@deepseek-ai/dsh-client-ui-plugin-manager 0.1.7-alpha.1 → 0.1.7-rc.1

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/client/ui-plugin-manager/README.md
-README.md: a281f00df4544564a324b4e7da10a1bc59debf10
-README.zh.md: 0287090cd70f2a95c058cc14197769b6f8ad8bd8
+README.md: ae6bae12c8fead7ba4a4f3529a16b8a5225f9e3b
+README.zh.md: 4ee4871f69dbcf4e14cdaa931c041631780a6e38

package/README.md

@@ -25,16 +25,22 @@ Use the **Plugins** entry in the Web sidebar to manage the profile's installed b
 <a id="use-this-package"></a>
 ## Use this package
 
-Select **Plugins** in the sidebar. The page reads the inventory and the bundles through `api-remotes` when first opened; a Host without a managed profile shows the page as unavailable. **Official** comes first and lists the bundles the installation ships for switching on — off until switched on, without an uninstall, and tagged **Beta** where the feature is one — followed by the official plugins that registered a configuration page; **Installed** lists the bundles the profile holds. Cards are listed by name, so switching a bundle on or off does not move its card. A dependency without a bundle patch is not a plugin and is not listed unless the profile selects it, in which case it carries a problem tag. Global configuration remains in the Settings **Plugins** section.
+Select **Plugins** in the sidebar. The page reads the inventory and the bundles through `api-remotes` when first opened; a Host without a managed profile shows the page as unavailable. **Official** comes first and lists the bundles the installation ships for switching on — off until switched on, without an uninstall, and tagged **Experimental** for experimental features — followed by the official plugins that registered a configuration page; **Installed** lists the bundles the profile holds. Cards are listed by name, so switching a bundle on or off does not move its card. A dependency without a bundle patch is not a plugin and is not listed unless the profile selects it, in which case it carries a problem tag. Global configuration remains in the Settings **Plugins** section.
 
 Installed bundles and their plugin rows display their own title and description in the current UI language on cards and detail pages. Each field falls back from exported locale `meta` to the accessible `package.json` at that plugin address; the final title is the full package or module name, with no package description when both sources omit it. See [Plugin display metadata](../../../docs/cookbook/adding-a-package.md#plugin-display-metadata) for the author format. Bundle cards, details, and component rows display the image declared by their own `package.json.icon`; absent or undecodable images retain the default artwork. Installation previews still use registry or manifest information.
 
 ### Installing a bundle
 
-**Add plugin** takes a package name with an optional version, a Git address, a tarball, or an absolute local path; the dialog says a package name is what follows `dsh plugin add` in a README. **Install guide and examples** under the field opens a guide that shows the three common forms with an example each; **Use example** drops one into the field. **Registry** beside it names the registry the install asks first and unfolds the choice: the default registry, pnpm's own, titled with the host the machine's pnpm configuration names; each mirror the Host configured (`pluginManager.registries`), npmmirror as the mainland China mirror; and a typed http(s) address. The options float over the dialog from the control, so unfolding them never lengthens the card, and the card's content scrolls when the guide makes it taller than the viewport. The registry the Host asks first is the choice until one is remembered; the choice is then remembered in this browser (`localStorage`) and starts the next dialog, and a remembered address the Host no longer offers stays as a typed one. **Install** first asks the Host to read what the spec names (`pluginManager.inspect`) at the chosen registry: a name the list already shows, a name no registry has, a path without a package, a package without a bundle patch, or a spec pnpm would refuse comes back under the field as one sentence, with the spec kept for editing; when no registry could be reached, the sentence names every one asked. The install then starts at the registry that answered. An accepted spec opens the installing screen, which shows the package's name, one-liner, and version as the Host read them and folds pnpm's command and output behind **Show install details**. A finished install offers **Enable now**, which switches the new bundle on, closes the dialog, and scrolls the list to it; closing instead leaves it installed and off. While the Host moves on to another registry, the installing screen says which registry could not serve the package and which is asked now, and each pnpm run behind the details carries a badge naming its registry. A failed install says what went wrong in one line, as the Host attributed it — no registry could be reached, naming every one asked; the host a GitHub address or a tarball link is fetched from could not be reached, which no registry helps; the package was not found, the disk is full, the profile is not writable, pnpm blocked a build script — with pnpm's output behind the details and **Retry** at hand, and **Change registry** beside it when the Host laid the failure at the registry it asked, which returns to the spec with the registry options open; the Host has already put the profile files back. When pnpm blocked a dependency's install scripts, the failed screen lists the packages whose scripts wait for permission and offers **Allow these scripts and retry** in place of **Retry**; the Host saves the permission in the profile's `pnpm-workspace.yaml`, which a failed run leaves as pnpm wrote it, then runs pnpm again, and the installed screen names what was allowed. A successful installation does not certify that a module can activate.
+On first use, when pnpm uses the unconfigured official npm registry and npmmirror is offered, the Host probes both registries in parallel. The first successful HTTPS ping response selects the initial source. The dialog preserves remembered choices, manual selections, explicit manager configuration, and custom or unknown pnpm registries. An install clicked during initial probing waits for that bounded operation; a late result cannot overwrite a manual choice or reopen a closed dialog.
+
+The Host sends GET requests to `https://registry.npmjs.org/-/ping` and `https://registry.npmmirror.com/-/ping` through its normal fetch proxy. A 2xx response wins; redirects and failures do not. The remaining request is cancelled, both response bodies are discarded, and cleanup completes before the result returns. The default deadline is 1500 ms and results, including unavailable results, are cached for five minutes. Configure `registryProbeTimeoutMs` and `registryProbeCacheTtlMs` on `ui-plugin-manager`; `registryProbeEnabled: false` disables probing. If both requests fail or time out, the existing default remains selected. No IP-location service or Session content is involved.
+
+**Add plugin** takes a package name with an optional version, a Git address, a tarball, or an absolute local path; the dialog says a package name is what follows `dsh plugin add` in a README. **Install guide and examples** under the field opens a guide that shows the three common forms with an example each; **Use example** drops one into the field. **Registry** beside it names the registry the install asks first and unfolds the choice: the default registry, pnpm's own, titled with the host the machine's pnpm configuration names; each mirror the Host configured (`pluginManager.registries`), npmmirror as the mainland China mirror; and a typed http(s) address. The options float over the dialog from the control, so unfolding them never lengthens the card, and the card's content scrolls when the guide makes it taller than the viewport. The initial choice follows the response comparison above; the choice is then remembered in this browser (`localStorage`) and starts the next dialog, and a remembered address the Host no longer offers stays as a typed one and remains the requested address when installation starts before the registry list returns. **Install** first asks the Host to read what the spec names (`pluginManager.inspect`) at the chosen registry: a name the list already shows, a name no registry has, a path without a package, a package without a bundle patch, or a spec pnpm would refuse comes back under the field as one sentence, with the spec kept for editing; when no registry could be reached, the sentence names every one asked. The install then starts at the registry that answered. An accepted spec opens the installing screen, which shows the package's name, one-liner, and version as the Host read them and folds pnpm's command and output behind **Show install details**. A finished install offers **Enable now**, which switches the new bundle on, closes the dialog, and scrolls the list to it; closing instead leaves it installed and off. While the Host moves on to another registry, the installing screen says which registry could not serve the package and which is asked now, and each pnpm run behind the details carries a badge naming its registry. A failed install says what went wrong in one line, as the Host attributed it — no registry could be reached, naming every one asked; the host a GitHub address or a tarball link is fetched from could not be reached, which no registry helps; the package was not found, the disk is full, the profile is not writable, pnpm blocked a build script — with pnpm's output behind the details and **Retry** at hand, and **Change registry** beside it when the Host laid the failure at the registry it asked, which returns to the spec with the registry options open; the Host has already put the profile files back. When pnpm blocked a dependency's install scripts, the failed screen lists the packages whose scripts wait for permission and offers **Allow these scripts and retry** in place of **Retry**; the Host saves the permission in the profile's `pnpm-workspace.yaml`, which a failed run leaves as pnpm wrote it, then runs pnpm again, and the installed screen names what was allowed. A successful installation does not certify that a module can activate.
 
 During preparation and download, **Cancel install** asks the Host to stop the run and waits for confirmation. Loading the bundle cannot be cancelled. Closing with ×, Escape, or the backdrop hides the dialog immediately and requests cancellation when possible. **View installation** reopens the same task with its output; another installation cannot start while its outcome is pending or unconfirmed. Confirmed cancellation returns to the spec and shows a toast; the manifest and lockfile are restored, while downloaded files can remain. A lost installation response triggers a request to recover the result; **Check installation status** and reconnect retry that request. If the Host has no active request, **Installation result unavailable** allows returning to editing after checking the plugin list. A cancellation sent before acceptance waits and retries automatically; a failed cancellation can be retried manually. Hidden tasks report their outcome through toasts without reopening the dialog.
 
+When the Host attributes a network failure or timeout to a GitHub address and offers npmmirror, the dialog says **Cannot access GitHub**, or **GitHub connection timed out** for a timeout, and offers **Use mainland China mirror** or **Cancel**. Choosing the mirror returns to an empty package-name field and remembers the selected registry without starting another installation. Other failures retain their existing diagnostics and actions. The mirror supplies registry packages and dependencies, not the GitHub repository itself.
+
 ### Switching a bundle
 
 A bundle's page shows its full package name under the title, the spec that installs it elsewhere. A bundle's switch changes its layer selection. A profile with HMR recomposes before the operation completes; one without HMR, and a bundle a higher layer overrides, say so in a toast. A bundle the Host cannot read carries a problem tag and its reason on its page and cannot be switched on; one that provides the management components stays locked. The Host answers with error codes, which the page's dictionary words; pnpm's and the Loader's own diagnostics are shown as they are. The page excludes built-in profile bundles from cards and counts even when the profile holds them as dependencies or the Host reports an error. The Host inventory remains complete; the Settings Plugins section's Plugin list tab inspects their plugins.
@@ -59,7 +65,7 @@ The bundle's patch must declare the row under that id, and the registration exis
 
 ### Detail page extension points
 
-A plugin with something to say about a bundle, a row, or an official plugin it does not own contributes to that object's page through three list slots the page declares: `plugins.detail.actions` for a control at the head of the page, before the page's own switch and uninstall; `plugins.detail.badge` for a tag beside the title, after the version, beta, and problem tags; and `plugins.detail.section` for a section under the page's own content — after the rows on a bundle's page, after the configuration on a row's or an official plugin's page. Every entry is rendered with the page's `subject`: `{ kind: 'bundle', pkg }`, `{ kind: 'row', pkg, row }`, or `{ kind: 'item', id }`, where `pkg` and `row` carry the name, version, installed and enabled facts, and the row list a contribution decides on. An entry renders null for a subject it has nothing for and draws its own section chrome; the page orders entries by `order`.
+A plugin with something to say about a bundle, a row, or an official plugin it does not own contributes to that object's page through three list slots the page declares: `plugins.detail.actions` for a control at the head of the page, before the page's own switch and uninstall; `plugins.detail.badge` for a tag beside the title, after the version, experimental, and problem tags; and `plugins.detail.section` for a section under the page's own content — after the rows on a bundle's page, after the configuration on a row's or an official plugin's page. Every entry is rendered with the page's `subject`: `{ kind: 'bundle', pkg }`, `{ kind: 'row', pkg, row }`, or `{ kind: 'item', id }`, where `pkg` and `row` carry the name, version, installed and enabled facts, and the row list a contribution decides on. An entry renders null for a subject it has nothing for and draws its own section chrome; the page orders entries by `order`.
 
 ```tsx ignore-check
 ctx.slots.inject('plugins.detail.section', () => ctx.slots.register({
@@ -83,6 +89,8 @@ Package management uses the profile's dependency records: installed bundles can
 
 ### Registration
 
+The Host entry exposes `pluginRegistryProbe.fastest()` through the generated Remote interface. It shares pending comparisons, expires cached results, and aborts and awaits outstanding probes on unload. Calls after unload return a rejected Promise.
+
 The browser plugin registers the `plugins` sidebar entry and its `main` panel through `ctx.slots.inject()`, so both follow late slot declaration, locale changes and teardown. The page is global and belongs to no Session. Display text comes from package metadata and the page's dictionary.
 
 ### The store
@@ -93,7 +101,7 @@ The browser plugin registers the `plugins` sidebar entry and its `main` panel th
 
 Custom item pages use the Host entry id as their registration id; row pages use the bundle package and row id. The page owner supplies `form.state` and `form.mutate(operations, expectedRevision)` when the entry exposes editable Config fields. A custom page owns its draft and validation display, and may reuse `ConfigField` from ui-primitives. Bundle-wide pages can contain several entries and have no single form.
 
-The page's `main` registration declares `plugins.item`, `plugins.bundle.config`, and `plugins.row.config` as its children, so the slots exist while the page does and a registrant's `ctx.slots.inject` waits for them. `configLedgerSource` projects the three ledgers into one observable — the official items in ledger order with their labels resolved in the active locale, and the bundle and row keys — cached until a ledger or the locale moves; the page binds it as `useConfigLedger` beside the store and never names a configurable plugin itself. Which page is open is page-local state: the cards, a bundle, an official plugin, or a row of a bundle. A registration lives with the browser half that made it. `dsh-client-modules` attaches a package's browser half to the Loader row whose specifier is the bare package name, so every page a bundle registers, for itself or for any of its rows, goes away when that row is switched off; a sub-plugin whose page must outlive the other rows ships as its own package. Official packages whose names begin with `@deepseek-ai/dsh-experimental-` display the Beta marker.
+The page's `main` registration declares `plugins.item`, `plugins.bundle.config`, and `plugins.row.config` as its children, so the slots exist while the page does and a registrant's `ctx.slots.inject` waits for them. `configLedgerSource` projects the three ledgers into one observable — the official items in ledger order with their labels resolved in the active locale, and the bundle and row keys — cached until a ledger or the locale moves; the page binds it as `useConfigLedger` beside the store and never names a configurable plugin itself. Which page is open is page-local state: the cards, a bundle, an official plugin, or a row of a bundle. A registration lives with the browser half that made it. `dsh-client-modules` attaches a package's browser half to the Loader row whose specifier is the bare package name, so every page a bundle registers, for itself or for any of its rows, goes away when that row is switched off; a sub-plugin whose page must outlive the other rows ships as its own package. Official packages whose names begin with `@deepseek-ai/dsh-experimental-` display the Experimental marker.
 
 `plugins.bundle.config` supplies bundle detail configuration, keyed by npm package name. `plugins.bundle.activation` offers bundle-owned guidance after explicit enablement from the list, with callbacks to dismiss it or open the bundle details. It does not appear merely because an enabled bundle was listed.
 
@@ -124,6 +132,8 @@ None; this package neither assembles nor sends a provider request.
 
 ## Known Limitations and Deferred Work
 
+- Ping response time does not measure package-download throughput. Probes use the Host fetch route, which pnpm-specific proxy settings can differ from; users can always choose the registry manually, and installation retains its existing fallback rules.
+
 <a id="known-limitations-and-deferred-work"></a>
 
 
@@ -134,7 +144,7 @@ These limits define the reach of the management view; they are current package c
 - **Rows show a phase, not a reason** — a failed row reads as failed without the Host's error text; the Host log has it.
 - **One install at a time** — the dialog runs one pnpm command; a second spec waits for the first to finish.
 - **No version picker** — the spec is typed as pnpm accepts it; the page neither lists registry versions nor offers upgrades.
-- **The registry choice is this browser's** — it lives in `localStorage`, so another browser, the `dsh plugin` command, and the agent tool start from the Host's configured registry.
+- **The registry choice is this browser's** — it lives in `localStorage`, so another browser applies its own initial recommendation; the `dsh plugin` command and the agent tool use the Host's configured registry.
 - **Every registry read runs pnpm** — opening the dialog, the check, and the install each ask pnpm what its own configuration names; a machine without pnpm reads it as unknown and is offered no fallback.
 
 <a id="dev-note"></a>
@@ -147,4 +157,4 @@ None.
 
 </details>
 
-**Runtime invariant:** No companion is published. This package owns a sidebar panel over Host-owned facts.
+**Runtime invariant:** No companion is published. The panel reads Host-owned facts, and the registry-probe cache stores one comparison result without an independently maintained projection.

package/README.zh.md

@@ -25,16 +25,22 @@ kind: "package-reference"
 <a id="use-this-package"></a>
 ## 使用本包
 
-在侧栏选择**插件**。页面首次打开时通过 `api-remotes` 读取清单与组合包；没有受管 profile 的 Host 上页面显示为不可用。**官方**排在前面，列出安装随附、供开启的组合包——开启前保持关闭、没有卸载、属于 beta 功能的带 **Beta** 标签——其后是注册了配置页的官方插件；**已安装**列出 profile 持有的组合包。卡片按名称排序，启停组合包不会挪动它的卡片。没有组合包 patch 的依赖不是插件，除非 profile 选中了它才会带异常标签列出。全局配置仍在设置的**插件**分区中编辑。
+在侧栏选择**插件**。页面首次打开时通过 `api-remotes` 读取清单与组合包；没有受管 profile 的 Host 上页面显示为不可用。**官方**排在前面，列出安装随附、供开启的组合包——开启前保持关闭、没有卸载、属于实验性功能的带**实验性**标签——其后是注册了配置页的官方插件；**已安装**列出 profile 持有的组合包。卡片按名称排序，启停组合包不会挪动它的卡片。没有组合包 patch 的依赖不是插件，除非 profile 选中了它才会带异常标签列出。全局配置仍在设置的**插件**分区中编辑。
 
 已安装的组合包及其插件行在卡片和详情页中，按当前界面语言显示各自的标题与描述。每个字段先读取导出的 locale `meta`，缺失时回退到该插件地址下可访问的 `package.json`；标题最终使用完整包名或模块名，两处都没有描述时不提供包描述。作者格式见[插件展示元信息](../../../docs/cookbook/adding-a-package.zh.md#plugin-display-metadata)。组合包卡片、详情和组件行显示各自 `package.json.icon` 声明的图片；未声明或无法解码时保留默认插画。安装预览仍使用注册表或 manifest 信息。
 
 ### 安装一个组合包
 
-**添加插件**接受包名（可带版本）、Git 地址、压缩包或本地绝对路径；对话框说明包名就是 README 里 `dsh plugin add` 后面的那一段。输入框下方的**插件安装引导和示例**展开一段引导，给出三种常见形式各一个示例；**填入示例**把示例填进输入框。旁边的**安装源**写着安装首先询问的注册表，展开后可选：默认安装源，即 pnpm 自身的注册表，标题带上本机 pnpm 配置指向的主机名；Host 配置的每个镜像（`pluginManager.registries`），npmmirror 显示为中国大陆镜像源；以及手动输入的 http(s) 地址。选项从控件上浮在对话框之上，展开不会拉长卡片；引导使卡片高过视口时，卡片内容可以滚动。Host 首先询问的注册表在记住选择之前就是当前选择；之后选择记在本浏览器（`localStorage`）里，下次打开对话框从它开始，Host 不再提供的已记住地址保留为手动输入的地址。**安装**先让 Host 在所选注册表读出 spec 指向什么（`pluginManager.inspect`）：列表中已有的名字、所有注册表都没有的名字、没有包的路径、没有组合包 patch 的包，或 pnpm 会拒绝的 spec，都以一句话回到输入框下方，spec 保留可继续编辑；所有注册表都连不上时，这句话列出问过的每一个。随后安装从作答的那个注册表开始。通过检查的 spec 打开安装中界面，展示 Host 读到的包名、一句话简介和版本，pnpm 的命令与输出折叠在**查看安装详情**之后。安装完成后提供**立即启用**：启用新组合包、关闭对话框并把列表滚动到它；直接关闭则让它保持已安装但关闭。Host 改问另一个注册表时，安装中界面会说明哪个源没能提供这个包、现在改问哪个，详情里每次 pnpm 运行都带一个写明所用源的标记。安装失败时按 Host 的归因用一行话说明原因——所有安装源都连不上，并列出问过的每一个；GitHub 地址或压缩包链接自身的主机连不上，换源无济于事；包不存在、磁盘已满、profile 不可写、pnpm 拦下了构建脚本——pnpm 输出在详情里，**重试**就在手边，Host 把失败归于所问注册表时还在旁边提供**更换安装源**，回到 spec 输入界面并展开安装源选项；Host 已经把 profile 文件放回原样。pnpm 拦下依赖的安装脚本时，失败界面列出等待允许的包，并以**允许这些脚本并重试**取代**重试**；Host 把授权写进 profile 的 `pnpm-workspace.yaml`（失败的运行保留 pnpm 写入的这个文件）再运行 pnpm，安装完成界面会说明允许了哪些脚本。安装成功不代表模块一定能够激活。
+首次使用时，如果未显式配置安装源、pnpm 使用官方 npm 源，且列表提供 npmmirror，Host 会并发探测这两个源，选择最先成功响应 HTTPS ping 的源。已记住的选择、用户手选、管理器显式配置，以及自定义或未知的 pnpm 源均保留。在初次探测期间点击安装会等待这次有时限的操作；迟到结果不会覆盖手选或重新打开已关闭的对话框。
+
+Host 通过普通 fetch 代理向 `https://registry.npmjs.org/-/ping` 和 `https://registry.npmmirror.com/-/ping` 发送 GET 请求，以最先返回 2xx 的源为结果；重定向和失败不参与选择。随后取消另一条请求、丢弃两个响应体，并在清理完成后返回。默认时限为 1500 毫秒，包括不可用结果在内的探测结果均缓存五分钟。在 `ui-plugin-manager` 上配置 `registryProbeTimeoutMs` 和 `registryProbeCacheTtlMs`；`registryProbeEnabled: false` 关闭探测。两条请求都失败或超时时保留现有默认源。不使用 IP 地区服务，也不发送 Session 内容。
+
+**添加插件**接受包名（可带版本）、Git 地址、压缩包或本地绝对路径；对话框说明包名就是 README 里 `dsh plugin add` 后面的那一段。输入框下方的**插件安装引导和示例**展开一段引导，给出三种常见形式各一个示例；**填入示例**把示例填进输入框。旁边的**安装源**写着安装首先询问的注册表，展开后可选：默认安装源，即 pnpm 自身的注册表，标题带上本机 pnpm 配置指向的主机名；Host 配置的每个镜像（`pluginManager.registries`），npmmirror 显示为中国大陆镜像源；以及手动输入的 http(s) 地址。选项从控件上浮在对话框之上，展开不会拉长卡片；引导使卡片高过视口时，卡片内容可以滚动。初始选择遵循上文的响应比较规则；之后选择记在本浏览器（`localStorage`）里，下次打开对话框从它开始，Host 不再提供的已记住地址保留为手动输入的地址；在安装源列表返回前开始安装，也仍请求该地址。**安装**先让 Host 在所选注册表读出 spec 指向什么（`pluginManager.inspect`）：列表中已有的名字、所有注册表都没有的名字、没有包的路径、没有组合包 patch 的包，或 pnpm 会拒绝的 spec，都以一句话回到输入框下方，spec 保留可继续编辑；所有注册表都连不上时，这句话列出问过的每一个。随后安装从作答的那个注册表开始。通过检查的 spec 打开安装中界面，展示 Host 读到的包名、一句话简介和版本，pnpm 的命令与输出折叠在**查看安装详情**之后。安装完成后提供**立即启用**：启用新组合包、关闭对话框并把列表滚动到它；直接关闭则让它保持已安装但关闭。Host 改问另一个注册表时，安装中界面会说明哪个源没能提供这个包、现在改问哪个，详情里每次 pnpm 运行都带一个写明所用源的标记。安装失败时按 Host 的归因用一行话说明原因——所有安装源都连不上，并列出问过的每一个；GitHub 地址或压缩包链接自身的主机连不上，换源无济于事；包不存在、磁盘已满、profile 不可写、pnpm 拦下了构建脚本——pnpm 输出在详情里，**重试**就在手边，Host 把失败归于所问注册表时还在旁边提供**更换安装源**，回到 spec 输入界面并展开安装源选项；Host 已经把 profile 文件放回原样。pnpm 拦下依赖的安装脚本时，失败界面列出等待允许的包，并以**允许这些脚本并重试**取代**重试**；Host 把授权写进 profile 的 `pnpm-workspace.yaml`（失败的运行保留 pnpm 写入的这个文件）再运行 pnpm，安装完成界面会说明允许了哪些脚本。安装成功不代表模块一定能够激活。
 
 准备和下载期间，**取消安装**会请求 Host 停止运行并等待确认。加载组合包的阶段不可取消。点击 ×、按 Escape 或点击遮罩会立即隐藏对话框，并在可以取消时请求取消。**查看安装任务**会重新打开同一任务并保留输出；结果待定或尚未确认时不能发起另一项安装。确认取消后回到 spec 输入界面并显示 toast；manifest 与 lockfile 已恢复，已下载文件可能保留。安装响应丢失后会请求恢复结果；**核对安装状态**和重连会重试该请求。Host 已无活动请求时，**未能获取安装结果**允许检查插件列表后返回编辑。早于接收确认的取消请求会等待并自动重试；取消失败可手动重试。隐藏的任务通过 toast 通知结果，不会重新弹出对话框。
 
+Host 将网络失败或超时归因于 GitHub 地址，且提供 npmmirror 时，对话框显示**无法访问 GitHub**，超时时显示**连接 GitHub 超时**，提供**改用国内镜像**和**取消**。选择镜像后回到空的包名输入框，记住所选安装源，不自动开始下一次安装。其他失败保留原有诊断和操作。镜像提供注册表中的包及依赖，不代替 GitHub 仓库下载。
+
 ### 切换一个组合包
 
 组合包页面在标题下方显示完整包名，也就是在别处安装它所需的 spec。组合包开关改变其层选择。启用了 HMR 的 profile 在操作完成前重组；没有 HMR 的 profile，以及被更高层覆盖的组合包，会以 toast 说明。Host 读不了的组合包带异常标签，其页面给出原因，且不能打开；提供管理组件的组合包保持锁定。Host 以错误码作答，由页面字典措辞；pnpm 与 Loader 自己的诊断原样显示。页面从卡片与数量中排除内置 profile 组合包，即使 profile 将它们列为依赖或 Host 报告了异常。Host 清单仍保留完整数据；设置中「插件」分区的「插件列表」标签页负责查看它们的插件。
@@ -59,7 +65,7 @@ ctx.slots.inject('plugins.row.config', () => ctx.slots.register({
 
 ### 详情页扩展点
 
-对某个不属于自己的组合包、行或官方插件有话要说的插件，通过本页声明的三个 list slot 向该对象的页面贡献内容：`plugins.detail.actions` 在页头放一个控件，位于页面自己的开关和卸载之前；`plugins.detail.badge` 在标题旁放一个标签，位于版本、Beta 和异常标签之后；`plugins.detail.section` 在页面自身内容之下放一个区块——组合包页在组件列表之后，行页和官方插件页在配置之后。每个条目都以页面的 `subject` 渲染：`{ kind: 'bundle', pkg }`、`{ kind: 'row', pkg, row }` 或 `{ kind: 'item', id }`，其中 `pkg` 与 `row` 携带包名、版本、是否已安装、是否启用以及行列表这些供贡献者判断的事实。条目对无话可说的 subject 返回 null，自绘区块外观；页面按 `order` 排列条目。
+对某个不属于自己的组合包、行或官方插件有话要说的插件，通过本页声明的三个 list slot 向该对象的页面贡献内容：`plugins.detail.actions` 在页头放一个控件，位于页面自己的开关和卸载之前；`plugins.detail.badge` 在标题旁放一个标签，位于版本、实验性和异常标签之后；`plugins.detail.section` 在页面自身内容之下放一个区块——组合包页在组件列表之后，行页和官方插件页在配置之后。每个条目都以页面的 `subject` 渲染：`{ kind: 'bundle', pkg }`、`{ kind: 'row', pkg, row }` 或 `{ kind: 'item', id }`，其中 `pkg` 与 `row` 携带包名、版本、是否已安装、是否启用以及行列表这些供贡献者判断的事实。条目对无话可说的 subject 返回 null，自绘区块外观；页面按 `order` 排列条目。
 
 ```tsx ignore-check
 ctx.slots.inject('plugins.detail.section', () => ctx.slots.register({
@@ -83,6 +89,8 @@ ctx.slots.inject('plugins.detail.section', () => ctx.slots.register({
 
 ### 注册
 
+Host 入口通过生成的 Remote 接口暴露 `pluginRegistryProbe.fastest()`，共享进行中的比较、让缓存按时过期，并在卸载时中止和等待未完成探测。卸载后调用会返回拒绝的 Promise。
+
 浏览器插件通过 `ctx.slots.inject()` 注册 `plugins` 侧栏入口与它的 `main` 面板，使两者跟随 slot 延迟声明、本地化变化与销毁。页面为全局页面，不属于任何 Session。显示文本来自包元信息与页面字典。
 
 ### store
@@ -93,7 +101,7 @@ ctx.slots.inject('plugins.detail.section', () => ctx.slots.register({
 
 自定义条目页以 Host 条目 id 作为注册 id；行页面使用 bundle 包名和行 id。当条目提供可编辑 Config 字段时，页面宿主传入 `form.state` 和 `form.mutate(operations, expectedRevision)`。自定义页面负责草稿和校验提示，并可复用 ui-primitives 的 `ConfigField`。整个 bundle 的页面可以包含多个条目，因此没有单一表单。
 
-页面的 `main` 注册把 `plugins.item`、`plugins.bundle.config` 与 `plugins.row.config` 声明为子 slot，因此它们与页面同生，注册方的 `ctx.slots.inject` 会等到它们出现。`configLedgerSource` 把三份账本投影成一个可观察对象——按账本顺序排列、标签按当前语言解析的官方条目，以及组合包与行的键——在账本或语言变化前保持缓存；页面把它作为 `useConfigLedger` 绑在 store 旁边，自身从不点名任何可配置插件。打开的是哪一页是页面本地状态：卡片、某个组合包、某个官方插件，或组合包的某一行。注册与做出它的浏览器半侧同生共死。`dsh-client-modules` 只把一个包的浏览器半侧挂在说明符恰为包名的那一行 Loader 行上，所以组合包为自己或任一行注册的页面，都会在那一行被关闭时一起消失；需要在其他行关闭时仍保留页面的子插件，应作为独立的包发布。 名称以 `@deepseek-ai/dsh-experimental-` 开头的官方包显示 Beta 标记。
+页面的 `main` 注册把 `plugins.item`、`plugins.bundle.config` 与 `plugins.row.config` 声明为子 slot，因此它们与页面同生，注册方的 `ctx.slots.inject` 会等到它们出现。`configLedgerSource` 把三份账本投影成一个可观察对象——按账本顺序排列、标签按当前语言解析的官方条目，以及组合包与行的键——在账本或语言变化前保持缓存；页面把它作为 `useConfigLedger` 绑在 store 旁边，自身从不点名任何可配置插件。打开的是哪一页是页面本地状态：卡片、某个组合包、某个官方插件，或组合包的某一行。注册与做出它的浏览器半侧同生共死。`dsh-client-modules` 只把一个包的浏览器半侧挂在说明符恰为包名的那一行 Loader 行上，所以组合包为自己或任一行注册的页面，都会在那一行被关闭时一起消失；需要在其他行关闭时仍保留页面的子插件，应作为独立的包发布。 名称以 `@deepseek-ai/dsh-experimental-` 开头的官方包显示实验性标记。
 
 `plugins.bundle.config` 以 npm 包名为 key，提供 Bundle 详情配置。`plugins.bundle.activation` 在用户从列表显式启用后提供 Bundle 自有引导，并传入关闭引导和打开详情的回调。仅列出已启用的 Bundle 不会触发引导。
 
@@ -124,6 +132,8 @@ ctx.slots.inject('plugins.detail.section', () => ctx.slots.register({
 
 ## 已知限制与延期工作
 
+- Ping 响应时间不代表包下载吞吐量。探测使用 Host fetch 的网络路径，pnpm 专用代理设置可能使用不同路径；用户始终可以手动选择安装源，安装仍遵循现有回退规则。
+
 <a id="known-limitations-and-deferred-work"></a>
 
 
@@ -134,7 +144,7 @@ ctx.slots.inject('plugins.detail.section', () => ctx.slots.register({
 - **行只显示阶段，不显示原因**——失败的行只显示为失败，没有 Host 的错误文本；Host 日志里有。
 - **一次只能安装一个**——对话框一次运行一个 pnpm 命令；第二个 spec 要等前一个完成。
 - **没有版本选择器**——spec 按 pnpm 接受的写法输入；页面不列出注册表版本，也不提供升级。
-- **安装源选择只属于本浏览器**——它存在 `localStorage` 里，所以另一个浏览器、`dsh plugin` 命令和 agent 工具都从 Host 配置的注册表开始。
+- **安装源选择只属于本浏览器**——它存在 `localStorage` 里，所以另一个浏览器会独立计算初始推荐；`dsh plugin` 命令和 agent 工具使用 Host 配置的注册表。
 - **每次读注册表都要运行 pnpm**——打开对话框、检查、安装各问一次 pnpm 自身配置指向哪里；没有 pnpm 的机器读作未知，不提供备选。
 
 <a id="dev-note"></a>
@@ -147,4 +157,4 @@ ctx.slots.inject('plugins.detail.section', () => ctx.slots.register({
 
 </details>
 
-**运行时不变式：** 不发布伴生检查。本包只拥有一个基于 Host 事实的侧栏面板。
+**运行时不变式：** 不发布伴生检查。面板读取 Host 事实，安装源探测缓存只保存一次比较结果，没有独立维护的投影。

package/lib/client.js

@@ -74,7 +74,7 @@ window.__ModuleLoader__.load({
 			};
 		}
 		//#endregion
-		//#region ../../util/crypto/src/index.ts
+		//#region ../../util/crypto/lib/index.js
 		/**
 		* Random v4 UUID, minted from `crypto.getRandomValues`.
 		* @returns the UUID string.
@@ -86,10 +86,25 @@ window.__ModuleLoader__.load({
 			}).join("");
 			return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
 		}
-		//#endregion
-		//#region ../../boot/plugin-manager/src/registry.ts
+		/** Public npmmirror URL shared by the fallback configuration and public-registry comparison. */
+		const NPMMIRROR_REGISTRY = "https://registry.npmmirror.com/";
 		/** An http(s) URL, as pnpm's `--registry` takes it. */
 		const REGISTRY_URL = /^https?:\/\/\S+$/;
+		/**
+		* Parse a registry URL into the form pnpm compares registries in: lower-case host, trailing slash.
+		* @param url - the registry as configured or requested.
+		* @returns the normalized URL.
+		* @throws {Error} for anything but an http(s) URL.
+		*/
+		function normalizeRegistry(url) {
+			let parsed;
+			try {
+				parsed = new URL(url);
+			} catch {}
+			if (parsed === void 0 || parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new Error(`a registry must be an http(s) URL: ${url}`);
+			if (!parsed.pathname.endsWith("/")) parsed.pathname += "/";
+			return parsed.href;
+		}
 		//#endregion
 		//#region lib/types/client/presentation.js
 		/** Display labels and toast sentences for global plugin management. */
@@ -137,6 +152,7 @@ window.__ModuleLoader__.load({
 			"stop-profile": "reasonStopProfile",
 			"bundle-in-use": "reasonBundleInUse",
 			"stale-approval": "reasonStaleApproval",
+			"incompatible-version": "reasonIncompatibleVersionUnnamed",
 			"operation-error": "reasonOperationError"
 		};
 		/** The sentence a failed action opens with, by what was being done. */
@@ -148,13 +164,18 @@ window.__ModuleLoader__.load({
 			rowDisable: "failedRowDisable"
 		};
 		/**
-		* What a management error reads as: the code's sentence, or, for an
-		* operation error, the Host's diagnostic as it is.
-		* @param error - the Host's code and its diagnostic, when it has one.
+		* What a management error reads as: the code's sentence, one sentence per
+		* package an incompatibility names, or, for an operation error, the Host's diagnostic as it is.
+		* @param error - the Host's code, its diagnostic, and the packages an incompatibility names.
 		* @param t - the manager's translate seat.
 		* @returns the sentence.
 		*/
 		function managementText(error, t) {
+			if (error.code === "incompatible-version" && error.incompatible !== void 0 && error.incompatible.length > 0) return error.incompatible.map((plugin) => t("reasonIncompatibleVersion", {
+				plugin: `${plugin.name}@${plugin.version}`,
+				runtime: plugin.runtimeVersion,
+				peers: Object.entries(plugin.peers).map(([name, range]) => `${name} ${range}`).join(", ")
+			})).join(" ");
 			if (error.code !== "operation-error") return t(CODE_KEYS[error.code]);
 			return error.diagnostic === void 0 || error.diagnostic === "" ? t("reasonOperationError") : error.diagnostic;
 		}
@@ -212,7 +233,8 @@ window.__ModuleLoader__.load({
 				case "failed": {
 					const reason = notice.code === void 0 ? notice.reason : managementText({
 						code: notice.code,
-						diagnostic: notice.reason
+						diagnostic: notice.reason,
+						...notice.incompatible === void 0 ? {} : { incompatible: notice.incompatible }
 					}, t);
 					return t(FAILED_KEYS[notice.action], { reason: reason === "" ? t("reasonOperationError") : reason });
 				}
@@ -250,14 +272,27 @@ window.__ModuleLoader__.load({
 		function isInstallPending(phase) {
 			return phase === "starting" || phase === "running" || phase === "cancelling" || phase === "applying" || phase === "unconfirmed";
 		}
+		/**
+		* Offer the configured mainland mirror after a confirmed GitHub connection failure.
+		* @param install - the installation and the Host's failure attribution.
+		* @returns the offered mirror URL, or undefined when this recovery does not apply.
+		*/
+		function githubRecoveryRegistry(install) {
+			if (install.phase !== "failed" || install.failure?.failedAt !== "spec-host" || install.failure.kind !== "network" && install.failure.kind !== "timeout") return void 0;
+			const host = install.subject?.host?.toLowerCase().split(":")[0];
+			if (host !== "github.com" && !host?.endsWith(".github.com")) return void 0;
+			return offeredRegistries(install.registries).find((registry) => registry !== null && new URL(registry).hostname === "registry.npmmirror.com");
+		}
 		/** A refused answer or a change the Host could not apply, carrying what it said and, for a refusal, its code. */
 		var RemoteAnswerError = class extends Error {
 			reason;
 			code;
-			constructor(reason, code) {
+			incompatible;
+			constructor(reason, code, incompatible) {
 				super(reason);
 				this.reason = reason;
 				this.code = code;
+				this.incompatible = incompatible;
 				this.name = "RemoteAnswerError";
 			}
 		};
@@ -266,6 +301,7 @@ window.__ModuleLoader__.load({
 			return {
 				reason: error?.diagnostic ?? "",
 				...error === void 0 ? {} : { code: error.code },
+				...error?.incompatible === void 0 ? {} : { incompatible: error.incompatible },
 				...kind === void 0 ? {} : { kind },
 				...failedAt === void 0 ? {} : { failedAt },
 				...pendingBuilds === void 0 || pendingBuilds.length === 0 ? {} : { pendingBuilds }
@@ -274,10 +310,12 @@ window.__ModuleLoader__.load({
 		/** The notice a thrown failure becomes: a refusal keeps its code, anything else its words. */
 		function failedNotice(error, subject, seq) {
 			const code = error instanceof RemoteAnswerError ? error.code : void 0;
+			const incompatible = error instanceof RemoteAnswerError ? error.incompatible : void 0;
 			return {
 				kind: "failed",
 				reason: reasonOf(error),
 				...code === void 0 ? {} : { code },
+				...incompatible === void 0 ? {} : { incompatible },
 				...subject,
 				seq
 			};
@@ -359,13 +397,14 @@ window.__ModuleLoader__.load({
 		};
 		/** The dialog back at its spec: the run and its outcome forgotten, the spec and the registries kept. */
 		function specAgain(install) {
-			const { open, spec, registries, registry } = install;
+			const { open, spec, registries, registry, mirrorRecovery } = install;
 			return {
 				...IDLE_INSTALL,
 				open,
 				spec,
 				registries,
-				registry
+				registry,
+				...mirrorRecovery === void 0 ? {} : { mirrorRecovery }
 			};
 		}
 		/**
@@ -382,6 +421,18 @@ window.__ModuleLoader__.load({
 				url: remembered.registry
 			} : remembered;
 		}
+		/** Only the shipped public mirror can replace an unconfigured official npm default. */
+		function eligibleMirror(registries) {
+			if (registries.registry !== null || registries.resolved === null) return void 0;
+			let resolved;
+			try {
+				resolved = normalizeRegistry(registries.resolved);
+			} catch (_error) {
+				return;
+			}
+			if (resolved !== "https://registry.npmjs.org/") return void 0;
+			return registries.fallbackRegistries.find((registry) => registry === NPMMIRROR_REGISTRY);
+		}
 		/** Reads and mutates the profile's plugins through the `pluginManager` Remote. */
 		var PluginManagerController = class {
 			ctx;
@@ -395,6 +446,7 @@ window.__ModuleLoader__.load({
 			inspectAbort;
 			request;
 			noticeSeq = 0;
+			registryRead;
 			/** The registry last used from this browser, kept across dialogs and page loads; null until one was used. */
 			registryMemory = (0, _deepseek_ai_dsh_client_store.createSnapshotStore)(null, { persist: { name: "dsh.plugin-manager.install-registry" } });
 			/**
@@ -422,6 +474,7 @@ window.__ModuleLoader__.load({
 			/** Stop publishing and drop every late settlement. */
 			dispose() {
 				this.disposed = true;
+				this.registryRead = void 0;
 				this.request = void 0;
 				this.generation += 1;
 			}
@@ -453,7 +506,11 @@ window.__ModuleLoader__.load({
 								open: true,
 								registry: this.registryMemory.getSnapshot() ?? OFFICIAL_REGISTRY
 							} });
-							this.readRegistries();
+							const read = { choice: this.getSnapshot().install.registry };
+							this.registryRead = read;
+							read.done = this.readRegistries(read).finally(() => {
+								delete read.done;
+							});
 						} else this.patchInstall({ open: true });
 						this.reconcileInstall();
 					},
@@ -464,6 +521,7 @@ window.__ModuleLoader__.load({
 							return;
 						}
 						this.abortInspect();
+						this.registryRead = void 0;
 						this.patch({ install: IDLE_INSTALL });
 					},
 					editInstallSpec: (text) => {
@@ -496,6 +554,22 @@ window.__ModuleLoader__.load({
 							registryOpen: true
 						} });
 					},
+					useGithubMirror: () => {
+						const install = this.getSnapshot().install;
+						const mirror = githubRecoveryRegistry(install);
+						if (mirror === void 0) return;
+						const registry = {
+							kind: "offered",
+							registry: mirror
+						};
+						this.registryMemory.set(registry);
+						this.patch({ install: {
+							...specAgain(install),
+							spec: "",
+							mirrorRecovery: true,
+							registry
+						} });
+					},
 					approveBuildsAndRetry: () => {
 						this.approveBuildsAndRetry();
 					},
@@ -578,15 +652,31 @@ window.__ModuleLoader__.load({
 					} }
 				});
 			}
+			currentRegistryRead(read) {
+				return !this.disposed && this.registryRead === read;
+			}
 			/** Read the registries the Host offers, for the dialog just opened; a refused read leaves pnpm's own and a typed one. */
-			async readRegistries() {
+			async readRegistries(read) {
 				const answer = await this.ctx.remote.pluginManager.registries();
 				const install = this.getSnapshot().install;
-				if (this.disposed || !install.open || !answer.ok) return;
+				if (!this.currentRegistryRead(read) || !install.open || !answer.ok) return;
+				const remembered = this.registryMemory.getSnapshot();
+				const untouched = install.registry === read.choice && (install.phase === "idle" || install.phase === "checking");
+				if (untouched) read.choice = reconciled(remembered, answer.value);
 				this.patchInstall({
 					registries: answer.value,
-					registry: reconciled(this.registryMemory.getSnapshot(), answer.value)
+					...untouched ? { registry: read.choice } : {}
 				});
+				const mirror = eligibleMirror(answer.value);
+				if (!untouched || remembered !== null || mirror === void 0) return;
+				const fastest = await this.ctx.remote.pluginRegistryProbe.fastest();
+				const current = this.getSnapshot().install;
+				if (!this.currentRegistryRead(read) || !current.open || current.phase !== "idle" && current.phase !== "checking" || current.registry !== read.choice || !fastest.ok || fastest.value !== mirror) return;
+				read.choice = {
+					kind: "offered",
+					registry: mirror
+				};
+				this.patchInstall({ registry: read.choice });
 			}
 			/**
 			* Fold a chunk belonging to this installation into its pnpm command.
@@ -713,11 +803,6 @@ window.__ModuleLoader__.load({
 					});
 					return;
 				}
-				const registry = typed ?? choice.registry;
-				this.registryMemory.set(typed === void 0 ? choice : {
-					kind: "custom",
-					url: typed
-				});
 				this.abortInspect();
 				const controller = new AbortController();
 				this.inspectAbort = controller;
@@ -734,6 +819,18 @@ window.__ModuleLoader__.load({
 					failure: null,
 					approvedBuilds: []
 				});
+				const read = this.registryRead;
+				if (read !== void 0 && choice === read.choice && read.done !== void 0) {
+					await read.done;
+					if (this.gone(controller.signal) || this.registryRead !== read) return;
+				}
+				const currentChoice = this.getSnapshot().install.registry;
+				const selected = currentChoice.kind === "custom" ? {
+					...currentChoice,
+					url: currentChoice.url.trim()
+				} : currentChoice;
+				const registry = selected.kind === "custom" ? selected.url : selected.registry;
+				this.registryMemory.set(selected);
 				const inspected = await this.ctx.remote.pluginManager.inspect(spec, { registry }, controller.signal);
 				if (this.gone(controller.signal)) return;
 				this.inspectAbort = void 0;
@@ -1017,7 +1114,7 @@ window.__ModuleLoader__.load({
 				if (!answer.ok) throw new RemoteAnswerError(answer.error.message);
 				const result = answer.value;
 				switch (result.application) {
-					case "failed": throw new RemoteAnswerError(result.error?.diagnostic ?? "", result.error?.code);
+					case "failed": throw new RemoteAnswerError(result.error?.diagnostic ?? "", result.error?.code, result.error?.incompatible);
 					case "cancelled":
 						this.patch({ notice: {
 							kind: "cancelled",
@@ -1939,6 +2036,10 @@ window.__ModuleLoader__.load({
 		*/
 		function failureText(failure, t, install) {
 			if (failure === null) return t("installFailureGeneric");
+			if (failure.code === "incompatible-version") return managementText({
+				code: failure.code,
+				...failure.incompatible === void 0 ? {} : { incompatible: failure.incompatible }
+			}, t);
 			if (failure.kind === "build-blocked" && !failure.pendingBuilds?.length) return t("installFailureBuildBlockedManual");
 			const host = install?.subject?.host;
 			if (failure.failedAt === "spec-host" && host !== void 0) return t("installFailureNetworkHost", { host });
@@ -1980,7 +2081,7 @@ window.__ModuleLoader__.load({
 		* and failed screens over the same subject card. A failed run that left
 		* install scripts undecided shows them for approval in place of plain retry.
 		*/
-		function InstallDialog({ install, t, onClose, onEditSpec, onRun, onCancel, onReconcile, onToggleDetails, onEnableNow, onApproveBuilds, onToggleRegistry, onChooseRegistry, onChangeRegistry }) {
+		function InstallDialog({ install, t, onClose, onEditSpec, onRun, onCancel, onReconcile, onToggleDetails, onEnableNow, onApproveBuilds, onToggleRegistry, onChooseRegistry, onChangeRegistry, onUseGithubMirror }) {
 			const errorId = (0, react.useId)();
 			const guideId = (0, react.useId)();
 			const approvalId = (0, react.useId)();
@@ -2012,6 +2113,23 @@ window.__ModuleLoader__.load({
 					document.removeEventListener("keydown", onKeyDown, true);
 				};
 			}, [registryShown, onToggleRegistry]);
+			if (githubRecoveryRegistry(install) !== void 0) return (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Modal, {
+				open: install.open,
+				onClose,
+				title: t(install.failure?.kind === "timeout" ? "installGithubTimeoutTitle" : "installGithubFailedTitle"),
+				closeLabel: t("close"),
+				description: t("installGithubFailedDescription"),
+				footer: (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [(0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+					variant: "outline",
+					onClick: onClose,
+					children: t("cancel")
+				}), (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+					variant: "primary",
+					autoFocus: true,
+					onClick: onUseGithubMirror,
+					children: t("installUseGithubMirror")
+				})] })
+			});
 			if (phase === "idle" || phase === "checking") {
 				const checking = phase === "checking";
 				const empty = install.spec.trim() === "";
@@ -2026,7 +2144,7 @@ window.__ModuleLoader__.load({
 					onClose,
 					title: t("installTitle"),
 					closeLabel: t("close"),
-					description: t("installDescription"),
+					...install.mirrorRecovery ? {} : { description: t("installDescription") },
 					className: PluginManagerPage_module_css_default.installDialog,
 					contentClassName: PluginManagerPage_module_css_default.installContent,
 					footer: (0, react_jsx_runtime.jsxs)(_deepseek_ai_dsh_client_ui_primitives.Button, {
@@ -2044,10 +2162,11 @@ window.__ModuleLoader__.load({
 								className: PluginManagerPage_module_css_default.installField,
 								children: (0, react_jsx_runtime.jsx)("input", {
 									type: "text",
+									autoFocus: install.mirrorRecovery === true,
 									value: install.spec,
 									placeholder: t("installSpecPlaceholder"),
 									disabled: checking,
-									"aria-label": t("installSpecLabel"),
+									"aria-label": t(install.mirrorRecovery ? "installPackageLabel" : "installSpecLabel"),
 									"aria-invalid": install.inputError !== null,
 									"aria-describedby": install.inputError === null ? void 0 : errorId,
 									onChange: (event) => {
@@ -2767,7 +2886,8 @@ window.__ModuleLoader__.load({
 						onApproveBuilds: props.approveBuildsAndRetry,
 						onToggleRegistry: props.toggleRegistryOptions,
 						onChooseRegistry: props.chooseRegistry,
-						onChangeRegistry: props.changeRegistry
+						onChangeRegistry: props.changeRegistry,
+						onUseGithubMirror: props.useGithubMirror
 					}),
 					state.confirm === null ? null : (0, react_jsx_runtime.jsx)(ConfirmDialog, {
 						name: packageText(state.packages.find((pkg) => pkg.name === state.confirm?.packageName) ?? { name: state.confirm.packageName }, resolveText).title,
@@ -2808,7 +2928,7 @@ window.__ModuleLoader__.load({
 			bundlesTitle: "已安装",
 			officialTitle: "官方",
 			statusProblem: "异常",
-			statusBeta: "Beta",
+			statusBeta: "实验性",
 			reasonLabel: "原因",
 			metadataError: "包元信息错误：{error}",
 			versionTag: "v{version}",
@@ -2878,6 +2998,11 @@ window.__ModuleLoader__.load({
 			installingTitle: "插件安装中…",
 			installedTitle: "已安装",
 			installFailedTitle: "插件安装失败",
+			installGithubFailedTitle: "无法访问 GitHub",
+			installGithubTimeoutTitle: "连接 GitHub 超时",
+			installGithubFailedDescription: "请尝试其他安装来源。",
+			installUseGithubMirror: "改用国内镜像",
+			installPackageLabel: "插件包名",
 			installEdit: "编辑",
 			installEditAria: "返回编辑",
 			installCancelAndEdit: "取消安装并返回编辑",
@@ -2969,6 +3094,8 @@ window.__ModuleLoader__.load({
 			reasonStopProfile: "这个 profile 没有启用 HMR，正在使用的包要停止后用 dsh plugin 卸载",
 			reasonBundleInUse: "其他配置仍在使用这个组合包的组件，请先停用它们",
 			reasonStaleApproval: "待允许的安装脚本列表已变化，请重新安装以刷新",
+			reasonIncompatibleVersion: "{plugin} 与 DSH {runtime} 不兼容（要求 {peers}），运行它可能导致崩溃或数据丢失。请安装与当前 DSH 兼容的插件版本。",
+			reasonIncompatibleVersionUnnamed: "这个插件与当前 DSH 版本不兼容，运行它可能导致崩溃或数据丢失",
 			reasonOperationError: "Host 报告了一个错误"
 		};
 		/** English dictionary checked against the Chinese key set. */
@@ -2988,7 +3115,7 @@ window.__ModuleLoader__.load({
 			bundlesTitle: "Installed",
 			officialTitle: "Official",
 			statusProblem: "Problem",
-			statusBeta: "Beta",
+			statusBeta: "Experimental",
 			reasonLabel: "Reason",
 			metadataError: "Package metadata error: {error}",
 			versionTag: "v{version}",
@@ -3058,6 +3185,11 @@ window.__ModuleLoader__.load({
 			installingTitle: "Installing the plugin…",
 			installedTitle: "Installed",
 			installFailedTitle: "The plugin could not be installed",
+			installGithubFailedTitle: "Cannot access GitHub",
+			installGithubTimeoutTitle: "GitHub connection timed out",
+			installGithubFailedDescription: "Try another installation source.",
+			installUseGithubMirror: "Use mainland China mirror",
+			installPackageLabel: "Plugin package name",
 			installEdit: "Edit",
 			installEditAria: "Back to editing",
 			installCancelAndEdit: "Cancel installation and return to editing",
@@ -3149,6 +3281,8 @@ window.__ModuleLoader__.load({
 			reasonStopProfile: "This profile runs without HMR; stop it and uninstall the package with dsh plugin.",
 			reasonBundleInUse: "Other configuration still uses this bundle's components; switch them off first.",
 			reasonStaleApproval: "The pending script approvals changed; install again to refresh them.",
+			reasonIncompatibleVersion: "{plugin} is incompatible with DSH {runtime} (requires {peers}); running it may cause crashes or data loss. Install a plugin version compatible with this DSH.",
+			reasonIncompatibleVersionUnnamed: "This plugin is incompatible with the running DSH version; running it may cause crashes or data loss.",
 			reasonOperationError: "The Host reported an error."
 		};
 		//#endregion
@@ -3172,6 +3306,7 @@ window.__ModuleLoader__.load({
 			"remote",
 			"remote.pluginManager",
 			"remote.pluginInventory",
+			"remote.pluginRegistryProbe",
 			"configForms"
 		];
 		/**

package/lib/index.js

@@ -1,6 +1,142 @@
+import z from "@deepseek-ai/schemastery";
+import { MAX_TIMER_DELAY_MS } from "@deepseek-ai/dsh-timeout";
+import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 //#region lib/types/index.js
-/** Host loader entry for the plugin-manager tab's browser implementation exported from `./client`. */
-/** Host plugin body — no host-side behavior for the plugin manager tab. */
-function apply() {}
+/** Host registry-response probing for the plugin installation dialog. */
+var __runInitializers = function(thisArg, initializers, value) {
+	var useValue = arguments.length > 2;
+	for (var i = 0; i < initializers.length; i++) value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+	return useValue ? value : void 0;
+};
+var __esDecorate = function(ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+	function accept(f) {
+		if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected");
+		return f;
+	}
+	var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+	var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+	var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+	var _, done = false;
+	for (var i = decorators.length - 1; i >= 0; i--) {
+		var context = {};
+		for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+		for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+		context.addInitializer = function(f) {
+			if (done) throw new TypeError("Cannot add initializers after decoration has completed");
+			extraInitializers.push(accept(f || null));
+		};
+		var result = (0, decorators[i])(kind === "accessor" ? {
+			get: descriptor.get,
+			set: descriptor.set
+		} : descriptor[key], context);
+		if (kind === "accessor") {
+			if (result === void 0) continue;
+			if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+			if (_ = accept(result.get)) descriptor.get = _;
+			if (_ = accept(result.set)) descriptor.set = _;
+			if (_ = accept(result.init)) initializers.unshift(_);
+		} else if (_ = accept(result)) if (kind === "field") initializers.unshift(_);
+		else descriptor[key] = _;
+	}
+	if (target) Object.defineProperty(target, contextIn.name, descriptor);
+	done = true;
+};
+let PluginRegistryProbe = (() => {
+	let _classSuper = TypertRemoteService;
+	let _instanceExtraInitializers = [];
+	let _fastest_decorators;
+	return class PluginRegistryProbe extends _classSuper {
+		static {
+			const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+			_fastest_decorators = [Remote];
+			__esDecorate(this, null, _fastest_decorators, {
+				kind: "method",
+				name: "fastest",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "fastest" in obj,
+					get: (obj) => obj.fastest
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			if (_metadata) Object.defineProperty(this, Symbol.metadata, {
+				enumerable: true,
+				configurable: true,
+				writable: true,
+				value: _metadata
+			});
+		}
+		config = __runInitializers(this, _instanceExtraInitializers);
+		static Config = z.object({
+			registryProbeEnabled: z.boolean().default(true),
+			registryProbeTimeoutMs: z.natural().min(1).max(MAX_TIMER_DELAY_MS).default(1500),
+			registryProbeCacheTtlMs: z.natural().default(3e5)
+		});
+		lifetime = new AbortController();
+		pending;
+		cached;
+		constructor(ctx, config) {
+			super(ctx, "pluginRegistryProbe");
+			this.config = config;
+			ctx.effect(() => async () => {
+				this.lifetime.abort();
+				await this.pending;
+			});
+		}
+		/**
+		* Race npm and npmmirror HTTPS ping responses through the Host's fetch proxy.
+		* Concurrent readers share a probe; a winner cancels and awaits the other request.
+		* @returns the first registry with a successful response, or null when disabled or neither responds successfully; results are cached.
+		* @throws rejects when the service has been unloaded.
+		*/
+		async fastest() {
+			this.lifetime.signal.throwIfAborted();
+			if (!this.config.registryProbeEnabled) return null;
+			if (this.cached !== void 0 && this.cached.expiresAt > Date.now()) return this.cached.registry;
+			this.pending ??= this.probe().finally(() => {
+				this.pending = void 0;
+			});
+			return this.pending;
+		}
+		async probe() {
+			const finished = new AbortController();
+			const signal = AbortSignal.any([
+				this.lifetime.signal,
+				finished.signal,
+				AbortSignal.timeout(this.config.registryProbeTimeoutMs)
+			]);
+			const requests = ["https://registry.npmjs.org/-/ping", "https://registry.npmmirror.com/-/ping"].map(async (endpoint) => ({
+				registry: new URL("/", endpoint).href,
+				response: await fetch(endpoint, {
+					signal,
+					redirect: "error"
+				})
+			}));
+			const successful = requests.map(async (request) => {
+				const { registry, response } = await request;
+				if (!response.ok) throw new Error(`Registry ping returned HTTP ${response.status}`);
+				return registry;
+			});
+			let registry;
+			try {
+				registry = await Promise.any(successful);
+			} catch (_unavailableRegistries) {
+				registry = null;
+			} finally {
+				finished.abort();
+				const responses = await Promise.allSettled(requests);
+				await Promise.allSettled(responses.map(async (result) => {
+					if (result.status === "fulfilled") await result.value.response.body?.cancel();
+				}));
+			}
+			if (!this.lifetime.signal.aborted) this.cached = {
+				registry,
+				expiresAt: Date.now() + this.config.registryProbeCacheTtlMs
+			};
+			return registry;
+		}
+	};
+})();
 //#endregion
-export { apply };
+export { PluginRegistryProbe as default };

package/lib/typert.host.d.ts

@@ -0,0 +1,3 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from FaceModel — do not edit. */
+
+export declare const TYPERT: unknown

package/lib/typert.host.js

@@ -0,0 +1,53 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from FaceModel — do not edit. */
+import { z } from 'zod'
+
+let _deepseek_ai_dsh_client_ui_plugin_manager_pluginRegistryProbe_fastest_result$schema$value
+const _deepseek_ai_dsh_client_ui_plugin_manager_pluginRegistryProbe_fastest_result$schema = () => (_deepseek_ai_dsh_client_ui_plugin_manager_pluginRegistryProbe_fastest_result$schema$value ??= z.union([z.literal(null), z.string()]))
+
+export const TYPERT = {
+  package: '@deepseek-ai/dsh-client-ui-plugin-manager',
+  face: 'host',
+  schemas: [
+  ],
+  invocations: [
+    {
+      id: '@deepseek-ai/dsh-client-ui-plugin-manager#pluginRegistryProbe/fastest',
+      service: 'pluginRegistryProbe',
+      namespace: 'pluginRegistryProbe',
+      method: 'fastest',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-client-ui-plugin-manager#pluginRegistryProbe/fastest:result',
+        create: _deepseek_ai_dsh_client_ui_plugin_manager_pluginRegistryProbe_fastest_result$schema,
+      },
+      sourceLocation: {"file":"packages/client/ui-plugin-manager/src/index.ts","line":51,"column":9},
+    },
+  ],
+  model: {
+    "services": [
+      {
+        "description": "Compares public registry responses on the Host; the Client owns the initial selection.",
+        "summary": "Compares public registry responses on the Host; the Client owns the initial selection.",
+        "tags": [],
+        "jsDoc": "/** Compares public registry responses on the Host; the Client owns the initial selection. */",
+        "key": "pluginRegistryProbe",
+        "exportName": "default",
+        "members": [
+          {
+            "kind": "method",
+            "name": "fastest",
+            "signature": "@Remote async fastest(): Promise<string | null>",
+            "summary": "Race npm and npmmirror HTTPS ping responses through the Host's fetch proxy.",
+            "jsDoc": "/**\n * Race npm and npmmirror HTTPS ping responses through the Host's fetch proxy.\n * Concurrent readers share a probe; a winner cancels and awaits the other request.\n * @returns the first registry with a successful response, or null when disabled or neither responds successfully; results are cached.\n * @throws rejects when the service has been unloaded.\n */"
+          }
+        ],
+        "types": []
+      }
+    ],
+    "events": [],
+    "objects": []
+  },
+}

package/lib/typert.remote-client.d.ts

@@ -0,0 +1,21 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from the Host FaceModel — do not edit. */
+import type {
+  RemoteResult,
+  TypertRemoteContribution,
+} from '@deepseek-ai/dsh-typert-protocol'
+
+declare module '@deepseek-ai/dsh-typert-protocol' {
+  interface TypertRemoteNamespace$706c7567696e526567697374727950726f6265 {
+    fastest: () => Promise<RemoteResult<string | null>>
+  }
+  interface TypertRemoteMap {
+    'pluginRegistryProbe/fastest': () => Promise<RemoteResult<string | null>>
+  }
+  interface TypertRemoteNamespaceMap {
+    'pluginRegistryProbe': TypertRemoteNamespace$706c7567696e526567697374727950726f6265
+  }
+}
+
+export declare const TYPERT_REMOTE: TypertRemoteContribution
+export default TYPERT_REMOTE
+//# sourceMappingURL=typert.remote-client.d.ts.map

package/lib/typert.remote-client.js

@@ -0,0 +1,28 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from the Host FaceModel — do not edit. */
+import { z } from 'zod'
+
+let _deepseek_ai_dsh_client_ui_plugin_manager_pluginRegistryProbe_fastest_result$schema$value
+const _deepseek_ai_dsh_client_ui_plugin_manager_pluginRegistryProbe_fastest_result$schema = () => (_deepseek_ai_dsh_client_ui_plugin_manager_pluginRegistryProbe_fastest_result$schema$value ??= z.union([z.literal(null), z.string()]))
+
+export const TYPERT_REMOTE = {
+  package: '@deepseek-ai/dsh-client-ui-plugin-manager',
+  descriptors: [
+    {
+      id: '@deepseek-ai/dsh-client-ui-plugin-manager#pluginRegistryProbe/fastest',
+      service: 'pluginRegistryProbe',
+      namespace: 'pluginRegistryProbe',
+      method: 'fastest',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-client-ui-plugin-manager#pluginRegistryProbe/fastest:result',
+        create: _deepseek_ai_dsh_client_ui_plugin_manager_pluginRegistryProbe_fastest_result$schema,
+      },
+      sourceLocation: {"file":"packages/client/ui-plugin-manager/src/index.ts","line":51,"column":9},
+    },
+  ],
+}
+
+export default TYPERT_REMOTE

package/lib/types/client/locales.d.ts

@@ -86,6 +86,11 @@ export declare const zh: {
     installingTitle: string;
     installedTitle: string;
     installFailedTitle: string;
+    installGithubFailedTitle: string;
+    installGithubTimeoutTitle: string;
+    installGithubFailedDescription: string;
+    installUseGithubMirror: string;
+    installPackageLabel: string;
     installEdit: string;
     installEditAria: string;
     installCancelAndEdit: string;
@@ -177,6 +182,8 @@ export declare const zh: {
     reasonStopProfile: string;
     reasonBundleInUse: string;
     reasonStaleApproval: string;
+    reasonIncompatibleVersion: string;
+    reasonIncompatibleVersionUnnamed: string;
     reasonOperationError: string;
 };
 /** Plugin manager locale key union. */
@@ -268,6 +275,11 @@ export declare const en: {
     installingTitle: string;
     installedTitle: string;
     installFailedTitle: string;
+    installGithubFailedTitle: string;
+    installGithubTimeoutTitle: string;
+    installGithubFailedDescription: string;
+    installUseGithubMirror: string;
+    installPackageLabel: string;
     installEdit: string;
     installEditAria: string;
     installCancelAndEdit: string;
@@ -359,6 +371,8 @@ export declare const en: {
     reasonStopProfile: string;
     reasonBundleInUse: string;
     reasonStaleApproval: string;
+    reasonIncompatibleVersion: string;
+    reasonIncompatibleVersionUnnamed: string;
     reasonOperationError: string;
 };
 //# sourceMappingURL=locales.d.ts.map

package/lib/types/client/manager-store.d.ts

@@ -6,7 +6,7 @@
  * change made on another surface shows here without a manual refresh.
  */
 import type { Context as ClientContext } from '@deepseek-ai/cordis';
-import type { BundleInfo, ManagementError, PluginEntryId, PluginInfo, PluginInspectProblem, PluginInstallFailureKind, PluginInstallLogChunk, PluginInstallProgress, PluginInstallRequestId, PluginRegistries, PluginSpecInspection, ReadOnlyReason, Registry } from '@deepseek-ai/dsh-api-remotes/client';
+import type { BundleInfo, IncompatiblePlugin, ManagementError, PluginEntryId, PluginInfo, PluginInspectProblem, PluginInstallFailureKind, PluginInstallLogChunk, PluginInstallProgress, PluginInstallRequestId, PluginRegistries, PluginSpecInspection, ReadOnlyReason, Registry } from '@deepseek-ai/dsh-api-remotes/client';
 import { type SnapshotStore } from '@deepseek-ai/dsh-client-store';
 import type { HostObservable } from '@deepseek-ai/dsh-client-ui-slots';
 import type { LocalizedText, PluginLocalizedMeta } from '@deepseek-ai/dsh-package-manifest';
@@ -38,6 +38,8 @@ export type ManagerNotice = {
     readonly code?: ManagementError['code'];
     /** The Host's diagnostic or the transport's words, shown verbatim; empty when the code says it all. */
     readonly reason: string;
+    /** The packages an `incompatible-version` refusal names. */
+    readonly incompatible?: readonly IncompatiblePlugin[];
     readonly packageName?: string;
     readonly seq: number;
 };
@@ -127,6 +129,8 @@ export interface InstallState {
     readonly open: boolean;
     /** The package spec as typed. */
     readonly spec: string;
+    /** The spec form was reopened after switching away from a failed GitHub address. */
+    readonly mirrorRecovery?: boolean;
     /** The registries the Host configured, read when the dialog opens; null until the Host answered. */
     readonly registries: PluginRegistries | null;
     /** The registry this install asks first: the one last used, else the Host's first. */
@@ -166,6 +170,8 @@ export interface InstallState {
     readonly failure: {
         readonly reason: string;
         readonly code?: ManagementError['code'];
+        /** The packages an `incompatible-version` refusal names. */
+        readonly incompatible?: readonly IncompatiblePlugin[];
         readonly kind?: PluginInstallFailureKind;
         /** What the last failed run could not reach, as the Host attributed it: the registry, or the spec's own host. */
         readonly failedAt?: 'registry' | 'spec-host';
@@ -183,6 +189,12 @@ export interface InstallState {
  * @returns true while a Host result or a check for an active request is outstanding.
  */
 export declare function isInstallPending(phase: InstallState['phase']): boolean;
+/**
+ * Offer the configured mainland mirror after a confirmed GitHub connection failure.
+ * @param install - the installation and the Host's failure attribution.
+ * @returns the offered mirror URL, or undefined when this recovery does not apply.
+ */
+export declare function githubRecoveryRegistry(install: InstallState): string | undefined;
 /** A destructive action waiting for the user's confirmation: a package's uninstall. */
 export interface ConfirmState {
     readonly action: 'uninstall';
@@ -231,6 +243,8 @@ export interface PluginManagerFace {
     chooseRegistry: (choice: RegistryChoice) => void;
     /** From the failed screen: back to the spec with the registry options unfolded. */
     changeRegistry: () => void;
+    /** Return from a GitHub connection failure to an empty spec with the offered mainland mirror selected. */
+    useGithubMirror: () => void;
     /** Allow the install scripts the failed run left pending, saved for this profile, and run the same spec again. */
     approveBuildsAndRetry: () => void;
     /** Leave the check or the failed screen for the spec, or ask the Host to stop the run and wait for its cleanup. */
@@ -285,6 +299,7 @@ export declare class PluginManagerController {
     private inspectAbort;
     private request;
     private noticeSeq;
+    private registryRead;
     /** The registry last used from this browser, kept across dialogs and page loads; null until one was used. */
     private readonly registryMemory;
     /**
@@ -310,6 +325,7 @@ export declare class PluginManagerController {
      * @param progress - a request id and phase received from the Host.
      */
     installProgress(progress: PluginInstallProgress): void;
+    private currentRegistryRead;
     /** Read the registries the Host offers, for the dialog just opened; a refused read leaves pnpm's own and a typed one. */
     private readRegistries;
     /**

package/lib/types/client/presentation.d.ts

@@ -1,5 +1,5 @@
 /** Display labels and toast sentences for global plugin management. */
-import type { ManagementError, Registry } from '@deepseek-ai/dsh-api-remotes/client';
+import type { IncompatiblePlugin, ManagementError, Registry } from '@deepseek-ai/dsh-api-remotes/client';
 import type { PropsLocale } from '@deepseek-ai/dsh-client-ui-slots';
 import type { ManagerNotice, PackageRow, PackageView, PluginManagerFace } from './manager-store.ts';
 /** The translate seat of the manager's dictionary. */
@@ -17,15 +17,16 @@ export declare function registryText(registry: Registry, t: Translate, resolved:
     host: string;
 };
 /**
- * What a management error reads as: the code's sentence, or, for an
- * operation error, the Host's diagnostic as it is.
- * @param error - the Host's code and its diagnostic, when it has one.
+ * What a management error reads as: the code's sentence, one sentence per
+ * package an incompatibility names, or, for an operation error, the Host's diagnostic as it is.
+ * @param error - the Host's code, its diagnostic, and the packages an incompatibility names.
  * @param t - the manager's translate seat.
  * @returns the sentence.
  */
 export declare function managementText(error: {
     readonly code: ManagementError['code'];
     readonly diagnostic?: string;
+    readonly incompatible?: readonly IncompatiblePlugin[];
 }, t: Translate): string;
 /**
  * Compact a package name to what a person calls it.

package/lib/types/index.d.ts

@@ -1,4 +1,36 @@
-/** Host loader entry for the plugin-manager tab's browser implementation exported from `./client`. */
-/** Host plugin body — no host-side behavior for the plugin manager tab. */
-export declare function apply(): void;
+/** Host registry-response probing for the plugin installation dialog. */
+import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        pluginRegistryProbe: PluginRegistryProbe;
+    }
+}
+/** Registry-probe deadline and process-local cache policy. */
+export interface Config {
+    /** Whether the dialog can compare the public npm registries. */
+    registryProbeEnabled: boolean;
+    /** Deadline for the parallel HTTPS probes, including response cleanup. */
+    registryProbeTimeoutMs: number;
+    /** Lifetime of a winning registry or unavailable result. */
+    registryProbeCacheTtlMs: number;
+}
+/** Compares public registry responses on the Host; the Client owns the initial selection. */
+export default class PluginRegistryProbe extends TypertRemoteService {
+    private readonly config;
+    static Config: z<Partial<Config>, Config>;
+    private readonly lifetime;
+    private pending;
+    private cached;
+    constructor(ctx: Context, config: Config);
+    /**
+     * Race npm and npmmirror HTTPS ping responses through the Host's fetch proxy.
+     * Concurrent readers share a probe; a winner cancels and awaits the other request.
+     * @returns the first registry with a successful response, or null when disabled or neither responds successfully; results are cached.
+     * @throws rejects when the service has been unloaded.
+     */
+    fastest(): Promise<string | null>;
+    private probe;
+}
 //# sourceMappingURL=index.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-client-ui-plugin-manager",
   "description": "Plugin management for the dsh web client: the sidebar Plugins panel installs, enables, disables, retries, and composes installed plugin packages",
-  "version": "0.1.7-alpha.1",
+  "version": "0.1.7-rc.1",
   "publishConfig": {
     "access": "public"
   },
@@ -23,7 +23,15 @@
       "default": "./lib/client.js"
     },
     "./src/*": "./src/*",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./typert": {
+      "types": "./lib/typert.host.d.ts",
+      "default": "./lib/typert.host.js"
+    },
+    "./remote": {
+      "types": "./lib/typert.remote-client.d.ts",
+      "default": "./lib/typert.remote-client.js"
+    }
   },
   "dsh": {
     "client": {
@@ -38,7 +46,7 @@
   },
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.3"
+    "@deepseek-ai/cordis": "~4.0.4"
   },
   "devDependencies": {
     "@testing-library/react": "^16.1.0",
@@ -47,26 +55,36 @@
     "clsx": "^2.1.1",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
-    "@deepseek-ai/cordis": "^4.0.3",
-    "@deepseek-ai/dsh-api-remotes": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-client-store": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-client-test-runtime": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-client-ui-layout": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-client-ui-sidebar": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-plugin-manager": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-package-manifest": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-util-crypto": "^0.1.7-alpha.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.7-alpha.1"
+    "@deepseek-ai/cordis": "~4.0.4",
+    "@deepseek-ai/dsh-client-locale": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-api-remotes": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-store": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-test-runtime": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-layout": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-package-manifest": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-util-crypto": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-plugin-manager": "0.1.7-rc.1"
   },
   "files": [
     "lib/index.js",
     "lib/client.js",
-    "lib/types/**/*.d.ts"
+    "lib/types/**/*.d.ts",
+    "lib/typert.host.js",
+    "lib/typert.host.d.ts",
+    "lib/typert.remote-client.js",
+    "lib/typert.remote-client.d.ts"
   ],
+  "dependencies": {
+    "zod": "^4.4.3",
+    "@deepseek-ai/dsh-timeout": "0.1.7-rc.1",
+    "@deepseek-ai/schemastery": "~3.18.4",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.7-rc.1"
+  },
   "scripts": {
     "bundle": "tsdown",
     "watch": "tsdown --watch"