dsh-tower 2.4.1 → 2.4.2

package/CHANGELOG.md

@@ -4,6 +4,17 @@
 
 ## 未发布（Unreleased）
 
+## 2.4.2（2026-10-24）
+
+### 修复
+
+- **两个 Agent 预设行在 Plugins 页面无法区分**：此前 `preset-tower-worker` 与 `preset-tower-reviewer`
+  共用 `@deepseek-ai/dsh-agent-preset` 模块，页面按模块包取标签，两行都显示「Agent 预设定义」。
+  现在两行分别由 Tower 自有的 import-free preset 声明模块承载（`dsh-tower/preset-worker` /
+  `dsh-tower/preset-reviewer`），通过注入的 `agentPresets.register(config)` 注册，
+  preset 的 id/name/description/order/plugins 保持不变；两个 specifier 各自提供生成的
+  `<specifier>/locale/{en,zh}.json`，页面显示「Tower Worker 预设」「Tower Reviewer 预设」
+  及各自用途与关闭影响。真实 `smoke:mount` 在 pinned host 上确认 2 个 preset 均挂载且标签不同。
 ## 2.4.1（2026-10-24）
 
 ### 修复

package/COMPATIBILITY.md

@@ -5,6 +5,7 @@ is shipped in the npm package; doctor reads it locally and never contacts a regi
 
 | dsh version | tag / commit | verified on | what was run |
 |---|---|---|---|
+| 0.2.1-rc.2 | v2.4.2 | 2026-10-24 | mount smoke (28/28 default tools, 3 skills, 2 presets with distinct labels, 1 bundle row), `npm test` (631), docs + seven generated checks, types coverage 148/148, components + philosophy + surface gates |
 | 0.2.1-rc.2 | v2.4.1 | 2026-10-24 | mount smoke (28/28 default tools, 3 skills, 2 presets, 1 bundle row), `npm test` (620), `types:coverage` 146/146, docs + seven generated checks incl capability-row locales, components + philosophy + surface gates |
 | 0.2.1-rc.2 | v2.4.0 | 2026-10-24 | mount smoke (28/28 default tools, 3 skills, 2 presets, 1 bundle row), `npm test` (612), `types:coverage` 146/146, strict ratchet 10, docs + six generated checks, components + philosophy + surface gates |
 | 0.2.1-rc.2 | v2.3.0 | 2026-10-23 | mount smoke (29 tower tools, `/tower`, 3 skills, 2 presets, single bundle row), `npm test` (573), `npm run docs:check`, four generated docs checks, philosophy + surface gates, live `--check` |

package/CONTRIBUTING.md

@@ -26,7 +26,8 @@ The component axis — who may be switched off — is principle 11 and
 [scripts/component-surface.json](scripts/component-surface.json) into
 [docs/reference/component-surface.md](docs/reference/component-surface.md) and
 enforced by `npm run docs:check:components`: every visible component needs
-`title`/`summary`/`disables` in both locales, the host/health/recovery/review/
+`title`/`summary`/`disables` in both locales (and every generated row label —
+capability or preset — needs the same three strings), the host/health/recovery/review/
 merge-gate capabilities may not be gated by any row or boolean key (the
 `gateableTools` allowlist is empty since #122), and the component count — 8
 visible rows in 2.4.0 — is the fourth baselined surface.
@@ -116,13 +117,14 @@ the push gates; CI schedules it nightly.
 - `index.js` — Host entry: `/tower` command, mode guard, dynamic prompt section, `tower_control`.
 - `host/` — the composition root and session/process glue (`tool-registry.js`, `config.js`, `hmr.js`, `modeStore.js`, `doctor.js`); `adapters/` — the only I/O implementations (store, git, archive, leases, locks); `app/` — use cases; `domain/` — the pure core.
 - `worker.js` — the `tower-worker` preset policy (tool surface + protocol text).
+- `host/preset-worker.js` / `host/preset-reviewer.js` — the two Tower-owned preset declaration rows (`dsh-tower/preset-*`). They keep the row config in `cordis.patch.yml`, forward it to `ctx.agentPresets.register()`, and give each preset row its own Plugins-page label; do not mount the shared `@deepseek-ai/dsh-agent-preset` for these rows.
 - `tests/` — add a regression test for every behavior change. The offline suite is `tests/*.test.mjs`; live-runtime scripts are documented in `tests/README.md`.
 - `scripts/architecture.mjs` — the fitness rules; `scripts/architecture-waivers.json` — the only exemptions, each with a `reason` and an `owner`/`ref`. An entry without a reason fails the blocking `waiver-contract` rule, The three layering rules that keep the core pure — `domain-pure`, `host-scope`, and `no-lib-from-core` — cannot be waived at all. The `let` scan behind `host-scope` is statement-aware: every binding of every top-level declaration is recorded, and only `host/**` may hold ambient state.
 - `types/` — the published declaration surface (`package.json` `types` is `types/index.d.ts`). The vocabulary block in that file is generated from the runtime constants by `npm run types:generate` and gated by `npm run docs:check:generated:types`; never edit it by hand. `tsconfig.strict.json` turns `noImplicitAny` on for an explicit file list that may grow but never silently shrink: add a file, then record it with `npm run types:strict:write` (a removal also needs `--allow-shrink`). `npm run types:coverage` fails when a shipped runtime `.js` file is outside the `tsc` program.
 
 ## Pull request checklist
 
-1. `npm test` passes locally (620 tests today, including protocol end-to-end against a real temporary Git repository and mock spawn coverage) and `npm run docs:check` passes.
+1. `npm test` passes locally (631 tests today, including protocol end-to-end against a real temporary Git repository and mock spawn coverage) and `npm run docs:check` passes.
 2. New behavior has a test. Bug fixes should add a test that fails before the fix.
 3. No secrets, tokens, personal paths, session logs, or generated artifacts are added. `.gitignore` covers local acceptance output; do not force-add it.
 4. Keep the public API and state-file formats compatible; if a change is breaking, call it out in `CHANGELOG.md` and bump the version.
@@ -139,7 +141,9 @@ the push gates; CI schedules it nightly.
    `docs/reference/component-surface.md` (`npm run docs:generate:components`), and must pass
    `npm run docs:check:components`. A new visible capability row also ships its own
    `<specifier>/locale/*.json` row label via `npm run docs:generate:locale` and passes
-   `npm run docs:check:generated:locale` (see
+   `npm run docs:check:generated:locale`; a preset-declaring row does the same through
+   `PRESET_LOCALES`, and every generated row label (capability or preset) must keep
+   `title`/`summary`/`disables` in both locales (see
    [architecture/overview.md](docs/architecture/overview.md#row-display-metadata-121)).
 
 ## Mount smoke

package/cordis.patch.yml

@@ -33,8 +33,12 @@
               interruptDefault: true
             spawn:
               staleMs: 15000
+        # Each preset row mounts its own Tower-owned declaration module, not the
+        # shared @deepseek-ai/dsh-agent-preset: DSH labels a row from
+        # <specifier>/locale/<lang>.json, so two rows sharing one module would
+        # render the same title. The row config is unchanged.
         - id: preset-tower-worker
-          name: '@deepseek-ai/dsh-agent-preset'
+          name: 'dsh-tower/preset-worker'
           config:
             id: tower-worker
             name: Tower Worker
@@ -70,7 +74,7 @@
     # review.requireReview is false; with the gate on planning/mode entry refuse
     # the combination with an explanatory error.
     - id: preset-tower-reviewer
-      name: '@deepseek-ai/dsh-agent-preset'
+      name: 'dsh-tower/preset-reviewer'
       config:
         id: tower-reviewer
         name: Tower Reviewer

package/docs/architecture/overview.md

@@ -23,7 +23,7 @@ to a tool that is not on the recorded allowlist (empty since #122) and any
 
 ### Row display metadata (#121)
 
-The Plugins page renders an optional row as `row.meta.title ?? row.moduleName`
+The Plugins page renders a row as `row.meta.title ?? row.moduleName`
 plus `row.meta.description`. The Host fills `row.meta` by resolving
 `<specifier>/locale/en.json` and then every sibling `<lang>.json` in that
 directory, reading `meta.title` / `meta.description`; title falls back to the full
@@ -31,7 +31,7 @@ module specifier and description to empty when no resource resolves. That is why
 the mandatory `tower` card explains itself (the package root ships
 `locale/*.json`) while a bare subpath row would show only `dsh-tower/batch`.
 
-Each optional capability therefore ships its own resolvable subpath resource:
+Each optional capability row therefore ships its own resolvable subpath resource:
 `dsh-tower/skills/locale/{en,zh}.json` and the same for `batch`, `import`,
 `leases`, `tests` and `hmr`. `package.json` `exports` maps every
 `./<capability>/locale/*.json` to `./locale/<capability>/*.json`, and
@@ -39,31 +39,56 @@ Each optional capability therefore ships its own resolvable subpath resource:
 package. The root `./locale/*.json` export stays so the Tower group keeps its own
 `meta`.
 
-The capability files are generated, never hand-written. `npm run
-docs:generate:locale` renders them from the `components` block of
-`locale/en.json` and `locale/zh.json` (the same source `docs:check:components`
-audits): `meta.title` is the component `title`, and `meta.description` joins the
-component `summary` (what the capability enables) with its `disables` text (what
-turning it off removes) behind a per-language "When off / 关闭后" label. The
-row is therefore decidable from the page alone. `npm run
-docs:check:generated:locale` fails on drift, runs in `npm run check`, and is its
-own step in the `test` CI job (`.github/workflows/test.yml`).
-
-To label a new capability row:
+The two preset-declaring rows need the same treatment but cannot share a module.
+DSH labels a row from its own `moduleName`, so while both rows mounted
+`@deepseek-ai/dsh-agent-preset` they resolved one locale resource and rendered the
+same title: the mandatory worker dependency and the conditional reviewer switch
+were indistinguishable. That package is also supplied by the DSH profile, not by
+this bundle, so Tower cannot add per-row locale files beside its label. Tower
+therefore owns one tiny declaration module per preset row:
+`host/preset-worker.js` (row specifier `dsh-tower/preset-worker`) and
+`host/preset-reviewer.js` (`dsh-tower/preset-reviewer`). Each is a plain object
+plugin with `inject: ['agentPresets']` whose async `apply` returns
+`ctx.agentPresets.register(config)`; Cordis collects the resolved function as the
+plugin's disposer, so disabling the row or an HMR unload unregisters the preset.
+The registry still owns preset semantics — it mounts the definition's `plugins`
+list itself — and the modules import nothing, so they are renderer-free and do
+not depend on `@deepseek-ai/dsh-agent-preset`. In `cordis.patch.yml` only the two
+`name:` lines changed; the id/name/description/order/plugins config blocks are
+unchanged.
+
+The row label files are generated, never hand-written. `npm run
+docs:generate:locale` renders every row label — capability and preset — from the
+`components` block of `locale/en.json` and `locale/zh.json` (the same source
+`docs:check:components` audits): `meta.title` is the component `title`, and
+`meta.description` joins the component `summary` (what the row provides) with its
+`disables` text (what turning it off removes) behind a per-language "When off /
+关闭后" label. The mandatory worker preset has no off state, so its description
+uses a "Mandatory dependency, not a switch / 强制依赖，不是开关" label instead; the
+conditional reviewer keeps the off-effect wording. The row is therefore decidable
+from the page alone. `npm run docs:check:generated:locale` fails on drift, runs in
+`npm run check`, and is its own step in the `test` CI job
+(`.github/workflows/test.yml`). `npm run docs:check:components` also covers the
+generated rows: a label whose `components` entry is missing, or whose `mandatory`
+flag disagrees with the component scope, is refused there. The real
+`npm run smoke:mount` calls the same host `readPluginMeta` the Plugins page uses
+and fails unless the two preset rows resolve distinct title/description maps, so
+the shared-label defect cannot return unnoticed.
+
+To label a new row:
 
 1. Classify it in `scripts/component-surface.json`, ship it in
    `cordis.patch.yml`, and add `title` / `summary` / `disables` to the
    `components` block of both `locale/en.json` and `locale/zh.json`.
-2. Add `{ specifier, component }` to `CAPABILITY_LOCALES` in
-   `scripts/generate-capability-locale.mjs`, the matching
-   `./<specifier>/locale/*.json` export in `package.json`, and the row to the
-   coverage map in `tests/capability-locales.test.mjs`.
+2. Add `{ specifier, component }` to `CAPABILITY_LOCALES` — or to
+   `PRESET_LOCALES` with `mandatory` matching the component scope for a
+   preset-declaring row — in `scripts/generate-capability-locale.mjs`, the
+   matching `./<specifier>/locale/*.json` export in `package.json`, and the row
+   to the coverage map in `tests/capability-locales.test.mjs`.
 3. Run `npm run docs:generate:locale`, then regenerate
    `scripts/pack-manifest.txt` with `npm run pack:check -- --write`.
 
-The reviewer preset row is the one visible component that is not a package
-specifier: its label comes from the `cordis.patch.yml` preset `config.name` /
-`description`. The generated capability files never touch the root locale `meta`.
+The generated row files never touch the root locale `meta`.
 
 ```
 Host plugin (index.js)
@@ -90,6 +115,8 @@ Host plugin (index.js)
        host/modeStore.js       per-agent Tower mode persistence
        host/modeState.js       owned in-memory mode state
        host/presets.js         cross-field preset validation before work starts
+       host/preset-worker.js   mandatory worker preset declaration (dsh-tower/preset-worker)
+       host/preset-reviewer.js conditional reviewer preset declaration (dsh-tower/preset-reviewer)
        host/compatibility.js   COMPATIBILITY.md provenance
        host/tower.js           default-deps Tower binding for tests/embedders
  ports (explicit runtime contracts, no implementation):

package/docs/reference/component-surface.md

@@ -32,8 +32,8 @@ row is a section of its parent and is not independently switchable.
 | `tower-leases` | visible | row | tower_resource is not registered; advisory leases are coordination only, so nothing else depends on them. |
 | `tower-tests` | visible | row | tower_test is not registered and no test receipt can be recorded. With gates.requireTests:true planning/mode entry is rejected with an explanation, and the merge gate still reports tests-missing. |
 | `tower-hmr` | visible | row | tower_reload and /tower reload are unavailable; a profile without HMR behaves exactly as before. Shipped disabled: enable the row for a linked dev profile. |
-| `preset-tower-worker` | internal | row | tower_spawn fails without the worker preset. A mandatory dependency, never a switch. |
-| `preset-tower-reviewer` | visible | row | The reviewer cannot be dispatched. Supported while review.requireReview is false (merge is unaffected); with the gate on planning/mode entry is locked with an explanatory error. |
+| `preset-tower-worker` | internal | row | Declared by dsh-tower/preset-worker: tower_spawn fails without the worker preset. A mandatory dependency, never a switch. |
+| `preset-tower-reviewer` | visible | row | Declared by dsh-tower/preset-reviewer: the reviewer cannot be dispatched. Supported while review.requireReview is false (merge is unaffected); with the gate on planning/mode entry is locked with an explanatory error. |
 
 ## Forbidden to disable
 

package/host/preset-reviewer.js

@@ -0,0 +1,27 @@
+// Tower reviewer preset declaration (#121): the read-only preset's own label.
+//
+// This is the reviewer half of the pair documented in `host/preset-worker.js`.
+// The row used to mount `@deepseek-ai/dsh-agent-preset`, so DSH resolved that
+// shared module's locale and both preset rows rendered the same title; the
+// conditional reviewer switch was therefore indistinguishable from the
+// mandatory worker dependency. A Tower-owned module gives each row its own
+// `<specifier>/locale/<lang>.json` resource without importing the agent-preset
+// package (which is not resolvable from this package anyway).
+//
+// The module forwards the unchanged row config to the injected `agentPresets`
+// service and returns its disposer, so `register`/unregister lifecycle, the
+// definition's `plugins` mount and the activation diagnostic all stay registry
+// owned. It imports nothing and renders nothing.
+export const name = 'dsh-tower/preset-reviewer'
+
+export const inject = ['agentPresets']
+
+/**
+ * Register the reviewer preset with the profile's preset registry.
+ * @param {{ agentPresets: { register: (config: any) => Promise<() => Promise<void> | void> } }} ctx
+ * @param {any} config the `cordis.patch.yml` row config (id/name/description/order/plugins)
+ * @returns {Promise<() => Promise<void> | void>} the registry's unregister disposer
+ */
+export async function apply(ctx, config) {
+  return ctx.agentPresets.register(config)
+}

package/host/preset-worker.js

@@ -0,0 +1,32 @@
+// Tower worker preset declaration (#121): one row, one Plugins-page label.
+//
+// DSH labels a row from `readPluginMeta(row.moduleName)`, which resolves
+// `<specifier>/locale/en.json` and every sibling `<lang>.json` there. Both
+// preset rows used to mount `@deepseek-ai/dsh-agent-preset`, so both shared that
+// module's single label and the page could not tell the worker from the
+// reviewer. That package is also not resolvable from this package, so Tower
+// cannot add per-row locale files to it.
+//
+// This module is the tiny Tower-owned twin: it keeps the row config in
+// `cordis.patch.yml` and forwards it to the injected `agentPresets` service. The
+// service owns preset semantics — it mounts the definition's `plugins` list
+// itself and returns the disposer that unmounts it — so this module stays
+// renderer-free and imports nothing. Its specifier carries the worker label
+// (`dsh-tower/preset-worker/locale/<lang>.json`).
+//
+// Shape: a plain object plugin (named exports) whose async `apply` returns the
+// registry's disposer. Cordis collects the resolved function as the plugin's
+// disposer, so disabling the row (or an HMR unload) unregisters the preset.
+export const name = 'dsh-tower/preset-worker'
+
+export const inject = ['agentPresets']
+
+/**
+ * Register the worker preset with the profile's preset registry.
+ * @param {{ agentPresets: { register: (config: any) => Promise<() => Promise<void> | void> } }} ctx
+ * @param {any} config the `cordis.patch.yml` row config (id/name/description/order/plugins)
+ * @returns {Promise<() => Promise<void> | void>} the registry's unregister disposer
+ */
+export async function apply(ctx, config) {
+  return ctx.agentPresets.register(config)
+}

package/locale/en.json

@@ -39,9 +39,14 @@
       "summary": "Register tower_reload and /tower reload for linked-profile development.",
       "disables": "tower_reload and /tower reload are unavailable; a non-HMR profile behaves exactly as before. Shipped off."
     },
+    "preset-tower-worker": {
+      "title": "Tower Worker preset",
+      "summary": "Declares the Tower Worker preset: the mission protocol plus the filesystem, shell and Tower tools a worker runs inside its assigned worktree.",
+      "disables": "tower_spawn cannot start a worker without it."
+    },
     "preset-tower-reviewer": {
-      "title": "Tower reviewer",
-      "summary": "Read-only independent review: inspect the mission diff, verify scope and acceptance, return a verdict.",
+      "title": "Tower Reviewer preset",
+      "summary": "Declares the Tower Reviewer preset: read-only independent review that inspects the mission diff, verifies scope and acceptance, and returns a verdict.",
       "disables": "The reviewer cannot be dispatched. Supported while review.requireReview is false; with the gate on planning/mode entry is locked with an explanatory error."
     }
   }

package/locale/preset-reviewer/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Tower Reviewer preset",
+    "description": "Declares the Tower Reviewer preset: read-only independent review that inspects the mission diff, verifies scope and acceptance, and returns a verdict. When off: The reviewer cannot be dispatched. Supported while review.requireReview is false; with the gate on planning/mode entry is locked with an explanatory error."
+  }
+}

package/locale/preset-reviewer/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Tower Reviewer 预设",
+    "description": "声明 Tower Reviewer 预设：只读独立审查，检视任务差异、核对范围与验收，并返回结论。关闭后：无法派发审查代理。review.requireReview 为 false 时允许关闭；强制审查开启时规划/进入模式会被锁定并给出解释。"
+  }
+}

package/locale/preset-worker/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Tower Worker preset",
+    "description": "Declares the Tower Worker preset: the mission protocol plus the filesystem, shell and Tower tools a worker runs inside its assigned worktree. Mandatory dependency, not a switch: tower_spawn cannot start a worker without it."
+  }
+}

package/locale/preset-worker/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Tower Worker 预设",
+    "description": "声明 Tower Worker 预设：任务协议，以及执行代理在其工作树内使用的文件系统、终端与 Tower 工具。强制依赖，不是开关：缺少它 tower_spawn 无法启动执行代理。"
+  }
+}

package/locale/zh.json

@@ -39,9 +39,14 @@
       "summary": "为联动开发 profile 注册 tower_reload 与 /tower reload。",
       "disables": "tower_reload 与 /tower reload 不可用；非 HMR profile 的行为与之前完全相同。随包默认关闭。"
     },
+    "preset-tower-worker": {
+      "title": "Tower Worker 预设",
+      "summary": "声明 Tower Worker 预设：任务协议，以及执行代理在其工作树内使用的文件系统、终端与 Tower 工具。",
+      "disables": "缺少它 tower_spawn 无法启动执行代理。"
+    },
     "preset-tower-reviewer": {
-      "title": "Tower 审查代理",
-      "summary": "只读独立审查：检查 mission diff、核对范围与验收，给出结论。",
+      "title": "Tower Reviewer 预设",
+      "summary": "声明 Tower Reviewer 预设：只读独立审查，检视任务差异、核对范围与验收，并返回结论。",
       "disables": "无法派发审查代理。review.requireReview 为 false 时允许关闭；强制审查开启时规划/进入模式会被锁定并给出解释。"
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-tower",
-  "version": "2.4.1",
+  "version": "2.4.2",
   "type": "module",
   "description": "DSH-native Tower: mission planning, worktree isolation, review-gated merges, and a human-owned Tower mode.",
   "license": "MIT",
@@ -36,12 +36,16 @@
     "./leases": "./host/capability-leases.js",
     "./tests": "./host/capability-tests.js",
     "./hmr": "./host/capability-hmr.js",
+    "./preset-worker": "./host/preset-worker.js",
+    "./preset-reviewer": "./host/preset-reviewer.js",
     "./skills/locale/*.json": "./locale/skills/*.json",
     "./batch/locale/*.json": "./locale/batch/*.json",
     "./import/locale/*.json": "./locale/import/*.json",
     "./leases/locale/*.json": "./locale/leases/*.json",
     "./tests/locale/*.json": "./locale/tests/*.json",
     "./hmr/locale/*.json": "./locale/hmr/*.json",
+    "./preset-worker/locale/*.json": "./locale/preset-worker/*.json",
+    "./preset-reviewer/locale/*.json": "./locale/preset-reviewer/*.json",
     "./locale/*.json": "./locale/*.json",
     "./icon": "./icon.svg",
     "./package.json": "./package.json"

package/scripts/check-components.mjs

@@ -5,7 +5,9 @@
 // gate is what makes that a rule instead of a slogan. It fails on:
 //
 //   1. a visible component without `title`, `summary` and `disables` in both
-//      locale/en.json and locale/zh.json;
+//      locale/en.json and locale/zh.json — and the same three strings for every
+//      component that ships a generated row label, including the internal
+//      worker preset (#121);
 //   2. a forbidden-to-disable capability (host, health, recovery, review
 //      contract, merge gates) that any group, row or boolean key can disable;
 //   3. a component count that moved without a decision in
@@ -28,6 +30,7 @@ import { Config, configSurface } from '../domain/config/schema.js'
 import {
   COMPONENT_REFERENCE_FILE,
   COMPONENT_SURFACE_FILE,
+  LOCALE_FIELDS,
   LOCALE_FILES,
   checkForbidden,
   checkLocaleCoverage,
@@ -40,6 +43,7 @@ import {
 import { validateSurfaceBaselineKey } from '../domain/surface.js'
 import { readBaseline } from './lib/surface.mjs'
 import { parseArgs, runMain } from './lib/cli.mjs'
+import { ROW_LOCALES } from './generate-capability-locale.mjs'
 
 const PACKAGE_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
 const REGISTRY_FILE = 'host/tool-registry.js'
@@ -51,6 +55,7 @@ const USAGE = `usage: node scripts/check-components.mjs [--root <dir>] [--json]
   --help   print this text
 
 Fails on a visible component without title/summary/disables in both locale files,
+a generated row label (capability or preset) whose component entry is missing,
 a forbidden-to-disable capability disabled by a group, row or boolean key, a
 component count that moved without a scripts/surface-baseline.json decision,
 an unclassified config key or component row, and a stale generated reference.
@@ -60,6 +65,57 @@ function finding(code, level, message) {
   return { code, level, message }
 }
 
+/**
+ * The generated row-label map is a coverage axis of its own (#121). A component
+ * that ships a `<specifier>/locale/<lang>.json` label must carry `title`,
+ * `summary` and `disables` in every shipped locale — including an internal
+ * component such as the mandatory worker preset, which the visible-only rule in
+ * `domain/components.js` deliberately does not cover.
+ *
+ * `rows` is the generator's declaration (`{ specifier, component, mandatory? }`).
+ * When a row records `mandatory`, it must agree with the component-surface
+ * scope: an internal component is a dependency, never a switch. That is how the
+ * worker's "mandatory dependency" description and the component policy stay one
+ * decision.
+ *
+ * @param {any} surface the parsed `scripts/component-surface.json`
+ * @param {Record<string, any>} locales file path -> parsed locale JSON
+ * @param {Array<{ specifier: string, component: string, mandatory?: boolean }>} rows
+ */
+export function checkRowLocaleCoverage(surface, locales, rows) {
+  const findings = []
+  const record = (code, message) => findings.push(finding(code, 'error', message))
+  const components = new Map(surface.components.map((component) => [component.id, component]))
+  for (const row of rows ?? []) {
+    const component = components.get(row?.component)
+    if (!component) {
+      record(
+        'row-locale-unknown',
+        `row locale "${row?.specifier}" names component "${row?.component}", which the component surface does not declare`,
+      )
+      continue
+    }
+    if (typeof row.mandatory === 'boolean' && row.mandatory !== (component.scope === 'internal')) {
+      record(
+        'row-locale-scope',
+        `row locale "${row.specifier}" labels ${component.id} ${row.mandatory ? 'mandatory' : 'optional'}, but the component surface scope is ${component.scope}`,
+      )
+    }
+    for (const file of LOCALE_FILES) {
+      const entry = locales?.[file]?.components?.[component.id]
+      if (!entry || typeof entry !== 'object') {
+        record('row-locale', `row locale ${component.id} has no entry in ${file}`)
+        continue
+      }
+      for (const field of LOCALE_FIELDS) {
+        const value = typeof entry[field] === 'string' ? entry[field].trim() : ''
+        if (!value) record('row-locale', `row locale ${component.id} misses "${field}" in ${file}`)
+      }
+    }
+  }
+  return findings
+}
+
 /** The live boolean config keys, derived from the schemastery schema. */
 function liveBooleanKeys() {
   const keys = []
@@ -141,6 +197,10 @@ export function checkComponents(root) {
   }
   findings.push(...validateComponentSurface(surface, { configKeys: live.configKeys, patch: live.patch }))
   findings.push(...checkLocaleCoverage(surface, live.locales))
+  // #121: a row that ships a generated `<specifier>/locale/*.json` label needs
+  // the same three strings in both locales, including an internal row (the
+  // mandatory worker preset) that the visible-only rule above does not cover.
+  findings.push(...checkRowLocaleCoverage(surface, live.locales, ROW_LOCALES))
   findings.push(...checkForbidden(surface, { booleans: live.booleans, registry: live.registry, patch: live.patch }))
 
   // #122: an empty OPERATIONAL_TOOLS table is the expected state. Every route

package/scripts/check-pack.mjs

@@ -10,7 +10,7 @@ import { execFileSync } from 'node:child_process'
 import fs from 'node:fs'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
-import { capabilityLocalePaths } from './generate-capability-locale.mjs'
+import { capabilityLocalePaths, presetLocalePaths } from './generate-capability-locale.mjs'
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
 const REQUIRED_FILES = [
@@ -18,9 +18,13 @@ const REQUIRED_FILES = [
   'index.js',
   'locale/en.json',
   'locale/zh.json',
-  // #121: every optional capability row explains itself on the Plugins page
-  // through a subpath locale resource, so those generated files are required.
+  // #121: every optional capability row and both preset-declaring rows explain
+  // themselves on the Plugins page through a subpath locale resource, so those
+  // generated files are required.
   ...capabilityLocalePaths(),
+  ...presetLocalePaths(),
+  'host/preset-worker.js',
+  'host/preset-reviewer.js',
   'ui-bundle/index.js',
   'ui-bundle/package.json',
   'ui-bundle/cordis.patch.yml',

package/scripts/component-surface.json

@@ -61,13 +61,13 @@
       "id": "preset-tower-worker",
       "scope": "internal",
       "kind": "row",
-      "fallback": "tower_spawn fails without the worker preset. A mandatory dependency, never a switch."
+      "fallback": "Declared by dsh-tower/preset-worker: tower_spawn fails without the worker preset. A mandatory dependency, never a switch."
     },
     {
       "id": "preset-tower-reviewer",
       "scope": "visible",
       "kind": "row",
-      "fallback": "The reviewer cannot be dispatched. Supported while review.requireReview is false (merge is unaffected); with the gate on planning/mode entry is locked with an explanatory error."
+      "fallback": "Declared by dsh-tower/preset-reviewer: the reviewer cannot be dispatched. Supported while review.requireReview is false (merge is unaffected); with the gate on planning/mode entry is locked with an explanatory error."
     }
   ],
   "gateableTools": {},

package/scripts/generate-capability-locale.mjs

@@ -1,6 +1,6 @@
-// Generate the per-capability row locale files (#121).
+// Generate the per-row locale files (#121).
 //
-// The DSH Plugins page renders an optional row as
+// The DSH Plugins page renders a row as
 // `row.meta.title ?? row.moduleName` plus `row.meta.description`, and the Host
 // fills `row.meta` by resolving `<specifier>/locale/en.json` and then every
 // sibling `<lang>.json` in that directory. A subpath row without such a resource
@@ -10,9 +10,11 @@
 // Those files are generated, not hand-written: the single source of truth is the
 // `components` block of `locale/<lang>.json` that `npm run docs:check:components`
 // already audits. `meta.title` is the component `title`; `meta.description`
-// composes that component's `summary` (what the capability enables) with its
-// `disables` text (what turning it off removes), so the row explains the switch
-// in both directions.
+// composes that component's `summary` (what the row provides) with either its
+// `disables` text (what turning it off removes) or, for the mandatory worker
+// preset, an explicit "mandatory dependency, not a switch" label. The same
+// generator covers capability rows and the two preset-declaring rows, so their
+// labels cannot drift apart.
 //
 // Usage:
 //   node scripts/generate-capability-locale.mjs [--root <dir>] [--check]
@@ -28,6 +30,10 @@ const LANGUAGES = Object.keys(LANGUAGE_FILES)
 // `disables` prose, so the check can prove every description names what the
 // switch removes without depending on one English or Chinese phrasing.
 const OFF_EFFECT_LABEL = { en: 'When off:', zh: '关闭后：' }
+// The worker preset has no off state; it is a mandatory dependency of the Tower
+// host. Its description says so with an explicit marker instead of a "When off"
+// label that would make the row read like a switch.
+const DEPENDENCY_LABEL = { en: 'Mandatory dependency, not a switch:', zh: '强制依赖，不是开关：' }
 
 /**
  * The optional capability rows that need their own subpath locale resource, in
@@ -43,6 +49,22 @@ export const CAPABILITY_LOCALES = [
   { specifier: 'hmr', component: 'tower-hmr' },
 ]
 
+/**
+ * The two preset-declaring rows. They used to mount the shared
+ * `@deepseek-ai/dsh-agent-preset`, so DSH resolved one locale resource for both
+ * and rendered the same title twice. Each now owns a Tower declaration module
+ * (`host/preset-*.js`) and therefore its own `<specifier>/locale/*.json` label.
+ * `mandatory` is the worker dependency; it is asserted against the component
+ * surface scope by the gate/tests so the flag cannot drift from the policy.
+ */
+export const PRESET_LOCALES = [
+  { specifier: 'preset-worker', component: 'preset-tower-worker', mandatory: true },
+  { specifier: 'preset-reviewer', component: 'preset-tower-reviewer', mandatory: false },
+]
+
+/** Every row that ships a generated subpath locale resource. */
+export const ROW_LOCALES = [...CAPABILITY_LOCALES, ...PRESET_LOCALES]
+
 export const CAPABILITY_LOCALE_LANGUAGES = LANGUAGES
 
 /** Repo-relative paths of every generated capability locale file. */
@@ -52,7 +74,19 @@ export function capabilityLocalePaths() {
   )
 }
 
-/** The `package.json` exports entry that exposes one capability's locale files. */
+/** Repo-relative paths of every generated preset row locale file. */
+export function presetLocalePaths() {
+  return PRESET_LOCALES.flatMap(({ specifier }) =>
+    LANGUAGES.map((lang) => `locale/${specifier}/${lang}.json`),
+  )
+}
+
+/** Repo-relative paths of every generated row locale file (capability + preset). */
+export function rowLocalePaths() {
+  return [...capabilityLocalePaths(), ...presetLocalePaths()]
+}
+
+/** The `package.json` exports entry that exposes one row's locale files. */
 export function capabilityLocaleExport(specifier) {
   return { key: `./${specifier}/locale/*.json`, target: `./locale/${specifier}/*.json` }
 }
@@ -63,15 +97,22 @@ function requireText(value, label) {
   return text
 }
 
+/** Normalize the three locale prose fields a generated row label needs. */
+function rowText(entry, lang) {
+  return {
+    title: requireText(entry?.title, `${lang} row title`),
+    summary: requireText(entry?.summary, `${lang} row summary`).replace(/\s+/g, ' '),
+    disables: requireText(entry?.disables, `${lang} row disables`).replace(/\s+/g, ' '),
+  }
+}
+
 /**
  * Compose the display metadata for one capability row in one language.
  * @param {{ title: string, summary: string, disables: string }} entry
  * @param {'en' | 'zh'} lang
  */
 export function renderCapabilityMeta(entry, lang) {
-  const title = requireText(entry?.title, `${lang} capability title`)
-  const summary = requireText(entry?.summary, `${lang} capability summary`).replace(/\s+/g, ' ')
-  const disables = requireText(entry?.disables, `${lang} capability disables`).replace(/\s+/g, ' ')
+  const { title, summary, disables } = rowText(entry, lang)
   // Chinese prose does not space CJK punctuation, so the label joins directly.
   const space = lang === 'zh' ? '' : ' '
   return {
@@ -80,23 +121,57 @@ export function renderCapabilityMeta(entry, lang) {
 }
 
 /**
- * Render every generated file for one repository root.
- * @param {string} root
- * @returns {Map<string, string>} repo-relative path -> file text
+ * Compose the display metadata for one preset-declaring row in one language.
+ * The mandatory worker dependency is labelled as a dependency, never as a
+ * switch; the conditional reviewer keeps the ordinary off-effect label.
+ * @param {{ title: string, summary: string, disables: string }} entry
+ * @param {'en' | 'zh'} lang
+ * @param {boolean} mandatory
  */
-export function renderCapabilityLocaleFiles(root) {
+export function renderPresetMeta(entry, lang, mandatory) {
+  const { title, summary, disables } = rowText(entry, lang)
+  const space = lang === 'zh' ? '' : ' '
+  const label = mandatory ? DEPENDENCY_LABEL[lang] : OFF_EFFECT_LABEL[lang]
+  return {
+    meta: { title, description: `${summary}${space}${label}${space}${disables}` },
+  }
+}
+
+function readLocales(root) {
   const locales = {}
   for (const lang of LANGUAGES) {
     const file = path.join(root, LANGUAGE_FILES[lang])
     if (!fs.existsSync(file)) throw new Error(`${LANGUAGE_FILES[lang]} is missing under ${root}`)
     locales[lang] = JSON.parse(fs.readFileSync(file, 'utf8'))
   }
+  return locales
+}
+
+/** Pull one row's components entry out of both locales, or throw a named error. */
+function componentEntry(locales, lang, component) {
+  const entry = locales[lang]?.components?.[component]
+  if (!entry) throw new Error(`${LANGUAGE_FILES[lang]} has no components.${component} entry`)
+  return entry
+}
+
+/**
+ * Render every generated file for one repository root.
+ * @param {string} root
+ * @returns {Map<string, string>} repo-relative path -> file text
+ */
+export function renderRowLocaleFiles(root) {
+  const locales = readLocales(root)
   const files = new Map()
   for (const { specifier, component } of CAPABILITY_LOCALES) {
     for (const lang of LANGUAGES) {
-      const entry = locales[lang]?.components?.[component]
-      if (!entry) throw new Error(`${LANGUAGE_FILES[lang]} has no components.${component} entry`)
-      files.set(`locale/${specifier}/${lang}.json`, `${JSON.stringify(renderCapabilityMeta(entry, lang), null, 2)}\n`)
+      const rendered = renderCapabilityMeta(componentEntry(locales, lang, component), lang)
+      files.set(`locale/${specifier}/${lang}.json`, `${JSON.stringify(rendered, null, 2)}\n`)
+    }
+  }
+  for (const { specifier, component, mandatory } of PRESET_LOCALES) {
+    for (const lang of LANGUAGES) {
+      const rendered = renderPresetMeta(componentEntry(locales, lang, component), lang, mandatory)
+      files.set(`locale/${specifier}/${lang}.json`, `${JSON.stringify(rendered, null, 2)}\n`)
     }
   }
   return files
@@ -116,11 +191,12 @@ function main(argv) {
   --help   print this text
 
 The files are generated from the components block of locale/en.json and
-locale/zh.json; do not edit locale/<capability>/<lang>.json by hand.`)
+locale/zh.json; do not edit locale/<row>/<lang>.json by hand. Capability and
+preset-declaring rows share this generator so their labels cannot drift.`)
     return 0
   }
   const root = path.resolve(options.root)
-  const files = renderCapabilityLocaleFiles(root)
+  const files = renderRowLocaleFiles(root)
   if (options.check) {
     const stale = []
     for (const [relative, expected] of files) {
@@ -129,11 +205,11 @@ locale/zh.json; do not edit locale/<capability>/<lang>.json by hand.`)
       if (actual !== expected) stale.push(relative)
     }
     if (stale.length > 0) {
-      console.error('capability locale files are stale; run npm run docs:generate:locale')
+      console.error('row locale files are stale; run npm run docs:generate:locale')
       for (const relative of stale) console.error(`  ${relative}`)
       return 1
     }
-    console.log(`capability row locales: ${files.size} files in sync (${CAPABILITY_LOCALES.length} specifiers, en/zh)`)
+    console.log(`row locales: ${files.size} files in sync (${ROW_LOCALES.length} specifiers, en/zh)`)
     return 0
   }
   for (const [relative, text] of files) {
@@ -141,7 +217,7 @@ locale/zh.json; do not edit locale/<capability>/<lang>.json by hand.`)
     fs.mkdirSync(path.dirname(target), { recursive: true })
     fs.writeFileSync(target, text)
   }
-  console.log(`wrote ${files.size} capability row locale files (${CAPABILITY_LOCALES.length} specifiers, en/zh)`)
+  console.log(`wrote ${files.size} row locale files (${ROW_LOCALES.length} specifiers, en/zh)`)
   return 0
 }
 

package/scripts/mount-smoke/probe.mjs

@@ -11,6 +11,7 @@
 import fs from 'node:fs'
 import path from 'node:path'
 import { pathToFileURL } from 'node:url'
+import { PRESET_SPECIFIERS } from './surface.mjs'
 
 function parseArgs(argv) {
   const options = {}
@@ -45,7 +46,7 @@ for (const file of [profileBoot, appBoot]) {
 }
 
 const { runProfile } = await import(pathToFileURL(profileBoot).href)
-const { loadLayeredEnv } = await import(pathToFileURL(appBoot).href)
+const { loadLayeredEnv, readPluginMeta } = await import(pathToFileURL(appBoot).href)
 if (typeof runProfile !== 'function') throw new Error(`probe: host ${hostVersion} does not export runProfile`)
 
 /** Run one surface read, keeping a missing service a reportable value. */
@@ -64,7 +65,7 @@ const { ctx, shutdown } = await runProfile({
   args: [],
 })
 
-const surface = { host: { version: hostVersion }, profile: {}, tools: null, skills: null, presets: null, commands: null, tree: null }
+const surface = { host: { version: hostVersion }, profile: {}, tools: null, skills: null, presets: null, labels: null, commands: null, tree: null }
 try {
   const profileContext = ctx.get('profileContext')
   surface.profile = {
@@ -88,9 +89,38 @@ try {
 
   const presets = ctx.get('agentPresets')
   surface.presets = presets
-    ? await read(async () => (await presets.list()).map((preset) => preset.id))
+    ? await read(async () => {
+        // Both preset rows declare themselves through Tower-owned modules
+        // (`dsh-tower/preset-*`). Keep the display metadata and the activation
+        // diagnostic so the smoke can prove each row still mounts, not only
+        // that two ids exist (#121).
+        const list = await presets.list()
+        return {
+          ids: list.map((preset) => preset.id),
+          entries: list.map(({ id, name, description, order, broken }) => ({
+            id,
+            ...name === undefined ? {} : { name },
+            ...description === undefined ? {} : { description },
+            ...order === undefined ? {} : { order },
+            ...broken === undefined ? {} : { broken },
+          })),
+        }
+      })
     : { error: 'the agentPresets service is not mounted (profile has no preset registry)' }
 
+  // The Plugins page labels a row through this exact call. Resolve both preset
+  // row specifiers from the installed profile so the smoke proves the two rows
+  // render distinct titles/descriptions instead of one shared label (#121).
+  surface.labels =
+    typeof readPluginMeta === 'function' && typeof profileContext?.dir === 'string'
+      ? await read(() => {
+          const base = pathToFileURL(path.join(profileContext.dir, 'cordis.yml')).href
+          return Object.fromEntries(
+            PRESET_SPECIFIERS.map((specifier) => [specifier, readPluginMeta(specifier, base) ?? null]),
+          )
+        })
+      : { error: 'the host exports no readPluginMeta, so preset row labels cannot be read' }
+
   const commands = ctx.get('commands')
   surface.commands = commands
     ? await read(() => commands.list(undefined).map((command) => command.name))

package/scripts/mount-smoke/surface.mjs

@@ -55,11 +55,30 @@ export function defaultOffToolIds() {
   return ids
 }
 
+/**
+ * The two preset rows the bundle declares. Each row mounts a Tower-owned
+ * declaration module (`dsh-tower/preset-*`) whose config the agent-preset
+ * registry registers; the label and the read-only reviewer surface are part of
+ * the contract, so the smoke compares the loaded `agentPresets.list()` entries
+ * against this table (#121).
+ */
+export const PRESET_ROWS = Object.freeze([
+  Object.freeze({ id: 'tower-worker', specifier: 'preset-worker', name: 'Tower Worker', order: 60 }),
+  Object.freeze({ id: 'tower-reviewer', specifier: 'preset-reviewer', name: 'Tower Reviewer', order: 61 }),
+])
+
 /** Presets the bundle declares for its worker and reviewer roles. */
-export const PRESET_IDS = ['tower-reviewer', 'tower-worker']
+export const PRESET_IDS = PRESET_ROWS.map((row) => row.id).sort()
+
+/** Module specifiers the two preset rows mount; each owns its Plugins-page label. */
+export const PRESET_SPECIFIERS = PRESET_ROWS.map((row) => `dsh-tower/${row.specifier}`)
 
 /** Cordis fiber state 2: mounted and active. */
 const FIBER_ACTIVE = 2
+/** Cordis fiber state 3: the plugin failed to activate. */
+const FIBER_FAILED = 3
+/** Cordis fiber state 1: activation is still in flight (the boot has not settled). */
+const FIBER_PENDING = 1
 
 const OWNED_ROW_IDS = new Set([BUNDLE_ID, ...BUNDLE_CHILD_IDS, ...OPTIONAL_ROW_IDS])
 
@@ -128,6 +147,128 @@ export function compareIds(label, expectedIds, loadedIds) {
   return failures
 }
 
+/** Read one localized field: DSH reports `{ en, zh }` maps, a bare string, or nothing. */
+function localizedField(value, lang) {
+  if (typeof value === 'string') return value.trim() || undefined
+  if (value && typeof value === 'object' && typeof value[lang] === 'string') return value[lang].trim() || undefined
+  return undefined
+}
+
+/**
+ * Assert the two preset rows resolve distinct Plugins-page labels. The defect
+ * this mission fixes was two rows sharing `@deepseek-ai/dsh-agent-preset`, so
+ * both rendered that module's single title; the smoke now reads the same
+ * `readPluginMeta` the page uses and requires a distinct title and description
+ * per specifier (#121).
+ * @param {Record<string, { title?: unknown, description?: unknown, error?: string } | null>} labels
+ *   module specifier -> label metadata from `readPluginMeta`.
+ * @returns {string[]} one message per missing, failed or indistinguishable label.
+ */
+export function checkPresetLabels(labels) {
+  const failures = []
+  const byLanguage = { en: new Map(), zh: new Map() }
+  for (const row of PRESET_ROWS) {
+    const specifier = `dsh-tower/${row.specifier}`
+    const label = labels?.[specifier]
+    if (label === undefined) {
+      failures.push(`label: no label reported for ${specifier}`)
+      continue
+    }
+    if (label === null) {
+      failures.push(`label: ${specifier} resolves no locale metadata`)
+      continue
+    }
+    if (label.error) {
+      failures.push(`label: ${specifier}: ${label.error}`)
+      continue
+    }
+    for (const lang of ['en', 'zh']) {
+      const title = localizedField(label.title, lang)
+      const description = localizedField(label.description, lang)
+      if (!title) {
+        failures.push(`label: ${specifier} has no ${lang} title`)
+        continue
+      }
+      if (!description) failures.push(`label: ${specifier} has no ${lang} description`)
+      if (title === specifier) failures.push(`label: ${specifier} falls back to the module specifier as its ${lang} title`)
+      if (!title.includes(row.name)) failures.push(`label: ${specifier} ${lang} title does not name ${row.name}`)
+      byLanguage[lang].set(specifier, { title, description })
+    }
+  }
+  for (const lang of ['en', 'zh']) {
+    const entries = [...byLanguage[lang].entries()]
+    if (entries.length < 2) continue
+    const [first] = entries
+    for (const [specifier, entry] of entries.slice(1)) {
+      if (entry.title === first[1].title) {
+        failures.push(`label: ${first[0]} and ${specifier} share the same ${lang} title`)
+      }
+      if (entry.description !== undefined && entry.description === first[1].description) {
+        failures.push(`label: ${first[0]} and ${specifier} share the same ${lang} description`)
+      }
+    }
+  }
+  return failures
+}
+
+/**
+ * Compare the loaded preset definitions against {@link PRESET_ROWS}. A missing
+ * preset, a changed display name/order, or an activation diagnostic (`broken`)
+ * is a failed claim: a preset row that mounts but never activates is exactly the
+ * regression the smoke exists to catch.
+ * @param {Array<{ id?: string, name?: string, order?: number, broken?: string }>} entries
+ * @returns {string[]} one message per violated preset claim.
+ */
+export function checkPresetRows(entries) {
+  const list = Array.isArray(entries) ? entries : []
+  const byId = new Map(list.map((entry) => [String(entry?.id), entry]))
+  const failures = []
+  for (const row of PRESET_ROWS) {
+    const entry = byId.get(row.id)
+    if (!entry) {
+      failures.push(`preset: missing ${row.id}`)
+      continue
+    }
+    if (entry.name !== row.name) {
+      failures.push(`preset: ${row.id} name ${JSON.stringify(entry.name)}, expected ${JSON.stringify(row.name)}`)
+    }
+    if (entry.order !== row.order) {
+      failures.push(`preset: ${row.id} order ${JSON.stringify(entry.order)}, expected ${row.order}`)
+    }
+    if (entry.broken) failures.push(`preset: ${row.id} failed to mount: ${entry.broken}`)
+  }
+  return failures
+}
+
+/** Entry ids whose fiber reported an activation error (state 3). */
+export function failedEntryStates(entryStates = {}) {
+  return Object.entries(entryStates)
+    .filter(([, state]) => state === FIBER_FAILED)
+    .map(([id]) => id)
+    .sort()
+}
+
+/** Entry ids still loading when the boot returned (state 1). */
+export function pendingEntryStates(entryStates = {}) {
+  return Object.entries(entryStates)
+    .filter(([, state]) => state === FIBER_PENDING)
+    .map(([id]) => id)
+    .sort()
+}
+
+/**
+ * No row may fail or stay pending in a green smoke: the bundle is supposed to
+ * compose a working profile, not merely register the ids it claims.
+ * @param {Record<string, number | null | undefined>} entryStates
+ * @returns {string[]} one message per failed or pending row.
+ */
+export function checkRowStates(entryStates = {}) {
+  const failures = []
+  for (const id of failedEntryStates(entryStates)) failures.push(`row: ${id} failed to mount (entry state 3)`)
+  for (const id of pendingEntryStates(entryStates)) failures.push(`row: ${id} is still pending (entry state 1)`)
+  return failures
+}
+
 /** Effective loader id for a nested row (`group:child`), falling back to the raw id. */
 function stateKey(id, entryStates) {
   if (entryStates[id] !== undefined) return id

package/scripts/mount-smoke.mjs

@@ -25,6 +25,9 @@ import {
   INDEX_TOOL_IDS,
   PRESET_IDS,
   checkBundleRow,
+  checkPresetLabels,
+  checkPresetRows,
+  checkRowStates,
   compareIds,
   expectedSkillIds,
   expectedToolIds,
@@ -163,13 +166,29 @@ function verifySurface(surface, root) {
   if (loadedSkills) failures.push(...compareIds('skill', expectedSkills, loadedSkills.tower))
 
   const loadedPresets = area(surface, 'presets', 'preset', failures)
-  if (loadedPresets) failures.push(...compareIds('preset', PRESET_IDS, loadedPresets))
+  if (loadedPresets) {
+    failures.push(...compareIds('preset', PRESET_IDS, loadedPresets.ids ?? []))
+    // Both preset rows must still activate: ids, display names/orders and no
+    // registry activation diagnostic (#121).
+    failures.push(...checkPresetRows(loadedPresets.entries ?? []))
+  }
+
+  // The Plugins page reads the label through `readPluginMeta`; the two preset
+  // rows used to share one module and rendered the same title. Prove the
+  // installed package now resolves a distinct label per row (#121).
+  const loadedLabels = area(surface, 'labels', 'label', failures)
+  if (loadedLabels) failures.push(...checkPresetLabels(loadedLabels))
 
   const loadedCommands = area(surface, 'commands', 'command', failures)
   if (loadedCommands && !loadedCommands.includes('tower')) failures.push('command: /tower is not registered in the loaded command registry')
 
   const tree = area(surface, 'tree', 'bundle', failures)
-  if (tree) failures.push(...checkBundleRow(tree.top, tree.states))
+  if (tree) {
+    failures.push(...checkBundleRow(tree.top, tree.states))
+    // The bundle was replaced row-by-row (#121); prove no row failed to activate
+    // or is still waiting, not only that the expected rows are active.
+    failures.push(...checkRowStates(tree.states))
+  }
 
   return failures
 }
@@ -179,10 +198,11 @@ function summarize(surface, root) {
   const expected = expectedToolIds(toolModuleNames(root)).length
   const tools = Array.isArray(surface?.tools?.value) ? surface.tools.value.filter((name) => name.startsWith('tower_')).length : '?'
   const skills = Array.isArray(surface?.skills?.value?.tower) ? surface.skills.value.tower.length : '?'
-  const presets = Array.isArray(surface?.presets?.value) ? surface.presets.value.length : '?'
+  const presets = Array.isArray(surface?.presets?.value?.ids) ? surface.presets.value.ids.length : '?'
+  const labels = surface?.labels?.value && typeof surface.labels.value === 'object' ? Object.keys(surface.labels.value).length : '?'
   const commands = Array.isArray(surface?.commands?.value) ? surface.commands.value.filter((name) => name === 'tower').length : '?'
   const rows = Array.isArray(surface?.tree?.value?.top) ? surface.tree.value.top.filter((row) => row.id === BUNDLE_ID).length : '?'
-  return `${tools} of ${expected} tower tools (${modules} modules + ${INDEX_TOOL_IDS.length} entry tools; ${DEFAULT_OFF_ROW_IDS.join(', ')} off), ${skills} skills, ${presets} presets, /tower ${commands === 1 ? 'present' : 'missing'}, ${rows} top-level bundle row`
+  return `${tools} of ${expected} tower tools (${modules} modules + ${INDEX_TOOL_IDS.length} entry tools; ${DEFAULT_OFF_ROW_IDS.join(', ')} off), ${skills} skills, ${presets} presets (${labels} distinct labels), /tower ${commands === 1 ? 'present' : 'missing'}, ${rows} top-level bundle row`
 }
 
 function reportFailure(state, pin, options, error) {

package/scripts/pack-manifest.txt

@@ -157,6 +157,8 @@ host/doctor.js
 host/hmr.js
 host/modeState.js
 host/modeStore.js
+host/preset-reviewer.js
+host/preset-worker.js
 host/presets.js
 host/tool-registry.js
 host/tower.js
@@ -171,6 +173,10 @@ locale/import/en.json
 locale/import/zh.json
 locale/leases/en.json
 locale/leases/zh.json
+locale/preset-reviewer/en.json
+locale/preset-reviewer/zh.json
+locale/preset-worker/en.json
+locale/preset-worker/zh.json
 locale/skills/en.json
 locale/skills/zh.json
 locale/tests/en.json