@dsh-workbench/core 0.1.14 → 0.1.15

package/dist/host/index.js

@@ -1,6 +1,6 @@
 import { createHash, randomUUID } from "node:crypto";
-import fs, { readFileSync } from "node:fs";
-import path, { join } from "node:path";
+import fs, { existsSync, readFileSync, readdirSync, realpathSync, statSync } from "node:fs";
+import path, { join, resolve, sep } from "node:path";
 //#region ../shared/dist/config/constants.js
 var PLUGIN_ID = "@dsh-workbench/core";
 var API_PREFIX = "/workbench/api";
@@ -96,6 +96,516 @@ function workspacesRoot() {
 	return `${workbenchRoot()}/workspaces`;
 }
 //#endregion
+//#region ../shared/dist/host/opencli-window.js
+var OPENCLI_WINDOW_ENV = "OPENCLI_WINDOW=background";
+function backgroundPrefix() {
+	return [quoteShellArg("env"), quoteShellArg(OPENCLI_WINDOW_ENV)];
+}
+function backgroundLine(command, argv) {
+	return [
+		...backgroundPrefix(),
+		quoteShellArg(command),
+		...argv.map(quoteShellArg)
+	].join(" ");
+}
+//#endregion
+//#region ../shared/dist/host/shell.js
+var DEFAULT_MAX_BYTES = 8388608;
+async function runShell(shell, command, options = {}) {
+	const { workdir, timeoutMs = GIT_TIMEOUT_MS, signal } = options;
+	const spec = shell.resolve({
+		command,
+		...workdir === void 0 ? {} : { workdir },
+		timeoutMs,
+		onExpiry: "kill",
+		stdoutMaxBytes: DEFAULT_MAX_BYTES,
+		...signal === void 0 ? {} : { signal }
+	});
+	const result = await (await shell.execute(spec)).result();
+	return {
+		exitCode: result.exitCode,
+		timedOut: result.timedOut === true,
+		aborted: result.aborted === true,
+		stdout: result.stdout.text,
+		stderr: result.stderr.text,
+		truncated: result.stdout.truncated || result.stderr.truncated
+	};
+}
+var DEFAULT_TIMEOUT_MS$1 = 25e3;
+var DEFAULT_RETRY_MS = 1200;
+var DEFAULT_SETTLE_MS$1 = 900;
+var AUTH_CODES = /* @__PURE__ */ new Set([
+	"NOT_LOGGED_IN",
+	"NOT_LOGIN",
+	"AUTH_FAILED",
+	"AUTH_REQUIRED",
+	"UNAUTHENTICATED",
+	"UNAUTHORIZED",
+	"TOKEN_EXPIRED"
+]);
+var PERMISSION_CODES = /* @__PURE__ */ new Set([
+	"FORBIDDEN",
+	"PERMISSION_DENIED",
+	"NO_PERMISSION",
+	"EACCES"
+]);
+function asRecord$7(value) {
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+function textOf$3(value) {
+	return typeof value === "string" ? value.trim() : "";
+}
+function codeOf(page) {
+	const record = asRecord$7(page);
+	return record === void 0 ? "" : textOf$3(record["code"]);
+}
+function messageOf$1(page) {
+	const record = asRecord$7(page);
+	return record === void 0 ? "" : textOf$3(record["message"]);
+}
+function hintOf$1(page) {
+	const record = asRecord$7(page);
+	const hint = record === void 0 ? "" : textOf$3(record["hint"]);
+	return hint === "" ? void 0 : hint;
+}
+function pageFailed(page) {
+	const record = asRecord$7(page);
+	return record !== void 0 && record["ok"] === false;
+}
+function blockerFor(code) {
+	const normalized = code.trim().toUpperCase().replace(/-/g, "_");
+	if (normalized === "") return void 0;
+	const matches = (set) => [...set].some((one) => normalized === one || normalized.endsWith(`_${one}`));
+	if (matches(PERMISSION_CODES)) return "permission-denied";
+	if (matches(AUTH_CODES) || normalized.includes("UNAUTH")) return "auth-required";
+}
+function sleep$1(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function shellRun(shell, command, argv, timeoutMs) {
+	const result = await runShell(shell, backgroundLine(command, argv), { timeoutMs });
+	if (result.timedOut) return {
+		kind: "timeout",
+		detail: `没在 ${Math.round(timeoutMs / 1e3)} 秒内返回`,
+		stderr: result.stderr
+	};
+	if (result.exitCode !== 0) return {
+		kind: "failed",
+		detail: tailLines(result.stderr || result.stdout, 4),
+		stderr: result.stderr
+	};
+	return {
+		kind: "ok",
+		stdout: result.stdout
+	};
+}
+async function evalOnce(shell, command, session, script, timeoutMs, retryMs) {
+	const run = async () => {
+		let attempt;
+		try {
+			attempt = await shellRun(shell, command, [
+				"browser",
+				session,
+				"eval",
+				script,
+				"--window",
+				"background"
+			], timeoutMs);
+		} catch (error) {
+			return {
+				kind: "failure",
+				result: {
+					ok: false,
+					code: "cli-exec-failed",
+					message: "读不了：opencli 起不来",
+					hint: "确认这台机器上 opencli 能跑（工作台会自己把它挂好）",
+					detail: error instanceof Error ? error.message : String(error)
+				}
+			};
+		}
+		if (attempt.kind === "timeout") return {
+			kind: "failure",
+			result: {
+				ok: false,
+				code: "cli-timeout",
+				message: "这次没读到（等超时了）",
+				hint: "稍后重试",
+				detail: attempt.detail
+			}
+		};
+		if (attempt.kind === "failed") {
+			const normalized = attempt.stderr.trim().toUpperCase().replace(/-/g, "_");
+			const forbidden = [...PERMISSION_CODES].some((one) => normalized.includes(one));
+			return {
+				kind: "failure",
+				result: {
+					ok: false,
+					code: forbidden ? "permission-denied" : "cli-exec-failed",
+					message: forbidden ? "没有权限在这台机器上读" : "读不了（命令失败）",
+					hint: forbidden ? "换一个有权限的账号，或让用户开权限" : "把下面这段原始输出看一眼再重试",
+					detail: attempt.detail
+				}
+			};
+		}
+		const value = parseJsonLoose(attempt.stdout);
+		if (value === void 0) return {
+			kind: "failure",
+			result: {
+				ok: false,
+				code: "cli-exec-failed",
+				message: "读到了、但不是 JSON",
+				hint: "脚本必须回 JSON",
+				detail: tailLines(attempt.stdout, 4)
+			}
+		};
+		return {
+			kind: "value",
+			value
+		};
+	};
+	const first = await run();
+	if (first.kind === "value") return first;
+	if (first.result.code !== "cli-exec-failed") return first;
+	await sleep$1(retryMs);
+	return run();
+}
+async function openOnce$1(shell, command, session, url, timeoutMs) {
+	let attempt;
+	try {
+		attempt = await shellRun(shell, command, [
+			"browser",
+			session,
+			"open",
+			url,
+			"--window",
+			"background"
+		], timeoutMs);
+	} catch (error) {
+		return {
+			ok: false,
+			code: "cli-exec-failed",
+			message: "打不开那个页面",
+			hint: "确认 opencli 能跑起来",
+			detail: error instanceof Error ? error.message : String(error),
+			helpUrl: url
+		};
+	}
+	if (attempt.kind === "ok") return void 0;
+	return {
+		ok: false,
+		code: attempt.kind === "timeout" ? "cli-timeout" : "cli-exec-failed",
+		message: "打不开那个页面",
+		hint: "在浏览器里手动打开一次，然后重试",
+		detail: attempt.detail,
+		helpUrl: url
+	};
+}
+async function browserRead(options) {
+	const { shell, script, url, loginUrl, open = true } = options;
+	const command = options.command ?? "opencli";
+	const session = options.session ?? "workbench";
+	const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS$1;
+	const retryMs = options.retryMs ?? DEFAULT_RETRY_MS;
+	const settleMs = options.settleMs ?? DEFAULT_SETTLE_MS$1;
+	const at = Date.now();
+	const first = await evalOnce(shell, command, session, script, timeoutMs, retryMs);
+	if (first.kind === "failure") return {
+		...first.result,
+		at
+	};
+	let page = first.value;
+	if (codeOf(page) === "not-on-site") {
+		if (!open || url === void 0) return {
+			ok: false,
+			code: "cli-exec-failed",
+			at,
+			message: "没停在那套系统上",
+			hint: "先在那个浏览器里把它打开，再读一次",
+			detail: JSON.stringify(page),
+			...url === void 0 ? {} : { helpUrl: url }
+		};
+		const opened = await openOnce$1(shell, command, session, url, timeoutMs);
+		if (opened !== void 0) return {
+			...opened,
+			at
+		};
+		await sleep$1(settleMs);
+		const second = await evalOnce(shell, command, session, script, timeoutMs, retryMs);
+		if (second.kind === "failure") return {
+			...second.result,
+			at
+		};
+		page = second.value;
+		if (codeOf(page) === "not-on-site") return {
+			ok: false,
+			code: "cli-exec-failed",
+			at,
+			message: "打开了页面、又读了一遍，仍然不在那套系统上",
+			hint: "确认这个地址就是那套系统（或者它跳到了别的域）",
+			detail: JSON.stringify(page),
+			helpUrl: url
+		};
+	}
+	if (!pageFailed(page)) return {
+		ok: true,
+		code: "ok",
+		at,
+		value: page,
+		message: "读到了"
+	};
+	const pageCode = codeOf(page) || "read-failed";
+	const message = messageOf$1(page) || `读不到（${pageCode}）`;
+	const blocker = blockerFor(pageCode);
+	if (blocker === "auth-required") return {
+		ok: false,
+		code: blocker,
+		at,
+		pageCode,
+		message,
+		hint: "去登录一次，再重试",
+		detail: JSON.stringify(page),
+		...loginUrl === void 0 && url === void 0 ? {} : { helpUrl: loginUrl ?? url }
+	};
+	if (blocker === "permission-denied") return {
+		ok: false,
+		code: blocker,
+		at,
+		pageCode,
+		message,
+		hint: "这个账号没有权限",
+		detail: JSON.stringify(page),
+		...loginUrl === void 0 && url === void 0 ? {} : { helpUrl: loginUrl ?? url }
+	};
+	return {
+		ok: false,
+		code: pageCode,
+		at,
+		pageCode,
+		message,
+		detail: JSON.stringify(page),
+		...hintOf$1(page) === void 0 ? {} : { hint: hintOf$1(page) }
+	};
+}
+//#endregion
+//#region ../shared/dist/host/browser-find.js
+var DEFAULT_TIMEOUT_MS = 25e3;
+var DEFAULT_SETTLE_MS = 2500;
+var URL_TIMEOUT_MS = 8e3;
+var DEFAULT_LIMIT = 50;
+var DEFAULT_TEXT_MAX = 200;
+function asRecord$6(value) {
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+function textOf$2(value) {
+	return typeof value === "string" ? value.trim() : "";
+}
+function entriesOf(value) {
+	const record = asRecord$6(value);
+	const raw = record === void 0 ? void 0 : record["entries"];
+	if (!Array.isArray(raw)) return [];
+	const entries = [];
+	for (const one of raw) {
+		const item = asRecord$6(one);
+		if (item === void 0) continue;
+		const nth = typeof item["nth"] === "number" ? item["nth"] : entries.length;
+		entries.push({
+			text: textOf$2(item["text"]),
+			tag: textOf$2(item["tag"]),
+			nth
+		});
+	}
+	return entries;
+}
+function reasonOf(stdout, stderr) {
+	const parsed = asRecord$6(parseJsonLoose(stdout));
+	const error = parsed === void 0 ? void 0 : asRecord$6(parsed["error"]);
+	const message = error === void 0 ? "" : textOf$2(error["message"]);
+	if (message !== "") return message;
+	const lines = (stderr.trim() === "" ? stdout : stderr).split("\n").map((one) => one.trim()).filter((one) => one !== "");
+	return (lines[lines.length - 1] ?? "").slice(-200);
+}
+function hintOf(stdout) {
+	const parsed = asRecord$6(parseJsonLoose(stdout));
+	const error = parsed === void 0 ? void 0 : asRecord$6(parsed["error"]);
+	const hint = error === void 0 ? "" : textOf$2(error["hint"]);
+	return hint === "" ? void 0 : hint;
+}
+function sameOrigin(left, right) {
+	try {
+		return new URL(left).origin === new URL(right).origin;
+	} catch {
+		return false;
+	}
+}
+function urlOf(stdout) {
+	const bare = (stdout.split("\n").map((one) => one.trim()).filter((one) => one !== "")[0] ?? "").replace(/^url:\s*/i, "").trim().replace(/^["']+|["']+$/g, "");
+	if (bare.startsWith("{")) {
+		const parsed = asRecord$6(parseJsonLoose(bare));
+		const url = parsed === void 0 ? "" : textOf$2(parsed["url"]);
+		if (url !== "") return url;
+	}
+	return bare;
+}
+async function currentUrl(shell, command, session) {
+	const line = backgroundLine(command, [
+		"browser",
+		session,
+		"get",
+		"url",
+		"--window",
+		"background"
+	]);
+	try {
+		const result = await runShell(shell, line, { timeoutMs: URL_TIMEOUT_MS });
+		if (result.exitCode !== 0) return "";
+		return urlOf(result.stdout);
+	} catch {
+		return "";
+	}
+}
+function sleep(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function findOnce(shell, command, session, css, limit, textMax, timeoutMs) {
+	const result = await runShell(shell, backgroundLine(command, [
+		"browser",
+		session,
+		"find",
+		"--css",
+		css,
+		"--limit",
+		String(limit),
+		"--text-max",
+		String(textMax),
+		"--window",
+		"background"
+	]), { timeoutMs });
+	if (result.timedOut) return {
+		kind: "timeout",
+		detail: `没在 ${Math.round(timeoutMs / 1e3)} 秒内返回`
+	};
+	if (result.exitCode !== 0) return {
+		kind: "failed",
+		detail: reasonOf(result.stdout, result.stderr),
+		...hintOf(result.stdout) === void 0 ? {} : { hint: hintOf(result.stdout) }
+	};
+	return {
+		kind: "ok",
+		entries: entriesOf(parseJsonLoose(result.stdout)),
+		stdout: result.stdout
+	};
+}
+async function openOnce(shell, command, session, url, timeoutMs) {
+	const line = backgroundLine(command, [
+		"browser",
+		session,
+		"open",
+		url,
+		"--window",
+		"background"
+	]);
+	let result;
+	try {
+		result = await runShell(shell, line, { timeoutMs });
+	} catch (error) {
+		return error instanceof Error ? error.message : String(error);
+	}
+	if (result.timedOut) return `没在 ${Math.round(timeoutMs / 1e3)} 秒内打开`;
+	if (result.exitCode !== 0) {
+		const reason = reasonOf(result.stdout, result.stderr);
+		return reason === "" ? `opencli 打开失败（退出码 ${String(result.exitCode ?? "?")}）` : reason;
+	}
+}
+async function browserFind(options) {
+	const { shell, css, url, open = true } = options;
+	const command = options.command ?? "opencli";
+	const session = options.session ?? "workbench";
+	const limit = options.limit ?? DEFAULT_LIMIT;
+	const textMax = options.textMax ?? DEFAULT_TEXT_MAX;
+	const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+	const settleMs = options.settleMs ?? DEFAULT_SETTLE_MS;
+	const at = Date.now();
+	const find = async () => {
+		try {
+			return await findOnce(shell, command, session, css, limit, textMax, timeoutMs);
+		} catch (error) {
+			return {
+				kind: "failed",
+				detail: error instanceof Error ? error.message : String(error),
+				hint: "确认这台机器上 opencli 能跑（工作台会自己把它挂好）"
+			};
+		}
+	};
+	const canMove = open && url !== void 0;
+	if (canMove) {
+		const here = await currentUrl(shell, command, session);
+		if (here !== "" && !sameOrigin(here, url)) {
+			const opened = await openOnce(shell, command, session, url, timeoutMs);
+			if (opened !== void 0) return {
+				ok: false,
+				code: "cli-exec-failed",
+				at,
+				entries: [],
+				count: 0,
+				message: "打不开那个页面",
+				hint: "在浏览器里手动打开一次，然后重试",
+				detail: opened,
+				helpUrl: url
+			};
+			await sleep(settleMs);
+		}
+	}
+	let outcome = await find();
+	if (outcome === void 0) return {
+		ok: false,
+		code: "cli-exec-failed",
+		at,
+		entries: [],
+		count: 0,
+		message: "没找到元素"
+	};
+	if (outcome.kind === "failed" && canMove) {
+		if (await openOnce(shell, command, session, url, timeoutMs) === void 0) {
+			await sleep(settleMs);
+			const second = await find();
+			if (second !== void 0) outcome = second;
+		}
+	}
+	if (outcome.kind === "timeout") return {
+		ok: false,
+		code: "cli-timeout",
+		at,
+		entries: [],
+		count: 0,
+		message: "这次没找到元素（等超时了）",
+		hint: "稍后重试",
+		detail: outcome.detail,
+		...url === void 0 ? {} : { helpUrl: url }
+	};
+	if (outcome.kind === "failed") {
+		const detail = outcome.detail;
+		return {
+			ok: false,
+			code: "cli-exec-failed",
+			at,
+			entries: [],
+			count: 0,
+			message: detail === "" ? "没找到元素（opencli 命令失败）" : `没找到元素：${detail}`,
+			...outcome.hint === void 0 ? {} : { hint: outcome.hint },
+			...detail === "" ? {} : { detail },
+			...url === void 0 ? {} : { helpUrl: url }
+		};
+	}
+	return {
+		ok: true,
+		code: "ok",
+		at,
+		entries: outcome.entries,
+		count: outcome.entries.length,
+		message: outcome.entries.length === 0 ? "页面上没有匹配的元素" : `找到 ${String(outcome.entries.length)} 个元素`
+	};
+}
+//#endregion
 //#region ../shared/dist/host/facts.js
 function createFactLog(options = {}) {
 	const epoch = options.epoch ?? `e${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`;
@@ -145,29 +655,6 @@ function wroteNow(result) {
 	return typeof wrote === "boolean" ? wrote : void 0;
 }
 //#endregion
-//#region ../shared/dist/host/shell.js
-var DEFAULT_MAX_BYTES = 8388608;
-async function runShell(shell, command, options = {}) {
-	const { workdir, timeoutMs = GIT_TIMEOUT_MS, signal } = options;
-	const spec = shell.resolve({
-		command,
-		...workdir === void 0 ? {} : { workdir },
-		timeoutMs,
-		onExpiry: "kill",
-		stdoutMaxBytes: DEFAULT_MAX_BYTES,
-		...signal === void 0 ? {} : { signal }
-	});
-	const result = await (await shell.execute(spec)).result();
-	return {
-		exitCode: result.exitCode,
-		timedOut: result.timedOut === true,
-		aborted: result.aborted === true,
-		stdout: result.stdout.text,
-		stderr: result.stderr.text,
-		truncated: result.stdout.truncated || result.stderr.truncated
-	};
-}
-//#endregion
 //#region ../shared/dist/host/provision.js
 var PROVISION_ACTIONS = [
 	"install",
@@ -197,10 +684,10 @@ var TARGET_CODE = {
 	name: "workbench/no-name",
 	requestId: "workbench/no-request-id"
 };
-function asRecord$3(value) {
+function asRecord$5(value) {
 	return typeof value === "object" && value !== null ? value : {};
 }
-function stringsOf$1(value) {
+function stringsOf$2(value) {
 	if (!Array.isArray(value)) return void 0;
 	const items = value.filter((item) => typeof item === "string" && item.trim() !== "");
 	return items.length === 0 ? void 0 : items;
@@ -228,7 +715,7 @@ function requestOf$1(action, value) {
 	};
 }
 function parseProvisionBody(body) {
-	const raw = asRecord$3(body);
+	const raw = asRecord$5(body);
 	const action = raw.action;
 	if (typeof action !== "string" || !PROVISION_ACTIONS.includes(action)) return {
 		ok: false,
@@ -248,7 +735,7 @@ function parseProvisionBody(body) {
 		request: requestOf$1(wanted, value.trim())
 	};
 	const registry = typeof raw.registry === "string" && raw.registry.trim() !== "" ? raw.registry.trim() : void 0;
-	const approvedBuilds = stringsOf$1(raw.approvedBuilds);
+	const approvedBuilds = stringsOf$2(raw.approvedBuilds);
 	const requestId = typeof raw.requestId === "string" && raw.requestId.trim() !== "" ? raw.requestId.trim() : void 0;
 	return {
 		ok: true,
@@ -281,6 +768,7 @@ var WorkbenchDataError = class extends Error {
 };
 function opencliCommandLine(command, argv, session = "persistent") {
 	return [
+		...backgroundPrefix(),
 		quoteShellArg(command),
 		...argv.map(quoteShellArg),
 		...session === "persistent" ? SITE_SESSION_ARGS : [],
@@ -578,7 +1066,7 @@ function capabilityHandler(probe) {
 		};
 	};
 }
-function healthHandler(ctx) {
+function healthHandler(ctx, opencli) {
 	return () => {
 		const dir = ctx.get("profileContext")?.dir;
 		return {
@@ -587,7 +1075,8 @@ function healthHandler(ctx) {
 			profile: dir === void 0 ? null : dir.split("/").pop(),
 			profileDir: dir ?? null,
 			pid: process.pid,
-			now: (/* @__PURE__ */ new Date()).toISOString()
+			now: (/* @__PURE__ */ new Date()).toISOString(),
+			...opencli === void 0 ? {} : { opencli }
 		};
 	};
 }
@@ -778,6 +1267,14 @@ function toolchainOpencliDir() {
 function vendorPrefix() {
 	return `${isolatedRoot()}/plugins-npm`;
 }
+function vendorPluginsDir() {
+	return `${vendorPrefix()}/node_modules`;
+}
+var OPENCLI_CATALOG_ENV = "DSH_WB_OPENCLI_CATALOG";
+function cliCatalogPath() {
+	const override = process.env[OPENCLI_CATALOG_ENV]?.trim();
+	return override === void 0 || override === "" ? `${toolchainOpencliDir()}/cli-manifest.json` : override;
+}
 function vendorPeerLink() {
 	const base = `${vendorPrefix()}/node_modules`;
 	const [scope] = OPENCLI_NPM_PACKAGE.split("/");
@@ -1118,10 +1615,10 @@ var CANCELLATIONS = [
 	"too-late",
 	"not-running"
 ];
-function asRecord$2(value) {
+function asRecord$4(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
-function asText$2(value) {
+function asText$4(value) {
 	return typeof value === "string" ? value : "";
 }
 function pick(allowed, value) {
@@ -1135,7 +1632,7 @@ function asTextArray(value) {
 	return Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
 }
 function asRegistries(raw) {
-	const record = asRecord$2(raw);
+	const record = asRecord$4(raw);
 	if (record === void 0) return null;
 	const registry = asRegistry(record.registry);
 	if (registry === void 0) return null;
@@ -1146,35 +1643,35 @@ function asRegistries(raw) {
 	};
 }
 function asPackageResult(raw) {
-	const record = asRecord$2(raw);
+	const record = asRecord$4(raw);
 	if (record === void 0) return void 0;
 	const kind = pick(FAILURE_KINDS, record.kind);
 	return {
 		exitCode: typeof record.exitCode === "number" ? record.exitCode : -1,
-		output: asText$2(record.output),
+		output: asText$4(record.output),
 		truncated: record.truncated === true,
-		logPath: asText$2(record.logPath),
+		logPath: asText$4(record.logPath),
 		...kind === void 0 ? {} : { kind }
 	};
 }
 function asChange(raw) {
-	const record = asRecord$2(raw);
+	const record = asRecord$4(raw);
 	if (record === void 0) return null;
 	const application = pick(APPLICATIONS, record.application);
 	const stage = pick(STAGES, record.stage);
 	if (application === void 0 || stage === void 0) return null;
-	const error = asRecord$2(record.error);
+	const error = asRecord$4(record.error);
 	const packageResult = asPackageResult(record.packageResult);
 	const pendingBuilds = asTextArray(record.pendingBuilds);
 	const failedAt = pick(["registry", "spec-host"], record.failedAt);
-	const bundle = asText$2(record.bundle);
-	const errorCode = error === void 0 ? "" : asText$2(error.code);
-	const errorDetail = error === void 0 ? "" : asText$2(error.diagnostic);
+	const bundle = asText$4(record.bundle);
+	const errorCode = error === void 0 ? "" : asText$4(error.code);
+	const errorDetail = error === void 0 ? "" : asText$4(error.diagnostic);
 	return {
 		application,
 		stage,
 		changed: record.changed === true,
-		target: asText$2(record.target),
+		target: asText$4(record.target),
 		...bundle === "" ? {} : { bundle },
 		...errorCode === "" ? {} : { errorCode },
 		...errorDetail === "" ? {} : { errorDetail },
@@ -1184,16 +1681,16 @@ function asChange(raw) {
 	};
 }
 function asInspection(raw) {
-	const record = asRecord$2(raw);
+	const record = asRecord$4(raw);
 	if (record === void 0) return null;
-	const status = asText$2(record.status);
+	const status = asText$4(record.status);
 	if (status === "refused") {
 		const problem = pick(PROBLEMS, record.problem) ?? "unknown";
 		const registries = Array.isArray(record.registries) ? record.registries.map(asRegistry).filter((item) => item !== void 0) : [];
 		return {
 			status: "refused",
 			problem,
-			reason: asText$2(record.reason),
+			reason: asText$4(record.reason),
 			...registries.length === 0 ? {} : { registries }
 		};
 	}
@@ -1201,10 +1698,10 @@ function asInspection(raw) {
 	const kind = pick(SPEC_KINDS, record.kind);
 	const registry = asRegistry(record.registry);
 	if (kind === void 0 || registry === void 0) return null;
-	const name = asText$2(record.name);
-	const version = asText$2(record.version);
-	const description = asText$2(record.description);
-	const host = asText$2(record.host);
+	const name = asText$4(record.name);
+	const version = asText$4(record.version);
+	const description = asText$4(record.description);
+	const host = asText$4(record.host);
 	return {
 		status: "accepted",
 		kind,
@@ -1242,17 +1739,17 @@ function readBundleManager(ctx) {
 		},
 		async cancel(requestId) {
 			if (typeof face.cancelInstall !== "function") return null;
-			return pick(CANCELLATIONS, (asRecord$2(await face.cancelInstall(requestId)) ?? {}).status) ?? null;
+			return pick(CANCELLATIONS, (asRecord$4(await face.cancelInstall(requestId)) ?? {}).status) ?? null;
 		}
 	};
 }
 //#endregion
 //#region src/shared/api/host/installed-module.ts
 var PACKAGE_NAME$1 = /^(?:@[a-z0-9][a-z0-9._~-]*\/)?[a-z0-9][a-z0-9._~-]*$/;
-function asRecord$1(value) {
+function asRecord$3(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
-function asText$1(value) {
+function asText$3(value) {
 	return typeof value === "string" ? value : "";
 }
 function isPackageName(value) {
@@ -1263,7 +1760,7 @@ function profileDirOf(ctx) {
 	const dir = typeof profile?.dir === "string" ? profile.dir.trim() : "";
 	return dir === "" ? null : dir;
 }
-function stringsOf(value) {
+function stringsOf$1(value) {
 	return Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
 }
 function profileModules(profileDir) {
@@ -1274,10 +1771,11 @@ function profileModules(profileDir) {
 	} catch {
 		return [];
 	}
-	const record = asRecord$1(manifest);
+	const record = asRecord$3(manifest);
 	if (record === void 0) return [];
-	const bundles = stringsOf(asRecord$1(asRecord$1(record.dsh)?.profile)?.bundles);
-	const names = bundles.length > 0 ? bundles : Object.keys(asRecord$1(record.dependencies) ?? {});
+	const bundles = stringsOf$1(asRecord$3(asRecord$3(record.dsh)?.profile)?.bundles);
+	const dependencies = asRecord$3(record.dependencies) ?? {};
+	const names = bundles.length > 0 ? bundles : Object.keys(dependencies);
 	const found = [];
 	for (const pkg of names) {
 		const read = readInstalledModule(profileDir, pkg);
@@ -1285,7 +1783,8 @@ function profileModules(profileDir) {
 			pkg: read.pkg,
 			unit: read.unit,
 			version: read.version,
-			...read.registry === void 0 ? {} : { registry: read.registry }
+			...read.registry === void 0 ? {} : { registry: read.registry },
+			local: asText$3(dependencies[read.pkg]).startsWith("link:")
 		});
 	}
 	return found;
@@ -1323,24 +1822,24 @@ function readInstalledModule(profileDir, pkg) {
 			pkg
 		};
 	}
-	const record = asRecord$1(manifest);
+	const record = asRecord$3(manifest);
 	if (record === void 0) return {
 		kind: "unknown",
 		pkg
 	};
-	const declared = asRecord$1(asRecord$1(record.dsh)?.workbench);
-	const unit = declared === void 0 ? "" : asText$1(declared.unit);
+	const declared = asRecord$3(asRecord$3(record.dsh)?.workbench);
+	const unit = declared === void 0 ? "" : asText$3(declared.unit);
 	if (unit === "") return {
 		kind: "not-module",
 		pkg
 	};
-	const declaredRegistry = asText$1(asRecord$1(record.publishConfig)?.registry);
+	const declaredRegistry = asText$3(asRecord$3(record.publishConfig)?.registry);
 	const registry = declaredRegistry === "" ? registryFromLockfile(profileDir, pkg) : declaredRegistry;
 	return {
 		kind: "module",
 		pkg,
 		unit,
-		version: asText$1(record.version),
+		version: asText$3(record.version),
 		...registry === "" ? {} : { registry }
 	};
 }
@@ -1456,17 +1955,86 @@ function createRegistryNotebook(dir) {
 		}
 	};
 }
+//#endregion
+//#region src/shared/api/host/diy.ts
+var WORKSHOP_RELATIVE = "workbench/diy";
+function workshopPathOf(ctx) {
+	const homePath = ctx.get("dshHomePath");
+	if (typeof homePath !== "function") return null;
+	try {
+		return homePath(WORKSHOP_RELATIVE);
+	} catch {
+		return null;
+	}
+}
+//#endregion
+//#region src/shared/api/host/diy-workshop.ts
+function asRecord$2(value) {
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+function asText$2(value) {
+	return typeof value === "string" ? value.trim() : "";
+}
+function workshopPackagesDir(ctx) {
+	const root = workshopPathOf(ctx);
+	return root === null ? null : join(root, "packages");
+}
+function insideWorkshop(root, target) {
+	const base = existsSync(root) ? realpathSync(root) : resolve(root);
+	const real = existsSync(target) ? realpathSync(target) : resolve(target);
+	return real === base || real.startsWith(base + sep);
+}
+function workshopModules(packagesDir, installed = []) {
+	if (!existsSync(packagesDir)) return [];
+	const already = new Set(installed);
+	return readdirSync(packagesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() || entry.isSymbolicLink()).flatMap((entry) => {
+		const dir = join(packagesDir, entry.name);
+		let manifest;
+		try {
+			manifest = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+		} catch {
+			return [];
+		}
+		const record = asRecord$2(manifest);
+		const declared = record === void 0 ? void 0 : asRecord$2(asRecord$2(record.dsh)?.workbench);
+		const unit = declared === void 0 ? "" : asText$2(declared.unit);
+		if (unit === "") return [];
+		return [{
+			unit,
+			name: asText$2(record?.name),
+			description: asText$2(record?.description),
+			dir,
+			installed: already.has(unit)
+		}];
+	}).sort((left, right) => left.unit.localeCompare(right.unit));
+}
+function inWorkshopSession(ctx, workspace) {
+	const root = workshopPathOf(ctx);
+	return root !== null && workspace !== null && insideWorkshop(root, workspace);
+}
+//#endregion
+//#region src/modules/panels/unit.ts
+var PANELS_TOOL = "workbench_panels";
+var MODULES_TOOL = "workbench_modules";
+var DIY_TOOL = "workbench_diy";
 var panelsUnit = {
 	id: "panels",
 	kind: "ui",
 	card: null,
-	tools: [{
-		name: "workbench_panels",
-		writes: true
-	}, {
-		name: "workbench_modules",
-		writes: true
-	}],
+	tools: [
+		{
+			name: PANELS_TOOL,
+			writes: true
+		},
+		{
+			name: MODULES_TOOL,
+			writes: true
+		},
+		{
+			name: DIY_TOOL,
+			writes: true
+		}
+	],
 	host: {
 		inject: [],
 		optional: ["tools", "shell"]
@@ -1475,7 +2043,13 @@ var panelsUnit = {
 //#endregion
 //#region src/modules/panels/model/approval.ts
 var READ = { kind: "read" };
-var READ_ONLY_ACTIONS = /* @__PURE__ */ new Set(["list", ""]);
+var READ_ONLY_ACTIONS = /* @__PURE__ */ new Set([
+	"list",
+	"status",
+	"probe",
+	"recon",
+	""
+]);
 function actionOf$1(call) {
 	const raw = call.arguments;
 	if (typeof raw !== "object" || raw === null) return {};
@@ -1520,6 +2094,23 @@ var panelsApproval = (call) => {
 			zh: `agent 想${verb}模块 ${what}（会改这台机器上的插件）。允许吗？`
 		});
 	}
+	if (call.name === "workbench_diy") {
+		if (readAction) return READ;
+		if (action === "open") return askOf("workbench_diy open puts an already-installed module on this project panel", {
+			en: `it puts ${what} on this project's panel (nothing new gets installed on this machine). Allow?`,
+			zh: `会把${what}摆到**这个项目**的面板上（这台机器上不装新东西）。允许吗？`
+		}, {
+			en: `The agent wants to show the module ${what} on this project's panel. Allow?`,
+			zh: `agent 想把${what}显示在**这个项目**的面板上。允许吗？`
+		});
+		return askOf(`workbench_diy ${action ?? "(unknown action)"} installs a module built in the workshop and opens it on this project's panel`, {
+			en: `it installs ${what} on this machine and opens it on this project's panel. Allow?`,
+			zh: `会把${what}装到这台机器上，并在**这个项目**的面板上打开。允许吗？`
+		}, {
+			en: `The agent wants to install the module ${what} built in the DIY workshop (it changes what is installed on this machine) and open it here. Allow?`,
+			zh: `agent 想把 DIY 工坊里造好的${what}装上（会改这台机器上装的东西），并在**这个项目**的面板上打开。允许吗？`
+		});
+	}
 	if (call.name !== "workbench_panels") return void 0;
 	if (readAction) return READ;
 	if (action === "hide") return askOf("workbench_panels hide removes a module from the panel", {
@@ -1552,6 +2143,628 @@ var panelsApproval = (call) => {
 	});
 };
 //#endregion
+//#region src/shared/api/host/diy-facts.ts
+function asExported(dir) {
+	try {
+		const manifest = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+		const built = (typeof manifest.exports === "object" && manifest.exports !== null ? Object.values(manifest.exports) : []).filter((one) => typeof one === "string");
+		if (built.length > 0) return built;
+		return Object.values(manifest.dsh?.workbench?.faces ?? {}).filter((one) => typeof one === "string");
+	} catch {
+		return [];
+	}
+}
+function mtimeOf(file) {
+	try {
+		return statSync(file).mtimeMs;
+	} catch {
+		return;
+	}
+}
+function newestMtime(dir) {
+	let newest;
+	const walk = (at) => {
+		let entries;
+		try {
+			entries = readdirSync(at, { withFileTypes: true });
+		} catch {
+			return;
+		}
+		for (const entry of entries) {
+			const full = join(at, entry.name);
+			if (entry.isDirectory()) walk(full);
+			else if (entry.isFile()) {
+				const stamp = mtimeOf(full);
+				if (stamp !== void 0 && (newest === void 0 || stamp > newest)) newest = stamp;
+			}
+		}
+	};
+	walk(dir);
+	return newest;
+}
+function moduleBuildFacts(dir) {
+	const artifacts = asExported(dir).map((rel) => ({
+		path: rel,
+		mtime: mtimeOf(join(dir, rel))
+	}));
+	const present = artifacts.filter((one) => one.mtime !== void 0);
+	const oldestBuilt = present.reduce((min, one) => min === void 0 || one.mtime < min ? one.mtime : min, void 0);
+	const newestSource = newestMtime(join(dir, "src"));
+	return {
+		artifacts: artifacts.map((one) => ({
+			path: one.path,
+			at: one.mtime === void 0 ? null : new Date(one.mtime).toISOString()
+		})),
+		builtAll: present.length === artifacts.length && artifacts.length > 0,
+		stale: newestSource !== void 0 && oldestBuilt !== void 0 && newestSource > oldestBuilt
+	};
+}
+//#endregion
+//#region src/shared/api/host/opencli-command.ts
+var OPENCLI_PATH_FALLBACK = "opencli";
+function isolatedOpencliPathOf(ctx) {
+	const homePath = ctx.get("dshHomePath");
+	if (typeof homePath !== "function") return null;
+	try {
+		return join(homePath("workbench/opencli/bin/opencli"));
+	} catch {
+		return null;
+	}
+}
+function opencliCommandOf(ctx) {
+	const isolated = isolatedOpencliPathOf(ctx);
+	const fromEnv = process.env.DSH_WORKBENCH_OPENCLI;
+	if (fromEnv !== void 0 && fromEnv !== "") return {
+		command: fromEnv,
+		source: "env",
+		isolated
+	};
+	if (isolated !== null && existsSync(isolated)) return {
+		command: isolated,
+		source: "isolated",
+		isolated
+	};
+	return {
+		command: OPENCLI_PATH_FALLBACK,
+		source: "path",
+		isolated
+	};
+}
+//#endregion
+//#region src/shared/api/host/diy-recon.ts
+var SITE_LIMIT = 6;
+var COMMAND_LIMIT = 12;
+var SHOWN_LIMIT = 6;
+var PLUGIN_PREFIX = "opencli-plugin-";
+function text(value) {
+	return typeof value === "string" ? value.trim() : "";
+}
+function stringsOf(value) {
+	return Array.isArray(value) ? value.filter((one) => typeof one === "string") : [];
+}
+function manifestCommandsOf(raw) {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return [];
+	}
+	if (!Array.isArray(parsed)) return [];
+	const commands = [];
+	for (const one of parsed) {
+		if (typeof one !== "object" || one === null) continue;
+		const row = one;
+		const declared = text(row["command"]);
+		const site = text(row["site"]) || declared.split("/")[0] || "";
+		const name = text(row["name"]) || declared.split("/")[1] || "";
+		const command = declared === "" ? site === "" || name === "" ? "" : `${site}/${name}` : declared;
+		if (command === "" || site === "") continue;
+		const access = text(row["access"]);
+		commands.push({
+			command,
+			site,
+			name: name === "" ? command.slice(command.indexOf("/") + 1) : name,
+			domain: text(row["domain"]).toLowerCase(),
+			description: text(row["description"]),
+			access: access === "" ? "read" : access,
+			strategy: text(row["strategy"]).toLowerCase(),
+			browser: row["browser"] === true,
+			example: text(row["example"]),
+			columns: stringsOf(row["columns"])
+		});
+	}
+	return commands;
+}
+function pluginNamesOf(entries) {
+	return entries.filter((one) => one.startsWith(PLUGIN_PREFIX)).map((one) => one.slice(15)).filter((one) => one !== "").sort();
+}
+function pluginCommandsOf(files) {
+	return files.filter((one) => one.endsWith(".js")).map((one) => one.slice(0, -3)).filter((one) => one !== "index" && !one.startsWith("_")).sort();
+}
+function hostOf(url) {
+	const trimmed = url.trim();
+	if (trimmed === "") return "";
+	try {
+		return new URL(trimmed).hostname.toLowerCase().replace(/^www\./, "");
+	} catch {
+		return "";
+	}
+}
+function keywordsOf(keyword, url) {
+	const words = /* @__PURE__ */ new Set();
+	const trimmed = keyword.trim().toLowerCase();
+	if (trimmed !== "") words.add(trimmed);
+	const host = hostOf(url);
+	if (host !== "") words.add(host);
+	return [...words];
+}
+function scoreOf(command, word) {
+	const site = command.site.toLowerCase();
+	const name = command.name.toLowerCase();
+	if (word === "") return 0;
+	if (site === word) return 100;
+	if (site.includes(word)) return 80;
+	if (command.domain !== "" && command.domain.includes(word)) return 70;
+	if (site.length >= 3 && word.includes(site)) return 45;
+	if (name === word) return 65;
+	if (name.includes(word)) return 55;
+	if (command.command.toLowerCase().includes(word)) return 50;
+	if (command.description.toLowerCase().includes(word)) return 30;
+	return 0;
+}
+function reconOf(commands, plugins, keywords) {
+	const keyword = keywords[0] ?? "";
+	const best = /* @__PURE__ */ new Map();
+	for (const command of commands) {
+		let score = 0;
+		for (const word of keywords) score = Math.max(score, scoreOf(command, word));
+		if (score === 0) continue;
+		const current = best.get(command.command);
+		if (current === void 0 || current.score < score) best.set(command.command, {
+			command,
+			score
+		});
+	}
+	const grouped = /* @__PURE__ */ new Map();
+	for (const entry of best.values()) {
+		const group = grouped.get(entry.command.site) ?? {
+			best: 0,
+			rows: []
+		};
+		group.best = Math.max(group.best, entry.score);
+		group.rows.push(entry);
+		grouped.set(entry.command.site, group);
+	}
+	const base = {
+		keyword,
+		sites: [...grouped.entries()].sort((left, right) => right[1].best - left[1].best || left[0].localeCompare(right[0])).slice(0, SITE_LIMIT).map(([site, group]) => {
+			const picked = [...group.rows].sort((left, right) => (left.command.access === "write" ? 1 : 0) - (right.command.access === "write" ? 1 : 0) || right.score - left.score || left.command.command.localeCompare(right.command.command)).slice(0, COMMAND_LIMIT).map((one) => one.command);
+			const first = picked[0];
+			return {
+				site,
+				domain: first?.domain ?? "",
+				strategy: first?.strategy ?? "",
+				browser: first?.browser === true,
+				commands: picked
+			};
+		}),
+		plugins: plugins.filter((plugin) => {
+			const name = plugin.name.toLowerCase();
+			return keywords.some((word) => word !== "" && (name.includes(word) || word.includes(name)));
+		}),
+		next: "",
+		text: ""
+	};
+	const next = nextOf(base);
+	const withNext = {
+		...base,
+		next
+	};
+	return {
+		...withNext,
+		text: textOf$1(withNext)
+	};
+}
+function nextOf(answer) {
+	const site = answer.sites[0];
+	if (site !== void 0) {
+		const pick = site.commands.find((one) => one.access !== "write") ?? site.commands[0];
+		return `直接复用：${pick === void 0 ? `opencli ${site.site}` : pick.example === "" ? `opencli ${pick.command}` : pick.example}（这台机器上就能跑，不用装、不用点头）`;
+	}
+	const plugin = answer.plugins[0];
+	if (plugin !== void 0) return `这台机器另装的插件 ${plugin.name} 里有匹配：opencli ${plugin.name} --help 看全部命令`;
+	return "这台机器上没有现成的 —— 两条路：① 给这个站点写 adapter：opencli skills read opencli-adapter-author；② 只读一次：workbench_diy action=probe（script 读接口 / css 读 DOM）";
+}
+function textOf$1(answer) {
+	const lines = [];
+	if (answer.sites.length > 0) {
+		lines.push(`opencli 自带这 ${String(answer.sites.length)} 组能力（不用装、不用点头）：`);
+		for (const site of answer.sites) {
+			const where = site.domain === "" ? "" : `（${site.domain}）`;
+			const chrome = site.browser ? "要用你的 Chrome 登录" : "不用浏览器";
+			lines.push(`· ${site.site}${where} · ${site.strategy === "" ? "—" : site.strategy} · ${chrome}`);
+			for (const command of site.commands.slice(0, SHOWN_LIMIT)) {
+				const what = command.description === "" ? "" : ` —— ${command.description.slice(0, 60)}`;
+				lines.push(`    ${command.access === "write" ? "写" : "读"} opencli ${command.command}${what}`);
+			}
+			const rest = site.commands.length - SHOWN_LIMIT;
+			if (rest > 0) lines.push(`    … 还有 ${String(rest)} 条：opencli ${site.site} --help`);
+		}
+	}
+	if (answer.plugins.length > 0) lines.push(`这台机器另装的插件里匹配到：${answer.plugins.map((one) => `${one.name}（${String(one.commands.length)} 条命令）`).join("、")}`);
+	if (answer.sites.length === 0 && answer.plugins.length === 0) lines.push(`没匹配到「${answer.keyword}」—— 换英文名或域名再试（例：bilibili、arxiv.org）；实在没有就走下面那条。`);
+	lines.push(answer.next);
+	return lines.join("\n");
+}
+//#endregion
+//#region src/shared/api/host/diy-recon-fs.ts
+function filesOf(path) {
+	try {
+		return readdirSync(path);
+	} catch {
+		return [];
+	}
+}
+function reconCatalogOf(path = cliCatalogPath()) {
+	try {
+		return manifestCommandsOf(readFileSync(path, "utf8"));
+	} catch {
+		return;
+	}
+}
+function installedPluginsOf(dir = vendorPluginsDir()) {
+	return pluginNamesOf(filesOf(dir)).map((name) => ({
+		name,
+		commands: pluginCommandsOf(filesOf(join(dir, `opencli-plugin-${name}`)))
+	}));
+}
+//#endregion
+//#region src/modules/panels/model/diy-tools.ts
+var ACTIONS$1 = [
+	"list",
+	"status",
+	"probe",
+	"recon",
+	"install",
+	"open"
+];
+var OUTPUT_SCHEMA$2 = {
+	type: "object",
+	properties: {
+		text: { type: "string" },
+		workshop: { type: "string" },
+		modules: {
+			type: "array",
+			items: {
+				type: "object",
+				additionalProperties: true
+			}
+		},
+		unit: { type: "string" },
+		path: { type: "string" },
+		install: {
+			type: "object",
+			additionalProperties: true
+		},
+		alreadyInstalled: { type: "boolean" },
+		panel: {
+			type: "object",
+			additionalProperties: true
+		}
+	},
+	additionalProperties: true
+};
+function asRecord$1(value) {
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+function asNumber(value) {
+	if (typeof value === "number" && Number.isFinite(value)) return value;
+	if (typeof value === "string" && value.trim() !== "") {
+		const parsed = Number(value);
+		if (Number.isFinite(parsed)) return parsed;
+	}
+}
+function asText$1(value) {
+	return typeof value === "string" ? value.trim() : "";
+}
+function plainJson(value) {
+	return JSON.parse(JSON.stringify(value));
+}
+function verdictOf(change) {
+	if (change.application === "applied") return "装好了，已生效";
+	if (change.application === "restart-required") return "装好了，要重启一次才生效（装新模块、同名重装、替换已有包都走这一支）";
+	if (change.application === "overridden") return "被更高层的声明盖住了，这次没生效";
+	if (change.application === "cancelled") return "安装被取消，没有生效";
+	const tail = (change.packageResult?.output ?? "").trim().split("\n").slice(-3).join(" | ");
+	return `没装上（${change.errorCode ?? "failed"}）${tail === "" ? "" : `：${tail}`}`;
+}
+function statusOf(options) {
+	const { dir, unit, name, installed, known, open } = options;
+	const facts = moduleBuildFacts(dir);
+	const next = !installed ? "装：action=install（第一次，会让用户点头一次）" : !known ? "面板还不认得这个单元 —— 重启一次工作台（新装的模块要重启才注册进面板），重启后再 action=open" : !open ? "上板：action=open（只上板，不重装）" : !facts.builtAll ? "还没构建：pnpm exec dsh-wb-module build" : facts.stale ? "源码比产物新：pnpm exec dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新页面）" : "都在生效：改源码 → build（宿主侧秒级热换；改了 client.js 刷新页面），不要再装一遍";
+	return {
+		unit,
+		name,
+		dir,
+		installed,
+		known,
+		open,
+		artifacts: facts.artifacts,
+		stale: facts.stale,
+		next
+	};
+}
+function renderStatus(packagesDir, lines) {
+	if (lines.length === 0) return renderList(packagesDir, []);
+	return `工坊：${packagesDir}\n${lines.map((one) => {
+		return [
+			`—— ${one.unit}（${one.name}）`,
+			`   装：${one.installed ? "是" : "没有"} · 面板认得：${one.known ? "是" : "不是"} · 这个项目上开着：${one.open ? "是" : "没有"}`,
+			one.artifacts.length === 0 ? "   产物：没有" : `   产物：${one.artifacts.map((item) => `${item.path}${item.at === null ? "（缺）" : ` ${item.at.slice(11, 19)}Z`}`).join(" · ")} · 源码比产物新：${one.stale ? "是" : "没有"}`,
+			`   下一步：${one.next}`
+		].join("\n");
+	}).join("\n")}`;
+}
+function renderProbe(out) {
+	if (out.ok) return `读到了 —— 这就是那条读的返回值，把它固化成模块宿主半侧的那一条：\n${(JSON.stringify(out.value, null, 2) ?? "undefined").slice(0, 2e3)}`;
+	const lines = [`没读到（${out.code}）：${out.message}`];
+	if (out.hint !== void 0) lines.push(`照做：${out.hint}`);
+	if (out.helpUrl !== void 0) lines.push(`入口：${out.helpUrl}`);
+	if (out.pageCode !== void 0) lines.push(`页面自己回的码：${out.pageCode}`);
+	return lines.join("\n");
+}
+function renderFind(out) {
+	if (!out.ok) {
+		const lines = [`没找到（${out.code}）：${out.message}`];
+		if (out.hint !== void 0) lines.push(`照做：${out.hint}`);
+		if (out.helpUrl !== void 0) lines.push(`入口：${out.helpUrl}`);
+		return lines.join("\n");
+	}
+	if (out.count === 0) return "找到了 0 个元素 —— 选择器没匹配到东西。先确认停在哪一页（probe 会自己问页面），再把选择器放宽一点（例如 table tr 而不是某个 id）。";
+	const head = out.entries.slice(0, 20).map((one, index) => `${String(index + 1)}. ${one.text.replace(/\n+/g, " | ").slice(0, 200)}`);
+	const more = out.entries.length > 20 ? `\n… 还有 ${String(out.entries.length - 20)} 个` : "";
+	return `找到了 ${String(out.count)} 个元素 —— 每行的单元格按换行拼在 text 里；把它固化成模块宿主半侧的那一条（host 的 browserFind + 切格 + 按列序取值）：\n${head.join("\n")}${more}`;
+}
+function renderList(packagesDir, modules) {
+	if (modules.length === 0) return `工坊里还没有模块（${packagesDir}）—— 在里面造一个：pnpm exec dsh-wb-module init <名字> --dir <工坊>/packages/module-<名字> --template diy`;
+	const lines = modules.map((one) => `${one.unit} · ${one.installed ? "已装" : "没装"} · ${one.name}` + (one.description === "" ? "" : `\n${" ".repeat(one.unit.length)}      ${one.description}`));
+	const footer = modules.filter((one) => !one.installed).length === 0 ? "都已装过 —— **不要再装**：改源码 + dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面）。" : "装：workbench_diy（action=install, unit=<上面那个 unit>）";
+	return `工坊：${packagesDir}\n${lines.join("\n")}\n\n${footer}`;
+}
+function showOrReason(panels, unit, workspace) {
+	try {
+		panels.show(unit, workspace);
+		return { ok: true };
+	} catch (error) {
+		return {
+			ok: false,
+			reason: error instanceof Error ? error.message : String(error)
+		};
+	}
+}
+function registerDiyTools(ctx, market, panels) {
+	const tools = ctx.get("tools");
+	if (tools === void 0) {
+		ctx.logger?.info?.("[dsh-workbench] 没有 tools 服务，跳过 DIY 工坊工具注册");
+		return [];
+	}
+	const tool = {
+		name: "workbench_diy",
+		description: "看 DIY 工坊里的模块现在走到哪一步，或者把它们装上 / 上板。只认工坊里的模块（不是市场 —— 装别的东西用 workbench_modules）。status 会把五件事一次说清（装了没 / 面板认得没 / 这个项目上开着没 / 产物齐不齐 / 源码是否比产物新）并给出下一步，所以别自己去拼这些状态、也别反复 install。recon 是**先看有没有现成的**：拿一个关键词（站点名 / 系统名 / 域名）去 opencli 自带的那份目录里找，回它有哪些命令、要不要用户的 Chrome 登录；都没有就老实说，并给出\"写 adapter\"或\"探一条读\"两条路。用户不知道 opencli 是什么 —— 这一步别问他，自己查。probe 是**探一条读**：用用户浏览器里现有的登录去读一次，把结果与失败码归一（两拍、重试、平台码映射都在里面），探明之后再把它固化成模块宿主半侧的那一条。两种读法二选一：script（页面里跑一段回 JSON 的脚本，读接口）或 css（给一个选择器，读 DOM 那一行 —— 页面里没有接口时用这个，别写 document.querySelectorAll）。装是这台机器上的持久变更，要用户点头；**一辈子只装一次**：之后改源码只需 dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面），不要再调它。",
+		parameters: {
+			type: "object",
+			properties: {
+				action: {
+					type: "string",
+					description: "list=工坊里有哪些模块（默认）；status=某个模块现在走到哪一步、下一步做什么；probe=在用户浏览器里探一条读；recon=先查 opencli 现成的能力（自带 adapter / 本机插件）；open=只把它在这个项目上板（不装）；install=装上并上板（第一次、会让用户点头）。",
+					enum: [...ACTIONS$1]
+				},
+				unit: {
+					type: "string",
+					description: "status / open / install 填：工坊里那个模块的单元 id（list 会给）。"
+				},
+				script: {
+					type: "string",
+					description: "probe 要（与 css 二选一）：在页面里跑的脚本（必须回 JSON）。不在站点就回 { ok: false, code: \"not-on-site\" }；登录过期回 { ok: false, code: \"not-logged-in\" }；成功回 { ok: true, ...数据 }。"
+				},
+				css: {
+					type: "string",
+					description: "probe 要（与 script 二选一）：一个 CSS 选择器，回页面上匹配到的元素（每行的单元格按换行拼在 text 里）。页面里没有接口时用它 —— 走的是一条固定的 DOM 读（找不到会自己打开 url 再读一遍），别写 document.querySelectorAll。"
+				},
+				limit: {
+					type: "number",
+					description: "probe 配 css 用：最多回几个元素（默认 50）。"
+				},
+				textMax: {
+					type: "number",
+					description: "probe 配 css 用：每个元素文本最多留几个字（默认 200）。"
+				},
+				url: {
+					type: "string",
+					description: "probe / recon 用：那套系统的地址（probe 不在站点上时自己打开它再读一遍；recon 拿它取域名去找现成的 adapter）。"
+				},
+				keyword: {
+					type: "string",
+					description: "recon 要：站点名 / 系统名 / 关键词（英文名或域名最准，例：bilibili、arxiv.org、cmdb）。用户说的是\"我想看 X\"，把它翻译成关键词是你的活 —— 别问他用哪个插件。"
+				},
+				loginUrl: {
+					type: "string",
+					description: "probe 用：要登录时那颗\"去登录\"该去哪（默认用 url）。"
+				},
+				session: {
+					type: "string",
+					description: "probe 用：浏览器桥上的会话名（默认 workbench，一般不用填）。"
+				},
+				open: {
+					type: "boolean",
+					description: "probe 用：不在站点上时要不要顺手打开（默认要）。"
+				}
+			},
+			required: ["action"],
+			additionalProperties: false
+		},
+		output: {
+			schema: OUTPUT_SCHEMA$2,
+			render: (_args, value) => {
+				const payload = value;
+				return [{
+					type: "text",
+					text: typeof payload?.text === "string" ? payload.text : JSON.stringify(value)
+				}];
+			}
+		},
+		async execute(raw, exec) {
+			const args = asRecord$1(raw) ?? {};
+			const action = asText$1(args.action) || "list";
+			if (!ACTIONS$1.includes(action)) throw new Error(`不认识的 action：${action}（可用：${ACTIONS$1.join(" / ")}）`);
+			const packagesDir = workshopPackagesDir(ctx);
+			if (packagesDir === null) throw new Error("算不出 DIY 工坊在哪（这台机器没给出 dshHomePath）—— 让用户跑一次 dsh-workbench setup");
+			const session = sessionWorkspace(exec);
+			if (!inWorkshopSession(ctx, session)) throw new Error(`这把工具只在 DIY 工坊里用：当前会话不在工坊里（这个会话的工作区 ${session ?? "(不知道)"}）—— 普通项目里装模块用 workbench_modules，工坊的入口是左栏那一行「工作台DIY」`);
+			const workspace = session;
+			const modules = workshopModules(packagesDir, profileModules(profileDirOf(ctx)).map((row) => row.unit));
+			if (action === "list") return plainJson({
+				workshop: packagesDir,
+				modules,
+				text: renderList(packagesDir, modules)
+			});
+			const panelEntries = (() => {
+				try {
+					return panels.list(workspace);
+				} catch {
+					return [];
+				}
+			})();
+			const statusOfUnit = (one) => statusOf({
+				dir: one.dir,
+				unit: one.unit,
+				name: one.name,
+				installed: one.installed,
+				known: panelEntries.some((entry) => entry.id === one.unit),
+				open: panels.isEnabled(one.unit, workspace)
+			});
+			if (action === "status") {
+				const wanted = asText$1(args.unit);
+				const picked = wanted === "" ? modules : modules.filter((one) => one.unit === wanted);
+				if (wanted !== "" && picked.length === 0) throw new Error(`工坊里没有单元 id 为「${wanted}」的模块（可用的：${modules.map((one) => one.unit).join(", ") || "（空）"}）`);
+				const rows = picked.map(statusOfUnit);
+				return plainJson({
+					workshop: packagesDir,
+					status: rows,
+					text: renderStatus(packagesDir, rows)
+				});
+			}
+			if (action === "recon") {
+				const keywords = keywordsOf(asText$1(args.keyword), asText$1(args.url));
+				if (keywords.length === 0) throw new Error("recon 要一个关键词（站点名 / 系统名 / 域名都行）：先拿它去 opencli 自带的那份目录里找有没有现成的能力，别一上来就自己写 adapter；用户不知道 opencli 是什么，这一步别问他。");
+				const catalog = reconCatalogOf();
+				if (catalog === void 0) throw new Error(`读不到 opencli 那份目录（${cliCatalogPath()}）—— 隔离运行时还没装好；照做：${isolatedInstallCommand()}`);
+				return plainJson({
+					workshop: packagesDir,
+					ok: true,
+					...reconOf(catalog, installedPluginsOf(), keywords)
+				});
+			}
+			if (action === "probe") {
+				const script = asText$1(args.script);
+				const css = asText$1(args.css);
+				if (script === "" && css === "") throw new Error("probe 要 script（页面脚本，回 JSON）或 css（读 DOM 那一行的选择器）之一。script 的约定：不在那个站点上就回 { ok: false, code: \"not-on-site\" }（我会自己把它打开再读一遍）；登录过期回 { ok: false, code: \"not-logged-in\" }；成功回 { ok: true, ...数据 }。页面里压根没有接口时给 css，别写 document.querySelectorAll（宿主产物不许出现 DOM 字样）。");
+				const shell = ctx.get("shell");
+				if (shell === void 0) throw new Error("这台机器上没有 shell 服务，probe 跑不了");
+				const url = asText$1(args.url);
+				const loginUrl = asText$1(args.loginUrl);
+				const session = asText$1(args.session);
+				const open = typeof args.open === "boolean" ? args.open : void 0;
+				if (css !== "") {
+					const limit = asNumber(args.limit);
+					const textMax = asNumber(args.textMax);
+					const found = await browserFind({
+						shell,
+						css,
+						command: opencliCommandOf(ctx).command,
+						...url === "" ? {} : { url },
+						...session === "" ? {} : { session },
+						...open === void 0 ? {} : { open },
+						...limit === void 0 ? {} : { limit },
+						...textMax === void 0 ? {} : { textMax }
+					});
+					return plainJson({
+						workshop: packagesDir,
+						...found,
+						text: renderFind(found)
+					});
+				}
+				const out = await browserRead({
+					shell,
+					script,
+					command: opencliCommandOf(ctx).command,
+					...url === "" ? {} : { url },
+					...loginUrl === "" ? {} : { loginUrl },
+					...session === "" ? {} : { session },
+					...open === void 0 ? {} : { open }
+				});
+				return plainJson({
+					workshop: packagesDir,
+					...out,
+					text: renderProbe(out)
+				});
+			}
+			const unit = asText$1(args.unit);
+			if (unit === "") throw new Error(`install 要一个 unit（工坊里：${modules.map((one) => one.unit).join(", ") || "（空）"}）`);
+			const found = modules.find((one) => one.unit === unit);
+			if (found === void 0) throw new Error(`工坊里没有单元 id 为「${unit}」的模块（可用的：${modules.map((one) => one.unit).join(", ") || "（空）"}）—— 先装上的前提是它在工坊里造好了`);
+			if (!insideWorkshop(packagesDir, found.dir)) throw new Error(`这个模块不在工坊里（${found.dir}）—— 只装 ${packagesDir} 之下的模块`);
+			if (action === "open") {
+				if (!found.installed) throw new Error(`${unit} 还没装 —— open 只负责上板。先用 action=install 装上（第一次会让用户点头一次）`);
+				const panel = showOrReason(panels, unit, workspace);
+				const text = panel.ok ? `面板上已经打开它了（${workspace}）—— 让用户看一眼` : `面板上还没打开：${panel.reason}。这就是它的下一步（status 会给出同样的判断）`;
+				return plainJson({
+					workshop: packagesDir,
+					unit,
+					path: found.dir,
+					panel,
+					text
+				});
+			}
+			if (found.installed) {
+				const panel = showOrReason(panels, unit, workspace);
+				const text = [`它已经装过了（就是工坊里这一份）—— **不要再装**：改源码 + dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面）。`, panel.ok ? `面板上已经打开它了（${workspace}）—— 让用户看一眼` : `面板上还没打开：${panel.reason}。调 workbench_panels（action=show, id=${unit}）`].join("\n");
+				return plainJson({
+					workshop: packagesDir,
+					unit,
+					path: found.dir,
+					alreadyInstalled: true,
+					panel,
+					text
+				});
+			}
+			const outcome = await market.installBundle(found.dir);
+			const verdict = verdictOf(outcome.change);
+			const restartRequired = outcome.change.application === "restart-required";
+			const panel = outcome.change.application === "applied" ? showOrReason(panels, unit, workspace) : {
+				ok: false,
+				reason: `安装结果是 ${outcome.change.application}，还没生效`
+			};
+			const panelText = panel.ok ? `面板上已经打开它了（${workspace}）—— 让用户看一眼` : outcome.change.application === "applied" ? `面板上还没打开：${panel.reason}。调 workbench_panels（action=show, id=${unit}）试试。` : restartRequired ? `面板上还没打开（${panel.reason}）：模块要**重启一次工作台**才注册进面板 —— 把这句话转给用户，重启后再调 workbench_panels（action=show, id=${unit}）。` : `面板上还没打开：${panel.reason}。先把上面那句"没装成"处理掉，再谈上板。`;
+			const text = [
+				`${verdict}：${unit}（${found.name}）`,
+				panelText,
+				"之后只改源码 + dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面）：不要再装一遍。"
+			].join("\n");
+			return plainJson({
+				workshop: packagesDir,
+				unit,
+				path: found.dir,
+				install: outcome.change,
+				module: outcome.module,
+				panel,
+				text
+			});
+		}
+	};
+	return [tools.register(tool)];
+}
+//#endregion
 //#region src/shared/api/host/release.ts
 function parseLedgerVersion(stdout, name) {
 	const parsed = parseJsonLoose(stdout);
@@ -2428,7 +3641,8 @@ function panelsHandoffEntry(target = {}) {
 }
 function panelsFactsOf(call, manifests) {
 	if (call.source === "workbench_panels") return actionOf(call) === "list" ? [PANELS_FACT] : void 0;
-	if (call.source !== "workbench_modules") return void 0;
+	if (call.source === "workbench_diy" && actionOf(call) === "list") return [PANELS_FACT];
+	if (call.source !== "workbench_modules" && call.source !== "workbench_diy") return void 0;
 	if (actionOf(call) === "list") return [PANELS_FACT, CAPABILITY_FACT];
 	const request = requestOf(call);
 	if (request === void 0) return void 0;
@@ -2788,11 +4002,15 @@ var HOST_UNITS = [{
 		});
 		return {
 			routes: panelRoutes(panels, values),
-			registerTools: () => [...registerPanelTools(ctx, panels, values), ...registerMarketTools(ctx, market)],
+			registerTools: () => [
+				...registerPanelTools(ctx, panels, values),
+				...registerMarketTools(ctx, market),
+				...registerDiyTools(ctx, market, panels)
+			],
 			factsOf: (call) => panelsFactsOf(call, manifests()),
 			needsApproval: panelsApproval,
 			gate: {
-				deniedTools: (workspace) => manifests().filter((manifest) => manifest.card !== null).filter((manifest) => !panels.isEnabled(manifest.id, workspace)).flatMap((manifest) => manifest.tools.map((tool) => tool.name)),
+				deniedTools: (workspace) => [...manifests().filter((manifest) => manifest.card !== null).filter((manifest) => !panels.isEnabled(manifest.id, workspace)).flatMap((manifest) => manifest.tools.map((tool) => tool.name)), ...inWorkshopSession(ctx, workspace) ? [] : [DIY_TOOL]],
 				subscribe: (listener) => panels.subscribe(listener)
 			},
 			prefs: {
@@ -3003,7 +4221,8 @@ function moduleVersionsHandler(ctx, shell) {
 					unit: module.unit,
 					pkg: module.pkg,
 					installed: module.version,
-					...latest === void 0 ? {} : { latest }
+					...latest === void 0 ? {} : { latest },
+					...module.local === true ? { local: true } : {}
 				};
 			}))
 		};
@@ -3045,18 +4264,6 @@ function bundleInspectHandler(ctx) {
 //#region src/shared/api/diy.ts
 var WORKSHOP_TITLE = "工作台DIY";
 //#endregion
-//#region src/shared/api/host/diy.ts
-var WORKSHOP_RELATIVE = "workbench/diy";
-function workshopPathOf(ctx) {
-	const homePath = ctx.get("dshHomePath");
-	if (typeof homePath !== "function") return null;
-	try {
-		return homePath(WORKSHOP_RELATIVE);
-	} catch {
-		return null;
-	}
-}
-//#endregion
 //#region src/shared/api/dsh-plugins.ts
 var DSH_PLUGINS_ROUTE = "dsh-plugins";
 //#endregion
@@ -4090,8 +5297,9 @@ function asArgs(value) {
 function apply(ctx) {
 	const facts = createFactLog();
 	const values = createValueHandoff();
+	const opencli = opencliCommandOf(ctx);
 	const routes = {
-		health: healthHandler(ctx),
+		health: healthHandler(ctx, opencli),
 		changes: changesHandler(facts),
 		[DSH_PLUGINS_ROUTE]: dshPluginsHandler(ctx),
 		[BUNDLE_REGISTRIES_ROUTE]: bundleRegistriesHandler(ctx),
@@ -4111,7 +5319,6 @@ function apply(ctx) {
 			ctx.logger?.warn?.(`dsh-workbench: 工坊没能登记成工作区 —— ${String(error)}`);
 		});
 	});
-	const opencliEnv = process.env.DSH_WORKBENCH_OPENCLI;
 	const installEnv = process.env.DSH_WORKBENCH_OPENCLI_INSTALL;
 	const liveManifests = () => units.manifests();
 	const manifestOf = (unit) => liveManifests().find((manifest) => manifest.id === unit);
@@ -4129,7 +5336,7 @@ function apply(ctx) {
 		if (manifest === void 0 || !hasEnvNeeds(manifest)) return void 0;
 		const found = (await probeUnits({
 			shell,
-			...opencliEnv === void 0 ? {} : { command: opencliEnv },
+			command: opencli.command,
 			force,
 			units: [probeInput(manifest)]
 		}))[0];
@@ -4176,7 +5383,7 @@ function apply(ctx) {
 				logger: ctx.logger,
 				manifests: liveManifests,
 				store,
-				...opencliEnv === void 0 ? {} : { opencliCommand: opencliEnv },
+				opencliCommand: opencli.command,
 				probe: (unit, options) => probeOne(unit, options?.force ?? false),
 				values,
 				longTasks: {
@@ -4269,7 +5476,7 @@ function apply(ctx) {
 	else {
 		routes.preflight = preflightHandler(createPreflight({
 			shell,
-			...opencliEnv === void 0 ? {} : { command: opencliEnv },
+			command: opencli.command,
 			...installEnv === void 0 ? {} : { installCommand: installEnv },
 			logger: ctx.logger,
 			warmReads: () => [...mounted.values()].flatMap((item) => item.plan.warmReads())
@@ -4277,7 +5484,7 @@ function apply(ctx) {
 		routes.capability = capabilityHandler(async (unit, force) => {
 			if (unit === void 0) return { units: (await probeUnits({
 				shell,
-				...opencliEnv === void 0 ? {} : { command: opencliEnv },
+				command: opencli.command,
 				force,
 				units: declaredNow().map(probeInput)
 			})).map((item) => ({