@dsh-workbench/core 1.1.1 → 1.1.3

package/dist/host/index.js

@@ -4545,6 +4545,7 @@ function checkVersionRange(contract, version) {
 }
 var MARKET_DISCOVER_ROUTE = "panels/market-discover";
 var MARKET_DOC_ROUTE = "panels/market-doc";
+var MARKET_GIT_PROBE_ROUTE = "panels/git-probe";
 var MARKET_PUBLISH_PREVIEW_ROUTE = "panels/market-publish-preview";
 var MARKET_SOURCES_RESOURCE = "market-sources";
 var MARKET_SOURCES_ROUTE = "panels/market-sources";
@@ -4577,7 +4578,10 @@ var MARKET_INDEX_README_LINES = [
 	"dsh-wb-module release --index <本仓库地址> --index-policy artifacts-in-repo",
 	"```",
 	"",
-	"产物会提交到 `packages/<unit>/`，并更新 `market.json`。",
+	"产物会提交到 `packages/<包名>/`（带 scope 时是 `packages/@scope/名字/`），并更新 `market.json`。",
+	"",
+	"一个包名归第一次发布的人（`market.json` 里的 `owner`）。换一个署名发同名会被拒；要换人，先把这一条的 `owner` 改成新的人。",
+	"同一个市场里，一个模块 id（`metadata.unit`）只能被一个条目使用；另一个包名想用同一个 id / 产物目录也会被拒。",
 	"",
 	"## 使用这个索引",
 	"",
@@ -4683,15 +4687,25 @@ function iconProblem(icon) {
 	if (/^https?:\/\//i.test(icon)) return void 0;
 	return problem("icon", "icon 只能是 base64 data URL 或 http(s) URL");
 }
+var MAX_OWNER_CHARS = 200;
+var UNIT_ID = /^[a-z][a-z0-9-]*$/;
+function ownerProblem(owner) {
+	if (/[\r\n]/u.test(owner)) return problem("owner", "owner 只能是一行署名");
+	if (owner.length > MAX_OWNER_CHARS) return problem("owner", "owner 超过 200 字");
+}
 function metadataOf(raw) {
 	const record = asRecord$3(raw);
 	if (record === void 0) return void 0;
+	const workbench = record["workbench"] === true;
+	const unit = asText$3(record["unit"]);
 	const category = asText$3(record["category"]);
 	const labels = asTextArray(record["labels"]);
 	const keywords = asTextArray(record["keywords"]);
 	const sortKeysRecord = asRecord$3(record["sortKeys"]);
 	const sortKeys = sortKeysRecord === void 0 ? void 0 : Object.fromEntries(Object.entries(sortKeysRecord).flatMap(([key, value]) => typeof value === "string" || typeof value === "number" ? [[key, value]] : []));
 	return {
+		...workbench ? { workbench: true } : {},
+		...unit === "" ? {} : { unit },
 		...category === "" ? {} : { category },
 		...labels.length === 0 ? {} : { labels },
 		...keywords.length === 0 ? {} : { keywords },
@@ -4713,14 +4727,21 @@ function entryOf$1(raw, at) {
 	const title = asLocalized(record["title"]);
 	const description = asLocalized(record["description"]);
 	const author = asText$3(record["author"]);
+	const owner = asText$3(record["owner"]);
+	if (owner !== "") {
+		const badOwner = ownerProblem(owner);
+		if (badOwner !== void 0) return badOwner;
+	}
 	const homepage = asText$3(record["homepage"]);
 	const metadata = metadataOf(record["metadata"]);
+	if (metadata?.unit !== void 0 && !UNIT_ID.test(metadata.unit)) return problem("unit", `metadata.unit 只能是小写字母开头的 a-z0-9-（现在是 ${JSON.stringify(metadata.unit)}）`, at);
 	return {
 		name,
 		versions,
 		...title === void 0 ? {} : { title },
 		...description === void 0 ? {} : { description },
 		...author === "" ? {} : { author },
+		...owner === "" ? {} : { owner },
 		...homepage === "" ? {} : { homepage },
 		...icon === "" ? {} : { icon },
 		...metadata === void 0 ? {} : { metadata }
@@ -4907,6 +4928,84 @@ function gitUrlOk(url) {
 	return true;
 }
 //#endregion
+//#region ../shared/dist/host/market-index-claim.js
+function foldedName(name) {
+	return name.replace(/\s+/gu, " ").trim().toLowerCase();
+}
+function publisherIdentityOf(text) {
+	const raw = (text ?? "").trim();
+	if (raw === "") return void 0;
+	const match = /^(.*?)\s*<([^<>]*)>\s*$/u.exec(raw);
+	const name = (match === null ? raw : match[1]).trim();
+	const email = match === null ? "" : match[2].trim().toLowerCase();
+	if (name === "") return void 0;
+	return email === "" ? { name } : {
+		name,
+		email
+	};
+}
+function samePublisher(left, right) {
+	const a = publisherIdentityOf(left);
+	const b = publisherIdentityOf(right);
+	if (a === void 0 || b === void 0) return false;
+	if (a.email !== void 0 && b.email !== void 0) return a.email === b.email;
+	return foldedName(a.name) === foldedName(b.name);
+}
+function entryOwnerOf(entry) {
+	const owner = (entry.owner ?? "").trim();
+	if (owner !== "") return owner;
+	const author = (entry.author ?? "").trim();
+	return author === "" ? void 0 : author;
+}
+function claimOfEntry(entry, publisher) {
+	if (entry === void 0) return { state: "new" };
+	const owner = entryOwnerOf(entry);
+	if (owner === void 0) return { state: "unowned" };
+	if (publisher === void 0 || publisher.trim() === "") return { state: "unknown" };
+	return samePublisher(owner, publisher) ? {
+		state: "owned",
+		owner
+	} : {
+		state: "conflict",
+		owner
+	};
+}
+function marketArtifactPath(name) {
+	return `packages/${name}`;
+}
+function entryUnitOf(entry) {
+	const unit = entry.metadata?.unit?.trim();
+	if (unit !== void 0 && unit !== "") return unit;
+	for (const version of entry.versions) {
+		if (version.source.type !== "git") continue;
+		const legacy = /^packages\/([^/]+)$/u.exec(version.source.path ?? "")?.[1];
+		if (legacy !== void 0) return legacy;
+	}
+}
+function claimOf(index, input) {
+	const base = claimOfEntry(index.plugins.find((one) => one.name === input.name), input.publisher);
+	if (base.state === "conflict" || base.state === "unknown") return base;
+	const unit = (input.unit ?? "").trim();
+	if (unit !== "") for (const other of index.plugins) {
+		if (other.name === input.name) continue;
+		if (entryUnitOf(other) !== unit) continue;
+		return {
+			state: "unit-taken",
+			entry: other.name
+		};
+	}
+	const path = (input.artifactPath ?? "").trim();
+	if (path !== "") for (const other of index.plugins) {
+		if (other.name === input.name) continue;
+		if (!other.versions.some((one) => one.source.type === "git" && (one.source.path ?? "") === path)) continue;
+		return {
+			state: "path-taken",
+			entry: other.name
+		};
+	}
+	return base;
+}
+//#endregion
 //#region ../shared/dist/host/changelog.js
 var CHANGELOG_FILE = "CHANGELOG.md";
 var CHANGELOG_KINDS = [
@@ -5064,6 +5163,25 @@ function appendChangelogEntry(text, options) {
 	out.splice(at, 0, ...bullets);
 	return `${normalizeWhitespace(out)}\n`;
 }
+function planChangelog(text, options) {
+	const source = normalizeChangelogText(text);
+	const version = changelogVersion(options.version);
+	const section = changelogSectionOf(source, version);
+	if (section !== void 0 && changelogHasEntry(source, version)) return {
+		action: "kept",
+		version,
+		text: source,
+		section
+	};
+	if (bulletsOf(options.note).length === 0) return void 0;
+	const next = appendChangelogEntry(source, options);
+	return {
+		action: "written",
+		version,
+		text: next,
+		section: changelogSectionOf(next, version) ?? ""
+	};
+}
 function normalizeWhitespace(rows) {
 	const out = [];
 	for (const row of rows) {
@@ -5416,6 +5534,80 @@ function bundleInspectHandler(ctx) {
 	};
 }
 //#endregion
+//#region src/shared/api/host/git-exec.ts
+var NO_PROMPT_ENV = [
+	"GIT_TERMINAL_PROMPT=0",
+	"GIT_ASKPASS=/usr/bin/false",
+	"SSH_ASKPASS=/usr/bin/false",
+	"SSH_ASKPASS_REQUIRE=never",
+	"GCM_INTERACTIVE=never",
+	"GIT_SSH_COMMAND=ssh -o BatchMode=yes -o StrictHostKeyChecking=accept-new"
+];
+function gitNoPromptPrefix() {
+	return [quoteShellArg("env"), ...NO_PROMPT_ENV.map((one) => quoteShellArg(one))].join(" ");
+}
+function withoutAskpassNoise(text) {
+	return text.split("\n").filter((line) => !/unable to read askpass response/i.test(line)).join("\n").trim();
+}
+//#endregion
+//#region src/shared/api/host/git-probe.ts
+var PROBE_TIMEOUT_MS = 1e4;
+var AUTH_TEXT = /authentication failed|could not read (username|password)|permission denied|terminal prompts disabled|host key verification failed|repository not found|no such identity|access denied|unauthorized|forbidden/;
+function classifyGitProbe(stderr, timedOut) {
+	if (timedOut) return "unreachable";
+	return AUTH_TEXT.test(stderr.toLowerCase()) ? "auth" : "unreachable";
+}
+async function probeGitAddress(shell, url, options = {}) {
+	const line = [
+		gitNoPromptPrefix(),
+		quoteShellArg("git"),
+		quoteShellArg("ls-remote"),
+		quoteShellArg(url),
+		quoteShellArg("HEAD")
+	].join(" ");
+	let result;
+	try {
+		result = await runShell(shell, line, { timeoutMs: options.timeoutMs ?? PROBE_TIMEOUT_MS });
+	} catch (error) {
+		return {
+			status: "unreachable",
+			detail: error instanceof Error ? error.message : String(error)
+		};
+	}
+	if (result.exitCode === 0) return { status: "ok" };
+	const detail = tailLines(withoutAskpassNoise(result.stderr || result.stdout), 3);
+	return {
+		status: classifyGitProbe(`${result.stderr}\n${result.stdout}`, result.timedOut),
+		...detail === "" ? {} : { detail }
+	};
+}
+//#endregion
+//#region src/shared/api/host/git-routes.ts
+function gitProbeHandler(ctx) {
+	return async (search) => {
+		const url = param(search, "url");
+		if (url === void 0) return {
+			ok: false,
+			error: {
+				code: "workbench/no-url",
+				message: "要探哪个地址？缺 url。"
+			}
+		};
+		const shell = ctx.get("shell");
+		if (shell === void 0) return {
+			ok: false,
+			error: {
+				code: "workbench/no-shell",
+				message: "这台机器上没有执行缝，探不了 git 地址"
+			}
+		};
+		return {
+			ok: true,
+			...await probeGitAddress(shell, url)
+		};
+	};
+}
+//#endregion
 //#region src/shared/api/host/host-routes.ts
 function createHostRoutes(input) {
 	const { ctx, facts, opencli, running, profile } = input;
@@ -5425,6 +5617,7 @@ function createHostRoutes(input) {
 		[DSH_PLUGINS_ROUTE]: profile.dshPlugins(ctx),
 		[BUNDLE_REGISTRIES_ROUTE]: bundleRegistriesHandler(ctx),
 		[BUNDLE_INSPECT_ROUTE]: bundleInspectHandler(ctx),
+		[MARKET_GIT_PROBE_ROUTE]: gitProbeHandler(ctx),
 		[MODULE_VERSIONS_ROUTE]: moduleVersionsHandler(ctx, ctx.get("shell"), running, () => profile.selfUpdateView(dshHome(), basename(profile.dirOf(ctx) ?? "")))
 	};
 }
@@ -5458,12 +5651,14 @@ var MODULES_UPDATE_DEPENDENCY_TOOL = "workbench_modules_update_dependency";
 var MODULES_UPDATE_PLUGIN_TOOL = "workbench_modules_update_plugin";
 var MODULES_UNINSTALL_PLUGIN_TOOL = "workbench_modules_uninstall_plugin";
 var MODULES_UPDATE_WORKBENCH_TOOL = "workbench_modules_update_workbench";
+var MARKET_SOURCES_TOOL = "workbench_market_sources";
+var MARKET_ENABLE_TOOL = "workbench_market_enable";
+var MARKET_DISABLE_TOOL = "workbench_market_disable";
 var DIY_STATUS_TOOL = "workbench_diy_status";
 var DIY_PANEL_TOOL = "workbench_diy_panel";
 var DIY_COMPONENTS_TOOL = "workbench_diy_components";
 var DIY_RECON_TOOL = "workbench_diy_recon";
 var DIY_SPEC_TOOL = "workbench_diy_spec";
-var DIY_CHANGELOG_TOOL = "workbench_diy_changelog";
 var DIY_INSTALL_TOOL = "workbench_diy_install";
 var DIY_PUBLISH_TOOL = "workbench_diy_publish";
 var DIY_SHOW_TOOL = "workbench_diy_show";
@@ -5497,6 +5692,7 @@ var DIY_DEBUG_STOP_TOOL = "workbench_diy_debug_stop";
 var READ_TOOLS = [
 	PANELS_LIST_TOOL,
 	MODULES_LIST_TOOL,
+	MARKET_SOURCES_TOOL,
 	DIY_STATUS_TOOL,
 	DIY_PANEL_TOOL,
 	DIY_COMPONENTS_TOOL,
@@ -5538,7 +5734,8 @@ var WRITE_TOOLS = [
 	MODULES_UPDATE_PLUGIN_TOOL,
 	MODULES_UNINSTALL_PLUGIN_TOOL,
 	MODULES_UPDATE_WORKBENCH_TOOL,
-	DIY_CHANGELOG_TOOL,
+	MARKET_ENABLE_TOOL,
+	MARKET_DISABLE_TOOL,
 	DIY_INSTALL_TOOL,
 	DIY_PUBLISH_TOOL,
 	DIY_SHOW_TOOL,
@@ -5555,7 +5752,6 @@ var DIY_TOOLS = [
 	DIY_COMPONENTS_TOOL,
 	DIY_RECON_TOOL,
 	DIY_SPEC_TOOL,
-	DIY_CHANGELOG_TOOL,
 	DIY_INSTALL_TOOL,
 	DIY_PUBLISH_TOOL,
 	DIY_SHOW_TOOL,
@@ -5832,6 +6028,14 @@ function readDomainsOf(design) {
 	return [...found];
 }
 //#endregion
+//#region src/modules/panels/model/publish-claim.ts
+function publishClaimDenyOf(claim, name) {
+	if (claim === void 0) return void 0;
+	if (claim.state === "unit-taken") return `市场里 ${claim.entry} 已经用了这个模块 id —— 两个模块不能共用一个，装在一起会撞。给这个模块换一个 unit（dsh.workbench.unit）再发。`;
+	if (claim.state === "path-taken") return `市场仓库里的产物目录已经被 ${claim.entry} 占了 —— 换一个包名再发。`;
+	if (claim.state === "conflict") return `市场里 ${name} 已经有主了（${claim.owner}）—— 同一个名字不能换人发。换一个带团队 scope 的包名；你就是原来的作者（只是换了机器或署名），用 author 参数带上原来的署名；确实是接手，让索引维护者改 market.json 里这一条的 owner。`;
+}
+//#endregion
 //#region src/modules/panels/model/approval.ts
 var SPEC_LIMIT = 80;
 var TARGET_LIMIT = 20;
@@ -5938,11 +6142,22 @@ function publishVerdict(call, preview) {
 	if (raw["verify"] === true || raw["target"] === "local") return { kind: "allow" };
 	const refresh = raw["refresh"] === true;
 	const unit = textOf$3(raw, "unit");
-	const found = unit === "" ? null : preview?.(unit) ?? null;
+	const askedAuthor = textOf$3(raw, "author");
+	const found = unit === "" ? null : preview?.(unit, askedAuthor === "" ? void 0 : askedAuthor) ?? null;
 	const asked = textOf$3(raw, "target");
 	const target = refresh ? "market" : asked === "" ? found?.market === void 0 ? found?.registry === void 0 ? "tarball" : "team" : "market" : asked;
+	const source = textOf$3(raw, "source");
+	const claimReason = publishClaimDenyOf(found?.claim, found?.name ?? unit);
+	if (source === "" && target !== "tarball" && target !== "local" && claimReason !== void 0) return {
+		kind: "deny",
+		reason: claimReason
+	};
 	const label = unit === "" ? "工作台模块" : `工作台模块 [${unit}]`;
 	const labelEn = unit === "" ? "the workbench module" : `the workbench module [${unit}]`;
+	if (!refresh && found?.changelog?.missing === true && textOf$3(raw, "changelogNote") === "") return {
+		kind: "deny",
+		reason: `这一版还没有更新日志（${found.changelog.version}）—— 带上 changelogNote（一行一条）再调，发布时会一起写进 CHANGELOG.md 并随包发`
+	};
 	const copies = {
 		team: {
 			zh: `把${label}发到团队源，只发构建产物，不发源码，允许吗？`,
@@ -5974,7 +6189,7 @@ function publishVerdict(call, preview) {
 	const question = refresh ? pair(`只刷新${label}在市集里的元数据（标题 / 作者 / 说明），不升版本、不重发产物，允许吗？`, `Only refresh ${labelEn}'s market metadata (title, author, description); no version bump, no artifacts. Allow?`) : pair(copy.zh, copy.en);
 	return askOf(`${DIY_PUBLISH_TOOL} ${targetLabel}${refresh ? "（元数据）" : ""}`, question, question);
 }
-var panelsApproval = (call) => {
+function approvalVerdict(call, marketSource) {
 	if (call.name === "workbench_long_tasks_stop") return stopVerdict(call, void 0);
 	if (call.name === "workbench_diy_publish") return publishVerdict(call);
 	if (call.name === "workbench_diy_debug_start" || call.name === "workbench_diy_debug_resume") {
@@ -6045,9 +6260,41 @@ var panelsApproval = (call) => {
 			return askOf(`${MODULES_UNINSTALL_PLUGIN_TOOL} ${plugin ?? ""} uninstalls an opencli plugin on this machine`, pair(`会卸载${target.zh}，允许吗？`, `it uninstalls ${target.en}. Allow?`), pair(`agent 想卸载${target.zh}，允许吗？`, `The agent wants to uninstall ${target.en}. Allow?`));
 		}
 		case MODULES_UPDATE_WORKBENCH_TOOL: return askOf(`${MODULES_UPDATE_WORKBENCH_TOOL} replaces the workbench itself with the new version from the registry`, pair("会把工作台本身更新到源上的新版，允许吗？", "it updates the workbench itself to the new version from the registry. Allow?"), pair("agent 想把工作台本身更新到源上的新版，允许吗？", "The agent wants to update the workbench itself from the registry. Allow?"));
+		case MARKET_ENABLE_TOOL: {
+			const id = text("id");
+			const source = marketSource?.(id);
+			if (marketSource !== void 0 && source === void 0) return {
+				kind: "deny",
+				reason: id === void 0 ? "这台机器上还没有选中的索引源 —— 先在「模块市场 → 发现」里添加并选中一个" : `没有这个索引源：${id}`
+			};
+			if (source !== void 0 && source.policy === "artifacts-in-repo") return { kind: "allow" };
+			if (source !== void 0 && source.kind === "http") return {
+				kind: "deny",
+				reason: "http 索引源只能读，不能当发布目的地"
+			};
+			const where = source === void 0 ? {
+				zh: id === void 0 ? "工作台当前选中的索引源" : `工作台的索引源「${id}」`,
+				en: id === void 0 ? "the selected workbench index source" : `the workbench index source "${id}"`
+			} : {
+				zh: `工作台的索引源「${source.label}」`,
+				en: `the workbench index source "${source.label}"`
+			};
+			return askOf(`${MARKET_ENABLE_TOOL}${source === void 0 ? "" : ` ${source.url}`} marks a market index source as a publish destination on this machine`, pair(`把${where.zh}设为可发布，允许吗？`, `Make ${where.en} a publish destination. Allow?`), pair(`会把${where.zh}设为可发布，只改本机配置，不碰仓库，允许吗？`, `It makes ${where.en} a publish destination on this machine, without touching the repository. Allow?`));
+		}
+		case MARKET_DISABLE_TOOL: {
+			const id = text("id");
+			const source = marketSource?.(id);
+			if (marketSource !== void 0 && source === void 0) return {
+				kind: "deny",
+				reason: id === void 0 ? "这台机器上还没有选中的索引源 —— 先在「模块市场 → 发现」里添加并选中一个" : `没有这个索引源：${id}`
+			};
+			if (source === void 0) return askOf(`${MARKET_DISABLE_TOOL} stops using a market index source as a publish destination on this machine`, pair("把工作台当前选中的索引源改回只读，允许吗？", "Make the selected workbench index source read-only again. Allow?"), pair("会把工作台当前选中的索引源改回只读，只改本机配置，不碰仓库，允许吗？", "It makes the selected workbench index source read-only again on this machine, without touching the repository. Allow?"));
+			if (source.kind !== "git" || source.policy !== "artifacts-in-repo") return { kind: "allow" };
+			return askOf(`${MARKET_DISABLE_TOOL} ${source.url} stops using a market index source as a publish destination on this machine`, pair(`把工作台的索引源「${source.label}」改回只读，允许吗？`, `Make the workbench index source "${source.label}" read-only again. Allow?`), pair(`会把工作台的索引源「${source.label}」改回只读，只改本机配置，不碰仓库，允许吗？`, `It makes the workbench index source "${source.label}" read-only again on this machine, without touching the repository. Allow?`));
+		}
 		default: return;
 	}
-};
+}
 function recordHeldVerdict(call, recording) {
 	if (call.name !== "workbench_diy_record_prepare" || recording === void 0) return void 0;
 	const held = recording();
@@ -6057,11 +6304,16 @@ function recordHeldVerdict(call, recording) {
 		reason: recordRefusalText(held.sessionId === call.session ? "already-held" : "held-by-other", held)
 	};
 }
-function panelsApprovalFor(longTaskRuns, recording, publishPreview) {
+function panelsApprovalFor(longTaskRuns, recording, publishPreview, marketSources) {
+	const sourceOf = marketSources === void 0 ? void 0 : (id) => {
+		const payload = marketSources.read();
+		const wanted = id === void 0 || id === "" ? payload.selected : id;
+		return wanted === null ? void 0 : payload.sources.find((one) => one.id === wanted);
+	};
 	return (call) => {
 		if (call.name === "workbench_long_tasks_stop") return stopVerdict(call, longTaskRuns);
 		if (call.name === "workbench_diy_publish") return publishVerdict(call, publishPreview);
-		return recordHeldVerdict(call, recording) ?? panelsApproval(call);
+		return recordHeldVerdict(call, recording) ?? approvalVerdict(call, sourceOf);
 	};
 }
 //#endregion
@@ -6978,7 +7230,7 @@ async function sessionWorkspaceOf(ctx, workspace) {
 		dir = parent;
 	}
 }
-var OUTPUT$2 = {
+var OUTPUT$3 = {
 	schema: {
 		type: "object",
 		properties: {
@@ -7123,7 +7375,7 @@ function componentsTool(ctx) {
 			},
 			additionalProperties: false
 		},
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
 			const args = asRecord$1(raw);
@@ -7221,97 +7473,6 @@ function registerComponentsTool(ctx, tools) {
 	return [tools.register(componentsTool(ctx))];
 }
 //#endregion
-//#region src/shared/api/host/diy-changelog.ts
-function moduleVersionOf(dir) {
-	try {
-		const version = JSON.parse(readFileSync(join(dir, "package.json"), "utf8")).version;
-		return typeof version === "string" ? version.trim() : "";
-	} catch {
-		return "";
-	}
-}
-function writeChangelogEntry(dir, input) {
-	const file = join(dir, CHANGELOG_FILE);
-	const text = appendChangelogEntry(existsSync(file) ? readFileSync(file, "utf8") : changelogSkeleton(), {
-		version: input.version,
-		kind: input.kind,
-		note: input.note,
-		date: input.date ?? changelogDate()
-	});
-	writeFileSync(file, text);
-	return {
-		file,
-		section: changelogSectionOf(text, input.version) ?? "",
-		text
-	};
-}
-//#endregion
-//#region src/modules/panels/model/diy-changelog.ts
-function toolOf(ctx) {
-	return {
-		name: DIY_CHANGELOG_TOOL,
-		description: `发布前把这一版写进 ${CHANGELOG_FILE}（\`## v0.1.0\` + \`### ✨ 新增\` 这种小节）：传 note 就记一条，文件不在就先建。没写这一版时发布会被拦下。`,
-		parameters: {
-			type: "object",
-			properties: {
-				unit: {
-					type: "string",
-					description: "模块 id（workbench_diy_status 会给）。"
-				},
-				version: {
-					type: "string",
-					description: "要写的版本；不填用 package.json 里的 version。"
-				},
-				type: {
-					type: "string",
-					enum: [...CHANGELOG_KINDS],
-					description: "分类：added 新增 / changed 改进 / fixed 修复 / removed 移除 / security 安全 / deprecated 弃用。"
-				},
-				note: {
-					type: "string",
-					description: "这一版改了什么；多行时一行一条（必填）。"
-				}
-			},
-			required: ["unit", "note"],
-			additionalProperties: false
-		},
-		output: OUTPUT$2,
-		async execute(raw, exec) {
-			const { root } = await workspaceOf(ctx, exec);
-			const args = asRecord$1(raw);
-			const unit = asText(args["unit"]);
-			const { units } = unitsOf(ctx, root);
-			if (unit === "") throw new Error(`要一个 unit（这个工作区里：${units.map((one) => one.unit).join(", ") || "（空）"}）`);
-			const found = units.find((one) => one.unit === unit && one.dir !== "");
-			if (found === void 0) throw new Error(`这个工作区里没有单元 id 为「${unit}」的模块（可用的：${units.map((one) => one.unit).join(", ") || "（空）"}）`);
-			if (!insideRoot(root, found.dir)) throw new Error(`这个模块不在这个工作区里（${found.dir}）`);
-			const note = asText(args["note"]).trim();
-			if (note === "") throw new Error("要一句 note：这一版改了什么");
-			const version = (asText(args["version"]) || moduleVersionOf(found.dir)).replace(/^v/, "");
-			if (!isValidVersion(version)) throw new Error(`版本要写成 x.y.z（收到「${version}」）—— 也可以不填，用 package.json 里的`);
-			const kind = asText(args["type"]) || "changed";
-			if (!CHANGELOG_KINDS.includes(kind)) throw new Error(`type 只认 ${CHANGELOG_KINDS.join(" / ")}（收到「${kind}」）`);
-			const written = writeChangelogEntry(found.dir, {
-				version,
-				kind,
-				note
-			});
-			return plainJson({
-				ok: true,
-				unit,
-				version,
-				type: kind,
-				path: written.file,
-				section: written.section,
-				text: `${CHANGELOG_FILE} 已记下 ${version}（${kind}）。发布时会带进包和市场索引，审批屏会展示它。`
-			});
-		}
-	};
-}
-function registerChangelogTool(ctx, tools) {
-	return [tools.register(toolOf(ctx))];
-}
-//#endregion
 //#region src/shared/api/host/diy-artifacts.ts
 function artifactsDirOf(ctx, root) {
 	const homePath = ctx.get("dshHomePath");
@@ -7598,7 +7759,7 @@ function registerDebugTools(ctx, tools, store) {
 			required: [],
 			additionalProperties: false
 		},
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { root, title } = await workspaceOf(ctx, exec);
 			const { units } = unitsOf(ctx, root);
@@ -7633,7 +7794,7 @@ function registerDebugTools(ctx, tools, store) {
 		name: DIY_DEBUG_PAUSE_TOOL,
 		description: "暂停调试（不审批）：屏工具停用，不再拿屏当目标。要接着看用 debug_resume。",
 		parameters: EMPTY,
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(_raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
 			const held = store.live(Date.now());
@@ -7651,7 +7812,7 @@ function registerDebugTools(ctx, tools, store) {
 		name: DIY_DEBUG_RESUME_TOOL,
 		description: "继续调试（要点头一次）：请用户回到这一场调试所在的那一屏。",
 		parameters: EMPTY,
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(_raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
 			const held = store.live(Date.now());
@@ -7675,7 +7836,7 @@ function registerDebugTools(ctx, tools, store) {
 		name: DIY_DEBUG_STOP_TOOL,
 		description: "结束调试（不审批）：清掉\"占用用户那一屏\"这件事。收工用它。",
 		parameters: EMPTY,
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(_raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
 			const held = store.live(Date.now());
@@ -7865,7 +8026,7 @@ function registerLogTools(ctx, tools) {
 		name: DIY_LOGS_WATCH_TOOL,
 		description: "把这一页的控制台听上（每页最多 200 条、单条截 400 字，随页面刷新消失）。",
 		parameters: schema,
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { page, step } = await run(exec, raw, LOGS_ARM_SCRIPT);
 			const error = actErrorOf(step);
@@ -7885,7 +8046,7 @@ function registerLogTools(ctx, tools) {
 		name: DIY_LOGS_READ_TOOL,
 		description: "读刚才听下来的控制台（最近 50 条；没装钩子会说清，不假装是\"没有报错\"）。",
 		parameters: schema,
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { page, step } = await run(exec, raw, LOGS_READ_SCRIPT);
 			const error = actErrorOf(step);
@@ -7904,7 +8065,7 @@ function registerLogTools(ctx, tools) {
 		name: DIY_LOGS_STOP_TOOL,
 		description: "控制台收听收工：卸掉钩子、扔掉攒下的记录。",
 		parameters: schema,
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { page, step } = await run(exec, raw, LOGS_STOP_SCRIPT);
 			const error = actErrorOf(step);
@@ -8570,7 +8731,7 @@ function registerBrowserTools(ctx, tools) {
 			name: row.tool,
 			description: row.description,
 			parameters: parametersOf(row),
-			output: OUTPUT$2,
+			output: OUTPUT$3,
 			execute: async (raw, exec) => plainJson(await runBrowserTool(row, ctx, raw, exec))
 		};
 		return tools.register(definition);
@@ -8609,7 +8770,7 @@ function specTool(ctx) {
 			required: ["command"],
 			additionalProperties: false
 		},
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, _exec) {
 			const args = asRecord$1(raw);
 			const argv = specArgvOf(asText(args["command"]));
@@ -8636,6 +8797,176 @@ function registerSpecTool(ctx, tools) {
 	return [tools.register(specTool(ctx))];
 }
 //#endregion
+//#region src/modules/panels/model/diy-publish.ts
+var PUBLISH_TIMEOUT_MS = 18e5;
+function registerPublishTool(ctx, tools, deps) {
+	const publishTool = {
+		name: DIY_PUBLISH_TOOL,
+		description: "用户说“发布”后才用：把这一格发到 target 指定的出口（不填按环境默认）。这一版还没有更新日志时把 changelogNote 一起带上 —— 发布时写进 CHANGELOG.md，随包发。",
+		parameters: {
+			type: "object",
+			properties: {
+				unit: {
+					type: "string",
+					description: "模块 id（workbench_diy_status 会给）。"
+				},
+				changelogNote: {
+					type: "string",
+					description: "这一版改了什么，一行一条；这一版还没有更新日志时必填（文件不在会先建）。"
+				},
+				changelogType: {
+					type: "string",
+					enum: [...CHANGELOG_KINDS],
+					description: "分类，不填按 changed。"
+				},
+				target: {
+					type: "string",
+					enum: [
+						"team",
+						"public",
+						"tarball",
+						"git",
+						"market",
+						"local"
+					],
+					description: "发到哪：团队源 / 公共 npm / 安装包 / git / 模块市场索引；不填按环境默认（有可写索引走市场，有私源走团队源，否则安装包）。"
+				},
+				version: {
+					type: "string",
+					description: "可选：patch / minor / major / x.y.z；不填首次用当前版本，之后自动 patch。"
+				},
+				source: {
+					type: "string",
+					description: "发布到哪个索引源（workbench_market_sources 会给 id）；不填用唯一可发布的源。"
+				},
+				verify: {
+					type: "boolean",
+					description: "只核已发布的包（交接验证码后用），不再发；不用审批。"
+				},
+				resume: {
+					type: "boolean",
+					description: "中断后接着发（用记录里的出口与版本）。"
+				},
+				license: {
+					type: "string",
+					description: "公开发布用的许可证（MIT / Apache-2.0 / 仓库已有 LICENSE）。"
+				},
+				author: {
+					type: "string",
+					description: "署谁的名（姓名，或 姓名 <邮箱>）；用户点了名才传，不传按模块里写的，没写用推断的署名。"
+				},
+				refresh: {
+					type: "boolean",
+					description: "只刷市集元数据（标题/作者/说明），不升版本、不重发产物。"
+				}
+			},
+			required: ["unit"],
+			additionalProperties: false
+		},
+		output: OUTPUT$3,
+		async execute(raw, exec) {
+			const { root } = await workspaceOf(ctx, exec);
+			const found = deps.resolve(root, raw);
+			const shell = ctx.get("shell");
+			if (shell === void 0) throw new Error("这台机器上没有 shell 服务，发布跑不起来");
+			const bin = toolchainBinOf(root) ?? toolchainBinOf(found.dir);
+			if (bin === null) throw new Error(`这个工作区里没有 dsh-wb-module（${join(root, "node_modules")} 下没有）—— 先 pnpm install`);
+			const target = asText(asRecord$1(raw)["target"]);
+			const source = asText(asRecord$1(raw)["source"]);
+			const version = asText(asRecord$1(raw)["version"]);
+			const license = asText(asRecord$1(raw)["license"]);
+			const changelogNote = asText(asRecord$1(raw)["changelogNote"]);
+			const changelogType = asText(asRecord$1(raw)["changelogType"]);
+			let author = asText(asRecord$1(raw)["author"]);
+			const verify = asRecord$1(raw)["verify"] === true;
+			const resume = asRecord$1(raw)["resume"] === true;
+			if (!verify && target !== "local" && author === "" && (deps.previewOf(found.unit)?.author ?? "") === "") author = await deps.inferredAuthorOf(found.unit) ?? "";
+			const argv = [
+				bin,
+				"release",
+				"--cwd",
+				found.dir,
+				"--json"
+			];
+			if (verify) argv.push("--verify");
+			else argv.push("--yes");
+			if (resume) argv.push("--resume");
+			if (target !== "") argv.push("--target", target);
+			if (source !== "") argv.push("--index-source", source);
+			if (version !== "") argv.push("--version", version);
+			if (license !== "") argv.push("--license", license);
+			if (author !== "") argv.push("--author", author);
+			if (changelogNote !== "") argv.push("--changelog-note", changelogNote);
+			if (changelogType !== "") argv.push("--changelog-type", changelogType);
+			if (asRecord$1(raw)["refresh"] === true) argv.push("--refresh");
+			const result = await runShell(shell, argv.map((one) => quoteShellArg(one)).join(" "), {
+				workdir: root,
+				timeoutMs: PUBLISH_TIMEOUT_MS
+			});
+			const payload = jsonOf(result.stdout);
+			if (result.exitCode === 3 && payload !== void 0) {
+				const needs = asRecord$1(payload["needsUser"]);
+				const stepText = asText(needs["text"]);
+				const command = asText(needs["command"]);
+				return plainJson({
+					...payload,
+					text: [
+						`还差一步：${stepText}`,
+						...command === "" ? [] : [`命令：${command}`],
+						"做完跟我说「好了」，我接着发。"
+					].join("\n")
+				});
+			}
+			if (result.exitCode === 4 && payload !== void 0) {
+				const resumeInfo = asRecord$1(payload["resume"]);
+				return plainJson({
+					...payload,
+					text: [`发布中断在第 ${asText(resumeInfo["phase"])} 步：${asText(payload["text"])}`, `再调一次 workbench_diy_publish（unit=${found.unit}, resume=true）就能接着发。`].join("\n")
+				});
+			}
+			if (result.exitCode !== 0 || payload === void 0) {
+				const tail = `${result.stderr}\n${result.stdout}`.trim().split("\n").slice(-6).join(" | ");
+				throw new Error(`发布没走通（exit ${String(result.exitCode)}）${tail === "" ? "" : `：${tail}`}`);
+			}
+			const name = asText(payload["name"]);
+			const released = asText(payload["version"]);
+			const registry = asText(payload["registry"]);
+			const file = asText(payload["file"]);
+			const install = asText(payload["install"]);
+			const git = asRecord$1(payload["git"]);
+			const targetOfPayload = asText(payload["target"]);
+			const text = verify ? [
+				`已核过 ${name}@${released}`,
+				`安装：${install}`,
+				"没有重新发布。"
+			].join("\n") : payload["refresh"] === true ? [payload["refreshed"] === true ? `已刷新 ${name} 的市集元数据（版本 ${released} 不变）` : `${name} 的市集元数据本来就是这样，没动`, `市场索引：${asText(asRecord$1(payload["market"])["url"])}`].join("\n") : targetOfPayload === "tarball" ? [
+				`安装包在 ${file}`,
+				`本机装：${install}`,
+				"文件可以从对话里带走，发给同事。"
+			].join("\n") : targetOfPayload === "git" ? [
+				`已推到 ${asText(git["url"])}（tag ${asText(git["tag"])}）`,
+				`安装：${install}`,
+				"已核过 tag 里的产物。"
+			].join("\n") : targetOfPayload === "market" ? [
+				`已发到市场索引 ${asText(asRecord$1(payload["market"])["url"])}`,
+				`安装：${install}`,
+				"已从索引仓库侧核过产物。"
+			].join("\n") : targetOfPayload === "local" ? "没发，留在本机。" : [
+				`已发布 ${name}@${released} → ${registry}`,
+				`同事安装：${install}`,
+				"包内容已经从源上核过（dist/host.js / client.js / cordis.patch.yml 都在）。"
+			].join("\n");
+			const changelog = asRecord$1(payload["changelog"]);
+			const changelogLine = asText(changelog["action"]) === "written" ? `更新日志：已写进 ${CHANGELOG_FILE} 的 ${asText(changelog["version"])}` : asText(changelog["action"]) === "kept" ? `更新日志：这一版已有（${asText(changelog["version"])}），没动` : "";
+			return plainJson({
+				...payload,
+				text: changelogLine === "" ? text : `${text}\n${changelogLine}`
+			});
+		}
+	};
+	return tools.register(publishTool);
+}
+//#endregion
 //#region src/shared/api/host/diy-recon.ts
 var SITE_LIMIT = 6;
 var COMMAND_LIMIT = 12;
@@ -9076,7 +9407,7 @@ function renderStatus(root, lines, options = {}) {
 }
 function publishStatusOf(preview) {
 	if (preview === null) return "";
-	return [preview.market === void 0 ? preview.registry === void 0 ? "发布出口：安装包（这个环境没配可写市场索引源，模块也没声明 publishConfig.registry）" : `发布出口：团队源 ${preview.registry}（package.json 的 publishConfig.registry）` : `发布出口：市场索引 ${preview.market.url}${preview.market.ref === void 0 ? "" : `（${preview.market.ref}）`}—— 不填 target 时默认发这里；这一版会发 ${preview.market.nextVersion ?? preview.version}`, preview.changelog === void 0 ? void 0 : preview.changelog.missing ? `发布前置：CHANGELOG 还差 ${preview.changelog.version} 这一版 —— 先 workbench_diy_changelog（unit=…）` : `发布前置：CHANGELOG 里已有 ${preview.changelog.version}`].filter((one) => one !== void 0).join("\n");
+	return [preview.market === void 0 ? preview.registry === void 0 ? "发布出口：安装包（这个环境没配可写市场索引源，模块也没声明 publishConfig.registry）" : `发布出口：团队源 ${preview.registry}（package.json 的 publishConfig.registry）` : `发布出口：市场索引 ${preview.market.url}${preview.market.ref === void 0 ? "" : `（${preview.market.ref}）`}—— 不填 target 时默认发这里；这一版会发 ${preview.market.nextVersion ?? preview.version}`, preview.changelog === void 0 ? void 0 : preview.changelog.missing ? `发布前置：CHANGELOG 还差 ${preview.changelog.version} 这一版 —— 发布时带 changelogNote（会先建文件）` : `发布前置：CHANGELOG 里已有 ${preview.changelog.version}`].filter((one) => one !== void 0).join("\n");
 }
 function renderList(root, modules, shape = "bare") {
 	if (modules.length === 0) return [
@@ -9091,7 +9422,6 @@ function renderList(root, modules, shape = "bare") {
 }
 //#endregion
 //#region src/modules/panels/model/diy-tools.ts
-var PUBLISH_TIMEOUT_MS = 18e5;
 function registerDiyTools(ctx, market, panels, debug, previewOf = () => null, inferredAuthorOf = async () => void 0) {
 	const supply = supplyPortOf(ctx);
 	const tools = ctx.get("tools");
@@ -9111,7 +9441,7 @@ function registerDiyTools(ctx, market, panels, debug, previewOf = () => null, in
 			required: [],
 			additionalProperties: false
 		},
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
 			const { units } = unitsOf(ctx, root);
@@ -9154,7 +9484,7 @@ function registerDiyTools(ctx, market, panels, debug, previewOf = () => null, in
 			} },
 			additionalProperties: false
 		},
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
 			const { installed, units } = unitsOf(ctx, root);
@@ -9220,7 +9550,7 @@ function registerDiyTools(ctx, market, panels, debug, previewOf = () => null, in
 			required: ["keyword"],
 			additionalProperties: false
 		},
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, _exec) {
 			const args = asRecord$1(raw);
 			const keywords = keywordsOf(asText(args["keyword"]), asText(args["url"]));
@@ -9256,220 +9586,77 @@ function registerDiyTools(ctx, market, panels, debug, previewOf = () => null, in
 		parameters: {
 			type: "object",
 			properties: { unit: {
-				type: "string",
-				description: "模块 id（workbench_diy_status 会给）。"
-			} },
-			required: ["unit"],
-			additionalProperties: false
-		},
-		output: OUTPUT$2,
-		async execute(raw, exec) {
-			const { root } = await workspaceOf(ctx, exec);
-			const { units } = unitsOf(ctx, root);
-			const found = unitAmong(units, raw, "workbench_diy_show");
-			if (!found.installed) throw new Error(`${found.unit} 还没装 —— 只上板的前提是它装过了。先用 workbench_diy_install（第一次）`);
-			const panel = showOrReason(panels, found.unit, root);
-			const text = panel.ok ? `面板上已经打开它了（${root}）—— 验收就走这一张卡（你自己走一遍）` : `面板上还没打开：${panel.reason}。这就是它的下一步（workbench_diy_status 会给出同样的判断）`;
-			return plainJson({
-				workspace: root,
-				unit: found.unit,
-				path: found.dir,
-				panel,
-				text
-			});
-		}
-	};
-	const installTool = {
-		name: DIY_INSTALL_TOOL,
-		description: "把这个工作区里造好的模块装上并上到当前工作区的面板。这是持久变更，一个模块只装一次：之后改源码只需 dsh-wb-module build（宿主侧秒级热换）。",
-		parameters: {
-			type: "object",
-			properties: { unit: {
-				type: "string",
-				description: "模块 id（workbench_diy_status 会给）。"
-			} },
-			required: ["unit"],
-			additionalProperties: false
-		},
-		output: OUTPUT$2,
-		async execute(raw, exec) {
-			const { root } = await workspaceOf(ctx, exec);
-			const found = unitOf(root, raw, "workbench_diy_install");
-			if (found.installed) {
-				const panel = showOrReason(panels, found.unit, root);
-				const text = ["它已经装过了（就是这个工作区里这一份）—— **不要再装**：改源码 + dsh-wb-module build（宿主侧与 client.js 都秒级热换 —— dsh-client-hmr 盯着每个 bundle 的 lib/client.js，重建了就换进已打开的页面）。", panel.ok ? `面板上已经打开它了（${root}）—— 验收就走这一张卡（你自己走一遍）` : `面板上还没打开：${panel.reason}。调 workbench_diy_show（unit=${found.unit}）`].join("\n");
-				return plainJson({
-					workspace: root,
-					unit: found.unit,
-					path: found.dir,
-					alreadyInstalled: true,
-					panel,
-					text
-				});
-			}
-			const outcome = await market.installBundle(found.dir);
-			const verdict = verdictOf(outcome.change);
-			const restartRequired = outcome.change.application === "restart-required";
-			const panel = outcome.change.application === "applied" ? showOrReason(panels, found.unit, root) : {
-				ok: false,
-				reason: `安装结果是 ${outcome.change.application}，还没生效`
-			};
-			const panelText = panel.ok ? `面板上已经打开它了（${root}）—— 验收就走这一张卡（你自己走一遍）` : outcome.change.application === "applied" ? `面板上还没打开：${panel.reason}。调 workbench_diy_show（unit=${found.unit}）试试。` : restartRequired ? `面板上还没打开（${panel.reason}）：模块要**重启一次工作台**才注册进面板 —— 把这句话转给用户，重启后再调 workbench_diy_show（unit=${found.unit}）。` : `面板上还没打开：${panel.reason}。先把上面那句"没装成"处理掉，再谈上板。`;
-			const text = [
-				`${verdict}：${found.unit}（${found.name}）`,
-				panelText,
-				"之后只改源码 + dsh-wb-module build（宿主侧与 client.js 都秒级热换 —— dsh-client-hmr 盯着每个 bundle 的 lib/client.js，重建了就换进已打开的页面）：不要再装一遍。"
-			].join("\n");
-			return plainJson({
-				workspace: root,
-				unit: found.unit,
-				path: found.dir,
-				install: outcome.change,
-				module: outcome.module,
-				panel,
-				text
-			});
-		}
-	};
-	const publishTool = {
-		name: DIY_PUBLISH_TOOL,
-		description: "用户说“发布”后才用：把这一格发到 target 指定的出口（不填按环境默认）。",
-		parameters: {
-			type: "object",
-			properties: {
-				unit: {
-					type: "string",
-					description: "模块 id（workbench_diy_status 会给）。"
-				},
-				target: {
-					type: "string",
-					enum: [
-						"team",
-						"public",
-						"tarball",
-						"git",
-						"market",
-						"local"
-					],
-					description: "发到哪：团队源 / 公共 npm / 安装包 / git / 模块市场索引；不填按环境默认（有可写索引走市场，有私源走团队源，否则安装包）。"
-				},
-				version: {
-					type: "string",
-					description: "可选：patch / minor / major / x.y.z；不填首次用当前版本，之后自动 patch。"
-				},
-				verify: {
-					type: "boolean",
-					description: "只核已发布的包（交接验证码后用），不再发；不用审批。"
-				},
-				resume: {
-					type: "boolean",
-					description: "中断后接着发（用记录里的出口与版本）。"
-				},
-				license: {
-					type: "string",
-					description: "公开发布用的许可证（MIT / Apache-2.0 / 仓库已有 LICENSE）。"
-				},
-				author: {
-					type: "string",
-					description: "署谁的名（姓名，或 姓名 <邮箱>）；用户点了名才传，不传按模块里写的，没写用推断的署名。"
-				},
-				refresh: {
-					type: "boolean",
-					description: "只刷市集元数据（标题/作者/说明），不升版本、不重发产物。"
-				}
-			},
+				type: "string",
+				description: "模块 id（workbench_diy_status 会给）。"
+			} },
 			required: ["unit"],
 			additionalProperties: false
 		},
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
-			const found = unitOf(root, raw, "workbench_diy_publish");
-			const shell = ctx.get("shell");
-			if (shell === void 0) throw new Error("这台机器上没有 shell 服务，发布跑不起来");
-			const bin = toolchainBinOf(root) ?? toolchainBinOf(found.dir);
-			if (bin === null) throw new Error(`这个工作区里没有 dsh-wb-module（${join(root, "node_modules")} 下没有）—— 先 pnpm install`);
-			const target = asText(asRecord$1(raw)["target"]);
-			const version = asText(asRecord$1(raw)["version"]);
-			const license = asText(asRecord$1(raw)["license"]);
-			let author = asText(asRecord$1(raw)["author"]);
-			const verify = asRecord$1(raw)["verify"] === true;
-			const resume = asRecord$1(raw)["resume"] === true;
-			if (!verify && target !== "local" && author === "" && (previewOf(found.unit)?.author ?? "") === "") author = await inferredAuthorOf(found.unit) ?? "";
-			const argv = [
-				bin,
-				"release",
-				"--cwd",
-				found.dir,
-				"--json"
-			];
-			if (verify) argv.push("--verify");
-			else argv.push("--yes");
-			if (resume) argv.push("--resume");
-			if (target !== "") argv.push("--target", target);
-			if (version !== "") argv.push("--version", version);
-			if (license !== "") argv.push("--license", license);
-			if (author !== "") argv.push("--author", author);
-			if (asRecord$1(raw)["refresh"] === true) argv.push("--refresh");
-			const result = await runShell(shell, argv.map((one) => quoteShellArg(one)).join(" "), {
-				workdir: root,
-				timeoutMs: PUBLISH_TIMEOUT_MS
+			const { units } = unitsOf(ctx, root);
+			const found = unitAmong(units, raw, "workbench_diy_show");
+			if (!found.installed) throw new Error(`${found.unit} 还没装 —— 只上板的前提是它装过了。先用 workbench_diy_install（第一次）`);
+			const panel = showOrReason(panels, found.unit, root);
+			const text = panel.ok ? `面板上已经打开它了（${root}）—— 验收就走这一张卡（你自己走一遍）` : `面板上还没打开：${panel.reason}。这就是它的下一步（workbench_diy_status 会给出同样的判断）`;
+			return plainJson({
+				workspace: root,
+				unit: found.unit,
+				path: found.dir,
+				panel,
+				text
 			});
-			const payload = jsonOf(result.stdout);
-			if (result.exitCode === 3 && payload !== void 0) {
-				const needs = asRecord$1(payload["needsUser"]);
-				const stepText = asText(needs["text"]);
-				const command = asText(needs["command"]);
-				return plainJson({
-					...payload,
-					text: [
-						`还差一步：${stepText}`,
-						...command === "" ? [] : [`命令：${command}`],
-						"做完跟我说「好了」，我接着发。"
-					].join("\n")
-				});
-			}
-			if (result.exitCode === 4 && payload !== void 0) {
-				const resumeInfo = asRecord$1(payload["resume"]);
+		}
+	};
+	const installTool = {
+		name: DIY_INSTALL_TOOL,
+		description: "把这个工作区里造好的模块装上并上到当前工作区的面板。这是持久变更，一个模块只装一次：之后改源码只需 dsh-wb-module build（宿主侧秒级热换）。",
+		parameters: {
+			type: "object",
+			properties: { unit: {
+				type: "string",
+				description: "模块 id（workbench_diy_status 会给）。"
+			} },
+			required: ["unit"],
+			additionalProperties: false
+		},
+		output: OUTPUT$3,
+		async execute(raw, exec) {
+			const { root } = await workspaceOf(ctx, exec);
+			const found = unitOf(root, raw, "workbench_diy_install");
+			if (found.installed) {
+				const panel = showOrReason(panels, found.unit, root);
+				const text = ["它已经装过了（就是这个工作区里这一份）—— **不要再装**：改源码 + dsh-wb-module build（宿主侧与 client.js 都秒级热换 —— dsh-client-hmr 盯着每个 bundle 的 lib/client.js，重建了就换进已打开的页面）。", panel.ok ? `面板上已经打开它了（${root}）—— 验收就走这一张卡（你自己走一遍）` : `面板上还没打开：${panel.reason}。调 workbench_diy_show（unit=${found.unit}）`].join("\n");
 				return plainJson({
-					...payload,
-					text: [`发布中断在第 ${asText(resumeInfo["phase"])} 步：${asText(payload["text"])}`, `再调一次 workbench_diy_publish（unit=${found.unit}, resume=true）就能接着发。`].join("\n")
+					workspace: root,
+					unit: found.unit,
+					path: found.dir,
+					alreadyInstalled: true,
+					panel,
+					text
 				});
 			}
-			if (result.exitCode !== 0 || payload === void 0) {
-				const tail = `${result.stderr}\n${result.stdout}`.trim().split("\n").slice(-6).join(" | ");
-				throw new Error(`发布没走通（exit ${String(result.exitCode)}）${tail === "" ? "" : `：${tail}`}`);
-			}
-			const name = asText(payload["name"]);
-			const released = asText(payload["version"]);
-			const registry = asText(payload["registry"]);
-			const file = asText(payload["file"]);
-			const install = asText(payload["install"]);
-			const git = asRecord$1(payload["git"]);
-			const targetOfPayload = asText(payload["target"]);
-			const text = verify ? [
-				`已核过 ${name}@${released}`,
-				`安装：${install}`,
-				"没有重新发布。"
-			].join("\n") : payload["refresh"] === true ? [payload["refreshed"] === true ? `已刷新 ${name} 的市集元数据（版本 ${released} 不变）` : `${name} 的市集元数据本来就是这样，没动`, `市场索引：${asText(asRecord$1(payload["market"])["url"])}`].join("\n") : targetOfPayload === "tarball" ? [
-				`安装包在 ${file}`,
-				`本机装：${install}`,
-				"文件可以从对话里带走，发给同事。"
-			].join("\n") : targetOfPayload === "git" ? [
-				`已推到 ${asText(git["url"])}（tag ${asText(git["tag"])}）`,
-				`安装：${install}`,
-				"已核过 tag 里的产物。"
-			].join("\n") : targetOfPayload === "market" ? [
-				`已发到市场索引 ${asText(asRecord$1(payload["market"])["url"])}`,
-				`安装：${install}`,
-				"已从索引仓库侧核过产物。"
-			].join("\n") : targetOfPayload === "local" ? "没发，留在本机。" : [
-				`已发布 ${name}@${released} → ${registry}`,
-				`同事安装：${install}`,
-				"包内容已经从源上核过（dist/host.js / client.js / cordis.patch.yml 都在）。"
+			const outcome = await market.installBundle(found.dir);
+			const verdict = verdictOf(outcome.change);
+			const restartRequired = outcome.change.application === "restart-required";
+			const panel = outcome.change.application === "applied" ? showOrReason(panels, found.unit, root) : {
+				ok: false,
+				reason: `安装结果是 ${outcome.change.application}，还没生效`
+			};
+			const panelText = panel.ok ? `面板上已经打开它了（${root}）—— 验收就走这一张卡（你自己走一遍）` : outcome.change.application === "applied" ? `面板上还没打开：${panel.reason}。调 workbench_diy_show（unit=${found.unit}）试试。` : restartRequired ? `面板上还没打开（${panel.reason}）：模块要**重启一次工作台**才注册进面板 —— 把这句话转给用户，重启后再调 workbench_diy_show（unit=${found.unit}）。` : `面板上还没打开：${panel.reason}。先把上面那句"没装成"处理掉，再谈上板。`;
+			const text = [
+				`${verdict}：${found.unit}（${found.name}）`,
+				panelText,
+				"之后只改源码 + dsh-wb-module build（宿主侧与 client.js 都秒级热换 —— dsh-client-hmr 盯着每个 bundle 的 lib/client.js，重建了就换进已打开的页面）：不要再装一遍。"
 			].join("\n");
 			return plainJson({
-				...payload,
+				workspace: root,
+				unit: found.unit,
+				path: found.dir,
+				install: outcome.change,
+				module: outcome.module,
+				panel,
 				text
 			});
 		}
@@ -9480,13 +9667,16 @@ function registerDiyTools(ctx, market, panels, debug, previewOf = () => null, in
 		...registerComponentsTool(ctx, tools),
 		tools.register(reconTool),
 		...registerSpecTool(ctx, tools),
-		...registerChangelogTool(ctx, tools),
 		...registerLogTools(ctx, tools),
 		...registerBrowserTools(ctx, tools),
 		...registerDebugTools(ctx, tools, debug),
 		tools.register(showTool),
 		tools.register(installTool),
-		tools.register(publishTool)
+		registerPublishTool(ctx, tools, {
+			resolve: (root, raw) => unitOf(root, raw, "workbench_diy_publish"),
+			previewOf,
+			inferredAuthorOf
+		})
 	];
 }
 //#endregion
@@ -9516,27 +9706,22 @@ function selectedGitSource() {
 		return parsed.source.policy === "artifacts-in-repo" ? parsed.source : void 0;
 	}
 }
-function publishedEntryOf(source, name) {
+var EMPTY_INDEX = {
+	format: 1,
+	plugins: []
+};
+function publishedIndexOf(source) {
 	const file = join(workbenchRoot(), "market-index", marketSourceKey(source), "worktree", source.path ?? "market.json");
 	if (!existsSync(file)) return void 0;
 	try {
 		const parsed = parseMarketIndexJson(readFileSync(file, "utf8"));
-		if (!parsed.ok) return void 0;
-		const entry = parsed.index.plugins.find((one) => one.name === name);
-		if (entry === void 0) return {
-			versions: [],
-			author: ""
-		};
-		return {
-			versions: entry.versions.map((one) => one.version),
-			author: typeof entry.author === "string" ? entry.author.trim() : ""
-		};
+		return parsed.ok ? parsed.index : void 0;
 	} catch {
 		return;
 	}
 }
-function publishedVersionsOf(source, name) {
-	return publishedEntryOf(source, name)?.versions;
+function publishedEntryOf(index, name) {
+	return index?.plugins.find((one) => one.name === name);
 }
 function bumped(version, kind) {
 	const match = SEMVER.exec(version);
@@ -9561,17 +9746,21 @@ function nextVersionOf(version, published) {
 		if (!exists(candidate)) return candidate;
 	}
 }
-function marketOf(unit, dir, name, version) {
+function marketOf(dir, name, version) {
 	const source = selectedGitSource();
 	if (source === void 0) return void 0;
-	const nextVersion = nextVersionOf(version, publishedVersionsOf(source, name));
+	const index = publishedIndexOf(source);
+	const nextVersion = nextVersionOf(version, publishedEntryOf(index, name)?.versions.map((one) => one.version));
 	return {
-		url: source.url,
-		...source.ref === void 0 ? {} : { ref: source.ref },
-		indexPath: source.path ?? "market.json",
-		artifactPath: `packages/${unit}`,
-		files: ARTIFACTS.filter((one) => existsSync(join(dir, one))),
-		...nextVersion === void 0 ? {} : { nextVersion }
+		market: {
+			url: source.url,
+			...source.ref === void 0 ? {} : { ref: source.ref },
+			indexPath: source.path ?? "market.json",
+			artifactPath: marketArtifactPath(name),
+			files: ARTIFACTS.filter((one) => existsSync(join(dir, one))),
+			...nextVersion === void 0 ? {} : { nextVersion }
+		},
+		...index === void 0 ? {} : { index }
 	};
 }
 function moduleFactOf(root, unit) {
@@ -9630,7 +9819,7 @@ async function inferredAuthorOf(root, unit, shell) {
 	if (fact.author !== "") return fact.author;
 	const source = selectedGitSource();
 	if (source !== void 0 && fact.name !== "") {
-		const published = publishedEntryOf(source, fact.name)?.author ?? "";
+		const published = publishedEntryOf(publishedIndexOf(source), fact.name)?.author ?? "";
 		if (published !== "") return published;
 	}
 	const sibling = root === null || root === void 0 ? void 0 : siblingAuthorOf(root, unit);
@@ -9656,17 +9845,24 @@ function publishPreviewOf(root, unit, options = {}) {
 	if (name === "" || version === "") return null;
 	const publishConfig = record["publishConfig"];
 	const registry = typeof publishConfig === "object" && publishConfig !== null ? publishConfig["registry"] : void 0;
-	const market = marketOf(found.unit, found.dir, name, version);
-	const target = targetVersionOf(version, (options.version ?? "").trim(), market);
+	const market = marketOf(found.dir, name, version);
+	const target = targetVersionOf(version, (options.version ?? "").trim(), market?.market);
 	const askedAuthor = (options.author ?? "").trim();
 	const author = askedAuthor === "" ? authorOf(record) : askedAuthor;
+	const claim = market === void 0 ? void 0 : claimOf(market.index ?? EMPTY_INDEX, {
+		name,
+		publisher: author,
+		unit,
+		artifactPath: marketArtifactPath(name)
+	});
 	return {
 		name,
 		version,
 		...author === "" ? {} : { author },
 		...typeof registry === "string" && registry !== "" ? { registry } : {},
-		...market === void 0 ? {} : { market },
-		changelog: changelogOf(found.dir, target)
+		...market === void 0 ? {} : { market: market.market },
+		...claim === void 0 ? {} : { claim },
+		changelog: changelogOf(found.dir, target, (options.changelog ?? "").trim(), kindOf(options.changelogType))
 	};
 }
 function authorOf(manifest) {
@@ -9684,13 +9880,30 @@ function targetVersionOf(version, asked, market) {
 	if (/^(major|minor|patch)$/.test(asked)) return bumped(version, asked) ?? version;
 	return asked;
 }
-function changelogOf(dir, version) {
+function kindOf(given) {
+	const wanted = (given ?? "").trim();
+	return CHANGELOG_KINDS.includes(wanted) ? wanted : "changed";
+}
+function changelogOf(dir, version, note, kind) {
 	let text;
 	try {
 		text = readFileSync(join(dir, CHANGELOG_FILE), "utf8");
 	} catch {
 		text = void 0;
 	}
+	if (note !== "") {
+		const plan = planChangelog(text ?? "", {
+			version,
+			kind,
+			note,
+			date: changelogDate()
+		});
+		if (plan !== void 0) return {
+			version: plan.version,
+			text: plan.section,
+			...plan.action === "written" ? { pending: true } : {}
+		};
+	}
 	if (text === void 0 || !changelogHasEntry(text, version)) return {
 		version,
 		missing: true
@@ -11013,7 +11226,7 @@ function registerRecordTools(ctx, store) {
 			required: ["url"],
 			additionalProperties: false
 		},
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
 			const artifactsDir = artifactsDirOf(ctx, root);
@@ -11113,7 +11326,7 @@ function registerRecordTools(ctx, store) {
 			} },
 			additionalProperties: false
 		},
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const shell = ctx.get("shell");
 			if (shell === void 0) throw new Error("这台机器上没有 shell 服务，读不了录制");
@@ -11243,7 +11456,7 @@ function registerRecordTools(ctx, store) {
 			},
 			additionalProperties: false
 		},
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(raw, exec) {
 			const { root } = await workspaceOf(ctx, exec);
 			const artifactsDir = artifactsDirOf(ctx, root);
@@ -11325,7 +11538,7 @@ function registerRecordTools(ctx, store) {
 			properties: {},
 			additionalProperties: false
 		},
-		output: OUTPUT$2,
+		output: OUTPUT$3,
 		async execute(_raw, exec) {
 			const shell = ctx.get("shell");
 			if (shell === void 0) throw new Error("这台机器上没有 shell 服务，收不了工");
@@ -12566,6 +12779,7 @@ function normalizedRepo(value) {
 	return value.trim().replace(/^git\+/, "").replace(/\.git$/, "").toLowerCase();
 }
 function isWorkbenchEntry(entry) {
+	if (entry.metadata?.workbench === true) return true;
 	const labels = marketEntryLabels(entry);
 	if (labels.includes("workbench")) return true;
 	return entry.metadata?.category === "workbench" && labels.length === 0;
@@ -12823,37 +13037,66 @@ function parseMarketSourcesAction(payload) {
 			id: id.trim()
 		};
 	}
+	if (action === "read-only") {
+		const id = record["id"];
+		if (typeof id !== "string" || id.trim() === "") throw new Error("read-only 需要 id");
+		return {
+			action,
+			id: id.trim()
+		};
+	}
 	if (action === "init") {
 		const id = record["id"];
 		if (typeof id !== "string" || id.trim() === "") throw new Error("init 需要 id");
 		const ref = typeof record["ref"] === "string" ? record["ref"].trim() : "";
 		if (ref !== "" && !marketBranchOk(ref)) throw new Error(`分支名不合格：${ref}`);
+		const stampOnly = record["stampOnly"] === true;
 		return {
 			action,
 			id: id.trim(),
-			...ref === "" ? {} : { ref }
+			...ref === "" ? {} : { ref },
+			...stampOnly ? { stampOnly } : {}
 		};
 	}
 	throw new Error(`不认识的索引源动作：${String(action)}`);
 }
+async function markSourceReadOnly(store, id) {
+	const source = store.read().sources.find((one) => one.id === id);
+	if (source === void 0) throw new Error("这个索引源已经不在了 —— 刷新后再试");
+	if (source.kind !== "git") throw new Error("http 索引源本来就是只读");
+	const next = {
+		...source,
+		policy: "catalog-only"
+	};
+	if (source.policy !== "catalog-only") await store.apply({
+		action: "save",
+		source: next
+	});
+	return next;
+}
 function marketSourcesAction(store, init) {
 	return {
 		resource: MARKET_SOURCES_RESOURCE,
 		async handle(payload) {
 			const action = parseMarketSourcesAction(payload);
+			if (action.action === "read-only") {
+				const source = await markSourceReadOnly(store, action.id);
+				return {
+					ok: true,
+					...store.read(),
+					source
+				};
+			}
 			if (action.action === "init") {
 				if (init === void 0) throw new Error("这台机器上没有 shell 服务，初始化不了索引仓库");
 				const result = await init({
 					id: action.id,
-					...action.ref === void 0 ? {} : { ref: action.ref }
+					...action.ref === void 0 ? {} : { ref: action.ref },
+					...action.stampOnly === true ? { stampOnly: true } : {}
 				});
 				return {
 					ok: true,
-					...await store.apply({
-						action: "save",
-						source: result.source,
-						select: true
-					}),
+					...store.read(),
 					branch: result.branch,
 					commit: result.commit,
 					created: result.created
@@ -12873,20 +13116,29 @@ function publishPreviewRoutes(workshop, inferredAuthorOf = async () => void 0) {
 		const unit = (param(search, "unit") ?? "").trim();
 		const version = (param(search, "version") ?? "").trim();
 		const author = (param(search, "author") ?? "").trim();
+		const changelog = param(search, "changelog") ?? "";
+		const changelogType = (param(search, "changelogType") ?? "").trim();
 		if (unit === "") return {
 			ok: true,
 			preview: null
 		};
 		let preview = publishPreviewOf(workshop, unit, {
 			version,
-			author
+			author,
+			changelog,
+			changelogType
 		});
 		if (preview !== null && author === "" && (preview.author === void 0 || preview.author === "")) {
 			const inferred = await inferredAuthorOf(unit);
-			if (inferred !== void 0 && inferred !== "") preview = {
-				...preview,
-				author: inferred
-			};
+			if (inferred !== void 0 && inferred !== "") {
+				const again = publishPreviewOf(workshop, unit, {
+					version,
+					author: inferred,
+					changelog,
+					changelogType
+				});
+				if (again !== null) preview = again;
+			}
 		}
 		return {
 			ok: true,
@@ -12899,7 +13151,6 @@ function publishPreviewRoutes(workshop, inferredAuthorOf = async () => void 0) {
 var DEFAULT_TTL_MS = 3e5;
 var DEFAULT_TIMEOUT_MS$2 = 3e4;
 var DEFAULT_MAX_BYTES$1 = 4194304;
-var GIT_NO_PROMPT = `${quoteShellArg("env")} GIT_TERMINAL_PROMPT=0`;
 function messageOf$1(error) {
 	return error instanceof Error ? error.message : String(error);
 }
@@ -12961,7 +13212,7 @@ function gitProblemOf(source) {
 	};
 }
 function tail(text) {
-	return text.trim().split("\n").filter((line) => line !== "").slice(-3).join(" ");
+	return withoutAskpassNoise(text).split("\n").filter((line) => line !== "").slice(-3).join(" ");
 }
 function classifyGitError(stderr, timedOut) {
 	if (timedOut) return {
@@ -13065,7 +13316,7 @@ function createMarketIndexReader(options) {
 			}
 		};
 		try {
-			const result = await runShell(shell, `${GIT_NO_PROMPT} ${line}`, { timeoutMs });
+			const result = await runShell(shell, `${gitNoPromptPrefix()} ${line}`, { timeoutMs });
 			if (result.exitCode !== 0) return {
 				ok: false,
 				problem: classifyGitError(result.stderr, result.timedOut),
@@ -13513,17 +13764,21 @@ function createMarketSourceInitializer(options) {
 			if (created.exitCode !== 0) throw new Error(`建分支 ${branch} 没过：${tailLines(created.stderr, 4)}`);
 		}
 		const indexPath = (source.path ?? "market.json").replace(/^\/+/, "") || "market.json";
-		const written = [];
 		const indexFile = join(workdir, indexPath);
-		if (!existsSync(indexFile)) {
-			mkdirSync(dirname(indexFile), { recursive: true });
-			writeFileSync(indexFile, MARKET_INDEX_SEED);
-			written.push(indexPath);
-		}
-		const readmeFile = join(workdir, "README.md");
-		if (!existsSync(readmeFile)) {
-			writeFileSync(readmeFile, MARKET_INDEX_README_LINES.join("\n"));
-			written.push("README.md");
+		const stampOnly = request.stampOnly === true;
+		if (stampOnly && !existsSync(indexFile)) throw new Error(`仓库里还没有 ${indexPath} —— 先选中这个源，按发现页的提示把它初始化成索引`);
+		const written = [];
+		if (!stampOnly) {
+			if (!existsSync(indexFile)) {
+				mkdirSync(dirname(indexFile), { recursive: true });
+				writeFileSync(indexFile, MARKET_INDEX_SEED);
+				written.push(indexPath);
+			}
+			const readmeFile = join(workdir, "README.md");
+			if (!existsSync(readmeFile)) {
+				writeFileSync(readmeFile, MARKET_INDEX_README_LINES.join("\n"));
+				written.push("README.md");
+			}
 		}
 		if (written.length > 0) {
 			const added = await git(["add", ...written], workdir);
@@ -13550,8 +13805,7 @@ function createMarketSourceInitializer(options) {
 		};
 		await options.store.apply({
 			action: "save",
-			source: next,
-			select: true
+			source: next
 		});
 		forget(source, next);
 		return {
@@ -13678,6 +13932,73 @@ async function dispatchMarket(market, request) {
 	};
 }
 //#endregion
+//#region src/modules/panels/model/market-sources-tool.ts
+var OUTPUT$2 = {
+	schema: {
+		type: "object",
+		properties: {
+			text: { type: "string" },
+			sources: {
+				type: "array",
+				items: {
+					type: "object",
+					additionalProperties: true
+				}
+			}
+		},
+		additionalProperties: true
+	},
+	render: (_args, value) => {
+		const payload = value;
+		return [{
+			type: "text",
+			text: typeof payload?.text === "string" ? payload.text : JSON.stringify(value)
+		}];
+	}
+};
+function marketSourcesTool(read) {
+	return {
+		name: MARKET_SOURCES_TOOL,
+		description: "看本机的索引源：id、地址、是否可发布、当前用的是哪个。",
+		parameters: {
+			type: "object",
+			properties: {},
+			additionalProperties: false
+		},
+		output: OUTPUT$2,
+		async execute() {
+			if (read === void 0) throw new Error("这台机器上没有索引源服务，看不了");
+			const payload = read();
+			const rows = payload.sources.map((source) => ({
+				id: source.id,
+				label: source.label,
+				kind: source.kind,
+				url: source.url,
+				policy: source.policy ?? "catalog-only",
+				ref: source.ref ?? null,
+				path: source.path ?? null,
+				selected: source.id === payload.selected
+			}));
+			if (rows.length === 0) return {
+				sources: rows,
+				selected: payload.selected,
+				text: "这台机器还没有索引源 —— 在「模块市场 → 发现 → 索引源」里加一个。"
+			};
+			const current = rows.find((one) => one.selected);
+			const head = current === void 0 ? "当前没有选中索引源" : `当前：${current.label}（${current.url}）`;
+			const lines = rows.map((one) => {
+				const state = one.policy === "artifacts-in-repo" ? "可发布" : "仅读取模块列表";
+				return `${one.selected ? "●" : "○"} ${one.id} · ${one.label} · ${one.kind} · ${state} · ${one.url}`;
+			});
+			return {
+				sources: rows,
+				selected: payload.selected,
+				text: [head, ...lines].join("\n")
+			};
+		}
+	};
+}
+//#endregion
 //#region src/modules/panels/model/market-tools.ts
 function supplyNamesOf(entry) {
 	return entry.needs.filter((need) => need.kind === "extension" || need.kind === "lib").map((need) => need.name);
@@ -13773,7 +14094,7 @@ function usersOf(shared, names) {
 	if (hit === void 0 || hit.usedBy.length === 0) return "";
 	return `它被 ${hit.usedBy.join("、")} 用着（动的是它们的供给，它们的状态跟着重探了一遍）`;
 }
-function registerMarketTools(ctx, market) {
+function registerMarketTools(ctx, market, sources) {
 	const tools = ctx.get("tools");
 	if (tools === void 0) {
 		ctx.logger?.info?.("[dsh-workbench] 没有 tools 服务，跳过模块市场工具注册");
@@ -13972,6 +14293,82 @@ function registerMarketTools(ctx, market) {
 			};
 		}
 	};
+	const enableTool = {
+		name: MARKET_ENABLE_TOOL,
+		description: "把索引源设为可发布（只改本机配置，不碰仓库）；要用户审批。",
+		parameters: {
+			type: "object",
+			properties: { id: {
+				type: "string",
+				description: "索引源 id；不填=当前选中的那个。"
+			} },
+			additionalProperties: false
+		},
+		output: OUTPUT$1,
+		async execute(raw) {
+			if (sources === void 0) throw new Error("这台机器上没有索引源服务，设不了可发布");
+			const payload = sources.read();
+			const asked = textArg(raw, "id");
+			const id = asked === "" ? payload.selected : asked;
+			const source = id === null ? void 0 : payload.sources.find((one) => one.id === id);
+			if (source === void 0) {
+				const known = payload.sources.map((one) => one.id).join("、") || "（空）";
+				throw new Error(`没有这个索引源${asked === "" ? "" : `：${asked}`}。现有的：${known}；先在「模块市场 → 发现 → 索引源」里加一个。`);
+			}
+			if (source.kind !== "git") throw new Error(`索引源 ${source.id} 是 http 地址，只能读，不能当发布目的地`);
+			if (source.policy === "artifacts-in-repo") return {
+				source,
+				changed: false,
+				text: `已经是可发布：${source.label}（${source.url}）`
+			};
+			const result = await sources.init({
+				id: source.id,
+				stampOnly: true
+			});
+			return {
+				source: result.source,
+				branch: result.branch,
+				commit: result.commit,
+				changed: true,
+				text: `已把「${source.label}」设为可发布（${source.url}，分支 ${result.branch}）—— 仓库本身没动。之后发布可以落到它的 ${source.path ?? "market.json"}。`
+			};
+		}
+	};
+	const readOnlyTool = {
+		name: MARKET_DISABLE_TOOL,
+		description: "把索引源改回只读（不再作为发布目的地；只改本机配置）。",
+		parameters: {
+			type: "object",
+			properties: { id: {
+				type: "string",
+				description: "索引源 id；不填=当前选中的那个。"
+			} },
+			additionalProperties: false
+		},
+		output: OUTPUT$1,
+		async execute(raw) {
+			if (sources === void 0) throw new Error("这台机器上没有索引源服务，改不了");
+			const payload = sources.read();
+			const asked = textArg(raw, "id");
+			const id = asked === "" ? payload.selected : asked;
+			const source = id === null ? void 0 : payload.sources.find((one) => one.id === id);
+			if (source === void 0) {
+				const known = payload.sources.map((one) => one.id).join("、") || "（空）";
+				throw new Error(`没有这个索引源${asked === "" ? "" : `：${asked}`}。现有的：${known}；先在「模块市场 → 发现 → 索引源」里加一个。`);
+			}
+			if (source.kind !== "git") throw new Error(`索引源 ${source.id} 是 http 地址，本来就是只读`);
+			if (source.policy === "catalog-only") return {
+				source,
+				changed: false,
+				text: `已经是只读：${source.label}（${source.url}）`
+			};
+			return {
+				source: await sources.readOnly(source.id),
+				changed: true,
+				text: `已把「${source.label}」设为只读（${source.url}）—— 发布不会再落到它。`
+			};
+		}
+	};
 	return [
 		tools.register(listTool),
 		tools.register(installTool),
@@ -13981,7 +14378,10 @@ function registerMarketTools(ctx, market) {
 		tools.register(updateDependencyTool),
 		tools.register(updatePluginTool),
 		tools.register(uninstallPluginTool),
-		tools.register(updateWorkbenchTool)
+		tools.register(updateWorkbenchTool),
+		tools.register(marketSourcesTool(sources === void 0 ? void 0 : () => sources.read())),
+		tools.register(enableTool),
+		tools.register(readOnlyTool)
 	];
 }
 //#endregion
@@ -14099,6 +14499,7 @@ function listedRunUnits(result) {
 }
 function panelsFactsOf(call, manifests) {
 	if (call.source === "workbench_panels_list") return [PANELS_FACT];
+	if (call.source === "market-sources") return [PANELS_FACT];
 	if (call.source === "workbench_long_tasks_list") return listedRunUnits(call.result).map(runsRouteOf);
 	if (call.source === "workbench_modules_list") return [PANELS_FACT, CAPABILITY_FACT];
 	if (call.source === "workbench_modules_update_workbench") return [PANELS_FACT, CAPABILITY_FACT];
@@ -14793,13 +15194,17 @@ var OWNED = [{
 			},
 			registerTools: () => [
 				...registerPanelTools(ctx, panels, values),
-				...registerMarketTools(ctx, market),
+				...registerMarketTools(ctx, market, {
+					read: () => marketSources.read(),
+					init: marketInit,
+					readOnly: (id) => markSourceReadOnly(marketSources, id)
+				}),
 				...registerDiyTools(ctx, market, panels, debug, (unit) => publishPreviewOf(workshopPathOf(ctx), unit), (unit) => inferredAuthorOf(workshopPathOf(ctx), unit, shell)),
 				...registerRecordTools(ctx, record),
 				...registerLongTaskTools(ctx, longTaskRuns)
 			],
 			factsOf: (call) => panelsFactsOf(call, manifests()),
-			needsApproval: panelsApprovalFor(longTaskRuns, () => record.live(Date.now()), (unit) => publishPreviewOf(workshopPathOf(ctx), unit)),
+			needsApproval: panelsApprovalFor(longTaskRuns, () => record.live(Date.now()), (unit, author) => publishPreviewOf(workshopPathOf(ctx), unit, author === void 0 ? {} : { author }), marketSources),
 			gate: {
 				deniedTools: (context) => {
 					const boards = panels.boards(context.workspace);