dsh-ntr 0.3.0 → 0.3.1

package/lib/types/bridge.d.ts

@@ -9,7 +9,7 @@
 import { type InitializeResponse } from '@agentclientprotocol/sdk';
 import { EventHub, PermissionLedger, Transcript } from './impl.ts';
 import type { AcpToolCallSnapshot, PendingPermissionView, RosterPresetRow } from './impl.ts';
-import type { AcpAgentCatalog, AcpAgentDef, AcpApprovalDeadlines, AcpConversationChoice, AcpPresetStatus, AcpTagHalo, AgentCatalogResult, AgentProbeModelsResult, AgentTestResult, AgentView, ChatSessionView, ChatTranscriptView, DetectedAgentInfo, GenerateOptions, LlmAdapterLike, LlmModelInfo, LlmProviderInfo, LlmResolvedModelInfo, ApprovalDeadlineKey, ApprovalDeadlinePatch, PermissionTimeoutMode, PluginUpdateState, PreparedAdapterCall, SessionView, StreamChunk } from './protocol.ts';
+import type { AcpAgentCatalog, AcpAgentDef, AcpApprovalDeadlines, AcpConversationChoice, AcpPresetStatus, AcpReleaseCause, AcpTagHalo, AgentCatalogResult, AgentProbeModelsResult, AgentTestResult, AgentView, ChatSessionView, ChatTranscriptView, DetectedAgentInfo, GenerateOptions, LlmAdapterLike, LlmModelInfo, LlmProviderInfo, LlmResolvedModelInfo, ApprovalDeadlineKey, ApprovalDeadlinePatch, PermissionTimeoutMode, PluginUpdateState, PreparedAdapterCall, SessionView, StreamChunk } from './protocol.ts';
 import { UpdateService } from './update.ts';
 /**
  * Version of this installed package, read from the shipped `package.json` —
@@ -612,7 +612,7 @@ export declare class AgentBridge {
     resumeSession(session: LiveSession): Promise<LiveSession>;
     private doResumeSession;
     /** Release all live sessions (process died or went idle): keep them resumable, settle permissions, drop the connection. */
-    releaseAll(reason: string): void;
+    releaseAll(reason: string, cause: AcpReleaseCause): void;
     /** Detach one released session record for a resume attempt. */
     takeReleased(sessionId: string): LiveSession | undefined;
     /** Drop a released session record for good (user closed it or the agent was stopped). */

package/lib/types/client/store.d.ts

@@ -141,6 +141,20 @@ export interface ChatTranscript {
     /** Highest folded transcript seq (gap detection for the live stream). */
     seq: number;
 }
+/**
+ * One line of the settings page's ACP runtime log. Agent-side notices and
+ * session-release reasons land here (bounded, append order oldest→newest);
+ * failures of the settings page's OWN actions stay in {@link UiState.notice}.
+ */
+export interface AcpLogEntry {
+    id: number;
+    at: number;
+    level: 'info' | 'error';
+    text: string;
+    agentId?: string;
+}
+/** Cap on retained runtime-log lines; older entries fall off the front. */
+export declare const LOG_MAX_ENTRIES = 200;
 export interface UiState {
     open: boolean;
     /**
@@ -162,7 +176,15 @@ export interface UiState {
     blocks: Block[];
     permissions: PendingPermission[];
     busy: boolean;
+    /**
+     * The settings page's one-line banner for its OWN action failures. Agent-side
+     * runtime messages do not land here; they append to {@link logs} instead.
+     */
     notice?: string;
+    /** Agent-side runtime log, append order oldest→newest, capped at {@link LOG_MAX_ENTRIES}. */
+    logs: AcpLogEntry[];
+    /** Lines appended since the user last opened the log; reset by {@link AcpStore.markLogsRead}. */
+    logUnread: number;
     /**
      * The plugin's OWN default ACP agent (the panel's ★ gesture) — which agent a
      * new ACP-mode conversation starts on. NOT the deployment default model: that
@@ -339,6 +361,8 @@ export declare class AcpStore {
     private state;
     private readonly listeners;
     private source?;
+    /** Monotonic id source for {@link AcpLogEntry}s (never reset by `clearLogs`). */
+    private logSeq;
     private readonly lastSeq;
     /** Sessions with a finalized turn (dedups the cancel-fallback + late real turn/end pair). */
     private readonly openTurns;
@@ -407,6 +431,11 @@ export declare class AcpStore {
     subscribe(listener: Listener): () => void;
     getSnapshot(): UiState;
     private mutate;
+    /**
+     * Build the log patch for one line. Does NOT mutate: the caller merges it
+     * into the single `mutate` call it was already making for the same event.
+     */
+    private logPatch;
     /**
      * Live `session/update` frames waiting to be folded. Agents stream at token
      * granularity — hundreds of frames a second with usage ticks interleaved —
@@ -713,6 +742,10 @@ export declare class AcpStore {
      */
     refreshLocale(): void;
     clearNotice(): void;
+    /** Drop every retained runtime-log line (the unread counter restarts too). */
+    clearLogs(): void;
+    /** The user looked at the log: clear the unread badge. */
+    markLogsRead(): void;
     private flashError;
     private applyEvent;
 }

package/lib/types/protocol.d.ts

@@ -321,6 +321,11 @@ export interface AgentView {
      */
     idleTimeoutMs?: number;
 }
+/**
+ * Why the host released a session's agent process. The browser turns this into
+ * one runtime-log line per cause; `idle` stays silent (expected lifecycle).
+ */
+export type AcpReleaseCause = 'idle' | 'workspace' | 'resume-failed' | 'stalled' | 'died';
 export type AcpEvent = {
     type: 'agent/status';
     agentId: string;
@@ -350,6 +355,8 @@ export type AcpEvent = {
     sessionId: string;
     session: SessionView;
     reason: string;
+    /** Host's release-cause classification; absent on an older host half. */
+    cause?: AcpReleaseCause;
 } | {
     /**
      * The session was resumed through `session/load` on a fresh agent

package/lib/types/update.d.ts

@@ -77,10 +77,13 @@ export type BundleEligibility = {
 };
 /**
  * Whether a `listBundles().source` value names a registry-resolvable version
- * spec — the only install shape this updater may replace. The test is positive
- * on purpose: link/file/git/workspace/URL/tarball/relative forms all carry a
- * `:` / `/` / `\` or start with `.`, so they fall out without an ever-growing
- * blacklist (a new source scheme must not become silently updatable).
+ * spec — the only install shape this updater may replace. The harness records
+ * a registry dependency as `<package>@<spec>` (`dependencySpec` in the plugin
+ * manager), so the spec half after the last `@` is what gets judged. The test
+ * is positive on purpose: link/file/git/workspace/URL/tarball/relative forms
+ * all carry a `:` / `/` / `\` or start with `.`, so they fall out without an
+ * ever-growing blacklist (a new source scheme must not become silently
+ * updatable).
  */
 export declare function isRegistrySpec(source: string): boolean;
 /**

package/lib/update.js

@@ -46,12 +46,26 @@ function describeFieldError(error) {
         .filter((part) => typeof part === 'string' && part !== '');
     return parts.length > 0 ? parts.join(': ') : 'the host reported a bundle error';
 }
+/** The version-spec half of a registry source: a range, wildcard, or dist-tag. */
+function isRegistryRange(value) {
+    if (value === '')
+        return false;
+    const lowered = value.toLowerCase();
+    if (lowered === '*' || lowered === 'x')
+        return true;
+    if (REGISTRY_TAGS.has(lowered))
+        return true;
+    return REGISTRY_VERSION_SPEC.test(value);
+}
 /**
  * Whether a `listBundles().source` value names a registry-resolvable version
- * spec — the only install shape this updater may replace. The test is positive
- * on purpose: link/file/git/workspace/URL/tarball/relative forms all carry a
- * `:` / `/` / `\` or start with `.`, so they fall out without an ever-growing
- * blacklist (a new source scheme must not become silently updatable).
+ * spec — the only install shape this updater may replace. The harness records
+ * a registry dependency as `<package>@<spec>` (`dependencySpec` in the plugin
+ * manager), so the spec half after the last `@` is what gets judged. The test
+ * is positive on purpose: link/file/git/workspace/URL/tarball/relative forms
+ * all carry a `:` / `/` / `\` or start with `.`, so they fall out without an
+ * ever-growing blacklist (a new source scheme must not become silently
+ * updatable).
  */
 export function isRegistrySpec(source) {
     const value = typeof source === 'string' ? source.trim() : '';
@@ -61,12 +75,13 @@ export function isRegistrySpec(source) {
         return false;
     if (value.includes(':') || value.includes('/') || value.includes('\\'))
         return false;
-    const lowered = value.toLowerCase();
-    if (lowered === '*' || lowered === 'x')
-        return true;
-    if (REGISTRY_TAGS.has(lowered))
-        return true;
-    return REGISTRY_VERSION_SPEC.test(value);
+    const at = value.lastIndexOf('@');
+    if (at === -1)
+        return isRegistryRange(value);
+    const name = value.slice(0, at);
+    if (!/^[a-z0-9][a-z0-9._-]*$/i.test(name))
+        return false;
+    return isRegistryRange(value.slice(at + 1));
 }
 /**
  * Compare two semver strings (build metadata ignored, prerelease precedence per

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-ntr",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Interactive Agent Client Protocol (ACP) client for the DSH web UI: attach any ACP-capable agent and stream its session.",
   "repository": "https://github.com/GDWhisper/dsh-ntr.git",
   "type": "module",

package/src/bridge.ts

@@ -69,7 +69,7 @@ import type {
   RosterPresetRow,
 } from './impl.ts'
 import type {
-  AcpAgentCatalog, AcpAgentDef, AcpApprovalDeadlines, AcpConversationChoice, AcpEvent, AcpMcpServerDef, AcpPresetStatus, AcpTagHalo, AgentCatalogResult, AgentProbeModelsResult, AgentTestResult, AgentView, ChatSessionView, ChatTranscriptView, DetectedAgentInfo, GenerateOptions, LlmAdapterLike,
+  AcpAgentCatalog, AcpAgentDef, AcpApprovalDeadlines, AcpConversationChoice, AcpEvent, AcpMcpServerDef, AcpPresetStatus, AcpReleaseCause, AcpTagHalo, AgentCatalogResult, AgentProbeModelsResult, AgentTestResult, AgentView, ChatSessionView, ChatTranscriptView, DetectedAgentInfo, GenerateOptions, LlmAdapterLike,
   LlmModelInfo, LlmModelReasoningInfo, LlmProviderInfo, LlmReasoningEffortInfo, LlmResolvedModelInfo,
   ApprovalDeadlineKey, ApprovalDeadlinePatch, PermissionOutcome, PermissionOptionView, PermissionTimeoutMode, PluginUpdateState, PreparedAdapterCall, SessionView, StreamChunk,
 } from './protocol.ts'
@@ -637,7 +637,7 @@ export class AgentBridge {
       this.touch()
       return
     }
-    this.releaseAll(`agent "${this.def.id}" was released after ${String(Math.round(this.currentIdleTimeoutMs / 1000))}s idle`)
+    this.releaseAll(`agent "${this.def.id}" was released after ${String(Math.round(this.currentIdleTimeoutMs / 1000))}s idle`, 'idle')
   }
 
   /**
@@ -835,7 +835,7 @@ export class AgentBridge {
       if (this.state === 'ready' && this.conn !== undefined && this.spawnCwd !== spawnCwd && this.isQuiet()) {
         const reason = `agent "${this.def.id}" restarts in ${spawnCwd} (the workspace of the session using it)`
         this.hub.broadcast({ type: 'agent/notice', agentId: this.def.id, level: 'info', text: `acp: ${reason}` })
-        this.releaseAll(reason)
+        this.releaseAll(reason, 'workspace')
       }
     }
     if (this.state === 'ready' && this.conn !== undefined) return Promise.resolve()
@@ -1291,13 +1291,13 @@ export class AgentBridge {
       this.sessions.delete(session.sessionId)
       session.released = true
       this.released.set(session.sessionId, session)
-      this.hub.broadcast({ type: 'session/released', sessionId: session.sessionId, session: snapshot(session), reason: 'resume failed' })
+      this.hub.broadcast({ type: 'session/released', sessionId: session.sessionId, session: snapshot(session), reason: 'resume failed', cause: 'resume-failed' })
       throw error
     }
   }
 
   /** Release all live sessions (process died or went idle): keep them resumable, settle permissions, drop the connection. */
-  releaseAll(reason: string): void {
+  releaseAll(reason: string, cause: AcpReleaseCause): void {
     this.clearIdleTimer()
     for (const session of [...this.sessions.values()]) {
       // A session already being closed is `closeSession`'s to delete. Marking
@@ -1317,7 +1317,7 @@ export class AgentBridge {
       session.released = true
       this.settlePermissions(session)
       this.released.set(session.sessionId, session)
-      this.hub.broadcast({ type: 'session/released', sessionId: session.sessionId, session: snapshot(session), reason })
+      this.hub.broadcast({ type: 'session/released', sessionId: session.sessionId, session: snapshot(session), reason, cause })
     }
     this.sessions.clear()
     this.acpIndex.clear()
@@ -5019,7 +5019,7 @@ export class BridgeManager {
     // here (their `runPrompt` promise also rejects into settle, but this also
     // covers a promise the connection teardown leaves pending).
     this.disposeTurnStreamsOf(controller => controller.session.agentId === bridge.def.id)
-    bridge.releaseAll(reason)
+    bridge.releaseAll(reason, 'died')
   }
 
   agentViews(): AgentView[] {
@@ -5737,7 +5737,7 @@ export class BridgeManager {
       // rejection does not broadcast a second `turn/end` for a turn already
       // finalized by the watchdog (`LiveSession.reclaimedTurnSeq`).
       session.reclaimedTurnSeq = session.turnSeq
-      bridge.releaseAll('agent did not acknowledge the stalled turn')
+      bridge.releaseAll('agent did not acknowledge the stalled turn', 'stalled')
       session.orphanPromptTurnSeq = undefined
       return { ok: true }
     }

package/src/client/panel.tsx

@@ -17,7 +17,7 @@
 
 import { useEffect, useRef, useState, useSyncExternalStore } from 'react'
 import { formatCommandLine, isAbsolutePathLike, splitCommandLine } from './acp-ui.tsx'
-import { DEFAULT_KNOWN_PRESETS } from './store.ts'
+import { DEFAULT_KNOWN_PRESETS, LOG_MAX_ENTRIES } from './store.ts'
 import type { AcpStore, UiState } from './store.ts'
 import type { AcpAgentDef, AcpApprovalDeadlines, AcpCatalogChoice, AcpMcpServerDef, AgentSavePayload, AgentView, DetectedAgentInfo, PermissionTimeoutMode, PluginUpdateState } from '../protocol.ts'
 
@@ -251,6 +251,17 @@ const STYLE = `
 .dwa-deadline-flag { margin-top: 4px; font-size: var(--ntr-font-xs); font-weight: 550; color: var(--ntr-warn); }
 .dwa-deadline-warn { margin-top: 10px; padding: 9px 12px; border-left: 3px solid var(--dsw-alias-state-warn-primary, #d97706); background: var(--dsw-alias-state-warn-secondary, #fffbeb); border-radius: var(--ntr-radius-sm); font-size: var(--ntr-font-xs); line-height: 1.55; }
 .dwa-deadline-reset { display: flex; justify-content: flex-end; margin-top: 8px; }
+/* Runtime log: one bounded list, newest first. The time column never wraps;
+   the message is the only cell that may break anywhere. */
+.dwa-log-list { list-style: none; margin: 0; padding: 0; border: var(--ntr-line); border-radius: var(--ntr-radius); overflow: hidden; }
+.dwa-log-row { display: flex; align-items: baseline; gap: 8px; padding: 6px 10px; font-size: var(--ntr-font-sm); border-top: var(--ntr-line); min-width: 0; }
+.dwa-log-row:first-child { border-top: 0; }
+.dwa-log-row.is-error { background: var(--dsw-alias-state-error-tertiary, #fef2f2); }
+.dwa-log-time { color: var(--ntr-muted); white-space: nowrap; }
+.dwa-log-text { flex: 1; min-width: 0; overflow-wrap: anywhere; }
+.dwa-log-dot { width: 6px; height: 6px; border-radius: 50%; background: var(--ntr-danger); display: inline-block; margin-left: 6px; }
+.dwa-log-level.is-info { background: var(--dsw-alias-state-business-tertiary, #dbeafe); color: var(--dsw-alias-state-business-primary, #2563eb); }
+.dwa-log-level.is-error { background: var(--dsw-alias-state-error-tertiary, #fef2f2); color: var(--ntr-danger); }
 @media (max-width: 640px) {
   .dwa-root { padding: 20px 16px; }
 }
@@ -866,7 +877,19 @@ function ApprovalDeadlinesCard(props: { acp: AcpStore; ui: UiState }) {
   )
 }
 
-type SettingsPage = 'agents' | 'add' | 'approvals' | 'appearance' | 'diagnostics'
+type SettingsPage = 'agents' | 'add' | 'approvals' | 'appearance' | 'logs' | 'diagnostics'
+
+/**
+ * Local wall-clock `HH:MM:SS` for one runtime-log line. Hand-built on purpose:
+ * `toLocaleTimeString` may drop seconds or pick a 12-hour clock depending on
+ * the browser locale, which makes the column ragged and ambiguous.
+ */
+function logClock(at: number): string {
+  const date = new Date(at)
+  return [date.getHours(), date.getMinutes(), date.getSeconds()]
+    .map(value => String(value).padStart(2, '0'))
+    .join(':')
+}
 
 /** The states that carry an update badge next to the version badge. */
 function updateBadgeText(update: PluginUpdateState, acp: AcpStore): string | undefined {
@@ -1033,6 +1056,11 @@ export function AcpSettingsSection(props: WithStore) {
   useEffect(() => {
     void acp.checkPluginUpdate()
   }, [acp])
+  // Opening the log is the read receipt. The store does not mutate at zero,
+  // so this cannot loop.
+  useEffect(() => {
+    if (page === 'logs' && ui.logUnread > 0) acp.markLogsRead()
+  }, [acp, page, ui.logUnread])
   const { configured, available } = partitionAgents(ui.detectedAgents, ui.agents)
   const selected = addTarget ?? available[0] ?? NEW_AGENT_SEED
   const openAdd = (): void => {
@@ -1154,6 +1182,10 @@ export function AcpSettingsSection(props: WithStore) {
         <button type="button" aria-pressed={page === 'agents'} onClick={() => setPage('agents')}>{acp.label('智能体', 'Agents')}</button>
         {ui.approvalDeadlines !== undefined && <button type="button" aria-pressed={page === 'approvals'} onClick={() => setPage('approvals')}>{acp.label('审批时限', 'Approval deadlines')}</button>}
         <button type="button" aria-pressed={page === 'appearance'} onClick={() => setPage('appearance')}>{acp.label('对话外观', 'Appearance')}</button>
+        <button type="button" aria-pressed={page === 'logs'} onClick={() => setPage('logs')}>
+          {acp.label('日志', 'Logs')}
+          {ui.logUnread > 0 && <span className="dwa-log-dot" aria-hidden="true" />}
+        </button>
       </nav>
       {page === 'diagnostics' && (
         <section className="dwa-section">
@@ -1334,6 +1366,45 @@ export function AcpSettingsSection(props: WithStore) {
           )}
         </div>
       </section>
+      {/* Conditional on purpose: this list can hold 200 rows, and keeping it
+          mounted through a `hidden` page would re-render every line on each
+          `session/update`. It carries no local state, so remounting is free. */}
+      {page === 'logs' && (
+        <section className="dwa-section" aria-label={acp.label('运行日志', 'Runtime log')}>
+          <div className="dwa-section-heading">
+            <div>
+              <h3 className="dwa-section-title">{acp.label('运行日志', 'Runtime log')}</h3>
+              <p className="dwa-section-copy">
+                {acp.label(
+                  `agent 运行消息，最多 ${String(LOG_MAX_ENTRIES)} 条。`,
+                  `Agent runtime messages, up to ${String(LOG_MAX_ENTRIES)}.`,
+                )}
+              </p>
+            </div>
+            {ui.logs.length > 0 && (
+              <button type="button" className="dwa-btn dwa-btn-quiet" onClick={() => acp.clearLogs()}>
+                {acp.label('清空', 'Clear')}
+              </button>
+            )}
+          </div>
+          {ui.logs.length === 0
+            ? <div className="dwa-empty" role="status">{acp.label('暂无运行日志。', 'No runtime messages yet.')}</div>
+            : (
+              <ul className="dwa-log-list">
+                {[...ui.logs].reverse().map(entry => (
+                  <li key={entry.id} className={entry.level === 'error' ? 'dwa-log-row is-error' : 'dwa-log-row'}>
+                    <span className="dwa-log-time dwa-mono">{logClock(entry.at)}</span>
+                    <span className={`dwa-badge dwa-log-level ${entry.level === 'error' ? 'is-error' : 'is-info'}`}>
+                      {entry.level === 'error' ? acp.label('错误', 'Error') : acp.label('信息', 'Info')}
+                    </span>
+                    {entry.agentId !== undefined && <span className="dwa-badge">{entry.agentId}</span>}
+                    <span className="dwa-log-text">{entry.text}</span>
+                  </li>
+                ))}
+              </ul>
+            )}
+        </section>
+      )}
       <footer className="dwa-health">
         <div className="dwa-health-status">
           <span className="dwa-dot" style={{ background: ui.stream === 'live' ? 'var(--ntr-success)' : ui.stream === 'down' ? 'var(--ntr-danger)' : 'var(--ntr-muted)' }} />

package/src/client/store.ts

@@ -135,6 +135,22 @@ export interface ChatTranscript {
   seq: number
 }
 
+/**
+ * One line of the settings page's ACP runtime log. Agent-side notices and
+ * session-release reasons land here (bounded, append order oldest→newest);
+ * failures of the settings page's OWN actions stay in {@link UiState.notice}.
+ */
+export interface AcpLogEntry {
+  id: number
+  at: number
+  level: 'info' | 'error'
+  text: string
+  agentId?: string
+}
+
+/** Cap on retained runtime-log lines; older entries fall off the front. */
+export const LOG_MAX_ENTRIES = 200
+
 export interface UiState {
   open: boolean
   /**
@@ -156,7 +172,15 @@ export interface UiState {
   blocks: Block[]
   permissions: PendingPermission[]
   busy: boolean
+  /**
+   * The settings page's one-line banner for its OWN action failures. Agent-side
+   * runtime messages do not land here; they append to {@link logs} instead.
+   */
   notice?: string
+  /** Agent-side runtime log, append order oldest→newest, capped at {@link LOG_MAX_ENTRIES}. */
+  logs: AcpLogEntry[]
+  /** Lines appended since the user last opened the log; reset by {@link AcpStore.markLogsRead}. */
+  logUnread: number
   /**
    * The plugin's OWN default ACP agent (the panel's ★ gesture) — which agent a
    * new ACP-mode conversation starts on. NOT the deployment default model: that
@@ -603,6 +627,8 @@ export class AcpStore {
     blocks: [],
     permissions: [],
     busy: false,
+    logs: [],
+    logUnread: 0,
     detectedAgents: [...DEFAULT_KNOWN_PRESETS],
     detecting: false,
     modelCatalogs: {},
@@ -625,6 +651,8 @@ export class AcpStore {
 
   private readonly listeners = new Set<Listener>()
   private source?: EventSource
+  /** Monotonic id source for {@link AcpLogEntry}s (never reset by `clearLogs`). */
+  private logSeq = 0
   private readonly lastSeq = new Map<string, number>()
   /** Sessions with a finalized turn (dedups the cancel-fallback + late real turn/end pair). */
   private readonly openTurns = new Set<string>()
@@ -712,6 +740,24 @@ export class AcpStore {
     for (const listener of [...this.listeners]) listener()
   }
 
+  /**
+   * Build the log patch for one line. Does NOT mutate: the caller merges it
+   * into the single `mutate` call it was already making for the same event.
+   */
+  private logPatch(level: 'info' | 'error', text: string, agentId?: string): Pick<UiState, 'logs' | 'logUnread'> {
+    const entry: AcpLogEntry = {
+      id: ++this.logSeq,
+      at: Date.now(),
+      level,
+      text,
+      ...(agentId === undefined ? {} : { agentId }),
+    }
+    return {
+      logs: [...this.state.logs, entry].slice(-LOG_MAX_ENTRIES),
+      logUnread: this.state.logUnread + 1,
+    }
+  }
+
   // ---- Streaming update coalescing ----
 
   /**
@@ -1895,6 +1941,17 @@ export class AcpStore {
     this.mutate({ notice: undefined })
   }
 
+  /** Drop every retained runtime-log line (the unread counter restarts too). */
+  clearLogs(): void {
+    this.mutate({ logs: [], logUnread: 0 })
+  }
+
+  /** The user looked at the log: clear the unread badge. */
+  markLogsRead(): void {
+    if (this.state.logUnread === 0) return
+    this.mutate({ logUnread: 0 })
+  }
+
   private flashError(error: unknown): void {
     this.mutate({ notice: error instanceof Error ? error.message : String(error) })
   }
@@ -1904,7 +1961,7 @@ export class AcpStore {
   private applyEvent(event: AcpEvent): Promise<void> {
     switch (event.type) {
       case 'agent/notice': {
-        this.mutate({ notice: event.text })
+        this.mutate(this.logPatch(event.level, event.text, event.agentId))
         return Promise.resolve()
       }
       case 'agent/status': {
@@ -1934,6 +1991,7 @@ export class AcpStore {
         return Promise.resolve()
       }
       case 'session/closed': {
+        const closingSession = this.state.sessions.find(s => s.sessionId === event.sessionId)
         const sessions = this.state.sessions.filter(s => s.sessionId !== event.sessionId)
         const active = this.state.activeSessionId === event.sessionId ? sessions[0]?.sessionId : this.state.activeSessionId
         this.openTurns.delete(event.sessionId)
@@ -1949,7 +2007,9 @@ export class AcpStore {
           chatTranscripts: closedTranscripts,
           ...(chatSessions.length !== this.state.chatSessions.length ? { chatSessions } : {}),
           permissions: this.state.permissions.filter(p => p.sessionId !== event.sessionId),
-          ...(event.reason === 'agent-died' ? { notice: this.locale('会话因 agent 进程退出而终止', 'session ended: agent process died') } : {}),
+          ...(event.reason === 'agent-died'
+            ? this.logPatch('error', this.locale('会话因 agent 进程退出而终止', 'session ended: agent process died'), closingSession?.agentId)
+            : {}),
         })
         return Promise.resolve()
       }
@@ -1966,6 +2026,31 @@ export class AcpStore {
         const chatSessions = this.state.chatSessions.some(s => s.sessionId === event.sessionId)
           ? this.state.chatSessions.map(s => (s.sessionId === event.sessionId ? { ...s, released: true } : s))
           : this.state.chatSessions
+        // One runtime-log line per release cause; `idle` stays silent on
+        // purpose (an expected lifecycle transition, not a fault).
+        const cause = event.cause ?? 'died'
+        let log: Partial<Pick<UiState, 'logs' | 'logUnread'>> = {}
+        if (cause === 'workspace') {
+          log = this.logPatch('info', this.locale(
+            'agent 为切换工作区重启，会话已挂起；再次发送消息将自动恢复。',
+            'agent restarted for its workspace; the session is paused and will resume on your next message.',
+          ), event.session.agentId)
+        } else if (cause === 'resume-failed') {
+          log = this.logPatch('error', this.locale(
+            '会话恢复失败；再次发送消息将重试恢复。',
+            'session resume failed; your next message will retry it.',
+          ), event.session.agentId)
+        } else if (cause === 'stalled') {
+          log = this.logPatch('error', this.locale(
+            'agent 未响应卡死的回合，会话已挂起；再次发送消息将自动恢复。',
+            'agent did not acknowledge the stalled turn; the session is paused and will resume on your next message.',
+          ), event.session.agentId)
+        } else if (cause === 'died') {
+          log = this.logPatch('error', this.locale(
+            'agent 进程已退出，会话已挂起；再次发送消息将自动恢复。',
+            'agent process died; the session is paused and will resume on your next message.',
+          ), event.session.agentId)
+        }
         this.mutate({
           sessions,
           ...(chatSessions !== this.state.chatSessions ? { chatSessions } : {}),
@@ -1973,10 +2058,7 @@ export class AcpStore {
           // An observed transcript keeps its buffer but flips to released, so
           // the ACP view can say "会恢复" instead of silently looking dead.
           ...this.watchedSessionPatch(event.sessionId, event.session),
-          notice: this.locale(
-            'agent 进程已退出，会话已挂起；再次发送消息将自动恢复。',
-            'agent process died; the session is paused and will resume on your next message.',
-          ),
+          ...log,
         })
         return Promise.resolve()
       }

package/src/protocol.ts

@@ -332,6 +332,12 @@ export interface AgentView {
   idleTimeoutMs?: number
 }
 
+/**
+ * Why the host released a session's agent process. The browser turns this into
+ * one runtime-log line per cause; `idle` stays silent (expected lifecycle).
+ */
+export type AcpReleaseCause = 'idle' | 'workspace' | 'resume-failed' | 'stalled' | 'died'
+
 export type AcpEvent =
   | { type: 'agent/status'; agentId: string; state: AgentProcessState; error?: string; agent?: AgentView }
   | { type: 'agent/notice'; agentId: string; level: 'info' | 'error'; text: string }
@@ -344,6 +350,8 @@ export type AcpEvent =
     sessionId: string
     session: SessionView
     reason: string
+    /** Host's release-cause classification; absent on an older host half. */
+    cause?: AcpReleaseCause
   }
   | {
     /**

package/src/update.ts

@@ -91,22 +91,35 @@ function describeFieldError(error: { code?: string; message?: string; diagnostic
   return parts.length > 0 ? parts.join(': ') : 'the host reported a bundle error'
 }
 
+/** The version-spec half of a registry source: a range, wildcard, or dist-tag. */
+function isRegistryRange(value: string): boolean {
+  if (value === '') return false
+  const lowered = value.toLowerCase()
+  if (lowered === '*' || lowered === 'x') return true
+  if (REGISTRY_TAGS.has(lowered)) return true
+  return REGISTRY_VERSION_SPEC.test(value)
+}
+
 /**
  * Whether a `listBundles().source` value names a registry-resolvable version
- * spec — the only install shape this updater may replace. The test is positive
- * on purpose: link/file/git/workspace/URL/tarball/relative forms all carry a
- * `:` / `/` / `\` or start with `.`, so they fall out without an ever-growing
- * blacklist (a new source scheme must not become silently updatable).
+ * spec — the only install shape this updater may replace. The harness records
+ * a registry dependency as `<package>@<spec>` (`dependencySpec` in the plugin
+ * manager), so the spec half after the last `@` is what gets judged. The test
+ * is positive on purpose: link/file/git/workspace/URL/tarball/relative forms
+ * all carry a `:` / `/` / `\` or start with `.`, so they fall out without an
+ * ever-growing blacklist (a new source scheme must not become silently
+ * updatable).
  */
 export function isRegistrySpec(source: string): boolean {
   const value = typeof source === 'string' ? source.trim() : ''
   if (value === '') return false
   if (value.startsWith('.')) return false
   if (value.includes(':') || value.includes('/') || value.includes('\\')) return false
-  const lowered = value.toLowerCase()
-  if (lowered === '*' || lowered === 'x') return true
-  if (REGISTRY_TAGS.has(lowered)) return true
-  return REGISTRY_VERSION_SPEC.test(value)
+  const at = value.lastIndexOf('@')
+  if (at === -1) return isRegistryRange(value)
+  const name = value.slice(0, at)
+  if (!/^[a-z0-9][a-z0-9._-]*$/i.test(name)) return false
+  return isRegistryRange(value.slice(at + 1))
 }
 
 /**