faberloom 0.0.0-stage → 0.1.8-alpha.2

package/cordis.patch.yml

@@ -0,0 +1,315 @@
+# The native product-module bundle patch: mounts the product service rows and
+# their model tools over the Web surface. The `faberloom` profile composes it
+# after `@deepseek-ai/dsh-base` and `@deepseek-ai/dsh-web-app`, so the served
+# harness carries the product modules as first-class rows.
+
+- insert:
+    # Bóveda de claves de proveedor compartida entre el harness local (escritorio)
+    # y el del VPS (web). Sin CONSOLA_API_BASE/CONSOLA_TOKEN, o sin sesión, queda
+    # inerte y el harness sigue usando solo su almacén local.
+    - id: credentials-console
+      name: './node_modules/@deepseek-ai/dsh-credentials-console/lib/index.js'
+      disabled: !!js process.env.FABERLOOM_LOCAL === '1'
+
+    - id: faberloom-spaces
+      name: './node_modules/@deepseek-ai/dsh-faberloom-spaces/lib/index.js'
+
+    - id: faberloom-agents
+      name: './node_modules/@deepseek-ai/dsh-faberloom-agents/lib/index.js'
+
+    # Plano de capacidades del agente: convierte mwtMcp/sicopMcp/webAccess en un
+    # filtro real del plano de tools del agente (hijo delegado y sesión del Space).
+    - id: faberloom-agent-plane
+      name: './node_modules/@deepseek-ai/dsh-faberloom-agent-plane/lib/index.js'
+
+    # La sesión de un Space corre como su agente responsable (persona/plano/skills).
+    - id: faberloom-session-agent
+      name: './node_modules/@deepseek-ai/dsh-faberloom-session-agent/lib/index.js'
+
+    # Consultas durables con el agente de un Space (ask continuable + follow-up).
+    - id: faberloom-agent-runtime
+      name: './node_modules/@deepseek-ai/dsh-faberloom-agent-runtime/lib/index.js'
+
+    # Índice de búsqueda del Space: embeddings + Knowledge Hub + fallback léxico
+    # sobre título, contexto, entradas curadas, memoria y texto de adjuntos.
+    - id: faberloom-knowledge-index
+      name: './node_modules/@deepseek-ai/dsh-faberloom-knowledge-index/lib/index.js'
+
+    # Catálogo de modelos dinámico: tabla de proveedores, descubrimiento de
+    # modelos con una credencial nombrada y sonda de credencial/cuota.
+    - id: faberloom-model-catalog
+      name: './node_modules/@deepseek-ai/dsh-faberloom-model-catalog/lib/index.js'
+
+    # User-owned MCP servers: durable configuration, credential-seam secrets,
+    # the install probe, and the process-global mounts of every enabled server.
+    - id: faberloom-mcp-registry
+      name: './node_modules/@deepseek-ai/dsh-faberloom-mcp-registry/lib/index.js'
+
+    - id: faberloom-board
+      name: './node_modules/@deepseek-ai/dsh-faberloom-board/lib/index.js'
+      config:
+        # El piloto decide; no ejecuta. Un despliegue que quiera ejecución
+        # externa nombra sus tipos con FABERLOOM_EFFECT_ACTION_TYPES y monta el
+        # adaptador de cada uno: sin adaptador el consumidor alerta y no emite.
+        effectActionTypes: !!js (process.env.FABERLOOM_EFFECT_ACTION_TYPES ?? '').split(',').map(value => value.trim()).filter(Boolean)
+        # El consumidor del outbox corre en proceso aunque esté ocioso, para que
+        # una ejecución aceptada no quede sin quien la emita.
+        effectDispatchIntervalMs: 15000
+        # El agente vivo revisa la Mesa aunque nadie la abra: vuelve a clasificar
+        # lo pendiente y reaplica lo que un humano enseñó al mover una prioridad.
+        reclassifyIntervalMs: !!js (Number(process.env.FABERLOOM_RECLASSIFY_MINUTES ?? '15') || 0) * 60_000
+        # La firma del CEO no se exige para `mail.send` en este despliegue
+        # (A-35): es el único tipo operable y el propietario eximió el envío de
+        # correo del piloto. La compuerta sigue encendida para dinero, inventario
+        # y envíos, así que habilitar cualquiera de esos tipos vuelve a pedir
+        # firma sin tocar código. Cada aceptación registra `signature: EXEMPT`
+        # en su evento de auditoría. `FABERLOOM_CEO_SIGNATURE=1` apaga la
+        # compuerta entera; `FABERLOOM_CEO_SIGNATURE_EXEMPT` cambia la lista.
+        ceoSignatureRequired: !!js process.env.FABERLOOM_CEO_SIGNATURE !== '1'
+        ceoSignatureExemptActionTypes: !!js (process.env.FABERLOOM_CEO_SIGNATURE_EXEMPT ?? 'mail.send').split(',').map(value => value.trim()).filter(Boolean)
+
+    - id: faberloom-routines
+      name: './node_modules/@deepseek-ai/dsh-faberloom-routines/lib/index.js'
+
+    # Adaptador de `mail.send` (E15): envía la revisión aprobada por la conexión
+    # SMTP del dueño. Solo registra el adaptador si el tablero acepta el tipo
+    # (`FABERLOOM_EFFECT_ACTION_TYPES`); con la lista vacía queda cargado sin
+    # efecto, que es el estado seguro del piloto (A-05).
+    - id: faberloom-effects-mail
+      name: './node_modules/@deepseek-ai/dsh-faberloom-effects-mail/lib/index.js'
+      disabled: !!js process.env.FABERLOOM_EFFECT_MAIL === '0'
+
+    # Clasificador de severidad sobre `ctx.llm` (A-04): las reglas deterministas
+    # resuelven primero y este puerto solo ve lo que las reglas no resolvieron.
+    # Una respuesta inválida o un plazo vencido dejan `severity: null` y el ítem
+    # entra igual (W-37). Se apaga con FABERLOOM_CLASSIFIER=0; el proveedor y el
+    # modelo se declaran por entorno para que la clave de caché los nombre.
+    - id: faberloom-classifier-llm
+      name: './node_modules/@deepseek-ai/dsh-faberloom-classifier-llm/lib/index.js'
+      disabled: !!js process.env.FABERLOOM_CLASSIFIER === '0'
+      config:
+        provider: !!js process.env.FABERLOOM_CLASSIFIER_PROVIDER ?? 'deepseek-official'
+        model: !!js process.env.FABERLOOM_CLASSIFIER_MODEL ?? 'deepseek-chat'
+
+    # Controles de proforma sobre el MCP de MWT.ONE (`mcp__mwt__*`): precio por
+    # línea, SKU, cantidades, suma, stock y separación (D-01, D-02). Encendido
+    # por defecto; sin esta fila el board rechaza toda aprobación de proforma con
+    # CHECK_UNAVAILABLE. `serverName` nombra el servidor MCP montado; su endpoint
+    # y su credencial viven en la fila del registro MCP. Un despliegue sin el
+    # servidor MWT (o sin conexión) la apaga con FABERLOOM_CHECKS_MWT=0.
+    - id: faberloom-checks-mwt
+      name: './node_modules/@deepseek-ai/dsh-faberloom-checks-mwt/lib/index.js'
+      disabled: !!js process.env.FABERLOOM_LOCAL === '1' || process.env.FABERLOOM_CHECKS_MWT === '0'
+      config:
+        serverName: mwt
+
+    # Grafos de trabajo versionados compilados a rutinas; el motor los ejecuta.
+    - id: faberloom-workflows
+      name: './node_modules/@deepseek-ai/dsh-faberloom-workflows/lib/index.js'
+
+    # Compartir Spaces y Work Flows con permisos, aviso por correo y consola.
+    - id: faberloom-shares
+      name: './node_modules/@deepseek-ai/dsh-faberloom-shares/lib/index.js'
+      disabled: !!js process.env.FABERLOOM_LOCAL === '1'
+
+    # Contexto del Workspace/Space: versionado y con aprobación del dueño.
+    - id: faberloom-context
+      name: './node_modules/@deepseek-ai/dsh-faberloom-context/lib/index.js'
+
+    # Sesiones compartidas del Space: capturadas por cada miembro y sincronizadas por la consola.
+    - id: faberloom-session-shares
+      name: './node_modules/@deepseek-ai/dsh-faberloom-session-shares/lib/index.js'
+      disabled: !!js process.env.FABERLOOM_LOCAL === '1'
+
+    - id: faberloom-execution
+      name: './node_modules/@deepseek-ai/dsh-faberloom-execution/lib/index.js'
+
+    # Recepcion de correo del buzon del usuario (IMAP configurado en Conexiones).
+    - id: faberloom-inbound
+      name: './node_modules/@deepseek-ai/dsh-faberloom-inbound/lib/index.js'
+      disabled: !!js process.env.FABERLOOM_LOCAL === '1'
+
+    # Servidor MCP propio: otra IA lee y gestiona el trabajo del owner.
+    - id: faberloom-mcp-server
+      name: './node_modules/@deepseek-ai/dsh-faberloom-mcp-server/lib/index.js'
+      config:
+        publicationRepo: !!js process.env.FABERLOOM_PUBLICATION_REPO ?? ''
+
+    - id: faberloom-learning
+      name: './node_modules/@deepseek-ai/dsh-faberloom-learning/lib/index.js'
+
+    - id: faberloom-access
+      name: './node_modules/@deepseek-ai/dsh-faberloom-access/lib/index.js'
+      config:
+        # W-16: dinero, inventario y envíos exigen firma CEO sin excepción. La
+        # firma vale 24 h y la emiten las identidades que el despliegue nombre
+        # en FABERLOOM_CEO_SIGNERS; sin esa lista nadie firma y la aceptación
+        # externa se rechaza, que es el estado seguro mientras el piloto no ejecute.
+        protectedActionTypes: ['mail.send', 'inventory.reserve', 'shipment.create']
+        signatureValiditySeconds: 86400
+        signingAuthorities: !!js (process.env.FABERLOOM_CEO_SIGNERS ?? '').split(',').map(value => value.trim()).filter(Boolean)
+        revocationAuthorities: !!js (process.env.FABERLOOM_CEO_SIGNERS ?? '').split(',').map(value => value.trim()).filter(Boolean)
+        signerIdentityAudience: !!js (process.env.FABERLOOM_CEO_SIGNERS ?? '').split(',').map(value => value.trim()).filter(Boolean)
+        allowWildcardSignatures: false
+
+    # Autonomy levels per unit (tenant, space, agent, action type): the §7.2
+    # promotion report, the sampled review of delegated items, and the automatic
+    # suspension of §7.3. Off by default. It reads closed items only through the
+    # `faberloomAutonomyOutcomes` port that the board adapter provides. Los
+    # umbrales de A-43 están firmados y la promoción automática sigue apagada
+    # (W-53): `report` informa y `promote` exige gate Owner/Admin. La ventana es
+    # rodante de 30 días. FABERLOOM_AUTONOMY=1 monta la fila.
+    - id: faberloom-autonomy
+      name: './node_modules/@deepseek-ai/dsh-faberloom-autonomy/lib/index.js'
+      disabled: !!js process.env.FABERLOOM_AUTONOMY !== '1'
+      config:
+        minimumRealRuns: 10
+        minimumApprovalShare: 0.7
+        statisticalMinimum: 10
+        periodDays: 30
+
+    - id: faberloom-backup
+      name: './node_modules/@deepseek-ai/dsh-faberloom-backup/lib/index.js'
+
+    # Mirror entre este equipo y el despliegue: lee el documento versionado del
+    # gateway y aplica las filas y los archivos de skills, y empuja los cambios
+    # locales con retardo. Queda inerte hasta que el despliegue lo enciende
+    # (FABERLOOM_MIRROR_ENABLED=1) y nombra su credencial
+    # (FABERLOOM_MIRROR_URL y FABERLOOM_MIRROR_KEY); sin ellas el servidor MCP
+    # no acepta ninguna llamada de espejo y la bitácora lo dice. `disabled`
+    # decide si la fila se monta y `config.enabled` que el servicio lo sepa:
+    # sin el segundo, el servicio se monta y se declara apagado.
+    - id: faberloom-mirror
+      name: './node_modules/@deepseek-ai/dsh-faberloom-mirror/lib/index.js'
+      disabled: !!js process.env.FABERLOOM_MIRROR_ENABLED === '0'
+      config:
+        enabled: !!js process.env.FABERLOOM_MIRROR_ENABLED !== '0'
+        gatewayUrl: !!js process.env.FABERLOOM_MIRROR_URL ?? 'https://harness.mwt.one'
+
+    # Proyeccion del harness de un ambito: escribe en la carpeta del Workspace o
+    # del Espacio lo que ese ambito ha usado (agentes, skills, flujos, rutinas,
+    # memoria y contexto) con la disposicion que leen los CLI —AGENTS.md,
+    # CLAUDE.md, GEMINI.md y los directorios .agents/, .claude/, .gemini/ y
+    # .kimi-code/— y poda lo suyo. El panel del Espacio la dispara.
+    - id: faberloom-harness-projection
+      name: './node_modules/@deepseek-ai/dsh-faberloom-harness-projection/lib/index.js'
+      config:
+        enabled: true
+
+    # Conexiones propias del usuario (IMAP y respaldo), ajenas al MCP.
+    - id: faberloom-connections
+      name: './node_modules/@deepseek-ai/dsh-faberloom-connections/lib/index.js'
+
+    # Implementacion de los handlers de paso que declaran las rutinas.
+    - id: faberloom-handlers
+      name: './node_modules/@deepseek-ai/dsh-faberloom-handlers/lib/index.js'
+
+    # Siembra inicial de agentes y rutinas (una vez por owner).
+    - id: faberloom-defaults
+      name: './node_modules/@deepseek-ai/dsh-faberloom-defaults/lib/index.js'
+
+    # Read-only workspace view the browser panels read.
+    - id: faberloom-view
+      name: './node_modules/@deepseek-ai/dsh-faberloom-view/lib/index.js'
+
+    # The model-facing product tools over the mounted services. The explicit
+    # Space-memory tools are on so the prompt's `faberloom_spaces_remember`
+    # instruction resolves instead of failing as an unknown tool.
+    - id: tool-faberloom
+      name: './node_modules/@deepseek-ai/dsh-tool-faberloom/lib/index.js'
+      config:
+        memoryTools: true
+        workflowTools: true
+        contextTools: true
+
+    # The FaberLoom browser surface: identity tokens plus the global panels.
+    - id: ui-faberloom
+      name: './node_modules/@deepseek-ai/dsh-client-ui-faberloom/lib/index.js'
+
+# The product's Skills panel installs through `ctx.skillInstall`, so the host
+# instance must exist here even though `web-app` disables the base row and the
+# shipped presets carry their own (their tools shadow this global pair). See
+# `.agents/notes/implemented/feature/2026-10-13-one-native-skill-install-path.md`.
+- id: skill-install
+  disabled: false
+
+# The Settings modal is the product's home for theme, language and provider
+# credentials. This composition mounts the Models page so a desktop installation
+# can enter OpenAI, Anthropic, Google, Moonshot or DeepSeek keys without editing
+# `.env`; the environment defaults still win only when no credential is stored.
+# The archived-sessions page stays out of the product.
+- id: ui-settings-models
+  disabled: false
+- id: ui-settings-unarchive-sessions
+  disabled: true
+
+# Política FaberLoom: toda consulta va por el MCP de MWT.ONE. Se retiran las
+# herramientas de internet para que el modelo no traiga datos de fuera.
+- id: tool-web
+  disabled: true
+- id: web-search-deepseek
+  disabled: true
+- id: web-fetch-http
+  disabled: true
+
+# El proveedor de credenciales entrega por entorno la llave que paga el
+# despliegue. Para estas referencias el almacén del usuario (Ajustes → Modelos)
+# resuelve primero: sin él, la cuenta usa la llave compartida y la política de
+# producto la limita; con una llave propia distinta, la cuenta paga su consumo y
+# sale del límite de alcance de FaberLoom. El proveedor aplica su saldo, su
+# cuota y su ventana de contexto. Guardar el mismo valor que entrega el entorno
+# se rechaza, así que copiar la llave compartida no la convierte en propia.
+- id: credentials
+  config:
+    storedOverridesEnvironment:
+      - DEEPSEEK_API_KEY
+      - OPENAI_API_KEY
+      - ANTHROPIC_API_KEY
+      - GOOGLE_API_KEY
+      - KIMI_API_KEY
+      - MOONSHOT_API_KEY
+
+# Rutas multi-proveedor por defecto del producto. El adaptador pi-ai ya viene
+# montado (dormido) en el bundle base; aquí se le dan los perfiles para que
+# OpenAI, Anthropic, Google, Kimi (plan de código) y Moonshot (plataforma)
+# existan como rutas en todo arranque de este perfil —el gateway y la app de
+# escritorio—, no solo cuando un despliegue las escribe. `apiKeyEnv` es una
+# referencia a la variable de entorno que resuelve la credencial en cada
+# request; la clave propia de un agente (GenerateOptions.credentialRef) siempre
+# gana sobre esta referencia. La clave nunca va en el repo: sin valor, la ruta
+# queda sin credencial.
+#
+# `kimi` es el plan de código (Anthropic Messages en https://api.kimi.com/coding).
+# Ese proveedor no publica endpoint de modelos (404), así que su lista —`k3`,
+# `k3-256k`, `kimi-for-coding`, `kimi-for-coding-highspeed`— viene del catálogo
+# instalado de pi-ai, no del descubrimiento. `moonshotai` es la plataforma
+# Moonshot (OpenAI-compatible en https://api.moonshot.ai/v1), un producto
+# distinto con credenciales distintas.
+- id: llm-pi-ai
+  config:
+    providers:
+      openai:
+        apiKeyEnv: OPENAI_API_KEY
+      anthropic:
+        apiKeyEnv: ANTHROPIC_API_KEY
+      google:
+        apiKeyEnv: GOOGLE_API_KEY
+        # Gemini 3.7+ Flash retired `MINIMAL`: Google answers it with 400
+        # INVALID_ARGUMENT. Declaring only the levels those models accept makes
+        # the adapter send LOW when neither the agent nor the profile names an
+        # effort, and keeps `Minimal` out of the picker.
+        modelOverrides:
+          gemini-3.7-flash:
+            reasoningEfforts:
+              low: low
+              medium: medium
+              high: high
+          gemini-3.8-flash:
+            reasoningEfforts:
+              low: low
+              medium: medium
+              high: high
+      kimi:
+        apiKeyEnv: KIMI_API_KEY
+      moonshotai:
+        apiKeyEnv: MOONSHOT_API_KEY

package/lib/index.js

@@ -0,0 +1 @@
+export {};

package/node_modules/@deepseek-ai/dsh-client-ui-faberloom/README.md

@@ -0,0 +1,86 @@
+---
+description: "FaberLoom surface for the Web GUI: the identity tokens, the brand name, the global panels (Conversar, Mesa de trabajo, Espacios, Agentes, Rutinas, Flujos, Memoria, Conexiones), and the MCP servers page in Settings that the faberloom profile serves; for users and maintainers of the FaberLoom workspace."
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-client-ui-faberloom
+
+English | [中文](README.zh.md)
+
+## Summary
+
+The FaberLoom surface turns the Web shell into the FaberLoom workspace: it overrides the accent token with the FaberLoom identity, labels the sidebar brand, and registers one panel per section plus the MCP servers page in Settings. The panels read one shared overview from a declared store; Espacios and Agentes create and rename records through `ctx.remote.faberloomView`, and each write republishes the overview so all panels update at once, while the MCP page lists, tests, and removes the owner's servers through the same remote. Conversar and Flujos open the conversation and the Work Flow graph. Only the `faberloom` profile mounts it.
+
+## Table of Contents
+
+- [Use this package](#use-this-package)
+- [Model Experience](#model-experience)
+- [Known Limitations and Deferred Work](#known-limitations-and-deferred-work)
+- [Dev Note](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## Use this package
+
+Mount this plugin where `ctx.slots`, `ctx.locale`, and `ctx.theme` are present. It then contributes:
+
+- an accent layer through `ctx.theme.overrideTokens`, which follows light and dark;
+- the `sidebar.brand.name` two-tone wordmark and the `sidebar.brand.mark` and `conversation.hero.brand.mark` isotipo occupant;
+- ten `sidebar.panellist` rows over twelve `main` panels, addressed by the shared `MainPanelId` (the Chat landing and the Skills panel keep their routes without a sidebar row);
+- the chat gestures: an `@` trigger source that lists the owner's active agents (a pick inserts `@name`) and a `/routine` command contribution with a popup that starts the picked routine, both fed by the workspace overview through `ctx.remote.faberloomView`;
+- the Skills panel's install control: it opens the mounted directory picker, offers the current workspace or the global skills root with the resolved root of each shown, installs through `ctx.remote.faberloomView.installSkill`, and lists this identity's recorded installs with a remove action. The control appears only inside the Desktop application: a browser hides it, because there the picker would list the host's filesystem instead of the operator's own folder;
+- the MCP servers page in the Settings modal: it states that a server is saved for the user alone and is available in every workspace and Space, lists the owner's installed servers with their transport and their proven state (a server reads *connected* only when it is enabled and mounted; an enabled server that did not mount reads *saved but not verified* with the redacted reason; a disabled one reads *disabled*), and which credentials are present (never a value and never the credential reference). A user may have many servers, one per purpose; each keeps its own row, state, and actions, so one server's failure never hides another, and a search field appears once more than a few are installed. It tests one candidate connection before it is saved (showing the tools it found, or the named failure — *the server did not answer*, *the credential was rejected*, *the server answered something unexpected* — with its redacted detail and the next action), refuses to save a named credential with no value (*the value is missing*) or a value with no name, installs it with every value going to the credential seam, and lets the owner edit a row in place (re-entering the saved values, which are never shown), enable or disable it, or remove it after an inline confirmation. It reaches the host registry only through `ctx.remote.faberloomView` (`mcpServers`, `saveMcpServer`, `removeMcpServer`, `probeMcpServer`), so no host registry code reaches the browser.
+
+The sidebar foot carries only the Settings control, and this package registers nothing into `sidebar.footer.action`. The product's palettes, its interface language, and its MCP servers are chosen in the Settings modal that control opens: the palettes in the **Apariencia** (Appearance) section, the interface language in the **Idioma** (Language) section, and the MCP servers in the **Servidores MCP** (MCP servers) section.
+
+The Spaces detail links the business space to the harness workspace: `spaceWorkspace` projects the space's conversation area (its `fw_` workdir registered as a workspace, titled after the space) and "New conversation in this space" opens a session in it, so the sidebar's workspace group and the space stay the same thing. The Work bench reviews with a note, submits new prepared revisions, moves items through the exception states (request data, fail, complete), and lists recorded effects with detail and date.
+
+The rows group by the design's three navigation modes — `Operar` (Mesa, Espacios, Rutinas, Flujos, Correo), `Aprender` (Memoria, Contexto, Aprobaciones), and `Admin` (Agentes y Skills, Conexiones) — and carry a badge only where the live overview already counts their records; a section with no real number shows none.
+
+The four screens whose work is one record at a time open that record in a dialog over a full-width table: the Skills detail, the work-bench task, the connection editor, and the context entry. A row click opens it, `Nueva tarea` and `+ Nueva conexión` open the same dialog on a new record, and Escape, the mask, the header close control, or the footer's `Cerrar` dismisses it. Memoria already worked that way; the other four follow it, so no detail editor shares the width with its list. A new connection opens on an empty form rather than on the last record the editor held.
+
+Memoria's dialog also names the conversation behind a distilled line. Saving a turn stores the Session that captured it, and the dialog resolves that Session's title and offers `Abrir conversación`, which opens the Session and leaves the panel; a Session this host no longer lists reads as gone rather than offering an action that cannot run. A line recorded by hand, or captured from an email or a document, states that origin instead.
+
+All registrations are effects on the calling plugin's fiber and disappear with it.
+
+-----
+
+<a id="model-experience"></a>
+## Model Experience
+
+### Panel registration
+
+#### What the model sees
+
+Nothing directly. The plugin contributes no tools, injects no prompt text, and writes no session events. The `@` gesture only places plain text in the draft, so what the model receives is the agent's name in the user's message; delegating to that agent is the host's `faberloom_agents_delegate` tool, and starting a routine from `/routine` is the host's execution service.
+
+#### Token effect
+
+Zero direct tokens on every request.
+
+#### KV Cache effect
+
+Independent of live requests: panel registration never touches a request prefix.
+
+## Known Limitations and Deferred Work
+
+<a id="known-limitations-and-deferred-work"></a>
+
+- **Panel actions where the screen allows them** — Espacios creates, renames, edits the Space's agent directive, adopts an existing folder as the Space's Workspace through the mounted directory picker, and writes the Space's context export into that folder; Agentes create, rename, and deactivate; Mesa creates and approves or rejects; Rutinas creates and toggles; Memoria records a statement; Email downloads an attachment, saves it into a chosen Space's folder as a real file, or mails a file from a chosen Space's folder as an attachment. Board revision submission, model policy, and routine step editing stay in the product services until their screens land.
+- **Memory follows the pipeline** — recording a statement appends it to the agent-memory inlet, and the distilled row may appear after the next read.
+- **Refresh on activity, not on push** — the panels re-read on the harness's forwarded session-activity event, on mount, and after every write.
+- **Row metadata rides the sidebar's projection** — the mode, group, and badge are `sidebar.panellist` registration options the sidebar resolves per read; a badge shows the latest overview this surface published and appears with the sidebar's next projection of its rows.
+- **Spanish copy under the shipped locales** — FaberLoom's product language is Spanish, and the client locale runtime requires the two shipped locales per namespace, so `zh` and `en` both carry the Spanish dictionary until a first-class `es` locale exists.
+
+<a id="dev-note"></a>
+### Dev Note
+
+<details>
+<summary>Working context for maintainers — click to expand</summary>
+
+Section identity lives in one array (`FABERLOOM_SECTIONS`): the sidebar id, the main-panel key, the row order, the label key, the navigation mode and group keys, an optional overview-count badge, and both occupants. Adding a screen is one entry plus its copy keys. Below the tablet breakpoint the table/inspector split collapses to one column (the inspector becomes a full-width block under the table), and each table pans inside its own card with a sticky header.
+
+</details>
+
+**Runtime invariant:** No companion is published. Every registration is an effect on the plugin's fiber, and the browser spec proves the sidebar rows, main panels, and brand name all disappear when that fiber is disposed.

package/node_modules/@deepseek-ai/dsh-client-ui-faberloom/README.zh.md

@@ -0,0 +1,85 @@
+---
+description: "FaberLoom 的 Web 界面：身份令牌、品牌名、faberloom 配置提供的全局面板（Conversar、Mesa de trabajo、Espacios、Agentes、Rutinas、Flujos、Memoria、Conexiones），以及 Settings 中的 MCP 服务器页面；面向 FaberLoom 工作区的用户与维护者。"
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-client-ui-faberloom
+
+[English](README.md) | 中文
+
+## 概述
+
+FaberLoom 界面把共享的 Web 外壳变成 FaberLoom 工作区：用 FaberLoom 身份覆盖强调色令牌、标注侧边栏品牌名，并为每个 FaberLoom 分区注册一个全局面板。每个面板从声明的 store 读取同一份总览；Espacios 与 Agentes 通过 `ctx.remote.faberloomView` 创建与重命名，每次写入都会重新发布刷新后的总览，因此所有面板同时更新。Conversar 面板把用户交给由 harness 拥有的对话与输入框。Flujos 面板绘制工作流图。它还向 Settings 模态框贡献 MCP 服务器页面，列出该所有者已安装的服务器，并通过 `ctx.remote.faberloomView` 安装、测试与移除。该包仅由 `faberloom` 配置挂载。
+
+## 目录
+
+- [使用本包](#use-this-package)
+- [模型体验](#model-experience)
+- [已知限制与延期工作](#known-limitations-and-deferred-work)
+- [开发备注](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## 使用本包
+
+在存在 `ctx.slots`、`ctx.locale` 与 `ctx.theme` 的组合中挂载本插件。它会贡献：
+
+- 通过 `ctx.theme.overrideTokens` 注册的强调色层，随浅色/深色模式变化；
+- `sidebar.brand.name` 的双色字标，以及 `sidebar.brand.mark` 与 `conversation.hero.brand.mark` 的等距图标占用者；
+- 十个 `sidebar.panellist` 行覆盖十二个 `main` 面板，以共享的 `MainPanelId` 寻址（对话落地页与技能面板保留路由但不占侧边栏行）；
+- 聊天手势：一个 `@` 触发器源，列出所有者的活跃代理（选中会插入 `@name`），以及一个带弹窗的 `/routine` 命令贡献，用于启动选中的例程；两者都由工作区总览经 `ctx.remote.faberloomView` 提供；
+- 技能面板的安装控件：它打开已挂载的目录选择器，提供当前工作区或全局技能根目录两个目标并显示各自解析后的根目录，通过 `ctx.remote.faberloomView.installSkill` 安装，并列出该身份已记录的安装及其移除操作。该控件只出现在 Desktop 应用中：浏览器端会隐藏它，因为在浏览器里选择器列出的是宿主文件系统，而不是操作者自己的文件夹；
+- Settings 模态框中的 MCP 服务器页面：它声明服务器仅属于该用户，并在其所有工作区和空间中可用；列出该所有者已安装的服务器及其传输方式与验证状态（仅当服务器已启用且已挂载时才读作*已连接*；已启用但未挂载的读作*已保存但未验证*并附上遮蔽后的原因，已停用的读作*已停用*），以及存在哪些凭据（绝不显示值，也不显示凭据引用）。用户可能有很多服务器，各有用途；每个都保留自己的行、状态与操作，因此一个服务器的失败绝不会隐藏其他服务器；安装超过几个后会出现搜索框。它在保存前测试一个候选连接（显示它发现的工具，或具名失败——*服务器无响应*、*凭据被拒绝*、*服务器返回了意外的响应*——及其遮蔽明细和下一步操作）；当具名凭据没有值（*缺少值*）或有值却没有名称时拒绝保存；安装时每个值都写入凭据接缝；并允许所有者就地编辑某一行（重新输入那些从不显示的值）、启用或停用它，或经就地确认后移除。它只通过 `ctx.remote.faberloomView`（`mcpServers`、`saveMcpServer`、`removeMcpServer`、`probeMcpServer`）访问宿主注册表，因此宿主注册表代码不会进入浏览器。
+
+侧边栏脚部只保留 Settings 控件，本包不再向 `sidebar.footer.action` 注册任何内容。产品的调色板、界面语言与 MCP 服务器都在该控件打开的 Settings 模态框中选取：调色板位于 **Apariencia**（外观）分区，界面语言位于 **Idioma**（语言）分区，MCP 服务器位于 **Servidores MCP**（MCP 服务器）分区。
+
+Espacios 详情把业务空间与 harness 工作区连接起来：`spaceWorkspace` 投射该空间的对话区域（其 `fw_` 工作目录注册为工作区，标题取自空间），而「在此空间新建对话」会在其中打开一个会话，因此侧边栏的工作区分组与空间始终是同一个东西。Mesa de trabajo（工作台）可带备注评审、提交新的已准备修订、让条目经过异常状态（请求数据、失败、完成），并列出已记录的效果及其明细与日期。
+
+这些行按设计的三种导航模式分组——「`Operar`」（Mesa、Espacios、Rutinas、Flujos、Correo）、「`Aprender`」（Memoria、Contexto、Aprobaciones）与「`Admin`」（Agentes y Skills、Conexiones）——并且只在总览已经计数其记录时才带徽标；没有真实数字的分区不显示徽标。
+
+一次只处理一条记录的四个界面，会在整宽的表格之上以对话框打开该记录：技能详情、工作台任务、连接编辑器与上下文条目。点击行会打开它，`Nueva tarea` 与 `+ Nueva conexión` 以新记录打开同一个对话框，按 Escape、点击遮罩、标题栏的关闭控件或页脚的 `Cerrar` 都会关闭它。Memoria 此前已经如此，其余四个现在也如此，因此没有任何详情编辑器与它的列表分享宽度。新建连接会打开一张空表单，而不是编辑器上一次持有的记录。
+
+Memoria 的对话框还会指出蒸馏行背后的对话。保存一个回合时会记下捕获它的 Session，对话框解析该 Session 的标题并提供 `Abrir conversación`，它会打开该 Session 并离开当前面板；本机已不再列出的 Session 会读作已不在，而不会给出无法执行的动作。手工记录的行，或从邮件、文档捕获的行，则说明该来源。
+
+所有注册都是调用方 fiber 上的 effect，并随其消失。
+
+-----
+
+<a id="model-experience"></a>
+## 模型体验
+
+### 面板注册
+
+#### 模型看到的内容
+
+没有直接影响。该插件不贡献工具、不注入提示文本，也不写入会话事件。`@` 手势只是把纯文本放进草稿，因此模型收到的是用户消息里的代理名称；委派给该代理是宿主机的 `faberloom_agents_delegate` 工具，而从 `/routine` 启动例程是宿主机的执行服务。
+
+#### Token 影响
+
+每个请求零直接 token。
+
+#### KV 缓存影响
+
+与实时请求无关：面板注册从不触碰请求前缀。
+
+<a id="known-limitations-and-deferred-work"></a>
+## 已知限制与延期工作
+
+- **在界面允许处提供面板动作** — Espacios 通过已挂载的目录选择器把已有文件夹采纳为该 Space 的工作区，并支持创建、重命名、编辑该 Space 的 agent 指令，以及把该 Space 的 context 导出写入该文件夹；Agentes 支持创建、重命名与（代理）停用；Mesa 支持创建与批准/拒绝；Rutinas 支持创建与启停；Memoria 支持记录一条语句；Email 支持下载附件、把它作为真实文件保存到所选 Space 的文件夹，或把所选 Space 文件夹中的文件作为附件发送。看板修订提交、模型策略与例程步骤编辑在其界面落地前仍属于产品服务。
+- **记忆遵循流水线** — 记录语句会追加到 agent-memory 入口，蒸馏后的行可能在下次读取后出现。
+- **活动事件驱动刷新，而非推送** — 面板在 harness 转发会话活动事件时、挂载时以及每次写入后重新读取。
+- **行元数据随侧边栏的投影更新** — 模式、分组与徽标是侧边栏按读取解析的 `sidebar.panellist` 注册选项；徽标显示本界面最后发布的总览，并随侧边栏下一次投影行而出现。
+- **内置 locale 下使用西班牙语文案** — FaberLoom 的产品语言是西班牙语，而客户端 locale 运行时要求每个命名空间注册两个内置 locale，因此 `zh` 与 `en` 都承载西班牙语字典，直到出现一等公民的 `es` locale。
+
+<a id="dev-note"></a>
+### 开发备注
+
+<details>
+<summary>维护者工作上下文 — 点击展开</summary>
+
+分区身份集中在一个数组（`FABERLOOM_SECTIONS`）中：侧边栏 id、主面板 key、行顺序、标签 key、导航模式与分组 key、可选的按总览计数的徽标，以及两个占用者。新增一个界面只需一条记录加上它的文案 key。在平板断点以下，表格/检查器分栏折叠为一列（检查器成为表格下方的整宽块），且每个表格在各自的卡片内横向平移并带粘性表头。
+
+</details>
+
+**Runtime invariant:** 不发布 companion。每个注册都是插件 fiber 上的 effect，浏览器规格证明侧边栏行、主面板与品牌名都会随该 fiber 的释放而消失。