@noob-stupid/dsh-plugin-console 0.5.98 → 0.5.100

package/lib/server/routes/compat-scan.js

@@ -0,0 +1,123 @@
+// L2 · routes —— 门控的「按需检查」（0.5.100 加法）：`POST /plugin-console/compat-gate {action:'scan-current'}`
+//
+// 用户 2026-11-02 原话：「我们一般情况下都不预检吧」——compat-pending 只在升级前预扫与启动失败
+// 隔离时写入，平时门控一条记录都没有，而"0 条"会被误读成"全部兼容"。这个动作让用户随时查一次：
+// 对当前补丁里的行逐行跑适配判定，把**判为不适配**的结论记进 compat-pending（`source: 'manual-scan'`），
+// 并回一份统计（检查了几行 / 通过 / 不适配 / 无法判定）。
+//
+// 三条硬边界（判据在 domain/compat-scan.js，写盘纪律在 domain/compat-pending-records.js）：
+//   · 判据复用 `checkPluginFrameworkCompat`（与框架升级预扫同一条链），本文件不新写任何判据；
+//   · **绝不禁用任何行、绝不碰补丁文件** —— 禁用是用户的动作（/toggle）；
+//   · 写盘：备份 → 原子写 → 读回核实 → 失败回滚；坏文件 ⇒ 409 拒绝覆盖（保住用户数据）。
+import { dirname } from 'node:path'
+import { planCurrentScan, recordsFromScan } from '../domain/compat-scan.js'
+import { applyPendingWrite, countPendingRecords, liveRowIdsFromPatch, planScanMerge, readPendingRecords } from '../domain/compat-pending-records.js'
+import { currentFrameworkVersion } from '../domain/framework.js'
+import { readPatchState } from '../domain/patch.js'
+import { listEntries } from '../domain/runtime.js'
+import { sendError, sendJson } from '../infra/httpd.js'
+import { findPatchPath } from '../infra/paths.js'
+
+/** 读回核实的判据：本次写进去的每条 fail 记录都必须真的在盘上，且 check === 'fail'。 */
+function verifyScanWrite(expected) {
+  return (back) => {
+    const rows = (Array.isArray(back?.pending) ? back.pending : []).filter((r) => r !== null && typeof r === 'object')
+    const missing = expected.filter((id) => !rows.some((r) => r.rowId === id && r.check === 'fail'))
+    if (missing.length > 0) return `这些记录没真正落盘：${missing.slice(0, 5).join('、')}`
+    return null
+  }
+}
+
+async function routeCompatScanCurrent(req, res, rc) {
+  const at = Date.now()
+  let profileDir = null
+  let patchRowIds = new Set()
+  try {
+    const patchPath = findPatchPath(rc.ctx)
+    profileDir = dirname(patchPath)
+    patchRowIds = liveRowIdsFromPatch(await readPatchState(patchPath))
+  } catch {
+    sendError(res, 503, '读不到 profile 目录/补丁文件，无法确定要检查的行；本次扫描没有写任何东西', { ok: false, code: 'patch-unreadable' })
+    return
+  }
+  let entries = []
+  try { entries = listEntries(rc.ctx) } catch { entries = [] }
+  let frameworkVersion = null
+  try { frameworkVersion = currentFrameworkVersion(rc.ctx) } catch { frameworkVersion = null }
+  const scan = planCurrentScan({ entries, profileDir, frameworkVersion })
+  const records = recordsFromScan(scan, { at })
+  const read = readPendingRecords()
+  const merge = planScanMerge({
+    read,
+    records,
+    frameworkVersion,
+    lastScan: {
+      at,
+      frameworkVersion: scan.frameworkVersion,
+      checked: scan.checked,
+      pass: scan.pass,
+      fail: scan.fail,
+      unknown: scan.unknown,
+      skipped: scan.skipped.length,
+      source: 'manual-scan',
+    },
+  })
+  const counts = (() => {
+    try { return countPendingRecords(read.records, patchRowIds) } catch { return null }
+  })()
+  const base = {
+    ok: true,
+    action: 'scan-current',
+    frameworkVersion: scan.frameworkVersion,
+    // 扫描统计（面板只放一句短句；明细在 skipped/results 里）
+    checked: scan.checked,
+    pass: scan.pass,
+    fail: scan.fail,
+    unknown: scan.unknown,
+    skipped: scan.skipped,
+    results: scan.results,
+    // 落盘情况
+    recorded: records.length,
+    added: merge.added ?? [],
+    updated: merge.updated ?? [],
+    changed: false,
+    file: read.file,
+    backup: null,
+    verified: false,
+    counts,
+    error: scan.error,
+    note: null,
+  }
+  if (merge.ok !== true) {
+    // 坏文件：结论不写盘，但扫描统计照样如实回（用户至少知道"现在查出来是什么"）
+    sendError(res, merge.status ?? 500, merge.error ?? '扫描结果写入失败', { ...base, error: merge.error ?? scan.error })
+    return
+  }
+  if (merge.changed !== true) {
+    sendJson(res, 200, {
+      ...base,
+      changed: false,
+      note: scan.checked === 0
+        ? '没有可检查的行（补丁里没有可判定的插件行），未写任何记录'
+        : `检查 ${scan.checked} 行：通过 ${scan.pass} / 不适配 ${scan.fail} / 无法判定 ${scan.unknown}；记录没有变化（无需写盘）`,
+    })
+    return
+  }
+  const write = applyPendingWrite({ file: read.file, next: merge.next, verify: verifyScanWrite(records.map((r) => r.rowId)), tag: 'scan' })
+  const payload = {
+    ...base,
+    ok: write.ok === true,
+    changed: write.ok === true,
+    backup: write.backup ?? null,
+    verified: write.verified === true,
+    error: write.error ?? scan.error,
+    note: write.ok === true
+      ? `检查 ${scan.checked} 行：通过 ${scan.pass} / 不适配 ${scan.fail} / 无法判定 ${scan.unknown}`
+        + (records.length > 0 ? `；已记下 ${records.length} 条待适配结论（只记录，未禁用任何行）` : '；没有不适配的行，未新增记录')
+      : null,
+  }
+  if (write.ok === true) sendJson(res, 200, payload)
+  else sendError(res, write.status ?? 500, write.error ?? '扫描结果写入失败', payload)
+}
+
+export { routeCompatScanCurrent }

package/lib/server/routes/compat.js

@@ -29,6 +29,8 @@ import { compareFingerprint, computeFingerprint, planDesktopHostSwitch, readComp
 // 0.5.98 加法：适配门**记录**的删除（真待适配判据 + 写盘纪律都在该模块；本路由只映射状态码）
 import { applyPendingForget, countPendingRecords, liveRowIdsFromPatch, planForgetRecord, planForgetStale, readPendingRecords } from '../domain/compat-pending-records.js'
 import { readPatchState } from '../domain/patch.js'
+// 0.5.100 加法：门控的「按需检查」（只记录结论，绝不禁用任何行）
+import { routeCompatScanCurrent } from './compat-scan.js'
 import { currentFrameworkVersion, detectHostShape } from '../domain/framework.js'
 import { applyDependencyBackfill, planDependencyBackfill } from '../domain/manifest.js'
 import { isProtectedModule } from '../domain/runtime.js'
@@ -458,14 +460,28 @@ async function routeCompatAck(req, res, rc) {
   const ack = writeCompatAck(version)
   sendJson(res, 200, { ok: true, ack, noticeMode: readCompatGate().noticeMode })
 }
+/**
+ * POST /plugin-console/compat-gate 的**动作分派**（0.5.98 起；0.5.100 多一个 `scan-current`）。
+ *
+ *   `{ action: 'forget', rowId }`    删一条记录          → 见下（routeCompatPendingForget 的本体）
+ *   `{ action: 'forget-stale' }`     清掉失效记录        → 同上
+ *   `{ action: 'scan-current' }`     **按需检查**（0.5.100 加法，用户「平时不预检」的痛点）
+ *                                    → routes/compat-scan.js（只记录结论，绝不禁用任何行）
+ *   没有 `action`（或不是已知动作）⇒ **逐字**走原来的总开关逻辑（既有契约零变化）
+ *
+ * 为什么都挤在**既有的 /compat-gate** 上而不新开路由：门控面板的所有写入口必须同源
+ * （否则又要登记一份路由清单，两处判据迟早分叉）。装配层的分流见 routes/index.js#routeCompatGateAny。
+ */
+async function routeCompatGateAction(req, res, rc) {
+  const action = typeof rc.body?.action === 'string' ? rc.body.action.trim() : ''
+  if (action === 'scan-current') return routeCompatScanCurrent(req, res, rc)
+  return routeCompatPendingForget(req, res, rc)
+}
+
 /**
  * POST /plugin-console/compat-gate `{ action: 'forget' | 'forget-stale' }`
  *   —— 适配门**记录**的删除（0.5.98 加法，用户 2026-10-28 明确要求）。
  *
- * 为什么挂在**既有的 /compat-gate** 上而不是新开一条路由：门控面板的所有写入口必须同源
- * （否则又要登记一份路由清单，两处判据迟早分叉）。body 里没有 `action` 时**逐字**走原来的
- * 总开关逻辑（既有契约零变化，装配层的分流见 routes/index.js#routeCompatGateAny）。
- *
  * 语义（三条硬边界，用户定案）：
  *   · 只删 **记录**：不动插件、不动补丁文件、不动 bundles 清单；
  *   · `forget` 删指定 rowId；`forget-stale` 只清「status=pending 且该行已不在补丁里」的失效记录，
@@ -528,4 +544,4 @@ async function routeCompatPendingForget(req, res, rc) {
   else sendError(res, result.status ?? 400, result.error ?? '删除记录失败', payload)
 }
 
-export { hostShapeOf, maybeSwitchToObserver, maybeWriteSnapshot, preflightTimeoutMs, resetHostSwitchChecked, routeCompatAck, routeCompatMode, routeCompatPendingForget, routeCompatStamp, routeCompatStatusGet, routeDeclareInstalled, scheduleAutoPreflight }
+export { hostShapeOf, maybeSwitchToObserver, maybeWriteSnapshot, preflightTimeoutMs, resetHostSwitchChecked, routeCompatAck, routeCompatGateAction, routeCompatMode, routeCompatPendingForget, routeCompatStamp, routeCompatStatusGet, routeDeclareInstalled, scheduleAutoPreflight }

package/lib/server/routes/index.js

@@ -16,7 +16,7 @@ import { readBody, sendError } from '../infra/httpd.js'
 import { routeAiConsent, routeAiEmpowerCancel, routeAiEmpowerList, routeAiEmpowerPlan, routeAiEmpowerRun, routeAiEmpowerStatus } from './ai.js'
 import { routeRunSuggested } from './actions.js'
 import { routeComponentAutostart, routeComponentStart, routeComponentStatus, routeComponentStop, routeComponents, routeRepoClone, routeRepoLandConfig, routeRepoList, routeRepoOpen, routeRepoRemove } from './components.js'
-import { routeCompatAck, routeCompatMode, routeCompatPendingForget, routeCompatStamp, routeCompatStatusGet, routeDeclareInstalled } from './compat.js'
+import { routeCompatAck, routeCompatGateAction, routeCompatMode, routeCompatPendingForget, routeCompatStamp, routeCompatStatusGet, routeDeclareInstalled } from './compat.js'
 import { routeSafeBoot } from './safe-boot.js'
 // issue #22 ②③ 加法：用户备注 / 用户徽章 / 用户自建分组（独立文件，与插件列表完全解耦）
 import { routeAnnotationsGet, routeAnnotationsPost } from './annotations.js'
@@ -90,11 +90,11 @@ function routeDeps() {
  * 于是"分流"留在装配层，"动作实现"落在 routes/compat.js（适配门记录那一族）。
  *
  * 契约：body 里没有 `action`（或不是非空字符串）⇒ **逐字**走原来的总开关逻辑，
- * 既有请求/响应一字不变；带 `action` 才进删除记录那一族（forget / forget-stale）。
+ * 既有请求/响应一字不变；带 `action` 才进动作分派那一族（0.5.98 删记录 / 0.5.100 按需检查）。
  */
 async function routeCompatGateAny(req, res, rc) {
   const action = typeof rc.body?.action === 'string' ? rc.body.action : ''
-  if (action !== '') return routeCompatPendingForget(req, res, rc)
+  if (action !== '') return routeCompatGateAction(req, res, rc)
   return routeCompatGate(req, res, rc)
 }
 

package/lib/server/routes/state.js

@@ -276,11 +276,25 @@ async function routeStateGet(req, res, rc) {
     // ★ 0.5.98 加法：门控明细行补两个**只增不改**的字段 —— `rowMissing`（这一行的 rowId 已不在
     //   当前补丁里）与 `actionable`（与计数同一个判据）。面板据此如实标注「该行已不存在」并给删除入口；
     //   既有字段（pendingCount / rows 的全部旧字段）一个不少、语义不变。
+    // ★ 0.5.101 加法（用户 2026-11-02）：**运行期加载失败**的行（`fiberPhase === 'failed'`）。
+    //   真机现场：`experimental-inspector` 因 `@deepseek-ai/cordis` 解析失败而挂载失败，而门控**完全
+    //   看不到它** —— 因为这条失败不经过预扫/隔离链。这里只补一个**视图**字段：
+    //   **绝不写 compat-pending.json**（那是适配裁决记录，不能被运行期故障污染）、不改任何既有字段。
+    const loadFailed = entries
+      .filter((e) => e.fiberPhase === 'failed' && typeof e.rowId === 'string' && e.rowId !== '')
+      .map((e) => ({ rowId: e.rowId, moduleName: e.moduleName ?? null, version: e.version ?? null, fiberPhase: 'failed', enabled: e.enabled === true }))
     const gatingOut = (() => {
       const g = gatingSummary(ctx, compatPending, entries, compatVerdicts)
-      return { ...g, pending: annotateGateRows(g.pending, patchRowIds), adopted: annotateGateRows(g.adopted, patchRowIds) }
+      return {
+        ...g,
+        pending: annotateGateRows(g.pending, patchRowIds),
+        adopted: annotateGateRows(g.adopted, patchRowIds),
+        // 只增字段：加载失败的行 + 计数（面板据此决定分区显不显示）
+        loadFailed,
+        loadFailedCount: loadFailed.length,
+      }
     })()
-    sendJson(res, 200, { ok: true, entries: allEntries, skippedBundles, host, health, patchPath, compat, installJobs: jobs, recentFailures, pendingRestart, github: { loggedIn: auth.loggedIn, login: auth.login }, patch: { disables: patch.disables, forced: patch.forced, inserts: patch.inserts }, framework, lockAutofix, patchHeal: patchHeal === null ? null : { healed: patchHeal.healed ?? [], autoDisabled: patchHeal.autoDisabled ?? [], healedAt: patchHeal.healedAt ?? 0, written: patchHeal.written === true, writeError: patchHeal.writeError ?? null, skippedFrameworkOwned: (patchHeal.skipped ?? []).map((s) => s.id ?? null), uncertain: (patchHeal.uncertain ?? []).map((u) => u.id ?? null) }, gating: gatingOut, compatPending: compatPending === null ? null : { frameworkVersion: compatPending.frameworkVersion ?? null, upgradeFrom: compatPending.upgradeFrom ?? null, pending: (compatPending.pending ?? []).filter((p) => (p.status ?? 'pending') === 'pending').map((p) => ({ rowId: p.rowId, moduleName: p.moduleName, version: p.version ?? null, checkNote: p.checkNote ?? null, check: p.check ?? null, riskyApprovedAt: p.riskyApprovedAt ?? null, adoptable: adoptable.get(p.rowId) ?? null, verdict: compatVerdicts.get(p.rowId) ?? null })), verdictRefresh: pendingState.refresh === null ? null : { version: pendingState.refresh.version ?? null, updated: pendingState.refresh.updated ?? [], unchanged: pendingState.refresh.unchanged ?? [], unresolved: pendingState.refresh.unresolved ?? [], wrote: pendingState.refresh.wrote === true, writeError: pendingState.refresh.writeError ?? null }, actionableCount: pendingCounts.actionableCount, staleCount: pendingCounts.staleCount }, compatGate, rollback: rollbackRec, selfVersion, components: findComponents().map((c) => ({ id: c.id, name: c.name, kind: c.kind ?? 'server', pid: c.pid ?? null, port: c.port ?? null, healthUrl: c.healthUrl ?? null, uiUrl: compUiUrl(c), autoStart: c.autoStart === true })) })
+    sendJson(res, 200, { ok: true, entries: allEntries, skippedBundles, host, health, patchPath, compat, installJobs: jobs, recentFailures, pendingRestart, github: { loggedIn: auth.loggedIn, login: auth.login }, patch: { disables: patch.disables, forced: patch.forced, inserts: patch.inserts }, framework, lockAutofix, patchHeal: patchHeal === null ? null : { healed: patchHeal.healed ?? [], autoDisabled: patchHeal.autoDisabled ?? [], healedAt: patchHeal.healedAt ?? 0, written: patchHeal.written === true, writeError: patchHeal.writeError ?? null, skippedFrameworkOwned: (patchHeal.skipped ?? []).map((s) => s.id ?? null), uncertain: (patchHeal.uncertain ?? []).map((u) => u.id ?? null) }, gating: gatingOut, compatPending: compatPending === null ? null : { frameworkVersion: compatPending.frameworkVersion ?? null, upgradeFrom: compatPending.upgradeFrom ?? null, pending: (compatPending.pending ?? []).filter((p) => (p.status ?? 'pending') === 'pending').map((p) => ({ rowId: p.rowId, moduleName: p.moduleName, version: p.version ?? null, checkNote: p.checkNote ?? null, check: p.check ?? null, riskyApprovedAt: p.riskyApprovedAt ?? null, adoptable: adoptable.get(p.rowId) ?? null, verdict: compatVerdicts.get(p.rowId) ?? null })), verdictRefresh: pendingState.refresh === null ? null : { version: pendingState.refresh.version ?? null, updated: pendingState.refresh.updated ?? [], unchanged: pendingState.refresh.unchanged ?? [], unresolved: pendingState.refresh.unresolved ?? [], wrote: pendingState.refresh.wrote === true, writeError: pendingState.refresh.writeError ?? null }, actionableCount: pendingCounts.actionableCount, staleCount: pendingCounts.staleCount, lastScan: compatPending.lastScan ?? null }, compatGate, rollback: rollbackRec, selfVersion, components: findComponents().map((c) => ({ id: c.id, name: c.name, kind: c.kind ?? 'server', pid: c.pid ?? null, port: c.port ?? null, healthUrl: c.healthUrl ?? null, uiUrl: compUiUrl(c), autoStart: c.autoStart === true })) })
     return
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noob-stupid/dsh-plugin-console",
-  "version": "0.5.98",
+  "version": "0.5.100",
   "description": "DSH 框架升级安全与插件升级门控：一键升级、失败自动回滚、升级后回滚上版、旧插件不适配自动禁用；内置多源插件市场为发现层，插件源全部可自定义，可指向公司内网私有源 / 私有索引 / 本地 Git 仓库，纯内网离线可用 | Framework upgrade safety & plugin version gating for DSH, with a customizable multi-source plugin market: point every source at internal mirrors or a local file:// repo for intranet-only, offline installs.",
   "repository": {
     "type": "git",