@noob-stupid/dsh-plugin-console 0.5.87 → 0.5.92

package/README.md

@@ -461,12 +461,72 @@ Verification matrix, raw logs and the one framework-side caveat (`0.1.2-rc.1` sh
 
 ---
 
+### Update integrity
+
+An update can be requested for a specific version. That version is carried into every download channel; if
+a channel ends up with a different version, the job reports a failure with both versions named, and the
+existing copy on disk is kept rather than replaced. The manifest and lock record a **version number** for
+such packages — a normal install does not produce a `link:`.
+
+Installs and updates are tracked per target: two different plugins can update at the same time, while the
+same plugin cannot be started twice.
+
+A finished install leaves two small records under `<DSH_HOME>/plugin-console/`:
+
+- `pending-restart.json` — plugins that are installed but not yet loaded, so the panel can keep showing
+  "installed · takes effect after restart" across a host restart. Entries are dropped once the plugin is
+  actually loaded.
+- `install-jobs.json` — the last fifty settled jobs, with the requested version, the version that landed,
+  and the error if any. A failure can therefore still be explained after the process that produced it is gone.
+
+Drift between the manifest and the lock is reconciled in the background with a cooldown, without blocking
+`/state`. Source-type dependencies (`link:`, `file:`, git) are excluded from that automation. A mismatch is
+reported as a failure only when it would actually lose the plugin; a lock or version drift is shown as a
+collapsible note instead.
+
+### Dev links (`link`)
+
+`link:` is a **development** mechanism — ordinary download installs and updates do not produce it. The
+`link` entry in the feature-pack toolbar is the working surface for it:
+
+- pick a registered dev root from the dropdown, or type an absolute path;
+- **Pin** is a two-step action: it first returns a read-only plan, and executes only after you confirm. No
+  code path skips that confirmation;
+- each row shows the target directory and its last-modified time, which is how you tell whether it is the
+  directory you are editing right now;
+- per-row actions appear only when they apply — **fill dependencies**, **build shims** (no pnpm run), and
+  **unpin**;
+- **Browse…** is rendered only when the desktop preload bridge is present. On a web instance it is not
+  rendered, rather than shown as a button that cannot work.
+
+### Disable provenance
+
+A row can be off for different reasons, and the panel distinguishes them:
+
+- **disabled by this console's patch** — removing the patch block enables it normally;
+- **disabled by the plugin or the framework default** — the console can only write an explicit
+  `disabled: false` override, which is what the **forced on by patch** badge refers to;
+- **force-enable had no effect** — the override exists but the row still is not running, and no peer veto
+  explains it. That override can be revoked from the row.
+
+### Operational details
+
+- Market enrichment runs behind a single limiter: four concurrent requests, one in flight per URL, a
+  ten-minute memory for failures and a five-minute success cache. A batch of unreachable mirrors therefore
+  cannot saturate the connection or delay installs.
+- `Disk audit` lists what occupies `<DSH_HOME>/plugin-console` and deletes only after an explicit
+  confirmation. The framework rollback point counts as protected.
+- The gate panel shows the current pending adaptations up front and keeps its history collapsed.
+
 ## Known limitations
 
-- Host code changes require a **service restart**: the panel's restart button only points at the
-  **official path** (restart inside the desktop client; the console never kills or spawns a
-  process — a manual relaunch would fight the host for the port and produce
-  "The application could not start or stopped unexpectedly"); client changes just need a page refresh;
+- Host code changes require a **service restart**; client changes only need a page refresh.
+  - On a **desktop-hosted** instance the console **refuses** to restart and says so: the official path is to
+    fully quit and reopen the client. It never kills or spawns a process there — a manual relaunch would
+    fight the host for the port and produce "The application could not start or stopped unexpectedly".
+  - On a **standalone (web) instance** the restart button is available: it relaunches detached, waits for
+    the port to free, and lets the old process exit gracefully. The toolbar entry is rendered only where it
+    can work — a desktop-hosted instance does not show it.
 - Live GitHub search depends on GitHub reachability (browser-direct + server fallback;
   during network-blackout windows retry later);
 - Version detection works for npm-published packages; skill-type repos have no version concept;

package/lib/client.js

@@ -464,9 +464,9 @@ window.__ModuleLoader__.load({
 			stageInstalling: "下载安装中（可离开本页，后台继续）",
 			stageConfiguring: "写入启用配置",
 			stageRepairing: "本地 AI 接管安装中…",
-			restartService: "重启服务（官方路径）",
+			restartService: "重启服务",
 			restartHostedNotice: "本实例由桌面端外壳托管 —— 请在桌面端内重启：完全退出 DeepSeek Harness 再打开（控制台不自行 kill / spawn，以免与宿主争端口）。",
-			restarting: "正在按官方路径处理重启请求…",
+			restarting: "正在处理重启请求…",
 			autoReload: "页面即将自动刷新…",
 			aiRepaired: "本地 AI 已接管并完成修复，请刷新页面查看",
 			deletePlugin: "删除插件（移除配置并卸载包）",
@@ -1111,9 +1111,9 @@ window.__ModuleLoader__.load({
 			stageInstalling: "Downloading & installing (safe to leave this page)",
 			stageConfiguring: "Writing enable config",
 			stageRepairing: "Local AI is taking over the install…",
-			restartService: "Restart service (official path)",
+			restartService: "Restart service",
 			restartHostedNotice: "This instance is hosted by the desktop shell - restart it there by fully quitting and reopening DeepSeek Harness.",
-			restarting: "Handling the restart request via the official path…",
+			restarting: "Handling the restart request…",
 			autoReload: "Page will auto-reload…",
 			aiRepaired: "Local AI took over and finished the repair; refresh the page",
 			deletePlugin: "Delete plugin (remove config and uninstall package)",
@@ -1771,12 +1771,24 @@ function healthSignature(health) {
 		}
 		/** 重启服务（按钮 / 工具项 / 自更新后共用）：服务端在「本实例由桌面端外壳托管」等场景会**拒绝**
 		*  并回结构化短句 —— 必须把它显示出来，否则按钮看起来是「点了没反应」（旧实现把错误吞掉了）。 */
+// ★ 0.5.92：本函数是模块级的，**不能用组件的 t()** —— 用了就抛 ReferenceError，
+//   点击直接异常、请求都发不出去（这正是"点了没反应"的真因）。文案用常量，永不抛。
+const RESTART_IN_PROGRESS_NOTE = "正在处理重启请求…";
+const RESTART_FAILED_NOTE = "重启请求失败";
 		function restartServiceViaServer(setMessage, options) {
 			const reload = (options ?? {}).reload !== false;
-			if (reload) setMessage(t("restarting"));
+			if (reload) setMessage(RESTART_IN_PROGRESS_NOTE);
 			call("/plugin-console/restart", {}).then(
-				() => { if (reload) window.setTimeout(() => window.location.reload(), 12000); },
-				(error) => { setMessage(error !== null && typeof error.message === "string" && error.message !== "" ? error.message : t("safetySwitchFailed")); },
+				(data) => {
+					// ★ 0.5.89：显示服务端那段说明（发生了什么、要不要等、等多久）
+					const note = data !== null && typeof data === "object" && typeof data.message === "string" && data.message !== ""
+						? data.message
+						: RESTART_IN_PROGRESS_NOTE;
+					setMessage(note);
+					if (reload) window.setTimeout(() => window.location.reload(), 12000);
+					else if (typeof options?.onDone === "function") options.onDone(data);
+				},
+				(error) => { setMessage(error !== null && typeof error.message === "string" && error.message !== "" ? error.message : RESTART_FAILED_NOTE); },
 			);
 		}
 		/** 超时类错误附上可操作提示（网络黑洞期的最常见表现）。 */
@@ -5748,9 +5760,12 @@ function healthSignature(health) {
 						dragRef.current.base = cur;
 						dragRef.current.active = false;
 						dragRef.current.justDragged = false;
-						try { e.currentTarget.setPointerCapture?.(e.pointerId); } catch {}
+						// ★ 0.5.91：不要在这里捕获指针（会把内部按钮的 click 吞到容器上）。先记下，长按确认拖动后再捕获。
+						dragRef.current.captureEl = e.currentTarget;
+						dragRef.current.captureId = e.pointerId;
 						dragRef.current.long = window.setTimeout(() => {
 							dragRef.current.active = true;
+							try { dragRef.current.captureEl?.setPointerCapture?.(dragRef.current.captureId); } catch {}
 							setDragPos(cur);
 						}, 450);
 					},
@@ -5766,6 +5781,7 @@ function healthSignature(health) {
 					},
 					onPointerUp: () => {
 						if (dragRef.current.long !== null) { window.clearTimeout(dragRef.current.long); dragRef.current.long = null; }
+						try { dragRef.current.captureEl?.releasePointerCapture?.(dragRef.current.captureId); } catch {}
 						if (dragRef.current.active) {
 							const p = dragPos;
 							if (p !== null) {

package/lib/server/domain/framework.js

@@ -19,6 +19,13 @@ function resolveDshBin() {
     const requireLocal = createRequire(join(pluginRoot(), 'package.json'))
     return join(dirname(requireLocal.resolve('@deepseek-ai/dsh/package.json')), 'lib', 'bin.js')
   } catch {
+    // ★ 0.5.88：npx / 启动器拉起的实例，插件根里没有 @deepseek-ai/dsh，上面必然失败。
+    //   此时用**当前进程自己**的入口反推 —— process.argv[1] 就是拉起本进程的那个脚本。
+    //   只在它确实存在且是文件时采用（绝不凭空造一个路径），否则仍如实返回 null。
+    try {
+      const entry = typeof process.argv[1] === 'string' ? process.argv[1] : ''
+      if (entry !== '' && /[\\/]bin\.js$/u.test(entry) && existsSync(entry)) return entry
+    } catch {}
     return null
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noob-stupid/dsh-plugin-console",
-  "version": "0.5.87",
+  "version": "0.5.92",
   "description": "DSH 框架升级安全与插件升级门控：一键升级、失败自动回滚、升级后回滚上版、旧插件不适配自动禁用；内置多源插件市场为发现层，插件源全部可自定义，可指向公司内网私有源 / 私有索引 / 本地 Git 仓库，纯内网离线可用 | Framework upgrade safety & plugin version gating for DSH, with a customizable multi-source plugin market: point every source at internal mirrors or a local file:// repo for intranet-only, offline installs.",
   "repository": {
     "type": "git",