@noob-stupid/dsh-plugin-console 0.4.0 → 0.4.1

package/lib/server/domain/format-scan.js

@@ -242,9 +242,12 @@ function scanProducerText({ file, text, rules = {}, targetVersion = null, knownB
       reason: item.reason, snippet: item.snippet,
     })
   }
+  // 注释掩码与 kind 规则同源：注释里提到 `.volatile(` 不算调用
+  // （发版门槛自扫时抓到过：本模块自己的文档注释与说明字符串就中招，报出无意义的提示）
+  const masked = maskComments(text)
   for (const kb of knownBreakages) {
     if (typeof kb.since === 'string' && targetVersion !== null && !versionAtLeast(targetVersion, kb.since)) continue
-    const matches = [...text.matchAll(new RegExp(kb.pattern.source, kb.pattern.flags.includes('g') ? kb.pattern.flags : kb.pattern.flags + 'g'))]
+    const matches = [...masked.matchAll(new RegExp(kb.pattern.source, kb.pattern.flags.includes('g') ? kb.pattern.flags : kb.pattern.flags + 'g'))]
     if (matches.length === 0) continue
     // 带探针的规则：先确认运行时真的缺这个 API，否则不报（避免修好依赖后永远误报）
     let extra = ''

package/lib/server/routes/framework-preflight.js

@@ -7,6 +7,7 @@
 // 「一发消息就报错、会话整体不可用」。包级适配门（peerDependencies / 版本号）看不见这类
 // 运行期契约破坏，所以必须在**升级前**单独预检、先把本地适配好再装。
 
+import { readFileSync } from 'node:fs'
 import { dirname, join } from 'node:path'
 import { isFrameworkOwnedPackage } from '../domain/compat.js'
 import { discoverFormatContract, summarizeContract } from '../domain/format-contract.js'
@@ -15,7 +16,7 @@ import { currentFrameworkVersion } from '../domain/framework.js'
 import { listEntries } from '../domain/runtime.js'
 import { curlText, fetchJsonUrl } from '../infra/http.js'
 import { sendError, sendJson } from '../infra/httpd.js'
-import { baseDirOf, dshHome, profileDirOf, resolvePackageJson } from '../infra/paths.js'
+import { baseDirOf, dshHome, pluginRoot, profileDirOf, resolvePackageJson } from '../infra/paths.js'
 
 const REGISTRY = 'https://registry.npmmirror.com'
 
@@ -24,11 +25,16 @@ const REGISTRY = 'https://registry.npmmirror.com'
  *  仍然扫（能暴露框架自身的契约不一致），但**只报告不改**——改它等于污染框架安装树。 */
 function preflightRoots(ports, profileDir) {
   const roots = [{ root: join(dshHome(), 'agent-presets'), kind: 'preset' }]
+  // 控制台自身排除在外：它是工具、不是会话消息生产方，而它的报错文案/文档里本身就含
+  // `kind: 'plugin'`、`.volatile(` 这类字样 —— 发版门槛自扫时正是这些字串报出了无意义条目。
+  let selfName = null
+  try { selfName = JSON.parse(readFileSync(join(pluginRoot(), 'package.json'), 'utf8')).name ?? null } catch {}
   let entries = []
   try { entries = listEntries(ports) } catch {}
   const baseDir = baseDirOf(ports?.baseUrl ?? 'file:///')
   for (const entry of entries) {
     if (typeof entry.moduleName !== 'string' || entry.moduleName === '' || entry.moduleName.startsWith('cordis:')) continue
+    if (selfName !== null && entry.moduleName === selfName) continue
     let pkgPath = null
     try { pkgPath = resolvePackageJson(entry.moduleName, baseDir, profileDir) } catch {}
     if (pkgPath === null) continue

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noob-stupid/dsh-plugin-console",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "DSH 框架升级安全与插件升级门控：一键升级、失败自动回滚、升级后回滚上版、旧插件不适配自动禁用；内置多源插件市场为发现层，插件源全部可自定义，可指向公司内网私有源 / 私有索引 / 本地 Git 仓库，纯内网离线可用 | Framework upgrade safety & plugin version gating for DSH, with a customizable multi-source plugin market: point every source at internal mirrors or a local file:// repo for intranet-only, offline installs.",
   "repository": {
     "type": "git",