@noob-stupid/dsh-plugin-console 0.5.9 → 0.5.11

package/README.md

@@ -1,8 +1,9 @@
 > **English**: [README.md](README.md) | **中文**: [README.zh.md](README.zh.md)
 
 ---
+desktop:
+![Entry inside the official plugins page](docs/images/official-plugins-page.png)
 
-<img width="1170" height="609" alt="image" src="https://github.com/user-attachments/assets/b802d606-14ba-4151-9956-ff642ed12b0a" />
 
 # DSH Plugin Gating Hub (dsh-plugin-gating-hub)
 
@@ -20,6 +21,8 @@
 [![GitHub Release](https://img.shields.io/github/v/release/Noob-stupid/dsh-plugin-gating-hub?style=flat-square)](https://github.com/Noob-stupid/dsh-plugin-gating-hub/releases)[![dsh.so security](https://www.dsh.so/badge/dsh-plugin-hub.svg)](https://www.dsh.so/artifact/dsh-plugin-hub)
 [![dsh.so install](https://www.dsh.so/badge/install/dsh-plugin-hub.svg)](https://www.dsh.so/artifact/dsh-plugin-hub)
 
+web:
+<img width="1170" height="609" alt="image" src="https://github.com/user-attachments/assets/b802d606-14ba-4151-9956-ff642ed12b0a" />
 > **Framework upgrade safety & plugin version gating for DeepSeek Harness (DSH)**: one-click
 > framework upgrade with **auto-rollback on failure** → **one-click rollback to the previous
 > version** after an upgrade → plugins the new framework cannot load are **auto-disabled** →
@@ -268,6 +271,14 @@ The floating "Sources" button (right of the title row, semi-transparent) opens t
 
 <img width="393" height="525" alt="56ccd0b3-f174-4365-848b-64013b27d604" src="https://github.com/user-attachments/assets/5a2816ce-12d9-4001-b895-1e422c11d423" />
 
+### Run mode (managed / observer)
+
+The mode decides **who leads framework upgrades** — nothing else:
+
+- **Observer (default)**: the console only preflights, gates, and guards the rollback point. It does not take over upgrades.
+- **Managed**: framework upgrade and rollback are owned by this console. It switches to managed automatically when you upgrade through this console, and records the reason.
+
+**Boot-failure quarantine is not affected by the mode.** When the service cannot start, the console locates the culprit from the boot log and disables it (broken presets are renamed to `.broken-*`; with no clear culprit it falls back to safe mode so the service can start). A console that cannot boot cannot gate anything — so this rescue path always runs.
 ## Framework compatibility
 
 Measured on isolated instances (fresh `DSH_HOME`, real HTTP probes) — **supported: framework ≥ `0.1.5-rc.2`**, no workarounds needed.

package/README.zh.md

@@ -210,6 +210,14 @@ git clone https://github.com/Noob-stupid/dsh-plugin-hub /tmp/dsh-plugin-console
 
 ---
 
+### 运行模式（托管 / 观察者）
+
+模式只决定**谁来主导框架升级**，别的都不变：
+
+- **观察者（默认）**：只做预检、门控与回滚点守护，不接管框架升级。
+- **托管**：框架升级与回滚由本控制台负责。**走本控制台升级时会自动切到托管**并记下原因。
+
+**启动失败隔离不受模式影响。** 服务起不来时，控制台会从启动日志定位肇事插件并禁用它（预设文件改名 `.broken-*`；找不到明确肇事者则进安全模式先让服务起来）。**起不来的控制台什么都门控不了** —— 所以这条救火链路永远生效。
 ## 框架兼容性
 
 在隔离实例（全新 `DSH_HOME` + 真实 HTTP 探针）实测：**支持框架 ≥ `0.1.5-rc.2`**，无需任何变通。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noob-stupid/dsh-plugin-console",
-  "version": "0.5.9",
+  "version": "0.5.11",
   "description": "DSH 框架升级安全与插件升级门控：一键升级、失败自动回滚、升级后回滚上版、旧插件不适配自动禁用；内置多源插件市场为发现层，插件源全部可自定义，可指向公司内网私有源 / 私有索引 / 本地 Git 仓库，纯内网离线可用 | Framework upgrade safety & plugin version gating for DSH, with a customizable multi-source plugin market: point every source at internal mirrors or a local file:// repo for intranet-only, offline installs.",
   "repository": {
     "type": "git",