@dsh-workbench/core 0.2.5 → 0.2.7

package/dist/host/index.js

@@ -1,6 +1,6 @@
 import { createHash, randomUUID } from "node:crypto";
-import fs, { chmodSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, readdirSync, readlinkSync, realpathSync, rmSync, statSync, symlinkSync, writeFileSync } from "node:fs";
-import path, { delimiter, dirname, join, resolve, sep } from "node:path";
+import fs, { chmodSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
+import path, { basename, delimiter, dirname, join, resolve, sep } from "node:path";
 import os from "node:os";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -247,7 +247,7 @@ var PHASES = [
 function asRecord$10(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
-function textOf$6(value, max) {
+function textOf$7(value, max) {
 	if (typeof value !== "string") return "";
 	const trimmed = value.trim();
 	return trimmed.length > max ? trimmed.slice(0, max) : trimmed;
@@ -260,8 +260,8 @@ function atOf(value) {
 function errorOf(raw) {
 	const record = asRecord$10(raw);
 	if (record === void 0) return void 0;
-	const code = textOf$6(record["code"], 120);
-	const message = textOf$6(record["message"], PANEL_STATE_MAX_TEXT);
+	const code = textOf$7(record["code"], 120);
+	const message = textOf$7(record["message"], PANEL_STATE_MAX_TEXT);
 	if (code === "" && message === "") return void 0;
 	return {
 		code: code === "" ? "unknown" : code,
@@ -274,7 +274,7 @@ function parseCardsReport(payload) {
 		ok: false,
 		message: "请求体要是一个对象"
 	};
-	const workspace = textOf$6(record["workspace"], PANEL_STATE_MAX_TEXT);
+	const workspace = textOf$7(record["workspace"], PANEL_STATE_MAX_TEXT);
 	if (workspace === "") return {
 		ok: false,
 		message: "workspace 不能是空的 —— 面板按工作区存"
@@ -288,9 +288,9 @@ function parseCardsReport(payload) {
 	for (const item of raw.slice(0, 32)) {
 		const card = asRecord$10(item);
 		if (card === void 0) continue;
-		const unit = textOf$6(card["unit"], 200);
-		const route = textOf$6(card["route"], 400);
-		const phase = textOf$6(card["phase"], 20);
+		const unit = textOf$7(card["unit"], 200);
+		const route = textOf$7(card["route"], 400);
+		const phase = textOf$7(card["phase"], 20);
 		const at = atOf(card["at"]);
 		if (unit === "" || route === "" || at === null || !PHASES.includes(phase)) continue;
 		const error = errorOf(card["error"]);
@@ -320,9 +320,9 @@ function parseCrashReport(payload) {
 		ok: false,
 		message: "请求体要是一个对象"
 	};
-	const workspace = textOf$6(record["workspace"], PANEL_STATE_MAX_TEXT);
-	const unit = textOf$6(record["unit"], 200);
-	const reason = textOf$6(record["reason"], PANEL_STATE_MAX_TEXT);
+	const workspace = textOf$7(record["workspace"], PANEL_STATE_MAX_TEXT);
+	const unit = textOf$7(record["unit"], 200);
+	const reason = textOf$7(record["reason"], PANEL_STATE_MAX_TEXT);
 	if (workspace === "") return {
 		ok: false,
 		message: "workspace 不能是空的"
@@ -568,20 +568,20 @@ var PERMISSION_CODES = /* @__PURE__ */ new Set([
 function asRecord$9(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
-function textOf$5(value) {
+function textOf$6(value) {
 	return typeof value === "string" ? value.trim() : "";
 }
 function codeOf(page) {
 	const record = asRecord$9(page);
-	return record === void 0 ? "" : textOf$5(record["code"]);
+	return record === void 0 ? "" : textOf$6(record["code"]);
 }
 function messageOf$2(page) {
 	const record = asRecord$9(page);
-	return record === void 0 ? "" : textOf$5(record["message"]);
+	return record === void 0 ? "" : textOf$6(record["message"]);
 }
 function hintOf$1(page) {
 	const record = asRecord$9(page);
-	const hint = record === void 0 ? "" : textOf$5(record["hint"]);
+	const hint = record === void 0 ? "" : textOf$6(record["hint"]);
 	return hint === "" ? void 0 : hint;
 }
 function pageFailed(page) {
@@ -812,7 +812,7 @@ var DEFAULT_TEXT_MAX = 200;
 function asRecord$8(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
-function textOf$4(value) {
+function textOf$5(value) {
 	return typeof value === "string" ? value.trim() : "";
 }
 function entriesOf(value) {
@@ -825,8 +825,8 @@ function entriesOf(value) {
 		if (item === void 0) continue;
 		const nth = typeof item["nth"] === "number" ? item["nth"] : entries.length;
 		entries.push({
-			text: textOf$4(item["text"]),
-			tag: textOf$4(item["tag"]),
+			text: textOf$5(item["text"]),
+			tag: textOf$5(item["tag"]),
 			nth
 		});
 	}
@@ -835,7 +835,7 @@ function entriesOf(value) {
 function reasonOf(stdout, stderr) {
 	const parsed = asRecord$8(parseJsonLoose(stdout));
 	const error = parsed === void 0 ? void 0 : asRecord$8(parsed["error"]);
-	const message = error === void 0 ? "" : textOf$4(error["message"]);
+	const message = error === void 0 ? "" : textOf$5(error["message"]);
 	if (message !== "") return message;
 	const lines = (stderr.trim() === "" ? stdout : stderr).split("\n").map((one) => one.trim()).filter((one) => one !== "");
 	return (lines[lines.length - 1] ?? "").slice(-200);
@@ -843,7 +843,7 @@ function reasonOf(stdout, stderr) {
 function hintOf(stdout) {
 	const parsed = asRecord$8(parseJsonLoose(stdout));
 	const error = parsed === void 0 ? void 0 : asRecord$8(parsed["error"]);
-	const hint = error === void 0 ? "" : textOf$4(error["hint"]);
+	const hint = error === void 0 ? "" : textOf$5(error["hint"]);
 	return hint === "" ? void 0 : hint;
 }
 function sameOrigin(left, right) {
@@ -857,7 +857,7 @@ function urlOf(stdout) {
 	const bare = (stdout.split("\n").map((one) => one.trim()).filter((one) => one !== "")[0] ?? "").replace(/^url:\s*/i, "").trim().replace(/^["']+|["']+$/g, "");
 	if (bare.startsWith("{")) {
 		const parsed = asRecord$8(parseJsonLoose(bare));
-		const url = parsed === void 0 ? "" : textOf$4(parsed["url"]);
+		const url = parsed === void 0 ? "" : textOf$5(parsed["url"]);
 		if (url !== "") return url;
 	}
 	return bare;
@@ -1872,7 +1872,7 @@ var PLUGIN_LEDGER_FILE = "plugins.json";
 function ledgerKeyOf(entry) {
 	return `${entry.opencliHome}\u0000${entry.package}`;
 }
-function textOf$3(value) {
+function textOf$4(value) {
 	if (typeof value !== "string") return void 0;
 	const trimmed = value.trim();
 	return trimmed === "" ? void 0 : trimmed;
@@ -1880,13 +1880,13 @@ function textOf$3(value) {
 function entryOf(value) {
 	if (typeof value !== "object" || value === null) return void 0;
 	const box = value;
-	const opencliHome = textOf$3(box["opencliHome"]);
-	const pkg = textOf$3(box["package"]);
-	const installedAt = textOf$3(box["installedAt"]);
+	const opencliHome = textOf$4(box["opencliHome"]);
+	const pkg = textOf$4(box["package"]);
+	const installedAt = textOf$4(box["installedAt"]);
 	if (opencliHome === void 0 || pkg === void 0 || installedAt === void 0) return void 0;
-	const name = textOf$3(box["name"]);
-	const registry = textOf$3(box["registry"]);
-	const releasedAt = textOf$3(box["releasedAt"]);
+	const name = textOf$4(box["name"]);
+	const registry = textOf$4(box["registry"]);
+	const releasedAt = textOf$4(box["releasedAt"]);
 	return {
 		opencliHome,
 		package: pkg,
@@ -2456,6 +2456,10 @@ function readBundleManager(ctx) {
 		async remove(name) {
 			return asChange(await face.removeBundle?.(name));
 		},
+		async setEnabled(name, enabled) {
+			if (typeof face.setBundleEnabled !== "function") return null;
+			return asChange(await face.setBundleEnabled(name, enabled));
+		},
 		async cancel(requestId) {
 			if (typeof face.cancelInstall !== "function") return null;
 			return pick(CANCELLATIONS, (asRecord$6(await face.cancelInstall(requestId)) ?? {}).status) ?? null;
@@ -2849,20 +2853,67 @@ var READ_ONLY_ACTIONS = /* @__PURE__ */ new Set([
 	"recon",
 	""
 ]);
+var SPEC_LIMIT = 80;
+function missing(id) {
+	return id === void 0 || id === "";
+}
+function pad(token) {
+	return token.startsWith("[") ? ` ${token} ` : token;
+}
+function workbenchModule(id) {
+	return missing(id) ? {
+		zh: "工作台模块",
+		en: "the workbench module"
+	} : {
+		zh: `工作台${pad(`[${id}]`)}模块`,
+		en: `the workbench [${id}] module`
+	};
+}
+function anyWorkbenchModule(id) {
+	return missing(id) ? {
+		zh: "工作台的一个模块",
+		en: "a workbench module"
+	} : workbenchModule(id);
+}
+function workbenchPlugin(id) {
+	return missing(id) ? {
+		zh: "工作台的 opencli 插件",
+		en: "a workbench opencli plugin"
+	} : {
+		zh: `工作台${pad(`[${id}]`)}opencli 插件`,
+		en: `the workbench [${id}] opencli plugin`
+	};
+}
+function workbenchDependency(id) {
+	return missing(id) ? {
+		zh: "工作台共用依赖",
+		en: "a workbench shared dependency"
+	} : {
+		zh: `工作台共用依赖 [${id}]`,
+		en: `the workbench shared dependency [${id}]`
+	};
+}
+function workbenchPanelRow(id) {
+	return missing(id) ? {
+		zh: "工作台在当前项目的面板",
+		en: "the workbench panel for this project"
+	} : {
+		zh: `工作台${pad(`[${id}]`)}模块这一行`,
+		en: `the workbench [${id}] module row`
+	};
+}
 function actionOf$1(call) {
 	const raw = call.arguments;
 	if (typeof raw !== "object" || raw === null) return {};
 	const value = raw;
 	const target = typeof value.plugin === "string" ? value.plugin : typeof value.name === "string" ? value.name : typeof value.id === "string" ? value.id : typeof value.unit === "string" ? value.unit : void 0;
+	const spec = typeof value.spec === "string" ? value.spec.replace(/\s+/g, " ").trim() : "";
 	return {
 		...typeof value.action === "string" ? { action: value.action } : {},
-		...target === void 0 ? {} : { id: target }
+		...target === void 0 ? {} : { id: target },
+		...spec === "" ? {} : { spec: spec.length > SPEC_LIMIT ? `${spec.slice(0, SPEC_LIMIT)}…` : spec }
 	};
 }
-function whatOf(id) {
-	if (id === void 0 || id === "") return "一个模块";
-	return `「${id}」`;
-}
 function askOf(reason, question, fallback) {
 	return {
 		kind: "ask",
@@ -2872,92 +2923,151 @@ function askOf(reason, question, fallback) {
 	};
 }
 var panelsApproval = (call) => {
-	const { action, id } = actionOf$1(call);
+	const { action, id, spec } = actionOf$1(call);
 	const readAction = action !== void 0 && action !== "" && READ_ONLY_ACTIONS.has(action);
-	const what = whatOf(id);
 	if (call.name === "workbench_modules") {
 		if (readAction) return READ;
 		if (action === "update-plugin" || action === "uninstall-plugin") {
 			const verb = action === "update-plugin" ? "更新" : "卸载";
-			const verbEn = action === "update-plugin" ? "update" : "remove";
+			const verbEn = action === "update-plugin" ? "update" : "uninstall";
+			const target = workbenchPlugin(id);
 			return askOf(`workbench_modules ${action} ${id ?? ""} changes an opencli plugin on this machine`, {
-				en: `it ${verbEn}s that opencli plugin on this machine. Allow?`,
-				zh: `会${verb}这个 opencli 插件。允许吗？`
+				en: `it ${verbEn}s ${target.en}. Allow?`,
+				zh: `会${verb}${target.zh}，允许吗？`
 			}, {
-				en: `The agent wants to ${verbEn} the opencli plugin ${what} (it changes what is installed on this machine). Allow?`,
-				zh: `agent 想${verb} opencli 插件 ${what}（会改这台机器上装的东西）。允许吗？`
+				en: `The agent wants to ${verbEn} ${target.en}. Allow?`,
+				zh: `agent 想${verb}${target.zh}，允许吗？`
 			});
 		}
 		if (action === "update-workbench") return askOf("workbench_modules update-workbench replaces the workbench itself with the new version from the registry", {
-			en: "it updates the workbench itself on this machine (the panel picks the new version up by itself). Allow?",
-			zh: "会把工作台自己更新到源上的新版（面板会自己换新）。允许吗？"
+			en: "it updates the workbench itself to the new version from the registry. Allow?",
+			zh: "会把工作台本身更新到源上的新版，允许吗？"
 		}, {
-			en: "The agent wants to update the workbench itself to the new version from the registry (it changes what is installed on this machine; the panel picks the new version up by itself). Allow?",
-			zh: "agent 想把工作台自己更新到源上的新版（会改这台机器上装的东西，面板会自己换新）。允许吗？"
+			en: "The agent wants to update the workbench itself to the new version from the registry. Allow?",
+			zh: "agent 想把工作台本身更新到源上的新版，允许吗？"
 		});
-		if (action === "update-dependency") return askOf(`workbench_modules update-dependency ${id ?? ""} upgrades a shared dependency on this machine`, {
-			en: "it upgrades that shared dependency on this machine. Allow?",
-			zh: `会升级共用依赖 ${what}。允许吗？`
+		if (action === "update-dependency") {
+			const target = workbenchDependency(id);
+			return askOf(`workbench_modules update-dependency ${id ?? ""} upgrades a shared dependency on this machine`, {
+				en: `it upgrades ${target.en}. Allow?`,
+				zh: `会升级${target.zh}，允许吗？`
+			}, {
+				en: `The agent wants to upgrade ${target.en}. Allow?`,
+				zh: `agent 想升级${target.zh}，允许吗？`
+			});
+		}
+		if (action === "install-bundle" && spec !== void 0) return askOf(`workbench_modules install-bundle ${spec} installs a workbench module from a spec`, {
+			en: `it installs the workbench module from [${spec}]. Allow?`,
+			zh: `会安装工作台模块 [${spec}]，允许吗？`
 		}, {
-			en: `The agent wants to upgrade the shared dependency ${what} (it changes what is installed on this machine). Allow?`,
-			zh: `agent 想升级共用依赖 ${what}（会改这台机器上装的东西）。允许吗？`
+			en: `The agent wants to install the workbench module from [${spec}]. Allow?`,
+			zh: `agent 想安装工作台模块 [${spec}]，允许吗？`
 		});
-		const verb = action === "install" ? "装" : action === "uninstall" ? "卸载" : action === "update" ? "更新" : "装 / 更新 / 卸载";
-		const verbEn = verb === "装" ? "install" : verb === "卸载" ? "remove" : verb === "更新" ? "update" : "install/update/remove";
+		if (action === "install") {
+			const target = workbenchModule(id);
+			return askOf(`workbench_modules install ${id ?? ""} installs a workbench module on this machine`, {
+				en: `it installs ${target.en}. Allow?`,
+				zh: `会安装${target.zh}，允许吗？`
+			}, {
+				en: `The agent wants to install ${target.en}. Allow?`,
+				zh: `agent 想安装${target.zh}，允许吗？`
+			});
+		}
+		if (action === "update") {
+			const target = workbenchModule(id);
+			return askOf(`workbench_modules update ${id ?? ""} updates a workbench module on this machine`, {
+				en: `it updates ${target.en}. Allow?`,
+				zh: `会更新${target.zh}，允许吗？`
+			}, {
+				en: `The agent wants to update ${target.en}. Allow?`,
+				zh: `agent 想更新${target.zh}，允许吗？`
+			});
+		}
+		if (action === "uninstall") {
+			const target = workbenchModule(id);
+			return askOf(`workbench_modules uninstall ${id ?? ""} removes a workbench module from this machine`, {
+				en: `it uninstalls ${target.en}. Allow?`,
+				zh: `会卸载${target.zh}，允许吗？`
+			}, {
+				en: `The agent wants to uninstall ${target.en}. Allow?`,
+				zh: `agent 想卸载${target.zh}，允许吗？`
+			});
+		}
 		return askOf(`workbench_modules ${action ?? "(unknown action)"} ${id ?? ""} changes plugins on this machine`.trim(), {
-			en: "it changes plugins on this machine. Allow?",
-			zh: "会改这台机器上的插件。允许吗？"
+			en: "it changes the plugins installed in the workbench. Allow?",
+			zh: "会改动工作台装的插件，允许吗？"
 		}, {
-			en: `The agent wants to ${verbEn} the module ${what} (it changes plugins on this machine). Allow?`,
-			zh: `agent 想${verb}模块 ${what}（会改这台机器上的插件）。允许吗？`
+			en: "The agent wants to change the plugins installed in the workbench. Allow?",
+			zh: "agent 想改动工作台装的插件，允许吗？"
 		});
 	}
 	if (call.name === "workbench_diy") {
 		if (readAction) return READ;
-		if (action === "open") return askOf("workbench_diy open puts an already-installed module on this project panel", {
-			en: `it puts ${what} on this project's panel (nothing new gets installed on this machine). Allow?`,
-			zh: `会把${what}摆到**这个项目**的面板上（这台机器上不装新东西）。允许吗？`
-		}, {
-			en: `The agent wants to show the module ${what} on this project's panel. Allow?`,
-			zh: `agent 想把${what}显示在**这个项目**的面板上。允许吗？`
-		});
+		if (action === "open") {
+			const target = anyWorkbenchModule(id);
+			return askOf("workbench_diy open puts an already-installed module on this project panel", {
+				en: `it shows ${target.en} on this project's panel. Allow?`,
+				zh: `会把${target.zh}显示在当前项目的面板上，允许吗？`
+			}, {
+				en: `The agent wants to show ${target.en} on this project's panel. Allow?`,
+				zh: `agent 想把${target.zh}显示在当前项目的面板上，允许吗？`
+			});
+		}
+		const target = workbenchModule(id);
 		return askOf(`workbench_diy ${action ?? "(unknown action)"} installs a module built in the workshop and opens it on this project's panel`, {
-			en: `it installs ${what} on this machine and opens it on this project's panel. Allow?`,
-			zh: `会把${what}装到这台机器上，并在**这个项目**的面板上打开。允许吗？`
+			en: `it installs ${target.en} and shows it on this project's panel. Allow?`,
+			zh: `会安装${target.zh}，并显示在当前项目的面板上，允许吗？`
 		}, {
-			en: `The agent wants to install the module ${what} built in the DIY workshop (it changes what is installed on this machine) and open it here. Allow?`,
-			zh: `agent 想把 DIY 工坊里造好的${what}装上（会改这台机器上装的东西），并在**这个项目**的面板上打开。允许吗？`
+			en: `The agent wants to install ${target.en} built in the DIY workshop and show it on this project's panel. Allow?`,
+			zh: `agent 想安装${target.zh}，并显示在当前项目的面板上，允许吗？`
 		});
 	}
 	if (call.name !== "workbench_panels") return void 0;
 	if (readAction) return READ;
-	if (action === "hide") return askOf("workbench_panels hide removes a module from the panel", {
-		en: "it takes that module off this panel (its agent tools go offline here too). Allow?",
-		zh: `${what}会从这个项目的面板上收起来（这个项目里它的 agent 工具也一起下线）。允许吗？`
-	}, {
-		en: `The agent wants to remove ${what} from this project's panel (its agent tools go offline here too). Allow?`,
-		zh: `agent 想把 ${what} 从这个项目的面板上收起来（这个项目里它的 agent 工具也一起下线）。允许吗？`
-	});
-	if (action === "move") return askOf("workbench_panels move reorders the panel", {
-		en: `it reorders this panel (${what} goes first). Allow?`,
-		zh: `会调整这个项目面板的顺序（${what}放前面）。允许吗？`
-	}, {
-		en: `The agent wants to reorder this project's panel (put ${what} first). Allow?`,
-		zh: `agent 想调整这个项目面板的顺序（把 ${what} 放前面）。允许吗？`
-	});
+	if (action === "hide") {
+		const target = anyWorkbenchModule(id);
+		return askOf("workbench_panels hide removes a module from the panel", {
+			en: `it takes ${target.en} off this project's panel. Allow?`,
+			zh: `会把${target.zh}从当前项目的面板上收起来，允许吗？`
+		}, {
+			en: `The agent wants to take ${target.en} off this project's panel. Allow?`,
+			zh: `agent 想把${target.zh}从当前项目的面板上收起来，允许吗？`
+		});
+	}
+	if (action === "move") {
+		const target = anyWorkbenchModule(id);
+		return askOf("workbench_panels move reorders the panel", {
+			en: `it moves ${target.en} to the front of this project's panel. Allow?`,
+			zh: `会把${target.zh}移到当前项目面板的最前面，允许吗？`
+		}, {
+			en: `The agent wants to move ${target.en} to the front of this project's panel. Allow?`,
+			zh: `agent 想把${target.zh}移到当前项目面板的最前面，允许吗？`
+		});
+	}
 	if (action === "reset") return askOf("workbench_panels reset clears the panel", {
-		en: "it clears this panel (every module goes offline here). Allow?",
-		zh: "会清空这个项目的面板（所有模块在这个项目里都下线）。允许吗？"
+		en: `it clears the workbench panel for this project. Allow?`,
+		zh: "会清空工作台在当前项目的面板，允许吗？"
 	}, {
-		en: "The agent wants to clear this project's panel (every module goes offline here). Allow?",
-		zh: "agent 想清空这个项目的面板（所有模块在这个项目里都下线）。允许吗？"
+		en: "The agent wants to clear the workbench panel for this project. Allow?",
+		zh: "agent 想清空工作台在当前项目的面板，允许吗？"
 	});
+	if (action === "follow") {
+		const target = workbenchPanelRow(id);
+		return askOf("workbench_panels follow puts a row back to following the machine-level board", {
+			en: `it puts ${target.en} back to following the machine-level board. Allow?`,
+			zh: `会把${target.zh}改回跟随机器级默认板，允许吗？`
+		}, {
+			en: `The agent wants to put ${target.en} back to following the machine-level board. Allow?`,
+			zh: `agent 想把${target.zh}改回跟随机器级默认板，允许吗？`
+		});
+	}
+	const target = anyWorkbenchModule(id);
 	return askOf(`workbench_panels ${action ?? "(unknown action)"} changes the user's panel`, {
-		en: `it adds ${what} to this project's panel. Allow?`,
-		zh: `会把 ${what} 加到**这个项目**的面板上。允许吗？`
+		en: `it adds ${target.en} to this project's panel. Allow?`,
+		zh: `会把${target.zh}加到当前项目的面板上，允许吗？`
 	}, {
-		en: `The agent wants to add ${what} to this project's panel. Allow?`,
-		zh: `agent 想把 ${what} 加到**这个项目**的面板上。允许吗？`
+		en: `The agent wants to add ${target.en} to this project's panel. Allow?`,
+		zh: `agent 想把${target.zh}加到当前项目的面板上，允许吗？`
 	});
 };
 //#endregion
@@ -3272,7 +3382,7 @@ function reconOf(commands, plugins, keywords) {
 	};
 	return {
 		...withNext,
-		text: textOf$2(withNext)
+		text: textOf$3(withNext)
 	};
 }
 function nextOf(answer) {
@@ -3285,7 +3395,7 @@ function nextOf(answer) {
 	if (plugin !== void 0) return `这台机器另装的插件 ${plugin.name} 里有匹配：opencli ${plugin.name} --help 看全部命令`;
 	return "这台机器上没有现成的 —— 两条路：① 给这个站点写 adapter：opencli skills read opencli-adapter-author；② 只读一次：workbench_diy action=probe（script 读接口 / css 读 DOM）";
 }
-function textOf$2(answer) {
+function textOf$3(answer) {
 	const lines = [];
 	if (answer.sites.length > 0) {
 		lines.push(`opencli 自带这 ${String(answer.sites.length)} 组能力（不用装、不用点头）：`);
@@ -3586,26 +3696,26 @@ function registerDiyTools(ctx, market, panels) {
 	}
 	const tool = {
 		name: "workbench_diy",
-		description: "看 DIY 工坊里的模块现在走到哪一步，或者把它们装上 / 上板。只认工坊里的模块（不是市场 —— 装别的东西用 workbench_modules）。status 会把六件事一次说清（装了没 / 面板认得没 / 这个项目上开着没 / **起得来没** / 产物齐不齐 / 源码是否比产物新）并给出下一步，所以别自己去拼这些状态、也别反复 install。panel 是**面板上现在究竟是什么样**：这个工作区开了哪几张卡、每张最后是读到了还是读不到（带宿主回的原文）、有没有崩过 —— 用户说\"卡片不对 / 一片空白 / 一直转圈\"就先问它，别靠猜、也别让他截图给你。recon 是**先看有没有现成的**：拿一个关键词（站点名 / 系统名 / 域名）去 opencli 自带的那份目录里找，回它有哪些命令、要不要用户的 Chrome 登录；都没有就老实说，并给出\"写 adapter\"或\"探一条读\"两条路。用户不知道 opencli 是什么 —— 这一步别问他，自己查。probe 是**探一条读**：用用户浏览器里现有的登录去读一次，把结果与失败码归一（两拍、重试、平台码映射都在里面），探明之后再把它固化成模块宿主半侧的那一条。两种读法二选一：script（页面里跑一段回 JSON 的脚本，读接口）或 css（给一个选择器，读 DOM 那一行 —— 页面里没有接口时用这个，别写 document.querySelectorAll）。装是这台机器上的持久变更，要用户点头；**一辈子只装一次**：之后改源码只需 dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面），不要再调它。",
+		description: "DIY 工坊里的模块：看它走到哪一步，或把它装上 / 上板。只认工坊里造好的模块 —— 普通项目里装模块用 workbench_modules。status 是入口，照它给的\"下一步\"走。install 是这台机器上的持久变更，一个模块一辈子只装一次：之后改源码只需 dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面）。",
 		parameters: withApprovalNote({
 			type: "object",
 			properties: {
 				action: {
 					type: "string",
-					description: "list=工坊里有哪些模块（默认）；status=某个模块现在走到哪一步、下一步做什么；panel=这个工作区的面板上现在是什么样（谁读到了 / 谁读不到 / 谁崩过）；probe=在用户浏览器里探一条读；recon=先查 opencli 现成的能力（自带 adapter / 本机插件）；open=只把它在这个项目上板（不装）；install=装上并上板（第一次、会让用户点头）。",
+					description: "list=工坊里有哪些模块（默认）；status=某个模块走到哪一步、下一步做什么；panel=面板此刻的真实样子（宿主回的原文都在）—— 用户说\"卡片不对 / 一片空白 / 一直转圈\"就先调它；recon=先查 opencli 有没有现成的（自带 adapter / 本机插件）—— opencli 是什么自己查，别问用户；probe=用用户浏览器里现有的登录探一条读（script 或 css）；open=只上板（不装）；install=装上并上板（第一次，会让用户点头）。",
 					enum: [...ACTIONS$2]
 				},
 				unit: {
 					type: "string",
-					description: "status / panel / open / install 填：工坊里那个模块的单元 id（list 会给）。"
+					description: "status / panel / open / install 填：单元 id（list 会给）。"
 				},
 				script: {
 					type: "string",
-					description: "probe 要（与 css 二选一）：在页面里跑的脚本（必须回 JSON）。不在站点就回 { ok: false, code: \"not-on-site\" }；登录过期回 { ok: false, code: \"not-logged-in\" }；成功回 { ok: true, ...数据 }。"
+					description: "probe 要（与 css 二选一）：读接口用这个 —— 在页面里跑一段回 JSON 的脚本。不在站点就回 { ok: false, code: \"not-on-site\" }；登录过期回 { ok: false, code: \"not-logged-in\" }；成功回 { ok: true, ...数据 }。"
 				},
 				css: {
 					type: "string",
-					description: "probe 要（与 script 二选一）：一个 CSS 选择器，回页面上匹配到的元素（每行的单元格按换行拼在 text 里）。页面里没有接口时用它 —— 走的是一条固定的 DOM 读（找不到会自己打开 url 再读一遍），别写 document.querySelectorAll。"
+					description: "probe 要（与 script 二选一）：读 DOM 用这个 —— 给一个 CSS 选择器，宿主回匹配到的元素文本（每行的单元格按换行拼在 text 里）；不在站点会自己打开 url 再读一遍。"
 				},
 				limit: {
 					type: "number",
@@ -3617,11 +3727,11 @@ function registerDiyTools(ctx, market, panels) {
 				},
 				url: {
 					type: "string",
-					description: "probe / recon 用：那套系统的地址（probe 不在站点上时自己打开它再读一遍；recon 拿它取域名去找现成的 adapter）。"
+					description: "probe / recon 用：那套系统的地址（probe 不在站点上时自己打开它再读一遍；recon 从它取域名）。"
 				},
 				keyword: {
 					type: "string",
-					description: "recon 要：站点名 / 系统名 / 关键词（英文名或域名最准，例：bilibili、arxiv.org、cmdb）。用户说的是\"我想看 X\"，把它翻译成关键词是你的活 —— 别问他用哪个插件。"
+					description: "recon 要：站点名 / 系统名 / 域名（英文名或域名最准，例：bilibili、arxiv.org、cmdb）。"
 				},
 				loginUrl: {
 					type: "string",
@@ -3629,7 +3739,7 @@ function registerDiyTools(ctx, market, panels) {
 				},
 				session: {
 					type: "string",
-					description: "probe 用：浏览器桥上的会话名（默认 workbench，一般不用填）。"
+					description: "probe 用：会话名（默认 workbench，一般不用填）。"
 				},
 				open: {
 					type: "boolean",
@@ -4482,6 +4592,330 @@ async function installRouted(deps) {
 	});
 }
 //#endregion
+//#region src/shared/api/host/runtime-seed.ts
+var WORKSHOP_SKILLS_DIR = "workbench-module-diy";
+function runtimeSeedPaths(root) {
+	const opencliRoot = join(root, "opencli");
+	const opencliBinDir = join(opencliRoot, "bin");
+	const workshop = join(root, "diy");
+	return {
+		root,
+		entryDir: join(root, "bin"),
+		opencliRoot,
+		opencliBinDir,
+		opencliBin: join(opencliBinDir, "opencli"),
+		opencliHome: join(opencliRoot, "home"),
+		workshop,
+		workshopPackages: join(workshop, "packages"),
+		workshopManifest: join(workshop, "package.json"),
+		skillsLink: join(workshop, ".agents", "skills", WORKSHOP_SKILLS_DIR)
+	};
+}
+function runtimeSeedRootOf(ctx) {
+	const homePath = ctx.get("dshHomePath");
+	if (typeof homePath !== "function") return null;
+	try {
+		return homePath("workbench");
+	} catch {
+		return null;
+	}
+}
+function packageRootOf(moduleUrl) {
+	return dirname(dirname(dirname(fileURLToPath(moduleUrl))));
+}
+function isInstalledCopy(packageRoot) {
+	return packageRoot.split(sep).includes("node_modules");
+}
+function opencliWrapperScript(packageRoot, home) {
+	const script = join(packageRoot, "bin", "opencli-isolated");
+	return `#!/bin/sh\nexec env DSH_HOME=${quoteShellArg(home)} bash ${quoteShellArg(script)} "$@"\n`;
+}
+function workshopSeedPlan(packageRoot, home, root) {
+	const script = join(packageRoot, "scripts", "seed-workshop.sh");
+	const env = { DSH_HOME: home };
+	const log = join(root, "seed.log");
+	return {
+		entry: {
+			file: "bash",
+			args: [script, "entry"],
+			env,
+			log
+		},
+		full: {
+			file: "bash",
+			args: [script],
+			env,
+			log
+		}
+	};
+}
+function runDetached(command, onError, spawnImpl = spawn) {
+	let fd = null;
+	try {
+		fd = openSync(command.log, "a");
+		const child = spawnImpl(command.file, [...command.args], {
+			env: {
+				...process.env,
+				...command.env
+			},
+			detached: true,
+			stdio: [
+				"ignore",
+				fd,
+				fd
+			]
+		});
+		child.on("error", (error) => onError(`自举脚本没跑起来（${command.file}）：${String(error)}`));
+		child.unref();
+	} catch (error) {
+		onError(`自举脚本没跑起来（${command.file}）：${String(error)}`);
+	} finally {
+		if (fd !== null) closeQuietly(fd);
+	}
+}
+function closeQuietly(fd) {
+	try {
+		closeSync(fd);
+	} catch {
+		return;
+	}
+}
+function prependPath(entryDir, env = process.env) {
+	const parts = (env.PATH ?? "").split(delimiter).filter((part) => part !== "");
+	if (parts.includes(entryDir)) return false;
+	env.PATH = [entryDir, ...parts].join(delimiter);
+	return true;
+}
+function seedRuntimeFiles(options) {
+	const paths = runtimeSeedPaths(options.root);
+	const done = [];
+	try {
+		for (const dir of [
+			paths.entryDir,
+			paths.opencliBinDir,
+			paths.opencliHome,
+			paths.workshopPackages
+		]) mkdirSync(dir, { recursive: true });
+		const wanted = opencliWrapperScript(options.packageRoot, options.home);
+		if (readText(paths.opencliBin) !== wanted) {
+			rmSync(paths.opencliBin, { force: true });
+			writeFileSync(paths.opencliBin, wanted, "utf8");
+			chmodSync(paths.opencliBin, 493);
+			done.push(paths.opencliBin);
+		}
+		if (linkSkills(paths.skillsLink, join(options.packageRoot, "skills", "workbench-module-diy"), options.log)) done.push(paths.skillsLink);
+	} catch (error) {
+		options.log?.(`自举没做完：${String(error)}`);
+	}
+	return done;
+}
+function readText(file) {
+	try {
+		return readFileSync(file, "utf8");
+	} catch {
+		return null;
+	}
+}
+function readLink(link) {
+	try {
+		return readlinkSync(link);
+	} catch {
+		return null;
+	}
+}
+function linkSkills(link, source, log) {
+	if (!existsSync(source) || readLink(link) === source) return false;
+	try {
+		mkdirSync(dirname(link), { recursive: true });
+		rmSync(link, {
+			force: true,
+			recursive: true
+		});
+		symlinkSync(source, link, "dir");
+		return true;
+	} catch (error) {
+		log?.(`DIY 指引没挂上（${link}）：${String(error)}`);
+		return false;
+	}
+}
+//#endregion
+//#region src/shared/api/host/self-update.ts
+function runningVersionOf(moduleUrl) {
+	try {
+		const read = JSON.parse(readFileSync(new URL("../../package.json", moduleUrl), "utf8"));
+		return typeof read.version === "string" && read.version !== "" ? read.version : void 0;
+	} catch {
+		return;
+	}
+}
+function selfUpdatePaths(dshHome) {
+	const dir = join(dshHome, "workbench");
+	return {
+		dir,
+		script: join(dir, "self-update.sh"),
+		marker: join(dir, "self-update.json"),
+		log: join(dir, "self-update.log")
+	};
+}
+function recoveryCommand(input) {
+	return `dsh plugin --profile ${input.profile} add ${input.pkg}@${input.version}`;
+}
+function selfUpdateMarker(request, state, version, at) {
+	return {
+		...request,
+		state,
+		version,
+		at
+	};
+}
+function quoted(value) {
+	return `'${value.replaceAll("'", "'\\''")}'`;
+}
+function selfUpdateScript(request, paths) {
+	const rescue = recoveryCommand({
+		profile: request.profile,
+		pkg: request.pkg,
+		version: request.from
+	});
+	const lastsOne = recoveryCommand({
+		profile: request.profile,
+		pkg: request.pkg,
+		version: request.to === "" ? "latest" : request.to
+	});
+	const target = request.to === "" ? "latest" : request.to;
+	const landed = request.to === "" ? "is_other" : "is_to";
+	return `#!/usr/bin/env bash
+set -uo pipefail
+DSH_HOME=${quoted(request.dshHome)}
+PKG=${quoted(request.pkg)}
+PROFILE=${quoted(request.profile)}
+FROM=${quoted(request.from)}
+TO=${quoted(target)}
+MARKER=${quoted(paths.marker)}
+LOG=${quoted(paths.log)}
+PROFILE_DIR="$DSH_HOME/profiles/$PROFILE"
+say() { printf '%s %s\\n' "$(date '+%F %T')" "$*" >>"$LOG"; }
+on_disk() {
+  node -e 'const p=process.argv[1];try{process.stdout.write(require(p).version)}catch(e){}' \\
+    "$PROFILE_DIR/node_modules/$PKG/package.json" 2>/dev/null
+}
+write_marker() {
+  printf '{"pkg":"%s","profile":"%s","from":"%s","to":"%s","state":"%s","version":"%s","at":"%s"}\\n' \\
+    "$PKG" "$PROFILE" "$FROM" "$TO" "$1" "$2" "$(date -u '+%FT%TZ')" >"$MARKER"
+}
+install() { dsh plugin --profile "$PROFILE" add "$PKG@$1" >>"$LOG" 2>&1; }
+is_to() { [ "$(on_disk)" = "$TO" ]; }
+is_other() { [ -n "$(on_disk)" ] && [ "$(on_disk)" != "$FROM" ]; }
+if ! command -v dsh >/dev/null 2>&1; then
+  say "PATH 上没有 dsh —— 这一跳没跑。救法：${rescue}"
+  write_marker failed "$FROM"
+  exit 1
+fi
+say "开始 \${FROM} -> \${TO}（不卸任何一行）"
+write_marker running "$FROM"
+if install "$TO" && ${landed}; then
+  say "换好了：$(on_disk) 在盘上（目标 \${TO}），重启一次 dsh 才用得上"
+  write_marker ok "$(on_disk)"
+  exit 0
+fi
+say "换版没成（盘上 $(on_disk)）—— 把 \${FROM} 装回去"
+if install "$FROM" && [ "$(on_disk)" = "$FROM" ]; then
+  say "已回滚：\${FROM} 还在盘上，工作台这一行没被动过"
+  write_marker rolled-back "$FROM"
+  exit 0
+fi
+say "回滚也没成。救法：${rescue}（或 ${lastsOne}）"
+write_marker failed "$(on_disk)"
+exit 1
+`;
+}
+function planSelfUpdate(request, now = /* @__PURE__ */ new Date()) {
+	const paths = selfUpdatePaths(request.dshHome);
+	return {
+		paths,
+		script: selfUpdateScript(request, paths),
+		marker: selfUpdateMarker(request, "running", request.from, now.toISOString()),
+		command: {
+			file: "bash",
+			args: [paths.script],
+			env: {},
+			log: paths.log
+		}
+	};
+}
+function startSelfUpdate(request, onError, spawnImpl = spawn) {
+	const plan = planSelfUpdate(request);
+	mkdirSync(plan.paths.dir, { recursive: true });
+	writeFileSync(plan.paths.script, plan.script, { mode: 493 });
+	chmodSync(plan.paths.script, 493);
+	writeFileSync(plan.paths.marker, `${JSON.stringify(plan.marker)}\n`);
+	runDetached(plan.command, onError, spawnImpl);
+	const forward = recoveryCommand({
+		profile: request.profile,
+		pkg: request.pkg,
+		version: request.to === "" ? "latest" : request.to
+	});
+	return {
+		started: true,
+		paths: plan.paths,
+		forward
+	};
+}
+//#endregion
+//#region src/modules/panels/model/market-workbench-update.ts
+async function updateWorkbenchOnce(deps) {
+	const asked = deps.asked.trim();
+	const target = asked === "" ? PLUGIN_ID : asked;
+	if (target !== "@dsh-workbench/core") throw new Error(`这条路只更新工作台自己那一份（${PLUGIN_ID}）：${target}`);
+	const read = deps.workbench?.(target);
+	if (read === void 0) throw new Error(`读不到 profile 里装的 ${target} —— 没法判断装的是哪一份，更新做不了。`);
+	if (read.local === true) throw new Error("这份工作台是从本仓装进来的（开发副本），不从源上更新。");
+	const shell = deps.shell;
+	const registry = read.registry ?? await deps.profileRegistry?.();
+	const askedLatest = shell === void 0 || registry === void 0 ? void 0 : await latestVersion({
+		shell,
+		name: read.pkg,
+		registry,
+		force: true
+	});
+	if (shell !== void 0 && registry !== void 0 && askedLatest !== void 0) {
+		const missing = await missingReleaseParts({
+			shell,
+			registry,
+			version: askedLatest,
+			force: true
+		});
+		if (missing.length > 0) throw new Error(`源上已经有 ${read.pkg}@${askedLatest}，但这一份发布还没铺齐：${missing.join("、")} 在这一版上还拉不到。装上会缺依赖，稍等再试 —— 市场页那颗「重新检查」会重新探一次。`);
+	}
+	const home = deps.dshHome?.();
+	const profile = deps.profileName?.();
+	if (home === void 0 || profile === void 0 || profile === null) throw new Error("拿不到 DSH_HOME 或 profile 名字 —— 自更新要多一个进程在外头跑，这一步做不了。");
+	const spec = askedLatest === void 0 ? `${read.pkg}@latest` : `${read.pkg}@${askedLatest}`;
+	const started = (deps.selfUpdate ?? startSelfUpdate)({
+		dshHome: home,
+		profile,
+		pkg: read.pkg,
+		from: read.version,
+		to: askedLatest ?? "",
+		pinned: askedLatest !== void 0
+	}, (message) => deps.logger?.warn?.(`[dsh-workbench] ${message}`));
+	deps.logger?.info?.(`[dsh-workbench] 自更新交给外部执行器（${started.paths.script}）：${read.version} → ${askedLatest ?? "最新版"}，这一跳不掉自己那一行`);
+	return {
+		change: {
+			application: "restart-required",
+			stage: "install",
+			changed: false,
+			target: spec,
+			bundle: read.pkg
+		},
+		module: deps.installed?.(read.pkg) ?? {
+			kind: "unknown",
+			pkg: read.pkg
+		},
+		supply: { state: "no-needs" }
+	};
+}
+//#endregion
 //#region src/modules/panels/model/plugin-actions.ts
 function pluginKeptOf(retention, detail) {
 	if (retention === "keep-held") return { kind: "held" };
@@ -4722,7 +5156,7 @@ async function retryAfterRegistryFix(deps, manager, pkg, change) {
 //#endregion
 //#region src/modules/panels/model/market.ts
 function createMarketService(options) {
-	const { manifests, manifestsNow, probe, shell, logger, onInstalled, onUninstalled, isReleased, bundles, installed, modules, workbench, registries, ledger, references } = options;
+	const { manifests, manifestsNow, probe, shell, logger, onInstalled, onUninstalled, isReleased, bundles, installed, modules, workbench, registries, ledger, references, dshHome, profileName } = options;
 	const command = options.command ?? "opencli";
 	const catalog = () => manifestsNow?.() ?? manifests;
 	function requireEntry(unit) {
@@ -4874,7 +5308,11 @@ function createMarketService(options) {
 	async function removeInstalledBundle(manager, pkg) {
 		const first = await manager.remove(pkg);
 		if (first === null) throw new Error("插件管理器回的卸载结果看不懂。");
-		return retryAfterRegistryFix(registryFix, manager, pkg, first);
+		const settled = await retryAfterRegistryFix(registryFix, manager, pkg, first);
+		if (settled.application !== "failed" && settled.application !== "cancelled") return settled;
+		const put = await manager.setEnabled?.(pkg, true);
+		logger?.warn?.(`[dsh-workbench] ${pkg} 没卸成（${settled.errorCode ?? settled.application}）—— 已把它那一行放回名单，别让一次失败留在"装着但关着"`);
+		return put ?? settled;
 	}
 	function routeDeps(manager) {
 		return {
@@ -5065,31 +5503,23 @@ function createMarketService(options) {
 			return outcome;
 		},
 		async updateWorkbench(pkg) {
-			const target = pkg.trim() === "" ? PLUGIN_ID : pkg.trim();
-			if (target !== "@dsh-workbench/core") throw new Error(`这条路只更新工作台自己那一份（${PLUGIN_ID}）：${target}`);
-			const read = workbench?.(target);
-			if (read === void 0) throw new Error(`读不到 profile 里装的 ${target} —— 没法判断装的是哪一份，更新做不了。`);
-			if (read.local === true) throw new Error("这份工作台是从本仓装进来的（开发副本），不从源上更新。");
-			const registry = read.registry;
-			const latest = shell === void 0 || registry === void 0 ? void 0 : await latestVersion({
-				shell,
-				name: read.pkg,
-				registry,
-				force: true
+			return updateWorkbenchOnce({
+				asked: pkg,
+				...workbench === void 0 ? {} : { workbench },
+				...shell === void 0 ? {} : { shell },
+				...installed === void 0 ? {} : { installed },
+				...dshHome === void 0 ? {} : { dshHome },
+				...profileName === void 0 ? {} : { profileName },
+				profileRegistry: async () => {
+					try {
+						return (await requireBundles().registries())?.resolved ?? void 0;
+					} catch {
+						return;
+					}
+				},
+				...options.selfUpdate === void 0 ? {} : { selfUpdate: options.selfUpdate },
+				...logger === void 0 ? {} : { logger }
 			});
-			if (shell !== void 0 && registry !== void 0 && latest !== void 0) {
-				const missing = await missingReleaseParts({
-					shell,
-					registry,
-					version: latest,
-					force: true
-				});
-				if (missing.length > 0) throw new Error(`源上已经有 ${read.pkg}@${latest}，但这一份发布还没铺齐：${missing.join("、")} 在这一版上还拉不到。装上会缺依赖，稍等再试 —— 市场页那颗「重新检查」会重新探一次。`);
-			}
-			const spec = latest === void 0 ? `${read.pkg}@latest` : `${read.pkg}@${latest}`;
-			const outcome = await replaceDshBundle(routeDeps(requireBundles()), spec, { ...registry === void 0 ? {} : { registry } });
-			logger?.info?.(`[dsh-workbench] 已更新工作台 ${read.version} → ${latest ?? "最新版"}`);
-			return outcome;
 		},
 		async updatePlugin(pkg) {
 			const outcome = await plugins.update(pkg);
@@ -5293,30 +5723,30 @@ function registerMarketTools(ctx, market) {
 	}
 	const tool = {
 		name: "workbench_modules",
-		description: "看 / 装 / 升 / 卸工作台的面板模块，以及用户自己装的 opencli 插件。install-bundle 按 spec（包名，可带版本；git / tarball / 本地路径也行）把模块包装进 profile —— 装完会连带装它声明的 opencli 插件；其余 action 按模块 id 动它要的外部供给；update-workbench 把工作台自己更新到源上的新版（客户端与宿主一般会自己换上；真要重启时结果里会说，重启由用户来，别自己重启）。卸载只动工作台运行时，不影响终端那套；共用依赖只有升级。",
+		description: "看 / 装 / 升 / 卸工作台的面板模块，以及用户自己装的 opencli 插件。install-bundle 按 spec 把模块包装进 profile；按模块 id 的 install / update 只装、升它声明的那份外部供给（opencli 插件与库），不换模块包本身；uninstall 连模块包一起卸。update-workbench 把工作台自己更新到源上的新版（一般自己换上，要重启时结果里会说；重启由用户来）。卸模块只动工作台运行时，不影响终端那套 dsh；共用依赖只有升级。",
 		parameters: withApprovalNote({
 			type: "object",
 			properties: {
 				action: {
 					type: "string",
-					description: "install-bundle=按 spec 装模块包（要 spec），update-dependency=升级共用依赖（要 id），update-plugin / uninstall-plugin=动用户自己装的 opencli 插件（要 plugin），update-workbench=把工作台自己更新到新版（不用别的参数），其余=对模块（要 id）。",
+					description: "list=看状态（默认）；install / update / uninstall 要 id；install-bundle 要 spec（换源给 registry）；update-dependency 要 id；update-plugin / uninstall-plugin 要 plugin。",
 					enum: [...ACTIONS$1]
 				},
 				id: {
 					type: "string",
-					description: "模块 id（如 coding-issues）；update-dependency 填共用依赖 id（如 plugin:coding）。"
+					description: "模块 id（如 coding-issues）；update-dependency 用共用依赖 id（如 plugin:coding）。"
 				},
 				spec: {
 					type: "string",
-					description: "install-bundle 用：包名（可带 @版本），也可以是 git 地址 / tarball / 本地绝对路径。"
+					description: "包名（可带 @版本），也可以是 git 地址 / tarball / 本地绝对路径。"
 				},
 				registry: {
 					type: "string",
-					description: "install-bundle 用：先问哪个源（不填就用这个 profile 自己配的源）。"
+					description: "去哪个源装（不填就用这份 profile 自己配的源）。"
 				},
 				plugin: {
 					type: "string",
-					description: "update-plugin / uninstall-plugin 用：opencli 插件的包名或插件名（就是市场「已安装 opencli 插件」那一段里的名字，如 cmdb 或 opencli-plugin-cmdb）。"
+					description: "opencli 插件的包名或插件名（如 cmdb 或 opencli-plugin-cmdb）。"
 				}
 			},
 			required: ["action"],
@@ -5466,16 +5896,16 @@ function applyPanelsPref(panels, payload) {
 //#region src/modules/panels/model/handoff.ts
 var PANELS_FACT = "panels";
 var CAPABILITY_FACT = "capability";
-function textOf$1(value) {
+function textOf$2(value) {
 	return typeof value === "string" ? value.trim() : "";
 }
 function actionOf(call) {
-	return textOf$1(call.args["action"]) || "list";
+	return textOf$2(call.args["action"]) || "list";
 }
 function requestOf(call) {
 	const action = actionOf(call);
 	if (!PROVISION_ACTIONS.includes(action)) return void 0;
-	const target = textOf$1(call.args["unit"]) || textOf$1(call.args["id"]);
+	const target = textOf$2(call.args["unit"]) || textOf$2(call.args["id"]);
 	if (target === "") return void 0;
 	const wanted = action;
 	return isDependencyAction(wanted) ? {
@@ -5487,7 +5917,7 @@ function requestOf(call) {
 	};
 }
 function panelsHandoffEntry(target = {}) {
-	const path = textOf$1(target.path);
+	const path = textOf$2(target.path);
 	return path === "" ? void 0 : {
 		fact: PANELS_FACT,
 		key: `path:${path}`
@@ -5872,13 +6302,13 @@ function registerPanelTools(ctx, panels, values) {
 	}
 	const tool = {
 		name: "workbench_panels",
-		description: "看或调右侧面板：启用哪些套件、什么顺序。启用/收起 = 卡片与 agent 工具一起上下线（别的项目不受影响，不删数据）。收起是\"这个工作区明确不要它\"，连那些在机器级默认板上开着的套件也照样在这个工作区收起来，之后 show 能放回来。顺序只属于工作区：没排过的按各模块自己声明的次序（开着的在前、关着的跟在后面）；show 或 move 过就以那次为准。机器级默认板只回答\"默认开哪几行\"，没有顺序这一说。scope=machine 动的是\"机器级默认板\" —— 它只是还没配过的工作区的默认值，已经自己配过的工作区保持自己的选择，不会被它改。在那份板上 hide = 明确写下\"不要它\"，这一笔比名单更管用：名单里还列着它也算不要，没提过它的工作区因此看不到它；show 会把这笔划掉、把它放回去。本工作区那份板只记**改过的那几行**（逐行覆盖）：没提到的行跟着机器级默认板走，所以那份板以后改了，没改过的工作区会跟着变。",
+		description: "看或调右侧面板：哪些套件开着、什么顺序。两份板：本工作区那份优先，没提过的行看机器级默认板 —— 那只是还没配过的工作区的默认值（已经自己配过的工作区保持自己的选择）；本工作区只记改过的那几行，所以那份板以后改了，没改过的工作区跟着变。收起 = 这个工作区明确不要它：卡片与 agent 工具一起在这个工作区下线，连机器级默认板上开着的套件也照样收起；别的项目不受影响、不删数据，要放回来用 show。在机器级默认板上 hide 是写下\"不要它\"这一笔 —— 比名单更管用，show 会把这一笔划掉。顺序只属于工作区：没排过的按各模块自己声明的次序（开着的在前、关着的在后），show 或 move 过就以那次为准。",
 		parameters: withApprovalNote({
 			type: "object",
 			properties: {
 				action: {
 					type: "string",
-					description: "show=这个工作区要它（之前收起的也放回来）；hide=这个工作区明确不要它（卡片与工具一起下线，默认在机器上也开着的套件同样收起，别的项目不受影响）；move=调这个工作区的顺序（新开一行时它排在最后）；reset=清掉这个工作区改过的那些行（改完就全部回到跟着机器级默认板走）；follow=把某一行放回跟随（带 id = 只放回那一行；不带 id = 全部放回）。",
+					description: "list=看现在这份板（默认）；show=这个工作区要它（之前收起的也放回来）；hide=这个工作区明确不要它；move=调顺序（新开一行时排最后）；reset=清掉这个工作区改过的行（改完全部回到跟着机器级默认板走）；follow=某一行放回跟随（带 id = 只那一行，不带 = 全部）。",
 					enum: [
 						"list",
 						"show",
@@ -5890,7 +6320,7 @@ function registerPanelTools(ctx, panels, values) {
 				},
 				id: {
 					type: "string",
-					description: "show / hide / move 必填；follow 可选（带 id = 只把那一行放回跟随）。"
+					description: "show / hide / move 必填：要动的套件 id。"
 				},
 				index: {
 					type: "integer",
@@ -5898,7 +6328,7 @@ function registerPanelTools(ctx, panels, values) {
 				},
 				scope: {
 					type: "string",
-					description: "workspace（默认）=只动当前工作区；machine=动机器级默认板，那是还没配过的工作区的默认值 —— 已经自己配过的工作区保持自己的选择，不受它影响。机器级板没有顺序这一说（move 会报错）。",
+					description: "workspace（默认）=只动当前工作区；machine=动那份机器级默认板（只影响还没配过的工作区；没有顺序一说，move 会报错）。",
 					enum: ["workspace", "machine"]
 				}
 			},
@@ -6034,6 +6464,8 @@ var OWNED = [{
 				panels.accept(unit);
 			},
 			isReleased: (unit) => panels.isReleased(unit),
+			dshHome: () => dshHome(),
+			profileName: () => profileDir === null ? null : basename(profileDir),
 			logger
 		});
 		return {
@@ -6077,151 +6509,307 @@ function assembleHostUnits(registry) {
 	for (const face of OWNED) registry.registerOwned(face);
 }
 //#endregion
-//#region src/shared/api/host/runtime-seed.ts
-var WORKSHOP_SKILLS_DIR = "workbench-module-diy";
-function runtimeSeedPaths(root) {
-	const opencliRoot = join(root, "opencli");
-	const opencliBinDir = join(opencliRoot, "bin");
-	const workshop = join(root, "diy");
+//#region src/shared/api/host/unit-readiness.ts
+function unitReadiness(manifest, lookup) {
+	const missingHard = manifest.host.inject.filter((name) => lookup(name) === void 0);
+	const missingSoft = (manifest.host.optional ?? []).filter((name) => lookup(name) === void 0);
 	return {
-		root,
-		entryDir: join(root, "bin"),
-		opencliRoot,
-		opencliBinDir,
-		opencliBin: join(opencliBinDir, "opencli"),
-		opencliHome: join(opencliRoot, "home"),
-		workshop,
-		workshopPackages: join(workshop, "packages"),
-		workshopManifest: join(workshop, "package.json"),
-		skillsLink: join(workshop, ".agents", "skills", WORKSHOP_SKILLS_DIR)
+		canMount: missingHard.length === 0,
+		missingHard,
+		missingSoft
 	};
 }
-function runtimeSeedRootOf(ctx) {
-	const homePath = ctx.get("dshHomePath");
-	if (typeof homePath !== "function") return null;
-	try {
-		return homePath("workbench");
-	} catch {
-		return null;
-	}
-}
-function packageRootOf(moduleUrl) {
-	return dirname(dirname(dirname(fileURLToPath(moduleUrl))));
-}
-function isInstalledCopy(packageRoot) {
-	return packageRoot.split(sep).includes("node_modules");
-}
-function opencliWrapperScript(packageRoot, home) {
-	const script = join(packageRoot, "bin", "opencli-isolated");
-	return `#!/bin/sh\nexec env DSH_HOME=${quoteShellArg(home)} bash ${quoteShellArg(script)} "$@"\n`;
-}
-function workshopSeedPlan(packageRoot, home, root) {
-	const script = join(packageRoot, "scripts", "seed-workshop.sh");
-	const env = { DSH_HOME: home };
-	const log = join(root, "seed.log");
+//#endregion
+//#region src/shared/api/host/mount-units.ts
+function withRunsRoute(result, unit) {
+	const runs = result.longTasks;
+	if (runs === void 0) return result;
 	return {
-		entry: {
-			file: "bash",
-			args: [script, "entry"],
-			env,
-			log
-		},
-		full: {
-			file: "bash",
-			args: [script],
-			env,
-			log
+		...result,
+		routes: {
+			...result.routes,
+			[runsRouteOf(unit)]: (search) => {
+				const path = (param(search, "path") ?? "").trim();
+				return {
+					ok: true,
+					runs: path === "" ? [] : runs.current(path)
+				};
+			}
 		}
 	};
 }
-function runDetached(command, onError, spawnImpl = spawn) {
-	let fd = null;
-	try {
-		fd = openSync(command.log, "a");
-		const child = spawnImpl(command.file, [...command.args], {
-			env: {
-				...process.env,
-				...command.env
-			},
-			detached: true,
-			stdio: [
-				"ignore",
-				fd,
-				fd
-			]
+function notedRegistry(registry, writesOf) {
+	return { register(definition) {
+		if (!writesOf(definition.name)) return registry.register(definition);
+		const noted = withApprovalNote(definition.parameters, { required: true });
+		return registry.register(noted === definition.parameters ? definition : {
+			...definition,
+			parameters: noted
 		});
-		child.on("error", (error) => onError(`自举脚本没跑起来（${command.file}）：${String(error)}`));
-		child.unref();
-	} catch (error) {
-		onError(`自举脚本没跑起来（${command.file}）：${String(error)}`);
-	} finally {
-		if (fd !== null) closeQuietly(fd);
-	}
+	} };
 }
-function closeQuietly(fd) {
-	try {
-		closeSync(fd);
-	} catch {
-		return;
-	}
+function scopedMountCtx(ctx, registry, writesOf) {
+	const tools = notedRegistry(registry, writesOf);
+	const get = (name) => {
+		const value = ctx.get(name);
+		return name === "tools" && value !== void 0 ? tools : value;
+	};
+	return new Proxy(ctx, { get(target, key) {
+		if (key === "get") return get;
+		const value = Reflect.get(target, key, target);
+		return typeof value === "function" ? value.bind(target) : value;
+	} });
 }
-function prependPath(entryDir, env = process.env) {
-	const parts = (env.PATH ?? "").split(delimiter).filter((part) => part !== "");
-	if (parts.includes(entryDir)) return false;
-	env.PATH = [entryDir, ...parts].join(delimiter);
-	return true;
+function failureReasonOf(error) {
+	if (error instanceof Error) return error.message;
+	return typeof error === "string" ? error : String(error);
 }
-function seedRuntimeFiles(options) {
-	const paths = runtimeSeedPaths(options.root);
-	const done = [];
-	try {
-		for (const dir of [
-			paths.entryDir,
-			paths.opencliBinDir,
-			paths.opencliHome,
-			paths.workshopPackages
-		]) mkdirSync(dir, { recursive: true });
-		const wanted = opencliWrapperScript(options.packageRoot, options.home);
-		if (readText(paths.opencliBin) !== wanted) {
-			rmSync(paths.opencliBin, { force: true });
-			writeFileSync(paths.opencliBin, wanted, "utf8");
-			chmodSync(paths.opencliBin, 493);
-			done.push(paths.opencliBin);
+function fail(ledger, item, reason) {
+	ledger.failed.add(item);
+	ledger.failures.push({
+		id: item.host.manifest.id,
+		reason
+	});
+}
+function collectRoutes(mounted, ledger) {
+	const routes = {};
+	const owner = /* @__PURE__ */ new Map();
+	const routesOfUnit = /* @__PURE__ */ new Map();
+	for (const item of mounted) {
+		if (ledger.failed.has(item)) continue;
+		const unit = item.host.manifest.id;
+		const accepted = [];
+		let problem;
+		for (const [key, handler] of Object.entries(item.result.routes)) {
+			if (key !== unit && !key.startsWith(`${unit}/`)) {
+				problem = `路由名要住在自己那一格的命名空间里（${unit} 或 ${unit}/…）：${key} 不属于 ${unit} —— 装 / 升 / 卸时点名不到它，那个模块的数据会停在旧值`;
+				break;
+			}
+			const previous = owner.get(key);
+			if (previous !== void 0) {
+				problem = `路由名冲突：${key} 由套件 ${previous} 与 ${unit} 同时声明`;
+				break;
+			}
+			accepted.push([key, handler]);
+		}
+		if (problem !== void 0) {
+			fail(ledger, item, problem);
+			continue;
+		}
+		for (const [key, handler] of accepted) {
+			owner.set(key, unit);
+			routes[key] = handler;
+			const own = routesOfUnit.get(unit);
+			if (own === void 0) routesOfUnit.set(unit, [key]);
+			else own.push(key);
 		}
-		if (linkSkills(paths.skillsLink, join(options.packageRoot, "skills", "workbench-module-diy"), options.log)) done.push(paths.skillsLink);
-	} catch (error) {
-		options.log?.(`自举没做完：${String(error)}`);
 	}
-	return done;
+	return {
+		routes,
+		owners: owner,
+		routesOfUnit
+	};
 }
-function readText(file) {
-	try {
-		return readFileSync(file, "utf8");
-	} catch {
-		return null;
+function collectNamed(mounted, ledger, pickMany, label) {
+	const owner = /* @__PURE__ */ new Map();
+	const out = [];
+	for (const item of mounted) {
+		if (ledger.failed.has(item)) continue;
+		const unit = item.host.manifest.id;
+		const entries = pickMany(item);
+		if (entries.length === 0) continue;
+		const clash = entries.find((entry) => owner.has(entry.resource));
+		if (clash !== void 0) {
+			fail(ledger, item, `${label}名冲突：${clash.resource} 由套件 ${owner.get(clash.resource)} 与 ${unit} 同时声明`);
+			continue;
+		}
+		for (const entry of entries) {
+			owner.set(entry.resource, unit);
+			out.push({
+				...entry,
+				unit
+			});
+		}
 	}
+	return out;
 }
-function readLink(link) {
-	try {
-		return readlinkSync(link);
-	} catch {
-		return null;
+function collectContextRenderers(mounted, ledger) {
+	const table = /* @__PURE__ */ new Map();
+	const owner = /* @__PURE__ */ new Map();
+	for (const item of mounted) {
+		if (ledger.failed.has(item)) continue;
+		const unit = item.host.manifest.id;
+		const context = item.result.context;
+		if (context === void 0) continue;
+		const clash = context.kinds.find((kind) => owner.has(kind));
+		if (clash !== void 0) {
+			fail(ledger, item, `对话引用的 kind 冲突：${clash} 由套件 ${owner.get(clash)} 与 ${unit} 同时认领`);
+			continue;
+		}
+		for (const kind of context.kinds) {
+			owner.set(kind, unit);
+			table.set(kind, (ref) => context.render(ref));
+		}
 	}
+	return table;
 }
-function linkSkills(link, source, log) {
-	if (!existsSync(source) || readLink(link) === source) return false;
-	try {
-		mkdirSync(dirname(link), { recursive: true });
-		rmSync(link, {
-			force: true,
-			recursive: true
-		});
-		symlinkSync(source, link, "dir");
-		return true;
-	} catch (error) {
-		log?.(`DIY 指引没挂上（${link}）：${String(error)}`);
-		return false;
+function pickProvider(mounted, ledger, pick, label) {
+	let chosen;
+	let chosenBy;
+	for (const item of mounted) {
+		if (ledger.failed.has(item)) continue;
+		const value = pick(item);
+		if (value === void 0) continue;
+		if (chosen === void 0) {
+			chosen = value;
+			chosenBy = item.host.manifest.id;
+			continue;
+		}
+		fail(ledger, item, `${label}只能有一个提供者，现在是：${chosenBy}、${item.host.manifest.id}`);
+	}
+	return chosen;
+}
+function collectWarmReads(mounted) {
+	const declarations = mounted.map((item) => item.result.warmReads).filter((declare) => declare !== void 0);
+	return () => {
+		const seen = /* @__PURE__ */ new Set();
+		const reads = [];
+		for (const read of declarations.flatMap((declare) => declare())) {
+			const key = read.join(" ");
+			if (seen.has(key)) continue;
+			seen.add(key);
+			reads.push(read);
+		}
+		return reads;
+	};
+}
+function mountUnits(units, deps) {
+	const store = deps.store ?? createWorkspaceStore({ root: null });
+	const ownedUnits = deps.ownedUnits ?? (() => []);
+	const mounted = [];
+	const skipped = [];
+	const longTaskDisposers = /* @__PURE__ */ new Map();
+	const ledger = {
+		failed: /* @__PURE__ */ new Set(),
+		failures: []
+	};
+	for (const host of units) {
+		const readiness = unitReadiness(host.manifest, (dep) => deps.ctx.get(dep));
+		if (!readiness.canMount) {
+			skipped.push({
+				id: host.manifest.id,
+				missing: readiness.missingHard
+			});
+			continue;
+		}
+		const unit = host.manifest.id;
+		const tools = deps.ctx.get("tools");
+		const writes = toolUnits(deps.manifests());
+		const mountCtx = tools === void 0 ? deps.ctx : scopedMountCtx(deps.ctx, tools, (name) => writes.get(name)?.writes === true);
+		const longTasks = deps.longTasks === void 0 ? void 0 : createLongTaskHost({
+			scope: deps.longTasks.scope,
+			unit,
+			bump: deps.longTasks.bump
+		});
+		let result;
+		try {
+			result = host.face.mount({
+				manifest: host.manifest,
+				ctx: mountCtx,
+				logger: deps.logger,
+				manifests: deps.manifests,
+				ownedUnits,
+				...deps.installable === void 0 ? {} : { installable: deps.installable },
+				...deps.opencliCommand === void 0 ? {} : { opencliCommand: deps.opencliCommand },
+				...deps.probe === void 0 ? {} : { probe: deps.probe },
+				...deps.values === void 0 ? {} : { values: deps.values },
+				...longTasks === void 0 ? {} : { longTasks: longTasks.host },
+				store
+			});
+		} catch (error) {
+			longTasks?.dispose();
+			ledger.failures.push({
+				id: unit,
+				reason: failureReasonOf(error)
+			});
+			continue;
+		}
+		const item = {
+			host,
+			readiness,
+			result: withRunsRoute(result, unit)
+		};
+		mounted.push(item);
+		if (longTasks !== void 0) longTaskDisposers.set(item, longTasks.dispose);
+	}
+	const collected = collectRoutes(mounted, ledger);
+	const prefs = collectNamed(mounted, ledger, (item) => item.result.prefs === void 0 ? [] : [item.result.prefs], "偏好资源");
+	const actions = collectNamed(mounted, ledger, (item) => item.result.actions ?? [], "动作资源");
+	const owners = new Map(collected.owners);
+	for (const entry of [...prefs, ...actions]) owners.set(entry.resource, entry.unit);
+	const factsOf = /* @__PURE__ */ new Map();
+	for (const item of mounted) {
+		if (ledger.failed.has(item)) continue;
+		const declare = item.result.factsOf;
+		if (declare !== void 0) factsOf.set(item.host.manifest.id, declare);
+	}
+	const gate = pickProvider(mounted, ledger, (item) => item.result.gate, "启停闸门");
+	const provision = pickProvider(mounted, ledger, (item) => item.result.provision, "机器供给");
+	const contextRenderers = collectContextRenderers(mounted, ledger);
+	const alive = mounted.filter((item) => !ledger.failed.has(item));
+	for (const item of mounted) {
+		if (!ledger.failed.has(item)) continue;
+		longTaskDisposers.get(item)?.();
+		longTaskDisposers.delete(item);
 	}
+	return {
+		mounted: alive,
+		routes: collected.routes,
+		owners,
+		routesOfUnit: collected.routesOfUnit,
+		factsOf,
+		gate,
+		prefs,
+		actions,
+		provision,
+		contextRenderers,
+		skipped,
+		failed: ledger.failures,
+		warmReads: collectWarmReads(alive),
+		disposeLongTasks: () => {
+			for (const dispose of [...longTaskDisposers.values()]) dispose();
+			longTaskDisposers.clear();
+		}
+	};
+}
+//#endregion
+//#region src/shared/api/host/post-channels.ts
+function createPostChannels(deps) {
+	const { ctx, mounted, facts, shellActions } = deps;
+	let undo = [];
+	const bind = (prefix, register) => {
+		try {
+			undo.push(register());
+		} catch (error) {
+			ctx.logger?.warn?.(`[dsh-workbench] ${prefix} 这条写通道没接上：${failureReasonOf(error)}`);
+		}
+	};
+	return {
+		rebind(wrote) {
+			for (const dispose of undo.reverse()) dispose?.();
+			undo = [];
+			const prefs = [...mounted.values()].flatMap((item) => item.plan.prefs);
+			const actions = [...shellActions, ...[...mounted.values()].flatMap((item) => item.plan.actions)];
+			const provision = [...mounted.values()].find((item) => item.plan.provision !== void 0)?.plan.provision;
+			if (prefs.length > 0) bind(PREFS_PREFIX, () => registerPrefs(ctx, prefs, wrote));
+			if (actions.length > 0) bind(ACTIONS_PREFIX, () => registerActions(ctx, actions, wrote));
+			if (provision !== void 0) bind(PROVISION_PREFIX, () => registerProvision(ctx, provision, facts));
+		},
+		dispose() {
+			for (const dispose of undo) dispose?.();
+			undo = [];
+		}
+	};
 }
 //#endregion
 //#region src/shared/api/host/events.ts
@@ -6435,10 +7023,11 @@ async function workbenchVersion(input) {
 		pkg: read.pkg,
 		installed: read.version,
 		...latest === void 0 ? {} : { latest },
+		...input.running === void 0 ? {} : { running: input.running },
 		...read.local === true ? { local: true } : {}
 	};
 }
-function moduleVersionsHandler(ctx, shell) {
+function moduleVersionsHandler(ctx, shell, running) {
 	return async (search) => {
 		const manager = readBundleManager(ctx);
 		if (manager === void 0) return {
@@ -6483,6 +7072,7 @@ function moduleVersionsHandler(ctx, shell) {
 			shell,
 			fallback,
 			force,
+			...running === void 0 ? {} : { running },
 			logger: ctx.logger
 		});
 		return {
@@ -7242,377 +7832,103 @@ function libsOfUnit(unit, libs) {
 }
 var unitCache = createTimedMemo(PROBE_TTL_MS);
 //#endregion
-//#region src/shared/api/host/unit-readiness.ts
-function unitReadiness(manifest, lookup) {
-	const missingHard = manifest.host.inject.filter((name) => lookup(name) === void 0);
-	const missingSoft = (manifest.host.optional ?? []).filter((name) => lookup(name) === void 0);
+//#region src/shared/api/host/unit-registry.ts
+function installableUnitsOf(registry) {
+	return registry.all().filter((host) => host.source.kind === "package").map((host) => host.unit);
+}
+function sourceLabel(source) {
+	if (source.kind === "owned") return "外壳自己";
+	if (source.kind === "plugin") return "按已装 opencli 插件合成";
+	return source.pkg;
+}
+function createUnitRegistry(options) {
+	const refusals = [];
+	const hosts = [];
+	const byUnit = /* @__PURE__ */ new Map();
+	const failures = /* @__PURE__ */ new Map();
+	const listeners = /* @__PURE__ */ new Set();
+	function notify() {
+		for (const listener of listeners) listener();
+	}
+	function add(host) {
+		const taken = byUnit.get(host.unit);
+		if (taken !== void 0) throw new Error(`套件 id 重复：${host.unit}（id 会进持久化配置，不能撞）—— 已被 ${sourceLabel(taken.source)} 占着`);
+		byUnit.set(host.unit, host);
+		hosts.push(host);
+		notify();
+		return () => {
+			if (byUnit.get(host.unit) !== host) return;
+			byUnit.delete(host.unit);
+			const index = hosts.indexOf(host);
+			if (index >= 0) hosts.splice(index, 1);
+			notify();
+		};
+	}
 	return {
-		canMount: missingHard.length === 0,
-		missingHard,
-		missingSoft
+		register(face) {
+			const unit = typeof face?.unit === "string" ? face.unit.trim() : "";
+			const refuse = (pkg, reasons) => {
+				refusals.push({
+					unit,
+					...pkg === void 0 ? {} : { pkg },
+					reasons
+				});
+				options.logger?.warn?.(`[dsh-workbench] ${pkg ?? "这个模块"}没挂上（unit ${unit === "" ? "没写" : unit}）：${reasons.join("；")}`);
+				notify();
+				return () => {};
+			};
+			if (unit === "") return refuse(void 0, ["register({ unit, mount }) 里的 unit 是空的 —— U1b 之前的旧形状是 register({ manifest, mount })；现在清单由外壳从**已装包**的 dsh.workbench 读出来，模块里的 id 从 deps.manifest.id 拿（ADR-0038 §2.2）"]);
+			const source = options.declarationOf(unit);
+			if (source === void 0) return refuse(void 0, [`没有哪个已装模块声明了 unit「${unit}」—— 查过这份 profile 的已装清单。要么 package.json 里 dsh.workbench.unit 写错了（改完要重启工作台），要么这个包根本没被装进这份 profile`]);
+			const read = readDeclaration(source.pkg, source.declaration);
+			if (read.manifest === void 0) return refuse(source.pkg, read.problems);
+			return add({
+				unit,
+				manifest: read.manifest,
+				face,
+				source: {
+					kind: "package",
+					pkg: source.pkg
+				}
+			});
+		},
+		registerOwned(face) {
+			return add({
+				unit: face.manifest.id,
+				manifest: face.manifest,
+				face,
+				source: { kind: "owned" }
+			});
+		},
+		registerPlugin(face) {
+			return add({
+				unit: face.manifest.id,
+				manifest: face.manifest,
+				face,
+				source: { kind: "plugin" }
+			});
+		},
+		all: () => hosts,
+		owned: () => hosts.filter((host) => host.source.kind === "owned").map((host) => host.unit),
+		refusals: () => refusals,
+		manifests: () => hosts.map((host) => host.manifest),
+		subscribe(listener) {
+			listeners.add(listener);
+			return () => listeners.delete(listener);
+		},
+		fail(unit, reason) {
+			failures.set(unit, reason);
+		},
+		recovered(unit) {
+			failures.delete(unit);
+		},
+		failureOf: (unit) => failures.get(unit)
 	};
 }
 //#endregion
-//#region src/shared/api/host/mount-units.ts
-function withRunsRoute(result, unit) {
-	const runs = result.longTasks;
-	if (runs === void 0) return result;
-	return {
-		...result,
-		routes: {
-			...result.routes,
-			[runsRouteOf(unit)]: (search) => {
-				const path = (param(search, "path") ?? "").trim();
-				return {
-					ok: true,
-					runs: path === "" ? [] : runs.current(path)
-				};
-			}
-		}
-	};
-}
-function notedRegistry(registry, writesOf) {
-	return { register(definition) {
-		if (!writesOf(definition.name)) return registry.register(definition);
-		const noted = withApprovalNote(definition.parameters, { required: true });
-		return registry.register(noted === definition.parameters ? definition : {
-			...definition,
-			parameters: noted
-		});
-	} };
-}
-function scopedMountCtx(ctx, registry, writesOf) {
-	const tools = notedRegistry(registry, writesOf);
-	const get = (name) => {
-		const value = ctx.get(name);
-		return name === "tools" && value !== void 0 ? tools : value;
-	};
-	return new Proxy(ctx, { get(target, key) {
-		if (key === "get") return get;
-		const value = Reflect.get(target, key, target);
-		return typeof value === "function" ? value.bind(target) : value;
-	} });
-}
-function failureReasonOf(error) {
-	if (error instanceof Error) return error.message;
-	return typeof error === "string" ? error : String(error);
-}
-function fail(ledger, item, reason) {
-	ledger.failed.add(item);
-	ledger.failures.push({
-		id: item.host.manifest.id,
-		reason
-	});
-}
-function collectRoutes(mounted, ledger) {
-	const routes = {};
-	const owner = /* @__PURE__ */ new Map();
-	const routesOfUnit = /* @__PURE__ */ new Map();
-	for (const item of mounted) {
-		if (ledger.failed.has(item)) continue;
-		const unit = item.host.manifest.id;
-		const accepted = [];
-		let problem;
-		for (const [key, handler] of Object.entries(item.result.routes)) {
-			if (key !== unit && !key.startsWith(`${unit}/`)) {
-				problem = `路由名要住在自己那一格的命名空间里（${unit} 或 ${unit}/…）：${key} 不属于 ${unit} —— 装 / 升 / 卸时点名不到它，那个模块的数据会停在旧值`;
-				break;
-			}
-			const previous = owner.get(key);
-			if (previous !== void 0) {
-				problem = `路由名冲突：${key} 由套件 ${previous} 与 ${unit} 同时声明`;
-				break;
-			}
-			accepted.push([key, handler]);
-		}
-		if (problem !== void 0) {
-			fail(ledger, item, problem);
-			continue;
-		}
-		for (const [key, handler] of accepted) {
-			owner.set(key, unit);
-			routes[key] = handler;
-			const own = routesOfUnit.get(unit);
-			if (own === void 0) routesOfUnit.set(unit, [key]);
-			else own.push(key);
-		}
-	}
-	return {
-		routes,
-		owners: owner,
-		routesOfUnit
-	};
-}
-function collectNamed(mounted, ledger, pickMany, label) {
-	const owner = /* @__PURE__ */ new Map();
-	const out = [];
-	for (const item of mounted) {
-		if (ledger.failed.has(item)) continue;
-		const unit = item.host.manifest.id;
-		const entries = pickMany(item);
-		if (entries.length === 0) continue;
-		const clash = entries.find((entry) => owner.has(entry.resource));
-		if (clash !== void 0) {
-			fail(ledger, item, `${label}名冲突：${clash.resource} 由套件 ${owner.get(clash.resource)} 与 ${unit} 同时声明`);
-			continue;
-		}
-		for (const entry of entries) {
-			owner.set(entry.resource, unit);
-			out.push({
-				...entry,
-				unit
-			});
-		}
-	}
-	return out;
-}
-function collectContextRenderers(mounted, ledger) {
-	const table = /* @__PURE__ */ new Map();
-	const owner = /* @__PURE__ */ new Map();
-	for (const item of mounted) {
-		if (ledger.failed.has(item)) continue;
-		const unit = item.host.manifest.id;
-		const context = item.result.context;
-		if (context === void 0) continue;
-		const clash = context.kinds.find((kind) => owner.has(kind));
-		if (clash !== void 0) {
-			fail(ledger, item, `对话引用的 kind 冲突：${clash} 由套件 ${owner.get(clash)} 与 ${unit} 同时认领`);
-			continue;
-		}
-		for (const kind of context.kinds) {
-			owner.set(kind, unit);
-			table.set(kind, (ref) => context.render(ref));
-		}
-	}
-	return table;
-}
-function pickProvider(mounted, ledger, pick, label) {
-	let chosen;
-	let chosenBy;
-	for (const item of mounted) {
-		if (ledger.failed.has(item)) continue;
-		const value = pick(item);
-		if (value === void 0) continue;
-		if (chosen === void 0) {
-			chosen = value;
-			chosenBy = item.host.manifest.id;
-			continue;
-		}
-		fail(ledger, item, `${label}只能有一个提供者，现在是：${chosenBy}、${item.host.manifest.id}`);
-	}
-	return chosen;
-}
-function collectWarmReads(mounted) {
-	const declarations = mounted.map((item) => item.result.warmReads).filter((declare) => declare !== void 0);
-	return () => {
-		const seen = /* @__PURE__ */ new Set();
-		const reads = [];
-		for (const read of declarations.flatMap((declare) => declare())) {
-			const key = read.join(" ");
-			if (seen.has(key)) continue;
-			seen.add(key);
-			reads.push(read);
-		}
-		return reads;
-	};
-}
-function mountUnits(units, deps) {
-	const store = deps.store ?? createWorkspaceStore({ root: null });
-	const ownedUnits = deps.ownedUnits ?? (() => []);
-	const mounted = [];
-	const skipped = [];
-	const longTaskDisposers = /* @__PURE__ */ new Map();
-	const ledger = {
-		failed: /* @__PURE__ */ new Set(),
-		failures: []
-	};
-	for (const host of units) {
-		const readiness = unitReadiness(host.manifest, (dep) => deps.ctx.get(dep));
-		if (!readiness.canMount) {
-			skipped.push({
-				id: host.manifest.id,
-				missing: readiness.missingHard
-			});
-			continue;
-		}
-		const unit = host.manifest.id;
-		const tools = deps.ctx.get("tools");
-		const writes = toolUnits(deps.manifests());
-		const mountCtx = tools === void 0 ? deps.ctx : scopedMountCtx(deps.ctx, tools, (name) => writes.get(name)?.writes === true);
-		const longTasks = deps.longTasks === void 0 ? void 0 : createLongTaskHost({
-			scope: deps.longTasks.scope,
-			unit,
-			bump: deps.longTasks.bump
-		});
-		let result;
-		try {
-			result = host.face.mount({
-				manifest: host.manifest,
-				ctx: mountCtx,
-				logger: deps.logger,
-				manifests: deps.manifests,
-				ownedUnits,
-				...deps.installable === void 0 ? {} : { installable: deps.installable },
-				...deps.opencliCommand === void 0 ? {} : { opencliCommand: deps.opencliCommand },
-				...deps.probe === void 0 ? {} : { probe: deps.probe },
-				...deps.values === void 0 ? {} : { values: deps.values },
-				...longTasks === void 0 ? {} : { longTasks: longTasks.host },
-				store
-			});
-		} catch (error) {
-			longTasks?.dispose();
-			ledger.failures.push({
-				id: unit,
-				reason: failureReasonOf(error)
-			});
-			continue;
-		}
-		const item = {
-			host,
-			readiness,
-			result: withRunsRoute(result, unit)
-		};
-		mounted.push(item);
-		if (longTasks !== void 0) longTaskDisposers.set(item, longTasks.dispose);
-	}
-	const collected = collectRoutes(mounted, ledger);
-	const prefs = collectNamed(mounted, ledger, (item) => item.result.prefs === void 0 ? [] : [item.result.prefs], "偏好资源");
-	const actions = collectNamed(mounted, ledger, (item) => item.result.actions ?? [], "动作资源");
-	const owners = new Map(collected.owners);
-	for (const entry of [...prefs, ...actions]) owners.set(entry.resource, entry.unit);
-	const factsOf = /* @__PURE__ */ new Map();
-	for (const item of mounted) {
-		if (ledger.failed.has(item)) continue;
-		const declare = item.result.factsOf;
-		if (declare !== void 0) factsOf.set(item.host.manifest.id, declare);
-	}
-	const gate = pickProvider(mounted, ledger, (item) => item.result.gate, "启停闸门");
-	const provision = pickProvider(mounted, ledger, (item) => item.result.provision, "机器供给");
-	const contextRenderers = collectContextRenderers(mounted, ledger);
-	const alive = mounted.filter((item) => !ledger.failed.has(item));
-	for (const item of mounted) {
-		if (!ledger.failed.has(item)) continue;
-		longTaskDisposers.get(item)?.();
-		longTaskDisposers.delete(item);
-	}
-	return {
-		mounted: alive,
-		routes: collected.routes,
-		owners,
-		routesOfUnit: collected.routesOfUnit,
-		factsOf,
-		gate,
-		prefs,
-		actions,
-		provision,
-		contextRenderers,
-		skipped,
-		failed: ledger.failures,
-		warmReads: collectWarmReads(alive),
-		disposeLongTasks: () => {
-			for (const dispose of [...longTaskDisposers.values()]) dispose();
-			longTaskDisposers.clear();
-		}
-	};
-}
-//#endregion
-//#region src/shared/api/host/unit-registry.ts
-function installableUnitsOf(registry) {
-	return registry.all().filter((host) => host.source.kind === "package").map((host) => host.unit);
-}
-function sourceLabel(source) {
-	if (source.kind === "owned") return "外壳自己";
-	if (source.kind === "plugin") return "按已装 opencli 插件合成";
-	return source.pkg;
-}
-function createUnitRegistry(options) {
-	const refusals = [];
-	const hosts = [];
-	const byUnit = /* @__PURE__ */ new Map();
-	const failures = /* @__PURE__ */ new Map();
-	const listeners = /* @__PURE__ */ new Set();
-	function notify() {
-		for (const listener of listeners) listener();
-	}
-	function add(host) {
-		const taken = byUnit.get(host.unit);
-		if (taken !== void 0) throw new Error(`套件 id 重复：${host.unit}（id 会进持久化配置，不能撞）—— 已被 ${sourceLabel(taken.source)} 占着`);
-		byUnit.set(host.unit, host);
-		hosts.push(host);
-		notify();
-		return () => {
-			if (byUnit.get(host.unit) !== host) return;
-			byUnit.delete(host.unit);
-			const index = hosts.indexOf(host);
-			if (index >= 0) hosts.splice(index, 1);
-			notify();
-		};
-	}
-	return {
-		register(face) {
-			const unit = typeof face?.unit === "string" ? face.unit.trim() : "";
-			const refuse = (pkg, reasons) => {
-				refusals.push({
-					unit,
-					...pkg === void 0 ? {} : { pkg },
-					reasons
-				});
-				options.logger?.warn?.(`[dsh-workbench] ${pkg ?? "这个模块"}没挂上（unit ${unit === "" ? "没写" : unit}）：${reasons.join("；")}`);
-				notify();
-				return () => {};
-			};
-			if (unit === "") return refuse(void 0, ["register({ unit, mount }) 里的 unit 是空的 —— U1b 之前的旧形状是 register({ manifest, mount })；现在清单由外壳从**已装包**的 dsh.workbench 读出来，模块里的 id 从 deps.manifest.id 拿（ADR-0038 §2.2）"]);
-			const source = options.declarationOf(unit);
-			if (source === void 0) return refuse(void 0, [`没有哪个已装模块声明了 unit「${unit}」—— 查过这份 profile 的已装清单。要么 package.json 里 dsh.workbench.unit 写错了（改完要重启工作台），要么这个包根本没被装进这份 profile`]);
-			const read = readDeclaration(source.pkg, source.declaration);
-			if (read.manifest === void 0) return refuse(source.pkg, read.problems);
-			return add({
-				unit,
-				manifest: read.manifest,
-				face,
-				source: {
-					kind: "package",
-					pkg: source.pkg
-				}
-			});
-		},
-		registerOwned(face) {
-			return add({
-				unit: face.manifest.id,
-				manifest: face.manifest,
-				face,
-				source: { kind: "owned" }
-			});
-		},
-		registerPlugin(face) {
-			return add({
-				unit: face.manifest.id,
-				manifest: face.manifest,
-				face,
-				source: { kind: "plugin" }
-			});
-		},
-		all: () => hosts,
-		owned: () => hosts.filter((host) => host.source.kind === "owned").map((host) => host.unit),
-		refusals: () => refusals,
-		manifests: () => hosts.map((host) => host.manifest),
-		subscribe(listener) {
-			listeners.add(listener);
-			return () => listeners.delete(listener);
-		},
-		fail(unit, reason) {
-			failures.set(unit, reason);
-		},
-		recovered(unit) {
-			failures.delete(unit);
-		},
-		failureOf: (unit) => failures.get(unit)
-	};
-}
-//#endregion
-//#region src/shared/api/host/unit-roster-facts.ts
-function rosterKeyOf(units) {
-	return units.all().map((host) => host.unit).join("\0");
+//#region src/shared/api/host/unit-roster-facts.ts
+function rosterKeyOf(units) {
+	return units.all().map((host) => host.unit).join("\0");
 }
 function bindRosterFacts(options) {
 	let seen = rosterKeyOf(options.units);
@@ -7628,7 +7944,7 @@ function bindRosterFacts(options) {
 function recordOf(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
-function textOf(value) {
+function textOf$1(value) {
 	return typeof value === "string" ? value : "";
 }
 function stringsOf(value) {
@@ -7639,18 +7955,18 @@ function argsOf(raw) {
 	return raw.flatMap((item) => {
 		const record = recordOf(item);
 		if (record === void 0) return [];
-		const name = textOf(record["name"]).trim();
+		const name = textOf$1(record["name"]).trim();
 		if (name === "") return [];
 		const fallback = record["default"];
 		return [{
 			name,
-			type: textOf(record["type"]) || "string",
+			type: textOf$1(record["type"]) || "string",
 			required: record["required"] === true,
 			positional: record["positional"] === true,
 			valueRequired: record["valueRequired"] === true,
 			choices: stringsOf(record["choices"]),
 			...fallback === void 0 || fallback === null ? {} : { defaultValue: fallback },
-			help: textOf(record["help"])
+			help: textOf$1(record["help"])
 		}];
 	});
 }
@@ -7661,11 +7977,11 @@ function parsePluginRows(stdout) {
 	for (const item of parsed) {
 		const record = recordOf(item);
 		if (record === void 0) return void 0;
-		const name = textOf(record["name"]).trim();
+		const name = textOf$1(record["name"]).trim();
 		if (name === "") return void 0;
 		rows.push({
 			name,
-			version: textOf(record["version"]),
+			version: textOf$1(record["version"]),
 			commands: stringsOf(record["commands"])
 		});
 	}
@@ -7678,17 +7994,17 @@ function parseCommandRows(stdout) {
 	for (const item of parsed) {
 		const record = recordOf(item);
 		if (record === void 0) return void 0;
-		const site = textOf(record["site"]).trim();
-		const name = textOf(record["name"]).trim();
+		const site = textOf$1(record["site"]).trim();
+		const name = textOf$1(record["name"]).trim();
 		if (site === "" || name === "") return void 0;
 		rows.push({
 			site,
 			name,
-			description: textOf(record["description"]),
-			access: textOf(record["access"]),
+			description: textOf$1(record["description"]),
+			access: textOf$1(record["access"]),
 			browser: record["browser"] === true,
-			siteSession: textOf(record["siteSession"]),
-			...textOf(record["domain"]) === "" ? {} : { domain: textOf(record["domain"]) },
+			siteSession: textOf$1(record["siteSession"]),
+			...textOf$1(record["domain"]) === "" ? {} : { domain: textOf$1(record["domain"]) },
 			args: argsOf(record["args"])
 		});
 	}
@@ -7876,6 +8192,7 @@ var SCHEMA_TYPE = {
 	string: "string"
 };
 var KEY_ARG_LIMIT = 3;
+var NO_KEY_ARGS = "没有带参数";
 var RUN_CODE_TOOL = "run_code";
 var PLUGIN_PROMPT_BUDGET = 4e3;
 function pluginToolName(plugin, command) {
@@ -7953,13 +8270,15 @@ function pluginKeyArgs(command, raw) {
 		parts.push(`${arg.name}=${String(value)}`);
 		if (parts.length === KEY_ARG_LIMIT) break;
 	}
-	return parts.length === 0 ? "没有带参数" : parts.join("、");
+	return parts.length === 0 ? NO_KEY_ARGS : parts.join("、");
 }
 function pluginApprovalQuestion(command, raw) {
 	const key = pluginKeyArgs(command, raw);
+	const zhKey = key === NO_KEY_ARGS ? "这次没带参数" : key;
+	const enKey = key === NO_KEY_ARGS ? "no arguments" : key;
 	return {
-		zh: `允许执行 ${command.plugin} 的 ${command.name}（${key}）吗？`,
-		en: `Run ${command.plugin} ${command.name} (${key})?`
+		zh: `agent 想执行工作台 [${command.plugin}] opencli 插件的 [${command.name}] 命令（${zhKey}），允许吗？`,
+		en: `The agent wants to run the [${command.name}] command of the workbench opencli plugin [${command.plugin}] (${enKey}). Allow?`
 	};
 }
 function pluginApprovalFor(command) {
@@ -8221,6 +8540,330 @@ function createPluginUnits(options) {
 	};
 }
 //#endregion
+//#region src/shared/api/config-sync.ts
+var CONFIG_SYNC_ROUTE = "config-sync";
+var CONFIG_SYNC_RESOURCE = "configSync";
+//#endregion
+//#region src/shared/api/host/config-sync.ts
+var ID_LINE = /^- id:[ \t]*"?([^"\s#]+)/;
+var INSERT_LINE = /^- insert:[ \t]*$/;
+var NESTED_ID = /^[ \t]+-[ \t]*id:[ \t]*"?([^"\s#]+)/;
+var NAME_LINE = /^[ \t]*-?[ \t]*name:[ \t]*['"]?([^'"\s#]+)/;
+var COMMENT_LINE = /^[ \t]*#/;
+function trimmedTail(lines) {
+	let end = lines.length;
+	while (end > 0 && (lines[end - 1] ?? "").trim() === "") end -= 1;
+	return lines.slice(0, end);
+}
+function matched(text, pattern) {
+	const found = pattern.exec(text);
+	return found === null ? void 0 : found[1];
+}
+function blockOf(body, index) {
+	const lines = body.split("\n");
+	const first = lines[0] ?? "";
+	const id = matched(first, ID_LINE);
+	const nested = lines.flatMap((line) => {
+		const one = matched(line, NESTED_ID);
+		return one === void 0 ? [] : [one];
+	});
+	const insert = id === void 0 && INSERT_LINE.test(first);
+	const label = id ?? nested.join(", ");
+	const key = id !== void 0 ? `id:${id}` : insert ? `insert:${nested.join(", ")}` : `block:${String(index)}`;
+	const names = lines.flatMap((line) => {
+		const one = matched(line, NAME_LINE);
+		return one === void 0 ? [] : [one];
+	});
+	return {
+		key,
+		id: label === "" ? key : label,
+		insert,
+		body,
+		names
+	};
+}
+function spannedBlocks(text) {
+	const lines = text.split("\n");
+	const starts = [];
+	lines.forEach((line, index) => {
+		if (/^- /.test(line) || line === "-") starts.push(index);
+	});
+	const blocks = [];
+	for (let i = 0; i < starts.length; i += 1) {
+		const from = starts[i] ?? 0;
+		const to = i + 1 < starts.length ? starts[i + 1] ?? lines.length : lines.length;
+		const body = trimmedTail(lines.slice(from, to)).join("\n");
+		if (body.trim() === "") continue;
+		blocks.push({
+			...blockOf(body, blocks.length),
+			from,
+			to
+		});
+	}
+	return blocks;
+}
+function patchBlocks(text) {
+	return spannedBlocks(text).map(({ from: _from, to: _to, ...block }) => block);
+}
+function normalizeBlock(body) {
+	return body.split("\n").map((line) => line.replace(/\s+$/, "")).filter((line) => line.trim() !== "" && !COMMENT_LINE.test(line)).join("\n");
+}
+function syncRows(source, own, missing) {
+	const mine = new Map(own.map((block) => [block.key, block]));
+	const rows = [];
+	for (const block of source) {
+		const here = mine.get(block.key);
+		if (here !== void 0 && normalizeBlock(here.body) === normalizeBlock(block.body)) continue;
+		rows.push({
+			key: block.key,
+			id: block.id,
+			insert: block.insert,
+			state: here === void 0 ? "new" : "differs",
+			body: block.body,
+			ownBody: here === void 0 ? null : here.body,
+			missing: missing(block)
+		});
+	}
+	return rows;
+}
+function replaceBlocks(text, blocks) {
+	const wanted = new Map(blocks.map((block) => [block.key, block]));
+	const spans = spannedBlocks(text).filter((span) => wanted.has(span.key));
+	const lines = text.split("\n");
+	for (const span of [...spans].reverse()) {
+		const replacement = (wanted.get(span.key)?.body ?? "").split("\n");
+		lines.splice(span.from, span.to - span.from, ...replacement);
+	}
+	return lines.join("\n");
+}
+function appendBlocks(text, blocks) {
+	const kept = text.split("\n").filter((line) => line.trim() !== "[]").join("\n").replace(/\s+$/, "");
+	let out = kept === "" ? "" : `${kept}\n`;
+	for (const block of blocks) out += `\n${block.body}\n`;
+	return out;
+}
+function mergeBlocks(ownText, incoming, overwrite) {
+	const own = patchBlocks(ownText);
+	const mine = new Set(own.map((block) => block.key));
+	const written = [];
+	const skipped = [];
+	const take = [];
+	for (const block of incoming) {
+		if (!mine.has(block.key) || overwrite.has(block.key)) {
+			take.push(block);
+			written.push(block.id);
+			continue;
+		}
+		skipped.push(block.id);
+	}
+	if (take.length === 0) return {
+		ok: true,
+		text: ownText,
+		written,
+		skipped
+	};
+	const text = appendBlocks(replaceBlocks(ownText, take.filter((block) => mine.has(block.key))), take.filter((block) => !mine.has(block.key)));
+	const check = patchBlocks(text);
+	const expected = /* @__PURE__ */ new Set([...mine, ...take.map((block) => block.key)]);
+	if (check.length !== expected.size || new Set(check.map((block) => block.key)).size !== expected.size) return {
+		ok: false,
+		reason: "写入前的自检没过：行的 id 会重复或丢行"
+	};
+	return {
+		ok: true,
+		text,
+		written,
+		skipped
+	};
+}
+function readPatchBlocks(path) {
+	try {
+		const text = readFileSync(path, "utf8");
+		return {
+			ok: true,
+			text,
+			blocks: patchBlocks(text)
+		};
+	} catch (error) {
+		return {
+			ok: false,
+			reason: error instanceof Error ? error.message : String(error)
+		};
+	}
+}
+function patchMode(path) {
+	try {
+		return statSync(path).mode & 511;
+	} catch {
+		return 420;
+	}
+}
+function writePatchFile(path, text) {
+	const mode = patchMode(path);
+	const tmp = `${path}.wb-sync-${String(process.pid)}`;
+	writeFileSync(tmp, text, { mode });
+	try {
+		renameSync(tmp, path);
+	} catch (error) {
+		try {
+			unlinkSync(tmp);
+		} catch {
+			throw error;
+		}
+		throw error;
+	}
+}
+function configSyncHandler(deps) {
+	return (search) => ({
+		ok: true,
+		...configSyncSnapshot(deps, search.get("source") ?? void 0)
+	});
+}
+function textOf(value) {
+	return typeof value === "string" ? value : "";
+}
+function profileDependencies(dir) {
+	try {
+		const manifest = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+		return new Set(Object.keys(manifest.dependencies ?? {}));
+	} catch {
+		return /* @__PURE__ */ new Set();
+	}
+}
+function profileNames(profilesDir) {
+	try {
+		return readdirSync(profilesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() || entry.isSymbolicLink()).map((entry) => entry.name).filter((name) => existsSync(join(profilesDir, name, "package.json"))).sort((a, b) => a.localeCompare(b));
+	} catch {
+		return [];
+	}
+}
+function configSyncSnapshot(deps, asked) {
+	const profilesDir = join(deps.home, "profiles");
+	const others = profileNames(profilesDir).filter((name) => name !== deps.self);
+	const base = {
+		self: deps.self,
+		home: deps.home
+	};
+	if (deps.profileDir === null) return {
+		...base,
+		source: "",
+		profiles: [],
+		rows: [],
+		emptyProviders: false,
+		reason: "拿不到当前 profile 目录"
+	};
+	const own = readPatchBlocks(join(deps.profileDir, "cordis.patch.yml"));
+	const emptyProviders = own.ok && !own.blocks.some((block) => block.key.startsWith("id:llm-"));
+	const ownBlocks = own.ok ? own.blocks : [];
+	const profiles = others.map((name) => {
+		const read = readPatchBlocks(join(profilesDir, name, "cordis.patch.yml"));
+		return {
+			name,
+			readable: read.ok,
+			candidates: read.ok ? syncRows(read.blocks, ownBlocks, () => []).length : 0
+		};
+	});
+	if (others.length === 0) return {
+		...base,
+		source: "",
+		profiles,
+		rows: [],
+		emptyProviders,
+		reason: "这台机器上只有当前这个 profile，没有可同步的来源"
+	};
+	const source = others.includes(asked ?? "") ? asked ?? "" : others.includes("web") ? "web" : others[0] ?? "";
+	const sourceDir = join(profilesDir, source);
+	const read = readPatchBlocks(join(sourceDir, "cordis.patch.yml"));
+	if (!read.ok) return {
+		...base,
+		source,
+		profiles,
+		rows: [],
+		emptyProviders,
+		reason: read.reason
+	};
+	if (!own.ok) return {
+		...base,
+		source,
+		profiles,
+		rows: [],
+		emptyProviders,
+		reason: own.reason
+	};
+	const declared = profileDependencies(sourceDir);
+	const modulesDir = join(deps.profileDir, "node_modules");
+	const rows = syncRows(read.blocks, own.blocks, (block) => block.names.filter((name) => declared.has(name) && !existsSync(join(modulesDir, name))));
+	return {
+		...base,
+		source,
+		profiles,
+		rows,
+		emptyProviders
+	};
+}
+function configSyncApply(deps, payload) {
+	if (deps.profileDir === null) return {
+		ok: false,
+		text: "拿不到当前 profile 目录，这次没写任何东西"
+	};
+	const body = typeof payload === "object" && payload !== null ? payload : {};
+	const source = textOf(body["source"]);
+	const keys = new Set((Array.isArray(body["keys"]) ? body["keys"] : []).map((item) => textOf(item)).filter((item) => item !== ""));
+	const overwrite = new Set((Array.isArray(body["overwrite"]) ? body["overwrite"] : []).map((item) => textOf(item)));
+	if (source === "" || keys.size === 0) return {
+		ok: false,
+		text: "没说清从哪个 profile 搬哪几行"
+	};
+	const profilesDir = join(deps.home, "profiles");
+	if (!profileNames(profilesDir).includes(source)) return {
+		ok: false,
+		text: `没有这个 profile：${source}`
+	};
+	if (source === deps.self) return {
+		ok: false,
+		text: "来源不能是工作台自己"
+	};
+	const read = readPatchBlocks(join(profilesDir, source, "cordis.patch.yml"));
+	if (!read.ok) return {
+		ok: false,
+		text: `读不到 ${source} 的配置：${read.reason}`
+	};
+	const own = readPatchBlocks(join(deps.profileDir, "cordis.patch.yml"));
+	if (!own.ok) return {
+		ok: false,
+		text: `读不到工作台自己的配置：${own.reason}`
+	};
+	const picked = read.blocks.filter((block) => keys.has(block.key));
+	if (picked.length === 0) return {
+		ok: false,
+		text: "选中的行在来源里已经找不到了，重新读一遍再试"
+	};
+	const merged = mergeBlocks(own.text, picked, overwrite);
+	if (!merged.ok) return {
+		ok: false,
+		text: merged.reason
+	};
+	try {
+		writePatchFile(join(deps.profileDir, "cordis.patch.yml"), merged.text);
+	} catch (error) {
+		return {
+			ok: false,
+			text: `写不进去：${error instanceof Error ? error.message : String(error)}`
+		};
+	}
+	return {
+		ok: true,
+		written: merged.written,
+		skipped: merged.skipped
+	};
+}
+function configSyncAction(deps) {
+	return {
+		resource: CONFIG_SYNC_RESOURCE,
+		handle: (payload) => configSyncApply(deps, payload)
+	};
+}
+//#endregion
 //#region src/shared/api/host/tool-scope.ts
 function agentOf(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
@@ -8345,11 +8988,17 @@ function apply(ctx) {
 		[DSH_PLUGINS_ROUTE]: dshPluginsHandler(ctx),
 		[BUNDLE_REGISTRIES_ROUTE]: bundleRegistriesHandler(ctx),
 		[BUNDLE_INSPECT_ROUTE]: bundleInspectHandler(ctx),
-		[MODULE_VERSIONS_ROUTE]: moduleVersionsHandler(ctx, ctx.get("shell"))
+		[MODULE_VERSIONS_ROUTE]: moduleVersionsHandler(ctx, ctx.get("shell"), runningVersionOf(import.meta.url))
 	};
 	const renderers = /* @__PURE__ */ new Map();
 	const shell = ctx.get("shell");
 	const profileDir = profileDirOf(ctx);
+	const configSync = {
+		home: dshHome(),
+		self: profileDir === null ? "" : basename(profileDir),
+		profileDir
+	};
+	routes[CONFIG_SYNC_ROUTE] = configSyncHandler(configSync);
 	const units = createUnitRegistry({
 		declarationOf: createDeclarationLookup(profileDir),
 		logger: ctx.logger
@@ -8424,10 +9073,23 @@ function apply(ctx) {
 	const factsOfMap = /* @__PURE__ */ new Map();
 	const routesOfUnitMap = /* @__PURE__ */ new Map();
 	const ownersMap = /* @__PURE__ */ new Map();
-	let undoPost = [];
 	const factsOfUnit = (unit) => [...routesOfUnitMap.get(unit) ?? [], "capability"];
 	const callFacts = (unit, call) => factsOfMap.get(unit)?.(call) ?? factsOfUnit(unit);
 	const deniedNow = (workspace) => [...new Set([...mounted.values()].flatMap((item) => item.plan.gate?.deniedTools(workspace) ?? []))];
+	const wrote = (resource, write) => {
+		const unit = ownersMap.get(resource);
+		if (unit !== void 0) facts.bump(callFacts(unit, {
+			source: resource,
+			args: asArgs(write.args),
+			result: write.result
+		}));
+	};
+	const postChannels = createPostChannels({
+		ctx,
+		mounted,
+		facts,
+		shellActions: [configSyncAction(configSync)]
+	});
 	function unmountUnit(id) {
 		const item = mounted.get(id);
 		if (item === void 0) return;
@@ -8517,22 +9179,7 @@ function apply(ctx) {
 		}
 	}
 	function rebindPost() {
-		for (const dispose of undoPost.reverse()) dispose?.();
-		undoPost = [];
-		const wrote = (resource, write) => {
-			const unit = ownersMap.get(resource);
-			if (unit !== void 0) facts.bump(callFacts(unit, {
-				source: resource,
-				args: asArgs(write.args),
-				result: write.result
-			}));
-		};
-		const prefs = [...mounted.values()].flatMap((item) => item.plan.prefs);
-		const actions = [...mounted.values()].flatMap((item) => item.plan.actions);
-		const provision = [...mounted.values()].find((item) => item.plan.provision !== void 0)?.plan.provision;
-		if (prefs.length > 0) undoPost.push(registerPrefs(ctx, prefs, wrote));
-		if (actions.length > 0) undoPost.push(registerActions(ctx, actions, wrote));
-		if (provision !== void 0) undoPost.push(registerProvision(ctx, provision, facts));
+		postChannels.rebind(wrote);
 	}
 	function sync() {
 		const present = new Set(units.all().map((one) => one.unit));
@@ -8599,7 +9246,7 @@ function apply(ctx) {
 	}
 	ctx.effect(() => () => {
 		for (const id of [...mounted.keys()]) unmountUnit(id);
-		for (const dispose of undoPost) dispose?.();
+		postChannels.dispose();
 	}, `${PLUGIN_ID}: 卸载时把单元摘干净`);
 	ctx.effect(() => units.subscribe(sync), `${PLUGIN_ID}: 注册表变了就增删（装/卸一个模块 = 挂/卸它的面）`);
 	ctx.effect(() => bindRosterFacts({