dsh-as-aistudio 0.2.5 → 0.2.6

package/README.md

@@ -20,7 +20,7 @@ AI Studio 的好用之处不在模型，在于一轮对话中的每一步都能
 
 ### 特性
 
-- **一行搞定** —— 插件列表里只有 AI Studio 一行。四个组件是本包的 dependencies，由本包挂载，不再各自占一行（和 @linxin666/dsh-web-all 同一个模式）。
+- **一行搞定** —— 插件列表里只有 AI Studio 一行。四个组件是本包的 dependencies，由本包的四个补丁行 `dsh-as-aistudio/edit` 等挂载（详情页因此能列出这 4 个组件），不再各自占一行（和 @linxin666/dsh-web-all 同一个模式）。
 - **组件仍是独立包** —— 每个都有自己的仓库与 cordis.patch.yml，单独安装照样工作；本包不复制任何组件逻辑：宿主半侧（路由、回滚、重放）就是组件自己，浏览器 factory 由 tools/vendor.mjs 从组件源码逐字剥离生成。
 - **副本不会漂移** —— npm run vendor 重新生成内联包，npm run build 重新生成大 bundle，verify:vendor / verify:build 是只读校验；测试里 vendor-sync / build-sync 会在副本过期时失败。
 - **一个挂了不影响其余** —— 四个 vendored factory 各自带 guard 挂载，一个抛错不会带走另外三个。
@@ -45,10 +45,11 @@ dsh plugin --profile web add dsh-as-aistudio
 
 ### 工作原理
 
-- **宿主半侧**（src/index.js）：await import 导入每个组件的宿主半侧并 ctx.plugin 挂进本 fiber —— 它们的 loopback 路由与回滚/重放服务因此就位。缺哪个报告哪个，绝不致命。
+- **四个组件行**（cordis.patch.yml + src/shell.js）：每个组件一条 `dsh-as-aistudio/<后缀>` 行，行名经本包 `exports` 全部指向同一个壳文件，壳读行配置里的 `config.plugin` 并 `import` + `ctx.plugin` 挂真正的组件包 —— 组件的 loopback 路由与回滚/重放服务因此就位。缺哪个报哪个，绝不致命；宿主半侧自己一个组件都不挂（再挂一次就是挂两遍，路由必冲突）。
 - **浏览器半侧**（src/client.js，由 tools/build.mjs 生成）：单一大 bundle —— studio 自己的浏览器半侧 + 四个组件的 factory（各自 var module / var exports / const react，靠 var 提升共处一个 scope）。bundle 是按 Loader 行下发的，所以这是它们到达页面的唯一方式。
 - **为什么宿主半侧不内联**：宿主代码对插件列表不可见，复制它只会凭空多出一份要维护的东西。
-- **状态面板**：读 GET /api/dsh-as-aistudio/status，对每个组件报告 installed / hostMounted / version / ownRows（ownRows 大于 0 表示它还被独立安装着）。
+- **状态面板**：读 GET /api/dsh-as-aistudio/status，对每个组件报告 installed / hostMounted / version / ownRows（ownRows 大于 0 表示它还被独立安装着）。hostMounted 不是自报，是从 Loader 读那一条行的 fiber 状态（只有 state === 2 才算活着），所以关掉的行、没装好的包、起失败的组件都会如实显示成因。
+- **挂载门**：浏览器半侧挂载前先读一次这道状态，只画 hostMounted 为真的组件 —— 宿主没挂起来就没有路由，按钮画出来也点不动。宿主答不上来时按「未知」处理，四个都挂（保持旧行为）。
 
 ### 已知限制
 
@@ -76,7 +77,7 @@ What makes AI Studio pleasant is not the model: it is that every step of a turn
 
 ### Features
 
-- **One row** — the plugin list shows only AI Studio. The four components are dependencies mounted by this package and no longer occupy rows of their own (the @linxin666/dsh-web-all pattern).
+- **One row** — the plugin list shows only AI Studio. The four components are dependencies mounted by this package's four patch rows (`dsh-as-aistudio/edit` and friends, which is why the detail page can list all four) and no longer occupy rows of their own (the @linxin666/dsh-web-all pattern).
 - **Components stay independent packages** — each keeps its own repo and its own cordis.patch.yml and works alone. This package copies no component logic: the host halves ARE the components, and the browser factories are lifted verbatim from their sources by tools/vendor.mjs.
 - **The vendored copy cannot drift** — npm run vendor regenerates it, npm run build regenerates the bundle, and verify:vendor / verify:build are read-only gates; the test suite fails on a stale copy.
 - **One failure does not take the rest** — each vendored factory mounts behind its own guard.
@@ -99,10 +100,11 @@ Use --profile desktop on the desktop app. The four components arrive as dependen
 
 ### How it works
 
-- **Host half** (src/index.js): imports each component's host half and applies it into this fiber with ctx.plugin, which is what puts its loopback routes and its rollback / replay services in place. A missing one is reported, never fatal.
+- **The four component rows** (cordis.patch.yml + src/shell.js): one row per component, named `dsh-as-aistudio/<suffix>`; every one of those names maps through this package's exports to the same shell, which reads `config.plugin` from the row and imports + applies the real component package — that is what puts its loopback routes and its rollback / replay services in place. A missing one is reported, never fatal. The host half itself mounts nothing: mounting here too would run every component twice and collide on its routes.
 - **Browser half** (src/client.js, generated by tools/build.mjs): one bundle — the studio's own browser half plus the four component factories, each with its own var module / var exports / const react in one scope via hoisting. A bundle is served per Loader row, so this is the only way they can reach the page.
 - **Why the host halves are not vendored**: host code is invisible to the plugin list, so copying it would only create a second thing to fix.
-- **The panel** reads GET /api/dsh-as-aistudio/status and reports installed / hostMounted / version / ownRows per component (ownRows greater than 0 means it is also installed standalone).
+- **The panel** reads GET /api/dsh-as-aistudio/status and reports installed / hostMounted / version / ownRows per component (ownRows greater than 0 means it is also installed standalone). hostMounted is not self-reported: it is read from the Loader row's fiber state (only state === 2 counts as live), so a disabled row, a missing package and a failed start each show their own reason.
+- **The mount gate**: before mounting anything, the browser half reads that status once and draws only the components it calls mounted — a component whose host half is not up has no routes, so its buttons would do nothing. A host that cannot answer is treated as unknown and all four mount, which is the pre-gate behaviour.
 
 ### Known limitations
 

package/cordis.patch.yml

@@ -1,23 +1,61 @@
-# dsh-as-aistudio bundle patch: the AI Studio composition, ONE row.
+# dsh-as-aistudio bundle patch: the AI Studio composition, ONE row in the plugin list.
 #
-# Self-contained: the plugin list shows exactly this row. The four components are
-# ordinary npm dependencies of this package (see package.json), not profile
+# Self-contained: the plugin list shows exactly this package. The four components
+# are ordinary npm dependencies of this package (see package.json), not profile
 # bundles, so they have no rows of their own and never appear in that list.
 #
-# The node half mounts each component HOST half (its loopback routes and its
-# rollback / replay services) by importing the installed package, so host logic
-# stays in the components and there is only one copy of it. The browser bundles
-# travel inside this package (src/client.js) because a browser bundle is served
-# per Loader row and the components have none.
+# Five rows are inserted here, and they are what "包含的组件" lists:
 #
-# A component that is not installed is reported by /api/dsh-as-aistudio/status and
-# is never mounted - the studio boots either way. Each component still has its own
-# cordis.patch.yml, so installing one standalone mounts it through its own row.
+#   1. this package's own row. Its name is the BARE package name on purpose: the
+#      client-module scanner treats an exact package specifier as a package and
+#      resolves <name>/package.json for the dsh.client declaration. That is the
+#      row the single browser bundle (src/client.js, which carries the studio's
+#      own half and all four vendored component factories) is served for.
 #
-# The entry name is the BARE package name on purpose: the client-module scanner
-# treats it as a package specifier and resolves <name>/package.json for the
-# dsh.client declaration, so a subpath entry would be cached as "not a client
-# package" and the browser half would silently never load.
+#   2-5. one row per component, named <this package>/<suffix>. Every one of those
+#      names resolves through package.json exports to src/shell.js, and the shell
+#      mounts the component named in config.plugin. Two properties ride on that
+#      name, both load-bearing:
+#
+#        * the plugin list is a deduplicated set of package identities, and a
+#          subpath of this package resolves to this package's identity - so the
+#          four extra rows cost exactly zero extra rows in that list;
+#        * the client-module scanner accepts only an exact package specifier, so a
+#          subpath row never becomes a second browser source. The components'
+#          browser halves keep travelling inside this package's bundle, and the
+#          scanner's negative verdict for these specifiers is what keeps the boot
+#          graph from growing a second entry per component.
+#
+# The component host halves (loopback routes, rollback / replay services) are not
+# copied anywhere: each row imports the real package, so host logic stays in the
+# components and there is exactly one copy of it. Each component also keeps its
+# own cordis.patch.yml, so installing one standalone mounts it through its own
+# row.
+#
+# A component that is not installed is not fatal: every row fails in isolation
+# (the Loader reports the missing module and the other entries still start), and
+# /api/dsh-as-aistudio/status reports hostMounted: false with the reason - which
+# is also what keeps its buttons off the page.
 - insert:
     - id: dsh-as-aistudio
       name: 'dsh-as-aistudio'
+- insert:
+    - id: dsh-as-aistudio-edit
+      name: 'dsh-as-aistudio/edit'
+      config:
+        plugin: 'dsh-edit-turn'
+- insert:
+    - id: dsh-as-aistudio-rerun
+      name: 'dsh-as-aistudio/rerun'
+      config:
+        plugin: 'dsh-rerun-turn'
+- insert:
+    - id: dsh-as-aistudio-delete
+      name: 'dsh-as-aistudio/delete'
+      config:
+        plugin: 'dsh-delete-turn'
+- insert:
+    - id: dsh-as-aistudio-markdown
+      name: 'dsh-as-aistudio/markdown'
+      config:
+        plugin: 'dsh-markdown-bubble'

package/docs/INTEROP.md

@@ -181,35 +181,50 @@ function foreignHideOn(row, own) {
 `node --test test/contract.test.js`；把探测状态的 400 改成 404 会让 2 例转红，给 `/apply` 加一个必填
 `confirmToken` 会让 5 例转红 —— 破坏契约会在本地就暴露，而不是等用户发现按钮点不动。
 
-## 11. 自包含架构（2026-10-02）
+## 11. 自包含架构（2026-10-02 重写，2026-10-04 改为四条目行）
 
-用户要求「插件列表里只有 AI Studio 一行」。平台的清单服务返回扁平数组，过滤条件是
-!entry.options.group && !entry.disabled && entry.fiber.state === 2
-（@deepseek-ai/dsh-plugin-package-inventory-deepseek/lib/index.js:100）—— 没有 hidden 开关，
-group 也只能把 group 自己藏起来，子条目照样平铺。所以「在跑等价于在列表里」是硬约束。
+用户要求「插件列表里只有 AI Studio 一行」。平台的清单服务（同一份 dsh_plugin_packages 也喂给模型）
+收的是**包身份集合**：先按 !entry.options.group && !entry.disabled && entry.fiber?.state === 2 取活跃行
+（@deepseek-ai/dsh-plugin-package-inventory-deepseek/lib/index.js:100），每条行经 barePackageName() 解析
+回它所属的包，再按 name + version 去重。于是有两条硬约束：
 
-唯一的出路是让四个组件不再是 Loader 行。本包因此改成自包含（@linxin666/dsh-web-all 同款）：
+1. **行名不能是组件自己的包名**，否则那个包成为新的身份，列表立刻多一行；
+2. **行名必须是本包的子路径**：barePackageName('dsh-as-aistudio/edit') === 'dsh-as-aistudio'，
+   解析回本包、与自己的行去重 —— 四条组件行因此不占列表行（@linxin666/dsh-web-all 同款：
+   它 19 条声明只占 1 行）。
+
+而详情页的「包含的组件」读的是另一件事：bundle 的 patch 里 insert 的每一行
+（@deepseek-ai/dsh-plugin-manager/lib/index.js:1864 declaredRows）。要让四个组件在那里出现，
+它们就必须真的是本包 patch 里的行 —— 这正是 2026-10-04 的改动：宿主半侧的运行时 ctx.plugin
+换成四条补丁行，行名是子路径、真正的包名写在 config.plugin 里，由 src/shell.js 挂载。
 
 | 部件 | 位置 | 说明 |
 | --- | --- | --- |
-| patch | cordis.patch.yml | 只插一行（本包自己） |
+| patch | cordis.patch.yml | 插 5 行：本包自己（裸包名，带 ./client）加四条 dsh-as-aistudio/<后缀> |
 | 组件身份 | package.json dependencies | 普通依赖，不是 profile bundle |
-| 宿主半侧 | src/index.js | await import 加 ctx.plugin 挂载组件的宿主半侧 |
-| 浏览器半侧 | src/client.js | 单一大 bundle（生成物） |
+| 宿主半侧 | src/shell.js | 组件行读 config.plugin，await import 后 ctx.plugin（等价于组件自己的行） |
+| 浏览器半侧 | src/client.js | 单一大 bundle（生成物），只由本包那一行下发 |
 | 内联来源 | src/vendor/*.js | tools/vendor.mjs 从组件源码逐字剥离 factory |
 | 缝合器 | tools/build.mjs | studio 加四个 factory 合成一个 bundle |
+| 状态 | src/index.js | /api/dsh-as-aistudio/status：hostMounted 从 Loader 行 fiber 状态读 |
+
+三条设计红线：
 
-两条设计红线：
+1. 宿主半侧不内联。宿主代码对列表不可见，复制它只会多出一份要维护的东西；组件行导入真正的包，
+   组件的路由、回滚、重放逻辑仍是唯一正本。
+2. 宿主半侧也不许自己挂。四个组件已由四条行挂载，host 再 ctx.plugin 一次就是同进程挂两遍，
+   路由必冲突；host 只回答状态。
+3. 浏览器半侧必须内联。bundle 是按 Loader 行下发的（/plugins/<行id>/client.js），且只有精确包说明符
+   会被客户端模块扫描器收进 boot graph —— 四条子路径行被跳过，组件也不会各自多出一份浏览器源。
 
-1. 宿主半侧不内联。宿主代码对列表不可见，复制它只会多出一份要维护的东西；import 加
-   ctx.plugin 就够，且组件的路由、回滚、重放逻辑仍是唯一正本。
-2. 浏览器半侧必须内联。bundle 是按 Loader 行下发的（/plugins/<行id>/client.js），
-   组件没有行就没有 bundle。
+状态与界面：hostMounted 只在行 fiber 的 state === 2 时为真（关掉的行、缺包、起失败各有自己的 reason）；
+浏览器半侧挂载前先读一次这道状态，只画 hostMounted 为真的组件，宿主答不上来时按「未知」全挂。
 
-防漂移：副本由工具生成、带 sha256 戳，npm run verify:vendor / verify:build 只读校验，
-测试在副本与组件源不一致时失败。手工编辑 src/vendor/* 或 src/client.js 是禁止的。
+防漂移：副本由工具生成、带 sha256 戳，node tools/vendor.mjs --check / node tools/build.mjs --check
+只读校验，测试在副本与组件源不一致时失败。手工编辑 src/vendor/* 或 src/client.js 是禁止的。
 
-实测（隔离实例，只装本包 tarball）：composed 184 行里组件行 0；/api/dsh-as-aistudio/status
-hostMounted 4/4；GET /dsh-rerun-turn/state 返回 400（edit-turn 的挂载探测契约未破）；
-boot graph 66 条里组件条目 0；served bundle 200 且含四个 factory。
+实测（2026-10-02 旧行结构，隔离实例只装本包 tarball）：composed 184 行里组件行 0；
+GET /dsh-rerun-turn/state 返回 400（edit-turn 的挂载探测契约未破）；boot graph 66 条里组件条目 0；
+served bundle 200 且含四个 factory。换成四条行之后，同一套门禁要补一条：四条行 fiber 必须 active，
+/api/dsh-as-aistudio/status 才会给出 hostMounted 4/4。
 

package/package.json

@@ -1,12 +1,16 @@
 {
   "name": "dsh-as-aistudio",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Google-AI-Studio-style turn controls for DeepSeek Harness, in one install: edit a prompt and re-run it, re-run a reply in place, delete a turn from the model context, and render sent prompts as Markdown. Self-contained: the plugin list shows this one row; the four components are dependencies mounted by it. Each still installs alone and works alone.",
   "type": "module",
   "main": "src/index.js",
   "exports": {
     ".": "./src/index.js",
     "./client": "./src/client.js",
+    "./edit": "./src/shell.js",
+    "./rerun": "./src/shell.js",
+    "./delete": "./src/shell.js",
+    "./markdown": "./src/shell.js",
     "./package.json": "./package.json"
   },
   "files": [
@@ -49,9 +53,9 @@
   },
   "dependencies": {
     "dsh-delete-turn": "^0.1.8",
-    "dsh-edit-turn": "^0.2.16",
+    "dsh-edit-turn": "^0.2.17",
     "dsh-markdown-bubble": "^0.1.4",
-    "dsh-rerun-turn": "^0.1.24"
+    "dsh-rerun-turn": "^0.1.25"
   },
   "dsh": {
     "bundle": {