dsh-collab-workbench 0.0.0-stage → 0.1.2

package/cordis.patch.yml

@@ -0,0 +1,7 @@
+# dsh-collab-workbench 协作工作台插件
+# 发布名 dsh-collab-workbench（原名 dsh-workbench 在 npm 已被他人占用）。
+# 运行时标识、RPC 端点与数据目录沿用 dsh-workbench，历史数据不受影响。
+# 完全自研，不依赖 ds-bot。挂载 host 半区；浏览器半区经 dsh.client manifest + ./client 导出发现。
+- insert:
+    - id: workbench
+      name: dsh-collab-workbench

package/icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" width="64" height="64"><rect x="5" y="10" width="54" height="44" rx="12" fill="#2563eb"/><path d="M21 19v-2a5 5 0 0 1 5-5h12a5 5 0 0 1 5 5v2M7 29h50" fill="none" stroke="#dbeafe" stroke-width="4"/><path d="m19 40 7 7 17-17" fill="none" stroke="#fff" stroke-width="5" stroke-linecap="round" stroke-linejoin="round"/></svg>

package/index.js

@@ -0,0 +1,86 @@
+// dsh-workbench: 协作工作台（自研实现，不依赖 ds-bot）。
+// 本插件以角色（Agent Session）与群组为中心，提供角色管理、群组管理、
+// 任务推进、群聊界面，并完全杜绝一对一私聊。
+//
+// 设计说明（参考 ds-bot 的机制，但代码独立编写）：
+//   - 每个角色 = 一个由 sessionController.create 创建的根 Session；
+//   - 群组消息流 = 自研 room 结构 + createUserMessage + agent.followup/steer；
+//   - 台账 = JSON 文件持久化于 $DSH_HOME/dsh-workbench/。
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+import * as ledger from './src/host/ledger.js'
+import * as agents from './src/host/agents.js'
+import * as groups from './src/host/groups.js'
+import * as channels from './src/host/channels.js'
+import * as tasks from './src/host/tasks.js'
+import * as files from './src/host/files.js'
+import * as policy from './src/host/policy.js'
+import * as memory from './src/host/memory.js'
+import * as api from './src/host/api.js'
+import * as update from './src/host/update.js'
+import * as tools from './src/host/tools.js'
+import * as executionTools from './src/host/execution-tools.js'
+import * as execution from './src/host/execution.js'
+import * as approvals from './src/host/approvals.js'
+import * as delivery from './src/host/delivery.js'
+import * as workItemSync from './src/host/work-item-sync.js'
+import * as verify from './src/host/verify.js'
+
+export const name = 'dsh-workbench'
+
+// P1 最小依赖：会话创建/解析、会话标题、工具注册。
+// 后续 P3/P4 会补充 storage 等。
+export const inject = [
+  'sessionController',
+  'sessionProjections',
+  'sessions',
+  'sessionTitle',
+  'workspaceRegistry',
+  'tools',
+  'llm',
+  'connection',
+]
+
+export function apply(ctx, config = {}) {
+  const home = config.home ?? join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'dsh-workbench')
+  const rt = {
+    ctx,
+    config,
+    home,
+    statePath: join(home, 'state.json'),
+    rolesPath: join(home, 'roles.json'),
+    groupsPath: join(home, 'groups.json'),
+    tasksPath: join(home, 'tasks.json'),
+  }
+
+  // P1：台账模块（roles/groups/tasks 三个 JSON 文件的读写）。
+  ledger.install(rt)
+  // P1：角色 Session 创建（最小版：create + resolveAgent + 命名）。
+  agents.install(rt)
+  // P8：常驻铁律提示（角色职责中注入工作台规范）。
+  policy.install(rt)
+  // P3：群组管理（命名校验 + 建群 + 同名目录脚手架 + 改名同步）。
+  groups.install(rt)
+  // P4：群消息流与 @ 投递（唯一沟通通道，杜绝单发消息）。
+  channels.install(rt)
+  // P5：任务管理（多工程师指派 + 优先级 + 自动 @ 投递）。
+  tasks.install(rt)
+  // P9：群附件（＋ 号上传 → 群目录「附件/」→ 消息文件卡片）。
+  files.install(rt)
+  // P1：记忆（个人+团队，工具+RPC）。
+  memory.install(rt)
+  execution.install(rt)
+  delivery.install(rt)
+  workItemSync.install(rt)
+  approvals.install(rt)
+  update.install(rt)
+  // P7：RPC API（/api/dsh-workbench，供 client UI 调用）。
+  api.install(rt)
+  // P3：工作台工具注册（角色/群组 CRUD 等）。
+  tools.install(rt)
+  executionTools.install(rt)
+  // P1：验证工具（dwb_verify / dwb_create_role），确认插件可加载、台账可读写、角色可创建。
+  verify.install(rt)
+
+  rt.startExecution()
+}

package/locale/en.json

@@ -0,0 +1 @@
+{"meta":{"title":"Collaboration Workbench","description":"Role and project collaboration with automatic task execution, native permission approvals in group chat and restart recovery."}}

package/locale/zh.json

@@ -0,0 +1 @@
+{"meta":{"title":"协作工作台","description":"角色与项目群协作，任务自动执行、群内原生权限审批与中断恢复。"}}

package/package.json

@@ -1,6 +1,63 @@
 {
   "name": "dsh-collab-workbench",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.2",
+  "description": "DeepSeek Harness 多 Agent 协作工作台：自定义角色、项目群聊、任务自动调度、群内权限审批与执行恢复", 
+  "keywords": [
+    "dsh-plugin",
+    "deepseek-harness",
+    "dsh",
+    "deepseek",
+    "workbench",
+    "collaboration"
+  ],
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "index.js",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg"
+  },
+  "files": [
+    "index.js",
+    "src/host/",
+    "src/client/approval-ui.js",
+    "src/client/update-ui.js",
+    "client.js",
+    "cordis.patch.yml",
+    "README.md",
+    "locale/*.json",
+    "icon.svg",
+    "scripts/*.mjs"
+  ],
+  "scripts": {
+    "build": "node scripts/build-approvals.mjs && node scripts/check.mjs",
+    "check": "node scripts/check.mjs",
+    "test": "node --import ./test/register.mjs --test \"test/*.test.js\"",
+    "test:native": "python3 test/native-e2e.py"
+  },
+  "peerDependencies": {
+    "zod": "^4.4.3",
+    "@deepseek-ai/cordis": "*",
+    "@deepseek-ai/dsh-api-session-controller": "*",
+    "@deepseek-ai/dsh-llm": "*",
+    "@deepseek-ai/dsh-session": "*",
+    "@deepseek-ai/dsh-session-title": "*",
+    "@deepseek-ai/dsh-tools": "*",
+    "@deepseek-ai/dsh-workspace": "*"
+  },
+  "dsh": {
+    "client": {
+      "platform": "web",
+      "inject": ["@deepseek-ai/dsh-api-session-controller", "@deepseek-ai/dsh-client-ui-session", "@deepseek-ai/dsh-client-ui-approval", "@deepseek-ai/dsh-client-locale", "@deepseek-ai/dsh-client-ui-workspace"]
+    },
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "devDependencies": {
+    "esbuild": "^0.28.2"
+  }
 }

package/scripts/build-approvals.mjs

@@ -0,0 +1,15 @@
+import {readFile,writeFile} from 'node:fs/promises'
+const target=new URL('../client.js',import.meta.url)
+let client=await readFile(target,'utf8')
+const source=(await readFile(new URL('../src/client/approval-ui.js',import.meta.url),'utf8')).replace(/^export /gm,'')
+const start='// BEGIN WORKBENCH APPROVAL UI',end='// END WORKBENCH APPROVAL UI'
+const block=`${start}\n${source}\n${end}\n`
+if(client.includes(start))client=client.slice(0,client.indexOf(start))+block+client.slice(client.indexOf(end)+end.length+1)
+else client=client.replace('// src/client/main.jsx',block+'\n// src/client/main.jsx')
+const updateSource=(await readFile(new URL('../src/client/update-ui.js',import.meta.url),'utf8')).replace(/^export /gm,'')
+const updateStart='// BEGIN WORKBENCH UPDATE UI',updateEnd='// END WORKBENCH UPDATE UI'
+const updateBlock=`${updateStart}\n${updateSource}\n${updateEnd}\n`
+if(client.includes(updateStart))client=client.slice(0,client.indexOf(updateStart))+updateBlock+client.slice(client.indexOf(updateEnd)+updateEnd.length+1)
+else client=client.replace('// src/client/main.jsx',updateBlock+'\n// src/client/main.jsx')
+await writeFile(target,client)
+console.log('Updated embedded approval and update UI (preserved existing workbench Client)')

package/scripts/check.mjs

@@ -0,0 +1,17 @@
+import {readFile,readdir,stat} from 'node:fs/promises'
+import {spawnSync} from 'node:child_process'
+import {fileURLToPath} from 'node:url'
+import {resolve} from 'node:path'
+const root=fileURLToPath(new URL('../',import.meta.url))
+const pkg=JSON.parse(await readFile(resolve(root,'package.json'),'utf8'))
+for(const file of ['index.js','client.js','src/client/update-ui.js',...(await readdir(resolve(root,'src/host'))).filter(f=>f.endsWith('.js')).map(f=>'src/host/'+f)]){
+ const result=spawnSync(process.execPath,['--check',resolve(root,file)],{encoding:'utf8'})
+ if(result.status!==0)throw new Error(file+'\n'+result.stderr)
+}
+for(const locale of ['en','zh']){
+ const doc=JSON.parse(await readFile(resolve(root,'locale',locale+'.json'),'utf8'))
+ if(!doc.meta?.title||!doc.meta?.description)throw new Error('Missing locale metadata')
+}
+if(pkg.exports['./icon']!=='./icon.svg'||(await stat(resolve(root,'icon.svg'))).size>256*1024)throw new Error('Invalid icon export')
+for(const file of ['src/host/execution.js','src/host/execution-engine.js','src/host/execution-tools.js'])await stat(resolve(root,file))
+console.log(`PASS ${pkg.name}@${pkg.version}: JavaScript syntax, locales, icon exports and execution modules`)

package/src/client/approval-ui.js

@@ -0,0 +1,117 @@
+// This source is embedded into the existing Client factory by scripts/build-approvals.mjs.
+// Never serialize a pending interaction or expose its answer as a Host endpoint/tool.
+export function matchApproval(item, pending) {
+  return !!item && item.outcome === 'pending' && !!item.callId &&
+    pending?.kind === 'approval' && pending.sessionId === item.sessionId &&
+    pending.callId === item.callId && pending.toolName === item.toolName &&
+    (pending.reason ?? '') === (item.reason ?? '') && pending.answerable === true &&
+    typeof pending.answer === 'function'
+}
+
+// Outcome/decidedAt never participate in position or identity. Stable sort keeps
+// source order for equal timestamps, including messages from the same millisecond.
+export function approvalTimeline(lines = [], items = []) {
+  return [...lines.map(line=>({kind:'message',time:line.time,line})),
+    ...items.map(item=>({kind:'approval',time:item.askedAt,item}))]
+    .sort((a,b)=>(Number(a.time)||0)-(Number(b.time)||0))
+}
+
+export function createApprovalUI(React, ctx, call) {
+  const h = React.createElement
+  const NS = 'dwbApprovals'
+  const zh = {title:'等待权限审批',allow:'允许一次',reject:'拒绝',open:'打开原会话',reason:'申请原因',command:'操作内容',permission:'申请权限',pending:'等待审批',sending:'已提交，等待宿主确认',expired:'已取消或过期',allowed:'已允许一次',rejected:'已拒绝',unavailable:'审批不可用',connecting:'正在连接原生审批…',history:'审批记录',error:'审批状态读取失败',unknown:'尚未找到可操作的原生请求，请打开原会话查看',task:'任务',scope:'仅授权本次操作，不修改长期权限',details:'权限审批详情'}
+  const en = {title:'Permission approval required',allow:'Allow once',reject:'Reject',open:'Open original session',reason:'Reason',command:'Operation',permission:'Requested access',pending:'Waiting for approval',sending:'Submitted; awaiting Host confirmation',expired:'Cancelled or expired',allowed:'Allowed once',rejected:'Rejected',unavailable:'Approval unavailable',connecting:'Connecting to native approval…',history:'Approval history',error:'Failed to read approval state',unknown:'No actionable native request; open its original session',task:'Task',scope:'Authorizes this operation only; does not change policy',details:'Permission approval details'}
+  ctx.effect(()=>ctx.locale.register(NS,{zh,en}),'workbench: approval locales')
+  const t = ctx.locale.bind(NS)
+  const locks = new WeakSet()
+  // Retain native requester scopes for the plugin lifetime, not the visible chat's
+  // lifetime: switching groups/tabs must not withdraw an unanswered approval.
+  const retained = new Map(), watched = new Map()
+  let active = true, checking = false
+  const updateRetentions = (groupId, ids) => {
+    if(!active)return
+    watched.set(groupId,new Set(ids ?? []))
+    const keep=new Set([...watched.values()].flatMap(ids=>[...ids]))
+    for(const [id,ref] of retained)if(!keep.has(id)){ref.release();retained.delete(id)}
+    for(const id of keep)if(!retained.has(id)){
+      const ref=ctx.sessions.retain(id,{source:'controllerOperation'})
+      retained.set(id,ref);ref.ready.catch(()=>{})
+    }
+  }
+  ctx.effect(()=>{
+    const check=async()=>{
+      if(!active||checking||!watched.size)return
+      checking=true
+      try {
+        const listing=await call('groups.list',{})
+        if(!active)return
+        const present=new Set((listing.groups??[]).filter(g=>g.status==='active').map(g=>g.id))
+        for(const id of [...watched.keys()]){
+          if(!present.has(id)){updateRetentions(id,[]);watched.delete(id);continue}
+          try {const data=await call('approvals.list',{groupId:id});updateRetentions(id,data.sessions)}catch{/* transport owns cancellation; never auto-answer */}
+        }
+      }catch{/* keep scopes through transient transport failures */}finally{checking=false}
+    }
+    const timer=setInterval(check,2000);timer.unref?.()
+    return()=>{active=false;clearInterval(timer);for(const ref of retained.values())ref.release();retained.clear();watched.clear()}
+  },'workbench: approval requester lifetimes')
+  const css = `.dwb-approvals{padding:12px 16px;display:flex;flex-direction:column;gap:10px;min-width:0}.dwb-approval{border:1px solid var(--dsw-alias-state-warn-secondary);border-radius:12px;background:var(--dsw-specific-input-major);overflow:hidden;color:var(--dsw-alias-label-primary)}.dwb-approval-head{background:var(--dsw-alias-state-warn-tertiary);color:var(--dsw-alias-state-warn-primary);padding:10px 16px;font-size:13px;line-height:18px;display:flex;gap:8px;flex-wrap:wrap}.dwb-approval-body{padding:12px 16px 0;font-size:13px;line-height:20px}.dwb-approval-body p{margin:0 0 8px}.dwb-approval-command{white-space:pre-wrap;overflow-wrap:anywhere;max-height:200px;overflow:auto;font-family:var(--ds-font-family-code);font-size:12px;color:var(--dsw-alias-label-secondary)}.dwb-approval-note{color:var(--dsw-alias-label-tertiary)}.dwb-approval-actions{display:flex;flex-wrap:wrap;justify-content:flex-end;gap:8px;padding:12px 16px}.dwb-approval button{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);border-radius:8px;padding:7px 12px;font-size:13px;cursor:pointer;min-height:34px}.dwb-approval button:hover:not(:disabled){background:var(--dsw-alias-bg-layer-2)}.dwb-approval button:focus-visible{outline:2px solid var(--dsw-alias-state-info-primary);outline-offset:2px}.dwb-approval button:disabled{opacity:.5;cursor:default}.dwb-approval .dwb-approval-allow{background:var(--dsw-alias-state-warn-tertiary);color:var(--dsw-alias-state-warn-primary);border-color:var(--dsw-alias-state-warn-secondary);font-weight:600}.dwb-approval .dwb-approval-reject:hover:not(:disabled){color:var(--dsw-alias-state-error-primary)}.dwb-approval-error{color:var(--dsw-alias-state-error-primary);padding:8px 16px;font-size:13px}`
+  function Card({item, pending, refresh}) {
+    const [sending,setSending]=React.useState(false),[error,setError]=React.useState(null)
+    const available=matchApproval(item,pending)
+    const answer=async outcome=>{
+      if(!matchApproval(item,pending)||locks.has(pending))return
+      locks.add(pending);setSending(true);setError(null)
+      try {await pending.answer(outcome);refresh()}
+      catch(e){setError(String(e?.message??e));if(pending.answerable){locks.delete(pending);setSending(false)}}
+    }
+    const status=item.outcome==='pending'?(sending?t('sending'):available?t('pending'):item.live?t('connecting'):t('expired')):
+      t({'allowed-once':'allowed',rejected:'rejected',cancelled:'expired',expired:'expired',unavailable:'unavailable'}[item.outcome]??'expired')
+    return h('section',{className:'dwb-approval','aria-label':t('details'),'data-approval-id':item.id},
+      h('div',{className:'dwb-approval-head'},h('strong',null,item.outcome==='pending'?t('title'):t('history')),h('span',null,item.roleName),item.taskId?h('span',null,`${t('task')} ${item.taskId}`):null),
+      h('div',{className:'dwb-approval-body'},item.taskTitle?h('p',null,item.taskTitle):null,
+        h('p',null,`${item.toolName} · ${status}`),item.reason?h('p',null,`${t('reason')}：${item.reason}`):null,
+        item.permission?h('p',null,`${t('permission')}：${item.permission}`):null,
+        item.command?h('pre',{className:'dwb-approval-command'},item.command):null,
+        h('p',{className:'dwb-approval-note'},item.outcome==='pending'?t('scope'):status),
+        item.outcome==='pending'&&!available?h('p',{className:'dwb-approval-note'},t('unknown')):null),
+      error?h('div',{className:'dwb-approval-error',role:'alert'},error):null,
+      h('div',{className:'dwb-approval-actions'},
+        h('button',{type:'button',onClick:()=>ctx.uiWorkspace.openSession(item.sessionId)},t('open')),
+        item.outcome==='pending'?h(React.Fragment,null,
+          h('button',{type:'button',className:'dwb-approval-reject',disabled:!available||sending,onClick:()=>answer('rejected')},t('reject')),
+          h('button',{type:'button',className:'dwb-approval-allow',disabled:!available||sending,onClick:()=>answer('allowed-once')},t('allow'))):null))
+  }
+  return function GroupApprovals({groupId,useSessionStatus,lines=[],renderMessage}) {
+    const [snapshot,setSnapshot]=React.useState({groupId,items:[],sessions:[],errors:[]}),[error,setError]=React.useState(null)
+    const refs=React.useRef(retained),generation=React.useRef(0),refreshRef=React.useRef(()=>{})
+    const statuses=useSessionStatus(map=>map)
+    const [,localeTick]=React.useState(0)
+    React.useEffect(()=>ctx.locale.subscribe(()=>localeTick(n=>n+1)),[])
+    React.useEffect(()=>{
+      const gen=++generation.current;let dead=false,busy=false
+      const refresh=async()=>{
+        if(dead||busy)return;busy=true
+        try{
+          const data=await call('approvals.list',{groupId})
+          if(dead||generation.current!==gen)return
+          setSnapshot({...data,groupId});setError(data.errors?.length?t('error'):null)
+          updateRetentions(groupId,data.sessions)
+        }catch(e){if(!dead)setError(String(e?.message??e))}finally{busy=false}
+      }
+      refreshRef.current=refresh;refresh();const timer=setInterval(refresh,1200)
+      return()=>{dead=true;++generation.current;clearInterval(timer)}
+    },[groupId])
+    // Never show or answer a previous group's snapshot while its replacement loads.
+    const items=snapshot.groupId===groupId?snapshot.items:[]
+    const visibleError=snapshot.groupId===groupId?error:null
+    if(!items.length&&!visibleError&&!renderMessage)return null
+    const timeline=approvalTimeline(lines,items)
+    return h(React.Fragment,null,h('style',null,css),visibleError?h('div',{className:'dwb-approval-error',role:'alert'},visibleError):null,
+      ...timeline.map((entry,index)=>{
+        if(entry.kind==='message')return renderMessage?.(entry.line,timeline[index-1]?.kind==='message'?timeline[index-1].line:null)
+        const item=entry.item
+        return h('div',{className:'dwb-approvals',key:`approval:${item.sessionId}:${item.id}`},h(Card,{item,pending:items.filter(a=>a.outcome==='pending'&&a.sessionId===item.sessionId&&a.callId===item.callId).length===1?statuses?.get(item.sessionId)?.pendingInteraction:null,refresh:()=>refreshRef.current()}))
+      }))
+  }
+}

package/src/client/update-ui.js

@@ -0,0 +1,73 @@
+// Update controls for the existing Workbench panel; embedded into client.js at build time.
+// All styles live in the components that render them, so no other page owns their CSS.
+export function createUpdateUI(React, ctx, call) {
+  const h = React.createElement
+  const NS = 'dwbUpdates'
+  const zh = {
+    about:'关于', cloud:'有新版本', title:'协作工作台', current:'当前版本', latest:'最新版本', check:'检查更新', checking:'正在检查…', update:'更新', updating:'正在安装…', restart:'更新已安装，请重启 DSH 后使用', ready:'发现新版本', currentState:'已是最新版本', local:'当前从本地文件安装，请从原安装来源更新。', other:'当前安装来源不支持在线更新。', pending:'尚未检查更新', failed:'检查或安装失败', confirm:'确认安装协作工作台 {version}？安装后需要重启 DSH。', release:'版本信息', inaccessible:'此版本暂不提供更新检查。', error:'无法检查更新，请检查网络后重试。'
+  }
+  const en = {
+    about:'About', cloud:'Update available', title:'Collaboration Workbench', current:'Installed version', latest:'Latest version', check:'Check for updates', checking:'Checking…', update:'Update', updating:'Installing…', restart:'Update installed. Restart DSH to use it.', ready:'New version available', currentState:'Up to date', local:'Installed from a local file; update it from the original source.', other:'Updates are not available for this install source.', pending:'Not checked yet', failed:'Update check or install failed', confirm:'Install Collaboration Workbench {version}? Restart DSH afterwards.', release:'Release information', inaccessible:'Update checks are unavailable in this version.', error:'Could not check for updates. Check your network and try again.'
+  }
+  ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'collaboration workbench: update locales')
+  const t = ctx.locale.bind(NS)
+  const css = `.dwb-update-cloud{width:52px;min-height:42px;padding:5px 0;border:1px solid var(--dsw-alias-border-l2);border-radius:10px;background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-brand-primary);cursor:pointer;display:flex;align-items:center;justify-content:center;flex-direction:column;gap:2px}.dwb-update-cloud:hover{background:var(--dsw-alias-bg-layer-2)}.dwb-update-cloud:focus-visible,.dwb-update-about button:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.dwb-update-cloud span{font-size:10px}.dwb-update-about{flex:1;min-width:0;overflow:auto;background:var(--dsw-alias-bg-base);color:var(--dsw-alias-label-primary);padding:56px 24px 24px}.dwb-update-card{max-width:640px;padding:20px;border:1px solid var(--dsw-alias-border-l2);border-radius:12px;background:var(--dsw-alias-bg-layer-1)}.dwb-update-about h2{font-size:18px;margin:0 0 18px}.dwb-update-about dl{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:10px 20px;margin:0 0 18px}.dwb-update-about dt{color:var(--dsw-alias-label-secondary)}.dwb-update-about dd{margin:0;overflow-wrap:anywhere}.dwb-update-state{font-size:13px;line-height:1.5;color:var(--dsw-alias-label-secondary);margin:0 0 16px}.dwb-update-error{color:var(--dsw-alias-state-error-primary)}.dwb-update-actions{display:flex;gap:10px;flex-wrap:wrap}.dwb-update-about button{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);border-radius:8px;padding:7px 12px;min-height:34px;cursor:pointer}.dwb-update-about button:hover:not(:disabled){background:var(--dsw-alias-bg-layer-2)}.dwb-update-about button:disabled{opacity:.5;cursor:default}.dwb-update-about button.dwb-update-primary{background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-brand-primary);border-color:var(--dsw-alias-brand-primary)}.dwb-update-about button.dwb-update-primary:hover:not(:disabled){filter:brightness(1.06)}`
+  function useUpdates() {
+    const [status, setStatus] = React.useState({ phase:'idle', source:'unknown', current:null, latest:null, available:false })
+    const [error, setError] = React.useState(null)
+    const [busy, setBusy] = React.useState(false)
+    const refresh = React.useCallback(async (fresh = false) => {
+      setBusy(true)
+      setError(null)
+      try {
+        const value = await call('updates.check', { fresh })
+        setStatus(value)
+        return value
+      } catch (failure) {
+        setError(String(failure?.message ?? failure))
+        return null
+      } finally { setBusy(false) }
+    }, [])
+    React.useEffect(() => {
+      let active = true
+      const check = async () => {
+        try { const value = await call('updates.check', { fresh:false }); if (active) setStatus(value) }
+        catch (failure) { if (active) setError(String(failure?.message ?? failure)) }
+      }
+      void check()
+      const timer = setInterval(check, status.phase === 'installing' ? 2_000 : 60_000)
+      return () => { active = false; clearInterval(timer) }
+    }, [status.phase])
+    const install = React.useCallback(async () => {
+      if (!status.available || busy || !window.confirm(t('confirm').replace('{version}', status.latest))) return
+      setBusy(true)
+      setError(null)
+      try { setStatus(await call('updates.install')) }
+      catch (failure) { setError(String(failure?.message ?? failure)) }
+      finally { setBusy(false) }
+    }, [status.available, status.latest, busy])
+    return {status, error, busy, refresh, install}
+  }
+  function UpdateCloud({ onClick }) {
+    return h(React.Fragment, null, h('style', null, css),
+      h('button', { type:'button', className:'dwb-update-cloud', title:t('cloud'), 'aria-label':t('cloud'), onClick },
+        h('svg', {width:18,height:18,viewBox:'0 0 24 24',fill:'none',stroke:'currentColor',strokeWidth:1.8,'aria-hidden':true},
+          h('path',{d:'M7 18h11a4 4 0 0 0 .2-8A6.5 6.5 0 0 0 5.6 9 4.5 4.5 0 0 0 7 18Z'}),
+          h('path',{d:'m12 15 0-6m-2.5 2.5L12 9l2.5 2.5'})),
+        h('span',null,t('update'))))
+  }
+  function UpdateAbout({ status, error, busy, refresh, install }) {
+    const state = status.phase === 'installed' ? t('restart') : status.phase === 'installing' ? t('updating') : error || status.phase === 'failed' ? t('failed') : status.source === 'local' ? t('local') : status.source !== 'registry' ? t('other') : status.available ? t('ready') : status.checkedAt ? status.latest ? t('currentState') : t('error') : t('pending')
+    const canUpdate = status.available && status.phase !== 'installing' && status.phase !== 'installed'
+    return h('section', {className:'dwb-update-about', 'aria-label':t('title')},
+      h('style',null,css),
+      h('div',{className:'dwb-update-card'},
+        h('h2',null,t('title')),
+        h('dl',null,h('dt',null,t('current')),h('dd',null,status.current ?? '—'),h('dt',null,t('latest')),h('dd',null,status.latest ?? '—')),
+        h('p',{className:`dwb-update-state ${error || status.phase === 'failed' ? 'dwb-update-error' : ''}`,role:error || status.phase === 'failed' ? 'alert':undefined}, state, error ? `: ${error}` : status.phase === 'failed' && status.error ? `: ${status.error}` : ''),
+        h('div',{className:'dwb-update-actions'},
+          h('button',{type:'button',onClick:()=>refresh(true),disabled:busy || status.phase === 'installing'},busy?t('checking'):t('check')),
+          canUpdate ? h('button',{type:'button',className:'dwb-update-primary',onClick:install,disabled:busy},t('update')) : null)))
+  }
+  return {useUpdates, UpdateCloud, UpdateAbout, t}
+}

package/src/host/agents.js

@@ -0,0 +1,235 @@
+// agents.js —— 人员（Agent Session）管理。
+// 每名人员 = 一个根 Session（sessionController.create + 命名 + 可选模型选择）；
+// 职责描述作为会话首条上下文消息注入（并在每次职责更新时追加最新版）。
+import { join } from 'node:path'
+import { createUserMessage } from '@deepseek-ai/dsh-llm'
+
+// 内置预设角色模板（规格 R-1：五类）。
+export const PRESET_ROLES = [
+  { type: '研发负责人', defaultInstructions: '接收需求、分解任务、协调进度、验收交付。' },
+  { type: '架构师', defaultInstructions: '技术方案设计、架构评审。' },
+  { type: '高级工程师', defaultInstructions: '代码实现、联调、自测。' },
+  { type: '测试工程师', defaultInstructions: '测试用例设计、质量验证。' },
+  { type: '产品经理', defaultInstructions: '需求澄清、验收标准定义、价值把关。' },
+]
+
+// 角色名合法性：不允许空白、斜杠、反斜杠、控制字符。
+const NAME_BAD = /[\/\\\u0000-\u001f]/
+const GROUP_SUFFIX = '沟通群' // 保留：群组命名规范在 groups.js
+
+export function install(rt) {
+  const { ctx } = rt
+
+  // 确保团队工作区存在（无目录群的兜底）。
+  // ⚠️ 必须按插件专属路径查找/创建——旧实现取 list[0]（注册表第一个工作区），
+  // 会把无目录群的成员会话建进任意用户工作区（2026-10-16 复现：建进了
+  // 残留的僵尸工作区）。
+  rt.ensureWorkspace = async () => {
+    const { workspaceRegistry } = ctx
+    const path = join(rt.home, 'workspace')
+    try {
+      const existing = await workspaceRegistry.resolveByPath?.(path)
+      if (existing) return existing.id
+    } catch { /* 查询失败走创建 */ }
+    // 真实 registry.create 要求目录已存在——先建目录再注册。
+    const { mkdir } = await import('node:fs/promises')
+    await mkdir(path, { recursive: true }).catch(() => {})
+    const workspace = await workspaceRegistry.create(path, 'DSH Workbench')
+    return workspace.id
+  }
+
+  // 解析 Session 对应的 Agent。
+  rt.resolveAgent = async (sessionId) => {
+    const resolved = await ctx.sessionController.resolveAgent(sessionId)
+    if (resolved && 'error' in resolved) {
+      throw new Error(resolved.error?.message ?? 'Session unavailable')
+    }
+    return resolved.agent
+  }
+
+  // 为人员创建根 Session：create → resolveAgent → 命名 →（可选）选择模型。
+  // model 形如 "provider/model"；选择失败不阻断创建。
+  rt.createRoleSession = async (roleName, model) => {
+    const workspaceId = await rt.ensureWorkspace()
+    const { sessionId } = await ctx.sessionController.create({ workspaceId })
+    const agent = await rt.resolveAgent(sessionId)
+    await ctx.sessionTitle.rename(agent.session, roleName)
+    if (model) await rt.applySessionModel(sessionId, model)
+    return { sessionId, agent }
+  }
+
+  // 给已有 Session 应用模型选择（"provider/model"）。
+  rt.applySessionModel = async (sessionId, model) => {
+    const sel = parseModel(model)
+    if (!sel) return false
+    try {
+      await ctx.sessionController.selectModel({ sessionId, ...sel })
+      return true
+    } catch (error) {
+      console.warn('[dsh-workbench] selectModel failed:', model, error?.message ?? error)
+      return false
+    }
+  }
+
+  // 职责变更后：同步到该人员所在的每个群会话（带最新职责）。
+  rt.syncDutyToGroups = async (role) => {
+    for (const group of rt.listGroups() ?? []) {
+      const entry = (group.sessions ?? {})[role.id]
+      if (!entry?.id) continue
+      try {
+        const agent = await rt.resolveAgent(entry.id)
+        agent.followup(createUserMessage({
+          content: [{ type: 'text', text: `【职责已更新】你的最新职责：${role.instructions || '（未指定，按群组安排）'}（你的 roleId 仍是 ${role.id}）` }],
+          source: { kind: 'dsh-workbench', form: 'duty' },
+        }))
+        await ctx.sessions.flush(agent.session)
+      } catch { /* 单个群会话失败不影响其他 */ }
+    }
+  }
+
+  // 给人员 Session 追加一条职责上下文消息（首条注入 & 更新时刷新）。
+  rt.sendRoleContextMessage = async (role, { initial = false } = {}) => {
+    if (!role?.sessionId) return false
+    try {
+      const agent = await rt.resolveAgent(role.sessionId)
+      const head = initial ? '【你的身份与职责（常驻指令）】' : '【职责已更新】'
+      const lines = [
+        head,
+        `你是协作工作台中的人员「${role.name}」。`,
+        role.instructions ? `你的职责：${role.instructions}` : '（未指定具体职责，按群组安排工作）',
+        '工作规范：所有沟通只发生在群组中，用 @人员名 点名指定回答者；不存在一对一私聊；收到消息后把结论回复到群组。',
+      ]
+      const message = createUserMessage({
+        content: [{ type: 'text', text: lines.join('\n') }],
+        source: { kind: 'dsh-workbench', form: 'duty' },
+      })
+      agent.followup(message)
+      await ctx.sessions.flush(agent.session)
+      return true
+    } catch (error) {
+      console.warn('[dsh-workbench] sendRoleContextMessage failed:', error?.message ?? error)
+      return false
+    }
+  }
+
+  // 名字清洗与校验。
+  const cleanName = (raw) => String(raw ?? '').trim()
+  rt.validateRoleName = (raw) => {
+    const name = cleanName(raw)
+    if (!name) throw new Error('角色名称不能为空')
+    if (NAME_BAD.test(name)) throw new Error('角色名称不能包含 /、\\ 或控制字符')
+    return name
+  }
+
+  // 预设类型查询。
+  rt.presetRole = (type) => PRESET_ROLES.find(item => item.type === type)
+
+  // ---- 新建 ----
+  // name 角色名；type 预设类型或自定义类型；instructions 职责描述；model 可选模型。
+  rt.createRole = async ({ name: rawName, type, instructions, model }) => {
+    const name = rt.validateRoleName(rawName)
+    if (rt.listRoles().some(item => item.name === name)) {
+      throw new Error(`角色「${name}」已存在`)
+    }
+    const preset = rt.presetRole(type)
+    const role = {
+      id: rt.nextId('role'),
+      name,
+      type: preset ? preset.type : (type ?? '自定义'),
+      // 职责只存纯净内容：用户留空则回填预设默认职责（|| 使空串也回填）。
+      instructions: (String(instructions ?? '').trim()) || preset?.defaultInstructions || '',
+      model: model ?? null,
+      sessionId: null, // 惰性创建：P2 起 Session 在首次启用/加入群组时创建
+      status: 'active',
+      createdAt: Date.now(),
+      updatedAt: Date.now(),
+    }
+    // V5：不再创建根会话（职责注入改为群会话种子消息），只在台账登记。
+    // 根会话会在 DSH 侧栏产生多余条目；群会话按需创建且带标题。
+    rt.addRole(role)
+    return role
+  }
+
+  // ---- 列出 / 查询 ----
+  rt.listRoles = () => rt.state.roles.items ?? []
+  rt.getRole = (id) => rt.state.roles.items.find(item => item.id === id)
+  rt.findRoleByName = (name) => rt.state.roles.items.find(item => item.name === name)
+
+  // ---- 编辑 ----
+  rt.updateRole = (id, patch) => {
+    for (const key of Object.keys(patch)) if (!['name','type','instructions','model'].includes(key)) throw new Error(`不允许修改角色字段 ${key}`)
+    const current = rt.getRole(id)
+    if (!current) throw new Error(`角色 ${id} 不存在`)
+    if (patch.name !== undefined) {
+      const newName = rt.validateRoleName(patch.name)
+      const dup = rt.state.roles.items.find(item => item.id !== id && item.name === newName)
+      if (dup) throw new Error(`角色「${newName}」已存在`)
+      patch.name = newName
+    }
+    const updated = rt.updateRoleRecord(id, {
+      ...patch,
+      updatedAt: Date.now(),
+    })
+    return updated
+  }
+
+  // ---- 停用 / 启用 ----
+  rt.setRoleStatus = async (id, status) => {
+    if (!['active','disabled'].includes(status)) throw new Error('角色状态必须是 active/disabled')
+    const current = rt.getRole(id)
+    if (!current) throw new Error(`角色 ${id} 不存在`)
+    const updated = rt.updateRoleRecord(id, { status, updatedAt: Date.now() })
+    if (status === 'disabled') {
+      await rt.pauseRoleExecution?.(null, id)
+      for (const group of rt.listGroups()) if (group.members.includes(id)) await rt.stopPerson?.(group.id,id)
+    }
+    await rt.saveAll?.()
+    return updated
+  }
+
+  // ---- 删除 ----
+  // 有群组/任务关联时返回拒绝原因（由调用方决定是否强制）。
+  rt.deleteRole = (id) => {
+    const current = rt.getRole(id)
+    if (!current) throw new Error(`角色 ${id} 不存在`)
+    const groupRef = (rt.listGroups() ?? []).find(g => (g.members ?? []).includes(id))
+    const taskRef = (rt.listTasks() ?? []).find(t => (t.assignees ?? []).includes(id))
+    if (groupRef) return { refused: true, reason: `角色仍在群组「${groupRef.name}」中` }
+    if (taskRef) return { refused: true, reason: `角色仍被任务「${taskRef.title}」指派` }
+    const ok = rt.removeRole(id)
+    return { refused: !ok, reason: ok ? undefined : '角色不存在' }
+  }
+
+  rt.forceDeleteRole = async id => {
+    const role = rt.getRole(id)
+    if (!role) throw new Error('角色不存在')
+    await rt.setRoleStatus(id, 'disabled')
+    for (const group of rt.listGroups()) {
+      if (group.members.includes(id)) rt.updateGroupRecord(group.id,{members:group.members.filter(m=>m!==id),admins:(group.admins??[]).filter(m=>m!==id)})
+    }
+    for (const task of rt.listTasks()) if (task.assignees.includes(id)) {
+      const updated = rt.updateTaskRecord(task.id,{assignees:task.assignees.filter(a=>a!==id),updatedAt:Date.now()})
+      await rt.taskChanged?.(updated,task)
+    }
+    rt.removeRole(id);await rt.saveAll?.()
+    return {deleted:true,role:role.name}
+  }
+
+  // ledger 底层记录更新（避免与 ledger.updateRole 递归冲突）。
+  rt.updateRoleRecord = (id, patch) => {
+    const index = rt.state.roles.items.findIndex(item => item.id === id)
+    if (index === -1) return undefined
+    rt.state.roles.items[index] = { ...rt.state.roles.items[index], ...patch }
+    rt.touch()
+    return rt.state.roles.items[index]
+  }
+}
+
+// "provider/model" → { provider, model }；不合法返回 null。
+function parseModel(model) {
+  const raw = String(model ?? '').trim()
+  if (!raw) return null
+  const i = raw.indexOf('/')
+  if (i <= 0 || i >= raw.length - 1) return null
+  return { provider: raw.slice(0, i), model: raw.slice(i + 1) }
+}