@dsh-workbench/core 0.2.6 → 0.2.8

package/dist/host/index.js

@@ -2456,6 +2456,10 @@ function readBundleManager(ctx) {
 		async remove(name) {
 			return asChange(await face.removeBundle?.(name));
 		},
+		async setEnabled(name, enabled) {
+			if (typeof face.setBundleEnabled !== "function") return null;
+			return asChange(await face.setBundleEnabled(name, enabled));
+		},
 		async cancel(requestId) {
 			if (typeof face.cancelInstall !== "function") return null;
 			return pick(CANCELLATIONS, (asRecord$6(await face.cancelInstall(requestId)) ?? {}).status) ?? null;
@@ -2849,20 +2853,67 @@ var READ_ONLY_ACTIONS = /* @__PURE__ */ new Set([
 	"recon",
 	""
 ]);
+var SPEC_LIMIT = 80;
+function missing(id) {
+	return id === void 0 || id === "";
+}
+function pad(token) {
+	return token.startsWith("[") ? ` ${token} ` : token;
+}
+function workbenchModule(id) {
+	return missing(id) ? {
+		zh: "工作台模块",
+		en: "the workbench module"
+	} : {
+		zh: `工作台${pad(`[${id}]`)}模块`,
+		en: `the workbench [${id}] module`
+	};
+}
+function anyWorkbenchModule(id) {
+	return missing(id) ? {
+		zh: "工作台的一个模块",
+		en: "a workbench module"
+	} : workbenchModule(id);
+}
+function workbenchPlugin(id) {
+	return missing(id) ? {
+		zh: "工作台的 opencli 插件",
+		en: "a workbench opencli plugin"
+	} : {
+		zh: `工作台${pad(`[${id}]`)}opencli 插件`,
+		en: `the workbench [${id}] opencli plugin`
+	};
+}
+function workbenchDependency(id) {
+	return missing(id) ? {
+		zh: "工作台共用依赖",
+		en: "a workbench shared dependency"
+	} : {
+		zh: `工作台共用依赖 [${id}]`,
+		en: `the workbench shared dependency [${id}]`
+	};
+}
+function workbenchPanelRow(id) {
+	return missing(id) ? {
+		zh: "工作台在当前项目的面板",
+		en: "the workbench panel for this project"
+	} : {
+		zh: `工作台${pad(`[${id}]`)}模块这一行`,
+		en: `the workbench [${id}] module row`
+	};
+}
 function actionOf$1(call) {
 	const raw = call.arguments;
 	if (typeof raw !== "object" || raw === null) return {};
 	const value = raw;
 	const target = typeof value.plugin === "string" ? value.plugin : typeof value.name === "string" ? value.name : typeof value.id === "string" ? value.id : typeof value.unit === "string" ? value.unit : void 0;
+	const spec = typeof value.spec === "string" ? value.spec.replace(/\s+/g, " ").trim() : "";
 	return {
 		...typeof value.action === "string" ? { action: value.action } : {},
-		...target === void 0 ? {} : { id: target }
+		...target === void 0 ? {} : { id: target },
+		...spec === "" ? {} : { spec: spec.length > SPEC_LIMIT ? `${spec.slice(0, SPEC_LIMIT)}…` : spec }
 	};
 }
-function whatOf(id) {
-	if (id === void 0 || id === "") return "一个模块";
-	return `「${id}」`;
-}
 function askOf(reason, question, fallback) {
 	return {
 		kind: "ask",
@@ -2872,92 +2923,151 @@ function askOf(reason, question, fallback) {
 	};
 }
 var panelsApproval = (call) => {
-	const { action, id } = actionOf$1(call);
+	const { action, id, spec } = actionOf$1(call);
 	const readAction = action !== void 0 && action !== "" && READ_ONLY_ACTIONS.has(action);
-	const what = whatOf(id);
 	if (call.name === "workbench_modules") {
 		if (readAction) return READ;
 		if (action === "update-plugin" || action === "uninstall-plugin") {
 			const verb = action === "update-plugin" ? "更新" : "卸载";
-			const verbEn = action === "update-plugin" ? "update" : "remove";
+			const verbEn = action === "update-plugin" ? "update" : "uninstall";
+			const target = workbenchPlugin(id);
 			return askOf(`workbench_modules ${action} ${id ?? ""} changes an opencli plugin on this machine`, {
-				en: `it ${verbEn}s that opencli plugin on this machine. Allow?`,
-				zh: `会${verb}这个 opencli 插件。允许吗？`
+				en: `it ${verbEn}s ${target.en}. Allow?`,
+				zh: `会${verb}${target.zh}，允许吗？`
 			}, {
-				en: `The agent wants to ${verbEn} the opencli plugin ${what} (it changes what is installed on this machine). Allow?`,
-				zh: `agent 想${verb} opencli 插件 ${what}（会改这台机器上装的东西）。允许吗？`
+				en: `The agent wants to ${verbEn} ${target.en}. Allow?`,
+				zh: `agent 想${verb}${target.zh}，允许吗？`
 			});
 		}
 		if (action === "update-workbench") return askOf("workbench_modules update-workbench replaces the workbench itself with the new version from the registry", {
-			en: "it updates the workbench itself on this machine (the panel picks the new version up by itself). Allow?",
-			zh: "会把工作台自己更新到源上的新版（面板会自己换新）。允许吗？"
+			en: "it updates the workbench itself to the new version from the registry. Allow?",
+			zh: "会把工作台本身更新到源上的新版，允许吗？"
 		}, {
-			en: "The agent wants to update the workbench itself to the new version from the registry (it changes what is installed on this machine; the panel picks the new version up by itself). Allow?",
-			zh: "agent 想把工作台自己更新到源上的新版（会改这台机器上装的东西，面板会自己换新）。允许吗？"
+			en: "The agent wants to update the workbench itself to the new version from the registry. Allow?",
+			zh: "agent 想把工作台本身更新到源上的新版，允许吗？"
 		});
-		if (action === "update-dependency") return askOf(`workbench_modules update-dependency ${id ?? ""} upgrades a shared dependency on this machine`, {
-			en: "it upgrades that shared dependency on this machine. Allow?",
-			zh: `会升级共用依赖 ${what}。允许吗？`
+		if (action === "update-dependency") {
+			const target = workbenchDependency(id);
+			return askOf(`workbench_modules update-dependency ${id ?? ""} upgrades a shared dependency on this machine`, {
+				en: `it upgrades ${target.en}. Allow?`,
+				zh: `会升级${target.zh}，允许吗？`
+			}, {
+				en: `The agent wants to upgrade ${target.en}. Allow?`,
+				zh: `agent 想升级${target.zh}，允许吗？`
+			});
+		}
+		if (action === "install-bundle" && spec !== void 0) return askOf(`workbench_modules install-bundle ${spec} installs a workbench module from a spec`, {
+			en: `it installs the workbench module from [${spec}]. Allow?`,
+			zh: `会安装工作台模块 [${spec}]，允许吗？`
 		}, {
-			en: `The agent wants to upgrade the shared dependency ${what} (it changes what is installed on this machine). Allow?`,
-			zh: `agent 想升级共用依赖 ${what}（会改这台机器上装的东西）。允许吗？`
+			en: `The agent wants to install the workbench module from [${spec}]. Allow?`,
+			zh: `agent 想安装工作台模块 [${spec}]，允许吗？`
 		});
-		const verb = action === "install" ? "装" : action === "uninstall" ? "卸载" : action === "update" ? "更新" : "装 / 更新 / 卸载";
-		const verbEn = verb === "装" ? "install" : verb === "卸载" ? "remove" : verb === "更新" ? "update" : "install/update/remove";
+		if (action === "install") {
+			const target = workbenchModule(id);
+			return askOf(`workbench_modules install ${id ?? ""} installs a workbench module on this machine`, {
+				en: `it installs ${target.en}. Allow?`,
+				zh: `会安装${target.zh}，允许吗？`
+			}, {
+				en: `The agent wants to install ${target.en}. Allow?`,
+				zh: `agent 想安装${target.zh}，允许吗？`
+			});
+		}
+		if (action === "update") {
+			const target = workbenchModule(id);
+			return askOf(`workbench_modules update ${id ?? ""} updates a workbench module on this machine`, {
+				en: `it updates ${target.en}. Allow?`,
+				zh: `会更新${target.zh}，允许吗？`
+			}, {
+				en: `The agent wants to update ${target.en}. Allow?`,
+				zh: `agent 想更新${target.zh}，允许吗？`
+			});
+		}
+		if (action === "uninstall") {
+			const target = workbenchModule(id);
+			return askOf(`workbench_modules uninstall ${id ?? ""} removes a workbench module from this machine`, {
+				en: `it uninstalls ${target.en}. Allow?`,
+				zh: `会卸载${target.zh}，允许吗？`
+			}, {
+				en: `The agent wants to uninstall ${target.en}. Allow?`,
+				zh: `agent 想卸载${target.zh}，允许吗？`
+			});
+		}
 		return askOf(`workbench_modules ${action ?? "(unknown action)"} ${id ?? ""} changes plugins on this machine`.trim(), {
-			en: "it changes plugins on this machine. Allow?",
-			zh: "会改这台机器上的插件。允许吗？"
+			en: "it changes the plugins installed in the workbench. Allow?",
+			zh: "会改动工作台装的插件，允许吗？"
 		}, {
-			en: `The agent wants to ${verbEn} the module ${what} (it changes plugins on this machine). Allow?`,
-			zh: `agent 想${verb}模块 ${what}（会改这台机器上的插件）。允许吗？`
+			en: "The agent wants to change the plugins installed in the workbench. Allow?",
+			zh: "agent 想改动工作台装的插件，允许吗？"
 		});
 	}
 	if (call.name === "workbench_diy") {
 		if (readAction) return READ;
-		if (action === "open") return askOf("workbench_diy open puts an already-installed module on this project panel", {
-			en: `it puts ${what} on this project's panel (nothing new gets installed on this machine). Allow?`,
-			zh: `会把${what}摆到**这个项目**的面板上（这台机器上不装新东西）。允许吗？`
-		}, {
-			en: `The agent wants to show the module ${what} on this project's panel. Allow?`,
-			zh: `agent 想把${what}显示在**这个项目**的面板上。允许吗？`
-		});
+		if (action === "open") {
+			const target = anyWorkbenchModule(id);
+			return askOf("workbench_diy open puts an already-installed module on this project panel", {
+				en: `it shows ${target.en} on this project's panel. Allow?`,
+				zh: `会把${target.zh}显示在当前项目的面板上，允许吗？`
+			}, {
+				en: `The agent wants to show ${target.en} on this project's panel. Allow?`,
+				zh: `agent 想把${target.zh}显示在当前项目的面板上，允许吗？`
+			});
+		}
+		const target = workbenchModule(id);
 		return askOf(`workbench_diy ${action ?? "(unknown action)"} installs a module built in the workshop and opens it on this project's panel`, {
-			en: `it installs ${what} on this machine and opens it on this project's panel. Allow?`,
-			zh: `会把${what}装到这台机器上，并在**这个项目**的面板上打开。允许吗？`
+			en: `it installs ${target.en} and shows it on this project's panel. Allow?`,
+			zh: `会安装${target.zh}，并显示在当前项目的面板上，允许吗？`
 		}, {
-			en: `The agent wants to install the module ${what} built in the DIY workshop (it changes what is installed on this machine) and open it here. Allow?`,
-			zh: `agent 想把 DIY 工坊里造好的${what}装上（会改这台机器上装的东西），并在**这个项目**的面板上打开。允许吗？`
+			en: `The agent wants to install ${target.en} built in the DIY workshop and show it on this project's panel. Allow?`,
+			zh: `agent 想安装${target.zh}，并显示在当前项目的面板上，允许吗？`
 		});
 	}
 	if (call.name !== "workbench_panels") return void 0;
 	if (readAction) return READ;
-	if (action === "hide") return askOf("workbench_panels hide removes a module from the panel", {
-		en: "it takes that module off this panel (its agent tools go offline here too). Allow?",
-		zh: `${what}会从这个项目的面板上收起来（这个项目里它的 agent 工具也一起下线）。允许吗？`
-	}, {
-		en: `The agent wants to remove ${what} from this project's panel (its agent tools go offline here too). Allow?`,
-		zh: `agent 想把 ${what} 从这个项目的面板上收起来（这个项目里它的 agent 工具也一起下线）。允许吗？`
-	});
-	if (action === "move") return askOf("workbench_panels move reorders the panel", {
-		en: `it reorders this panel (${what} goes first). Allow?`,
-		zh: `会调整这个项目面板的顺序（${what}放前面）。允许吗？`
-	}, {
-		en: `The agent wants to reorder this project's panel (put ${what} first). Allow?`,
-		zh: `agent 想调整这个项目面板的顺序（把 ${what} 放前面）。允许吗？`
-	});
+	if (action === "hide") {
+		const target = anyWorkbenchModule(id);
+		return askOf("workbench_panels hide removes a module from the panel", {
+			en: `it takes ${target.en} off this project's panel. Allow?`,
+			zh: `会把${target.zh}从当前项目的面板上收起来，允许吗？`
+		}, {
+			en: `The agent wants to take ${target.en} off this project's panel. Allow?`,
+			zh: `agent 想把${target.zh}从当前项目的面板上收起来，允许吗？`
+		});
+	}
+	if (action === "move") {
+		const target = anyWorkbenchModule(id);
+		return askOf("workbench_panels move reorders the panel", {
+			en: `it moves ${target.en} to the front of this project's panel. Allow?`,
+			zh: `会把${target.zh}移到当前项目面板的最前面，允许吗？`
+		}, {
+			en: `The agent wants to move ${target.en} to the front of this project's panel. Allow?`,
+			zh: `agent 想把${target.zh}移到当前项目面板的最前面，允许吗？`
+		});
+	}
 	if (action === "reset") return askOf("workbench_panels reset clears the panel", {
-		en: "it clears this panel (every module goes offline here). Allow?",
-		zh: "会清空这个项目的面板（所有模块在这个项目里都下线）。允许吗？"
+		en: `it clears the workbench panel for this project. Allow?`,
+		zh: "会清空工作台在当前项目的面板，允许吗？"
 	}, {
-		en: "The agent wants to clear this project's panel (every module goes offline here). Allow?",
-		zh: "agent 想清空这个项目的面板（所有模块在这个项目里都下线）。允许吗？"
+		en: "The agent wants to clear the workbench panel for this project. Allow?",
+		zh: "agent 想清空工作台在当前项目的面板，允许吗？"
 	});
+	if (action === "follow") {
+		const target = workbenchPanelRow(id);
+		return askOf("workbench_panels follow puts a row back to following the machine-level board", {
+			en: `it puts ${target.en} back to following the machine-level board. Allow?`,
+			zh: `会把${target.zh}改回跟随机器级默认板，允许吗？`
+		}, {
+			en: `The agent wants to put ${target.en} back to following the machine-level board. Allow?`,
+			zh: `agent 想把${target.zh}改回跟随机器级默认板，允许吗？`
+		});
+	}
+	const target = anyWorkbenchModule(id);
 	return askOf(`workbench_panels ${action ?? "(unknown action)"} changes the user's panel`, {
-		en: `it adds ${what} to this project's panel. Allow?`,
-		zh: `会把 ${what} 加到**这个项目**的面板上。允许吗？`
+		en: `it adds ${target.en} to this project's panel. Allow?`,
+		zh: `会把${target.zh}加到当前项目的面板上，允许吗？`
 	}, {
-		en: `The agent wants to add ${what} to this project's panel. Allow?`,
-		zh: `agent 想把 ${what} 加到**这个项目**的面板上。允许吗？`
+		en: `The agent wants to add ${target.en} to this project's panel. Allow?`,
+		zh: `agent 想把${target.zh}加到当前项目的面板上，允许吗？`
 	});
 };
 //#endregion
@@ -3586,26 +3696,26 @@ function registerDiyTools(ctx, market, panels) {
 	}
 	const tool = {
 		name: "workbench_diy",
-		description: "看 DIY 工坊里的模块现在走到哪一步，或者把它们装上 / 上板。只认工坊里的模块（不是市场 —— 装别的东西用 workbench_modules）。status 会把六件事一次说清（装了没 / 面板认得没 / 这个项目上开着没 / **起得来没** / 产物齐不齐 / 源码是否比产物新）并给出下一步，所以别自己去拼这些状态、也别反复 install。panel 是**面板上现在究竟是什么样**：这个工作区开了哪几张卡、每张最后是读到了还是读不到（带宿主回的原文）、有没有崩过 —— 用户说\"卡片不对 / 一片空白 / 一直转圈\"就先问它，别靠猜、也别让他截图给你。recon 是**先看有没有现成的**：拿一个关键词（站点名 / 系统名 / 域名）去 opencli 自带的那份目录里找，回它有哪些命令、要不要用户的 Chrome 登录；都没有就老实说，并给出\"写 adapter\"或\"探一条读\"两条路。用户不知道 opencli 是什么 —— 这一步别问他，自己查。probe 是**探一条读**：用用户浏览器里现有的登录去读一次，把结果与失败码归一（两拍、重试、平台码映射都在里面），探明之后再把它固化成模块宿主半侧的那一条。两种读法二选一：script（页面里跑一段回 JSON 的脚本，读接口）或 css（给一个选择器，读 DOM 那一行 —— 页面里没有接口时用这个，别写 document.querySelectorAll）。装是这台机器上的持久变更，要用户点头；**一辈子只装一次**：之后改源码只需 dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面），不要再调它。",
+		description: "DIY 工坊里的模块：看它走到哪一步，或把它装上 / 上板。只认工坊里造好的模块 —— 普通项目里装模块用 workbench_modules。status 是入口，照它给的\"下一步\"走。install 是这台机器上的持久变更，一个模块一辈子只装一次：之后改源码只需 dsh-wb-module build（宿主侧秒级热换；改了 client.js 刷新一下页面）。",
 		parameters: withApprovalNote({
 			type: "object",
 			properties: {
 				action: {
 					type: "string",
-					description: "list=工坊里有哪些模块（默认）；status=某个模块现在走到哪一步、下一步做什么；panel=这个工作区的面板上现在是什么样（谁读到了 / 谁读不到 / 谁崩过）；probe=在用户浏览器里探一条读；recon=先查 opencli 现成的能力（自带 adapter / 本机插件）；open=只把它在这个项目上板（不装）；install=装上并上板（第一次、会让用户点头）。",
+					description: "list=工坊里有哪些模块（默认）；status=某个模块走到哪一步、下一步做什么；panel=面板此刻的真实样子（宿主回的原文都在）—— 用户说\"卡片不对 / 一片空白 / 一直转圈\"就先调它；recon=先查 opencli 有没有现成的（自带 adapter / 本机插件）—— opencli 是什么自己查，别问用户；probe=用用户浏览器里现有的登录探一条读（script 或 css）；open=只上板（不装）；install=装上并上板（第一次，会让用户点头）。",
 					enum: [...ACTIONS$2]
 				},
 				unit: {
 					type: "string",
-					description: "status / panel / open / install 填：工坊里那个模块的单元 id（list 会给）。"
+					description: "status / panel / open / install 填：单元 id（list 会给）。"
 				},
 				script: {
 					type: "string",
-					description: "probe 要（与 css 二选一）：在页面里跑的脚本（必须回 JSON）。不在站点就回 { ok: false, code: \"not-on-site\" }；登录过期回 { ok: false, code: \"not-logged-in\" }；成功回 { ok: true, ...数据 }。"
+					description: "probe 要（与 css 二选一）：读接口用这个 —— 在页面里跑一段回 JSON 的脚本。不在站点就回 { ok: false, code: \"not-on-site\" }；登录过期回 { ok: false, code: \"not-logged-in\" }；成功回 { ok: true, ...数据 }。"
 				},
 				css: {
 					type: "string",
-					description: "probe 要（与 script 二选一）：一个 CSS 选择器，回页面上匹配到的元素（每行的单元格按换行拼在 text 里）。页面里没有接口时用它 —— 走的是一条固定的 DOM 读（找不到会自己打开 url 再读一遍），别写 document.querySelectorAll。"
+					description: "probe 要（与 script 二选一）：读 DOM 用这个 —— 给一个 CSS 选择器，宿主回匹配到的元素文本（每行的单元格按换行拼在 text 里）；不在站点会自己打开 url 再读一遍。"
 				},
 				limit: {
 					type: "number",
@@ -3617,11 +3727,11 @@ function registerDiyTools(ctx, market, panels) {
 				},
 				url: {
 					type: "string",
-					description: "probe / recon 用：那套系统的地址（probe 不在站点上时自己打开它再读一遍；recon 拿它取域名去找现成的 adapter）。"
+					description: "probe / recon 用：那套系统的地址（probe 不在站点上时自己打开它再读一遍；recon 从它取域名）。"
 				},
 				keyword: {
 					type: "string",
-					description: "recon 要：站点名 / 系统名 / 关键词（英文名或域名最准，例：bilibili、arxiv.org、cmdb）。用户说的是\"我想看 X\"，把它翻译成关键词是你的活 —— 别问他用哪个插件。"
+					description: "recon 要：站点名 / 系统名 / 域名（英文名或域名最准，例：bilibili、arxiv.org、cmdb）。"
 				},
 				loginUrl: {
 					type: "string",
@@ -3629,7 +3739,7 @@ function registerDiyTools(ctx, market, panels) {
 				},
 				session: {
 					type: "string",
-					description: "probe 用：浏览器桥上的会话名（默认 workbench，一般不用填）。"
+					description: "probe 用：会话名（默认 workbench，一般不用填）。"
 				},
 				open: {
 					type: "boolean",
@@ -4482,6 +4592,330 @@ async function installRouted(deps) {
 	});
 }
 //#endregion
+//#region src/shared/api/host/runtime-seed.ts
+var WORKSHOP_SKILLS_DIR = "workbench-module-diy";
+function runtimeSeedPaths(root) {
+	const opencliRoot = join(root, "opencli");
+	const opencliBinDir = join(opencliRoot, "bin");
+	const workshop = join(root, "diy");
+	return {
+		root,
+		entryDir: join(root, "bin"),
+		opencliRoot,
+		opencliBinDir,
+		opencliBin: join(opencliBinDir, "opencli"),
+		opencliHome: join(opencliRoot, "home"),
+		workshop,
+		workshopPackages: join(workshop, "packages"),
+		workshopManifest: join(workshop, "package.json"),
+		skillsLink: join(workshop, ".agents", "skills", WORKSHOP_SKILLS_DIR)
+	};
+}
+function runtimeSeedRootOf(ctx) {
+	const homePath = ctx.get("dshHomePath");
+	if (typeof homePath !== "function") return null;
+	try {
+		return homePath("workbench");
+	} catch {
+		return null;
+	}
+}
+function packageRootOf(moduleUrl) {
+	return dirname(dirname(dirname(fileURLToPath(moduleUrl))));
+}
+function isInstalledCopy(packageRoot) {
+	return packageRoot.split(sep).includes("node_modules");
+}
+function opencliWrapperScript(packageRoot, home) {
+	const script = join(packageRoot, "bin", "opencli-isolated");
+	return `#!/bin/sh\nexec env DSH_HOME=${quoteShellArg(home)} bash ${quoteShellArg(script)} "$@"\n`;
+}
+function workshopSeedPlan(packageRoot, home, root) {
+	const script = join(packageRoot, "scripts", "seed-workshop.sh");
+	const env = { DSH_HOME: home };
+	const log = join(root, "seed.log");
+	return {
+		entry: {
+			file: "bash",
+			args: [script, "entry"],
+			env,
+			log
+		},
+		full: {
+			file: "bash",
+			args: [script],
+			env,
+			log
+		}
+	};
+}
+function runDetached(command, onError, spawnImpl = spawn) {
+	let fd = null;
+	try {
+		fd = openSync(command.log, "a");
+		const child = spawnImpl(command.file, [...command.args], {
+			env: {
+				...process.env,
+				...command.env
+			},
+			detached: true,
+			stdio: [
+				"ignore",
+				fd,
+				fd
+			]
+		});
+		child.on("error", (error) => onError(`自举脚本没跑起来（${command.file}）：${String(error)}`));
+		child.unref();
+	} catch (error) {
+		onError(`自举脚本没跑起来（${command.file}）：${String(error)}`);
+	} finally {
+		if (fd !== null) closeQuietly(fd);
+	}
+}
+function closeQuietly(fd) {
+	try {
+		closeSync(fd);
+	} catch {
+		return;
+	}
+}
+function prependPath(entryDir, env = process.env) {
+	const parts = (env.PATH ?? "").split(delimiter).filter((part) => part !== "");
+	if (parts.includes(entryDir)) return false;
+	env.PATH = [entryDir, ...parts].join(delimiter);
+	return true;
+}
+function seedRuntimeFiles(options) {
+	const paths = runtimeSeedPaths(options.root);
+	const done = [];
+	try {
+		for (const dir of [
+			paths.entryDir,
+			paths.opencliBinDir,
+			paths.opencliHome,
+			paths.workshopPackages
+		]) mkdirSync(dir, { recursive: true });
+		const wanted = opencliWrapperScript(options.packageRoot, options.home);
+		if (readText(paths.opencliBin) !== wanted) {
+			rmSync(paths.opencliBin, { force: true });
+			writeFileSync(paths.opencliBin, wanted, "utf8");
+			chmodSync(paths.opencliBin, 493);
+			done.push(paths.opencliBin);
+		}
+		if (linkSkills(paths.skillsLink, join(options.packageRoot, "skills", "workbench-module-diy"), options.log)) done.push(paths.skillsLink);
+	} catch (error) {
+		options.log?.(`自举没做完：${String(error)}`);
+	}
+	return done;
+}
+function readText(file) {
+	try {
+		return readFileSync(file, "utf8");
+	} catch {
+		return null;
+	}
+}
+function readLink(link) {
+	try {
+		return readlinkSync(link);
+	} catch {
+		return null;
+	}
+}
+function linkSkills(link, source, log) {
+	if (!existsSync(source) || readLink(link) === source) return false;
+	try {
+		mkdirSync(dirname(link), { recursive: true });
+		rmSync(link, {
+			force: true,
+			recursive: true
+		});
+		symlinkSync(source, link, "dir");
+		return true;
+	} catch (error) {
+		log?.(`DIY 指引没挂上（${link}）：${String(error)}`);
+		return false;
+	}
+}
+//#endregion
+//#region src/shared/api/host/self-update.ts
+function runningVersionOf(moduleUrl) {
+	try {
+		const read = JSON.parse(readFileSync(new URL("../../package.json", moduleUrl), "utf8"));
+		return typeof read.version === "string" && read.version !== "" ? read.version : void 0;
+	} catch {
+		return;
+	}
+}
+function selfUpdatePaths(dshHome) {
+	const dir = join(dshHome, "workbench");
+	return {
+		dir,
+		script: join(dir, "self-update.sh"),
+		marker: join(dir, "self-update.json"),
+		log: join(dir, "self-update.log")
+	};
+}
+function recoveryCommand(input) {
+	return `dsh plugin --profile ${input.profile} add ${input.pkg}@${input.version}`;
+}
+function selfUpdateMarker(request, state, version, at) {
+	return {
+		...request,
+		state,
+		version,
+		at
+	};
+}
+function quoted(value) {
+	return `'${value.replaceAll("'", "'\\''")}'`;
+}
+function selfUpdateScript(request, paths) {
+	const rescue = recoveryCommand({
+		profile: request.profile,
+		pkg: request.pkg,
+		version: request.from
+	});
+	const lastsOne = recoveryCommand({
+		profile: request.profile,
+		pkg: request.pkg,
+		version: request.to === "" ? "latest" : request.to
+	});
+	const target = request.to === "" ? "latest" : request.to;
+	const landed = request.to === "" ? "is_other" : "is_to";
+	return `#!/usr/bin/env bash
+set -uo pipefail
+DSH_HOME=${quoted(request.dshHome)}
+PKG=${quoted(request.pkg)}
+PROFILE=${quoted(request.profile)}
+FROM=${quoted(request.from)}
+TO=${quoted(target)}
+MARKER=${quoted(paths.marker)}
+LOG=${quoted(paths.log)}
+PROFILE_DIR="$DSH_HOME/profiles/$PROFILE"
+say() { printf '%s %s\\n' "$(date '+%F %T')" "$*" >>"$LOG"; }
+on_disk() {
+  node -e 'const p=process.argv[1];try{process.stdout.write(require(p).version)}catch(e){}' \\
+    "$PROFILE_DIR/node_modules/$PKG/package.json" 2>/dev/null
+}
+write_marker() {
+  printf '{"pkg":"%s","profile":"%s","from":"%s","to":"%s","state":"%s","version":"%s","at":"%s"}\\n' \\
+    "$PKG" "$PROFILE" "$FROM" "$TO" "$1" "$2" "$(date -u '+%FT%TZ')" >"$MARKER"
+}
+install() { dsh plugin --profile "$PROFILE" add "$PKG@$1" >>"$LOG" 2>&1; }
+is_to() { [ "$(on_disk)" = "$TO" ]; }
+is_other() { [ -n "$(on_disk)" ] && [ "$(on_disk)" != "$FROM" ]; }
+if ! command -v dsh >/dev/null 2>&1; then
+  say "PATH 上没有 dsh —— 这一跳没跑。救法：${rescue}"
+  write_marker failed "$FROM"
+  exit 1
+fi
+say "开始 \${FROM} -> \${TO}（不卸任何一行）"
+write_marker running "$FROM"
+if install "$TO" && ${landed}; then
+  say "换好了：$(on_disk) 在盘上（目标 \${TO}），重启一次 dsh 才用得上"
+  write_marker ok "$(on_disk)"
+  exit 0
+fi
+say "换版没成（盘上 $(on_disk)）—— 把 \${FROM} 装回去"
+if install "$FROM" && [ "$(on_disk)" = "$FROM" ]; then
+  say "已回滚：\${FROM} 还在盘上，工作台这一行没被动过"
+  write_marker rolled-back "$FROM"
+  exit 0
+fi
+say "回滚也没成。救法：${rescue}（或 ${lastsOne}）"
+write_marker failed "$(on_disk)"
+exit 1
+`;
+}
+function planSelfUpdate(request, now = /* @__PURE__ */ new Date()) {
+	const paths = selfUpdatePaths(request.dshHome);
+	return {
+		paths,
+		script: selfUpdateScript(request, paths),
+		marker: selfUpdateMarker(request, "running", request.from, now.toISOString()),
+		command: {
+			file: "bash",
+			args: [paths.script],
+			env: {},
+			log: paths.log
+		}
+	};
+}
+function startSelfUpdate(request, onError, spawnImpl = spawn) {
+	const plan = planSelfUpdate(request);
+	mkdirSync(plan.paths.dir, { recursive: true });
+	writeFileSync(plan.paths.script, plan.script, { mode: 493 });
+	chmodSync(plan.paths.script, 493);
+	writeFileSync(plan.paths.marker, `${JSON.stringify(plan.marker)}\n`);
+	runDetached(plan.command, onError, spawnImpl);
+	const forward = recoveryCommand({
+		profile: request.profile,
+		pkg: request.pkg,
+		version: request.to === "" ? "latest" : request.to
+	});
+	return {
+		started: true,
+		paths: plan.paths,
+		forward
+	};
+}
+//#endregion
+//#region src/modules/panels/model/market-workbench-update.ts
+async function updateWorkbenchOnce(deps) {
+	const asked = deps.asked.trim();
+	const target = asked === "" ? PLUGIN_ID : asked;
+	if (target !== "@dsh-workbench/core") throw new Error(`这条路只更新工作台自己那一份（${PLUGIN_ID}）：${target}`);
+	const read = deps.workbench?.(target);
+	if (read === void 0) throw new Error(`读不到 profile 里装的 ${target} —— 没法判断装的是哪一份，更新做不了。`);
+	if (read.local === true) throw new Error("这份工作台是从本仓装进来的（开发副本），不从源上更新。");
+	const shell = deps.shell;
+	const registry = read.registry ?? await deps.profileRegistry?.();
+	const askedLatest = shell === void 0 || registry === void 0 ? void 0 : await latestVersion({
+		shell,
+		name: read.pkg,
+		registry,
+		force: true
+	});
+	if (shell !== void 0 && registry !== void 0 && askedLatest !== void 0) {
+		const missing = await missingReleaseParts({
+			shell,
+			registry,
+			version: askedLatest,
+			force: true
+		});
+		if (missing.length > 0) throw new Error(`源上已经有 ${read.pkg}@${askedLatest}，但这一份发布还没铺齐：${missing.join("、")} 在这一版上还拉不到。装上会缺依赖，稍等再试 —— 市场页那颗「重新检查」会重新探一次。`);
+	}
+	const home = deps.dshHome?.();
+	const profile = deps.profileName?.();
+	if (home === void 0 || profile === void 0 || profile === null) throw new Error("拿不到 DSH_HOME 或 profile 名字 —— 自更新要多一个进程在外头跑，这一步做不了。");
+	const spec = askedLatest === void 0 ? `${read.pkg}@latest` : `${read.pkg}@${askedLatest}`;
+	const started = (deps.selfUpdate ?? startSelfUpdate)({
+		dshHome: home,
+		profile,
+		pkg: read.pkg,
+		from: read.version,
+		to: askedLatest ?? "",
+		pinned: askedLatest !== void 0
+	}, (message) => deps.logger?.warn?.(`[dsh-workbench] ${message}`));
+	deps.logger?.info?.(`[dsh-workbench] 自更新交给外部执行器（${started.paths.script}）：${read.version} → ${askedLatest ?? "最新版"}，这一跳不掉自己那一行`);
+	return {
+		change: {
+			application: "restart-required",
+			stage: "install",
+			changed: false,
+			target: spec,
+			bundle: read.pkg
+		},
+		module: deps.installed?.(read.pkg) ?? {
+			kind: "unknown",
+			pkg: read.pkg
+		},
+		supply: { state: "no-needs" }
+	};
+}
+//#endregion
 //#region src/modules/panels/model/plugin-actions.ts
 function pluginKeptOf(retention, detail) {
 	if (retention === "keep-held") return { kind: "held" };
@@ -4722,7 +5156,7 @@ async function retryAfterRegistryFix(deps, manager, pkg, change) {
 //#endregion
 //#region src/modules/panels/model/market.ts
 function createMarketService(options) {
-	const { manifests, manifestsNow, probe, shell, logger, onInstalled, onUninstalled, isReleased, bundles, installed, modules, workbench, registries, ledger, references } = options;
+	const { manifests, manifestsNow, probe, shell, logger, onInstalled, onUninstalled, isReleased, bundles, installed, modules, workbench, registries, ledger, references, dshHome, profileName } = options;
 	const command = options.command ?? "opencli";
 	const catalog = () => manifestsNow?.() ?? manifests;
 	function requireEntry(unit) {
@@ -4874,7 +5308,11 @@ function createMarketService(options) {
 	async function removeInstalledBundle(manager, pkg) {
 		const first = await manager.remove(pkg);
 		if (first === null) throw new Error("插件管理器回的卸载结果看不懂。");
-		return retryAfterRegistryFix(registryFix, manager, pkg, first);
+		const settled = await retryAfterRegistryFix(registryFix, manager, pkg, first);
+		if (settled.application !== "failed" && settled.application !== "cancelled") return settled;
+		const put = await manager.setEnabled?.(pkg, true);
+		logger?.warn?.(`[dsh-workbench] ${pkg} 没卸成（${settled.errorCode ?? settled.application}）—— 已把它那一行放回名单，别让一次失败留在"装着但关着"`);
+		return put ?? settled;
 	}
 	function routeDeps(manager) {
 		return {
@@ -5065,31 +5503,23 @@ function createMarketService(options) {
 			return outcome;
 		},
 		async updateWorkbench(pkg) {
-			const target = pkg.trim() === "" ? PLUGIN_ID : pkg.trim();
-			if (target !== "@dsh-workbench/core") throw new Error(`这条路只更新工作台自己那一份（${PLUGIN_ID}）：${target}`);
-			const read = workbench?.(target);
-			if (read === void 0) throw new Error(`读不到 profile 里装的 ${target} —— 没法判断装的是哪一份，更新做不了。`);
-			if (read.local === true) throw new Error("这份工作台是从本仓装进来的（开发副本），不从源上更新。");
-			const registry = read.registry;
-			const latest = shell === void 0 || registry === void 0 ? void 0 : await latestVersion({
-				shell,
-				name: read.pkg,
-				registry,
-				force: true
+			return updateWorkbenchOnce({
+				asked: pkg,
+				...workbench === void 0 ? {} : { workbench },
+				...shell === void 0 ? {} : { shell },
+				...installed === void 0 ? {} : { installed },
+				...dshHome === void 0 ? {} : { dshHome },
+				...profileName === void 0 ? {} : { profileName },
+				profileRegistry: async () => {
+					try {
+						return (await requireBundles().registries())?.resolved ?? void 0;
+					} catch {
+						return;
+					}
+				},
+				...options.selfUpdate === void 0 ? {} : { selfUpdate: options.selfUpdate },
+				...logger === void 0 ? {} : { logger }
 			});
-			if (shell !== void 0 && registry !== void 0 && latest !== void 0) {
-				const missing = await missingReleaseParts({
-					shell,
-					registry,
-					version: latest,
-					force: true
-				});
-				if (missing.length > 0) throw new Error(`源上已经有 ${read.pkg}@${latest}，但这一份发布还没铺齐：${missing.join("、")} 在这一版上还拉不到。装上会缺依赖，稍等再试 —— 市场页那颗「重新检查」会重新探一次。`);
-			}
-			const spec = latest === void 0 ? `${read.pkg}@latest` : `${read.pkg}@${latest}`;
-			const outcome = await replaceDshBundle(routeDeps(requireBundles()), spec, { ...registry === void 0 ? {} : { registry } });
-			logger?.info?.(`[dsh-workbench] 已更新工作台 ${read.version} → ${latest ?? "最新版"}`);
-			return outcome;
 		},
 		async updatePlugin(pkg) {
 			const outcome = await plugins.update(pkg);
@@ -5293,30 +5723,30 @@ function registerMarketTools(ctx, market) {
 	}
 	const tool = {
 		name: "workbench_modules",
-		description: "看 / 装 / 升 / 卸工作台的面板模块，以及用户自己装的 opencli 插件。install-bundle 按 spec（包名，可带版本；git / tarball / 本地路径也行）把模块包装进 profile —— 装完会连带装它声明的 opencli 插件；其余 action 按模块 id 动它要的外部供给；update-workbench 把工作台自己更新到源上的新版（客户端与宿主一般会自己换上；真要重启时结果里会说，重启由用户来，别自己重启）。卸载只动工作台运行时，不影响终端那套；共用依赖只有升级。",
+		description: "看 / 装 / 升 / 卸工作台的面板模块，以及用户自己装的 opencli 插件。install-bundle 按 spec 把模块包装进 profile；按模块 id 的 install / update 只装、升它声明的那份外部供给（opencli 插件与库），不换模块包本身；uninstall 连模块包一起卸。update-workbench 把工作台自己更新到源上的新版（一般自己换上，要重启时结果里会说；重启由用户来）。卸模块只动工作台运行时，不影响终端那套 dsh；共用依赖只有升级。",
 		parameters: withApprovalNote({
 			type: "object",
 			properties: {
 				action: {
 					type: "string",
-					description: "install-bundle=按 spec 装模块包（要 spec），update-dependency=升级共用依赖（要 id），update-plugin / uninstall-plugin=动用户自己装的 opencli 插件（要 plugin），update-workbench=把工作台自己更新到新版（不用别的参数），其余=对模块（要 id）。",
+					description: "list=看状态（默认）；install / update / uninstall 要 id；install-bundle 要 spec（换源给 registry）；update-dependency 要 id；update-plugin / uninstall-plugin 要 plugin。",
 					enum: [...ACTIONS$1]
 				},
 				id: {
 					type: "string",
-					description: "模块 id（如 coding-issues）；update-dependency 填共用依赖 id（如 plugin:coding）。"
+					description: "模块 id（如 coding-issues）；update-dependency 用共用依赖 id（如 plugin:coding）。"
 				},
 				spec: {
 					type: "string",
-					description: "install-bundle 用：包名（可带 @版本），也可以是 git 地址 / tarball / 本地绝对路径。"
+					description: "包名（可带 @版本），也可以是 git 地址 / tarball / 本地绝对路径。"
 				},
 				registry: {
 					type: "string",
-					description: "install-bundle 用：先问哪个源（不填就用这个 profile 自己配的源）。"
+					description: "去哪个源装（不填就用这份 profile 自己配的源）。"
 				},
 				plugin: {
 					type: "string",
-					description: "update-plugin / uninstall-plugin 用：opencli 插件的包名或插件名（就是市场「已安装 opencli 插件」那一段里的名字，如 cmdb 或 opencli-plugin-cmdb）。"
+					description: "opencli 插件的包名或插件名（如 cmdb 或 opencli-plugin-cmdb）。"
 				}
 			},
 			required: ["action"],
@@ -5872,13 +6302,13 @@ function registerPanelTools(ctx, panels, values) {
 	}
 	const tool = {
 		name: "workbench_panels",
-		description: "看或调右侧面板：启用哪些套件、什么顺序。启用/收起 = 卡片与 agent 工具一起上下线（别的项目不受影响，不删数据）。收起是\"这个工作区明确不要它\"，连那些在机器级默认板上开着的套件也照样在这个工作区收起来，之后 show 能放回来。顺序只属于工作区：没排过的按各模块自己声明的次序（开着的在前、关着的跟在后面）；show 或 move 过就以那次为准。机器级默认板只回答\"默认开哪几行\"，没有顺序这一说。scope=machine 动的是\"机器级默认板\" —— 它只是还没配过的工作区的默认值，已经自己配过的工作区保持自己的选择，不会被它改。在那份板上 hide = 明确写下\"不要它\"，这一笔比名单更管用：名单里还列着它也算不要，没提过它的工作区因此看不到它；show 会把这笔划掉、把它放回去。本工作区那份板只记**改过的那几行**（逐行覆盖）：没提到的行跟着机器级默认板走，所以那份板以后改了，没改过的工作区会跟着变。",
+		description: "看或调右侧面板：哪些套件开着、什么顺序。两份板：本工作区那份优先，没提过的行看机器级默认板 —— 那只是还没配过的工作区的默认值（已经自己配过的工作区保持自己的选择）；本工作区只记改过的那几行，所以那份板以后改了，没改过的工作区跟着变。收起 = 这个工作区明确不要它：卡片与 agent 工具一起在这个工作区下线，连机器级默认板上开着的套件也照样收起；别的项目不受影响、不删数据，要放回来用 show。在机器级默认板上 hide 是写下\"不要它\"这一笔 —— 比名单更管用，show 会把这一笔划掉。顺序只属于工作区：没排过的按各模块自己声明的次序（开着的在前、关着的在后），show 或 move 过就以那次为准。",
 		parameters: withApprovalNote({
 			type: "object",
 			properties: {
 				action: {
 					type: "string",
-					description: "show=这个工作区要它（之前收起的也放回来）；hide=这个工作区明确不要它（卡片与工具一起下线，默认在机器上也开着的套件同样收起，别的项目不受影响）；move=调这个工作区的顺序（新开一行时它排在最后）；reset=清掉这个工作区改过的那些行（改完就全部回到跟着机器级默认板走）；follow=把某一行放回跟随（带 id = 只放回那一行；不带 id = 全部放回）。",
+					description: "list=看现在这份板（默认）；show=这个工作区要它（之前收起的也放回来）；hide=这个工作区明确不要它；move=调顺序（新开一行时排最后）；reset=清掉这个工作区改过的行（改完全部回到跟着机器级默认板走）；follow=某一行放回跟随（带 id = 只那一行，不带 = 全部）。",
 					enum: [
 						"list",
 						"show",
@@ -5890,7 +6320,7 @@ function registerPanelTools(ctx, panels, values) {
 				},
 				id: {
 					type: "string",
-					description: "show / hide / move 必填；follow 可选（带 id = 只把那一行放回跟随）。"
+					description: "show / hide / move 必填：要动的套件 id。"
 				},
 				index: {
 					type: "integer",
@@ -5898,7 +6328,7 @@ function registerPanelTools(ctx, panels, values) {
 				},
 				scope: {
 					type: "string",
-					description: "workspace（默认）=只动当前工作区；machine=动机器级默认板，那是还没配过的工作区的默认值 —— 已经自己配过的工作区保持自己的选择，不受它影响。机器级板没有顺序这一说（move 会报错）。",
+					description: "workspace（默认）=只动当前工作区；machine=动那份机器级默认板（只影响还没配过的工作区；没有顺序一说，move 会报错）。",
 					enum: ["workspace", "machine"]
 				}
 			},
@@ -6034,6 +6464,8 @@ var OWNED = [{
 				panels.accept(unit);
 			},
 			isReleased: (unit) => panels.isReleased(unit),
+			dshHome: () => dshHome(),
+			profileName: () => profileDir === null ? null : basename(profileDir),
 			logger
 		});
 		return {
@@ -6077,155 +6509,311 @@ function assembleHostUnits(registry) {
 	for (const face of OWNED) registry.registerOwned(face);
 }
 //#endregion
-//#region src/shared/api/host/runtime-seed.ts
-var WORKSHOP_SKILLS_DIR = "workbench-module-diy";
-function runtimeSeedPaths(root) {
-	const opencliRoot = join(root, "opencli");
-	const opencliBinDir = join(opencliRoot, "bin");
-	const workshop = join(root, "diy");
+//#region src/shared/api/host/unit-readiness.ts
+function unitReadiness(manifest, lookup) {
+	const missingHard = manifest.host.inject.filter((name) => lookup(name) === void 0);
+	const missingSoft = (manifest.host.optional ?? []).filter((name) => lookup(name) === void 0);
 	return {
-		root,
-		entryDir: join(root, "bin"),
-		opencliRoot,
-		opencliBinDir,
-		opencliBin: join(opencliBinDir, "opencli"),
-		opencliHome: join(opencliRoot, "home"),
-		workshop,
-		workshopPackages: join(workshop, "packages"),
-		workshopManifest: join(workshop, "package.json"),
-		skillsLink: join(workshop, ".agents", "skills", WORKSHOP_SKILLS_DIR)
+		canMount: missingHard.length === 0,
+		missingHard,
+		missingSoft
 	};
 }
-function runtimeSeedRootOf(ctx) {
-	const homePath = ctx.get("dshHomePath");
-	if (typeof homePath !== "function") return null;
-	try {
-		return homePath("workbench");
-	} catch {
-		return null;
-	}
-}
-function packageRootOf(moduleUrl) {
-	return dirname(dirname(dirname(fileURLToPath(moduleUrl))));
-}
-function isInstalledCopy(packageRoot) {
-	return packageRoot.split(sep).includes("node_modules");
-}
-function opencliWrapperScript(packageRoot, home) {
-	const script = join(packageRoot, "bin", "opencli-isolated");
-	return `#!/bin/sh\nexec env DSH_HOME=${quoteShellArg(home)} bash ${quoteShellArg(script)} "$@"\n`;
-}
-function workshopSeedPlan(packageRoot, home, root) {
-	const script = join(packageRoot, "scripts", "seed-workshop.sh");
-	const env = { DSH_HOME: home };
-	const log = join(root, "seed.log");
+//#endregion
+//#region src/shared/api/host/mount-units.ts
+function withRunsRoute(result, unit) {
+	const runs = result.longTasks;
+	if (runs === void 0) return result;
 	return {
-		entry: {
-			file: "bash",
-			args: [script, "entry"],
-			env,
-			log
-		},
-		full: {
-			file: "bash",
-			args: [script],
-			env,
-			log
+		...result,
+		routes: {
+			...result.routes,
+			[runsRouteOf(unit)]: (search) => {
+				const path = (param(search, "path") ?? "").trim();
+				return {
+					ok: true,
+					runs: path === "" ? [] : runs.current(path)
+				};
+			}
 		}
 	};
 }
-function runDetached(command, onError, spawnImpl = spawn) {
-	let fd = null;
-	try {
-		fd = openSync(command.log, "a");
-		const child = spawnImpl(command.file, [...command.args], {
-			env: {
-				...process.env,
-				...command.env
-			},
-			detached: true,
-			stdio: [
-				"ignore",
-				fd,
-				fd
-			]
+function notedRegistry(registry, writesOf) {
+	return { register(definition) {
+		if (!writesOf(definition.name)) return registry.register(definition);
+		const noted = withApprovalNote(definition.parameters, { required: true });
+		return registry.register(noted === definition.parameters ? definition : {
+			...definition,
+			parameters: noted
 		});
-		child.on("error", (error) => onError(`自举脚本没跑起来（${command.file}）：${String(error)}`));
-		child.unref();
-	} catch (error) {
-		onError(`自举脚本没跑起来（${command.file}）：${String(error)}`);
-	} finally {
-		if (fd !== null) closeQuietly(fd);
-	}
+	} };
 }
-function closeQuietly(fd) {
-	try {
-		closeSync(fd);
-	} catch {
-		return;
-	}
+function scopedMountCtx(ctx, registry, writesOf) {
+	const tools = notedRegistry(registry, writesOf);
+	const get = (name) => {
+		const value = ctx.get(name);
+		return name === "tools" && value !== void 0 ? tools : value;
+	};
+	return new Proxy(ctx, { get(target, key) {
+		if (key === "get") return get;
+		const value = Reflect.get(target, key, target);
+		return typeof value === "function" ? value.bind(target) : value;
+	} });
 }
-function prependPath(entryDir, env = process.env) {
-	const parts = (env.PATH ?? "").split(delimiter).filter((part) => part !== "");
-	if (parts.includes(entryDir)) return false;
-	env.PATH = [entryDir, ...parts].join(delimiter);
-	return true;
+function failureReasonOf(error) {
+	if (error instanceof Error) return error.message;
+	return typeof error === "string" ? error : String(error);
 }
-function seedRuntimeFiles(options) {
-	const paths = runtimeSeedPaths(options.root);
-	const done = [];
-	try {
-		for (const dir of [
-			paths.entryDir,
-			paths.opencliBinDir,
-			paths.opencliHome,
-			paths.workshopPackages
-		]) mkdirSync(dir, { recursive: true });
-		const wanted = opencliWrapperScript(options.packageRoot, options.home);
-		if (readText(paths.opencliBin) !== wanted) {
-			rmSync(paths.opencliBin, { force: true });
-			writeFileSync(paths.opencliBin, wanted, "utf8");
-			chmodSync(paths.opencliBin, 493);
-			done.push(paths.opencliBin);
-		}
-		if (linkSkills(paths.skillsLink, join(options.packageRoot, "skills", "workbench-module-diy"), options.log)) done.push(paths.skillsLink);
-	} catch (error) {
-		options.log?.(`自举没做完：${String(error)}`);
-	}
-	return done;
+function fail(ledger, item, reason) {
+	ledger.failed.add(item);
+	ledger.failures.push({
+		id: item.host.manifest.id,
+		reason
+	});
 }
-function readText(file) {
-	try {
-		return readFileSync(file, "utf8");
-	} catch {
-		return null;
+function collectRoutes(mounted, ledger) {
+	const routes = {};
+	const owner = /* @__PURE__ */ new Map();
+	const routesOfUnit = /* @__PURE__ */ new Map();
+	for (const item of mounted) {
+		if (ledger.failed.has(item)) continue;
+		const unit = item.host.manifest.id;
+		const accepted = [];
+		let problem;
+		for (const [key, handler] of Object.entries(item.result.routes)) {
+			if (key !== unit && !key.startsWith(`${unit}/`)) {
+				problem = `路由名要住在自己那一格的命名空间里（${unit} 或 ${unit}/…）：${key} 不属于 ${unit} —— 装 / 升 / 卸时点名不到它，那个模块的数据会停在旧值`;
+				break;
+			}
+			const previous = owner.get(key);
+			if (previous !== void 0) {
+				problem = `路由名冲突：${key} 由套件 ${previous} 与 ${unit} 同时声明`;
+				break;
+			}
+			accepted.push([key, handler]);
+		}
+		if (problem !== void 0) {
+			fail(ledger, item, problem);
+			continue;
+		}
+		for (const [key, handler] of accepted) {
+			owner.set(key, unit);
+			routes[key] = handler;
+			const own = routesOfUnit.get(unit);
+			if (own === void 0) routesOfUnit.set(unit, [key]);
+			else own.push(key);
+		}
 	}
+	return {
+		routes,
+		owners: owner,
+		routesOfUnit
+	};
 }
-function readLink(link) {
-	try {
-		return readlinkSync(link);
-	} catch {
-		return null;
+function collectNamed(mounted, ledger, pickMany, label) {
+	const owner = /* @__PURE__ */ new Map();
+	const out = [];
+	for (const item of mounted) {
+		if (ledger.failed.has(item)) continue;
+		const unit = item.host.manifest.id;
+		const entries = pickMany(item);
+		if (entries.length === 0) continue;
+		const clash = entries.find((entry) => owner.has(entry.resource));
+		if (clash !== void 0) {
+			fail(ledger, item, `${label}名冲突：${clash.resource} 由套件 ${owner.get(clash.resource)} 与 ${unit} 同时声明`);
+			continue;
+		}
+		for (const entry of entries) {
+			owner.set(entry.resource, unit);
+			out.push({
+				...entry,
+				unit
+			});
+		}
 	}
+	return out;
 }
-function linkSkills(link, source, log) {
-	if (!existsSync(source) || readLink(link) === source) return false;
-	try {
-		mkdirSync(dirname(link), { recursive: true });
-		rmSync(link, {
-			force: true,
-			recursive: true
-		});
-		symlinkSync(source, link, "dir");
-		return true;
-	} catch (error) {
-		log?.(`DIY 指引没挂上（${link}）：${String(error)}`);
-		return false;
+function collectContextRenderers(mounted, ledger) {
+	const table = /* @__PURE__ */ new Map();
+	const owner = /* @__PURE__ */ new Map();
+	for (const item of mounted) {
+		if (ledger.failed.has(item)) continue;
+		const unit = item.host.manifest.id;
+		const context = item.result.context;
+		if (context === void 0) continue;
+		const clash = context.kinds.find((kind) => owner.has(kind));
+		if (clash !== void 0) {
+			fail(ledger, item, `对话引用的 kind 冲突：${clash} 由套件 ${owner.get(clash)} 与 ${unit} 同时认领`);
+			continue;
+		}
+		for (const kind of context.kinds) {
+			owner.set(kind, unit);
+			table.set(kind, (ref) => context.render(ref));
+		}
 	}
+	return table;
 }
-//#endregion
-//#region src/shared/api/host/events.ts
-var HEARTBEAT_MS = 25e3;
+function pickProvider(mounted, ledger, pick, label) {
+	let chosen;
+	let chosenBy;
+	for (const item of mounted) {
+		if (ledger.failed.has(item)) continue;
+		const value = pick(item);
+		if (value === void 0) continue;
+		if (chosen === void 0) {
+			chosen = value;
+			chosenBy = item.host.manifest.id;
+			continue;
+		}
+		fail(ledger, item, `${label}只能有一个提供者，现在是：${chosenBy}、${item.host.manifest.id}`);
+	}
+	return chosen;
+}
+function collectWarmReads(mounted) {
+	const declarations = mounted.map((item) => item.result.warmReads).filter((declare) => declare !== void 0);
+	return () => {
+		const seen = /* @__PURE__ */ new Set();
+		const reads = [];
+		for (const read of declarations.flatMap((declare) => declare())) {
+			const key = read.join(" ");
+			if (seen.has(key)) continue;
+			seen.add(key);
+			reads.push(read);
+		}
+		return reads;
+	};
+}
+function mountUnits(units, deps) {
+	const store = deps.store ?? createWorkspaceStore({ root: null });
+	const ownedUnits = deps.ownedUnits ?? (() => []);
+	const mounted = [];
+	const skipped = [];
+	const longTaskDisposers = /* @__PURE__ */ new Map();
+	const ledger = {
+		failed: /* @__PURE__ */ new Set(),
+		failures: []
+	};
+	for (const host of units) {
+		const readiness = unitReadiness(host.manifest, (dep) => deps.ctx.get(dep));
+		if (!readiness.canMount) {
+			skipped.push({
+				id: host.manifest.id,
+				missing: readiness.missingHard
+			});
+			continue;
+		}
+		const unit = host.manifest.id;
+		const tools = deps.ctx.get("tools");
+		const writes = toolUnits(deps.manifests());
+		const mountCtx = tools === void 0 ? deps.ctx : scopedMountCtx(deps.ctx, tools, (name) => writes.get(name)?.writes === true);
+		const longTasks = deps.longTasks === void 0 ? void 0 : createLongTaskHost({
+			scope: deps.longTasks.scope,
+			unit,
+			bump: deps.longTasks.bump
+		});
+		let result;
+		try {
+			result = host.face.mount({
+				manifest: host.manifest,
+				ctx: mountCtx,
+				logger: deps.logger,
+				manifests: deps.manifests,
+				ownedUnits,
+				...deps.installable === void 0 ? {} : { installable: deps.installable },
+				...deps.opencliCommand === void 0 ? {} : { opencliCommand: deps.opencliCommand },
+				...deps.probe === void 0 ? {} : { probe: deps.probe },
+				...deps.values === void 0 ? {} : { values: deps.values },
+				...longTasks === void 0 ? {} : { longTasks: longTasks.host },
+				store
+			});
+		} catch (error) {
+			longTasks?.dispose();
+			ledger.failures.push({
+				id: unit,
+				reason: failureReasonOf(error)
+			});
+			continue;
+		}
+		const item = {
+			host,
+			readiness,
+			result: withRunsRoute(result, unit)
+		};
+		mounted.push(item);
+		if (longTasks !== void 0) longTaskDisposers.set(item, longTasks.dispose);
+	}
+	const collected = collectRoutes(mounted, ledger);
+	const prefs = collectNamed(mounted, ledger, (item) => item.result.prefs === void 0 ? [] : [item.result.prefs], "偏好资源");
+	const actions = collectNamed(mounted, ledger, (item) => item.result.actions ?? [], "动作资源");
+	const owners = new Map(collected.owners);
+	for (const entry of [...prefs, ...actions]) owners.set(entry.resource, entry.unit);
+	const factsOf = /* @__PURE__ */ new Map();
+	for (const item of mounted) {
+		if (ledger.failed.has(item)) continue;
+		const declare = item.result.factsOf;
+		if (declare !== void 0) factsOf.set(item.host.manifest.id, declare);
+	}
+	const gate = pickProvider(mounted, ledger, (item) => item.result.gate, "启停闸门");
+	const provision = pickProvider(mounted, ledger, (item) => item.result.provision, "机器供给");
+	const contextRenderers = collectContextRenderers(mounted, ledger);
+	const alive = mounted.filter((item) => !ledger.failed.has(item));
+	for (const item of mounted) {
+		if (!ledger.failed.has(item)) continue;
+		longTaskDisposers.get(item)?.();
+		longTaskDisposers.delete(item);
+	}
+	return {
+		mounted: alive,
+		routes: collected.routes,
+		owners,
+		routesOfUnit: collected.routesOfUnit,
+		factsOf,
+		gate,
+		prefs,
+		actions,
+		provision,
+		contextRenderers,
+		skipped,
+		failed: ledger.failures,
+		warmReads: collectWarmReads(alive),
+		disposeLongTasks: () => {
+			for (const dispose of [...longTaskDisposers.values()]) dispose();
+			longTaskDisposers.clear();
+		}
+	};
+}
+//#endregion
+//#region src/shared/api/host/post-channels.ts
+function createPostChannels(deps) {
+	const { ctx, mounted, facts, shellActions } = deps;
+	let undo = [];
+	const bind = (prefix, register) => {
+		try {
+			undo.push(register());
+		} catch (error) {
+			ctx.logger?.warn?.(`[dsh-workbench] ${prefix} 这条写通道没接上：${failureReasonOf(error)}`);
+		}
+	};
+	return {
+		rebind(wrote) {
+			for (const dispose of undo.reverse()) dispose?.();
+			undo = [];
+			const prefs = [...mounted.values()].flatMap((item) => item.plan.prefs);
+			const actions = [...shellActions, ...[...mounted.values()].flatMap((item) => item.plan.actions)];
+			const provision = [...mounted.values()].find((item) => item.plan.provision !== void 0)?.plan.provision;
+			if (prefs.length > 0) bind(PREFS_PREFIX, () => registerPrefs(ctx, prefs, wrote));
+			if (actions.length > 0) bind(ACTIONS_PREFIX, () => registerActions(ctx, actions, wrote));
+			if (provision !== void 0) bind(PROVISION_PREFIX, () => registerProvision(ctx, provision, facts));
+		},
+		dispose() {
+			for (const dispose of undo) dispose?.();
+			undo = [];
+		}
+	};
+}
+//#endregion
+//#region src/shared/api/host/events.ts
+var HEARTBEAT_MS = 25e3;
 function frame(payload) {
 	return `data: ${JSON.stringify(payload)}\n\n`;
 }
@@ -6435,10 +7023,11 @@ async function workbenchVersion(input) {
 		pkg: read.pkg,
 		installed: read.version,
 		...latest === void 0 ? {} : { latest },
+		...input.running === void 0 ? {} : { running: input.running },
 		...read.local === true ? { local: true } : {}
 	};
 }
-function moduleVersionsHandler(ctx, shell) {
+function moduleVersionsHandler(ctx, shell, running) {
 	return async (search) => {
 		const manager = readBundleManager(ctx);
 		if (manager === void 0) return {
@@ -6483,6 +7072,7 @@ function moduleVersionsHandler(ctx, shell) {
 			shell,
 			fallback,
 			force,
+			...running === void 0 ? {} : { running },
 			logger: ctx.logger
 		});
 		return {
@@ -7036,485 +7626,211 @@ async function probeLibs(options) {
 		const installed = installedLibVersion(need.name);
 		if (installed === void 0) {
 			found.set(need.name, {
-				...base,
-				status: "missing",
-				command: libInstallCommand({ need })
-			});
-			continue;
-		}
-		if (checkVersionRange(need.version, installed) !== "satisfied") {
-			found.set(need.name, {
-				...base,
-				status: "unsatisfied",
-				installed,
-				command: libInstallCommand({ need })
-			});
-			continue;
-		}
-		const registry = process.env[need.registryEnv]?.trim() || need.registryDefault;
-		const latest = await latestVersion({
-			shell,
-			name: need.name,
-			registry,
-			force
-		});
-		const behind = latest !== void 0 && isNewerVersion(latest, installed);
-		found.set(need.name, {
-			...base,
-			status: behind ? "outdated" : "ok",
-			installed,
-			...latest === void 0 ? {} : { latest },
-			...behind ? { command: libInstallCommand({
-				need,
-				version: latest
-			}) } : {}
-		});
-	}
-	return found;
-}
-//#endregion
-//#region src/shared/api/host/probe-verdict.ts
-function evaluateUnit(list, unit, failure, command = "opencli", releases = /* @__PURE__ */ new Map(), libs = []) {
-	const isPlugin = (item) => typeof item === "object" && item !== null;
-	const needs = unit.plugins ?? [];
-	const required = needs.flatMap((need) => need.commands ?? []);
-	const primary = needs[0]?.name;
-	if (failure !== void 0 || list === void 0) return {
-		unit: unit.unit,
-		...primary === void 0 ? {} : { plugin: primary },
-		status: "unchecked",
-		required,
-		missing: [],
-		detail: failure ?? "探不动",
-		...libs.length === 0 ? {} : { libs }
-	};
-	const plugins = list.filter(isPlugin);
-	const installed = new Map(plugins.map((item) => [String(item.name), item]));
-	const states = needs.map((need) => {
-		const hit = installed.get(need.name);
-		if (hit === void 0) {
-			const source = resolvePluginSource(need.installSource, process.env, {
-				command,
-				plugin: need.name
-			});
-			return {
-				name: need.name,
-				status: "missing",
-				missing: [],
-				install: source.ok ? "ready" : source.problem,
-				command: source.ok ? source.line : pluginInstallCommand(need.name)
-			};
-		}
-		const available = new Set((Array.isArray(hit.commands) ? hit.commands : []).map(String));
-		const missing = (need.commands ?? []).filter((name) => !available.has(name));
-		const release = releases.get(need.name);
-		const behind = release?.latest !== void 0 && isNewerVersion(release.latest, release.installed);
-		const commandsBehind = missing.length > 0;
-		const upgrade = behind && release?.latest !== void 0 ? upgradeLine(need, command, release.latest) : void 0;
-		return {
-			name: need.name,
-			status: commandsBehind || behind ? "outdated" : "ok",
-			missing,
-			...release === void 0 ? {} : { release },
-			...commandsBehind || behind ? { command: upgrade ?? pluginUpdateCommand(need.name) ?? pluginInstallCommand(need.name) } : {}
-		};
-	});
-	const absent = states.filter((state) => state.status === "missing");
-	const outdated = states.filter((state) => state.status === "outdated");
-	const missing = states.flatMap((state) => state.missing);
-	const libMissing = libs.filter((state) => state.status === "missing");
-	const libMismatch = libs.filter((state) => state.status === "unsatisfied");
-	const libBehind = libs.filter((state) => state.status === "outdated");
-	const status = absent.length > 0 || libMissing.length > 0 || libMismatch.length > 0 ? "missing-plugin" : missing.length > 0 ? "missing-commands" : "ok";
-	const blocked = absent.find((state) => state.install !== "ready");
-	const install = absent.length === 0 ? libMissing.length > 0 || libMismatch.length > 0 ? "ready" : void 0 : blocked === void 0 ? "ready" : blocked.install;
-	const fix = status === "missing-plugin" ? install === "ready" ? "install" : void 0 : outdated.length > 0 || libBehind.length > 0 ? "update" : void 0;
-	const first = absent[0] ?? outdated[0] ?? libMissing[0] ?? libMismatch[0] ?? libBehind[0];
-	const gaps = [...missing.length === 0 ? [] : [`缺必需：${missing.join("、")}`]];
-	const newer = states.filter((state) => state.release?.latest !== void 0 && isNewerVersion(state.release.latest, state.release.installed));
-	const versionText = newer.length === 0 ? "" : `（源上有新版：${newer.map((state) => `${state.release?.installed ?? ""} → ${state.release?.latest ?? ""}`).join("、")}）`;
-	const absentNames = [...absent.map((state) => state.name), ...libMissing.map((state) => state.name)];
-	const mismatchText = libMismatch.map((state) => {
-		const declared = unit.libs?.find((need) => need.name === state.name)?.version?.trim();
-		return `${state.name}（装的是 ${state.installed ?? "未知"}，声明要 ${declared === void 0 || declared === "" ? "任意版本" : declared}）`;
-	});
-	return {
-		unit: unit.unit,
-		...primary === void 0 ? {} : { plugin: primary },
-		status,
-		required,
-		missing,
-		detail: absentNames.length > 0 || mismatchText.length > 0 ? [...absentNames.length === 0 ? [] : [`${plugins.length} 个已装插件里没有 ${absentNames.join("、")}`], ...mismatchText].join("；") : `${needs.length} 份安装都在${gapsText(gaps)}${versionText}${libs.length === 0 ? "" : `；交叉依赖：${libs.map((state) => `${state.name}${state.installed === void 0 ? " 未装" : ` ${state.installed}`}`).join("、")}${libBehind.length === 0 ? "" : "（源上有新版）"}`}`,
-		...fix === void 0 && first === void 0 ? {} : { command: fix === "install" ? (absent[0] ?? first)?.command : first?.command },
-		...fix === void 0 ? {} : { fix },
-		...install === void 0 ? {} : { install },
-		plugins: states,
-		...libs.length === 0 ? {} : { libs }
-	};
-}
-function gapsText(gaps) {
-	return gaps.length === 0 ? "" : `（${gaps.join("；")}）`;
-}
-function pluginUpdateCommand(plugin) {
-	return plugin === void 0 ? void 0 : `opencli plugin update ${plugin}`;
-}
-function pluginInstallCommand(plugin) {
-	return `opencli plugin install <${plugin ?? "插件"}源>`;
-}
-function upgradeLine(need, command, latest) {
-	const source = resolvePluginSource(need.installSource, process.env, {
-		command,
-		plugin: need.name,
-		version: latest,
-		mode: "update"
-	});
-	return source.ok ? source.line : void 0;
-}
-//#endregion
-//#region src/shared/api/host/probe-units.ts
-function parsePluginList(stdout) {
-	const parsed = parseJsonLoose(stdout);
-	if (Array.isArray(parsed)) return parsed;
-	return /no plugins? installed/i.test(stdout) ? [] : void 0;
-}
-async function probeReleases(units, options) {
-	const needs = /* @__PURE__ */ new Map();
-	for (const unit of units) for (const need of unit.plugins ?? []) {
-		const source = need.installSource;
-		if (source?.kind === "npm") needs.set(need.name, source);
-	}
-	const found = /* @__PURE__ */ new Map();
-	for (const [plugin, source] of needs) {
-		const registry = npmRegistryOf(source, process.env);
-		const signal = await probeRelease({
-			shell: options.shell,
-			package: source.package,
-			...registry.ok ? { registry: registry.value } : {},
-			force: options.force
-		});
-		if (signal !== void 0) found.set(plugin, signal);
-	}
-	return found;
-}
-async function probeUnits(options) {
-	const { shell, command = "opencli", units, force = false } = options;
-	const hits = units.map((unit) => unitCache.get(`${command}:${unit.unit}`));
-	if (!force && hits.every((hit) => hit !== void 0)) return hits;
-	const result = await runShell(shell, `${command} plugin list -f json`, { timeoutMs: OPENCLI_TIMEOUT_MS }).then((value) => ({
-		kind: "ok",
-		stdout: value.exitCode === 0 ? value.stdout : "",
-		stderr: value.stderr
-	}), (error) => ({
-		kind: "error",
-		stdout: "",
-		stderr: String(error)
-	}));
-	const list = result.kind === "ok" ? parsePluginList(result.stdout) : void 0;
-	const failure = result.kind === "error" ? result.stderr : list === void 0 ? "plugin list 的输出读不懂（不是 JSON 数组）" : void 0;
-	if (failure !== void 0) return units.map((unit) => {
-		const capability = {
-			unit: unit.unit,
-			...unit.plugins?.[0] === void 0 ? {} : { plugin: unit.plugins[0].name },
-			status: "unchecked",
-			required: (unit.plugins ?? []).flatMap((need) => need.commands ?? []),
-			missing: [],
-			detail: failure
-		};
-		unitCache.set(`${command}:${unit.unit}`, capability);
-		return capability;
-	});
-	const [releases, libs] = await Promise.all([probeReleases(units, {
-		shell,
-		force
-	}), probeLibs({
-		needs: units.flatMap((unit) => unit.libs ?? []),
-		shell,
-		force
-	})]);
-	return units.map((unit) => {
-		const capability = evaluateUnit(list, unit, void 0, command, releases, libsOfUnit(unit, libs));
-		unitCache.set(`${command}:${unit.unit}`, capability);
-		return capability;
-	});
-}
-function libsOfUnit(unit, libs) {
-	return (unit.libs ?? []).map((need) => libs.get(need.name)).filter((state) => state !== void 0);
-}
-var unitCache = createTimedMemo(PROBE_TTL_MS);
-//#endregion
-//#region src/shared/api/host/unit-readiness.ts
-function unitReadiness(manifest, lookup) {
-	const missingHard = manifest.host.inject.filter((name) => lookup(name) === void 0);
-	const missingSoft = (manifest.host.optional ?? []).filter((name) => lookup(name) === void 0);
-	return {
-		canMount: missingHard.length === 0,
-		missingHard,
-		missingSoft
-	};
-}
-//#endregion
-//#region src/shared/api/host/mount-units.ts
-function withRunsRoute(result, unit) {
-	const runs = result.longTasks;
-	if (runs === void 0) return result;
-	return {
-		...result,
-		routes: {
-			...result.routes,
-			[runsRouteOf(unit)]: (search) => {
-				const path = (param(search, "path") ?? "").trim();
-				return {
-					ok: true,
-					runs: path === "" ? [] : runs.current(path)
-				};
-			}
-		}
-	};
-}
-function notedRegistry(registry, writesOf) {
-	return { register(definition) {
-		if (!writesOf(definition.name)) return registry.register(definition);
-		const noted = withApprovalNote(definition.parameters, { required: true });
-		return registry.register(noted === definition.parameters ? definition : {
-			...definition,
-			parameters: noted
-		});
-	} };
-}
-function scopedMountCtx(ctx, registry, writesOf) {
-	const tools = notedRegistry(registry, writesOf);
-	const get = (name) => {
-		const value = ctx.get(name);
-		return name === "tools" && value !== void 0 ? tools : value;
-	};
-	return new Proxy(ctx, { get(target, key) {
-		if (key === "get") return get;
-		const value = Reflect.get(target, key, target);
-		return typeof value === "function" ? value.bind(target) : value;
-	} });
-}
-function failureReasonOf(error) {
-	if (error instanceof Error) return error.message;
-	return typeof error === "string" ? error : String(error);
-}
-function fail(ledger, item, reason) {
-	ledger.failed.add(item);
-	ledger.failures.push({
-		id: item.host.manifest.id,
-		reason
-	});
-}
-function collectRoutes(mounted, ledger) {
-	const routes = {};
-	const owner = /* @__PURE__ */ new Map();
-	const routesOfUnit = /* @__PURE__ */ new Map();
-	for (const item of mounted) {
-		if (ledger.failed.has(item)) continue;
-		const unit = item.host.manifest.id;
-		const accepted = [];
-		let problem;
-		for (const [key, handler] of Object.entries(item.result.routes)) {
-			if (key !== unit && !key.startsWith(`${unit}/`)) {
-				problem = `路由名要住在自己那一格的命名空间里（${unit} 或 ${unit}/…）：${key} 不属于 ${unit} —— 装 / 升 / 卸时点名不到它，那个模块的数据会停在旧值`;
-				break;
-			}
-			const previous = owner.get(key);
-			if (previous !== void 0) {
-				problem = `路由名冲突：${key} 由套件 ${previous} 与 ${unit} 同时声明`;
-				break;
-			}
-			accepted.push([key, handler]);
-		}
-		if (problem !== void 0) {
-			fail(ledger, item, problem);
-			continue;
-		}
-		for (const [key, handler] of accepted) {
-			owner.set(key, unit);
-			routes[key] = handler;
-			const own = routesOfUnit.get(unit);
-			if (own === void 0) routesOfUnit.set(unit, [key]);
-			else own.push(key);
-		}
-	}
-	return {
-		routes,
-		owners: owner,
-		routesOfUnit
-	};
-}
-function collectNamed(mounted, ledger, pickMany, label) {
-	const owner = /* @__PURE__ */ new Map();
-	const out = [];
-	for (const item of mounted) {
-		if (ledger.failed.has(item)) continue;
-		const unit = item.host.manifest.id;
-		const entries = pickMany(item);
-		if (entries.length === 0) continue;
-		const clash = entries.find((entry) => owner.has(entry.resource));
-		if (clash !== void 0) {
-			fail(ledger, item, `${label}名冲突：${clash.resource} 由套件 ${owner.get(clash.resource)} 与 ${unit} 同时声明`);
-			continue;
-		}
-		for (const entry of entries) {
-			owner.set(entry.resource, unit);
-			out.push({
-				...entry,
-				unit
-			});
-		}
-	}
-	return out;
-}
-function collectContextRenderers(mounted, ledger) {
-	const table = /* @__PURE__ */ new Map();
-	const owner = /* @__PURE__ */ new Map();
-	for (const item of mounted) {
-		if (ledger.failed.has(item)) continue;
-		const unit = item.host.manifest.id;
-		const context = item.result.context;
-		if (context === void 0) continue;
-		const clash = context.kinds.find((kind) => owner.has(kind));
-		if (clash !== void 0) {
-			fail(ledger, item, `对话引用的 kind 冲突：${clash} 由套件 ${owner.get(clash)} 与 ${unit} 同时认领`);
-			continue;
-		}
-		for (const kind of context.kinds) {
-			owner.set(kind, unit);
-			table.set(kind, (ref) => context.render(ref));
-		}
-	}
-	return table;
-}
-function pickProvider(mounted, ledger, pick, label) {
-	let chosen;
-	let chosenBy;
-	for (const item of mounted) {
-		if (ledger.failed.has(item)) continue;
-		const value = pick(item);
-		if (value === void 0) continue;
-		if (chosen === void 0) {
-			chosen = value;
-			chosenBy = item.host.manifest.id;
-			continue;
-		}
-		fail(ledger, item, `${label}只能有一个提供者，现在是：${chosenBy}、${item.host.manifest.id}`);
-	}
-	return chosen;
-}
-function collectWarmReads(mounted) {
-	const declarations = mounted.map((item) => item.result.warmReads).filter((declare) => declare !== void 0);
-	return () => {
-		const seen = /* @__PURE__ */ new Set();
-		const reads = [];
-		for (const read of declarations.flatMap((declare) => declare())) {
-			const key = read.join(" ");
-			if (seen.has(key)) continue;
-			seen.add(key);
-			reads.push(read);
-		}
-		return reads;
-	};
-}
-function mountUnits(units, deps) {
-	const store = deps.store ?? createWorkspaceStore({ root: null });
-	const ownedUnits = deps.ownedUnits ?? (() => []);
-	const mounted = [];
-	const skipped = [];
-	const longTaskDisposers = /* @__PURE__ */ new Map();
-	const ledger = {
-		failed: /* @__PURE__ */ new Set(),
-		failures: []
-	};
-	for (const host of units) {
-		const readiness = unitReadiness(host.manifest, (dep) => deps.ctx.get(dep));
-		if (!readiness.canMount) {
-			skipped.push({
-				id: host.manifest.id,
-				missing: readiness.missingHard
-			});
-			continue;
-		}
-		const unit = host.manifest.id;
-		const tools = deps.ctx.get("tools");
-		const writes = toolUnits(deps.manifests());
-		const mountCtx = tools === void 0 ? deps.ctx : scopedMountCtx(deps.ctx, tools, (name) => writes.get(name)?.writes === true);
-		const longTasks = deps.longTasks === void 0 ? void 0 : createLongTaskHost({
-			scope: deps.longTasks.scope,
-			unit,
-			bump: deps.longTasks.bump
-		});
-		let result;
-		try {
-			result = host.face.mount({
-				manifest: host.manifest,
-				ctx: mountCtx,
-				logger: deps.logger,
-				manifests: deps.manifests,
-				ownedUnits,
-				...deps.installable === void 0 ? {} : { installable: deps.installable },
-				...deps.opencliCommand === void 0 ? {} : { opencliCommand: deps.opencliCommand },
-				...deps.probe === void 0 ? {} : { probe: deps.probe },
-				...deps.values === void 0 ? {} : { values: deps.values },
-				...longTasks === void 0 ? {} : { longTasks: longTasks.host },
-				store
+				...base,
+				status: "missing",
+				command: libInstallCommand({ need })
 			});
-		} catch (error) {
-			longTasks?.dispose();
-			ledger.failures.push({
-				id: unit,
-				reason: failureReasonOf(error)
+			continue;
+		}
+		if (checkVersionRange(need.version, installed) !== "satisfied") {
+			found.set(need.name, {
+				...base,
+				status: "unsatisfied",
+				installed,
+				command: libInstallCommand({ need })
 			});
 			continue;
 		}
-		const item = {
-			host,
-			readiness,
-			result: withRunsRoute(result, unit)
-		};
-		mounted.push(item);
-		if (longTasks !== void 0) longTaskDisposers.set(item, longTasks.dispose);
-	}
-	const collected = collectRoutes(mounted, ledger);
-	const prefs = collectNamed(mounted, ledger, (item) => item.result.prefs === void 0 ? [] : [item.result.prefs], "偏好资源");
-	const actions = collectNamed(mounted, ledger, (item) => item.result.actions ?? [], "动作资源");
-	const owners = new Map(collected.owners);
-	for (const entry of [...prefs, ...actions]) owners.set(entry.resource, entry.unit);
-	const factsOf = /* @__PURE__ */ new Map();
-	for (const item of mounted) {
-		if (ledger.failed.has(item)) continue;
-		const declare = item.result.factsOf;
-		if (declare !== void 0) factsOf.set(item.host.manifest.id, declare);
-	}
-	const gate = pickProvider(mounted, ledger, (item) => item.result.gate, "启停闸门");
-	const provision = pickProvider(mounted, ledger, (item) => item.result.provision, "机器供给");
-	const contextRenderers = collectContextRenderers(mounted, ledger);
-	const alive = mounted.filter((item) => !ledger.failed.has(item));
-	for (const item of mounted) {
-		if (!ledger.failed.has(item)) continue;
-		longTaskDisposers.get(item)?.();
-		longTaskDisposers.delete(item);
+		const registry = process.env[need.registryEnv]?.trim() || need.registryDefault;
+		const latest = await latestVersion({
+			shell,
+			name: need.name,
+			registry,
+			force
+		});
+		const behind = latest !== void 0 && isNewerVersion(latest, installed);
+		found.set(need.name, {
+			...base,
+			status: behind ? "outdated" : "ok",
+			installed,
+			...latest === void 0 ? {} : { latest },
+			...behind ? { command: libInstallCommand({
+				need,
+				version: latest
+			}) } : {}
+		});
 	}
-	return {
-		mounted: alive,
-		routes: collected.routes,
-		owners,
-		routesOfUnit: collected.routesOfUnit,
-		factsOf,
-		gate,
-		prefs,
-		actions,
-		provision,
-		contextRenderers,
-		skipped,
-		failed: ledger.failures,
-		warmReads: collectWarmReads(alive),
-		disposeLongTasks: () => {
-			for (const dispose of [...longTaskDisposers.values()]) dispose();
-			longTaskDisposers.clear();
+	return found;
+}
+//#endregion
+//#region src/shared/api/host/probe-verdict.ts
+function evaluateUnit(list, unit, failure, command = "opencli", releases = /* @__PURE__ */ new Map(), libs = []) {
+	const isPlugin = (item) => typeof item === "object" && item !== null;
+	const needs = unit.plugins ?? [];
+	const required = needs.flatMap((need) => need.commands ?? []);
+	const primary = needs[0]?.name;
+	if (failure !== void 0 || list === void 0) return {
+		unit: unit.unit,
+		...primary === void 0 ? {} : { plugin: primary },
+		status: "unchecked",
+		required,
+		missing: [],
+		detail: failure ?? "探不动",
+		...libs.length === 0 ? {} : { libs }
+	};
+	const plugins = list.filter(isPlugin);
+	const installed = new Map(plugins.map((item) => [String(item.name), item]));
+	const states = needs.map((need) => {
+		const hit = installed.get(need.name);
+		if (hit === void 0) {
+			const source = resolvePluginSource(need.installSource, process.env, {
+				command,
+				plugin: need.name
+			});
+			return {
+				name: need.name,
+				status: "missing",
+				missing: [],
+				install: source.ok ? "ready" : source.problem,
+				command: source.ok ? source.line : pluginInstallCommand(need.name)
+			};
 		}
+		const available = new Set((Array.isArray(hit.commands) ? hit.commands : []).map(String));
+		const missing = (need.commands ?? []).filter((name) => !available.has(name));
+		const release = releases.get(need.name);
+		const behind = release?.latest !== void 0 && isNewerVersion(release.latest, release.installed);
+		const commandsBehind = missing.length > 0;
+		const upgrade = behind && release?.latest !== void 0 ? upgradeLine(need, command, release.latest) : void 0;
+		return {
+			name: need.name,
+			status: commandsBehind || behind ? "outdated" : "ok",
+			missing,
+			...release === void 0 ? {} : { release },
+			...commandsBehind || behind ? { command: upgrade ?? pluginUpdateCommand(need.name) ?? pluginInstallCommand(need.name) } : {}
+		};
+	});
+	const absent = states.filter((state) => state.status === "missing");
+	const outdated = states.filter((state) => state.status === "outdated");
+	const missing = states.flatMap((state) => state.missing);
+	const libMissing = libs.filter((state) => state.status === "missing");
+	const libMismatch = libs.filter((state) => state.status === "unsatisfied");
+	const libBehind = libs.filter((state) => state.status === "outdated");
+	const status = absent.length > 0 || libMissing.length > 0 || libMismatch.length > 0 ? "missing-plugin" : missing.length > 0 ? "missing-commands" : "ok";
+	const blocked = absent.find((state) => state.install !== "ready");
+	const install = absent.length === 0 ? libMissing.length > 0 || libMismatch.length > 0 ? "ready" : void 0 : blocked === void 0 ? "ready" : blocked.install;
+	const fix = status === "missing-plugin" ? install === "ready" ? "install" : void 0 : outdated.length > 0 || libBehind.length > 0 ? "update" : void 0;
+	const first = absent[0] ?? outdated[0] ?? libMissing[0] ?? libMismatch[0] ?? libBehind[0];
+	const gaps = [...missing.length === 0 ? [] : [`缺必需：${missing.join("、")}`]];
+	const newer = states.filter((state) => state.release?.latest !== void 0 && isNewerVersion(state.release.latest, state.release.installed));
+	const versionText = newer.length === 0 ? "" : `（源上有新版：${newer.map((state) => `${state.release?.installed ?? ""} → ${state.release?.latest ?? ""}`).join("、")}）`;
+	const absentNames = [...absent.map((state) => state.name), ...libMissing.map((state) => state.name)];
+	const mismatchText = libMismatch.map((state) => {
+		const declared = unit.libs?.find((need) => need.name === state.name)?.version?.trim();
+		return `${state.name}（装的是 ${state.installed ?? "未知"}，声明要 ${declared === void 0 || declared === "" ? "任意版本" : declared}）`;
+	});
+	return {
+		unit: unit.unit,
+		...primary === void 0 ? {} : { plugin: primary },
+		status,
+		required,
+		missing,
+		detail: absentNames.length > 0 || mismatchText.length > 0 ? [...absentNames.length === 0 ? [] : [`${plugins.length} 个已装插件里没有 ${absentNames.join("、")}`], ...mismatchText].join("；") : `${needs.length} 份安装都在${gapsText(gaps)}${versionText}${libs.length === 0 ? "" : `；交叉依赖：${libs.map((state) => `${state.name}${state.installed === void 0 ? " 未装" : ` ${state.installed}`}`).join("、")}${libBehind.length === 0 ? "" : "（源上有新版）"}`}`,
+		...fix === void 0 && first === void 0 ? {} : { command: fix === "install" ? (absent[0] ?? first)?.command : first?.command },
+		...fix === void 0 ? {} : { fix },
+		...install === void 0 ? {} : { install },
+		plugins: states,
+		...libs.length === 0 ? {} : { libs }
 	};
 }
+function gapsText(gaps) {
+	return gaps.length === 0 ? "" : `（${gaps.join("；")}）`;
+}
+function pluginUpdateCommand(plugin) {
+	return plugin === void 0 ? void 0 : `opencli plugin update ${plugin}`;
+}
+function pluginInstallCommand(plugin) {
+	return `opencli plugin install <${plugin ?? "插件"}源>`;
+}
+function upgradeLine(need, command, latest) {
+	const source = resolvePluginSource(need.installSource, process.env, {
+		command,
+		plugin: need.name,
+		version: latest,
+		mode: "update"
+	});
+	return source.ok ? source.line : void 0;
+}
+//#endregion
+//#region src/shared/api/host/probe-units.ts
+function parsePluginList(stdout) {
+	const parsed = parseJsonLoose(stdout);
+	if (Array.isArray(parsed)) return parsed;
+	return /no plugins? installed/i.test(stdout) ? [] : void 0;
+}
+async function probeReleases(units, options) {
+	const needs = /* @__PURE__ */ new Map();
+	for (const unit of units) for (const need of unit.plugins ?? []) {
+		const source = need.installSource;
+		if (source?.kind === "npm") needs.set(need.name, source);
+	}
+	const found = /* @__PURE__ */ new Map();
+	for (const [plugin, source] of needs) {
+		const registry = npmRegistryOf(source, process.env);
+		const signal = await probeRelease({
+			shell: options.shell,
+			package: source.package,
+			...registry.ok ? { registry: registry.value } : {},
+			force: options.force
+		});
+		if (signal !== void 0) found.set(plugin, signal);
+	}
+	return found;
+}
+async function probeUnits(options) {
+	const { shell, command = "opencli", units, force = false } = options;
+	const hits = units.map((unit) => unitCache.get(`${command}:${unit.unit}`));
+	if (!force && hits.every((hit) => hit !== void 0)) return hits;
+	const result = await runShell(shell, `${command} plugin list -f json`, { timeoutMs: OPENCLI_TIMEOUT_MS }).then((value) => ({
+		kind: "ok",
+		stdout: value.exitCode === 0 ? value.stdout : "",
+		stderr: value.stderr
+	}), (error) => ({
+		kind: "error",
+		stdout: "",
+		stderr: String(error)
+	}));
+	const list = result.kind === "ok" ? parsePluginList(result.stdout) : void 0;
+	const failure = result.kind === "error" ? result.stderr : list === void 0 ? "plugin list 的输出读不懂（不是 JSON 数组）" : void 0;
+	if (failure !== void 0) return units.map((unit) => {
+		const capability = {
+			unit: unit.unit,
+			...unit.plugins?.[0] === void 0 ? {} : { plugin: unit.plugins[0].name },
+			status: "unchecked",
+			required: (unit.plugins ?? []).flatMap((need) => need.commands ?? []),
+			missing: [],
+			detail: failure
+		};
+		unitCache.set(`${command}:${unit.unit}`, capability);
+		return capability;
+	});
+	const [releases, libs] = await Promise.all([probeReleases(units, {
+		shell,
+		force
+	}), probeLibs({
+		needs: units.flatMap((unit) => unit.libs ?? []),
+		shell,
+		force
+	})]);
+	return units.map((unit) => {
+		const capability = evaluateUnit(list, unit, void 0, command, releases, libsOfUnit(unit, libs));
+		unitCache.set(`${command}:${unit.unit}`, capability);
+		return capability;
+	});
+}
+function libsOfUnit(unit, libs) {
+	return (unit.libs ?? []).map((need) => libs.get(need.name)).filter((state) => state !== void 0);
+}
+var unitCache = createTimedMemo(PROBE_TTL_MS);
 //#endregion
 //#region src/shared/api/host/unit-registry.ts
 function installableUnitsOf(registry) {
@@ -7876,6 +8192,7 @@ var SCHEMA_TYPE = {
 	string: "string"
 };
 var KEY_ARG_LIMIT = 3;
+var NO_KEY_ARGS = "没有带参数";
 var RUN_CODE_TOOL = "run_code";
 var PLUGIN_PROMPT_BUDGET = 4e3;
 function pluginToolName(plugin, command) {
@@ -7953,13 +8270,15 @@ function pluginKeyArgs(command, raw) {
 		parts.push(`${arg.name}=${String(value)}`);
 		if (parts.length === KEY_ARG_LIMIT) break;
 	}
-	return parts.length === 0 ? "没有带参数" : parts.join("、");
+	return parts.length === 0 ? NO_KEY_ARGS : parts.join("、");
 }
 function pluginApprovalQuestion(command, raw) {
 	const key = pluginKeyArgs(command, raw);
+	const zhKey = key === NO_KEY_ARGS ? "这次没带参数" : key;
+	const enKey = key === NO_KEY_ARGS ? "no arguments" : key;
 	return {
-		zh: `允许执行 ${command.plugin} 的 ${command.name}（${key}）吗？`,
-		en: `Run ${command.plugin} ${command.name} (${key})?`
+		zh: `agent 想执行工作台 [${command.plugin}] opencli 插件的 [${command.name}] 命令（${zhKey}），允许吗？`,
+		en: `The agent wants to run the [${command.name}] command of the workbench opencli plugin [${command.plugin}] (${enKey}). Allow?`
 	};
 }
 function pluginApprovalFor(command) {
@@ -8423,8 +8742,7 @@ function configSyncSnapshot(deps, asked) {
 	const others = profileNames(profilesDir).filter((name) => name !== deps.self);
 	const base = {
 		self: deps.self,
-		home: deps.home,
-		restart: true
+		home: deps.home
 	};
 	if (deps.profileDir === null) return {
 		...base,
@@ -8536,8 +8854,13 @@ function configSyncApply(deps, payload) {
 	return {
 		ok: true,
 		written: merged.written,
-		skipped: merged.skipped,
-		restart: true
+		skipped: merged.skipped
+	};
+}
+function configSyncAction(deps) {
+	return {
+		resource: CONFIG_SYNC_RESOURCE,
+		handle: (payload) => configSyncApply(deps, payload)
 	};
 }
 //#endregion
@@ -8665,7 +8988,7 @@ function apply(ctx) {
 		[DSH_PLUGINS_ROUTE]: dshPluginsHandler(ctx),
 		[BUNDLE_REGISTRIES_ROUTE]: bundleRegistriesHandler(ctx),
 		[BUNDLE_INSPECT_ROUTE]: bundleInspectHandler(ctx),
-		[MODULE_VERSIONS_ROUTE]: moduleVersionsHandler(ctx, ctx.get("shell"))
+		[MODULE_VERSIONS_ROUTE]: moduleVersionsHandler(ctx, ctx.get("shell"), runningVersionOf(import.meta.url))
 	};
 	const renderers = /* @__PURE__ */ new Map();
 	const shell = ctx.get("shell");
@@ -8750,10 +9073,23 @@ function apply(ctx) {
 	const factsOfMap = /* @__PURE__ */ new Map();
 	const routesOfUnitMap = /* @__PURE__ */ new Map();
 	const ownersMap = /* @__PURE__ */ new Map();
-	let undoPost = [];
 	const factsOfUnit = (unit) => [...routesOfUnitMap.get(unit) ?? [], "capability"];
 	const callFacts = (unit, call) => factsOfMap.get(unit)?.(call) ?? factsOfUnit(unit);
 	const deniedNow = (workspace) => [...new Set([...mounted.values()].flatMap((item) => item.plan.gate?.deniedTools(workspace) ?? []))];
+	const wrote = (resource, write) => {
+		const unit = ownersMap.get(resource);
+		if (unit !== void 0) facts.bump(callFacts(unit, {
+			source: resource,
+			args: asArgs(write.args),
+			result: write.result
+		}));
+	};
+	const postChannels = createPostChannels({
+		ctx,
+		mounted,
+		facts,
+		shellActions: [configSyncAction(configSync)]
+	});
 	function unmountUnit(id) {
 		const item = mounted.get(id);
 		if (item === void 0) return;
@@ -8843,22 +9179,7 @@ function apply(ctx) {
 		}
 	}
 	function rebindPost() {
-		for (const dispose of undoPost.reverse()) dispose?.();
-		undoPost = [];
-		const wrote = (resource, write) => {
-			const unit = ownersMap.get(resource);
-			if (unit !== void 0) facts.bump(callFacts(unit, {
-				source: resource,
-				args: asArgs(write.args),
-				result: write.result
-			}));
-		};
-		const prefs = [...mounted.values()].flatMap((item) => item.plan.prefs);
-		const actions = [...mounted.values()].flatMap((item) => item.plan.actions);
-		const provision = [...mounted.values()].find((item) => item.plan.provision !== void 0)?.plan.provision;
-		if (prefs.length > 0) undoPost.push(registerPrefs(ctx, prefs, wrote));
-		if (actions.length > 0) undoPost.push(registerActions(ctx, actions, wrote));
-		if (provision !== void 0) undoPost.push(registerProvision(ctx, provision, facts));
+		postChannels.rebind(wrote);
 	}
 	function sync() {
 		const present = new Set(units.all().map((one) => one.unit));
@@ -8925,7 +9246,7 @@ function apply(ctx) {
 	}
 	ctx.effect(() => () => {
 		for (const id of [...mounted.keys()]) unmountUnit(id);
-		for (const dispose of undoPost) dispose?.();
+		postChannels.dispose();
 	}, `${PLUGIN_ID}: 卸载时把单元摘干净`);
 	ctx.effect(() => units.subscribe(sync), `${PLUGIN_ID}: 注册表变了就增删（装/卸一个模块 = 挂/卸它的面）`);
 	ctx.effect(() => bindRosterFacts({
@@ -9013,10 +9334,6 @@ function apply(ctx) {
 		return () => off?.();
 	}, `${PLUGIN_ID}: 对话引用注入`);
 	ctx.effect(() => registerFactStream(ctx, facts), `${PLUGIN_ID}: 变更流`);
-	ctx.effect(() => registerActions(ctx, [{
-		resource: CONFIG_SYNC_RESOURCE,
-		handle: (payload) => configSyncApply(configSync, payload)
-	}]), `${PLUGIN_ID}: 配置同步那一跳（把来源 profile 的行写进工作台自己的 patch）`);
 	ctx.effect(() => registerPanelState(ctx, panelState), `${PLUGIN_ID}: 面板运行态上报（浏览器半侧报自己的取数与渲染收尾）`);
 	ctx.effect(() => registerApi(ctx, routes), `${PLUGIN_ID}: HTTP 投影`);
 }