@noob-stupid/dsh-plugin-console 0.5.57 → 0.5.60

package/lib/client.js

@@ -122,6 +122,11 @@ window.__ModuleLoader__.load({
 			linksTitle: "开发式链接（link）：共 {n} 个，自足 {ready} 个 —— ✓ 自足 · · 缺东西（悬停看原因）",
 			healthSummary: "需要处理 {n} 类问题",
 			exemptGrantBtn: "授精确版本豁免",
+			healthDismissBtn: "知道了",
+			healthDismissTitle: "关掉这条提示。问题发生变化（类别或条数改变）时会重新出现，不会让你错过新问题",
+			linksToggleBtn: "开发式链接（link）明细",
+			linksToggleSummary: "开发式链接（link）：共 {n} 个，自足 {ready} 个",
+			linksToggleTitle: "展开/收起 link 明细（默认收起）",
 			devRootsTitle: "开发区根（只有这些根里的目录能钉住）",
 			devRootsNone: "（未登记）",
 			devRootAddPlaceholder: "注册新的开发区根（绝对路径，例如 D:\\my-plugins）",
@@ -730,6 +735,11 @@ window.__ModuleLoader__.load({
 			linksTitle: "Dev links (link:): {n} total, {ready} self-sufficient - checkmark = ready, dot = something missing (hover for why)",
 			healthSummary: "{n} issue type(s) need attention",
 			exemptGrantBtn: "Grant exact-version exemption",
+			healthDismissBtn: "Got it",
+			healthDismissTitle: "Dismiss this notice. It reappears when the problems change (kind or count), so you will not miss anything new",
+			linksToggleBtn: "Dev link (link:) details",
+			linksToggleSummary: "Dev links (link:): {n} total, {ready} self-sufficient",
+			linksToggleTitle: "Expand/collapse link details (collapsed by default)",
 			devRootsTitle: "Dev roots (only directories inside these can be pinned)",
 			devRootsNone: "(none registered)",
 			devRootAddPlaceholder: "Register a dev root (absolute path, e.g. D:\\my-plugins)",
@@ -1568,6 +1578,22 @@ window.__ModuleLoader__.load({
 		}
 		// <<<update-pick:end>>>
 		const el = react.createElement;
+// ★ 0.5.60：被跳过 bundle 的签名（包名+版本）。关掉提示时记下它；清单变了就重新出现。
+//   模块级 —— 上一版把辅助函数放子组件里、主面板误用，导致整块面板空白。
+function skippedSignature(skipped) {
+	try {
+		if (skipped === null || skipped === undefined || !Array.isArray(skipped.items)) return "0";
+		return skipped.items.map((x) => String(x.packageName) + "@" + String(x.version ?? "?")).join("|");
+	} catch { return "0"; }
+}
+// ★ 0.5.59：健康问题的**签名**（类别+条数）。关掉提示时记下它；签名一变说明问题变了，提示重新出现。
+//   刻意放在模块级（不放组件内）—— 上一版就是因为把辅助函数放在子组件里、主面板误用而整块空白。
+function healthSignature(health) {
+	try {
+		if (health === null || health === undefined || !Array.isArray(health.items)) return "0";
+		return health.items.map((x) => String(x.kind) + ":" + String(x.count)).join("|");
+	} catch { return "0"; }
+}
 		function moduleShortName(moduleName) {
 			return (moduleName.startsWith("@") ? moduleName.slice(moduleName.indexOf("/") + 1) : moduleName)
 				.replace(/^cordis:/, "").replace(/^cordis-plugin-/, "").replace(/^dsh-(?:host-|client-)?/, "");
@@ -1914,6 +1940,17 @@ window.__ModuleLoader__.load({
 		}
 		function PluginConsoleTab({ t, section = null }) {
 			const [state, setState] = react.useState({ status: "loading" });
+			// ★ 0.5.59：健康摘要**可关掉**（用户 2026-10-17「这个提示可以关掉」）。
+			//   关掉后不再打扰，但记的是**问题签名**（类别+条数）：问题一变就重新出现 ——
+			//   不能因为"关过一次"就让人永久错过新出现的问题。
+			const [healthClosed, setHealthClosed] = react.useState(() => {
+				try { return localStorage.getItem("pc-health-closed") ?? ""; } catch { return ""; }
+			});
+			// ★ 0.5.60：被跳过 bundle 的提示也可以关掉（用户 2026-10-18「不是说这个可以关闭吗」）。
+			//   同样记"签名"（包名+版本），清单变了会重新出现 —— 关掉不等于永远看不见。
+			const [skippedClosed, setSkippedClosed] = react.useState(() => {
+				try { return localStorage.getItem("pc-skipped-closed") ?? ""; } catch { return ""; }
+			});
 			const [busy, setBusy] = react.useState(null);
 			const [adaptUnlocking, setAdaptUnlocking] = react.useState(null);
 			// 待适配行「强行启用」的风险确认态：{ entryId, moduleName, frameworkVersion, checkNote } | null
@@ -4622,9 +4659,21 @@ window.__ModuleLoader__.load({
 				// 分项计数摆在最上面（不新增判据、不新增 IO：全部来自 /state 已有的块）。
 				state.status === "ready" && state.data.health && state.data.health.issues > 0
 					&& Array.isArray(state.data.health.items)
+					&& healthSignature(state.data.health) !== healthClosed
 					? el("p", { className: styles.message, "data-error": "true", style: { marginTop: "8px", marginBottom: "0" } },
-							fill(t("healthSummary"), [["n", String(state.data.health.issues)]]) + "："
-							+ state.data.health.items.map((x) => x.label + " " + String(x.count)).join(" · "))
+							t("healthSummary").replace("{n}", String(state.data.health.issues)) + "："
+							+ state.data.health.items.map((x) => x.label + " " + String(x.count)).join(" · "),
+							" ",
+							el("button", {
+								type: "button",
+								style: { marginLeft: "8px", cursor: "pointer" },
+								title: t("healthDismissTitle"),
+								onClick: () => {
+									const sig = healthSignature(state.data.health);
+									try { localStorage.setItem("pc-health-closed", sig); } catch {}
+									setHealthClosed(sig);
+								},
+							}, t("healthDismissBtn")))
 					: null,
 				// ★ 0.5.53 加法（真机 2026-10-15）：**被框架整层跳过的 bundle**。
 				//   为什么必须放在这里（不是列表里）：被跳过的 bundle **不产生任何 loader 行**，
@@ -4634,9 +4683,21 @@ window.__ModuleLoader__.load({
 					&& state.data.skippedBundles.reliable === true
 					&& Array.isArray(state.data.skippedBundles.items)
 					&& state.data.skippedBundles.items.length > 0
+					&& skippedSignature(state.data.skippedBundles) !== skippedClosed
 					? el("div", { className: styles.message, "data-error": "true", style: { marginTop: "8px" } },
 							el("p", null,
-								t("skippedBundlesTitle").replace("{n}", String(state.data.skippedBundles.items.length))),
+								t("skippedBundlesTitle").replace("{n}", String(state.data.skippedBundles.items.length)),
+								" ",
+								el("button", {
+									type: "button",
+									style: { marginLeft: "8px", cursor: "pointer" },
+									title: t("healthDismissTitle"),
+									onClick: () => {
+										const sig = skippedSignature(state.data.skippedBundles);
+										try { localStorage.setItem("pc-skipped-closed", sig); } catch {}
+										setSkippedClosed(sig);
+									},
+								}, t("healthDismissBtn"))),
 							...state.data.skippedBundles.items.map((b) => el("p", { key: b.packageName, title: b.hint ?? undefined, style: { margin: "4px 0 0 12px" } },
 								"• " + b.packageName + (b.version ? " v" + b.version : "") + " — " + b.reason,
 								// ★ 0.5.56：把提示里的"三条出路"之一真正做成可点的动作。
@@ -6166,6 +6227,9 @@ window.__ModuleLoader__.load({
 			//   过去 link 钉住的插件与普通插件长得一模一样 —— 看不出指向哪、目标还在不在、
 			//   依赖/peer 齐不齐、垫片还在不在。这份清单让"看见"先成立。
 			const [links, setLinks] = react.useState(null);
+			// ★ 0.5.58：link 可视化默认**收起**（用户 2026-10-17 要求）——
+			//   这块信息量大但不常用，展开着会把「升级安全」面板顶长，反而让人找不到东西。
+			const [linksOpen, setLinksOpen] = react.useState(false);
 			// ★ 0.5.57：开发区根 + 钉住输入（用户决定：允许注册自己的根；不允许任意目录；agent 钉住需勾选、默认关）
 			const [devRoots, setDevRoots] = react.useState([]);
 			const [rootInput, setRootInput] = react.useState("");
@@ -6315,10 +6379,22 @@ window.__ModuleLoader__.load({
 				row("back", t("safetyRollbackTitle"), status !== null && status?.host?.hosted === true
 					? fill(t("safetyRollbackNone"), [["reason", status?.host?.notice ?? t("hostedNoChannel")]])
 					: (rb.applicable === true ? fill(t("safetyRollbackOk"), [["from", rb.from], ["to", rb.to]]) : fill(t("safetyRollbackNone"), [["reason", rb.reason === null || rb.reason === undefined ? "-" : rb.reason]]))),
+				// ★ 0.5.58：折叠头（默认收起）。摘要行始终可见，点开才展开两块明细。
+				el("button", {
+					type: "button",
+					style: { display: "flex", alignItems: "center", gap: "6px", width: "100%", marginTop: "6px", paddingTop: "6px", borderTop: "1px solid var(--dsw-alias-border-secondary, rgba(127,127,127,.18))", background: "none", border: "none", borderTopWidth: "1px", borderTopStyle: "solid", borderTopColor: "var(--dsw-alias-border-secondary, rgba(127,127,127,.18))", color: "inherit", cursor: "pointer", fontSize: "12px", fontWeight: 500, textAlign: "left" },
+					"aria-expanded": linksOpen ? "true" : "false",
+					title: t("linksToggleTitle"),
+					onClick: () => setLinksOpen((v) => !v),
+				},
+					el("span", { style: { transform: linksOpen ? "rotate(90deg)" : "none", transition: "transform .2s", display: "inline-block" } }, "▸"),
+					el("span", null, links === null
+						? t("linksToggleBtn")
+						: fill(t("linksToggleSummary"), [["n", String(links.count ?? 0)], ["ready", String(links.readyCount ?? 0)]]))),
 				// ★ 0.5.54 加法：开发式链接（link）清单 —— 每行给出目标、版本、自足性与垫片。
 				//   判据全部来自服务端 /links（纯只读）；这里只负责如实展示，不推断、不美化。
 				links !== null && Array.isArray(links.items) && links.items.length > 0
-					? el("div", { style: { display: "flex", flexDirection: "column", gap: "2px", marginTop: "4px", paddingTop: "4px", borderTop: "1px solid var(--dsw-alias-border-secondary, rgba(127,127,127,.18))" } },
+					? el("div", { style: { display: linksOpen ? "flex" : "none", flexDirection: "column", gap: "2px", marginTop: "4px", paddingTop: "4px", borderTop: "1px solid var(--dsw-alias-border-secondary, rgba(127,127,127,.18))" } },
 							el("div", { style: { fontSize: "12px", fontWeight: 500 } }, fill(t("linksTitle"), [["n", String(links.count ?? links.items.length)], ["ready", String(links.readyCount ?? 0)]])),
 							...links.items.map((x) => el("div", { key: x.packageName, title: x.note ?? undefined, style: { fontSize: "12px", marginLeft: "10px", opacity: .85, wordBreak: "break-all" } },
 								(x.ready === true ? "✓ " : "• ") + x.packageName + (x.version ? " v" + x.version : "")
@@ -6335,7 +6411,7 @@ window.__ModuleLoader__.load({
 				// ★ 0.5.57：开发区根与"按路径钉住" —— 把协作开发流真正接通。
 				//   规矩全部由服务端执行（domain/dev-roots.js 是"不许任意目录"的唯一执行点），
 				//   这里只负责：先规划给人看 → 再让人确认 → 才真写。
-				el("div", { style: { display: "flex", flexDirection: "column", gap: "4px", marginTop: "6px", paddingTop: "6px", borderTop: "1px solid var(--dsw-alias-border-secondary, rgba(127,127,127,.18))" } },
+				el("div", { style: { display: linksOpen ? "flex" : "none", flexDirection: "column", gap: "4px", marginTop: "6px", paddingTop: "6px", borderTop: "1px solid var(--dsw-alias-border-secondary, rgba(127,127,127,.18))" } },
 					el("div", { style: { fontSize: "12px", fontWeight: 500 } }, t("devRootsTitle")),
 					el("div", { style: { fontSize: "12px", opacity: .8, marginLeft: "10px", wordBreak: "break-all" } }, devRoots.length === 0 ? t("devRootsNone") : devRoots.join("  ·  ")),
 					el("div", { style: { display: "flex", gap: "6px", marginLeft: "10px", flexWrap: "wrap" } },

package/lib/server/domain/market.js

@@ -389,7 +389,13 @@ function summarizeReadme(text) {
 async function readPluginDetails(moduleName, baseUrl, profileDir) {
   if (typeof moduleName !== 'string' || moduleName.startsWith('cordis:')) return { meta: null, readme: null }
   try {
-    const pkgPath = resolvePackageJson(moduleName, baseDirOf(baseUrl), profileDir ?? null)
+    // ★ 0.5.60（真机 2026-10-18）：与 entryPkgMeta 同一口径 —— **profile 优先、安装锚点兜底**。
+    //   详情卡片过去读 app.asar 那份（0.2.1-rc.2），于是显示"已是最新"、更新按钮永远点不动，
+    //   而真正被加载的是 profile 里那份 0.2.0-rc.2（正是被 peer 否决的那份）。
+    const hasProfile = typeof profileDir === 'string' && profileDir !== ''
+    const pkgPath = hasProfile
+      ? resolvePackageJson(moduleName, profileDir, baseDirOf(baseUrl))
+      : resolvePackageJson(moduleName, baseDirOf(baseUrl), null)
     if (pkgPath === null) throw new Error('not found')
     const pkg = JSON.parse(await readFile(pkgPath, 'utf8'))
     const meta = {

package/lib/server/infra/paths.js

@@ -180,7 +180,15 @@ function entryPkgMeta(moduleName, baseUrl, profileDir) {
   if (hit !== undefined && Date.now() - hit.at < PKG_META_TTL) return hit
   const meta = { at: Date.now(), installDate: null, version: null, repository: null }
   try {
-    const pkgPath = resolvePackageJson(moduleName, baseDirOf(baseUrl), profileDir ?? null)
+    // ★ 0.5.60（真机 2026-10-18）：**profile 优先、安装锚点兜底**。
+  //   过去是反的（asar 优先），导致"徽标显示 0.2.1-rc.2（最新）→ 检测更新无更新可点 →
+  //   但实际加载的是 profile 里 0.2.0-rc.2 → peer 永远不匹配"的死局。
+  //   loader 是从 profile 上下文解析模块名的，所以要显示/要比对的必须是 profile 那份；
+  //   只有 profile 里没有该包时（纯内置插件）才回落到安装锚点。
+  const hasProfile = typeof profileDir === 'string' && profileDir !== ''
+  const pkgPath = hasProfile
+    ? resolvePackageJson(moduleName, profileDir, baseDirOf(baseUrl))
+    : resolvePackageJson(moduleName, baseDirOf(baseUrl), null)
     if (pkgPath === null) throw new Error('not found')
     const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'))
     // 安装日期：优先 curl 通道写入的 .dsh-installed-at 标记（真实安装时刻）；

package/lib/server/routes/state.js

@@ -163,6 +163,41 @@ async function routeStateGet(req, res, rc) {
       const shape = detectHostShape()
       host = { hosted: shape.hosted === true, kind: shape.kind, notice: shape.hosted === true ? shape.notice : null }
     } catch {}
+    // ★ 0.5.60 加法（真机 2026-10-18）：**为被 bundle 级跳过的插件合成虚拟行**。
+    //   为什么必须做：bundle 层被跳过 ⇒ 它要插的 loader 行**根本不存在** ⇒ 列表里没有位置可挂，
+    //   用户只能看到一条横幅，无法像别的插件那样"看到它、更新它、再启用它"。
+    //   合成后它出现在列表里，显示为「已停用 / 未加载」+ 否决原因；toggleable=false 表示
+    //   **没有真实行可开关**（开关自动置灰），但「详情 → 检测更新」照常可用 —— 更新到兼容版本后
+    //   重启，bundle 才会真正装载并出现真实行，那时才谈得上"启用"。
+    const realModuleNames = new Set(entries.map((e) => e.moduleName))
+    const virtualEntries = skippedBundles.reliable === true && Array.isArray(skippedBundles.items)
+      ? skippedBundles.items
+        .filter((b) => b !== null && b !== undefined && typeof b.packageName === 'string' && !realModuleNames.has(b.packageName))
+        .map((b) => ({
+          entryId: `bundle-skipped:${b.packageName}`,
+          rowId: null,
+          moduleName: b.packageName,
+          enabled: false,
+          fiberPhase: null,
+          protected: false,
+          toggleable: false,
+          userDisabled: false,
+          userForced: false,
+          extra: false,
+          installDate: null,
+          version: b.version ?? null,
+          repository: null,
+          pendingCompat: false,
+          compatRescinded: false,
+          compatVerdict: null,
+          adoptable: null,
+          // 复用既有的 veto 通道：卡片会照常渲染原因 + 出路（tooltip），无需新 UI。
+          veto: { reason: b.reason ?? null, hint: b.hint ?? null, kind: b.kind ?? null, judged: b.judged ?? null },
+          virtual: true,
+        }))
+      : []
+    const allEntries = virtualEntries.length === 0 ? entries : [...entries, ...virtualEntries]
+
     // ★ 0.5.55 加法：把已经算好的各块**折成一行健康摘要**（不新增 IO、不新增判据）。
     //   面板 176 个按钮、信息散在六处，用户没有一个地方能回答"整体健康吗、我该先处理哪件"。
     let health = { issues: 0, items: [] }
@@ -174,7 +209,7 @@ async function routeStateGet(req, res, rc) {
         patchUncertain: patchHeal === null ? [] : (patchHeal.uncertain ?? []),
       })
     } catch {}
-    sendJson(res, 200, { ok: true, entries, skippedBundles, host, health, patchPath, compat, installJobs: jobs, recentFailures, pendingRestart, github: { loggedIn: auth.loggedIn, login: auth.login }, patch: { disables: patch.disables, forced: patch.forced, inserts: patch.inserts }, framework, patchHeal: patchHeal === null ? null : { healed: patchHeal.healed ?? [], autoDisabled: patchHeal.autoDisabled ?? [], healedAt: patchHeal.healedAt ?? 0, written: patchHeal.written === true, writeError: patchHeal.writeError ?? null, skippedFrameworkOwned: (patchHeal.skipped ?? []).map((s) => s.id ?? null), uncertain: (patchHeal.uncertain ?? []).map((u) => u.id ?? null) }, gating: gatingSummary(ctx, compatPending, entries, compatVerdicts), compatPending: compatPending === null ? null : { frameworkVersion: compatPending.frameworkVersion ?? null, upgradeFrom: compatPending.upgradeFrom ?? null, pending: (compatPending.pending ?? []).filter((p) => (p.status ?? 'pending') === 'pending').map((p) => ({ rowId: p.rowId, moduleName: p.moduleName, version: p.version ?? null, checkNote: p.checkNote ?? null, check: p.check ?? null, riskyApprovedAt: p.riskyApprovedAt ?? null, adoptable: adoptable.get(p.rowId) ?? null, verdict: compatVerdicts.get(p.rowId) ?? null })), verdictRefresh: pendingState.refresh === null ? null : { version: pendingState.refresh.version ?? null, updated: pendingState.refresh.updated ?? [], unchanged: pendingState.refresh.unchanged ?? [], unresolved: pendingState.refresh.unresolved ?? [], wrote: pendingState.refresh.wrote === true, writeError: pendingState.refresh.writeError ?? null } }, compatGate, rollback: rollbackRec, selfVersion, components: findComponents().map((c) => ({ id: c.id, name: c.name, kind: c.kind ?? 'server', pid: c.pid ?? null, port: c.port ?? null, healthUrl: c.healthUrl ?? null, uiUrl: compUiUrl(c), autoStart: c.autoStart === true })) })
+    sendJson(res, 200, { ok: true, entries: allEntries, skippedBundles, host, health, patchPath, compat, installJobs: jobs, recentFailures, pendingRestart, github: { loggedIn: auth.loggedIn, login: auth.login }, patch: { disables: patch.disables, forced: patch.forced, inserts: patch.inserts }, framework, patchHeal: patchHeal === null ? null : { healed: patchHeal.healed ?? [], autoDisabled: patchHeal.autoDisabled ?? [], healedAt: patchHeal.healedAt ?? 0, written: patchHeal.written === true, writeError: patchHeal.writeError ?? null, skippedFrameworkOwned: (patchHeal.skipped ?? []).map((s) => s.id ?? null), uncertain: (patchHeal.uncertain ?? []).map((u) => u.id ?? null) }, gating: gatingSummary(ctx, compatPending, entries, compatVerdicts), compatPending: compatPending === null ? null : { frameworkVersion: compatPending.frameworkVersion ?? null, upgradeFrom: compatPending.upgradeFrom ?? null, pending: (compatPending.pending ?? []).filter((p) => (p.status ?? 'pending') === 'pending').map((p) => ({ rowId: p.rowId, moduleName: p.moduleName, version: p.version ?? null, checkNote: p.checkNote ?? null, check: p.check ?? null, riskyApprovedAt: p.riskyApprovedAt ?? null, adoptable: adoptable.get(p.rowId) ?? null, verdict: compatVerdicts.get(p.rowId) ?? null })), verdictRefresh: pendingState.refresh === null ? null : { version: pendingState.refresh.version ?? null, updated: pendingState.refresh.updated ?? [], unchanged: pendingState.refresh.unchanged ?? [], unresolved: pendingState.refresh.unresolved ?? [], wrote: pendingState.refresh.wrote === true, writeError: pendingState.refresh.writeError ?? null } }, compatGate, rollback: rollbackRec, selfVersion, components: findComponents().map((c) => ({ id: c.id, name: c.name, kind: c.kind ?? 'server', pid: c.pid ?? null, port: c.port ?? null, healthUrl: c.healthUrl ?? null, uiUrl: compUiUrl(c), autoStart: c.autoStart === true })) })
     return
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noob-stupid/dsh-plugin-console",
-  "version": "0.5.57",
+  "version": "0.5.60",
   "description": "DSH 框架升级安全与插件升级门控：一键升级、失败自动回滚、升级后回滚上版、旧插件不适配自动禁用；内置多源插件市场为发现层，插件源全部可自定义，可指向公司内网私有源 / 私有索引 / 本地 Git 仓库，纯内网离线可用 | Framework upgrade safety & plugin version gating for DSH, with a customizable multi-source plugin market: point every source at internal mirrors or a local file:// repo for intranet-only, offline installs.",
   "repository": {
     "type": "git",