@noob-stupid/dsh-plugin-console 0.5.29 → 0.5.31

package/README.md

@@ -66,7 +66,7 @@
 dsh plugin --profile web add @noob-stupid/dsh-plugin-console
 
 # or install from GitHub source (needs git; allowBuilds authorization on first add)
-dsh plugin --profile web add github:Noob-stupid/dsh-plugin-hub
+dsh plugin --profile web add github:Noob-stupid/dsh-plugin-gating-hub
 ```
 
 Then restart the dsh service → refresh the page → **Settings → Plugins → Plugin Console**.
@@ -78,13 +78,13 @@ Then restart the dsh service → refresh the page → **Settings → Plugins →
 Windows (PowerShell):
 
 ```powershell
-git clone https://github.com/Noob-stupid/dsh-plugin-hub "$env:TEMP\dsh-plugin-console" 2>$null; & "$env:TEMP\dsh-plugin-console\deploy.ps1"
+git clone https://github.com/Noob-stupid/dsh-plugin-gating-hub "$env:TEMP\dsh-plugin-console" 2>$null; & "$env:TEMP\dsh-plugin-console\deploy.ps1"
 ```
 
 Linux / macOS:
 
 ```bash
-git clone https://github.com/Noob-stupid/dsh-plugin-hub /tmp/dsh-plugin-console 2>/dev/null; bash /tmp/dsh-plugin-console/deploy.sh
+git clone https://github.com/Noob-stupid/dsh-plugin-gating-hub /tmp/dsh-plugin-console 2>/dev/null; bash /tmp/dsh-plugin-console/deploy.sh
 ```
 
 The script copies the plugin into `$DSH_HOME/profiles/<profile>/node_modules/` and
@@ -96,7 +96,7 @@ idempotently appends an enable entry to `cordis.patch.yml`. Afterwards:
 
 ### Option 3: hand it to an AI in one sentence
 
-> Install the DSH plugin hub (dsh-plugin-hub): run `dsh plugin --profile web add @noob-stupid/dsh-plugin-console` (npm release); if there is no dsh CLI, clone https://github.com/Noob-stupid/dsh-plugin-hub to `~/.dsh/profiles/web/node_modules/` and register it in `cordis.patch.yml` (id: plugin-console, name: @noob-stupid/dsh-plugin-console). Restart dsh web afterwards.
+> Install the DSH plugin hub (dsh-plugin-hub): run `dsh plugin --profile web add @noob-stupid/dsh-plugin-console` (npm release); if there is no dsh CLI, clone https://github.com/Noob-stupid/dsh-plugin-gating-hub to `~/.dsh/profiles/web/node_modules/` and register it in `cordis.patch.yml` (id: plugin-console, name: @noob-stupid/dsh-plugin-console). Restart dsh web afterwards.
 
 Requires: DSH ≥ 0.1.0-rc.6 (web profile, with `dsh-client-modules` / `dsh-host-plugin-inventory`).
 
@@ -384,7 +384,7 @@ If this panel saves you time or makes DSH more fun to use:
 - ⭐ **Star this repo** — it directly helps more DSH users find it;
 - Share it with DSH users or in DSH communities;
 - Submit your own plugin (tag it `dsh-plugin`) to grow the ecosystem;
-- Found a bug or want a feature? [Open an issue](https://github.com/Noob-stupid/dsh-plugin-hub/issues).
+- Found a bug or want a feature? [Open an issue](https://github.com/Noob-stupid/dsh-plugin-gating-hub/issues).
 
 ---
 
@@ -395,7 +395,7 @@ Contributions of all kinds are welcome — issues, PRs, docs, translations.
 - **Guidelines**: [CONTRIBUTING.md](CONTRIBUTING.md)
 - **Code of Conduct**: [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md)
 - **Security policy**: [SECURITY.md](SECURITY.md) (report vulnerabilities privately)
-- **Issue templates**: bug reports & feature requests via the [new issue](https://github.com/Noob-stupid/dsh-plugin-hub/issues/new/choose) page
+- **Issue templates**: bug reports & feature requests via the [new issue](https://github.com/Noob-stupid/dsh-plugin-gating-hub/issues/new/choose) page
 
 ---
 
@@ -420,4 +420,4 @@ The layered-refactor preview lives in its **own repository**: [**`Noob-stupid/ds
 - **What it is**: the monolithic `lib/index.js` (8547 lines) split into layers — `lib/index.js` **141 lines** + `lib/server/**` **38 modules**; **feature-equivalent to `0.3.57`**, maintainability only;
 - **Verified**: 19 test suites green · 8 architecture-guard assertions · **route inventory identical** (`status` + response fields) against the stable build;
 - **Not yet exercised**: real framework upgrade / rollback, restart guardian, component start/stop, real AI run, Gitee OAuth (~10–25% long-tail risk, subjective);
-- **For everyday use** stick to npm `@noob-stupid/dsh-plugin-console@0.3.67`, or `main` of this repo.
+- **For everyday use** stick to the **latest npm release** of `@noob-stupid/dsh-plugin-console` (`npm view @noob-stupid/dsh-plugin-console version`), or `main` of this repo.

package/README.zh.md

@@ -45,7 +45,7 @@
 dsh plugin --profile web add @noob-stupid/dsh-plugin-console
 
 # 或直接装 GitHub 源码（需 git，首次需 allowBuilds 授权）
-dsh plugin --profile web add github:Noob-stupid/dsh-plugin-hub
+dsh plugin --profile web add github:Noob-stupid/dsh-plugin-gating-hub
 ```
 
 然后重启 dsh 服务 → 刷新页面 → **设置 → 插件 → 插件控制台**。
@@ -57,13 +57,13 @@ dsh plugin --profile web add github:Noob-stupid/dsh-plugin-hub
 Windows（PowerShell）：
 
 ```powershell
-git clone https://github.com/Noob-stupid/dsh-plugin-hub "$env:TEMP\dsh-plugin-console" 2>$null; & "$env:TEMP\dsh-plugin-console\deploy.ps1"
+git clone https://github.com/Noob-stupid/dsh-plugin-gating-hub "$env:TEMP\dsh-plugin-console" 2>$null; & "$env:TEMP\dsh-plugin-console\deploy.ps1"
 ```
 
 Linux / macOS：
 
 ```bash
-git clone https://github.com/Noob-stupid/dsh-plugin-hub /tmp/dsh-plugin-console 2>/dev/null; bash /tmp/dsh-plugin-console/deploy.sh
+git clone https://github.com/Noob-stupid/dsh-plugin-gating-hub /tmp/dsh-plugin-console 2>/dev/null; bash /tmp/dsh-plugin-console/deploy.sh
 ```
 
 脚本会做两件事：把插件包拷进 `$DSH_HOME/profiles/<profile>/node_modules/`，
@@ -74,7 +74,7 @@ git clone https://github.com/Noob-stupid/dsh-plugin-hub /tmp/dsh-plugin-console
 
 ### 方式三：一句话交给 AI
 
-> 安装 DSH 插件中心（dsh-plugin-hub）：运行 `dsh plugin --profile web add @noob-stupid/dsh-plugin-console`（npm 发布版）；若没有 dsh CLI，则克隆 https://github.com/Noob-stupid/dsh-plugin-hub 到 `~/.dsh/profiles/web/node_modules/`，在 `cordis.patch.yml` 注册（id: plugin-console，name: @noob-stupid/dsh-plugin-console）。完成后重启 dsh web。
+> 安装 DSH 插件中心（dsh-plugin-hub）：运行 `dsh plugin --profile web add @noob-stupid/dsh-plugin-console`（npm 发布版）；若没有 dsh CLI，则克隆 https://github.com/Noob-stupid/dsh-plugin-gating-hub 到 `~/.dsh/profiles/web/node_modules/`，在 `cordis.patch.yml` 注册（id: plugin-console，name: @noob-stupid/dsh-plugin-console）。完成后重启 dsh web。
 
 要求：DSH ≥ 0.1.0-rc.6（web profile，含 `dsh-client-modules` / `dsh-host-plugin-inventory`）。
 
@@ -287,7 +287,7 @@ git clone https://github.com/Noob-stupid/dsh-plugin-hub /tmp/dsh-plugin-console
 
 ## 帮助 / Help
 
-遇到问题先看这里；仍有疑问请到 [议题](https://github.com/Noob-stupid/dsh-plugin-hub/issues) 提问。
+遇到问题先看这里；仍有疑问请到 [议题](https://github.com/Noob-stupid/dsh-plugin-gating-hub/issues) 提问。
 
 - **面板没出现**：重启 dsh 服务 → 刷新页面 → 设置 → 插件 → 插件管理。
 - **点开关没反应**：基础设施行带"受保护"标签（禁止开关，这是保护机制）；普通插件开关经
@@ -318,7 +318,7 @@ git clone https://github.com/Noob-stupid/dsh-plugin-hub /tmp/dsh-plugin-console
 - ⭐ **给本仓库点个 Star**——直接帮助更多 DSH 用户发现它；
 - 分享给身边的 DSH 用户或社区；
 - 提交你自己的插件（打上 `dsh-plugin` 标签）一起壮大生态；
-- 发现 bug 或有新需求？[开一个 Issue](https://github.com/Noob-stupid/dsh-plugin-hub/issues)。
+- 发现 bug 或有新需求？[开一个 Issue](https://github.com/Noob-stupid/dsh-plugin-gating-hub/issues)。
 
 ---
 
@@ -329,7 +329,7 @@ git clone https://github.com/Noob-stupid/dsh-plugin-hub /tmp/dsh-plugin-console
 - **贡献指南**：[CONTRIBUTING.md](CONTRIBUTING.md)
 - **行为准则**：[CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md)
 - **安全政策**：[SECURITY.md](SECURITY.md)（漏洞私下报告）
-- **Issue 模板**：从 [新建 Issue](https://github.com/Noob-stupid/dsh-plugin-hub/issues/new/choose) 页面选择 Bug / 功能建议
+- **Issue 模板**：从 [新建 Issue](https://github.com/Noob-stupid/dsh-plugin-gating-hub/issues/new/choose) 页面选择 Bug / 功能建议
 
 ---
 
@@ -355,5 +355,5 @@ MIT
 - **已验证**：19 套测试全绿 · 8 条架构守卫断言 · 与稳定版逐条对打**路由清单一致**（`status` + 响应字段）；
 - **已实测**（2026-09-20 真装真卸演练）：普通插件 / bundle 插件 / 无 npm 仓库 / 套装 / 技能 / 聚合仓库子包 / 仓库落地 / 服务器组件启停；
 - **尚未实测**：真框架升级 / 真回滚、重启守护链路、AI 真跑、Gitee OAuth 回调（长尾风险主观估计 **10%~25%**）；
-- **日常使用请继续用**：npm `@noob-stupid/dsh-plugin-console@0.3.67`，或本仓库 `main`。
+- **日常使用请继续用**：npm `@noob-stupid/dsh-plugin-console` 的**最新发布版**（`npm view @noob-stupid/dsh-plugin-console version`），或本仓库 `main`。
 - 请多反馈问题

package/SECURITY.md

@@ -1,6 +1,6 @@
 # 安全政策 Security Policy
 
-本文件说明 `@noob-stupid/dsh-plugin-console`（仓库 [Noob-stupid/dsh-plugin-hub](https://github.com/Noob-stupid/dsh-plugin-hub)）的安全政策：这个插件**能做什么**（能力清单）、已内置哪些护栏、自动化静态扫描容易误报的地方，以及如何报告漏洞。
+本文件说明 `@noob-stupid/dsh-plugin-console`（仓库 [Noob-stupid/dsh-plugin-gating-hub](https://github.com/Noob-stupid/dsh-plugin-gating-hub)）的安全政策：这个插件**能做什么**（能力清单）、已内置哪些护栏、自动化静态扫描容易误报的地方，以及如何报告漏洞。
 
 英文能力摘要见文末 [Capability summary (English)](#capability-summary-english)。
 
@@ -15,7 +15,7 @@
 
 **请勿在公开 Issue 中披露安全漏洞**。请通过以下方式私下报告：
 
-1. 通过 GitHub 的 [Security Advisory](https://github.com/Noob-stupid/dsh-plugin-hub/security/advisories/new)（推荐，私密）
+1. 通过 GitHub 的 [Security Advisory](https://github.com/Noob-stupid/dsh-plugin-gating-hub/security/advisories/new)（推荐，私密）
 2. 或给仓库 owner 发 GitHub 私信
 
 请在报告中包含：

package/lib/client.js

@@ -342,6 +342,17 @@ window.__ModuleLoader__.load({
 			githubLoginFail: "登录失败",
 			hubUpdateAvailable: "下载更新",
 			cleanResiduals: "清理残余备份",
+			cleanFrameworkResiduals: "清理框架残留",
+			cfStale: "旧目录 {n} 个",
+			cfBackups: "可清备份 {n} 条（约 {mb} MB）",
+			cfEntities: "旧 store 实体 {n} 个（只报告）",
+			cfConfirm: "确认执行？旧目录会改名备份并重建链接；超出保留数量的框架备份会被删除。",
+			cfNothing: "没有需要清理的项",
+			cfCancelled: "已取消（未改动任何文件）",
+			cfRunning: "正在执行清理…",
+			cfDone: "已改名 {renamed} / 重建链接 {linked} / 删备份 {removed} 条（释放约 {mb} MB）",
+			cfFailed: "{n} 项失败（详见 fw/console 日志）",
+			compatNoticeDismiss: "我知道了（此版本不再提示）",
 					searchInstalledPlaceholder: "搜索已安装插件（名称或 id）",
 			extraFilter: "已装",
 			extraFilterAll: "全部",
@@ -489,7 +500,7 @@ window.__ModuleLoader__.load({
 			archiveSourcesDesc: "git 协议拉不动时的替代通道：直接用 HTTP 下载仓库压缩包再解压建仓（真机实测同一镜像下 archive 4 MB/s、git 协议 0 B/s）。模板用 {owner}/{repo} 占位符，可选 {branch}；主源优先，失败自动回退下一个。示例：https://ghproxy.net/https://github.com/{owner}/{repo}/archive/refs/heads/{branch}.tar.gz",
 			archiveUrlPlaceholder: "https://ghproxy.net/https://github.com/{owner}/{repo}/archive/refs/heads/{branch}.tar.gz",
 			addArchiveSource: "添加 archive 源",
-			gitSourcesDesc: "克隆仓库时用的地址模板（{owner}/{repo} 占位符）。下面这个列表就是「自定义 Git 源」——内置两条是默认值，点「添加 Git 源」即可换成你自己的：Gitee = https://gitee.com/{owner}/{repo}.git；GitLab = https://gitlab.com/{owner}/{repo}.git；自建 Gitea = https://你的域名/{owner}/{repo}.git；镜像代理 = https://镜像站/https://github.com/{owner}/{repo}.git；本地裸仓库 = file:///D:/repos/{owner}/{repo}.git。主源优先，失败自动回退下一个",
+			gitSourcesDesc: "克隆仓库时用的地址模板（{owner}/{repo} 占位符）。下面这个列表就是「自定义 Git 源」——内置两条是默认值，点「添加 Git 源」即可换成你自己的：Gitee = https://gitee.com/{owner}/{repo}.git；GitLab = https://gitlab.com/{owner}/{repo}.git；自建 Gitea = https://你的域名/{owner}/{repo}.git；镜像代理 = https://镜像站/https://github.com/{owner}/{repo}.git；本地裸仓库 = file:///C:/repos/{owner}/{repo}.git。主源优先，失败自动回退下一个",
 			addGitSource: "添加 Git 源",
 			gitUrlPlaceholder: "如 https://gitee.com/{owner}/{repo}.git",
 			gitSourceBtn: "Git 源",
@@ -871,6 +882,17 @@ window.__ModuleLoader__.load({
 			githubLoggedIn: "GitHub signed in: ",
                     hubUpdateAvailable: "Download update",
                     cleanResiduals: "Clean residual backups",
+                    cleanFrameworkResiduals: "Clean framework residuals",
+                    cfStale: "{n} stale dirs",
+                    cfBackups: "{n} backups removable (~{mb} MB)",
+                    cfEntities: "{n} old store entities (report only)",
+                    cfConfirm: "Proceed? Stale dirs get renamed+relinked; framework backups beyond the keep count are deleted.",
+                    cfNothing: "nothing to clean",
+                    cfCancelled: "cancelled (nothing changed)",
+                    cfRunning: "cleaning…",
+                    cfDone: "renamed {renamed} / relinked {linked} / backups removed {removed} (~{mb} MB freed)",
+                    cfFailed: "{n} failed (see fw/console logs)",
+     compatNoticeDismiss: "Got it (hide for this version)",
 			githubCornerOut: "Not signed in to GitHub",
 			githubLoginViaApp: "GitHub login",
 			githubLoginOpened: "Authorization window opened — enter the code on the GitHub page to finish",
@@ -1028,7 +1050,7 @@ window.__ModuleLoader__.load({
 			archiveSourcesDesc: "Fallback transport when the git protocol cannot move data: download the repo tarball over plain HTTP, extract, and create a repo from it (measured: on the same mirror archive ran at 4 MB/s while git moved 0 B/s). Templates use {owner}/{repo}, optionally {branch}; primary first, falls back on failure.",
 			archiveUrlPlaceholder: "https://ghproxy.net/https://github.com/{owner}/{repo}/archive/refs/heads/{branch}.tar.gz",
 			addArchiveSource: "Add archive source",
-			gitSourcesDesc: "URL template for cloning ({owner}/{repo} placeholders). This list IS the custom git-source list — the two built-ins are just defaults; click Add git source to swap in your own: Gitee = https://gitee.com/{owner}/{repo}.git; GitLab = https://gitlab.com/{owner}/{repo}.git; self-hosted Gitea = https://your-domain/{owner}/{repo}.git; mirror proxy = https://mirror/https://github.com/{owner}/{repo}.git; local bare repo = file:///D:/repos/{owner}/{repo}.git. Primary first, falls back on failure",
+			gitSourcesDesc: "URL template for cloning ({owner}/{repo} placeholders). This list IS the custom git-source list — the two built-ins are just defaults; click Add git source to swap in your own: Gitee = https://gitee.com/{owner}/{repo}.git; GitLab = https://gitlab.com/{owner}/{repo}.git; self-hosted Gitea = https://your-domain/{owner}/{repo}.git; mirror proxy = https://mirror/https://github.com/{owner}/{repo}.git; local bare repo = file:///C:/repos/{owner}/{repo}.git. Primary first, falls back on failure",
 			addGitSource: "Add Git source",
 			gitUrlPlaceholder: "e.g. https://gitee.com/{owner}/{repo}.git",
 			gitSourceBtn: "Git sources",
@@ -4038,6 +4060,7 @@ window.__ModuleLoader__.load({
 			const gatePendingCount = gateReady ? (state.data.compatPending?.pending ?? []).length : 0;
 			// 门控明细清单（用户 2026-09-24 要求：面板要显示"是哪些插件"，不只是数量）
 			const [gateShowAll, setGateShowAll] = react.useState(false);
+			const [compatNoticeClosed, setCompatNoticeClosed] = react.useState(false);
 			const gateRows = gateReady ? (state.data.gating ?? null) : null;
 			const gateTime = (ms) => (typeof ms === "number" && ms > 0 ? new Date(ms).toLocaleString() : "—");
 			// 「功能包 → 框架」按钮角标：升级进行中 ⟳ / 上次失败 ✕ / 有可用更新 ↑（优先级从高到低）
@@ -4045,9 +4068,29 @@ window.__ModuleLoader__.load({
 				&& frameworkStatus.status !== "idle" && frameworkStatus.status !== "done" && frameworkStatus.status !== "failed";
 			const fwBadge = fwRunning ? " ⟳" : (frameworkStatus?.status === "failed" ? " ✕" : (fwCheck?.target ? " ↑" : ""));
 			return el("section", { ref: sectionRef, className: styles.section, "aria-busy": state.status === "loading" },
-				state.status === "ready" && state.data.compat && !state.data.compat.supported
-					? el("p", { className: styles.message, "data-error": "true" }, state.data.compat.notice)
-					: null,
+				// 兼容提示（2026-09-28 加法）：以前是纯 <p>，关不掉。现在按服务端的 noticeVisible 显示
+				// （老服务端没有该字段时回落 !supported），并给一个手动关闭入口 —— 关闭只影响展示：
+				// 服务端记的是「这个框架版本我看过了」，版本一变会重新提示；supported 与门控语义一个字都不变。
+				state.status === "ready" && state.data.compat
+				  && (state.data.compat.noticeVisible === undefined
+				    ? !state.data.compat.supported
+				    : state.data.compat.noticeVisible === true)
+				  && !compatNoticeClosed
+				  ? el("p", { className: styles.message, "data-error": "true" },
+				      state.data.compat.notice,
+				      " ",
+				      el("button", {
+				        type: "button",
+				        style: { marginLeft: "8px", cursor: "pointer" },
+				        title: t("compatNoticeDismiss"),
+				        onClick: () => {
+				          // 失败不收起（关了却还在服务端显示会造成「点了没反应」的错觉）
+				          call("/plugin-console/compat-ack", { webAppVersion: state.data.compat?.webAppVersion })
+				            .then(() => setCompatNoticeClosed(true), () => {});
+				        },
+				      }, t("compatNoticeDismiss")),
+				    )
+				  : null,
 				state.status === "ready" && comps.length > 0 && details === null && repoInfo === null
 					? el("button", {
 						type: "button",
@@ -4393,6 +4436,49 @@ window.__ModuleLoader__.load({
 							);
 						},
 					}, "🧹 " + t("cleanResiduals")),
+      el("button", {
+        type: "button",
+        style: { position: "fixed", left: 12, bottom: 44, zIndex: 1000, opacity: 0.75 },
+        title: t("cleanFrameworkResiduals"),
+        onClick: () => {
+          // 2026-09-28 加法：框架残留清理（顶层旧版本目录 / framework-backups）。两步走：
+          // 先 dryRun 出报告 → window.confirm 让用户看清要动什么 → 才带 confirm:true 真执行。
+          // 服务端默认 dryRun，所以「误点一下」不会动任何文件。
+          const SCOPES = ["framework", "frameworkBackups", "pnpmEntities"];
+          setMessage(t("cleanFrameworkResiduals") + "…");
+          call("/plugin-console/clean-residuals", { scope: SCOPES }).then(
+            (report) => {
+              const fw = report && report.framework ? report.framework : null;
+              const bk = report && report.frameworkBackups ? report.frameworkBackups : null;
+              const pe = report && report.pnpmEntities ? report.pnpmEntities : null;
+              const stale = fw && Array.isArray(fw.planned) ? fw.planned.length : 0;
+              const pend = bk && Array.isArray(bk.plannedRemove) ? bk.plannedRemove : [];
+              const mb = Math.round(pend.reduce((s, it) => s + (it && Number.isFinite(it.sizeBytes) ? it.sizeBytes : 0), 0) / 1048576);
+              const entities = pe && Number.isFinite(pe.entityCount) ? pe.entityCount : 0;
+              const head = t("cleanFrameworkResiduals") + "：" + t("cfStale").replace("{n}", String(stale))
+                + "、" + t("cfBackups").replace("{n}", String(pend.length)).replace("{mb}", String(mb))
+                + (entities > 0 ? "；" + t("cfEntities").replace("{n}", String(entities)) : "");
+              if (stale === 0 && pend.length === 0) { setMessage(head + "；" + t("cfNothing")); return; }
+              if (!window.confirm(head + "\n" + t("cfConfirm"))) { setMessage(head + "；" + t("cfCancelled")); return; }
+              setMessage(t("cfRunning"));
+              call("/plugin-console/clean-residuals", { scope: SCOPES, confirm: true, keep: 1 }).then(
+                (done) => {
+                  const renamed = done && done.framework && Array.isArray(done.framework.renamed) ? done.framework.renamed.length : 0;
+                  const relinked = done && done.framework && Array.isArray(done.framework.relinked) ? done.framework.relinked.length : 0;
+                  const removed = done && done.frameworkBackups && Array.isArray(done.frameworkBackups.removed) ? done.frameworkBackups.removed.length : 0;
+                  const freed = done && done.frameworkBackups && Number.isFinite(done.frameworkBackups.freedBytes) ? Math.round(done.frameworkBackups.freedBytes / 1048576) : 0;
+                  const failed = (done && done.framework && Array.isArray(done.framework.failed) ? done.framework.failed.length : 0)
+                    + (done && done.frameworkBackups && Array.isArray(done.frameworkBackups.failed) ? done.frameworkBackups.failed.length : 0);
+                  setMessage(t("cfDone").replace("{renamed}", String(renamed)).replace("{linked}", String(relinked)).replace("{removed}", String(removed)).replace("{mb}", String(freed))
+                    + (failed > 0 ? "；" + t("cfFailed").replace("{n}", String(failed)) : ""));
+                },
+                (error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+              );
+            },
+            (error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+          );
+        },
+      }, "🧰 " + t("cleanFrameworkResiduals")),
 				fwShowCard
 					? el("div", { className: styles.detail },
 						el("div", { className: styles.rowTop },

package/lib/index.js

@@ -1,141 +1,141 @@
-/**
- * @deepseek-ai/dsh-plugin-console — 插件控制台宿主端。
- *
- * 提供环回 HTTP 路由（前缀 /plugin-console）：
- *   GET  /plugin-console/state    当前插件清单 + 用户补丁层状态
- *   POST /plugin-console/toggle   一键启用/停用插件（写 cordis.patch.yml，HMR 生效）
- *   POST /plugin-console/search   GitHub 仓库搜索（dsh-plugin 相关）
- *   POST /plugin-console/repo     读取仓库的 package.json，判断是否可安装
- *   POST /plugin-console/install  安装 npm 包（或 git 仓库）并追加启用条目
- *
- * 插件开关的机制：用户补丁层 cordis.patch.yml 是逐键覆盖（id-targeted patch），
- * 追加 `- id: X` + `disabled: true` 即可停用任意行（含 bundle 行与用户 insert 行），
- * 移除该块即恢复；HMR 监视器会自动重组合，无需重启。
- */
-import { readFile, writeFile } from 'node:fs/promises'
-import { readFileSync, writeFileSync, existsSync, statSync, rmSync, readdirSync, mkdirSync, copyFileSync, realpathSync } from 'node:fs'
-import { execFile, spawn } from 'node:child_process'
-import { promisify } from 'node:util'
-import { dirname, join, basename, sep } from 'node:path'
-import { tmpdir, homedir } from 'node:os'
-import { fileURLToPath, pathToFileURL } from 'node:url'
-import { createRequire } from 'node:module'
-import { request as httpsRequest } from 'node:https'
-import { aiJobsFile, componentsFile, dshHome, entryPkgMeta, findPatchPath, marketIndexCacheFile, packageNameOf, pluginRoot, profileDirOf, repoLandConfFile, resolvePackageJson, rowIdOf } from './server/infra/paths.js'
-import { isFrameworkVersionNewer, parseFrameworkVersion, semverRangeMatch, semverRangeMatchLoose } from './server/infra/semver.js'
-import { GITHUB_API, curlJson, fetchJsonUrl, githubJson, postJsonUrl, rawTextWithFallback } from './server/infra/http.js'
-import { cleanupStalePackageDir, copyTree, queuedWrite, startTrashCleanup, trashScanRoots } from './server/infra/fsx.js'
-import { execFileAsync, gitEnv, processAlive } from './server/infra/exec.js'
-import { escapeRegExp, maskUrl } from './server/infra/mask.js'
-import { isAllowedWriteOrigin, isLoopback, readBody, sendError, sendJson } from './server/infra/httpd.js'
-import { DEFAULT_SOURCES, consumeGiteeOAuthState, createGiteeOAuthState, gitCloneUrls, giteeStatusView, isAllowedGitSourceUrl, isAllowedSourceUrl, maskSources, orderedRegistries, readGiteeConfig, readSources, writeSources } from './server/domain/sources.js'
-import { CORE_PATCH_ROW_IDS, appendInsert, disableEntry, enableEntry, healPatchSafety, readPatchState, removeDisableBlock, removeInsertRow, sanitizePatchText, syncNameFromNote } from './server/domain/patch.js'
-import { enrichItems, fetchRepoPackage, fetchSubpackageNames, githubRepoInfo, normalizePlatformItems, readPluginDetails, subpackageCandidates } from './server/domain/market.js'
-import { SKILL_TOPICS, detectSkillRepo, fetchSkillMeta, listInstalledSkills, runSkillInstallJob, setSkillEnabled } from './server/domain/skills.js'
-import { autostartComponents, compFind, compStart, compStatus, compStop, compUiUrl, compUpsert, findComponents } from './server/domain/components.js'
-import { getReposDir, gitCloneRepo, listLandedRepos, setReposDir } from './server/domain/repoland.js'
-import { DEFAULT_BUNDLES, addBundleToManifest, backfillMissingDeps, curlManualInstall, detectBundleOnly, ensureBundlePatchIntegrity, githubReleaseInstall, installJobView, pnpmInstall, raceInstallChannels, readBundlePatchRefNames, readExtraBundleOwners, readGithubAuth, syncAggregateSubpackageVersions } from './server/domain/install.js'
-import { findPresetDirs, readGitmodules } from './server/domain/suite.js'
-import { FIBER_PHASE, SUPPORTED_WEB_APP_PATTERN, checkPluginFrameworkCompat, frameworkCheckPromptText, isFrameworkOwnedPackage, probePluginImport, readCompatGate, readCompatPending, writeCompatGate, writeCompatPending } from './server/domain/compat.js'
-import { logQuarantineMergeError, markPendingAdopted, mergeQuarantineRecord, planQuarantine, readQuarantineRecord, reconcileCompatPending } from './server/domain/quarantine.js'
-import { FRAMEWORK_BACKUP_ROOT, FRAMEWORK_STATE_FILE, applyFrameworkTolerancePatchOnce, checkpointFrameworkTree, cleanupStaleFwTasks, relaunchPrelude, resolveDshBin, resolveFrameworkRootNodeModules } from './server/domain/framework.js'
-import { migrateAgentConfigsForUpgrade } from './server/domain/presets.js'
-import { GITEE_AUTH_URL, GITEE_TOKEN_URL } from './server/domain/sources.js'
-import { aiEmpowerPresetFor, aiJobs, builtinPlanFor, isAllowedWritePath, isSafeRunCmd, loadAiJobs, parsePlanJson, resolvePlaceholders, resolvePythonPath, saveAiJobs } from './server/domain/ai.js'
-import { jobLog, waitHealth } from './server/domain/jobs.js'
-import { fwCheckCache, installJobs, marketIndexCache, nextAiJobSeq, nextInstallJobSeq, patchHealAt, patchHealReport, setFwCheckCache, setMarketIndexCache, setPatchHealAt, setPatchHealReport } from './server/state.js'
-import { routeStateGet, routeDetails } from './server/routes/state.js'
-import {routeFrameworkUpgradeStatusGet, routeFrameworkRelaunch, routeFrameworkCheck, routeCompatGate, routeCheckUpdate, routeFrameworkRollback, routeRestart } from './server/routes/framework.js'
-import { routeFrameworkUpgrade } from './server/routes/framework-upgrade.js'
-import { routeToggle, routeUninstall, routeAdaptUnlock, routeAdaptUnlockAll, routeCleanResiduals, routeSelfUpdate } from './server/routes/plugins.js'
-import { routeSearch, routeEnrich, routeRepo, routeSubpackages, routeMarketIndex } from './server/routes/market.js'
-import { routeAiConsent, routeAiEmpowerPlan, routeAiEmpowerStatus, routeAiEmpowerList, routeAiEmpowerRun, routeAiEmpowerCancel } from './server/routes/ai.js'
-import { routeComponents, routeRepoClone, routeRepoList, routeRepoLandConfig, routeRepoRemove, routeRepoOpen, routeComponentAutostart, routeComponentStart, routeComponentStop, routeComponentStatus } from './server/routes/components.js'
-import { routeSourcesGet, routeGiteeOauthUrlGet, routeGiteeOauthCallbackGet, routeRegistryScan, routeSources } from './server/routes/sources.js'
-import { routeSkillsInstalledGet, routeSkillRemove, routeSkillToggle } from './server/routes/skills.js'
-import { routeInstall, routeInstallStatus } from './server/routes/install.js'
-import { detectAdoptablePending, detectCompat, frameworkCompatReportFor, maybeAutoAdaptCompat, rowIdModuleMap } from './server/domain/compat.js'
-import { backupProfileSnapshot, currentFrameworkVersion, detectFrameworkUpgrade, preflightDisableIncompatible } from './server/domain/framework.js'
-import { listEntries, webPort } from './server/domain/runtime.js'
-import { isProtectedModule } from './server/domain/runtime.js'
-import { aiEmpowerExecute, aiEmpowerPlan } from './server/domain/ai-run.js'
-import { runInstallJob } from './server/domain/install-job.js'
-import { runSuiteInstallJob } from './server/domain/suite.js'
-import { pnpmRemove, readExtraBundleRows } from './server/domain/install-job.js'
-import { DEFAULT_SEARCH } from './server/domain/sources.js'
-import { ROUTE_PREFIX, handle } from './server/routes/index.js'
-
-/** Cordis 插件元信息。 */
-export const name = '@noob-stupid/dsh-plugin-console'
-export const inject = ['webServer', 'loader']
-
-/**
- * 后台安装任务注册表：请求立即返回，安装继续在服务端执行；
- * 面板通过 /install-status 轮询进度（stage + status），离开面板不中断。
- */
-/** 静态插件索引内存缓存（/market-index 用）。 */
-
-// ============================================================
-// AI 赋能：文档驱动的通用组件部署（读文档 → 出计划 → 确认 → 执行 → 组件控制）
-// ============================================================
-
-/** 应用插件：注册 /plugin-console 路由。 */
-export function apply(ctx) {
-  // 恢复 AI 赋能任务（restart 后 running 置失败，plan-ready/结果保留）
-  loadAiJobs()
-  // 升级脚本的「启动失败隔离」记录并入适配门清单（让用户看到谁被自动关了）
-  // v0.3.44：这里的 catch 不再静默 —— 2026-09-11 那次隔离记录（20 行）就是这样凭空消失的：
-  // 合并函数在中途抛错、catch 吞掉，界面只剩一个没有解释的【停用】。失败必须留痕。
-  try { mergeQuarantineRecord(ctx) } catch (error) { logQuarantineMergeError(error) }
-  // v0.3.45：清单与现实对账 —— 补 moduleName（否则「全家桶一键启用已适配」永远匹配不到），
-  // 以及把「已经启用、却还挂着 pending」的记录转成已适配（用户实测：启用后重启又变【待适配】）
-  try {
-    const fixed = reconcileCompatPending(ctx)
-    if (fixed.backfilled > 0 || fixed.adopted > 0) {
-      try { writeFileSync(join(dshHome(), 'plugin-console', 'fw-merge-error.log'), `${new Date().toISOString()} 清单对账：补 moduleName ${fixed.backfilled} 行，已启用转已适配 ${fixed.adopted} 行\n`, { flag: 'a' }) } catch {}
-    }
-  } catch (error) { logQuarantineMergeError(error) }
-  // 启动时清掉上次升级/回滚/重启留下的僵尸计划任务（脚本被强杀时来不及自删）+ 后台清掉 `.trash-*` 降级目录（2026-09-26 加法；覆盖 tmpdir / profile node_modules / skills / repos，即发即忘、绝不阻塞启动）
-  try { cleanupStaleFwTasks(); startTrashCleanup({ roots: trashScanRoots({ profileDir: profileDirOf(ctx) ?? '', extra: [join(dshHome(), 'skills'), getReposDir()] }) }) } catch {}
-  // DSH 启动时自动拉起标记了「自启动」的服务器组件（幂等，不阻塞启动）
-  autostartComponents().catch(() => {})
-  ctx.effect(() => {
-    const route = {
-      kind: 'prefix',
-      path: ROUTE_PREFIX,
-      handler: async (req, res) => {
-        if (!isLoopback(req.socket?.remoteAddress ?? '')) {
-          sendError(res, 403, '仅允许本机访问')
-          return
-        }
-        const port = webPort(ctx)
-        const host = typeof req.headers?.host === 'string' ? req.headers.host : ''
-        if (![`127.0.0.1:${port}`, `localhost:${port}`, `[::1]:${port}`].includes(host)) {
-          sendError(res, 403, 'Host 校验失败（仅允许本机访问）')
-          return
-        }
-        // 安全护栏（issue #9）：写路由必须是本机同源请求，防止恶意网页跨站驱动敏感操作。
-        const method = req.method ?? 'GET'
-        if (method !== 'GET' && method !== 'HEAD' && !isAllowedWriteOrigin(req, port)) {
-          sendError(res, 403, '跨站请求被拒绝（Origin/Sec-Fetch-Site 校验）')
-          return
-        }
-        try {
-          await handle(ctx, req, res)
-        } catch (error) {
-          sendError(res, 500, error instanceof Error ? error.message : String(error))
-        }
-      },
-    }
-    return ctx.webServer.register(route)
-  }, 'plugin-console: routes')
-}
-
-// ── 路由表（分层 Step 8b：表驱动分发，替代逐条 if 分支）─────────────────────────
-// 方法限定且位于 405 守卫之前的分支（只读接口）
-
-/** 路由处理器需要的宿主服务（仍住在 index.js 的 ctx 相关函数）—— ports 注入点（方案 §四）。
- *  用函数而不是模块级常量：这些是函数声明（会提升），但用惰性函数可以彻底避免初始化顺序问题。 */
-
-/** 框架版本检查缓存（功能包 → 框架 面板用；5 分钟 TTL，避免每次打开面板都打 registry）。 */
-
+/**
+ * @deepseek-ai/dsh-plugin-console — 插件控制台宿主端。
+ *
+ * 提供环回 HTTP 路由（前缀 /plugin-console）：
+ *   GET  /plugin-console/state    当前插件清单 + 用户补丁层状态
+ *   POST /plugin-console/toggle   一键启用/停用插件（写 cordis.patch.yml，HMR 生效）
+ *   POST /plugin-console/search   GitHub 仓库搜索（dsh-plugin 相关）
+ *   POST /plugin-console/repo     读取仓库的 package.json，判断是否可安装
+ *   POST /plugin-console/install  安装 npm 包（或 git 仓库）并追加启用条目
+ *
+ * 插件开关的机制：用户补丁层 cordis.patch.yml 是逐键覆盖（id-targeted patch），
+ * 追加 `- id: X` + `disabled: true` 即可停用任意行（含 bundle 行与用户 insert 行），
+ * 移除该块即恢复；HMR 监视器会自动重组合，无需重启。
+ */
+import { readFile, writeFile } from 'node:fs/promises'
+import { readFileSync, writeFileSync, existsSync, statSync, rmSync, readdirSync, mkdirSync, copyFileSync, realpathSync } from 'node:fs'
+import { execFile, spawn } from 'node:child_process'
+import { promisify } from 'node:util'
+import { dirname, join, basename, sep } from 'node:path'
+import { tmpdir, homedir } from 'node:os'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+import { createRequire } from 'node:module'
+import { request as httpsRequest } from 'node:https'
+import { aiJobsFile, componentsFile, dshHome, entryPkgMeta, findPatchPath, marketIndexCacheFile, packageNameOf, pluginRoot, profileDirOf, repoLandConfFile, resolvePackageJson, rowIdOf } from './server/infra/paths.js'
+import { isFrameworkVersionNewer, parseFrameworkVersion, semverRangeMatch, semverRangeMatchLoose } from './server/infra/semver.js'
+import { GITHUB_API, curlJson, fetchJsonUrl, githubJson, postJsonUrl, rawTextWithFallback } from './server/infra/http.js'
+import { cleanupStalePackageDir, copyTree, queuedWrite, startTrashCleanup, trashScanRoots } from './server/infra/fsx.js'
+import { execFileAsync, gitEnv, processAlive } from './server/infra/exec.js'
+import { escapeRegExp, maskUrl } from './server/infra/mask.js'
+import { isAllowedWriteOrigin, isLoopback, readBody, sendError, sendJson } from './server/infra/httpd.js'
+import { DEFAULT_SOURCES, consumeGiteeOAuthState, createGiteeOAuthState, gitCloneUrls, giteeStatusView, isAllowedGitSourceUrl, isAllowedSourceUrl, maskSources, orderedRegistries, readGiteeConfig, readSources, writeSources } from './server/domain/sources.js'
+import { CORE_PATCH_ROW_IDS, appendInsert, disableEntry, enableEntry, healPatchSafety, readPatchState, removeDisableBlock, removeInsertRow, sanitizePatchText, syncNameFromNote } from './server/domain/patch.js'
+import { enrichItems, fetchRepoPackage, fetchSubpackageNames, githubRepoInfo, normalizePlatformItems, readPluginDetails, subpackageCandidates } from './server/domain/market.js'
+import { SKILL_TOPICS, detectSkillRepo, fetchSkillMeta, listInstalledSkills, runSkillInstallJob, setSkillEnabled } from './server/domain/skills.js'
+import { autostartComponents, compFind, compStart, compStatus, compStop, compUiUrl, compUpsert, findComponents } from './server/domain/components.js'
+import { getReposDir, gitCloneRepo, listLandedRepos, setReposDir } from './server/domain/repoland.js'
+import { DEFAULT_BUNDLES, addBundleToManifest, backfillMissingDeps, curlManualInstall, detectBundleOnly, ensureBundlePatchIntegrity, githubReleaseInstall, installJobView, pnpmInstall, raceInstallChannels, readBundlePatchRefNames, readExtraBundleOwners, readGithubAuth, syncAggregateSubpackageVersions } from './server/domain/install.js'
+import { findPresetDirs, readGitmodules } from './server/domain/suite.js'
+import { FIBER_PHASE, SUPPORTED_WEB_APP_PATTERN, checkPluginFrameworkCompat, frameworkCheckPromptText, isFrameworkOwnedPackage, probePluginImport, readCompatGate, readCompatPending, writeCompatGate, writeCompatPending } from './server/domain/compat.js'
+import { logQuarantineMergeError, markPendingAdopted, mergeQuarantineRecord, planQuarantine, readQuarantineRecord, reconcileCompatPending } from './server/domain/quarantine.js'
+import { FRAMEWORK_BACKUP_ROOT, FRAMEWORK_STATE_FILE, applyFrameworkTolerancePatchOnce, checkpointFrameworkTree, cleanupStaleFwTasks, relaunchPrelude, resolveDshBin, resolveFrameworkRootNodeModules } from './server/domain/framework.js'
+import { migrateAgentConfigsForUpgrade } from './server/domain/presets.js'
+import { GITEE_AUTH_URL, GITEE_TOKEN_URL } from './server/domain/sources.js'
+import { aiEmpowerPresetFor, aiJobs, builtinPlanFor, isAllowedWritePath, isSafeRunCmd, loadAiJobs, parsePlanJson, resolvePlaceholders, resolvePythonPath, saveAiJobs } from './server/domain/ai.js'
+import { jobLog, waitHealth } from './server/domain/jobs.js'
+import { fwCheckCache, installJobs, marketIndexCache, nextAiJobSeq, nextInstallJobSeq, patchHealAt, patchHealReport, setFwCheckCache, setMarketIndexCache, setPatchHealAt, setPatchHealReport } from './server/state.js'
+import { routeStateGet, routeDetails } from './server/routes/state.js'
+import {routeFrameworkUpgradeStatusGet, routeFrameworkRelaunch, routeFrameworkCheck, routeCompatGate, routeCheckUpdate, routeFrameworkRollback, routeRestart } from './server/routes/framework.js'
+import { routeFrameworkUpgrade } from './server/routes/framework-upgrade.js'
+import { routeToggle, routeUninstall, routeAdaptUnlock, routeAdaptUnlockAll, routeCleanResiduals, routeSelfUpdate } from './server/routes/plugins.js'
+import { routeSearch, routeEnrich, routeRepo, routeSubpackages, routeMarketIndex } from './server/routes/market.js'
+import { routeAiConsent, routeAiEmpowerPlan, routeAiEmpowerStatus, routeAiEmpowerList, routeAiEmpowerRun, routeAiEmpowerCancel } from './server/routes/ai.js'
+import { routeComponents, routeRepoClone, routeRepoList, routeRepoLandConfig, routeRepoRemove, routeRepoOpen, routeComponentAutostart, routeComponentStart, routeComponentStop, routeComponentStatus } from './server/routes/components.js'
+import { routeSourcesGet, routeGiteeOauthUrlGet, routeGiteeOauthCallbackGet, routeRegistryScan, routeSources } from './server/routes/sources.js'
+import { routeSkillsInstalledGet, routeSkillRemove, routeSkillToggle } from './server/routes/skills.js'
+import { routeInstall, routeInstallStatus } from './server/routes/install.js'
+import { detectAdoptablePending, detectCompat, frameworkCompatReportFor, maybeAutoAdaptCompat, rowIdModuleMap } from './server/domain/compat.js'
+import { backupProfileSnapshot, currentFrameworkVersion, detectFrameworkUpgrade, preflightDisableIncompatible } from './server/domain/framework.js'
+import { listEntries, webPort } from './server/domain/runtime.js'
+import { isProtectedModule } from './server/domain/runtime.js'
+import { aiEmpowerExecute, aiEmpowerPlan } from './server/domain/ai-run.js'
+import { runInstallJob } from './server/domain/install-job.js'
+import { runSuiteInstallJob } from './server/domain/suite.js'
+import { pnpmRemove, readExtraBundleRows } from './server/domain/install-job.js'
+import { DEFAULT_SEARCH } from './server/domain/sources.js'
+import { ROUTE_PREFIX, handle } from './server/routes/index.js'
+
+/** Cordis 插件元信息。 */
+export const name = '@noob-stupid/dsh-plugin-console'
+export const inject = ['webServer', 'loader']
+
+/**
+ * 后台安装任务注册表：请求立即返回，安装继续在服务端执行；
+ * 面板通过 /install-status 轮询进度（stage + status），离开面板不中断。
+ */
+/** 静态插件索引内存缓存（/market-index 用）。 */
+
+// ============================================================
+// AI 赋能：文档驱动的通用组件部署（读文档 → 出计划 → 确认 → 执行 → 组件控制）
+// ============================================================
+
+/** 应用插件：注册 /plugin-console 路由。 */
+export function apply(ctx) {
+  // 恢复 AI 赋能任务（restart 后 running 置失败，plan-ready/结果保留）
+  loadAiJobs()
+  // 升级脚本的「启动失败隔离」记录并入适配门清单（让用户看到谁被自动关了）
+  // v0.3.44：这里的 catch 不再静默 —— 2026-09-11 那次隔离记录（20 行）就是这样凭空消失的：
+  // 合并函数在中途抛错、catch 吞掉，界面只剩一个没有解释的【停用】。失败必须留痕。
+  try { mergeQuarantineRecord(ctx) } catch (error) { logQuarantineMergeError(error) }
+  // v0.3.45：清单与现实对账 —— 补 moduleName（否则「全家桶一键启用已适配」永远匹配不到），
+  // 以及把「已经启用、却还挂着 pending」的记录转成已适配（用户实测：启用后重启又变【待适配】）
+  try {
+    const fixed = reconcileCompatPending(ctx)
+    if (fixed.backfilled > 0 || fixed.adopted > 0) {
+      try { writeFileSync(join(dshHome(), 'plugin-console', 'fw-merge-error.log'), `${new Date().toISOString()} 清单对账：补 moduleName ${fixed.backfilled} 行，已启用转已适配 ${fixed.adopted} 行\n`, { flag: 'a' }) } catch {}
+    }
+  } catch (error) { logQuarantineMergeError(error) }
+  // 启动时清掉上次升级/回滚/重启留下的僵尸计划任务（脚本被强杀时来不及自删）+ 后台清掉 `.trash-*` 降级目录（2026-09-26 加法；覆盖 tmpdir / profile node_modules / skills / repos，即发即忘、绝不阻塞启动）
+  try { cleanupStaleFwTasks(); startTrashCleanup({ roots: trashScanRoots({ profileDir: profileDirOf(ctx) ?? '', extra: [join(dshHome(), 'skills'), getReposDir()] }) }) } catch {}
+  // DSH 启动时自动拉起标记了「自启动」的服务器组件（幂等，不阻塞启动）
+  autostartComponents().catch(() => {})
+  ctx.effect(() => {
+    const route = {
+      kind: 'prefix',
+      path: ROUTE_PREFIX,
+      handler: async (req, res) => {
+        if (!isLoopback(req.socket?.remoteAddress ?? '')) {
+          sendError(res, 403, '仅允许本机访问')
+          return
+        }
+        const port = webPort(ctx)
+        const host = typeof req.headers?.host === 'string' ? req.headers.host : ''
+        if (![`127.0.0.1:${port}`, `localhost:${port}`, `[::1]:${port}`].includes(host)) {
+          sendError(res, 403, 'Host 校验失败（仅允许本机访问）')
+          return
+        }
+        // 安全护栏（issue #9）：写路由必须是本机同源请求，防止恶意网页跨站驱动敏感操作。
+        const method = req.method ?? 'GET'
+        if (method !== 'GET' && method !== 'HEAD' && !isAllowedWriteOrigin(req, port)) {
+          sendError(res, 403, '跨站请求被拒绝（Origin/Sec-Fetch-Site 校验）')
+          return
+        }
+        try {
+          await handle(ctx, req, res)
+        } catch (error) {
+          sendError(res, 500, error instanceof Error ? error.message : String(error))
+        }
+      },
+    }
+    return ctx.webServer.register(route)
+  }, 'plugin-console: routes')
+}
+
+// ── 路由表（分层 Step 8b：表驱动分发，替代逐条 if 分支）─────────────────────────
+// 方法限定且位于 405 守卫之前的分支（只读接口）
+
+/** 路由处理器需要的宿主服务（仍住在 index.js 的 ctx 相关函数）—— ports 注入点（方案 §四）。
+ *  用函数而不是模块级常量：这些是函数声明（会提升），但用惰性函数可以彻底避免初始化顺序问题。 */
+
+/** 框架版本检查缓存（功能包 → 框架 面板用；5 分钟 TTL，避免每次打开面板都打 registry）。 */
+

package/lib/server/domain/ai-run.js

@@ -1,6 +1,6 @@
 // L1 · domain —— ai-run.js（AI 赋能的执行侧：规划 / 执行 / 修复 / 单步运行）。
 // 分层 Step 8c-2 从 lib/index.js 搬出；形参由 ctx 收窄为 ports，只搬移未改逻辑。
-// 分组见 D:\dsh\dsh-plugin-hub-plan\architecture.zh.md 三
+// 分层分组：L1 · domain（边界由 tests/test-architecture-guard.mjs 断言）
 
 import { writeFileSync, existsSync, statSync, rmSync, mkdirSync } from 'node:fs'
 import { readFile } from 'node:fs/promises'