dsh-config-manager 0.1.64 → 0.1.65

package/README.md

@@ -79,7 +79,7 @@ Browse the built-in official market for ready-made configurations (model provide
 | 🔄 | **Remote Sync** | Push/pull portable config via **Git private repo or WebDAV** (secrets do not sync by default; encrypted snapshots can optionally carry encrypted credentials) |
 | ⏰ | **Scheduled backups** | Full backup on a fixed cadence (6h / 12h / 24h / 7d) — set-and-forget, secrets never included |
 | 🛒 | **Config Marketplace** | Browse & one-click install community configs — supply-chain warnings + per-item content selection (change summary + in-place high-risk flags) |
-| 🗂️ | **Profiles (DSH profiles)** | Manage `$DSH_HOME/profiles/<name>` directly: list / create from a shipped template / rename / hard delete / record which profile the next launch should use |
+| 🗂️ | **Profiles (DSH profiles)** | Manage `$DSH_HOME/profiles/<name>` directly: list / create from a shipped template / rename / hard delete / **launch this profile (independent instance)** / **stop the instance** (the row button flips between Launch and Stop with the running state) |
 | 🌐 | **Bilingual UI** | Interface, reports and error details follow the DSH app language (中文 / English) |
 | 🤖 | **Agent tools** | Backup / snapshot / restore / sync right from an agent session |
 
@@ -276,11 +276,18 @@ launched with `dsh --profile <name>`. This page reads and writes that directory
 | Create | Writes the standard three files under `$DSH_HOME/profiles/<name>` (equivalent to the shipped `initProfile`); starting templates: base / web / headless / sdk / sdk-minimal / acp |
 | Rename | Directory move + fixes the manifest name field; the running profile is refused |
 | Delete | **Hard-deletes the whole directory** (including node_modules); deleting the running profile needs an extra checkbox |
-| Next launch | Only records which profile to use next and shows the `dsh --profile <name>` restart command |
-
-> DSH **cannot switch profiles while running** (the profile comes from the launch flag and bundle layers resolve at boot),
-> so this page never touches processes — it records your choice and asks you to restart.
-> Third-party plugins must be installed into that profile separately (`dsh plugin --profile <name> add <pkg>`).
+| Launch this profile | The **switch that actually works**: starts an **independent DSH instance** for that profile (free port picked automatically, browser opened automatically); the running instance and its tasks are untouched. Web-shaped profiles only — non-web ones (e.g. the base template) have no browser UI, so the page shows the terminal command instead of failing silently |
+| Stop instance | While that profile has a running instance, the row button flips from Launch to Stop (the Runtime card also offers one); it asks the process to exit first (grace period) and terminates the process tree only after that, reporting which path was used. **Deleting a profile with a running instance is refused** |
+| No duplicate launches | “Which profiles are running” = the ledger of instances this plugin started ∪ **each instance's own heartbeat** (`<dataDir>/running/<profile>.json`, pid/port only — **never the auth token**). So even a profile you started by hand with `dsh web` will not be launched a second time (you get a clear “already running” message); the instance you are using right now offers no Stop button (that would kill your own session — close that window/terminal, or stop it from the instance that launched it) |
+
+> **Why there is no "set as next launch"** (button and marker removed in 2026-09): DSH has **no "default / next launch
+> profile" state** — the profile comes only from the launch arguments (`dsh <name>` / `--profile <name>`; `dsh web` is a
+> hard-coded alias), so any "which profile to use next" marker has **no consumer at all**: the `dsh web` you type
+> yourself still boots web after a restart. Only two mechanisms really switch profiles: ① this page's "launch this
+> profile" (an extra instance, no interruption, stoppable at any time), ② pointing your launch command/shortcut at
+> `dsh --profile <name>` (ecosystem tools such as dshm and DSH Launcher all spawn instances from an external launcher).
+> Instances started by this plugin are recorded in `<dataDir>/launches.json` (pid/port/log), which is why they can be
+> stopped; third-party plugins must be installed into that profile separately (`dsh plugin --profile <name> add <pkg>`).
 > The tab lives at Settings → "Backup & Migration" → **Profiles**.
 
 ### 📸 Snapshot restore (undo an import)
@@ -540,6 +547,24 @@ Yes. The import wizard asks for the export-time encryption password and verifies
 5. **Encrypted backups**: a lost password means the `secrets.enc` can't be decrypted (by design — keep your password safe)
 6. **Snapshot restore is offline and honest**: entries the offline engine can't restore (settings namespaces / patch lines when the snapshot has no whole-file backup, workspace records stored in DSH storages) are reported as skipped with a pointer to online rollback; credential **values** are never auto-written (manual re-entry hint only); old snapshots without a plugin baseline only get a hint to remove added plugins manually
 
+## 💬 Feedback
+
+Found a bug, a misaligned panel, a button that does nothing — or just have an idea? **All of it is welcome.** UI problems especially: they are the easiest thing to overlook and the part that real usage should decide.
+
+| What you want to say | Where |
+|---|---|
+| 🎨 **UI problem**: misaligned layout, broken styling, dark mode, scaling, a control that does nothing | [UI issue form](https://github.com/xiajiajun516/dsh-config-manager/issues/new?template=ui_bug.en.yml) — screenshot + browser version is enough |
+| 🐛 **Something is broken / an error / wrong data** | [Bug report](https://github.com/xiajiajun516/dsh-config-manager/issues/new?template=bug_report.en.yml) |
+| ✨ **New feature idea** | [Feature request](https://github.com/xiajiajun516/dsh-config-manager/issues/new?template=feature_request.en.yml) |
+| 💬 **Not sure whether it is a bug — just asking** | [Discussions](https://github.com/xiajiajun516/dsh-config-manager/discussions) |
+| 🔒 **Security issue / leaked credential** | [Private security advisory](https://github.com/xiajiajun516/dsh-config-manager/security/advisories/new) (please do not open a public issue) |
+
+**Report straight from the plugin**: Settings → Backup & Migration → **About** → "Issues"; or hit **Copy environment info** on that page — plugin version / DSH version / platform are included, so you can paste it into the issue instead of typing version numbers.
+
+**Every report gets followed up**: a new issue receives an immediate reply and the `needs-triage` label, and progress is visible in the labels (`needs-info` → `confirmed` → `fixed`). Fixed problems end up in [CHANGELOG.md](CHANGELOG.md) under the release that fixed them, tagged with the issue number (e.g. #38 / #43 / #45) — that is where a report finally lands.
+
+> ⚠️ Please search for an existing issue first, and **strip every API key / token / password** — including the ones visible in screenshots and logs.
+
 ## 🙏 Contributors
 
 - **lux-liang (Jialiang Liang)** — [PR #44](https://github.com/xiajiajun516/dsh-config-manager/pull/44): independently fixed the

package/README.zh-CN.md

@@ -13,7 +13,7 @@ DSH Config Manager 是一个 DeepSeek Harness 配置备份与迁移插件：一
 - Workspace / AGENTS.md
 
 > DSH 的 profile（`$DSH_HOME/profiles/<name>`）本身**不随备份迁移**（它是「用哪套插件组合启动」的机器本地选择）；
-> 本插件的「档案」页可以列表 / 新建 / 重命名 / 删除它们，并记录「下次启动用哪个」。
+> 本插件的「档案」页可以列表 / 新建 / 重命名 / 删除它们，也可以**用某个档案另起一个独立实例并随时停止它**（真正可用的切换）。
 
 把当前 DeepSeek Harness 环境导出为可移植备份，在另一台电脑上一键恢复；也支持通过 Git / WebDAV 跨机同步（密钥默认不同步，勾选「导出密钥」并加密后可随加密快照迁移）；还能通过内置**配置市场**浏览、一键安装社区分享的现成配置。
 
@@ -81,7 +81,7 @@ DSH 是你的 AI 助手工作台，里面存着你的各种设置：模型配置
 | 🔄 | **远程同步** | 通过 **Git 私有仓库或 WebDAV** 推送 / 拉取可移植配置（密钥默认不参与同步；加密快照可选携带密文凭据） |
 | ⏰ | **定时全量备份** | 按固定周期（6h / 12h / 24h / 7d）自动全量备份，一劳永逸，密钥永不包含 |
 | 🛒 | **配置市场** | 浏览并一键安装社区分享的配置——供应链警示 + 逐项内容选择（可就地看到改动与高风险分区） |
-| 🗂️ | **档案 Profiles（DSH profile）** | 直接管理 `$DSH_HOME/profiles/<name>`：列表 / 新建（官方模板）/ 重命名 / 物理删除 / 记录「下次启动用哪个」 |
+| 🗂️ | **档案 Profiles（DSH profile）** | 直接管理 `$DSH_HOME/profiles/<name>`：列表 / 新建（官方模板）/ 重命名 / 物理删除 / **启动该档案（独立实例）** / **停止实例**（行内按钮按运行状态在「启动 ↔ 停止」间切换） |
 | 🧩 | **本地插件随备份迁移** | `link:` / `file:` 安装的本地开发插件会被打包进备份，换机不再丢失 |
 | 🗄️ | **保留策略可配（GFS 分层）** | 「最近 N 份 + 每月留 1 份 + 每年留 1 份」，默认值等价旧行为 |
 | 🤖 | **Agent 工具** | Agent 会话内直接备份 / 快照 / 恢复 / 同步 |
@@ -272,10 +272,17 @@ dsh plugin --profile web add dsh-config-manager@latest
 | 新建 | 在 `$DSH_HOME/profiles/<name>` 写标准三件套（与官方 `initProfile` 等价）；可选起步模板 base / web / headless / sdk / sdk-minimal / acp |
 | 重命名 | 目录级移动 + 同步修正 `package.json` 的 name；当前运行中的档案拒绝重命名 |
 | 删除 | **物理删除整个目录**（含 node_modules）；当前运行中的档案需额外勾选确认 |
-| 下次启动 | 只写「下次启动用哪个」标记 + 给出 `dsh --profile <name>` 重启命令 |
-
-> DSH **无法在运行中切换 profile**（profile 由启动参数决定，bundle 层在启动时解析），因此本页不做进程操作，
-> 只记录选择并提示你手动重启。第三方插件需要在该档案里单独安装（`dsh plugin --profile <name> add <pkg>`）。
+| 启动该档案 | **真正可用的切换**：以该档案另起一个**独立 DSH 实例**（自动挑空闲端口 + 自动打开浏览器），当前实例与正在跑的任务不受影响；只支持 **web 形态**档案：非 web 形态（如 base 模板）没有浏览器界面，点击后给出终端命令而不是静默失败 |
+| 停止实例 | 该档案有实例在跑时，行内「启动」自动变成「停止」（运行状态卡里也有一个）；先请它自己退出（优雅期），超时才结束进程树，并如实告诉你是哪种；**实例运行中拒绝物理删除该档案** |
+| 不会重复启动 | 「哪些档案在跑」= 本插件启动的实例台账 ∪ **每个实例自报的心跳**（`<dataDir>/running/<profile>.json`，只含 pid/端口，**不含认证 token**）→ 哪怕某个档案是你手动 `dsh web` 起来的，本页也不会再启动第二个同名实例（明确提示已在运行）；**当前这个实例本身**不给停止按钮（停自己会把你自己杀掉——请关窗口/终端，或到启动它的那个实例里停止） |
+
+> **为什么没有「设为下次启动」**（2026-09 该按钮与标记一并移除）：DSH **没有「默认 / 下次启动 profile」这种状态** ——
+> profile 只由启动参数决定（`dsh <名>` / `--profile <名>`，`dsh web` 是硬编码别名），任何「下次启动用哪个」的标记
+> **都没有消费者**：你自己敲的 `dsh web` 重启后当然还是 web。真正可用的切换只有两种：① 本页的「启动该档案」
+> 另起一个实例（不打断当前会话，随时可停）；② 把启动命令/快捷方式换成 `dsh --profile <名>`
+> （生态里的 dshm、DSH Launcher 也都是「外部启动器 spawn 实例」这一条路）。
+> 本插件启动的实例记在 `<dataDir>/launches.json`（pid/端口/日志），所以**关得掉**；
+> 第三方插件需要在该档案里单独安装（`dsh plugin --profile <name> add <pkg>`）。
 
 ### 📸 快照恢复（撤销一次导入）
 
@@ -458,6 +465,24 @@ dsh-config-manager backup --sections skills,self          # 收窄范围
 6. **快照恢复是离线的、诚实的**：离线引擎无法恢复的条目（快照无整文件备份时的 settings namespace / patch 行、存在 DSH storages 里的 workspace 记录）会如实列为跳过并指向在线回滚；凭据**值**绝不自动改写（只提示人工补录）；无插件基线的旧快照只提示人工核对新增插件
 7. **本地源插件（`link:` / `file:`）随备份打包**：导出时执行 `npm pack` 把本地开发中的插件打成 tarball 一并备份，导入时解包到 `$DSH_HOME/dsh-config-manager/local-plugins/` 后按 `file:` 安装。因此：① 备份体积会随本地插件的体积增大（单插件超过 100 MB 会被跳过并告警，建议先发布到 registry / git 再备份）；② 插件**源码**会进入备份（与「密钥永不进备份」不冲突——密钥仍被排除，这里进的是代码）；③ 打包需要本机有可用的 `npm`，无 npm 时该插件退化为原行为（保留原 spec，换机后仍需手工安装）
 
+## 💬 反馈与建议
+
+遇到 Bug、界面错位、按钮点了没反应，或者只是有个想法 —— **都欢迎提出来**。界面问题尤其欢迎：这是最容易被自己忽略、也最该由真实使用场景决定的部分。
+
+| 你想说什么 | 去哪儿 |
+|---|---|
+| 🎨 **界面问题**：布局错位、样式异常、深色模式、缩放、按钮无响应 | [UI 问题表单](https://github.com/xiajiajun516/dsh-config-manager/issues/new?template=ui_bug.yml)（只要截图 + 浏览器版本） |
+| 🐛 **功能出错 / 报错 / 数据不对** | [Bug 报告](https://github.com/xiajiajun516/dsh-config-manager/issues/new?template=bug_report.yml) |
+| ✨ **新功能建议** | [功能建议](https://github.com/xiajiajun516/dsh-config-manager/issues/new?template=feature_request.yml) |
+| 💬 **不确定是不是 Bug，想先问问** | [Discussions](https://github.com/xiajiajun516/dsh-config-manager/discussions) |
+| 🔒 **安全问题 / 密钥泄露** | [私密安全公告](https://github.com/xiajiajun516/dsh-config-manager/security/advisories/new)（请不要开公开 issue） |
+
+**在插件里就地反馈**：设置 → 备份与迁移 → **关于** → 「反馈问题」；或点「关于」里的**复制环境信息**按钮，插件版本 / DSH 版本 / 平台会自动带上，粘进 issue 即可 —— 不用手抄版本号。
+
+**每条都会跟进**：新 issue 会立刻收到一条回复并打上 `needs-triage`，处理进度体现在标签上（`needs-info` → `confirmed` → `fixed`）。修好的问题会出现在 [CHANGELOG.md](CHANGELOG.md) 的对应版本条目里，带 issue 编号（例：#38 / #43 / #45）—— 这就是一条反馈最终的落地记录。
+
+> ⚠️ 提交前请先搜一下是否已有同类 issue，并**抹掉任何 API Key / Token / 密码**（截图和日志里也算）。
+
 ## 🙏 贡献者
 
 - **lux-liang (Jialiang Liang)** —— [PR #44](https://github.com/xiajiajun516/dsh-config-manager/pull/44)：独立修复了 issue #43

package/lib/cli/index.d.ts

@@ -75,6 +75,17 @@ export declare function resolveControlRoots(opts?: {
     dataRoot?: string;
     dataDir?: string;
 }, env?: Record<string, string | undefined>): string[];
+/**
+ * `recover-stale-lock` 的锁目录解析：在「候选控制面根」（与 SAFE MODE 同源）里挑第一个**真的躺着**
+ * ownership 文件的 `<root>/locks`；全都没命中 → 缺省根 `$DSH_HOME/dsh-config-manager/locks`。
+ *
+ * 为什么不能写死缺省根（issue #36 的兜底路径）：宿主 `dataDir` 可被配置成非缺省值，写死会让残留锁
+ * 「明明在磁盘上，CLI 却报没有」→ 用户只能手工删锁文件（正是本命令要消灭的处境）。
+ */
+export declare function resolveRecoverLocksDir(opts?: {
+    dataRoot?: string;
+    dataDir?: string;
+}, env?: Record<string, string | undefined>): string;
 /**
  * Phase 3 SAFE MODE 门：任一候选控制面根下存在 durable 标记 → 返回错误文案（调用方必须拒绝执行）。
  * 返回 null = 明确未阻断。

package/lib/cli/index.js

@@ -31,7 +31,7 @@ import { createInterface } from 'node:readline/promises';
 import { stdin as processStdin, stdout as processStdout } from 'node:process';
 import { listSnapshots, planRestore, restore, } from '../core/restore.js';
 import { REINSTALL_ITEMS, buildReinstallPlan, isWindows, detectInstalledDshVersion, writeReinstallRecoveryPoint, } from '../core/reinstall.js';
-import { EnvironmentLockManager, runWithMutationLock, EnvironmentLockUnavailableError } from '../utils/env-lock.js';
+import { EnvironmentLockManager, runWithMutationLock, EnvironmentLockUnavailableError, OWNERSHIP_FILE } from '../utils/env-lock.js';
 import { runSessionsRepair } from './sessions-repair.js';
 import { Phase3Recovery, readSafeModeMarkerSync, safeModeMarkerPath } from '../core/phase3-host.js';
 import { verifyBackupZip, } from '../core/backup-verify.js';
@@ -157,12 +157,10 @@ export function parseCli(argv) {
     if (command === 'sessions')
         return parseCliSessions(argv);
     if (command === 'recover-stale-lock') {
-        // recover-stale-lock：独立显式 recovery，不接受 destructive 执行参数（只能 --data-dir 定位锁目录）
-        for (const flag of argv.slice(1)) {
-            if (flag !== '--data-dir' && !flag.startsWith('--data-dir=') && !flag.startsWith('-')) {
-                return { ok: false, error: `recover-stale-lock 只接受 --data-dir / accepts only --data-dir` };
-            }
-        }
+        // recover-stale-lock：独立显式 recovery，不接受 destructive 执行参数（只能 --data-dir 定位锁目录）。
+        // 只需 parseCliDataDir —— 它自己就会拒绝任何未知 flag。此前这里还有一道「逐 token 只许 --data-dir」的
+        // 前置校验，会把 `--data-dir <dir>` 的**值**也当成非法 token 拒掉（只有 `--data-dir=<dir>` 能过），
+        // 于是 help 里写的空格写法在这个「只剩 CLI 可用」的紧急路径上失效。
         return parseCliDataDir(argv);
     }
     const options = { command, dryRun: false, profile: 'web', yes: false, list: false, wipeConfig: false, json: false, positionals: [] };
@@ -308,6 +306,22 @@ export function resolveControlRoots(opts = {}, env = process.env) {
     add(path.join(resolveDshHome(env), 'dsh-config-manager'));
     return out;
 }
+/**
+ * `recover-stale-lock` 的锁目录解析：在「候选控制面根」（与 SAFE MODE 同源）里挑第一个**真的躺着**
+ * ownership 文件的 `<root>/locks`；全都没命中 → 缺省根 `$DSH_HOME/dsh-config-manager/locks`。
+ *
+ * 为什么不能写死缺省根（issue #36 的兜底路径）：宿主 `dataDir` 可被配置成非缺省值，写死会让残留锁
+ * 「明明在磁盘上，CLI 却报没有」→ 用户只能手工删锁文件（正是本命令要消灭的处境）。
+ */
+export function resolveRecoverLocksDir(opts = {}, env = process.env) {
+    const fallback = path.join(resolveDshHome(env), 'dsh-config-manager', 'locks');
+    for (const root of resolveControlRoots(opts, env)) {
+        const candidate = path.join(root, 'locks');
+        if (fssync.existsSync(path.join(candidate, OWNERSHIP_FILE)))
+            return candidate;
+    }
+    return fallback;
+}
 /**
  * Phase 3 SAFE MODE 门：任一候选控制面根下存在 durable 标记 → 返回错误文案（调用方必须拒绝执行）。
  * 返回 null = 明确未阻断。
@@ -728,11 +742,11 @@ export async function runCli(argv, io = defaultIo, env = process.env, deps = {})
         }, io);
     }
     const lockDataDir = resolveDataDir(options.dataDir, env);
-    const lockHome = resolveDshHome(env);
     // recover-stale-lock：独立显式 recovery（只 inspect + prove stale + 原子回收；不自动、无 --force）。
     if (options.command === 'recover-stale-lock') {
+        // 锁目录按候选根定位（宿主 dataDir 可被配置成非缺省值，写死缺省根会「找不到锁」→ 用户只能手工删文件）。
         const lock = new EnvironmentLockManager({
-            locksDir: path.join(lockHome, 'dsh-config-manager', 'locks'),
+            locksDir: resolveRecoverLocksDir({ dataRoot: options.dataRoot, dataDir: options.dataDir }, env),
             op: 'recover-stale-lock',
             target: lockDataDir,
             lockVersion: '0.1.0',