From e3e26b6bd6d22005c2ba3bf7346f74b917df965d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 14:00:45 +0800
Subject: [PATCH 01/18] docs: record bounded local coding runtime diagnosis

---
 ...261014-diagnose-coding-runtime-8b41c9e2.md | 48 +++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 .project-docs/30-worklog/tasks/20261014-diagnose-coding-runtime-8b41c9e2.md

diff --git a/.project-docs/30-worklog/tasks/20261014-diagnose-coding-runtime-8b41c9e2.md b/.project-docs/30-worklog/tasks/20261014-diagnose-coding-runtime-8b41c9e2.md
new file mode 100644
index 00000000..55956382
--- /dev/null
+++ b/.project-docs/30-worklog/tasks/20261014-diagnose-coding-runtime-8b41c9e2.md
@@ -0,0 +1,48 @@
+# Task: Diagnose unavailable local programming runtime
+
+## Identity
+
+- Task ID: 20261014-diagnose-coding-runtime-8b41c9e2
+- Mode: Feature
+- Branch: codex/20261014-diagnose-coding-runtime-8b41c9e2-diagnose-coding-runtime
+- Worktree: /Users/chillishark/Makelore 麦洛/.codex-worktrees/makelore/20261014-diagnose-coding-runtime-8b41c9e2
+- Base commit: f34e651774beb6a2a213b5711f2ffb887d22d4b7
+- Owner: codex
+- Status: Ready for Integration
+
+## Scope
+
+- Diagnose the current trial Code runtime-unavailable notice using source, immutable runtime artifacts and bounded application startup diagnostics; explain what is actually known and the evidence gap.
+
+## Intent And Constraints
+
+- This request asks why; no product/source fix, app restart, user worker, paid model call, UI mutation, profile/credential/chat-history read or deployment. Isolated owned checkout based on the just-published f34e651. Read only startup diagnostics and runtime dependency metadata. Preserve current runtime and all peer/primary work.
+
+## Outcome
+
+- Direct failure stage identified: the Pi Agent Server starts and reaches server.ready, then the managed session-open path fails and cleans up with open_failure. The original exception is not retained by current diagnostics, so the specific underlying cause cannot honestly be identified from existing evidence. No runtime or product changes made.
+
+## Verification
+
+- No tests or paid/provider invocation required for this read-only diagnosis. Source trace independently reviewed; current native-launch.log has three server.ready→open_failure cycles, no diagnostic field/original stack, and later background_sleep events do not prove recovery. Actual Main/server artifacts match active436 manifest. Pi0.84.2 files/modules/required API exports are present and resolve in the actual retained runtime; Node version meets its engine. E2E=1 is real but does not disable coding composition/Pi. No secrets/profile state read.
+
+## Follow-ups
+
+- For a repair continuation, capture a bounded sanitized original exception at the managed session-open boundary, reproduce the failing initialization without a paid prompt, then fix its actual cause and verify the real Code session. Avoid guessing a model/network cause, blindly reinstalling dependencies or treating E2E as a disable flag. This diagnostic checkout is retained ready for that same issue; no source fix or publication was requested.
+
+## Promotion Candidates
+
+- None recorded.
+
+## Project Context Loaded
+
+- Task ID20261014-diagnose-coding-runtime-8b41c9e2, Feature, branch/worktree/basef34e651 exactly verified through official start/status;69 peers assessed through only their Scope/Intent/Promotion sections. Two old placeholder scopes remain unknown; no concrete conflict with read-only diagnosis.
+- Loaded startup/memory-index and own record; canonical project-positioning/current-state/decision/system/business/evidence/reflection/commitment/stale documents are byte-identical to350f7d7 already read in this conversation. Product goal and Main-owned auth/runtime/project boundaries remain; Pi0.84.2 is the only supported coding runtime. No old provider/runtime fallback or credential handling change.
+- Gate Passed for bounded diagnosis. Plan: trace public error→actual prepare/open stage, independently check retained artifacts/dependencies and sanitized existing startup events, report supported facts and missing evidence.
+
+## Evidence And Boundary
+
+- `electron/coding-runtime/conversation-service.ts:88–114` maps ordinary exceptions without publicError to503 CODING_RUNTIME_UNAVAILABLE. `electron/api/routes/coding-route-errors.ts:39` supplies the fixed Chinese message. Snapshot417–428/prepare753–788 opens the runtime even before sending a prompt.
+- `electron/coding-runtime/pi/runtime.ts:238` managed opener includes provider projection/resources/extensions and SDK session opening;487–491 cleanup reasonopen_failure rethrows without preserving the raw error in current application logs. Existing server.ready events prove server startup/import but not successful thread/session initialization.
+- Current stage native-launch.log contains E2E startup atline4; Main575 creates coding composition regardless. E2E alters startup effects/background idle timing, not a blanket Pi disable. Actual runtime/server/Main hashes match the active436 source; development resolves Pi CLI via snapshot node_modules→primary, not packaged resources/pi-runtime. Pi package/version,7server module paths and6required APIs are present. These checks do not prove every generated session/resource/configuration is valid.
+- Read-only independent source and artifact reviewers agree: log evidence does not distinguish the original provider/configuration/extension/session exception. Specific diagnosis requires new sanitized exception evidence; do not call a hypothesis the proven root cause.

From f1dabdb358ff5f2228fbef014f9e659c156ccc10 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 14:20:17 +0800
Subject: [PATCH 02/18] feat: allow editing local WeChat card names

---
 .../20261014-wechat-card-name-7b36a2d9.md     |  54 ++++++++
 README.md                                     |   2 +
 src/pages/CloudAgents/ChannelAccounts.tsx     | 122 ++++++++++++++++--
 src/pages/CloudAgents/wechat-card-names.ts    |  22 ++++
 tests/e2e/cloud-agent-channels.spec.ts        |  28 ++++
 tests/unit/channel-accounts-page.test.tsx     |  97 ++++++++++++++
 6 files changed, 314 insertions(+), 11 deletions(-)
 create mode 100644 .project-docs/30-worklog/tasks/20261014-wechat-card-name-7b36a2d9.md
 create mode 100644 src/pages/CloudAgents/wechat-card-names.ts

diff --git a/.project-docs/30-worklog/tasks/20261014-wechat-card-name-7b36a2d9.md b/.project-docs/30-worklog/tasks/20261014-wechat-card-name-7b36a2d9.md
new file mode 100644
index 00000000..dae38767
--- /dev/null
+++ b/.project-docs/30-worklog/tasks/20261014-wechat-card-name-7b36a2d9.md
@@ -0,0 +1,54 @@
+# Task: Make WeChat card display name editable
+
+## Identity
+
+- Task ID: 20261014-wechat-card-name-7b36a2d9
+- Mode: Feature
+- Branch: codex/20261014-wechat-card-name-7b36a2d9-wechat-card-name
+- Worktree: /Users/chillishark/Makelore 麦洛/.codex-worktrees/makelore/20261014-wechat-card-name-7b36a2d9
+- Base commit: 436f7ba1eab500e41866f890f49816ff622ef6fe
+- Owner: codex
+- Status: In Progress
+
+## Scope
+
+- Make the WeChat card display name editable as an account-scoped local remark; save/cancel/Enter/Escape, reload persistence and failure feedback. Preserve current complete temporary runtime436f7ba and deliver the Renderer correction.
+
+## Intent And Constraints
+
+- User explicitly requests the card name (微信4) to be editable. Display remarks are local UI preferences keyed by tenant/user/stable channel account ID, following existing device-only card removal. No cloud rename operation exists; do not rename the real WeChat profile or invent server sync. Preserve all binding/QR/revision/health/operation recovery/auto-reply contracts. No live rename value, account binding mutation, model request, cloud deployment, main merge/push/cleanup or Main restart is authorized/needed.
+
+## Project Context Loaded
+
+- Task/mode/branch/worktree/base exactly match successful official check/start/status: new managed feature worktree from436f7ba1eab500e41866f890f49816ff622ef6fe, the actual current Renderer/Main source. Runtime metadata is fresh: MainPID35142/Host58003, consolidated-five-20261014-2d069b40, same trial profile/bundle.
+- Read AGENTS, read-before-planning/memory-index, own record, positioning, historical integrated current-state, decision-index/system overview, community boundary, success criteria, domain WeChat identity rules, personal-cloud ADR User-Owned/Scan-Bound sections and evidence/reflection/commitment indexes. Integrated documents are historical; pointer/artifact source identify current app.
+- All72 peer Scope/Intent/Promotion sections were read only. Another same-name placeholder9e3a72c4 was investigated via Agent--渠道 thread: its naming turn is interrupted and the human explicitly said to ignore it; latest agent work stops naming and diagnoses offline readiness. It remains untouched; current chat still explicitly requests card-name editing. The binding diagnostic and other ready WeChat tasks do not define a different card-name authority. No unresolved semantic conflict.
+- Existing shared/Main API exposes display_name only at create; no rename/update operation. Core account ID/router/revision/health remain authoritative. Local remarks are presentation preferences, not cloned cloud configuration; no cross-device promise. Design skill/database reviewed: retain current card palette/type, visible pencil focus target, accessible labeled field and responsive wrapping.
+- Evidence/constraints: existing unit/native fixtures cover binding/recovery and must remain valid. New tests focus persistence by stable identity, account isolation, cancel/validation/storage failure and no remote mutation. Explicit edit state must block automatic restore-replies start and its async preflight; auth changes hide/close old drafts immediately and writes verify current owner.
+- Likely files: ChannelAccounts.tsx, a small local remark preference helper, README and current channel unit/native fixtures. Unknown: native saved/idle UI availability for refresh; check at delivery. Gate: Passed before implementation plan.
+
+## Plan
+
+1. Add current-account local remark preference and inline pencil/edit/save/cancel controls; preserve original account DTO and consistent title/aria/dialog display. Handle validation, storage failure and owner switching, guard restore preflight during editing.
+2. Run focused unit/native rename and binding regressions, typecheck, scoped lint and default build. Document exact local preference scope.
+3. Prepare immutable Renderer overlay over existing Main bytes, verify live saved/idle UI, reload through native CUA and confirm edit/save/cancel controls without changing the user's real card name. Finalize only after actual UI evidence.
+
+## Outcome
+
+- Added visible title/pencil editing, a labeled inline name field and save/cancel controls. Enter saves (except IME composition), Escape cancels; trim/nonempty/64-character validation and local storage failure keep the original display and draft. Remarks are scoped by tenant/user plus stable account ID, persist across refresh/revision/rebinding and are consistently used by card headings/aria/dialog title. Returning to the original source name clears its local override.
+- Owner changes immediately hide the old editor/alias and close its draft; saves verify live auth owner. Missing/hidden cards close the editor rather than locking the page. Editing prevents competing binding actions and automatic restore start/preflight while read-only health refresh remains available. Main/API/DTO/account/revision/operation identities are unchanged. README describes local-only remarks honestly.
+- Renderer build ready; immutable overlay preparation and actual native open/cancel verification remain before runtime finalization.
+
+## Verification
+
+- Typecheck, scoped ESLint, default full build:vite (NIANCODE_RENDERER_ONLY unset), git diff --check and task-aware doc drift passed. Independent source review found no blockers.
+- 116 channel unit cases passed, including remark persistence after revision change, cancel/Escape, validation/storage retry, user+tenant isolation, malformed storage, vanished-card unlock and Worker recovery without enabling during editing. Initial storage-failure fixture spy targeted Storage.prototype despite the suite's own mock; corrected to localStorage and reran all116 successfully.
+- Isolated Electron channel lifecycle scenario passed8.0s, including added keyboard edit/Escape/Enter, 64-character long remark, real reload persistence, original-name restoration and zero extra remote operations. Existing synthetic binding/switch/unbind/recovery assertions also passed. Reviewed compact980px editor screenshot; controls/badge fit, saved long name has no card overflow. Logs `/tmp/makelore-wechatname7b36-{unit,type,lint,build,electron}.log`, images `/tmp/makelore-wechatname7b36-electron`.
+
+## Follow-ups
+
+- None recorded.
+
+## Promotion Candidates
+
+- None recorded.
diff --git a/README.md b/README.md
index 02b1e42a..93ae0a51 100644
--- a/README.md
+++ b/README.md
@@ -68,6 +68,8 @@ Makelore 是一个面向软件、视觉创作、智能机器人与个人云智
 - 界面语言：仅保留中文；系统语言和历史设置中的其他语言会自动归一为中文。
 - 品牌资产：生产 SVG、PNG、应用图标、托盘图标与安装器视觉位于 [`resources/brand/`](resources/brand/README.md) 和 `resources/icons/`。
 
+微信卡片名称可点击名称旁的铅笔修改，支持保存、取消、Enter 保存与 Escape 取消。备注名按当前账号与微信账号 ID 保存在本机，刷新或重新绑定后保留；不修改真实微信昵称或云端名称，不跨设备同步。保存失败保留原名称与编辑内容，可重试。
+
 ## 安装与开发
 
 项目使用 `package.json` 中固定版本的 pnpm。
diff --git a/src/pages/CloudAgents/ChannelAccounts.tsx b/src/pages/CloudAgents/ChannelAccounts.tsx
index 60680149..82f18d01 100644
--- a/src/pages/CloudAgents/ChannelAccounts.tsx
+++ b/src/pages/CloudAgents/ChannelAccounts.tsx
@@ -6,6 +6,7 @@ import {
   Link2,
   Loader2,
   MoreHorizontal,
+  Pencil,
   Plus,
   QrCode,
   RefreshCw,
@@ -34,6 +35,7 @@ import type {
 import { CloudAvatar } from './CloudAvatar';
 import { CloudRecovery } from './CloudRecovery';
 import { CloudWechatQr } from './CloudWechatQr';
+import { MAX_WECHAT_CARD_NAME_LENGTH, readWechatCardNames, wechatCardNameKey } from './wechat-card-names';
 
 type Flow = {
   mode: 'new' | 'switch' | 'reconnect' | 'unbind' | 'delete';
@@ -42,6 +44,7 @@ type Flow = {
   target: string;
 };
 type Expected = { target: string | null; enabled: boolean; disconnected?: boolean };
+type NameEdit = { ownerKey: string; accountId: string; value: string; error: string };
 const errorText = (error: unknown) => (error instanceof Error ? error.message : '操作没有完成，请重试');
 const isChannelManagementOperation = (operation: string) =>
   /channelaccount|channelbinding|^wechat/iu.test(operation);
@@ -155,6 +158,22 @@ export function ChannelAccounts() {
   const navigate = useNavigate();
   const user = useAuthStore((state) => state.user);
   const cardStorageKey = cardPreferenceKey(user);
+  const nameStorageKey = wechatCardNameKey(user);
+  const [cardNames, setCardNames] = useState(() => ({
+    key: nameStorageKey, values: readWechatCardNames(nameStorageKey),
+  }));
+  const [nameEdit, setNameEdit] = useState<NameEdit | null>(null);
+  const nameEditRef = useRef<NameEdit | null>(null);
+  const editingName = nameEdit?.ownerKey === nameStorageKey ? nameEdit : null;
+  useEffect(() => {
+    setCardNames({ key: nameStorageKey, values: readWechatCardNames(nameStorageKey) });
+    nameEditRef.current = null;
+    setNameEdit(null);
+  }, [nameStorageKey]);
+  const cardName = (account: CloudUserChannelAccount) =>
+    cardNames.key === nameStorageKey && Object.hasOwn(cardNames.values, account.id)
+      ? cardNames.values[account.id]
+      : account.display_name;
   const [removedCards, setRemovedCards] = useState(() => ({
     key: cardStorageKey, revisions: readRemovedCards(cardStorageKey),
   }));
@@ -209,7 +228,50 @@ export function ChannelAccounts() {
   const ownerLogoutPending = accounts.some((account) =>
     account.blockers.includes('wechat_disconnect_pending')
   );
-  const disabled = Boolean(busy) || restoringReplies || recoveryBlocked || !recoveryLoaded || ownerLogoutPending;
+  const disabled = Boolean(busy) || restoringReplies || Boolean(editingName) || recoveryBlocked || !recoveryLoaded || ownerLogoutPending;
+  const cancelNameEdit = () => {
+    nameEditRef.current = null;
+    setNameEdit(null);
+  };
+  const editingAccountVisible = !editingName || visibleAccounts.some((account) => account.id === editingName.accountId);
+  useEffect(() => {
+    if (accountsLoaded && !editingAccountVisible) {
+      nameEditRef.current = null;
+      setNameEdit(null);
+    }
+  }, [accountsLoaded, editingAccountVisible]);
+  const startNameEdit = (account: CloudUserChannelAccount) => {
+    if (!nameStorageKey || busyRef.current || restoringReplies || flow || editingName) return;
+    const edit = { ownerKey: nameStorageKey, accountId: account.id, value: cardName(account), error: '' };
+    nameEditRef.current = edit;
+    setNameEdit(edit);
+    setMore('');
+  };
+  const saveNameEdit = () => {
+    if (!editingName) return;
+    if (wechatCardNameKey(useAuthStore.getState().user) !== editingName.ownerKey) {
+      cancelNameEdit();
+      return;
+    }
+    const value = editingName.value.trim();
+    if (!value || value.length > MAX_WECHAT_CARD_NAME_LENGTH) {
+      setNameEdit({ ...editingName, error: `请填写1–${MAX_WECHAT_CARD_NAME_LENGTH}个字符的名称。` });
+      return;
+    }
+    const account = accounts.find((item) => item.id === editingName.accountId);
+    if (!account) { cancelNameEdit(); return; }
+    const values = { ...readWechatCardNames(nameStorageKey) };
+    if (value === account.display_name) delete values[account.id];
+    else values[account.id] = value;
+    try { localStorage.setItem(nameStorageKey, JSON.stringify(values)); }
+    catch {
+      setNameEdit({ ...editingName, error: '名称没有保存：暂时无法保存到这台设备，请重试。' });
+      return;
+    }
+    if (wechatCardNameKey(useAuthStore.getState().user) === nameStorageKey)
+      setCardNames({ key: nameStorageKey, values });
+    cancelNameEdit();
+  };
   const pendingFor = (id: string) =>
     pending.some(
       (item) => isChannelManagementOperation(item.operation) && item.input.channel_account_id === id
@@ -573,7 +635,7 @@ export function ChannelAccounts() {
     if (
       loading || !accountsLoaded || !agentsLoaded || agentsError ||
       !recoveryLoaded || recoveryBlocked || ownerLogoutPending ||
-      busy || busyRef.current || restoringReplies || flow || more ||
+      busy || busyRef.current || restoringReplies || flow || more || editingName ||
       checkingIds.length || replyRestoreStopped.current
     ) return;
     const candidate = accounts.find((account) =>
@@ -587,7 +649,7 @@ export function ChannelAccounts() {
     setRestoringReplies(true);
     void run('restore-replies', candidate.id, async () => {
       const [catalog, recovery] = await Promise.all([loadAgents(), cloudAgentsApi.recovery()]);
-      if (!alive.current || flowRef.current) return { restored: false };
+      if (!alive.current || flowRef.current || nameEditRef.current) return { restored: false };
       agentsRef.current = catalog;
       setAgents(catalog);
       setPending(recovery.pending);
@@ -599,7 +661,7 @@ export function ChannelAccounts() {
       if (!account || account.target_agent_slug !== candidate.target_agent_slug)
         return { restored: false, stop: true };
       if (
-        !alive.current || flowRef.current || ownerPending.current ||
+        !alive.current || flowRef.current || nameEditRef.current || ownerPending.current ||
         observed.some((item) => item.blockers.includes('wechat_disconnect_pending')) ||
         !canRestoreReplies(account, catalog)
       ) return { restored: false };
@@ -619,7 +681,7 @@ export function ChannelAccounts() {
       if (alive.current) setRestoringReplies(false);
     });
   }, [accounts, accountsLoaded, agents, agentsLoaded, agentsError, recoveryLoaded,
-    recoveryBlocked, ownerLogoutPending, busy, restoringReplies, flow, more,
+    recoveryBlocked, ownerLogoutPending, busy, restoringReplies, flow, more, editingName,
     checkingIds, loading, run, readAccounts, operationId, verifyFinal]);
   useEffect(() => {
     if (flow || recoveryBlocked || ownerLogoutPending || !accounts.some((account) =>
@@ -848,6 +910,8 @@ export function ChannelAccounts() {
           >
             {visibleAccounts.map((account) => {
               const agent = agents.find((item) => item.slug === account.target_agent_slug);
+              const displayName = cardName(account);
+              const edit = editingName?.accountId === account.id ? editingName : null;
               const uncertain =
                 !recoveryLoaded || checkingIds.includes(account.id) || pendingFor(account.id);
               const targetDisabled = agents.some(
@@ -868,15 +932,51 @@ export function ChannelAccounts() {
               return (
                 <article
                   key={account.id}
-                  aria-label={`${account.display_name}微信`}
+                  aria-label={`${displayName}微信`}
                   className="flex min-w-0 flex-col rounded-[26px] border border-[#e4e2de] bg-white p-5 shadow-[0_3px_0_0_#f1eeea] sm:p-6"
                 >
                   <div className="flex items-start justify-between gap-3">
-                    <div className="min-w-0">
+                    <div className="min-w-0 flex-1">
                       <p className="text-xs font-medium text-[#788271]">微信</p>
-                      <h2 className="mt-1 break-words text-lg font-bold text-[#303747]">
-                        {account.display_name}
-                      </h2>
+                      {edit ? (
+                        <form className="mt-2 space-y-2" onSubmit={(event) => { event.preventDefault(); saveNameEdit(); }}>
+                          <Input
+                            autoFocus
+                            aria-label="微信卡片名称"
+                            aria-invalid={Boolean(edit.error)}
+                            aria-describedby={'wechat-name-help-' + account.id}
+                            maxLength={MAX_WECHAT_CARD_NAME_LENGTH}
+                            value={edit.value}
+                            onChange={(event) => setNameEdit({ ...edit, value: event.target.value, error: '' })}
+                            onKeyDown={(event) => {
+                              if (event.key === 'Escape') { event.preventDefault(); cancelNameEdit(); }
+                              if (event.key === 'Enter' && event.nativeEvent.isComposing) event.preventDefault();
+                            }}
+                            className="h-10 min-w-0 rounded-xl"
+                          />
+                          <p id={'wechat-name-help-' + account.id} className="text-xs leading-5 text-muted-foreground">
+                            {edit.error ? <span role="alert" className="text-destructive">{edit.error}</span> : '备注名仅保存在这台电脑的当前账号中。'}
+                          </p>
+                          <div className="flex flex-wrap gap-2">
+                            <Button type="submit" size="sm" className="rounded-lg">保存</Button>
+                            <Button type="button" variant="outline" size="sm" className="rounded-lg" onClick={cancelNameEdit}>取消</Button>
+                          </div>
+                        </form>
+                      ) : (
+                        <h2 className="mt-1 text-lg font-bold text-[#303747]">
+                          <button
+                            type="button"
+                            aria-label={`修改微信卡片名称：${displayName}`}
+                            title="修改卡片名称"
+                            disabled={!nameStorageKey || Boolean(busy) || restoringReplies || Boolean(flow) || Boolean(editingName)}
+                            className="flex max-w-full items-start gap-2 rounded-md text-left hover:text-brand focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-brand/35 disabled:cursor-default disabled:opacity-60"
+                            onClick={() => startNameEdit(account)}
+                          >
+                            <span className="min-w-0 break-words">{displayName}</span>
+                            <Pencil aria-hidden="true" className="mt-1.5 h-4 w-4 shrink-0 text-muted-foreground" />
+                          </button>
+                        </h2>
+                      )}
                     </div>
                     <span
                       className={`shrink-0 rounded-full px-3 py-1.5 text-xs font-semibold ${state.tone}`}
@@ -1027,7 +1127,7 @@ export function ChannelAccounts() {
             <DialogDescription>
               {flow?.mode === 'new'
                 ? '选一个智能体，再用微信扫码。'
-                : (selected?.display_name ?? '微信绑定')}
+                : (selected ? cardName(selected) : '微信绑定')}
             </DialogDescription>
           </DialogHeader>
           {feedback}
diff --git a/src/pages/CloudAgents/wechat-card-names.ts b/src/pages/CloudAgents/wechat-card-names.ts
new file mode 100644
index 00000000..51fe8cad
--- /dev/null
+++ b/src/pages/CloudAgents/wechat-card-names.ts
@@ -0,0 +1,22 @@
+import type { AuthUser } from '@/stores/auth';
+
+export const MAX_WECHAT_CARD_NAME_LENGTH = 64;
+
+export function wechatCardNameKey(user: AuthUser | null) {
+  return user?.userId
+    ? 'makelore.wechat-card-names:' + JSON.stringify([user.tenantId, user.userId])
+    : '';
+}
+
+export function readWechatCardNames(key: string): Record<string, string> {
+  if (!key) return {};
+  try {
+    const value: unknown = JSON.parse(localStorage.getItem(key) ?? '{}');
+    if (!value || typeof value !== 'object' || Array.isArray(value)) return {};
+    return Object.fromEntries(Object.entries(value).flatMap(([id, name]) => {
+      if (typeof name !== 'string') return [];
+      const trimmed = name.trim();
+      return trimmed && trimmed.length <= MAX_WECHAT_CARD_NAME_LENGTH ? [[id, trimmed]] : [];
+    }));
+  } catch { return {}; }
+}
diff --git a/tests/e2e/cloud-agent-channels.spec.ts b/tests/e2e/cloud-agent-channels.spec.ts
index 450ee90d..a46a7412 100644
--- a/tests/e2e/cloud-agent-channels.spec.ts
+++ b/tests/e2e/cloud-agent-channels.spec.ts
@@ -578,6 +578,34 @@ test('WeChat binding cards connect an account and switch its Agent through the c
     ).toHaveCount(0);
     await expect(legacyCard.getByText('状态待确认', { exact: true })).toHaveCount(0);
     await expect(spareCard.getByRole('button', { name: '绑定智能体', exact: true })).toBeVisible();
+    const callsBeforeRemarks = await app.evaluate(() => (globalThis as typeof globalThis & {
+      cloudChannelFixtureCalls: { operation: string }[];
+    }).cloudChannelFixtureCalls.filter((item) => item.operation !== 'channelAccounts'));
+    await spareCard.getByRole('button', { name: '修改微信卡片名称：备用微信', exact: true }).click();
+    const cardNameField = page.getByRole('textbox', { name: '微信卡片名称', exact: true });
+    await cardNameField.fill('未保存备注');
+    await cardNameField.press('Escape');
+    await expect(cardNameField).toHaveCount(0);
+    await spareCard.getByRole('button', { name: '修改微信卡片名称：备用微信', exact: true }).click();
+    await cardNameField.fill('A'.repeat(64));
+    await app.evaluate(({ BrowserWindow }) => BrowserWindow.getAllWindows()[0].setSize(980, 700));
+    await page.screenshot({ path: testInfo.outputPath('wechat-card-name-edit-compact.png'), fullPage: true });
+    await cardNameField.press('Enter');
+    const remarkedCard = page.getByRole('article', { name: 'A'.repeat(64) + '微信', exact: true });
+    await expect(remarkedCard).toBeVisible();
+    expect(await remarkedCard.evaluate((element) => element.scrollWidth <= element.clientWidth)).toBe(true);
+    await page.reload();
+    await expect(remarkedCard).toBeVisible();
+    await expect(remarkedCard.getByRole('button', { name: '绑定智能体', exact: true })).toBeVisible();
+    await remarkedCard.getByRole('button', { name: '修改微信卡片名称：' + 'A'.repeat(64), exact: true }).click();
+    await cardNameField.fill('备用微信');
+    await cardNameField.press('Enter');
+    await expect(spareCard).toBeVisible();
+    const callsAfterRemarks = await app.evaluate(() => (globalThis as typeof globalThis & {
+      cloudChannelFixtureCalls: { operation: string }[];
+    }).cloudChannelFixtureCalls.filter((item) => item.operation !== 'channelAccounts'));
+    expect(callsAfterRemarks).toEqual(callsBeforeRemarks);
+    await app.evaluate(({ BrowserWindow }) => BrowserWindow.getAllWindows()[0].setSize(1366, 900));
     await expect(page.getByRole('dialog')).toHaveCount(0);
     await expect(page.getByText('活动记录', { exact: true })).toHaveCount(0);
     await expect(page.getByRole('button', { name: '微信对话', exact: true })).toHaveCount(0);
diff --git a/tests/unit/channel-accounts-page.test.tsx b/tests/unit/channel-accounts-page.test.tsx
index b6a76a8e..5b02e95a 100644
--- a/tests/unit/channel-accounts-page.test.tsx
+++ b/tests/unit/channel-accounts-page.test.tsx
@@ -197,6 +197,103 @@ afterEach(() => {
   vi.useRealTimers();
 });
 
+const nameKey = (userId = 'creator', tenantId: string | null = null) =>
+  'makelore.wechat-card-names:' + JSON.stringify([tenantId, userId]);
+async function editCardName(name = legacy.display_name) {
+  const current = await card(name);
+  fireEvent.click(within(current).getByRole('button', { name: '修改微信卡片名称：' + name }));
+  return within(current).getByRole('textbox', { name: '微信卡片名称' });
+}
+it('saves a local card remark through refresh and revision changes without touching the binding', async () => {
+  const original = structuredClone(accounts);
+  const view = renderPage();
+  const field = await editCardName();
+  fireEvent.change(field, { target: { value: '  工作微信  ' } });
+  fireEvent.submit(field.closest('form')!);
+  expect(within(await card('工作微信')).getByRole('heading', { name: '工作微信' })).toBeVisible();
+  expect(accounts).toEqual(original);
+  expect(writes()).toEqual([]);
+  view.unmount();
+  accounts[0].revision += 1;
+  renderPage();
+  expect(await card('工作微信')).toBeVisible();
+  expect(await card(spare.display_name)).toBeVisible();
+  expect(writes()).toEqual([]);
+});
+it('cancels typed remarks with either Cancel or Escape', async () => {
+  renderPage();
+  let field = await editCardName();
+  fireEvent.change(field, { target: { value: '不保存的名称' } });
+  fireEvent.click(screen.getByRole('button', { name: '取消', exact: true }));
+  expect(screen.queryByRole('textbox', { name: '微信卡片名称' })).not.toBeInTheDocument();
+  field = await editCardName();
+  fireEvent.change(field, { target: { value: '也不保存' } });
+  fireEvent.keyDown(field, { key: 'Escape' });
+  expect(await card()).toBeVisible();
+  expect(localStorage.getItem(nameKey())).toBeNull();
+  expect(writes()).toEqual([]);
+});
+it('keeps the original name and typed draft on validation or storage failure, then allows retry', async () => {
+  renderPage();
+  const field = await editCardName();
+  fireEvent.change(field, { target: { value: '   ' } });
+  fireEvent.submit(field.closest('form')!);
+  expect(screen.getByRole('alert')).toHaveTextContent('请填写1–64个字符');
+  expect(localStorage.getItem(nameKey())).toBeNull();
+  fireEvent.change(field, { target: { value: '生活微信' } });
+  const write = vi.spyOn(localStorage, 'setItem').mockImplementation(() => { throw new Error('storage unavailable'); });
+  fireEvent.submit(field.closest('form')!);
+  expect(screen.getByRole('alert')).toHaveTextContent('名称没有保存');
+  expect(field).toHaveValue('生活微信');
+  expect(await card()).toBeVisible();
+  write.mockRestore();
+  fireEvent.submit(field.closest('form')!);
+  expect(await card('生活微信')).toBeVisible();
+  expect(writes()).toEqual([]);
+});
+it.each([
+  ['account', 'another-creator', null],
+  ['tenant', 'creator', 'another-tenant'],
+] as const)('isolates card remarks and closes the old draft when the %s changes', async (_scope, userId, tenantId) => {
+  localStorage.setItem(nameKey(), JSON.stringify({ [legacy.id]: '本账号备注' }));
+  localStorage.setItem(nameKey(userId, tenantId), JSON.stringify({ [legacy.id]: '其他账号备注' }));
+  renderPage();
+  const field = await editCardName('本账号备注');
+  fireEvent.change(field, { target: { value: '旧账号未保存内容' } });
+  await act(async () => useAuthStore.setState({ user: { username: userId, userId, tenantId, deptId: null, authorities: [] } }));
+  expect(screen.queryByRole('textbox', { name: '微信卡片名称' })).not.toBeInTheDocument();
+  expect(await card('其他账号备注')).toBeVisible();
+  expect(JSON.parse(localStorage.getItem(nameKey())!)[legacy.id]).toBe('本账号备注');
+  expect(JSON.parse(localStorage.getItem(nameKey(userId, tenantId))!)[legacy.id]).toBe('其他账号备注');
+});
+it('ignores malformed local remarks and falls back to the original card name', async () => {
+  localStorage.setItem(nameKey(), JSON.stringify({ [legacy.id]: { name: 'not a string' }, [spare.id]: '   ' }));
+  renderPage();
+  expect(await card()).toBeVisible();
+  expect(await card(spare.display_name)).toBeVisible();
+});
+it('closes an edit when its card disappears on refresh and leaves the page usable', async () => {
+  renderPage();
+  await editCardName();
+  accounts = [{ ...spare }];
+  fireEvent.click(screen.getByRole('button', { name: '刷新微信列表' }));
+  await waitFor(() => expect(screen.queryByRole('textbox', { name: '微信卡片名称' })).not.toBeInTheDocument());
+  expect(await card(spare.display_name)).toBeVisible();
+  expect(screen.getByRole('button', { name: '添加微信', exact: true })).toBeEnabled();
+  expect(writes()).toEqual([]);
+});
+it('does not restore replies while a card name is being edited after Worker recovery', async () => {
+  accounts = [restorable({ worker_online: false, blockers: ['worker_offline', 'binding_paused'] })];
+  vi.useFakeTimers({ shouldAdvanceTime: true });
+  renderPage();
+  await editCardName();
+  accounts[0].worker_online = true;
+  accounts[0].blockers = ['binding_paused'];
+  await act(async () => { await vi.advanceTimersByTimeAsync(10000); });
+  expect(calls('enableChannelAccount')).toHaveLength(0);
+  expect(screen.getByRole('textbox', { name: '微信卡片名称' })).toBeVisible();
+});
+
 it.each([
   ['none', []],
   ['drafts', [{ ...agentA, published_version: null }]],

From 0d6ac413dcaa8a04c6db6bfab3aca835e0460ef6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 14:25:44 +0800
Subject: [PATCH 03/18] fix: submit the confirmed project work source directory

---
 ...61014-release-source-directory-3ccabc06.md |  68 +++++++
 README.md                                     |   2 +
 electron/services/project-packager.ts         |  74 ++++++--
 src/lib/works-project-publish.ts              |   9 +-
 tests/unit/project-packager.test.ts           | 177 +++++++++++++++++-
 tests/unit/project-publish-action.test.tsx    |  34 +++-
 tests/unit/project-release-builder.test.ts    |  83 +++++++-
 tests/unit/works-project-publish.test.ts      |  14 +-
 8 files changed, 433 insertions(+), 28 deletions(-)
 create mode 100644 .project-docs/30-worklog/tasks/20261014-release-source-directory-3ccabc06.md

diff --git a/.project-docs/30-worklog/tasks/20261014-release-source-directory-3ccabc06.md b/.project-docs/30-worklog/tasks/20261014-release-source-directory-3ccabc06.md
new file mode 100644
index 00000000..44635ecb
--- /dev/null
+++ b/.project-docs/30-worklog/tasks/20261014-release-source-directory-3ccabc06.md
@@ -0,0 +1,68 @@
+# Task: Use confirmed work engineering directory for release submission
+
+## Identity
+
+- Task ID: 20261014-release-source-directory-3ccabc06
+- Mode: Feature
+- Branch: codex/20261014-release-source-directory-3ccabc06-release-source-directory
+- Worktree: /Users/chillishark/Makelore 麦洛/.codex-worktrees/makelore/20261014-release-source-directory-3ccabc06
+- Base commit: f34e651774beb6a2a213b5711f2ffb887d22d4b7
+- Owner: codex
+- Status: Ready for Integration
+
+## Scope
+
+- Repair existing work submission source selection by reusing the validated saved work directory and constrained work discovery used by opening. Preserve registered project metadata/history identity and release validation; add focused regression coverage and accurate failure guidance.
+
+## Intent And Constraints
+
+- User explicitly requested repair after read-only diagnosis. Do not move/rewrite the user's game or metadata, create conversations, call a model, submit to the real service, restart/update the current trial, merge/push, or clean other worktrees as part of this source repair.
+- Keep registered root configuration, project id, submission binding and build concurrency identity unchanged; distinguish source root from project root. Saved launch is a directory clue, not publish readiness. Keep existing root Vite projects publishable without requiring dev scripts.
+
+## Project Context Loaded
+
+Task context:
+- Official start/status verified feature task id, branch, absolute worktree and base f34e651774beb6a2a213b5711f2ffb887d22d4b7 (latest fetched origin/main). Primary checkout has unrelated dirty task documentation and is untouched.
+- All74 peer scopes/222 required sections read/hash checked; no related semantic conflict. Work-entry and preview recovery require project-level identity, bounded unique discovery, no arbitrary command replay and no automatic model/conversation.
+
+Read:
+- Read-before-planning, memory-index, own record, planning-gate and AGENTS. Reused unchanged canonical context from the diagnosis on identical base f34e651; re-read positioning, decision/system/domain/evidence/reflection/commitment/stale indexes and relevant current-state sections, ADR008, project metadata and release/work-entry source.
+
+Relevant understanding:
+- Main owns project configuration and release packaging/build/preflight; project creation generates metadata/knowledge only and optional scaffold never overwrites existing code.
+- The real alice project registers the outer root but has a verified saved Vite launch.directory for the inner engineering folder. Current opening already uses it; packager validates/scans only registered root.
+- Directory selection must not change project id or cloud contracts and must retain workspace-to-source ancestry checks during packaging. Production publishing and installed-package verification are not implied by local tests.
+- Files: work-entry-store/work-launcher, project-packager, release builder tests, publish failure projection and README. Existing dormant gallery pages are not restored; only the current project-config submit action is repaired.
+
+Gate result: Passed.
+
+## Plan
+
+1. Select a source folder in the packager using the same trusted saved work-entry and bounded discovery helpers as opening; retain registered-root configuration and root-project compatibility.
+2. Verify the whole registered-root-to-source directory chain throughout validation/scan/streamed reads; package only source-relative files.
+3. Add nested-source, ambiguity, unchanged root, missing input and path-race regression tests; correct misleading template-damage guidance, run focused checks, build and independent review.
+
+## Outcome
+
+- Implemented source selection in the shared packager used by full and summary release builders, including utility builds. Reads project type/id from registered-root configuration, then prefers loadWorkEntry's validated launch.directory. With no saved directory, preserves existing root-package release behavior (including missing/complex dev scripts), otherwise uses opening's existing bounded unique discovery. No URL probe, startup, model, metadata write or new persisted schema.
+- Only the selected source is validated/scanned/zipped with source-relative archive paths. Registered-root identity, release busy key, version naming and submission binding remain unchanged; an inner .makelore config cannot override the registered project.
+- Retained and repeatedly checked the whole registered-root-to-source directory identity chain during validation, recursive scan and streamed reads. Invalid/copy/traversal/symlink entries cannot authorize outside content; configured private/generated source folders are rejected. An ambiguous discovery reports PROJECT_SOURCE_UNCONFIRMED rather than choosing a candidate.
+- Kept mandatory package/lock/index, Vite declaration, source exclusions/limits, immutable build snapshot and browser preflight behavior. Missing inputs in a valid selected source do not fall back to another/root game.
+- Corrected missing-file guidance to describe absent/unreadable publishing inputs without claiming template deletion/damage; added safe actionable directory-ambiguity guidance. Updated README and meaningful regressions. Independent review approved with no blocker.
+
+## Verification
+
+- Exact pinned pnpm10.33.4 used (initial global fallback version check found11.25.0; all verification commands explicitly used10.33.4). Dependency directory is an ignored link to existing installed primary dependencies; no dependency/lock changes or download committed.
+- Standard typecheck, strict targeted Main module-closure tsc, scoped ESLint and Renderer/Main/Preload/release-utility production build all passed. Logs: /tmp/makelore-release-source-typecheck-3ccabc06.log, /tmp/makelore-release-source-main-types-3ccabc06.log, /tmp/makelore-release-source-lint-3ccabc06.log, /tmp/makelore-release-source-build-3ccabc06.log.
+- 219 related unit tests passed: work-entry/launcher/preview/release-job/routes/scaffold156; packager22 and builder3; publish failure projection/component38. New full/summary builder checks inspect source archives and immutable build snapshots, with every fixture user file unchanged; builder test uses node environment for native ZIP behavior.
+- Native Electron2/2 passed: saved work survives full restart and restarts a stopped service without new conversation/model; production local preflight isolates requests and cleans temporary renderers. Isolated fixture user-data/home used; running trial/account untouched. Log: /tmp/makelore-release-source-electron-3ccabc06.log; artifacts /tmp/makelore-release-source-electron-3ccabc06.
+- Scoped tests include nested Unicode source, outer valid root as fallback trap, inner absent/custom config, no saved entry unique discovery, multiple candidates, unsafe/copied entries, missing selected lock and ancestor substitution between scan/stream. Test logs: /tmp/release-source-directory-tests-final-3ccabc06.log and /tmp/makelore-release-source-regression-3ccabc06.log.
+- No real-project file changes, paid model, dependency installation into the user's game, real submit/upload, app update, merge/push or other-worktree cleanup. Tests use controlled build runtime and do not claim actual production npm/build/review success.
+
+## Follow-ups
+
+- Ready for integration and temporary-app delivery when requested. Current running trial still contains the previous packager. No actual user project or real cloud submission was exercised.
+
+## Promotion Candidates
+
+- Target: ADR008 and architecture data-flow/module-map. Proposal: distinguish registered project root (identity/config/history/binding) from project-contained engineering source, reusing validated work entry and constrained discovery for submission while keeping release-specific validation and root compatibility. Evidence: product packager change,219 units,2 Electron cases and independent review. Future impact: prevent later opening/publishing features from reintroducing the root mismatch or using preview as release readiness proof. Semantic conflicts: none found in74 peer scopes; no cloud contract or metadata migration. Human confirmation: current repair direction explicitly authorized; canonical promotion still requires a serialized Integration task.
diff --git a/README.md b/README.md
index 02b1e42a..c6ed4c18 100644
--- a/README.md
+++ b/README.md
@@ -31,6 +31,8 @@ Makelore 是一个面向软件、视觉创作、智能机器人与个人云智
 
 作品入口按项目记住已确认的本机页面和受限的打开方式。应用重启后先检查并复用原服务；服务停止时，可直接重新启动已有的 Vite 工程或普通静态网页，再显示实际可访问的页面，不要求当前对话选择模型，也不自动新建对话。旧项目可从已成功打开页面的工具回执恢复入口。空项目仍显示原有空状态；无法确定打开方式、缺少运行组件或入口改变时说明原因，由用户明确选择「让助手检查」后才调用编程助手。后台恢复只访问本机地址，保存的打开方式按项目真实目录校验，不保存或重放任意终端命令。
 
+提交作品优先使用打开作品时已记住并通过项目身份校验的工程目录；没有有效记录时，保留根目录工程的发布兼容性，或在项目内明确找到唯一的已有工程。游戏位于项目子目录时，只打包该工程中的源码，项目配置、对话身份和提交记录仍属于原登记项目。目录不明确时说明原因，不自动选择其他作品；确认目录后仍执行完整发布文件、依赖、构建与预检校验。
+
 作品广场、素材广场、独立发布上传和云部署页面不属于 Makelore 2.0 工作台。新建 Code 项目只要求选择目录：Main 自动生成内部项目 ID，并以内部 `interactive_ai_app` 类型创建 `.makelore/project.json` 与 `knowledge/`，不再让用户选择或查看项目身份、项目类型和模板；缺少项目 ID 的旧项目在读取时由 Main 自动补全。从列表移除项目只取消登记，不删除磁盘文件；在“新建项目”中直接选择已有项目文件夹会重新打开，并保留原有项目身份、类型、智能体、对话和知识文件。“新建下级文件夹”仍拒绝已存在的同名目录。创建成功后直接进入对话工作区，未创建智能体时只显示可选的设置入口，不再用初始化门禁遮挡工作区。已有 `custom` 项目继续受支持；历史 `mini_game` / `mini_program` 配置在读取时归一为交互式 AI 应用，但不会因读取被改写。用户获取并为项目启用官方 bundled `makelore.project-scaffold` 插件后，每个父智能体都可按需明确调用 `makelore-project-scaffold` Skill，无需伙伴分配；它以不覆盖既有路径的方式生成固定六文件 Vite 起步工程，不是创建前置条件，也不安装依赖、不联网、不构建、不上传或提审。交互式 AI 应用的项目配置底部提供“一键提交审核”；Main 自动预检、安全打包并提交，构建通过后进入运营审核，审核通过即直接发布。首次创建必须选择 PNG、JPEG 或 WebP 项目封面，并通过 Main-owned multipart 原子接口同时保存资料与封面；已有 draft/published 只提交新版本并沿用平台现有资料与封面。项目成果预览 `/deliverables` 继续保留。
 
 创建智能体时，如果本次新操作被服务明确拒绝，会显示失败原因、保留名称和头像，并允许修改后重新提交；不会留下“结果尚未确认”提醒。断网、响应异常或已有待确认操作的重试失败仍保留原创建请求，可重试确认结果，避免重复创建。当前创建表单一旦出现结果不确定，即使移除提醒后重试被拒绝，也继续保留原请求；移除提醒不代表取消创建。创建页面会及时刷新本机恢复记录。服务器的字段校验错误只转换为固定中文提示，不展示内部错误或提交原文。一句话介绍仍可留空；创建与保存需要配套的智能体云端服务支持。
diff --git a/electron/services/project-packager.ts b/electron/services/project-packager.ts
index 8043ce90..b9622d0a 100644
--- a/electron/services/project-packager.ts
+++ b/electron/services/project-packager.ts
@@ -10,6 +10,8 @@ import {
 import { dirname, isAbsolute, join, relative, sep } from 'node:path';
 import type { ProjectType } from '../../shared/project-config';
 import { readCodingProjectConfigV2 } from '../coding-projects/project-config';
+import { loadWorkEntry } from '../coding-runtime/work-entry-store';
+import { discoverWorkLaunch } from '../coding-runtime/work-launcher';
 import { writeStoredZip } from './streaming-zip';
 
 type PublishableProjectType = Exclude<ProjectType, 'custom'>;
@@ -181,10 +183,21 @@ export async function createStaticProjectPackage(input: {
   limits?: ProjectPackageLimits;
 }): Promise<StaticProjectPackageSummary> {
   const limits = input.limits ?? DEFAULT_LIMITS;
-  const projectPath = await resolveProjectDirectory(input.projectPath);
-  const projectType = await readPublishableProjectType(projectPath);
+  const projectRoot = await resolveProjectDirectory(input.projectPath);
+  const rootIdentity = await readSafeDirectoryIdentity(projectRoot, projectRoot);
+  const { projectType, projectId } = await readPublishableProjectConfig(projectRoot);
+  const sourceDirectory = await resolveSourceDirectory(projectRoot, projectId);
+  await assertDirectoryIdentityChain(projectRoot, [rootIdentity]);
+  const sourceChain = [rootIdentity];
+  let projectPath = projectRoot;
+  for (const part of sourceDirectory.split('/').filter((part) => part !== '.')) {
+    projectPath = join(projectPath, part);
+    sourceChain.push(await readSafeDirectoryIdentity(projectRoot, projectPath));
+  }
+  await assertDirectoryIdentityChain(projectRoot, sourceChain);
   await validateViteProject(projectPath, limits);
-  const scan = await scanProject(projectPath, limits);
+  await assertDirectoryIdentityChain(projectRoot, sourceChain);
+  const scan = await scanProject(projectPath, limits, projectRoot, sourceChain);
   const manifestBytes = Buffer.from(generatedManifest(projectType), 'utf8');
   const sourceBytes = scan.sourceBytes + manifestBytes.length;
   if (sourceBytes > limits.maxSourceBytes) {
@@ -217,7 +230,7 @@ export async function createStaticProjectPackage(input: {
         return {
           path: archivePath,
           source: { filePath: file.absolutePath },
-          beforeRead: async () => assertStablePackageFile(projectPath, file),
+          beforeRead: async () => assertStablePackageFile(projectRoot, file),
           afterRead: async ({ size }) => {
             if (size !== file.size) {
               throw new ProjectPackageError(
@@ -225,7 +238,7 @@ export async function createStaticProjectPackage(input: {
                 `打包过程中项目文件发生变化：${file.archivePath}`,
               );
             }
-            await assertStablePackageFile(projectPath, file);
+            await assertStablePackageFile(projectRoot, file);
           },
         };
       }),
@@ -268,7 +281,10 @@ export async function createStaticProjectPackage(input: {
   };
 }
 
-async function readPublishableProjectType(projectPath: string): Promise<PublishableProjectType> {
+async function readPublishableProjectConfig(projectPath: string): Promise<{
+  projectType: PublishableProjectType;
+  projectId?: string;
+}> {
   const result = await readCodingProjectConfigV2(projectPath);
   if (result.status === 'invalid') {
     throw new ProjectPackageError(
@@ -282,7 +298,31 @@ async function readPublishableProjectType(projectPath: string): Promise<Publisha
       '自定义项目暂未配置发布方式，请新建交互式 AI 应用项目',
     );
   }
-  return result.config.projectType;
+  return { projectType: result.config.projectType, projectId: result.config.projectId };
+}
+
+/** Reuse opening's project-bound directory evidence, without probing URLs or starting a work. */
+async function resolveSourceDirectory(projectRoot: string, projectId?: string): Promise<string> {
+  const saved = projectId ? await loadWorkEntry({ id: projectId, path: projectRoot }) : null;
+  let directory = saved?.launch?.directory;
+  if (directory === undefined) {
+    // Existing root projects may build without a replayable dev script. Their
+    // release validation remains authoritative; opening need not be supported.
+    const rootPackage = await lstat(join(projectRoot, 'package.json')).catch(() => null);
+    if (rootPackage) return '.';
+    try {
+      directory = (await discoverWorkLaunch(projectRoot))?.directory ?? '.';
+    } catch {
+      throw new ProjectPackageError('PROJECT_SOURCE_UNCONFIRMED', '无法唯一确认当前作品的工程目录');
+    }
+  }
+  if (directory !== '.') {
+    validateArchivePath(directory);
+    if (directory.split('/').some((part) => part.startsWith('.') || EXCLUDED_DIRECTORY_NAMES.has(part.toLowerCase()))) {
+      throw new ProjectPackageError('PROJECT_SOURCE_UNCONFIRMED', '作品工程目录不能是本地配置或生成目录');
+    }
+  }
+  return directory;
 }
 
 async function resolveProjectDirectory(projectPath: string): Promise<string> {
@@ -386,6 +426,8 @@ async function readRequiredFile(
 async function scanProject(
   projectPath: string,
   limits: ProjectPackageLimits,
+  projectRoot: string,
+  sourceChain: DirectoryIdentity[],
 ): Promise<PackageScan> {
   const files: PackageFile[] = [];
   const excludedPaths: string[] = [];
@@ -396,14 +438,14 @@ async function scanProject(
     directory: string,
     parentChain: DirectoryIdentity[],
   ): Promise<void> {
-    await assertDirectoryIdentityChain(projectPath, parentChain);
-    const before = await readSafeDirectoryIdentity(projectPath, directory);
+    await assertDirectoryIdentityChain(projectRoot, parentChain);
+    const before = await readSafeDirectoryIdentity(projectRoot, directory);
     const directoryChain = [...parentChain, before];
     const entries = await readdir(directory, { withFileTypes: true });
-    await assertDirectoryIdentityChain(projectPath, directoryChain);
+    await assertDirectoryIdentityChain(projectRoot, directoryChain);
     entries.sort((left, right) => left.name.localeCompare(right.name, 'en'));
     for (const entry of entries) {
-      await assertDirectoryIdentityChain(projectPath, directoryChain);
+      await assertDirectoryIdentityChain(projectRoot, directoryChain);
       const absolutePath = join(directory, entry.name);
       const archivePath = toArchivePath(relative(projectPath, absolutePath));
       const isDirectory = entry.isDirectory();
@@ -412,7 +454,7 @@ async function scanProject(
         if (excludedPaths.length < 100) {
           excludedPaths.push(isDirectory ? `${archivePath}/` : archivePath);
         }
-        await assertDirectoryIdentityChain(projectPath, directoryChain);
+        await assertDirectoryIdentityChain(projectRoot, directoryChain);
         continue;
       }
       if (entry.isSymbolicLink()) {
@@ -424,7 +466,7 @@ async function scanProject(
       validateArchivePath(archivePath);
       if (isDirectory) {
         await walk(absolutePath, directoryChain);
-        await assertDirectoryIdentityChain(projectPath, directoryChain);
+        await assertDirectoryIdentityChain(projectRoot, directoryChain);
         continue;
       }
       if (!entry.isFile()) {
@@ -463,12 +505,12 @@ async function scanProject(
           `项目文件数超过 ${limits.maxFiles} 个限制`,
         );
       }
-      await assertDirectoryIdentityChain(projectPath, directoryChain);
+      await assertDirectoryIdentityChain(projectRoot, directoryChain);
     }
-    await assertDirectoryIdentityChain(projectPath, directoryChain);
+    await assertDirectoryIdentityChain(projectRoot, directoryChain);
   }
 
-  await walk(projectPath, []);
+  await walk(projectPath, sourceChain);
   return {
     files,
     sourceBytes,
diff --git a/src/lib/works-project-publish.ts b/src/lib/works-project-publish.ts
index 7d08ef15..ca8f4fde 100644
--- a/src/lib/works-project-publish.ts
+++ b/src/lib/works-project-publish.ts
@@ -87,8 +87,13 @@ const PUBLISH_FAILURES: Record<string, WorksPublishFailure> = {
   },
   PROJECT_FILE_MISSING: {
     title: '项目文件不完整',
-    reason: '项目模板中的发布文件被删除或损坏。',
-    nextStep: '请让开发助手修复当前项目模板后重试。',
+    reason: '当前作品工程缺少发布所需的文件，或文件无法读取。',
+    nextStep: '请让开发助手检查当前作品工程，补齐发布文件后重试。',
+  },
+  PROJECT_SOURCE_UNCONFIRMED: {
+    title: '需要确认提交哪个作品',
+    reason: '当前项目中无法明确找到唯一的作品工程。',
+    nextStep: '请让开发助手确认作品的工程位置，打开作品后再提交。',
   },
   PROJECT_TYPE_UNPUBLISHABLE: {
     title: '这个项目没有配置发布方式',
diff --git a/tests/unit/project-packager.test.ts b/tests/unit/project-packager.test.ts
index 838a88fe..64043221 100644
--- a/tests/unit/project-packager.test.ts
+++ b/tests/unit/project-packager.test.ts
@@ -12,7 +12,7 @@ import {
   utimes,
   writeFile,
 } from 'node:fs/promises';
-import { join } from 'node:path';
+import { join, relative } from 'node:path';
 import { tmpdir } from 'node:os';
 import { afterEach, describe, expect, it, vi } from 'vitest';
 import {
@@ -41,6 +41,7 @@ const require = createRequire(import.meta.url);
 const AdmZip = require('adm-zip') as typeof import('adm-zip');
 
 const tempDirectories: string[] = [];
+const projectId = '11111111-1111-4111-8111-111111111111';
 
 async function createProject(projectType: ProjectType = 'interactive_ai_app'): Promise<string> {
   const projectPath = await mkdtemp(join(tmpdir(), 'makelore-project-packager-'));
@@ -79,6 +80,40 @@ async function createProject(projectType: ProjectType = 'interactive_ai_app'): P
   return await realpath(projectPath);
 }
 
+async function createNestedSource(projectPath: string, directory = 'games/Alice 的游戏'): Promise<string> {
+  const source = join(projectPath, directory);
+  await mkdir(join(source, 'src'), { recursive: true });
+  await writeFile(join(source, 'package.json'), JSON.stringify({
+    name: 'selected-inner-game', packageManager: 'npm@10.9.2',
+    scripts: { dev: 'vite --host 0.0.0.0 --port 5179' }, devDependencies: { vite: '^7.0.0' },
+  }));
+  await writeFile(join(source, 'package-lock.json'), JSON.stringify({ name: 'selected-inner-game', lockfileVersion: 3, packages: {} }));
+  await writeFile(join(source, 'index.html'), '<main>selected inner game</main>');
+  await writeFile(join(source, 'src', 'main.ts'), 'console.log("inner source")\n');
+  return source;
+}
+
+async function saveSourceEntry(projectPath: string, directory: string, patch: Record<string, unknown> = {}): Promise<void> {
+  const configPath = join(projectPath, '.makelore', 'project.json');
+  const config = JSON.parse(await readFile(configPath, 'utf8'));
+  await writeFile(configPath, JSON.stringify({ ...config, projectId }));
+  await writeFile(join(projectPath, '.makelore', 'work-entry.json'), JSON.stringify({
+    version: 1, projectId, projectPath, url: 'http://127.0.0.1:5179/',
+    launch: { kind: 'vite', directory, args: [] }, ...patch,
+  }));
+}
+
+async function archiveTarget(): Promise<string> {
+  const directory = await mkdtemp(join(tmpdir(), 'makelore-project-archives-'));
+  tempDirectories.push(directory);
+  return join(directory, 'project.zip');
+}
+
+async function removeOuterSource(projectPath: string): Promise<void> {
+  await Promise.all(['package.json', 'package-lock.json', 'index.html', 'src', 'public']
+    .map(name => rm(join(projectPath, name), { recursive: true, force: true })));
+}
+
 afterEach(async () => {
   openRaceHook.beforeOpen = null;
   await Promise.all(
@@ -87,6 +122,146 @@ afterEach(async () => {
 });
 
 describe('project packager', () => {
+  it.each([false, true])('packages the saved inner source at zip root using only outer project configuration (inner custom config=%s)', async (innerConfig) => {
+    const projectPath = await createProject();
+    const source = await createNestedSource(projectPath);
+    if (innerConfig) {
+      await mkdir(join(source, '.makelore'));
+      await writeFile(join(source, '.makelore', 'project.json'), JSON.stringify(
+        createCodingProjectConfigV2('2026-08-09T00:00:00.000Z', 'custom', '22222222-2222-4222-8222-222222222222'),
+      ));
+    }
+    await mkdir(join(projectPath, 'knowledge'));
+    await mkdir(join(projectPath, 'sibling-assets'));
+    await writeFile(join(projectPath, 'knowledge', 'notes.txt'), 'private knowledge');
+    await writeFile(join(projectPath, 'sibling-assets', 'cover.png'), 'unrelated image');
+    await writeFile(join(projectPath, 'private.txt'), 'outer private file');
+    await saveSourceEntry(projectPath, 'games/Alice 的游戏');
+    const outerConfig = await readFile(join(projectPath, '.makelore', 'project.json'));
+    const savedEntry = await readFile(join(projectPath, '.makelore', 'work-entry.json'));
+    const archivePath = await archiveTarget();
+
+    const summary = await createStaticProjectPackage({ projectPath, archivePath });
+
+    const archive = new AdmZip(archivePath);
+    expect(archive.getEntries().map(entry => entry.entryName)).toEqual([
+      'index.html', 'niancode.yml', 'package-lock.json', 'package.json', 'src/main.ts',
+    ]);
+    expect(archive.readAsText('index.html')).toBe('<main>selected inner game</main>');
+    expect(JSON.parse(archive.readAsText('package.json')).name).toBe('selected-inner-game');
+    expect(summary.manifest.project_type).toBe('interactive_ai_app');
+    expect(summary.fileCount).toBe(5);
+    expect(await readFile(join(projectPath, '.makelore', 'project.json'))).toEqual(outerConfig);
+    expect(await readFile(join(projectPath, '.makelore', 'work-entry.json'))).toEqual(savedEntry);
+    expect(await readFile(join(projectPath, 'private.txt'), 'utf8')).toBe('outer private file');
+  });
+
+  it('discovers a unique nested standard Vite source without saving or rewriting project metadata', async () => {
+    const projectPath = await createProject();
+    await removeOuterSource(projectPath);
+    await createNestedSource(projectPath);
+    const outerConfig = await readFile(join(projectPath, '.makelore', 'project.json'));
+    const archivePath = await archiveTarget();
+
+    await createStaticProjectPackage({ projectPath, archivePath });
+
+    expect(new AdmZip(archivePath).readAsText('index.html')).toBe('<main>selected inner game</main>');
+    expect(new AdmZip(archivePath).getEntry('games/Alice 的游戏/index.html')).toBeNull();
+    expect(await readFile(join(projectPath, '.makelore', 'project.json'))).toEqual(outerConfig);
+    await expect(readFile(join(projectPath, '.makelore', 'work-entry.json'))).rejects.toMatchObject({ code: 'ENOENT' });
+  });
+
+  it('rejects multiple nested candidates without choosing a game or producing an archive', async () => {
+    const projectPath = await createProject();
+    await removeOuterSource(projectPath);
+    await createNestedSource(projectPath, 'first');
+    await createNestedSource(projectPath, 'second');
+    const archivePath = await archiveTarget();
+
+    await expect(createStaticProjectPackage({ projectPath, archivePath }))
+      .rejects.toMatchObject({ code: 'PROJECT_SOURCE_UNCONFIRMED' });
+    await expect(readFile(archivePath)).rejects.toMatchObject({ code: 'ENOENT' });
+  });
+
+  it.each([undefined, 'vite && node custom-dev.js'])('retains root Vite package compatibility for dev script %s', async (dev) => {
+    const projectPath = await createProject();
+    const packagePath = join(projectPath, 'package.json');
+    const packageJson = JSON.parse(await readFile(packagePath, 'utf8'));
+    await writeFile(packagePath, JSON.stringify({ ...packageJson, ...(dev ? { scripts: { dev } } : {}) }));
+    const archivePath = await archiveTarget();
+
+    await createStaticProjectPackage({ projectPath, archivePath });
+
+    expect(new AdmZip(archivePath).readAsText('index.html')).toBe('<div id="app"></div>');
+    expect(JSON.parse(new AdmZip(archivePath).readAsText('package.json'))).toEqual({
+      ...packageJson, ...(dev ? { scripts: { dev } } : {}),
+    });
+  });
+
+  it('reports a missing lock in the saved source without falling back to the valid root or another game', async () => {
+    const projectPath = await createProject();
+    const source = await createNestedSource(projectPath, 'selected');
+    await createNestedSource(projectPath, 'other');
+    await saveSourceEntry(projectPath, 'selected');
+    await rm(join(source, 'package-lock.json'));
+    const archivePath = await archiveTarget();
+
+    await expect(createStaticProjectPackage({ projectPath, archivePath }))
+      .rejects.toMatchObject({ code: 'PROJECT_FILE_MISSING', message: expect.stringContaining('package-lock.json') });
+    await expect(readFile(archivePath)).rejects.toMatchObject({ code: 'ENOENT' });
+  });
+
+  it.each(['traversal', 'copied-project-id', 'copied-root', 'symlink'] as const)('ignores an unsafe %s saved directory and never packages its files', async (kind) => {
+    const projectPath = await createProject();
+    const outside = await createProject();
+    await writeFile(join(outside, 'external-secret.txt'), 'external private data');
+    let directory = '.makelore/copied-source';
+    let patch: Record<string, unknown> = {};
+    if (kind === 'traversal') directory = relative(projectPath, outside).split('\\').join('/');
+    else if (kind === 'symlink') {
+      directory = '.makelore/linked-source';
+      await symlink(outside, join(projectPath, directory), 'junction');
+    } else {
+      await createNestedSource(projectPath, directory);
+      patch = kind === 'copied-project-id'
+        ? { projectId: '22222222-2222-4222-8222-222222222222' }
+        : { projectPath: outside };
+    }
+    await saveSourceEntry(projectPath, directory, patch);
+    const archivePath = await archiveTarget();
+
+    await createStaticProjectPackage({ projectPath, archivePath });
+
+    const archive = new AdmZip(archivePath);
+    expect(archive.readAsText('index.html')).toBe('<div id="app"></div>');
+    expect(archive.getEntries().map(entry => entry.entryName)).toEqual([
+      'index.html', 'niancode.yml', 'package-lock.json', 'package.json', 'public/icon.txt', 'src/main.ts',
+    ]);
+    expect(archive.readAsText('src/main.ts')).toBe('console.log("ready")\n');
+  });
+
+  it('rejects a saved source ancestor replaced by a symlink between scan and streamed file reads', async () => {
+    const projectPath = await createProject();
+    const source = await createNestedSource(projectPath, 'games/selected');
+    await saveSourceEntry(projectPath, 'games/selected');
+    const outside = await createProject();
+    await createNestedSource(outside, 'selected');
+    await writeFile(join(outside, 'selected', 'src', 'main.ts'), 'external private data');
+    const archivePath = await archiveTarget();
+    let replaced = false;
+    openRaceHook.beforeOpen = async path => {
+      if (replaced || path !== join(source, 'src', 'main.ts')) return;
+      replaced = true;
+      await rename(join(projectPath, 'games'), join(projectPath, 'games-original'));
+      await symlink(outside, join(projectPath, 'games'), 'junction');
+    };
+
+    await expect(createStaticProjectPackage({ projectPath, archivePath }))
+      .rejects.toMatchObject({ code: 'PROJECT_SYMLINK_UNSUPPORTED' });
+    expect(replaced).toBe(true);
+    await expect(readFile(archivePath)).rejects.toMatchObject({ code: 'ENOENT' });
+  });
+
   it('generates a deterministic static manifest zip and excludes local or sensitive files', async () => {
     const projectPath = await createProject();
     await mkdir(join(projectPath, 'node_modules', 'vite'), { recursive: true });
diff --git a/tests/unit/project-publish-action.test.tsx b/tests/unit/project-publish-action.test.tsx
index cf63175b..b8dd2680 100644
--- a/tests/unit/project-publish-action.test.tsx
+++ b/tests/unit/project-publish-action.test.tsx
@@ -297,10 +297,25 @@ describe('ProjectPublishAction', () => {
     expect(failure).not.toHaveTextContent('token=secret');
   });
 
-  it('turns a local package error into instructions for the user', async () => {
+  it.each([
+    {
+      code: 'PROJECT_FILE_MISSING',
+      message: 'D:/repo/space-cleaner/package-lock.json does not exist',
+      title: '项目文件不完整',
+      reason: '当前作品工程缺少发布所需的文件，或文件无法读取。',
+      nextStep: '请让开发助手检查当前作品工程，补齐发布文件后重试。',
+    },
+    {
+      code: 'PROJECT_SOURCE_UNCONFIRMED',
+      message: 'Ambiguous sources: D:/repo/space-cleaner/app-a, D:/repo/space-cleaner/app-b',
+      title: '需要确认提交哪个作品',
+      reason: '当前项目中无法明确找到唯一的作品工程。',
+      nextStep: '请让开发助手确认作品的工程位置，打开作品后再提交。',
+    },
+  ])('turns $code into safe guidance and allows retry without polling', async ({ code, message, title, reason, nextStep }) => {
     publishWorksProjectSourceMock.mockRejectedValue(Object.assign(
-      new Error('D:/repo/space-cleaner/package-lock.json does not exist'),
-      { code: 'PROJECT_FILE_MISSING' },
+      new Error(message),
+      { code, statusCode: 400 },
     ));
     render(<ProjectPublishAction project={project} projectType="interactive_ai_app" />);
 
@@ -308,10 +323,17 @@ describe('ProjectPublishAction', () => {
     await flushSubmission();
 
     const failure = screen.getByTestId('project-publish-failure');
-    expect(failure).toHaveTextContent('项目文件不完整');
-    expect(failure).toHaveTextContent('请让开发助手修复当前项目模板');
+    expect(failure).toHaveTextContent(title);
+    expect(failure).toHaveTextContent(reason);
+    expect(failure).toHaveTextContent(nextStep);
+    expect(failure).not.toHaveTextContent(/模板|删除|损坏/);
     expect(failure).not.toHaveTextContent('D:/repo');
-    expect(failure).not.toHaveTextContent('PROJECT_FILE_MISSING');
+    expect(failure).not.toHaveTextContent(code);
+    expect(screen.getByRole('button', { name: '重新提交审核' })).toBeEnabled();
+
+    await advancePoll();
+
+    expect(publishWorksProjectSourceMock).toHaveBeenCalledOnce();
     expect(fetchCurrentWorksProjectStatusMock).toHaveBeenCalledOnce();
   });
 
diff --git a/tests/unit/project-release-builder.test.ts b/tests/unit/project-release-builder.test.ts
index 1ec24997..9ff34328 100644
--- a/tests/unit/project-release-builder.test.ts
+++ b/tests/unit/project-release-builder.test.ts
@@ -1,5 +1,8 @@
+// @vitest-environment node
+
 import { createHash } from 'node:crypto';
-import { mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { createRequire } from 'node:module';
+import { mkdir, mkdtemp, readFile, realpath, rm, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { tmpdir } from 'node:os';
 import { afterEach, describe, expect, it, vi } from 'vitest';
@@ -11,13 +14,89 @@ vi.mock('@electron/services/publish-runtime', () => ({
   runElectronNode: runElectronNodeMock,
   PublishRuntimeError: class extends Error {},
 }));
-import { prepareProjectRelease } from '@electron/services/project-release-builder';
+import { prepareProjectRelease, prepareProjectReleaseSummary } from '@electron/services/project-release-builder';
 import { startStaticReleaseServer, staticArtifactSnapshotFiles } from '@electron/services/static-release-server';
 
+const require = createRequire(import.meta.url);
+const AdmZip = require('adm-zip') as typeof import('adm-zip');
+
 describe('project release builder', () => {
   let root: string | null = null;
   afterEach(async () => { if (root) await rm(root, { recursive: true, force: true }); root = null; vi.clearAllMocks(); });
 
+  it.each(['full', 'summary'] as const)('builds a %s release from the saved inner source snapshot while preserving outer identity and all user files', async (mode) => {
+    root = await realpath(await mkdtemp(join(tmpdir(), 'release-builder-nested-')));
+    const source = join(root, 'games', 'Alice 的游戏');
+    const projectId = '11111111-1111-4111-8111-111111111111';
+    await mkdir(join(root, '.makelore'), { recursive: true });
+    await mkdir(join(root, 'knowledge'));
+    await mkdir(join(root, 'sibling-assets'));
+    await mkdir(join(source, 'src'), { recursive: true });
+    await mkdir(join(source, '.makelore'));
+    const userFiles = new Map<string, string>([
+      [join(root, '.makelore', 'project.json'), JSON.stringify(createCodingProjectConfigV2('2026-08-09T00:00:00.000Z', 'interactive_ai_app', projectId))],
+      [join(root, '.makelore', 'work-entry.json'), JSON.stringify({
+        version: 1, projectId, projectPath: root, url: 'http://127.0.0.1:5179/',
+        launch: { kind: 'vite', directory: 'games/Alice 的游戏', args: [] },
+      })],
+      [join(root, 'knowledge', 'notes.txt'), 'outer private knowledge'],
+      [join(root, 'sibling-assets', 'unused.png'), 'unrelated image'],
+      [join(root, 'private.txt'), 'outer private file'],
+      [join(source, '.makelore', 'project.json'), JSON.stringify(createCodingProjectConfigV2('2026-08-09T00:00:00.000Z', 'custom', '22222222-2222-4222-8222-222222222222'))],
+      [join(source, 'package.json'), JSON.stringify({ name: 'inner-game', packageManager: 'npm@11.6.2', scripts: { dev: 'vite' }, devDependencies: { vite: '7.3.1' } })],
+      [join(source, 'package-lock.json'), JSON.stringify({ name: 'inner-game', lockfileVersion: 3, requires: true, packages: {} })],
+      [join(source, 'index.html'), '<main>inner source</main>'],
+      [join(source, 'src', 'main.ts'), 'console.log("user source")'],
+    ]);
+    for (const [path, content] of userFiles) await writeFile(path, content);
+    runElectronNodeMock.mockImplementation(async (input: { args: string[]; cwd: string }) => {
+      expect(input.cwd).not.toBe(root);
+      expect(input.cwd).not.toBe(source);
+      expect(await readFile(join(input.cwd, 'index.html'), 'utf8')).toBe('<main>inner source</main>');
+      expect(JSON.parse(await readFile(join(input.cwd, 'package.json'), 'utf8')).name).toBe('inner-game');
+      await expect(readFile(join(input.cwd, '.makelore', 'project.json'))).rejects.toMatchObject({ code: 'ENOENT' });
+      await expect(readFile(join(input.cwd, 'private.txt'))).rejects.toMatchObject({ code: 'ENOENT' });
+      if (input.args.includes('ci')) {
+        await mkdir(join(input.cwd, 'node_modules', 'vite', 'bin'), { recursive: true });
+        await writeFile(join(input.cwd, 'node_modules', 'vite', 'package.json'), JSON.stringify({ version: '7.3.1' }));
+        await writeFile(join(input.cwd, 'src', 'main.ts'), 'changed only inside build snapshot');
+      } else if (input.args.includes('build')) {
+        const output = input.args[input.args.indexOf('--outDir') + 1];
+        await mkdir(output, { recursive: true });
+        await writeFile(join(output, 'index.html'), `<main>built ${await readFile(join(input.cwd, 'src', 'main.ts'), 'utf8')}</main>`);
+      }
+      return { stdout: '', stderr: '' };
+    });
+
+    const prepare = mode === 'full' ? prepareProjectRelease : prepareProjectReleaseSummary;
+    const release = await prepare({ projectPath: root, clientVersion: '2.0.0' });
+    try {
+      expect(runElectronNodeMock).toHaveBeenCalledTimes(2);
+      expect(runElectronNodeMock.mock.calls[0][0].cwd).toBe(runElectronNodeMock.mock.calls[1][0].cwd);
+      const archive = new AdmZip(release.sourceArchive.path);
+      expect(archive.getEntries().map(entry => entry.entryName)).toEqual([
+        'index.html', 'niancode.yml', 'package-lock.json', 'package.json', 'src/main.ts',
+      ]);
+      expect(archive.readAsText('src/main.ts')).toBe('console.log("user source")');
+      expect(release.sourceArchive.summary.manifest.project_type).toBe('interactive_ai_app');
+      expect(release.contract.source_digest).toBe(createHash('sha256').update(await readFile(release.sourceArchive.path)).digest('hex'));
+      expect(new AdmZip(release.builtArchive.path).readAsText('index.html')).toBe('<main>built changed only inside build snapshot</main>');
+      if ('staticArtifact' in release) {
+        expect(staticArtifactSnapshotFiles(release.staticArtifact)[0].bytes.toString()).toBe('<main>built changed only inside build snapshot</main>');
+      } else {
+        expect(release.sourceArchive).not.toHaveProperty('bytes');
+        expect(release.builtArchive).not.toHaveProperty('bytes');
+      }
+      for (const [path, content] of userFiles) expect(await readFile(path, 'utf8')).toBe(content);
+      await expect(readFile(join(source, 'node_modules', 'vite', 'package.json'))).rejects.toMatchObject({ code: 'ENOENT' });
+      await expect(readFile(join(source, 'dist', 'index.html'))).rejects.toMatchObject({ code: 'ENOENT' });
+    } finally {
+      await release.dispose();
+    }
+    await expect(readFile(release.sourceArchive.path)).rejects.toMatchObject({ code: 'ENOENT' });
+    for (const [path, content] of userFiles) expect(await readFile(path, 'utf8')).toBe(content);
+  });
+
   it('builds from the exact source archive and returns the protocol-v1 canonical contract', async () => {
     root = await mkdtemp(join(tmpdir(), 'release-builder-test-'));
     await mkdir(join(root, '.makelore'), { recursive: true });
diff --git a/tests/unit/works-project-publish.test.ts b/tests/unit/works-project-publish.test.ts
index a9f5a7ac..97b50e7a 100644
--- a/tests/unit/works-project-publish.test.ts
+++ b/tests/unit/works-project-publish.test.ts
@@ -8,7 +8,8 @@ describe('works project publish guidance', () => {
   it.each([
     ['PUBLISH_PREFLIGHT_RUNTIME_ERROR', '作品打开时发生错误', '项目预览'],
     ['PUBLISH_PREFLIGHT_BLANK', '作品打开后没有内容', '移动端布局'],
-    ['PROJECT_FILE_MISSING', '项目文件不完整', '修复当前项目模板'],
+    ['PROJECT_FILE_MISSING', '项目文件不完整', '检查当前作品工程，补齐发布文件后重试'],
+    ['PROJECT_SOURCE_UNCONFIRMED', '需要确认提交哪个作品', '确认作品的工程位置，打开作品后再提交'],
     ['PROJECT_TYPE_UNPUBLISHABLE', '这个项目没有配置发布方式', '新建交互式 AI 应用项目'],
     ['DEPENDENCY_PREFETCH_FAILED', '旧版提交无法继续处理', '升级 Makelore'],
     ['OUTPUT_MISSING', '本次构建结果未通过平台校验', '本次构建结果'],
@@ -26,6 +27,17 @@ describe('works project publish guidance', () => {
     expect(failure.nextStep).toContain(nextStep);
   });
 
+  it.each([
+    ['PROJECT_FILE_MISSING', '当前作品工程缺少发布所需的文件，或文件无法读取。'],
+    ['PROJECT_SOURCE_UNCONFIRMED', '当前项目中无法明确找到唯一的作品工程。'],
+  ])('explains %s without assuming that a template was deleted or damaged', (code, reason) => {
+    const failure = describeWorksPublishFailure(code, 400);
+
+    expect(failure.reason).toBe(reason);
+    expect(JSON.stringify(failure)).not.toMatch(/模板|删除|损坏/);
+    expect(JSON.stringify(failure)).not.toContain(code);
+  });
+
   it.each([
     [401, '需要重新登录'],
     [403, '当前账号不能发布这个作品'],

From af639267198d908e43bcb0bd243e86be2a533427 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 14:31:00 +0800
Subject: [PATCH 04/18] docs: record prepared WeChat name update awaiting
 native refresh

---
 .../30-worklog/tasks/20261014-wechat-card-name-7b36a2d9.md     | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.project-docs/30-worklog/tasks/20261014-wechat-card-name-7b36a2d9.md b/.project-docs/30-worklog/tasks/20261014-wechat-card-name-7b36a2d9.md
index dae38767..a32e5b87 100644
--- a/.project-docs/30-worklog/tasks/20261014-wechat-card-name-7b36a2d9.md
+++ b/.project-docs/30-worklog/tasks/20261014-wechat-card-name-7b36a2d9.md
@@ -37,7 +37,8 @@
 
 - Added visible title/pencil editing, a labeled inline name field and save/cancel controls. Enter saves (except IME composition), Escape cancels; trim/nonempty/64-character validation and local storage failure keep the original display and draft. Remarks are scoped by tenant/user plus stable account ID, persist across refresh/revision/rebinding and are consistently used by card headings/aria/dialog title. Returning to the original source name clears its local override.
 - Owner changes immediately hide the old editor/alias and close its draft; saves verify live auth owner. Missing/hidden cards close the editor rather than locking the page. Editing prevents competing binding actions and automatic restore start/preflight while read-only health refresh remains available. Main/API/DTO/account/revision/operation identities are unchanged. README describes local-only remarks honestly.
-- Renderer build ready; immutable overlay preparation and actual native open/cancel verification remain before runtime finalization.
+- Product commitf1dabdb358ff5f2228fbef014f9e659c156ccc10 is built/prepared in immutable `.trial-runtime/wechat-card-name-20261014-7b36a2d9/runtime`. Source/default-build-log/full Renderer artifact hashes and actual full predecessor native proof passed; Main35142/Host58003/bootstrap/resources/profile preserved. File-only activation switches the stable origin and leaves current.json unchanged pending actual native proof.
+- Root observed alice's Code#/chat with empty input/no files/disabled Send, then attempted native View Reload and Cmd-R. CUA repeatedly rejected actions because the window state changed or element IDs became invalid; no successful reload or live edit proof is claimed. Asked the user to refresh manually and open Agents/渠道/微信. Actual rename-open/cancel check and metadata finalization remain pending; no real card name was saved or binding/cloud operation performed.
 
 ## Verification
 

From c812eb4c0786bf80f8bcb405e988d56ede3a878d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 14:35:23 +0800
Subject: [PATCH 05/18] docs: record Coding sidebar readability proposal

---
 .../20261014-coding-sidebar-text-9fe4278d.md  | 48 +++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 .project-docs/30-worklog/tasks/20261014-coding-sidebar-text-9fe4278d.md

diff --git a/.project-docs/30-worklog/tasks/20261014-coding-sidebar-text-9fe4278d.md b/.project-docs/30-worklog/tasks/20261014-coding-sidebar-text-9fe4278d.md
new file mode 100644
index 00000000..6cc31f1a
--- /dev/null
+++ b/.project-docs/30-worklog/tasks/20261014-coding-sidebar-text-9fe4278d.md
@@ -0,0 +1,48 @@
+# Task: Compare Coding sidebar typography with Agents and Canvas
+
+## Identity
+
+- Task ID: 20261014-coding-sidebar-text-9fe4278d
+- Mode: Feature
+- Branch: codex/20261014-coding-sidebar-text-9fe4278d-coding-sidebar-text
+- Worktree: /Users/chillishark/Makelore 麦洛/.codex-worktrees/makelore/20261014-coding-sidebar-text-9fe4278d
+- Base commit: 436f7ba1eab500e41866f890f49816ff622ef6fe
+- Owner: codex
+- Status: Ready for Integration
+
+## Scope
+
+- Read-only comparison of Coding sidebar text with Agents and Canvas, then propose a clearer text hierarchy. Implementation requires the user's later approval.
+
+## Intent And Constraints
+
+- User explicitly asks for a proposal first and forbids beginning product changes before approval. Preserve desktop focus, running trial, inputs, projects and conversations. No product edits, runtime update, model calls, merge/push or cleanup.
+
+## Outcome
+
+- All three modules share the same bundled Inter/Source Han sans font stack. Agents main navigation and Canvas project entries use14px/600 dark text for normal clickable items; selected/hover states are differentiated primarily by background.
+- Coding project/create/gallery entries already use14px/600 dark navy. Its conversation titles and new-conversation action are12px/400 auxiliary blue-gray#64758a, with icons#7891af. The group header uses the same auxiliary gray. These styles explain the screenshot's weaker conversation-list hierarchy; no font replacement is needed.
+- Proposed Coding-only scope: conversation titles and new-conversation action14px/500/#26384d; group heading and collapse action#506176 while remaining a secondary hierarchy; conversation icons one shade darker. Retain existing14px/600 project entries, pale-blue surface, icon tiles, selected/hover backgrounds, layout and interactions. Scope any adjustment to Coding rather than changing global/shared Canvas tokens.
+- No product code or running application was changed. Proposal is complete; implementation remains awaiting human approval.
+
+## Verification
+
+- Read actual trial pointer identifying source436f7ba1eab500e41866f890f49816ff622ef6fe and isolated from that human-verifiable base. Source comparison: globals.css61/72, Sidebar.tsx425/572/580, ImageWorkspaceSidebar.tsx159/237, classroom-workspace.css7/22/28/33/39–46, CodingProjectConversations.tsx70–114. Independent reference comparison confirmed font/color/weight boundaries.
+- Source-color calculation: current#64758a against Coding#f3f7fb gives4.38:1 contrast; proposed main#26384d11.11:1 and secondary#5061765.89:1. These are deterministic source palette calculations, not real-app screenshot measurements.
+- No test/build/live inspection was needed for this proposal. Product tree stays byte-identical to the base; only this task record is changed. Documentation drift and diff checks recorded at completion.
+
+## Follow-ups
+
+- On approval, resume the same task and recheck the newest actual source/peer sidebar changes before applying the bounded Coding-only adjustment. Verify normal/selected/hover/disabled typography and layout in headless browser checks, then perform only separately authorized trial delivery.
+
+## Promotion Candidates
+
+- None recorded.
+
+## Project Context Loaded
+
+- Concurrent Gate passed: feature task20261014-coding-sidebar-text-9fe4278d, exact branch/worktree/base in Identity match official start/status. Primary occupied/dirty worktree remains untouched.
+- Read entry, memory index, own task, positioning, integrated-state/decision/architecture and relevant domain/quality/evidence/reflection/commitment sections plus AGENTS. Product is a Main-owned creative client with a single light visual system. Existing palette and component typography take precedence over unrelated generic design search output.
+- Official registry had78 owners including this task. Independent coordination review read77 peer records/231Scope, Intent and Promotion sections. All readable; Code-model-onboarding01e8cbed and old child-language6bf94d12 retain unknown placeholder scopes without a concrete dependency. No semantic blocker affects this read-only proposal.
+- Adjacent Code gallery/footer tasks retain palette/layout; wide Code redesigne4132a1e was explicitly withdrawn and is not reused. Canvas's later a72d49e6 task changes its surface to pale yellow, superseding the older lavender state; no Canvas background proposal is made here. Source comparison uses the declared actual trial436f7ba snapshot and adopts no peer uncommitted product.
+- Likely approved-edit paths would be CodingProjectConversations.tsx and Coding-scoped selectors in classroom-workspace.css. No shared global color/font change or backend/API alteration is justified. Planning Gate: Passed.

From ca546c987c1ab8440dc51250372b7fabf9f4bb3d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 14:41:09 +0800
Subject: [PATCH 06/18] Keep Canvas creation identity on retry and simplify the
 yellow rail

---
 ...0261014-canvas-create-recovery-a72d49e6.md |  80 ++++++++++
 README.md                                     |   2 +-
 .../layout/ImageWorkspaceSidebar.tsx          |  13 +-
 src/lib/image-workspace.ts                    |   6 +-
 src/pages/Chat/classroom-workspace.css        |   2 +-
 src/pages/ImageCanvas/DesignWorksRail.tsx     |   8 +-
 src/stores/image-workspace.ts                 | 117 ++++++++++++---
 tests/e2e/image-workspace-v2.spec.ts          |  13 +-
 tests/unit/image-workspace-sidebar.test.tsx   |  31 +++-
 tests/unit/image-workspace-store.test.ts      | 141 +++++++++++++++++-
 10 files changed, 379 insertions(+), 34 deletions(-)
 create mode 100644 .project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md

diff --git a/.project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md b/.project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md
new file mode 100644
index 00000000..285709f1
--- /dev/null
+++ b/.project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md
@@ -0,0 +1,80 @@
+# Task: Remove creation copy and diagnose Canvas project creation timeouts
+
+## Identity
+
+- Task ID: 20261014-canvas-create-recovery-a72d49e6
+- Mode: Feature
+- Branch: codex/20261014-canvas-create-recovery-a72d49e6-canvas-create-recovery
+- Worktree: /Users/chillishark/Makelore 麦洛/.codex-worktrees/makelore/20261014-canvas-create-recovery-a72d49e6
+- Base commit: f34e651774beb6a2a213b5711f2ffb887d22d4b7
+- Owner: codex-root
+- Status: Ready for Integration
+
+## Scope
+
+- Remove the exact create-dialog description, change the Canvas rail from pale lavender to pale yellow, diagnose actual Canvas project creation timeouts, and implement the smallest evidenced safe recovery/fix.
+
+## Intent And Constraints
+
+- User explicitly requests the copy removal and timeout diagnosis, then steers the same task to pale-yellow background. Main remains the sole authenticated network authority; preserve real projects/drafts/accounts, recent sidebar changes, compact layout and idempotent command boundaries. Do not blindly replay unknown create requests, delete real data, trigger paid generation, deploy backend services, change runtime auth/contracts or edit other owned worktrees. Preserve primary checkout and all existing runtime features. Earlier user merge/push/temporary-app update/cleanup authorization persists, but fresh runtime state must be verified before delivery.
+
+## Outcome
+
+- Removed the exact desktop creation description and disabled its absent aria description; Canvas shared rail surface is pale yellow #fff9e8, with Code recipes preserved. Both creation dialogs hold a distinct creation intent. Any failed request for unchanged intent/name reuses its original server clientWorkspaceId; a new dialog or modified name creates a new intent, and repeated concurrent submissions share one in-flight request. Account/logout/reset generations prevent old responses from changing another account or reset store. Create/rename name input is disabled during submission. README synchronized.
+
+## Verification
+
+- Exact runtime failure confirmed through the current authenticated local Host API: Canvas bootstrap 504/30015ms with DESIGN_WORKSPACE_REQUEST_TIMEOUT. Native telemetry also showed simultaneous ~30s Canvas, Agent and teacher cloud failures. Public Square capabilities returned actual JSON200/0.17s, so reachable upstream was verified. Fresh current pointer/Main/PPID/profile guard allowed only NetworkService PID35175 SIGTERM; Chromium rebuilt PID71263. Main35142, Renderer35176 and pointer SHA remained unchanged. Same authenticated readonly bootstrap then returned200/116ms and 5 existing workspaces; requested Autumn/秋天 was absent. No create replay, model call, paid generation, binding operation or Main restart was performed. Underlying NetworkService hang trigger is not proven; recovery establishes the affected transport path. Receipt under .trial-runtime/canvas-create-recovery-20261014-a72d49e6/network-recovery-receipt.json.
+- Standard typecheck, scoped lint, default full build:vite, whitespace and feature documentation drift passed; 81 focused unit tests in4 files passed, including API/store identities/auth/races and both UI scopes. Isolated Electron Canvas V2 acceptance passed (1 test, 7.0s), including desktop/compact split, draft/plan/production history and new creation popup; pale-yellow surface and absent exact description checked. Inspected final creation-dialog screenshot. Independent source/concurrency/auth review passed. Logs and screenshots retained outside source checkout in .trial-runtime/canvas-create-recovery-20261014-a72d49e6.
+
+## Follow-ups
+
+- Unified update coordination chat 01a12eba-e98b-76a3-8fd5-206f2820d623 notified under direct previously verified human coordination authorization. It is currently preparing a separate Code Main diagnostic change. Current runtime pointer still says436, but actual stable alias points at WeChat name-edit Renderer f1dab; that peer file activation is awaiting native metadata finalization. Any final build/update must preserve actual f1dab product changes and freeze the real runtime pair; do not overwrite them using stale current.json alone. Primary checkout remains occupied/untouched. Native user is actively navigating, so avoid racing UI reloads or discarding work; no whole-app restart has been performed.
+
+## Promotion Candidates
+
+- None recorded.
+
+## Project Context Loaded
+
+Task context:
+- Task ID: 20261014-canvas-create-recovery-a72d49e6
+- Mode: Feature
+- Branch: codex/20261014-canvas-create-recovery-a72d49e6-canvas-create-recovery
+- Worktree: /Users/chillishark/Makelore 麦洛/.codex-worktrees/makelore/20261014-canvas-create-recovery-a72d49e6
+- Base commit: f34e651774beb6a2a213b5711f2ffb887d22d4b7 (fresh origin/main)
+- Ownership: official start/check/status match; occupied dirty primary teacher-consensus checkout remains untouched.
+- Other tasks: 74 peer records read-only Scope/Intent/Promotion inventory at /tmp/makelore-canvas-create-peer-scopes.json. Current WeChat local-remark task targets another Renderer surface and runtime436; runtime delivery must preserve it. Prior Canvas/sidebar/consolidation sources are ready and integrated; Code session diagnosis is independent. Old unrelated placeholder scope remains unknown, without a dependency.
+- Overlap/conflict: no semantic conflict in source. Runtime updates require a fresh current pointer/build-pair check; no source record edits or adoption.
+
+Read:
+- AGENTS.md, existing README product state and prior same-conversation accepted context
+- .project-docs/05-agent-entry/read-before-planning.md, memory-index.md, planning-gate.md
+- Own task, positioning, current-state integrated snapshot, decision-index, system-overview
+- business-rules, success-criteria; evidence/reflection/commitment indexes in Canvas/runtime context
+- adr-007-ai-design-living-form-v2.md; peer task Scope/Intent/Promotion sections
+- maintain-project-docs skill; existing design skill remains applicable only to the requested color/copy consistency
+
+Relevant understanding:
+- Goal: Chinese project-based creative client, preserving authoritative cloud Living Form, server reducer, quotes/tasks/assets.
+- Current focus: all prior Canvas/Code rail refinements are in main f34; live full trial436/35142 uses a frozen compiled snapshot and main-owned development login.
+- Active scope: exact description removal, pale-yellow rail, evidenced create timeout cause and recovery.
+- Constraints/decisions: Main owns auth/network. Unknown mutations must reuse stable identities and reconcile canonical server state; no local semantic fallback or fabricated successful form.
+- Evidence: current native Canvas shows project names but its main detail remains loading; screenshots show create timeout. Main createWorkspace performs POST then getWorkspace. Renderer currently generates a new clientWorkspaceId on every create retry. Neither observation proves which live leg timed out.
+- Files/modules: ImageWorkspaceSidebar, shared sidebar CSS, DesignWorksRail compact dialog, image-workspace client/store, WorksSquareDesignWorkspace/request deadline, focused tests and runtime evidence.
+- Stale/unknown: canonical presentation descriptions predate accepted V2 layout; preserve latest source. Live network stack may differ from source evidence, and NetworkService reset was once effective without a permanent root cause; do not assume recurrence or restart the whole app before precise read-only observations.
+
+Gate result:
+- Passed
+
+## Plan
+
+- Remove the quoted description and use pale-yellow rail surface, keeping shared Code recipes.
+- Independently trace the Main create/load timeout path and Renderer retry identity; obtain precise read-only current UI/network evidence to identify the failed stage before changing timeout or transport behavior.
+- Fix evidenced behavior, verify timeout/retry and existing desktop/compact creation with focused tests, typecheck/lint/full build. Deliver through a fresh verified runtime tree while preserving active work; record truthful native and fixture limits, then commit/handoff or push within existing authorization.
+
+## Delivery Handoff
+
+- Product commit and final HEAD will be reported to the authorized coordination chat. This clean Ready source contains Renderer-only changes; Main/shared/resources are unchanged against runtime436. Source implementation and live network recovery are separately evidenced.
+- A precise read-only real-project bootstrap recovered; no real Autumn project was created. Real UI color/copy activation remains for the combined update, because actual WeChat f1dab files are active while current.json still points at436, and another Code Main update is in progress. Preserve actual newer Renderer feature source and active user work rather than blindly replacing the old pointer's tree.
+- Any different title or explicitly reopened create dialog is a new creation intent; an older transport-unknown project may still exist on the server. Never delete it or infer identity from a matching name. This patch prevents same-intent retries from making extra identities; it does not establish the underlying NetworkService hang trigger or prove real model generation.
diff --git a/README.md b/README.md
index 02b1e42a..7414f8a1 100644
--- a/README.md
+++ b/README.md
@@ -24,7 +24,7 @@ Makelore 是一个面向软件、视觉创作、智能机器人与个人云智
 
   Agents 侧栏的「渠道」按每个微信一张卡展示备注、当前智能体与使用状态；一个微信同时只绑定一个智能体，多个微信可以使用同一智能体。绑定有效且服务正常时始终开启回复，不提供暂停或恢复开关；更换智能体保留登录与历史，完成重新登录后也开启回复。旧的关闭记录在页面可见时，重新核对登录、在线服务、可用目标、同步状态及新旧渠道操作恢复记录后串行开启；服务离线、退出待确认、目标不可用和结果未知时不自动写入。常用操作是“更换智能体”；“更多操作”内可以解除微信绑定，停止任务、清除目标并退出微信登录，历史保留，再使用需扫码。确认解绑后的卡片可选择“删除微信卡片”，只从这台设备的当前账号列表移除，刷新和重开后仍保留删除结果；其他设备及云端账号和聊天历史不受影响，同一微信重新绑定后再次显示。本机偏好按账号与租户隔离，删除前再次读取云端状态并检查原操作，保存失败时保留卡片并显示原因。添加流程为选择已开始使用的智能体、扫码、自动完成绑定；扫码确认、目标正确、启用成功且最终状态回读可用后才显示完成。微信服务离线时，卡片仅保留右上角“微信服务离线”状态，不显示重复的离线长段说明；绑定或重新连接失败的窗口仍说明原因，不把扫码成功当作回复可用。未知或未同步状态显示“状态待确认”。无可用智能体时说明创建和“开始使用”的前提，加载失败不冒充空态，已有微信仍可解绑。Main 持有凭据与原操作恢复；解除需要配套 Yuxi 用户级 `/channel-accounts/{id}/unbind`，旧后端不会通过改按钮文案或组合未确认操作假装完成。变更以最新读取状态为准，未完成操作保留原身份供显式恢复；失败在当前窗口可见，结果未知不自动重放。微信退出仍在处理中时，禁止新的连接和绑定变更，保留刷新与原操作恢复。旧请求无法安全恢复、账号关系不一致或目标不可用时提示先核对；“不再提醒”只移除本机提醒，不取消服务端仍在处理的操作。最新 Yuxi 的退出保护条件和持久恢复由服务端负责，发布需配套 Core/Adapter 与 Yuxi business=13、knowledge=2 数据库版本。渠道页不展示微信聊天或活动，既有历史、费用、内容隔离与应用 API 保持原边界。实际微信身份及重复扫码识别仍由云端负责，不从备注推测。
 
-- `Makelore Canvas｜AI 绘画`：每个设计项目（Workspace）维护一份从创建起就存在的 Living Form。左侧工作栏与 Code 共用间距、图标徽章、项目行、操作菜单和底部广场/账户样式，仅工作栏底色采用淡紫色（`#f5f2fa`）；顶部返回箭头与 Code 对齐，分组标题为“我的项目”，桌面项目列表仅显示名称，隐藏名称下的设计版本与更新时间；新建、切换和项目操作菜单集中管理 Workspace。工作区统一项目标题、设计版本与制作状态，创作对话和作品区支持拖动分栏、键盘调宽及单栏展开；对话以 Markdown 呈现，底部输入器保留草稿、发送状态与 Enter / Shift+Enter 快捷键。右侧通过“当前作品 / 历史作品”切换，在大图或视频预览旁编辑唯一制作方案、确认费用和制作；历史作品可回到工作区查看，切换面板保留未保存的制作参数。紧凑窗口以“创作对话 / 作品与方案”切换面板，通过项目抽屉管理 Workspace。图片支持适应窗口、原始尺寸及 Esc 关闭，视频支持预览和保存到电脑。参考图从本地上传后以 `@图片N` 绑定，具体用法只写在创作提示词中。
+- `Makelore Canvas｜AI 绘画`：每个设计项目（Workspace）维护一份从创建起就存在的 Living Form。左侧工作栏与 Code 共用间距、图标徽章、项目行、操作菜单和底部广场/账户样式，仅工作栏底色采用淡黄色（`#fff9e8`）；顶部返回箭头与 Code 对齐，分组标题为“我的项目”，桌面项目列表仅显示名称，隐藏名称下的设计版本与更新时间；新建、切换和项目操作菜单集中管理 Workspace；创建请求失败后保留名称与本次创建标识，原样重试避免重复创建项目。工作区统一项目标题、设计版本与制作状态，创作对话和作品区支持拖动分栏、键盘调宽及单栏展开；对话以 Markdown 呈现，底部输入器保留草稿、发送状态与 Enter / Shift+Enter 快捷键。右侧通过“当前作品 / 历史作品”切换，在大图或视频预览旁编辑唯一制作方案、确认费用和制作；历史作品可回到工作区查看，切换面板保留未保存的制作参数。紧凑窗口以“创作对话 / 作品与方案”切换面板，通过项目抽屉管理 Workspace。图片支持适应窗口、原始尺寸及 Esc 关闭，视频支持预览和保存到电脑。参考图从本地上传后以 `@图片N` 绑定，具体用法只写在创作提示词中。
 - `Makelore Robot｜AI 机器`：管理机器人智能体、设备激活绑定、智能体配置与设备分配；机器人工作台的智能体位于 Robot 全局侧栏，选中后在内容区先查看绑定设备、再查看基础设置，当前智能体通过 URL 参数保持可分享选择；绑定设备时默认先选择“引导配网”或“已有激活码”。在 Windows 与 macOS 的引导路径中，Makelore 可在弹窗内扫描并连接附近开放的 `Xiaozhi-*` 配网热点，失败时仍可通过系统 Wi-Fi 手动连接；后续继续复用机器人现有热点配网页面，不修改固件，也不由 Makelore 接收 Wi-Fi 密码。
 
 应用启动默认进入 AI 模块入口选择页。入口页可在未登录状态浏览；未登录用户点击已开通模块时进入客户端原生登录页，可使用账号密码或手机号短信验证码登录。密码登录可选“记住密码”：正式安装包仅由 Electron Main 使用系统受保护凭据存储加密保存和回填账号密码，不写入 Renderer 持久状态，未打包开发版或系统安全存储不可用时禁用该选项。登录请求由 Renderer 经 Host API 交给 Electron Main，再由 Main 调用 Works Square；成功后回到入口选择页。已登录时，Electron Main 会从 Works Square `/api/auth/me` 读取当前账号，只向 Renderer 投影用户名、账号/租户/部门标识、权限名列表与四个模块布尔开关，不透传上游资料或凭据。工作区门禁同时要求有效 Token 和完整用户身份；旧状态缺失身份时会先尝试从 Main 恢复，仍无法确认则清除残留会话并返回登录页。被管理员关闭的模块会在入口页置灰且无法点击，直接访问其工作区路径也会返回入口页。旧服务端未返回策略或缺少单项字段时默认开放；这个客户端门禁不替代服务端 API 授权。
diff --git a/src/components/layout/ImageWorkspaceSidebar.tsx b/src/components/layout/ImageWorkspaceSidebar.tsx
index 9a9c5a5a..59289779 100644
--- a/src/components/layout/ImageWorkspaceSidebar.tsx
+++ b/src/components/layout/ImageWorkspaceSidebar.tsx
@@ -20,7 +20,7 @@ import {
   DialogTitle,
 } from '@/components/ui/dialog';
 import { Input } from '@/components/ui/input';
-import { IMAGE_WORKSPACE_CREATE_PROJECT_EVENT } from '@/lib/image-workspace';
+import { createImageWorkspaceProjectId, IMAGE_WORKSPACE_CREATE_PROJECT_EVENT } from '@/lib/image-workspace';
 import { useImageWorkspaceStore } from '@/stores/image-workspace';
 import { useAuthStore } from '@/stores/auth';
 import type { DesignWorkspaceSummary } from '../../../shared/image-workspace';
@@ -48,6 +48,7 @@ export function ImageWorkspaceSidebar({ sidebarCollapsed }: ImageWorkspaceSideba
   const renameProject = useImageWorkspaceStore((state) => state.renameProject);
   const selectProject = useImageWorkspaceStore((state) => state.selectProject);
   const [dialog, setDialog] = useState<ProjectDialogState | null>(null);
+  const [creationIntentId, setCreationIntentId] = useState(createImageWorkspaceProjectId);
   const [projectName, setProjectName] = useState('');
   const [dialogError, setDialogError] = useState<string | null>(null);
   const [saving, setSaving] = useState(false);
@@ -63,6 +64,7 @@ export function ImageWorkspaceSidebar({ sidebarCollapsed }: ImageWorkspaceSideba
     const openCreateDialog = () => {
       // The compact project Sheet owns this event while the desktop sidebar is hidden.
       if (typeof window.matchMedia === 'function' && !window.matchMedia('(min-width: 1024px)').matches) return;
+      setCreationIntentId(createImageWorkspaceProjectId());
       setProjectName('');
       setDialogError(null);
       setDialog({ mode: 'create', project: null });
@@ -79,6 +81,7 @@ export function ImageWorkspaceSidebar({ sidebarCollapsed }: ImageWorkspaceSideba
   );
 
   const openCreateDialog = () => {
+    setCreationIntentId(createImageWorkspaceProjectId());
     setProjectName('');
     setDialogError(null);
     setDialog({ mode: 'create', project: null });
@@ -103,7 +106,7 @@ export function ImageWorkspaceSidebar({ sidebarCollapsed }: ImageWorkspaceSideba
         await renameProject(dialog.project.workspaceId, title);
         toast.success('项目名称已更新');
       } else {
-        await createProject(title);
+        await createProject(title, creationIntentId);
         navigate('/image-canvas');
       }
       setDialog(null);
@@ -282,12 +285,9 @@ export function ImageWorkspaceSidebar({ sidebarCollapsed }: ImageWorkspaceSideba
       )}
 
       <Dialog open={dialog !== null} onOpenChange={(open) => !open && !saving && setDialog(null)}>
-        <DialogContent className="sm:max-w-md">
+        <DialogContent className="sm:max-w-md" aria-describedby={undefined}>
           <DialogHeader>
             <DialogTitle>{dialog?.mode === 'rename' ? '重命名设计项目' : '新建设计项目'}</DialogTitle>
-            <DialogDescription>
-              创建后会立即生成一份空白设计表单，可通过对话或直接编辑完善。
-            </DialogDescription>
           </DialogHeader>
           <div className="space-y-2">
             <label htmlFor="design-project-name" className="text-sm font-medium text-foreground">
@@ -295,6 +295,7 @@ export function ImageWorkspaceSidebar({ sidebarCollapsed }: ImageWorkspaceSideba
             </label>
             <Input
               id="design-project-name"
+              disabled={saving}
               autoFocus
               value={projectName}
               placeholder="例如：秋季新品主视觉"
diff --git a/src/lib/image-workspace.ts b/src/lib/image-workspace.ts
index 6d122f84..4202eb5f 100644
--- a/src/lib/image-workspace.ts
+++ b/src/lib/image-workspace.ts
@@ -60,6 +60,10 @@ export function createImageWorkspaceOperationId(): string {
   return createClientId('design-operation');
 }
 
+export function createImageWorkspaceProjectId(): string {
+  return createClientId('workspace');
+}
+
 function getErrorStatus(error: unknown): number {
   if (error instanceof AppError && typeof error.details?.status === 'number') {
     return error.details.status;
@@ -111,7 +115,7 @@ export function fetchImageWorkspace(): Promise<DesignWorkspaceBootstrap> {
 
 export function createImageWorkspaceProject(
   title: string,
-  clientWorkspaceId = createClientId('workspace'),
+  clientWorkspaceId = createImageWorkspaceProjectId(),
 ): Promise<DesignWorkspace> {
   return requestData(`${IMAGE_WORKSPACE_API_PATH}/workspaces`, {
     method: 'POST',
diff --git a/src/pages/Chat/classroom-workspace.css b/src/pages/Chat/classroom-workspace.css
index b03e6de0..bbb29dbd 100644
--- a/src/pages/Chat/classroom-workspace.css
+++ b/src/pages/Chat/classroom-workspace.css
@@ -45,7 +45,7 @@
 [data-testid="sidebar"][data-classroom="true"] .classroom-conversation-row > button:first-child { min-height: 35px; gap: 7px; }
 [data-testid="sidebar"][data-classroom="true"] .classroom-conversation-row > button:first-child > svg { color: #7891af; }
 [data-testid="sidebar"]:is([data-classroom="true"], [data-workspace-sidebar="canvas"]) .classroom-account-footer { border-top: 1px solid #dde5ee; background: var(--workspace-sidebar-background, #edf3f9); }
-[data-testid="sidebar"][data-workspace-sidebar="canvas"] { --workspace-sidebar-background: #f5f2fa; }
+[data-testid="sidebar"][data-workspace-sidebar="canvas"] { --workspace-sidebar-background: #fff9e8; }
 [data-testid="sidebar"][data-workspace-sidebar="canvas"] .classroom-sidebar-header { padding: 0; }
 [data-testid="sidebar"][data-workspace-sidebar="canvas"] .classroom-sidebar-content { display: flex; flex-direction: column; overflow: hidden; }
 .classroom-workspace [data-testid="coding-conversation-header"] { border-bottom-color: #e8edf3; background: #fff; color: #304968; }
diff --git a/src/pages/ImageCanvas/DesignWorksRail.tsx b/src/pages/ImageCanvas/DesignWorksRail.tsx
index 56fb929a..4dcddb58 100644
--- a/src/pages/ImageCanvas/DesignWorksRail.tsx
+++ b/src/pages/ImageCanvas/DesignWorksRail.tsx
@@ -16,7 +16,7 @@ import {
   DialogTitle,
 } from '@/components/ui/dialog';
 import { Input } from '@/components/ui/input';
-import { IMAGE_WORKSPACE_CREATE_PROJECT_EVENT } from '@/lib/image-workspace';
+import { createImageWorkspaceProjectId, IMAGE_WORKSPACE_CREATE_PROJECT_EVENT } from '@/lib/image-workspace';
 import { cn } from '@/lib/utils';
 import { useImageWorkspaceStore } from '@/stores/image-workspace';
 import type { DesignWorkspace, DesignWorkspaceSummary } from '../../../shared/image-workspace';
@@ -70,6 +70,7 @@ export function DesignWorksRail({
   const deleteProject = useImageWorkspaceStore((state) => state.deleteProject);
   const selectProject = useImageWorkspaceStore((state) => state.selectProject);
   const [dialog, setDialog] = useState<ProjectDialogState | null>(null);
+  const [creationIntentId, setCreationIntentId] = useState(createImageWorkspaceProjectId);
   const [projectName, setProjectName] = useState('');
   const [dialogError, setDialogError] = useState<string | null>(null);
   const [saving, setSaving] = useState(false);
@@ -92,6 +93,7 @@ export function DesignWorksRail({
   const currentStatus = activeProjectStatus(workspace);
 
   const openCreate = () => {
+    setCreationIntentId(createImageWorkspaceProjectId());
     setProjectName('');
     setDialogError(null);
     setDialog({ mode: 'create', project: null });
@@ -99,6 +101,7 @@ export function DesignWorksRail({
 
   useEffect(() => {
     const handleCreateRequest = () => {
+      setCreationIntentId(createImageWorkspaceProjectId());
       setProjectName('');
       setDialogError(null);
       setDialog({ mode: 'create', project: null });
@@ -126,7 +129,7 @@ export function DesignWorksRail({
         await renameProject(dialog.project.workspaceId, title);
         toast.success('项目名称已更新');
       } else {
-        await createProject(title);
+        await createProject(title, creationIntentId);
         toast.success('新项目已创建');
       }
       setDialog(null);
@@ -286,6 +289,7 @@ export function DesignWorksRail({
             <label htmlFor="canvas-work-name" className="text-sm font-medium text-foreground">项目名称</label>
             <Input
               id="canvas-work-name"
+              disabled={saving}
               autoFocus
               value={projectName}
               placeholder="例如：小狗的快乐短片"
diff --git a/src/stores/image-workspace.ts b/src/stores/image-workspace.ts
index 29300a76..8d67b474 100644
--- a/src/stores/image-workspace.ts
+++ b/src/stores/image-workspace.ts
@@ -2,6 +2,7 @@ import { create } from 'zustand';
 import {
   createImageWorkspaceOperationId,
   createImageWorkspaceProject,
+  createImageWorkspaceProjectId,
   deleteImageWorkspaceProject,
   fetchImageWorkspace,
   fetchImageWorkspaceProject,
@@ -84,7 +85,7 @@ type ImageWorkspaceState = {
   quoteBlockers: DesignCompilationIssue[];
   error: string | null;
   load: () => Promise<DesignWorkspaceBootstrap | null>;
-  createProject: (title: string) => Promise<DesignWorkspace>;
+  createProject: (title: string, creationIntentId?: string) => Promise<DesignWorkspace>;
   renameProject: (workspaceId: string, title: string) => Promise<DesignWorkspace>;
   deleteProject: (workspaceId: string) => Promise<DesignDeleteWorkspaceResult>;
   selectProject: (workspaceId: string) => Promise<void>;
@@ -117,6 +118,32 @@ let activeEventWorkspaceId: string | null = null;
 let eventConnectionGeneration = 0;
 let selectionGeneration = 0;
 let workspaceSelectionGeneration = 0;
+let creationGeneration = 0;
+type ProjectCreation = {
+  accountKey: string;
+  generation: number;
+  title: string;
+  clientWorkspaceId: string;
+  request: Promise<DesignWorkspace> | null;
+};
+const projectCreations = new Map<string, ProjectCreation>();
+
+function creationAccountKey(): string | null {
+  const auth = useAuthStore.getState();
+  if (!auth.isAuthenticated()) return null;
+  return JSON.stringify([
+    auth.authBase,
+    auth.user?.tenantId,
+    auth.user?.userId,
+    auth.user?.username,
+  ]);
+}
+
+function clearProjectCreations(): void {
+  creationGeneration += 1;
+  projectCreations.clear();
+}
+
 const assistantStreamChunkIndexes = new Map<string, number>();
 const observedCommandTerminalEvents = new Map<string, DesignCommandTerminalEvent>();
 const ASSISTANT_PROGRESS_STAGES: DesignAssistantProgressStage[] = [
@@ -789,23 +816,68 @@ export const useImageWorkspaceStore = create<ImageWorkspaceState>((set, get) =>
       return inFlightLoad;
     },
 
-    createProject: async (title) => {
-      const workspace = await createImageWorkspaceProject(title);
-      selectionGeneration += 1;
-      workspaceSelectionGeneration += 1;
-      closeEventSource();
-      assistantStreamChunkIndexes.clear();
-      set((state) => ({
-        ...withWorkspace(state, workspace),
-        fieldDrafts: {},
-        chatDraft: '',
-        assistantActivities: {},
-        assistantStreams: {},
-        quoteBlockers: [],
-        lastEventId: null,
-      }));
-      get().connectEvents();
-      return workspace;
+    createProject: (title, creationIntentId = createImageWorkspaceProjectId()) => {
+      const accountKey = creationAccountKey();
+      if (!accountKey) {
+        return Promise.reject(new ImageWorkspaceApiError(
+          401, 'design_auth_required', '请登录后再创建项目',
+        ));
+      }
+      const normalizedTitle = title.trim();
+      const candidate = projectCreations.get(creationIntentId);
+      const previous = candidate?.accountKey === accountKey
+        && candidate.generation === creationGeneration ? candidate : undefined;
+      if (previous?.request) {
+        if (previous.title === normalizedTitle) return previous.request;
+        return Promise.reject(new Error('项目正在创建，请等待完成后再修改名称'));
+      }
+      const creation: ProjectCreation = previous?.title === normalizedTitle
+        ? previous
+        : {
+          accountKey,
+          generation: creationGeneration,
+          title: normalizedTitle,
+          clientWorkspaceId: createImageWorkspaceProjectId(),
+          request: null,
+        };
+      projectCreations.set(creationIntentId, creation);
+      const request = (async () => {
+        try {
+          const workspace = await createImageWorkspaceProject(
+            creation.title, creation.clientWorkspaceId,
+          );
+          if (creation.generation !== creationGeneration
+            || creation.accountKey !== creationAccountKey()) {
+            throw new ImageWorkspaceApiError(
+              401, 'design_creation_session_changed', '登录状态已变化，请重新打开新建项目',
+            );
+          }
+          if (projectCreations.get(creationIntentId) === creation) {
+            projectCreations.delete(creationIntentId);
+          }
+          selectionGeneration += 1;
+          workspaceSelectionGeneration += 1;
+          closeEventSource();
+          assistantStreamChunkIndexes.clear();
+          set((state) => ({
+            ...withWorkspace(state, workspace),
+            fieldDrafts: {},
+            chatDraft: '',
+            assistantActivities: {},
+            assistantStreams: {},
+            quoteBlockers: [],
+            lastEventId: null,
+          }));
+          get().connectEvents();
+          return workspace;
+        } finally {
+          // A failed snapshot read may follow a committed create, even for 4xx errors.
+          // Keep the original identity for an explicit same-payload retry.
+          creation.request = null;
+        }
+      })();
+      creation.request = request;
+      return request;
     },
 
     renameProject: async (workspaceId, title) => {
@@ -1253,6 +1325,7 @@ export const useImageWorkspaceStore = create<ImageWorkspaceState>((set, get) =>
     },
 
     reset: () => {
+      clearProjectCreations();
       selectionGeneration += 1;
       workspaceSelectionGeneration += 1;
       closeEventSource();
@@ -1279,6 +1352,14 @@ export const useImageWorkspaceStore = create<ImageWorkspaceState>((set, get) =>
   };
 });
 
+let currentCreationAccountKey = creationAccountKey();
+useAuthStore.subscribe(() => {
+  const accountKey = creationAccountKey();
+  if (accountKey === currentCreationAccountKey) return;
+  currentCreationAccountKey = accountKey;
+  clearProjectCreations();
+});
+
 export function recentDesignChanges(workspace: DesignWorkspace | null): DesignFieldChange[] {
   return workspace?.form.recentChangeSet.changes ?? [];
 }
diff --git a/tests/e2e/image-workspace-v2.spec.ts b/tests/e2e/image-workspace-v2.spec.ts
index 64b5e2a3..330c8895 100644
--- a/tests/e2e/image-workspace-v2.spec.ts
+++ b/tests/e2e/image-workspace-v2.spec.ts
@@ -473,7 +473,7 @@ test.describe('AI Design V2 workspace', () => {
       await expect(page.getByText('目标与用途')).toHaveCount(0);
       await expect(page.locator('[data-testid^="sidebar-image-conversation-"]')).toHaveCount(0);
 
-      // Canvas shares Code's navigation recipe, with a lavender surface and its own top return row.
+      // Canvas shares Code's navigation recipe, with a pale-yellow surface and its own top return row.
       const sidebar = page.getByTestId('sidebar');
       const createProject = sidebar.getByTestId('sidebar-create-project');
       const project = sidebar.getByTestId('sidebar-image-project-workspace-1');
@@ -482,7 +482,7 @@ test.describe('AI Design V2 workspace', () => {
       const community = sidebar.getByRole('button', { name: '作品广场', exact: true });
       const account = sidebar.getByTestId('sidebar-member-menu-trigger');
       await expect(sidebar).toHaveAttribute('aria-hidden', 'false');
-      await expect(sidebar).toHaveCSS('background-color', 'rgb(245, 242, 250)');
+      await expect(sidebar).toHaveCSS('background-color', 'rgb(255, 249, 232)');
       await expect(createProject).toHaveText('新建项目');
       await expect(projectsHeading).toHaveText('我的项目');
       await expect(project).toHaveText('咖啡机新品主视觉');
@@ -526,6 +526,15 @@ test.describe('AI Design V2 workspace', () => {
       });
       expect(navigationStyles.community).toEqual(navigationStyles.create);
 
+      await createProject.click();
+      const creationDialog = page.getByRole('dialog', { name: '新建设计项目', exact: true });
+      await expect(creationDialog).toBeVisible();
+      await expect(creationDialog).not.toContainText('创建后会立即生成一份空白设计表单');
+      await expect(creationDialog.getByRole('textbox', { name: '项目名称' })).toBeVisible();
+      await page.screenshot({ path: testInfo.outputPath('canvas-project-create-dialog.png'), animations: 'disabled' });
+      await creationDialog.getByRole('button', { name: '取消', exact: true }).click();
+      await expect(creationDialog).toHaveCount(0);
+
       const splitBounds = (await split.boundingBox())!;
       const conversationBounds = (await conversationPane.boundingBox())!;
       const worksBounds = (await worksPane.boundingBox())!;
diff --git a/tests/unit/image-workspace-sidebar.test.tsx b/tests/unit/image-workspace-sidebar.test.tsx
index 5f29ba5a..a38a1eab 100644
--- a/tests/unit/image-workspace-sidebar.test.tsx
+++ b/tests/unit/image-workspace-sidebar.test.tsx
@@ -98,12 +98,13 @@ describe('ImageWorkspaceSidebar', () => {
     fireEvent.click(screen.getByRole('button', { name: '新建设计项目' }));
     const dialog = screen.getByRole('dialog', { name: '新建设计项目' });
     expect(screen.getAllByRole('dialog')).toHaveLength(1);
+    expect(dialog).not.toHaveTextContent('创建后会立即生成一份空白设计表单');
     fireEvent.change(within(dialog).getByRole('textbox', { name: '项目名称' }), {
       target: { value: '  小狗的快乐短片  ' },
     });
     fireEvent.click(within(dialog).getByRole('button', { name: '创建项目' }));
 
-    await waitFor(() => expect(actions.createProject).toHaveBeenCalledExactlyOnceWith('小狗的快乐短片'));
+    await waitFor(() => expect(actions.createProject).toHaveBeenCalledExactlyOnceWith('小狗的快乐短片', expect.stringMatching(/^workspace-/)));
     await waitFor(() => expect(screen.queryByRole('dialog')).not.toBeInTheDocument());
     expect(screen.getByLabelText('当前页面')).toHaveTextContent('/image-canvas');
     expect(actions.selectProject).not.toHaveBeenCalled();
@@ -111,6 +112,34 @@ describe('ImageWorkspaceSidebar', () => {
     expect(actions.deleteProject).not.toHaveBeenCalled();
   });
 
+  it('keeps one creation intent across a failed submission and uses a new intent after reopening', async () => {
+    const { actions } = prepareProjects();
+    actions.createProject.mockRejectedValueOnce(new Error('AI 设计服务响应超时，请重试'));
+    renderSidebar();
+
+    fireEvent.click(screen.getByRole('button', { name: '新建设计项目' }));
+    let dialog = screen.getByRole('dialog', { name: '新建设计项目' });
+    fireEvent.change(within(dialog).getByRole('textbox', { name: '项目名称' }), { target: { value: '秋天' } });
+    fireEvent.click(within(dialog).getByRole('button', { name: '创建项目' }));
+    await within(dialog).findByText('AI 设计服务响应超时，请重试');
+    const initialIntent = actions.createProject.mock.calls[0][1];
+    expect(initialIntent).toMatch(/^workspace-/);
+    expect(within(dialog).getByRole('textbox', { name: '项目名称' })).toHaveValue('秋天');
+
+    fireEvent.click(within(dialog).getByRole('button', { name: '创建项目' }));
+    await waitFor(() => expect(actions.createProject).toHaveBeenCalledTimes(2));
+    expect(actions.createProject.mock.calls[1]).toEqual(['秋天', initialIntent]);
+    await waitFor(() => expect(screen.queryByRole('dialog')).not.toBeInTheDocument());
+
+    fireEvent.click(screen.getByRole('button', { name: '新建设计项目' }));
+    dialog = screen.getByRole('dialog', { name: '新建设计项目' });
+    fireEvent.change(within(dialog).getByRole('textbox', { name: '项目名称' }), { target: { value: '秋天' } });
+    fireEvent.click(within(dialog).getByRole('button', { name: '创建项目' }));
+    await waitFor(() => expect(actions.createProject).toHaveBeenCalledTimes(3));
+    expect(actions.createProject.mock.calls[2][1]).not.toBe(initialIntent);
+    await waitFor(() => expect(screen.queryByRole('dialog')).not.toBeInTheDocument());
+  });
+
   it('ignores compact creation events while the desktop sidebar is hidden', () => {
     const { actions } = prepareProjects();
     setViewport(false);
diff --git a/tests/unit/image-workspace-store.test.ts b/tests/unit/image-workspace-store.test.ts
index f3eec307..206caeaf 100644
--- a/tests/unit/image-workspace-store.test.ts
+++ b/tests/unit/image-workspace-store.test.ts
@@ -2,6 +2,7 @@ import { beforeEach, describe, expect, it, vi } from 'vitest';
 import {
   createImageWorkspaceOperationId,
   createImageWorkspaceProject,
+  createImageWorkspaceProjectId,
   deleteImageWorkspaceProject,
   fetchImageWorkspace,
   fetchImageWorkspaceProject,
@@ -25,6 +26,7 @@ vi.mock('@/lib/image-workspace', async (importOriginal) => {
     ...original,
     createImageWorkspaceOperationId: vi.fn(),
     createImageWorkspaceProject: vi.fn(),
+    createImageWorkspaceProjectId: vi.fn(),
     deleteImageWorkspaceProject: vi.fn(),
     fetchImageWorkspace: vi.fn(),
     fetchImageWorkspaceProject: vi.fn(),
@@ -39,13 +41,28 @@ vi.mock('@/lib/host-api', async (importOriginal) => {
   return { ...original, setDesktopBackgroundLease: vi.fn() };
 });
 
+const authMock = vi.hoisted(() => ({
+  authenticated: true,
+  userId: 'account-1',
+  listeners: new Set<() => void>(),
+}));
+
 vi.mock('@/stores/auth', () => ({
   useAuthStore: {
-    getState: () => ({ isAuthenticated: () => true }),
+    getState: () => ({
+      isAuthenticated: () => authMock.authenticated,
+      authBase: 'https://auth.example.test',
+      user: { userId: authMock.userId, username: authMock.userId, tenantId: 'tenant-1' },
+    }),
+    subscribe: (listener: () => void) => {
+      authMock.listeners.add(listener);
+      return () => authMock.listeners.delete(listener);
+    },
   },
 }));
 
 const operationIdMock = vi.mocked(createImageWorkspaceOperationId);
+const projectIdMock = vi.mocked(createImageWorkspaceProjectId);
 const createProjectMock = vi.mocked(createImageWorkspaceProject);
 const deleteProjectMock = vi.mocked(deleteImageWorkspaceProject);
 const fetchBootstrapMock = vi.mocked(fetchImageWorkspace);
@@ -95,7 +112,12 @@ async function loadedStore(eventSource = new FakeEventSource()) {
 describe('V2 Living Form store', () => {
   beforeEach(() => {
     vi.clearAllMocks();
+    authMock.authenticated = true;
+    authMock.userId = 'account-1';
+    authMock.listeners.forEach((listener) => listener());
     useImageWorkspaceStore.getState().reset();
+    let creationSequence = 0;
+    projectIdMock.mockImplementation(() => `client-workspace-${++creationSequence}`);
     const workspace = designWorkspaceFixture();
     fetchBootstrapMock.mockResolvedValue(designBootstrapFixture());
     fetchProjectMock.mockResolvedValue(workspace);
@@ -1659,12 +1681,127 @@ describe('V2 Living Form store', () => {
     await useImageWorkspaceStore.getState().renameProject('workspace-1', '新名称');
     await useImageWorkspaceStore.getState().deleteProject('workspace-1');
 
-    expect(createProjectMock).toHaveBeenCalledWith('新项目');
+    expect(createProjectMock).toHaveBeenCalledWith('新项目', expect.any(String));
     expect(renameProjectMock).toHaveBeenCalledWith('workspace-1', '新名称');
     expect(deleteProjectMock).toHaveBeenCalledWith('workspace-1');
     expect(useImageWorkspaceStore.getState().activeWorkspaceId).toBeNull();
   });
 
+  it.each([
+    new ImageWorkspaceApiError(504, 'DESIGN_WORKSPACE_REQUEST_TIMEOUT', '响应超时'),
+    new Error('连接中断'),
+    new ImageWorkspaceApiError(404, 'SNAPSHOT_NOT_FOUND', '暂未读取到创建结果'),
+    new ImageWorkspaceApiError(404, 'SNAPSHOT_NOT_FOUND', '暂未读取到创建结果', 'unknown'),
+  ])('retries an unknown project creation with its original title and Workspace identity: %s', async (error) => {
+    createProjectMock.mockRejectedValueOnce(error);
+
+    await expect(useImageWorkspaceStore.getState().createProject(' 秋天 ', 'intent-1'))
+      .rejects.toBe(error);
+    expect(useImageWorkspaceStore.getState().activeWorkspaceId).toBeNull();
+    await useImageWorkspaceStore.getState().createProject('秋天', 'intent-1');
+
+    expect(createProjectMock).toHaveBeenNthCalledWith(1, '秋天', 'client-workspace-1');
+    expect(createProjectMock).toHaveBeenNthCalledWith(2, '秋天', 'client-workspace-1');
+    expect(useImageWorkspaceStore.getState().activeWorkspaceId).toBe('workspace-1');
+  });
+
+  it('does not bind a new same-name creation intent to an unknown earlier request', async () => {
+    createProjectMock.mockRejectedValueOnce(new ImageWorkspaceApiError(502, 'NETWORK_ERROR', '连接中断'));
+
+    await expect(useImageWorkspaceStore.getState().createProject('秋天', 'intent-1')).rejects.toThrow();
+    await useImageWorkspaceStore.getState().createProject('秋天', 'intent-2');
+
+    expect(createProjectMock).toHaveBeenNthCalledWith(1, '秋天', 'client-workspace-1');
+    expect(createProjectMock).toHaveBeenNthCalledWith(2, '秋天', 'client-workspace-2');
+  });
+
+  it('uses a new Workspace identity when the user changes the submitted project name', async () => {
+    createProjectMock.mockRejectedValueOnce(new ImageWorkspaceApiError(504, 'TIMEOUT', '响应超时'));
+
+    await expect(useImageWorkspaceStore.getState().createProject('秋天', 'intent-1')).rejects.toThrow();
+    await useImageWorkspaceStore.getState().createProject('冬天', 'intent-1');
+
+    expect(createProjectMock).toHaveBeenNthCalledWith(1, '秋天', 'client-workspace-1');
+    expect(createProjectMock).toHaveBeenNthCalledWith(2, '冬天', 'client-workspace-2');
+  });
+
+  it('preserves the creation identity for a same-payload retry after a definitive failure', async () => {
+    createProjectMock.mockRejectedValueOnce(new ImageWorkspaceApiError(
+      400, 'INVALID_NAME', '名称无效', 'definitive_failure',
+    ));
+
+    await expect(useImageWorkspaceStore.getState().createProject('秋天', 'intent-1')).rejects.toThrow();
+    await useImageWorkspaceStore.getState().createProject('秋天', 'intent-1');
+
+    expect(createProjectMock).toHaveBeenNthCalledWith(2, '秋天', 'client-workspace-1');
+  });
+
+  it('requires an authenticated account before creating a project', async () => {
+    authMock.authenticated = false;
+    authMock.listeners.forEach((listener) => listener());
+
+    await expect(useImageWorkspaceStore.getState().createProject('秋天', 'intent-1'))
+      .rejects.toMatchObject({ code: 'design_auth_required' });
+    expect(createProjectMock).not.toHaveBeenCalled();
+  });
+
+  it('shares one in-flight request for repeated submits without creating two projects', async () => {
+    const pending = deferred<ReturnType<typeof designWorkspaceFixture>>();
+    createProjectMock.mockReturnValueOnce(pending.promise);
+    const first = useImageWorkspaceStore.getState().createProject('秋天', 'intent-1');
+    const repeated = useImageWorkspaceStore.getState().createProject(' 秋天 ', 'intent-1');
+
+    expect(repeated).toBe(first);
+    expect(createProjectMock).toHaveBeenCalledTimes(1);
+    await expect(useImageWorkspaceStore.getState().createProject('冬天', 'intent-1'))
+      .rejects.toThrow('项目正在创建');
+    pending.resolve(designWorkspaceFixture());
+    await Promise.all([first, repeated]);
+    expect(openEventsMock).toHaveBeenCalledTimes(1);
+  });
+
+  it.each(['account-change', 'logout-login', 'reset'] as const)(
+    'does not reuse an unknown creation after %s', async (change) => {
+      createProjectMock.mockRejectedValueOnce(new ImageWorkspaceApiError(504, 'TIMEOUT', '响应超时'));
+      await expect(useImageWorkspaceStore.getState().createProject('秋天', 'intent-1')).rejects.toThrow();
+
+      if (change === 'account-change') authMock.userId = 'account-2';
+      if (change === 'logout-login') {
+        authMock.authenticated = false;
+        authMock.listeners.forEach((listener) => listener());
+        authMock.authenticated = true;
+      }
+      if (change === 'reset') useImageWorkspaceStore.getState().reset();
+      authMock.listeners.forEach((listener) => listener());
+      await useImageWorkspaceStore.getState().createProject('秋天', 'intent-1');
+
+      expect(createProjectMock).toHaveBeenNthCalledWith(2, '秋天', 'client-workspace-2');
+    },
+  );
+
+  it.each(['account-change', 'logout-login', 'reset'] as const)(
+    'does not install an old creation response after %s', async (change) => {
+      const pending = deferred<ReturnType<typeof designWorkspaceFixture>>();
+      createProjectMock.mockReturnValueOnce(pending.promise);
+      const first = useImageWorkspaceStore.getState().createProject('秋天', 'intent-1');
+      const rejected = expect(first).rejects.toMatchObject({ code: 'design_creation_session_changed' });
+
+      if (change === 'account-change') authMock.userId = 'account-2';
+      if (change === 'logout-login') {
+        authMock.authenticated = false;
+        authMock.listeners.forEach((listener) => listener());
+        authMock.authenticated = true;
+      }
+      if (change === 'reset') useImageWorkspaceStore.getState().reset();
+      authMock.listeners.forEach((listener) => listener());
+      pending.resolve(designWorkspaceFixture());
+      await rejected;
+
+      expect(useImageWorkspaceStore.getState().activeWorkspaceId).toBeNull();
+      expect(openEventsMock).not.toHaveBeenCalled();
+    },
+  );
+
   it('renames a background Workspace without changing the active Workspace', async () => {
     await loadedStore();
     const backgroundSummary = designSummaryFixture({

From b5f31c125949ea32f28c2ebac314fa039e7aa82e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 14:46:31 +0800
Subject: [PATCH 07/18] fix: improve Coding sidebar text and remove gallery
 footer

---
 .../20261014-coding-sidebar-text-9fe4278d.md  | 22 ++++++++++---
 README.md                                     |  6 ++--
 src/components/layout/Sidebar.tsx             |  2 +-
 src/pages/Chat/CodingProjectConversations.tsx |  4 +--
 src/pages/Chat/classroom-workspace.css        | 11 ++++---
 tests/e2e/main-navigation.spec.ts             | 32 +++++++------------
 tests/e2e/pi-coding-first-chat.spec.ts        |  4 +--
 tests/unit/sidebar-project-actions.test.tsx   | 31 +++++++++++++++---
 8 files changed, 72 insertions(+), 40 deletions(-)

diff --git a/.project-docs/30-worklog/tasks/20261014-coding-sidebar-text-9fe4278d.md b/.project-docs/30-worklog/tasks/20261014-coding-sidebar-text-9fe4278d.md
index 6cc31f1a..ee808982 100644
--- a/.project-docs/30-worklog/tasks/20261014-coding-sidebar-text-9fe4278d.md
+++ b/.project-docs/30-worklog/tasks/20261014-coding-sidebar-text-9fe4278d.md
@@ -12,18 +12,18 @@
 
 ## Scope
 
-- Read-only comparison of Coding sidebar text with Agents and Canvas, then propose a clearer text hierarchy. Implementation requires the user's later approval.
+- Implement the approved Coding sidebar text hierarchy and remove only its bottom Works Square button. Preserve Canvas/Agents navigation and the separate Code welcome gallery entry.
 
 ## Intent And Constraints
 
-- User explicitly asks for a proposal first and forbids beginning product changes before approval. Preserve desktop focus, running trial, inputs, projects and conversations. No product edits, runtime update, model calls, merge/push or cleanup.
+- User explicitly approved the preceding proposal and additionally requested deletion of the Coding sidebar's bottom Works Square button. This supersedes the earlier source-edit hold and the former footer-placement direction only. Preserve desktop focus, running trial, inputs, projects/conversations, background tasks and other modules; no model calls, cloud writes, merge/push or cleanup.
 
 ## Outcome
 
 - All three modules share the same bundled Inter/Source Han sans font stack. Agents main navigation and Canvas project entries use14px/600 dark text for normal clickable items; selected/hover states are differentiated primarily by background.
 - Coding project/create/gallery entries already use14px/600 dark navy. Its conversation titles and new-conversation action are12px/400 auxiliary blue-gray#64758a, with icons#7891af. The group header uses the same auxiliary gray. These styles explain the screenshot's weaker conversation-list hierarchy; no font replacement is needed.
 - Proposed Coding-only scope: conversation titles and new-conversation action14px/500/#26384d; group heading and collapse action#506176 while remaining a secondary hierarchy; conversation icons one shade darker. Retain existing14px/600 project entries, pale-blue surface, icon tiles, selected/hover backgrounds, layout and interactions. Scope any adjustment to Coding rather than changing global/shared Canvas tokens.
-- No product code or running application was changed. Proposal is complete; implementation remains awaiting human approval.
+- The initial proposal changed no product/application state. User subsequently approved implementation; the completed source-only result is recorded below. Running application remains unchanged.
 
 ## Verification
 
@@ -33,7 +33,7 @@
 
 ## Follow-ups
 
-- On approval, resume the same task and recheck the newest actual source/peer sidebar changes before applying the bounded Coding-only adjustment. Verify normal/selected/hover/disabled typography and layout in headless browser checks, then perform only separately authorized trial delivery.
+- Source is ready for a requested trial update/integration. Before delivery, recheck the actual runtime/source and peer changes, preserve all intervening features and guard account/input/running work/focus. No live delivery, merge/push or worktree cleanup was performed in this implementation turn.
 
 ## Promotion Candidates
 
@@ -46,3 +46,17 @@
 - Official registry had78 owners including this task. Independent coordination review read77 peer records/231Scope, Intent and Promotion sections. All readable; Code-model-onboarding01e8cbed and old child-language6bf94d12 retain unknown placeholder scopes without a concrete dependency. No semantic blocker affects this read-only proposal.
 - Adjacent Code gallery/footer tasks retain palette/layout; wide Code redesigne4132a1e was explicitly withdrawn and is not reused. Canvas's later a72d49e6 task changes its surface to pale yellow, superseding the older lavender state; no Canvas background proposal is made here. Source comparison uses the declared actual trial436f7ba snapshot and adopts no peer uncommitted product.
 - Likely approved-edit paths would be CodingProjectConversations.tsx and Coding-scoped selectors in classroom-workspace.css. No shared global color/font change or backend/API alteration is justified. Planning Gate: Passed.
+
+## Approved Implementation Resume
+
+- Official check/start/status resumed the exact same feature ownership, branch/worktree/base; registry now planning. Current trial source remains436f7ba, identical to the proposal baseline; all product files are clean. Prior project/design/context is reused. The78-owner registry is unchanged;77 peer scope sets were reviewed in the preceding turn, and the relevant sidebar/gallery/Canvas scopes were reread on resume. No semantic conflict: this explicit user instruction supersedes prior Code footer retention. Canvas's separate footer stays.
+- Planning Gate: Passed. Plan: isolate Code-only normal/selected/hover/disabled text rules; remove the Code footer via the shared Sidebar module condition; update existing navigation/layout regression assertions and README; run focused tests/typecheck/scoped lint/production build and headless geometry checks. Commit the bounded source and record actual verification. A live delivery, if undertaken as part of this temporary-app workflow, must bind the then-current actual source and preserve account/input/running work/focus without an unsafe refresh.
+
+## Completed Approved Source Changes
+
+- CodingProjectConversations uses14px/500 for new-conversation and normal conversation titles. Code-scoped classroom CSS promotes actions/normal titles to#26384d, group headings and conversation icons to#506176. Existing selected text#304f75, background/border treatments, project14px/600, font stack, action handlers and conversation identity remain. Disabled new-conversation action keeps reduced opacity and no enabled hover background.
+- Shared Sidebar renders the bottom community footer for Canvas only. Code chat/settings/plugin workbars no longer contain that bottom Works Square button; the separate Code welcome entry and legacy nonworkspace upper entry remain. A Code-only account-footer padding/border rule preserves the former adjacent-footer reset after removal, without changing Canvas/Agents styling or shifting the account button.
+- Updated README and existing navigation/first-chat E2E assertions for removed footer, preserved welcome link and approved typography. Focused Sidebar regressions cover Code footer absence/account presence, Canvas footer retention and the legacy upper entry. Independent source review found no runtime defect or cross-module style leakage; a remaining README footer statement was corrected before completion.
+-23/23 related tests across Sidebar project actions, Image Workspace Sidebar and Main-layout peek passed; the peer's5Sidebar tests are included in23, not extra distinct coverage. Typecheck, changed TS/TSX/spec ESLint, diff and production Vite/Main/Preload/utility build passed. CSS is outside ESLint's configured matching files; browser checks provide its verification. The intermediate log redirection failed because the ignored stage directory was not yet present; directory creation and the final build completed successfully.
+- Headless QA passed viewport640/1366 × sidebar256/320, with six Code normal/selected/hover/disabled states and Canvas/Agents baseline comparisons (12 module layout combinations, each with baseline/current evidence). Real CodingProjectConversations, AccountMenuTrigger and CommunityLink React SSR use synthetic stores; Sidebar project/Agents markup reproduces real classes/data attributes. Source CSS/bundled fonts are used; no actual app/user data/network access. Long titles truncate correctly; no overflow. Code account button geometry is exactly unchanged, Canvas/Agents computed styles and geometry match436f7ba baseline. Source CSS SHA2561580c7062a3434c1805787efa3270dbb82d9be1546cfd8518abe8a9bae878ddd. Root viewed code-1366-256.png; peer reviewed compact Code and Canvas/Agents PNGs. Evidence: /Users/chillishark/Makelore 麦洛/.trial-runtime/coding-sidebar-text-20261014-9fe4278d/qa/geometry.json.
+- Native visible Electron E2E was not launched to preserve desktop focus; updated specs remain future full-native coverage, while the focused units/headless geometry verify this bounded UI change. Runtime Main/Renderer, login, real projects/conversations/inputs and services were not touched. Implementation source is complete; no temporary-app update, main merge/push or cleanup is claimed.
diff --git a/README.md b/README.md
index 02b1e42a..4d740363 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@ Code 会话保存的模型被下架后，会提示重新选择可用模型；用
 Makelore 是一个面向软件、视觉创作、智能机器人与个人云智能体的 AI 桌面工作台。当前版本为 `2.0.0`，首页展示 Agents、Code、Canvas 三个模块入口，Robot 入口隐藏；云智能体需配套配置 WS/Yuxi 服务。桌面采用左侧问候与标题、右侧三个横向插画卡片竖排的布局，Code 入口中心与“今天，想创作什么？”标题中心对齐，三个入口等高、间距均匀；标题组在桌面向右偏移约 1.5cm，小窗口将标题放在卡片上方；Agents 标语为“打造你想象中的AI助手”。各页左下角账户按钮统一沿用 Code 的白色圆角卡片、头像、字号和右箭头，展开时跟随 Code 侧栏宽度偏好，首页和设置页与 Code 保持相同的左侧与底部边距；展开菜单保持原尺寸，可查看本人词元点数与预占、打开词元点数与充值、个人资料、设置和退出登录；沿用侧栏的账号、钱包和资料规则。设置使用独立页面，不显示编程项目栏、项目标题或工作栏收起按钮；“返回”回到打开设置前的页面（保留查询参数），直接打开设置时回模块首页，未保存设置先保存或还原。每次从首页进入 Code、Agents 或 Canvas 时，默认展开左侧工作栏；进入后沿用各模块现有的手动收起与紧凑布局规则。工作区左上角入口点击后返回模块入口页：
 
 - `Makelore Code｜AI 编程`：管理本地项目、项目智能体、对话、文件上下文、代码变更和运行时。
-  会话工作台采用浅蓝项目栏，侧栏入口与项目列表采用 Agent 式的彩色图标徽章＋文字，选中项目保留浅色反馈；中间对话/作品使用圆角标签，作品预览的后退、前进、刷新与网址输入统一放在标签右侧；只在作品页显示，窄窗口自动换行。右侧智能体咨询使用奶油色标题区。沿用真实项目和会话入口、侧栏伸缩与账户菜单，样式只作用于 Code 会话工作台。可编辑的空对话在输入区上方的可用区域中央显示童趣欢迎语；欢迎区的麦洛标识、星装饰和「作品广场」组成同一个可鼠标或键盘操作的广场入口，保留原有主标题与说明，输入框上方不再显示两句广场邀请。老师介绍以固定宽度浮在右上角，不占用中间布局；欢迎语和底部输入区始终相对项目栏右侧的整个内容区域居中；小窗口的欢迎内容独立滚动；发送首条消息后收起欢迎区。侧栏的「作品广场」固定在底部、紧邻账户按钮上方，保持与上方入口相同的横向对齐；只有点击后才在系统浏览器打开公共广场，不请求、摘取或内嵌展示广场作品。打开广场保留当前项目、对话、草稿和附件，不自动发送消息；老师求助按钮保留临时应用的最新文案「帮我整体看🧠」。
+  会话工作台采用浅蓝项目栏，侧栏入口与项目列表采用 Agent 式的彩色图标徽章＋文字，选中项目保留浅色反馈；中间对话/作品使用圆角标签，作品预览的后退、前进、刷新与网址输入统一放在标签右侧；只在作品页显示，窄窗口自动换行。右侧智能体咨询使用奶油色标题区。沿用真实项目和会话入口、侧栏伸缩与账户菜单，样式只作用于 Code 会话工作台。可编辑的空对话在输入区上方的可用区域中央显示童趣欢迎语；欢迎区的麦洛标识、星装饰和「作品广场」组成同一个可鼠标或键盘操作的广场入口，保留原有主标题与说明，输入框上方不再显示两句广场邀请。老师介绍以固定宽度浮在右上角，不占用中间布局；欢迎语和底部输入区始终相对项目栏右侧的整个内容区域居中；小窗口的欢迎内容独立滚动；发送首条消息后收起欢迎区。Code 侧栏底部的「作品广场」入口已移除，欢迎区的广场入口保留；只有点击后才在系统浏览器打开公共广场，不请求、摘取或内嵌展示广场作品。打开广场保留当前项目、对话、草稿和附件，不自动发送消息；老师求助按钮保留临时应用的最新文案「帮我整体看🧠」。
 - `Makelore Agents｜AI 智能体`：从模块首页进入时先打开“我的智能体”卡片列表，保留此前对话与操作恢复记录；返回首页箭头与侧栏折叠按钮同排，折叠后仍可返回；智能体模块的侧栏只通过按钮点击或键盘激活展开，鼠标经过左侧、收纳按钮或顶栏不会展开，切换模块不沿用旧悬停预览；其他模块仍保留原预览方式。“我的智能体”使用浅紫对话机器人图标，“渠道”使用浅蓝连接节点图标。macOS 原生窗口按钮留出安全空间。首页围绕自己的智能体和创建入口，显示童趣问候“Hi，今天想创造还是想聊聊？”，不再显示更多、收到的分享、活动或归档筛选。卡片恢复原有尺寸与留白，显示名称、可为空的一句话介绍及状态，支持聊天、调整、继续制作和确认删除；删除沿用云端归档机制，移出列表并停用新调用，历史和费用保留。创建先填写名称并选择平台像素头像或上传头像，下一步进入独立配置。顶部名称有编辑图标，头像可点击修改；未设置头像时使用同一张默认像素头像，从创建到配置、改名、保存和重新打开保持一致。基础页为“介绍与提示词”，一句话介绍可留空，完整提示词保留原始文本；模型作为高级设置第一项必选，未选择时不能开始使用，草稿可分步保存，不自动选模型。介绍与提示词采用浅蓝介绍卡和浅紫提示词卡；高级设置按模型、TOOL、SKILL、MCP 服务和知识库纵向呈现，资源选择按钮分别显示「选择TOOL」「选择SKILL」；移除子智能体选择模块，保存其他配置时保留历史子智能体绑定，不再设内部分类切换；不展示 Tool/Skill 解释、资源开放规则提示、云端能力管理、费用上限或运行限制卡片，保存其他配置时保留既有运行限制，费用规则不变。顶层页签切换保留搜索、资源选择、知识表单及未保存输入。配置页移除聊天、自动任务和使用与接入导航，独立聊天仍从卡片进入，微信账号仍在侧栏渠道管理。草稿明确保存（Ctrl/⌘+S）；保存只更新草稿，“应用最新修改”使新配置生效，失败重试保持原操作身份；点击“开始使用”完成必要的私有启用后直接打开聊天，不再展示二次确认页；未保存修改、缺少模型、冲突或尚未确认的请求会留在配置页处理，打开聊天不自动发送消息。独立对话沿用奶油底色和浅蓝、浅紫、薄荷色：顶部展示返回、只读头像和名称；有附件时在同一行右侧显示回形针“附件”入口和文件数量，不展示调整、保存／应用状态、客户端／微信来源、费用／版本说明或历史／新对话图标；配置由列表卡片的“调整”进入。空对话展示当前智能体头像与名称，示例只填入草稿；用户消息使用浅紫圆角气泡，助手 Markdown、表格和代码在消息区内滚动。文件或图片从输入框内添加，上传成功后以待发送卡片呈现，可移除本次携带；移除不会删除云端文件，添加不会自动发送。确认失败沿用同一文件和对话重试，发送前需完成或取消添加；支持仅发送附件，使用明确的附件提问。输入框沿用 Code 的浅蓝边框、圆形按钮及一至六行输入规则；Enter 发送、Shift+Enter 换行，保留中文输入法确认。麦克风复用应用级语音输入，识别只追加当前草稿，不自动发送；切换账号、对话或隐藏页面后丢弃过期识别。支持拖入文件、粘贴图片和多文件选择，上传与确认仍由 Main 持有认证并转发；失败重试保留同一批文件身份。输入框的“＋”添加文件或图片；右上角“附件”打开右侧面板，按“你上传的”和“助手生成的”分组，支持再次选用已上传附件及保存明确交付的生成文件。生成文件仅取当前对话已保存助手回复中的本地文件链接（含图片与引用式链接），核对实际文件后展示和计数；只读取链接所在的文件夹，不遍历全部工作文件。未交付的脚本、缓存和工具记录不展示、不计数，明确交付的代码照常展示；仅写了路径的旧成果可能暂时隐藏，后续接入 Yuxi 的正式交付记录。没有文件时隐藏入口；打开、关闭面板保留聊天与输入，Escape 关闭并返回入口焦点；最近对话自动恢复、审批、停止和未发送内容的离开保护保留。模型返回的思考按消息独立于正文展示；正文到来后或完成时折叠，可手动展开；无思考或工具内容时不显示过程区。重连事件去重并隔离当前运行与主对话，终态历史未到达时保留已收到的片段并有限补读；服务端返回的最终回答思考可在历史中回看，不进入后续提问。历史回看需要配套 Yuxi API 的思考和工具记录投影；实时过程沿用既有事件流。平台工具和内置做事手册使用 Yuxi 下发的通俗名称与说明；逐条消息的思考、工具输入／结果／失败独立于 Markdown 正文，实时与历史工具卡片共用展示文案，展开可查看原始工具标识。个人上传手册保留作者文案，资源选择仍保存原始标识。头像上传、Main-owned Host API、访问隔离、费用与不可变版本规则保持；介绍留空需要配套 Yuxi DraftCreate/DraftSave 的空字符串契约。
 
   个人智能体聊天在每条提问与回答下方显示云端记录的消息时间；发送时间位于紫色消息气泡外下方并靠右，助手回复时间保持在回答下方：今天显示时分，跨日增加日期，悬停可查看完整日期与秒数；发送时间与回复时间沿用原消息记录，重开对话不改为当前时间。流式回答尚无可靠时间时显示「回复中…」，历史到达后展示原时间；缺失或无效时间显示「时间未记录」。正式对话、草稿试用和上次试用对比使用相同规则，不新增 Yuxi 接口。
@@ -41,7 +41,7 @@ Makelore 是一个面向软件、视觉创作、智能机器人与个人云智
 - macOS 窗口按钮：红色关闭当前窗口，全屏时先退出全屏再关闭；黄色最小化，绿色保留原生缩放/全屏行为。关窗后应用和进行中的后台任务继续运行，点击 Dock、托盘或菜单可重新打开窗口；`Cmd+Q` 退出应用。
 - 桌面文本右键菜单：主 Renderer 窗口由 Electron Main 提供原生“剪切、复制、粘贴、全选”操作；菜单只在可编辑区域或已有文本选择时出现，普通空白区域不显示，也不向 Renderer 暴露剪贴板 IPC。
 - AI 编程核心对话运行时：Electron Main 按需启动一个长驻 Pi Agent Server，同一进程内为每条 Conversation 建立独立的 Runtime、Session、凭证视图、扩展上下文和 JSONL 通道，同时复用 Pi 模块与进程启动成本；Server 异常退出时所有旧通道统一失效，下一次恢复只重启一个 Server。正式包中的 Agent Server 从明确传入的 `resources/pi-runtime` 根定位依赖清单与包入口，不从脚本所在目录或应用 `node_modules` 猜测解析。Renderer 不直接启动或调用 Pi，也不读取其 wire 类型。项目与 Conversation 元数据先从本地读取，选中对话后才按需准备对应逻辑线程；输入框不等待运行时准备完成。同一助手工具批次中，会取得项目写租约的 `bash`、`edit`、`write` 与动态产品工具按顺序执行，避免批次在命令启动前自锁；纯只读工具仍可并行。子 Agent 仍使用独立的短生命周期进程，以保留并发配额、故障和写入边界；macOS 上两类后台进程都使用 Electron 自带的 Helper，不在 Dock 中创建额外应用图标。
-- AI 编程默认入口：进入 Code 后保持在 `/chat`。顶部返回箭头与侧栏收起图标同排，与右侧项目/会话名称对齐；折叠时保留返回和展开入口。macOS 为原生窗口按钮保留安全空间，窄侧栏仍可使用。左侧不再展示麦洛品牌与说明语，“新建项目”置于原品牌区，“我的项目”与列表上移到原新建项目区域；“作品广场”与“新建项目”沿用 Agent 的彩色图标徽章＋文字样式，不再使用整行白色块与厚阴影，“作品广场”移至底部、紧邻账户按钮上方；“我的项目”和项目列表紧接新建项目，列表沿用图标与文字布局及浅色选中反馈；从项目菜单进入的配置页及插件资源页复用相同的左侧工作栏，返回与收起按钮、项目和会话列表、底部作品广场与账户的位置保持一致，并沿用当前宽度和收起状态；配置正文、顶部项目名称与配置页自身的返回操作保留。尚未选择本地项目时，页面以麦洛 M 标识和居中引导语建立焦点，下方提供独立的“新增项目”主操作以及可横向浏览、直接进入的已有项目卡片；项目创建和进入仍复用侧栏现有流程。已有项目的新 Conversation 在可编辑 Composer 上方沿用同一品牌引导，第一条消息出现后切换为正常时间线。
+- AI 编程默认入口：进入 Code 后保持在 `/chat`。顶部返回箭头与侧栏收起图标同排，与右侧项目/会话名称对齐；折叠时保留返回和展开入口。macOS 为原生窗口按钮保留安全空间，窄侧栏仍可使用。左侧不再展示麦洛品牌与说明语，“新建项目”置于原品牌区，“我的项目”与列表上移到原新建项目区域；“新建项目”沿用 Agent 的彩色图标徽章＋文字样式，不再使用整行白色块与厚阴影；Code 工作栏底部不显示“作品广场”，欢迎页的独立入口保留；“我的项目”和项目列表紧接新建项目，列表沿用图标与文字布局及浅色选中反馈；从项目菜单进入的配置页及插件资源页复用相同的左侧工作栏，返回与收起按钮、项目和会话列表、底部账户的位置保持一致，并沿用当前宽度和收起状态；配置正文、顶部项目名称与配置页自身的返回操作保留。尚未选择本地项目时，页面以麦洛 M 标识和居中引导语建立焦点，下方提供独立的“新增项目”主操作以及可横向浏览、直接进入的已有项目卡片；项目创建和进入仍复用侧栏现有流程。已有项目的新 Conversation 在可编辑 Composer 上方沿用同一品牌引导，第一条消息出现后切换为正常时间线。
 - AI 编程历史与配额反馈：Pi 上下文压缩不删除用户可见的 active-branch 历史，压缩摘要保持 Main-private；Renderer 首次渲染最近 120 个节点，向上滚动时按 100 个节点追加更早内容并保持阅读位置。Main 精确识别 `token_point_balance_exhausted` / `词元点数余额不足`，只向 Renderer 投影不可重试的稳定配额错误和安全中文提示，重开会话后仍可见且不暴露上游原始错误或 request id。
 - 账号词元点数：左下角账户菜单显示本人永久余额和预占；“词元点数与充值”入口暂时隐藏，充值、充值订单与分页收支记录的既有实现保留。真正新注册赠送 100 点，1 元充值 50 点，永久有效；旧账户不补送，旧会员/订阅/周额度/重置卡入口已移除。家长为孩子充值时登录孩子的账号，页面显示当前昵称和账号，点数进入该账号自己的钱包；无需将孩子身份改为家长。当前有效账号可给本人充值，青少年可查看自己的精确余额；使用他人共享钱包时仅显示可用状态，不显示付款人的余额或记录。Main 持有凭据并转发充值请求；付款结果未知时沿用原请求并核查原订单，只有服务端确认才显示到账。扫码信息缺失时可到网页账户页继续原订单，付款来源也由网页账户页管理，充值不会自动切换共享/个人来源。需配套部署 Works Square 当前账号充值资格更新（本次无需新迁移，原永久点数基础为 0094）；本地模拟验收不代表真实支付通过。
 - 桌面性能策略：应用窗口使用不透明浅色表面并默认保留硬件合成；仅在显式安全模式或短时间内重复 GPU 进程崩溃时启用软件渲染，并把故障原因保存在用户数据目录。启动关键路径只创建本地应用壳，认证、代理、同步、更新和遥测在首帧后延迟初始化；开发版可通过 `app:performance` 快照观察 GPU、进程、WebContents、事件循环与 Renderer Long Task 聚合指标。
@@ -161,7 +161,7 @@ Pi 正式包必须继续运行 `pnpm run verify:artifact:pi`、`pnpm run smoke:p
 - 项目设置仅提供默认编程配置的模型选择，不展示项目提示词或项目 Skills 编辑入口；知识文件与插件仍在各自入口管理。默认模型只影响新对话，现有对话独立切换模型与思考选项，已有消息记录不会被改写；保存模型配置保留原有 Agent 元数据。
 - 项目智能体只保存自身的精确默认模型；未完成模型选择的智能体保持待配置状态，不从项目级 `defaultModel` 或运行时私有配置回退。
 - 一个智能体可以拥有多条互相独立的 Pi Session；智能体和对话元数据分别由 `.makelore/project.json` 与 `.makelore/conversations.json` 保存，稳定的智能体与对话 id 保持本地历史连续。
-- 会话列表直接挂在左侧项目下，不展示中间智能体列；同一项目内不同历史智能体的会话统一列出，支持删除、改名、未读与运行状态。快速切换项目和会话时，迟到的请求与回复保持原归属。
+- 会话列表直接挂在左侧项目下，不展示中间智能体列；“新对话”和对话名称使用 14px 中等字重的深蓝灰，分组标题与对话图标使用较深的辅助灰，选中与悬停沿用浅色背景；同一项目内不同历史智能体的会话统一列出，支持删除、改名、未读与运行状态。快速切换项目和会话时，迟到的请求与回复保持原归属。
 - Conversation 历史按需从 Main-owned Snapshot 读取。Session hydration 沿完整 active branch 投影可见历史；公开 SSE 交付 Snapshot、会话元数据变更通知，以及按 Conversation、worker generation 分组的 `patch-batch`。Renderer 整批校验连续 seq 后在一次状态事务中顺序应用，缺口或畸形批次只恢复目标 Conversation，隐藏 Conversation 的流式更新不会提交选中时间线。Main 发出 `lifecycle:sleep` 时页面关闭旧事件流；视图挂载、项目上下文变化、窗口重新可见或获得焦点时，已选 Conversation 会静默重读权威 Snapshot，从而收敛后台已结束的任务，但绝不重放已接受或状态不确定的 mutation。时间线默认挂载最近 120 个节点，接近顶部时按 100 个节点自动追加更早内容并补偿新增高度，保持当前阅读锚点。
 - 核心时间线按每条用户消息组织为“用户消息、连续处理过程、结论回复”。Pi 的流式 thinking、工具、压缩、重试、通知和 `subagent.v1` 单个/并行/串行子任务共享一条轻量过程轨道；运行时显示“处理中”和活动指示，完成后按耗时（历史缺少计时时按项目数）收纳为可展开的“已处理”摘要。文字层级按结构化事件类型划分，不按文案关键词猜测：助手在工具调用前后直接对用户说的过程正文与最终结论都使用黑色；thinking、工具输入输出、压缩、子任务和运行状态使用浅灰辅助文字，仍在运行的灰色缩略文字带有低对比度 Shimmer 擦拭高光，结束后停止动画；错误状态保持红色。折叠的 thinking、助手过程正文和工具输出固定展示第一个可见块的首个非空行，横向偏移始终为零；尾部流式更新不会替换未变化的首行预览，展开后仍可查看完整内容。两类流式文字均在原位更新且不做位移动画，助手过程正文也不使用 Shimmer。工具调用用一行摘要持续展示工具名称、最新输入或输出和运行状态，并可按流式批次轻量整行轮动。思考、助手过程正文和工具节点均可展开查看完整详情，工具的累计输出和浏览器附件留在对应的二级展开区而不形成独立气泡。结论回复按安全 Markdown 排版标题、列表、引用、代码和表格；可点击的 HTTP/HTTPS 与本地 HTML 链接统一使用无底色的橙色文字。左键通过 Main-owned 系统入口交给默认浏览器打开；右键可打开系统菜单，网页链接可复制地址，本地链接还可在访达或系统文件夹中显示。同一回复已经给出完整 HTML 路径时，对应的相对查看路径也会解析到该文件。内部 `turn-start`/`turn-end` 只维持事件顺序、不呈现在界面。
 - Composer 使用贴底的复合输入面板，支持文字、登录后的语音转写，以及粘贴或选择 PNG/JPEG/WebP/GIF 图片；每条消息最多 16 张图片、最多并行上传 4 张。语音录制通过现有 Main-owned Works Speech Host API 转成文字，并在项目或账号切换时立即停止；当前对话的模型与思考强度组合入口、语音及发送/中止入口保留在底部控制行，模型入口默认使用透明底色。模型与思考强度通过向上展开的分级菜单切换，只列出当前 Provider 或 Makelore 已验证模型档案实际支持的选项；Qwen3.6 Plus 使用混合思考开关，Qwen3.8 Max 暴露低/中/高三档并把产品“高”映射到服务端 `xhigh`。模型仅报告 `off` 时明确显示“不可调”，不伪造未知模型的推理档位。切换完成后静默刷新当前 Snapshot，只有真正恢复 worker 时才显示本地 Agent 重连提示。重复读取 Snapshot 不发布无变化的 worker 状态；Snapshot 与 SSE 批次竞态时，Renderer 会丢弃已覆盖事件并只应用连续的新尾部，避免形成伪重连循环。上下文接近模型限制或发生溢出时由 Pi 自动整理，Composer 不提供手动整理入口；自动整理的进度和结果仍显示在对话过程轨道中。图片在发送前只保留本地预览，点击发送时才经 Main-owned 有界二进制接口上传一次；Main 在落盘前核对 MIME 与最小图片签名，状态与事件只保存 attachment id，时间线按需读取二进制并创建临时 object URL，不保存重复 base64。发送后立即展示图片附件；Pi 实时消息与历史会话恢复都将图片映射到同一附件存储，重复加载复用已有文件。智能体报告 `changed-file.v1` 后，输入框上方会展示当前轮次的文件数与增删行统计，并可展开查看 Main-owned 变更快照中的逐文件差异。
diff --git a/src/components/layout/Sidebar.tsx b/src/components/layout/Sidebar.tsx
index 39b059fa..4fa99834 100644
--- a/src/components/layout/Sidebar.tsx
+++ b/src/components/layout/Sidebar.tsx
@@ -874,7 +874,7 @@ export function Sidebar({
         onOpenChange={setProfileDialogOpen}
       />
 
-      {((workspaceLayout && isProgrammingModule) || isPaintingModule) && (
+      {isPaintingModule && (
         <div className="classroom-community-footer">
           <CommunityLink variant="sidebar" collapsed={sidebarCollapsed} />
         </div>
diff --git a/src/pages/Chat/CodingProjectConversations.tsx b/src/pages/Chat/CodingProjectConversations.tsx
index 38b1a152..d312c2e2 100644
--- a/src/pages/Chat/CodingProjectConversations.tsx
+++ b/src/pages/Chat/CodingProjectConversations.tsx
@@ -73,7 +73,7 @@ export function CodingProjectConversations({
           aria-label="新建对话"
           title="新建对话"
           disabled={!!busy}
-          className={`flex shrink-0 items-center gap-1.5 rounded py-2 pr-2 text-xs hover:bg-surface-tertiary ${compact ? "pl-0" : "pl-2"}`}
+          className={`flex shrink-0 items-center gap-1.5 rounded py-2 pr-2 text-sm font-medium hover:bg-surface-tertiary ${compact ? "pl-0" : "pl-2"}`}
           onClick={() =>
             void act('new', async () => {
               const workspace = codingWorkspaceStore.getState();
@@ -103,7 +103,7 @@ export function CodingProjectConversations({
               className={`classroom-conversation-row group/session flex items-center rounded-lg ${selected === item.id ? 'bg-[#e7e9e1]' : 'hover:bg-surface-tertiary'}`}
             >
               <button
-                className="flex min-w-0 flex-1 items-center gap-1.5 px-2 py-2 text-left text-xs"
+                className="flex min-w-0 flex-1 items-center gap-1.5 px-2 py-2 text-left text-sm font-medium"
                 aria-label={item.title}
                 title={item.title}
                 aria-current={selected === item.id ? 'page' : undefined}
diff --git a/src/pages/Chat/classroom-workspace.css b/src/pages/Chat/classroom-workspace.css
index b03e6de0..b7dc31eb 100644
--- a/src/pages/Chat/classroom-workspace.css
+++ b/src/pages/Chat/classroom-workspace.css
@@ -26,6 +26,7 @@
 .classroom-create-project-icon svg { width: 20px; height: 20px; }
 [data-testid="sidebar"]:is([data-classroom="true"], [data-workspace-sidebar="canvas"]) .classroom-projects { margin-top: 8px; }
 [data-testid="sidebar"]:is([data-classroom="true"], [data-workspace-sidebar="canvas"]) .classroom-projects-heading { padding: 6px 3px; color: #64758a; }
+[data-testid="sidebar"][data-classroom="true"] .classroom-projects-heading { color: #506176; }
 [data-testid="sidebar"]:is([data-classroom="true"], [data-workspace-sidebar="canvas"]) .classroom-projects-heading > svg { display: none; }
 [data-testid="sidebar"]:is([data-classroom="true"], [data-workspace-sidebar="canvas"]) .classroom-project-card { min-height: 48px; gap: 8px; padding: 8px 40px 8px 8px; border: 0; border-radius: 8px; box-shadow: none; }
 [data-testid="sidebar"]:is([data-classroom="true"], [data-workspace-sidebar="canvas"]) .classroom-project-card:hover { background: #eaf1f8; }
@@ -36,15 +37,17 @@
 .classroom-project-icon[data-tone="green"] { border-color: #cfe3c6; background: #e1f1d9; color: #507d39; }
 .classroom-project-icon[data-tone="blue"] { border-color: #cddfec; background: #deedfb; color: #3a6d9d; }
 [data-testid="sidebar"][data-classroom="true"] [data-testid="project-conversations"] { padding: 8px 0 4px; font-size: 13px; }
-[data-testid="sidebar"][data-classroom="true"] .classroom-conversation-actions { gap: 2px; margin-bottom: 4px; color: #64758a; }
+[data-testid="sidebar"][data-classroom="true"] .classroom-conversation-actions { gap: 2px; margin-bottom: 4px; color: #26384d; }
 [data-testid="sidebar"][data-classroom="true"] .classroom-conversation-actions button { min-height: 32px; min-width: 30px; border-radius: 8px; }
-[data-testid="sidebar"][data-classroom="true"] .classroom-conversation-actions button:hover { background: #e5edf6; color: #36557b; }
-[data-testid="sidebar"][data-classroom="true"] .classroom-conversation-row { margin: 3px 0; border: 1px solid transparent; border-radius: 10px; color: #64758a; }
+[data-testid="sidebar"][data-classroom="true"] .classroom-conversation-actions button:hover:not(:disabled) { background: #e5edf6; color: #36557b; }
+[data-testid="sidebar"][data-classroom="true"] .classroom-conversation-actions button:disabled { background: transparent; opacity: .5; cursor: not-allowed; }
+[data-testid="sidebar"][data-classroom="true"] .classroom-conversation-row { margin: 3px 0; border: 1px solid transparent; border-radius: 10px; color: #26384d; }
 [data-testid="sidebar"][data-classroom="true"] .classroom-conversation-row:hover { background: #eaf1f8; }
 [data-testid="sidebar"][data-classroom="true"] .classroom-conversation-row[data-selected="true"] { background: #e0ecfa; border-color: #cedef0; color: #304f75; }
 [data-testid="sidebar"][data-classroom="true"] .classroom-conversation-row > button:first-child { min-height: 35px; gap: 7px; }
-[data-testid="sidebar"][data-classroom="true"] .classroom-conversation-row > button:first-child > svg { color: #7891af; }
+[data-testid="sidebar"][data-classroom="true"] .classroom-conversation-row > button:first-child > svg { color: #506176; }
 [data-testid="sidebar"]:is([data-classroom="true"], [data-workspace-sidebar="canvas"]) .classroom-account-footer { border-top: 1px solid #dde5ee; background: var(--workspace-sidebar-background, #edf3f9); }
+[data-testid="sidebar"][data-classroom="true"] .classroom-account-footer { padding-top: 0; border-top: 0; }
 [data-testid="sidebar"][data-workspace-sidebar="canvas"] { --workspace-sidebar-background: #f5f2fa; }
 [data-testid="sidebar"][data-workspace-sidebar="canvas"] .classroom-sidebar-header { padding: 0; }
 [data-testid="sidebar"][data-workspace-sidebar="canvas"] .classroom-sidebar-content { display: flex; flex-direction: column; overflow: hidden; }
diff --git a/tests/e2e/main-navigation.spec.ts b/tests/e2e/main-navigation.spec.ts
index 7362e13f..e293c693 100644
--- a/tests/e2e/main-navigation.spec.ts
+++ b/tests/e2e/main-navigation.spec.ts
@@ -421,27 +421,20 @@ test.describe('Makelore module navigation without setup flow', () => {
       expect(returnBox!.x + returnBox!.width).toBeLessThanOrEqual(collapseBox!.x);
       expect(sidebarBox!.x + sidebarBox!.width - collapseBox!.x - collapseBox!.width).toBeLessThanOrEqual(14);
       await expect(page.getByTestId('titlebar-sidebar-toggle')).toHaveCount(1);
-      const community = sidebar.getByRole('button', { name: '作品广场', exact: true });
-      await expect(community).toHaveCount(1);
-      const communityBox = await community.boundingBox();
+      await expect(sidebar.getByRole('button', { name: '作品广场', exact: true })).toHaveCount(0);
+      await expect(sidebar.locator('.classroom-community-footer')).toHaveCount(0);
+      const newConversation = sidebar.getByRole('button', { name: '新建对话', exact: true });
+      await expect(newConversation).toHaveCSS('font-size', '14px');
+      await expect(newConversation).toHaveCSS('font-weight', '500');
+      await expect(newConversation).toHaveCSS('color', 'rgb(38, 56, 77)');
+      await expect(sidebar.locator('.classroom-projects-heading')).toHaveCSS('color', 'rgb(80, 97, 118)');
       const createBox = await sidebar.getByTestId('sidebar-create-project').boundingBox();
       const headingBox = await sidebar.locator('.classroom-projects-heading').boundingBox();
       const accountBox = await sidebar.getByTestId('sidebar-member-menu-trigger').boundingBox();
       expect(createBox!.y).toBe(sidebarBox!.y);
       expect(headingBox!.y - sidebarBox!.y).toBe(56);
-      expect(communityBox!.x).toBe(createBox!.x);
-      expect(communityBox!.y).toBeGreaterThan(headingBox!.y + headingBox!.height);
-      expect(accountBox!.y - communityBox!.y - communityBox!.height).toBeCloseTo(0, 0);
-      expect(communityBox!.height).toBe(createBox!.height);
-      await expect(community).toHaveCSS('background-color', 'rgba(0, 0, 0, 0)');
-      const buttonStyles = await page.evaluate(() => {
-        const styles = (selector: string) => {
-          const s = getComputedStyle(document.querySelector(selector)!);
-          return [s.borderRadius, s.borderWidth, s.borderColor, s.boxShadow, s.padding, s.fontSize, s.fontWeight];
-        };
-        return { community: styles('[data-testid=sidebar] .community-link'), create: styles('[data-testid=sidebar-create-project]') };
-      });
-      expect(buttonStyles.community).toEqual(buttonStyles.create);
+      expect(accountBox!.y).toBeGreaterThan(headingBox!.y + headingBox!.height);
+      expect(accountBox!.y + accountBox!.height).toBeLessThanOrEqual(sidebarBox!.y + sidebarBox!.height);
       expect(headingBox!.y).toBeGreaterThanOrEqual(createBox!.y + createBox!.height);
       expect(headingBox!.y - createBox!.y - createBox!.height).toBeLessThanOrEqual(14);
       await page.screenshot({ path: test.info().outputPath('chat-code-return-entry.png') });
@@ -471,14 +464,15 @@ test.describe('Makelore module navigation without setup flow', () => {
         const b = el.getBoundingClientRect();
         return el.contains(document.elementFromPoint(b.x + b.width / 2, b.y + b.height / 2));
       })).toBe(true);
-      await expect(community).toBeVisible();
-      expect(await community.evaluate(element => element.scrollWidth <= element.clientWidth)).toBe(true);
+      await expect(sidebar.getByRole('button', { name: '作品广场', exact: true })).toHaveCount(0);
+      await expect(sidebar.getByTestId('sidebar-member-menu-trigger')).toBeVisible();
       await page.screenshot({ path: test.info().outputPath('chat-narrow-navigation-row.png') });
       await sidebarResizer.dblclick();
       await expect(sidebarResizer).toHaveAttribute('aria-valuenow', '171');
 
       const readCodeChrome = () => page.evaluate(() => {
         if (document.querySelector('[data-testid="sidebar"] .classroom-brand')) throw new Error('Removed Code brand reappeared');
+        if (document.querySelector('[data-testid="sidebar"] .classroom-community-footer')) throw new Error('Removed Code community footer reappeared');
         const selectors = {
           sidebar: '[data-testid="sidebar"]',
           titlebar: '[data-testid="titlebar-sidebar-surface"]',
@@ -487,8 +481,6 @@ test.describe('Makelore module navigation without setup flow', () => {
           toggle: '[data-testid="titlebar-sidebar-toggle"]',
           create: '[data-testid="sidebar-create-project"]',
           heading: '[data-testid="sidebar"] .classroom-projects-heading',
-          community: '[data-testid="sidebar"] .community-link[data-variant="sidebar"]',
-          communityIcon: '[data-testid="sidebar"] .community-link-icon',
           account: '[data-testid="sidebar-member-menu-trigger"]',
         };
         return Object.fromEntries(Object.entries(selectors).map(([name, selector]) => {
diff --git a/tests/e2e/pi-coding-first-chat.spec.ts b/tests/e2e/pi-coding-first-chat.spec.ts
index 0e837d45..a95ce9f0 100644
--- a/tests/e2e/pi-coding-first-chat.spec.ts
+++ b/tests/e2e/pi-coding-first-chat.spec.ts
@@ -1351,11 +1351,11 @@ test('first PI Conversation is editable under 500 ms and submits before runtime
       scope.__communityOpened = [];
       shell.openExternal = async url => { scope.__communityOpened!.push(url); };
     });
-    await page.getByTestId('sidebar').getByRole('button', { name: '作品广场', exact: true }).click();
+    await expect(page.getByTestId('sidebar').getByRole('button', { name: '作品广场', exact: true })).toHaveCount(0);
     await welcomeCommunity.click();
     await expect.poll(() => electronApp.evaluate(() => (
       (globalThis as typeof globalThis & { __communityOpened?: string[] }).__communityOpened
-    ))).toEqual(['https://square.nianxx.cn/#explore', 'https://square.nianxx.cn/#explore']);
+    ))).toEqual(['https://square.nianxx.cn/#explore']);
     await expect(composer).toHaveValue('Build the first PI scene');
     await expect(page.getByRole('img', { name: 'large.png', exact: true })).toBeVisible();
     await expect(page.getByRole('button', { name: '移除图片 large.png', exact: true })).toBeEnabled();
diff --git a/tests/unit/sidebar-project-actions.test.tsx b/tests/unit/sidebar-project-actions.test.tsx
index 444b0fc8..e08605f5 100644
--- a/tests/unit/sidebar-project-actions.test.tsx
+++ b/tests/unit/sidebar-project-actions.test.tsx
@@ -30,7 +30,7 @@ const providerState = vi.hoisted(() => ({
 vi.mock('react-i18next', () => ({
   useTranslation: () => ({ t: (_key: string, fallback: string) => fallback }),
 }));
-vi.mock('@/lib/api-client', () => ({ invokeIpc: vi.fn() }));
+vi.mock('@/lib/api-client', () => ({ invokeIpc: vi.fn().mockResolvedValue(false) }));
 vi.mock('@/hooks/use-current-user-profile', () => ({
   useCurrentUserProfile: () => ({
     userProfile: { displayName: '测试用户', avatarUrl: null },
@@ -59,7 +59,9 @@ vi.mock('@/pages/Chat/CodingProjectConversations', () => ({
   CodingProjectConversations: () => <div data-testid="conversation-list-mode">recent</div>,
 }));
 vi.mock('@/components/account/PointWallet', () => ({ PointWallet: () => null }));
-vi.mock('@/components/community/CommunityLink', () => ({ CommunityLink: () => null }));
+vi.mock('@/components/community/CommunityLink', () => ({
+  CommunityLink: ({ variant }: { variant?: string }) => <button type="button" data-community-variant={variant}>作品广场</button>,
+}));
 vi.mock('@/components/layout/ModuleSwitcher', () => ({ ModuleSwitcher: () => null }));
 vi.mock('@/components/layout/ImageWorkspaceSidebar', () => ({ ImageWorkspaceSidebar: () => null }));
 vi.mock('@/components/layout/SidebarUpdateButton', () => ({ SidebarUpdateButton: () => null }));
@@ -69,8 +71,8 @@ function LocationProbe() {
   return <div data-testid="location">{useLocation().pathname}</div>;
 }
 
-async function renderSidebar() {
-  render(<MemoryRouter initialEntries={['/chat']}><Sidebar /><LocationProbe /></MemoryRouter>);
+async function renderSidebar(path = '/chat', workspaceLayout = false) {
+  render(<MemoryRouter initialEntries={[path]}><Sidebar workspaceLayout={workspaceLayout} /><LocationProbe /></MemoryRouter>);
   await act(async () => undefined);
   projectConfigState.load.mockClear();
 }
@@ -95,6 +97,27 @@ describe('Sidebar project actions', () => {
     projectConfigState.load.mockResolvedValue({ status: 'valid', config: {} });
   });
 
+  it('removes the community footer from the Code workspace while retaining its account entry', async () => {
+    await renderSidebar('/chat', true);
+
+    expect(screen.queryByRole('button', { name: '作品广场' })).not.toBeInTheDocument();
+    expect(screen.getByTestId('sidebar').querySelector('.classroom-community-footer')).toBeNull();
+    expect(screen.getByRole('button', { name: '打开账户菜单：测试用户' })).toBeVisible();
+  });
+
+  it('retains the community footer in Canvas', async () => {
+    await renderSidebar('/image-canvas');
+
+    expect(screen.getByRole('button', { name: '作品广场' }).closest('.classroom-community-footer')).not.toBeNull();
+    expect(screen.getByRole('button', { name: '打开账户菜单：测试用户' })).toBeVisible();
+  });
+
+  it('retains the existing upper community entry outside the Code workspace layout', async () => {
+    await renderSidebar();
+
+    expect(screen.getByRole('button', { name: '作品广场' }).closest('.classroom-community-footer')).toBeNull();
+  });
+
   it('settings for the current project supersedes an earlier pending project open', async () => {
     await renderSidebar();
     let resolveProjectB!: (value: unknown) => void;

From ea5d47787e6e43c8782ba159798bf05b93a16d27 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 14:47:32 +0800
Subject: [PATCH 08/18] Remove Gallery from the Canvas sidebar

---
 ...0261014-canvas-create-recovery-a72d49e6.md | 15 +++++++++++++--
 README.md                                     |  2 +-
 src/components/layout/Sidebar.tsx             |  2 +-
 tests/e2e/image-workspace-v2.spec.ts          | 19 +++----------------
 4 files changed, 18 insertions(+), 20 deletions(-)

diff --git a/.project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md b/.project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md
index 285709f1..23ed3f2d 100644
--- a/.project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md
+++ b/.project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md
@@ -12,7 +12,7 @@
 
 ## Scope
 
-- Remove the exact create-dialog description, change the Canvas rail from pale lavender to pale yellow, diagnose actual Canvas project creation timeouts, and implement the smallest evidenced safe recovery/fix.
+- Remove the exact create-dialog description, change the Canvas rail from pale lavender to pale yellow, remove its Gallery entry while preserving Code Gallery, diagnose actual Canvas project creation timeouts, and implement the smallest evidenced safe recovery/fix.
 
 ## Intent And Constraints
 
@@ -20,7 +20,7 @@
 
 ## Outcome
 
-- Removed the exact desktop creation description and disabled its absent aria description; Canvas shared rail surface is pale yellow #fff9e8, with Code recipes preserved. Both creation dialogs hold a distinct creation intent. Any failed request for unchanged intent/name reuses its original server clientWorkspaceId; a new dialog or modified name creates a new intent, and repeated concurrent submissions share one in-flight request. Account/logout/reset generations prevent old responses from changing another account or reset store. Create/rename name input is disabled during submission. README synchronized.
+- Removed the exact desktop creation description and disabled its absent aria description; Canvas shared rail surface is pale yellow #fff9e8, with Code recipes preserved. Both creation dialogs hold a distinct creation intent. Any failed request for unchanged intent/name reuses its original server clientWorkspaceId; a new dialog or modified name creates a new intent, and repeated concurrent submissions share one in-flight request. Account/logout/reset generations prevent old responses from changing another account or reset store. Create/rename name input is disabled during submission. Removed only the Canvas Gallery/作品广场 footer entry; Code Gallery and all account/compact controls are preserved. README synchronized.
 
 ## Verification
 
@@ -78,3 +78,14 @@ Gate result:
 - Product commit and final HEAD will be reported to the authorized coordination chat. This clean Ready source contains Renderer-only changes; Main/shared/resources are unchanged against runtime436. Source implementation and live network recovery are separately evidenced.
 - A precise read-only real-project bootstrap recovered; no real Autumn project was created. Real UI color/copy activation remains for the combined update, because actual WeChat f1dab files are active while current.json still points at436, and another Code Main update is in progress. Preserve actual newer Renderer feature source and active user work rather than blindly replacing the old pointer's tree.
 - Any different title or explicitly reopened create dialog is a new creation intent; an older transport-unknown project may still exist on the server. Never delete it or infer identity from a matching name. This patch prevents same-intent retries from making extra identities; it does not establish the underlying NetworkService hang trigger or prove real model generation.
+
+## Same-task Steering Resume
+
+- Official start/status resumed this exact task/worktree/branch/base; user adds removal of the Canvas rail Gallery/作品广场 entry. All earlier color/copy/retry/recovery scope remains. Prior full context and peer assessment still apply; this intentionally supersedes the earlier Canvas Gallery addition while preserving Code Gallery semantics. No conflicting source or runtime ownership change is inferred.
+- Planning Gate Passed for this narrow addition. Change only Sidebar visibility condition, README and existing Canvas E2E expectations; repeat related source/lint/build/UI verification because the user-visible footer changed. Keep previous reviewed retry implementation and real network recovery evidence intact. The previously reported ca546c9 is superseded by the forthcoming final source HEAD.
+
+## Final Steering Verification
+
+- Same-task narrow steering completed: Canvas Gallery entry is absent; Code chat/settings Gallery remains. Standard typecheck, scoped Sidebar/E2E lint, default full build and independent diff review pass.
+- Final real isolated Electron pair passed: Canvas V2 desktop/compact creation/dialog/draft/plan/history (7.1s) and Code remembered-project/shared-settings chrome (5.1s), total 2 passed/12.7s. Inspected final creation-dialog screenshot with pale-yellow rail, no original description and no Canvas Gallery. Logs/PNG updated in the external task evidence stage. Earlier 81 focused unit tests remain applicable to the unchanged retry/store/dialog implementation.
+- The final continuation source HEAD supersedes ca546c9; both are in this branch. No new actual runtime update or Main restart was performed by this continuation. Authorized coordinator will preserve f1dab live WeChat source and active user work during unified activation.
diff --git a/README.md b/README.md
index 7414f8a1..3ae32b35 100644
--- a/README.md
+++ b/README.md
@@ -24,7 +24,7 @@ Makelore 是一个面向软件、视觉创作、智能机器人与个人云智
 
   Agents 侧栏的「渠道」按每个微信一张卡展示备注、当前智能体与使用状态；一个微信同时只绑定一个智能体，多个微信可以使用同一智能体。绑定有效且服务正常时始终开启回复，不提供暂停或恢复开关；更换智能体保留登录与历史，完成重新登录后也开启回复。旧的关闭记录在页面可见时，重新核对登录、在线服务、可用目标、同步状态及新旧渠道操作恢复记录后串行开启；服务离线、退出待确认、目标不可用和结果未知时不自动写入。常用操作是“更换智能体”；“更多操作”内可以解除微信绑定，停止任务、清除目标并退出微信登录，历史保留，再使用需扫码。确认解绑后的卡片可选择“删除微信卡片”，只从这台设备的当前账号列表移除，刷新和重开后仍保留删除结果；其他设备及云端账号和聊天历史不受影响，同一微信重新绑定后再次显示。本机偏好按账号与租户隔离，删除前再次读取云端状态并检查原操作，保存失败时保留卡片并显示原因。添加流程为选择已开始使用的智能体、扫码、自动完成绑定；扫码确认、目标正确、启用成功且最终状态回读可用后才显示完成。微信服务离线时，卡片仅保留右上角“微信服务离线”状态，不显示重复的离线长段说明；绑定或重新连接失败的窗口仍说明原因，不把扫码成功当作回复可用。未知或未同步状态显示“状态待确认”。无可用智能体时说明创建和“开始使用”的前提，加载失败不冒充空态，已有微信仍可解绑。Main 持有凭据与原操作恢复；解除需要配套 Yuxi 用户级 `/channel-accounts/{id}/unbind`，旧后端不会通过改按钮文案或组合未确认操作假装完成。变更以最新读取状态为准，未完成操作保留原身份供显式恢复；失败在当前窗口可见，结果未知不自动重放。微信退出仍在处理中时，禁止新的连接和绑定变更，保留刷新与原操作恢复。旧请求无法安全恢复、账号关系不一致或目标不可用时提示先核对；“不再提醒”只移除本机提醒，不取消服务端仍在处理的操作。最新 Yuxi 的退出保护条件和持久恢复由服务端负责，发布需配套 Core/Adapter 与 Yuxi business=13、knowledge=2 数据库版本。渠道页不展示微信聊天或活动，既有历史、费用、内容隔离与应用 API 保持原边界。实际微信身份及重复扫码识别仍由云端负责，不从备注推测。
 
-- `Makelore Canvas｜AI 绘画`：每个设计项目（Workspace）维护一份从创建起就存在的 Living Form。左侧工作栏与 Code 共用间距、图标徽章、项目行、操作菜单和底部广场/账户样式，仅工作栏底色采用淡黄色（`#fff9e8`）；顶部返回箭头与 Code 对齐，分组标题为“我的项目”，桌面项目列表仅显示名称，隐藏名称下的设计版本与更新时间；新建、切换和项目操作菜单集中管理 Workspace；创建请求失败后保留名称与本次创建标识，原样重试避免重复创建项目。工作区统一项目标题、设计版本与制作状态，创作对话和作品区支持拖动分栏、键盘调宽及单栏展开；对话以 Markdown 呈现，底部输入器保留草稿、发送状态与 Enter / Shift+Enter 快捷键。右侧通过“当前作品 / 历史作品”切换，在大图或视频预览旁编辑唯一制作方案、确认费用和制作；历史作品可回到工作区查看，切换面板保留未保存的制作参数。紧凑窗口以“创作对话 / 作品与方案”切换面板，通过项目抽屉管理 Workspace。图片支持适应窗口、原始尺寸及 Esc 关闭，视频支持预览和保存到电脑。参考图从本地上传后以 `@图片N` 绑定，具体用法只写在创作提示词中。
+- `Makelore Canvas｜AI 绘画`：每个设计项目（Workspace）维护一份从创建起就存在的 Living Form。左侧工作栏与 Code 共用间距、图标徽章、项目行、操作菜单和底部账户样式，仅工作栏底色采用淡黄色（`#fff9e8`）；顶部返回箭头与 Code 对齐，Canvas 工作栏不显示“作品广场”，分组标题为“我的项目”，桌面项目列表仅显示名称，隐藏名称下的设计版本与更新时间；新建、切换和项目操作菜单集中管理 Workspace；创建请求失败后保留名称与本次创建标识，原样重试避免重复创建项目。工作区统一项目标题、设计版本与制作状态，创作对话和作品区支持拖动分栏、键盘调宽及单栏展开；对话以 Markdown 呈现，底部输入器保留草稿、发送状态与 Enter / Shift+Enter 快捷键。右侧通过“当前作品 / 历史作品”切换，在大图或视频预览旁编辑唯一制作方案、确认费用和制作；历史作品可回到工作区查看，切换面板保留未保存的制作参数。紧凑窗口以“创作对话 / 作品与方案”切换面板，通过项目抽屉管理 Workspace。图片支持适应窗口、原始尺寸及 Esc 关闭，视频支持预览和保存到电脑。参考图从本地上传后以 `@图片N` 绑定，具体用法只写在创作提示词中。
 - `Makelore Robot｜AI 机器`：管理机器人智能体、设备激活绑定、智能体配置与设备分配；机器人工作台的智能体位于 Robot 全局侧栏，选中后在内容区先查看绑定设备、再查看基础设置，当前智能体通过 URL 参数保持可分享选择；绑定设备时默认先选择“引导配网”或“已有激活码”。在 Windows 与 macOS 的引导路径中，Makelore 可在弹窗内扫描并连接附近开放的 `Xiaozhi-*` 配网热点，失败时仍可通过系统 Wi-Fi 手动连接；后续继续复用机器人现有热点配网页面，不修改固件，也不由 Makelore 接收 Wi-Fi 密码。
 
 应用启动默认进入 AI 模块入口选择页。入口页可在未登录状态浏览；未登录用户点击已开通模块时进入客户端原生登录页，可使用账号密码或手机号短信验证码登录。密码登录可选“记住密码”：正式安装包仅由 Electron Main 使用系统受保护凭据存储加密保存和回填账号密码，不写入 Renderer 持久状态，未打包开发版或系统安全存储不可用时禁用该选项。登录请求由 Renderer 经 Host API 交给 Electron Main，再由 Main 调用 Works Square；成功后回到入口选择页。已登录时，Electron Main 会从 Works Square `/api/auth/me` 读取当前账号，只向 Renderer 投影用户名、账号/租户/部门标识、权限名列表与四个模块布尔开关，不透传上游资料或凭据。工作区门禁同时要求有效 Token 和完整用户身份；旧状态缺失身份时会先尝试从 Main 恢复，仍无法确认则清除残留会话并返回登录页。被管理员关闭的模块会在入口页置灰且无法点击，直接访问其工作区路径也会返回入口页。旧服务端未返回策略或缺少单项字段时默认开放；这个客户端门禁不替代服务端 API 授权。
diff --git a/src/components/layout/Sidebar.tsx b/src/components/layout/Sidebar.tsx
index 39b059fa..15e4cde6 100644
--- a/src/components/layout/Sidebar.tsx
+++ b/src/components/layout/Sidebar.tsx
@@ -874,7 +874,7 @@ export function Sidebar({
         onOpenChange={setProfileDialogOpen}
       />
 
-      {((workspaceLayout && isProgrammingModule) || isPaintingModule) && (
+      {workspaceLayout && isProgrammingModule && (
         <div className="classroom-community-footer">
           <CommunityLink variant="sidebar" collapsed={sidebarCollapsed} />
         </div>
diff --git a/tests/e2e/image-workspace-v2.spec.ts b/tests/e2e/image-workspace-v2.spec.ts
index 330c8895..8c12a282 100644
--- a/tests/e2e/image-workspace-v2.spec.ts
+++ b/tests/e2e/image-workspace-v2.spec.ts
@@ -479,7 +479,7 @@ test.describe('AI Design V2 workspace', () => {
       const project = sidebar.getByTestId('sidebar-image-project-workspace-1');
       const projectsHeading = sidebar.locator('.classroom-projects-heading');
       const moduleReturn = sidebar.getByTestId('sidebar-module-switcher-trigger');
-      const community = sidebar.getByRole('button', { name: '作品广场', exact: true });
+      await expect(sidebar.getByRole('button', { name: '作品广场', exact: true })).toHaveCount(0);
       const account = sidebar.getByTestId('sidebar-member-menu-trigger');
       await expect(sidebar).toHaveAttribute('aria-hidden', 'false');
       await expect(sidebar).toHaveCSS('background-color', 'rgb(255, 249, 232)');
@@ -502,8 +502,8 @@ test.describe('AI Design V2 workspace', () => {
       const actions = sidebar.getByRole('button', { name: '项目操作：咖啡机新品主视觉', exact: true });
       await expect(actions).toHaveCSS('width', '32px');
       await expect(actions).toHaveCSS('height', '32px');
-      const [sidebarBox, createBox, headingBox, projectBox, returnBox, communityBox, accountBox] = await Promise.all(
-        [sidebar, createProject, projectsHeading, project, moduleReturn, community, account].map((locator) => locator.boundingBox()),
+      const [sidebarBox, createBox, headingBox, projectBox, returnBox, accountBox] = await Promise.all(
+        [sidebar, createProject, projectsHeading, project, moduleReturn, account].map((locator) => locator.boundingBox()),
       );
       expect(sidebarBox!.width).toBe(256);
       expect(createBox!.height).toBe(48);
@@ -512,20 +512,7 @@ test.describe('AI Design V2 workspace', () => {
       expect(headingBox!.y - sidebarBox!.y).toBe(96);
       expect(projectBox!.y - sidebarBox!.y).toBe(136);
       expect(returnBox!.y - sidebarBox!.y).toBe(4);
-      expect(communityBox!.x).toBe(createBox!.x);
-      expect(communityBox!.height).toBe(createBox!.height);
-      expect(communityBox!.y).toBeGreaterThan(projectBox!.y + projectBox!.height);
-      expect(accountBox!.y - communityBox!.y - communityBox!.height).toBeCloseTo(0, 0);
       expect(sidebarBox!.y + sidebarBox!.height - accountBox!.y - accountBox!.height).toBeLessThanOrEqual(14);
-      const navigationStyles = await sidebar.evaluate((element) => {
-        const recipe = (selector: string) => {
-          const style = getComputedStyle(element.querySelector(selector)!);
-          return [style.borderRadius, style.borderWidth, style.boxShadow, style.padding, style.fontSize, style.fontWeight, style.lineHeight];
-        };
-        return { create: recipe('[data-testid="sidebar-create-project"]'), community: recipe('.community-link') };
-      });
-      expect(navigationStyles.community).toEqual(navigationStyles.create);
-
       await createProject.click();
       const creationDialog = page.getByRole('dialog', { name: '新建设计项目', exact: true });
       await expect(creationDialog).toBeVisible();

From 5da90e4a06bcabe0d15133e5bde3f914044b58bf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 14:50:49 +0800
Subject: [PATCH 09/18] fix(coding): log sanitized Pi initialization failures

---
 ...261014-diagnose-coding-runtime-8b41c9e2.md |  24 +-
 .../pi/initialization-diagnostic.ts           | 267 ++++++++++++++++++
 electron/coding-runtime/pi/runtime.ts         |  75 ++++-
 tests/unit/pi-diagnostic-stack-safety.test.ts |  60 ++++
 .../unit/pi-initialization-diagnostic.test.ts | 237 ++++++++++++++++
 .../pi-initialization-failure-logging.test.ts | 159 +++++++++++
 6 files changed, 815 insertions(+), 7 deletions(-)
 create mode 100644 electron/coding-runtime/pi/initialization-diagnostic.ts
 create mode 100644 tests/unit/pi-diagnostic-stack-safety.test.ts
 create mode 100644 tests/unit/pi-initialization-diagnostic.test.ts
 create mode 100644 tests/unit/pi-initialization-failure-logging.test.ts

diff --git a/.project-docs/30-worklog/tasks/20261014-diagnose-coding-runtime-8b41c9e2.md b/.project-docs/30-worklog/tasks/20261014-diagnose-coding-runtime-8b41c9e2.md
index 55956382..5be7ec71 100644
--- a/.project-docs/30-worklog/tasks/20261014-diagnose-coding-runtime-8b41c9e2.md
+++ b/.project-docs/30-worklog/tasks/20261014-diagnose-coding-runtime-8b41c9e2.md
@@ -12,23 +12,31 @@
 
 ## Scope
 
-- Diagnose the current trial Code runtime-unavailable notice using source, immutable runtime artifacts and bounded application startup diagnostics; explain what is actually known and the evidence gap.
+- Continue the diagnosed Code initialization issue by adding bounded, sanitized local exception logs at the managed-worker preparation/opening boundary. Preserve existing public errors, runtime behavior and cleanup. Validate code and redaction using isolated fixtures; do not assume the original cause is fixed merely by adding logs.
 
 ## Intent And Constraints
 
-- This request asks why; no product/source fix, app restart, user worker, paid model call, UI mutation, profile/credential/chat-history read or deployment. Isolated owned checkout based on the just-published f34e651. Read only startup diagnostics and runtime dependency metadata. Preserve current runtime and all peer/primary work.
+- User now explicitly requests sanitized exception logging. Same owned Feature task/worktree/basef34 resumed through officialstart/status. Product source change is authorized; do not capture raw arbitrary error text, prompt/title, credential/env/config payload, URLs or absolute private paths. Keep only a fixed technical classification, allowlisted error name/code, safe code-frame locations and bounded correlation/fingerprint. Logger/formatter failures must not replace the product exception.
+- Actual temporary app is undergoing parallel Canvas/Main network recovery and Renderer changes in other source chats. This task does not restart, inspect via private protocol, reset NetworkService or activate source files during that work. Preserve current Main/profile/project data and all peers; decide runtime delivery from a fresh coordinated source handoff rather than stale old authorization.
 
 ## Outcome
 
-- Direct failure stage identified: the Pi Agent Server starts and reaches server.ready, then the managed session-open path fails and cleans up with open_failure. The original exception is not retained by current diagnostics, so the specific underlying cause cannot honestly be identified from existing evidence. No runtime or product changes made.
+- Initial read-only diagnosis: Pi Agent Server reaches server.ready, then managed session opening fails and cleans up with open_failure. Existing logs do not retain the original exception, so they cannot prove the specific underlying cause.
+- Logging continuation adds one local WARN tagged PiWorkerInitializationFailed per failed managed-worker opening. Fixed stage markers cover registry/provider/resources/credential/extension/worker startup/initial hydration/session binding; the original failure is logged before existing cleanup and never replaces public errors, rejection identity or existing cleanup propagation.
+- Diagnostic output contains only allowlisted exception/code, fixed classification, bounded cryptographic text fingerprint, hashed conversation reference, worker generation and safe relative code locations when structurally available. Arbitrary error messages, function names, user content/titles, credential/env/config values, URLs and absolute private paths are not logged. Cause depth, code frames and serialized UTF-8 diagnostic size are limited to2 levels/6 frames per error/4096 bytes. A controlled realpath alias preserves official Pi package locations behind pnpm dependency links.
+- Pi RPC responses currently preserve only remote error text. Fixed operation/signature projection helps recognize known remote failure patterns without copying their property/function/path suffixes; it does not claim the actual remote exception type or restore its lost stack. Native lazy stack accessors and custom formatters fail closed rather than execute formatting hooks.
+- No actual application activation/restart, source publication or model/provider call in this logging continuation. Current history still does not prove the original runtime failure is fixed.
 
 ## Verification
 
-- No tests or paid/provider invocation required for this read-only diagnosis. Source trace independently reviewed; current native-launch.log has three server.ready→open_failure cycles, no diagnostic field/original stack, and later background_sleep events do not prove recovery. Actual Main/server artifacts match active436 manifest. Pi0.84.2 files/modules/required API exports are present and resolve in the actual retained runtime; Node version meets its engine. E2E=1 is real but does not disable coding composition/Pi. No secrets/profile state read.
+- Read-only diagnosis independently reviewed: native-launch.log has three server.ready→open_failure cycles, no diagnostic field/original stack; later background_sleep does not prove recovery. At that observation, actual Main/server matched436. Pi0.84.2 required modules/exports exist and resolve; Node meets its engine. E2E=1 does not disable coding composition/Pi. No secrets/profile state read.
+- Final logging validation: nine relevant unit suites/119 tests passed, including19 diagnostic privacy/RPC cases,6 managed-opener failure regressions and2 isolated native-stack safety probes. Standard typecheck and scoped ESLint passed. Default full build includes Renderer/Main/preload/release utility and passed; existing Browserslist/chunk/dynamic-import notices remain unrelated. No paid/provider invocation or actual user runtime session was used.
+- Independent final source review PASS. It first proved preinstalled/inherited custom formatter execution in the intermediate implementation; final data-only code and two independently rerun isolated probes now show zero formatting-hook calls, omitted lazy frames and unchanged original stack descriptors. Logger failures, original public error/rejection identity, logging before cleanup, existing cleanup-error propagation and single failure logging are covered. Official package symlink regression uses the actual canonical temp path, matching Node SDK stack behavior. Whitespace and task-aware drift checks passed.
 
 ## Follow-ups
 
-- For a repair continuation, capture a bounded sanitized original exception at the managed session-open boundary, reproduce the failing initialization without a paid prompt, then fix its actual cause and verify the real Code session. Avoid guessing a model/network cause, blindly reinstalling dependencies or treating E2E as a disable flag. This diagnostic checkout is retained ready for that same issue; no source fix or publication was requested.
+- Activate the validated logging Main artifact during the next coordinated update, then reproduce the failing initialization without a paid prompt and use new sanitized evidence to fix its actual cause. Avoid guessing a model/network cause, blindly reinstalling dependencies or treating E2E as a disable flag.
+- Latest parallel Canvas handoff ea5d47787e6e43c8782ba159798bf05b93a16d27 supersedesca546 (adds Canvas-only Gallery removal; preserves yellow sidebar/no old explanation/stable create retry). The source thread also reports an actual WeChat Renderer alias atf1dabdb358ff5f2228fbef014f9e659c156ccc10 while current.json remains436. These are peer-reported delivery facts, not this task's native acceptance. A later update must freeze fresh actual sources/alias/dirty-input state and preserve WeChat changes; do not blindly overwrite using old436 metadata. This task performs no runtime actions while source coordination is incomplete.
 
 ## Promotion Candidates
 
@@ -46,3 +54,9 @@
 - `electron/coding-runtime/pi/runtime.ts:238` managed opener includes provider projection/resources/extensions and SDK session opening;487–491 cleanup reasonopen_failure rethrows without preserving the raw error in current application logs. Existing server.ready events prove server startup/import but not successful thread/session initialization.
 - Current stage native-launch.log contains E2E startup atline4; Main575 creates coding composition regardless. E2E alters startup effects/background idle timing, not a blanket Pi disable. Actual runtime/server/Main hashes match the active436 source; development resolves Pi CLI via snapshot node_modules→primary, not packaged resources/pi-runtime. Pi package/version,7server module paths and6required APIs are present. These checks do not prove every generated session/resource/configuration is valid.
 - Read-only independent source and artifact reviewers agree: log evidence does not distinguish the original provider/configuration/extension/session exception. Specific diagnosis requires new sanitized exception evidence; do not call a hypothesis the proven root cause.
+
+## Logging Resume Gate And Plan
+
+- Same task official ownership exactly verified; startup and prior own diagnosis reloaded. Canonical positioning/decision/architecture/evidence/commitment context unchanged from previously loaded350 tree. Fresh74 and then75 peer scopes/intents/promotions independently assessed read-only; new Code gallery/old child-language placeholders remain unknown, without a concrete Pi logging dependency. Canvas is actively working Main shared networking/creation recovery, so this task performs only isolated source/test/build work. Gate Passed.
+- Single-opener observation spans registry/provider/resources/credential/extension/process/initial hydration/session bind. Record original exception BEFORE cleanup inside existing catches, with a once-per-open sentinel; outer catch covers earlier failures and preserves the same rejection object and current cleanup propagation. No renderer message change or error-response expansion.
+- Implement a fail-closed diagnostic formatter and focused privacy tests; wire fixed stage markers and known sensitive context in runtime.ts; add meaningful managed-opener regressions for failures before process creation, session open and cleanup/logger failure without changing public behavior. Run scoped tests/type/lint/default full build and independent review.
diff --git a/electron/coding-runtime/pi/initialization-diagnostic.ts b/electron/coding-runtime/pi/initialization-diagnostic.ts
new file mode 100644
index 00000000..2a8c5264
--- /dev/null
+++ b/electron/coding-runtime/pi/initialization-diagnostic.ts
@@ -0,0 +1,267 @@
+import { createHash } from 'node:crypto';
+import { sanitizePiDiagnostic } from './worker-process';
+
+const STAGES = new Set([
+  'registry', 'provider-input', 'provider-catalog', 'provider-credentials',
+  'worker-resources', 'device-resources', 'resource-materialization',
+  'extension-registration', 'worker-start', 'session-bind', 'initial-hydration',
+  'snapshot', 'prepare',
+]);
+const EXCEPTIONS = new Set([
+  'Error', 'EvalError', 'RangeError', 'ReferenceError', 'SyntaxError', 'TypeError',
+  'URIError', 'AggregateError', 'AbortError', 'PiProcessError',
+  'CodingRuntimeContractError', 'PiProviderConfigError', 'PiSessionProjectionError',
+  'CodingConversationServiceError', 'CodingProjectServiceError',
+]);
+const CODES = new Set([
+  'ENOENT', 'ENOTDIR', 'EACCES', 'EPERM', 'EINVAL', 'EEXIST', 'EMFILE', 'ENFILE',
+  'ENOSPC', 'EROFS', 'EIO', 'ENAMETOOLONG', 'ETIMEDOUT', 'EPIPE', 'ECONNRESET',
+  'ECONNREFUSED', 'MODULE_NOT_FOUND', 'ERR_MODULE_NOT_FOUND', 'ERR_REQUIRE_ESM',
+  'ERR_PACKAGE_PATH_NOT_EXPORTED', 'ERR_INVALID_ARG_TYPE', 'ERR_INVALID_URL',
+  'ERR_IMPORT_ATTRIBUTE_MISSING', 'ERR_UNKNOWN_FILE_EXTENSION',
+  'ERR_DLOPEN_FAILED', 'ERR_WORKER_INIT_FAILED', 'ABORT_ERR',
+  'UND_ERR_CONNECT_TIMEOUT', 'UND_ERR_HEADERS_TIMEOUT', 'UND_ERR_SOCKET',
+  'PI_RPC_PROTOCOL_ERROR', 'PI_RPC_TIMEOUT', 'PI_RPC_ABORTED',
+  'PI_RPC_RESPONSE_ERROR', 'PI_RPC_WRITE_FAILED', 'PI_RPC_EXITED',
+  'PI_WORKER_START_FAILED', 'PI_WORKER_STOPPED', 'PI_WORKER_STOP_FAILED',
+  'CODING_RUNTIME_START_FAILED', 'CODING_RUNTIME_READY_TIMEOUT',
+  'CODING_RUNTIME_PROTOCOL_ERROR', 'CODING_RUNTIME_UNAVAILABLE',
+  'CODING_CONVERSATION_NOT_FOUND', 'CODING_SESSION_UNREADABLE',
+  'CODING_STORAGE_WRITE_FAILED', 'CODING_MIGRATION_MODEL_REQUIRED',
+  'CODING_MODEL_UNAVAILABLE', 'CODING_PROVIDER_AUTH_REQUIRED',
+  'CODING_AGENT_NOT_FOUND', 'CODING_REQUEST_UNCERTAIN',
+  'PROVIDER_INVALID', 'PROVIDER_AUTH_REQUIRED', 'MODEL_UNAVAILABLE',
+]);
+const MAX_BYTES = 4_096;
+const MAX_TEXT_BYTES = 32_768;
+const MAX_FRAME_BYTES = 160;
+const MAX_FRAMES = 6;
+const MAX_CAUSE_DEPTH = 2;
+const REDACTED_FRAME = '[REDACTED_FRAME]';
+const MAX_RPC_TAIL_BYTES = 2_048;
+// Server control commands plus PiRpcClient's read-only initialization commands.
+const RPC_OPERATIONS = [
+  'server_initialize', 'thread_open', 'thread_close', 'server_shutdown',
+  'get_available_models', 'get_available_thinking_levels', 'get_commands',
+  'get_entries', 'get_fork_messages', 'get_last_assistant_text', 'get_messages',
+  'get_session_stats', 'get_state', 'get_tree',
+] as const;
+
+export interface PiInitializationDiagnostic {
+  version: 1;
+  stage: string;
+  exception: string;
+  code?: string;
+  category: string;
+  message: string;
+  fingerprint?: string;
+  rpcOperation?: (typeof RPC_OPERATIONS)[number];
+  rpcFailureSignature?: 'undefined-property' | 'null-property' | 'not-callable' | 'module-not-found' | 'missing-local-resource';
+  frames?: string[];
+  causes?: PiInitializationDiagnostic[];
+  truncated?: true;
+}
+
+export interface PiInitializationDiagnosticOptions {
+  stage: string;
+  sensitiveValues?: readonly string[];
+  /** Bundled application/package roots only; never user project roots. */
+  trustedRoots?: readonly string[];
+}
+
+function own(value: unknown, key: string): PropertyDescriptor | undefined {
+  if ((typeof value !== 'object' || value === null) && typeof value !== 'function') return undefined;
+  try { return Object.getOwnPropertyDescriptor(value, key); } catch { return undefined; }
+}
+function data(value: unknown, key: string): unknown {
+  const descriptor = own(value, key);
+  return descriptor && 'value' in descriptor ? descriptor.value : undefined;
+}
+function strings(value: unknown): string[] {
+  try {
+    if (!Array.isArray(value)) return [];
+    const length = data(value, 'length');
+    if (typeof length !== 'number' || !Number.isSafeInteger(length)) return [];
+    const result: string[] = [];
+    for (let index = 0; index < Math.min(length, 128); index++) {
+      const item = data(value, String(index));
+      if (typeof item === 'string' && item && item.length <= MAX_TEXT_BYTES && Buffer.byteLength(item) <= MAX_TEXT_BYTES) result.push(item);
+    }
+    return result;
+  } catch { return []; }
+}
+function exceptionName(error: unknown): string {
+  let value = error;
+  for (let depth = 0; depth < 3; depth++) {
+    const name = data(value, 'name');
+    if (typeof name === 'string') return EXCEPTIONS.has(name) ? name : 'UnknownError';
+    if (own(value, 'name')) return 'UnknownError';
+    try {
+      if ((typeof value !== 'object' || value === null) && typeof value !== 'function') break;
+      value = Object.getPrototypeOf(value);
+    } catch { break; }
+  }
+  return 'UnknownError';
+}
+function knownCode(error: unknown): string | undefined {
+  const direct = data(error, 'code');
+  if (typeof direct === 'string' && CODES.has(direct)) return direct;
+  const publicCode = data(data(error, 'publicError'), 'code');
+  return typeof publicCode === 'string' && CODES.has(publicCode) ? publicCode : undefined;
+}
+function rpcProjection(error: unknown): Pick<PiInitializationDiagnostic, 'rpcOperation' | 'rpcFailureSignature'> {
+  if (data(error, 'code') !== 'PI_RPC_RESPONSE_ERROR') return {};
+  const message = data(error, 'message');
+  if (typeof message !== 'string') return {};
+  // Inspect a bounded prefix first; never scan/copy an unbounded response tail.
+  const wrapper = message.slice(0, 128).match(/^Pi RPC ([a-z_]{1,48}) failed: /);
+  const operation = wrapper ? RPC_OPERATIONS.find(candidate => candidate === wrapper[1]) : undefined;
+  if (!wrapper || !operation) return {};
+  const result: Pick<PiInitializationDiagnostic, 'rpcOperation' | 'rpcFailureSignature'> = { rpcOperation: operation };
+  if (message.length - wrapper[0].length > MAX_RPC_TAIL_BYTES) return result;
+  const tail = message.slice(wrapper[0].length);
+  if (Buffer.byteLength(tail) > MAX_RPC_TAIL_BYTES) return result;
+  // Match known runtime shapes, but never retain their private property names,
+  // function expressions, package names, paths, URLs or other response suffixes.
+  const property = tail.match(/^(?:TypeError: )?Cannot read properties of (undefined|null) \(reading (?:'[^'\r\n]{1,256}'|"[^"\r\n]{1,256}")\)$/);
+  if (property) result.rpcFailureSignature = property[1] === 'undefined' ? 'undefined-property' : 'null-property';
+  else if (/^(?:TypeError: )?[^\r\n]{1,256} is not a function$/.test(tail)) result.rpcFailureSignature = 'not-callable';
+  else if (/^(?:Error: )?Cannot find module '[^'\r\n]{1,512}'(?:\nRequire stack:(?:\n- [^\r\n]{1,512}){1,8})?$/.test(tail)
+    || /^(?:Error: )?Cannot find package '[^'\r\n]{1,256}' imported from [^\r\n]{1,1024}$/.test(tail)) result.rpcFailureSignature = 'module-not-found';
+  else if (/^(?:Error: )?ENOENT: no such file or directory(?:, (?:open|access|stat|lstat|scandir|readdir|realpath|readlink) '[^'\r\n]{1,1024}')?$/.test(tail)) result.rpcFailureSignature = 'missing-local-resource';
+  return result;
+}
+function classify(exception: string, code: string | undefined): Pick<PiInitializationDiagnostic, 'category' | 'message'> {
+  if (code && ['MODULE_NOT_FOUND', 'ERR_MODULE_NOT_FOUND', 'ERR_REQUIRE_ESM', 'ERR_PACKAGE_PATH_NOT_EXPORTED', 'ERR_UNKNOWN_FILE_EXTENSION', 'ERR_DLOPEN_FAILED'].includes(code))
+    return { category: 'module-loading', message: 'A required runtime module could not be loaded.' };
+  if (code && ['ENOENT', 'ENOTDIR', 'EACCES', 'EPERM', 'EINVAL', 'EEXIST', 'EMFILE', 'ENFILE', 'ENOSPC', 'EROFS', 'EIO', 'ENAMETOOLONG', 'CODING_STORAGE_WRITE_FAILED'].includes(code))
+    return { category: 'local-storage', message: 'A local runtime resource could not be read or written.' };
+  if (code && ['PROVIDER_AUTH_REQUIRED', 'CODING_PROVIDER_AUTH_REQUIRED'].includes(code))
+    return { category: 'provider-authentication', message: 'Provider authentication preparation failed.' };
+  if (code && ['PROVIDER_INVALID', 'MODEL_UNAVAILABLE', 'CODING_MODEL_UNAVAILABLE', 'CODING_MIGRATION_MODEL_REQUIRED'].includes(code))
+    return { category: 'provider-configuration', message: 'The runtime model configuration could not be prepared.' };
+  if (code && ['PI_RPC_TIMEOUT', 'CODING_RUNTIME_READY_TIMEOUT', 'ETIMEDOUT', 'UND_ERR_CONNECT_TIMEOUT', 'UND_ERR_HEADERS_TIMEOUT'].includes(code))
+    return { category: 'initialization-timeout', message: 'Runtime preparation or communication timed out.' };
+  if (code && ['PI_RPC_PROTOCOL_ERROR', 'PI_RPC_RESPONSE_ERROR', 'PI_RPC_WRITE_FAILED', 'CODING_RUNTIME_PROTOCOL_ERROR'].includes(code))
+    return { category: 'worker-protocol', message: 'The runtime worker communication failed.' };
+  if (code && ['PI_RPC_EXITED', 'PI_WORKER_START_FAILED', 'PI_WORKER_STOPPED', 'PI_WORKER_STOP_FAILED', 'CODING_RUNTIME_START_FAILED', 'ERR_WORKER_INIT_FAILED'].includes(code))
+    return { category: 'worker-lifecycle', message: 'The runtime worker could not start or remain available.' };
+  if (code === 'CODING_SESSION_UNREADABLE')
+    return { category: 'session-projection', message: 'Stored runtime session data could not be projected.' };
+  if (exception === 'TypeError' || exception === 'ReferenceError' || code === 'ERR_INVALID_ARG_TYPE')
+    return { category: 'runtime-contract', message: 'Runtime initialization encountered a type or reference mismatch.' };
+  if (exception === 'SyntaxError')
+    return { category: 'invalid-runtime-data', message: 'Runtime initialization encountered invalid syntax or data.' };
+  return { category: 'unclassified-initialization', message: 'Runtime initialization failed without a recognized error classification.' };
+}
+function secretAliases(values: string[]): string[] {
+  const result = new Set<string>();
+  for (const value of values) {
+    result.add(value);
+    try {
+      result.add(encodeURIComponent(value));
+      result.add(encodeURI(value));
+      result.add(encodeURIComponent(value).replace(/%20/g, '+'));
+    } catch { /* Invalid UTF-16 is still covered by its literal value. */ }
+    result.add(JSON.stringify(value).slice(1, -1));
+    result.add(Buffer.from(value).toString('base64'));
+    result.add(Buffer.from(value).toString('base64url'));
+  }
+  return [...result];
+}
+function decodedLocation(value: string): string | null {
+  if (Buffer.byteLength(value) > 2_048) return null;
+  let result = value;
+  try {
+    for (let depth = 0; depth < 2; depth++) {
+      const next = decodeURIComponent(result);
+      if (next === result) break;
+      result = next;
+    }
+  } catch { return null; }
+  if (result.startsWith('file:///')) result = result.slice(7);
+  else if (result.startsWith('file://localhost/')) result = result.slice(16);
+  else if (result.includes('://')) return null;
+  if (/^\/[A-Za-z]:\//.test(result)) result = result.slice(1);
+  result = result.replace(/\\/g, '/');
+  if (result.split('/').some(segment => segment === '..' || segment === '.')) return null;
+  return result;
+}
+function frameLocation(line: string, roots: string[], sensitive: string[]): string {
+  const match = line.match(/^\s*at\s+(?:.*?\()?([^()\r\n]+):(\d{1,9}):(\d{1,9})\)?\s*$/);
+  if (!match) return REDACTED_FRAME;
+  const location = decodedLocation(match[1]);
+  if (!location) return REDACTED_FRAME;
+  let relative: string | undefined;
+  if (/^node:internal\/[A-Za-z0-9_./-]+$/.test(location)) relative = location;
+  else {
+    for (let index = 0; index < roots.length; index++) {
+      const root = decodedLocation(roots[index])?.replace(/\/+$/, '');
+      if (!root || !/^(?:\/|[A-Za-z]:\/)/.test(root)) continue;
+      const windows = /^[A-Za-z]:\//.test(root);
+      const candidate = windows ? location.toLowerCase() : location;
+      const prefix = windows ? root.toLowerCase() : root;
+      if (candidate.startsWith(prefix + '/')) {
+        const suffix = location.slice(root.length + 1);
+        // Drop function names and absolute roots; retain only code locations.
+        if (/^[A-Za-z0-9_@+.,$-]+(?:\/[A-Za-z0-9_@+.,$-]+)*\.(?:[cm]?[jt]sx?|mjs|cjs)$/.test(suffix)) relative = `root${index}/${suffix}`;
+        break;
+      }
+    }
+  }
+  if (!relative || /eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/.test(relative)) return REDACTED_FRAME;
+  if (sanitizePiDiagnostic(relative, sensitive) !== relative) return REDACTED_FRAME;
+  const frame = `${relative}:${match[2]}:${match[3]}`;
+  return Buffer.byteLength(frame) <= MAX_FRAME_BYTES ? frame : REDACTED_FRAME;
+}
+
+/** Produce bounded technical evidence only; arbitrary exception text is never logged. */
+export function buildPiInitializationDiagnostic(
+  error: unknown,
+  options: PiInitializationDiagnosticOptions,
+): PiInitializationDiagnostic {
+  const requestedStage = data(options, 'stage');
+  const stage = typeof requestedStage === 'string' && STAGES.has(requestedStage) ? requestedStage : 'unknown';
+  const roots = strings(data(options, 'trustedRoots'));
+  const sensitive = secretAliases(strings(data(options, 'sensitiveValues')));
+  const seen = new Set<unknown>();
+  const build = (value: unknown, depth: number): PiInitializationDiagnostic => {
+    const exception = exceptionName(value);
+    const code = knownCode(value);
+    const result: PiInitializationDiagnostic = {
+      version: 1, stage, exception, ...(code ? { code } : {}), ...classify(exception, code), ...rpcProjection(value),
+    };
+    const message = typeof value === 'string' ? value : data(value, 'message');
+    if (typeof message === 'string' && message) {
+      const bytes = Buffer.from(message.slice(0, MAX_TEXT_BYTES));
+      result.fingerprint = createHash('sha256').update(bytes.subarray(0, MAX_TEXT_BYTES)).digest('hex').slice(0, 16);
+      if (message.length > MAX_TEXT_BYTES || bytes.length > MAX_TEXT_BYTES) result.truncated = true;
+    }
+    // Even native lazy stack accessors can call global formatting hooks. Only
+    // inspect an already available string data property; never invoke a getter.
+    const stack = data(value, 'stack');
+    if (typeof stack === 'string') {
+      const bytes = Buffer.from(stack.slice(0, MAX_TEXT_BYTES));
+      const bounded = bytes.subarray(0, MAX_TEXT_BYTES).toString('utf8');
+      const lines = bounded.split(/\r?\n/).filter(line => /^\s*at\s/.test(line));
+      result.frames = lines.slice(0, MAX_FRAMES).map(line => frameLocation(line, roots, sensitive));
+      if (lines.length > MAX_FRAMES || stack.length > MAX_TEXT_BYTES || bytes.length > MAX_TEXT_BYTES) result.truncated = true;
+    }
+    seen.add(value);
+    const cause = data(value, 'cause');
+    if (cause !== undefined) {
+      if (depth < MAX_CAUSE_DEPTH && !seen.has(cause)) result.causes = [build(cause, depth + 1)];
+      else result.truncated = true;
+    }
+    return result;
+  };
+  const diagnostic = build(error, 0);
+  const nodes = [diagnostic, ...(diagnostic.causes ?? []), ...(diagnostic.causes?.[0]?.causes ?? [])];
+  while (Buffer.byteLength(JSON.stringify(diagnostic)) > MAX_BYTES) {
+    diagnostic.truncated = true;
+    const removable = [...nodes].reverse().find(node => node.frames?.length);
+    if (removable?.frames) removable.frames.pop();
+    else { delete diagnostic.causes; break; }
+  }
+  return diagnostic;
+}
diff --git a/electron/coding-runtime/pi/runtime.ts b/electron/coding-runtime/pi/runtime.ts
index 2ed7eed2..c363c203 100644
--- a/electron/coding-runtime/pi/runtime.ts
+++ b/electron/coding-runtime/pi/runtime.ts
@@ -1,6 +1,8 @@
-import { randomUUID } from 'node:crypto';
+import { createHash, randomUUID } from 'node:crypto';
+import { realpathSync } from 'node:fs';
 import path from 'node:path';
 import { logger } from '../../utils/logger';
+import { buildPiInitializationDiagnostic } from './initialization-diagnostic';
 import type { ModelSummary, ProviderAccount } from '../../shared/providers/types';
 import { validateSessionKey } from '../../coding-projects/conversation-store';
 import {
@@ -233,9 +235,18 @@ export function createPiManagedWorkerOpener(
   const createProcess = options.createProcess ?? ((processOptions) => new PiWorkerProcess(processOptions));
   const createSessionKey = options.createSessionKey ?? randomUUID;
   const now = options.now ?? Date.now;
-  return async (input) => {
+  const openWorker = async (
+    input: PiWorkerOpenInput,
+    observation: {
+      stage(value: string): void;
+      sensitive(...values: Array<string | undefined>): void;
+      failed(error: unknown): void;
+    },
+  ): Promise<PiWorkerOpenResult> => {
     const resourcesStartedAt = now();
     const registered = await options.registry.prepare(input.conversation);
+    observation.sensitive(registered.projectPath, registered.agent.prompt, registered.agent.name,
+      registered.agent.roleName, registered.conversation.title);
     const existingSession = input.existingSession ?? registered.session ?? undefined;
     const model = registered.conversation.model;
     if (!model || registered.conversation.modelResolution !== 'resolved') {
@@ -245,7 +256,9 @@ export function createPiManagedWorkerOpener(
         true,
       );
     }
+    observation.stage('provider-input');
     const providerInput = await options.loadProviderInput();
+    observation.stage('provider-catalog');
     const catalog = buildPiProviderCatalog(providerInput);
     const selection = selectPiProviderModel(catalog, model);
     const account = providerInput.accounts.find((candidate) => candidate.id === selection.accountId);
@@ -253,6 +266,7 @@ export function createPiManagedWorkerOpener(
     if (!account || !descriptor) throw new Error('Selected Provider account is unavailable');
     const managedPaths = await ensurePiManagedPaths(options.userDataDir);
     await writePiProviderCatalog(managedPaths.modelsFile, catalog, model);
+    observation.stage('worker-resources');
     const workerResources = options.capabilityRegistry
       ? await options.capabilityRegistry.resolveWorkerResources({
         projectPath: registered.projectPath,
@@ -261,6 +275,7 @@ export function createPiManagedWorkerOpener(
         role: 'parent',
       })
       : fallbackWorkerResources(registered.agent.skillIds);
+    observation.stage('device-resources');
     const deviceResources = options.devicePackageManager
       ? await options.devicePackageManager.resolveEnabledResources()
       : undefined;
@@ -268,6 +283,7 @@ export function createPiManagedWorkerOpener(
       ...workerResources.skillEntries,
       ...(deviceResources?.skillEntries ?? []),
     ];
+    observation.stage('resource-materialization');
     const resources = await materializePiAgentResources({
       userDataDir: options.userDataDir,
       projectId: input.conversation.projectId,
@@ -290,6 +306,8 @@ export function createPiManagedWorkerOpener(
         : {}),
       revision: input.revision,
     });
+    observation.sensitive(resources.paths.configDir, resources.projectSessionsDir, managedPaths.rootDir);
+    observation.stage('provider-credentials');
     const credential = await buildPiWorkerCredentialProjection({
       account,
       descriptor,
@@ -298,6 +316,8 @@ export function createPiManagedWorkerOpener(
         ? { localProxyCredential: await options.getLocalProxyCredential() }
         : {}),
     });
+    observation.sensitive(...credential.sensitiveValues);
+    observation.stage('extension-registration');
     const modelTools = options.modelToolRegistry?.registerWorker({
       conversationId: input.conversation.conversationId,
       generation: input.generation,
@@ -335,6 +355,7 @@ export function createPiManagedWorkerOpener(
         extensionsDir: managedPaths.extensionsDir,
       });
     } catch (error) {
+      observation.failed(error);
       modelTools?.dispose();
       throw error;
     }
@@ -346,12 +367,15 @@ export function createPiManagedWorkerOpener(
       now(),
       !existingSession,
     );
+    observation.sensitive(extension.extensionPath, ...extension.sensitiveValues);
+    observation.stage('session-bind');
     const sessionKey = validateSessionKey(
       existingSession?.sessionKey ?? createSessionKey(),
     );
     if (existingSession && input.fork) {
       throw new Error('Pi worker cannot reopen and fork a session at the same time');
     }
+    observation.stage('worker-start');
     const process = createProcess({
       executablePath: options.executablePath,
       cliPath: options.cliPath,
@@ -417,6 +441,7 @@ export function createPiManagedWorkerOpener(
       if (input.fork?.sourceEntryId) {
         await process.request({ type: 'fork', entryId: input.fork.sourceEntryId });
       }
+      observation.stage('initial-hydration');
       const readyStartedAt = now();
       const response = await process.request<PiRpcSessionStateProjection>(
         { type: 'get_state' },
@@ -451,6 +476,7 @@ export function createPiManagedWorkerOpener(
           );
         }
       }
+      observation.stage('session-bind');
       const sessionStartedAt = now();
       const bound = await options.registry.ensureBinding(input.conversation, async () => ({
         piSessionId,
@@ -485,12 +511,57 @@ export function createPiManagedWorkerOpener(
         session: clone(bound.session),
       };
     } catch (error) {
+      observation.failed(error);
       unsubscribeExtensionInvalidation();
       await process.stop('open_failure').catch(() => undefined);
       await disposeManagedResources();
       throw error;
     }
   };
+  return async (input) => {
+    let stage = 'registry';
+    let failureObserved = false;
+    const sensitiveValues = [input.conversation.title, options.userDataDir,
+      options.executablePath, options.cliPath, options.bundledSkillsDir];
+    const observation = {
+      stage: (value: string) => { stage = value; },
+      sensitive: (...values: Array<string | undefined>) => {
+        sensitiveValues.push(...values.filter((value): value is string => typeof value === 'string'));
+      },
+      failed: (error: unknown) => {
+        if (failureObserved) return;
+        failureObserved = true;
+        try {
+          const piPackageRoot = path.resolve(path.dirname(options.cliPath), '..');
+          const trustedRoots = [piPackageRoot, path.resolve(__dirname, '..', '..'), options.bundledSkillsDir];
+          try {
+            // pnpm package stacks use the real path behind the bundled dependency link.
+            const resolvedPiRoot = realpathSync.native(piPackageRoot);
+            if (!trustedRoots.includes(resolvedPiRoot)) trustedRoots.push(resolvedPiRoot);
+          } catch {
+            // Missing resources must still produce a diagnostic using known roots.
+          }
+          logger.warn('[PiWorkerInitializationFailed]', {
+            conversationRef: createHash('sha256').update(input.conversation.conversationId).digest('hex').slice(0, 16),
+            workerGeneration: Number.isSafeInteger(input.generation) ? input.generation : 0,
+            diagnostic: buildPiInitializationDiagnostic(error, {
+              stage,
+              sensitiveValues,
+              trustedRoots,
+            }),
+          });
+        } catch {
+          // Diagnostic construction/output must never change initialization or cleanup.
+        }
+      },
+    };
+    try {
+      return await openWorker(input, observation);
+    } catch (error) {
+      observation.failed(error);
+      throw error;
+    }
+  };
 }
 
 function recordManagedMilestone(
diff --git a/tests/unit/pi-diagnostic-stack-safety.test.ts b/tests/unit/pi-diagnostic-stack-safety.test.ts
new file mode 100644
index 00000000..9c34a04e
--- /dev/null
+++ b/tests/unit/pi-diagnostic-stack-safety.test.ts
@@ -0,0 +1,60 @@
+// @vitest-environment node
+
+import { execFileSync } from 'node:child_process';
+import path from 'node:path';
+import { describe, expect, it } from 'vitest';
+
+// Isolate global Error hooks from Vitest. Load the actual formatter source;
+// the sanitizer is unreachable here because lazy stack frames are omitted.
+const probe = `
+import { readFileSync } from 'node:fs';
+import { registerHooks, stripTypeScriptTypes } from 'node:module';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+const sourceUrl = pathToFileURL(process.argv[1]).href;
+registerHooks({
+  resolve(specifier, context, next) {
+    if (specifier === './worker-process' && context.parentURL === sourceUrl)
+      return { url: 'diagnostic-fixture:sanitizer', shortCircuit: true };
+    return next(specifier, context);
+  },
+  load(url, context, next) {
+    if (url === 'diagnostic-fixture:sanitizer') return { format: 'module',
+      source: 'export function sanitizePiDiagnostic() { throw new Error("Unexpected frame processing"); }', shortCircuit: true };
+    if (url === sourceUrl) return { format: 'module',
+      source: stripTypeScriptTypes(readFileSync(fileURLToPath(url), 'utf8')), shortCircuit: true };
+    return next(url, context);
+  },
+});
+let calls = 0;
+if (process.argv[2] === 'preinstalled') {
+  Object.defineProperty(Error, 'prepareStackTrace', { configurable: true,
+    value() { calls++; return 'private custom formatter result'; } });
+} else {
+  Reflect.deleteProperty(Error, 'prepareStackTrace');
+}
+const { buildPiInitializationDiagnostic } = await import(sourceUrl);
+if (process.argv[2] === 'inherited') {
+  Object.defineProperty(Function.prototype, 'prepareStackTrace', { configurable: true,
+    get() { calls++; return () => { calls++; return 'private inherited formatter result'; }; } });
+}
+const error = new Error('private message');
+const prior = Object.getOwnPropertyDescriptor(error, 'stack');
+calls = 0;
+const diagnostic = buildPiInitializationDiagnostic(error, { stage: 'worker-start' });
+const after = Object.getOwnPropertyDescriptor(error, 'stack');
+process.stdout.write(JSON.stringify({ calls, diagnostic,
+  stackUnchanged: prior?.get === after?.get && prior?.value === after?.value }));
+`;
+
+describe('initialization diagnostic isolated native stack safety', () => {
+  it.each(['preinstalled', 'inherited'])('does not execute %s global formatting hooks or modify the error', mode => {
+    const result = JSON.parse(execFileSync(process.execPath, ['--input-type=module', '-e', probe,
+      path.resolve('electron/coding-runtime/pi/initialization-diagnostic.ts'), mode],
+    { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 5_000 }).trim());
+    expect(result.calls).toBe(0);
+    expect(result.stackUnchanged).toBe(true);
+    expect(result.diagnostic).toMatchObject({ stage: 'worker-start', exception: 'Error' });
+    expect(result.diagnostic.frames).toBeUndefined();
+    expect(JSON.stringify(result.diagnostic)).not.toContain('private');
+  });
+});
diff --git a/tests/unit/pi-initialization-diagnostic.test.ts b/tests/unit/pi-initialization-diagnostic.test.ts
new file mode 100644
index 00000000..4780a033
--- /dev/null
+++ b/tests/unit/pi-initialization-diagnostic.test.ts
@@ -0,0 +1,237 @@
+import { describe, expect, it } from 'vitest';
+import { buildPiInitializationDiagnostic } from '../../electron/coding-runtime/pi/initialization-diagnostic';
+
+const root = '/private/bundled-app/resources';
+const jwt = 'eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJwcml2YXRlIn0.private-signature';
+const credential = 'private-key-S3cr3t-12345';
+
+function withStack<T extends Error>(error: T, stack: string): T {
+  Object.defineProperty(error, 'stack', { configurable: true, writable: true, value: stack });
+  return error;
+}
+
+describe('Pi initialization diagnostic privacy and technical evidence', () => {
+  it('retains the technical class and trusted source location without the exception text or absolute root', () => {
+    const error = withStack(Object.assign(new TypeError(`Cannot read ${credential} from https://private.example/api`),
+      { code: 'ERR_INVALID_ARG_TYPE' }), [
+      `TypeError: ${credential}`,
+      `    at secretFunctionName (${root}/pi/runtime.ts:253:20)`,
+      '    at processTicksAndRejections (node:internal/process/task_queues:95:5)',
+      '    at execute (/Users/private-user/project/private-module.ts:8:1)',
+    ].join('\n'));
+    const diagnostic = buildPiInitializationDiagnostic(error, { stage: 'worker-start', trustedRoots: [root], sensitiveValues: [credential] });
+    expect(diagnostic).toMatchObject({
+      version: 1, stage: 'worker-start', exception: 'TypeError', code: 'ERR_INVALID_ARG_TYPE',
+      category: 'runtime-contract', frames: ['root0/pi/runtime.ts:253:20', 'node:internal/process/task_queues:95:5', '[REDACTED_FRAME]'],
+    });
+    expect(diagnostic.fingerprint).toMatch(/^[a-f0-9]{16}$/);
+    const serialized = JSON.stringify(diagnostic);
+    for (const privateValue of [credential, 'Cannot read', 'secretFunctionName', root, 'private-user', 'https://private.example/api'])
+      expect(serialized).not.toContain(privateValue);
+  });
+
+  it('classifies a failed worker with its filesystem cause while ignoring arbitrary custom error fields', () => {
+    const cause = Object.assign(new Error(`open /Users/alice/${credential}.json`), { code: 'ENOENT', path: `/Users/alice/${credential}.json` });
+    const error = Object.assign(new Error(`worker failed: ${jwt}`, { cause }), {
+      name: 'PiProcessError', code: 'PI_WORKER_START_FAILED', diagnostic: `authorization: Bearer ${credential}`, token: credential,
+    });
+    const diagnostic = buildPiInitializationDiagnostic(error, { stage: 'worker-start' });
+    expect(diagnostic).toMatchObject({
+      exception: 'PiProcessError', code: 'PI_WORKER_START_FAILED', category: 'worker-lifecycle',
+      causes: [{ exception: 'Error', code: 'ENOENT', category: 'local-storage' }],
+    });
+    const serialized = JSON.stringify(diagnostic);
+    for (const value of [credential, jwt, '/Users/alice', 'authorization', 'token']) expect(serialized).not.toContain(value);
+  });
+
+  it('never records free-form headers, quoted JSON, JWTs, URLs or private paths', () => {
+    const input = [
+      `Authorization: "Bearer ${credential}"`, `{"api_key":"${credential}","prompt":"用户的私密问题"}`,
+      jwt, 'https://user:password@example.test/private?q=secret', '/Users/alice/private-folder/a.txt',
+      'C:\\Users\\Alice\\private-folder\\a.txt', 'file:///Users/alice/private-folder/a.txt', '../private-folder/a.txt',
+    ].join('\n');
+    const diagnostic = buildPiInitializationDiagnostic(new Error(input), { stage: input });
+    const serialized = JSON.stringify(diagnostic);
+    expect(diagnostic.stage).toBe('unknown');
+    expect(diagnostic.fingerprint).toMatch(/^[a-f0-9]{16}$/);
+    for (const value of [credential, jwt, '用户的私密问题', 'private-folder', 'example.test', 'Authorization', 'api_key', 'password'])
+      expect(serialized).not.toContain(value);
+  });
+
+  it('redacts literal and encoded sensitive values even inside trusted stack locations', () => {
+    const privateName = '私密配置-Alpha42';
+    const encodings = [
+      privateName, encodeURIComponent(privateName), encodeURIComponent(encodeURIComponent(privateName)),
+      Buffer.from(privateName).toString('base64url'),
+    ];
+    const error = withStack(new Error(privateName), encodings.map(value => `    at fn (${root}/${value}.ts:11:2)`).join('\n'));
+    const diagnostic = buildPiInitializationDiagnostic(error, { stage: 'resource-materialization', trustedRoots: [root], sensitiveValues: [privateName] });
+    expect(diagnostic.frames).toEqual(encodings.map(() => '[REDACTED_FRAME]'));
+    const serialized = JSON.stringify(diagnostic);
+    for (const value of encodings) expect(serialized).not.toContain(value);
+  });
+
+  it('keeps file-URL and Windows bundled code locations relative without logging their parent names', () => {
+    const error = withStack(new Error('private text'), [
+      '    at load (file:///Users/private-owner/My%20App/resources/pi/loader.mjs:42:9)',
+      '    at load (C:\\Users\\private-owner\\App\\resources\\pi\\loader.cjs:48:2)',
+      '    at load (file://remote-host/private/a.js:8:1)',
+      '    at load (./private/a.js:8:1)',
+      '    at load (/Users/private-owner/My App/resources/pi/../secret.js:8:1)',
+    ].join('\n'));
+    const diagnostic = buildPiInitializationDiagnostic(error, {
+      stage: 'worker-resources', trustedRoots: ['/Users/private-owner/My App/resources', 'C:\\Users\\private-owner\\App\\resources'],
+    });
+    expect(diagnostic.frames).toEqual(['root0/pi/loader.mjs:42:9', 'root1/pi/loader.cjs:48:2', '[REDACTED_FRAME]', '[REDACTED_FRAME]', '[REDACTED_FRAME]']);
+    const serialized = JSON.stringify(diagnostic);
+    for (const value of ['private-owner', 'Users', 'file:', 'remote-host', 'My%20App', 'C:']) expect(serialized).not.toContain(value);
+  });
+
+  it('rejects forged exception names and non-whitelisted codes without falling back to their raw values', () => {
+    const error = { name: credential, code: 'ERR_PRIVATE_API_KEY_' + credential, message: credential, publicError: { code: credential, message: jwt } };
+    const diagnostic = buildPiInitializationDiagnostic(error, { stage: 'provider-catalog' });
+    expect(diagnostic.exception).toBe('UnknownError');
+    expect(diagnostic.code).toBeUndefined();
+    expect(diagnostic.category).toBe('unclassified-initialization');
+    expect(JSON.stringify(diagnostic)).not.toContain(credential);
+    expect(JSON.stringify(diagnostic)).not.toContain(jwt);
+  });
+
+  it('does not execute error getters, coercion hooks or lazy stack formatting through hostile fields', () => {
+    const accessed: string[] = [];
+    const error = new Error('ordinary placeholder');
+    for (const key of ['name', 'message', 'stack', 'code', 'cause', 'publicError']) {
+      Object.defineProperty(error, key, { configurable: true, get() { accessed.push(key); throw new Error(credential); } });
+    }
+    Object.assign(error, {
+      toString() { accessed.push('toString'); return credential; },
+      [Symbol.toPrimitive]() { accessed.push('toPrimitive'); return credential; },
+    });
+    const diagnostic = buildPiInitializationDiagnostic(error, { stage: 'snapshot' });
+    expect(accessed).toEqual([]);
+    expect(diagnostic).toMatchObject({ stage: 'snapshot', exception: 'UnknownError' });
+    expect(JSON.stringify(diagnostic)).not.toContain(credential);
+  });
+
+  it('survives proxies which throw during structural inspection', () => {
+    const error = new Proxy({}, {
+      get() { throw new Error(credential); },
+      getOwnPropertyDescriptor() { throw new Error(credential); },
+      getPrototypeOf() { throw new Error(credential); },
+    });
+    expect(() => buildPiInitializationDiagnostic(error, { stage: 'registry' })).not.toThrow();
+    expect(JSON.stringify(buildPiInitializationDiagnostic(error, { stage: 'registry' }))).not.toContain(credential);
+  });
+
+  it('does not invoke inherited formatting getters or a replaced global stack formatter', () => {
+    let calls = 0;
+    const prototype = Object.create(Error.prototype);
+    Object.defineProperty(prototype, 'name', { get() { calls++; return credential; } });
+    const inherited = new Error('placeholder');
+    Object.setPrototypeOf(inherited, prototype);
+    expect(buildPiInitializationDiagnostic(inherited, { stage: 'snapshot' }).frames).toBeUndefined();
+    const prior = Object.getOwnPropertyDescriptor(Error, 'prepareStackTrace');
+    try {
+      Object.defineProperty(Error, 'prepareStackTrace', { configurable: true, value() { calls++; return credential; } });
+      const diagnostic = buildPiInitializationDiagnostic(new Error('placeholder'), { stage: 'snapshot' });
+      expect(diagnostic.frames).toBeUndefined();
+      expect(JSON.stringify(diagnostic)).not.toContain(credential);
+      expect(calls).toBe(0);
+    } finally {
+      if (prior) Object.defineProperty(Error, 'prepareStackTrace', prior);
+      else Reflect.deleteProperty(Error, 'prepareStackTrace');
+    }
+  });
+
+  it('bounds UTF-8 output, stack frames and cause chains and terminates cause cycles', () => {
+    const make = () => withStack(new Error('长'.repeat(40_000)),
+      Array.from({ length: 50 }, (_, index) => `    at initialize (${root}/pi/${'a'.repeat(120)}${index}.ts:999999:123)`).join('\n'));
+    const error = make();
+    const cause = make();
+    const third = make();
+    Object.assign(error, { cause });
+    Object.assign(cause, { cause: third });
+    Object.assign(third, { cause: error });
+    const diagnostic = buildPiInitializationDiagnostic(error, { stage: 'initial-hydration', trustedRoots: [root] });
+    expect(Buffer.byteLength(JSON.stringify(diagnostic))).toBeLessThanOrEqual(4_096);
+    expect(diagnostic.truncated).toBe(true);
+    let current = diagnostic;
+    for (let depth = 0; depth < 3; depth++) {
+      expect(current.frames?.length ?? 0).toBeLessThanOrEqual(6);
+      if (!current.causes?.[0]) break;
+      expect(depth).toBeLessThan(2);
+      current = current.causes[0];
+    }
+    expect(JSON.stringify(diagnostic)).not.toContain('长');
+  });
+
+  it('projects known public contract codes and primitive failures without error content', () => {
+    const diagnostic = buildPiInitializationDiagnostic({ publicError: { code: 'CODING_MIGRATION_MODEL_REQUIRED', message: credential } }, { stage: 'provider-input' });
+    expect(diagnostic).toMatchObject({ code: 'CODING_MIGRATION_MODEL_REQUIRED', category: 'provider-configuration' });
+    expect(JSON.stringify(diagnostic)).not.toContain(credential);
+    expect(buildPiInitializationDiagnostic(credential, { stage: 'prepare' })).toMatchObject({ exception: 'UnknownError', fingerprint: expect.stringMatching(/^[a-f0-9]{16}$/) });
+  });
+
+  it('locates a wrapped thread_open SDK failure without turning its private property into a logged field', () => {
+    const error = Object.assign(new Error(`Pi RPC thread_open failed: Cannot read properties of undefined (reading '${credential}')`), {
+      name: 'PiProcessError', code: 'PI_RPC_RESPONSE_ERROR',
+    });
+    const diagnostic = buildPiInitializationDiagnostic(error, { stage: 'worker-start' });
+    expect(diagnostic).toMatchObject({
+      exception: 'PiProcessError', code: 'PI_RPC_RESPONSE_ERROR', category: 'worker-protocol',
+      rpcOperation: 'thread_open', rpcFailureSignature: 'undefined-property',
+    });
+    expect(JSON.stringify(diagnostic)).not.toContain(credential);
+    expect(JSON.stringify(diagnostic)).not.toContain('Cannot read properties');
+  });
+
+  it.each([
+    { tail: `TypeError: Cannot read properties of null (reading '${credential}')`, signature: 'null-property' },
+    { tail: `${credential}.request is not a function`, signature: 'not-callable' },
+    { tail: `Cannot find module '/Users/private-user/${credential}.js'\nRequire stack:\n- /Users/private-user/${jwt}.js`, signature: 'module-not-found' },
+    { tail: `Cannot find package '${credential}' imported from https://private.example/${jwt}`, signature: 'module-not-found' },
+    { tail: `ENOENT: no such file or directory, open 'C:\\Users\\private-user\\${credential}.json'`, signature: 'missing-local-resource' },
+  ])('projects only a fixed signature from private RPC content: $signature', ({ tail, signature }) => {
+    const error = Object.assign(new Error(`Pi RPC get_state failed: ${tail}`), { name: 'PiProcessError', code: 'PI_RPC_RESPONSE_ERROR' });
+    const diagnostic = buildPiInitializationDiagnostic(error, { stage: 'initial-hydration' });
+    expect(diagnostic).toMatchObject({ rpcOperation: 'get_state', rpcFailureSignature: signature, exception: 'PiProcessError' });
+    const serialized = JSON.stringify(diagnostic);
+    for (const value of [credential, jwt, 'private-user', 'private.example', 'C:', 'Users', '.request']) expect(serialized).not.toContain(value);
+  });
+
+  it('does not interpret user text, unknown commands, embedded wrappers or unknown response patterns as RPC signatures', () => {
+    const wrapped = `Pi RPC thread_open failed: Cannot read properties of undefined (reading '${credential}')`;
+    for (const error of [
+      new Error(wrapped),
+      Object.assign(new Error('private prefix\n' + wrapped), { code: 'PI_RPC_RESPONSE_ERROR' }),
+      Object.assign(new Error(`Pi RPC ${credential} failed: ${wrapped}`), { code: 'PI_RPC_RESPONSE_ERROR' }),
+      { publicError: { code: 'PI_RPC_RESPONSE_ERROR' }, message: wrapped },
+    ]) {
+      const diagnostic = buildPiInitializationDiagnostic(error, { stage: 'worker-start' });
+      expect(diagnostic.rpcOperation).toBeUndefined();
+      expect(diagnostic.rpcFailureSignature).toBeUndefined();
+      expect(JSON.stringify(diagnostic)).not.toContain(credential);
+    }
+    const unknown = Object.assign(new Error(`Pi RPC thread_open failed: Authorization: Bearer ${credential} ${jwt}`), { code: 'PI_RPC_RESPONSE_ERROR' });
+    const diagnostic = buildPiInitializationDiagnostic(unknown, { stage: 'worker-start' });
+    expect(diagnostic.rpcOperation).toBe('thread_open');
+    expect(diagnostic.rpcFailureSignature).toBeUndefined();
+    expect(JSON.stringify(diagnostic)).not.toContain(credential);
+    expect(JSON.stringify(diagnostic)).not.toContain(jwt);
+  });
+
+  it('rejects trailing additions and overlong UTF-8 response tails while retaining only a recognized operation', () => {
+    for (const tail of [
+      `Cannot read properties of undefined (reading '${credential}')\n${jwt}`,
+      `${credential}${'a'.repeat(4_096)} is not a function`,
+      `${'私'.repeat(1_000)} is not a function`,
+    ]) {
+      const error = Object.assign(new Error(`Pi RPC thread_open failed: ${tail}`), { code: 'PI_RPC_RESPONSE_ERROR' });
+      const diagnostic = buildPiInitializationDiagnostic(error, { stage: 'worker-start' });
+      expect(diagnostic.rpcOperation).toBe('thread_open');
+      expect(diagnostic.rpcFailureSignature).toBeUndefined();
+      expect(Buffer.byteLength(JSON.stringify(diagnostic))).toBeLessThanOrEqual(4_096);
+      for (const value of [credential, jwt, '私']) expect(JSON.stringify(diagnostic)).not.toContain(value);
+    }
+  });
+});
diff --git a/tests/unit/pi-initialization-failure-logging.test.ts b/tests/unit/pi-initialization-failure-logging.test.ts
new file mode 100644
index 00000000..abcdb19d
--- /dev/null
+++ b/tests/unit/pi-initialization-failure-logging.test.ts
@@ -0,0 +1,159 @@
+// @vitest-environment node
+
+import { mkdtemp, mkdir, realpath, rm, symlink } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { logger } from '../../electron/utils/logger';
+import { createPiManagedWorkerOpener, type PiWorkerProcessAdapter } from '../../electron/coding-runtime/pi/runtime';
+import type { PiSessionRegistry } from '../../electron/coding-runtime/pi/session-registry';
+import type { PiManagedExtensionHost } from '../../electron/coding-runtime/pi/extension-host';
+import type { ModelToolRegistryPort } from '../../electron/coding-runtime/pi/model-tools/model-tool-registry';
+import type { PiWorkerProcessOptions } from '../../electron/coding-runtime/pi/worker-process';
+
+const roots: string[] = [];
+const TITLE = 'private conversation title';
+const PROMPT = 'private project instructions';
+const SECRET = 'private-provider-credential';
+
+afterEach(async () => {
+  vi.restoreAllMocks();
+  await Promise.all(roots.splice(0).map(root => rm(root, { recursive: true, force: true })));
+});
+
+async function fixture() {
+  const root = await mkdtemp(path.join(tmpdir(), 'makelore-init-diagnostic-'));
+  roots.push(root);
+  const projectPath = path.join(root, 'private-project');
+  await mkdir(projectPath);
+  const model = { accountId: 'account-a', modelId: 'model-a', thinkingLevel: 'off' as const };
+  const input = {
+    conversation: { conversationId: 'conversation-a', projectId: 'project-a', agentId: 'agent-a', title: TITLE,
+      model: { model, modelResolution: 'resolved' as const } },
+    generation: 7, revision: { provider: 1, resources: 1 },
+  };
+  const registry = {
+    prepare: vi.fn(async () => ({ projectPath,
+      conversation: { model, modelResolution: 'resolved', title: TITLE },
+      agent: { id: 'agent-a', name: 'private agent name', roleName: 'private role', prompt: PROMPT, skillIds: [] } })),
+    ensureBinding: vi.fn(async () => ({ session: { piSessionId: 'session-a', sessionKey: 'session-a' } })),
+  };
+  const dispose = vi.fn(async () => undefined);
+  const extensionHost = { registerWorker: vi.fn(async () => ({
+    allowedToolNames: [], extensionPath: path.join(root, 'extension.mjs'),
+    env: { PRIVATE_EXTENSION_SECRET: SECRET }, sensitiveValues: [SECRET], dispose,
+  })) };
+  const process = {
+    generation: 7, start: vi.fn(async () => undefined),
+    request: vi.fn(async () => ({ type: 'response', success: true, data: { sessionId: 'session-a' } })),
+    send: vi.fn(async () => undefined), subscribe: vi.fn(() => () => undefined),
+    subscribeInvalidation: vi.fn(() => () => undefined),
+    stop: vi.fn(async () => ({ mode: 'stdin-close' as const, code: 0, signal: null })),
+  };
+  const loadProviderInput = vi.fn(async () => ({ accounts: [{
+    id: 'account-a', vendorId: 'custom', label: 'fixture', authMode: 'api_key' as const,
+    apiProtocol: 'openai-completions' as const, baseUrl: 'https://provider.example/v1', model: 'model-a',
+    enabled: true, isDefault: true, createdAt: '2026-10-14T00:00:00Z', updatedAt: '2026-10-14T00:00:00Z',
+  }], modelSummaries: [] }));
+  const createProcess = vi.fn((_options: PiWorkerProcessOptions) => process as unknown as PiWorkerProcessAdapter);
+  const warn = vi.spyOn(logger, 'warn').mockImplementation(() => undefined);
+  const options = { registry: registry as unknown as PiSessionRegistry,
+    executablePath: 'electron', cliPath: 'pi-cli.js', userDataDir: path.join(root, 'user-data'),
+    bundledSkillsDir: path.resolve('resources/coding-skills'),
+    extensionHost: extensionHost as unknown as PiManagedExtensionHost,
+    loadProviderInput, resolveCredential: async () => SECRET,
+    createSessionKey: () => 'session-a', createProcess };
+  const failures = () => warn.mock.calls.filter(([tag]) => tag === '[PiWorkerInitializationFailed]');
+  return { root, input, registry, extensionHost, dispose, process, loadProviderInput, createProcess, warn, failures, options };
+}
+
+describe('managed worker initialization failure logs', () => {
+  it('records an early registry failure once without changing its public error or logging private input', async () => {
+    const f = await fixture();
+    const error = Object.assign(new Error(`prompt=${PROMPT} token=${SECRET} path=${f.root}`), {
+      publicError: { code: 'CODING_SESSION_UNREADABLE', message: 'Safe public message' },
+    });
+    f.registry.prepare.mockRejectedValue(error);
+    await expect(createPiManagedWorkerOpener(f.options)(f.input)).rejects.toBe(error);
+    expect(error.publicError).toEqual({ code: 'CODING_SESSION_UNREADABLE', message: 'Safe public message' });
+    expect(f.loadProviderInput).not.toHaveBeenCalled();
+    expect(f.createProcess).not.toHaveBeenCalled();
+    expect(f.failures()).toHaveLength(1);
+    expect(f.failures()[0][1]).toMatchObject({ workerGeneration: 7, diagnostic: { stage: 'registry', exception: 'Error' } });
+    const log = JSON.stringify(f.failures());
+    for (const privateValue of [TITLE, PROMPT, SECRET, f.root, 'conversation-a']) expect(log).not.toContain(privateValue);
+  });
+
+  it('captures provider preparation failure before any worker exists', async () => {
+    const f = await fixture();
+    const error = new TypeError('Cannot read properties of undefined (reading "providers")');
+    f.loadProviderInput.mockRejectedValue(error);
+    await expect(createPiManagedWorkerOpener(f.options)(f.input)).rejects.toBe(error);
+    expect(f.createProcess).not.toHaveBeenCalled();
+    expect(f.failures()).toHaveLength(1);
+    expect(f.failures()[0][1]).toMatchObject({ diagnostic: { stage: 'provider-input', exception: 'TypeError' } });
+  });
+
+  it('retains code locations behind a dependency symlink without exposing its absolute path', async () => {
+    const f = await fixture();
+    const packageRoot = path.join(f.root, 'private-install', 'pi-package');
+    const packageLink = path.join(f.root, 'bundled-pi');
+    await mkdir(path.join(packageRoot, 'dist'), { recursive: true });
+    await symlink(packageRoot, packageLink, 'dir');
+    const actualPackageRoot = await realpath(packageRoot);
+    const error = new Error(SECRET);
+    Object.defineProperty(error, 'stack', {
+      configurable: true, value: `Error: ${SECRET}\n    at load (${actualPackageRoot}/dist/session.js:22:4)`,
+    });
+    f.registry.prepare.mockRejectedValue(error);
+    await expect(createPiManagedWorkerOpener({ ...f.options,
+      cliPath: path.join(packageLink, 'dist', 'cli.js') })(f.input)).rejects.toBe(error);
+    expect(f.failures()).toHaveLength(1);
+    expect(f.failures()[0][1]).toMatchObject({ diagnostic: { frames: ['root3/dist/session.js:22:4'] } });
+    const log = JSON.stringify(f.failures());
+    for (const privateValue of [SECRET, f.root, packageRoot, actualPackageRoot, packageLink]) expect(log).not.toContain(privateValue);
+  });
+
+  it('logs initial state failure before cleanup, preserving the rejection and cleanup calls', async () => {
+    const f = await fixture();
+    const order: string[] = [];
+    const error = new TypeError(`secret=${SECRET} ${PROMPT} ${f.root}`);
+    f.warn.mockImplementation(() => { order.push('log'); });
+    f.process.request.mockRejectedValue(error);
+    f.process.stop.mockImplementation(async () => { order.push('stop'); return { mode: 'stdin-close', code: 0, signal: null }; });
+    f.dispose.mockImplementation(async () => { order.push('dispose'); });
+    await expect(createPiManagedWorkerOpener(f.options)(f.input)).rejects.toBe(error);
+    expect(f.process.start).toHaveBeenCalledOnce();
+    expect(f.process.stop).toHaveBeenCalledWith('open_failure');
+    expect(f.dispose).toHaveBeenCalledOnce();
+    expect(order).toEqual(['log', 'stop', 'dispose']);
+    expect(f.failures()).toHaveLength(1);
+    expect(f.failures()[0][1]).toMatchObject({ diagnostic: { stage: 'initial-hydration', exception: 'TypeError' } });
+    const log = JSON.stringify(f.failures());
+    for (const privateValue of [TITLE, PROMPT, SECRET, f.root]) expect(log).not.toContain(privateValue);
+  });
+
+  it('retains the original diagnostic when extension cleanup masks an initialization error', async () => {
+    const f = await fixture();
+    const original = new TypeError('Required extension function is not a function');
+    const cleanup = new RangeError('cleanup failure');
+    const modelDispose = vi.fn(() => { throw cleanup; });
+    f.extensionHost.registerWorker.mockRejectedValue(original);
+    const opener = createPiManagedWorkerOpener({ ...f.options,
+      modelToolRegistry: { registerWorker: () => ({ tools: [], dispose: modelDispose }) } as unknown as ModelToolRegistryPort });
+    await expect(opener(f.input)).rejects.toBe(cleanup);
+    expect(modelDispose).toHaveBeenCalledOnce();
+    expect(f.failures()).toHaveLength(1);
+    expect(f.failures()[0][1]).toMatchObject({ diagnostic: { stage: 'extension-registration', exception: 'TypeError' } });
+    expect(f.createProcess).not.toHaveBeenCalled();
+  });
+
+  it('keeps the original initialization error even if diagnostic output throws', async () => {
+    const f = await fixture();
+    const original = new Error('original failure');
+    f.registry.prepare.mockRejectedValue(original);
+    f.warn.mockImplementation(() => { throw new Error('logger failed'); });
+    await expect(createPiManagedWorkerOpener(f.options)(f.input)).rejects.toBe(original);
+    expect(f.failures()).toHaveLength(1);
+  });
+});

From d3b0d411ca32b7f8ea72c87dcfe37c02e6692b45 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 14:57:30 +0800
Subject: [PATCH 10/18] Distinguish home and parent navigation icons

---
 .../20261014-navigation-icon-93c4a6e8.md      | 53 +++++++++++++++++++
 README.md                                     |  4 +-
 src/components/layout/ModuleSwitcher.tsx      |  6 +--
 src/pages/CloudAgents/DraftEditor.tsx         |  2 +-
 src/pages/Plugins/index.tsx                   |  2 +-
 src/pages/ProjectConfiguration/index.tsx      |  4 +-
 src/pages/Settings/index.tsx                  |  2 +-
 tests/e2e/cloud-agent-home.spec.ts            |  4 ++
 tests/e2e/main-navigation.spec.ts             |  3 ++
 tests/unit/module-navigation.test.tsx         |  2 +-
 10 files changed, 72 insertions(+), 10 deletions(-)
 create mode 100644 .project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md

diff --git a/.project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md b/.project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md
new file mode 100644
index 00000000..5068b3d3
--- /dev/null
+++ b/.project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md
@@ -0,0 +1,53 @@
+# Task: Distinguish home and parent navigation in Agents and Code
+
+## Identity
+
+- Task ID: 20261014-navigation-icon-93c4a6e8
+- Mode: Feature
+- Branch: codex/20261014-navigation-icon-93c4a6e8-navigation-icon
+- Worktree: /Users/chillishark/Makelore 麦洛/.codex-worktrees/makelore/20261014-navigation-icon-93c4a6e8
+- Base commit: af639267198d908e43bcb0bd243e86be2a533427
+- Owner: codex-root
+- Status: In Progress
+
+## Scope
+
+- Distinguish global home from contextual back navigation in Agents and Code with the existing Lucide icon set. Global module return uses a house and “返回首页”; local configuration, chat, settings and plugin return arrows use hover text “返回上一级”.
+- Update the current temporary Renderer while retaining its previously prepared WeChat card-name edit.
+
+## Intent And Constraints
+
+- Explicit user decision: icons only; no visible destination text added. Existing routes, accessible destination labels, dimensions, keyboard handling and unsaved/pending operation guards remain intact.
+- Keep Main PID 35142, Host API port 58003, bundle, bootstrap and profile; no cloud mutations or profile/credential reads. No canonical documentation writes, main merge, push or deployment.
+
+## Project Context Loaded
+
+- Task ID: 20261014-navigation-icon-93c4a6e8; mode Feature; matching branch and absolute worktree above. Ownership start/status passed; base af639267 is the documentation successor of tested WeChat-name product f1dabdb.
+- Read: read-before-planning, memory-index, own task record, project-positioning, current-state, decision-index, system-overview, business-rules, success-criteria, personal-cloud-agents ADR, community-collaboration, commitments and stale-items. Required context was reviewed by root and the read-only coordination agent.
+- Project goal: project-centered creation with Main-owned authenticated APIs; Chinese light visual system. Integrated snapshot predates current trial and several accepted UI changes; runtime/source receipts take precedence for actual delivery state.
+- Other active local tasks: 79 peer records / 237 scope, intent and promotion sections read. Sidebar/layout/Code configuration peers overlap paths but preserve global return and contextual navigation; no semantic conflict. Child-language-skill placeholder has unknown scope but is not a navigation dependency. No foreign source changes adopted.
+- Decisions: retain manual Agent sidebar control and original navigation protection; current user explicitly chooses house/home and arrow/parent icons plus exact hover text. No architecture or identity changes.
+- Likely files: ModuleSwitcher, DraftEditor, ProjectConfiguration, Settings, Plugins and existing navigation fixtures.
+- Gate result: Passed. Root planning uses isolated owned source, never the product snapshots or peer worktrees.
+
+## Plan
+
+- Change house icon and local arrow hover titles, retain handlers and accessible target labels.
+- Update focused existing navigation assertions; run relevant checks and default full Vite build.
+- Prepare immutable file-only Renderer delivery preserving pending name edit, refresh and inspect actual UI before marking delivery verified.
+
+## Outcome
+
+- Not completed.
+
+## Verification
+
+- Not run.
+
+## Follow-ups
+
+- None recorded.
+
+## Promotion Candidates
+
+- None recorded.
diff --git a/README.md b/README.md
index 93ae0a51..050be0e0 100644
--- a/README.md
+++ b/README.md
@@ -41,7 +41,7 @@ Makelore 是一个面向软件、视觉创作、智能机器人与个人云智
 - macOS 窗口按钮：红色关闭当前窗口，全屏时先退出全屏再关闭；黄色最小化，绿色保留原生缩放/全屏行为。关窗后应用和进行中的后台任务继续运行，点击 Dock、托盘或菜单可重新打开窗口；`Cmd+Q` 退出应用。
 - 桌面文本右键菜单：主 Renderer 窗口由 Electron Main 提供原生“剪切、复制、粘贴、全选”操作；菜单只在可编辑区域或已有文本选择时出现，普通空白区域不显示，也不向 Renderer 暴露剪贴板 IPC。
 - AI 编程核心对话运行时：Electron Main 按需启动一个长驻 Pi Agent Server，同一进程内为每条 Conversation 建立独立的 Runtime、Session、凭证视图、扩展上下文和 JSONL 通道，同时复用 Pi 模块与进程启动成本；Server 异常退出时所有旧通道统一失效，下一次恢复只重启一个 Server。正式包中的 Agent Server 从明确传入的 `resources/pi-runtime` 根定位依赖清单与包入口，不从脚本所在目录或应用 `node_modules` 猜测解析。Renderer 不直接启动或调用 Pi，也不读取其 wire 类型。项目与 Conversation 元数据先从本地读取，选中对话后才按需准备对应逻辑线程；输入框不等待运行时准备完成。同一助手工具批次中，会取得项目写租约的 `bash`、`edit`、`write` 与动态产品工具按顺序执行，避免批次在命令启动前自锁；纯只读工具仍可并行。子 Agent 仍使用独立的短生命周期进程，以保留并发配额、故障和写入边界；macOS 上两类后台进程都使用 Electron 自带的 Helper，不在 Dock 中创建额外应用图标。
-- AI 编程默认入口：进入 Code 后保持在 `/chat`。顶部返回箭头与侧栏收起图标同排，与右侧项目/会话名称对齐；折叠时保留返回和展开入口。macOS 为原生窗口按钮保留安全空间，窄侧栏仍可使用。左侧不再展示麦洛品牌与说明语，“新建项目”置于原品牌区，“我的项目”与列表上移到原新建项目区域；“作品广场”与“新建项目”沿用 Agent 的彩色图标徽章＋文字样式，不再使用整行白色块与厚阴影，“作品广场”移至底部、紧邻账户按钮上方；“我的项目”和项目列表紧接新建项目，列表沿用图标与文字布局及浅色选中反馈；从项目菜单进入的配置页及插件资源页复用相同的左侧工作栏，返回与收起按钮、项目和会话列表、底部作品广场与账户的位置保持一致，并沿用当前宽度和收起状态；配置正文、顶部项目名称与配置页自身的返回操作保留。尚未选择本地项目时，页面以麦洛 M 标识和居中引导语建立焦点，下方提供独立的“新增项目”主操作以及可横向浏览、直接进入的已有项目卡片；项目创建和进入仍复用侧栏现有流程。已有项目的新 Conversation 在可编辑 Composer 上方沿用同一品牌引导，第一条消息出现后切换为正常时间线。
+- AI 编程默认入口：进入 Code 后保持在 `/chat`。顶部房子图标与侧栏收起图标同排，与右侧项目/会话名称对齐；折叠时保留返回和展开入口。macOS 为原生窗口按钮保留安全空间，窄侧栏仍可使用。左侧不再展示麦洛品牌与说明语，“新建项目”置于原品牌区，“我的项目”与列表上移到原新建项目区域；“作品广场”与“新建项目”沿用 Agent 的彩色图标徽章＋文字样式，不再使用整行白色块与厚阴影，“作品广场”移至底部、紧邻账户按钮上方；“我的项目”和项目列表紧接新建项目，列表沿用图标与文字布局及浅色选中反馈；从项目菜单进入的配置页及插件资源页复用相同的左侧工作栏，返回与收起按钮、项目和会话列表、底部作品广场与账户的位置保持一致，并沿用当前宽度和收起状态；配置正文、顶部项目名称与配置页自身的返回操作保留。尚未选择本地项目时，页面以麦洛 M 标识和居中引导语建立焦点，下方提供独立的“新增项目”主操作以及可横向浏览、直接进入的已有项目卡片；项目创建和进入仍复用侧栏现有流程。已有项目的新 Conversation 在可编辑 Composer 上方沿用同一品牌引导，第一条消息出现后切换为正常时间线。
 - AI 编程历史与配额反馈：Pi 上下文压缩不删除用户可见的 active-branch 历史，压缩摘要保持 Main-private；Renderer 首次渲染最近 120 个节点，向上滚动时按 100 个节点追加更早内容并保持阅读位置。Main 精确识别 `token_point_balance_exhausted` / `词元点数余额不足`，只向 Renderer 投影不可重试的稳定配额错误和安全中文提示，重开会话后仍可见且不暴露上游原始错误或 request id。
 - 账号词元点数：左下角账户菜单显示本人永久余额和预占；“词元点数与充值”入口暂时隐藏，充值、充值订单与分页收支记录的既有实现保留。真正新注册赠送 100 点，1 元充值 50 点，永久有效；旧账户不补送，旧会员/订阅/周额度/重置卡入口已移除。家长为孩子充值时登录孩子的账号，页面显示当前昵称和账号，点数进入该账号自己的钱包；无需将孩子身份改为家长。当前有效账号可给本人充值，青少年可查看自己的精确余额；使用他人共享钱包时仅显示可用状态，不显示付款人的余额或记录。Main 持有凭据并转发充值请求；付款结果未知时沿用原请求并核查原订单，只有服务端确认才显示到账。扫码信息缺失时可到网页账户页继续原订单，付款来源也由网页账户页管理，充值不会自动切换共享/个人来源。需配套部署 Works Square 当前账号充值资格更新（本次无需新迁移，原永久点数基础为 0094）；本地模拟验收不代表真实支付通过。
 - 桌面性能策略：应用窗口使用不透明浅色表面并默认保留硬件合成；仅在显式安全模式或短时间内重复 GPU 进程崩溃时启用软件渲染，并把故障原因保存在用户数据目录。启动关键路径只创建本地应用壳，认证、代理、同步、更新和遥测在首帧后延迟初始化；开发版可通过 `app:performance` 快照观察 GPU、进程、WebContents、事件循环与 Renderer Long Task 聚合指标。
@@ -70,6 +70,8 @@ Makelore 是一个面向软件、视觉创作、智能机器人与个人云智
 
 微信卡片名称可点击名称旁的铅笔修改，支持保存、取消、Enter 保存与 Escape 取消。备注名按当前账号与微信账号 ID 保存在本机，刷新或重新绑定后保留；不修改真实微信昵称或云端名称，不跨设备同步。保存失败保留原名称与编辑内容，可重试。
 
+首页入口使用房子图标，悬停提示“返回首页”；智能体聊天/调整及 Code 配置、设置、插件页面的上级返回保留箭头，悬停提示“返回上一级”。既有目的地、键盘操作和未保存修改的离开保护保持。
+
 ## 安装与开发
 
 项目使用 `package.json` 中固定版本的 pnpm。
diff --git a/src/components/layout/ModuleSwitcher.tsx b/src/components/layout/ModuleSwitcher.tsx
index 52113df5..18122be8 100644
--- a/src/components/layout/ModuleSwitcher.tsx
+++ b/src/components/layout/ModuleSwitcher.tsx
@@ -1,4 +1,4 @@
-import { ArrowLeft } from 'lucide-react';
+import { Home } from 'lucide-react';
 import { useLocation, useNavigate } from 'react-router-dom';
 import { cn } from '@/lib/utils';
 import { AI_MODULE_SELECTION_PATH, aiModules, getAiModuleForPath } from '@/lib/ai-modules';
@@ -34,10 +34,10 @@ export function ModuleSwitcher({ sidebarCollapsed, compact = false, toolbar = fa
           agentReturn && 'rounded-full bg-background/70 text-brand',
         )}
       >
-        <ArrowLeft
+        <Home
           data-testid="sidebar-module-return-icon"
           aria-hidden="true"
-          className={cn('h-4 w-4 shrink-0 -translate-y-px transition-[color,transform] duration-150 group-hover:-translate-x-0.5 group-hover:text-brand', agentReturn ? 'text-brand' : 'text-muted-foreground')}
+          className={cn('h-4 w-4 shrink-0 -translate-y-px transition-colors duration-150 group-hover:text-brand', agentReturn ? 'text-brand' : 'text-muted-foreground')}
         />
         {!sidebarCollapsed && !iconOnly ? <span className={cn('min-w-0 whitespace-nowrap leading-4', toolbar && 'truncate')}>{activeModuleLabel}</span> : null}
       </button>
diff --git a/src/pages/CloudAgents/DraftEditor.tsx b/src/pages/CloudAgents/DraftEditor.tsx
index 64dccb6b..d77e73c3 100644
--- a/src/pages/CloudAgents/DraftEditor.tsx
+++ b/src/pages/CloudAgents/DraftEditor.tsx
@@ -125,7 +125,7 @@ export function DraftEditor({ initial, recent, onBack, onSaved, startingPrompt,
   return <CloudPendingContext.Provider value={pending.report}><section className={`agent-desktop${tab === 'chat' ? ' agent-chat-editor' : ''}`} data-testid="cloud-agent-editor"
     data-configuration-settled={!dirty && !busy && !publication.pending && !publication.error && !remote && publication.appliedRevision === saved.draft_revision}>
     <header className={`agent-workspace-header${tab === 'chat' ? ' agent-chat-workspace-header' : ''}`}>
-      <Button variant="ghost" size="icon" className="h-10 w-10 shrink-0" aria-label={tab === 'chat' ? '返回智能体列表' : '我的智能体'} disabled={busy}
+      <Button variant="ghost" size="icon" className="h-10 w-10 shrink-0" aria-label={tab === 'chat' ? '返回智能体列表' : '我的智能体'} title="返回上一级" disabled={busy}
         onClick={() => dirty || hasPending ? setLeaving(true) : onBack()}><ArrowLeft className="h-4 w-4" /></Button>
       {tab === 'chat' ? <>
         <CloudAvatar src={saved.icon_url} name={saved.name} identity={saved.slug} className="agent-chat-header-avatar" />
diff --git a/src/pages/Plugins/index.tsx b/src/pages/Plugins/index.tsx
index 3e52b2c7..d51e601a 100644
--- a/src/pages/Plugins/index.tsx
+++ b/src/pages/Plugins/index.tsx
@@ -213,7 +213,7 @@ export function PluginsView(props: PluginsViewProps) {
               size="icon"
               data-testid="project-plugins-back-button"
               aria-label="返回项目配置"
-              title="返回项目配置"
+              title="返回上一级"
               onClick={props.onBackToProjectSettings}
               className="mt-0.5 h-8 w-8 shrink-0 text-muted-foreground hover:bg-surface-subtle hover:text-foreground"
             >
diff --git a/src/pages/ProjectConfiguration/index.tsx b/src/pages/ProjectConfiguration/index.tsx
index 8e5d07b6..2d50ff48 100644
--- a/src/pages/ProjectConfiguration/index.tsx
+++ b/src/pages/ProjectConfiguration/index.tsx
@@ -34,7 +34,7 @@ function ResourceCard({ id, icon, title, subtitle, onClick }: { id: string; icon
 }
 
 function DrawerFrame({ title, desc, onClose, children, closeLabel = '关闭', closeIcon = 'close' }: { title: string; desc: string; onClose: () => void; children: React.ReactNode; closeLabel?: string; closeIcon?: 'close' | 'back' }) {
-  const closeButton = <Button type="button" variant="ghost" size="icon" onClick={onClose} aria-label={closeLabel} title={closeLabel} className="relative z-10 shrink-0">{closeIcon === 'back' ? <ArrowLeft className="h-4 w-4" /> : <X className="h-4 w-4" />}</Button>;
+  const closeButton = <Button type="button" variant="ghost" size="icon" onClick={onClose} aria-label={closeLabel} title={closeIcon === 'back' ? '返回上一级' : closeLabel} className="relative z-10 shrink-0">{closeIcon === 'back' ? <ArrowLeft className="h-4 w-4" /> : <X className="h-4 w-4" />}</Button>;
   return <div className="flex min-h-0 flex-1 flex-col"><div className="glass-surface drawer-motion-header flex items-center justify-between gap-3 border-b border-border/70 bg-background px-5 py-4"><div className="min-w-0 flex-1"><SheetTitle className="text-lg font-semibold">{title}</SheetTitle><SheetDescription className="mt-1 text-sm font-medium text-muted-foreground">{desc}</SheetDescription></div>{closeIcon === 'back' ? closeButton : <SheetClose asChild>{closeButton}</SheetClose>}</div><div className="drawer-motion-body min-h-0 flex-1 overflow-auto p-5">{children}</div></div>;
 }
 
@@ -171,7 +171,7 @@ export function ProjectConfiguration() {
   return <main className="-m-5 flex min-h-[calc(100%+2.5rem)] min-h-0 flex-col overflow-auto bg-background p-4 text-foreground sm:-m-6 sm:min-h-[calc(100%+3rem)]" data-testid="project-configuration-page">
     <div className="mx-auto flex min-h-0 w-full max-w-7xl flex-1 flex-col gap-3">
       <div className="config-motion-title flex items-center gap-2">
-        <Button type="button" variant="ghost" size="icon" data-testid="project-configuration-back-button" aria-label="返回" title="返回" onClick={handleBack} className="h-8 w-8 shrink-0 text-muted-foreground hover:bg-surface-subtle hover:text-foreground">
+        <Button type="button" variant="ghost" size="icon" data-testid="project-configuration-back-button" aria-label="返回" title="返回上一级" onClick={handleBack} className="h-8 w-8 shrink-0 text-muted-foreground hover:bg-surface-subtle hover:text-foreground">
           <ArrowLeft className="h-4 w-4" />
         </Button>
         <h1 className="text-xl font-semibold">项目配置</h1>
diff --git a/src/pages/Settings/index.tsx b/src/pages/Settings/index.tsx
index a7e980fd..d346877c 100644
--- a/src/pages/Settings/index.tsx
+++ b/src/pages/Settings/index.tsx
@@ -257,7 +257,7 @@ export function Settings() {
     <main data-testid="settings-page" data-settings-dirty={proxySettingsDirty || savingProxy} className="min-h-full bg-background">
       <div className="mx-auto flex max-w-4xl flex-col gap-8 px-8 py-8">
         <div className="flex items-center gap-3">
-          <Button type="button" variant="ghost" aria-label="返回上一页" data-testid="settings-back-button"
+          <Button type="button" variant="ghost" aria-label="返回上一页" title="返回上一级" data-testid="settings-back-button"
             className="shrink-0 gap-2" onClick={() => {
               if (!canLeaveCurrentPage()) { toast.info('请先保存或还原当前修改，再返回。'); return; }
               navigate(getSettingsReturnPath(location.state));
diff --git a/tests/e2e/cloud-agent-home.spec.ts b/tests/e2e/cloud-agent-home.spec.ts
index b0db44d6..93441cdc 100644
--- a/tests/e2e/cloud-agent-home.spec.ts
+++ b/tests/e2e/cloud-agent-home.spec.ts
@@ -150,10 +150,14 @@ test('Agent cards open conversation, adjustment and unfinished creation explicit
 
     await ready.getByRole('button', { name: '和它聊聊', exact: true }).click();
     await expect(page.getByRole('region', { name: '智能体对话', exact: true })).toBeVisible();
+    await expect(page.getByTestId('sidebar-module-return-icon')).toHaveClass(/lucide-house/);
+    await expect(page.getByRole('button', { name: '返回首页', exact: true })).toHaveAttribute('title', '返回首页');
+    await expect(page.getByTestId('cloud-agent-editor').getByRole('button', { name: '返回智能体列表', exact: true })).toHaveAttribute('title', '返回上一级');
     await expect(page.getByTestId('cloud-agent-editor').getByRole('button', { name: '聊天', exact: true })).toHaveCount(0);
     await page.getByTestId('cloud-agent-editor').getByRole('button', { name: '返回智能体列表', exact: true }).click();
     await expect(ready).toBeVisible();
     await ready.getByRole('button', { name: '调整', exact: true }).click();
+    await expect(page.getByTestId('cloud-agent-editor').getByRole('button', { name: '我的智能体', exact: true })).toHaveAttribute('title', '返回上一级');
     await expect(page.getByRole('tab', { name: '介绍与提示词', exact: true })).toHaveAttribute('aria-selected', 'true');
     await expect(page.getByTestId('cloud-agent-editor').getByRole('button', { name: /^(聊天|自动任务|使用与接入)$/ })).toHaveCount(0);
     await expect(page.getByTestId('cloud-agent-editor').getByRole('button', { name: '修改头像', exact: true })).toBeVisible();
diff --git a/tests/e2e/main-navigation.spec.ts b/tests/e2e/main-navigation.spec.ts
index 7362e13f..141e96f0 100644
--- a/tests/e2e/main-navigation.spec.ts
+++ b/tests/e2e/main-navigation.spec.ts
@@ -406,6 +406,7 @@ test.describe('Makelore module navigation without setup flow', () => {
       await expect(moduleReturn).toHaveAttribute('aria-label', '返回首页');
       await expect(moduleReturn).toHaveAttribute('title', '返回首页');
       await expect(page.getByTestId('sidebar-module-return-icon')).toBeVisible();
+      await expect(page.getByTestId('sidebar-module-return-icon')).toHaveClass(/lucide-house/);
       await expect(sidebar.locator('.classroom-brand')).toHaveCount(0);
       await expect(sidebar).not.toContainText('把脑洞变成作品');
       const returnBox = await moduleReturn.boundingBox();
@@ -528,6 +529,8 @@ test.describe('Makelore module navigation without setup flow', () => {
       await expect(moduleReturn).toBeVisible();
       const projectBack = page.getByTestId('project-configuration-back-button');
       await expect(projectBack).toBeVisible();
+      await expect(projectBack).toHaveAttribute('title', '返回上一级');
+      await expect(projectBack.locator('svg')).toHaveClass(/lucide-arrow-left/);
       await page.mouse.move(1000, 500);
       await expect.poll(readCodeChrome).toEqual(chatChrome);
       await expect(sidebar).toHaveCSS('background-color', 'rgb(243, 247, 251)');
diff --git a/tests/unit/module-navigation.test.tsx b/tests/unit/module-navigation.test.tsx
index 433ca5a4..25986a56 100644
--- a/tests/unit/module-navigation.test.tsx
+++ b/tests/unit/module-navigation.test.tsx
@@ -240,7 +240,7 @@ describe('AI module navigation', () => {
     expect(screen.getByTestId('sidebar-module-switcher-trigger')).toHaveTextContent('绘画 Canvas');
     expect(screen.getByTestId('sidebar-module-switcher-trigger')).toHaveAttribute('aria-label', '返回首页');
     expect(screen.getByTestId('sidebar-module-switcher-trigger')).toHaveClass('p-3');
-    expect(screen.getByTestId('sidebar-module-return-icon')).toHaveClass('lucide-arrow-left', '-translate-y-px');
+    expect(screen.getByTestId('sidebar-module-return-icon')).toHaveClass('lucide-house', '-translate-y-px');
     expect(screen.queryByTestId('sidebar-module-switcher-menu')).not.toBeInTheDocument();
 
     fireEvent.click(screen.getByTestId('sidebar-module-switcher-trigger'));

From bec42627f5016e7f3b3fcf8c4014545d63fb1da3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 14:59:54 +0800
Subject: [PATCH 11/18] fix: guide coding model selection before sending

---
 ...20261014-code-model-onboarding-01e8cbed.md |  70 ++++++
 README.md                                     |   2 +
 .../coding-runtime/conversation-service.ts    |  67 +++++-
 src/pages/Chat/CodingChatPanel.tsx            |  96 +++++++-
 src/pages/Chat/CodingComposer.tsx             |  57 ++++-
 .../Chat/CodingComposerRuntimeControls.tsx    | 137 +++++++----
 src/stores/coding-conversations.ts            |   5 +-
 src/stores/providers.ts                       |   7 +-
 tests/e2e/pi-coding-first-chat.spec.ts        | 166 +++++++++++--
 tests/unit/coding-chat-panel.test.tsx         | 226 +++++++++++++++++-
 tests/unit/coding-core-routes.test.ts         | 215 ++++++++++++++++-
 tests/unit/coding-feature-ui.test.tsx         |  53 ++++
 12 files changed, 1000 insertions(+), 101 deletions(-)
 create mode 100644 .project-docs/30-worklog/tasks/20261014-code-model-onboarding-01e8cbed.md

diff --git a/.project-docs/30-worklog/tasks/20261014-code-model-onboarding-01e8cbed.md b/.project-docs/30-worklog/tasks/20261014-code-model-onboarding-01e8cbed.md
new file mode 100644
index 00000000..b88b5363
--- /dev/null
+++ b/.project-docs/30-worklog/tasks/20261014-code-model-onboarding-01e8cbed.md
@@ -0,0 +1,70 @@
+# Task: Guide model selection before new coding conversation submission
+
+## Identity
+
+- Task ID: 20261014-code-model-onboarding-01e8cbed
+- Mode: Feature
+- Branch: codex/20261014-code-model-onboarding-01e8cbed-code-model-onboarding
+- Worktree: /Users/chillishark/Makelore 麦洛/.codex-worktrees/makelore/20261014-code-model-onboarding-01e8cbed
+- Base commit: f34e651774beb6a2a213b5711f2ffb887d22d4b7
+- Owner: codex
+- Status: Ready for Integration
+
+## Scope
+
+- Show model selection as normal preparation before Code conversation submission, including saved new conversations and provisional drafts. Provide direct model choices, preserve drafts/attachments, prevent prompt submission until configured, and retain valid defaults.
+
+## Intent And Constraints
+
+- User approved the proposed interaction. Keep the Makelore light visual system, existing provider-qualified model identity and Main prompt/auth validation. Do not auto-send, rewrite project defaults/prompts/Skills, restore conversation settings, change teacher behavior or move/delete user history.
+- This task implements/tests source only; no running-app update, real model invocation, merge/push or other-worktree cleanup requested.
+
+## Project Context Loaded
+
+Task context:
+- Official feature start/status verified task id01e8cbed, absolute worktree/branch, owner and latest fetched origin/main base f34e651774beb6a2a213b5711f2ffb887d22d4b7. Primary unrelated dirty documents untouched.
+- All77 peers/231 required sections read/hash checked; no concrete semantic conflict or missing record. Preserve deletion-cleared selection, drafts, hidden metadata and model-independent preview recovery.
+
+Read:
+- Read-before-planning, memory-index, own record and AGENTS. Canonical positioning/current-state/decisions/architecture/domain/evidence/reflection/commitments/stale context reused from prior completed same-base tasks; canonical diff remains empty. Relevant ADR006 model resolution and ADR teacher scope rechecked.
+- Main conversation service/history/Pi preparation, provider/model option stores, sidebar selection/toast path, panel/composer/runtime controls and existing unit/native Electron fixtures.
+- Design skill and design-system/React UX searches: apply accessible focus/labels/neutral preparation; generic dark/marketing/font recommendations conflict with existing light product and are not applied.
+
+Relevant understanding:
+- Opening a missing-model conversation currently prepares Pi, rejects and surfaces both sidebar toast and composer retry. Provisional draft has no selector; current canSend does not validate model.
+- Main can read persisted history without a model session. Preparing/accepting a real prompt still requires a valid model. Provider initial empty array is not confirmed empty catalog; loading/error must be distinguished.
+- Files: conversation-service, CodingChatPanel/CodingComposer/runtime controls, provider loading state, focused tests and README. No new model/Provider backend contract or teacher changes.
+
+Gate result: Passed.
+
+## Plan
+
+1. Return read-only conversation history/metadata for unresolved model selection without opening Pi, retaining genuine errors and prompt validation.
+2. Add neutral preparation guidance with one-level model picker; preserve per-project provisional model choice without creating/sending a conversation until the user sends. Block submit until model saves/refreshes; keep valid defaults and draft/attachments.
+3. Verify loading/empty/failed catalogs, keyboard selection, error recovery, no auto-send, conversation/project isolation and existing default path through focused units and native Electron screenshots; run typecheck/lint/build and independent review.
+
+## Outcome
+
+- Main getSnapshot reads durable history/metadata normally for unresolved models, without preparing Pi. Only known model-selection preparation failures project a required model; persisted old choice remains unchanged. Active/uncertain workers retain runtime authority. Late history re-reads metadata and revalidates changed models, preserving real auth/start/history failures instead of returning stale required state. Prompt/model/provider validation remains unchanged.
+- Added neutral '选一个模型，开始聊聊' guidance and one-level model menu, separate catalog loading/failed/confirmed-empty states with appropriate refresh/config actions. Provider initialized state distinguishes initial unknown from confirmed empty. A valid Main-resolved default remains usable even if not listed by the narrower picker catalog.
+- Both saved conversations and provisional drafts can select models. Provisional selection is local and scoped by account/project/agent; it neither creates a conversation nor sends. First manual send creates/persists its selected model before prompt; the created conversation and model mutation are guarded against repeated sends during save/refresh. Existing project default and hidden configuration are preserved.
+- Input/attachment drafts remain available through selection. First-send text is frozen at the click; newer edits remain as a new draft, including edits while create/save/refresh wait. Successful submit removes only sent attachments. Model save + authoritative refresh clears only the captured draft's model-choice error, without hiding unrelated errors or uncertain work. Same-scope successful keyboard selection restores textarea focus; switching scopes does not steal focus.
+- Retained entry error codes for precise model-guidance projection, updated README and meaningful unit/native regressions. Independent review's signature, stale-error, draft-intent, catalog-validity and late-history findings were fixed and rechecked; final review approved with no remaining blocker.
+
+## Verification
+
+- Pinned pnpm10.33.4 used with existing ignored dependency link. Standard typecheck, scoped ESLint, production Renderer/Main/Preload/utility build and diff check passed. Logs /tmp/makelore-code-model-onboarding-types-01e8cbed.log, /tmp/makelore-code-model-onboarding-lint-01e8cbed.log, /tmp/makelore-code-model-onboarding-build-01e8cbed.log.
+- 242 related units passed: Main core routes44 (includes deferred-history auth/start race), panel/runtime UI61 (includes A-send/B-draft, catalog-external valid default, save/refresh pending, no auto-send and focus), store/workspace/facade/voice/model-options/work-preview112, provider regressions25. Logs /tmp/code-model-onboarding-units-reviewed-01e8cbed.log, /tmp/makelore-code-model-onboarding-regression-01e8cbed.log, /tmp/makelore-code-model-onboarding-providers-01e8cbed.log; backend agent ran44 after reproducing and fixing the two late-history failures.
+- Isolated native Electron3/3 passed: removed saved model replacement with keyboard focus, saved missing model with deferred save/refresh and retained text/images, provisional choice without API/create followed by explicit create→model→prompt. No captured prompt on model selection. Root visually inspected direct picker and completed-selection screenshots. Log /tmp/code-model-onboarding-electron-01e8cbed/run.log; screenshots under results/pi-coding-first-chat-missi-0bb00-nishes-without-auto-sending/ in that directory.
+- Native test generated Main entry restored byte-for-byte, SHA ad83191846f6f9e58fd1f0237a04a90e8e358344f74b89cad5a19b0cbdecdbc9; test app processes exited. Test fixtures use isolated data/fake provider host, not the real trial/account/paid model.
+- Additional strict Main module-closure check reports one existing TS2322 at unchanged electron/coding-projects/project-service.ts:217 (optional projectId). Running the same strict check directly on that unchanged module reproduces the identical diagnostic; its entire coding-project/shared dependency sources have no base diff. No changed-file diagnostic; this extra check is not declared clean. Logs /tmp/makelore-code-model-onboarding-main-types-01e8cbed.log and /tmp/makelore-code-model-onboarding-unchanged-base-types-01e8cbed.log.
+- No live app update, real model call, real cloud submission, merge/push, or user-project file changes. Passing local/native fixtures does not constitute installed/real-provider release acceptance.
+
+## Follow-ups
+
+- Source ready for integration and temporary-app update when requested. Earlier submission-directory repair0d6ac41 remains on its separate completed task branch; combine both during delivery as appropriate, preserving both README behavior paragraphs. Running trial still uses previous source.
+- Existing additional strict Main project-service optional-id diagnostic is outside this UI task; keep it visible for future Main typecheck work.
+
+## Promotion Candidates
+
+- Target ADR006 and architecture data-flow/module-map: distinguish model-free conversation history/selection preparation from validated Pi execution. Evidence: Main44, UI61, related137 units, native3 and independent review. Future impact: missing model is ordinary preparation, history never causes prompt/model execution, and delayed reads cannot override newer runtime/model state. Conflicts: none with77 peer scopes; prompt/auth/project identity and teacher execution unchanged. Human confirmation: user explicitly authorized this interaction; canonical promotion requires serialized integration.
diff --git a/README.md b/README.md
index 02b1e42a..28520569 100644
--- a/README.md
+++ b/README.md
@@ -31,6 +31,8 @@ Makelore 是一个面向软件、视觉创作、智能机器人与个人云智
 
 作品入口按项目记住已确认的本机页面和受限的打开方式。应用重启后先检查并复用原服务；服务停止时，可直接重新启动已有的 Vite 工程或普通静态网页，再显示实际可访问的页面，不要求当前对话选择模型，也不自动新建对话。旧项目可从已成功打开页面的工具回执恢复入口。空项目仍显示原有空状态；无法确定打开方式、缺少运行组件或入口改变时说明原因，由用户明确选择「让助手检查」后才调用编程助手。后台恢复只访问本机地址，保存的打开方式按项目真实目录校验，不保存或重放任意终端命令。
 
+编程新对话尚未选定模型时，会先显示“选一个模型，开始聊聊”，点击“选择模型”直接列出当前账号的模型；加载中、读取失败和暂无模型分别说明。输入和图片草稿保持可编辑，选择保存及刷新完成前不能发送，也不会自动发送。有效默认模型可直接使用；尚未创建对话的模型选择只保留为当前账号、项目和编程配置的临时选择，首次手动发送时才创建对话并保存。缺少模型时仍可读取已有历史，不因此启动 Pi 或显示重试报错；实际发送与模型权限仍由 Main 校验。
+
 作品广场、素材广场、独立发布上传和云部署页面不属于 Makelore 2.0 工作台。新建 Code 项目只要求选择目录：Main 自动生成内部项目 ID，并以内部 `interactive_ai_app` 类型创建 `.makelore/project.json` 与 `knowledge/`，不再让用户选择或查看项目身份、项目类型和模板；缺少项目 ID 的旧项目在读取时由 Main 自动补全。从列表移除项目只取消登记，不删除磁盘文件；在“新建项目”中直接选择已有项目文件夹会重新打开，并保留原有项目身份、类型、智能体、对话和知识文件。“新建下级文件夹”仍拒绝已存在的同名目录。创建成功后直接进入对话工作区，未创建智能体时只显示可选的设置入口，不再用初始化门禁遮挡工作区。已有 `custom` 项目继续受支持；历史 `mini_game` / `mini_program` 配置在读取时归一为交互式 AI 应用，但不会因读取被改写。用户获取并为项目启用官方 bundled `makelore.project-scaffold` 插件后，每个父智能体都可按需明确调用 `makelore-project-scaffold` Skill，无需伙伴分配；它以不覆盖既有路径的方式生成固定六文件 Vite 起步工程，不是创建前置条件，也不安装依赖、不联网、不构建、不上传或提审。交互式 AI 应用的项目配置底部提供“一键提交审核”；Main 自动预检、安全打包并提交，构建通过后进入运营审核，审核通过即直接发布。首次创建必须选择 PNG、JPEG 或 WebP 项目封面，并通过 Main-owned multipart 原子接口同时保存资料与封面；已有 draft/published 只提交新版本并沿用平台现有资料与封面。项目成果预览 `/deliverables` 继续保留。
 
 创建智能体时，如果本次新操作被服务明确拒绝，会显示失败原因、保留名称和头像，并允许修改后重新提交；不会留下“结果尚未确认”提醒。断网、响应异常或已有待确认操作的重试失败仍保留原创建请求，可重试确认结果，避免重复创建。当前创建表单一旦出现结果不确定，即使移除提醒后重试被拒绝，也继续保留原请求；移除提醒不代表取消创建。创建页面会及时刷新本机恢复记录。服务器的字段校验错误只转换为固定中文提示，不展示内部错误或提交原文。一句话介绍仍可留空；创建与保存需要配套的智能体云端服务支持。
diff --git a/electron/coding-runtime/conversation-service.ts b/electron/coding-runtime/conversation-service.ts
index 508180fb..99527ece 100644
--- a/electron/coding-runtime/conversation-service.ts
+++ b/electron/coding-runtime/conversation-service.ts
@@ -114,6 +114,11 @@ function runtimeError(error: unknown): never {
   throw new CodingConversationServiceError(503, 'CODING_RUNTIME_UNAVAILABLE', 'The local coding runtime is unavailable');
 }
 
+function isModelSelectionError(error: unknown): boolean {
+  return error instanceof CodingConversationServiceError
+    && (error.code === 'CODING_MIGRATION_MODEL_REQUIRED' || error.code === 'CODING_MODEL_UNAVAILABLE');
+}
+
 async function persist<T>(operation: () => Promise<T>): Promise<T> {
   try {
     return await operation();
@@ -415,13 +420,32 @@ export class CodingConversationService {
   }
 
   async getSnapshot(conversationId: string): Promise<ConversationSnapshot> {
+    this.assertNotDeleting(conversationId);
     const { project, conversation } = await this.projects.findActiveConversation(conversationId);
     const { config } = await this.projects.getConfig(project.id);
     const agent = config.agents.find((item) => item.id === conversation.agentId);
     if (this.options.readHistory && (!agent?.enabled || agent.archivedAt)) {
       return await this.options.readHistory(project.id, conversation);
     }
-    await this.ensurePrepared(conversationId);
+    if (this.options.readHistory && (!conversation.model || conversation.modelResolution !== 'resolved')) {
+      if (this.hasWorker(conversationId)) {
+        try { return await this.runtime.getSnapshot(conversationId); } catch (error) { runtimeError(error); }
+      }
+      if (!this.prepareFlights.has(conversationId)) {
+        return await this.readModelSelectionHistory(project.id, conversation);
+      }
+    }
+    try {
+      await this.ensurePrepared(conversationId);
+    } catch (error) {
+      if (this.options.readHistory && isModelSelectionError(error)) {
+        if (this.hasWorker(conversationId)) {
+          try { return await this.runtime.getSnapshot(conversationId); } catch (runtimeFailure) { runtimeError(runtimeFailure); }
+        }
+        return await this.readModelSelectionHistory(project.id, conversation);
+      }
+      throw error;
+    }
     try {
       return await this.runtime.getSnapshot(conversationId);
     } catch (error) {
@@ -429,6 +453,47 @@ export class CodingConversationService {
     }
   }
 
+  private hasWorker(conversationId: string): boolean {
+    return this.runtime.getDiagnostics().workers.some((worker) => worker.conversationId === conversationId);
+  }
+
+  private async readModelSelectionHistory(
+    projectId: string,
+    conversation: CodingConversationV2,
+  ): Promise<ConversationSnapshot> {
+    const snapshot = await this.options.readHistory!(projectId, conversation);
+    // A model selection or prompt may have started while durable history was read.
+    // Its real runtime state, including uncertain work, must remain authoritative.
+    const preparing = this.prepareFlights.get(conversation.id);
+    if (preparing) {
+      try { await preparing; } catch (error) {
+        if (!isModelSelectionError(error)) throw error;
+      }
+    }
+    this.assertNotDeleting(conversation.id);
+    if (this.hasWorker(conversation.id)) {
+      try { return await this.runtime.getSnapshot(conversation.id); } catch (error) { runtimeError(error); }
+    }
+    const { conversation: current } = await this.projects.findActiveConversation(conversation.id);
+    this.assertNotDeleting(conversation.id);
+    if (current.modelResolution !== conversation.modelResolution
+      || JSON.stringify(current.model) !== JSON.stringify(conversation.model)) {
+      // A concurrent choice may have persisted and failed preparation before this
+      // read completed. Recheck that model instead of masking its real failure.
+      return await this.getSnapshot(conversation.id);
+    }
+    if (this.hasWorker(conversation.id)) {
+      try { return await this.runtime.getSnapshot(conversation.id); } catch (error) { runtimeError(error); }
+    }
+    return {
+      ...snapshot,
+      conversation: {
+        ...snapshot.conversation,
+        model: { model: null, modelResolution: 'required' },
+      },
+    };
+  }
+
   /** Read existing facts for work restoration without opening a model session. */
   async getStoredSnapshot(conversationId: string): Promise<ConversationSnapshot | null> {
     const { project, conversation } = await this.projects.findActiveConversation(conversationId);
diff --git a/src/pages/Chat/CodingChatPanel.tsx b/src/pages/Chat/CodingChatPanel.tsx
index 67458215..bfa8d258 100644
--- a/src/pages/Chat/CodingChatPanel.tsx
+++ b/src/pages/Chat/CodingChatPanel.tsx
@@ -21,6 +21,7 @@ import {
 import {
   abortCodingConversation,
   forkCodingConversation,
+  setCodingConversationModel,
 } from '@/lib/coding-conversations';
 import { subscribeHostEvent } from '@/lib/host-events';
 import {
@@ -35,6 +36,7 @@ import { codingWorkspaceStore, useCodingWorkspaceStore } from '@/stores/coding-w
 import type {
   CodingDraftAttachment,
   PromptMode,
+  ProductModelRef,
 } from '@/types/coding-conversation';
 import type {
   CodingConversationMetadata,
@@ -59,6 +61,8 @@ import { codingRecovery, CONTINUE_CODING_PROMPT, type CodingRecoveryAction } fro
 import { codingRecoveryAccount, type CodingLoginRecovery } from '@/lib/coding-login-recovery';
 import { openWorksBillingAccount } from '@/lib/works-billing';
 
+const needsModelSelection = (code?: string) => code === 'CODING_MIGRATION_MODEL_REQUIRED' || code === 'CODING_MODEL_UNAVAILABLE';
+
 export interface CodingChatPanelProps {
   navigationDraft?: string;
   onCreateProject?(): void;
@@ -178,6 +182,8 @@ export function CodingChatPanel({
   const markConversationUnread = useCodingConversationStore((state) => state.markUnread);
 
   const [provisionalDrafts, setProvisionalDrafts] = useState<Record<string, string>>({});
+  const [provisionalModels, setProvisionalModels] = useState<Record<string, ProductModelRef>>({});
+  const [modelActions, setModelActions] = useState<Record<string, boolean>>({});
   const [submissionErrors, setSubmissionErrors] = useState<Record<string, LocalSubmissionError>>({});
   const [modesByDraftKey, setModesByDraftKey] = useState<Record<string, PromptMode>>({});
   const [attachmentsByDraftKey, setAttachmentsByDraftKey] = useState<
@@ -201,6 +207,7 @@ export function CodingChatPanel({
     setTeacherQuote(current => current?.reference === reference ? undefined : current);
   }, []);
   const appliedNavigationDraftRef = useRef<string | null>(null);
+  const provisionalDraftsRef = useRef(provisionalDrafts);
   const selectedConversationContextRef = useRef<string | null>(null);
   const attachmentsRef = useRef(attachmentsByDraftKey);
   const uploadedAttachmentsRef = useRef(new Map<string, CodingAttachmentRef>());
@@ -233,6 +240,7 @@ export function CodingChatPanel({
   ), [attachmentsByDraftKey, draftKey]);
 
   attachmentsRef.current = attachmentsByDraftKey;
+  provisionalDraftsRef.current = provisionalDrafts;
 
   const selectProjectConversation = useCallback((projectId: string, conversationId: string) => {
     selectedConversationContextRef.current = `${projectId}:${conversationId}`;
@@ -297,6 +305,22 @@ export function CodingChatPanel({
       ? state.entriesByConversationId[targetConversationId]?.error ?? null
       : null
   ));
+  const entryErrorCode = useCodingConversationStore(state => {
+    const entry = targetConversationId ? state.entriesByConversationId[targetConversationId] : null;
+    return entry?.error ? entry.errorCode : undefined;
+  });
+  const provisionalModelKey = provisionalDraftKey ? `${account}:${provisionalDraftKey}` : null;
+  const provisionalModelOverride = provisionalModelKey ? provisionalModels[provisionalModelKey] : undefined;
+  const provisionalModel = provisionalModelOverride ?? selectedAgent?.model ?? null;
+  const currentModelState = snapshot?.conversation.model ?? selectedConversation ?? selectedAgent;
+  const currentModel = targetConversationId ? currentModelState?.model : provisionalModel;
+  const runtimeError = snapshot?.run.error ?? snapshot?.worker.error ?? null;
+  const modelSelectionRequired = !currentModel
+    || ((Boolean(targetConversationId) || !provisionalModelOverride) && currentModelState?.modelResolution === 'required')
+    || needsModelSelection(runtimeError?.code)
+    || needsModelSelection(entryErrorCode)
+    || needsModelSelection(submissionError?.backendCode);
+  const modelActionBusy = draftKey ? modelActions[draftKey] ?? false : false;
   const blockingRequestCount = useCodingConversationStore((state) => requestCount(
     state,
     targetConversationId,
@@ -534,6 +558,7 @@ export function CodingChatPanel({
   }, []);
 
   const handleSubmit = useCallback(() => {
+    if (modelSelectionRequired || modelActionBusy) return;
     if (!targetConversationId && draftKey && activeProject && selectedAgent && !submissionFlightsRef.current.has(draftKey)) {
       const projectId = activeProject.id;
       const initialText = provisionalDraft;
@@ -543,24 +568,39 @@ export function CodingChatPanel({
       submissionFlightsRef.current.add(draftKey);
       void codingWorkspaceStore.getState().createConversation().then(async (conversation) => {
         createdId = conversation.id;
+        submissionFlightsRef.current.add(conversation.id);
+        setModelActions(current => ({ ...current, [conversation.id]: true }));
         primeConversation(createLocalConversationSnapshot(projectId, conversation));
-        setConversationDraft(conversation.id, initialText);
+        const latestText = provisionalDraftsRef.current[draftKey] ?? initialText;
+        setConversationDraft(conversation.id, latestText);
         setProvisionalDrafts(current => {
-          if (current[draftKey] !== initialText) return current;
+          if (current[draftKey] !== latestText) return current;
           const next = { ...current }; delete next[draftKey]; return next;
         });
         setAttachmentsByDraftKey(current => {
-          const next = { ...current, [conversation.id]: attachments };
+          const next = { ...current, [conversation.id]: current[draftKey] ?? attachments };
           delete next[draftKey]; return next;
         });
         if (codingWorkspaceStore.getState().activeProjectId === projectId
           && codingConversationStore.getState().selectedConversationId === selectedAtSend) {
           void selectProjectConversation(projectId, conversation.id).catch(() => undefined);
         }
-        await submitPrompt({ conversationId: conversation.id, mode: 'prompt',
+        if (provisionalModelOverride) {
+          const modelState = await setCodingConversationModel(conversation.id, provisionalModelOverride);
+          upsertConversation(projectId, { ...conversation, ...modelState });
+          await loadConversationSnapshot(conversation.id, 'silent');
+        }
+        const latestDraft = selectCodingConversationDraft(conversation.id)(codingConversationStore.getState());
+        await submitPrompt({ conversationId: conversation.id, mode: 'prompt', text: initialText,
+          preserveDraft: latestDraft.text !== initialText,
           prepareAttachments: attachments.length ? () => prepareAttachments(attachments) : undefined });
         setAttachmentsByDraftKey(current => {
-          const next = { ...current }; delete next[conversation.id]; return next;
+          const sentIds = new Set(attachments.map(item => item.id));
+          const remaining = (current[conversation.id] ?? []).filter(item => !sentIds.has(item.id));
+          const next = { ...current };
+          if (remaining.length) next[conversation.id] = remaining;
+          else delete next[conversation.id];
+          return next;
         });
         for (const attachment of attachments) {
           URL.revokeObjectURL(attachment.previewUrl);
@@ -568,7 +608,14 @@ export function CodingChatPanel({
         }
       }).catch((error) => {
         setSubmissionErrors(current => ({ ...current, [createdId ?? draftKey]: localSubmissionError(error) }));
-      }).finally(() => submissionFlightsRef.current.delete(draftKey));
+      }).finally(() => {
+        submissionFlightsRef.current.delete(draftKey);
+        if (createdId) {
+          submissionFlightsRef.current.delete(createdId);
+          const completedId = createdId;
+          setModelActions(current => ({ ...current, [completedId]: false }));
+        }
+      });
       return;
     }
     if (!targetConversationId || !draftKey || submissionFlightsRef.current.has(targetConversationId)) return;
@@ -617,11 +664,16 @@ export function CodingChatPanel({
     promptMode,
     targetConversationId,
     submitPrompt,
+    modelSelectionRequired,
+    modelActionBusy,
+    provisionalModelOverride,
+    upsertConversation,
+    loadConversationSnapshot,
   ]);
 
   const workerStatus = snapshot?.worker.status ?? 'stopped';
-  const runtimeError = snapshot?.run.error ?? snapshot?.worker.error ?? null;
-  const preparationError = entryError ?? runtimeError?.message ?? null;
+  const preparationError = (needsModelSelection(entryErrorCode) ? null : entryError)
+    ?? (needsModelSelection(runtimeError?.code) ? null : runtimeError?.message) ?? null;
   useEffect(() => {
     if (!draftKey
       || uncertainRequestCount > 0
@@ -646,6 +698,8 @@ export function CodingChatPanel({
   const editable = Boolean(activeProject && selectedAgent?.enabled && !selectedAgent.archivedAt);
   const canSend = Boolean(
     editable
+      && !modelSelectionRequired
+      && !modelActionBusy
       && (draft.trim() || localAttachments.length > 0)
       && modeMatchesRunState
       && submittingRequestCount === 0
@@ -940,13 +994,27 @@ export function CodingChatPanel({
           runStatus={runStatus}
           mode={promptMode}
           queue={snapshot?.queue ?? { items: [] }}
-          error={submissionError?.message ?? preparationError}
+          error={(needsModelSelection(submissionError?.backendCode) ? null : submissionError?.message) ?? preparationError}
           recoverableError={!submissionError && Boolean(preparationError)}
           attachments={localAttachments.map(({ id, name, previewUrl }) => ({ id, name, previewUrl }))}
           submitting={submittingRequestCount > 0}
           placeholder={selectedAgent ? '说说你的想法，接下来想做什么？' : '项目编程配置尚未就绪'}
           conversation={selectedConversation}
           snapshot={snapshot}
+          provisionalModel={provisionalModel}
+          modelSelectionRequired={modelSelectionRequired}
+          runtimeBusy={modelActionBusy}
+          onSelectProvisionalModel={async (model) => {
+            if (provisionalModelKey) setProvisionalModels(current => ({ ...current, [provisionalModelKey]: model }));
+            if (draftKey) setSubmissionErrors(current => {
+              if (!needsModelSelection(current[draftKey]?.backendCode)) return current;
+              const next = { ...current }; delete next[draftKey]; return next;
+            });
+          }}
+          onRuntimeBusyChange={(busy) => {
+            if (draftKey) setModelActions(current => ({ ...current, [draftKey]: busy }));
+          }}
+          onOpenModelSettings={onOpenProjectSettings}
           voiceScopeKey={draftKey}
           onModeChange={(mode) => {
             if (draftKey) setModesByDraftKey((current) => ({ ...current, [draftKey]: mode }));
@@ -985,7 +1053,15 @@ export function CodingChatPanel({
           onAddFiles={handleAddFiles}
           onRemoveAttachment={handleRemoveAttachment}
           onRefreshRuntime={async () => {
-            if (targetConversationId) await loadConversationSnapshot(targetConversationId, 'silent');
+            if (targetConversationId) {
+              const refreshed = await loadConversationSnapshot(targetConversationId, 'silent');
+              if (draftKey && refreshed.conversation.model.model && refreshed.conversation.model.modelResolution === 'resolved') {
+                setSubmissionErrors(current => {
+                  if (!needsModelSelection(current[draftKey]?.backendCode)) return current;
+                  const next = { ...current }; delete next[draftKey]; return next;
+                });
+              }
+            }
           }}
         />}
         </div>
diff --git a/src/pages/Chat/CodingComposer.tsx b/src/pages/Chat/CodingComposer.tsx
index b9ed8023..412c12c9 100644
--- a/src/pages/Chat/CodingComposer.tsx
+++ b/src/pages/Chat/CodingComposer.tsx
@@ -11,6 +11,7 @@ import type {
   ConversationQueueState,
   ConversationRunStatus,
   PromptMode,
+  ProductModelRef,
 } from '@/types/coding-conversation';
 import type { CodingConversationMetadata } from '@/types/coding-project';
 import { CodingComposerRuntimeControls } from './CodingComposerRuntimeControls';
@@ -32,6 +33,12 @@ export interface CodingComposerProps {
   placeholder: string;
   conversation?: CodingConversationMetadata | null;
   snapshot?: ConversationSnapshot | null;
+  provisionalModel?: ProductModelRef | null;
+  modelSelectionRequired?: boolean;
+  runtimeBusy?: boolean;
+  onSelectProvisionalModel?(model: ProductModelRef): Promise<void>;
+  onRuntimeBusyChange?(busy: boolean): void;
+  onOpenModelSettings?(): void;
   voiceScopeKey?: string | null;
   onChange(value: string): void;
   onModeChange(mode: PromptMode): void;
@@ -59,6 +66,12 @@ export function CodingComposer({
   placeholder,
   conversation,
   snapshot,
+  provisionalModel,
+  modelSelectionRequired = false,
+  runtimeBusy = false,
+  onSelectProvisionalModel,
+  onRuntimeBusyChange,
+  onOpenModelSettings,
   voiceScopeKey,
   onChange,
   onModeChange,
@@ -70,12 +83,22 @@ export function CodingComposer({
   onRefreshRuntime,
 }: CodingComposerProps) {
   const accounts = useProviderStore(state => state.accounts);
-  const selectedModel = snapshot?.conversation.model.model ?? conversation?.model;
+  const selectedModel = snapshot ? snapshot.conversation.model.model : conversation?.model ?? provisionalModel;
   const managed = selectedModel?.accountId === 'niancode-user-models';
   const capability = selectedModel ? accounts.find(account => account.id === selectedModel.accountId)
     ?.metadata?.worksSquareModelCapabilitiesV2?.models[selectedModel.modelId] : undefined;
   const acceptsImages = !managed || capability?.inputModalities?.includes('image') === true;
   const fileInputRef = useRef<HTMLInputElement | null>(null);
+  const textareaRef = useRef<HTMLTextAreaElement | null>(null);
+  const selectionFocusScope = useRef<string | null>(null);
+  const composerScope = voiceScopeKey ?? conversation?.id ?? 'draft';
+  useEffect(() => {
+    if (selectionFocusScope.current !== composerScope) selectionFocusScope.current = null;
+    else if (!modelSelectionRequired) {
+      selectionFocusScope.current = null;
+      textareaRef.current?.focus();
+    }
+  }, [composerScope, modelSelectionRequired]);
   const latestValueRef = useRef(value);
   useEffect(() => {
     latestValueRef.current = value;
@@ -92,6 +115,23 @@ export function CodingComposer({
   });
   const running = ['queued', 'running', 'retrying', 'compacting', 'aborting'].includes(runStatus);
   const showAbort = Boolean(onAbort && running && !canSend && runStatus !== 'aborting');
+  const runtimeControls = (onboarding = false) => (
+    <CodingComposerRuntimeControls
+      key={conversation?.id ?? voiceScopeKey ?? 'draft'}
+      conversation={conversation ?? null}
+      snapshot={snapshot ?? null}
+      provisionalModel={provisionalModel}
+      onboarding={onboarding}
+      disabled={runtimeBusy}
+      onRefresh={onRefreshRuntime ?? (async () => undefined)}
+      onSelectProvisionalModel={onSelectProvisionalModel}
+      onBusyChange={(busy) => {
+        if (busy && onboarding) selectionFocusScope.current = composerScope;
+        onRuntimeBusyChange?.(busy);
+      }}
+      onOpenModelSettings={onOpenModelSettings}
+    />
+  );
   return (
     <form
       data-testid="coding-message-composer"
@@ -101,6 +141,12 @@ export function CodingComposer({
         if (canSend) onSubmit();
       }}
     >
+      {modelSelectionRequired && (
+        <div className="mb-2 flex min-h-10 flex-wrap items-center justify-between gap-x-3 gap-y-1 rounded-xl bg-surface-subtle px-3 py-2 text-sm" data-testid="coding-model-guidance">
+          <span className="text-muted-foreground" role="status">选一个模型，开始聊聊</span>
+          {runtimeControls(true)}
+        </div>
+      )}
       {(preparing || recovering || submitting || error) && (
         <div className={cn(
           'mb-2 flex min-h-8 items-center gap-2 rounded-xl px-3 py-1.5 text-xs text-muted-foreground',
@@ -185,6 +231,7 @@ export function CodingComposer({
           </div>
         )}
         <Textarea
+          ref={textareaRef}
           value={value}
           rows={Math.min(6, value.split('\n').length)}
           disabled={!editable}
@@ -230,13 +277,7 @@ export function CodingComposer({
               )}
           </div>
           <div className="ml-auto flex min-w-0 items-center gap-1">
-            {conversation && onRefreshRuntime && (
-              <CodingComposerRuntimeControls
-                conversation={conversation}
-                snapshot={snapshot ?? null}
-                onRefresh={onRefreshRuntime}
-              />
-            )}
+            {!modelSelectionRequired && (conversation || onSelectProvisionalModel) && runtimeControls()}
             <ComposerVoiceButton voiceInput={voiceInput} />
             <Button
               type={showAbort ? 'button' : 'submit'}
diff --git a/src/pages/Chat/CodingComposerRuntimeControls.tsx b/src/pages/Chat/CodingComposerRuntimeControls.tsx
index 784a34f9..8f7e4493 100644
--- a/src/pages/Chat/CodingComposerRuntimeControls.tsx
+++ b/src/pages/Chat/CodingComposerRuntimeControls.tsx
@@ -22,6 +22,7 @@ import { useProviderStore } from '@/stores/providers';
 import type {
   ConversationSnapshot,
   ConversationThinkingLevel,
+  ProductModelRef,
 } from '@/types/coding-conversation';
 import type { CodingConversationMetadata } from '@/types/coding-project';
 
@@ -68,13 +69,29 @@ export function CodingComposerRuntimeControls({
   conversation,
   snapshot,
   onRefresh,
+  provisionalModel,
+  onSelectProvisionalModel,
+  onboarding = false,
+  disabled = false,
+  onBusyChange,
+  onOpenModelSettings,
 }: {
-  conversation: CodingConversationMetadata;
+  conversation: CodingConversationMetadata | null;
   snapshot: ConversationSnapshot | null;
   onRefresh(): Promise<void>;
+  provisionalModel?: ProductModelRef | null;
+  onSelectProvisionalModel?(model: ProductModelRef): Promise<void>;
+  onboarding?: boolean;
+  disabled?: boolean;
+  onBusyChange?(busy: boolean): void;
+  onOpenModelSettings?(): void;
 }) {
   const accounts = useProviderStore((state) => state.accounts);
   const vendors = useProviderStore((state) => state.vendors);
+  const catalogLoading = useProviderStore(state => state.loading);
+  const catalogInitialized = useProviderStore(state => state.initialized);
+  const catalogError = useProviderStore(state => state.error);
+  const refreshCatalog = useProviderStore(state => state.refreshProviderSnapshot);
   const options = useMemo(() => buildCodingModelOptions(accounts, vendors), [accounts, vendors]);
   const [busyAction, setBusyAction] = useState<string | null>(null);
   const [actionError, setActionError] = useState<LocalActionError | null>(null);
@@ -82,7 +99,7 @@ export function CodingComposerRuntimeControls({
   const [modelMenuOpen, setModelMenuOpen] = useState(false);
   const [thinkingMenuOpen, setThinkingMenuOpen] = useState(false);
 
-  const model = snapshot?.conversation.model.model ?? conversation.model ?? null;
+  const model = snapshot?.conversation.model.model ?? conversation?.model ?? provisionalModel ?? null;
   const modelValue = model ? codingModelKey(model) : '';
   const hasCurrentOption = options.some((option) => option.key === modelValue);
   const managedCapability = options.find(option => option.key === modelValue)?.managedCapability
@@ -109,7 +126,8 @@ export function CodingComposerRuntimeControls({
     && cursorAdvancedPastAction
     ? null
     : actionError;
-  const runtimeControlsDisabled = Boolean(busyAction) || running;
+  const runtimeControlsDisabled = disabled || Boolean(busyAction) || running;
+  const catalogPending = catalogLoading || (!catalogInitialized && !catalogError && options.length === 0);
   const modelLabel = model?.modelId ?? '选择模型';
   const currentThinkingLabel = managedOptions
     ? managedOptions.find(option => option.value === thinkingValue)?.label ?? '请重新选择'
@@ -121,21 +139,28 @@ export function CodingComposerRuntimeControls({
     const startedGeneration = snapshot?.cursor.workerGeneration ?? 0;
     const startedSeq = snapshot?.cursor.seq ?? 0;
     setBusyAction(key);
+    onBusyChange?.(true);
     setActionError(null);
     void action()
       .catch((error) => setActionError(localActionError(error, startedGeneration, startedSeq)))
-      .finally(() => setBusyAction((current) => current === key ? null : current));
+      .finally(() => {
+        setBusyAction((current) => current === key ? null : current);
+        onBusyChange?.(false);
+      });
   };
 
   const selectModel = (value: string) => {
     const selected = parseCodingModelKey(value);
-    if (!selected || value === modelValue) return;
+    if (!selected || (value === modelValue && !onboarding)) return;
     perform('model', async () => {
-      await setCodingConversationModel(conversation.id, {
+      const chosen = {
         ...selected,
         thinkingLevel,
-      });
-      await onRefresh();
+      };
+      if (conversation) {
+        await setCodingConversationModel(conversation.id, chosen);
+        await onRefresh();
+      } else await onSelectProvisionalModel?.(chosen);
     });
   };
 
@@ -144,19 +169,64 @@ export function CodingComposerRuntimeControls({
       const option = managedOptions.find(option => option.value === value);
       if (!option || value === thinkingValue) return;
       perform('thinking', async () => {
-        await setCodingConversationThinking(conversation.id, 'off', option.choice);
-        await onRefresh();
+        if (conversation) {
+          await setCodingConversationThinking(conversation.id, 'off', option.choice);
+          await onRefresh();
+        } else if (model) await onSelectProvisionalModel?.({ ...model, thinkingLevel: 'off', reasoningChoice: option.choice });
       });
       return;
     }
     const selected = value as ConversationThinkingLevel;
     if (selected === thinkingLevel) return;
     perform('thinking', async () => {
-      await setCodingConversationThinking(conversation.id, selected);
-      await onRefresh();
+      if (conversation) {
+        await setCodingConversationThinking(conversation.id, selected);
+        await onRefresh();
+      } else if (model) await onSelectProvisionalModel?.({ ...model, thinkingLevel: selected });
     });
   };
 
+  const modelChoices = (
+    <DropdownMenu.RadioGroup value={onboarding ? '' : modelValue} onValueChange={selectModel}>
+      {model && !hasCurrentOption && (
+        <DropdownMenu.RadioItem
+          value={modelValue}
+          disabled
+          className="relative flex h-7 select-none items-center rounded-lg px-2.5 pr-9 text-muted-foreground outline-none disabled:opacity-55"
+        >
+          <span className="min-w-0 flex-1 truncate">{model.modelId}（当前不可用）</span>
+          <DropdownMenu.ItemIndicator className="absolute right-2.5">
+            <Check className="h-4 w-4" aria-hidden="true" />
+          </DropdownMenu.ItemIndicator>
+        </DropdownMenu.RadioItem>
+      )}
+      {!catalogPending && !catalogError && options.map((option) => (
+        <DropdownMenu.RadioItem
+          key={option.key}
+          value={option.key}
+          title={option.label}
+          className="relative flex h-7 select-none items-center rounded-lg px-2.5 pr-9 outline-none data-[highlighted]:bg-surface-subtle data-[highlighted]:text-foreground"
+        >
+          <span className="min-w-0 flex-1 truncate">{option.modelId}</span>
+          <DropdownMenu.ItemIndicator className="absolute right-2.5">
+            <Check className="h-4 w-4" aria-hidden="true" />
+          </DropdownMenu.ItemIndicator>
+        </DropdownMenu.RadioItem>
+      ))}
+      {!catalogPending && !catalogError && options.length === 0 && (
+        <DropdownMenu.Item disabled className="px-2.5 py-2 text-muted-foreground opacity-70">
+          暂无可用模型
+        </DropdownMenu.Item>
+      )}
+      {catalogPending && <DropdownMenu.Item disabled className="px-2.5 py-2 text-muted-foreground">正在读取可用模型…</DropdownMenu.Item>}
+      {catalogError && <>
+        <DropdownMenu.Item disabled className="px-2.5 py-2 text-muted-foreground">模型列表暂时没读出来</DropdownMenu.Item>
+        <DropdownMenu.Item className="cursor-pointer rounded-lg px-2.5 py-2 outline-none data-[highlighted]:bg-surface-subtle" onSelect={() => void refreshCatalog()}>重新读取模型</DropdownMenu.Item>
+      </>}
+      {!catalogPending && !catalogError && options.length === 0 && onOpenModelSettings && <DropdownMenu.Item className="cursor-pointer rounded-lg px-2.5 py-2 outline-none data-[highlighted]:bg-surface-subtle" onSelect={onOpenModelSettings}>查看模型配置</DropdownMenu.Item>}
+    </DropdownMenu.RadioGroup>
+  );
+
   return (
     <div className="min-w-0" data-testid="coding-composer-runtime-controls">
       <div className="flex min-w-0 items-center gap-0.5">
@@ -175,11 +245,11 @@ export function CodingComposerRuntimeControls({
               type="button"
               variant="ghost"
               className="h-8 min-w-0 max-w-48 gap-1 rounded-full bg-transparent px-2.5 text-xs font-normal shadow-none hover:bg-surface-subtle"
-              aria-label={`模型与思考设置：${modelLabel}，${thinkingDisplayLabel}`}
+              aria-label={onboarding ? '选择模型' : `模型与思考设置：${modelLabel}，${thinkingDisplayLabel}`}
               disabled={runtimeControlsDisabled}
             >
-              <span className="min-w-0 truncate text-foreground/85">{modelLabel}</span>
-              {model && <span className="shrink-0 text-brand">{thinkingDisplayLabel}</span>}
+              <span className="min-w-0 truncate text-foreground/85">{onboarding ? '选择模型' : modelLabel}</span>
+              {!onboarding && model && <span className="shrink-0 text-brand">{thinkingDisplayLabel}</span>}
               {busyAction === 'model' || busyAction === 'thinking'
                 ? <LoaderCircle className="h-3.5 w-3.5 shrink-0 animate-spin text-muted-foreground" aria-hidden="true" />
                 : <ChevronDown className={cn('h-3.5 w-3.5 shrink-0 text-muted-foreground transition-transform', menuOpen && 'rotate-180')} aria-hidden="true" />}
@@ -192,8 +262,9 @@ export function CodingComposerRuntimeControls({
               sideOffset={8}
               collisionPadding={12}
               className="z-[100] min-w-56 rounded-[18px] border border-border/80 bg-background p-1.5 text-sm shadow-[0_18px_50px_rgba(26,31,42,0.16)] outline-none data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=open]:fade-in-0 data-[state=closed]:fade-out-0 data-[side=top]:slide-in-from-bottom-1"
-              aria-label="模型与思考设置"
+              aria-label={onboarding ? '选择模型' : '模型与思考设置'}
             >
+              {onboarding ? modelChoices : <>
               <DropdownMenu.Sub
                 open={modelMenuOpen}
                 onOpenChange={(open) => {
@@ -218,38 +289,7 @@ export function CodingComposerRuntimeControls({
                     className="z-[101] min-w-[17.5rem] rounded-[14px] border border-border/80 bg-background p-1.5 text-sm shadow-[0_18px_50px_rgba(26,31,42,0.18)] outline-none data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=open]:fade-in-0 data-[state=closed]:fade-out-0 data-[side=left]:slide-in-from-right-1 data-[side=right]:slide-in-from-left-1"
                     aria-label="选择模型"
                   >
-                    <DropdownMenu.RadioGroup value={modelValue} onValueChange={selectModel}>
-                      {model && !hasCurrentOption && (
-                        <DropdownMenu.RadioItem
-                          value={modelValue}
-                          disabled
-                          className="relative flex h-7 select-none items-center rounded-lg px-2.5 pr-9 text-muted-foreground outline-none disabled:opacity-55"
-                        >
-                          <span className="min-w-0 flex-1 truncate">{model.modelId}（当前不可用）</span>
-                          <DropdownMenu.ItemIndicator className="absolute right-2.5">
-                            <Check className="h-4 w-4" aria-hidden="true" />
-                          </DropdownMenu.ItemIndicator>
-                        </DropdownMenu.RadioItem>
-                      )}
-                      {options.map((option) => (
-                        <DropdownMenu.RadioItem
-                          key={option.key}
-                          value={option.key}
-                          title={option.label}
-                          className="relative flex h-7 select-none items-center rounded-lg px-2.5 pr-9 outline-none data-[highlighted]:bg-surface-subtle data-[highlighted]:text-foreground"
-                        >
-                          <span className="min-w-0 flex-1 truncate">{option.modelId}</span>
-                          <DropdownMenu.ItemIndicator className="absolute right-2.5">
-                            <Check className="h-4 w-4" aria-hidden="true" />
-                          </DropdownMenu.ItemIndicator>
-                        </DropdownMenu.RadioItem>
-                      ))}
-                      {options.length === 0 && !model && (
-                        <DropdownMenu.Item disabled className="px-2.5 py-2 text-muted-foreground opacity-70">
-                          暂无可用模型
-                        </DropdownMenu.Item>
-                      )}
-                    </DropdownMenu.RadioGroup>
+                    {modelChoices}
                   </DropdownMenu.SubContent>
                 </DropdownMenu.Portal>
               </DropdownMenu.Sub>
@@ -299,6 +339,7 @@ export function CodingComposerRuntimeControls({
                   </DropdownMenu.SubContent>
                 </DropdownMenu.Portal>
               </DropdownMenu.Sub>
+              </>}
             </DropdownMenu.Content>
           </DropdownMenu.Portal>
         </DropdownMenu.Root>
diff --git a/src/stores/coding-conversations.ts b/src/stores/coding-conversations.ts
index ffcb4202..8c378b21 100644
--- a/src/stores/coding-conversations.ts
+++ b/src/stores/coding-conversations.ts
@@ -43,6 +43,7 @@ export interface CodingConversationEntry {
   reducer: ConversationReducerState;
   loadState: CodingConversationLoadState;
   error: string | null;
+  errorCode?: string;
   unread: boolean;
 }
 
@@ -659,7 +660,7 @@ export function createCodingConversationStore(
               return {
                 entriesByConversationId: {
                   ...state.entriesByConversationId,
-                  [conversationId]: { ...entry, loadState: 'error', error: failure.message },
+                  [conversationId]: { ...entry, loadState: 'error', error: failure.message, errorCode: failure.code },
                 },
               };
             });
@@ -699,7 +700,7 @@ export function createCodingConversationStore(
           return {
             entriesByConversationId: {
               ...state.entriesByConversationId,
-              [conversationId]: { ...entry, loadState: 'error', error: failure.message },
+              [conversationId]: { ...entry, loadState: 'error', error: failure.message, errorCode: failure.code },
             },
           };
         });
diff --git a/src/stores/providers.ts b/src/stores/providers.ts
index 3ed189a4..f60ac813 100644
--- a/src/stores/providers.ts
+++ b/src/stores/providers.ts
@@ -31,6 +31,7 @@ interface ProviderState {
   vendors: ProviderVendorInfo[];
   defaultAccountId: string | null;
   loading: boolean;
+  initialized: boolean;
   error: string | null;
 
   // Actions
@@ -84,6 +85,7 @@ export const useProviderStore = create<ProviderState>((set, get) => ({
   vendors: [],
   defaultAccountId: null,
   loading: false,
+  initialized: false,
   error: null,
 
   init: async () => {
@@ -101,10 +103,11 @@ export const useProviderStore = create<ProviderState>((set, get) => ({
         accounts: snapshot.accounts ?? [],
         vendors: snapshot.vendors ?? [],
         defaultAccountId: snapshot.defaultAccountId ?? null,
-        loading: false
+        loading: false,
+        initialized: true,
       });
     } catch (error) {
-      set({ error: String(error), loading: false });
+      set({ error: String(error), loading: false, initialized: true });
     }
   },
 
diff --git a/tests/e2e/pi-coding-first-chat.spec.ts b/tests/e2e/pi-coding-first-chat.spec.ts
index 0e837d45..98a41970 100644
--- a/tests/e2e/pi-coding-first-chat.spec.ts
+++ b/tests/e2e/pi-coding-first-chat.spec.ts
@@ -108,9 +108,10 @@ async function installCodingFirstChatHost(
   audioPreview?: { executionId: string; path: string; dataUrl: string },
   multipleProjects = false,
   consultationReply?: ConsultationReply,
+  modelOnboarding?: 'saved' | 'provisional',
 ): Promise<void> {
   await electronApp.evaluate(async (_, payload) => {
-    const { connection, featureComplete, managedCapabilities, removedModel, audioPreview, multipleProjects, consultationReply } = payload;
+    const { connection, featureComplete, managedCapabilities, removedModel, audioPreview, multipleProjects, consultationReply, modelOnboarding } = payload;
     const { ipcMain } = process.mainModule!.require('electron') as typeof import('electron');
     type MainState = TeacherCatalogFixture & {
       captured: CapturedRequest[];
@@ -120,6 +121,9 @@ async function installCodingFirstChatHost(
       releaseSnapshot: (() => void) | null;
       snapshotPending: boolean;
       snapshotSettled: boolean;
+      holdModelSave: boolean;
+      modelSavePending: boolean;
+      releaseModelSave: (() => void) | null;
       deletedConversationIds: string[];
       deleteFailureId?: string;
       legacyArchivedConversationId?: string;
@@ -133,12 +137,15 @@ async function installCodingFirstChatHost(
     };
     const state: MainState = {
       captured: [],
-      conversationCreated: false,
+      conversationCreated: modelOnboarding === 'saved',
       interactionAnswered: false,
       abortRequested: false,
       releaseSnapshot: null,
       snapshotPending: false,
       snapshotSettled: false,
+      holdModelSave: false,
+      modelSavePending: false,
+      releaseModelSave: null,
       deletedConversationIds: [],
       teacherCatalog: { items: [] },
       teacherCatalogFailure: false,
@@ -169,8 +176,8 @@ async function installCodingFirstChatHost(
       name: 'Builder',
       builtIn: false,
       enabled: true,
-      model: configuredModel,
-      modelResolution: 'resolved',
+      model: modelOnboarding ? null : configuredModel,
+      modelResolution: modelOnboarding ? 'required' : 'resolved',
       skillIds: [],
       responsibility: {
         mission: 'Implement',
@@ -198,8 +205,8 @@ async function installCodingFirstChatHost(
       id: 'conversation-pi-first-chat',
       agentId: agent.id,
       title: '新对话',
-      model: configuredModel,
-      modelResolution: 'resolved',
+      model: modelOnboarding ? null : configuredModel,
+      modelResolution: modelOnboarding || removedModel ? 'required' : 'resolved',
       archivedAt: null,
       unread: false,
       createdAt: now,
@@ -228,7 +235,7 @@ async function installCodingFirstChatHost(
         projectId: project.id,
         agentId: agent.id,
         title: conversation.title,
-        model: { model: configuredModel, modelResolution: 'resolved' },
+        model: { model: modelOnboarding || removedModel ? null : configuredModel, modelResolution: modelOnboarding || removedModel ? 'required' : 'resolved' },
       },
       nodes: featureComplete ? [
         {
@@ -752,10 +759,7 @@ async function installCodingFirstChatHost(
         return respond({ conversation }, 201);
       }
       if (path === `/api/coding/conversations/${conversation.id}/snapshot`) {
-        if (removedModel && conversation.model.modelId === 'model-a') {
-          return respond({ success: false, code: 'CODING_MODEL_UNAVAILABLE', error: '所选模型当前不可用，请重新选择。' }, 409);
-        }
-        if (!featureComplete) {
+        if (!featureComplete && !modelOnboarding) {
           state.snapshotPending = true;
           await new Promise<void>((resolve) => { state.releaseSnapshot = resolve; });
           state.snapshotPending = false;
@@ -860,9 +864,16 @@ async function installCodingFirstChatHost(
         return respond({});
       }
       if (/^\/api\/coding\/conversations\/[^/]+\/model$/.test(path) && method === 'POST') {
-        if (removedModel) {
+        if (state.holdModelSave) {
+          state.modelSavePending = true;
+          await new Promise<void>(resolve => { state.releaseModelSave = resolve; });
+          state.modelSavePending = false;
+        }
+        if (removedModel || modelOnboarding) {
           conversation.model = body?.model as typeof configuredModel;
+          conversation.modelResolution = 'resolved';
           snapshot.conversation.model.model = conversation.model;
+          snapshot.conversation.model.modelResolution = 'resolved';
         }
         return respond({ model: { model: body?.model, modelResolution: 'resolved' } });
       }
@@ -897,7 +908,7 @@ async function installCodingFirstChatHost(
       if (path === '/api/coding/runtime/diagnostics') return respond({ runtime: { revision: { provider: 1, resources: 1 }, workers: [{ conversationId: conversation.id, generation: 1, state: 'running', stage: 'running' }] } });
       return respond({ success: false, error: `Unhandled E2E route: ${method} ${path}` }, 404);
     });
-  }, { connection: hostConnection, featureComplete, managedCapabilities, removedModel, audioPreview, multipleProjects, consultationReply });
+  }, { connection: hostConnection, featureComplete, managedCapabilities, removedModel, audioPreview, multipleProjects, consultationReply, modelOnboarding });
 }
 
 test('saved Game Audio offers click-only playable local preview in Electron', async ({ launchElectronApp }, testInfo) => {
@@ -1214,7 +1225,7 @@ test('project menus target their project and keep new conversations aligned at e
   } finally { await releaseSnapshot(electronApp); }
 });
 
-test('a removed saved model can be replaced after snapshot preparation fails', async ({ launchElectronApp }) => {
+test('a removed saved model opens read-only history and a direct replacement picker without an error banner', async ({ launchElectronApp }) => {
   const electronApp = await launchElectronApp({ skipSetup: true });
   let page = await getStableWindow(electronApp);
   const connection = await page.evaluate(async () => ({
@@ -1228,14 +1239,19 @@ test('a removed saved model can be replaced after snapshot preparation fails', a
   page = await getStableWindow(electronApp);
   await page.getByTestId('ai-module-option-programming').click();
   await page.evaluate(() => { window.location.hash = '/chat'; });
-  await expect(page.getByText('所选模型当前不可用，请重新选择。', { exact: true })).toBeVisible();
-  const settings = page.getByRole('button', { name: /模型与思考设置/ });
-  await expect(settings).toBeEnabled();
-  await settings.click();
-  await page.getByRole('menuitem', { name: '模型 model-a', exact: true }).click();
-  await expect(page.getByRole('menuitemradio', { name: 'model-a（当前不可用）' })).toBeDisabled();
-  await page.getByRole('menuitemradio', { name: 'model-b', exact: true }).click();
-  await expect(settings).toContainText('model-b');
+  await expect(page.getByText('选一个模型，开始聊聊', { exact: true })).toBeVisible();
+  await expect(page.getByText('所选模型当前不可用，请重新选择。', { exact: true })).toHaveCount(0);
+  await expect(page.getByText('Durable user fork source', { exact: true })).toBeVisible();
+  const textbox = page.getByTestId('coding-message-composer').getByRole('textbox');
+  await textbox.fill('替换模型以后再发送');
+  await page.getByRole('button', { name: '选择模型', exact: true }).focus();
+  await page.keyboard.press('Enter');
+  await expect(page.getByRole('menuitemradio', { name: 'model-a', exact: true })).toHaveCount(0);
+  await page.getByRole('menuitemradio', { name: 'model-b', exact: true }).focus();
+  await page.keyboard.press('Enter');
+  await expect(page.getByRole('button', { name: /模型与思考设置/ })).toContainText('model-b');
+  await expect(textbox).toBeFocused();
+  await expect(textbox).toHaveValue('替换模型以后再发送');
   await expect(page.getByText('所选模型当前不可用，请重新选择。', { exact: true })).toHaveCount(0);
   await expect(page.getByText('Durable user fork source', { exact: true })).toBeVisible();
   await page.getByTestId('coding-process-group').locator('summary').first().click();
@@ -1247,6 +1263,112 @@ test('a removed saved model can be replaced after snapshot preparation fails', a
   expect(requests.some(request => request.path.endsWith('/prompt') || request.path.endsWith('/abort'))).toBe(false);
 });
 
+test('missing model onboarding keeps draft and attachments editable until model save finishes without auto-sending', async ({ launchElectronApp }) => {
+  const electronApp = await launchElectronApp({ skipSetup: true });
+  let page = await getStableWindow(electronApp);
+  const connection = await page.evaluate(async () => ({
+    token: await window.electron.ipcRenderer.invoke('hostapi:token') as string,
+    baseUrl: await window.electron.ipcRenderer.invoke('hostapi:base-url') as string,
+  }));
+  await installCodingFirstChatHost(electronApp, connection, false, false, false, undefined, false, undefined, 'saved');
+  await disableCodingEventSource(page);
+  try {
+    await page.reload();
+    page = await getStableWindow(electronApp);
+    await page.getByTestId('ai-module-option-programming').click();
+    await page.evaluate(() => { window.location.hash = '/chat'; });
+    const composer = page.getByTestId('coding-message-composer');
+    const textbox = composer.getByRole('textbox');
+    await expect(page.getByText('选一个模型，开始聊聊', { exact: true })).toBeVisible();
+    await textbox.fill('想做一个太空小游戏');
+    await page.getByTestId('coding-file-attachment-input').setInputFiles({
+      name: 'game-sketch.png', mimeType: 'image/png',
+      buffer: Buffer.from('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/x8AAusB9Y9ZlS8AAAAASUVORK5CYII=', 'base64'),
+    });
+    await expect(composer.getByRole('alert')).toHaveCount(0);
+    await expect(page.getByRole('button', { name: '重试', exact: true })).toHaveCount(0);
+    await expect(page.locator('[data-sonner-toast]')).toHaveCount(0);
+    await expect(composer.getByRole('button', { name: '发送', exact: true })).toBeDisabled();
+    await textbox.press('Enter');
+    await electronApp.evaluate(() => {
+      (globalThis as typeof globalThis & { __makelorePiFirstChatE2E: { holdModelSave: boolean } }).__makelorePiFirstChatE2E.holdModelSave = true;
+    });
+    const choose = page.getByRole('button', { name: '选择模型', exact: true });
+    await choose.focus();
+    await page.keyboard.press('Enter');
+    await expect(page.getByRole('menuitemradio', { name: 'model-a', exact: true })).toBeVisible();
+    await expect(page.getByRole('menuitemradio', { name: 'model-b', exact: true })).toBeVisible();
+    await page.screenshot({ path: test.info().outputPath('missing-model-direct-picker.png'), animations: 'disabled' });
+    await page.getByRole('menuitemradio', { name: 'model-b', exact: true }).focus();
+    await page.keyboard.press('Enter');
+    await expect.poll(() => electronApp.evaluate(() => (
+      globalThis as typeof globalThis & { __makelorePiFirstChatE2E: { modelSavePending: boolean } }
+    ).__makelorePiFirstChatE2E.modelSavePending)).toBe(true);
+    await expect(textbox).toBeEnabled();
+    await expect(page.getByTestId('coding-file-attachment-input')).toBeEnabled();
+    await textbox.fill('模型保存时继续补充游戏想法');
+    await textbox.press('Enter');
+    await expect(composer.getByRole('button', { name: '发送', exact: true })).toBeDisabled();
+    expect((await readState(electronApp)).captured.some(request => request.path.endsWith('/prompt'))).toBe(false);
+    await electronApp.evaluate(() => {
+      (globalThis as typeof globalThis & { __makelorePiFirstChatE2E: { releaseModelSave: (() => void) | null } }).__makelorePiFirstChatE2E.releaseModelSave?.();
+    });
+    await expect(page.getByRole('button', { name: /模型与思考设置：model-b/ })).toBeVisible();
+    await expect(composer.getByRole('button', { name: '发送', exact: true })).toBeEnabled();
+    await expect(textbox).toBeFocused();
+    await expect(textbox).toHaveValue('模型保存时继续补充游戏想法');
+    await expect(page.getByRole('button', { name: '移除图片 game-sketch.png' })).toBeEnabled();
+    await page.screenshot({ path: test.info().outputPath('model-selected-draft-retained.png'), animations: 'disabled' });
+    const requests = (await readState(electronApp)).captured;
+    expect(requests.filter(request => request.path.endsWith('/model') && request.method === 'POST').map(request => request.body)).toEqual([
+      { model: { accountId: 'account-e2e', modelId: 'model-b', thinkingLevel: 'off' } },
+    ]);
+    expect(requests.some(request => request.path.endsWith('/prompt') || request.path.endsWith('/abort')
+      || (request.path === '/api/coding/projects/conversations' && request.method === 'POST'))).toBe(false);
+  } finally {
+    await electronApp.evaluate(() => {
+      (globalThis as typeof globalThis & { __makelorePiFirstChatE2E?: { releaseModelSave: (() => void) | null } }).__makelorePiFirstChatE2E?.releaseModelSave?.();
+    });
+  }
+});
+
+test('provisional model onboarding creates a conversation and saves its chosen model only on explicit send', async ({ launchElectronApp }) => {
+  const electronApp = await launchElectronApp({ skipSetup: true });
+  let page = await getStableWindow(electronApp);
+  const connection = await page.evaluate(async () => ({
+    token: await window.electron.ipcRenderer.invoke('hostapi:token') as string,
+    baseUrl: await window.electron.ipcRenderer.invoke('hostapi:base-url') as string,
+  }));
+  await installCodingFirstChatHost(electronApp, connection, false, false, false, undefined, false, undefined, 'provisional');
+  await disableCodingEventSource(page);
+  await page.reload();
+  page = await getStableWindow(electronApp);
+  await page.getByTestId('ai-module-option-programming').click();
+  await page.evaluate(() => { window.location.hash = '/chat'; });
+  const composer = page.getByTestId('coding-message-composer');
+  const textbox = composer.getByRole('textbox');
+  await expect(page.getByText('选一个模型，开始聊聊', { exact: true })).toBeVisible();
+  await textbox.fill('第一句话先写在这里');
+  await textbox.press('Enter');
+  await page.getByRole('button', { name: '选择模型', exact: true }).click();
+  await page.getByRole('menuitemradio', { name: 'model-b', exact: true }).click();
+  await expect(page.getByRole('button', { name: /模型与思考设置：model-b/ })).toBeVisible();
+  await expect(textbox).toHaveValue('第一句话先写在这里');
+  const before = (await readState(electronApp)).captured;
+  expect(before.some(request => request.method === 'POST' && (request.path === '/api/coding/projects/conversations'
+    || request.path.endsWith('/model') || request.path.endsWith('/prompt')))).toBe(false);
+  await composer.getByRole('button', { name: '发送', exact: true }).click();
+  await expect.poll(async () => (await readState(electronApp)).captured.filter(request => request.path.endsWith('/prompt'))).toHaveLength(1);
+  const mutations = (await readState(electronApp)).captured.filter(request => request.method === 'POST'
+    && (request.path === '/api/coding/projects/conversations' || request.path.endsWith('/model') || request.path.endsWith('/prompt')));
+  expect(mutations.map(request => request.path)).toEqual([
+    '/api/coding/projects/conversations', '/api/coding/conversations/conversation-pi-first-chat/model',
+    '/api/coding/conversations/conversation-pi-first-chat/prompt',
+  ]);
+  expect(mutations[1].body).toEqual({ model: { accountId: 'account-e2e', modelId: 'model-b', thinkingLevel: 'off' } });
+  expect(mutations[2].body).toMatchObject({ text: '第一句话先写在这里' });
+});
+
 test('managed capabilities expose native xhigh and block unsupported image input', async ({ launchElectronApp }) => {
   const electronApp = await launchElectronApp({ skipSetup: true });
   let page = await getStableWindow(electronApp);
diff --git a/tests/unit/coding-chat-panel.test.tsx b/tests/unit/coding-chat-panel.test.tsx
index d4e85a2f..754deb10 100644
--- a/tests/unit/coding-chat-panel.test.tsx
+++ b/tests/unit/coding-chat-panel.test.tsx
@@ -67,6 +67,7 @@ const secondProject: CodingProjectSummary = {
   name: 'Second local project',
   lastOpenedAt: '2026-08-22T00:00:00.000Z',
 };
+const configuredModel = { accountId: 'account-1', modelId: 'model-a', thinkingLevel: 'off' as const };
 const agent: CodingProjectAgent = {
   id: 'agent-1',
   avatarId: 'default',
@@ -87,8 +88,8 @@ const agent: CodingProjectAgent = {
   pinned: true,
   createdAt: '2026-08-23T00:00:00.000Z',
   updatedAt: '2026-08-23T00:00:00.000Z',
-  model: null,
-  modelResolution: 'required',
+  model: configuredModel,
+  modelResolution: 'resolved',
 };
 const config: CodingProjectConfig = {
   schemaVersion: 2,
@@ -107,8 +108,8 @@ const conversation: CodingConversationMetadata = {
   unread: false,
   createdAt: '2026-08-23T00:00:00.000Z',
   updatedAt: '2026-08-23T00:00:00.000Z',
-  model: null,
-  modelResolution: 'required',
+  model: configuredModel,
+  modelResolution: 'resolved',
 };
 const reviewer: CodingProjectAgent = {
   ...agent,
@@ -190,7 +191,15 @@ vi.mock('@/lib/host-events', () => ({
 }));
 
 describe('CodingChatPanel first Conversation', () => {
-  beforeEach(() => {
+  beforeEach(async () => {
+    const { useProviderStore } = await import('@/stores/providers');
+    useProviderStore.setState({
+      initialized: true, loading: false, error: null,
+      accounts: [{ id: 'account-1', vendorId: 'custom', label: 'Test account', authMode: 'api_key',
+        model: 'model-a', fallbackModels: ['model-b'], enabled: true, isDefault: true,
+        createdAt: '2026-08-24T00:00:00.000Z', updatedAt: '2026-08-24T00:00:00.000Z' }],
+      vendors: [],
+    });
     hostEventApi.subscribe.mockReturnValue(vi.fn());
     Object.defineProperty(URL, 'createObjectURL', {
       configurable: true,
@@ -208,6 +217,213 @@ describe('CodingChatPanel first Conversation', () => {
     vi.resetModules();
   });
 
+  it('keeps an unresolved conversation editable and blocks sending until direct model selection saves and refreshes', async () => {
+    const unresolved = { ...conversation, model: null, modelResolution: 'required' as const };
+    const saveFlight = deferred<{ model: typeof configuredModel; modelResolution: 'resolved' }>();
+    const refreshFlight = deferred<ConversationSnapshot>();
+    projectApi.list.mockResolvedValue({ projects: [project], activeProjectId: project.id });
+    projectApi.config.mockResolvedValue({ project, config });
+    projectApi.conversations.mockResolvedValue([unresolved]);
+    conversationApi.events.mockResolvedValue(new FakeEventSource() as unknown as EventSource);
+    conversationApi.model.mockReturnValue(saveFlight.promise);
+    const { createLocalConversationSnapshot } = await import('@/pages/Chat/coding-chat-snapshot');
+    conversationApi.snapshot.mockResolvedValueOnce(createLocalConversationSnapshot(project.id, unresolved))
+      .mockReturnValue(refreshFlight.promise);
+    const { CodingChatPanel } = await import('@/pages/Chat/CodingChatPanel');
+    const { codingConversationStore } = await import('@/stores/coding-conversations');
+    render(<CodingChatPanel />);
+    await waitFor(() => expect(codingConversationStore.getState().entriesByConversationId[conversation.id]?.loadState).toBe('live'));
+    const composer = screen.getByTestId('coding-message-composer');
+    const textbox = within(composer).getByRole('textbox');
+    fireEvent.change(textbox, { target: { value: '先保留这段草稿' } });
+    fireEvent.change(screen.getByTestId('coding-file-attachment-input'), {
+      target: { files: [new File(['image'], 'draft.png', { type: 'image/png' })] },
+    });
+    expect(screen.getByText('选一个模型，开始聊聊')).toBeVisible();
+    expect(within(composer).queryByRole('alert')).not.toBeInTheDocument();
+    expect(screen.queryByRole('button', { name: '重试', exact: true })).not.toBeInTheDocument();
+    expect(textbox).toBeEnabled();
+    expect(screen.getByRole('button', { name: '发送' })).toBeDisabled();
+    fireEvent.keyDown(textbox, { key: 'Enter', code: 'Enter' });
+    expect(conversationApi.submit).not.toHaveBeenCalled();
+    fireEvent.keyDown(screen.getByRole('button', { name: '选择模型', exact: true }), { key: 'Enter' });
+    fireEvent.click(await screen.findByRole('menuitemradio', { name: 'model-a', exact: true }));
+    await waitFor(() => expect(conversationApi.model).toHaveBeenCalledWith(conversation.id, configuredModel));
+    expect(screen.getByRole('button', { name: '发送' })).toBeDisabled();
+    expect(textbox).toBeEnabled();
+    expect(screen.getByTestId('coding-file-attachment-input')).toBeEnabled();
+    fireEvent.change(textbox, { target: { value: '保存模型时也能继续写' } });
+    fireEvent.keyDown(textbox, { key: 'Enter', code: 'Enter' });
+    await act(async () => saveFlight.resolve({ model: configuredModel, modelResolution: 'resolved' }));
+    await waitFor(() => expect(conversationApi.snapshot).toHaveBeenCalledTimes(2));
+    expect(screen.getByRole('button', { name: '发送' })).toBeDisabled();
+    expect(conversationApi.submit).not.toHaveBeenCalled();
+    await act(async () => refreshFlight.resolve(createLocalConversationSnapshot(project.id, conversation)));
+    await waitFor(() => expect(screen.getByRole('button', { name: '发送' })).toBeEnabled());
+    await waitFor(() => expect(textbox).toHaveFocus());
+    expect(textbox).toHaveValue('保存模型时也能继续写');
+    expect(screen.getByRole('button', { name: '移除图片 draft.png' })).toBeEnabled();
+    expect(conversationApi.submit).not.toHaveBeenCalled();
+    expect(attachmentApi.upload).not.toHaveBeenCalled();
+    expect(projectApi.create).not.toHaveBeenCalled();
+  });
+
+  it('retains the draft and picker after model selection fails without sending a prompt', async () => {
+    const unresolved = { ...conversation, model: null, modelResolution: 'required' as const };
+    projectApi.list.mockResolvedValue({ projects: [project], activeProjectId: project.id });
+    projectApi.config.mockResolvedValue({ project, config });
+    projectApi.conversations.mockResolvedValue([unresolved]);
+    conversationApi.events.mockResolvedValue(new FakeEventSource() as unknown as EventSource);
+    conversationApi.model.mockRejectedValue(new Error('模型保存失败，请再试一次'));
+    const { createLocalConversationSnapshot } = await import('@/pages/Chat/coding-chat-snapshot');
+    conversationApi.snapshot.mockResolvedValue(createLocalConversationSnapshot(project.id, unresolved));
+    const { CodingChatPanel } = await import('@/pages/Chat/CodingChatPanel');
+    render(<CodingChatPanel />);
+    const textbox = within(await screen.findByTestId('coding-message-composer')).getByRole('textbox');
+    fireEvent.change(textbox, { target: { value: '保存失败也要留着' } });
+    fireEvent.keyDown(await screen.findByRole('button', { name: '选择模型', exact: true }), { key: 'Enter' });
+    fireEvent.click(await screen.findByRole('menuitemradio', { name: 'model-b', exact: true }));
+    expect(await screen.findByText('模型保存失败，请再试一次')).toBeVisible();
+    expect(screen.getByRole('button', { name: '选择模型', exact: true })).toBeEnabled();
+    expect(textbox).toHaveValue('保存失败也要留着');
+    expect(textbox).toBeEnabled();
+    expect(screen.getByRole('button', { name: '发送' })).toBeDisabled();
+    expect(conversationApi.submit).not.toHaveBeenCalled();
+  });
+
+  it('clears only model-unavailable submission guidance after a successful choice without editing or auto-sending the draft', async () => {
+    const replacement = { ...configuredModel, modelId: 'model-b' };
+    projectApi.list.mockResolvedValue({ projects: [project], activeProjectId: project.id });
+    projectApi.config.mockResolvedValue({ project, config });
+    projectApi.conversations.mockResolvedValue([conversation]);
+    conversationApi.events.mockResolvedValue(new FakeEventSource() as unknown as EventSource);
+    conversationApi.submit.mockRejectedValue(new AppError('UNKNOWN', '所选模型当前不可用，请重新选择。', undefined,
+      { backendCode: 'CODING_MODEL_UNAVAILABLE' }));
+    conversationApi.model.mockResolvedValue({ model: replacement, modelResolution: 'resolved' });
+    const { createLocalConversationSnapshot } = await import('@/pages/Chat/coding-chat-snapshot');
+    conversationApi.snapshot.mockResolvedValueOnce(createLocalConversationSnapshot(project.id, conversation))
+      .mockResolvedValue(createLocalConversationSnapshot(project.id, { ...conversation, model: replacement }));
+    const { CodingChatPanel } = await import('@/pages/Chat/CodingChatPanel');
+    render(<CodingChatPanel />);
+    const composer = await screen.findByTestId('coding-message-composer');
+    const textbox = within(composer).getByRole('textbox');
+    fireEvent.change(textbox, { target: { value: '模型选好以后再发这句话' } });
+    await waitFor(() => expect(screen.getByRole('button', { name: '发送' })).toBeEnabled());
+    fireEvent.click(screen.getByRole('button', { name: '发送' }));
+    expect(await screen.findByText('选一个模型，开始聊聊')).toBeVisible();
+    expect(within(composer).queryByRole('alert')).not.toBeInTheDocument();
+    expect(textbox).toHaveValue('模型选好以后再发这句话');
+    fireEvent.keyDown(screen.getByRole('button', { name: '选择模型', exact: true }), { key: 'Enter' });
+    fireEvent.click(await screen.findByRole('menuitemradio', { name: 'model-b', exact: true }));
+    await waitFor(() => expect(screen.getByRole('button', { name: '发送' })).toBeEnabled());
+    expect(textbox).toHaveValue('模型选好以后再发这句话');
+    expect(screen.queryByText('选一个模型，开始聊聊')).not.toBeInTheDocument();
+    expect(conversationApi.submit).toHaveBeenCalledOnce();
+    expect(conversationApi.model).toHaveBeenCalledWith(conversation.id, replacement);
+  });
+
+  it('keeps provisional model choices scoped to project and agent and saves the choice only after explicit first send', async () => {
+    const missingAgent = { ...agent, model: null, modelResolution: 'required' as const };
+    const missingReviewer = { ...reviewer, model: null, modelResolution: 'required' as const };
+    const missingConfig = configForAgents([missingAgent, missingReviewer]);
+    const unresolved = { ...conversation, model: null, modelResolution: 'required' as const };
+    const selectedModel = { ...configuredModel, modelId: 'model-b' };
+    const saveFlight = deferred<{ model: typeof selectedModel; modelResolution: 'resolved' }>();
+    projectApi.list.mockResolvedValue({ projects: [project, secondProject], activeProjectId: project.id });
+    projectApi.config.mockResolvedValue({ project, config: missingConfig });
+    projectApi.conversations.mockResolvedValue([]);
+    projectApi.create.mockResolvedValue(unresolved);
+    conversationApi.model.mockReturnValue(saveFlight.promise);
+    conversationApi.events.mockResolvedValue(new FakeEventSource() as unknown as EventSource);
+    conversationApi.submit.mockImplementation(async input => ({ accepted: true, conversationId: conversation.id,
+      clientRequestId: input.clientRequestId, runId: 'first-model-run', mode: 'prompt' }));
+    const { createLocalConversationSnapshot } = await import('@/pages/Chat/coding-chat-snapshot');
+    conversationApi.snapshot.mockResolvedValue(createLocalConversationSnapshot(project.id, { ...conversation, model: selectedModel }));
+    const { CodingChatPanel } = await import('@/pages/Chat/CodingChatPanel');
+    const { codingWorkspaceStore } = await import('@/stores/coding-workspace');
+    render(<CodingChatPanel />);
+    const textbox = within(await screen.findByTestId('coding-message-composer')).getByRole('textbox');
+    fireEvent.change(textbox, { target: { value: '只有按发送才开始' } });
+    fireEvent.keyDown(await screen.findByRole('button', { name: '选择模型', exact: true }), { key: 'Enter' });
+    fireEvent.click(await screen.findByRole('menuitemradio', { name: 'model-b', exact: true }));
+    await waitFor(() => expect(screen.getByRole('button', { name: /模型与思考设置：model-b/ })).toBeVisible());
+    expect(projectApi.create).not.toHaveBeenCalled();
+    expect(conversationApi.model).not.toHaveBeenCalled();
+    expect(conversationApi.submit).not.toHaveBeenCalled();
+    await act(async () => codingWorkspaceStore.setState({ selectedAgentId: reviewer.id }));
+    expect(await screen.findByRole('button', { name: '选择模型', exact: true })).toBeVisible();
+    await act(async () => codingWorkspaceStore.setState({ activeProjectId: secondProject.id, activeProject: secondProject, selectedAgentId: agent.id }));
+    expect(screen.getByRole('button', { name: '选择模型', exact: true })).toBeVisible();
+    await act(async () => codingWorkspaceStore.setState({ activeProjectId: project.id, activeProject: project, selectedAgentId: agent.id }));
+    expect(screen.getByRole('button', { name: /模型与思考设置：model-b/ })).toBeVisible();
+    expect(textbox).toHaveValue('只有按发送才开始');
+    fireEvent.click(screen.getByRole('button', { name: '发送' }));
+    await waitFor(() => expect(conversationApi.model).toHaveBeenCalledWith(conversation.id, selectedModel));
+    expect(projectApi.create).toHaveBeenCalledOnce();
+    expect(conversationApi.submit).not.toHaveBeenCalled();
+    await act(async () => saveFlight.resolve({ model: selectedModel, modelResolution: 'resolved' }));
+    await waitFor(() => expect(conversationApi.submit).toHaveBeenCalledOnce());
+    expect(conversationApi.submit).toHaveBeenCalledWith(expect.objectContaining({ text: '只有按发送才开始' }));
+    expect(projectApi.create.mock.invocationCallOrder[0]).toBeLessThan(conversationApi.model.mock.invocationCallOrder[0]);
+    expect(conversationApi.model.mock.invocationCallOrder[0]).toBeLessThan(conversationApi.submit.mock.invocationCallOrder[0]);
+  });
+
+  it('sends the captured first prompt and keeps later typing as a draft while saving the provisional model', async () => {
+    const missingAgent = { ...agent, model: null, modelResolution: 'required' as const };
+    const unresolved = { ...conversation, model: null, modelResolution: 'required' as const };
+    const saveFlight = deferred<{ model: typeof configuredModel; modelResolution: 'resolved' }>();
+    projectApi.list.mockResolvedValue({ projects: [project], activeProjectId: project.id });
+    projectApi.config.mockResolvedValue({ project, config: configForAgents([missingAgent]) });
+    projectApi.conversations.mockResolvedValue([]);
+    projectApi.create.mockResolvedValue(unresolved);
+    conversationApi.model.mockReturnValue(saveFlight.promise);
+    conversationApi.events.mockResolvedValue(new FakeEventSource() as unknown as EventSource);
+    conversationApi.submit.mockImplementation(async input => ({ accepted: true, conversationId: conversation.id,
+      clientRequestId: input.clientRequestId, runId: 'captured-first-run', mode: 'prompt' }));
+    const { createLocalConversationSnapshot } = await import('@/pages/Chat/coding-chat-snapshot');
+    conversationApi.snapshot.mockResolvedValue(createLocalConversationSnapshot(project.id, conversation));
+    const { CodingChatPanel } = await import('@/pages/Chat/CodingChatPanel');
+    render(<CodingChatPanel />);
+    const textbox = within(await screen.findByTestId('coding-message-composer')).getByRole('textbox');
+    fireEvent.change(textbox, { target: { value: 'A：这句已经按了发送' } });
+    fireEvent.keyDown(await screen.findByRole('button', { name: '选择模型', exact: true }), { key: 'Enter' });
+    fireEvent.click(await screen.findByRole('menuitemradio', { name: 'model-a', exact: true }));
+    await waitFor(() => expect(screen.getByRole('button', { name: '发送' })).toBeEnabled());
+    fireEvent.click(screen.getByRole('button', { name: '发送' }));
+    await waitFor(() => expect(conversationApi.model).toHaveBeenCalledWith(conversation.id, configuredModel));
+    expect(textbox).toBeEnabled();
+    fireEvent.change(textbox, { target: { value: 'B：这是下一句草稿' } });
+    fireEvent.keyDown(textbox, { key: 'Enter', code: 'Enter' });
+    expect(conversationApi.submit).not.toHaveBeenCalled();
+    await act(async () => saveFlight.resolve({ model: configuredModel, modelResolution: 'resolved' }));
+    await waitFor(() => expect(conversationApi.submit).toHaveBeenCalledOnce());
+    expect(conversationApi.submit).toHaveBeenCalledWith(expect.objectContaining({ text: 'A：这句已经按了发送' }));
+    expect(textbox).toHaveValue('B：这是下一句草稿');
+  });
+
+  it('keeps an authoritatively resolved default model usable when it is absent from the catalog choices', async () => {
+    const customModel = { ...configuredModel, modelId: 'configured-custom-model' };
+    const customConversation = { ...conversation, model: customModel };
+    projectApi.list.mockResolvedValue({ projects: [project], activeProjectId: project.id });
+    projectApi.config.mockResolvedValue({ project, config: configForAgents([{ ...agent, model: customModel }]) });
+    projectApi.conversations.mockResolvedValue([customConversation]);
+    conversationApi.events.mockResolvedValue(new FakeEventSource() as unknown as EventSource);
+    conversationApi.submit.mockImplementation(async input => ({ accepted: true, conversationId: conversation.id,
+      clientRequestId: input.clientRequestId, runId: 'custom-model-run', mode: 'prompt' }));
+    const { createLocalConversationSnapshot } = await import('@/pages/Chat/coding-chat-snapshot');
+    conversationApi.snapshot.mockResolvedValue(createLocalConversationSnapshot(project.id, customConversation));
+    const { CodingChatPanel } = await import('@/pages/Chat/CodingChatPanel');
+    render(<CodingChatPanel />);
+    const textbox = within(await screen.findByTestId('coding-message-composer')).getByRole('textbox');
+    fireEvent.change(textbox, { target: { value: '沿用已经确认可用的模型' } });
+    await waitFor(() => expect(screen.getByRole('button', { name: '发送' })).toBeEnabled());
+    expect(screen.queryByText('选一个模型，开始聊聊')).not.toBeInTheDocument();
+    expect(screen.getByRole('button', { name: /模型与思考设置：configured-custom-model/ })).toBeVisible();
+    fireEvent.click(screen.getByRole('button', { name: '发送' }));
+    await waitFor(() => expect(conversationApi.submit).toHaveBeenCalledOnce());
+    expect(conversationApi.model).not.toHaveBeenCalled();
+  });
+
   it('continues a failed operation using its history without sending or clearing the current draft', async () => {
     projectApi.list.mockResolvedValue({ projects: [project], activeProjectId: project.id });
     projectApi.config.mockResolvedValue({ project, config });
diff --git a/tests/unit/coding-core-routes.test.ts b/tests/unit/coding-core-routes.test.ts
index 33d0399e..b66eb583 100644
--- a/tests/unit/coding-core-routes.test.ts
+++ b/tests/unit/coding-core-routes.test.ts
@@ -13,12 +13,14 @@ import { handleCodingConversationRoutes } from '../../electron/api/routes/coding
 import type { AgentBrowserModule } from '../../electron/agent-browser';
 import {
   CodingConversationService,
+  type CodingConversationServiceOptions,
 } from '../../electron/coding-runtime/conversation-service';
 import {
   CodingRuntimeContractError,
   InMemoryConversationRuntime,
 } from '../../electron/coding-runtime/in-memory-conversation-runtime';
 import { CodingProjectService } from '../../electron/coding-projects/project-service';
+import { readCodingConversationHistory } from '../../electron/coding-projects/conversation-history';
 import {
   createCodingProjectAgent,
 } from '../../electron/coding-projects/project-config';
@@ -54,7 +56,7 @@ afterEach(async () => {
 
 async function setup(runtime = new InMemoryConversationRuntime({
   commands: [{ name: 'live-command', description: 'From live worker' }],
-})) {
+}), options: CodingConversationServiceOptions = {}) {
   const root = await mkdtemp(path.join(tmpdir(), 'makelore-pi-core-'));
   roots.push(root);
   let projectSequence = 0;
@@ -78,7 +80,7 @@ async function setup(runtime = new InMemoryConversationRuntime({
     },
   }, { now: '2026-08-23T00:00:00.000Z' });
   const projects = new CodingProjectService(store);
-  const conversations = new CodingConversationService(projects, runtime);
+  const conversations = new CodingConversationService(projects, runtime, options);
   return { root, store, projects, conversations, runtime };
 }
 
@@ -201,6 +203,15 @@ describe('PI-100 coding core Host contract', () => {
       );
       expect(composition.runtime.getDiagnostics().workers).toEqual([]);
       expect(getLocalProxyCredential).not.toHaveBeenCalled();
+      await composition.projects.conversationStore(projectPath).setModelState(conversation.id, {
+        model: null, modelResolution: 'required',
+      });
+      await expect(composition.conversations.getSnapshot(conversation.id)).resolves.toMatchObject({
+        conversation: { id: conversation.id, model: { model: null, modelResolution: 'required' } },
+        nodes: [], run: { status: 'idle' }, worker: { status: 'stopped' },
+      });
+      expect(composition.runtime.getDiagnostics().workers).toEqual([]);
+      expect(getLocalProxyCredential).not.toHaveBeenCalled();
       await composition.conversations.deleteConversation(conversation.id);
       const bound = await composition.conversations.createConversation({ projectId: created.project.id, agentId: 'builder', title: 'Bound session' });
       await composition.projects.conversationStore(projectPath).ensureSessionBinding(bound.id, async () => ({
@@ -266,9 +277,19 @@ describe('PI-100 coding core Host contract', () => {
     }
     const runtime = new StrictResolvedModelRuntime();
     const projects = new CodingProjectService(store);
-    const conversations = new CodingConversationService(projects, runtime);
+    const readHistory = vi.fn((projectId, metadata) => readCodingConversationHistory(root, projectId, metadata));
+    const conversations = new CodingConversationService(projects, runtime, { readHistory });
     const conversation = await conversations.createConversation({ agentId: 'builder', title: 'Resolve me' });
     const prepare = vi.spyOn(runtime, 'prepare');
+    const prompt = vi.spyOn(runtime, 'prompt');
+
+    await expect(conversations.getSnapshot(conversation.id)).resolves.toMatchObject({
+      conversation: { id: conversation.id, title: 'Resolve me', model: { model: null, modelResolution: 'required' } },
+      nodes: [], run: { status: 'idle' }, worker: { status: 'stopped' },
+    });
+    expect(readHistory).toHaveBeenCalledOnce();
+    expect(prepare).not.toHaveBeenCalled();
+    expect(prompt).not.toHaveBeenCalled();
 
     await expect(conversations.setModel(conversation.id, MODEL)).resolves.toEqual({
       model: MODEL,
@@ -286,8 +307,196 @@ describe('PI-100 coding core Host contract', () => {
       model: MODEL,
       modelResolution: 'resolved',
     });
+    expect(prompt).not.toHaveBeenCalled();
+    await expect(conversations.acceptPrompt({ conversationId: conversation.id,
+      clientRequestId: 'first-after-choice', mode: 'prompt', text: 'Send my preserved draft' })).resolves.toMatchObject({ accepted: true });
+    expect(prompt).toHaveBeenCalledOnce();
   });
 
+  it('reads durable history and project metadata while the conversation needs a model', async () => {
+    let userDataDir = '';
+    const readHistory = vi.fn((projectId, metadata) => readCodingConversationHistory(userDataDir, projectId, metadata));
+    const result = await setup(undefined, { readHistory });
+    userDataDir = result.root;
+    const conversation = await createConversation(result.conversations);
+    await result.projects.conversationStore(result.root).setModelState(conversation.id, {
+      model: null, modelResolution: 'required',
+    });
+    await result.projects.conversationStore(result.root).ensureSessionBinding(conversation.id, async () => ({
+      sessionKey: 'onboarding-history', piSessionId: 'onboarding-history',
+    }));
+    const sessionDirectory = path.join(userDataDir, 'coding-runtime', 'pi', 'sessions', 'project-a');
+    await mkdir(sessionDirectory, { recursive: true });
+    await writeFile(path.join(sessionDirectory, 'onboarding-history.jsonl'), JSON.stringify({
+      type: 'message', id: 'saved-user', parentId: null,
+      message: { role: 'user', content: 'Keep this earlier conversation' },
+    }) + '\n');
+    const prepare = vi.spyOn(result.runtime, 'prepare');
+    const runtimeSnapshot = vi.spyOn(result.runtime, 'getSnapshot');
+
+    const snapshot = await result.conversations.getSnapshot(conversation.id);
+
+    expect(snapshot.conversation).toMatchObject({
+      id: conversation.id, projectId: 'project-a', agentId: 'builder', title: 'PI-100',
+      model: { model: null, modelResolution: 'required' },
+    });
+    expect(snapshot.nodes).toEqual(expect.arrayContaining([expect.objectContaining({
+      kind: 'message', role: 'user', sourceEntryId: 'saved-user',
+      blocks: expect.arrayContaining([expect.objectContaining({ text: 'Keep this earlier conversation' })]),
+    })]));
+    expect(prepare).not.toHaveBeenCalled();
+    expect(runtimeSnapshot).not.toHaveBeenCalled();
+  });
+
+  it.each(['CODING_MIGRATION_MODEL_REQUIRED', 'CODING_MODEL_UNAVAILABLE'] as const)(
+    'projects a rejected default as awaiting selection only for %s preparation errors', async (code) => {
+      const readHistory = vi.fn((projectId, metadata) => readCodingConversationHistory(tmpdir(), projectId, metadata));
+      const result = await setup(undefined, { readHistory });
+      const conversation = await createConversation(result.conversations);
+      const prepare = vi.spyOn(result.runtime, 'prepare').mockRejectedValueOnce(
+        new CodingRuntimeContractError(code, 'Choose an available model', true),
+      );
+
+      await expect(result.conversations.getSnapshot(conversation.id)).resolves.toMatchObject({
+        conversation: { model: { model: null, modelResolution: 'required' } },
+        run: { status: 'idle' }, worker: { status: 'stopped' },
+      });
+      expect(prepare).toHaveBeenCalledOnce();
+      expect(readHistory).toHaveBeenCalledOnce();
+      expect((await result.conversations.getConversation(conversation.id))).toMatchObject({
+        model: MODEL, modelResolution: 'resolved',
+      });
+    },
+  );
+
+  it.each([
+    ['CODING_PROVIDER_AUTH_REQUIRED', 'CODING_PROVIDER_AUTH_REQUIRED'],
+    ['CODING_RUNTIME_START_FAILED', 'CODING_RUNTIME_START_FAILED'],
+    ['unknown', 'CODING_RUNTIME_UNAVAILABLE'],
+  ] as const)('preserves %s preparation failures instead of treating them as model onboarding', async (code, expectedCode) => {
+    const readHistory = vi.fn();
+    const result = await setup(undefined, { readHistory });
+    const conversation = await createConversation(result.conversations);
+    vi.spyOn(result.runtime, 'prepare').mockRejectedValue(code === 'unknown'
+      ? new Error('Private runtime failure')
+      : new CodingRuntimeContractError(code, 'Preparation failed', true));
+
+    await expect(result.conversations.getSnapshot(conversation.id)).rejects.toMatchObject({ code: expectedCode });
+    expect(readHistory).not.toHaveBeenCalled();
+  });
+
+  it.each([false, true])('preserves history read failures when preparing model onboarding (rejected default=%s)', async (rejectedDefault) => {
+    const historyError = new Error('History cannot be read');
+    const readHistory = vi.fn().mockRejectedValue(historyError);
+    const result = await setup(undefined, { readHistory });
+    const conversation = await createConversation(result.conversations);
+    if (rejectedDefault) {
+      vi.spyOn(result.runtime, 'prepare').mockRejectedValue(
+        new CodingRuntimeContractError('CODING_MODEL_UNAVAILABLE', 'Model unavailable', true),
+      );
+    } else {
+      await result.projects.conversationStore(result.root).setModelState(conversation.id, { model: null, modelResolution: 'required' });
+    }
+
+    await expect(result.conversations.getSnapshot(conversation.id)).rejects.toBe(historyError);
+  });
+
+  it('preserves the missing-model preparation contract when no durable history reader is configured', async () => {
+    const result = await setup();
+    const conversation = await createConversation(result.conversations);
+    await result.projects.conversationStore(result.root).setModelState(conversation.id, { model: null, modelResolution: 'required' });
+    const prepare = vi.spyOn(result.runtime, 'prepare').mockRejectedValue(
+      new CodingRuntimeContractError('CODING_MIGRATION_MODEL_REQUIRED', 'Model required', true),
+    );
+
+    await expect(result.conversations.getSnapshot(conversation.id)).rejects.toMatchObject({
+      code: 'CODING_MIGRATION_MODEL_REQUIRED', status: 409,
+    });
+    expect(prepare).toHaveBeenCalledOnce();
+  });
+
+  it.each([false, true])('keeps active uncertain runtime state authoritative (missing metadata=%s)', async (missingModel) => {
+    const readHistory = vi.fn();
+    const result = await setup(undefined, { readHistory });
+    const conversation = await createConversation(result.conversations);
+    await result.conversations.acceptPrompt({ conversationId: conversation.id,
+      clientRequestId: 'active-onboarding', mode: 'prompt', text: 'Already running' });
+    const active = await result.runtime.getSnapshot(conversation.id);
+    active.run.error = { code: 'CODING_REQUEST_UNCERTAIN', message: 'Still running', recoverable: true };
+    vi.spyOn(result.runtime, 'getSnapshot').mockResolvedValue(active);
+    const prepare = vi.spyOn(result.runtime, 'prepare');
+    if (missingModel) {
+      await result.projects.conversationStore(result.root).setModelState(conversation.id, { model: null, modelResolution: 'required' });
+    } else {
+      prepare.mockRejectedValue(new CodingRuntimeContractError('CODING_MODEL_UNAVAILABLE', 'Model unavailable', true));
+    }
+
+    await expect(result.conversations.getSnapshot(conversation.id)).resolves.toEqual(active);
+    expect(readHistory).not.toHaveBeenCalled();
+    expect(prepare).toHaveBeenCalledTimes(missingModel ? 0 : 1);
+  });
+
+  it('uses the real runtime when model selection starts work during a pending history read', async () => {
+    let releaseHistory!: () => void;
+    const historyGate = new Promise<void>((resolve) => { releaseHistory = resolve; });
+    const readHistory = vi.fn(async (projectId, metadata) => {
+      const snapshot = await readCodingConversationHistory(tmpdir(), projectId, metadata);
+      await historyGate;
+      return snapshot;
+    });
+    const result = await setup(undefined, { readHistory });
+    const conversation = await createConversation(result.conversations);
+    await result.projects.conversationStore(result.root).setModelState(conversation.id, { model: null, modelResolution: 'required' });
+    const opening = result.conversations.getSnapshot(conversation.id);
+    await vi.waitFor(() => expect(readHistory).toHaveBeenCalledOnce());
+
+    await result.conversations.setModel(conversation.id, MODEL);
+    await result.conversations.acceptPrompt({ conversationId: conversation.id,
+      clientRequestId: 'after-concurrent-selection', mode: 'prompt', text: 'Start after selection' });
+    releaseHistory();
+
+    await expect(opening).resolves.toMatchObject({
+      conversation: { model: { model: MODEL, modelResolution: 'resolved' } },
+      run: { status: 'running' },
+    });
+  });
+
+  it.each(['CODING_PROVIDER_AUTH_REQUIRED', 'CODING_RUNTIME_START_FAILED'] as const)(
+    'does not mask a failed concurrent model selection with old history (%s)', async (code) => {
+      let releaseHistory!: () => void;
+      const historyGate = new Promise<void>((resolve) => { releaseHistory = resolve; });
+      const readHistory = vi.fn(async (projectId, metadata) => {
+        const snapshot = await readCodingConversationHistory(tmpdir(), projectId, metadata);
+        await historyGate;
+        return snapshot;
+      });
+      const result = await setup(undefined, { readHistory });
+      const conversation = await createConversation(result.conversations);
+      await result.projects.conversationStore(result.root).setModelState(conversation.id, {
+        model: null, modelResolution: 'required',
+      });
+      const prepare = vi.spyOn(result.runtime, 'prepare').mockRejectedValue(
+        new CodingRuntimeContractError(code, 'Current model cannot start', true),
+      );
+      const prompt = vi.spyOn(result.runtime, 'prompt');
+      const opening = result.conversations.getSnapshot(conversation.id);
+      await vi.waitFor(() => expect(readHistory).toHaveBeenCalledOnce());
+
+      await expect(result.conversations.setModel(conversation.id, MODEL)).rejects.toMatchObject({ code });
+      expect(await result.conversations.getConversation(conversation.id)).toMatchObject({
+        model: MODEL, modelResolution: 'resolved',
+      });
+      expect(result.runtime.getDiagnostics().workers).toEqual([]);
+      expect(prepare).toHaveBeenCalledOnce();
+      releaseHistory();
+
+      await expect(opening).rejects.toMatchObject({ code });
+      expect(prepare).toHaveBeenCalledTimes(2);
+      expect(readHistory).toHaveBeenCalledOnce();
+      expect(prompt).not.toHaveBeenCalled();
+    },
+  );
+
   it('switches a removed saved model before preparing the Conversation', async () => {
     class RemovedModelRuntime extends InMemoryConversationRuntime {
       override async validateModel(model: ProductModelRef) {
diff --git a/tests/unit/coding-feature-ui.test.tsx b/tests/unit/coding-feature-ui.test.tsx
index f5766686..f1c7d499 100644
--- a/tests/unit/coding-feature-ui.test.tsx
+++ b/tests/unit/coding-feature-ui.test.tsx
@@ -28,6 +28,59 @@ vi.mock('@/lib/coding-product-tools', async (importOriginal) => ({
 }));
 
 describe('PI-130 feature-complete Coding UI', () => {
+  it.each([false, true])('shows a pending catalog instead of confirmed empty options while loading=%s', async (loading) => {
+    const { useProviderStore } = await import('@/stores/providers');
+    const original = useProviderStore.getState();
+    useProviderStore.setState({ accounts: [], vendors: [], initialized: false, loading, error: null });
+    const { CodingComposerRuntimeControls } = await import('@/pages/Chat/CodingComposerRuntimeControls');
+    try {
+      render(<CodingComposerRuntimeControls conversation={null} snapshot={null} onboarding onRefresh={vi.fn()}
+        onSelectProvisionalModel={vi.fn()} />);
+      fireEvent.keyDown(screen.getByRole('button', { name: '选择模型', exact: true }), { key: 'Enter' });
+      expect(await screen.findByText('正在读取可用模型…')).toBeVisible();
+      expect(screen.queryByText('暂无可用模型')).not.toBeInTheDocument();
+      expect(screen.queryByText('模型列表暂时没读出来')).not.toBeInTheDocument();
+      expect(screen.queryByRole('menuitemradio')).not.toBeInTheDocument();
+    } finally { useProviderStore.setState(original); }
+  });
+
+  it('distinguishes a failed model catalog and retries reading without invoking a conversation model action', async () => {
+    const { useProviderStore } = await import('@/stores/providers');
+    const original = useProviderStore.getState();
+    const refresh = vi.fn(async () => undefined);
+    useProviderStore.setState({ accounts: [], vendors: [], initialized: true, loading: false,
+      error: 'catalog offline', refreshProviderSnapshot: refresh });
+    const { CodingComposerRuntimeControls } = await import('@/pages/Chat/CodingComposerRuntimeControls');
+    try {
+      render(<CodingComposerRuntimeControls conversation={null} snapshot={null} onboarding onRefresh={vi.fn()}
+        onSelectProvisionalModel={vi.fn()} />);
+      fireEvent.keyDown(screen.getByRole('button', { name: '选择模型', exact: true }), { key: 'Enter' });
+      expect(await screen.findByText('模型列表暂时没读出来')).toBeVisible();
+      expect(screen.queryByText('暂无可用模型')).not.toBeInTheDocument();
+      fireEvent.click(screen.getByRole('menuitem', { name: '重新读取模型', exact: true }));
+      expect(refresh).toHaveBeenCalledOnce();
+      expect(interactionApi.model).not.toHaveBeenCalled();
+    } finally { useProviderStore.setState(original); }
+  });
+
+  it('shows model configuration only for a confirmed empty catalog', async () => {
+    const { useProviderStore } = await import('@/stores/providers');
+    const original = useProviderStore.getState();
+    useProviderStore.setState({ accounts: [], vendors: [], initialized: true, loading: false, error: null });
+    const openSettings = vi.fn();
+    const { CodingComposerRuntimeControls } = await import('@/pages/Chat/CodingComposerRuntimeControls');
+    try {
+      render(<CodingComposerRuntimeControls conversation={null} snapshot={null} onboarding onRefresh={vi.fn()}
+        onSelectProvisionalModel={vi.fn()} onOpenModelSettings={openSettings} />);
+      fireEvent.keyDown(screen.getByRole('button', { name: '选择模型', exact: true }), { key: 'Enter' });
+      expect(await screen.findByText('暂无可用模型')).toBeVisible();
+      expect(screen.queryByText('正在读取可用模型…')).not.toBeInTheDocument();
+      fireEvent.click(screen.getByRole('menuitem', { name: '查看模型配置', exact: true }));
+      expect(openSettings).toHaveBeenCalledOnce();
+      expect(interactionApi.model).not.toHaveBeenCalled();
+    } finally { useProviderStore.setState(original); }
+  });
+
   it('summarizes changed files above the composer and expands their diff', async () => {
     changesApi.get.mockResolvedValueOnce({
       changes: {

From d3e9a027cf18e781bad45ecdd31e4ac411e0965e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 15:00:07 +0800
Subject: [PATCH 12/18] Record navigation validation and pending trial refresh

---
 .../tasks/20261014-navigation-icon-93c4a6e8.md  | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/.project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md b/.project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md
index 5068b3d3..27aab5a0 100644
--- a/.project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md
+++ b/.project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md
@@ -38,16 +38,25 @@
 
 ## Outcome
 
-- Not completed.
+- Product commit d3b0d411ca32b7f8ea72c87dcfe37c02e6692b45 changes only five Renderer navigation files: ModuleSwitcher now renders Lucide Home/House; Agent chat/adjustment, project configuration, settings and plugin page back arrows carry exact “返回上一级” hover title. Global “返回首页” title and all accessible target names/handlers/guards remain. Home hover no longer shifts sideways like a back arrow.
+- Previous WeChat naming files are byte-for-byte source-identical to f1dabdb. README navigation wording and existing test assertions updated.
+- Default full-build Renderer staged in `.trial-runtime/navigation-icon-20261014-93c4a6e8/runtime`; immutable helpers verify pending predecessor f1dabdb, original full Main436f7ba,197 artifacts, source blobs, build proof, shell/bootstrap and current pointer.
+- Root activated stable-origin symlink after fresh CUA saved-state guard. Main PID35142, port58003 and original current.json remain unchanged. State: files-activated-awaiting-cua-refresh. Actual native acceptance still pending; no successful reload or feature proof claimed.
+- CUA refresh rejected with “The user changed ... Re-query the latest state ...”. User asked to perform ⌘R and open Agent adjustment; no input was discarded or cloud operation performed.
 
 ## Verification
 
-- Not run.
+- Pinned pnpm10.33.4: 52 cases across module navigation, titlebar, Agent start/use, project configuration and plugin navigation PASS; typecheck/scoped ESLint/default full build:vite (NIANCODE_RENDERER_ONLY unset) PASS.
+- Two isolated native Electron scenarios PASS (6.6s): Agent cards open chat/adjustment and return with house/parent titles; remembered Code project→settings/config/plugins navigation retains shared chrome and both glyphs. Fixture screenshots inspected; original sizes/alignment retained. Isolated test data does not constitute a real model, cloud or current-user acceptance.
+- Read-only review PASS: unchanged routes, aria target labels, guards; installed Home alias renders lucide-house; existing WeChat-name src blobs unchanged.
+- Logs: /tmp/makelore-nav93c4-{unit,type,lint,build,electron}.log. Fixture artifacts: /tmp/makelore-nav93c4-electron. Peer/source audit: /tmp/makelore-nav93c4-peer-audit.txt.
+- git diff --check and task-aware check_doc_drift PASS before product commit; delivery prepare/activation proof PASS. Live UI completion requires actual CUA observation following refresh.
 
 ## Follow-ups
 
-- None recorded.
+- Await manual refresh; inspect real Agents and Code home house/contextual arrow with correct titles, then finalize runtime pointer using fresh root-verification receipt and mark task Ready for Integration.
+- Retained WeChat-name feature remains native-unverified until real pencil/editor open+cancel is observed. Original frozen name stage is not rewritten. Source and116-unit/1-Electron predecessor evidence remain valid.
 
 ## Promotion Candidates
 
-- None recorded.
+- Target personal workspace/navigation product documentation: global home uses a house with “返回首页”; local return uses arrows and “返回上一级”. Evidence: explicit user request, five-path product delta and passing focused/native fixture tests. Future impact: prevents ambiguous duplicate arrows. No semantic conflict or additional confirmation required; canonical updates only in Integration Gate after accepted integration.

From 548c5e9620294c731526c5d06cab792cb01dcb36 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 15:12:09 +0800
Subject: [PATCH 13/18] Record accepted trial navigation update

---
 .../tasks/20261014-navigation-icon-93c4a6e8.md        | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/.project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md b/.project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md
index 27aab5a0..6f79118b 100644
--- a/.project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md
+++ b/.project-docs/30-worklog/tasks/20261014-navigation-icon-93c4a6e8.md
@@ -8,7 +8,7 @@
 - Worktree: /Users/chillishark/Makelore 麦洛/.codex-worktrees/makelore/20261014-navigation-icon-93c4a6e8
 - Base commit: af639267198d908e43bcb0bd243e86be2a533427
 - Owner: codex-root
-- Status: In Progress
+- Status: Ready for Integration
 
 ## Scope
 
@@ -41,8 +41,9 @@
 - Product commit d3b0d411ca32b7f8ea72c87dcfe37c02e6692b45 changes only five Renderer navigation files: ModuleSwitcher now renders Lucide Home/House; Agent chat/adjustment, project configuration, settings and plugin page back arrows carry exact “返回上一级” hover title. Global “返回首页” title and all accessible target names/handlers/guards remain. Home hover no longer shifts sideways like a back arrow.
 - Previous WeChat naming files are byte-for-byte source-identical to f1dabdb. README navigation wording and existing test assertions updated.
 - Default full-build Renderer staged in `.trial-runtime/navigation-icon-20261014-93c4a6e8/runtime`; immutable helpers verify pending predecessor f1dabdb, original full Main436f7ba,197 artifacts, source blobs, build proof, shell/bootstrap and current pointer.
-- Root activated stable-origin symlink after fresh CUA saved-state guard. Main PID35142, port58003 and original current.json remain unchanged. State: files-activated-awaiting-cua-refresh. Actual native acceptance still pending; no successful reload or feature proof claimed.
-- CUA refresh rejected with “The user changed ... Re-query the latest state ...”. User asked to perform ⌘R and open Agent adjustment; no input was discarded or cloud operation performed.
+- Root activated stable-origin symlink after fresh CUA saved-state guard. Main PID35142 and port58003 preserved. Native CUA screenshot now shows orange house in sidebar and dark left arrow on Agent adjustment; AX Help is “返回上一级”; user explicitly confirmed both hover texts correct. Applied/saved configuration and alice login intact. New stage finalize and immutable verification PASS; current.json Renderer now d3b0d41, Main/bootstrap still436f7ba. State: active-verified.
+- Initial CUA refresh rejected with “The user changed ... Re-query the latest state ...”. Root subsequently executed native View→Reload and Force Reload. Startup temporarily displayed only Makelore; user then reported recovery and fresh CUA confirms authenticated alice on /cloud-agents?view=mine with all existing cards. No input was discarded or cloud operation performed; no Main or NetworkService process was stopped/restarted by this task.
+- Recovery audit: StartupScreen can represent auth/setup/lazy-load waiting; those source files are unchanged from predecessor. Main35142 remained responsive (unauthenticated local session request correctly returned401). Existing Main /api/auth/me fetch/body has no total deadline, a possible startup-wait source; live root cause was not established. No auth bypass, credential reads or speculative startup code change was made. Audit: /tmp/makelore-nav93c4-startup-audit.txt.
 
 ## Verification
 
@@ -50,11 +51,11 @@
 - Two isolated native Electron scenarios PASS (6.6s): Agent cards open chat/adjustment and return with house/parent titles; remembered Code project→settings/config/plugins navigation retains shared chrome and both glyphs. Fixture screenshots inspected; original sizes/alignment retained. Isolated test data does not constitute a real model, cloud or current-user acceptance.
 - Read-only review PASS: unchanged routes, aria target labels, guards; installed Home alias renders lucide-house; existing WeChat-name src blobs unchanged.
 - Logs: /tmp/makelore-nav93c4-{unit,type,lint,build,electron}.log. Fixture artifacts: /tmp/makelore-nav93c4-electron. Peer/source audit: /tmp/makelore-nav93c4-peer-audit.txt.
-- git diff --check and task-aware check_doc_drift PASS before product commit; delivery prepare/activation proof PASS. Live UI completion requires actual CUA observation following refresh.
+- git diff --check and task-aware check_doc_drift PASS before product commit; delivery prepare/activation/finalize proof PASS. Fresh actual Agent UI and user hover acceptance recorded at `.trial-runtime/navigation-icon-20261014-93c4a6e8/verification-receipt.json`. Current-account Code UI was not separately navigated; both Code glyph/title/route semantics were verified by the isolated native compiled-artifact scenario.
 
 ## Follow-ups
 
-- Await manual refresh; inspect real Agents and Code home house/contextual arrow with correct titles, then finalize runtime pointer using fresh root-verification receipt and mark task Ready for Integration.
+- Navigation request completed in temporary app. No main merge, push or deployment performed; source branch retained for later integration.
 - Retained WeChat-name feature remains native-unverified until real pencil/editor open+cancel is observed. Original frozen name stage is not rewritten. Source and116-unit/1-Electron predecessor evidence remain valid.
 
 ## Promotion Candidates

From 0d10e72b274295f2d1ceff551b889c9af34b358f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 15:17:28 +0800
Subject: [PATCH 14/18] Expose Canvas project read errors and recover existing
 records

---
 ...0261014-canvas-create-recovery-a72d49e6.md | 17 +++-
 README.md                                     |  2 +-
 src/pages/ImageCanvas/index.tsx               | 13 ++-
 tests/e2e/image-workspace-v2.spec.ts          | 40 ++++++++-
 tests/unit/image-canvas-page.test.tsx         | 89 +++++++++++++++++++
 5 files changed, 157 insertions(+), 4 deletions(-)

diff --git a/.project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md b/.project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md
index 23ed3f2d..3f6419da 100644
--- a/.project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md
+++ b/.project-docs/30-worklog/tasks/20261014-canvas-create-recovery-a72d49e6.md
@@ -12,7 +12,7 @@
 
 ## Scope
 
-- Remove the exact create-dialog description, change the Canvas rail from pale lavender to pale yellow, remove its Gallery entry while preserving Code Gallery, diagnose actual Canvas project creation timeouts, and implement the smallest evidenced safe recovery/fix.
+- Remove the exact create-dialog description, change the Canvas rail from pale lavender to pale yellow, remove its Gallery entry while preserving Code Gallery, diagnose actual Canvas project creation timeouts and apparently missing records, and implement the smallest evidenced safe recovery/fix.
 
 ## Intent And Constraints
 
@@ -89,3 +89,18 @@ Gate result:
 - Same-task narrow steering completed: Canvas Gallery entry is absent; Code chat/settings Gallery remains. Standard typecheck, scoped Sidebar/E2E lint, default full build and independent diff review pass.
 - Final real isolated Electron pair passed: Canvas V2 desktop/compact creation/dialog/draft/plan/history (7.1s) and Code remembered-project/shared-settings chrome (5.1s), total 2 passed/12.7s. Inspected final creation-dialog screenshot with pale-yellow rail, no original description and no Canvas Gallery. Logs/PNG updated in the external task evidence stage. Earlier 81 focused unit tests remain applicable to the unchanged retry/store/dialog implementation.
 - The final continuation source HEAD supersedes ca546c9; both are in this branch. No new actual runtime update or Main restart was performed by this continuation. Authorized coordinator will preserve f1dab live WeChat source and active user work during unified activation.
+
+## Same-task Record Visibility Investigation
+
+- User reports no Canvas works/history in the current temporary app. Official same-task start/status again match Identity. Prior positioning/ADR007/cloud authority/runtime/auth/data-preservation context and scoped peer assessment remain applicable; refreshed all readable peer Scope/Intent/Promotion records. Main35142 is unchanged, pointer still436, actual immutable Renderer f1dab. Primary remains occupied and untouched; ea5d477 changes have not been activated, so they cannot be assumed to cause the current empty display.
+- Native readonly observation shows the original five project names and account alice but central region remains Loading AI Design. Source ImageCanvas prioritizes status-ready/nonempty-list/null-workspace loading over its error state; selectProject catch retains status ready with error/null workspace. This is an evidenced presentation path, not proof that canonical records were removed.
+- Planning Gate Passed for this related diagnosis. Read real authenticated bootstrap and project details without mutation or prompt/media body output; compare server counts with visible selected project and request failures. Repair the smallest evidenced loading/error recovery path if necessary, preserving all actual data/drafts and previous source changes. No delete, recreate, model/generation call or server deployment.
+
+## Record Visibility Outcome And Verification
+
+- Real current Main35142 authenticated readonly bootstrap again failed504/30023ms. A second fresh pointer/Main/Renderer/PPID/profile guard terminated only its NetworkService71263, rebuilt as98782. Main35142 and Renderer35176 were preserved; no real command replay, creation, generation, removal or auth binding. current.json bytes later changed as the peer navigation-icon overlay finalized Renderer d3b0d411 based on WeChat f1dab; this task did not edit the pointer or stable alias and does not claim final pointer byte equality. Main source436 is unchanged.
+- After transport recovery, actual readonly bootstrap200/92ms returned five projects. All canonical details200/106–172ms: 愚公移山1turn/0task/0asset; 精卫填海4/2/2; 秋意浓5/1/1; test3/0/0; alice trip2/0/0. Total15 turns,3 tasks,3 assets. These counts verify records still exist; no prompt or media body was printed. External record-read-receipt.json and record-network-recovery-receipt.json retain minimal evidence.
+- ImageCanvas now renders a selected-project detail error before the ready/null-workspace loading state. Its reconnect calls selectProject for the existing active identity, without mutation; missing bootstrap/selection and explicit bootstrap errors reload bootstrap. Normal loading keeps the shell. Later errors with a loaded Workspace preserve its conversation, works and drafts. README synchronized. This presentation/retry change does not pretend to fix the unproven recurring transport trigger.
+- 89 focused unit tests across4 files passed; standard typecheck, scoped index/page-test/E2E ESLint, complete default build:vite and diff check passed. Updated existing isolated Electron V2 acceptance passed1test/6.9s (test6.5s), including simulated detail504 after project switch, visible error/no misleading empty/loading state, reconnect and canonical conversation/completed-history recovery, plus prior desktop/compact/creation/color/no-Gallery checks. Inspected its error screenshot; logs and screenshots retained in the external task evidence stage. Native app was observed on the user's active Agent editor after recovery, so this task did not navigate away or force reload their work. Source activation and actual Canvas UI check remain the authorized coordinator's unified update step.
+- Sole safe conclusion for the live timeout is that recreating the app-owned Chromium network utility restored authenticated reads twice. The30s Main budget spans token acquisition/refresh, Design fetch and body parsing; no evidence proves a fixed20min expiry/background/HTTP2 cause. Future phase-only diagnostics may distinguish these paths, but no timeout extension, unsafe POST fallback or backend fix was introduced.
+- Independent readonly final index/page-unit/E2E/README diff review passed with no blocker. Existing refreshWorkspace rejection does not itself publish an error; this patch preserves loaded data when the store already has an error and specifically fixes selection-read error visibility. The authoritative merged, pushed and actually activated runtime result will be recorded by the separate authorized coordinator, preserving user work and all peer updates.
diff --git a/README.md b/README.md
index 3ae32b35..06527439 100644
--- a/README.md
+++ b/README.md
@@ -56,7 +56,7 @@ Makelore 是一个面向软件、视觉创作、智能机器人与个人云智
 - AI 绘画：一个 Workspace 固定对应一个设计方向、一条 Agent Session 和一份持久 Living Form。中央使用与 AI 编程一致的低干扰对话布局：助手回复不套独立卡片，底部输入器是唯一强调层级；当前制作方案以对话内轻量编辑稿呈现，而不是独立硬模块。聊天提取、用户修改创作提示词和制作参数都提交到同一个服务端 reducer，并由方向版本、字段来源和决策状态形成权威投影。创作提示词是公开规格 `content.concept` 的可编辑投影；媒介、画幅、时长和数量始终以紧凑控件直接显示，不用折叠面板隐藏。
 - AI 绘画生成：服务端从当前规格编译专业图片或视频指令并返回不可变 Quote；客户端只展示创作提示词、参考图绑定、媒介、画幅、数量、格式、时长、警告和设计点，不展示或改写供应商 Prompt、模型、价格原子或存储地址。修改方案会先提交规格并重新核价，确认时只提交 Quote 身份；确认后的方案不再常驻，而是进入可展开的历史作品记录，桌面端位于右侧全高栏，紧凑窗口保留在时间线中。参考图行只负责缩略图、`@图片N` 状态、替换和删除，保留什么、改变什么等语义统一由创作提示词表达。任务与资产始终属于 Workspace。
 - 视频制作：类型、画幅、时长和数量依据服务端真实能力显示。尚未保存时长时明确显示“请选择时长”，不把默认数字当作已选值；参数保存失败后恢复服务端已接受的值。用户可以上传图片或从历史作品选择视频开始画面，绑定状态不依赖提示词中是否出现 `@图片N`。制作前先由 Agent 整理动作与可执行方案，再按最新方案核价；缺少内部分镜时引导点击“准备制作方案”，不要求用户填写分镜字段。整理失败不继续报价，也不创建任务。只有用户确认 Quote 后才开始制作。历史视频提供播放、放大预览和下载；切回图片会清理隐藏的视频参数，不能使用的参考用途须由用户显式移除，图片素材不被删除。
-- AI 绘画健壮性：Renderer 为每次命令生成稳定 operation id，网络结果未知时保留原命令供原样重试，不把未知写入当失败或创建第二次生成。Main 负责 Token 刷新、Agent Gateway REST 提交和有界 Run 查询，并将可恢复事件流投影为 Host API SSE；断线后按事件游标续接并重新读取权威 Workspace。Canvas 只使用 Works Square 云端 V2 契约，没有本地语义适配器或降级路径，上游不可用时明确报错。
+- AI 绘画健壮性：Renderer 为每次命令生成稳定 operation id，网络结果未知时保留原命令供原样重试，不把未知写入当失败或创建第二次生成。Main 负责 Token 刷新、Agent Gateway REST 提交和有界 Run 查询，并将可恢复事件流投影为 Host API SSE；断线后按事件游标续接并重新读取权威 Workspace。切换项目时读取失败会显示错误与“重新连接”，重试读取当前项目；已载入的作品、记录与草稿在后续读取失败时保留。Canvas 只使用 Works Square 云端 V2 契约，没有本地语义适配器或降级路径，上游不可用时明确报错。
 - AI 绘画左侧项目栏只展示 Workspace，桌面设计模式下固定为 256px 且不提供收纳入口，不再在项目下创建独立设计会话；右侧全高历史作品栏同为 256px，展示当前 Workspace 的任务与生成资产。紧凑窗口则把项目列表放进左侧抽屉并在中央时间线保留历史记录。删除时必须完整输入项目名称；删除后项目、Living Form、任务、参考图和生成作品会从账户中隐藏且无法访问，不影响用户已另存到磁盘的副本。删除当前项目后自动打开最近更新的剩余项目，删除最后一个项目后进入空状态。
 - 项目资源设置：项目配置页顶部以一横排三张资源卡提供模型、知识与插件入口，不再提供独立的本地 Skill 入口。模型列表完整显示具体模型名称，以及服务端或已验证模型档案声明的可选思考强度；未知能力不做猜测。插件抽屉把插件与 Skill 统一为“可选 / 已安装”两个页签：可选页展示云端目录及仍待安装的账号能力，已安装页同时展示官方 Release、随应用提供的插件和用户自行安装的 loose `SKILL.md` / Pi 包。每项提供“查看详情”和当前真实生命周期对应的添加、安装、添加到项目、启用或状态按钮。详情只展示介绍、主要能力、使用方式和必要设置，不暴露版本、包、权限标识、运行方式或计费实现字段。深链仍使用 `/project-config/plugins`；旧 `/plugins`、Marketplace、My Plugins、Project Plugins URL 会确定性落入对应页签。来源身份保持 `official:`、`local:`、`retained:` 分离，账号获取、官方设备交付和项目启用仍分别写入既有 authority，不会自动推进下一步；本机 Skill/Pi 插件仍只能通过对话安装，页面只管理已安装包。
 - 官方插件运行架构：Renderer 只调用 Main-owned Marketplace facade；Main 负责账号、请求 deadline、签名/摘要校验、不可变 Release、current selection 与原子回滚。Pi parent worker 使用冻结的 effective snapshot，将每个有效 Skill 与已验证 Package Store root 成对传给 resource loader、Extension Host 和 CLI；普通 `skill_only` 下载包不依赖运行时 Policy，也不得执行分发包中的任意代码。Project Scaffold 的 `.mjs` 是代码所有的 bundled 例外，只能从签名客户端固定资源根通过应用自带 Node 执行，不能扩展为 Marketplace 下载 artifact 的脚本权限。正式激活仍等待官方 Ed25519 公钥（production key activation HOLD）；生产私钥只能来自部署 secret，测试使用注入的临时密钥。
diff --git a/src/pages/ImageCanvas/index.tsx b/src/pages/ImageCanvas/index.tsx
index b047e377..559b21fc 100644
--- a/src/pages/ImageCanvas/index.tsx
+++ b/src/pages/ImageCanvas/index.tsx
@@ -109,10 +109,12 @@ export function ImageCanvas() {
   const authenticated = useAuthStore((state) => state.isAuthenticated());
   const status = useImageWorkspaceStore((state) => state.status);
   const bootstrap = useImageWorkspaceStore((state) => state.bootstrap);
+  const activeWorkspaceId = useImageWorkspaceStore((state) => state.activeWorkspaceId);
   const workspace = useImageWorkspaceStore((state) => state.workspace);
   const error = useImageWorkspaceStore((state) => state.error);
   const quoteBlockers = useImageWorkspaceStore((state) => state.quoteBlockers);
   const load = useImageWorkspaceStore((state) => state.load);
+  const selectProject = useImageWorkspaceStore((state) => state.selectProject);
   const refreshWorkspace = useImageWorkspaceStore((state) => state.refreshWorkspace);
   const connectEvents = useImageWorkspaceStore((state) => state.connectEvents);
   const disconnectEvents = useImageWorkspaceStore((state) => state.disconnectEvents);
@@ -138,7 +140,7 @@ export function ImageCanvas() {
     if (pendingPrompt) setChatDraft(pendingPrompt.prompt);
   }, [consumePendingPrompt, setChatDraft, workspaceId]);
 
-  if (status === 'loading' || (status === 'ready' && bootstrap?.workspaces.length && !workspace)) {
+  if (status === 'loading') {
     return <LoadingWorkspace />;
   }
 
@@ -146,6 +148,15 @@ export function ImageCanvas() {
     return <ErrorWorkspace message={error ?? '请检查网络后重试'} retry={() => void load()} />;
   }
 
+  if (!workspace && error) {
+    return <ErrorWorkspace message={error} retry={() => {
+      if (bootstrap && activeWorkspaceId) void selectProject(activeWorkspaceId);
+      else void load();
+    }} />;
+  }
+
+  if (status === 'ready' && bootstrap?.workspaces.length && !workspace) return <LoadingWorkspace />;
+
   if (!workspace && status !== 'ready') return <LoadingWorkspace />;
 
   const generationAvailable = bootstrap?.capabilities.generation !== false;
diff --git a/tests/e2e/image-workspace-v2.spec.ts b/tests/e2e/image-workspace-v2.spec.ts
index 8c12a282..b1c4a6b4 100644
--- a/tests/e2e/image-workspace-v2.spec.ts
+++ b/tests/e2e/image-workspace-v2.spec.ts
@@ -188,10 +188,12 @@ test.describe('AI Design V2 workspace', () => {
           __designE2eCompleteTask?: () => void;
           __designE2eOpenIncompleteVideo?: () => void;
           __designE2eDownloadCount?: number;
+          __designE2eFailProjectRead?: boolean;
         };
         e2eGlobal.__designE2eAuthReady = false;
         e2eGlobal.__designE2eProfileReady = false;
         e2eGlobal.__designE2eDownloadCount = 0;
+        e2eGlobal.__designE2eFailProjectRead = false;
         e2eGlobal.__designE2eOpenIncompleteVideo = () => {
           workspace.form.specification.values.intent.media = 'video';
           workspace.form.specification.values.video.total_duration_seconds = null;
@@ -282,12 +284,28 @@ test.describe('AI Design V2 workspace', () => {
                   },
                 },
               },
-              workspaces: [workspace.workspace],
+              workspaces: [workspace.workspace, {
+                ...workspace.workspace, workspaceId: 'workspace-2', title: '历史作品项目',
+              }],
             });
           }
           if (path === '/api/works/image-workspace/workspaces/workspace-1' && request.method === 'GET') {
             return envelope(workspace);
           }
+          if (path === '/api/works/image-workspace/workspaces/workspace-2' && request.method === 'GET') {
+            if (e2eGlobal.__designE2eFailProjectRead) {
+              e2eGlobal.__designE2eFailProjectRead = false;
+              return { ok: true, data: { status: 504, ok: false, json: {
+                success: false, code: 'DESIGN_WORKSPACE_REQUEST_TIMEOUT', error: 'AI 设计服务响应超时，请重试',
+              } } };
+            }
+            return envelope({
+              ...workspace,
+              workspace: { ...workspace.workspace, workspaceId: 'workspace-2', title: '历史作品项目' },
+              form: { ...workspace.form, workspaceId: 'workspace-2' },
+              assets: workspace.assets.map((asset) => ({ ...asset, workspaceId: 'workspace-2' })),
+            });
+          }
           if (path === '/api/works/image-workspace/workspaces/workspace-1/commands') {
             const command = JSON.parse(request.body ?? '{}') as {
               kind?: string;
@@ -755,6 +773,26 @@ test.describe('AI Design V2 workspace', () => {
       expect(await app.evaluate(() => (
         globalThis as typeof globalThis & { __designE2eDownloadCount?: number }
       ).__designE2eDownloadCount)).toBe(0);
+
+      // A failed project read must expose recovery, then restore its canonical records.
+      await page.setViewportSize({ width: 1440, height: 900 });
+      await app.evaluate(() => {
+        (globalThis as typeof globalThis & { __designE2eFailProjectRead?: boolean }).__designE2eFailProjectRead = true;
+      });
+      await page.getByTestId('sidebar-image-project-workspace-2').click();
+      await expect(page.getByTestId('image-workspace-unavailable')).toContainText('AI 设计服务响应超时，请重试');
+      await expect(page.getByLabel('正在加载 AI 设计')).toHaveCount(0);
+      await expect(page.getByTestId('image-workspace-empty-state')).toHaveCount(0);
+      await page.screenshot({ path: testInfo.outputPath('canvas-project-read-error.png'), animations: 'disabled' });
+      await page.getByRole('button', { name: '重新连接', exact: true }).click();
+      await expect(page.getByTestId('image-workspace-header')).toContainText('历史作品项目');
+      await expect(conversation).toContainText(followUp);
+      await historyTab.click();
+      await expect(worksPane.getByTestId('design-plan-history-task-1')).toContainText('已完成');
+      await expect(page.getByTestId('image-workspace-unavailable')).toHaveCount(0);
+      await page.getByTestId('sidebar-image-project-workspace-1').click();
+      await page.setViewportSize({ width: 375, height: 800 });
+
       await app.evaluate(() => {
         (globalThis as typeof globalThis & { __designE2eOpenIncompleteVideo?: () => void })
           .__designE2eOpenIncompleteVideo?.();
diff --git a/tests/unit/image-canvas-page.test.tsx b/tests/unit/image-canvas-page.test.tsx
index a6719635..3bafeb4a 100644
--- a/tests/unit/image-canvas-page.test.tsx
+++ b/tests/unit/image-canvas-page.test.tsx
@@ -111,6 +111,95 @@ describe('AI Design Canvas page', () => {
     expect(load).toHaveBeenCalledOnce();
   });
 
+  it('shows a failed selected Workspace read and retries that project instead of hiding it behind loading', async () => {
+    const { workspace, actions } = prepareWorkspace();
+    useImageWorkspaceStore.setState({
+      workspace: null,
+      error: 'AI 设计服务响应超时，请重试',
+      eventState: 'degraded',
+    });
+    actions.selectProject.mockImplementationOnce(async () => {
+      useImageWorkspaceStore.setState({ workspace, error: null });
+    });
+    render(<ImageCanvas />);
+
+    expect(screen.getByTestId('image-workspace-unavailable')).toHaveTextContent('AI 设计服务响应超时，请重试');
+    expect(screen.queryByLabelText('正在加载 AI 设计')).not.toBeInTheDocument();
+    expect(screen.queryByTestId('image-workspace-empty-state')).not.toBeInTheDocument();
+    fireEvent.click(screen.getByRole('button', { name: '重新连接' }));
+
+    expect(actions.selectProject).toHaveBeenCalledExactlyOnceWith(workspace.workspace.workspaceId);
+    expect(actions.load).not.toHaveBeenCalled();
+    expect(actions.refreshWorkspace).not.toHaveBeenCalled();
+    await waitFor(() => expect(screen.getByTestId('image-workspace-conversation')).toBeInTheDocument());
+    expect(screen.queryByTestId('image-workspace-unavailable')).not.toBeInTheDocument();
+  });
+
+  it.each([
+    { status: 'loading' as const, error: '上一次读取失败' },
+    { status: 'ready' as const, error: null },
+  ])('keeps the loading shell while the selected Workspace is being read ($status)', ({ status, error }) => {
+    prepareWorkspace();
+    useImageWorkspaceStore.setState({ status, workspace: null, error });
+    render(<ImageCanvas />);
+
+    expect(screen.getByLabelText('正在加载 AI 设计')).toBeInTheDocument();
+    expect(screen.queryByTestId('image-workspace-unavailable')).not.toBeInTheDocument();
+    expect(screen.queryByTestId('image-workspace-empty-state')).not.toBeInTheDocument();
+  });
+
+  it.each(['activeWorkspaceId', 'bootstrap'] as const)(
+    'reloads bootstrap after a failed read without %s', (missing) => {
+      const { actions } = prepareWorkspace();
+      useImageWorkspaceStore.setState({ workspace: null, error: '项目读取失败', [missing]: null });
+      render(<ImageCanvas />);
+
+      fireEvent.click(screen.getByRole('button', { name: '重新连接' }));
+      expect(actions.load).toHaveBeenCalledOnce();
+      expect(actions.selectProject).not.toHaveBeenCalled();
+    },
+  );
+
+  it.each(['error', 'unavailable'] as const)('reloads failed bootstrap for %s status', (status) => {
+    const { actions } = prepareWorkspace();
+    useImageWorkspaceStore.setState({ status, workspace: null, error: 'AI 设计暂时无法读取' });
+    render(<ImageCanvas />);
+
+    fireEvent.click(screen.getByRole('button', { name: '重新连接' }));
+    expect(actions.load).toHaveBeenCalledOnce();
+    expect(actions.selectProject).not.toHaveBeenCalled();
+  });
+
+  it('keeps a loaded Workspace, its drafts and works pane visible when a later read fails', () => {
+    const { workspace, actions } = prepareWorkspace();
+    useImageWorkspaceStore.setState({
+      chatDraft: '保留我的创作想法',
+      fieldDrafts: { 'content.concept': '保留我的制作方案' },
+    });
+    render(<ImageCanvas />);
+    fireEvent.change(screen.getByRole('textbox', { name: '创作提示词' }), {
+      target: { value: '保留我的制作方案' },
+    });
+    act(() => useImageWorkspaceStore.setState({ error: '这次刷新失败' }));
+
+    expect(screen.getByRole('alert')).toHaveTextContent('这次刷新失败');
+    expect(screen.getByTestId('image-workspace-conversation')).toBeInTheDocument();
+    expect(screen.getByTestId('image-workspace-history-rail')).toBeInTheDocument();
+    expect(screen.getByRole('textbox', { name: '告诉 AI 你想创作什么' })).toHaveValue('保留我的创作想法');
+    expect(screen.getByRole('textbox', { name: '创作提示词' })).toHaveValue('保留我的制作方案');
+    expect(screen.queryByTestId('image-workspace-unavailable')).not.toBeInTheDocument();
+    fireEvent.click(screen.getByRole('button', { name: '刷新', exact: true }));
+
+    expect(actions.refreshWorkspace).toHaveBeenCalledOnce();
+    expect(actions.selectProject).not.toHaveBeenCalled();
+    expect(actions.load).not.toHaveBeenCalled();
+    expect(useImageWorkspaceStore.getState()).toMatchObject({
+      workspace,
+      chatDraft: '保留我的创作想法',
+      fieldDrafts: { 'content.concept': '保留我的制作方案' },
+    });
+  });
+
   it('keeps one active editable plan in the works pane beside the conversation', () => {
     prepareWorkspace();
     render(<ImageCanvas />);

From d49ab20d156c3c793af52ac90af8cdcaa92043c7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 15:25:15 +0800
Subject: [PATCH 15/18] docs: hand off coding model guidance and release source
 fixes

---
 .../tasks/20261014-code-model-onboarding-01e8cbed.md       | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.project-docs/30-worklog/tasks/20261014-code-model-onboarding-01e8cbed.md b/.project-docs/30-worklog/tasks/20261014-code-model-onboarding-01e8cbed.md
index b88b5363..374b30e9 100644
--- a/.project-docs/30-worklog/tasks/20261014-code-model-onboarding-01e8cbed.md
+++ b/.project-docs/30-worklog/tasks/20261014-code-model-onboarding-01e8cbed.md
@@ -65,6 +65,13 @@ Gate result: Passed.
 - Source ready for integration and temporary-app update when requested. Earlier submission-directory repair0d6ac41 remains on its separate completed task branch; combine both during delivery as appropriate, preserving both README behavior paragraphs. Running trial still uses previous source.
 - Existing additional strict Main project-service optional-id diagnostic is outside this UI task; keep it visible for future Main typecheck work.
 
+## Coordination Handoff
+
+- Resumed this same task only to report final committed facts. Mechanical ownership/base/branch verified at clean product HEAD bec42627f5016e7f3b3fcf8c4014545d63fb1da3; all82 peers/246 required sections checked with no affected semantic conflict. Canonical context unchanged; no new product planning or edits.
+- Trusted human authorization read in '推代码' thread01a12eba-e98b-76a3-8fd5-206f2820d623: turn01a1393f-8923-7971-a852-faa89d1b73a3 requests all-related-thread consolidation, verification, trial update then main merge/push; reply01a13946-fd37-7072-96ee-206a0f261726 explicitly permits coordinating messages requiring final commits. This is direct human evidence, not authority inferred solely from the incoming agent message.
+- Report both ready/clean sources: UI product bec42627f5016e7f3b3fcf8c4014545d63fb1da3 and earlier release-source product0d6ac413dcaa8a04c6db6bfab3aca835e0460ef6 (task20261014-release-source-directory-3ccabc06, same basef34e651). Both have complete task records and verified local/native results; earlier317a154 is diagnosis documentation only, not a functional dependency. Preserve both behavior paragraphs when combining README patches.
+- Unified runtime refresh/restart/current/alias/NetworkService operations, integration and push remain with task20261014-all-thread-trial-6d72e4f1. No independent app operation, new test/build, real model/cloud submission or cleanup during this handoff. Product source remains unchanged after its passing verification and independent review.
+
 ## Promotion Candidates
 
 - Target ADR006 and architecture data-flow/module-map: distinguish model-free conversation history/selection preparation from validated Pi execution. Evidence: Main44, UI61, related137 units, native3 and independent review. Future impact: missing model is ordinary preparation, history never causes prompt/model execution, and delayed reads cannot override newer runtime/model state. Conflicts: none with77 peer scopes; prompt/auth/project identity and teacher execution unchanged. Human confirmation: user explicitly authorized this interaction; canonical promotion requires serialized integration.

From 9116938127e0e7378866506b280763c70d19b957 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 15:25:21 +0800
Subject: [PATCH 16/18] Preserve active parent-navigation source for homepage
 delivery

---
 src/components/layout/ModuleSwitcher.tsx | 6 +++---
 src/pages/CloudAgents/DraftEditor.tsx    | 2 +-
 src/pages/Plugins/index.tsx              | 2 +-
 src/pages/ProjectConfiguration/index.tsx | 4 ++--
 src/pages/Settings/index.tsx             | 2 +-
 5 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/src/components/layout/ModuleSwitcher.tsx b/src/components/layout/ModuleSwitcher.tsx
index 52113df5..18122be8 100644
--- a/src/components/layout/ModuleSwitcher.tsx
+++ b/src/components/layout/ModuleSwitcher.tsx
@@ -1,4 +1,4 @@
-import { ArrowLeft } from 'lucide-react';
+import { Home } from 'lucide-react';
 import { useLocation, useNavigate } from 'react-router-dom';
 import { cn } from '@/lib/utils';
 import { AI_MODULE_SELECTION_PATH, aiModules, getAiModuleForPath } from '@/lib/ai-modules';
@@ -34,10 +34,10 @@ export function ModuleSwitcher({ sidebarCollapsed, compact = false, toolbar = fa
           agentReturn && 'rounded-full bg-background/70 text-brand',
         )}
       >
-        <ArrowLeft
+        <Home
           data-testid="sidebar-module-return-icon"
           aria-hidden="true"
-          className={cn('h-4 w-4 shrink-0 -translate-y-px transition-[color,transform] duration-150 group-hover:-translate-x-0.5 group-hover:text-brand', agentReturn ? 'text-brand' : 'text-muted-foreground')}
+          className={cn('h-4 w-4 shrink-0 -translate-y-px transition-colors duration-150 group-hover:text-brand', agentReturn ? 'text-brand' : 'text-muted-foreground')}
         />
         {!sidebarCollapsed && !iconOnly ? <span className={cn('min-w-0 whitespace-nowrap leading-4', toolbar && 'truncate')}>{activeModuleLabel}</span> : null}
       </button>
diff --git a/src/pages/CloudAgents/DraftEditor.tsx b/src/pages/CloudAgents/DraftEditor.tsx
index 64dccb6b..d77e73c3 100644
--- a/src/pages/CloudAgents/DraftEditor.tsx
+++ b/src/pages/CloudAgents/DraftEditor.tsx
@@ -125,7 +125,7 @@ export function DraftEditor({ initial, recent, onBack, onSaved, startingPrompt,
   return <CloudPendingContext.Provider value={pending.report}><section className={`agent-desktop${tab === 'chat' ? ' agent-chat-editor' : ''}`} data-testid="cloud-agent-editor"
     data-configuration-settled={!dirty && !busy && !publication.pending && !publication.error && !remote && publication.appliedRevision === saved.draft_revision}>
     <header className={`agent-workspace-header${tab === 'chat' ? ' agent-chat-workspace-header' : ''}`}>
-      <Button variant="ghost" size="icon" className="h-10 w-10 shrink-0" aria-label={tab === 'chat' ? '返回智能体列表' : '我的智能体'} disabled={busy}
+      <Button variant="ghost" size="icon" className="h-10 w-10 shrink-0" aria-label={tab === 'chat' ? '返回智能体列表' : '我的智能体'} title="返回上一级" disabled={busy}
         onClick={() => dirty || hasPending ? setLeaving(true) : onBack()}><ArrowLeft className="h-4 w-4" /></Button>
       {tab === 'chat' ? <>
         <CloudAvatar src={saved.icon_url} name={saved.name} identity={saved.slug} className="agent-chat-header-avatar" />
diff --git a/src/pages/Plugins/index.tsx b/src/pages/Plugins/index.tsx
index 3e52b2c7..d51e601a 100644
--- a/src/pages/Plugins/index.tsx
+++ b/src/pages/Plugins/index.tsx
@@ -213,7 +213,7 @@ export function PluginsView(props: PluginsViewProps) {
               size="icon"
               data-testid="project-plugins-back-button"
               aria-label="返回项目配置"
-              title="返回项目配置"
+              title="返回上一级"
               onClick={props.onBackToProjectSettings}
               className="mt-0.5 h-8 w-8 shrink-0 text-muted-foreground hover:bg-surface-subtle hover:text-foreground"
             >
diff --git a/src/pages/ProjectConfiguration/index.tsx b/src/pages/ProjectConfiguration/index.tsx
index 8e5d07b6..2d50ff48 100644
--- a/src/pages/ProjectConfiguration/index.tsx
+++ b/src/pages/ProjectConfiguration/index.tsx
@@ -34,7 +34,7 @@ function ResourceCard({ id, icon, title, subtitle, onClick }: { id: string; icon
 }
 
 function DrawerFrame({ title, desc, onClose, children, closeLabel = '关闭', closeIcon = 'close' }: { title: string; desc: string; onClose: () => void; children: React.ReactNode; closeLabel?: string; closeIcon?: 'close' | 'back' }) {
-  const closeButton = <Button type="button" variant="ghost" size="icon" onClick={onClose} aria-label={closeLabel} title={closeLabel} className="relative z-10 shrink-0">{closeIcon === 'back' ? <ArrowLeft className="h-4 w-4" /> : <X className="h-4 w-4" />}</Button>;
+  const closeButton = <Button type="button" variant="ghost" size="icon" onClick={onClose} aria-label={closeLabel} title={closeIcon === 'back' ? '返回上一级' : closeLabel} className="relative z-10 shrink-0">{closeIcon === 'back' ? <ArrowLeft className="h-4 w-4" /> : <X className="h-4 w-4" />}</Button>;
   return <div className="flex min-h-0 flex-1 flex-col"><div className="glass-surface drawer-motion-header flex items-center justify-between gap-3 border-b border-border/70 bg-background px-5 py-4"><div className="min-w-0 flex-1"><SheetTitle className="text-lg font-semibold">{title}</SheetTitle><SheetDescription className="mt-1 text-sm font-medium text-muted-foreground">{desc}</SheetDescription></div>{closeIcon === 'back' ? closeButton : <SheetClose asChild>{closeButton}</SheetClose>}</div><div className="drawer-motion-body min-h-0 flex-1 overflow-auto p-5">{children}</div></div>;
 }
 
@@ -171,7 +171,7 @@ export function ProjectConfiguration() {
   return <main className="-m-5 flex min-h-[calc(100%+2.5rem)] min-h-0 flex-col overflow-auto bg-background p-4 text-foreground sm:-m-6 sm:min-h-[calc(100%+3rem)]" data-testid="project-configuration-page">
     <div className="mx-auto flex min-h-0 w-full max-w-7xl flex-1 flex-col gap-3">
       <div className="config-motion-title flex items-center gap-2">
-        <Button type="button" variant="ghost" size="icon" data-testid="project-configuration-back-button" aria-label="返回" title="返回" onClick={handleBack} className="h-8 w-8 shrink-0 text-muted-foreground hover:bg-surface-subtle hover:text-foreground">
+        <Button type="button" variant="ghost" size="icon" data-testid="project-configuration-back-button" aria-label="返回" title="返回上一级" onClick={handleBack} className="h-8 w-8 shrink-0 text-muted-foreground hover:bg-surface-subtle hover:text-foreground">
           <ArrowLeft className="h-4 w-4" />
         </Button>
         <h1 className="text-xl font-semibold">项目配置</h1>
diff --git a/src/pages/Settings/index.tsx b/src/pages/Settings/index.tsx
index a7e980fd..d346877c 100644
--- a/src/pages/Settings/index.tsx
+++ b/src/pages/Settings/index.tsx
@@ -257,7 +257,7 @@ export function Settings() {
     <main data-testid="settings-page" data-settings-dirty={proxySettingsDirty || savingProxy} className="min-h-full bg-background">
       <div className="mx-auto flex max-w-4xl flex-col gap-8 px-8 py-8">
         <div className="flex items-center gap-3">
-          <Button type="button" variant="ghost" aria-label="返回上一页" data-testid="settings-back-button"
+          <Button type="button" variant="ghost" aria-label="返回上一页" title="返回上一级" data-testid="settings-back-button"
             className="shrink-0 gap-2" onClick={() => {
               if (!canLeaveCurrentPage()) { toast.info('请先保存或还原当前修改，再返回。'); return; }
               navigate(getSettingsReturnPath(location.state));

From f35079b12868f1c3fad8f41f42bb726631a1ae3e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 15:25:21 +0800
Subject: [PATCH 17/18] Move Works Square to homepage text with clear uniform
 typography

---
 .../20261014-home-gallery-text-f3d30a43.md    | 46 +++++++++++++
 README.md                                     |  6 +-
 src/components/community/CommunityLink.tsx    | 11 ++--
 src/components/community/community.css        |  6 ++
 src/components/layout/Sidebar.tsx             |  8 ---
 src/pages/Chat/CodingStartHeading.tsx         |  6 +-
 src/pages/ModuleSelection/index.tsx           |  4 +-
 src/styles/globals.css                        | 15 +++++
 tests/e2e/community-welcome.spec.ts           | 61 ++++++++++--------
 tests/e2e/fixtures/community-welcome.tsx      | 12 +++-
 tests/e2e/image-workspace-v2.spec.ts          | 22 ++-----
 tests/e2e/main-navigation.spec.ts             | 64 ++++++++++++-------
 tests/e2e/pi-coding-first-chat.spec.ts        | 24 +++----
 tests/unit/community.test.tsx                 | 19 ++++--
 tests/unit/module-navigation.test.tsx         | 11 +++-
 15 files changed, 206 insertions(+), 109 deletions(-)
 create mode 100644 .project-docs/30-worklog/tasks/20261014-home-gallery-text-f3d30a43.md

diff --git a/.project-docs/30-worklog/tasks/20261014-home-gallery-text-f3d30a43.md b/.project-docs/30-worklog/tasks/20261014-home-gallery-text-f3d30a43.md
new file mode 100644
index 00000000..98abce9e
--- /dev/null
+++ b/.project-docs/30-worklog/tasks/20261014-home-gallery-text-f3d30a43.md
@@ -0,0 +1,46 @@
+# Task: Move Works Square to the homepage welcome text
+
+## Identity
+
+- Task ID: 20261014-home-gallery-text-f3d30a43
+- Mode: Feature
+- Branch: codex/20261014-home-gallery-text-f3d30a43-home-gallery-text
+- Worktree: /Users/chillishark/Makelore 麦洛/.codex-worktrees/makelore/20261014-home-gallery-text-f3d30a43
+- Base commit: f1dabdb358ff5f2228fbef014f9e659c156ccc10
+- Owner: codex
+- Status: Ready for Integration
+
+## Scope
+
+- Implement the accepted three-line homepage welcome: real display name plus 欢迎回来！; existing 今天，想创作什么？; 还是去「作品广场」找找灵感？. Only the four-character inline Works Square label is clickable,12% larger than adjacent copy. Remove its old Code/Canvas workspace entries, retaining the center decorative M and workspace behavior.
+
+## Intent And Constraints
+
+- Latest explicit user steering supersedes the rejected button/multicolor drafts: same font family, same font weight, and the same readable dark foreground across the intro; only size and a fine matching underline identify the link. Use actual profile/account display names and existing fixed openCommunity. No new API, gallery feed/page, model request, publishing or cloud deployment.
+- Preserve module policy/navigation, sidebar width/account anchor, Code drafts/attachments, Canvas edits and actual WeChat naming plus parent-navigation updates. Actual latest Renderer is navigation d3b0d411ca32b7f8ea72c87dcfe37c02e6692b45; Main remains436f7ba/PID35142. No Main/shared/resources/package/build-contract delta.
+- Human instruction and coordination permission were read directly in codex://threads/01a12eba-e98b-76a3-8fd5-206f2820d623: consolidate all current related chats, validate/update the trial, then merge/push. The authorized coordinator now owns all runtime activation/refresh/restart and publication. This task does not change current.json, aliases or NetworkService.
+
+## Outcome
+
+- Homepage welcome and actual text entry implemented. Shared CommunityLink uses a valid inline span container in the paragraph, plain text button, inherited font/weight/color,1.12em sizing, underline, keyboard focus/activation, disabled opening and retry. Reduced-motion disables movement.
+- Code/Canvas Sidebar gallery mounts removed; Code central mark/stars remain decorative and load their CSS directly, with original heading/caption, composer and drafts retained. Homepage navigation and profile source unchanged.
+- README and focused existing unit/browser/Electron tests updated. Preserved exact committed five navigation src blobs from d3b0d411 (ModuleSwitcher, DraftEditor, Plugins, ProjectConfiguration, Settings), plus its three small navigation test assertions; no foreign task record imported or edited. Relative to actual d3 Renderer source, product delta is exactly six intended homepage/community/workspace src files.
+- Local preview also reflects uniform dark typography and enlarged link. Trial is NOT updated independently: stage contains helpers/OPS only, no prepared snapshot/manifest, activation, native refresh or restart. Unified integration owns final actual-account UI acceptance.
+
+## Verification
+
+- Official Concurrent/Planning Gates passed: exact feature task/branch/worktree/basef1 ownership verified;80 peer task records/240 required sections read without errors. No semantic blocker; latest user instruction replaces old gallery placement and rejected button direction. Primary dirty checkout untouched.
+- Final standard typecheck, scoped ESLint, git diff --check and default full build:vite with NIANCODE_RENDERER_ONLY unset passed.
+- Final16 unit tests passed (community4, module navigation12). Browser suite9 passed across375/768/1280/1470px; two homepage cases reverified after final font-weight revision, checking actual font/color/weight equality and1.12 size, keyboard retry, no overflow/fetch/iframe.
+- Final real isolated Electron4 passed in14.9s: homepage geometry/fixed external URL, shared Code/settings sidebar and account anchoring, Canvas canonical edits/drafts/results, first PI editable-under500ms flow and attachment/draft preservation. Carried-in navigation house/back assertions included. Actual model/cloud/native counterpart acceptance is not claimed.
+- Logs retained: /tmp/home-gallery-typecheck-final-f3d30a43.log, /tmp/home-gallery-unit-final-f3d30a43.log, /tmp/home-gallery-browser-final-f3d30a43.log, /tmp/home-gallery-typography-final-f3d30a43.log, /tmp/home-gallery-build-final-f3d30a43.log, /tmp/home-gallery-electron-final-f3d30a43.log. Isolated screenshots in corresponding /tmp/home-gallery-*-results directories; static preview in /Users/chillishark/.codex/visualizations/2026/10/14/makelore-home-gallery-preview.
+- Runtime inheritance honesty: navigation is now active-verified; WeChat card-name native acceptance remains pending in its ancestor evidence. Do not silently mark that unrelated feature native-verified. Existing verification_limits remain applicable.
+
+## Follow-ups
+
+- Send final clean source/HEAD and evidence to authorized coordinator task20261014-all-thread-trial-6d72e4f1 in 推代码; it owns combined merge/build/update/main push. Do not execute this task's one-off runtime helpers during unified delivery. Source worktree remains for integration and is not cleaned while active/dirty.
+- Cancelled code-gallery-button-2824e5d1 ends at a715dc4 with zero net product delta; never cherry-pick its abandoned f00afcf/7dfcc83 drafts.
+
+## Promotion Candidates
+
+- None; this is an authorized presentation/entry relocation using existing contracts. Canonical/foreign project memory stays untouched.
diff --git a/README.md b/README.md
index 93ae0a51..735e960e 100644
--- a/README.md
+++ b/README.md
@@ -8,10 +8,10 @@
 
 Code 会话保存的模型被下架后，会提示重新选择可用模型；用户可在原会话中切换，恢复时使用新选择并保留会话与历史消息。切换不会自动重发消息或自动选择替代模型。
 
-Makelore 是一个面向软件、视觉创作、智能机器人与个人云智能体的 AI 桌面工作台。当前版本为 `2.0.0`，首页展示 Agents、Code、Canvas 三个模块入口，Robot 入口隐藏；云智能体需配套配置 WS/Yuxi 服务。桌面采用左侧问候与标题、右侧三个横向插画卡片竖排的布局，Code 入口中心与“今天，想创作什么？”标题中心对齐，三个入口等高、间距均匀；标题组在桌面向右偏移约 1.5cm，小窗口将标题放在卡片上方；Agents 标语为“打造你想象中的AI助手”。各页左下角账户按钮统一沿用 Code 的白色圆角卡片、头像、字号和右箭头，展开时跟随 Code 侧栏宽度偏好，首页和设置页与 Code 保持相同的左侧与底部边距；展开菜单保持原尺寸，可查看本人词元点数与预占、打开词元点数与充值、个人资料、设置和退出登录；沿用侧栏的账号、钱包和资料规则。设置使用独立页面，不显示编程项目栏、项目标题或工作栏收起按钮；“返回”回到打开设置前的页面（保留查询参数），直接打开设置时回模块首页，未保存设置先保存或还原。每次从首页进入 Code、Agents 或 Canvas 时，默认展开左侧工作栏；进入后沿用各模块现有的手动收起与紧凑布局规则。工作区左上角入口点击后返回模块入口页：
+Makelore 是一个面向软件、视觉创作、智能机器人与个人云智能体的 AI 桌面工作台。当前版本为 `2.0.0`，首页展示 Agents、Code、Canvas 三个模块入口，Robot 入口隐藏；云智能体需配套配置 WS/Yuxi 服务。桌面采用左侧问候与标题、右侧三个横向插画卡片竖排的布局，Code 入口中心与左侧标题及灵感引导区的中心对齐，三个入口等高、间距均匀；问候使用真实个人资料姓名，标题下显示“还是去「作品广场」找找灵感？”，仅“作品广场”四字可点击，与欢迎语和标题使用同一字体及清晰的深色，仅以细下划线及比整句大约12%的字号强调；点击沿用原系统浏览器公共广场入口，不请求或内嵌作品列表；标题组在桌面向右偏移约 1.5cm，小窗口将标题放在卡片上方；Agents 标语为“打造你想象中的AI助手”。各页左下角账户按钮统一沿用 Code 的白色圆角卡片、头像、字号和右箭头，展开时跟随 Code 侧栏宽度偏好，首页和设置页与 Code 保持相同的左侧与底部边距；展开菜单保持原尺寸，可查看本人词元点数与预占、打开词元点数与充值、个人资料、设置和退出登录；沿用侧栏的账号、钱包和资料规则。设置使用独立页面，不显示编程项目栏、项目标题或工作栏收起按钮；“返回”回到打开设置前的页面（保留查询参数），直接打开设置时回模块首页，未保存设置先保存或还原。每次从首页进入 Code、Agents 或 Canvas 时，默认展开左侧工作栏；进入后沿用各模块现有的手动收起与紧凑布局规则。工作区左上角入口点击后返回模块入口页：
 
 - `Makelore Code｜AI 编程`：管理本地项目、项目智能体、对话、文件上下文、代码变更和运行时。
-  会话工作台采用浅蓝项目栏，侧栏入口与项目列表采用 Agent 式的彩色图标徽章＋文字，选中项目保留浅色反馈；中间对话/作品使用圆角标签，作品预览的后退、前进、刷新与网址输入统一放在标签右侧；只在作品页显示，窄窗口自动换行。右侧智能体咨询使用奶油色标题区。沿用真实项目和会话入口、侧栏伸缩与账户菜单，样式只作用于 Code 会话工作台。可编辑的空对话在输入区上方的可用区域中央显示童趣欢迎语；欢迎区的麦洛标识、星装饰和「作品广场」组成同一个可鼠标或键盘操作的广场入口，保留原有主标题与说明，输入框上方不再显示两句广场邀请。老师介绍以固定宽度浮在右上角，不占用中间布局；欢迎语和底部输入区始终相对项目栏右侧的整个内容区域居中；小窗口的欢迎内容独立滚动；发送首条消息后收起欢迎区。侧栏的「作品广场」固定在底部、紧邻账户按钮上方，保持与上方入口相同的横向对齐；只有点击后才在系统浏览器打开公共广场，不请求、摘取或内嵌展示广场作品。打开广场保留当前项目、对话、草稿和附件，不自动发送消息；老师求助按钮保留临时应用的最新文案「帮我整体看🧠」。
+  会话工作台采用浅蓝项目栏，侧栏入口与项目列表采用 Agent 式的彩色图标徽章＋文字，选中项目保留浅色反馈；中间对话/作品使用圆角标签，作品预览的后退、前进、刷新与网址输入统一放在标签右侧；只在作品页显示，窄窗口自动换行。右侧智能体咨询使用奶油色标题区。沿用真实项目和会话入口、侧栏伸缩与账户菜单，样式只作用于 Code 会话工作台。可编辑的空对话在输入区上方的可用区域中央显示童趣欢迎语；欢迎区保留麦洛标识、星装饰、原有主标题与说明，标识为普通装饰；作品广场入口统一移到模块首页，输入框上方不再显示广场入口或邀请。老师介绍以固定宽度浮在右上角，不占用中间布局；欢迎语和底部输入区始终相对项目栏右侧的整个内容区域居中；小窗口的欢迎内容独立滚动；发送首条消息后收起欢迎区。Code及Canvas左栏不再显示作品广场入口，账户按钮保持原位；老师求助按钮保留临时应用的最新文案「帮我整体看🧠」。
 - `Makelore Agents｜AI 智能体`：从模块首页进入时先打开“我的智能体”卡片列表，保留此前对话与操作恢复记录；返回首页箭头与侧栏折叠按钮同排，折叠后仍可返回；智能体模块的侧栏只通过按钮点击或键盘激活展开，鼠标经过左侧、收纳按钮或顶栏不会展开，切换模块不沿用旧悬停预览；其他模块仍保留原预览方式。“我的智能体”使用浅紫对话机器人图标，“渠道”使用浅蓝连接节点图标。macOS 原生窗口按钮留出安全空间。首页围绕自己的智能体和创建入口，显示童趣问候“Hi，今天想创造还是想聊聊？”，不再显示更多、收到的分享、活动或归档筛选。卡片恢复原有尺寸与留白，显示名称、可为空的一句话介绍及状态，支持聊天、调整、继续制作和确认删除；删除沿用云端归档机制，移出列表并停用新调用，历史和费用保留。创建先填写名称并选择平台像素头像或上传头像，下一步进入独立配置。顶部名称有编辑图标，头像可点击修改；未设置头像时使用同一张默认像素头像，从创建到配置、改名、保存和重新打开保持一致。基础页为“介绍与提示词”，一句话介绍可留空，完整提示词保留原始文本；模型作为高级设置第一项必选，未选择时不能开始使用，草稿可分步保存，不自动选模型。介绍与提示词采用浅蓝介绍卡和浅紫提示词卡；高级设置按模型、TOOL、SKILL、MCP 服务和知识库纵向呈现，资源选择按钮分别显示「选择TOOL」「选择SKILL」；移除子智能体选择模块，保存其他配置时保留历史子智能体绑定，不再设内部分类切换；不展示 Tool/Skill 解释、资源开放规则提示、云端能力管理、费用上限或运行限制卡片，保存其他配置时保留既有运行限制，费用规则不变。顶层页签切换保留搜索、资源选择、知识表单及未保存输入。配置页移除聊天、自动任务和使用与接入导航，独立聊天仍从卡片进入，微信账号仍在侧栏渠道管理。草稿明确保存（Ctrl/⌘+S）；保存只更新草稿，“应用最新修改”使新配置生效，失败重试保持原操作身份；点击“开始使用”完成必要的私有启用后直接打开聊天，不再展示二次确认页；未保存修改、缺少模型、冲突或尚未确认的请求会留在配置页处理，打开聊天不自动发送消息。独立对话沿用奶油底色和浅蓝、浅紫、薄荷色：顶部展示返回、只读头像和名称；有附件时在同一行右侧显示回形针“附件”入口和文件数量，不展示调整、保存／应用状态、客户端／微信来源、费用／版本说明或历史／新对话图标；配置由列表卡片的“调整”进入。空对话展示当前智能体头像与名称，示例只填入草稿；用户消息使用浅紫圆角气泡，助手 Markdown、表格和代码在消息区内滚动。文件或图片从输入框内添加，上传成功后以待发送卡片呈现，可移除本次携带；移除不会删除云端文件，添加不会自动发送。确认失败沿用同一文件和对话重试，发送前需完成或取消添加；支持仅发送附件，使用明确的附件提问。输入框沿用 Code 的浅蓝边框、圆形按钮及一至六行输入规则；Enter 发送、Shift+Enter 换行，保留中文输入法确认。麦克风复用应用级语音输入，识别只追加当前草稿，不自动发送；切换账号、对话或隐藏页面后丢弃过期识别。支持拖入文件、粘贴图片和多文件选择，上传与确认仍由 Main 持有认证并转发；失败重试保留同一批文件身份。输入框的“＋”添加文件或图片；右上角“附件”打开右侧面板，按“你上传的”和“助手生成的”分组，支持再次选用已上传附件及保存明确交付的生成文件。生成文件仅取当前对话已保存助手回复中的本地文件链接（含图片与引用式链接），核对实际文件后展示和计数；只读取链接所在的文件夹，不遍历全部工作文件。未交付的脚本、缓存和工具记录不展示、不计数，明确交付的代码照常展示；仅写了路径的旧成果可能暂时隐藏，后续接入 Yuxi 的正式交付记录。没有文件时隐藏入口；打开、关闭面板保留聊天与输入，Escape 关闭并返回入口焦点；最近对话自动恢复、审批、停止和未发送内容的离开保护保留。模型返回的思考按消息独立于正文展示；正文到来后或完成时折叠，可手动展开；无思考或工具内容时不显示过程区。重连事件去重并隔离当前运行与主对话，终态历史未到达时保留已收到的片段并有限补读；服务端返回的最终回答思考可在历史中回看，不进入后续提问。历史回看需要配套 Yuxi API 的思考和工具记录投影；实时过程沿用既有事件流。平台工具和内置做事手册使用 Yuxi 下发的通俗名称与说明；逐条消息的思考、工具输入／结果／失败独立于 Markdown 正文，实时与历史工具卡片共用展示文案，展开可查看原始工具标识。个人上传手册保留作者文案，资源选择仍保存原始标识。头像上传、Main-owned Host API、访问隔离、费用与不可变版本规则保持；介绍留空需要配套 Yuxi DraftCreate/DraftSave 的空字符串契约。
 
   个人智能体聊天在每条提问与回答下方显示云端记录的消息时间；发送时间位于紫色消息气泡外下方并靠右，助手回复时间保持在回答下方：今天显示时分，跨日增加日期，悬停可查看完整日期与秒数；发送时间与回复时间沿用原消息记录，重开对话不改为当前时间。流式回答尚无可靠时间时显示「回复中…」，历史到达后展示原时间；缺失或无效时间显示「时间未记录」。正式对话、草稿试用和上次试用对比使用相同规则，不新增 Yuxi 接口。
@@ -41,7 +41,7 @@ Makelore 是一个面向软件、视觉创作、智能机器人与个人云智
 - macOS 窗口按钮：红色关闭当前窗口，全屏时先退出全屏再关闭；黄色最小化，绿色保留原生缩放/全屏行为。关窗后应用和进行中的后台任务继续运行，点击 Dock、托盘或菜单可重新打开窗口；`Cmd+Q` 退出应用。
 - 桌面文本右键菜单：主 Renderer 窗口由 Electron Main 提供原生“剪切、复制、粘贴、全选”操作；菜单只在可编辑区域或已有文本选择时出现，普通空白区域不显示，也不向 Renderer 暴露剪贴板 IPC。
 - AI 编程核心对话运行时：Electron Main 按需启动一个长驻 Pi Agent Server，同一进程内为每条 Conversation 建立独立的 Runtime、Session、凭证视图、扩展上下文和 JSONL 通道，同时复用 Pi 模块与进程启动成本；Server 异常退出时所有旧通道统一失效，下一次恢复只重启一个 Server。正式包中的 Agent Server 从明确传入的 `resources/pi-runtime` 根定位依赖清单与包入口，不从脚本所在目录或应用 `node_modules` 猜测解析。Renderer 不直接启动或调用 Pi，也不读取其 wire 类型。项目与 Conversation 元数据先从本地读取，选中对话后才按需准备对应逻辑线程；输入框不等待运行时准备完成。同一助手工具批次中，会取得项目写租约的 `bash`、`edit`、`write` 与动态产品工具按顺序执行，避免批次在命令启动前自锁；纯只读工具仍可并行。子 Agent 仍使用独立的短生命周期进程，以保留并发配额、故障和写入边界；macOS 上两类后台进程都使用 Electron 自带的 Helper，不在 Dock 中创建额外应用图标。
-- AI 编程默认入口：进入 Code 后保持在 `/chat`。顶部返回箭头与侧栏收起图标同排，与右侧项目/会话名称对齐；折叠时保留返回和展开入口。macOS 为原生窗口按钮保留安全空间，窄侧栏仍可使用。左侧不再展示麦洛品牌与说明语，“新建项目”置于原品牌区，“我的项目”与列表上移到原新建项目区域；“作品广场”与“新建项目”沿用 Agent 的彩色图标徽章＋文字样式，不再使用整行白色块与厚阴影，“作品广场”移至底部、紧邻账户按钮上方；“我的项目”和项目列表紧接新建项目，列表沿用图标与文字布局及浅色选中反馈；从项目菜单进入的配置页及插件资源页复用相同的左侧工作栏，返回与收起按钮、项目和会话列表、底部作品广场与账户的位置保持一致，并沿用当前宽度和收起状态；配置正文、顶部项目名称与配置页自身的返回操作保留。尚未选择本地项目时，页面以麦洛 M 标识和居中引导语建立焦点，下方提供独立的“新增项目”主操作以及可横向浏览、直接进入的已有项目卡片；项目创建和进入仍复用侧栏现有流程。已有项目的新 Conversation 在可编辑 Composer 上方沿用同一品牌引导，第一条消息出现后切换为正常时间线。
+- AI 编程默认入口：进入 Code 后保持在 `/chat`。顶部返回箭头与侧栏收起图标同排，与右侧项目/会话名称对齐；折叠时保留返回和展开入口。macOS 为原生窗口按钮保留安全空间，窄侧栏仍可使用。左侧不再展示麦洛品牌与说明语，“新建项目”置于原品牌区，“我的项目”与列表上移到原新建项目区域；“新建项目”沿用 Agent 的彩色图标徽章＋文字样式，不使用整行白色块与厚阴影；“我的项目”和项目列表紧接新建项目，列表沿用图标与文字布局及浅色选中反馈；从项目菜单进入的配置页及插件资源页复用相同的左侧工作栏，返回与收起按钮、项目和会话列表、底部账户的位置保持一致，并沿用当前宽度和收起状态；配置正文、顶部项目名称与配置页自身的返回操作保留。尚未选择本地项目时，页面以麦洛 M 标识和居中引导语建立焦点，下方提供独立的“新增项目”主操作以及可横向浏览、直接进入的已有项目卡片；项目创建和进入仍复用侧栏现有流程。已有项目的新 Conversation 在可编辑 Composer 上方沿用同一品牌引导，第一条消息出现后切换为正常时间线。
 - AI 编程历史与配额反馈：Pi 上下文压缩不删除用户可见的 active-branch 历史，压缩摘要保持 Main-private；Renderer 首次渲染最近 120 个节点，向上滚动时按 100 个节点追加更早内容并保持阅读位置。Main 精确识别 `token_point_balance_exhausted` / `词元点数余额不足`，只向 Renderer 投影不可重试的稳定配额错误和安全中文提示，重开会话后仍可见且不暴露上游原始错误或 request id。
 - 账号词元点数：左下角账户菜单显示本人永久余额和预占；“词元点数与充值”入口暂时隐藏，充值、充值订单与分页收支记录的既有实现保留。真正新注册赠送 100 点，1 元充值 50 点，永久有效；旧账户不补送，旧会员/订阅/周额度/重置卡入口已移除。家长为孩子充值时登录孩子的账号，页面显示当前昵称和账号，点数进入该账号自己的钱包；无需将孩子身份改为家长。当前有效账号可给本人充值，青少年可查看自己的精确余额；使用他人共享钱包时仅显示可用状态，不显示付款人的余额或记录。Main 持有凭据并转发充值请求；付款结果未知时沿用原请求并核查原订单，只有服务端确认才显示到账。扫码信息缺失时可到网页账户页继续原订单，付款来源也由网页账户页管理，充值不会自动切换共享/个人来源。需配套部署 Works Square 当前账号充值资格更新（本次无需新迁移，原永久点数基础为 0094）；本地模拟验收不代表真实支付通过。
 - 桌面性能策略：应用窗口使用不透明浅色表面并默认保留硬件合成；仅在显式安全模式或短时间内重复 GPU 进程崩溃时启用软件渲染，并把故障原因保存在用户数据目录。启动关键路径只创建本地应用壳，认证、代理、同步、更新和遥测在首帧后延迟初始化；开发版可通过 `app:performance` 快照观察 GPU、进程、WebContents、事件循环与 Renderer Long Task 聚合指标。
diff --git a/src/components/community/CommunityLink.tsx b/src/components/community/CommunityLink.tsx
index aa33f76e..751954c7 100644
--- a/src/components/community/CommunityLink.tsx
+++ b/src/components/community/CommunityLink.tsx
@@ -5,20 +5,21 @@ import { openCommunity } from '@/lib/community';
 import './community.css';
 
 export function CommunityLink({ variant = 'inline', collapsed = false }: {
-  variant?: 'inline' | 'sidebar' | 'welcome'; collapsed?: boolean;
+  variant?: 'inline' | 'sidebar' | 'welcome' | 'home'; collapsed?: boolean;
 }) {
   const [opening, setOpening] = useState(false);
   const [error, setError] = useState(false);
-  return <div className="community-link-container" data-variant={variant}>
+  const Container = variant === 'home' ? 'span' : 'div';
+  return <Container className="community-link-container" data-variant={variant}>
     <button type="button" className="community-link" data-variant={variant} data-collapsed={collapsed}
-      data-testid={variant === 'welcome' ? 'community-welcome-link' : undefined}
+      data-testid={variant === 'home' ? 'community-home-link' : variant === 'welcome' ? 'community-welcome-link' : undefined}
       aria-label={variant === 'inline' ? '去作品广场逛逛' : '作品广场'}
       title="在浏览器打开作品广场" disabled={opening}
       onClick={() => {
         setOpening(true); setError(false);
         void openCommunity().catch(() => setError(true)).finally(() => setOpening(false));
       }}>
-      {variant === 'welcome' ? <>
+      {variant === 'home' ? '作品广场' : variant === 'welcome' ? <>
         <span className="coding-start-mark"><img src={mark} alt="麦洛" /><Sparkles aria-hidden="true" /><Star aria-hidden="true" /></span>
         <span className="coding-start-eyebrow">作品广场<ArrowUpRight className="community-link-arrow" aria-hidden="true" /></span>
       </> : <>
@@ -27,5 +28,5 @@ export function CommunityLink({ variant = 'inline', collapsed = false }: {
       </>}
     </button>
     {error && <span className="community-link-error" role="alert">没能打开作品广场，请再点一次试试。</span>}
-  </div>;
+  </Container>;
 }
diff --git a/src/components/community/community.css b/src/components/community/community.css
index 1f0065d7..ba8e2572 100644
--- a/src/components/community/community.css
+++ b/src/components/community/community.css
@@ -10,6 +10,7 @@
 .coding-start-mark img { width: 35px; height: 35px; }
 .coding-start-mark > svg { position: absolute; width: 17px; height: 17px; right: -24px; top: -2px; color: #c78b36; }
 .coding-start-mark > svg:last-child { width: 12px; height: 12px; left: -23px; top: 39px; color: #83a496; }
+.coding-start-heading > .coding-start-mark { margin-bottom: 24px; }
 .coding-start-eyebrow { display: inline-flex; align-items: center; gap: 4px; margin: 18px 0 7px; color: #7a7769; font-size: 12px; letter-spacing: .08em; }
 .coding-start-heading h1 { color: #304968; font-size: clamp(24px, 2.5vw, 34px); line-height: 1.45; font-weight: 650; letter-spacing: -.04em; }
 .coding-start-heading h1 span { position: relative; white-space: nowrap; background: linear-gradient(transparent 73%, #ffe6a6 73%, #ffe6a6 94%, transparent 94%); }
@@ -35,6 +36,10 @@
 .community-link[data-variant="welcome"]:hover:not(:disabled) .coding-start-eyebrow, .community-link[data-variant="welcome"]:focus-visible .coding-start-eyebrow { color: #526b46; text-decoration: underline; text-underline-offset: 4px; }
 .community-link[data-variant="welcome"] .community-link-arrow { width: 12px; height: 12px; }
 .community-link[data-collapsed="true"] { justify-content: center; padding-inline: 0; }
+.community-link-container[data-variant="home"] { display: inline; }
+.community-link[data-variant="home"] { display: inline-block; vertical-align: baseline; min-height: 0; margin: 0; padding: 0; border: 0; border-radius: 2px; background: transparent; box-shadow: none; color: inherit; font-family: inherit; font-size: 1.12em; font-weight: inherit; line-height: inherit; letter-spacing: inherit; text-decoration: underline; text-decoration-color: currentColor; text-decoration-thickness: 1.5px; text-underline-offset: 6px; transition: transform 160ms ease; }
+.community-link[data-variant="home"]:is(:hover, :focus-visible):not(:disabled) { background: transparent; text-decoration-thickness: 2px; transform: translateY(-1px); }
+.community-link[data-variant="home"]:active:not(:disabled) { transform: translateY(1px); }
 .community-link-error { display: block; margin-top: 6px; color: #965a45; font-size: 12px; line-height: 1.6; }
 @keyframes community-hello { 0% { transform: rotate(-15deg) translateY(5px); opacity: 0; } 70% { transform: rotate(3deg); opacity: 1; } 100% { transform: rotate(-7deg); } }
 @media (max-width: 600px) {
@@ -43,3 +48,4 @@
   .community-invitation { flex-direction: column; align-items: flex-start; gap: 13px; padding: 19px; }
 }
 @media (prefers-reduced-motion: reduce) { .coding-start-mark { animation: none; } .community-link[data-variant="welcome"] .coding-start-mark, .community-link[data-variant="welcome"] .coding-start-eyebrow { transition: none; } }
+@media (prefers-reduced-motion: reduce) { .community-link[data-variant="home"] { transition: none; }.community-link[data-variant="home"]:is(:hover, :focus-visible, :active):not(:disabled) { transform: none; } }
diff --git a/src/components/layout/Sidebar.tsx b/src/components/layout/Sidebar.tsx
index 39b059fa..4df07e2b 100644
--- a/src/components/layout/Sidebar.tsx
+++ b/src/components/layout/Sidebar.tsx
@@ -57,7 +57,6 @@ import { useProviderStore } from '@/stores/providers';
 import type { CodingProjectSummary } from '@/types/coding-project';
 import { useProjectConfigStore } from '@/stores/project-config';
 import { toast } from 'sonner';
-import { CommunityLink } from '@/components/community/CommunityLink';
 
 type OpenDialogResult = {
   canceled: boolean;
@@ -472,7 +471,6 @@ export function Sidebar({
           {workspaceLayout ? <span className="classroom-create-project-icon" aria-hidden="true"><Plus strokeWidth={1.8} /></span> : <Plus className="h-4 w-4 shrink-0 text-brand" />}
           {!sidebarCollapsed && '新建项目'}
         </button>
-        {!workspaceLayout && <CommunityLink variant="sidebar" collapsed={sidebarCollapsed} />}
         <div className="classroom-projects mt-3">
           <button
             type="button"
@@ -874,12 +872,6 @@ export function Sidebar({
         onOpenChange={setProfileDialogOpen}
       />
 
-      {((workspaceLayout && isProgrammingModule) || isPaintingModule) && (
-        <div className="classroom-community-footer">
-          <CommunityLink variant="sidebar" collapsed={sidebarCollapsed} />
-        </div>
-      )}
-
       <div className="classroom-account-footer mt-auto shrink-0 px-[10px] pb-3 pt-2.5">
         <div className="relative">
           <div className="flex flex-col items-start gap-2">
diff --git a/src/pages/Chat/CodingStartHeading.tsx b/src/pages/Chat/CodingStartHeading.tsx
index ab2cfacd..13f1636d 100644
--- a/src/pages/Chat/CodingStartHeading.tsx
+++ b/src/pages/Chat/CodingStartHeading.tsx
@@ -1,8 +1,10 @@
-import { CommunityLink } from '@/components/community/CommunityLink';
+import { Sparkles, Star } from 'lucide-react';
+import mark from '@/assets/consultations/mark.svg';
+import '@/components/community/community.css';
 
 export function CodingStartHeading() {
   return <div className="coding-start-heading" data-testid="coding-start-heading">
-    <CommunityLink variant="welcome" />
+    <span className="coding-start-mark"><img src={mark} alt="麦洛" /><Sparkles aria-hidden="true" /><Star aria-hidden="true" /></span>
     <h1>今天，你想<span>创造什么？</span></h1>
     <p className="coding-start-caption">一个游戏、一段故事，或是一个天马行空的想法。</p>
   </div>;
diff --git a/src/pages/ModuleSelection/index.tsx b/src/pages/ModuleSelection/index.tsx
index 6ac9fd46..ef54d709 100644
--- a/src/pages/ModuleSelection/index.tsx
+++ b/src/pages/ModuleSelection/index.tsx
@@ -7,6 +7,7 @@ import moduleRobotImage from '@/assets/module-robot.webp';
 import logoWordmarkSource from '@/assets/makelore-wordmark-source.png';
 import { UserProfileDialog } from '@/components/profile/UserProfileDialog';
 import { HomeAccountMenu } from '@/components/account/HomeAccountMenu';
+import { CommunityLink } from '@/components/community/CommunityLink';
 import { useCurrentUserProfile } from '@/hooks/use-current-user-profile';
 import { aiModules, isAiModuleAllowed, type AiModuleId } from '@/lib/ai-modules';
 import { getAuthUserDisplayName } from '@/lib/auth-user-display';
@@ -65,9 +66,10 @@ export function ModuleSelection({ authRequired = true }: { authRequired?: boolea
         <div className="module-selection-content">
           <section className="module-selection-intro">
             <p className="module-selection-welcome text-sm font-semibold tracking-[0.08em] text-muted-foreground">
-              {userDisplayName ? `${userDisplayName}，欢迎回来！` : '欢迎回来！'}
+              {userDisplayName ? `${userDisplayName}欢迎回来！` : '欢迎回来！'}
             </p>
             <h1 className="module-selection-title whitespace-nowrap font-semibold leading-[1.02] tracking-[-0.055em]">今天，想创作什么？</h1>
+            <p className="module-selection-inspiration">还是去「<CommunityLink variant="home" />」找找灵感？</p>
           </section>
 
           <section
diff --git a/src/styles/globals.css b/src/styles/globals.css
index 84d5beb8..0816f75d 100644
--- a/src/styles/globals.css
+++ b/src/styles/globals.css
@@ -423,6 +423,8 @@
   text-align: center;
 }
 
+.module-selection-welcome, .module-selection-title { color: hsl(var(--foreground)); font-family: inherit; }
+
 .module-selection-title {
   width: fit-content;
   margin-inline: auto;
@@ -430,6 +432,19 @@
   font-size: clamp(2rem, 3.3vw, 3.75rem);
 }
 
+.module-selection-inspiration {
+  margin-top: 24px;
+  color: hsl(var(--foreground));
+  font-size: 18px;
+  line-height: 1.85;
+}
+
+@media (max-width: 600px) {
+  .module-selection-inspiration {
+    font-size: 15px;
+  }
+}
+
 .module-selection-account [data-testid='home-account-controls'] {
   position: fixed;
   bottom: 12px;
diff --git a/tests/e2e/community-welcome.spec.ts b/tests/e2e/community-welcome.spec.ts
index ad4e42aa..d499ef46 100644
--- a/tests/e2e/community-welcome.spec.ts
+++ b/tests/e2e/community-welcome.spec.ts
@@ -70,9 +70,9 @@ for (const width of [375, 768, 1280, 1470]) {
       }).toBe(true);
     }
     await expect(page.locator('.coding-start-mark')).toHaveCSS('animation-name', 'none');
-    await page.getByTestId('community-welcome-link').scrollIntoViewIfNeeded();
+    await page.locator('.coding-start-mark').scrollIntoViewIfNeeded();
     expect(await page.evaluate(() => document.documentElement.scrollWidth)).toBeLessThanOrEqual(width);
-    await expect(page.getByTestId('community-welcome-link')).toBeVisible();
+    await expect(page.locator('.coding-start-mark')).toBeVisible();
     await expect(page.getByTestId('community-invitation')).toHaveCount(0);
     while (await teachers.count()) await teachers.getByRole('button', { name: /^收起全部老师介绍/ }).first().click();
     await heading.scrollIntoViewIfNeeded();
@@ -96,8 +96,8 @@ test('a short window scrolls the welcome while keeping the composer at the botto
   expect(600 - after.y - after.height).toBeLessThanOrEqual(40);
   const teachers = page.getByTestId('teacher-welcomes');
   while (await teachers.count()) await teachers.getByRole('button', { name: /^收起全部老师介绍/ }).first().click();
-  await page.getByTestId('community-welcome-link').scrollIntoViewIfNeeded();
-  await expect(page.getByTestId('community-welcome-link')).toBeInViewport({ ratio: 1 });
+  await page.locator('.coding-start-mark').scrollIntoViewIfNeeded();
+  await expect(page.locator('.coding-start-mark')).toBeInViewport({ ratio: 1 });
   await expect(page.getByTestId('community-invitation')).toHaveCount(0);
   expect(await page.evaluate(() => document.documentElement.scrollWidth)).toBeLessThanOrEqual(375);
 });
@@ -146,41 +146,47 @@ for (const width of [1280, 1470]) {
   });
 }
 
-test('the welcome entry opens only on click and leaves the draft mounted', async ({ page }) => {
+test('the home gallery opens only on click and is larger than the surrounding text', async ({ page }) => {
   await page.setViewportSize({ width: 1280, height: 850 });
   const communityRequests: string[] = [];
   page.on('request', request => { if (request.url().includes('square.nianxx.cn')) communityRequests.push(request.url()); });
-  await page.goto(baseUrl);
-  const composer = page.getByRole('textbox');
-  await composer.fill('我想做一个自己的小镇');
-  await composer.evaluate(node => node.setAttribute('data-mounted', 'same'));
-  const calls = () => page.evaluate(() => (window as typeof window & { __communityCalls: unknown[][] }).__communityCalls);
-  expect(await calls()).toEqual([]);
-  await expect(page.getByTestId('community-invitation')).toHaveCount(0);
-  await page.getByTestId('community-welcome-link').click();
+  await page.goto(baseUrl + '?home');
+  await expect(page.getByText('Alice欢迎回来！', { exact: true })).toBeVisible();
+  await expect(page.getByRole('heading', { name: '今天，想创作什么？' })).toBeVisible();
+  const entry = page.getByTestId('community-home-link');
+  await expect(entry).toHaveText('作品广场');
+  await expect(page.locator('.module-selection-inspiration')).toHaveText('还是去「作品广场」找找灵感？');
+  const fontRatio = await entry.evaluate(el => parseFloat(getComputedStyle(el).fontSize) / parseFloat(getComputedStyle(el.closest('p')!).fontSize));
+  expect(fontRatio).toBeCloseTo(1.12, 2);
+  const typography = await entry.evaluate(el => {
+    const own = getComputedStyle(el), surrounding = getComputedStyle(el.closest('p')!);
+    return { font: own.fontFamily, surroundingFont: surrounding.fontFamily, weight: own.fontWeight, surroundingWeight: surrounding.fontWeight, color: own.color, surroundingColor: surrounding.color };
+  });
+  expect(typography.font).toBe(typography.surroundingFont);
+  expect(typography.weight).toBe(typography.surroundingWeight);
+  expect(typography.color).toBe(typography.surroundingColor);
+  await expect(entry.locator('svg')).toHaveCount(0);
+  expect(await page.evaluate(() => (window as typeof window & { __communityCalls: unknown[][] }).__communityCalls)).toEqual([]);
+  await page.screenshot({ path: test.info().outputPath('homepage-gallery-text.png') });
+  await entry.click();
   expect(await page.evaluate(() => (window as typeof window & { __communityCalls: unknown[][] }).__communityCalls))
     .toEqual([['shell:openExternal', 'https://square.nianxx.cn/#explore']]);
   expect(communityRequests).toEqual([]);
   await expect(page.locator('iframe')).toHaveCount(0);
-  await expect(composer).toHaveValue('我想做一个自己的小镇');
-  await expect(composer).toHaveAttribute('data-mounted', 'same');
-  await expect(page.getByTestId('coding-start-heading')).toBeVisible();
-  await expect(page.getByText('第一条消息已发送（测试）')).toHaveCount(0);
-  await page.getByRole('button', { name: '发送', exact: true }).click();
-  await expect(page.getByTestId('community-welcome-link')).toHaveCount(0);
-  await expect(composer).toHaveAttribute('data-mounted', 'same');
+  await expect(page.getByRole('heading', { name: '今天，想创作什么？' })).toBeVisible();
 });
 
-test('the welcome entry supports keyboard activation and retry while preserving the draft', async ({ page }) => {
+test('the home text entry supports keyboard retry without overflow on small screens', async ({ page }) => {
   await page.setViewportSize({ width: 375, height: 600 });
-  await page.goto(baseUrl);
-  const composer = page.getByRole('textbox');
-  await composer.fill('保留我的草稿');
+  await page.emulateMedia({ reducedMotion: 'reduce' });
+  await page.goto(baseUrl + '?home');
   await page.evaluate(() => { (window as typeof window & { __communityFailures: number }).__communityFailures = 1; });
-  const entry = page.getByTestId('community-welcome-link');
+  const entry = page.getByTestId('community-home-link');
   await entry.focus();
   await expect(entry).toBeFocused();
   await expect(entry).toHaveCSS('outline-style', 'solid');
+  await expect(entry).toHaveCSS('transition-duration', '0s');
+  expect(await page.evaluate(() => document.documentElement.scrollWidth)).toBeLessThanOrEqual(375);
   await entry.press('Enter');
   await expect(page.getByRole('alert')).toHaveText('没能打开作品广场，请再点一次试试。');
   await expect(entry).toBeEnabled();
@@ -191,7 +197,6 @@ test('the welcome entry supports keyboard activation and retry while preserving
       ['shell:openExternal', 'https://square.nianxx.cn/#explore'],
       ['shell:openExternal', 'https://square.nianxx.cn/#explore'],
     ]);
-  await expect(composer).toHaveValue('保留我的草稿');
-  await expect(page.getByTestId('coding-start-heading')).toBeVisible();
-  await expect(page.getByText('第一条消息已发送（测试）')).toHaveCount(0);
+  await expect(page.getByRole('heading', { name: '今天，想创作什么？' })).toBeVisible();
+  await page.screenshot({ path: test.info().outputPath('homepage-gallery-text-mobile.png') });
 });
diff --git a/tests/e2e/fixtures/community-welcome.tsx b/tests/e2e/fixtures/community-welcome.tsx
index 49715672..f9b08df2 100644
--- a/tests/e2e/fixtures/community-welcome.tsx
+++ b/tests/e2e/fixtures/community-welcome.tsx
@@ -1,5 +1,9 @@
 import { useState, type ComponentProps } from 'react';
 import { createRoot } from 'react-dom/client';
+import { MemoryRouter } from 'react-router-dom';
+import { ModuleSelection } from '../../../src/pages/ModuleSelection';
+import { useAuthStore } from '../../../src/stores/auth';
+import { EMPTY_AGENT_USER_PROFILE, useUserProfileStore } from '../../../src/stores/user-profile';
 import { CodingChatBody } from '../../../src/pages/Chat/CodingChatBody';
 import { CodingStartHeading } from '../../../src/pages/Chat/CodingStartHeading';
 import { CodingComposer } from '../../../src/pages/Chat/CodingComposer';
@@ -46,4 +50,10 @@ export function Layout() {
     </main>
   </div></div>;
 }
-createRoot(document.getElementById('root')!).render(<Layout />);
+const home = new URLSearchParams(location.search).has('home');
+if (home) {
+  useAuthStore.setState({ initialized: true, loading: false, accessToken: null,
+    user: { username: 'Alice', userId: 'home-fixture', tenantId: null, deptId: null, authorities: [] } });
+  useUserProfileStore.setState({ profilesByUserId: { 'home-fixture': { ...EMPTY_AGENT_USER_PROFILE, displayName: 'Alice' } }, syncStatesByUserId: {} });
+}
+createRoot(document.getElementById('root')!).render(home ? <MemoryRouter><ModuleSelection authRequired={false} /></MemoryRouter> : <Layout />);
diff --git a/tests/e2e/image-workspace-v2.spec.ts b/tests/e2e/image-workspace-v2.spec.ts
index 64b5e2a3..990990c8 100644
--- a/tests/e2e/image-workspace-v2.spec.ts
+++ b/tests/e2e/image-workspace-v2.spec.ts
@@ -479,8 +479,9 @@ test.describe('AI Design V2 workspace', () => {
       const project = sidebar.getByTestId('sidebar-image-project-workspace-1');
       const projectsHeading = sidebar.locator('.classroom-projects-heading');
       const moduleReturn = sidebar.getByTestId('sidebar-module-switcher-trigger');
-      const community = sidebar.getByRole('button', { name: '作品广场', exact: true });
       const account = sidebar.getByTestId('sidebar-member-menu-trigger');
+      await expect(sidebar.getByRole('button', { name: '作品广场', exact: true })).toHaveCount(0);
+      await expect(page.getByTestId('community-welcome-link')).toHaveCount(0);
       await expect(sidebar).toHaveAttribute('aria-hidden', 'false');
       await expect(sidebar).toHaveCSS('background-color', 'rgb(245, 242, 250)');
       await expect(createProject).toHaveText('新建项目');
@@ -502,29 +503,20 @@ test.describe('AI Design V2 workspace', () => {
       const actions = sidebar.getByRole('button', { name: '项目操作：咖啡机新品主视觉', exact: true });
       await expect(actions).toHaveCSS('width', '32px');
       await expect(actions).toHaveCSS('height', '32px');
-      const [sidebarBox, createBox, headingBox, projectBox, returnBox, communityBox, accountBox] = await Promise.all(
-        [sidebar, createProject, projectsHeading, project, moduleReturn, community, account].map((locator) => locator.boundingBox()),
+      const [sidebarBox, createBox, headingBox, projectBox, returnBox, accountBox] = await Promise.all(
+        [sidebar, createProject, projectsHeading, project, moduleReturn, account].map((locator) => locator.boundingBox()),
       );
       expect(sidebarBox!.width).toBe(256);
       expect(createBox!.height).toBe(48);
       expect(projectBox!.height).toBe(48);
       expect(createBox!.y - sidebarBox!.y).toBe(40);
+      expect(createBox!.x - sidebarBox!.x).toBe(12);
       expect(headingBox!.y - sidebarBox!.y).toBe(96);
       expect(projectBox!.y - sidebarBox!.y).toBe(136);
       expect(returnBox!.y - sidebarBox!.y).toBe(4);
-      expect(communityBox!.x).toBe(createBox!.x);
-      expect(communityBox!.height).toBe(createBox!.height);
-      expect(communityBox!.y).toBeGreaterThan(projectBox!.y + projectBox!.height);
-      expect(accountBox!.y - communityBox!.y - communityBox!.height).toBeCloseTo(0, 0);
+      expect(accountBox!.y).toBeGreaterThan(projectBox!.y + projectBox!.height);
+      expect(sidebarBox!.y + sidebarBox!.height - accountBox!.y - accountBox!.height).toBeGreaterThanOrEqual(0);
       expect(sidebarBox!.y + sidebarBox!.height - accountBox!.y - accountBox!.height).toBeLessThanOrEqual(14);
-      const navigationStyles = await sidebar.evaluate((element) => {
-        const recipe = (selector: string) => {
-          const style = getComputedStyle(element.querySelector(selector)!);
-          return [style.borderRadius, style.borderWidth, style.boxShadow, style.padding, style.fontSize, style.fontWeight, style.lineHeight];
-        };
-        return { create: recipe('[data-testid="sidebar-create-project"]'), community: recipe('.community-link') };
-      });
-      expect(navigationStyles.community).toEqual(navigationStyles.create);
 
       const splitBounds = (await split.boundingBox())!;
       const conversationBounds = (await conversationPane.boundingBox())!;
diff --git a/tests/e2e/main-navigation.spec.ts b/tests/e2e/main-navigation.spec.ts
index 7362e13f..904aabd7 100644
--- a/tests/e2e/main-navigation.spec.ts
+++ b/tests/e2e/main-navigation.spec.ts
@@ -406,6 +406,7 @@ test.describe('Makelore module navigation without setup flow', () => {
       await expect(moduleReturn).toHaveAttribute('aria-label', '返回首页');
       await expect(moduleReturn).toHaveAttribute('title', '返回首页');
       await expect(page.getByTestId('sidebar-module-return-icon')).toBeVisible();
+      await expect(page.getByTestId('sidebar-module-return-icon')).toHaveClass(/lucide-house/);
       await expect(sidebar.locator('.classroom-brand')).toHaveCount(0);
       await expect(sidebar).not.toContainText('把脑洞变成作品');
       const returnBox = await moduleReturn.boundingBox();
@@ -421,27 +422,17 @@ test.describe('Makelore module navigation without setup flow', () => {
       expect(returnBox!.x + returnBox!.width).toBeLessThanOrEqual(collapseBox!.x);
       expect(sidebarBox!.x + sidebarBox!.width - collapseBox!.x - collapseBox!.width).toBeLessThanOrEqual(14);
       await expect(page.getByTestId('titlebar-sidebar-toggle')).toHaveCount(1);
-      const community = sidebar.getByRole('button', { name: '作品广场', exact: true });
-      await expect(community).toHaveCount(1);
-      const communityBox = await community.boundingBox();
+      await expect(sidebar.getByRole('button', { name: '作品广场', exact: true })).toHaveCount(0);
+      await expect(page.getByTestId('community-welcome-link')).toHaveCount(0);
       const createBox = await sidebar.getByTestId('sidebar-create-project').boundingBox();
       const headingBox = await sidebar.locator('.classroom-projects-heading').boundingBox();
       const accountBox = await sidebar.getByTestId('sidebar-member-menu-trigger').boundingBox();
       expect(createBox!.y).toBe(sidebarBox!.y);
+      expect(createBox!.x - sidebarBox!.x).toBe(12);
       expect(headingBox!.y - sidebarBox!.y).toBe(56);
-      expect(communityBox!.x).toBe(createBox!.x);
-      expect(communityBox!.y).toBeGreaterThan(headingBox!.y + headingBox!.height);
-      expect(accountBox!.y - communityBox!.y - communityBox!.height).toBeCloseTo(0, 0);
-      expect(communityBox!.height).toBe(createBox!.height);
-      await expect(community).toHaveCSS('background-color', 'rgba(0, 0, 0, 0)');
-      const buttonStyles = await page.evaluate(() => {
-        const styles = (selector: string) => {
-          const s = getComputedStyle(document.querySelector(selector)!);
-          return [s.borderRadius, s.borderWidth, s.borderColor, s.boxShadow, s.padding, s.fontSize, s.fontWeight];
-        };
-        return { community: styles('[data-testid=sidebar] .community-link'), create: styles('[data-testid=sidebar-create-project]') };
-      });
-      expect(buttonStyles.community).toEqual(buttonStyles.create);
+      expect(accountBox!.y).toBeGreaterThan(headingBox!.y + headingBox!.height);
+      expect(sidebarBox!.y + sidebarBox!.height - accountBox!.y - accountBox!.height).toBeGreaterThanOrEqual(0);
+      expect(sidebarBox!.y + sidebarBox!.height - accountBox!.y - accountBox!.height).toBeLessThanOrEqual(14);
       expect(headingBox!.y).toBeGreaterThanOrEqual(createBox!.y + createBox!.height);
       expect(headingBox!.y - createBox!.y - createBox!.height).toBeLessThanOrEqual(14);
       await page.screenshot({ path: test.info().outputPath('chat-code-return-entry.png') });
@@ -471,14 +462,14 @@ test.describe('Makelore module navigation without setup flow', () => {
         const b = el.getBoundingClientRect();
         return el.contains(document.elementFromPoint(b.x + b.width / 2, b.y + b.height / 2));
       })).toBe(true);
-      await expect(community).toBeVisible();
-      expect(await community.evaluate(element => element.scrollWidth <= element.clientWidth)).toBe(true);
+      await expect(sidebar.getByRole('button', { name: '作品广场', exact: true })).toHaveCount(0);
       await page.screenshot({ path: test.info().outputPath('chat-narrow-navigation-row.png') });
       await sidebarResizer.dblclick();
       await expect(sidebarResizer).toHaveAttribute('aria-valuenow', '171');
 
       const readCodeChrome = () => page.evaluate(() => {
         if (document.querySelector('[data-testid="sidebar"] .classroom-brand')) throw new Error('Removed Code brand reappeared');
+        if (document.querySelector('[data-testid="sidebar"] .community-link')) throw new Error('Relocated gallery reappeared in Code sidebar');
         const selectors = {
           sidebar: '[data-testid="sidebar"]',
           titlebar: '[data-testid="titlebar-sidebar-surface"]',
@@ -487,8 +478,6 @@ test.describe('Makelore module navigation without setup flow', () => {
           toggle: '[data-testid="titlebar-sidebar-toggle"]',
           create: '[data-testid="sidebar-create-project"]',
           heading: '[data-testid="sidebar"] .classroom-projects-heading',
-          community: '[data-testid="sidebar"] .community-link[data-variant="sidebar"]',
-          communityIcon: '[data-testid="sidebar"] .community-link-icon',
           account: '[data-testid="sidebar-member-menu-trigger"]',
         };
         return Object.fromEntries(Object.entries(selectors).map(([name, selector]) => {
@@ -528,6 +517,8 @@ test.describe('Makelore module navigation without setup flow', () => {
       await expect(moduleReturn).toBeVisible();
       const projectBack = page.getByTestId('project-configuration-back-button');
       await expect(projectBack).toBeVisible();
+      await expect(projectBack).toHaveAttribute('title', '返回上一级');
+      await expect(projectBack.locator('svg')).toHaveClass(/lucide-arrow-left/);
       await page.mouse.move(1000, 500);
       await expect.poll(readCodeChrome).toEqual(chatChrome);
       await expect(sidebar).toHaveCSS('background-color', 'rgb(243, 247, 251)');
@@ -592,13 +583,32 @@ test.describe('Makelore module navigation without setup flow', () => {
     }
   });
 
-  test('aligns the desktop home title with the middle of three stacked horizontal module cards', async ({ launchElectronApp }) => {
+  test('aligns the desktop home introduction with the middle of three stacked horizontal module cards', async ({ launchElectronApp }) => {
     const app = await launchElectronApp({ skipSetup: true });
 
     try {
       const page = await getStableWindow(app);
       await expect(page.getByTestId('ai-module-selection-page')).toBeVisible();
 
+      const homeGallery = page.getByRole('button', { name: '作品广场', exact: true });
+      const inspiration = page.locator('.module-selection-inspiration');
+      await expect(homeGallery).toHaveText('作品广场');
+      await expect(homeGallery.locator('svg')).toHaveCount(0);
+      await expect(inspiration).toHaveText('还是去「作品广场」找找灵感？');
+      await app.evaluate(({ shell }) => {
+        const scope = globalThis as typeof globalThis & { __homeCommunityOpened?: string[] };
+        scope.__homeCommunityOpened = [];
+        shell.openExternal = async url => { scope.__homeCommunityOpened!.push(url); };
+      });
+      const homeUrl = page.url();
+      await homeGallery.click();
+      await expect.poll(() => app.evaluate(() => (
+        (globalThis as typeof globalThis & { __homeCommunityOpened?: string[] }).__homeCommunityOpened
+      ))).toEqual(['https://square.nianxx.cn/#explore']);
+      await expect(page).toHaveURL(homeUrl);
+      await expect(homeGallery).toBeEnabled();
+      await expect(page.locator('iframe')).toHaveCount(0);
+
       const moduleCards = page.locator('[data-testid^="ai-module-option-"]');
       await expect(moduleCards.locator('.module-option-card-title')).toHaveText([
         'Agents 智能体', 'Code 编程', 'Canvas 设计',
@@ -634,6 +644,13 @@ test.describe('Makelore module navigation without setup flow', () => {
       for (const width of [1440, 1024, 768, 375]) {
         await app.evaluate(({ BrowserWindow }, windowWidth) => BrowserWindow.getAllWindows()[0]?.setSize(windowWidth, windowWidth === 375 ? 800 : 900), width);
         await expect.poll(() => page.evaluate(() => innerWidth)).toBe(width);
+        const galleryType = await homeGallery.evaluate(element => ({
+          label: Number.parseFloat(getComputedStyle(element).fontSize),
+          surrounding: Number.parseFloat(getComputedStyle(element.closest('p')!).fontSize),
+        }));
+        expect(galleryType.surrounding).toBe(width <= 600 ? 15 : 18);
+        expect(galleryType.label).toBeCloseTo(width <= 600 ? 16.8 : 20.16, 2);
+        expect(galleryType.label / galleryType.surrounding).toBeCloseTo(1.12, 2);
         const cards = await readCardMetrics();
         expect(cards).toHaveLength(3);
         expect(Math.max(...cards.map(card => card.left)) - Math.min(...cards.map(card => card.left))).toBeLessThan(1);
@@ -669,7 +686,8 @@ test.describe('Makelore module navigation without setup flow', () => {
           });
           expect(shift).toBeCloseTo(1.5 * 96 / 2.54, 1);
           expect(heading!.x + heading!.width).toBeLessThanOrEqual(cards[0]!.left);
-          expect(Math.abs(heading!.y + heading!.height / 2 - cards[1]!.top - cards[1]!.height / 2)).toBeLessThan(1);
+          const intro = await page.locator('.module-selection-intro').boundingBox();
+          expect(Math.abs(intro!.y + intro!.height / 2 - cards[1]!.top - cards[1]!.height / 2)).toBeLessThan(1);
           expect(await moduleCards.evaluateAll(elements => elements.every(element => {
             const bounds = element.getBoundingClientRect();
             return [[2, 2], [bounds.width - 2, bounds.height - 2], [bounds.width / 2, bounds.height / 2]].every(([x, y]) =>
@@ -678,6 +696,8 @@ test.describe('Makelore module navigation without setup flow', () => {
           }))).toBe(true);
         } else {
           expect(heading!.y + heading!.height).toBeLessThanOrEqual(cards[0]!.top);
+          const inspirationBox = await inspiration.boundingBox();
+          expect(inspirationBox!.y + inspirationBox!.height).toBeLessThanOrEqual(cards[0]!.top);
         }
         expect(await page.evaluate(() => document.documentElement.scrollWidth - innerWidth)).toBeLessThanOrEqual(1);
         expect(await moduleCards.locator('.module-option-card-title, .module-option-card-description').evaluateAll(elements =>
diff --git a/tests/e2e/pi-coding-first-chat.spec.ts b/tests/e2e/pi-coding-first-chat.spec.ts
index 0e837d45..a2cbffdc 100644
--- a/tests/e2e/pi-coding-first-chat.spec.ts
+++ b/tests/e2e/pi-coding-first-chat.spec.ts
@@ -1317,20 +1317,24 @@ test('first PI Conversation is editable under 500 ms and submits before runtime
 
     await expect(page.getByTestId('coding-message-composer')).toBeInViewport({ ratio: 1 });
     expect(await page.getByTestId('coding-message-composer').evaluate(el => innerHeight - el.getBoundingClientRect().bottom)).toBeLessThan(40);
-    const welcomeCommunity = page.getByTestId('community-welcome-link');
-    await expect(welcomeCommunity).toBeVisible();
+    const welcomeMark = page.locator('.coding-start-mark');
+    await expect(welcomeMark).toBeVisible();
+    await expect(page.getByTestId('coding-start-heading').getByRole('heading', { level: 1 })).toBeVisible();
+    expect(await welcomeMark.evaluate(element => element.closest('button') === null)).toBe(true);
+    await expect(page.getByTestId('community-welcome-link')).toHaveCount(0);
+    await expect(page.getByTestId('sidebar').getByRole('button', { name: '作品广场', exact: true })).toHaveCount(0);
     await expect(page.getByTestId('community-invitation')).toHaveCount(0);
     expect(await page.getByTestId('coding-message-composer').evaluate(el => {
       const body = document.querySelector('.coding-chat-body')!.getBoundingClientRect();
       const input = el.getBoundingClientRect();
       return Math.abs(input.left + input.width / 2 - body.left - body.width / 2);
     })).toBeLessThan(2);
-    expect(await welcomeCommunity.evaluate(el => {
+    expect(await welcomeMark.evaluate(el => {
       const body = document.querySelector('.coding-chat-body')!.getBoundingClientRect();
       const welcome = el.getBoundingClientRect();
       return Math.abs(welcome.left + welcome.width / 2 - body.left - body.width / 2);
     })).toBeLessThan(2);
-    expect(await welcomeCommunity.evaluate(el => {
+    expect(await welcomeMark.evaluate(el => {
       const composer = document.querySelector('[data-testid="coding-message-composer"]')!;
       return composer.getBoundingClientRect().top - el.getBoundingClientRect().bottom;
     })).toBeGreaterThan(12);
@@ -1346,16 +1350,6 @@ test('first PI Conversation is editable under 500 ms and submits before runtime
       buffer: largePng,
     });
     await composer.fill('Build the first PI scene');
-    await electronApp.evaluate(({ shell }) => {
-      const scope = globalThis as typeof globalThis & { __communityOpened?: string[] };
-      scope.__communityOpened = [];
-      shell.openExternal = async url => { scope.__communityOpened!.push(url); };
-    });
-    await page.getByTestId('sidebar').getByRole('button', { name: '作品广场', exact: true }).click();
-    await welcomeCommunity.click();
-    await expect.poll(() => electronApp.evaluate(() => (
-      (globalThis as typeof globalThis & { __communityOpened?: string[] }).__communityOpened
-    ))).toEqual(['https://square.nianxx.cn/#explore', 'https://square.nianxx.cn/#explore']);
     await expect(composer).toHaveValue('Build the first PI scene');
     await expect(page.getByRole('img', { name: 'large.png', exact: true })).toBeVisible();
     await expect(page.getByRole('button', { name: '移除图片 large.png', exact: true })).toBeEnabled();
@@ -1365,7 +1359,7 @@ test('first PI Conversation is editable under 500 ms and submits before runtime
     await page.getByTestId('coding-message-composer').evaluate(
       (form: HTMLFormElement) => form.requestSubmit(),
     );
-    await expect(welcomeCommunity).toHaveCount(0);
+    await expect(welcomeMark).toHaveCount(0);
 
     await expect.poll(async () => {
       const state = await readState(electronApp);
diff --git a/tests/unit/community.test.tsx b/tests/unit/community.test.tsx
index 6b829f29..b9823609 100644
--- a/tests/unit/community.test.tsx
+++ b/tests/unit/community.test.tsx
@@ -12,17 +12,15 @@ afterEach(() => { cleanup(); vi.restoreAllMocks(); });
 
 it('only opens the public explore URL after a click, without fetching or embedding works', async () => {
   const fetch = vi.spyOn(globalThis, 'fetch');
-  render(<CodingStartHeading />);
-  expect(screen.getByRole('heading', { name: '今天，你想创造什么？' })).toBeInTheDocument();
-  expect(screen.getByText('一个游戏、一段故事，或是一个天马行空的想法。')).toBeInTheDocument();
+  render(<p>还是去「<CommunityLink variant="home" />」找找灵感？</p>);
   expect(screen.queryByTestId('community-invitation')).not.toBeInTheDocument();
   expect(invokeIpc).not.toHaveBeenCalled();
   expect(fetch).not.toHaveBeenCalled();
   expect(document.querySelector('iframe')).toBeNull();
   const button = screen.getByRole('button', { name: '作品广场' });
   expect(button).toHaveAttribute('type', 'button');
-  expect(button.querySelector('.coding-start-mark img')).not.toBeNull();
-  expect(button.querySelectorAll('.coding-start-mark > svg')).toHaveLength(2);
+  expect(button).toHaveTextContent('作品广场');
+  expect(button.querySelector('svg')).toBeNull();
   fireEvent.click(button);
   await waitFor(() => expect(invokeIpc).toHaveBeenCalledExactlyOnceWith('shell:openExternal', COMMUNITY_URL));
   fetch.mockRestore();
@@ -44,7 +42,7 @@ it('provides an accessible collapsed sidebar entry and a retry after opening fai
 it('keeps the welcome entry available for retry without submitting its surrounding form', async () => {
   const submit = vi.fn((event: FormEvent) => event.preventDefault());
   vi.mocked(invokeIpc).mockRejectedValueOnce(new Error('unavailable'));
-  render(<form onSubmit={submit}><CodingStartHeading /></form>);
+  render(<form onSubmit={submit}><CommunityLink variant="home" /></form>);
   const button = screen.getByRole('button', { name: '作品广场' });
   fireEvent.click(button);
   await screen.findByRole('alert');
@@ -56,3 +54,12 @@ it('keeps the welcome entry available for retry without submitting its surroundi
   expect(screen.queryByRole('alert')).not.toBeInTheDocument();
   expect(submit).not.toHaveBeenCalled();
 });
+
+
+it('keeps the Code welcome mark decorative after moving the gallery to home', () => {
+  render(<CodingStartHeading />);
+  expect(screen.getByRole('heading', { name: '今天，你想创造什么？' })).toBeInTheDocument();
+  expect(screen.getByRole('img', { name: '麦洛' })).toBeInTheDocument();
+  expect(screen.queryByRole('button', { name: '作品广场' })).not.toBeInTheDocument();
+  expect(document.querySelectorAll('.coding-start-mark > svg')).toHaveLength(2);
+});
diff --git a/tests/unit/module-navigation.test.tsx b/tests/unit/module-navigation.test.tsx
index 433ca5a4..becc4807 100644
--- a/tests/unit/module-navigation.test.tsx
+++ b/tests/unit/module-navigation.test.tsx
@@ -105,7 +105,11 @@ describe('AI module navigation', () => {
     expect(screen.getByTestId('ai-module-selection-page')).toBeInTheDocument();
     expect(screen.getByRole('heading', { name: '今天，想创作什么？' })).toBeInTheDocument();
     expect(screen.getByTestId('ai-module-options')).toHaveClass('module-selection-options');
-    expect(await screen.findByText('小明，欢迎回来！')).toBeInTheDocument();
+    expect(await screen.findByText('小明欢迎回来！')).toBeInTheDocument();
+    const gallery = screen.getByRole('button', { name: '作品广场', exact: true });
+    expect(screen.getAllByRole('button', { name: '作品广场', exact: true })).toHaveLength(1);
+    expect(gallery.textContent).toBe('作品广场');
+    expect(gallery.closest('p')).toHaveTextContent(/^还是去「作品广场」找找灵感？$/u);
     expect(screen.getByTestId('ai-module-option-programming')).toHaveClass('module-option-card');
     for (const moduleId of ['programming', 'painting', 'cloud_agents'] as const) {
       expect(screen.getByTestId(`ai-module-option-${moduleId}`).querySelector('.module-option-artwork')).toBeNull();
@@ -222,6 +226,7 @@ describe('AI module navigation', () => {
     );
 
     expect(screen.getByTestId('ai-module-selection-page')).toBeInTheDocument();
+    expect(screen.getByText('欢迎回来！', { exact: true })).toBeInTheDocument();
 
     fireEvent.click(screen.getByTestId('ai-module-option-programming'));
     expect(await screen.findByTestId('location-path')).toHaveTextContent('/login');
@@ -240,7 +245,7 @@ describe('AI module navigation', () => {
     expect(screen.getByTestId('sidebar-module-switcher-trigger')).toHaveTextContent('绘画 Canvas');
     expect(screen.getByTestId('sidebar-module-switcher-trigger')).toHaveAttribute('aria-label', '返回首页');
     expect(screen.getByTestId('sidebar-module-switcher-trigger')).toHaveClass('p-3');
-    expect(screen.getByTestId('sidebar-module-return-icon')).toHaveClass('lucide-arrow-left', '-translate-y-px');
+    expect(screen.getByTestId('sidebar-module-return-icon')).toHaveClass('lucide-house', '-translate-y-px');
     expect(screen.queryByTestId('sidebar-module-switcher-menu')).not.toBeInTheDocument();
 
     fireEvent.click(screen.getByTestId('sidebar-module-switcher-trigger'));
@@ -296,7 +301,7 @@ describe('AI module navigation', () => {
     fireEvent.click(screen.getByRole('button', { name: '保存个人资料' }));
 
     await waitFor(() => expect(screen.queryByRole('dialog', { name: '个人资料' })).not.toBeInTheDocument());
-    expect(screen.getByText('小红，欢迎回来！')).toBeInTheDocument();
+    expect(screen.getByText('小红欢迎回来！')).toBeInTheDocument();
   });
 
   it('shows Robot as the active module and returns to the chooser from the AI hardware route', async () => {

From b1eed1be5c64344bf53174a572b41237a64e1b01 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=B2=A8=E9=B1=BC=E8=BE=A3=E6=A4=92?=
 <chillishark@shayulajiaodeMacBook-Air.local>
Date: Wed, 14 Oct 2026 15:38:09 +0800
Subject: [PATCH 18/18] feat(canvas): collect generated images and videos in My
 Works drawer

---
 .../20261014-canvas-works-drawer-7b4e92c1.md  |  53 +++
 README.md                                     |   2 +
 design-qa.md                                  |  50 +++
 electron/api/routes/image-workspace.ts        |  12 +
 electron/image-workspace/module.ts            |   2 +
 .../image-workspace/works-square-workspace.ts | 138 ++++++-
 shared/image-workspace.ts                     |  16 +
 src/lib/image-workspace.ts                    |   8 +
 .../ImageCanvas/CanvasWorkspaceSplit.tsx      |  15 +-
 src/pages/ImageCanvas/DesignHistoryRail.tsx   |  25 +-
 src/pages/ImageCanvas/DesignMyWorksDrawer.css |  69 ++++
 src/pages/ImageCanvas/DesignMyWorksDrawer.tsx | 240 ++++++++++++
 src/pages/ImageCanvas/DesignPlanHistory.tsx   |   1 +
 src/pages/ImageCanvas/index.tsx               |  78 +++-
 src/stores/image-workspace.ts                 |  65 ++++
 tests/e2e/canvas-my-works-layout-fixture.ts   |  50 +++
 tests/e2e/canvas-my-works-layout-harness.mjs  |  91 +++++
 tests/e2e/canvas-my-works-layout.spec.ts      | 108 ++++++
 tests/unit/design-my-works-drawer.test.tsx    | 286 +++++++++++++++
 tests/unit/image-canvas-page.test.tsx         |  71 +++-
 tests/unit/image-workspace-route.test.ts      |  39 ++
 tests/unit/image-workspace-store.test.ts      | 156 +++++++-
 .../unit/works-square-generated-works.test.ts | 344 ++++++++++++++++++
 23 files changed, 1905 insertions(+), 14 deletions(-)
 create mode 100644 .project-docs/30-worklog/tasks/20261014-canvas-works-drawer-7b4e92c1.md
 create mode 100644 design-qa.md
 create mode 100644 src/pages/ImageCanvas/DesignMyWorksDrawer.css
 create mode 100644 src/pages/ImageCanvas/DesignMyWorksDrawer.tsx
 create mode 100644 tests/e2e/canvas-my-works-layout-fixture.ts
 create mode 100644 tests/e2e/canvas-my-works-layout-harness.mjs
 create mode 100644 tests/e2e/canvas-my-works-layout.spec.ts
 create mode 100644 tests/unit/design-my-works-drawer.test.tsx
 create mode 100644 tests/unit/works-square-generated-works.test.ts

diff --git a/.project-docs/30-worklog/tasks/20261014-canvas-works-drawer-7b4e92c1.md b/.project-docs/30-worklog/tasks/20261014-canvas-works-drawer-7b4e92c1.md
new file mode 100644
index 00000000..418c8fc7
--- /dev/null
+++ b/.project-docs/30-worklog/tasks/20261014-canvas-works-drawer-7b4e92c1.md
@@ -0,0 +1,53 @@
+# Task: Implement approved Canvas My Works drawer
+
+## Identity
+
+- Task ID: 20261014-canvas-works-drawer-7b4e92c1
+- Mode: Feature
+- Branch: codex/20261014-canvas-works-drawer-7b4e92c1-canvas-works-drawer
+- Worktree: /Users/chillishark/Makelore 麦洛/.codex-worktrees/makelore/20261014-canvas-works-drawer-7b4e92c1
+- Base commit: 436f7ba1eab500e41866f890f49816ff622ef6fe
+- Owner: codex
+- Status: Ready for Integration
+
+## Scope
+
+- Implement the approved Canvas My Works drawer based on the selected image concept. Aggregate generated image/video works across the user's Canvas projects; clear type labels/filter, preview/download, and return to source creation; coordinate open/close with the existing right-hand work pane.
+
+## Intent And Constraints
+
+- User explicitly approved implementation following the mock and clarified that the current right pane is a working area. Preserve its editing, split/focus, task/history, and generation-confirmation behavior. Temporary-app updates are coordinated separately; this worktree does not alter the trial.
+- Base is the current complete trial source `436f7ba1eab500e41866f890f49816ff622ef6fe`, verified from read-only runtime metadata. Main checkout and foreign docs remain untouched; own isolated feature worktree/branch identity verified.
+- Planning Gate passed: 81 readable peer records / 243 permitted sections. Canvas create recovery and existing Gallery migration are separate scopes; preserve their changes during any future integration. Do not update/restart/refresh the trial, merge main, push, deploy, or call paid models.
+- New collection is a Main-owned read-only projection of existing cloud V2 Workspace Tasks/Assets; no server schema, pricing/Quote, credential, or cross-account boundary changes. No fake product works or arbitrary storage paths.
+- Use approved calm light layout and existing project tokens/Lucide. Generic search suggestions that conflict with this visual target are not adopted. Generated mock is a visual target, not product artwork data.
+- Delegation: server agent owns shared/Main/Host collection contract/tests; root owns UI integration/state/navigation and final checks; UI agent will own drawer rendering and focused tests after data contract is fixed.
+
+## Outcome
+
+- Implemented Canvas header “我的作品” and right drawer using existing app tokens, Sheet, icon and asset pathways. Collections read completed generated image/video outputs across account Workspaces in read-only pages. Reference/uploads/intermediate and unsuccessful results are excluded by successful Task result association.
+- Added explicit image/video badges, all/image/video filtering, video play/duration, same-drawer preview, save-to-computer and return to exact source task. Collection loading, empty, unavailable pages, partial retry and truncated-history states remain distinct. Failed-page retries retain prior works for currently unavailable Workspaces while replacing successful authoritative reads, including empty results.
+- Preserved existing work pane, split ratio, focus, current plan and drafts on drawer open/close. Source navigation reads and validates first, then atomically changes Workspace and opens the matching task; failed/missing/stale/changed-account/read-during-draft scenarios preserve the original Workspace and event connection. Same-project source return does not replace local drafts. No quote/confirmation/generation mutations are introduced.
+- Main holds collection account binding, one pinned credential per page and epoch checks; no credential or full form/conversation data enters the collection DTO. Whole-page credential/list/detail/body reads share a deadline; bounded detail concurrency and explicit pagination keep the scan finite. Closing/unmounting/account changes abort or ignore collection responses; preview video pauses on departure.
+- Updated README and project-root `design-qa.md`; selected mock vs rendered exact-size full/focused montage reviewed, desktop density P2 fixed, QA final result passed. Public fixture-only browser preview runs at `http://127.0.0.1:4179/` for isolated review.
+- Verified trusted human authorization in “推代码” conversation `01a12eba-e98b-76a3-8fd5-206f2820d623` for project-task coordination. Integration task `20261014-all-thread-trial-6d72e4f1` owns combined trial refresh/main merge/push; this task will hand over one final commit and does not perform those operations. Primary/foreign files, trial profiles and runtime records remain untouched.
+
+## Verification
+
+- Scoped unit suite: **149 passed across 8 files**. First run: works-square-generated-works, image-workspace-route, works-square-design-workspace, design-my-works-drawer, image-canvas-page, image-workspace-api — 92 total. Second run: image-workspace-store (48), canvas-workspace-layout (9), 57 total. Store tests exercise actual atomic source selection failures/404/invalid target/drafts/account changes/reset/new selection/success/same project.
+- Final drawer CSS change: focused component 14/14 and E2E 3/3 repeated; three screenshots per viewport **1600×1000, 1440×960, 390×844**. List/filter/image/video detail/Escape/focus return/background drafts and safe source-task navigation passed; no page errors or unexpected external requests. Responsive geometry and all six sample-card captions measured before footer.
+- TypeScript `tsc --noEmit`: PASS. ESLint across all changed/new TypeScript and E2E harness files: PASS. Source review: PASS after two P2 fixes (partial retry crossed failures; failed source switch losing original Workspace).
+- CUA opened the isolated browser and inspected actual drawer list, filter and video detail. Exact-size automated screenshots compared with the source in one full montage and one readable focused montage; final visual QA PASS. Media fixture uses repository posters and DOM stub, so this is not a real cloud playback or download smoke.
+- Production Vite Renderer/Main/Preload/utility build PASS; existing Browserslist-data/chunk-size warnings only. Final CSS build completed successfully for all four targets; task-aware drift check and `git diff --check` PASS. No packaged app, real cloud generation or user trial interaction performed.
+
+## Follow-ups
+
+- Current cloud V2 Workspace reads expose recent assets/tasks only (100 assets / 50 tasks per Workspace). Drawer conservatively warns at either cap or missing task result. Complete older history requires server pagination or an account-scoped generated-works route; do not describe the current collection as a complete archive.
+- No immutable per-work title is available in the existing API; actual collection uses current Workspace title and source caption. Fixture artwork/names are QA-only and never product fallbacks.
+- Coordinated trial should confirm real account media playback/save behavior using the existing Main asset flow; local media stub cannot supply that evidence.
+
+## Promotion Candidates
+
+- Target `.project-docs/20-architecture/` Canvas/client documents and canonical current state: record account-scoped read-only collection projection (`GET /api/works/image-workspace/generated-works?offset=N`), 12 Workspace page size / lookahead / bounded detail reads, account/deadline guard, partial/truncated semantics and atomic source navigation. Evidence: source + 149 unit / 3 viewport tests. Future impact: cloud pagination may replace scan without changing user journey. Semantic conflict: none with generation/Quote or Gallery; existing right work pane is retained. Human confirmation: not required; implementation explicitly approved.
+- Target accepted Canvas experience/current specification: “我的作品” consolidates generated image/video outputs with type filters, one-drawer preview/save and exact creation return; preserve work pane and local drafts. Evidence: approved mock/current user instruction, exact-size comparison in `design-qa.md`. Future impact: clarify collection vs current/history work pane and prevent navigation regressions. Semantic conflict: earlier single-project history-only presentation; add the collection while preserving its work pane. Human confirmation: already supplied for this task.
+- Target canonical follow-up aggregation: cloud ability to read complete older completed outputs is still needed. Evidence: source V2 history caps and explicit `historyTruncated` cases. Future impact: complete all-history promise requires upstream capability, not hiding the existing cap in the client. Human confirmation: needed before assigning/deploying the upstream change, not for this client implementation.
diff --git a/README.md b/README.md
index 02b1e42a..0342bea2 100644
--- a/README.md
+++ b/README.md
@@ -25,6 +25,8 @@ Makelore 是一个面向软件、视觉创作、智能机器人与个人云智
   Agents 侧栏的「渠道」按每个微信一张卡展示备注、当前智能体与使用状态；一个微信同时只绑定一个智能体，多个微信可以使用同一智能体。绑定有效且服务正常时始终开启回复，不提供暂停或恢复开关；更换智能体保留登录与历史，完成重新登录后也开启回复。旧的关闭记录在页面可见时，重新核对登录、在线服务、可用目标、同步状态及新旧渠道操作恢复记录后串行开启；服务离线、退出待确认、目标不可用和结果未知时不自动写入。常用操作是“更换智能体”；“更多操作”内可以解除微信绑定，停止任务、清除目标并退出微信登录，历史保留，再使用需扫码。确认解绑后的卡片可选择“删除微信卡片”，只从这台设备的当前账号列表移除，刷新和重开后仍保留删除结果；其他设备及云端账号和聊天历史不受影响，同一微信重新绑定后再次显示。本机偏好按账号与租户隔离，删除前再次读取云端状态并检查原操作，保存失败时保留卡片并显示原因。添加流程为选择已开始使用的智能体、扫码、自动完成绑定；扫码确认、目标正确、启用成功且最终状态回读可用后才显示完成。微信服务离线时，卡片仅保留右上角“微信服务离线”状态，不显示重复的离线长段说明；绑定或重新连接失败的窗口仍说明原因，不把扫码成功当作回复可用。未知或未同步状态显示“状态待确认”。无可用智能体时说明创建和“开始使用”的前提，加载失败不冒充空态，已有微信仍可解绑。Main 持有凭据与原操作恢复；解除需要配套 Yuxi 用户级 `/channel-accounts/{id}/unbind`，旧后端不会通过改按钮文案或组合未确认操作假装完成。变更以最新读取状态为准，未完成操作保留原身份供显式恢复；失败在当前窗口可见，结果未知不自动重放。微信退出仍在处理中时，禁止新的连接和绑定变更，保留刷新与原操作恢复。旧请求无法安全恢复、账号关系不一致或目标不可用时提示先核对；“不再提醒”只移除本机提醒，不取消服务端仍在处理的操作。最新 Yuxi 的退出保护条件和持久恢复由服务端负责，发布需配套 Core/Adapter 与 Yuxi business=13、knowledge=2 数据库版本。渠道页不展示微信聊天或活动，既有历史、费用、内容隔离与应用 API 保持原边界。实际微信身份及重复扫码识别仍由云端负责，不从备注推测。
 
 - `Makelore Canvas｜AI 绘画`：每个设计项目（Workspace）维护一份从创建起就存在的 Living Form。左侧工作栏与 Code 共用间距、图标徽章、项目行、操作菜单和底部广场/账户样式，仅工作栏底色采用淡紫色（`#f5f2fa`）；顶部返回箭头与 Code 对齐，分组标题为“我的项目”，桌面项目列表仅显示名称，隐藏名称下的设计版本与更新时间；新建、切换和项目操作菜单集中管理 Workspace。工作区统一项目标题、设计版本与制作状态，创作对话和作品区支持拖动分栏、键盘调宽及单栏展开；对话以 Markdown 呈现，底部输入器保留草稿、发送状态与 Enter / Shift+Enter 快捷键。右侧通过“当前作品 / 历史作品”切换，在大图或视频预览旁编辑唯一制作方案、确认费用和制作；历史作品可回到工作区查看，切换面板保留未保存的制作参数。紧凑窗口以“创作对话 / 作品与方案”切换面板，通过项目抽屉管理 Workspace。图片支持适应窗口、原始尺寸及 Esc 关闭，视频支持预览和保存到电脑。参考图从本地上传后以 `@图片N` 绑定，具体用法只写在创作提示词中。
+
+  Canvas 顶部的“我的作品”打开右侧抽屉，按项目分批读取当前账号已完成的生成结果，提供“全部 / 图片 / 视频”筛选、明确的媒体标签、视频播放标记和时长；点开后在同一抽屉预览、保存到电脑或回到对应项目的制作记录。打开和关闭保留后台工作区的分栏、当前方案和草稿；有未发送或未保存内容时，先处理当前创作再切换项目。集合只纳入成功任务明确关联的生成资产，参考图和失败过程文件不会成为作品；账号变化清除抽屉结果。现有云端单项目详情只提供近期最多 100 个资产及 50 个任务，触及边界或读取不全时会提示较早作品暂时无法全部读取；完整历史仍需要配套云端分页能力，不能把近期集合表述为完整存档。
 - `Makelore Robot｜AI 机器`：管理机器人智能体、设备激活绑定、智能体配置与设备分配；机器人工作台的智能体位于 Robot 全局侧栏，选中后在内容区先查看绑定设备、再查看基础设置，当前智能体通过 URL 参数保持可分享选择；绑定设备时默认先选择“引导配网”或“已有激活码”。在 Windows 与 macOS 的引导路径中，Makelore 可在弹窗内扫描并连接附近开放的 `Xiaozhi-*` 配网热点，失败时仍可通过系统 Wi-Fi 手动连接；后续继续复用机器人现有热点配网页面，不修改固件，也不由 Makelore 接收 Wi-Fi 密码。
 
 应用启动默认进入 AI 模块入口选择页。入口页可在未登录状态浏览；未登录用户点击已开通模块时进入客户端原生登录页，可使用账号密码或手机号短信验证码登录。密码登录可选“记住密码”：正式安装包仅由 Electron Main 使用系统受保护凭据存储加密保存和回填账号密码，不写入 Renderer 持久状态，未打包开发版或系统安全存储不可用时禁用该选项。登录请求由 Renderer 经 Host API 交给 Electron Main，再由 Main 调用 Works Square；成功后回到入口选择页。已登录时，Electron Main 会从 Works Square `/api/auth/me` 读取当前账号，只向 Renderer 投影用户名、账号/租户/部门标识、权限名列表与四个模块布尔开关，不透传上游资料或凭据。工作区门禁同时要求有效 Token 和完整用户身份；旧状态缺失身份时会先尝试从 Main 恢复，仍无法确认则清除残留会话并返回登录页。被管理员关闭的模块会在入口页置灰且无法点击，直接访问其工作区路径也会返回入口页。旧服务端未返回策略或缺少单项字段时默认开放；这个客户端门禁不替代服务端 API 授权。
diff --git a/design-qa.md b/design-qa.md
new file mode 100644
index 00000000..d933af2c
--- /dev/null
+++ b/design-qa.md
@@ -0,0 +1,50 @@
+# Canvas My Works design QA
+
+- Task: 20261014-canvas-works-drawer-7b4e92c1
+- Source visual truth: `/Users/chillishark/.codex/generated_images/01a12e8d-643e-7453-99d8-b0187649dafc/exec-ea04cbe4-075f-4b51-864c-ca517d086861.png`. Approved by the human; preserve the existing right work pane and add clear image/video distinctions.
+- Source pixels: 1586 × 992, normalized to 1600 × 1000 solely for comparison. No product image assets generated from this mock.
+- Implementation: local isolated QA browser at `http://127.0.0.1:4179/`, actual Canvas/store/drawer components, repository image fixtures and non-playing video DOM stubs. No cloud, upload, mutation, paid generation or user account used.
+- Viewport: 1600 × 1000 CSS pixels, deviceScaleFactor 1; responsive checks 1440 × 960 and 390 × 844. Light theme, drawer open, all filter, six sample completed works.
+
+## Findings
+
+- [P2, resolved] Initial desktop card density clips the third row captions at 1600 × 1000, where the selected mock shows all six captions above its footer.
+  - Evidence: combined comparison `/tmp/makelore-canvas-works-drawer-7b4e92c1-comparison.png`; initial screenshot `test-results/canvas-my-works-layout-Can-45a35-rns-to-its-source-at-1600px/canvas-my-works-1600-list.png`.
+  - Fixed: thumbnail ratio is now 16:9; desktop header padding is 18 px / 28 px / 12 px and filters bottom padding is 18 px. All six complete sample cards are above the footer at the reference viewport; 44 px targets and card font sizes remain intact.
+- Previously found and fixed: 390 px Sheet utility specificity constrained the drawer to 75% width and overflowed its filters. Scoped drawer/title rules now supply a full-width narrow layout. Updated 390 screenshot verified and E2E measurements pass.
+
+## Fidelity Surfaces
+
+- Typography: project sans/fallback retained; 27 px drawer title, 14 px filters, 13 px card titles and 11 px origin captions establish the same hierarchy. Titles truncate in the grid and wrap in detail. No imported font or changes to application typography.
+- Spacing/layout: right overlay with rounded desktop left corners and two-column cards; original editing surface remains mounted and dimmed. Desktop density P2 is resolved; narrow layout does not overflow. Six sample cards and all captions fit above the footer at all three tested sizes.
+- Colors/tokens: foreground, background, borders, semantic errors and primary action use existing app tokens; subdued lavender collection accent follows the selected mock.
+- Images: actual output assets are rendered with contain; image/video labels, play mark and real duration are explicit. Mock dog/fish/space art and named outputs represent user content, not static product assets; QA repository art is intentionally different. Icons use the existing Lucide library.
+- Copy: collection/filter/preview/save/return controls follow the accepted behavior. Cloud read limits are stated; no claim of a complete count. Background product chrome stays with the existing app rather than replacing it with the mock.
+
+## Comparison History
+
+1. CUA inspected actual browser list, video filter, single-drawer preview, keyboard focus and background work pane. Exact-dimension E2E captures then compared with the source in one 3200 × 1000 montage. Header/filter/first-row focused comparison is `/tmp/makelore-canvas-works-drawer-7b4e92c1-focused-comparison.png`. Initial desktop density P2 found.
+2. Revised source and implementation placed together in `/tmp/makelore-canvas-works-drawer-7b4e92c1-final-comparison.png` (3200 × 1000) and `/tmp/makelore-canvas-works-drawer-7b4e92c1-final-focused-comparison.png` (1402 × 500). Both compared visually after the spacing/ratio fix; the updated 1600 capture shows all six complete cards and captions. Narrow 390 capture also inspected. No actionable P0/P1/P2 differences remain. The underlying app frame uses the existing work pane and public local fixtures, rather than the speculative background/user artwork in the mock.
+
+## Implementation Checklist
+
+- [x] Real read-only collection, type filtering and same-drawer previews.
+- [x] Save through the existing Main asset action; return to validated source/task.
+- [x] Partial retry preserves prior successes; failures preserve original workspace.
+- [x] Drawer closure/account changes ignore stale collection responses.
+- [x] Keyboard Escape/focus return and editing draft/split retention.
+- [x] Desktop density fix, three-size capture and repeat combined visual comparison.
+
+## Verification
+
+- E2E 3/3 passed at 1600 × 1000, 1440 × 960 and 390 × 844 using real Canvas/store components with explicit local fixtures. Measurements check two columns, no horizontal overflow and six complete cards above the footer. All page errors and unexpected external requests were empty.
+- Interaction coverage: image/video filters; media labels and duration; one drawer for list/image/video; Escape and trigger focus; background split/focus/panel/draft retention; drafts block cross-project navigation; safe source switch exposes and opens the matching task record.
+- Screenshots: `test-results/canvas-my-works-layout-Can-45a35-rns-to-its-source-at-1600px/canvas-my-works-1600-{list,video-preview,source}.png`; equivalent 1440 and 390 screenshots in their corresponding test result folders.
+- Drawer component tests 14/14 passed, including crossover partial retry, authoritative empty, close/unmount stale result protection, same-offset retry and media lifecycle. Independent source review resolved both P2 findings and reports PASS.
+
+## Follow-up Polish / Limits
+
+- Actual cloud video playback/download cannot be demonstrated by the isolated media stub. Component coverage checks controls/no-autoplay/pause and existing asset integration; real account verification belongs to the coordinated trial.
+- Current cloud V2 reads cap each project at recent 100 assets / 50 tasks; complete older history needs a cloud pagination capability.
+
+final result: passed
diff --git a/electron/api/routes/image-workspace.ts b/electron/api/routes/image-workspace.ts
index 63de15f9..246664a2 100644
--- a/electron/api/routes/image-workspace.ts
+++ b/electron/api/routes/image-workspace.ts
@@ -476,6 +476,18 @@ export async function handleImageWorkspaceRoutes(
       return true;
     }
 
+    if (segments.length === 1 && segments[0] === 'generated-works' && req.method === 'GET') {
+      if (!ctx.imageWorkspace.listGeneratedWorks) {
+        throw new DesignWorkspaceModuleError(501, 'DESIGN_GENERATED_WORKS_UNAVAILABLE', '作品列表暂不可用');
+      }
+      const rawOffset = url.searchParams.get('offset') ?? '0';
+      if (!/^\d+$/.test(rawOffset) || !Number.isSafeInteger(Number(rawOffset))) {
+        throw new DesignWorkspaceModuleError(400, 'IMAGE_WORKSPACE_INVALID_OFFSET', '作品分页位置无效');
+      }
+      sendData(res, await ctx.imageWorkspace.listGeneratedWorks(Number(rawOffset)));
+      return true;
+    }
+
     if (segments.length === 1 && segments[0] === 'workspaces' && req.method === 'POST') {
       const body = await parseJsonBody<Record<string, unknown>>(req);
       const input: DesignCreateWorkspaceInput = {
diff --git a/electron/image-workspace/module.ts b/electron/image-workspace/module.ts
index 015aab12..c5d199fc 100644
--- a/electron/image-workspace/module.ts
+++ b/electron/image-workspace/module.ts
@@ -6,6 +6,7 @@ import type {
   DesignCommandResult,
   DesignCreateWorkspaceInput,
   DesignDeleteWorkspaceResult,
+  DesignGeneratedWorksPage,
   DesignRenameWorkspaceInput,
   DesignWorkspace,
   DesignWorkspaceBootstrap,
@@ -44,6 +45,7 @@ export interface DesignWorkspaceModule {
   deleteWorkspace(workspaceId: string): Promise<DesignDeleteWorkspaceResult>;
   renameWorkspace(input: DesignRenameWorkspaceInput): Promise<DesignWorkspace>;
   getWorkspace(workspaceId: string): Promise<DesignWorkspace>;
+  listGeneratedWorks?(offset?: number): Promise<DesignGeneratedWorksPage>;
   submitCommand(input: DesignCommandInput): Promise<DesignCommandResult>;
   uploadAsset(input: DesignAssetUploadInput): Promise<DesignAsset>;
   openWorkspaceEvents(
diff --git a/electron/image-workspace/works-square-workspace.ts b/electron/image-workspace/works-square-workspace.ts
index 79ada84e..e88e2ab7 100644
--- a/electron/image-workspace/works-square-workspace.ts
+++ b/electron/image-workspace/works-square-workspace.ts
@@ -20,6 +20,8 @@ import {
   type DesignGenerationQuote,
   type DesignGenerationOptions,
   type DesignGenerationTask,
+  type DesignGeneratedWork,
+  type DesignGeneratedWorksPage,
   type DesignInteractionOutcome,
   type DesignMedium,
   type DesignQuoteBlockedEvent,
@@ -38,7 +40,11 @@ import {
   type DesignWorkspaceUpdatedEvent,
 } from '../../shared/image-workspace';
 import { WORKS_SQUARE_CONFIG } from '../api/works-config';
-import { getValidWorksSquareAccessToken } from '../services/works-square-session';
+import {
+  getValidWorksSquareAccessToken,
+  getWorksSquareAccountBinding,
+  isCurrentWorksSquareAccountBinding,
+} from '../services/works-square-session';
 import {
   fetchWithDeadline,
   proxyAwareFetch,
@@ -97,6 +103,10 @@ const RUN_MAX_POLL_MS = 4_000;
 const WEBSOCKET_OPEN_TIMEOUT_MS = 10_000;
 const WEBSOCKET_PING_INTERVAL_MS = 20_000;
 const WEBSOCKET_OPEN = 1;
+const GENERATED_WORKS_WORKSPACE_PAGE_SIZE = 12;
+const GENERATED_WORKS_READ_CONCURRENCY = 3;
+const WORKSPACE_ASSET_HISTORY_LIMIT = 100;
+const WORKSPACE_TASK_HISTORY_LIMIT = 50;
 const PUBLIC_ASSISTANT_PROGRESS_MESSAGES: Record<DesignAssistantProgressEvent['stage'], string> = {
   understanding: '正在听懂你刚补充的内容…',
   reviewing_context: '正在把它和前面的设计想法放在一起看…',
@@ -886,6 +896,119 @@ export class WorksSquareDesignWorkspace implements DesignWorkspaceModule {
     ));
   }
 
+  async listGeneratedWorks(offset = 0): Promise<DesignGeneratedWorksPage> {
+    if (!Number.isSafeInteger(offset) || offset < 0
+      || offset > Number.MAX_SAFE_INTEGER - GENERATED_WORKS_WORKSPACE_PAGE_SIZE) {
+      throw new DesignWorkspaceModuleError(400, 'IMAGE_WORKSPACE_INVALID_OFFSET', '作品分页位置无效');
+    }
+    try {
+      return await runWithDeadline(
+        (signal) => this.scanGeneratedWorks(offset, signal),
+        this.requestTimeoutMs,
+      );
+    } catch (error) {
+      if (error instanceof RequestDeadlineExceededError) throw designRequestTimeoutError();
+      throw error;
+    }
+  }
+
+  private async scanGeneratedWorks(
+    offset: number,
+    signal: AbortSignal,
+  ): Promise<DesignGeneratedWorksPage> {
+    signal.throwIfAborted();
+    const account = getWorksSquareAccountBinding();
+    if (!account) {
+      throw new DesignWorkspaceModuleError(401, 'AUTH_REQUIRED', '请先登录后再查看作品');
+    }
+    const requireCurrentAccount = () => {
+      signal.throwIfAborted();
+      if (!isCurrentWorksSquareAccountBinding(account)) {
+        throw new DesignWorkspaceModuleError(409, 'DESIGN_ACCOUNT_CHANGED', '登录账号已改变，请重新打开作品');
+      }
+    };
+    const token = await getValidWorksSquareAccessToken({
+      fetchImpl: this.fetchImpl,
+      requestTimeoutMs: this.requestTimeoutMs,
+    });
+    requireCurrentAccount();
+    if (!token) {
+      throw new DesignWorkspaceModuleError(401, 'AUTH_REQUIRED', '请先登录后再查看作品');
+    }
+    // Pin one account's credential for this scan; never cache or combine account pages in Main.
+    const summaries = arrayValue(await this.requestJson<unknown>(
+      `/api/design/workspaces?limit=${GENERATED_WORKS_WORKSPACE_PAGE_SIZE + 1}&offset=${offset}`,
+      { signal },
+      token,
+    ), 'Workspaces').slice(0, GENERATED_WORKS_WORKSPACE_PAGE_SIZE + 1).map(mapWorkspaceSummary);
+    requireCurrentAccount();
+    const page = summaries.slice(0, GENERATED_WORKS_WORKSPACE_PAGE_SIZE);
+    const works: DesignGeneratedWork[] = [];
+    const unavailableWorkspaceIds = new Set<string>();
+    let historyTruncated = false;
+    let nextIndex = 0;
+    const readNext = async () => {
+      while (nextIndex < page.length) {
+        requireCurrentAccount();
+        const summary = page[nextIndex++];
+        try {
+          const workspace = mapWorkspace(await this.requestJson<unknown>(
+            `/api/design/workspaces/${encodeURIComponent(summary.workspaceId)}`,
+            { signal },
+            token,
+          ));
+          requireCurrentAccount();
+          if (workspace.workspace.workspaceId !== summary.workspaceId) {
+            throw new DesignWorkspaceModuleError(502, 'DESIGN_WORKSPACE_RESPONSE_INVALID', '作品项目不匹配');
+          }
+          historyTruncated ||= workspace.assets.length >= WORKSPACE_ASSET_HISTORY_LIMIT
+            || workspace.tasks.length >= WORKSPACE_TASK_HISTORY_LIMIT;
+          const assets = new Map(workspace.assets.map((asset) => [asset.assetId, asset]));
+          const includedAssetIds = new Set<string>();
+          for (const task of workspace.tasks) {
+            if (task.status !== 'succeeded') continue;
+            for (const assetId of task.resultAssetIds) {
+              const asset = assets.get(assetId);
+              if (!asset) historyTruncated = true;
+              if (!asset || asset.role !== 'generated' || asset.generationTaskId !== task.taskId
+                || includedAssetIds.has(assetId)) continue;
+              includedAssetIds.add(assetId);
+              works.push({
+                asset,
+                workspaceTitle: workspace.workspace.title,
+                taskId: task.taskId,
+                title: workspace.workspace.title,
+              });
+            }
+          }
+        } catch (error) {
+          requireCurrentAccount();
+          if (error instanceof DesignWorkspaceModuleError
+            && (error.status === 401 || error.status === 403)) throw error;
+          unavailableWorkspaceIds.add(summary.workspaceId);
+        }
+      }
+    };
+    await Promise.all(Array.from(
+      { length: Math.min(GENERATED_WORKS_READ_CONCURRENCY, page.length) },
+      readNext,
+    ));
+    requireCurrentAccount();
+    works.sort((left, right) => (Date.parse(right.asset.createdAt) || 0)
+      - (Date.parse(left.asset.createdAt) || 0)
+      || left.asset.workspaceId.localeCompare(right.asset.workspaceId)
+      || left.asset.assetId.localeCompare(right.asset.assetId));
+    return {
+      works,
+      nextOffset: summaries.length > GENERATED_WORKS_WORKSPACE_PAGE_SIZE
+        ? offset + GENERATED_WORKS_WORKSPACE_PAGE_SIZE : null,
+      unavailableWorkspaceIds: page
+        .filter((summary) => unavailableWorkspaceIds.has(summary.workspaceId))
+        .map((summary) => summary.workspaceId),
+      historyTruncated,
+    };
+  }
+
   async submitCommand(input: DesignCommandInput): Promise<DesignCommandResult> {
     let command: ServerAgentCommand;
     try {
@@ -1069,10 +1192,14 @@ export class WorksSquareDesignWorkspace implements DesignWorkspaceModule {
     closers.forEach((close) => close());
   }
 
-  private async requestJson<T>(path: string, init: RequestInit = {}): Promise<T> {
+  private async requestJson<T>(
+    path: string,
+    init: RequestInit = {},
+    pinnedAccessToken?: string,
+  ): Promise<T> {
     try {
       return await runWithDeadline(async (signal) => {
-        const response = await this.authorizedFetch(path, {
+        const requestInit: RequestInit = {
           ...init,
           signal,
           headers: {
@@ -1082,7 +1209,10 @@ export class WorksSquareDesignWorkspace implements DesignWorkspaceModule {
               : {}),
             ...(init.headers ?? {}),
           },
-        });
+        };
+        const response = pinnedAccessToken
+          ? await this.fetchWithToken(path, pinnedAccessToken, requestInit)
+          : await this.authorizedFetch(path, requestInit);
         const payload = await readPayload(response);
         if (!response.ok) {
           const detail = asErrorDetail(payload);
diff --git a/shared/image-workspace.ts b/shared/image-workspace.ts
index da06ac12..0e046708 100644
--- a/shared/image-workspace.ts
+++ b/shared/image-workspace.ts
@@ -276,6 +276,22 @@ export type DesignAsset = {
   contentPath: string;
 };
 
+export type DesignGeneratedWork = {
+  asset: DesignAsset;
+  workspaceTitle: string;
+  taskId: string;
+  title: string;
+};
+
+/** One page scans Workspace summaries; nextOffset is a Workspace offset. */
+export type DesignGeneratedWorksPage = {
+  works: DesignGeneratedWork[];
+  nextOffset: number | null;
+  unavailableWorkspaceIds: string[];
+  /** The upstream detail API limits each Workspace's assets and task history. */
+  historyTruncated: boolean;
+};
+
 export type DesignTaskProgress = {
   stage:
     | 'queued'
diff --git a/src/lib/image-workspace.ts b/src/lib/image-workspace.ts
index 6d122f84..69d60725 100644
--- a/src/lib/image-workspace.ts
+++ b/src/lib/image-workspace.ts
@@ -16,6 +16,7 @@ import {
   type DesignCommandInput,
   type DesignCommandResult,
   type DesignDeleteWorkspaceResult,
+  type DesignGeneratedWorksPage,
   type DesignWorkspace,
   type DesignWorkspaceBootstrap,
 } from '../../shared/image-workspace';
@@ -109,6 +110,13 @@ export function fetchImageWorkspace(): Promise<DesignWorkspaceBootstrap> {
   return requestData(IMAGE_WORKSPACE_API_PATH);
 }
 
+export function fetchImageGeneratedWorks(
+  offset = 0,
+  signal?: AbortSignal,
+): Promise<DesignGeneratedWorksPage> {
+  return requestData(`${IMAGE_WORKSPACE_API_PATH}/generated-works?offset=${offset}`, { signal });
+}
+
 export function createImageWorkspaceProject(
   title: string,
   clientWorkspaceId = createClientId('workspace'),
diff --git a/src/pages/ImageCanvas/CanvasWorkspaceSplit.tsx b/src/pages/ImageCanvas/CanvasWorkspaceSplit.tsx
index 51e6d00c..bf208688 100644
--- a/src/pages/ImageCanvas/CanvasWorkspaceSplit.tsx
+++ b/src/pages/ImageCanvas/CanvasWorkspaceSplit.tsx
@@ -6,9 +6,10 @@ import './canvas-workspace.css';
 const preferenceKey = 'makelore.canvas.conversation-ratio';
 const defaultRatio = 42;
 
-export function CanvasWorkspaceSplit({ conversation, works }: {
+export function CanvasWorkspaceSplit({ conversation, works, workFocusRequest }: {
   conversation: ReactNode;
   works: ReactNode;
+  workFocusRequest?: number;
 }) {
   const root = useRef<HTMLDivElement>(null);
   const [ratio, setRatio] = useState(() => {
@@ -18,7 +19,17 @@ export function CanvasWorkspaceSplit({ conversation, works }: {
     } catch { return defaultRatio; }
   });
   const [focus, setFocus] = useState<'conversation' | 'works' | null>(null);
-  const [compactPanel, setCompactPanel] = useState<'conversation' | 'works'>('conversation');
+  const [compactPanel, setCompactPanel] = useState<'conversation' | 'works'>(
+    workFocusRequest === undefined ? 'conversation' : 'works',
+  );
+  const [appliedWorkFocus, setAppliedWorkFocus] = useState(workFocusRequest);
+  if (workFocusRequest !== appliedWorkFocus) {
+    setAppliedWorkFocus(workFocusRequest);
+    if (workFocusRequest !== undefined) {
+      setCompactPanel('works');
+      setFocus(null);
+    }
+  }
   useEffect(() => {
     const node = root.current;
     if (!node) return;
diff --git a/src/pages/ImageCanvas/DesignHistoryRail.tsx b/src/pages/ImageCanvas/DesignHistoryRail.tsx
index e7cf9386..ee365de4 100644
--- a/src/pages/ImageCanvas/DesignHistoryRail.tsx
+++ b/src/pages/ImageCanvas/DesignHistoryRail.tsx
@@ -9,13 +9,32 @@ import { DesignPlanHistory } from './DesignPlanHistory';
 import { hasActiveCreationPlan } from './plan-lifecycle';
 import { youthTaskIssueMessage } from './youth-issue-copy';
 
-export function DesignHistoryRail({ workspace, creation }: {
+export type DesignWorkFocus = { assetId: string; taskId: string; requestId: number };
+
+export function DesignHistoryRail({ workspace, creation, focusedWork }: {
   workspace: DesignWorkspace | null;
   creation?: ReactNode;
+  focusedWork?: DesignWorkFocus | null;
 }) {
-  const [view, setView] = useState<'current' | 'history'>('current');
-  const [selectedAssetId, setSelectedAssetId] = useState<string | null>(null);
+  const [view, setView] = useState<'current' | 'history'>(focusedWork ? 'history' : 'current');
+  const [selectedAssetId, setSelectedAssetId] = useState<string | null>(focusedWork?.assetId ?? null);
+  const [appliedWorkFocus, setAppliedWorkFocus] = useState(focusedWork?.requestId);
   const root = useRef<HTMLDivElement>(null);
+  if (focusedWork?.requestId !== appliedWorkFocus) {
+    setAppliedWorkFocus(focusedWork?.requestId);
+    if (focusedWork) {
+      setSelectedAssetId(focusedWork.assetId);
+      setView('history');
+    }
+  }
+  useEffect(() => {
+    if (view !== 'history' || !focusedWork) return;
+    const record = [...(root.current?.querySelectorAll<HTMLDetailsElement>('details[data-task-id]') ?? [])]
+      .find((element) => element.dataset.taskId === focusedWork.taskId);
+    if (!record) return;
+    record.open = true;
+    record.scrollIntoView?.({ block: 'nearest', behavior: 'auto' });
+  }, [focusedWork, view]);
   useEffect(() => {
     root.current?.querySelectorAll<HTMLVideoElement>('video').forEach((video) => {
       if (!video.paused && video.offsetParent === null) video.pause();
diff --git a/src/pages/ImageCanvas/DesignMyWorksDrawer.css b/src/pages/ImageCanvas/DesignMyWorksDrawer.css
new file mode 100644
index 00000000..a5f9d6a9
--- /dev/null
+++ b/src/pages/ImageCanvas/DesignMyWorksDrawer.css
@@ -0,0 +1,69 @@
+.my-works-drawer[data-testid="design-my-works-drawer"] { display: flex; flex-direction: column; gap: 0; width: min(45vw, 760px); min-width: 490px; max-width: none; height: 100dvh; padding: 0; overflow: hidden; border-radius: 18px 0 0 18px; background: hsl(var(--background)); }
+.my-works-drawer button { cursor: pointer; }
+.my-works-drawer button:disabled { cursor: default; }
+.my-works-drawer button:focus-visible { outline: 2px solid hsl(var(--ring)); outline-offset: 3px; }
+.my-works-header { display: flex; flex-shrink: 0; align-items: center; gap: 14px; padding: 18px 28px 12px; }
+.my-works-heading-icon { display: grid; place-items: center; width: 56px; height: 56px; flex-shrink: 0; border-radius: 16px; background: #f0e9f9; color: #7855aa; }
+.my-works-heading-icon svg { width: 27px; height: 27px; }
+.my-works-drawer .my-works-title { font-size: 27px; line-height: 1.3; letter-spacing: -.025em; }
+.my-works-drawer .my-works-description { margin-top: 5px; font-size: 13px; line-height: 1.6; }
+.my-works-close { width: 44px; height: 44px; flex-shrink: 0; align-self: flex-start; }
+.my-works-filters { display: flex; flex-shrink: 0; gap: 10px; padding: 0 28px 18px; }
+.my-works-filters button { min-width: 80px; min-height: 44px; padding: 8px 20px; border: 1px solid hsl(var(--border)); border-radius: 20px; color: hsl(var(--muted-foreground)); background: hsl(var(--background)); font-size: 14px; font-weight: 500; transition: background-color 150ms, border-color 150ms; }
+.my-works-filters button:hover { background: hsl(var(--surface-subtle)); }
+.my-works-filters button[aria-pressed="true"] { border-color: #e3d9f0; background: #f0e9f9; color: #60438e; }
+.my-works-scroll { flex: 1; min-height: 0; overflow-y: auto; overscroll-behavior: contain; padding: 0 28px 22px; scrollbar-gutter: stable; }
+.my-works-section-title { margin: 0 0 12px; font-size: 14px; font-weight: 600; }
+.my-works-grid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 14px; }
+.my-works-tile { min-width: 0; overflow: hidden; border: 1px solid hsl(var(--border) / .85); border-radius: 13px; background: hsl(var(--background)); text-align: left; transition: border-color 150ms, box-shadow 150ms; }
+.my-works-tile:hover { border-color: #c8b8e0; box-shadow: 0 3px 12px hsl(var(--foreground) / .06); }
+.my-works-thumbnail { position: relative; aspect-ratio: 16 / 9; overflow: hidden; background: hsl(var(--surface-subtle)); }
+.my-works-drawer .my-works-asset { display: block; width: 100%; height: 100%; object-fit: contain; }
+.my-works-kind { position: absolute; top: 8px; left: 8px; display: flex; align-items: center; gap: 4px; padding: 4px 6px; border-radius: 7px; background: hsl(var(--background) / .95); color: hsl(var(--foreground)); font-size: 10px; font-weight: 500; }
+.my-works-kind svg { width: 12px; height: 12px; }
+.my-works-play { position: absolute; left: 50%; top: 50%; display: grid; place-items: center; width: 42px; height: 42px; transform: translate(-50%, -50%); border: 2px solid white; border-radius: 50%; color: white; background: rgb(0 0 0 / .45); }
+.my-works-play svg { width: 20px; height: 20px; margin-left: 2px; fill: currentColor; }
+.my-works-duration { position: absolute; bottom: 8px; right: 8px; padding: 3px 6px; border-radius: 7px; color: white; background: rgb(0 0 0 / .65); font-size: 12px; font-variant-numeric: tabular-nums; }
+.my-works-caption { padding: 10px 11px 11px; }
+.my-works-caption h3 { margin: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: 13px; font-weight: 600; }
+.my-works-caption p { margin: 4px 0 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; color: hsl(var(--muted-foreground)); font-size: 11px; }
+.my-works-notice { margin-bottom: 14px; padding: 10px 12px; border: 1px solid hsl(var(--brand) / .14); border-radius: 12px; background: hsl(var(--brand-soft)); color: hsl(var(--foreground)); font-size: 12px; line-height: 1.7; }
+.my-works-notice button { display: inline-flex; align-items: center; gap: 6px; min-height: 44px; color: hsl(var(--brand)); font-weight: 600; }
+.my-works-notice button:disabled { opacity: .5; }
+.my-works-loading { display: flex; align-items: center; justify-content: center; gap: 8px; padding: 38px 10px; color: hsl(var(--muted-foreground)); font-size: 13px; }
+.my-works-empty { display: flex; flex-direction: column; align-items: center; gap: 10px; padding: 60px 12px; text-align: center; }
+.my-works-empty > svg { color: #a68dc9; }
+.my-works-empty p { margin: 4px 0 0; font-size: 14px; font-weight: 500; }
+.my-works-empty span { color: hsl(var(--muted-foreground)); font-size: 12px; line-height: 1.8; }
+.my-works-load-more { display: flex; min-height: 44px; margin: 20px auto 0; }
+.my-works-footer { flex-shrink: 0; padding: 14px 20px 18px; border-top: 1px solid hsl(var(--border) / .5); color: hsl(var(--muted-foreground)); text-align: center; font-size: 12px; }
+.my-works-detail { display: flex; flex: 1; flex-direction: column; min-height: 0; overflow-y: auto; padding: 0 28px 24px; }
+.my-works-back { display: flex; align-items: center; align-self: flex-start; gap: 7px; min-height: 44px; margin-bottom: 12px; color: hsl(var(--muted-foreground)); font-size: 13px; }
+.my-works-preview { position: relative; display: flex; align-items: center; justify-content: center; flex: 1; min-height: 220px; max-height: 58dvh; overflow: hidden; border-radius: 14px; background: hsl(var(--surface-subtle)); }
+.my-works-preview img, .my-works-preview video { display: block; width: 100%; height: 100%; max-height: 58dvh; object-fit: contain; }
+.my-works-media-message { position: absolute; inset: 0; display: flex; flex-direction: column; align-items: center; justify-content: center; gap: 12px; color: hsl(var(--muted-foreground)); background: hsl(var(--surface-subtle)); font-size: 13px; }
+.my-works-media-message button { gap: 7px; min-height: 44px; }
+.my-works-detail-caption { padding-top: 18px; }
+.my-works-inline-kind { display: inline-block; padding: 3px 7px; border-radius: 6px; background: #f0e9f9; color: #60438e; font-size: 11px; }
+.my-works-detail-caption h2 { margin: 8px 0 5px; overflow-wrap: anywhere; font-size: 18px; font-weight: 600; }
+.my-works-detail-caption p { color: hsl(var(--muted-foreground)); font-size: 12px; overflow-wrap: anywhere; }
+.my-works-detail-actions { display: flex; flex-wrap: wrap; gap: 10px; margin-top: 22px; }
+.my-works-detail-actions button { min-height: 44px; flex: 1; gap: 7px; padding-inline: 12px; }
+.my-works-action-message { margin-top: 14px; color: hsl(var(--muted-foreground)); font-size: 12px; line-height: 1.7; }
+.my-works-action-message[role="alert"] { color: hsl(var(--destructive)); }
+@media (max-width: 640px) {
+  .my-works-drawer[data-testid="design-my-works-drawer"] { width: 100vw; min-width: 0; border-radius: 0; }
+  .my-works-header { gap: 10px; padding: 20px 16px 18px; }
+  .my-works-heading-icon { width: 46px; height: 46px; border-radius: 13px; }
+  .my-works-drawer .my-works-title { font-size: 23px; }
+  .my-works-drawer .my-works-description { font-size: 12px; }
+  .my-works-filters { padding: 0 16px 20px; }
+  .my-works-scroll, .my-works-detail { padding-inline: 16px; }
+  .my-works-grid { gap: 10px; }
+  .my-works-caption { padding: 9px; }
+  .my-works-caption h3 { font-size: 12px; }
+}
+@media (prefers-reduced-motion: reduce) {
+  .my-works-drawer, .my-works-drawer button { transition: none; }
+  .my-works-drawer .animate-spin { animation: none; }
+}
diff --git a/src/pages/ImageCanvas/DesignMyWorksDrawer.tsx b/src/pages/ImageCanvas/DesignMyWorksDrawer.tsx
new file mode 100644
index 00000000..b4252795
--- /dev/null
+++ b/src/pages/ImageCanvas/DesignMyWorksDrawer.tsx
@@ -0,0 +1,240 @@
+import { useCallback, useEffect, useMemo, useRef, useState, type RefObject } from 'react';
+import { ArrowLeft, ArrowUpRight, Download, Film, ImageIcon, Loader2, Play, RefreshCw, X } from 'lucide-react';
+import { Button } from '@/components/ui/button';
+import { Sheet, SheetClose, SheetContent, SheetDescription, SheetTitle } from '@/components/ui/sheet';
+import { fetchImageGeneratedWorks, resolveImageWorkspaceAssetUrl, saveImageWorkspaceAsset } from '@/lib/image-workspace';
+import type { DesignGeneratedWork, DesignGeneratedWorksPage } from '../../../shared/image-workspace';
+import { DesignAssetThumbnail } from './DesignAssetThumbnail';
+import './DesignMyWorksDrawer.css';
+
+type Filter = 'all' | 'image' | 'video';
+type LoadedPage = { offset: number; page: DesignGeneratedWorksPage };
+
+function workKey(work: DesignGeneratedWork): string {
+  return JSON.stringify([work.asset.workspaceId, work.asset.assetId]);
+}
+
+function durationLabel(milliseconds: number | null): string | null {
+  if (milliseconds === null || !Number.isFinite(milliseconds) || milliseconds < 0) return null;
+  const seconds = Math.floor(milliseconds / 1000);
+  return `${String(Math.floor(seconds / 60)).padStart(2, '0')}:${String(seconds % 60).padStart(2, '0')}`;
+}
+
+function WorkPreview({ work }: { work: DesignGeneratedWork }) {
+  const [attempt, setAttempt] = useState(0);
+  const [source, setSource] = useState<string | null>(null);
+  const [failed, setFailed] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+  const videoRef = useRef<HTMLVideoElement>(null);
+  useEffect(() => {
+    let active = true;
+    void resolveImageWorkspaceAssetUrl(work.asset.contentPath)
+      .then((url) => { if (active) setSource(url); })
+      .catch(() => { if (active) setFailed(true); });
+    return () => { active = false; };
+  }, [attempt, work.asset.contentPath]);
+  useEffect(() => {
+    const video = videoRef.current;
+    return () => { video?.pause(); };
+  }, [source]);
+  return (
+    <div className="my-works-preview" data-testid="my-works-preview">
+      {failed ? (
+        <div className="my-works-media-message" role="alert">
+          <p>作品暂时没能打开。</p>
+          <Button variant="outline" onClick={() => {
+            setSource(null);
+            setLoaded(false);
+            setFailed(false);
+            setAttempt((value) => value + 1);
+          }}>
+            <RefreshCw className="h-4 w-4" aria-hidden="true" />重新加载
+          </Button>
+        </div>
+      ) : (
+        <>
+          {!loaded && <div className="my-works-media-message" role="status"><Loader2 className="h-5 w-5 animate-spin" aria-hidden="true" />正在打开作品…</div>}
+          {source && (work.asset.mediaType === 'video'
+            ? <video ref={videoRef} src={source} controls playsInline preload="metadata" aria-label={work.title} onLoadedMetadata={() => setLoaded(true)} onError={() => setFailed(true)} />
+            : <img src={source} alt={work.title} onLoad={() => setLoaded(true)} onError={() => setFailed(true)} />)}
+        </>
+      )}
+    </div>
+  );
+}
+
+export function DesignMyWorksDrawer({
+  open,
+  onOpenChange,
+  onReturnToCreation,
+  triggerRef,
+}: {
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  onReturnToCreation: (work: DesignGeneratedWork) => Promise<void>;
+  triggerRef?: RefObject<HTMLButtonElement | null>;
+}) {
+  const [pages, setPages] = useState<LoadedPage[]>([]);
+  const [filter, setFilter] = useState<Filter>('all');
+  const [selected, setSelected] = useState<DesignGeneratedWork | null>(null);
+  const [loading, setLoading] = useState(false);
+  const [errorOffset, setErrorOffset] = useState<number | null>(null);
+  const [action, setAction] = useState<'download' | 'return' | null>(null);
+  const [actionMessage, setActionMessage] = useState<string | null>(null);
+  const [actionFailed, setActionFailed] = useState(false);
+  const generation = useRef(0);
+  const active = useRef(false);
+  const request = useRef<AbortController | null>(null);
+  const actionBusy = useRef(false);
+
+  const loadPage = useCallback(async (offset: number) => {
+    if (!active.current || request.current) return;
+    const controller = new AbortController();
+    const currentGeneration = generation.current;
+    request.current = controller;
+    setLoading(true);
+    setErrorOffset(null);
+    try {
+      const page = await fetchImageGeneratedWorks(offset, controller.signal);
+      if (!active.current || generation.current !== currentGeneration) return;
+      setPages((current) => {
+        const previous = current.find((entry) => entry.offset === offset)?.page;
+        const unavailable = new Set(page.unavailableWorkspaceIds);
+        // Failed Workspace reads cannot invalidate its previously found works.
+        // Successfully re-read Workspaces use the latest authoritative results.
+        const preservedWorks = previous?.works.filter((work) => unavailable.has(work.asset.workspaceId)) ?? [];
+        const refreshedPage = {
+          ...page,
+          works: [...preservedWorks, ...page.works],
+          historyTruncated: Boolean(page.historyTruncated || previous?.historyTruncated),
+        };
+        return [...current.filter((entry) => entry.offset !== offset), { offset, page: refreshedPage }]
+          .sort((left, right) => left.offset - right.offset);
+      });
+    } catch {
+      if (active.current && generation.current === currentGeneration && !controller.signal.aborted) setErrorOffset(offset);
+    } finally {
+      if (request.current === controller) request.current = null;
+      if (active.current && generation.current === currentGeneration) setLoading(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    generation.current += 1;
+    active.current = open;
+    request.current?.abort();
+    request.current = null;
+    setSelected(null);
+    setAction(null);
+    setActionMessage(null);
+    actionBusy.current = false;
+    if (open) {
+      setPages([]);
+      setFilter('all');
+      setErrorOffset(null);
+      void loadPage(0);
+    } else setLoading(false);
+    return () => {
+      active.current = false;
+      generation.current += 1;
+      request.current?.abort();
+      request.current = null;
+    };
+  }, [open, loadPage]);
+
+  const works = useMemo(() => {
+    const unique = new Map<string, DesignGeneratedWork>();
+    for (const entry of pages) for (const work of entry.page.works) unique.set(workKey(work), work);
+    return [...unique.values()].sort((left, right) => Date.parse(right.asset.createdAt) - Date.parse(left.asset.createdAt));
+  }, [pages]);
+  const shownWorks = works.filter((work) => filter === 'all' || work.asset.mediaType === filter);
+  const nextOffset = pages.at(-1)?.page.nextOffset ?? null;
+  const unavailablePages = pages.filter((entry) => entry.page.unavailableWorkspaceIds.length > 0);
+  const historyTruncated = pages.some((entry) => entry.page.historyTruncated);
+  const incomplete = nextOffset !== null || unavailablePages.length > 0 || historyTruncated;
+  const canLoadMore = nextOffset !== null && errorOffset === null;
+
+  const performAction = async (kind: 'download' | 'return') => {
+    if (!selected || actionBusy.current) return;
+    const currentGeneration = generation.current;
+    actionBusy.current = true;
+    setAction(kind);
+    setActionMessage(null);
+    setActionFailed(false);
+    try {
+      if (kind === 'return') {
+        await onReturnToCreation(selected);
+        if (active.current && generation.current === currentGeneration) onOpenChange(false);
+      } else {
+        const result = await saveImageWorkspaceAsset(selected.asset);
+        if (active.current && generation.current === currentGeneration && result.status === 'saved') setActionMessage('作品已保存到电脑');
+      }
+    } catch (error) {
+      if (active.current && generation.current === currentGeneration) {
+        setActionFailed(true);
+        setActionMessage(kind === 'return'
+          ? error instanceof Error && error.message.trim() ? error.message : '暂时没能回到这次创作，请再试一次。'
+          : '作品没有保存成功，请再试一次。');
+      }
+    } finally {
+      if (active.current && generation.current === currentGeneration) {
+        actionBusy.current = false;
+        setAction(null);
+      }
+    }
+  };
+
+  return (
+    <Sheet open={open} onOpenChange={onOpenChange}>
+      <SheetContent side="right" className="my-works-drawer" data-testid="design-my-works-drawer" onCloseAutoFocus={(event) => {
+        if (triggerRef?.current) {
+          event.preventDefault();
+          triggerRef.current.focus();
+        }
+      }}>
+        <header className="my-works-header">
+          <span className="my-works-heading-icon" aria-hidden="true"><ImageIcon /></span>
+          <div className="min-w-0 flex-1">
+            <SheetTitle className="my-works-title">我的作品</SheetTitle>
+            <SheetDescription className="my-works-description">你在 Canvas 创作的图片和视频，都收在这里</SheetDescription>
+          </div>
+          <SheetClose asChild><Button variant="ghost" size="icon" className="my-works-close" aria-label="关闭我的作品"><X className="h-5 w-5" aria-hidden="true" /></Button></SheetClose>
+        </header>
+        {open && (selected ? (
+          <div className="my-works-detail">
+            <button type="button" className="my-works-back" disabled={action !== null} onClick={() => { setSelected(null); setActionMessage(null); }}><ArrowLeft className="h-4 w-4" aria-hidden="true" />返回作品</button>
+            <WorkPreview key={`${workKey(selected)}:${selected.asset.contentPath}`} work={selected} />
+            <div className="my-works-detail-caption"><span className="my-works-inline-kind">{selected.asset.mediaType === 'video' ? '视频' : '图片'}</span><h2>{selected.title}</h2><p>来自：{selected.workspaceTitle}</p></div>
+            {actionMessage && <p role={actionFailed ? 'alert' : 'status'} className="my-works-action-message">{actionMessage}</p>}
+            <div className="my-works-detail-actions">
+              <Button variant="outline" disabled={action !== null} onClick={() => void performAction('download')}>{action === 'download' ? <Loader2 className="h-4 w-4 animate-spin" aria-hidden="true" /> : <Download className="h-4 w-4" aria-hidden="true" />}保存到电脑</Button>
+              <Button disabled={action !== null} onClick={() => void performAction('return')}>{action === 'return' ? <Loader2 className="h-4 w-4 animate-spin" aria-hidden="true" /> : <ArrowUpRight className="h-4 w-4" aria-hidden="true" />}回到这次创作</Button>
+            </div>
+          </div>
+        ) : (
+          <>
+            <div className="my-works-filters" role="group" aria-label="作品类型">{([['all', '全部'], ['image', '图片'], ['video', '视频']] as const).map(([value, label]) => <button key={value} type="button" aria-pressed={filter === value} onClick={() => setFilter(value)}>{label}</button>)}</div>
+            <div className="my-works-scroll">
+              <h2 className="my-works-section-title">最近作品</h2>
+              {historyTruncated && <p className="my-works-notice">较早的作品暂时无法全部读取，当前显示已找到的作品。</p>}
+              {unavailablePages.length > 0 && <div className="my-works-notice" role="status"><p>有些创作暂时没能读到，已找到的作品可以继续查看。</p><button disabled={loading} type="button" onClick={() => void loadPage(unavailablePages[0].offset)}>重试未读到的作品</button></div>}
+              {errorOffset !== null && <div className="my-works-notice" role="alert"><p>{pages.length ? '更多作品暂时没能加载，已经找到的作品还在。' : '作品暂时没能加载，请再试一次。'}</p><button type="button" onClick={() => void loadPage(errorOffset)}><RefreshCw className="h-4 w-4" aria-hidden="true" />重新加载</button></div>}
+              {shownWorks.length > 0 && <div className="my-works-grid">{shownWorks.map((work) => {
+                const video = work.asset.mediaType === 'video';
+                const duration = durationLabel(work.asset.durationMilliseconds);
+                return <button type="button" key={workKey(work)} className="my-works-tile" aria-label={`查看${video ? '视频' : '图片'}：${work.title}`} onClick={() => { setSelected(work); setActionMessage(null); }}>
+                  <div className="my-works-thumbnail"><DesignAssetThumbnail asset={work.asset} alt={work.title} className="my-works-asset" /><span className="my-works-kind">{video ? <Film aria-hidden="true" /> : <ImageIcon aria-hidden="true" />}{video ? '视频' : '图片'}</span>{video && <><span className="my-works-play" aria-hidden="true"><Play /></span>{duration !== null && <span className="my-works-duration">{duration}</span>}</>}</div>
+                  <div className="my-works-caption"><h3>{work.title}</h3><p>来自：{work.workspaceTitle}</p></div>
+                </button>;
+              })}</div>}
+              {loading && <div className="my-works-loading" role="status"><Loader2 className="h-5 w-5 animate-spin" aria-hidden="true" />正在寻找你的作品…</div>}
+              {!loading && errorOffset === null && shownWorks.length === 0 && <div className="my-works-empty"><ImageIcon className="h-10 w-10" aria-hidden="true" /><p>{incomplete ? '这一批还没找到符合筛选的作品' : filter === 'all' ? '你的第一件作品会出现在这里' : `还没有${filter === 'video' ? '视频' : '图片'}作品`}</p><span>{incomplete ? '可以继续查看其他创作，或稍后重新读取。' : '和麦洛聊聊想画什么，完成后再来看看吧。'}</span></div>}
+              {canLoadMore && <Button variant="outline" className="my-works-load-more" disabled={loading} onClick={() => void loadPage(nextOffset)}>继续加载作品</Button>}
+            </div>
+            <footer className="my-works-footer">点击作品，查看大图或播放视频</footer>
+          </>
+        ))}
+      </SheetContent>
+    </Sheet>
+  );
+}
diff --git a/src/pages/ImageCanvas/DesignPlanHistory.tsx b/src/pages/ImageCanvas/DesignPlanHistory.tsx
index bc07af3f..e8a464b4 100644
--- a/src/pages/ImageCanvas/DesignPlanHistory.tsx
+++ b/src/pages/ImageCanvas/DesignPlanHistory.tsx
@@ -74,6 +74,7 @@ export function DesignPlanHistory({ workspace, onSelectAsset }: { workspace: Des
         return (
           <details
             key={task.taskId}
+            data-task-id={task.taskId}
             data-testid={`design-plan-history-${task.taskId}`}
             className="group overflow-hidden rounded-xl border border-border/70 bg-background"
           >
diff --git a/src/pages/ImageCanvas/index.tsx b/src/pages/ImageCanvas/index.tsx
index b047e377..2ca773a3 100644
--- a/src/pages/ImageCanvas/index.tsx
+++ b/src/pages/ImageCanvas/index.tsx
@@ -1,11 +1,13 @@
-import { useEffect, useState } from 'react';
+import { useEffect, useRef, useState } from 'react';
 import {
   CloudOff,
+  Images,
   PanelLeft,
   Plus,
   RefreshCw,
   Sparkles,
 } from 'lucide-react';
+import type { DesignGeneratedWork } from '../../../shared/image-workspace';
 import { Button } from '@/components/ui/button';
 import {
   Sheet,
@@ -24,6 +26,8 @@ import { CanvasWorkspaceSplit } from './CanvasWorkspaceSplit';
 import { YouthCreationCard } from './YouthCreationCard';
 import { DesignHistoryRail } from './DesignHistoryRail';
 import { DesignWorksRail } from './DesignWorksRail';
+import { DesignMyWorksDrawer } from './DesignMyWorksDrawer';
+import type { DesignWorkFocus } from './DesignHistoryRail';
 
 function useDesktopLayout(): boolean {
   const [desktop, setDesktop] = useState(() => (
@@ -105,7 +109,11 @@ function ErrorWorkspace({ message, retry }: { message: string; retry: () => void
   );
 }
 
-export function ImageCanvas() {
+function ImageCanvasWorkspace({ onOpenMyWorks, worksTriggerRef, focusedWork }: {
+  onOpenMyWorks: () => void;
+  worksTriggerRef: React.RefObject<HTMLButtonElement | null>;
+  focusedWork: (DesignWorkFocus & { workspaceId: string }) | null;
+}) {
   const authenticated = useAuthStore((state) => state.isAuthenticated());
   const status = useImageWorkspaceStore((state) => state.status);
   const bootstrap = useImageWorkspaceStore((state) => state.bootstrap);
@@ -178,6 +186,10 @@ export function ImageCanvas() {
         </div>
         {taskStatus && <span role="status" className={cn('hidden text-xs sm:inline',
           latestTask.status === 'failed' ? 'text-destructive' : 'text-muted-foreground')}>{taskStatus}</span>}
+        <Button ref={worksTriggerRef} type="button" variant="outline" className="h-11 shrink-0 rounded-xl gap-2"
+          onClick={onOpenMyWorks} aria-haspopup="dialog">
+          <Images className="h-4 w-4" aria-hidden="true" />我的作品
+        </Button>
         {!desktopLayout && <Button type="button" variant="outline" size="sm" className="h-10 shrink-0" onClick={() => setWorksOpen(true)}>
           <PanelLeft className="mr-1.5 h-4 w-4" />项目
         </Button>}
@@ -194,7 +206,10 @@ export function ImageCanvas() {
         showPlanHistory={false}
         showCreationCard={false}
       /> : <EmptyWorkspace onCreate={openCreate} />}
-        works={<DesignHistoryRail key={workspaceId ?? 'empty'} workspace={workspace} creation={workspace && <YouthCreationCard
+        workFocusRequest={focusedWork?.workspaceId === workspaceId ? focusedWork.requestId : undefined}
+        works={<DesignHistoryRail key={workspaceId ?? 'empty'} workspace={workspace}
+          focusedWork={focusedWork?.workspaceId === workspaceId ? focusedWork : null}
+          creation={workspace && <YouthCreationCard
           key={workspaceId}
           workspace={workspace}
           quoteBlockers={quoteBlockers}
@@ -213,3 +228,60 @@ export function ImageCanvas() {
     </div>
   );
 }
+
+export function ImageCanvas() {
+  const authenticated = useAuthStore((state) => state.isAuthenticated());
+  const accountKey = useAuthStore((state) => state.user?.userId ?? state.user?.username ?? null);
+  const trigger = useRef<HTMLButtonElement>(null);
+  const [myWorksOpen, setMyWorksOpen] = useState(false);
+  const [focusedWork, setFocusedWork] = useState<(DesignWorkFocus & { workspaceId: string }) | null>(null);
+  const focusSequence = useRef(0);
+
+  const [drawerOwner, setDrawerOwner] = useState({ accountKey, authenticated });
+  if (drawerOwner.accountKey !== accountKey || drawerOwner.authenticated !== authenticated) {
+    setDrawerOwner({ accountKey, authenticated });
+    setMyWorksOpen(false);
+    setFocusedWork(null);
+  }
+
+  const openMyWorks = () => {
+    document.querySelectorAll<HTMLVideoElement>('[data-testid="image-workspace"] video')
+      .forEach((video) => { if (!video.paused) video.pause(); });
+    setMyWorksOpen(true);
+  };
+
+  const returnToCreation = async (work: DesignGeneratedWork) => {
+    const originalOwner = accountKey;
+    const current = useImageWorkspaceStore.getState();
+    if (current.activeWorkspaceId !== work.asset.workspaceId
+      && (current.chatDraft.trim() || Object.keys(current.fieldDrafts).length > 0)) {
+      throw new Error('当前创作还有未发送或未保存的内容，请先回到工作区处理，再切换项目。');
+    }
+    await current.selectProjectForWork(work.asset.workspaceId, work.taskId);
+    const auth = useAuthStore.getState();
+    const currentOwner = auth.user?.userId ?? auth.user?.username ?? null;
+    if (!auth.isAuthenticated() || originalOwner !== currentOwner) {
+      throw new Error('登录账号已变化，请重新打开“我的作品”。');
+    }
+    const selected = useImageWorkspaceStore.getState().workspace;
+    if (selected?.workspace.workspaceId !== work.asset.workspaceId) {
+      throw new Error('暂时没能打开这次创作，请稍后重试。');
+    }
+    if (!selected.tasks.some((task) => task.taskId === work.taskId)) {
+      throw new Error('这件作品的制作记录暂时无法打开，你仍可以在这里查看和下载作品。');
+    }
+    focusSequence.current += 1;
+    setFocusedWork({
+      workspaceId: work.asset.workspaceId,
+      assetId: work.asset.assetId,
+      taskId: work.taskId,
+      requestId: focusSequence.current,
+    });
+  };
+
+  return <>
+    <ImageCanvasWorkspace onOpenMyWorks={openMyWorks} worksTriggerRef={trigger} focusedWork={focusedWork} />
+    {authenticated && <DesignMyWorksDrawer key={accountKey ?? 'current-account'} open={myWorksOpen}
+      onOpenChange={setMyWorksOpen} onReturnToCreation={returnToCreation} triggerRef={trigger} />}
+  </>;
+}
diff --git a/src/stores/image-workspace.ts b/src/stores/image-workspace.ts
index 29300a76..b32cf59d 100644
--- a/src/stores/image-workspace.ts
+++ b/src/stores/image-workspace.ts
@@ -88,6 +88,7 @@ type ImageWorkspaceState = {
   renameProject: (workspaceId: string, title: string) => Promise<DesignWorkspace>;
   deleteProject: (workspaceId: string) => Promise<DesignDeleteWorkspaceResult>;
   selectProject: (workspaceId: string) => Promise<void>;
+  selectProjectForWork: (workspaceId: string, taskId: string) => Promise<void>;
   refreshWorkspace: () => Promise<DesignWorkspace | null>;
   connectEvents: () => void;
   disconnectEvents: () => void;
@@ -893,6 +894,70 @@ export const useImageWorkspaceStore = create<ImageWorkspaceState>((set, get) =>
       }
     },
 
+    selectProjectForWork: async (workspaceId, taskId) => {
+      const validateSource = (workspace: DesignWorkspace) => {
+        if (workspace.workspace.workspaceId !== workspaceId
+          || workspace.form.workspaceId !== workspaceId
+          || !workspace.tasks.some((task) => task.taskId === taskId)) {
+          throw new Error('无法在来源对话中找到这件作品，请刷新作品列表后再试');
+        }
+      };
+      const initial = get();
+      if (initial.activeWorkspaceId === workspaceId && initial.workspace) {
+        validateSource(initial.workspace);
+        return;
+      }
+      const requireNoDrafts = (state: ImageWorkspaceState) => {
+        if (state.chatDraft.length > 0 || Object.keys(state.fieldDrafts).length > 0) {
+          throw new Error('当前对话还有未发送或未保存的内容，请先处理后再打开来源对话');
+        }
+      };
+      requireNoDrafts(initial);
+      const selectedGeneration = workspaceSelectionGeneration;
+      const initialWorkspaceId = initial.activeWorkspaceId;
+      const auth = useAuthStore.getState();
+      const user = auth.user;
+      const userId = user?.userId;
+      const username = user?.username;
+      const authenticated = auth.isAuthenticated();
+      if (!authenticated) throw new Error('请先登录后再打开来源对话');
+      let workspace: DesignWorkspace;
+      try {
+        workspace = await fetchImageWorkspaceProject(workspaceId);
+      } catch (error) {
+        throw new Error(error instanceof ImageWorkspaceApiError && error.status === 404
+          ? '来源对话已不存在，当前对话保持不变'
+          : '暂时无法打开来源对话，请稍后重试', { cause: error });
+      }
+      const currentAuth = useAuthStore.getState();
+      if (selectedGeneration !== workspaceSelectionGeneration
+        || get().activeWorkspaceId !== initialWorkspaceId
+        || currentAuth.user !== user
+        || currentAuth.user?.userId !== userId
+        || currentAuth.user?.username !== username
+        || currentAuth.isAuthenticated() !== authenticated) {
+        throw new Error('当前对话或登录账号已改变，请重新选择作品');
+      }
+      requireNoDrafts(get());
+      validateSource(workspace);
+      selectionGeneration += 1;
+      workspaceSelectionGeneration += 1;
+      closeEventSource();
+      assistantStreamChunkIndexes.clear();
+      set((state) => ({
+        ...withWorkspace(state, workspace),
+        eventState: 'connecting',
+        lastEventId: null,
+        fieldDrafts: {},
+        chatDraft: '',
+        assistantActivities: {},
+        assistantStreams: {},
+        quoteBlockers: [],
+        error: null,
+      }));
+      get().connectEvents();
+    },
+
     refreshWorkspace: async () => {
       const workspaceId = get().activeWorkspaceId;
       if (!workspaceId) return null;
diff --git a/tests/e2e/canvas-my-works-layout-fixture.ts b/tests/e2e/canvas-my-works-layout-fixture.ts
new file mode 100644
index 00000000..9e594352
--- /dev/null
+++ b/tests/e2e/canvas-my-works-layout-fixture.ts
@@ -0,0 +1,50 @@
+import type { DesignAsset, DesignGeneratedWork, DesignGenerationTask, DesignWorkspace } from '../../shared/image-workspace';
+import { designCapabilitiesFixture, designFormFixture, designQuoteFixture, designSummaryFixture, designValuesFixture, designWorkspaceFixture } from '../fixtures/design-workspace-v2';
+
+// Explicit local QA examples. These are never injected into product data.
+const names = ['游戏小世界', '机器人伙伴', '出发去冒险'];
+const titles = ['我的游戏小世界', '机器人动起来了', '出发去冒险', '机器人好朋友', '我的新关卡', '一起出发'];
+export const fixtureWorks: DesignGeneratedWork[] = Array.from({ length: 6 }, (_, index) => {
+  const workspaceId = `qa-workspace-${Math.floor(index / 2) + 1}`;
+  const video = index % 2 === 1;
+  const asset: DesignAsset = {
+    assetId: `qa-asset-${index + 1}`, workspaceId, role: 'generated', mediaType: video ? 'video' : 'image',
+    mimeType: video ? 'video/mp4' : 'image/webp', width: 1200, height: 800,
+    durationMilliseconds: video ? (8 + index * 2) * 1000 : null,
+    generationTaskId: `qa-task-${index + 1}`, createdAt: `2026-10-14T09:${String(30 - index).padStart(2, '0')}:00Z`,
+    contentPath: video ? 'data:video/mp4;base64,' : `/src/assets/${index % 3 === 0 ? 'module-game' : 'module-robot'}.webp`,
+  };
+  return { asset, taskId: asset.generationTaskId!, workspaceTitle: names[Math.floor(index / 2)], title: titles[index] };
+});
+
+function taskFor(work: DesignGeneratedWork): DesignGenerationTask {
+  const quote = designQuoteFixture();
+  return {
+    taskId: work.taskId, quoteId: `qa-quote-${work.taskId}`, status: 'succeeded', taskRevision: 2,
+    specificationRevision: 3, specificationRevisionId: 'qa-specification-3', specificationDigest: quote.specificationDigest,
+    compilerVersion: quote.compilerVersion, medium: work.asset.mediaType,
+    outputSummary: { ...quote.outputSummary, medium: work.asset.mediaType, aspectRatio: '3:4', outputCount: 1, durationSeconds: work.asset.durationMilliseconds === null ? null : work.asset.durationMilliseconds / 1000 },
+    maximumCustomerChargeAtoms: 1200,
+    customerBilling: { quotedAtoms: 1200, heldAtoms: 0, chargedAtoms: 1200, refundedAtoms: 0, pendingResolutionAtoms: 0 },
+    customerHoldExpiresAt: quote.expiresAt, resolutionDeadlineAt: null,
+    progress: { stage: 'completed', completedRequiredSteps: 1, totalRequiredSteps: 1 }, executionHealth: 'normal',
+    cancellation: { state: 'unavailable', outcome: null }, issues: [], resultAssetIds: [work.asset.assetId],
+    nextActions: ['view_result'], createdAt: work.asset.createdAt,
+  };
+}
+
+export const fixtureWorkspaces: DesignWorkspace[] = names.map((title, index) => {
+  const workspaceId = `qa-workspace-${index + 1}`;
+  const works = fixtureWorks.filter((work) => work.asset.workspaceId === workspaceId);
+  const values = structuredClone(designValuesFixture);
+  values.content.concept = '做一个充满想象力的游戏小世界';
+  return designWorkspaceFixture({
+    workspace: designSummaryFixture({ workspaceId, sessionId: `qa-session-${index + 1}`, title, specificationRevision: 3 }),
+    form: designFormFixture({ workspaceId, specificationRevision: 3,
+      specification: { schema_version: 1, values, field_decisions: {} } }),
+    turns: [{ turnId: 'qa-turn-1', rawTurnSequence: 1, userMessage: '做一个充满想象力的游戏小世界', assistantMessage: '作品已经完成啦！也可以继续告诉我你想怎么调整。' }],
+    tasks: works.map(taskFor), assets: works.map((work) => work.asset),
+  });
+});
+
+export const fixtureBootstrap = { capabilities: designCapabilitiesFixture, workspaces: fixtureWorkspaces.map((workspace) => workspace.workspace) };
diff --git a/tests/e2e/canvas-my-works-layout-harness.mjs b/tests/e2e/canvas-my-works-layout-harness.mjs
new file mode 100644
index 00000000..520cf48f
--- /dev/null
+++ b/tests/e2e/canvas-my-works-layout-harness.mjs
@@ -0,0 +1,91 @@
+import { createServer, normalizePath } from 'vite';
+import { resolve } from 'node:path';
+
+export async function createCanvasMyWorksServer({ port = 0 } = {}) {
+  const entry = normalizePath(resolve('tests/e2e/__canvas-my-works-layout-harness.tsx'));
+  const server = await createServer({
+    configFile: false,
+    cacheDir: 'node_modules/.vite-canvas-my-works-layout',
+    resolve: { alias: { '@': resolve('src') } },
+    esbuild: { jsx: 'automatic' },
+    server: { host: '127.0.0.1', port, strictPort: port !== 0 },
+    plugins: [{
+      name: 'isolated-canvas-my-works-layout', enforce: 'pre',
+      resolveId(id) { if (id === '/__canvas-my-works-layout-harness.tsx') return entry; },
+      load(id) {
+        if (id.endsWith('/src/lib/image-workspace.ts')) return `
+          import { fixtureBootstrap, fixtureWorkspaces, fixtureWorks } from '/tests/e2e/canvas-my-works-layout-fixture.ts';
+          export const IMAGE_WORKSPACE_CREATE_PROJECT_EVENT = 'qa:image-workspace:create-project';
+          export class ImageWorkspaceApiError extends Error {}
+          export const createImageWorkspaceOperationId = () => 'qa-operation';
+          export const fetchImageWorkspace = async () => structuredClone(fixtureBootstrap);
+          export const fetchImageWorkspaceProject = async id => {
+            const workspace = fixtureWorkspaces.find(workspace => workspace.workspace.workspaceId === id);
+            if (!workspace) throw new Error('Unknown local QA Workspace');
+            return structuredClone(workspace);
+          };
+          export const fetchImageGeneratedWorks = async () => ({ works: structuredClone(fixtureWorks), nextOffset: null, unavailableWorkspaceIds: [], historyTruncated: false });
+          export const openImageWorkspaceEvents = async () => ({ addEventListener() {}, close() {} });
+          export const resolveImageWorkspaceAssetUrl = async path => path;
+          export const saveImageWorkspaceAsset = async () => ({ status: 'cancelled' });
+          const forbidden = async () => { throw new Error('Local QA does not create, edit, delete, upload, or generate'); };
+          export const createImageWorkspaceProject = forbidden;
+          export const deleteImageWorkspaceProject = forbidden;
+          export const renameImageWorkspaceProject = forbidden;
+          export const submitImageWorkspaceCommand = forbidden;
+          export const uploadImageWorkspaceAsset = forbidden;
+        `;
+        if (id.endsWith('/src/lib/host-api.ts')) return `
+          export const setDesktopBackgroundLease = async () => undefined;
+          export const hostApiFetch = async () => { throw new Error('Local QA forbids Host API requests'); };
+        `;
+        if (id === entry) return `
+          import { createRoot } from 'react-dom/client';
+          import { ImageCanvas } from '/src/pages/ImageCanvas/index.tsx';
+          import { DesignWorksRail } from '/src/pages/ImageCanvas/DesignWorksRail.tsx';
+          import { useImageWorkspaceStore } from '/src/stores/image-workspace.ts';
+          import { useAuthStore } from '/src/stores/auth.ts';
+          import { fixtureBootstrap, fixtureWorkspaces } from '/tests/e2e/canvas-my-works-layout-fixture.ts';
+          import '/src/styles/globals.css';
+          useAuthStore.setState({ initialized: true, accessToken: 'qa-only', user: { username: '本地样例', userId: 'qa-only', authorities: [], tenantId: null, deptId: null }, isAuthenticated: () => true });
+          useImageWorkspaceStore.setState({ status: 'ready', bootstrap: fixtureBootstrap, activeWorkspaceId: fixtureWorkspaces[0].workspace.workspaceId, workspace: fixtureWorkspaces[0] });
+          window.__canvasMyWorksQA = {
+            setDraft: value => useImageWorkspaceStore.getState().setChatDraft(value),
+            state: () => ({ draft: useImageWorkspaceStore.getState().chatDraft, workspaceId: useImageWorkspaceStore.getState().activeWorkspaceId }),
+          };
+          // DOM-only media fixture: actual repository images are posters. No video
+          // bytes are played, generated, downloaded, or billed in layout tests.
+          document.addEventListener('error', event => { if (event.target instanceof HTMLVideoElement) event.stopImmediatePropagation(); }, true);
+          const videoFixture = new MutationObserver(() => document.querySelectorAll('video').forEach(video => {
+            if (video.dataset.qaPoster) return;
+            video.dataset.qaPoster = 'true';
+            video.poster = '/src/assets/module-robot.webp';
+            video.removeAttribute('src');
+            queueMicrotask(() => video.dispatchEvent(new Event('loadedmetadata')));
+          }));
+          videoFixture.observe(document.body, { childList: true, subtree: true });
+          function CanvasFrame() {
+            const workspace = useImageWorkspaceStore(state => state.workspace);
+            return <div style={{display: 'flex', height: '100dvh', minWidth: 0}}>
+              <style>{'@media(min-width:1024px){.canvas-my-works-qa-projects{display:block}}@media(max-width:1023px){.canvas-my-works-qa-projects{display:none}}'}</style>
+              <aside className="canvas-my-works-qa-projects" style={{width: 224, flexShrink: 0, borderRight: '1px solid hsl(var(--border))'}}>
+                <DesignWorksRail workspace={workspace} />
+              </aside>
+              <main style={{flex: 1, minWidth: 0, height: '100%'}}><ImageCanvas /></main>
+            </div>;
+          }
+          createRoot(document.getElementById('root')).render(<CanvasFrame />);
+        `;
+      },
+      configureServer(vite) {
+        vite.middlewares.use((req, res, next) => {
+          if (req.url !== '/' && !req.url?.startsWith('/?')) return next();
+          res.setHeader('Content-Type', 'text/html');
+          res.end('<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"></head><body><div id="root"></div><script type="module" src="/__canvas-my-works-layout-harness.tsx"></script></body></html>');
+        });
+      },
+    }],
+  });
+  await server.listen();
+  return server;
+}
diff --git a/tests/e2e/canvas-my-works-layout.spec.ts b/tests/e2e/canvas-my-works-layout.spec.ts
new file mode 100644
index 00000000..53ec3895
--- /dev/null
+++ b/tests/e2e/canvas-my-works-layout.spec.ts
@@ -0,0 +1,108 @@
+import { test, expect } from '@playwright/test';
+import type { ViteDevServer } from 'vite';
+import { createCanvasMyWorksServer } from './canvas-my-works-layout-harness.mjs';
+
+let server: ViteDevServer;
+let baseUrl: string;
+test.use({ headless: true, channel: process.env.MAKELORE_LAYOUT_BROWSER_CHANNEL, video: 'off' });
+test.beforeAll(async () => {
+  server = await createCanvasMyWorksServer();
+  baseUrl = server.resolvedUrls!.local[0];
+});
+test.afterAll(async () => { await server?.close(); });
+
+for (const viewport of [{ width: 1600, height: 1000 }, { width: 1440, height: 960 }, { width: 390, height: 844 }]) {
+  test(`Canvas My Works stays usable and returns to its source at ${viewport.width}px`, async ({ page }, testInfo) => {
+    const pageErrors: string[] = [];
+    const unexpectedRequests: string[] = [];
+    page.on('pageerror', (error) => pageErrors.push(error.message));
+    page.on('request', (request) => {
+      const url = request.url();
+      if (/^https?:/.test(url) && !url.startsWith(baseUrl)) unexpectedRequests.push(url);
+    });
+    await page.setViewportSize(viewport);
+    await page.goto(baseUrl);
+    const split = page.getByTestId('canvas-workspace-split');
+    await expect(split).toBeVisible();
+    if (viewport.width >= 1024) await page.getByRole('button', { name: '展开创作对话', exact: true }).click();
+    await page.getByRole('textbox', { name: '告诉 AI 你想创作什么' }).fill('这是一段尚未发送的本地草稿');
+    const previousFocus = await split.getAttribute('data-focus');
+    const previousPanel = await split.getAttribute('data-compact-panel');
+    const trigger = page.getByRole('button', { name: '我的作品', exact: true });
+    await trigger.click();
+    const drawer = page.getByTestId('design-my-works-drawer');
+    await expect(drawer).toBeVisible();
+    const image = drawer.getByRole('button', { name: '查看图片：我的游戏小世界', exact: true });
+    const video = drawer.getByRole('button', { name: '查看视频：机器人动起来了', exact: true });
+    await expect(image).toBeVisible();
+    await expect(video).toBeVisible();
+    await expect(image.getByText('图片', { exact: true })).toBeVisible();
+    await expect(video.getByText('视频', { exact: true })).toBeVisible();
+    await expect(video.getByText('00:10', { exact: true })).toBeVisible();
+    await expect(image.locator('img')).toBeVisible();
+    const drawerBox = (await drawer.boundingBox())!;
+    expect(drawerBox.x).toBeGreaterThanOrEqual(-1);
+    expect(drawerBox.x + drawerBox.width).toBeLessThanOrEqual(viewport.width + 1);
+    expect(drawerBox.height).toBeLessThanOrEqual(viewport.height + 1);
+    const firstBox = (await image.boundingBox())!;
+    const secondBox = (await video.boundingBox())!;
+    expect(Math.abs(firstBox.y - secondBox.y)).toBeLessThanOrEqual(1);
+    expect(secondBox.x).toBeGreaterThan(firstBox.x + firstBox.width);
+    expect(await drawer.evaluate((node) => node.scrollWidth <= node.clientWidth)).toBe(true);
+    const footerBox = (await drawer.locator('.my-works-footer').boundingBox())!;
+    for (const tile of await drawer.getByRole('button', { name: /^查看/ }).all()) {
+      const tileBox = (await tile.boundingBox())!;
+      expect(tileBox.y + tileBox.height).toBeLessThanOrEqual(footerBox.y);
+    }
+    await page.screenshot({ path: testInfo.outputPath(`canvas-my-works-${viewport.width}-list.png`), fullPage: true });
+
+    const filters = drawer.getByRole('group', { name: '作品类型' });
+    await filters.getByRole('button', { name: '视频', exact: true }).click();
+    await expect(drawer.getByRole('button', { name: /^查看视频/ })).toHaveCount(3);
+    await expect(drawer.getByRole('button', { name: /^查看图片/ })).toHaveCount(0);
+    await video.click();
+    const preview = drawer.getByTestId('my-works-preview');
+    await expect(preview.locator('video')).toHaveAttribute('controls', '');
+    await expect(preview.locator('video')).not.toHaveAttribute('autoplay', '');
+    await expect(page.getByRole('dialog')).toHaveCount(1);
+    await expect(drawer.getByRole('button', { name: '保存到电脑', exact: true })).toBeVisible();
+    await page.screenshot({ path: testInfo.outputPath(`canvas-my-works-${viewport.width}-video-preview.png`), fullPage: true });
+    await drawer.getByRole('button', { name: '返回作品', exact: true }).click();
+    await filters.getByRole('button', { name: '图片', exact: true }).click();
+    await expect(drawer.getByRole('button', { name: /^查看图片/ })).toHaveCount(3);
+    await image.click();
+    await expect(preview.locator('img')).toBeVisible();
+    await drawer.getByRole('button', { name: '返回作品', exact: true }).click();
+    await page.keyboard.press('Escape');
+    await expect(drawer).toHaveCount(0);
+    await expect(trigger).toBeFocused();
+    await expect(split).toHaveAttribute('data-focus', previousFocus!);
+    await expect(split).toHaveAttribute('data-compact-panel', previousPanel!);
+    await expect(page.getByRole('textbox', { name: '告诉 AI 你想创作什么' })).toHaveValue('这是一段尚未发送的本地草稿');
+    await expect.poll(() => page.evaluate('window.__canvasMyWorksQA.state().draft')).toBe('这是一段尚未发送的本地草稿');
+
+    // Real return-to-source callback guards unsent drafts and then selects the
+    // actual fixture Workspace, opens its task record, and exposes compact works.
+    await trigger.click();
+    await drawer.getByRole('button', { name: '查看图片：出发去冒险', exact: true }).click();
+    await drawer.getByRole('button', { name: '回到这次创作', exact: true }).click();
+    await expect(drawer.getByRole('alert')).toHaveText('当前创作还有未发送或未保存的内容，请先回到工作区处理，再切换项目。');
+    await expect.poll(() => page.evaluate('window.__canvasMyWorksQA.state().workspaceId')).toBe('qa-workspace-1');
+    await drawer.getByRole('button', { name: '关闭我的作品', exact: true }).click();
+    await expect(drawer).toHaveCount(0);
+    await page.getByRole('textbox', { name: '告诉 AI 你想创作什么' }).fill('');
+    await trigger.click();
+    await drawer.getByRole('button', { name: '查看图片：出发去冒险', exact: true }).click();
+    await drawer.getByRole('button', { name: '回到这次创作', exact: true }).click();
+    await expect(drawer).toHaveCount(0);
+    await expect.poll(() => page.evaluate('window.__canvasMyWorksQA.state().workspaceId')).toBe('qa-workspace-2');
+    await expect(split).toHaveAttribute('data-focus', '');
+    await expect(split).toHaveAttribute('data-compact-panel', 'works');
+    const record = page.getByTestId('design-plan-history-qa-task-3');
+    await expect(record).toBeVisible();
+    await expect(record).toHaveAttribute('open', '');
+    await page.screenshot({ path: testInfo.outputPath(`canvas-my-works-${viewport.width}-source.png`), fullPage: true });
+    expect(pageErrors).toEqual([]);
+    expect(unexpectedRequests).toEqual([]);
+  });
+}
diff --git a/tests/unit/design-my-works-drawer.test.tsx b/tests/unit/design-my-works-drawer.test.tsx
new file mode 100644
index 00000000..f1749a44
--- /dev/null
+++ b/tests/unit/design-my-works-drawer.test.tsx
@@ -0,0 +1,286 @@
+import { act, cleanup, fireEvent, render, screen, waitFor, within } from '@testing-library/react';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { createRef } from 'react';
+import { fetchImageGeneratedWorks, resolveImageWorkspaceAssetUrl, saveImageWorkspaceAsset } from '@/lib/image-workspace';
+import { DesignMyWorksDrawer } from '@/pages/ImageCanvas/DesignMyWorksDrawer';
+import type { DesignGeneratedWork, DesignGeneratedWorksPage } from '../../shared/image-workspace';
+
+vi.mock('@/lib/image-workspace', () => ({
+  fetchImageGeneratedWorks: vi.fn(),
+  resolveImageWorkspaceAssetUrl: vi.fn(),
+  saveImageWorkspaceAsset: vi.fn(),
+}));
+
+function work(id: string, medium: 'image' | 'video' = 'image', workspaceId = 'workspace-1', day = 1): DesignGeneratedWork {
+  return {
+    title: `${medium === 'video' ? '视频' : '图片'}作品${id}`,
+    workspaceTitle: `创作${workspaceId}`,
+    taskId: `task-${id}`,
+    asset: {
+      assetId: id, workspaceId, role: 'generated', mediaType: medium,
+      mimeType: medium === 'video' ? 'video/mp4' : 'image/png', width: 800, height: 600,
+      durationMilliseconds: medium === 'video' ? 83000 : null,
+      generationTaskId: `task-${id}`, createdAt: `2026-10-${String(day).padStart(2, '0')}T09:00:00Z`,
+      contentPath: `/assets/${workspaceId}/${id}`,
+    },
+  };
+}
+
+function page(works: DesignGeneratedWork[] = [], nextOffset: number | null = null, unavailableWorkspaceIds: string[] = [], historyTruncated = false): DesignGeneratedWorksPage {
+  return { works, nextOffset, unavailableWorkspaceIds, historyTruncated };
+}
+
+function deferred<T>() {
+  let resolve!: (value: T) => void;
+  const promise = new Promise<T>((settle) => { resolve = settle; });
+  return { promise, resolve };
+}
+
+function renderDrawer(overrides: Partial<Parameters<typeof DesignMyWorksDrawer>[0]> = {}) {
+  const props = { open: true, onOpenChange: vi.fn(), onReturnToCreation: vi.fn().mockResolvedValue(undefined), ...overrides };
+  return { ...render(<DesignMyWorksDrawer {...props} />), props };
+}
+
+describe('Canvas My Works drawer', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValue(page());
+    vi.mocked(resolveImageWorkspaceAssetUrl).mockImplementation(async (path) => `http://localhost${path}`);
+    vi.mocked(saveImageWorkspaceAsset).mockResolvedValue({ status: 'saved' });
+    vi.spyOn(HTMLMediaElement.prototype, 'pause').mockImplementation(() => undefined);
+  });
+  afterEach(() => {
+    cleanup();
+    vi.restoreAllMocks();
+  });
+
+  it('shows cross-project image/video labels, video duration, and filters without starting playback', async () => {
+    const image = work('image', 'image', 'dogs');
+    const video = work('video', 'video', 'space', 2);
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValue(page([image, video]));
+    renderDrawer();
+    const videoTile = await screen.findByRole('button', { name: `查看视频：${video.title}` });
+    const imageTile = screen.getByRole('button', { name: `查看图片：${image.title}` });
+    expect(within(videoTile).getByText('视频')).toBeInTheDocument();
+    expect(within(imageTile).getByText('图片')).toBeInTheDocument();
+    expect(within(videoTile).getByText('01:23')).toBeInTheDocument();
+    expect(within(imageTile).getByText('来自：创作dogs')).toBeInTheDocument();
+    await waitFor(() => expect(videoTile.querySelector('video')).toHaveAttribute('src', `http://localhost${video.asset.contentPath}`));
+    expect(videoTile.querySelector('video')).not.toHaveAttribute('autoplay');
+    expect(videoTile.querySelector('video')).not.toHaveAttribute('controls');
+    const filters = screen.getByRole('group', { name: '作品类型' });
+    fireEvent.click(within(filters).getByRole('button', { name: '视频' }));
+    expect(screen.queryByRole('button', { name: `查看图片：${image.title}` })).not.toBeInTheDocument();
+    fireEvent.click(within(filters).getByRole('button', { name: '图片' }));
+    expect(screen.queryByRole('button', { name: `查看视频：${video.title}` })).not.toBeInTheDocument();
+    fireEvent.click(within(filters).getByRole('button', { name: '全部' }));
+    expect(screen.getAllByRole('button', { name: /^查看/ })).toHaveLength(2);
+  });
+
+  it('retries the failed Workspace offset, preserves works, deduplicates and sorts every page globally', async () => {
+    const first = work('same', 'image', 'old', 1);
+    const newer = work('new', 'video', 'new', 5);
+    const differentWorkspace = work('same', 'image', 'another', 3);
+    vi.mocked(fetchImageGeneratedWorks)
+      .mockResolvedValueOnce(page([first], 12))
+      .mockRejectedValueOnce(new Error('network interrupted'))
+      .mockResolvedValueOnce(page([first, newer, differentWorkspace]));
+    renderDrawer();
+    await screen.findByRole('button', { name: `查看图片：${first.title}` });
+    fireEvent.click(screen.getByRole('button', { name: '继续加载作品' }));
+    await screen.findByRole('alert');
+    expect(screen.getByRole('button', { name: `查看图片：${first.title}` })).toBeInTheDocument();
+    fireEvent.click(screen.getByRole('button', { name: '重新加载' }));
+    await screen.findByRole('button', { name: `查看视频：${newer.title}` });
+    const tiles = screen.getAllByRole('button', { name: /^查看/ });
+    expect(tiles).toHaveLength(3);
+    expect(tiles[0]).toHaveAccessibleName(`查看视频：${newer.title}`);
+    expect(within(tiles[1]).getByText('来自：创作another')).toBeInTheDocument();
+    expect(vi.mocked(fetchImageGeneratedWorks).mock.calls.map(([offset]) => offset)).toEqual([0, 12, 12]);
+    expect(screen.queryByRole('button', { name: '继续加载作品' })).not.toBeInTheDocument();
+  });
+
+  it('continues scanning when the current filter has no matches in a partial page', async () => {
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValue(page([work('image')], 12));
+    renderDrawer();
+    await screen.findByRole('button', { name: '查看图片：图片作品image' });
+    fireEvent.click(within(screen.getByRole('group', { name: '作品类型' })).getByRole('button', { name: '视频' }));
+    expect(screen.getByText('这一批还没找到符合筛选的作品')).toBeInTheDocument();
+    expect(screen.queryByText('还没有视频作品')).not.toBeInTheDocument();
+    expect(screen.getByRole('button', { name: '继续加载作品' })).toBeEnabled();
+  });
+
+  it('distinguishes initial load failure and allows a retry', async () => {
+    vi.mocked(fetchImageGeneratedWorks).mockRejectedValueOnce(new Error('offline')).mockResolvedValueOnce(page());
+    renderDrawer();
+    expect(screen.getByRole('status')).toHaveTextContent('正在寻找你的作品');
+    await screen.findByRole('alert');
+    expect(screen.queryByText('你的第一件作品会出现在这里')).not.toBeInTheDocument();
+    fireEvent.click(screen.getByRole('button', { name: '重新加载' }));
+    await screen.findByText('你的第一件作品会出现在这里');
+    expect(fetchImageGeneratedWorks).toHaveBeenCalledTimes(2);
+  });
+
+  it('retries partial Workspace failure without removing the successful page or claiming full history', async () => {
+    const first = work('first');
+    const recovered = work('recovered', 'video');
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValueOnce(page([first], null, ['unavailable'], true))
+      .mockResolvedValueOnce(page([first, recovered], null, [], true));
+    renderDrawer();
+    await screen.findByText('较早的作品暂时无法全部读取，当前显示已找到的作品。');
+    fireEvent.click(screen.getByRole('button', { name: '重试未读到的作品' }));
+    await screen.findByRole('button', { name: `查看视频：${recovered.title}` });
+    expect(screen.queryByRole('button', { name: '重试未读到的作品' })).not.toBeInTheDocument();
+    expect(screen.getByText('较早的作品暂时无法全部读取，当前显示已找到的作品。')).toBeInTheDocument();
+    expect(screen.getAllByRole('button', { name: /^查看/ })).toHaveLength(2);
+  });
+
+  it('does not claim there are no works when older history is truncated', async () => {
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValue(page([], null, [], true));
+    renderDrawer();
+    await screen.findByText('这一批还没找到符合筛选的作品');
+    expect(screen.queryByText('你的第一件作品会出现在这里')).not.toBeInTheDocument();
+    expect(screen.getByText('较早的作品暂时无法全部读取，当前显示已找到的作品。')).toBeInTheDocument();
+  });
+
+  it('keeps earlier works when retries fail different Workspaces, then accepts a successful empty reread', async () => {
+    const a = work('a', 'image', 'workspace-a');
+    const b = work('b', 'video', 'workspace-b');
+    vi.mocked(fetchImageGeneratedWorks)
+      .mockResolvedValueOnce(page([a], null, ['workspace-b'], true))
+      .mockResolvedValueOnce(page([b], null, ['workspace-a']))
+      .mockResolvedValueOnce(page([b]));
+    renderDrawer();
+    await screen.findByRole('button', { name: `查看图片：${a.title}` });
+    fireEvent.click(screen.getByRole('button', { name: '重试未读到的作品' }));
+    await screen.findByRole('button', { name: `查看视频：${b.title}` });
+    expect(screen.getByRole('button', { name: `查看图片：${a.title}` })).toBeInTheDocument();
+    expect(screen.getByText('较早的作品暂时无法全部读取，当前显示已找到的作品。')).toBeInTheDocument();
+    fireEvent.click(screen.getByRole('button', { name: '重试未读到的作品' }));
+    await waitFor(() => expect(screen.queryByRole('button', { name: '重试未读到的作品' })).not.toBeInTheDocument());
+    expect(screen.queryByRole('button', { name: `查看图片：${a.title}` })).not.toBeInTheDocument();
+    expect(screen.getByRole('button', { name: `查看视频：${b.title}` })).toBeInTheDocument();
+    expect(screen.getByText('较早的作品暂时无法全部读取，当前显示已找到的作品。')).toBeInTheDocument();
+  });
+
+  it('aborts on close and ignores a late old result after reopening', async () => {
+    const oldRequest = deferred<DesignGeneratedWorksPage>();
+    const oldWork = work('old');
+    const freshWork = work('fresh');
+    vi.mocked(fetchImageGeneratedWorks).mockReturnValueOnce(oldRequest.promise).mockResolvedValueOnce(page([freshWork]));
+    const { rerender, props } = renderDrawer();
+    const signal = vi.mocked(fetchImageGeneratedWorks).mock.calls[0][1];
+    rerender(<DesignMyWorksDrawer {...props} open={false} />);
+    expect(signal?.aborted).toBe(true);
+    rerender(<DesignMyWorksDrawer {...props} open />);
+    await screen.findByRole('button', { name: `查看图片：${freshWork.title}` });
+    await act(async () => { oldRequest.resolve(page([oldWork])); });
+    expect(screen.queryByRole('button', { name: `查看图片：${oldWork.title}` })).not.toBeInTheDocument();
+    expect(screen.getByRole('button', { name: `查看图片：${freshWork.title}` })).toBeInTheDocument();
+  });
+
+  it('aborts a fetch on unmount and ignores its late result', async () => {
+    const pending = deferred<DesignGeneratedWorksPage>();
+    vi.mocked(fetchImageGeneratedWorks).mockReturnValue(pending.promise);
+    const { unmount, props } = renderDrawer();
+    const signal = vi.mocked(fetchImageGeneratedWorks).mock.calls[0][1];
+    unmount();
+    expect(signal?.aborted).toBe(true);
+    await act(async () => { pending.resolve(page([work('late')])); });
+    expect(screen.queryByRole('dialog')).not.toBeInTheDocument();
+    expect(props.onOpenChange).not.toHaveBeenCalled();
+  });
+
+  it('previews and downloads inside the same drawer and only closes after returning succeeds', async () => {
+    const image = work('image');
+    const returning = deferred<void>();
+    const onReturnToCreation = vi.fn().mockReturnValue(returning.promise);
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValue(page([image]));
+    const { props } = renderDrawer({ onReturnToCreation });
+    fireEvent.click(await screen.findByRole('button', { name: `查看图片：${image.title}` }));
+    expect(screen.getAllByRole('dialog')).toHaveLength(1);
+    await screen.findByRole('img', { name: image.title });
+    fireEvent.click(screen.getByRole('button', { name: '保存到电脑' }));
+    await screen.findByText('作品已保存到电脑');
+    expect(saveImageWorkspaceAsset).toHaveBeenCalledExactlyOnceWith(image.asset);
+    expect(props.onOpenChange).not.toHaveBeenCalled();
+    fireEvent.click(screen.getByRole('button', { name: '回到这次创作' }));
+    expect(onReturnToCreation).toHaveBeenCalledExactlyOnceWith(image);
+    expect(props.onOpenChange).not.toHaveBeenCalled();
+    await act(async () => { returning.resolve(); });
+    expect(props.onOpenChange).toHaveBeenCalledExactlyOnceWith(false);
+  });
+
+  it('preserves the preview and shows the friendly callback failure, then permits retry', async () => {
+    const image = work('image');
+    const onReturnToCreation = vi.fn().mockRejectedValueOnce(new Error('先发送或清空当前输入，再回到这次创作。')).mockResolvedValueOnce(undefined);
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValue(page([image]));
+    const { props } = renderDrawer({ onReturnToCreation });
+    fireEvent.click(await screen.findByRole('button', { name: `查看图片：${image.title}` }));
+    fireEvent.click(screen.getByRole('button', { name: '回到这次创作' }));
+    await screen.findByText('先发送或清空当前输入，再回到这次创作。');
+    expect(screen.getByTestId('my-works-preview')).toBeInTheDocument();
+    expect(props.onOpenChange).not.toHaveBeenCalled();
+    fireEvent.click(screen.getByRole('button', { name: '回到这次创作' }));
+    await waitFor(() => expect(props.onOpenChange).toHaveBeenCalledExactlyOnceWith(false));
+    expect(onReturnToCreation).toHaveBeenCalledTimes(2);
+  });
+
+  it('keeps media and download failures recoverable inside the preview', async () => {
+    const image = work('image');
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValue(page([image]));
+    vi.mocked(resolveImageWorkspaceAssetUrl).mockRejectedValueOnce(new Error('thumbnail unavailable'))
+      .mockRejectedValueOnce(new Error('preview unavailable'))
+      .mockResolvedValue(`http://localhost${image.asset.contentPath}`);
+    vi.mocked(saveImageWorkspaceAsset).mockRejectedValueOnce(new Error('disk unavailable')).mockResolvedValueOnce({ status: 'saved' });
+    renderDrawer();
+    fireEvent.click(await screen.findByRole('button', { name: `查看图片：${image.title}` }));
+    await screen.findByText('作品暂时没能打开。');
+    fireEvent.click(screen.getByRole('button', { name: '重新加载' }));
+    const previewImage = await screen.findByRole('img', { name: image.title });
+    fireEvent.load(previewImage);
+    expect(screen.queryByText('作品暂时没能打开。')).not.toBeInTheDocument();
+    fireEvent.click(screen.getByRole('button', { name: '保存到电脑' }));
+    await screen.findByText('作品没有保存成功，请再试一次。');
+    expect(screen.getByTestId('my-works-preview')).toBeInTheDocument();
+    fireEvent.click(screen.getByRole('button', { name: '保存到电脑' }));
+    await screen.findByText('作品已保存到电脑');
+    expect(saveImageWorkspaceAsset).toHaveBeenCalledTimes(2);
+  });
+
+  it('stops video preview on return to the list and on close', async () => {
+    const video = work('video', 'video');
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValue(page([video]));
+    const { props, rerender, unmount } = renderDrawer();
+    fireEvent.click(await screen.findByRole('button', { name: `查看视频：${video.title}` }));
+    await waitFor(() => expect(screen.getByTestId('my-works-preview').querySelector('video')).toHaveAttribute('controls'));
+    expect(screen.getByTestId('my-works-preview').querySelector('video')).not.toHaveAttribute('autoplay');
+    fireEvent.click(screen.getByRole('button', { name: '返回作品' }));
+    expect(HTMLMediaElement.prototype.pause).toHaveBeenCalledTimes(1);
+    fireEvent.click(screen.getByRole('button', { name: `查看视频：${video.title}` }));
+    await waitFor(() => expect(screen.getByTestId('my-works-preview').querySelector('video')).toHaveAttribute('controls'));
+    rerender(<DesignMyWorksDrawer {...props} open={false} />);
+    expect(HTMLMediaElement.prototype.pause).toHaveBeenCalledTimes(2);
+    rerender(<DesignMyWorksDrawer {...props} open />);
+    fireEvent.click(await screen.findByRole('button', { name: `查看视频：${video.title}` }));
+    await waitFor(() => expect(screen.getByTestId('my-works-preview').querySelector('video')).toHaveAttribute('controls'));
+    unmount();
+    expect(HTMLMediaElement.prototype.pause).toHaveBeenCalledTimes(3);
+  });
+
+  it('ignores a late return callback after unmount and restores the trigger focus on close', async () => {
+    const image = work('image');
+    const returning = deferred<void>();
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValue(page([image]));
+    const triggerRef = createRef<HTMLButtonElement>();
+    const props = { open: true, onOpenChange: vi.fn(), onReturnToCreation: vi.fn().mockReturnValue(returning.promise), triggerRef };
+    const { rerender, unmount } = render(<><button ref={triggerRef}>我的作品入口</button><DesignMyWorksDrawer {...props} /></>);
+    fireEvent.click(await screen.findByRole('button', { name: `查看图片：${image.title}` }));
+    fireEvent.click(screen.getByRole('button', { name: '回到这次创作' }));
+    rerender(<><button ref={triggerRef}>我的作品入口</button><DesignMyWorksDrawer {...props} open={false} /></>);
+    await waitFor(() => expect(triggerRef.current).toHaveFocus());
+    unmount();
+    await act(async () => { returning.resolve(); });
+    expect(props.onOpenChange).not.toHaveBeenCalled();
+  });
+});
diff --git a/tests/unit/image-canvas-page.test.tsx b/tests/unit/image-canvas-page.test.tsx
index a6719635..c94b8632 100644
--- a/tests/unit/image-canvas-page.test.tsx
+++ b/tests/unit/image-canvas-page.test.tsx
@@ -1,6 +1,7 @@
 import { act, fireEvent, render, screen, waitFor, within } from '@testing-library/react';
 import { beforeEach, describe, expect, it, vi } from 'vitest';
-import { ImageWorkspaceApiError } from '@/lib/image-workspace';
+import { fetchImageGeneratedWorks, ImageWorkspaceApiError } from '@/lib/image-workspace';
+import type { DesignGeneratedWork, DesignGenerationTask } from '../../shared/image-workspace';
 import { ImageCanvas } from '@/pages/ImageCanvas';
 import { useAuthStore } from '@/stores/auth';
 import { useImagePromptMuseumStore } from '@/stores/image-prompt-museum';
@@ -22,6 +23,7 @@ vi.mock('@/lib/image-workspace', async (importOriginal) => {
   const original = await importOriginal<typeof import('@/lib/image-workspace')>();
   return {
     ...original,
+    fetchImageGeneratedWorks: vi.fn(),
     resolveImageWorkspaceAssetUrl: vi.fn().mockReturnValue(new Promise(() => undefined)),
     saveImageWorkspaceAsset: vi.fn().mockResolvedValue({ status: 'saved' }),
     uploadImageWorkspaceAsset: vi.fn(),
@@ -52,6 +54,7 @@ function prepareWorkspace(overrides = {}) {
     renameProject: vi.fn().mockResolvedValue(workspace),
     deleteProject: vi.fn().mockResolvedValue({ workspaceId: 'workspace-1', deleted: true }),
     selectProject: vi.fn().mockResolvedValue(undefined),
+    selectProjectForWork: vi.fn().mockResolvedValue(undefined),
     applyFieldOperations: vi.fn().mockResolvedValue(workspace),
     sendChat: vi.fn().mockResolvedValue(workspace),
     resolveDecisionPrompt: vi.fn().mockResolvedValue(workspace),
@@ -81,6 +84,7 @@ function prepareWorkspace(overrides = {}) {
 describe('AI Design Canvas page', () => {
   beforeEach(() => {
     vi.clearAllMocks();
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValue({ works: [], nextOffset: null, unavailableWorkspaceIds: [], historyTruncated: false });
     setViewport(false);
     useAuthStore.setState({
       initialized: true,
@@ -100,6 +104,71 @@ describe('AI Design Canvas page', () => {
     useImageWorkspaceStore.getState().reset();
   });
 
+  it('opens and closes My Works without replacing the editing workspace or losing local drafts', async () => {
+    const { actions } = prepareWorkspace();
+    render(<ImageCanvas />);
+    fireEvent.click(screen.getByRole('button', { name: '展开作品工作区' }));
+    fireEvent.change(screen.getByRole('textbox', { name: '创作提示词' }), { target: { value: '还没提交的新画面' } });
+    useImageWorkspaceStore.getState().setChatDraft('未发送的想法');
+    fireEvent.click(screen.getByRole('button', { name: '我的作品' }));
+    await screen.findByRole('dialog', { name: '我的作品' });
+    fireEvent.click(screen.getByRole('button', { name: '关闭我的作品' }));
+    await waitFor(() => expect(screen.queryByRole('dialog', { name: '我的作品' })).not.toBeInTheDocument());
+    expect(screen.getByRole('textbox', { name: '创作提示词' })).toHaveValue('还没提交的新画面');
+    expect(useImageWorkspaceStore.getState().chatDraft).toBe('未发送的想法');
+    expect(screen.getByTestId('canvas-workspace-split')).toHaveAttribute('data-focus', 'works');
+    expect(screen.getByRole('button', { name: '我的作品' })).toHaveFocus();
+    expect(actions.selectProject).not.toHaveBeenCalled();
+    expect(actions.applyFieldOperations).not.toHaveBeenCalled();
+  });
+
+  it('clears the drawer on account changes and ignores the former account collection', async () => {
+    let resolve!: (value: Awaited<ReturnType<typeof fetchImageGeneratedWorks>>) => void;
+    vi.mocked(fetchImageGeneratedWorks).mockImplementationOnce(() => new Promise((settle) => { resolve = settle; }));
+    prepareWorkspace();
+    render(<ImageCanvas />);
+    fireEvent.click(screen.getByRole('button', { name: '我的作品' }));
+    await screen.findByRole('dialog', { name: '我的作品' });
+    await act(async () => {
+      useAuthStore.setState({ user: { username: 'another', userId: 'another-account', tenantId: null, deptId: null, authorities: [] } });
+      resolve({ works: [], nextOffset: null, unavailableWorkspaceIds: [], historyTruncated: false });
+    });
+    await waitFor(() => expect(screen.queryByRole('dialog', { name: '我的作品' })).not.toBeInTheDocument());
+  });
+
+  it('returns to the source task and opens its history record in the compact work pane', async () => {
+    const quote = designQuoteFixture();
+    const work: DesignGeneratedWork = {
+      title: '这一次的作品', workspaceTitle: '咖啡机新品主视觉', taskId: 'source-task',
+      asset: { assetId: 'source-result', workspaceId: 'workspace-1', role: 'generated', mediaType: 'image',
+        mimeType: 'image/png', width: 800, height: 600, durationMilliseconds: null, generationTaskId: 'source-task',
+        createdAt: '2026-10-14T09:00:00Z', contentPath: '/api/works/image-workspace/workspaces/workspace-1/assets/source-result/content' },
+    };
+    const task: DesignGenerationTask = {
+      taskId: work.taskId, quoteId: quote.quoteId, status: 'succeeded', taskRevision: 1,
+      specificationRevision: quote.specificationRevision, specificationRevisionId: quote.specificationRevisionId,
+      specificationDigest: quote.specificationDigest, medium: 'image', compilerVersion: quote.compilerVersion,
+      outputSummary: quote.outputSummary, maximumCustomerChargeAtoms: 100,
+      customerBilling: { quotedAtoms: 100, heldAtoms: 0, chargedAtoms: 100, refundedAtoms: 0, pendingResolutionAtoms: 0 },
+      customerHoldExpiresAt: quote.expiresAt, resolutionDeadlineAt: null,
+      progress: { stage: 'completed', completedRequiredSteps: 1, totalRequiredSteps: 1 }, executionHealth: 'normal',
+      cancellation: { state: 'unavailable', outcome: null }, issues: [], resultAssetIds: [work.asset.assetId],
+      nextActions: ['view_result'], createdAt: work.asset.createdAt,
+    };
+    const { actions } = prepareWorkspace({ tasks: [task], assets: [work.asset] });
+    vi.mocked(fetchImageGeneratedWorks).mockResolvedValue({ works: [work], nextOffset: null, unavailableWorkspaceIds: [], historyTruncated: false });
+    render(<ImageCanvas />);
+    fireEvent.click(screen.getByRole('button', { name: '我的作品' }));
+    fireEvent.click(await screen.findByRole('button', { name: '查看图片：这一次的作品' }));
+    fireEvent.click(screen.getByRole('button', { name: '回到这次创作' }));
+    await waitFor(() => expect(screen.queryByRole('dialog', { name: '我的作品' })).not.toBeInTheDocument());
+    expect(actions.selectProjectForWork).toHaveBeenCalledWith('workspace-1', 'source-task');
+    expect(screen.getByTestId('canvas-workspace-split')).toHaveAttribute('data-compact-panel', 'works');
+    expect(screen.getByTestId('design-plan-history-source-task')).toHaveAttribute('open');
+    expect(actions.confirmGeneration).not.toHaveBeenCalled();
+    expect(actions.applyFieldOperations).not.toHaveBeenCalled();
+  });
+
   it('keeps the loading shell until the first Workspace bootstrap settles', () => {
     const load = vi.fn();
     useImageWorkspaceStore.setState({ status: 'idle', workspace: null, bootstrap: null, load });
diff --git a/tests/unit/image-workspace-route.test.ts b/tests/unit/image-workspace-route.test.ts
index b1cbcc01..3d55dc40 100644
--- a/tests/unit/image-workspace-route.test.ts
+++ b/tests/unit/image-workspace-route.test.ts
@@ -137,6 +137,45 @@ describe('AI design V2 Main route boundary', () => {
     expect(response.json()).toMatchObject({ code: 'IMAGE_WORKSPACE_UNAVAILABLE' });
   });
 
+  it('reads account generated works pages without bootstrapping or changing the active project', async () => {
+    const page = { works: [], nextOffset: 120, unavailableWorkspaceIds: ['unavailable'], historyTruncated: true };
+    const module = moduleFixture({ listGeneratedWorks: vi.fn().mockResolvedValue(page) });
+    const response = createResponse();
+    await handleImageWorkspaceRoutes(
+      createRequest('GET'), response.res,
+      new URL('http://127.0.0.1/api/works/image-workspace/generated-works?offset=108'),
+      context(module),
+    );
+    expect(response.statusCode).toBe(200);
+    expect(response.json()).toMatchObject({ success: true, data: page });
+    expect(module.listGeneratedWorks).toHaveBeenCalledWith(108);
+    expect(module.bootstrap).not.toHaveBeenCalled();
+    expect(module.getWorkspace).not.toHaveBeenCalled();
+  });
+
+  it('returns 501 when the optional generated works capability is absent', async () => {
+    const response = createResponse();
+    await handleImageWorkspaceRoutes(
+      createRequest('GET'), response.res,
+      new URL('http://127.0.0.1/api/works/image-workspace/generated-works'),
+      context(moduleFixture()),
+    );
+    expect(response.statusCode).toBe(501);
+    expect(response.json()).toMatchObject({ code: 'DESIGN_GENERATED_WORKS_UNAVAILABLE' });
+  });
+
+  it.each(['-1', '1.5', 'invalid', '9007199254740992'])('rejects malformed generated works offset %s', async (offset) => {
+    const module = moduleFixture({ listGeneratedWorks: vi.fn() });
+    const response = createResponse();
+    await handleImageWorkspaceRoutes(
+      createRequest('GET'), response.res,
+      new URL(`http://127.0.0.1/api/works/image-workspace/generated-works?offset=${offset}`),
+      context(module),
+    );
+    expect(response.statusCode).toBe(400);
+    expect(module.listGeneratedWorks).not.toHaveBeenCalled();
+  });
+
   it('maps Workspace CRUD without exposing legacy Conversation routes', async () => {
     const module = moduleFixture();
     const createResponseValue = createResponse();
diff --git a/tests/unit/image-workspace-store.test.ts b/tests/unit/image-workspace-store.test.ts
index f3eec307..a7b8ddb6 100644
--- a/tests/unit/image-workspace-store.test.ts
+++ b/tests/unit/image-workspace-store.test.ts
@@ -18,6 +18,12 @@ import {
   designSummaryFixture,
   designWorkspaceFixture,
 } from '../fixtures/design-workspace-v2';
+import type { DesignGenerationTask, DesignWorkspace } from '../../shared/image-workspace';
+
+const authMock = vi.hoisted(() => ({
+  user: { userId: 'user-1', username: 'account-one' } as { userId: string; username: string } | null,
+  authenticated: true,
+}));
 
 vi.mock('@/lib/image-workspace', async (importOriginal) => {
   const original = await importOriginal<typeof import('@/lib/image-workspace')>();
@@ -41,7 +47,7 @@ vi.mock('@/lib/host-api', async (importOriginal) => {
 
 vi.mock('@/stores/auth', () => ({
   useAuthStore: {
-    getState: () => ({ isAuthenticated: () => true }),
+    getState: () => ({ user: authMock.user, isAuthenticated: () => authMock.authenticated }),
   },
 }));
 
@@ -95,6 +101,8 @@ async function loadedStore(eventSource = new FakeEventSource()) {
 describe('V2 Living Form store', () => {
   beforeEach(() => {
     vi.clearAllMocks();
+    authMock.user = { userId: 'user-1', username: 'account-one' };
+    authMock.authenticated = true;
     useImageWorkspaceStore.getState().reset();
     const workspace = designWorkspaceFixture();
     fetchBootstrapMock.mockResolvedValue(designBootstrapFixture());
@@ -121,6 +129,152 @@ describe('V2 Living Form store', () => {
     expect(openEventsMock).toHaveBeenCalledWith('workspace-1', 'session-1', undefined);
   });
 
+  describe('returning to the source of a generated work', () => {
+    function sourceWorkspace(workspaceId = 'workspace-2'): DesignWorkspace {
+      const outputSummary = designQuoteFixture().outputSummary;
+      const task: DesignGenerationTask = {
+        taskId: 'source-task', quoteId: 'source-quote', status: 'succeeded', taskRevision: 1,
+        specificationRevision: 3, specificationRevisionId: 'spec-3', specificationDigest: 'a'.repeat(64),
+        medium: 'image', compilerVersion: 'design-compiler-v2', outputSummary,
+        maximumCustomerChargeAtoms: 100,
+        customerBilling: { quotedAtoms: 100, heldAtoms: 0, chargedAtoms: 100, refundedAtoms: 0, pendingResolutionAtoms: 0 },
+        customerHoldExpiresAt: '2026-10-14T10:00:00Z', resolutionDeadlineAt: null,
+        progress: { stage: 'completed', completedRequiredSteps: 1, totalRequiredSteps: 1 },
+        executionHealth: 'normal', cancellation: { state: 'unavailable', outcome: null },
+        issues: [], resultAssetIds: ['source-asset'], nextActions: ['view_result'], createdAt: '2026-10-14T10:00:00Z',
+      };
+      return designWorkspaceFixture({
+        workspace: designSummaryFixture({ workspaceId, directionId: `direction-${workspaceId}`, sessionId: `session-${workspaceId}` }),
+        form: designFormFixture({ workspaceId, directionId: `direction-${workspaceId}` }),
+        tasks: [task],
+      });
+    }
+
+    it.each([
+      new ImageWorkspaceApiError(404, 'design_workspace_not_found', 'not found'),
+      new Error('read failed'),
+    ])('preserves the current project, drafts, and events on a failed source read', async (error) => {
+      const source = await loadedStore();
+      const previous = useImageWorkspaceStore.getState();
+      const eventCalls = openEventsMock.mock.calls.length;
+      fetchProjectMock.mockRejectedValueOnce(error);
+      await expect(previous.selectProjectForWork('workspace-2', 'source-task')).rejects.toThrow(/来源对话/);
+      expect(useImageWorkspaceStore.getState()).toBe(previous);
+      expect(source.close).not.toHaveBeenCalled();
+      expect(openEventsMock).toHaveBeenCalledTimes(eventCalls);
+    });
+
+    it.each(['missing-task', 'wrong-workspace'])('keeps the original state when source validation fails: %s', async (mismatch) => {
+      const source = await loadedStore();
+      const previous = useImageWorkspaceStore.getState();
+      fetchProjectMock.mockResolvedValueOnce(mismatch === 'wrong-workspace'
+        ? sourceWorkspace('workspace-3') : { ...sourceWorkspace(), tasks: [] });
+      await expect(previous.selectProjectForWork('workspace-2', 'source-task')).rejects.toThrow(/找到这件作品/);
+      expect(useImageWorkspaceStore.getState()).toBe(previous);
+      expect(source.close).not.toHaveBeenCalled();
+    });
+
+    it.each(['chat', 'field'])('rejects existing %s drafts before reading the source', async (kind) => {
+      const source = await loadedStore();
+      if (kind === 'chat') useImageWorkspaceStore.getState().setChatDraft('keep this draft');
+      else useImageWorkspaceStore.getState().setFieldDraft('content.concept', 'keep this field');
+      const previous = useImageWorkspaceStore.getState();
+      fetchProjectMock.mockClear();
+      await expect(previous.selectProjectForWork('workspace-2', 'source-task')).rejects.toThrow(/未发送或未保存/);
+      expect(useImageWorkspaceStore.getState()).toBe(previous);
+      expect(fetchProjectMock).not.toHaveBeenCalled();
+      expect(source.close).not.toHaveBeenCalled();
+    });
+
+    it.each(['chat', 'field'])('preserves a %s draft added while a source read is pending', async (kind) => {
+      const source = await loadedStore();
+      const read = deferred<DesignWorkspace>();
+      fetchProjectMock.mockReturnValueOnce(read.promise);
+      const selecting = useImageWorkspaceStore.getState().selectProjectForWork('workspace-2', 'source-task');
+      if (kind === 'chat') useImageWorkspaceStore.getState().setChatDraft('new draft during read');
+      else useImageWorkspaceStore.getState().setFieldDraft('content.concept', 'new field during read');
+      const previous = useImageWorkspaceStore.getState();
+      read.resolve(sourceWorkspace());
+      await expect(selecting).rejects.toThrow(/未发送或未保存/);
+      expect(useImageWorkspaceStore.getState()).toBe(previous);
+      expect(source.close).not.toHaveBeenCalled();
+    });
+
+    it('rejects a late source read after store reset without reviving any project', async () => {
+      await loadedStore();
+      const read = deferred<DesignWorkspace>();
+      fetchProjectMock.mockReturnValueOnce(read.promise);
+      const selecting = useImageWorkspaceStore.getState().selectProjectForWork('workspace-2', 'source-task');
+      useImageWorkspaceStore.getState().reset();
+      const resetState = useImageWorkspaceStore.getState();
+      read.resolve(sourceWorkspace());
+      await expect(selecting).rejects.toThrow(/已改变/);
+      expect(useImageWorkspaceStore.getState()).toBe(resetState);
+    });
+
+    it('does not replace a newer project selection with a late source read', async () => {
+      await loadedStore();
+      const read = deferred<DesignWorkspace>();
+      fetchProjectMock.mockReturnValueOnce(read.promise).mockResolvedValueOnce(sourceWorkspace('workspace-3'));
+      const selecting = useImageWorkspaceStore.getState().selectProjectForWork('workspace-2', 'source-task');
+      await useImageWorkspaceStore.getState().selectProject('workspace-3');
+      const newerState = useImageWorkspaceStore.getState();
+      read.resolve(sourceWorkspace());
+      await expect(selecting).rejects.toThrow(/已改变/);
+      expect(useImageWorkspaceStore.getState()).toBe(newerState);
+    });
+
+    it.each(['different-owner', 'new-reference', 'logout'])('rejects a late source read after authentication changes: %s', async (change) => {
+      const source = await loadedStore();
+      const read = deferred<DesignWorkspace>();
+      fetchProjectMock.mockReturnValueOnce(read.promise);
+      const selecting = useImageWorkspaceStore.getState().selectProjectForWork('workspace-2', 'source-task');
+      if (change === 'different-owner') authMock.user = { userId: 'user-2', username: 'account-two' };
+      else if (change === 'new-reference') authMock.user = { userId: 'user-1', username: 'account-one' };
+      else authMock.authenticated = false;
+      const previous = useImageWorkspaceStore.getState();
+      read.resolve(sourceWorkspace());
+      await expect(selecting).rejects.toThrow(/登录账号已改变/);
+      expect(useImageWorkspaceStore.getState()).toBe(previous);
+      expect(source.close).not.toHaveBeenCalled();
+    });
+
+    it('commits a validated source project before replacing its event stream', async () => {
+      const previousSource = await loadedStore();
+      const read = deferred<DesignWorkspace>();
+      const newSource = new FakeEventSource();
+      const target = sourceWorkspace();
+      fetchProjectMock.mockReturnValueOnce(read.promise);
+      openEventsMock.mockResolvedValueOnce(newSource as unknown as EventSource);
+      const previous = useImageWorkspaceStore.getState();
+      const selecting = previous.selectProjectForWork('workspace-2', 'source-task');
+      expect(useImageWorkspaceStore.getState()).toBe(previous);
+      expect(previousSource.close).not.toHaveBeenCalled();
+      read.resolve(target);
+      await selecting;
+      expect(previousSource.close).toHaveBeenCalledOnce();
+      expect(useImageWorkspaceStore.getState()).toMatchObject({
+        status: 'ready', activeWorkspaceId: 'workspace-2', workspace: target,
+        chatDraft: '', fieldDrafts: {}, assistantActivities: {}, assistantStreams: {}, quoteBlockers: [], lastEventId: null,
+      });
+      expect(openEventsMock).toHaveBeenLastCalledWith('workspace-2', 'session-workspace-2', undefined);
+    });
+
+    it('validates a same-project work without reading, reconnecting, or touching drafts', async () => {
+      const source = await loadedStore();
+      useImageWorkspaceStore.setState({ workspace: sourceWorkspace('workspace-1'), chatDraft: 'keep draft', fieldDrafts: { 'content.concept': 'keep field' } });
+      const previous = useImageWorkspaceStore.getState();
+      fetchProjectMock.mockClear();
+      const eventCalls = openEventsMock.mock.calls.length;
+      await previous.selectProjectForWork('workspace-1', 'source-task');
+      expect(useImageWorkspaceStore.getState()).toBe(previous);
+      await expect(previous.selectProjectForWork('workspace-1', 'missing-task')).rejects.toThrow(/找到这件作品/);
+      expect(fetchProjectMock).not.toHaveBeenCalled();
+      expect(source.close).not.toHaveBeenCalled();
+      expect(openEventsMock).toHaveBeenCalledTimes(eventCalls);
+    });
+  });
+
   it('closes an obsolete event source when a replacement connection wins the race', async () => {
     const workspace = designWorkspaceFixture();
     useImageWorkspaceStore.setState({
diff --git a/tests/unit/works-square-generated-works.test.ts b/tests/unit/works-square-generated-works.test.ts
new file mode 100644
index 00000000..fb8a8f93
--- /dev/null
+++ b/tests/unit/works-square-generated-works.test.ts
@@ -0,0 +1,344 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { WorksSquareDesignWorkspace } from '@electron/image-workspace/works-square-workspace';
+import { designValuesFixture } from '../fixtures/design-workspace-v2';
+
+const session = vi.hoisted(() => ({
+  token: vi.fn(),
+  binding: vi.fn(),
+  current: vi.fn(),
+}));
+
+vi.mock('@electron/services/works-square-session', () => ({
+  getValidWorksSquareAccessToken: session.token,
+  getWorksSquareAccountBinding: session.binding,
+  isCurrentWorksSquareAccountBinding: session.current,
+}));
+
+function json(payload: unknown, status = 200): Response {
+  return new Response(JSON.stringify(payload), {
+    status,
+    headers: { 'Content-Type': 'application/json' },
+  });
+}
+
+function summary(id: string) {
+  return {
+    workspace_id: id,
+    client_workspace_id: `client-${id}`,
+    title: `Title ${id}`,
+    direction_id: `direction-${id}`,
+    session_id: `session-${id}`,
+    direction_revision: 4,
+    specification_revision: 3,
+    workspace_view_revision: 6,
+    updated_at: '2026-10-14T10:00:00Z',
+  };
+}
+
+function asset(
+  id: string,
+  taskId: string | null,
+  overrides: Record<string, unknown> = {},
+) {
+  return {
+    asset_id: id,
+    role: 'generated',
+    media_type: 'image',
+    mime_type: 'image/png',
+    width: 720,
+    height: 1280,
+    duration_milliseconds: null,
+    generation_task_id: taskId,
+    created_at: '2026-10-14T10:00:00Z',
+    ...overrides,
+  };
+}
+
+function task(id: string, resultIds: string[], status = 'succeeded') {
+  return {
+    task_id: id,
+    quote_id: `quote-${id}`,
+    status,
+    task_revision: 1,
+    specification_revision: 3,
+    specification_revision_id: 'spec-3',
+    specification_digest: 'a'.repeat(64),
+    medium: 'image',
+    compiler_version: 'design-compiler-v2',
+    output_summary: {
+      medium: 'image',
+      strategy: 'direct',
+      aspect_ratio: '9:16',
+      output_count: 1,
+      delivery_format: 'PNG',
+      duration_seconds: null,
+      required_output_roles: ['primary'],
+    },
+    maximum_customer_charge_atoms: 100,
+    customer_billing: {
+      quoted_atoms: 100,
+      held_atoms: 0,
+      charged_atoms: 100,
+      refunded_atoms: 0,
+      pending_resolution_atoms: 0,
+    },
+    customer_hold_expires_at: '2026-10-14T10:00:00Z',
+    resolution_deadline_at: null,
+    progress: { stage: 'completed', completed_required_steps: 1, total_required_steps: 1 },
+    execution_health: 'normal',
+    cancellation: { state: 'unavailable', outcome: null },
+    issues: [],
+    result_asset_ids: resultIds,
+    next_actions: ['view_result'],
+    created_at: '2026-10-14T10:00:00Z',
+  };
+}
+
+function detail(
+  id: string,
+  assets: ReturnType<typeof asset>[] = [],
+  tasks: ReturnType<typeof task>[] = [],
+) {
+  return {
+    workspace: summary(id),
+    form: {
+      workspace_id: id,
+      direction_id: `direction-${id}`,
+      direction_revision: 4,
+      raw_turn_sequence: 0,
+      specification_revision: 3,
+      workspace_view_revision: 6,
+      specification_revision_id: 'spec-3',
+      specification_digest: 'a'.repeat(64),
+      specification: { schema_version: 1, values: designValuesFixture, field_decisions: {} },
+      decision_prompts: [],
+      active_quotes: [],
+      recent_change_set: { interaction_id: 'interaction-1', changes: [] },
+    },
+    turns: [],
+    assets,
+    tasks,
+  };
+}
+
+function adapter(fetchMock: ReturnType<typeof vi.fn>): WorksSquareDesignWorkspace {
+  return new WorksSquareDesignWorkspace({
+    apiBaseUrl: 'https://works.example',
+    fetchImpl: fetchMock as unknown as typeof fetch,
+  });
+}
+
+describe('account generated works scan', () => {
+  beforeEach(() => {
+    vi.resetAllMocks();
+    session.token.mockResolvedValue('fixture-credential');
+    session.binding.mockReturnValue({ accountKey: 'account-a', epoch: 1 });
+    session.current.mockReturnValue(true);
+  });
+
+  afterEach(() => {
+    vi.useRealTimers();
+  });
+
+  it('includes only linked successful outputs, preserves actual media, and sorts newest first', async () => {
+    const fetchMock = vi.fn(async (input: string | URL, init?: RequestInit) => {
+      expect(init?.method ?? 'GET').toBe('GET');
+      if (String(input).includes('?')) return json([summary('one'), summary('two')]);
+      if (String(input).endsWith('/one')) return json(detail('one', [
+        asset('image', 'done'),
+        asset('uploaded', 'done', { role: 'uploaded' }),
+        asset('failed-output', 'failed'),
+        asset('running-output', 'running'),
+        asset('intermediate', 'done'),
+        asset('mismatched', 'other'),
+      ], [
+        task('done', ['image', 'image', 'uploaded', 'mismatched']),
+        task('failed', ['failed-output'], 'failed'),
+        task('running', ['running-output'], 'running'),
+      ]));
+      return json(detail('two', [asset('video', 'video-task', {
+        media_type: 'video',
+        mime_type: 'video/mp4',
+        duration_milliseconds: 6000,
+        created_at: '2026-10-14T11:00:00Z',
+      })], [task('video-task', ['video'])]));
+    });
+    const result = await adapter(fetchMock).listGeneratedWorks();
+    expect(result.works.map((work) => [work.asset.assetId, work.asset.mediaType, work.taskId]))
+      .toEqual([['video', 'video', 'video-task'], ['image', 'image', 'done']]);
+    expect(result.works[0]).toMatchObject({
+      workspaceTitle: 'Title two',
+      title: 'Title two',
+      asset: { workspaceId: 'two', contentPath: '/api/works/image-workspace/workspaces/two/assets/video/content' },
+    });
+    expect(result).toMatchObject({ nextOffset: null, unavailableWorkspaceIds: [], historyTruncated: false });
+    expect(session.token).toHaveBeenCalledTimes(1);
+    for (const [, init] of fetchMock.mock.calls) {
+      expect(new Headers(init?.headers).get('Authorization')).toBe('Bearer fixture-credential');
+    }
+  });
+
+  it('scans beyond bootstrap page 100 with twelve details and a lookahead cursor', async () => {
+    const fetchMock = vi.fn(async (input: string | URL) => {
+      const url = new URL(String(input));
+      if (url.search) {
+        expect(url.searchParams.get('limit')).toBe('13');
+        expect(url.searchParams.get('offset')).toBe('108');
+        return json(Array.from({ length: 13 }, (_, index) => summary(`workspace-${108 + index}`)));
+      }
+      const id = url.pathname.split('/').at(-1)!;
+      return json(detail(id));
+    });
+    await expect(adapter(fetchMock).listGeneratedWorks(108)).resolves.toEqual({
+      works: [], nextOffset: 120, unavailableWorkspaceIds: [], historyTruncated: false,
+    });
+    expect(fetchMock).toHaveBeenCalledTimes(13);
+    expect(fetchMock.mock.calls.some(([input]) => String(input).endsWith('/workspace-120'))).toBe(false);
+  });
+
+  it('caps detail reads at three concurrent requests', async () => {
+    let active = 0;
+    let maximum = 0;
+    const releases: Array<() => void> = [];
+    const fetchMock = vi.fn(async (input: string | URL) => {
+      const url = new URL(String(input));
+      if (url.search) return json(Array.from({ length: 12 }, (_, index) => summary(String(index))));
+      active += 1;
+      maximum = Math.max(maximum, active);
+      await new Promise<void>((resolve) => releases.push(resolve));
+      active -= 1;
+      return json(detail(url.pathname.split('/').at(-1)!));
+    });
+    const result = adapter(fetchMock).listGeneratedWorks();
+    for (let batch = 0; batch < 4; batch += 1) {
+      await vi.waitFor(() => expect(releases).toHaveLength(3));
+      releases.splice(0).forEach((release) => release());
+    }
+    await result;
+    expect(maximum).toBe(3);
+  });
+
+  it('ends the entire page in thirty seconds even when fetch ignores abort, then stops detail fanout', async () => {
+    vi.useFakeTimers();
+    const detailSignals: AbortSignal[] = [];
+    const fetchMock = vi.fn(async (input: string | URL, init?: RequestInit) => {
+      const url = new URL(String(input));
+      if (url.search) {
+        await new Promise<void>((resolve) => setTimeout(resolve, 20_000));
+        return json(Array.from({ length: 12 }, (_, index) => summary(String(index))));
+      }
+      detailSignals.push(init!.signal!);
+      // Deliberately ignore the signal and complete after the page has expired.
+      await new Promise<void>((resolve) => setTimeout(resolve, 40_000));
+      return json(detail(url.pathname.split('/').at(-1)!));
+    });
+    const result = adapter(fetchMock).listGeneratedWorks();
+    const finished = vi.fn();
+    void result.then(finished, finished);
+    const failure = expect(result).rejects.toMatchObject({
+      status: 504, code: 'DESIGN_WORKSPACE_REQUEST_TIMEOUT',
+    });
+    await vi.advanceTimersByTimeAsync(29_999);
+    expect(finished).not.toHaveBeenCalled();
+    expect(fetchMock).toHaveBeenCalledTimes(4);
+    await vi.advanceTimersByTimeAsync(1);
+    await failure;
+    expect(detailSignals).toHaveLength(3);
+    expect(detailSignals.every((signal) => signal.aborted)).toBe(true);
+    await vi.advanceTimersByTimeAsync(40_000);
+    expect(fetchMock).toHaveBeenCalledTimes(4);
+  });
+
+  it('includes credential acquisition in the page deadline and starts no reads after a late credential', async () => {
+    vi.useFakeTimers();
+    session.token.mockImplementation(async () => {
+      await new Promise<void>((resolve) => setTimeout(resolve, 40_000));
+      return 'fixture-credential';
+    });
+    const fetchMock = vi.fn();
+    const failure = expect(adapter(fetchMock).listGeneratedWorks()).rejects.toMatchObject({
+      status: 504, code: 'DESIGN_WORKSPACE_REQUEST_TIMEOUT',
+    });
+    await vi.advanceTimersByTimeAsync(30_000);
+    await failure;
+    await vi.advanceTimersByTimeAsync(10_000);
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+
+  it('includes reading detail response bodies in the shared page deadline', async () => {
+    vi.useFakeTimers();
+    const fetchMock = vi.fn(async (input: string | URL) => {
+      if (String(input).includes('?')) return json([summary('one'), summary('two'), summary('three'), summary('four')]);
+      const response = json(detail('one'));
+      response.text = vi.fn(async () => {
+        await new Promise<void>((resolve) => setTimeout(resolve, 40_000));
+        return JSON.stringify(detail('one'));
+      });
+      return response;
+    });
+    const failure = expect(adapter(fetchMock).listGeneratedWorks()).rejects.toMatchObject({
+      status: 504, code: 'DESIGN_WORKSPACE_REQUEST_TIMEOUT',
+    });
+    await vi.advanceTimersByTimeAsync(30_000);
+    await failure;
+    await vi.advanceTimersByTimeAsync(10_000);
+    expect(fetchMock).toHaveBeenCalledTimes(4);
+  });
+
+  it('returns recoverable unavailable project ids without losing other projects', async () => {
+    const fetchMock = vi.fn(async (input: string | URL) => {
+      if (String(input).includes('?')) return json([summary('bad'), summary('good')]);
+      if (String(input).endsWith('/bad')) return json({ detail: { code: 'unavailable' } }, 503);
+      return json(detail('good', [asset('result', 'task')], [task('task', ['result'])]));
+    });
+    const result = await adapter(fetchMock).listGeneratedWorks();
+    expect(result.unavailableWorkspaceIds).toEqual(['bad']);
+    expect(result.works.map((work) => work.asset.assetId)).toEqual(['result']);
+  });
+
+  it.each([401, 403])('rejects whole pages on authorization status %s', async (status) => {
+    const fetchMock = vi.fn(async (input: string | URL) => String(input).includes('?')
+      ? json([summary('one')]) : json({ detail: { code: 'AUTH_EXPIRED' } }, status));
+    await expect(adapter(fetchMock).listGeneratedWorks()).rejects.toMatchObject({ status });
+    expect(session.token).toHaveBeenCalledTimes(1);
+  });
+
+  it('discards the entire page when the account changes during a detail request', async () => {
+    const fetchMock = vi.fn(async (input: string | URL) => {
+      if (String(input).includes('?')) return json([summary('one')]);
+      session.current.mockReturnValue(false);
+      return json(detail('one', [asset('result', 'task')], [task('task', ['result'])]));
+    });
+    await expect(adapter(fetchMock).listGeneratedWorks()).rejects.toMatchObject({
+      status: 409, code: 'DESIGN_ACCOUNT_CHANGED',
+    });
+  });
+
+  it('does not start reads if the account changes while acquiring its credential', async () => {
+    session.token.mockImplementation(async () => {
+      session.current.mockReturnValue(false);
+      return 'fixture-credential';
+    });
+    const fetchMock = vi.fn();
+    await expect(adapter(fetchMock).listGeneratedWorks()).rejects.toMatchObject({ code: 'DESIGN_ACCOUNT_CHANGED' });
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+
+  it.each(['assets', 'tasks', 'missing-result'])('marks upstream %s history limits explicitly', async (limit) => {
+    const assets = limit === 'assets'
+      ? Array.from({ length: 100 }, (_, index) => asset(String(index), null)) : [];
+    const tasks = limit === 'tasks'
+      ? Array.from({ length: 50 }, (_, index) => task(String(index), [], 'failed'))
+      : limit === 'missing-result' ? [task('one', ['not-in-detail'])] : [];
+    const fetchMock = vi.fn(async (input: string | URL) => String(input).includes('?')
+      ? json([summary('one')]) : json(detail('one', assets, tasks)));
+    await expect(adapter(fetchMock).listGeneratedWorks()).resolves.toMatchObject({ historyTruncated: true });
+  });
+
+  it.each([-1, 1.5, NaN, Number.MAX_SAFE_INTEGER])('rejects invalid offset %s before reading credentials', async (offset) => {
+    const fetchMock = vi.fn();
+    await expect(adapter(fetchMock).listGeneratedWorks(offset)).rejects.toMatchObject({ status: 400 });
+    expect(session.token).not.toHaveBeenCalled();
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+});