@noob-stupid/dsh-plugin-console 0.5.14 → 0.5.15

package/lib/client.js

@@ -99,6 +99,17 @@ window.__ModuleLoader__.load({
 			safetyBackfillNone: "已装插件都在清单里声明过了（官方面板的「已安装」与 pnpm 都能看见）",
 			safetyBackfillBtn: "补声明（{n} 项）",
 			safetyBackfillDone: "补声明完成",
+			// 2026-09-27 加法：依赖锁体检 / 重建（只读体检 + 用户显式触发；中英各一份）
+			safetyLockTitle: "依赖锁体检",
+			safetyLockDesc: "只读体检：声明依赖能否在 registry 解析 + pnpm-lock.yaml 是否与清单一致（不会自动改你的 profile）",
+			safetyLockOk: "依赖锁与清单一致，无需处理",
+			safetyLockBad: "发现 {n} 类问题",
+			safetyLockBlocked: "有依赖在 registry 上解析不到：{pkgs}（重建会停下，不会静默丢弃依赖）",
+			safetyLockRepaired: "lock 已重建并与清单对齐",
+			safetyLockRepairPartial: "重建后仍有差距，见下方问题",
+			safetyLockNoRebuild: "当前不需要重建",
+			safetyLockCheckBtn: "体检",
+			safetyLockRepairBtn: "重建 lock（显式）",
 			safetyMode: "运行模式",
 			safetyModeManaged: "托管：框架升级与回滚由本控制台负责（默认，行为与之前一致）",
 			safetyModeManagedOn: "已切到托管模式：框架升级与回滚仍由本控制台负责",
@@ -255,6 +266,10 @@ window.__ModuleLoader__.load({
 			diagKindMinimumReleaseAge: "版本太新被安全间隔拦下：稍后再试",
 			diagKindMissingTool: "本机缺少命令（corepack/pnpm/git）：装好再重试",
 			diagKindNotFound: "registry 上没有这个包或版本：核对包名或换源",
+			// 2026-09-27 加法：三个新分类（fetch-404 / lockfile-outdated / supply-chain-age）的短句
+			diagKindFetch404: "依赖在 registry 上 404：核对包名/版本或换源（不会丢弃依赖）",
+			diagKindLockfileOutdated: "lock 与清单对不上：可在「升级安全」里显式体检并重建",
+			diagKindSupplyChainAge: "版本太新被供应链闸拦下：稍后再试（不自动绕过）",
 			diagKindLocked: "文件被占用或无权限：关掉占用进程后重试",
 			diagKindOther: "未归类的安装失败：先原样重试，仍失败看原始输出",
 			diagRetried: "网络超时：已自动重试一次（更长超时）",
@@ -594,6 +609,17 @@ window.__ModuleLoader__.load({
 			safetyBackfillNone: "Every installed plugin is declared in the manifest (visible to plugin pages and pnpm)",
 			safetyBackfillBtn: "Declare {n}",
 			safetyBackfillDone: "Declarations written",
+			// 2026-09-27 additive: dependency lock health / rebuild (read-only check + explicit user trigger)
+			safetyLockTitle: "Dependency lock health",
+			safetyLockDesc: "Read-only check: whether declared deps resolve on the registry and whether pnpm-lock.yaml matches the manifest (your profile is never auto-edited)",
+			safetyLockOk: "Lock file matches the manifest — nothing to do",
+			safetyLockBad: "{n} kind(s) of problem found",
+			safetyLockBlocked: "Deps not resolvable on the registry: {pkgs} (the rebuild stops; your deps are never silently dropped)",
+			safetyLockRepaired: "Lock rebuilt and aligned with the manifest",
+			safetyLockRepairPartial: "Still out of sync after the rebuild — see the problems below",
+			safetyLockNoRebuild: "No rebuild needed right now",
+			safetyLockCheckBtn: "Check",
+			safetyLockRepairBtn: "Rebuild lock (explicit)",
 			safetyMode: "Operating mode",
 			safetyModeManaged: "Managed: this console owns framework upgrade and rollback (default, unchanged behaviour)",
 			safetyModeManagedOn: "Switched to managed: framework upgrade and rollback stay with this console",
@@ -750,6 +776,10 @@ window.__ModuleLoader__.load({
 			diagKindMinimumReleaseAge: "Version too new for the release-age gate: retry later",
 			diagKindMissingTool: "Missing local command (corepack/pnpm/git): install it, then retry",
 			diagKindNotFound: "Package or version not on the registry: check the name or switch source",
+			// 2026-09-27 additive: short lines for the three new kinds (fetch-404 / lockfile-outdated / supply-chain-age)
+			diagKindFetch404: "Dependency 404 on the registry: check name/version or switch source (your deps are never dropped)",
+			diagKindLockfileOutdated: "Lock file disagrees with the manifest: run the explicit check/rebuild in Upgrade safety",
+			diagKindSupplyChainAge: "Too new for the release-age gate: retry later (never auto-bypassed)",
 			diagKindLocked: "File in use or no permission: close the holder, then retry",
 			diagKindOther: "Unclassified failure: retry as-is; if it fails again read the raw output",
 			diagRetried: "Network timeout: auto-retried once (longer timeout)",
@@ -1128,6 +1158,16 @@ window.__ModuleLoader__.load({
 			}
 			return data;
 		}
+		/** 重启服务（按钮 / 工具项 / 自更新后共用）：服务端在「本实例由桌面端外壳托管」等场景会**拒绝**
+		 *  并回结构化短句 —— 必须把它显示出来，否则按钮看起来是「点了没反应」（旧实现把错误吞掉了）。 */
+		function restartServiceViaServer(setMessage, options) {
+			const reload = (options ?? {}).reload !== false;
+			if (reload) setMessage(t("restarting"));
+			call("/plugin-console/restart", {}).then(
+				() => { if (reload) window.setTimeout(() => window.location.reload(), 12000); },
+				(error) => { setMessage(error !== null && typeof error.message === "string" && error.message !== "" ? error.message : t("failed")); },
+			);
+		}
 		/** 超时类错误附上可操作提示（网络黑洞期的最常见表现）。 */
 		function friendlyGithubError(error) {
 			const msg = error !== null && typeof error.message === "string" ? error.message : String(error);
@@ -2882,8 +2922,11 @@ window.__ModuleLoader__.load({
 							: diagnosis.kind === "minimumReleaseAge" ? t("diagKindMinimumReleaseAge")
 								: diagnosis.kind === "missing-tool" ? t("diagKindMissingTool")
 									: diagnosis.kind === "not-found" ? t("diagKindNotFound")
-										: diagnosis.kind === "locked" ? t("diagKindLocked")
-											: t("diagKindOther");
+										: diagnosis.kind === "fetch-404" ? t("diagKindFetch404")
+											: diagnosis.kind === "lockfile-outdated" ? t("diagKindLockfileOutdated")
+												: diagnosis.kind === "supply-chain-age" ? t("diagKindSupplyChainAge")
+													: diagnosis.kind === "locked" ? t("diagKindLocked")
+														: t("diagKindOther");
 					lines.push({
 						key: "diagnosis",
 						text: view.status === "failed"
@@ -4034,7 +4077,7 @@ window.__ModuleLoader__.load({
 								el("button", { type: "button", className: styles.toggle, onClick: fwStatusRefresh }, t("fwPanelRefreshStatus")),
 								el("button", { type: "button", className: styles.toggle, disabled: fwCheckBusy, onClick: () => fwCheckRefresh(true) }, fwCheckBusy ? t("fwPanelChecking") : t("fwPanelRecheck"))),
 							el("div", { className: styles.rowTop },
-								el("button", { type: "button", className: styles.toggle, onClick: () => { setMessage(t("restarting")); call("/plugin-console/restart", {}).then(() => { window.setTimeout(() => window.location.reload(), 12000); }, () => {}); } }, t("restartService")))))
+								el("button", { type: "button", className: styles.toggle, onClick: () => { restartServiceViaServer(setMessage); } }, t("restartService")))))
 					: null,
 				gateOpen
 					? el("div", { className: styles.modalBackdrop, onClick: (event) => { if (event.target === event.currentTarget) setGateOpen(false); } },
@@ -4255,7 +4298,7 @@ window.__ModuleLoader__.load({
 								}, t("frameworkRollbackBtn") + " → " + (rollbackInfo.from ?? "?")))
 							: null)
 					: null,
-				message !== null ? el("div", { className: styles.messageRow }, el("p", { className: styles.message }, message), reloadHint ? el("button", { type: "button", className: styles.toggle, onClick: () => window.location.reload() }, t("reloadPage")) : null, restartHint ? el("button", { type: "button", className: styles.toggle, onClick: () => { setMessage(t("restarting")); call("/plugin-console/restart", {}).then(() => { window.setTimeout(() => window.location.reload(), 12000); }, () => {}); } }, t("restartService")) : null) : null,
+				message !== null ? el("div", { className: styles.messageRow }, el("p", { className: styles.message }, message), reloadHint ? el("button", { type: "button", className: styles.toggle, onClick: () => window.location.reload() }, t("reloadPage")) : null, restartHint ? el("button", { type: "button", className: styles.toggle, onClick: () => { restartServiceViaServer(setMessage); } }, t("restartService")) : null) : null,
 				// 适配门「软禁」的风险确认（用户定案：自动禁用，但允许手动强行启用）
 				riskyConfirm !== null
 					? el("div", { className: styles.detail, "data-risky": "true" },
@@ -4300,7 +4343,7 @@ const lockWarn = data.lockUpdated === false && typeof data.lockNote === "string"
 ? "⚠️ " + data.lockNote
 : "";
 setMessage((data.note ?? "已更新") + (lockWarn === "" ? "" : "。" + lockWarn) + "，正在重启生效…");
-call("/plugin-console/restart", {}).then(() => {}, () => {});
+restartServiceViaServer(setMessage, { reload: false });
 } else {
 setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 }
@@ -4459,7 +4502,7 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 							type: "button",
 							className: styles.toolItem,
 							title: t("restartService"),
-							onClick: () => { setMessage(t("restarting")); call("/plugin-console/restart", {}).then(() => { window.setTimeout(() => window.location.reload(), 12000); }, () => {}); },
+							onClick: () => { restartServiceViaServer(setMessage); },
 						}, t("restartService")),
 						el("button", {
 							type: "button",
@@ -5054,9 +5097,38 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 			const [note, setNote] = react.useState(null);
 			const [section, setSection] = react.useState(null);
 			const [backfill, setBackfill] = react.useState(null);
+			// 2026-09-27 加法：依赖锁体检结果（null = 还没体检过；不自动跑，用户点「体检」才打接口）
+			const [lockFix, setLockFix] = react.useState(null);
 			const load = async () => {
 				try { const data = await call("/plugin-console/compat-status"); if (data !== null) setStatus(data); } catch {}
 			};
+			// 依赖锁体检：**只读**接口，不打任何写操作
+			const lockCheck = async () => {
+				if (busy) return;
+				setBusy(true);
+				try {
+					const data = await call("/plugin-console/lockfile-check", {});
+					setLockFix(data ?? null);
+					setNote({ text: data?.hint ?? t("safetySwitchFailed") });
+				} catch (error) { setNote({ text: (error && error.message) || t("safetySwitchFailed") }); }
+				finally { setBusy(false); }
+			};
+			// 重建 lock：**必须由用户点**（服务端也只认显式 POST）；失败如实说，不假装成功
+			const lockRepair = async () => {
+				if (busy) return;
+				setBusy(true);
+				try {
+					const done = await call("/plugin-console/lockfile-repair", {});
+					const text = done?.action === "repaired" ? t("safetyLockRepaired")
+						: done?.action === "blocked" ? fill(t("safetyLockBlocked"), [["pkgs", (done.packages ?? []).join("、") || "—"]])
+							: done?.action === "noop" ? t("safetyLockNoRebuild")
+								: t("safetyLockRepairPartial");
+					setNote({ text: text + (typeof done?.hint === "string" ? t("diagColon") + done.hint : "") });
+					const again = await call("/plugin-console/lockfile-check", {}).catch(() => null);
+					if (again !== null && again !== undefined) setLockFix(again);
+				} catch (error) { setNote({ text: (error && error.message) || t("safetySwitchFailed") }); }
+				finally { setBusy(false); }
+			};
 			const loadBackfill = async () => {
 				try { const data = await call("/plugin-console/declare-installed", { mode: "plan" }); if (data !== null) setBackfill(data); } catch {}
 			};
@@ -5119,11 +5191,11 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 				pulse: "M3 12h4l2-5 4 10 2-5h6"
 			};
 			const icon = (key) => el("svg", stroke, el("path", { d: ICONS[key] || ICONS.shield }));
-			const row = (key, title, desc, control) => el("div", { style: { display: "flex", alignItems: "flex-start", gap: "10px", padding: "10px 12px" } },
+			const row = (key, title, desc, control, descTitle) => el("div", { style: { display: "flex", alignItems: "flex-start", gap: "10px", padding: "10px 12px" } },
 				icon(key),
 				el("div", { style: { flex: "1 1 auto", minWidth: "0" } },
 					el("div", { style: { fontSize: "13px", fontWeight: 500 } }, title),
-					el("div", { style: { fontSize: "12px", opacity: .7, marginTop: "2px", wordBreak: "break-word" } }, desc)),
+					el("div", { style: { fontSize: "12px", opacity: .7, marginTop: "2px", wordBreak: "break-word" }, title: descTitle === undefined ? undefined : descTitle }, desc)),
 				control === undefined || control === null ? null : control);
 			const sw = (on, onClick, title) => el("button", { type: "button", title: title, onClick: onClick, disabled: busy, style: { width: "40px", height: "22px", borderRadius: "999px", border: "none", padding: 0, cursor: busy ? "default" : "pointer", background: on ? "var(--dsw-alias-bg-accent, #4d6bfe)" : "var(--dsw-alias-bg-secondary, rgba(127,127,127,.35))", position: "relative", flex: "0 0 auto", marginTop: "2px" } },
 				el("span", { style: { position: "absolute", top: "3px", left: on ? "21px" : "3px", width: "16px", height: "16px", borderRadius: "50%", background: "#fff", transition: "left .18s cubic-bezier(.34,1.56,.64,1)" } }));
@@ -5151,6 +5223,21 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 				row("back", t("safetyRollbackTitle"), rb.applicable === true ? fill(t("safetyRollbackOk"), [["from", rb.from], ["to", rb.to]]) : fill(t("safetyRollbackNone"), [["reason", rb.reason === null || rb.reason === undefined ? "-" : rb.reason]])),
 				row("scan", t("safetyFpTitle"), fp.changed === true ? fill(t("safetyFpChanged"), [["reasons", (fp.reasons || []).join("；")]]) : t("safetyFpStable"), fp.changed === true ? el("button", { type: "button", className: styles.toggle, onClick: ack, disabled: busy }, t("safetyFpAck")) : null),
 				row("list", t("safetyBackfillTitle"), pending > 0 ? fill(t("safetyBackfillDesc"), [["n", pending]]) : t("safetyBackfillNone"), pending > 0 ? el("button", { type: "button", className: styles.toggle, disabled: busy, onClick: applyBackfill }, fill(t("safetyBackfillBtn"), [["n", pending]])) : null),
+				// 依赖锁体检 / 重建（2026-09-27 加法）：体检只读；重建必须用户点（服务端也只认显式 POST）。
+				// 面板只放短句，服务端的长 hint 挂 title 悬浮提示（与安装诊断同一约定）。
+				row("scan", t("safetyLockTitle"),
+					lockFix === null ? t("safetyLockDesc")
+						: lockFix.ok === true ? t("safetyLockOk")
+							: fill(t("safetyLockBad"), [["n", (lockFix.problems ?? []).length]])
+								+ ((lockFix.packages404 ?? []).length === 0 ? "" : " · " + lockFix.packages404.join("、")),
+					el("div", { style: { display: "flex", gap: "8px", flex: "0 0 auto" } },
+						el("button", { type: "button", className: styles.toggle, disabled: busy, title: t("safetyLockDesc"), onClick: lockCheck }, t("safetyLockCheckBtn")),
+						lockFix !== null && lockFix.repair?.applicable === true
+							? el("button", { type: "button", className: styles.toggle, disabled: busy, title: lockFix.repair?.command ?? "", onClick: lockRepair }, t("safetyLockRepairBtn"))
+							: null),
+					lockFix !== null && lockFix.ok !== true && Array.isArray(lockFix.problems) && lockFix.problems.length > 0
+						? lockFix.problems.map((p) => p.hint).join("\n")
+						: undefined),
 				row("pulse", t("safetyAdaptTitle"), t("safetyAdaptDesc"), el("div", { style: { display: "flex", gap: "8px", flex: "0 0 auto" } },
 					el("button", { type: "button", className: styles.toggle, disabled: busy, onClick: () => preflight(false) }, t("fwPreflightBtn")),
 					el("button", { type: "button", className: styles.toggle, disabled: busy, onClick: () => preflight(true) }, t("fwPreflightPatch")))),

package/lib/server/domain/dep-source.js

@@ -33,11 +33,14 @@ const PLUGIN_SRC_DIR = 'plugin-src'
  * 404 / 网络失败都归为「不可解析」——调用方据此决定**绝不写裸版本号**。
  * `version` 为 null 时只判包是否存在；`hasVersion` 表示指定版本是否在 versions 里
  * （release 通道装的版本可能比 registry 上的 latest 还新，只判包名存在是不够的）。
+ * 2026-09-27 加法：`includeMeta: true` 时把 registry 原始元数据一起返回（`meta`），
+ * 供「依赖锁体检」读发布时间（供应链间隔判定）用；默认不返回，既有调用方形状不变。
  */
 async function probeRegistryPackage(packageName, registries = [], options = {}) {
   const fetchJson = typeof options.fetchJson === 'function' ? options.fetchJson : fetchJsonUrl
   const version = typeof options.version === 'string' && options.version !== '' ? options.version : null
   const timeoutMs = Number.isFinite(options.timeoutMs) ? options.timeoutMs : 8000
+  const withMeta = options.includeMeta === true
   const list = (Array.isArray(registries) ? registries : []).filter((r) => typeof r === 'string' && r.trim() !== '')
   const tries = list.length > 0 ? list : ['https://registry.npmmirror.com']
   const encoded = packageName.startsWith('@')
@@ -60,6 +63,7 @@ async function probeRegistryPackage(packageName, registries = [], options = {})
         latest,
         registry: base,
         tried,
+        ...(withMeta ? { meta } : {}),
       }
     } catch (error) {
       tried.push(`${base}：${error instanceof Error ? error.message : String(error)}`)

package/lib/server/domain/framework.js

@@ -136,6 +136,82 @@ function checkpointFrameworkTree(fwRoot, destRoot) {
   return { dest, mirrored }
 }
 
+/**
+ * 宿主形态识别（2026-09-26 真机事故后的**加法分支**）。
+ *
+ * 事故现场（官方桌面端实例，127.0.0.1:19387，20:28）：
+ *   桌面端里 DSH host 是 **Electron 二进制**跑的 asar 内入口
+ *   （`D:\dsh-desktop\DeepSeek Harness.exe --expose-internals …\app.asar\dsh\node_modules\@deepseek-ai\dsh-desktop-host\lib\index.js …`），
+ *   不是 `node bin.js web`。我们的「重启服务 / 回滚 / 框架升级重启」那一套会
+ *   `Stop-Process` 掉 host，然后 `Resolve-DshBin` 三种方式全找不到 bin.js
+ *   （桌面端 profile 的 node_modules 里根本没有 `@deepseek-ai` 作用域）→ 拉不起来 →
+ *   Electron 外壳记 `crash-…-host.log: dsh desktop host exited with 4294967295`。
+ *
+ * 判据（**只看「我们自己是不是被 Electron 运行时承载」**，任一命中即判定为外壳托管）：
+ *   ① `process.versions.electron` 非空 —— 当前进程就跑在 Electron 运行时里（含 ELECTRON_RUN_AS_NODE 模式）；
+ *   ② 环境变量 `ELECTRON_RUN_AS_NODE` 非空 —— Electron 以 Node 模式承载 DSH host；
+ *   ③ `process.execPath` 或任一 `process.argv` 命中 `resources\app.asar` —— 入口在打包 Electron 应用内；
+ *   ④ `process.execPath` 文件名是 `electron(.exe)`；
+ *   ⑤ `process.resourcesPath` 存在 **且** execPath 文件名不是 node —— 纯 Node 进程没有这个属性。
+ *
+ * **刻意不用「父进程是 Electron 外壳」当判据**：本机实测（2026-09-26）独立实例
+ *   `node …\dsh\lib\bin.js web --no-open`（3080, pid 32464）的父进程也是 Electron
+ *   （`%TEMP%\…\DeepSeek Harness.exe`，用户的启动器），拿父进程判定会把**独立 dsh web 实例误判成桌面端托管**
+ *   —— 那正好违反「独立 dsh web 进程的既有行为一字不改」。父进程只作为 evidence 记录，不参与判定。
+ */
+const SHELL_HOSTED_NOTICE = '本实例由桌面端外壳托管，请在桌面端内重启/更新'
+
+function detectHostShape(deps = {}) {
+  const env = deps.env ?? process.env ?? {}
+  const versions = deps.versions ?? process.versions ?? {}
+  const execPath = String(deps.execPath ?? process.execPath ?? '')
+  const argv = Array.isArray(deps.argv) ? deps.argv : (process.argv ?? [])
+  const resourcesPath = deps.resourcesPath === undefined ? process.resourcesPath : deps.resourcesPath
+  const reasons = []
+  const electronVersion = typeof versions.electron === 'string' && versions.electron !== '' ? versions.electron : ''
+  if (electronVersion !== '') reasons.push(`process.versions.electron=${electronVersion}（当前进程跑在 Electron 运行时里）`)
+  const runAsNode = typeof env.ELECTRON_RUN_AS_NODE === 'string' && env.ELECTRON_RUN_AS_NODE !== '' ? env.ELECTRON_RUN_AS_NODE : ''
+  if (runAsNode !== '') reasons.push(`环境变量 ELECTRON_RUN_AS_NODE=${runAsNode}（Electron 以 Node 模式承载 DSH host）`)
+  const argvText = argv.map((a) => String(a ?? ''))
+  const asarHit = [execPath, ...argvText].find((p) => /resources[\\/]app\.asar/iu.test(p)) ?? null
+  if (asarHit !== null) reasons.push(`入口在打包 Electron 应用内（${asarHit}）`)
+  const exeBase = basename(execPath).toLowerCase()
+  if (/^electron(\.exe)?$/u.test(exeBase)) reasons.push(`process.execPath 是 Electron（${execPath}）`)
+  const resourcesText = typeof resourcesPath === 'string' ? resourcesPath : ''
+  if (resourcesText !== '' && !/^node(\.exe)?$/u.test(exeBase)) {
+    reasons.push(`process.resourcesPath 存在（${resourcesText}）且可执行文件不是 node（${exeBase || '未知'}）`)
+  }
+  const hosted = reasons.length > 0
+  return {
+    hosted,
+    kind: hosted ? 'desktop-shell' : 'standalone',
+    reasons,
+    notice: hosted ? SHELL_HOSTED_NOTICE : null,
+    evidence: {
+      execPath,
+      argv1: String(argv[1] ?? ''),
+      asarEntry: asarHit,
+      electronVersion,
+      runAsNode,
+      resourcesPath: resourcesText === '' ? null : resourcesText,
+      ppid: typeof deps.ppid === 'number' ? deps.ppid : (typeof process.ppid === 'number' ? process.ppid : null),
+    },
+  }
+}
+
+/**
+ * 外壳托管时的标准拒绝载荷（**纯数据，不碰 HTTP**）：路由层负责把它翻成响应。
+ * 返回 null = 独立 `dsh web` 实例，调用方走原路径（一字不改）。
+ */
+function shellHostedRefusal(deps) {
+  const shape = detectHostShape(deps)
+  if (shape.hosted !== true) return null
+  return {
+    error: SHELL_HOSTED_NOTICE,
+    details: { code: 'hosted-by-shell', hostKind: shape.kind, reasons: shape.reasons, evidence: shape.evidence },
+  }
+}
+
 /**
  * 生成「拉起 DSH 服务」的 PowerShell 前导块（升级脚本 / 回滚脚本共用，v0.3.37 事故修复）。
  *
@@ -154,11 +230,21 @@ function checkpointFrameworkTree(fwRoot, destRoot) {
  *      目录 → 顶层可见链接 → .pnpm 里最新的一个；
  *   3) 全路径参数一律 `Test-Path -LiteralPath`，失败只记录、不抛错。
  */
-function relaunchPrelude({ nodePath, pluginDir, fwRoot, target, ps }) {
+function relaunchPrelude({ nodePath, pluginDir, fwRoot, target, ps, hosted }) {
+  // 未显式传 hosted 时自己判定一次（自接线，避免调用方漏传导致守卫失效）。
+  // 独立 `dsh web` 实例下 detectHostShape().hosted === false ⇒ 生成结果与旧实现逐字节相同。
+  const shellHosted = typeof hosted === 'boolean' ? hosted : detectHostShape().hosted === true
   const probe = "const path=require('path');const p=require.resolve('@deepseek-ai/dsh/package.json',{paths:[process.env.DSH_RESOLVE_ROOT]});console.log(path.join(path.dirname(p),'lib','bin.js'))"
   const pnpmBin = (dirExpr) => `Join-Path ${dirExpr} 'node_modules\\@deepseek-ai\\dsh\\lib\\bin.js'`
+  // 外壳托管（桌面端 Electron 承载）：脚本里**只留一句拒绝**，绝不 Start-Process 拉起第二个实例。
+  // `hosted === false` 时这里是空数组 —— 生成的脚本与旧实现**逐字节相同**（加法分支）。
+  const hostedFlag = shellHosted === true ? [`$script:DSH_HOSTED = $true`] : []
+  const hostedGuard = shellHosted === true
+    ? [`  if ($script:DSH_HOSTED) { Log ('本实例由桌面端外壳托管，跳过拉起（' + $tag + '）：请在桌面端内重启/更新'); return $false }`]
+    : []
   return [
     `$launchLog = ''`,
+    ...hostedFlag,
     // 心跳（v0.3.39）：脚本每推进一小步就更新一次心跳文件的时间戳。服务端据此区分
     // 「脚本还在干活」与「脚本进程被系统/启动器杀掉」。2026-09-11 真机事故：回滚脚本
     // 干完活之后被 Ctrl+C 类事件结束（计划任务 Last Result = 0xC000013A），终态没写成，
@@ -180,6 +266,7 @@ function relaunchPrelude({ nodePath, pluginDir, fwRoot, target, ps }) {
     `  return ''`,
     `}`,
     `function Invoke-DshRelaunch($tag) {`,
+    ...hostedGuard,
     `  $bin = Resolve-DshBin`,
     `  if ([string]::IsNullOrWhiteSpace($bin)) { Log ('拉起失败（' + $tag + '）：node resolve / .pnpm / 顶层链接 三种方式都找不到 dsh 的 bin.js，请手动启动 DSH'); return $false }`,
     `  try { Add-Content -Path $launchLog -Value ((Get-Date -Format 'yyyy-MM-dd HH:mm:ss') + ' 拉起(' + $tag + '): ' + $bin) -Encoding UTF8 } catch {}`,
@@ -390,4 +477,4 @@ async function preflightDisableIncompatible({ ports, profileDir, patchPath, targ
   }
   return { disabled, skipped }
 }
-export { FRAMEWORK_STATE_FILE, FRAMEWORK_BACKUP_ROOT, cleanupStaleFwTasks, resolveDshBin, locateAppBootFile, applyFrameworkTolerancePatchOnce, resolveFrameworkRootNodeModules, checkpointFrameworkTree, relaunchPrelude, isVersionAtLeast, pickFrameworkTarget, resolveFrameworkUpgradePlan, currentFrameworkVersion, backupProfileSnapshot, detectFrameworkUpgrade, preflightDisableIncompatible }
+export { FRAMEWORK_STATE_FILE, FRAMEWORK_BACKUP_ROOT, SHELL_HOSTED_NOTICE, detectHostShape, shellHostedRefusal, cleanupStaleFwTasks, resolveDshBin, locateAppBootFile, applyFrameworkTolerancePatchOnce, resolveFrameworkRootNodeModules, checkpointFrameworkTree, relaunchPrelude, isVersionAtLeast, pickFrameworkTarget, resolveFrameworkUpgradePlan, currentFrameworkVersion, backupProfileSnapshot, detectFrameworkUpgrade, preflightDisableIncompatible }

package/lib/server/domain/install-diagnose.js

@@ -14,6 +14,33 @@
 
 /** 分类规则：**顺序敏感**（具体在前、宽泛在后；network-timeout 最宽，放最后兜住超时类文本）。 */
 const DIAGNOSIS_RULES = [
+  {
+    // 2026-09-27 加法：pnpm 的**供应链年龄闸**（`minimumReleaseAge`）真的拦下安装时的专用错误码。
+    // 与下面泛化的 minimumReleaseAge 分开，是因为这条要带**安全边界文案**（可自行显式绕过、代价自负，
+    // 本控制台绝不代为绕过）。`withPackages` 不置位：这条错误文本里通常没有 registry URL。
+    kind: 'supply-chain-age',
+    re: /ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION|minimum release age violation/iu,
+    retry: 'later',
+    hint: '版本太新，被 pnpm 的 minimumReleaseAge（供应链安全间隔）拦下：稍后再试即可自动放行；'
+      + '确有紧急需要时，**由你自己**显式加 `--config.minimumReleaseAge=0` 绕过（放行"刚发布不久"的版本有安全代价）——本控制台绝不替你绕过。',
+  },
+  {
+    // 2026-09-27 加法：registry 抓取 404 —— 与泛化的 not-found 分开，是因为 404 要能**点名丢的是哪个依赖**。
+    kind: 'fetch-404',
+    re: /ERR_PNPM_FETCH_404|not found in the registry|is not in the npm registry|404 Not Found[^\n]{0,80}https?:\/\/(?:registry|npm)[^\s]*/iu,
+    retry: null,
+    withPackages: true,
+    hint: '依赖在 registry 上 404（包名/版本不存在，或镜像未同步）：核对包名与版本、或换一个已同步的源后重试；'
+      + '本控制台**不会**为了让 lock 重建成功而静默丢弃你的依赖。',
+  },
+  {
+    // 2026-09-27 加法：陈旧/残缺的 pnpm-lock.yaml（pnpm 在 frozen-lockfile 下的确定性报错）。
+    // 以前落进 other，用户只能看到一句原始 stderr；现在给"这不是网络问题、是 lock 与清单对不上"的定性。
+    kind: 'lockfile-outdated',
+    re: /ERR_PNPM_OUTDATED_LOCKFILE|Cannot install with "?frozen-lockfile|lockfile is not up to date|ERR_PNPM_LOCKFILE_MISSING_DEPENDENCY/iu,
+    retry: null,
+    hint: 'pnpm-lock.yaml 与实际依赖不一致（陈旧或残缺）：这不是网络问题；可在「升级安全 → 依赖锁体检」里只读体检并**显式**重建 lock（本控制台不会自动改你的 profile）。',
+  },
   {
     kind: 'minimumReleaseAge',
     // pnpm 的供应链安全间隔（默认关闭，可配置）：版本"太新"时拒装
@@ -39,6 +66,9 @@ const DIAGNOSIS_RULES = [
   },
   {
     kind: 'not-found',
+    // 泛化 404：**非 registry 依赖解析**的那些（GitHub release 资源、npm 的 E404 文本等）。
+    // 上面的 fetch-404 更具体（能点名依赖），所以带 registry 特征的 404 会先被它命中；
+    // 这里的 ERR_PNPM_FETCH_404 保留为兜底（万一文本形态变化，也不至于掉进 other）。
     re: /ERR_PNPM_FETCH_404|E404|404 Not Found|not found in the registry|is not in the npm registry/iu,
     retry: null,
     hint: 'registry 上没有这个包/这个版本（包名拼错、子包未发布，或镜像未同步）：核对包名与版本后重试；'
@@ -61,17 +91,56 @@ const DIAGNOSIS_RULES = [
   },
 ]
 
-/** 失败文本 → { kind, hint, retry }。
- * retry 取值：'longer-timeout'（调用方**只对它**做一次定向长超时重试）| 'later'（提示"稍后再试"，不自动重试）| null。 */
+/** 从失败文本里**点名**被抓取失败的依赖（纯函数，2026-09-27 加法）。
+ *
+ * 为什么必须能点名：pnpm 的 404 报错里包名只出现在 URL 路径里（`GET https://registry.npmmirror.com/dsh-github-login`），
+ * 用户在面板上只看到一句"registry 上没有这个包"，还得自己去翻 stderr 才知道是哪一个。
+ * 这里把 URL 路径还原成包名（含 `@scope%2fname` 这种编码形态），去重后按出现顺序返回。
+ * 认不出来就返回空数组（调用方据此保留原样文案，绝不编造包名）。 */
+function missingPackagesFrom(text) {
+  const raw = typeof text === 'string' ? text : String(text ?? '')
+  const found = []
+  for (const m of raw.matchAll(/https?:\/\/[^\s'"()<>]+/gu)) {
+    let path = ''
+    try {
+      path = new URL(m[0]).pathname
+    } catch {
+      continue
+    }
+    const cut = path.split('/-/')[0] // tarball 形态：/<pkg>/-/<file>.tgz → 只取包名段
+    // pnpm 的报错里 URL 常直接跟着冒号/逗号（`…/dsh-x: Not Found - 404`）→ 先去尾部标点再认包名
+    const decoded = decodeURIComponent(cut).replace(/^\/+/u, '').replace(/[/:;,.]+$/u, '')
+    if (!/^(?:@[A-Za-z0-9._-]+\/)?[A-Za-z0-9._-]+$/u.test(decoded)) continue
+    if (/\.(?:tgz|json|yaml|yml)$/iu.test(decoded)) continue
+    if (!found.includes(decoded)) found.push(decoded)
+  }
+  return found
+}
+
+/** 按分类取短句 hint（纯函数；2026-09-27 加法）：**文案只有一份**——
+ * lockfile-health.js 的体检结论也走这里，避免"同一分类两处措辞"。认不出的分类返回 null。 */
+function hintForKind(kind, packages = []) {
+  const rule = DIAGNOSIS_RULES.find((r) => r.kind === kind)
+  if (rule === undefined) return null
+  const list = Array.isArray(packages) ? packages.filter((p) => typeof p === 'string' && p !== '') : []
+  return rule.withPackages === true && list.length > 0 ? `${rule.hint}（涉及：${list.join('、')}）` : rule.hint
+}
+
+/** 失败文本 → { kind, hint, retry, packages }。
+ * retry 取值：'longer-timeout'（调用方**只对它**做一次定向长超时重试）| 'later'（提示"稍后再试"，不自动重试）| null。
+ * packages（2026-09-27 加法）：文本里能点名的依赖包名（认不出就是空数组）——只用于展示，不参与任何判定。 */
 function classifyInstallFailure(stderrOrMessage) {
   const text = typeof stderrOrMessage === 'string' ? stderrOrMessage : String(stderrOrMessage ?? '')
+  const packages = missingPackagesFrom(text)
   for (const rule of DIAGNOSIS_RULES) {
-    if (rule.re.test(text)) return { kind: rule.kind, hint: rule.hint, retry: rule.retry }
+    if (!rule.re.test(text)) continue
+    return { kind: rule.kind, hint: hintForKind(rule.kind, packages), retry: rule.retry, packages }
   }
   return {
     kind: 'other',
     hint: '未归类的安装失败：请把下面的原始输出用于排查；可先原样重试一次，仍失败再换源或看作业详情里的完整 stderr。',
     retry: null,
+    packages,
   }
 }
 
@@ -82,11 +151,12 @@ function longerTimeoutFor(timeout, { cap = 240000 } = {}) {
   return Math.min(Math.max(Math.round(base * 2), base + 15000), cap)
 }
 
-/** 一行可展示文案（面板/日志用；纯函数）：说清分类、是否已自动重试、以及下一步建议。 */
+/** 一行可展示文案（面板/日志用；纯函数）：说清分类、是否已自动重试、点名的依赖、以及下一步建议。 */
 function diagnosisText(diagnosis) {
   if (diagnosis == null || typeof diagnosis !== 'object') return null
   const retried = diagnosis.retried === true ? '（已自动重试一次：更长超时）' : ''
-  return `失败分类：${diagnosis.kind}${retried}${diagnosis.hint ? `；${diagnosis.hint}` : ''}`
+  const pkgs = Array.isArray(diagnosis.packages) && diagnosis.packages.length > 0 ? `（涉及：${diagnosis.packages.join('、')}）` : ''
+  return `失败分类：${diagnosis.kind}${retried}${diagnosis.hint ? `；${diagnosis.hint}` : ''}${pkgs}`
 }
 
 /** ③ 的定向重试编排（**本文件唯一的非纯函数**，只被 install-job.js 调用）：
@@ -110,4 +180,4 @@ async function retryPnpmOnce({ ch, profileDir, name, registries, pnpmError, job,
   }
 }
 
-export { classifyInstallFailure, longerTimeoutFor, diagnosisText, retryPnpmOnce, DIAGNOSIS_RULES }
+export { classifyInstallFailure, longerTimeoutFor, diagnosisText, retryPnpmOnce, missingPackagesFrom, hintForKind, DIAGNOSIS_RULES }