/shared/api/host/diy.ts
-function workshopPathOf(ctx) {
-	const homePath = ctx.get("dshHomePath");
-	if (typeof homePath !== "function") return null;
+function workshopPathOf(_ctx) {
 	try {
-		return homePath(WORKSHOP_RELATIVE);
+		return join(workbenchRoot(), "diy");
 	} catch {
 		return null;
 	}
@@ -7135,7 +8015,7 @@ var panelsUnit = {
 	}))],
 	host: {
 		inject: [],
-		optional: ["tools", "shell"]
+		optional: ["tools", "workbenchSeam"]
 	}
 };
 //#endregion
@@ -8015,8 +8895,10 @@ function toolchainBinOf(root) {
 function queryCommandOf(bin, only) {
 	return `${quoteShellArg(bin)} check --only ${only} --json`;
 }
-async function runSurfaceQuery(shell, bin, only, root, fallbackBin) {
-	const result = await runShell(shell, queryCommandOf(bin, only), {
+async function runSurfaceQuery(seam, bin, only, root, fallbackBin) {
+	const result = await seam.run({
+		command: queryCommandOf(bin, only),
+		intent: noWrite(),
 		workdir: root,
 		timeoutMs: SURFACE_TIMEOUT_MS
 	});
@@ -8024,7 +8906,9 @@ async function runSurfaceQuery(shell, bin, only, root, fallbackBin) {
 	if (parsed !== null) return withoutProblems(parsed);
 	const retry = fallbackBin === void 0 || fallbackBin === bin ? void 0 : fallbackBin;
 	if (retry !== void 0) {
-		const secondParsed = jsonOf$1((await runShell(shell, queryCommandOf(retry, only), {
+		const secondParsed = jsonOf$1((await seam.run({
+			command: queryCommandOf(retry, only),
+			intent: noWrite(),
 			workdir: root,
 			timeoutMs: SURFACE_TIMEOUT_MS
 		})).stdout);
@@ -8790,11 +9674,11 @@ function componentsTool(ctx) {
 			})).find((one) => one.bin !== null) ?? null;
 			const bin = local?.bin ?? shellBin;
 			if (bin === null) throw new Error(`这个工作区（和它各模块）里还没有 dsh-wb-module（${join(root, "node_modules")} 下没有）—— 在它根目录跑一次 pnpm install 就有了；workbench_diy_status 会告诉你卡在哪一步`);
-			const shell = ctx.get("shell");
-			if (shell === void 0) throw new Error("这台机器没给 shell 服务，读不了组件清单");
+			const seam = seamOf(ctx);
+			if (seam === void 0) throw new Error("这台机器没给 shell 服务，读不了组件清单");
 			const workdir = local?.dir ?? shellRoot ?? root;
 			const fallbackBin = local !== null && shellBin !== null && shellBin !== bin ? shellBin : void 0;
-			const [primitives, kit] = await Promise.all([wantsPrimitives(scope) ? runSurfaceQuery(shell, bin, "primitives", workdir, fallbackBin) : Promise.resolve(void 0), wantsKit(scope) ? runSurfaceQuery(shell, bin, "kit", workdir, fallbackBin) : Promise.resolve(void 0)]);
+			const [primitives, kit] = await Promise.all([wantsPrimitives(scope) ? runSurfaceQuery(seam, bin, "primitives", workdir, fallbackBin) : Promise.resolve(void 0), wantsKit(scope) ? runSurfaceQuery(seam, bin, "kit", workdir, fallbackBin) : Promise.resolve(void 0)]);
 			const query = {
 				...primitives === void 0 ? {} : { primitives },
 				...kit === void 0 ? {} : { kit }
@@ -8825,12 +9709,10 @@ function registerComponentsTool(ctx, tools) {
 }
 //#endregion
 //#region src/shared/api/host/diy-artifacts.ts
-function artifactsDirOf(ctx, root) {
-	const homePath = ctx.get("dshHomePath");
-	if (typeof homePath !== "function") throw new Error("这台机器没有 dshHomePath 服务 —— 落不了截图与录制（取证目录由它给）");
+function artifactsDirOf(root) {
 	const name = basename(root).replace(/[^A-Za-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "") || "workspace";
 	const hash = createHash("sha1").update(root).digest("hex").slice(0, 8);
-	return homePath(join("workbench", "artifacts", `${name}-${hash}`));
+	return join(workbenchRoot(), "artifacts", `${name}-${hash}`);
 }
 function ensureDirOf(dir) {
 	mkdirSync(dir, { recursive: true });
@@ -8877,8 +9759,12 @@ var LOOK_TIMEOUT_MS = 3e4;
 function plainLine(command, argv) {
 	return [command, ...argv].map(quoteShellArg).join(" ");
 }
-async function runBrowserStep(shell, command, argv, timeoutMs = LOOK_TIMEOUT_MS, line = plainLine) {
-	const result = await runShell(shell, line(command, argv), { timeoutMs });
+async function runBrowserStep(seam, command, argv, timeoutMs = LOOK_TIMEOUT_MS, line = plainLine, intent = productWrite()) {
+	const result = await seam.run({
+		command: line(command, argv),
+		intent,
+		timeoutMs
+	});
 	return {
 		ok: result.exitCode === 0 && !result.timedOut,
 		stdout: result.stdout.trim(),
@@ -8902,8 +9788,8 @@ function jsonOf(raw) {
 function textOf$2(value) {
 	return typeof value === "string" ? value.trim() : "";
 }
-async function bindCurrentTab(shell, command, session, timeoutMs, line) {
-	const step = await runBrowserStep(shell, command, [
+async function bindCurrentTab(seam, command, session, timeoutMs, line) {
+	const step = await runBrowserStep(seam, command, [
 		"browser",
 		session,
 		"bind",
@@ -8934,8 +9820,8 @@ async function bindCurrentTab(shell, command, session, timeoutMs, line) {
 		reason: ""
 	};
 }
-async function workbenchPageOf(shell, command, session) {
-	const parsed = jsonOf((await runBrowserStep(shell, command, [
+async function workbenchPageOf(seam, command, session) {
+	const parsed = jsonOf((await runBrowserStep(seam, command, [
 		"browser",
 		session,
 		"eval",
@@ -8963,22 +9849,22 @@ async function workbenchPageOf(shell, command, session) {
 		shown: parsed["shown"] === true
 	};
 }
-async function readyPageOf(shell, command, session) {
-	const already = await workbenchPageOf(shell, command, session);
+async function readyPageOf(seam, command, session) {
+	const already = await workbenchPageOf(seam, command, session);
 	if (already.ok) return {
 		ok: true,
 		bound: false,
 		page: already,
 		reason: ""
 	};
-	const bound = await bindCurrentTab(shell, command, session);
+	const bound = await bindCurrentTab(seam, command, session);
 	if (!bound.ok) return {
 		ok: false,
 		bound: false,
 		page: already,
 		reason: bound.reason
 	};
-	const after = await workbenchPageOf(shell, command, session);
+	const after = await workbenchPageOf(seam, command, session);
 	return {
 		ok: after.ok,
 		bound: true,
@@ -9033,8 +9919,8 @@ async function pageAt(ctx, exec, raw, options = {}) {
 	const pool = units.map((one) => one.unit);
 	const wanted = asked === "" && pool.length === 1 ? pool[0] ?? "" : asked;
 	if (wanted === "" && options.requireUnit !== false) throw new Error(`看一眼要一个 unit（装过的：${pool.join(", ") || "（空）"}）`);
-	const shell = ctx.get("shell");
-	if (shell === void 0) throw new Error("这台机器上没有 shell 服务，动不了浏览器");
+	const seam = seamOf(ctx);
+	if (seam === void 0) throw new Error("这台机器上没有 shell 服务，动不了浏览器");
 	const held = ctx.get("workbenchDiyDebug")?.live(Date.now()) ?? null;
 	const sessionId = sessionIdOf(exec);
 	if (options.requirePact !== false) {
@@ -9044,7 +9930,7 @@ async function pageAt(ctx, exec, raw, options = {}) {
 	}
 	const command = cliCommandOf(ctx);
 	const session = asText(args["session"]) || "workbench";
-	const handshake = await readyPageOf(shell, command, session);
+	const handshake = await readyPageOf(seam, command, session);
 	if (!handshake.ok && options.requireWorkbench !== false && !hostSurface().capabilities.pageDebug) throw new Error(desktopPageText(handshake.page));
 	if (!handshake.ok && !handshake.bound) throw new Error(`连不上浏览器：${handshake.reason}。先让用户把工作台那一页切到前台（只有第一次要这样）；还不行就跑一次运行时自检（doctor）看扩展连没连上。`);
 	if (!handshake.ok && options.requireWorkbench !== false) {
@@ -9057,10 +9943,10 @@ async function pageAt(ctx, exec, raw, options = {}) {
 	if (options.requireBoard !== false && (board === "other" || board === "hidden")) throw new Error(boardGateText(situation, wanted, handshake.page, title));
 	return {
 		root,
-		artifactsDir: artifactsDirOf(ctx, root),
+		artifactsDir: artifactsDirOf(root),
 		unit: wanted,
 		args,
-		shell,
+		seam,
 		command,
 		session,
 		...surfaceOf(ctx)?.background === void 0 ? {} : { line: surfaceOf(ctx)?.background },
@@ -9220,8 +10106,8 @@ function registerDebugTools(ctx, tools, store) {
 //#endregion
 //#region src/modules/panels/model/diy-browser-act.ts
 var ACT_TIMEOUT_MS = 15e3;
-async function actBrowser(shell, command, session, argv, timeoutMs = ACT_TIMEOUT_MS, line) {
-	const step = await runBrowserStep(shell, command, [
+async function actBrowser(seam, command, session, argv, timeoutMs = ACT_TIMEOUT_MS, line) {
+	const step = await runBrowserStep(seam, command, [
 		"browser",
 		session,
 		...argv,
@@ -9244,10 +10130,10 @@ function actErrorOf(step) {
 	return step.stderr || step.stdout || "运行时报了个错";
 }
 var SWEEP_TIMEOUT_MS = 4e3;
-async function stopNetworkExact(shell, file, timeoutMs = SWEEP_TIMEOUT_MS) {
+async function stopNetworkExact(seam, file, timeoutMs = SWEEP_TIMEOUT_MS) {
 	const pidFile = quoteShellArg(`${file}.pid`);
 	const reaperFile = quoteShellArg(`${file}.reaper`);
-	return (await runShell(shell, [
+	const line = [
 		`p="$(cat ${pidFile} 2>/dev/null)"`,
 		`r="$(cat ${reaperFile} 2>/dev/null)"`,
 		`[ -n "$p" ] && pkill -P "$p" 2>/dev/null`,
@@ -9256,7 +10142,12 @@ async function stopNetworkExact(shell, file, timeoutMs = SWEEP_TIMEOUT_MS) {
 		`[ -n "$r" ] && kill "$r" 2>/dev/null`,
 		`if [ "$(cat ${pidFile} 2>/dev/null)" = "$p" ]; then rm -f ${pidFile} ${reaperFile}; fi`,
 		"true"
-	].join("; "), { timeoutMs })).exitCode === 0;
+	].join("; ");
+	return (await seam.run({
+		command: line,
+		intent: productWrite(),
+		timeoutMs
+	})).exitCode === 0;
 }
 //#endregion
 //#region src/modules/panels/model/diy-logs.ts
@@ -9379,7 +10270,7 @@ function registerLogTools(ctx, tools) {
 		});
 		return {
 			page,
-			step: await actBrowser(page.shell, page.command, page.session, ["eval", script])
+			step: await actBrowser(page.seam, page.command, page.session, ["eval", script])
 		};
 	}
 	const watchTool = {
@@ -9632,7 +10523,7 @@ function cropPngFile(input, output, rect) {
 		reason: cropped.reason
 	};
 	try {
-		writeFileSync(output, cropped.bytes);
+		writeBytesFile(output, cropped.bytes);
 	} catch (error) {
 		return {
 			ok: false,
@@ -9647,6 +10538,44 @@ function cropPngFile(input, output, rect) {
 	};
 }
 //#endregion
+//#region src/modules/panels/model/diy-browser-clip.ts
+function finite(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function clipOf(value) {
+	if (typeof value !== "object" || value === null) return void 0;
+	const raw = value;
+	const x = finite(raw["x"]);
+	const y = finite(raw["y"]);
+	const width = finite(raw["width"]);
+	const height = finite(raw["height"]);
+	if (x === void 0 || y === void 0 || width === void 0 || height === void 0) return void 0;
+	if (x < 0 || y < 0 || width <= 0 || height <= 0) return void 0;
+	return {
+		x,
+		y,
+		width,
+		height
+	};
+}
+function deviceClipRect(clip, dpr) {
+	const scale = Number.isFinite(dpr) && dpr > 0 ? dpr : 1;
+	return {
+		x: Math.max(0, Math.round(clip.x * scale)),
+		y: Math.max(0, Math.round(clip.y * scale)),
+		width: Math.max(1, Math.round(clip.width * scale)),
+		height: Math.max(1, Math.round(clip.height * scale))
+	};
+}
+function clipNote(clip, viewport) {
+	if (viewport.width <= 0 || viewport.height <= 0) return "没读到视口尺寸（那条量 dpr / innerWidth 的 eval 没回来）—— 给的是整屏图，裁不了";
+	if (clip.x + clip.width <= viewport.width && clip.y + clip.height <= viewport.height && viewport.width > 0) return "";
+	return `要裁的那块 ${String(clip.x)},${String(clip.y)} ${String(clip.width)}×${String(clip.height)} 不在视口里（视口 ${String(viewport.width)}×${String(viewport.height)}）—— 给的是整屏图`;
+}
+function defaultShotPath(dir, unit, stamp) {
+	return join(dir, `${unit === "" ? "page" : unit}-${String(stamp)}.png`);
+}
+//#endregion
 //#region src/modules/panels/model/diy-schema.ts
 var UNIT_PROP = {
 	type: "string",
@@ -9718,42 +10647,6 @@ function argvOf(row, raw, unit) {
 	if (row.css.kind === "flag") return prefixValue(tokens, row.css.flag, card);
 	return prefixPositional(tokens, row.css.at, card, row.css.onlyWhenFirst);
 }
-function finite(value) {
-	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
-}
-function clipOf(value) {
-	if (typeof value !== "object" || value === null) return void 0;
-	const raw = value;
-	const x = finite(raw["x"]);
-	const y = finite(raw["y"]);
-	const width = finite(raw["width"]);
-	const height = finite(raw["height"]);
-	if (x === void 0 || y === void 0 || width === void 0 || height === void 0) return void 0;
-	if (x < 0 || y < 0 || width <= 0 || height <= 0) return void 0;
-	return {
-		x,
-		y,
-		width,
-		height
-	};
-}
-function deviceClipRect(clip, dpr) {
-	const scale = Number.isFinite(dpr) && dpr > 0 ? dpr : 1;
-	return {
-		x: Math.max(0, Math.round(clip.x * scale)),
-		y: Math.max(0, Math.round(clip.y * scale)),
-		width: Math.max(1, Math.round(clip.width * scale)),
-		height: Math.max(1, Math.round(clip.height * scale))
-	};
-}
-function clipNote(clip, viewport) {
-	if (viewport.width <= 0 || viewport.height <= 0) return "没读到视口尺寸（那条量 dpr / innerWidth 的 eval 没回来）—— 给的是整屏图，裁不了";
-	if (clip.x + clip.width <= viewport.width && clip.y + clip.height <= viewport.height && viewport.width > 0) return "";
-	return `要裁的那块 ${String(clip.x)},${String(clip.y)} ${String(clip.width)}×${String(clip.height)} 不在视口里（视口 ${String(viewport.width)}×${String(viewport.height)}）—— 给的是整屏图`;
-}
-function defaultShotPath(dir, unit, stamp) {
-	return join(dir, `${unit === "" ? "page" : unit}-${String(stamp)}.png`);
-}
 var BROWSER_TOOLS = [
 	{
 		tool: DIY_STATE_TOOL,
@@ -9934,7 +10827,7 @@ function parametersOf(row, command) {
 	};
 }
 async function viewportOf(page) {
-	const parsed = jsonOf((await runBrowserStep(page.shell, page.command, [
+	const parsed = jsonOf((await runBrowserStep(page.seam, page.command, [
 		"browser",
 		page.session,
 		"eval",
@@ -9960,8 +10853,8 @@ function hostOf$1(url) {
 		return "";
 	}
 }
-async function onSiteOnce(shell, command, site, line) {
-	const step = await runBrowserStep(shell, command, [
+async function onSiteOnce(seam, command, site, line) {
+	const step = await runBrowserStep(seam, command, [
 		"browser",
 		BROWSER_READ_SESSION,
 		"get",
@@ -9971,7 +10864,7 @@ async function onSiteOnce(shell, command, site, line) {
 	], LOOK_TIMEOUT_MS, line);
 	const want = hostOf$1(site);
 	if (want === "" || hostOf$1(step.stdout.trim()) === want) return false;
-	await runBrowserStep(shell, command, [
+	await runBrowserStep(seam, command, [
 		"browser",
 		BROWSER_READ_SESSION,
 		"open",
@@ -9994,15 +10887,15 @@ function readRefusalOf(row, raw) {
 async function runReadTool(row, ctx, raw, site) {
 	const refused = readRefusalOf(row, raw);
 	if (refused !== "") throw new Error(refused);
-	const shell = ctx.get("shell");
-	if (shell === void 0) throw new Error("这台机器上没有 shell 服务，驱动不了浏览器");
+	const seam = seamOf(ctx);
+	if (seam === void 0) throw new Error("这台机器上没有 shell 服务，驱动不了浏览器");
 	const command = cliCommandOf(ctx);
 	const requested = asNumber(raw["timeoutMs"]);
 	const timeoutMs = requested !== void 0 && requested > 0 ? requested : DEFAULT_TIMEOUT_MS$4;
 	const argv = stringsOf$1(raw["args"]);
 	const line = surfaceOf(ctx)?.background;
-	const opened = await onSiteOnce(shell, command, site, line);
-	const step = await runBrowserStep(shell, command, [
+	const opened = await onSiteOnce(seam, command, site, line);
+	const step = await runBrowserStep(seam, command, [
 		"browser",
 		BROWSER_READ_SESSION,
 		...row.verb,
@@ -10037,22 +10930,26 @@ async function runBrowserTool(row, ctx, raw, exec) {
 	const clipAsked = row.clip === true && page.args["clip"] !== void 0;
 	let file = "";
 	let finalArgv = argv;
+	let intent = productWrite();
 	if (row.clip === true) {
 		const given = argv[0] !== void 0 && !argv[0].startsWith("-") ? argv[0] : "";
 		if (given === "") {
 			file = defaultShotPath(page.artifactsDir, page.unit, Date.now());
 			finalArgv = [file, ...argv];
 			ensureDirOf(dirname(file));
-		} else file = given;
+		} else {
+			file = given;
+			intent = pathsWrite([file]);
+		}
 	}
-	const step = await runBrowserStep(page.shell, page.command, [
+	const step = await runBrowserStep(page.seam, page.command, [
 		"browser",
 		page.session,
 		...row.verb,
 		...finalArgv,
 		"--window",
 		"background"
-	], timeoutMs, page.line);
+	], timeoutMs, page.line, intent);
 	const shot = {};
 	if (row.clip === true) {
 		shot["file"] = step.ok ? file : "";
@@ -10138,11 +11035,15 @@ function specTool(ctx) {
 			const args = asRecord$1(raw);
 			const argv = specArgvOf(asText(args["command"]));
 			if (argv.length === 0) throw new Error("给一条命令，site 与名字两个词 —— 例 `inventory publish`（`inventory/publish` 也认）。");
-			const shell = ctx.get("shell");
-			if (shell === void 0) throw new Error("这台机器上没有 shell 服务，问不了命令的形状");
+			const seam = seamOf(ctx);
+			if (seam === void 0) throw new Error("这台机器上没有 shell 服务，问不了命令的形状");
 			const asked = asNumber(args["timeoutMs"]);
 			const timeoutMs = asked !== void 0 && asked > 0 ? asked : SPEC_TIMEOUT_MS;
-			const result = await runShell(shell, (surfaceOf(ctx)?.background ?? plainLine)(cliCommandOf(ctx), argv), { timeoutMs });
+			const result = await seam.run({
+				command: (surfaceOf(ctx)?.background ?? plainLine)(cliCommandOf(ctx), argv),
+				intent: productWrite(),
+				timeoutMs
+			});
 			const spec = jsonOf(result.stdout);
 			return plainJson({
 				ok: result.exitCode === 0 && !result.timedOut,
@@ -10160,8 +11061,139 @@ function registerSpecTool(ctx, tools) {
 	return [tools.register(specTool(ctx))];
 }
 //#endregion
+//#region src/shared/api/host/diy-release-staging.ts
+var STAGING_ROOT = "dsh-wb-release";
+function stagingDirOf(unit) {
+	return join(tmpdir(), STAGING_ROOT, unit.replace(/[^A-Za-z0-9._-]+/g, "-"));
+}
+function journalFileOf(staging, unit) {
+	return join(staging, "releases", `${unit}.json`);
+}
+function prepareStaging(unit, resume) {
+	const staging = stagingDirOf(unit);
+	if (!resume) rmSync(staging, {
+		recursive: true,
+		force: true
+	});
+	mkdirSync(staging, { recursive: true });
+	return staging;
+}
+function cleanupStaging(unit) {
+	rmSync(stagingDirOf(unit), {
+		recursive: true,
+		force: true
+	});
+}
+function adoptTarballFile(file, unit) {
+	if (file === "" || !existsSync(file)) return void 0;
+	const dest = join(workbenchRoot(), "artifacts", unit, basename(file));
+	if (dest === file) return dest;
+	mkdirSync(dirname(dest), { recursive: true });
+	copyFileSync(file, dest);
+	rmSync(file, { force: true });
+	return dest;
+}
+function mirrorJournal(staging, unit) {
+	const from = journalFileOf(staging, unit);
+	if (!existsSync(from)) return;
+	const to = join(workbenchRoot(), "releases", `${unit}.json`);
+	mkdirSync(dirname(to), { recursive: true });
+	copyFileSync(from, to);
+}
+//#endregion
 //#region src/modules/panels/model/diy-publish.ts
 var PUBLISH_TIMEOUT_MS = 18e5;
+function adoptTarball(payload, unit) {
+	const file = asText(payload["file"]);
+	const dest = adoptTarballFile(file, unit);
+	if (dest === void 0) return payload;
+	const install = asText(payload["install"]);
+	return {
+		...payload,
+		file: dest,
+		...install === "" ? {} : { install: install.split(file).join(dest) }
+	};
+}
+function needsUserPayload(payload) {
+	const needs = asRecord$1(payload["needsUser"]);
+	const stepText = asText(needs["text"]);
+	const command = asText(needs["command"]);
+	return plainJson({
+		...payload,
+		text: [
+			`还差一步：${stepText}`,
+			...command === "" ? [] : [`命令：${command}`],
+			"做完跟我说「好了」，我接着发。"
+		].join("\n")
+	});
+}
+function resumablePayload(payload, unit) {
+	const resumeInfo = asRecord$1(payload["resume"]);
+	return plainJson({
+		...payload,
+		text: [`发布中断在第 ${asText(resumeInfo["phase"])} 步：${asText(payload["text"])}`, `再调一次 workbench_diy_publish（unit=${unit}, resume=true）就能接着发。`].join("\n")
+	});
+}
+function outcomeOf$1(result, unit) {
+	const payload = jsonOf(result.stdout);
+	if (result.exitCode === 3 && payload !== void 0) return { payload: needsUserPayload(payload) };
+	if (result.exitCode === 4 && payload !== void 0) return { payload: resumablePayload(payload, unit) };
+	if (result.exitCode !== 0 || payload === void 0) {
+		const tail = `${result.stderr}\n${result.stdout}`.trim().split("\n").slice(-6).join(" | ");
+		return { error: /* @__PURE__ */ new Error(`发布没走通（exit ${String(result.exitCode)}）${tail === "" ? "" : `：${tail}`}`) };
+	}
+	return { payload };
+}
+function successPayloadOf(payload, found, options) {
+	const name = asText(payload["name"]);
+	const released = asText(payload["version"]);
+	const registry = asText(payload["registry"]);
+	const file = asText(payload["file"]);
+	const install = asText(payload["install"]);
+	const git = asRecord$1(payload["git"]);
+	const targetOfPayload = asText(payload["target"]);
+	const text = options.verify ? [
+		`已核过 ${name}@${released}`,
+		`安装：${install}`,
+		"没有重新发布。"
+	].join("\n") : payload["refresh"] === true ? [payload["refreshed"] === true ? `已刷新 ${name} 的市集元数据（版本 ${released} 不变）` : `${name} 的市集元数据本来就是这样，没动`, `市场索引：${asText(asRecord$1(payload["market"])["url"])}`].join("\n") : targetOfPayload === "tarball" ? [
+		`安装包在 ${file}`,
+		`本机装：${install}`,
+		"文件可以从对话里带走，发给同事。"
+	].join("\n") : targetOfPayload === "git" ? [
+		`已推到 ${asText(git["url"])}（tag ${asText(git["tag"])}）`,
+		`安装：${install}`,
+		"已核过 tag 里的产物。"
+	].join("\n") : targetOfPayload === "market" ? [
+		`已发到市场索引 ${asText(asRecord$1(payload["market"])["url"])}`,
+		`安装：${install}`,
+		"已从索引仓库侧核过产物。"
+	].join("\n") : targetOfPayload === "local" ? "没发，留在本机。" : [
+		`已发布 ${name}@${released} → ${registry}`,
+		`同事安装：${install}`,
+		"包内容已经从源上核过（dist/host.js / client.js / cordis.patch.yml 都在）。"
+	].join("\n");
+	const changelog = asRecord$1(payload["changelog"]);
+	const changelogLine = asText(changelog["action"]) === "written" ? `更新日志：已写进 ${CHANGELOG_FILE} 的 ${asText(changelog["version"])}` : asText(changelog["action"]) === "kept" ? `更新日志：这一版已有（${asText(changelog["version"])}），没动` : "";
+	const labelList = Array.isArray(payload["labels"]) ? payload["labels"].map((one) => asText(one)).filter((one) => one !== "") : [];
+	const tail = [changelogLine, labelList.length === 0 || targetOfPayload !== "market" && payload["refresh"] !== true ? "" : `标签：${labelList.join(" · ")}`].filter((one) => one !== "").join("\n");
+	return plainJson({
+		...payload,
+		unit: found.unit,
+		text: tail === "" ? text : `${text}\n${tail}`
+	});
+}
+function withPhasePayloads(first, second) {
+	const merged = {
+		...first,
+		...second
+	};
+	delete merged["stop"];
+	if (merged["changelog"] === void 0 && first["changelog"] !== void 0) merged["changelog"] = first["changelog"];
+	if (merged["changes"] === void 0 && first["changes"] !== void 0) merged["changes"] = first["changes"];
+	if (merged["labels"] === void 0 && first["labels"] !== void 0) merged["labels"] = first["labels"];
+	return merged;
+}
 function registerPublishTool(ctx, tools, deps) {
 	const publishTool = {
 		name: DIY_PUBLISH_TOOL,
@@ -10235,20 +11267,22 @@ function registerPublishTool(ctx, tools, deps) {
 		async execute(raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
 			const found = deps.resolve(root, raw);
-			const shell = ctx.get("shell");
-			if (shell === void 0) throw new Error("这台机器上没有 shell 服务，发布跑不起来");
+			const seam = seamOf(ctx);
+			if (seam === void 0) throw new Error("这台机器上没有 shell 服务，发布跑不起来");
 			const bin = toolchainBinOf(root) ?? toolchainBinOf(found.dir);
 			if (bin === null) throw new Error(`这个工作区里没有 dsh-wb-module（${join(root, "node_modules")} 下没有）—— 先 pnpm install`);
-			const target = asText(asRecord$1(raw)["target"]);
-			const source = asText(asRecord$1(raw)["source"]);
-			const version = asText(asRecord$1(raw)["version"]);
-			const license = asText(asRecord$1(raw)["license"]);
-			const changelogNote = asText(asRecord$1(raw)["changelogNote"]);
-			const changelogType = asText(asRecord$1(raw)["changelogType"]);
-			const labels = labelsOf(asRecord$1(raw)["labels"]);
-			let author = asText(asRecord$1(raw)["author"]);
-			const verify = asRecord$1(raw)["verify"] === true;
-			const resume = asRecord$1(raw)["resume"] === true;
+			const args = asRecord$1(raw);
+			const target = asText(args["target"]);
+			const source = asText(args["source"]);
+			const version = asText(args["version"]);
+			const license = asText(args["license"]);
+			const changelogNote = asText(args["changelogNote"]);
+			const changelogType = asText(args["changelogType"]);
+			const labels = labelsOf(args["labels"]);
+			let author = asText(args["author"]);
+			const verify = args["verify"] === true;
+			const resume = args["resume"] === true;
+			const refresh = args["refresh"] === true;
 			if (!verify && target !== "local" && author === "" && (deps.previewOf(found.unit)?.author ?? "") === "") author = await deps.inferredAuthorOf(found.unit) ?? "";
 			const argv = [
 				bin,
@@ -10268,70 +11302,43 @@ function registerPublishTool(ctx, tools, deps) {
 			if (changelogNote !== "") argv.push("--changelog-note", changelogNote);
 			if (changelogType !== "") argv.push("--changelog-type", changelogType);
 			for (const label of labels) argv.push("--label", label);
-			if (asRecord$1(raw)["refresh"] === true) argv.push("--refresh");
-			const result = await runShell(shell, argv.map((one) => quoteShellArg(one)).join(" "), {
+			if (refresh) argv.push("--refresh");
+			const run = async (extra, request) => seam.run({
+				command: [...argv, ...extra].map((one) => quoteShellArg(one)).join(" "),
+				intent: request.intent,
+				...request.session === void 0 ? {} : { session: request.session },
+				...request.env === void 0 ? {} : { env: request.env },
 				workdir: root,
 				timeoutMs: PUBLISH_TIMEOUT_MS
 			});
-			const payload = jsonOf(result.stdout);
-			if (result.exitCode === 3 && payload !== void 0) {
-				const needs = asRecord$1(payload["needsUser"]);
-				const stepText = asText(needs["text"]);
-				const command = asText(needs["command"]);
-				return plainJson({
-					...payload,
-					text: [
-						`还差一步：${stepText}`,
-						...command === "" ? [] : [`命令：${command}`],
-						"做完跟我说「好了」，我接着发。"
-					].join("\n")
-				});
-			}
-			if (result.exitCode === 4 && payload !== void 0) {
-				const resumeInfo = asRecord$1(payload["resume"]);
-				return plainJson({
-					...payload,
-					text: [`发布中断在第 ${asText(resumeInfo["phase"])} 步：${asText(payload["text"])}`, `再调一次 workbench_diy_publish（unit=${found.unit}, resume=true）就能接着发。`].join("\n")
-				});
+			if (verify || refresh) {
+				const outcome = outcomeOf$1(await run([], { intent: productWrite() }), found.unit);
+				if ("error" in outcome) throw outcome.error;
+				return plainJson(successPayloadOf(outcome.payload, found, { verify }));
 			}
-			if (result.exitCode !== 0 || payload === void 0) {
-				const tail = `${result.stderr}\n${result.stdout}`.trim().split("\n").slice(-6).join(" | ");
-				throw new Error(`发布没走通（exit ${String(result.exitCode)}）${tail === "" ? "" : `：${tail}`}`);
+			const staging = prepareStaging(found.unit, resume);
+			const env = { DSH_WB_RELEASE_HOME: staging };
+			const session = exec.agent?.session;
+			const firstOutcome = outcomeOf$1(await run(["--workspace-only"], {
+				intent: workspaceWrite(),
+				...session === void 0 ? {} : { session },
+				env
+			}), found.unit);
+			mirrorJournal(staging, found.unit);
+			if ("error" in firstOutcome) throw firstOutcome.error;
+			const first = firstOutcome.payload;
+			if (first["stop"] !== "workspace-only" || asText(first["target"]) === "local") {
+				cleanupStaging(found.unit);
+				return plainJson(first);
 			}
-			const name = asText(payload["name"]);
-			const released = asText(payload["version"]);
-			const registry = asText(payload["registry"]);
-			const file = asText(payload["file"]);
-			const install = asText(payload["install"]);
-			const git = asRecord$1(payload["git"]);
-			const targetOfPayload = asText(payload["target"]);
-			const text = verify ? [
-				`已核过 ${name}@${released}`,
-				`安装：${install}`,
-				"没有重新发布。"
-			].join("\n") : payload["refresh"] === true ? [payload["refreshed"] === true ? `已刷新 ${name} 的市集元数据（版本 ${released} 不变）` : `${name} 的市集元数据本来就是这样，没动`, `市场索引：${asText(asRecord$1(payload["market"])["url"])}`].join("\n") : targetOfPayload === "tarball" ? [
-				`安装包在 ${file}`,
-				`本机装：${install}`,
-				"文件可以从对话里带走，发给同事。"
-			].join("\n") : targetOfPayload === "git" ? [
-				`已推到 ${asText(git["url"])}（tag ${asText(git["tag"])}）`,
-				`安装：${install}`,
-				"已核过 tag 里的产物。"
-			].join("\n") : targetOfPayload === "market" ? [
-				`已发到市场索引 ${asText(asRecord$1(payload["market"])["url"])}`,
-				`安装：${install}`,
-				"已从索引仓库侧核过产物。"
-			].join("\n") : targetOfPayload === "local" ? "没发，留在本机。" : [
-				`已发布 ${name}@${released} → ${registry}`,
-				`同事安装：${install}`,
-				"包内容已经从源上核过（dist/host.js / client.js / cordis.patch.yml 都在）。"
-			].join("\n");
-			const changelog = asRecord$1(payload["changelog"]);
-			const tail = [asText(changelog["action"]) === "written" ? `更新日志：已写进 ${CHANGELOG_FILE} 的 ${asText(changelog["version"])}` : asText(changelog["action"]) === "kept" ? `更新日志：这一版已有（${asText(changelog["version"])}），没动` : "", labels.length === 0 || targetOfPayload !== "market" && payload["refresh"] !== true ? "" : `标签：${labels.join(" · ")}`].filter((one) => one !== "").join("\n");
-			return plainJson({
-				...payload,
-				text: tail === "" ? text : `${text}\n${tail}`
-			});
+			const indexOutcome = outcomeOf$1(await run(["--index-only"], {
+				intent: productWrite(),
+				env
+			}), found.unit);
+			mirrorJournal(staging, found.unit);
+			if ("error" in indexOutcome) throw indexOutcome.error;
+			cleanupStaging(found.unit);
+			return plainJson(successPayloadOf(adoptTarball(withPhasePayloads(first, indexOutcome.payload), found.unit), found, { verify: false }));
 		}
 	};
 	return tools.register(publishTool);
@@ -11339,14 +12346,14 @@ function changelogOf(dir, version, note, kind) {
 //#endregion
 //#region src/modules/panels/model/diy-observers.ts
 async function stopObservers(ctx, workspace, session = BROWSER_SCREEN_SESSION) {
-	const shell = ctx.get("shell");
-	if (workspace === null || workspace === void 0 || workspace === "" || shell === void 0) return {
+	const seam = seamOf(ctx);
+	if (workspace === null || workspace === void 0 || workspace === "" || seam === void 0) return {
 		net: false,
 		logs: false
 	};
-	const file = join(artifactsDirOf(ctx, workspace), `net-${session}.jsonl`);
+	const file = join(artifactsDirOf(workspace), `net-${session}.jsonl`);
 	const command = cliCommandOf(ctx);
-	const [net, step] = await Promise.all([stopNetworkExact(shell, file), actBrowser(shell, command, session, ["eval", LOGS_STOP_SCRIPT], SWEEP_TIMEOUT_MS)]);
+	const [net, step] = await Promise.all([stopNetworkExact(seam, file), actBrowser(seam, command, session, ["eval", LOGS_STOP_SCRIPT], SWEEP_TIMEOUT_MS)]);
 	return {
 		net,
 		logs: typeof step.payload?.["unhooked"] === "number"
@@ -11498,7 +12505,7 @@ var REFUSAL$1 = {
 	"not-owner": "这场调试不是这个会话的"
 };
 function debugActResource(deps) {
-	const now = () => deps.now?.() ?? Date.now();
+	const now$2 = () => deps.now?.() ?? now();
 	const settled = (intent, delivered, summary, state) => ({
 		ok: true,
 		intent,
@@ -11519,7 +12526,7 @@ function debugActResource(deps) {
 				ok: false,
 				text: "现在没有调试态 —— 没什么可暂停 / 继续 / 结束的"
 			};
-			const at = now();
+			const at = now$2();
 			const held = store.live(at);
 			if (held === null) return {
 				ok: false,
@@ -11532,8 +12539,8 @@ function debugActResource(deps) {
 			};
 			const notice = deps.notice?.(intent, move.state) ?? debugNotice(intent, move.state);
 			const delivered = deliverDebugNotice(deps.agents(), held.sessionId, notice.message, NOTICE_MODE$1[intent]);
-			if (intent !== "stop") return settled(intent, delivered, notice.summary, store.live(now()));
-			return (store.settle?.() ?? Promise.resolve()).then(() => settled(intent, delivered, notice.summary, store.live(now())));
+			if (intent !== "stop") return settled(intent, delivered, notice.summary, store.live(now$2()));
+			return (store.settle?.() ?? Promise.resolve()).then(() => settled(intent, delivered, notice.summary, store.live(now$2())));
 		}
 	};
 }
@@ -12192,7 +13199,7 @@ async function takeShotOf(input, held, n) {
 	const path = shotFileOf(input.captureFile, held.unit, n);
 	const at = Date.now();
 	try {
-		const step = await actBrowser(input.shell, input.command, BROWSER_RECORD_SESSION, ["screenshot", path]);
+		const step = await actBrowser(input.seam, input.command, BROWSER_RECORD_SESSION, ["screenshot", path]);
 		if (step.ok) input.store.shotTaken(input.sessionId, {
 			n,
 			at,
@@ -12214,7 +13221,7 @@ async function takeShotOf(input, held, n) {
 		}, Date.now());
 	}
 }
-async function startRecordCapture(shell, command, session, file, makeLine = plainLine) {
+async function startRecordCapture(seam, command, session, file, makeLine = plainLine) {
 	const bin = command === "" ? "runtime" : command;
 	const arm = makeLine(bin, [
 		"browser",
@@ -12234,7 +13241,7 @@ async function startRecordCapture(shell, command, session, file, makeLine = plai
 		"--window",
 		"background"
 	]);
-	return (await runShell(shell, [
+	const line = [
 		`f=${quoteShellArg(file)}`,
 		`r=${quoteShellArg(`${file}.round`)}`,
 		": > \"$f\"",
@@ -12242,11 +13249,16 @@ async function startRecordCapture(shell, command, session, file, makeLine = plai
 		`( ${arm} >> "$f" 2>/dev/null & p=$!; sleep ${String(CAPTURE_ARM_S)}; kill "$p" 2>/dev/null )`,
 		`( while kill -0 ${HOST_PID} 2>/dev/null; do if ${snap} > "$r" 2>/dev/null; then printf ok > "$f.first"; else printf fail > "$f.first"; fi; if [ -s "$r" ]; then if command -v node >/dev/null 2>&1; then tr -d '\\n' < "$r" | node -e ${quoteShellArg(DROP_STATIC_JS)} ${quoteShellArg(STATIC_URL_PATTERN)} >> "$f"; else tr -d '\\n' < "$r" >> "$f"; printf '\\n' >> "$f"; fi; fi; rm -f "$r"; sleep ${String(CAPTURE_POLL_S)}; done & echo $! > "$f.pid" ) & echo $! > "$f.reaper"`,
 		"kill -0 \"$(cat \"$f.pid\" 2>/dev/null)\" 2>/dev/null"
-	].join("; "), { timeoutMs: START_TIMEOUT_MS })).exitCode === 0;
+	].join("; ");
+	return (await seam.run({
+		command: line,
+		intent: productWrite(),
+		timeoutMs: START_TIMEOUT_MS
+	})).exitCode === 0;
 }
 async function releaseLeftoversOf(input) {
 	await releaseQuietly({
-		shell: input.shell,
+		seam: input.seam,
 		command: input.command,
 		session: BROWSER_RECORD_SESSION,
 		url: input.url,
@@ -12255,14 +13267,14 @@ async function releaseLeftoversOf(input) {
 }
 async function stopCaptureQuiet(input) {
 	try {
-		return await stopNetworkExact(input.shell, input.captureFile);
+		return await stopNetworkExact(input.seam, input.captureFile);
 	} catch {
 		return false;
 	}
 }
 async function closeRecordTabQuiet(input) {
 	try {
-		return await closeRecordTab(input.shell, input.command, BROWSER_RECORD_SESSION, input.url);
+		return await closeRecordTab(input.seam, input.command, BROWSER_RECORD_SESSION, input.url);
 	} catch {
 		return false;
 	}
@@ -12290,7 +13302,7 @@ async function watchFinishStepOf(input) {
 	let page;
 	const started = Date.now();
 	try {
-		page = recordPageOf((await actBrowser(input.shell, input.command, BROWSER_RECORD_SESSION, ["eval", RECORD_READ_SCRIPT])).payload);
+		page = recordPageOf((await actBrowser(input.seam, input.command, BROWSER_RECORD_SESSION, ["eval", RECORD_READ_SCRIPT])).payload);
 	} catch {
 		return {
 			stop: false,
@@ -12360,26 +13372,38 @@ function watchRecordFinish(input) {
 	};
 	setTimeout(tick, 0);
 }
-async function captureLinesOf(shell, file, timeoutMs = START_TIMEOUT_MS) {
-	const step = await runShell(shell, `wc -l < ${quoteShellArg(file)} 2>/dev/null || echo 0`, { timeoutMs });
+async function captureLinesOf(seam, file, timeoutMs = START_TIMEOUT_MS) {
+	const step = await seam.run({
+		command: `wc -l < ${quoteShellArg(file)} 2>/dev/null || echo 0`,
+		intent: productWrite(),
+		timeoutMs
+	});
 	const value = Number.parseInt(step.stdout.trim() === "" ? "0" : step.stdout.trim(), 10);
 	return Number.isFinite(value) ? value : 0;
 }
-async function captureRoundOf(shell, file, timeoutMs = START_TIMEOUT_MS) {
-	const value = (await runShell(shell, `cat ${quoteShellArg(`${file}.first`)} 2>/dev/null || true`, { timeoutMs })).stdout.trim();
+async function captureRoundOf(seam, file, timeoutMs = START_TIMEOUT_MS) {
+	const value = (await seam.run({
+		command: `cat ${quoteShellArg(`${file}.first`)} 2>/dev/null || true`,
+		intent: productWrite(),
+		timeoutMs
+	})).stdout.trim();
 	return value === "ok" || value === "fail" ? value : "";
 }
-async function captureTextOf(shell, file, timeoutMs = START_TIMEOUT_MS) {
-	const step = await runShell(shell, `tail -n ${String(CAPTURE_TAIL_LINES)} ${quoteShellArg(file)} 2>/dev/null || true`, { timeoutMs });
+async function captureTextOf(seam, file, timeoutMs = START_TIMEOUT_MS) {
+	const step = await seam.run({
+		command: `tail -n ${String(CAPTURE_TAIL_LINES)} ${quoteShellArg(file)} 2>/dev/null || true`,
+		intent: productWrite(),
+		timeoutMs
+	});
 	return {
 		text: step.stdout,
 		truncated: step.truncated
 	};
 }
-async function captureReadOf(shell, file, timeoutMs = START_TIMEOUT_MS) {
-	const totalLines = await captureLinesOf(shell, file, timeoutMs);
-	const read = await captureTextOf(shell, file, timeoutMs);
-	const round = await captureRoundOf(shell, file, timeoutMs);
+async function captureReadOf(seam, file, timeoutMs = START_TIMEOUT_MS) {
+	const totalLines = await captureLinesOf(seam, file, timeoutMs);
+	const read = await captureTextOf(seam, file, timeoutMs);
+	const round = await captureRoundOf(seam, file, timeoutMs);
 	return {
 		text: read.text,
 		totalLines,
@@ -12388,14 +13412,24 @@ async function captureReadOf(shell, file, timeoutMs = START_TIMEOUT_MS) {
 		round
 	};
 }
-async function keepCaptureOf(shell, file, timeoutMs = START_TIMEOUT_MS) {
-	return (await runShell(shell, `[ -f ${quoteShellArg(file)} ] && mv ${quoteShellArg(file)} ${quoteShellArg(lastCaptureFileOf(file))} && [ -s ${quoteShellArg(lastCaptureFileOf(file))} ]`, { timeoutMs })).exitCode === 0;
+async function keepCaptureOf(seam, file, timeoutMs = START_TIMEOUT_MS) {
+	const line = `[ -f ${quoteShellArg(file)} ] && mv ${quoteShellArg(file)} ${quoteShellArg(lastCaptureFileOf(file))} && [ -s ${quoteShellArg(lastCaptureFileOf(file))} ]`;
+	return (await seam.run({
+		command: line,
+		intent: productWrite(),
+		timeoutMs
+	})).exitCode === 0;
 }
-async function captureLinesWithKeyOf(shell, file, key, timeoutMs = START_TIMEOUT_MS) {
+async function captureLinesWithKeyOf(seam, file, key, timeoutMs = START_TIMEOUT_MS) {
 	const quoted = quoteShellArg(file);
 	const compact = quoteShellArg(`"key":"${key}"`);
 	const spaced = quoteShellArg(`"key": "${key}"`);
-	return (await runShell(shell, [`[ -f ${quoted} ] || exit 0`, `grep -m 20 -F ${compact} ${quoted} 2>/dev/null || grep -m 20 -F ${spaced} ${quoted} 2>/dev/null || true`].join("; "), { timeoutMs })).stdout;
+	const line = [`[ -f ${quoted} ] || exit 0`, `grep -m 20 -F ${compact} ${quoted} 2>/dev/null || grep -m 20 -F ${spaced} ${quoted} 2>/dev/null || true`].join("; ");
+	return (await seam.run({
+		command: line,
+		intent: productWrite(),
+		timeoutMs
+	})).stdout;
 }
 function bundleOf(capture, page, state) {
 	const entries = captureEntriesOf(capture.text);
@@ -12505,32 +13539,32 @@ function tabsOf(raw) {
 		return null;
 	}
 }
-async function closeRecordTab(shell, command, session, url) {
-	const pages = tabsOf((await actBrowser(shell, command, session, ["tab", "list"])).stdout);
+async function closeRecordTab(seam, command, session, url) {
+	const pages = tabsOf((await actBrowser(seam, command, session, ["tab", "list"])).stdout);
 	if (pages !== null && pages.length === 0) return true;
 	const pick = pages?.find((one) => typeof one["url"] === "string" && one["url"] === url) ?? pages?.[0];
 	const page = pick === void 0 ? "" : typeof pick["page"] === "string" ? pick["page"] : "";
 	if (page !== "") {
-		if ((await actBrowser(shell, command, session, [
+		if ((await actBrowser(seam, command, session, [
 			"tab",
 			"close",
 			page
 		])).ok) {
-			for (const one of blanksOf(pages, page)) await actBrowser(shell, command, session, [
+			for (const one of blanksOf(pages, page)) await actBrowser(seam, command, session, [
 				"tab",
 				"close",
 				one
 			]);
-			await actBrowser(shell, command, session, ["close"]);
+			await actBrowser(seam, command, session, ["close"]);
 			return true;
 		}
 	}
-	return (await actBrowser(shell, command, session, ["close"])).ok;
+	return (await actBrowser(seam, command, session, ["close"])).ok;
 }
 async function releaseRecord(input) {
-	const capture = await stopNetworkExact(input.shell, input.captureFile);
+	const capture = await stopNetworkExact(input.seam, input.captureFile);
 	return {
-		tab: await closeRecordTab(input.shell, input.command, input.session, input.url),
+		tab: await closeRecordTab(input.seam, input.command, input.session, input.url),
 		capture
 	};
 }
@@ -12552,12 +13586,12 @@ function samePageOf(here, want) {
 	return here !== "" && norm(here) === norm(want);
 }
 async function whereAtOf(input) {
-	const step = await actBrowser(input.shell, input.command, input.session, ["eval", PAGE_HREF_SCRIPT]);
+	const step = await actBrowser(input.seam, input.command, input.session, ["eval", PAGE_HREF_SCRIPT]);
 	const href = step.payload === void 0 ? "" : step.payload["href"];
 	return typeof href === "string" ? href : "";
 }
 async function settleOf(input) {
-	await runBrowserStep(input.shell, input.command, [
+	await runBrowserStep(input.seam, input.command, [
 		"browser",
 		input.session,
 		"wait",
@@ -12567,7 +13601,7 @@ async function settleOf(input) {
 }
 async function openRecordPage(input) {
 	await releaseQuietly(input);
-	const opened = await runBrowserStep(input.shell, input.command, [
+	const opened = await runBrowserStep(input.seam, input.command, [
 		"browser",
 		input.session,
 		"tab",
@@ -12584,7 +13618,7 @@ async function openRecordPage(input) {
 	await settleOf(input);
 	let at = await whereAtOf(input);
 	if (!samePageOf(at, input.url)) {
-		await runBrowserStep(input.shell, input.command, [
+		await runBrowserStep(input.seam, input.command, [
 			"browser",
 			input.session,
 			"open",
@@ -12652,7 +13686,7 @@ function registerRecordTools(ctx, store) {
 		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
-			const artifactsDir = artifactsDirOf(ctx, root);
+			const artifactsDir = artifactsDirOf(root);
 			const args = asRecord$1(raw);
 			const asked = asText(args["unit"]);
 			const { units } = unitsOf(ctx, root);
@@ -12670,8 +13704,8 @@ function registerRecordTools(ctx, store) {
 				method,
 				urlContains
 			};
-			const shell = ctx.get("shell");
-			if (shell === void 0) throw new Error("这台机器上没有 shell 服务，开不了录制窗");
+			const seam = seamOf(ctx);
+			if (seam === void 0) throw new Error("这台机器上没有 shell 服务，开不了录制窗");
 			const command = cliCommandOf(ctx);
 			const sessionId = sessionIdOf(exec) ?? "";
 			const held = store.live(Date.now());
@@ -12690,21 +13724,21 @@ function registerRecordTools(ctx, store) {
 			}), held);
 			try {
 				const opened = await openRecordPage({
-					shell,
+					seam,
 					command,
 					session: BROWSER_RECORD_SESSION,
 					url,
 					captureFile
 				});
 				if (!opened.ok) throw new Error(opened.why);
-				const armed = await actBrowser(shell, command, BROWSER_RECORD_SESSION, ["eval", RECORD_ARM_SCRIPT]);
+				const armed = await actBrowser(seam, command, BROWSER_RECORD_SESSION, ["eval", RECORD_ARM_SCRIPT]);
 				const page = recordPageOf(armed.payload);
 				if (!armed.ok || !page.ok) throw new Error(`浮条没装上：${armed.stderr || armed.stdout || "那一页还在加载"} —— 等用户那一页站稳了再试。`);
-				await stopNetworkExact(shell, captureFile);
-				const capture = await startRecordCapture(shell, command, BROWSER_RECORD_SESSION, captureFile);
+				await stopNetworkExact(seam, captureFile);
+				const capture = await startRecordCapture(seam, command, BROWSER_RECORD_SESSION, captureFile);
 				watchRecordFinish({
 					ctx,
-					shell,
+					seam,
 					command,
 					sessionId,
 					store,
@@ -12727,7 +13761,7 @@ function registerRecordTools(ctx, store) {
 				});
 			} catch (error) {
 				await releaseQuietly({
-					shell,
+					seam,
 					command,
 					session: BROWSER_RECORD_SESSION,
 					url,
@@ -12751,8 +13785,8 @@ function registerRecordTools(ctx, store) {
 		},
 		output: OUTPUT$3,
 		async execute(raw, exec) {
-			const shell = ctx.get("shell");
-			if (shell === void 0) throw new Error("这台机器上没有 shell 服务，读不了录制");
+			const seam = seamOf(ctx);
+			if (seam === void 0) throw new Error("这台机器上没有 shell 服务，读不了录制");
 			const sessionId = sessionIdOf(exec) ?? "";
 			const held = store.live(Date.now());
 			if (held === null) throw new Error(recordMissingText());
@@ -12777,14 +13811,14 @@ function registerRecordTools(ctx, store) {
 			let stepOk = true;
 			let page = recordPageOf(void 0);
 			if (!over) {
-				await actBrowser(shell, command, BROWSER_RECORD_SESSION, ["eval", RECORD_ARM_SCRIPT]);
-				let step = await actBrowser(shell, command, BROWSER_RECORD_SESSION, ["eval", RECORD_READ_SCRIPT]);
+				await actBrowser(seam, command, BROWSER_RECORD_SESSION, ["eval", RECORD_ARM_SCRIPT]);
+				let step = await actBrowser(seam, command, BROWSER_RECORD_SESSION, ["eval", RECORD_READ_SCRIPT]);
 				page = recordPageOf(step.payload);
 				stepOk = step.ok;
 				sync(page);
 				while (budget > 0 && page.phase !== "finished" && Date.now() < deadline) {
 					await pauseFor(Math.min(POLL_MS, Math.max(0, deadline - Date.now())));
-					step = await actBrowser(shell, command, BROWSER_RECORD_SESSION, ["eval", RECORD_READ_SCRIPT]);
+					step = await actBrowser(seam, command, BROWSER_RECORD_SESSION, ["eval", RECORD_READ_SCRIPT]);
 					const next = recordPageOf(step.payload);
 					if (next.ok) page = next;
 					sync(page);
@@ -12798,7 +13832,7 @@ function registerRecordTools(ctx, store) {
 			}
 			const state = store.live(Date.now()) ?? held;
 			const ledger = state.shots;
-			const capture = await captureReadOf(shell, state.captureFile);
+			const capture = await captureReadOf(seam, state.captureFile);
 			const bundle = bundleOf(capture, page, state);
 			const hookCaught = page.calls.length;
 			const nav = page.href !== "" && page.here !== "" && page.href !== page.here;
@@ -12882,9 +13916,9 @@ function registerRecordTools(ctx, store) {
 		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
-			const artifactsDir = artifactsDirOf(ctx, root);
-			const shell = ctx.get("shell");
-			if (shell === void 0) throw new Error("这台机器上没有 shell 服务，取不了详情");
+			const artifactsDir = artifactsDirOf(root);
+			const seam = seamOf(ctx);
+			if (seam === void 0) throw new Error("这台机器上没有 shell 服务，取不了详情");
 			const args = asRecord$1(raw);
 			const unit = asText(args["unit"]);
 			const askedKey = asText(args["key"]).trim();
@@ -12908,8 +13942,8 @@ function registerRecordTools(ctx, store) {
 			if (key === "") {
 				if (index === null) throw new Error("给一个 key（清单里那一条的）或 index（清单里的序号）。");
 				if (held === null) throw new Error("收工之后只能用 key —— index 是\"那一场清单里\"的序号，这一场已经清掉了。");
-				page = recordPageOf((await actBrowser(shell, command, BROWSER_RECORD_SESSION, ["eval", RECORD_READ_SCRIPT])).payload);
-				const bundle = bundleOf(await captureReadOf(shell, file), page, held);
+				page = recordPageOf((await actBrowser(seam, command, BROWSER_RECORD_SESSION, ["eval", RECORD_READ_SCRIPT])).payload);
+				const bundle = bundleOf(await captureReadOf(seam, file), page, held);
 				const row = bundle.rows[index];
 				if (row === void 0) throw new Error(`这一段清单里没有第 ${String(index)} 条（一共 ${String(bundle.rows.length)} 条）—— 先 ${DIY_RECORD_READ_TOOL} 拿一份新的清单。`);
 				key = row.key;
@@ -12919,11 +13953,11 @@ function registerRecordTools(ctx, store) {
 					if (only !== null) return detailOfCall(only, maxBytes);
 				}
 			}
-			const candidates = pickAllOf(captureEntriesOf(await captureLinesWithKeyOf(shell, file, key)), key);
+			const candidates = pickAllOf(captureEntriesOf(await captureLinesWithKeyOf(seam, file, key)), key);
 			const fromCapture = pickOf(candidates, key, at);
 			if (fromCapture !== null) return detailOfEntry(fromCapture, maxBytes, candidates.length);
 			const over = held === null || held.phase === "finished";
-			const livePage = page !== null || over ? page : recordPageOf((await actBrowser(shell, command, BROWSER_RECORD_SESSION, ["eval", RECORD_READ_SCRIPT])).payload);
+			const livePage = page !== null || over ? page : recordPageOf((await actBrowser(seam, command, BROWSER_RECORD_SESSION, ["eval", RECORD_READ_SCRIPT])).payload);
 			const call = livePage === null ? null : hookCallOf(livePage, key);
 			if (call !== null) return detailOfCall(call, maxBytes);
 			return plainJson({
@@ -12963,8 +13997,8 @@ function registerRecordTools(ctx, store) {
 		},
 		output: OUTPUT$3,
 		async execute(_raw, exec) {
-			const shell = ctx.get("shell");
-			if (shell === void 0) throw new Error("这台机器上没有 shell 服务，收不了工");
+			const seam = seamOf(ctx);
+			if (seam === void 0) throw new Error("这台机器上没有 shell 服务，收不了工");
 			const sessionId = sessionIdOf(exec) ?? "";
 			const held = store.live(Date.now());
 			if (held === null) throw new Error(recordMissingText());
@@ -12973,14 +14007,14 @@ function registerRecordTools(ctx, store) {
 				code: "not-owner"
 			}, held);
 			const command = cliCommandOf(ctx);
-			await actBrowser(shell, command, BROWSER_RECORD_SESSION, ["eval", RECORD_ARM_SCRIPT]);
-			const page = recordPageOf((await actBrowser(shell, command, BROWSER_RECORD_SESSION, ["eval", RECORD_STOP_SCRIPT])).payload);
-			const bundle = bundleOf(await captureReadOf(shell, held.captureFile), page, held);
+			await actBrowser(seam, command, BROWSER_RECORD_SESSION, ["eval", RECORD_ARM_SCRIPT]);
+			const page = recordPageOf((await actBrowser(seam, command, BROWSER_RECORD_SESSION, ["eval", RECORD_STOP_SCRIPT])).payload);
+			const bundle = bundleOf(await captureReadOf(seam, held.captureFile), page, held);
 			const hookCaught = page.calls.length;
 			const noBody = bodyMissingOf(bundle.merged);
-			const kept = await keepCaptureOf(shell, held.captureFile);
+			const kept = await keepCaptureOf(seam, held.captureFile);
 			const cleaned = await releaseQuietly({
-				shell,
+				seam,
 				command,
 				session: BROWSER_RECORD_SESSION,
 				url: held.url,
@@ -13277,11 +14311,11 @@ async function settle(deps, spec, options, change) {
 	};
 }
 async function installRouted(deps) {
-	const { spec, options, registry, shell } = deps;
+	const { spec, options, registry, seam } = deps;
 	const supply = deps.supply ?? requireSupply();
 	const route = await supply.packageRouteOf({
 		spec,
-		...shell === void 0 ? {} : { shell },
+		...seam === void 0 ? {} : { seam },
 		...registry === void 0 ? {} : { registry }
 	});
 	if (route === void 0 || route.kind === "dsh-bundle") return installDshBundle(deps, spec, options);
@@ -13491,15 +14525,15 @@ async function updateModuleBundle(unit, deps) {
 		pkg
 	};
 	const registry = read.kind === "module" ? read.registry : void 0;
-	const latest = deps.shell === void 0 || registry === void 0 ? void 0 : await supply.latestVersion({
-		shell: deps.shell,
+	const latest = deps.seam === void 0 || registry === void 0 ? void 0 : await supply.latestVersion({
+		seam: deps.seam,
 		name: pkg,
 		registry,
 		force: true
 	});
-	if (latest !== void 0 && deps.shell !== void 0 && registry !== void 0) {
+	if (latest !== void 0 && deps.seam !== void 0 && registry !== void 0) {
 		const declared = await supply.registryDeclarationOf({
-			shell: deps.shell,
+			seam: deps.seam,
 			name: pkg,
 			registry,
 			force: true
@@ -13701,17 +14735,17 @@ async function updateWorkbenchOnce(deps) {
 	const read = deps.workbench?.(target);
 	if (read === void 0) throw new Error(`读不到 profile 里装的 ${target} —— 没法判断装的是哪一份，更新做不了。`);
 	if (read.local === true) throw new Error("这份工作台是从源码目录装进来的（开发副本），不从源上更新。");
-	const shell = deps.shell;
+	const seam = deps.seam;
 	const registry = read.registry ?? await deps.profileRegistry?.();
-	const askedLatest = shell === void 0 || registry === void 0 ? void 0 : await supply.latestVersion({
-		shell,
+	const askedLatest = seam === void 0 || registry === void 0 ? void 0 : await supply.latestVersion({
+		seam,
 		name: read.pkg,
 		registry,
 		force: true
 	});
-	if (shell !== void 0 && registry !== void 0 && askedLatest !== void 0) {
+	if (seam !== void 0 && registry !== void 0 && askedLatest !== void 0) {
 		const missing = await supply.missingReleaseParts({
-			shell,
+			seam,
 			name: read.pkg,
 			registry,
 			version: askedLatest,
@@ -13774,25 +14808,29 @@ async function migrateWorkbench(input) {
 }
 //#endregion
 //#region src/modules/panels/model/market-follow-up.ts
+var MIGRATION_TIMEOUT_MS = 12e4;
 function createWorkbenchFollowUps(deps) {
 	const runMigration = deps.runMigration ?? (async (input) => {
-		const result = await execa(process.execPath, [
-			input.script,
-			"--migrate",
-			"--force"
-		], {
+		const seam = deps.seam;
+		if (seam === void 0) throw new Error("没有执行缝（shell 服务不可用），迁移跑不起来。");
+		const outcome = await seam.run({
+			argv: [
+				process.execPath,
+				input.script,
+				"--migrate",
+				"--force"
+			],
+			intent: { kind: "host" },
 			env: {
-				...process.env,
 				ELECTRON_RUN_AS_NODE: "1",
 				...input.env
 			},
-			reject: false,
-			timeout: 12e4
+			timeoutMs: MIGRATION_TIMEOUT_MS
 		});
 		return {
-			exitCode: result.exitCode ?? 1,
-			stdout: result.stdout,
-			stderr: result.stderr
+			exitCode: outcome.exitCode ?? 1,
+			stdout: outcome.stdout,
+			stderr: outcome.stderr
 		};
 	});
 	function homeAndProfile() {
@@ -13849,7 +14887,7 @@ function pluginSweptText(pkg) {
 	return `清掉了 ${pkg}：先前要它的都放手了，也没别人在用，文件跟着删了。`;
 }
 function createPluginActions(options) {
-	const { ledger, shell, command, runAll, logger } = options;
+	const { ledger, seam, command, runAll, logger } = options;
 	const supply = options.supply ?? requireSupply();
 	const pluginFilesOf = () => {
 		const dir = supply.vendorPluginsDir?.();
@@ -13911,16 +14949,16 @@ function createPluginActions(options) {
 		};
 	}
 	async function removeFiles(plugin) {
-		if (shell === void 0) throw new Error("没有执行缝（shell 服务不可用），删不掉插件文件。");
+		if (seam === void 0) throw new Error("没有执行缝（shell 服务不可用），删不掉插件文件。");
 		await runAll([{ line: `${quoteShellArg(command)} plugin uninstall ${quoteShellArg(plugin)}` }]);
 	}
 	return {
 		async update(pkg) {
 			const { entry } = requireHeld(pkg);
 			if (entry.local === true || entry.registry === void 0) throw new Error(`「${entry.package}」是从本地装的，没有地方查新版。`);
-			if (shell === void 0) throw new Error("没有执行缝（shell 服务不可用），更新做不了。");
+			if (seam === void 0) throw new Error("没有执行缝（shell 服务不可用），更新做不了。");
 			const latest = await supply.latestVersion({
-				shell,
+				seam,
 				name: entry.package,
 				registry: entry.registry,
 				force: true
@@ -14060,7 +15098,7 @@ function restartLogLine(change) {
 //#endregion
 //#region src/modules/panels/model/market.ts
 function createMarketService(options) {
-	const { manifests, manifestsNow, probe, shell, logger, supply: supplyOption, onInstalled, onUninstalled, isReleased, bundles, installed, modules, workbench, registries, profileDir, ledger, references, dshHome, profileName } = options;
+	const { manifests, manifestsNow, probe, seam, logger, supply: supplyOption, onInstalled, onUninstalled, isReleased, bundles, installed, modules, workbench, registries, profileDir, ledger, references, dshHome, profileName } = options;
 	const supply = supplyOption ?? requireSupply();
 	const command = options.command;
 	const catalog = () => manifestsNow?.() ?? manifests;
@@ -14098,13 +15136,17 @@ function createMarketService(options) {
 		};
 	}
 	async function run(line, optional = false) {
-		if (shell === void 0) throw new Error("没有执行缝（shell 服务不可用），装 / 卸做不了。");
+		if (seam === void 0) throw new Error("没有执行缝（shell 服务不可用），装 / 卸做不了。");
 		const blocked = installWriteProblem({
 			command: line,
 			fallback: supply.modules.isolatedRoot()
 		});
 		if (blocked !== void 0) throw installError(blocked);
-		const result = await runShell(shell, line, { timeoutMs: INSTALL_TIMEOUT_MS });
+		const result = await seam.run({
+			command: line,
+			intent: productWrite(),
+			timeoutMs: INSTALL_TIMEOUT_MS
+		});
 		if (result.exitCode !== 0 && !optional) throw installError(diagnoseInstallFailure({
 			command: line,
 			exitCode: result.exitCode,
@@ -14214,7 +15256,7 @@ function createMarketService(options) {
 				registryFix,
 				...logger === void 0 ? {} : { logger }
 			}),
-			...shell === void 0 ? {} : { shell },
+			...seam === void 0 ? {} : { seam },
 			...installed === void 0 ? {} : { installed },
 			...ledger === void 0 ? {} : { ledger },
 			...logger === void 0 ? {} : { logger }
@@ -14222,7 +15264,7 @@ function createMarketService(options) {
 	}
 	const plugins = createPluginActions({
 		...ledger === void 0 ? {} : { ledger },
-		...shell === void 0 ? {} : { shell },
+		...seam === void 0 ? {} : { seam },
 		command,
 		runAll,
 		claimedBy: (plugin) => pluginUsersOf(plugin),
@@ -14377,7 +15419,7 @@ function createMarketService(options) {
 				supply,
 				modules,
 				installed,
-				shell,
+				seam,
 				manager,
 				...profile === void 0 ? {} : {
 					profile,
@@ -14399,7 +15441,7 @@ function createMarketService(options) {
 				supply,
 				asked: pkg,
 				...workbench === void 0 ? {} : { workbench },
-				...shell === void 0 ? {} : { shell },
+				...seam === void 0 ? {} : { seam },
 				...installed === void 0 ? {} : { installed },
 				...dshHome === void 0 ? {} : { dshHome },
 				...profileName === void 0 ? {} : { profileName },
@@ -14428,6 +15470,7 @@ function createMarketService(options) {
 			dshHome,
 			profileName,
 			workbench,
+			...seam === void 0 ? {} : { seam },
 			...options.runMigration === void 0 ? {} : { runMigration: options.runMigration }
 		}),
 		updateDependency: updateDependencyRow$1
@@ -14436,18 +15479,11 @@ function createMarketService(options) {
 }
 //#endregion
 //#region src/modules/panels/model/market-discover.ts
-var SANDBOX_BLOCK = [
-	"- id: sandbox-policy",
-	"  config:",
-	"    mode: !!js process.env.DSH_PERMISSION_MODE ?? 'workspace-write'",
-	"    workspaceRoot: !!js dshHomePath('workbench')"
-].join("\n");
 function explainProblem(problem, profilePath) {
 	if (problem.kind !== "sandbox" || profilePath === void 0 || profilePath === "") return problem;
-	const file = join(profilePath, "cordis.patch.yml");
 	return {
 		...problem,
-		detail: `被系统拦住了：这个 profile 的可写根盖不住工作台的缓存目录。\n退出 dsh 后，把下面这段加进 ${file}，再启动：\n${SANDBOX_BLOCK}`
+		detail: `被系统拦住了：工作台按 $DSH_HOME 声明的可写根没盖住它的缓存目录，这条命令被沙箱挡下了。\n这是工作台自己的问题，不用改 profile —— 把这一屏和 $DSH_HOME 报给工作台维护者，或先在工作台外面手动加这个源（${profilePath}）。`
 	};
 }
 var DEFAULT_PEER_TTL_MS = 6e5;
@@ -14507,7 +15543,7 @@ function createMarketDiscover(options) {
 		const git = version.source;
 		if (git.type !== "git") return void 0;
 		if (normalizedRepo(git.url) !== normalizedRepo(source.url)) return void 0;
-		if (options.shell === void 0) return void 0;
+		if (options.seam === void 0) return void 0;
 		const key = `${git.commit}|${git.path ?? ""}`;
 		const cached = peerCache.get(key);
 		if (cached !== void 0 && now() - cached.at < peerTtlMs) return cached.peer;
@@ -14515,7 +15551,12 @@ function createMarketDiscover(options) {
 		const directory = (git.path ?? "").replace(/^\/+|\/+$/g, "");
 		const file = directory === "" ? "package.json" : `${directory}/package.json`;
 		try {
-			const result = await runShell(options.shell, `git -C ${quoteShellArg(repo)} show ${git.commit}:${quoteShellArg(file)}`, { timeoutMs });
+			const result = await options.seam.run({
+				command: `git -C ${quoteShellArg(repo)} show ${git.commit}:${quoteShellArg(file)}`,
+				intent: noWrite(),
+				retry: "safe",
+				timeoutMs
+			});
 			if (result.exitCode !== 0) throw new Error(result.stderr.trim());
 			const peer = JSON.parse(result.stdout).peerDependencies?.[CORE_PEER];
 			peerCache.set(key, {
@@ -14909,7 +15950,7 @@ function repoOf(root, source) {
 	return join(directoryOf(root, source), "repo.git");
 }
 function writeMeta(path, meta) {
-	return writeFileAtomic(path, `${JSON.stringify(meta, null, 2)}\n`);
+	return writeJsonFileAsync(path, meta);
 }
 function readMeta(path) {
 	try {
@@ -15045,7 +16086,7 @@ function createMarketIndexReader(options) {
 		};
 		const fetchedAt = now();
 		mkdirSync(directoryOf(options.root, source), { recursive: true });
-		await writeFileAtomic(indexFileOf(options.root, source), text);
+		await writeTextFileAsync(indexFileOf(options.root, source), text);
 		await writeMeta(metaFileOf(options.root, source), { fetchedAt });
 		return {
 			ok: true,
@@ -15196,7 +16237,7 @@ function createMarketIndexReader(options) {
 		const entries = rows.filter((one) => one.type === "blob" && one.file !== path && one.file.startsWith(`${path}/`) && one.file.endsWith(".json"));
 		const finish = async (index, text) => {
 			const fetchedAt = now();
-			await writeFileAtomic(indexFileOf(options.root, source), text);
+			await writeTextFileAsync(indexFileOf(options.root, source), text);
 			await writeMeta(metaFileOf(options.root, source), {
 				fetchedAt,
 				commit
@@ -15472,7 +16513,7 @@ function readPayload(path, logger) {
 }
 async function writePayload(path, payload) {
 	mkdirSync(dirname(path), { recursive: true });
-	await writeFileAtomic(path, `${JSON.stringify(payload, null, 2)}\n`);
+	await writeJsonFileAsync(path, payload);
 }
 function upsert(sources, source) {
 	const found = sources.findIndex((item) => item.id === source.id);
@@ -15660,9 +16701,7 @@ function createMarketSourceInitializer(options) {
 				const migrated = marketEntryFilesOfLegacy(readFileSync(legacyFile, "utf8"), indexPath);
 				if (migrated !== void 0) {
 					for (const file of migrated) {
-						const target = join(workdir, ...file.path.split("/"));
-						mkdirSync(dirname(target), { recursive: true });
-						writeFileSync(target, file.text);
+						writeTextFile(join(workdir, ...file.path.split("/")), file.text);
 						written.push(file.path);
 					}
 					rmSync(legacyFile);
@@ -15671,12 +16710,12 @@ function createMarketSourceInitializer(options) {
 			}
 			if (!existsSync(indexMarker)) {
 				mkdirSync(indexDir, { recursive: true });
-				writeFileSync(indexMarker, MARKET_ENTRIES_README_LINES.join("\n"));
+				writeTextFile(indexMarker, MARKET_ENTRIES_README_LINES.join("\n"));
 				written.push(`${indexPath}/README.md`);
 			}
 			const readmeFile = join(workdir, "README.md");
 			if (!existsSync(readmeFile)) {
-				writeFileSync(readmeFile, MARKET_INDEX_README_LINES.join("\n"));
+				writeTextFile(readmeFile, MARKET_INDEX_README_LINES.join("\n"));
 				written.push("README.md");
 			}
 		}
@@ -16710,12 +17749,12 @@ var INSTALLED_PLUGINS_ROUTE = "panels/plugins";
 //#endregion
 //#region src/modules/panels/model/plugin-section.ts
 async function installedPlugins(options) {
-	const { ledger, shell, force = false, check = true } = options;
+	const { ledger, seam, force = false, check = true } = options;
 	const supply = options.supply ?? requireSupply();
 	const rows = [];
 	for (const entry of ledger.list()) {
-		const release = shell === void 0 || entry.local === true || entry.registry === void 0 ? void 0 : await supply.probeRelease({
-			shell,
+		const release = seam === void 0 || entry.local === true || entry.registry === void 0 ? void 0 : await supply.probeRelease({
+			seam,
 			package: entry.package,
 			registry: entry.registry,
 			force,
@@ -16742,7 +17781,7 @@ function pluginRoutes(options) {
 			ok: true,
 			plugins: await installedPlugins({
 				ledger: options.ledger,
-				...options.shell === void 0 ? {} : { shell: options.shell },
+				...options.seam === void 0 ? {} : { seam: options.seam },
 				...options.supply === void 0 ? {} : { supply: options.supply },
 				force: param(search, "force") === "1",
 				check: param(search, "check") !== "0"
@@ -17010,13 +18049,13 @@ var OWNED = [{
 		const record = {
 			...createRecordStore(),
 			release: (state) => {
-				const shellNow = ctx.get("shell");
-				if (shellNow === void 0) return Promise.resolve({
+				const seamNow = seamOf(ctx);
+				if (seamNow === void 0) return Promise.resolve({
 					tab: false,
 					capture: false
 				});
 				return releaseQuietly({
-					shell: shellNow,
+					seam: seamNow,
 					command: cliCommandOf(ctx),
 					session: BROWSER_RECORD_SESSION,
 					url: state.url,
@@ -17026,7 +18065,7 @@ var OWNED = [{
 		};
 		ctx.provide(DIY_RECORD_SERVICE, record);
 		const profileDir = supply.profileDirOf(ctx);
-		const shell = ctx.get("shell");
+		const seam = seamOf(ctx);
 		const moduleManifests = () => {
 			const list = manifests();
 			if (installable === void 0) return list.filter((manifest) => supplyNeedsOf(manifest).length > 0);
@@ -17038,7 +18077,7 @@ var OWNED = [{
 			manifests: moduleManifests(),
 			manifestsNow: moduleManifests,
 			...probe === void 0 ? {} : { probe },
-			shell,
+			seam,
 			command: cliCommandOf(ctx),
 			supply,
 			bundles,
@@ -17099,7 +18138,7 @@ var OWNED = [{
 					return;
 				}
 			},
-			shell,
+			seam,
 			...logger === void 0 ? {} : { logger }
 		});
 		return {
@@ -17108,7 +18147,7 @@ var OWNED = [{
 				...pluginRoutes({
 					ledger,
 					supply,
-					...shell === void 0 ? {} : { shell }
+					...seam === void 0 ? {} : { seam }
 				}),
 				...diyDebugRoutes(debug),
 				...diyRecordRoutes(record),
@@ -17393,6 +18432,17 @@ function declaredEnvOf(manifest) {
 	for (const need of manifest.needs ?? []) if (need.kind === "env") out[need.name] = process.env[need.name];
 	return out;
 }
+function unitSeamOf(seam, unit, manifest) {
+	const declared = manifest.host.writes ?? [];
+	if (seam === void 0 || declared.length === 0) return void 0;
+	return createUnitSeam({
+		seam,
+		unit,
+		runtimeRoot: workbenchRoot(),
+		declared,
+		realHome: homedir()
+	});
+}
 function mountUnits(units, deps) {
 	const store = deps.store ?? createWorkspaceStore({ root: null });
 	const missingData = async () => ({
@@ -17447,6 +18497,7 @@ function mountUnits(units, deps) {
 		});
 		let result;
 		try {
+			const seam = unitSeamOf(deps.seam, unit, host.manifest);
 			result = host.face.mount({
 				manifest: host.manifest,
 				ctx: mountCtx,
@@ -17456,6 +18507,7 @@ function mountUnits(units, deps) {
 				...deps.installable === void 0 ? {} : { installable: deps.installable },
 				data,
 				...hostKit,
+				...seam === void 0 ? {} : { seam },
 				env: declaredEnvOf(host.manifest),
 				...deps.libs === void 0 ? {} : { libs: deps.libs },
 				...deps.git === void 0 ? {} : { git: deps.git },
@@ -17608,7 +18660,7 @@ async function releaseHeld(store, held) {
 	}
 }
 function recordActResource(deps) {
-	const now = () => deps.now?.() ?? Date.now();
+	const now$1 = () => deps.now?.() ?? now();
 	return {
 		resource: "act",
 		async handle(payload) {
@@ -17618,7 +18670,7 @@ function recordActResource(deps) {
 				text: "不认识的意图（只认 peek / halt / stop）"
 			};
 			const store = deps.store();
-			const at = now();
+			const at = now$1();
 			const held = store?.live(at) ?? null;
 			if (store === void 0 || held === null) return {
 				ok: false,
@@ -17630,7 +18682,7 @@ function recordActResource(deps) {
 				intent,
 				delivered: deliverDebugNotice(deps.agents(), held.sessionId, notice.message, NOTICE_MODE[intent]),
 				summary: notice.summary,
-				state: store.live(now())
+				state: store.live(now$1())
 			};
 			const cleaned = await releaseHeld(store, held);
 			const move = store.stop(held.sessionId, at);
@@ -17641,7 +18693,7 @@ function recordActResource(deps) {
 				summary: notice.summary,
 				cleaned,
 				refused: move.ok ? "" : move.code,
-				state: store.live(now())
+				state: store.live(now$1())
 			};
 		}
 	};
@@ -18295,18 +19347,9 @@ function notifyLongTaskStop(agents, unit, change) {
 //#region src/app/host.ts
 var name = "dsh-workbench";
 var inject = ["webServer"];
-function shippedAdapterSetSpec(moduleUrl) {
-	const spec = JSON.parse(readFileSync(new URL("../../package.json", moduleUrl), "utf8")).workbench?.adapterSet;
-	if (typeof spec !== "string" || spec.trim() === "") throw new Error("package.json 没写 workbench.adapterSet：外壳不知道该装哪份适配器集合");
-	return spec.trim();
-}
-async function shippedAdapterSet(ctx) {
-	const spec = shippedAdapterSetSpec(import.meta.url);
-	const factory = (await import(spec)).createAdapterSet;
-	if (typeof factory !== "function") throw new Error(`随包的适配器集合 ${spec} 没导出 createAdapterSet(ctx)`);
-	return await factory(ctx);
-}
 async function apply(ctx, config) {
+	const seam = provideWorkbenchSeam(ctx);
+	if (seam !== void 0) provideGitProcessSeam(seam);
 	const facts = createFactLog();
 	const values = createValueHandoff();
 	const panelState = createPanelStateStore();
@@ -18317,13 +19360,11 @@ async function apply(ctx, config) {
 		corePackageUrl: import.meta.url,
 		log: (message) => warn(ctx, message)
 	});
-	adapters.runtime.warnUnwritableRoot(ctx);
 	if (loaded.ok) ctx.logger?.info?.(`[dsh-workbench] 适配器集合：${adapters.id}@${adapters.version}（${loaded.spec}）`);
 	else if (loaded.failure !== "not-configured") ctx.logger?.warn?.(`[dsh-workbench] 适配器集合没生效（${loaded.failure}）：${loaded.detail}；先用默认集合`);
 	ctx.provide(WORKBENCH_ADAPTERS, adapters);
 	const runtimeCommands = adapters.runtime.commands(ctx);
 	const libRunners = adapters.libs === void 0 ? void 0 : withLibRunners(adapters.libs, adapters.runtime.runners(ctx, adapters.data), ctx.logger);
-	const shell = ctx.get("shell");
 	const routes = createHostRoutes({
 		ctx,
 		facts,
@@ -18411,11 +19452,11 @@ async function apply(ctx, config) {
 	});
 	const releasedOf = (unit) => ctx.get("workbenchPanels")?.isReleased(unit) ?? false;
 	const probeOne = async (unit, force = false) => {
-		if (shell === void 0) return void 0;
+		if (seam === void 0) return void 0;
 		const manifest = manifestOf(unit);
 		if (manifest === void 0 || !hasEnvNeeds(manifest)) return void 0;
 		const common = {
-			shell,
+			seam,
 			runtimeCommands,
 			force
 		};
@@ -18435,7 +19476,7 @@ async function apply(ctx, config) {
 		deniedTools: (context) => deniedNow(context),
 		logger: ctx.logger
 	});
-	const pluginTools = shell === void 0 ? void 0 : adapters.plugins.createUnits({
+	const pluginTools = seam === void 0 ? void 0 : adapters.plugins.createUnits({
 		registry: units,
 		rows: () => ctx.get("workbenchPanels")?.listPlugins(null) ?? [],
 		declared: (plugin) => adapters.probe.declaredPluginCommands(profileDir).get(plugin) ?? /* @__PURE__ */ new Set(),
@@ -18510,6 +19551,7 @@ async function apply(ctx, config) {
 				probe: (unit, options) => probeOne(unit, options?.force ?? false),
 				values,
 				surface,
+				...seam === void 0 ? {} : { seam },
 				longTasks: {
 					scope: process.env["DSH_HOME"] ?? "",
 					bump: (names) => facts.bump([...names, LONG_TASKS_ROUTE]),
@@ -18593,12 +19635,12 @@ async function apply(ctx, config) {
 		}
 		rebindPost();
 	}
-	if (shell === void 0) ctx.logger?.warn?.("[dsh-workbench] 没有 shell 服务：需要执行缝的套件会降级");
+	if (seam === void 0) ctx.logger?.warn?.("[dsh-workbench] 没有 shell 服务：需要执行缝的套件会降级");
 	else {
 		adapters.probe.registerPreflight({
 			routes,
 			ctx,
-			shell,
+			seam,
 			runtimeCommands,
 			runtimeCapabilities: capabilities,
 			...runtimeCheck === void 0 ? {} : { runtimeCheck: () => runtimeCheck(ctx) },
@@ -18608,7 +19650,7 @@ async function apply(ctx, config) {
 		routes.capability = capabilityHandler(async (unit, force) => {
 			if (unit === void 0) {
 				const common = {
-					shell,
+					seam,
 					runtimeCommands,
 					force
 				};