@dsh-workbench/core 0.2.0 → 0.2.2

package/dist/host/index.js

@@ -6,14 +6,17 @@ import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 //#region ../shared/dist/config/constants.js
 var PLUGIN_ID = "@dsh-workbench/core";
+var RELEASE_SIBLINGS = ["@dsh-workbench/shared", "@dsh-workbench/module-tools"];
 var API_PREFIX = "/workbench/api";
 var PREFS_PREFIX = `${API_PREFIX}/prefs`;
 var EVENTS_PATH = "/workbench/events";
 var ACTIONS_PREFIX = `${API_PREFIX}/actions`;
 var PROVISION_PREFIX = `${API_PREFIX}/provision`;
+var PANEL_STATE_PREFIX = `${API_PREFIX}/panel-state`;
 var OPENCLI_PIN = "1.8.8";
 var PANELS_SERVICE = "workbenchPanels";
 var UNITS_SERVICE = "workbenchUnits";
+var PANEL_STATE_SERVICE = "workbenchPanelState";
 var OPENCLI_TIMEOUT_MS = 12e4;
 var WARM_TIMEOUT_MS = 2e4;
 var INSTALL_TIMEOUT_MS = 3e5;
@@ -50,6 +53,11 @@ function parseMarkers(text) {
 	}
 	return refs;
 }
+//#endregion
+//#region ../shared/dist/api/unit.js
+function hasEnvSupply(manifest) {
+	return (manifest.env?.plugins ?? []).length > 0 || (manifest.env?.libs ?? []).length > 0;
+}
 var SUPPORTED_API_VERSIONS = [1];
 var DECLARATION_KEYS = [
 	"apiVersion",
@@ -212,6 +220,202 @@ function parseJsonLoose(text) {
 		}
 	}
 }
+var PANEL_STATE_MAX_TEXT = 2e3;
+var PHASES = [
+	"idle",
+	"loading",
+	"ready",
+	"error"
+];
+function asRecord$10(value) {
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+function textOf$6(value, max) {
+	if (typeof value !== "string") return "";
+	const trimmed = value.trim();
+	return trimmed.length > max ? trimmed.slice(0, max) : trimmed;
+}
+function atOf(value) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return null;
+	if (value < 0) return null;
+	return Math.trunc(value);
+}
+function errorOf(raw) {
+	const record = asRecord$10(raw);
+	if (record === void 0) return void 0;
+	const code = textOf$6(record["code"], 120);
+	const message = textOf$6(record["message"], PANEL_STATE_MAX_TEXT);
+	if (code === "" && message === "") return void 0;
+	return {
+		code: code === "" ? "unknown" : code,
+		message
+	};
+}
+function parseCardsReport(payload) {
+	const record = asRecord$10(payload);
+	if (record === void 0) return {
+		ok: false,
+		message: "请求体要是一个对象"
+	};
+	const workspace = textOf$6(record["workspace"], PANEL_STATE_MAX_TEXT);
+	if (workspace === "") return {
+		ok: false,
+		message: "workspace 不能是空的 —— 面板按工作区存"
+	};
+	const raw = record["cards"];
+	if (!Array.isArray(raw)) return {
+		ok: false,
+		message: "cards 要是一个数组"
+	};
+	const cards = [];
+	for (const item of raw.slice(0, 32)) {
+		const card = asRecord$10(item);
+		if (card === void 0) continue;
+		const unit = textOf$6(card["unit"], 200);
+		const route = textOf$6(card["route"], 400);
+		const phase = textOf$6(card["phase"], 20);
+		const at = atOf(card["at"]);
+		if (unit === "" || route === "" || at === null || !PHASES.includes(phase)) continue;
+		const error = errorOf(card["error"]);
+		cards.push({
+			unit,
+			route,
+			phase,
+			at,
+			...error === void 0 ? {} : { error }
+		});
+	}
+	if (cards.length === 0) return {
+		ok: false,
+		message: "cards 里没有一条能认的（unit / route / phase / at 都要有）"
+	};
+	return {
+		ok: true,
+		value: {
+			workspace,
+			cards
+		}
+	};
+}
+function parseCrashReport(payload) {
+	const record = asRecord$10(payload);
+	if (record === void 0) return {
+		ok: false,
+		message: "请求体要是一个对象"
+	};
+	const workspace = textOf$6(record["workspace"], PANEL_STATE_MAX_TEXT);
+	const unit = textOf$6(record["unit"], 200);
+	const reason = textOf$6(record["reason"], PANEL_STATE_MAX_TEXT);
+	if (workspace === "") return {
+		ok: false,
+		message: "workspace 不能是空的"
+	};
+	if (unit === "") return {
+		ok: false,
+		message: "unit 不能是空的"
+	};
+	if (reason === "") return {
+		ok: false,
+		message: "reason 不能是空的（没有原因的崩溃没法查）"
+	};
+	return {
+		ok: true,
+		value: {
+			workspace,
+			unit,
+			reason,
+			at: atOf(record["at"]) ?? Date.now()
+		}
+	};
+}
+function createPanelStateStore() {
+	const workspaces = /* @__PURE__ */ new Map();
+	function trim(entry, max) {
+		while (entry.size > max) {
+			const oldest = entry.keys().next();
+			if (oldest.done === true) return;
+			entry.delete(oldest.value);
+		}
+	}
+	function workspaceEntryOf(workspace) {
+		const existing = workspaces.get(workspace);
+		if (existing !== void 0) return existing;
+		const created = {
+			at: 0,
+			units: /* @__PURE__ */ new Map()
+		};
+		workspaces.set(workspace, created);
+		trim(workspaces, 64);
+		return created;
+	}
+	function unitEntryOf(entry, unit) {
+		const existing = entry.units.get(unit);
+		if (existing !== void 0) return existing;
+		const created = {
+			at: 0,
+			cards: /* @__PURE__ */ new Map()
+		};
+		entry.units.set(unit, created);
+		return created;
+	}
+	return {
+		cards(report) {
+			const entry = workspaceEntryOf(report.workspace);
+			for (const card of report.cards) {
+				const unit = unitEntryOf(entry, card.unit);
+				unit.cards.delete(card.route);
+				unit.cards.set(card.route, card);
+				trim(unit.cards, 12);
+				if (card.at > unit.at) unit.at = card.at;
+				if (card.at > entry.at) entry.at = card.at;
+			}
+		},
+		crash(report) {
+			const entry = workspaceEntryOf(report.workspace);
+			const unit = unitEntryOf(entry, report.unit);
+			const previous = unit.crash;
+			const counted = previous !== void 0 && previous.reason === report.reason && report.at >= previous.at && report.at - previous.at <= 6e5;
+			unit.crash = {
+				unit: report.unit,
+				reason: report.reason,
+				at: report.at,
+				count: counted ? previous.count + 1 : 1
+			};
+			if (report.at > unit.at) unit.at = report.at;
+			if (report.at > entry.at) entry.at = report.at;
+		},
+		snapshot(workspace) {
+			if (workspace === null) return {
+				workspace: null,
+				at: 0,
+				units: []
+			};
+			const entry = workspaces.get(workspace);
+			if (entry === void 0) return {
+				workspace,
+				at: 0,
+				units: []
+			};
+			const units = [...entry.units.entries()].map(([unit, one]) => {
+				const cards = [...one.cards.values()].sort((a, b) => a.route.localeCompare(b.route));
+				const okAt = cards.reduce((best, card) => card.phase === "ready" && (best === null || card.at > best) ? card.at : best, null);
+				return {
+					unit,
+					at: one.at,
+					okAt,
+					cards,
+					...one.crash === void 0 ? {} : { crash: one.crash }
+				};
+			});
+			units.sort((a, b) => b.at - a.at || a.unit.localeCompare(b.unit));
+			return {
+				workspace,
+				at: entry.at,
+				units
+			};
+		}
+	};
+}
 //#endregion
 //#region ../shared/dist/host/cli-error.js
 function unquote(raw) {
@@ -1403,6 +1607,42 @@ function registerActions(ctx, resources, wrote) {
 		...wrote === void 0 ? {} : { wrote }
 	});
 }
+function registerPanelState(ctx, store) {
+	return registerPost(ctx, {
+		prefix: PANEL_STATE_PREFIX,
+		what: "面板运行态",
+		refusedCode: "report-refused",
+		resources: [{
+			resource: "cards",
+			handle(payload) {
+				const parsed = parseCardsReport(payload);
+				if (!parsed.ok) return {
+					ok: false,
+					text: parsed.message
+				};
+				store.cards(parsed.value);
+				return {
+					ok: true,
+					at: Date.now()
+				};
+			}
+		}, {
+			resource: "crash",
+			handle(payload) {
+				const parsed = parseCrashReport(payload);
+				if (!parsed.ok) return {
+					ok: false,
+					text: parsed.message
+				};
+				store.crash(parsed.value);
+				return {
+					ok: true,
+					at: Date.now()
+				};
+			}
+		}]
+	});
+}
 //#endregion
 //#region ../shared/dist/host/long-task.js
 var LIVE = /* @__PURE__ */ new Set(["running", "needs-login"]);
@@ -1796,15 +2036,48 @@ function resolvePluginSource(source, env, options = {}) {
 }
 //#endregion
 //#region ../shared/dist/host/tool-approval.js
+var APPROVAL_NOTE_ARG = "approval_note";
+var NOTE_SCHEMA = {
+	type: "string",
+	description: "一句话说明你这次想拿它干什么（要点头的那几通会显示在审批屏上）。"
+};
+function withApprovalNote(parameters, options = {}) {
+	const properties = parameters["properties"];
+	if (typeof properties !== "object" || properties === null) return parameters;
+	const map = properties;
+	if ("approval_note" in map) return parameters;
+	const kept = (Array.isArray(parameters["required"]) ? parameters["required"] : []).filter((name) => name !== APPROVAL_NOTE_ARG);
+	const required = options.required === true ? [...kept, APPROVAL_NOTE_ARG] : kept;
+	return {
+		...parameters,
+		properties: {
+			...map,
+			[APPROVAL_NOTE_ARG]: NOTE_SCHEMA
+		},
+		...required.length === 0 ? {} : { required }
+	};
+}
+function approvalNoteOf(call) {
+	const raw = call.arguments;
+	const value = typeof raw === "object" && raw !== null ? raw[APPROVAL_NOTE_ARG] : void 0;
+	if (typeof value !== "string") return void 0;
+	const line = value.replace(/\s+/g, " ").trim();
+	if (line === "") return void 0;
+	return line.length > 160 ? `${line.slice(0, 160)}…` : line;
+}
 function messageOf$1(error) {
 	return error instanceof Error ? error.message : String(error);
 }
-function compose(detail, verdict) {
-	if (detail === void 0 || typeof detail.zh !== "string" || detail.zh.trim() === "") return verdict.fallback;
-	return {
+function compose(detail, verdict, note) {
+	const base = detail === void 0 || typeof detail.zh !== "string" || detail.zh.trim() === "" ? verdict.fallback : {
 		en: `${detail.en} — ${verdict.question.en}`,
 		zh: `${detail.zh} —— ${verdict.question.zh}`
 	};
+	if (note === void 0) return base;
+	return {
+		en: `${base.en} — ${note}`,
+		zh: `${base.zh} —— ${note}`
+	};
 }
 async function approvalFor(call, context = {}) {
 	if (context.writes !== true) return void 0;
@@ -1838,7 +2111,7 @@ async function approvalFor(call, context = {}) {
 	return {
 		kind: "ask",
 		reason: verdict.reason,
-		displayReason: compose(facts, verdict)
+		displayReason: compose(facts, verdict, approvalNoteOf(call))
 	};
 }
 //#endregion
@@ -2207,6 +2480,22 @@ function profileModules(profileDir) {
 	}
 	return found;
 }
+function createDeclarationLookup(profileDir) {
+	let roster;
+	const scan = () => new Map(profileModules(profileDir).map((row) => [row.unit, row.pkg]));
+	return (unit) => {
+		roster ??= scan();
+		let pkg = roster.get(unit);
+		if (pkg === void 0) {
+			roster = scan();
+			pkg = roster.get(unit);
+		}
+		return pkg === void 0 ? void 0 : {
+			pkg,
+			declaration: moduleDeclarationOf(profileDir, pkg)
+		};
+	};
+}
 function registryFromLockfile(profileDir, pkg) {
 	let text;
 	try {
@@ -2667,40 +2956,58 @@ function strings(raw) {
 function parseBoard(raw) {
 	if (typeof raw !== "object" || raw === null) return EMPTY_BOARD;
 	const value = raw;
+	const order = strings(value.order);
 	return {
 		shown: strings(value.shown),
-		hidden: strings(value.hidden)
+		hidden: strings(value.hidden),
+		...order.length === 0 ? {} : { order }
 	};
 }
 function parseReleased(raw) {
 	if (typeof raw !== "object" || raw === null) return [];
 	return strings(raw.ids);
 }
-function resolvePanels(manifests, boards) {
-	const ordered = [.../* @__PURE__ */ new Set([...boards.workspace?.shown ?? [], ...boards.machine?.shown ?? []])];
-	const rank = new Map(ordered.map((id, index) => [id, index]));
-	return manifests.filter((manifest) => manifest.card !== null).map((manifest) => {
+function resolvePanels(manifests, boards, owned = /* @__PURE__ */ new Set()) {
+	const listed = manifests.filter((manifest) => manifest.card !== null || !owned.has(manifest.id));
+	const carded = listed.filter((manifest) => manifest.card !== null);
+	const declared = (manifest) => manifest.card?.order ?? 0;
+	const byDeclared = (a, b) => declared(a) - declared(b) || a.id.localeCompare(b.id);
+	const queued = [...new Set(boards.workspace?.order ?? [])].map((id) => carded.find((manifest) => manifest.id === id)).filter((manifest) => manifest !== void 0).filter((manifest) => resolveScope({
+		id: manifest.id,
+		boards
+	}));
+	const placed = new Set(queued.map((manifest) => manifest.id));
+	const ordered = [...queued, ...carded.filter((manifest) => !placed.has(manifest.id) && resolveScope({
+		id: manifest.id,
+		boards
+	})).sort(byDeclared)];
+	const rank = new Map(ordered.map((manifest, index) => [manifest.id, index]));
+	return listed.map((manifest) => {
+		const hasCard = manifest.card !== null;
 		const on = resolveScope({
 			id: manifest.id,
 			boards
 		});
-		const order = rank.get(manifest.id) ?? ordered.length + (manifest.card?.order ?? 0);
+		const order = hasCard ? rank.get(manifest.id) ?? ordered.length + declared(manifest) : 0;
 		return {
 			id: manifest.id,
 			titleKey: manifest.card?.titleKey ?? manifest.id,
 			order,
 			shown: on,
 			source: overrideOf(boards.workspace, manifest.id) === void 0 ? "default" : "user",
-			hasCard: true
+			hasCard
 		};
-	}).sort((a, b) => a.order - b.order || a.id.localeCompare(b.id));
+	}).sort((a, b) => {
+		if (a.hasCard !== b.hasCard) return a.hasCard ? -1 : 1;
+		return a.order - b.order || a.id.localeCompare(b.id);
+	});
 }
 var PLUGIN_PANEL_PREFIX = "plugin:";
 function pluginPanelId(pkg) {
 	return `${PLUGIN_PANEL_PREFIX}${pkg}`;
 }
 function resolvePluginPanels(plugins, boards) {
-	const ordered = [.../* @__PURE__ */ new Set([...boards.workspace?.shown ?? [], ...boards.machine?.shown ?? []])];
+	const ordered = [...new Set(boards.workspace?.order ?? [])];
 	const rank = new Map(ordered.map((id, index) => [id, index]));
 	const seen = /* @__PURE__ */ new Set();
 	return plugins.map((plugin) => {
@@ -2735,16 +3042,22 @@ function added(list, id) {
 function dropped(list, id) {
 	return list.filter((item) => item !== id);
 }
-function withShown(board, id) {
-	return {
+function withShown(board, id, visible) {
+	const next = {
 		shown: added(board.shown, id),
 		hidden: dropped(board.hidden, id)
 	};
+	return visible === void 0 ? next : {
+		...next,
+		order: added(board.order ?? visible, id)
+	};
 }
 function withHidden(board, id) {
+	const order = dropped(board.order ?? [], id);
 	return {
 		shown: dropped(board.shown, id),
-		hidden: added(board.hidden, id)
+		hidden: added(board.hidden, id),
+		...order.length === 0 ? {} : { order }
 	};
 }
 function withoutPanel(board, id) {
@@ -2753,71 +3066,15 @@ function withoutPanel(board, id) {
 		hidden: dropped(board.hidden, id)
 	};
 }
-function withMoved(board, id, index) {
-	const current = [...board.shown];
+function withMoved(board, id, index, visible) {
+	const current = visible.includes(id) ? [...visible] : [...visible, id];
 	const from = current.indexOf(id);
-	const max = from === -1 ? current.length : current.length - 1;
-	const to = Math.max(0, Math.min(max, Math.trunc(index)));
-	if (from === -1) current.splice(to, 0, id);
-	else if (from !== to) current.splice(to, 0, ...current.splice(from, 1));
-	return {
-		shown: current,
-		hidden: dropped(board.hidden, id)
-	};
-}
-//#endregion
-//#region src/shared/api/host/diy-facts.ts
-function asExported(dir) {
-	try {
-		const manifest = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
-		return (typeof manifest.exports === "object" && manifest.exports !== null ? Object.values(manifest.exports) : []).filter((one) => typeof one === "string");
-	} catch {
-		return [];
-	}
-}
-function mtimeOf(file) {
-	try {
-		return statSync(file).mtimeMs;
-	} catch {
-		return;
-	}
-}
-function newestMtime(dir) {
-	let newest;
-	const walk = (at) => {
-		let entries;
-		try {
-			entries = readdirSync(at, { withFileTypes: true });
-		} catch {
-			return;
-		}
-		for (const entry of entries) {
-			const full = join(at, entry.name);
-			if (entry.isDirectory()) walk(full);
-			else if (entry.isFile()) {
-				const stamp = mtimeOf(full);
-				if (stamp !== void 0 && (newest === void 0 || stamp > newest)) newest = stamp;
-			}
-		}
-	};
-	walk(dir);
-	return newest;
-}
-function moduleBuildFacts(dir) {
-	const artifacts = asExported(dir).map((rel) => ({
-		path: rel,
-		mtime: mtimeOf(join(dir, rel))
-	}));
-	const present = artifacts.filter((one) => one.mtime !== void 0);
-	const oldestBuilt = present.reduce((min, one) => min === void 0 || one.mtime < min ? one.mtime : min, void 0);
-	const newestSource = newestMtime(join(dir, "src"));
+	const to = Math.max(0, Math.min(current.length - 1, Math.trunc(index)));
+	if (from !== to) current.splice(to, 0, ...current.splice(from, 1));
 	return {
-		artifacts: artifacts.map((one) => ({
-			path: one.path,
-			at: one.mtime === void 0 ? null : new Date(one.mtime).toISOString()
-		})),
-		builtAll: present.length === artifacts.length && artifacts.length > 0,
-		stale: newestSource !== void 0 && oldestBuilt !== void 0 && newestSource > oldestBuilt
+		shown: added(board.shown, id),
+		hidden: dropped(board.hidden, id),
+		order: current
 	};
 }
 //#endregion
@@ -3040,10 +3297,169 @@ function installedPluginsOf(dir = vendorPluginsDir()) {
 	}));
 }
 //#endregion
+//#region src/shared/api/host/diy-facts.ts
+function asExported(dir) {
+	try {
+		const manifest = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+		return (typeof manifest.exports === "object" && manifest.exports !== null ? Object.values(manifest.exports) : []).filter((one) => typeof one === "string");
+	} catch {
+		return [];
+	}
+}
+function mtimeOf(file) {
+	try {
+		return statSync(file).mtimeMs;
+	} catch {
+		return;
+	}
+}
+function newestMtime(dir) {
+	let newest;
+	const walk = (at) => {
+		let entries;
+		try {
+			entries = readdirSync(at, { withFileTypes: true });
+		} catch {
+			return;
+		}
+		for (const entry of entries) {
+			const full = join(at, entry.name);
+			if (entry.isDirectory()) walk(full);
+			else if (entry.isFile()) {
+				const stamp = mtimeOf(full);
+				if (stamp !== void 0 && (newest === void 0 || stamp > newest)) newest = stamp;
+			}
+		}
+	};
+	walk(dir);
+	return newest;
+}
+function moduleBuildFacts(dir) {
+	const artifacts = asExported(dir).map((rel) => ({
+		path: rel,
+		mtime: mtimeOf(join(dir, rel))
+	}));
+	const present = artifacts.filter((one) => one.mtime !== void 0);
+	const oldestBuilt = present.reduce((min, one) => min === void 0 || one.mtime < min ? one.mtime : min, void 0);
+	const newestSource = newestMtime(join(dir, "src"));
+	return {
+		artifacts: artifacts.map((one) => ({
+			path: one.path,
+			at: one.mtime === void 0 ? null : new Date(one.mtime).toISOString()
+		})),
+		builtAll: present.length === artifacts.length && artifacts.length > 0,
+		stale: newestSource !== void 0 && oldestBuilt !== void 0 && newestSource > oldestBuilt
+	};
+}
+//#endregion
+//#region src/modules/panels/model/diy-report.ts
+function healthOf(options) {
+	const { registry, unit, installed } = options;
+	const refused = registry?.refusals().find((one) => one.unit === unit);
+	if (refused !== void 0) return {
+		state: "failed",
+		reason: refused.reasons.join("；")
+	};
+	const failed = registry?.failureOf(unit);
+	if (failed !== void 0) return {
+		state: "failed",
+		reason: failed
+	};
+	if (registry?.all().some((one) => one.unit === unit) === true) return { state: "ok" };
+	return {
+		state: "absent",
+		reason: installed ? "工作台还没读到它的声明 —— 新装的模块要重启一次工作台" : "还没装"
+	};
+}
+function healthText(health) {
+	if (health.state === "ok") return "是";
+	if (health.state === "failed") return `不是 —— ${health.reason ?? "(没给原因)"}`;
+	return `还没有（${health.reason ?? "还不知道"}）`;
+}
+function ageText(at, now) {
+	const seconds = Math.max(0, Math.round((now - at) / 1e3));
+	if (seconds < 10) return "刚刚";
+	if (seconds < 60) return `${String(seconds)} 秒前`;
+	const minutes = Math.round(seconds / 60);
+	if (minutes < 60) return `${String(minutes)} 分钟前`;
+	return `${String(Math.round(minutes / 60))} 小时前`;
+}
+function stampOf(at) {
+	return `${new Date(at).toISOString().slice(11, 19)}Z`;
+}
+function readText$1(read, now) {
+	const when = `${stampOf(read.at)} · ${ageText(read.at, now)}`;
+	if (read.phase === "ready") return `${read.route} 读到了（${when}）`;
+	if (read.phase === "loading") return `${read.route} 正在读（${when}）`;
+	if (read.phase === "idle") return `${read.route} 没在取数（${when}）`;
+	const code = read.error?.code ?? "unknown";
+	const message = read.error?.message ?? "";
+	return `${read.route} 读不到（${code}）${message === "" ? "" : `：${message}`}（${when}）`;
+}
+function renderPanel(options) {
+	const { packagesDir, workspace, rows, board, at, now } = options;
+	const head = `工坊：${packagesDir}\n这个工作区：${workspace ?? "(会话不在任何工作区上)"}`;
+	const note = at === 0 ? "\n还没有一条面板运行态上报 —— 面板上一个取数 / 渲染都没发生过：要么这个工作区的面板上没开卡片，要么用户那一页还是刷新前的旧版本（上报要页面刷一次才带上）。" : `\n面板上有 ${String(board.length)} 张卡｜运行态来自用户那一页（最后一次上报 ${stampOf(at)} · ${ageText(at, now)}）`;
+	const body = rows.map((row) => {
+		const title = `—— ${row.unit}${row.name === "" ? "" : `（${row.name}）`} · ${healthText(row.health)}`;
+		const report = row.report;
+		if (report === void 0) return [title, `   没上报：卡片没渲染出来，或者用户那一页还没刷新到带这份补丁的版本`].join("\n");
+		const reads = report.cards.slice(0, 6).map((one) => `   数据 · ${readText$1(one, now)}`);
+		const more = report.cards.length > 6 ? [`   数据 · …还有 ${String(report.cards.length - 6)} 条`] : [];
+		const crash = report.crash === void 0 ? "   崩过：没有" : `   崩过：是 —— ${report.crash.reason}（${stampOf(report.crash.at)} · 共 ${String(report.crash.count)} 次）`;
+		return [
+			title,
+			...reads,
+			...more,
+			crash
+		].join("\n");
+	});
+	return body.length === 0 ? `${head}${note}` : `${head}${note}\n${body.join("\n")}`;
+}
+function statusOf(options) {
+	const { dir, unit, name, installed, known, open, health } = options;
+	const facts = moduleBuildFacts(dir);
+	const next = health.state === "failed" ? `它起不来：${health.reason ?? "(没给原因)"} —— 先把这一条修掉（改模块源码 → build；改了 package.json / cordis.patch.yml 要重启工作台），别去重装` : !installed ? "装：action=install（第一次，会让用户点头一次）" : !known ? "面板还不认得这个单元 —— 重启一次工作台（新装的模块要重启才注册进面板），重启后再 action=open" : !open ? "上板：action=open（只上板，不重装）" : !facts.builtAll ? "还没构建：pnpm exec dsh-wb-module build" : facts.stale ? "源码比产物新：pnpm exec dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新页面）" : "都在生效：改源码 → build（宿主侧秒级热换；改了 client.js 刷新页面），不要再装一遍";
+	return {
+		unit,
+		name,
+		dir,
+		installed,
+		known,
+		open,
+		artifacts: facts.artifacts,
+		stale: facts.stale,
+		health,
+		next
+	};
+}
+function renderStatus(packagesDir, lines) {
+	if (lines.length === 0) return renderList(packagesDir, []);
+	return `工坊：${packagesDir}\n${lines.map((one) => {
+		const head = `—— ${one.unit}（${one.name}）`;
+		const facts = `   装：${one.installed ? "是" : "没有"} · 面板认得：${one.known ? "是" : "不是"} · 这个项目上开着：${one.open ? "是" : "没有"}`;
+		const artifacts = one.artifacts.length === 0 ? "   产物：没有" : `   产物：${one.artifacts.map((item) => `${item.path}${item.at === null ? "（缺）" : ` ${item.at.slice(11, 19)}Z`}`).join(" · ")} · 源码比产物新：${one.stale ? "是" : "没有"}`;
+		return [
+			head,
+			facts,
+			`   起得来：${healthText(one.health)}`,
+			artifacts,
+			`   下一步：${one.next}`
+		].join("\n");
+	}).join("\n")}`;
+}
+function renderList(packagesDir, modules) {
+	if (modules.length === 0) return `工坊里还没有模块（${packagesDir}）—— 在里面造一个：pnpm exec dsh-wb-module init <名字> --dir <工坊>/packages/module-<名字> --template diy`;
+	const lines = modules.map((one) => `${one.unit} · ${one.installed ? "已装" : "没装"} · ${one.name}` + (one.description === "" ? "" : `\n${" ".repeat(one.unit.length)}      ${one.description}`));
+	const footer = modules.filter((one) => !one.installed).length === 0 ? "都已装过 —— **不要再装**：改源码 + dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面）。" : "装：workbench_diy（action=install, unit=<上面那个 unit>）";
+	return `工坊：${packagesDir}\n${lines.join("\n")}\n\n${footer}`;
+}
+//#endregion
 //#region src/modules/panels/model/diy-tools.ts
 var ACTIONS$2 = [
 	"list",
 	"status",
+	"panel",
 	"probe",
 	"recon",
 	"install",
@@ -3099,33 +3515,6 @@ function verdictOf$1(change) {
 	const tail = (change.packageResult?.output ?? "").trim().split("\n").slice(-3).join(" | ");
 	return `没装上（${change.errorCode ?? "failed"}）${tail === "" ? "" : `：${tail}`}`;
 }
-function statusOf(options) {
-	const { dir, unit, name, installed, known, open } = options;
-	const facts = moduleBuildFacts(dir);
-	const next = !installed ? "装：action=install（第一次，会让用户点头一次）" : !known ? "面板还不认得这个单元 —— 重启一次工作台（新装的模块要重启才注册进面板），重启后再 action=open" : !open ? "上板：action=open（只上板，不重装）" : !facts.builtAll ? "还没构建：pnpm exec dsh-wb-module build" : facts.stale ? "源码比产物新：pnpm exec dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新页面）" : "都在生效：改源码 → build（宿主侧秒级热换；改了 client.js 刷新页面），不要再装一遍";
-	return {
-		unit,
-		name,
-		dir,
-		installed,
-		known,
-		open,
-		artifacts: facts.artifacts,
-		stale: facts.stale,
-		next
-	};
-}
-function renderStatus(packagesDir, lines) {
-	if (lines.length === 0) return renderList(packagesDir, []);
-	return `工坊：${packagesDir}\n${lines.map((one) => {
-		return [
-			`—— ${one.unit}（${one.name}）`,
-			`   装：${one.installed ? "是" : "没有"} · 面板认得：${one.known ? "是" : "不是"} · 这个项目上开着：${one.open ? "是" : "没有"}`,
-			one.artifacts.length === 0 ? "   产物：没有" : `   产物：${one.artifacts.map((item) => `${item.path}${item.at === null ? "（缺）" : ` ${item.at.slice(11, 19)}Z`}`).join(" · ")} · 源码比产物新：${one.stale ? "是" : "没有"}`,
-			`   下一步：${one.next}`
-		].join("\n");
-	}).join("\n")}`;
-}
 function renderProbe(out) {
 	if (out.ok) return `读到了 —— 这就是那条读的返回值，把它固化成模块宿主半侧的那一条：\n${(JSON.stringify(out.value, null, 2) ?? "undefined").slice(0, 2e3)}`;
 	const lines = [`没读到（${out.code}）：${out.message}`];
@@ -3146,12 +3535,6 @@ function renderFind(out) {
 	const more = out.entries.length > 20 ? `\n… 还有 ${String(out.entries.length - 20)} 个` : "";
 	return `找到了 ${String(out.count)} 个元素 —— 每行的单元格按换行拼在 text 里；把它固化成模块宿主半侧的那一条（host 的 browserFind + 切格 + 按列序取值）：\n${head.join("\n")}${more}`;
 }
-function renderList(packagesDir, modules) {
-	if (modules.length === 0) return `工坊里还没有模块（${packagesDir}）—— 在里面造一个：pnpm exec dsh-wb-module init <名字> --dir <工坊>/packages/module-<名字> --template diy`;
-	const lines = modules.map((one) => `${one.unit} · ${one.installed ? "已装" : "没装"} · ${one.name}` + (one.description === "" ? "" : `\n${" ".repeat(one.unit.length)}      ${one.description}`));
-	const footer = modules.filter((one) => !one.installed).length === 0 ? "都已装过 —— **不要再装**：改源码 + dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面）。" : "装：workbench_diy（action=install, unit=<上面那个 unit>）";
-	return `工坊：${packagesDir}\n${lines.join("\n")}\n\n${footer}`;
-}
 function showOrReason(panels, unit, workspace) {
 	try {
 		panels.show(unit, workspace);
@@ -3171,18 +3554,18 @@ function registerDiyTools(ctx, market, panels) {
 	}
 	const tool = {
 		name: "workbench_diy",
-		description: "看 DIY 工坊里的模块现在走到哪一步，或者把它们装上 / 上板。只认工坊里的模块（不是市场 —— 装别的东西用 workbench_modules）。status 会把五件事一次说清（装了没 / 面板认得没 / 这个项目上开着没 / 产物齐不齐 / 源码是否比产物新）并给出下一步，所以别自己去拼这些状态、也别反复 install。recon 是**先看有没有现成的**：拿一个关键词（站点名 / 系统名 / 域名）去 opencli 自带的那份目录里找，回它有哪些命令、要不要用户的 Chrome 登录；都没有就老实说，并给出\"写 adapter\"或\"探一条读\"两条路。用户不知道 opencli 是什么 —— 这一步别问他，自己查。probe 是**探一条读**：用用户浏览器里现有的登录去读一次，把结果与失败码归一（两拍、重试、平台码映射都在里面），探明之后再把它固化成模块宿主半侧的那一条。两种读法二选一：script（页面里跑一段回 JSON 的脚本，读接口）或 css（给一个选择器，读 DOM 那一行 —— 页面里没有接口时用这个，别写 document.querySelectorAll）。装是这台机器上的持久变更，要用户点头；**一辈子只装一次**：之后改源码只需 dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面），不要再调它。",
-		parameters: {
+		description: "看 DIY 工坊里的模块现在走到哪一步，或者把它们装上 / 上板。只认工坊里的模块（不是市场 —— 装别的东西用 workbench_modules）。status 会把六件事一次说清（装了没 / 面板认得没 / 这个项目上开着没 / **起得来没** / 产物齐不齐 / 源码是否比产物新）并给出下一步，所以别自己去拼这些状态、也别反复 install。panel 是**面板上现在究竟是什么样**：这个工作区开了哪几张卡、每张最后是读到了还是读不到（带宿主回的原文）、有没有崩过 —— 用户说\"卡片不对 / 一片空白 / 一直转圈\"就先问它，别靠猜、也别让他截图给你。recon 是**先看有没有现成的**：拿一个关键词（站点名 / 系统名 / 域名）去 opencli 自带的那份目录里找，回它有哪些命令、要不要用户的 Chrome 登录；都没有就老实说，并给出\"写 adapter\"或\"探一条读\"两条路。用户不知道 opencli 是什么 —— 这一步别问他，自己查。probe 是**探一条读**：用用户浏览器里现有的登录去读一次，把结果与失败码归一（两拍、重试、平台码映射都在里面），探明之后再把它固化成模块宿主半侧的那一条。两种读法二选一：script（页面里跑一段回 JSON 的脚本，读接口）或 css（给一个选择器，读 DOM 那一行 —— 页面里没有接口时用这个，别写 document.querySelectorAll）。装是这台机器上的持久变更，要用户点头；**一辈子只装一次**：之后改源码只需 dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面），不要再调它。",
+		parameters: withApprovalNote({
 			type: "object",
 			properties: {
 				action: {
 					type: "string",
-					description: "list=工坊里有哪些模块（默认）；status=某个模块现在走到哪一步、下一步做什么；probe=在用户浏览器里探一条读；recon=先查 opencli 现成的能力（自带 adapter / 本机插件）；open=只把它在这个项目上板（不装）；install=装上并上板（第一次、会让用户点头）。",
+					description: "list=工坊里有哪些模块（默认）；status=某个模块现在走到哪一步、下一步做什么；panel=这个工作区的面板上现在是什么样（谁读到了 / 谁读不到 / 谁崩过）；probe=在用户浏览器里探一条读；recon=先查 opencli 现成的能力（自带 adapter / 本机插件）；open=只把它在这个项目上板（不装）；install=装上并上板（第一次、会让用户点头）。",
 					enum: [...ACTIONS$2]
 				},
 				unit: {
 					type: "string",
-					description: "status / open / install 填：工坊里那个模块的单元 id（list 会给）。"
+					description: "status / panel / open / install 填：工坊里那个模块的单元 id（list 会给）。"
 				},
 				script: {
 					type: "string",
@@ -3223,7 +3606,7 @@ function registerDiyTools(ctx, market, panels) {
 			},
 			required: ["action"],
 			additionalProperties: false
-		},
+		}, { required: true }),
 		output: {
 			schema: OUTPUT_SCHEMA$2,
 			render: (_args, value) => {
@@ -3243,7 +3626,10 @@ function registerDiyTools(ctx, market, panels) {
 			const session = sessionWorkspace(exec);
 			if (!inWorkshopSession(ctx, session)) throw new Error(`这把工具只在 DIY 工坊里用：当前会话不在工坊里（这个会话的工作区 ${session ?? "(不知道)"}）—— 普通项目里装模块用 workbench_modules，工坊的入口是左栏那一行「工作台DIY」`);
 			const workspace = session;
-			const modules = workshopModules(packagesDir, profileModules(profileDirOf(ctx)).map((row) => row.unit));
+			const installed = profileModules(profileDirOf(ctx)).map((row) => row.unit);
+			const modules = workshopModules(packagesDir, installed);
+			const registry = ctx.get(UNITS_SERVICE);
+			const panelState = ctx.get(PANEL_STATE_SERVICE);
 			if (action === "list") return plainJson({
 				workshop: packagesDir,
 				modules,
@@ -3262,7 +3648,12 @@ function registerDiyTools(ctx, market, panels) {
 				name: one.name,
 				installed: one.installed,
 				known: panelEntries.some((entry) => entry.id === one.unit),
-				open: panels.isEnabled(one.unit, workspace)
+				open: panels.isEnabled(one.unit, workspace),
+				health: healthOf({
+					registry,
+					unit: one.unit,
+					installed: one.installed
+				})
 			});
 			if (action === "status") {
 				const wanted = asText$1(args.unit);
@@ -3275,6 +3666,49 @@ function registerDiyTools(ctx, market, panels) {
 					text: renderStatus(packagesDir, rows)
 				});
 			}
+			if (action === "panel") {
+				const snapshot = panelState?.snapshot(workspace) ?? {
+					workspace,
+					at: 0,
+					units: []
+				};
+				const wanted = asText$1(args.unit);
+				const board = panelEntries.filter((entry) => entry.shown && entry.hasCard).map((entry) => entry.id);
+				const nameOf = new Map(modules.map((one) => [one.unit, one.name]));
+				const reported = new Map(snapshot.units.map((one) => [one.unit, one]));
+				const rows = [.../* @__PURE__ */ new Set([
+					...board,
+					...reported.keys(),
+					...nameOf.keys()
+				])].filter((unit) => wanted === "" || unit === wanted).map((unit) => {
+					const report = reported.get(unit);
+					return {
+						unit,
+						name: nameOf.get(unit) ?? "",
+						health: healthOf({
+							registry,
+							unit,
+							installed: installed.includes(unit)
+						}),
+						...report === void 0 ? {} : { report }
+					};
+				});
+				return plainJson({
+					workshop: packagesDir,
+					workspace,
+					board,
+					report: snapshot,
+					panels: rows,
+					text: renderPanel({
+						packagesDir,
+						workspace,
+						rows,
+						board,
+						at: snapshot.at,
+						now: Date.now()
+					})
+				});
+			}
 			if (action === "recon") {
 				const keywords = keywordsOf(asText$1(args.keyword), asText$1(args.url));
 				if (keywords.length === 0) throw new Error("recon 要一个关键词（站点名 / 系统名 / 域名都行）：先拿它去 opencli 自带的那份目录里找有没有现成的能力，别一上来就自己写 adapter；用户不知道 opencli 是什么，这一步别问他。");
@@ -3429,6 +3863,32 @@ async function latestVersion(options) {
 	});
 	return value;
 }
+var existsCache = /* @__PURE__ */ new Map();
+async function versionExists(options) {
+	const { shell, name, version, registry, force = false } = options;
+	const key = `${registry}|${name}@${version}`;
+	const hit = existsCache.get(key);
+	if (!force && hit !== void 0 && (hit.value || Date.now() - hit.at < 6e5)) return hit.value;
+	const result = await runShell(shell, `npm view ${quoteShellArg(`${name}@${version}`)} version --registry ${quoteShellArg(registry)} --cache ${quoteShellArg(npmCacheDir())}`, { timeoutMs: VERSION_CHECK_TIMEOUT_MS }).catch(() => void 0);
+	const value = result?.exitCode === 0 && parseVersion(result.stdout) !== void 0;
+	existsCache.set(key, {
+		at: Date.now(),
+		value
+	});
+	return value;
+}
+async function missingReleaseParts(options) {
+	const { shell, registry, version, force = false } = options;
+	const missing = [];
+	for (const name of RELEASE_SIBLINGS) if (!await versionExists({
+		shell,
+		name,
+		version,
+		registry,
+		force
+	})) missing.push(name);
+	return missing;
+}
 async function probeRelease(options) {
 	const { shell, package: pkg, registry, force = false } = options;
 	if (pkg === "") return void 0;
@@ -4206,7 +4666,7 @@ async function retryAfterRegistryFix(deps, manager, pkg, change) {
 function createMarketService(options) {
 	const { manifests, manifestsNow, probe, shell, logger, onInstalled, onUninstalled, isReleased, bundles, installed, modules, workbench, registries, ledger, references } = options;
 	const command = options.command ?? "opencli";
-	const catalog = () => (manifestsNow?.() ?? manifests).filter((manifest) => (manifest.env?.plugins ?? []).length > 0 || (manifest.env?.libs ?? []).length > 0);
+	const catalog = () => manifestsNow?.() ?? manifests;
 	function requireEntry(unit) {
 		const manifest = catalog().find((item) => item.id === unit);
 		if (manifest === void 0) throw new Error(`市场里没有这个模块：${unit}（可安装：${catalog().map((item) => item.id).join(", ") || "（空）"}）`);
@@ -4553,6 +5013,15 @@ function createMarketService(options) {
 				registry,
 				force: true
 			});
+			if (shell !== void 0 && registry !== void 0 && latest !== void 0) {
+				const missing = await missingReleaseParts({
+					shell,
+					registry,
+					version: latest,
+					force: true
+				});
+				if (missing.length > 0) throw new Error(`源上已经有 ${read.pkg}@${latest}，但这一份发布还没铺齐：${missing.join("、")} 在这一版上还拉不到。装上会缺依赖，稍等再试 —— 市场页那颗「重新检查」会重新探一次。`);
+			}
 			const spec = latest === void 0 ? `${read.pkg}@latest` : `${read.pkg}@${latest}`;
 			const outcome = await installDshBundle(routeDeps(requireBundles()), spec, { ...registry === void 0 ? {} : { registry } });
 			logger?.info?.(`[dsh-workbench] 已更新工作台 ${read.version} → ${latest ?? "最新版"}`);
@@ -4749,8 +5218,8 @@ function registerMarketTools(ctx, market) {
 	}
 	const tool = {
 		name: "workbench_modules",
-		description: "看 / 装 / 升 / 卸工作台的面板模块，以及用户自己装的 opencli 插件。install-bundle 按 spec（包名，可带版本；git / tarball / 本地路径也行）把模块包装进 profile —— 装完会连带装它声明的 opencli 插件；其余 action 按模块 id 动它要的外部供给；update-plugin / uninstall-plugin 按包名或插件名动用户装的那份插件；update-workbench 把工作台自己更新到源上的新版（客户端与宿主一般会自己换上；真要重启时结果里会说，重启由用户来，别自己重启）。卸载只动工作台运行时，不影响终端那套；共用依赖只有升级。",
-		parameters: {
+		description: "看 / 装 / 升 / 卸工作台的面板模块，以及用户自己装的 opencli 插件。install-bundle 按 spec（包名，可带版本；git / tarball / 本地路径也行）把模块包装进 profile —— 装完会连带装它声明的 opencli 插件；其余 action 按模块 id 动它要的外部供给；update-workbench 把工作台自己更新到源上的新版（客户端与宿主一般会自己换上；真要重启时结果里会说，重启由用户来，别自己重启）。卸载只动工作台运行时，不影响终端那套；共用依赖只有升级。",
+		parameters: withApprovalNote({
 			type: "object",
 			properties: {
 				action: {
@@ -4777,7 +5246,7 @@ function registerMarketTools(ctx, market) {
 			},
 			required: ["action"],
 			additionalProperties: false
-		},
+		}, { required: true }),
 		output: {
 			schema: OUTPUT_SCHEMA$1,
 			render: (_args, value) => {
@@ -4988,9 +5457,11 @@ function createPanelsService(options) {
 		return readBoard(folder) ?? EMPTY_BOARD;
 	}
 	function writeBoard(folder, next) {
+		const order = next.order ?? [];
 		folder.write(PANELS_FILE, {
 			shown: next.shown,
-			hidden: next.hidden
+			hidden: next.hidden,
+			...order.length === 0 ? {} : { order }
 		});
 	}
 	function boardsOf(workspace) {
@@ -5021,6 +5492,9 @@ function createPanelsService(options) {
 		if (next.length === 0) machine.remove(RELEASED_FILE);
 		else machine.write(RELEASED_FILE, { ids: next });
 	}
+	function ownedSet() {
+		return new Set(owned?.() ?? []);
+	}
 	function notify() {
 		for (const listener of [...listeners]) try {
 			listener();
@@ -5031,7 +5505,7 @@ function createPanelsService(options) {
 	function withPersisted(folder, next, key) {
 		writeBoard(folder, next);
 		notify();
-		return resolvePanels(manifests(), boardsOf(key));
+		return resolvePanels(manifests(), boardsOf(key), ownedSet());
 	}
 	function takeBackReleased(id) {
 		const current = readReleased();
@@ -5051,16 +5525,19 @@ function createPanelsService(options) {
 	function requireSwitchable(id) {
 		if (pluginIds().has(id)) return;
 		requireKnown(id);
-		if (!manifests().some((manifest) => manifest.id === id && manifest.card !== null)) throw new Error(`${id} 没有卡片，不能收起（它是把别的套件放回来的入口）`);
+		if (manifests().find((item) => item.id === id)?.card === null && ownedSet().has(id)) throw new Error(`${id} 没有卡片，不能收起（它是把别的套件放回来的入口）`);
 	}
 	function requireWorkspace(workspace) {
 		const key = workspace?.trim() ?? "";
 		if (key === "") throw new Error("这个会话不属于任何工作区：面板按工作区存，先打开或新建一个工作区");
 		return key;
 	}
+	function visibleOrder(workspace) {
+		return resolvePanels(manifests(), boardsOf(workspace), ownedSet()).filter((entry) => entry.shown && entry.hasCard).map((entry) => entry.id);
+	}
 	return {
 		list(workspace, target) {
-			return resolvePanels(manifests(), target === "machine" ? boardsOf(null) : boardsOf(workspace));
+			return resolvePanels(manifests(), target === "machine" ? boardsOf(null) : boardsOf(workspace), ownedSet());
 		},
 		listPlugins(workspace, target) {
 			return resolvePluginPanels(pluginRefs(), target === "machine" ? boardsOf(null) : boardsOf(workspace));
@@ -5105,7 +5582,7 @@ function createPanelsService(options) {
 			requireSwitchable(id);
 			const { folder, key } = targetOf(target ?? "workspace", workspace);
 			takeBackReleased(id);
-			return withPersisted(folder, withShown(boardIn(folder), id), key);
+			return withPersisted(folder, withShown(boardIn(folder), id, key === null ? void 0 : visibleOrder(key)), key);
 		},
 		hide(id, workspace, target) {
 			requireSwitchable(id);
@@ -5114,10 +5591,12 @@ function createPanelsService(options) {
 		},
 		move(id, index, workspace, target) {
 			requireSwitchable(id);
-			const { folder, key } = targetOf(target ?? "workspace", workspace);
+			const scope = target ?? "workspace";
+			if (scope === "machine") throw new Error("机器级默认板没有顺序这一说：它只回答\"默认开哪几行\"。顺序是每个工作区自己的 —— 要排顺序就用默认作用域的那一次 move（或面板里拖动）。");
+			const { folder, key } = targetOf(scope, workspace);
 			const current = boardIn(folder);
 			if (!current.shown.includes(id)) takeBackReleased(id);
-			return withPersisted(folder, withMoved(current, id, index), key);
+			return withPersisted(folder, withMoved(current, id, index, visibleOrder(key)), key);
 		},
 		reset(workspace, target) {
 			const { folder, key } = targetOf(target ?? "workspace", workspace);
@@ -5137,7 +5616,7 @@ function createPanelsService(options) {
 			if (id === void 0) {
 				folder.remove(PANELS_FILE);
 				notify();
-				return resolvePanels(manifests(), boardsOf(key));
+				return resolvePanels(manifests(), boardsOf(key), ownedSet());
 			}
 			return withPersisted(folder, withoutPanel(boardIn(folder), id), key);
 		}
@@ -5318,13 +5797,13 @@ function registerPanelTools(ctx, panels, values) {
 	}
 	const tool = {
 		name: "workbench_panels",
-		description: "看或调右侧面板：启用哪些套件、什么顺序。启用/收起 = 卡片与 agent 工具一起上下线（别的项目不受影响，不删数据）。收起是\"这个工作区明确不要它\"，连那些在机器级默认板上开着的套件也照样在这个工作区收起来，之后 show 能放回来。默认只动当前工作区（scope=workspace）；scope=machine 动的是\"机器级默认板\" —— 机器级默认板只是还没配过的工作区的默认值，已经自己配过的工作区保持自己的选择，不会被它改。在那份板上 hide = 明确写下\"不要它\"，这一笔比名单更管用：名单里还列着它也算不要，没提过它的工作区因此看不到它；show 会把这笔划掉、把它放回去。本工作区那份板只记**改过的那几行**（逐行覆盖）：没提到的行跟着机器级默认板走，所以那份板以后改了，没改过的工作区会跟着变。workbench_panels 默认只动当前工作区，动机器级默认板要显式给 scope=machine。",
-		parameters: {
+		description: "看或调右侧面板：启用哪些套件、什么顺序。启用/收起 = 卡片与 agent 工具一起上下线（别的项目不受影响，不删数据）。收起是\"这个工作区明确不要它\"，连那些在机器级默认板上开着的套件也照样在这个工作区收起来，之后 show 能放回来。顺序只属于工作区：没排过的按各模块自己声明的次序（开着的在前、关着的跟在后面）；show 或 move 过就以那次为准。机器级默认板只回答\"默认开哪几行\"，没有顺序这一说。scope=machine 动的是\"机器级默认板\" —— 它只是还没配过的工作区的默认值，已经自己配过的工作区保持自己的选择，不会被它改。在那份板上 hide = 明确写下\"不要它\"，这一笔比名单更管用：名单里还列着它也算不要，没提过它的工作区因此看不到它；show 会把这笔划掉、把它放回去。本工作区那份板只记**改过的那几行**（逐行覆盖）：没提到的行跟着机器级默认板走，所以那份板以后改了，没改过的工作区会跟着变。",
+		parameters: withApprovalNote({
 			type: "object",
 			properties: {
 				action: {
 					type: "string",
-					description: "show=这个工作区要它（之前收起的也放回来）；hide=这个工作区明确不要它（卡片与工具一起下线，默认在机器上也开着的套件同样收起，别的项目不受影响）；move=调顺序；reset=清掉这个工作区改过的那些行（改完就全部回到跟着机器级默认板走）；follow=把某一行放回跟随（带 id = 只放回那一行；不带 id = 全部放回）。",
+					description: "show=这个工作区要它（之前收起的也放回来）；hide=这个工作区明确不要它（卡片与工具一起下线，默认在机器上也开着的套件同样收起，别的项目不受影响）；move=调这个工作区的顺序（新开一行时它排在最后）；reset=清掉这个工作区改过的那些行（改完就全部回到跟着机器级默认板走）；follow=把某一行放回跟随（带 id = 只放回那一行；不带 id = 全部放回）。",
 					enum: [
 						"list",
 						"show",
@@ -5340,17 +5819,17 @@ function registerPanelTools(ctx, panels, values) {
 				},
 				index: {
 					type: "integer",
-					description: "move 的位置，0 基（0=最上面）。"
+					description: "move 的位置，0 基（数的是当前开着的那几行）。"
 				},
 				scope: {
 					type: "string",
-					description: "workspace（默认）=只动当前工作区；machine=动机器级默认板，那是还没配过的工作区的默认值 —— 已经自己配过的工作区保持自己的选择，不受它影响。",
+					description: "workspace（默认）=只动当前工作区；machine=动机器级默认板，那是还没配过的工作区的默认值 —— 已经自己配过的工作区保持自己的选择，不受它影响。机器级板没有顺序这一说（move 会报错）。",
 					enum: ["workspace", "machine"]
 				}
 			},
 			required: ["action"],
 			additionalProperties: false
-		},
+		}, { required: true }),
 		output: {
 			schema: OUTPUT_SCHEMA,
 			render: (_args, value) => {
@@ -5430,7 +5909,7 @@ function registerPanelTools(ctx, panels, values) {
 var OWNED = [{
 	unit: panelsUnit.id,
 	manifest: panelsUnit,
-	mount({ ctx, logger, manifests, ownedUnits, opencliCommand, probe, store, values }) {
+	mount({ ctx, logger, manifests, ownedUnits, installable, opencliCommand, probe, store, values }) {
 		const ledger = createPluginLedger({
 			store,
 			home: isolatedHome()
@@ -5445,9 +5924,15 @@ var OWNED = [{
 		ctx.provide(PANELS_SERVICE, panels);
 		const profileDir = profileDirOf(ctx);
 		const shell = ctx.get("shell");
+		const moduleManifests = () => {
+			const list = manifests();
+			if (installable === void 0) return list.filter(hasEnvSupply);
+			const ids = new Set(installable());
+			return list.filter((manifest) => ids.has(manifest.id));
+		};
 		const market = createMarketService({
-			manifests: manifests(),
-			manifestsNow: manifests,
+			manifests: moduleManifests(),
+			manifestsNow: moduleManifests,
 			...probe === void 0 ? {} : { probe },
 			shell,
 			...opencliCommand === void 0 ? {} : { command: opencliCommand },
@@ -5834,17 +6319,43 @@ function bundleRegistriesHandler(ctx) {
 	};
 }
 var refusalLog = /* @__PURE__ */ new Map();
+var holdLog = /* @__PURE__ */ new Map();
+async function latestIfReleaseReady(input) {
+	const missing = await missingReleaseParts({
+		shell: input.shell,
+		registry: input.registry,
+		version: input.version,
+		force: input.force
+	});
+	if (missing.length === 0) {
+		holdLog.delete(input.pkg);
+		return input.version;
+	}
+	const line = `${input.version}|${missing.join("、")}`;
+	if (holdLog.get(input.pkg) !== line) {
+		holdLog.set(input.pkg, line);
+		input.logger?.warn?.(`[dsh-workbench] 源上已经有 ${input.pkg}@${input.version}，但这一份发布还没铺齐（${missing.join("、")} 在这个版本上还拉不到）—— 先不提示更新；等铺齐或点「重新检查」。`);
+	}
+}
 async function workbenchVersion(input) {
 	const read = readProfilePackage(input.dir, PLUGIN_ID);
 	if (read === void 0) return void 0;
 	const registry = read.registry ?? input.fallback;
-	const queried = read.local === true || input.shell === void 0 || registry === void 0 ? void 0 : await latestVersion({
-		shell: input.shell,
+	const shell = input.shell;
+	const queried = read.local === true || shell === void 0 || registry === void 0 ? void 0 : await latestVersion({
+		shell,
 		name: read.pkg,
 		registry,
 		force: input.force
 	});
-	const latest = queried !== void 0 && isNewerVersion(queried, read.version) ? queried : void 0;
+	const latest = queried === void 0 || shell === void 0 || registry === void 0 || !isNewerVersion(queried, read.version) ? void 0 : await latestIfReleaseReady({
+		pkg: read.pkg,
+		version: queried,
+		registry,
+		shell,
+		force: input.force,
+		logger: input.logger
+	});
 	return {
 		pkg: read.pkg,
 		installed: read.version,
@@ -5896,7 +6407,8 @@ function moduleVersionsHandler(ctx, shell) {
 			dir,
 			shell,
 			fallback,
-			force
+			force,
+			logger: ctx.logger
 		});
 		return {
 			ok: true,
@@ -6687,6 +7199,28 @@ function withRunsRoute(result, unit) {
 		}
 	};
 }
+function notedRegistry(registry, writesOf) {
+	return { register(definition) {
+		if (!writesOf(definition.name)) return registry.register(definition);
+		const noted = withApprovalNote(definition.parameters, { required: true });
+		return registry.register(noted === definition.parameters ? definition : {
+			...definition,
+			parameters: noted
+		});
+	} };
+}
+function scopedMountCtx(ctx, registry, writesOf) {
+	const tools = notedRegistry(registry, writesOf);
+	const get = (name) => {
+		const value = ctx.get(name);
+		return name === "tools" && value !== void 0 ? tools : value;
+	};
+	return new Proxy(ctx, { get(target, key) {
+		if (key === "get") return get;
+		const value = Reflect.get(target, key, target);
+		return typeof value === "function" ? value.bind(target) : value;
+	} });
+}
 function failureReasonOf(error) {
 	if (error instanceof Error) return error.message;
 	return typeof error === "string" ? error : String(error);
@@ -6830,6 +7364,9 @@ function mountUnits(units, deps) {
 			continue;
 		}
 		const unit = host.manifest.id;
+		const tools = deps.ctx.get("tools");
+		const writes = toolUnits(deps.manifests());
+		const mountCtx = tools === void 0 ? deps.ctx : scopedMountCtx(deps.ctx, tools, (name) => writes.get(name)?.writes === true);
 		const longTasks = deps.longTasks === void 0 ? void 0 : createLongTaskHost({
 			scope: deps.longTasks.scope,
 			unit,
@@ -6839,10 +7376,11 @@ function mountUnits(units, deps) {
 		try {
 			result = host.face.mount({
 				manifest: host.manifest,
-				ctx: deps.ctx,
+				ctx: mountCtx,
 				logger: deps.logger,
 				manifests: deps.manifests,
 				ownedUnits,
+				...deps.installable === void 0 ? {} : { installable: deps.installable },
 				...deps.opencliCommand === void 0 ? {} : { opencliCommand: deps.opencliCommand },
 				...deps.probe === void 0 ? {} : { probe: deps.probe },
 				...deps.values === void 0 ? {} : { values: deps.values },
@@ -6907,6 +7445,9 @@ function mountUnits(units, deps) {
 }
 //#endregion
 //#region src/shared/api/host/unit-registry.ts
+function installableUnitsOf(registry) {
+	return registry.all().filter((host) => host.source.kind === "package").map((host) => host.unit);
+}
 function sourceLabel(source) {
 	if (source.kind === "owned") return "外壳自己";
 	if (source.kind === "plugin") return "按已装 opencli 插件合成";
@@ -6916,6 +7457,7 @@ function createUnitRegistry(options) {
 	const refusals = [];
 	const hosts = [];
 	const byUnit = /* @__PURE__ */ new Map();
+	const failures = /* @__PURE__ */ new Map();
 	const listeners = /* @__PURE__ */ new Set();
 	function notify() {
 		for (const listener of listeners) listener();
@@ -6985,7 +7527,14 @@ function createUnitRegistry(options) {
 		subscribe(listener) {
 			listeners.add(listener);
 			return () => listeners.delete(listener);
-		}
+		},
+		fail(unit, reason) {
+			failures.set(unit, reason);
+		},
+		recovered(unit) {
+			failures.delete(unit);
+		},
+		failureOf: (unit) => failures.get(unit)
 	};
 }
 //#endregion
@@ -7270,12 +7819,13 @@ function pluginToolParameters(command) {
 	const properties = {};
 	for (const arg of command.args) properties[arg.name] = propertyOf(arg);
 	const required = command.args.filter((arg) => arg.required).map((arg) => arg.name);
-	return {
+	const schema = {
 		type: "object",
 		properties,
 		...required.length === 0 ? {} : { required },
 		additionalProperties: false
 	};
+	return pluginToolWrites(command) ? withApprovalNote(schema, { required: true }) : schema;
 }
 function pluginToolDescription(command) {
 	const described = command.description.trim();
@@ -7675,6 +8225,7 @@ function seedWorkbenchRuntime(ctx) {
 function apply(ctx) {
 	const facts = createFactLog();
 	const values = createValueHandoff();
+	const panelState = createPanelStateStore();
 	seedWorkbenchRuntime(ctx);
 	const opencli = opencliCommandOf(ctx);
 	const routes = {
@@ -7687,23 +8238,17 @@ function apply(ctx) {
 	};
 	const renderers = /* @__PURE__ */ new Map();
 	const shell = ctx.get("shell");
-	let roster;
 	const profileDir = profileDirOf(ctx);
 	const units = createUnitRegistry({
-		declarationOf: (unit) => {
-			if (roster === void 0) roster = new Map(profileModules(profileDir).map((row) => [row.unit, row.pkg]));
-			const pkg = roster.get(unit);
-			return pkg === void 0 ? void 0 : {
-				pkg,
-				declaration: moduleDeclarationOf(profileDir, pkg)
-			};
-		},
+		declarationOf: createDeclarationLookup(profileDir),
 		logger: ctx.logger
 	});
 	ctx.provide(UNITS_SERVICE, units);
+	ctx.provide(PANEL_STATE_SERVICE, panelState);
 	routes[UNIT_MANIFESTS_ROUTE] = () => ({
 		ok: true,
-		manifests: units.manifests()
+		manifests: units.manifests(),
+		installable: installableUnitsOf(units)
 	});
 	assembleHostUnits(units);
 	ctx.inject(["workspaceRegistry"], (scoped) => {
@@ -7777,6 +8322,7 @@ function apply(ctx) {
 		if (item === void 0) return;
 		mounted.delete(id);
 		mountFailures.delete(id);
+		units.recovered(id);
 		for (const dispose of item.toolDisposers) dispose?.();
 		item.gateOff?.();
 		item.plan.disposeLongTasks();
@@ -7795,6 +8341,7 @@ function apply(ctx) {
 				logger: ctx.logger,
 				manifests: liveManifests,
 				ownedUnits: () => units.owned(),
+				installable: () => installableUnitsOf(units),
 				store,
 				opencliCommand: opencli.command,
 				probe: (unit, options) => probeOne(unit, options?.force ?? false),
@@ -7809,6 +8356,7 @@ function apply(ctx) {
 				reason: failureReasonOf(error),
 				host
 			});
+			units.fail(id, failureReasonOf(error));
 			ctx.logger?.warn?.(`[dsh-workbench] ${id} 套件起不来（装配期）：${failureReasonOf(error)}`);
 			return;
 		}
@@ -7841,6 +8389,7 @@ function apply(ctx) {
 				gateOff: one.gate?.subscribe(() => toolScope.reapply())
 			});
 			mountFailures.delete(id);
+			units.recovered(id);
 		} catch (error) {
 			for (const route of added) delete routes[route];
 			for (const kind of one.contextRenderers.keys()) renderers.delete(kind);
@@ -7852,6 +8401,7 @@ function apply(ctx) {
 				reason: failureReasonOf(error),
 				host
 			});
+			units.fail(id, failureReasonOf(error));
 			ctx.logger?.warn?.(`[dsh-workbench] ${id} 套件起不来（注册期）：${failureReasonOf(error)}`);
 		}
 	}
@@ -7876,7 +8426,10 @@ function apply(ctx) {
 	function sync() {
 		const present = new Set(units.all().map((one) => one.unit));
 		for (const id of [...mounted.keys()]) if (!present.has(id)) unmountUnit(id);
-		for (const id of [...mountFailures.keys()]) if (!present.has(id)) mountFailures.delete(id);
+		for (const id of [...mountFailures.keys()]) if (!present.has(id)) {
+			mountFailures.delete(id);
+			units.recovered(id);
+		}
 		for (const host of units.all()) {
 			if (mounted.has(host.unit)) continue;
 			const already = mountFailures.get(host.unit);
@@ -8023,6 +8576,7 @@ function apply(ctx) {
 		return () => off?.();
 	}, `${PLUGIN_ID}: 对话引用注入`);
 	ctx.effect(() => registerFactStream(ctx, facts), `${PLUGIN_ID}: 变更流`);
+	ctx.effect(() => registerPanelState(ctx, panelState), `${PLUGIN_ID}: 面板运行态上报（浏览器半侧报自己的取数与渲染收尾）`);
 	ctx.effect(() => registerApi(ctx, routes), `${PLUGIN_ID}: HTTP 投影`);
 }
 //#endregion