dsh-m 0.3.0 → 0.4.0

package/lib/client.js

@@ -306,7 +306,10 @@ function installedViewModel(it) {
     sourceLabelKey: { npm: "src.npm", github: "src.github", link: "src.link", file: "src.file", unknown: "src.unknown" }[it.source] || null,
     guard: uninstallGuardKeys(it),
     latestLabel: it.latestTag || (it.latestVersion ? `v${it.latestVersion}` : ""),
-    latestLabelDetail: it.latestTag || (it.latestVersion ? `v${it.latestVersion}` : "\u2014")
+    latestLabelDetail: it.latestTag || (it.latestVersion ? `v${it.latestVersion}` : "\u2014"),
+    // 0.4.0（Task 17）：运行相位/开关状态的 sub 行渲染原料；相位点 class 映射归 toggle-view
+    phaseKey: it.phase ? `phase.${it.phase}` : null,
+    enabledLabelKey: it.enabled === false ? "toggle.state.off" : "toggle.state.on"
   };
 }
 function registrySourceKey(data) {
@@ -334,6 +337,51 @@ var init_installed_view = __esm({
   }
 });
 
+// src/client/toggle-view.js
+var toggle_view_exports = {};
+__export(toggle_view_exports, {
+  toggleNoticeKeys: () => toggleNoticeKeys,
+  toggleViewModel: () => toggleViewModel
+});
+function toggleViewModel(it) {
+  const phase = PHASE_VIEW[it.phase] ?? { phaseDotClass: "", phaseLabelKey: null };
+  const toggleable = it.toggleable !== false && it.lockReason === void 0;
+  return {
+    phaseDotClass: phase.phaseDotClass,
+    phaseLabelKey: phase.phaseLabelKey,
+    switchOn: it.enabled === true,
+    switchDisabled: !toggleable,
+    switchTitleKey: it.lockReason ? LOCK_TITLE_KEYS[it.lockReason] || null : null
+  };
+}
+function toggleNoticeKeys(result) {
+  const direction = result.enabled === true ? "on" : "off";
+  const applied = result.applied === "live" ? "live" : "restart";
+  return {
+    textKey: `notify.toggled.${direction}.${applied}`,
+    params: { pkg: result.pkg || "" },
+    needsRestart: applied === "restart"
+  };
+}
+var PHASE_VIEW, LOCK_TITLE_KEYS;
+var init_toggle_view = __esm({
+  "src/client/toggle-view.js"() {
+    "use strict";
+    PHASE_VIEW = {
+      active: { phaseDotClass: "ok", phaseLabelKey: "phase.active" },
+      failed: { phaseDotClass: "err", phaseLabelKey: "phase.failed" },
+      pending: { phaseDotClass: "idle", phaseLabelKey: "phase.pending" },
+      loading: { phaseDotClass: "busy", phaseLabelKey: "phase.loading" },
+      unloading: { phaseDotClass: "busy", phaseLabelKey: "phase.unloading" }
+    };
+    LOCK_TITLE_KEYS = {
+      self: "toggle.lock.self",
+      protected: "toggle.lock.protected",
+      "no-entry": "toggle.lock.noentry"
+    };
+  }
+});
+
 // src/client/tool-view.js
 var tool_view_exports = {};
 __export(tool_view_exports, {
@@ -438,6 +486,7 @@ var { MARKET_PAGE_SIZE: MARKET_PAGE_SIZE2, normalizeMarketQuery: normalizeMarket
 var { createMarkdown: createMarkdown2 } = (init_markdown(), __toCommonJS(markdown_exports));
 var { ExtLink, MdImg, renderMarkdown } = createMarkdown2(h);
 var { installedViewModel: installedViewModel2, registrySourceKey: registrySourceKey2 } = (init_installed_view(), __toCommonJS(installed_view_exports));
+var { toggleViewModel: toggleViewModel2, toggleNoticeKeys: toggleNoticeKeys2 } = (init_toggle_view(), __toCommonJS(toggle_view_exports));
 var { pickPayload: pickPayload2, parseToolArgs: parseToolArgs2 } = (init_tool_view(), __toCommonJS(tool_view_exports));
 var { RESTART_POLL_MS: RESTART_POLL_MS2, RESTART_DEADLINE_MS: RESTART_DEADLINE_MS2, nextRestartWait: nextRestartWait2, isAmbiguousRestartRequestError: isAmbiguousRestartRequestError2 } = (init_restart_wait(), __toCommonJS(restart_wait_exports));
 var { refreshAfterMutation: refreshAfterMutation2 } = (init_view_refresh(), __toCommonJS(view_refresh_exports));
@@ -572,6 +621,37 @@ var ZH = {
   "registry.refreshed": "\u6536\u5F55\u6E05\u5355\u5DF2\u5F3A\u5236\u5237\u65B0",
   "notify.installed": "\u5DF2\u5B89\u88C5 {pkg}{version}",
   "notify.allowbuilds": "\uFF08\u6CE8\u610F\uFF1A\u8BE5\u63D2\u4EF6\u6267\u884C\u4E86\u6784\u5EFA\u811A\u672C\uFF0C\u5DF2\u6309\u7B56\u7565\u653E\u884C\uFF09",
+  "notify.builds": "\uFF08\u5DF2\u7CBE\u786E\u653E\u884C\u6784\u5EFA\u811A\u672C\uFF1A{names}\uFF09",
+  "notify.builds.fallback": "\uFF08\u6CE8\u610F\uFF1A\u6784\u5EFA\u811A\u672C\u540D\u5355\u4E0D\u53EF\u8BFB\uFF0C\u5DF2\u5168\u91CF\u515C\u5E95\u653E\u884C\uFF09",
+  "notify.bundlewarning": "\uFF08\u6CE8\u610F\uFF1A\u8BE5\u5305\u65E0\u8865\u4E01\u5C42\uFF0C\u5DF2\u88C5\u5165\u4E3A\u7EAF\u4F9D\u8D56\u4E0D\u4F1A\u751F\u6548\uFF1B\u53EF\u5378\u8F7D\u6216\u5230\u6536\u5F55\u4ED3\u5E93\u53CD\u9988\uFF09",
+  "notify.toggled.on.live": "\u5DF2\u542F\u7528 {pkg}\uFF08\u5373\u65F6\u751F\u6548\uFF09",
+  "notify.toggled.off.live": "\u5DF2\u505C\u7528 {pkg}\uFF08\u5373\u65F6\u751F\u6548\uFF09",
+  "notify.toggled.on.restart": "\u5DF2\u542F\u7528 {pkg}\uFF08\u9700\u91CD\u542F\u751F\u6548\uFF09",
+  "notify.toggled.off.restart": "\u5DF2\u505C\u7528 {pkg}\uFF08\u9700\u91CD\u542F\u751F\u6548\uFF09",
+  "toggle.state.on": "\u8FD0\u884C\u4E2D",
+  "toggle.state.off": "\u5DF2\u505C\u7528",
+  "toggle.lock.self": "dsh-m \u81EA\u8EAB\u4E0D\u53EF\u5F00\u5173",
+  "toggle.lock.protected": "\u5B98\u65B9\u5BBF\u4E3B\u547D\u8109\uFF0C\u4E0D\u53EF\u5F00\u5173",
+  "toggle.lock.noentry": "\u672A\u88C5\u8F7D\uFF08\u4E0D\u5728\u52A0\u8F7D\u6811\uFF09",
+  "toggle.failed": "\u5F00\u5173\u64CD\u4F5C\u5931\u8D25\uFF1A{err}",
+  "phase.active": "active",
+  "phase.failed": "failed",
+  "phase.pending": "pending",
+  "phase.loading": "loading",
+  "phase.unloading": "unloading",
+  "compat.title": "\u517C\u5BB9\u6027\u98CE\u9669\u786E\u8BA4",
+  "compat.body": "{pkg}@{version} \u58F0\u660E\u7684 peerDependencies \u4E0E\u5F53\u524D DSH {runtime} \u4E0D\u517C\u5BB9\uFF1A",
+  "compat.risk": "\u7EE7\u7EED\u5B89\u88C5\u53EF\u80FD\u5BFC\u81F4\u5D29\u6E83\u6216\u6570\u636E\u4E22\u5931\u3002\u786E\u5B9A\u4ECD\u8981\u5B89\u88C5\u5417\uFF1F",
+  "compat.force": "\u4ECD\u8981\u5B89\u88C5",
+  "common.cancel": "\u53D6\u6D88",
+  "settings.probe": "\u5143\u6570\u636E\u6E90",
+  "settings.probe.npmjs": "npmjs\uFF08\u7ADE\u901F\u80DC\u51FA\uFF09",
+  "settings.probe.mirror": "npmmirror\uFF08\u7ADE\u901F\u80DC\u51FA\uFF09",
+  "settings.probe.none": "\u9ED8\u8BA4 npmjs\uFF08\u672A\u63A2\u6D4B/\u53CC\u4E0D\u901A\uFF09",
+  "settings.probe.toggle": "\u7ADE\u901F\u63A2\u6D4B",
+  "settings.probe.apply": "\u5E94\u7528",
+  "settings.probe.applied": "\u63A2\u6D4B\u914D\u7F6E\u5DF2\u66F4\u65B0\uFF08\u5373\u65F6\u751F\u6548\uFF09",
+  "settings.probe.failed": "\u63A2\u6D4B\u914D\u7F6E\u4FDD\u5B58\u5931\u8D25\uFF1A{err}",
   "notify.uninstalled": "\u5DF2\u5378\u8F7D {pkg}",
   "notify.livedisabled": "\uFF08\u5DF2\u5148\u4E0B\u7EBF\u8FD0\u884C\u4E2D\u7684\u754C\u9762\uFF09",
   "notify.leftovers": "\uFF1B\u68C0\u6D4B\u5230\u7591\u4F3C\u6B8B\u7559\u6570\u636E\uFF1A{paths}",
@@ -740,6 +820,37 @@ var EN = {
   "registry.refreshed": "Registry force-refreshed",
   "notify.installed": "Installed {pkg}{version}",
   "notify.allowbuilds": " (note: this plugin ran build scripts, allowed by policy)",
+  "notify.builds": " (build scripts precisely allowed: {names})",
+  "notify.builds.fallback": " (note: pending list unreadable; all builds allowed as fallback)",
+  "notify.bundlewarning": " (note: no patch layer \u2014 installed as a plain dependency; uninstall or report to the listing repo)",
+  "notify.toggled.on.live": "Enabled {pkg} (applied live)",
+  "notify.toggled.off.live": "Disabled {pkg} (applied live)",
+  "notify.toggled.on.restart": "Enabled {pkg} (restart required)",
+  "notify.toggled.off.restart": "Disabled {pkg} (restart required)",
+  "toggle.state.on": "running",
+  "toggle.state.off": "disabled",
+  "toggle.lock.self": "dsh-m itself cannot be toggled",
+  "toggle.lock.protected": "host lifeline module; not toggleable",
+  "toggle.lock.noentry": "not composed (absent from loader tree)",
+  "toggle.failed": "Toggle failed: {err}",
+  "phase.active": "active",
+  "phase.failed": "failed",
+  "phase.pending": "pending",
+  "phase.loading": "loading",
+  "phase.unloading": "unloading",
+  "compat.title": "Compatibility risk",
+  "compat.body": "{pkg}@{version} declares peerDependencies incompatible with DSH {runtime}:",
+  "compat.risk": "Proceeding may cause crashes or data loss. Install anyway?",
+  "compat.force": "Install anyway",
+  "common.cancel": "Cancel",
+  "settings.probe": "Metadata source",
+  "settings.probe.npmjs": "npmjs (probe winner)",
+  "settings.probe.mirror": "npmmirror (probe winner)",
+  "settings.probe.none": "default npmjs (not probed/both down)",
+  "settings.probe.toggle": "Probe",
+  "settings.probe.apply": "Apply",
+  "settings.probe.applied": "Probe settings updated (live)",
+  "settings.probe.failed": "Failed to save probe settings: {err}",
   "notify.uninstalled": "Uninstalled {pkg}",
   "notify.livedisabled": " (live UI disabled first)",
   "notify.leftovers": "; possible leftover data: {paths}",
@@ -897,6 +1008,26 @@ var CSS = `
 .dshm-dshchip:hover .dshm-dshchip-tip,.dshm-dshchip:focus-visible .dshm-dshchip-tip{visibility:visible;opacity:1}
 .dshm-dshchip-tiprow{font:12px/16px ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-weight:600;color:var(--dsw-alias-label-primary,inherit)}
 .dshm-dshchip-tipsub{display:block;margin-top:2px;font-size:10px;line-height:14px;color:var(--dsw-alias-label-caption,#9ca3af)}
+
+/* 0.4.0\uFF1A\u5F00\u5173 / \u76F8\u4F4D\u70B9 / \u517C\u5BB9\u786E\u8BA4\u5F39\u7A97 */
+.dshm-dot{font-size:9px;line-height:1;vertical-align:middle;margin-right:2px}
+.dshm-dot.ok{color:#22c55e}
+.dshm-dot.err{color:#ef4444}
+.dshm-dot.idle{color:#9ca3af}
+.dshm-dot.busy{color:#f59e0b}
+.dshm-switch{position:relative;display:inline-flex;align-items:center;width:34px;height:19px;border-radius:10px;background:var(--dsw-alias-fill-secondary,#d1d5db);cursor:pointer;transition:background .15s;flex:none;margin-left:auto}
+.dshm-switch input{display:none}
+.dshm-switch.on{background:#22c55e}
+.dshm-switch.locked{opacity:.45;cursor:not-allowed}
+.dshm-switch-slider{position:absolute;left:2px;top:2px;width:15px;height:15px;border-radius:50%;background:#fff;transition:left .15s;box-shadow:0 1px 2px rgba(0,0,0,.25)}
+.dshm-switch.on .dshm-switch-slider{left:17px}
+.dshm-compat-overlay{position:fixed;inset:0;background:rgba(0,0,0,.45);display:flex;align-items:center;justify-content:center;z-index:60}
+.dshm-compat-dialog{max-width:420px;width:calc(100% - 32px);background:var(--dsw-alias-bg-layer-2,#1c2230);border:1px solid var(--dsw-alias-border-l2,#333b4d);border-radius:12px;padding:16px}
+.dshm-compat-title{font-weight:600;margin-bottom:8px;color:#f87171}
+.dshm-compat-body{font-size:12px;margin-bottom:6px}
+.dshm-compat-peers{margin:0 0 8px;padding-left:18px;font-size:12px}
+.dshm-compat-peers li{font-family:ui-monospace,monospace}
+.dshm-compat-risk{font-size:12px;color:#f87171;margin-bottom:12px}
 `;
 function ensureCss() {
   if (typeof document === "undefined" || document.getElementById("dshm-css")) return;
@@ -913,7 +1044,11 @@ async function api(method, params, signal) {
     ...signal ? { signal } : {}
   });
   const data = await res.json().catch(() => ({}));
-  if (!res.ok || data.ok === false) throw new Error(data.error || `API ${res.status}`);
+  if (!res.ok || data.ok === false) {
+    const err = new Error(data.error || `API ${res.status}`);
+    if (data && typeof data === "object" && data.issue) err.issue = data.issue;
+    throw err;
+  }
   return data;
 }
 function fmtDate(iso) {
@@ -1012,6 +1147,29 @@ function LinksRow(props) {
   });
   return h("div", { className: "dshm-links" }, h("span", { className: "dshm-links-k" }, `${lookup("detail.links")}\uFF1A`), ...kids);
 }
+function PhaseDot({ vm }) {
+  if (!vm.phaseDotClass) return null;
+  return h(
+    "span",
+    { className: `dshm-dot ${vm.phaseDotClass}`, title: vm.phaseLabelKey ? lookup(vm.phaseLabelKey) : null },
+    "\u25CF"
+  );
+}
+function ToggleSwitch({ vm, disabled, onChange, title }) {
+  return h(
+    "label",
+    {
+      className: `dshm-switch${vm.switchOn ? " on" : ""}${vm.switchDisabled ? " locked" : ""}`,
+      title: title || (vm.switchTitleKey ? lookup(vm.switchTitleKey) : null),
+      onClick: (e) => {
+        e.stopPropagation();
+        if (!vm.switchDisabled && !disabled) onChange(!vm.switchOn);
+      }
+    },
+    h("input", { type: "checkbox", checked: vm.switchOn, disabled: vm.switchDisabled || disabled, readOnly: true }),
+    h("span", { className: "dshm-switch-slider" })
+  );
+}
 function TwoStepButton({ label, confirmLabel, className, onConfirm, disabled }) {
   const [arm, setArm] = useState(false);
   useEffect(() => {
@@ -1105,25 +1263,70 @@ function MarketTab({ notify, market, onMutation }) {
     if (debounceRef.current) clearTimeout(debounceRef.current);
     debounceRef.current = setTimeout(() => updateQuery({ query: value }), 300);
   };
-  const doInstall = async (it, version) => {
+  const [compatConfirm, setCompatConfirm] = useState(null);
+  const installDone = (res) => {
+    notify({
+      kind: "ok",
+      needsRestart: true,
+      text: lookup("notify.installed", { pkg: res.pkg, version: res.version ? ` v${res.version}` : "" }) + (res.buildApprovals && res.buildApprovals.length ? lookup("notify.builds", { names: res.buildApprovals.join(", ") }) : res.fallbackAllBuilds ? lookup("notify.builds.fallback") : "") + (res.bundleWarning === "no-patch-layer" ? lookup("notify.bundlewarning") : "")
+    });
+  };
+  const doInstall = async (it, version, forceIncompatible) => {
     setBusyId(it.id);
     try {
-      const res = await api("install", { id: it.id, ...version ? { version } : {} });
-      notify({
-        kind: "ok",
-        needsRestart: true,
-        text: lookup("notify.installed", { pkg: res.pkg, version: res.version ? ` v${res.version}` : "" }) + (res.usedAllowAllBuilds ? lookup("notify.allowbuilds") : "")
-      });
+      const res = await api("install", { id: it.id, ...version ? { version } : {}, ...forceIncompatible ? { forceIncompatible: true } : {} });
+      installDone(res);
       await (onMutation ? onMutation() : reload(false));
     } catch (e) {
-      notify({ kind: "err", text: lookup("failed.install", { err: e && e.message || e }) });
+      if (e && e.issue) {
+        setCompatConfirm({ it, version, issue: e.issue });
+      } else {
+        notify({ kind: "err", text: lookup("failed.install", { err: e && e.message || e }) });
+      }
     } finally {
       setBusyId(null);
     }
   };
+  const CompatDialog = compatConfirm ? h(
+    "div",
+    { className: "dshm-compat-overlay", onClick: () => setCompatConfirm(null) },
+    h(
+      "div",
+      { className: "dshm-compat-dialog", onClick: (e) => e.stopPropagation() },
+      h("div", { className: "dshm-compat-title" }, lookup("compat.title")),
+      h("div", { className: "dshm-compat-body" }, lookup("compat.body", {
+        pkg: compatConfirm.issue.pkg || compatConfirm.it.pkg,
+        version: compatConfirm.issue.version || "?",
+        runtime: compatConfirm.issue.runtimeVersion || "?"
+      })),
+      h(
+        "ul",
+        { className: "dshm-compat-peers" },
+        ...Object.entries(compatConfirm.issue.peers || {}).map(([name, range]) => h("li", { key: name }, `${name}: ${range}`))
+      ),
+      h("div", { className: "dshm-compat-risk" }, lookup("compat.risk")),
+      h(
+        "div",
+        { className: "dshm-actions" },
+        h("button", {
+          className: "dshm-btn sm",
+          onClick: () => setCompatConfirm(null)
+        }, lookup("common.cancel")),
+        h("button", {
+          className: "dshm-btn primary sm",
+          onClick: () => {
+            const pending = compatConfirm;
+            setCompatConfirm(null);
+            doInstall(pending.it, pending.version, true);
+          }
+        }, lookup("compat.force"))
+      )
+    )
+  ) : null;
   return h(
     React.Fragment,
     null,
+    CompatDialog,
     notice ? h(
       "div",
       { className: notice.key === "notice.unavailable" ? "dshm-err" : "dshm-hint" },
@@ -1277,6 +1480,27 @@ function InstalledTab({ notify, installed, onMutation }) {
   const [openPkg, setOpenPkg] = useState(null);
   const [readmePkg, setReadmePkg] = useState(null);
   const [busyPkg, setBusyPkg] = useState(null);
+  const doToggle = async (it, enabled) => {
+    setBusyPkg(it.pkg);
+    const call = () => api("set-enabled", { pkg: it.pkg, enabled });
+    try {
+      let res;
+      try {
+        res = await call();
+      } catch (first) {
+        await new Promise((r) => setTimeout(r, 1500));
+        res = await call();
+      }
+      const note = toggleNoticeKeys2(res);
+      const extra = res.warnings && res.warnings.length ? `\uFF08${res.warnings.join("\uFF1B")}\uFF09` : "";
+      notify({ kind: "ok", needsRestart: note.needsRestart, text: lookup(note.textKey, note.params) + extra });
+      await (onMutation ? onMutation() : reload());
+    } catch (e) {
+      notify({ kind: "err", text: lookup("toggle.failed", { err: e && e.message || e }) });
+    } finally {
+      setBusyPkg(null);
+    }
+  };
   const doUninstall = async (it) => {
     setBusyPkg(it.pkg);
     try {
@@ -1304,7 +1528,7 @@ function InstalledTab({ notify, installed, onMutation }) {
           pkg: res.pkg,
           from: res.fromVersion ? `v${res.fromVersion}` : "\u2014",
           to: res.version ? `v${res.version}` : res.sha ? res.sha.slice(0, 7) : "latest"
-        }) + (res.usedAllowAllBuilds ? lookup("notify.upgradehint") : "")
+        }) + (res.buildApprovals && res.buildApprovals.length ? lookup("notify.builds", { names: res.buildApprovals.join(", ") }) : res.fallbackAllBuilds ? lookup("notify.builds.fallback") : "")
       });
       await (onMutation ? onMutation() : reload());
     } catch (e) {
@@ -1328,19 +1552,27 @@ function InstalledTab({ notify, installed, onMutation }) {
       { className: "dshm-cards" },
       items.map((it) => {
         const vm = installedViewModel2(it);
+        const tvm = toggleViewModel2(it);
         return Card({
           key: it.pkg,
           icon: h(Icon, { entry: { name: it.name, github: vm.githubRepo, icon: null } }),
           name: it.name,
+          topRight: h(ToggleSwitch, {
+            vm: tvm,
+            disabled: busyPkg === it.pkg,
+            onChange: (enabled) => doToggle(it, enabled)
+          }),
           badges: [
             it.outdated ? h("span", { className: "dshm-badge warn", key: "u" }, `\u2B06 ${vm.latestLabel}`.trim()) : null,
             it.registryId ? h("span", { className: "dshm-badge", key: "r" }, lookup("badge.market")) : h("span", { className: "dshm-badge info", key: "r" }, lookup("badge.nonmarket"))
           ],
           desc: it.description || "\uFF08\u65E0\u63CF\u8FF0\uFF09",
           sub: [
+            h(PhaseDot, { key: "dot", vm: tvm }),
+            vm.phaseKey ? lookup(vm.phaseKey) : lookup(vm.enabledLabelKey),
             `v${it.version || "?"}`,
             vm.sourceLabelKey ? lookup(vm.sourceLabelKey) : it.source
-          ].join(" \xB7 "),
+          ].map((part, i) => i === 0 ? part : [" \xB7 ", part]).flat(),
           links: h(LinksRow, {
             npm: it.source === "npm" ? it.pkg : null,
             github: vm.githubRepo
@@ -1399,10 +1631,41 @@ function configStatusLabel(status) {
   return lookup(`settings.status.${status || "loading"}` || "settings.status.loading");
 }
 var STATUS_BADGE = { ready: "", pending: "info", rejected: "warn", unavailable: "err", loading: "info" };
+function probeLabel(statusInfo) {
+  const probe = statusInfo.data && statusInfo.data.probe;
+  if (!probe) return lookup("settings.probe.none");
+  if (probe.source === "npmjs") return lookup("settings.probe.npmjs");
+  if (probe.source === "npmmirror") return lookup("settings.probe.mirror");
+  return lookup("settings.probe.none");
+}
 function SettingsTab({ notify, onRegistryChanged }) {
   const reg = useAsync((force) => api("registry", force ? { force: true } : {}), []);
   const cfgState = useAsync(() => api("registry-config"), []);
   const self = useAsync(() => api("self-check"), []);
+  const statusInfo = useAsync(() => api("status"), []);
+  const probeCfg = useAsync(() => api("probe-config"), []);
+  const [probeDraft, setProbeDraft] = useState(null);
+  const [probeBusy, setProbeBusy] = useState(false);
+  useEffect(() => {
+    if (probeCfg.data && probeDraft === null) setProbeDraft({ ...probeCfg.data });
+  }, [probeCfg.data, probeDraft]);
+  const applyProbe = async () => {
+    if (!probeDraft) return;
+    setProbeBusy(true);
+    try {
+      const patch = {};
+      if (probeDraft.probeEnabled !== void 0) patch.probeEnabled = probeDraft.probeEnabled === true;
+      if (Number.isFinite(Number(probeDraft.probeTimeoutMs))) patch.probeTimeoutMs = Number(probeDraft.probeTimeoutMs);
+      if (Number.isFinite(Number(probeDraft.probeCacheTtlMin))) patch.probeCacheTtlMin = Number(probeDraft.probeCacheTtlMin);
+      const res = await api("probe-config-set", patch);
+      setProbeDraft({ ...res });
+      notify({ kind: "ok", text: lookup("settings.probe.applied"), needsRestart: false });
+    } catch (e) {
+      notify({ kind: "err", text: lookup("settings.probe.failed", { err: e && e.message || e }) });
+    } finally {
+      setProbeBusy(false);
+    }
+  };
   const [busy, setBusy] = useState(false);
   const [upgrading, setUpgrading] = useState(false);
   const [draftAddress, setDraftAddress] = useState(null);
@@ -1543,7 +1806,46 @@ function SettingsTab({ notify, onRegistryChanged }) {
         h("span", { className: "k" }, lookup("settings.count")),
         h("span", null, state ? lookup("settings.count.v", { n: state.count ?? 0 }) : "\u2014"),
         h("span", { className: "k" }, lookup("settings.policy")),
-        h("span", null, lookup("settings.policy.v"))
+        h("span", null, lookup("settings.policy.v")),
+        h("span", { className: "k" }, lookup("settings.probe")),
+        h("span", null, probeLabel(statusInfo)),
+        h("span", { className: "k" }, lookup("settings.probe.toggle")),
+        h(
+          "span",
+          { className: "dshm-probe-ctl" },
+          probeDraft ? [
+            h(ToggleSwitch, {
+              key: "sw",
+              vm: { switchOn: probeDraft.probeEnabled === true, switchDisabled: false },
+              title: null,
+              onChange: (v) => setProbeDraft({ ...probeDraft, probeEnabled: v })
+            }),
+            h("input", {
+              key: "timeout",
+              className: "dshm-input",
+              type: "number",
+              style: { maxWidth: "90px" },
+              title: "probeTimeoutMs",
+              value: probeDraft.probeTimeoutMs ?? "",
+              onChange: (e) => setProbeDraft({ ...probeDraft, probeTimeoutMs: e.target.value })
+            }),
+            h("input", {
+              key: "ttl",
+              className: "dshm-input",
+              type: "number",
+              style: { maxWidth: "70px" },
+              title: "probeCacheTtlMin",
+              value: probeDraft.probeCacheTtlMin ?? "",
+              onChange: (e) => setProbeDraft({ ...probeDraft, probeCacheTtlMin: e.target.value })
+            }),
+            h("button", {
+              key: "apply",
+              className: "dshm-btn sm",
+              disabled: probeBusy,
+              onClick: applyProbe
+            }, probeBusy ? h(Spin) : lookup("settings.probe.apply"))
+          ] : lookup("settings.probe.none")
+        )
       ),
       state && state.stale && state.status !== "unavailable" ? h("div", { className: "dshm-note" }, lookup("settings.cache.hint")) : null,
       state && !state.isDefault ? h("div", { className: "dshm-note warn" }, lookup("settings.trust.hint")) : null,
@@ -1628,7 +1930,7 @@ function DetailRows(rows) {
     ])
   );
 }
-function Card({ icon, name, badges, desc, sub, links, open, onToggle, detail, actions }) {
+function Card({ icon, name, badges, desc, sub, links, open, onToggle, detail, actions, topRight }) {
   return h(
     "div",
     {
@@ -1644,7 +1946,7 @@ function Card({ icon, name, badges, desc, sub, links, open, onToggle, detail, ac
     h(
       "div",
       { className: "dshm-meta" },
-      h("div", { className: "dshm-top" }, h("span", { className: "dshm-name" }, name), ...badges.filter(Boolean)),
+      h("div", { className: "dshm-top" }, h("span", { className: "dshm-name" }, name), ...badges.filter(Boolean), topRight || null),
       h("div", { className: "dshm-desc", style: open ? { WebkitLineClamp: "unset" } : null }, desc),
       sub ? h("div", { className: "dshm-sub" }, sub) : null,
       links || null,

package/lib/core/build-approval.js

@@ -0,0 +1,88 @@
+/**
+ * 精确构建放行（0.4.0，ADR-0002；plan Task 3）：
+ * pnpm 11 拦下依赖构建脚本时会在 `pnpm-workspace.yaml` 的 `allowBuilds` 映射里留下
+ * 待决占位（值为 "set this to true or false"）。本模块提供两个纯函数：
+ *
+ * - readPendingBuilds：解析待决名单（键不含通配符、值精确等于占位串）——官方
+ *   `readPendingBuilds`（dsh-plugin-manager L941）同款判定；官方对坏结构 throw，
+ *   此处收窄为返回 []（调用方据此走全量兜底，ADR-0002 的保守回退）；
+ * - applyPreciseBuilds：为名单逐键写 `allowBuilds.<name>: true`（保注释 YAML 编辑）。
+ *
+ * 官方 `approveBuilds` 的调用前提是「caller 持 profile manifest 锁」；dsh-m 事务
+ * 只有进程内 FIFO，与官方 UI 并发安装时此处存在低概率写竞态窗口——按 ADR-0002
+ * 声明为已知风险，相关整单失败走既有回滚语义，不额外加锁。
+ */
+import { isAlias, isMap, isScalar, isSeq, parseDocument } from 'yaml';
+/** pnpm 11 写下的待决占位值（逐字，官方同款）。 */
+const PENDING_PLACEHOLDER = 'set this to true or false';
+/** 键含通配符的规则不进精确放行（官方同款排除）。 */
+function isPlainKey(key) {
+    return !/[*?]/.test(key);
+}
+/**
+ * 读 pnpm-workspace.yaml 文本的待决构建名单。
+ * 保守口径：坏 YAML / 根非映射 / allowBuilds 非映射 / 条目含锚点或别名 / 值非标量
+ * 一律返回 []——调用方走 `withDangerouslyAllowAllBuilds` 全量兜底并如实标注。
+ */
+export function readPendingBuilds(text) {
+    let document;
+    try {
+        document = parseDocument(text);
+    }
+    catch {
+        return [];
+    }
+    if (document.errors.length > 0)
+        return [];
+    if (!isMap(document.contents))
+        return [];
+    const builds = document.contents.get('allowBuilds');
+    if (builds === undefined || builds === null)
+        return [];
+    if (!isMap(builds))
+        return [];
+    const pending = [];
+    for (const pair of builds.items) {
+        const { key, value } = pair;
+        if (!isScalar(key) || typeof key.value !== 'string')
+            continue;
+        if (isAlias(key) || isAlias(value))
+            return [];
+        // 锚点定义同样拒绝（官方 visit 检查的保守化）
+        if ((isMap(value) || isSeq(value)) && 'anchor' in value && value.anchor)
+            return [];
+        if (!isScalar(value) || value.value !== PENDING_PLACEHOLDER)
+            continue;
+        if (!isPlainKey(key.value))
+            continue;
+        pending.push(key.value);
+    }
+    return pending;
+}
+/**
+ * 为名单逐键写 `allowBuilds.<name>: true`（保注释；allowBuilds 缺失时创建）。
+ * 坏 YAML / 根非映射 → throw（调用方按放行写入失败处理，走既有 hard-fail 转换契约）。
+ * names 为空返回原文。
+ */
+export function applyPreciseBuilds(text, names) {
+    if (names.length === 0)
+        return text;
+    const document = parseDocument(text);
+    const error = document.errors[0];
+    if (error !== undefined)
+        throw error;
+    if (!isMap(document.contents))
+        throw new Error('pnpm-workspace.yaml 必须是 YAML 映射');
+    const existing = document.contents.get('allowBuilds');
+    if (existing !== undefined && existing !== null && !isMap(existing)) {
+        throw new Error('allowBuilds 必须是 YAML 映射');
+    }
+    for (const name of names) {
+        if (typeof name !== 'string' || !isPlainKey(name)) {
+            throw new Error(`精确放行拒绝通配/非法键: ${JSON.stringify(name)}`);
+        }
+        // setIn 自动创建缺失的中间映射（allowBuilds 缺失时一并创建）
+        document.setIn(['allowBuilds', name], true);
+    }
+    return String(document);
+}

package/lib/core/compat-check.js

@@ -0,0 +1,56 @@
+/**
+ * peer 兼容预检（0.4.0，plan Task 6；语义逐条对齐官方 evaluatePluginCompatibility
+ * ——dsh-app-boot L286-313，源码在 app-boot 而非 plugin-manager 本体）：
+ *
+ * - 只检 `@deepseek-ai/dsh` 与 `@deepseek-ai/dsh-*` 键；
+ * - `workspace:^` / `workspace:~` / `workspace:*` 视为当前运行时版本（workspace 依赖
+ *   在发布时由运行时替换）；
+ * - 空 range 不满足；semver satisfies 带 includePrerelease（rc 生态必需）；
+ * - 运行时版本解析失败（null）→ 不拦（结果由调用方注明「未检」）；
+ * - github 源不在此路径（无 packument），由 market 层提示 compatSkipped；
+ * - 无豁免机制（grilling Q6 定稿）：确认/force 即通道。
+ */
+import { satisfies } from 'semver';
+import { npmVersion } from './versions.js';
+import { resolveDshVersion } from './dsh-version.js';
+const WORKSPACE_SPECS = ['workspace:^', 'workspace:~', 'workspace:*'];
+export class IncompatibleError extends Error {
+    issue;
+    constructor(issue) {
+        super(`插件 ${issue.pkg}@${issue.version} 与 DSH ${issue.runtimeVersion} 不兼容（peerDependencies: ${JSON.stringify(issue.peers)}）`);
+        this.issue = issue;
+    }
+}
+/**
+ * 纯函数：peers 中不满足运行时版本的 dsh 系键（空对象 = 兼容）。
+ * 非法 range 按 semver 抛错口径让位给 satisfies（异常上抛，调用方如实报告）。
+ */
+export function evaluatePeers(peers, runtimeVersion) {
+    const failing = {};
+    for (const [name, range] of Object.entries(peers)) {
+        if (typeof range !== 'string')
+            continue;
+        if (name !== '@deepseek-ai/dsh' && !name.startsWith('@deepseek-ai/dsh-'))
+            continue;
+        const requirement = WORKSPACE_SPECS.includes(range) ? runtimeVersion : range;
+        if (requirement.trim() === '' || !satisfies(runtimeVersion, requirement, { includePrerelease: true })) {
+            failing[name] = range;
+        }
+    }
+    return failing;
+}
+/**
+ * npm 源预检：拉该精确版本的 peerDependencies 与运行时版本比对。
+ * 返回 null = 兼容或无法判定（runtime 解析失败 → 不拦）。
+ */
+export async function precheckNpmCompat(pkg, version, opts) {
+    const runtime = opts.runtimeVersion !== undefined ? opts.runtimeVersion : await resolveDshVersion();
+    if (runtime === null || runtime === '')
+        return null;
+    const fetchVersion = opts.fetchVersion ?? npmVersion;
+    const meta = await fetchVersion(pkg, version, opts.timeoutMs, opts.signal, opts.registry);
+    const failing = evaluatePeers(meta.peers ?? {}, runtime);
+    if (Object.keys(failing).length === 0)
+        return null;
+    return { pkg, version, runtimeVersion: runtime, peers: failing };
+}