dsh-model-groups 0.3.4 → 0.3.6

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-model-groups",
-  "version": "0.3.4",
-  "description": "DSH 网页模型选择器：供应商与密钥配置分层折叠、多密钥手动选择。支持 DSH 0.2.2-rc.1。",
+  "version": "0.3.6",
+  "description": "DSH 网页模型选择器：供应商与密钥配置分层折叠、多密钥独立协议与安全直升维护。支持 DSH 0.2.2-rc.1。",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -28,6 +28,8 @@
     "lib",
     "native/*.patch.json",
     "scripts",
+    "!scripts/settings-models-collapse.mjs",
+    "!scripts/pi-ai-protocol.mjs",
     "cordis.patch.yml",
     "README.md",
     "LICENSE"
@@ -45,7 +47,8 @@
       "inject": [
         "@deepseek-ai/dsh-client-ui-model-selection",
         "@deepseek-ai/dsh-client-ui-renderer",
-        "@deepseek-ai/dsh-client-ui-settings-models"
+        "@deepseek-ai/dsh-client-ui-settings-models",
+        "@deepseek-ai/dsh-client-ui-settings"
       ],
       "external": [
         "react",

package/scripts/build.mjs

@@ -5,10 +5,15 @@ import { fileURLToPath } from 'node:url';
 const root = fileURLToPath(new URL('../', import.meta.url));
 const read = name => fs.readFileSync(path.join(root, name), 'utf8');
 const withoutExports = source => source.replace(/^export /gm, '');
+const clientVersion = JSON.parse(read('package.json')).version;
 // Styles belong to the mounted plugin, not to module materialization: a
 // disposal removes them and a re-applied (memoized) module must restore them.
 const styles = `\nconst MODEL_GROUPS_CSS = ${JSON.stringify(read('src/groups.css'))};\nfunction installModelGroupsStyles() {\n  const tagId = 'dsh-model-groups/groups.css';\n  if (document.querySelector('style[data-plugin-css="' + tagId + '"]') !== null) return;\n  const style = document.createElement('style');\n  style.dataset.plugin = 'dsh-model-groups';\n  style.dataset.pluginCss = tagId;\n  style.textContent = MODEL_GROUPS_CSS;\n  document.head.appendChild(style);\n}\n`;
-const source = `// Generated by scripts/build.mjs; edit src instead.\nwindow.__ModuleLoader__.load({\n  id: 'dsh-model-groups',\n  factory(require) {\n    const react = require('react');\n    const react_dom = require('react-dom');\n    const react_jsx_runtime = require('react/jsx-runtime');\n    const _deepseek_ai_dsh_client_ui_primitives = require('@deepseek-ai/dsh-client-ui-primitives');\n${withoutExports(read('src/group-state.js'))}\n${withoutExports(read('src/hierarchy.js')).replace(/^import .*;\n/gm, '')}\n${read('src/model-select.js')}\n${withoutExports(read('src/fallback.js'))}\n${styles}\n${withoutExports(read('src/client.js'))}\n    return { apply, inject };\n  },\n});\n`;
+const settingsStyles = styleInstaller('SETTINGS_PAGE_CSS', 'installSettingsPageStyles', 'src/settings-page.css', 'dsh-model-groups/settings-page.css');
+function styleInstaller(constant, installer, file, tagId) {
+  return `\nconst ${constant} = ${JSON.stringify(read(file))};\nfunction ${installer}() {\n  const tagId = ${JSON.stringify(tagId)};\n  if (document.querySelector('style[data-plugin-css="' + tagId + '"]') !== null) return;\n  const style = document.createElement('style');\n  style.dataset.plugin = 'dsh-model-groups';\n  style.dataset.pluginCss = tagId;\n  style.textContent = ${constant};\n  document.head.appendChild(style);\n}\n`;
+}
+const source = `// Generated by scripts/build.mjs; edit src instead.\nwindow.__ModuleLoader__.load({\n  id: 'dsh-model-groups',\n  factory(require) {\n    const react = require('react');\n    const react_dom = require('react-dom');\n    const react_jsx_runtime = require('react/jsx-runtime');\n    const _deepseek_ai_dsh_client_ui_primitives = require('@deepseek-ai/dsh-client-ui-primitives');\n${withoutExports(read('src/group-state.js'))}\n${withoutExports(read('src/hierarchy.js')).replace(/^import .*;\n/gm, '')}\n${read('src/model-select.js')}\n${withoutExports(read('src/fallback.js'))}\n${styles}\n${settingsStyles}\nconst MODEL_GROUPS_CLIENT_VERSION = ${JSON.stringify(clientVersion)};\n${withoutExports(read('src/compatibility.js'))}\n${withoutExports(read('src/maintenance-state.js')).replace(/^import .*;\n/gm, '')}\n${withoutExports(read('src/settings-page.js')).replace(/^import .*;\n/gm, '')}\n${withoutExports(read('src/client.js'))}\n    return { apply, inject };\n  },\n});\n`;
 const target = path.join(root, 'lib/client.js');
 // Compile the classic-script bundle before writing anything.
 new Function(source);

package/scripts/doctor.mjs

@@ -1,39 +1,38 @@
 import fs from 'node:fs';
 import { fileURLToPath } from 'node:url';
-import { planPatches } from './native-patches.mjs';
+import { inspectPatches } from './native-patches.mjs';
+import { compatibilityGuidance } from '../src/compatibility.js';
 
 const args = process.argv.slice(2);
 if (args.includes('--help')) {
-  console.log('Usage: node scripts/doctor.mjs --dsh-root <DSH installation directory> [--json]\nRead-only installation check. Does not read credentials or change DSH.');
+  console.log('Usage: node scripts/doctor.mjs --dsh-root <DSH installation directory> [--json]\nRead-only program compatibility check. No credentials, paths, or source text in diagnostics.');
 } else {
   try {
     const i = args.indexOf('--dsh-root');
-    if (i < 0 || !args[i + 1] || args.some((arg, index) => index !== i + 1 && !['--dsh-root', '--json'].includes(arg))) {
-      throw new Error('请用 --dsh-root 指定正在使用的 DSH 安装目录。');
-    }
+    if (i < 0 || !args[i + 1] || args.some((arg, index) => index !== i + 1 && !['--dsh-root', '--json'].includes(arg))) throw new Error('arguments');
     const pkg = JSON.parse(fs.readFileSync(fileURLToPath(new URL('../package.json', import.meta.url)), 'utf8'));
-    const plans = planPatches(args[i + 1], 'check');
-    const missing = plans.filter(plan => plan.state !== 'patched');
-    const report = {
-      plugin: pkg.name,
-      version: pkg.version,
-      supportedDsh: pkg.engines.dsh,
-      diskPatchesReady: missing.length === 0,
-      runtimeVerified: false,
-      files: plans.map(plan => ({ target: plan.artifact.target, state: plan.state })),
-      next: missing.length > 0
-        ? '多密钥安装尚未完成：需要按 README 应用尚未安装的兼容补丁，再重启原 DSH 服务并刷新网页。'
-        : '磁盘补丁齐全。请确认原 DSH 服务已在应用补丁后重启，并刷新网页；本检查不能确认运行中的模块或浏览器缓存。',
-    };
+    const compatibility = inspectPatches(args[i + 1]);
+    const conflict = compatibility.files.some(file => file.state === 'conflict');
+    const ready = compatibility.files.every(file => file.code === 'ready');
+    const report = { plugin: pkg.name, version: pkg.version, supportedDsh: pkg.engines.dsh,
+      diskPatchesReady: ready, runtimeVerified: false, compatibility,
+      files: compatibility.files.map(file => ({ ...file, updateAvailable: file.code === 'update_available',
+        applySupported: ['ready', 'update_available', 'not_applied'].includes(file.code) })),
+      next: compatibilityGuidance(compatibility) || (ready
+        ? '磁盘补丁齐全。请确认原 DSH 服务已在应用补丁后重启，并刷新网页；本检查不能证明运行中的模块已刷新。'
+        : '请在设置 → 模型分组中确认启用，再重启原 DSH 服务并刷新网页。') };
     if (args.includes('--json')) console.log(JSON.stringify(report, null, 2));
     else {
-      console.log(`${report.plugin} ${report.version} · DSH ${report.supportedDsh}`);
-      for (const item of report.files) console.log(`${item.state}: ${item.target}`);
+      console.log(`${report.plugin} ${report.version} · DSH ${compatibility.hostVersion ?? 'unknown'}`);
+      for (const item of report.files) console.log(`${item.id}: ${item.state} / ${item.code} · SHA-256 ${item.observedSha256 ?? 'unavailable'}`);
       console.log(report.next);
     }
-    if (missing.length) process.exitCode = 2;
-  } catch (error) {
-    console.error(`无法确认多密钥安装状态：${error.message}`);
+    process.exitCode = conflict ? 1 : ready ? 0 : 2;
+  } catch {
+    const report = { diskPatchesReady: false, runtimeVerified: false, error: 'diagnostic_unavailable',
+      next: '请用 --dsh-root 指定正在使用的 DSH 安装目录；诊断失败不代表补丁已就绪，未修改任何文件。' };
+    if (args.includes('--json')) console.log(JSON.stringify(report, null, 2));
+    else console.error(report.next);
     process.exitCode = 1;
   }
 }

package/scripts/native-patches.mjs

@@ -2,6 +2,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import crypto from 'node:crypto';
 import { fileURLToPath } from 'node:url';
+import { compatibilitySnapshot } from '../src/compatibility.js';
 
 export const ARTIFACTS = ['pi-ai.patch.json', 'settings-models.patch.json', 'llm-typert.host.patch.json', 'llm-typert.remote-client.patch.json', 'api-remotes.patch.json'];
 const pluginRoot = fileURLToPath(new URL('../', import.meta.url));
@@ -25,13 +26,16 @@ export function transformSource(source, artifact, reverse = false) {
 
 /** Validate ALL files before any modification. Check mode is read-only. */
 export function planPatches(dshRoot, mode = 'check', artifactDirectory = path.join(pluginRoot, 'native')) {
+  return planPatchFiles(dshRoot, mode, artifactDirectory, ARTIFACTS);
+}
+function planPatchFiles(dshRoot, mode, artifactDirectory, names) {
   if (!['check', 'apply', 'revert'].includes(mode)) throw new Error('Unknown patch mode');
   const root = fs.realpathSync(dshRoot);
   const inner = path.join(root, 'node_modules/@deepseek-ai/dsh/package.json');
   const dsh = JSON.parse(fs.readFileSync(fs.existsSync(inner) ? inner : path.join(root, 'package.json'), 'utf8'));
   if (dsh.name !== '@deepseek-ai/dsh' || dsh.version !== '0.2.2-rc.1') throw new Error('This patch supports only @deepseek-ai/dsh 0.2.2-rc.1');
   const seen = new Set();
-  return ARTIFACTS.map(name => {
+  return names.map(name => {
     let artifact = JSON.parse(fs.readFileSync(path.join(artifactDirectory, name), 'utf8'));
     if (artifact.version !== '0.2.2-rc.1' || !/^@deepseek-ai\/dsh-[a-z-]+$/.test(artifact.packageName)) throw new Error('Unsupported patch package/version');
     if (!Array.isArray(artifact.replacements) || artifact.replacements.length === 0 || !/^[0-9a-f]{64}$/.test(artifact.baseSha256) || !/^[0-9a-f]{64}$/.test(artifact.resultSha256)) throw new Error('Invalid patch manifest');
@@ -44,21 +48,82 @@ export function planPatches(dshRoot, mode = 'check', artifactDirectory = path.jo
     if (pkg.name !== artifact.packageName || pkg.version !== artifact.version) throw new Error('Installed native package version mismatch');
     const source = fs.readFileSync(file, 'utf8');
     const hash = sha256(source);
-    if (artifact.variants !== undefined) {
-      if (!Array.isArray(artifact.variants) || artifact.variants.some(variant => !/^[0-9a-f]{64}$/.test(variant.baseSha256) || !/^[0-9a-f]{64}$/.test(variant.resultSha256))) throw new Error('Invalid patch variants');
-      const candidates = [artifact, ...artifact.variants];
-      const matched = candidates.filter(variant => hash === variant.baseSha256 || hash === variant.resultSha256);
-      if (matched.length > 1) throw new Error('Ambiguous patch variant');
-      if (matched.length === 1) artifact = { ...artifact, baseSha256: matched[0].baseSha256, resultSha256: matched[0].resultSha256 };
+    const primary = artifact;
+    if (artifact.variants !== undefined && (!Array.isArray(artifact.variants) || artifact.variants.some(variant => !/^[0-9a-f]{64}$/.test(variant.baseSha256) || !/^[0-9a-f]{64}$/.test(variant.resultSha256) || (variant.replacements !== undefined && !Array.isArray(variant.replacements))))) throw new Error('Invalid patch variants');
+    if (primary.current !== undefined && typeof primary.current !== 'boolean' || primary.variants?.some(variant => variant.current !== undefined && typeof variant.current !== 'boolean')) throw new Error('Invalid current patch marker');
+    if (primary.requiresCurrent !== undefined && typeof primary.requiresCurrent !== 'boolean') throw new Error('Invalid required-current patch marker');
+    // current belongs to a revision, not the shared package metadata. Do not
+    // inherit primary.current onto legacy revisions when merging their fields.
+    const candidates = [primary, ...(primary.variants || []).map(variant => ({ ...primary, ...variant, current: variant.current === true }))];
+    const currentByBase = new Map();
+    for (const candidate of candidates) {
+      if (candidate.current !== true) continue;
+      if (currentByBase.has(candidate.baseSha256)) throw new Error('Ambiguous current patch variant');
+      currentByBase.set(candidate.baseSha256, candidate);
     }
+    // A shared pristine base is intentional for legacy revisions. Prefer current
+    // output, but never guess between two different recognized patched sources.
+    const patchedMatches = candidates.filter(candidate => hash === candidate.resultSha256);
+    if (patchedMatches.length > 1) throw new Error('Ambiguous patch variant');
+    artifact = patchedMatches[0] || candidates.find(candidate => hash === candidate.baseSha256) || primary;
     const state = hash === artifact.baseSha256 ? 'pristine' : hash === artifact.resultSha256 ? 'patched' : 'modified';
     if (state === 'modified') throw new Error(`Refusing unrecognized content: ${artifact.target}`);
-    // A no-op still verifies both directions to detect a broken manifest.
-    const reverse = state === 'patched';
-    const transformed = transformSource(source, artifact, reverse);
-    const result = (mode === 'apply' && state === 'pristine') || (mode === 'revert' && state === 'patched') ? transformed : source;
-    return { name, artifact, file, source, result, state, mode: fs.statSync(file).mode & 0o777 };
+    const original = state === 'patched' ? transformSource(source, artifact, true) : source;
+    // Verify the observed revision bidirectionally, including check/no-op plans.
+    const observedPatched = transformSource(original, artifact);
+    if (state === 'patched' && observedPatched !== source) throw new Error('Patch roundtrip mismatch');
+    const applySupported = primary.requiresCurrent !== true || currentByBase.has(artifact.baseSha256);
+    // A recognized old revision can still be checked/restored. It cannot be
+    // silently left behind while dependent UI/schema files upgrade around it.
+    if (mode === 'apply' && !applySupported) throw new Error('No verified current patch for this native build; no files written');
+    const targetArtifact = currentByBase.get(artifact.baseSha256) ?? (artifact.baseSha256 === primary.baseSha256 ? primary : artifact);
+    const latest = transformSource(original, targetArtifact);
+    const updateAvailable = state === 'patched' && sha256(latest) !== hash;
+    const result = mode === 'apply' ? latest : mode === 'revert' ? original : source;
+    return { name, artifact, file, source, result, state, updateAvailable, applySupported, observedSha256: hash, baseSha256: artifact.baseSha256, targetSha256: targetArtifact.resultSha256, mode: fs.statSync(file).mode & 0o777 };
+  });
+}
+
+
+/** Diagnose each program independently, without weakening the all-or-nothing planner.
+ * Output is a closed schema: program hashes/versions only, never paths or errors. */
+export function inspectPatches(dshRoot, artifactDirectory = path.join(pluginRoot, 'native')) {
+  const pkg = JSON.parse(fs.readFileSync(path.join(pluginRoot, 'package.json'), 'utf8'));
+  let root, hostVersion = null;
+  try {
+    root = fs.realpathSync(dshRoot);
+    const inner = path.join(root, 'node_modules/@deepseek-ai/dsh/package.json');
+    const host = JSON.parse(fs.readFileSync(fs.existsSync(inner) ? inner : path.join(root, 'package.json'), 'utf8'));
+    if (host.name === '@deepseek-ai/dsh') hostVersion = host.version;
+  } catch { /* Do not expose filesystem or parser error messages. */ }
+  const files = ARTIFACTS.map(id => {
+    const item = { id, state: 'conflict', code: 'target_unavailable', installedVersion: null, observedSha256: null, baseSha256: null, targetSha256: null };
+    if (!root) return item;
+    // Collect only metadata from the exact manifest-owned, regular program path.
+    try {
+      const manifest = JSON.parse(fs.readFileSync(path.join(artifactDirectory, id), 'utf8'));
+      const prefix = `node_modules/${manifest.packageName}/`;
+      if (!/^@deepseek-ai\/dsh-[a-z-]+$/.test(manifest.packageName) || typeof manifest.target !== 'string' || !manifest.target.startsWith(prefix) || manifest.target.includes('..') || manifest.target.includes('\\')) throw new Error();
+      const file = path.resolve(root, manifest.target);
+      if (!inside(root, file) || fs.realpathSync(file) !== file || !fs.statSync(file).isFile()) throw new Error();
+      const installed = JSON.parse(fs.readFileSync(path.join(root, 'node_modules', manifest.packageName, 'package.json'), 'utf8'));
+      if (installed.name === manifest.packageName) item.installedVersion = installed.version;
+      item.observedSha256 = sha256(fs.readFileSync(file));
+    } catch { /* Safe incomplete metadata; planner still refuses unknown targets. */ }
+    try {
+      const [plan] = planPatchFiles(root, 'check', artifactDirectory, [id]);
+      Object.assign(item, { state: plan.state, code: !plan.applySupported ? 'unsupported_patch_build' : plan.updateAvailable ? 'update_available' : plan.state === 'pristine' ? 'not_applied' : 'ready',
+        baseSha256: plan.baseSha256, targetSha256: plan.targetSha256 });
+    } catch (error) {
+      const message = error?.message ?? '';
+      item.code = message === 'This patch supports only @deepseek-ai/dsh 0.2.2-rc.1' ? 'host_version'
+        : message === 'Installed native package version mismatch' ? 'package_version'
+        : message.startsWith('Refusing unrecognized content: ') ? 'unrecognized_content'
+        : error?.code === 'ENOENT' || error?.code === 'EACCES' || message === 'Unexpected target path or duplicate patch' ? 'target_unavailable' : 'patch_manifest';
+    }
+    return item;
   });
+  return compatibilitySnapshot({ schema: 1, pluginVersion: pkg.version, hostVersion, supportedDsh: pkg.engines.dsh, files });
 }
 
 function stageReplacement(file, content, mode) {
@@ -133,7 +198,7 @@ function main(args) {
   if (args.some(arg => !allowed.has(arg))) throw new Error('Unknown argument');
   const mode = (modes[0] ?? '--check').slice(2);
   const plans = planPatches(args[i + 1], mode);
-  for (const plan of plans) console.log(`${plan.artifact.target}: ${plan.state}`);
+  for (const plan of plans) console.log(`${plan.artifact.target}: ${plan.state}${plan.applySupported ? plan.updateAvailable ? ' (update available)' : '' : ' (recognized legacy build; no verified upgrade, apply disabled)'}`);
   if (mode !== 'check') console.log(`${applyPlan(plans)} native files changed. Restart the existing DSH service and refresh its page; the live process is not reloaded by this script.`);
 }
 if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {

package/src/auto-patch.js

@@ -4,6 +4,7 @@ import os from 'node:os';
 import { createRequire } from 'node:module';
 import { fileURLToPath } from 'node:url';
 import { planPatches, applyPlan, sha256 } from '../scripts/native-patches.mjs';
+import { restorationPending } from './maintenance.js';
 
 export function findDshRoot(entry = process.argv[1]) {
   if (!entry) throw new Error('无法确定 DSH 进程入口。');
@@ -14,9 +15,11 @@ export function findDshRoot(entry = process.argv[1]) {
   while (true) {
     const candidate = path.join(dir, 'node_modules/@deepseek-ai/dsh-llm-pi-ai/package.json');
     if (fs.existsSync(candidate) && fs.realpathSync(candidate) === resolved) {
-      // Full patch planning validates the DSH package/version and every target.
-      planPatches(dir, 'check');
-      return dir;
+      // Discovery must survive unknown program hashes so maintenance can explain
+      // the conflict. The planner still validates every target before any write.
+      const inner = path.join(dir, 'node_modules/@deepseek-ai/dsh/package.json');
+      const host = JSON.parse(fs.readFileSync(fs.existsSync(inner) ? inner : path.join(dir, 'package.json'), 'utf8'));
+      if (host.name === '@deepseek-ai/dsh') return dir;
     }
     const parent = path.dirname(dir);
     if (parent === dir) break;
@@ -26,6 +29,7 @@ export function findDshRoot(entry = process.argv[1]) {
 }
 
 export function autoPatch(root, home = process.env.DSH_HOME || path.join(os.homedir(), '.dsh')) {
+  if (restorationPending(root, home)) return { state: 'restore-pending', changed: 0, runtimeVerified: false };
   const plans = planPatches(root, 'apply');
   const pending = plans.some(plan => plan.source !== plan.result);
   if (!pending) return { state: 'disk-ready', changed: 0, runtimeVerified: false };
@@ -35,6 +39,7 @@ export function autoPatch(root, home = process.env.DSH_HOME || path.join(os.home
   try { fs.mkdirSync(lock, { mode: 0o700 }); }
   catch { throw new Error('补丁安装已被锁定；可能有另一进程正在安装。确认没有安装任务后再处理锁目录，勿并发重试。'); }
   try {
+    if (restorationPending(root, home)) return { state: 'restore-pending', changed: 0, runtimeVerified: false };
     const changed = applyPlan(planPatches(root, 'apply'), path.join(storage, 'backups'));
     if (!planPatches(root, 'check').every(plan => plan.state === 'patched')) throw new Error('自动补丁复查失败。');
     return { state: changed ? 'restart-required' : 'disk-ready', changed, runtimeVerified: false };

package/src/client.js

@@ -5,6 +5,10 @@ const inject = ['slots', 'modelDirectories', 'sessions', 'locale', 'remote', 're
 export function apply(ctx) {
   installModelSelectStyles();
   installModelGroupsStyles();
+  installSettingsPageStyles();
+  ctx.slots.inject('settings.section', () => ctx.slots.register({
+    name: 'settings.section', id: 'dsh-model-groups', order: 35, label: '模型分组',
+  }, ModelGroupsSettingsPage));
   const providersForm = ctx.configForms?.get('llm-pi-ai');
   let statusDisposed = false;
   let statusNotice;
@@ -14,11 +18,11 @@ export function apply(ctx) {
       if (statusDisposed || (!status.restartRequired && !status.failed)) return;
       statusNotice = document.createElement('div');
       statusNotice.dataset.plugin = 'dsh-model-groups';
-      statusNotice.setAttribute('role', 'alertdialog');
-      statusNotice.style.cssText = 'position:fixed;inset:0;z-index:2147483647;background:var(--dsw-alias-bg-base,#fff);color:var(--dsw-alias-label-primary,#222);display:grid;place-items:center;padding:24px;box-sizing:border-box;';
+      statusNotice.setAttribute('role', 'status');
+      statusNotice.style.cssText = 'position:fixed;bottom:16px;right:16px;max-width:min(360px,80vw);z-index:1000;background:var(--dsw-alias-bg-base,#fff);color:var(--dsw-alias-label-primary,#222);padding:12px;border:1px solid currentColor;border-radius:8px;box-sizing:border-box;pointer-events:none;';
       statusNotice.textContent = status.failed
-        ? '多密钥自动补丁未完成。请回到 App 对话查看引擎日志或运行安装诊断，勿强制覆盖。当前网页暂不可用于编辑模型配置。'
-        : '多密钥补丁已自动安装。请先保存其他页面的草稿，再到 App 重启原引擎并刷新此网页。当前网页暂停操作，避免新旧模块混用。';
+        ? '多密钥自动补丁未完成。请回到 App 对话查看引擎日志或运行安装诊断，勿强制覆盖。请暂勿编辑模型配置；可到「设置 → 模型分组」检查并安全恢复。'
+        : '多密钥补丁已自动安装。请先保存其他页面的草稿，再到 App 重启原引擎并刷新此网页。请暂勿编辑模型配置，避免新旧模块混用；维护入口仍可使用。';
       document.body.appendChild(statusNotice);
     }).catch(() => {});
   ctx.on('dispose', () => { statusDisposed = true; statusNotice?.remove(); });

package/src/compatibility.js

@@ -0,0 +1,22 @@
+// Public program metadata only. Never include paths, source text, configuration,
+// credentials, environment variables, or arbitrary exception messages.
+export const PATCH_IDS = ['pi-ai.patch.json', 'settings-models.patch.json', 'llm-typert.host.patch.json', 'llm-typert.remote-client.patch.json', 'api-remotes.patch.json'];
+export const COMPATIBILITY_CODES = ['ready', 'update_available', 'not_applied', 'unsupported_patch_build', 'host_version', 'package_version', 'unrecognized_content', 'target_unavailable', 'patch_manifest'];
+export const publicVersion = value => typeof value === 'string' && /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]{1,40})?$/.test(value) ? value : null;
+export const publicHash = value => typeof value === 'string' && /^[0-9a-f]{64}$/.test(value) ? value : null;
+export function compatibilitySnapshot(value) {
+  if (!value || value.schema !== 1 || !Array.isArray(value.files) || value.files.length > PATCH_IDS.length) return null;
+  return { schema: 1, pluginVersion: publicVersion(value.pluginVersion), hostVersion: publicVersion(value.hostVersion), supportedDsh: publicVersion(value.supportedDsh),
+    files: value.files.filter(item => item && PATCH_IDS.includes(item.id)).map(item => ({ id: item.id,
+      state: ['patched', 'pristine', 'conflict'].includes(item.state) ? item.state : 'conflict',
+      code: COMPATIBILITY_CODES.includes(item.code) ? item.code : 'patch_manifest',
+      installedVersion: publicVersion(item.installedVersion), observedSha256: publicHash(item.observedSha256),
+      baseSha256: publicHash(item.baseSha256), targetSha256: publicHash(item.targetSha256) })) };
+}
+export function compatibilityGuidance(snapshot) {
+  const codes = snapshot?.files.map(item => item.code) ?? [];
+  if (codes.includes('host_version') || codes.includes('package_version')) return '宿主程序版本不在本版支持范围。先核对插件与 DSH 的兼容版本；不要强行降级、覆盖文件或删除配置。';
+  if (codes.includes('unrecognized_content') || codes.includes('target_unavailable') || codes.includes('patch_manifest') || codes.includes('unsupported_patch_build')) return '已停止整批更新，未覆盖未知文件。先在原 profile 更新最新版插件，重启原引擎并刷新网页后复查；仍不支持时，复制脱敏诊断反馈。不要先卸载、还原补丁或删除配置；如需进一步适配，只提供被标记的程序文件，不提供密钥、配置或聊天记录。';
+  if (codes.includes('update_available')) return '已识别历史补丁，可直接更新到最新版，不需要逐版安装或先关闭多密钥。请保存草稿、停止任务，确认更新后重启原引擎并刷新网页。';
+  return '';
+}

package/src/index.js

@@ -1,29 +1,33 @@
-import { findDshRoot, autoPatch } from './auto-patch.js';
+import os from 'node:os';
+import path from 'node:path';
+import { findDshRoot } from './auto-patch.js';
+import { createMaintenance, createUnavailableMaintenance, maintenanceHandler } from './maintenance.js';
+import { createHostInspection } from './maintenance-host.js';
 
-// Explicit patch distribution: installation/loading validates and updates the
-// known DSH disk files. It never forces module reload, restart or config changes.
+// Neither disposal nor ordinary package removal restores patches: HMR and updates
+// also dispose plugins. Only the explicitly confirmed maintenance transaction does.
 export function apply(ctx) {
   const key = Symbol.for('dsh-model-groups.patch-state');
   const state = globalThis[key] ??= { restartRequired: false, error: null };
-  ctx.inject(['webserver'], child => {
-    child.effect(() => child.webserver.register({
-      kind: 'exact', path: '/dsh-model-groups/status',
-      handler(req, res) {
-        res.writeHead(200, { 'content-type': 'application/json', 'cache-control': 'no-store' });
-        res.end(JSON.stringify({ restartRequired: state.restartRequired, failed: state.error !== null }));
-      },
-    }));
-  });
+  const home = process.env.DSH_HOME || path.join(os.homedir(), '.dsh');
+  let root;
   try {
-    const result = autoPatch(findDshRoot());
-    if (result.state === 'restart-required') {
-      state.restartRequired = true;
-      ctx.logger.warn(`多密钥兼容补丁已自动安装（${result.changed} 项）。请保存草稿，在 App 重启原引擎并刷新原网页；当前进程尚未验证生效。`);
-    } else {
-      ctx.logger.info('多密钥磁盘补丁已就绪。若本次进程尚未在打补丁后重启，请重启原引擎并刷新网页。');
-    }
-  } catch (error) {
-    state.error = error.message;
-    ctx.logger.error(`多密钥自动安装未完成：${error.message}。未强制覆盖未知文件，请运行安装诊断；不要把模型分组出现视为多密钥已就绪。`);
+    root = findDshRoot();
+    state.error = null;
+    state.restartRequired = false;
+    ctx.logger.info('多密钥补丁由设置页手动管理；插件启动不会修改宿主文件。');
+  } catch {
+    state.error = 'patch-validation-failed';
+    ctx.logger.error('多密钥安装校验失败，未强制覆盖未知文件。请查看维护页。');
   }
+  ctx.inject(['webServer', 'connection', 'pluginManager'], child => {
+    const controller = root ? createMaintenance({ root, home, inspect: createHostInspection(child, root, home), manager: child.pluginManager }) : createUnavailableMaintenance();
+    child.effect(() => child.webServer.register({ kind: 'exact', path: '/dsh-model-groups/maintenance', handler: maintenanceHandler(controller, child.connection) }));
+    child.effect(() => child.webServer.register({ kind: 'exact', path: '/dsh-model-groups/status', handler(req, res) {
+      const admission = child.connection.admit(req);
+      if (!admission?.peer || admission.peer.principal?.kind !== 'owner') { res.writeHead(admission?.rejection || 403); res.end(); return; }
+      res.writeHead(200, { 'content-type': 'application/json', 'cache-control': 'no-store' });
+      res.end(JSON.stringify({ restartRequired: state.restartRequired, failed: state.error !== null }));
+    } }));
+  });
 }

package/src/maintenance-fallback.js

@@ -0,0 +1,160 @@
+import { randomBytes } from 'node:crypto';
+
+const alias = value => typeof value === 'string' && value.startsWith('@dsh-key/');
+const validId = value => typeof value === 'string' && value.length > 0 && value.length <= 512;
+const selection = value => {
+  if (!value || !validId(value.provider) || !validId(value.model) ||
+      (value.reasoningEffort !== undefined && !validId(value.reasoningEffort))) throw new Error('INVALID_SELECTION');
+  return { provider: value.provider, model: value.model,
+    ...(value.reasoningEffort === undefined ? {} : { reasoningEffort: value.reasoningEffort }) };
+};
+const equal = (a, b) => !!a && !!b && a.provider === b.provider && a.model === b.model && a.reasoningEffort === b.reasoningEffort;
+const fail = code => Object.assign(new Error(code), { code });
+const clone = value => JSON.parse(JSON.stringify(value));
+const unsupported = () => [
+  { code: 'COLD_SESSIONS_UNSUPPORTED', message: 'Cold sessions cannot be safely changed by this adapter.' },
+  { code: 'HISTORICAL_REFERENCES_UNSUPPORTED', message: 'Historical request headers and replay/fork references are not rewritten.' },
+  { code: 'OTHER_REFERENCES_UNSUPPORTED', message: 'Agent options, subagent descriptors, presets, other profiles and processes are not migrated.' },
+];
+
+/** Verified installed service spellings. Descriptive only: this module imports no host code. */
+export const FALLBACK_HOST_APIS = Object.freeze({
+  live: 'ctx.agents.get(sessionId); agent.model.current(); agent.model.select(selection)',
+  durability: 'await ctx.sessions.flush(agent.session); await ctx.sessionQuery.readSession(sessionId)',
+  defaults: 'ctx.agentDefaultModel.currentSelection(); ctx.agentDefaultModel.remembersLastSelection(); await ctx.agentDefaultModel.saveSelection(next, { ifCurrent: previous })',
+  catalog: 'session.modelCatalog() uses ctx.llm.listProviders/listModels/resolveModelInfo; NOT called here because discovery may perform network I/O',
+  limitation: 'No host session-selection CAS or cross-service transaction exists; synchronous local check+select is not a process-wide maintenance lock.',
+});
+
+/**
+ * UNWIRED, local-only injected adapter. No discovery, inference, credential access, file
+ * writes, cold-agent creation, automatic default update or native patch operations.
+ *
+ * `catalog` is a detached ALREADY OBTAINED ordinary catalog: { groups: [{ id, models:
+ * [{ id, reasoning?: { efforts: [{id}] } }] }] }. `ordinaryProviders` is an explicit
+ * allowlist verified by the future caller from local configuration: the catalog alone
+ * cannot establish that a provider has no multi-key routing. Never derive it by merely
+ * excluding alias IDs. No provider discovery or settings/secret reads occur here.
+ *
+ * Inject formal services `agents`, `sessions`, `defaultModel`, and optional
+ * `readPersistedSelection(id)` (read-only; return the effective current selection).
+ * The future reader must fold model/selection and request/header events, not old
+ * request headers alone. `sessions.flush` must return true (a durability listener).
+ *
+ * Session CAS is a synchronous identity + full selection + seq + idle check immediately
+ * followed by the synchronous AgentModel.select. No await is permitted between them.
+ * This is same-process CAS only; it does NOT lock out a later prompt or other process.
+ * Defaults use the host's lock-held ifCurrent CAS and reject fixed-default mode.
+ * Each ticket changes exactly ONE explicitly chosen target. Partial failures are
+ * reported, never rolled back or represented as successful migration/removal safety.
+ */
+export function createFallbackSelection({ catalog, ordinaryProviders = [], agents, sessions,
+  defaultModel, readPersistedSelection, now = Date.now, token = () => randomBytes(24).toString('hex'), ttlMs = 120000 } = {}) {
+  const allowed = new Set(ordinaryProviders);
+  const choices = [];
+  for (const group of catalog?.groups ?? []) {
+    if (!validId(group.id) || alias(group.id) || !allowed.has(group.id)) continue;
+    for (const model of group.models ?? []) {
+      if (!validId(model.id) || alias(model.id)) continue;
+      const efforts = (model.reasoning?.efforts ?? []).map(effort => effort.id).filter(validId);
+      if (choices.some(item => item.provider === group.id && item.model === model.id)) throw fail('AMBIGUOUS_CATALOG');
+      choices.push({ provider: group.id, model: model.id, efforts });
+    }
+  }
+  const tickets = new Map();
+  let busy = false;
+  const choice = input => {
+    const next = selection(input);
+    if (Object.keys(input).some(key => !['provider', 'model', 'reasoningEffort'].includes(key))) throw fail('INVALID_SELECTION');
+    const item = choices.find(item => item.provider === next.provider && item.model === next.model);
+    if (!item || alias(next.provider) || alias(next.model) ||
+        (next.reasoningEffort !== undefined && !item.efforts.includes(next.reasoningEffort))) throw fail('NOT_ORDINARY_CATALOG_SELECTION');
+    return next;
+  };
+  const readLive = id => {
+    const agent = agents?.get?.(id);
+    if (!agent || agent.id !== id || !agent.session || typeof agent.model?.current !== 'function' || typeof agent.model?.select !== 'function') throw fail('LIVE_SESSION_UNSUPPORTED');
+    if (agent.status !== 'idle' || (agent.phase && agent.phase.kind !== 'idle')) throw fail('SESSION_BUSY');
+    if (!Number.isSafeInteger(agent.session.seq) || agent.session.seq < 0) throw fail('SESSION_REVISION_UNAVAILABLE');
+    return { agent, session: agent.session, seq: agent.session.seq, current: selection(agent.model.current()) };
+  };
+  const readDefault = () => {
+    if (typeof defaultModel?.currentSelection !== 'function' || typeof defaultModel?.remembersLastSelection !== 'function' || typeof defaultModel?.saveSelection !== 'function') throw fail('DEFAULT_API_UNAVAILABLE');
+    if (defaultModel.remembersLastSelection() !== true) throw fail('FIXED_DEFAULT_UNSUPPORTED');
+    return selection(defaultModel.currentSelection());
+  };
+  function preview({ target, next } = {}) {
+    const blockers = [];
+    let selected, previous, observation, cleanTarget;
+    try {
+      selected = choice(next);
+      if (target?.kind === 'session' && validId(target.sessionId) && Object.keys(target).every(key => ['kind', 'sessionId'].includes(key))) {
+        cleanTarget = { kind: 'session', sessionId: target.sessionId };
+        if (typeof sessions?.flush !== 'function' || typeof readPersistedSelection !== 'function') throw fail('DURABILITY_VERIFICATION_UNAVAILABLE');
+        observation = readLive(target.sessionId);
+        previous = observation.current;
+      } else if (target?.kind === 'default' && Object.keys(target).length === 1) {
+        cleanTarget = { kind: 'default' };
+        previous = readDefault();
+      } else throw fail('TARGET_UNSUPPORTED');
+      if (!alias(previous.model) && !alias(previous.provider)) throw fail('NOT_ALIAS_SELECTION');
+    } catch (error) { blockers.push({ code: error.code || 'INVALID_SELECTION' }); }
+    let ticket = null;
+    if (!blockers.length) {
+      // Bound memory and invalidate expired confirmations without exposing observations.
+      for (const [key, value] of tickets) if (value.expires <= now()) tickets.delete(key);
+      if (tickets.size >= 128) tickets.delete(tickets.keys().next().value);
+      ticket = token();
+      if (typeof ticket !== 'string' || !ticket || tickets.has(ticket)) throw fail('TOKEN_UNAVAILABLE');
+      tickets.set(ticket, { target: cleanTarget, next: selected, previous, observation, expires: now() + ttlMs });
+    }
+    return { canApply: blockers.length === 0 && !busy, token: ticket,
+      target: cleanTarget ? { ...cleanTarget } : null, previous: previous ? { ...previous } : null, next: selected ? { ...selected } : null,
+      blockers, removalBlockers: unsupported(), safeToRemovePatches: false,
+      scope: 'one-current-selection-only', catalogFreshness: 'caller-supplied-snapshot' };
+  }
+  async function apply(input) {
+    if (busy) throw fail('BUSY');
+    const ticket = tickets.get(input?.token);
+    if (!ticket || ticket.expires <= now() || input?.confirmation !== 'CONFIRM FALLBACK SELECTION' ||
+        Object.keys(input).some(key => !['token', 'confirmation'].includes(key))) throw fail('CONFIRMATION_REQUIRED');
+    tickets.delete(input.token);
+    busy = true;
+    let changed = false;
+    try {
+      if (ticket.target.kind === 'session') {
+        const live = readLive(ticket.target.sessionId);
+        const old = ticket.observation;
+        if (live.agent !== old.agent || live.session !== old.session || live.seq !== old.seq || !equal(live.current, ticket.previous)) throw fail('STATE_CHANGED');
+        // The only live write: synchronous check+select with no intervening await.
+        changed = true; // A throwing host operation may already have appended.
+        const result = live.agent.model.select({ ...ticket.next });
+        if (result && typeof result.then === 'function') throw fail('ASYNC_SELECTION_UNSUPPORTED');
+        if (await sessions.flush(live.session) !== true) throw fail('DURABILITY_UNCONFIRMED');
+        const persisted = selection(await readPersistedSelection(ticket.target.sessionId));
+        const after = readLive(ticket.target.sessionId);
+        if (after.agent !== live.agent || after.session !== live.session || !equal(after.current, ticket.next) || !equal(persisted, ticket.next)) throw fail('POSTCHECK_FAILED');
+      } else {
+        if (!equal(readDefault(), ticket.previous)) throw fail('STATE_CHANGED');
+        const receipt = await defaultModel.saveSelection({ ...ticket.next }, { ifCurrent: { ...ticket.previous } });
+        if (receipt?.status !== 'saved') throw fail('DEFAULT_CAS_REJECTED');
+        changed = true;
+        if (!equal(readDefault(), ticket.next)) throw fail('POSTCHECK_FAILED');
+      }
+      return { status: 'applied', target: clone(ticket.target), selected: { ...ticket.next },
+        safeToRemovePatches: false, removalBlockers: unsupported() };
+    } catch (error) {
+      // Host errors can include secrets: do not propagate messages or causes.
+      return { status: changed ? 'changed-unverified' : 'not-applied', code: knownCode(error),
+        mayHaveChanged: changed || ticket.target.kind === 'default', safeToRemovePatches: false,
+        removalBlockers: unsupported() };
+    } finally { busy = false; }
+  }
+  return { preview, apply, catalog: () => choices.map(({ provider, model, efforts }) => ({ provider, model, efforts: [...efforts] })) };
+}
+
+function knownCode(error) {
+  return ['LIVE_SESSION_UNSUPPORTED', 'SESSION_BUSY', 'SESSION_REVISION_UNAVAILABLE', 'STATE_CHANGED',
+    'FIXED_DEFAULT_UNSUPPORTED', 'DEFAULT_API_UNAVAILABLE', 'DEFAULT_CAS_REJECTED', 'ASYNC_SELECTION_UNSUPPORTED',
+    'DURABILITY_UNCONFIRMED', 'POSTCHECK_FAILED'].includes(error?.code) ? error.code : 'OPERATION_FAILED';
+}