@noob-stupid/dsh-plugin-console 0.5.9 → 0.5.10

package/README.md

@@ -268,6 +268,14 @@ The floating "Sources" button (right of the title row, semi-transparent) opens t
 
 <img width="393" height="525" alt="56ccd0b3-f174-4365-848b-64013b27d604" src="https://github.com/user-attachments/assets/5a2816ce-12d9-4001-b895-1e422c11d423" />
 
+### Run mode (managed / observer)
+
+The mode decides **who leads framework upgrades** — nothing else:
+
+- **Observer (default)**: the console only preflights, gates, and guards the rollback point. It does not take over upgrades.
+- **Managed**: framework upgrade and rollback are owned by this console. It switches to managed automatically when you upgrade through this console, and records the reason.
+
+**Boot-failure quarantine is not affected by the mode.** When the service cannot start, the console locates the culprit from the boot log and disables it (broken presets are renamed to `.broken-*`; with no clear culprit it falls back to safe mode so the service can start). A console that cannot boot cannot gate anything — so this rescue path always runs.
 ## Framework compatibility
 
 Measured on isolated instances (fresh `DSH_HOME`, real HTTP probes) — **supported: framework ≥ `0.1.5-rc.2`**, no workarounds needed.

package/README.zh.md

@@ -210,6 +210,14 @@ git clone https://github.com/Noob-stupid/dsh-plugin-hub /tmp/dsh-plugin-console
 
 ---
 
+### 运行模式（托管 / 观察者）
+
+模式只决定**谁来主导框架升级**，别的都不变：
+
+- **观察者（默认）**：只做预检、门控与回滚点守护，不接管框架升级。
+- **托管**：框架升级与回滚由本控制台负责。**走本控制台升级时会自动切到托管**并记下原因。
+
+**启动失败隔离不受模式影响。** 服务起不来时，控制台会从启动日志定位肇事插件并禁用它（预设文件改名 `.broken-*`；找不到明确肇事者则进安全模式先让服务起来）。**起不来的控制台什么都门控不了** —— 所以这条救火链路永远生效。
 ## 框架兼容性
 
 在隔离实例（全新 `DSH_HOME` + 真实 HTTP 探针）实测：**支持框架 ≥ `0.1.5-rc.2`**，无需任何变通。

package/lib/client.js

@@ -100,10 +100,11 @@ window.__ModuleLoader__.load({
 			safetyBackfillBtn: "补声明（{n} 项）",
 			safetyBackfillDone: "补声明完成",
 			safetyMode: "运行模式",
-			safetyModeManaged: "托管：框架升级与回滚由本控制台负责（默认，行为与之前一致）",
-			safetyModeManagedOn: "已切到托管模式：框架升级与回滚仍由本控制台负责",
-			safetyModeObserver: "观察者：只做预检、门控与回滚点守护，不接管框架升级",
-			safetyModeObserverOn: "已切到观察者模式：不再接管框架升级，只守门",
+			safetyModeManaged: "托管：框架升级与回滚由本控制台负责（走本控制台升级时自动切到这个模式）",
+			safetyModeManagedOn: "已切到托管模式：框架升级与回滚仍由本控制台负责。启动失败隔离不受模式影响",
+			safetyModeObserver: "观察者（默认）：只做预检、门控与回滚点守护，不接管框架升级",
+			safetyModeObserverOn: "已切到观察者模式：不再接管框架升级，只守门。启动失败隔离不受模式影响",
+			safetyModeNote: "启动失败隔离不受模式影响：服务起不来时会自动定位肇事插件并禁用（预设文件会被改名为 .broken-*，找不到肇事者则进安全模式先让服务起来）。",
 			safetyModeSwitch: "切换托管 / 观察者",
 			safetySwitchFailed: "操作失败",
 			safetyFrameworkTitle: "框架版本",
@@ -569,10 +570,11 @@ window.__ModuleLoader__.load({
 			safetyBackfillBtn: "Declare {n}",
 			safetyBackfillDone: "Declarations written",
 			safetyMode: "Operating mode",
-			safetyModeManaged: "Managed: this console owns framework upgrade and rollback (default, unchanged behaviour)",
-			safetyModeManagedOn: "Switched to managed: framework upgrade and rollback stay with this console",
-			safetyModeObserver: "Observer: preflight, gating and rollback-point guard only — does not take over upgrades",
-			safetyModeObserverOn: "Switched to observer: no longer takes over framework upgrades, only gates",
+			safetyModeManaged: "Managed: this console owns framework upgrade and rollback (auto-selected when you upgrade through this console)",
+			safetyModeManagedOn: "Switched to managed: framework upgrade and rollback stay with this console. Boot-failure quarantine is unaffected",
+			safetyModeObserver: "Observer (default): preflight, gating and rollback-point guard only — does not take over upgrades",
+			safetyModeObserverOn: "Switched to observer: no longer takes over framework upgrades, only gates. Boot-failure quarantine is unaffected",
+			safetyModeNote: "Boot-failure quarantine is not affected by the mode: when the service cannot start, the culprit plugin is located and disabled automatically (broken presets are renamed to .broken-*, and with no clear culprit it falls back to safe mode).",
 			safetyModeSwitch: "Switch managed / observer",
 			safetySwitchFailed: "Action failed",
 			safetyFrameworkTitle: "Framework version",
@@ -5000,7 +5002,7 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 					el("div", { style: { fontSize: "12px", opacity: .7, marginTop: "2px" } }, (mode === "observer" ? t("safetyModeObserverShort") : t("safetyModeManagedShort")) + " · " + fw + (pending > 0 ? " · " + fill(t("safetyBackfillShort"), [["n", pending]]) : ""))),
 				el("span", { style: { opacity: .5, flex: "0 0 auto", transform: open ? "rotate(90deg)" : "none", transition: "transform .2s cubic-bezier(.34,1.56,.64,1)" } }, el("svg", { width: 14, height: 14, viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: 2, strokeLinecap: "round", strokeLinejoin: "round" }, el("path", { d: "M9 6l6 6-6 6" }))));
 			const panel = el("div", { className: "pc-safety-panel", style: { marginTop: "8px", padding: "8px", borderRadius: "12px", border: "1px solid var(--dsw-alias-border-secondary, rgba(127,127,127,.18))", background: "var(--dsw-alias-bg-layer-4, rgba(127,127,127,.10))", display: "flex", flexDirection: "column", gap: "4px" } },
-				row("shield", t("safetyMode"), mode === "observer" ? t("safetyModeObserver") : t("safetyModeManaged") + (status !== null && typeof status.modeReason === "string" && status.modeReason !== "" ? "（" + status.modeReason + "）" : ""), sw(mode === "observer", () => switchMode(mode === "observer" ? "managed" : "observer"), t("safetyModeSwitch"))),
+				row("shield", t("safetyMode") + " · " + t("safetyModeNote"), mode === "observer" ? t("safetyModeObserver") : t("safetyModeManaged") + (status !== null && typeof status.modeReason === "string" && status.modeReason !== "" ? "（" + status.modeReason + "）" : ""), sw(mode === "observer", () => switchMode(mode === "observer" ? "managed" : "observer"), t("safetyModeSwitch"))),
 				row("pin", t("safetyFrameworkTitle"), fill(t("safetyFrameworkDesc"), [["v", fw]])),
 				row("back", t("safetyRollbackTitle"), rb.applicable === true ? fill(t("safetyRollbackOk"), [["from", rb.from], ["to", rb.to]]) : fill(t("safetyRollbackNone"), [["reason", rb.reason === null || rb.reason === undefined ? "-" : rb.reason]])),
 				row("scan", t("safetyFpTitle"), fp.changed === true ? fill(t("safetyFpChanged"), [["reasons", (fp.reasons || []).join("；")]]) : t("safetyFpStable"), fp.changed === true ? el("button", { type: "button", className: styles.toggle, onClick: ack, disabled: busy }, t("safetyFpAck")) : null),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noob-stupid/dsh-plugin-console",
-  "version": "0.5.9",
+  "version": "0.5.10",
   "description": "DSH 框架升级安全与插件升级门控：一键升级、失败自动回滚、升级后回滚上版、旧插件不适配自动禁用；内置多源插件市场为发现层，插件源全部可自定义，可指向公司内网私有源 / 私有索引 / 本地 Git 仓库，纯内网离线可用 | Framework upgrade safety & plugin version gating for DSH, with a customizable multi-source plugin market: point every source at internal mirrors or a local file:// repo for intranet-only, offline installs.",
   "repository": {
     "type": "git",