@dsh-workbench/shared 1.1.14-beta.2 → 1.1.14

package/README.md

@@ -47,7 +47,7 @@ CSS 处理。
 | `src/config/` | 常量与存储键 |
 | `src/i18n/` | zh / en 字典、合并与设置 |
 | `src/lib/` | 纯函数：文本、忙碌态、表单问题、看板事实 |
-| `src/host/` | 宿主侧内核与领域：http、facts、面板状态、workspace、单元声明 |
+| `src/host/` | 宿主侧内核与领域：http、facts、面板状态、workspace、单元声明、执行缝、文件写（`fs-write`：原子写 / JSON / 权限）、受控 env（`env-policy`：product / unit / bootstrap / promptless） |
 | `src/testing/` | 测试假件与声明读取 |
 
 `src/index.ts` 与 `src/host.ts` 是**生成的 barrel**：新增文件后跑 `pnpm run barrels`，别手抄。

package/dist/api/dsh.d.ts

@@ -140,6 +140,12 @@ export interface DshShellExecution {
             text: string;
             truncated: boolean;
         };
+        sandbox?: {
+            mode?: string;
+            denied?: boolean;
+            enforcement?: string;
+            runnerFailed?: boolean;
+        } | undefined;
     }>;
 }
 /**
@@ -155,6 +161,10 @@ export interface DshShell {
         stdoutMaxBytes?: number;
         signal?: AbortSignal;
         env?: Readonly<Record<string, string>>;
+        sandboxPolicy?: {
+            mode: 'read-only' | 'workspace-write' | 'danger-full-access';
+            workspaceRoot: string;
+        };
     }): unknown;
     execute(spec: unknown): Promise<DshShellExecution>;
 }
@@ -238,8 +248,10 @@ export interface DshApprovalService {
 export interface DshSandboxPolicy {
     resolve?(request?: {
         readonly session?: unknown;
+        readonly mode?: string;
     }): {
         readonly mode?: string;
+        readonly workspaceRoot?: string;
     } | undefined;
 }
 /**

package/dist/components/SelectFieldWheel.d.ts

@@ -0,0 +1,9 @@
+import type { RefObject } from 'react';
+/**
+ * 菜单开着时，滚轮落在「头条」（搜索框 / 触发钮）上也滚列表：点开菜单后指针还停在原来那个点上，
+ * 第一下滚动不该没有反应。列表自己那一格照旧由 dsh 的 `Menu` 滚，这里只补头条这段死区；
+ * 列表短到不用滚时不接管，滚轮该给谁还给谁。
+ * @param open - 菜单是否开着；关着时不接管滚轮。
+ * @param head - 头条那个节点的 ref：`search` 那档是搜索框，窄栏（`iconOnly`）那档是触发钮。
+ */
+export declare function useHeadWheel(open: boolean, head: RefObject<HTMLElement | null>): void;

package/dist/components/SelectFieldWheel.js

@@ -0,0 +1,35 @@
+import { useEffect } from '../lib/react.js';
+const MENU_CARD = '[role="menu"].wb-selectMenu';
+const LINE_HEIGHT_PX = 16;
+function menuViewport() {
+    const cards = document.querySelectorAll(MENU_CARD);
+    const card = cards[cards.length - 1];
+    const viewport = card?.querySelector('[role="presentation"]');
+    return viewport instanceof HTMLElement ? viewport : null;
+}
+/**
+ * 菜单开着时，滚轮落在「头条」（搜索框 / 触发钮）上也滚列表：点开菜单后指针还停在原来那个点上，
+ * 第一下滚动不该没有反应。列表自己那一格照旧由 dsh 的 `Menu` 滚，这里只补头条这段死区；
+ * 列表短到不用滚时不接管，滚轮该给谁还给谁。
+ * @param open - 菜单是否开着；关着时不接管滚轮。
+ * @param head - 头条那个节点的 ref：`search` 那档是搜索框，窄栏（`iconOnly`）那档是触发钮。
+ */
+export function useHeadWheel(open, head) {
+    useEffect(() => {
+        const node = head.current;
+        if (!open || node === null)
+            return undefined;
+        const onWheel = (event) => {
+            const viewport = menuViewport();
+            if (viewport === null || viewport.scrollHeight <= viewport.clientHeight)
+                return;
+            const step = event.deltaMode === WheelEvent.DOM_DELTA_LINE ? event.deltaY * LINE_HEIGHT_PX : event.deltaY;
+            viewport.scrollTop += step;
+            event.preventDefault();
+        };
+        node.addEventListener('wheel', onWheel, { passive: false });
+        return () => {
+            node.removeEventListener('wheel', onWheel);
+        };
+    }, [open, head]);
+}

package/dist/contract/unit-declaration.js

@@ -35,7 +35,8 @@ const CARD_KEYS = ['order'];
 const TITLE_KEYS = ['zh', 'en'];
 const TOOL_KEYS = ['name', 'writes', 'key'];
 const TOOL_KEY_SHAPE = /^[a-z][a-zA-Z0-9]*$/;
-const HOST_KEYS = ['inject', 'optional'];
+const HOST_KEYS = ['inject', 'optional', 'writes'];
+const UNIT_WRITE_SCOPES = ['unit', 'workspace'];
 function text(value) {
     return typeof value === 'string' ? value.trim() : '';
 }
@@ -203,6 +204,18 @@ export function declarationProblemsOf(subject, raw) {
             if (host.optional !== undefined) {
                 problems.push(...stringArrayProblems(`${subject}: dsh.workbench.host.optional`, host.optional));
             }
+            if (host.writes !== undefined) {
+                const shape = stringArrayProblems(`${subject}: dsh.workbench.host.writes`, host.writes);
+                problems.push(...shape);
+                if (shape.length === 0) {
+                    const outsideScopes = host.writes.filter((scope) => !UNIT_WRITE_SCOPES.includes(scope));
+                    if (outsideScopes.length > 0) {
+                        problems.push(`${subject}: dsh.workbench.host.writes 里有不认的写入域 ${listOf(outsideScopes)} —— ` +
+                            `只认 "unit"（模块自己的数据目录）与 "workspace"（当前会话工作区）两档；` +
+                            `模块拿不到产品域与任意路径，别写别的名字（缺省 [] = 不给执行缝门面）`);
+                    }
+                }
+            }
         }
     }
     return problems;
@@ -238,6 +251,7 @@ export function readDeclaration(subject, raw) {
             host: {
                 inject: [...(declaration.host.inject ?? [])],
                 ...(declaration.host.optional === undefined ? {} : { optional: [...declaration.host.optional] }),
+                writes: [...(declaration.host.writes ?? [])],
             },
             ...(declaration.needs === undefined ? {} : { needs: declaration.needs }),
         },

package/dist/contract/unit.d.ts

@@ -37,10 +37,13 @@ export interface UnitTool {
 }
 /**
  * 模块要外壳的哪些服务：inject 缺一个就挂不上，optional 缺了照挂。
+ * writes 声明模块要哪几档执行缝写入域：unit 是模块自己的数据目录，workspace 是当前会话工作区；
+ * 缺省 [] = 不给执行缝门面（deps.seam 是 undefined）。
  */
 export interface UnitHostNeeds {
     readonly inject: readonly string[];
     readonly optional?: readonly string[];
+    readonly writes?: readonly ('unit' | 'workspace')[];
 }
 /**
  * 已装插件与源上最新版那一对，用来判该不该提示升级；latest 缺省表示还没查到。

package/dist/host/__scratch-guard.d.ts

@@ -0,0 +1 @@
+export declare const probe: string | undefined;

package/dist/host/__scratch-guard.js

@@ -0,0 +1 @@
+export const probe = process.env.HOME;

package/dist/host/adapter-set.js

@@ -50,7 +50,6 @@ const FULL_METHODS = [
     ['runtime', 'runners'],
     ['runtime', 'health'],
     ['runtime', 'seed'],
-    ['runtime', 'warnUnwritableRoot'],
     ['plugins', 'declarationLookup'],
     ['plugins', 'createUnits'],
     ['actions', 'configSyncHandler'],

package/dist/host/changelog.js

@@ -1,3 +1,4 @@
+import { now as clockNow } from './time.js';
 import dayjs from 'dayjs';
 export const CHANGELOG_FILE = 'CHANGELOG.md';
 export const CHANGELOG_KINDS = ['added', 'changed', 'fixed', 'removed', 'security', 'deprecated'];
@@ -17,7 +18,7 @@ export function changelogVersion(value) {
         .trim()
         .replace(/^v/, '');
 }
-export function changelogDate(now = new Date()) {
+export function changelogDate(now = new Date(clockNow())) {
     return dayjs(now).format('YYYY-MM-DD');
 }
 export function normalizeChangelogText(text) {

package/dist/host/channel-plugin.d.ts

@@ -0,0 +1,15 @@
+export declare const CHANNEL_PLUGIN_NAME = "opencli-plugin-workbench";
+export declare const CHANNEL_PLUGIN_SITE = "workbench";
+export interface ChannelPluginPlan {
+    readonly dest: string;
+    readonly version: string;
+    readonly commands: readonly string[];
+    readonly line: string;
+}
+export declare function channelVersionOf(dir: string): string | undefined;
+export declare function channelPluginPlan(options: {
+    readonly channelDir: string;
+    readonly command?: string;
+}): ChannelPluginPlan | undefined;
+export declare function channelInstalledVersion(): string | undefined;
+export declare function channelSiteInstalled(): boolean;

package/dist/host/channel-plugin.js

@@ -0,0 +1,42 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { isolatedHome, toolchainOpencliDir, vendorPeerLink, vendorPluginsDir } from './paths.js';
+import { quoteShellArg } from './shell-text.js';
+export const CHANNEL_PLUGIN_NAME = 'opencli-plugin-workbench';
+export const CHANNEL_PLUGIN_SITE = 'workbench';
+function textOf(value) {
+    return typeof value === 'string' ? value.trim() : '';
+}
+export function channelVersionOf(dir) {
+    try {
+        const parsed = JSON.parse(readFileSync(join(dir, 'opencli-plugin.json'), 'utf8'));
+        if (typeof parsed !== 'object' || parsed === null)
+            return undefined;
+        const version = textOf(parsed['version']);
+        return version === '' ? undefined : version;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function channelPluginPlan(options) {
+    const version = channelVersionOf(options.channelDir);
+    if (version === undefined)
+        return undefined;
+    const command = options.command ?? 'opencli';
+    const dest = join(vendorPluginsDir(), CHANNEL_PLUGIN_NAME);
+    const peer = vendorPeerLink();
+    const commands = [
+        `rm -rf ${quoteShellArg(dest)} && mkdir -p ${quoteShellArg(dest)} && cp -R ${quoteShellArg(options.channelDir)}/. ${quoteShellArg(dest)}/`,
+        `rm -rf ${quoteShellArg(peer.dir)} && mkdir -p ${quoteShellArg(peer.parent)} && ln -s ${quoteShellArg(toolchainOpencliDir())} ${quoteShellArg(peer.dir)}`,
+        `(${quoteShellArg(command)} plugin uninstall ${quoteShellArg(CHANNEL_PLUGIN_SITE)} || true)`,
+        `${quoteShellArg(command)} plugin install ${quoteShellArg(dest)}`,
+    ];
+    return { dest, version, commands, line: commands.join(' && ') };
+}
+export function channelInstalledVersion() {
+    return channelVersionOf(join(vendorPluginsDir(), CHANNEL_PLUGIN_NAME));
+}
+export function channelSiteInstalled() {
+    return existsSync(join(isolatedHome(), '.opencli', 'plugins', CHANNEL_PLUGIN_SITE));
+}

package/dist/host/command-name.d.ts

@@ -0,0 +1 @@
+export declare function commandNamesMatch(declared: string, resolved: string): boolean;

package/dist/host/command-name.js

@@ -0,0 +1,14 @@
+function baseName(value) {
+    const parts = value.trim().split(/[\\/]/);
+    return parts[parts.length - 1] ?? '';
+}
+function isOpencli(name) {
+    return name === 'opencli' || name === 'opencli.cmd' || name === 'opencli.exe';
+}
+export function commandNamesMatch(declared, resolved) {
+    const left = baseName(declared);
+    const right = baseName(resolved);
+    if (left === '' || right === '')
+        return false;
+    return left === right || (isOpencli(left) && isOpencli(right));
+}

package/dist/host/config-sync.d.ts

@@ -1,13 +1,6 @@
 import type { PostResource, RouteHandler } from './http.js';
 import type { ConfigSyncRow, ConfigSyncSnapshot } from '../contract/protocol/config-sync.js';
-export interface PatchBlock {
-    readonly key: string;
-    readonly id: string;
-    readonly insert: boolean;
-    readonly body: string;
-    readonly names: readonly string[];
-}
-export declare function patchBlocks(text: string): PatchBlock[];
+import { type PatchBlock } from './patch-blocks.js';
 export declare function normalizeBlock(body: string): string;
 export declare function syncRows(source: readonly PatchBlock[], own: readonly PatchBlock[], missing: (block: PatchBlock) => readonly string[]): ConfigSyncRow[];
 export declare function mergeBlocks(ownText: string, incoming: readonly PatchBlock[], overwrite: ReadonlySet<string>): {
@@ -27,7 +20,6 @@ export declare function readPatchBlocks(path: string): {
     ok: false;
     reason: string;
 };
-export declare function writePatchFile(path: string, text: string): void;
 export interface ConfigSyncDeps {
     readonly home: string;
     readonly self: string;

package/dist/host/config-sync.js

@@ -1,10 +1,8 @@
-import { existsSync, readFileSync, readdirSync, renameSync, statSync, unlinkSync, writeFileSync } from 'node:fs';
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { CONFIG_SYNC_RESOURCE } from '../contract/protocol/config-sync.js';
-const ID_LINE = /^- id:[ \t]*"?([^"\s#]+)/;
-const INSERT_LINE = /^- insert:[ \t]*$/;
-const NESTED_ID = /^[ \t]+-[ \t]*id:[ \t]*"?([^"\s#]+)/;
-const NAME_LINE = /^[ \t]*-?[ \t]*name:[ \t]*['"]?([^'"\s#]+)/;
+import { writePatchFile } from './patch.js';
+import { patchBlocks, spannedBlocks } from './patch-blocks.js';
 const COMMENT_LINE = /^[ \t]*#/;
 const ISOLATION_IDS = new Set([
     'session-persistence-jsonl',
@@ -12,54 +10,6 @@ const ISOLATION_IDS = new Set([
     'attachment-local',
     'sandbox-policy',
 ]);
-function trimmedTail(lines) {
-    let end = lines.length;
-    while (end > 0 && (lines[end - 1] ?? '').trim() === '')
-        end -= 1;
-    return lines.slice(0, end);
-}
-function matched(text, pattern) {
-    const found = pattern.exec(text);
-    return found === null ? undefined : found[1];
-}
-function blockOf(body, index) {
-    const lines = body.split('\n');
-    const first = lines[0] ?? '';
-    const id = matched(first, ID_LINE);
-    const nested = lines.flatMap((line) => {
-        const one = matched(line, NESTED_ID);
-        return one === undefined ? [] : [one];
-    });
-    const insert = id === undefined && INSERT_LINE.test(first);
-    const label = id ?? nested.join(', ');
-    const key = id !== undefined ? `id:${id}` : insert ? `insert:${nested.join(', ')}` : `block:${String(index)}`;
-    const names = lines.flatMap((line) => {
-        const one = matched(line, NAME_LINE);
-        return one === undefined ? [] : [one];
-    });
-    return { key, id: label === '' ? key : label, insert, body, names };
-}
-function spannedBlocks(text) {
-    const lines = text.split('\n');
-    const starts = [];
-    lines.forEach((line, index) => {
-        if (/^- /.test(line) || line === '-')
-            starts.push(index);
-    });
-    const blocks = [];
-    for (let i = 0; i < starts.length; i += 1) {
-        const from = starts[i] ?? 0;
-        const to = i + 1 < starts.length ? (starts[i + 1] ?? lines.length) : lines.length;
-        const body = trimmedTail(lines.slice(from, to)).join('\n');
-        if (body.trim() === '')
-            continue;
-        blocks.push({ ...blockOf(body, blocks.length), from, to });
-    }
-    return blocks;
-}
-export function patchBlocks(text) {
-    return spannedBlocks(text).map(({ from: _from, to: _to, ...block }) => block);
-}
 export function normalizeBlock(body) {
     return body
         .split('\n')
@@ -150,31 +100,6 @@ export function readPatchBlocks(path) {
         return { ok: false, reason: error instanceof Error ? error.message : String(error) };
     }
 }
-function patchMode(path) {
-    try {
-        return statSync(path).mode & 0o777;
-    }
-    catch {
-        return 0o644;
-    }
-}
-export function writePatchFile(path, text) {
-    const mode = patchMode(path);
-    const tmp = `${path}.wb-sync-${String(process.pid)}`;
-    writeFileSync(tmp, text, { mode });
-    try {
-        renameSync(tmp, path);
-    }
-    catch (error) {
-        try {
-            unlinkSync(tmp);
-        }
-        catch {
-            throw error;
-        }
-        throw error;
-    }
-}
 export function configSyncHandler(deps) {
     return (search) => ({ ok: true, ...configSyncSnapshot(deps, search.get('source') ?? undefined) });
 }

package/dist/host/env-policy.d.ts

@@ -0,0 +1,75 @@
+import type { ShellKind } from './shell-text.js';
+export type EnvLayer = Readonly<Record<string, string | undefined>>;
+/**
+ * 把父进程环境里的字符串值拷成一层 env（丢掉 undefined）。
+ * @param parent 父环境（通常是 `process.env`）。
+ * @returns 可继续叠加的 env 层。
+ */
+export declare function inheritedEnvOf(parent: NodeJS.ProcessEnv | EnvLayer): Record<string, string>;
+/**
+ * 在一层 env 上叠另一层；`undefined` 表示删掉这个键。
+ * @param base 底层 env。
+ * @param layer 上层 env；值为 undefined 的键被删除。
+ * @returns 叠加后的新对象。
+ */
+export declare function overlayEnvOf(base: EnvLayer, layer: EnvLayer | undefined): Record<string, string | undefined>;
+/**
+ * 把 env 层收成只含字符串的 env（用于执行缝 `env` 参数）。
+ * @param layer env 层。
+ * @returns 只含字符串键值的对象。
+ */
+export declare function envTextOf(layer: EnvLayer): Record<string, string>;
+/**
+ * 在 PATH 前面插一组目录（去重、空项丢掉）。
+ * @param parentPath 原来的 PATH。
+ * @param bins 要前插的目录，按顺序。
+ * @param separator 平台分隔符，默认 `path.delimiter`。
+ * @returns 新的 PATH。
+ */
+export declare function pathWithBinsOf(parentPath: string | undefined, bins: readonly string[], separator?: string): string;
+export interface ProductEnvInput {
+    readonly runtimeRoot: string;
+    readonly home?: string | undefined;
+    readonly realHome?: string | undefined;
+}
+/**
+ * 产品域（运行时根）的受控 env：隔离 HOME、npm/pnpm 缓存都钉在运行时根，真 npmrc/gitconfig 只读指过去。
+ * @param input 运行时根、可选的 HOME 与真实用户目录。
+ * @returns 产品域 env。
+ */
+export declare function productEnvOf(input: ProductEnvInput): Record<string, string>;
+export interface UnitEnvInput extends ProductEnvInput {
+    readonly unitRoot: string;
+}
+/**
+ * 模块单元的受控 env：在产品域基础上把 HOME 与 npm/pnpm 目录全钉到单元数据目录。
+ * @param input 运行时根、单元数据目录、可选的 TRUE 用户目录。
+ * @returns 单元 env。
+ */
+export declare function unitEnvOf(input: UnitEnvInput): Record<string, string>;
+export interface BootstrapEnvInput {
+    readonly root: string;
+    readonly realHome: string;
+    readonly shellKind: ShellKind;
+    readonly parent?: NodeJS.ProcessEnv | EnvLayer | undefined;
+    readonly path?: string | undefined;
+}
+/**
+ * 自举/装工具链的受控 env：继承父环境，HOME 与 npm 缓存钉到运行时根，PATH 可换成桌面自带 bin。
+ * @param input 运行时根、真实用户目录、shell 种类、父环境与可选的 PATH。
+ * @returns 自举 env。
+ */
+export declare function bootstrapEnvOf(input: BootstrapEnvInput): Record<string, string>;
+/**
+ * git 的非交互 env：关掉终端提示/askpass；Windows 上不给 askpass 指 POSIX 路径（那台机器上没有）。
+ * @param platform 宿主平台。
+ * @returns git 非交互 env。
+ */
+export declare function promptlessGitEnvOf(platform: NodeJS.Platform): Record<string, string>;
+/**
+ * 在父环境上叠加 `promptlessGitEnvOf`，得到可传给执行缝的 git env。
+ * @param parent 父环境。
+ * @param platform 宿主平台。
+ * @returns 只含字符串的 env。
+ */
+export declare function promptlessProcessEnvOf(parent: NodeJS.ProcessEnv, platform: NodeJS.Platform): Record<string, string>;

package/dist/host/env-policy.js

@@ -0,0 +1,161 @@
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { delimiter, join } from 'node:path';
+import { dshHome } from './data-root.js';
+/**
+ * 把父进程环境里的字符串值拷成一层 env（丢掉 undefined）。
+ * @param parent 父环境（通常是 `process.env`）。
+ * @returns 可继续叠加的 env 层。
+ */
+export function inheritedEnvOf(parent) {
+    const out = {};
+    for (const [key, value] of Object.entries(parent)) {
+        if (typeof value === 'string')
+            out[key] = value;
+    }
+    return out;
+}
+/**
+ * 在一层 env 上叠另一层；`undefined` 表示删掉这个键。
+ * @param base 底层 env。
+ * @param layer 上层 env；值为 undefined 的键被删除。
+ * @returns 叠加后的新对象。
+ */
+export function overlayEnvOf(base, layer) {
+    const merged = { ...base };
+    for (const [key, value] of Object.entries(layer ?? {})) {
+        if (value === undefined)
+            delete merged[key];
+        else
+            merged[key] = value;
+    }
+    return merged;
+}
+/**
+ * 把 env 层收成只含字符串的 env（用于执行缝 `env` 参数）。
+ * @param layer env 层。
+ * @returns 只含字符串键值的对象。
+ */
+export function envTextOf(layer) {
+    const out = {};
+    for (const [key, value] of Object.entries(layer)) {
+        if (value !== undefined)
+            out[key] = value;
+    }
+    return out;
+}
+/**
+ * 在 PATH 前面插一组目录（去重、空项丢掉）。
+ * @param parentPath 原来的 PATH。
+ * @param bins 要前插的目录，按顺序。
+ * @param separator 平台分隔符，默认 `path.delimiter`。
+ * @returns 新的 PATH。
+ */
+export function pathWithBinsOf(parentPath, bins, separator = delimiter) {
+    const parts = (parentPath ?? '').split(separator).filter((part) => part !== '' && !bins.includes(part));
+    return [...bins, ...parts].join(separator);
+}
+function existingPointer(realHome, name) {
+    const file = join(realHome, name);
+    return existsSync(file) ? file : undefined;
+}
+/**
+ * 产品域（运行时根）的受控 env：隔离 HOME、npm/pnpm 缓存都钉在运行时根，真 npmrc/gitconfig 只读指过去。
+ * @param input 运行时根、可选的 HOME 与真实用户目录。
+ * @returns 产品域 env。
+ */
+export function productEnvOf(input) {
+    const runtimeRoot = input.runtimeRoot;
+    const realHome = input.realHome ?? homedir();
+    const env = {
+        HOME: input.home ?? join(runtimeRoot, 'home'),
+        DSH_HOME: dshHome(),
+        DSH_WORKBENCH_HOME: runtimeRoot,
+        npm_config_cache: join(runtimeRoot, 'npm-cache'),
+        NPM_CONFIG_CACHE: join(runtimeRoot, 'npm-cache'),
+        npm_config_logs_dir: join(runtimeRoot, 'npm-logs'),
+        npm_config_store_dir: join(runtimeRoot, 'pnpm-store'),
+        npm_config_cache_dir: join(runtimeRoot, 'pnpm-cache'),
+        npm_config_state_dir: join(runtimeRoot, 'pnpm-state'),
+        npm_config_update_notifier: 'false',
+        npm_config_fund: 'false',
+        NO_UPDATE_NOTIFIER: '1',
+    };
+    const npmrc = existingPointer(realHome, '.npmrc');
+    if (npmrc !== undefined)
+        env['NPM_CONFIG_USERCONFIG'] = npmrc;
+    const gitconfig = existingPointer(realHome, '.gitconfig');
+    if (gitconfig !== undefined)
+        env['GIT_CONFIG_GLOBAL'] = gitconfig;
+    return env;
+}
+/**
+ * 模块单元的受控 env：在产品域基础上把 HOME 与 npm/pnpm 目录全钉到单元数据目录。
+ * @param input 运行时根、单元数据目录、可选的 TRUE 用户目录。
+ * @returns 单元 env。
+ */
+export function unitEnvOf(input) {
+    const unitRoot = input.unitRoot;
+    return {
+        ...productEnvOf({ ...input, home: join(unitRoot, 'home') }),
+        npm_config_cache: join(unitRoot, 'npm-cache'),
+        NPM_CONFIG_CACHE: join(unitRoot, 'npm-cache'),
+        npm_config_logs_dir: join(unitRoot, 'npm-logs'),
+        npm_config_store_dir: join(unitRoot, 'pnpm-store'),
+        npm_config_cache_dir: join(unitRoot, 'pnpm-cache'),
+        npm_config_state_dir: join(unitRoot, 'pnpm-state'),
+    };
+}
+/**
+ * 自举/装工具链的受控 env：继承父环境，HOME 与 npm 缓存钉到运行时根，PATH 可换成桌面自带 bin。
+ * @param input 运行时根、真实用户目录、shell 种类、父环境与可选的 PATH。
+ * @returns 自举 env。
+ */
+export function bootstrapEnvOf(input) {
+    const env = inheritedEnvOf(input.parent ?? process.env);
+    if (input.path !== undefined)
+        env['PATH'] = input.path;
+    const home = join(input.root, 'home');
+    env['HOME'] = home;
+    if (input.shellKind === 'pwsh')
+        env['USERPROFILE'] = home;
+    const userConfig = existingPointer(input.realHome, '.npmrc');
+    if (userConfig !== undefined)
+        env['NPM_CONFIG_USERCONFIG'] = userConfig;
+    const cache = join(input.root, 'npm-cache');
+    env['npm_config_cache'] = cache;
+    env['NPM_CONFIG_CACHE'] = cache;
+    env['NO_COLOR'] = '1';
+    env['TERM'] = 'dumb';
+    return env;
+}
+/**
+ * git 的非交互 env：关掉终端提示/askpass；Windows 上不给 askpass 指 POSIX 路径（那台机器上没有）。
+ * @param platform 宿主平台。
+ * @returns git 非交互 env。
+ */
+export function promptlessGitEnvOf(platform) {
+    const shared = {
+        GIT_TERMINAL_PROMPT: '0',
+        SSH_ASKPASS_REQUIRE: 'never',
+        GCM_INTERACTIVE: 'never',
+        GIT_SSH_COMMAND: 'ssh -o BatchMode=yes -o StrictHostKeyChecking=accept-new',
+    };
+    if (platform === 'win32')
+        return shared;
+    return { ...shared, GIT_ASKPASS: '/usr/bin/false', SSH_ASKPASS: '/usr/bin/false' };
+}
+/**
+ * 在父环境上叠加 `promptlessGitEnvOf`，得到可传给执行缝的 git env。
+ * @param parent 父环境。
+ * @param platform 宿主平台。
+ * @returns 只含字符串的 env。
+ */
+export function promptlessProcessEnvOf(parent, platform) {
+    const env = { ...inheritedEnvOf(parent), ...promptlessGitEnvOf(platform) };
+    if (platform === 'win32') {
+        delete env['GIT_ASKPASS'];
+        delete env['SSH_ASKPASS'];
+    }
+    return env;
+}

package/dist/host/extension.js

@@ -1,3 +1,4 @@
+import { now } from './time.js';
 import { WorkbenchDataError } from './data-error.js';
 function cliCodeOf(code) {
     if (code === 'auth')
@@ -18,7 +19,7 @@ export function extensionCallerOf(data, need, callerOptions = {}) {
                 ...(options.timeoutMs === undefined ? {} : { timeoutMs: options.timeoutMs }),
             });
             if (result.ok)
-                return { value: result.data, at: Date.now() };
+                return { value: result.data, at: now() };
             const code = result.error.pageCode ?? cliCodeOf(result.error.code);
             const command = [need.name, ...args].join(' ');
             const advice = code === 'cli-unclassified'

package/dist/host/flow/run.js

@@ -1,3 +1,4 @@
+import { now as clockNow } from '../time.js';
 import { evalPredicate, resolveInput, resolveValue } from './expr.js';
 class StepFailure extends Error {
     stepId;
@@ -158,7 +159,7 @@ async function runOne(options) {
 export async function runFlow(options) {
     const { flow, input, actions, signal, runId, workspace, onStep } = options;
     const sleep = options.sleep ?? defaultSleep;
-    const now = options.now ?? (() => Date.now());
+    const now = options.now ?? (() => clockNow());
     const steps = {};
     const emit = (event) => {
         try {