@dsh-workbench/core 1.1.14-beta.2 → 1.1.14

package/dist/types/app/layouts/env-gate/gate-text.d.ts

@@ -6,11 +6,9 @@ export interface GuidanceText {
     readonly why: string;
     readonly step: string;
 }
-export declare function guidanceTextOf(guidance: PreflightGuidance | undefined, t: Translate): GuidanceText;
+export declare function guidanceTextOf(guidance: PreflightGuidance | undefined, t: Translate, hasCommand?: boolean): GuidanceText;
 export declare function stepDetailText(step: PreflightStep, snapshot: PreflightSnapshot, t: Translate): string;
 export declare function gateHintOf(snapshot: PreflightSnapshot, t: Translate): string;
-export declare function showsRawDetails(snapshot: PreflightSnapshot): boolean;
-export declare function showsRawAll(snapshot: PreflightSnapshot, panelShown: boolean): boolean;
 export interface BridgeAdvice {
     readonly text: string;
     readonly link?: {
@@ -19,3 +17,4 @@ export interface BridgeAdvice {
     };
 }
 export declare function bridgeAdvice(issue: PreflightBridgeIssue, t: Translate, fixes?: RuntimeProfile['bridge']): BridgeAdvice;
+export declare function bridgeAdviceLines(issues: readonly PreflightBridgeIssue[], t: Translate, fixes?: RuntimeProfile['bridge']): readonly BridgeAdvice[];

package/dist/types/app/units/manifests.d.ts

@@ -1,5 +1,7 @@
 import type { ClientUnitRegistry } from '../../kernel/client/registry';
 export interface UnitManifestLoaderOptions {
     readonly subscribeFacts?: (fact: string, listener: () => void) => () => void;
+    readonly retryDelayMs?: number;
+    readonly maxRetries?: number;
 }
 export declare function createUnitManifestLoader(options?: UnitManifestLoaderOptions): (registry: ClientUnitRegistry) => void;

package/dist/types/kernel/host/mount-units.d.ts

@@ -1,7 +1,7 @@
 import type { DshHostContext, HostSurface } from '@dsh-workbench/shared';
 import type { UnitManifest } from '@dsh-workbench/shared/host';
 import { type RouteTable } from '@dsh-workbench/shared/host';
-import type { ContextRenderer, LongTaskBase, LongTaskChange, LongTaskRegistry, UnitMountDeps, UnitMountResult, UnitCall } from '@dsh-workbench/shared/host';
+import type { ContextRenderer, LongTaskBase, LongTaskChange, LongTaskRegistry, Seam, UnitMountDeps, UnitMountResult, UnitCall } from '@dsh-workbench/shared/host';
 import type { DataReader } from '@dsh-workbench/shared/host';
 import type { HostUnit } from './unit-registry';
 import { type UnitReadiness } from './unit-readiness';
@@ -69,6 +69,7 @@ export declare function mountUnits(units: readonly HostUnit[], deps: {
     store?: UnitMountDeps['store'];
     values?: UnitMountDeps['values'];
     surface?: HostSurface | undefined;
+    seam?: Seam | undefined;
     longTasks?: {
         readonly scope: string;
         readonly bump: (facts: readonly string[]) => void;

package/dist/types/modules/panels/model/diy-browser-act.d.ts

@@ -1,10 +1,10 @@
-import type { DshShell } from '@dsh-workbench/shared';
+import { type Seam } from '@dsh-workbench/shared/host';
 import { type LineMaker, type BrowserStep } from './diy-browser';
 export declare const ACT_TIMEOUT_MS = 15000;
 export interface ActStep extends BrowserStep {
     readonly payload: Record<string, unknown> | undefined;
 }
-export declare function actBrowser(shell: DshShell, command: string, session: string, argv: readonly string[], timeoutMs?: number, line?: LineMaker): Promise<ActStep>;
+export declare function actBrowser(seam: Seam, command: string, session: string, argv: readonly string[], timeoutMs?: number, line?: LineMaker): Promise<ActStep>;
 export declare function actErrorOf(step: ActStep): string;
 export declare const SWEEP_TIMEOUT_MS = 4000;
-export declare function stopNetworkExact(shell: DshShell, file: string, timeoutMs?: number): Promise<boolean>;
+export declare function stopNetworkExact(seam: Seam, file: string, timeoutMs?: number): Promise<boolean>;

package/dist/types/modules/panels/model/diy-browser-clip.d.ts

@@ -0,0 +1,14 @@
+import type { PngRect } from '../../../shared/api/host/png-crop';
+export interface PngClip {
+    readonly x: number;
+    readonly y: number;
+    readonly width: number;
+    readonly height: number;
+}
+export declare function clipOf(value: unknown): PngClip | undefined;
+export declare function deviceClipRect(clip: PngClip, dpr: number): PngRect;
+export declare function clipNote(clip: PngClip, viewport: {
+    readonly width: number;
+    readonly height: number;
+}): string;
+export declare function defaultShotPath(dir: string, unit: string, stamp: number): string;

package/dist/types/modules/panels/model/diy-browser-tools.d.ts

@@ -1,13 +1,6 @@
 import type { DshHostContext, DshToolRegistry } from '@dsh-workbench/shared';
-import { type PngRect } from '../../../shared/api/host/png-crop';
 import { type PanelsToolName } from '../unit';
 export declare const CARD_TOKEN = "$card";
-export interface PngClip {
-    readonly x: number;
-    readonly y: number;
-    readonly width: number;
-    readonly height: number;
-}
 export type CssTarget = {
     readonly kind: 'positional';
     readonly at: number;
@@ -28,12 +21,6 @@ export interface BrowserToolRow {
 export declare function cardSelectorIn(unit: string): string;
 export declare function evalWrapped(script: string, card: string): string;
 export declare function argvOf(row: BrowserToolRow, raw: Record<string, unknown>, unit: string): string[];
-export declare function clipOf(value: unknown): PngClip | undefined;
-export declare function deviceClipRect(clip: PngClip, dpr: number): PngRect;
-export declare function clipNote(clip: PngClip, viewport: {
-    readonly width: number;
-    readonly height: number;
-}): string;
-export declare function defaultShotPath(dir: string, unit: string, stamp: number): string;
 export declare const BROWSER_TOOLS: readonly BrowserToolRow[];
 export declare function registerBrowserTools(ctx: DshHostContext, tools: DshToolRegistry): readonly (() => void)[];
+export { clipNote, clipOf, defaultShotPath, deviceClipRect, type PngClip } from './diy-browser-clip';

package/dist/types/modules/panels/model/diy-browser.d.ts

@@ -1,4 +1,4 @@
-import type { DshShell } from '@dsh-workbench/shared';
+import { type Seam, type WriteIntent } from '@dsh-workbench/shared/host';
 export declare const LOOK_TIMEOUT_MS = 30000;
 export interface BrowserStep {
     readonly ok: boolean;
@@ -10,7 +10,7 @@ export interface BrowserStep {
 }
 export type LineMaker = (command: string, argv: readonly string[]) => string;
 export declare function plainLine(command: string, argv: readonly string[]): string;
-export declare function runBrowserStep(shell: DshShell, command: string, argv: readonly string[], timeoutMs?: number, line?: LineMaker): Promise<BrowserStep>;
+export declare function runBrowserStep(seam: Seam, command: string, argv: readonly string[], timeoutMs?: number, line?: LineMaker, intent?: WriteIntent): Promise<BrowserStep>;
 export declare function jsonOf(raw: string): Record<string, unknown> | undefined;
 export declare function textOf(value: unknown): string;
 export interface BoundTab {
@@ -19,7 +19,7 @@ export interface BoundTab {
     readonly title: string;
     readonly reason: string;
 }
-export declare function bindCurrentTab(shell: DshShell, command: string, session: string, timeoutMs?: number, line?: LineMaker): Promise<BoundTab>;
+export declare function bindCurrentTab(seam: Seam, command: string, session: string, timeoutMs?: number, line?: LineMaker): Promise<BoundTab>;
 export interface WorkbenchPage {
     readonly ok: boolean;
     readonly url: string;
@@ -29,12 +29,12 @@ export interface WorkbenchPage {
     readonly open: boolean | null;
     readonly shown: boolean;
 }
-export declare function workbenchPageOf(shell: DshShell, command: string, session: string): Promise<WorkbenchPage>;
-export declare function writeShotsDir(shell: DshShell, dir: string): Promise<boolean>;
+export declare function workbenchPageOf(seam: Seam, command: string, session: string): Promise<WorkbenchPage>;
+export declare function writeShotsDir(seam: Seam, dir: string): Promise<boolean>;
 export interface PageHandshake {
     readonly ok: boolean;
     readonly bound: boolean;
     readonly page: WorkbenchPage;
     readonly reason: string;
 }
-export declare function readyPageOf(shell: DshShell, command: string, session: string): Promise<PageHandshake>;
+export declare function readyPageOf(seam: Seam, command: string, session: string): Promise<PageHandshake>;

package/dist/types/modules/panels/model/diy-page.d.ts

@@ -1,4 +1,5 @@
-import type { DshHostContext, DshShell, DshToolRunContext } from '@dsh-workbench/shared';
+import type { DshHostContext, DshToolRunContext } from '@dsh-workbench/shared';
+import { type Seam } from '@dsh-workbench/shared/host';
 import type { DebugState } from '@dsh-workbench/shared/host';
 import { type BoardFactState, type BoardProbe, type BoardSituation } from '@dsh-workbench/shared/host';
 import { type LineMaker, type WorkbenchPage } from './diy-browser';
@@ -8,7 +9,7 @@ export interface PageHandle {
     readonly artifactsDir: string;
     readonly unit: string;
     readonly args: Record<string, unknown>;
-    readonly shell: DshShell;
+    readonly seam: Seam;
     readonly command: string;
     readonly session: string;
     readonly line?: LineMaker;

package/dist/types/modules/panels/model/diy-record-open.d.ts

@@ -1,7 +1,7 @@
-import type { DshShell } from '@dsh-workbench/shared';
+import type { Seam } from '@dsh-workbench/shared/host';
 export declare function samePageOf(here: string, want: string): boolean;
 export declare function openRecordPage(input: {
-    readonly shell: DshShell;
+    readonly seam: Seam;
     readonly command: string;
     readonly session: string;
     readonly url: string;

package/dist/types/modules/panels/model/diy-record.d.ts

@@ -1,5 +1,6 @@
-import type { DshHostContext, DshShell } from '@dsh-workbench/shared';
+import type { DshHostContext } from '@dsh-workbench/shared';
 import type { RecordState, RecordStore } from '@dsh-workbench/shared/host';
+import { type Seam } from '@dsh-workbench/shared/host';
 import { type LineMaker } from './diy-browser';
 import type { CaptureEntry } from './diy-record-capture';
 import type { RecordCall, RecordListRow, RecordPageRead } from './diy-record-text';
@@ -16,10 +17,10 @@ export declare function captureFileOf(artifactsDir: string, unit: string): strin
 export declare function lastCaptureFileOf(file: string): string;
 export declare function shotFileOf(captureFile: string, unit: string, n: number): string;
 export declare function takeShotOf(input: WatchFinishDeps, held: RecordState, n: number): Promise<void>;
-export declare function startRecordCapture(shell: DshShell, command: string, session: string, file: string, makeLine?: LineMaker): Promise<boolean>;
+export declare function startRecordCapture(seam: Seam, command: string, session: string, file: string, makeLine?: LineMaker): Promise<boolean>;
 export interface WatchFinishDeps {
     readonly ctx: DshHostContext;
-    readonly shell: DshShell;
+    readonly seam: Seam;
     readonly command: string;
     readonly sessionId: string;
     readonly store: RecordStore;
@@ -43,15 +44,15 @@ export interface CaptureRead {
     readonly truncated: boolean;
     readonly round: string;
 }
-export declare function captureLinesOf(shell: DshShell, file: string, timeoutMs?: number): Promise<number>;
-export declare function captureRoundOf(shell: DshShell, file: string, timeoutMs?: number): Promise<string>;
-export declare function captureTextOf(shell: DshShell, file: string, timeoutMs?: number): Promise<{
+export declare function captureLinesOf(seam: Seam, file: string, timeoutMs?: number): Promise<number>;
+export declare function captureRoundOf(seam: Seam, file: string, timeoutMs?: number): Promise<string>;
+export declare function captureTextOf(seam: Seam, file: string, timeoutMs?: number): Promise<{
     readonly text: string;
     readonly truncated: boolean;
 }>;
-export declare function captureReadOf(shell: DshShell, file: string, timeoutMs?: number): Promise<CaptureRead>;
-export declare function keepCaptureOf(shell: DshShell, file: string, timeoutMs?: number): Promise<boolean>;
-export declare function captureLinesWithKeyOf(shell: DshShell, file: string, key: string, timeoutMs?: number): Promise<string>;
+export declare function captureReadOf(seam: Seam, file: string, timeoutMs?: number): Promise<CaptureRead>;
+export declare function keepCaptureOf(seam: Seam, file: string, timeoutMs?: number): Promise<boolean>;
+export declare function captureLinesWithKeyOf(seam: Seam, file: string, key: string, timeoutMs?: number): Promise<string>;
 export interface SegmentBundle {
     readonly capture: CaptureRead;
     readonly entries: readonly CaptureEntry[];
@@ -65,7 +66,7 @@ export declare function hookCallOf(page: RecordPageRead, key: string): RecordCal
 export declare function detailOfEntry(entry: CaptureEntry, maxBytes: number, ambiguous?: number): Record<string, unknown>;
 export declare function detailOfCall(call: RecordCall, maxBytes: number): Record<string, unknown>;
 export declare function releaseRecord(input: {
-    readonly shell: DshShell;
+    readonly seam: Seam;
     readonly command: string;
     readonly session: string;
     readonly url: string;
@@ -75,7 +76,7 @@ export declare function releaseRecord(input: {
     readonly capture: boolean;
 }>;
 export declare function releaseQuietly(input: {
-    readonly shell: DshShell;
+    readonly seam: Seam;
     readonly command: string;
     readonly session: string;
     readonly url: string;

package/dist/types/modules/panels/model/market-discover.d.ts

@@ -1,6 +1,6 @@
-import type { DshShell } from '@dsh-workbench/shared';
 import type { ProfileModule } from '@dsh-workbench/shared/host';
 import type { DiscoverDoc, DiscoverDocKind, DiscoverEntry, DiscoverFilter, DiscoverPayload } from '@dsh-workbench/shared/contract/protocol/market-index';
+import { type Seam } from '@dsh-workbench/shared/host';
 import type { MarketIndexReader } from '../../../shared/api/host/market-index-fetch';
 import type { MarketDocReader } from '../../../shared/api/host/market-doc';
 import type { MarketSourcesStore } from '../../../shared/api/host/market-sources-store';
@@ -17,7 +17,7 @@ export interface MarketDiscoverOptions {
     readonly modules: () => readonly ProfileModule[];
     readonly defaultRegistry: () => Promise<string | undefined>;
     readonly profilePath?: string | undefined;
-    readonly shell?: DshShell | undefined;
+    readonly seam?: Seam | undefined;
     readonly shellVersion?: string | undefined;
     readonly fetchImpl?: ((url: string, init: RequestInit) => Promise<Response>) | undefined;
     readonly now?: (() => number) | undefined;

package/dist/types/modules/panels/model/market-follow-up.d.ts

@@ -1,9 +1,10 @@
-import type { ProfilePackage } from '@dsh-workbench/shared/host';
+import type { ProfilePackage, Seam } from '@dsh-workbench/shared/host';
 import { type MigrationRunInput, type MigrationRunResult } from '../../../shared/api/host/migrate-workbench';
 export interface WorkbenchFollowUpDeps {
     readonly dshHome: (() => string) | undefined;
     readonly profileName: (() => string | null) | undefined;
     readonly workbench: ((pkg: string) => ProfilePackage | undefined) | undefined;
+    readonly seam?: Seam | undefined;
     readonly runMigration?: ((input: MigrationRunInput) => Promise<MigrationRunResult>) | undefined;
 }
 export interface WorkbenchFollowUpActions {

package/dist/types/modules/panels/model/market-route.d.ts

@@ -1,5 +1,4 @@
-import type { DshShell } from '@dsh-workbench/shared';
-import type { PluginSourceCommand } from '@dsh-workbench/shared/host';
+import type { PluginSourceCommand, Seam } from '@dsh-workbench/shared/host';
 import type { BundleChange } from '../../../kernel/contract/bundle-install';
 import type { BundleManager } from '@dsh-workbench/shared/host';
 import type { InstalledModule } from '@dsh-workbench/shared/host';
@@ -11,7 +10,7 @@ export interface BundleInstallDeps {
     readonly options?: BundleInstallOptions | undefined;
     readonly registry?: string | undefined;
     readonly command: string;
-    readonly shell?: DshShell | undefined;
+    readonly seam?: Seam | undefined;
     readonly supply?: SupplyPort | undefined;
     readonly manager: BundleManager;
     readonly installed?: ((pkg: string) => InstalledModule) | undefined;

package/dist/types/modules/panels/model/market-update-bundle.d.ts

@@ -1,12 +1,11 @@
-import type { DshShell } from '@dsh-workbench/shared';
-import type { BundleManager, SupplyPort } from '@dsh-workbench/shared/host';
+import type { BundleManager, Seam, SupplyPort } from '@dsh-workbench/shared/host';
 import type { InstalledModule, ProfileModule } from '@dsh-workbench/shared/host';
 import { type ReplaceBundleDeps } from './market-route';
 import type { BundleInstallOutcome } from './market-types';
 export interface BundleUpdateDeps {
     readonly modules: (() => readonly ProfileModule[]) | undefined;
     readonly installed: ((pkg: string) => InstalledModule) | undefined;
-    readonly shell: DshShell | undefined;
+    readonly seam: Seam | undefined;
     readonly manager: BundleManager;
     readonly routeDeps: ReplaceBundleDeps;
     readonly sweep: () => Promise<void>;

package/dist/types/modules/panels/model/market-workbench-update.d.ts

@@ -1,11 +1,11 @@
-import type { DshShell } from '@dsh-workbench/shared';
+import { type Seam } from '@dsh-workbench/shared/host';
 import type { InstalledModule, ProfilePackage, SupplyPort } from '@dsh-workbench/shared/host';
 import type { SelfUpdateRequest, SelfUpdateStart } from '@dsh-workbench/shared/host';
 import type { BundleInstallOutcome } from './market-types';
 export interface WorkbenchUpdateDeps {
     readonly asked: string;
     readonly workbench?: ((pkg: string) => ProfilePackage | undefined) | undefined;
-    readonly shell?: DshShell | undefined;
+    readonly seam?: Seam | undefined;
     readonly installed?: ((pkg: string) => InstalledModule) | undefined;
     readonly dshHome?: (() => string) | undefined;
     readonly profileRegistry?: (() => Promise<string | undefined>) | undefined;

package/dist/types/modules/panels/model/market.d.ts

@@ -1,9 +1,9 @@
-import type { DshShell } from '@dsh-workbench/shared';
 import type { UnitManifest } from '@dsh-workbench/shared';
 import type { BundleManager } from '@dsh-workbench/shared/host';
 import type { InstalledModule, ProfileModule, ProfilePackage } from '@dsh-workbench/shared/host';
 import type { RegistryNotebook } from '@dsh-workbench/shared/host';
 import { type SupplyPort, type UnitMountDeps } from '@dsh-workbench/shared/host';
+import { type Seam } from '@dsh-workbench/shared/host';
 import type { SelfUpdateRequest, SelfUpdateStart } from '@dsh-workbench/shared/host';
 import { type WorkbenchFollowUpDeps } from './market-follow-up';
 import { type PluginReferences } from './plugin-actions';
@@ -15,7 +15,7 @@ export declare function createMarketService(options: {
     manifests: readonly UnitManifest[];
     manifestsNow?: (() => readonly UnitManifest[]) | undefined;
     probe?: UnitMountDeps['probe'];
-    shell?: DshShell | undefined;
+    seam?: Seam | undefined;
     command: string;
     onInstalled?: (unit: string) => void;
     onUninstalled?: (unit: string) => void;

package/dist/types/modules/panels/model/plugin-actions.d.ts

@@ -1,5 +1,4 @@
-import type { DshShell } from '@dsh-workbench/shared';
-import { type PluginSourceCommand, type SupplyPort } from '@dsh-workbench/shared/host';
+import { type PluginSourceCommand, type Seam, type SupplyPort } from '@dsh-workbench/shared/host';
 import type { PluginLedger } from './plugin-ledger';
 export type PluginKept = {
     readonly kind: 'held';
@@ -38,7 +37,7 @@ export interface PluginActions {
 }
 export declare function createPluginActions(options: {
     readonly ledger?: PluginLedger | undefined;
-    readonly shell?: DshShell | undefined;
+    readonly seam?: Seam | undefined;
     readonly command: string;
     readonly runAll: (commands: readonly PluginSourceCommand[]) => Promise<void>;
     readonly claimedBy?: ((plugin: string) => readonly string[]) | undefined;

package/dist/types/modules/panels/model/plugin-section.d.ts

@@ -1,16 +1,15 @@
-import type { DshShell } from '@dsh-workbench/shared';
-import { type RouteTable, type SupplyPort } from '@dsh-workbench/shared/host';
+import { type RouteTable, type Seam, type SupplyPort } from '@dsh-workbench/shared/host';
 import type { InstalledPlugin } from '../../../shared/api/installed-plugins';
 import type { PluginLedger } from './plugin-ledger';
 export declare function installedPlugins(options: {
     readonly ledger: PluginLedger;
-    readonly shell?: DshShell | undefined;
+    readonly seam?: Seam | undefined;
     readonly force?: boolean;
     readonly check?: boolean;
     readonly supply?: SupplyPort | undefined;
 }): Promise<readonly InstalledPlugin[]>;
 export declare function pluginRoutes(options: {
     readonly ledger: PluginLedger;
-    readonly shell?: DshShell | undefined;
+    readonly seam?: Seam | undefined;
     readonly supply?: SupplyPort | undefined;
 }): RouteTable;

package/dist/types/shared/api/host/bundle-routes.d.ts

@@ -1,8 +1,8 @@
-import type { DshHostContext, DshShell } from '@dsh-workbench/shared';
-import { type RouteHandler } from '@dsh-workbench/shared/host';
+import type { DshHostContext } from '@dsh-workbench/shared';
+import { type RouteHandler, type Seam } from '@dsh-workbench/shared/host';
 import { type WorkbenchSelfUpdate } from '../../../kernel/contract/bundle-install';
 export declare function bundleRegistriesHandler(ctx: DshHostContext): RouteHandler;
 export declare function resetRefusalLog(): void;
 export declare function resetHoldLog(): void;
-export declare function moduleVersionsHandler(ctx: DshHostContext, shell: DshShell | undefined, running?: string | undefined, selfUpdate?: (() => WorkbenchSelfUpdate | undefined) | undefined): RouteHandler;
+export declare function moduleVersionsHandler(ctx: DshHostContext, seam: Seam | undefined, running?: string | undefined, selfUpdate?: (() => WorkbenchSelfUpdate | undefined) | undefined): RouteHandler;
 export declare function bundleInspectHandler(ctx: DshHostContext): RouteHandler;

package/dist/types/shared/api/host/diy-artifacts.d.ts

@@ -1,3 +1,2 @@
-import type { DshHostContext } from '@dsh-workbench/shared';
-export declare function artifactsDirOf(ctx: DshHostContext, root: string): string;
+export declare function artifactsDirOf(root: string): string;
 export declare function ensureDirOf(dir: string): void;

package/dist/types/shared/api/host/diy-components.d.ts

@@ -1,4 +1,4 @@
-import type { DshShell } from '@dsh-workbench/shared';
+import { type Seam } from '@dsh-workbench/shared/host';
 export declare const SURFACE_TIMEOUT_MS = 30000;
 export declare const EXCERPT_LINES = 60;
 export declare const SUMMARY_PER_BUCKET = 12;
@@ -20,7 +20,7 @@ export declare function wantsKit(scope: SurfaceScope): boolean;
 export declare function toolchainBinOf(root: string): string | null;
 export declare function toolchainBinAmong(root: string, dirs: readonly string[]): string | null;
 export declare function queryCommandOf(bin: string, only: 'kit' | 'primitives'): string;
-export declare function runSurfaceQuery(shell: DshShell, bin: string, only: 'kit' | 'primitives', root: string, fallbackBin?: string): Promise<SurfacePayload>;
+export declare function runSurfaceQuery(seam: Seam, bin: string, only: 'kit' | 'primitives', root: string, fallbackBin?: string): Promise<SurfacePayload>;
 export declare function filesOf(payload: SurfacePayload | undefined): Record<string, string>;
 export declare function rootsOf(payload: SurfacePayload | undefined): Record<string, string>;
 export declare function countsOf(payload: SurfacePayload | undefined): Record<string, number>;

package/dist/types/shared/api/host/diy-release-staging.d.ts

@@ -0,0 +1,6 @@
+export declare function stagingDirOf(unit: string): string;
+export declare function journalFileOf(staging: string, unit: string): string;
+export declare function prepareStaging(unit: string, resume: boolean): string;
+export declare function cleanupStaging(unit: string): void;
+export declare function adoptTarballFile(file: string, unit: string): string | undefined;
+export declare function mirrorJournal(staging: string, unit: string): void;

package/dist/types/shared/api/host/diy.d.ts

@@ -1,2 +1,2 @@
 import type { DshHostContext } from '@dsh-workbench/shared';
-export declare function workshopPathOf(ctx: DshHostContext): string | null;
+export declare function workshopPathOf(_ctx: DshHostContext): string | null;

package/dist/types/shared/api/host/git-exec.d.ts

@@ -1,3 +1,3 @@
 export declare function gitNoPromptEnv(platform?: NodeJS.Platform): Readonly<Record<string, string>>;
-export declare function gitNoPromptProcessEnv(parent?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): NodeJS.ProcessEnv;
+export declare function gitNoPromptProcessEnv(parent?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): Record<string, string>;
 export declare function withoutAskpassNoise(text: string): string;

package/dist/types/shared/api/host/git-process.d.ts

@@ -1,3 +1,4 @@
+import type { Seam } from '@dsh-workbench/shared/host';
 export interface GitRunResult {
     readonly exitCode: number | null;
     readonly stdout: string;
@@ -10,4 +11,6 @@ export interface GitRunOptions {
     readonly maxBytes?: number;
 }
 export type GitRunner = (args: readonly string[], options?: GitRunOptions) => Promise<GitRunResult>;
+export declare function provideGitProcessSeam(seam: Seam | undefined): void;
+export declare function createGitRunner(seam: Seam): GitRunner;
 export declare const runGitProcess: GitRunner;

package/dist/types/shared/api/host/shipped-adapter-set.d.ts

@@ -0,0 +1,4 @@
+import type { DshHostContext } from '@dsh-workbench/shared';
+import type { AdapterSet } from '@dsh-workbench/shared/host';
+export declare function shippedAdapterSetSpec(moduleUrl: string): string;
+export declare function shippedAdapterSet(ctx: DshHostContext): Promise<AdapterSet>;

package/dist/types/shared/api/host/workbench-seam.d.ts

@@ -0,0 +1,3 @@
+import type { DshHostContext } from '@dsh-workbench/shared';
+import { type Seam } from '@dsh-workbench/shared/host';
+export declare function provideWorkbenchSeam(ctx: DshHostContext): Seam | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-workbench/core",
-  "version": "1.1.14-beta.2",
+  "version": "1.1.14",
   "description": "个人工作台：Agent 工作台（左栏 + 常驻对话 + 自研右侧数据面板）。",
   "type": "module",
   "icon": "./icon.svg",
@@ -31,7 +31,6 @@
     "cordis.patch.yml",
     "icon.svg",
     "bin",
-    "profile",
     "skills",
     "preset",
     "scripts/create-workbench.mjs",
@@ -82,7 +81,6 @@
     "@types/proper-lockfile": "^4.1.4",
     "@types/react": "^19.3.0",
     "@types/which": "^3.0.4",
-    "@types/write-file-atomic": "^4.0.3",
     "@vitest/coverage-v8": "^5.0.2",
     "esbuild": "^0.28.2",
     "react": "^19.3.0",
@@ -95,13 +93,12 @@
   },
   "dependencies": {
     "dayjs": "^1.11.23",
-    "execa": "^10.2.0",
     "prompts": "^2.4.2",
     "proper-lockfile": "^4.1.2",
     "which": "^7.0.0",
     "write-file-atomic": "^8.0.0",
-    "@dsh-workbench/adapters-default": "1.1.14-beta.2",
-    "@dsh-workbench/shared": "1.1.14-beta.2"
+    "@dsh-workbench/adapters-default": "1.1.14",
+    "@dsh-workbench/shared": "1.1.14"
   },
   "license": "MIT",
   "repository": {

package/scripts/seed-profile.sh

@@ -2,7 +2,7 @@
 #
 # 一次性引导：从 shipped 的 web 模板创建 workbench profile，
 # 继承 web 的 **bundle 清单**（这台机器上装了哪些 bundle），
-# 补上可写根那一行；新 profile 直接跟 web 共用数据根，旧 profile 保持原状，等用户跑 migrate。
+# 清掉旧版留下的可写根那一行（现在由产品代码声明）；新 profile 直接跟 web 共用数据根，旧 profile 保持原状，等用户跑 migrate。
 #
 # **设置不在这里继承**（这里曾经把 web 的 cordis.patch.yml 快照一份过来）：
 # 工作台自己的 patch 是唯一真相，想同步 web 的哪几行由用户走「设置 → 配置同步」。
@@ -176,7 +176,7 @@ console.log("→ profile 里那条 link: 指的是我这份装出来的副本（
 '
 fi
 
-# ── 第 3 步：数据根配置 + 可写根那一行 ─────────────────────────────────
+# ── 第 3 步：数据根配置（顺手清掉旧版塞进来的可写根那一行）─────────────
 #
 # 新 profile 跟 `dsh web` / Desktop 一样只分 profile，数据落在 `$DSH_HOME`。
 # 旧 profile 如果还有没迁的数据，这里只打印 migrate 提示，保持隔离、不动数据；
@@ -203,7 +203,7 @@ fi
 
 cat <<EOF
 
-profile '$DST_PROFILE' 的骨架好了（bundle 清单 + 可写根）。
+profile '$DST_PROFILE' 的骨架好了（bundle 清单）。
 旧实例如果还有数据没迁，启动时会提示；要切共用根并并旧数据，跑 dsh-workbench migrate。
 
 设置按创建时的勾选从 $SRC_PROFILE_NAME 继承（只同步改已有插件的行；挂新插件的行不同步）；

package/scripts/share-data-root.mjs

@@ -13,17 +13,13 @@ import {
 import { randomUUID } from 'node:crypto';
 import { homedir } from 'node:os';
 import { dirname, join, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { appendBlocks, parseBlocks, removeBlocks } from './patch-blocks.mjs';
+import { parseBlocks, removeBlocks } from './patch-blocks.mjs';
 
-const SCRIPT_DIR = dirname(fileURLToPath(import.meta.url));
-const PKG_ROOT = dirname(SCRIPT_DIR);
 const HOME = process.env.DSH_HOME?.trim() || join(homedir(), '.dsh');
 const PROFILE = process.env.WORKBENCH_PROFILE?.trim() || 'workbench';
 const PROFILE_DIR = join(HOME, 'profiles', PROFILE);
 const RUNTIME_ROOT = process.env.DSH_WORKBENCH_HOME?.trim() || join(HOME, PROFILE);
 const PATCH_PATH = join(PROFILE_DIR, 'cordis.patch.yml');
-const SANDBOX_PATCH = join(PKG_ROOT, 'profile', 'sandbox.patch.yml');
 const MARKER = join(RUNTIME_ROOT, '.data-root-shared');
 
 const DATA_ROOT_IDS = new Set(['session-persistence-jsonl', 'storage-json', 'attachment-local']);
@@ -300,14 +296,19 @@ function writeMarker() {
   );
 }
 
+const STALE_SANDBOX =
+  /workspaceRoot: !!js (?:process\.env\.DSH_WORKBENCH_HOME \?\? )?dshHomePath\(\s*['"]workbench['"]\)/;
+
 function inspectProfile() {
   const patch = readText(PATCH_PATH);
   if (patch === null) return null;
   const legacy = parseBlocks(patch).filter((block) => DATA_ROOT_IDS.has(block.id));
+  const sandbox = parseBlocks(patch).filter((block) => block.id === 'sandbox-policy' && STALE_SANDBOX.test(block.body));
   return {
     patch,
     ours: legacy.filter((block) => OWN_ROOT.test(block.body)),
     custom: legacy.filter((block) => !OWN_ROOT.test(block.body)),
+    sandbox,
   };
 }
 
@@ -328,14 +329,10 @@ function applySharedConfig(state) {
     writeAtomic(PATCH_PATH, patch);
     say(`数据根改回共用：从 ${PROFILE} 的 profile 里去掉 ${state.ours.map((block) => block.id).join(' / ')}。`);
   }
-  const hasSandbox = parseBlocks(patch).some((block) => block.id === 'sandbox-policy');
-  if (!hasSandbox) {
-    const sandbox = readText(SANDBOX_PATCH);
-    const row = sandbox === null ? undefined : parseBlocks(sandbox).find((block) => block.id === 'sandbox-policy');
-    if (row !== undefined) {
-      patch = appendBlocks(patch, row.body);
-      writeAtomic(PATCH_PATH, patch);
-    }
+  if (state.sandbox.length > 0) {
+    patch = removeBlocks(patch, (block) => block.id === 'sandbox-policy' && STALE_SANDBOX.test(block.body));
+    writeAtomic(PATCH_PATH, patch);
+    say(`可写根改由工作台自己声明：从 ${PROFILE} 的 profile 里去掉 sandbox-policy 那一行。`);
   }
   repairTarget(join(HOME, 'storages', 'workspace.json'));
   return true;

package/skills/workbench-module-diy/BUILD.md

@@ -107,3 +107,41 @@ export const apply = plugin.apply;
 
 `idle` 是独立态（无工作区或 `enabled: false`），不画成空态。
 卡片在任意输入下不得抛异常或出现 `undefined` / `NaN`（`check --only cards`）。
+
+## 5 起子进程：走执行缝门面
+
+模块要在宿主侧跑命令（构建、git、打包……）时，用外壳放进 `mount(deps)` 的执行缝门面 `deps.seam`。
+`ctx.get('shell')` / `ctx.get('workbenchShell')` / `ctx.get('seam')`、`runShell` / `shellOf`、裸
+`child_process` 都不给模块用，`check --only seam` 会判红。
+
+先在清单里声明要哪几档写入域（只认两档）：
+
+```json
+{ "host": { "inject": [], "writes": ["unit"] } }
+```
+
+| 档 | 可写在哪 | 什么时候给 |
+|---|---|---|
+| `unit` | `<运行时根>/units/<unit>/`（模块自己的数据目录；`HOME`、npm/pnpm 缓存与日志也注入到这里） | 声明了就常开、不用审批 |
+| `workspace` | 当前会话的工作区 | 声明了才给；调用时还要带上会话对象 |
+
+不写 `writes`（或写 `[]`）= 不拿门面：`deps.seam` 是 `undefined`，代码里按可选处理。
+
+```ts
+const result = await deps.seam?.run({
+  scope: 'unit',
+  command: 'git rev-parse --short HEAD',
+  timeoutMs: 10_000,
+});
+if (result === undefined || result.exitCode !== 0) {
+  return { ok: false, text: '这条命令没跑通' };
+}
+```
+
+- `workspace` 档的 `session` 从工具运行上下文拿（`execute(raw, exec)` 的 `exec.agent?.session`）；
+  路由 / 动作这些没有会话的调用点不要请求这一档。
+- 一条命令只声明一个写入域；要写两棵树就在步骤边界拆成两次调用。
+- `retry: 'safe'` 只给幂等 / 只读命令（查询、列清单）；写命令用默认的 `'never'`。
+- 请求没声明的档在起进程前就失败（`SeamError` 的 `scope-not-declared` / `workspace-unknown`），别吞掉。
+- 这层门面是**约定 + 门禁 + 归因**，不是进程隔离：模块宿主代码与外壳同进程。真正的安全边界仍是
+  「装不装模块 + 审批」。