@lincyaw/studio 0.1.1 → 0.2.0-rc.0

package/README.md

@@ -2,7 +2,7 @@
 
 `presmium studio`: Presmium's workbench in one command. It starts [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (MIT) with Presmium's bundle, [`@lincyaw/dsh`](https://www.npmjs.com/package/@lincyaw/dsh), and the workspace service of a directory (`presmium serve`, from the `presmium` package it depends on), and prints the one address to open in the browser. Experimental (0.x): it installs one exact version of DeepSeek Harness, `0.2.1-alpha.4` (about 865 MB with its dependencies).
 
-Part of [Presmium](https://github.com/Lincyaw/presmium), which turns lectures written in MyST Markdown into web pages, slides, Jupyter notebooks and narrated lectures.
+Part of [Presmium](https://github.com/Lincyaw/presmium), which turns structured teaching documents into web pages, slides, Jupyter notebooks and narrated lectures.
 
 ## Usage
 
@@ -17,11 +17,13 @@ In a project with `pnpm add -D @lincyaw/studio`, `pnpm exec presmium studio` is
 
 Sessions use the workspace root as their working directory and can read and write files throughout it. Opening another lecture changes document context, not the session or its directory.
 
-The model is chosen in the workbench's model settings, or given by the environment: `DEEPSEEK_API_KEY`, or `PRESMIUM_MODEL_URL`, `PRESMIUM_MODEL_KEY` and `PRESMIUM_MODEL_PROVIDER` for a Messages-compatible service. DeepSeek Harness's home for the workbench (its sessions, model settings and credentials, and the log `presmium-studio.log`) is `$XDG_STATE_HOME/presmium/studio`, never your own `~/.dsh`.
+The model is chosen in the workbench's model settings, or given by the environment: `DEEPSEEK_API_KEY`, or `PRESMIUM_MODEL_URL`, `PRESMIUM_MODEL_KEY` and `PRESMIUM_MODEL_PROVIDER` for a Messages-compatible service. DeepSeek Harness's home for the workbench (its sessions, model settings and credentials, and the log) is `$XDG_STATE_HOME/presmium/studio`, never your own `~/.dsh`. Each installation (a version, or a checkout) has its own profile there, `profiles/presmium-studio-<hash>`, and its own log, `presmium-studio-<hash>.log`, so Studios of different installations can run at the same time without loading each other's code. Sessions and credentials are shared; a new installation's profile starts with the settings of the one used last.
+
+Startup prints the log path to stderr and streams workspace-service logs there while running. The file keeps timestamped output from both processes. Preview logs identify the document, renderer, request, cache/fallback choice and elapsed time; export logs identify the job and phase. A backend preview marked ready means its address is prepared; browser loading and the preview handshake may still be pending. The host's output, including its login URL, stays in the log file.
 
 ## Documentation
 
-- [Design of the workbench on DeepSeek Harness](https://github.com/Lincyaw/presmium/blob/main/docs/design-dsh.md)
+- [Design of the workbench on DeepSeek Harness](https://github.com/Lincyaw/presmium/blob/main/docs/studio.md)
 
 ## License
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lincyaw/studio",
-  "version": "0.1.1",
+  "version": "0.2.0-rc.0",
   "description": "presmium studio: Presmium's workbench on DeepSeek Harness in one command, with the workspace service of a directory (experimental)",
   "license": "Apache-2.0",
   "repository": {
@@ -38,10 +38,10 @@
   "dependencies": {
     "@deepseek-ai/dsh": "0.2.1-alpha.4",
     "jiti": "^2.7.0",
-    "@lincyaw/dsh": "0.1.0",
-    "@lincyaw/presmium": "1.0.0-rc.0"
+    "@lincyaw/presmium": "1.0.0-rc.1",
+    "@lincyaw/dsh": "0.2.0-rc.0"
   },
   "devDependencies": {
-    "@lincyaw/cli": "1.0.0-rc.0"
+    "@lincyaw/cli": "1.0.0-rc.1"
   }
 }

package/src/cli.ts

@@ -1,52 +1,52 @@
 import { existsSync, statSync } from 'node:fs'
 import { resolve } from 'node:path'
 import { parseArgs } from 'node:util'
-import { modelEnv } from './model.ts'
+import { STUDIO_MESSAGES, systemLocale } from './messages.ts'
+import { modelEnv } from './model-env.ts'
 import { startStudio } from './studio.ts'
 
-const USAGE = `Usage: presmium studio [dir] [options]
-
-The workbench of Presmium (experimental): DeepSeek Harness with Presmium's bundle, and the workspace
-service of the directory (the workspace root, or a deck's directory; default: .). It prints the one
-address to open in the browser. The model is chosen in the workbench's model settings, or given by the
-environment: DEEPSEEK_API_KEY, or PRESMIUM_MODEL_URL, PRESMIUM_MODEL_KEY and PRESMIUM_MODEL_PROVIDER for
-a Messages-compatible service. DeepSeek Harness's home (sessions, model settings and credentials, the
-log presmium-studio.log) is $XDG_STATE_HOME/presmium/studio.
-
-Options:
-  --port <n>     the workbench's port (default: 4320, or a free one when that is in use)
-  --host <addr>  listen on this address of the machine on the local network instead of 127.0.0.1, with
-                 no login: whoever reaches the port works as you
-  -h, --help     show this help`
+const t = STUDIO_MESSAGES[systemLocale()]
 
 export interface MainOptions {
   presmium?: string
 }
 
+function urlOf(option: string, value: string | undefined): string | undefined {
+  if (value === undefined) return undefined
+  try {
+    const url = new URL(value)
+    if (/^https?:$/.test(url.protocol) && !url.username && !url.password && !url.search && !url.hash) return url.href
+  } catch {}
+  throw new Error(t.badUrl(option, value))
+}
+
 function portOf(value: string | undefined): number | undefined {
   if (value === undefined) return undefined
   const n = Number(value)
-  if (!Number.isInteger(n) || n < 0 || n > 65535) throw new Error(`--port takes a port number, not "${value}"`)
+  if (!Number.isInteger(n) || n < 0 || n > 65535) throw new Error(t.badPort(value))
   return n
 }
 
 export async function main(argv: string[], options: MainOptions = {}): Promise<number> {
-  let values: { port?: string, host?: string, help?: boolean }
+  let values: { port?: string, host?: string, 'public-url'?: string, 'preview-url'?: string, 'preview-port'?: string, help?: boolean }
   let dir: string
   try {
-    const parsed = parseArgs({ args: argv, allowPositionals: true, options: { port: { type: 'string' }, host: { type: 'string' }, help: { type: 'boolean', short: 'h' } } })
+    const parsed = parseArgs({ args: argv, allowPositionals: true, options: { port: { type: 'string' }, host: { type: 'string' }, 'public-url': { type: 'string' }, 'preview-url': { type: 'string' }, 'preview-port': { type: 'string' }, help: { type: 'boolean', short: 'h' } } })
     values = parsed.values
     const [given = '.', ...extra] = parsed.positionals
-    if (extra.length > 0) throw new Error(`unexpected argument "${extra[0]}"`)
+    if (extra.length > 0) throw new Error(t.unexpectedArgument(extra[0]!))
     dir = resolve(given)
-    if (!values.help && (!existsSync(dir) || !statSync(dir).isDirectory())) throw new Error(`${dir} is not a directory`)
+    if (!values.help && (!existsSync(dir) || !statSync(dir).isDirectory())) throw new Error(t.notDirectory(dir))
     portOf(values.port)
+    urlOf('--public-url', values['public-url'])
+    urlOf('--preview-url', values['preview-url'])
+    portOf(values['preview-port'])
   } catch (error) {
-    process.stderr.write(`presmium studio: ${error instanceof Error ? error.message : String(error)}\n\n${USAGE}\n`)
+    process.stderr.write(`presmium studio: ${error instanceof Error ? error.message : String(error)}\n\n${t.usage}\n`)
     return 2
   }
   if (values.help) {
-    process.stdout.write(`${USAGE}\n`)
+    process.stdout.write(`${t.usage}\n`)
     return 0
   }
 
@@ -55,14 +55,15 @@ export async function main(argv: string[], options: MainOptions = {}): Promise<n
 
   let studio
   try {
-    studio = await startStudio({ dir, port: portOf(values.port), ...values.host ? { host: values.host } : {}, ...options.presmium ? { presmium: options.presmium } : {} })
+    studio = await startStudio({ dir, port: portOf(values.port), onServiceOutput: text => process.stderr.write(text), ...values.host ? { listenAddress: values.host } : {}, ...values['public-url'] ? { publicUrl: urlOf('--public-url', values['public-url']) } : {}, ...values['preview-url'] ? { previewUrl: urlOf('--preview-url', values['preview-url']) } : {}, ...values['preview-port'] ? { previewPort: portOf(values['preview-port']) } : {}, ...options.presmium ? { presmium: options.presmium } : {} })
   } catch (error) {
     process.stderr.write(`presmium studio: ${error instanceof Error ? error.message : String(error)}\n`)
     return 2
   }
   process.stdout.write(`studio  ${studio.url}\n`)
-  if (values.host && values.host !== '127.0.0.1' && values.host !== '::1') {
-    process.stderr.write(`presmium studio: listening on ${values.host}, on the local network, with no login: anyone who reaches port ${new URL(studio.url).port} (and the previews' port ${new URL(studio.service).port}) with the address above works in this workspace as you (edits, runs code, uses your model). Use it on a network you trust; without --host it listens on this machine only.\n`)
+  process.stderr.write(`${t.log(studio.log)}\n`)
+  if (values.host && values.host !== '127.0.0.1' && values.host !== '::1' && !values['public-url']) {
+    process.stderr.write(`${t.openOnNetwork(values.host, new URL(studio.url).port, new URL(studio.workspaceServerUrl).port)}\n`)
   }
 
   const signals = ['SIGINT', 'SIGTERM', 'SIGHUP'] as const
@@ -73,6 +74,6 @@ export async function main(argv: string[], options: MainOptions = {}): Promise<n
   for (const signal of signals) process.off(signal, stop)
   await studio.close()
   if (ended === undefined) return 0
-  process.stderr.write(`presmium studio: ${ended}; the log is ${studio.log}\n`)
+  process.stderr.write(`${t.ended(ended, studio.log)}\n`)
   return 1
 }

package/src/index.ts

@@ -1,6 +1,2 @@
 export { main } from './cli.ts'
 export type { MainOptions } from './cli.ts'
-export { DEFAULT_PORT, PROFILE, presmiumBin, startStudio, studioHome } from './studio.ts'
-export type { Studio, StudioOptions } from './studio.ts'
-export { modelEnv } from './model.ts'
-export type { ModelEnv } from './model.ts'

package/src/messages.ts

@@ -0,0 +1,96 @@
+export { systemLocale } from '@lincyaw/dsh/launch'
+// Only the `studio  <url>` line on standard output is read by programs; it is the same in both languages.
+export type Locale = 'zh-CN' | 'en'
+
+export interface StudioMessages {
+  usage: string
+  badPort(value: string): string
+  badUrl(option: string, value: string): string
+  unexpectedArgument(argument: string): string
+  notDirectory(dir: string): string
+  log(file: string): string
+  openOnNetwork(address: string, port: string, previewPort: string): string
+  ended(how: string, log: string): string
+  portInUse(port: number, address: string): string
+  noFreePort(address: string): string
+  badHost(address: string): string
+  wholeLog(message: string, file: string): string
+  serviceEnded: string
+  appEnded: string
+  modelVariables(variables: readonly string[], unset: string[]): string
+}
+
+export const STUDIO_MESSAGES: Record<Locale, StudioMessages> = {
+  'zh-CN': {
+    usage: `用法：presmium studio [<目录>] [<选项>]
+
+启动 Presmium Studio（实验性）：在浏览器中编辑这个目录（工作区的根目录或一份文稿所在的目录；
+默认为 .）中的文稿，并为它提供工作区服务。只打印一个要在浏览器中打开的网址。AI 助手所用的模型在
+“设置 → 模型”中设置，也可以由环境变量给出：DEEPSEEK_API_KEY，或者兼容 Messages 接口的服务的
+PRESMIUM_MODEL_URL、PRESMIUM_MODEL_KEY 与 PRESMIUM_MODEL_PROVIDER。对话、模型设置、密钥与日志
+presmium-studio-<散列>.log（每个安装一个）保存在 $XDG_STATE_HOME/presmium/studio 中。
+
+选项：
+  --port <端口>  Presmium Studio 的端口（默认为 4320，被占用时取空闲端口）
+  --host <地址>  改为监听本机在局域网中的这个地址，而不是 127.0.0.1，且没有登录：
+                 任何能访问这个端口的人都以你的身份操作
+  --public-url <网址>   有反向代理在前面时浏览器打开的根地址（例如 Presmium 云端）；
+                 它的主机受信任，打印的网址用它。代理需保留 Host 并转发 WebSocket
+  --preview-url <网址>  同样情况下预览所在的地址，由代理转发到工作区服务；可以带路径，
+                 此时它必须与 Studio 不同源，否则预览中文稿的代码能读到 Studio 的会话
+  --preview-port <端口>  工作区服务的端口（默认为空闲端口），供需要事先知道端口的代理使用
+  -h, --help     显示本说明`,
+    badPort: value => `--port 需要 0 到 65535 之间的端口号，而不是“${value}”。`,
+    badUrl: (option, value) => `${option} 需要一个完整的网址，例如 https://studio.example.com/，而不是“${value}”。`,
+    unexpectedArgument: argument => `多余的参数“${argument}”。只能给出一个目录。`,
+    notDirectory: dir => `${dir} 不是目录。请给出工作区的根目录或一份文稿所在的目录。`,
+    log: file => `presmium studio: 日志在 ${file}`,
+    openOnNetwork: (address, port, previewPort) => `presmium studio: 正在 ${address} 上监听，局域网中的设备可以访问，且没有登录：任何能用上面的网址访问端口 ${port}（以及预览的端口 ${previewPort}）的人都以你的身份使用这个工作区（编辑、运行代码、使用你的模型）。请只在可信的网络中使用；不加 --host 时只在本机监听。`,
+    ended: (how, log) => `presmium studio: ${how}。日志在 ${log}`,
+    portInUse: (port, address) => `${address} 的端口 ${port} 已被占用。请用 --port 指定另一个端口。`,
+    noFreePort: address => `${address} 上没有空闲的端口。请停止占用端口的服务后重试。`,
+    badHost: address => `--host 需要本机的一个地址，例如 192.168.0.21，而不是“${address}”（Presmium Studio 只在一个确定的地址上监听，不能同时监听全部地址）。`,
+    wholeLog: (message, file) => `${message}${message.endsWith('\n') ? '' : '。'}完整的日志在 ${file}`,
+    serviceEnded: '工作区服务（presmium serve）已停止',
+    appEnded: 'Presmium Studio 的应用进程已停止',
+    modelVariables: (variables, unset) => `${variables.join('、')} 需要同时设置；没有设置 ${unset.join('、')}。`,
+  },
+  'en': {
+    usage: `Usage: presmium studio [dir] [options]
+
+Presmium Studio (experimental): edit the documents of the directory (the workspace root, or a deck’s
+directory; default: .) in the browser, with the workspace service of that directory. It prints the one
+address to open in the browser. The AI Assistant’s model is chosen in Settings > Models, or given by the
+environment: DEEPSEEK_API_KEY, or PRESMIUM_MODEL_URL, PRESMIUM_MODEL_KEY, and PRESMIUM_MODEL_PROVIDER
+for a Messages-compatible service. Chats, model settings, API keys, and the log
+presmium-studio-<hash>.log (one per installation) are kept in $XDG_STATE_HOME/presmium/studio.
+
+Options:
+  --port <n>     Presmium Studio’s port (default: 4320, or a free one when that is in use)
+  --host <addr>  listen on this address of the machine on the local network instead of 127.0.0.1, with
+                 no login: whoever reaches the port works as you
+  --public-url <url>    the root browsers open when a reverse proxy fronts Studio (as in Presmium
+                 Cloud): its host is trusted, and the printed address uses it. The proxy keeps Host and
+                 forwards WebSockets
+  --preview-url <url>  in that case, the address of the previews, forwarded to the workspace service; it
+                 may have a path, and should be another origin than Studio’s, or the documents’ code in
+                 previews can read Studio’s session
+  --preview-port <n>  the workspace service’s port (default: a free one), for a proxy that needs it in advance
+  -h, --help     show this help`,
+    badPort: value => `--port takes a port number from 0 to 65535, not “${value}”.`,
+    badUrl: (option, value) => `${option} takes a full address, such as https://studio.example.com/, not “${value}”.`,
+    unexpectedArgument: argument => `Unexpected argument “${argument}”. Give one directory.`,
+    notDirectory: dir => `${dir} is not a directory. Give the workspace root, or the directory of a document.`,
+    log: file => `presmium studio: log ${file}`,
+    openOnNetwork: (address, port, previewPort) => `presmium studio: listening on ${address}, on the local network, with no login: anyone who reaches port ${port} (and the previews’ port ${previewPort}) with the address above works in this workspace as you (edits, runs code, uses your model). Use it on a network you trust; without --host it listens on this machine only.`,
+    ended: (how, log) => `presmium studio: ${how}; the log is ${log}`,
+    portInUse: (port, address) => `Port ${port} of ${address} is in use. Give another with --port.`,
+    noFreePort: address => `There is no free port on ${address}. Stop a service that uses one, then retry.`,
+    badHost: address => `--host takes one address of this machine, such as 192.168.0.21, not “${address}” (Presmium Studio listens on one concrete address, never on all of them).`,
+    wholeLog: (message, file) => `${message.endsWith('\n') ? message : `${message}; `}the whole log is ${file}`,
+    serviceEnded: 'the workspace service (presmium serve) ended',
+    appEnded: 'the Presmium Studio app ended',
+    modelVariables: (variables, unset) => `${variables.join(', ')} go together; ${unset.join(' and ')} ${unset.length > 1 ? 'are' : 'is'} not set.`,
+  },
+}
+

package/src/{model.ts → model-env.ts}

@@ -1,3 +1,5 @@
+import { STUDIO_MESSAGES, systemLocale } from './messages.ts'
+
 export const MODEL_VARIABLES = ['PRESMIUM_MODEL_URL', 'PRESMIUM_MODEL_KEY', 'PRESMIUM_MODEL_PROVIDER'] as const
 
 export interface ModelEnv {
@@ -8,13 +10,13 @@ export interface ModelEnv {
 
 const searchUrl = (url: string) => `${url.replace(/\/+$/, '').replace(/\/v1$/, '')}/v1`
 
-const service = (url: string) => ({ DEEPSEEK_BASE_URL: url, DEEPSEEK_SEARCH_BASE_URL: searchUrl(url) })
+const deepseekEndpoints = (url: string) => ({ DEEPSEEK_BASE_URL: url, DEEPSEEK_SEARCH_BASE_URL: searchUrl(url) })
 
 export function modelEnv(env: NodeJS.ProcessEnv): ModelEnv {
   const [url, key, provider] = MODEL_VARIABLES.map(name => env[name]?.trim() || undefined)
-  if (url && key && provider) return { env: { ...service(url), DEEPSEEK_API_KEY: key }, from: [...MODEL_VARIABLES] }
+  if (url && key && provider) return { env: { ...deepseekEndpoints(url), DEEPSEEK_API_KEY: key }, from: [...MODEL_VARIABLES] }
   const unset = MODEL_VARIABLES.filter((_, i) => ![url, key, provider][i])
-  const warning = unset.length < MODEL_VARIABLES.length ? { warning: `${MODEL_VARIABLES.join(', ')} go together; ${unset.join(' and ')} ${unset.length > 1 ? 'are' : 'is'} not set` } : {}
+  const warning = unset.length < MODEL_VARIABLES.length ? { warning: STUDIO_MESSAGES[systemLocale(env)].modelVariables(MODEL_VARIABLES, unset) } : {}
   const deepseek = env.DEEPSEEK_API_KEY?.trim()
   if (deepseek) return { env: { DEEPSEEK_API_KEY: deepseek }, from: ['DEEPSEEK_API_KEY'], ...warning }
   return { env: {}, from: [], ...warning }

package/src/studio.ts

@@ -1,20 +1,18 @@
-import { spawn } from 'node:child_process'
-import type { ChildProcess } from 'node:child_process'
-import { randomBytes } from 'node:crypto'
-import { closeSync, mkdirSync, openSync, renameSync, writeSync } from 'node:fs'
+import { createHash, randomBytes } from 'node:crypto'
+import { closeSync, copyFileSync, existsSync, mkdirSync, openSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync, writeSync } from 'node:fs'
 import { createRequire } from 'node:module'
 import { createServer, isIP } from 'node:net'
 import type { AddressInfo } from 'node:net'
 import { homedir } from 'node:os'
 import { dirname, join, resolve } from 'node:path'
 import { fileURLToPath } from 'node:url'
-import { dshBin, launchArgs, launchEnv, WATCHDOG, WEB_READY, writeProfile } from '@lincyaw/dsh/launch'
-import { modelEnv } from './model.ts'
+import { bracketIPv6, dshBin, inheritedEnv, isLauncherVariable, launchArgs, launchEnv, launchNode, launchWorkspaceServer, WEB_READY, writeProfile } from '@lincyaw/dsh/launch'
+import type { LaunchedProcess } from '@lincyaw/dsh/launch'
+import { STUDIO_MESSAGES, systemLocale } from './messages.ts'
+import { modelEnv } from './model-env.ts'
 
-export const PROFILE = 'presmium-studio'
-export const DEFAULT_PORT = 4320
-const START_MS = 180_000
-const STOP_MS = 15_000
+const PROFILE = 'presmium-studio'
+const DEFAULT_PORT = 4320
 const LOG_BYTES = 16 << 20
 
 const PACKAGE_DIR = fileURLToPath(new URL('..', import.meta.url))
@@ -22,60 +20,95 @@ const PACKAGE_DIR = fileURLToPath(new URL('..', import.meta.url))
 export interface StudioOptions {
   dir: string
   port?: number
-  host?: string
+  /** `--host`: one address of this machine to listen on instead of 127.0.0.1. */
+  listenAddress?: string
+  /**
+   * When a reverse proxy fronts Studio (Presmium Cloud): the root browsers open, and the origin of the workspace
+   * service's previews. Their hosts are trusted and advertised; the proxy keeps `Host` and forwards upgrades.
+   */
+  publicUrl?: string
+  previewUrl?: string
+  /** The workspace service's port (default: a free one), for a proxy that needs it in advance. */
+  previewPort?: number
   env?: NodeJS.ProcessEnv
   presmium?: string
+  /** Live workspace-service output; the complete host output is also kept in `Studio.log`. */
+  onServiceOutput?(text: string): void
 }
 
 export interface Studio {
   url: string
-  service: string
+  workspaceServerUrl: string
   root: string
   home: string
   log: string
+  /** `<home>/<profile>.json`: `url` (with its launch token), `workspace`, `workspaceServerUrl`, `pid`; 0600, removed on close. */
+  state: string
   ended: Promise<string>
   close(): Promise<void>
 }
 
-export function studioHome(env: NodeJS.ProcessEnv = process.env): string {
+function studioHome(env: NodeJS.ProcessEnv = process.env): string {
   return join(env.XDG_STATE_HOME || join(env.HOME || homedir(), '.local', 'state'), 'presmium', 'studio')
 }
 
-export function presmiumBin(): string {
-  return join(dirname(createRequire(join(PACKAGE_DIR, 'package.json')).resolve('@lincyaw/presmium/package.json')), 'bin', 'presmium.mjs')
+/** The bundle `@lincyaw/dsh` this package depends on: the directory the profile links to. */
+function bundleDir(): string {
+  return realpathSync(dirname(createRequire(join(PACKAGE_DIR, 'package.json')).resolve('@lincyaw/dsh/package.json')))
 }
 
-const urlHost = (host: string) => (host.includes(':') ? `[${host}]` : host)
+/**
+ * The profile of this installation, `presmium-studio-<hash of the bundle's directory>`: its `node_modules` links to
+ * this installation's bundle, so Studios of other checkouts or versions sharing the home never repoint it. A new
+ * one starts with the author's settings, the profile patch of the Studio profile used last (the earlier single
+ * profile `presmium-studio` included); sessions and credentials are in the shared home, and its log is `<profile>.log` there.
+ */
+function installProfile(home: string, bundle: string): string {
+  const name = `${PROFILE}-${createHash('sha256').update(bundle).digest('hex').slice(0, 10)}`
+  const profiles = join(home, 'profiles')
+  const patch = join(profiles, name, 'cordis.patch.yml')
+  if (!existsSync(patch)) {
+    const last = (existsSync(profiles) ? readdirSync(profiles) : [])
+      .filter(other => other === PROFILE || other.startsWith(`${PROFILE}-`))
+      .map(other => join(profiles, other, 'cordis.patch.yml'))
+      .filter(file => existsSync(file))
+      .sort((a, b) => statSync(b).mtimeMs - statSync(a).mtimeMs)[0]
+    if (last) {
+      mkdirSync(dirname(patch), { recursive: true })
+      copyFileSync(last, patch)
+    }
+  }
+  return name
+}
+
+/** The `presmium` command of the `@lincyaw/presmium` package this one depends on. */
+function presmiumBin(): string {
+  return join(dirname(createRequire(join(PACKAGE_DIR, 'package.json')).resolve('@lincyaw/presmium/package.json')), 'bin', 'presmium.mjs')
+}
 
 const WILDCARD = /^(?:0\.0\.0\.0|::|(?:0+:){7}0+|::ffff:0\.0\.0\.0)$/i
 
-function freePort(host: string, port: number): Promise<number | undefined> {
+function freePort(listenAddress: string, port: number): Promise<number | undefined> {
   return new Promise((done) => {
     const server = createServer()
     server.once('error', () => done(undefined))
-    server.listen(port, host, () => {
+    server.listen(port, listenAddress, () => {
       const bound = (server.address() as AddressInfo).port
       server.close(() => done(bound))
     })
   })
 }
 
-async function choosePort(host: string, port: number | undefined): Promise<number> {
+async function choosePort(listenAddress: string, port: number | undefined): Promise<number> {
   if (port) {
-    if (await freePort(host, port) === undefined) throw new Error(`port ${port} of ${host} is in use: give another with --port`)
+    if (await freePort(listenAddress, port) === undefined) throw new Error(STUDIO_MESSAGES[systemLocale()].portInUse(port, listenAddress))
     return port
   }
-  const chosen = (port === undefined ? await freePort(host, DEFAULT_PORT) : undefined) ?? await freePort(host, 0)
-  if (chosen === undefined) throw new Error(`no free port on ${host}`)
+  const chosen = (port === undefined ? await freePort(listenAddress, DEFAULT_PORT) : undefined) ?? await freePort(listenAddress, 0)
+  if (chosen === undefined) throw new Error(STUDIO_MESSAGES[systemLocale()].noFreePort(listenAddress))
   return chosen
 }
 
-function inherited(env: NodeJS.ProcessEnv, drop: (name: string) => boolean): Record<string, string> {
-  return Object.fromEntries(Object.entries(env).filter((entry): entry is [string, string] => entry[1] !== undefined && !drop(entry[0])))
-}
-
-const OWN = (name: string) => /^(?:DSH_|PRESMIUM_MODEL_|PRESMIUM_SERVICE_)/.test(name) || ['PRESMIUM_WORKSPACE', 'NODE_ENV', 'PORT'].includes(name)
-
 class Log {
   readonly file: string
   #fd: number
@@ -92,7 +125,7 @@ class Log {
     const lines = ((this.#rest.get(name) ?? '') + text).split('\n')
     this.#rest.set(name, lines.pop()!)
     if (lines.length === 0) return
-    const out = lines.map(line => `[${name}] ${line}\n`).join('')
+    const out = lines.map(line => `${new Date().toISOString()} [${name}] ${line}\n`).join('')
     if (this.#bytes + out.length > LOG_BYTES) {
       closeSync(this.#fd)
       renameSync(this.file, `${this.file}.1`)
@@ -110,141 +143,84 @@ class Log {
   }
 }
 
-interface Supervised {
-  child: ChildProcess
-  ready(pattern: RegExp): Promise<RegExpExecArray>
-  started(): void
-  exited: Promise<void>
-  stop(): Promise<void>
-}
-
-function supervise(name: string, args: string[], options: { cwd: string, env: Record<string, string>, log: Log }): Supervised {
-  const child = spawn(process.execPath, [WATCHDOG, process.execPath, ...args], { cwd: options.cwd, env: options.env, detached: true, stdio: ['pipe', 'pipe', 'pipe'] })
-  child.stdin!.on('error', () => {})
-  let output: string | undefined = ''
-  const waiting = new Set<() => void>()
-  const read = (chunk: Buffer) => {
-    const text = chunk.toString()
-    options.log.write(name, text)
-    if (output === undefined) return
-    output += text
-    for (const check of waiting) check()
-  }
-  child.stdout!.on('data', read)
-  child.stderr!.on('data', read)
-  let ended = false
-  const exited = new Promise<void>(done => child.once('exit', () => {
-    ended = true
-    done()
-  }))
-  return {
-    child,
-    exited,
-    ready(pattern) {
-      return new Promise((resolveReady, reject) => {
-        const tail = () => (output ?? '').trimEnd().split('\n').slice(-12).map(line => `  ${line}`).join('\n')
-        const timer = setTimeout(() => finish(new Error(`${name} did not start within ${START_MS / 1000} s:\n${tail()}\n`)), START_MS)
-        const check = () => {
-          const match = pattern.exec(output ?? '')
-          if (match) finish(match)
-        }
-        const finish = (result: RegExpExecArray | Error) => {
-          clearTimeout(timer)
-          waiting.delete(check)
-          if (result instanceof Error) reject(result)
-          else resolveReady(result)
-        }
-        waiting.add(check)
-        void exited.then(() => finish(new Error(`${name} ended before it was ready:\n${tail()}\n`)))
-        check()
-      })
-    },
-    started() {
-      output = undefined
-    },
-    async stop() {
-      if (ended) return
-      child.kill('SIGTERM')
-      const timer = setTimeout(() => {
-        try {
-          process.kill(-child.pid!, 'SIGKILL')
-        } catch {
-        }
-      }, STOP_MS)
-      await exited
-      clearTimeout(timer)
-    },
-  }
-}
-
 export async function startStudio(options: StudioOptions): Promise<Studio> {
   const env = options.env ?? process.env
-  const host = options.host
-  if (host !== undefined && (isIP(host) === 0 || WILDCARD.test(host))) {
-    throw new Error(`--host takes one address of this machine, such as 192.168.0.21, not "${host}" (DeepSeek Harness listens on one concrete address, never on all of them)`)
+  const t = STUDIO_MESSAGES[systemLocale(env)]
+  const { listenAddress } = options
+  if (listenAddress !== undefined && (isIP(listenAddress) === 0 || WILDCARD.test(listenAddress))) {
+    throw new Error(t.badHost(listenAddress))
   }
-  const port = await choosePort(host ?? '127.0.0.1', options.port)
-  const origins = [`http://${urlHost(host ?? '127.0.0.1')}:${port}`, ...!host || host === '127.0.0.1' ? [`http://localhost:${port}`] : []]
+  const port = await choosePort(listenAddress ?? '127.0.0.1', options.port)
+  const origins = options.publicUrl ? [new URL(options.publicUrl).origin] : [`http://${bracketIPv6(listenAddress ?? '127.0.0.1')}:${port}`, ...!listenAddress || listenAddress === '127.0.0.1' ? [`http://localhost:${port}`] : []]
 
   const home = studioHome(env)
   mkdirSync(home, { recursive: true, mode: 0o700 })
-  writeProfile(home, PROFILE, 'web')
-  const log = new Log(join(home, 'presmium-studio.log'))
-  const token = randomBytes(24).toString('base64url')
-  const started: Supervised[] = []
+  const bundle = bundleDir()
+  const profile = installProfile(home, bundle)
+  writeProfile(home, profile, 'web', bundle)
+  const log = new Log(join(home, `${profile}.log`))
+  const serviceToken = randomBytes(24).toString('base64url')
+  const started: LaunchedProcess[] = []
   const stopAll = async () => {
-    for (const process_ of started.reverse()) await process_.stop()
+    for (const launched of started.reverse()) await launched.stop()
     started.length = 0
   }
 
   try {
-    const service = supervise('serve', [
-      options.presmium ?? presmiumBin(), 'serve', resolve(options.dir), '--port', '0',
-      ...host ? ['--host', host] : [],
-      ...origins.flatMap(origin => ['--preview-origin', origin]),
-    ], {
-      cwd: resolve(options.dir),
-      env: { ...inherited(env, name => OWN(name) || name.startsWith('DEEPSEEK_')), PRESMIUM_SERVICE_TOKEN: token },
-      log,
+    const server = launchWorkspaceServer({
+      presmium: options.presmium ?? presmiumBin(),
+      dir: resolve(options.dir),
+      serviceToken,
+      ...options.previewPort ? { port: options.previewPort } : {},
+      args: [
+        ...listenAddress ? ['--host', listenAddress] : [],
+        ...origins.flatMap(origin => ['--preview-origin', origin]),
+        ...options.previewUrl ? ['--public-url', options.previewUrl] : [],
+      ],
+      env,
+      onOutput: text => { log.write('serve', text); options.onServiceOutput?.(text) },
     })
-    started.push(service)
-    const url = (await service.ready(/^serve {2}(http\S+)$/m))[1]!
-    const root = (await service.ready(/^workspace {2}(.+)$/m))[1]!.trim()
-    service.started()
+    started.push(server.process)
+    const { url, root } = await server.ready
 
-    const dsh = supervise('dsh', [
-      dshBin(PACKAGE_DIR), ...launchArgs(PROFILE, 'web'), '--port', String(port), '--no-open',
-      ...host ? ['--host', host, '--trusted-host', `${urlHost(host)}:${port}`] : [],
+    const dsh = launchNode('DeepSeek Harness', [
+      dshBin(PACKAGE_DIR), ...launchArgs(profile, 'web'), '--port', String(port), '--no-open',
+      ...listenAddress ? ['--host', listenAddress, '--trusted-host', `${bracketIPv6(listenAddress)}:${port}`] : [],
+      ...options.publicUrl ? ['--public-url', options.publicUrl, '--trusted-host', new URL(options.publicUrl).host] : [],
     ], {
       cwd: root,
       env: {
-        ...inherited(env, name => OWN(name) || ['DEEPSEEK_API_KEY', 'DEEPSEEK_BASE_URL', 'DEEPSEEK_SEARCH_BASE_URL'].includes(name)),
+        ...inheritedEnv(env, name => isLauncherVariable(name) || ['DEEPSEEK_API_KEY', 'DEEPSEEK_BASE_URL', 'DEEPSEEK_SEARCH_BASE_URL'].includes(name)),
         ...modelEnv(env).env,
-        ...launchEnv(home),
+        ...launchEnv(home, env),
         PRESMIUM_SERVICE_URL: url,
-        PRESMIUM_SERVICE_TOKEN: token,
+        PRESMIUM_SERVICE_TOKEN: serviceToken,
         PRESMIUM_WORKSPACE: root,
       },
-      log,
+      onOutput: text => log.write('dsh', text),
     })
     started.push(dsh)
     const address = (await dsh.ready(WEB_READY))[1]!
-    dsh.started()
+    dsh.stopBuffering()
+    // The address with its launch token, for a host that opens Studio for the user (0600, removed on close).
+    const state = join(home, `${profile}.json`)
+    writeFileSync(state, `${JSON.stringify({ url: address, workspace: root, workspaceServerUrl: url, pid: process.pid }, null, 2)}\n`, { mode: 0o600 })
 
     let closing: Promise<void> | undefined
     const ended = Promise.race([
-      service.exited.then(() => 'the workspace service (presmium serve) ended'),
-      dsh.exited.then(() => 'DeepSeek Harness ended'),
+      server.process.exited.then(() => t.serviceEnded),
+      dsh.exited.then(() => t.appEnded),
     ]).then(how => (closing ? new Promise<string>(() => {}) : how))
     return {
       url: address,
-      service: url,
+      workspaceServerUrl: url,
       root,
       home,
       log: log.file,
       ended,
+      state,
       close() {
-        closing ??= stopAll().finally(() => log.close())
+        closing ??= stopAll().finally(() => { rmSync(state, { force: true }); log.close() })
         return closing
       },
     }
@@ -252,6 +228,6 @@ export async function startStudio(options: StudioOptions): Promise<Studio> {
     await stopAll()
     log.close()
     const message = error instanceof Error ? error.message : String(error)
-    throw new Error(`${message.endsWith('\n') ? message : `${message}; `}the whole log is ${log.file}`)
+    throw new Error(t.wholeLog(message, log.file))
   }
 }