dsh-my-guardian 0.4.5 → 0.4.6

package/CHANGELOG.md

@@ -6,6 +6,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [0.4.6] - 2026-10-17
+
+### 变更
+
+- fix(i18n): 插件文案优先跟随宿主 html lang
+- fix(compat): 适配 DSH 0.2.1 移除 webRuntime 服务
+
 ## [0.4.5] - 2026-10-17
 
 ### 变更

package/lib/api.js

@@ -4,7 +4,7 @@
  * appears), trust fence, method dispatch and the panel snapshot.
  */
 import { readStagedFile, writeStagedFile } from './state.js';
-import { isTrustedApiRequest, readJsonBody, writeJson } from 'dsh-shared';
+import { createTrustFence, readJsonBody, writeJson } from 'dsh-shared';
 /** Bind the API entry points to one guardian instance's shared state. */
 export function createApi(ctx, shared) {
     return {
@@ -22,13 +22,15 @@ function ensureApi(ctx, shared) {
     const webServer = ctx.get('webServer');
     if (webServer === undefined)
         return;
-    const webRuntime = ctx.get('webRuntime');
+    // 信任源迁移（DSH 0.2.1 移除 webRuntime）：每次请求现读
+    // webStartup.trustedHosts + webServer.host，旧宿主回退 webRuntime（dsh-shared 内部兼容）。
+    const fence = createTrustFence(ctx);
     shared.apiRegistered = true;
     try {
         ctx.effect(() => webServer.register({
             kind: 'prefix',
             path: '/guardian/api',
-            handler: (request, response) => handleApiRequest(ctx, shared, webRuntime, request, response),
+            handler: (request, response) => handleApiRequest(ctx, shared, fence, request, response),
         }), 'dsh-my-guardian: /guardian/api routes');
     }
     catch (error) {
@@ -38,8 +40,8 @@ function ensureApi(ctx, shared) {
     }
 }
 /** Unified route handler: fence → method dispatch → 404/error fallback. */
-async function handleApiRequest(ctx, shared, webRuntime, request, response) {
-    if (!isTrustedApiRequest(request, webRuntime?.trustedHosts ?? [])) {
+async function handleApiRequest(ctx, shared, fence, request, response) {
+    if (!fence(request)) {
         writeJson(response, 403, { ok: false, error: { code: 'forbidden', message: 'forbidden' } });
         return;
     }

package/lib/client.js

@@ -237,8 +237,14 @@ const STYLES = `
 
     'use strict'
 // ── i18n ──────────────────────────────────────────────────────────────
-/** 当前界面语言是否为中文（navigator 不可用时按英文回退）。 */
+/** 当前界面语言是否为中文：宿主 <html lang> 优先，其次浏览器语言，再其次英文。 */
 function isZh() {
+  try {
+    const host = (document.documentElement.lang || '').toLowerCase()
+    if (host !== '') return host.startsWith('zh')
+  } catch {
+    /* 非浏览器环境（node 渲染）无 document */
+  }
   try {
     return (navigator.language || 'en').toLowerCase().startsWith('zh')
   } catch {

package/lib/index.js

@@ -22,7 +22,7 @@
  * way to recover an environment a new plugin broke.
  *
  * Self-protection (watchdog): every async path is caught; only the loader
- * service is a hard dependency; webServer/webRuntime are optional (a CLI
+ * service is a hard dependency; webServer is optional (a CLI
  * profile without a web surface still gets staged loading, just no HTTP
  * panel). The guardian never rewrites cordis.patch.yml; its own state lives
  * at $DSH_HOME/guardian/state.json (atomic tmp+rename).

package/lib/parts/util.js

@@ -1,7 +1,13 @@
 'use strict'
 // ── i18n ──────────────────────────────────────────────────────────────
-/** 当前界面语言是否为中文（navigator 不可用时按英文回退）。 */
+/** 当前界面语言是否为中文：宿主 <html lang> 优先，其次浏览器语言，再其次英文。 */
 function isZh() {
+  try {
+    const host = (document.documentElement.lang || '').toLowerCase()
+    if (host !== '') return host.startsWith('zh')
+  } catch {
+    /* 非浏览器环境（node 渲染）无 document */
+  }
   try {
     return (navigator.language || 'en').toLowerCase().startsWith('zh')
   } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-my-guardian",
-  "version": "0.4.5",
+  "version": "0.4.6",
   "description": "DSH 插件治理守护：新装/更新插件先进候选区，启动后热挂载——成功转正、失败自动禁用、连续失败冻结，一键安全模式，侧边栏诊断面板。DSH web plugin: staged plugin loading with auto-disable on failure, freeze, safe mode and a sidebar panel.",
   "type": "module",
   "main": "lib/index.js",