@noob-stupid/dsh-plugin-console 0.5.77 → 0.5.87

package/lib/client.js

@@ -111,6 +111,20 @@ window.__ModuleLoader__.load({
 			safetyLockRepairPartial: "重建后仍有差距，见下方问题",
 			safetyLockNoRebuild: "当前不需要重建",
 			safetyLockCheckBtn: "体检",
+			// 0.5.84 加法（用户第 7 项）：磁盘体检 / 两步清理
+			diskTitle: "磁盘占用（plugin-console）",
+			diskDesc: "只读体检：这个目录谁占了多少、哪些能安全清理、哪些绝不能动（当前回滚点指向的备份一律不许删）",
+			diskCheckBtn: "磁盘体检",
+			diskSummary: "共 {mb} MB（{n} 项）· 可直接清理约 {safe} MB · 可清理（含取舍）约 {reclaim} MB",
+			diskSafeHint: "只清理「安全」级（日志 / 旧残留 / 状态 .bak）：不影响任何功能",
+			diskConfirmHint: "确认清理：这一步才会真的删（服务端只删体检白名单里的条目）",
+			diskCleanupBtn: "清理安全项",
+			diskConfirmBtn: "确认清理（约 {mb} MB）",
+			diskPlanReady: "将清理 {n} 项、释放约 {mb} MB —— 确认后才会真的删",
+			diskConfirmBtn2: "确认清理",
+			diskDone: "已清理",
+			diskFailed: "磁盘体检失败",
+			diskNoCandidate: "没有可安全清理的条目（大头通常是当前回滚点指向的框架备份，不能删）",
 			safetyLockRepairBtn: "重建 lock（显式）",
 			// 2026-09-27 加法：安装结果旁的「建议动作」执行框（短句进面板，长解释进悬浮 title）
 			actionBoxTitle: "建议动作",
@@ -127,6 +141,32 @@ window.__ModuleLoader__.load({
 			linksToggleBtn: "开发式链接（link）明细",
 			linksToggleSummary: "开发式链接（link）：共 {n} 个，自足 {ready} 个",
 			linksToggleTitle: "展开/收起 link 明细（默认收起）",
+			// 0.5.84 加法（用户第 6 项）：功能包工具栏里的 link 入口 + 它打开的那块面板
+			linksBtn: "link",
+			linksPanelTitle: "开发式链接（link:）—— 直接展示 /plugin-console/links 的只读清单：指向哪、目标还在不在、依赖/peer 齐不齐、垫片在不在",
+			linksPanelLoading: "正在读取…",
+			linksPanelReload: "重新读取",
+			linksPanelEmpty: "没有 link: 钉住的插件（这份清单只列开发式链接）",
+			// 0.5.87 加法（用户 2026-10-18）：link 面板从「只读清单」升级为「可操作」——
+			//   顶部选开发区 + 两段式钉住；每行按服务端结论给动作（缺依赖 / 缺 peer / 取消钉住）。
+			linksDevRootLabel: "开发区：",
+			linksDevRootPick: "选择已登记的开发区…",
+			linksDirPlaceholder: "要钉住的目录（绝对路径，必须在某个已登记开发区里）",
+			linksBrowse: "浏览…",
+			linksPinPlanBtn: "钉住",
+			linksPinPlanTitle: "{p} 将被钉成 link: 依赖，操作如下（还没动任何东西）",
+			linksPinConfirmBtn: "确认钉住",
+			linksCancel: "取消",
+			linksPinnedDone: "已钉住 {p}",
+			linksMtime: "改动于",
+			linksMtimeHint: "「改动于」= 目标目录本身或它直接下一层（不含 node_modules / .git）里最近的修改时间；更深的文件改动不会体现在这里",
+			linksRepairDeps: "补齐依赖",
+			linksRepairShims: "造垫片",
+			linksRepairDone: "已补齐",
+			linksUnpinBtn: "取消钉住",
+			linksUnpinConfirmBtn: "确认取消钉住",
+			linksUnpinDone: "已取消钉住",
+			linksBusyWorking: "处理中…",
 			devRootsTitle: "开发区根（只有这些根里的目录能钉住）",
 			devRootsNone: "（未登记）",
 			devRootAddPlaceholder: "注册新的开发区根（绝对路径，例如 D:\\my-plugins）",
@@ -251,6 +291,8 @@ window.__ModuleLoader__.load({
 			gatePendingNone: "当前没有待适配的行",
 			gateListPending: "待适配明细（{n} 行）",
 			gateListAdopted: "已适配解锁（{n} 行，历史上被拦过、现已放行）",
+			gateHistoryShow: "展开查看 {n} 条历史",
+			gateHistoryHide: "收起历史",
 			gateListMore: "展开全部 {n} 行",
 			gateListFold: "收起列表",
 			gateRowReason: "原因：{reason}",
@@ -317,6 +359,8 @@ window.__ModuleLoader__.load({
 			// 0.5.38 加法：三处没齐备（清单 / lock / 挂载行）时**绝不**说"已安装并启用"——
 			// 那种状态下任何一次 pnpm 操作或重启都会把它清掉（真机 dshmarket 现场）。
 			installedNotPersisted: "⚠ 已装上但未持久化（重启/重装会消失）",
+			// 0.5.84 判据降噪：只是「口径不一致」时换这句 —— 不再拿"会消失"吓人
+			installedNotPersistedWarn: "已装上；清单 / lock 口径还没对齐（不影响重启后加载，可顺手钉一下）",
 			installNote: "HMR 正在生效；若插件带界面，请刷新页面",
 			bundleNote: "该包是 bundle 层插件（如皮肤合集），重启 DSH 服务后生效",
 			// ── 安装诊断短句（2026-09-26 加法）：面板只放短句；解释性长文留在服务端字段里，
@@ -324,6 +368,8 @@ window.__ModuleLoader__.load({
 			diagCardTitle: "安装诊断",
 			// 0.5.38 加法：持久化判据（服务端 domain/persist.js）——三处任一没就位就出这张卡
 			diagNotPersisted: "未持久化：清单 / lock / 挂载行有缺口",
+			// 0.5.84 判据降噪：降级后的短句（可折叠提示，不再报红）
+			diagPersistDowngraded: "口径不一致（不影响重启后加载）",
 			// 分隔符也进字典：英文界面用半角标点，避免中文全角标点混进英文句子
 			diagColon: "：",
 			diagSemi: "；",
@@ -419,6 +465,7 @@ window.__ModuleLoader__.load({
 			stageConfiguring: "写入启用配置",
 			stageRepairing: "本地 AI 接管安装中…",
 			restartService: "重启服务（官方路径）",
+			restartHostedNotice: "本实例由桌面端外壳托管 —— 请在桌面端内重启：完全退出 DeepSeek Harness 再打开（控制台不自行 kill / spawn，以免与宿主争端口）。",
 			restarting: "正在按官方路径处理重启请求…",
 			autoReload: "页面即将自动刷新…",
 			aiRepaired: "本地 AI 已接管并完成修复，请刷新页面查看",
@@ -730,6 +777,19 @@ window.__ModuleLoader__.load({
 			safetyLockRepairPartial: "Still out of sync after the rebuild — see the problems below",
 			safetyLockNoRebuild: "No rebuild needed right now",
 			safetyLockCheckBtn: "Check",
+			diskTitle: "Disk usage (plugin-console)",
+			diskDesc: "Read-only audit: what fills this directory, what can be cleaned safely, and what must never be touched (the backup the current rollback point refers to is off limits)",
+			diskCheckBtn: "Audit disk",
+			diskSummary: "{mb} MB total ({n} entries) - about {safe} MB safely cleanable, about {reclaim} MB cleanable with a tradeoff",
+			diskSafeHint: "Clean only the safe tier (logs / old residue / state .bak files): no functionality is affected",
+			diskConfirmHint: "Confirm cleanup: this is the step that actually deletes (the server only deletes entries from the audit whitelist)",
+			diskCleanupBtn: "Clean safe items",
+			diskConfirmBtn: "Confirm cleanup (~{mb} MB)",
+			diskPlanReady: "Will remove {n} items, about {mb} MB freed - nothing is deleted until you confirm",
+			diskConfirmBtn2: "Confirm cleanup",
+			diskDone: "Cleaned",
+			diskFailed: "Disk audit failed",
+			diskNoCandidate: "Nothing is safely cleanable (the largest item is usually the framework backup the current rollback point refers to, which must not be deleted)",
 			safetyLockRepairBtn: "Rebuild lock (explicit)",
 			actionBoxTitle: "Suggested action",
 			actionPinLabel: "Pin this dependency (record as link:)",
@@ -745,6 +805,29 @@ window.__ModuleLoader__.load({
 			linksToggleBtn: "Dev link (link:) details",
 			linksToggleSummary: "Dev links (link:): {n} total, {ready} self-sufficient",
 			linksToggleTitle: "Expand/collapse link details (collapsed by default)",
+			linksBtn: "link",
+			linksPanelTitle: "Dev links (link:) - the read-only list from /plugin-console/links: where it points, whether the target still exists, whether deps/peers are complete, and whether shims are in place",
+			linksPanelLoading: "Reading...",
+			linksPanelReload: "Reload",
+			linksPanelEmpty: "No plugin is pinned with link: (this list only covers dev links)",
+			linksDevRootLabel: "Dev root:",
+			linksDevRootPick: "Pick a registered dev root...",
+			linksDirPlaceholder: "Directory to pin (absolute path, must be inside a registered dev root)",
+			linksBrowse: "Browse...",
+			linksPinPlanBtn: "Pin",
+			linksPinPlanTitle: "{p} will be pinned as a link: dependency - steps below (nothing has changed yet)",
+			linksPinConfirmBtn: "Confirm pin",
+			linksCancel: "Cancel",
+			linksPinnedDone: "Pinned {p}",
+			linksMtime: "changed",
+			linksMtimeHint: "'changed' = the newest mtime of the target directory itself or its direct children (node_modules / .git excluded); deeper file edits do not show up here",
+			linksRepairDeps: "Install deps",
+			linksRepairShims: "Create shims",
+			linksRepairDone: "Repaired",
+			linksUnpinBtn: "Unpin",
+			linksUnpinConfirmBtn: "Confirm unpin",
+			linksUnpinDone: "Unpinned",
+			linksBusyWorking: "Working...",
 			devRootsTitle: "Dev roots (only directories inside these can be pinned)",
 			devRootsNone: "(none registered)",
 			devRootAddPlaceholder: "Register a dev root (absolute path, e.g. D:\\my-plugins)",
@@ -930,12 +1013,14 @@ window.__ModuleLoader__.load({
 			recentFailures: "Recent install failures",
 			installed: "Installed and enabled",
 			installedNotPersisted: "⚠ Installed but NOT persisted (it disappears on restart/reinstall)",
+			installedNotPersistedWarn: "Installed; manifest / lock are not fully aligned (this does NOT affect loading after a restart - pin it whenever convenient)",
 			installNote: "HMR is applying; refresh the page if the plugin ships UI",
 			bundleNote: "This package is a bundle-layer plugin (e.g. skin packs); restart the DSH service to activate it",
 			// ── install-diagnosis one-liners (2026-09-26, additive): the panel shows short sentences only;
 			// the long server-side explanations go to the title tooltip, never into the panel body ──
 			diagCardTitle: "Install diagnosis",
 			diagNotPersisted: "Not persisted: a gap remains in manifest / lock / mount row",
+			diagPersistDowngraded: "Not aligned (this does not affect loading after a restart)",
 			// separators live in the dictionary too: English uses half-width punctuation
 			diagColon: ": ",
 			diagSemi: "; ",
@@ -1027,6 +1112,7 @@ window.__ModuleLoader__.load({
 			stageConfiguring: "Writing enable config",
 			stageRepairing: "Local AI is taking over the install…",
 			restartService: "Restart service (official path)",
+			restartHostedNotice: "This instance is hosted by the desktop shell - restart it there by fully quitting and reopening DeepSeek Harness.",
 			restarting: "Handling the restart request via the official path…",
 			autoReload: "Page will auto-reload…",
 			aiRepaired: "Local AI took over and finished the repair; refresh the page",
@@ -1947,6 +2033,40 @@ function healthSignature(health) {
 				return false;
 			}
 		}
+		// ★★ 0.5.87 加法：宿主**真的**有没有系统目录对话框？★★
+		// 判据只有一条、且必须是**正面证据**：桌面端外壳通过 contextBridge 注入的
+		//   `window.__DSH_DIRECTORY_PICKER__.pick()`（Electron 主进程 dialog.showOpenDialog）。
+		// 为什么不能"先摆一个按钮、点了再说"：用户 2026-10-18 的话是「点了没反应」算缺陷 ——
+		//   web 端（浏览器直接打开控制台）没有这个桥，那种按钮点下去只会抛个没意义的错。
+		// 所以：有桥才渲染「浏览…」，没有就**不渲染**（不是灰掉，是根本不出现）。
+		// 放在模块级（不放组件里）：与 skippedSignature / healthSignature 同一条纪律 ——
+		//   主面板不许依赖"只属于某个子组件"的局部东西。
+		let directoryPicker = null;
+		function detectDirectoryPicker() {
+			try {
+				const bridge = typeof globalThis === "undefined" ? null : globalThis.__DSH_DIRECTORY_PICKER__;
+				if (bridge !== null && typeof bridge === "object" && typeof bridge.pick === "function") return () => bridge.pick();
+			} catch {}
+			return null;
+		}
+		/** 目标目录的修改时间：ISO → 本地可读。解析不了就原样回显 —— 绝不编造一个时间。 */
+		function formatMtimeText(iso) {
+			try {
+				const when = new Date(String(iso));
+				if (Number.isNaN(when.getTime())) return String(iso);
+				return when.toLocaleString();
+			} catch { return String(iso); }
+		}
+		/** 从下拉里选了一个开发区 → 补成"待续写"的草稿路径。
+		 *  为什么：**根本身不能当钉住目标**（服务端刻意不允许，领域判据没放宽），
+		 *  所以直接塞根本身会让人点了必被拒。补上分隔符，接着写根里的那个插件目录即可。
+		 *  分隔符按路径自身风格推断（Windows 的 `\` / 其它 `/`）—— 不猜平台，只看字符串。 */
+		function devRootDraft(root) {
+			const text = String(root ?? "");
+			if (text === "") return "";
+			if (/[\\/]$/u.test(text)) return text;
+			return text + (text.includes("\\") ? "\\" : "/");
+		}
 		function PluginConsoleTab({ t, section = null }) {
 			const [state, setState] = react.useState({ status: "loading" });
 			// ★ 0.5.59：健康摘要**可关掉**（用户 2026-10-17「这个提示可以关掉」）。
@@ -2311,6 +2431,128 @@ function healthSignature(health) {
 			});
 			// 门控面板（用户要求：总开关收进「功能包」里的 [门控] 按钮，不再占已安装列表的表头）
 			const [gateOpen, setGateOpen] = react.useState(false);
+			// ★ 0.5.84 加法（用户第 6 项）：功能包工具栏里的 **link 入口**。
+			//   过去开发式链接（link:）清单只长在「升级安全」面板**内部**的折叠块里 —— 得先找到那个入口、
+			//   再展开才看得到；用户要的是从工具栏直接跳到那份数据。数据源与判据与安全面板**完全同一份**
+			//   （`GET /plugin-console/links`，纯只读，判据全在 domain/link-inventory.js）；
+			//   这里只负责如实展示，不推断、不美化，也不自己算"自足/缺什么"。
+			//   安全面板里那块折叠展示**保留不动**（老入口照旧），这是加法。
+			const [linksPanelOpen, setLinksPanelOpen] = react.useState(false);
+			const [linksPanelData, setLinksPanelData] = react.useState(null);
+			const [linksPanelBusy, setLinksPanelBusy] = react.useState(false);
+			const linksPanelLoad = async () => {
+				if (linksPanelBusy) return;
+				setLinksPanelBusy(true);
+				try {
+					const data = await call("/plugin-console/links");
+					if (data !== null) setLinksPanelData(data);
+				} catch (error) {
+					// 拿不到就如实说（不静默成"没有 link 依赖"）
+					setLinksPanelData({ ok: false, items: [], count: 0, readyCount: 0, error: (error && error.message) || t("safetySwitchFailed") });
+				} finally { setLinksPanelBusy(false); }
+			};
+			// ★★ 0.5.87 加法：把 link 面板从「只读清单」升级为「可操作」★★
+			// 边界（写死）：**判据全部在服务端**（/links 给 ready / 缺什么 / 目标 / 改动时间），
+			//   这里只做三件事：选开发区 → 两段式钉住（先只读计划、确认后才 apply）、
+			//   行内动作 → 调对应写接口 → 重新读取。客户端不重算任何"缺什么 / 能不能补"。
+			const [linksDevRoots, setLinksDevRoots] = react.useState([]);
+			const [linksDevRootsNote, setLinksDevRootsNote] = react.useState(null);
+			const [linksDir, setLinksDir] = react.useState("");
+			const [linksPinPlan, setLinksPinPlan] = react.useState(null);
+			const [linksPinBusy, setLinksPinBusy] = react.useState(false);
+			const [linksRowBusy, setLinksRowBusy] = react.useState(null);
+			const [linksRowNote, setLinksRowNote] = react.useState({});
+			const [linksUnpinPlan, setLinksUnpinPlan] = react.useState(null);
+			// 「浏览…」只在宿主**确实**提供系统目录对话框时才存在（见模块级 detectDirectoryPicker）
+			const linksCanBrowse = typeof directoryPicker === "function";
+			/** 已登记开发区（来自 /dev-roots 的只读 list 分支；登记表坏了要如实说，不静默成空）。 */
+			const linksDevRootsLoad = async () => {
+				try {
+					const data = await call("/plugin-console/dev-roots", { action: "list" });
+					setLinksDevRoots(Array.isArray(data && data.roots) ? data.roots : []);
+					setLinksDevRootsNote(data && Array.isArray(data.warnings) && data.warnings.length > 0 ? data.warnings.join("；") : null);
+				} catch (error) {
+					setLinksDevRoots([]);
+					setLinksDevRootsNote((error && error.message) || t("safetySwitchFailed"));
+				}
+			};
+			const linksBrowse = async () => {
+				if (!linksCanBrowse) return;
+				try {
+					const picked = await directoryPicker();
+					if (typeof picked === "string" && picked !== "") setLinksDir(picked);
+				} catch (error) {
+					setLinksPinPlan({ ok: false, applied: false, error: (error && error.message) || t("safetySwitchFailed") });
+				}
+			};
+			/** 第一段：**只读计划**（服务端 plan 段，一个字节都不写）——先让人看清会发生什么。 */
+			const linksPinPlanLoad = async () => {
+				const dir = linksDir.trim();
+				if (dir === "" || linksPinBusy) return;
+				setLinksPinBusy(true);
+				setLinksPinPlan(null);
+				try {
+					const data = await call("/plugin-console/pin-dev-dir", { dir });
+					setLinksPinPlan({ ok: true, applied: false, plan: data });
+				} catch (error) {
+					setLinksPinPlan({ ok: false, applied: false, error: (error && error.message) || t("safetySwitchFailed") });
+				} finally { setLinksPinBusy(false); }
+			};
+			/** 第二段：用户点了「确认钉住」才真写（前端绝不跳过确认去调 apply）。 */
+			const linksPinConfirm = async () => {
+				const dir = linksDir.trim();
+				if (dir === "" || linksPinBusy) return;
+				setLinksPinBusy(true);
+				try {
+					const data = await call("/plugin-console/pin-dev-dir", { dir, confirm: true });
+					setLinksPinPlan({ ok: true, applied: true, plan: data });
+					await linksPanelLoad();
+				} catch (error) {
+					setLinksPinPlan({ ok: false, applied: false, error: (error && error.message) || t("safetySwitchFailed") });
+				} finally { setLinksPinBusy(false); }
+			};
+			/** 行内动作：deps=补齐依赖 / shims=造垫片。成败都按服务端 note 原话展示。 */
+			const linksRowRun = async (item, kind) => {
+				if (linksRowBusy !== null) return;
+				const name = String(item.packageName);
+				setLinksRowBusy(name + "|" + kind);
+				setLinksRowNote((prev) => ({ ...prev, [name]: t("linksBusyWorking") }));
+				try {
+					const data = await call("/plugin-console/link-repair", { packageName: name, kind });
+					setLinksRowNote((prev) => ({ ...prev, [name]: (data && data.note) || t("linksRepairDone") }));
+					await linksPanelLoad();
+				} catch (error) {
+					setLinksRowNote((prev) => ({ ...prev, [name]: t("safetySwitchFailed") + "：" + ((error && error.message) || "") }));
+				} finally { setLinksRowBusy(null); }
+			};
+			/** 取消钉住的第一段：只读计划（会明说"它还在 bundles 里"这类后果）。 */
+			const linksUnpinPlanLoad = async (item) => {
+				if (linksRowBusy !== null) return;
+				const name = String(item.packageName);
+				setLinksRowBusy(name + "|unpin-plan");
+				setLinksUnpinPlan(null);
+				try {
+					const data = await call("/plugin-console/unpin-dev-dir", { packageName: name });
+					setLinksUnpinPlan({ ok: true, packageName: name, plan: data });
+				} catch (error) {
+					setLinksUnpinPlan({ ok: false, packageName: name, error: (error && error.message) || t("safetySwitchFailed") });
+				} finally { setLinksRowBusy(null); }
+			};
+			const linksUnpinConfirm = async (item) => {
+				if (linksRowBusy !== null) return;
+				const name = String(item.packageName);
+				setLinksRowBusy(name + "|unpin");
+				try {
+					const data = await call("/plugin-console/unpin-dev-dir", { packageName: name, confirm: true });
+					setLinksUnpinPlan(null);
+					setLinksRowNote((prev) => ({ ...prev, [name]: (data && data.note) || t("linksUnpinDone") }));
+					await linksPanelLoad();
+				} catch (error) {
+					setLinksUnpinPlan({ ok: false, packageName: name, error: (error && error.message) || t("safetySwitchFailed") });
+				} finally { setLinksRowBusy(null); }
+			};
+			// ★ 0.5.80：历史解锁记录默认折叠（用户：新的应覆盖旧的，别一直铺满）
+			const [gateHistoryOpen, setGateHistoryOpen] = react.useState(false);
 			// 功能包位置:长按拖动,持久化 localStorage(每次打开沿用上次位置)
 			const [toolbarPos, setToolbarPos] = react.useState(() => {
 				try {
@@ -3473,7 +3715,13 @@ function healthSignature(health) {
 										// 0.5.38 加法（用户诉求「下载下来就不用 lock、重启也不会消失」）：
 										// 三处没齐备时**绝不报"已安装并启用"** —— 说清它还缺什么、后果是什么，
 										// 并把服务端下发的「一键钉住」执行框带出来（下面的 suggestedAction 分支）。
-										setMessage(t("installedNotPersisted") + "：" + data.packageName + (typeof data.persistNote === "string" && data.persistNote !== "" ? "。" + data.persistNote : "") + diagMessage(data));
+										// 0.5.84 降噪：只有「会丢插件」那一档才用"重启/重装会消失"这句；只是口径
+										// 不一致（lock 形态、清单与磁盘版本）时用软一点的措辞，原因照样在诊断行里。
+										const sev = data.persist !== null && data.persist !== undefined && typeof data.persist.severity === "object" && data.persist.severity !== null ? data.persist.severity : null;
+										const criticalGap = sev === null ? true : sev.level === "critical";
+										const head = criticalGap ? t("installedNotPersisted") : t("installedNotPersistedWarn");
+										const detail = typeof data.persistNote === "string" && data.persistNote !== "" ? data.persistNote : (typeof sev?.note === "string" ? sev.note : "");
+										setMessage(head + "：" + data.packageName + (detail !== "" ? "。" + detail : "") + diagMessage(data));
 										setReloadHint(true);
 									} else {
 										setMessage(t("installed") + "：" + data.packageName + "（" + (data.entryId ?? "") + "）。" + (data.curlNote ?? (data.bundle ? t("bundleNote") : t("installNote"))) + (data.bundleNote ? "。" + data.bundleNote : "") + (data.lockNote ? "。⚠️ " + data.lockNote : "") + (data.depNote ? "。" + data.depNote : "") + diagMessage(data));
@@ -3624,15 +3872,27 @@ function healthSignature(health) {
 						title: channelNotes.join("\n"),
 					});
 				}
-				// ⑤ 持久化判据（0.5.38 加法，服务端 domain/persist.js：{ missing, actual, note }）：
-				//    三处（清单 spec / pnpm-lock.yaml 条目 / 挂载行）任一没就位 → error 级诊断行，
+				// ⑤ 持久化判据（0.5.38 加法，服务端 domain/persist.js：{ missing, actual, note, severity }）：
+				//    三处（清单 spec / pnpm-lock.yaml 条目 / 挂载行）任一没就位 → 诊断行，
 				//    完整缺口清单挂 title。**装成功但没钉住**的作业从此不会只显示"已安装并启用"。
+				// ★ 0.5.84 判据降噪（用户 2026-10 反馈：红字太多，真要紧的那条被淹了）：
+				//   服务端 persistSeverity() 已把每个缺口分成「会丢插件 / 只是口径不一致」两档，
+				//   这里**只认那一份结论**，不自己重判：
+				//     · critical（清单里没有它 / 重启后挂不上）→ error 级（红），并给完整缺口清单；
+				//     · warn（lock 形态/目标、清单形态与磁盘版本不一致）→ warn 级（可折叠提示）+
+				//       明说"不影响重启后加载"，不再拿红字吓人。
+				//   老服务端没有 severity 字段 → 按 critical 处理（保持 0.5.38 以来的既有行为，不静默降级）。
 				if (view.status === "done" && view.persisted === false) {
+					const severity = view.persist !== null && view.persist !== undefined && typeof view.persist.severity === "object" && view.persist.severity !== null ? view.persist.severity : null;
+					const critical = severity === null ? true : severity.level === "critical";
+					const missingText = Array.isArray(view.persist?.missing) && view.persist.missing.length > 0 ? t("diagColon") + view.persist.missing.join(" / ") : "";
+					const longText = typeof view.persistNote === "string" && view.persistNote !== "" ? view.persistNote
+						: (typeof view.persist?.note === "string" ? view.persist.note : null);
 					lines.push({
 						key: "persist",
-						text: t("diagNotPersisted") + (Array.isArray(view.persist?.missing) && view.persist.missing.length > 0 ? t("diagColon") + view.persist.missing.join(" / ") : ""),
-						level: "error",
-						title: typeof view.persistNote === "string" && view.persistNote !== "" ? view.persistNote : (typeof view.persist?.note === "string" ? view.persist.note : null),
+						text: critical ? t("diagNotPersisted") + missingText : t("diagPersistDowngraded") + missingText,
+						level: critical ? "error" : "warn",
+						title: !critical && typeof severity?.note === "string" && severity.note !== "" ? severity.note : longText,
 					});
 				}
 				return lines;
@@ -3821,7 +4081,7 @@ function healthSignature(health) {
 			};
 			// subdir 用于「从这个子目录安装」（0.5.47 加法）：服务端按它去读 <subdir>/package.json、
 			// 稀疏取该子目录源码、再按既有本地目录来源（link:）装。为空时请求体形状与改动前逐字相同。
-			const startJob = (repo, packageName, source = "github", kind = "plugin", update = false, subdir = null) => {
+			const startJob = (repo, packageName, source = "github", kind = "plugin", update = false, subdir = null, version = null) => {
 				// 防并发（与 addLocal 一致）：已有安装/更新进行中时忽略新点击（更新按钮此前可绕过，
 				// 反复点击会产生几十个并发任务装同一插件）
 				// 只拦**同一个目标**：不同插件可以并行更新（服务端是作业模型，天然支持）
@@ -3836,6 +4096,9 @@ function healthSignature(health) {
 				setRestartHint(false);
 				setMessage(null);
 				const body = { repo: repo ?? "", packageName, source, kind, update };
+			// ★ 0.5.81（用户 2026-10-18）：目标版本必须传下去 —— 不带版本时 pnpm 按 latest 把旧版本原地重装，
+		//   表现就是"更新了、刷新后还是老版本"。null/空串一律不带（行为与改动前逐字相同）。
+		if (typeof version === "string" && version !== "") body.version = version;
 				if (subdir !== null && subdir !== undefined && String(subdir) !== "") body.subdir = String(subdir);
 				call("/plugin-console/install", body).then(
 					(data) => {
@@ -4121,7 +4384,8 @@ function healthSignature(health) {
 														type: "button",
 														className: styles.toggle,
 														disabled: installing === entry.moduleName,
-														onClick: () => startJob("", entry.moduleName, "github", "plugin", true),
+														// ★ 0.5.81：把服务端算出的目标版本一起传下去（传 null 时行为与改动前逐字相同）
+												onClick: () => startJob("", entry.moduleName, "github", "plugin", true, null, updateCheck.target ?? updateCheck.latest ?? null),
 													}, installing === entry.moduleName ? t("installing") : (entry.pendingCompat === true ? t("updateAndAdapt") : t("updateNow")))),
 												Array.isArray(updateCheck.depsOutdated) && updateCheck.depsOutdated.length > 0
 													? el("p", { className: styles.status, "data-error": "true" },
@@ -4193,13 +4457,14 @@ function healthSignature(health) {
 								el("button", {
 									type: "button",
 									className: styles.toggle,
+									// ★ 强制启用且未运行 ⇒ 这个开关本身是空操作（patch.js#enableEntry 直接 changed:false），藏起来
 									disabled: !entry.toggleable || busy === entry.entryId, // ★ 待适配不再禁用启用（用户 2026-10-18）：启用=确认启用，服务端会把它标为已采纳
 									// 0.5.34：结论已被当前判据撤回的行不再显示「待适配」（旧判据的误报不许当事实展示）
 									title: entry.pendingCompat === true ? (entry.compatRescinded === true ? t("compatRescindedHint") : t("pendingCompatHint")) : undefined,
 									onClick: () => toggle(entry, !entry.enabled),
 								}, busy === entry.entryId ? t("loadingPhase") : (entry.pendingCompat === true ? (entry.compatRescinded === true ? t("compatRescindedTag") : t("pendingCompatTag")) : t(entry.enabled ? "off" : "on"))),
 								// ★ 0.5.76：补丁写了强制开启但运行时没起来 ⇒ 给一个撤销覆盖的入口
-								entry.forcedNotLoaded === true ? el("button", {
+								entry.userForced === true ? el("button", {
 									type: "button",
 									className: styles.toggle,
 									title: t("revokeForceHint"),
@@ -4924,7 +5189,122 @@ function healthSignature(health) {
 								el("button", { type: "button", className: styles.toggle, onClick: fwStatusRefresh }, t("fwPanelRefreshStatus")),
 								el("button", { type: "button", className: styles.toggle, disabled: fwCheckBusy, onClick: () => fwCheckRefresh(true) }, fwCheckBusy ? t("fwPanelChecking") : t("fwPanelRecheck"))),
 							el("div", { className: styles.rowTop },
-								el("button", { type: "button", className: styles.toggle, onClick: () => { restartServiceViaServer(setMessage); } }, t("restartService")))))
+								hostedByShell
+									? el("p", { className: styles.status, "data-hosted": "true" }, t("restartHostedNotice"))
+									: el("button", { type: "button", className: styles.toggle, onClick: () => { restartServiceViaServer(setMessage); } }, t("restartService")))))
+					: null,
+				// ★ 0.5.84（用户第 6 项）：功能包 → [开发式链接] 的面板：直接展示 /plugin-console/links
+				//   的同一份数据（与「升级安全」里那块折叠展示同源）。判据来自服务端，这里只如实展示：
+				//   每行 = ✓/• + 包名 + 版本 + 指向 + 缺什么（悬停看完整原因）。
+				// ★ 0.5.87 把这份只读清单升级为**可操作**（用户 2026-10-18）：顶部选开发区 → 两段式钉住；
+				//   每行按**服务端说的缺什么**给按钮（有哪个显示哪个，没有就不显示），底部照旧「重新读取」。
+				linksPanelOpen
+					? el("div", { className: styles.modalBackdrop, onClick: (event) => { if (event.target === event.currentTarget) setLinksPanelOpen(false); } },
+						el("div", { className: styles.modalCard, style: { maxWidth: 720 } },
+							el("div", { className: styles.rowTop, style: { justifyContent: "space-between" } },
+								el("strong", { className: styles.name }, t("linksBtn")),
+								el("button", { type: "button", className: styles.trashBtn, style: { fontSize: 14, padding: "4px 8px" }, title: t("closeModal"), "aria-label": t("closeModal"), onClick: () => setLinksPanelOpen(false) }, "✕")),
+							el("p", { className: styles.message }, t("linksPanelTitle")),
+							// ── 顶部：选开发区 → [钉住]（先只读计划，用户确认后才真写）────────────────
+							el("div", { style: { display: "flex", flexDirection: "column", gap: 6, marginTop: 6, paddingTop: 8, borderTop: "1px solid var(--dsw-alias-border-secondary, rgba(127,127,127,.18))" } },
+								el("div", { style: { display: "flex", gap: 8, alignItems: "center", flexWrap: "wrap" } },
+									el("span", { className: styles.status }, t("linksDevRootLabel")),
+									el("select", {
+										"aria-label": t("linksDevRootLabel"),
+										value: "",
+										disabled: linksPinBusy,
+										onChange: (event) => { const picked = String(event.currentTarget.value ?? ""); if (picked !== "") setLinksDir(devRootDraft(picked)); },
+										style: { flex: "0 1 300px", minWidth: 180, font: "inherit", padding: "4px 6px" },
+									},
+										el("option", { value: "" }, t("linksDevRootPick")),
+										linksDevRoots.map((root) => el("option", { key: "dr-" + String(root), value: String(root) }, String(root))))),
+								el("div", { style: { display: "flex", gap: 8, alignItems: "center", flexWrap: "wrap" } },
+									el("input", {
+										type: "text",
+										placeholder: t("linksDirPlaceholder"),
+										value: linksDir,
+										disabled: linksPinBusy,
+										"aria-label": t("linksDirPlaceholder"),
+										onChange: (event) => setLinksDir(String(event.currentTarget.value ?? "")),
+										style: { flex: 1, minWidth: 220, font: "inherit", padding: "4px 8px" },
+									}),
+									// ★ 只在宿主**确实**有系统目录对话框时才渲染（web 端没有 ⇒ 不显示，不是灰掉）
+									linksCanBrowse
+										? el("button", { type: "button", className: styles.toggle, disabled: linksPinBusy, onClick: linksBrowse }, t("linksBrowse"))
+										: null,
+									el("button", {
+										type: "button",
+										className: styles.toggle,
+										disabled: linksPinBusy || linksDir.trim() === "",
+										onClick: linksPinPlanLoad,
+									}, linksPinBusy ? t("linksPanelLoading") : t("linksPinPlanBtn"))),
+								linksDevRootsNote === null ? null : el("p", { className: styles.status, "data-warn": "true" }, linksDevRootsNote),
+								// 计划 / 结果卡片（两段式的第一段就在这里给人看）
+								linksPinPlan === null
+									? null
+									: el("div", { style: { display: "flex", flexDirection: "column", gap: 4, fontSize: 12, padding: "6px 8px", border: "1px solid var(--dsw-alias-border-secondary, rgba(127,127,127,.18))", borderRadius: 6 } },
+										linksPinPlan.ok !== true
+											? el("div", { "data-warn": "true" }, t("safetySwitchFailed") + "：" + String(linksPinPlan.error ?? "-"))
+											: (linksPinPlan.applied === true
+												? el("div", null,
+													t("linksPinnedDone").replace("{p}", String(linksPinPlan.plan.packageName ?? linksDir.trim()))
+													+ (linksPinPlan.plan.after ? " → " + String(linksPinPlan.plan.after) : "")
+													+ (linksPinPlan.plan.sufficiency && linksPinPlan.plan.sufficiency.note ? "；" + String(linksPinPlan.plan.sufficiency.note) : ""))
+												: el("div", { style: { display: "flex", flexDirection: "column", gap: 4 } },
+													el("div", { style: { fontWeight: 500 } }, t("linksPinPlanTitle").replace("{p}", String(linksPinPlan.plan.packageName ?? "?"))),
+													(Array.isArray(linksPinPlan.plan.steps) ? linksPinPlan.plan.steps : []).map((step, stepIndex) => el("div", { key: "pin-step-" + stepIndex, style: { opacity: .85 } }, "· " + String(step))),
+													el("div", { style: { display: "flex", gap: 8, marginTop: 4 } },
+														el("button", { type: "button", className: styles.toggle, style: { fontSize: 11, padding: "2px 10px" }, disabled: linksPinBusy, onClick: linksPinConfirm }, t("linksPinConfirmBtn")),
+														el("button", { type: "button", className: styles.toggle, style: { fontSize: 11, padding: "2px 10px" }, disabled: linksPinBusy, onClick: () => setLinksPinPlan(null) }, t("linksCancel"))))))),
+							// ── 清单（每行按服务端结论给动作）──────────────────────────────────────
+							linksPanelData === null
+								? el("p", { className: styles.status }, t("linksPanelLoading"))
+								: (linksPanelData.ok === false
+									? el("p", { className: styles.message, "data-warn": "true" }, t("linksFailed") + "：" + String(linksPanelData.error ?? "-"))
+									: el("div", { style: { flexDirection: "column", gap: 4, display: "flex", maxHeight: "52vh", overflow: "auto" } },
+										// ⚠️ 这里**不能**用 fill()：它是 PluginSafetyTab 内部的局部助手，
+										// 主面板里出现 fill( 就是 0.5.59 那次「整块空白」事故的根因
+										// （tests/test-ui-contract.mjs ⑨ 与 test-client-scope.mjs ★★ 都把这条钉死了）。
+										// 这里用最朴素的字符串替换，语义与 fill 的两个占位符一致。
+										el("div", { style: { fontSize: 12, fontWeight: 500 } },
+											t("linksTitle").replace("{n}", String(linksPanelData.count ?? 0)).replace("{ready}", String(linksPanelData.readyCount ?? 0))),
+										(Array.isArray(linksPanelData.items) ? linksPanelData.items : []).length === 0
+											? el("p", { className: styles.status }, t("linksPanelEmpty"))
+											: null,
+										(Array.isArray(linksPanelData.items) ? linksPanelData.items : []).map((x) => el("div", { key: "lp-" + x.packageName, title: [x.note ?? null, t("linksMtimeHint")].filter((v) => typeof v === "string" && v !== "").join("\n") || undefined, style: { fontSize: 12, opacity: .9, wordBreak: "break-all", display: "flex", flexDirection: "column", gap: 3, paddingBottom: 5 } },
+											el("div", null,
+												(x.ready === true ? "✓ " : "• ") + x.packageName + (x.version ? " v" + x.version : "")
+													+ (x.target ? "  → " + x.target : "")
+													+ "  · " + t("linksMtime") + " " + (typeof x.targetMtime === "string" && x.targetMtime !== "" ? formatMtimeText(x.targetMtime) : "—")
+													+ (Array.isArray(x.missingDeps) && x.missingDeps.length > 0 ? "  · 缺依赖 " + x.missingDeps.length : "")
+													+ (Array.isArray(x.missingPeers) && x.missingPeers.length > 0 ? "  · 缺 peer " + x.missingPeers.length : "")
+													+ (x.foreignPeers !== null && x.foreignPeers !== undefined && Array.isArray(x.foreignPeers) && x.foreignPeers.length > 0 ? "  · 异副本 " + x.foreignPeers.length : "")
+													+ (x.shims !== null && x.shims !== undefined ? "  · 垫片 " + String(x.shims.count ?? 0) : "")
+													+ (x.persisted !== null && x.persisted !== undefined && x.persisted.ok === false ? "  · 未持久化" : "")),
+											// 行内动作：**有哪个显示哪个**（没有就不显示，绝不摆灰按钮）
+											el("div", { style: { display: "flex", gap: 8, flexWrap: "wrap", alignItems: "center" } },
+												Array.isArray(x.missingDeps) && x.missingDeps.length > 0
+													? el("button", { type: "button", className: styles.toggle, style: { fontSize: 11, padding: "2px 8px" }, disabled: linksRowBusy !== null, onClick: () => linksRowRun(x, "deps") }, t("linksRepairDeps"))
+													: null,
+												Array.isArray(x.shimmablePeers) && x.shimmablePeers.length > 0
+													? el("button", { type: "button", className: styles.toggle, style: { fontSize: 11, padding: "2px 8px" }, disabled: linksRowBusy !== null, onClick: () => linksRowRun(x, "shims") }, t("linksRepairShims"))
+													: null,
+												el("button", { type: "button", className: styles.toggle, style: { fontSize: 11, padding: "2px 8px" }, disabled: linksRowBusy !== null, onClick: () => linksUnpinPlanLoad(x) }, t("linksUnpinBtn")),
+												linksRowNote[x.packageName] ? el("span", { className: styles.status }, String(linksRowNote[x.packageName])) : null),
+											// 取消钉住的第一段：把"将会发生什么 + 后果"先摆出来（两段式，确认才动手）
+											linksUnpinPlan !== null && linksUnpinPlan.packageName === x.packageName
+												? el("div", { style: { display: "flex", flexDirection: "column", gap: 3, padding: "4px 6px", border: "1px solid var(--dsw-alias-border-secondary, rgba(127,127,127,.18))", borderRadius: 6 } },
+													linksUnpinPlan.ok !== true
+														? el("div", { "data-warn": "true" }, t("safetySwitchFailed") + "：" + String(linksUnpinPlan.error ?? "-"))
+														: el("div", { style: { display: "flex", flexDirection: "column", gap: 3 } },
+															(Array.isArray(linksUnpinPlan.plan.steps) ? linksUnpinPlan.plan.steps : []).map((step, unpinStepIndex) => el("div", { key: "unpin-step-" + unpinStepIndex, style: { opacity: .85 } }, "· " + String(step))),
+															(Array.isArray(linksUnpinPlan.plan.warnings) ? linksUnpinPlan.plan.warnings : []).map((warning, warnIndex) => el("div", { key: "unpin-warn-" + warnIndex, "data-warn": "true" }, "! " + String(warning))),
+															el("div", { style: { display: "flex", gap: 8, marginTop: 2 } },
+																el("button", { type: "button", className: styles.toggle, style: { fontSize: 11, padding: "2px 8px" }, disabled: linksRowBusy !== null, onClick: () => linksUnpinConfirm(x) }, t("linksUnpinConfirmBtn")),
+																el("button", { type: "button", className: styles.toggle, style: { fontSize: 11, padding: "2px 8px" }, disabled: linksRowBusy !== null, onClick: () => setLinksUnpinPlan(null) }, t("linksCancel")))))
+												: null)))),
+							el("div", { className: styles.rowTop, style: { justifyContent: "flex-end", gap: 8, marginTop: 10 } },
+								el("button", { type: "button", className: styles.toolItem, "data-busy": linksPanelBusy ? "true" : "false", onClick: () => { linksPanelLoad(); linksDevRootsLoad(); } }, linksPanelBusy ? t("linksPanelLoading") : t("linksPanelReload")))))
 					: null,
 				gateOpen
 					? el("div", { className: styles.modalBackdrop, onClick: (event) => { if (event.target === event.currentTarget) setGateOpen(false); } },
@@ -4981,9 +5361,17 @@ function healthSignature(health) {
 										: null,
 									gateRows.adoptedCount > 0
 										? el("div", { style: { flexDirection: "column", gap: 2, display: "flex" } },
-											el("strong", { className: styles.name }, t("gateListAdopted").replace("{n}", String(gateRows.adoptedCount))),
-											gateRows.adopted.slice(0, 8).map((r) => el("span", { key: "a-" + String(r.rowId), className: styles.status },
-												"✓ " + String(r.name) + (r.version ? "  v" + r.version : "") + (r.adoptedAt ? "  · " + gateTime(r.adoptedAt) : ""))))
+											// ★ 0.5.80：默认折叠，只留一行摘要（点开才列明细）—— 历史不该把当前态挤下去
+											el("button", {
+												type: "button",
+												className: styles.toggle,
+												onClick: () => setGateHistoryOpen((v) => !v),
+											}, (gateHistoryOpen ? t("gateHistoryHide") : t("gateHistoryShow").replace("{n}", String(gateRows.adoptedCount)))
+												+ "  ·  " + t("gateListAdopted").replace("{n}", String(gateRows.adoptedCount))),
+											gateHistoryOpen
+												? gateRows.adopted.map((r) => el("span", { key: "a-" + String(r.rowId), className: styles.status },
+													"✓ " + String(r.name) + (r.version ? "  v" + r.version : "") + (r.adoptedAt ? "  · " + gateTime(r.adoptedAt) : "")))
+												: null)
 										: null)
 								: null),
 							// 0.5.42 加法（用户点名）：右侧贴底的 Star 提示 —— 只加这一行 UI，
@@ -5406,13 +5794,14 @@ function healthSignature(health) {
 				}, t("toolbarLabel") + (toolbarOpen ? " ▾" : " ▸")),
 				toolbarOpen
 					? el("div", { className: styles.toolbarGroup, style: (dragPos ?? toolbarPos) !== null ? { left: (dragPos ?? toolbarPos).left, top: (dragPos ?? toolbarPos).top + 36, right: "auto" } : undefined },
-						el("button", {
-							type: "button",
-							className: styles.toolItem,
-							title: t("restartService"),
-							onClick: () => { restartServiceViaServer(setMessage); },
-						}, t("restartService")),
-						el("button", {
+						
+						hostedByShell ? null : el("button", { // ★ 0.5.84：桌面端（shell 托管）不显示；web 端保留且可用
+								type: "button",
+								className: styles.toolItem,
+								title: t("restartService"),
+								onClick: () => { restartServiceViaServer(setMessage); },
+							}, t("restartService")),
+							el("button", {
 							type: "button",
 							className: styles.toolItem,
 							"data-active": repoLandOn ? "true" : "false",
@@ -5448,6 +5837,17 @@ function healthSignature(health) {
 							"aria-label": t("sourcesBtn"),
 							onClick: openSources,
 						}, t("sourcesBtn")),
+						el("button", {
+							type: "button",
+							className: styles.toolItem,
+							"data-active": linksPanelOpen ? "true" : "false",
+							"data-busy": linksPanelBusy ? "true" : "false",
+							title: t("linksPanelTitle"),
+							"aria-label": t("linksBtn"),
+							// ★ 0.5.84（用户第 6 项）：打开时拉一次真实清单（与安全面板同一个只读接口）
+							// ★ 0.5.87：同时拉一次「已登记开发区」（钉住要用；没有它下拉就是空的）
+							onClick: () => setLinksPanelOpen((v) => { const next = !v; if (next) { linksPanelLoad(); linksDevRootsLoad(); } return next; }),
+						}, t("linksBtn") + (linksPanelData !== null && Array.isArray(linksPanelData.items) ? " " + linksPanelData.items.length : "")),
 						el("button", {
 							type: "button",
 							className: styles.toolItem,
@@ -6281,6 +6681,45 @@ function healthSignature(health) {
 			const [pinInput, setPinInput] = react.useState("");
 			const [pinNote, setPinNote] = react.useState(null);
 			const [allowAgent, setAllowAgent] = react.useState(false);
+			// ★ 0.5.84 加法（用户第 7 项）：磁盘体检 / 清理的状态与两个动作。
+			//   判据全在服务端（domain/disk-audit.js）：面板只展示服务端给的 level 与体积，
+			//   并且**必须**经过「先要计划（不带 confirm）→ 再确认（confirm:true）」两步。
+			const [diskAudit, setDiskAudit] = react.useState(null);
+			const [diskPlan, setDiskPlan] = react.useState(null);
+			const [diskBusy, setDiskBusy] = react.useState(false);
+			const [diskNote, setDiskNote] = react.useState(null);
+			const diskCheck = async () => {
+				if (diskBusy) return;
+				setDiskBusy(true); setDiskNote(null); setDiskPlan(null);
+				try {
+					const data = await call("/plugin-console/disk-audit"); // 只读：无 body ⇒ GET
+					setDiskAudit(data ?? null);
+					if (data !== null && data.ok === true) setDiskNote({ text: fill(t("diskSummary"), [["mb", String(data.totalMb ?? 0)], ["n", String((data.entries ?? []).length)], ["safe", String(data.safeMb ?? 0)], ["reclaim", String(data.reclaimableMb ?? 0)]]) + (data.truncated === true ? "（统计已截断）" : ""), level: null });
+				} catch (error) { setDiskNote({ text: String((error && error.message) || error), level: "error" }); }
+				finally { setDiskBusy(false); }
+			};
+			// confirm=false ⇒ 服务端**只回计划**（一个文件都不动）；confirm=true 才会真删。
+			const diskCleanup = async (confirm) => {
+				if (diskBusy) return;
+				setDiskBusy(true); setDiskNote(null);
+				try {
+					const ids = confirm && diskPlan !== null && Array.isArray(diskPlan.ids) && diskPlan.ids.length > 0
+						? diskPlan.ids
+						: (diskAudit !== null && Array.isArray(diskAudit.entries) ? diskAudit.entries.filter((x) => x.level === "safe").map((x) => x.id) : []);
+					const data = await call("/plugin-console/disk-cleanup", { ids: ids, confirm: confirm === true });
+					if (data !== null && data.needsConfirm === true) {
+						// 第一步的回报：把计划（哪些项 / 能省多少）留下，等用户点「确认清理」
+						const plan = data.plan ?? {};
+						setDiskPlan({ ids: (plan.plan ?? []).map((p) => p.id), freedMb: plan.freedMb ?? 0 });
+						setDiskNote({ text: fill(t("diskPlanReady"), [["n", String((plan.plan ?? []).length)], ["mb", String(plan.freedMb ?? 0)]]) + ((plan.refused ?? []).length === 0 ? "" : " · 已拒绝 " + plan.refused.length + " 项"), level: null });
+					} else if (data !== null) {
+						setDiskPlan(null);
+						setDiskNote({ text: String(data.note ?? t("diskDone")), level: data.ok === true ? null : "error" });
+						await diskCheck(); // 删完重新体检，让面板显示真实的新体积
+					}
+				} catch (error) { setDiskNote({ text: String((error && error.message) || error), level: "error" }); }
+				finally { setDiskBusy(false); }
+			};
 			const load = async () => {
 				try {
 					// link 清单：独立 try（拿不到时这块显示"读取失败"，绝不静默）
@@ -6530,6 +6969,28 @@ function healthSignature(health) {
 					lockFix !== null && lockFix.ok !== true && Array.isArray(lockFix.problems) && lockFix.problems.length > 0
 						? lockFix.problems.map((p) => p.hint).join("\n")
 						: undefined),
+				// ★ 0.5.84 加法（用户第 7 项）：`<DSH_HOME>/plugin-console` 的**磁盘体检 + 显式确认后清理**。
+				//   两段式（不让人闭眼点）：先「磁盘体检」（GET /disk-audit，纯只读）→ 再「清理安全项」
+				//   （POST /disk-cleanup，**不带 confirm** ⇒ 服务端只回计划）→ 最后「确认清理」（confirm:true）。
+				//   哪些能删、哪些绝不能删**全由服务端判**（domain/disk-audit.js）：真机实测最大的 2.1 GB
+				//   恰恰是当前回滚点指向的备份，面板不自己按体积猜。
+				row("trash", t("diskTitle"),
+					diskAudit === null ? t("diskDesc")
+						: diskAudit.ok !== true ? t("diskFailed") + "：" + String(diskAudit.error ?? "-")
+							: fill(t("diskSummary"), [["mb", String(diskAudit.totalMb ?? 0)], ["n", String((diskAudit.entries ?? []).length)], ["safe", String(diskAudit.safeMb ?? 0)], ["reclaim", String(diskAudit.reclaimableMb ?? 0)]]),
+					el("div", { style: { display: "flex", gap: "8px", flex: "0 0 auto" } },
+						el("button", { type: "button", className: styles.toggle, disabled: busy || diskBusy, title: t("diskDesc"), onClick: diskCheck }, t("diskCheckBtn")),
+						diskAudit !== null && diskAudit.ok === true && (diskAudit.safeBytes ?? 0) > 0
+							? el("button", { type: "button", className: styles.toggle, disabled: busy || diskBusy, title: t("diskSafeHint"), onClick: () => diskCleanup(false) }, t("diskCleanupBtn"))
+							: null,
+						diskPlan !== null
+							? el("button", { type: "button", className: styles.toggle, disabled: busy || diskBusy, title: t("diskConfirmHint"), onClick: () => diskCleanup(true) }, fill(t("diskConfirmBtn"), [["mb", String(diskPlan.freedMb ?? 0)]]))
+							: null),
+					diskAudit !== null && diskAudit.ok === true && Array.isArray(diskAudit.entries)
+						? diskAudit.entries.filter((x) => x.level !== "protected").slice(0, 6)
+							.map((x) => (x.level === "safe" ? "✓ " : "! ") + x.name + "  " + x.mb + " MB").join("\n") || t("diskNoCandidate")
+						: undefined),
+				diskNote === null ? null : el("div", { style: { fontSize: "12px", padding: "0 12px 6px", color: diskNote.level === "error" ? "#d33" : "inherit", wordBreak: "break-word" } }, diskNote.text),
 				row("pulse", t("safetyAdaptTitle"), t("safetyAdaptDesc"), el("div", { style: { display: "flex", gap: "8px", flex: "0 0 auto" } },
 					el("button", { type: "button", className: styles.toggle, disabled: busy, onClick: () => preflight(false) }, t("fwPreflightBtn")),
 					el("button", { type: "button", className: styles.toggle, disabled: busy, onClick: () => preflight(true) }, t("fwPreflightPatch")))),
@@ -6556,6 +7017,10 @@ function healthSignature(health) {
 			} catch {}
 		}
 		function apply(ctx) {
+			// ★ 0.5.87：探测宿主有没有系统目录对话框（桌面端外壳有、web 端没有）。
+			//   主面板据此决定**是否渲染**「浏览…」—— 没有就根本不存在这个按钮，
+			//   而不是摆一个点了没反应的（用户 2026-10-18 明确要求）。
+			directoryPicker = detectDirectoryPicker();
 			ctx.effect(() => ctx.locale.register(NS, { zh, en }), "plugin-console: dictionaries");
 			const t = ctx.locale.bind(NS);
 			ctx.slots.inject("settings.plugins.tab", () => ctx.slots.register({
@@ -6599,6 +7064,11 @@ function healthSignature(health) {
 		// 仅测试用导出（tests/test-adapt-unlock-gate.mjs ①-2：断言「已适配，立即解锁」按钮的门控判据，
 		// 以及它必须与卡片正文用同一个判据）。
 		exports.canAdaptUnlock = canAdaptUnlock;
+		// 仅测试用导出（tests/test-links-actions-ui.mjs：假 React **真渲染**主面板，断言 link 面板
+		// 的按钮按服务端结论出现/不出现、「浏览…」只在宿主提供目录对话框时存在、钉住是两段式）。
+		exports.PluginConsoleTab = PluginConsoleTab;
+		// 仅测试用导出（同上：断言「宿主有没有系统目录对话框」这条探测本身）。
+		exports.detectDirectoryPicker = detectDirectoryPicker;
 		return module.exports;
 	}
 	});