@dsh-workbench/core 0.1.16 → 0.1.17

package/dist/host/index.js

@@ -1,6 +1,7 @@
 import { createHash, randomUUID } from "node:crypto";
 import fs, { chmodSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, readdirSync, readlinkSync, realpathSync, rmSync, statSync, symlinkSync, writeFileSync } from "node:fs";
 import path, { delimiter, dirname, join, resolve, sep } from "node:path";
+import os from "node:os";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 //#region ../shared/dist/config/constants.js
@@ -49,6 +50,121 @@ function parseMarkers(text) {
 	}
 	return refs;
 }
+var SUPPORTED_API_VERSIONS = [1];
+var DECLARATION_KEYS = [
+	"apiVersion",
+	"unit",
+	"card",
+	"tools",
+	"host",
+	"env"
+];
+var DECLARATION_REQUIRED_KEYS = [
+	"apiVersion",
+	"unit",
+	"card",
+	"tools",
+	"host"
+];
+var CARD_KEYS = ["titleKey", "order"];
+var TOOL_KEYS = ["name", "writes"];
+var HOST_KEYS = ["inject", "optional"];
+function text$1(value) {
+	return typeof value === "string" ? value.trim() : "";
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function outsideKeys(value, allowed) {
+	return Object.keys(value).filter((key) => !allowed.includes(key));
+}
+function listOf(keys) {
+	return keys.map((key) => JSON.stringify(key)).join(" / ");
+}
+function stringArrayProblems(at, value) {
+	if (!Array.isArray(value)) return [`${at} 要是一串字符串，现在是 ${JSON.stringify(value)}`];
+	return value.flatMap((item, index) => text$1(item) === "" ? [`${at}[${index}] 不是非空字符串：${JSON.stringify(item)}`] : []);
+}
+function declarationProblemsOf(subject, raw) {
+	if (!isRecord(raw)) return [`${subject}: dsh.workbench 不是一个对象 —— ${JSON.stringify(raw)}`];
+	const version = raw.apiVersion;
+	if (version === void 0) return [`${subject}: dsh.workbench 没有 apiVersion —— 协议从 v1 起，写 \`"apiVersion": 1\`。缺它 = 外壳不认这个模块（ADR-0038 §2.3）`];
+	if (!Number.isInteger(version) || !SUPPORTED_API_VERSIONS.includes(version)) return [`${subject}: dsh.workbench.apiVersion 是 ${JSON.stringify(version)}，这里只认 ${SUPPORTED_API_VERSIONS.join(" / ")}（要整数）`];
+	const problems = [];
+	const unknown = outsideKeys(raw, DECLARATION_KEYS);
+	if (unknown.length > 0) problems.push(`${subject}: dsh.workbench 里有协议 v1 不认识的键 ${listOf(unknown)} —— 只有 ${listOf(DECLARATION_KEYS)}。（拼错的键会被外壳**静默忽略**：那句声明等于没写）`);
+	for (const key of DECLARATION_REQUIRED_KEYS) if (raw[key] === void 0) problems.push(`${subject}: dsh.workbench 缺 ${key}` + (key === "card" ? "（这个模块没有卡片就写 `\"card\": null`）" : ""));
+	const card = raw.card;
+	if (card !== void 0 && card !== null) {
+		if (!isRecord(card)) problems.push(`${subject}: dsh.workbench.card 要么是对象、要么是 null，现在是 ${JSON.stringify(card)}`);
+		else {
+			const extra = outsideKeys(card, CARD_KEYS);
+			if (extra.length > 0) problems.push(`${subject}: dsh.workbench.card 里有不认的键 ${listOf(extra)} —— card 只有 ${listOf(CARD_KEYS)}（卡片默认显不显示由运行期的面板配置决定，清单里没有这一位）`);
+			if (text$1(card.titleKey) === "") problems.push(`${subject}: dsh.workbench.card.titleKey 要是非空字符串（面板那一格的文案键）`);
+			if (typeof card.order !== "number" || !Number.isFinite(card.order)) problems.push(`${subject}: dsh.workbench.card.order 要是数字，现在是 ${JSON.stringify(card.order)}`);
+		}
+	}
+	const tools = raw.tools;
+	if (tools !== void 0) {
+		if (!Array.isArray(tools)) problems.push(`${subject}: dsh.workbench.tools 要是一串声明，现在是 ${JSON.stringify(tools)}`);
+		else {
+			const seen = /* @__PURE__ */ new Set();
+			tools.forEach((tool, index) => {
+				const at = `dsh.workbench.tools[${index}]`;
+				if (!isRecord(tool)) {
+					problems.push(`${subject}: ${at} 要是对象，现在是 ${JSON.stringify(tool)}`);
+					return;
+				}
+				const extra = outsideKeys(tool, TOOL_KEYS);
+				if (extra.length > 0) problems.push(`${subject}: ${at} 里有不认的键 ${listOf(extra)} —— tools 只有 ${listOf(TOOL_KEYS)}`);
+				const name = text$1(tool.name);
+				if (name === "") problems.push(`${subject}: ${at}.name 要是非空字符串`);
+				else if (seen.has(name)) problems.push(`${subject}: ${at}.name「${name}」与前面那条撞了 —— 工具名会进 dsh 的工具表，不许重`);
+				else seen.add(name);
+				if (typeof tool.writes !== "boolean") problems.push(`${subject}: ${at}.writes 要是 true / false（它是"这会写"的唯一声明，缺了审批无从认领）`);
+			});
+		}
+	}
+	const host = raw.host;
+	if (host !== void 0) {
+		if (!isRecord(host)) problems.push(`${subject}: dsh.workbench.host 要是对象，现在是 ${JSON.stringify(host)}`);
+		else {
+			const extra = outsideKeys(host, HOST_KEYS);
+			if (extra.length > 0) problems.push(`${subject}: dsh.workbench.host 里有不认的键 ${listOf(extra)} —— host 只有 ${listOf(HOST_KEYS)}`);
+			if (host.inject === void 0) problems.push(`${subject}: dsh.workbench.host.inject 没写 —— 它声明这个模块要外壳的哪几个服务，外壳靠它判"能不能挂"。一个都不要也要写 \`"inject": []\``);
+			else problems.push(...stringArrayProblems(`${subject}: dsh.workbench.host.inject`, host.inject));
+			if (host.optional !== void 0) problems.push(...stringArrayProblems(`${subject}: dsh.workbench.host.optional`, host.optional));
+		}
+	}
+	if (raw.env !== void 0 && !isRecord(raw.env)) problems.push(`${subject}: dsh.workbench.env 要是对象（command / plugins / libs）—— 语义由门禁的 env 判据查，这里只查形状`);
+	return problems;
+}
+function readDeclaration(subject, raw) {
+	const problems = declarationProblemsOf(subject, raw);
+	if (problems.length > 0) return { problems };
+	const declaration = raw;
+	const card = declaration.card;
+	return {
+		declaration,
+		problems: [],
+		manifest: {
+			id: text$1(declaration.unit),
+			card: card === null ? null : {
+				titleKey: text$1(card.titleKey),
+				order: card.order
+			},
+			tools: declaration.tools.map((tool) => ({
+				name: text$1(tool.name),
+				writes: tool.writes
+			})),
+			host: {
+				inject: [...declaration.host.inject ?? []],
+				...declaration.host.optional === void 0 ? {} : { optional: [...declaration.host.optional] }
+			},
+			...declaration.env === void 0 ? {} : { env: declaration.env }
+		}
+	};
+}
 function unitFactScope(unit) {
 	return `${unit}*`;
 }
@@ -151,27 +267,27 @@ var PERMISSION_CODES = /* @__PURE__ */ new Set([
 	"NO_PERMISSION",
 	"EACCES"
 ]);
-function asRecord$7(value) {
+function asRecord$9(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
-function textOf$3(value) {
+function textOf$4(value) {
 	return typeof value === "string" ? value.trim() : "";
 }
 function codeOf(page) {
-	const record = asRecord$7(page);
-	return record === void 0 ? "" : textOf$3(record["code"]);
+	const record = asRecord$9(page);
+	return record === void 0 ? "" : textOf$4(record["code"]);
 }
 function messageOf$1(page) {
-	const record = asRecord$7(page);
-	return record === void 0 ? "" : textOf$3(record["message"]);
+	const record = asRecord$9(page);
+	return record === void 0 ? "" : textOf$4(record["message"]);
 }
 function hintOf$1(page) {
-	const record = asRecord$7(page);
-	const hint = record === void 0 ? "" : textOf$3(record["hint"]);
+	const record = asRecord$9(page);
+	const hint = record === void 0 ? "" : textOf$4(record["hint"]);
 	return hint === "" ? void 0 : hint;
 }
 function pageFailed(page) {
-	const record = asRecord$7(page);
+	const record = asRecord$9(page);
 	return record !== void 0 && record["ok"] === false;
 }
 function blockerFor(code) {
@@ -395,41 +511,41 @@ var DEFAULT_SETTLE_MS = 2500;
 var URL_TIMEOUT_MS = 8e3;
 var DEFAULT_LIMIT = 50;
 var DEFAULT_TEXT_MAX = 200;
-function asRecord$6(value) {
+function asRecord$8(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
-function textOf$2(value) {
+function textOf$3(value) {
 	return typeof value === "string" ? value.trim() : "";
 }
 function entriesOf(value) {
-	const record = asRecord$6(value);
+	const record = asRecord$8(value);
 	const raw = record === void 0 ? void 0 : record["entries"];
 	if (!Array.isArray(raw)) return [];
 	const entries = [];
 	for (const one of raw) {
-		const item = asRecord$6(one);
+		const item = asRecord$8(one);
 		if (item === void 0) continue;
 		const nth = typeof item["nth"] === "number" ? item["nth"] : entries.length;
 		entries.push({
-			text: textOf$2(item["text"]),
-			tag: textOf$2(item["tag"]),
+			text: textOf$3(item["text"]),
+			tag: textOf$3(item["tag"]),
 			nth
 		});
 	}
 	return entries;
 }
 function reasonOf(stdout, stderr) {
-	const parsed = asRecord$6(parseJsonLoose(stdout));
-	const error = parsed === void 0 ? void 0 : asRecord$6(parsed["error"]);
-	const message = error === void 0 ? "" : textOf$2(error["message"]);
+	const parsed = asRecord$8(parseJsonLoose(stdout));
+	const error = parsed === void 0 ? void 0 : asRecord$8(parsed["error"]);
+	const message = error === void 0 ? "" : textOf$3(error["message"]);
 	if (message !== "") return message;
 	const lines = (stderr.trim() === "" ? stdout : stderr).split("\n").map((one) => one.trim()).filter((one) => one !== "");
 	return (lines[lines.length - 1] ?? "").slice(-200);
 }
 function hintOf(stdout) {
-	const parsed = asRecord$6(parseJsonLoose(stdout));
-	const error = parsed === void 0 ? void 0 : asRecord$6(parsed["error"]);
-	const hint = error === void 0 ? "" : textOf$2(error["hint"]);
+	const parsed = asRecord$8(parseJsonLoose(stdout));
+	const error = parsed === void 0 ? void 0 : asRecord$8(parsed["error"]);
+	const hint = error === void 0 ? "" : textOf$3(error["hint"]);
 	return hint === "" ? void 0 : hint;
 }
 function sameOrigin(left, right) {
@@ -442,8 +558,8 @@ function sameOrigin(left, right) {
 function urlOf(stdout) {
 	const bare = (stdout.split("\n").map((one) => one.trim()).filter((one) => one !== "")[0] ?? "").replace(/^url:\s*/i, "").trim().replace(/^["']+|["']+$/g, "");
 	if (bare.startsWith("{")) {
-		const parsed = asRecord$6(parseJsonLoose(bare));
-		const url = parsed === void 0 ? "" : textOf$2(parsed["url"]);
+		const parsed = asRecord$8(parseJsonLoose(bare));
+		const url = parsed === void 0 ? "" : textOf$3(parsed["url"]);
 		if (url !== "") return url;
 	}
 	return bare;
@@ -666,7 +782,9 @@ var PROVISION_ACTIONS = [
 	"update-bundle",
 	"remove-bundle",
 	"cancel-install",
-	"update-dependency"
+	"update-dependency",
+	"update-plugin",
+	"uninstall-plugin"
 ];
 var DEPENDENCY_ACTIONS = ["update-dependency"];
 function isDependencyAction(action) {
@@ -676,6 +794,7 @@ function provisionTargetOf(action) {
 	if (action === "update-dependency") return "id";
 	if (action === "install-bundle") return "spec";
 	if (action === "remove-bundle") return "name";
+	if (action === "update-plugin" || action === "uninstall-plugin") return "name";
 	if (action === "cancel-install") return "requestId";
 	return "unit";
 }
@@ -686,7 +805,7 @@ var TARGET_CODE = {
 	name: "workbench/no-name",
 	requestId: "workbench/no-request-id"
 };
-function asRecord$5(value) {
+function asRecord$7(value) {
 	return typeof value === "object" && value !== null ? value : {};
 }
 function stringsOf$2(value) {
@@ -707,6 +826,10 @@ function requestOf$1(action, value) {
 		action,
 		name: value
 	};
+	if (action === "update-plugin" || action === "uninstall-plugin") return {
+		action,
+		name: value
+	};
 	if (action === "cancel-install") return {
 		action,
 		requestId: value
@@ -717,7 +840,7 @@ function requestOf$1(action, value) {
 	};
 }
 function parseProvisionBody(body) {
-	const raw = asRecord$5(body);
+	const raw = asRecord$7(body);
 	const action = raw.action;
 	if (typeof action !== "string" || !PROVISION_ACTIONS.includes(action)) return {
 		ok: false,
@@ -1259,6 +1382,9 @@ function createLongTaskHost(options) {
 function isolatedRoot() {
 	return `${dshHome()}/workbench/opencli`;
 }
+function isolatedHome() {
+	return `${isolatedRoot()}/home`;
+}
 var OPENCLI_NPM_PACKAGE = "@jackwener/opencli";
 function toolchainDir() {
 	return `${isolatedRoot()}/toolchain`;
@@ -1304,6 +1430,105 @@ function isolatedInstallCommand() {
 	return `npm i --prefix '${toolchainDir()}' ${OPENCLI_NPM_PACKAGE}@${OPENCLI_PIN} --cache '${npmCacheDir()}'`;
 }
 //#endregion
+//#region ../shared/dist/host/plugin-ledger.js
+var PLUGIN_LEDGER_FILE = "plugins.json";
+function ledgerKeyOf(entry) {
+	return `${entry.opencliHome}\u0000${entry.package}`;
+}
+function textOf$2(value) {
+	if (typeof value !== "string") return void 0;
+	const trimmed = value.trim();
+	return trimmed === "" ? void 0 : trimmed;
+}
+function entryOf(value) {
+	if (typeof value !== "object" || value === null) return void 0;
+	const box = value;
+	const opencliHome = textOf$2(box["opencliHome"]);
+	const pkg = textOf$2(box["package"]);
+	const installedAt = textOf$2(box["installedAt"]);
+	if (opencliHome === void 0 || pkg === void 0 || installedAt === void 0) return void 0;
+	const name = textOf$2(box["name"]);
+	const registry = textOf$2(box["registry"]);
+	const releasedAt = textOf$2(box["releasedAt"]);
+	return {
+		opencliHome,
+		package: pkg,
+		installedAt,
+		...name === void 0 ? {} : { name },
+		...registry === void 0 ? {} : { registry },
+		...releasedAt === void 0 ? {} : { releasedAt },
+		...box["local"] === true ? { local: true } : {}
+	};
+}
+function parsePluginLedger(raw) {
+	if (typeof raw !== "object" || raw === null) return [];
+	const list = raw["entries"];
+	if (!Array.isArray(list)) return [];
+	const entries = [];
+	for (const item of list) {
+		const entry = entryOf(item);
+		if (entry === void 0) continue;
+		if (entries.some((known) => ledgerKeyOf(known) === ledgerKeyOf(entry))) continue;
+		entries.push(entry);
+	}
+	return entries;
+}
+function readPluginLedger(store) {
+	return parsePluginLedger(store.read(PLUGIN_LEDGER_FILE));
+}
+function writePluginLedger(store, entries) {
+	if (entries.length === 0) {
+		store.remove(PLUGIN_LEDGER_FILE);
+		return;
+	}
+	store.write(PLUGIN_LEDGER_FILE, { entries });
+}
+function pluginEntriesOfHome(entries, opencliHome) {
+	return entries.filter((entry) => entry.opencliHome === opencliHome);
+}
+function isHeldEntry(entry) {
+	return entry.releasedAt === void 0;
+}
+function heldEntriesOfHome(entries, opencliHome) {
+	return pluginEntriesOfHome(entries, opencliHome).filter(isHeldEntry);
+}
+function heldEntryOfPlugin(entries, opencliHome, plugin) {
+	const key = plugin.trim();
+	if (key === "") return void 0;
+	return heldEntriesOfHome(entries, opencliHome).find((entry) => entry.name === key || entry.package === key);
+}
+function withReleasedEntry(entries, opencliHome, pkg, releasedAt) {
+	const entry = pluginEntryOf(entries, opencliHome, pkg);
+	if (entry === void 0 || entry.releasedAt !== void 0) return [...entries];
+	return withPluginEntry(entries, {
+		...entry,
+		releasedAt
+	});
+}
+function pluginRetentionOf(options) {
+	if (options.held) return "keep-held";
+	if (!options.trustworthy) return "keep-unsure";
+	return options.claimedBy.length > 0 ? "keep-claimed" : "remove";
+}
+function pluginEntryOf(entries, opencliHome, pkg) {
+	const key = ledgerKeyOf({
+		opencliHome,
+		package: pkg
+	});
+	return entries.find((entry) => ledgerKeyOf(entry) === key);
+}
+function withPluginEntry(entries, entry) {
+	const key = ledgerKeyOf(entry);
+	return [...entries.filter((item) => ledgerKeyOf(item) !== key), entry];
+}
+function withoutPluginEntry(entries, opencliHome, pkg) {
+	const key = ledgerKeyOf({
+		opencliHome,
+		package: pkg
+	});
+	return entries.filter((entry) => ledgerKeyOf(entry) !== key);
+}
+//#endregion
 //#region ../shared/dist/host/plugin-source.js
 function mergeLines(commands) {
 	return commands.map((item) => item.optional === true ? `(${item.line} || true)` : item.line).join(" && ");
@@ -1591,6 +1816,7 @@ var PROBLEMS = [
 	"not-found",
 	"not-a-package",
 	"not-a-bundle",
+	"not-a-workbench-module",
 	"network",
 	"unknown"
 ];
@@ -1617,7 +1843,7 @@ var CANCELLATIONS = [
 	"too-late",
 	"not-running"
 ];
-function asRecord$4(value) {
+function asRecord$6(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
 function asText$4(value) {
@@ -1634,7 +1860,7 @@ function asTextArray(value) {
 	return Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
 }
 function asRegistries(raw) {
-	const record = asRecord$4(raw);
+	const record = asRecord$6(raw);
 	if (record === void 0) return null;
 	const registry = asRegistry(record.registry);
 	if (registry === void 0) return null;
@@ -1645,7 +1871,7 @@ function asRegistries(raw) {
 	};
 }
 function asPackageResult(raw) {
-	const record = asRecord$4(raw);
+	const record = asRecord$6(raw);
 	if (record === void 0) return void 0;
 	const kind = pick(FAILURE_KINDS, record.kind);
 	return {
@@ -1657,12 +1883,12 @@ function asPackageResult(raw) {
 	};
 }
 function asChange(raw) {
-	const record = asRecord$4(raw);
+	const record = asRecord$6(raw);
 	if (record === void 0) return null;
 	const application = pick(APPLICATIONS, record.application);
 	const stage = pick(STAGES, record.stage);
 	if (application === void 0 || stage === void 0) return null;
-	const error = asRecord$4(record.error);
+	const error = asRecord$6(record.error);
 	const packageResult = asPackageResult(record.packageResult);
 	const pendingBuilds = asTextArray(record.pendingBuilds);
 	const failedAt = pick(["registry", "spec-host"], record.failedAt);
@@ -1683,7 +1909,7 @@ function asChange(raw) {
 	};
 }
 function asInspection(raw) {
-	const record = asRecord$4(raw);
+	const record = asRecord$6(raw);
 	if (record === void 0) return null;
 	const status = asText$4(record.status);
 	if (status === "refused") {
@@ -1741,14 +1967,14 @@ function readBundleManager(ctx) {
 		},
 		async cancel(requestId) {
 			if (typeof face.cancelInstall !== "function") return null;
-			return pick(CANCELLATIONS, (asRecord$4(await face.cancelInstall(requestId)) ?? {}).status) ?? null;
+			return pick(CANCELLATIONS, (asRecord$6(await face.cancelInstall(requestId)) ?? {}).status) ?? null;
 		}
 	};
 }
 //#endregion
 //#region src/shared/api/host/installed-module.ts
 var PACKAGE_NAME$1 = /^(?:@[a-z0-9][a-z0-9._~-]*\/)?[a-z0-9][a-z0-9._~-]*$/;
-function asRecord$3(value) {
+function asRecord$5(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
 function asText$3(value) {
@@ -1765,18 +1991,19 @@ function profileDirOf(ctx) {
 function stringsOf$1(value) {
 	return Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
 }
-function profileModules(profileDir) {
-	if (profileDir === null) return [];
-	let manifest;
+function profileManifestOf(profileDir) {
+	if (profileDir === null) return void 0;
 	try {
-		manifest = JSON.parse(fs.readFileSync(path.join(profileDir, "package.json"), "utf8"));
+		return asRecord$5(JSON.parse(fs.readFileSync(path.join(profileDir, "package.json"), "utf8")));
 	} catch {
-		return [];
+		return;
 	}
-	const record = asRecord$3(manifest);
+}
+function profileModules(profileDir) {
+	const record = profileManifestOf(profileDir);
 	if (record === void 0) return [];
-	const bundles = stringsOf$1(asRecord$3(asRecord$3(record.dsh)?.profile)?.bundles);
-	const dependencies = asRecord$3(record.dependencies) ?? {};
+	const bundles = stringsOf$1(asRecord$5(asRecord$5(record.dsh)?.profile)?.bundles);
+	const dependencies = asRecord$5(record.dependencies) ?? {};
 	const names = bundles.length > 0 ? bundles : Object.keys(dependencies);
 	const found = [];
 	for (const pkg of names) {
@@ -1810,6 +2037,27 @@ function registryFromLockfile(profileDir, pkg) {
 	if (cut <= 8) return void 0;
 	return tarball.slice(0, cut);
 }
+function moduleDeclarationOf(profileDir, pkg) {
+	if (profileDir === null || !isPackageName(pkg)) return void 0;
+	try {
+		const text = fs.readFileSync(path.join(profileDir, "node_modules", pkg, "package.json"), "utf8");
+		return asRecord$5(asRecord$5(asRecord$5(JSON.parse(text))?.dsh)?.workbench);
+	} catch {
+		return;
+	}
+}
+function declarationGaps(profileDir) {
+	if (profileManifestOf(profileDir) === void 0) return void 0;
+	const gaps = [];
+	for (const module of profileModules(profileDir)) {
+		const problems = declarationProblemsOf(module.pkg, moduleDeclarationOf(profileDir, module.pkg));
+		if (problems.length > 0) gaps.push({
+			pkg: module.pkg,
+			problems
+		});
+	}
+	return gaps;
+}
 function readInstalledModule(profileDir, pkg) {
 	if (profileDir === null || !isPackageName(pkg)) return {
 		kind: "unknown",
@@ -1824,18 +2072,18 @@ function readInstalledModule(profileDir, pkg) {
 			pkg
 		};
 	}
-	const record = asRecord$3(manifest);
+	const record = asRecord$5(manifest);
 	if (record === void 0) return {
 		kind: "unknown",
 		pkg
 	};
-	const declared = asRecord$3(asRecord$3(record.dsh)?.workbench);
+	const declared = asRecord$5(asRecord$5(record.dsh)?.workbench);
 	const unit = declared === void 0 ? "" : asText$3(declared.unit);
 	if (unit === "") return {
 		kind: "not-module",
 		pkg
 	};
-	const declaredRegistry = asText$3(asRecord$3(record.publishConfig)?.registry);
+	const declaredRegistry = asText$3(asRecord$5(record.publishConfig)?.registry);
 	const registry = declaredRegistry === "" ? registryFromLockfile(profileDir, pkg) : declaredRegistry;
 	return {
 		kind: "module",
@@ -1971,7 +2219,7 @@ function workshopPathOf(ctx) {
 }
 //#endregion
 //#region src/shared/api/host/diy-workshop.ts
-function asRecord$2(value) {
+function asRecord$4(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
 function asText$2(value) {
@@ -1997,8 +2245,8 @@ function workshopModules(packagesDir, installed = []) {
 		} catch {
 			return [];
 		}
-		const record = asRecord$2(manifest);
-		const declared = record === void 0 ? void 0 : asRecord$2(asRecord$2(record.dsh)?.workbench);
+		const record = asRecord$4(manifest);
+		const declared = record === void 0 ? void 0 : asRecord$4(asRecord$4(record.dsh)?.workbench);
 		const unit = declared === void 0 ? "" : asText$2(declared.unit);
 		if (unit === "") return [];
 		return [{
@@ -2021,7 +2269,6 @@ var MODULES_TOOL = "workbench_modules";
 var DIY_TOOL = "workbench_diy";
 var panelsUnit = {
 	id: "panels",
-	kind: "ui",
 	card: null,
 	tools: [
 		{
@@ -2056,9 +2303,10 @@ function actionOf$1(call) {
 	const raw = call.arguments;
 	if (typeof raw !== "object" || raw === null) return {};
 	const value = raw;
+	const target = typeof value.plugin === "string" ? value.plugin : typeof value.name === "string" ? value.name : typeof value.id === "string" ? value.id : typeof value.unit === "string" ? value.unit : void 0;
 	return {
 		...typeof value.action === "string" ? { action: value.action } : {},
-		...typeof value.id === "string" ? { id: value.id } : typeof value.unit === "string" ? { id: value.unit } : {}
+		...target === void 0 ? {} : { id: target }
 	};
 }
 function whatOf(id) {
@@ -2079,6 +2327,17 @@ var panelsApproval = (call) => {
 	const what = whatOf(id);
 	if (call.name === "workbench_modules") {
 		if (readAction) return READ;
+		if (action === "update-plugin" || action === "uninstall-plugin") {
+			const verb = action === "update-plugin" ? "更新" : "卸载";
+			const verbEn = action === "update-plugin" ? "update" : "remove";
+			return askOf(`workbench_modules ${action} ${id ?? ""} changes an opencli plugin on this machine`, {
+				en: `it ${verbEn}s that opencli plugin on this machine. Allow?`,
+				zh: `会${verb}这个 opencli 插件。允许吗？`
+			}, {
+				en: `The agent wants to ${verbEn} the opencli plugin ${what} (it changes what is installed on this machine). Allow?`,
+				zh: `agent 想${verb} opencli 插件 ${what}（会改这台机器上装的东西）。允许吗？`
+			});
+		}
 		if (action === "update-dependency") return askOf(`workbench_modules update-dependency ${id ?? ""} upgrades a shared dependency on this machine`, {
 			en: "it upgrades that shared dependency on this machine. Allow?",
 			zh: `会升级共用依赖 ${what}。允许吗？`
@@ -2145,13 +2404,102 @@ var panelsApproval = (call) => {
 	});
 };
 //#endregion
+//#region src/modules/panels/model/config.ts
+var EMPTY_BOARD = {
+	shown: [],
+	hidden: []
+};
+var BOARD_TARGETS = ["workspace", "machine"];
+var DEFAULT_BOARD_TARGET = "workspace";
+function resolveScope(query) {
+	const { id, boards } = query;
+	const board = boards.workspace ?? boards.machine;
+	if (board === null) return false;
+	if (board.hidden.includes(id)) return false;
+	return board.shown.includes(id);
+}
+function strings(raw) {
+	return Array.isArray(raw) ? raw.filter((item) => typeof item === "string") : [];
+}
+function parseBoard(raw) {
+	if (typeof raw !== "object" || raw === null) return EMPTY_BOARD;
+	const value = raw;
+	return {
+		shown: strings(value.shown),
+		hidden: strings(value.hidden)
+	};
+}
+function parseReleased(raw) {
+	if (typeof raw !== "object" || raw === null) return [];
+	return strings(raw.ids);
+}
+function resolvePanels(manifests, boards) {
+	const ordered = boards.workspace?.shown ?? boards.machine?.shown ?? [];
+	const rank = new Map(ordered.map((id, index) => [id, index]));
+	return manifests.filter((manifest) => manifest.card !== null).map((manifest) => {
+		const on = resolveScope({
+			id: manifest.id,
+			boards
+		});
+		const order = rank.get(manifest.id) ?? ordered.length + (manifest.card?.order ?? 0);
+		return {
+			id: manifest.id,
+			titleKey: manifest.card?.titleKey ?? manifest.id,
+			order,
+			shown: on,
+			source: on && (boards.workspace?.shown.includes(manifest.id) ?? false) ? "user" : "default",
+			hasCard: true
+		};
+	}).sort((a, b) => a.order - b.order || a.id.localeCompare(b.id));
+}
+function withoutReleased(released, id) {
+	return released.filter((item) => item !== id);
+}
+function withReleased(released, id) {
+	return [.../* @__PURE__ */ new Set([...released, id])];
+}
+function added(list, id) {
+	return list.includes(id) ? [...list] : [...list, id];
+}
+function dropped(list, id) {
+	return list.filter((item) => item !== id);
+}
+function withShown(board, id) {
+	return {
+		shown: added(board.shown, id),
+		hidden: dropped(board.hidden, id)
+	};
+}
+function withHidden(board, id) {
+	return {
+		shown: dropped(board.shown, id),
+		hidden: added(board.hidden, id)
+	};
+}
+function withoutPanel(board, id) {
+	return {
+		shown: dropped(board.shown, id),
+		hidden: dropped(board.hidden, id)
+	};
+}
+function withMoved(board, id, index) {
+	const current = [...board.shown];
+	const from = current.indexOf(id);
+	const max = from === -1 ? current.length : current.length - 1;
+	const to = Math.max(0, Math.min(max, Math.trunc(index)));
+	if (from === -1) current.splice(to, 0, id);
+	else if (from !== to) current.splice(to, 0, ...current.splice(from, 1));
+	return {
+		shown: current,
+		hidden: dropped(board.hidden, id)
+	};
+}
+//#endregion
 //#region src/shared/api/host/diy-facts.ts
 function asExported(dir) {
 	try {
 		const manifest = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
-		const built = (typeof manifest.exports === "object" && manifest.exports !== null ? Object.values(manifest.exports) : []).filter((one) => typeof one === "string");
-		if (built.length > 0) return built;
-		return Object.values(manifest.dsh?.workbench?.faces ?? {}).filter((one) => typeof one === "string");
+		return (typeof manifest.exports === "object" && manifest.exports !== null ? Object.values(manifest.exports) : []).filter((one) => typeof one === "string");
 	} catch {
 		return [];
 	}
@@ -2456,7 +2804,7 @@ var OUTPUT_SCHEMA$2 = {
 	},
 	additionalProperties: true
 };
-function asRecord$1(value) {
+function asRecord$3(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
 function asNumber(value) {
@@ -2472,7 +2820,7 @@ function asText$1(value) {
 function plainJson(value) {
 	return JSON.parse(JSON.stringify(value));
 }
-function verdictOf(change) {
+function verdictOf$1(change) {
 	if (change.application === "applied") return "装好了，已生效";
 	if (change.application === "restart-required") return "装好了，要重启一次才生效（装新模块、同名重装、替换已有包都走这一支）";
 	if (change.application === "overridden") return "被更高层的声明盖住了，这次没生效";
@@ -2616,7 +2964,7 @@ function registerDiyTools(ctx, market, panels) {
 			}
 		},
 		async execute(raw, exec) {
-			const args = asRecord$1(raw) ?? {};
+			const args = asRecord$3(raw) ?? {};
 			const action = asText$1(args.action) || "list";
 			if (!ACTIONS$1.includes(action)) throw new Error(`不认识的 action：${action}（可用：${ACTIONS$1.join(" / ")}）`);
 			const packagesDir = workshopPackagesDir(ctx);
@@ -2741,7 +3089,7 @@ function registerDiyTools(ctx, market, panels) {
 				});
 			}
 			const outcome = await market.installBundle(found.dir);
-			const verdict = verdictOf(outcome.change);
+			const verdict = verdictOf$1(outcome.change);
 			const restartRequired = outcome.change.application === "restart-required";
 			const panel = outcome.change.application === "applied" ? showOrReason(panels, unit, workspace) : {
 				ok: false,
@@ -2986,14 +3334,570 @@ function sourceProblemText(problem, env) {
 	return "这份安装没声明安装方式 —— 没声明就不猜地址，只能自己动手。";
 }
 //#endregion
-//#region src/modules/panels/model/market.ts
+//#region src/shared/api/host/registry-declaration.ts
+var cache$1 = /* @__PURE__ */ new Map();
+function asRecord$2(value) {
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+function localDirOf(spec) {
+	const dir = spec.trim().replace(/^(?:file|link):/, "");
+	return path.isAbsolute(dir) ? dir : void 0;
+}
+function packageManifestOf(dir) {
+	try {
+		return asRecord$2(JSON.parse(fs.readFileSync(path.join(dir, "package.json"), "utf8")));
+	} catch {
+		return;
+	}
+}
+function dshRecordOf(dir) {
+	return packageManifestOf(dir)?.dsh;
+}
+function packageNameOf(dir) {
+	const name = packageManifestOf(dir)?.name;
+	return typeof name === "string" && name.trim() !== "" ? name.trim() : void 0;
+}
+function pathDeclarationOf(spec) {
+	const dir = localDirOf(spec);
+	return dir === void 0 ? void 0 : asRecord$2(dshRecordOf(dir))?.workbench;
+}
+async function registryDshOf(options) {
+	const { shell, name, registry, force = false } = options;
+	const key = `${registry ?? ""}|${name}`;
+	const hit = cache$1.get(key);
+	if (!force && hit !== void 0 && Date.now() - hit.at < 6e5) return {
+		readable: true,
+		raw: hit.raw
+	};
+	const at = registry === void 0 ? "" : ` --registry ${quoteShellArg(registry)}`;
+	const result = await runShell(shell, `npm view ${quoteShellArg(name)} dsh --json${at} --cache ${quoteShellArg(npmCacheDir())}`, { timeoutMs: VERSION_CHECK_TIMEOUT_MS }).catch(() => void 0);
+	const parsed = result?.exitCode === 0 ? parseJsonLoose(result.stdout) : void 0;
+	if (parsed === void 0) return {
+		readable: false,
+		raw: void 0
+	};
+	cache$1.set(key, {
+		at: Date.now(),
+		raw: parsed
+	});
+	return {
+		readable: true,
+		raw: parsed
+	};
+}
+async function registryDeclarationOf(options) {
+	const found = await registryDshOf(options);
+	return found.readable ? asRecord$2(found.raw)?.workbench : void 0;
+}
+function declarationRefusalOf(name, raw) {
+	if (raw === void 0) return [];
+	return declarationProblemsOf(name, raw);
+}
+//#endregion
+//#region src/shared/api/host/package-kind.ts
+var OPENCLI_MANIFEST_FILE = "opencli-plugin.json";
+var VERSION = /^[a-zA-Z0-9][a-zA-Z0-9._+-]*$/;
+function splitNpmSpec(spec) {
+	const value = spec.trim();
+	const at = value.lastIndexOf("@");
+	const name = at > 0 ? value.slice(0, at) : value;
+	const version = at > 0 ? value.slice(at + 1) : "";
+	if (!isPackageName(name)) return void 0;
+	if (version !== "" && !VERSION.test(version)) return void 0;
+	return {
+		name,
+		...version === "" ? {} : { version }
+	};
+}
+function asRecord$1(value) {
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+function isCommandFile(name) {
+	if (name.endsWith(".d.ts") || name.endsWith(".test.ts")) return false;
+	if (name.endsWith(".d.js")) return false;
+	return name.endsWith(".ts") || name.endsWith(".js");
+}
+function pluginManifestOf(dir) {
+	try {
+		const parsed = JSON.parse(fs.readFileSync(path.join(dir, OPENCLI_MANIFEST_FILE), "utf8"));
+		if (Array.isArray(parsed)) return void 0;
+		return asRecord$1(parsed);
+	} catch {
+		return;
+	}
+}
+function hasCommandFile(dir) {
+	try {
+		return fs.readdirSync(dir).some(isCommandFile);
+	} catch {
+		return false;
+	}
+}
+function pluginAt(dir) {
+	const manifest = pluginManifestOf(dir);
+	if (manifest === void 0 || !hasCommandFile(dir)) return void 0;
+	const name = manifest.name;
+	return typeof name === "string" && name.trim() !== "" ? { name: name.trim() } : {};
+}
+function dshMarkersOf(raw) {
+	const record = asRecord$1(raw);
+	return record !== void 0 && ("bundle" in record || "workbench" in record);
+}
+function verdictOf(dir) {
+	const plugin = pluginAt(dir);
+	if (packageManifestOf(dir) === void 0 && plugin === void 0) return void 0;
+	const dsh = dshMarkersOf(dshRecordOf(dir));
+	const kind = plugin !== void 0 && dsh ? "both" : plugin !== void 0 ? "opencli-plugin" : dsh ? "dsh-bundle" : "neither";
+	const pkg = packageNameOf(dir);
+	return {
+		kind,
+		...pkg === void 0 ? {} : { pkg },
+		...plugin?.name === void 0 ? {} : { pluginName: plugin.name }
+	};
+}
+function refusalReason() {
+	return "这个包既不是工作台的模块，也不是 opencli 的插件，装了也用不上";
+}
+//#endregion
+//#region src/shared/api/host/package-content.ts
+function packedFileFrom(stdout, root) {
+	const parsed = parseJsonLoose(stdout);
+	if (Array.isArray(parsed)) {
+		const first = parsed[0];
+		const filename = typeof first === "object" && first !== null ? first.filename : void 0;
+		if (typeof filename === "string" && filename.trim() !== "") {
+			const at = path.join(root, path.basename(filename.trim()));
+			if (fs.existsSync(at)) return at;
+		}
+	}
+	try {
+		const found = fs.readdirSync(root).filter((name) => name.endsWith(".tgz"));
+		return found.length === 1 ? path.join(root, found[0] ?? "") : void 0;
+	} catch {
+		return;
+	}
+}
+async function withPackageDir(options, visit) {
+	const local = localDirOf(options.spec);
+	if (local !== void 0) return visit(local);
+	if (splitNpmSpec(options.spec) === void 0) return void 0;
+	const shell = options.shell;
+	if (shell === void 0) return void 0;
+	let root;
+	try {
+		root = fs.mkdtempSync(path.join(os.tmpdir(), "wb-package-"));
+	} catch {
+		return;
+	}
+	try {
+		const at = options.registry === void 0 ? "" : ` --registry ${quoteShellArg(options.registry)}`;
+		const packed = await runShell(shell, `npm pack ${quoteShellArg(options.spec)} --ignore-scripts --json --pack-destination ${quoteShellArg(root)} --cache ${quoteShellArg(npmCacheDir())}${at}`, { timeoutMs: INSTALL_TIMEOUT_MS }).catch(() => void 0);
+		if (packed === void 0 || packed.exitCode !== 0) return void 0;
+		const file = packedFileFrom(packed.stdout, root);
+		if (file === void 0) return void 0;
+		const unpacked = await runShell(shell, `tar -xzf ${quoteShellArg(file)} -C ${quoteShellArg(root)}`, { timeoutMs: INSTALL_TIMEOUT_MS }).catch(() => void 0);
+		if (unpacked === void 0 || unpacked.exitCode !== 0) return void 0;
+		const dir = path.join(root, "package");
+		if (!fs.existsSync(dir)) return void 0;
+		return visit(dir);
+	} finally {
+		fs.rmSync(root, {
+			recursive: true,
+			force: true
+		});
+	}
+}
+//#endregion
+//#region src/shared/api/host/package-route.ts
+var LOCAL_PLUGIN_ENV = "DSH_WB_OPENCLI_PLUGIN_PATH";
+var PLUGIN_REGISTRY_ENV = "DSH_WB_OPENCLI_PLUGIN_REGISTRY";
+var cache = /* @__PURE__ */ new Map();
+function routeOfVerdict(verdict, fallback) {
+	const pkg = verdict.pkg ?? fallback;
+	if (verdict.kind === "neither") return {
+		kind: "neither",
+		...pkg === void 0 ? {} : { pkg }
+	};
+	if (verdict.kind === "dsh-bundle" || verdict.kind === "both") return { kind: "dsh-bundle" };
+	return {
+		kind: "opencli-plugin",
+		...pkg === void 0 ? {} : { pkg },
+		...verdict.pluginName === void 0 ? {} : { pluginName: verdict.pluginName }
+	};
+}
+async function packageRouteOf(options) {
+	const local = localDirOf(options.spec);
+	if (local !== void 0) {
+		const verdict = verdictOf(local);
+		return verdict === void 0 ? void 0 : routeOfVerdict(verdict, splitNpmSpec(options.spec)?.name);
+	}
+	const ref = splitNpmSpec(options.spec);
+	if (ref === void 0) return void 0;
+	const shell = options.shell;
+	const registry = options.registry;
+	if (shell === void 0 || registry === void 0) return void 0;
+	const key = `${registry}|${options.spec}`;
+	const hit = cache.get(key);
+	if (options.force !== true && hit !== void 0 && Date.now() - hit.at < 6e5) return hit.route ?? void 0;
+	const found = await registryDshOf({
+		shell,
+		name: options.spec,
+		registry
+	});
+	let route;
+	if (found.readable && dshMarkersOf(found.raw)) route = { kind: "dsh-bundle" };
+	else {
+		const verdict = await withPackageDir({
+			shell,
+			spec: options.spec,
+			registry
+		}, (dir) => verdictOf(dir));
+		route = verdict === void 0 ? void 0 : routeOfVerdict(verdict, ref.name);
+	}
+	cache.set(key, {
+		at: Date.now(),
+		route: route ?? null
+	});
+	return route;
+}
+function pluginInstallPlan(options) {
+	const local = localDirOf(options.spec);
+	if (local !== void 0) return resolvePluginSource({
+		kind: "local",
+		env: LOCAL_PLUGIN_ENV
+	}, { [LOCAL_PLUGIN_ENV]: local }, { command: options.command });
+	const ref = splitNpmSpec(options.spec);
+	if (ref === void 0) return {
+		ok: false,
+		problem: "malformed"
+	};
+	return resolvePluginSource({
+		kind: "npm",
+		package: ref.name,
+		registryEnv: PLUGIN_REGISTRY_ENV,
+		...options.registry === void 0 ? {} : { registryDefault: options.registry }
+	}, { [PLUGIN_REGISTRY_ENV]: options.registry }, {
+		command: options.command,
+		...options.pluginName === void 0 ? {} : { plugin: options.pluginName },
+		...ref.version === void 0 ? {} : { version: ref.version },
+		mode: "install"
+	});
+}
+//#endregion
+//#region src/modules/panels/model/plugin-name.ts
+function pluginDirOf(entry) {
+	return entry.local === true ? entry.package : `${vendorPluginsDir()}/${entry.package}`;
+}
+function pluginOnDisk(entry) {
+	return pluginAt(pluginDirOf(entry)) !== void 0;
+}
+function pluginNameOf(entry) {
+	if (entry.name !== void 0) return entry.name;
+	const name = pluginAt(pluginDirOf(entry))?.name?.trim() ?? "";
+	return name === "" ? void 0 : name;
+}
+//#endregion
+//#region src/modules/panels/model/market-route.ts
 function bundleNameOf(change, spec) {
 	if (change.bundle !== void 0 && change.bundle !== "") return change.bundle;
 	const at = spec.lastIndexOf("@");
 	return at > 0 ? spec.slice(0, at) : spec;
 }
+function installedPluginName(spec, pkg) {
+	const local = localDirOf(spec);
+	return pluginNameOf(local === void 0 ? { package: pkg } : {
+		package: local,
+		local: true
+	});
+}
+function outcomeOf(deps, pkg, change, plugin) {
+	return {
+		change,
+		module: deps.installed?.(pkg) ?? {
+			kind: "unknown",
+			pkg
+		},
+		supply: { state: "no-needs" },
+		...plugin === void 0 ? {} : { plugin }
+	};
+}
+async function installDshBundle(deps, spec, options) {
+	const change = await deps.manager.install({
+		spec,
+		...options?.registry === void 0 ? {} : { registry: options.registry },
+		...options?.requestId === void 0 ? {} : { requestId: options.requestId },
+		...options?.approvedBuilds === void 0 ? {} : { approvedBuilds: options.approvedBuilds }
+	});
+	if (change === null) throw new Error("插件管理器回的安装结果看不懂。");
+	const pkg = bundleNameOf(change, spec);
+	const module = deps.installed?.(pkg) ?? {
+		kind: "unknown",
+		pkg
+	};
+	await deps.rememberSource(deps.manager, pkg, options?.registry);
+	return {
+		change,
+		module,
+		supply: await deps.supplyAfter(module, change)
+	};
+}
+async function installRouted(deps) {
+	const { spec, options, registry, shell } = deps;
+	const route = await packageRouteOf({
+		spec,
+		...shell === void 0 ? {} : { shell },
+		...registry === void 0 ? {} : { registry }
+	});
+	if (route === void 0 || route.kind === "dsh-bundle") return installDshBundle(deps, spec, options);
+	const pkg = route.pkg ?? splitNpmSpec(spec)?.name ?? spec.trim();
+	if (route.kind === "neither") {
+		deps.logger?.warn?.(`[dsh-workbench] 不装 ${pkg}：${refusalReason()}`);
+		return outcomeOf(deps, pkg, {
+			application: "failed",
+			stage: "install",
+			changed: false,
+			target: pkg,
+			errorCode: "not-a-module-or-plugin",
+			errorDetail: refusalReason()
+		});
+	}
+	const plan = pluginInstallPlan({
+		spec,
+		command: deps.command,
+		...registry === void 0 ? {} : { registry },
+		...route.pluginName === void 0 ? {} : { pluginName: route.pluginName }
+	});
+	if (!plan.ok) throw new Error(sourceProblemText(plan.problem, plan.env));
+	deps.ledger?.intend({
+		package: pkg,
+		...registry === void 0 ? {} : { registry },
+		...localDirOf(spec) === void 0 ? {} : { local: true }
+	});
+	try {
+		await deps.runAll(plan.commands);
+	} catch (error) {
+		deps.ledger?.drop(pkg);
+		throw error;
+	}
+	deps.ledger?.complete(pkg, installedPluginName(spec, pkg));
+	deps.logger?.info?.(`[dsh-workbench] 把 ${pkg} 装进了 opencli 的插件区`);
+	return outcomeOf(deps, pkg, {
+		application: "applied",
+		stage: "install",
+		changed: true,
+		target: pkg
+	}, {
+		kind: "opencli-plugin",
+		pkg,
+		...route.pluginName === void 0 ? {} : { name: route.pluginName }
+	});
+}
+//#endregion
+//#region src/modules/panels/model/plugin-actions.ts
+function pluginKeptOf(retention, detail) {
+	if (retention === "keep-held") return { kind: "held" };
+	if (retention === "keep-unsure") return {
+		kind: "unsure",
+		unreadable: [...detail.unreadable]
+	};
+	return {
+		kind: "claimed",
+		by: [...detail.by]
+	};
+}
+function pluginKeptText(kept) {
+	if (kept.kind === "held") return "文件留着：你自己装的那一份，模块放手不动它。";
+	if (kept.kind === "unnamed") return "文件先留着：看不出这是哪个插件，说不准谁在用它。";
+	if (kept.kind === "unsure") return kept.unreadable.length === 0 ? "文件先留着：说不准还有谁在用它。" : `文件先留着：${kept.unreadable.join("、")} 读不出来用了什么，说不准它们在用它。`;
+	return `文件留着：${kept.by.join("、")} 还要用它。`;
+}
+function pluginRemovedText(pkg) {
+	return `「${pkg}」卸载干净了：没人再用它，文件也删了。`;
+}
+function pluginSweptText(pkg) {
+	return `清掉了 ${pkg}：先前要它的都放手了，也没别人在用，文件跟着删了。`;
+}
+function createPluginActions(options) {
+	const { ledger, shell, command, runAll, logger } = options;
+	function requireLedger() {
+		if (ledger === void 0) throw new Error("这个市场没有台账（插件记录），用户装的插件动不了。");
+		return ledger;
+	}
+	function requireHeld(pkg) {
+		const held = requireLedger();
+		const direct = held.read(pkg);
+		if (direct !== void 0) return {
+			entry: direct,
+			key: direct.package
+		};
+		const named = held.heldAsPlugin(pkg);
+		if (named !== void 0) return {
+			entry: named,
+			key: named.package
+		};
+		const known = held.list().map((entry) => entry.name ?? entry.package);
+		throw new Error(`台账里没有「${pkg}」这一笔（包名与插件名都认）—— 你装的插件有：${known.join("、") || "（空）"}`);
+	}
+	function referencesOf() {
+		return options.references?.() ?? {
+			trustworthy: false,
+			unreadable: []
+		};
+	}
+	function decide(entry, held) {
+		const plugin = pluginNameOf(entry);
+		if (plugin === void 0) return {
+			act: "keep",
+			kept: { kind: "unnamed" }
+		};
+		const refs = referencesOf();
+		const by = options.claimedBy?.(plugin) ?? [];
+		const retention = pluginRetentionOf({
+			held,
+			claimedBy: by,
+			trustworthy: refs.trustworthy
+		});
+		if (retention === "remove") return {
+			act: "remove",
+			plugin
+		};
+		return {
+			act: "keep",
+			kept: pluginKeptOf(retention, {
+				by,
+				unreadable: refs.unreadable
+			}),
+			plugin
+		};
+	}
+	async function removeFiles(plugin) {
+		if (shell === void 0) throw new Error("没有执行缝（shell 服务不可用），删不掉插件文件。");
+		await runAll([{ line: `${quoteShellArg(command)} plugin uninstall ${quoteShellArg(plugin)}` }]);
+	}
+	return {
+		async update(pkg) {
+			const { entry } = requireHeld(pkg);
+			if (entry.local === true || entry.registry === void 0) throw new Error(`「${entry.package}」是从本地装的，没有地方查新版。`);
+			if (shell === void 0) throw new Error("没有执行缝（shell 服务不可用），更新做不了。");
+			const latest = await latestVersion({
+				shell,
+				name: entry.package,
+				registry: entry.registry,
+				force: true
+			});
+			if (latest === void 0) throw new Error(`问不到「${entry.package}」的新版本。`);
+			const plan = pluginInstallPlan({
+				spec: `${entry.package}@${latest}`,
+				command,
+				registry: entry.registry,
+				...entry.name === void 0 ? {} : { pluginName: entry.name }
+			});
+			if (!plan.ok) throw new Error(sourceProblemText(plan.problem, plan.env));
+			await runAll(plan.commands);
+			logger?.info?.(`[dsh-workbench] 把 ${entry.package} 更新到 ${latest}`);
+			return { name: pluginNameOf(entry) ?? entry.name ?? entry.package };
+		},
+		async uninstall(pkg) {
+			const ledger = requireLedger();
+			const { entry, key } = requireHeld(pkg);
+			ledger.release(key);
+			const decision = decide(entry, false);
+			if (decision.act === "keep") {
+				logger?.info?.(`[dsh-workbench] ${pluginKeptText(decision.kept)}`);
+				return {
+					removed: false,
+					...decision.plugin === void 0 ? {} : { name: decision.plugin },
+					kept: decision.kept
+				};
+			}
+			await removeFiles(decision.plugin);
+			ledger.drop(key);
+			logger?.info?.(`[dsh-workbench] ${pluginRemovedText(key)}`);
+			return {
+				removed: true,
+				name: decision.plugin
+			};
+		},
+		async sweep() {
+			if (ledger === void 0) return [];
+			const removed = [];
+			for (const entry of ledger.all()) {
+				if (entry.releasedAt === void 0) continue;
+				const decision = decide(entry, false);
+				if (decision.act === "keep") continue;
+				try {
+					await removeFiles(decision.plugin);
+				} catch (error) {
+					logger?.warn?.(`[dsh-workbench] 清 ${entry.package} 没成：${String(error)}`);
+					continue;
+				}
+				ledger.drop(entry.package);
+				removed.push(entry.package);
+				logger?.info?.(`[dsh-workbench] ${pluginSweptText(entry.package)}`);
+			}
+			return removed;
+		}
+	};
+}
+//#endregion
+//#region src/modules/panels/model/market-env.ts
+function createEnvDropper(options) {
+	const { catalog, isReleased, ledger, command, run, logger } = options;
+	function referencesOf() {
+		return options.references?.() ?? {
+			trustworthy: false,
+			unreadable: []
+		};
+	}
+	function usersOf(plugin, except) {
+		return catalog().filter((item) => item.id !== except && !(isReleased?.(item.id) ?? false) && (item.env?.plugins ?? []).some((need) => need.name === plugin)).map((item) => item.id);
+	}
+	function libUsersOf(need, unit) {
+		return catalog().filter((item) => item.id !== unit && !(isReleased?.(item.id) ?? false) && (item.env?.libs ?? []).some((other) => other.name === need.name)).map((item) => item.id);
+	}
+	return {
+		usersOf,
+		async drop(unit, env, before) {
+			const kept = /* @__PURE__ */ new Set();
+			const onMachine = new Set((before.plugins ?? []).filter((state) => state.status !== "missing").map((state) => state.name));
+			const unknown = before.plugins === void 0;
+			for (const need of env?.plugins ?? []) {
+				const users = usersOf(need.name, unit);
+				const retention = pluginRetentionOf({
+					held: ledger?.heldAsPlugin(need.name) !== void 0,
+					claimedBy: users,
+					trustworthy: referencesOf().trustworthy
+				});
+				if (retention !== "remove") {
+					for (const id of users) kept.add(id);
+					const reason = pluginKeptOf(retention, {
+						by: users,
+						unreadable: referencesOf().unreadable
+					});
+					logger?.info?.(`[dsh-workbench] ${pluginKeptText(reason)}`);
+					continue;
+				}
+				if (!unknown && !onMachine.has(need.name)) continue;
+				await run(`${quoteShellArg(command)} plugin uninstall ${quoteShellArg(need.name)}`);
+			}
+			for (const need of env?.libs ?? []) {
+				const keepers = libUsersOf(need, unit);
+				if (keepers.length > 0) {
+					for (const id of keepers) kept.add(id);
+					continue;
+				}
+				const present = (before.libs ?? []).some((state) => state.name === need.name && state.status !== "missing");
+				if (before.libs !== void 0 && !present) continue;
+				await run(`npm uninstall --prefix ${quoteShellArg(libsPrefix())} ${quoteShellArg(need.name)}`, true);
+			}
+			return [...kept];
+		}
+	};
+}
+//#endregion
+//#region src/modules/panels/model/market.ts
 function createMarketService(options) {
-	const { manifests, manifestsNow, probe, shell, logger, onInstalled, onUninstalled, isReleased, bundles, installed, modules, registries } = options;
+	const { manifests, manifestsNow, probe, shell, logger, onInstalled, onUninstalled, isReleased, bundles, installed, modules, registries, ledger, references } = options;
 	const command = options.command ?? "opencli";
 	const catalog = () => (manifestsNow?.() ?? manifests).filter((manifest) => (manifest.env?.plugins ?? []).length > 0 || (manifest.env?.libs ?? []).length > 0);
 	function requireEntry(unit) {
@@ -3098,30 +4002,28 @@ function createMarketService(options) {
 		if (bundles === void 0) throw new Error("这个 profile 里没有插件管理器，装不了模块包。");
 		return bundles;
 	}
-	async function dropEnv(unit, env, before) {
-		const kept = /* @__PURE__ */ new Set();
-		const onMachine = new Set((before.plugins ?? []).filter((state) => state.status !== "missing").map((state) => state.name));
-		const unknown = before.plugins === void 0;
-		for (const need of env?.plugins ?? []) {
-			const keepers = catalog().filter((item) => item.id !== unit && (item.env?.plugins ?? []).some((other) => other.name === need.name) && !(isReleased?.(item.id) ?? false));
-			if (keepers.length > 0) {
-				for (const item of keepers) kept.add(item.id);
-				continue;
-			}
-			if (!unknown && !onMachine.has(need.name)) continue;
-			await run(`${quoteShellArg(command)} plugin uninstall ${quoteShellArg(need.name)}`);
-		}
-		for (const need of env?.libs ?? []) {
-			const keepers = catalog().filter((item) => item.id !== unit && (item.env?.libs ?? []).some((other) => other.name === need.name) && !(isReleased?.(item.id) ?? false));
-			if (keepers.length > 0) {
-				for (const item of keepers) kept.add(item.id);
-				continue;
-			}
-			const present = (before.libs ?? []).some((state) => state.name === need.name && state.status !== "missing");
-			if (before.libs !== void 0 && !present) continue;
-			await run(`npm uninstall --prefix ${quoteShellArg(libsPrefix())} ${quoteShellArg(need.name)}`, true);
+	const envDropper = createEnvDropper({
+		catalog,
+		...isReleased === void 0 ? {} : { isReleased },
+		...ledger === void 0 ? {} : { ledger },
+		...references === void 0 ? {} : { references },
+		command,
+		run,
+		...logger === void 0 ? {} : { logger }
+	});
+	function pluginUsersOf(plugin, except) {
+		return envDropper.usersOf(plugin, except);
+	}
+	async function reprobePlugin(pkg, name) {
+		const keys = name === void 0 || name === pkg ? [pkg] : [name, pkg];
+		for (const key of keys) {
+			const id = `plugin:${key}`;
+			if (findDependency(catalog(), id, isReleased) === void 0) continue;
+			await probeSharing({
+				action: "update-dependency",
+				id
+			});
 		}
-		return [...kept];
 	}
 	async function supplyAfter(module, change) {
 		if (module.kind !== "module") return { state: "not-a-module" };
@@ -3172,6 +4074,38 @@ function createMarketService(options) {
 		logger?.warn?.(`[dsh-workbench] 卸 ${pkg} 撞上源：补 ${added.join("、")} 后重试一次`);
 		return await manager.remove(pkg).catch(() => null) ?? change;
 	}
+	function routeDeps(manager) {
+		return {
+			manager,
+			command,
+			runAll,
+			rememberSource: rememberInstalledSource,
+			supplyAfter,
+			...shell === void 0 ? {} : { shell },
+			...installed === void 0 ? {} : { installed },
+			...ledger === void 0 ? {} : { ledger },
+			...logger === void 0 ? {} : { logger }
+		};
+	}
+	const plugins = createPluginActions({
+		...ledger === void 0 ? {} : { ledger },
+		...shell === void 0 ? {} : { shell },
+		command,
+		runAll,
+		claimedBy: (plugin) => pluginUsersOf(plugin),
+		...references === void 0 ? {} : { references },
+		...logger === void 0 ? {} : { logger }
+	});
+	async function installByRoute(spec, options) {
+		const manager = requireBundles();
+		const registry = options?.registry ?? (await manager.registries().catch(() => null))?.resolved ?? void 0;
+		return installRouted({
+			...routeDeps(manager),
+			spec,
+			...options === void 0 ? {} : { options },
+			...registry === void 0 ? {} : { registry }
+		});
+	}
 	const service = {
 		async list() {
 			return snapshot();
@@ -3258,7 +4192,8 @@ function createMarketService(options) {
 				};
 			}
 			const before = await capabilityOf(unit, true);
-			const keptFor = await dropEnv(unit, requireEntry(unit).env, before);
+			const keptFor = await envDropper.drop(unit, requireEntry(unit).env, before);
+			await plugins.sweep();
 			await probeSharing({
 				action: "uninstall",
 				unit
@@ -3277,25 +4212,7 @@ function createMarketService(options) {
 			};
 		},
 		async installBundle(spec, options) {
-			const manager = requireBundles();
-			const change = await manager.install({
-				spec,
-				...options?.registry === void 0 ? {} : { registry: options.registry },
-				...options?.requestId === void 0 ? {} : { requestId: options.requestId },
-				...options?.approvedBuilds === void 0 ? {} : { approvedBuilds: options.approvedBuilds }
-			});
-			if (change === null) throw new Error("插件管理器回的安装结果看不懂。");
-			const pkg = bundleNameOf(change, spec);
-			const module = installed?.(pkg) ?? {
-				kind: "unknown",
-				pkg
-			};
-			await rememberInstalledSource(manager, pkg, options?.registry);
-			return {
-				change,
-				module,
-				supply: await supplyAfter(module, change)
-			};
+			return installByRoute(spec, options);
 		},
 		async removeBundle(pkg) {
 			const manager = requireBundles();
@@ -3313,7 +4230,8 @@ function createMarketService(options) {
 				change,
 				keptFor: []
 			};
-			const keptFor = manifest === void 0 || before === void 0 ? [] : await dropEnv(unit, manifest.env, before);
+			const keptFor = manifest === void 0 || before === void 0 ? [] : await envDropper.drop(unit, manifest.env, before);
+			await plugins.sweep();
 			onUninstalled?.(unit);
 			return {
 				change,
@@ -3338,10 +4256,21 @@ function createMarketService(options) {
 				force: true
 			});
 			const spec = latest === void 0 ? pkg : `${pkg}@${latest}`;
-			const outcome = await service.installBundle(spec, { ...registry === void 0 ? {} : { registry } });
+			const outcome = await installDshBundle(routeDeps(requireBundles()), spec, { ...registry === void 0 ? {} : { registry } });
+			await plugins.sweep();
 			await service.update(unit).catch(() => void 0);
 			return outcome;
 		},
+		async updatePlugin(pkg) {
+			const outcome = await plugins.update(pkg);
+			await reprobePlugin(pkg, outcome.name);
+			return outcome;
+		},
+		async uninstallPlugin(pkg) {
+			const outcome = await plugins.uninstall(pkg);
+			await reprobePlugin(pkg, outcome.name);
+			return outcome;
+		},
 		updateDependency: updateDependencyRow
 	};
 	return service;
@@ -3396,6 +4325,22 @@ async function dispatchMarket(market, request) {
 		action: "cancel-install",
 		cancellation: await market.cancelInstall(request.requestId ?? "")
 	};
+	if (request.action === "update-plugin") {
+		await market.updatePlugin(request.name ?? "");
+		return {
+			ok: true,
+			action: "update-plugin"
+		};
+	}
+	if (request.action === "uninstall-plugin") {
+		const outcome = await market.uninstallPlugin(request.name ?? "");
+		return {
+			ok: true,
+			action: "uninstall-plugin",
+			removed: outcome.removed,
+			...outcome.kept === void 0 ? {} : { kept: outcome.kept }
+		};
+	}
 	const unit = request.unit ?? "";
 	if (request.action === "uninstall") {
 		const { entry, keptFor, change } = await market.uninstall(unit);
@@ -3470,13 +4415,24 @@ var OUTPUT_SCHEMA$1 = {
 	},
 	additionalProperties: true
 };
+function describePluginUninstall(pkg, outcome) {
+	if (outcome.removed) return `已卸载 opencli 插件 ${pkg}：没人再用它，文件也删了。`;
+	return `已从「你装的插件」里去掉 ${pkg}。${outcome.kept === void 0 ? "" : pluginKeptText(outcome.kept)}`;
+}
+function usersOf(shared, names) {
+	const hit = shared.find((item) => names.some((name) => name !== void 0 && name !== "" && item.id === `plugin:${name}`));
+	if (hit === void 0 || hit.usedBy.length === 0) return "";
+	return `它被 ${hit.usedBy.join("、")} 用着（动的是它们的供给，它们的状态跟着重探了一遍）`;
+}
 var ACTIONS = [
 	"list",
 	"install",
 	"update",
 	"uninstall",
 	"install-bundle",
-	"update-dependency"
+	"update-dependency",
+	"update-plugin",
+	"uninstall-plugin"
 ];
 function registerMarketTools(ctx, market) {
 	const tools = ctx.get("tools");
@@ -3486,13 +4442,13 @@ function registerMarketTools(ctx, market) {
 	}
 	const tool = {
 		name: "workbench_modules",
-		description: "看 / 装 / 升 / 卸工作台的面板模块。install-bundle 按 spec（包名，可带版本；git / tarball / 本地路径也行）把模块包装进 profile —— 装完会连带装它声明的 opencli 插件；其余 action 按模块 id 动它要的外部供给。卸载只动工作台运行时，不影响终端那套；共用依赖只有升级。",
+		description: "看 / 装 / 升 / 卸工作台的面板模块，以及用户自己装的 opencli 插件。install-bundle 按 spec（包名，可带版本；git / tarball / 本地路径也行）把模块包装进 profile —— 装完会连带装它声明的 opencli 插件；其余 action 按模块 id 动它要的外部供给；update-plugin / uninstall-plugin 按包名或插件名动用户装的那份插件。卸载只动工作台运行时，不影响终端那套；共用依赖只有升级。",
 		parameters: {
 			type: "object",
 			properties: {
 				action: {
 					type: "string",
-					description: "install-bundle=按 spec 装模块包（要 spec），update-dependency=升级共用依赖，其余=对模块（要 id）。",
+					description: "install-bundle=按 spec 装模块包（要 spec），update-dependency=升级共用依赖（要 id），update-plugin / uninstall-plugin=动用户自己装的 opencli 插件（要 plugin），其余=对模块（要 id）。",
 					enum: [...ACTIONS]
 				},
 				id: {
@@ -3506,6 +4462,10 @@ function registerMarketTools(ctx, market) {
 				registry: {
 					type: "string",
 					description: "install-bundle 用：先问哪个源（不填就用这个 profile 自己配的源）。"
+				},
+				plugin: {
+					type: "string",
+					description: "update-plugin / uninstall-plugin 用：opencli 插件的包名或插件名（就是市场「已安装 opencli 插件」那一段里的名字，如 cmdb 或 opencli-plugin-cmdb）。"
 				}
 			},
 			required: ["action"],
@@ -3544,6 +4504,23 @@ function registerMarketTools(ctx, market) {
 					text: describeInstall(spec, outcome.module, outcome.supply, outcome.change)
 				};
 			}
+			if (action === "update-plugin" || action === "uninstall-plugin") {
+				const plugin = args?.plugin?.trim() ?? "";
+				if (plugin === "") throw new Error(`${action} 需要一个 plugin：opencli 插件的包名或插件名 —— 就是市场「已安装 opencli 插件」那一段里的名字。`);
+				if (action === "update-plugin") {
+					const updated = await market.updatePlugin(plugin);
+					const users = usersOf((await market.list()).shared, [updated.name, plugin]);
+					return { text: `已更新 opencli 插件 ${plugin}${users === "" ? "。" : `；${users}。`}` };
+				}
+				const outcome = await market.uninstallPlugin(plugin);
+				const users = usersOf((await market.list()).shared, [outcome.name, plugin]);
+				return {
+					removed: outcome.removed,
+					...outcome.name === void 0 ? {} : { name: outcome.name },
+					...outcome.kept === void 0 ? {} : { kept: outcome.kept },
+					text: `${describePluginUninstall(plugin, outcome)}${users === "" ? "" : `${users}。`}`
+				};
+			}
 			const id = args?.id;
 			if (id === void 0 || id.trim() === "") {
 				const { modules, shared } = await market.list();
@@ -3594,7 +4571,7 @@ function applyPanelsPref(panels, payload) {
 	const path = action.path ?? null;
 	if (action.action === "reset") return {
 		ok: true,
-		units: panels.resetWorkspace(path)
+		units: panels.reset(path)
 	};
 	if (action.id === void 0) throw new Error(`${action.action} 需要一个 id（当前套件：${panels.list(path).map((entry) => entry.id).join(", ")}）`);
 	if (action.action === "show") return {
@@ -3655,66 +4632,12 @@ function panelsFactsOf(call, manifests) {
 	];
 }
 //#endregion
-//#region src/modules/panels/model/config.ts
-function strings(raw) {
-	return Array.isArray(raw) ? raw.filter((item) => typeof item === "string") : [];
-}
-function parseShown(raw) {
-	if (typeof raw !== "object" || raw === null) return [];
-	return strings(raw.shown);
-}
-function parseReleased(raw) {
-	if (typeof raw !== "object" || raw === null) return [];
-	return strings(raw.ids);
-}
-function resolvePanels(manifests, panels) {
-	const shown = panels ?? [];
-	const rank = new Map(shown.map((id, index) => [id, index]));
-	return manifests.filter((manifest) => manifest.card !== null).map((manifest) => {
-		const isShown = rank.has(manifest.id);
-		const order = rank.get(manifest.id) ?? shown.length + (manifest.card?.order ?? 0);
-		return {
-			id: manifest.id,
-			titleKey: manifest.card?.titleKey ?? manifest.id,
-			order,
-			shown: isShown,
-			source: isShown ? "user" : "default",
-			hasCard: true
-		};
-	}).sort((a, b) => a.order - b.order || a.id.localeCompare(b.id));
-}
-function withoutReleased(released, id) {
-	return released.filter((item) => item !== id);
-}
-function withReleased(released, id) {
-	return [.../* @__PURE__ */ new Set([...released, id])];
-}
-function withShown(panels, id) {
-	return panels.includes(id) ? [...panels] : [...panels, id];
-}
-function withHidden(panels, id) {
-	return panels.filter((item) => item !== id);
-}
-function withMoved(panels, id, index) {
-	const current = [...panels];
-	const from = current.indexOf(id);
-	const max = from === -1 ? current.length : current.length - 1;
-	const to = Math.max(0, Math.min(max, Math.trunc(index)));
-	if (from === -1) {
-		current.splice(to, 0, id);
-		return current;
-	}
-	if (from === to) return current;
-	current.splice(to, 0, ...current.splice(from, 1));
-	return current;
-}
-//#endregion
 //#region src/modules/panels/model/service.ts
 var PANELS_MODULE_ID = "panels";
 var PANELS_FILE = "config.json";
 var RELEASED_FILE = "released.json";
 function createPanelsService(options) {
-	const { manifests, store, logger } = options;
+	const { manifests, store, owned, logger } = options;
 	const listeners = /* @__PURE__ */ new Set();
 	const machine = store.machine(PANELS_MODULE_ID);
 	const folders = /* @__PURE__ */ new Map();
@@ -3725,12 +4648,36 @@ function createPanelsService(options) {
 		folders.set(workspace, folder);
 		return folder;
 	}
-	function readShown(folder) {
-		return parseShown(folder.read(PANELS_FILE));
+	function readBoard(folder) {
+		const raw = folder.read(PANELS_FILE);
+		return raw === null ? null : parseBoard(raw);
+	}
+	function boardIn(folder) {
+		return readBoard(folder) ?? EMPTY_BOARD;
+	}
+	function writeBoard(folder, next) {
+		folder.write(PANELS_FILE, {
+			shown: next.shown,
+			hidden: next.hidden
+		});
 	}
-	function writeShown(folder, next) {
-		if (next.length === 0) folder.remove(PANELS_FILE);
-		else folder.write(PANELS_FILE, { shown: next });
+	function boardsOf(workspace) {
+		const key = workspace?.trim() ?? "";
+		return {
+			workspace: key === "" ? null : readBoard(folderOf(key)),
+			machine: readBoard(machine)
+		};
+	}
+	function targetOf(target, workspace) {
+		if (target === "machine") return {
+			folder: machine,
+			key: null
+		};
+		const key = requireWorkspace(workspace);
+		return {
+			folder: folderOf(key),
+			key
+		};
 	}
 	let released;
 	function readReleased() {
@@ -3749,10 +4696,10 @@ function createPanelsService(options) {
 			logger?.warn?.(`[dsh-workbench] 面板配置订阅者报错：${String(error)}`);
 		}
 	}
-	function withPersisted(workspace, next) {
-		writeShown(folderOf(workspace), next);
+	function withPersisted(folder, next, key) {
+		writeBoard(folder, next);
 		notify();
-		return resolvePanels(manifests(), next);
+		return resolvePanels(manifests(), boardsOf(key));
 	}
 	function takeBackReleased(id) {
 		const current = readReleased();
@@ -3773,16 +4720,19 @@ function createPanelsService(options) {
 		return key;
 	}
 	return {
-		list(workspace) {
-			if (workspace === null || workspace.trim() === "") return resolvePanels(manifests(), null);
-			return resolvePanels(manifests(), readShown(folderOf(workspace.trim())));
+		list(workspace, target) {
+			return resolvePanels(manifests(), target === "machine" ? boardsOf(null) : boardsOf(workspace));
+		},
+		boards(workspace) {
+			return boardsOf(workspace);
 		},
 		isEnabled(id, workspace) {
-			const manifest = manifests().find((item) => item.id === id);
-			if (manifest === void 0) return false;
-			if (manifest.card === null) return true;
-			if (workspace === null || workspace.trim() === "") return false;
-			return readShown(folderOf(workspace.trim())).includes(id);
+			if (!manifests().some((item) => item.id === id)) return false;
+			if (owned?.().includes(id) === true) return true;
+			return resolveScope({
+				id,
+				boards: boardsOf(workspace)
+			});
 		},
 		subscribe(listener) {
 			listeners.add(listener);
@@ -3796,36 +4746,40 @@ function createPanelsService(options) {
 			const seen = /* @__PURE__ */ new Set();
 			const drop = (folder) => {
 				seen.add(folder.dir);
-				const current = readShown(folder);
-				if (current.includes(id)) writeShown(folder, withHidden(current, id));
+				const current = readBoard(folder);
+				if (current === null) return;
+				if (!current.shown.includes(id) && !current.hidden.includes(id)) return;
+				writeBoard(folder, withoutPanel(current, id));
 			};
 			for (const folder of store.scan(PANELS_MODULE_ID)) drop(folder);
 			for (const folder of folders.values()) if (!seen.has(folder.dir)) drop(folder);
+			drop(machine);
 			notify();
 		},
 		accept(id) {
 			takeBackReleased(id);
 		},
-		show(id, workspace) {
+		show(id, workspace, target) {
 			requireSwitchable(id);
-			const key = requireWorkspace(workspace);
+			const { folder, key } = targetOf(target ?? "workspace", workspace);
 			takeBackReleased(id);
-			return withPersisted(key, withShown(readShown(folderOf(key)), id));
+			return withPersisted(folder, withShown(boardIn(folder), id), key);
 		},
-		hide(id, workspace) {
+		hide(id, workspace, target) {
 			requireSwitchable(id);
-			const key = requireWorkspace(workspace);
-			return withPersisted(key, withHidden(readShown(folderOf(key)), id));
+			const { folder, key } = targetOf(target ?? "workspace", workspace);
+			return withPersisted(folder, withHidden(boardIn(folder), id), key);
 		},
-		move(id, index, workspace) {
+		move(id, index, workspace, target) {
 			requireSwitchable(id);
-			const key = requireWorkspace(workspace);
-			const current = readShown(folderOf(key));
-			if (!current.includes(id)) takeBackReleased(id);
-			return withPersisted(key, withMoved(current, id, index));
+			const { folder, key } = targetOf(target ?? "workspace", workspace);
+			const current = boardIn(folder);
+			if (!current.shown.includes(id)) takeBackReleased(id);
+			return withPersisted(folder, withMoved(current, id, index), key);
 		},
-		resetWorkspace(workspace) {
-			return withPersisted(requireWorkspace(workspace), []);
+		reset(workspace, target) {
+			const { folder, key } = targetOf(target ?? "workspace", workspace);
+			return withPersisted(folder, EMPTY_BOARD, key);
 		}
 	};
 }
@@ -3847,11 +4801,119 @@ function panelRoutes(panels, values) {
 	} };
 }
 //#endregion
+//#region src/modules/panels/model/plugin-ledger.ts
+function createPluginLedger(options) {
+	const folder = options.store.machine(PANELS_MODULE_ID);
+	const home = options.home;
+	const all = () => readPluginLedger(folder);
+	const save = (entries) => writePluginLedger(folder, entries);
+	return {
+		home,
+		list: () => heldEntriesOfHome(all(), home),
+		all: () => pluginEntriesOfHome(all(), home),
+		read: (pkg) => {
+			const entry = pluginEntryOf(all(), home, pkg);
+			return entry !== void 0 && entry.releasedAt === void 0 ? entry : void 0;
+		},
+		held: (pkg) => {
+			const entry = pluginEntryOf(all(), home, pkg);
+			return entry !== void 0 && entry.releasedAt === void 0;
+		},
+		heldAsPlugin: (plugin) => {
+			const key = plugin.trim();
+			if (key === "") return void 0;
+			const known = heldEntryOfPlugin(all(), home, key);
+			if (known !== void 0) return known;
+			return heldEntriesOfHome(all(), home).find((entry) => pluginNameOf(entry) === key);
+		},
+		intend(intent) {
+			const registry = intent.registry?.trim() ?? "";
+			save(withPluginEntry(all(), {
+				opencliHome: home,
+				package: intent.package,
+				installedAt: (/* @__PURE__ */ new Date()).toISOString(),
+				...registry === "" ? {} : { registry },
+				...intent.local === true ? { local: true } : {}
+			}));
+		},
+		complete(pkg, name) {
+			const trimmed = name?.trim() ?? "";
+			if (trimmed === "") return;
+			const current = pluginEntryOf(all(), home, pkg);
+			if (current === void 0 || current.releasedAt !== void 0) return;
+			save(withPluginEntry(all(), {
+				...current,
+				name: trimmed
+			}));
+		},
+		release(pkg) {
+			save(withReleasedEntry(all(), home, pkg, (/* @__PURE__ */ new Date()).toISOString()));
+		},
+		drop(pkg) {
+			save(withoutPluginEntry(all(), home, pkg));
+		}
+	};
+}
+//#endregion
+//#region src/shared/api/installed-plugins.ts
+var INSTALLED_PLUGINS_ROUTE = "panels/plugins";
+//#endregion
+//#region src/modules/panels/model/plugin-section.ts
+async function installedPlugins(options) {
+	const { ledger, shell, force = false } = options;
+	const rows = [];
+	for (const entry of ledger.list()) {
+		const release = shell === void 0 || entry.local === true || entry.registry === void 0 ? void 0 : await probeRelease({
+			shell,
+			package: entry.package,
+			registry: entry.registry,
+			force
+		});
+		rows.push({
+			pkg: entry.package,
+			...entry.name === void 0 ? {} : { name: entry.name },
+			...release === void 0 ? {} : {
+				installed: release.installed,
+				...release.latest === void 0 ? {} : { latest: release.latest }
+			},
+			...entry.local === true ? { local: true } : {},
+			...pluginOnDisk(entry) ? {} : { broken: true }
+		});
+	}
+	return rows;
+}
+function pluginRoutes(options) {
+	return { [INSTALLED_PLUGINS_ROUTE]: async (search) => {
+		return {
+			ok: true,
+			plugins: await installedPlugins({
+				ledger: options.ledger,
+				...options.shell === void 0 ? {} : { shell: options.shell },
+				force: param(search, "force") === "1"
+			})
+		};
+	} };
+}
+//#endregion
 //#region src/modules/panels/model/tools.ts
-function render(entries, workspace) {
+var MACHINE_LABEL = "机器级默认板 —— 还没配过的工作区默认开这些：";
+var MACHINE_CAVEAT = "机器级默认板只是还没配过的工作区的默认值：已经自己配过的工作区保持自己的选择，不会被它改。";
+function listed(entries) {
+	return entries.map((entry, index) => `${index + 1}. ${entry.id} · ${entry.shown ? "已启用" : "未启用"}${entry.hasCard ? "" : "（无卡片）"}${entry.source === "user" ? " · 用户改过" : ""}`).join("\n");
+}
+function render(entries, workspace, scope) {
+	if (scope === "machine") {
+		if (entries.length === 0) return "机器级默认板是空的（还没配过的工作区默认什么卡片都不开）——用 show 放一个上去。";
+		return `${MACHINE_LABEL}\n${listed(entries)}`;
+	}
 	const where = workspace === null ? "（不知道当前会话在哪个工作区）" : workspace;
 	if (entries.length === 0) return `这个工作区的面板是空的（${where}）——用 show 放一个上去。`;
-	return `当前工作区：${where}\n${entries.map((entry, index) => `${index + 1}. ${entry.id} · ${entry.shown ? "已启用" : "未启用"}${entry.hasCard ? "" : "（无卡片）"}${entry.source === "user" ? " · 用户改过" : ""}`).join("\n")}`;
+	return `当前工作区：${where}\n${listed(entries)}`;
+}
+function parseScope(raw) {
+	if (raw === void 0) return DEFAULT_BOARD_TARGET;
+	if (typeof raw === "string" && BOARD_TARGETS.includes(raw)) return raw;
+	throw new Error(`不认识的 scope：${String(raw)}（可用：workspace / machine）`);
 }
 var OUTPUT_SCHEMA = {
 	type: "object",
@@ -3882,13 +4944,13 @@ function registerPanelTools(ctx, panels, values) {
 	}
 	const tool = {
 		name: "workbench_panels",
-		description: "看或调当前工作区的右侧面板：启用哪些套件、什么顺序。启用/收起 = 卡片与 agent 工具一起上下线（别的项目不受影响，不删数据）。",
+		description: "看或调右侧面板：启用哪些套件、什么顺序。启用/收起 = 卡片与 agent 工具一起上下线（别的项目不受影响，不删数据）。收起是\"这个工作区明确不要它\"，连那些在机器级默认板上开着的套件也照样在这个工作区收起来，之后 show 能放回来。默认只动当前工作区（scope=workspace）；scope=machine 动的是\"机器级默认板\" —— 机器级默认板只是还没配过的工作区的默认值，已经自己配过的工作区保持自己的选择，不会被它改。在那份板上 hide = 明确写下\"不要它\"，这一笔比名单更管用：名单里还列着它也算不要，没配过的工作区因此看不到它；show 会把这笔划掉、把它放回去。",
 		parameters: {
 			type: "object",
 			properties: {
 				action: {
 					type: "string",
-					description: "show/hide=启用或收起；move=调顺序；reset=清空这个工作区的面板。",
+					description: "show=这个工作区要它（之前收起的也放回来）；hide=这个工作区明确不要它（卡片与工具一起下线，默认在机器上也开着的套件同样收起，别的项目不受影响）；move=调顺序；reset=这个工作区不再有自己的选择（之前收起、启用的都忘掉；它从此明确\"什么都不要\"，机器级默认板也管不到它，要哪一块用 show 放回来）。",
 					enum: [
 						"list",
 						"show",
@@ -3904,6 +4966,11 @@ function registerPanelTools(ctx, panels, values) {
 				index: {
 					type: "integer",
 					description: "move 的位置，0 基（0=最上面）。"
+				},
+				scope: {
+					type: "string",
+					description: "workspace（默认）=只动当前工作区；machine=动机器级默认板，那是还没配过的工作区的默认值 —— 已经自己配过的工作区保持自己的选择，不受它影响。",
+					enum: ["workspace", "machine"]
 				}
 			},
 			required: ["action"],
@@ -3922,8 +4989,9 @@ function registerPanelTools(ctx, panels, values) {
 		async execute(args, exec) {
 			const action = args?.action ?? "list";
 			const id = args?.id;
+			const scope = parseScope(args?.scope);
 			const workspace = sessionWorkspace(exec);
-			const list = () => panels.list(workspace);
+			const list = () => panels.list(workspace, scope);
 			if (![
 				"list",
 				"show",
@@ -3933,39 +5001,41 @@ function registerPanelTools(ctx, panels, values) {
 			].includes(action)) throw new Error(`不认识的 action：${action}（可用：list / show / hide / move / reset）`);
 			if (action === "list") {
 				const units = list();
-				const entry = panelsHandoffEntry(workspace === null ? {} : { path: workspace });
-				if (entry !== void 0) values?.hand(entry, units);
+				if (scope === "workspace") {
+					const entry = panelsHandoffEntry(workspace === null ? {} : { path: workspace });
+					if (entry !== void 0) values?.hand(entry, units);
+				}
 				return {
 					units,
-					text: render(units, workspace)
+					text: render(units, workspace, scope)
 				};
 			}
 			if (action === "reset") {
-				const units = panels.resetWorkspace(workspace);
+				const units = panels.reset(workspace, scope);
 				return {
 					units,
-					text: `这个工作区的面板已清空。\n${render(units, workspace)}`
+					text: scope === "machine" ? `机器级默认板已清空（是"配成空"，不是"没配过"）——还没配过的工作区从此默认什么都不开。${MACHINE_CAVEAT}\n${render(units, workspace, scope)}` : `这个工作区不再有自己的面板选择（之前收起、启用的都忘掉了；它从此明确"什么都不要"—— 机器级默认板也管不到它，要哪一块用 show 放回来）。\n${render(units, workspace, scope)}`
 				};
 			}
 			if (id === void 0) throw new Error(`${action} 需要一个 id（例如 coding-issues）。当前套件：${list().map((entry) => entry.id).join(", ")}`);
 			if (action === "show") {
-				const units = panels.show(id, workspace);
+				const units = panels.show(id, workspace, scope);
 				return {
 					units,
-					text: `已启用 ${id} —— 卡片与工具一起上线了。\n${render(units, workspace)}`
+					text: scope === "machine" ? `已把 ${id} 放进机器级默认板 —— 还没配过的工作区会带上它（卡片与工具一起上线）；那份板上要是给它写过"不要"，这一下也划掉了。${MACHINE_CAVEAT}\n${render(units, workspace, scope)}` : `已启用 ${id} —— 这个工作区要它：之前收起的也放回来了，卡片与工具一起上线。\n${render(units, workspace, scope)}`
 				};
 			}
 			if (action === "hide") {
-				const units = panels.hide(id, workspace);
+				const units = panels.hide(id, workspace, scope);
 				return {
 					units,
-					text: `已收起 ${id}（卡片与工具一起下线，别的项目不受影响）。\n${render(units, workspace)}`
+					text: scope === "machine" ? `已把 ${id} 从机器级默认板划掉，并在那份板上明确写下"不要它" —— 还没配过的工作区从此看不到它（卡片与工具一起下线）；名单里还列着它也一样不算数，要放回来用 show。${MACHINE_CAVEAT}\n${render(units, workspace, scope)}` : `已收起 ${id} —— 这个工作区明确不要它：卡片与工具一起下线（默认在机器上也开着的套件同样收起），别的项目不受影响；要放回来用 show。\n${render(units, workspace, scope)}`
 				};
 			}
-			const units = panels.move(id, args?.index ?? 0, workspace);
+			const units = panels.move(id, args?.index ?? 0, workspace, scope);
 			return {
 				units,
-				text: `已把 ${id} 放到第 ${(args?.index ?? 0) + 1} 位。\n${render(units, workspace)}`
+				text: scope === "machine" ? `已把 ${id} 放到机器级默认板第 ${(args?.index ?? 0) + 1} 位 —— 只影响还没配过的工作区。${MACHINE_CAVEAT}\n${render(units, workspace, scope)}` : `已把 ${id} 放到第 ${(args?.index ?? 0) + 1} 位。\n${render(units, workspace, scope)}`
 			};
 		}
 	};
@@ -3973,26 +5043,44 @@ function registerPanelTools(ctx, panels, values) {
 }
 //#endregion
 //#region src/app/units/host.ts
-var HOST_UNITS = [{
+var OWNED = [{
+	unit: panelsUnit.id,
 	manifest: panelsUnit,
-	mount({ ctx, logger, manifests, opencliCommand, probe, store, values }) {
+	mount({ ctx, logger, manifests, ownedUnits, opencliCommand, probe, store, values }) {
 		const panels = createPanelsService({
 			manifests,
 			store,
+			owned: ownedUnits,
 			logger
 		});
 		ctx.provide(PANELS_SERVICE, panels);
 		const profileDir = profileDirOf(ctx);
+		const shell = ctx.get("shell");
+		const ledger = createPluginLedger({
+			store,
+			home: isolatedHome()
+		});
 		const market = createMarketService({
 			manifests: manifests(),
 			manifestsNow: manifests,
 			...probe === void 0 ? {} : { probe },
-			shell: ctx.get("shell"),
+			shell,
 			...opencliCommand === void 0 ? {} : { command: opencliCommand },
 			bundles: readBundleManager(ctx),
 			installed: (pkg) => readInstalledModule(profileDir, pkg),
 			modules: () => profileModules(profileDir),
 			registries: createRegistryNotebook(profileDir),
+			ledger,
+			references: () => {
+				const gaps = declarationGaps(profileDir);
+				return gaps === void 0 ? {
+					trustworthy: false,
+					unreadable: []
+				} : {
+					trustworthy: gaps.length === 0,
+					unreadable: gaps.map((gap) => gap.pkg)
+				};
+			},
 			onUninstalled: (unit) => {
 				panels.release(unit);
 			},
@@ -4003,7 +5091,13 @@ var HOST_UNITS = [{
 			logger
 		});
 		return {
-			routes: panelRoutes(panels, values),
+			routes: {
+				...panelRoutes(panels, values),
+				...pluginRoutes({
+					ledger,
+					...shell === void 0 ? {} : { shell }
+				})
+			},
 			registerTools: () => [
 				...registerPanelTools(ctx, panels, values),
 				...registerMarketTools(ctx, market),
@@ -4012,7 +5106,14 @@ var HOST_UNITS = [{
 			factsOf: (call) => panelsFactsOf(call, manifests()),
 			needsApproval: panelsApproval,
 			gate: {
-				deniedTools: (workspace) => [...manifests().filter((manifest) => manifest.card !== null).filter((manifest) => !panels.isEnabled(manifest.id, workspace)).flatMap((manifest) => manifest.tools.map((tool) => tool.name)), ...inWorkshopSession(ctx, workspace) ? [] : [DIY_TOOL]],
+				deniedTools: (workspace) => {
+					const boards = panels.boards(workspace);
+					const owned = new Set(ownedUnits());
+					return [...manifests().flatMap((manifest) => owned.has(manifest.id) || resolveScope({
+						id: manifest.id,
+						boards
+					}) ? [] : manifest.tools.map((tool) => tool.name)), ...inWorkshopSession(ctx, workspace) ? [] : [DIY_TOOL]];
+				},
 				subscribe: (listener) => panels.subscribe(listener)
 			},
 			prefs: {
@@ -4027,7 +5128,7 @@ var HOST_UNITS = [{
 	}
 }];
 function assembleHostUnits(registry) {
-	for (const face of HOST_UNITS) registry.register(face);
+	for (const face of OWNED) registry.registerOwned(face);
 }
 //#endregion
 //#region src/shared/api/host/runtime-seed.ts
@@ -4346,6 +5447,7 @@ function bundleRegistriesHandler(ctx) {
 		};
 	};
 }
+var refusalLog = /* @__PURE__ */ new Map();
 function moduleVersionsHandler(ctx, shell) {
 	return async (search) => {
 		const manager = readBundleManager(ctx);
@@ -4353,7 +5455,9 @@ function moduleVersionsHandler(ctx, shell) {
 			ok: true,
 			modules: []
 		};
-		const found = profileModules(profileDirOf(ctx));
+		const dir = profileDirOf(ctx);
+		const found = profileModules(dir);
+		const refusals = new Map((ctx.get("workbenchUnits")?.refusals() ?? []).filter((one) => one.unit !== "").map((one) => [one.unit, one.reasons]));
 		const force = param(search, "force") === "1";
 		const fallback = (await manager.registries())?.resolved ?? void 0;
 		return {
@@ -4366,17 +5470,66 @@ function moduleVersionsHandler(ctx, shell) {
 					registry,
 					force
 				});
+				const raw = moduleDeclarationOf(dir, module.pkg);
+				const declared = raw === void 0 ? [] : declarationProblemsOf(module.pkg, raw);
+				const refused = refusals.get(module.unit) ?? (declared.length === 0 ? void 0 : declared);
+				if (refused === void 0) refusalLog.delete(module.pkg);
+				else {
+					const line = refused.join("；");
+					if (refusalLog.get(module.pkg) !== line) {
+						refusalLog.set(module.pkg, line);
+						ctx.logger?.warn?.(`[dsh-workbench] ${module.pkg} 装上了但用不了：${line}`);
+					}
+				}
 				return {
 					unit: module.unit,
 					pkg: module.pkg,
 					installed: module.version,
 					...latest === void 0 ? {} : { latest },
-					...module.local === true ? { local: true } : {}
+					...module.local === true ? { local: true } : {},
+					...refused === void 0 ? {} : { refused }
 				};
 			}))
 		};
 	};
 }
+function refusedInspection(problems) {
+	if (problems.length === 0) return void 0;
+	return {
+		status: "refused",
+		problem: "not-a-workbench-module",
+		reason: problems.join("；")
+	};
+}
+async function declarationRefusal(spec, inspection, ctx, manager) {
+	if (inspection.status !== "accepted" || inspection.name === void 0) return void 0;
+	if (inspection.kind === "path") return refusedInspection(declarationRefusalOf(inspection.name, pathDeclarationOf(spec)));
+	if (inspection.kind !== "registry") return void 0;
+	const shell = ctx.get("shell");
+	if (shell === void 0) return void 0;
+	const registry = typeof inspection.registry === "string" ? inspection.registry : (await manager.registries())?.resolved ?? void 0;
+	if (registry === void 0) return void 0;
+	const raw = await registryDeclarationOf({
+		shell,
+		name: inspection.name,
+		registry
+	});
+	return refusedInspection(declarationRefusalOf(inspection.name, raw));
+}
+async function packageRefusal(spec, inspection, ctx, manager) {
+	if (inspection.status !== "accepted") return void 0;
+	const shell = ctx.get("shell");
+	const registry = typeof inspection.registry === "string" ? inspection.registry : (await manager.registries())?.resolved ?? void 0;
+	return (await packageRouteOf({
+		spec,
+		...shell === void 0 ? {} : { shell },
+		...registry === void 0 ? {} : { registry }
+	}))?.kind === "neither" ? {
+		status: "refused",
+		problem: "not-a-module-or-plugin",
+		reason: refusalReason()
+	} : void 0;
+}
 function bundleInspectHandler(ctx) {
 	return async (search) => {
 		const spec = param(search, "spec");
@@ -4405,7 +5558,7 @@ function bundleInspectHandler(ctx) {
 		};
 		return {
 			ok: true,
-			inspection
+			inspection: await packageRefusal(spec, inspection, ctx, manager) ?? await declarationRefusal(spec, inspection, ctx, manager) ?? inspection
 		};
 	};
 }
@@ -4416,6 +5569,9 @@ var WORKSHOP_TITLE = "工作台DIY";
 //#region src/shared/api/dsh-plugins.ts
 var DSH_PLUGINS_ROUTE = "dsh-plugins";
 //#endregion
+//#region src/shared/api/unit-manifests.ts
+var UNIT_MANIFESTS_ROUTE = "unit-manifests";
+//#endregion
 //#region src/shared/api/host/context-inject.ts
 var CONTEXT_SOURCE_KIND = "workbench";
 function collectContextRefs(messages) {
@@ -5114,7 +6270,7 @@ function failureReasonOf(error) {
 function fail(ledger, item, reason) {
 	ledger.failed.add(item);
 	ledger.failures.push({
-		id: item.face.manifest.id,
+		id: item.host.manifest.id,
 		reason
 	});
 }
@@ -5124,7 +6280,7 @@ function collectRoutes(mounted, ledger) {
 	const routesOfUnit = /* @__PURE__ */ new Map();
 	for (const item of mounted) {
 		if (ledger.failed.has(item)) continue;
-		const unit = item.face.manifest.id;
+		const unit = item.host.manifest.id;
 		const accepted = [];
 		let problem;
 		for (const [key, handler] of Object.entries(item.result.routes)) {
@@ -5162,7 +6318,7 @@ function collectNamed(mounted, ledger, pickMany, label) {
 	const out = [];
 	for (const item of mounted) {
 		if (ledger.failed.has(item)) continue;
-		const unit = item.face.manifest.id;
+		const unit = item.host.manifest.id;
 		const entries = pickMany(item);
 		if (entries.length === 0) continue;
 		const clash = entries.find((entry) => owner.has(entry.resource));
@@ -5185,7 +6341,7 @@ function collectContextRenderers(mounted, ledger) {
 	const owner = /* @__PURE__ */ new Map();
 	for (const item of mounted) {
 		if (ledger.failed.has(item)) continue;
-		const unit = item.face.manifest.id;
+		const unit = item.host.manifest.id;
 		const context = item.result.context;
 		if (context === void 0) continue;
 		const clash = context.kinds.find((kind) => owner.has(kind));
@@ -5209,10 +6365,10 @@ function pickProvider(mounted, ledger, pick, label) {
 		if (value === void 0) continue;
 		if (chosen === void 0) {
 			chosen = value;
-			chosenBy = item.face.manifest.id;
+			chosenBy = item.host.manifest.id;
 			continue;
 		}
-		fail(ledger, item, `${label}只能有一个提供者，现在是：${chosenBy}、${item.face.manifest.id}`);
+		fail(ledger, item, `${label}只能有一个提供者，现在是：${chosenBy}、${item.host.manifest.id}`);
 	}
 	return chosen;
 }
@@ -5230,8 +6386,9 @@ function collectWarmReads(mounted) {
 		return reads;
 	};
 }
-function mountUnits(faces, deps) {
+function mountUnits(units, deps) {
 	const store = deps.store ?? createWorkspaceStore({ root: null });
+	const ownedUnits = deps.ownedUnits ?? (() => []);
 	const mounted = [];
 	const skipped = [];
 	const longTaskDisposers = /* @__PURE__ */ new Map();
@@ -5239,16 +6396,16 @@ function mountUnits(faces, deps) {
 		failed: /* @__PURE__ */ new Set(),
 		failures: []
 	};
-	for (const face of faces) {
-		const readiness = unitReadiness(face.manifest, (dep) => deps.ctx.get(dep));
+	for (const host of units) {
+		const readiness = unitReadiness(host.manifest, (dep) => deps.ctx.get(dep));
 		if (!readiness.canMount) {
 			skipped.push({
-				id: face.manifest.id,
+				id: host.manifest.id,
 				missing: readiness.missingHard
 			});
 			continue;
 		}
-		const unit = face.manifest.id;
+		const unit = host.manifest.id;
 		const longTasks = deps.longTasks === void 0 ? void 0 : createLongTaskHost({
 			scope: deps.longTasks.scope,
 			unit,
@@ -5256,10 +6413,12 @@ function mountUnits(faces, deps) {
 		});
 		let result;
 		try {
-			result = face.mount({
+			result = host.face.mount({
+				manifest: host.manifest,
 				ctx: deps.ctx,
 				logger: deps.logger,
 				manifests: deps.manifests,
+				ownedUnits,
 				...deps.opencliCommand === void 0 ? {} : { opencliCommand: deps.opencliCommand },
 				...deps.probe === void 0 ? {} : { probe: deps.probe },
 				...deps.values === void 0 ? {} : { values: deps.values },
@@ -5275,7 +6434,7 @@ function mountUnits(faces, deps) {
 			continue;
 		}
 		const item = {
-			face,
+			host,
 			readiness,
 			result: withRunsRoute(result, unit)
 		};
@@ -5291,7 +6450,7 @@ function mountUnits(faces, deps) {
 	for (const item of mounted) {
 		if (ledger.failed.has(item)) continue;
 		const declare = item.result.factsOf;
-		if (declare !== void 0) factsOf.set(item.face.manifest.id, declare);
+		if (declare !== void 0) factsOf.set(item.host.manifest.id, declare);
 	}
 	const gate = pickProvider(mounted, ledger, (item) => item.result.gate, "启停闸门");
 	const provision = pickProvider(mounted, ledger, (item) => item.result.provision, "机器供给");
@@ -5324,30 +6483,71 @@ function mountUnits(faces, deps) {
 }
 //#endregion
 //#region src/shared/api/host/unit-registry.ts
-function createUnitRegistry() {
-	const faces = [];
-	const ids = /* @__PURE__ */ new Set();
+function sourceLabel(source) {
+	return source.kind === "owned" ? "外壳自己" : source.pkg;
+}
+function createUnitRegistry(options) {
+	const refusals = [];
+	const hosts = [];
+	const byUnit = /* @__PURE__ */ new Map();
 	const listeners = /* @__PURE__ */ new Set();
 	function notify() {
 		for (const listener of listeners) listener();
 	}
+	function add(host) {
+		const taken = byUnit.get(host.unit);
+		if (taken !== void 0) throw new Error(`套件 id 重复：${host.unit}（id 会进持久化配置，不能撞）—— 已被 ${sourceLabel(taken.source)} 占着`);
+		byUnit.set(host.unit, host);
+		hosts.push(host);
+		notify();
+		return () => {
+			if (byUnit.get(host.unit) !== host) return;
+			byUnit.delete(host.unit);
+			const index = hosts.indexOf(host);
+			if (index >= 0) hosts.splice(index, 1);
+			notify();
+		};
+	}
 	return {
 		register(face) {
-			const id = face.manifest.id;
-			if (ids.has(id)) throw new Error(`套件 id 重复：${id}（id 会进持久化配置，不能撞）`);
-			ids.add(id);
-			faces.push(face);
-			notify();
-			return () => {
-				const index = faces.indexOf(face);
-				if (index < 0) return;
-				faces.splice(index, 1);
-				ids.delete(id);
+			const unit = typeof face?.unit === "string" ? face.unit.trim() : "";
+			const refuse = (pkg, reasons) => {
+				refusals.push({
+					unit,
+					...pkg === void 0 ? {} : { pkg },
+					reasons
+				});
+				options.logger?.warn?.(`[dsh-workbench] ${pkg ?? "这个模块"}没挂上（unit ${unit === "" ? "没写" : unit}）：${reasons.join("；")}`);
 				notify();
+				return () => {};
 			};
+			if (unit === "") return refuse(void 0, ["register({ unit, mount }) 里的 unit 是空的 —— U1b 之前的旧形状是 register({ manifest, mount })；现在清单由外壳从**已装包**的 dsh.workbench 读出来，模块里的 id 从 deps.manifest.id 拿（ADR-0038 §2.2）"]);
+			const source = options.declarationOf(unit);
+			if (source === void 0) return refuse(void 0, [`没有哪个已装模块声明了 unit「${unit}」—— 查过这份 profile 的已装清单。要么 package.json 里 dsh.workbench.unit 写错了（改完要重启工作台），要么这个包根本没被装进这份 profile`]);
+			const read = readDeclaration(source.pkg, source.declaration);
+			if (read.manifest === void 0) return refuse(source.pkg, read.problems);
+			return add({
+				unit,
+				manifest: read.manifest,
+				face,
+				source: {
+					kind: "package",
+					pkg: source.pkg
+				}
+			});
 		},
-		all: () => faces,
-		manifests: () => faces.map((face) => face.manifest),
+		registerOwned(face) {
+			return add({
+				unit: face.manifest.id,
+				manifest: face.manifest,
+				face,
+				source: { kind: "owned" }
+			});
+		},
+		all: () => hosts,
+		owned: () => hosts.filter((host) => host.source.kind === "owned").map((host) => host.unit),
+		refusals: () => refusals,
+		manifests: () => hosts.map((host) => host.manifest),
 		subscribe(listener) {
 			listeners.add(listener);
 			return () => listeners.delete(listener);
@@ -5355,6 +6555,20 @@ function createUnitRegistry() {
 	};
 }
 //#endregion
+//#region src/shared/api/host/unit-roster-facts.ts
+function rosterKeyOf(units) {
+	return units.all().map((host) => host.unit).join("\0");
+}
+function bindRosterFacts(options) {
+	let seen = rosterKeyOf(options.units);
+	return options.units.subscribe(() => {
+		const now = rosterKeyOf(options.units);
+		if (now === seen) return;
+		seen = now;
+		options.bump([UNIT_MANIFESTS_ROUTE]);
+	});
+}
+//#endregion
 //#region src/shared/api/host/tool-scope.ts
 function agentOf(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
@@ -5482,8 +6696,24 @@ function apply(ctx) {
 	};
 	const renderers = /* @__PURE__ */ new Map();
 	const shell = ctx.get("shell");
-	const units = createUnitRegistry();
+	let roster;
+	const profileDir = profileDirOf(ctx);
+	const units = createUnitRegistry({
+		declarationOf: (unit) => {
+			if (roster === void 0) roster = new Map(profileModules(profileDir).map((row) => [row.unit, row.pkg]));
+			const pkg = roster.get(unit);
+			return pkg === void 0 ? void 0 : {
+				pkg,
+				declaration: moduleDeclarationOf(profileDir, pkg)
+			};
+		},
+		logger: ctx.logger
+	});
 	ctx.provide(UNITS_SERVICE, units);
+	routes[UNIT_MANIFESTS_ROUTE] = () => ({
+		ok: true,
+		manifests: units.manifests()
+	});
 	assembleHostUnits(units);
 	ctx.inject(["workspaceRegistry"], (scoped) => {
 		const registry = scoped.get("workspaceRegistry");
@@ -5548,14 +6778,15 @@ function apply(ctx) {
 		for (const unit of item.plan.routesOfUnit.keys()) routesOfUnitMap.delete(unit);
 		for (const resource of item.plan.owners.keys()) ownersMap.delete(resource);
 	}
-	function mountUnit(face) {
-		const id = face.manifest.id;
+	function mountUnit(host) {
+		const id = host.unit;
 		let one;
 		try {
-			one = mountUnits([face], {
+			one = mountUnits([host], {
 				ctx,
 				logger: ctx.logger,
 				manifests: liveManifests,
+				ownedUnits: () => units.owned(),
 				store,
 				opencliCommand: opencli.command,
 				probe: (unit, options) => probeOne(unit, options?.force ?? false),
@@ -5568,7 +6799,7 @@ function apply(ctx) {
 		} catch (error) {
 			mountFailures.set(id, {
 				reason: failureReasonOf(error),
-				face
+				host
 			});
 			ctx.logger?.warn?.(`[dsh-workbench] ${id} 套件起不来（装配期）：${failureReasonOf(error)}`);
 			return;
@@ -5577,7 +6808,7 @@ function apply(ctx) {
 		for (const failure of one.failed) {
 			mountFailures.set(failure.id, {
 				reason: failure.reason,
-				face
+				host
 			});
 			ctx.logger?.warn?.(`[dsh-workbench] ${failure.id} 套件起不来，已摘掉它这一份：${failure.reason}`);
 		}
@@ -5586,7 +6817,7 @@ function apply(ctx) {
 			one.disposeLongTasks();
 			return;
 		}
-		if (slot.readiness.missingSoft.length > 0) ctx.logger?.warn?.(`[dsh-workbench] ${face.manifest.id} 套件降级：缺 ${slot.readiness.missingSoft.join(", ")}`);
+		if (slot.readiness.missingSoft.length > 0) ctx.logger?.warn?.(`[dsh-workbench] ${host.unit} 套件降级：缺 ${slot.readiness.missingSoft.join(", ")}`);
 		const added = [];
 		try {
 			Object.assign(routes, one.routes);
@@ -5595,7 +6826,7 @@ function apply(ctx) {
 			for (const [unit, fn] of one.factsOf) factsOfMap.set(unit, fn);
 			for (const [unit, list] of one.routesOfUnit) routesOfUnitMap.set(unit, list);
 			for (const [resource, unit] of one.owners) ownersMap.set(resource, unit);
-			mounted.set(face.manifest.id, {
+			mounted.set(host.unit, {
 				result: slot.result,
 				plan: one,
 				toolDisposers: slot.result.registerTools(),
@@ -5611,7 +6842,7 @@ function apply(ctx) {
 			one.disposeLongTasks();
 			mountFailures.set(id, {
 				reason: failureReasonOf(error),
-				face
+				host
 			});
 			ctx.logger?.warn?.(`[dsh-workbench] ${id} 套件起不来（注册期）：${failureReasonOf(error)}`);
 		}
@@ -5635,14 +6866,14 @@ function apply(ctx) {
 		if (provision !== void 0) undoPost.push(registerProvision(ctx, provision, facts));
 	}
 	function sync() {
-		const present = new Set(units.all().map((face) => face.manifest.id));
+		const present = new Set(units.all().map((one) => one.unit));
 		for (const id of [...mounted.keys()]) if (!present.has(id)) unmountUnit(id);
 		for (const id of [...mountFailures.keys()]) if (!present.has(id)) mountFailures.delete(id);
-		for (const face of units.all()) {
-			if (mounted.has(face.manifest.id)) continue;
-			const already = mountFailures.get(face.manifest.id);
-			if (already !== void 0 && already.face === face) continue;
-			mountUnit(face);
+		for (const host of units.all()) {
+			if (mounted.has(host.unit)) continue;
+			const already = mountFailures.get(host.unit);
+			if (already !== void 0 && already.host === host) continue;
+			mountUnit(host);
 		}
 		rebindPost();
 	}
@@ -5682,6 +6913,10 @@ function apply(ctx) {
 		for (const dispose of undoPost) dispose?.();
 	}, `${PLUGIN_ID}: 卸载时把单元摘干净`);
 	ctx.effect(() => units.subscribe(sync), `${PLUGIN_ID}: 注册表变了就增删（装/卸一个模块 = 挂/卸它的面）`);
+	ctx.effect(() => bindRosterFacts({
+		units,
+		bump: (names) => facts.bump(names)
+	}), `${PLUGIN_ID}: 花名册变了就把清单那条事实记一笔（浏览器据此重读，不用刷新页面）`);
 	ctx.effect(() => {
 		const off = ctx.on?.("tools/post-execute", (exec, result, next) => {
 			const name = exec?.name === void 0 ? void 0 : String(exec.name);