@dsh-workbench/shared 1.1.1 → 1.1.3

package/src/contract/protocol/market-index.ts

@@ -2,6 +2,7 @@ export const MARKET_INDEX_FORMAT = 1;
 export const MARKET_INDEX_PATH = 'market.json';
 export const MARKET_DISCOVER_ROUTE = 'panels/market-discover';
 export const MARKET_DOC_ROUTE = 'panels/market-doc';
+export const MARKET_GIT_PROBE_ROUTE = 'panels/git-probe';
 export const MARKET_PUBLISH_PREVIEW_ROUTE = 'panels/market-publish-preview';
 export const MARKET_SOURCES_RESOURCE = 'market-sources';
 export const MARKET_SOURCES_ROUTE = 'panels/market-sources';
@@ -9,6 +10,13 @@ export const MARKET_WORKBENCH_LABEL = 'workbench';
 
 export type MarketSourceKind = 'http' | 'git';
 
+export type GitProbeStatus = 'ok' | 'auth' | 'unreachable';
+
+export interface GitProbePayload {
+  readonly status: GitProbeStatus;
+  readonly detail?: string;
+}
+
 export type MarketSourcePolicy = 'artifacts-in-repo' | 'catalog-only';
 
 export interface IndexSourceSpec {
@@ -56,6 +64,8 @@ export interface MarketIndexVersion {
 }
 
 export interface MarketIndexEntryMetadata {
+  readonly workbench?: boolean;
+  readonly unit?: string;
   readonly category?: string;
   readonly labels?: readonly string[];
   readonly keywords?: readonly string[];
@@ -67,12 +77,22 @@ export interface MarketIndexEntry {
   readonly title?: MarketLocalizedText;
   readonly description?: MarketLocalizedText;
   readonly author?: string;
+  readonly owner?: string;
   readonly homepage?: string;
   readonly icon?: string;
   readonly metadata?: MarketIndexEntryMetadata;
   readonly versions: readonly MarketIndexVersion[];
 }
 
+export type MarketClaim =
+  | { readonly state: 'new' }
+  | { readonly state: 'owned'; readonly owner: string }
+  | { readonly state: 'unowned' }
+  | { readonly state: 'conflict'; readonly owner: string }
+  | { readonly state: 'unit-taken'; readonly entry: string }
+  | { readonly state: 'path-taken'; readonly entry: string }
+  | { readonly state: 'unknown' };
+
 export interface MarketIndexCategory {
   readonly title?: MarketLocalizedText;
 }
@@ -114,7 +134,9 @@ export type MarketIndexProblemKind =
   | 'source'
   | 'git-commit'
   | 'timestamp'
-  | 'icon';
+  | 'icon'
+  | 'owner'
+  | 'unit';
 
 export interface MarketIndexProblem {
   readonly kind: MarketIndexProblemKind;
@@ -213,6 +235,7 @@ export interface PublishChangelog {
   readonly version: string;
   readonly text?: string;
   readonly missing?: boolean;
+  readonly pending?: boolean;
 }
 
 export interface PublishPreview {
@@ -221,6 +244,7 @@ export interface PublishPreview {
   readonly author?: string;
   readonly registry?: string;
   readonly market?: MarketPublishDestination;
+  readonly claim?: MarketClaim;
   readonly changelog?: PublishChangelog;
 }
 
@@ -245,4 +269,5 @@ export type MarketSourcesAction =
   | { readonly action: 'save'; readonly source: MarketSourceConfig; readonly select?: boolean }
   | { readonly action: 'remove'; readonly id: string }
   | { readonly action: 'select'; readonly id: string | null }
-  | { readonly action: 'init'; readonly id: string; readonly ref?: string };
+  | { readonly action: 'init'; readonly id: string; readonly ref?: string; readonly stampOnly?: boolean }
+  | { readonly action: 'read-only'; readonly id: string };

package/src/host/__tests__/changelog.test.ts

@@ -6,6 +6,7 @@ import {
   changelogSectionOf,
   changelogSkeleton,
   parseChangelog,
+  planChangelog,
 } from '../changelog.js';
 
 const SAMPLE = [
@@ -100,3 +101,35 @@ describe('changelogSkeleton', () => {
     expect(changelogSkeleton()).toBe('# 更新日志\n');
   });
 });
+
+describe('planChangelog', () => {
+  it('这一版已有内容就 kept，不追加也不改原文', () => {
+    const plan = planChangelog(SAMPLE, { version: '1.2.0', kind: 'fixed', note: '又修了一条' });
+    expect(plan?.action).toBe('kept');
+    expect(plan?.text).toBe(SAMPLE);
+    expect(plan?.section).toContain('模块详情能看说明与更新日志');
+    expect(plan?.section).not.toContain('又修了一条');
+  });
+
+  it('缺这一版且有 note 就 written：空文件从骨架起，段里就是这条', () => {
+    const plan = planChangelog('', { version: '0.1.0', kind: 'added', note: '第一次发布', date: '2026-10-27' });
+    expect(plan?.action).toBe('written');
+    expect(plan?.version).toBe('0.1.0');
+    expect(plan?.text.startsWith('# 更新日志')).toBe(true);
+    expect(plan?.section).toContain('- 第一次发布');
+    expect(changelogHasEntry(plan?.text ?? '', '0.1.0')).toBe(true);
+  });
+
+  it('缺这一版又没有 note 就 undefined（发布前先要一句话）', () => {
+    expect(planChangelog(SAMPLE, { version: '9.9.9', note: '   ' })).toBeUndefined();
+    expect(planChangelog('', { version: '9.9.9', note: '' })).toBeUndefined();
+  });
+
+  it('只有版本标题没有条目时算缺，补进去而不是再开一段', () => {
+    const empty = '# 更新日志\n\n## v0.2.0\n\n`2026-10-26`\n';
+    const plan = planChangelog(empty, { version: '0.2.0', kind: 'fixed', note: '修一条' });
+    expect(plan?.action).toBe('written');
+    expect(parseChangelog(plan?.text ?? '').filter((one) => one.version === '0.2.0')).toHaveLength(1);
+    expect(plan?.section).toContain('- 修一条');
+  });
+});

package/src/host/__tests__/market-index.test.ts

@@ -1,5 +1,6 @@
 import { describe, expect, it } from 'vitest';
 import type { MarketIndex, MarketIndexEntry } from '../../contract/protocol/market-index.js';
+import { claimOf, claimOfEntry, entryOwnerOf, entryUnitOf, marketArtifactPath, samePublisher } from '../market-index-claim.js';
 import {
   filterMarketIndex,
   marketInstallTarget,
@@ -39,6 +40,13 @@ describe('parseMarketIndex', () => {
     expect(parsed.index.title).toEqual({ zh: '工作台模块' });
   });
 
+  it('★ metadata.workbench 是身份标记，labels 可以为空（不再靠 workbench 标签）', () => {
+    const parsed = parseMarketIndex(indexOf([entry({ metadata: { workbench: true } })]));
+    expect(parsed.ok).toBe(true);
+    if (!parsed.ok) return;
+    expect(parsed.index.plugins[0]?.metadata).toEqual({ workbench: true });
+  });
+
   it('format 不是 1 就整份拒', () => {
     const parsed = parseMarketIndex({ format: 2, plugins: [] });
     expect(parsed.ok).toBe(false);
@@ -78,6 +86,31 @@ describe('parseMarketIndex', () => {
     if (parsed.ok) return;
     expect(parsed.problems[0]?.kind).toBe('not-json');
   });
+
+  it('收下 owner，原样写回', () => {
+    const parsed = parseMarketIndex(indexOf([entry({ owner: '陈康 <kang@example.com>' })]));
+    expect(parsed.ok).toBe(true);
+    if (!parsed.ok) return;
+    expect(parsed.index.plugins[0]?.owner).toBe('陈康 <kang@example.com>');
+  });
+
+  it('owner 只收一行：带换行整份拒', () => {
+    const parsed = parseMarketIndex(indexOf([entry({ owner: '陈康\n<b>' })]));
+    expect(parsed.ok).toBe(false);
+    if (parsed.ok) return;
+    expect(parsed.problems[0]?.kind).toBe('owner');
+  });
+
+  it('收下 metadata.unit；不是合法模块 id 整份拒', () => {
+    const parsed = parseMarketIndex(indexOf([entry({ metadata: { unit: 'inventory' } })]));
+    expect(parsed.ok).toBe(true);
+    if (!parsed.ok) return;
+    expect(parsed.index.plugins[0]?.metadata?.unit).toBe('inventory');
+    const bad = parseMarketIndex(indexOf([entry({ metadata: { unit: 'Not A Unit' } })]));
+    expect(bad.ok).toBe(false);
+    if (bad.ok) return;
+    expect(bad.problems[0]?.kind).toBe('unit');
+  });
 });
 
 describe('upsertMarketEntry', () => {
@@ -101,6 +134,139 @@ describe('upsertMarketEntry', () => {
     expect(next.plugins[0]?.versions).toHaveLength(1);
     expect(next.plugins[0]?.versions[0]?.source.type).toBe('git');
   });
+
+  it('已有 owner 就翻不过来：后来的条目只加版本', () => {
+    const owned = upsertMarketEntry(
+      { format: 1, plugins: [entry({ owner: '甲 <a@example.com>' })] },
+      entry({ owner: '乙 <b@example.com>', versions: [{ version: '0.2.0', source: { type: 'npm' } }] }),
+    );
+    expect(owned.plugins[0]?.owner).toBe('甲 <a@example.com>');
+    expect(owned.plugins[0]?.versions[0]?.version).toBe('0.2.0');
+  });
+});
+
+describe('认领', () => {
+  const owned = entry({ owner: '陈康 <kang@example.com>' });
+
+  it('没有条目是 new，条目没 owner 也没 author 是 unowned', () => {
+    expect(claimOfEntry(undefined, '陈康')).toEqual({ state: 'new' });
+    expect(claimOfEntry(entry(), '陈康')).toEqual({ state: 'unowned' });
+  });
+
+  it('邮箱相同就算同一人，大小写不影响', () => {
+    expect(samePublisher('陈康 <KANG@example.com>', '陈康 <kang@example.com>')).toBe(true);
+  });
+
+  it('两边都有邮箱时邮箱说了算：姓名不同也算同一人', () => {
+    expect(samePublisher('陈康 <kang@example.com>', 'Kang Chen <kang@example.com>')).toBe(true);
+  });
+
+  it('只有一边有邮箱就比姓名：格式漂了也认', () => {
+    expect(samePublisher('陈康', '陈康 <kang@example.com>')).toBe(true);
+  });
+
+  it('姓名和邮箱都不同就是冲突', () => {
+    expect(claimOfEntry(owned, '乙 <yi@example.com>')).toEqual({
+      state: 'conflict',
+      owner: '陈康 <kang@example.com>',
+    });
+  });
+
+  it('原主自己发是 owned；没给身份时是 unknown', () => {
+    expect(claimOfEntry(owned, '陈康 <kang@example.com>')).toEqual({
+      state: 'owned',
+      owner: '陈康 <kang@example.com>',
+    });
+    expect(claimOfEntry(owned, '')).toEqual({ state: 'unknown' });
+  });
+
+  it('老条目只有 author：把它当 owner 认', () => {
+    const legacy = entry({ author: '陈康 <kang@example.com>' });
+    expect(entryOwnerOf(legacy)).toBe('陈康 <kang@example.com>');
+    expect(claimOf({ format: 1, plugins: [legacy] }, { name: '@scope/module-x', publisher: '陈康' })).toEqual({
+      state: 'owned',
+      owner: '陈康 <kang@example.com>',
+    });
+  });
+
+  it('别的条目用了同一个 unit：unit-taken；老条目从产物目录认出 unit', () => {
+    const other = entry({ name: '@scope/other', owner: '乙', metadata: { unit: 'inventory' } });
+    expect(claimOf({ format: 1, plugins: [other] }, { name: '@scope/module-x', publisher: '甲', unit: 'inventory' })).toEqual({
+      state: 'unit-taken',
+      entry: '@scope/other',
+    });
+    const legacy = entry({
+      name: '@scope/legacy',
+      versions: [
+        {
+          version: '0.1.0',
+          source: {
+            type: 'git',
+            url: 'https://git.company.com/wb/market.git',
+            commit: 'a'.repeat(40),
+            path: 'packages/inventory',
+          },
+        },
+      ],
+    });
+    expect(entryUnitOf(legacy)).toBe('inventory');
+    expect(claimOf({ format: 1, plugins: [legacy] }, { name: '@scope/module-x', publisher: '甲', unit: 'inventory' }).state).toBe(
+      'unit-taken',
+    );
+  });
+
+  it('同一个条目自己再用同 unit / 同产物目录，不算撞', () => {
+    const mine = entry({
+      owner: '甲',
+      metadata: { unit: 'inventory' },
+      versions: [
+        {
+          version: '0.1.0',
+          source: {
+            type: 'git',
+            url: 'https://git.company.com/wb/market.git',
+            commit: 'a'.repeat(40),
+            path: marketArtifactPath('@scope/module-x'),
+          },
+        },
+      ],
+    });
+    expect(
+      claimOf(
+        { format: 1, plugins: [mine] },
+        {
+          name: '@scope/module-x',
+          publisher: '甲',
+          unit: 'inventory',
+          artifactPath: marketArtifactPath('@scope/module-x'),
+        },
+      ).state,
+    ).toBe('owned');
+  });
+
+  it('别的条目占了同一个产物目录：path-taken', () => {
+    const other = entry({
+      name: '@scope/other',
+      owner: '乙',
+      versions: [
+        {
+          version: '0.1.0',
+          source: {
+            type: 'git',
+            url: 'https://git.company.com/wb/market.git',
+            commit: 'a'.repeat(40),
+            path: marketArtifactPath('@scope/module-x'),
+          },
+        },
+      ],
+    });
+    expect(
+      claimOf(
+        { format: 1, plugins: [other] },
+        { name: '@scope/module-x', publisher: '甲', unit: 'x', artifactPath: marketArtifactPath('@scope/module-x') },
+      ),
+    ).toEqual({ state: 'path-taken', entry: '@scope/other' });
+  });
 });
 
 describe('filterMarketIndex', () => {

package/src/host/changelog.ts

@@ -202,6 +202,25 @@ export function appendChangelogEntry(text: string, options: ChangelogEntryOption
   return `${normalizeWhitespace(out)}\n`;
 }
 
+export interface ChangelogPlan {
+  readonly action: 'kept' | 'written';
+  readonly version: string;
+  readonly text: string;
+  readonly section: string;
+}
+
+export function planChangelog(text: string, options: ChangelogEntryOptions): ChangelogPlan | undefined {
+  const source = normalizeChangelogText(text);
+  const version = changelogVersion(options.version);
+  const section = changelogSectionOf(source, version);
+  if (section !== undefined && changelogHasEntry(source, version)) {
+    return { action: 'kept', version, text: source, section };
+  }
+  if (bulletsOf(options.note).length === 0) return undefined;
+  const next = appendChangelogEntry(source, options);
+  return { action: 'written', version, text: next, section: changelogSectionOf(next, version) ?? '' };
+}
+
 function normalizeWhitespace(rows: readonly string[]): string {
   const out: string[] = [];
   for (const row of rows) {

package/src/host/market-index-claim.ts

@@ -0,0 +1,91 @@
+import type { MarketClaim, MarketIndex, MarketIndexEntry } from '../contract/protocol/market-index.js';
+
+export interface PublisherIdentity {
+  readonly name: string;
+  readonly email?: string;
+}
+
+function foldedName(name: string): string {
+  return name.replace(/\s+/gu, ' ').trim().toLowerCase();
+}
+
+export function publisherIdentityOf(text: string | undefined): PublisherIdentity | undefined {
+  const raw = (text ?? '').trim();
+  if (raw === '') return undefined;
+  const match = /^(.*?)\s*<([^<>]*)>\s*$/u.exec(raw);
+  const name = (match === null ? raw : match[1]).trim();
+  const email = match === null ? '' : match[2].trim().toLowerCase();
+  if (name === '') return undefined;
+  return email === '' ? { name } : { name, email };
+}
+
+export function samePublisher(left: string, right: string): boolean {
+  const a = publisherIdentityOf(left);
+  const b = publisherIdentityOf(right);
+  if (a === undefined || b === undefined) return false;
+  if (a.email !== undefined && b.email !== undefined) return a.email === b.email;
+  return foldedName(a.name) === foldedName(b.name);
+}
+
+export function entryOwnerOf(entry: MarketIndexEntry): string | undefined {
+  const owner = (entry.owner ?? '').trim();
+  if (owner !== '') return owner;
+  const author = (entry.author ?? '').trim();
+  return author === '' ? undefined : author;
+}
+
+export function claimOfEntry(entry: MarketIndexEntry | undefined, publisher: string | undefined): MarketClaim {
+  if (entry === undefined) return { state: 'new' };
+  const owner = entryOwnerOf(entry);
+  if (owner === undefined) return { state: 'unowned' };
+  if (publisher === undefined || publisher.trim() === '') return { state: 'unknown' };
+  return samePublisher(owner, publisher) ? { state: 'owned', owner } : { state: 'conflict', owner };
+}
+
+export interface MarketClaimInput {
+  readonly name: string;
+  readonly publisher: string | undefined;
+  readonly unit?: string | undefined;
+  readonly artifactPath?: string | undefined;
+}
+
+export function marketArtifactPath(name: string): string {
+  return `packages/${name}`;
+}
+
+export function entryUnitOf(entry: MarketIndexEntry): string | undefined {
+  const unit = entry.metadata?.unit?.trim();
+  if (unit !== undefined && unit !== '') return unit;
+  for (const version of entry.versions) {
+    if (version.source.type !== 'git') continue;
+    const match = /^packages\/([^/]+)$/u.exec(version.source.path ?? '');
+    const legacy = match?.[1];
+    if (legacy !== undefined) return legacy;
+  }
+  return undefined;
+}
+
+export function claimOf(index: MarketIndex, input: MarketClaimInput): MarketClaim {
+  const base = claimOfEntry(
+    index.plugins.find((one) => one.name === input.name),
+    input.publisher,
+  );
+  if (base.state === 'conflict' || base.state === 'unknown') return base;
+  const unit = (input.unit ?? '').trim();
+  if (unit !== '') {
+    for (const other of index.plugins) {
+      if (other.name === input.name) continue;
+      if (entryUnitOf(other) !== unit) continue;
+      return { state: 'unit-taken', entry: other.name };
+    }
+  }
+  const path = (input.artifactPath ?? '').trim();
+  if (path !== '') {
+    for (const other of index.plugins) {
+      if (other.name === input.name) continue;
+      if (!other.versions.some((one) => one.source.type === 'git' && (one.source.path ?? '') === path)) continue;
+      return { state: 'path-taken', entry: other.name };
+    }
+  }
+  return base;
+}

package/src/host/market-index.ts

@@ -32,7 +32,10 @@ export const MARKET_INDEX_README_LINES: readonly string[] = [
   'dsh-wb-module release --index <本仓库地址> --index-policy artifacts-in-repo',
   '```',
   '',
-  '产物会提交到 `packages/<unit>/`，并更新 `market.json`。',
+  '产物会提交到 `packages/<包名>/`（带 scope 时是 `packages/@scope/名字/`），并更新 `market.json`。',
+  '',
+  '一个包名归第一次发布的人（`market.json` 里的 `owner`）。换一个署名发同名会被拒；要换人，先把这一条的 `owner` 改成新的人。',
+  '同一个市场里，一个模块 id（`metadata.unit`）只能被一个条目使用；另一个包名想用同一个 id / 产物目录也会被拒。',
   '',
   '## 使用这个索引',
   '',
@@ -152,9 +155,20 @@ function iconProblem(icon: string): MarketIndexProblem | undefined {
   return problem('icon', 'icon 只能是 base64 data URL 或 http(s) URL');
 }
 
+const MAX_OWNER_CHARS = 200;
+const UNIT_ID = /^[a-z][a-z0-9-]*$/;
+
+function ownerProblem(owner: string): MarketIndexProblem | undefined {
+  if (/[\r\n]/u.test(owner)) return problem('owner', 'owner 只能是一行署名');
+  if (owner.length > MAX_OWNER_CHARS) return problem('owner', 'owner 超过 200 字');
+  return undefined;
+}
+
 function metadataOf(raw: unknown): MarketIndexEntry['metadata'] {
   const record = asRecord(raw);
   if (record === undefined) return undefined;
+  const workbench = record['workbench'] === true;
+  const unit = asText(record['unit']);
   const category = asText(record['category']);
   const labels = asTextArray(record['labels']);
   const keywords = asTextArray(record['keywords']);
@@ -168,6 +182,8 @@ function metadataOf(raw: unknown): MarketIndexEntry['metadata'] {
           ),
         );
   return {
+    ...(workbench ? { workbench: true } : {}),
+    ...(unit === '' ? {} : { unit }),
     ...(category === '' ? {} : { category }),
     ...(labels.length === 0 ? {} : { labels }),
     ...(keywords.length === 0 ? {} : { keywords }),
@@ -192,14 +208,23 @@ function entryOf(raw: unknown, at: string): MarketIndexEntry | MarketIndexProble
   const title = asLocalized(record['title']);
   const description = asLocalized(record['description']);
   const author = asText(record['author']);
+  const owner = asText(record['owner']);
+  if (owner !== '') {
+    const badOwner = ownerProblem(owner);
+    if (badOwner !== undefined) return badOwner;
+  }
   const homepage = asText(record['homepage']);
   const metadata = metadataOf(record['metadata']);
+  if (metadata?.unit !== undefined && !UNIT_ID.test(metadata.unit)) {
+    return problem('unit', `metadata.unit 只能是小写字母开头的 a-z0-9-（现在是 ${JSON.stringify(metadata.unit)}）`, at);
+  }
   return {
     name,
     versions,
     ...(title === undefined ? {} : { title }),
     ...(description === undefined ? {} : { description }),
     ...(author === '' ? {} : { author }),
+    ...(owner === '' ? {} : { owner }),
     ...(homepage === '' ? {} : { homepage }),
     ...(icon === '' ? {} : { icon }),
     ...(metadata === undefined ? {} : { metadata }),
@@ -272,8 +297,14 @@ export function upsertMarketEntry(index: MarketIndex, entry: MarketIndexEntry):
   const merged = new Map<string, MarketIndexVersion>();
   for (const one of current.versions) merged.set(one.version, one);
   for (const one of entry.versions) merged.set(one.version, one);
+  const owner = current.owner ?? entry.owner;
   const plugins = [...index.plugins];
-  plugins[found] = { ...current, ...entry, versions: sortMarketVersions([...merged.values()]) };
+  plugins[found] = {
+    ...current,
+    ...entry,
+    ...(owner === undefined ? {} : { owner }),
+    versions: sortMarketVersions([...merged.values()]),
+  };
   return { ...index, plugins };
 }
 

package/src/host.ts

@@ -15,6 +15,7 @@ export * from './contract/long-task.js';
 export * from './lib/text.js';
 export * from './lib/ui.js';
 export * from './lib/board-fact.js';
+export * from './lib/git-address.js';
 export * from './api/blocker-table.js';
 export * from './contract/unit-declaration.js';
 export * from './host/board-fact.js';
@@ -72,4 +73,5 @@ export * from './host/extension.js';
 export * from './host/port-types.js';
 export * from './host/version-range.js';
 export * from './host/market-index.js';
+export * from './host/market-index-claim.js';
 export * from './host/changelog.js';

package/src/i18n/en.ts

@@ -258,6 +258,7 @@ export const en: Record<keyof WorkbenchMessages, string> = {
   'panels.market.add.failureInstalled':
     'It is already installed in this workbench. The same package cannot be installed over itself: uninstall it first, then install again. The uninstall did not succeed this time.',
   'panels.market.add.failureGeneric': 'Something went wrong during install — see the install details',
+  'panels.market.add.failureCredentials': 'This repository needs credentials: this machine has none for it. Clone it once in a terminal, set up a credential helper, or install from the SSH address.',
   'panels.market.add.approveTitle': 'Your approval is needed for install scripts',
   'panels.market.add.approveCaution': 'Only allow packages you trust: install scripts run on this machine with your permissions.',
   'panels.market.add.approveRun': 'Allow and continue installing',
@@ -299,10 +300,16 @@ export const en: Record<keyof WorkbenchMessages, string> = {
   'panels.discover.addingSource': 'Adding…',
   'panels.discover.addFirstSource': 'Add index source',
   'panels.discover.removeSource': 'Remove',
-  'panels.discover.removeSourceNamed': 'Remove {url}',
-  'panels.discover.useSource': 'Use',
-  'panels.discover.useSourceNamed': 'Use {label}',
-  'panels.discover.sourceCurrent': 'In use',
+  'panels.discover.removeTitle': 'Remove this index source?',
+  'panels.discover.removeBody': '"{label}" will be removed from this list; the repository itself is not deleted, and you can add it back later.',
+  'panels.discover.sourceActions': 'Actions for {label}',
+  'panels.discover.sourceStateWritable': 'Publish target',
+  'panels.discover.sourceStateReadOnly': 'Read-only list',
+  'panels.discover.sourceEnable': 'Set up for publishing',
+  'panels.discover.sourceDisable': 'Set to read-only',
+  'panels.discover.sourceWorking': 'Updating…',
+  'panels.discover.sourceEnabled': '"{label}" is ready for publishing',
+  'panels.discover.sourceReadOnly': '"{label}" is now read-only',
   'panels.discover.refresh': 'Refresh',
   'panels.discover.search': 'Search modules',
   'panels.discover.clearSearch': 'Clear search',
@@ -324,12 +331,13 @@ export const en: Record<keyof WorkbenchMessages, string> = {
   'panels.discover.noSourceHint': 'Add a module market index (http address or git repository) to browse and install its modules here',
   'panels.discover.sourcesFailed': 'Could not read the index sources.',
   'panels.discover.unreadable': 'Could not read this index.',
+  'panels.discover.sourceAuth': 'This index source could not be read: this machine has no git credentials for it. Set up credentials (or switch the source to its SSH address), then refresh.',
   'panels.discover.invalid': 'This index is not in a valid format.',
   'panels.discover.emptyRepo': 'This repository has no commits yet.',
   'panels.discover.missingIndex': 'This repository has no {path} yet.',
   'panels.discover.initTitle': 'Initialize this repository as a module market index?',
   'panels.discover.initCta': 'Initialize market index',
-  'panels.discover.initWhat': 'It will write market.json and README.md on {branch}, commit once, and push. Modules you publish from this workbench will commit their build files under packages/<unit>/. The repository stays owned by its owner.',
+  'panels.discover.initWhat': 'It will write market.json and README.md on {branch}, commit once, and push. Modules you publish from this workbench will commit their build files under packages/<package-name>/. The repository stays owned by its owner.',
   'panels.discover.initBranch': 'Branch',
   'panels.discover.initBranchHint': 'The index and build files go to this branch; an empty repository gets it created.',
   'panels.discover.initBranchBad': 'Use only letters, digits, dots, underscores, slashes, or dashes in a branch name.',
@@ -347,8 +355,23 @@ export const en: Record<keyof WorkbenchMessages, string> = {
   'panels.discover.badShellDetail': 'This version is not compatible with the running workbench {current}; it requires {peer}',
   'panels.discover.unverified': 'Workbench unverified',
   'panels.discover.installing': 'Installing…',
+  'panels.discover.installingNamed': 'Installing {name}…',
+  'panels.discover.cancelInstall': 'Cancel install',
+  'panels.discover.cancelling': 'Cancelling…',
+  'panels.discover.installCancelled': 'Install cancelled: {name}',
   'panels.discover.installedDone': 'Installed: {name}',
   'panels.discover.failed': 'Failed: {reason}',
+  'panels.discover.transportTitle': 'Where to read this repository',
+  'panels.discover.transportSsh': 'SSH',
+  'panels.discover.transportHttps': 'HTTPS',
+  'panels.discover.transportOk': 'Readable',
+  'panels.discover.transportAuth': 'Needs credentials',
+  'panels.discover.transportUnreachable': 'Unreachable',
+  'panels.discover.transportUnknown': 'Not probed',
+  'panels.discover.transportChecking': 'Checking…',
+  'panels.discover.transportTest': 'Test this address',
+  'panels.discover.transportPlaceholder': 'Or paste another address (mirror, alias)',
+  'panels.discover.transportNeedsAuth': 'This repository needs credentials: clone it once in a terminal, or set up an SSH key / credential helper, then install again.',
   'panels.discover.expand': 'Show versions',
   'panels.discover.collapse': 'Hide versions',
   'panels.discover.versionCount': '{n} versions',
@@ -647,6 +670,13 @@ export const en: Record<keyof WorkbenchMessages, string> = {
   'approval.publish.version': 'Version',
   'approval.publish.author': 'Author',
   'approval.publish.authorMissing': 'unsigned',
+  'approval.publish.owner': 'Owner',
+  'approval.publish.ownerUnowned': 'originally unattributed',
+  'approval.publish.ownerTaken': 'Owned by {owner}',
+  'approval.publish.unit': 'Module id',
+  'approval.publish.unitTaken': 'Taken by {entry}',
+  'approval.publish.path': 'Artifact dir',
+  'approval.publish.pathTaken': 'Taken by {entry}',
   'approval.publish.registry': 'Registry',
   'approval.publish.repo': 'Repository',
   'approval.publish.branch': 'Branch',
@@ -657,6 +687,7 @@ export const en: Record<keyof WorkbenchMessages, string> = {
   'approval.publish.twoCommits': 'build files + market.json in 2 commits, one push',
   'approval.publish.reading': 'Reading…',
   'approval.publish.changelog': 'Changelog for {version}',
+  'approval.publish.changelogPending': 'This release writes the {version} changelog entry',
   'approval.publish.changelogMissing': 'No changelog entry for {version}; publishing will be blocked',
   'approval.publish.targetAuto': 'configured default',
   'approval.publish.targetTeam': 'team registry',
@@ -665,6 +696,15 @@ export const en: Record<keyof WorkbenchMessages, string> = {
   'approval.publish.targetGit': 'git repository',
   'approval.publish.targetMarket': 'module market index',
   'approval.publish.targetLocal': 'keep local',
+  'approval.market.source': 'Index source',
+  'approval.market.url': 'URL',
+  'approval.market.action': 'This action',
+  'approval.market.policy': 'Current state',
+  'approval.market.enable': 'make it publishable',
+  'approval.market.disable': 'make it read-only',
+  'approval.market.writable': 'publishable',
+  'approval.market.readOnly': 'read-only module list',
+  'approval.market.reading': 'Reading…',
   'markdown.copy': 'Copy',
   'markdown.copied': 'Copied',
   'markdown.footnotes': 'Footnotes',