@noob-stupid/dsh-plugin-console 0.5.71 → 0.5.85

package/lib/client.js

@@ -111,6 +111,20 @@ window.__ModuleLoader__.load({
 			safetyLockRepairPartial: "重建后仍有差距，见下方问题",
 			safetyLockNoRebuild: "当前不需要重建",
 			safetyLockCheckBtn: "体检",
+			// 0.5.84 加法（用户第 7 项）：磁盘体检 / 两步清理
+			diskTitle: "磁盘占用（plugin-console）",
+			diskDesc: "只读体检：这个目录谁占了多少、哪些能安全清理、哪些绝不能动（当前回滚点指向的备份一律不许删）",
+			diskCheckBtn: "磁盘体检",
+			diskSummary: "共 {mb} MB（{n} 项）· 可直接清理约 {safe} MB · 可清理（含取舍）约 {reclaim} MB",
+			diskSafeHint: "只清理「安全」级（日志 / 旧残留 / 状态 .bak）：不影响任何功能",
+			diskConfirmHint: "确认清理：这一步才会真的删（服务端只删体检白名单里的条目）",
+			diskCleanupBtn: "清理安全项",
+			diskConfirmBtn: "确认清理（约 {mb} MB）",
+			diskPlanReady: "将清理 {n} 项、释放约 {mb} MB —— 确认后才会真的删",
+			diskConfirmBtn2: "确认清理",
+			diskDone: "已清理",
+			diskFailed: "磁盘体检失败",
+			diskNoCandidate: "没有可安全清理的条目（大头通常是当前回滚点指向的框架备份，不能删）",
 			safetyLockRepairBtn: "重建 lock（显式）",
 			// 2026-09-27 加法：安装结果旁的「建议动作」执行框（短句进面板，长解释进悬浮 title）
 			actionBoxTitle: "建议动作",
@@ -127,6 +141,12 @@ window.__ModuleLoader__.load({
 			linksToggleBtn: "开发式链接（link）明细",
 			linksToggleSummary: "开发式链接（link）：共 {n} 个，自足 {ready} 个",
 			linksToggleTitle: "展开/收起 link 明细（默认收起）",
+			// 0.5.84 加法（用户第 6 项）：功能包工具栏里的 link 入口 + 它打开的那块面板
+			linksBtn: "开发式链接",
+			linksPanelTitle: "开发式链接（link:）—— 直接展示 /plugin-console/links 的只读清单：指向哪、目标还在不在、依赖/peer 齐不齐、垫片在不在",
+			linksPanelLoading: "正在读取…",
+			linksPanelReload: "重新读取",
+			linksPanelEmpty: "没有 link: 钉住的插件（这份清单只列开发式链接）",
 			devRootsTitle: "开发区根（只有这些根里的目录能钉住）",
 			devRootsNone: "（未登记）",
 			devRootAddPlaceholder: "注册新的开发区根（绝对路径，例如 D:\\my-plugins）",
@@ -251,6 +271,8 @@ window.__ModuleLoader__.load({
 			gatePendingNone: "当前没有待适配的行",
 			gateListPending: "待适配明细（{n} 行）",
 			gateListAdopted: "已适配解锁（{n} 行，历史上被拦过、现已放行）",
+			gateHistoryShow: "展开查看 {n} 条历史",
+			gateHistoryHide: "收起历史",
 			gateListMore: "展开全部 {n} 行",
 			gateListFold: "收起列表",
 			gateRowReason: "原因：{reason}",
@@ -280,6 +302,11 @@ window.__ModuleLoader__.load({
 			migrateBtn: "迁移并适配",
 			aiEmpowerFrameworkCheck: "框架适配检测",
 			userForcedTag: "补丁强制启用",
+			// ★ 0.5.76（用户 2026-10-18）：禁用**出处**要写明，别只给一句"已停用"
+			disabledByBundleTag: "插件默认禁用",
+			forcedNotLoadedTag: "强制启用未生效",
+			revokeForceLabel: "撤销该强制启用",
+			revokeForceHint: "这条 disabled: false 覆盖没有让插件加载起来 —— 撤掉它，界面不再显示「强制启用」的假象（不会改动清单）",
 			protectedTag: "受保护",
 			unobserved: "未挂载",
 			pending: "等待依赖",
@@ -312,6 +339,8 @@ window.__ModuleLoader__.load({
 			// 0.5.38 加法：三处没齐备（清单 / lock / 挂载行）时**绝不**说"已安装并启用"——
 			// 那种状态下任何一次 pnpm 操作或重启都会把它清掉（真机 dshmarket 现场）。
 			installedNotPersisted: "⚠ 已装上但未持久化（重启/重装会消失）",
+			// 0.5.84 判据降噪：只是「口径不一致」时换这句 —— 不再拿"会消失"吓人
+			installedNotPersistedWarn: "已装上；清单 / lock 口径还没对齐（不影响重启后加载，可顺手钉一下）",
 			installNote: "HMR 正在生效；若插件带界面，请刷新页面",
 			bundleNote: "该包是 bundle 层插件（如皮肤合集），重启 DSH 服务后生效",
 			// ── 安装诊断短句（2026-09-26 加法）：面板只放短句；解释性长文留在服务端字段里，
@@ -319,6 +348,8 @@ window.__ModuleLoader__.load({
 			diagCardTitle: "安装诊断",
 			// 0.5.38 加法：持久化判据（服务端 domain/persist.js）——三处任一没就位就出这张卡
 			diagNotPersisted: "未持久化：清单 / lock / 挂载行有缺口",
+			// 0.5.84 判据降噪：降级后的短句（可折叠提示，不再报红）
+			diagPersistDowngraded: "口径不一致（不影响重启后加载）",
 			// 分隔符也进字典：英文界面用半角标点，避免中文全角标点混进英文句子
 			diagColon: "：",
 			diagSemi: "；",
@@ -414,6 +445,7 @@ window.__ModuleLoader__.load({
 			stageConfiguring: "写入启用配置",
 			stageRepairing: "本地 AI 接管安装中…",
 			restartService: "重启服务（官方路径）",
+			restartHostedNotice: "本实例由桌面端外壳托管 —— 请在桌面端内重启：完全退出 DeepSeek Harness 再打开（控制台不自行 kill / spawn，以免与宿主争端口）。",
 			restarting: "正在按官方路径处理重启请求…",
 			autoReload: "页面即将自动刷新…",
 			aiRepaired: "本地 AI 已接管并完成修复，请刷新页面查看",
@@ -725,6 +757,19 @@ window.__ModuleLoader__.load({
 			safetyLockRepairPartial: "Still out of sync after the rebuild — see the problems below",
 			safetyLockNoRebuild: "No rebuild needed right now",
 			safetyLockCheckBtn: "Check",
+			diskTitle: "Disk usage (plugin-console)",
+			diskDesc: "Read-only audit: what fills this directory, what can be cleaned safely, and what must never be touched (the backup the current rollback point refers to is off limits)",
+			diskCheckBtn: "Audit disk",
+			diskSummary: "{mb} MB total ({n} entries) - about {safe} MB safely cleanable, about {reclaim} MB cleanable with a tradeoff",
+			diskSafeHint: "Clean only the safe tier (logs / old residue / state .bak files): no functionality is affected",
+			diskConfirmHint: "Confirm cleanup: this is the step that actually deletes (the server only deletes entries from the audit whitelist)",
+			diskCleanupBtn: "Clean safe items",
+			diskConfirmBtn: "Confirm cleanup (~{mb} MB)",
+			diskPlanReady: "Will remove {n} items, about {mb} MB freed - nothing is deleted until you confirm",
+			diskConfirmBtn2: "Confirm cleanup",
+			diskDone: "Cleaned",
+			diskFailed: "Disk audit failed",
+			diskNoCandidate: "Nothing is safely cleanable (the largest item is usually the framework backup the current rollback point refers to, which must not be deleted)",
 			safetyLockRepairBtn: "Rebuild lock (explicit)",
 			actionBoxTitle: "Suggested action",
 			actionPinLabel: "Pin this dependency (record as link:)",
@@ -740,6 +785,11 @@ window.__ModuleLoader__.load({
 			linksToggleBtn: "Dev link (link:) details",
 			linksToggleSummary: "Dev links (link:): {n} total, {ready} self-sufficient",
 			linksToggleTitle: "Expand/collapse link details (collapsed by default)",
+			linksBtn: "Dev links",
+			linksPanelTitle: "Dev links (link:) - the read-only list from /plugin-console/links: where it points, whether the target still exists, whether deps/peers are complete, and whether shims are in place",
+			linksPanelLoading: "Reading...",
+			linksPanelReload: "Reload",
+			linksPanelEmpty: "No plugin is pinned with link: (this list only covers dev links)",
 			devRootsTitle: "Dev roots (only directories inside these can be pinned)",
 			devRootsNone: "(none registered)",
 			devRootAddPlaceholder: "Register a dev root (absolute path, e.g. D:\\my-plugins)",
@@ -891,6 +941,10 @@ window.__ModuleLoader__.load({
 			migrateBtn: "Migrate & adapt",
 			aiEmpowerFrameworkCheck: "Framework compat check",
 			userForcedTag: "Forced on by patch",
+			disabledByBundleTag: "Disabled by plugin default",
+			forcedNotLoadedTag: "Force-enable had no effect",
+			revokeForceLabel: "Revoke this force-enable",
+			revokeForceHint: "This disabled: false override did not make the plugin load; revoking it stops the false forced-on badge (the manifest is untouched)",
 			protectedTag: "Protected",
 			unobserved: "Not mounted",
 			pending: "Waiting for dependencies",
@@ -921,12 +975,14 @@ window.__ModuleLoader__.load({
 			recentFailures: "Recent install failures",
 			installed: "Installed and enabled",
 			installedNotPersisted: "⚠ Installed but NOT persisted (it disappears on restart/reinstall)",
+			installedNotPersistedWarn: "Installed; manifest / lock are not fully aligned (this does NOT affect loading after a restart - pin it whenever convenient)",
 			installNote: "HMR is applying; refresh the page if the plugin ships UI",
 			bundleNote: "This package is a bundle-layer plugin (e.g. skin packs); restart the DSH service to activate it",
 			// ── install-diagnosis one-liners (2026-09-26, additive): the panel shows short sentences only;
 			// the long server-side explanations go to the title tooltip, never into the panel body ──
 			diagCardTitle: "Install diagnosis",
 			diagNotPersisted: "Not persisted: a gap remains in manifest / lock / mount row",
+			diagPersistDowngraded: "Not aligned (this does not affect loading after a restart)",
 			// separators live in the dictionary too: English uses half-width punctuation
 			diagColon: ": ",
 			diagSemi: "; ",
@@ -1018,6 +1074,7 @@ window.__ModuleLoader__.load({
 			stageConfiguring: "Writing enable config",
 			stageRepairing: "Local AI is taking over the install…",
 			restartService: "Restart service (official path)",
+			restartHostedNotice: "This instance is hosted by the desktop shell - restart it there by fully quitting and reopening DeepSeek Harness.",
 			restarting: "Handling the restart request via the official path…",
 			autoReload: "Page will auto-reload…",
 			aiRepaired: "Local AI took over and finished the repair; refresh the page",
@@ -2302,11 +2359,40 @@ function healthSignature(health) {
 			});
 			// 门控面板（用户要求：总开关收进「功能包」里的 [门控] 按钮，不再占已安装列表的表头）
 			const [gateOpen, setGateOpen] = react.useState(false);
+			// ★ 0.5.84 加法（用户第 6 项）：功能包工具栏里的 **link 入口**。
+			//   过去开发式链接（link:）清单只长在「升级安全」面板**内部**的折叠块里 —— 得先找到那个入口、
+			//   再展开才看得到；用户要的是从工具栏直接跳到那份数据。数据源与判据与安全面板**完全同一份**
+			//   （`GET /plugin-console/links`，纯只读，判据全在 domain/link-inventory.js）；
+			//   这里只负责如实展示，不推断、不美化，也不自己算"自足/缺什么"。
+			//   安全面板里那块折叠展示**保留不动**（老入口照旧），这是加法。
+			const [linksPanelOpen, setLinksPanelOpen] = react.useState(false);
+			const [linksPanelData, setLinksPanelData] = react.useState(null);
+			const [linksPanelBusy, setLinksPanelBusy] = react.useState(false);
+			const linksPanelLoad = async () => {
+				if (linksPanelBusy) return;
+				setLinksPanelBusy(true);
+				try {
+					const data = await call("/plugin-console/links");
+					if (data !== null) setLinksPanelData(data);
+				} catch (error) {
+					// 拿不到就如实说（不静默成"没有 link 依赖"）
+					setLinksPanelData({ ok: false, items: [], count: 0, readyCount: 0, error: (error && error.message) || t("safetySwitchFailed") });
+				} finally { setLinksPanelBusy(false); }
+			};
+			// ★ 0.5.80：历史解锁记录默认折叠（用户：新的应覆盖旧的，别一直铺满）
+			const [gateHistoryOpen, setGateHistoryOpen] = react.useState(false);
 			// 功能包位置:长按拖动,持久化 localStorage(每次打开沿用上次位置)
 			const [toolbarPos, setToolbarPos] = react.useState(() => {
 				try {
 					const v = JSON.parse(localStorage.getItem("pc-toolbar-pos") || "null");
-					if (v && Number.isFinite(v.left) && Number.isFinite(v.top)) return { left: v.left, top: v.top };
+					if (v && Number.isFinite(v.left) && Number.isFinite(v.top)) {
+						// ★ 用户 2026-10-18：存下来的位置**必须钳进可视区**，否则拖到标题栏/屏幕外就再也拿不回来。
+						//   上边界 64px 是标题栏与窗口按钮的安全区（原来只钳到 8px，正好落在标题栏里）。
+						const SAFE_TOP = 64;
+						const maxLeft = Math.max(8, (window.innerWidth || 1280) - 120);
+						const maxTop = Math.max(SAFE_TOP, (window.innerHeight || 800) - 80);
+						return { left: Math.min(Math.max(8, v.left), maxLeft), top: Math.min(Math.max(SAFE_TOP, v.top), maxTop) };
+					}
 				} catch {}
 				return null;
 			});
@@ -2929,6 +3015,15 @@ function healthSignature(health) {
 					(error) => setDetails({ entryId: entry.entryId, status: "error", error }),
 				);
 			};
+			// ★ 0.5.76：撤销"强制启用"覆盖（补丁里的 disabled: false）。只对确实 forced 的行生效，服务端会校验。
+			const revokeForce = (entry) => {
+				if (busy !== null) return;
+				setBusy(entry.entryId);
+				call("/plugin-console/revoke-force", { entryId: entry.entryId }).then(
+					(data) => { setMessage(data?.note ?? t("revokeForceLabel")); refresh(); },
+					(error) => { setMessage(friendlyGithubError(error).message); },
+				).finally(() => setBusy(null));
+			};
 			const checkUpdate = (entry) => {
 				const pkgName = entry.moduleName;
 				setUpdateCheck({ status: "checking" });
@@ -3448,7 +3543,13 @@ function healthSignature(health) {
 										// 0.5.38 加法（用户诉求「下载下来就不用 lock、重启也不会消失」）：
 										// 三处没齐备时**绝不报"已安装并启用"** —— 说清它还缺什么、后果是什么，
 										// 并把服务端下发的「一键钉住」执行框带出来（下面的 suggestedAction 分支）。
-										setMessage(t("installedNotPersisted") + "：" + data.packageName + (typeof data.persistNote === "string" && data.persistNote !== "" ? "。" + data.persistNote : "") + diagMessage(data));
+										// 0.5.84 降噪：只有「会丢插件」那一档才用"重启/重装会消失"这句；只是口径
+										// 不一致（lock 形态、清单与磁盘版本）时用软一点的措辞，原因照样在诊断行里。
+										const sev = data.persist !== null && data.persist !== undefined && typeof data.persist.severity === "object" && data.persist.severity !== null ? data.persist.severity : null;
+										const criticalGap = sev === null ? true : sev.level === "critical";
+										const head = criticalGap ? t("installedNotPersisted") : t("installedNotPersistedWarn");
+										const detail = typeof data.persistNote === "string" && data.persistNote !== "" ? data.persistNote : (typeof sev?.note === "string" ? sev.note : "");
+										setMessage(head + "：" + data.packageName + (detail !== "" ? "。" + detail : "") + diagMessage(data));
 										setReloadHint(true);
 									} else {
 										setMessage(t("installed") + "：" + data.packageName + "（" + (data.entryId ?? "") + "）。" + (data.curlNote ?? (data.bundle ? t("bundleNote") : t("installNote"))) + (data.bundleNote ? "。" + data.bundleNote : "") + (data.lockNote ? "。⚠️ " + data.lockNote : "") + (data.depNote ? "。" + data.depNote : "") + diagMessage(data));
@@ -3599,15 +3700,27 @@ function healthSignature(health) {
 						title: channelNotes.join("\n"),
 					});
 				}
-				// ⑤ 持久化判据（0.5.38 加法，服务端 domain/persist.js：{ missing, actual, note }）：
-				//    三处（清单 spec / pnpm-lock.yaml 条目 / 挂载行）任一没就位 → error 级诊断行，
+				// ⑤ 持久化判据（0.5.38 加法，服务端 domain/persist.js：{ missing, actual, note, severity }）：
+				//    三处（清单 spec / pnpm-lock.yaml 条目 / 挂载行）任一没就位 → 诊断行，
 				//    完整缺口清单挂 title。**装成功但没钉住**的作业从此不会只显示"已安装并启用"。
+				// ★ 0.5.84 判据降噪（用户 2026-10 反馈：红字太多，真要紧的那条被淹了）：
+				//   服务端 persistSeverity() 已把每个缺口分成「会丢插件 / 只是口径不一致」两档，
+				//   这里**只认那一份结论**，不自己重判：
+				//     · critical（清单里没有它 / 重启后挂不上）→ error 级（红），并给完整缺口清单；
+				//     · warn（lock 形态/目标、清单形态与磁盘版本不一致）→ warn 级（可折叠提示）+
+				//       明说"不影响重启后加载"，不再拿红字吓人。
+				//   老服务端没有 severity 字段 → 按 critical 处理（保持 0.5.38 以来的既有行为，不静默降级）。
 				if (view.status === "done" && view.persisted === false) {
+					const severity = view.persist !== null && view.persist !== undefined && typeof view.persist.severity === "object" && view.persist.severity !== null ? view.persist.severity : null;
+					const critical = severity === null ? true : severity.level === "critical";
+					const missingText = Array.isArray(view.persist?.missing) && view.persist.missing.length > 0 ? t("diagColon") + view.persist.missing.join(" / ") : "";
+					const longText = typeof view.persistNote === "string" && view.persistNote !== "" ? view.persistNote
+						: (typeof view.persist?.note === "string" ? view.persist.note : null);
 					lines.push({
 						key: "persist",
-						text: t("diagNotPersisted") + (Array.isArray(view.persist?.missing) && view.persist.missing.length > 0 ? t("diagColon") + view.persist.missing.join(" / ") : ""),
-						level: "error",
-						title: typeof view.persistNote === "string" && view.persistNote !== "" ? view.persistNote : (typeof view.persist?.note === "string" ? view.persist.note : null),
+						text: critical ? t("diagNotPersisted") + missingText : t("diagPersistDowngraded") + missingText,
+						level: critical ? "error" : "warn",
+						title: !critical && typeof severity?.note === "string" && severity.note !== "" ? severity.note : longText,
 					});
 				}
 				return lines;
@@ -3796,7 +3909,7 @@ function healthSignature(health) {
 			};
 			// subdir 用于「从这个子目录安装」（0.5.47 加法）：服务端按它去读 <subdir>/package.json、
 			// 稀疏取该子目录源码、再按既有本地目录来源（link:）装。为空时请求体形状与改动前逐字相同。
-			const startJob = (repo, packageName, source = "github", kind = "plugin", update = false, subdir = null) => {
+			const startJob = (repo, packageName, source = "github", kind = "plugin", update = false, subdir = null, version = null) => {
 				// 防并发（与 addLocal 一致）：已有安装/更新进行中时忽略新点击（更新按钮此前可绕过，
 				// 反复点击会产生几十个并发任务装同一插件）
 				// 只拦**同一个目标**：不同插件可以并行更新（服务端是作业模型，天然支持）
@@ -3811,6 +3924,9 @@ function healthSignature(health) {
 				setRestartHint(false);
 				setMessage(null);
 				const body = { repo: repo ?? "", packageName, source, kind, update };
+			// ★ 0.5.81（用户 2026-10-18）：目标版本必须传下去 —— 不带版本时 pnpm 按 latest 把旧版本原地重装，
+		//   表现就是"更新了、刷新后还是老版本"。null/空串一律不带（行为与改动前逐字相同）。
+		if (typeof version === "string" && version !== "") body.version = version;
 				if (subdir !== null && subdir !== undefined && String(subdir) !== "") body.subdir = String(subdir);
 				call("/plugin-console/install", body).then(
 					(data) => {
@@ -4096,7 +4212,8 @@ function healthSignature(health) {
 														type: "button",
 														className: styles.toggle,
 														disabled: installing === entry.moduleName,
-														onClick: () => startJob("", entry.moduleName, "github", "plugin", true),
+														// ★ 0.5.81：把服务端算出的目标版本一起传下去（传 null 时行为与改动前逐字相同）
+												onClick: () => startJob("", entry.moduleName, "github", "plugin", true, null, updateCheck.target ?? updateCheck.latest ?? null),
 													}, installing === entry.moduleName ? t("installing") : (entry.pendingCompat === true ? t("updateAndAdapt") : t("updateNow")))),
 												Array.isArray(updateCheck.depsOutdated) && updateCheck.depsOutdated.length > 0
 													? el("p", { className: styles.status, "data-error": "true" },
@@ -4135,6 +4252,10 @@ function healthSignature(health) {
 							entry.protected ? el("span", { className: styles.tag, "data-user": "true" }, t("protectedTag")) : null,
 							entry.userDisabled ? el("span", { className: styles.tag, "data-user": "true" }, t("userDisabledTag")) : null,
 							entry.userForced ? el("span", { className: styles.tag, "data-user": "true" }, t("userForcedTag")) : null,
+							// ★ 0.5.76：被**别处**（插件自身补丁/框架默认）禁用的行 —— 这就是"补丁强制启用"的来由
+							entry.disableSource === "bundle" ? el("span", { className: styles.tag, "data-user": "true", "data-source": "bundle" }, t("disabledByBundleTag")) : null,
+							// ★ 0.5.76：补丁写了强制开启、运行时却仍没起来 ⇒ 这条覆盖是**无效的**，必须说出来
+							entry.forcedNotLoaded === true ? el("span", { className: styles.tag, "data-user": "true", "data-source": "ineffective" }, t("forcedNotLoadedTag")) : null,
 						),
 						el("div", { className: styles.meta },
 							el("span", { className: styles.phase, "data-phase": entry.fiberPhase ?? "unobserved" },
@@ -4164,11 +4285,19 @@ function healthSignature(health) {
 								el("button", {
 									type: "button",
 									className: styles.toggle,
-									disabled: !entry.toggleable || busy === entry.entryId || entry.pendingCompat === true,
+									// ★ 强制启用且未运行 ⇒ 这个开关本身是空操作（patch.js#enableEntry 直接 changed:false），藏起来
+									disabled: !entry.toggleable || busy === entry.entryId, // ★ 待适配不再禁用启用（用户 2026-10-18）：启用=确认启用，服务端会把它标为已采纳
 									// 0.5.34：结论已被当前判据撤回的行不再显示「待适配」（旧判据的误报不许当事实展示）
 									title: entry.pendingCompat === true ? (entry.compatRescinded === true ? t("compatRescindedHint") : t("pendingCompatHint")) : undefined,
 									onClick: () => toggle(entry, !entry.enabled),
 								}, busy === entry.entryId ? t("loadingPhase") : (entry.pendingCompat === true ? (entry.compatRescinded === true ? t("compatRescindedTag") : t("pendingCompatTag")) : t(entry.enabled ? "off" : "on"))),
+								// ★ 0.5.76：补丁写了强制开启但运行时没起来 ⇒ 给一个撤销覆盖的入口
+								entry.userForced === true ? el("button", {
+									type: "button",
+									className: styles.toggle,
+									title: t("revokeForceHint"),
+									onClick: () => revokeForce(entry),
+								}, t("revokeForceLabel")) : null,
 								el("button", {
 									type: "button",
 									className: styles.toggle,
@@ -4888,7 +5017,44 @@ function healthSignature(health) {
 								el("button", { type: "button", className: styles.toggle, onClick: fwStatusRefresh }, t("fwPanelRefreshStatus")),
 								el("button", { type: "button", className: styles.toggle, disabled: fwCheckBusy, onClick: () => fwCheckRefresh(true) }, fwCheckBusy ? t("fwPanelChecking") : t("fwPanelRecheck"))),
 							el("div", { className: styles.rowTop },
-								el("button", { type: "button", className: styles.toggle, onClick: () => { restartServiceViaServer(setMessage); } }, t("restartService")))))
+								hostedByShell
+									? el("p", { className: styles.status, "data-hosted": "true" }, t("restartHostedNotice"))
+									: el("button", { type: "button", className: styles.toggle, onClick: () => { restartServiceViaServer(setMessage); } }, t("restartService")))))
+					: null,
+				// ★ 0.5.84（用户第 6 项）：功能包 → [开发式链接] 的面板：直接展示 /plugin-console/links
+				//   的同一份数据（与「升级安全」里那块折叠展示同源）。判据来自服务端，这里只如实展示：
+				//   每行 = ✓/• + 包名 + 版本 + 指向 + 缺什么（悬停看完整原因）。
+				linksPanelOpen
+					? el("div", { className: styles.modalBackdrop, onClick: (event) => { if (event.target === event.currentTarget) setLinksPanelOpen(false); } },
+						el("div", { className: styles.modalCard, style: { maxWidth: 620 } },
+							el("div", { className: styles.rowTop, style: { justifyContent: "space-between" } },
+								el("strong", { className: styles.name }, t("linksBtn")),
+								el("button", { type: "button", className: styles.trashBtn, style: { fontSize: 14, padding: "4px 8px" }, title: t("closeModal"), "aria-label": t("closeModal"), onClick: () => setLinksPanelOpen(false) }, "✕")),
+							el("p", { className: styles.message }, t("linksPanelTitle")),
+							linksPanelData === null
+								? el("p", { className: styles.status }, t("linksPanelLoading"))
+								: (linksPanelData.ok === false
+									? el("p", { className: styles.message, "data-warn": "true" }, t("linksFailed") + "：" + String(linksPanelData.error ?? "-"))
+									: el("div", { style: { flexDirection: "column", gap: 4, display: "flex", maxHeight: "52vh", overflow: "auto" } },
+										// ⚠️ 这里**不能**用 fill()：它是 PluginSafetyTab 内部的局部助手，
+										// 主面板里出现 fill( 就是 0.5.59 那次「整块空白」事故的根因
+										// （tests/test-ui-contract.mjs ⑨ 与 test-client-scope.mjs ★★ 都把这条钉死了）。
+										// 这里用最朴素的字符串替换，语义与 fill 的两个占位符一致。
+										el("div", { style: { fontSize: 12, fontWeight: 500 } },
+											t("linksTitle").replace("{n}", String(linksPanelData.count ?? 0)).replace("{ready}", String(linksPanelData.readyCount ?? 0))),
+										(Array.isArray(linksPanelData.items) ? linksPanelData.items : []).length === 0
+											? el("p", { className: styles.status }, t("linksPanelEmpty"))
+											: null,
+										(Array.isArray(linksPanelData.items) ? linksPanelData.items : []).map((x) => el("div", { key: "lp-" + x.packageName, title: x.note ?? undefined, style: { fontSize: 12, opacity: .9, wordBreak: "break-all" } },
+											(x.ready === true ? "✓ " : "• ") + x.packageName + (x.version ? " v" + x.version : "")
+												+ (x.target ? "  → " + x.target : "")
+												+ (Array.isArray(x.missingDeps) && x.missingDeps.length > 0 ? "  · 缺依赖 " + x.missingDeps.length : "")
+												+ (Array.isArray(x.missingPeers) && x.missingPeers.length > 0 ? "  · 缺 peer " + x.missingPeers.length : "")
+												+ (x.foreignPeers !== null && x.foreignPeers !== undefined && Array.isArray(x.foreignPeers) && x.foreignPeers.length > 0 ? "  · 异副本 " + x.foreignPeers.length : "")
+												+ (x.shims !== null && x.shims !== undefined ? "  · 垫片 " + String(x.shims.count ?? 0) : "")
+												+ (x.persisted !== null && x.persisted !== undefined && x.persisted.ok === false ? "  · 未持久化" : ""))))),
+							el("div", { className: styles.rowTop, style: { justifyContent: "flex-end", gap: 8, marginTop: 10 } },
+								el("button", { type: "button", className: styles.toolItem, "data-busy": linksPanelBusy ? "true" : "false", onClick: linksPanelLoad }, linksPanelBusy ? t("linksPanelLoading") : t("linksPanelReload")))))
 					: null,
 				gateOpen
 					? el("div", { className: styles.modalBackdrop, onClick: (event) => { if (event.target === event.currentTarget) setGateOpen(false); } },
@@ -4922,9 +5088,7 @@ function healthSignature(health) {
 								el("p", { className: styles.message }, t("compatGateHint")),
 								el("p", { className: styles.status, "data-pending": gatePendingCount > 0 ? "true" : undefined },
 									gatePendingCount > 0 ? t("gatePendingInfo").replace("{n}", String(gatePendingCount)) : t("gatePendingNone")),
-												el("p", { className: styles.status, "data-pending": gatePendingCount > 0 ? "true" : undefined },
-								gatePendingCount > 0 ? t("gatePendingInfo").replace("{n}", String(gatePendingCount)) : t("gatePendingNone")),
-							// 明细清单（2026-09-24 用户要求：面板要能看到是哪些插件，有列表数据）
+																			// 明细清单（2026-09-24 用户要求：面板要能看到是哪些插件，有列表数据）
 							gateRows !== null && gateRows.pendingCount + gateRows.adoptedCount > 0
 								? el("div", { style: { flexDirection: "column", gap: 6, display: "flex" } },
 									el("strong", { className: styles.name }, t("gateListPending").replace("{n}", String(gateRows.pendingCount))),
@@ -4947,9 +5111,17 @@ function healthSignature(health) {
 										: null,
 									gateRows.adoptedCount > 0
 										? el("div", { style: { flexDirection: "column", gap: 2, display: "flex" } },
-											el("strong", { className: styles.name }, t("gateListAdopted").replace("{n}", String(gateRows.adoptedCount))),
-											gateRows.adopted.slice(0, 8).map((r) => el("span", { key: "a-" + String(r.rowId), className: styles.status },
-												"✓ " + String(r.name) + (r.version ? "  v" + r.version : "") + (r.adoptedAt ? "  · " + gateTime(r.adoptedAt) : ""))))
+											// ★ 0.5.80：默认折叠，只留一行摘要（点开才列明细）—— 历史不该把当前态挤下去
+											el("button", {
+												type: "button",
+												className: styles.toggle,
+												onClick: () => setGateHistoryOpen((v) => !v),
+											}, (gateHistoryOpen ? t("gateHistoryHide") : t("gateHistoryShow").replace("{n}", String(gateRows.adoptedCount)))
+												+ "  ·  " + t("gateListAdopted").replace("{n}", String(gateRows.adoptedCount))),
+											gateHistoryOpen
+												? gateRows.adopted.map((r) => el("span", { key: "a-" + String(r.rowId), className: styles.status },
+													"✓ " + String(r.name) + (r.version ? "  v" + r.version : "") + (r.adoptedAt ? "  · " + gateTime(r.adoptedAt) : "")))
+												: null)
 										: null)
 								: null),
 							// 0.5.42 加法（用户点名）：右侧贴底的 Star 提示 —— 只加这一行 UI，
@@ -5339,7 +5511,7 @@ function healthSignature(health) {
 						const bw = e.currentTarget.offsetWidth || 96;
 						const bh = e.currentTarget.offsetHeight || 30;
 						const left = Math.max(8, Math.min(w - bw - 8, e.clientX - dragRef.current.grabX));
-						const top = Math.max(8, Math.min(h - bh - 8, e.clientY - dragRef.current.grabY));
+						const top = Math.max(64, Math.min(h - bh - 8, e.clientY - dragRef.current.grabY)); // ★ 64 = 标题栏安全区
 						setDragPos({ left, top });
 					},
 					onPointerUp: () => {
@@ -5372,13 +5544,14 @@ function healthSignature(health) {
 				}, t("toolbarLabel") + (toolbarOpen ? " ▾" : " ▸")),
 				toolbarOpen
 					? el("div", { className: styles.toolbarGroup, style: (dragPos ?? toolbarPos) !== null ? { left: (dragPos ?? toolbarPos).left, top: (dragPos ?? toolbarPos).top + 36, right: "auto" } : undefined },
-						el("button", {
-							type: "button",
-							className: styles.toolItem,
-							title: t("restartService"),
-							onClick: () => { restartServiceViaServer(setMessage); },
-						}, t("restartService")),
-						el("button", {
+						
+						hostedByShell ? null : el("button", { // ★ 0.5.84：桌面端（shell 托管）不显示；web 端保留且可用
+								type: "button",
+								className: styles.toolItem,
+								title: t("restartService"),
+								onClick: () => { restartServiceViaServer(setMessage); },
+							}, t("restartService")),
+							el("button", {
 							type: "button",
 							className: styles.toolItem,
 							"data-active": repoLandOn ? "true" : "false",
@@ -5414,6 +5587,16 @@ function healthSignature(health) {
 							"aria-label": t("sourcesBtn"),
 							onClick: openSources,
 						}, t("sourcesBtn")),
+						el("button", {
+							type: "button",
+							className: styles.toolItem,
+							"data-active": linksPanelOpen ? "true" : "false",
+							"data-busy": linksPanelBusy ? "true" : "false",
+							title: t("linksPanelTitle"),
+							"aria-label": t("linksBtn"),
+							// ★ 0.5.84（用户第 6 项）：打开时拉一次真实清单（与安全面板同一个只读接口）
+							onClick: () => setLinksPanelOpen((v) => { const next = !v; if (next) linksPanelLoad(); return next; }),
+						}, t("linksBtn") + (linksPanelData !== null && Array.isArray(linksPanelData.items) ? " " + linksPanelData.items.length : "")),
 						el("button", {
 							type: "button",
 							className: styles.toolItem,
@@ -6247,6 +6430,45 @@ function healthSignature(health) {
 			const [pinInput, setPinInput] = react.useState("");
 			const [pinNote, setPinNote] = react.useState(null);
 			const [allowAgent, setAllowAgent] = react.useState(false);
+			// ★ 0.5.84 加法（用户第 7 项）：磁盘体检 / 清理的状态与两个动作。
+			//   判据全在服务端（domain/disk-audit.js）：面板只展示服务端给的 level 与体积，
+			//   并且**必须**经过「先要计划（不带 confirm）→ 再确认（confirm:true）」两步。
+			const [diskAudit, setDiskAudit] = react.useState(null);
+			const [diskPlan, setDiskPlan] = react.useState(null);
+			const [diskBusy, setDiskBusy] = react.useState(false);
+			const [diskNote, setDiskNote] = react.useState(null);
+			const diskCheck = async () => {
+				if (diskBusy) return;
+				setDiskBusy(true); setDiskNote(null); setDiskPlan(null);
+				try {
+					const data = await call("/plugin-console/disk-audit"); // 只读：无 body ⇒ GET
+					setDiskAudit(data ?? null);
+					if (data !== null && data.ok === true) setDiskNote({ text: fill(t("diskSummary"), [["mb", String(data.totalMb ?? 0)], ["n", String((data.entries ?? []).length)], ["safe", String(data.safeMb ?? 0)], ["reclaim", String(data.reclaimableMb ?? 0)]]) + (data.truncated === true ? "（统计已截断）" : ""), level: null });
+				} catch (error) { setDiskNote({ text: String((error && error.message) || error), level: "error" }); }
+				finally { setDiskBusy(false); }
+			};
+			// confirm=false ⇒ 服务端**只回计划**（一个文件都不动）；confirm=true 才会真删。
+			const diskCleanup = async (confirm) => {
+				if (diskBusy) return;
+				setDiskBusy(true); setDiskNote(null);
+				try {
+					const ids = confirm && diskPlan !== null && Array.isArray(diskPlan.ids) && diskPlan.ids.length > 0
+						? diskPlan.ids
+						: (diskAudit !== null && Array.isArray(diskAudit.entries) ? diskAudit.entries.filter((x) => x.level === "safe").map((x) => x.id) : []);
+					const data = await call("/plugin-console/disk-cleanup", { ids: ids, confirm: confirm === true });
+					if (data !== null && data.needsConfirm === true) {
+						// 第一步的回报：把计划（哪些项 / 能省多少）留下，等用户点「确认清理」
+						const plan = data.plan ?? {};
+						setDiskPlan({ ids: (plan.plan ?? []).map((p) => p.id), freedMb: plan.freedMb ?? 0 });
+						setDiskNote({ text: fill(t("diskPlanReady"), [["n", String((plan.plan ?? []).length)], ["mb", String(plan.freedMb ?? 0)]]) + ((plan.refused ?? []).length === 0 ? "" : " · 已拒绝 " + plan.refused.length + " 项"), level: null });
+					} else if (data !== null) {
+						setDiskPlan(null);
+						setDiskNote({ text: String(data.note ?? t("diskDone")), level: data.ok === true ? null : "error" });
+						await diskCheck(); // 删完重新体检，让面板显示真实的新体积
+					}
+				} catch (error) { setDiskNote({ text: String((error && error.message) || error), level: "error" }); }
+				finally { setDiskBusy(false); }
+			};
 			const load = async () => {
 				try {
 					// link 清单：独立 try（拿不到时这块显示"读取失败"，绝不静默）
@@ -6496,6 +6718,28 @@ function healthSignature(health) {
 					lockFix !== null && lockFix.ok !== true && Array.isArray(lockFix.problems) && lockFix.problems.length > 0
 						? lockFix.problems.map((p) => p.hint).join("\n")
 						: undefined),
+				// ★ 0.5.84 加法（用户第 7 项）：`<DSH_HOME>/plugin-console` 的**磁盘体检 + 显式确认后清理**。
+				//   两段式（不让人闭眼点）：先「磁盘体检」（GET /disk-audit，纯只读）→ 再「清理安全项」
+				//   （POST /disk-cleanup，**不带 confirm** ⇒ 服务端只回计划）→ 最后「确认清理」（confirm:true）。
+				//   哪些能删、哪些绝不能删**全由服务端判**（domain/disk-audit.js）：真机实测最大的 2.1 GB
+				//   恰恰是当前回滚点指向的备份，面板不自己按体积猜。
+				row("trash", t("diskTitle"),
+					diskAudit === null ? t("diskDesc")
+						: diskAudit.ok !== true ? t("diskFailed") + "：" + String(diskAudit.error ?? "-")
+							: fill(t("diskSummary"), [["mb", String(diskAudit.totalMb ?? 0)], ["n", String((diskAudit.entries ?? []).length)], ["safe", String(diskAudit.safeMb ?? 0)], ["reclaim", String(diskAudit.reclaimableMb ?? 0)]]),
+					el("div", { style: { display: "flex", gap: "8px", flex: "0 0 auto" } },
+						el("button", { type: "button", className: styles.toggle, disabled: busy || diskBusy, title: t("diskDesc"), onClick: diskCheck }, t("diskCheckBtn")),
+						diskAudit !== null && diskAudit.ok === true && (diskAudit.safeBytes ?? 0) > 0
+							? el("button", { type: "button", className: styles.toggle, disabled: busy || diskBusy, title: t("diskSafeHint"), onClick: () => diskCleanup(false) }, t("diskCleanupBtn"))
+							: null,
+						diskPlan !== null
+							? el("button", { type: "button", className: styles.toggle, disabled: busy || diskBusy, title: t("diskConfirmHint"), onClick: () => diskCleanup(true) }, fill(t("diskConfirmBtn"), [["mb", String(diskPlan.freedMb ?? 0)]]))
+							: null),
+					diskAudit !== null && diskAudit.ok === true && Array.isArray(diskAudit.entries)
+						? diskAudit.entries.filter((x) => x.level !== "protected").slice(0, 6)
+							.map((x) => (x.level === "safe" ? "✓ " : "! ") + x.name + "  " + x.mb + " MB").join("\n") || t("diskNoCandidate")
+						: undefined),
+				diskNote === null ? null : el("div", { style: { fontSize: "12px", padding: "0 12px 6px", color: diskNote.level === "error" ? "#d33" : "inherit", wordBreak: "break-word" } }, diskNote.text),
 				row("pulse", t("safetyAdaptTitle"), t("safetyAdaptDesc"), el("div", { style: { display: "flex", gap: "8px", flex: "0 0 auto" } },
 					el("button", { type: "button", className: styles.toggle, disabled: busy, onClick: () => preflight(false) }, t("fwPreflightBtn")),
 					el("button", { type: "button", className: styles.toggle, disabled: busy, onClick: () => preflight(true) }, t("fwPreflightPatch")))),