dsh-tender-workbench 0.5.10 → 0.5.11

package/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to `dsh-tender-workbench` are documented in this file.
 
 ## [Unreleased]
 
+## [0.5.11] - 2026-09-15
+
+- 采用 UX-49：仅业务入口新建 Session 预填一次原生可编辑引导；双快照保护草稿、附件、IME 与晚到回调，不抢焦点、不自动发送/调用工具/开台，清空及历史恢复不补回。
+- 以稳定模板 ID、版本和精确指纹区分未改系统引导与用户内容；缺项/未替换占位符由本业务澄清，空条件不能发起查询。
+- 普通对话不实例化空业务 Projection；保留 UX-48 接纳后展开、只读 Profile 历史、来源归属、真实 progress、人工复核与不可变交付。
+- 补原生宿主 present/absent、四插件草稿隔离及重启恢复回归，记录公开输入能力缺失时安全跳过的兼容边界。
+
 ## [0.5.10] - 2026-09-14
 
 - Open the current tender workbench once after Host-observed submission admission. Prompt draft fill, failed sends, restored history and later model events do not open it.

package/README.en.md

@@ -10,9 +10,9 @@ Related agents: [数据清洗补全](https://github.com/duhu2000/dsh-data-cleani
 
 `dsh-tender-workbench` is an open-source DeepSeek Harness plugin for finding, screening, reviewing, and delivering tender opportunities. It combines authorized `qcc-tender` data, deterministic screening rules, bounded Agent analysis, explicit human decisions, and immutable Excel/PDF reports in one Session-scoped Better Sidebar workbench.
 
-Current stable version: **0.5.10** (stable release).
+Current stable version: **0.5.11** (stable release).
 
-Version 0.5.10 opens the current workbench once after Host-observed submission admission. Draft fill and later progress never reopen it. Scoped home branding, Profile history and actual execution telemetry are retained. See the [release record](docs/RELEASE-0.5.10.md) for publication status and verification boundaries.
+Version 0.5.11 adds a one-time native introductory draft for new tender Sessions. Existing text, attachments, IME composition and user-cleared drafts are protected; initialization never sends, calls tools or opens the workbench. UX-48 admission reveal, Profile history and actual execution telemetry are retained. See the [release record](docs/RELEASE-0.5.11.md) for publication status and verification boundaries.
 
 Base mode targets the full DSH 0.1.2-rc.1 distribution; Better Sidebar 0.18.1 is optional and only provides the visual workbench. Legacy hosts remain unsupported. Back up the complete Profile and verify dependencies before upgrading.
 
@@ -84,11 +84,11 @@ dsh web --no-open
 
 Optionally enable the visual workbench with `dsh plugin --profile web add dsh-better-sidebar@0.18.1`, enable the tender Tab and fully restart the Profile.
 
-To install the exact 0.5.10 release:
+To install the exact 0.5.11 release:
 
 ```sh
 dsh plugin --profile web add 'dsh-mcp-connector@>=0.2.31'
-dsh plugin --profile web add dsh-tender-workbench@0.5.10
+dsh plugin --profile web add dsh-tender-workbench@0.5.11
 ```
 
 To install base mode from an independent checkout:
@@ -105,7 +105,7 @@ To install a packed build:
 
 ```sh
 dsh plugin --profile web add 'dsh-mcp-connector@>=0.2.31'
-dsh plugin --profile web add ./dsh-tender-workbench-0.5.10.tgz
+dsh plugin --profile web add ./dsh-tender-workbench-0.5.11.tgz
 dsh web --no-open
 ```
 
@@ -122,11 +122,11 @@ dsh plugin --profile web remove dsh-tender-workbench
 Upgrade an existing installation by installing the stable version and fully restarting the Web profile:
 
 ```sh
-dsh plugin --profile web add dsh-tender-workbench@0.5.10
+dsh plugin --profile web add dsh-tender-workbench@0.5.11
 dsh web --no-open
 ```
 
-Version 0.5.10 retains Workspace ownership, the ordinary Session guard and the 0.5.6 snapshotEvents/turn-start authorization contract. Business state remains Session-local; Profile history stores metadata only, never writable projections or download capabilities. Existing unopened Sessions are not scanned: reopening indexes their current task, without restoring old snapshots. Back up the Profile's `.dsh-tender-workbench/history-v1.json` alongside task directories. Live MCP is not verified. Roll back the complete backed-up host/plugin combination, not an old plugin alone on the new host.
+Version 0.5.11 retains Workspace ownership, the ordinary Session guard and the 0.5.6 snapshotEvents/turn-start authorization contract. Business state remains Session-local; Profile history stores metadata only, never writable projections or download capabilities. Existing unopened Sessions are not scanned: reopening indexes their current task, without restoring old snapshots. Back up the Profile's `.dsh-tender-workbench/history-v1.json` alongside task directories. Live MCP is not verified. Roll back the complete backed-up host/plugin combination, not an old plugin alone on the new host.
 
 ## Using the workbench
 

package/README.md

@@ -7,7 +7,7 @@
 招投标智能体：支持招投标搜索、招标查询、投标查询、标讯查询、拟建项目与项目筛选，辅助商机发现、人工复核及 Excel/PDF 导出，使用客户自备授权的企查查 MCP。
 
 ```sh
-dsh plugin --profile web add dsh-tender-workbench@0.5.10
+dsh plugin --profile web add dsh-tender-workbench@0.5.11
 ```
 
 请先满足下文的 DSH、连接器及侧边栏依赖要求；安装后完整停止并重启对应 Profile。
@@ -27,9 +27,9 @@ dsh plugin --profile web add dsh-tender-workbench@0.5.10
 
 > 面向国内招投标团队的 DeepSeek Harness 开源智能体插件：在一个会话级工作台内完成标讯与拟建项目查询、确定性规则初筛、限定范围智能分析、人工复核，以及 Excel/PDF 报告交付。
 >
-> 当前稳定版本：**0.5.10**（正式版本）
+> 当前稳定版本：**0.5.11**（正式版本）
 
-0.5.10 在任务提交被 Host 接纳后自动展开对应工作台；回填草稿不展开，手动收起后不会被后续进度反复拉开。保留首页品牌、Profile 历史和真实执行进度。发布状态及验收边界见 [发布记录](docs/RELEASE-0.5.10.md)。
+0.5.11 新增 UX-49 一次性原生首页引导，保护已有文字、附件、IME 输入和用户清空；不自动发送、调用工具或打开工作台。保留 UX-48 接纳后展开、Profile 历史和真实执行进度。发布状态及验收边界见 [发布记录](docs/RELEASE-0.5.11.md)。
 
 [![CI](https://github.com/duhu2000/dsh-tender-workbench/actions/workflows/ci.yml/badge.svg)](https://github.com/duhu2000/dsh-tender-workbench/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/dsh-tender-workbench)](https://www.npmjs.com/package/dsh-tender-workbench)
@@ -39,6 +39,8 @@ dsh plugin --profile web add dsh-tender-workbench@0.5.10
 
 ## 产品简介
 
+UX-49 一次性原生首页引导只对本菜单新建的空业务 Session 生效，不覆盖已有文字/附件、IME 输入或清空后的草稿；不自动查询或打开工作台。依赖 DSH 0.1.2-rc.1 公开输入 shell、编辑器状态与可写浏览器存储，能力缺失时跳过预填。采用与验收边界见 [UX-49 采用记录](https://github.com/duhu2000/dsh-tender-workbench/blob/main/docs/UX49-INITIAL-DRAFT-ADOPTION.md)。
+
 `dsh-tender-workbench` 是 DeepSeek Harness 的 Host + Client 插件，适合需要持续发现、筛选、复核和交付招投标机会的国内业务团队。插件连接客户已安装并授权的 `qcc-tender` MCP，以结构化标讯事实为基础，将规则判断、Agent 建议和人工决策明确分开，形成可追溯的工作流。
 
 完整业务闭环为：
@@ -75,10 +77,10 @@ dsh web --no-open
 
 需要可视化工作台时，再自选安装 `dsh plugin --profile web add dsh-better-sidebar@0.18.1`、在宿主设置启用招投标 Tab，并完整重启。无需侧栏也可使用下方列明的基础功能。
 
-安装指定的 `0.5.10` 版本：
+安装指定的 `0.5.11` 版本：
 
 ```sh
-dsh plugin --profile web add dsh-tender-workbench@0.5.10
+dsh plugin --profile web add dsh-tender-workbench@0.5.11
 ```
 
 移除插件：
@@ -146,11 +148,11 @@ node scripts/check-host-compatibility.mjs --host-root /实际路径/node_modules
 从已有版本升级：
 
 ```sh
-dsh plugin --profile web add dsh-tender-workbench@0.5.10
+dsh plugin --profile web add dsh-tender-workbench@0.5.11
 dsh web --no-open
 ```
 
-0.5.10 保留 Workspace 归组、0.5.6 可选侧栏与 `snapshotEvents()` / `turn/start` 授权绑定。业务任务仍属于原 Session；Profile 历史只存摘要，不复制旧 projection，也不自动搬迁未分组任务。旧会话在重新打开后才补入当前任务摘要，历史页不恢复旧快照到当前任务。索引位于对应 Profile 的 `.dsh-tender-workbench/history-v1.json`，备份时一并保留。真实 MCP 连接未核验。回退应恢复备份的完整已验证宿主/插件组合，不能在新版宿主上单独安装原始 0.5.4 或更早版本。
+0.5.11 保留 Workspace 归组、0.5.6 可选侧栏与 `snapshotEvents()` / `turn/start` 授权绑定。业务任务仍属于原 Session；Profile 历史只存摘要，不复制旧 projection，也不自动搬迁未分组任务。旧会话在重新打开后才补入当前任务摘要，历史页不恢复旧快照到当前任务。索引位于对应 Profile 的 `.dsh-tender-workbench/history-v1.json`，备份时一并保留。真实 MCP 连接未核验。回退应恢复备份的完整已验证宿主/插件组合，不能在新版宿主上单独安装原始 0.5.4 或更早版本。
 
 ## 本地开发
 
@@ -165,7 +167,7 @@ corepack pnpm@11.7.0 run check
 
 `check` 会执行类型检查、完整 Vitest 测试、生产构建、README/发布状态校验以及 npm tarball 白名单预检。配置 npm Trusted Publishing 后，[发布工作流](.github/workflows/release.yml)可使用 OIDC 和 provenance；手工发布不得声称 provenance。
 
-省、市、区数据源快照维护在 [resources/area.ts](resources/area.ts)。版本变更见 [CHANGELOG.md](CHANGELOG.md)，发布检查见 [0.5.10 发布清单](docs/RELEASE-0.5.10.md)。
+省、市、区数据源快照维护在 [resources/area.ts](resources/area.ts)。版本变更见 [CHANGELOG.md](CHANGELOG.md)，发布检查见 [0.5.11 发布清单](docs/RELEASE-0.5.11.md)。
 
 ## 界面演示与市场投稿
 

package/docs/RELEASE-0.5.11.md

@@ -0,0 +1,25 @@
+# 招投标 0.5.11 发布记录
+
+Version: **0.5.11**
+Status: **ready for release**
+
+本轮在用户明确授权 commit、push、tag、npm 后发布 UX-49（PR #8）。原实现提交 e4b3e4bf21f7f4f423128333a709460f53256f3f 已通过 PR CI；本次同步版本及资料，不修改业务实现。
+
+## 更新
+
+- 仅本菜单新建的业务 Session 预填一次原生可编辑引导，采用第 11.1 节招投标文案。
+- 双快照检查就绪状态、空草稿/附件、IME 与 Session；异步迟到、用户清空、刷新、重挂载及旧会话不覆盖或补回，不抢焦点。
+- 稳定模板 ID、版本与精确指纹；修改后的内容按用户草稿处理。占位符或缺项先澄清，Host 查询防线拒绝无效条件，不调用 Provider。
+- 不自动发送、创建任务或展开工作台，保留 UX-48 接纳后展开、只读 Profile 历史、origin、真实 progress、人工定案和不可变 Excel/PDF 快照。
+
+## 验证与边界
+
+实施门禁：311 passed / 1 平台条件 skipped，8 个 UI 场景通过。真实 DSH 0.1.2-rc.1 独立 Profile 下 Sidebar 0.18.1 present/absent、清空刷新、Host 重启及四插件隔离均通过；组合为清洗 0.9.15、尽调 0.1.35、填表 0.2.30。真实 Host 工具使用合成 Provider，验证了人工复核和 Excel/PDF 文件链路，不代表真实收费 MCP 或模型已验证。操作系统中文输入法候选交互仍需人工验收。
+
+公开 input shell/编辑器能力、可写浏览器存储缺失或 5 秒未就绪时安全跳过引导，不做 DOM 回退。Projection 缓存版本为 4，宿主从原日志重放；不迁移或重写 Profile 历史及交付文件。完整采用记录见仓库 docs/UX49-INITIAL-DRAFT-ADOPTION.md。
+
+## 发布与升级
+
+使用 v0.5.11 tag 触发 release.yml，Linux Node 24 执行完整门禁后通过 npm Trusted Publishing/OIDC 发布，附带 provenance；随后由既有工作流生成 GitHub Release。发布成功以 Actions 和 npm registry 的实际结果为准。
+
+升级前备份完整 Profile；执行 `dsh plugin --profile web add dsh-tender-workbench@0.5.11` 后完整重启对应 dsh web。既有会话不会补回初始模板，需从「招投标」菜单新建业务 Session 验证。回滚使用完整已验证 Profile 备份。

package/lib/client.js

@@ -5125,8 +5125,27 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			rows: array(NormalizedProjectV1Schema).max(100)
 		}).strict();
 		//#endregion
+		//#region src/contracts/initial-draft.ts
+		/** UX-49: versioned copy, not a prompt, task, or query authorization. */
+		const TENDER_INITIAL_DRAFT = {
+			id: "dsh-initial-draft/dsh-tender-workbench/1",
+			version: 1,
+			fingerprint: "sha256:f2bf291eec74a12873fb6178362b61ed032f50389186bc82eec9462fd0e745ed",
+			text: "请帮我查找并评估招投标机会。请填写行业、地区、时间范围和筛选条件，也可点击左上角「提示词生成」整理查询口径。例如：查找近 30 天【地区】软件和数据服务相关招标项目，排除已截止项目，形成候选清单。"
+		};
+		/** Exact bytes only: no trimming, fuzzy matching, or substring exclusion. */
+		function isTenderInitialDraft(text) {
+			return text === TENDER_INITIAL_DRAFT.text;
+		}
+		function hasUnresolvedTenderPlaceholder(value) {
+			if (typeof value === "string") return /【[^】]*】/u.test(value);
+			if (Array.isArray(value)) return value.some(hasUnresolvedTenderPlaceholder);
+			if (typeof value === "object" && value !== null) return Object.values(value).some(hasUnresolvedTenderPlaceholder);
+			return false;
+		}
+		//#endregion
 		//#region src/contracts/query-schema.ts
-		const shortText = string$1().trim().min(1).max(128);
+		const shortText = string$1().trim().min(1).max(128).refine((value) => !hasUnresolvedTenderPlaceholder(value), "请先替换【】占位符，再查询。");
 		const dateText = string$1().regex(/^\d{4}-\d{2}-\d{2}$/u);
 		const optionalAmount = number().finite().nonnegative().optional();
 		const QccTenderSearchArgsSchema = object({
@@ -5160,7 +5179,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			investmentMax: optionalAmount
 		}).strict();
 		function hasSupportedQueryFilter(value) {
-			return Object.keys(value).some((key) => key !== "smartSort");
+			return Object.entries(value).some(([key, entry]) => key !== "smartSort" && (Array.isArray(entry) ? entry.length > 0 : entry !== void 0 && entry !== ""));
 		}
 		//#endregion
 		//#region src/contracts/screening.ts
@@ -28730,6 +28749,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}
 		/** Replace only an intact previous generated block; edited/manual text needs a choice. */
 		function planTenderDraftFill(current, generated, previous) {
+			if (isTenderInitialDraft(current)) return generated;
 			if (!current.trim()) return generated;
 			if (previous && current.includes(previous)) return current.replace(previous, generated);
 		}
@@ -29039,6 +29059,133 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			};
 		}
 		//#endregion
+		//#region src/client/initial-draft.ts
+		/** Entry-issued capability only. No mount/history observer may create a permit. */
+		function initializeTenderDraft(sessionId, port, storage, schedule = queueMicrotask) {
+			const key = `${TENDER_INITIAL_DRAFT.id}/session/${sessionId}`;
+			let alive = true;
+			let off = () => {};
+			const stop = () => {
+				alive = false;
+				off();
+			};
+			if (!isTenderEntrySessionId(sessionId)) return stop;
+			try {
+				if (storage.getItem(key) !== null) return stop;
+				storage.setItem(key, JSON.stringify({
+					status: "reserved",
+					...TENDER_INITIAL_DRAFT,
+					text: void 0
+				}));
+			} catch {
+				return stop;
+			}
+			const safe = (s) => s.current === sessionId && !s.composing && s.draft === "" && s.revision === 0 && s.attachments === 0 && s.plain;
+			const check = () => {
+				if (!alive) return;
+				let first;
+				try {
+					first = port.snapshot();
+				} catch {
+					stop();
+					return;
+				}
+				if (!safe(first)) {
+					stop();
+					return;
+				}
+				if (!first.ready) return;
+				schedule(() => {
+					if (!alive) return;
+					try {
+						const latest = port.snapshot();
+						if (!safe(latest) || !latest.ready || latest.revision !== first.revision) {
+							stop();
+							return;
+						}
+						stop();
+						port.write(TENDER_INITIAL_DRAFT.text);
+						storage.setItem(key, JSON.stringify({
+							status: "initialized",
+							id: TENDER_INITIAL_DRAFT.id,
+							version: TENDER_INITIAL_DRAFT.version,
+							fingerprint: TENDER_INITIAL_DRAFT.fingerprint
+						}));
+					} catch {
+						stop();
+					}
+				});
+			};
+			off = port.subscribe(check, stop);
+			if (!alive) off();
+			check();
+			return stop;
+		}
+		//#endregion
+		//#region src/client/initial-draft-host.ts
+		/** DSH 0.1.2-rc.1 public input shell + public Lexical lifecycle; no keyboard/private fields. */
+		function initializeTenderHostDraft(ctx, id) {
+			try {
+				const input = ctx.conversation.input;
+				if (typeof input.shell !== "function") return () => {};
+				const shell = input.shell(id);
+				const editor = shell.editor;
+				if (!editor?.registerRootListener || !editor.isComposing || !editor.update) return () => {};
+				const cleanup = initializeTenderDraft(id, {
+					snapshot() {
+						const state = shell.state.getSnapshot();
+						return {
+							current: ctx.sessions.list.getSnapshot().current,
+							ready: editor.getRootElement()?.isConnected === true,
+							composing: editor.isComposing(),
+							draft: state.draft,
+							revision: state.draftRev,
+							plain: state.phase === "plain",
+							attachments: state.imageIds.length + state.occurrences.length
+						};
+					},
+					subscribe(check, cancel) {
+						let detach = () => {};
+						const rootOff = editor.registerRootListener((root) => {
+							detach();
+							if (root) {
+								const events = [
+									"beforeinput",
+									"paste",
+									"drop",
+									"compositionstart"
+								];
+								events.forEach((event) => root.addEventListener(event, cancel, true));
+								detach = () => events.forEach((event) => root.removeEventListener(event, cancel, true));
+							}
+							check();
+						});
+						const stateOff = shell.state.subscribe(check);
+						const sessionOff = ctx.sessions.list.subscribe(check);
+						return () => {
+							detach();
+							rootOff();
+							stateOff();
+							sessionOff();
+						};
+					},
+					write(text) {
+						editor.update(() => shell.setDraft(text), {
+							discrete: true,
+							tag: "skip-dom-selection"
+						});
+					}
+				}, window.localStorage);
+				const timeout = setTimeout(cleanup, 5e3);
+				return () => {
+					clearTimeout(timeout);
+					cleanup();
+				};
+			} catch {
+				return () => {};
+			}
+		}
+		//#endregion
 		//#region src/client/skill-catalog.ts
 		var TenderSkillPreflightError = class extends Error {
 			code;
@@ -31537,6 +31684,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			const projectionPort = createTenderProjectionPort(sessions);
 			const promptMemory = /* @__PURE__ */ new Map();
 			let active = true;
+			let stopInitialDraft = () => {};
+			let entryGeneration = 0;
 			const sendIntent = (sessionId, intent) => sendSessionTenderWorkbenchIntent(sessions, connection, sessionId, intent);
 			const openSession = (sessionId, phase) => {
 				if (!active || sidebar === void 0 || reveal === void 0) return false;
@@ -31549,10 +31698,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				return opened;
 			};
 			const startTenderSession = async () => {
+				const generation = ++entryGeneration;
+				const previousSession = sessions.list.getSnapshot().current;
+				stopInitialDraft();
 				try {
 					const sessionId = await createTenderEntrySession(sessions, ctx.workspaces);
-					if (!active) return;
+					if (!active || generation !== entryGeneration || sessions.list.getSnapshot().current !== previousSession) return;
+					stopInitialDraft();
 					sessions.open(sessionId);
+					stopInitialDraft = initializeTenderHostDraft(ctx, sessionId);
 				} catch (error) {
 					if (error instanceof TenderSessionEntryError) {
 						const key = error.code === "workspace-unavailable" ? "sidebar.workspaceRequired" : error.code === "create-unavailable" ? "sidebar.createUnavailable" : "sidebar.createFailed";
@@ -31646,6 +31800,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}, TenderSessionHeaderEntry));
 			ctx.effect(() => () => {
 				active = false;
+				stopInitialDraft();
 				reveal?.dispose();
 				navigation.dispose();
 				promptMemory.clear();