@ebony-vinyl/dsh-our-free-model 2.7.4 → 2.8.2

package/client.js

@@ -305,6 +305,7 @@ window.__ModuleLoader__.load({
         'news.osDenied': '浏览器拒绝了通知权限；需要在系统/浏览器设置里手动恢复。',
         'news.link': '查看详情',
         'news.urgentTitle': '重要公告',
+        'news.holdHint': '为确保读完，{s} 秒后可关闭',
         'news.gotIt': '知道了',
         'news.lastFetch': '最近拉取',
         'news.fetchFailed': '公告源暂不可达（显示的是缓存）',
@@ -392,6 +393,103 @@ window.__ModuleLoader__.load({
         'picks.design.tag4': '真实文件导出',
         'free.title': '免费模型',
         'free.sub': '匿名免费与 Kilo 模型统一展示：水位表示可选比例，实测状态单独显示。',
+        'nav.tab.extensions': 'OFM 渠道扩展',
+        'ext.search': '搜索扩展',
+        'ext.all': '全部',
+        'ext.title': 'OFM 渠道扩展',
+        'ext.bunMissing': 'Bun 未安装',
+        'ext.changelog': '更新内容',
+        'ext.viewSource': '查看源码',
+        'ext.indexFresh': '签名索引生成于 {at}',
+        'ext.bunHint': 'OpenCode 免费车道推理需要本机 Bun：安装 Bun（bun.sh 或 npm i -g bun）后重启，或把可执行文件路径写入 OUR_FREE_MODEL_BUN。',
+        'ext.sub': '渠道与增强模块的市场：签名索引、沙箱运行、与本体解耦；装一个渠道，模型立即出现在免费页。',
+        'ext.tabDiscover': '发现',
+        'ext.tabInstalled': '已安装',
+        'ext.tabSecurity': '安全',
+        'ext.install': '安装',
+        'ext.installing': '安装中…',
+        'ext.installed': '已安装',
+        'ext.update': '更新',
+        'ext.updateAvailable': '有更新',
+        'ext.enable': '启用',
+        'ext.disable': '停用',
+        'ext.uninstall': '卸载',
+        'ext.channel': '渠道',
+        'ext.enhancement': '增强',
+        'ext.verified': '已签名',
+        'ext.verifiedTitle': '该扩展来自 Ed25519 签名的官方索引',
+        'ext.refresh': '刷新索引',
+        'ext.empty': '扩展索引不可达',
+        'ext.indexHint': '索引可能仍在预热或被网络拦截；点右上角「刷新索引」重试。',
+        'ext.failed': '操作失败',
+        'ext.security': '安全模型',
+        'ext.securityBody': '扩展是可执行代码——只安装这份签名索引里的扩展。安装时会校验 Ed25519 签名与 SHA-256 摘要，做静态扫描（拒绝 node:*、process、eval、动态 import 与压缩产物）；运行在独立 Worker 的 VM 沙箱里，唯一的 import 是受控的 ofm:sdk；网络只能访问 manifest 里声明过的域名，密钥只进不出，每个 hook 都有超时熔断。',
+        'ext.securityBody2': '这套防御针对的是意外与草率，不是蓄意作者——真正的门是签名、人工审核与这份索引的提交历史。发现可疑扩展请通过 ofm-extensions 仓库的 SECURITY.md 举报。',
+        'ext.openRepo': '打开 ofm-extensions 仓库',
+        'ext.detail': '详情',
+        'ext.confirmRemove': '卸载 {name}？它的配置与密钥会一并删除。',
+        'ext.notRunning': '未运行',
+        'ext.count': '索引 {n} 个扩展',
+        'ext.discoverEmpty': '没有匹配的扩展。',
+        'ext.installedEmpty': '还没有安装任何扩展。去「发现」页挑一个。',
+        'ext.permissions': '权限',
+        'ext.permNetwork': '网络：可访问 {n} 个已声明的域名',
+        'ext.permSecrets': '密钥：{n} 项（只写不读回）',
+        'ext.openHomepage': '打开主页',
+        'ext.secretPlaceholder': '输入后保存，仅显示尾 4 位',
+        'ext.close': '关闭',
+        'ext.countByType': '渠道 {c} · 增强 {e}',
+        'ext.sort': '排序',
+        'ext.sortCurated': '默认',
+        'ext.sortNewest': '最新',
+        'ext.sortName': '名称',
+        'ext.searchHint': '按 / 聚焦',
+        'ext.clearSearch': '清除筛选',
+        'ext.updateAll': '全部更新',
+        'ext.updateProgress': '更新中 {i}/{n}',
+        'ext.updateCount': '{n} 个可更新',
+        'ext.modelCount': '模型 {n}',
+        'ext.requiresHost': '需宿主 ≥ {v}',
+        'ext.selfTest': '自检',
+        'ext.selfTestOk': '自检通过',
+        'ext.selfTestFail': '自检失败',
+        'ext.replaces': '接管内置 {name} 渠道',
+        'ext.filterTag': '标签',
+        'ext.hooks': '钩子',
+        'ext.type': '类型',
+        'ext.license': '许可证',
+        'ext.published': '发布于',
+        'ext.models': '模型',
+        'ext.repository': '仓库',
+        'ext.openRepository': '打开仓库',
+        'ext.storage': '本地存储',
+        'ext.storageOn': '可读写本地存储文件',
+        'ext.storageOff': '不读写本地文件',
+        'ext.originEmpty': '无网络访问',
+        'ext.notInstalledHint': '尚未安装，详情仅供参考。',
+        'ext.autoUpdate': '自动更新',
+        'ext.autoUpdateHint': '索引刷新时，自动安装已过观察窗口且处于启用状态的扩展更新；新版本先沉淀 {h} 小时再自动安装，防供应链投毒。',
+        'ext.source': '索引来源',
+        'ext.sourceBundled': '内置快照',
+        'ext.soakReady': '已过观察窗口，可立即更新',
+        'ext.soakWaiting': '观察窗口约剩 {h} 小时（新版本先沉淀再自动装，防供应链投毒）；也可手动立即更新',
+        'ext.auditTitle': '最近操作',
+        'ext.auditEmpty': '暂无记录。',
+        'ext.auditInstall': '安装',
+        'ext.auditInstallLocal': '本地安装',
+        'ext.auditUninstall': '卸载',
+        'ext.auditEnabled': '启停',
+        'ext.auditConfig': '配置',
+        'ext.auditSecret': '密钥',
+        'ext.auditAutoUpdate': '自动更新',
+        'ext.auditRegistry': '刷新市场',
+        'ext.exportShelf': '导出清单',
+        'ext.importShelf': '导入清单',
+        'ext.exportDone': '扩展清单已导出（JSON，不含密钥）',
+        'ext.importDone': '已恢复 {ok} 个扩展{fail}',
+        'ext.importFail': '，{n} 个失败（可能已下架或不兼容）',
+        'ext.importInvalid': '清单文件不是有效的 JSON，或没有可安装的扩展',
+        'ext.shelfTitle': '迁移助手：清单只含 id、版本、启停与配置，密钥永不导出',
         'sponsor.bannerTag': '中转站',
         'sponsor.bannerTitle': '北辰 API 中转站',
         'sponsor.bannerDescription': 'OFM 官方合作中转站，为用户提供稳定、开放、高性价比的大模型 API 接入服务。支持 Claude、ChatGPT、Grok、Gemini、智谱 GLM、Kimi、DeepSeek 等主流模型，适合在 Codex、Gemini CLI、Claude Code 及其他开发工具中统一配置使用。邀请可获百分之十的返现。',
@@ -1082,6 +1180,7 @@ window.__ModuleLoader__.load({
         'news.osDenied': 'Notification permission was denied; restore it in your system or browser settings.',
         'news.link': 'Read more',
         'news.urgentTitle': 'Important announcement',
+        'news.holdHint': 'Read on — this dialog can close in {s}s',
         'news.gotIt': 'Got it',
         'news.lastFetch': 'Last fetch',
         'news.fetchFailed': 'Feed unreachable right now (showing the cached copy)',
@@ -1169,6 +1268,103 @@ window.__ModuleLoader__.load({
         'picks.design.tag4': 'Real file export',
         'free.title': 'Free models',
         'free.sub': 'Anonymous free and Kilo models share this pool. Water shows the selectable share; measured availability is shown separately.',
+        'nav.tab.extensions': 'OFM channel extensions',
+        'ext.search': 'Search extensions',
+        'ext.all': 'All',
+        'ext.title': 'OFM channel extensions',
+        'ext.bunMissing': 'Bun not installed',
+        'ext.changelog': "What's new",
+        'ext.viewSource': 'View source',
+        'ext.indexFresh': 'Signed index generated {at}',
+        'ext.bunHint': 'OpenCode free-lane inference needs a local Bun. Install Bun (bun.sh or npm i -g bun) and restart, or point OUR_FREE_MODEL_BUN at its executable.',
+        'ext.sub': 'A marketplace for channel and enhancement modules: signed index, sandboxed runs, decoupled from the core — install a channel and its models appear on the free page.',
+        'ext.tabDiscover': 'Discover',
+        'ext.tabInstalled': 'Installed',
+        'ext.tabSecurity': 'Safety',
+        'ext.install': 'Install',
+        'ext.installing': 'Installing…',
+        'ext.installed': 'Installed',
+        'ext.update': 'Update',
+        'ext.updateAvailable': 'Update ready',
+        'ext.enable': 'Enable',
+        'ext.disable': 'Disable',
+        'ext.uninstall': 'Uninstall',
+        'ext.channel': 'Channel',
+        'ext.enhancement': 'Enhancement',
+        'ext.verified': 'Signed',
+        'ext.verifiedTitle': 'This extension comes from the Ed25519-signed index',
+        'ext.refresh': 'Refresh index',
+        'ext.empty': 'The extension registry is unreachable',
+        'ext.indexHint': 'The index may still be warming up or blocked by the network; use “Refresh index” to retry.',
+        'ext.failed': 'The action failed',
+        'ext.security': 'The safety model',
+        'ext.securityBody': 'Extensions are executable code — install only what this signed index carries. An install verifies the Ed25519 signature and the SHA-256 digest and runs a static scan (node:*, process, eval, dynamic import and minified bundles are refused); the code runs inside a Worker VM sandbox whose only import is the controlled ofm:sdk; the network is limited to the domains the manifest declares, secrets go in and never come out, and every hook has a timeout breaker.',
+        'ext.securityBody2': "These defenses target accidents and carelessness, not a determined author — the real gates are the signature, human review, and this index's commit history. Report anything suspicious through SECURITY.md in the ofm-extensions repository.",
+        'ext.openRepo': 'Open the ofm-extensions repository',
+        'ext.detail': 'Details',
+        'ext.confirmRemove': 'Uninstall {name}? Its configuration and secrets are removed too.',
+        'ext.notRunning': 'Not running',
+        'ext.count': '{n} extensions in the index',
+        'ext.discoverEmpty': 'No extensions match.',
+        'ext.installedEmpty': 'Nothing installed yet — pick something on the Discover tab.',
+        'ext.permissions': 'Permissions',
+        'ext.permNetwork': 'Network: {n} declared host(s)',
+        'ext.permSecrets': 'Secrets: {n} (write-only)',
+        'ext.openHomepage': 'Open homepage',
+        'ext.secretPlaceholder': 'Type to save; only the last 4 are shown',
+        'ext.close': 'Close',
+        'ext.countByType': '{c} channels · {e} enhancements',
+        'ext.sort': 'Sort',
+        'ext.sortCurated': 'Curated',
+        'ext.sortNewest': 'Newest',
+        'ext.sortName': 'Name',
+        'ext.searchHint': 'Press / to search',
+        'ext.clearSearch': 'Clear filters',
+        'ext.updateAll': 'Update all',
+        'ext.updateProgress': 'Updating {i}/{n}',
+        'ext.updateCount': '{n} update(s) ready',
+        'ext.modelCount': '{n} models',
+        'ext.requiresHost': 'needs host ≥ {v}',
+        'ext.selfTest': 'Self-test',
+        'ext.selfTestOk': 'Self-test passed',
+        'ext.selfTestFail': 'Self-test failed',
+        'ext.replaces': 'takes over the built-in {name} lane',
+        'ext.filterTag': 'Tag',
+        'ext.hooks': 'Hooks',
+        'ext.type': 'Type',
+        'ext.license': 'License',
+        'ext.published': 'Published',
+        'ext.models': 'Models',
+        'ext.repository': 'Repository',
+        'ext.openRepository': 'Open repository',
+        'ext.storage': 'Local storage',
+        'ext.storageOn': 'May read and write a local storage file',
+        'ext.storageOff': 'Reads and writes no local files',
+        'ext.originEmpty': 'No network access',
+        'ext.notInstalledHint': 'Not installed yet — details are for reference.',
+        'ext.autoUpdate': 'Auto-update',
+        'ext.autoUpdateHint': 'On each registry refresh, install enabled updates that have cleared the observation window; a new version soaks {h} hours before it auto-installs, blunting supply-chain attacks.',
+        'ext.source': 'Index source',
+        'ext.sourceBundled': 'bundled snapshot',
+        'ext.soakReady': 'Cleared the observation window — update now',
+        'ext.soakWaiting': 'About {h}h left in the observation window (new versions soak before auto-install, blunting supply-chain attacks); manual update is always available',
+        'ext.auditTitle': 'Recent actions',
+        'ext.auditEmpty': 'Nothing yet.',
+        'ext.auditInstall': 'Install',
+        'ext.auditInstallLocal': 'Local install',
+        'ext.auditUninstall': 'Uninstall',
+        'ext.auditEnabled': 'Enable/disable',
+        'ext.auditConfig': 'Config',
+        'ext.auditSecret': 'Secret',
+        'ext.auditAutoUpdate': 'Auto-update',
+        'ext.auditRegistry': 'Refresh index',
+        'ext.exportShelf': 'Export list',
+        'ext.importShelf': 'Import list',
+        'ext.exportDone': 'Extension list exported (JSON, no secrets)',
+        'ext.importDone': 'Restored {ok} extension(s){fail}',
+        'ext.importFail': ', {n} failed (delisted or incompatible)',
+        'ext.importInvalid': 'The file is not valid JSON, or carries no installable extensions',
+        'ext.shelfTitle': 'Migration: the list carries ids, versions, toggles and config — never secrets',
         'sponsor.bannerTag': 'Relay',
         'sponsor.bannerTitle': 'Beichen API relay',
         'sponsor.bannerDescription': 'OFM’s official relay partner provides stable, open and cost-effective model API access. Claude, ChatGPT, Grok, Gemini, GLM, Kimi and DeepSeek are supported for one consistent setup in Codex, Gemini CLI, Claude Code and other developer tools. Invite others to receive 10% cashback.',
@@ -1826,6 +2022,8 @@ window.__ModuleLoader__.load({
 .ofm_toast.warn::before{background:var(--dsw-alias-state-warning-primary,#f0a441)}
 .ofm_toast.urgent::before{background:var(--dsw-alias-state-error-primary)}
 .ofm_toast.warn{border-color:color-mix(in srgb,var(--dsw-alias-state-warning-primary,#f0a441) 42%,var(--dsw-alias-border-l2))}
+/* urgent 弹层的关闭倒计时提示：弱化、右对齐到按钮旁 */
+.ofm_holdhint{font-size:11.5px;color:var(--dsw-alias-label-tertiary);font-variant-numeric:tabular-nums}
 .ofm_toast.urgent{border-color:color-mix(in srgb,var(--dsw-alias-state-error-primary) 42%,var(--dsw-alias-border-l2))}
 .ofm_toast .ofm_toasttitle{font-weight:660;font-size:12.5px;display:flex;align-items:center;gap:7px}
 .ofm_toast .ofm_toastbody{color:var(--dsw-alias-label-secondary);max-height:180px;overflow:auto;overflow-wrap:anywhere}
@@ -2665,6 +2863,71 @@ window.__ModuleLoader__.load({
  .ofm_shell .ofm_navtools .ofm_switch span{display:none}
  .ofm_shell .ofm_navtools .ofm_starbtn{font-size:0;padding:6px;gap:0}
 }
+/* ── 扩展市场卡片与详情抽屉（2.8.1 新增页签，其余样式全部复用既有令牌） ── */
+.ofm_extcard{gap:10px;padding-left:17px}
+.ofm_extcard::before{content:"";position:absolute;left:6px;top:13px;bottom:13px;width:3px;border-radius:999px;background:var(--dsw-alias-state-business-primary);opacity:.75;transition:opacity .2s var(--ease-instrument)}
+.ofm_extcard.channel::before{background:linear-gradient(180deg,var(--dsw-alias-state-business-primary),color-mix(in srgb,var(--dsw-alias-state-business-primary) 30%,transparent))}
+.ofm_extcard.enhancement::before{background:linear-gradient(180deg,var(--dsw-alias-state-success-primary),color-mix(in srgb,var(--dsw-alias-state-success-primary) 30%,transparent))}
+.ofm_extcard:hover::before{opacity:1}
+.ofm_extgrid>.ofm_extcard{animation:ofmrisein .4s var(--ease-instrument) backwards;animation-delay:calc(var(--i,0)*45ms)}
+.ofm_extskel{position:relative;overflow:hidden;border-radius:13px;border:1px solid var(--dsw-alias-border-l2);background:color-mix(in srgb,var(--dsw-alias-bg-layer-3) 80%,transparent);min-height:150px;padding:13px;display:flex;flex-direction:column;gap:9px;justify-content:center;animation:ofmrisein .4s var(--ease-instrument) backwards;animation-delay:calc(var(--i,0)*45ms)}
+.ofm_extskel::after{content:"";position:absolute;inset:0;pointer-events:none;background:linear-gradient(100deg,transparent 30%,color-mix(in srgb,var(--dsw-alias-bg-layer-1) 55%,transparent) 50%,transparent 70%);transform:translateX(-100%);animation:ofm-skel-shine 1.8s ease-in-out infinite}
+.ofm_extskel i{display:block;height:11px;border-radius:6px;background:color-mix(in srgb,var(--dsw-alias-label-secondary) 14%,transparent);animation:ofmpulse 1.8s ease-in-out infinite}
+.ofm_extdetail{width:min(560px,92vw)}
+.ofm_extdetail:focus{outline:none}
+.ofm_extcard .ofm_id{white-space:normal;text-overflow:clip;line-height:1.5}
+/* 卡片头：字母头像 + 标题列；详情弹层头复用同一行排布（后声明覆盖弹层的纵向列） */
+.ofm_exthead{display:flex;flex-direction:row;align-items:center;gap:10px;min-width:0}
+.ofm_exttitle{display:flex;flex-direction:column;gap:2px;min-width:0;flex:1}
+.ofm_extavatar{flex:none;width:34px;height:34px;border-radius:10px;display:flex;align-items:center;justify-content:center;font-size:15px;font-weight:750;color:var(--dsw-alias-label-on-accent,#fff);background:linear-gradient(135deg,var(--dsw-alias-state-business-primary),color-mix(in srgb,var(--dsw-alias-state-business-primary) 55%,#000));box-shadow:inset 0 1px 0 rgb(255 255 255 / 22%),0 2px 6px color-mix(in srgb,var(--dsw-alias-state-business-primary) 30%,transparent);transition:transform .2s var(--ease-instrument)}
+.ofm_extavatar.enhancement{background:linear-gradient(135deg,var(--dsw-alias-state-success-primary),color-mix(in srgb,var(--dsw-alias-state-success-primary) 55%,#000));box-shadow:inset 0 1px 0 rgb(255 255 255 / 22%),0 2px 6px color-mix(in srgb,var(--dsw-alias-state-success-primary) 30%,transparent)}
+.ofm_extcard:hover .ofm_extavatar{transform:scale(1.06)}
+.ofm_extcard .ofm_cardhead{gap:6px}
+.ofm_extblurb{display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;overflow:hidden;min-height:0}
+.ofm_extfoot{display:flex;gap:8px;align-items:center;padding-top:9px;margin-top:auto;border-top:1px solid color-mix(in srgb,var(--dsw-alias-border-l1) 72%,transparent)}
+.ofm_extfoot .ofm_btn+.ofm_btn,.ofm_extfoot .ofm_badge{margin-left:auto}
+/* 工具行：搜索框内嵌 / 快捷键角标 */
+.ofm_exttoolbar{flex-wrap:wrap}
+.ofm_extsearch{position:relative;display:inline-flex;align-items:center}
+.ofm_extsearch .ofm_input{padding-right:30px}
+.ofm_kbd{position:absolute;right:9px;pointer-events:none;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:10.5px;line-height:1;padding:3px 6px;border-radius:6px;border:1px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-tertiary);background:var(--dsw-alias-bg-layer-1);box-shadow:inset 0 -1px 0 var(--dsw-alias-border-l1)}
+/* 空态与详情弹层 */
+.ofm_extempty{display:flex;flex-direction:column;align-items:center;gap:10px;padding:34px 12px;border:1px dashed var(--dsw-alias-border-l2);border-radius:14px}
+.ofm_extorigins{display:flex;flex-wrap:wrap;gap:6px}
+.ofm_extorigins code{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:10.5px;padding:3px 8px;border-radius:7px;border:1px solid var(--dsw-alias-border-l1);background:color-mix(in srgb,var(--dsw-alias-bg-layer-1) 74%,transparent);color:var(--dsw-alias-label-secondary)}
+.ofm_extdetail .ofm_anntitle{font-size:16.5px}
+.ofm_extdetail .ofm_annsub{overflow-wrap:anywhere}
+.ofm_extdetail .ofm_annfoot .ofm_badge{margin-left:0}
+/* 更新内容：详情弹层里的 newest-first 发布说明列表 */
+.ofm_changelog{list-style:none;margin:2px 0 0;padding:0;display:flex;flex-direction:column;gap:5px}
+.ofm_changelog li{font-size:12px;line-height:1.55;color:var(--dsw-alias-label-secondary);padding:6px 9px;border-radius:8px;border:1px solid color-mix(in srgb,var(--dsw-alias-border-l1) 78%,transparent);background:color-mix(in srgb,var(--dsw-alias-bg-layer-1) 55%,transparent);overflow-wrap:anywhere}
+.ofm_changelog li:first-child{color:var(--dsw-alias-label-primary)}
+/* 封面横幅：负 margin 出血到卡片内缘（padding 上 12/右 13/左 17），加载失败由
+   组件整块退场；详情弹层第一子元素自然贴顶，仅配内圆角 */
+.ofm_extcover{position:relative;height:96px;flex:none;margin:-12px -13px 0 -17px;border-radius:12px 12px 0 0;overflow:hidden;background:color-mix(in srgb,var(--dsw-alias-bg-layer-1) 55%,transparent);border-bottom:1px solid color-mix(in srgb,var(--dsw-alias-border-l1) 82%,transparent)}
+.ofm_extcover img{display:block;width:100%;height:100%;object-fit:cover}
+.ofm_extdetail .ofm_extcover{height:150px;margin:0;border-radius:17px 17px 0 0;border-bottom:1px solid var(--dsw-alias-border-l2)}
+.ofm_extdetail .ofm_annhead{position:relative}
+/* 标签点选浏览 / 接管内置渠道徽标 / 分段控件计数（magpie 市场的分类手势） */
+.ofm_tagbtn{cursor:pointer;font:inherit;transition:border-color .18s var(--ease-instrument),color .18s var(--ease-instrument),transform .18s var(--ease-instrument)}
+.ofm_tagbtn:hover{border-color:color-mix(in srgb,var(--dsw-alias-state-business-primary) 62%,transparent);color:var(--dsw-alias-state-business-primary);transform:translateY(-1px)}
+.ofm_replacetag{flex:none;font-size:10px;font-weight:700;line-height:1;padding:2px 8px;border-radius:999px;white-space:nowrap;color:color-mix(in srgb,var(--dsw-alias-state-warning-primary,#f2a65a) 80%,var(--dsw-alias-label-primary));background:color-mix(in srgb,var(--dsw-alias-state-warning-primary,#f2a65a) 22%,transparent);border:1px solid color-mix(in srgb,var(--dsw-alias-state-warning-primary,#f2a65a) 52%,transparent)}
+.ofm_segcount{margin-left:5px;font-size:9.5px;font-weight:650;color:var(--dsw-alias-label-tertiary);background:color-mix(in srgb,var(--dsw-alias-label-secondary) 10%,transparent);padding:1px 5px;border-radius:999px}
+.ofm_seg button[aria-pressed="true"] .ofm_segcount{color:var(--dsw-alias-label-secondary)}
+/* 2.10 增补：soak 说明行、索引来源徽标、最近操作行、模型货架、清单导入标签 */
+.ofm_soakline{margin:2px 0 0;font-size:11.5px;line-height:1.55;color:var(--dsw-alias-label-secondary);overflow-wrap:anywhere}
+.ofm_extsource{flex:none;font-size:10.5px;line-height:1;padding:4px 10px;border-radius:999px;border:1px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);background:color-mix(in srgb,var(--dsw-alias-bg-layer-1) 74%,transparent);white-space:nowrap}
+.ofm_importlabel{display:inline-flex;align-items:center}
+.ofm_audrows{display:flex;flex-direction:column;gap:4px}
+.ofm_audrow{display:flex;align-items:baseline;gap:10px;font-size:12px;flex-wrap:wrap}
+.ofm_audrow code{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11px;color:var(--dsw-alias-label-secondary)}
+.ofm_audat{flex:none;color:var(--dsw-alias-label-tertiary);font-variant-numeric:tabular-nums}
+.ofm_inlinehint{display:inline-flex;align-items:center;cursor:help}
+.ofm_modelshelf{display:flex;flex-wrap:wrap;gap:6px;align-items:center}
+.ofm_modelchip{font-size:10.5px;line-height:1;padding:4px 9px;border-radius:999px;border:1px solid color-mix(in srgb,var(--dsw-alias-border-l1) 82%,transparent);background:color-mix(in srgb,var(--dsw-alias-bg-layer-1) 62%,transparent);color:var(--dsw-alias-label-secondary);white-space:nowrap;max-width:210px;overflow:hidden;text-overflow:ellipsis}
+/* 封面淡入：字节到位前不占住卡片顶部的视觉重量 */
+.ofm_extcover img{opacity:0;transition:opacity .45s var(--ease-instrument)}
+.ofm_extcover img.ofm_loaded{opacity:1}
 `
 
     // ── helpers ───────────────────────────────────────────────────────────────
@@ -2997,8 +3260,20 @@ window.__ModuleLoader__.load({
       return undefined
     }
 
-    /** Modal surface for `urgent` announcements; dismiss runs the ack callback. */
-    function showUrgentModal({ title, html, confirmLabel, onClose }) {
+    /** Urgent announcement ids already shown on this page. Both the arrival
+     *  push and the boot re-check consult it, so one announcement opens one
+     *  modal per page load — a replace, never a stack. */
+    const urgentShownIds = new Set()
+
+    /** Modal surface for `urgent` announcements; dismiss runs the ack callback.
+     *
+     *  `holdMs` keeps the close control locked for that long with a visible
+     *  countdown: an announcement that must be read should not be dismissible
+     *  by reflex. The timer is one-shot and cleared with the modal. The hint
+     *  text travels in from the caller like `confirmLabel` — this function
+     *  predates any `t` binding and must not grow one (same rule as
+     *  showToast's comment below). */
+    function showUrgentModal({ title, html, confirmLabel, onClose, holdMs = 0, holdHint = '' }) {
       try {
         document.querySelector('.ofm_scrim[data-ofm-urgent]')?.remove()
         const scrim = document.createElement('div')
@@ -3020,8 +3295,35 @@ window.__ModuleLoader__.load({
         ok.type = 'button'
         ok.className = 'ofm_btn primary'
         ok.textContent = confirmLabel ?? 'OK'
-        ok.addEventListener('click', () => { scrim.remove(); onClose?.() })
+        ok.addEventListener('click', () => {
+          if (ok.disabled === true) return
+          scrim.remove()
+          if (holdTimer !== undefined) { clearTimeout(holdTimer); holdTimer = undefined }
+          onClose?.()
+        })
         foot.appendChild(ok)
+        let remaining = Math.max(0, Math.round(Number(holdMs) || 0))
+        let holdTimer
+        const settle = () => {
+          ok.disabled = false
+          ok.textContent = confirmLabel ?? 'OK'
+          hint?.remove()
+          hint = undefined
+        }
+        // 倒计时提示行：告诉用户这不是坏的按钮，是刻意的三秒。
+        let hint = remaining > 0 ? document.createElement('span') : undefined
+        if (hint !== undefined) {
+          hint.className = 'ofm_holdhint'
+          hint.setAttribute('aria-live', 'polite')
+          foot.appendChild(hint)
+        }
+        const tick = () => {
+          if (remaining <= 0) { settle(); return }
+          ok.disabled = true
+          hint.textContent = String(holdHint ?? '').replace('{s}', String(Math.ceil(remaining / 1000)))
+          holdTimer = setTimeout(() => { remaining = Math.max(0, remaining - 250); tick() }, 250)
+        }
+        tick()
         modal.appendChild(head)
         modal.appendChild(body)
         modal.appendChild(foot)
@@ -3063,6 +3365,7 @@ window.__ModuleLoader__.load({
       onClick: props.onClick,
       title: props.title,
       'aria-label': props['aria-label'],
+      'aria-busy': props.busy === true ? 'true' : props['aria-busy'],
     }, props.children)
 
     function Section(props) {
@@ -3231,7 +3534,7 @@ window.__ModuleLoader__.load({
     }
 
     function isFreePoolModel(model) {
-      return !model.channel || model.channel === 'anonymous' || model.channel === 'kilo'
+      return !model.channel || model.channel === 'anonymous' || model.channel === 'kilo' || model.channel === 'extension'
     }
 
     function freePoolView(data) {
@@ -6872,7 +7175,7 @@ window.__ModuleLoader__.load({
     // upgrader triggers — comes back to the page the user was reading.
     const EFFECTS_KEY = 'ofm.visualEffects'
     const TAB_KEY = 'ofm.tab'
-    const TABS = ['free', 'eac', 'channels', 'aggregate', 'workspace', 'saver', 'routing', 'ledger', 'logs', 'gateway', 'upgrade', 'picks']
+    const TABS = ['free', 'eac', 'channels', 'aggregate', 'workspace', 'extensions', 'saver', 'routing', 'ledger', 'logs', 'gateway', 'upgrade', 'picks']
     const WORKSPACE_CSS = `
       .who{min-width:0}
       .who .name,.nm .n,.lib-path{white-space:normal!important;overflow-wrap:anywhere;overflow:visible!important;text-overflow:clip!important}
@@ -7169,6 +7472,7 @@ window.__ModuleLoader__.load({
         ['channels', t('nav.tab.channels'), CHANNEL_PROVIDERS.length],
         ['aggregate', t('nav.tab.aggregate'), data.catalog.filter(m => m.channel === 'aggregate').length],
         ['workspace', t('nav.tab.workspace'), data.catalog.filter(m => m.channel === 'subscription').length],
+        ['extensions', t('nav.tab.extensions'), (data.extensions?.installed ?? []).length],
         ['saver', t('nav.tab.saver'), null],
         ['routing', t('nav.tab.routing'), data.catalog.filter(m => m.channel === 'combo').length],
         ['ledger', t('nav.tab.ledger'), null],
@@ -7205,7 +7509,9 @@ window.__ModuleLoader__.load({
           h(StarButton, { t })))
 
       const page = tab === 'workspace'
-        ? h(WorkspacePage, { t, summary, section: workspaceSection, onSelect: setWorkspaceSection })        : tab === 'channels'
+        ? h(WorkspacePage, { t, summary, section: workspaceSection, onSelect: setWorkspaceSection })        : tab === 'extensions'
+          ? h(ExtensionsPage, { t, onChanged: summary.reload })
+          : tab === 'channels'
         ? h(ChannelsPage, { t, ctx, summary })
         : tab === 'aggregate'
           ? h(AggregatePage, { t, summary })
@@ -7269,6 +7575,10 @@ window.__ModuleLoader__.load({
               h('p', { className: 'ofm_pagesub' }, t('free.sub'))),
             h('div', { className: 'ofm_pills' },
               h(Pill, { strong: true, tone: data.settings.enabled !== false ? 'ok' : 'err' }, data.settings.enabled !== false ? t('pref.enabled') : 'off'),
+              /* Environment readiness: a missing Bun silently kills the official
+                 free lane's inference — surface it where the lane lives. */
+              data.bun === false ? h('span', { title: t('ext.bunHint') },
+                h(Pill, { strong: true, tone: 'err' }, t('ext.bunMissing'))) : null,
               h(Pill, null, `${t('pref.egress')} ${data.egress?.country ?? data.egress?.ip ?? '—'}`),
               h(Pill, null, `${t('pref.probedAt')} ${ago(data.probedAt, t.locale)}`))),
           h('div', { className: 'ofm_tankrow' },
@@ -7306,6 +7616,560 @@ window.__ModuleLoader__.load({
         h(Section, { title: t('section.news'), hint: t('section.newsHint') }, h(NewsPanel, { t })))
     }
 
+    /** The extension marketplace: discover, installed, and the safety contract. */
+    function ExtensionsPage({ t, onChanged }) {
+      const [state, setState] = useState({ status: 'loading' })
+      const [busyId, setBusyId] = useState('')
+      const [detail, setDetail] = useState(undefined)
+      const [tab, setTab] = useState('discover')
+      const [query, setQuery] = useState('')
+      const [typeFilter, setTypeFilter] = useState('all')
+      const [sortKey, setSortKey] = useState('curated')
+      const [updatingAll, setUpdatingAll] = useState(false)
+      /* 2.10 增补：自动更新开关与它的 soak 提示、索引来源、最近操作。
+         `updates` 由后端在每次索引读取时算好（seenAt 记第一次看到新版本），
+         页面只读；写开关走既有 /settings 路由。 */
+      const [autoUpdateBusy, setAutoUpdateBusy] = useState(false)
+      /* Tag browsing (magpie's category gesture): click a tag chip, the grid
+         narrows to it. `updateProgress` counts a running 全部更新; `selfTests`
+         keeps each card's latest selfTest verdict. */
+      const [tagFilter, setTagFilter] = useState('')
+      const [updateProgress, setUpdateProgress] = useState(null)
+      const [selfTests, setSelfTests] = useState({})
+      const searchRef = useRef(null)
+      const load = useCallback(() => {
+        /* Re-reads keep the previous payload so a refresh (or the read after an
+           install) does not blank the page out mid-flight. */
+        setState(current => ({ ...current, status: 'loading' }))
+        api('/extensions', { timeout: 20_000 })
+          .then(payload => setState({ status: 'ready', ...payload }))
+          .catch(error => setState(current => ({ ...current, status: 'error', error: String(error?.message ?? error) })))
+      }, [])
+      useEffect(() => { load() }, [load])
+      /* `/` focuses the search box — the marketplace's first gesture is search,
+         and the pointer should not be required for it. */
+      useEffect(() => {
+        const onKey = event => {
+          if (event.key !== '/' || event.defaultPrevented === true) return
+          const target = event.target
+          const tag = target !== null && typeof target === 'object' ? String(target.tagName ?? '').toLowerCase() : ''
+          if (tag === 'input' || tag === 'textarea' || tag === 'select' || target?.isContentEditable === true) return
+          const input = searchRef.current
+          if (input === null || input === undefined) return
+          event.preventDefault()
+          input.focus()
+        }
+        window.addEventListener('keydown', onKey)
+        return () => window.removeEventListener('keydown', onKey)
+      }, [])
+      /* A mutation's response refreshes `installed`, but each registry row also
+         carries its own installed/update/enabled copy — left alone, a card keeps
+         its stale "update ready" tag (or stays on Install) until a full reload. */
+      const patchRegistryRow = (id, patch) => setState(current => {
+        const registry = current.registry
+        if (registry === null || registry === undefined) return current
+        return { ...current, registry: { ...registry, plugins: registry.plugins.map(row => row.id === id ? { ...row, ...patch } : row) } }
+      })
+      const act = async (path, body, refresh = true) => {
+        setBusyId(body?.id ?? path)
+        try {
+          const payload = await post(path, body, 120_000)
+          if (refresh) setState(current => ({ ...current, ...payload, status: 'ready' }))
+          else load()
+          if (path === '/extensions/install' && payload?.record !== undefined) {
+            patchRegistryRow(payload.record.id, {
+              installed: true, installedVersion: payload.record.version, updateAvailable: false,
+              enabled: payload.record.enabled === true, state: payload.record.state,
+            })
+          } else if (path === '/extensions/uninstall' && typeof body?.id === 'string') {
+            patchRegistryRow(body.id, { installed: false, enabled: false, updateAvailable: false, state: 'stopped' })
+          } else if (path === '/extensions/toggle' && payload?.record !== undefined) {
+            patchRegistryRow(payload.record.id, { enabled: payload.record.enabled === true, state: payload.record.state })
+          }
+          /* The nav badge and the free-page roster read the summary — refresh it
+             so an install/uninstall is reflected everywhere, not just here. */
+          onChanged?.()
+          return payload
+        } catch (error) {
+          showToast({ title: t('ext.failed'), body: String(error?.message ?? error), tone: 'warn' })
+          throw error
+        } finally { setBusyId('') }
+      }
+      const installFromDetail = async id => {
+        try { await act('/extensions/install', { id }); setDetail(undefined) } catch { /* the toast already said why */ }
+      }
+      const installed = state.installed ?? []
+      const registry = state.registry
+      const registryById = new Map((registry?.plugins ?? []).map(plugin => [plugin.id, plugin]))
+      const needle = query.trim().toLowerCase()
+      const discover = (registry?.plugins ?? []).filter(plugin => {
+        if (typeFilter !== 'all' && plugin.type !== typeFilter) return false
+        /* Tags ride the haystack: "kilo" should find the entry that is tagged kilo
+           even when its name never says it. */
+        if (needle !== '' && !`${plugin.name} ${plugin.id} ${plugin.summary ?? ''} ${(plugin.tags ?? []).join(' ')}`.toLowerCase().includes(needle)) return false
+        if (tagFilter !== '' && !(plugin.tags ?? []).includes(tagFilter)) return false
+        return true
+      })
+      if (sortKey === 'newest') discover.sort((a, b) => String(b.publishedAt ?? '').localeCompare(String(a.publishedAt ?? '')))
+      else if (sortKey === 'name') discover.sort((a, b) => String(a.name ?? '').localeCompare(String(b.name ?? '')))
+      const indexRows = registry?.plugins ?? []
+      const channelCount = indexRows.filter(plugin => plugin.type === 'channel').length
+      /* magpie's Installed tab: what is outdated floats to the top with a count
+         and an "update all" beside it, so a stale shelf never hides. */
+      const updates = installed.filter(record => registryById.get(record.id)?.updateAvailable === true)
+      const installedSorted = [...installed].sort((a, b) => {
+        const ua = registryById.get(a.id)?.updateAvailable === true ? 0 : 1
+        const ub = registryById.get(b.id)?.updateAvailable === true ? 0 : 1
+        if (ua !== ub) return ua - ub
+        return String(b.installedAt ?? '').localeCompare(String(a.installedAt ?? ''))
+      })
+      /* soak 状态：updates[] 由后端在索引读取时算好，id 对齐。 */
+      const updatesById = new Map((state.updates ?? []).map(update => [update.id, update]))
+      const soakHint = plugin => {
+        const update = updatesById.get(plugin.id)
+        if (update === undefined) return ''
+        if (update.ready === true) return t('ext.soakReady')
+        return t('ext.soakWaiting').replace('{h}', String(Math.max(1, Math.ceil(update.soakRemainingMs / 3_600_000))))
+      }
+      const auditLabel = action => ({ install: t('ext.auditInstall'), 'install-local': t('ext.auditInstallLocal'), uninstall: t('ext.auditUninstall'), 'set-enabled': t('ext.auditEnabled'), config: t('ext.auditConfig'), secret: t('ext.auditSecret'), 'self-test': t('ext.selfTest'), 'auto-update': t('ext.auditAutoUpdate'), 'registry-refresh': t('ext.auditRegistry') })[action] ?? action
+      const sourceLabel = meta => {
+        if (meta?.source === 'bundled') return t('ext.sourceBundled')
+        const source = String(meta?.source ?? '')
+        if (source === '') return ''
+        try { return `${new URL(source).hostname}（缓存）` } catch { return source }
+      }
+
+      const updateAll = async () => {
+        if (updatingAll === true || updates.length === 0) return
+        setUpdatingAll(true)
+        setUpdateProgress({ done: 0, total: updates.length })
+        try {
+          let done = 0
+          for (const record of updates) {
+            try { await act('/extensions/install', { id: record.id }) } catch { /* one refusal must not strand the rest */ }
+            done += 1
+            setUpdateProgress({ done, total: updates.length })
+          }
+        } finally { setUpdatingAll(false); setUpdateProgress(null) }
+      }
+      /* 自动更新开关：写回 /settings 的持久位；页面值以响应的 settings 为准。 */
+      const toggleAutoUpdate = async () => {
+        if (autoUpdateBusy === true) return
+        setAutoUpdateBusy(true)
+        try {
+          const next = state.autoUpdate !== true
+          await post('/settings', { autoUpdateExtensions: next }, 15_000)
+          setState(current => ({ ...current, autoUpdate: next }))
+        } catch (error) {
+          showToast({ title: t('ext.failed'), body: String(error?.message ?? error), tone: 'warn' })
+        } finally { setAutoUpdateBusy(false) }
+      }
+      /* 迁移助手：导出已安装清单（id、版本、启停、配置；密钥永不导出）。 */
+      const exportShelf = () => {
+        const rows = state.installed ?? []
+        if (rows.length === 0) return
+        const shelf = {
+          version: 1, exportedAt: new Date().toISOString(),
+          plugins: rows.map(record => ({ id: record.id, version: record.version, enabled: record.enabled === true, config: record.values ?? {} })),
+        }
+        const blob = new Blob([JSON.stringify(shelf, null, 2)], { type: 'application/json' })
+        const url = URL.createObjectURL(blob)
+        const link = document.createElement('a')
+        link.href = url
+        link.download = `ofm-extensions-${new Date().toISOString().slice(0, 10)}.json`
+        link.click()
+        URL.revokeObjectURL(url)
+        showToast({ title: t('ext.exportDone'), holdMs: 6000 })
+      }
+      /* 迁移助手：按清单逐个重装并恢复配置与启停；一个失败不拖累其余。 */
+      const importShelf = async file => {
+        let shelf
+        try { shelf = JSON.parse(await file.text()) } catch { shelf = null }
+        const entries = shelf !== null && typeof shelf === 'object' && Array.isArray(shelf?.plugins)
+          ? shelf.plugins.filter(row => row !== null && typeof row === 'object' && typeof row.id === 'string')
+          : []
+        if (entries.length === 0) { showToast({ title: t('ext.importInvalid'), tone: 'warn' }); return }
+        let restored = 0
+        let failed = 0
+        for (const entry of entries) {
+          try {
+            await post('/extensions/install', { id: entry.id }, 120_000)
+            if (entry.config !== null && typeof entry.config === 'object' && !Array.isArray(entry.config)) {
+              await post('/extensions/config', { id: entry.id, values: entry.config }, 30_000)
+            }
+            if (entry.enabled === true) await post('/extensions/toggle', { id: entry.id, enabled: true }, 60_000)
+            restored += 1
+          } catch { failed += 1 }
+        }
+        await load()
+        showToast({ title: t('ext.importDone').replace('{ok}', String(restored)).replace('{fail}', failed > 0 ? t('ext.importFail').replace('{n}', String(failed)) : ''), tone: failed > 0 ? 'warn' : undefined, holdMs: 8000 })
+      }
+
+      /* The manifest's optional selfTest(ctx), run from the card. The verdict is
+         data, not a toast: a failed hook paints ✗ + its reason on the card. */
+      const runSelfTest = async id => {
+        setSelfTests(current => ({ ...current, [id]: { busy: true } }))
+        try {
+          const verdict = await post('/extensions/self-test', { id }, 20_000)
+          setSelfTests(current => ({ ...current, [id]: { ok: verdict?.ok === true, message: verdict?.message ?? '' } }))
+        } catch (error) {
+          setSelfTests(current => ({ ...current, [id]: { ok: false, message: String(error?.message ?? error) } }))
+        }
+      }
+      const cardFor = (plugin, index = 0, filterable = false) => {
+        const record = installed.find(row => row.id === plugin.id)
+        const busy = busyId === plugin.id
+        const modelCount = plugin.models?.length ?? plugin.modelCount
+        const hasCover = plugin.cover !== null && plugin.cover !== undefined
+        const head = h('div', { className: 'ofm_exthead' },
+          extensionAvatar(plugin),
+          h('div', { className: 'ofm_exttitle' },
+            h('div', { className: 'ofm_cardhead' },
+              h('span', { className: 'ofm_cardname', title: plugin.name }, plugin.name),
+              h('span', { className: 'ofm_badge ok', title: t('ext.verifiedTitle') }, t('ext.verified')),
+              plugin.updateAvailable === true ? h('span', { className: 'ofm_hottag' }, t('ext.updateAvailable')) : null),
+            h('div', { className: 'ofm_id' }, `${plugin.id} · v${plugin.version} · ${plugin.author || '—'}`)))
+        const blurb = h('p', { className: 'ofm_note ofm_extblurb' }, plugin.summary || plugin.description || '')
+        const hostGate = plugin.installable === false
+        const hostHint = t('ext.requiresHost').replace('{v}', plugin.minHost ?? '')
+        const tagRow = h('div', { className: 'ofm_tags' },
+          h('span', { className: 'ofm_chantag' }, plugin.type === 'channel' ? t('ext.channel') : t('ext.enhancement')),
+          /* A silent lane takeover (kilo-free → the built-in Kilo) must be visible
+             where the user decides to install, not buried in the manifest. */
+          plugin.replaces ? h('span', { className: 'ofm_replacetag', title: t('ext.replaces').replace('{name}', plugin.replaces) }, t('ext.replaces').replace('{name}', plugin.replaces)) : null,
+          (plugin.tags ?? []).slice(0, 3).map(tag => filterable
+            ? h('button', { className: 'ofm_tag ofm_tagbtn', key: tag, type: 'button', title: t('ext.filterTag'), onClick: () => { setTab('discover'); setTagFilter(tag) } }, tag)
+            : h('span', { className: 'ofm_tag', key: tag }, tag)),
+          typeof modelCount === 'number' && modelCount > 0 ? h('span', { className: 'ofm_badge' }, t('ext.modelCount').replace('{n}', String(modelCount))) : null)
+        const acquire = label => h(Button, {
+          kind: 'primary', disabled: busy || hostGate, busy,
+          title: hostGate ? hostHint : undefined,
+          onClick: () => act('/extensions/install', { id: plugin.id }),
+        }, busy ? t('ext.installing') : label)
+        const action = record === undefined
+          ? hostGate
+            ? h('span', { className: 'ofm_badge throttled', title: hostHint }, hostHint)
+            : acquire(t('ext.install'))
+          : plugin.updateAvailable === true
+            ? acquire(t('ext.update'))
+            : h('span', { className: 'ofm_badge ok' }, t('ext.installed'))
+        const actions = h('div', { className: 'ofm_extfoot' },
+          h(Button, { onClick: () => setDetail(plugin) }, t('ext.detail')),
+          action)
+        if (record === undefined) {
+          return h('article', {
+            className: `ofm_card ofm_extcard ${plugin.type === 'channel' ? 'channel' : 'enhancement'}${hasCover ? ' hascover' : ''}`,
+            key: plugin.id, style: { '--i': String(index) },
+          }, h(ExtensionCover, { plugin }), head, blurb, tagRow, actions)
+        }
+        const fields = []
+        for (const field of record.config) {
+          if (field.type === 'toggle') {
+            fields.push(h('div', { className: 'ofm_row', key: field.key, style: { gap: 8 } },
+              h('span', { className: 'ofm_note', style: { minWidth: 90 } }, field.label),
+              h(Switch, {
+                checked: record.values?.[field.key] === true, label: field.label,
+                onChange: () => act('/extensions/config', { id: plugin.id, values: { [field.key]: !(record.values?.[field.key] === true) } }),
+              })))
+          } else if (field.type === 'select') {
+            // The manifest's option list is the whole truth: render it, save the
+            // pick the moment it changes.
+            const options = field.options ?? []
+            const current = String(record.values?.[field.key] ?? (options.includes(String(field.default)) ? field.default : options[0] ?? ''))
+            fields.push(h('div', { className: 'ofm_row', key: field.key, style: { gap: 8 } },
+              h('span', { className: 'ofm_note', style: { minWidth: 90 } }, field.label),
+              h('select', {
+                className: 'ofm_input', value: current, style: { minWidth: 140 },
+                onChange: event => {
+                  if (event.target.value !== current) act('/extensions/config', { id: plugin.id, values: { [field.key]: event.target.value } })
+                },
+              }, options.map(option => h('option', { key: option, value: option }, option)))))
+          } else {
+            const numeric = field.type === 'number'
+            fields.push(h('div', { className: 'ofm_row', key: field.key, style: { gap: 8 } },
+              h('span', { className: 'ofm_note', style: { minWidth: 90 } }, field.label),
+              h('input', {
+                className: 'ofm_input', type: field.type === 'password' ? 'password' : numeric ? 'number' : 'text', style: { minWidth: 140 },
+                defaultValue: record.values?.[field.key] ?? '', placeholder: field.type === 'password' ? t('ext.secretPlaceholder') : '',
+                onBlur: event => {
+                  const raw = event.target.value
+                  if (numeric && raw === '') return // untouched, not a zero
+                  const next = numeric ? Number(raw) : raw
+                  if (next !== (record.values?.[field.key] ?? '')) {
+                    act('/extensions/config', { id: plugin.id, values: { [field.key]: next } })
+                  }
+                },
+              })))
+          }
+        }
+        for (const key of record.permissions.secrets) {
+          const hint = record.secrets.find(row => row.key === key)?.hint ?? ''
+          fields.push(h('div', { className: 'ofm_row', key, style: { gap: 8 } },
+            h('span', { className: 'ofm_note', style: { minWidth: 90 } }, key),
+            h('input', {
+              className: 'ofm_input', type: 'password', style: { minWidth: 140 }, placeholder: t('ext.secretPlaceholder'),
+              onBlur: event => {
+                if (event.target.value !== '') {
+                  act('/extensions/secret', { id: plugin.id, key, value: event.target.value })
+                  event.target.value = ''
+                }
+              },
+            }),
+            h('span', { className: 'ofm_note' }, hint)))
+        }
+        const selfTest = selfTests[plugin.id]
+        const controls = h('div', { className: 'ofm_row' },
+          record.selfTestAvailable === true
+            ? h(Button, { disabled: busy || selfTest?.busy === true, busy: selfTest?.busy === true, onClick: () => runSelfTest(plugin.id) }, t('ext.selfTest'))
+            : null,
+          h(Button, { disabled: busy, busy, onClick: () => act('/extensions/toggle', { id: plugin.id, enabled: !(record.enabled === true) }) },
+            record.enabled === true ? t('ext.disable') : t('ext.enable')),
+          h(Button, {
+            danger: true, disabled: busy, busy,
+            onClick: () => { if (window.confirm(t('ext.confirmRemove').replace('{name}', plugin.name))) act('/extensions/uninstall', { id: plugin.id }) },
+          }, t('ext.uninstall')),
+          record.state !== 'ready' && record.enabled === true
+            ? h('span', { className: 'ofm_badge throttled', title: record.error }, t('ext.notRunning'))
+            : null,
+          selfTest !== undefined && selfTest.busy !== true
+            ? selfTest.ok === true
+              ? h('span', { className: 'ofm_badge ok', title: selfTest.message }, t('ext.selfTestOk'))
+              : h('span', { className: 'ofm_badge throttled', title: selfTest.message }, t('ext.selfTestFail'))
+            : null)
+        return h('article', {
+          className: `ofm_card ofm_extcard ${plugin.type === 'channel' ? 'channel' : 'enhancement'}${hasCover ? ' hascover' : ''}`,
+          key: plugin.id, style: { '--i': String(index) },
+        },
+          h(ExtensionCover, { plugin }), head, blurb, tagRow, actions,
+          /* 可更新的卡片多一行：最新一条更新说明 + soak 状态。一个「有更新」
+             徽标不解释为什么值得装，这一行解释。 */
+          plugin.updateAvailable === true
+            ? h('p', { className: 'ofm_soakline' }, [
+              (plugin.changelog ?? [])[0] ?? '',
+              (plugin.changelog ?? []).length > 0 ? ' · ' : '',
+              soakHint(plugin),
+            ].join('')) : null,
+          fields.length > 0 ? h('div', { className: 'ofm_sec', style: { gap: 4 } }, fields) : null,
+          controls)
+      }
+      return h('div', { className: 'ofm_page' },
+        h('header', { className: 'ofm_hero ofm_glass' },
+          h('div', { className: 'ofm_pagehead' },
+            h('div', { className: 'ofm_pagetitle' },
+              h('h2', null, t('ext.title')),
+              h('p', { className: 'ofm_pagesub' }, t('ext.sub'))),
+            h('div', { className: 'ofm_pills' },
+              h(Pill, { strong: true }, t('ext.count').replace('{n}', String(indexRows.length))),
+              h(Pill, null, t('ext.countByType').replace('{c}', String(channelCount)).replace('{e}', String(indexRows.length - channelCount))),
+              h(Button, {
+                disabled: busyId === '/extensions/registry/refresh', busy: busyId === '/extensions/registry/refresh',
+                onClick: () => act('/extensions/registry/refresh', undefined, false),
+              }, t('ext.refresh')))),
+          h('div', { className: 'ofm_seg', role: 'group', style: { alignSelf: 'flex-start' } },
+            [['discover', t('ext.tabDiscover')], ['installed', t('ext.tabInstalled')], ['security', t('ext.tabSecurity')]].map(([key, label]) =>
+              h('button', { key, type: 'button', 'aria-pressed': tab === key ? 'true' : 'false', onClick: () => setTab(key) }, label)))),
+        state.status === 'error' ? h('div', { className: 'ofm_callout ofm_error' }, h('div', null, h('b', null, t('ext.empty')), h('div', null, state.error))) : null,
+        tab === 'discover' ? h(Fragment, null,
+          h('div', { className: 'ofm_row ofm_exttoolbar' },
+            h('div', { className: 'ofm_extsearch' },
+              h('input', {
+                ref: searchRef, className: 'ofm_input', type: 'search', placeholder: t('ext.search'),
+                value: query, 'aria-keyshortcuts': '/', onChange: event => setQuery(event.target.value),
+              }),
+              h('kbd', { className: 'ofm_kbd', title: t('ext.searchHint'), 'aria-hidden': 'true' }, '/')),
+            h('div', { className: 'ofm_seg', role: 'group', 'aria-label': t('ext.type') },
+              [['all', t('ext.all'), indexRows.length], ['channel', t('ext.channel'), channelCount], ['enhancement', t('ext.enhancement'), indexRows.length - channelCount]].map(([key, label, count]) =>
+                h('button', { key, type: 'button', 'aria-pressed': typeFilter === key ? 'true' : 'false', onClick: () => setTypeFilter(key) },
+                  label, h('span', { className: 'ofm_segcount' }, String(count))))),
+            h('div', { className: 'ofm_seg', role: 'group', 'aria-label': t('ext.sort') },
+              [['curated', t('ext.sortCurated')], ['newest', t('ext.sortNewest')], ['name', t('ext.sortName')]].map(([key, label]) =>
+                h('button', { key, type: 'button', 'aria-pressed': sortKey === key ? 'true' : 'false', onClick: () => setSortKey(key) }, label)))),
+          h('div', { className: 'ofm_row ofm_exttoolbar' },
+            h('span', { className: 'ofm_inlinehint', title: t('ext.autoUpdateHint').replace('{h}', String(state.registryMeta?.soakHours ?? 2)) },
+              h(Switch, {
+                label: t('ext.autoUpdate'), checked: state.autoUpdate === true, disabled: autoUpdateBusy,
+                onChange: () => { void toggleAutoUpdate() },
+              })),
+            sourceLabel(state.registryMeta) !== ''
+              ? h('span', { className: 'ofm_extsource', title: `${t('ext.source')}: ${state.registryMeta?.source ?? ''}` },
+                `${t('ext.source')} · ${sourceLabel(state.registryMeta)}`) : null,
+            tagFilter !== '' ? h('span', { className: 'ofm_note' }, `${t('ext.filterTag')}:`) : null,
+            tagFilter !== '' ? h('span', { className: 'ofm_tag' }, tagFilter) : null,
+            tagFilter !== '' ? h(Button, { onClick: () => setTagFilter('') }, t('ext.clearSearch')) : null),
+          !registry && state.status === 'ready' ? h('div', { className: 'ofm_callout' },
+            h('div', null,
+              h('b', null, t('ext.empty')),
+              h('div', null, state.registryError !== undefined && state.registryError !== '' ? state.registryError : t('ext.indexHint')))) : null,
+          !registry && state.status === 'loading'
+            ? h('div', { className: 'ofm_grid ofm_extgrid' },
+              [0, 1, 2, 3, 4, 5].map(index => h('div', {
+                className: 'ofm_extskel', key: String(index), 'aria-hidden': 'true', style: { '--i': String(index) },
+              }, h('i', { style: { width: '42%' } }), h('i', { style: { width: '68%' } }),
+                h('i', { style: { width: '86%' } }), h('i', { style: { width: '55%' } }))))
+            : h('div', { className: 'ofm_grid ofm_extgrid' }, discover.map((plugin, index) => cardFor(plugin, index, true))),
+          discover.length === 0 && registry !== null && state.status === 'ready' ? h('div', { className: 'ofm_extempty' },
+            h('p', { className: 'ofm_note' }, t('ext.discoverEmpty')),
+            (query.trim() !== '' || typeFilter !== 'all' || tagFilter !== '')
+              ? h(Button, { onClick: () => { setQuery(''); setTypeFilter('all'); setTagFilter(''); searchRef.current?.focus?.() } }, t('ext.clearSearch'))
+              : h('a', { className: 'ofm_linkbtn', href: 'https://github.com/Ebony-Vinyl/ofm-extensions', target: '_blank', rel: 'noopener noreferrer' }, t('ext.openRepo'))) : null)
+        : tab === 'installed' ? h(Fragment, null,
+          h('div', { className: 'ofm_row ofm_exttoolbar' },
+            updates.length > 0 ? h('span', { className: 'ofm_badge region-blocked' }, t('ext.updateCount').replace('{n}', String(updates.length))) : null,
+            updates.length > 0 ? h(Button, { kind: 'primary', disabled: updatingAll, busy: updatingAll, onClick: updateAll },
+              updatingAll && updateProgress !== null
+                ? t('ext.updateProgress').replace('{i}', String(updateProgress.done)).replace('{n}', String(updateProgress.total))
+                : t('ext.updateAll')) : null,
+            h(Button, { onClick: exportShelf, disabled: installed.length === 0, title: t('ext.shelfTitle') }, t('ext.exportShelf')),
+            h('label', { className: 'ofm_importlabel', title: t('ext.shelfTitle') },
+              h('input', {
+                type: 'file', accept: 'application/json,.json', hidden: true,
+                onChange: event => { const file = event.target.files?.[0]; if (file !== undefined) void importShelf(file); event.target.value = '' },
+              }),
+              h(Button, { disabled: busyId !== '' }, t('ext.importShelf')))),
+          installed.length === 0 ? h('p', { className: 'ofm_note' }, t('ext.installedEmpty'))
+            : h('div', { className: 'ofm_grid ofm_extgrid' }, installedSorted.map((record, index) => cardFor({
+              ...record, summary: record.description,
+              tags: registryById.get(record.id)?.tags ?? [],
+              publishedAt: registryById.get(record.id)?.publishedAt ?? record.installedAt,
+              updateAvailable: registryById.get(record.id)?.updateAvailable === true,
+              changelog: registryById.get(record.id)?.changelog ?? [],
+              cover: registryById.get(record.id)?.cover,
+              installed: true,
+            }, index))),
+          installed.length > 0 ? h(Section, { title: t('ext.auditTitle') },
+            (state.audit ?? []).length > 0
+              ? h('div', { className: 'ofm_audrows' },
+                state.audit.slice().reverse().slice(0, 12).map((entry, index) => h('div', { className: 'ofm_audrow', key: `${entry.at}-${index}` },
+                  h('span', { className: 'ofm_audat' }, new Date(entry.at).toLocaleString(t.locale)),
+                  h('b', null, auditLabel(entry.action)),
+                  h('code', null, entry.id),
+                  entry.version !== undefined ? h('span', { className: 'ofm_note' }, `v${entry.version}`) : null,
+                  entry.enabled !== undefined ? h('span', { className: 'ofm_note' }, entry.enabled === true ? t('ext.enable') : t('ext.disable')) : null)))
+              : h('p', { className: 'ofm_note' }, t('ext.auditEmpty'))) : null)
+        : h('div', { className: 'ofm_panel' },
+          h('div', { className: 'ofm_paneltitle' }, t('ext.security')),
+          h('p', { className: 'ofm_note', style: { lineHeight: 1.7 } }, t('ext.securityBody')),
+          h('p', { className: 'ofm_note', style: { lineHeight: 1.7 } }, t('ext.securityBody2')),
+          typeof state.registry?.generatedAt === 'string' && state.registry.generatedAt !== ''
+            ? h('p', { className: 'ofm_note', style: { lineHeight: 1.7 } }, t('ext.indexFresh').replace('{at}', new Date(state.registry.generatedAt).toLocaleString(t.locale)))
+            : null,
+          h('div', { className: 'ofm_row' },
+            h('a', { className: 'ofm_linkbtn', href: `https://github.com/${'Ebony-Vinyl'}/ofm-extensions`, target: '_blank', rel: 'noopener noreferrer' }, t('ext.openRepo')))),
+        detail !== undefined ? h(ExtensionDetail, { t, detail, busy: busyId === detail.id, onInstall: installFromDetail, onClose: () => setDetail(undefined) }) : null)
+    }
+
+    /* A type-tinted letter avatar stands in for the manifest's (still optional)
+       icon: every card gets a face even when the author shipped none. */
+    function extensionAvatar(plugin) {
+      const initial = String(plugin?.name ?? plugin?.id ?? '?').trim().charAt(0).toUpperCase()
+      return h('span', {
+        className: `ofm_extavatar ${plugin?.type === 'channel' ? 'channel' : 'enhancement'}`,
+        'aria-hidden': 'true',
+      }, initial === '' ? '·' : initial)
+    }
+
+    /* The card's cover banner. The bytes ride the host's own /extensions/cover
+       route (digest-verified server-side, cached on disk); when the author
+       shipped none — or the fetch fails — the card simply renders without one.
+       The fallback state is per-card so one bad image never blanks the grid. */
+    function ExtensionCover({ plugin }) {
+      const [failed, setFailed] = useState(false)
+      if (plugin?.cover === null || plugin?.cover === undefined || failed) return null
+      return h('div', { className: 'ofm_extcover' },
+        h('img', {
+          src: `${API}/extensions/cover?id=${encodeURIComponent(plugin.id)}`,
+          alt: '', loading: 'lazy', decoding: 'async',
+          // 淡入：字节到位前不占住卡片顶部的视觉重量，一张慢图不撕开骨架。
+          onLoad: event => event.currentTarget.classList.add('ofm_loaded'),
+          onError: () => setFailed(true),
+        }))
+    }
+
+    /* The detail drawer portals to BODY, exactly like the disclaimer and
+       announcement modals: page containers are z-index:1 stacking contexts
+       while the nav card is z-index:30, so an inline fixed scrim would slide
+       under the nav card and get clipped in the desktop host. */
+    function ExtensionDetail({ t, detail, busy, onInstall, onClose }) {
+      const host = useMemo(() => {
+        const node = document.createElement('div')
+        node.setAttribute('data-ofm-extension-detail-root', 'true')
+        document.body.appendChild(node)
+        return node
+      }, [])
+      useEffect(() => () => { if (host.parentNode !== null) host.parentNode.removeChild(host) }, [host])
+      const dialogRef = useRef(null)
+      useEffect(() => {
+        dialogRef.current?.focus()
+        const onKey = event => { if (event.key === 'Escape') onClose() }
+        window.addEventListener('keydown', onKey)
+        return () => window.removeEventListener('keydown', onKey)
+      }, [onClose])
+      const origins = detail.permissions?.network ?? []
+      const modelCount = detail.models?.length ?? detail.modelCount
+      const repositoryHost = (() => {
+        try { return new URL(detail.repository).host } catch { return '' }
+      })()
+      const meta = [
+        [t('ext.type'), detail.type === 'channel' ? t('ext.channel') : t('ext.enhancement')],
+        [t('ext.license'), detail.license || '—'],
+        [t('ext.published'), String(detail.publishedAt ?? '').slice(0, 10) || '—'],
+        [t('ext.models'), typeof modelCount === 'number' && modelCount > 0 ? String(modelCount) : '—'],
+        ...(repositoryHost !== '' ? [[t('ext.repository'), repositoryHost]] : []),
+      ]
+      const canAcquire = (detail.installed !== true || detail.updateAvailable === true) && detail.installable !== false
+      return ReactDOM.createPortal(h('div', { className: 'ofm_scrim', onClick: onClose },
+        h('div', {
+          className: 'ofm_ann ofm_extdetail', role: 'dialog', 'aria-modal': 'true', 'aria-label': detail.name,
+          tabIndex: -1, ref: dialogRef, onClick: event => event.stopPropagation(),
+        },
+          h(ExtensionCover, { plugin: detail }),
+          h('div', { className: 'ofm_annhead ofm_exthead' },
+            extensionAvatar(detail),
+            h('div', { className: 'ofm_exttitle' },
+              h('h3', { className: 'ofm_anntitle' }, detail.name),
+              h('p', { className: 'ofm_annsub' }, `${detail.id} · v${detail.version} · ${detail.author || ''}`))),
+          h('div', { className: 'ofm_annbody' },
+            h('p', null, detail.summary || detail.description || ''),
+            (detail.tags ?? []).length > 0 ? h('div', { className: 'ofm_tags' }, detail.tags.map(tag => h('span', { className: 'ofm_tag', key: tag }, tag))) : null,
+            detail.replaces ? h('div', { className: 'ofm_tags' }, h('span', { className: 'ofm_replacetag' }, t('ext.replaces').replace('{name}', detail.replaces))) : null,
+            detail.installed !== true ? h('p', { className: 'ofm_note' }, t('ext.notInstalledHint')) : null,
+            detail.installable === false ? h('p', { className: 'ofm_note' }, t('ext.requiresHost').replace('{v}', detail.minHost ?? '')) : null,
+            (detail.hooks ?? []).length > 0 ? h('div', { className: 'ofm_row', style: { gap: 6, alignItems: 'center' } },
+              h('span', { className: 'ofm_note' }, t('ext.hooks')),
+              detail.hooks.map(hookName => h('code', { key: hookName }, hookName))) : null,
+            h('div', { className: 'ofm_kv' }, meta.map(([label, value]) => h('div', { className: 'ofm_kvc', key: label },
+              h('b', null, value), h('span', null, label)))),
+            /* 渠道插件的模型货架：装之前就知道它接进哪些模型，而不只是个数。 */
+            (detail.models ?? []).length > 0 ? h('div', { className: 'ofm_modelshelf' },
+              detail.models.slice(0, 14).map(model => h('span', {
+                className: 'ofm_modelchip', key: model.id, title: `${model.id}${model.wire ? ` · ${model.wire}` : ''}`,
+              }, model.name ?? model.id)),
+              detail.models.length > 14 ? h('span', { className: 'ofm_note' }, `+${detail.models.length - 14}`) : null) : null,
+            (detail.changelog ?? []).length > 0 ? h('div', { className: 'ofm_sec' },
+              h('b', { style: { fontSize: 12.5 } }, t('ext.changelog')),
+              h('ul', { className: 'ofm_changelog' }, detail.changelog.map((row, index) =>
+                h('li', { key: index }, row)))) : null,
+            h('div', { className: 'ofm_sec' },
+              h('b', { style: { fontSize: 12.5 } }, t('ext.permissions')),
+              h('p', { className: 'ofm_note' }, t('ext.permNetwork').replace('{n}', String(origins.length))),
+              origins.length > 0
+                ? h('div', { className: 'ofm_extorigins' }, origins.map(origin => h('code', { key: origin }, origin)))
+                : h('p', { className: 'ofm_note' }, t('ext.originEmpty')),
+              h('p', { className: 'ofm_note' }, t('ext.permSecrets').replace('{n}', String(detail.permissions?.secrets?.length ?? 0))),
+              h('p', { className: 'ofm_note' }, `${t('ext.storage')}: ${detail.permissions?.storage === true ? t('ext.storageOn') : t('ext.storageOff')}`))),
+          h('div', { className: 'ofm_annfoot' },
+            detail.installed === true && detail.updateAvailable !== true ? h('span', { className: 'ofm_badge available' }, t('ext.installed')) : null,
+            h('span', { className: 'spacer' }),
+            typeof detail.sourceUrl === 'string' && detail.sourceUrl !== '' ? h('a', { className: 'ofm_linkbtn', href: detail.sourceUrl, target: '_blank', rel: 'noopener noreferrer' }, t('ext.viewSource')) : null,
+            detail.homepage ? h('a', { className: 'ofm_linkbtn', href: detail.homepage, target: '_blank', rel: 'noopener noreferrer' }, t('ext.openHomepage')) : null,
+            detail.repository && detail.repository !== detail.homepage ? h('a', { className: 'ofm_linkbtn', href: detail.repository, target: '_blank', rel: 'noopener noreferrer' }, t('ext.openRepository')) : null,
+            canAcquire ? h(Button, {
+              kind: 'primary', disabled: busy === true, busy: busy === true,
+              onClick: () => onInstall?.(detail.id),
+            }, busy === true ? t('ext.installing') : detail.installed === true ? t('ext.update') : t('ext.install')) : null,
+            h(Button, { onClick: onClose }, t('ext.close'))))), host)
+    }
+
     function EacPage(props) {
       const { t, data, summary, eacAuth, setEacAuth, eacLogin, busy, catalogBusy, apply, bench, benches, refresh, reprobe } = props
       const { pool, poolError } = usePool()
@@ -7554,10 +8418,14 @@ window.__ModuleLoader__.load({
             for (const item of data.items ?? []) {
               osNotify(t('toast.annTitle'), item.title)
               if (item.level === 'urgent') {
+                if (urgentShownIds.has(item.id)) continue
+                urgentShownIds.add(item.id)
                 showUrgentModal({
                   title: `${t('news.urgentTitle')} · ${item.title}`,
                   html: item.html ?? '',
                   confirmLabel: t('news.gotIt'),
+                  holdMs: (item.holdSeconds ?? 0) * 1000,
+                  holdHint: t('news.holdHint'),
                   onClose: () => { void post('/announcements/ack', { id: item.id }).catch(() => {}) },
                 })
               } else {
@@ -7588,6 +8456,26 @@ window.__ModuleLoader__.load({
             window.dispatchEvent(new CustomEvent('ofm:hello', { detail: data }))
           })
         }
+        // 升级场景：公告在页面关闭期间到达（插件重启后的首轮轮询），到达推送
+        // 没有任何观看者。打开流之前补一次已读检查——最新一条未确认的 urgent
+        // 照样弹层，关闭即 ack。显示过的一律不重复（本次页面生命周期内）。
+        void (async () => {
+          try {
+            const view = await api('/announcements')
+            const candidates = (view?.items ?? []).filter(item => item.level === 'urgent' && item.acked !== true && urgentShownIds.has(item.id) === false)
+            const item = candidates.sort((left, right) => Number(right.createdAt ?? 0) - Number(left.createdAt ?? 0))[0]
+            if (item === undefined || disposed === true) return
+            urgentShownIds.add(item.id)
+            showUrgentModal({
+              title: `${t('news.urgentTitle')} · ${item.title}`,
+              html: item.html ?? '',
+              confirmLabel: t('news.gotIt'),
+              holdMs: (item.holdSeconds ?? 0) * 1000,
+              holdHint: t('news.holdHint'),
+              onClose: () => { void post('/announcements/ack', { id: item.id }).catch(() => {}) },
+            })
+          } catch { /* the modal is best effort; the center still lists it */ }
+        })()
         open()
         return () => {
           disposed = true