dsh-plugin 2.0.5 → 2.1.0

package/client/client.js

@@ -110,6 +110,8 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			proxyCheckRevocation: "证书吊销检查受阻（Windows Schannel 取不到 CRL/OCSP），握手被中断；属本机 TLS 环境问题，非代理地址不通",
 			settingsMirror: "npm 镜像源",
 			settingsMirrorDesc: "默认跟随本机 npm 配置；官方源慢可换国内镜像",
+			settingsRegistryFallback: "连不上时自动换源",
+			settingsRegistryFallbackDesc: "公共源超时或被拦截时，自动改用下一个镜像重试（最多 3 个）；自定义/内网源不会切换，避免私有包名外泄",
 			mirrorNone: "未配置（跟随本机 npm 配置）",
 			mirrorOfficial: "官方源 registry.npmjs.org",
 			mirrorNpmmirror: "阿里云 npmmirror",
@@ -343,6 +345,8 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			failReason_pluginMissingDep: "插件声明依赖的包在官方 npm 源上不存在（已删除或从未发布）。",
 			failKind_registryVersionStale: "该版本在所用源上不存在",
 			failReason_registryVersionStale: "实际安装用的源还没同步到这个版本，或版本号写错。",
+			failKind_registryAuth: "npm 源拒绝了访问",
+			failReason_registryAuth: "registry 返回 401/403：这个源需要登录凭据，或当前网络不被允许。",
 			failKind_pnpmLinkedDirMissing: "profile 里有失效的本地依赖",
 			failReason_pnpmLinkedDirMissing: "有一条指向本机不存在目录的 link/file 依赖，pnpm 每次解析都卡住。",
 			failKind_fileLocked: "文件被其他程序占用",
@@ -370,6 +374,8 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			failKind_hub: "出现未知错误",
 			failReason_hub: "我们还没能识别这条报错，你可以一键反馈给我们。",
 			failRegistryVersionStaleHint: "安装器调用 pnpm 时报「找不到匹配的版本」（ERR_PNPM_NO_MATCHING_VERSION）：要装的这个版本在实际执行安装的 npm 源里查不到。常见原因是你设置的 npmRegistry 与本机 ~/.npmrc 用的不是同一个源——官方源刚发布、镜像还没同步上来（快则几分钟、慢则几小时），也可能只是版本号写错了。这不是插件本身的问题。可在插件市场设置里把 npmRegistry 改成与本机 ~/.npmrc 一致（或反过来），或那一次显式走官方源（https://registry.npmjs.org）、改用离线包后重试；若该版本刚发布不久，等镜像同步后重试即可。",
+			failRegistryAuthHint: "安装器访问 npm 源时被拒绝（HTTP 401/403）：这个源需要登录凭据，或不允许当前网络/IP 访问。如果你在用公司或私有源，请先配好认证（npm login，或在 ~/.npmrc 写入 //{host}/:_authToken=…）；如果不需要私有源，把 registry 换回官方源 https://registry.npmjs.org，或在插件市场设置里切换到公共镜像后重试。这不是插件本身的问题。",
+			failRegistryAuthHintNoHost: "安装器访问 npm 源时被拒绝（HTTP 401/403）：这个源需要登录凭据，或不允许当前网络/IP 访问。如果你在用公司或私有源，请先配好认证（npm login，或在 ~/.npmrc 写入 //<registry>/:_authToken=…）；如果不需要私有源，把 registry 换回官方源 https://registry.npmjs.org，或在插件市场设置里切换到公共镜像后重试。这不是插件本身的问题。",
 			failPnpmLinkedDirMissingHint: "安装器调用 pnpm 时报「要安装的目录不存在」（ERR_PNPM_LINKED_PKG_DIR_NOT_FOUND）：你的 profile 里留着一条指向本机不存在目录的本地依赖（link: / file: 形式，例如用 dsh plugin add <本地路径> 装过开发中的插件，之后那个目录被删除或移动了）。pnpm 每次解析 profile 依赖都会先卡在它上面，因此任何插件都装不进来。这不是插件本身的问题——请在 profile 目录（~/.dsh/profiles/<profile>）的 package.json 里删除该本地依赖条目（同时删掉对应的 pnpm-lock.yaml 条目或整个锁文件），或把该目录恢复回原路径后重试。",
 			failFileLockedHint: "安装过程中 pnpm 无法替换 profile 里的文件：有程序正占用着它（Windows 常见报错 os error 32「另一个程序正在使用此文件」）。通常是 DeepSeek Harness 自身或杀毒软件的实时扫描持有文件句柄。这不是插件本身的问题——请完全退出 DeepSeek Harness（Windows 可在任务管理器确认进程已结束，必要时临时关闭杀毒软件实时防护）后重试。",
 			failAccessDeniedHint: "安装过程中 pnpm 写入 profile 里的文件被系统拒绝访问（Windows 常见报错 os error 5「拒绝访问」，英文为 Access is denied；Node 下的 EPERM / EACCES 同理）。常见原因是该文件或目录正被其他进程占用、文件带只读属性、目录权限受限，或杀毒软件实时防护拦截了写入——这与「文件正被占用」（os error 32）同属本机文件系统问题，任何插件装进该目录都会一样失败，不是插件本身的问题。请完全退出 DeepSeek Harness（Windows 可在任务管理器确认进程已结束，必要时临时关闭杀毒软件实时防护）后重试；若仍然失败，请检查 profile 目录及其文件是否被设为只读，并以管理员身份重新运行。",
@@ -517,6 +523,8 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			proxyCheckRevocation: "Certificate revocation check blocked (Windows Schannel could not fetch CRL/OCSP), so the handshake was aborted — a local TLS issue, not a bad proxy address",
 			settingsMirror: "npm mirror",
 			settingsMirrorDesc: "Unset by default — follows local npm config; pick a domestic mirror if slow",
+			settingsRegistryFallback: "Switch mirrors on failure",
+			settingsRegistryFallbackDesc: "When a public registry times out or is blocked, retry with the next mirror (up to 3). Custom/intranet registries are never switched, so private package names do not leak.",
 			mirrorNone: "Unset (follow local npm config)",
 			mirrorOfficial: "Official registry.npmjs.org",
 			mirrorNpmmirror: "Alibaba npmmirror",
@@ -751,6 +759,8 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			failReason_pluginMissingDep: "A package the plugin depends on does not exist on the official npm registry.",
 			failKind_registryVersionStale: "this version is not available on the registry in use",
 			failReason_registryVersionStale: "The registry that actually performs the install has not synced this version yet, or the version is mistyped.",
+			failKind_registryAuth: "the npm registry rejected access",
+			failReason_registryAuth: "The registry returned 401/403: it needs credentials, or the current network is not allowed.",
 			failKind_pnpmLinkedDirMissing: "dangling local dependency in the profile",
 			failReason_pnpmLinkedDirMissing: "A link/file dependency points at a directory that no longer exists, so pnpm stalls on it.",
 			failKind_fileLocked: "a file is held by another program",
@@ -778,6 +788,8 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			failKind_hub: "unknown error",
 			failReason_hub: "We could not identify this error yet — you can report it to us in one click.",
 			failRegistryVersionStaleHint: "pnpm reported that no matching version was found (ERR_PNPM_NO_MATCHING_VERSION): the version being installed does not exist in the npm registry that actually performs the install. This usually means the npmRegistry configured in the hub differs from the source in your local ~/.npmrc — the official registry has published it but the mirror has not synced yet (it can take minutes to hours) — or the version number was simply mistyped. This is not a problem with the plugin itself. Align the hub's npmRegistry with your local ~/.npmrc (or the other way round), or explicitly use the official registry (https://registry.npmjs.org) for that one install, or use an offline package, then retry; if the version was published only recently, waiting for the mirror to sync is enough.",
+			failRegistryAuthHint: "The installer was denied access to the npm registry (HTTP 401/403): that registry requires credentials, or it does not allow the current network/IP. If you are using a company or private registry, configure authentication first (npm login, or write //{host}/:_authToken=… into ~/.npmrc). If you do not need a private registry, point the registry back to the official one (https://registry.npmjs.org), or switch to a public mirror in the hub settings, then retry. This is not a problem with the plugin itself.",
+			failRegistryAuthHintNoHost: "The installer was denied access to the npm registry (HTTP 401/403): that registry requires credentials, or it does not allow the current network/IP. If you are using a company or private registry, configure authentication first (npm login, or write //<registry>/:_authToken=… into ~/.npmrc). If you do not need a private registry, point the registry back to the official one (https://registry.npmjs.org), or switch to a public mirror in the hub settings, then retry. This is not a problem with the plugin itself.",
 			failPnpmLinkedDirMissingHint: "pnpm reported that a directory it needs to install from does not exist (ERR_PNPM_LINKED_PKG_DIR_NOT_FOUND): your profile keeps a local dependency (a link: / file: entry, e.g. from `dsh plugin add <local path>`) whose target directory has since been deleted or moved. pnpm hits it every time it resolves profile dependencies, so no plugin can be installed into that profile. This is not a problem with the plugin itself. Remove that local dependency from package.json inside the profile directory (~/.dsh/profiles/<profile>) — along with its entry in pnpm-lock.yaml, or the lockfile itself — or restore the directory to its original path, then retry.",
 			failFileLockedHint: "During install, pnpm could not replace a file inside the profile because another program is holding it (on Windows this shows as os error 32, \"the process cannot access the file because it is being used by another process\"). Usually DeepSeek Harness itself or a real-time antivirus scan holds the handle. This is not a problem with the plugin itself — fully quit DeepSeek Harness (on Windows, confirm in Task Manager that the process has ended, and temporarily disable real-time antivirus protection if needed), then retry.",
 			failAccessDeniedHint: "During install, Windows denied pnpm access to a file inside the profile (this shows as os error 5, \"Access is denied\"; on Node the equivalent codes are EPERM / EACCES). Typical causes: the file or directory is held by another process, the file is marked read-only, the directory permissions are restricted, or a real-time antivirus scan blocked the write. This is the same class of local file-system problem as a locked file (os error 32) — no plugin can be installed into that directory, so it is not a problem with the plugin itself. Fully quit DeepSeek Harness (on Windows, confirm in Task Manager that the process has ended, and temporarily disable real-time antivirus protection if needed), then retry. If it still fails, check whether the profile directory or its files are read-only and run as administrator.",
@@ -842,42 +854,42 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			css: css$11
 		});
 		var Header_module_css_default = {
-			"brandTitle": "qikqja_brandTitle",
-			"root": "qikqja_root",
-			"controls": "qikqja_controls",
-			"headerTitleRow": "qikqja_headerTitleRow",
-			"resultCount": "qikqja_resultCount",
-			"version": "qikqja_version",
-			"adBadge": "qikqja_adBadge",
+			"headerRight": "qikqja_headerRight",
 			"searchRow": "qikqja_searchRow",
-			"adArrow": "qikqja_adArrow",
+			"controls": "qikqja_controls",
+			"tagline": "qikqja_tagline",
+			"logoIcon": "qikqja_logoIcon",
+			"segBtn": "qikqja_segBtn",
+			"tabCount": "qikqja_tabCount",
 			"taglineLink": "qikqja_taglineLink",
-			"search": "qikqja_search",
+			"segGroup": "qikqja_segGroup",
+			"version": "qikqja_version",
+			"adText": "qikqja_adText",
+			"header": "qikqja_header",
+			"tabs": "qikqja_tabs",
 			"tab": "qikqja_tab",
-			"githubIcon": "qikqja_githubIcon",
-			"sortGroup": "qikqja_sortGroup",
 			"hubUpdateBadge": "qikqja_hubUpdateBadge",
-			"adText": "qikqja_adText",
+			"langBtn": "qikqja_langBtn",
+			"headerTitleRow": "qikqja_headerTitleRow",
+			"copyIcon": "qikqja_copyIcon",
+			"search": "qikqja_search",
+			"brandTitle": "qikqja_brandTitle",
 			"tabActive": "qikqja_tabActive",
-			"resultSeg": "qikqja_resultSeg",
+			"title": "qikqja_title",
+			"adBanner": "qikqja_adBanner",
+			"adBadge": "qikqja_adBadge",
 			"githubLink": "qikqja_githubLink",
+			"segBtnActive": "qikqja_segBtnActive",
 			"versionBtn": "qikqja_versionBtn",
+			"resultSeg": "qikqja_resultSeg",
+			"adArrow": "qikqja_adArrow",
+			"sortGroup": "qikqja_sortGroup",
+			"githubIcon": "qikqja_githubIcon",
+			"segLabel": "qikqja_segLabel",
 			"tabsRow": "qikqja_tabsRow",
 			"aboutBtn": "qikqja_aboutBtn",
-			"logoIcon": "qikqja_logoIcon",
-			"langBtn": "qikqja_langBtn",
-			"tagline": "qikqja_tagline",
-			"segBtn": "qikqja_segBtn",
-			"segGroup": "qikqja_segGroup",
-			"tabs": "qikqja_tabs",
-			"copyIcon": "qikqja_copyIcon",
-			"tabCount": "qikqja_tabCount",
-			"segLabel": "qikqja_segLabel",
-			"headerRight": "qikqja_headerRight",
-			"header": "qikqja_header",
-			"adBanner": "qikqja_adBanner",
-			"segBtnActive": "qikqja_segBtnActive",
-			"title": "qikqja_title"
+			"resultCount": "qikqja_resultCount",
+			"root": "qikqja_root"
 		};
 		//#endregion
 		//#region \0dsh-css:src/client/styles/Modal.module.css.mjs
@@ -896,142 +908,142 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			css: css$10
 		});
 		var Modal_module_css_default = {
-			"progressHead": "BiQ1zG_progressHead",
-			"restartNowWarning": "BiQ1zG_restartNowWarning",
-			"noticeTextOk": "BiQ1zG_noticeTextOk",
+			"modalCmdCopy": "BiQ1zG_modalCmdCopy",
+			"noticeBadgeFail": "BiQ1zG_noticeBadgeFail",
+			"resultCheckIcon": "BiQ1zG_resultCheckIcon",
 			"queueRowBody": "BiQ1zG_queueRowBody",
-			"modal": "BiQ1zG_modal",
-			"restartLater": "BiQ1zG_restartLater",
-			"modalHead": "BiQ1zG_modalHead",
-			"stripCancel": "BiQ1zG_stripCancel",
-			"failRow": "BiQ1zG_failRow",
-			"detailStars": "BiQ1zG_detailStars",
-			"queueSectionTitle": "BiQ1zG_queueSectionTitle",
-			"progressText": "BiQ1zG_progressText",
-			"queueRowPct": "BiQ1zG_queueRowPct",
-			"modalLink": "BiQ1zG_modalLink",
-			"aboutContent": "BiQ1zG_aboutContent",
-			"modalLabel": "BiQ1zG_modalLabel",
-			"queueSection": "BiQ1zG_queueSection",
+			"hubUpdateNotes": "BiQ1zG_hubUpdateNotes",
+			"modalTitleQueued": "BiQ1zG_modalTitleQueued",
+			"detailStatusRunning": "BiQ1zG_detailStatusRunning",
+			"noticeUpdateGo": "BiQ1zG_noticeUpdateGo",
+			"toastIn": "BiQ1zG_toastIn",
+			"errorTitle": "BiQ1zG_errorTitle",
+			"restartNowWarning": "BiQ1zG_restartNowWarning",
+			"failKindInstall": "BiQ1zG_failKindInstall",
+			"modalClose": "BiQ1zG_modalClose",
 			"queueRowDesc": "BiQ1zG_queueRowDesc",
-			"modalInstall": "BiQ1zG_modalInstall",
-			"failHead": "BiQ1zG_failHead",
-			"noticeList": "BiQ1zG_noticeList",
-			"noticeBadgeIcon": "BiQ1zG_noticeBadgeIcon",
-			"aboutModal": "BiQ1zG_aboutModal",
-			"detailStatusPending": "BiQ1zG_detailStatusPending",
-			"failReason": "BiQ1zG_failReason",
 			"modalActions": "BiQ1zG_modalActions",
-			"noticeRowUpdate": "BiQ1zG_noticeRowUpdate",
-			"queueRowStatus": "BiQ1zG_queueRowStatus",
-			"failPrepareHint": "BiQ1zG_failPrepareHint",
+			"toastFail": "BiQ1zG_toastFail",
+			"restartLater": "BiQ1zG_restartLater",
+			"modalDesc": "BiQ1zG_modalDesc",
+			"modalCmdText": "BiQ1zG_modalCmdText",
+			"detailPathText": "BiQ1zG_detailPathText",
+			"detailStatusPending": "BiQ1zG_detailStatusPending",
+			"aboutModal": "BiQ1zG_aboutModal",
+			"failedCopyHint": "BiQ1zG_failedCopyHint",
+			"aboutMeta": "BiQ1zG_aboutMeta",
+			"errorHint": "BiQ1zG_errorHint",
+			"detailLink": "BiQ1zG_detailLink",
+			"modalIn": "BiQ1zG_modalIn",
+			"noticeList": "BiQ1zG_noticeList",
+			"helpModal": "BiQ1zG_helpModal",
 			"trustHint": "BiQ1zG_trustHint",
-			"progressFill": "BiQ1zG_progressFill",
-			"queueRowHead": "BiQ1zG_queueRowHead",
-			"errorBox": "BiQ1zG_errorBox",
-			"queueRowTrack": "BiQ1zG_queueRowTrack",
-			"queueRowTarget": "BiQ1zG_queueRowTarget",
-			"confirmIconDanger": "BiQ1zG_confirmIconDanger",
+			"queueRowPct": "BiQ1zG_queueRowPct",
+			"progressText": "BiQ1zG_progressText",
+			"detailDim": "BiQ1zG_detailDim",
+			"queueSection": "BiQ1zG_queueSection",
+			"modalLabel": "BiQ1zG_modalLabel",
+			"noticeFoot": "BiQ1zG_noticeFoot",
+			"modalLink": "BiQ1zG_modalLink",
+			"queueRow": "BiQ1zG_queueRow",
 			"noticeTime": "BiQ1zG_noticeTime",
-			"detailMono": "BiQ1zG_detailMono",
-			"errorHint": "BiQ1zG_errorHint",
-			"detailUpdateHint": "BiQ1zG_detailUpdateHint",
+			"detailStars": "BiQ1zG_detailStars",
+			"resultDesc": "BiQ1zG_resultDesc",
+			"modalHead": "BiQ1zG_modalHead",
+			"progressFill": "BiQ1zG_progressFill",
 			"failNetworkTarget": "BiQ1zG_failNetworkTarget",
-			"modalRow": "BiQ1zG_modalRow",
-			"hubUpdateMetaItem": "BiQ1zG_hubUpdateMetaItem",
-			"noticeRowOk": "BiQ1zG_noticeRowOk",
-			"resultCheck": "BiQ1zG_resultCheck",
-			"noticeTextFail": "BiQ1zG_noticeTextFail",
-			"detailDim": "BiQ1zG_detailDim",
-			"hubUpdateMeta": "BiQ1zG_hubUpdateMeta",
-			"aboutMeta": "BiQ1zG_aboutMeta",
-			"noticeMain": "BiQ1zG_noticeMain",
+			"failMisjudgeLink": "BiQ1zG_failMisjudgeLink",
+			"bundleDeselectedHint": "BiQ1zG_bundleDeselectedHint",
 			"detailPathActions": "BiQ1zG_detailPathActions",
 			"toast": "BiQ1zG_toast",
+			"linkIcon": "BiQ1zG_linkIcon",
+			"modalRow": "BiQ1zG_modalRow",
+			"detailValue": "BiQ1zG_detailValue",
+			"progress": "BiQ1zG_progress",
+			"modalBody": "BiQ1zG_modalBody",
 			"resultTitle": "BiQ1zG_resultTitle",
-			"detailRow": "BiQ1zG_detailRow",
-			"progressFillFail": "BiQ1zG_progressFillFail",
-			"failCopy": "BiQ1zG_failCopy",
-			"result": "BiQ1zG_result",
+			"noticeRemove": "BiQ1zG_noticeRemove",
+			"modalInstall": "BiQ1zG_modalInstall",
+			"overlay": "BiQ1zG_overlay",
+			"queueRowTarget": "BiQ1zG_queueRowTarget",
+			"noticeHead": "BiQ1zG_noticeHead",
+			"uninstallConfirm": "BiQ1zG_uninstallConfirm",
 			"modalCmd": "BiQ1zG_modalCmd",
+			"failRepoLabel": "BiQ1zG_failRepoLabel",
+			"cliOnlyHint": "BiQ1zG_cliOnlyHint",
+			"confirmIconDanger": "BiQ1zG_confirmIconDanger",
+			"modalCancel": "BiQ1zG_modalCancel",
+			"queueRowStatus": "BiQ1zG_queueRowStatus",
+			"queuedHint": "BiQ1zG_queuedHint",
+			"noticeVersion": "BiQ1zG_noticeVersion",
+			"failKind": "BiQ1zG_failKind",
 			"restartNow": "BiQ1zG_restartNow",
-			"bundleDeselectedHint": "BiQ1zG_bundleDeselectedHint",
+			"detailGrid": "BiQ1zG_detailGrid",
 			"detailLabel": "BiQ1zG_detailLabel",
-			"noticeBadgeFail": "BiQ1zG_noticeBadgeFail",
-			"detailStatusText": "BiQ1zG_detailStatusText",
-			"noticeUpdateGo": "BiQ1zG_noticeUpdateGo",
-			"modalCopy": "BiQ1zG_modalCopy",
-			"detailValue": "BiQ1zG_detailValue",
+			"failPrepareHint": "BiQ1zG_failPrepareHint",
+			"progressFillFail": "BiQ1zG_progressFillFail",
+			"confirmIconWrap": "BiQ1zG_confirmIconWrap",
+			"hubUpdateMetaItem": "BiQ1zG_hubUpdateMetaItem",
+			"noticeBadgeOk": "BiQ1zG_noticeBadgeOk",
 			"modalTitle": "BiQ1zG_modalTitle",
-			"progressTrack": "BiQ1zG_progressTrack",
-			"modalTitleQueued": "BiQ1zG_modalTitleQueued",
-			"detailPath": "BiQ1zG_detailPath",
-			"noticeHead": "BiQ1zG_noticeHead",
-			"errorModal": "BiQ1zG_errorModal",
-			"resultCheckIcon": "BiQ1zG_resultCheckIcon",
-			"detailLink": "BiQ1zG_detailLink",
-			"detailStatusRunning": "BiQ1zG_detailStatusRunning",
-			"queueRow": "BiQ1zG_queueRow",
-			"toastIn": "BiQ1zG_toastIn",
-			"failKind": "BiQ1zG_failKind",
-			"dangerConfirm": "BiQ1zG_dangerConfirm",
-			"failMisjudgeLink": "BiQ1zG_failMisjudgeLink",
-			"failRepoUrl": "BiQ1zG_failRepoUrl",
-			"detailModal": "BiQ1zG_detailModal",
-			"linkIcon": "BiQ1zG_linkIcon",
+			"logModal": "BiQ1zG_logModal",
+			"confirmPrimary": "BiQ1zG_confirmPrimary",
+			"resultRestarting": "BiQ1zG_resultRestarting",
+			"detailUpdateHint": "BiQ1zG_detailUpdateHint",
+			"pendingRowActions": "BiQ1zG_pendingRowActions",
+			"hubUpdateMeta": "BiQ1zG_hubUpdateMeta",
+			"failBigIssue": "BiQ1zG_failBigIssue",
+			"resultCheck": "BiQ1zG_resultCheck",
+			"detailPathBtn": "BiQ1zG_detailPathBtn",
+			"overlayIn": "BiQ1zG_overlayIn",
+			"errorBox": "BiQ1zG_errorBox",
+			"noticeRowOk": "BiQ1zG_noticeRowOk",
 			"detailArrow": "BiQ1zG_detailArrow",
-			"modalCancel": "BiQ1zG_modalCancel",
-			"noticeRemove": "BiQ1zG_noticeRemove",
-			"failKindTitle": "BiQ1zG_failKindTitle",
-			"failRepo": "BiQ1zG_failRepo",
-			"noticeVersion": "BiQ1zG_noticeVersion",
+			"detailStatusText": "BiQ1zG_detailStatusText",
 			"failClear": "BiQ1zG_failClear",
-			"failRepoLabel": "BiQ1zG_failRepoLabel",
-			"errorTitle": "BiQ1zG_errorTitle",
-			"failKindInstall": "BiQ1zG_failKindInstall",
-			"detailPathText": "BiQ1zG_detailPathText",
-			"detailPathBtn": "BiQ1zG_detailPathBtn",
-			"modalDesc": "BiQ1zG_modalDesc",
-			"pendingRowActions": "BiQ1zG_pendingRowActions",
+			"detailRow": "BiQ1zG_detailRow",
+			"failList": "BiQ1zG_failList",
+			"noticeIgnore": "BiQ1zG_noticeIgnore",
+			"stripCancel": "BiQ1zG_stripCancel",
 			"modalValue": "BiQ1zG_modalValue",
+			"failRepo": "BiQ1zG_failRepo",
+			"queueSectionTitle": "BiQ1zG_queueSectionTitle",
+			"noticeRow": "BiQ1zG_noticeRow",
 			"failEmpty": "BiQ1zG_failEmpty",
-			"confirmIconWrap": "BiQ1zG_confirmIconWrap",
-			"uninstallConfirm": "BiQ1zG_uninstallConfirm",
-			"modalCmdText": "BiQ1zG_modalCmdText",
-			"resultRestarting": "BiQ1zG_resultRestarting",
-			"hubUpdateModal": "BiQ1zG_hubUpdateModal",
-			"progress": "BiQ1zG_progress",
-			"confirmPrimary": "BiQ1zG_confirmPrimary",
-			"overlayIn": "BiQ1zG_overlayIn",
-			"failList": "BiQ1zG_failList",
-			"modalBody": "BiQ1zG_modalBody",
-			"queuedHint": "BiQ1zG_queuedHint",
-			"errorCopySoft": "BiQ1zG_errorCopySoft",
-			"hubUpdateNotes": "BiQ1zG_hubUpdateNotes",
-			"failBigIssue": "BiQ1zG_failBigIssue",
-			"overlay": "BiQ1zG_overlay",
-			"helpModal": "BiQ1zG_helpModal",
+			"modalWide": "BiQ1zG_modalWide",
+			"failHead": "BiQ1zG_failHead",
+			"result": "BiQ1zG_result",
 			"noticeRowMain": "BiQ1zG_noticeRowMain",
-			"noticeFoot": "BiQ1zG_noticeFoot",
-			"cliOnlyHint": "BiQ1zG_cliOnlyHint",
-			"modalTitleBusy": "BiQ1zG_modalTitleBusy",
-			"noticeRow": "BiQ1zG_noticeRow",
-			"noticeIgnore": "BiQ1zG_noticeIgnore",
-			"detailGrid": "BiQ1zG_detailGrid",
+			"failKindTitle": "BiQ1zG_failKindTitle",
 			"modalCloseIcon": "BiQ1zG_modalCloseIcon",
-			"modalWide": "BiQ1zG_modalWide",
-			"modalClose": "BiQ1zG_modalClose",
+			"noticeTextFail": "BiQ1zG_noticeTextFail",
+			"noticeBadgeIcon": "BiQ1zG_noticeBadgeIcon",
 			"confirmIcon": "BiQ1zG_confirmIcon",
-			"toastFail": "BiQ1zG_toastFail",
-			"modalCmdCopy": "BiQ1zG_modalCmdCopy",
+			"noticeMain": "BiQ1zG_noticeMain",
+			"failRepoUrl": "BiQ1zG_failRepoUrl",
+			"failReason": "BiQ1zG_failReason",
 			"failDiagBtn": "BiQ1zG_failDiagBtn",
-			"modalIn": "BiQ1zG_modalIn",
-			"failKindUninstall": "BiQ1zG_failKindUninstall",
-			"logModal": "BiQ1zG_logModal",
-			"noticeBadgeOk": "BiQ1zG_noticeBadgeOk",
+			"dangerConfirm": "BiQ1zG_dangerConfirm",
+			"modalTitleBusy": "BiQ1zG_modalTitleBusy",
+			"failCopy": "BiQ1zG_failCopy",
+			"progressTrack": "BiQ1zG_progressTrack",
 			"pendingRowStatus": "BiQ1zG_pendingRowStatus",
-			"failedCopyHint": "BiQ1zG_failedCopyHint",
-			"resultDesc": "BiQ1zG_resultDesc"
+			"detailPath": "BiQ1zG_detailPath",
+			"errorModal": "BiQ1zG_errorModal",
+			"queueRowTrack": "BiQ1zG_queueRowTrack",
+			"progressHead": "BiQ1zG_progressHead",
+			"failRow": "BiQ1zG_failRow",
+			"aboutContent": "BiQ1zG_aboutContent",
+			"detailMono": "BiQ1zG_detailMono",
+			"noticeTextOk": "BiQ1zG_noticeTextOk",
+			"hubUpdateModal": "BiQ1zG_hubUpdateModal",
+			"errorCopySoft": "BiQ1zG_errorCopySoft",
+			"detailModal": "BiQ1zG_detailModal",
+			"modalCopy": "BiQ1zG_modalCopy",
+			"failKindUninstall": "BiQ1zG_failKindUninstall",
+			"queueRowHead": "BiQ1zG_queueRowHead",
+			"modal": "BiQ1zG_modal",
+			"noticeRowUpdate": "BiQ1zG_noticeRowUpdate"
 		};
 		//#endregion
 		//#region src/server/services/install/release-target.ts
@@ -1121,7 +1133,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 		* tsdown 构建时用 define 把 __PLUGIN_VERSION__ 替换成 package.json 的版本号；
 		* node --test 直接 import 本模块时该标识符不存在，typeof 守卫兜底为空串。
 		*/
-		const PLUGIN_VERSION = "2.0.5";
+		const PLUGIN_VERSION = "2.1.0";
 		const CATEGORY_ORDER = [
 			"interface",
 			"session",
@@ -1451,14 +1463,6 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 		}
 		//#endregion
 		//#region src/client/logic/release-age.ts
-		/**
-		* DSH Plugin Hub — the community plugin marketplace for DeepSeek Harness.
-		* Website: https://dsh-plugin.org
-		* GitHub: https://github.com/dshplugin/dsh-plugin-hub
-		*
-		* 供应链门禁的时间判定（纯函数）：pnpm 会静默回退发布未满门槛的版本，
-		* 故发布太新的版本不该提示更新。Hub 自身更新与插件更新共用同一门槛。
-		*/
 		/** pnpm 供应链门禁：dsh profile 默认 minimumReleaseAge=1440（分钟）；+30 分钟缓冲抵消网络/CDN 边缘时间偏差。 */
 		const MIN_RELEASE_AGE_MS = 882e5;
 		/** 发布时间是否仍在门禁窗口内（太新 → 暂缓提示）；无值/解析不出返回 false（不拦真实更新）。 */
@@ -1468,8 +1472,62 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			if (Number.isNaN(ms)) return false;
 			return now - ms < MIN_RELEASE_AGE_MS;
 		}
+		/** 版本号比较（逐段数字；缺失段按 0）。返回负数/0/正数，非法输入按相等处理。 */
+		function compareVersions(a, b) {
+			const parse = (v) => v.split(/[.+-]/).map((part) => Number.parseInt(part, 10)).filter((n) => !Number.isNaN(n));
+			const va = parse(a);
+			const vb = parse(b);
+			const len = Math.max(va.length, vb.length);
+			for (let i = 0; i < len; i++) {
+				const d = (va[i] ?? 0) - (vb[i] ?? 0);
+				if (d !== 0) return d;
+			}
+			return 0;
+		}
+		/**
+		* 选出本次真正该提示的更新版本。
+		*
+		* 只看最新版会漏更新：连续发版时间隔小于供应链门禁时，最新版永远「太新」，
+		* 提示被整体跳过。这里把最新版与 recentVersions 一起当候选，取「高于当前版本且已过门禁」
+		* 的最高版本；一个都没有但仍存在更高版本 → pending（暂缓，不谎称已是最新）。
+		*/
+		function pickHubUpdate(info, currentVersion, now) {
+			if (currentVersion === "") return {
+				state: "latest",
+				target: null
+			};
+			const seen = /* @__PURE__ */ new Set();
+			const candidates = [];
+			for (const entry of [{
+				version: info.version,
+				publishedAt: info.publishedAt,
+				notes: info.notes
+			}, ...info.recentVersions ?? []]) {
+				if (typeof entry.version !== "string" || entry.version === "" || seen.has(entry.version)) continue;
+				seen.add(entry.version);
+				candidates.push(entry);
+			}
+			const higher = candidates.filter((c) => compareVersions(c.version, currentVersion) > 0).sort((a, b) => compareVersions(b.version, a.version));
+			if (higher.length === 0) return {
+				state: "latest",
+				target: null
+			};
+			const ready = higher.find((c) => !isReleaseTooFresh(c.publishedAt, now));
+			return ready !== void 0 ? {
+				state: "available",
+				target: ready
+			} : {
+				state: "pending",
+				target: higher[0]
+			};
+		}
 		//#endregion
 		//#region src/client/logic/installed.ts
+		/** 本地路径安装（file:/link:/绝对或相对路径）：身份在本机，不能按 npm 包名认领目录条目。 */
+		function isLocalSpec(value) {
+			const v = value.trim();
+			return /^(file|link):/i.test(v) || v.startsWith(".") || v.startsWith("/") || /^[A-Za-z]:[\\/]/.test(v);
+		}
 		/** 安装时记录的目录信号（按仓库小写 key 查表）。 */
 		function signalOf(repo, versions) {
 			if (!repo) return null;
@@ -1483,6 +1541,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			for (const [name, spec] of Object.entries(installed)) if (repoFromInstallTarget(spec).toLowerCase() === needle) return name;
 			const pkg = ((plugin.source?.npmPackage || versions[repo.toLowerCase()]?.npmPackage) ?? "").toLowerCase();
 			if (pkg) for (const [name, spec] of Object.entries(installed)) {
+				if (isLocalSpec(spec)) continue;
 				if (isRepoLike(repoFromInstallTarget(spec))) continue;
 				if (name.toLowerCase() === pkg) return name;
 			}
@@ -1875,13 +1934,14 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			* registry 真实发布时间下发（同源），据此判断最准。门槛命中要单列成 `pending` 而不是
 			* 落回「无更新」——回落会让弹窗在本机版本落后时谎称「已是最新」。
 			*/
-			const hubCurrentVersion = "2.0.5";
-			const hubUpdateState = (() => {
-				if (!hubUpdateInfo) return "none";
-				if (hubUpdateInfo.version === hubCurrentVersion) return "latest";
-				if (isReleaseTooFresh(hubUpdateInfo.publishedAt, Date.now())) return "pending";
-				return "available";
-			})();
+			const hubCurrentVersion = "2.1.0";
+			const hubUpdateResult = hubUpdateInfo === null ? {
+				state: "none",
+				target: null
+			} : pickHubUpdate(hubUpdateInfo, hubCurrentVersion, Date.now());
+			const hubUpdateState = hubUpdateResult.state;
+			/** 本次提示的目标版本（available 时有值；pending 时是暂缓中的最高版本） */
+			const hubUpdateTarget = hubUpdateResult.target;
 			const hubHasUpdate = hubUpdateState === "available";
 			(0, react.useMemo)(() => {
 				if (!plugins) return [];
@@ -1939,6 +1999,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 				hasUpdate,
 				hubHasUpdate,
 				hubUpdateState,
+				hubUpdateTarget,
 				releaseAgeReady,
 				hubCurrentVersion,
 				hubUpdateInfo,
@@ -2135,6 +2196,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			if (/os error 5\b|ERROR_ACCESS_DENIED|\bEPERM\b|\bEACCES\b|access is denied/i.test(message)) return "accessDenied";
 			if (/os error 112\b|os error 19\b|ERROR_DISK_FULL|ERROR_WRITE_PROTECT|\bENOSPC\b|\bEROFS\b|\bEMFILE\b|\bENFILE\b|no space left on device|read-only file system|too many open files/i.test(message)) return "fsUnavailable";
 			if (/ERR_PNPM_IGNORED_BUILDS|Ignored build scripts:|ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED/i.test(message)) return "pnpmIgnoredBuild";
+			if (/ERR_PNPM_FETCH_40[13]\b|\bE40[13]\b|(?:Unauthorized|Forbidden)\s*-\s*40[13]\b/i.test(message)) return "registryAuth";
 			if (/\[network\]|ERR_PNPM_GIT_FETCH_FAILED|ETIMEDOUT|ECONNREFUSED|ECONNRESET|ENOTFOUND|EAI_AGAIN|EPIPE|EHOSTUNREACH|ENETUNREACH|UND_ERR_[A-Z0-9_]+|getaddrinfo|Could not connect|Could not resolve host|Network unreachable|Failed to connect|socket hang up|CERT_HAS_EXPIRED|SSL certificate problem|\bTLS\b|\bSSL\b|fetch failed|failed to fetch|\bGET https?:\/\/\S+\.tgz\s+error \([A-Za-z0-9_]+\)/i.test(message)) return "network";
 			if (/\[request-timeout\]/i.test(message)) return "network";
 			if (/\[packaging\]|entry file missing/i.test(message)) return "pluginPrepare";
@@ -2204,6 +2266,8 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			}
 			let out;
 			if (core.length === 0) {
+				const whole = message.trim();
+				if (whole.length <= maxChars) return whole;
 				const tail = message.trimEnd().slice(-1e3);
 				const sep = "\n…\n";
 				const headBudget = Math.max(maxChars - tail.length - 3, 0);
@@ -2270,6 +2334,14 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			const host = m[1].replace(/:\d+$/, "");
 			return PUBLIC_REGISTRY_HOSTS.has(host) ? null : host;
 		}
+		/**
+		* 鉴权失败（401/403）时被拒绝的源主机名：从 `ERR_PNPM_FETCH_401 GET https://host/pkg: Unauthorized - 401`
+		* 里取，取不到返回 null（提示文案退回通用说法，不拼出残缺句子）。
+		*/
+		function authRegistryHostOf(message) {
+			const m = /ERR_PNPM_FETCH_40[13]\s+GET\s+https?:\/\/([^\s/:]+)/i.exec(message) ?? /GET\s+https?:\/\/([^\s/:]+)\S*\s*:?\s*(?:Unauthorized|Forbidden)\s*-\s*40[13]/i.exec(message);
+			return m === null ? null : m[1];
+		}
 		//#endregion
 		//#region src/client/logic/urls.ts
 		/** dsh-plugin.org 中文页挂在 /zh/ 前缀下，英文在根路径。 */
@@ -2310,7 +2382,8 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 				case "pnpmPolicy": return `pnpm supply-chain policy blocked the ${word} on the user machine`;
 				case "pnpmUnusedPatch": return "stale pnpm patch entry on the user machine";
 				case "pnpmMissingDep": return "dependency not found on the npm registry on the user machine";
-				case "registryVersionStale": return "requested version not available on the npm registry in use on the user machine";
+				case "registryVersionStale": return `requested version not available on the npm registry in use on the user machine`;
+				case "registryAuth": return `npm registry rejected the credentials for this ${word} on the user machine`;
 				case "pnpmLinkedDirMissing": return "dangling local (link:) dependency in the user profile";
 				case "fileLocked": return "file locked by another process on the user machine";
 				case "accessDenied": return "file write access denied on the user machine";
@@ -2342,7 +2415,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			const executed = executedCommandOf(command, attempts);
 			const zhWord = actionWordZh(action);
 			const title = `[dsh-plugin.org | dsh-plugin-hub] ${reasonTitleOf(kind, action)}: ${repo}`;
-			const reason = kind === "hostIncompatible" ? "the plugin declares a dsh compatibility range that does not include the runtime in use, so the host rejects it before installing anything; please extend the supported dsh versions or publish a compatible release" : /\[packaging\]/i.test(message) ? "plugin distribution is incomplete — a file the package needs (its entry from main / exports, an entry a bundled patch mounts, or the patch declared by dsh.bundle.patch) is missing from the published npm package; please publish a complete package" : /\[registry-missing\]/i.test(message) ? "a dependency declared by the plugin is not published on the public npm registry (missing, removed, or never released); please publish or correct that dependency, or ship it with the plugin" : kind === "network" ? "network connectivity issue on the user side (DNS, proxy, firewall, or a blocked connection)" : kind === "pluginPrepare" ? "plugin prepare/build script failed during install (packaging/distribution issue)" : kind === "pnpmIgnoredBuild" ? "plugin depends on a native module whose build script pnpm blocks by default (use a prebuilt variant)" : kind === "originRejected" ? "the request never reached the install flow — the local service rejected its origin (local environment issue)" : kind === "pnpmPolicy" ? pnpmPolicyHintOf(message) === "failPnpmTarballIntegrityHint" ? "pnpm rejected a lockfile entry without tarball integrity; inspect and back up the profile lockfile before resolving it again, keeping integrity checks enabled" : "the pnpm supply-chain policy on the user machine blocked the install (minimum release age for freshly published packages / untrusted origin)" : kind === "pnpmUnusedPatch" ? "the profile keeps a pnpm patch entry for an older dsh-plugin version, so pnpm aborted the install (local config issue)" : kind === "fileLocked" ? "a file in the profile is locked by another process on the user machine (local environment issue)" : kind === "accessDenied" ? "the system denied write access to a file in the profile on the user machine (local environment issue)" : kind === "fsUnavailable" ? "the local file system could not accept the write — no space left, read-only volume, or too many open file handles on the user machine (local environment issue)" : "plugin-side install failure";
+			const reason = kind === "hostIncompatible" ? "the plugin declares a dsh compatibility range that does not include the runtime in use, so the host rejects it before installing anything; please extend the supported dsh versions or publish a compatible release" : /\[packaging\]/i.test(message) ? "plugin distribution is incomplete — a file the package needs (its entry from main / exports, an entry a bundled patch mounts, or the patch declared by dsh.bundle.patch) is missing from the published npm package; please publish a complete package" : /\[registry-missing\]/i.test(message) ? "a dependency declared by the plugin is not published on the public npm registry (missing, removed, or never released); please publish or correct that dependency, or ship it with the plugin" : kind === "network" ? "network connectivity issue on the user side (DNS, proxy, firewall, or a blocked connection)" : kind === "registryAuth" ? "the npm registry rejected the request with 401/403 — the configured registry needs credentials or blocks this network (local environment issue)" : kind === "pluginPrepare" ? "plugin prepare/build script failed during install (packaging/distribution issue)" : kind === "pnpmIgnoredBuild" ? "plugin depends on a native module whose build script pnpm blocks by default (use a prebuilt variant)" : kind === "originRejected" ? "the request never reached the install flow — the local service rejected its origin (local environment issue)" : kind === "pnpmPolicy" ? pnpmPolicyHintOf(message) === "failPnpmTarballIntegrityHint" ? "pnpm rejected a lockfile entry without tarball integrity; inspect and back up the profile lockfile before resolving it again, keeping integrity checks enabled" : "the pnpm supply-chain policy on the user machine blocked the install (minimum release age for freshly published packages / untrusted origin)" : kind === "pnpmUnusedPatch" ? "the profile keeps a pnpm patch entry for an older dsh-plugin version, so pnpm aborted the install (local config issue)" : kind === "fileLocked" ? "a file in the profile is locked by another process on the user machine (local environment issue)" : kind === "accessDenied" ? "the system denied write access to a file in the profile on the user machine (local environment issue)" : kind === "fsUnavailable" ? "the local file system could not accept the write — no space left, read-only volume, or too many open file handles on the user machine (local environment issue)" : "plugin-side install failure";
 			const code = coreErrorCode(message);
 			const build = (coreChars) => {
 				const body = [
@@ -2518,6 +2591,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			checkUpdatesOnStart: true,
 			proxy: "",
 			npmRegistry: "",
+			registryFallback: true,
 			enableNpmInstall: true,
 			logPath: ""
 		};
@@ -2914,6 +2988,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 							display: input.repo,
 							source: input.source,
 							mode: input.update ? "update" : void 0,
+							...input.pinVersion ? { version: input.pinVersion } : {},
 							...langKey ? { lang: langKey } : {},
 							...input.channel ? { installChannel: input.channel } : {},
 							...input.globalNpm && input.globalNpm.length > 0 ? { globalNpm: input.globalNpm } : {}
@@ -2966,7 +3041,8 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 					updatedAt: p.dates?.repoUpdatedAt,
 					command: installCommandOf(p, true),
 					source: "catalog",
-					update: opts?.update
+					update: opts?.update,
+					pinVersion: opts?.pinVersion
 				});
 			};
 			/** 命令行安装：用户手输 npm 包名，走 custom 源（受安全开关控制）。
@@ -3815,7 +3891,10 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 				target: "_blank",
 				rel: "noopener noreferrer",
 				title: t("failIssueHint")
-			}, t("failIssueBig")) : null]) : failureKind === "registryVersionStale" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failRegistryVersionStaleHint")) : failureKind === "pnpmLinkedDirMissing" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failPnpmLinkedDirMissingHint")) : failureKind === "fileLocked" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failFileLockedHint")) : failureKind === "accessDenied" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failAccessDeniedHint")) : failureKind === "fsUnavailable" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failFsUnavailableHint")) : failureKind === "originRejected" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failOriginRejectedHint", { profile: env?.profile ?? "<profile>" })) : failureKind === "network" ? (0, react.createElement)("div", null, [
+			}, t("failIssueBig")) : null]) : failureKind === "registryVersionStale" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failRegistryVersionStaleHint")) : failureKind === "pnpmLinkedDirMissing" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failPnpmLinkedDirMissingHint")) : failureKind === "fileLocked" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failFileLockedHint")) : failureKind === "accessDenied" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failAccessDeniedHint")) : failureKind === "fsUnavailable" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failFsUnavailableHint")) : failureKind === "originRejected" ? (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failOriginRejectedHint", { profile: env?.profile ?? "<profile>" })) : failureKind === "registryAuth" ? (() => {
+				const host = authRegistryHostOf(message);
+				return (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t(host ? "failRegistryAuthHint" : "failRegistryAuthHintNoHost", host ? { host } : void 0));
+			})() : failureKind === "network" ? (0, react.createElement)("div", null, [
 				(() => {
 					const target = unreachableTargetOf(message);
 					return target ? (0, react.createElement)("div", { className: Modal_module_css_default.failNetworkTarget }, t("failNetworkTarget", { url: target })) : null;
@@ -4449,6 +4528,10 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 					if (kind === "accessDenied") return (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failAccessDeniedHint"));
 					if (kind === "fsUnavailable") return (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failFsUnavailableHint"));
 					if (kind === "originRejected") return (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t("failOriginRejectedHint", { profile: env?.profile ?? "<profile>" }));
+					if (kind === "registryAuth") {
+						const host = authRegistryHostOf(r.message);
+						return (0, react.createElement)("div", { className: Modal_module_css_default.failPrepareHint }, t(host ? "failRegistryAuthHint" : "failRegistryAuthHintNoHost", host ? { host } : void 0));
+					}
 					if (kind === "network") return (0, react.createElement)("div", null, [
 						(() => {
 							const target = unreachableTargetOf(r.message);
@@ -4686,40 +4769,40 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			css: css$9
 		});
 		var List_module_css_default = {
-			"topics": "_3XaZHa_topics",
-			"topic": "_3XaZHa_topic",
-			"cardHead": "_3XaZHa_cardHead",
-			"card": "_3XaZHa_card",
 			"versionBadge": "_3XaZHa_versionBadge",
-			"footLink": "_3XaZHa_footLink",
-			"actions": "_3XaZHa_actions",
-			"body": "_3XaZHa_body",
-			"cardSide": "_3XaZHa_cardSide",
-			"detailBtn": "_3XaZHa_detailBtn",
+			"stateActions": "_3XaZHa_stateActions",
+			"moreSentinel": "_3XaZHa_moreSentinel",
+			"categoryBadge": "_3XaZHa_categoryBadge",
 			"installBtnInstalled": "_3XaZHa_installBtnInstalled",
-			"installBtn": "_3XaZHa_installBtn",
+			"updateBadge": "_3XaZHa_updateBadge",
+			"topics": "_3XaZHa_topics",
 			"installBtnUpdate": "_3XaZHa_installBtnUpdate",
-			"verified": "_3XaZHa_verified",
-			"star": "_3XaZHa_star",
-			"fork": "_3XaZHa_fork",
 			"retryBtn": "_3XaZHa_retryBtn",
-			"stateActions": "_3XaZHa_stateActions",
-			"cardTitle": "_3XaZHa_cardTitle",
-			"stateDesc": "_3XaZHa_stateDesc",
-			"footer": "_3XaZHa_footer",
-			"desc": "_3XaZHa_desc",
-			"categoryBadge": "_3XaZHa_categoryBadge",
+			"footer": "_3XaZHa_footer",
+			"stateTitle": "_3XaZHa_stateTitle",
+			"cardTitle": "_3XaZHa_cardTitle",
 			"list": "_3XaZHa_list",
-			"moreSentinel": "_3XaZHa_moreSentinel",
-			"installBtnCopied": "_3XaZHa_installBtnCopied",
 			"uninstallBtn": "_3XaZHa_uninstallBtn",
-			"stateTitle": "_3XaZHa_stateTitle",
+			"actions": "_3XaZHa_actions",
+			"stateDesc": "_3XaZHa_stateDesc",
+			"body": "_3XaZHa_body",
+			"cardMain": "_3XaZHa_cardMain",
+			"installBtnCopied": "_3XaZHa_installBtnCopied",
+			"desc": "_3XaZHa_desc",
+			"detailBtn": "_3XaZHa_detailBtn",
 			"state": "_3XaZHa_state",
+			"footLink": "_3XaZHa_footLink",
+			"verified": "_3XaZHa_verified",
+			"stats": "_3XaZHa_stats",
+			"cardHead": "_3XaZHa_cardHead",
+			"fork": "_3XaZHa_fork",
 			"diagBtn": "_3XaZHa_diagBtn",
-			"updateBadge": "_3XaZHa_updateBadge",
+			"cardSide": "_3XaZHa_cardSide",
+			"topic": "_3XaZHa_topic",
+			"star": "_3XaZHa_star",
+			"installBtn": "_3XaZHa_installBtn",
 			"date": "_3XaZHa_date",
-			"cardMain": "_3XaZHa_cardMain",
-			"stats": "_3XaZHa_stats"
+			"card": "_3XaZHa_card"
 		};
 		//#endregion
 		//#region src/client/hooks/useIncrementalList.ts
@@ -4924,16 +5007,16 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			css: css$8
 		});
 		var SectionTabs_module_css_default = {
-			"tabIcon": "_7tvizq_tabIcon",
-			"tabCountActive": "_7tvizq_tabCountActive",
-			"tabActive": "_7tvizq_tabActive",
+			"tabCount": "_7tvizq_tabCount",
+			"root": "_7tvizq_root",
+			"tab": "_7tvizq_tab",
+			"tabLabel": "_7tvizq_tabLabel",
 			"noticeBtn": "_7tvizq_noticeBtn",
+			"tabActive": "_7tvizq_tabActive",
 			"noticeIcon": "_7tvizq_noticeIcon",
-			"tabLabel": "_7tvizq_tabLabel",
 			"noticeCount": "_7tvizq_noticeCount",
-			"tabCount": "_7tvizq_tabCount",
-			"tab": "_7tvizq_tab",
-			"root": "_7tvizq_root"
+			"tabCountActive": "_7tvizq_tabCountActive",
+			"tabIcon": "_7tvizq_tabIcon"
 		};
 		//#endregion
 		//#region src/client/components/layout/SectionTabs.tsx
@@ -5009,42 +5092,42 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			css: css$7
 		});
 		var InstalledView_module_css_default = {
-			"rowRestart": "_1nXeGW_rowRestart",
-			"emptyDesc": "_1nXeGW_emptyDesc",
+			"rowCategory": "_1nXeGW_rowCategory",
+			"rowActions": "_1nXeGW_rowActions",
+			"empty": "_1nXeGW_empty",
+			"rowSourceTagHub": "_1nXeGW_rowSourceTagHub",
+			"versionBadge": "_1nXeGW_versionBadge",
+			"row": "_1nXeGW_row",
+			"rowTitle": "_1nXeGW_rowTitle",
+			"rowSourceTag": "_1nXeGW_rowSourceTag",
+			"rowDetail": "_1nXeGW_rowDetail",
 			"rowMain": "_1nXeGW_rowMain",
+			"updateBadge": "_1nXeGW_updateBadge",
+			"rowUpdate": "_1nXeGW_rowUpdate",
+			"searchInput": "_1nXeGW_searchInput",
+			"list": "_1nXeGW_list",
+			"emptyDesc": "_1nXeGW_emptyDesc",
+			"segBtnActive": "_1nXeGW_segBtnActive",
 			"rowDesc": "_1nXeGW_rowDesc",
+			"rowRepo": "_1nXeGW_rowRepo",
+			"rowMeta": "_1nXeGW_rowMeta",
+			"rowSourceTagManual": "_1nXeGW_rowSourceTagManual",
 			"statusDot": "_1nXeGW_statusDot",
-			"toolbar": "_1nXeGW_toolbar",
-			"rowSourceTag": "_1nXeGW_rowSourceTag",
-			"segBtnActive": "_1nXeGW_segBtnActive",
 			"segGroup": "_1nXeGW_segGroup",
-			"searchWrap": "_1nXeGW_searchWrap",
-			"searchInput": "_1nXeGW_searchInput",
-			"empty": "_1nXeGW_empty",
 			"exampleBadge": "_1nXeGW_exampleBadge",
-			"list": "_1nXeGW_list",
-			"segLabel": "_1nXeGW_segLabel",
-			"rowSourceTagHub": "_1nXeGW_rowSourceTagHub",
 			"statusInactive": "_1nXeGW_statusInactive",
-			"root": "_1nXeGW_root",
-			"rowTitleLine": "_1nXeGW_rowTitleLine",
-			"rowTitle": "_1nXeGW_rowTitle",
+			"statusPending": "_1nXeGW_statusPending",
 			"emptyTitle": "_1nXeGW_emptyTitle",
-			"segBtn": "_1nXeGW_segBtn",
-			"row": "_1nXeGW_row",
-			"versionBadge": "_1nXeGW_versionBadge",
+			"rowRestart": "_1nXeGW_rowRestart",
+			"searchWrap": "_1nXeGW_searchWrap",
+			"root": "_1nXeGW_root",
+			"exampleRow": "_1nXeGW_exampleRow",
 			"segRow": "_1nXeGW_segRow",
-			"rowCategory": "_1nXeGW_rowCategory",
-			"rowActions": "_1nXeGW_rowActions",
-			"rowUpdate": "_1nXeGW_rowUpdate",
+			"segLabel": "_1nXeGW_segLabel",
+			"segBtn": "_1nXeGW_segBtn",
 			"rowUninstall": "_1nXeGW_rowUninstall",
-			"updateBadge": "_1nXeGW_updateBadge",
-			"statusPending": "_1nXeGW_statusPending",
-			"rowDetail": "_1nXeGW_rowDetail",
-			"rowRepo": "_1nXeGW_rowRepo",
-			"rowMeta": "_1nXeGW_rowMeta",
-			"exampleRow": "_1nXeGW_exampleRow",
-			"rowSourceTagManual": "_1nXeGW_rowSourceTagManual"
+			"toolbar": "_1nXeGW_toolbar",
+			"rowTitleLine": "_1nXeGW_rowTitleLine"
 		};
 		//#endregion
 		//#region src/client/components/views/InstalledView.tsx
@@ -5288,27 +5371,27 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			css: css$6
 		});
 		var CustomInstallView_module_css_default = {
-			"installCards": "zISxCG_installCards",
-			"helpNote": "zISxCG_helpNote",
-			"root": "zISxCG_root",
-			"installExample": "zISxCG_installExample",
+			"installRow": "zISxCG_installRow",
+			"installInputError": "zISxCG_installInputError",
+			"channelOffText": "zISxCG_channelOffText",
 			"channelOffBtn": "zISxCG_channelOffBtn",
-			"installCardDisabled": "zISxCG_installCardDisabled",
+			"helpBody": "zISxCG_helpBody",
+			"helpCmd": "zISxCG_helpCmd",
+			"installCards": "zISxCG_installCards",
 			"desc": "zISxCG_desc",
-			"installBtn": "zISxCG_installBtn",
 			"installCardHead": "zISxCG_installCardHead",
-			"helpCmd": "zISxCG_helpCmd",
+			"installExample": "zISxCG_installExample",
+			"installInput": "zISxCG_installInput",
+			"helpNote": "zISxCG_helpNote",
+			"channelOff": "zISxCG_channelOff",
+			"installHelpBtn": "zISxCG_installHelpBtn",
 			"installLabel": "zISxCG_installLabel",
-			"installRow": "zISxCG_installRow",
-			"installCard": "zISxCG_installCard",
+			"installCardDisabled": "zISxCG_installCardDisabled",
+			"installBtn": "zISxCG_installBtn",
 			"helpLine": "zISxCG_helpLine",
-			"channelOff": "zISxCG_channelOff",
-			"helpBody": "zISxCG_helpBody",
+			"root": "zISxCG_root",
 			"installError": "zISxCG_installError",
-			"installInput": "zISxCG_installInput",
-			"installInputError": "zISxCG_installInputError",
-			"channelOffText": "zISxCG_channelOffText",
-			"installHelpBtn": "zISxCG_installHelpBtn"
+			"installCard": "zISxCG_installCard"
 		};
 		//#endregion
 		//#region src/client/components/views/CustomInstallView.tsx
@@ -5464,30 +5547,30 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			css: css$5
 		});
 		var SettingsView_module_css_default = {
-			"proxyHint": "_506LLG_proxyHint",
-			"resetBtn": "_506LLG_resetBtn",
-			"settingControlStack": "_506LLG_settingControlStack",
-			"proxyHintFail": "_506LLG_proxyHintFail",
-			"navIcon": "_506LLG_navIcon",
-			"proxyControl": "_506LLG_proxyControl",
-			"settingTitle": "_506LLG_settingTitle",
+			"root": "_506LLG_root",
 			"navItem": "_506LLG_navItem",
-			"settingRow": "_506LLG_settingRow",
 			"sidebar": "_506LLG_sidebar",
-			"settingRowStack": "_506LLG_settingRowStack",
-			"root": "_506LLG_root",
-			"controlDropdown": "_506LLG_controlDropdown",
-			"pageHeader": "_506LLG_pageHeader",
-			"pageTitle": "_506LLG_pageTitle",
-			"settingLabel": "_506LLG_settingLabel",
-			"textInput": "_506LLG_textInput",
+			"navIcon": "_506LLG_navIcon",
+			"navItemActive": "_506LLG_navItemActive",
+			"proxyControl": "_506LLG_proxyControl",
 			"settingDesc": "_506LLG_settingDesc",
-			"settingControl": "_506LLG_settingControl",
-			"pageDesc": "_506LLG_pageDesc",
 			"card": "_506LLG_card",
+			"settingControl": "_506LLG_settingControl",
+			"settingControlStack": "_506LLG_settingControlStack",
 			"proxyHintOk": "_506LLG_proxyHintOk",
 			"content": "_506LLG_content",
-			"navItemActive": "_506LLG_navItemActive"
+			"controlDropdown": "_506LLG_controlDropdown",
+			"settingRow": "_506LLG_settingRow",
+			"textInput": "_506LLG_textInput",
+			"pageHeader": "_506LLG_pageHeader",
+			"settingLabel": "_506LLG_settingLabel",
+			"settingTitle": "_506LLG_settingTitle",
+			"pageDesc": "_506LLG_pageDesc",
+			"settingRowStack": "_506LLG_settingRowStack",
+			"proxyHint": "_506LLG_proxyHint",
+			"resetBtn": "_506LLG_resetBtn",
+			"proxyHintFail": "_506LLG_proxyHintFail",
+			"pageTitle": "_506LLG_pageTitle"
 		};
 		//#endregion
 		//#region \0dsh-css:src/client/styles/Dropdown.module.css.mjs
@@ -5506,18 +5589,18 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			css: css$4
 		});
 		var Dropdown_module_css_default = {
-			"dropdownFill": "B_Gxsq_dropdownFill",
-			"dropdownItemLabel": "B_Gxsq_dropdownItemLabel",
+			"dropdownCount": "B_Gxsq_dropdownCount",
+			"dropdownArrowOpen": "B_Gxsq_dropdownArrowOpen",
+			"dropdownPanel": "B_Gxsq_dropdownPanel",
 			"dropdownLabel": "B_Gxsq_dropdownLabel",
+			"dropdownArrow": "B_Gxsq_dropdownArrow",
+			"dropdownFill": "B_Gxsq_dropdownFill",
 			"dropdownItemActive": "B_Gxsq_dropdownItemActive",
-			"dropdownCount": "B_Gxsq_dropdownCount",
+			"dropdownItemLabel": "B_Gxsq_dropdownItemLabel",
 			"dropdownCountActive": "B_Gxsq_dropdownCountActive",
-			"dropdownArrow": "B_Gxsq_dropdownArrow",
-			"dropdownItem": "B_Gxsq_dropdownItem",
-			"dropdownArrowOpen": "B_Gxsq_dropdownArrowOpen",
-			"dropdownBtn": "B_Gxsq_dropdownBtn",
 			"dropdown": "B_Gxsq_dropdown",
-			"dropdownPanel": "B_Gxsq_dropdownPanel"
+			"dropdownItem": "B_Gxsq_dropdownItem",
+			"dropdownBtn": "B_Gxsq_dropdownBtn"
 		};
 		//#endregion
 		//#region \0dsh-css:src/client/styles/Toggle.module.css.mjs
@@ -5635,29 +5718,29 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			css: css$2
 		});
 		var DiagnosticsView_module_css_default = {
-			"envLabel": "k9eRya_envLabel",
+			"meta": "k9eRya_meta",
+			"summaryRunning": "k9eRya_summaryRunning",
+			"summaryOk": "k9eRya_summaryOk",
+			"row": "k9eRya_row",
+			"summary": "k9eRya_summary",
+			"badgeFail": "k9eRya_badgeFail",
 			"head": "k9eRya_head",
+			"envRow": "k9eRya_envRow",
+			"diagPulse": "k9eRya_diagPulse",
+			"runBtn": "k9eRya_runBtn",
 			"envTitle": "k9eRya_envTitle",
-			"summary": "k9eRya_summary",
-			"badge": "k9eRya_badge",
-			"panel": "k9eRya_panel",
+			"envLabel": "k9eRya_envLabel",
+			"envDesc": "k9eRya_envDesc",
 			"headHint": "k9eRya_headHint",
-			"diagPulse": "k9eRya_diagPulse",
 			"envCopyBtn": "k9eRya_envCopyBtn",
+			"display": "k9eRya_display",
 			"badgeIdle": "k9eRya_badgeIdle",
+			"badgeOk": "k9eRya_badgeOk",
 			"summaryFail": "k9eRya_summaryFail",
-			"envRow": "k9eRya_envRow",
-			"name": "k9eRya_name",
-			"meta": "k9eRya_meta",
-			"badgeFail": "k9eRya_badgeFail",
-			"row": "k9eRya_row",
-			"envDesc": "k9eRya_envDesc",
-			"display": "k9eRya_display",
-			"runBtn": "k9eRya_runBtn",
+			"panel": "k9eRya_panel",
 			"badgeRunning": "k9eRya_badgeRunning",
-			"badgeOk": "k9eRya_badgeOk",
-			"summaryOk": "k9eRya_summaryOk",
-			"summaryRunning": "k9eRya_summaryRunning"
+			"name": "k9eRya_name",
+			"badge": "k9eRya_badge"
 		};
 		//#endregion
 		//#region src/client/components/views/DiagnosticsView.tsx
@@ -5832,57 +5915,57 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			css: css$1
 		});
 		var LogsView_module_css_default = {
-			"pathRow": "_3j77BW_pathRow",
-			"foot": "_3j77BW_foot",
+			"footFail": "_3j77BW_footFail",
+			"pathDialogHint": "_3j77BW_pathDialogHint",
 			"message": "_3j77BW_message",
+			"pathDialogReset": "_3j77BW_pathDialogReset",
+			"previewRow": "_3j77BW_previewRow",
+			"moreEnd": "_3j77BW_moreEnd",
+			"badgeSuccess": "_3j77BW_badgeSuccess",
+			"entry": "_3j77BW_entry",
+			"searchInput": "_3j77BW_searchInput",
 			"more": "_3j77BW_more",
-			"badgeWarn": "_3j77BW_badgeWarn",
-			"badgeInfo": "_3j77BW_badgeInfo",
-			"time": "_3j77BW_time",
-			"pathDialogRow": "_3j77BW_pathDialogRow",
 			"headHint": "_3j77BW_headHint",
-			"clearBtn": "_3j77BW_clearBtn",
-			"filterChip": "_3j77BW_filterChip",
-			"searchInput": "_3j77BW_searchInput",
-			"pathText": "_3j77BW_pathText",
-			"footActions": "_3j77BW_footActions",
+			"footPath": "_3j77BW_footPath",
 			"badgeError": "_3j77BW_badgeError",
-			"list": "_3j77BW_list",
-			"pathDialogHint": "_3j77BW_pathDialogHint",
-			"previewRow": "_3j77BW_previewRow",
-			"filterChipActive": "_3j77BW_filterChipActive",
-			"entry": "_3j77BW_entry",
-			"pathLabel": "_3j77BW_pathLabel",
 			"catUninstall": "_3j77BW_catUninstall",
-			"badgeSuccess": "_3j77BW_badgeSuccess",
+			"headActions": "_3j77BW_headActions",
+			"footCount": "_3j77BW_footCount",
+			"clearBtn": "_3j77BW_clearBtn",
+			"filterChipActive": "_3j77BW_filterChipActive",
+			"badgeInfo": "_3j77BW_badgeInfo",
+			"foot": "_3j77BW_foot",
+			"catBadge": "_3j77BW_catBadge",
+			"badge": "_3j77BW_badge",
+			"time": "_3j77BW_time",
 			"empty": "_3j77BW_empty",
-			"catUpdate": "_3j77BW_catUpdate",
+			"pathDialogFoot": "_3j77BW_pathDialogFoot",
 			"logList": "_3j77BW_logList",
-			"catInstall": "_3j77BW_catInstall",
-			"pathDialogDesc": "_3j77BW_pathDialogDesc",
+			"list": "_3j77BW_list",
+			"pathDraft": "_3j77BW_pathDraft",
+			"pathDialogRow": "_3j77BW_pathDialogRow",
+			"head": "_3j77BW_head",
+			"badgeWarn": "_3j77BW_badgeWarn",
+			"pathText": "_3j77BW_pathText",
 			"search": "_3j77BW_search",
-			"pathDialog": "_3j77BW_pathDialog",
-			"moreEnd": "_3j77BW_moreEnd",
-			"footFail": "_3j77BW_footFail",
+			"badgeDebug": "_3j77BW_badgeDebug",
+			"pathDialogDesc": "_3j77BW_pathDialogDesc",
+			"linkBtn": "_3j77BW_linkBtn",
+			"catInstall": "_3j77BW_catInstall",
+			"catUpdate": "_3j77BW_catUpdate",
 			"catSettings": "_3j77BW_catSettings",
-			"pathDialogFoot": "_3j77BW_pathDialogFoot",
-			"filterBar": "_3j77BW_filterBar",
+			"filterChip": "_3j77BW_filterChip",
+			"footActions": "_3j77BW_footActions",
 			"catDiagnostics": "_3j77BW_catDiagnostics",
+			"pathDialog": "_3j77BW_pathDialog",
 			"event": "_3j77BW_event",
-			"pathDialogReset": "_3j77BW_pathDialogReset",
-			"actions": "_3j77BW_actions",
-			"linkBtn": "_3j77BW_linkBtn",
-			"pathDraft": "_3j77BW_pathDraft",
-			"headActions": "_3j77BW_headActions",
-			"catBadge": "_3j77BW_catBadge",
-			"footCount": "_3j77BW_footCount",
-			"btn": "_3j77BW_btn",
 			"catSystem": "_3j77BW_catSystem",
-			"footPath": "_3j77BW_footPath",
-			"head": "_3j77BW_head",
-			"badge": "_3j77BW_badge",
 			"panel": "_3j77BW_panel",
-			"badgeDebug": "_3j77BW_badgeDebug"
+			"pathLabel": "_3j77BW_pathLabel",
+			"filterBar": "_3j77BW_filterBar",
+			"btn": "_3j77BW_btn",
+			"actions": "_3j77BW_actions",
+			"pathRow": "_3j77BW_pathRow"
 		};
 		//#endregion
 		//#region src/client/components/modals/LogsModal.tsx
@@ -6588,6 +6671,14 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 					title: t("settingsMirror"),
 					className: `${SettingsView_module_css_default.controlDropdown} ${Dropdown_module_css_default.dropdownFill}`
 				})
+			}), (0, react.createElement)(SettingRow, {
+				title: t("settingsRegistryFallback"),
+				desc: t("settingsRegistryFallbackDesc"),
+				children: (0, react.createElement)(Toggle, {
+					checked: settings.registryFallback,
+					onChange: (v) => update({ registryFallback: v }),
+					title: t("settingsRegistryFallback")
+				})
 			}), (0, react.createElement)(SettingRow, {
 				title: t("settingsProxy"),
 				desc: t("settingsProxyDesc"),
@@ -6713,6 +6804,9 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 			const [confirmPlugin, setConfirmPlugin] = (0, react.useState)(null);
 			/** 弹窗动作是否为「更新」：已安装插件点「更新」→ 走同一条 add 命令原位覆盖重装，文案区分安装/更新 */
 			const [confirmIsUpdate, setConfirmIsUpdate] = (0, react.useState)(false);
+			/** Hub 自我更新指定的精确版本：连续发版时提示的是「已过供应链门禁」的旧一版，
+			*  安装必须钉在该版本上，否则又会被 @latest 带回门禁内的最新版。 */
+			const [confirmPinVersion, setConfirmPinVersion] = (0, react.useState)(null);
 			/** 命令行安装确认弹窗：记录待安装的裸目标（npm 包名）——
 			*  与应用商店同一套确认/进度/结果弹窗，提供时 plugin 传 null 走 customTarget 模式 */
 			const [confirmCustomTarget, setConfirmCustomTarget] = (0, react.useState)(null);
@@ -7068,6 +7162,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 				onInstall: (p, opts) => {
 					setInstallDone(false);
 					setConfirmIsUpdate(opts?.update ?? false);
+					setConfirmPinVersion(null);
 					queue.clearModalTask();
 					setConfirmPlugin(p);
 				},
@@ -7093,6 +7188,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 					setDetailItem(null);
 					setInstallDone(false);
 					setConfirmIsUpdate(true);
+					setConfirmPinVersion(null);
 					queue.clearModalTask();
 					setConfirmPlugin(item.plugin);
 				},
@@ -7143,7 +7239,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 				openSection: settingsSection,
 				onConsumedOpenSection: () => setSettingsSection(null)
 			}), showHubUpdate && (0, react.createElement)(HubUpdateModal, {
-				info: catalog.hubUpdateInfo ?? { version: "2.0.5" },
+				info: catalog.hubUpdateTarget ?? catalog.hubUpdateInfo ?? { version: "2.1.0" },
 				state: catalog.hubUpdateState,
 				currentVersion: catalog.hubCurrentVersion,
 				lang,
@@ -7154,6 +7250,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 					if (hubEntry) {
 						setInstallDone(false);
 						setConfirmIsUpdate(true);
+						setConfirmPinVersion(catalog.hubUpdateTarget?.version ?? null);
 						queue.clearModalTask();
 						setConfirmPlugin(hubEntry);
 					}
@@ -7185,6 +7282,7 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 					setShowNotifications(false);
 					setInstallDone(false);
 					setConfirmIsUpdate(true);
+					setConfirmPinVersion(null);
 					queue.clearModalTask();
 					setConfirmPlugin(plugin);
 				},
@@ -7243,7 +7341,10 @@ window.__ModuleLoader__.load({ id: "dsh-plugin", factory: (require) => {
 					if (reload) window.location.reload();
 				},
 				onCopy: () => copyCommand(confirmPlugin),
-				onInstall: () => queue.installNow(confirmPlugin, confirmIsUpdate ? { update: true } : void 0),
+				onInstall: () => queue.installNow(confirmPlugin, confirmIsUpdate ? {
+					update: true,
+					pinVersion: confirmPinVersion ?? void 0
+				} : void 0),
 				onRestart: () => setShowRestartConfirm(true)
 			}), confirmCustomTarget && (0, react.createElement)(InstallModal, {
 				plugin: null,