@sanqianx/claude-ai-workbench 0.13.2-rc.21 → 0.13.2-rc.22

package/apps/agent-terminal/app.js

@@ -103,6 +103,23 @@ function embeddedTransport() {
 const client = window.createClaudeWorkbenchClient
   ? window.createClaudeWorkbenchClient({ apiBase, ...embeddedTransport() })
   : null;
+// The dock is a feature-detected add-on: sandboxes and older hosts without
+// the module keep working with dock === null. W3 adds the panel registry the
+// same way - absent module means native-only behavior, never a broken page.
+const panelRegistry = window.createRightDockPanelRegistry
+  ? window.createRightDockPanelRegistry({ document, baseUrl: typeof location !== 'undefined' && location.href ? location.href : null })
+  : null;
+const hostPanelOwner = panelRegistry ? panelRegistry.createOwner({ role: 'embed-host' }) : null;
+const dock = window.createRightWorkspaceDock && client
+  ? window.createRightWorkspaceDock({
+      client, apiBase, document,
+      storage: typeof localStorage !== 'undefined' ? localStorage : null,
+      renderMarkdown, toast,
+      registry: panelRegistry,
+      onPanelsChanged: reason => postPanelState(reason),
+      onBackgroundActivityChanged: activity => renderSessionStatus(activity),
+    })
+  : null;
 
 const PERMISSION_LABELS = { default: '默认防护', acceptEdits: '接受编辑', plan: '计划模式', bypassPermissions: '完全访问' };
 const EFFORT_LABELS = { low: '低', medium: '中', high: '高', max: '最高' };
@@ -203,6 +220,15 @@ function savePreferences(partial) {
   }, 300);
 }
 
+// Health can resolve after a session is already attached; the dock then holds
+// a null storeScope and every read answers TASK_IDENTITY_UNAVAILABLE. Re-bind
+// the live session's scope to the now-known identity.
+function rebindDockIdentity() {
+  if (!dock || !state.activeSessionId) return;
+  const identity = state.taskIdentity && state.taskIdentity.storeScope ? state.taskIdentity.storeScope : null;
+  dock.refreshIdentity(identity);
+}
+
 /* ===================== init ===================== */
 
 async function init() {
@@ -216,19 +242,24 @@ async function init() {
   const healthJob = client.health().then(health => {
     $('app-version').textContent = `v${health.version}`;
     $('about-text').textContent = `Agent Terminal v${health.version} · API ${health.apiVersion} · ${health.sessions} 个会话`;
+    state.taskIdentity = health.taskIdentity || null;
+    rebindDockIdentity();
+    if (dock && state.activeSessionId) dock.handleResync();
   }).catch(() => {});
   const preferences = loadPreferences();
   const projects = preferences.then(() => refreshProjects()).catch(error => toast(`项目读取失败：${error.message}`, true));
   await Promise.allSettled([healthJob, refreshAgents(), refreshProfiles(), projects]);
   window.addEventListener('beforeunload', () => {
     saveCurrentDraft();
+    if (dock) dock.flushPersist();
     for (const stop of summaryStreams.values()) stop();
     if (state.unsub) state.unsub();
   });
   if (!state.activeSessionId) $('session-title').textContent = '选择或创建一个会话';
   // Ready is the usable-page boundary: the host may immediately select a
   // project or open settings, so data and handlers must both be available.
-  if (window.parent !== window) window.parent.postMessage({ type: 'kb:ready', app: 'agent-terminal' }, '*');
+  // Panel registrations before this point are late arrivals and stay inert.
+  if (window.parent !== window) { embedPanelsReady = true; window.parent.postMessage({ type: 'kb:ready', app: 'agent-terminal' }, '*'); }
 }
 
 /* ===================== agents & capabilities ===================== */
@@ -754,6 +785,7 @@ function receiveSummary(id, event) {
         sessionListDirty.delete(id);
       }
       else if (event.type === 'workbench/session-changed') {
+        if (dock && typeof dock.notifySessionChanged === 'function') dock.notifySessionChanged(event.session);
         sessionListJobs.get(id)?.changes.set(event.session.sessionId, event);
         if (!sessionLists.has(id)) sessionListDirty.add(id);
         rows = [...(sessionLists.get(id) || [])].filter(s => s.sessionId !== event.session.sessionId);
@@ -911,6 +943,11 @@ async function openSession(sessionId, options = {}) {
   $('chat-input').disabled = false;
   state.sessionSummary = summary;
   restoreBackgroundTasks(summary.tasks || snapshot.tasks || []);
+  if (dock) dock.attachSession({
+    storeScope: state.taskIdentity?.storeScope || null,
+    contextId: summary.contextId || state.activeProjectId || null,
+    parentSessionId: sessionId,
+  });
   if (summary.contextId && summary.contextId !== state.activeProjectId) {
     state.activeProjectId = summary.contextId;
     restoreDraft(state.activeProjectId, sessionId);
@@ -945,6 +982,7 @@ async function openSession(sessionId, options = {}) {
   state.unsub = client.subscribe(sessionId, event => {
     if (epoch !== sessionEpoch || state.activeSessionId !== sessionId) return;
     if (event.type === 'workbench/resync') {
+      if (dock) dock.handleResync(event);
       if (historyView?.supported && !historyView.error) {
         last = Number(event.highWater) || 0;
         // The replay cache is not conversation truth. Re-read durable history
@@ -967,6 +1005,7 @@ async function openSession(sessionId, options = {}) {
     if (state.replaying && !(Number.isFinite(sequence) && sequence > 0 && sequence <= replayThrough)) state.replaying = false;
     if (historyView?.sessionId === sessionId) historyView.events.push(event);
     state.liveRevision = (state.liveRevision || 0) + 1;
+    if (dock) dock.handleSessionEvent(event);
     renderEvent(event);
   }, () => {}, { afterSequence: last, onOpen: () => {
     if (epoch !== sessionEpoch || state.activeSessionId !== sessionId) return;
@@ -1051,7 +1090,6 @@ async function reloadHistory(view) {
   const oldest = view.events.find(event => event.type === 'claude/user-prompt') || view.events[0];
   const oldestKey = oldest && historyEventKey(oldest);
   const buffered = view.events;
-  const liveStart = buffered.length;
   try {
     let page = await client.loadHistory(view.sessionId);
     let events = page.events, nextCursor = page.nextCursor;
@@ -1066,7 +1104,12 @@ async function reloadHistory(view) {
       if (historyView !== view || revision !== view.revision) return;
     }
     if (historyView !== view || view.epoch !== sessionEpoch || revision !== view.revision) return;
-    const queued = buffered.slice(liveStart).filter(event => Number(event.sequence) > page.highWater);
+    // Union by row key: live rows received before the first page returned
+    // (including before this reload even started) survive unless the fetched
+    // history already contains them. The fetched page must never overwrite
+    // the live tail into silence.
+    const fetchedKeys = new Set(events.map(historyEventKey));
+    const queued = buffered.filter(event => !fetchedKeys.has(historyEventKey(event)));
     view.nextCursor = nextCursor; view.incomplete = page.incomplete; view.error = false;
     rebuildHistory(view, [...events, ...queued], false);
   } catch { if (historyView === view) view.error = true; }
@@ -1085,6 +1128,7 @@ function detachSession(options = {}) {
   state.sessionSummary = null;
   state.loadingSession = false;
   $('chat-input').disabled = false;
+  if (dock) dock.detachSession();
   restoreBackgroundTasks([]);
   setBusyState('idle');
   historyView = null;
@@ -1346,9 +1390,24 @@ function createPacer(render) {
 }
 
 const backgroundTasks = new Map();
+function trustedTaskRef(ref) {
+  if (!ref || typeof ref !== 'object' || ref.kind !== 'native-task') return null;
+  for (const field of ['storeScope', 'contextId', 'parentSessionId', 'ownerRunId', 'taskId']) {
+    if (typeof ref[field] !== 'string' || ref[field].trim() === '') return null;
+  }
+  return { kind: 'native-task', storeScope: ref.storeScope, contextId: ref.contextId, parentSessionId: ref.parentSessionId, ownerRunId: ref.ownerRunId, taskId: ref.taskId };
+}
+function taskRowKey(ref) { return JSON.stringify([ref.storeScope, ref.contextId, ref.parentSessionId, ref.ownerRunId, ref.taskId]); }
 function restoreBackgroundTasks(tasks) {
   backgroundTasks.clear();
-  for (const task of tasks) backgroundTasks.set(task.taskId, task);
+  // Only a trusted native-task ref anchors a row; bare id rows remain
+  // status echoes that can never grow into an interactive identity.
+  for (const task of Array.isArray(tasks) ? tasks : []) {
+    if (!task || typeof task !== 'object') continue;
+    const ref = trustedTaskRef(task.taskRef);
+    if (!ref && !task.taskId) continue;
+    backgroundTasks.set(ref ? taskRowKey(ref) : 'bare|' + task.taskId, { ...task, taskRef: ref });
+  }
   renderBackgroundTasks();
 }
 function renderBackgroundTasks() {
@@ -1363,11 +1422,8 @@ function renderBackgroundTasks() {
   if (unsupported) { panel.append(el('p', 'task-detail', '当前 Agent 未提供后台任务状态；文字声明不能证明任务已启动。')); return; }
   const running = [...backgroundTasks.values()].filter(t => ['running', 'pending'].includes(t.status)).length;
   panel.append(el('strong', null, `后台任务 · ${running} 个运行中`));
-  if (running) {
-    const stop = el('button', 'linklike', '停止本会话任务');
-    stop.addEventListener('click', stopCurrent);
-    panel.append(stop);
-  }
+  // 单个后台任务的精确停止 API 未交付：本切片没有任何停止入口，也不以
+  // 主会话 abort 冒充（stopCurrent 仅属于前台发送按钮）。
   for (const task of backgroundTasks.values()) {
     const card = el('article', 'task-card');
     card.dataset.taskId = task.taskId;
@@ -1376,15 +1432,44 @@ function renderBackgroundTasks() {
     const detail = [task.lastToolName && `最近工具：${task.lastToolName}`, task.summary,
       task.usage && `工具调用 ${task.usage.tool_uses ?? '未知'} · 用时 ${task.usage.duration_ms ?? '未知'}ms`].filter(Boolean).join('\n');
     if (detail) card.append(el('div', 'task-detail', detail));
+    if (task.taskRef && dock) {
+      const open = el('button', 'linklike', '在右侧任务面板查看');
+      open.addEventListener('click', () => { dock.openTask(task.taskRef); });
+      card.append(open);
+    }
     panel.append(card);
   }
 }
 function renderEvent(event) {
+  if (event.type === 'claude/native-task-state' || event.type === 'claude/native-task-transcript') {
+    // Native facts render in the dock; the strip only mirrors a status line
+    // when the event carries a trusted taskRef, and terminal states stick.
+    const ref = trustedTaskRef(event.taskRef);
+    if (ref) {
+      const key = taskRowKey(ref);
+      const old = backgroundTasks.get(key) || { taskRef: ref, taskId: ref.taskId };
+      if (!(['completed', 'failed', 'stopped'].includes(old.status) && ['running', 'pending'].includes(event.status))) {
+        backgroundTasks.set(key, { ...old, taskRef: ref, taskId: ref.taskId,
+          taskKind: event.taskKind || old.taskKind, taskType: event.taskType || old.taskType,
+          status: event.status || old.status, summary: event.summary || old.summary });
+      }
+      renderBackgroundTasks();
+    }
+    return;
+  }
   if (/^claude\/task-(started|progress|updated|notification)$/.test(event.type)) {
-    const old = backgroundTasks.get(event.taskId) || {};
-    if (['completed', 'failed', 'stopped'].includes(old.status) && ['running', 'pending'].includes(event.status)) return;
-    backgroundTasks.set(event.taskId, { ...old, ...event });
-    renderBackgroundTasks();
+    // Bare echoes cannot create identity: they merge only into rows that
+    // already exist with the same taskId, and terminal states stick.
+    if (event.taskId) {
+      let touched = false;
+      for (const [key, old] of backgroundTasks) {
+        if (old.taskId !== event.taskId) continue;
+        if (['completed', 'failed', 'stopped'].includes(old.status) && ['running', 'pending'].includes(event.status)) continue;
+        backgroundTasks.set(key, { ...old, ...event, taskRef: old.taskRef });
+        touched = true;
+      }
+      if (touched) renderBackgroundTasks();
+    }
     return;
   }
   // Subagent text/tool streams belong to task cards, never the foreground turn.
@@ -2052,21 +2137,40 @@ function fmtTokens(value) {
 function setBusyState(sessionState) {
   state.sessionState = sessionState;
   state.busy = ['running', 'thinking', 'tool-running', 'spawning', 'pending-permission'].includes(sessionState);
-  const status = $('session-status');
   const send = $('btn-send');
+  send.innerHTML = '';
+  if (state.busy) send.append(el('span', 'sq'));
+  else { const up = el('span', 'up'); up.append(icon('send', 16)); send.append(up); }
+  send.title = state.busy ? '停止' : '发送';
+  renderSessionStatus();
+}
+
+// The status chip follows the main session's own state machine; background
+// work (native or delegated) only ever appends a suffix and never revives a
+// terminal main state. Composer availability stays bound to the main session
+// alone - a busy delegated child never locks the main input.
+function renderSessionStatus(activity) {
+  const status = $('session-status');
+  const text = $('session-status-text');
+  if (!status || !text) return;
+  const snapshot = activity && typeof activity === 'object' ? activity
+    : (dock && typeof dock.backgroundActivity === 'function' ? dock.backgroundActivity() : null);
+  const background = snapshot && Number.isFinite(Number(snapshot.total)) ? Number(snapshot.total) : 0;
+  const sessionState = state.sessionState;
   if (sessionState && sessionState !== 'idle') {
     status.hidden = false;
-    $('session-status-text').textContent = {
+    text.textContent = ({
       running: '工作中', thinking: '思考中', 'tool-running': '执行工具', spawning: '启动中',
       'pending-permission': '等待授权', aborted: '已停止', failed: '失败',
-    }[sessionState] || sessionState;
-  } else {
-    status.hidden = true;
+    }[sessionState] || sessionState) + (background > 0 ? ' · 后台运行中' : '');
+    return;
   }
-  send.innerHTML = '';
-  if (state.busy) send.append(el('span', 'sq'));
-  else { const up = el('span', 'up'); up.append(icon('send', 16)); send.append(up); }
-  send.title = state.busy ? '停止' : '发送';
+  if (background > 0) {
+    status.hidden = false;
+    text.textContent = '主回复已结束 · 后台运行中';
+    return;
+  }
+  status.hidden = true;
 }
 
 async function refreshContextUsage() {
@@ -2889,6 +2993,96 @@ function embedAllowedOrigin(origin) {
   } catch { return false; }
 }
 let visibleRefreshJob = null, lastVisibleRefresh = 0, embedVisible = false;
+// Panel registrations are only honored once the workbench is ready; earlier
+// messages are late arrivals from a previous page lifecycle.
+let embedPanelsReady = false;
+function panelScopeMatches(scope) {
+  if (!scope || typeof scope !== 'object') return true;
+  const project = scope.projectId === undefined ? null : String(scope.projectId == null ? '' : scope.projectId);
+  const session = scope.sessionId === undefined ? null : String(scope.sessionId == null ? '' : scope.sessionId);
+  if (project !== null && project !== String(state.activeProjectId == null ? '' : state.activeProjectId)) return false;
+  if (session !== null && session !== String(state.activeSessionId == null ? '' : state.activeSessionId)) return false;
+  return true;
+}
+// K1 host→panel content: a plain JSON object only. Limits: ≤1MiB serialized,
+// nesting depth ≤5, ≤500 items per array. Functions, cycles and other
+// non-cloneable values fail structuredClone here with an explicit receipt -
+// the workbench never interprets, evaluates or stringifies business HTML.
+const PANEL_CONTENT_MAX_CHARS = 1048576;
+const PANEL_CONTENT_MAX_DEPTH = 5;
+const PANEL_CONTENT_MAX_ARRAY = 500;
+function panelContentCheck(content) {
+  if (content === null || typeof content !== 'object' || Array.isArray(content)) {
+    return { ok: false, code: 'INVALID_CONTENT', message: 'content must be a plain JSON object' };
+  }
+  if (typeof structuredClone !== 'function') {
+    return { ok: false, code: 'CONTENT_NOT_CLONEABLE', message: 'structured clone is unavailable' };
+  }
+  let value;
+  try { value = structuredClone(content); } catch (error) {
+    return { ok: false, code: 'CONTENT_NOT_CLONEABLE', message: 'content rejected by structured clone: ' + (error && error.message ? error.message : String(error)) };
+  }
+  let text;
+  try { text = JSON.stringify(value); } catch {
+    return { ok: false, code: 'INVALID_CONTENT', message: 'content must be JSON-serializable' };
+  }
+  if (text === null || text.length > PANEL_CONTENT_MAX_CHARS) {
+    return { ok: false, code: 'CONTENT_TOO_LARGE', message: 'serialized content exceeds ' + PANEL_CONTENT_MAX_CHARS + ' characters' };
+  }
+  let violation = null;
+  const walk = (node, depth) => {
+    if (violation) return;
+    if (node === null || typeof node !== 'object') {
+      if (typeof node === 'number' && !Number.isFinite(node)) {
+        violation = { code: 'INVALID_CONTENT', message: 'content must contain finite JSON numbers only' };
+      }
+      return;
+    }
+    if (!Array.isArray(node)) {
+      // Structured clones can be cross-realm in embedding tests; classify by
+      // the JSON object tag rather than comparing realm-specific prototypes.
+      // Date, Map, Set, and other exotic boxed values still fail this test.
+      if (Object.prototype.toString.call(node) !== '[object Object]') {
+        violation = { code: 'INVALID_CONTENT', message: 'content must contain plain JSON objects only' };
+        return;
+      }
+      if (Object.getOwnPropertySymbols(node).length) {
+        violation = { code: 'INVALID_CONTENT', message: 'content must not contain symbol properties' };
+        return;
+      }
+    }
+    if (Array.isArray(node)) {
+      if (depth > PANEL_CONTENT_MAX_DEPTH) { violation = { code: 'CONTENT_TOO_DEEP', message: 'content nests deeper than ' + PANEL_CONTENT_MAX_DEPTH + ' levels' }; return; }
+      if (node.length > PANEL_CONTENT_MAX_ARRAY) { violation = { code: 'CONTENT_ARRAY_TOO_LONG', message: 'arrays are limited to ' + PANEL_CONTENT_MAX_ARRAY + ' items' }; return; }
+      for (const item of node) walk(item, depth + 1);
+    } else if (node !== null && typeof node === 'object') {
+      if (depth > PANEL_CONTENT_MAX_DEPTH) { violation = { code: 'CONTENT_TOO_DEEP', message: 'content nests deeper than ' + PANEL_CONTENT_MAX_DEPTH + ' levels' }; return; }
+      for (const key of Object.keys(node)) walk(node[key], depth + 1);
+    }
+  };
+  walk(value, 1);
+  if (violation) return { ok: false, code: violation.code, message: violation.message };
+  return { ok: true, value };
+}
+function panelStatePayload(reason) {
+  const snap = dock ? dock.snapshot() : null;
+  const panels = snap ? snap.tabs.filter(tab => tab.kind === 'host').map(tab => ({
+    panelId: tab.id,
+    providerId: tab.providerId,
+    panelType: tab.panelType,
+    open: true,
+    active: tab.id === snap.activeTabId,
+    error: tab.hostError || null,
+    content: tab.content || null,
+    scope: snap.scope ? { projectId: snap.scope.contextId, sessionId: snap.scope.parentSessionId } : null,
+  })) : [];
+  const providers = panelRegistry ? panelRegistry.list().map(d => ({ providerId: d.providerId, panelType: d.panelType, title: d.title })) : [];
+  return { type: 'kb:panel/state', app: 'agent-terminal', reason, panels, providers };
+}
+function postPanelState(reason) {
+  if (!embedded || window.parent === window) return;
+  try { window.parent.postMessage(panelStatePayload(reason), document.referrer ? new URL(document.referrer).origin : location.origin); } catch { /* a broken referrer never breaks the app */ }
+}
 function refreshVisibleState() {
   if (visibleRefreshJob) return visibleRefreshJob;
   if (Date.now() - lastVisibleRefresh < 1000) return Promise.resolve();
@@ -2946,10 +3140,82 @@ function embedSelectProject(ref) {
   return true;
 }
 window.addEventListener('message', async ev => {
-  if (ev.source !== window.parent || !embedAllowedOrigin(ev.origin)) return;
   const data = ev.data;
+  // Panel receipts arrive from sandboxed panel iframes whose origin is the
+  // opaque "null" - identity is the source window itself, never an origin
+  // string. Only the ack verb exists; panels get no other channel in.
+  if (data && typeof data === 'object' && data.type === 'kb:panel/content-ack') {
+    if (embedded && dock && ev.source) dock.ackHostPanelContent(ev.source, data);
+    return;
+  }
+  if (ev.source !== window.parent || !embedAllowedOrigin(ev.origin)) return;
   if (!data || typeof data !== 'object') return;
   const reply = payload => { if (ev.source) ev.source.postMessage(Object.assign({ app: 'agent-terminal', requestId: data.requestId }, payload), ev.origin); };
+  if (typeof data.type === 'string' && data.type.startsWith('kb:panel/')) {
+    // W3 trusted host panel protocol. Same gate as every embed message: only
+    // the real parent on the allowed origin, and only an embedded workbench.
+    if (!embedded) { reply({ type: data.type, ok: false, code: 'NOT_EMBEDDED', error: 'panel protocol requires embed mode' }); return; }
+    // W0-CONTRACTS: a referrer alone never authorizes provider registration —
+    // a malicious parent is its own referrer. Panel messages demand a strictly
+    // same-origin host this round; future cross-origin hosts need an explicit
+    // allowlist, never a widening of the referrer rule.
+    if (ev.origin !== location.origin || !embedAllowedOrigin(ev.origin)) { reply({ type: data.type, ok: false, code: 'FORBIDDEN_HOST_ORIGIN', error: 'panel hosts must be same-origin this round' }); return; }
+    if (!embedPanelsReady) { reply({ type: data.type, ok: false, code: 'NOT_READY', error: 'panel messages are ignored before kb:ready' }); return; }
+    if (!panelRegistry || !dock || !hostPanelOwner) { reply({ type: data.type, ok: false, code: 'PANELS_UNAVAILABLE', error: 'panel registry is unavailable' }); return; }
+    if (!panelScopeMatches(data.scope)) { reply({ type: data.type, ok: false, code: 'SCOPE_MISMATCH', error: 'message scope does not match the active project/session' }); return; }
+    if (data.type === 'kb:panel/register') {
+      // kind and origin are bound here, never taken from the message body:
+      // hosts may only ever register same-origin iframe panels.
+      const descriptor = Object.assign({}, data.panel, { kind: 'iframe', origin: ev.origin });
+      const result = panelRegistry.register(descriptor, hostPanelOwner);
+      if (result.ok) postPanelState('register');
+      reply({ type: 'kb:panel/registered', ok: result.ok, code: result.code || null, error: result.message || null, providerId: result.ok ? result.providerId : null });
+      return;
+    }
+    if (data.type === 'kb:panel/unregister') {
+      const result = panelRegistry.unregister(String(data.providerId || ''), hostPanelOwner);
+      if (result.ok) postPanelState('unregister');
+      reply({ type: 'kb:panel/unregistered', ok: result.ok, code: result.code || null, error: result.message || null, providerId: result.ok ? result.providerId : null });
+      return;
+    }
+    if (data.type === 'kb:panel/open') {
+      const panelId = dock.openPanel(String(data.providerId || ''));
+      reply({ type: 'kb:panel/opened', ok: Boolean(panelId), panelId: panelId || null, providerId: String(data.providerId || '') });
+      return;
+    }
+    if (data.type === 'kb:panel/close') {
+      const closed = dock.closeHostPanels({ panelId: data.panelId, providerId: data.providerId });
+      reply({ type: 'kb:panel/closed', ok: true, closed });
+      return;
+    }
+    if (data.type === 'kb:panel/activate') {
+      const ok = dock.activateHostPanel(String(data.panelId || ''));
+      reply({ type: 'kb:panel/activated', ok, panelId: String(data.panelId || '') });
+      return;
+    }
+    if (data.type === 'kb:panel/content') {
+      // Host→panel structured content. The panel is chosen by panelId AND
+      // providerId, and the provider must be an iframe panel this exact host
+      // origin registered - a same-origin neighbor cannot feed foreign panels.
+      const panelId = typeof data.panelId === 'string' ? data.panelId.trim() : '';
+      const providerId = typeof data.providerId === 'string' ? data.providerId.trim() : '';
+      const refuse = (code, error) => reply({ type: 'kb:panel/content-relayed', ok: false, code, error, panelId, providerId, version: data.version === undefined ? null : data.version });
+      if (!panelId || !providerId) { refuse('INVALID_PANEL_REF', 'panelId and providerId are required'); return; }
+      const descriptor = panelRegistry.get(providerId);
+      if (!descriptor || descriptor.kind !== 'iframe' || descriptor.origin !== ev.origin) { refuse('UNKNOWN_PROVIDER', 'providerId is not an iframe panel registered by this host origin'); return; }
+      let version = null;
+      if (typeof data.version === 'number' && Number.isFinite(data.version)) version = data.version;
+      else if (typeof data.version === 'string' && data.version.trim() && data.version.trim().length <= 200) version = data.version.trim();
+      if (version === null) { refuse('INVALID_VERSION', 'version must be a finite number or a short non-empty string'); return; }
+      const check = panelContentCheck(data.content);
+      if (!check.ok) { refuse(check.code, check.message); return; }
+      const relayed = dock.relayHostPanelContent(panelId, providerId, version, check.value);
+      reply({ type: 'kb:panel/content-relayed', ok: Boolean(relayed.ok), code: relayed.code || null, error: relayed.message || null, panelId, providerId, version });
+      return;
+    }
+    reply({ type: 'kb:panel/error', ok: false, code: 'UNKNOWN_PANEL_MESSAGE', error: 'unsupported panel message' });
+    return;
+  }
   if (data.type === 'kb:theme') { document.body.classList.toggle('light', data.theme !== 'dark'); document.body.dataset.kbTheme = data.theme === 'dark' ? 'dark' : 'light'; reply({ type: 'kb:configured', theme: document.body.dataset.kbTheme }); return; }
   if (data.type === 'kb:visibility' || data.type === 'kb:refresh') {
     if (data.type === 'kb:visibility') {

package/apps/agent-terminal/index.html

@@ -5,6 +5,7 @@
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>Agent Terminal</title>
 <link rel="stylesheet" href="./app.css">
+<link rel="stylesheet" href="./right-workspace-dock.css">
 </head>
 <body>
 
@@ -37,6 +38,7 @@
       <span class="session-provider" id="session-provider"></span>
       <span class="st" id="session-status" hidden><svg class="ics" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 3l1.9 5.8L20 12l-6.1 3.2L12 21l-1.9-5.8L4 12l6.1-3.2z"/></svg><span id="session-status-text"></span></span>
       <span style="flex:1"></span>
+      <button class="ghost" id="btn-dock-toggle" title="任务面板（原生后台任务）" aria-expanded="false" aria-controls="right-dock" hidden><svg class="ics" viewBox="0 0 24 24" aria-hidden="true"><path d="M4 5h16v14H4z" fill="none" stroke="currentColor" stroke-width="2"/><path d="M15 5v14" stroke="currentColor" stroke-width="2"/></svg><span class="rd-toggle-count" hidden></span></button>
       <button class="ghost" id="btn-top-settings" title="设置（模型供应商）"><svg class="ics" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 15a3 3 0 1 0 0-6 3 3 0 0 0 0 6z"/><path d="M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 1 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 1 1-4 0v-.09a1.65 1.65 0 0 0-1-1.51 1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 1 1-2.83-2.83l.06-.06a1.65 1.65 0 0 0 .33-1.82 1.65 1.65 0 0 0-1.51-1H3a2 2 0 1 1 0-4h.09a1.65 1.65 0 0 0 1.51-1 1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 1 1 2.83-2.83l.06.06a1.65 1.65 0 0 0 1.82.33h.01a1.65 1.65 0 0 0 1-1.51V3a2 2 0 1 1 4 0v.09a1.65 1.65 0 0 0 1 1.51h.01a1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 1 1 2.83 2.83l-.06.06a1.65 1.65 0 0 0-.33 1.82v.01a1.65 1.65 0 0 0 1.51 1H21a2 2 0 1 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1z"/></svg></button>
     </div>
 
@@ -86,6 +88,8 @@
       </div>
     </div>
   </div>
+
+  <aside class="right-dock" id="right-dock" hidden aria-label="原生后台任务面板"></aside>
 </div>
 
 <!-- ============ 设置视图 ============ -->
@@ -159,6 +163,8 @@
 <div class="toast-host" id="toast" aria-live="polite"></div>
 
 <script src="../packages/client/index.js"></script>
+<script src="./right-dock-panel-registry.js"></script>
+<script src="./right-workspace-dock.js"></script>
 <script src="./app.js"></script>
 </body>
 </html>

package/apps/agent-terminal/panel-host-proof.html

@@ -0,0 +1,152 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>W3 Panel Host Proof（最小可信宿主）</title>
+<style>
+  :root { color-scheme: dark; }
+  body { margin: 0; font: 13px/1.5 system-ui, sans-serif; background: #101016; color: #e8e8ee; display: flex; flex-direction: column; height: 100vh; }
+  header { padding: 8px 12px; border-bottom: 1px solid #2a2a33; display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
+  header h1 { font-size: 14px; margin: 0 12px 0 0; }
+  header .note { color: #9a9aa5; font-size: 11px; }
+  button { font: inherit; padding: 3px 10px; border: 1px solid #2a2a33; border-radius: 6px; background: #1a1a22; color: inherit; cursor: pointer; }
+  button:disabled { opacity: 0.45; cursor: not-allowed; }
+  main { flex: 1; display: flex; min-height: 0; }
+  #terminal-frame { flex: 1 1 62%; border: none; background: #14141a; }
+  aside { flex: 0 0 38%; border-left: 1px solid #2a2a33; display: flex; flex-direction: column; min-width: 0; }
+  .state-head { padding: 6px 10px; border-bottom: 1px solid #2a2a33; display: flex; gap: 8px; align-items: baseline; }
+  .state-head strong { font-size: 12px; }
+  #panel-status { font-size: 11px; color: #9a9aa5; }
+  #state-log { flex: 1; overflow-y: auto; margin: 0; padding: 6px 10px; font: 11px/1.6 ui-monospace, monospace; white-space: pre-wrap; word-break: break-all; }
+  #state-log .line { display: block; border-bottom: 1px dashed #22222b; padding: 2px 0; }
+  #state-log .dir-host { color: #7fa3e8; }
+  #state-log .dir-app { color: #2e9e5b; }
+  #state-log .dir-err { color: #d64545; }
+</style>
+</head>
+<body>
+<header>
+  <h1>W3 Panel Host Proof</h1>
+  <span class="note">同源最小宿主：以 embed 模式加载真实 Agent Terminal，注册同源 knowledge iframe 面板。独立 Workbench 不依赖本页代码。</span>
+</header>
+<header>
+  <button id="btn-register" disabled>注册知识面板</button>
+  <button id="btn-unregister" disabled>注销</button>
+  <button id="btn-open-1" disabled>打开一个</button>
+  <button id="btn-open-2" disabled>打开第二个</button>
+  <button id="btn-close-last" disabled>关闭最后一个</button>
+  <button id="btn-activate-first" disabled>切换激活到第一个</button>
+</header>
+<main>
+  <iframe id="terminal-frame" title="Agent Terminal（embed）" src="/agent-terminal/?embed=1"></iframe>
+  <aside>
+    <div class="state-head"><strong>panel state 事件日志</strong><span id="panel-status">等待 kb:ready…</span></div>
+    <pre id="state-log"></pre>
+  </aside>
+</main>
+<script>
+(function () {
+  'use strict';
+  var frame = document.getElementById('terminal-frame');
+  var log = document.getElementById('state-log');
+  var status = document.getElementById('panel-status');
+  var buttons = {
+    register: document.getElementById('btn-register'),
+    unregister: document.getElementById('btn-unregister'),
+    open1: document.getElementById('btn-open-1'),
+    open2: document.getElementById('btn-open-2'),
+    closeLast: document.getElementById('btn-close-last'),
+    activateFirst: document.getElementById('btn-activate-first'),
+  };
+  var ORIGIN = window.location.origin;
+  var PROVIDER_ID = 'kb.proof.knowledge';
+  var ready = false;
+  var registered = false;
+  var panels = [];
+  var requestSeq = 0;
+
+  function line(text, dir) {
+    var entry = document.createElement('span');
+    entry.className = 'line ' + (dir === 'host' ? 'dir-host' : dir === 'app' ? 'dir-app' : 'dir-err');
+    entry.textContent = new Date().toISOString().slice(11, 23) + '  ' + text;
+    log.append(entry);
+    log.scrollTop = log.scrollHeight;
+  }
+
+  function send(message) {
+    if (!ready) { line('宿主 → 终端：忽略（终端未 ready）', 'err'); return; }
+    message.requestId = 'proof-' + (++requestSeq);
+    frame.contentWindow.postMessage(message, ORIGIN);
+    line('宿主 → 终端 ' + message.type + ' ' + JSON.stringify(message), 'host');
+  }
+
+  function refreshButtons() {
+    var knowledgeOpen = panels.filter(function (p) { return p.providerId === PROVIDER_ID; });
+    buttons.register.disabled = !ready || registered;
+    buttons.unregister.disabled = !ready || !registered;
+    buttons.open1.disabled = !ready || !registered;
+    buttons.open2.disabled = !ready || !registered;
+    buttons.closeLast.disabled = knowledgeOpen.length === 0;
+    buttons.activateFirst.disabled = knowledgeOpen.length < 2;
+    status.textContent = ready
+      ? (registered ? '已注册 knowledge 面板；当前打开 ' + knowledgeOpen.length + ' 个实例' : '未注册 provider：knowledge 不显示为可用')
+      : '等待 kb:ready…';
+  }
+
+  window.addEventListener('message', function (ev) {
+    if (ev.source !== frame.contentWindow || ev.origin !== ORIGIN) return;
+    var data = ev.data;
+    if (!data || typeof data !== 'object') return;
+    if (data.type === 'kb:ready') {
+      ready = true;
+      line('终端 → 宿主 kb:ready（注册自此生效）', 'app');
+      refreshButtons();
+      return;
+    }
+    if (data.type === 'kb:panel/state') {
+      panels = Array.isArray(data.panels) ? data.panels : [];
+      var providers = (data.providers || []).map(function (p) { return p.providerId; });
+      line('终端 → 宿主 kb:panel/state reason=' + data.reason +
+        ' panels=' + JSON.stringify(panels.map(function (p) {
+          return { id: p.panelId, provider: p.providerId, active: p.active, error: p.error, scope: p.scope };
+        })) +
+        ' providers=' + JSON.stringify(providers), 'app');
+      refreshButtons();
+      return;
+    }
+    if (typeof data.type === 'string' && data.type.indexOf('kb:panel/') === 0) {
+      line('终端 → 宿主 ' + data.type + ' ' + JSON.stringify(data), 'app');
+      if (data.type === 'kb:panel/registered' && data.ok) registered = true;
+      if (data.type === 'kb:panel/unregistered' && data.ok) registered = false;
+      refreshButtons();
+    }
+  });
+
+  buttons.register.addEventListener('click', function () {
+    send({ type: 'kb:panel/register', panel: {
+      providerId: PROVIDER_ID,
+      panelType: 'knowledge',
+      title: '知识引用（proof）',
+      url: new URL('panel-proof-content.html?panel=knowledge&source=host-proof', window.location.href).href,
+      capabilities: ['read-only', 'proof'],
+      multiInstance: 'multiple',
+      appliesTo: { projects: '*' },
+    } });
+  });
+  buttons.unregister.addEventListener('click', function () { send({ type: 'kb:panel/unregister', providerId: PROVIDER_ID }); });
+  buttons.open1.addEventListener('click', function () { send({ type: 'kb:panel/open', providerId: PROVIDER_ID }); });
+  buttons.open2.addEventListener('click', function () { send({ type: 'kb:panel/open', providerId: PROVIDER_ID }); });
+  buttons.closeLast.addEventListener('click', function () {
+    var open = panels.filter(function (p) { return p.providerId === PROVIDER_ID; });
+    if (open.length) send({ type: 'kb:panel/close', panelId: open[open.length - 1].panelId });
+  });
+  buttons.activateFirst.addEventListener('click', function () {
+    var open = panels.filter(function (p) { return p.providerId === PROVIDER_ID; });
+    if (open.length >= 2) send({ type: 'kb:panel/activate', panelId: open[0].panelId });
+  });
+  refreshButtons();
+})();
+</script>
+</body>
+</html>