@noob-stupid/dsh-plugin-console 0.5.29 → 0.5.31

package/lib/server/routes/patch-audit.js

@@ -0,0 +1,59 @@
+// L2 · routes —— 补丁体检（GET /plugin-console/patch-audit；0.5.30 加法）
+//
+// 真机事故 2026-09-28：框架 0.2.0-rc.1 移除了 `@deepseek-ai/dsh-workflow-worker-thread`（引擎改为 ptc），
+// 而 profile 补丁三处行仍指向旧包 → 该行解析失败 → 隔离组里 `workflowEngine` 没有提供方 →
+// `dsh-tool-workflow` / `dsh-tool-ralph` 永久 waiting → 老会话 resume 失败
+//   （RemoteError: tool-workflow … waiting for workflowEngine）。
+//
+// 本路由把 domain/patch-composition-audit.js 的**纯判据**接到真实环境（真补丁文件 + 真 Node 解析器），
+// 并且**只报告、不代改**：改名建议来自「真机确证表」（KNOWN_RENAMES），猜不到的只列候选 ——
+// 绝不自动改写用户补丁（同 preset-rows.js 的判据文化：宁缺勿滥、不猜）。
+
+import { existsSync, readFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { auditPatchText } from '../domain/patch-composition-audit.js'
+import { frameworkBases } from '../infra/framework-root.js'
+import { sendError, sendJson } from '../infra/httpd.js'
+import { listAvailablePackages, makePackageResolver } from '../infra/package-resolve.js'
+import { baseDirOf, findPatchPath } from '../infra/paths.js'
+
+// 框架运行时根的取法已收敛到 infra/framework-root.js（0.5.30 改错：**同一份判据**必须同时供
+// 只读体检与本文件、以及 domain/patch.js 的自愈使用 —— 各写一份的话，框架下次再挪目录只会有一处被修好；
+// 2026-09-29 真机事故正是"自愈那处没跟上"）。
+
+/** profile 补丁 → 体检报告（只读；不写任何文件）。 */
+async function routePatchAuditGet(req, res, rc) {
+  const ctx = rc.ctx
+  let patchPath = null
+  try { patchPath = findPatchPath(ctx) } catch {}
+  if (patchPath === null || !existsSync(patchPath)) {
+    sendError(res, 404, '找不到 profile 补丁文件（cordis.patch.yml）—— 无法体检')
+    return
+  }
+  const profileDir = dirname(patchPath)
+  let baseDir = null
+  try { baseDir = baseDirOf(rc?.deps?.baseUrl ?? rc?.ctx?.baseUrl ?? 'file:///') } catch { baseDir = null }
+  const fwBases = frameworkBases(baseDir, profileDir)
+  const bases = [profileDir, ...fwBases]
+  const resolve = makePackageResolver(bases)
+  const candidates = listAvailablePackages([join(profileDir, 'node_modules'), ...fwBases])
+  const text = readFileSync(patchPath, 'utf8')
+  const report = auditPatchText(text, {
+    resolve,
+    existsFile: (url) => { try { return existsSync(fileURLToPath(url)) } catch { return false } },
+    candidates,
+  })
+  sendJson(res, 200, {
+    ok: true,
+    patchPath,
+    bases,
+    rows: report.rows,
+    blockerCount: report.blockers.length,
+    warningCount: report.warnings.length,
+    blockers: report.blockers,
+    warnings: report.warnings,
+  })
+}
+
+export { routePatchAuditGet }

package/lib/server/routes/plugins.js

@@ -5,6 +5,8 @@ import { readFileSync, existsSync, readdirSync, statSync } from 'node:fs'
 import { dirname, join } from 'node:path'
 import { createRequire } from 'node:module'
 import { checkPluginFrameworkCompat, probePluginImport, readCompatPending, rowIdModuleMap, writeCompatPending } from '../domain/compat.js'
+import { cleanFrameworkBackups, cleanFrameworkTopLevel, readRollbackReferenced, reportFrameworkEntities, resolveFrameworkLayout } from '../domain/framework-cleanup.js'
+import { currentFrameworkVersion } from '../domain/framework.js'
 import { pnpmRemove } from '../domain/install-job.js'
 import { curlManualInstall, readExtraBundleOwners } from '../domain/install.js'
 import { disableEntry, enableEntry, readPatchState, removeDisableBlock, removeInsertRow } from '../domain/patch.js'
@@ -17,7 +19,7 @@ import { orderedRegistries, readSources } from '../domain/sources.js'
 import { fetchJsonUrl } from '../infra/http.js'
 import { sendError, sendJson } from '../infra/httpd.js'
 import { removeDirVerifiedAsync } from '../infra/fsx.js'
-import { dshHome, findPatchPath, pluginRoot, resolvePackageJson, rowIdOf } from '../infra/paths.js'
+import { baseDirOf, dshHome, findPatchPath, pluginRoot, resolvePackageJson, rowIdOf } from '../infra/paths.js'
 import { installJobs } from '../state.js'
 
 /** 插件控制台自身的包名（撤销分支禁止删自己；@deepseek-ai/* 由通用护栏拒绝）。 */
@@ -504,7 +506,23 @@ async function routeCleanResiduals(req, res, rc) {
         }
       }
     } catch {}
-    const payload = { ok: failed.length === 0, removed, kept, failed, count: removed.length }
+    // ── scope 扩展（2026-09-28 加法）：framework / frameworkBackups / pnpmEntities ──
+  //    默认（不传 scope）与以前**完全一致**：只清插件侧残留。framework 两档必须显式 confirm:true，
+  //    否则只出报告（dryRun）—— 高风险动作不许"点一下全干"。
+  const scope = Array.isArray(body?.scope) ? body.scope.filter((s) => typeof s === 'string' && s !== '') : ['plugin']
+  const extra = {}
+  if (scope.some((s) => s !== 'plugin')) {
+    const dryRun = body?.confirm !== true
+    let runningVersion = null
+    try { runningVersion = currentFrameworkVersion(ctx) } catch {}
+    const layout = resolveFrameworkLayout({ baseDir: baseDirOf(ctx?.baseUrl ?? 'file:///'), profileDir })
+    if (scope.includes('framework')) extra.framework = await cleanFrameworkTopLevel({ topScopeDir: layout.topScopeDir, dshLinkPath: layout.dshLinkPath, runningVersion, relink: body?.relink !== false, dryRun, stamp: Date.now() })
+    if (scope.includes('frameworkBackups')) extra.frameworkBackups = await cleanFrameworkBackups({ backupsRoot: join(dshHome(), 'plugin-console', 'framework-backups'), referenced: readRollbackReferenced(), keep: Number.isFinite(body?.keep) ? body.keep : 1, dryRun })
+    if (scope.includes('pnpmEntities')) extra.pnpmEntities = reportFrameworkEntities({ pnpmDir: layout.pnpmDir, runningVersion })
+    extra.scope = scope
+    extra.dryRun = dryRun
+  }
+  const payload = { ok: failed.length === 0, removed, kept, failed, count: removed.length, ...extra }
     if (failed.length > 0) {
       const detail = failed.slice(0, 3).map((f) => `${f.name}（${f.error ?? '未知原因'}）`).join('；')
       const keptNote = kept.length > 0 ? `；已在用插件 ${kept.length} 个（保留不删）` : ''

package/lib/server/routes/preset-audit.js

@@ -0,0 +1,24 @@
+// L2 · routes —— 预设声明行体检（GET /plugin-console/preset-audit；0.5.30 加法）
+//
+// 真机背景：框架 0.1.7-rc.1 起预设靠 profile 补丁里的**声明行**发现；预设目录自身后来被改成 v10，
+// 而补丁里的行还指向 v1 → 老会话 resume 到错的模块（而且没有任何地方会报）。本路由**只读**出报告：
+// 陈旧（stale）/ 缺失（missing）/ 悬空（orphan）/ 目标不存在（targetMissing）。
+import { existsSync } from 'node:fs'
+import { join } from 'node:path'
+import { collectPresetAudit } from '../domain/preset-audit.js'
+import { sendError, sendJson } from '../infra/httpd.js'
+import { dshHome, findPatchPath } from '../infra/paths.js'
+
+async function routePresetAuditGet(req, res, rc) {
+  let patchPath = null
+  try { patchPath = findPatchPath(rc.ctx) } catch {}
+  if (patchPath === null || !existsSync(patchPath)) {
+    sendError(res, 404, '找不到 profile 补丁文件（cordis.patch.yml）—— 无法体检')
+    return
+  }
+  const presetsRoot = join(dshHome(), '.agent-presets')
+  const report = collectPresetAudit({ presetsRoot, patchPath })
+  sendJson(res, 200, { ok: true, patchPath, presetsRoot, ...report })
+}
+
+export { routePresetAuditGet }

package/lib/server/routes/state.js

@@ -28,7 +28,9 @@ async function routeStateGet(req, res, rc) {
   const readExtraBundleRows = rc.deps.readExtraBundleRows
     const patchPath = findPatchPath(ctx)
     const patch = await readPatchState(patchPath)
-    // 补丁安全自愈（核心行误禁用恢复 / 缺失模块行自动禁用）——每 2 分钟最多跑一次
+    // 补丁安全自愈（核心行误禁用恢复 / **确证**缺失模块行自动禁用）——每 2 分钟最多跑一次。
+    // 2026-09-30 改错：① 无真正需要修复的内容时零写盘（避免每 2 分钟无谓重写用户补丁）；
+    //   ② 写盘失败 / 解析不确定 / 框架自带包 → 如实回报（skipped / uncertain / writeError），不静默。
     let patchHeal = null
     try {
       if (patchHealAt === null || Date.now() - patchHealAt > 120000) {
@@ -38,7 +40,11 @@ async function routeStateGet(req, res, rc) {
         patchHeal = patchHealReport
       }
       if (patchHeal !== null) setPatchHealReport(patchHeal)
-    } catch {}
+    } catch (error) {
+      // 自愈本身抛异常也要如实进 patchHeal（过去这里 catch {} 静默吞掉，面板看不出任何异常）
+      patchHeal = { healed: [], autoDisabled: [], skipped: [], uncertain: [], healedAt: 0, written: false, writeError: String(error?.message ?? error) }
+      setPatchHealReport(patchHeal)
+    }
     const extraRows = await readExtraBundleRows(dirname(patchPath))
     const compatPending = readCompatPending()
     const compatPendingRows = new Set((compatPending?.pending ?? []).filter((p) => (p.status ?? 'pending') === 'pending').map((p) => p.rowId))
@@ -91,7 +97,7 @@ async function routeStateGet(req, res, rc) {
       const selfPkg = JSON.parse(readFileSync(join(pluginRoot(), 'package.json'), 'utf8'))
       selfVersion = typeof selfPkg.version === 'string' ? selfPkg.version : null
     } catch {}
-    sendJson(res, 200, { ok: true, entries, patchPath, compat, installJobs: jobs, recentFailures, pendingRestart, github: { loggedIn: auth.loggedIn, login: auth.login }, patch: { disables: patch.disables, forced: patch.forced, inserts: patch.inserts }, framework, patchHeal: patchHeal === null ? null : { healed: patchHeal.healed ?? [], autoDisabled: patchHeal.autoDisabled ?? [], healedAt: patchHeal.healedAt ?? 0 }, gating: gatingSummary(ctx, compatPending, entries), compatPending: compatPending === null ? null : { frameworkVersion: compatPending.frameworkVersion ?? null, upgradeFrom: compatPending.upgradeFrom ?? null, pending: (compatPending.pending ?? []).filter((p) => (p.status ?? 'pending') === 'pending').map((p) => ({ rowId: p.rowId, moduleName: p.moduleName, version: p.version ?? null, checkNote: p.checkNote ?? null, check: p.check ?? null, riskyApprovedAt: p.riskyApprovedAt ?? null, adoptable: adoptable.get(p.rowId) ?? null })) }, compatGate, rollback: rollbackRec, selfVersion, components: findComponents().map((c) => ({ id: c.id, name: c.name, kind: c.kind ?? 'server', pid: c.pid ?? null, port: c.port ?? null, healthUrl: c.healthUrl ?? null, uiUrl: compUiUrl(c), autoStart: c.autoStart === true })) })
+    sendJson(res, 200, { ok: true, entries, patchPath, compat, installJobs: jobs, recentFailures, pendingRestart, github: { loggedIn: auth.loggedIn, login: auth.login }, patch: { disables: patch.disables, forced: patch.forced, inserts: patch.inserts }, framework, patchHeal: patchHeal === null ? null : { healed: patchHeal.healed ?? [], autoDisabled: patchHeal.autoDisabled ?? [], healedAt: patchHeal.healedAt ?? 0, written: patchHeal.written === true, writeError: patchHeal.writeError ?? null, skippedFrameworkOwned: (patchHeal.skipped ?? []).map((s) => s.id ?? null), uncertain: (patchHeal.uncertain ?? []).map((u) => u.id ?? null) }, gating: gatingSummary(ctx, compatPending, entries), compatPending: compatPending === null ? null : { frameworkVersion: compatPending.frameworkVersion ?? null, upgradeFrom: compatPending.upgradeFrom ?? null, pending: (compatPending.pending ?? []).filter((p) => (p.status ?? 'pending') === 'pending').map((p) => ({ rowId: p.rowId, moduleName: p.moduleName, version: p.version ?? null, checkNote: p.checkNote ?? null, check: p.check ?? null, riskyApprovedAt: p.riskyApprovedAt ?? null, adoptable: adoptable.get(p.rowId) ?? null })) }, compatGate, rollback: rollbackRec, selfVersion, components: findComponents().map((c) => ({ id: c.id, name: c.name, kind: c.kind ?? 'server', pid: c.pid ?? null, port: c.port ?? null, healthUrl: c.healthUrl ?? null, uiUrl: compUiUrl(c), autoStart: c.autoStart === true })) })
     return
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noob-stupid/dsh-plugin-console",
-  "version": "0.5.29",
+  "version": "0.5.31",
   "description": "DSH 框架升级安全与插件升级门控：一键升级、失败自动回滚、升级后回滚上版、旧插件不适配自动禁用；内置多源插件市场为发现层，插件源全部可自定义，可指向公司内网私有源 / 私有索引 / 本地 Git 仓库，纯内网离线可用 | Framework upgrade safety & plugin version gating for DSH, with a customizable multi-source plugin market: point every source at internal mirrors or a local file:// repo for intranet-only, offline installs.",
   "repository": {
     "type": "git",