@dsh-plus/lifeboat 0.2.5 → 0.2.7

package/lib/client.js

@@ -17894,20 +17894,20 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 			json_default = [lang$31];
 		}));
 		//#endregion
-		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.3-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/DiffBlock.module.css
+		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.5-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/DiffBlock.module.css
 		var DiffBlock_module_default;
 		var init_DiffBlock_module = __esmMin((() => {
 			DiffBlock_module_default = {
-				"add": "obLtqa_add",
-				"block": "obLtqa_block",
-				"body": "obLtqa_body",
-				"copyButton": "obLtqa_copyButton",
-				"del": "obLtqa_del",
-				"expand": "obLtqa_expand",
-				"footer": "obLtqa_footer",
-				"gap": "obLtqa_gap",
-				"line": "obLtqa_line",
-				"path": "obLtqa_path"
+				"add": "nVxsMW_add",
+				"block": "nVxsMW_block",
+				"body": "nVxsMW_body",
+				"copyButton": "nVxsMW_copyButton",
+				"del": "nVxsMW_del",
+				"expand": "nVxsMW_expand",
+				"footer": "nVxsMW_footer",
+				"gap": "nVxsMW_gap",
+				"line": "nVxsMW_line",
+				"path": "nVxsMW_path"
 			};
 		}));
 		//#endregion
@@ -58054,32 +58054,32 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 			init_types();
 		}));
 		//#endregion
-		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.3-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/markdown/CodeBlock.module.css
+		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.5-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/markdown/CodeBlock.module.css
 		var CodeBlock_module_default;
 		var init_CodeBlock_module = __esmMin((() => {
 			CodeBlock_module_default = {
-				"action": "folzqq_action",
-				"banner": "folzqq_banner",
-				"bannerWrap": "folzqq_bannerWrap",
-				"block": "folzqq_block",
-				"copyButton": "folzqq_copyButton",
-				"infostring": "folzqq_infostring",
-				"plain": "folzqq_plain",
-				"shiki": "folzqq_shiki"
+				"action": "Hbqh2W_action",
+				"banner": "Hbqh2W_banner",
+				"bannerWrap": "Hbqh2W_bannerWrap",
+				"block": "Hbqh2W_block",
+				"copyButton": "Hbqh2W_copyButton",
+				"infostring": "Hbqh2W_infostring",
+				"plain": "Hbqh2W_plain",
+				"shiki": "Hbqh2W_shiki"
 			};
 		}));
 		//#endregion
-		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.3-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/markdown/MarkdownText.module.css
+		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.5-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/markdown/MarkdownText.module.css
 		var MarkdownText_module_default;
 		var init_MarkdownText_module = __esmMin((() => {
 			MarkdownText_module_default = {
-				"fileMention": "vrxa6G_fileMention",
-				"image": "vrxa6G_image",
-				"imageAlt": "vrxa6G_imageAlt",
-				"linkIcon": "vrxa6G_linkIcon",
-				"markdown": "vrxa6G_markdown",
-				"tableFill": "vrxa6G_tableFill",
-				"tableScroll": "vrxa6G_tableScroll"
+				"fileMention": "BL43XG_fileMention",
+				"image": "BL43XG_image",
+				"imageAlt": "BL43XG_imageAlt",
+				"linkIcon": "BL43XG_linkIcon",
+				"markdown": "BL43XG_markdown",
+				"tableFill": "BL43XG_tableFill",
+				"tableScroll": "BL43XG_tableScroll"
 			};
 		}));
 		//#endregion
@@ -58406,7 +58406,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 			less_default = [lang];
 		}));
 		//#endregion
-		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.3-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/index.js
+		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.5-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/index.js
 		/**
 		* Write text to the host clipboard, preferring the async Clipboard API and
 		* falling back to `execCommand('copy')` on hosts (jsdom, insecure contexts)
@@ -59181,6 +59181,30 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 				return;
 			}
 		}
+		/** Protocols a vocabulary-rewritten image destination may carry. */
+		function vocabularyImageUrl(url) {
+			try {
+				const protocol = new URL(url).protocol;
+				return protocol === "http:" || protocol === "https:" || protocol === "blob:" || protocol === "data:" ? url : void 0;
+			} catch {
+				return;
+			}
+		}
+		/**
+		* The displayable source for one image destination: absolute HTTP(S) as
+		* authored, otherwise the context's local-path vocabulary when it vouches for
+		* the destination. Either miss leaves the authored fallback (alt text) to the
+		* caller.
+		* @param url - The authored markdown destination.
+		* @param pathImages - Rewriting vocabulary, when the render pass has one.
+		* @returns The displayable image URL, or undefined.
+		*/
+		function imageSource(url, pathImages) {
+			const remote = remoteImageUrl(sanitizeUrl(normalizeUri(url)));
+			if (remote !== void 0) return remote;
+			const rewritten = pathImages?.resolve(url);
+			return rewritten === void 0 ? void 0 : vocabularyImageUrl(rewritten);
+		}
 		/**
 		* Create an empty {@link ReferenceTargets}.
 		* @returns Fresh empty maps.
@@ -59295,7 +59319,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 					inLink: true
 				}), key, !anchorWrapsOnlyImages(node.children));
 				case "linkReference": return renderLinkReference(node, key, context);
-				case "image": return renderImage(node.url, node.alt ?? "", key);
+				case "image": return renderImage(node.url, node.alt ?? "", key, context);
 				case "imageReference": return renderImageReference(node, key, context);
 				case "footnoteReference": return renderFootnoteReference(node, key, context);
 				case "definition":
@@ -59429,20 +59453,36 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 				return;
 			}
 		}
-		function renderImage(url, alt, key) {
-			const imageSrc = remoteImageUrl(sanitizeUrl(normalizeUri(url)));
+		function renderImage(url, alt, key, context) {
+			const imageSrc = imageSource(url, context.pathImages);
 			if (imageSrc === void 0) return (0, react_jsx_runtime.jsx)("span", {
 				className: MarkdownText_module_default.imageAlt,
 				children: alt
 			}, key);
+			return (0, react_jsx_runtime.jsx)(MarkdownImage, {
+				src: imageSrc,
+				alt,
+				destination: url
+			}, `${key}:${imageSrc}`);
+		}
+		/** Failed loads retain the authored alt or destination; a new source remounts the image. */
+		function MarkdownImage({ src, alt, destination }) {
+			const [failed, setFailed] = (0, react.useState)(false);
+			if (failed) return (0, react_jsx_runtime.jsx)("span", {
+				className: MarkdownText_module_default.imageAlt,
+				children: alt || destination
+			});
 			return (0, react_jsx_runtime.jsx)("img", {
 				className: MarkdownText_module_default.image,
-				src: imageSrc,
+				src,
 				alt,
+				onError: () => {
+					setFailed(true);
+				},
 				loading: "lazy",
 				decoding: "async",
 				referrerPolicy: "no-referrer"
-			}, key);
+			});
 		}
 		/** The bracketed source text a reference reverts to when its definition is missing. */
 		function referenceSuffix(node) {
@@ -59466,7 +59506,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 		function renderImageReference(node, key, context) {
 			const definition = context.targets.definitions.get(node.identifier.toUpperCase());
 			if (definition === void 0) return `![${node.alt ?? ""}${referenceSuffix(node)}`;
-			return renderImage(definition.url, node.alt ?? "", key);
+			return renderImage(definition.url, node.alt ?? "", key, context);
 		}
 		function renderFootnoteReference(node, key, context) {
 			const id = node.identifier.toUpperCase();
@@ -59527,7 +59567,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 		* full parse self-heals it.
 		*/
 		/** One settled full render: parse with math, resolve references, append the footnote section. */
-		function renderSettled(text, labels, fileMentions) {
+		function renderSettled(text, labels, fileMentions, pathImages) {
 			const root = parseGfmWithMath(text);
 			const targets = createReferenceTargets();
 			collectReferenceTargets(root.children, targets);
@@ -59535,6 +59575,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 				streaming: false,
 				labels,
 				fileMentions,
+				pathImages,
 				targets,
 				footnoteOrder: [],
 				footnoteCounts: /* @__PURE__ */ new Map()
@@ -60406,6 +60447,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 							streaming: true,
 							labels: this.labels,
 							fileMentions: void 0,
+							pathImages: void 0,
 							targets: frameTargets,
 							footnoteOrder: this.frozenFootnoteOrder,
 							footnoteCounts: this.frozenFootnoteCounts
@@ -60422,6 +60464,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 						streaming: true,
 						labels: this.labels,
 						fileMentions: void 0,
+						pathImages: void 0,
 						targets: frameTargets,
 						footnoteOrder: [...this.frozenFootnoteOrder],
 						footnoteCounts: new Map(this.frozenFootnoteCounts)
@@ -60438,13 +60481,13 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 					return this.lastRendered;
 				}
 			};
-			(0, react.memo)(function MarkdownText({ text, streaming = false, labels, fileMentions }) {
+			(0, react.memo)(function MarkdownText({ text, streaming = false, labels, fileMentions, pathImages }) {
 				const streamRef = (0, react.useRef)(null);
 				const streamLabelsRef = (0, react.useRef)(labels);
 				const children = (0, react.useMemo)(() => {
 					if (!streaming) {
 						streamRef.current = null;
-						return renderSettled(text, labels, fileMentions);
+						return renderSettled(text, labels, fileMentions, pathImages);
 					}
 					if (streamRef.current === null || streamLabelsRef.current !== labels) {
 						streamRef.current = new StreamingRenderer(labels);
@@ -60455,7 +60498,8 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 					text,
 					streaming,
 					labels,
-					fileMentions
+					fileMentions,
+					pathImages
 				]);
 				return (0, react_jsx_runtime.jsx)("div", {
 					className: MarkdownText_module_default.markdown,

package/lib/index.js

@@ -1,20 +1,17 @@
 import { dshHomePath } from "@deepseek-ai/dsh-home-paths";
 import z from "@deepseek-ai/schemastery";
-import { copyFile, readFile, rename, writeFile } from "node:fs/promises";
+import { copyFile, mkdir, readFile, rename, stat, writeFile } from "node:fs/promises";
 import { SettingsConflictError } from "@deepseek-ai/dsh-settings";
 import { parseDocument } from "yaml";
-//#endregion
+import { dirname } from "node:path";
 //#region src/config.ts
 /**
-* 配置与 journal 单一事实源。
+* 配置单一事实源。
 * - 行级 Config（cordis 组合层）：救生艇自身行为开关，dev/prod patch 层可覆盖。
-* - settings 命名空间 dsh-plus-lifeboat：运行期 journal 与 LLM 应急翻译状态，
-*   经 dsh-settings-file 持久化到 $DSH_HOME/settings.yaml，重启后可据此还原。
-* schema 刻意宽松：lifeboat 是最后防线，自身命名空间的数据问题绝不能让它起不来。
+* - journal 与 LLM 应急翻译状态属运行期数据，按存储规范持久化到
+*   $DSH_HOME/dsh-plus/lifeboat/state.json（见 state-file.ts），不进 settings。
 * @module lifeboat/config
 */
-/** settings 命名空间（字面量直供 settings 服务注册/读写，0.1.2-alpha.2 起编译期校验语法）。 */
-const SETTINGS_NS = "dsh-plus-lifeboat";
 /** 行级配置：全部有默认值，正常部署零配置。 */
 const Config = z.object({
 	enabled: z.boolean().description("故障隔离总开关").default(true),
@@ -22,26 +19,6 @@ const Config = z.object({
 	llmFallback: z.boolean().description("llm-pi 缺席时自动翻译其配置到官方 llm-pi-ai 并切换默认模型").default(true),
 	alertCooldownMs: z.natural().description("同一插件重复告警的最小间隔毫秒数").default(3e5)
 });
-/** journal 单条记录。 */
-const JournalEntry = z.object({
-	at: z.string(),
-	kind: z.string(),
-	detail: z.string()
-});
-/** LLM 应急翻译的持久状态（还原依据）。 */
-const FallbackState = z.object({
-	active: z.boolean(),
-	originalProvider: z.string(),
-	originalModel: z.string(),
-	fallbackProvider: z.string(),
-	providers: z.array(z.string()),
-	at: z.string()
-});
-/** 命名空间 schema：宽松承载 journal 与翻译状态，上限截断防膨胀。 */
-const JournalSchema = z.object({
-	journal: z.array(JournalEntry).description("救生艇操作日志（最新在尾，封顶 50 条）").default([]),
-	llmFallback: z.union([FallbackState, z.const(null)]).description("LLM 应急翻译状态；null 表示未处于降级").default(null)
-});
 //#endregion
 //#region src/fallback-llm.ts
 /**
@@ -616,35 +593,111 @@ function registerQuarantineApi(ctx, q) {
 	});
 }
 //#endregion
+//#region src/state-file.ts
+/**
+* journal 与 LLM 应急翻译状态的文件持久化（$DSH_HOME/dsh-plus/lifeboat/state.json）。
+*
+* 存储规范：运行期状态属非配置数据，不进 settings.yaml；本模块自带实现，
+* 维持零 dsh-plus 内部依赖铁律（不 import @dsh-plus/shared）。
+* schema 刻意宽松：lifeboat 是最后防线，自身数据问题绝不能让它起不来。
+* @module lifeboat/state-file
+*/
+/** 状态文件落点：$DSH_HOME/dsh-plus/lifeboat/state.json。 */
+const STATE_FILE = dshHomePath("dsh-plus", "lifeboat", "state.json");
+/** 文件大小上限：超出即视为损坏，丢弃重来（journal 本身封顶 50 条）。 */
+const MAX_BYTES = 262144;
+/** 未知输入收窄为合法 journal 条目（宽松承载数据问题）。 */
+function asEntry(value) {
+	if (typeof value !== "object" || value === null) return null;
+	const record = value;
+	if (typeof record["at"] !== "string" || typeof record["kind"] !== "string") return null;
+	return {
+		at: record["at"],
+		kind: record["kind"],
+		detail: String(record["detail"] ?? "")
+	};
+}
+/** 未知输入收窄为合法翻译状态。 */
+function asFallback(value) {
+	if (typeof value !== "object" || value === null) return null;
+	const record = value;
+	if (typeof record["active"] !== "boolean") return null;
+	return {
+		active: record["active"],
+		originalProvider: String(record["originalProvider"] ?? ""),
+		originalModel: String(record["originalModel"] ?? ""),
+		fallbackProvider: String(record["fallbackProvider"] ?? ""),
+		providers: Array.isArray(record["providers"]) ? record["providers"].map((item) => String(item)) : [],
+		at: String(record["at"] ?? "")
+	};
+}
+/** 未知输入收窄为完整状态文档；任何缺省回落到空文档。 */
+function normalizeState(raw) {
+	if (typeof raw !== "object" || raw === null) return {
+		journal: [],
+		llmFallback: null
+	};
+	const record = raw;
+	return {
+		journal: (Array.isArray(record["journal"]) ? record["journal"].map(asEntry).filter((entry) => entry !== null) : []).slice(-50),
+		llmFallback: asFallback(record["llmFallback"])
+	};
+}
+/** 读取状态文件；缺失/损坏/超限时返回空文档（最后防线不得因自身数据起不来）。 */
+async function loadState() {
+	try {
+		const info = await stat(STATE_FILE);
+		if (!info.isFile() || info.size > MAX_BYTES) return {
+			journal: [],
+			llmFallback: null
+		};
+		return normalizeState(JSON.parse(await readFile(STATE_FILE, "utf-8")));
+	} catch {
+		return {
+			journal: [],
+			llmFallback: null
+		};
+	}
+}
+/** 原子写状态文件：临时文件 + rename，写入失败仅告警不抛出。 */
+async function saveState(doc, warn) {
+	try {
+		await mkdir(dirname(STATE_FILE), { recursive: true });
+		const tmp = `${STATE_FILE}.tmp`;
+		await writeFile(tmp, `${JSON.stringify(doc, null, 2)}\n`, "utf-8");
+		await rename(tmp, STATE_FILE);
+	} catch (error) {
+		warn(`状态文件写入失败: ${error instanceof Error ? error.message : String(error)}`);
+	}
+}
+/** 追加一条 journal（内存文档已更新后调用；落盘失败不阻断动作）。 */
+function appendJournal(doc, kind, detail) {
+	return {
+		...doc,
+		journal: [...doc.journal, {
+			at: (/* @__PURE__ */ new Date()).toISOString(),
+			kind,
+			detail
+		}].slice(-50)
+	};
+}
+//#endregion
 //#region src/index.ts
 const name = "dsh-plus-lifeboat";
 const inject = ["settings", "llm"];
 function apply(ctx, config) {
 	const logger = ctx.logger("lifeboat");
+	const warn = (message) => logger.warn(message);
 	let doc = {
 		journal: [],
 		llmFallback: null
 	};
-	let persist;
-	try {
-		const scope = ctx.settings.register(SETTINGS_NS, JournalSchema);
-		doc = scope.get();
-		persist = (patch) => scope.update(patch);
-	} catch (error) {
-		logger.warn(`journal 命名空间注册失败，降级为内存态: ${error instanceof Error ? error.message : String(error)}`);
-	}
+	loadState().then((loaded) => {
+		doc = loaded;
+	});
 	const journal = (kind, detail) => {
-		doc = {
-			...doc,
-			journal: [...doc.journal, {
-				at: (/* @__PURE__ */ new Date()).toISOString(),
-				kind,
-				detail
-			}].slice(-50)
-		};
-		persist?.({ journal: doc.journal }).catch((error) => {
-			logger.warn(`journal 持久化失败: ${error instanceof Error ? error.message : String(error)}`);
-		});
+		doc = appendJournal(doc, kind, detail);
+		saveState(doc, warn);
 	};
 	const alert = installAlerter(ctx, journal);
 	if (config.enabled) {
@@ -676,7 +729,7 @@ function apply(ctx, config) {
 				...doc,
 				llmFallback: state
 			};
-			await persist?.({ llmFallback: state });
+			await saveState(doc, warn);
 		}
 	});
 }

package/lib/style.css

@@ -1,4 +1,4 @@
-.obLtqa_block {
+.nVxsMW_block {
   --dsl-diff-radius: 12px;
   --dsl-diff-line-height: 22px;
   color: var(--dsw-alias-label-primary);
@@ -8,7 +8,7 @@
   position: relative;
 }
 
-.obLtqa_copyButton {
+.nVxsMW_copyButton {
   z-index: 1;
   color: var(--dsw-alias-label-secondary);
   cursor: pointer;
@@ -22,46 +22,46 @@
   right: 12px;
 }
 
-.obLtqa_body {
+.nVxsMW_body {
   font: var(--dsw-font-markdown-code-block);
   padding: 12px 14px;
   overflow: auto hidden;
 }
 
-.obLtqa_line {
+.nVxsMW_line {
   min-height: var(--dsl-diff-line-height);
   white-space: pre;
 }
 
-.obLtqa_path {
+.nVxsMW_path {
   color: var(--dsw-alias-label-primary);
   padding-right: 56px;
   font-weight: 600;
 }
 
-.obLtqa_gap {
+.nVxsMW_gap {
   color: var(--dsw-alias-label-tertiary);
 }
 
-.obLtqa_del:before {
+.nVxsMW_del:before {
   content: "- ";
   color: var(--dsw-alias-state-error-primary);
 }
 
-.obLtqa_del {
+.nVxsMW_del {
   color: var(--dsw-alias-state-error-primary);
 }
 
-.obLtqa_add:before {
+.nVxsMW_add:before {
   content: "+ ";
   color: var(--dsw-alias-state-success-primary);
 }
 
-.obLtqa_add {
+.nVxsMW_add {
   color: var(--dsw-alias-state-success-primary);
 }
 
-.obLtqa_expand {
+.nVxsMW_expand {
   width: 100%;
   color: var(--dsw-alias-label-tertiary);
   cursor: pointer;
@@ -73,16 +73,16 @@
   display: block;
 }
 
-.obLtqa_expand:hover {
+.nVxsMW_expand:hover {
   color: var(--dsw-alias-label-secondary);
 }
 
-.obLtqa_footer {
+.nVxsMW_footer {
   font: var(--dsw-font-markdown-code-block);
   color: var(--dsw-alias-label-tertiary);
   padding: 0 14px 12px;
 }
-.folzqq_block {
+.Hbqh2W_block {
   --dsl-code-block-banner-background-color: var(--dsw-alias-markdown-code-block-banner);
   --dsl-code-block-border-radius: 12px;
   --dsl-code-block-banner-font: 11px/18px var(--dsw-font-family);
@@ -94,11 +94,11 @@
   position: relative;
 }
 
-.folzqq_block:not(:last-child) {
+.Hbqh2W_block:not(:last-child) {
   margin-bottom: 11px;
 }
 
-.folzqq_bannerWrap {
+.Hbqh2W_bannerWrap {
   z-index: 6;
   background-color: var(--dsw-alias-bg-base);
   border-top-left-radius: var(--dsl-code-block-border-radius);
@@ -107,7 +107,7 @@
   top: 0;
 }
 
-.folzqq_banner {
+.Hbqh2W_banner {
   background: var(--dsl-code-block-banner-background-color);
   font: var(--dsl-code-block-banner-font);
   border-top-left-radius: var(--dsl-code-block-border-radius);
@@ -119,7 +119,7 @@
   display: flex;
 }
 
-.folzqq_infostring {
+.Hbqh2W_infostring {
   color: var(--dsw-alias-label-primary);
   font-family: var(--ds-font-family-code);
   text-overflow: ellipsis;
@@ -130,13 +130,13 @@
   overflow: hidden;
 }
 
-.folzqq_action {
+.Hbqh2W_action {
   flex-shrink: 0;
   align-items: center;
   display: flex;
 }
 
-.folzqq_copyButton {
+.Hbqh2W_copyButton {
   color: inherit;
   cursor: pointer;
   font: inherit;
@@ -146,7 +146,7 @@
   padding: 0;
 }
 
-.folzqq_block :where(pre) {
+.Hbqh2W_block :where(pre) {
   font: var(--dsl-code-block-content-font);
   white-space: pre-wrap;
   word-break: break-all;
@@ -158,72 +158,72 @@
   margin: 0 !important;
 }
 
-.folzqq_block :where(pre.folzqq_shiki) {
+.Hbqh2W_block :where(pre.Hbqh2W_shiki) {
   background: var(--dsw-alias-markdown-code-block) !important;
 }
 
-.folzqq_block :where(pre) code {
+.Hbqh2W_block :where(pre) code {
   font: inherit;
   background: none;
   padding: 0;
 }
 
-.folzqq_plain {
+.Hbqh2W_plain {
   color: var(--dsw-alias-label-primary);
 }
-.vrxa6G_markdown {
+.BL43XG_markdown {
   overflow-wrap: anywhere;
   min-width: 0;
   font: var(--dsw-font-markdown-base);
   color: var(--dsw-alias-label-primary);
 }
 
-.vrxa6G_markdown strong {
+.BL43XG_markdown strong {
   font-weight: 600;
 }
 
-.vrxa6G_markdown h1 {
+.BL43XG_markdown h1 {
   font: var(--dsw-font-markdown-h1);
   margin: 32px 0 16px;
 }
 
-.vrxa6G_markdown h2 {
+.BL43XG_markdown h2 {
   font: var(--dsw-font-markdown-h2);
   margin: 32px 0 16px;
 }
 
-.vrxa6G_markdown h3 {
+.BL43XG_markdown h3 {
   font: var(--dsw-font-markdown-h3);
   margin: 32px 0 16px;
 }
 
-.vrxa6G_markdown h4 {
+.BL43XG_markdown h4 {
   font: var(--dsw-font-markdown-h4);
   margin: 16px 0;
 }
 
-.vrxa6G_markdown :where(h5, h6) {
+.BL43XG_markdown :where(h5, h6) {
   font: var(--dsw-font-markdown-base-strong);
   margin: 16px 0;
 }
 
-.vrxa6G_markdown :where(h1, h2, h3, h4, h5, h6) strong {
+.BL43XG_markdown :where(h1, h2, h3, h4, h5, h6) strong {
   font-weight: inherit;
 }
 
-.vrxa6G_markdown p {
+.BL43XG_markdown p {
   margin: 16px 0;
 }
 
-.vrxa6G_markdown :where(h4, h5, h6) + :where(ul, ol) {
+.BL43XG_markdown :where(h4, h5, h6) + :where(ul, ol) {
   margin-top: 8px;
 }
 
-.vrxa6G_markdown :where(h4, h5, h6):has( + :where(ul, ol)) {
+.BL43XG_markdown :where(h4, h5, h6):has( + :where(ul, ol)) {
   margin-bottom: 8px;
 }
 
-.vrxa6G_markdown a {
+.BL43XG_markdown a {
   color: var(--dsw-alias-link);
   transition: box-shadow var(--ds-transition-duration) var(--ds-ease-in-out);
   border: 2px solid #fff0;
@@ -235,17 +235,17 @@
   position: relative;
 }
 
-.vrxa6G_markdown a:hover, .vrxa6G_markdown a:focus {
+.BL43XG_markdown a:hover, .BL43XG_markdown a:focus {
   text-decoration: underline dotted var(--dsw-alias-link);
   text-underline-offset: 3px;
   outline: none;
 }
 
-.vrxa6G_markdown a:focus-visible {
+.BL43XG_markdown a:focus-visible {
   box-shadow: 0 0 0 2px var(--dsw-alias-state-business-primary);
 }
 
-.vrxa6G_linkIcon {
+.BL43XG_linkIcon {
   vertical-align: -.25em;
   flex: none;
   width: 1.1em;
@@ -253,46 +253,46 @@
   margin-right: 5px;
 }
 
-.vrxa6G_markdown :where(ul, ol) {
+.BL43XG_markdown :where(ul, ol) {
   margin: 16px 0;
   padding-left: 18px;
 }
 
-.vrxa6G_markdown li:not(:first-child) {
+.BL43XG_markdown li:not(:first-child) {
   margin-top: 6px;
 }
 
-.vrxa6G_markdown li > :where(ul, ol) {
+.BL43XG_markdown li > :where(ul, ol) {
   margin-top: 4px;
 }
 
-.vrxa6G_markdown li::marker {
+.BL43XG_markdown li::marker {
   color: var(--dsw-alias-label-secondary);
   line-height: 24px;
 }
 
-.vrxa6G_markdown :where(ul, ol) ol {
+.BL43XG_markdown :where(ul, ol) ol {
   padding-left: 0;
   list-style-position: inside;
 }
 
-.vrxa6G_markdown :where(ul, ol) ol li p {
+.BL43XG_markdown :where(ul, ol) ol li p {
   display: inline;
 }
 
-.vrxa6G_markdown li > p {
+.BL43XG_markdown li > p {
   margin: 8px 0;
 }
 
-.vrxa6G_markdown li > :first-child {
+.BL43XG_markdown li > :first-child {
   margin-top: 0;
 }
 
-.vrxa6G_markdown li > :last-child:not(.md-code-block) {
+.BL43XG_markdown li > :last-child:not(.md-code-block) {
   margin-bottom: 0;
 }
 
-.vrxa6G_markdown hr {
+.BL43XG_markdown hr {
   background: var(--dsw-alias-border-l2);
   border: none;
   height: .5px;
@@ -300,19 +300,19 @@
   display: block;
 }
 
-.vrxa6G_markdown blockquote {
+.BL43XG_markdown blockquote {
   border-left: 2px solid var(--dsw-alias-label-caption);
   margin: 16px 0 0;
   padding-left: 14px;
 }
 
-.vrxa6G_markdown pre {
+.BL43XG_markdown pre {
   font-family: var(--ds-font-family-code);
   margin: 16px 0;
   overflow: auto;
 }
 
-.vrxa6G_markdown :not(pre) > code {
+.BL43XG_markdown :not(pre) > code {
   box-sizing: border-box;
   font: var(--dsw-font-markdown-code);
   font-family: var(--ds-font-family-code);
@@ -325,54 +325,54 @@
   font-size: .875em !important;
 }
 
-.vrxa6G_markdown :where(h1, h2, h3, h4, h5, h6) code {
+.BL43XG_markdown :where(h1, h2, h3, h4, h5, h6) code {
   font: inherit;
   font-family: var(--ds-font-family-code);
 }
 
-.vrxa6G_markdown .katex-display {
+.BL43XG_markdown .katex-display {
   max-width: 100%;
   overflow: auto hidden;
 }
 
-.vrxa6G_markdown input[type="checkbox"] {
+.BL43XG_markdown input[type="checkbox"] {
   accent-color: var(--dsw-alias-label-secondary);
   margin: 0 8px 0 0;
 }
 
-.vrxa6G_tableScroll {
+.BL43XG_tableScroll {
   overscroll-behavior-x: contain;
   max-width: 100%;
   overflow-x: auto;
 }
 
-.vrxa6G_tableScroll.md-table-wide {
+.BL43XG_tableScroll.md-table-wide {
   padding-bottom: var(--dsh-scrollbar-width, 8px);
   overflow-x: hidden;
 }
 
-.vrxa6G_tableScroll.md-table-wide:hover, .vrxa6G_tableScroll.md-table-wide:focus-visible {
+.BL43XG_tableScroll.md-table-wide:hover, .BL43XG_tableScroll.md-table-wide:focus-visible {
   padding-bottom: 0;
   overflow-x: auto;
 }
 
-.vrxa6G_tableScroll:focus-visible {
+.BL43XG_tableScroll:focus-visible {
   box-shadow: 0 0 0 2px var(--dsw-alias-state-business-primary);
   outline: none;
 }
 
-.vrxa6G_tableScroll table {
+.BL43XG_tableScroll table {
   border-collapse: collapse;
   width: max-content;
   max-width: max-content;
 }
 
-.vrxa6G_tableFill table {
+.BL43XG_tableFill table {
   width: 100%;
   max-width: none;
 }
 
-.vrxa6G_tableScroll th {
+.BL43XG_tableScroll th {
   text-align: start;
   border-bottom: .5px solid var(--dsw-alias-border-l3);
   font: var(--dsw-font-markdown-table-head);
@@ -382,7 +382,7 @@
   padding: 10px 16px;
 }
 
-.vrxa6G_tableScroll td {
+.BL43XG_tableScroll td {
   border-bottom: .5px solid var(--dsw-alias-border-l2);
   font: var(--dsw-font-markdown-table);
   min-width: 100px;
@@ -390,32 +390,32 @@
   padding: 10px 16px;
 }
 
-.vrxa6G_tableScroll th:first-child, .vrxa6G_tableScroll td:first-child {
+.BL43XG_tableScroll th:first-child, .BL43XG_tableScroll td:first-child {
   padding-left: 0;
 }
 
-.vrxa6G_tableScroll td:last-child {
+.BL43XG_tableScroll td:last-child {
   padding-right: 0;
 }
 
-.vrxa6G_tableScroll table code {
+.BL43XG_tableScroll table code {
   font-size: 11px;
 }
 
-.vrxa6G_markdown > :first-child, .vrxa6G_markdown p:first-child {
+.BL43XG_markdown > :first-child, .BL43XG_markdown p:first-child {
   margin-top: 0 !important;
 }
 
-.vrxa6G_markdown > :last-child, .vrxa6G_markdown p:last-child {
+.BL43XG_markdown > :last-child, .BL43XG_markdown p:last-child {
   margin-bottom: 0 !important;
 }
 
-.vrxa6G_imageAlt {
+.BL43XG_imageAlt {
   color: var(--dsw-alias-label-tertiary);
   font-style: italic;
 }
 
-.vrxa6G_image {
+.BL43XG_image {
   background: var(--dsw-alias-bg-base);
   object-fit: contain;
   border-radius: 8px;
@@ -426,7 +426,7 @@
   display: block;
 }
 
-.vrxa6G_fileMention {
+.BL43XG_fileMention {
   font: inherit;
   color: var(--dsw-alias-link);
   cursor: pointer;
@@ -438,7 +438,7 @@
   text-decoration: none;
 }
 
-.vrxa6G_fileMention:hover, .vrxa6G_fileMention:focus {
+.BL43XG_fileMention:hover, .BL43XG_fileMention:focus {
   text-decoration: underline dotted var(--dsw-alias-link);
   text-underline-offset: 3px;
   outline: none;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-plus/lifeboat",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "dsh-plus service plugin: 故障救生艇——兄弟插件崩溃时自动隔离（写用户 patch 层禁用），llm-pi 缺席时把其配置临时翻译为官方 llm-pi-ai 路由，恢复后自动还原",
   "type": "module",
   "main": "lib/index.js",
@@ -30,22 +30,22 @@
     }
   },
   "dependencies": {
-    "@dsh-plus/shared": "0.1.10",
+    "@dsh-plus/shared": "0.1.12",
     "yaml": "^2.9.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-home-paths": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-llm": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-settings": "^0.1.3-alpha.2",
-    "@deepseek-ai/schemastery": "^3.18.1"
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-home-paths": "*",
+    "@deepseek-ai/dsh-llm": "*",
+    "@deepseek-ai/dsh-settings": "*",
+    "@deepseek-ai/schemastery": "^3.18.2"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
-    "@deepseek-ai/dsh-home-paths": "0.1.3-alpha.2",
-    "@deepseek-ai/dsh-host-webserver": "0.1.3-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.1.3-alpha.2",
-    "@deepseek-ai/dsh-settings": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.5-alpha.1",
+    "@deepseek-ai/dsh-host-webserver": "0.1.5-alpha.1",
+    "@deepseek-ai/dsh-llm": "0.1.5-alpha.1",
+    "@deepseek-ai/dsh-settings": "0.1.5-alpha.1",
     "@deepseek-ai/schemastery": "3.18.2",
     "@types/node": "26.4.0",
     "@types/react": "~18.3.31",

package/src/config.ts

@@ -1,19 +1,13 @@
 /**
- * 配置与 journal 单一事实源。
+ * 配置单一事实源。
  * - 行级 Config（cordis 组合层）：救生艇自身行为开关，dev/prod patch 层可覆盖。
- * - settings 命名空间 dsh-plus-lifeboat：运行期 journal 与 LLM 应急翻译状态，
- *   经 dsh-settings-file 持久化到 $DSH_HOME/settings.yaml，重启后可据此还原。
- * schema 刻意宽松：lifeboat 是最后防线，自身命名空间的数据问题绝不能让它起不来。
+ * - journal 与 LLM 应急翻译状态属运行期数据，按存储规范持久化到
+ *   $DSH_HOME/dsh-plus/lifeboat/state.json（见 state-file.ts），不进 settings。
  * @module lifeboat/config
  */
 
 import z from '@deepseek-ai/schemastery'
 
-import { SETTINGS_NS as NS_LITERAL } from './ns.ts'
-
-/** settings 命名空间（字面量直供 settings 服务注册/读写，0.1.2-alpha.2 起编译期校验语法）。 */
-export const SETTINGS_NS = NS_LITERAL
-
 /** 行级配置：全部有默认值，正常部署零配置。 */
 export const Config = z.object({
   enabled: z.boolean().description('故障隔离总开关').default(true),
@@ -32,33 +26,19 @@ export const Config = z.object({
 
 export type LifeboatConfig = Schemastery.TypeT<typeof Config>
 
-/** journal 单条记录。 */
-// biome-ignore lint/suspicious/noExplicitAny: dts 可移植性——嵌套 schema 精确类型经消费方断开 cosmokit 推断链
-const JournalEntry: any = z.object({
-  at: z.string(),
-  kind: z.string(),
-  detail: z.string(),
-})
-
-/** LLM 应急翻译的持久状态（还原依据）。 */
-const FallbackState = z.object({
-  active: z.boolean(),
-  originalProvider: z.string(),
-  originalModel: z.string(),
-  fallbackProvider: z.string(),
-  providers: z.array(z.string()),
-  at: z.string(),
-})
-
-/** 命名空间 schema：宽松承载 journal 与翻译状态，上限截断防膨胀。 */
-// biome-ignore lint/suspicious/noExplicitAny: dts 可移植性（同 JournalEntry；上次成功构建未触发是因旧 lockfile，现同 usage-panel 口径）
-export const JournalSchema: any = z.object({
-  journal: z.array(JournalEntry).description('救生艇操作日志（最新在尾，封顶 50 条）').default([]),
-  llmFallback: z
-    .union([FallbackState, z.const(null)])
-    .description('LLM 应急翻译状态；null 表示未处于降级')
-    .default(null),
-})
-
-export type JournalDoc = Schemastery.TypeT<typeof JournalSchema>
-export type FallbackStateT = Schemastery.TypeT<typeof FallbackState>
+/** journal 单条记录（纯类型，磁盘收窄见 state-file.ts）。 */
+export interface JournalEntryT {
+  at: string
+  kind: string
+  detail: string
+}
+
+/** LLM 应急翻译的持久状态（还原依据；纯类型，磁盘收窄见 state-file.ts）。 */
+export interface FallbackStateT {
+  active: boolean
+  originalProvider: string
+  originalModel: string
+  fallbackProvider: string
+  providers: string[]
+  at: string
+}

package/src/index.ts

@@ -6,28 +6,26 @@
  *    失败插件缺席、其余正常，修复后删覆盖即恢复。
  * 2. LLM 应急翻译——默认模型 provider 无 adapter 时，把 dsh-plus-llm-pi 配置
  *    临时翻译为官方 llm-pi-ai 路由并切换默认模型，恢复后自动还原。
- * 3. 告警与 journal——一切动作记录进自身 settings 命名空间，并经 notify-email
- *    发邮件（缺席降级为日志）。
+ * 3. 告警与 journal——一切动作记录进运行期状态文件（state-file.ts），并经
+ *    notify-email 发邮件（缺席降级为日志）。
  *
  * 零 dsh-plus 内部依赖铁律：不 import 本仓库任何其他包，防止共享代码故障团灭。
+ *
+ * 接线约束：inject 声明须覆盖本模块全部 ctx.<service> 直接访问（fallback-llm
+ * 读 settings 命名空间与 llm.listProviders），漏掉任一即运行期
+ * "cannot get property without inject" → 插件树加载失败 → dsh boot 中止。
  * @module @dsh-plus/lifeboat
  */
 import type { Context } from '@deepseek-ai/cordis'
 import { dshHomePath } from '@deepseek-ai/dsh-home-paths'
 
-import {
-  Config,
-  type FallbackStateT,
-  type JournalDoc,
-  JournalSchema,
-  type LifeboatConfig,
-  SETTINGS_NS,
-} from './config.ts'
+import { Config, type FallbackStateT, type LifeboatConfig } from './config.ts'
 import { installLlmFallback } from './fallback-llm.ts'
 import { registerHealthApi } from './health-api.ts'
 import { installAlerter } from './notify.ts'
 import { createQuarantine, installHostWatch } from './quarantine.ts'
 import { registerQuarantineApi } from './quarantine-api.ts'
+import { appendJournal, loadState, type StateDoc, saveState } from './state-file.ts'
 
 export const name = 'dsh-plus-lifeboat'
 
@@ -35,34 +33,20 @@ export const inject = ['settings', 'llm'] as const
 
 export { Config }
 
-/** journal 上限：只留最近 50 条，防长期运行膨胀。 */
-const JOURNAL_CAP = 50
-
 export function apply(ctx: Context, config: LifeboatConfig): void {
   const logger = ctx.logger('lifeboat')
 
-  // 自身命名空间：journal 与翻译状态的持久化。schema 宽松，注册失败也不能
-  // 拖垮救生艇——降级为内存态（重启丢失 journal，但隔离/翻译功能仍在）。
-  let doc: JournalDoc = { journal: [], llmFallback: null }
-  let persist: ((patch: object) => Promise<void>) | undefined
-  try {
-    const scope = ctx.settings.register(SETTINGS_NS, JournalSchema)
-    doc = scope.get()
-    persist = (patch) => scope.update(patch)
-  } catch (error) {
-    logger.warn(
-      `journal 命名空间注册失败，降级为内存态: ${error instanceof Error ? error.message : String(error)}`,
-    )
-  }
+  // 运行期状态（journal + 翻译状态）：文件持久化。加载失败降级为内存态
+  // （重启丢失 journal，但隔离/翻译功能仍在）。
+  const warn = (message: string): void => logger.warn(message)
+  let doc: StateDoc = { journal: [], llmFallback: null }
+  void loadState().then((loaded) => {
+    doc = loaded
+  })
 
   const journal = (kind: string, detail: string): void => {
-    doc = {
-      ...doc,
-      journal: [...doc.journal, { at: new Date().toISOString(), kind, detail }].slice(-JOURNAL_CAP),
-    }
-    void persist?.({ journal: doc.journal }).catch((error: unknown) => {
-      logger.warn(`journal 持久化失败: ${error instanceof Error ? error.message : String(error)}`)
-    })
+    doc = appendJournal(doc, kind, detail)
+    void saveState(doc, warn)
   }
 
   const alert = installAlerter(ctx, journal)
@@ -98,7 +82,7 @@ export function apply(ctx: Context, config: LifeboatConfig): void {
       readState: () => doc.llmFallback,
       writeState: async (state: FallbackStateT | null) => {
         doc = { ...doc, llmFallback: state }
-        await persist?.({ llmFallback: state })
+        await saveState(doc, warn)
       },
     })
   }

package/src/state-file.ts

@@ -0,0 +1,94 @@
+/**
+ * journal 与 LLM 应急翻译状态的文件持久化（$DSH_HOME/dsh-plus/lifeboat/state.json）。
+ *
+ * 存储规范：运行期状态属非配置数据，不进 settings.yaml；本模块自带实现，
+ * 维持零 dsh-plus 内部依赖铁律（不 import @dsh-plus/shared）。
+ * schema 刻意宽松：lifeboat 是最后防线，自身数据问题绝不能让它起不来。
+ * @module lifeboat/state-file
+ */
+
+import { mkdir, readFile, rename, stat, writeFile } from 'node:fs/promises'
+import { dirname } from 'node:path'
+import { dshHomePath } from '@deepseek-ai/dsh-home-paths'
+import type { FallbackStateT, JournalEntryT } from './config.ts'
+
+/** 状态文件落点：$DSH_HOME/dsh-plus/lifeboat/state.json。 */
+export const STATE_FILE = dshHomePath('dsh-plus', 'lifeboat', 'state.json')
+
+/** 磁盘文档形状（与旧 settings 命名空间同构，仅位置不同）。 */
+export interface StateDoc {
+  journal: JournalEntryT[]
+  llmFallback: FallbackStateT | null
+}
+
+/** journal 上限：只留最近 50 条，防长期运行膨胀。 */
+const JOURNAL_CAP = 50
+
+/** 文件大小上限：超出即视为损坏，丢弃重来（journal 本身封顶 50 条）。 */
+const MAX_BYTES = 256 * 1024
+
+/** 未知输入收窄为合法 journal 条目（宽松承载数据问题）。 */
+function asEntry(value: unknown): JournalEntryT | null {
+  if (typeof value !== 'object' || value === null) return null
+  const record = value as Record<string, unknown>
+  if (typeof record['at'] !== 'string' || typeof record['kind'] !== 'string') return null
+  return { at: record['at'], kind: record['kind'], detail: String(record['detail'] ?? '') }
+}
+
+/** 未知输入收窄为合法翻译状态。 */
+function asFallback(value: unknown): FallbackStateT | null {
+  if (typeof value !== 'object' || value === null) return null
+  const record = value as Record<string, unknown>
+  if (typeof record['active'] !== 'boolean') return null
+  return {
+    active: record['active'],
+    originalProvider: String(record['originalProvider'] ?? ''),
+    originalModel: String(record['originalModel'] ?? ''),
+    fallbackProvider: String(record['fallbackProvider'] ?? ''),
+    providers: Array.isArray(record['providers'])
+      ? record['providers'].map((item) => String(item))
+      : [],
+    at: String(record['at'] ?? ''),
+  }
+}
+
+/** 未知输入收窄为完整状态文档；任何缺省回落到空文档。 */
+export function normalizeState(raw: unknown): StateDoc {
+  if (typeof raw !== 'object' || raw === null) return { journal: [], llmFallback: null }
+  const record = raw as Record<string, unknown>
+  const journal = Array.isArray(record['journal'])
+    ? record['journal'].map(asEntry).filter((entry): entry is JournalEntryT => entry !== null)
+    : []
+  return { journal: journal.slice(-JOURNAL_CAP), llmFallback: asFallback(record['llmFallback']) }
+}
+
+/** 读取状态文件；缺失/损坏/超限时返回空文档（最后防线不得因自身数据起不来）。 */
+export async function loadState(): Promise<StateDoc> {
+  try {
+    const info = await stat(STATE_FILE)
+    if (!info.isFile() || info.size > MAX_BYTES) return { journal: [], llmFallback: null }
+    return normalizeState(JSON.parse(await readFile(STATE_FILE, 'utf-8')))
+  } catch {
+    return { journal: [], llmFallback: null }
+  }
+}
+
+/** 原子写状态文件：临时文件 + rename，写入失败仅告警不抛出。 */
+export async function saveState(doc: StateDoc, warn: (message: string) => void): Promise<void> {
+  try {
+    await mkdir(dirname(STATE_FILE), { recursive: true })
+    const tmp = `${STATE_FILE}.tmp`
+    await writeFile(tmp, `${JSON.stringify(doc, null, 2)}\n`, 'utf-8')
+    await rename(tmp, STATE_FILE)
+  } catch (error) {
+    warn(`状态文件写入失败: ${error instanceof Error ? error.message : String(error)}`)
+  }
+}
+
+/** 追加一条 journal（内存文档已更新后调用；落盘失败不阻断动作）。 */
+export function appendJournal(doc: StateDoc, kind: string, detail: string): StateDoc {
+  return {
+    ...doc,
+    journal: [...doc.journal, { at: new Date().toISOString(), kind, detail }].slice(-JOURNAL_CAP),
+  }
+}

package/src/ns.ts

@@ -1,5 +0,0 @@
-/**
- * settings 命名空间字面量（纯常量，零依赖，浏览器半可安全引入）。
- * @module lifeboat/ns
- */
-export const SETTINGS_NS = 'dsh-plus-lifeboat'