@noob-stupid/dsh-plugin-console 0.5.32 → 0.5.34

package/README.md

@@ -4,12 +4,44 @@
 
 ---
 
-<img width="1170" height="609" alt="image" src="https://github.com/user-attachments/assets/b802d606-14ba-4151-9956-ff642ed12b0a" />
-
 # DSH Plugin Gating Hub (dsh-plugin-gating-hub)
 
 *Renamed from `dsh-plugin-hub` — old URLs redirect.*
 
+**Framework-upgrade safety and plugin-version gating for DSH.** A failed upgrade rolls back.
+A framework changed by **any** update channel is still guarded. A version the host cannot
+take is refused, not installed.
+
+**Install (npm, one line)**
+
+```sh
+dsh plugin --profile web add @noob-stupid/dsh-plugin-console
+```
+
+Then restart the dsh service → refresh the page → **Settings → Plugins → Plugin Console**.
+
+![Upgrade safety panel, expanded in place](docs/images/upgrade-safety-panel.png)
+
+**Three hard guarantees**
+
+- 🛡️ **Contract pre-check → rollback point → auto-rollback.** A data-driven **contract pre-check**
+  runs first (message contract / dependency API / config schema / removed API / loader contract);
+  then config backup + a full-tree **rollback point**. A failed install or relaunch **auto-rolls
+  the tree back**, a 「roll back to previous」 button restores the last version, and plugins the
+  new framework cannot load are **auto-disabled** — version check catches fake success, 15-min
+  timeout + stall detection.
+- 👁️ **Even when another update channel changes the framework.** An **environment fingerprint**
+  catches changes made by the official desktop updater or a manual `pnpm`: it auto-runs a
+  **read-only pre-flight**, and disables a row **only with hard evidence** (package unresolvable /
+  `file://` target gone / named in a boot-failure log). `@deepseek-ai/*` and **protected / core
+  rows are never auto-disabled**; each auto-disable writes a one-command recovery record.
+- 🔒 **Plugin install & upgrade gating.** Version/declaration gate (`dsh.engines.framework` /
+  `engines.dsh` / `@deepseek-ai/*` ranges, built-in zero-dependency semver), a **repo-size gate**
+  on source channels, and explicit handling of **non-registry sources** — a bare version is
+  written back only once the registry really resolves it, otherwise the package is materialized
+  as `link:`. Install scripts are never auto-authorized, and pnpm's supply-chain gate is never
+  bypassed.
+
 [![](https://img.shields.io/badge/powered_by-dsh-4D6BFE?style=flat-square&logo=deepseek&logoColor=white)](https://github.com/deepseek-ai/deepseek-harness)
 [![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 [![GitHub stars](https://img.shields.io/github/stars/Noob-stupid/dsh-plugin-gating-hub?style=flat-square&logo=github)](https://github.com/Noob-stupid/dsh-plugin-gating-hub/stargazers)
@@ -22,13 +54,11 @@
 [![GitHub Release](https://img.shields.io/github/v/release/Noob-stupid/dsh-plugin-gating-hub?style=flat-square)](https://github.com/Noob-stupid/dsh-plugin-gating-hub/releases)[![dsh.so security](https://www.dsh.so/badge/dsh-plugin-hub.svg)](https://www.dsh.so/artifact/dsh-plugin-hub)
 [![dsh.so install](https://www.dsh.so/badge/install/dsh-plugin-hub.svg)](https://www.dsh.so/artifact/dsh-plugin-hub)
 
-> **Framework upgrade safety & plugin version gating for DeepSeek Harness (DSH)**: one-click
-> framework upgrade with **auto-rollback on failure** → **one-click rollback to the previous
-> version** after an upgrade → plugins the new framework cannot load are **auto-disabled** →
-> the **plugin upgrade gate** refuses a version the host can't take.
-> A **built-in multi-source plugin market & index** (500+ plugins / 300+ skills, zero GitHub
-> API calls) rides on top as the **discovery layer** — and **every source is swappable**: install
-> source (incl. a private intranet registry), search source (URL template + headers), index source
+<img width="1170" height="609" alt="DSH Plugin Gating Hub" src="https://github.com/user-attachments/assets/b802d606-14ba-4151-9956-ff642ed12b0a" />
+
+> **Discovery layer on top**: a **built-in multi-source plugin market & index** (500+ plugins /
+> 300+ skills, zero GitHub API calls) — and **every source is swappable**: install source
+> (incl. a private intranet registry), search source (URL template + headers), index source
 > (self-hosted intranet index), Git source (incl. a local `file://` bare repo), so plugins can be
 > installed on an **intranet-only or fully offline** machine.
 
@@ -385,7 +415,7 @@ Verification matrix, raw logs and the one framework-side caveat (`0.1.2-rc.1` sh
 
 ---
 
-##帮助
+## Help & Ecosystem
 
 - **Panel missing**: restart dsh → refresh → Settings → Plugins → Plugin Console.
 - **Toggle does nothing**: infrastructure rows are "Protected" (by design); normal toggles

package/README.zh.md

@@ -4,15 +4,41 @@
 
 ---
 
-<img width="1170" height="609" alt="image" src="https://github.com/user-attachments/assets/b802d606-14ba-4151-9956-ff642ed12b0a" />
-
 # DSH 插件门控中心（dsh-plugin-gating-hub）
 
 *原名 `dsh-plugin-hub`，已改名；旧链接 301 跳转有效。*
 
-> **DSH 框架升级安全与插件升级门控**：一键框架升级（**失败自动回滚**）→ 升级后**一键回滚到
-> 上一版** → 新框架带不动的插件**自动禁用** → **插件升级门控**按版本/声明拒绝装不上的插件版本。
-> **内置多源插件市场与自定义索引**（500+ 插件 / 300+ 技能，零 GitHub API 调用）作为**发现层**——
+**DSH 的框架升级安全 + 插件升级门控。** 升级失败自动回滚。**别的通道**改了框架也照样守门。
+宿主带不动的插件版本直接拒绝，不会装上。
+
+**安装（npm，一行）**
+
+```sh
+dsh plugin --profile web add @noob-stupid/dsh-plugin-console
+```
+
+然后重启 dsh 服务 → 刷新页面 → **设置 → 插件 → 插件控制台**。
+
+![「升级安全」面板（就地展开）](docs/images/upgrade-safety-panel.png)
+
+**三条最硬的能力**
+
+- 🛡️ **升级前契约预检 → 回滚点 → 失败自动回滚。** 先跑数据化的**契约预检**（消息契约 /
+  依赖 API / 配置 schema / 被删 API / 装载器契约），再做配置备份 + 全树**回滚点**；
+  安装或拉起失败即**全树自动回滚**，升级成功后还有「回滚到上一版」按钮，
+  新框架带不动的插件**自动禁用** —— 版本校验防假成功，15 分钟硬超时 + 卡死检测。
+- 👁️ **别的更新通道改了框架，也守门。** **环境指纹**能发现官方桌面端更新器或手动 `pnpm`
+  造成的框架变更：变化即自动跑一次**只读预检**，且**有确证证据才**禁用某行
+  （包确证解析不到 / `file://` 目标确实不存在 / 启动失败日志点名）；`@deepseek-ai/*`（框架自带）
+  与**受保护 / 核心行永不禁用**，每次自动禁用都留一条可读的恢复命令。
+- 🔒 **插件安装与升级门控。** 版本/声明门控（`dsh.engines.framework` / `engines.dsh` /
+  `@deepseek-ai/*` 范围，内置零依赖 semver）+ 源码通道的**体积门禁** + **非 registry 来源**的
+  显式处理（只有在 registry 真能解析到该版本时才写回裸版本号，否则物化成 `link:`）；
+  安装脚本**绝不自动放行**，pnpm 的供应链闸**绝不绕过**。
+
+<img width="1170" height="609" alt="DSH 插件门控中心" src="https://github.com/user-attachments/assets/b802d606-14ba-4151-9956-ff642ed12b0a" />
+
+> **上层还带一个发现层**：**内置多源插件市场与自定义索引**（500+ 插件 / 300+ 技能，零 GitHub API 调用）——
 > 而且**每一条源都能换成你自己的**：安装源（含内网私有 registry）、搜索源（URL 模板 + 请求头）、
 > 索引源（内网自建索引）、Git 源（含 `file://` 本地裸仓库），**纯内网 / 断网也能装插件**。
 

package/lib/client.js

@@ -208,6 +208,9 @@ window.__ModuleLoader__.load({
 			riskyEnableConfirm: "确认强行启用",
 			riskyEnableCancel: "取消",
 			adoptableDetected: "检测到已适配：当前版本 {version} 已通过源码扫描，点「已适配，立即解锁」即可启用（不会自动开启）",
+			adoptableRescinded: "判据已更新：旧版扫描给出的「不兼容」结论已撤回（当前判据下源码扫描干净，版本不变也算）。点「已适配，立即解锁」即可启用（不会自动开启）",
+			compatRescindedTag: "判据已撤回·可解锁",
+			compatRescindedHint: "这条禁用是旧判据的误报：当前判据重算后不再判「不兼容」。点上方「已适配，立即解锁」即可启用；补丁由你确认后才改。",
 			compatGateLabel: "兼容门",
 			compatGateAutoDisable: "升级时自动禁用不适配插件",
 			compatGateAutoDetect: "打开时自动检测已适配（仅提示）",
@@ -256,7 +259,6 @@ window.__ModuleLoader__.load({
 			unloading: "卸载中",
 			toggledOn: "已请求启用",
 			toggledOff: "已请求停用",
-			failed: "操作失败",
 			view: "查看",
 			install: "添加并启用",
 			installing: "正在安装…",
@@ -527,7 +529,6 @@ window.__ModuleLoader__.load({
 			sourcesUpdated: "软件源已更新",
 			sourceOf: "源：",
 			searchSourceTitle: "点击切换搜索源（GitHub / Gitee / 自定义）",
-			recentFailures: "最近安装失败",
 			installedAt: "已安装",
 			checkUpdate: "检测更新",
 			checkingUpdate: "检测中…",
@@ -762,6 +763,9 @@ window.__ModuleLoader__.load({
 			riskyEnableConfirm: "Force enable",
 			riskyEnableCancel: "Cancel",
 			adoptableDetected: "Now compatible: version {version} passed the source scan — click \"Adapted - unlock now\" to enable it (never auto-enabled)",
+			adoptableRescinded: "Criteria updated: the older scan's \"incompatible\" verdict has been withdrawn (the current criteria find the source clean even without a version change). Click \"Adapted - unlock now\" to enable it (never auto-enabled)",
+			compatRescindedTag: "Verdict withdrawn - unlockable",
+			compatRescindedHint: "This disable came from a false positive of the older criteria: recomputing with the current criteria no longer says \"incompatible\". Click \"Adapted - unlock now\" above; your patch is only changed after you confirm.",
 			compatGateLabel: "Compat gate",
 			compatGateAutoDisable: "Auto-disable incompatible plugins on upgrade",
 			compatGateAutoDetect: "Detect adapted plugins on open (hint only)",
@@ -810,7 +814,6 @@ window.__ModuleLoader__.load({
 			unloading: "Unloading",
 			toggledOn: "Enable requested",
 			toggledOff: "Disable requested",
-			failed: "Operation failed",
 			view: "Inspect",
 			install: "Add & enable",
 			installing: "Installing…",
@@ -1077,7 +1080,6 @@ window.__ModuleLoader__.load({
 			sourcesUpdated: "Sources updated",
 			sourceOf: "Source: ",
 			searchSourceTitle: "Click to switch search source (GitHub / Gitee / custom)",
-			recentFailures: "Recent install failures",
 			installedAt: "Installed",
 			checkUpdate: "Check update",
 			checkingUpdate: "Checking…",
@@ -1229,6 +1231,21 @@ window.__ModuleLoader__.load({
 		function phaseLabel(phase, t) {
 			return phase === null ? t("unobserved") : t(PHASE_KEYS[phase]);
 		}
+		// 0.5.33 改错 ①-2：「已适配，立即解锁」按钮的门控判据 —— 必须与同一卡片正文用的是**同一个**判据。
+		// 现症：按钮只判 pendingCompat === true，不判 entry.adoptable → 正文按 adoptable 说"不适配"，
+		// 按钮按 pendingCompat 说"已适配"，自相矛盾；点下去 POST /adapt-unlock 必得 409（适配校验 fail），
+		// 补丁与行状态零变化 ⇒ 用户观感"点了没反应"。
+		// 现在只有**真的检测到已适配**（adoptable 是服务端 detectAdoptablePending 给出的对象）才出按钮；
+		// 其余情况不给这个承诺，原因照旧由正文那行（pendingCompatHint + checkNote）如实展示。
+		// 0.5.34 加法：`compatRescinded`（记录里的 fail 是旧判据的误报、已被当前判据撤回）同样给一键解锁入口 ——
+		// 这类行**没有版本变化**，旧判据要求"版本变化"会让用户被永久钉在「待适配」（真机 dshmarket 就是这样）。
+		// 判据本身没放宽：adoptable 仍是服务端算出来的对象（真 fail 的行根本拿不到它）。
+		function canAdaptUnlock(entry) {
+			return entry !== null && entry !== undefined
+				&& (entry.pendingCompat === true || entry.compatRescinded === true)
+				&& entry.adoptable !== null && entry.adoptable !== undefined
+				&& typeof entry.adoptable === "object";
+		}
 		async function call(path, body) {
 			const response = await fetch(path, body === undefined
 				? {}
@@ -1273,7 +1290,7 @@ window.__ModuleLoader__.load({
 			if (reload) setMessage(t("restarting"));
 			call("/plugin-console/restart", {}).then(
 				() => { if (reload) window.setTimeout(() => window.location.reload(), 12000); },
-				(error) => { setMessage(error !== null && typeof error.message === "string" && error.message !== "" ? error.message : t("failed")); },
+				(error) => { setMessage(error !== null && typeof error.message === "string" && error.message !== "" ? error.message : t("safetySwitchFailed")); },
 			);
 		}
 		/** 超时类错误附上可操作提示（网络黑洞期的最常见表现）。 */
@@ -1718,7 +1735,7 @@ window.__ModuleLoader__.load({
 				setFwClearing(true);
 				call("/plugin-console/framework-status-clear", {}).then(
 					() => { setFrameworkStatus({ status: "idle", message: null }); setFwStatusDismissed(true); setMessage(t("fwRecordCleared")); },
-					(error) => { setMessage(t("failed") + "：" + friendlyGithubError(error).message); },
+					(error) => { setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message); },
 				).finally(() => setFwClearing(false));
 			};
 			const fwStatusRefresh = () => {
@@ -1736,7 +1753,7 @@ window.__ModuleLoader__.load({
 				setFwCheckBusy(true);
 				call("/plugin-console/framework-check", refresh === true ? { refresh: true } : {}).then(
 					(data) => { setFwCheckBusy(false); if (data && data.ok === true) setFwCheck(data); },
-					(error) => { setFwCheckBusy(false); setMessage(t("failed") + "：" + friendlyGithubError(error).message); },
+					(error) => { setFwCheckBusy(false); setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message); },
 				);
 			};
 			// 升级前契约预检：先只读预检（抓目标版本会话格式契约 + 扫本地生产方），
@@ -1753,7 +1770,7 @@ window.__ModuleLoader__.load({
 						setFwPreflightBusy(false);
 						setFwPreflight((prev) => (apply === true ? { report: (prev && prev.report) ?? null, patch: data } : { report: data, patch: null }));
 					},
-					(error) => { setFwPreflightBusy(false); setMessage(t("failed") + "：" + friendlyGithubError(error).message); },
+					(error) => { setFwPreflightBusy(false); setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message); },
 				);
 			};
 			const fwShortPath = (p) => String(p ?? "").replace(/\\/gu, "/").split("/").slice(-3).join("/");
@@ -1766,7 +1783,7 @@ window.__ModuleLoader__.load({
 						setFrameworkStatus({ status: "rollback", message: t("frameworkRollbackDone").replace("{from}", String(data?.from ?? "?")) });
 						pollFrameworkStatus();
 					},
-					(error) => { setFrameworkUpgrading(false); setMessage(t("failed") + "：" + friendlyGithubError(error).message); },
+					(error) => { setFrameworkUpgrading(false); setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message); },
 				);
 			};
 			// 回滚按钮可用性：已经处在「回滚目标版本」时不再提供回滚（点了等于恢复现状）。
@@ -2013,10 +2030,10 @@ window.__ModuleLoader__.load({
 						setAiJob({ jobId: data.jobId, source, status: "running", stage: "planning" });
 						aiPoll(data.jobId);
 					}
-					else { setAiRunning(false); setMessage(t("failed") + "：" + (data?.error ?? "未知")); }
+					else { setAiRunning(false); setMessage(t("safetySwitchFailed") + "：" + (data?.error ?? "未知")); }
 				} catch (error) {
 					setAiRunning(false);
-					setMessage(t("failed") + "：" + friendlyGithubError(error).message);
+					setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message);
 				}
 			}
 			async function aiRun() {
@@ -2035,7 +2052,7 @@ window.__ModuleLoader__.load({
 					aiPoll(aiJob.jobId);
 				} catch (error) {
 					setAiRunning(false);
-					setMessage(t("failed") + "：" + friendlyGithubError(error).message);
+					setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message);
 				}
 			}
 			async function aiCancel() {
@@ -2056,7 +2073,7 @@ window.__ModuleLoader__.load({
 					const data = await call("/plugin-console/component/" + action, { id });
 					setMessage(t("compActionDone").replace("{action}", t(action === "start" ? "compStart" : "compStop")).replace("{name}", data?.name ?? id));
 				} catch (error) {
-					setMessage(t("failed") + "：" + error.message);
+					setMessage(t("safetySwitchFailed") + "：" + error.message);
 				}
 				setCompBusy(null);
 				refreshComps();
@@ -2069,7 +2086,7 @@ window.__ModuleLoader__.load({
 						setMessage(data.running ? (data.healthy ? t("compHealthy") : t("compUnhealthy")) + "：" + (data.name ?? id) : t("compStopped") + "：" + (data.name ?? id));
 					}
 				} catch (error) {
-					setMessage(t("failed") + "：" + error.message);
+					setMessage(t("safetySwitchFailed") + "：" + error.message);
 				}
 				setCompBusy(null);
 				refreshComps();
@@ -2088,7 +2105,7 @@ window.__ModuleLoader__.load({
 					await call("/plugin-console/component/autostart", { id, enabled: on });
 					setMessage((on ? "✔ 已开启自启动：" : "已关闭自启动：") + id);
 				} catch (error) {
-					setMessage(t("failed") + "：" + error.message);
+					setMessage(t("safetySwitchFailed") + "：" + error.message);
 				}
 				setCompBusy(null);
 				refreshComps();
@@ -2500,7 +2517,7 @@ window.__ModuleLoader__.load({
 							setRiskyConfirm({ entryId: entry.entryId, moduleName: details.moduleName ?? entry.moduleName ?? null, frameworkVersion: details.frameworkVersion ?? null, checkNote: details.checkNote ?? null });
 							return;
 						}
-						setMessage(t("failed") + "：" + friendlyGithubError(error).message);
+						setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message);
 					},
 				).finally(() => setBusy(null));
 			};
@@ -2513,7 +2530,7 @@ window.__ModuleLoader__.load({
 							: prev));
 						setMessage(t("compatGateSaved"));
 					},
-					(error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+					(error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
 				);
 			};
 			const levenshtein = (a, b) => {
@@ -2704,7 +2721,7 @@ window.__ModuleLoader__.load({
 						},
 						(error) => {
 							setLoadingMore(false);
-							setMessage(t("failed") + "：" + friendlyGithubError(error).message);
+							setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message);
 						},
 					);
 					return;
@@ -2728,7 +2745,7 @@ window.__ModuleLoader__.load({
 						},
 						(error) => {
 							setLoadingMore(false);
-							setMessage(t("failed") + "：" + friendlyGithubError(error).message);
+							setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message);
 						},
 					);
 					return;
@@ -2746,7 +2763,7 @@ window.__ModuleLoader__.load({
 						},
 						(error) => {
 							setLoadingMore(false);
-							setMessage(t("failed") + "：" + friendlyGithubError(error).message);
+							setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message);
 						},
 					);
 					return;
@@ -2784,7 +2801,7 @@ window.__ModuleLoader__.load({
 						},
 						(error) => {
 							setLoadingMore(false);
-							setMessage(t("failed") + "：" + friendlyGithubError(error).message);
+							setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message);
 						},
 					),
 				);
@@ -2953,7 +2970,7 @@ window.__ModuleLoader__.load({
 										window.setTimeout(() => window.location.reload(), 2500);
 									}
 								} else {
-									setMessage(t("failed") + "：" + (data.error ?? "未知错误") + diagMessage(data));
+									setMessage(t("safetySwitchFailed") + "：" + (data.error ?? "未知错误") + diagMessage(data));
 								}
 								setInstalling(null);
 								setTimeout(refresh, 1500);
@@ -2966,8 +2983,8 @@ window.__ModuleLoader__.load({
 			/** 本地 AI 兜底授权：调用模型 API 产生费用，必须用户明确同意。 */
 			const aiConsent = (jobId, approved) => {
 				call("/plugin-console/ai-consent", { jobId, approved }).then(
-					() => { if (!approved) setMessage(t("failed") + "：已取消本地 AI 兜底（不会调用模型 API）"); },
-					(error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+					() => { if (!approved) setMessage(t("safetySwitchFailed") + "：已取消本地 AI 兜底（不会调用模型 API）"); },
+					(error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
 				);
 			};
 			/** 安装进度文案：服务端 progress{channel,phase,index,total,name,done} → 一行人话。
@@ -3127,7 +3144,7 @@ window.__ModuleLoader__.load({
 				// clientId 打码回显（如 abc12345…）：用户未修改时原样传回服务端，服务端识别打码标记保留原配置
 				const idValue = giteeClientId.trim();
 				if (!idValue || !giteeClientSecret.trim()) {
-					setMessage(t("failed") + "：client_id / client_secret 不能为空");
+					setMessage(t("safetySwitchFailed") + "：client_id / client_secret 不能为空");
 					return;
 				}
 				if (idValue.endsWith("…")) {
@@ -3139,7 +3156,7 @@ window.__ModuleLoader__.load({
 			const startGiteeOauth = () => {
 				call("/plugin-console/gitee-oauth-url").then(
 					(data) => { if (data && data.url) window.open(data.url, "_blank", "noopener"); },
-					(error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+					(error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
 				);
 			};
 			const sourcesAction = (payload, done) => {
@@ -3151,12 +3168,12 @@ window.__ModuleLoader__.load({
 						setMessage(t("sourcesUpdated"));
 						if (done) done();
 					},
-					(error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+					(error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
 				).finally(() => setSourcesBusy(false));
 			};
 			const addSource = () => {
 				if (!isAllowedSourceUrl(sourceUrl.trim())) {
-					setMessage(t("failed") + "：" + t("invalidSourceUrl"));
+					setMessage(t("safetySwitchFailed") + "：" + t("invalidSourceUrl"));
 					return;
 				}
 				sourcesAction({ action: "add", name: sourceName.trim(), url: sourceUrl.trim() }, () => { setSourceName(""); setSourceUrl(""); });
@@ -3166,7 +3183,7 @@ window.__ModuleLoader__.load({
 				setRegScan({ status: "scanning" });
 				call("/plugin-console/registry-scan", {}).then(
 					(data) => setRegScan({ status: "ready", results: Array.isArray(data.results) ? data.results : [], scannedAt: typeof data.scannedAt === "number" ? data.scannedAt : null }),
-					(error) => { setRegScan(null); setMessage(t("failed") + "：" + friendlyGithubError(error).message); },
+					(error) => { setRegScan(null); setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message); },
 				);
 			};
 			// 扫描结果派生视图：每条源的命中结果 + 可达计数 + 最新版本来自哪个源
@@ -3190,7 +3207,7 @@ window.__ModuleLoader__.load({
 			};
 			const addIndexSource = () => {
 				if (!isAllowedSourceUrl(indexSourceUrl.trim())) {
-					setMessage(t("failed") + "：" + t("invalidSourceUrl"));
+					setMessage(t("safetySwitchFailed") + "：" + t("invalidSourceUrl"));
 					return;
 				}
 				sourcesAction({ action: "add-index", name: indexSourceName.trim(), url: indexSourceUrl.trim() }, () => { setIndexSourceName(""); setIndexSourceUrl(""); });
@@ -3213,11 +3230,11 @@ window.__ModuleLoader__.load({
 			const addGitSource = () => {
 				const tpl = gitSourceUrl.trim();
 				if (!tpl.includes("{owner}") || !tpl.includes("{repo}")) {
-					setMessage(t("failed") + "：" + t("gitUrlPlaceholder"));
+					setMessage(t("safetySwitchFailed") + "：" + t("gitUrlPlaceholder"));
 					return;
 				}
 				if (!isAllowedSourceUrl(tpl)) {
-					setMessage(t("failed") + "：" + t("invalidSourceUrl"));
+					setMessage(t("safetySwitchFailed") + "：" + t("invalidSourceUrl"));
 					return;
 				}
 				sourcesAction({ action: "add-git", name: gitSourceName.trim(), urlTemplate: tpl }, () => { setGitSourceName(""); setGitSourceUrl(""); });
@@ -3241,7 +3258,7 @@ window.__ModuleLoader__.load({
 			};
 			const addSearchSource = () => {
 				if (!isAllowedSourceUrl(searchSourceUrl.trim()) || !searchSourceUrl.includes("{q}")) {
-					setMessage(t("failed") + "：" + t("invalidSearchUrl"));
+					setMessage(t("safetySwitchFailed") + "：" + t("invalidSearchUrl"));
 					return;
 				}
 				// 解析请求头：每行 "名称: 值"
@@ -3281,7 +3298,7 @@ window.__ModuleLoader__.load({
 						}
 					},
 					(error) => {
-						setMessage(t("failed") + "：" + friendlyGithubError(error).message);
+						setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message);
 						setInstalling(null);
 					},
 				);
@@ -3353,7 +3370,7 @@ window.__ModuleLoader__.load({
 					},
 					(error) => {
 						setTogglingSkill(null);
-						setMessage(t("failed") + "：" + friendlyGithubError(error).message);
+						setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message);
 					},
 				);
 			};
@@ -3404,7 +3421,7 @@ window.__ModuleLoader__.load({
 					(error) => {
 						setFrameworkUpgrading(false);
 						setConfirmFrameworkUpgrade(false);
-						setMessage(t("failed") + "：" + friendlyGithubError(error).message);
+						setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message);
 					},
 				);
 			};
@@ -3416,7 +3433,7 @@ window.__ModuleLoader__.load({
 						setConfirmSkillDelete(null);
 						setInstalledSkills((prev) => prev.filter((s) => s.name !== name));
 					},
-					(error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+					(error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
 				);
 			};
 			const installedQueryNorm = installedQuery.trim().toLowerCase();
@@ -3470,7 +3487,7 @@ window.__ModuleLoader__.load({
 								el("p", { className: styles.status }, t("loadingDetails")));
 						} else if (details.status === "error") {
 							detailPanel = el("div", { className: styles.detail },
-								el("p", { className: styles.status, "data-error": "true" }, t("failed") + "：" + details.error.message));
+								el("p", { className: styles.status, "data-error": "true" }, t("safetySwitchFailed") + "：" + details.error.message));
 						} else {
 							const meta = details.data.meta;
 							const readme = details.data.readme;
@@ -3482,7 +3499,11 @@ window.__ModuleLoader__.load({
 								entry.pendingCompat === true
 									? el("p", { className: styles.status, "data-pending": entry.adoptable ? "false" : "true" },
 										entry.adoptable
-											? t("adoptableDetected").replace("{version}", String(entry.adoptable.version ?? "?")).replace("{prev}", String(compatInfo?.version ?? "?"))
+											? (entry.adoptable.basis === "verdict-rescinded"
+												// 0.5.34：旧判据的误报已被当前判据撤回（真机 dshmarket 现场）——如实说是"判据更新"，
+												// 不能说成"插件已适配"（那会让人以为作者发过新版）
+												? t("adoptableRescinded").replace("{version}", String(entry.adoptable.version ?? "?"))
+												: t("adoptableDetected").replace("{version}", String(entry.adoptable.version ?? "?")).replace("{prev}", String(compatInfo?.version ?? "?")))
 											: t("pendingCompatHint") + (compatInfo && compatInfo.checkNote ? "；已知校验：" + compatInfo.checkNote : ""))
 									: null,
 								meta !== null && meta.version ? el("div", { className: styles.rowTop },
@@ -3499,7 +3520,7 @@ window.__ModuleLoader__.load({
 										title: t("aiEmpowerTitle"),
 										onClick: () => openAiFor(String(entry.moduleName ?? entry.repo ?? "")),
 									}, t("aiEmpowerLabel")),
-									entry.pendingCompat === true
+									canAdaptUnlock(entry)
 										? el("button", {
 											type: "button",
 											className: styles.toggle,
@@ -3514,7 +3535,7 @@ window.__ModuleLoader__.load({
 														setMessage(t("adaptUnlockDone"));
 														window.setTimeout(() => window.location.reload(), 1200);
 													},
-													(error) => { setAdaptUnlocking(null); setMessage(t("failed") + "：" + friendlyGithubError(error).message); },
+													(error) => { setAdaptUnlocking(null); setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message); },
 												);
 											},
 										}, adaptUnlocking === entry.entryId ? t("loadingPhase") : t("adaptUnlockBtn"))
@@ -3586,15 +3607,23 @@ window.__ModuleLoader__.load({
 								phaseLabel(entry.fiberPhase, t)),
 							el("code", null, entry.entryId),
 						),
+						// 0.5.33 加法 ①-4：框架 peer 预检**否决**的本地复算结果（服务端 entries[].veto）。
+						// 框架只在内存里禁用、原因只打 stderr —— 这里把它补出来。复用**既有行**内的
+						// status 短句位（不新增常驻面板行），出路放悬浮提示（复用既有 title 位置）。
+						entry.veto && entry.veto.reason
+							? el("p", { className: styles.status, "data-pending": "true", title: entry.veto.hint ?? undefined },
+								entry.veto.reason)
+							: null,
 						el("div", { className: styles.rowTop, style: { justifyContent: "space-between" } },
 							el("div", { className: styles.rowTop },
 								el("button", {
 									type: "button",
 									className: styles.toggle,
 									disabled: !entry.toggleable || busy === entry.entryId || entry.pendingCompat === true,
-									title: entry.pendingCompat === true ? t("pendingCompatHint") : undefined,
+									// 0.5.34：结论已被当前判据撤回的行不再显示「待适配」（旧判据的误报不许当事实展示）
+									title: entry.pendingCompat === true ? (entry.compatRescinded === true ? t("compatRescindedHint") : t("pendingCompatHint")) : undefined,
 									onClick: () => toggle(entry, !entry.enabled),
-								}, busy === entry.entryId ? t("loadingPhase") : (entry.pendingCompat === true ? t("pendingCompatTag") : t(entry.enabled ? "off" : "on"))),
+								}, busy === entry.entryId ? t("loadingPhase") : (entry.pendingCompat === true ? (entry.compatRescinded === true ? t("compatRescindedTag") : t("pendingCompatTag")) : t(entry.enabled ? "off" : "on"))),
 								el("button", {
 									type: "button",
 									className: styles.toggle,
@@ -3623,7 +3652,7 @@ window.__ModuleLoader__.load({
 															setTimeout(refresh, 1500);
 														}
 													},
-													(error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+													(error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
 												).finally(() => setDeleteBusy(null));
 											} else {
 												setConfirmDeleteRowId(entry.entryId);
@@ -3679,7 +3708,7 @@ window.__ModuleLoader__.load({
 										setFamilyCheck((prev) => ({ ...prev, [root]: { latest: d?.latest ?? null, installed } }));
 										setMessage(t("familyUpdate") + "：" + root + " " + (d?.latest ?? "?") + (d?.migrate && d.migrate.compatible ? " → " + d.migrate.to + " v" + d.migrate.latest : "") + (d?.error ? "（" + d.error + "）" : ""));
 									},
-									(e) => setMessage(t("failed") + "：" + friendlyGithubError(e).message),
+									(e) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(e).message),
 								);
 							},
 						}, t("familyCheckUpdate")),
@@ -3706,7 +3735,7 @@ window.__ModuleLoader__.load({
 										setMessage(t("familyUnlockAllDone") + "：" + unlockedCount + " 行" + (Array.isArray(d?.kept) && d.kept.length > 0 ? "；保留 " + d.kept.length + " 行（未通过校验）" : ""));
 										window.setTimeout(() => window.location.reload(), 1500);
 									},
-									(e) => setMessage(t("failed") + "：" + friendlyGithubError(e).message),
+									(e) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(e).message),
 								);
 							},
 						}, t("familyUnlockAll")))
@@ -3765,7 +3794,7 @@ window.__ModuleLoader__.load({
 													: t("pendingRestartNote") + "：" + (data?.packageName ?? "") + (data?.uninstallError ? "（包卸载警告：" + data.uninstallError + "）" : ""));
 												refresh();
 											},
-											(error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+											(error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
 										).finally(() => setDeleteBusy(null));
 									} else {
 										setConfirmDeleteRowId(job.jobId);
@@ -4388,7 +4417,7 @@ window.__ModuleLoader__.load({
 									? el("div", { className: styles.rowTop },
 										el("p", { className: styles.message, style: { flex: 1, minWidth: 0, wordBreak: "break-all" } }, t("repoLandDone") + repoLandResult.path),
 										el("button", { type: "button", className: styles.toggle, onClick: repoLandOpenFolder }, t("repoLandOpenFolder")))
-									: el("p", { className: styles.message, "data-error": "true" }, t("failed") + "：" + (repoLandResult.error ?? "?")))
+									: el("p", { className: styles.message, "data-error": "true" }, t("safetySwitchFailed") + "：" + (repoLandResult.error ?? "?")))
 								: null,
 							el("strong", { className: styles.name }, t("repoLandList") + "（" + repoLanded.length + "）"),
 							repoLanded.length === 0
@@ -4415,7 +4444,7 @@ window.__ModuleLoader__.load({
 						onClick: () => {
 							call("/plugin-console/framework-relaunch", {}).then(
 								(data) => { if (data && data.ok === true) setMessage(t("relaunchDone")); },
-								(error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+								(error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
 							);
 						},
 					}, t("relaunchBtn"))
@@ -4432,7 +4461,7 @@ window.__ModuleLoader__.load({
 									const keptNote = keptCount > 0 ? "；保留在用插件 " + keptCount + " 个" : "";
 									if (data && data.ok === true) setMessage(t("cleanResiduals") + "：" + (data.count === 0 ? "无残余" : "已清理 " + data.count + " 项") + keptNote);
 								},
-								(error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+								(error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
 							);
 						},
 					}, "🧹 " + t("cleanResiduals")),
@@ -4472,10 +4501,10 @@ window.__ModuleLoader__.load({
                   setMessage(t("cfDone").replace("{renamed}", String(renamed)).replace("{linked}", String(relinked)).replace("{removed}", String(removed)).replace("{mb}", String(freed))
                     + (failed > 0 ? "；" + t("cfFailed").replace("{n}", String(failed)) : ""));
                 },
-                (error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+                (error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
               );
             },
-            (error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+            (error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
           );
         },
       }, "🧰 " + t("cleanFrameworkResiduals")),
@@ -4559,10 +4588,10 @@ const lockWarn = data.lockUpdated === false && typeof data.lockNote === "string"
 setMessage((data.note ?? "已更新") + (lockWarn === "" ? "" : "。" + lockWarn) + "，正在重启生效…");
 restartServiceViaServer(setMessage, { reload: false });
 } else {
-setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
+setMessage(t("safetySwitchFailed") + "：" + (data?.reason ?? "未知"));
 }
 },
-(error) => setMessage(t("failed") + "：" + friendlyGithubError(error).message),
+(error) => setMessage(t("safetySwitchFailed") + "：" + friendlyGithubError(error).message),
 );
 }
 }, "⬇ " + t("hubUpdateAvailable") + " v" + selfUpdate.latest) : null,
@@ -5146,7 +5175,7 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 								? el("p", { className: styles.status }, t("loading"))
 								: sourcesData.error !== undefined
 									? el("div", null,
-										el("p", { className: styles.status }, t("failed") + "：" + sourcesData.error),
+										el("p", { className: styles.status }, t("safetySwitchFailed") + "：" + sourcesData.error),
 										el("button", { type: "button", className: styles.toggle, onClick: () => { setSourcesData(null); openSources(); } }, t("retry")))
 									: el("div", { className: styles.accWrap },
 									accSection("registries", t("sourcesBtn"), [
@@ -5704,6 +5733,9 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 		// 仅测试用导出（tests/test-plugin-actions.mjs 的离线渲染断言：用假 React 真渲染这个组件，
 		// 断言"有/无 suggestedAction、执行中、成功、失败、中英切换"五种情形的 DOM 结构）。
 		exports.SuggestedActionBox = SuggestedActionBox;
+		// 仅测试用导出（tests/test-adapt-unlock-gate.mjs ①-2：断言「已适配，立即解锁」按钮的门控判据，
+		// 以及它必须与卡片正文用同一个判据）。
+		exports.canAdaptUnlock = canAdaptUnlock;
 		return module.exports;
 	}
 });