dsh-tiddlywiki 0.27.2 → 0.28.0

package/lib/index.js

@@ -1,9 +1,9 @@
 import { createRequire } from "node:module";
+import { execFile, spawn, spawnSync } from "node:child_process";
 import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync, statSync, watch, writeFileSync } from "node:fs";
-import { mkdir, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
 import { basename, dirname, extname, isAbsolute, join, resolve } from "node:path";
-import { execFile, spawn, spawnSync } from "node:child_process";
 import { promisify } from "node:util";
+import { mkdir, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
 import { Readable } from "node:stream";
 import { createServer, isIP } from "node:net";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
@@ -11,6 +11,7 @@ import { homedir } from "node:os";
 import { createServer as createServer$1, get } from "node:http";
 import { get as get$1 } from "node:https";
 import { lookup } from "node:dns/promises";
+import { fileURLToPath } from "node:url";
 //#region src/host/git.ts
 /**
 * Git face (design doc §7, D11) — the ONLY place dsh-tiddlywiki shells out to
@@ -136,6 +137,49 @@ var GitFace = class {
 		});
 		return r.ok && r.stdout.trim() === "true";
 	}
+	/**
+	* The repository a folder belongs to (`git rev-parse --show-toplevel`), or
+	* undefined when it is not inside a work tree (v0.28.0).
+	*
+	* WHY THE PLUGIN NEEDS THIS: several knowledge bases may be SUBFOLDERS of one
+	* repository — the "工作 + 个人 共用现有仓库、按文件夹物理划分" topology. Git
+	* then has ONE index and `git add -A` (from any subdirectory) stages the WHOLE
+	* working tree, so the auto-committer must be keyed by the REPOSITORY rather
+	* than by the wiki; two per-folder committers would each commit the other's
+	* changes and one would forever report "nothing to commit" (see
+	* host/repo-committers.ts).
+	*/
+	async repoRoot(dir) {
+		const r = await this.exec(["rev-parse", "--show-toplevel"], {
+			cwd: dir,
+			timeout: QUICK_TIMEOUT_MS
+		});
+		if (!r.ok) return void 0;
+		const root = r.stdout.trim();
+		return root.length > 0 ? resolve(root) : void 0;
+	}
+	/**
+	* Repository-relative paths that differ between two commits (v0.28.0).
+	*
+	* Used after a pull to decide WHICH knowledge bases need their TW child
+	* restarted: with one repository holding several wikis, "the pull changed
+	* something" is not the same question as "THIS wiki's content changed".
+	* Returns [] for an unusable range (no commits yet, unknown ref).
+	*/
+	async filesChangedBetween(dir, from, to) {
+		if (from.length === 0 || to.length === 0 || from === to) return [];
+		const r = await this.exec([
+			"diff",
+			"--name-only",
+			from,
+			to
+		], {
+			cwd: dir,
+			timeout: QUICK_TIMEOUT_MS
+		});
+		if (!r.ok) return [];
+		return r.stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
+	}
 	async init(dir, branch = "main") {
 		return (await this.exec([
 			"init",
@@ -263,7 +307,9 @@ var GitFace = class {
 	/** `git pull --rebase --autostash`; on conflict: abort + report files.
 	*  On success, `changed: true` means HEAD actually moved (files came in /
 	*  commits were replayed) — callers use it to decide whether a running TW
-	*  child needs a restart to drop its stale in-memory snapshot.
+	*  child needs a restart to drop its stale in-memory snapshot, and
+	*  `changedFiles` (v0.28.0) says WHICH paths moved, so a caller serving
+	*  several wikis out of one repository can restart only the affected ones.
 	*  Serialized against `commit()` (index.lock). */
 	pull(dir) {
 		return this.withLock(() => this.pullUnlocked(dir));
@@ -289,11 +335,16 @@ var GitFace = class {
 				timeout: QUICK_TIMEOUT_MS
 			});
 			const afterHead = after.ok ? after.stdout.trim() : "";
-			const changed = beforeHead.length > 0 && beforeHead !== afterHead;
+			if (!(beforeHead.length > 0 && beforeHead !== afterHead)) return {
+				ok: true,
+				message: r.stdout.trim() || "pull ok"
+			};
+			const changedFiles = await this.filesChangedBetween(dir, beforeHead, afterHead);
 			return {
 				ok: true,
 				message: r.stdout.trim() || "pull ok",
-				...changed ? { changed: true } : {}
+				changed: true,
+				...changedFiles.length > 0 ? { changedFiles } : {}
 			};
 		}
 		const conflictFiles = await this.unmergedFiles(dir);
@@ -1296,6 +1347,24 @@ const PATH_PREFIX = "/dsh-tiddlywiki";
 const TW_PROXY_PREFIX = `${PATH_PREFIX}/tw`;
 /** The proxy base path (trailing slash) handed to browsers / TW's frontend. */
 const TW_PROXY_PATH = `${TW_PROXY_PREFIX}/`;
+/**
+* The same-origin proxy base a wiki's TW frontend must use (v0.28.0).
+*
+* SINGLE mode returns the LEGACY bare path: that wiki IS the default one, and
+* every existing install already has exactly that value in its host tiddler — so
+* the upgrade produces no diff at all.
+*
+* MULTI mode gives each wiki `/dsh-tiddlywiki/tw/<id>/`. That is load-bearing:
+* TW builds every API URL from this tiddler, so a wiki using the bare path while
+* another wiki is default would render one wiki's UI over another's data.
+*
+* Both forms route to the same child, so a stale value left by a mode flip is
+* harmless. Exported so the host wiring and the verification harness use ONE
+* implementation of the rule.
+*/
+function proxyBaseFor(mode, wikiId) {
+	return mode === "multi" ? `${TW_PROXY_PATH}${encodeURIComponent(wikiId)}/` : TW_PROXY_PATH;
+}
 /** Late-ready watch: cadence and lifetime after the hard deadline passed. */
 const LATE_READY_POLL_MS = 5e3;
 /** How long the late-ready watch keeps probing a child that outlived the deadline. */
@@ -3252,6 +3321,27 @@ async function unseedStarterDocs(client) {
 *
 * @module dsh-tiddlywiki/host/prompt
 */
+/**
+* The scope banner prepended to the injected prompt when MORE THAN ONE knowledge
+* base is visible to the agent (v0.28.0).
+*
+* Why a banner at all: with several wikis the model has no way to know which one
+* its `tiddlywiki_*` calls act on, and the failure mode (writing a note into the
+* wrong knowledge base) is silent. The banner names the scope, and every tool
+* result repeats it. With a single visible wiki this returns `''`, so existing
+* installs keep exactly the text they had.
+*/
+function scopeBanner(scope) {
+	if (!scope.ambiguous || scope.id === void 0) return "";
+	const why = scope.reason === void 0 ? "" : `（${scope.reason}）`;
+	return `> **本会话作用域：${scope.label ?? scope.id}（${scope.id}）**${why}\n> 本会话所有 \`tiddlywiki_*\` 工具都只作用于这个知识库，每条工具回执也会标明它。`;
+}
+/** Built prompt text plus the optional scope banner (the section's final text). */
+function withScopeBanner(text, scope) {
+	if (text.length === 0) return "";
+	const banner = scopeBanner(scope);
+	return banner.length === 0 ? text : `${banner}\n\n${text}`;
+}
 /** Prompt section name (stable id; a re-registration replaces the old one). */
 const PROMPT_SECTION_NAME = "dsh-tiddlywiki";
 /** Prompt section order (the plugin's section sits before plan/team policy). */
@@ -4375,7 +4465,7 @@ const TW_WEB_HOST_DEFAULT = "$protocol$//$host$/";
 * (mirrored in src/client/theme-sync.ts — the two bundles cannot share code).
 */
 const DARK_PALETTE_DEFAULT = "$:/palettes/CupertinoDark";
-function isPlainObject$1(value) {
+function isPlainObject$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 /** Deep-merge: `over` wins; nested plain objects merge recursively. */
@@ -4383,7 +4473,7 @@ function deepMerge(base, over) {
 	const out = { ...base };
 	for (const [key, value] of Object.entries(over)) {
 		if (value === void 0) continue;
-		if (isPlainObject$1(value) && isPlainObject$1(out[key])) out[key] = deepMerge(out[key], value);
+		if (isPlainObject$2(value) && isPlainObject$2(out[key])) out[key] = deepMerge(out[key], value);
 		else out[key] = value;
 	}
 	return out;
@@ -4498,13 +4588,13 @@ const FORBIDDEN_PATCH_KEYS = /* @__PURE__ */ new Set([
 *   - `__proto__` / `constructor` / `prototype` anywhere → rejected.
 */
 function normalizeConfigPatch(input) {
-	if (!isPlainObject$1(input)) throw new ConfigPatchError("配置补丁必须是一个 JSON 对象（例如 {\"note\":{\"tag\":\"inbox\"}}）");
+	if (!isPlainObject$2(input)) throw new ConfigPatchError("配置补丁必须是一个 JSON 对象（例如 {\"note\":{\"tag\":\"inbox\"}}）");
 	const out = {};
 	const walk = (source, target, prefix) => {
 		for (const [key, value] of Object.entries(source)) {
 			if (FORBIDDEN_PATCH_KEYS.has(key)) throw new ConfigPatchError(`配置补丁里不允许出现键「${key}」`);
 			const path = prefix.length > 0 ? `${prefix}.${key}` : key;
-			if (isPlainObject$1(value)) {
+			if (isPlainObject$2(value)) {
 				const child = {};
 				target[key] = child;
 				walk(value, child, path);
@@ -4591,7 +4681,7 @@ var ConfigStore = class {
 		const raw = typeof tiddler.text === "string" ? tiddler.text : "";
 		try {
 			const parsed = JSON.parse(raw);
-			if (!isPlainObject$1(parsed)) throw new Error("config tiddler is not a JSON object");
+			if (!isPlainObject$2(parsed)) throw new Error("config tiddler is not a JSON object");
 			this.overrides = parsed;
 			this.lastParseError = void 0;
 		} catch {
@@ -4618,7 +4708,7 @@ var ConfigStore = class {
 			if (tiddler !== void 0 && typeof tiddler.text === "string") {
 				storedText = tiddler.text;
 				const parsed = JSON.parse(tiddler.text);
-				if (!isPlainObject$1(parsed)) throw new Error("config tiddler is not a JSON object");
+				if (!isPlainObject$2(parsed)) throw new Error("config tiddler is not a JSON object");
 				stored = parsed;
 			}
 			if (tiddler !== void 0 && typeof tiddler.created === "string" && tiddler.created.trim().length > 0) existingCreated = tiddler.created;
@@ -4645,6 +4735,17 @@ var ConfigStore = class {
 //#endregion
 //#region src/host/seeds.ts
 /**
+* Is this value a same-origin proxy base WE wrote — for this wiki or a sibling?
+*
+* Used to tell "our own stale value" (safe to update) from "a base the user
+* deliberately chose" (never touched). Matches the bare legacy path and any
+* `/dsh-tiddlywiki/tw/<id>/` form.
+*/
+function isOurProxyBase(value) {
+	if (typeof value !== "string") return false;
+	return /^\/dsh-tiddlywiki\/tw\/(?:[a-z0-9][a-z0-9._-]{0,63}\/)?$/.test(value.trim());
+}
+/**
 * Wait until a file exists on disk (polling), up to `timeoutMs`.
 *
 * TW's syncer flushes REST writes to the filesystem on a ~250ms task timer, so
@@ -5198,6 +5299,7 @@ const SEED_DEFS = [
 		core: true
 	}, {
 		check: async (ctx) => {
+			const desired = ctx.proxyBase ?? TW_PROXY_PATH;
 			const current = (await ctx.client.get(TW_WEB_HOST_TIDDLER))?.text?.trim();
 			const present = typeof current === "string" && current.length > 0 && current !== "$protocol$//$host$/";
 			return {
@@ -5206,21 +5308,29 @@ const SEED_DEFS = [
 				description: "把 $:/config/tiddlyweb/host 指向 DSH 同源代理，嵌入式 TW 才能经 DSH origin 访问（远程访问模式的前提）。",
 				present,
 				removable: false,
-				detail: present ? current === TW_PROXY_PATH ? `已指向 ${TW_PROXY_PATH}` : `已指向自定义基址 ${current}（保留，不会覆盖）` : `当前：${current ?? "（缺失）"}，应为 ${TW_PROXY_PATH}`
+				detail: !present ? `当前：${current ?? "（缺失）"}，应为 ${desired}` : current === desired ? `已指向 ${desired}` : isOurProxyBase(current) ? `已指向 ${current}（本库应改为 ${desired}，下次启动会更新）` : `已指向自定义基址 ${current}（保留，不会覆盖）`
 			};
 		},
 		run: async (ctx, force) => {
 			try {
 				const current = (await ctx.client.get(TW_WEB_HOST_TIDDLER))?.text?.trim();
-				if (!force && current !== void 0 && current !== "$protocol$//$host$/") return {
+				const desired = ctx.proxyBase ?? TW_PROXY_PATH;
+				const replaceable = current === void 0 || current.length === 0 || current === "$protocol$//$host$/" || isOurProxyBase(current);
+				if (!force && !replaceable) return {
 					id: "tw-web-host",
 					ok: true,
 					wrote: false,
 					detail: "已指向自定义基址，未覆盖"
 				};
+				if (!force && current === desired) return {
+					id: "tw-web-host",
+					ok: true,
+					wrote: false,
+					detail: `已指向 ${desired}`
+				};
 				await ctx.client.put({
 					title: TW_WEB_HOST_TIDDLER,
-					text: TW_PROXY_PATH,
+					text: desired,
 					type: "text/plain",
 					tags: []
 				});
@@ -5228,7 +5338,7 @@ const SEED_DEFS = [
 					id: "tw-web-host",
 					ok: true,
 					wrote: true,
-					detail: force ? "已重新初始化（强制写回代理基址）" : "已写入代理基址"
+					detail: force ? "已重新初始化（强制写回代理基址）" : `已写入代理基址 ${desired}`
 				};
 			} catch (err) {
 				return {
@@ -5437,7 +5547,7 @@ function cleanTiddler(t) {
 	return out;
 }
 /** 是不是一个「平铺对象」（`fields` 唯一合法的形状；数组不算）。 */
-function isPlainObject(value) {
+function isPlainObject$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 /** 错误信息里的短样本（不把整段正文塞进回执）。 */
@@ -5480,10 +5590,10 @@ function normalizeFieldsArg(fields) {
 		} catch {
 			parsed = void 0;
 		}
-		if (isPlainObject(parsed)) return parsed;
+		if (isPlainObject$1(parsed)) return parsed;
 		throw new Error(`fields 必须是一个对象（如 {"review-after":"2026-12-22"}），收到无法解析成对象的字符串：${excerpt(fields)}`);
 	}
-	if (isPlainObject(fields)) return fields;
+	if (isPlainObject$1(fields)) return fields;
 	throw new Error(`fields 必须是一个对象（如 {"review-after":"2026-12-22"}），收到 ${Array.isArray(fields) ? "数组" : typeof fields}`);
 }
 /**
@@ -5500,7 +5610,7 @@ function normalizeFieldsArg(fields) {
 */
 function applyCustomFields(tiddler, fields) {
 	if (fields === void 0 || fields === null) return;
-	if (!isPlainObject(fields)) throw new Error(`内部错误：fields 必须是对象，收到 ${Array.isArray(fields) ? "数组" : typeof fields}`);
+	if (!isPlainObject$1(fields)) throw new Error(`内部错误：fields 必须是对象，收到 ${Array.isArray(fields) ? "数组" : typeof fields}`);
 	for (const [key, value] of Object.entries(fields)) {
 		if (RESERVED_TIDDLER_FIELDS.has(key)) continue;
 		if (value === void 0) continue;
@@ -6612,18 +6722,21 @@ function registerRoutes(ctx, deps) {
 	* invalidates it so a sync/upload is reflected immediately.
 	*/
 	const GIT_STATUS_TTL_MS = 2e3;
-	/** Cached git-status PROMISE (not value): a burst of concurrent /status polls
-	*  then shares ONE probe instead of each spawning up to five git processes
-	*  (v0.19.0 — value-caching still let every concurrent miss run its own). */
+	/** Cached git-status PROMISE **per wiki** (not value): a burst of concurrent
+	*  /status polls then shares ONE probe instead of each spawning up to five git
+	*  processes (v0.19.0 — value-caching still let every concurrent miss run its
+	*  own). The key is the wiki folder: with several knowledge bases a
+	*  single-slot cache would hand wiki A the answer probed for wiki B (v0.28.0). */
 	let gitStatusCache;
 	const invalidateGitStatus = () => {
 		gitStatusCache = void 0;
 	};
-	const cachedGitStatus = () => {
-		if (gitStatusCache !== void 0 && Date.now() - gitStatusCache.at < GIT_STATUS_TTL_MS) return gitStatusCache.value;
+	const cachedGitStatus = (req) => {
+		const key = deps.getWikiPath(req);
+		if (gitStatusCache !== void 0 && gitStatusCache.key === key && Date.now() - gitStatusCache.at < GIT_STATUS_TTL_MS) return gitStatusCache.value;
 		const pending = (async () => {
 			try {
-				const view = await deps.git.status(deps.getWikiPath());
+				const view = await deps.git.status(key);
 				return {
 					...view,
 					remote: redactRemoteUrl(typeof view.remote === "string" ? view.remote : "")
@@ -6633,6 +6746,7 @@ function registerRoutes(ctx, deps) {
 			}
 		})();
 		gitStatusCache = {
+			key,
 			at: Date.now(),
 			value: pending
 		};
@@ -6719,8 +6833,12 @@ function registerRoutes(ctx, deps) {
 	const twProxyAbsoluteBase = (req) => absoluteHostBase(req.headers.host, TW_PROXY_PATH);
 	const handleStatus = async (req, res) => {
 		if (rejectNonRead(req, res)) return;
-		const view = deps.server.status();
-		const gitSummary = await cachedGitStatus();
+		const view = deps.server(req)?.status() ?? {
+			status: "stopped",
+			wikiPath: deps.getWikiPath(req),
+			logs: []
+		};
+		const gitSummary = await cachedGitStatus(req);
 		json(res, {
 			ok: true,
 			...view,
@@ -6728,8 +6846,16 @@ function registerRoutes(ctx, deps) {
 			twProxy: TW_PROXY_PATH,
 			twProxyAbsolute: twProxyAbsoluteBase(req),
 			git: gitSummary,
-			note: { tag: deps.noteDefaults().tag },
-			ui: deps.uiDefaults()
+			note: { tag: deps.noteDefaults(req).tag },
+			ui: deps.uiDefaults(req),
+			...(() => {
+				const farm = deps.wikiSummaries(req);
+				return {
+					mode: farm.mode,
+					defaultId: farm.defaultId,
+					wikis: farm.items
+				};
+			})()
 		});
 	};
 	/**
@@ -6744,6 +6870,103 @@ function registerRoutes(ctx, deps) {
 	const SUMMARY_REUSE_MS = 3e3;
 	const summaryInFlight = /* @__PURE__ */ new Map();
 	/**
+	* GET /dsh-tiddlywiki/session/wiki?session=<id> — which knowledge base this
+	* conversation works on, plus what it resolves to right now.
+	*
+	* The per-wiki selector in the composer reads this; the agent tools and the
+	* injected prompt are driven by the SAME value, so what the user picks is what
+	* the model gets.
+	*/
+	const handleSessionWiki = async (req, res) => {
+		try {
+			if (rejectNonRead(req, res)) return;
+			if (deps.sessionScope === void 0) {
+				json(res, {
+					ok: false,
+					error: "会话作用域不可用（宿主未接线）"
+				}, 503);
+				return;
+			}
+			const session = (new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("session") ?? "").trim();
+			if (session.length === 0) {
+				json(res, {
+					ok: false,
+					error: "session is required"
+				}, 400);
+				return;
+			}
+			json(res, {
+				ok: true,
+				session,
+				...deps.sessionScope.get(session)
+			});
+		} catch (err) {
+			json(res, {
+				ok: false,
+				error: err instanceof Error ? err.message : String(err)
+			}, errorStatus(err));
+		}
+	};
+	/**
+	* POST /dsh-tiddlywiki/session/wiki { session, wiki } — point this conversation
+	* at a knowledge base (`wiki: null`/`''` clears the choice and falls back to
+	* the default).
+	*
+	* A HIDDEN wiki is refused (400): `agentVisible: false` means "the agent never
+	* reaches this one", and a selector that lets a session pick it would quietly
+	* contradict the setting the user just made.
+	*/
+	const handleSessionWikiSet = async (req, res) => {
+		try {
+			if (deps.sessionScope === void 0) {
+				json(res, {
+					ok: false,
+					error: "会话作用域不可用（宿主未接线）"
+				}, 503);
+				return;
+			}
+			let body = {};
+			try {
+				body = JSON.parse(await readBody(req));
+			} catch {
+				json(res, {
+					ok: false,
+					error: "请求体必须是 JSON"
+				}, 400);
+				return;
+			}
+			const session = typeof body.session === "string" ? body.session.trim() : "";
+			if (session.length === 0) {
+				json(res, {
+					ok: false,
+					error: "session is required"
+				}, 400);
+				return;
+			}
+			const raw = typeof body.wiki === "string" ? body.wiki.trim() : "";
+			const wikiId = raw.length === 0 ? void 0 : raw;
+			await deps.sessionScope.set(session, wikiId);
+			json(res, {
+				ok: true,
+				session,
+				...deps.sessionScope.get(session)
+			});
+		} catch (err) {
+			json(res, {
+				ok: false,
+				error: err instanceof Error ? err.message : String(err)
+			}, 400);
+		}
+	};
+	/** `/session/wiki` takes both methods on ONE registration (see /admin/wikis). */
+	const handleSessionWikiRoute = async (req, res) => {
+		if ((req.method ?? "GET").toUpperCase() === "POST") {
+			if (rejectCrossSiteWrite(req, res, ["POST"])) return;
+			return handleSessionWikiSet(req, res);
+		}
+		return handleSessionWiki(req, res);
+	};
+	/**
 	* POST /dsh-tiddlywiki/session/summary — 生成当前会话的 wiki 汇总页（「知识库」
 	* Tab 的后端）。body `{ session: <会话ID> }`；后端用 sessionQuery 读本会话（含
 	* 后代 subagent）的完整事件日志，按「产生/读取/检索」收集 tiddlywiki_* 笔记，
@@ -6772,7 +6995,7 @@ function registerRoutes(ctx, deps) {
 				}, 400);
 				return;
 			}
-			const client = deps.getClient();
+			const client = deps.getClient(req);
 			if (client === void 0) {
 				json(res, {
 					ok: false,
@@ -6865,14 +7088,14 @@ function registerRoutes(ctx, deps) {
 	* error response — the caller just does `if (!guard(...)) return`.
 	*/
 	const guardSendToAgent = (req, res) => {
-		if (!deps.sendToAgentEnabled()) {
+		if (!deps.sendToAgentEnabled(req)) {
 			json(res, {
 				ok: false,
 				error: "send-to-agent is disabled"
 			}, 403);
 			return false;
 		}
-		const token = deps.sendToAgentToken().trim();
+		const token = deps.sendToAgentToken(req).trim();
 		if (token.length === 0) return true;
 		const got = req.headers["x-send-to-agent-token"];
 		if (safeTokenEqual(typeof got === "string" ? got : Array.isArray(got) ? got[0] ?? "" : "", token)) return true;
@@ -7145,7 +7368,7 @@ function registerRoutes(ctx, deps) {
 				}, 400);
 				return;
 			}
-			const client = deps.getClient();
+			const client = deps.getClient(req);
 			if (client === void 0) {
 				json(res, {
 					ok: false,
@@ -7167,11 +7390,11 @@ function registerRoutes(ctx, deps) {
 			const { tiddler } = buildWriteTiddler(title, text, {
 				existing,
 				tags,
-				defaultTags: [deps.noteDefaults().tag],
+				defaultTags: [deps.noteDefaults(req).tag],
 				agentTag: false
 			});
 			await client.put(tiddler);
-			deps.autoCommit();
+			deps.autoCommit(req);
 			invalidateGitStatus();
 			const finalTags = tiddler.tags ?? [];
 			json(res, {
@@ -7201,7 +7424,7 @@ function registerRoutes(ctx, deps) {
 		try {
 			if (rejectCrossSiteWrite(req, res, ["POST"])) return;
 			const body = JSON.parse(await readBody(req));
-			const client = deps.getClient();
+			const client = deps.getClient(req);
 			if (client === void 0) {
 				json(res, {
 					ok: false,
@@ -7218,10 +7441,10 @@ function registerRoutes(ctx, deps) {
 				return;
 			}
 			const result = await openInTwEditor(client, title, typeof body.text === "string" ? body.text : "", resolveTags(body), {
-				defaultTags: [deps.noteDefaults().tag],
+				defaultTags: [deps.noteDefaults(req).tag],
 				...conflictTokens(body)
 			});
-			deps.autoCommit();
+			deps.autoCommit(req);
 			invalidateGitStatus();
 			json(res, {
 				ok: true,
@@ -7255,7 +7478,7 @@ function registerRoutes(ctx, deps) {
 	*  order, plus `total`/`truncated` so a capped caller can say "N of M". */
 	const handleTags = async (req, res) => {
 		if (rejectNonRead(req, res)) return;
-		const client = deps.getClient();
+		const client = deps.getClient(req);
 		if (client === void 0) {
 			json(res, {
 				ok: false,
@@ -7287,7 +7510,7 @@ function registerRoutes(ctx, deps) {
 	/** Recent non-system tiddlers for the quick-note "最近" picker (newest first). */
 	const handleRecent = async (req, res) => {
 		if (rejectNonRead(req, res)) return;
-		const client = deps.getClient();
+		const client = deps.getClient(req);
 		if (client === void 0) {
 			json(res, {
 				ok: false,
@@ -7321,7 +7544,7 @@ function registerRoutes(ctx, deps) {
 	/** Full tiddler for the quick-note "最近" picker (load into the editor). */
 	const handleGet = async (req, res) => {
 		if (rejectNonRead(req, res)) return;
-		const client = deps.getClient();
+		const client = deps.getClient(req);
 		if (client === void 0) {
 			json(res, {
 				ok: false,
@@ -7382,7 +7605,7 @@ function registerRoutes(ctx, deps) {
 	*/
 	const handleSearch = async (req, res) => {
 		if (rejectNonRead(req, res)) return;
-		const client = deps.getClient();
+		const client = deps.getClient(req);
 		if (client === void 0) {
 			json(res, {
 				ok: false,
@@ -7464,9 +7687,11 @@ function registerRoutes(ctx, deps) {
 			let drained = true;
 			try {
 				drained = await drainThenStop({
-					client: deps.getClient(),
-					tiddlersDir: join(deps.getWikiPath(), "tiddlers"),
-					stop: () => deps.server.restart(),
+					client: deps.getClient(req),
+					tiddlersDir: join(deps.getWikiPath(req), "tiddlers"),
+					stop: async () => {
+						await deps.server(req)?.restart();
+					},
 					log: (message) => console.warn("[dsh-tiddlywiki]", message)
 				});
 			} finally {
@@ -7474,7 +7699,7 @@ function registerRoutes(ctx, deps) {
 			}
 			json(res, {
 				ok: true,
-				status: deps.server.status().status,
+				status: deps.server(req)?.status().status,
 				drained
 			});
 		} catch (err) {
@@ -7500,7 +7725,7 @@ function registerRoutes(ctx, deps) {
 			return;
 		}
 		invalidateGitStatus();
-		const dir = deps.getWikiPath();
+		const dir = deps.getWikiPath(req);
 		const status = async () => {
 			try {
 				return await deps.git.status(dir);
@@ -7521,15 +7746,13 @@ function registerRoutes(ctx, deps) {
 				return;
 			}
 			let restarted = false;
+			let restartedWikis;
 			let restartError;
-			if (pulled.changed === true) try {
-				if (!await drainThenStop({
-					client: deps.getClient(),
-					tiddlersDir: join(dir, "tiddlers"),
-					stop: () => deps.server.restart(),
-					log: (message) => console.warn("[dsh-tiddlywiki]", message)
-				})) console.warn("[dsh-tiddlywiki] sync: syncer queue may not be drained before restart");
-				restarted = true;
+			if (pulled.changed === true && deps.restartAffected !== void 0) try {
+				const outcome = await deps.restartAffected(req, dir, pulled.changedFiles ?? []);
+				restarted = outcome.restarted.length > 0;
+				if (outcome.restarted.length > 0) restartedWikis = outcome.restarted;
+				if (outcome.failed.length > 0) restartError = outcome.failed.map((item) => `${item.id}: ${item.message}`).join("; ");
 			} catch (err) {
 				restartError = err instanceof Error ? err.message : String(err);
 			}
@@ -7559,6 +7782,7 @@ function registerRoutes(ctx, deps) {
 				pull: "ok",
 				...pulled.changed === true ? { changed: true } : {},
 				restarted,
+				...restartedWikis !== void 0 ? { restartedWikis } : {},
 				...restartError !== void 0 ? { restartError } : {},
 				commit: committed.message,
 				push: pushed.message,
@@ -7609,7 +7833,7 @@ function registerRoutes(ctx, deps) {
 				}, 400);
 				return;
 			}
-			const filesDir = join(deps.getWikiPath(), "files");
+			const filesDir = join(deps.getWikiPath(req), "files");
 			await mkdir(filesDir, { recursive: true });
 			const ext = extname(name);
 			const stem = ext.length > 0 ? name.slice(0, -ext.length) : name;
@@ -7631,7 +7855,7 @@ function registerRoutes(ctx, deps) {
 				}, 409);
 				return;
 			}
-			deps.autoCommit();
+			deps.autoCommit(req);
 			invalidateGitStatus();
 			json(res, {
 				ok: true,
@@ -7667,7 +7891,7 @@ function registerRoutes(ctx, deps) {
 	const handleRender = async (req, res) => {
 		try {
 			if (rejectCrossSiteWrite(req, res, ["POST"])) return;
-			const client = deps.getClient();
+			const client = deps.getClient(req);
 			if (client === void 0) {
 				json(res, {
 					ok: false,
@@ -7754,7 +7978,8 @@ function registerRoutes(ctx, deps) {
 			"DELETE",
 			"OPTIONS"
 		])) return;
-		if (deps.getClient() === void 0) {
+		const server = deps.server(req);
+		if (server?.url === void 0) {
 			json(res, {
 				ok: false,
 				error: "wiki service is not running"
@@ -7780,7 +8005,7 @@ function registerRoutes(ctx, deps) {
 				signal: AbortSignal.timeout(15e3)
 			};
 			if (method === "PUT" || method === "POST") init.body = await readBody(req, MAX_PROXY_BODY_BYTES);
-			const upstream = await fetch(`${deps.server.url}${rest}${url.search}`, init);
+			const upstream = await fetch(`${server.url}${rest}${url.search}`, init);
 			const data = await upstream.text();
 			res.writeHead(upstream.status, {
 				"content-type": upstream.headers.get("content-type") ?? "application/json; charset=utf-8",
@@ -7812,20 +8037,23 @@ function registerRoutes(ctx, deps) {
 			"DELETE",
 			"OPTIONS"
 		])) return;
-		if (deps.getClient() === void 0) {
+		const url = new URL(req.url ?? "/", "http://127.0.0.1");
+		const [firstSegment = "", ...tail] = url.pathname.slice(TW_PROXY_PREFIX.length).replace(/^\//, "").split("/");
+		const named = deps.wikiIds().includes(firstSegment) ? firstSegment : void 0;
+		const rest = named === void 0 ? url.pathname.replace(new RegExp(`^${TW_PROXY_PREFIX}(?=/|$)`), "") || "/" : `/${tail.join("/")}`;
+		if (isBlockedProxyPath(url.pathname) || isBlockedProxyPath(rest)) {
 			json(res, {
 				ok: false,
-				error: "wiki service is not running"
-			}, 503);
+				error: "system tiddler not exposed"
+			}, 403);
 			return;
 		}
-		const url = new URL(req.url ?? "/", "http://127.0.0.1");
-		const rest = url.pathname.replace(new RegExp(`^${TW_PROXY_PREFIX}(?=/|$)`), "") || "/";
-		if (isBlockedProxyPath(rest)) {
+		const server = named === void 0 ? deps.server(req) : deps.serverById(named);
+		if (server?.url === void 0) {
 			json(res, {
 				ok: false,
-				error: "system tiddler not exposed"
-			}, 403);
+				error: "wiki service is not running"
+			}, 503);
 			return;
 		}
 		try {
@@ -7841,7 +8069,7 @@ function registerRoutes(ctx, deps) {
 			};
 			if (method === "PUT" || method === "POST") init.body = await readBodyBuffer(req, MAX_UPLOAD_BYTES);
 			else if (req.readableEnded === false && (req.headers["content-length"] !== void 0 || req.headers["transfer-encoding"] !== void 0)) req.resume();
-			const upstream = await fetch(`${deps.server.url}${rest}${url.search}`, init);
+			const upstream = await fetch(`${server.url}${rest}${url.search}`, init);
 			const responseHeaders = {
 				"content-type": upstream.headers.get("content-type") ?? "application/octet-stream",
 				"cache-control": upstream.headers.get("cache-control") ?? "no-store"
@@ -7897,7 +8125,7 @@ function registerRoutes(ctx, deps) {
 	* deployment answers 403 instead of starting browser automation.
 	*/
 	const guardWechat = (req, res) => {
-		const config = deps.wechatConfig();
+		const config = deps.wechatConfig(req);
 		if (!config.enabled) {
 			json(res, {
 				ok: false,
@@ -7925,7 +8153,7 @@ function registerRoutes(ctx, deps) {
 		try {
 			if (rejectNonRead(req, res)) return;
 			if (!guardWechat(req, res)) return;
-			const ready = await deps.wechatReady();
+			const ready = await deps.wechatReady(req);
 			json(res, {
 				ok: true,
 				enabled: ready.enabled,
@@ -7947,7 +8175,7 @@ function registerRoutes(ctx, deps) {
 	* overrides it for exotic setups.
 	*/
 	const wechatDsn = (req) => {
-		const configured = deps.wechatConfig().dsn;
+		const configured = deps.wechatConfig(req).dsn;
 		if (configured.length > 0) return configured;
 		const port = req.socket.localPort;
 		return port === void 0 ? "" : `http://127.0.0.1:${port}${ROUTE_PREFIX}`;
@@ -8006,7 +8234,7 @@ function registerRoutes(ctx, deps) {
 				}, 503);
 				return;
 			}
-			const client = deps.getClient();
+			const client = deps.getClient(req);
 			if (client !== void 0) {
 				if (await client.get(title) === void 0) {
 					json(res, {
@@ -8016,8 +8244,8 @@ function registerRoutes(ctx, deps) {
 					return;
 				}
 			}
-			const adapter = requested ?? deps.wechatConfig().adapter;
-			const ready = await deps.wechatReady();
+			const adapter = requested ?? deps.wechatConfig(req).adapter;
+			const ready = await deps.wechatReady(req);
 			const adapterReady = adapter === "publish-note-imgs" ? ready.adapters.publishNoteImgs : ready.adapters.publishNote;
 			if (!ready.opencli.ok || !adapterReady) {
 				const stale = ready.adapters.stale ?? [];
@@ -8167,6 +8395,11 @@ function registerRoutes(ctx, deps) {
 			path: `${ROUTE_PREFIX}/session/summary`,
 			handler: guardHandler(handleSessionSummary)
 		}),
+		ctx.webServer.register({
+			kind: "exact",
+			path: `${ROUTE_PREFIX}/session/wiki`,
+			handler: guardHandler(handleSessionWikiRoute)
+		}),
 		ctx.webServer.register({
 			kind: "exact",
 			path: `${ROUTE_PREFIX}/agent/sessions`,
@@ -8717,7 +8950,7 @@ function registerAdminRoutes(ctx, deps) {
 	const handleState = async (req, res) => {
 		try {
 			if (rejectNonRead(req, res)) return;
-			const wikiPath = deps.getWikiPath();
+			const wikiPath = deps.getWikiPath(req);
 			const [info, catalog] = await Promise.all([readWikiInfo(wikiPath), bundledCatalog(deps.twRoot())]);
 			let git = null;
 			try {
@@ -8729,8 +8962,12 @@ function registerAdminRoutes(ctx, deps) {
 			} catch {
 				git = null;
 			}
-			const view = deps.server.status();
-			const themeActive = await readActiveThemeName(deps.getClient());
+			const view = deps.server(req)?.status() ?? {
+				status: "stopped",
+				wikiPath,
+				logs: []
+			};
+			const themeActive = await readActiveThemeName(deps.getClient(req));
 			const runtimePlugins = await scanWikiRuntimePlugins(wikiPath);
 			json(res, {
 				ok: true,
@@ -8746,8 +8983,8 @@ function registerAdminRoutes(ctx, deps) {
 				},
 				catalog,
 				runtimePlugins,
-				config: maskConfigSecrets(deps.config.get()),
-				configError: deps.config.parseError() ?? null,
+				config: maskConfigSecrets(deps.config(req).get()),
+				configError: deps.config(req).parseError() ?? null,
 				git
 			});
 		} catch (err) {
@@ -8761,7 +8998,7 @@ function registerAdminRoutes(ctx, deps) {
 		try {
 			if (rejectCrossSiteWrite(req, res, ["POST"])) return;
 			const body = JSON.parse(await readBody(req));
-			const wikiPath = deps.getWikiPath();
+			const wikiPath = deps.getWikiPath(req);
 			let info;
 			try {
 				info = await readWikiInfo(wikiPath);
@@ -8827,14 +9064,16 @@ function registerAdminRoutes(ctx, deps) {
 			if (changed) {
 				await writeWikiInfo(wikiPath, info);
 				await drainThenStop({
-					client: deps.getClient(),
-					tiddlersDir: join(deps.getWikiPath(), "tiddlers"),
-					stop: () => deps.server.restart(),
+					client: deps.getClient(req),
+					tiddlersDir: join(deps.getWikiPath(req), "tiddlers"),
+					stop: async () => {
+						await deps.server(req)?.restart();
+					},
 					log: (message) => console.warn("[dsh-tiddlywiki]", message)
 				});
 			}
 			if (Array.isArray(body.themes) && activatedTheme !== void 0) {
-				const client = deps.getClient();
+				const client = deps.getClient(req);
 				if (client !== void 0) await client.put({
 					title: "$:/theme",
 					text: `$:/themes/${activatedTheme}`,
@@ -8845,7 +9084,7 @@ function registerAdminRoutes(ctx, deps) {
 				});
 			}
 			if (Array.isArray(body.languages)) {
-				const client = deps.getClient();
+				const client = deps.getClient(req);
 				if (client !== void 0) {
 					const langs = info.languages ?? [];
 					await pinLanguageTiddler(client, langs.length > 0 ? `$:/languages/${langs[0]}` : "$:/languages/en-GB", (message, err) => {
@@ -8853,7 +9092,7 @@ function registerAdminRoutes(ctx, deps) {
 						else console.warn("[dsh-tiddlywiki] pinning $:/language failed:", err);
 					});
 					const hint = langs.length > 0 ? langs[0] : "";
-					if ((deps.config.get().uiLanguage ?? "") !== hint) await deps.config.set(client, { uiLanguage: hint }).catch(() => void 0);
+					if ((deps.config(req).get().uiLanguage ?? "") !== hint) await deps.config(req).set(client, { uiLanguage: hint }).catch(() => void 0);
 				}
 			}
 			json(res, {
@@ -8876,7 +9115,7 @@ function registerAdminRoutes(ctx, deps) {
 		try {
 			if (rejectCrossSiteWrite(req, res, ["POST"])) return;
 			const body = JSON.parse(await readBody(req));
-			const client = deps.getClient();
+			const client = deps.getClient(req);
 			if (client === void 0) {
 				json(res, {
 					ok: false,
@@ -8885,11 +9124,11 @@ function registerAdminRoutes(ctx, deps) {
 				return;
 			}
 			const patch = normalizeConfigPatch(body);
-			await deps.config.set(client, stripMaskedSecrets(patch, deps.config.get()));
+			await deps.config(req).set(client, stripMaskedSecrets(patch, deps.config(req).get()));
 			deps.onConfigChanged?.();
 			json(res, {
 				ok: true,
-				config: maskConfigSecrets(deps.config.get())
+				config: maskConfigSecrets(deps.config(req).get())
 			});
 		} catch (err) {
 			if (err instanceof ConfigPatchError) {
@@ -8916,14 +9155,16 @@ function registerAdminRoutes(ctx, deps) {
 		try {
 			if (rejectCrossSiteWrite(req, res, ["POST"])) return;
 			const drained = await drainThenStop({
-				client: deps.getClient(),
-				tiddlersDir: join(deps.getWikiPath(), "tiddlers"),
-				stop: () => deps.server.restart(),
+				client: deps.getClient(req),
+				tiddlersDir: join(deps.getWikiPath(req), "tiddlers"),
+				stop: async () => {
+					await deps.server(req)?.restart();
+				},
 				log: (message) => console.warn("[dsh-tiddlywiki]", message)
 			});
 			json(res, {
 				ok: true,
-				status: deps.server.status().status,
+				status: deps.server(req)?.status().status,
 				drained
 			});
 		} catch (err) {
@@ -8941,7 +9182,7 @@ function registerAdminRoutes(ctx, deps) {
 	const handleSeeds = async (req, res) => {
 		try {
 			if (rejectNonRead(req, res)) return;
-			const client = deps.getClient();
+			const client = deps.getClient(req);
 			if (client === void 0) {
 				json(res, {
 					ok: false,
@@ -8971,7 +9212,7 @@ function registerAdminRoutes(ctx, deps) {
 			const body = JSON.parse(await readBody(req));
 			const id = typeof body.id === "string" && body.id.trim().length > 0 ? body.id.trim() : void 0;
 			const force = body.force === true;
-			const client = deps.getClient();
+			const client = deps.getClient(req);
 			if (client === void 0) {
 				json(res, {
 					ok: false,
@@ -8984,11 +9225,13 @@ function registerAdminRoutes(ctx, deps) {
 			let restarted = false;
 			let restartError;
 			if (needsRestartAfterSeeds(results)) try {
-				if (!await waitForFileWrite(join(deps.getWikiPath(), "tiddlers", "$__plugins_dsh_render.json"), 8e3, 150, seedStartedAt)) console.warn("[dsh-tiddlywiki] seeded render plugin file not seen on disk before restart");
+				if (!await waitForFileWrite(join(deps.getWikiPath(req), "tiddlers", "$__plugins_dsh_render.json"), 8e3, 150, seedStartedAt)) console.warn("[dsh-tiddlywiki] seeded render plugin file not seen on disk before restart");
 				if (!await drainThenStop({
 					client,
-					tiddlersDir: join(deps.getWikiPath(), "tiddlers"),
-					stop: () => deps.server.restart(),
+					tiddlersDir: join(deps.getWikiPath(req), "tiddlers"),
+					stop: async () => {
+						await deps.server(req)?.restart();
+					},
 					log: (message) => console.warn("[dsh-tiddlywiki]", message)
 				})) console.warn("[dsh-tiddlywiki] seed writes may not have been flushed before restart");
 				restarted = true;
@@ -9021,7 +9264,7 @@ function registerAdminRoutes(ctx, deps) {
 			if (rejectCrossSiteWrite(req, res, ["POST"])) return;
 			const body = JSON.parse(await readBody(req));
 			const id = typeof body.id === "string" && body.id.trim().length > 0 ? body.id.trim() : void 0;
-			const client = deps.getClient();
+			const client = deps.getClient(req);
 			if (client === void 0) {
 				json(res, {
 					ok: false,
@@ -9071,7 +9314,7 @@ function registerAdminRoutes(ctx, deps) {
 					}, 400);
 					return;
 				}
-				const prompt = deps.getPrompt?.(normalizePromptPreview(body));
+				const prompt = deps.getPrompt?.(normalizePromptPreview(body), req);
 				if (prompt === void 0) {
 					json(res, {
 						ok: false,
@@ -9090,7 +9333,7 @@ function registerAdminRoutes(ctx, deps) {
 				return;
 			}
 			if (rejectNonRead(req, res)) return;
-			const prompt = deps.getPrompt?.();
+			const prompt = deps.getPrompt?.(void 0, req);
 			if (prompt === void 0) {
 				json(res, {
 					ok: false,
@@ -9163,7 +9406,7 @@ function registerAdminRoutes(ctx, deps) {
 			});
 			json(res, result.ok ? {
 				...result,
-				status: deps.server.status().status
+				status: deps.server(req)?.status().status
 			} : result, result.ok ? 200 : 400);
 		} catch (err) {
 			json(res, {
@@ -9189,7 +9432,7 @@ function registerAdminRoutes(ctx, deps) {
 			const result = await deps.wiki.reset();
 			json(res, result.ok ? {
 				...result,
-				status: deps.server.status().status
+				status: deps.server(req)?.status().status
 			} : result, result.ok ? 200 : 400);
 		} catch (err) {
 			json(res, {
@@ -9198,6 +9441,94 @@ function registerAdminRoutes(ctx, deps) {
 			}, errorStatus(err));
 		}
 	};
+	/**
+	* GET /dsh-tiddlywiki/admin/wikis — the knowledge-base LIST as the settings
+	* page edits it: the CONTROL FILE's contents (mode / list / default), which is
+	* NOT the same as what is running. Read-only + CSRF-hardened.
+	*/
+	const handleWikis = async (req, res) => {
+		try {
+			if (rejectNonRead(req, res)) return;
+			if (deps.wikis === void 0) {
+				json(res, {
+					ok: false,
+					error: "知识库列表不可用"
+				}, 503);
+				return;
+			}
+			json(res, {
+				ok: true,
+				...await deps.wikis.info()
+			});
+		} catch (err) {
+			json(res, {
+				ok: false,
+				error: err instanceof Error ? err.message : String(err)
+			}, 500);
+		}
+	};
+	/**
+	* POST /dsh-tiddlywiki/admin/wikis { action, … } — add / update / remove /
+	* set-default / set-mode. ONE action per request (see `applyWikiAction`): the
+	* page then cannot post an inconsistent list, and every mutation goes through
+	* the same validation the boot path uses.
+	*
+	* A REFUSED action is a 400 with the reason. A change whose new wiki fails to
+	* START is still 200: the list is saved and the failure is reported in
+	* `change.errors` — refusing the save would silently discard the user's edit
+	* for a problem they can fix by restarting the wiki.
+	*/
+	const handleWikisApply = async (req, res) => {
+		try {
+			if (deps.wikis === void 0) {
+				json(res, {
+					ok: false,
+					error: "知识库列表不可用"
+				}, 503);
+				return;
+			}
+			let body;
+			try {
+				body = JSON.parse(await readBody(req));
+			} catch {
+				json(res, {
+					ok: false,
+					error: "请求体必须是 JSON"
+				}, 400);
+				return;
+			}
+			const result = await deps.wikis.apply(body);
+			if (!result.ok) {
+				json(res, {
+					ok: false,
+					error: result.error
+				}, 400);
+				return;
+			}
+			json(res, {
+				ok: true,
+				...result.info,
+				change: result.change
+			});
+		} catch (err) {
+			json(res, {
+				ok: false,
+				error: err instanceof Error ? err.message : String(err)
+			}, errorStatus(err));
+		}
+	};
+	/**
+	* `/admin/wikis` takes BOTH methods on ONE registration: the host webserver
+	* dispatches by pathname only, and registering the same exact path twice would
+	* throw `duplicate exact route`.
+	*/
+	const handleWikisRoute = async (req, res) => {
+		if ((req.method ?? "GET").toUpperCase() === "POST") {
+			if (rejectCrossSiteWrite(req, res, ["POST"])) return;
+			return handleWikisApply(req, res);
+		}
+		return handleWikis(req, res);
+	};
 	const disposers = [
 		ctx.webServer.register({
 			kind: "exact",
@@ -9209,6 +9540,11 @@ function registerAdminRoutes(ctx, deps) {
 			path: `${ROUTE_PREFIX}/admin/prompt`,
 			handler: guardHandler(handlePrompt)
 		}),
+		ctx.webServer.register({
+			kind: "exact",
+			path: `${ROUTE_PREFIX}/admin/wikis`,
+			handler: guardHandler(handleWikisRoute)
+		}),
 		ctx.webServer.register({
 			kind: "exact",
 			path: `${ROUTE_PREFIX}/admin/wiki/location`,
@@ -10411,6 +10747,50 @@ function insertIntoSection(base, heading, addition) {
 function registerTiddlywikiTools(ctx, deps) {
 	const disposers = [];
 	REGISTERED_TOOL_SUMMARY.length = 0;
+	/**
+	* Give EVERY tool result a 「知识库：…」 header — but only when more than one
+	* knowledge base is visible to the agent (v0.28.0).
+	*
+	* Done HERE, once, instead of inside 15 renders: a tool result is the only
+	* place the model can learn WHICH knowledge base it just wrote to, and "wrote
+	* into the wrong wiki" is the failure this feature most needs to make visible.
+	* With a single visible wiki (`ambiguous === false`) the output stays
+	* byte-identical to before, so existing installs see no change at all.
+	*/
+	const withScopeHeader = (tool) => {
+		const render = tool.output?.render;
+		const execute = tool.execute;
+		if (render === void 0 || execute === void 0) return tool;
+		return {
+			...tool,
+			async execute(args, exec) {
+				const scope = deps.scope(sessionIdOf(exec));
+				const value = await execute(args, exec);
+				if (!scope.ambiguous || scope.id === void 0) return value;
+				if (value === null || typeof value !== "object") return value;
+				return {
+					...value,
+					wiki: {
+						id: scope.id,
+						label: scope.label ?? scope.id
+					}
+				};
+			},
+			output: {
+				...tool.output,
+				render(args, value) {
+					const lines = render(args, value);
+					const wiki = value?.wiki;
+					if (wiki === void 0 || lines.length === 0) return lines;
+					const [first, ...rest] = lines;
+					return [{
+						...first,
+						text: `【知识库：${wiki.label}（${wiki.id}）】\n${first.text}`
+					}, ...rest];
+				}
+			}
+		};
+	};
 	const register = (tool) => {
 		const properties = tool.parameters.properties ?? {};
 		const required = Array.isArray(tool.parameters.required) ? tool.parameters.required : [];
@@ -10421,14 +10801,14 @@ function registerTiddlywikiTools(ctx, deps) {
 				required: required.includes(name)
 			}))
 		});
-		disposers.push(ctx.tools.register(tool));
+		disposers.push(ctx.tools.register(withScopeHeader(tool)));
 	};
 	/** Every read/write tool needs a live TW client — shared guard for the 8
 	*  wiki-facing tools (git tools operate on the repo path instead). */
-	const requireWiki = () => {
-		const wiki = deps.wiki();
-		if (wiki === void 0) throw new Error("TiddlyWiki 服务未运行（tiddlywiki_status 可查）");
-		return wiki;
+	const requireWiki = (sessionId) => {
+		const scope = deps.scope(sessionId);
+		if (scope.client === void 0) throw new Error(scope.reason ?? "TiddlyWiki 服务未运行（tiddlywiki_status 可查）");
+		return scope.client;
 	};
 	register(defineTool({
 		name: "tiddlywiki_search",
@@ -10492,7 +10872,7 @@ function registerTiddlywikiTools(ctx, deps) {
 			}];
 		} },
 		execute: async (args, exec) => {
-			const wiki = requireWiki();
+			const wiki = requireWiki(sessionIdOf(exec));
 			const options = {
 				tags: args.tags,
 				tag: args.tag,
@@ -10556,8 +10936,8 @@ function registerTiddlywikiTools(ctx, deps) {
 				text: lines.join("\n")
 			}];
 		} },
-		execute: async (args) => {
-			const items = await requireWiki().recent(args.limit ?? 15, args.since);
+		execute: async (args, exec) => {
+			const items = await requireWiki(sessionIdOf(exec)).recent(args.limit ?? 15, args.since);
 			return {
 				since: args.since ?? null,
 				results: items.map((t) => ({
@@ -10589,8 +10969,8 @@ function registerTiddlywikiTools(ctx, deps) {
 				text: lines.join("\n")
 			}];
 		} },
-		execute: async (args) => {
-			const stats = await requireWiki().tagStats();
+		execute: async (args, exec) => {
+			const stats = await requireWiki(sessionIdOf(exec)).tagStats();
 			const limit = typeof args.limit === "number" && Number.isFinite(args.limit) ? Math.max(1, Math.min(Math.floor(args.limit), 1e3)) : 200;
 			const tags = stats.tags.slice(0, limit);
 			return {
@@ -10638,8 +11018,8 @@ function registerTiddlywikiTools(ctx, deps) {
 				text: lines.join("\n")
 			}];
 		} },
-		execute: async (args) => {
-			const t = await requireWiki().get(args.title);
+		execute: async (args, exec) => {
+			const t = await requireWiki(sessionIdOf(exec)).get(args.title);
 			if (t === void 0) return {
 				notFound: true,
 				title: args.title,
@@ -10719,7 +11099,7 @@ function registerTiddlywikiTools(ctx, deps) {
 			}];
 		} },
 		execute: async (args, exec) => {
-			const wiki = requireWiki();
+			const wiki = requireWiki(sessionIdOf(exec));
 			if (args.title.trim().length === 0) throw new Error("tiddlywiki_put: title 不能为空");
 			const existing = await wiki.get(args.title);
 			assertNoConflict(args.title, existing, {
@@ -10812,7 +11192,7 @@ function registerTiddlywikiTools(ctx, deps) {
 			}];
 		} },
 		execute: async (args, exec) => {
-			const wiki = requireWiki();
+			const wiki = requireWiki(sessionIdOf(exec));
 			const list = Array.isArray(args.items) ? args.items : [];
 			if (list.length === 0) return {
 				ok: true,
@@ -10935,8 +11315,8 @@ function registerTiddlywikiTools(ctx, deps) {
 				text: lines.join("\n")
 			}];
 		} },
-		execute: async (args) => {
-			const wiki = requireWiki();
+		execute: async (args, exec) => {
+			const wiki = requireWiki(sessionIdOf(exec));
 			const { oldTitle, newTitle } = args;
 			if (oldTitle === newTitle) return {
 				ok: true,
@@ -11043,8 +11423,8 @@ function registerTiddlywikiTools(ctx, deps) {
 			type: "text",
 			text: value.trashed === true ? `已把 tiddler「${value.title}」移入回收站（$:/dsh-tiddlywiki/trash/，可用 tiddlywiki_trash action=restore 恢复）。` : `已永久删除 tiddler「${value.title}」。`
 		}] },
-		execute: async (args) => {
-			const wiki = requireWiki();
+		execute: async (args, exec) => {
+			const wiki = requireWiki(sessionIdOf(exec));
 			const existing = await wiki.get(args.title);
 			assertNoConflict(args.title, existing, {
 				expectedModified: args.expectedModified,
@@ -11121,8 +11501,8 @@ function registerTiddlywikiTools(ctx, deps) {
 				text: lines.join("\n")
 			}];
 		} },
-		execute: async (args) => {
-			const wiki = requireWiki();
+		execute: async (args, exec) => {
+			const wiki = requireWiki(sessionIdOf(exec));
 			const index = await readTrashIndex(wiki);
 			if (!index.readOk) throw new TrashIndexUnavailableError();
 			if (index.corrupted) throw new Error("回收站索引已损坏（JSON 解析失败），本次操作已中止以免误删记录；可手动检查 $:/dsh-tiddlywiki/trash-index 后重试。");
@@ -11237,7 +11617,7 @@ function registerTiddlywikiTools(ctx, deps) {
 			}];
 		} },
 		execute: async (args, exec) => {
-			const wiki = requireWiki();
+			const wiki = requireWiki(sessionIdOf(exec));
 			const title = args.title.trim();
 			if (title.length === 0) throw new Error("tiddlywiki_append: title 不能为空");
 			const existing = await wiki.get(title);
@@ -11312,8 +11692,8 @@ function registerTiddlywikiTools(ctx, deps) {
 				text: lines.join("\n")
 			}];
 		} },
-		execute: async (args) => {
-			const wiki = requireWiki();
+		execute: async (args, exec) => {
+			const wiki = requireWiki(sessionIdOf(exec));
 			const target = args.title.trim();
 			if (target.length === 0) throw new Error("tiddlywiki_backlinks: title 不能为空");
 			const includeTags = args.includeTags !== false;
@@ -11395,8 +11775,8 @@ function registerTiddlywikiTools(ctx, deps) {
 				text: lines.join("\n")
 			}];
 		} },
-		execute: async (args) => {
-			const wiki = requireWiki();
+		execute: async (args, exec) => {
+			const wiki = requireWiki(sessionIdOf(exec));
 			const title = args.title.trim();
 			if (title.length === 0) throw new Error("tiddlywiki_attach: title 不能为空");
 			const hasPath = typeof args.path === "string" && args.path.trim().length > 0;
@@ -11497,8 +11877,8 @@ function registerTiddlywikiTools(ctx, deps) {
 				text: lines.join("\n")
 			}];
 		} },
-		execute: async (args) => {
-			const wiki = requireWiki();
+		execute: async (args, exec) => {
+			const wiki = requireWiki(sessionIdOf(exec));
 			const limit = Math.max(1, Math.min(args.limit ?? 10, 100));
 			const requested = Array.isArray(args.checks) ? args.checks.filter((c) => typeof c === "string" && c.trim().length > 0).map((c) => c.trim()) : [];
 			const unknownChecks = requested.filter((c) => !LINT_CHECKS.includes(c));
@@ -11664,17 +12044,31 @@ function registerTiddlywikiTools(ctx, deps) {
 			}
 		},
 		output: { render: (_args, value) => renderSync(value) },
-		execute: async (args) => {
+		execute: async (args, exec) => {
 			const dir = deps.wikiPath();
-			/** Restart TW after a pull that changed the tree (stale snapshot drop). */
+			/**
+			* Restart the RUNNING wikis whose content this pull changed.
+			*
+			* `changedFiles` is what makes this correct with several knowledge bases in
+			* one repository: restarting "the wiki I happened to pull from" would miss
+			* the one that actually changed, and would interrupt a wiki nothing
+			* happened to (v0.28.0).
+			*/
 			const restartIfChanged = async (pulled) => {
-				if (pulled.changed !== true || deps.restartWiki === void 0) return {};
+				if (pulled.changed !== true) return {};
+				if (deps.restartAffected === void 0) return {};
 				try {
-					await flushPendingWrites(requireWiki(), join(dir, "tiddlers")).catch(() => void 0);
-					await deps.restartWiki();
-					return { restarted: true };
+					await flushPendingWrites(requireWiki(sessionIdOf(exec)), join(dir, "tiddlers")).catch(() => void 0);
+					const outcome = await deps.restartAffected(dir, pulled.changedFiles ?? []);
+					return {
+						...outcome.restarted.length > 0 ? { restarted: outcome.restarted } : {},
+						...outcome.failed.length > 0 ? { restartFailed: outcome.failed } : {}
+					};
 				} catch (err) {
-					return { restartError: err instanceof Error ? err.message : String(err) };
+					return { restartFailed: [{
+						id: "(全部)",
+						message: err instanceof Error ? err.message : String(err)
+					}] };
 				}
 			};
 			switch (args.action) {
@@ -11768,7 +12162,7 @@ function registerTiddlywikiTools(ctx, deps) {
 				text: lines.join("\n")
 			}];
 		} },
-		execute: async (args) => {
+		execute: async (args, exec) => {
 			const dir = deps.wikiPath();
 			if (args.strategy === "list") return {
 				ok: true,
@@ -11850,8 +12244,8 @@ function renderSync(value) {
 	}
 	if (value.commit !== void 0) lines.push(`本地 commit: ${value.commit}`);
 	if (value.push !== void 0) lines.push(`远端 push: ${value.push}`);
-	if (value.changed === true) lines.push(value.restarted === true ? "本次 pull 拉取了新内容，TW 服务已自动重启（同端口），读取/搜索均为最新快照。" : "本次 pull 拉取了新内容，但 TW 服务未能自动重启（如需最新快照，请手动重启 TW）。");
-	if (value.restartError !== void 0) lines.push(`TW 重启失败: ${value.restartError}`);
+	if (value.changed === true) lines.push(value.restarted !== void 0 && value.restarted.length > 0 ? `本次 pull 拉取了新内容，已重启：${value.restarted.join("、")}（同端口），其读取/搜索均为最新快照。` : "本次 pull 拉取了新内容，但没有正在运行的知识库受影响（无需重启，或改动落在未运行的库里）。");
+	if (value.restartFailed !== void 0) for (const item of value.restartFailed) lines.push(`TW 重启失败：${item.id} —— ${item.message}`);
 	if (value.status !== void 0) {
 		lines.push(`状态: ${gitStatusBits(value.status)}`);
 		const s = value.status;
@@ -12091,104 +12485,566 @@ async function switchWiki(deps, input) {
 	};
 }
 //#endregion
-//#region src/index.ts
+//#region src/host/path-key.ts
 /**
-* dsh-tiddlywiki — host half.
+* Path comparison keys (v0.28.0).
 *
-* TiddlyWiki 5 as the DSH persistent knowledge base. Wiring:
-* - WikiServer spawns/kills/self-heals the TW 5 child process (loopback, auto
-*   port) and scaffolds the wiki folder on first run;
-* - the git face bootstraps the wiki folder as a repository and wires the
-*   debounced auto-committer;
-* - `tiddlywiki_*` agent tools + a system-prompt section;
-* - /dsh-tiddlywiki routes when a webServer is present.
+* WHY THIS IS ITS OWN MODULE: three places must agree on "is this the same
+* folder?" — the wiki registry (duplicate/nested entries), the repo grouping
+* (two wikis sharing one repository) and the farm's path-change detection. A
+* second copy of this rule is exactly the drift this repository keeps paying
+* for, so there is one function and everybody imports it.
 *
-* Export shape follows dsh-taskboard: a function/namespace plugin —
-* `name` / `inject` / `apply`, NO default export. Config arrives as the
-* second apply() argument (Cordis `runtime.callback(ctx, config)`).
+* THE RULES
+* ---------
+*   - separators normalised to `/` (git prints forward slashes on Windows);
+*   - trailing separators dropped (`D:/notes/` === `D:/notes`);
+*   - **case-insensitive everywhere**, deliberately: on Windows and default
+*     macOS two paths differing only in case ARE the same folder, and no honest
+*     setup has two knowledge bases there.
 *
-* Extra exports (WikiServer / TiddlyWebClient / GitFace / ...) exist for the
-* headless selftest and future reuse; the loader only reads name/inject/apply.
+* @module dsh-tiddlywiki/host/path-key
+*/
+/**
+* The comparison key for a path. NOT a path: never hand it to the filesystem —
+* on a case-sensitive filesystem a lowercased path may not exist.
+*/
+function pathComparisonKey(path) {
+	return path.replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase();
+}
+/** True when `candidate` is strictly inside `parent` (both are absolute paths). */
+function isInsidePath(parent, candidate) {
+	const from = pathComparisonKey(parent);
+	const to = pathComparisonKey(candidate);
+	if (from.length === 0 || to.length === 0) return false;
+	return to.startsWith(`${from}/`);
+}
+//#endregion
+//#region src/host/wiki-registry.ts
+/**
+* Multi-wiki registry (v0.28.0) — which knowledge bases exist, which one is the
+* default, and which of them the agent may see at all.
+*
+* WHY A FILE OUTSIDE EVERY WIKI
+* -----------------------------
+* Same reason as the single-location pointer (`host/wiki-location.ts`): the
+* settings page stores its overrides INSIDE the wiki it configures
+* (`$:/plugins/dsh-tiddlywiki/config`), so "which wikis exist / which is the
+* default" cannot live there — the answer must outlive every one of them.
+* The registry therefore lives next to the pointer:
+*
+*     $DSH_HOME/dsh-tiddlywiki/wikis.json
+*     { "version": 1, "defaultId": "main",
+*       "wikis": [ { "id": "main", "label": "工作", "root": "D:/notes",
+*                    "name": "main", "agentVisible": true, "autostart": true } ] }
+*
+* THREE SOURCES, ONE PRECEDENCE
+* -----------------------------
+*   wikis.json  >  legacy location.json (one `active` location)  >  cordis config default
+*
+* A user upgrading from a single-wiki install has only `location.json`; it is
+* migrated IN MEMORY into a one-entry registry (id `main`, agentVisible +
+* autostart true, so the upgrade reproduces the old behaviour exactly). The
+* caller writes the migrated registry back at its leisure — this module only
+* reads and validates.
+*
+* FAIL LOUD, DEGRADE TO A KNOWN-GOOD STATE
+* ----------------------------------------
+* A malformed registry is REPORTED and the fallback chain is used — it is
+* never silently acted upon (the same rule `readLocationState()` follows, and
+* for the same reason: a hand-edited JSON must not make the plugin boot
+* somewhere unexpected). Two severities:
+*
+*   - `fatal`    — the file is structurally unusable, or keeping it would be
+*                  DANGEROUS (duplicate id, two entries on one folder, nested
+*                  folders, a future schema version). → registry comes from
+*                  the fallback chain.
+*   - `warnings` — healed or skipped (one unparsable entry, `defaultId`
+*                  pointing at a wiki that is gone). → registry is usable.
+*
+* NESTED FOLDERS ARE REFUSED ON PURPOSE
+* -------------------------------------
+* Two registered wikis that contain one another (`D:/notes` and
+* `D:/notes/work`) are rejected rather than warned about: path-prefix
+* attribution becomes ambiguous for every git operation, and the OUTER wiki's
+* `git add -A` commits the inner wiki's tiddlers too (see the repo-keyed commit
+* model in `host/git.ts`). Both failure modes are silent and expensive, so the
+* cheapest correct answer is "no".
+*
+* @module dsh-tiddlywiki/host/wiki-registry
+*/
+/** Registry schema version (bumped only on an incompatible change). */
+const WIKI_REGISTRY_VERSION = 1;
+/** Id of the entry a migrated single-wiki install gets. */
+const DEFAULT_WIKI_ID = "main";
+/** The accepted modes, in declaration order (settings-page radio list). */
+const WIKI_MODES = ["single", "multi"];
+/** Mode assumed when the registry says nothing (upgrades, fresh installs). */
+const DEFAULT_WIKI_MODE = "single";
+/** Default registry file: `$DSH_HOME/dsh-tiddlywiki/wikis.json`. */
+function defaultRegistryFile() {
+	return dshHomePath("dsh-tiddlywiki", "wikis.json");
+}
+function isPlainObject(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+* Normalise/validate a wiki id, or undefined when unusable.
 *
-* @module dsh-tiddlywiki
+* Lowercased on purpose: the id is a URL path segment, and `/tw/Work/` vs
+* `/tw/work/` resolving to two different wikis on a case-insensitive Windows
+* filesystem would be a trap. Derivation (`deriveWikiId`) lowercases too, so a
+* round trip is stable.
 */
-/** Cordis plugin name (also the client loader id / profile row id). */
-const name = "dsh-tiddlywiki";
-/** Required host services (tool registry + prompt assembly). */
-const inject = ["tools", "systemPrompt"];
-/** 剪藏桥默认端口（与 seed 文档书签代码里的地址保持一致）。 */
-const CLIP_BRIDGE_DEFAULT_PORT = 8618;
+function normalizeWikiId(raw) {
+	if (typeof raw !== "string") return void 0;
+	const id = raw.trim().toLowerCase();
+	if (!/^[a-z0-9][a-z0-9._-]{0,63}$/.test(id)) return void 0;
+	return id;
+}
+/**
+* Wiki ids that must NOT be used, because a wiki id is a PATH SEGMENT of the
+* same-origin proxy (`/dsh-tiddlywiki/tw/<id>/…`) while the TW child serves its
+* own endpoints at its ROOT (`/status`, `/recipes/…`, `/files/…`). An id equal
+* to one of those would make `/tw/status` ambiguous: is it the default wiki's
+* TW status, or the wiki named `status`? Nothing in the request can tell them
+* apart, so the id is simply refused (v0.28.0).
+*
+* This list is what lets the proxy treat "first segment looks like a known id"
+* as the per-wiki form and everything else as a TW path.
+*/
+const RESERVED_WIKI_IDS = [
+	"status",
+	"recipes",
+	"bags",
+	"files",
+	"render",
+	"login",
+	"logout",
+	"favicon.ico",
+	"index.html",
+	"static",
+	"assets"
+];
+/** Filesystem-safe slug for a wiki id (may be empty for junk input). */
+function slugifyIdPart(raw) {
+	return String(raw ?? "").trim().toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/-{2,}/g, "-").replace(/^[-.]+|[-.]+$/g, "").slice(0, 48);
+}
 /**
-* Official plugin whose parser every note this plugin writes depends on
-* (`text/markdown`). `--init server` does NOT include it — see ensurePlugin().
+* Derive a unique wiki id from a folder name (or any label), avoiding `taken`.
+* Falls back to `wiki`, `wiki-2`, … when the slug is empty or already used.
 */
-const MARKDOWN_PLUGIN = "tiddlywiki/markdown";
-const DEFAULTS = {
-	wikiRoot: "",
-	wiki: "main",
-	port: 0,
-	git: {
-		autoCommit: true,
-		debounceMs: 6e4,
-		remote: "",
-		branch: "main"
-	},
-	note: {
-		tag: "inbox",
-		workspaceMark: true
-	},
-	bridge: {
-		enabled: false,
-		port: CLIP_BRIDGE_DEFAULT_PORT,
-		token: "",
-		tag: "clip"
-	},
-	ui: {
-		showQuickNote: true,
-		showQuickNoteDock: true,
-		quickNoteMode: "native",
-		sidebarLabel: "TiddlyWiki",
-		showPanelStatus: true,
-		showSyncButton: true,
-		followDshTheme: true,
-		darkPalette: DARK_PALETTE_DEFAULT,
-		tabLabel: "知识库",
-		showSessionTab: true,
-		showRightbarTab: true,
-		sendToAgent: { enabled: true },
-		allArticles: { pageSize: 10 }
-	},
-	startup: { readyTimeoutMs: READY_TIMEOUT_DEFAULT_MS },
-	wechat: {
-		enabled: false,
-		command: "opencli",
-		token: "",
-		adapter: "publish-note",
-		dsn: ""
-	},
-	uiLanguage: "",
-	auth: {
-		username: "",
-		password: ""
+function deriveWikiId(source, taken = []) {
+	const used = /* @__PURE__ */ new Set();
+	for (const reserved of RESERVED_WIKI_IDS) used.add(reserved);
+	for (const item of taken) {
+		const id = normalizeWikiId(item);
+		if (id !== void 0) used.add(id);
 	}
-};
+	const base = normalizeWikiId(slugifyIdPart(source)) ?? "wiki";
+	if (!used.has(base)) return base;
+	for (let n = 2; n < 1e4; n += 1) {
+		const candidate = `${base}-${n}`.slice(0, 64);
+		if (!used.has(candidate)) return candidate;
+	}
+	return `wiki-${Date.now().toString(36)}`.slice(0, 64);
+}
+/** The `{root, name}` location this entry points at. */
+function entryLocation(entry) {
+	return {
+		root: entry.root,
+		name: entry.name
+	};
+}
+/** Absolute folder this entry serves. */
+function entryPath(entry) {
+	return locationPath(entryLocation(entry));
+}
 /**
-* Resolve the DEFAULT wikiRoot: explicit config (env-expanded) else
-* $DSH_HOME/tiddlywiki. The runtime pointer file can override it — see
-* `readLocationState()` in host/wiki-location.ts.
+* Comparison key for duplicate/nesting detection — the SHARED one from
+* host/path-key.ts (the repo grouping and the farm's path-change check need the
+* same answer to "is this the same folder?", so there is exactly one rule).
+*
+* @see pathComparisonKey
 */
-function resolveWikiRoot(config) {
-	if (config.wikiRoot !== void 0 && config.wikiRoot.trim().length > 0) return expandEnvPath(config.wikiRoot.trim());
-	return dshHomePath("tiddlywiki");
+/** Display label for an entry that came without one. */
+function defaultLabel(location) {
+	if (location.name !== ".") return location.name.slice(0, 60);
+	return basename(locationPath(location)).slice(0, 60) || ".";
 }
 /**
-* Ensure the wiki's `.gitignore` covers TW's transient artifacts, WITHOUT
-* clobbering rules the user added.
+* Validate one entry. Missing `label` is derived, missing flags take their
+* defaults (`agentVisible` true, `autostart` false) — those are not errors.
+*/
+function normalizeEntry(input) {
+	if (!isPlainObject(input)) return { error: "条目必须是一个对象" };
+	const id = normalizeWikiId(input.id);
+	if (id === void 0) return { error: `知识库 id 非法（需以小写字母或数字开头，后接 a-z0-9._-，最长 64）：${JSON.stringify(input.id)}` };
+	if (RESERVED_WIKI_IDS.includes(id)) return { error: `知识库 id「${id}」被保留：它会和 TW 自己的根路径 /${id} 撞名，同源代理无法区分两者` };
+	const normalized = normalizeLocation({
+		root: input.root,
+		name: input.name
+	});
+	if (normalized.location === void 0) return { error: normalized.error ?? "位置非法" };
+	return { entry: {
+		id,
+		label: typeof input.label === "string" && input.label.trim().length > 0 ? input.label.trim().slice(0, 60) : defaultLabel(normalized.location),
+		root: normalized.location.root,
+		name: normalized.location.name,
+		agentVisible: input.agentVisible !== false,
+		autostart: input.autostart === true
+	} };
+}
+/**
+* Duplicate-folder and nested-folder problems across a candidate entry list.
+*
+* Nested = one entry's folder is strictly inside another's. Checked in both
+* directions and reported once per pair (the outer entry is named first).
+*/
+function findPathConflicts(entries) {
+	const problems = [];
+	const byKey = /* @__PURE__ */ new Map();
+	for (const entry of entries) {
+		const path = entryPath(entry);
+		const key = pathComparisonKey(path);
+		const duplicate = byKey.get(key);
+		if (duplicate !== void 0) {
+			problems.push(`知识库「${entry.id}」与「${duplicate.id}」指向同一个目录：${path}`);
+			continue;
+		}
+		byKey.set(key, entry);
+	}
+	const unique = [...byKey.values()];
+	for (const outer of unique) {
+		const outerPath = entryPath(outer);
+		for (const inner of unique) {
+			if (inner === outer) continue;
+			if (!isInsidePath(outerPath, entryPath(inner))) continue;
+			problems.push(`知识库「${inner.id}」位于「${outer.id}」目录内部（${entryPath(inner)} ⊂ ${entryPath(outer)}）：嵌套登记会让外层知识库的 git 一并提交内层内容，已拒绝`);
+		}
+	}
+	return problems;
+}
+/**
+* Validate a parsed registry object.
+*
+* Structural/ambiguous problems are FATAL (empty `registry`): a duplicate id,
+* two entries on one folder, nested folders, a future schema version, or a
+* list where nothing parses. Per-entry junk and a stale `defaultId` are healed
+* and reported as warnings, because dropping one wiki is recoverable while
+* refusing to boot is not.
+*/
+function validateRegistry(input) {
+	const fatal = [];
+	const warnings = [];
+	if (!isPlainObject(input)) return {
+		fatal: ["清单必须是一个 JSON 对象"],
+		warnings
+	};
+	const rawVersion = input.version;
+	if (typeof rawVersion === "number" && Number.isFinite(rawVersion) && rawVersion > 1) return {
+		fatal: [`清单版本 ${rawVersion} 由更新版本的插件写入，本版本（1）无法安全读取`],
+		warnings
+	};
+	if (!Array.isArray(input.wikis) || input.wikis.length === 0) return {
+		fatal: ["清单里没有任何知识库（wikis 必须是非空数组）"],
+		warnings
+	};
+	const entries = [];
+	const seenIds = /* @__PURE__ */ new Set();
+	for (const [index, item] of input.wikis.entries()) {
+		const normalized = normalizeEntry(item);
+		if (normalized.entry === void 0) {
+			warnings.push(`跳过第 ${index + 1} 个条目：${normalized.error}`);
+			continue;
+		}
+		if (seenIds.has(normalized.entry.id)) return {
+			fatal: [`知识库 id 重复：${normalized.entry.id}`],
+			warnings
+		};
+		seenIds.add(normalized.entry.id);
+		entries.push(normalized.entry);
+	}
+	if (entries.length === 0) return {
+		fatal: warnings.length > 0 ? [...warnings, "没有任何条目可用"] : ["清单里没有任何可用的知识库"],
+		warnings
+	};
+	const conflicts = findPathConflicts(entries);
+	if (conflicts.length > 0) return {
+		fatal: conflicts,
+		warnings
+	};
+	const rawDefault = typeof input.defaultId === "string" ? input.defaultId.trim().toLowerCase() : "";
+	let defaultId = rawDefault;
+	if (!seenIds.has(defaultId)) {
+		if (rawDefault.length > 0) warnings.push(`defaultId「${rawDefault}」不在清单里，已回退到「${entries[0]?.id ?? "main"}」`);
+		defaultId = entries[0]?.id ?? "main";
+	}
+	const rawMode = input.mode;
+	let mode = DEFAULT_WIKI_MODE;
+	if (rawMode !== void 0) if (rawMode === "single" || rawMode === "multi") mode = rawMode;
+	else warnings.push(`未知的 mode「${String(rawMode)}」，已按 ${DEFAULT_WIKI_MODE} 处理`);
+	return {
+		registry: {
+			version: 1,
+			mode,
+			defaultId,
+			wikis: entries
+		},
+		fatal,
+		warnings
+	};
+}
+/** One localised entry for the current location, or undefined. */
+function findEntry(registry, id) {
+	if (typeof id !== "string") return void 0;
+	const key = id.trim().toLowerCase();
+	return registry.wikis.find((entry) => entry.id === key);
+}
+/** The default entry (falls back to the first when `defaultId` dangles). */
+function defaultEntry(registry) {
+	return findEntry(registry, registry.defaultId) ?? registry.wikis[0];
+}
+/** Insert or replace one entry by id (immutable); `defaultId` stays valid. */
+function upsertWiki(registry, entry) {
+	const index = registry.wikis.findIndex((item) => item.id === entry.id);
+	const wikis = index >= 0 ? registry.wikis.map((item, i) => i === index ? entry : item) : [...registry.wikis, entry];
+	const defaultId = findEntry({
+		...registry,
+		wikis
+	}, registry.defaultId) !== void 0 ? registry.defaultId : wikis[0]?.id ?? entry.id;
+	return {
+		...registry,
+		defaultId,
+		wikis
+	};
+}
+/**
+* Drop one entry (immutable). Refuses to empty the list — the plugin always
+* needs at least one wiki — and re-points `defaultId` when it was removed.
+*/
+function removeWiki(registry, id) {
+	const target = findEntry(registry, id);
+	if (target === void 0) return { error: `知识库「${String(id)}」不在清单里` };
+	if (registry.wikis.length <= 1) return { error: "至少要保留一个知识库" };
+	const wikis = registry.wikis.filter((entry) => entry !== target);
+	const defaultId = target.id === registry.defaultId ? wikis[0]?.id ?? target.id : registry.defaultId;
+	return { registry: {
+		...registry,
+		defaultId,
+		wikis
+	} };
+}
+/**
+* Apply ONE action to a registry, purely (v0.28.0).
+*
+* Pure on purpose: the side effects (write the file, reconcile the farm) stay in
+* the host wiring, so the RULES — which id gets derived, what a duplicate means,
+* what a folder move may collide with — are unit-testable in milliseconds
+* (`scripts/verify-wiki-registry.mjs`).
+*
+* Every action re-runs `validateRegistry()` on the RESULT, because a change can
+* create exactly the situations the registry exists to refuse: two entries on
+* one folder, or one entry nested inside another.
+*/
+function applyWikiAction(registry, input) {
+	if (!isPlainObject(input) || typeof input.action !== "string") return { error: "动作必须是一个带 action 字段的对象" };
+	const action = input.action;
+	const finish = (next) => {
+		const validated = validateRegistry(next);
+		if (validated.registry === void 0) return { error: validated.fatal.join("；") };
+		return { registry: validated.registry };
+	};
+	if (action === "add") {
+		const raw = isPlainObject(input.wiki) ? input.wiki : void 0;
+		if (raw === void 0) return { error: "add 需要 wiki 字段" };
+		const id = normalizeWikiId(raw.id) ?? deriveWikiId(typeof raw.label === "string" && raw.label.trim().length > 0 ? raw.label : raw.name, registry.wikis.map((entry) => entry.id));
+		if (findEntry(registry, id) !== void 0) return { error: `知识库「${id}」已存在（改它请用 update）` };
+		const normalized = normalizeEntry({
+			...raw,
+			id
+		});
+		if (normalized.entry === void 0) return { error: normalized.error ?? "条目非法" };
+		return finish({
+			...registry,
+			wikis: [...registry.wikis, normalized.entry]
+		});
+	}
+	if (action === "update") {
+		const raw = isPlainObject(input.wiki) ? input.wiki : void 0;
+		if (raw === void 0) return { error: "update 需要 wiki 字段" };
+		const id = normalizeWikiId(raw.id);
+		if (id === void 0) return { error: "update 必须带一个合法的 id" };
+		if (findEntry(registry, id) === void 0) return { error: `知识库「${id}」不在清单里（新增请用 add）` };
+		const normalized = normalizeEntry({
+			...raw,
+			id
+		});
+		if (normalized.entry === void 0) return { error: normalized.error ?? "条目非法" };
+		return finish(upsertWiki(registry, normalized.entry));
+	}
+	if (action === "remove") {
+		const removed = removeWiki(registry, input.id);
+		if (removed.registry === void 0) return { error: removed.error ?? "删除失败" };
+		return finish(removed.registry);
+	}
+	if (action === "set-default") {
+		const target = findEntry(registry, input.id);
+		if (target === void 0) return { error: `知识库「${String(input.id)}」不在清单里，无法设为默认` };
+		return finish({
+			...registry,
+			defaultId: target.id
+		});
+	}
+	if (action === "set-mode") {
+		if (input.mode !== "single" && input.mode !== "multi") return { error: `mode 只能是 ${WIKI_MODES.join(" 或 ")}（收到 ${JSON.stringify(input.mode)}）` };
+		return finish({
+			...registry,
+			mode: input.mode
+		});
+	}
+	return { error: `未知动作「${action}」（可用：add / update / remove / set-default / set-mode）` };
+}
+/**
+* A one-entry registry for a single location (migration / first run).
+*
+* `mode` defaults to `single` — a migrated install must reproduce exactly the
+* behaviour it had before the registry existed.
+*/
+function singleEntryRegistry(location, id = DEFAULT_WIKI_ID, mode = DEFAULT_WIKI_MODE) {
+	const resolved = normalizeLocation({
+		root: location.root,
+		name: location.name
+	}).location ?? {
+		root: location.root,
+		name: location.name
+	};
+	const entryId = normalizeWikiId(id) ?? "main";
+	return {
+		version: 1,
+		mode,
+		defaultId: entryId,
+		wikis: [{
+			id: entryId,
+			label: defaultLabel(resolved),
+			root: resolved.root,
+			name: resolved.name,
+			agentVisible: true,
+			autostart: true
+		}]
+	};
+}
+/** Write the registry atomically (tmp + rename, mkdir -p). */
+async function writeRegistry(registry, file = defaultRegistryFile()) {
+	const payload = JSON.stringify({
+		...registry,
+		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+	}, null, 2);
+	await mkdir(dirname(file), { recursive: true });
+	const tmp = `${file}.tmp`;
+	await writeFile(tmp, payload, "utf8");
+	await rename(tmp, file);
+}
+/**
+* Read + validate the registry, falling back through `location.json` to the
+* cordis default. Never throws: every failure is a reported error plus a
+* usable one-entry registry.
+*/
+async function readRegistry(deps) {
+	const file = deps.file ?? defaultRegistryFile();
+	const legacyFile = deps.legacyFile ?? defaultLocationStateFile();
+	/**
+	* The chain below the registry: legacy pointer, then the cordis default.
+	* `reason` is prepended so the user learns WHY the registry was ignored.
+	*/
+	const fallbackChain = async (reason, warnings) => {
+		const legacy = await readLocationState(legacyFile);
+		const legacyWarnings = legacy.error !== void 0 ? [legacy.error] : [];
+		if (legacy.active !== void 0) return {
+			registry: singleEntryRegistry(legacy.active, DEFAULT_WIKI_ID),
+			source: "legacy",
+			...reason.length > 0 ? { error: `${reason}；已回退到位置指针文件里的知识库（${locationPath(legacy.active)}）` } : {},
+			warnings: [...warnings, ...legacyWarnings]
+		};
+		return {
+			registry: singleEntryRegistry(deps.fallback, DEFAULT_WIKI_ID),
+			source: "default",
+			...reason.length > 0 ? { error: `${reason}；已回退到配置默认知识库（${locationPath(deps.fallback)}）` } : {},
+			warnings: [...warnings, ...legacyWarnings]
+		};
+	};
+	let raw;
+	try {
+		raw = await readFile(file, "utf8");
+	} catch (err) {
+		if (err.code !== "ENOENT") return fallbackChain(`知识库清单读不到（${file}）：${err instanceof Error ? err.message : String(err)}`, []);
+		return fallbackChain("", []);
+	}
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return fallbackChain(`知识库清单不是合法 JSON（${file}）`, []);
+	}
+	const validated = validateRegistry(parsed);
+	if (validated.registry === void 0) return fallbackChain(`知识库清单不可用（${validated.fatal.join("；")}）`, validated.warnings);
+	const warnings = validated.warnings;
+	return {
+		registry: validated.registry,
+		source: "file",
+		...warnings.length > 0 ? { error: warnings.join("；") } : {},
+		warnings
+	};
+}
+//#endregion
+//#region src/host/wiki-instance.ts
+/**
+* One knowledge base's runtime (v0.28.0) — the "wiki farm" replaces the single
+* `WikiServer` + client + config + committer quartet that used to live as loose
+* closure variables inside `apply()`.
+*
+* WHAT IS PER-WIKI, AND WHAT IS NOT
+* ---------------------------------
+* Per instance (everything that holds a folder or a port):
+*
+*   - `WikiServer`      one TW child process, one loopback port;
+*   - `TiddlyWebClient` the REST client for THAT port;
+*   - `ConfigStore`     the wiki's own `$:/plugins/dsh-tiddlywiki/config`
+*                       overlay (which is why per-wiki config already worked
+*                       before this refactor — it just was not addressable);
+*   - fs watcher for its own folder (the AUTO-COMMITTER is per REPOSITORY — see
+*     host/repo-committers.ts — because several wikis may share one repository
+*     and only one `git add -A` per repository may run);
 *
-* This used to rewrite the whole file on every start, silently deleting any
-* custom ignore rules the user had put in `wiki/.gitignore`. Now the file is
-* only touched when one of the managed lines is missing, and the user's own
-* content is preserved verbatim.
+* Shared by the whole plugin, therefore NOT here:
+*
+*   - `GitFace`  — every method takes the directory as an argument, so it is
+*                  stateless; M2 keys the COMMITTER by repository, not by wiki;
+*   - the clip bridge (one listener on one port) and the WeChat runner;
+*   - the registered agent tools, routes and the prompt section (singletons by
+*     construction: the host rejects a duplicate tool/route/section name).
+*
+* LIFECYCLE CONTRACT
+* ------------------
+*   start()   server.start → load config tiddler → bootstrap seeds → git → arm extras
+*   restart() drain the syncer queue, THEN restart (ironclad rule #1)
+*   stop()    drain, then stop, then release the extras
+*   dispose() flush a pending commit, release extras, stop the child
+*
+* A failed `start()` must not leave a half-wired instance behind: the caller
+* decides whether to roll back, and `dispose()` is idempotent.
+*
+* @module dsh-tiddlywiki/host/wiki-instance
+*/
+/**
+* Official plugin whose parser every note this plugin writes depends on
+* (`text/markdown`). `--init server` does NOT include it — see ensurePlugin().
+*/
+const MARKDOWN_PLUGIN = "tiddlywiki/markdown";
+/**
+* Ensure the wiki's `.gitignore` covers TW's transient artifacts, WITHOUT
+* clobbering rules the user added. Only touched when one of the managed lines
+* is missing; the user's own content is preserved verbatim.
 */
 const MANAGED_GITIGNORE_LINES = [
 	"tiddlers/$__temp_*",
@@ -12215,7 +13071,19 @@ async function writeGitignore(wikiPath) {
 	].join("\n");
 	await writeFile(file, `${current.length === 0 ? "" : current.endsWith("\n") ? `${current}\n` : `${current}\n\n`}${block}`, "utf8");
 }
-/** Watch the wiki folders and touch the auto-committer on changes. */
+/**
+* Watch one wiki's folders and touch the auto-committer on changes.
+*
+* ALWAYS attach an 'error' listener: `fs.watch` reports failures (Windows EPERM,
+* Linux ENOSPC when the inotify watch limit is exhausted) as an ASYNC 'error'
+* event, which a surrounding try/catch cannot catch. Node rethrows an unhandled
+* 'error' as an uncaught exception, and the host installs no handler → the whole
+* `dsh web` process dies. Degrading to "no watcher" is safe: our own writes still
+* call `touch()`.
+*
+* ⚠️ With N wikis there are N watchers. On Linux the inotify watch limit is a
+* real ceiling; the degradation above is what keeps that survivable.
+*/
 function watchWiki(wikiPath, onChange) {
 	const watchers = [];
 	for (const dir of [join(wikiPath, "tiddlers"), wikiPath]) try {
@@ -12231,17 +13099,1157 @@ function watchWiki(wikiPath, onChange) {
 		} catch {}
 	};
 }
+/** One knowledge base: its child process, client, config overlay and committer. */
+var WikiInstance = class WikiInstance {
+	options;
+	/** The TW child process this knowledge base runs on its own loopback port. */
+	server;
+	/** This wiki's own `$:/plugins/dsh-tiddlywiki/config` overlay. */
+	config;
+	entryValue;
+	wikiPath;
+	clientCache;
+	clientPort;
+	unwatch;
+	disposed = false;
+	log;
+	constructor(options) {
+		this.options = options;
+		this.entryValue = options.entry;
+		this.wikiPath = entryPath(options.entry);
+		this.log = options.log ?? ((message) => {
+			console.warn("[dsh-tiddlywiki]", message);
+		});
+		this.server = new WikiServer({
+			wikiRoot: options.entry.root,
+			wiki: options.entry.name,
+			port: 0,
+			username: options.base.auth.username,
+			password: options.base.auth.password,
+			readyTimeoutMs: options.base.startup.readyTimeoutMs
+		});
+		this.config = new ConfigStore({
+			note: options.base.note,
+			git: options.base.git,
+			ui: options.base.ui,
+			uiLanguage: options.base.uiLanguage,
+			bridge: options.base.bridge,
+			startup: options.base.startup,
+			wechat: options.base.wechat
+		});
+	}
+	/** Registry entry currently served (id/label/flags live here). */
+	get entry() {
+		return this.entryValue;
+	}
+	/** Absolute folder of this wiki. */
+	get path() {
+		return this.wikiPath;
+	}
+	/** True once {@link dispose} ran: no path may spawn or start anything after it. */
+	get isDisposed() {
+		return this.disposed;
+	}
+	/** Folder key used by the repo-keyed git model (M2). */
+	get tiddlersDir() {
+		return join(this.wikiPath, "tiddlers");
+	}
+	/** Effective config = cordis base overlaid with THIS wiki's config tiddler. */
+	eff() {
+		return this.config.get();
+	}
+	/** The note tag new notes get here (config tiddler overrides the base). */
+	noteTag() {
+		const tag = this.eff().note?.tag;
+		return typeof tag === "string" && tag.trim().length > 0 ? tag : this.options.base.note.tag;
+	}
+	/**
+	* Whether agent-created notes get the automatic workspace marker (v0.24.0):
+	* tag `ws/<project>` + field `workspace`. Default ON; an explicit `false` in
+	* this wiki's config tiddler wins.
+	*/
+	workspaceMark() {
+		const value = this.eff().note?.workspaceMark;
+		return typeof value === "boolean" ? value : this.options.base.note.workspaceMark;
+	}
+	/**
+	* Effective clip-bridge config for THIS wiki. Used per request by the shared
+	* bridge: enabled/token/tag apply immediately; only the port is fixed at
+	* startup (the listener binds once, plugin-wide).
+	*/
+	bridgeConfig() {
+		const b = this.eff().bridge ?? {};
+		const port = typeof b.port === "number" && Number.isInteger(b.port) && b.port > 0 && b.port < 65536 ? b.port : this.options.base.bridge.port;
+		const token = typeof b.token === "string" ? b.token : "";
+		const tag = typeof b.tag === "string" && b.tag.trim().length > 0 ? b.tag.trim() : this.options.base.bridge.tag;
+		return {
+			enabled: b.enabled === true,
+			port,
+			token,
+			tag
+		};
+	}
+	/**
+	* Effective UI flags from a config overlay.
+	*
+	* STATIC on purpose (v0.28.0): the plugin also needs them when NO wiki is
+	* running — a stopped farm must answer the settings page with the cordis base
+	* values instead of inventing them, and duplicating this mapping in index.ts
+	* is exactly the kind of drift this repo keeps paying for.
+	*/
+	static uiDefaultsFrom(base, ui = {}) {
+		const palette = typeof ui.darkPalette === "string" && ui.darkPalette.trim().length > 0 ? ui.darkPalette.trim() : DARK_PALETTE_DEFAULT;
+		const label = typeof ui.sidebarLabel === "string" && ui.sidebarLabel.trim().length > 0 ? ui.sidebarLabel.trim() : base.ui.sidebarLabel;
+		const tabLabel = typeof ui.tabLabel === "string" && ui.tabLabel.trim().length > 0 ? ui.tabLabel.trim() : base.ui.tabLabel;
+		const quickNoteMode = ui.quickNoteMode === "card" ? "card" : "native";
+		return {
+			showQuickNote: ui.showQuickNote !== false,
+			showQuickNoteDock: ui.showQuickNoteDock !== false,
+			quickNoteMode,
+			sidebarLabel: label,
+			showPanelStatus: ui.showPanelStatus !== false,
+			showSyncButton: ui.showSyncButton !== false,
+			followDshTheme: ui.followDshTheme !== false,
+			darkPalette: palette,
+			tabLabel,
+			showSessionTab: ui.showSessionTab !== false,
+			showRightbarTab: ui.showRightbarTab !== false
+		};
+	}
+	/** Effective UI flags for THIS wiki. */
+	uiDefaults() {
+		return WikiInstance.uiDefaultsFrom(this.options.base, this.eff().ui);
+	}
+	/** Effective 公众号发布 config for THIS wiki (read per request). */
+	wechatConfig() {
+		return normalizeWechatConfig(this.eff().wechat);
+	}
+	/** This wiki's send-to-agent switch / shared token. */
+	sendToAgent() {
+		const s2a = this.eff().ui?.sendToAgent ?? {};
+		return {
+			enabled: s2a.enabled !== false,
+			token: typeof s2a.token === "string" ? s2a.token : ""
+		};
+	}
+	/** Whether the wechat feature is on for this wiki (gates seeds + prompt line). */
+	wechatEnabled() {
+		return (this.eff().wechat ?? {}).enabled === true;
+	}
+	/**
+	* Lazy TW client. Rebuilt whenever the bound PORT changes (a crash before
+	* readiness makes the child re-probe a free port, so a cached client must not
+	* stay pinned to a dead one). Credentials are attached preemptively: with
+	* `auth.username` configured the child runs behind `readers`/`writers`, so
+	* EVERY request needs Basic auth.
+	*/
+	client() {
+		const port = this.server.currentPort;
+		if (port === void 0) return void 0;
+		if (this.clientCache === void 0 || this.clientPort !== port) {
+			this.clientCache = new TiddlyWebClient(`http://127.0.0.1:${port}`, {
+				username: this.options.base.auth.username,
+				password: this.options.base.auth.password
+			});
+			this.clientPort = port;
+		}
+		return this.clientCache;
+	}
+	/** Drop the cached client (its cached listing belongs to the old folder). */
+	resetClient() {
+		this.clientCache = void 0;
+		this.clientPort = void 0;
+	}
+	/**
+	* Point this instance at another folder. THROWS while the child runs — the
+	* switch orchestrator stops it first (see host/wiki-switch.ts).
+	*/
+	updateEntry(entry) {
+		const nextPath = entryPath(entry);
+		if (nextPath !== this.wikiPath) {
+			this.server.setLocation({
+				root: entry.root,
+				name: entry.name
+			});
+			this.wikiPath = nextPath;
+			this.resetClient();
+		}
+		this.entryValue = entry;
+	}
+	/** Re-apply the effective readiness window (next start/restart). */
+	applyServerTuning() {
+		this.server.setReadyTimeout(this.eff().startup?.readyTimeoutMs);
+	}
+	/**
+	* Debounced auto-commit touch for this wiki's folder. Routed to the
+	* REPOSITORY's committer (several wikis may share one repository).
+	*/
+	touchAutoCommit() {
+		this.options.touchCommit?.(this.wikiPath);
+	}
+	/** Flush this wiki's repository commit now (teardown / explicit sync). */
+	async flushCommitter() {
+		try {
+			await this.options.flushCommits?.(this.wikiPath);
+		} catch {}
+	}
+	/**
+	* Arm the fs watcher for the CURRENT folder.
+	*
+	* The committer is NOT here any more (v0.28.0): it is per repository, in
+	* host/repo-committers.ts, and this watcher only reports "something changed in
+	* this wiki's folder" to it.
+	*/
+	setupExtras() {
+		this.unwatch = watchWiki(this.wikiPath, () => this.touchAutoCommit());
+	}
+	/** Release the fs watcher (the repository's committer outlives it). */
+	async teardownExtras() {
+		try {
+			this.unwatch?.();
+		} catch {}
+		this.unwatch = void 0;
+	}
+	/**
+	* Git bootstrap: repo init + initial commit + .gitignore (+ remote/first push).
+	* Kept per-wiki in M1; M2 makes it repo-keyed (two wikis may share one repo).
+	*/
+	async bootstrapGit() {
+		const g = this.eff().git ?? {};
+		const branch = g.branch ?? this.options.base.git.branch;
+		const remote = g.remote ?? this.options.base.git.remote;
+		if (!await this.options.git.isRepo(this.wikiPath)) {
+			await this.options.git.init(this.wikiPath, branch);
+			await writeGitignore(this.wikiPath);
+			await this.options.git.initialCommit(this.wikiPath);
+		} else await writeGitignore(this.wikiPath);
+		if (remote.trim().length > 0) {
+			const ensured = await this.options.git.ensureRemote(this.wikiPath, remote.trim());
+			if (ensured.ok) {
+				const first = await this.options.git.firstPush(this.wikiPath);
+				if (!first.ok) this.log(`first push failed (retry with tiddlywiki_git_sync): ${first.message}`);
+			} else this.log(`git remote setup: ${ensured.message}`);
+		}
+	}
+	/**
+	* Core-bootstrap this wiki: markdown parser plugin, the core + starter seeds,
+	* and the configured UI language.
+	*
+	* Only `render-route` needs a TW restart (it carries a SERVER route loaded at
+	* boot); plain-content seeds must NOT restart, or the syncer's unflushed REST
+	* writes would be lost.
+	*/
+	async bootstrapWiki() {
+		const seedClient = this.client();
+		if (seedClient === void 0) return;
+		let pluginAdded = false;
+		try {
+			pluginAdded = await ensurePlugin(this.wikiPath, this.options.twRoot(), MARKDOWN_PLUGIN);
+			if (pluginAdded) this.log(`enabled ${MARKDOWN_PLUGIN} for this wiki`);
+		} catch (err) {
+			this.log(`enabling ${MARKDOWN_PLUGIN}: ${err instanceof Error ? err.message : String(err)}`);
+		}
+		const seedStartedAt = Date.now();
+		const results = await runAllSeeds({
+			client: seedClient,
+			tools: tiddlywikiToolSummary(),
+			wechat: this.wechatEnabled(),
+			proxyBase: this.options.proxyBase?.() ?? TW_PROXY_PATH
+		});
+		for (const r of results) if (!r.ok) this.log(`seed ${r.id} failed: ${r.error ?? r.detail}`);
+		if (needsRestartAfterSeeds(results)) {
+			if (!await waitForFileWrite(join(this.wikiPath, "tiddlers", "$__plugins_dsh_render.json"), 8e3, 150, seedStartedAt)) this.log("seeded render plugin file not seen on disk before restart");
+			if (!await flushPendingWrites(seedClient, this.tiddlersDir)) this.log("seed writes may not have been flushed before restart");
+			if (!this.disposed) await this.server.restart();
+		} else if (pluginAdded) {
+			if (!this.disposed) await this.server.restart();
+		}
+		const uiLang = this.eff().uiLanguage;
+		if (typeof uiLang === "string" && uiLang.trim().length > 0) try {
+			const code = uiLang.trim();
+			if (await ensureLanguage(this.wikiPath, this.options.twRoot(), code) && !this.disposed) await this.server.restart();
+			const langClient = this.client();
+			if (langClient !== void 0) await pinLanguageTiddler(langClient, `$:/languages/${code}`, (message, err) => {
+				if (err === void 0) this.log(message);
+				else this.log(`pinning $:/language failed: ${err}`);
+			}).catch(() => void 0);
+		} catch (err) {
+			this.log(`applying uiLanguage: ${err instanceof Error ? err.message : String(err)}`);
+		}
+	}
+	/**
+	* Bring this wiki up: spawn the child, load its config overlay, bootstrap it,
+	* then arm the committer + watcher.
+	*
+	* Disposal-aware: teardown may run while this is awaiting (hot reload / dsh web
+	* exit within the first seconds), so the child is stopped rather than orphaned.
+	*/
+	async start() {
+		if (this.disposed) throw new Error(`知识库「${this.entryValue.id}」已卸载，无法启动`);
+		try {
+			await this.server.start();
+			if (this.disposed) {
+				await this.server.stop().catch(() => void 0);
+				return;
+			}
+			await this.config.load(this.client());
+			this.applyServerTuning();
+			await this.bootstrapWiki();
+		} finally {
+			if (!this.disposed) try {
+				await this.bootstrapGit();
+				if (!this.disposed) this.setupExtras();
+			} catch (err) {
+				this.log(`git bootstrap failed: ${err instanceof Error ? err.message : String(err)}`);
+			}
+		}
+	}
+	/**
+	* Drain the syncer queue, then restart the child (ironclad rule #1). Returns
+	* whether the store was provably quiescent, so callers can surface an
+	* incomplete drain instead of losing writes silently.
+	*/
+	async restart() {
+		return drainThenStop({
+			client: this.client(),
+			tiddlersDir: this.tiddlersDir,
+			stop: () => this.server.restart(),
+			log: this.log
+		});
+	}
+	/** Drain the syncer queue, then stop the child. */
+	async drainStop() {
+		return drainThenStop({
+			client: this.client(),
+			tiddlersDir: this.tiddlersDir,
+			stop: () => this.server.stop(),
+			log: this.log
+		});
+	}
+	/** Drain + stop + release the extras. */
+	async stop() {
+		await this.drainStop();
+		await this.teardownExtras();
+	}
+	/**
+	* Deterministic teardown. Idempotent: the plugin disposer and a rollback path
+	* may both call it.
+	*
+	* NOTE: this intentionally does NOT drain the syncer queue (the pre-v0.28
+	* teardown did not either) — it flushes the git committer and stops the child.
+	* Shutdown has a 5s grace in DSH, and a drain has its own bounded waits.
+	*/
+	async dispose() {
+		if (this.disposed) return;
+		this.disposed = true;
+		await this.flushCommitter();
+		await this.teardownExtras();
+		await this.server.stop().catch(() => void 0);
+	}
+};
+//#endregion
+//#region src/host/wiki-farm.ts
+/**
+* The multi-wiki farm (v0.28.0) — owns "which knowledge bases should be
+* RUNNING", and reconciles the running set against the registry.
+*
+* WHY THIS IS A SEPARATE, PURE-ORCHESTRATION CLASS
+* ------------------------------------------------
+* The dangerous part of multi-wiki is not spawning a process; it is the
+* DIFF — what to start, what to stop, what to leave alone, and what must be
+* recycled because its folder changed. Getting that wrong either leaks TW
+* children (orphan processes holding ports) or silently drops a wiki the user
+* still has open.
+*
+* So the farm knows nothing about TiddlyWiki: `createRuntime` is injected, and
+* `scripts/verify-wiki-farm.mjs` drives the whole reconciliation with fakes that
+* only record the calls they received. The rules can then be asserted in
+* milliseconds instead of minutes.
+*
+* THE RUNNING-SET RULES
+* ---------------------
+*   single mode → ONLY the default entry runs (the registry in single mode is
+*                 normally a one-entry registry synthesized from the legacy
+*                 pointer file, so this is defensive as well as correct).
+*   multi mode  → every entry with `autostart: true` runs at boot; anything
+*                 else starts on demand (`startEntry`) — e.g. when a human
+*                 opens that wiki's panel or a session is scoped to it.
+*
+* A FOLDER CHANGE RECYCLES THE RUNTIME. `WikiServer.setLocation()` refuses to
+* repoint while a child is running, and a running instance holds an fs watcher
+* + auto-committer on the OLD folder. Stopping and creating a fresh runtime is
+* the only sequence that cannot leave half the object describing wiki A while
+* the other half serves wiki B.
+*
+* ONE FAILURE MUST NOT TAKE THE FARM DOWN. A wiki that fails to start is KEPT
+* in the running map (its child may still be coming up — WikiServer arms a
+* late-ready watch) and the failure is reported in `FarmChange.errors`, so one
+* broken folder cannot stop the other knowledge bases from serving.
+*
+* @module dsh-tiddlywiki/host/wiki-farm
+*/
+/**
+* `T` is the concrete runtime type: the host instantiates
+* `WikiFarm<WikiInstance>` so it can reach instance-only members (config store,
+* bootstrap, committer) without a cast; tests instantiate the default with fakes.
+*/
+/**
+* The wiki id a request asks for (`?wiki=<id>`), or undefined when it asks for
+* none. Extracted so the host wiring and the verification harness read the
+* selector the SAME way — a second copy of "how do I parse ?wiki=" is exactly
+* the drift this repo keeps paying for.
+*/
+function wikiIdFromRequest(req) {
+	try {
+		const id = new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("wiki");
+		return id !== null && id.length > 0 ? id : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* Which runtime does this request target?
+*
+*   `?wiki=<id>` naming a RUNNING wiki → that one
+*   anything else (no selector, unknown id, wiki not running)
+*                                       → the farm's default runtime
+*
+* An unknown id falls back instead of 404ing on purpose: the selector comes
+* from links the user may have bookmarked, and a stale one must not strand them
+* on a broken editor. It also means `?wiki=` can never be used to reach a wiki
+* that is not running — starting one is an explicit action, not a side effect
+* of a GET.
+*/
+function targetRuntimeFor(farm, req) {
+	const id = wikiIdFromRequest(req);
+	if (id === void 0) return farm?.defaultRuntime();
+	return farm?.runtime(id) ?? farm?.defaultRuntime();
+}
+function resolveAgentScope(farm, scopes, sessionId) {
+	if (farm === void 0) return { reason: "知识库插件尚未就绪（还没读完清单）" };
+	const registry = farm.registry;
+	const byId = new Map(registry.wikis.map((entry) => [entry.id, entry]));
+	if (sessionId !== void 0) {
+		const wantedId = scopes[sessionId];
+		const explicit = wantedId === void 0 ? void 0 : byId.get(wantedId);
+		if (explicit !== void 0 && explicit.agentVisible) {
+			const runtime = farm.runtime(explicit.id);
+			if (runtime !== void 0) return {
+				runtime,
+				entry: explicit
+			};
+			return {
+				entry: explicit,
+				reason: `本会话作用域指定的知识库「${explicit.label}」当前没有运行，请先在界面上启动它再试`
+			};
+		}
+	}
+	const visible = registry.wikis.filter((entry) => entry.agentVisible);
+	if (visible.length === 0) return { reason: "当前没有对 Agent 可见的知识库（可在设置里把某个库设为对 Agent 可见）" };
+	const preferred = defaultEntry({
+		...registry,
+		wikis: visible
+	});
+	const order = preferred === void 0 ? visible : [preferred, ...visible.filter((entry) => entry.id !== preferred.id)];
+	for (const entry of order) {
+		const runtime = farm.runtime(entry.id);
+		if (runtime !== void 0) return {
+			runtime,
+			entry
+		};
+	}
+	return {
+		entry: order[0],
+		reason: `知识库「${order[0]?.label ?? ""}」当前没有运行，请先在界面上启动它再试`
+	};
+}
+var WikiFarm = class {
+	options;
+	registryValue;
+	runtimes = /* @__PURE__ */ new Map();
+	errors = [];
+	log;
+	constructor(registry, options) {
+		this.options = options;
+		this.registryValue = registry;
+		this.log = options.log ?? ((message) => {
+			console.warn("[dsh-tiddlywiki]", message);
+		});
+	}
+	/** The registry the farm is currently reconciling against. */
+	get registry() {
+		return this.registryValue;
+	}
+	/** Ids with a live runtime (order = start order). */
+	runningIds() {
+		return [...this.runtimes.keys()];
+	}
+	/** The runtime for `id`, or undefined when it is not running. */
+	runtime(id) {
+		return this.runtimes.get(id);
+	}
+	/** Every running runtime, in start order (plugin-wide tuning walks this). */
+	allRuntimes() {
+		return [...this.runtimes.values()];
+	}
+	/**
+	* The running wikis whose CONTENT a pull just touched (v0.28.0).
+	*
+	* `changedFiles` are REPOSITORY-relative (what `git diff --name-only` prints),
+	* and a wiki is affected when the absolute form of one of them lands inside
+	* its folder. With several wikis sharing one repository this is what keeps a
+	* pull from restarting — and interrupting whoever is editing — a wiki nothing
+	* happened to.
+	*/
+	affectedBy(repoRoot, changedFiles) {
+		if (changedFiles.length === 0) return [];
+		const affected = [];
+		for (const runtime of this.runtimes.values()) if (changedFiles.some((file) => isInsidePath(runtime.path, join(repoRoot, file)))) affected.push(runtime);
+		return affected;
+	}
+	/**
+	* The runtime legacy/agent traffic falls back to: the registry default when
+	* it is running, else the first running one. Undefined = nothing is up.
+	*/
+	defaultRuntime() {
+		const preferred = defaultEntry(this.registryValue);
+		if (preferred !== void 0) {
+			const match = this.runtimes.get(preferred.id);
+			if (match !== void 0) return match;
+		}
+		return this.runtimes.values().next().value;
+	}
+	/**
+	* Adopt a registry WITHOUT reconciling the running set.
+	*
+	* The single-mode folder switch MUST keep `switchWiki()`'s rollback semantics
+	* (stop → repoint → start → bootstrap, and on failure put the old wiki back),
+	* so it performs the move itself and only needs the farm to agree afterwards.
+	* Going through `apply()` there would reconcile a runtime the caller just
+	* repointed — stopping and rebuilding the very wiki it had just started.
+	*/
+	syncRegistry(next) {
+		this.registryValue = next;
+	}
+	/** May this entry run AT ALL under the current mode? (removed / mode flip) */
+	visible(entry) {
+		if (this.registryValue.mode === "multi") return true;
+		return entry.id === this.registryValue.defaultId;
+	}
+	/** Should this entry ATOMICALLY come up at boot (mode + autostart)? */
+	shouldRun(entry) {
+		if (!this.visible(entry)) return false;
+		if (this.registryValue.mode === "single") return true;
+		return entry.autostart === true;
+	}
+	/** Ids that boot with the plugin (settings page shows this as 「开局自启」). */
+	autoStartIds() {
+		return this.registryValue.wikis.filter((entry) => this.shouldRun(entry)).map((entry) => entry.id);
+	}
+	/**
+	* BOOT: start every entry the mode/autostart asks for.
+	*
+	* Nothing is running yet, so there is nothing to reconcile — this IS the
+	* "开局全起" rule, literally. `apply()` below is the config-CHANGE path and
+	* deliberately does less.
+	*/
+	async startAll() {
+		const change = {
+			started: [],
+			stopped: [],
+			updated: [],
+			running: [],
+			errors: []
+		};
+		this.errors = [];
+		for (const entry of this.registryValue.wikis) {
+			if (!this.shouldRun(entry)) continue;
+			await this.startEntry(entry);
+			change.started.push(entry.id);
+		}
+		change.running = this.runningIds();
+		change.errors = [...this.errors];
+		return change;
+	}
+	/**
+	* Reconcile the running set against `next` — a CONFIG CHANGE (add / edit /
+	* remove an entry, or flip the mode).
+	*
+	* The rules are deliberately the CONSERVATIVE ones, because a config edit is
+	* not a boot:
+	*
+	*   · an entry that is GONE, or hidden by a mode flip, must stop;
+	*   · an entry that is NEWLY ADDED and should auto-start does start;
+	*   · everything else keeps whatever running state it has —
+	*     turning `autostart` OFF does not kill a wiki the user has open
+	*     (`autostart` means "come up at boot"; the next boot honours the new
+	*     value), and re-saving an unrelated field never resurrects a wiki the
+	*     user stopped by hand;
+	*   · a folder change recycles the runtime (setLocation refuses while running).
+	*
+	* This was found by `scripts/verify-wiki-farm-boot.mjs`: re-asserting the boot
+	* rule on every save meant "I started C by hand, then added a wiki" silently
+	* stopped C. Explicit start/stop stay explicit (`startEntry`/`stopEntry`).
+	*/
+	async apply(next) {
+		const change = {
+			started: [],
+			stopped: [],
+			updated: [],
+			running: [],
+			errors: []
+		};
+		this.errors = [];
+		const previousIds = new Set(this.registryValue.wikis.map((entry) => entry.id));
+		this.registryValue = next;
+		const byId = new Map(next.wikis.map((entry) => [entry.id, entry]));
+		for (const id of [...this.runtimes.keys()]) {
+			const entry = byId.get(id);
+			if (entry === void 0 || !this.visible(entry)) {
+				await this.stopEntry(id);
+				change.stopped.push(id);
+			}
+		}
+		for (const entry of next.wikis) {
+			const runtime = this.runtimes.get(entry.id);
+			if (runtime === void 0) {
+				if (!previousIds.has(entry.id) && this.shouldRun(entry)) {
+					await this.startEntry(entry);
+					change.started.push(entry.id);
+				}
+				continue;
+			}
+			if (runtime.path !== entryPath(entry)) {
+				await this.stopEntry(entry.id);
+				change.stopped.push(entry.id);
+				if (this.shouldRun(entry)) {
+					await this.startEntry(entry);
+					change.started.push(entry.id);
+				}
+				continue;
+			}
+			runtime.updateEntry(entry);
+			change.updated.push(entry.id);
+		}
+		change.running = this.runningIds();
+		change.errors = [...this.errors];
+		return change;
+	}
+	/**
+	* Start ONE wiki on demand (a panel was opened, a session was scoped to it, a
+	* route named it). No-op when it is already running.
+	*/
+	async startEntry(entry) {
+		if (this.runtimes.has(entry.id)) return;
+		let runtime;
+		try {
+			runtime = this.options.createRuntime(entry);
+		} catch (err) {
+			this.record(entry.id, err);
+			return;
+		}
+		this.runtimes.set(entry.id, runtime);
+		try {
+			await runtime.start();
+		} catch (err) {
+			this.record(entry.id, err);
+		}
+	}
+	/** Stop one wiki (drain + stop) and release its runtime. No-op when absent. */
+	async stopEntry(id) {
+		const runtime = this.runtimes.get(id);
+		if (runtime === void 0) return;
+		this.runtimes.delete(id);
+		try {
+			if (runtime.isDisposed) return;
+			await runtime.stop();
+		} catch (err) {
+			this.record(id, err);
+		} finally {
+			try {
+				await runtime.dispose();
+			} catch (err) {
+				this.record(id, err);
+			}
+		}
+	}
+	/**
+	* Release every runtime (plugin teardown / disable). Idempotent, and it keeps
+	* going after a failure so one wedged wiki cannot leave the others running.
+	*/
+	async disposeAll() {
+		for (const id of [...this.runtimes.keys()]) await this.stopEntry(id);
+	}
+	record(id, err) {
+		const message = err instanceof Error ? err.message : String(err);
+		this.errors.push({
+			id,
+			message
+		});
+		this.log(`知识库「${id}」：${message}`);
+	}
+};
+//#endregion
+//#region src/host/session-scope.ts
+/**
+* Per-SESSION knowledge-base scope (v0.28.0) — which wiki a conversation works on.
+*
+* WHY A FILE OUTSIDE EVERY WIKI
+* -----------------------------
+* Same reason as the registry and the legacy pointer: the answer must not live
+* inside any single wiki (it would be unreadable while deciding which wiki to
+* talk to) and it must SURVIVE a `dsh web` restart — sessions are durable, so
+* "which knowledge base is this conversation using" has to be too.
+*
+*     $DSH_HOME/dsh-tiddlywiki/sessions.json
+*     { "version": 1, "sessions": { "<sessionId>": { "wikiId": "work", "at": "…" } } }
+*
+* FAIL SOFT, NEVER LOUD
+* ---------------------
+* This is a PREFERENCE, not configuration: a missing, malformed or unreadable
+* file simply means "no explicit scope" and every session falls back to the
+* farm's default wiki. It therefore never blocks anything and never throws —
+* unlike the registry, where a malformed file must be reported because it
+* decides WHERE the data lives.
+*
+* Stale entries are pruned on write (`SESSION_SCOPE_MAX_AGE_MS`): sessions come
+* and go, and this file has no other bound.
+*
+* @module dsh-tiddlywiki/host/session-scope
+*/
+/** Pointer-file schema version (bumped only on an incompatible change). */
+const SESSION_SCOPE_VERSION = 1;
+/** How long an untouched session→wiki mapping is kept (pruned on write). */
+const SESSION_SCOPE_MAX_AGE_MS = 2160 * 60 * 60 * 1e3;
+/** Default file: `$DSH_HOME/dsh-tiddlywiki/sessions.json`. */
+function defaultSessionScopeFile() {
+	return dshHomePath("dsh-tiddlywiki", "sessions.json");
+}
+/**
+* Is this a usable session id?
+*
+* Session ids reach here from HTTP (the GUI selector) and are used as JSON keys,
+* so they are validated rather than trusted. The charset mirrors the one the
+* session-summary route already enforces.
+*/
+function isSafeSessionId(id) {
+	return typeof id === "string" && /^[A-Za-z0-9._:-]{1,120}$/.test(id);
+}
+/** Is this a usable wiki id? (Shape only — the registry decides existence.) */
+function isSafeWikiId(id) {
+	return typeof id === "string" && /^[a-z0-9][a-z0-9._-]{0,63}$/.test(id);
+}
+/** Drop mappings older than `maxAgeMs` (or with an unusable timestamp). */
+function pruneScopes(state, now, maxAgeMs = SESSION_SCOPE_MAX_AGE_MS) {
+	const sessions = {};
+	for (const [sessionId, entry] of Object.entries(state.sessions)) {
+		const at = Date.parse(entry.at);
+		if (!Number.isFinite(at)) continue;
+		if (now - at > maxAgeMs) continue;
+		sessions[sessionId] = entry;
+	}
+	return {
+		version: 1,
+		sessions
+	};
+}
+/** Parse a stored document into the loose shape, dropping anything unusable. */
+function parseState(raw) {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return { error: "会话作用域文件不是合法 JSON" };
+	}
+	if (typeof parsed !== "object" || parsed === null) return { error: "会话作用域文件格式不对" };
+	const sessionsRaw = parsed.sessions;
+	if (typeof sessionsRaw !== "object" || sessionsRaw === null) return { error: "会话作用域文件缺少 sessions 字段" };
+	const sessions = {};
+	let skipped = 0;
+	for (const [sessionId, value] of Object.entries(sessionsRaw)) {
+		if (!isSafeSessionId(sessionId)) {
+			skipped += 1;
+			continue;
+		}
+		const entry = value;
+		if (entry === null || typeof entry !== "object" || !isSafeWikiId(entry.wikiId) || typeof entry.at !== "string") {
+			skipped += 1;
+			continue;
+		}
+		sessions[sessionId] = {
+			wikiId: entry.wikiId,
+			at: entry.at
+		};
+	}
+	return {
+		state: {
+			version: 1,
+			sessions
+		},
+		...skipped > 0 ? { error: `会话作用域文件里有 ${skipped} 条无效记录，已忽略` } : {}
+	};
+}
+/**
+* Read the mappings. Never throws: an unreadable/malformed file yields `{}` plus
+* an explanation (the caller may log it; nothing depends on this file).
+*/
+async function readSessionScopes(file = defaultSessionScopeFile()) {
+	let raw;
+	try {
+		raw = await readFile(file, "utf8");
+	} catch (err) {
+		if (err.code === "ENOENT") return { scopes: {} };
+		return {
+			scopes: {},
+			error: `会话作用域文件读不到（${file}）：${err instanceof Error ? err.message : String(err)}`
+		};
+	}
+	const parsed = parseState(raw);
+	if (parsed.state === void 0) return {
+		scopes: {},
+		...parsed.error !== void 0 ? { error: parsed.error } : {}
+	};
+	const scopes = {};
+	for (const [sessionId, entry] of Object.entries(parsed.state.sessions)) scopes[sessionId] = entry.wikiId;
+	return {
+		scopes,
+		...parsed.error !== void 0 ? { error: parsed.error } : {}
+	};
+}
+/** Write the state atomically (tmp + rename, mkdir -p). */
+async function writeSessionScopes(state, file = defaultSessionScopeFile()) {
+	const payload = JSON.stringify({
+		...state,
+		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+	}, null, 2);
+	await mkdir(dirname(file), { recursive: true });
+	const tmp = `${file}.tmp`;
+	await writeFile(tmp, payload, "utf8");
+	await rename(tmp, file);
+}
+/**
+* Point one session at a wiki, or clear its scope (`wikiId === undefined`).
+*
+* Reads, prunes and writes in one go — the file is tiny and this happens once
+* per selection, so a read-modify-write is cheaper than any locking scheme.
+* A write failure is REPORTED (the caller surfaces it) but changes nothing else:
+* the session simply keeps falling back to the default.
+*/
+async function setSessionScope(sessionId, wikiId, file = defaultSessionScopeFile()) {
+	if (!isSafeSessionId(sessionId)) throw new Error(`会话 id 非法：${JSON.stringify(sessionId)}`);
+	if (wikiId !== void 0 && !isSafeWikiId(wikiId)) throw new Error(`知识库 id 非法：${JSON.stringify(wikiId)}`);
+	const existing = await readFile(file, "utf8").catch(() => "");
+	const pruned = pruneScopes(existing.length > 0 ? parseState(existing).state ?? {
+		version: 1,
+		sessions: {}
+	} : {
+		version: 1,
+		sessions: {}
+	}, Date.now());
+	if (wikiId === void 0) delete pruned.sessions[sessionId];
+	else pruned.sessions[sessionId] = {
+		wikiId,
+		at: (/* @__PURE__ */ new Date()).toISOString()
+	};
+	await writeSessionScopes(pruned, file);
+}
+//#endregion
+//#region src/host/repo-committers.ts
+/**
+* ONE debounced auto-committer per REPOSITORY (v0.28.0).
+*
+* WHY NOT ONE PER WIKI
+* --------------------
+* Two knowledge bases may be subfolders of one repository (the "工作 + 个人 共用现有
+* 仓库、按文件夹物理划分" topology). Git then has ONE index, and `git add -A` run
+* from ANY subdirectory stages the WHOLE working tree — so two per-folder
+* committers would each commit the other's changes, and one of them would
+* forever report `nothing to commit`. The unit that can safely commit is the
+* REPOSITORY, so that is the unit this class keys on.
+*
+* It also decides where the commit runs: at the REPOSITORY ROOT, never in a
+* wiki subfolder (`commit(dir)` runs `git add -A` with `cwd = dir`).
+*
+* THE DIR → REPO LOOKUP IS ASYMMETRICALLY CACHED
+* ----------------------------------------------
+* A POSITIVE answer (this folder belongs to repo X) is cached forever. A
+* NEGATIVE one is not cached at all: `git init` happens moments after the first
+* touch in a fresh install, and a cached "not a repo" would silently disable
+* auto-commit for the rest of the session — exactly the class of bug this
+* repository has paid for more than once.
+*
+* @module dsh-tiddlywiki/host/repo-committers
+*/
+var RepoCommitters = class {
+	options;
+	/** Keyed by `pathComparisonKey(repoRoot)`. */
+	repos = /* @__PURE__ */ new Map();
+	/** Positive `dir → repoRoot` cache only (see the module header). */
+	dirToRepo = /* @__PURE__ */ new Map();
+	log;
+	constructor(options) {
+		this.options = options;
+		this.log = options.log ?? ((message) => {
+			console.warn("[dsh-tiddlywiki]", message);
+		});
+	}
+	/** Repositories with a live committer (diagnostics / tests). */
+	repoRoots() {
+		return [...this.repos.values()].map((state) => state.repoRoot);
+	}
+	/** The repository root owning `dir`, or undefined when it is not in one. */
+	async repoRootOf(dir) {
+		const key = pathComparisonKey(dir);
+		const cached = this.dirToRepo.get(key);
+		if (cached !== void 0) return cached;
+		const root = await this.options.git.repoRoot(dir);
+		if (root !== void 0) this.dirToRepo.set(key, root);
+		return root;
+	}
+	/**
+	* Debounced commit for the repository owning `dir`.
+	*
+	* Fire-and-forget friendly (the fs watcher calls it synchronously): the first
+	* call for a folder pays one `git rev-parse`, every later one is a Map hit.
+	*/
+	async touch(dir) {
+		(await this.stateFor(dir))?.committer.touch();
+	}
+	/** Commit now. Omit `dir` to flush every repository (teardown / switch). */
+	async flush(dir) {
+		if (dir === void 0) {
+			for (const state of this.repos.values()) try {
+				await state.committer.flush();
+			} catch {}
+			return;
+		}
+		const root = await this.repoRootOf(dir);
+		if (root === void 0) return;
+		try {
+			await this.repos.get(pathComparisonKey(root))?.committer.flush();
+		} catch {}
+	}
+	/**
+	* Rebuild every committer from the CURRENT settings (v0.25.0's "git.* takes
+	* effect on the running plugin"): `AutoCommitter` snapshots `enabled` and
+	* `debounceMs` at construction, so a settings-page save has to rebuild.
+	*/
+	rebuild() {
+		for (const [key, state] of [...this.repos]) {
+			state.committer.dispose();
+			this.repos.set(key, {
+				repoRoot: state.repoRoot,
+				committer: this.create(state.repoRoot)
+			});
+		}
+	}
+	/** Release every committer (plugin teardown). */
+	dispose() {
+		for (const state of this.repos.values()) state.committer.dispose();
+		this.repos.clear();
+		this.dirToRepo.clear();
+	}
+	create(repoRoot) {
+		const settings = this.options.settings(repoRoot);
+		return new AutoCommitter({
+			git: this.options.git,
+			dir: repoRoot,
+			enabled: settings.autoCommit,
+			debounceMs: settings.debounceMs,
+			message: this.options.message,
+			onError: (err) => this.log(`autocommit(${repoRoot}): ${err instanceof Error ? err.message : String(err)}`)
+		});
+	}
+	async stateFor(dir) {
+		const root = await this.repoRootOf(dir);
+		if (root === void 0) return void 0;
+		const key = pathComparisonKey(root);
+		const existing = this.repos.get(key);
+		if (existing !== void 0) return existing;
+		const state = {
+			repoRoot: root,
+			committer: this.create(root)
+		};
+		this.repos.set(key, state);
+		this.log(`自动提交按仓库分组：${root}`);
+		return state;
+	}
+};
+//#endregion
+//#region src/host/skill-install.ts
+/**
+* Ship the "split my wiki" skill into the user's skill root (v0.28.0).
+*
+* WHY A SKILL, AND WHY HERE
+* -------------------------
+* The feature the plugin needs to explain — "how do I split my existing wiki into
+* several" — is a multi-step conversation with a human, not a setting. DSH's
+* container for exactly that is a skill: the agent loads it on demand, it costs
+* nothing in the prompt budget when unused, and it lives in a directory the skill
+* provider already scans (`$DSH_HOME/skills`).
+*
+* The plugin CANNOT register a skill root (a cordis patch cannot compute install
+* paths), so the only zero-config path is writing the file into the user's root.
+*
+* NEVER CLOBBER ANYTHING THAT IS NOT OURS
+* ---------------------------------------
+* The shipped file carries a marker line (`dsh-tiddlywiki-skill:wiki-split`). This
+* installer writes only when the target is MISSING, IDENTICAL (no-op), or OURS
+* (marker present → update it). A file without the marker is left alone and the
+* result says so — the alternative (overwriting whatever is at that path) would
+* silently destroy a user's own skill the day they happen to pick our name.
+*
+* @module dsh-tiddlywiki/host/skill-install
+*/
+/** Directory name under the skill root (also the skill's stable identity). */
+const SPLIT_SKILL_DIR = "dsh-tiddlywiki-wiki-split";
+/** File name inside that directory (the skill provider's discovery contract). */
+const SKILL_FILE_NAME = "SKILL.md";
+/**
+* Marker proving a file at our target path is OURS. Present in the shipped
+* SKILL.md; a user who edits the skill can delete the line to take ownership
+* (and then the installer will never touch it again).
+*/
+const SPLIT_SKILL_MARKER = "dsh-tiddlywiki-skill:wiki-split";
+/** Where the file lives once installed: `$DSH_HOME/skills/<dir>/SKILL.md`. */
+function defaultSkillRoot() {
+	return dshHomePath("skills");
+}
+/**
+* Read the skill that ships inside this package.
+*
+* Two candidates because the same module runs from two places: `lib/index.js`
+* (published / loaded) has `skills/` as a SIBLING, while `src/host/*.ts` (tests
+* via tsx) sits two levels down. Returns undefined when neither exists.
+*/
+async function readBundledSkillText() {
+	for (const url of [new URL("../skills/wiki-split/SKILL.md", import.meta.url), new URL("../../skills/wiki-split/SKILL.md", import.meta.url)]) try {
+		return await readFile(fileURLToPath(url), "utf8");
+	} catch {}
+}
+/**
+* Install (or refresh) the split-wiki skill. Never throws: every problem comes
+* back as `action: 'failed'` with a message, because a skill that could not be
+* written must not take the plugin's startup down with it.
+*/
+async function installSplitSkill(options = {}) {
+	const path = join(options.root ?? defaultSkillRoot(), SPLIT_SKILL_DIR, SKILL_FILE_NAME);
+	const text = options.text ?? await readBundledSkillText();
+	if (text === void 0 || text.trim().length === 0) return {
+		path,
+		action: "failed",
+		error: "找不到随包提供的 SKILL.md（package 里缺 skills/wiki-split/SKILL.md）"
+	};
+	let existing;
+	try {
+		existing = await readFile(path, "utf8");
+	} catch (err) {
+		if (err.code !== "ENOENT") return {
+			path,
+			action: "failed",
+			error: `读不到 ${path}：${err instanceof Error ? err.message : String(err)}`
+		};
+	}
+	if (existing !== void 0) {
+		if (existing === text) return {
+			path,
+			action: "kept",
+			detail: "已是最新"
+		};
+		if (!existing.includes("dsh-tiddlywiki-skill:wiki-split")) return {
+			path,
+			action: "kept",
+			detail: "该路径已有你自己的文件（没有插件标记），未覆盖"
+		};
+	}
+	try {
+		await mkdir(dirname(path), { recursive: true });
+		const tmp = `${path}.tmp`;
+		await writeFile(tmp, text, "utf8");
+		await rename(tmp, path);
+	} catch (err) {
+		return {
+			path,
+			action: "failed",
+			error: err instanceof Error ? err.message : String(err)
+		};
+	}
+	return existing === void 0 ? {
+		path,
+		action: "written",
+		detail: "已安装「拆分知识库」skill"
+	} : {
+		path,
+		action: "updated",
+		detail: "已更新到随包版本"
+	};
+}
+//#endregion
+//#region src/index.ts
+/** Cordis plugin name (also the client loader id / profile row id). */
+const name = "dsh-tiddlywiki";
+/** Required host services (tool registry + prompt assembly). */
+const inject = ["tools", "systemPrompt"];
+/** 剪藏桥默认端口（与 seed 文档书签代码里的地址保持一致）。 */
+const CLIP_BRIDGE_DEFAULT_PORT = 8618;
+const DEFAULTS = {
+	wikiRoot: "",
+	wiki: "main",
+	port: 0,
+	git: {
+		autoCommit: true,
+		debounceMs: 6e4,
+		remote: "",
+		branch: "main"
+	},
+	note: {
+		tag: "inbox",
+		workspaceMark: true
+	},
+	bridge: {
+		enabled: false,
+		port: CLIP_BRIDGE_DEFAULT_PORT,
+		token: "",
+		tag: "clip"
+	},
+	ui: {
+		showQuickNote: true,
+		showQuickNoteDock: true,
+		quickNoteMode: "native",
+		sidebarLabel: "TiddlyWiki",
+		showPanelStatus: true,
+		showSyncButton: true,
+		followDshTheme: true,
+		darkPalette: DARK_PALETTE_DEFAULT,
+		tabLabel: "知识库",
+		showSessionTab: true,
+		showRightbarTab: true,
+		sendToAgent: { enabled: true },
+		allArticles: { pageSize: 10 }
+	},
+	startup: { readyTimeoutMs: READY_TIMEOUT_DEFAULT_MS },
+	wechat: {
+		enabled: false,
+		command: "opencli",
+		token: "",
+		adapter: "publish-note",
+		dsn: ""
+	},
+	uiLanguage: "",
+	auth: {
+		username: "",
+		password: ""
+	}
+};
 /**
-* Wait until a file exists on disk (polling), up to `timeoutMs`. TW's syncer
-* flushes REST writes to the filesystem on a ~250ms task timer, so a freshly
-* seeded tiddler is not on disk the moment PUT resolves — a caller that must
-* restart TW right after (so a seeded server route loads) has to wait for the
-* flush first, or the restarted TW would boot from a stale snapshot and the
-* seeded module would be missing.
-*
-* The implementation lives in host/seeds.ts (shared with the settings page's
-* seed-run route), which is where `waitForFileWrite` is imported from.
+* Resolve the DEFAULT wikiRoot: explicit config (env-expanded) else
+* $DSH_HOME/tiddlywiki. The runtime pointer file can override it — see
+* `readLocationState()` in host/wiki-location.ts.
 */
+function resolveWikiRoot(config) {
+	if (config.wikiRoot !== void 0 && config.wikiRoot.trim().length > 0) return expandEnvPath(config.wikiRoot.trim());
+	return dshHomePath("tiddlywiki");
+}
 /**
 * Mount the host half.
 * @param ctx - the plugin context (tools + systemPrompt injected).
@@ -12290,11 +14298,12 @@ function apply(ctx, rawConfig = {}) {
 			...rawConfig.wechat ?? {}
 		}
 	};
-	let wikiPath = join(config.wikiRoot, config.wiki);
-	/** Pointer file the runtime switch persists (outside every wiki, see wiki-location.ts). */
+	/** Pointer file the LEGACY single-wiki switch persists (wiki-location.ts). */
 	const locationStateFile = defaultLocationStateFile();
-	const git = new GitFace();
-	const configStore = new ConfigStore({
+	/** The multi-wiki control file: mode + the wiki list + the default id. */
+	const registryFile = defaultRegistryFile();
+	/** The cordis `config:` block, as the base layer of every wiki's config. */
+	const baseShape = {
 		note: config.note,
 		git: config.git,
 		ui: config.ui,
@@ -12302,56 +14311,77 @@ function apply(ctx, rawConfig = {}) {
 		bridge: config.bridge,
 		startup: config.startup,
 		wechat: config.wechat
-	});
-	const eff = () => configStore.get();
-	const effectiveNoteTag = () => {
-		const tag = eff().note?.tag;
-		return typeof tag === "string" && tag.trim().length > 0 ? tag : config.note.tag;
 	};
+	/** The cordis-level default location (last resort in the registry chain). */
+	const defaultLocation = {
+		root: config.wikiRoot,
+		name: config.wiki
+	};
+	const git = new GitFace();
 	/**
-	* Whether agent-created notes get the automatic workspace marker (v0.24.0):
-	* tag `ws/<project>` + field `workspace`. Default ON (cordis default true);
-	* the settings-page overlay can turn it off, and an explicit `false` there wins.
+	* Auto-commit is keyed by REPOSITORY, not by wiki (v0.28.0): several knowledge
+	* bases may be subfolders of one repository, and only one `git add -A` per
+	* repository may run (see host/repo-committers.ts).
 	*/
-	const effectiveWorkspaceMark = () => {
-		const value = eff().note?.workspaceMark;
-		return typeof value === "boolean" ? value : config.note.workspaceMark;
-	};
+	const repos = new RepoCommitters({
+		git,
+		/**
+		* Per REPOSITORY (v0.28.0): several knowledge bases may share one repository,
+		* so the setting is resolved from the first wiki INSIDE that repository (in
+		* list order — deterministic), falling back to the default wiki and then to
+		* the cordis base.
+		*
+		* Wikis in one repository disagreeing about `git.*` is almost always a
+		* mistake (a repository has ONE remote, ONE branch, ONE index), so it is
+		* called out rather than silently resolved.
+		*/
+		settings: (repoRoot) => {
+			const members = (farm?.registry.wikis ?? []).filter((entry) => entryIsInRepo(entry, repoRoot));
+			const chosen = members[0];
+			const runtimeConfig = (entry) => entry === void 0 ? void 0 : farm?.runtime(entry.id)?.eff();
+			const g = (runtimeConfig(chosen) ?? eff()).git ?? {};
+			if (members.length > 1) {
+				if (new Set(members.map((entry) => JSON.stringify(runtimeConfig(entry)?.git ?? {}))).size > 1) console.warn(`[dsh-tiddlywiki] 知识库 ${members.map((entry) => entry.id).join("、")} 共用同一个仓库（${repoRoot}），但各自配了不同的 git.* —— 一个仓库只有一份 git 设置，本次以「${chosen?.id ?? "默认库"}」为准`);
+			}
+			return {
+				autoCommit: g.autoCommit ?? config.git.autoCommit,
+				debounceMs: g.debounceMs ?? config.git.debounceMs
+			};
+		},
+		message: () => `wiki autocommit ${(/* @__PURE__ */ new Date()).toISOString()}`,
+		log: (message) => console.warn("[dsh-tiddlywiki]", message)
+	});
+	/** Created by the startup task, once the control file has been read. */
+	let farm;
+	/** The runtime legacy/agent traffic falls back to (undefined = nothing up). */
+	const defaultInstance = () => farm?.defaultRuntime();
+	const eff = () => defaultInstance()?.eff() ?? baseShape;
+	const effectiveWorkspaceMark = () => defaultInstance()?.workspaceMark() ?? config.note.workspaceMark;
+	const effectiveBridge = () => defaultInstance()?.bridgeConfig() ?? config.bridge;
+	/** sessionId → wikiId (v0.28.0). Loaded at boot, written by the GUI selector. */
+	let sessionScopes = {};
+	/** File the session scopes live in (outside every wiki, see session-scope.ts). */
+	const sessionScopeFile = defaultSessionScopeFile();
 	/**
-	* Effective bridge config (defaults + settings-page overlay). Used PER
-	* REQUEST by the clip bridge — enabled/token/tag edits on the settings page
-	* apply immediately; only the port is fixed at startup (listener binds once).
+	* What the AGENT may act on for one session: the client, the wiki's identity
+	* and — when there is none — an actionable reason.
+	*
+	* `ambiguous` is true when more than one knowledge base is visible; that is
+	* what makes every tool result (and the injected prompt) name the wiki. With a
+	* single visible wiki nothing changes, so existing installs see no difference.
 	*/
-	const effectiveBridge = () => {
-		const b = eff().bridge ?? {};
-		const port = typeof b.port === "number" && Number.isInteger(b.port) && b.port > 0 && b.port < 65536 ? b.port : config.bridge.port;
-		const token = typeof b.token === "string" ? b.token : "";
-		const tag = typeof b.tag === "string" && b.tag.trim().length > 0 ? b.tag.trim() : config.bridge.tag;
-		return {
-			enabled: b.enabled === true,
-			port,
-			token,
-			tag
-		};
-	};
-	const effectiveUi = () => {
-		const ui = eff().ui ?? {};
-		const palette = typeof ui.darkPalette === "string" && ui.darkPalette.trim().length > 0 ? ui.darkPalette.trim() : DARK_PALETTE_DEFAULT;
-		const label = typeof ui.sidebarLabel === "string" && ui.sidebarLabel.trim().length > 0 ? ui.sidebarLabel.trim() : config.ui.sidebarLabel;
-		const tabLabel = typeof ui.tabLabel === "string" && ui.tabLabel.trim().length > 0 ? ui.tabLabel.trim() : config.ui.tabLabel;
-		const quickNoteMode = ui.quickNoteMode === "card" ? "card" : "native";
+	const toolScope = (sessionId) => {
+		const resolution = resolveAgentScope(farm, sessionScopes, sessionId);
+		const visible = farm?.registry.wikis.filter((entry) => entry.agentVisible).length ?? 0;
+		const client = resolution.runtime?.client();
 		return {
-			showQuickNote: ui.showQuickNote !== false,
-			showQuickNoteDock: ui.showQuickNoteDock !== false,
-			quickNoteMode,
-			sidebarLabel: label,
-			showPanelStatus: ui.showPanelStatus !== false,
-			showSyncButton: ui.showSyncButton !== false,
-			followDshTheme: ui.followDshTheme !== false,
-			darkPalette: palette,
-			tabLabel,
-			showSessionTab: ui.showSessionTab !== false,
-			showRightbarTab: ui.showRightbarTab !== false
+			...client !== void 0 ? { client } : {},
+			...resolution.entry !== void 0 ? {
+				id: resolution.entry.id,
+				label: resolution.entry.label
+			} : {},
+			...client === void 0 ? { reason: resolution.reason ?? "知识库服务尚未就绪，请稍后重试" } : {},
+			ambiguous: visible > 1
 		};
 	};
 	const disposers = [];
@@ -12382,21 +14412,38 @@ function apply(ctx, rawConfig = {}) {
 	let disposePromptSection;
 	let currentPromptText;
 	/**
-	* Built text for the current effective config (also the saved-state preview).
-	* The signature catalogue for `full` mode comes from the live tool registry,
-	* never from hand-written prose (v0.21.0 — the old copy had drifted).
+	* The prompt section's text for ONE session.
+	*
+	* It is a FUNCTION (v0.28.0): the section is registered once, but the text is
+	* evaluated per assembly with that assembly's agent, so a session scoped to
+	* wiki B is told it is working on wiki B. Single-wiki installs get exactly the
+	* previous text — the scope line appears only when more than one knowledge
+	* base is visible.
 	*
-	* `wechat.enabled` (v0.23.0) is read here too: it is NOT a `prompt.*` field but
-	* it gates the publish rule, and the WeChat feature is opt-in + separately
-	* installed, so users who never enabled it must see no publishing text.
+	* Per-wiki `prompt.*` is honoured too: the config read is the SCOPE wiki's, so
+	* the 「每库定制提示词」decision from the design doc actually takes effect.
 	*/
-	const promptText = () => {
-		const cfg = eff();
-		return describePrompt({
+	const promptTextFor = (sessionId) => {
+		const scope = toolScope(sessionId);
+		const cfg = resolveAgentScope(farm, sessionScopes, sessionId).runtime?.eff() ?? baseShape;
+		return withScopeBanner(describePrompt({
 			...cfg.prompt ?? {},
 			wechat: (cfg.wechat ?? {}).enabled === true
-		}, tiddlywikiToolSummary()).text;
+		}, tiddlywikiToolSummary()).text, scope);
 	};
+	/**
+	* Built text for the DEFAULT scope (also the saved-state preview / the
+	* re-registration key). The signature catalogue for `full` mode comes from the
+	* live tool registry, never from hand-written prose (v0.21.0 — the old copy had
+	* drifted).
+	*/
+	const promptText = () => promptTextFor(void 0);
+	/**
+	* (Re-)register the section. The text is a function, so a scope change needs
+	* no re-registration at all; this still runs on config saves so the
+	* `system-prompt/change` signal (and the history re-render) fires, and the
+	* skip-if-unchanged check keeps an unrelated save from churning anything.
+	*/
 	const applyPrompt = () => {
 		const next = promptText();
 		if (next === currentPromptText) return;
@@ -12407,44 +14454,33 @@ function apply(ctx, rawConfig = {}) {
 		disposePromptSection = ctx.systemPrompt.section({
 			name: PROMPT_SECTION_NAME,
 			order: 100,
-			text: next
+			text: (context) => {
+				const agent = context?.scope;
+				return promptTextFor(typeof agent?.id === "string" ? agent.id : void 0);
+			}
 		});
 	};
 	disposers.push(() => {
 		disposePromptSection?.();
 		disposePromptSection = void 0;
 	});
-	const server = new WikiServer({
-		wikiRoot: config.wikiRoot,
-		wiki: config.wiki,
-		port: config.port,
-		username: config.auth.username,
-		password: config.auth.password,
-		readyTimeoutMs: config.startup.readyTimeoutMs
-	});
 	/**
 	* Readiness window from the EFFECTIVE config (v0.22.5): the settings page
-	* saves `startup.readyTimeoutMs`, and this re-applies it to the running
-	* server — it takes effect on the next start()/restart() without a dsh web
+	* saves `startup.readyTimeoutMs`, and this re-applies it to EVERY running
+	* wiki — it takes effect on the next start()/restart() without a dsh web
 	* restart. Values are clamped by host/ready-policy.ts.
 	*/
 	const applyServerTuning = () => {
-		server.setReadyTimeout(eff().startup?.readyTimeoutMs);
-	};
-	let clientCache;
-	let clientPort;
-	const client = () => {
-		const port = server.currentPort;
-		if (port === void 0) return void 0;
-		if (clientCache === void 0 || clientPort !== port) {
-			clientCache = new TiddlyWebClient(`http://127.0.0.1:${port}`, {
-				username: config.auth.username,
-				password: config.auth.password
-			});
-			clientPort = port;
-		}
-		return clientCache;
+		for (const runtime of farm?.allRuntimes() ?? []) runtime.applyServerTuning();
 	};
+	/**
+	* Lazy TW client. host/wiki-instance.ts owns both the port-change invalidation
+	* (a crash before readiness makes the child re-probe a free port, so a cached
+	* client must not stay pinned to a dead one) and the preemptive Basic
+	* credentials (`auth.username` puts the child behind `readers`/`writers`, so
+	* EVERY request — reads included — needs auth).
+	*/
+	const client = () => defaultInstance()?.client();
 	const clipBridge = new ClipBridge({
 		getConfig: effectiveBridge,
 		write: async (tiddler) => {
@@ -12467,96 +14503,65 @@ function apply(ctx, rawConfig = {}) {
 		log: (m) => console.info("[dsh-tiddlywiki] clip bridge:", m)
 	});
 	ctx.effect(() => () => clipBridge.stop(), "dsh-tiddlywiki: clip bridge");
-	let committer;
-	let unwatch;
-	const setupCommitter = () => {
-		const g = eff().git ?? {};
-		committer = new AutoCommitter({
-			git,
-			dir: wikiPath,
-			enabled: g.autoCommit ?? config.git.autoCommit,
-			debounceMs: g.debounceMs ?? config.git.debounceMs,
-			message: () => `wiki autocommit ${(/* @__PURE__ */ new Date()).toISOString()}`,
-			onError: (err) => console.warn("[dsh-tiddlywiki] autocommit:", err)
-		});
-		unwatch = watchWiki(wikiPath, () => committer?.touch());
-	};
+	/**
+	* Release every running wiki's fs watcher AND flush every repository's pending
+	* commit (plugin teardown / a wiki switch). The COMMITTERS themselves are
+	* plugin-wide — one per repository — so they are NOT dropped here: a switch
+	* must not throw away the debounce window of unrelated wikis that share the
+	* same repository.
+	*/
 	const teardownCommitter = async () => {
-		try {
-			unwatch?.();
-		} catch {}
-		unwatch = void 0;
-		const current = committer;
-		committer = void 0;
-		try {
-			await current?.flush();
-		} catch {}
-		current?.dispose();
+		for (const runtime of farm?.allRuntimes() ?? []) await runtime.teardownExtras();
+		await repos.flush();
 	};
 	disposers.push(() => {
 		teardownCommitter();
 	});
 	/**
-	* Re-apply the EFFECTIVE git config to the running plugin (v0.25.0).
+	* Re-apply the EFFECTIVE git config to the running instance (v0.25.0).
 	*
 	* Until then, `git.*` was read ONCE: `AutoCommitter` snapshots
 	* `enabled`/`debounceMs` into immutable options at construction, and the remote
 	* only reached the repo through `bootstrapGit()` at startup. The settings page
 	* happily saved + echoed new values that changed nothing until a dsh web
 	* restart — turning 自动提交 off kept committing, changing the remote kept
-	* pushing to the old one. Rebuilding the committer closes that gap; the
-	* `gitReconfiguring` flag (plus `teardownCommitter`'s own idempotence) keeps a
-	* burst of saves from leaving two committers or a dangling fs watcher.
+	* pushing to the old one. Rebuilding the committer closes that gap; the guard
+	* flag (plus teardownExtras' own idempotence) keeps a burst of saves from
+	* leaving two committers or a dangling fs watcher.
 	*
 	* Not covered on purpose: an already-initialised repository keeps its branch
 	* (`git.branch` is only consulted by `git.init`), and clearing the remote
 	* field does not delete `origin` (that is a destructive repo change the UI
 	* never promised). Both are documented in the settings page + README.
 	*/
-	let gitReconfiguring = false;
 	const reapplyGitConfig = async () => {
-		if (gitReconfiguring) return;
-		gitReconfiguring = true;
-		try {
-			await teardownCommitter();
-			const g = eff().git ?? {};
-			const remote = (typeof g.remote === "string" && g.remote.trim().length > 0 ? g.remote : config.git.remote).trim();
-			if (remote.length > 0) {
-				const ensured = await git.ensureRemote(wikiPath, remote);
-				if (!ensured.ok) console.warn("[dsh-tiddlywiki] git remote update:", ensured.message);
-			}
-			setupCommitter();
-		} catch (err) {
-			console.warn("[dsh-tiddlywiki] applying git config:", err);
-		} finally {
-			gitReconfiguring = false;
-		}
-	};
-	const bootstrapGit = async () => {
+		await teardownCommitter();
 		const g = eff().git ?? {};
-		const branch = g.branch ?? config.git.branch;
-		const remote = g.remote ?? config.git.remote;
-		if (!await git.isRepo(wikiPath)) {
-			await git.init(wikiPath, branch);
-			await writeGitignore(wikiPath);
-			await git.initialCommit(wikiPath);
-		} else await writeGitignore(wikiPath);
-		if (remote.trim().length > 0) {
-			const ensured = await git.ensureRemote(wikiPath, remote.trim());
-			if (ensured.ok) {
-				const first = await git.firstPush(wikiPath);
-				if (!first.ok) console.warn("[dsh-tiddlywiki] first push failed (retry with tiddlywiki_git_sync):", first.message);
-			} else console.warn("[dsh-tiddlywiki] git remote setup:", ensured.message);
+		const remote = (typeof g.remote === "string" && g.remote.trim().length > 0 ? g.remote : config.git.remote).trim();
+		if (remote.length > 0) {
+			const ensured = await git.ensureRemote(defaultPath(), remote);
+			if (!ensured.ok) console.warn("[dsh-tiddlywiki] git remote update:", ensured.message);
 		}
+		repos.rebuild();
+		for (const runtime of farm?.allRuntimes() ?? []) runtime.setupExtras();
+	};
+	/**
+	* The same-origin proxy base a wiki's TW frontend must use (v0.28.0).
+	* The rule itself lives in host/wiki.ts (`proxyBaseFor`) so the harness and the
+	* host cannot disagree about it — see that function for why it matters.
+	*/
+	const proxyBaseForEntry = (entry) => proxyBaseFor(farm?.registry.mode ?? "single", entry.id);
+	/** Does this wiki live inside that repository (or is it the repository root)? */
+	const entryIsInRepo = (entry, repoRoot) => {
+		const path = entryPath(entry);
+		return pathComparisonKey(path) === pathComparisonKey(repoRoot) || isInsidePath(repoRoot, path);
 	};
 	const toolsDeps = {
-		wiki: client,
+		scope: toolScope,
 		git,
-		wikiPath: () => wikiPath,
-		autoCommit: () => committer?.touch(),
-		restartWiki: async () => {
-			await server.restart();
-		},
+		wikiPath: () => defaultInstance()?.path ?? locationPath(defaultLocation),
+		autoCommit: () => defaultInstance()?.touchAutoCommit(),
+		restartAffected: async (dir, changedFiles) => restartAffectedWikis(dir, changedFiles),
 		workspaceName: (sessionId) => {
 			const header = (ctx.get("sessions")?.get(sessionId))?.header;
 			return typeof header?.cwd === "string" ? header.cwd : void 0;
@@ -12566,74 +14571,69 @@ function apply(ctx, rawConfig = {}) {
 	disposers.push(...registerTiddlywikiTools(ctx, toolsDeps));
 	applyPrompt();
 	let disposed = false;
+	/** single 模式的位置：旧指针文件 > cordis 默认（v0.22.0 的优先级，逐字保留）。 */
+	const singleModeLocation = async () => {
+		const state = await readLocationState(locationStateFile);
+		if (state.error !== void 0) console.warn("[dsh-tiddlywiki]", state.error);
+		return state.active ?? defaultLocation;
+	};
 	/**
-	* Core-bootstrap the CURRENT `wikiPath`: markdown parser plugin, the core +
-	* starter seeds, and the configured UI language. Extracted from the startup
-	* task (v0.22.0) because a runtime wiki switch must run exactly this on the
-	* new folder — the two paths must not drift apart.
-	*
-	* Only `render-route` needs a TW restart (it carries a SERVER route loaded at
-	* boot); plain-content seeds must NOT restart, or the syncer's unflushed REST
-	* writes would be lost.
+	* The CONTROL FILE as the settings page edits it — deliberately NOT the
+	* registry the farm reconciles. In single mode they differ: the farm runs a
+	* one-entry registry synthesized from the legacy pointer, while the file may
+	* already list several candidates the user is about to switch to.
 	*/
-	const bootstrapWiki = async () => {
-		const seedClient = client();
-		if (seedClient === void 0) return;
-		let pluginAdded = false;
-		try {
-			pluginAdded = await ensurePlugin(wikiPath, resolveTwRoot(), MARKDOWN_PLUGIN);
-			if (pluginAdded) console.info(`[dsh-tiddlywiki] enabled ${MARKDOWN_PLUGIN} for this wiki`);
-		} catch (err) {
-			console.warn(`[dsh-tiddlywiki] enabling ${MARKDOWN_PLUGIN}:`, err);
-		}
-		const seedStartedAt = Date.now();
-		const results = await runAllSeeds({
-			client: seedClient,
-			tools: tiddlywikiToolSummary(),
-			wechat: (eff().wechat ?? {}).enabled === true
-		});
-		for (const r of results) if (!r.ok) console.warn(`[dsh-tiddlywiki] seed ${r.id} failed:`, r.error ?? r.detail);
-		if (needsRestartAfterSeeds(results)) {
-			if (!await waitForFileWrite(join(wikiPath, "tiddlers", "$__plugins_dsh_render.json"), 8e3, 150, seedStartedAt)) console.warn("[dsh-tiddlywiki] seeded render plugin file not seen on disk before restart");
-			if (!await flushPendingWrites(seedClient, join(wikiPath, "tiddlers"))) console.warn("[dsh-tiddlywiki] seed writes may not have been flushed before restart");
-			if (!disposed) await server.restart();
-		} else if (pluginAdded) {
-			if (!disposed) await server.restart();
-		}
-		const uiLang = eff().uiLanguage;
-		if (typeof uiLang === "string" && uiLang.trim().length > 0) try {
-			const code = uiLang.trim();
-			if (await ensureLanguage(wikiPath, resolveTwRoot(), code) && !disposed) await server.restart();
-			const langClient = client();
-			if (langClient !== void 0) await pinLanguageTiddler(langClient, `$:/languages/${code}`, (message, err) => {
-				if (err === void 0) console.warn("[dsh-tiddlywiki]", message);
-				else console.warn("[dsh-tiddlywiki] pinning $:/language failed:", err);
-			}).catch(() => void 0);
-		} catch (err) {
-			console.warn("[dsh-tiddlywiki] applying uiLanguage:", err);
-		}
-	};
+	let controlRegistry;
+	let controlSource = "default";
+	let controlWarnings = [];
+	let controlError;
+	/** What the control file says right now (synthesized when it does not exist yet). */
+	const controlRegistryNow = () => controlRegistry ?? singleEntryRegistry(defaultCurrentLocation(), "main", "single");
 	const startupTask = (async () => {
 		try {
-			const saved = await readLocationState(locationStateFile);
-			if (saved.error !== void 0) console.warn("[dsh-tiddlywiki]", saved.error);
-			if (saved.active !== void 0) {
-				server.setLocation(saved.active);
-				wikiPath = locationPath(saved.active);
-				console.info(`[dsh-tiddlywiki] wiki location (pointer file): ${wikiPath}`);
-			}
-			await server.start();
-			if (disposed) {
-				await server.stop().catch(() => void 0);
-				return;
-			}
-			await configStore.load(client());
+			const read = await readRegistry({
+				file: registryFile,
+				legacyFile: locationStateFile,
+				fallback: defaultLocation
+			});
+			const scopes = await readSessionScopes(sessionScopeFile);
+			if (scopes.error !== void 0) console.warn("[dsh-tiddlywiki]", scopes.error);
+			sessionScopes = scopes.scopes;
+			controlRegistry = read.registry;
+			controlSource = read.source;
+			controlWarnings = read.warnings;
+			controlError = read.error;
+			if (read.error !== void 0) console.warn("[dsh-tiddlywiki]", read.error);
+			for (const warning of read.warnings) console.warn("[dsh-tiddlywiki]", warning);
+			console.info(`[dsh-tiddlywiki] ${read.registry.mode} 模式 · ${read.registry.wikis.length} 个知识库（来源：${read.source}）`);
+			farm = new WikiFarm(read.registry.mode === "multi" ? read.registry : singleEntryRegistry(await singleModeLocation(), DEFAULT_WIKI_ID, "single"), {
+				createRuntime: (entry) => new WikiInstance({
+					entry,
+					base: config,
+					git,
+					twRoot: resolveTwRoot,
+					touchCommit: (dir) => {
+						repos.touch(dir);
+					},
+					flushCommits: (dir) => repos.flush(dir),
+					proxyBase: () => proxyBaseForEntry(entry)
+				}),
+				log: (message) => console.warn("[dsh-tiddlywiki]", message)
+			});
+			const change = await farm.startAll();
+			if (change.started.length > 0) console.info(`[dsh-tiddlywiki] 已启动：${change.started.join(", ")}`);
 			applyPrompt();
-			applyServerTuning();
 			if (disposed) {
-				await server.stop().catch(() => void 0);
+				await farm.disposeAll();
 				return;
 			}
+			if (!disposed) try {
+				const installed = await installSplitSkill();
+				if (installed.action === "failed") console.warn("[dsh-tiddlywiki] 拆库 skill 安装失败：", installed.error);
+				else console.info(`[dsh-tiddlywiki] 拆库 skill：${installed.action}（${installed.path}）`);
+			} catch (err) {
+				console.warn("[dsh-tiddlywiki] 拆库 skill 安装异常：", err);
+			}
 			try {
 				await clipBridge.start(effectiveBridge().port);
 				console.info(`[dsh-tiddlywiki] clip bridge listening on 127.0.0.1:${clipBridge.port} (enabled=${effectiveBridge().enabled})`);
@@ -12644,43 +14644,43 @@ function apply(ctx, rawConfig = {}) {
 				try {
 					await clipBridge.stop();
 				} catch {}
-				await server.stop().catch(() => void 0);
+				await farm.disposeAll();
 				return;
 			}
-			try {
-				await bootstrapWiki();
-			} catch (err) {
-				console.warn("[dsh-tiddlywiki] seeding wiki:", err);
-			}
 		} catch (err) {
 			console.warn("[dsh-tiddlywiki] startup issue (self-healing is armed):", err);
 		}
-		if (disposed) return;
-		try {
-			await bootstrapGit();
-			if (disposed) return;
-			setupCommitter();
-		} catch (err) {
-			console.warn("[dsh-tiddlywiki] git bootstrap failed:", err);
-		}
 	})();
-	const defaultLocation = {
-		root: config.wikiRoot,
-		name: config.wiki
+	/** The folder the default wiki occupies, running or not. */
+	const defaultPath = () => {
+		const running = defaultInstance();
+		if (running !== void 0) return running.path;
+		const entry = farm === void 0 ? void 0 : defaultEntry(farm.registry);
+		return entry === void 0 ? locationPath(defaultLocation) : entryPath(entry);
+	};
+	/** The `{root,name}` the default wiki currently occupies (running or not). */
+	const defaultCurrentLocation = () => {
+		const running = defaultInstance();
+		if (running !== void 0) return running.server.currentLocation;
+		const entry = farm === void 0 ? void 0 : defaultEntry(farm.registry);
+		return entry === void 0 ? defaultLocation : {
+			root: entry.root,
+			name: entry.name
+		};
 	};
 	/** Source of the CURRENT location, for the settings page. */
 	const locationSource = async () => {
 		const state = await readLocationState(locationStateFile);
-		if (state.active !== void 0 && locationPath(state.active) === wikiPath) return "state";
+		if (state.active !== void 0 && locationPath(state.active) === defaultPath()) return "state";
 		return typeof rawConfig.wikiRoot === "string" && rawConfig.wikiRoot.trim().length > 0 ? "config" : "default";
 	};
 	const locationInfo = async () => {
 		const state = await readLocationState(locationStateFile);
-		const current = server.currentLocation;
+		const current = defaultCurrentLocation();
 		return {
 			current: {
 				...current,
-				path: wikiPath,
+				path: defaultPath(),
 				source: await locationSource()
 			},
 			default: {
@@ -12694,6 +14694,7 @@ function apply(ctx, rawConfig = {}) {
 	};
 	/** Single-flight guard: two concurrent switches would fight over the child. */
 	let switching = false;
+	/** SINGLE mode: the legacy orchestrator, on the farm's default runtime. */
 	const runSwitch = async (target, persist) => {
 		if (switching) return {
 			ok: false,
@@ -12705,74 +14706,214 @@ function apply(ctx, rawConfig = {}) {
 			error: "插件正在卸载，已取消切换",
 			rolledBack: false
 		};
+		const runtime = defaultInstance();
+		if (runtime === void 0) return {
+			ok: false,
+			error: "默认知识库当前没有运行，无法切换位置",
+			rolledBack: false
+		};
 		switching = true;
 		try {
 			const result = await switchWiki({
-				currentLocation: () => server.currentLocation,
-				currentPath: () => wikiPath,
+				currentLocation: () => runtime.server.currentLocation,
+				currentPath: () => runtime.path,
 				stopServer: async () => {
-					await drainThenStop({
-						client: client(),
-						tiddlersDir: join(wikiPath, "tiddlers"),
-						stop: () => server.stop(),
-						log: (message) => console.warn("[dsh-tiddlywiki]", message)
-					});
+					await runtime.drainStop();
 				},
 				applyLocation: (nextLocation) => {
-					server.setLocation({
+					runtime.updateEntry({
+						...runtime.entry,
 						root: nextLocation.root,
 						name: nextLocation.name
 					});
-					wikiPath = locationPath(nextLocation);
-					clientCache = void 0;
-					clientPort = void 0;
 				},
 				startServer: async () => {
-					await server.start();
+					await runtime.server.start();
 				},
-				teardownExtras: () => teardownCommitter(),
+				teardownExtras: () => runtime.teardownExtras(),
 				setupExtras: () => {
-					setupCommitter();
+					runtime.setupExtras();
 				},
 				reloadConfig: async () => {
-					await configStore.load(client());
+					await runtime.config.load(runtime.client());
 					applyPrompt();
 				},
 				bootstrap: async () => {
-					await bootstrapWiki();
-					await bootstrapGit();
+					await runtime.bootstrapWiki();
+					await runtime.bootstrapGit();
 				},
 				savePointer: persist,
 				log: (message) => console.warn("[dsh-tiddlywiki]", message)
 			}, target);
-			if (disposed) teardownCommitter();
+			if (disposed) await runtime.teardownExtras();
+			if (result.ok && farm !== void 0) {
+				const moved = runtime.entry;
+				farm.syncRegistry({
+					...farm.registry,
+					wikis: farm.registry.wikis.map((entry) => entry.id === moved.id ? moved : entry)
+				});
+			}
 			return result;
 		} finally {
 			switching = false;
 		}
 	};
-	/** Switch to another folder and remember the choice. */
-	const switchWikiLocation = (target) => runSwitch(target, async (t) => {
-		await writeLocationState(t, locationStateFile);
-	});
 	/**
-	* 「恢复为配置默认」: drop the pointer and go back to the cordis default. The
-	* pointer must be cleared EVEN when the current folder already IS the default
-	* (otherwise the stale pointer would win again after the next restart).
+	* MULTI mode: move the DEFAULT wiki to another folder. The farm's reconcile
+	* stops the old child, recycles the runtime and starts it on the new folder;
+	* the registry is persisted LAST (a failed write costs restart-survival, not
+	* the running wiki — same trade-off the pointer file already makes).
+	*/
+	const repointDefault = async (target) => {
+		if (disposed) return {
+			ok: false,
+			error: "插件正在卸载，已取消切换",
+			rolledBack: false
+		};
+		if (farm === void 0) return {
+			ok: false,
+			error: "插件尚未就绪，请稍后再试",
+			rolledBack: true
+		};
+		if (switching) return {
+			ok: false,
+			error: "正在切换知识库，请稍候再试",
+			rolledBack: true
+		};
+		const normalized = normalizeLocation(target);
+		if (normalized.location === void 0) return {
+			ok: false,
+			error: normalized.error ?? "位置非法",
+			rolledBack: true
+		};
+		const next = normalized.location;
+		const current = defaultEntry(farm.registry);
+		if (current === void 0) return {
+			ok: false,
+			error: "清单里没有默认知识库",
+			rolledBack: true
+		};
+		const moved = {
+			...current,
+			root: next.root,
+			name: next.name
+		};
+		const validated = validateRegistry({
+			...farm.registry,
+			wikis: farm.registry.wikis.map((entry) => entry.id === moved.id ? moved : entry)
+		});
+		if (validated.registry === void 0) return {
+			ok: false,
+			error: validated.fatal.join("；"),
+			rolledBack: true
+		};
+		switching = true;
+		try {
+			await farm.apply(validated.registry);
+			const applied = {
+				ok: true,
+				location: {
+					root: moved.root,
+					name: moved.name
+				},
+				path: entryPath(moved)
+			};
+			try {
+				await writeRegistry(validated.registry, registryFile);
+			} catch (err) {
+				return {
+					...applied,
+					warning: `位置已切换，但清单写入失败（重启 dsh web 后会回到原位置）：${err instanceof Error ? err.message : String(err)}`
+				};
+			}
+			return applied;
+		} finally {
+			switching = false;
+		}
+	};
+	/** Switch the DEFAULT wiki to another folder and remember the choice. */
+	const switchWikiLocation = (target) => {
+		if (farm?.registry.mode === "multi") return repointDefault(target);
+		return runSwitch(target, async (t) => {
+			await writeLocationState(t, locationStateFile);
+		});
+	};
+	/**
+	* 「恢复为配置默认」: single mode drops the pointer and goes back to the cordis
+	* default (cleared EVEN when the current folder already IS the default, or the
+	* stale pointer wins again after the next restart); multi mode moves the
+	* default wiki back to the configured location.
 	*/
 	const resetWikiLocation = async () => {
-		if (locationPath(defaultLocation) === wikiPath) {
+		if (farm?.registry.mode === "multi") return repointDefault(defaultLocation);
+		if (locationPath(defaultLocation) === defaultPath()) {
 			await clearLocationState(locationStateFile);
 			return {
 				ok: true,
 				location: defaultLocation,
-				path: wikiPath
+				path: defaultPath()
 			};
 		}
 		return runSwitch(defaultLocation, async () => {
 			await clearLocationState(locationStateFile);
 		});
 	};
+	/** The control file's view for the settings page (see controlRegistryNow). */
+	const buildWikisView = () => {
+		const registry = controlRegistryNow();
+		return {
+			mode: registry.mode,
+			defaultId: registry.defaultId,
+			source: controlSource,
+			registryFile,
+			...controlError !== void 0 ? { error: controlError } : {},
+			warnings: controlWarnings,
+			wikis: registry.wikis.map((entry) => {
+				const runtime = farm?.runtime(entry.id);
+				return {
+					id: entry.id,
+					label: entry.label,
+					root: entry.root,
+					name: entry.name,
+					path: entryPath(entry),
+					agentVisible: entry.agentVisible,
+					autostart: entry.autostart,
+					running: runtime !== void 0,
+					status: runtime?.server.status().status ?? "stopped"
+				};
+			})
+		};
+	};
+	/**
+	* Restart the RUNNING wikis whose content a pull just changed (v0.28.0).
+	*
+	* Shared by the agent tool and the browser `/sync` route so the two cannot
+	* drift. `dir` is where the pull ran (the repository is resolved from it) and
+	* `changedFiles` are repository-relative — which is what makes this correct
+	* when several knowledge bases share one repository.
+	*/
+	const restartAffectedWikis = async (dir, changedFiles) => {
+		if (farm === void 0) return {
+			restarted: [],
+			failed: []
+		};
+		const repoRoot = await repos.repoRootOf(dir) ?? dir;
+		const restarted = [];
+		const failed = [];
+		for (const runtime of farm.affectedBy(repoRoot, changedFiles)) try {
+			await runtime.restart();
+			restarted.push(runtime.entry.id);
+		} catch (err) {
+			failed.push({
+				id: runtime.entry.id,
+				message: err instanceof Error ? err.message : String(err)
+			});
+		}
+		return {
+			restarted,
+			failed
+		};
+	};
 	ctx.inject(["webServer"], (webCtx) => {
 		const ws = webCtx.webServer;
 		const getSessionController = () => ctx.get("sessionController");
@@ -12782,14 +14923,75 @@ function apply(ctx, rawConfig = {}) {
 		const getPermissionPresets = () => ctx.get("permissionPresets");
 		const getSessions = () => ctx.get("sessions");
 		const getSessionQuery = () => ctx.get("sessionQuery");
+		/**
+		* Which wiki does this request target? `?wiki=<id>` (a running wiki), else
+		* the farm's default — resolved by the SHARED helper in host/wiki-farm.ts,
+		* so the host wiring and the verification harness cannot disagree about the
+		* selector (and an unknown id falls back instead of 404ing).
+		*/
+		const target = (req) => targetRuntimeFor(farm, req);
+		const fallbackUi = WikiInstance.uiDefaultsFrom(config);
+		const fallbackWechat = normalizeWechatConfig(config.wechat);
+		/** Used only while nothing runs: base defaults, no wiki tiddler to read. */
+		const idleConfig = new ConfigStore(baseShape);
 		const disposeRoutes = registerRoutes({ webServer: ws }, {
-			server,
-			getClient: client,
+			server: (req) => target(req)?.server,
+			wikiSummaries: (req) => {
+				const registry = farm?.registry;
+				return {
+					mode: registry?.mode ?? "single",
+					defaultId: registry?.defaultId ?? "main",
+					items: (registry?.wikis ?? []).map((entry) => {
+						const runtime = farm?.runtime(entry.id);
+						return {
+							id: entry.id,
+							label: entry.label,
+							status: runtime?.server.status().status ?? "stopped",
+							agentVisible: entry.agentVisible,
+							autostart: entry.autostart,
+							running: runtime !== void 0,
+							path: entryPath(entry)
+						};
+					})
+				};
+			},
+			serverById: (id) => farm?.runtime(id)?.server,
+			wikiIds: () => farm?.registry.wikis.map((entry) => entry.id) ?? [],
+			getClient: (req) => target(req)?.client(),
 			git,
-			autoCommit: () => committer?.touch(),
-			noteDefaults: () => ({ tag: effectiveNoteTag() }),
-			uiDefaults: () => effectiveUi(),
-			getWikiPath: () => wikiPath,
+			autoCommit: (req) => target(req)?.touchAutoCommit(),
+			noteDefaults: (req) => ({ tag: target(req)?.noteTag() ?? config.note.tag }),
+			uiDefaults: (req) => target(req)?.uiDefaults() ?? fallbackUi,
+			getWikiPath: (req) => target(req)?.path ?? defaultPath(),
+			restartAffected: (_req, dir, changedFiles) => restartAffectedWikis(dir, changedFiles),
+			sessionScope: {
+				get: (sessionId) => {
+					const resolution = resolveAgentScope(farm, sessionScopes, sessionId);
+					const scopeId = sessionScopes[sessionId];
+					return {
+						...scopeId !== void 0 ? { scope: scopeId } : {},
+						...resolution.entry !== void 0 ? { resolved: {
+							id: resolution.entry.id,
+							label: resolution.entry.label
+						} } : {},
+						...resolution.reason !== void 0 ? { reason: resolution.reason } : {}
+					};
+				},
+				set: async (sessionId, wikiId) => {
+					if (!isSafeSessionId(sessionId)) throw new Error("会话 id 非法");
+					if (wikiId !== void 0) {
+						const entry = farm?.registry.wikis.find((item) => item.id === wikiId);
+						if (entry === void 0) throw new Error(`知识库「${wikiId}」不在清单里`);
+						if (!entry.agentVisible) throw new Error(`知识库「${entry.label}」对 Agent 隐身，不能作为会话作用域`);
+						if (farm !== void 0 && farm.runtime(entry.id) === void 0) await farm.startEntry(entry);
+					}
+					await setSessionScope(sessionId, wikiId, sessionScopeFile);
+					const next = { ...sessionScopes };
+					if (wikiId === void 0) delete next[sessionId];
+					else next[sessionId] = wikiId;
+					sessionScopes = next;
+				}
+			},
 			getSessionController,
 			getWorkspaceRegistry,
 			getAgentPresets,
@@ -12797,35 +14999,118 @@ function apply(ctx, rawConfig = {}) {
 			getPermissionPresets,
 			getSessions,
 			getSessionQuery,
-			sendToAgentEnabled: () => eff().ui?.sendToAgent?.enabled !== false,
-			sendToAgentToken: () => {
-				const token = eff().ui?.sendToAgent?.token;
-				return typeof token === "string" ? token : "";
-			},
-			wechatConfig: () => effectiveWechat(),
+			sendToAgentEnabled: (req) => target(req)?.sendToAgent().enabled ?? config.ui.sendToAgent.enabled,
+			sendToAgentToken: (req) => target(req)?.sendToAgent().token ?? config.ui.sendToAgent.token ?? "",
+			wechatConfig: (req) => target(req)?.wechatConfig() ?? fallbackWechat,
 			wechatRunner: () => wechatRunner,
-			wechatReady: () => checkWechatReady({
-				enabled: effectiveWechat().enabled,
-				command: effectiveWechat().command
-			})
+			wechatReady: async (req) => {
+				const cfg = target(req)?.wechatConfig() ?? fallbackWechat;
+				return checkWechatReady({
+					enabled: cfg.enabled,
+					command: cfg.command
+				});
+			}
 		});
 		const disposeAdmin = registerAdminRoutes({ webServer: ws }, {
-			server,
-			getClient: client,
-			getWikiPath: () => wikiPath,
+			server: (req) => target(req)?.server,
+			getClient: (req) => target(req)?.client(),
+			getWikiPath: (req) => target(req)?.path ?? defaultPath(),
 			twRoot: resolveTwRoot,
-			config: configStore,
+			config: (req) => target(req)?.config ?? idleConfig,
 			onConfigChanged: () => {
 				applyPrompt();
 				applyServerTuning();
 				reapplyGitConfig();
 			},
-			getPrompt: (draft) => describePrompt(draft ?? eff().prompt ?? {}, tiddlywikiToolSummary()),
+			getPrompt: (draft, req) => describePrompt(draft ?? (target(req)?.eff() ?? baseShape).prompt ?? {}, tiddlywikiToolSummary()),
 			wiki: {
 				info: locationInfo,
 				switch: switchWikiLocation,
 				reset: resetWikiLocation
 			},
+			wikis: {
+				info: async () => buildWikisView(),
+				apply: async (body) => {
+					if (disposed) return {
+						ok: false,
+						error: "插件正在卸载，已取消修改"
+					};
+					const runtimeAction = body?.action;
+					if (runtimeAction === "start" || runtimeAction === "stop") {
+						if (farm === void 0) return {
+							ok: false,
+							error: "插件尚未就绪，请稍后再试"
+						};
+						const id = body.id;
+						const entry = typeof id === "string" ? farm.registry.wikis.find((item) => item.id === id.trim().toLowerCase()) : void 0;
+						if (entry === void 0) return {
+							ok: false,
+							error: `知识库「${String(id)}」不在清单里`
+						};
+						const change = {
+							started: [],
+							stopped: [],
+							updated: [],
+							running: farm.runningIds(),
+							errors: []
+						};
+						if (runtimeAction === "start") {
+							if (farm.runtime(entry.id) === void 0) {
+								await farm.startEntry(entry);
+								change.started.push(entry.id);
+							}
+						} else {
+							await farm.stopEntry(entry.id);
+							change.stopped.push(entry.id);
+						}
+						change.running = farm.runningIds();
+						return {
+							ok: true,
+							info: buildWikisView(),
+							change
+						};
+					}
+					const action = applyWikiAction(controlRegistryNow(), body);
+					if (action.registry === void 0) return {
+						ok: false,
+						error: action.error ?? "动作被拒绝"
+					};
+					const registry = action.registry;
+					try {
+						await writeRegistry(registry, registryFile);
+					} catch (err) {
+						return {
+							ok: false,
+							error: `清单写入失败：${err instanceof Error ? err.message : String(err)}`
+						};
+					}
+					controlRegistry = registry;
+					controlSource = "file";
+					controlWarnings = [];
+					controlError = void 0;
+					const single = defaultEntry(registry);
+					const runRegistry = registry.mode === "multi" ? registry : singleEntryRegistry(single === void 0 ? defaultCurrentLocation() : {
+						root: single.root,
+						name: single.name
+					}, DEFAULT_WIKI_ID, "single");
+					const change = farm === void 0 ? {
+						started: [],
+						stopped: [],
+						updated: [],
+						running: [],
+						errors: []
+					} : await farm.apply(runRegistry);
+					if (registry.mode === "single" && single !== void 0) await writeLocationState({
+						root: single.root,
+						name: single.name
+					}, locationStateFile).catch(() => void 0);
+					return {
+						ok: true,
+						info: buildWikisView(),
+						change
+					};
+				}
+			},
 			seeds: {
 				checkAll: async (c) => checkAllSeeds({
 					client: c,
@@ -12852,14 +15137,15 @@ function apply(ctx, rawConfig = {}) {
 				})]);
 			} catch {}
 			try {
-				await committer?.flush();
+				await defaultInstance()?.flushCommitter();
 			} catch {}
 			disposeAll();
-			await server.stop();
+			await farm?.disposeAll();
+			repos.dispose();
 		})();
 	}, "dsh-tiddlywiki: host teardown");
 }
 //#endregion
-export { AGENT_WRITTEN_TAG, ALL_ARTICLES_MARKER_TITLE, ALL_ARTICLES_TEXT, ALL_ARTICLES_TITLE, ANON_USERNAME, AutoCommitter, CLIP_BRIDGE_BOOKMARKLET, CLIP_BRIDGE_DEFAULT_PORT, CLIP_BRIDGE_DOC_TEXT, CLIP_BRIDGE_DOC_TITLE, CLIP_BRIDGE_DRAG_HREF, CLIP_BRIDGE_MARKER_TITLE, ClipBridge, ConfigPatchError, ConfigStore, ConfigUnreadableError, DEFAULT_NOTE_TYPE, DEFAULT_PROMPT_MODE, DEFAULT_WECHAT_ADAPTER, DEFAULT_WECHAT_COMMAND, DOC_NOTE_TAG, DOC_NOTE_TEXT, DOC_NOTE_TITLE, DSH_DOCS_TAG, GitConflictStateError, GitFace, HOME_DEFAULT_TIDDLERS, HOME_INDEX_ITEMS, HOME_INDEX_MARKER_TITLE, HUMAN_EDITED_TAG, LOCATION_STATE_VERSION, MARKDOWN_PLUGIN, MASKED_SECRET, MENUBAR_THEME_MARKER_TITLE, MENUBAR_THEME_TEXT, MENUBAR_THEME_TIDDLER, MISSING_TYPE_FILTER, PATH_PREFIX, PROMPT_GOVERNANCE_BLOCKS, PROMPT_MODES, PROMPT_SECTION_NAME, PROMPT_SECTION_ORDER, READY_HARD_FACTOR, READY_POLL_MS, READY_SLOW_POLL_MS, READY_TIMEOUT_DEFAULT_MS, READY_TIMEOUT_MAX_MS, READY_TIMEOUT_MIN_MS, RENDER_BUNDLE_TEXT, RENDER_MARKER_TITLE, RENDER_PLUGIN_FILE, RENDER_PLUGIN_TITLE, SEED_DEFS, SEED_MARKER_VERSION, SEND_TO_AGENT_BUNDLE_TEXT, SEND_TO_AGENT_MARKER_TITLE, SEND_TO_AGENT_PLUGIN_TITLE, SESSION_SUMMARY_PREFIX, STARTER_DOCS_ITEMS, STARTER_DOCS_MARKER_TITLE, TEXT_LIST_FILTER, TRASH_INDEX_TITLE, TRASH_PREFIX, TW_PROXY_PATH, TW_PROXY_PREFIX, TW_WEB_HOST_DEFAULT, TW_WEB_HOST_TIDDLER, TiddlyWebClient, TrashIndexUnavailableError, UI_STYLES_MARKER_TITLE, UI_STYLE_ITEMS, WECHAT_ADAPTERS, WECHAT_ADAPTER_FILES, WECHAT_ADAPTER_MARKER, WECHAT_DOCS_MARKER_TITLE, WECHAT_DOCS_TEXT, WECHAT_DOCS_TITLE, WECHAT_PUBLISH_BUNDLE_TEXT, WECHAT_PUBLISH_MARKER_TITLE, WECHAT_PUBLISH_PLUGIN_TITLE, WORKSPACE_FIELD, WORKSPACE_TAG_PREFIX, WechatPublishRunner, WikiServer, WriteConflictError, apply, assertNoConflict, assertPublicImageUrl, awaitReady, buildBinaryTiddler, buildClipTiddler, buildImageNoteTiddler, buildPromptText, buildPublishInvocation, buildVersionInvocation, buildWriteTiddler, bundledCatalog, capOutput, checkAllSeeds, checkWechatReady, cleanTiddler, clearLocationState, deepMerge, defaultAdaptersDir, defaultLocationStateFile, defaultWechatJobDir, defineTool, describeConflict, describePrompt, describeUnreadableConfig, docNoteText, downloadClipImage, drainThenStop, dshHomePath, ensureLanguage, ensurePlugin, ensureTiddlerTimestamps, escapeInline, escapePromptBraces, expandEnvPath, flattenTiddlerFields, flushPendingWrites, formatTiddlerDate, hashText, hostAllowed, imageExtensionForMime, inject, interpretPublishOutcome, isBinaryType, isJunkTag, isPrivateAddress, isSafeCliValue, isSafeDsn, isSafeUrl, listWikiCandidates, locationPath, maskConfigSecrets, name, needsRestartAfterSeeds, normalizeConfigPatch, normalizeFieldsArg, normalizeLocation, normalizePromptMode, normalizePromptPreview, normalizeReadyTimeoutMs, normalizeThemes, normalizeWechatConfig, normalizeWorkspaceName, openInTwEditor, parseClipPayload, parseSeedMarker, parseTiddlerDate, pickImageMime, pinLanguageTiddler, readActiveThemeName, readLocationState, readSeedMarker, readWikiInfo, readyHardTimeoutMs, registerAdminRoutes, registerRoutes, registerTiddlywikiTools, removeSeedById, resolveClipTitle, resolveTwRoot, runAllSeeds, runSeedById, sanitizeTwFragment, scanAdapterDir, seedAllArticles, seedClipBridge, seedDocNote, seedHomeIndex, seedMenubarTheme, seedRenderRoute, seedSendToAgent, seedStarterDocs, seedUiStyles, seedWechatDocs, seedWechatPublish, stripMaskedSecrets, switchWiki, tailOf, tiddlywikiToolSummary, toIsoDateString, toolSignatureLines, unseedClipBridge, unseedWechatDocs, unseedWechatPublish, waitForFileWrite, workspaceMarkFromCwd, workspaceNameFromCwd, workspaceTagName, writeLocationState, writeSeedMarker, writeSessionSummary, writeWikiInfo };
+export { AGENT_WRITTEN_TAG, ALL_ARTICLES_MARKER_TITLE, ALL_ARTICLES_TEXT, ALL_ARTICLES_TITLE, ANON_USERNAME, AutoCommitter, CLIP_BRIDGE_BOOKMARKLET, CLIP_BRIDGE_DEFAULT_PORT, CLIP_BRIDGE_DOC_TEXT, CLIP_BRIDGE_DOC_TITLE, CLIP_BRIDGE_DRAG_HREF, CLIP_BRIDGE_MARKER_TITLE, ClipBridge, ConfigPatchError, ConfigStore, ConfigUnreadableError, DEFAULT_NOTE_TYPE, DEFAULT_PROMPT_MODE, DEFAULT_WECHAT_ADAPTER, DEFAULT_WECHAT_COMMAND, DEFAULT_WIKI_ID, DEFAULT_WIKI_MODE, DOC_NOTE_TAG, DOC_NOTE_TEXT, DOC_NOTE_TITLE, DSH_DOCS_TAG, GitConflictStateError, GitFace, HOME_DEFAULT_TIDDLERS, HOME_INDEX_ITEMS, HOME_INDEX_MARKER_TITLE, HUMAN_EDITED_TAG, LOCATION_STATE_VERSION, MARKDOWN_PLUGIN, MASKED_SECRET, MENUBAR_THEME_MARKER_TITLE, MENUBAR_THEME_TEXT, MENUBAR_THEME_TIDDLER, MISSING_TYPE_FILTER, PATH_PREFIX, PROMPT_GOVERNANCE_BLOCKS, PROMPT_MODES, PROMPT_SECTION_NAME, PROMPT_SECTION_ORDER, READY_HARD_FACTOR, READY_POLL_MS, READY_SLOW_POLL_MS, READY_TIMEOUT_DEFAULT_MS, READY_TIMEOUT_MAX_MS, READY_TIMEOUT_MIN_MS, RENDER_BUNDLE_TEXT, RENDER_MARKER_TITLE, RENDER_PLUGIN_FILE, RENDER_PLUGIN_TITLE, RESERVED_WIKI_IDS, RepoCommitters, SEED_DEFS, SEED_MARKER_VERSION, SEND_TO_AGENT_BUNDLE_TEXT, SEND_TO_AGENT_MARKER_TITLE, SEND_TO_AGENT_PLUGIN_TITLE, SESSION_SCOPE_MAX_AGE_MS, SESSION_SCOPE_VERSION, SESSION_SUMMARY_PREFIX, SKILL_FILE_NAME, SPLIT_SKILL_DIR, SPLIT_SKILL_MARKER, STARTER_DOCS_ITEMS, STARTER_DOCS_MARKER_TITLE, TEXT_LIST_FILTER, TRASH_INDEX_TITLE, TRASH_PREFIX, TW_PROXY_PATH, TW_PROXY_PREFIX, TW_WEB_HOST_DEFAULT, TW_WEB_HOST_TIDDLER, TiddlyWebClient, TrashIndexUnavailableError, UI_STYLES_MARKER_TITLE, UI_STYLE_ITEMS, WECHAT_ADAPTERS, WECHAT_ADAPTER_FILES, WECHAT_ADAPTER_MARKER, WECHAT_DOCS_MARKER_TITLE, WECHAT_DOCS_TEXT, WECHAT_DOCS_TITLE, WECHAT_PUBLISH_BUNDLE_TEXT, WECHAT_PUBLISH_MARKER_TITLE, WECHAT_PUBLISH_PLUGIN_TITLE, WIKI_MODES, WIKI_REGISTRY_VERSION, WORKSPACE_FIELD, WORKSPACE_TAG_PREFIX, WechatPublishRunner, WikiFarm, WikiInstance, WikiServer, WriteConflictError, apply, applyWikiAction, assertNoConflict, assertPublicImageUrl, awaitReady, buildBinaryTiddler, buildClipTiddler, buildImageNoteTiddler, buildPromptText, buildPublishInvocation, buildVersionInvocation, buildWriteTiddler, bundledCatalog, capOutput, checkAllSeeds, checkWechatReady, cleanTiddler, clearLocationState, deepMerge, defaultAdaptersDir, defaultEntry, defaultLocationStateFile, defaultRegistryFile, defaultSessionScopeFile, defaultSkillRoot, defaultWechatJobDir, defineTool, deriveWikiId, describeConflict, describePrompt, describeUnreadableConfig, docNoteText, downloadClipImage, drainThenStop, dshHomePath, ensureLanguage, ensurePlugin, ensureTiddlerTimestamps, entryLocation, entryPath, escapeInline, escapePromptBraces, expandEnvPath, findEntry, findPathConflicts, flattenTiddlerFields, flushPendingWrites, formatTiddlerDate, hashText, hostAllowed, imageExtensionForMime, inject, installSplitSkill, interpretPublishOutcome, isBinaryType, isInsidePath, isJunkTag, isPrivateAddress, isSafeCliValue, isSafeDsn, isSafeSessionId, isSafeUrl, listWikiCandidates, locationPath, maskConfigSecrets, name, needsRestartAfterSeeds, normalizeConfigPatch, normalizeEntry, normalizeFieldsArg, normalizeLocation, normalizePromptMode, normalizePromptPreview, normalizeReadyTimeoutMs, normalizeThemes, normalizeWechatConfig, normalizeWikiId, normalizeWorkspaceName, openInTwEditor, parseClipPayload, parseSeedMarker, parseTiddlerDate, pathComparisonKey, pickImageMime, pinLanguageTiddler, proxyBaseFor, pruneScopes, readActiveThemeName, readBundledSkillText, readLocationState, readRegistry, readSeedMarker, readSessionScopes, readWikiInfo, readyHardTimeoutMs, registerAdminRoutes, registerRoutes, registerTiddlywikiTools, removeSeedById, removeWiki, resolveAgentScope, resolveClipTitle, resolveTwRoot, runAllSeeds, runSeedById, sanitizeTwFragment, scanAdapterDir, scopeBanner, seedAllArticles, seedClipBridge, seedDocNote, seedHomeIndex, seedMenubarTheme, seedRenderRoute, seedSendToAgent, seedStarterDocs, seedUiStyles, seedWechatDocs, seedWechatPublish, setSessionScope, singleEntryRegistry, stripMaskedSecrets, switchWiki, tailOf, targetRuntimeFor, tiddlywikiToolSummary, toIsoDateString, toolSignatureLines, unseedClipBridge, unseedWechatDocs, unseedWechatPublish, upsertWiki, validateRegistry, waitForFileWrite, wikiIdFromRequest, withScopeBanner, workspaceMarkFromCwd, workspaceNameFromCwd, workspaceTagName, writeLocationState, writeRegistry, writeSeedMarker, writeSessionScopes, writeSessionSummary, writeWikiInfo };
 
 //# sourceMappingURL=index.js.map