@lesliechan721/aw 0.1.0-beta.10 → 0.1.0-beta.11

package/dist/src/tui/controller.js

@@ -1,14 +1,25 @@
 import crypto from 'node:crypto';
 import { CatalogGenerationError } from '../utils/catalog-generation-error.js';
+import { readSafeOperationError } from '../utils/safe-operation-diagnostic.js';
 import { buildRebuildReceiptJson, requestedIntentAction } from '../output/command-receipt.js';
 import { buildOperationResultModel } from '../commands/operation-planner.js';
 import { buildOperationReviewProjection } from './operation-review-planner.js';
 import { buildTuiViewModel, dependencyPlacementTargets, hasInstalledPlacement, } from './model.js';
-import { safeDiagnosticCode } from './diagnostics.js';
+import { safeDiagnosticCode, sanitizeDiagnosticText } from './diagnostics.js';
+import { projectExecutionDiagnostics, projectThrownOperationDiagnostic } from './diagnostic-projection.js';
+import { OperationHistoryStore, } from './operation-history.js';
 import { targetHasArtifactCollision } from '../utils/target-eligibility.js';
 import { TuiRouter, } from './router.js';
+import { normalizeTuiRoute } from './screen-registry.js';
 import { CatalogSourcesSession } from './catalog-sources/session.js';
 import { catalogSourceAutoCheckOnlyValue, projectCatalogSourceMutationWarnings, } from './catalog-sources/review.js';
+export const PLUGIN_WRITE_BATCH_ACTIONS = [
+    'install',
+    'sync',
+    'reinstall',
+    'uninstall',
+    'cleanup',
+];
 function reviewPreparationStageLabel(stage) {
     return {
         refresh: '刷新相关来源',
@@ -48,6 +59,176 @@ function stableValue(value) {
         .sort(([left], [right]) => left.localeCompare(right, 'en'))
         .map(([key, entry]) => [key, stableValue(entry)]));
 }
+function canonicalPluginIds(pluginIds) {
+    return [...new Set(pluginIds)].sort((left, right) => left.localeCompare(right, 'en'));
+}
+function canonicalBatchTargets(targets) {
+    const byKey = new Map();
+    for (const target of targets) {
+        byKey.set([target.pluginId, target.platform, target.scope].join('\0'), target);
+    }
+    return [...byKey.values()].sort((left, right) => [left.pluginId, left.platform, left.scope].join('\0')
+        .localeCompare([right.pluginId, right.platform, right.scope].join('\0'), 'en'));
+}
+function normalizeOperationIntent(intent) {
+    if (intent.kind !== 'pluginWriteBatch')
+        return intent;
+    if (intent.selection.kind === 'targets') {
+        return {
+            ...intent,
+            selection: { kind: 'targets', targets: canonicalBatchTargets(intent.selection.targets) },
+        };
+    }
+    if (intent.selection.kind !== 'selected')
+        return intent;
+    return {
+        ...intent,
+        selection: {
+            kind: 'selected',
+            pluginIds: canonicalPluginIds(intent.selection.pluginIds),
+        },
+    };
+}
+function assertPluginWriteBatchEvidence(evidence) {
+    const candidate = evidence;
+    if (!Array.isArray(candidate.requestedPluginIds) || !Array.isArray(candidate.groups)) {
+        throw new TuiOperationBlockedError('batchEvidenceInvalid', '批量确认信息不完整。');
+    }
+    const requestedPluginIds = canonicalPluginIds(candidate.requestedPluginIds);
+    if (requestedPluginIds.length === 0
+        || JSON.stringify(requestedPluginIds) !== JSON.stringify(candidate.requestedPluginIds)) {
+        throw new TuiOperationBlockedError('batchEvidenceInvalid', '批量根插件集合无效。');
+    }
+    const requested = new Set(requestedPluginIds);
+    const groupIds = new Set();
+    const groupedRoots = new Set();
+    for (const group of candidate.groups) {
+        if (!group || typeof group.groupId !== 'string' || group.groupId.length === 0
+            || typeof group.sourceId !== 'string' || group.sourceId.length === 0
+            || groupIds.has(group.groupId)
+            || !Array.isArray(group.requestedPluginIds)
+            || group.requestedPluginIds.length === 0
+            || JSON.stringify(canonicalPluginIds(group.requestedPluginIds))
+                !== JSON.stringify(group.requestedPluginIds)
+            || group.requestedPluginIds.some((pluginId) => !requested.has(pluginId))
+            || group.executable !== Boolean(group.preview?.operationPlan)) {
+            throw new TuiOperationBlockedError('batchEvidenceInvalid', '批量分组确认信息无效。');
+        }
+        groupIds.add(group.groupId);
+        group.requestedPluginIds.forEach((pluginId) => groupedRoots.add(pluginId));
+    }
+    if (requestedPluginIds.some((pluginId) => !groupedRoots.has(pluginId))) {
+        throw new TuiOperationBlockedError('batchEvidenceInvalid', '批量分组缺少请求根插件。');
+    }
+}
+export function pluginWriteBatchFailedRequestedTargets(execution) {
+    const failed = [];
+    for (const group of execution.groupResults) {
+        const roots = new Set(group.requestedPluginIds);
+        const targetsByPlugin = new Map();
+        for (const target of group.result.targetResults) {
+            const pluginId = target.target.pluginId;
+            if (!pluginId)
+                continue;
+            const entries = targetsByPlugin.get(pluginId) ?? [];
+            entries.push(target);
+            targetsByPlugin.set(pluginId, entries);
+        }
+        const successfulRootKeys = new Set(group.result.targetResults.flatMap((target) => {
+            const pluginId = target.target.pluginId;
+            return pluginId && roots.has(pluginId)
+                && target.state !== 'failed' && target.action !== 'skipped'
+                ? [[pluginId, target.target.platform, target.target.scope].join('\0')]
+                : [];
+        }));
+        const unsuccessful = group.result.targetResults.filter((target) => target.state === 'failed' || target.action === 'skipped');
+        for (const target of unsuccessful) {
+            const pending = target.target.pluginId
+                ? [{ pluginId: target.target.pluginId, platform: target.target.platform }]
+                : [];
+            const visited = new Set();
+            while (pending.length > 0) {
+                const current = pending.shift();
+                const visitKey = [current.pluginId, current.platform].join('\0');
+                if (visited.has(visitKey))
+                    continue;
+                visited.add(visitKey);
+                const candidates = (targetsByPlugin.get(current.pluginId) ?? [])
+                    .filter((candidate) => candidate.target.platform === current.platform);
+                if (roots.has(current.pluginId)) {
+                    if (candidates.length === 0) {
+                        const retryTarget = {
+                            pluginId: current.pluginId,
+                            platform: current.platform,
+                            scope: group.scope,
+                        };
+                        const key = [retryTarget.pluginId, retryTarget.platform, retryTarget.scope].join('\0');
+                        if (!successfulRootKeys.has(key))
+                            failed.push(retryTarget);
+                    }
+                    for (const candidate of candidates) {
+                        const retryTarget = {
+                            pluginId: current.pluginId,
+                            platform: candidate.target.platform,
+                            scope: candidate.target.scope,
+                        };
+                        const key = [current.pluginId, retryTarget.platform, retryTarget.scope].join('\0');
+                        if (!successfulRootKeys.has(key))
+                            failed.push(retryTarget);
+                    }
+                    continue;
+                }
+                for (const candidate of candidates) {
+                    pending.push(...(candidate.requiredBy ?? []).map((pluginId) => ({
+                        pluginId, platform: current.platform,
+                    })));
+                }
+            }
+        }
+    }
+    return canonicalBatchTargets(failed);
+}
+export function pluginWriteBatchFailedRequestedPluginIds(execution) {
+    return canonicalPluginIds(pluginWriteBatchFailedRequestedTargets(execution)
+        .map((target) => target.pluginId));
+}
+function collectOperationSensitiveValues(intent) {
+    if (intent.kind !== 'configSave')
+        return [];
+    const sensitiveKeys = new Set([...(intent.sensitiveKeys ?? []), ...(intent.privateKeys ?? [])]);
+    const values = [];
+    const visit = (value) => {
+        if (typeof value === 'string')
+            values.push(value);
+        else if (Array.isArray(value))
+            value.forEach(visit);
+        else if (value && typeof value === 'object')
+            Object.values(value).forEach(visit);
+    };
+    for (const [key, value] of Object.entries(intent.updates ?? {})) {
+        if (sensitiveKeys.has(key))
+            visit(value);
+    }
+    return values;
+}
+function sanitizeOperationSummary(summary, sensitiveValues) {
+    const text = (value) => sanitizeDiagnosticText(value, [], sensitiveValues);
+    return {
+        ...summary,
+        message: text(summary.message),
+        ...(summary.messages ? { messages: summary.messages.map(text) } : {}),
+        ...(summary.changes ? { changes: summary.changes.map(text) } : {}),
+        ...(summary.warnings ? { warnings: summary.warnings.map(text) } : {}),
+        ...(summary.recoveryActions ? { recoveryActions: summary.recoveryActions.map(text) } : {}),
+        ...(summary.quarantineBasename ? { quarantineBasename: text(summary.quarantineBasename) } : {}),
+        ...(summary.portable ? {
+            portable: {
+                ...summary.portable,
+                ...(summary.portable.recovery ? { recovery: text(summary.portable.recovery) } : {}),
+            },
+        } : {}),
+    };
+}
 function deepFreeze(value) {
     if (typeof value !== 'object' || value === null || Object.isFrozen(value))
         return value;
@@ -58,27 +239,33 @@ function deepFreeze(value) {
 function cloneFrozen(value) {
     return deepFreeze(structuredClone(value));
 }
-function publicReviewPreparation(snapshot) {
-    if (snapshot.intent.kind !== 'catalogGeneration' || !snapshot.intent.sourceMutation)
-        return snapshot;
-    const mutation = snapshot.intent.sourceMutation;
-    const sourceMutation = mutation.action === 'add'
-        ? {
-            ...mutation,
-            source: mutation.source.type === 'path'
-                ? { ...mutation.source, path: '<private>' }
-                : { ...mutation.source, url: '<private>' },
-        }
-        : {
-            ...mutation,
-            update: 'url' in mutation.update
-                ? { ...mutation.update, ...(mutation.update.url ? { url: '<private>' } : {}) }
-                : { ...mutation.update, ...('path' in mutation.update && mutation.update.path
-                        ? { path: '<private>' } : {}) },
-        };
-    return { ...snapshot, intent: { ...snapshot.intent, sourceMutation } };
-}
 export function operationEvidenceFingerprint(evidence) {
+    if ('groups' in evidence && 'requestedPluginIds' in evidence) {
+        const batch = evidence;
+        return crypto.createHash('sha256')
+            .update(JSON.stringify(stableValue({
+            requestedPluginIds: batch.requestedPluginIds,
+            groups: batch.groups.map((group) => ({
+                groupId: group.groupId,
+                sourceId: group.sourceId,
+                platform: group.platform,
+                requestedPluginIds: group.requestedPluginIds,
+                executable: group.executable,
+                planFingerprint: group.preview.operationPlan?.planFingerprint,
+                overallState: group.preview.overallState,
+                targetResults: group.preview.targetResults.map((target) => ({
+                    pluginId: target.target.pluginId,
+                    platform: target.target.platform,
+                    scope: target.target.scope,
+                    state: target.state,
+                    action: target.action,
+                    errorCode: target.errorCode,
+                    requiredBy: target.requiredBy,
+                })),
+            })),
+        })))
+            .digest('hex');
+    }
     if (evidence.operationPlan)
         return evidence.operationPlan.planFingerprint;
     if (evidence.resetTarget) {
@@ -90,8 +277,14 @@ export function operationEvidenceFingerprint(evidence) {
             .digest('hex');
     }
     const { codexManager: _runtimeSelection, ...staleEvidence } = evidence;
+    const config = staleEvidence.config
+        ? (({ shareability: _shareability, ...identity }) => identity)(staleEvidence.config)
+        : undefined;
     return crypto.createHash('sha256')
-        .update(JSON.stringify(stableValue(staleEvidence)))
+        .update(JSON.stringify(stableValue({
+        ...staleEvidence,
+        ...(config ? { config } : {}),
+    })))
         .digest('hex');
 }
 export function operationEvidenceMatches(expected, current) {
@@ -125,6 +318,9 @@ export function userIssueKey(issue) {
         .join('\0');
 }
 function issueCode(error) {
+    const safeOperationError = readSafeOperationError(error);
+    if (safeOperationError)
+        return safeDiagnosticCode(safeOperationError.code, 'operationBlocked');
     if (error instanceof TuiOperationBlockedError)
         return error.code;
     if (error instanceof CatalogGenerationError)
@@ -160,12 +356,15 @@ export class TuiController {
     #listeners = new Set();
     #health = new Map();
     #tickets = new Map();
+    #reviewPreparationIntents = new Map();
     #inflightOperations = new Map();
+    #pendingReads = new Set();
     #abort = new AbortController();
     #progressUnsubscribe;
     #progressFeed;
     #phase = 'idle';
     #status;
+    #statusReadAtMs;
     #catalogGenerations = new Map();
     #catalogFreshness = new Map();
     #catalogSourcesSession;
@@ -177,18 +376,28 @@ export class TuiController {
     #reviewPreparation;
     #reviewPreparationToken = 0;
     #result;
+    #resultAnchor;
+    #portableResultSkills;
     #loadError;
     #portableDraft;
+    #recoverablePortableDraft;
     #portableRepreparePluginId;
     #portableRequestToken = 0;
     #portableRequestAbort;
     #portablePending;
     #installPlacementDraft;
+    #recoverableInstallPlacementDraft;
     #installPlacementRequestToken = 0;
     #installPlacementRequestAbort;
     #generation = 0;
     #disposed = false;
-    #externalDraft;
+    #retiring = false;
+    #externalDrafts = [];
+    #batchRetryIntent;
+    #operationHistory = new OperationHistoryStore();
+    #sessionEpoch = 0;
+    #lastRecordedResultId;
+    #operationDiagnostics = new Map();
     constructor(dependencies, progressFeed) {
         this.dependencies = dependencies;
         this.#progressFeed = progressFeed;
@@ -211,6 +420,8 @@ export class TuiController {
         });
         if (progressFeed) {
             this.#progressUnsubscribe = progressFeed.subscribe((progress) => {
+                if (this.#router.snapshot.current.route.name === 'result')
+                    return;
                 this.#progress = {
                     ...structuredClone(progress),
                     messages: progress.messages.slice(-8),
@@ -239,6 +450,7 @@ export class TuiController {
     get snapshot() {
         return cloneFrozen({
             phase: this.#phase,
+            ...(this.#statusReadAtMs !== undefined ? { statusReadAtMs: this.#statusReadAtMs } : {}),
             ...(this.#status?.cliChannel ? { cliChannel: this.#status.cliChannel } : {}),
             router: this.#router.snapshot,
             ...(this.#viewModel ? { viewModel: this.#viewModel } : {}),
@@ -252,9 +464,11 @@ export class TuiController {
             progressTargets: this.#progressTargets,
             ...(this.#activeReview ? { activeReview: this.#activeReview } : {}),
             ...(this.#reviewPreparation
-                ? { reviewPreparation: publicReviewPreparation(this.#reviewPreparation.snapshot) }
+                ? { reviewPreparation: this.#reviewPreparation.snapshot }
                 : {}),
             ...(this.#result ? { result: this.#result } : {}),
+            operationHistorySummaries: this.#operationHistory.list(),
+            ...(this.#portableResultSkills ? { portableResultSkills: this.#portableResultSkills } : {}),
             ...(this.#loadError ? { loadError: this.#loadError } : {}),
             ...(this.#portableDraft ? { portableDraft: this.#portableDraft } : {}),
             ...(this.#installPlacementDraft
@@ -278,13 +492,222 @@ export class TuiController {
         listener(this.snapshot);
         return () => this.#listeners.delete(listener);
     }
+    get hasActiveWrite() {
+        return this.#inflightOperations.size > 0;
+    }
+    get retiring() {
+        return this.#retiring;
+    }
+    get hasSessionDraft() {
+        return this.#externalDrafts.length > 0
+            || this.#portableDraft !== undefined
+            || this.#installPlacementDraft !== undefined;
+    }
+    get externalDrafts() {
+        return structuredClone(this.#externalDrafts);
+    }
+    attachOperationHistory(history, epoch) {
+        this.#operationHistory = history;
+        this.#sessionEpoch = epoch;
+    }
+    listOperationHistory() {
+        return this.#operationHistory.list();
+    }
+    getOperationDiagnostic(recordId) {
+        return this.#operationHistory.get(recordId);
+    }
+    previewOperationReport(recordId) {
+        return this.#operationHistory.preview(recordId);
+    }
+    saveOperationReport(recordId, filePath) {
+        return this.#operationHistory.save(recordId, filePath);
+    }
+    /** @internal Test-only observability for bounded private diagnostic ownership. */
+    operationDiagnosticRetentionCountForTests() {
+        return this.#operationDiagnostics.size;
+    }
+    recordUiFailure(error, context) {
+        const recordId = this.#recordStandaloneFailure(context.code, context.stage, error);
+        this.#publish();
+        return recordId;
+    }
+    #recordStandaloneFailure(code, stage, error) {
+        const operationId = `ui-${crypto.randomUUID()}`;
+        const recordId = `${this.#sessionEpoch}:${operationId}`;
+        const diagnostic = projectThrownOperationDiagnostic({
+            error,
+            id: `${recordId}:failure`,
+            stage: safeDiagnosticCode(stage, 'ui'),
+            fallbackCode: safeDiagnosticCode(code, 'uiOperationFailed'),
+        });
+        this.#operationHistory.record({
+            summary: {
+                recordId,
+                epoch: this.#sessionEpoch,
+                operationId,
+                createdAtMs: this.dependencies.now?.() ?? Date.now(),
+                state: 'blocked',
+                code: diagnostic.code,
+                message: diagnostic.safeMessage,
+                diagnosticCount: 1,
+                effects: {
+                    configCommit: 'notApplicable', awWrite: 'notStarted',
+                    preApplyExternalEffect: 'notApplicable', finalVerification: 'notStarted',
+                },
+            },
+            diagnostics: [diagnostic],
+            targets: [],
+        });
+        return recordId;
+    }
+    #trackRead(promise) {
+        this.#pendingReads.add(promise);
+        void promise.finally(() => this.#pendingReads.delete(promise)).catch(() => undefined);
+        return promise;
+    }
+    beginRetirement() {
+        this.#retiring = true;
+    }
+    async waitForWrites() {
+        this.beginRetirement();
+        while (this.#inflightOperations.size > 0) {
+            await Promise.allSettled([...this.#inflightOperations.values()].map((operation) => operation.promise));
+        }
+    }
+    async cancelAndWaitForReads() {
+        if (this.hasActiveWrite)
+            return false;
+        this.beginRetirement();
+        this.#generation += 1;
+        this.#cancelReviewPreparation();
+        this.#cancelPortableRequest();
+        this.#cancelInstallPlacementRequest();
+        this.#abort.abort();
+        const catalogDrain = this.#catalogSourcesSession.cancelAndWait();
+        while (this.#pendingReads.size > 0) {
+            await Promise.allSettled([...this.#pendingReads]);
+        }
+        await catalogDrain;
+        return !this.hasActiveWrite;
+    }
+    #assertAcceptingActions() {
+        if (this.#retiring || this.#disposed) {
+            throw new DOMException('Controller session is retiring.', 'AbortError');
+        }
+    }
+    goHome(options = {}) {
+        if (this.hasSessionDraft && !options.discardDrafts)
+            return false;
+        this.#cancelReviewPreparation();
+        this.#cancelPortableRequest();
+        this.#cancelInstallPlacementRequest();
+        this.#tickets.clear();
+        this.#activeReview = undefined;
+        this.#portableDraft = undefined;
+        this.#recoverablePortableDraft = undefined;
+        this.#installPlacementDraft = undefined;
+        this.#recoverableInstallPlacementDraft = undefined;
+        this.#batchRetryIntent = undefined;
+        this.#externalDrafts = [];
+        this.#result = undefined;
+        this.#resultAnchor = undefined;
+        this.#portableResultSkills = undefined;
+        this.#progress = { messages: [] };
+        this.#progressTargets = [];
+        this.#router.resetToRoot();
+        this.#publish();
+        return true;
+    }
     #publish() {
         if (this.#disposed)
             return;
+        this.#recordTerminalResult();
         const snapshot = this.snapshot;
         for (const listener of this.#listeners)
             listener(snapshot);
     }
+    #recordTerminalResult() {
+        const result = this.#result;
+        if (!result || result.state === 'stale')
+            return;
+        const recordId = `${this.#sessionEpoch}:${result.operationId}`;
+        if (this.#lastRecordedResultId === recordId)
+            return;
+        const projected = this.#operationDiagnostics.get(result.operationId) ?? {
+            diagnostics: [],
+            effects: {
+                configCommit: 'notApplicable',
+                awWrite: result.state === 'succeeded' ? 'completed' : 'unknown',
+                preApplyExternalEffect: 'notApplicable',
+                finalVerification: result.state === 'succeeded' ? 'completed' : 'unknown',
+            },
+        };
+        if ('summary' in result && result.summary) {
+            Object.assign(result.summary, sanitizeOperationSummary(result.summary, projected.sensitiveValues ?? []));
+        }
+        const diagnosticIds = projected.diagnostics.map((diagnostic) => diagnostic.id);
+        Object.assign(result, { operationRecordId: recordId, diagnosticIds, effects: projected.effects });
+        if ('summary' in result && result.summary) {
+            result.summary.diagnosticIds = diagnosticIds;
+            result.summary.effects = projected.effects;
+            for (const target of result.summary.targets ?? []) {
+                const targetDiagnostics = projected.diagnostics.filter((diagnostic) => diagnostic.target
+                    && diagnostic.target.platform === target.platform
+                    && diagnostic.target.scope === target.scope
+                    && (diagnostic.target.pluginId === undefined || diagnostic.target.pluginId === target.pluginId));
+                target.diagnosticIds = targetDiagnostics.map((diagnostic) => diagnostic.id);
+                target.effects = projected.targetEffects?.get(`${target.pluginId ?? ''}\0${target.platform}\0${target.scope}`);
+            }
+        }
+        const code = result.state === 'succeeded' || result.state === 'partial'
+            ? result.summary.code : result.summary?.code ?? result.code;
+        const message = result.state === 'succeeded' || result.state === 'partial'
+            ? result.summary.message : result.summary?.message ?? result.message;
+        this.#operationHistory.record({
+            summary: {
+                recordId,
+                epoch: this.#sessionEpoch,
+                operationId: result.operationId,
+                createdAtMs: this.dependencies.now?.() ?? Date.now(),
+                state: result.state,
+                code,
+                message,
+                ...('operationKind' in result && result.operationKind ? { operationKind: result.operationKind } : {}),
+                ...('pluginId' in result && result.pluginId ? { pluginId: result.pluginId } : {}),
+                diagnosticCount: projected.diagnostics.length,
+                effects: projected.effects,
+            },
+            diagnostics: projected.diagnostics,
+            targets: 'summary' in result && result.summary
+                ? structuredClone((result.summary.targets ?? []).map((target) => ({
+                    ...target,
+                    diagnosticIds: target.diagnosticIds ?? [],
+                })))
+                : structuredClone(projected.targets ?? []),
+        }, { sensitiveValues: projected.sensitiveValues });
+        this.#operationDiagnostics.delete(result.operationId);
+        this.#lastRecordedResultId = recordId;
+    }
+    #captureThrownProjection(operationId, error, code, stage, intent, effects) {
+        const sensitiveValues = intent ? collectOperationSensitiveValues(intent) : [];
+        this.#operationDiagnostics.set(operationId, {
+            diagnostics: [projectThrownOperationDiagnostic({
+                    error,
+                    id: `${this.#sessionEpoch}:${operationId}:failure`,
+                    stage,
+                    fallbackCode: code,
+                    sensitiveValues,
+                    ...(intent && 'pluginId' in intent && 'platform' in intent && intent.platform !== 'both'
+                        ? { target: { pluginId: intent.pluginId, platform: intent.platform, scope: intent.scope } }
+                        : {}),
+                })],
+            effects: effects ?? {
+                configCommit: 'notApplicable', awWrite: 'notStarted',
+                preApplyExternalEffect: 'notApplicable', finalVerification: 'notStarted',
+            },
+            sensitiveValues,
+        });
+    }
     async #logErrorSafe(error, code, context) {
         try {
             await this.dependencies.logError?.(error, code, context);
@@ -306,64 +729,152 @@ export class TuiController {
             catalogGenerations: this.#catalogGenerations,
             dependencyOverviews: this.#status.dependencyOverviews,
             portablePluginIds: this.#status.portablePluginIds,
+            configStoreInventory: this.#status.configStoreInventory,
         });
     }
     #normalizeRoute(route) {
-        if (route.name === 'pluginList' && route.sourceId
-            && !this.#viewModel?.sourceTabs.some((source) => source.id === route.sourceId)) {
-            return { name: 'pluginList', mode: route.mode };
+        return normalizeTuiRoute(route, this.#routeEntityState());
+    }
+    #routeEntityState() {
+        return {
+            hasPlugin: (pluginId) => this.#viewModel?.plugins.some((plugin) => plugin.pluginId === pluginId) ?? false,
+            hasSource: (sourceId) => this.#viewModel?.sourceTabs.some((source) => source.id === sourceId) ?? false,
+            hasIssue: (issueId) => this.#viewModel?.issues.some((issue) => issue.issueId === issueId) ?? false,
+            hasHistoryRecord: (recordId) => this.#operationHistory.get(recordId) !== undefined,
+            hasActiveOperation: (candidate) => candidate.name === 'reviewPreparing'
+                ? this.#reviewPreparation?.snapshot.id === candidate.preparationId
+                : candidate.name === 'result'
+                    ? this.#result?.operationId === candidate.operationId
+                    : this.#activeReview?.operationId === candidate.operationId,
+        };
+    }
+    #normalizeCurrentRoute() {
+        this.#router.normalizeRoutes((route) => this.#normalizeRoute(route));
+        if (this.#resultAnchor)
+            this.#resultAnchor = this.#normalizeRoute(this.#resultAnchor);
+        for (const ticket of this.#tickets.values())
+            ticket.returnRoute = this.#normalizeRoute(ticket.returnRoute);
+        if (this.#reviewPreparation) {
+            this.#reviewPreparation.returnRoute = this.#normalizeRoute(this.#reviewPreparation.returnRoute);
+        }
+    }
+    #ensureOperationFlow(intent) {
+        const active = this.#router.activeFlow();
+        if (intent.kind === 'pluginWriteBatch') {
+            if (active?.kind === 'batchWrite')
+                return;
+            this.#router.beginFlow('batchWrite', { name: 'pluginList', mode: 'installed' });
+            return;
         }
-        const pluginRoute = route.name === 'pluginPreview'
-            || route.name === 'portableSkillSelect'
-            || route.name === 'portableDependencies'
-            || route.name === 'portableAgentMode'
-            || route.name === 'portableAgentInput'
-            || route.name === 'portableScope'
-            || route.name === 'portableBlocker'
-            || route.name === 'pluginDependencies'
-            || route.name === 'installPlacement'
-            || route.name === 'installTargets'
-            || route.name === 'dependencyPlacement'
-            || route.name === 'dependencyPlacementEditor'
-            || route.name === 'pluginDetail'
-            || route.name === 'platform'
-            || route.name === 'pluginAbout'
-            || route.name === 'pluginTechnical'
-            || route.name === 'configLayer'
-            || route.name === 'configFields'
-            || route.name === 'configFieldEditor'
-            || route.name === 'configUnavailable';
-        if (pluginRoute && !this.#viewModel?.plugins.some((plugin) => plugin.pluginId === route.pluginId)) {
-            return {
-                name: 'pluginList',
-                mode: route.name === 'pluginPreview' || route.name === 'pluginDependencies'
-                    || route.name === 'installPlacement' || route.name === 'installTargets'
-                    || route.name === 'dependencyPlacement' || route.name === 'dependencyPlacementEditor'
-                    ? 'browse'
-                    : 'installed',
-            };
+        if (intent.kind === 'pluginWrite') {
+            const kind = intent.action === 'install' ? 'pluginInstall' : 'pluginMaintenance';
+            if (active?.kind === kind)
+                return;
+            this.#router.beginPluginFlow(kind, intent.pluginId);
+            return;
         }
-        if (route.name === 'issueDetail'
-            && !this.#viewModel?.issues.some((issue) => issue.issueId === route.issueId)) {
-            return { name: 'issueList' };
+        if (intent.kind === 'portableInstall') {
+            if (active?.kind === 'portableInstall')
+                return;
+            this.#router.beginPortableFlow(intent.pluginId);
+            return;
         }
-        if ((route.name === 'sourceDetail'
-            || route.name === 'sourceTechnical'
-            || route.name === 'sourceEdit'
-            || route.name === 'sourceRemoveBlocked')
-            && !this.#viewModel?.sourceTabs.some((source) => source.id === route.sourceId)) {
-            return { name: 'sourceList' };
+        if (intent.kind === 'configSave' || intent.kind === 'configReset') {
+            if (active?.kind === 'configEdit')
+                return;
+            const route = this.#router.snapshot.current.route;
+            if ((route.name === 'pluginPreview' || route.name === 'pluginDetail')
+                && route.pluginId === intent.pluginId) {
+                this.#router.beginConfigFlow(intent.pluginId);
+            }
+            else {
+                this.#router.beginFlow('configEdit', { name: 'pluginDetail', pluginId: intent.pluginId });
+            }
+            return;
         }
-        return route;
-    }
-    #normalizeCurrentRoute() {
-        const route = this.#router.snapshot.current.route;
-        const normalized = this.#normalizeRoute(route);
-        if (normalized !== route)
-            this.#router.replace(normalized);
+        const kind = intent.kind === 'catalogSourcesRecovery' ? 'sourceRecovery' : 'sourceEdit';
+        if (active?.kind === 'sourceRecovery'
+            && (intent.kind === 'catalogSourcesRecovery'
+                || intent.kind === 'catalogGeneration'
+                || intent.kind === 'sourceMutation'))
+            return;
+        if (active?.kind === kind)
+            return;
+        this.#router.beginFlow(kind, active ? this.#router.snapshot.current.route
+            : intent.kind === 'sourceMutation' && intent.action !== 'remove'
+                ? { name: 'sourceDetail', sourceId: intent.sourceId }
+                : intent.kind === 'catalogGeneration'
+                    ? { name: 'sourceDetail', sourceId: intent.sourceId }
+                    : { name: 'sourceList' });
+    }
+    #stableResultRoute(intent, result) {
+        const active = this.#router.activeFlow();
+        if (active?.parentFlowId)
+            return this.#normalizeRoute(active.returnTarget);
+        if (active && (intent.kind === 'portableInstall'
+            || intent.kind === 'configSave' || intent.kind === 'configReset')) {
+            return this.#normalizeRoute(active.returnTarget);
+        }
+        if (intent.kind === 'pluginWrite') {
+            if (intent.originIssue && result.state === 'succeeded')
+                return { name: 'issueList' };
+            return this.#normalizeRoute({ name: 'pluginDetail', pluginId: intent.pluginId });
+        }
+        if (intent.kind === 'pluginWriteBatch')
+            return { name: 'pluginList', mode: 'installed' };
+        if (intent.kind === 'portableInstall' || intent.kind === 'configSave' || intent.kind === 'configReset') {
+            return this.#normalizeRoute({ name: 'pluginDetail', pluginId: intent.pluginId });
+        }
+        if (intent.kind === 'sourceMutation' && intent.action === 'update') {
+            return this.#normalizeRoute({ name: 'sourceDetail', sourceId: intent.sourceId });
+        }
+        if (intent.kind === 'catalogGeneration') {
+            return this.#normalizeRoute({ name: 'sourceDetail', sourceId: intent.sourceId });
+        }
+        return { name: 'sourceList' };
+    }
+    #showResult(result, intent) {
+        const terminal = { name: 'result', operationId: result.operationId };
+        const target = this.#stableResultRoute(intent, result);
+        this.#resultAnchor = structuredClone(target);
+        this.#cancelReviewPreparation();
+        this.#progress = { messages: [] };
+        this.#progressTargets = [];
+        this.#recoverableInstallPlacementDraft = result.state === 'blocked'
+            && intent.kind === 'pluginWrite' && intent.action === 'install'
+            && this.#installPlacementDraft?.pluginId === intent.pluginId
+            ? structuredClone(this.#installPlacementDraft)
+            : undefined;
+        this.#installPlacementDraft = undefined;
+        this.#recoverablePortableDraft = result.state !== 'succeeded'
+            && intent.kind === 'portableInstall'
+            && this.#portableDraft?.pluginId === intent.pluginId
+            ? structuredClone(this.#portableDraft)
+            : undefined;
+        this.#portableResultSkills = intent.kind === 'portableInstall'
+            ? this.#portableDraft?.candidates
+                .filter((candidate) => candidate.selected)
+                .map((candidate) => candidate.name)
+            : undefined;
+        this.#portableDraft = undefined;
+        this.#batchRetryIntent = intent.kind === 'pluginWriteBatch'
+            && 'summary' in result
+            && result.summary?.batch
+            && (result.summary.batch.retryTargets?.length ?? 0) > 0
+            ? {
+                ...structuredClone(intent),
+                selection: {
+                    kind: 'targets',
+                    targets: structuredClone(result.summary.batch.retryTargets),
+                },
+            }
+            : undefined;
+        if (!this.#router.finishFlow(target, terminal))
+            this.#router.replace(terminal);
     }
     #applyStatus(status) {
         this.#status = structuredClone(status);
+        this.#statusReadAtMs = this.dependencies.now?.() ?? Date.now();
         if (status.catalogGenerations) {
             this.#catalogGenerations.clear();
             for (const source of status.catalogGenerations) {
@@ -421,13 +932,14 @@ export class TuiController {
         this.#normalizeCurrentRoute();
     }
     async load() {
+        this.#assertAcceptingActions();
         this.dependencies.beginCatalogSession?.();
         const generation = ++this.#generation;
         this.#phase = 'loading';
         this.#publish();
         let status;
         try {
-            status = await this.dependencies.loadStatus(this.#abort.signal);
+            status = await this.#trackRead(this.dependencies.loadStatus(this.#abort.signal));
         }
         catch (error) {
             if (this.#disposed || generation !== this.#generation)
@@ -436,6 +948,7 @@ export class TuiController {
             await this.#logErrorSafe(error, code);
             this.#phase = 'error';
             this.#loadError = { code, message: '无法安全读取插件状态。请检查诊断后重试或退出。' };
+            this.#recordStandaloneFailure(code, 'statusReload', error);
             this.#publish();
             return;
         }
@@ -451,6 +964,10 @@ export class TuiController {
         this.#cancelPortableRequest();
         this.#cancelInstallPlacementRequest();
         this.#discardPortableDraftForRoute(route);
+        if ((route.name === 'sourceAdd' || route.name === 'sourceEdit' || route.name === 'sourceSave')
+            && this.#router.activeFlow()?.kind !== 'sourceEdit') {
+            this.#router.beginFlow('sourceEdit', this.#router.snapshot.current.route);
+        }
         this.#router.push(route, context);
         this.#publish();
     }
@@ -458,6 +975,7 @@ export class TuiController {
         return this.#status?.portablePluginIds?.includes(pluginId) ?? false;
     }
     preparePortableInstall(pluginId, navigation = 'push') {
+        this.#assertAcceptingActions();
         if (!this.hasPortableSkills(pluginId)) {
             throw new TuiOperationBlockedError('portableUnsupported', '插件不提供通用 Skills。');
         }
@@ -473,6 +991,7 @@ export class TuiController {
         });
     }
     refreshPortableInstallDraft(pluginId) {
+        this.#assertAcceptingActions();
         const expectedRoute = this.#router.snapshot.current.route;
         return this.#runPortableRequest(`refresh:${pluginId}`, async (signal, token) => {
             const draft = await this.#buildPortableDraft(pluginId, true, signal);
@@ -488,12 +1007,12 @@ export class TuiController {
             : undefined;
         const prepared = await Promise.allSettled(['project', 'user'].map(async (scope) => ({
             scope,
-            evidence: await this.dependencies.captureEvidence({
+            evidence: await this.#trackRead(this.dependencies.captureEvidence({
                 kind: 'portableInstall',
                 pluginId,
                 scope,
                 selectedSkills: [],
-            }, signal),
+            }, signal)),
         })));
         const available = prepared.flatMap((entry) => entry.status === 'fulfilled' && entry.value.evidence.portable ? [entry.value] : []);
         if (available.length === 0) {
@@ -639,8 +1158,91 @@ export class TuiController {
         });
         this.#publish();
     }
+    beginSavedConfigRecovery(pluginId) {
+        this.#assertAcceptingActions();
+        const plugin = this.#viewModel?.plugins.find((entry) => entry.pluginId === pluginId);
+        if (!plugin?.configOnly || plugin.savedConfigScopes.length === 0) {
+            throw new TuiOperationBlockedError('savedConfigUnavailable', '没有可识别的已保存设置。');
+        }
+        this.#router.beginConfigFlow(pluginId);
+        this.#router.push({
+            name: 'configUnavailable',
+            pluginId,
+            storedScopes: plugin.savedConfigScopes,
+            ...(plugin.savedConfigScopes.length === 1
+                ? { layer: { scope: plugin.savedConfigScopes[0] } }
+                : {}),
+            diagnosticCode: 'catalogSourceUnavailable',
+            diagnosticStage: 'read-config',
+        });
+        this.#publish();
+    }
+    beginConfigSourceRecovery(sourceId) {
+        this.#assertAcceptingActions();
+        const route = this.#router.snapshot.current.route;
+        const active = this.#router.activeFlow();
+        if (route.name !== 'configUnavailable'
+            || active?.kind !== 'configEdit'
+            || route.storedScopes !== undefined
+            || sourceIdFromPluginId(route.pluginId) !== sourceId
+            || !this.#viewModel?.sourceTabs.some((source) => source.id === sourceId)) {
+            throw new TuiOperationBlockedError('configSourceRecoveryUnavailable', '来源恢复只能从不可用的设置流程开始。');
+        }
+        const layer = route.layer?.scope ?? route.resumeRoute?.layer.scope ?? 'effective';
+        const returnTarget = route.resumeRoute ?? {
+            name: 'configFields',
+            pluginId: route.pluginId,
+            layer: { scope: layer },
+        };
+        this.#router.beginFlow('sourceRecovery', returnTarget, undefined, route.resumeContext);
+        this.#router.push({ name: 'sourceDetail', sourceId });
+        this.#publish();
+    }
+    async getForceCleanupCandidate(pluginId, platform, scope) {
+        this.#assertAcceptingActions();
+        const intent = {
+            kind: 'pluginWrite', action: 'cleanup', pluginId, platform, scope, force: true,
+        };
+        try {
+            const evidence = await this.#trackRead(this.dependencies.captureEvidence(intent, this.#abort.signal));
+            const candidate = evidence.offlineCleanup;
+            if (candidate?.forceExclusive !== true
+                || candidate.pluginId !== pluginId
+                || candidate.platform !== platform
+                || candidate.scope !== scope
+                || candidate.plan.actions.length === 0)
+                return undefined;
+            return cloneFrozen({ pluginId, platform, scope, actionCount: candidate.plan.actions.length });
+        }
+        catch (error) {
+            await this.#logOperationError(error, issueCode(error), intent);
+            return undefined;
+        }
+    }
+    startForceCleanupReview(candidate) {
+        if (candidate.actionCount <= 0) {
+            throw new TuiOperationBlockedError('forceCleanupPathUnavailable', '没有可验证的精确清理目标。');
+        }
+        return this.startReviewPreparation({
+            kind: 'pluginWrite',
+            action: 'cleanup',
+            pluginId: candidate.pluginId,
+            platform: candidate.platform,
+            scope: candidate.scope,
+            force: true,
+        });
+    }
     configOrigin(pluginId) {
-        return this.#router.configOrigin(pluginId);
+        const origin = this.#router.configOrigin(pluginId);
+        if (origin)
+            return origin;
+        if (this.#router.snapshot.current.route.name === 'result'
+            && this.#resultAnchor
+            && (this.#resultAnchor.name === 'pluginPreview' || this.#resultAnchor.name === 'pluginDetail')
+            && this.#resultAnchor.pluginId === pluginId) {
+            return structuredClone(this.#resultAnchor);
+        }
+        return undefined;
     }
     updatePageContext(context) {
         this.#router.updateContext(context);
@@ -648,6 +1250,7 @@ export class TuiController {
     }
     back() {
         const route = this.#router.snapshot.current.route;
+        const activeFlow = this.#router.activeFlow();
         this.#cancelReviewPreparation();
         this.#cancelPortableRequest();
         this.#cancelInstallPlacementRequest();
@@ -656,6 +1259,14 @@ export class TuiController {
             this.#activeReview = undefined;
         }
         this.#router.back();
+        if (activeFlow
+            && this.#router.snapshot.currentFrameId === activeFlow.originFrameId) {
+            this.#router.abandonFlow(activeFlow.id);
+            if (activeFlow.kind === 'pluginInstall')
+                this.#installPlacementDraft = undefined;
+            if (activeFlow.kind === 'portableInstall')
+                this.#portableDraft = undefined;
+        }
         this.#normalizeCurrentRoute();
         this.#discardPortableDraftForRoute(this.#router.snapshot.current.route);
         this.#publish();
@@ -666,13 +1277,34 @@ export class TuiController {
             this.#activeReview = undefined;
         }
         this.#result = undefined;
-        this.#router.discardSourceFlow(owner, returnRoute);
+        const activeFlow = this.#router.activeFlow();
+        if (activeFlow?.kind === 'sourceEdit') {
+            this.#router.abandonFlow(activeFlow.id);
+            if (JSON.stringify(this.#router.snapshot.current.route) !== JSON.stringify(returnRoute)) {
+                this.#router.replace(returnRoute);
+            }
+        }
+        else {
+            this.#router.discardSourceFlow(owner, returnRoute);
+        }
         this.#normalizeCurrentRoute();
         this.#publish();
     }
     leaveResult(target) {
         if (this.#router.snapshot.current.route.name !== 'result')
             return;
+        if (target?.name === 'home') {
+            this.#router.resetToRoot();
+            this.#portableDraft = undefined;
+            this.#recoverablePortableDraft = undefined;
+            this.#installPlacementDraft = undefined;
+            this.#recoverableInstallPlacementDraft = undefined;
+            this.#result = undefined;
+            this.#resultAnchor = undefined;
+            this.#portableResultSkills = undefined;
+            this.#publish();
+            return;
+        }
         if (this.#result?.operationKind === 'portableInstall'
             && 'pluginId' in this.#result && this.#result.pluginId) {
             const preserveDraft = target?.name === 'portableSkillSelect'
@@ -688,19 +1320,55 @@ export class TuiController {
             this.#publish();
             return;
         }
-        const route = target ?? (this.#result && 'returnRoute' in this.#result
-            ? this.#result.returnRoute
-            : undefined);
         this.#router.back();
-        if (route)
-            this.#router.replace(this.#normalizeRoute(route));
+        if (target)
+            this.#router.replace(this.#normalizeRoute(target));
         else
             this.#normalizeCurrentRoute();
         this.#discardPortableDraftForRoute(this.#router.snapshot.current.route);
         this.#result = undefined;
+        this.#resultAnchor = undefined;
+        this.#portableResultSkills = undefined;
+        this.#recoverableInstallPlacementDraft = undefined;
+        this.#recoverablePortableDraft = undefined;
+        this.#publish();
+    }
+    resumeResultDraft() {
+        const result = this.#result;
+        if (this.#router.snapshot.current.route.name !== 'result' || !result
+            || !('returnRoute' in result) || !result.returnRoute)
+            return;
+        const returnRoute = this.#normalizeRoute(result.returnRoute);
+        this.#router.back();
+        const kind = result.operationKind === 'configSave' || result.operationKind === 'configReset'
+            ? 'configEdit'
+            : result.operationKind === 'portableInstall'
+                ? 'portableInstall'
+                : result.operationKind === 'sourceMutation' || result.operationKind === 'catalogGeneration'
+                    || result.operationKind === 'catalogSourcesRecovery'
+                    ? 'sourceEdit'
+                    : 'pluginMaintenance';
+        this.#router.beginFlow(kind, this.#router.snapshot.current.route);
+        if (result.operationKind === 'pluginWrite') {
+            this.#installPlacementDraft = this.#recoverableInstallPlacementDraft;
+        }
+        if (result.operationKind === 'portableInstall') {
+            this.#portableDraft = this.#recoverablePortableDraft;
+        }
+        this.#router.push(returnRoute);
+        this.#recoverableInstallPlacementDraft = undefined;
+        this.#recoverablePortableDraft = undefined;
+        this.#result = undefined;
+        this.#resultAnchor = undefined;
+        this.#portableResultSkills = undefined;
         this.#publish();
     }
     #discardPortableDraftForRoute(route) {
+        const readOnlyHistoryRoute = route.name === 'operationHistory'
+            || route.name === 'operationDiagnostic'
+            || route.name === 'operationReportPreview';
+        if (readOnlyHistoryRoute && this.#router.activeFlow()?.kind === 'portableInstall')
+            return;
         const portableRoute = route.name === 'portableSkillSelect'
             || route.name === 'portableDependencies'
             || route.name === 'portableAgentMode'
@@ -709,7 +1377,8 @@ export class TuiController {
             || route.name === 'portableBlocker';
         const portableOperationRoute = (route.name === 'reviewPreparing' || route.name === 'review'
             || route.name === 'progress' || route.name === 'result')
-            && (this.#reviewPreparation?.snapshot.intent.kind === 'portableInstall'
+            && (this.#reviewPreparation !== undefined
+                && this.#reviewPreparationIntents.get(this.#reviewPreparation.snapshot.id)?.kind === 'portableInstall'
                 || this.#activeReview?.operationKind === 'portableInstall'
                 || this.#result?.operationKind === 'portableInstall');
         if (!portableRoute && !portableOperationRoute) {
@@ -719,15 +1388,24 @@ export class TuiController {
     }
     resetPortableFlowToPreview(pluginId, target, preserveDraft = false) {
         this.#cancelPortableRequest();
+        if (preserveDraft && !this.#portableDraft) {
+            this.#portableDraft = this.#recoverablePortableDraft;
+        }
         if (!preserveDraft)
             this.#portableDraft = undefined;
+        this.#recoverablePortableDraft = undefined;
         if (this.#activeReview?.operationKind === 'portableInstall') {
             this.#tickets.delete(this.#activeReview.reviewToken);
             this.#activeReview = undefined;
         }
         if (this.#result?.operationKind === 'portableInstall')
             this.#result = undefined;
-        this.#router.resetPortableFlow(pluginId);
+        this.#resultAnchor = undefined;
+        this.#portableResultSkills = undefined;
+        if (this.#router.snapshot.current.route.name === 'result')
+            this.#router.back();
+        else
+            this.#router.resetPortableFlow(pluginId);
         if (target && JSON.stringify(this.#router.snapshot.current.route) !== JSON.stringify(target)) {
             this.#router.beginPortableFlow(pluginId);
             this.#router.push(this.#normalizeRoute(target));
@@ -766,6 +1444,9 @@ export class TuiController {
     }
     beginInstallFlow(pluginId, rootScope, options = {}) {
         this.#cancelInstallPlacementRequest();
+        const active = this.#router.activeFlow();
+        if (active?.kind !== 'pluginInstall')
+            this.#router.beginPluginFlow('pluginInstall', pluginId);
         this.#installPlacementDraft = {
             pluginId,
             rootScope,
@@ -838,6 +1519,7 @@ export class TuiController {
         };
     }
     async prepareInstallDependencyPlacement() {
+        this.#assertAcceptingActions();
         const draft = this.#installPlacementDraft;
         if (!draft)
             throw new TuiOperationBlockedError('installPlacementMissing', '安装位置草稿不存在。');
@@ -859,7 +1541,7 @@ export class TuiController {
                     throw new DOMException('Dependency placement preview was cancelled.', 'AbortError');
                 }
             };
-            const plan = await preview(this.#installPlacementIntent());
+            const plan = await this.#trackRead(preview(this.#installPlacementIntent()));
             throwIfCancelled();
             if (!plan) {
                 draft.state = 'ready';
@@ -925,7 +1607,7 @@ export class TuiController {
     listPlugins(options) {
         const query = options.query?.trim().toLocaleLowerCase('en');
         return cloneFrozen((this.#viewModel?.plugins ?? []).filter((plugin) => (!options.sourceId || plugin.sourceId === options.sourceId)
-            && (options.mode === 'browse' || hasInstalledPlacement(plugin))
+            && (options.mode === 'browse' || hasInstalledPlacement(plugin) || plugin.savedConfigScopes.length > 0)
             && (options.installFilter !== 'uninstalled' || !hasInstalledPlacement(plugin))
             && (!query || `${plugin.displayName}\n${plugin.description}\n${plugin.sourceId}`.toLocaleLowerCase('en').includes(query))));
     }
@@ -1026,6 +1708,10 @@ export class TuiController {
             health: this.#health.get(sourceId),
         });
     }
+    getConfiguredSource(sourceId) {
+        const source = this.#status?.configuredSources?.find((candidate) => candidate.id === sourceId);
+        return source ? cloneFrozen(source) : undefined;
+    }
     getCatalogGeneration(sourceId) {
         const source = this.#catalogGenerations.get(sourceId);
         return source ? cloneFrozen(source) : undefined;
@@ -1035,17 +1721,70 @@ export class TuiController {
         return freshness ? cloneFrozen(freshness) : undefined;
     }
     recheckCatalogSource(sourceId) {
+        this.#assertAcceptingActions();
         return this.#catalogSourcesSession.recheck(sourceId);
     }
+    async recheckAllCatalogSources() {
+        this.#assertAcceptingActions();
+        const sourceIds = [...this.listSources()]
+            .sort((left, right) => Number(Boolean(right.primary)) - Number(Boolean(left.primary)))
+            .map((source) => source.id);
+        let next = 0;
+        const worker = async () => {
+            while (next < sourceIds.length) {
+                const sourceId = sourceIds[next++];
+                if (sourceId)
+                    await this.#catalogSourcesSession.recheck(sourceId);
+            }
+        };
+        await Promise.all(Array.from({ length: Math.min(2, sourceIds.length) }, () => worker()));
+    }
     fullValidateCatalogSource(sourceId) {
+        this.#assertAcceptingActions();
         return this.#catalogSourcesSession.fullValidate(sourceId);
     }
-    setExternalDraftState(state) {
-        this.#externalDraft = state;
+    setExternalDraftState(states = []) {
+        const priority = { sourceDraft: 0, batchDraft: 1, configDraft: 2 };
+        this.#externalDrafts = structuredClone(states).sort((left, right) => priority[left.kind] - priority[right.kind] || left.owner.localeCompare(right.owner, 'en'));
+        this.#publish();
+    }
+    beginPluginWriteBatch() {
+        this.#assertAcceptingActions();
+        this.#router.beginBatchFlow();
+        this.#router.push({ name: 'batchSelection' });
+        this.#publish();
+    }
+    startPluginWriteBatchReview(intent) {
+        return this.startReviewPreparation(intent, { name: 'batchPlacement' });
+    }
+    retryFailedPluginWriteBatch() {
+        if (!this.#batchRetryIntent)
+            return undefined;
+        const intent = structuredClone(this.#batchRetryIntent);
+        this.#batchRetryIntent = undefined;
+        return this.startReviewPreparation(intent, { name: 'pluginList', mode: 'installed' });
     }
     catalogActivationBlockReason() {
-        if (this.#externalDraft)
-            return this.#externalDraft;
+        if (this.#externalDrafts[0])
+            return this.#externalDrafts[0].kind;
+        if (this.#portableDraft)
+            return 'portableDraft';
+        if (this.#reviewPreparation)
+            return 'reviewPreparation';
+        if (this.#activeReview)
+            return 'activeReview';
+        if (this.#router.snapshot.current.route.name === 'progress'
+            || this.#inflightOperations.size > 0)
+            return 'writeProgress';
+        return undefined;
+    }
+    catalogSourceRecoveryBlockReason() {
+        const activeFlow = this.#router.activeFlow();
+        const blockingExternalDraft = this.#externalDrafts.find((draft) => !(draft.kind === 'configDraft'
+            && activeFlow?.kind === 'sourceRecovery'
+            && activeFlow.parentFlowId !== undefined));
+        if (blockingExternalDraft)
+            return blockingExternalDraft.kind;
         if (this.#portableDraft)
             return 'portableDraft';
         if (this.#reviewPreparation)
@@ -1061,6 +1800,7 @@ export class TuiController {
         return this.#status?.payload.catalog.sources.find((source) => source.id === sourceId)?.catalogVersion;
     }
     async reloadCatalog(options) {
+        this.#assertAcceptingActions();
         if (this.catalogActivationBlockReason())
             return false;
         this.dependencies.beginCatalogSession?.();
@@ -1068,7 +1808,7 @@ export class TuiController {
         this.#phase = 'loading';
         this.#publish();
         try {
-            const status = await this.dependencies.loadStatus(this.#abort.signal);
+            const status = await this.#trackRead(this.dependencies.loadStatus(this.#abort.signal));
             if (this.#disposed || generation !== this.#generation)
                 return false;
             this.#applyStatus(status);
@@ -1090,39 +1830,45 @@ export class TuiController {
         }
     }
     async inspectSourceRemoval(sourceId) {
+        this.#assertAcceptingActions();
         if (!this.dependencies.inspectSourceRemoval) {
             throw new TuiOperationBlockedError('stateInventoryFailed', '来源引用清单不可用。');
         }
-        return cloneFrozen(await this.dependencies.inspectSourceRemoval(sourceId, this.#abort.signal));
+        return cloneFrozen(await this.#trackRead(this.dependencies.inspectSourceRemoval(sourceId, this.#abort.signal)));
     }
     async getConfigGroups(pluginId, layer) {
+        this.#assertAcceptingActions();
         if (!this.dependencies.getConfigGroups) {
             throw new TuiOperationBlockedError('configUnavailable', '设置读取入口不可用。');
         }
-        return cloneFrozen(await this.dependencies.getConfigGroups(pluginId, structuredClone(layer), this.#abort.signal));
+        return cloneFrozen(await this.#trackRead(this.dependencies.getConfigGroups(pluginId, structuredClone(layer), this.#abort.signal)));
     }
     async getConfigPage(pluginId, layer, signal) {
+        this.#assertAcceptingActions();
         if (!this.dependencies.getConfigPage) {
             throw new TuiOperationBlockedError('configUnavailable', '设置读取入口不可用。');
         }
         const combined = signal
             ? AbortSignal.any([this.#abort.signal, signal])
             : this.#abort.signal;
-        return cloneFrozen(await this.dependencies.getConfigPage(pluginId, structuredClone(layer), combined));
+        return cloneFrozen(await this.#trackRead(this.dependencies.getConfigPage(pluginId, structuredClone(layer), combined)));
     }
     async getConfigResetAvailability(pluginId, layer) {
+        this.#assertAcceptingActions();
         if (!this.dependencies.getConfigResetAvailability) {
             throw new TuiOperationBlockedError('configResetVerificationUnavailable', '设置层可信读取入口不可用。');
         }
-        return cloneFrozen(await this.dependencies.getConfigResetAvailability(pluginId, structuredClone(layer), this.#abort.signal));
+        return cloneFrozen(await this.#trackRead(this.dependencies.getConfigResetAvailability(pluginId, structuredClone(layer), this.#abort.signal)));
     }
     listUserIssues() {
         return cloneFrozen(this.#viewModel?.issues ?? []);
     }
     async buildOperationReview(intent, returnRoute) {
+        this.#assertAcceptingActions();
+        intent = normalizeOperationIntent(intent);
         try {
             this.#validateReviewIntent(intent);
-            const evidence = await this.#prepareReviewEvidence(intent, this.#abort.signal);
+            const evidence = await this.#trackRead(this.#prepareReviewEvidence(intent, this.#abort.signal));
             return this.#storeOperationReview(intent, evidence, 'push', returnRoute);
         }
         catch (error) {
@@ -1134,12 +1880,15 @@ export class TuiController {
         }
     }
     startReviewPreparation(intent, returnRoute) {
+        this.#assertAcceptingActions();
+        intent = normalizeOperationIntent(intent);
         if (intent.kind === 'catalogGeneration' && !intent.sourceMutation) {
-            const blockReason = this.catalogActivationBlockReason();
+            const blockReason = this.catalogSourceRecoveryBlockReason();
             if (blockReason) {
                 throw new TuiOperationBlockedError('catalogActivationBlocked', `Catalog Active 切换已阻止：${blockReason}。请先完成或放弃当前草稿或操作。`);
             }
         }
+        this.#ensureOperationFlow(intent);
         const inheritedReturnRoute = this.#reviewPreparation?.returnRoute;
         const current = this.#router.snapshot.current.route;
         const navigation = current.name === 'result' || current.name === 'reviewPreparing'
@@ -1151,7 +1900,9 @@ export class TuiController {
                 ? this.#result.returnRoute
                 : current);
         const normalizedReturnRoute = this.#normalizeRoute(resolvedReturnRoute);
-        const key = JSON.stringify(stableValue({ intent, returnRoute: normalizedReturnRoute }));
+        const key = crypto.createHash('sha256')
+            .update(JSON.stringify(stableValue({ intent, returnRoute: normalizedReturnRoute })))
+            .digest('hex');
         if (this.#reviewPreparation?.snapshot.state === 'running'
             && this.#reviewPreparation.key === key) {
             return cloneFrozen(this.#reviewPreparation.snapshot);
@@ -1162,14 +1913,16 @@ export class TuiController {
         const token = ++this.#reviewPreparationToken;
         const snapshot = {
             id,
-            intent: structuredClone(intent),
+            operationKind: intent.kind,
+            subject: this.#reviewPreparationLabel(intent),
             state: 'running',
             stages: this.dependencies.prepareReviewEvidence ? [] : [
                 { id: 'validate', label: '验证当前状态', state: 'running' },
                 { id: 'evidence', label: '准备确认信息', state: 'pending' },
             ],
-            currentLabel: this.#reviewPreparationLabel(intent),
+            ...(this.dependencies.prepareReviewEvidence ? {} : { currentStage: 'validate' }),
         };
+        this.#reviewPreparationIntents.set(id, structuredClone(intent));
         this.#reviewPreparation = {
             snapshot,
             key,
@@ -1187,9 +1940,25 @@ export class TuiController {
         const preparation = this.#reviewPreparation;
         if (!preparation || preparation.snapshot.state !== 'failed')
             return undefined;
-        return this.startReviewPreparation(preparation.snapshot.intent, preparation.returnRoute);
+        const intent = this.#reviewPreparationIntents.get(preparation.snapshot.id);
+        if (!intent)
+            return undefined;
+        return this.startReviewPreparation(structuredClone(intent), preparation.returnRoute);
     }
     #validateReviewIntent(intent) {
+        if (intent.kind === 'pluginWriteBatch') {
+            if (intent.selection.kind === 'currentProjectIntentRoots'
+                && (intent.action !== 'sync' || intent.scope !== 'project')) {
+                throw new TuiOperationBlockedError('batchSelectionInvalid', '当前项目全部同步只支持 project scope sync。');
+            }
+            if (intent.selection.kind === 'selected') {
+                const canonical = canonicalPluginIds(intent.selection.pluginIds);
+                if (canonical.length === 0) {
+                    throw new TuiOperationBlockedError('batchSelectionInvalid', '批量插件选择无效。');
+                }
+                canonical.forEach(sourceIdFromPluginId);
+            }
+        }
         const primaryGeneration = intent.kind === 'sourceMutation' && intent.action === 'setPrimary'
             ? this.#catalogGenerations.get(intent.sourceId) : undefined;
         if (primaryGeneration && !primaryGeneration.active && primaryGeneration.state !== 'ready') {
@@ -1199,6 +1968,11 @@ export class TuiController {
     #reviewPreparationLabel(intent) {
         if (intent.kind === 'catalogSourcesRecovery')
             return 'Catalog 来源配置';
+        if (intent.kind === 'pluginWriteBatch') {
+            return intent.selection.kind === 'selected'
+                ? `${intent.selection.pluginIds.length} 个插件`
+                : '当前项目全部插件';
+        }
         if ('pluginId' in intent) {
             return this.#viewModel?.plugins.find((plugin) => plugin.pluginId === intent.pluginId)?.displayName
                 ?? pluginNameFromId(intent.pluginId);
@@ -1217,13 +1991,17 @@ export class TuiController {
         const preparation = this.#reviewPreparation;
         if (!preparation || preparation.token !== token)
             return;
-        const intent = structuredClone(preparation.snapshot.intent);
+        const storedIntent = this.#reviewPreparationIntents.get(preparation.snapshot.id);
+        if (!storedIntent)
+            return;
+        const intent = structuredClone(storedIntent);
         const signal = AbortSignal.any([this.#abort.signal, preparation.abort.signal]);
         try {
             this.#validateReviewIntent(intent);
-            const evidence = await this.#prepareReviewEvidence(intent, signal, (stage) => {
+            const evidence = await this.#trackRead(this.#prepareReviewEvidence(intent, signal, (stage) => {
                 if (!this.#reviewPreparationIsCurrent(token))
                     return;
+                preparation.snapshot.currentStage = stage;
                 const existing = preparation.snapshot.stages.find((entry) => entry.id === stage);
                 preparation.snapshot.stages = preparation.snapshot.stages.map((entry) => entry.state === 'running' ? { ...entry, state: 'completed' } : entry);
                 if (existing) {
@@ -1237,12 +2015,13 @@ export class TuiController {
                     });
                 }
                 this.#publish();
-            });
+            }));
             if (!this.#reviewPreparationIsCurrent(token))
                 return;
             preparation.snapshot.stages = preparation.snapshot.stages.map((stage) => stage.state === 'running' ? { ...stage, state: 'completed' } : stage);
             this.#publish();
             const returnRoute = structuredClone(preparation.returnRoute);
+            this.#reviewPreparationIntents.delete(preparation.snapshot.id);
             this.#reviewPreparation = undefined;
             this.#storeOperationReview(intent, evidence, 'replace', returnRoute);
         }
@@ -1269,7 +2048,10 @@ export class TuiController {
                 : code === 'catalogGenerationActiveComparisonUnavailable'
                     ? '损坏的当前 Active 无法提供可信版本，不能安全比较候选。当前 Active 保持不变。请明确编辑来源，或移除后重新添加。'
                     : code === 'catalogReplaceDamagedRequired'
-                        ? '无法重新取得或精确匹配旧 Active。当前 Active 保持不变。请返回并选择“使用当前候选替换损坏的 Active”。'
+                        ? intent.kind === 'catalogGeneration'
+                            && this.#catalogFreshness.get(intent.sourceId)?.state === 'incompatible'
+                            ? '无法重新取得或精确匹配旧 Active，且当前候选与此 AW 不兼容。当前 Active 保持不变。请升级 AW 或修改来源。'
+                            : '无法重新取得或精确匹配旧 Active。当前 Active 保持不变。请返回并选择“使用当前候选替换损坏的 Active”。'
                         : code === 'catalogVersionConflict'
                             ? '候选 Catalog 与当前 Active 版本相同，但内容摘要不同。普通更新已阻止。'
                             : code === 'catalogRollbackDetected'
@@ -1277,6 +2059,34 @@ export class TuiController {
                                 : code === 'catalogGenerationUnavailable'
                                     ? '本次加载时 Catalog 来源不可用。请刷新来源并重新加载后重试。'
                                     : '无法准备确认信息。请返回检查选择，或重试。';
+            const preparationRecordId = `${this.#sessionEpoch}:${active.snapshot.id}`;
+            const preparationDiagnostic = projectThrownOperationDiagnostic({
+                error,
+                id: `${preparationRecordId}:failure`,
+                stage: active.snapshot.currentStage ?? 'reviewPreparation',
+                fallbackCode: code,
+                sensitiveValues: collectOperationSensitiveValues(intent),
+            });
+            this.#operationHistory.record({
+                summary: {
+                    recordId: preparationRecordId,
+                    epoch: this.#sessionEpoch,
+                    operationId: active.snapshot.id,
+                    createdAtMs: this.dependencies.now?.() ?? Date.now(),
+                    state: 'blocked',
+                    code: preparationDiagnostic.code,
+                    message: active.snapshot.message,
+                    operationKind: intent.kind,
+                    ...('pluginId' in intent ? { pluginId: intent.pluginId } : {}),
+                    diagnosticCount: 1,
+                    effects: {
+                        configCommit: 'notApplicable', awWrite: 'notStarted',
+                        preApplyExternalEffect: 'notApplicable', finalVerification: 'notStarted',
+                    },
+                },
+                diagnostics: [preparationDiagnostic],
+                targets: [],
+            }, { sensitiveValues: collectOperationSensitiveValues(intent) });
             this.#publish();
             await this.#logOperationError(error, code, intent);
         }
@@ -1300,6 +2110,7 @@ export class TuiController {
             return;
         this.#reviewPreparationToken += 1;
         this.#reviewPreparation.abort.abort();
+        this.#reviewPreparationIntents.delete(this.#reviewPreparation.snapshot.id);
         this.#reviewPreparation = undefined;
     }
     async #logOperationError(error, code, intent) {
@@ -1322,6 +2133,9 @@ export class TuiController {
         }
     }
     #storeOperationReview(intent, evidence, navigation = 'push', returnRoute = this.#router.snapshot.current.route) {
+        this.#ensureOperationFlow(intent);
+        if (intent.kind === 'pluginWriteBatch')
+            assertPluginWriteBatchEvidence(evidence);
         if (this.#router.snapshot.current.route.name === 'result')
             navigation = 'replace';
         const projection = buildOperationReviewProjection({
@@ -1338,7 +2152,10 @@ export class TuiController {
         const expiresAt = now
             + (this.dependencies.reviewTtlMs ?? 2 * 60_000);
         const pluginId = 'pluginId' in intent ? intent.pluginId
-            : 'sourceId' in intent ? intent.sourceId : 'Catalog 来源配置';
+            : 'sourceId' in intent ? intent.sourceId
+                : intent.kind === 'pluginWriteBatch'
+                    ? `${evidence.requestedPluginIds.length} 个插件`
+                    : 'Catalog 来源配置';
         if ('pluginId' in intent)
             sourceIdFromPluginId(intent.pluginId);
         const pluginVersion = 'pluginId' in intent
@@ -1354,6 +2171,7 @@ export class TuiController {
                 : intent.kind === 'catalogGeneration' && intent.sourceMutation
                     ? { sourceAction: intent.sourceMutation.action } : {}),
             ...(intent.kind === 'pluginWrite' ? { pluginAction: intent.action } : {}),
+            ...(intent.kind === 'pluginWriteBatch' ? { pluginAction: intent.action } : {}),
             ...(intent.kind === 'pluginWrite' && intent.originIssue
                 ? { originIssue: intent.originIssue }
                 : {}),
@@ -1366,6 +2184,14 @@ export class TuiController {
                 ...('pluginId' in intent ? { sourceLabel: sourceIdFromPluginId(intent.pluginId) } : {}),
                 ...(pluginVersion ? { version: pluginVersion } : {}),
             },
+            ...(intent.kind === 'pluginWriteBatch' ? {
+                batch: {
+                    requestedPluginIds: [...evidence.requestedPluginIds],
+                    groupCount: evidence.groups.length,
+                    executableGroupCount: evidence.groups
+                        .filter((group) => group.executable).length,
+                },
+            } : {}),
             ...(evidence.source && 'catalogVersion' in evidence.source
                 && typeof evidence.source.catalogVersion === 'string'
                 && evidence.source.snapshotDigest
@@ -1389,6 +2215,14 @@ export class TuiController {
         return cloneFrozen(review);
     }
     executeOperation(reviewToken) {
+        if (this.#retiring || this.#disposed) {
+            return Promise.resolve(cloneFrozen({
+                state: 'blocked',
+                operationId: this.#tickets.get(reviewToken)?.review.operationId ?? 'unknown',
+                code: 'sessionRetiring',
+                message: '会话正在结束，未启动新操作。',
+            }));
+        }
         const inflight = this.#inflightOperations.get(reviewToken);
         if (inflight)
             return inflight.promise;
@@ -1409,6 +2243,7 @@ export class TuiController {
         const promise = this.#executeOperationTicket(ticket, operationId).finally(() => {
             if (this.#inflightOperations.get(reviewToken)?.promise === promise) {
                 this.#inflightOperations.delete(reviewToken);
+                this.#publish();
             }
         });
         this.#inflightOperations.set(reviewToken, { operationId, promise });
@@ -1418,8 +2253,10 @@ export class TuiController {
         let generation = this.#generation;
         const startedAtMs = this.dependencies.now?.() ?? Date.now();
         this.#progressFeed?.clearCurrent?.();
-        const dependencyPlan = ticket.evidence.dependencyPlan;
-        this.#progressTargets = dependencyPlan?.targets.map((target) => ({
+        const dependencyTargets = ticket.intent.kind === 'pluginWriteBatch'
+            ? ticket.evidence.groups.flatMap((group) => group.preview.dependencyPlan?.targets ?? [])
+            : ticket.evidence.dependencyPlan?.targets ?? [];
+        this.#progressTargets = dependencyTargets.map((target) => ({
             pluginId: target.pluginId,
             platform: target.platform,
             scope: target.resolvedScope,
@@ -1428,21 +2265,23 @@ export class TuiController {
                 : target.depth === 1 ? 'direct' : 'transitive',
             requiredBy: target.requiredBy,
             state: target.action === 'keep' ? 'kept' : 'pending',
-        })) ?? [];
+        }));
         this.#progress = {
             messages: [],
             startedAtMs,
             elapsedMs: 0,
             current: {
-                target: 'pluginId' in ticket.intent ? ticket.intent.pluginId
-                    : 'sourceId' in ticket.intent ? ticket.intent.sourceId : 'Catalog 来源配置',
+                target: ticket.intent.kind === 'pluginWriteBatch'
+                    ? `${ticket.evidence.requestedPluginIds.length} 个插件`
+                    : 'pluginId' in ticket.intent ? ticket.intent.pluginId
+                        : 'sourceId' in ticket.intent ? ticket.intent.sourceId : 'Catalog 来源配置',
                 phase: '验证当前状态',
             },
         };
         this.#router.replace({ name: 'progress', operationId });
         this.#publish();
         try {
-            if (ticket.intent.kind !== 'pluginWrite') {
+            if (ticket.intent.kind !== 'pluginWrite' && ticket.intent.kind !== 'pluginWriteBatch') {
                 await this.dependencies.validateIntent?.(structuredClone(ticket.intent), this.#abort.signal);
             }
         }
@@ -1473,7 +2312,8 @@ export class TuiController {
         }
         if (!this.#operationIsCurrent(generation))
             return this.#detachedBlocked(operationId, ticket.intent);
-        if (ticket.intent.kind !== 'pluginWrite' && ticket.intent.kind !== 'catalogGeneration') {
+        if (ticket.intent.kind !== 'pluginWrite' && ticket.intent.kind !== 'pluginWriteBatch'
+            && ticket.intent.kind !== 'catalogGeneration') {
             let current;
             try {
                 current = await this.dependencies.captureEvidence(structuredClone(ticket.intent), this.#abort.signal);
@@ -1501,6 +2341,11 @@ export class TuiController {
             const execution = ticket.intent.kind === 'catalogGeneration'
                 ? await this.dependencies.executeIntent(structuredClone(ticket.intent), structuredClone(ticket.evidence), this.#abort.signal)
                 : await this.dependencies.executeIntent(structuredClone(ticket.intent), structuredClone(ticket.evidence));
+            const executionProjection = projectExecutionDiagnostics(execution, `${this.#sessionEpoch}:${operationId}`, collectOperationSensitiveValues(ticket.intent), ticket.intent.kind);
+            this.#operationDiagnostics.set(operationId, {
+                ...executionProjection,
+                sensitiveValues: collectOperationSensitiveValues(ticket.intent),
+            });
             if (ticket.intent.kind === 'sourceMutation' && ticket.intent.action === 'update') {
                 const confirmedAutoCheck = catalogSourceAutoCheckOnlyValue(ticket.intent.update);
                 if (confirmedAutoCheck !== undefined) {
@@ -1541,8 +2386,49 @@ export class TuiController {
                 await this.#logErrorSafe(error, verificationCode, {
                     privateConfigOperation: true,
                 });
+                const existingProjection = this.#operationDiagnostics.get(operationId);
+                existingProjection.diagnostics.push(projectThrownOperationDiagnostic({
+                    error,
+                    id: `${this.#sessionEpoch}:${operationId}:status-reload`,
+                    stage: 'statusReload',
+                    fallbackCode: verificationCode,
+                }));
+                existingProjection.effects.finalVerification = 'failed';
                 if (!this.#operationIsCurrent(generation))
                     return this.#detachedBlocked(operationId, ticket.intent);
+                const configCommitted = typeof execution === 'object'
+                    && execution !== null
+                    && execution.configWrite === 'succeeded';
+                if ((ticket.intent.kind === 'configSave' || ticket.intent.kind === 'configReset')
+                    && configCommitted) {
+                    const baseSummary = operationResultSummary(ticket.intent, execution);
+                    const elapsedMs = Math.max(0, (this.dependencies.now?.() ?? Date.now()) - startedAtMs);
+                    const summary = {
+                        ...baseSummary,
+                        code: 'operationPartial',
+                        message: '设置已保存，但最终状态无法刷新。',
+                        elapsedMs,
+                        messages: [
+                            ...this.#progress.messages,
+                            ...(baseSummary.messages ?? []),
+                            '状态刷新失败。配置写入已经提交；请稍后刷新状态。',
+                        ].slice(-8).map((message) => sanitizeDiagnosticText(message, [], collectOperationSensitiveValues(ticket.intent))),
+                    };
+                    this.#progress = { ...this.#progress, elapsedMs };
+                    const result = {
+                        state: 'partial',
+                        operationId,
+                        summary,
+                        operationKind: ticket.intent.kind,
+                        pluginId: ticket.intent.pluginId,
+                        returnRoute: structuredClone(this.#normalizeRoute(ticket.returnRoute)),
+                    };
+                    this.#result = structuredClone(result);
+                    this.#activeReview = undefined;
+                    this.#showResult(result, ticket.intent);
+                    this.#publish();
+                    return cloneFrozen(result);
+                }
                 return this.#setBlocked(operationId, verificationCode, {
                     intent: ticket.intent,
                     navigation: 'result',
@@ -1555,11 +2441,16 @@ export class TuiController {
             if (!this.#operationIsCurrent(generation))
                 return this.#detachedBlocked(operationId, ticket.intent);
             this.#applyStatus(refreshed);
+            const verifiedProjection = this.#operationDiagnostics.get(operationId);
+            if (verifiedProjection && verifiedProjection.effects.finalVerification !== 'failed') {
+                verifiedProjection.effects.finalVerification = 'completed';
+            }
             if (ticket.intent.kind === 'catalogSourcesRecovery') {
                 this.#phase = 'ready';
                 this.#loadError = undefined;
             }
             const pluginSummary = ticket.intent.kind === 'pluginWrite'
+                || ticket.intent.kind === 'pluginWriteBatch'
                 ? operationResultSummary(ticket.intent, execution)
                 : undefined;
             const hasFailedDependencyTarget = pluginSummary?.targets?.some((target) => target.relation !== undefined && target.relation !== 'requested'
@@ -1570,6 +2461,18 @@ export class TuiController {
             const dependencyFailure = pluginSummary?.code === 'operationFailed'
                 && Boolean(hasFailedDependencyTarget);
             if (pluginSummary?.code === 'operationFailed') {
+                const projected = this.#operationDiagnostics.get(operationId);
+                if (projected) {
+                    projected.targets = (pluginSummary.targets ?? []).map((target) => ({
+                        ...target,
+                        diagnosticIds: projected.diagnostics.filter((diagnostic) => diagnostic.target
+                            && diagnostic.target.platform === target.platform
+                            && diagnostic.target.scope === target.scope
+                            && (diagnostic.target.pluginId === undefined || diagnostic.target.pluginId === target.pluginId))
+                            .map((diagnostic) => diagnostic.id),
+                        effects: projected.targetEffects?.get(`${target.pluginId ?? ''}\0${target.platform}\0${target.scope}`),
+                    }));
+                }
                 const unsuccessfulTargets = pluginSummary.targets?.filter((target) => target.state === 'failed' || target.state === 'skipped') ?? [];
                 const managerFailureCode = unsuccessfulTargets.map((target) => target.errorCode).find((code) => code === 'codexSystemCliUnsupported'
                     || code === 'managedCodexAuthorizationRequired'
@@ -1588,8 +2491,10 @@ export class TuiController {
                     intent: ticket.intent,
                     navigation: 'result',
                     returnRoute: ticket.returnRoute,
-                    ...(dependencyFailure || dependencyStillRequired ? { summary: pluginSummary } : {}),
-                    ...(!dependencyFailure && !dependencyStillRequired ? { writeMayHaveCompleted: true } : {}),
+                    ...(ticket.intent.kind === 'pluginWriteBatch' || dependencyFailure || dependencyStillRequired
+                        ? { summary: pluginSummary } : {}),
+                    ...(ticket.intent.kind !== 'pluginWriteBatch'
+                        && !dependencyFailure && !dependencyStillRequired && ['started', 'partial', 'completed', 'failed', 'unknown'].includes(this.#operationDiagnostics.get(operationId)?.effects.awWrite ?? 'unknown') ? { writeMayHaveCompleted: true } : {}),
                 });
             }
             const originIssue = ticket.intent.kind === 'pluginWrite' ? ticket.intent.originIssue : undefined;
@@ -1620,7 +2525,8 @@ export class TuiController {
             const summary = {
                 ...baseSummary,
                 elapsedMs: Math.max(0, (this.dependencies.now?.() ?? Date.now()) - startedAtMs),
-                messages: [...this.#progress.messages, ...(baseSummary.messages ?? [])].slice(-8),
+                messages: [...this.#progress.messages, ...(baseSummary.messages ?? [])].slice(-8)
+                    .map((message) => sanitizeDiagnosticText(message, [], collectOperationSensitiveValues(ticket.intent))),
             };
             this.#progress = { ...this.#progress, elapsedMs: summary.elapsedMs };
             if (summary.code === 'operationFailed') {
@@ -1635,7 +2541,7 @@ export class TuiController {
                     };
                     this.#result = structuredClone(result);
                     this.#activeReview = undefined;
-                    this.#router.replace({ name: 'result', operationId });
+                    this.#showResult(result, ticket.intent);
                     this.#publish();
                     return cloneFrozen(result);
                 }
@@ -1666,6 +2572,7 @@ export class TuiController {
             };
             if ((ticket.intent.kind === 'configSave' || ticket.intent.kind === 'configReset')
                 && this.#portableRepreparePluginId === ticket.intent.pluginId) {
+                this.#operationDiagnostics.delete(operationId);
                 this.#portableRepreparePluginId = undefined;
                 this.#activeReview = undefined;
                 this.#result = undefined;
@@ -1674,7 +2581,7 @@ export class TuiController {
             }
             this.#result = result;
             this.#activeReview = undefined;
-            this.#router.replace({ name: 'result', operationId });
+            this.#showResult(result, ticket.intent);
             this.#publish();
             return cloneFrozen(result);
         }
@@ -1682,44 +2589,106 @@ export class TuiController {
             if (!this.#operationIsCurrent(generation))
                 return this.#detachedBlocked(operationId, ticket.intent);
             const code = issueCode(error);
+            const metadata = readSafeOperationError(error);
+            const preApply = metadata?.stage === 'preApply';
+            const configWrite = error && typeof error === 'object' && 'configWrite' in error
+                ? error.configWrite : undefined;
+            this.#captureThrownProjection(operationId, error, code, 'execute', ticket.intent, {
+                configCommit: ticket.intent.kind === 'configSave' || ticket.intent.kind === 'configReset'
+                    ? configWrite === 'succeeded' ? 'completed'
+                        : configWrite === 'failed' ? 'failed' : 'notStarted' : 'notApplicable',
+                awWrite: preApply ? 'notStarted' : 'unknown',
+                preApplyExternalEffect: preApply ? 'possible' : 'notApplicable',
+                finalVerification: 'notStarted',
+            });
             await this.#logOperationError(error, code, ticket.intent);
             if (!this.#operationIsCurrent(generation))
                 return this.#detachedBlocked(operationId, ticket.intent);
             if (code === 'operationReviewStale' || code === 'catalogGenerationReviewStale') {
+                this.#operationDiagnostics.delete(operationId);
                 return this.#rebuildStaleReview(ticket, operationId, undefined, generation);
             }
             generation = ++this.#generation;
+            let finalVerification = 'completed';
             try {
                 const refreshed = await this.dependencies.loadStatus(this.#abort.signal);
                 if (!this.#operationIsCurrent(generation))
                     return this.#detachedBlocked(operationId, ticket.intent);
                 this.#applyStatus(refreshed);
+                const projection = this.#operationDiagnostics.get(operationId);
+                if (projection)
+                    projection.effects.finalVerification = 'completed';
                 if (ticket.intent.kind === 'catalogSourcesRecovery'
                     && code === 'catalogSourcesConfigRecoveryStale') {
                     this.#phase = 'ready';
                     this.#loadError = undefined;
-                    this.#activeReview = undefined;
-                    this.#result = undefined;
-                    this.#router.replace({ name: 'home' });
-                    this.#publish();
-                    return cloneFrozen({
-                        state: 'blocked',
-                        operationId,
-                        code,
-                        message: '来源配置已变化，已重新加载当前状态。',
-                        operationKind: ticket.intent.kind,
+                    return this.#setBlocked(operationId, code, {
+                        intent: ticket.intent,
+                        navigation: 'result',
+                        returnRoute: ticket.returnRoute,
+                        writeMayHaveCompleted: false,
                     });
                 }
             }
             catch (reloadError) {
                 if (!this.#operationIsCurrent(generation))
                     return this.#detachedBlocked(operationId, ticket.intent);
+                finalVerification = 'failed';
+                const projection = this.#operationDiagnostics.get(operationId);
+                if (projection)
+                    projection.effects.finalVerification = 'failed';
                 await this.#logErrorSafe(reloadError, 'tuiStateReloadFailed', {
                     privateConfigOperation: true,
                 });
+                if (ticket.intent.kind === 'catalogSourcesRecovery'
+                    && code === 'catalogSourcesConfigRecoveryStale') {
+                    this.#phase = 'error';
+                    this.#loadError = {
+                        code: issueCode(reloadError),
+                        message: '无法安全读取插件状态。请检查诊断后重试或退出。',
+                    };
+                }
             }
             if (!this.#operationIsCurrent(generation))
                 return this.#detachedBlocked(operationId, ticket.intent);
+            if ((ticket.intent.kind === 'configSave' || ticket.intent.kind === 'configReset')
+                && configWrite === 'succeeded') {
+                const elapsedMs = Math.max(0, (this.dependencies.now?.() ?? Date.now()) - startedAtMs);
+                const summary = {
+                    code: 'operationPartial',
+                    message: ticket.intent.kind === 'configReset'
+                        ? '设置层重置已提交，但后续步骤未完成。'
+                        : finalVerification === 'failed'
+                            ? ticket.intent.apply
+                                ? '设置已保存，但后续应用或状态复核失败。'
+                                : '设置已保存，但状态复核失败。'
+                            : ticket.intent.apply
+                                ? '设置已保存，但后续应用失败。'
+                                : '设置已保存，但后续步骤未完成。',
+                    pluginId: ticket.intent.pluginId,
+                    configScope: ticket.intent.scope,
+                    ...(ticket.intent.kind === 'configSave' && ticket.intent.apply
+                        ? { configApplyRetryAvailable: true } : {}),
+                    elapsedMs,
+                    messages: [ticket.intent.kind === 'configReset'
+                            ? '设置层重置已经提交；失败的后续步骤没有恢复旧设置。'
+                            : '配置写入已经提交；失败的后续步骤没有回滚设置。'],
+                };
+                this.#progress = { ...this.#progress, elapsedMs };
+                const result = {
+                    state: 'partial',
+                    operationId,
+                    summary,
+                    operationKind: ticket.intent.kind,
+                    pluginId: ticket.intent.pluginId,
+                    returnRoute: structuredClone(this.#normalizeRoute(ticket.returnRoute)),
+                };
+                this.#result = structuredClone(result);
+                this.#activeReview = undefined;
+                this.#showResult(result, ticket.intent);
+                this.#publish();
+                return cloneFrozen(result);
+            }
             return this.#setBlocked(operationId, code, {
                 intent: ticket.intent,
                 navigation: 'result',
@@ -1732,6 +2701,7 @@ export class TuiController {
         return !this.#disposed && !this.#abort.signal.aborted && generation === this.#generation;
     }
     #detachedBlocked(operationId, intent) {
+        this.#operationDiagnostics.delete(operationId);
         return cloneFrozen({
             state: 'blocked',
             operationId,
@@ -1780,7 +2750,7 @@ export class TuiController {
             };
             this.#result = structuredClone(result);
             this.#activeReview = undefined;
-            this.#router.replace({ name: 'result', operationId });
+            this.#showResult(result, ticket.intent);
             this.#publish();
             return cloneFrozen(result);
         }
@@ -1824,6 +2794,9 @@ export class TuiController {
         return cloneFrozen(result);
     }
     #setBlocked(operationId, code, options) {
+        if (!this.#operationDiagnostics.has(operationId)) {
+            this.#captureThrownProjection(operationId, undefined, code, 'execute', options?.intent);
+        }
         const message = code === 'managedCodexAuthorizationRequired'
             ? '操作在插件写入前停止。请在 Review 中确认获取 Codex runtime，或在命令行传入 --allow-managed-codex-install。'
             : code === 'codexSystemCliUnsupported'
@@ -1856,6 +2829,8 @@ export class TuiController {
             this.#router.back();
             this.#normalizeCurrentRoute();
         }
+        else if (options?.intent)
+            this.#showResult(result, options.intent);
         else
             this.#router.replace({ name: 'result', operationId });
         this.#publish();
@@ -1886,7 +2861,7 @@ export class TuiController {
         this.#listeners.clear();
     }
 }
-function operationResultSummary(intent, execution) {
+function operationResultSummaryUnsafe(intent, execution) {
     if (intent.kind === 'catalogSourcesRecovery') {
         const result = execution;
         return {
@@ -1918,14 +2893,14 @@ function operationResultSummary(intent, execution) {
                     : '来源配置已保存，但 Catalog 尚未启用。可在 TUI 中立即重试。'
                 : intent.action === 'repair' ? 'Catalog 已重新下载并修复。'
                     : intent.action === 'replaceDamaged' ? '损坏的 Active Catalog 已由当前候选替换。'
-                        : intent.action === 'recoverState' ? 'Catalog generation state 已恢复，目标来源已启用。'
+                        : intent.action === 'recoverState' ? '目录版本状态已恢复，目标来源已启用。'
                             : updateActivated ? `Catalog 已更新到 ${generation.resolution.catalogVersion}。`
                                 : intent.action === 'update' ? 'Catalog 已验证，Active 未变化。'
                                     : 'Catalog 已验证并启用。',
             messages: result.status === 'partial'
                 ? [result.partialReason === 'primary'
-                        ? `新的 Active 可用；主来源保持不变。错误：${result.errorCode ?? 'catalogSourcePrimaryFailed'}`
-                        : `旧 Active 保持不变。错误：${result.errorCode ?? 'catalogGenerationRefreshFailed'}`]
+                        ? `新的已启用版本可用；主来源保持不变。错误：${result.errorCode ?? 'catalogSourcePrimaryFailed'}`
+                        : `旧的已启用版本保持不变。错误：${result.errorCode ?? 'catalogGenerationRefreshFailed'}`]
                 : updateActivated
                     ? ['已安装插件不会自动升级。', '已重新计算可用的插件升级。']
                     : intent.action === 'update'
@@ -1963,11 +2938,15 @@ function operationResultSummary(intent, execution) {
             },
         };
     }
-    if (intent.kind === 'pluginWrite') {
+    if (intent.kind === 'pluginWrite' || intent.kind === 'pluginWriteBatch') {
         const command = intent.action === 'refreshAndSync' ? 'sync' : intent.action;
         const rawExecution = typeof execution === 'object' && execution !== null
             ? execution
             : {};
+        const requestedPluginIds = intent.kind === 'pluginWriteBatch'
+            ? canonicalPluginIds(execution.requestedPluginIds ?? [])
+            : [intent.pluginId];
+        const fallbackPluginId = requestedPluginIds[0] ?? 'unknown/plugin';
         const normalizedTargetResults = Array.isArray(rawExecution.targetResults)
             ? rawExecution.targetResults.map((candidate) => {
                 if (typeof candidate !== 'object' || candidate === null)
@@ -1984,7 +2963,7 @@ function operationResultSummary(intent, execution) {
                         ...rawTarget,
                         ...(pluginId ? { pluginId } : {}),
                         pluginName: typeof rawTarget.pluginName === 'string'
-                            ? rawTarget.pluginName : pluginNameFromId(pluginId ?? intent.pluginId),
+                            ? rawTarget.pluginName : pluginNameFromId(pluginId ?? fallbackPluginId),
                     },
                     action: typeof entry.action === 'string'
                         ? entry.action : requestedIntentAction(command),
@@ -1995,17 +2974,21 @@ function operationResultSummary(intent, execution) {
             ...rawExecution,
             ...(normalizedTargetResults ? { targetResults: normalizedTargetResults } : {}),
             platforms: Array.isArray(rawExecution.platforms) ? rawExecution.platforms : [],
-            plugins: Array.isArray(rawExecution.plugins) ? rawExecution.plugins : [intent.pluginId],
+            plugins: Array.isArray(rawExecution.plugins) ? rawExecution.plugins : requestedPluginIds,
             warnings: Array.isArray(rawExecution.warnings) ? rawExecution.warnings : [],
         });
         const result = buildOperationResultModel(receipt);
-        const requestedIds = new Set(receipt.requestedPluginIds ?? [intent.pluginId]);
+        const requestedIds = new Set(receipt.requestedPluginIds ?? requestedPluginIds);
+        const retryTargets = intent.kind === 'pluginWriteBatch'
+            ? pluginWriteBatchFailedRequestedTargets(execution)
+            : [];
+        const failedRequestedPluginIds = canonicalPluginIds(retryTargets.map((target) => target.pluginId));
         return {
             code: result.state === 'succeeded' ? 'operationSucceeded'
                 : result.state === 'partial' ? 'operationPartial' : 'operationFailed',
             message: result.state === 'succeeded' ? '操作已完成。'
                 : result.state === 'partial' ? '操作只完成了一部分。' : '操作结果无法确认。',
-            pluginId: intent.pluginId,
+            ...(intent.kind === 'pluginWrite' ? { pluginId: intent.pluginId } : {}),
             action: intent.action,
             changes: result.changes,
             warnings: result.warnings,
@@ -2014,10 +2997,18 @@ function operationResultSummary(intent, execution) {
             messages: [
                 ...result.warnings.map((warning) => `警告：${warning}`),
                 ...result.recoveryActions.map((action) => `恢复：${action}`),
-                ...(intent.recoveryDescription
+                ...(intent.kind === 'pluginWrite' && intent.recoveryDescription
                     ? [intent.recoveryDescription, `后续：${intent.scope === 'user' ? '当前项目' : '所有项目'} sync`]
                     : []),
             ],
+            ...(intent.kind === 'pluginWriteBatch' ? {
+                batch: {
+                    requestedPluginIds,
+                    failedRequestedPluginIds,
+                    retryTargets,
+                    groupCount: execution.groupResults.length,
+                },
+            } : {}),
             targets: result.targetResults.map((entry) => ({
                 pluginId: entry.target.pluginId,
                 platform: entry.target.platform,
@@ -2029,19 +3020,18 @@ function operationResultSummary(intent, execution) {
                 relation: entry.relation === 'requested' ? 'requested'
                     : entry.requiredBy.some((pluginId) => requestedIds.has(pluginId)) ? 'direct' : 'transitive',
                 requiredBy: entry.requiredBy,
-                ...(entry.errorCode === 'dependencyStillRequired'
-                    || entry.errorCode === 'codexSystemCliUnsupported'
-                    || entry.errorCode === 'managedCodexAuthorizationRequired'
-                    || entry.errorCode === 'managedCodexUnavailable'
-                    ? { errorCode: entry.errorCode }
-                    : {}),
+                ...(entry.errorCode ? { errorCode: safeDiagnosticCode(entry.errorCode, 'writeFailed') } : {}),
             })),
         };
     }
     if (intent.kind === 'configSave' || intent.kind === 'configReset') {
-        const rawTargets = typeof execution === 'object' && execution !== null
-            && Array.isArray(execution.targetResults)
-            ? execution.targetResults
+        const rawApply = typeof execution === 'object' && execution !== null
+            && typeof execution.apply === 'object'
+            && execution.apply !== null
+            ? execution.apply
+            : {};
+        const rawTargets = Array.isArray(rawApply.targetResults)
+            ? rawApply.targetResults
             : [];
         const targets = rawTargets.flatMap((entry) => {
             const target = typeof entry.target === 'object' && entry.target !== null
@@ -2049,32 +3039,50 @@ function operationResultSummary(intent, execution) {
                 : entry;
             if ((target.platform !== 'codex' && target.platform !== 'claude')
                 || (target.scope !== 'user' && target.scope !== 'project')
-                || (entry.state !== 'completed' && entry.state !== 'failed'))
+                || (entry.state !== 'completed' && entry.state !== 'failed' && entry.state !== 'skipped'))
                 return [];
             return [{
                     ...(typeof target.pluginId === 'string' ? { pluginId: target.pluginId } : {}),
                     platform: target.platform,
                     scope: target.scope,
-                    state: entry.action === 'skipped' ? 'skipped'
+                    state: entry.state === 'skipped' || entry.action === 'skipped' ? 'skipped'
                         : entry.state === 'failed' ? 'failed'
                             : entry.action === 'keep' ? 'kept'
                                 : entry.state,
+                    ...(typeof entry.errorCode === 'string'
+                        ? { errorCode: safeDiagnosticCode(entry.errorCode, 'configApplyFailed') }
+                        : {}),
                 }];
         });
         const overallState = typeof execution === 'object' && execution !== null
             ? execution.overallState
             : undefined;
-        const applySkippedReason = typeof execution === 'object' && execution !== null
-            ? execution.applySkippedReason
-            : undefined;
-        const invalidConfig = applySkippedReason === 'invalidConfig';
+        const applyState = rawApply.state;
+        const applyReason = rawApply.reason;
+        const invalidConfig = applyState === 'unavailable' && applyReason === 'invalidConfig';
         const resetDisposition = typeof execution === 'object' && execution !== null
             ? execution.resetDisposition
             : undefined;
         const quarantineBasename = typeof execution === 'object' && execution !== null
             ? execution.quarantineBasename
             : undefined;
+        const publicWarnings = typeof execution === 'object' && execution !== null
+            && Array.isArray(execution.warnings)
+            ? execution.warnings.filter((warning) => typeof warning === 'string'
+                && warning.startsWith('projectConfigShareabilityUnverified:'))
+            : [];
+        const otherProjectsMayRequireSync = intent.scope === 'user'
+            && typeof execution === 'object' && execution !== null
+            && execution.otherProjectsMayRequireSync === true;
+        const publicMessages = [
+            ...publicWarnings.map((warning) => `警告：${warning}`),
+            ...(otherProjectsMayRequireSync
+                ? ['提示：其它项目没有被扫描，可能需要在对应项目目录中运行 aw sync。']
+                : []),
+        ];
         const partial = overallState === 'partial'
+            || applyState === 'partial'
+            || applyState === 'unavailable'
             || invalidConfig
             || targets.some((target) => target.state === 'failed' || target.state === 'skipped')
                 && targets.some((target) => target.state === 'completed' || target.state === 'kept');
@@ -2088,9 +3096,10 @@ function operationResultSummary(intent, execution) {
             pluginId: intent.pluginId,
             configScope: intent.scope,
             configApplyRetryAvailable: intent.kind === 'configSave'
-                && intent.apply && !invalidConfig && (failed || partial),
+                && intent.apply && !invalidConfig && (applyState === 'partial' || applyState === 'unavailable'),
+            ...(publicMessages.length > 0 ? { messages: publicMessages } : {}),
             ...(intent.kind === 'configSave'
-                ? { configApplied: invalidConfig ? false : intent.apply }
+                ? { configApplied: applyState === 'succeeded' || applyState === 'partial' }
                 : invalidConfig ? { configApplied: false } : {}),
             ...(invalidConfig ? { configApplySkippedReason: 'invalidConfig' } : {}),
             ...(intent.kind === 'configReset'
@@ -2117,4 +3126,7 @@ function operationResultSummary(intent, execution) {
         ...(sourceWarnings.length > 0 ? { messages: sourceWarnings } : {}),
     };
 }
+function operationResultSummary(intent, execution) {
+    return sanitizeOperationSummary(operationResultSummaryUnsafe(intent, execution), collectOperationSensitiveValues(intent));
+}
 //# sourceMappingURL=controller.js.map