@exccoder/dsh-media-workbench 0.0.0-stage → 0.2.2

package/CHANGELOG.md

@@ -0,0 +1,60 @@
+# Changelog
+
+All notable changes to this project are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the project uses [Semantic Versioning](https://semver.org/).
+
+## [0.2.2] - 2026-11-09
+
+Image workflow and storage update.
+
+### Added
+
+- Reference queue for Image Studio: up to 8 images, Ctrl+V paste, multi-file drop/select, per-image up/down reorder and removal, with「图一 / 图二」labels.
+- Multi-reference image edits use ordered `image[]` fields; single references keep the existing `image` field.
+- Reuse now carries the original reference images. If the source image had references, a confirmation asks whether to replace the current queue or reuse the prompt only.
+- Custom **Library folder**: image/video files can move to another drive. Saving migrates existing files, removes them from the old folder, and rejects invalid, unwritable, nested, or name-conflicting targets.
+- Image right-click menu: copy image to clipboard, download original, copy prompt, and open the containing folder (file is selected in Explorer/Finder).
+- Settings cleanup: removed the read-only workbench data card; maintenance actions now live under「维护」.
+
+### Fixed
+
+- Workbench height now fills the full DSH panel, including the bottom of the rail and composer.
+- Settings copy now distinguishes workbench records from the actual media library folder.
+
+## [0.1.4] - 2026-11-07
+
+Fixed video downloads that returned 401 from gateways which require the same Bearer token on the media URL. The downloader now retries the provider URL with authentication and falls back to the configured content endpoint.
+
+## [0.1.3] - 2026-11-07
+
+Removed external inspiration attribution and the legacy data-directory migration from earlier prototypes. The four workbenches are unchanged.
+
+## [0.1.2] - 2026-11-07
+
+First npm publication as **@exccoder/dsh-media-workbench**. The package was renamed from the `@modern` scope before publishing; there are no functional changes since 0.1.1. The GitHub `v0.1.1` release is superseded by `v0.1.2`.
+
+## [0.1.1] - 2026-11-07
+
+Initial GitHub release under `@modern/dsh-media-workbench`; not published to npm. Superseded by 0.1.2.
+
+### Added
+
+- Package name `@modern/dsh-media-workbench`, sidebar title「摩登-媒体工作室」with the English label `Modern-MediaStudio`, following the DSH locale.
+- **Image Studio**: prompt, negative prompt, nine style presets, six aspect ratios, 1–4 images, reference-image editing through `/images/edits`, favorites, search, history, lightbox, retry/download/reuse.
+- **Writing Studio**: local document library, autosave, Markdown export, selection-aware continue/polish/expand/rewrite/outline/title actions, streaming output with stop/apply/discard.
+- **Star Map**: typed node graph (prompt, writing, image, video, preview, note), drag-to-connect ports, type/single-input/cycle validation, topological parallel execution, run-to-node, undo/redo, templates, user blueprints, JSON import/export, responsive inspector.
+- **Video Studio**: text-to-video, image-to-video through a generic async task API, and a no-video-provider **Storyboard** mode that generates four keyframes and plays them in the browser.
+- Five model tools: `modern_media_generate_image`, `modern_media_save_document`, `modern_media_generate_video`, `modern_media_run_star_map`, `modern_media_workspace_overview`.
+- Local-first storage under `$DSH_HOME/media-workbench-modern/`, masked API keys, same-origin/DSH-auth checks, whitelisted static files, and SSRF protection for remote media.
+- Light/dark theme and Chinese/English UI synced from DSH.
+- Offline verification suite (`npm test`) and a standalone dev server with mock providers (`npm run dev`).
+
+### Known limitations
+
+- Video providers vary; the current adapter expects the common create → poll → download shape. Paths and extra parameters are configurable.
+- Without a video provider only Storyboard mode is available; there is no local mp4 encoding.
+- One active image provider configuration (no multi-key rotation).
+- Narrow layouts collapse the document list, node palette and inspector.
+
+## [0.1.0]
+
+Internal prototype used during development. Not published.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ExcCoder
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -0,0 +1,108 @@
+# Modern-MediaStudio · @exccoder/dsh-media-workbench
+
+A [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (DSH) plugin that adds a **Modern-MediaStudio** to the sidebar with four connected workbenches:
+
+- **Image Studio** — prompt to image, nine style presets, six aspect ratios, reference-image editing, favorites and history.
+- **Writing Studio** — local document library, selection-aware continue / polish / expand / rewrite / outline / title, streaming output.
+- **Star Map** — a typed DAG of prompt, writing, image, video and preview nodes; cycle checks, parallel topological execution, templates and reusable blueprints.
+- **Video Studio** — text-to-video, image-to-video, and a **Storyboard** mode that turns four keyframes into a moving preview without a video provider.
+
+Writing uses DSH's currently selected model. Image and video providers are configured separately. All works, images, videos and Star Maps stay on this machine. The UI is available in Chinese and English and follows DSH's language and light/dark theme.
+
+[中文说明](README.md)
+
+## Install
+
+Requires DSH `0.2.x` (verified on `0.2.2-rc.1`).
+
+```bash
+# after the package is published
+dsh plugin --profile desktop add @exccoder/dsh-media-workbench
+
+# or from a local checkout
+dsh plugin --profile desktop add /absolute/path/to/dsh-media-workbench
+```
+
+You can also use **Plugins → Add plugin** in DSH and point it at the directory or a packed `.tgz`. Fully quit and reopen DSH after installing; the sidebar entry should then appear.
+
+## Configure
+
+Open **Modern-MediaStudio → Settings**.
+
+### Image provider
+
+Any service compatible with the OpenAI Images API works:
+
+- generate: `POST {baseUrl}/images/generations`
+- edit with a reference image: `POST {baseUrl}/images/edits` (multipart, field `image`)
+
+Presets are included for OpenAI, SiliconFlow, Zhipu BigModel and Volcano Ark. Responses in `data[0].b64_json` and `images[0].url` shapes are supported. Use **Test image** to verify the endpoint.
+
+### Video provider
+
+The adapter expects the common asynchronous shape:
+
+```text
+POST {baseUrl}{createPath}          -> task id
+GET  {baseUrl}{statusPath}          -> queued / in_progress / completed / failed
+GET  {baseUrl}{contentPath}         -> video bytes (or a URL in the status response)
+```
+
+`{id}` is replaced with the task id. Both paths are configurable. If you do not have a video provider, switch to **Storyboard**: it generates four keyframes with the image provider and plays them in the browser.
+
+### Writing
+
+No extra key. Writing uses the model selected in DSH. The plugin does not store DSH credentials.
+
+## Data and security
+
+- Data directory: `$DSH_HOME/media-workbench-modern/` (defaults to `~/.dsh/media-workbench-modern/`)
+  - `state.json` — images, videos, documents, Star Maps, blueprints
+  - `settings.json` — provider endpoints, model names and keys, mode `600`
+  - `files/` — generated media and uploaded references
+- Provider keys never reach the browser; the UI only receives `hasKey` and the last four characters.
+- Write routes validate the DSH connection service and same-origin headers. Static files are whitelisted. Generated files use a strict name pattern.
+- Remote image/video URLs are checked before download; loopback, private, link-local and metadata addresses are rejected.
+- Imported Star Maps are normalized: unknown nodes, dangling/duplicate/type-incompatible/cyclic edges are dropped.
+
+See [SECURITY.md](SECURITY.md) for the full model.
+
+## Model tools
+
+The plugin registers five tools so DSH can use the workbench from a conversation:
+
+| Tool | Purpose |
+| --- | --- |
+| `modern_media_generate_image` | Generate 1–2 images into the image history and return local paths |
+| `modern_media_save_document` | Save a manuscript into Writing Studio |
+| `modern_media_generate_video` | Generate a video or Storyboard, waiting by default |
+| `modern_media_run_star_map` | Run an existing Star Map or create one from a template and run it |
+| `modern_media_workspace_overview` | List recent images, videos, documents and Star Maps |
+
+## Development
+
+```bash
+node tools/dev-server.mjs     # standalone preview, http://127.0.0.1:7788/media-workbench-modern/
+node --test tools/verify.mjs  # offline tests: DAG, import repair, storage, key masking, prompts
+npm pack                      # build an installable .tgz
+```
+
+The preview does not start DSH and needs no keys: image/video use local mocks and writing uses a mock stream. Preview data lives in `.dev-home/`.
+
+```text
+src/           host half: routes, storage, providers, writing prompts, Star Map execution, model tools
+lib/client.js  browser half: sidebar entry + iframe panel
+web/           workbench UI as native ES modules (no build step)
+tools/         standalone preview and offline tests
+```
+
+## Known limitations
+
+- Video provider APIs differ; the generic adapter may need custom paths or extra JSON for a specific vendor.
+- Without a video provider there is no local mp4 encoding — Storyboard is the fallback.
+- One active image provider configuration (no multi-key rotation).
+- Narrow layouts collapse the document list, node palette and inspector.
+
+## License
+
+MIT. Not affiliated with DeepSeek; DSH names and marks belong to their owners.

package/README.md

@@ -1,3 +1,139 @@
-# Temporary Holding Version
+# 摩登-媒体工作室 · @exccoder/dsh-media-workbench
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+一个 DeepSeek Harness（DSH）插件。装上之后，DSH 侧栏会多一个「摩登-媒体工作室」，里面是四个连在一起的工作台：
+
+- **生图工作台**：一句话出图，风格、画幅、数量、最多 8 张参考图队列、收藏与历史。
+- **视频工作台**：文生视频、图生视频，以及不消耗视频额度的「分镜短片」。
+- **写作工作台**：作品库、长文编辑器、续写/润色/扩写/改写/大纲/起标题，流式生成。
+- **星图工作台**：把提示词、写作、图像、视频接成 DAG，逐波并行运行，可存成蓝图复用。
+
+写作走 DSH 当前默认模型；生图和视频各自配置自己的接口。作品、图片、视频、星图都留在本机，不上传云端。界面支持中文 / English，并跟随 DSH 的语言和明暗主题。
+
+GitHub：[ExcCoder/modern-dsh-media-workbench](https://github.com/ExcCoder/modern-dsh-media-workbench)
+
+## 界面
+
+| 生图工作台 | 写作工作台 |
+| --- | --- |
+| ![生图工作台](docs/screenshot-image.webp) | ![写作工作台](docs/screenshot-write.webp) |
+| **星图工作台** | **视频工作台** |
+| ![星图工作台](docs/screenshot-graph.webp) | ![视频工作台](docs/screenshot-video.webp) |
+
+> 截图里的画是本地 mock 生图生成的占位图，用来演示链路；接上真实生图服务后就是模型出的图。
+
+## 安装
+
+要求 DSH `0.2.x`（插件在 `0.2.2-rc.1` 上验证）。
+
+**方式一：插件管理。** 在 DSH 里打开「插件 → 添加插件」，选择本目录（或打包后的 tgz）。
+
+**方式二：命令行。**
+
+```bash
+# 发布到 npm 之后
+dsh plugin --profile desktop add @exccoder/dsh-media-workbench
+
+# 从本地目录安装
+dsh plugin --profile desktop add /absolute/path/to/dsh-media-workbench
+```
+
+装好后**完全退出 DSH 再打开**，侧栏出现「摩登-媒体工作室」。卸载用 `remove @exccoder/dsh-media-workbench`；你的作品在 `~/.dsh/media-workbench-modern/`，不会跟着删。
+
+> 本地目录安装会以 `link:` 方式直接引用源码；想把插件挪到别处或打包分发，用 `npm pack` 生成 tgz 再安装。
+
+## 第一次使用
+
+### 生图
+
+1. 打开「设置 → 生图服务」，选一个预设（OpenAI / 硅基流动 / 智谱 / 火山方舟），或选「自定义」。
+2. 填接口地址、模型和密钥，保存，点「试画一张」确认能通。
+3. 回生图工作台写提示词，选风格和画幅，生成。
+
+任何兼容 OpenAI Images API 的服务都能用：`POST {baseUrl}/images/generations`；上传参考图时走 `POST {baseUrl}/images/edits`（multipart，单张字段 `image`，多张按顺序用 `image[]`）。返回 `data[0].b64_json`、`images[0].url` 两种常见形状都支持。
+
+参考图支持拖入、文件多选和 **Ctrl+V 粘贴**，最多 8 张，按「图一、图二…」编号，可以上移/下移。图片右键可以复制图片到剪贴板、下载原图、复制提示词或打开所在目录；复用带参考图的记录时会询问是覆盖当前参考图，还是只复用提示词。
+
+### 视频
+
+- **文生视频 / 图生视频**：填接口地址、模型、密钥，默认按 `POST /videos` 创建、`GET /videos/{id}` 轮询、`GET /videos/{id}/content` 取文件。路径可以在设置里改，`{id}` 会替换成任务 id。
+- **分镜短片**：不需要视频服务，用生图服务画 4 张关键帧，在浏览器里按节奏交叉淡入播放，也可以逐张下载。
+
+视频任务在后台继续跑，离开这一页不会中断。
+
+### 写作
+
+写作不需要额外密钥，直接用 DSH 里选好的模型。左边是作品库，中间写，右边是写作搭档：
+
+- 选中一段文字，勾上「只处理选中文字」，点「润色」「扩写」「改写」就只改这一段。
+- 生成是流式的，可以随时停；结果可以追加、替换、插入光标、复制或丢弃。
+- 正文自动保存到本机，导出为 Markdown。
+
+### 星图
+
+- 左侧节点库点一下加节点；从节点右侧圆点拖到另一个节点的输入端口就连线。
+- 连线会检查类型（文本 / 图像 / 视频 / 作品）、单输入限制和环路，不合法会直接说明原因。
+- 「运行」按拓扑波次并行；失败的上游只阻断它的后代，其他分支继续跑。
+- 选中节点可以「运行到这里」，只跑它和它的祖先。
+- 「更多 → 保存为蓝图」把当前结构存下来（不含运行结果），之后从「更多 → 我的蓝图」整张复用。
+
+快捷键：`Ctrl/Cmd+Enter` 运行，`Delete` 删除选中的节点或连线，`Ctrl/Cmd+Z` 撤销，`F` 适应画布，滚轮缩放，拖空白平移，双击画布加提示词节点。
+
+## 给智能体的工具
+
+插件同时注册了 5 个模型工具，所以 DSH 在对话里也能直接用工作台：
+
+| 工具 | 作用 |
+| --- | --- |
+| `modern_media_generate_image` | 按提示词生成 1–2 张图，存进生图历史，返回本机路径 |
+| `modern_media_save_document` | 把稿子保存进写作工作台 |
+| `modern_media_generate_video` | 生成视频或分镜短片，默认等到完成 |
+| `modern_media_run_star_map` | 运行一张星图，或从模板新建后运行 |
+| `modern_media_workspace_overview` | 看最近的作品、文档和星图，方便接着做 |
+
+## 数据与安全
+
+- 数据目录：`$DSH_HOME/media-workbench-modern/`（默认 `~/.dsh/media-workbench-modern/`）。图片和视频的文件主目录可以在「设置 → 作品文件目录」换到其他盘，保存时会迁移已有文件并删除旧文件；作品记录和设置仍留在默认数据目录。
+  - `state.json`：图片/视频记录、写作文档、星图、蓝图
+  - `settings.json`：接口地址、模型、密钥，权限 `600`
+  - `files/`：生成的图片、视频和上传的参考图
+- 密钥只存在本机，返回浏览器时只给「有没有密钥」和尾四位。
+- 所有写接口校验同源与 DSH 登录凭据；静态文件只服务 `web/` 白名单；文件下载只接受 `files/` 下的安全文件名。
+- 下载远端图片/视频前会拒绝本机、内网和云元数据地址，避免 SSRF。
+- 模型输出、导入的星图都按固定字段和数量上限收敛；星图导入会丢弃悬空、重复、类型不符和成环的连线。
+
+## 开发
+
+```bash
+node tools/dev-server.mjs     # 本地预览：http://127.0.0.1:7788/media-workbench-modern/
+node --test tools/verify.mjs  # 离线验证：DAG、导入修复、存储、密钥脱敏、提示词
+npm pack                      # 打出可安装的 tgz
+```
+
+本地预览不启动 DSH，也不需要密钥：生图和视频走内置 mock，写作走本地假流。预览数据在 `.dev-home/`，删掉即可重来。
+
+```
+src/          host 半片：HTTP 路由、本机存储、生图/视频/写作/星图执行、模型工具
+lib/client.js 浏览器半片：侧栏入口 + 主区域 iframe
+web/          工作台界面（原生 ES modules，无构建步骤）
+tools/        本地预览和离线验证脚本
+```
+
+## 已知限制
+
+- 视频接口各家差异较大。当前按「异步任务 + 轮询」的通用形状实现，特殊服务商需要在设置里改路径或参数；不兼容时会给出明确错误，不会静默降级。
+- 没有视频服务时，只有「分镜短片」模式可用（4 张关键帧），不会在本地合成 mp4。
+- 生图密钥只支持单个当前配置，不做多账号轮换。
+- 移动端窄屏会收起作品库、星图节点库和检查器；它们的主要操作仍可在画布或设置里完成。
+
+## 开源与发布
+
+- 许可证：MIT，见 [LICENSE](LICENSE)。
+- 变更记录：[CHANGELOG.md](CHANGELOG.md)。
+- 安全问题：[SECURITY.md](SECURITY.md)。
+- 参与开发：[CONTRIBUTING.md](CONTRIBUTING.md)。
+- 发布到 npm / GitHub 的步骤：[PUBLISHING.md](PUBLISHING.md)。
+- npm 包名 `@exccoder/dsh-media-workbench` 使用 npm 账号 `exccoder` 的用户 scope，发布不需要组织权限；改用其他 scope 时需要同步四处包名，见 [PUBLISHING.md](PUBLISHING.md)。
+
+## 许可
+
+MIT。与 DeepSeek 官方无关；DSH 的名称和标识归其所有者。

package/SECURITY.md

@@ -0,0 +1,29 @@
+# Security Policy
+
+## Supported versions
+
+| Version | Supported |
+| --- | --- |
+| 0.1.x | Yes |
+
+## Reporting a vulnerability
+
+Please **do not** open a public issue for a vulnerability. Use the repository's **Security → Report a vulnerability** (GitHub Security Advisories) so the report stays private until a fix is ready.
+
+Include the version, a minimal reproduction, the affected endpoint or file, and whether an API key or local file could be exposed. We aim to acknowledge reports within a few days.
+
+## Security model
+
+- API keys for image/video providers are stored only in `$DSH_HOME/media-workbench-modern/settings.json` with mode `600`. They are never returned to the browser; the UI receives only `hasKey` and the last four characters.
+- Writing uses the DSH-selected model. The plugin does not store DSH credentials.
+- Every write request checks the DSH connection service and same-origin `Origin`/`Sec-Fetch-Site` headers.
+- Static files are served from a whitelist under `web/`; generated files are served only from `files/` with a strict file-name pattern.
+- Remote image/video URLs are checked before download and private, loopback, link-local and cloud-metadata addresses are rejected.
+- Imported Star Maps are normalized: unknown node types, dangling/duplicate/type-incompatible/cyclic edges, and oversized collections are dropped.
+- The plugin has no telemetry and makes no network request except to the provider endpoints and media URLs the user configured.
+
+## User responsibilities
+
+- Treat provider API keys as secrets; do not paste them into issue reports, screenshots or prompts.
+- Review a Star Map before running it if it was imported from an untrusted source.
+- Provider-side retention, pricing and content policies are outside this plugin's control.

package/cordis.patch.yml

@@ -0,0 +1,4 @@
+# @exccoder/dsh-media-workbench bundle patch：host 半片 + 浏览器半片
+- insert:
+    - id: media-workbench-modern
+      name: '@exccoder/dsh-media-workbench'

package/lib/client.js

@@ -0,0 +1,138 @@
+// @exccoder/dsh-media-workbench · 浏览器半片
+// 在侧栏加一个「摩登-媒体工作室」入口，主区域是插件自己的页面（同源 iframe）。
+// 主题和语言从 DSH 服务同步，页面内不再重复判断。
+window.__ModuleLoader__.load({
+  id: '@exccoder/dsh-media-workbench',
+  factory: (require) => {
+    const module = { exports: {} }
+    const exports = module.exports
+    const React = require('react')
+    const h = React.createElement
+    const PANEL = 'media-workbench-modern'
+    const SRC = '/media-workbench-modern/'
+
+    const LABEL = { zh: '摩登-媒体工作室', en: 'Modern-MediaStudio' }
+    const TITLE = { zh: '摩登-媒体工作室：生图、写作、星图与视频', en: 'Modern-MediaStudio: image, writing, star map and video' }
+
+    let lang = /^en\b/i.test(navigator.language) ? 'en' : 'zh'
+    let scheme = window.matchMedia && window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light'
+    const frames = new Set()
+
+    function post(frame, message) {
+      try {
+        if (frame && frame.contentWindow) frame.contentWindow.postMessage(message, location.origin)
+      } catch { /* iframe 还没加载好 */ }
+    }
+
+    function pushTheme(frame) {
+      post(frame, { type: 'media-workbench-modern:theme', scheme })
+    }
+
+    function pushLocale(frame) {
+      post(frame, { type: 'media-workbench-modern:locale', lang })
+    }
+
+    function StudioIcon({ size }) {
+      const s = size || 18
+      return h(
+        'svg',
+        { width: s, height: s, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 1.6, strokeLinecap: 'round', strokeLinejoin: 'round', 'aria-hidden': 'true' },
+        h('path', { d: 'M12 3.2 13.7 8.3 18.8 10 13.7 11.7 12 16.8 10.3 11.7 5.2 10 10.3 8.3z' }),
+        h('path', { d: 'M18.4 15.2 19.2 17.6 21.6 18.4 19.2 19.2 18.4 21.6 17.6 19.2 15.2 18.4 17.6 17.6z' }),
+        h('path', { d: 'M5.6 15.6 6.2 17.2 7.8 17.8 6.2 18.4 5.6 20 5 18.4 3.4 17.8 5 17.2z' }),
+      )
+    }
+
+    function StudioPanel() {
+      const ref = React.useRef(null)
+      const [src] = React.useState(() => `${SRC}?lang=${lang}&theme=${scheme}`)
+      React.useEffect(() => {
+        const host = ref.current
+        if (!host) return
+        const frame = document.createElement('iframe')
+        frame.src = src
+        frame.title = TITLE[lang]
+        frame.allow = 'clipboard-write; fullscreen'
+        frame.style.border = '0'
+        frame.style.display = 'block'
+        frame.style.background = 'transparent'
+        frame.style.position = 'fixed'
+        frame.style.zIndex = '1'
+        frame.addEventListener('load', () => {
+          pushTheme(frame)
+          pushLocale(frame)
+        })
+        document.body.appendChild(frame)
+        frames.add(frame)
+        const fit = () => {
+          const box = host.getBoundingClientRect()
+          if (box.width < 200 || box.height < 80) {
+            frame.style.display = 'none'
+            return
+          }
+          frame.style.display = 'block'
+          frame.style.top = `${box.top}px`
+          frame.style.left = `${box.left}px`
+          frame.style.width = `${box.width}px`
+          frame.style.height = `${Math.max(200, window.innerHeight - box.top)}px`
+        }
+        requestAnimationFrame(fit)
+        const timer = setTimeout(fit, 80)
+        const observer = new ResizeObserver(fit)
+        observer.observe(host)
+        window.addEventListener('resize', fit)
+        return () => {
+          clearTimeout(timer)
+          observer.disconnect()
+          window.removeEventListener('resize', fit)
+          frames.delete(frame)
+          frame.remove()
+        }
+      }, [])
+      return h('div', { ref, style: { width: '100%', height: '100%', minHeight: '100%' } })
+    }
+
+    function apply(ctx) {
+      // 主题跟随：拿到快照后同步给 iframe，切换时再推一次
+      try {
+        ctx.inject(['theme'], c => {
+          const push = snapshot => {
+            const next = snapshot?.active?.colorScheme
+            if (next === 'dark' || next === 'light') scheme = next
+            frames.forEach(pushTheme)
+          }
+          push(c.theme.getTheme())
+          c.on('theme/change', push)
+        })
+      } catch { /* 旧版本没有 theme 服务 */ }
+
+      // 语言跟随
+      try {
+        ctx.inject(['locale'], c => {
+          const push = snapshot => {
+            const active = snapshot?.active
+            const value = typeof active === 'string' ? active : active?.lang ?? active?.id
+            if (typeof value === 'string') lang = value.toLowerCase().startsWith('en') ? 'en' : 'zh'
+            frames.forEach(pushLocale)
+          }
+          push(c.locale.getSnapshot())
+          c.on('locale/change', push)
+        })
+      } catch { /* 旧版本没有 locale 服务 */ }
+
+      ctx.slots.inject('sidebar.panellist', () => ctx.slots.register({
+        name: 'sidebar.panellist',
+        id: PANEL,
+        order: 4,
+        label: () => LABEL[lang],
+      }, StudioIcon))
+
+      ctx.slots.inject('main', () => ctx.slots.register({ name: 'main', key: PANEL }, StudioPanel))
+    }
+
+    exports.isPlugin = true
+    exports.inject = ['slots']
+    exports.apply = apply
+    return module.exports
+  },
+})

package/package.json

@@ -1,6 +1,81 @@
 {
   "name": "@exccoder/dsh-media-workbench",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.2",
+  "description": "DeepSeek Harness 插件「摩登-媒体工作室」：生图、写作、星图、视频四个工作台，带本机作品库与星图 DAG 编排。",
+  "type": "module",
+  "main": "src/index.js",
+  "exports": {
+    ".": "./src/index.js",
+    "./client": "./lib/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "src",
+    "lib",
+    "web",
+    "docs",
+    "cordis.patch.yml",
+    "README.md",
+    "README.en.md",
+    "CHANGELOG.md",
+    "SECURITY.md",
+    "LICENSE"
+  ],
+  "icon": "./web/favicon.svg",
+  "publishConfig": {
+    "access": "public"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": []
+    }
+  },
+  "engines": {
+    "node": ">=20",
+    "dsh": ">=0.2.1-rc.5 <0.3.0"
+  },
+  "keywords": [
+    "dsh",
+    "deepseek-harness",
+    "dsh-plugin",
+    "creative-studio",
+    "modern-media",
+    "media-studio",
+    "image-generation",
+    "writing",
+    "video",
+    "storyboard",
+    "workflow",
+    "dag",
+    "constellation"
+  ],
+  "license": "MIT",
+  "author": "ExcCoder",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ExcCoder/modern-dsh-media-workbench.git"
+  },
+  "homepage": "https://github.com/ExcCoder/modern-dsh-media-workbench#readme",
+  "bugs": {
+    "url": "https://github.com/ExcCoder/modern-dsh-media-workbench/issues"
+  },
+  "scripts": {
+    "dev": "node tools/dev-server.mjs",
+    "verify": "node --test tools/verify.mjs",
+    "test": "node --test tools/verify.mjs",
+    "pack": "npm pack"
+  },
+  "peerDependencies": {
+    "react": "^18.2.0 || ^19.0.0"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
+  }
+}