dsh-as-aistudio 0.1.0 → 0.2.0

package/README.md

@@ -1,6 +1,6 @@
 # dsh-as-aistudio
 
-**把 DeepSeek Harness 用成 Google AI Studio —— 一轮对话就是一个可以反复打磨的 prompt playground。** 改一句提示词并重跑、原位重跑某条回复、把不该留下的那一轮从模型上下文里删掉、让发出的提示词按 Markdown 渲染。这四个能力各自是一个独立插件，本包把它们组合成一次安装，并在「设置 → 插件 → AI Studio」里如实报告哪几个真的活着。
+**把 DeepSeek Harness 用成 Google AI Studio —— 一轮对话就是一个可以反复打磨的 prompt playground，而且插件列表里只占一行。** 改一句提示词并重跑、原位重跑某条回复、把不该留下的那一轮从模型上下文里删掉、让发出的提示词按 Markdown 渲染。
 
 [中文](#中文) · [English](#english)
 
@@ -10,77 +10,57 @@
 
 ### 为什么需要它
 
-AI Studio 的好用之处不在模型，在于**一轮对话中的每一步都能回头改**：提示词写错了就地改完再跑一次、这次答得不好原地重跑、这段不该进上下文就删掉。DSH 的会话日志是 append-only 的，官方只提供整段压缩（`/compact`），没有轮次级的编辑、重跑与删除。
+AI Studio 的好用之处不在模型，在于一轮对话中的每一步都能回头改。DSH 官方只提供整段压缩（/compact），没有轮次级的编辑、重跑与删除。
 
-这四个组件补上了这一层，而本包负责让它们**装得下、合得来、看得见**：
+四个组件补上了这一层，而这个包负责让它们装得下、合得来、看得见：
 
-- **装得下** —— 一次安装启用整条动作条；
-- **合得来** —— 四个组件各自独立、可任意子集共存，互操作契约由本包固化并测试；
-- **看得见** —— 谁装了、谁启用了、谁缺席，面板上一目了然。
+- **装得下** —— 自包含安装，一次装完；
+- **合得来** —— 四个组件各自独立、任意子集共存，互操作契约由本包固化并测试；
+- **看得见** —— 设置 → 插件 → AI Studio 面板如实报告哪几个真的活着。
 
 ### 特性
 
-- **一次安装，整条动作条** —— 安装本包即可启用编辑、原位重跑、删除与 Markdown 气泡四个组件；
-- **任意子集都能跑** —— 只装其中一个组件时它自己就是完整功能；装两个、三个、四个，或者叠加本包，都不会重复挂载、不会抢同一行；
-- **组件仍是独立包** —— 每个组件有自己的仓库、自己的 `cordis.patch.yml`、自己单独的安装方式；本包**不内联、不魔改**它们的代码；
-- **互操作契约可验证** —— slot order 分配、行隐藏归属、兄弟探测协议写在 `docs/INTEROP.md`，并由 `test/manifest.test.js` 断言；
-- **如实报告** —— `GET /api/dsh-as-aistudio/status` 与设置面板区分「已启用 / 已安装未启用 / 未安装」，缺失组件只会退化，不会把宿主带崩；
-- **web 与桌面端同构** —— 浏览器半侧只注册一个设置页标签、只发一次相对路径请求；没有 DOM 注入、没有 MutationObserver、没有键盘监听。
-
-### 组件
-
-| 组件 | 能力 | 仓库 |
-| --- | --- | --- |
-| `dsh-edit-turn` | 就地改提示词并重跑（回滚到那一条之前） | <https://github.com/DDDMUC/dsh-edit-turn> |
-| `dsh-rerun-turn` | 原位重跑：同一句提示词重新生成，后续轮次原样存活 | <https://github.com/DDDMUC/dsh-rerun-turn> |
-| `dsh-delete-turn` | 把一条消息 / 一个步骤 / 整条回复从模型上下文里拿掉 | <https://github.com/DDDMUC/dsh-delete-turn> |
-| `dsh-markdown-bubble` | 已发送的提示词按 Markdown 渲染 | <https://github.com/DDDMUC/dsh-markdown-bubble> |
-
-四个组件都是**可选依赖**（`optionalDependencies`）：装不上、被移除、离线都只会让对应那一行缺席，本包照常启动。
+- **一行搞定** —— 插件列表里只有 AI Studio 一行。四个组件是本包的 dependencies，由本包挂载，不再各自占一行（和 @linxin666/dsh-web-all 同一个模式）。
+- **组件仍是独立包** —— 每个都有自己的仓库与 cordis.patch.yml，单独安装照样工作；本包不复制任何组件逻辑：宿主半侧（路由、回滚、重放）就是组件自己，浏览器 factory 由 tools/vendor.mjs 从组件源码逐字剥离生成。
+- **副本不会漂移** —— npm run vendor 重新生成内联包，npm run build 重新生成大 bundle，verify:vendor / verify:build 是只读校验；测试里 vendor-sync / build-sync 会在副本过期时失败。
+- **一个挂了不影响其余** —— 四个 vendored factory 各自带 guard 挂载，一个抛错不会带走另外三个。
+- **互操作契约可验证** —— slot order 分配、行隐藏归属、兄弟探测协议写在 docs/INTEROP.md，并由组合矩阵测试断言。
+- **web 与桌面端同构** —— 同一份 dsh.client.platform: web bundle；没有 location.origin / window.open / navigator.* / dialog / popover。
 
 ### 安装
 
 ```sh
-# AI Studio 全家桶（studio + 四个组件一起启用）
 dsh plugin --profile web add dsh-as-aistudio
-
-# 只想要其中一个能力，就单独装那一个
-dsh plugin --profile web add dsh-delete-turn
 ```
 
-桌面端把 `--profile web` 换成 `--profile desktop` 即可，两端共用同一份浏览器半侧。
+桌面端把 --profile web 换成 --profile desktop。四个组件会作为 dependencies 一起装上，不需要逐个装。
 
 ### 使用
 
-装好后，动作条就在消息行上：
+装好后动作条就在消息行上：
 
-1. 悬停**你发出的那条消息** → 铅笔（编辑并重跑）；
-2. 悬停**模型的回复** → 重跑 / 删除；
-3. 「设置 → 插件」多出一个 **AI Studio** 标签页，列出每个组件的实时状态、版本、它占用的槽位，以及互操作契约的分配表。
+1. 悬停你发出的那条消息 → 铅笔（编辑并重跑）；
+2. 悬停模型的回复 → 重跑 / 删除；
+3. 设置 → 插件 多出一个 AI Studio 标签页，列出每个组件的实时状态、版本、占用的槽位，以及互操作契约分配表。
 
 ### 工作原理
 
-- 本包的 `cordis.patch.yml` 为**自己和四个组件**各插入一行，行的 `name` 就是组件的裸包名 —— 这是客户端模块扫描器解析 `dsh.client` 声明的方式；
-- 宿主侧只做一件事：读 loader 的条目树，回答「这个组件现在有没有启用的条目、装的是哪个版本」，走 loopback-only 的 `/api/dsh-as-aistudio/status`；
-- 浏览器侧只做一件事：往 `settings.plugins.tab` 注册一个标签页；
-- 条目树按 id 归并，所以「本包插入的行」与「组件自己的 bundle 插入的行」会合并成**一个**条目，而不是挂载两次；
-- 某个组件缺席时，它的那一行会在 import 阶段失败并被 loader 隔离，其余行照常启动。
-
-### 已修复 / 版本
-
-- 0.1.0 —— 首个版本：组合四个组件、固化互操作契约、报告组件状态。
+- **宿主半侧**（src/index.js）：await import 导入每个组件的宿主半侧并 ctx.plugin 挂进本 fiber —— 它们的 loopback 路由与回滚/重放服务因此就位。缺哪个报告哪个，绝不致命。
+- **浏览器半侧**（src/client.js，由 tools/build.mjs 生成）：单一大 bundle —— studio 自己的浏览器半侧 + 四个组件的 factory（各自 var module / var exports / const react，靠 var 提升共处一个 scope）。bundle 是按 Loader 行下发的，所以这是它们到达页面的唯一方式。
+- **为什么宿主半侧不内联**：宿主代码对插件列表不可见，复制它只会凭空多出一份要维护的东西。
+- **状态面板**：读 GET /api/dsh-as-aistudio/status，对每个组件报告 installed / hostMounted / version / ownRows（ownRows 大于 0 表示它还被独立安装着）。
 
 ### 已知限制
 
-- 动作条本身由四个组件各自渲染，本包不接管；某个组件缺席时它那一个按钮就不会出现，这符合预期；
-- 状态面板不提供开关：启用/禁用条目请在「设置 → 插件」的官方列表里做，那是平台自己的所有权；
-- 组件缺席时，宿主日志会有一条该条目的 import 失败记录。这是 loader 的诚实报错，不是本包的异常。
+- 四个组件的 browser factory 是生成副本。改了组件必须 npm run vendor && npm run build 再发本包；verify:vendor / verify:build 会拦住过期副本。
+- 组件缺席（有人手动删了依赖）时，它的 browser half 不会挂载，面板显示「已安装，宿主未挂载」或「未安装」。
+- 宿主版本常量只在进程启动时读一次：改了本包要重启宿主 + 硬刷新。
 
 ### 兼容性
 
-- DSH `>=0.1.6-alpha.2`（`0.2.0-rc.1` 实测通过）；
-- profile：`web`、`desktop`（`headless` 无 Web 界面，仅宿主半侧可用）；
-- 四个组件都可单独安装，也可以任意子集叠加本包。
+- DSH >=0.1.6-alpha.2（0.2.0-rc.1 实测通过）；
+- profile：web、desktop；
+- 四个组件都可单独安装，也可以任意子集和本包共存。
 
 ### License
 
@@ -92,78 +72,51 @@ MIT
 
 ### Why you need it
 
-What makes AI Studio pleasant is not the model: it is that **every step of a turn can be revisited**. Rewrite a prompt in place and run it again, regenerate a reply without disturbing what came later, remove a turn that should never have entered the context. DSH's session log is append-only and the platform only offers whole-transcript compaction (`/compact`) — there is no per-turn edit, re-run or delete.
-
-Four components supply that layer. This package makes them **installable, compatible and visible**:
-
-- **installable** — one install turns on the whole action strip;
-- **compatible** — each component is independent and any subset coexists; the interop contract is pinned here and tested;
-- **visible** — which component is installed, enabled or absent, on one panel.
+What makes AI Studio pleasant is not the model: it is that every step of a turn can be revisited. DSH offers whole-transcript compaction only. Four components add turn-level edit, re-run and delete; this package makes them installable, compatible and visible.
 
 ### Features
 
-- **One install, the whole strip** — installing this package enables edit, re-run, delete and the Markdown bubble;
-- **Any subset works** — one component alone is a complete feature; two, three, four, or components plus this package never double-mount and never fight over a row;
-- **Components stay independent packages** — each keeps its own repo, its own `cordis.patch.yml` and its own install path; this package does not inline or rewrite their code;
-- **A verifiable interop contract** — slot orders, row-hide ownership and the sibling probe protocol live in `docs/INTEROP.md` and are asserted by `test/manifest.test.js`;
-- **Honest reporting** — `GET /api/dsh-as-aistudio/status` and the settings panel distinguish enabled / installed-not-enabled / absent; a missing component degrades, never breaks the host;
-- **Web and desktop are one implementation** — the browser half registers one settings tab and makes one relative-path request; no DOM injection, no MutationObserver, no keyboard listener.
-
-### Components
-
-| Component | What it does | Repo |
-| --- | --- | --- |
-| `dsh-edit-turn` | Rewrite a prompt in place and re-run it (rolls back to just before that turn) | <https://github.com/DDDMUC/dsh-edit-turn> |
-| `dsh-rerun-turn` | Infix re-run: regenerate one reply from the same prompt, later turns survive | <https://github.com/DDDMUC/dsh-rerun-turn> |
-| `dsh-delete-turn` | Remove a message, a step or a whole reply from the derived model context | <https://github.com/DDDMUC/dsh-delete-turn> |
-| `dsh-markdown-bubble` | Render sent prompts as Markdown | <https://github.com/DDDMUC/dsh-markdown-bubble> |
-
-All four are **optional dependencies**: a component that cannot be installed, was removed, or is unavailable offline simply misses its row; the studio still boots.
+- **One row** — the plugin list shows only AI Studio. The four components are dependencies mounted by this package and no longer occupy rows of their own (the @linxin666/dsh-web-all pattern).
+- **Components stay independent packages** — each keeps its own repo and its own cordis.patch.yml and works alone. This package copies no component logic: the host halves ARE the components, and the browser factories are lifted verbatim from their sources by tools/vendor.mjs.
+- **The vendored copy cannot drift** — npm run vendor regenerates it, npm run build regenerates the bundle, and verify:vendor / verify:build are read-only gates; the test suite fails on a stale copy.
+- **One failure does not take the rest** — each vendored factory mounts behind its own guard.
+- **A verifiable interop contract** — slot orders, row-hide ownership and the sibling probe protocol live in docs/INTEROP.md and are asserted by the combination matrix.
+- **Web and desktop are one implementation** — the same dsh.client.platform: web bundle; no location.origin, window.open, navigator.*, dialog or popover.
 
 ### Install
 
 ```sh
-# The whole AI Studio set (studio plus its four components)
 dsh plugin --profile web add dsh-as-aistudio
-
-# Or just one capability
-dsh plugin --profile web add dsh-delete-turn
 ```
 
-On the desktop app use `--profile desktop`; both share the same browser half.
+Use --profile desktop on the desktop app. The four components arrive as dependencies; there is nothing else to install.
 
 ### Usage
 
-The action strip lives on the message rows:
-
-1. Hover **a message you sent** → the pencil (edit and re-run);
-2. Hover **a model reply** → re-run / delete;
-3. Settings → Plugins gains an **AI Studio** tab listing each component's live state, version, the slot it claims, and the interop allocation.
+1. Hover a message you sent → the pencil (edit and re-run);
+2. Hover a model reply → re-run / delete;
+3. Settings → Plugins gains an AI Studio tab listing each component's live state, version, the slot it claims, and the interop allocation.
 
 ### How it works
 
-- This package's `cordis.patch.yml` inserts one row for itself and one per component, each named by the component's bare package name — that is how the client-module scanner resolves a `dsh.client` declaration;
-- The host half does one thing: read the loader's entry tree and answer "does this component have an enabled entry, and which version is installed", over a loopback-only `/api/dsh-as-aistudio/status`;
-- The browser half does one thing: register a tab into `settings.plugins.tab`;
-- The entry tree is keyed by id, so a row inserted by this patch and the same row inserted by a component's own bundle merge into **one** entry instead of mounting the plugin twice;
-- A missing component fails at import and is isolated by the loader; every other row still starts.
-
-### Fixes / versions
-
-- 0.1.0 — first release: composes the four components, pins the interop contract, reports component status.
+- **Host half** (src/index.js): imports each component's host half and applies it into this fiber with ctx.plugin, which is what puts its loopback routes and its rollback / replay services in place. A missing one is reported, never fatal.
+- **Browser half** (src/client.js, generated by tools/build.mjs): one bundle — the studio's own browser half plus the four component factories, each with its own var module / var exports / const react in one scope via hoisting. A bundle is served per Loader row, so this is the only way they can reach the page.
+- **Why the host halves are not vendored**: host code is invisible to the plugin list, so copying it would only create a second thing to fix.
+- **The panel** reads GET /api/dsh-as-aistudio/status and reports installed / hostMounted / version / ownRows per component (ownRows greater than 0 means it is also installed standalone).
 
 ### Known limitations
 
-- The action strip is rendered by the components themselves; this package does not take it over. A missing component means its button is absent, which is the point;
-- The panel reports but does not toggle: enable or disable a row in the platform's own Settings → Plugins list, which owns that state;
-- A missing component leaves one import failure in the host log. That is the loader being honest, not an exception from this package.
+- The four browser factories are a generated copy. After changing a component, run npm run vendor && npm run build before releasing this package; the verify gates block a stale copy.
+- A component that is somehow absent is not mounted and the panel says so.
+- The host version constant is read once at process start: after changing this package, restart the host and hard-refresh.
 
 ### Compatibility
 
-- DSH `>=0.1.6-alpha.2` (verified on `0.2.0-rc.1`);
-- Profiles: `web`, `desktop` (`headless` has no web surface; the host half still loads);
-- Every component installs alone, and any subset composes with this package.
+- DSH >=0.1.6-alpha.2 (verified on 0.2.0-rc.1);
+- Profiles: web, desktop;
+- Every component installs alone, and any subset coexists with this package.
 
 ### License
 
 MIT
+

package/cordis.patch.yml

@@ -1,30 +1,23 @@
-# dsh-as-aistudio bundle patch: the AI Studio composition.
+# dsh-as-aistudio bundle patch: the AI Studio composition, ONE row.
 #
-# Rows are inserted for the studio itself and for each component it composes, so
-# one install turns the whole strip on. Every component keeps its own repo, its
-# own package and its own cordis.patch.yml: installing one alone still mounts it
-# through that row, and the platform's entry tree is keyed by id, so a row
-# inserted twice (by this patch and by the component's own bundle) merges into a
-# single entry rather than mounting the plugin twice.
+# Self-contained: the plugin list shows exactly this row. The four components are
+# ordinary npm dependencies of this package (see package.json), not profile
+# bundles, so they have no rows of their own and never appear in that list.
 #
-# A missing package fails in isolation: @cordisjs/plugin-loader's Entry#_init
-# catches the import error, logs it and returns, so the other rows still start.
-# That is what makes "any subset of the components, on top of the studio" safe,
-# and the studio's own panel reports the gap instead of hiding it.
+# The node half mounts each component HOST half (its loopback routes and its
+# rollback / replay services) by importing the installed package, so host logic
+# stays in the components and there is only one copy of it. The browser bundles
+# travel inside this package (src/client.js) because a browser bundle is served
+# per Loader row and the components have none.
 #
-# The entry names are the BARE package names on purpose: the client-module
-# scanner treats the name as a package specifier and resolves
-# `<name>/package.json` for the `dsh.client` declaration, so a subpath entry
-# would be cached as "not a client package" and the browser half would silently
-# never load.
+# A component that is not installed is reported by /api/dsh-as-aistudio/status and
+# is never mounted - the studio boots either way. Each component still has its own
+# cordis.patch.yml, so installing one standalone mounts it through its own row.
+#
+# The entry name is the BARE package name on purpose: the client-module scanner
+# treats it as a package specifier and resolves <name>/package.json for the
+# dsh.client declaration, so a subpath entry would be cached as "not a client
+# package" and the browser half would silently never load.
 - insert:
     - id: dsh-as-aistudio
       name: 'dsh-as-aistudio'
-    - id: dsh-edit-turn
-      name: 'dsh-edit-turn'
-    - id: dsh-rerun-turn
-      name: 'dsh-rerun-turn'
-    - id: dsh-delete-turn
-      name: 'dsh-delete-turn'
-    - id: dsh-markdown-bubble
-      name: 'dsh-markdown-bubble'

package/docs/INTEROP.md

@@ -132,3 +132,84 @@ function foreignHideOn(row, own) {
 1. 每个包：`npm test`（+ `verify:*`）全绿；
 2. 组合矩阵：把 4 个 client bundle 以 2^4 种组合装载进同一个 DOM stub，断言：无异常、slot 注册 id 唯一、无重复按钮、隐藏归因正确；
 3. 真机：web profile 装载 `dsh-as-aistudio` + 任意子集，页面加载无 `error` 级别日志。
+## 9. 热重载纪律（HMR）—— 2026-10-01「点不动」事故后新增
+
+**改任何组件的 `client.js` 之后，必须重启宿主进程 + 让页面硬刷新，不要把 HMR 混合态交付给用户。**
+
+事故形态（dsh-rerun-turn，2026-10-01 13:5x）：用户点回答行 / 用户行的 ↻ 没有任何反应，宿主 `/debug` 也收不到 `apply` 请求；直取 `/plugins/<id>/client.js` 返回空。
+根因不是代码缺陷，而是**混合态**：client bundle 被 HMR 单独重载（0.1.21 / 0.1.22 的改动触发了多次），而宿主进程没有重启 —— 页面里是「新 bundle 实例 + 旧实例已 dispose 的控制器 / 旧按钮上已死的监听」。
+恢复动作：**重启宿主 + 硬刷新页面**（重启后 host 0.1.22、bundle 200 非空、两处 ↻ 点击均正常触发 `apply`）。
+
+配套约定：
+
+- 交付前检查三件事：宿主版本 == bundle 版本；`/plugins/<entry>/client.js` 返回 200 且非空；行上的动作按钮真的点得动。
+- 组件在 `dispose` 之后会主动早退（不唤醒已退休的控制器），所以混合态表现为**静默无响应**而不是报错 —— 这是刻意的设计，不是 Bug；遇到它先重启宿主再判断。
+- 跨端（host / client）不兼容改动必须 bump 三处版本号（`package.json` + 宿主半侧 + 浏览器半侧）并跑该仓库的全部门禁。
+- 本契约的 §2（slot order 分配）与 §4（隐藏归因）属于三个注入型组件的**共享面**：改其中一侧，必须同时检查另外两侧不受影响；组合矩阵（`dsh-as-aistudio/test/combination.test.js`）是这条规则的回归网。
+## 10. 跨插件运行时契约：dsh-edit-turn → dsh-rerun-turn
+
+这是**唯一一条两个组件之间真实存在的运行时依赖**，也是唯一一条不走 DOM、只走回环 HTTP 的依赖。写在契约里，
+是因为它跨越两个仓库、两个维护者，任何一侧单独改动都不会让另一侧的测试变红。
+
+流程（`dsh-edit-turn` 0.2.12+ 的提示词编辑器「重跑」按钮）：
+
+1. 按钮**只在探测到 rerun-turn 挂载时**出现：不带 `sessionId` 请求 `GET /dsh-rerun-turn/state`，
+   按 **400 / 405 = 装着、404 = 没装** 判定；
+2. 点击后先 `POST /dsh-edit-turn/apply` 就地保存改写（不调模型），
+3. 紧接着链式 `POST /dsh-rerun-turn/apply { sessionId, seq }`，其中 `seq` 取自 rerun-turn `/state` 的
+   `replies[]`（匹配被编辑那一轮的 `turn`、取 `seq` 最大者）；
+4. rerun-turn 侧的 `planRerun` 沿 `source.kind = plugin:dsh-edit-turn` 的就地替换链读**活节点**，
+   于是重跑用改后的措辞生成。
+
+双向边界：
+
+- edit-turn **只**走 rerun-turn 的公开回环路由，不碰对方的 client 半侧或 DOM；
+- 反过来，**纯 dsh-edit-turn（没装 rerun-turn）没有任何重跑入口** —— 编辑器只有「取消 / 保存」。
+
+不许改的形状（回归测试：`dsh-rerun-turn/test/contract.test.js`，16 例，已做变异验证）：
+
+| 形状 | 约束 |
+| --- | --- |
+| 挂载探测 | 不带 `sessionId` 的 `GET /state` 必须仍答 400；改成 404 按钮会静默消失 |
+| 目标列表 | `/state` 持续返回完整的 `replies[{seq, turn}]` |
+| 调用形状 | `POST /apply` 只要求 `sessionId` + (`seq` \| `messageId`)，**不得新增必填参数** |
+| 载荷 | edit-turn 不传文本；未知字段必须被忽略而不是 400 |
+| 错误码 | `not-rerunnable` / `already-retired` / `busy` / `rerunning` / `stale` / `session-not-found` / `session-not-active` / `invalid` 机读且稳定（edit-turn 原样提示给用户） |
+| 链式解析 | `planRerun` 继续跟随就地替换链取活文本 |
+
+**给改这两个包的 agent**：动路由、`planRerun` 或错误码之前，先在 `dsh-rerun-turn` 跑
+`node --test test/contract.test.js`；把探测状态的 400 改成 404 会让 2 例转红，给 `/apply` 加一个必填
+`confirmToken` 会让 5 例转红 —— 破坏契约会在本地就暴露，而不是等用户发现按钮点不动。
+
+## 11. 自包含架构（2026-10-02）
+
+用户要求「插件列表里只有 AI Studio 一行」。平台的清单服务返回扁平数组，过滤条件是
+!entry.options.group && !entry.disabled && entry.fiber.state === 2
+（@deepseek-ai/dsh-plugin-package-inventory-deepseek/lib/index.js:100）—— 没有 hidden 开关，
+group 也只能把 group 自己藏起来，子条目照样平铺。所以「在跑等价于在列表里」是硬约束。
+
+唯一的出路是让四个组件不再是 Loader 行。本包因此改成自包含（@linxin666/dsh-web-all 同款）：
+
+| 部件 | 位置 | 说明 |
+| --- | --- | --- |
+| patch | cordis.patch.yml | 只插一行（本包自己） |
+| 组件身份 | package.json dependencies | 普通依赖，不是 profile bundle |
+| 宿主半侧 | src/index.js | await import 加 ctx.plugin 挂载组件的宿主半侧 |
+| 浏览器半侧 | src/client.js | 单一大 bundle（生成物） |
+| 内联来源 | src/vendor/*.js | tools/vendor.mjs 从组件源码逐字剥离 factory |
+| 缝合器 | tools/build.mjs | studio 加四个 factory 合成一个 bundle |
+
+两条设计红线：
+
+1. 宿主半侧不内联。宿主代码对列表不可见，复制它只会多出一份要维护的东西；import 加
+   ctx.plugin 就够，且组件的路由、回滚、重放逻辑仍是唯一正本。
+2. 浏览器半侧必须内联。bundle 是按 Loader 行下发的（/plugins/<行id>/client.js），
+   组件没有行就没有 bundle。
+
+防漂移：副本由工具生成、带 sha256 戳，npm run verify:vendor / verify:build 只读校验，
+测试在副本与组件源不一致时失败。手工编辑 src/vendor/* 或 src/client.js 是禁止的。
+
+实测（隔离实例，只装本包 tarball）：composed 184 行里组件行 0；/api/dsh-as-aistudio/status
+hostMounted 4/4；GET /dsh-rerun-turn/state 返回 400（edit-turn 的挂载探测契约未破）；
+boot graph 66 条里组件条目 0；served bundle 200 且含四个 factory。
+

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-as-aistudio",
-  "version": "0.1.0",
-  "description": "Google-AI-Studio-style turn controls for DeepSeek Harness, in one install: edit a prompt and re-run it, re-run a reply in place, delete a turn from the model context, and render sent prompts as Markdown. Each of the four components is an independent plugin that also works alone, and any subset of them coexists; this package composes them, enables the rows that mount them, and reports which ones are live in Settings -> Plugins -> AI Studio.",
+  "version": "0.2.0",
+  "description": "Google-AI-Studio-style turn controls for DeepSeek Harness, in one install: edit a prompt and re-run it, re-run a reply in place, delete a turn from the model context, and render sent prompts as Markdown. Self-contained: the plugin list shows this one row; the four components are dependencies mounted by it. Each still installs alone and works alone.",
   "type": "module",
   "main": "src/index.js",
   "exports": {
@@ -11,6 +11,7 @@
   },
   "files": [
     "src",
+    "tools",
     "cordis.patch.yml",
     "docs/INTEROP.md",
     "README.md",
@@ -37,13 +38,18 @@
     "node": ">=22"
   },
   "scripts": {
-    "test": "node --test \"test/*.test.js\""
+    "vendor": "node tools/vendor.mjs",
+    "build": "node tools/vendor.mjs && node tools/build.mjs",
+    "test": "node --test test/*.test.js",
+    "check": "npm run build && npm test",
+    "verify:vendor": "node tools/vendor.mjs --check",
+    "verify:build": "node tools/build.mjs --check"
   },
-  "optionalDependencies": {
+  "dependencies": {
     "dsh-delete-turn": "^0.1.7",
-    "dsh-edit-turn": "^0.2.14",
-    "dsh-markdown-bubble": "^0.1.1",
-    "dsh-rerun-turn": "^0.1.22"
+    "dsh-edit-turn": "^0.2.15",
+    "dsh-markdown-bubble": "^0.1.4",
+    "dsh-rerun-turn": "^0.1.24"
   },
   "dsh": {
     "bundle": {
@@ -52,7 +58,11 @@
     "client": {
       "platform": "web",
       "inject": [
-        "@deepseek-ai/dsh-client-locale"
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-chat",
+        "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-client-ui-primitives",
+        "@deepseek-ai/dsh-client-ui-settings-plugins"
       ]
     },
     "engines": {
@@ -65,4 +75,4 @@
       }
     }
   }
-}
+}