@dsh-plus/lifeboat 0.1.4 → 0.1.6

package/lib/client.js

@@ -4,8 +4,406 @@ window.__ModuleLoader__.load({
 		var module = { exports: {} };
 		var exports = module.exports;
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		//#region \0rolldown/runtime.js
+		var __defProp = Object.defineProperty;
+		var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+		var __getOwnPropNames = Object.getOwnPropertyNames;
+		var __hasOwnProp = Object.prototype.hasOwnProperty;
+		var __esmMin = (fn, res, err) => () => {
+			if (err) throw err[0];
+			try {
+				return fn && (res = fn(fn = 0)), res;
+			} catch (e) {
+				throw err = [e], e;
+			}
+		};
+		var __exportAll = (all, no_symbols) => {
+			let target = {};
+			for (var name in all) __defProp(target, name, {
+				get: all[name],
+				enumerable: true
+			});
+			if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+			return target;
+		};
+		var __copyProps = (to, from, except, desc) => {
+			if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+				key = keys[i];
+				if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+					get: ((k) => from[k]).bind(null, key),
+					enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+				});
+			}
+			return to;
+		};
+		var __toCommonJS = (mod) => __hasOwnProp.call(mod, "module.exports") ? mod["module.exports"] : __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+		//#endregion
+		let react_jsx_runtime = require("react/jsx-runtime");
+		let react = require("react");
+		//#region ../shared/src/client/icons.tsx
+		var init_icons = __esmMin((() => {}));
+		//#endregion
+		//#region ../shared/src/client/card.tsx
+		var init_card = __esmMin((() => {
+			init_icons();
+		}));
+		//#endregion
+		//#region ../shared/src/client/fetch.ts
+		/**
+		* 同源自定义端点的最小 fetch 封装（各插件 client/api.ts 的公共收编版）。
+		* 仅同源（credentials: same-origin），错误统一抛 Error(body.error)。
+		* @module @dsh-plus/shared/client/fetch
+		*/
+		async function parse(res) {
+			const body = await res.json();
+			if (!res.ok) throw new Error(body.error ?? `HTTP ${res.status}`);
+			return body;
+		}
+		/** GET 同源 JSON 端点。 */
+		async function getJson(route) {
+			return parse(await fetch(route, { credentials: "same-origin" }));
+		}
+		/** POST 同源 JSON 端点（body 可省略）。 */
+		async function postJson(route, body) {
+			return parse(await fetch(route, {
+				method: "POST",
+				credentials: "same-origin",
+				headers: { "content-type": "application/json" },
+				body: body === void 0 ? void 0 : JSON.stringify(body)
+			}));
+		}
+		var init_fetch = __esmMin((() => {}));
+		//#endregion
+		//#region ../shared/src/client/fields.tsx
+		var init_fields = __esmMin((() => {}));
+		//#endregion
+		//#region ../shared/src/client/styles.ts
+		/**
+		* 幂等注入样式标签（官方 data-plugin-css 约定）；返回新标签，
+		* 已存在或环境无 document 时返回 null（调用方 effect 卸载用）。
+		*/
+		function injectCardStyle(pluginId, css) {
+			if (typeof document === "undefined") return null;
+			const tagId = `${pluginId}/card.css`;
+			if (document.querySelector(`style[data-plugin-css=${JSON.stringify(tagId)}]`) !== null) return null;
+			const tag = document.createElement("style");
+			tag.dataset.plugin = pluginId;
+			tag.dataset.pluginCss = tagId;
+			tag.textContent = css;
+			document.head.appendChild(tag);
+			return tag;
+		}
+		var init_styles = __esmMin((() => {}));
+		//#endregion
+		//#region ../shared/src/client/index.ts
+		var init_client = __esmMin((() => {
+			init_card();
+			init_fetch();
+			init_fields();
+			init_icons();
+			init_styles();
+		}));
+		//#endregion
+		//#region src/client/health-styles.ts
+		/** 幂等注入健康页样式标签。 */
+		function injectHealthStyle() {
+			return injectCardStyle(PLUGIN_ID, healthCss);
+		}
+		var PLUGIN_ID, healthCss;
+		var init_health_styles = __esmMin((() => {
+			init_client();
+			PLUGIN_ID = "@dsh-plus/lifeboat";
+			healthCss = `
+.dlb-tab{display:flex;flex-direction:column;gap:14px;min-width:0}
+.dlb-empty{color:var(--dsw-alias-label-tertiary);font-size:13px;margin:4px 0}
+.dlb-title{color:var(--dsw-alias-label-secondary);font-size:13px;font-weight:600;margin:10px 0 0}
+.dlb-notice{color:var(--dsw-alias-label-secondary);font-size:12px;margin:0}
+.dlb-fallback{border:1px solid var(--dsw-alias-label-warning,#e0a03c);border-radius:10px;padding:10px 12px;display:flex;flex-direction:column;gap:6px;background:var(--dsw-alias-bg-layer-3)}
+.dlb-fallbackTitle{color:var(--dsw-alias-label-warning,#e0a03c);font-size:13px;font-weight:600;margin:0}
+.dlb-kv{display:flex;align-items:center;gap:8px;font-size:12px;flex-wrap:wrap}
+.dlb-kv span{color:var(--dsw-alias-label-tertiary);flex:none}
+.dlb-kv code{color:var(--dsw-alias-label-primary);font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;word-break:break-all}
+.dlb-cards{display:flex;flex-direction:column;gap:8px}
+.dlb-quarantineCard{border:1px solid var(--dsw-alias-border-l2);border-radius:10px;padding:10px 12px;display:flex;align-items:center;gap:10px;flex-wrap:wrap;background:var(--dsw-alias-bg-layer-3)}
+.dlb-pluginName{color:var(--dsw-alias-label-primary);font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:13px;font-weight:600;flex:1;min-width:0;word-break:break-all}
+.dlb-confirm{display:flex;align-items:center;gap:8px;flex-wrap:wrap;flex-basis:100%}
+.dlb-confirmText{color:var(--dsw-alias-label-secondary);font-size:12px;flex:1;min-width:160px;line-height:1.5}
+.dlb-btn{appearance:none;font:inherit;cursor:pointer;border:1px solid #0000;border-radius:8px;padding:5px 14px;font-size:13px;line-height:1.5;flex:none}
+.dlb-btnGhost{border-color:var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);background:0 0}
+.dlb-btnGhost:hover:not(:disabled){color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-dimmed)}
+.dlb-btnPrimary{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}
+.dlb-btn:disabled{opacity:.4;cursor:default}
+.dlb-journal{display:flex;flex-direction:column;gap:10px}
+.dlb-journalDay{display:flex;flex-direction:column;gap:2px}
+.dlb-dayLabel{color:var(--dsw-alias-label-tertiary);font-size:11px;font-weight:600;margin-bottom:2px}
+.dlb-entry{display:flex;align-items:baseline;gap:8px;font-size:12px;line-height:1.6;flex-wrap:wrap}
+.dlb-kind{flex:none;border-radius:999px;padding:0 8px;font-size:10px;font-weight:600;line-height:17px;white-space:nowrap}
+.dlb-kindInfo{background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary)}
+.dlb-kindAlert{background:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-bg-base)}
+.dlb-kindQuarantine{background:var(--dsw-alias-label-warning,#e0a03c);color:var(--dsw-alias-bg-base)}
+.dlb-kindRestore{background:var(--dsw-alias-state-success,#3d9a50);color:var(--dsw-alias-bg-base)}
+.dlb-kindFallback{background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary)}
+.dlb-entryAt{color:var(--dsw-alias-label-tertiary);flex:none;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11px}
+.dlb-entryDetail{color:var(--dsw-alias-label-primary);min-width:0;word-break:break-word;white-space:pre-wrap;flex:1;flex-basis:320px}
+@media (max-width:767px){
+.dlb-btn{min-height:44px}
+.dlb-quarantineCard{flex-direction:column;align-items:stretch}
+.dlb-confirm{flex-direction:column;align-items:stretch}
+.dlb-entryDetail{flex-basis:100%}
+}
+`;
+		}));
+		//#endregion
+		//#region src/client/health-tab.tsx
+		var health_tab_exports = /* @__PURE__ */ __exportAll({ mountHealthTab: () => mountHealthTab });
+		function HealthTab(props) {
+			const { t } = props;
+			const [status, setStatus] = (0, react.useState)(null);
+			const [failed, setFailed] = (0, react.useState)(false);
+			const [busyName, setBusyName] = (0, react.useState)(null);
+			const [notice, setNotice] = (0, react.useState)(null);
+			const [confirming, setConfirming] = (0, react.useState)(null);
+			const load = (0, react.useCallback)(() => {
+				getJson(ROUTE_STATUS).then((data) => {
+					setStatus(data);
+					setFailed(false);
+				}).catch(() => setFailed(true));
+			}, []);
+			(0, react.useEffect)(() => {
+				load();
+			}, [load]);
+			const onRestore = (name) => {
+				setBusyName(name);
+				setConfirming(null);
+				postJson(ROUTE_RESTORE, { name }).then(() => {
+					setNotice(t("restored"));
+					load();
+				}).catch((error) => {
+					setNotice(`${t("restoreFailed")}${error instanceof Error ? error.message : ""}`);
+				}).finally(() => setBusyName(null));
+			};
+			const journalGroups = (0, react.useMemo)(() => {
+				if (status === null) return [];
+				const groups = /* @__PURE__ */ new Map();
+				for (const entry of [...status.journal].reverse()) {
+					const day = entry.at.slice(0, 10);
+					const list = groups.get(day) ?? [];
+					list.push(entry);
+					groups.set(day, list);
+				}
+				return [...groups.entries()];
+			}, [status]);
+			if (status === null) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dlb-tab",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					className: "dlb-empty",
+					children: failed ? t("loadFailed") : t("pluginOk") === "OK" ? "…" : "…"
+				}), failed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					className: "dlb-btn dlb-btnGhost",
+					onClick: load,
+					children: t("retry")
+				}) : null]
+			});
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dlb-tab",
+				children: [
+					notice !== null ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dlb-notice",
+						role: "status",
+						children: notice
+					}) : null,
+					status.llmFallback?.active === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dlb-fallback",
+						role: "status",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dlb-fallbackTitle",
+								children: t("fallbackActive")
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dlb-kv",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("fallbackFrom") }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("code", { children: [
+									status.llmFallback.originalProvider,
+									"/",
+									status.llmFallback.originalModel
+								] })]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dlb-kv",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("fallbackTo") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: status.llmFallback.fallbackProvider })]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dlb-kv",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("fallbackAt") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: status.llmFallback.at.slice(0, 19).replace("T", " ") })]
+							})
+						]
+					}) : null,
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+						className: "dlb-title",
+						children: t("quarantined")
+					}),
+					status.quarantined.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dlb-empty",
+						children: t("emptyQuarantined")
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dlb-cards",
+						children: status.quarantined.map((name) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dlb-quarantineCard",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+								className: "dlb-pluginName",
+								children: name
+							}), confirming === name ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dlb-confirm",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "dlb-confirmText",
+										children: t("restoreConfirm")
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "dlb-btn dlb-btnGhost",
+										disabled: busyName === name,
+										onClick: () => setConfirming(null),
+										children: "×"
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "dlb-btn dlb-btnPrimary",
+										disabled: busyName === name,
+										onClick: () => onRestore(name),
+										children: busyName === name ? t("restoring") : t("restore")
+									})
+								]
+							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dlb-btn dlb-btnPrimary",
+								disabled: busyName === name,
+								onClick: () => setConfirming(name),
+								children: busyName === name ? t("restoring") : t("restore")
+							})]
+						}, name))
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+						className: "dlb-title",
+						children: t("journalTitle")
+					}),
+					journalGroups.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dlb-empty",
+						children: t("emptyJournal")
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dlb-journal",
+						children: journalGroups.map(([day, entries]) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dlb-journalDay",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dlb-dayLabel",
+								children: day
+							}), entries.map((entry) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dlb-entry",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: `dlb-kind ${KIND_STYLES[entry.kind] ?? "dlb-kindInfo"}`,
+										children: entry.kind
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "dlb-entryAt",
+										children: entry.at.slice(11, 19)
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "dlb-entryDetail",
+										children: entry.detail
+									})
+								]
+							}, `${entry.at}-${entry.kind}`))]
+						}, day))
+					})
+				]
+			});
+		}
+		/** 挂载健康页（由 client.ts 延迟 require；任何异常由调用方捕获）。 */
+		function mountHealthTab(ctx) {
+			const c = ctx;
+			const tag = injectHealthStyle();
+			c.effect(() => () => {
+				tag?.remove();
+			}, "lifeboat: health style");
+			c.effect(() => c.locale.register(NS, {
+				zh: zhDict,
+				en: enDict
+			}), "lifeboat: locale");
+			const t = c.locale.bind(NS);
+			c.slots.inject("settings.plugins.tab", () => c.slots.register({
+				name: "settings.plugins.tab",
+				id: "dsh-plus-lifeboat",
+				order: 20,
+				label: () => t("tab"),
+				inject: () => ({ t })
+			}, HealthTab));
+		}
+		var NS, ROUTE_STATUS, ROUTE_RESTORE, KIND_STYLES, zhDict, enDict;
+		var init_health_tab = __esmMin((() => {
+			init_client();
+			init_health_styles();
+			NS = "dsh-plus-lifeboat";
+			ROUTE_STATUS = "/dsh-plus/lifeboat/status";
+			ROUTE_RESTORE = "/dsh-plus/lifeboat/restore";
+			KIND_STYLES = {
+				alert: "dlb-kindAlert",
+				quarantine: "dlb-kindQuarantine",
+				"quarantine-restore": "dlb-kindRestore",
+				"llm-fallback": "dlb-kindFallback",
+				"llm-fallback-revert": "dlb-kindRestore"
+			};
+			zhDict = {
+				tab: "救生艇",
+				fallbackActive: "LLM 应急翻译进行中",
+				fallbackFrom: "源路由",
+				fallbackTo: "临时路由",
+				fallbackAt: "启用时间",
+				quarantined: "已隔离插件",
+				restore: "恢复",
+				restoring: "恢复中…",
+				restoreConfirm: "确认恢复该插件？将移除用户 patch 层的禁用覆盖，热应用即时生效。",
+				journalTitle: "操作日志",
+				pluginsTitle: "dsh-plus 插件状态",
+				pluginFailed: "FAILED",
+				pluginOk: "正常",
+				pluginDisabled: "已禁用",
+				emptyJournal: "暂无记录。",
+				emptyQuarantined: "当前无隔离插件。",
+				loadFailed: "状态加载失败：",
+				retry: "重试",
+				restored: "已恢复，热应用即时生效。",
+				restoreFailed: "恢复失败："
+			};
+			enDict = {
+				tab: "Lifeboat",
+				fallbackActive: "LLM emergency translation active",
+				fallbackFrom: "Source route",
+				fallbackTo: "Fallback route",
+				fallbackAt: "Since",
+				quarantined: "Quarantined plugins",
+				restore: "Restore",
+				restoring: "Restoring…",
+				restoreConfirm: "Restore this plugin? The disable override in the user patch layer will be removed and hot-applied.",
+				journalTitle: "Journal",
+				pluginsTitle: "dsh-plus plugin status",
+				pluginFailed: "FAILED",
+				pluginOk: "OK",
+				pluginDisabled: "Disabled",
+				emptyJournal: "No entries yet.",
+				emptyQuarantined: "No quarantined plugins.",
+				loadFailed: "Failed to load: ",
+				retry: "Retry",
+				restored: "Restored; hot-applied immediately.",
+				restoreFailed: "Restore failed: "
+			};
+		}));
+		//#endregion
 		//#region src/client/client.ts
 		const name = "dsh-plus-lifeboat";
+		/** 健康页需要的 cordis 服务 key（哨兵段只用 root ctx 原生面，不依赖这些）。 */
+		const inject = ["slots", "locale"];
 		/** Runtime mirror: FiberState 是 cordis 跨包 const enum（FAILED = 3，cordis 4.0.1）。 */
 		const FIBER_FAILED = 3;
 		/** 永不回报的条目：救生艇自身与聚合 bundle。 */
@@ -28,9 +426,13 @@ window.__ModuleLoader__.load({
 					} catch {}
 				});
 			} catch {}
+			try {
+				(init_health_tab(), __toCommonJS(health_tab_exports)).mountHealthTab(ctx);
+			} catch {}
 		}
 		//#endregion
 		exports.apply = apply;
+		exports.inject = inject;
 		exports.name = name;
 		return module.exports;
 	}

package/lib/index.js

@@ -231,38 +231,6 @@ function installLlmFallback(ctx, deps) {
 	ctx.root.on("llm/adapters-updated", run);
 }
 //#endregion
-//#region src/notify.ts
-/**
-* 装配告警出口。返回同步派单函数：内部异步发送，失败只记日志。
-* notify-email 出现时升级为邮件；全程 journal 兜底可溯。
-*/
-function installAlerter(ctx, journal) {
-	const logger = ctx.logger("lifeboat");
-	let mailer;
-	ctx.inject(["notifyEmail"], (mailCtx) => {
-		mailer = mailCtx.notifyEmail;
-		return () => {
-			mailer = void 0;
-		};
-	});
-	return (subject, text) => {
-		journal("alert", `${subject} | ${text}`);
-		const active = mailer;
-		if (!active?.sendNotice) {
-			logger.warn(`${subject} —— ${text}`);
-			return;
-		}
-		active.sendNotice({
-			subject,
-			text
-		}).then((result) => {
-			if (!result.ok) logger.warn(`邮件告警投递失败: ${result.detail}`);
-		}, (error) => {
-			logger.warn(`邮件告警异常: ${error instanceof Error ? error.message : String(error)}`);
-		});
-	};
-}
-//#endregion
 //#region src/patch-file.ts
 /**
 * profile 用户 patch 文件（cordis.patch.yml）的安全写入。
@@ -299,6 +267,47 @@ async function appendDisable(patchFile, targetId) {
 	await rename(tmp, patchFile);
 	return true;
 }
+/** 顶层条目中已禁用的 id 列表（不含 insert 子列表；用户层 disabled 语义只在顶层）。 */
+function listDisabled(entries) {
+	const out = [];
+	for (const entry of entries) if (typeof entry.id === "string" && entry.disabled === true) out.push(entry.id);
+	return out;
+}
+/**
+* 从 patch 文件移除针对 targetId 的禁用覆盖（恢复插件）；返回是否实际写入。
+* 只移除「id 定向且 disabled: true」的行，其余内容（注释经 yaml 文档保留、
+* 其他条目）原样不动；无该覆盖时幂等返回 false。
+* @throws 文件不可读/顶层不是数组/落盘失败——调用方负责告警。
+*/
+async function removeDisable(patchFile, targetId) {
+	const text = await readFile(patchFile, "utf-8");
+	const doc = parseDocument(text);
+	const root = doc.toJS();
+	if (!Array.isArray(root)) throw new Error(`patch 文件顶层不是数组: ${patchFile}`);
+	let removed = false;
+	const items = doc.contents;
+	if (items?.items !== void 0 && Array.isArray(items.items)) {
+		const headComment = items.items[0]?.commentBefore;
+		doc.contents.items = items.items.filter((item) => {
+			const value = item.toJS?.(doc);
+			if (value !== void 0 && typeof value === "object" && value.id === targetId && value.disabled === true) {
+				removed = true;
+				return false;
+			}
+			return true;
+		});
+		if (removed && headComment !== void 0 && doc.contents.items.length > 0) {
+			const next = doc.contents.items[0];
+			if (next.commentBefore === void 0) next.commentBefore = headComment;
+		}
+	}
+	if (!removed) return false;
+	await copyFile(patchFile, `${patchFile}.lifeboat.bak`);
+	const tmp = `${patchFile}.lifeboat.tmp`;
+	await writeFile(tmp, doc.toString(), "utf-8");
+	await rename(tmp, patchFile);
+	return true;
+}
 //#endregion
 //#region src/quarantine.ts
 /** Runtime mirror: FiberState 是 cordis 跨包 const enum（官方 dsh-host-plugin-inventory 同款做法）。 */
@@ -360,6 +369,122 @@ function installHostWatch(ctx, q) {
 	});
 }
 //#endregion
+//#region src/health-api.ts
+/**
+* lifeboat 健康面板 host 接收面：
+* - GET  /dsh-plus/lifeboat/status  → journal + 翻译状态 + 当前用户 patch 层已禁用的 dsh-plus 插件
+* - POST /dsh-plus/lifeboat/restore {name} → removeDisable + journal + 告警
+* rc8 用户 patch 层热应用：恢复无需重启，watchUserPatches 即时重载。
+* @module lifeboat/health-api
+*/
+const ROUTE_STATUS = "/dsh-plus/lifeboat/status";
+const ROUTE_RESTORE = "/dsh-plus/lifeboat/restore";
+function sendJson$1(res, status, body) {
+	res.writeHead(status, { "content-type": "application/json; charset=utf-8" });
+	res.end(JSON.stringify(body));
+}
+function readBody$1(req) {
+	return new Promise((resolve, reject) => {
+		const chunks = [];
+		req.on("data", (chunk) => chunks.push(chunk));
+		req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+		req.on("error", reject);
+	});
+}
+/** 解析用户 patch 层中已被禁用且属于 dsh-plus 兄弟域的插件名。 */
+async function readQuarantined(patchFile) {
+	let text;
+	try {
+		text = await readFile(patchFile, "utf-8");
+	} catch {
+		return [];
+	}
+	const root = parseDocument(text).toJS();
+	if (!Array.isArray(root)) return [];
+	return listDisabled(root).filter((id) => isGuardedPlugin(id) || id.startsWith("dsh-plus-"));
+}
+/** 注册健康面板路由（webServer 缺席时由调用方保证不调用）。 */
+function registerHealthApi(ctx, deps) {
+	const logger = ctx.logger("lifeboat");
+	ctx.webServer.register({
+		kind: "prefix",
+		path: ROUTE_STATUS,
+		handler: async (_req, res) => {
+			try {
+				const quarantined = await readQuarantined(deps.patchFile);
+				sendJson$1(res, 200, {
+					journal: deps.readJournal(),
+					llmFallback: deps.readFallback(),
+					quarantined
+				});
+			} catch (error) {
+				logger.warn(`status endpoint failed: ${error instanceof Error ? error.message : String(error)}`);
+				sendJson$1(res, 500, { error: "internal" });
+			}
+		}
+	});
+	ctx.webServer.register({
+		kind: "prefix",
+		path: ROUTE_RESTORE,
+		handler: async (req, res) => {
+			try {
+				if (req.method !== "POST") {
+					sendJson$1(res, 405, { error: "POST only" });
+					return;
+				}
+				const body = JSON.parse(await readBody$1(req));
+				if (typeof body.name !== "string" || !body.name.startsWith("dsh-plus-")) {
+					sendJson$1(res, 400, { error: "invalid-name" });
+					return;
+				}
+				const written = await removeDisable(deps.patchFile, body.name);
+				deps.journal("quarantine-restore", written ? `${body.name}：已移除用户 patch 层的禁用覆盖（热应用即时恢复）` : `${body.name}：无需恢复（patch 层无禁用覆盖）`);
+				deps.alert("[DSH] 插件恢复", `插件 ${body.name} 的隔离已解除（移除 patch 层禁用覆盖）。${written ? "rc8 热应用即时生效，无需重启。" : "patch 层本无覆盖，可能已被手动恢复。"}`);
+				sendJson$1(res, 200, {
+					ok: true,
+					written
+				});
+			} catch (error) {
+				const message = error instanceof Error ? error.message : String(error);
+				logger.warn(`restore endpoint failed: ${message}`);
+				sendJson$1(res, 500, { error: message });
+			}
+		}
+	});
+}
+//#endregion
+//#region src/notify.ts
+/**
+* 装配告警出口。返回同步派单函数：内部异步发送，失败只记日志。
+* notify-email 出现时升级为邮件；全程 journal 兜底可溯。
+*/
+function installAlerter(ctx, journal) {
+	const logger = ctx.logger("lifeboat");
+	let mailer;
+	ctx.inject(["notifyEmail"], (mailCtx) => {
+		mailer = mailCtx.notifyEmail;
+		return () => {
+			mailer = void 0;
+		};
+	});
+	return (subject, text) => {
+		journal("alert", `${subject} | ${text}`);
+		const active = mailer;
+		if (!active?.sendNotice) {
+			logger.warn(`${subject} —— ${text}`);
+			return;
+		}
+		active.sendNotice({
+			subject,
+			text
+		}).then((result) => {
+			if (!result.ok) logger.warn(`邮件告警投递失败: ${result.detail}`);
+		}, (error) => {
+			logger.warn(`邮件告警异常: ${error instanceof Error ? error.message : String(error)}`);
+		});
+	};
+}
+//#endregion
 //#region src/quarantine-api.ts
 const ROUTE = "/dsh-plus/lifeboat/quarantine";
 function sendJson(res, status, body) {
@@ -435,8 +560,9 @@ function apply(ctx, config) {
 	};
 	const alert = installAlerter(ctx, journal);
 	if (config.enabled) {
+		const patchFile = config.patchFile.length > 0 ? config.patchFile : dshHomePath("profiles", "web", "cordis.patch.yml");
 		const quarantine = createQuarantine(ctx, {
-			patchFile: config.patchFile.length > 0 ? config.patchFile : dshHomePath("profiles", "web", "cordis.patch.yml"),
+			patchFile,
 			alertCooldownMs: config.alertCooldownMs,
 			journal,
 			alert
@@ -444,6 +570,13 @@ function apply(ctx, config) {
 		installHostWatch(ctx, quarantine);
 		ctx.inject(["webServer"], (webCtx) => {
 			registerQuarantineApi(webCtx, quarantine);
+			registerHealthApi(webCtx, {
+				patchFile,
+				journal,
+				alert,
+				readJournal: () => doc.journal,
+				readFallback: () => doc.llmFallback
+			});
 		});
 	}
 	if (config.llmFallback) installLlmFallback(ctx, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-plus/lifeboat",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "dsh-plus service plugin: 故障救生艇——兄弟插件崩溃时自动隔离（写用户 patch 层禁用），llm-pi 缺席时把其配置临时翻译为官方 llm-pi-ai 路由，恢复后自动还原",
   "type": "module",
   "main": "lib/index.js",
@@ -22,12 +22,16 @@
   ],
   "dsh": {
     "client": {
-      "inject": [],
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-locale"
+      ],
       "platform": "web"
     }
   },
   "dependencies": {
-    "yaml": "^2.6.0"
+    "yaml": "^2.6.0",
+    "@dsh-plus/shared": "0.1.5"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
@@ -42,7 +46,10 @@
     "@deepseek-ai/dsh-host-webserver": "0.1.1-rc.2",
     "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
     "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
-    "@deepseek-ai/schemastery": "3.18.1"
+    "@deepseek-ai/schemastery": "3.18.1",
+    "@types/react": "~18.3.1",
+    "react": "^18.2.0",
+    "@types/node": "26.2.0"
   },
   "publishConfig": {
     "access": "public"

package/src/client/client.ts

@@ -5,12 +5,18 @@
  *
  * 零依赖铁律：不 import 任何包（含 cordis/shared），FiberState.FAILED 以字面量
  * 3 镜像一个道理（官方 dsh-host-plugin-inventory 同款做法）；任何异常止步自身。
+ *
+ * 健康页挂载在 mountHealthTab（./health-tab.ts，react 系依赖隔离在独立模块）：
+ * 哨兵 try/catch 之外先行注册，UI 故障不拖垮哨兵。
  * @module @dsh-plus/lifeboat/client
  */
 import type { Context } from '@deepseek-ai/cordis'
 
 export const name = 'dsh-plus-lifeboat'
 
+/** 健康页需要的 cordis 服务 key（哨兵段只用 root ctx 原生面，不依赖这些）。 */
+export const inject = ['slots', 'locale'] as const
+
 /** Runtime mirror: FiberState 是 cordis 跨包 const enum（FAILED = 3，cordis 4.0.1）。 */
 const FIBER_FAILED = 3
 
@@ -20,6 +26,7 @@ const EXCLUDED = new Set(['dsh-plus-lifeboat', 'dsh-plus-bundle-main'])
 const GUARD_RE = /^dsh-plus-[a-z0-9-]+$/
 
 export function apply(ctx: Context): void {
+  // ── 哨兵（零依赖，先于一切 UI）────────────────────────────────
   try {
     const reported = new Set<string>()
     ctx.root.on('internal/status', (fiber: { state: number; name: string }) => {
@@ -42,4 +49,14 @@ export function apply(ctx: Context): void {
   } catch {
     // apply 自身同理。
   }
+
+  // ── 健康页（UI 故障不拖垮哨兵；react 系依赖隔离在独立模块）────
+  try {
+    const health = (require as (id: string) => { mountHealthTab(ctx: Context): void })(
+      './health-tab.js',
+    )
+    health.mountHealthTab(ctx)
+  } catch {
+    // 健康页缺席不影响哨兵；上游插槽失配时优雅缺席（reload/降级原则同 web-files）。
+  }
 }

package/src/client/health-styles.ts

@@ -0,0 +1,53 @@
+/**
+ * 健康页样式：视觉对齐官方设置页（--dsw-alias-*），响应式同套件约定
+ * （≤767px 堆叠、44px 热区）。
+ * @module lifeboat/client/health-styles
+ */
+import { injectCardStyle } from '@dsh-plus/shared/client'
+
+export const PLUGIN_ID = '@dsh-plus/lifeboat'
+
+export const healthCss = `
+.dlb-tab{display:flex;flex-direction:column;gap:14px;min-width:0}
+.dlb-empty{color:var(--dsw-alias-label-tertiary);font-size:13px;margin:4px 0}
+.dlb-title{color:var(--dsw-alias-label-secondary);font-size:13px;font-weight:600;margin:10px 0 0}
+.dlb-notice{color:var(--dsw-alias-label-secondary);font-size:12px;margin:0}
+.dlb-fallback{border:1px solid var(--dsw-alias-label-warning,#e0a03c);border-radius:10px;padding:10px 12px;display:flex;flex-direction:column;gap:6px;background:var(--dsw-alias-bg-layer-3)}
+.dlb-fallbackTitle{color:var(--dsw-alias-label-warning,#e0a03c);font-size:13px;font-weight:600;margin:0}
+.dlb-kv{display:flex;align-items:center;gap:8px;font-size:12px;flex-wrap:wrap}
+.dlb-kv span{color:var(--dsw-alias-label-tertiary);flex:none}
+.dlb-kv code{color:var(--dsw-alias-label-primary);font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;word-break:break-all}
+.dlb-cards{display:flex;flex-direction:column;gap:8px}
+.dlb-quarantineCard{border:1px solid var(--dsw-alias-border-l2);border-radius:10px;padding:10px 12px;display:flex;align-items:center;gap:10px;flex-wrap:wrap;background:var(--dsw-alias-bg-layer-3)}
+.dlb-pluginName{color:var(--dsw-alias-label-primary);font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:13px;font-weight:600;flex:1;min-width:0;word-break:break-all}
+.dlb-confirm{display:flex;align-items:center;gap:8px;flex-wrap:wrap;flex-basis:100%}
+.dlb-confirmText{color:var(--dsw-alias-label-secondary);font-size:12px;flex:1;min-width:160px;line-height:1.5}
+.dlb-btn{appearance:none;font:inherit;cursor:pointer;border:1px solid #0000;border-radius:8px;padding:5px 14px;font-size:13px;line-height:1.5;flex:none}
+.dlb-btnGhost{border-color:var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);background:0 0}
+.dlb-btnGhost:hover:not(:disabled){color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-dimmed)}
+.dlb-btnPrimary{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}
+.dlb-btn:disabled{opacity:.4;cursor:default}
+.dlb-journal{display:flex;flex-direction:column;gap:10px}
+.dlb-journalDay{display:flex;flex-direction:column;gap:2px}
+.dlb-dayLabel{color:var(--dsw-alias-label-tertiary);font-size:11px;font-weight:600;margin-bottom:2px}
+.dlb-entry{display:flex;align-items:baseline;gap:8px;font-size:12px;line-height:1.6;flex-wrap:wrap}
+.dlb-kind{flex:none;border-radius:999px;padding:0 8px;font-size:10px;font-weight:600;line-height:17px;white-space:nowrap}
+.dlb-kindInfo{background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary)}
+.dlb-kindAlert{background:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-bg-base)}
+.dlb-kindQuarantine{background:var(--dsw-alias-label-warning,#e0a03c);color:var(--dsw-alias-bg-base)}
+.dlb-kindRestore{background:var(--dsw-alias-state-success,#3d9a50);color:var(--dsw-alias-bg-base)}
+.dlb-kindFallback{background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary)}
+.dlb-entryAt{color:var(--dsw-alias-label-tertiary);flex:none;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11px}
+.dlb-entryDetail{color:var(--dsw-alias-label-primary);min-width:0;word-break:break-word;white-space:pre-wrap;flex:1;flex-basis:320px}
+@media (max-width:767px){
+.dlb-btn{min-height:44px}
+.dlb-quarantineCard{flex-direction:column;align-items:stretch}
+.dlb-confirm{flex-direction:column;align-items:stretch}
+.dlb-entryDetail{flex-basis:100%}
+}
+`
+
+/** 幂等注入健康页样式标签。 */
+export function injectHealthStyle(): HTMLStyleElement | null {
+  return injectCardStyle(PLUGIN_ID, healthCss)
+}

package/src/client/health-tab.tsx

@@ -0,0 +1,303 @@
+/**
+ * lifeboat 健康页：settings.plugins.tab 第三页「救生艇」。
+ * - 应急翻译状态 banner（激活中显示源路由/临时路由/时间）
+ * - 已隔离插件卡片 + 「恢复」按钮（两段确认）
+ * - journal 时间线（kind 徽标着色）
+ * - dsh-plus 兄弟插件状态点（pluginInventory.list）
+ * 依赖隔离：本模块被 client.ts 延迟 require，react 系异常不拖垮哨兵。
+ * @module lifeboat/client/health-tab
+ */
+
+import { getJson, postJson } from '@dsh-plus/shared/client'
+import { type ReactElement, useCallback, useEffect, useMemo, useState } from 'react'
+
+import { injectHealthStyle } from './health-styles.ts'
+
+interface JournalEntry {
+  at: string
+  kind: string
+  detail: string
+}
+
+interface FallbackState {
+  active: boolean
+  originalProvider: string
+  originalModel: string
+  fallbackProvider: string
+  at: string
+}
+
+interface StatusResponse {
+  journal: JournalEntry[]
+  llmFallback: FallbackState | null
+  quarantined: string[]
+}
+
+interface InventoryRow {
+  id: string
+  enabled: boolean
+  status?: number
+}
+
+interface RemoteLike {
+  pluginInventory: { list(): Promise<{ entries?: InventoryRow[] }> }
+}
+
+interface SlotsLike {
+  inject(key: string, callback: () => unknown): unknown
+  register(options: Record<string, unknown>, component: unknown): () => void
+}
+
+interface LocaleLike {
+  register(ns: string, dict: { zh: Record<string, string>; en: Record<string, string> }): () => void
+  bind(ns: string): (key: string) => string
+}
+
+interface HealthContext {
+  slots: SlotsLike
+  locale: LocaleLike
+  get(key: 'remote'): RemoteLike
+  effect(execute: () => () => void, label?: string): unknown
+}
+
+const NS = 'dsh-plus-lifeboat'
+const ROUTE_STATUS = '/dsh-plus/lifeboat/status'
+const ROUTE_RESTORE = '/dsh-plus/lifeboat/restore'
+
+/** journal kind → 徽标语义色。 */
+const KIND_STYLES: Record<string, string> = {
+  alert: 'dlb-kindAlert',
+  quarantine: 'dlb-kindQuarantine',
+  'quarantine-restore': 'dlb-kindRestore',
+  'llm-fallback': 'dlb-kindFallback',
+  'llm-fallback-revert': 'dlb-kindRestore',
+}
+
+const zhDict = {
+  tab: '救生艇',
+  fallbackActive: 'LLM 应急翻译进行中',
+  fallbackFrom: '源路由',
+  fallbackTo: '临时路由',
+  fallbackAt: '启用时间',
+  quarantined: '已隔离插件',
+  restore: '恢复',
+  restoring: '恢复中…',
+  restoreConfirm: '确认恢复该插件？将移除用户 patch 层的禁用覆盖，热应用即时生效。',
+  journalTitle: '操作日志',
+  pluginsTitle: 'dsh-plus 插件状态',
+  pluginFailed: 'FAILED',
+  pluginOk: '正常',
+  pluginDisabled: '已禁用',
+  emptyJournal: '暂无记录。',
+  emptyQuarantined: '当前无隔离插件。',
+  loadFailed: '状态加载失败：',
+  retry: '重试',
+  restored: '已恢复，热应用即时生效。',
+  restoreFailed: '恢复失败：',
+}
+
+const enDict = {
+  tab: 'Lifeboat',
+  fallbackActive: 'LLM emergency translation active',
+  fallbackFrom: 'Source route',
+  fallbackTo: 'Fallback route',
+  fallbackAt: 'Since',
+  quarantined: 'Quarantined plugins',
+  restore: 'Restore',
+  restoring: 'Restoring…',
+  restoreConfirm:
+    'Restore this plugin? The disable override in the user patch layer will be removed and hot-applied.',
+  journalTitle: 'Journal',
+  pluginsTitle: 'dsh-plus plugin status',
+  pluginFailed: 'FAILED',
+  pluginOk: 'OK',
+  pluginDisabled: 'Disabled',
+  emptyJournal: 'No entries yet.',
+  emptyQuarantined: 'No quarantined plugins.',
+  loadFailed: 'Failed to load: ',
+  retry: 'Retry',
+  restored: 'Restored; hot-applied immediately.',
+  restoreFailed: 'Restore failed: ',
+}
+
+function HealthTab(props: { t(key: string): string }): ReactElement {
+  const { t } = props
+  const [status, setStatus] = useState<StatusResponse | null>(null)
+  const [failed, setFailed] = useState(false)
+  const [busyName, setBusyName] = useState<string | null>(null)
+  const [notice, setNotice] = useState<string | null>(null)
+  const [confirming, setConfirming] = useState<string | null>(null)
+
+  const load = useCallback((): void => {
+    getJson<StatusResponse>(ROUTE_STATUS)
+      .then((data) => {
+        setStatus(data)
+        setFailed(false)
+      })
+      .catch(() => setFailed(true))
+  }, [])
+
+  useEffect(() => {
+    load()
+  }, [load])
+
+  const onRestore = (name: string): void => {
+    setBusyName(name)
+    setConfirming(null)
+    postJson<{ ok: boolean; error?: string }>(ROUTE_RESTORE, { name })
+      .then(() => {
+        setNotice(t('restored'))
+        load()
+      })
+      .catch((error: unknown) => {
+        setNotice(`${t('restoreFailed')}${error instanceof Error ? error.message : ''}`)
+      })
+      .finally(() => setBusyName(null))
+  }
+
+  const journalGroups = useMemo(() => {
+    if (status === null) return []
+    const groups = new Map<string, JournalEntry[]>()
+    for (const entry of [...status.journal].reverse()) {
+      const day = entry.at.slice(0, 10)
+      const list = groups.get(day) ?? []
+      list.push(entry)
+      groups.set(day, list)
+    }
+    return [...groups.entries()]
+  }, [status])
+
+  if (status === null) {
+    return (
+      <div className="dlb-tab">
+        <p className="dlb-empty">{failed ? t('loadFailed') : t('pluginOk') === 'OK' ? '…' : '…'}</p>
+        {failed ? (
+          <button type="button" className="dlb-btn dlb-btnGhost" onClick={load}>
+            {t('retry')}
+          </button>
+        ) : null}
+      </div>
+    )
+  }
+
+  return (
+    <div className="dlb-tab">
+      {notice !== null ? (
+        <p className="dlb-notice" role="status">
+          {notice}
+        </p>
+      ) : null}
+
+      {status.llmFallback?.active === true ? (
+        <div className="dlb-fallback" role="status">
+          <p className="dlb-fallbackTitle">{t('fallbackActive')}</p>
+          <div className="dlb-kv">
+            <span>{t('fallbackFrom')}</span>
+            <code>
+              {status.llmFallback.originalProvider}/{status.llmFallback.originalModel}
+            </code>
+          </div>
+          <div className="dlb-kv">
+            <span>{t('fallbackTo')}</span>
+            <code>{status.llmFallback.fallbackProvider}</code>
+          </div>
+          <div className="dlb-kv">
+            <span>{t('fallbackAt')}</span>
+            <code>{status.llmFallback.at.slice(0, 19).replace('T', ' ')}</code>
+          </div>
+        </div>
+      ) : null}
+
+      <h3 className="dlb-title">{t('quarantined')}</h3>
+      {status.quarantined.length === 0 ? (
+        <p className="dlb-empty">{t('emptyQuarantined')}</p>
+      ) : (
+        <div className="dlb-cards">
+          {status.quarantined.map((name) => (
+            <div className="dlb-quarantineCard" key={name}>
+              <code className="dlb-pluginName">{name}</code>
+              {confirming === name ? (
+                <div className="dlb-confirm">
+                  <span className="dlb-confirmText">{t('restoreConfirm')}</span>
+                  <button
+                    type="button"
+                    className="dlb-btn dlb-btnGhost"
+                    disabled={busyName === name}
+                    onClick={() => setConfirming(null)}
+                  >
+                    ×
+                  </button>
+                  <button
+                    type="button"
+                    className="dlb-btn dlb-btnPrimary"
+                    disabled={busyName === name}
+                    onClick={() => onRestore(name)}
+                  >
+                    {busyName === name ? t('restoring') : t('restore')}
+                  </button>
+                </div>
+              ) : (
+                <button
+                  type="button"
+                  className="dlb-btn dlb-btnPrimary"
+                  disabled={busyName === name}
+                  onClick={() => setConfirming(name)}
+                >
+                  {busyName === name ? t('restoring') : t('restore')}
+                </button>
+              )}
+            </div>
+          ))}
+        </div>
+      )}
+
+      <h3 className="dlb-title">{t('journalTitle')}</h3>
+      {journalGroups.length === 0 ? (
+        <p className="dlb-empty">{t('emptyJournal')}</p>
+      ) : (
+        <div className="dlb-journal">
+          {journalGroups.map(([day, entries]) => (
+            <div className="dlb-journalDay" key={day}>
+              <span className="dlb-dayLabel">{day}</span>
+              {entries.map((entry) => (
+                <div className="dlb-entry" key={`${entry.at}-${entry.kind}`}>
+                  <span className={`dlb-kind ${KIND_STYLES[entry.kind] ?? 'dlb-kindInfo'}`}>
+                    {entry.kind}
+                  </span>
+                  <span className="dlb-entryAt">{entry.at.slice(11, 19)}</span>
+                  <span className="dlb-entryDetail">{entry.detail}</span>
+                </div>
+              ))}
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  )
+}
+
+/** 挂载健康页（由 client.ts 延迟 require；任何异常由调用方捕获）。 */
+export function mountHealthTab(ctx: Context): void {
+  const c = ctx as unknown as HealthContext
+  const tag = injectHealthStyle()
+  c.effect(
+    () => () => {
+      tag?.remove()
+    },
+    'lifeboat: health style',
+  )
+  c.effect(() => c.locale.register(NS, { zh: zhDict, en: enDict }), 'lifeboat: locale')
+  const t = c.locale.bind(NS)
+  c.slots.inject('settings.plugins.tab', () =>
+    c.slots.register(
+      {
+        name: 'settings.plugins.tab',
+        id: 'dsh-plus-lifeboat',
+        order: 20,
+        label: () => t('tab'),
+        inject: () => ({ t }),
+      },
+      HealthTab,
+    ),
+  )
+}

package/src/config.ts

@@ -34,7 +34,8 @@ export const Config = z.object({
 export type LifeboatConfig = Schemastery.TypeT<typeof Config>
 
 /** journal 单条记录。 */
-const JournalEntry = z.object({
+// biome-ignore lint/suspicious/noExplicitAny: dts 可移植性——嵌套 schema 精确类型经消费方断开 cosmokit 推断链
+const JournalEntry: any = z.object({
   at: z.string(),
   kind: z.string(),
   detail: z.string(),
@@ -51,7 +52,8 @@ const FallbackState = z.object({
 })
 
 /** 命名空间 schema：宽松承载 journal 与翻译状态，上限截断防膨胀。 */
-export const JournalSchema = z.object({
+// biome-ignore lint/suspicious/noExplicitAny: dts 可移植性（同 JournalEntry；上次成功构建未触发是因旧 lockfile，现同 usage-panel 口径）
+export const JournalSchema: any = z.object({
   journal: z.array(JournalEntry).description('救生艇操作日志（最新在尾，封顶 50 条）').default([]),
   llmFallback: z
     .union([FallbackState, z.const(null)])

package/src/health-api.ts

@@ -0,0 +1,120 @@
+/**
+ * lifeboat 健康面板 host 接收面：
+ * - GET  /dsh-plus/lifeboat/status  → journal + 翻译状态 + 当前用户 patch 层已禁用的 dsh-plus 插件
+ * - POST /dsh-plus/lifeboat/restore {name} → removeDisable + journal + 告警
+ * rc8 用户 patch 层热应用：恢复无需重启，watchUserPatches 即时重载。
+ * @module lifeboat/health-api
+ */
+import { readFile } from 'node:fs/promises'
+import type { IncomingMessage, ServerResponse } from 'node:http'
+import type { Context } from '@deepseek-ai/cordis'
+import type {} from '@deepseek-ai/dsh-host-webserver'
+import { parseDocument } from 'yaml'
+import type { Alerter } from './notify.ts'
+import { listDisabled, type PatchEntry, removeDisable } from './patch-file.ts'
+import { isGuardedPlugin } from './quarantine.ts'
+
+const ROUTE_STATUS = '/dsh-plus/lifeboat/status'
+const ROUTE_RESTORE = '/dsh-plus/lifeboat/restore'
+
+export interface HealthDeps {
+  patchFile: string
+  journal: (kind: string, detail: string) => void
+  alert: Alerter
+  /** journal 文档（settings 命名空间内，最新在前的尾插列表）。 */
+  readJournal(): Array<{ at: string; kind: string; detail: string }>
+  readFallback(): {
+    active: boolean
+    originalProvider: string
+    originalModel: string
+    fallbackProvider: string
+    at: string
+  } | null
+}
+
+function sendJson(res: ServerResponse, status: number, body: unknown): void {
+  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8' })
+  res.end(JSON.stringify(body))
+}
+
+function readBody(req: IncomingMessage): Promise<string> {
+  return new Promise((resolve, reject) => {
+    const chunks: Buffer[] = []
+    req.on('data', (chunk: Buffer) => chunks.push(chunk))
+    req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')))
+    req.on('error', reject)
+  })
+}
+
+/** 解析用户 patch 层中已被禁用且属于 dsh-plus 兄弟域的插件名。 */
+export async function readQuarantined(patchFile: string): Promise<string[]> {
+  let text: string
+  try {
+    text = await readFile(patchFile, 'utf-8')
+  } catch {
+    return []
+  }
+  const root = parseDocument(text).toJS() as unknown
+  if (!Array.isArray(root)) return []
+  const ids = listDisabled(root as PatchEntry[])
+  return ids.filter((id) => isGuardedPlugin(id) || id.startsWith('dsh-plus-'))
+}
+
+/** 注册健康面板路由（webServer 缺席时由调用方保证不调用）。 */
+export function registerHealthApi(ctx: Context, deps: HealthDeps): void {
+  const logger = ctx.logger('lifeboat')
+  ctx.webServer.register({
+    kind: 'prefix',
+    path: ROUTE_STATUS,
+    handler: async (_req: IncomingMessage, res: ServerResponse) => {
+      try {
+        const quarantined = await readQuarantined(deps.patchFile)
+        sendJson(res, 200, {
+          journal: deps.readJournal(),
+          llmFallback: deps.readFallback(),
+          quarantined,
+        })
+      } catch (error) {
+        logger.warn(
+          `status endpoint failed: ${error instanceof Error ? error.message : String(error)}`,
+        )
+        sendJson(res, 500, { error: 'internal' })
+      }
+    },
+  })
+  ctx.webServer.register({
+    kind: 'prefix',
+    path: ROUTE_RESTORE,
+    handler: async (req: IncomingMessage, res: ServerResponse) => {
+      try {
+        if (req.method !== 'POST') {
+          sendJson(res, 405, { error: 'POST only' })
+          return
+        }
+        const body = JSON.parse(await readBody(req)) as { name?: unknown }
+        if (typeof body.name !== 'string' || !body.name.startsWith('dsh-plus-')) {
+          sendJson(res, 400, { error: 'invalid-name' })
+          return
+        }
+        const written = await removeDisable(deps.patchFile, body.name)
+        deps.journal(
+          'quarantine-restore',
+          written
+            ? `${body.name}：已移除用户 patch 层的禁用覆盖（热应用即时恢复）`
+            : `${body.name}：无需恢复（patch 层无禁用覆盖）`,
+        )
+        deps.alert(
+          '[DSH] 插件恢复',
+          `插件 ${body.name} 的隔离已解除（移除 patch 层禁用覆盖）。${
+            written ? 'rc8 热应用即时生效，无需重启。' : 'patch 层本无覆盖，可能已被手动恢复。'
+          }`,
+        )
+        sendJson(res, 200, { ok: true, written })
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error)
+        logger.warn(`restore endpoint failed: ${message}`)
+        sendJson(res, 500, { error: message })
+      }
+    },
+  })
+}

package/src/index.ts

@@ -24,6 +24,7 @@ import {
   SETTINGS_NS,
 } from './config.ts'
 import { installLlmFallback } from './fallback-llm.ts'
+import { registerHealthApi } from './health-api.ts'
 import { installAlerter } from './notify.ts'
 import { createQuarantine, installHostWatch } from './quarantine.ts'
 import { registerQuarantineApi } from './quarantine-api.ts'
@@ -80,6 +81,13 @@ export function apply(ctx: Context, config: LifeboatConfig): void {
     installHostWatch(ctx, quarantine)
     ctx.inject(['webServer'], (webCtx) => {
       registerQuarantineApi(webCtx, quarantine)
+      registerHealthApi(webCtx, {
+        patchFile,
+        journal,
+        alert,
+        readJournal: () => doc.journal,
+        readFallback: () => doc.llmFallback,
+      })
     })
   }
 

package/src/patch-file.ts

@@ -43,3 +43,57 @@ export async function appendDisable(patchFile: string, targetId: string): Promis
   await rename(tmp, patchFile)
   return true
 }
+
+/** 顶层条目中已禁用的 id 列表（不含 insert 子列表；用户层 disabled 语义只在顶层）。 */
+export function listDisabled(entries: PatchEntry[]): string[] {
+  const out: string[] = []
+  for (const entry of entries) {
+    if (typeof entry.id === 'string' && entry.disabled === true) out.push(entry.id)
+  }
+  return out
+}
+
+/**
+ * 从 patch 文件移除针对 targetId 的禁用覆盖（恢复插件）；返回是否实际写入。
+ * 只移除「id 定向且 disabled: true」的行，其余内容（注释经 yaml 文档保留、
+ * 其他条目）原样不动；无该覆盖时幂等返回 false。
+ * @throws 文件不可读/顶层不是数组/落盘失败——调用方负责告警。
+ */
+export async function removeDisable(patchFile: string, targetId: string): Promise<boolean> {
+  const text = await readFile(patchFile, 'utf-8')
+  const doc = parseDocument(text)
+  const root = doc.toJS() as unknown
+  if (!Array.isArray(root)) throw new Error(`patch 文件顶层不是数组: ${patchFile}`)
+  let removed = false
+  const items = doc.contents
+  if (items?.items !== undefined && Array.isArray(items.items)) {
+    // 头注释挂在首个条目的 commentBefore 上：被移除项若为首项，注释迁移给
+    // 新的首项，避免整文件头注释丢失。
+    const headComment = (items.items[0] as unknown as { commentBefore?: string })?.commentBefore
+    doc.contents.items = items.items.filter((item) => {
+      const value = (item as unknown as { toJS?(doc: unknown): unknown }).toJS?.(doc) as
+        | PatchEntry
+        | undefined
+      if (
+        value !== undefined &&
+        typeof value === 'object' &&
+        value.id === targetId &&
+        value.disabled === true
+      ) {
+        removed = true
+        return false
+      }
+      return true
+    })
+    if (removed && headComment !== undefined && doc.contents.items.length > 0) {
+      const next = doc.contents.items[0] as unknown as { commentBefore?: string }
+      if (next.commentBefore === undefined) next.commentBefore = headComment
+    }
+  }
+  if (!removed) return false
+  await copyFile(patchFile, `${patchFile}.lifeboat.bak`)
+  const tmp = `${patchFile}.lifeboat.tmp`
+  await writeFile(tmp, doc.toString(), 'utf-8')
+  await rename(tmp, patchFile)
+  return true
+}