dsh-m 0.9.31 → 0.9.33

package/CHANGELOG.md

@@ -8,6 +8,24 @@ The full release history of dsh-m, maintained bilingually: **Chinese first, Engl
 
 ## 中文
 
+### 0.9.33 变更：自研条目元数据 v1.1——`audience`/`decoupled` 两字段与三端标注
+
+- **schema**：registry 条目增补可选 `decoupled?: true`（解耦条目，实操口径判定；与 `verified` 互斥——同条目共存报 error）与 `audience?: 'public' | 'internal'`（缺省 public 不产生键；`'team'` 值集预留未开放）。决策共识与五项裁决记录见 DESIGN §2.7，术语见 GLOSSARY「解耦条目 / 自用条目」。
+- **三端标注**：GUI 卡片与 Modal 头新增「作者自用」「版本无关」徽章＋Modal 受众/适配详情行；`dshm_search` 输出投影携带 `audience`/`decoupled`、条目行加 `[作者自用]` 标，工具描述写明推荐纪律（internal 勿向普通用户主动推荐，点名或内部推广场景除外）；CLI `dshm search` 行内同标（新增 `tests/cli-search.test.mjs`）。已装视图与收藏页不打标——推荐发现链路才是纪律靶面。
+- **CI**：validate-registry 新增软警告——decoupled 条目 description 含「已适配」句式即 warn（copy-guide §4 第四句式「版本无关，详见仓库」，空间不足用紧凑形「版本无关。」）。
+- **registry 数据**：八个自研条目终态——surf / obmc-web / onetree-log 打 `decoupled`＋`audience: internal`，quota-watch 打 `decoupled`；四条 `verified` 数组删除（历史归 git 与各仓库文档），兼容句换第四句式；四条 coupled 条目（dsh-m / dsh-skins / skip-browser-auth / copilot-auth）verified 原样保留。
+- **测试**：净增 9 例（registry 字段校验 5、tools-search 标注 2、cli-search 2）；全量 1133 tests，本机 1108 pass / 15 fail——15 项全部为 Windows 平台既有 symlink 语义用例（与基线集合逐项一致，零回归）；typecheck 零错误。
+
+### 0.9.32 变更：npm registry 路由自适应——元数据预取换源/镜像自愈（ADR-0012）
+
+- **动机**：2026-10-04 上海 Windows 桌面机实证——元数据预取写死直连 registry.npmjs.org，间歇性超时使升级在委派 pnpm 之前夭折（`fetch failed` / `The operation was aborted due to timeout`，且 `.plugin-manager/logs` 无对应操作日志），而 npmmirror 镜像早已同步目标版本；同期首尔腾讯云机 npmjs 直连良好。两台机器需要零配置各自可用。
+- **读分类路由（L1/L3）**：检测读（`npmLatest` 升级探测 / `npmPackumentTimes` 发布时刻）恒以 npmjs 权威源优先、首腿超时收紧 ≤5s、失败降级生效源；履约读（`npmVersion` 精确版本元数据 / `npmPackument` 预热）走生效源优先。`npmPackument` 的 registry 参数此前被静默忽略，本版修复（显式参数开始生效，测试钉住）。
+- **L0 传输层**：httpx 换 undici 自带 fetch + 自建 dispatcher（`EnvHttpProxyAgent` 显式交接代理解析）——元数据预取开始感知 `HTTP(S)_PROXY` / `npm_config_*` 代理，并规避宿主 undici 全局 dispatcher 污染（dsh-market net.ts #742 同族）；`fetchLimited` 新增 PUT 方法（仅供 sync 原语）；网络失败错误附 `via` 上下文，失败摘要仅在代理路径渲染「（经 <掩码代理>）」。
+- **L2 镜像滞后自愈**：`NO_MATCHING_VERSION` 且 registry 字段指名 npmmirror（分类层结构化识别、完整文本上判定、上层零 regex）→ 按需同步镜像（`registry-direct.npmmirror.com/<pkg>/sync`，PUT）→ 既有退避重试（heal 记 `B3_NPMMIRROR_SYNC`）；`npmVersion` 履约阶梯同步适用（404 → sync → 等待 10s → 同源重试 → npmjs 兜底）；sync 受理后作废 latest 缓存。`DSHM_MIRROR_SYNC=0` 一键关闭。
+- **新模块 `src/core/npm-route.ts`**：`DSHM_NPM_REGISTRY` 源覆盖（最高优先，设了跳过探测）> [.npmrc registry, npmjs, npmmirror]；probe-once（2.5s 共享预算、single-flight、胜者须完整响应带 version）；决策持久化 `<cacheDir>/npm-route.json`（删文件即重探）；全候选失败仅内存回退 npmjs（60s TTL 后重探、不落盘）。生效源切换自动作废 latest / packument 两级缓存。
+- **wire 测试缝隙迁移**：既有 mock `globalThis.fetch` 的测试缝隙迁至 `_setWireFetchForTests`（versions / npm-integrity / registry-check 三文件，断言与计数语义不变）。
+- **测试**：净增 41 例（L0 代理解析/wire 转发/via/PUT、npm-route 12 例、读分类路由、registry 分类字段、B3 sync、L4 摘要、kill-switch 阶梯/集成、尾斜杠归一）；全量 1128 tests，本机 1103 pass / 15 fail——15 项全部为 Windows 平台既有 symlink 语义用例（与改动前基线集合逐项一致，零回归）；typecheck 零错误。真机验收（上海机 scoped 自研包窗口内升级 + 首尔机 `dshm outdated`）随发版执行。
+
 ### 0.9.31 变更：doctor 支持 desktop profile（CLI 例外开口 + farmChecked 语义修订，ADR-0011）
 
 - **动机**：Windows desktop 机实机报告证实 core 引擎本就 profileDir 参数化无 web 硬编码（desktop 物化布局判 hoisted、farm=0 属常态），但 CLI 全命令一刀切拒绝 `--profile desktop` 把只读体检连坐；desktop-only 机器无 flag 体检还会扫不存在的 web 目录得全 0 报告。
@@ -307,6 +325,24 @@ The full release history of dsh-m, maintained bilingually: **Chinese first, Engl
 
 ## English
 
+### Added in 0.9.33 — self-dev entry metadata v1.1: `audience`/`decoupled` fields with three-surface marking
+
+- **Schema**: registry entries gain optional `decoupled?: true` (decoupled entries, operational criterion; mutually exclusive with `verified` — co-occurrence is an error) and `audience?: 'public' | 'internal'` (defaults to public, no key emitted; `'team'` reserved, not accepted this release). The decision record and five rulings live in DESIGN §2.7; terms in GLOSSARY (Decoupled Entry / Internal Entry).
+- **Three-surface marking**: GUI cards and the Modal head gain 「作者自用」 (Author's own) and 「版本无关」 (Version-independent) badges plus Modal audience/compat rows; `dshm_search` output projects `audience`/`decoupled` with an inline [作者自用] line marker, and the tool description states the recommendation discipline (never proactively recommend internal entries to general users unless named or for internal rollout); CLI `dshm search` marks lines identically (new `tests/cli-search.test.mjs`). Installed views and favorites stay unmarked — the discovery path is the discipline's target.
+- **CI**: validate-registry gains a soft warning — a decoupled entry whose description contains the 「已适配」 pattern (copy-guide §4 fourth pattern 「版本无关，详见仓库」, compact form 「版本无关。」 when space is tight).
+- **Registry data**: final state for the eight self-dev entries — surf / obmc-web / onetree-log gain `decoupled`＋`audience: internal`, quota-watch gains `decoupled`; the four `verified` arrays are removed (history lives in git and per-repo docs) and compatibility sentences switch to the fourth pattern; the four coupled entries (dsh-m / dsh-skins / skip-browser-auth / copilot-auth) keep verified as-is.
+- **Tests**: 9 net-new cases (registry validation 5, tools-search marking 2, cli-search 2); full suite 1133 tests, locally 1108 pass / 15 fail — all 15 are the pre-existing Windows symlink-semantics baseline (item-for-item identical, zero regression); typecheck clean.
+
+### Added in 0.9.32 — npm registry route adaptation: metadata prefetch source switching / mirror self-heal (ADR-0012)
+
+- **Motivation**: on 2026-10-04 a Shanghai Windows desktop machine proved the metadata prefetch is hardcoded to registry.npmjs.org; intermittent timeouts aborted upgrades before pnpm was ever invoked (`fetch failed` / `The operation was aborted due to timeout`, with no operation log under `.plugin-manager/logs`), while npmmirror had already synced the target version. A Seoul (Tencent Cloud) box enjoys fast direct npmjs. Both machines must work with zero configuration.
+- **Read-class routing (L1/L3)**: detection reads (`npmLatest` upgrade probe / `npmPackumentTimes` publish times) prefer the authoritative npmjs (first leg timeout tightened to ≤5s) and degrade to the effective source; fulfillment reads (`npmVersion` exact metadata / `npmPackument` warm) prefer the effective source. `npmPackument` previously ignored its registry parameter — fixed this release (explicit parameter now takes effect, pinned by tests).
+- **L0 transport**: httpx now uses undici's own fetch with a self-built dispatcher (`EnvHttpProxyAgent` handed the resolved proxies explicitly) — metadata prefetch honours `HTTP(S)_PROXY` / `npm_config_*` proxies and is immune to host undici global-dispatcher pollution (dsh-market net.ts #742 family); `fetchLimited` gains a PUT method (sync primitive only); network failures carry a `via` context, and the failure digest renders 「(via <masked proxy>)」 only on proxy paths.
+- **L2 mirror-lag self-heal**: on `NO_MATCHING_VERSION` whose registry field names npmmirror (structured recognition in the classification layer, judged on the full text — upper layers never regex) → on-demand mirror sync (`registry-direct.npmmirror.com/<pkg>/sync`, PUT) → the existing backoff retry (heal `B3_NPMMIRROR_SYNC`); the same ladder applies to `npmVersion` (404 → sync → wait 10s → same-source retry → npmjs fallback); latest cache is invalidated after a sync. `DSHM_MIRROR_SYNC=0` switches it all off.
+- **New module `src/core/npm-route.ts`**: `DSHM_NPM_REGISTRY` override (highest priority, skips probing) > [.npmrc registry, npmjs, npmmirror]; probe-once (2.5s shared budget, single-flight, winner must return a complete body with version); decision persisted at `<cacheDir>/npm-route.json` (delete to re-probe); total failure falls back to npmjs in memory only (60s TTL then re-probe, never persisted). Effective-source switches invalidate both latest and packument caches.
+- **Wire test seam migration**: the existing mock-`globalThis.fetch` seam moved to `_setWireFetchForTests` (versions / npm-integrity / registry-check; assertion and counting semantics unchanged).
+- **Tests**: 41 new cases (L0 proxy parsing/wire forwarding/via/PUT, npm-route ×12, read-class routing, registry classification field, B3 sync, L4 digest, kill-switch ladder/integration, trailing-slash normalization); full suite 1128 tests — 1103 pass / 15 fail on this machine, all 15 being pre-existing Windows symlink-semantics cases (item-for-item identical to the pre-change baseline: zero regression); typecheck clean. Real-machine acceptance (in-window scoped self-published upgrade on the Shanghai box, `dshm outdated` on Seoul) ships with the release.
+
 ### Added in 0.9.31 — doctor desktop profile support (CLI exception + farmChecked semantics revision, ADR-0011)
 
 - **Motivation**: a Windows desktop machine's report confirmed the core engine is profileDir-parameterized with no web hardcoding (materialized desktop layout detects as hoisted with farm=0 — the norm, not a short-circuit), yet the CLI's blanket `--profile desktop` rejection swept up the read-only doctor; desktop-only machines scanning a nonexistent web dir got an all-zero report.

package/README.md

@@ -121,6 +121,7 @@ dshm restart --yes
 
 - **数据获取**：dist-tags 探测最新版本 → jsDelivr 按精确版本直取 → npmmirror → unpkg 三线路兜底；版本未变不重拉正文，TTL 内跳过探测。「最新版本」探测结果为纯内存缓存：**重启 DSH 即失效**（发版后重启即可看到新版本），经 dsh-m 安装/升级/卸载成功后该条目缓存立即作废。失败回落 `<缓存目录>/awesome/` 运行时缓存先展示（先回缓存、后台自愈）——过期数据绝不冒充最新；缓存状态（缓存快照/目录版本/获取线路/更新时间）在**设置页**可见，浏览页不打扰。
 - **开关与锁定**：设置页 `communityCatalog` 开关（默认开，live 生效）、`communityCatalogPin` 可锁定目录版本（精确 semver）；CLI 用 `DSHM_COMMUNITY_CATALOG=0` 退出、`DSHM_COMMUNITY_CATALOG_PIN` 锁版本。
+- **npm 元数据路由（0.9.32，ADR-0012）**：安装/升级前的元数据预取按机器网络自适应选源——probe-once（2.5s 预算）探测 npmjs 与镜像谁先应答，决策持久化于 `<缓存目录>/npm-route.json`（删除即重探）；检测读（升级探测/发布时刻）恒以 npmjs 权威源优先、镜像降级，履约读（精确版本元数据）走生效源、镜像未同步时自动按需同步后重试。环境变量：`DSHM_NPM_REGISTRY` 强制元数据读取源（最高优先，设了跳过探测）；`DSHM_MIRROR_SYNC=0` 关闭镜像滞后自愈。**与 `DSHM_REGISTRY_URL`（收录清单源覆盖）是两回事**。调试回环 registry 时若本机开着系统代理，请配 `NO_PROXY=127.0.0.1,localhost`（代理语义跟随标准 env/npm config，不自动豁免 loopback）。
 - **分类与搜索**：社区分类是开放集（已知 23 个分类带中英双语标签：中文由包内单一事实源维护、英文取上游目录，按界面语言下发）；搜索走相关性加权管线（中英文双匹配），且为**跨区全局**——任一分区的搜索框同时命中社区与精选（浏览保持分区，摘要行报两分区精确命中数、精选命中置顶分组）；社区区排序可切（下载量/Star/收录日期 × 升降，默认下载量降序，无下载量 ≠ 0 下载）。
 - **安装语义**：社区条目与精选条目走同一安装链路（npm 锁精确版本 / GitHub 锁 commit SHA）；市场浏览页只对 npm 条目做更新探测，GitHub 条目不做页面级探测（匿名配额 60 次/小时不可控）。
 - **已装页预算（best-effort）**：已装页对 GitHub 来源插件做更新检查，单次请求 ≤25 个、宿主进程滚动 1 小时 ≤50 个（仅被动检查；主动安装/升级不受限）；超限条目如实标注「检查未完成」而不冒充「全部最新」。独立 CLI 进程不共享宿主内预算，并发场景不承诺 60 次/小时绝不耗尽。

package/docs/DESIGN.md

@@ -18,7 +18,7 @@
 - **默认源**获取顺序：raw.githubusercontent `@main` → jsDelivr `@main` → 默认 TTL 缓存 → npm 包内快照兜底。jsDelivr 是 GitHub 内容的免费 CDN 镜像，仅作 raw 拉取失败时的**备用线路**（覆盖大陆可达性与 GitHub 故障；CDN 缓存可能滞后数小时，可用 purge.jsdelivr.net 手动清理）。收录更新与插件发版**解耦**。
 - **自定义覆盖源（单一地址，整体覆盖，不合并）**：`registryUrl` 为空 = 官方默认清单；非空 = 一个 HTTPS URL（或 loopback HTTP，仅本机管理员信任边界，不承诺 DNS rebinding 防护）或 DSH Web 主机上的本地普通文件（绝对路径 / `file://`，`realpath` + `O_NOFOLLOW` 同 fd 读取与复核，严格 UTF-8，2 MiB 原始字节上限）。自定义源失败只回退**该源自己的缓存**，绝不静默改用官方清单；无可缓存数据时返回空清单 + 不可用状态。
 - **「新增插件」流程**：设置页下载默认 `registry.json` → 用户自行编辑副本 → 填入副本地址「校验并应用」。副本是独立快照，不自动同步官方新条目。
-- **严格 v1 schema**：顶层只允许 `version/plugins`，条目只允许 `id/name/description/category/tags/source/npm/github/homepage/icon`；未知字段、非法 ID/npm/GitHub/URL、重复 ID/tag、字段超限、`plugins` 超过 1,000 条均拒绝整份清单（不截断、不部分加载）；超过 200 条提示性能边界。
+- **严格 v1 schema**：顶层只允许 `version/plugins`，条目只允许 `id/name/description/category/tags/source/npm/github/homepage/icon`（v1.1 增补可选 `verified`、`alsoCategories`、`decoupled`、`audience`，见 §2.7）；未知字段、非法 ID/npm/GitHub/URL、重复 ID/tag、字段超限、`plugins` 超过 1,000 条均拒绝整份清单（不截断、不部分加载）；超过 200 条提示性能边界。
 - **缓存模型**：cache 按 namespace 分目录（Host 与 Agent tools 用 `host/`，独立 CLI 用 `cli/`，互不删除），按带算法版本的 cacheKey 分文件（`CacheFile v2`：原子临时文件 + fsync + rename，0700/0600，symlink 拒写，同 key 进程内写锁）。**候选验证只写候选 cache，绝不 prune 旧源**；settings 写入成功后才 `commitActiveSource`：先原子写 accepted-source metadata（`host/active-source.json`，仅 Host），再清理非当前 custom cache；metadata 失败不 prune、prune 失败保留旧 cache，均只降级为 warning，不撤销已生效的配置。切换后只保留默认缓存与当前 custom 缓存。
 - **统一安全 HTTP**：所有 JSON/text/HEAD 请求共享同一 primitive——手动重定向（每跳校验协议、最多 3 跳、循环检测、signal 传播、返回最终 URL）+ 响应大小上限 + 超时。
 - **秒开缓存语义（0.9.14 SWR）**：`loadRegistry` 与社区获取链的 TTL 过期不再同步等网络——磁盘缓存存在即**先回 stale**（registry `source='default-cache'`、社区 `status='stale'` 既有契约；stale 状态由设置页社区卡承接，市场页不提示临时缓存状态——0.9.15 修订），后台**单飞**刷新写回 cache（同 key 进行中复用；不接调用者 signal，后台自愈不被请求 abort 腰斩；`force`/candidate/显式下载三路径不经 SWR）。默认双线路**粘性**：`loadDefaultChain` 读 cache 记录的上次成功 `source` 排序线路（稳定排序，cache 缺失 = 原序，force 同样生效）。社区 bg 自愈是 force flight——**不走同版本短路**（`if (!opts.force)` 守卫），每 TTL 至多全量重拉一次正文（同步路径的短路优化保留）。页条目 latest 探测缓存为 `latest-cache.ts` 的**纯内存 Map + TTL**（0.9.20 ADR-0006，推翻 0.9.14 的「磁盘信封 write-through + 懒 seed、跨服务重启存活」——2026-10-03 事故实证发版窗口内重启/重开面板全吃陈旧值，重启即失效回归为特性；install/upgrade/uninstall 成功点由 market.ts 按 itemId 定向作废该条目全部 registryKey 变体，只失效不回写；0.9.14 遗留 `<cacheRoot>/latest/<ns>.json` 惰性文件由探测段一次性 best-effort 清扫，`latest/` 在 nsDir 之外、不受 `pruneCaches` 清扫的不变量不变）。客户端默认首页响应存 localStorage（10min TTL、双 zone 分键、读侧再过 normalize 收敛）——面板打开先渲染快照后 background 换新。已装面板第二段探测为 TTL=0 例外（ADR-0008）。
@@ -37,11 +37,13 @@
   "version": 1,
   "plugins": [
     {
-      "id": "dsh-skins",              // slug，唯一
-      "name": "DSH Skins",
+      "id": "dsh-example",            // slug，唯一（schema 示例载体，非真实条目）
+      "name": "Example Plugin",
       "description": "中文描述",        // v1 只有中文
       "category": "essentials",      // 策展五桶：essentials|cui-picks|self-dev|tencent-lighthouse|watchlist 五选一（0.9.16 策展分类法；旧功能五分类退役）
       "tags": ["主题"],
+      "decoupled": true,             // 可选；解耦条目（实操口径），与 verified 互斥
+      "audience": "internal",        // 可选 public|internal；缺省 public；'team' 预留未开放
       "source": "github",             // npm|github
       "npm": "可选；source=npm 时必填",
       "github": "owner/repo",         // source=github 时必填；npm 条目也可附
@@ -96,6 +98,15 @@
 - **技术默认件**：图片三层懒加载（IntersectionObserver + `loading=lazy` + `fetchPriority=low`；缩略图本机直连原图，不引第三方代理服务）；移除客户端重复排序（服务端单一排序源）；`total>200` 性能提示随分区退役；host-api limit 上限对齐新页大小；空状态逐分区定制；错误态带具体原因 + 重试。
 - **Backlog（明确不做）**：UI 完整双语字典、时间窗过滤、浏览层宿主兼容徽章/过滤、组管理、个人备注、giscus 评论、静态官网。
 
+### 2.7 自研条目元数据：受众与解耦（grilling 定稿 2026-10-05）
+
+registry 条目增补两个可选字段（schema v1.1，同一次变更上线；发布纪律：**先发 dsh-m 新版、再推 registry @main**，旧客户端拒收新清单回落缓存属「例行过渡」，0.9.17 alsoCategories 先例）：
+
+- `decoupled?: true`——**解耦条目**，实操口径判定（DSH 升级后大概率无需跟着发适配新版，价值源多在 DSH 之外）；与 `verified` **互斥**（同条目共存报 error），不携带实测数组，展示层以「版本无关」徽章呈现，兼容声明用「版本无关，详见仓库」句式（copy-guide §4 第四句式）。
+- `audience?: 'public' | 'internal'`——**受众标记**；缺省 `public` 不产生键；`internal` = 作者自用（GLOSSARY「自用条目」）；`'team'` 值集预留未开放。
+
+五项裁决：①双具名字段（否决 `hostCoupling` 单值枚举——主观评级违背实测声明文化，与 `flags` 旗帜数组——弱类型难校验）；②受众两档起步（否决三档，扩档是兼容变更）；③载体为字段、策展五桶不动（否决拆 self-dev 桶与移出主清单——`alsoCategories` 先例：多维归属用字段不建桶；撤出主清单反致社区清单浮升）；④三端照常返回与展示、**只标注不过滤**，推荐纪律走 `dshm_search` 工具描述约束（否决 agent 通道机械过滤——内部推广也依赖搜索）；⑤decoupled 条目**删除** `verified` 数组、渲染「版本无关」徽章（否决保留数组改渲染——缺号不再构成负面信号才是病根）。标注落点：GUI 卡片/Modal 头「作者自用」「版本无关」徽章＋Modal 详情行；agent 工具与 CLI 搜索输出 `[作者自用]` 行标；已装视图与收藏页不打标（推荐发现链路才是纪律靶面）。registry 数据侧：surf / obmc-web / onetree-log / quota-watch 四条 decoupled（前三者兼 internal），verified 删除、兼容句换第四句式。
+
 ## 3. 安装 / 卸载 / 升级 / 重启
 
 底层原语（本机实证）：`dsh plugin --profile web add|remove|update`（转发 pnpm，作用于 `$DSH_HOME/profiles/web`）。**profile 的 `package.json` 就是唯一事实源**——不引入任何额外状态文件。

package/lib/cli.js

@@ -147,7 +147,9 @@ profile 目标（0.9.0）：CLI 恒作用于 web profile；--profile web 为显
   --profile desktop 会被拒绝——Desktop profile 的插件管理走官方 Desktop 插件管理页。
 
 环境变量：DSHM_REGISTRY_URL（registry 源覆盖）、DSHM_TIMEOUT_MS、DSHM_CACHE_TTL_MIN、DSHM_CACHE_DIR、
-  DSHM_COMMUNITY_CATALOG=0（退出社区清单）、DSHM_COMMUNITY_CATALOG_PIN（锁定社区目录版本）
+  DSHM_COMMUNITY_CATALOG=0（退出社区清单）、DSHM_COMMUNITY_CATALOG_PIN（锁定社区目录版本）、
+  DSHM_NPM_REGISTRY（npm 元数据读取源覆盖，ADR-0012；与 DSHM_REGISTRY_URL 是两回事）、
+  DSHM_MIRROR_SYNC=0（关闭 npmmirror 按需同步自愈）
 `;
 export async function runCli(argv, deps = {}, io = {}) {
     const out = io.out ?? ((line) => console.log(line));
@@ -232,7 +234,7 @@ async function runCliDispatch(argv, deps, io) {
             for (const it of result.items) {
                 const inst = it.installed ? ` [已安装 v${it.installedVersion || '?'}]` : '';
                 const zone = it.community === true ? '[社区] ' : '';
-                out(`• ${it.name} (${it.id})${zone}· ${categoryLabelOf(it.category)} · ${it.source}${inst}`);
+                out(`• ${it.name} (${it.id})${zone}${it.audience === 'internal' ? '[作者自用] ' : ''}· ${categoryLabelOf(it.category)} · ${it.source}${inst}`);
                 out(`  ${it.description}`);
             }
             const shown = result.items.length;

package/lib/client.js

@@ -1279,6 +1279,9 @@ var ZH = {
   "badge.deprecated": "\u5DF2\u5F03\u7528",
   "sub.snapshot": "v{v}\uFF08\u76EE\u5F55\u5FEB\u7167\uFF09",
   "badge.verified": "\u5DF2\u5B9E\u6D4B",
+  "badge.internal": "\u4F5C\u8005\u81EA\u7528",
+  "badge.decoupled": "\u7248\u672C\u65E0\u5173",
+  "badge.decoupled.tip": "DSH \u5347\u7EA7\u65E0\u9700\u8DDF\u968F\u9002\u914D",
   "modal.category": "\u5206\u7C7B",
   "modal.added": "\u6536\u5F55\u65E5\u671F",
   "modal.dlwindow": "\u4E0B\u8F7D\u91CF\uFF0830 \u5929\u7A97\u53E3\uFF09",
@@ -1290,6 +1293,10 @@ var ZH = {
   "modal.installcmd": "\u5B89\u88C5\u547D\u4EE4",
   "modal.copy": "\u590D\u5236",
   "modal.copied": "\u5DF2\u590D\u5236",
+  "modal.audience.label": "\u53D7\u4F17",
+  "modal.audience.value": "\u4F5C\u8005\u81EA\u7528\uFF08\u4E0D\u9762\u5411\u5927\u4F17\u63A8\u5E7F\uFF09",
+  "modal.decoupled.label": "\u9002\u914D",
+  "modal.decoupled.value": "\u7248\u672C\u65E0\u5173\uFF08DSH \u5347\u7EA7\u65E0\u9700\u8DDF\u968F\u9002\u914D\uFF09",
   "op.clear": "\u6E05\u9664\u5DF2\u7ED3\u675F",
   "op.clear.none": "\u6CA1\u6709\u53EF\u6E05\u9664\u7684\u5DF2\u7ED3\u675F\u8BB0\u5F55",
   "op.superseded.note": "{target} \u5DF2\u8DF3\u8FC7\uFF08\u524D\u63D0\u5DF2\u4E0D\u6210\u7ACB\u6216\u5DF2\u624B\u52A8\u5904\u7406\uFF09",
@@ -1542,6 +1549,9 @@ var EN = {
   "badge.deprecated": "Deprecated",
   "sub.snapshot": "v{v} (catalog snapshot)",
   "badge.verified": "Verified",
+  "badge.internal": "Author's own",
+  "badge.decoupled": "Version-independent",
+  "badge.decoupled.tip": "Survives DSH upgrades without per-release adaptation",
   "modal.category": "Category",
   "modal.added": "Added",
   "modal.dlwindow": "Downloads (30-day window)",
@@ -1553,6 +1563,10 @@ var EN = {
   "modal.installcmd": "Install command",
   "modal.copy": "Copy",
   "modal.copied": "Copied",
+  "modal.audience.label": "Audience",
+  "modal.audience.value": "Author's own (not for general promotion)",
+  "modal.decoupled.label": "Compat",
+  "modal.decoupled.value": "Version-independent (no per-release adaptation)",
   "op.clear": "Clear ended",
   "op.clear.none": "Nothing finished to clear",
   "op.superseded.note": "{target} skipped (precondition gone or already handled)",
@@ -2541,6 +2555,8 @@ function DetailModal({ it, labels, busy, onClose, onInstall, profileKind, instal
         h("span", { className: "dshm-name" }, it.name),
         it.deprecated === true ? h("span", { className: "dshm-badge warn" }, lookup("badge.deprecated")) : null,
         it.community !== true && Array.isArray(it.verified) && it.verified.length ? h("span", { className: "dshm-badge", title: it.verified.join("\u3001") }, lookup("badge.verified")) : null,
+        it.audience === "internal" ? h("span", { className: "dshm-badge" }, lookup("badge.internal")) : null,
+        it.decoupled === true ? h("span", { className: "dshm-badge", title: lookup("badge.decoupled.tip") }, lookup("badge.decoupled")) : null,
         it.installed ? h("span", { className: "dshm-badge" }, lookup("badge.installed")) : null,
         it.community === true ? h("span", { className: "dshm-badge info" }, lookup("badge.community")) : null,
         h("span", { className: "dshm-badge info" }, it.source === "npm" ? "npm" : "github"),
@@ -2567,6 +2583,8 @@ function DetailModal({ it, labels, busy, onClose, onInstall, profileKind, instal
         kv(lookup("detail.latest"), it.latestVersion ? `v${it.latestVersion}` : it.latestTag ? it.latestTag : it.latestSha ? it.latestSha : it.latestError ? it.version ? lookup("sub.snapshot", { v: it.version }) : it.latestError : "\u2014"),
         kv(lookup("detail.installed"), it.installedPkg ? `${it.installedPkg} v${it.installedVersion || "?"}` : lookup("installed.none")),
         it.community !== true && Array.isArray(it.verified) && it.verified.length ? kv(lookup("modal.verified"), it.verified.join("\u3001")) : null,
+        it.audience === "internal" ? kv(lookup("modal.audience.label"), lookup("modal.audience.value")) : null,
+        it.decoupled === true ? kv(lookup("modal.decoupled.label"), lookup("modal.decoupled.value")) : null,
         (it.tags || []).length ? kv(lookup("modal.tags"), it.tags.join(", ")) : null,
         it.deprecated === true && it.replacement ? kv(lookup("modal.replacement"), it.replacement) : null
       ),
@@ -2885,6 +2903,8 @@ function MarketTab({ notify, markets, onMutation, ops, favorites, profileKind })
       ) : null,
       it.deprecated === true ? h("span", { className: "dshm-badge warn", key: "dep" }, lookup("badge.deprecated")) : null,
       it.community !== true && Array.isArray(it.verified) && it.verified.length ? h("span", { className: "dshm-badge", key: "v", title: it.verified.join("\u3001") }, lookup("badge.verified")) : null,
+      it.audience === "internal" ? h("span", { className: "dshm-badge dshm-badge-internal", key: "internal" }, lookup("badge.internal")) : null,
+      it.decoupled === true ? h("span", { className: "dshm-badge", key: "decoupled", title: lookup("badge.decoupled.tip") }, lookup("badge.decoupled")) : null,
       it.outdated ? h("span", { className: "dshm-badge warn", key: "u" }, lookup("badge.update")) : null,
       it.installed ? h("span", { className: "dshm-badge", key: "i" }, lookup("badge.installed")) : null,
       it.community === true ? h("span", { className: "dshm-badge info", key: "c" }, lookup("badge.community")) : null,

package/lib/core/dsh-cli.js

@@ -215,25 +215,32 @@ export const PNPM_OUTCOME_CODES = {
 /**
  * 对 pnpm/dsh 原始输出文本做六类归一解释。分类发生在任何文案改写之前；
  * 上层（事务/market）只消费 class + code 常量，永不 regex 原始输出。
+ * registry 识别（ADR-0012 L2）同样只在此处发生：tail-800 截断可能吃掉特征串，
+ * 因此必须在完整文本上判定后随结构化结果上交。
  */
 export function classifyPnpmError(text) {
     const raw = String(text ?? '');
+    const registry = raw.includes('registry-direct.npmmirror.com') || raw.includes('registry.npmmirror.com')
+        ? 'npmmirror'
+        : raw.includes('registry.npmjs.org')
+            ? 'npmjs'
+            : null;
     if (raw.includes(PNPM_OUTCOME_CODES.NO_MATCHING_VERSION)) {
-        return { class: 'retryable-lag', code: PNPM_OUTCOME_CODES.NO_MATCHING_VERSION };
+        return { class: 'retryable-lag', code: PNPM_OUTCOME_CODES.NO_MATCHING_VERSION, registry };
     }
     if (raw.includes(PNPM_OUTCOME_CODES.CONFIG_MISMATCH)) {
-        return { class: 'config-drift', code: PNPM_OUTCOME_CODES.CONFIG_MISMATCH };
+        return { class: 'config-drift', code: PNPM_OUTCOME_CODES.CONFIG_MISMATCH, registry };
     }
     if (raw.includes(PNPM_OUTCOME_CODES.OUTDATED_LOCKFILE)) {
-        return { class: 'config-drift', code: PNPM_OUTCOME_CODES.OUTDATED_LOCKFILE };
+        return { class: 'config-drift', code: PNPM_OUTCOME_CODES.OUTDATED_LOCKFILE, registry };
     }
     if (raw.includes(PNPM_OUTCOME_CODES.UNUSED_PATCH)) {
-        return { class: 'unused-patch', code: PNPM_OUTCOME_CODES.UNUSED_PATCH };
+        return { class: 'unused-patch', code: PNPM_OUTCOME_CODES.UNUSED_PATCH, registry };
     }
     if (isPrepareBlocked(raw))
-        return { class: 'needs-builds' };
+        return { class: 'needs-builds', registry };
     const m = /(ERR_PNPM_[A-Z0-9_]+)/.exec(raw);
-    return { class: 'hard-fail', code: m?.[1] };
+    return { class: 'hard-fail', code: m?.[1], registry };
 }
 /** 统一的命令取消错误形态（runCommand 调用前已取消与运行中取消同款）。 */
 function commandAbortError() {

package/lib/core/httpx.js

@@ -4,6 +4,7 @@
  * 循环检测、signal 传播、返回最终 URL；registry/homepage/icon 诊断不得另起一套。
  */
 import { Buffer } from 'node:buffer';
+import { Agent, EnvHttpProxyAgent, fetch as undiciFetch } from 'undici';
 export class HttpError extends Error {
     status;
     /** 非 2xx 响应的 headers（供上层识别限流等场景）；body-cap/协议类错误无 headers */
@@ -18,6 +19,54 @@ const MAX_DEFAULT = 2 * 1024 * 1024; // 2MB：registry/npm metadata 足够
 const MAX_REDIRECTS = 3;
 const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
 const USER_AGENT = 'dsh-m (personal marketplace)';
+/**
+ * L0（ADR-0012）：undici 自带 fetch + 自建 dispatcher——全局 fetch 不吃代理 env
+ * 且暴露于宿主 undici 全局 dispatcher 污染（dsh-market net.ts #742 实录）。
+ * 代理解析：标准 env 小写优先，npm_config_* 兜底——EnvHttpProxyAgent 自身只读
+ * http(s)_proxy，npm 命名空间的代理必须显式交接，否则静默直连而报错却声称走过代理。
+ */
+export function resolveProxyConfig() {
+    const pick = (raw) => {
+        const value = raw?.trim();
+        if (value === undefined || value === '')
+            return null;
+        return /^[a-z][a-z\d+.-]*:\/\//iu.test(value) ? value : `http://${value}`;
+    };
+    const https = pick(process.env.https_proxy ?? process.env.HTTPS_PROXY) ?? pick(process.env.npm_config_https_proxy);
+    const http = pick(process.env.http_proxy ?? process.env.HTTP_PROXY) ?? pick(process.env.npm_config_proxy);
+    return { http, https };
+}
+/** 代理 URL 凭据掩码（via 附着与 describeFetchFailure 共用）。 */
+export function maskProxy(url) {
+    return url.replace(/\/\/[^@]*@/u, '//***@');
+}
+let directAgent = null;
+let proxyAgent = null;
+/** 仅测试：env 变更后重建单例（单例只为连接复用，不承载语义）。 */
+export function resetProxyAgentsForTests() {
+    directAgent = null;
+    proxyAgent = null;
+}
+function dispatcherFor() {
+    const { http, https } = resolveProxyConfig();
+    if (http === null && https === null) {
+        directAgent ??= new Agent();
+        return directAgent;
+    }
+    proxyAgent ??= new EnvHttpProxyAgent({ httpProxy: http ?? undefined, httpsProxy: https ?? undefined });
+    return proxyAgent;
+}
+/** wire 层出网引用：默认 undici 包自带 fetch（带 dispatcher）。 */
+let wireFetch = (url, init) => undiciFetch(url, init);
+/**
+ * 仅测试：替换 wire 层 fetch（本仓库既有 mock globalThis.fetch 测试缝隙的迁移口，
+ * 首参收字符串 url；传 null 恢复 undici 默认）。生产路径永不调用。
+ */
+export function _setWireFetchForTests(fn) {
+    wireFetch = fn
+        ? (url, init) => fn(url.toString(), init)
+        : (url, init) => undiciFetch(url, init);
+}
 export function assertSafeUrl(raw) {
     let url;
     try {
@@ -72,12 +121,26 @@ export async function fetchLimited(url, opts = {}) {
     const seen = new Set([current.toString()]);
     for (let hop = 0;; hop++) {
         opts.onRequest?.(current.toString());
-        const res = await fetch(current, {
-            redirect: 'manual',
-            signal,
-            method: opts.method ?? 'GET',
-            headers: { 'user-agent': USER_AGENT, ...opts.headers },
-        });
+        let res;
+        try {
+            // 实证（undici 7.30）：redirect:'manual' 返回真实 3xx + Location（type=basic），
+            // 现有手动跳循环原样保留；每跳 assertSafeUrl / 上限 / 循环检测不动。
+            res = await wireFetch(current, {
+                redirect: 'manual',
+                signal,
+                method: opts.method ?? 'GET',
+                headers: { 'user-agent': USER_AGENT, ...opts.headers },
+                dispatcher: dispatcherFor(),
+            });
+        }
+        catch (err) {
+            if (!(err instanceof HttpError)) {
+                const { http, https } = resolveProxyConfig();
+                const proxyUrl = https ?? http;
+                err.via = proxyUrl === null ? 'direct' : maskProxy(proxyUrl);
+            }
+            throw err;
+        }
         if (REDIRECT_STATUSES.has(res.status)) {
             await res.body?.cancel().catch(() => undefined);
             if (hop >= MAX_REDIRECTS)
@@ -172,13 +235,18 @@ export function describeFetchFailure({ label, err, attempts, elapsedMs }) {
     else {
         reason = String(err);
     }
+    // L4（ADR-0012）：仅代理路径渲染「（经 …）」；direct/缺失不渲染（无代理机器零噪音）。
+    const via = err instanceof Error && typeof err.via === 'string'
+        ? err.via
+        : null;
+    const viaText = via && via !== 'direct' ? `（经 ${maskProxy(via)}）` : '';
     const cost = [];
     if (typeof attempts === 'number' && attempts > 0)
         cost.push(`${attempts} 次尝试`);
     if (typeof elapsedMs === 'number' && elapsedMs > 0)
         cost.push(`耗时 ${(elapsedMs / 1000).toFixed(1)}s`);
     const costText = cost.length > 0 ? `（${cost.join('，')}）` : '';
-    return `${label} 失败：${reason}${costText}；可稍后重试或检查网络后重试`;
+    return `${label} 失败：${reason}${viaText}${costText}；可稍后重试或检查网络后重试`;
 }
 /** 字节下载（社区目录正文用）：非 2xx 抛 HttpError；bytes = 完整响应体。 */
 export async function fetchBytesLimited(url, opts = {}) {

package/lib/core/latest-cache.js

@@ -14,6 +14,7 @@
 import { rm } from 'node:fs/promises';
 import { join } from 'node:path';
 import { WEB_PROFILE, cacheRoot } from './env.js';
+import { onRouteSwitch } from './npm-route.js';
 const latestCache = new Map();
 const LATEST_CACHE_MAX = 5000;
 /** 缓存键第三段（itemId）：浏览页键 / 已装页 matched 键 / npm-only 键共用同一尾段，定向失效按它匹配。 */
@@ -79,3 +80,8 @@ export function resetLatestCacheForTest() {
     latestCache.clear();
     swept.clear();
 }
+/** L1（ADR-0012）：npm 生效源切换 → 整体作废 latest 探测缓存（镜像的答案不是官方源的答案）。 */
+export function clearAllLatestCache() {
+    latestCache.clear();
+}
+onRouteSwitch(() => clearAllLatestCache());

package/lib/core/npm-route.js

@@ -0,0 +1,201 @@
+/**
+ * L1/L2（ADR-0012）：npm registry 路由自适应。
+ * 候选 = `DSHM_NPM_REGISTRY` env（最高优先，设了跳过探测）> [.npmrc registry, npmjs, npmmirror] 去重；
+ * probe-once（Promise.any 探 `semver/latest`，2.5s 共享预算，胜者须合法 JSON 带 version）+ single-flight；
+ * 决策持久化 `<cacheDir()>/npm-route.json`；**全候选失败仅内存回退 npmjs（TTL 60s 过期重探，不落盘）**——
+ * 对官方 region-probe「持久化回退值」立场的显式偏离：GUI 长驻进程里坏决策不可见、恢复口不可发现。
+ * sync 原语：npmmirror 按需同步（know-how 020 §2.2/§3.1），`DSHM_MIRROR_SYNC=0` 全关。
+ */
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { writeFileAtomic } from '@deepseek-ai/dsh-atomic-write';
+import { cacheDir } from './env.js';
+import { fetchJsonLimited, fetchLimited } from './httpx.js';
+export const DEFAULT_NPM_REGISTRY = 'https://registry.npmjs.org';
+export const NPM_MIRROR = 'https://registry.npmmirror.com';
+const PROBE_BUDGET_MS = 2_500;
+const FALLBACK_TTL_MS = 60_000;
+const DECISION_FILE = 'npm-route.json';
+/** 用户级 .npmrc 顶层 `registry=` 键（ini-lite；scope 键 v1 忽略；缺失/损坏 = null）。 */
+export function readNpmrcRegistry(path = join(homedir(), '.npmrc')) {
+    try {
+        const text = readFileSync(path, 'utf8');
+        for (const rawLine of text.split(/\r?\n/)) {
+            const line = rawLine.trim();
+            if (line === '' || line.startsWith('#') || line.startsWith(';'))
+                continue;
+            const m = /^registry\s*=\s*(.+)$/.exec(line);
+            if (m) {
+                const base = m[1].trim().replace(/\/+$/, '');
+                return base === '' ? null : base;
+            }
+        }
+    }
+    catch {
+        // 文件缺失/不可读 = 无 .npmrc 源
+    }
+    return null;
+}
+/** 候选源（env 直采时恒单元素；否则 .npmrc 优先、官方源与镜像兜底，去重保序）。 */
+export function candidates() {
+    const override = process.env.DSHM_NPM_REGISTRY?.trim();
+    if (override)
+        return [override.replace(/\/+$/, '')];
+    const out = [];
+    for (const c of [readNpmrcRegistry(), DEFAULT_NPM_REGISTRY, NPM_MIRROR]) {
+        if (c && !out.includes(c))
+            out.push(c);
+    }
+    return out;
+}
+const listeners = [];
+export function onRouteSwitch(fn) {
+    listeners.push(fn);
+}
+/** 生效值变化才广播（含首次决议；listener 异常不阻断路由）。 */
+let effective = null;
+function setEffective(base) {
+    if (effective === base)
+        return;
+    effective = base;
+    for (const fn of listeners) {
+        try {
+            fn(base);
+        }
+        catch {
+            // listener 自身问题不阻断
+        }
+    }
+}
+function decisionPath() {
+    return join(cacheDir(), DECISION_FILE);
+}
+function readDecisionFile() {
+    try {
+        const doc = JSON.parse(readFileSync(decisionPath(), 'utf8'));
+        if (typeof doc.base === 'string' && /^https?:\/\//.test(doc.base))
+            return doc.base.replace(/\/+$/, '');
+    }
+    catch {
+        // 缺失/损坏 = 无决策（下次重探）
+    }
+    return null;
+}
+async function writeDecisionFile(base, cands) {
+    try {
+        const doc = { base, decidedAt: new Date().toISOString(), candidates: cands };
+        await writeFileAtomic(decisionPath(), JSON.stringify(doc, null, 2) + '\n', { mode: 0o600 });
+    }
+    catch {
+        // 落盘失败不影响本次生效（内存已有）
+    }
+}
+async function defaultProbeFetch(base, signal) {
+    const doc = await fetchJsonLimited(`${base}/semver/latest`, { timeoutMs: PROBE_BUDGET_MS, signal });
+    return typeof doc?.version === 'string' ? doc.version : '';
+}
+let memBase = null;
+let memIsFallback = false;
+let fallbackAt = 0;
+let inflight = null;
+export function resetNpmRouteForTests() {
+    memBase = null;
+    memIsFallback = false;
+    fallbackAt = 0;
+    inflight = null;
+    effective = null;
+}
+/** 共享预算 + 读完整个响应才算赢（captive portal 只回 header 就挂的场景选不出赢家）。 */
+async function probeOnce(cands, probeFetch) {
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(new Error('路由探测超时')), PROBE_BUDGET_MS);
+    try {
+        const ask = async (base) => {
+            const version = await probeFetch(base, ac.signal);
+            if (typeof version !== 'string' || version === '')
+                throw new Error(`${base} 探测无有效 version`);
+            return base;
+        };
+        return await Promise.any(cands.map(ask));
+    }
+    finally {
+        clearTimeout(timer);
+        ac.abort(); // 停止败者：其答案已不能改变任何决定
+    }
+}
+export async function decideNpmRoute(deps) {
+    if (inflight)
+        return inflight;
+    inflight = (async () => {
+        // 1) env 最高优先：直采、不探测、不落盘（去尾斜杠，与镜像/官方源等值判断对齐——评审 R1-3）
+        const override = process.env.DSHM_NPM_REGISTRY?.trim();
+        if (override) {
+            const normalized = override.replace(/\/+$/, '');
+            setEffective(normalized);
+            return normalized;
+        }
+        // 2) 成功探测的内存决策稳定复用（决策文件才是持久真相）
+        if (memBase !== null && !memIsFallback)
+            return memBase;
+        // 3) 回退态：TTL 内复用，过期重探（R2-3）
+        if (memBase !== null && memIsFallback) {
+            if (Date.now() - fallbackAt < (deps?.fallbackTtlMs ?? FALLBACK_TTL_MS))
+                return memBase;
+            memBase = null;
+            memIsFallback = false;
+        }
+        // 4) 决策文件（机器级事实，跨重启稳定）
+        const fromFile = readDecisionFile();
+        if (fromFile) {
+            memBase = fromFile;
+            memIsFallback = false;
+            setEffective(fromFile);
+            return fromFile;
+        }
+        // 5) probe-once；全败 → 内存回退 DEFAULT（不落盘，R1-8 决策 a）
+        const cands = candidates();
+        try {
+            const winner = await probeOnce(cands, deps?.probeFetch ?? defaultProbeFetch);
+            memBase = winner;
+            memIsFallback = false;
+            setEffective(winner);
+            await writeDecisionFile(winner, cands);
+            return winner;
+        }
+        catch {
+            memBase = DEFAULT_NPM_REGISTRY;
+            memIsFallback = true;
+            fallbackAt = Date.now();
+            setEffective(DEFAULT_NPM_REGISTRY);
+            return DEFAULT_NPM_REGISTRY;
+        }
+    })();
+    try {
+        return await inflight;
+    }
+    finally {
+        inflight = null;
+    }
+}
+/** 当前生效 npm registry（decideNpmRoute 语义名）。 */
+export async function activeNpmRegistry(deps) {
+    return decideNpmRoute(deps);
+}
+/**
+ * npmmirror 按需同步（know-how 020 §2.2/§3.1）；2xx=受理。任何失败返回 false、不抛；
+ * `DSHM_MIRROR_SYNC=0` 一键关闭（不发请求）。
+ */
+export async function syncNpmmirrorPackage(pkg, deps) {
+    if (process.env.DSHM_MIRROR_SYNC === '0')
+        return false;
+    const fetcher = deps?.fetcher ?? fetchLimited;
+    const url = `https://registry-direct.npmmirror.com/${encodeURIComponent(pkg)}/sync?sync_upstream=true`;
+    try {
+        const res = await fetcher(url, { method: 'PUT', timeoutMs: deps?.timeoutMs ?? 8_000 });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}

package/lib/core/profile-transaction.js

@@ -38,12 +38,14 @@ import { webProfileDir } from './env.js';
 import { isSafePkgName, resolvePluginDir } from './installed.js';
 import { setLivePluginDisabled } from './live-plugin.js';
 import { npmPackument } from './versions.js';
+import { syncNpmmirrorPackage } from './npm-route.js';
+import { clearAllLatestCache } from './latest-cache.js';
 import { assertNpmIntegrity, atomicWriteFile, readPnpmLockIntegrity, readPnpmLockOverrides, restoreSnapshots, snapshotFiles, verifySnapshots, } from './npm-integrity.js';
 import { isSafePluginTarget, makeDshRunner, removePatchedDependencyEntries, PNPM_OUTCOME_CODES, } from './dsh-cli.js';
 export const TX_HEAL_CODES = [
     'RANGE_ANCHOR_ACCEPTED', 'B1_MANIFEST_KEYS_RESTORED', 'B1_FROZEN_REVERIFY_FAILED',
     'B2_OVERRIDES_ALIGNED', 'B2_FROZEN_REVERIFY_OK', 'B2_LOCKFILE_REBUILT',
-    'B3_LAG_RETRY', 'B3_PACKUMENT_WARMED', 'BUILDS_ALLOWED',
+    'B3_LAG_RETRY', 'B3_NPMMIRROR_SYNC', 'B3_PACKUMENT_WARMED', 'BUILDS_ALLOWED',
     'ROLLBACK_BYTES_RESTORED', 'ROLLBACK_CONVERGED_FROZEN', 'ROLLBACK_FALLBACK_REMOVED',
     'ROLLBACK_VERIFY_FAILED', 'LIVE_DISABLED', 'LIVE_REENABLED', 'LIVE_REENABLE_FAILED',
     'PATCH_ENTRIES_STRIPPED', 'PATCH_MAPPING_RESTORED',
@@ -461,6 +463,8 @@ function resolveDeps(deps) {
     return {
         profileDir,
         warmPackument: deps?.warmPackument,
+        syncNpmmirror: deps?.syncNpmmirror ?? syncNpmmirrorPackage,
+        clearLatestCache: deps?.clearLatestCache ?? clearAllLatestCache,
         setLiveDisabled: deps?.setLiveDisabled ?? setLivePluginDisabled,
         stripPatchedEntries: deps?.stripPatchedEntries ?? removePatchedDependencyEntries,
         retryDelaysMs: deps?.retryDelaysMs ?? [5_000, 15_000],
@@ -479,6 +483,15 @@ async function addWithLagRetry(req, spec, d, heal) {
         const out = await d.runner.add(spec, req.signal);
         if (out.class !== 'retryable-lag')
             return out;
+        // L2②（ADR-0012）：NO_MATCHING_VERSION 且 registry 字段指名 npmmirror → 按需同步镜像后重试；
+        // sync 失败静默（false = 回到既有退避语义）；kill switch（DSHM_MIRROR_SYNC=0）在缺省实现内。
+        if (out.code === PNPM_OUTCOME_CODES.NO_MATCHING_VERSION && out.registry === 'npmmirror') {
+            const synced = await d.syncNpmmirror(req.pkg);
+            if (synced) {
+                d.clearLatestCache();
+                heal.push({ code: 'B3_NPMMIRROR_SYNC', note: 'NO_MATCHING_VERSION 来自 npmmirror，已按需同步镜像后重试（+npmmirror sync）' });
+            }
+        }
         if (attempt >= d.retryDelaysMs.length)
             return out;
         const delay = d.retryDelaysMs[attempt] ?? 0;

package/lib/core/registry.js

@@ -124,7 +124,7 @@ export function parseRegistryAddress(raw) {
 }
 // ---------- 严格 v1 校验 ----------
 const TOP_LEVEL_KEYS = new Set(['version', 'plugins']);
-const ENTRY_KEYS = new Set(['id', 'name', 'description', 'category', 'tags', 'source', 'npm', 'github', 'homepage', 'icon', 'verified', 'alsoCategories']);
+const ENTRY_KEYS = new Set(['id', 'name', 'description', 'category', 'tags', 'source', 'npm', 'github', 'homepage', 'icon', 'verified', 'alsoCategories', 'decoupled', 'audience']);
 /** 精确 semver 判定（与 versions.ts EXACT_VERSION_RE 同语义；接受 prerelease/build，拒绝 range/前缀）。 */
 const EXACT_SEMVER_RE = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
 function semverParse(value) {
@@ -338,6 +338,25 @@ export function validateRegistry(raw) {
                     alsoCategories = list;
             }
         }
+        // decoupled（自研元数据 v1.1）：只声明 true；与 verified 互斥（GLOSSARY「解耦条目」）
+        let entryDecoupled;
+        if (e.decoupled !== undefined) {
+            if (e.decoupled !== true)
+                errors.push(`${where}.decoupled: 只允许 true 或缺省`);
+            else
+                entryDecoupled = true;
+        }
+        // audience：'public' 为缺省不产生键；'team' 值集预留但本期不接受
+        let entryAudience;
+        if (e.audience !== undefined) {
+            if (e.audience === 'internal')
+                entryAudience = 'internal';
+            else if (e.audience !== 'public')
+                errors.push(`${where}.audience: 只允许 public/internal`);
+        }
+        if (entryDecoupled === true && verified !== undefined) {
+            errors.push(`${where}.decoupled 与 verified 互斥：解耦条目不携带实测版本数组（GLOSSARY「解耦条目」）`);
+        }
         plugins.push({
             id,
             name,
@@ -351,6 +370,8 @@ export function validateRegistry(raw) {
             ...(entryIcon !== undefined ? { icon: entryIcon } : {}),
             ...(verified !== undefined ? { verified } : {}),
             ...(alsoCategories !== undefined ? { alsoCategories } : {}),
+            ...(entryDecoupled === true ? { decoupled: true } : {}),
+            ...(entryAudience !== undefined ? { audience: entryAudience } : {}),
         });
     });
     return { ok: errors.length === 0, errors, registry: errors.length === 0 ? { version: 1, plugins } : null };

package/lib/core/release-age.js

@@ -27,6 +27,7 @@ import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { isMap, isScalar, isSeq, parseDocument } from 'yaml';
 import { fetchJsonLimited } from './httpx.js';
+import { DEFAULT_NPM_REGISTRY, activeNpmRegistry, onRouteSwitch } from './npm-route.js';
 /** pnpm 11.7 实机测得的策略窗口：24h（operation-l5fXEd 的 cutoff = 检查时刻 − 1440min）。 */
 export const DEFAULT_MINIMUM_RELEASE_AGE_MIN = 1440;
 function scalarNumber(value) {
@@ -147,20 +148,42 @@ export function describeReleaseAgeFailure(input) {
     lines.push(`预计 ${fmtLocal(maxDeadline)} 后可重试；等待期内也可由操作员把 pnpm-workspace.yaml 中对应的独立精确排除条目改为包名级或复合条目以解除拦截`);
     return { message: lines.join('\n'), violations, targetViolating: targetViol !== undefined };
 }
-/** registry packument 的 time 映射（与 npmPackument 同源；失败返回 null，不抛）。 */
-export async function npmPackumentTimes(pkg, timeoutMs = 20_000, signal) {
+async function fetchPackumentTimes(base, pkg, timeoutMs, signal, fetcher) {
+    const data = await fetcher(`${base}/${encodeURIComponent(pkg)}`, {
+        timeoutMs,
+        signal,
+        maxBytes: 8 * 1024 * 1024,
+    });
+    if (!data || typeof data !== 'object' || data.time === null || typeof data.time !== 'object')
+        return null;
+    const out = {};
+    for (const [k, v] of Object.entries(data.time)) {
+        if (typeof v === 'string')
+            out[k] = v;
+    }
+    return out;
+}
+/**
+ * registry packument 的 time 映射（与 npmPackument 同源；失败返回 null，不抛）。
+ * L3 权威链（ADR-0012）：发布时刻是完整性敏感读——npmjs 权威源优先（首腿超时收紧
+ * `Math.min(timeoutMs, 5_000)`），失败降级生效源；两腿皆败 → null（fail-open 口径不变）。
+ */
+export async function npmPackumentTimes(pkg, timeoutMs = 20_000, signal, deps) {
     if (!/^@?[A-Za-z0-9-._~]+(\/[A-Za-z0-9-._~]+)?$/.test(pkg))
         return null;
+    const fetcher = deps?.fetchJsonLimited ?? fetchJsonLimited;
+    const firstLegMs = Math.min(timeoutMs, 5_000);
     try {
-        const data = await fetchJsonLimited(`https://registry.npmjs.org/${encodeURIComponent(pkg)}`, { timeoutMs, signal, maxBytes: 8 * 1024 * 1024 });
-        if (!data || typeof data !== 'object' || data.time === null || typeof data.time !== 'object')
-            return null;
-        const out = {};
-        for (const [k, v] of Object.entries(data.time)) {
-            if (typeof v === 'string')
-                out[k] = v;
-        }
-        return out;
+        return await fetchPackumentTimes(DEFAULT_NPM_REGISTRY, pkg, firstLegMs, signal, fetcher);
+    }
+    catch {
+        // 权威源不可达 → 生效源降级
+    }
+    const alt = await activeNpmRegistry();
+    if (alt === DEFAULT_NPM_REGISTRY)
+        return null;
+    try {
+        return await fetchPackumentTimes(alt, pkg, timeoutMs, signal, fetcher);
     }
     catch {
         return null;
@@ -179,15 +202,20 @@ export async function readWorkspacePolicy(profileDir) {
 }
 const packumentCache = new Map();
 const PACKUMENT_CACHE_TTL_MS = 5 * 60_000;
+/** L1（ADR-0012）：npm 生效源切换 → 作废 packument 缓存（镜像的答案不是官方源的答案）。 */
+export function clearPackumentCache() {
+    packumentCache.clear();
+}
+onRouteSwitch(() => clearPackumentCache());
 /**
  * 带进程内缓存的 packument time 探测（TTL 5min）：预检与登记（exclude-governance）
  * 共用——同一操作里预检刚拉过的 packument 不二次拉取（8MiB 级全量）。
  */
-export async function cachedPackumentTimes(pkg, timeoutMs = 12_000, signal) {
+export async function cachedPackumentTimes(pkg, timeoutMs = 12_000, signal, deps) {
     const hit = packumentCache.get(pkg);
     if (hit && Date.now() - hit.at < PACKUMENT_CACHE_TTL_MS)
         return hit.times;
-    const times = await npmPackumentTimes(pkg, timeoutMs, signal);
+    const times = await npmPackumentTimes(pkg, timeoutMs, signal, deps);
     packumentCache.set(pkg, { at: Date.now(), times });
     return times;
 }

package/lib/core/versions.js

@@ -6,6 +6,7 @@
  */
 import { gt } from 'semver';
 import { fetchJsonLimited, HttpError } from './httpx.js';
+import { DEFAULT_NPM_REGISTRY, NPM_MIRROR, activeNpmRegistry, syncNpmmirrorPackage } from './npm-route.js';
 /** GitHub 匿名限额（60 次/小时/IP）用尽时返回可读提示（含重置等待分钟数），否则 null。 */
 function githubRateLimitMessage(err) {
     if (err instanceof HttpError && err.status === 403 && err.headers?.get('x-ratelimit-remaining') === '0') {
@@ -29,54 +30,123 @@ const EXACT_VERSION_RE = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(
 export function isExactVersion(version) {
     return EXACT_VERSION_RE.test(version);
 }
-/** 读取该精确版本的 dist metadata（不使用 /latest endpoint）；integrity 缺失由调用方拒绝安装。 */
-export async function npmVersion(pkg, version, timeoutMs = 20_000, signal, registry) {
+function sleepAbortable(ms, signal) {
+    return new Promise((resolve) => {
+        const done = () => {
+            clearTimeout(t);
+            signal?.removeEventListener('abort', done);
+            resolve();
+        };
+        const t = setTimeout(done, ms);
+        signal?.addEventListener('abort', done, { once: true });
+    });
+}
+/**
+ * 精确版本元数据（兼容预检/integrity 锚定）。L2① 履约阶梯（ADR-0012）：
+ * 显式 registry 参数 > 生效源 → 失败且生效源为镜像 → sync → 有界等待 10s → 同源重试一次
+ * → 仍败 → npmjs 兜底（sync+重试为尽力而为，npmjs 兜底是主安全网）；
+ * 主源即 npmjs 时失败直接抛（权威源无镜像滞后可言）。
+ */
+export async function npmVersion(pkg, version, timeoutMs = 20_000, signal, registry, deps) {
     if (!/^@?[A-Za-z0-9-._~]+(\/[A-Za-z0-9-._~]+)?$/.test(pkg))
         throw new Error(`无效 npm 包名: ${pkg}`);
     if (!isExactVersion(version))
         throw new Error(`不是精确版本（拒绝 range/tag/前缀）: ${version}`);
-    const data = await fetchJsonLimited(`${registryBase(registry)}/${encodeURIComponent(pkg)}/${version}`, { timeoutMs, signal });
-    const resolved = typeof data.version === 'string' ? data.version : '';
-    if (!resolved)
-        throw new Error(`npm 未返回版本: ${pkg}@${version}`);
-    const peers = {};
-    if (data.peerDependencies !== null && typeof data.peerDependencies === 'object') {
-        for (const [name, range] of Object.entries(data.peerDependencies)) {
-            if (typeof range === 'string')
-                peers[name] = range;
+    const fetcher = deps?.fetchJsonLimited ?? fetchJsonLimited;
+    const sync = deps?.syncNpmmirror ?? syncNpmmirrorPackage;
+    const wait = deps?.wait ?? sleepAbortable;
+    const leg = async (base) => {
+        const data = await fetcher(`${registryBase(base)}/${encodeURIComponent(pkg)}/${version}`, { timeoutMs, signal });
+        const resolved = typeof data.version === 'string' ? data.version : '';
+        if (!resolved)
+            throw new Error(`npm 未返回版本: ${pkg}@${version}`);
+        const peers = {};
+        if (data.peerDependencies !== null && typeof data.peerDependencies === 'object') {
+            for (const [name, range] of Object.entries(data.peerDependencies)) {
+                if (typeof range === 'string')
+                    peers[name] = range;
+            }
         }
-    }
-    return {
-        version: resolved,
-        integrity: typeof data.dist?.integrity === 'string' ? data.dist.integrity : undefined,
-        tarball: typeof data.dist?.tarball === 'string' ? data.dist.tarball : undefined,
-        peers,
+        return {
+            version: resolved,
+            integrity: typeof data.dist?.integrity === 'string' ? data.dist.integrity : undefined,
+            tarball: typeof data.dist?.tarball === 'string' ? data.dist.tarball : undefined,
+            peers,
+        };
     };
+    const primary = registry?.trim() ? registry.trim() : await activeNpmRegistry();
+    try {
+        return await leg(primary);
+    }
+    catch (firstErr) {
+        // L2①（ADR-0012）：仅 sync 真正受理（评审 R1-2：kill switch / 同步失败返回 false 时
+        // 不付 10s 等待成本、不发必 404 的同源重试——「风险与回退」承诺的行为回到现状）才重试镜像。
+        if (primary === NPM_MIRROR && (await sync(pkg))) {
+            await wait(10_000, signal);
+            try {
+                return await leg(primary);
+            }
+            catch {
+                // 同源重试仍败 → npmjs 兜底
+            }
+        }
+        if (primary !== DEFAULT_NPM_REGISTRY)
+            return leg(DEFAULT_NPM_REGISTRY);
+        throw firstErr;
+    }
 }
 /**
  * 拉取完整 packument（NO_MATCHING_VERSION 退避重试前的预热/校验原语）。
  * 返回该包已知的全部版本号；解析不出 versions 时返回空列表（不抛）。
+ * L1（ADR-0012/R1-6）：registry 参数曾被忽略——现「显式参数 > 生效源」。
  */
-export async function npmPackument(pkg, timeoutMs = 20_000, signal, registry) {
+export async function npmPackument(pkg, timeoutMs = 20_000, signal, registry, deps) {
     if (!/^@?[A-Za-z0-9-._~]+(\/[A-Za-z0-9-._~]+)?$/.test(pkg))
         throw new Error(`无效 npm 包名: ${pkg}`);
-    const data = await fetchJsonLimited(`https://registry.npmjs.org/${encodeURIComponent(pkg)}`, { timeoutMs, signal, maxBytes: 8 * 1024 * 1024 });
+    const fetcher = deps?.fetchJsonLimited ?? fetchJsonLimited;
+    const base = registry?.trim() ? registry.trim() : await activeNpmRegistry();
+    const data = await fetcher(`${registryBase(base)}/${encodeURIComponent(pkg)}`, {
+        timeoutMs,
+        signal,
+        maxBytes: 8 * 1024 * 1024,
+    });
     const versions = data?.versions !== null && typeof data?.versions === 'object' ? Object.keys(data.versions) : [];
     return { versions };
 }
-export async function npmLatest(pkg, timeoutMs = 20_000, signal, registry) {
+/**
+ * 升级探测（检测读）。L3 权威链（ADR-0012）：新鲜度敏感——npmjs 权威源优先
+ * （首腿超时收紧 `Math.min(timeoutMs, 5_000)`），失败降级生效源（≠npmjs 时）；
+ * 不设 sync 腿（两腿全败属网络型失败，sync 只救镜像滞后）。显式 registry 参数优先。
+ */
+export async function npmLatest(pkg, timeoutMs = 20_000, signal, registry, deps) {
     // 允许 scoped 包名：@scope/name（isSafePkgName 同款字符集）
     if (!/^@?[A-Za-z0-9-._~]+(\/[A-Za-z0-9-._~]+)?$/.test(pkg))
         throw new Error(`无效 npm 包名: ${pkg}`);
-    const data = await fetchJsonLimited(`${registryBase(registry)}/${encodeURIComponent(pkg)}/latest`, { timeoutMs, signal });
-    const version = typeof data.version === 'string' ? data.version : '';
-    if (!version)
-        throw new Error(`npm 未返回版本: ${pkg}`);
-    return {
-        version,
-        integrity: typeof data.dist?.integrity === 'string' ? data.dist.integrity : undefined,
-        tarball: typeof data.dist?.tarball === 'string' ? data.dist.tarball : undefined,
+    const fetcher = deps?.fetchJsonLimited ?? fetchJsonLimited;
+    const leg = async (base, ms) => {
+        const data = await fetcher(`${registryBase(base)}/${encodeURIComponent(pkg)}/latest`, { timeoutMs: ms, signal });
+        const version = typeof data.version === 'string' ? data.version : '';
+        if (!version)
+            throw new Error(`npm 未返回版本: ${pkg}`);
+        return {
+            version,
+            integrity: typeof data.dist?.integrity === 'string' ? data.dist.integrity : undefined,
+            tarball: typeof data.dist?.tarball === 'string' ? data.dist.tarball : undefined,
+        };
     };
+    const explicit = registry?.trim();
+    if (explicit)
+        return leg(explicit, timeoutMs);
+    const firstLegMs = Math.min(timeoutMs, 5_000);
+    try {
+        return await leg(DEFAULT_NPM_REGISTRY, firstLegMs);
+    }
+    catch (firstErr) {
+        const alt = await activeNpmRegistry();
+        if (alt === DEFAULT_NPM_REGISTRY)
+            throw firstErr;
+        return leg(alt, timeoutMs);
+    }
 }
 export async function githubTagSha(repo, tag, timeoutMs = 20_000, signal, budget, apiBase = 'https://api.github.com') {
     // commits/{ref} 会自动解引用 annotated tag，返回的才是可用于 #sha 锁定的 commit

package/lib/tools.js

@@ -78,7 +78,7 @@ export function registerTools(ctx, cfg, deps = {}, profile = resolveActiveProfil
     const ensureService = deps.ensureService;
     ctx.tools.register(defineTool({
         name: 'dshm_search',
-        description: 'Search the DSH plugin marketplace (dsh-m) and show clickable plugin cards. ALWAYS call this instead of web_search or bash when the user wants to find/recommend/browse DSH plugins (插件). Call EXACTLY ONCE per user message; extract a real keyword (主题, 搜索) rather than pasting the whole sentence. Dual catalog: ~22 hand-curated 精选 entries plus a 4,000+ community catalog — default searches all; pass source="community" or "primary" to zone in. Returns 10 cards by default; use offset (take nextOffset from the result) for more batches. After cards appear, reply with AT MOST one short sentence. Do not print install commands.',
+        description: 'Search the DSH plugin marketplace (dsh-m) and show clickable plugin cards. ALWAYS call this instead of web_search or bash when the user wants to find/recommend/browse DSH plugins (插件). Call EXACTLY ONCE per user message; extract a real keyword (主题, 搜索) rather than pasting the whole sentence. Dual catalog: ~22 hand-curated 精选 entries plus a 4,000+ community catalog — default searches all; pass source="community" or "primary" to zone in. Returns 10 cards by default; use offset (take nextOffset from the result) for more batches. Cards may carry audience="internal" (作者自用; do not proactively recommend to general users unless the user names one or asks about internal rollout) and decoupled=true (版本无关, survives DSH upgrades without per-release adaptation). After cards appear, reply with AT MOST one short sentence. Do not print install commands.',
         parameters: {
             query: { type: 'string', description: 'Main keyword, e.g. 主题 or 搜索. Optional; omit to browse.' },
             category: {
@@ -175,6 +175,8 @@ export function registerTools(ctx, cfg, deps = {}, profile = resolveActiveProfil
                     installedPkg: e.installedPkg,
                     installedVersion: e.installedVersion,
                     community: e.community === true,
+                    ...(e.audience === 'internal' ? { audience: 'internal' } : {}),
+                    ...(e.decoupled === true ? { decoupled: true } : {}),
                     downloads: e.downloads ?? null,
                     stars: e.stars ?? null,
                 })),
@@ -496,7 +498,8 @@ function renderSearch(out) {
     const lines = out.items.map((it, i) => {
         const inst = it.installed ? `（已安装 v${it.installedVersion || '?'}）` : '';
         const zone = it.community === true ? '[社区]' : '';
-        return `${i + 1}. ${it.name} · ${it.id}${zone}${inst} · ${it.categoryLabel || it.category}`;
+        const own = it.audience === 'internal' ? '[作者自用]' : '';
+        return `${i + 1}. ${it.name} · ${it.id}${zone}${own}${inst} · ${it.categoryLabel || it.category}`;
     });
     // 翻页尾行（0.7.0 Task 5）：nextOffset 为空 = 已到末尾
     const pager = typeof out.nextOffset === 'number'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-m",
-  "version": "0.9.31",
+  "version": "0.9.33",
   "description": "可自定义收录清单的 DSH 插件市场：收录、安装、卸载、升级一站完成，附 agent 工具与 dshm CLI。",
   "license": "MIT",
   "type": "module",
@@ -84,6 +84,7 @@
   "dependencies": {
     "@deepseek-ai/dsh-atomic-write": "0.1.7-rc.2",
     "semver": "7.8.5",
+    "undici": "7.30.0",
     "yaml": "2.9.1"
   }
 }

package/registry.json

@@ -111,10 +111,10 @@
     {
       "id": "dsh-quota-watch",
       "name": "DSH Quota Watch",
-      "description": "GLM 与 Copilot 额度悬浮球：胶囊、详情面板与侧栏卡片，宿主解析凭据，适配 web 与 desktop。",
+      "description": "GLM 与 Copilot 额度悬浮球：胶囊、详情面板与侧栏卡片，宿主解析凭据，适配 web 与 desktop。版本无关，详见仓库。",
       "category": "self-dev",
       "tags": ["配额", "悬浮球", "GLM", "Copilot"],
-      "verified": ["0.1.7-rc.2", "0.2.0-rc.2"],
+      "decoupled": true,
       "source": "npm",
       "npm": "@iasiv5/dsh-quota-watch",
       "github": "iasiv5/dsh-quota-watch",
@@ -123,10 +123,11 @@
     {
       "id": "dsh-surf",
       "name": "DSH Surf",
-      "description": "网络冲浪入口：设置一级菜单一键打开自托管 Selkies/Chrome 远程桌面，视频流直连；需自建容器并挂认证反代。",
+      "description": "网络冲浪入口：设置一级菜单一键打开 Selkies/Chrome 远程桌面，视频流直连；需自建容器与认证反代。版本无关，详见仓库。",
       "category": "self-dev",
       "tags": ["浏览器", "远程桌面", "Selkies", "网络冲浪"],
-      "verified": ["0.1.7-rc.2"],
+      "decoupled": true,
+      "audience": "internal",
       "source": "npm",
       "npm": "@iasiv5/dsh-surf",
       "github": "iasiv5/dsh-surf",
@@ -135,10 +136,11 @@
     {
       "id": "dsh-obmc-web",
       "name": "DSH OBMC Web",
-      "description": "在 DSH 里打开 OpenBMC 控制台：同源代理走 SSH 隧道，设置面板一键开启，支持 IP 探测与隧道重定向；需 SSH 跳板可达 BMC。",
+      "description": "DSH 内打开 OpenBMC 控制台：同源 SSH 隧道代理，设置页一键开启，IP 探测与隧道重定向；需 SSH 跳板可达 BMC。版本无关。",
       "category": "self-dev",
       "tags": ["OpenBMC", "远程管理", "SSH 隧道", "KVM"],
-      "verified": ["0.1.7-rc.1", "0.1.7-rc.2"],
+      "decoupled": true,
+      "audience": "internal",
       "source": "npm",
       "npm": "@iasiv5/dsh-obmc-web",
       "github": "iasiv5/dsh-obmc-web",
@@ -147,10 +149,11 @@
     {
       "id": "dsh-onetree-log",
       "name": "OneTree Log",
-      "description": "OneTree/dreport 日志包上传解包，14 域清单与预览；可登记服务器本地路径；已适配 0.1.7-rc.2，详见仓库。",
+      "description": "OneTree/dreport 日志包上传解包，14 域清单与预览；可登记服务器本地路径；版本无关，详见仓库。",
       "category": "self-dev",
       "tags": ["日志", "OneTree", "诊断", "工具"],
-      "verified": ["0.1.7-rc.2"],
+      "decoupled": true,
+      "audience": "internal",
       "source": "npm",
       "npm": "@inventec/dsh-onetree-log",
       "github": "iasiv5/dsh-onetree-log",