dsh-remote-plugin 0.6.25 → 0.7.0-rc.1

package/gateway.cjs

@@ -72,6 +72,8 @@ const WS_IDLE_MS = durationEnv('GATEWAY_WS_IDLE_MS', 180000, 0, 24 * 60 * 60 * 1
 const WS_UPGRADE_TIMEOUT_MS = durationEnv('GATEWAY_WS_UPGRADE_TIMEOUT_MS', 15000, 1000, 5 * 60 * 1000)
 const UPSTREAM_REQUEST_TIMEOUT_MS = durationEnv('GATEWAY_UPSTREAM_TIMEOUT_MS', 30000, 1000, 10 * 60 * 1000)
 const UPSTREAM = new URL(process.env.DSH_UPSTREAM || 'http://127.0.0.1:3080')
+// URL 中 IPv6 带方括号，http.request 的 hostname 则要求裸地址。
+const UPSTREAM_HOSTNAME = UPSTREAM.hostname.replace(/^\[|\]$/g, '')
 const UPSTREAM_TRANSPORT = UPSTREAM.protocol === 'https:' ? https : http
 const UPSTREAM_PORT = Number(UPSTREAM.port) || (UPSTREAM.protocol === 'https:' ? 443 : 80)
 const UPSTREAM_AUTHORITY = `${UPSTREAM.hostname}${UPSTREAM.port ? ':' + UPSTREAM.port : ''}`
@@ -2766,7 +2768,7 @@ function serveStatic(req, res, url) {
 // ---------- 管理 API ----------
 function upstreamReachable(cb) {
   const req = UPSTREAM_TRANSPORT.request({
-    hostname: UPSTREAM.hostname,
+    hostname: UPSTREAM_HOSTNAME,
     port: UPSTREAM_PORT,
     method: 'GET',
     path: '/health',
@@ -3347,7 +3349,8 @@ function sha256FileHex(file, cb) {
 const activeUploads = new Map()
 const uploadPartDirs = new Set()
 function fsActiveKey(dirReal, name, session) {
-  return dirReal + '\n' + name + '\n' + (session || '')
+  const key = fsPartPath(dirReal, name, session)
+  return process.platform === 'win32' ? key.toLowerCase() : key
 }
 
 function rememberUploadDir(dirReal) {
@@ -3355,8 +3358,8 @@ function rememberUploadDir(dirReal) {
 }
 
 function uploadDirHasActive(dirReal) {
-  const prefix = dirReal + '\n'
-  for (const key of activeUploads.keys()) if (key.startsWith(prefix)) return true
+  const dir = process.platform === 'win32' ? dirReal.toLowerCase() : dirReal
+  for (const key of activeUploads.keys()) if (path.dirname(key) === dir) return true
   return false
 }
 
@@ -3431,24 +3434,49 @@ function fsUploadPipe(res, url, dirLex, dirReal, name) {
   return up ? fsUploadPipeFromTarget(res, up) : null
 }
 
+/** 同目录提交：覆盖用原子 rename；禁止覆盖用排他 link，绝不先删旧文件。 */
+function fsCommitUpload(tmp, target, overwrite) {
+  if (overwrite) fs.renameSync(tmp, target)
+  else {
+    fs.linkSync(tmp, target)
+    // 目标已提交，临时名字清理失败不应把成功误报为失败。
+    try { fs.unlinkSync(tmp) } catch {}
+  }
+}
+
 function fsUploadPipeFromTarget(res, up) {
   let finished = false
+  let ending = false
+  let written = false
   const cleanup = () => {
     if (finished) return
     finished = true
     try { up.stream.destroy() } catch {}
-    try { fs.unlinkSync(up.tmp) } catch {}
+    up.stream.once('close', () => { try { fs.unlinkSync(up.tmp) } catch {} })
   }
   up.stream.on('error', () => {
     if (finished) return
     finished = true
-    try { fs.unlinkSync(up.tmp) } catch {}
+    up.stream.once('close', () => { try { fs.unlinkSync(up.tmp) } catch {} })
     if (!res.headersSent) fsJson(res, 500, { error: 'write-failed' })
     else try { res.destroy() } catch {}
   })
+  up.stream.once('finish', () => { written = true })
+  up.stream.once('close', () => {
+    if (finished || !written) return
+    finished = true
+    try {
+      fsCommitUpload(up.tmp, up.target, up.overwrite)
+    } catch (err) {
+      try { fs.unlinkSync(up.tmp) } catch {}
+      if (!res.headersSent) fsJson(res, err.code === 'EEXIST' ? 409 : 403, { error: err.code === 'EEXIST' ? 'conflict' : 'write-failed', detail: err.message })
+      return
+    }
+    fsJson(res, 201, { ok: true, path: up.displayPath, name: up.name, size: up.bytes })
+  })
   return {
     write(chunk) {
-      if (finished) return
+      if (finished || ending) return
       up.bytes += chunk.length
       if (up.bytes > FS_MAX_UPLOAD) {
         cleanup()
@@ -3459,19 +3487,9 @@ function fsUploadPipeFromTarget(res, up) {
       up.stream.write(chunk)
     },
     end() {
-      if (finished) return
-      finished = true
-      up.stream.end(() => {
-        try {
-          if (up.overwrite) fs.rmSync(up.target, { force: true })
-          fs.renameSync(up.tmp, up.target)
-        } catch (err) {
-          try { fs.unlinkSync(up.tmp) } catch {}
-          if (!res.headersSent) return fsJson(res, 403, { error: 'permission-denied', detail: err.message })
-          return
-        }
-        fsJson(res, 201, { ok: true, path: up.displayPath, name: up.name, size: up.bytes })
-      })
+      if (finished || ending) return
+      ending = true
+      up.stream.end()
     },
     abort(status, msg) {
       cleanup()
@@ -3659,6 +3677,8 @@ function fsUploadResumable(req, res, url, dirLex, dirReal) {
   if (!fsValidName(name)) return fsJson(res, 400, { error: 'bad-name', detail: '文件名不能为空且不能包含路径分隔符' })
   const session = url.searchParams.get('session') || ''
   if (!session) return fsJson(res, 400, { error: 'missing-session', detail: '断点续传需要 session 参数' })
+  const activeKey = fsActiveKey(dirReal, name, session)
+  if (activeUploads.has(activeKey)) return fsJson(res, 409, { error: 'upload-busy' })
   const queryOffsetRaw = url.searchParams.get('offset')
   const headerOffsetRaw = req.headers['upload-offset']
   const offsetRaw = queryOffsetRaw ?? headerOffsetRaw
@@ -3719,21 +3739,37 @@ function fsUploadResumable(req, res, url, dirLex, dirReal) {
   } catch (err) {
     return fsJson(res, 403, { error: 'permission-denied', detail: err.message })
   }
-  const activeKey = fsActiveKey(dirReal, name, session)
   activeUploads.set(activeKey, stream)
 
   let bytes = 0
   let finished = false
+  let written = false
+  let cancelled = false
+  const release = () => {
+    if (activeUploads.get(activeKey) === stream) activeUploads.delete(activeKey)
+  }
+  res.once('finish', () => { finished = true; if (!cancelled) release() })
   const abort = (status, msg, extra = {}) => {
     if (finished) return
     finished = true
-    activeUploads.delete(activeKey)
+    cancelled = true
+    const cleanup = () => {
+      if (status === 413 || status === 500 || msg === 'cancelled') { try { fs.unlinkSync(part) } catch {} }
+      release()
+    }
+    if (stream.closed) cleanup()
+    else stream.once('close', cleanup)
     try { stream.destroy() } catch {}
     // 网络中断时保留分片, 客户端 probe 后续传; 只有超限/写失败才删
-    if (status === 413 || status === 500) { try { fs.unlinkSync(part) } catch {} }
     if (!res.headersSent) fsJson(res, status, { error: msg, ...extra })
     else try { res.destroy() } catch {}
   }
+  stream.cancelUpload = () => {
+    const closed = stream.closed ? Promise.resolve() : new Promise(resolve => stream.once('close', resolve))
+    abort(409, 'cancelled')
+    return closed
+  }
+  res.once('close', () => { if (!finished) abort(400, 'client-aborted') })
 
   stream.on('error', (err) => {
     abort(500, err.code === 'ENOENT' ? 'part-missing' : 'write-failed', { detail: err.message })
@@ -3751,9 +3787,11 @@ function fsUploadResumable(req, res, url, dirLex, dirReal) {
   })
   req.on('end', () => {
     if (finished) return
-    finished = true
-    stream.end(() => {
-      activeUploads.delete(activeKey)
+    stream.end()
+  })
+  stream.once('finish', () => { written = true })
+  stream.once('close', () => {
+      if (finished || !written) return
       const total = offset + bytes
       try {
         const st = fs.statSync(part)
@@ -3771,21 +3809,22 @@ function fsUploadResumable(req, res, url, dirLex, dirReal) {
           return
         }
         const commit = (actualSha256) => {
+          if (cancelled) return
           try {
             const ts = fsTargetState(target)
             if (ts.status) return fsJson(res, ts.status, { error: ts.error, detail: ts.detail })
             if (ts.exists && !overwrite) return fsJson(res, 409, { error: 'conflict', detail: '文件已存在, overwrite=1 可覆盖' })
-            if (ts.exists) fs.rmSync(target, { force: true })
-            fs.renameSync(part, target)
+            fsCommitUpload(part, target, overwrite)
             fsJson(res, 201, { ok: true, name, path: path.join(dirLex, name), size: total, resumed: offset > 0, session, uploadLength, ...(actualSha256 ? { sha256: actualSha256 } : {}) }, fsUploadHeaders(total, uploadLength))
           } catch (err) {
-            if (!res.headersSent) fsJson(res, 403, { error: 'write-failed', detail: err.message })
+            if (!res.headersSent) fsJson(res, err.code === 'EEXIST' ? 409 : 403, { error: err.code === 'EEXIST' ? 'conflict' : 'write-failed', detail: err.message })
             else try { res.destroy() } catch {}
           }
         }
         if (sha256Expected) {
           // 落盘前校验: 不匹配保留分片并返回 422, 客户端可重传或取消
           sha256FileHex(part, (err, actual) => {
+            if (cancelled) return
             if (err) return fsJson(res, 403, { error: 'checksum-failed', detail: err.message })
             if (actual !== sha256Expected) {
               return fsJson(res, 422, { error: 'checksum-mismatch', expected: sha256Expected, actual, partialSize: total, session }, fsUploadHeaders(total, uploadLength, Date.now() + FS_UPLOAD_TTL_MS))
@@ -3799,7 +3838,6 @@ function fsUploadResumable(req, res, url, dirLex, dirReal) {
         if (!res.headersSent) fsJson(res, 403, { error: 'write-failed', detail: err.message })
         else try { res.destroy() } catch {}
       }
-    })
   })
 }
 
@@ -3828,17 +3866,15 @@ async function fsUploadControl(req, res, url) {
   const part = fsPartPath(checked.abs, name, session)
   const active = activeUploads.get(fsActiveKey(checked.abs, name, session))
   if (active) {
-    try { active.destroy() } catch {}
-    activeUploads.delete(fsActiveKey(checked.abs, name, session))
+    await active.cancelUpload()
+    return fsJson(res, 200, { ok: true, cancelled: true, session })
   }
-  // 等写流关闭后再删, 防止 write 把分片重新创建出来
-  setTimeout(() => {
+  // 无活动写流时同步删除，不留下可被新上传插入的延时窗口。
     let removed = false
     try { fs.unlinkSync(part); removed = true } catch (err) {
       if (err.code !== 'ENOENT') return fsJson(res, 403, { error: 'permission-denied', detail: err.message })
     }
     fsJson(res, 200, { ok: true, cancelled: true, removed, session })
-  }, 80)
 }
 
 async function serveFs(req, res, url) {
@@ -4164,7 +4200,7 @@ async function proxyLegacyApi(req, res, url) {
 
   let responseDone = false
   const upstreamReq = UPSTREAM_TRANSPORT.request({
-    hostname: UPSTREAM.hostname,
+    hostname: UPSTREAM_HOSTNAME,
     port: UPSTREAM_PORT,
     method: req.method,
     path: url.pathname + url.search,
@@ -4552,7 +4588,7 @@ server.on('upgrade', (req, socket, head) => {
     handshakeTimer = null
   }
   const upstreamReq = UPSTREAM_TRANSPORT.request({
-    hostname: UPSTREAM.hostname,
+    hostname: UPSTREAM_HOSTNAME,
     port: UPSTREAM_PORT,
     method: req.method,
     path: url.pathname + url.search,

package/index.mjs

@@ -12,6 +12,7 @@ import net from 'node:net'
 import { homedir, hostname, networkInterfaces } from 'node:os'
 import { dirname, extname, normalize, resolve } from 'node:path'
 import { fileURLToPath } from 'node:url'
+import { createPluginCenter } from './plugin-center.mjs'
 
 export const name = 'dsh-remote'
 export const inject = ['webServer', 'commands', 'agents', 'connection']
@@ -77,6 +78,14 @@ try {
 let dshListen = { host: '127.0.0.1', port: 3080 }
 let dshConnection = null
 
+// 监听通配地址不是连接目标；保留地址族，避免 IPv6-only 服务退回 IPv4。
+export function upstreamUrlForListener({ host, port }) {
+  let target = String(host || '127.0.0.1').replace(/^\[|\]$/g, '')
+  if (target === '0.0.0.0') target = '127.0.0.1'
+  if (net.isIP(target) === 6 && new URL(`http://[${target}]`).hostname === '[::]') target = '::1'
+  return `http://${net.isIP(target) === 6 ? `[${target}]` : target}:${port}`
+}
+
 function dshUpstreamCookieFile() {
   return process.env.DSH_REMOTE_DSH_COOKIE_FILE || `${homedir()}/.dsh-remote/dsh-upstream.cookie`
 }
@@ -88,7 +97,7 @@ function dshUpstreamCookieFile() {
  */
 async function refreshDshUpstreamCookie() {
   if (typeof dshConnection?.authenticatedUrl !== 'function') return false
-  const upstream = `http://${dshListen.host}:${dshListen.port}`
+  const upstream = upstreamUrlForListener(dshListen)
   try {
     const loginUrl = dshConnection.authenticatedUrl(upstream)
     const response = await fetch(loginUrl, {
@@ -254,11 +263,16 @@ function portInUse(port) {
 
 async function gatewayRunning() {
   try {
-    const res = await fetch(`${gatewayBase()}/health`, { signal: AbortSignal.timeout(3000) })
+    const base = gatewayBase()
+    const res = await fetch(`${base}/health`, { signal: AbortSignal.timeout(6000) })
     if (!res.ok) return { running: false }
     const data = await res.json().catch(() => ({}))
+    if (data.service !== 'dsh-remote' || !Number.isInteger(data.pid) || data.pid <= 1
+      || typeof data.version !== 'string' || typeof data.upstream !== 'string'
+      || !data.events?.mux || !data.events?.host) return { running: false }
     return {
       running: true,
+      base,
       pid: Number(data.pid) || 0,
       version: typeof data.version === 'string' ? data.version : '',
       upstream: typeof data.upstream === 'string' ? data.upstream : '',
@@ -274,15 +288,6 @@ async function gatewayRunning() {
 
 function gatewayPidFile() { return `${homedir()}/.dsh-remote/plugin-gateway.pid` }
 
-function readGatewayPid() {
-  try {
-    const pid = Number(readFileSync(gatewayPidFile(), 'utf8').trim())
-    return Number.isFinite(pid) && pid > 0 ? pid : 0
-  } catch {
-    return 0
-  }
-}
-
 function writeGatewayPid(pid) {
   try {
     mkdirSync(`${homedir()}/.dsh-remote`, { recursive: true })
@@ -298,19 +303,22 @@ function logGateway(msg) {
 }
 
 async function killGateway(health) {
-  const pid = (health && Number(health.pid)) || readGatewayPid()
-  if (!pid) return false
+  // PID 文件和公开健康响应不能证明进程归属；仅走网关认证关闭接口。
+  if (!health?.running || !Number.isInteger(health.pid) || health.pid <= 1) return false
+  const token = gatewayToken()
+  if (!token) return false
   try {
-    if (process.platform === 'win32') {
-      await runExit('taskkill', ['/F', '/PID', String(pid)])
-    } else {
-      process.kill(pid)
-    }
-    logGateway('已停止旧网关 PID=' + pid)
+    const res = await fetch(`${health.base || gatewayBase()}/admin/api/shutdown`, {
+      method: 'POST', headers: { authorization: `Bearer ${token}`, 'x-dsh-remote-client': 'admin' },
+      signal: AbortSignal.timeout(2000),
+    })
+    const body = await res.json().catch(() => ({}))
+    if (!res.ok || body.ok !== true || body.bye !== true) return false
+    logGateway('已请求旧网关认证关闭')
     await sleep(300)
     return true
   } catch (e) {
-    logGateway('停止旧网关失败 PID=' + pid + ' ' + (e?.message || String(e)))
+    logGateway('认证关闭旧网关失败: ' + (e?.message || String(e)))
     return false
   }
 }
@@ -337,7 +345,7 @@ function setGatewayEnabled(on) {
 
 /** 启动随插件分发的 gateway.cjs; 已运行则直接返回。 */
 async function startGateway() {
-  const upstream = `http://${dshListen.host}:${dshListen.port}`
+  const upstream = upstreamUrlForListener(dshListen)
   const health = await gatewayRunning()
   if (health.running) {
     setGatewayEnabled(true)
@@ -413,7 +421,7 @@ function ensureGateway() {
         const out = await startGateway()
         return !!out.running
       }
-      const upstream = `http://${dshListen.host}:${dshListen.port}`
+      const upstream = upstreamUrlForListener(dshListen)
       const oldUpstream = health.upstream || ''
       const oldVersion = health.version || '?'
       const versionMismatch = oldVersion !== version
@@ -421,7 +429,10 @@ function ensureGateway() {
       // 重启只能制造额外断线，网关应保持运行并通过 /health 暴露 degraded 状态。
       if (versionMismatch || (oldUpstream && oldUpstream !== upstream) || (!oldUpstream && upstream)) {
         logGateway(`网关需刷新: 版本 ${oldVersion} -> ${version}, 上游 ${oldUpstream || '?'} -> ${upstream}`)
-        await killGateway(health)
+        if (!await killGateway(health)) {
+          logGateway('拒绝自动重启: 无法通过认证关闭旧网关，请检查令牌或端口占用')
+          return false
+        }
         for (let i = 0; i < 10; i++) {
           if (!(await gatewayRunning()).running) break
           await sleep(200)
@@ -439,20 +450,10 @@ function ensureGateway() {
 
 /** 通过网关自身的 /admin/api/shutdown 优雅停止(不管它当初是谁拉起的); 并写入 off 防自愈拉起。 */
 async function stopGateway() {
-  const token = gatewayToken()
-  if (!token) return { ok: false, running: false, error: '找不到 ~/.dsh-remote/token, 无法认证网关' }
-  try {
-    const res = await fetch(`${gatewayBase()}/admin/api/shutdown`, {
-      method: 'POST',
-      headers: { authorization: `Bearer ${token}`, 'x-dsh-remote-client': 'admin' },
-      signal: AbortSignal.timeout(2000),
-    })
-    const json = await res.json().catch(() => ({}))
-    if (res.ok) setGatewayEnabled(false)
-    return { ok: res.ok, running: false, ...json }
-  } catch (e) {
-    return { ok: false, running: false, error: '网关不可达: ' + (e?.message || e) }
-  }
+  const health = await gatewayRunning()
+  if (!await killGateway(health)) return { ok: false, running: health.running, error: '无法确认网关身份或认证关闭失败，请检查令牌与端口占用' }
+  setGatewayEnabled(false)
+  return { ok: true, running: false, bye: true }
 }
 
 // ---------- 统计事件投递(实时 assistant/message + usage -> 网关 /stats/ingest) ----------
@@ -618,6 +619,17 @@ async function resolveFile(pathname) {
 
 async function serveStatic(req, res, ctx) {
   const pathname = new URL(req.url ?? '/', 'http://x').pathname
+  if (pathname.startsWith(`${MOUNT}/api/plugins/`)) {
+    if (!remoteCommandAuthorized(req)) return sendJson(res, 401, { ok: false, message: 'unauthorized' })
+    try {
+      const url = new URL(req.url, 'http://x')
+      const body = req.method === 'POST' ? JSON.parse((await readBody(req, 8192)) || '{}') : {}
+      const result = await pluginCenters.get(ctx).handle(req.method, pathname.slice(`${MOUNT}/api/plugins`.length), body, url.searchParams)
+      return sendJson(res, req.method === 'POST' ? 202 : 200, result)
+    } catch (error) {
+      return sendJson(res, error.status || (error instanceof SyntaxError ? 400 : 500), { ok: false, message: error.message || 'Plugin operation failed' })
+    }
+  }
 
   // 无尾斜杠的入口重定向到带斜杠版本:
   // 否则相对资源 styles.css/app.js 会按 URL 规则解析到上级路径 /styles.css,
@@ -750,6 +762,10 @@ async function serveStatic(req, res, ctx) {
       // 先在切换配置前读取旧端口上的健康状态；写入新端口后 gatewayRunning()
       // 只会探测新端口，否则旧网关会变成孤儿进程继续占用旧端口。
       const oldHealth = process.env.DSH_REMOTE_GATEWAY ? { running: false } : await gatewayRunning()
+      if (!process.env.DSH_REMOTE_GATEWAY_PORT && port !== oldPort && oldHealth.running && !await killGateway(oldHealth)) {
+        sendJson(res, 409, { ok: false, error: '无法通过认证关闭旧网关，端口配置未修改' })
+        return
+      }
       try {
         mkdirSync(`${homedir()}/.dsh-remote`, { recursive: true })
         writeFileSync(gatewayPortFile(), String(port) + '\n')
@@ -758,9 +774,6 @@ async function serveStatic(req, res, ctx) {
         return
       }
       const effectivePort = Number(readGatewayPort())
-      if (effectivePort !== oldPort) {
-        if (oldHealth.running) await killGateway(oldHealth)
-      }
       let running = (await gatewayRunning()).running
       if (gatewayAutostart()) {
         const startOut = await startGateway()
@@ -940,7 +953,9 @@ async function serveStatic(req, res, ctx) {
   createReadStream(abs).pipe(res)
 }
 
+const pluginCenters = new WeakMap()
 export function apply(ctx) {
+  pluginCenters.set(ctx, createPluginCenter(ctx))
   dshListen = { host: ctx.webServer.host, port: ctx.webServer.port }
   dshConnection = ctx.connection
   ctx.effect(() => ctx.webServer.register({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-plugin",
-  "version": "0.6.25",
+  "version": "0.7.0-rc.1",
   "description": "DSH Remote 官方 bundle 插件：DSH 左侧原生边栏入口 + 右侧抽屉内嵌管理控制台；内置网关随 DSH 自动启停(systemd 独立单元)，抽屉直显令牌与设备监控；网关提供 /fs/* 文件传输端点(列表/断点下载/上传)，配合 Android App 远程操控会话/审批/提问/goal 与文件互传(多服务器测速切换、聊天记录离线缓存)。",
   "type": "module",
   "main": "./index.mjs",
@@ -18,7 +18,8 @@
     "public",
     "apk",
     "cordis.patch.yml",
-    "*.md"
+    "*.md",
+    "plugin-center.mjs"
   ],
   "keywords": [
     "dsh-plugin",

package/plugin-center.mjs

@@ -0,0 +1,246 @@
+/* Profile-scoped plugin management. No shell input, dependencies or client-selected paths. */
+import { readFileSync, writeFileSync, renameSync, mkdirSync, existsSync, readdirSync, copyFileSync, unlinkSync, realpathSync } from 'node:fs'
+import { dirname, basename, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { createHash } from 'node:crypto'
+import { spawn } from 'node:child_process'
+
+const REGISTRY = 'https://registry.npmjs.org'
+const SELF = fileURLToPath(import.meta.url)
+const packagePattern = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*(?![\s\S])/
+const versionPattern = /^\d+\.\d+\.\d+(?:-[a-zA-Z0-9.-]+)?(?:\+[a-zA-Z0-9.-]+)?(?![\s\S])/
+const idPattern = /^[a-zA-Z0-9-]{16,80}(?![\s\S])/
+const read = path => JSON.parse(readFileSync(path, 'utf8'))
+function atomic(path, value) {
+  const tmp = path + '.' + process.pid + '.tmp'
+  writeFileSync(tmp, JSON.stringify(value, null, 2) + '\n', { mode: 0o600 })
+  renameSync(tmp, path)
+}
+const fail = (message, status = 400) => Object.assign(new Error(message), { status })
+const protectedPackage = name => name === 'dsh-remote-plugin' || name.startsWith('@deepseek-ai/')
+const revision = path => createHash('sha256').update(readFileSync(path)).digest('hex')
+
+export function detectProfile(ctx, cli = process.argv[1]) {
+  try {
+    const dir = realpathSync(fileURLToPath(ctx.root?.baseUrl || ctx.baseUrl))
+    const manifest = read(join(dir, 'package.json'))
+    if (basename(dirname(dir)) !== 'profiles' || !Array.isArray(manifest.dsh?.profile?.bundles)) return null
+    const name = basename(dir)
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9_-]*(?![\s\S])/.test(name)) return null
+    let root = dirname(realpathSync(cli))
+    let found = null
+    for (let i = 0; i < 5; i++, root = dirname(root)) {
+      try { if (read(join(root, 'package.json')).name === '@deepseek-ai/dsh') { found = join(root, 'lib', 'bin.js'); break } } catch {}
+    }
+    return { dir, name, home: dirname(dirname(dir)), cli: found && existsSync(found) ? found : null }
+  } catch { return null }
+}
+
+async function registryJson(path) {
+  const response = await fetch(REGISTRY + path, { signal: AbortSignal.timeout(20000), redirect: 'error' })
+  if (!response.ok) throw fail('npm registry: HTTP ' + response.status, 502)
+  let raw = '', bytes = 0
+  const decoder = new TextDecoder()
+  for await (const chunk of response.body) {
+    bytes += chunk.length
+    if (bytes > 8 * 1024 * 1024) throw fail('Registry response too large', 502)
+    raw += decoder.decode(chunk, { stream: true })
+  }
+  raw += decoder.decode()
+  return JSON.parse(raw)
+}
+
+export async function pluginDetails(name, version = 'latest') {
+  if (!packagePattern.test(name) || !(version === 'latest' || versionPattern.test(version))) throw fail('Invalid package or version')
+  const data = await registryJson('/' + encodeURIComponent(name) + '/' + encodeURIComponent(version))
+  if (data.name !== name || !versionPattern.test(data.version)) throw fail('Invalid registry metadata', 502)
+  return {
+    name, version: data.version, description: String(data.description || ''),
+    bundle: typeof data.dsh?.bundle?.patch === 'string',
+    license: typeof data.license === 'string' ? data.license : '',
+    homepage: typeof data.homepage === 'string' ? data.homepage : '',
+    engines: data.engines || {}, peers: data.peerDependencies || {},
+    protected: protectedPackage(name), source: REGISTRY,
+  }
+}
+
+export function createPluginCenter(ctx, options = {}) {
+  const profile = options.profile === undefined ? detectProfile(ctx) : options.profile
+  const details = options.details || pluginDetails
+  const launch = options.launch || (args => {
+    const child = spawn(process.execPath, [SELF, '--worker', ...args], { detached: true, windowsHide: true, stdio: 'ignore' })
+    return new Promise((resolveLaunch, reject) => {
+      child.once('error', reject)
+      child.once('spawn', () => { child.unref(); resolveLaunch() })
+    })
+  })
+  const manifestPath = profile && join(profile.dir, 'package.json')
+  const initialRevision = profile && revision(manifestPath)
+  const storage = profile && join(profile.dir, '.remote-plugin-center')
+  let submitting = false
+  async function inventory() {
+    let runtime = [], runtimeAvailable = false
+    const loader = ctx.get?.('loader') || ctx.loader
+    if (loader?.entries) {
+      runtime = [...loader.entries()].filter(entry => !entry.options.group).map(entry => ({
+        id: entry.id, name: entry.options.name, enabled: !entry.disabled,
+        phase: ['pending', 'loading', 'active', 'failed', 'disposed', 'unloading'][entry.fiber?.state] || 'inactive',
+      }))
+      runtimeAvailable = true
+    }
+    if (!profile) return { ok: true, writable: false, reason: '无法确认当前 DSH profile；仅显示运行状态。', runtime, runtimeAvailable, items: [], operations: [] }
+    const manifest = read(manifestPath)
+    const bundles = manifest.dsh.profile.bundles
+    const names = [...new Set([...bundles, ...Object.keys(manifest.dependencies || {})])]
+    const items = names.map(name => {
+      let pkg = null
+      if (packagePattern.test(name)) {
+        try { pkg = read(join(profile.dir, 'node_modules', ...name.split('/'), 'package.json')) } catch {}
+      }
+      return { name, version: pkg?.version || '', requested: manifest.dependencies?.[name] || '',
+        enabled: bundles.includes(name), bundle: !!pkg?.dsh?.bundle?.patch || bundles.includes(name),
+        managed: !!manifest.dependencies?.[name] && !protectedPackage(name),
+        description: pkg?.description || '' }
+    })
+    let operations = []
+    if (existsSync(storage)) operations = readdirSync(storage).filter(name => /^job-[a-zA-Z0-9-]+\.json$/.test(name)).map(name => {
+      try { return read(join(storage, name)) } catch { return null }
+    }).filter(Boolean).sort((a, b) => b.startedAt - a.startedAt).slice(0, 20).map(publicJob)
+    return { ok: true, profile: profile.name, revision: revision(manifestPath), writable: !!profile.cli,
+      reason: profile.cli ? '' : '当前启动方式没有可验证的 DSH CLI，管理操作不可用。',
+      pendingRestart: revision(manifestPath) !== initialRevision,
+      busy: submitting || existsSync(join(storage, 'lock.json')), items, runtime, runtimeAvailable, operations }
+  }
+  async function submit(body) {
+    if (!profile?.cli) throw fail('Current DSH profile is read-only', 409)
+    if (!body || typeof body !== 'object' || Array.isArray(body)) throw fail('Invalid operation')
+    const { id, action, name, version } = body
+    if (!idPattern.test(id || '') || !packagePattern.test(name || '') || !['install', 'update', 'remove', 'enable', 'disable'].includes(action)) throw fail('Invalid operation')
+    if (protectedPackage(name)) throw fail('核心插件与 Remote 自身请通过主机维护流程管理', 409)
+    mkdirSync(storage, { recursive: true, mode: 0o700 })
+    const jobPath = join(storage, 'job-' + id + '.json')
+    if (existsSync(jobPath)) {
+      const previous = read(jobPath)
+      if (previous.action !== action || previous.name !== name || previous.version !== (version || '')) throw fail('Operation id already used', 409)
+      return publicJob(previous)
+    }
+    if (submitting) throw fail('另一个插件操作正在准备中', 409)
+    submitting = true
+    try {
+      if (revision(manifestPath) !== body.revision) throw fail('插件列表已变化，请刷新后重试', 409)
+      const manifest = read(manifestPath)
+      const installed = Object.hasOwn(manifest.dependencies || {}, name)
+      if (action === 'install' && installed || action !== 'install' && !installed) throw fail('安装状态已变化，请刷新', 409)
+      if (['install', 'update'].includes(action)) {
+        if (!versionPattern.test(version || '')) throw fail('需要明确的版本号')
+        const metadata = await details(name, version)
+        if (!metadata.bundle) throw fail('该版本未声明 DSH bundle，不能作为插件安装')
+      }
+      if (['enable', 'disable'].includes(action)) {
+        const pkg = read(join(profile.dir, 'node_modules', ...name.split('/'), 'package.json'))
+        if (!pkg.dsh?.bundle?.patch) throw fail('该依赖不是 DSH bundle')
+      }
+      if (revision(manifestPath) !== body.revision) throw fail('插件配置已变化，请刷新', 409)
+      const lock = join(storage, 'lock.json')
+      try { writeFileSync(lock, JSON.stringify({ id }), { flag: 'wx', mode: 0o600 }) }
+      catch (error) { if (error.code === 'EEXIST') throw fail('已有插件任务运行中；请查看操作记录', 409); throw error }
+      const job = { id, action, name, version: version || '', revision: body.revision, profile: profile.name, phase: 'queued', startedAt: Date.now(), log: '', restartRequired: false }
+      try {
+        atomic(jobPath, job)
+        await launch([profile.dir, profile.cli, id])
+      } catch (error) {
+        job.phase = 'failed'; job.message = '无法启动插件任务'; job.endedAt = Date.now()
+        atomic(jobPath, job); unlinkSync(lock); throw error
+      }
+      return publicJob(job)
+    } finally { submitting = false }
+  }
+  async function handle(method, sub, body = {}, query = new URLSearchParams()) {
+    if (method === 'GET' && sub === '/state') return inventory()
+    if (method === 'GET' && sub === '/details') return { ok: true, item: await details(query.get('name') || '', query.get('version') || 'latest') }
+    if (method === 'GET' && sub === '/market') {
+      const q = String(query.get('q') || '').trim()
+      if (q.length > 80) throw fail('Search too long')
+      const offset = Number(query.get('offset') || 0)
+      if (!Number.isInteger(offset) || offset < 0 || offset > 1000) throw fail('Invalid offset')
+      const data = await registryJson('/-/v1/search?text=' + encodeURIComponent('keywords:dsh-plugin ' + q) + '&size=20&from=' + offset)
+      return { ok: true, source: REGISTRY, total: data.total || 0, items: (data.objects || []).map(({ package: p }) => ({ name: p.name, version: p.version, description: p.description || '' })) }
+    }
+    if (method === 'POST' && sub === '/operations') return { ok: true, operation: await submit(body) }
+    throw fail('Unknown plugin endpoint', 404)
+  }
+  return { handle, inventory, submit }
+}
+
+function publicJob(job) {
+  const { id, action, name, version, profile, phase, startedAt, endedAt, log, message, restartRequired } = job
+  return { id, action, name, version, profile, phase, startedAt, endedAt, log, message, restartRequired }
+}
+
+export async function runWorker(dir, cli, id, execute = runCli) {
+  if (!idPattern.test(id || '')) throw fail('Invalid worker id')
+  const storage = join(dir, '.remote-plugin-center')
+  const lock = join(storage, 'lock.json')
+  if (read(lock).id !== id) throw fail('Worker does not own lock')
+  const jobPath = join(storage, 'job-' + id + '.json')
+  const job = read(jobPath)
+  const manifestPath = join(dir, 'package.json')
+  const disabledPath = join(storage, 'disabled.json')
+  let disabled
+  const save = () => atomic(jobPath, job)
+  try {
+    job.phase = 'running'; save()
+    if (job.revision !== revision(manifestPath)) throw fail('任务开始前 profile 已变化，请刷新后重试')
+    disabled = new Set(existsSync(disabledPath) ? read(disabledPath) : [])
+    const backup = join(storage, 'backup-' + id)
+    mkdirSync(backup, { mode: 0o700 })
+    for (const name of ['package.json', 'pnpm-lock.yaml', 'pnpm-workspace.yaml', 'cordis.patch.yml']) {
+      if (existsSync(join(dir, name))) copyFileSync(join(dir, name), join(backup, name))
+    }
+    if (existsSync(disabledPath)) copyFileSync(disabledPath, join(backup, 'disabled.json'))
+    if (['install', 'update', 'remove'].includes(job.action)) {
+      const args = job.action === 'remove' ? ['remove', job.name, '--ignore-scripts'] : ['add', job.name + '@' + job.version, '--save-exact', '--ignore-scripts', '--registry=' + REGISTRY]
+      await execute(cli, ['plugin', '--profile', basename(dir), ...args], dir, chunk => {
+        job.log = (job.log + chunk.replace(/\x1b\[[0-9;]*m/g, '').replace(/(token|password|authorization)\s*[=:]\s*\S+/gi, '$1=[redacted]')).slice(-12000)
+        save()
+      })
+    }
+    if (job.action === 'disable') disabled.add(job.name)
+    if (job.action === 'enable' || job.action === 'remove') disabled.delete(job.name)
+    const manifest = read(manifestPath)
+    manifest.dsh.profile.bundles = manifest.dsh.profile.bundles.filter(name => !disabled.has(name))
+    if (job.action === 'enable' && !manifest.dsh.profile.bundles.includes(job.name)) manifest.dsh.profile.bundles.push(job.name)
+    atomic(manifestPath, manifest)
+    atomic(disabledPath, [...disabled])
+    const installed = Object.hasOwn(manifest.dependencies || {}, job.name)
+    if (job.action === 'remove' ? installed : !installed) throw fail('操作后依赖状态与预期不符')
+    if (['install', 'update'].includes(job.action)) {
+      const pkg = read(join(dir, 'node_modules', ...job.name.split('/'), 'package.json'))
+      if (pkg.version !== job.version || !pkg.dsh?.bundle?.patch) throw fail('安装后的包版本或 bundle 校验失败')
+    }
+    job.phase = 'complete'; job.restartRequired = true
+    job.message = '配置已保存；重启 DSH 后生效。安装脚本未执行。'
+  } catch (error) {
+    job.phase = 'failed'; job.message = String(error.message || error)
+    // A failed package manager may have changed files. Never claim rollback.
+    job.restartRequired = true
+  } finally {
+    job.endedAt = Date.now(); save()
+    if (read(lock).id === id) unlinkSync(lock)
+  }
+}
+
+function runCli(cli, args, dir, output) {
+  return new Promise((resolveRun, reject) => {
+    const env = { ...process.env, DSH_HOME: dirname(dirname(dir)), npm_config_ignore_scripts: 'true' }
+    const child = spawn(process.execPath, [cli, ...args], { cwd: dir, env, windowsHide: true, stdio: ['ignore', 'pipe', 'pipe'] })
+    child.stdout.on('data', chunk => output(chunk.toString()))
+    child.stderr.on('data', chunk => output(chunk.toString()))
+    child.once('error', reject)
+    child.once('close', code => code === 0 ? resolveRun() : reject(fail('DSH 插件命令失败，退出码 ' + code)))
+  })
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === SELF && process.argv[2] === '--worker') {
+  await runWorker(process.argv[3], process.argv[4], process.argv[5])
+}

package/public/app.js

@@ -7305,3 +7305,14 @@ async function boot() {
 }
 
 document.addEventListener('DOMContentLoaded', boot)
+
+// Capture the connection so switching servers cannot redirect a plugin mutation.
+document.getElementById('btn-plugin-center')?.addEventListener('click', () => {
+  const server = state.server || ''
+  const token = state.token
+  window.DshPluginCenter.open({
+    url: path => server + path,
+    headers: { authorization: 'Bearer ' + token, 'x-dsh-remote-client': 'web', ...clientIdHeaders() },
+    valid: () => (state.server || '') === server && state.token === token,
+  })
+})

package/public/desktop/desktop.html

@@ -7,6 +7,7 @@
   <script>/* 首帧前应用皮肤 */ (function(){try{var t=localStorage.getItem('dshTheme');if(t!=='default'&&t!=='dark'&&t!=='light'&&t!=='neutral'&&t!=='mono'){t=window.matchMedia('(prefers-color-scheme: light)').matches?'light':'default'}document.documentElement.setAttribute('data-theme',t)}catch(e){}})()</script>
   <link rel="stylesheet" href="../theme-vars.css">
   <link rel="stylesheet" href="desktop.css">
+  <link rel="stylesheet" href="../plugin-center.css">
 </head>
 <body>
   <div class="ds-app" id="ds-app">
@@ -218,6 +219,7 @@
         <section id="view-settings" class="ds-view hidden">
           <div class="ds-section-label" data-i18n="ds.settings">设置</div>
           <div id="settings-home">
+          <button type="button" id="btn-plugin-center" class="ds-setting-row ds-setting-link"><span>插件中心 · 已安装 / 发现插件</span><span>›</span></button>
             <div class="ds-settings">
               <button type="button" class="ds-setting-row ds-setting-link" data-settings-group="general">
                 <div><div class="ds-setting-name" data-i18n="ds.groupGeneral">通用</div><div class="ds-setting-desc" data-i18n="ds.groupGeneralDesc">工具调用、预设提示词</div></div>
@@ -709,6 +711,7 @@
   <script src="../vendor/gsap/gsap.min.js"></script>
   <script src="../motion.js"></script>
   <script type="module" src="../morphicons-init.js"></script>
+  <script src="../plugin-center.js"></script>
   <script src="desktop.js"></script>
 </body>
 </html>

package/public/desktop/desktop.js

@@ -3518,3 +3518,14 @@ async function start() {
 }
 
 start()
+
+// Capture the connection so switching servers cannot redirect a plugin mutation.
+document.getElementById('btn-plugin-center')?.addEventListener('click', () => {
+  const server = state.server || ''
+  const token = state.token
+  window.DshPluginCenter.open({
+    url: path => server + path,
+    headers: { authorization: 'Bearer ' + token, 'x-dsh-remote-client': 'web', ...clientIdHeaders() },
+    valid: () => (state.server || '') === server && state.token === token,
+  })
+})

package/public/genui.css

@@ -1,2 +1,8 @@
 .genui{margin:14px 0;padding:14px;border:1px solid #8884;border-radius:12px;line-height:1.65;overflow:hidden;color:inherit;background:#88808;font-size:14px}
 .genui *{box-sizing:border-box}.genui h1,.genui h2,.genui h3,.genui h4,.genui p{margin:0 0 10px}.genui-caption{font-size:11px;opacity:.65;margin-bottom:12px}.genui-row{display:flex;flex-wrap:wrap;gap:12px}.genui-row>*{flex:1;min-width:120px}.genui-col{display:grid;gap:12px}.genui-grid{display:grid;grid-template-columns:repeat(var(--genui-cols,2),minmax(0,1fr));gap:12px}.genui-card{border:1px solid #8884;border-radius:8px;padding:12px;min-width:0}.genui-card>h4{font-size:16px}.genui-stat{display:flex;flex-direction:column;min-width:0;padding:8px 0}.genui-stat strong{font-size:28px;line-height:1.25;font-variant-numeric:tabular-nums;overflow-wrap:anywhere}.genui-stat small,.genui-stat span{opacity:.75}.genui-badge{display:inline-block;padding:2px 9px;border:1px solid #8885;border-radius:20px}.genui progress{display:block;width:100%;accent-color:#2563eb;height:10px;margin:7px 0}.genui-spacer{height:12px}.genui-callout{border-left:3px solid #2563eb;padding:10px 12px;background:#2563eb12}.genui-chart{margin:10px 0}.genui-chart figcaption{font-weight:600}.genui-chart svg{display:block;width:100%;height:auto;max-height:520px}.genui-chart svg text{fill:currentColor;font:11px system-ui}.genui-gridline{stroke:currentColor;opacity:.15;fill:none}.genui-legend{display:flex;flex-wrap:wrap;gap:7px 14px;font-size:12px}.genui-legend i{display:inline-block;width:9px;height:9px;border-radius:2px;margin-right:5px}.genui-scroll{overflow:auto;max-height:420px}.genui table{width:100%;border-collapse:collapse;font-size:12px}.genui td,.genui th{text-align:left;padding:7px;border-bottom:1px solid #8884;white-space:nowrap}.genui-source{margin-top:12px}.genui summary{cursor:pointer;font-size:12px}.genui pre{max-height:320px;overflow:auto;white-space:pre-wrap;word-break:break-word}.genui-unsupported{border-left:2px solid #d97706;padding:8px;margin:8px 0}.genui-html{display:block;width:100%;height:440px;border:1px solid #8884;border-radius:7px;background:white}.genui dl{display:grid;grid-template-columns:auto 1fr;gap:6px 12px}.genui dd{margin:0}.genui li{margin:4px 0}@media(max-width:520px){.genui{padding:10px}.genui-grid{grid-template-columns:repeat(2,minmax(0,1fr))}.genui-stat strong{font-size:23px}.genui-html{height:380px}}
+.genui-tabs>[role=tablist]{display:flex;gap:5px;overflow-x:auto;margin-bottom:12px;border-bottom:1px solid #8884;padding-bottom:6px}
+.genui button{font:inherit;color:inherit;background:transparent;border:1px solid #8884;border-radius:6px;padding:5px 9px;cursor:pointer}
+.genui button:focus-visible{outline:2px solid #2563eb;outline-offset:2px}.genui [role=tab][aria-selected=true]{background:#2563eb20;border-color:#2563eb}.genui [hidden]{display:none!important}
+.genui .genui-spark{display:block;width:120px;height:30px;max-width:100%;color:#2563eb}.genui-ring{display:inline-flex;gap:8px;align-items:center}.genui-ring svg{width:40px;height:40px;flex:none;color:#2563eb}
+.genui-positive{color:#059669}.genui-negative{color:#dc2626}.genui-table tfoot{font-weight:600}.genui-table th[aria-sort=ascending] button::after{content:' ↑'}.genui-table th[aria-sort=descending] button::after{content:' ↓'}
+.genui-tree{list-style:none;padding-left:16px;border-left:1px solid #8884}.genui-diff{margin:10px 0}.genui-diff section{min-width:0}.genui-diff pre{white-space:pre;overflow:auto}.genui-diff .genui-grid{gap:12px;margin-top:8px}@media(max-width:520px){.genui-diff .genui-grid{grid-template-columns:1fr}}

package/public/genui.js

@@ -11,13 +11,32 @@
   const color = (value, i) => /^#[0-9a-f]{3}(?:[0-9a-f]{3})?$/i.test(value || '') ? value : palette[i % palette.length]
   const raw = value => '<pre><code>' + esc(typeof value === 'string' ? value : JSON.stringify(value, null, 2)) + '</code></pre>'
   const details = value => '<details class="genui-source"><summary>JSON / 源码</summary>' + raw(value) + '</details>'
+  let uid = 0
+  function spark(values) {
+    if (!Array.isArray(values) || values.length < 2 || values.length > 100 || !values.every(number)) return ''
+    const low = Math.min(...values), span = Math.max(...values) - low || 1
+    return '<svg class="genui-spark" viewBox="0 0 120 30" role="img" aria-label="趋势"><title>' + esc(values.join(', ')) + '</title><polyline fill="none" stroke="currentColor" stroke-width="2" points="' + values.map((v, i) => (2 + i * 116 / (values.length - 1)) + ',' + (28 - (v - low) / span * 26)).join(' ') + '"/></svg>'
+  }
+  function ring(value, label) {
+    const pct = Math.max(0, Math.min(100, value))
+    return '<span class="genui-ring"><svg viewBox="0 0 40 40" aria-hidden="true"><circle cx="20" cy="20" r="16" fill="none" stroke="currentColor" opacity=".15" stroke-width="4"/><circle cx="20" cy="20" r="16" fill="none" stroke="currentColor" stroke-width="4" pathLength="100" stroke-dasharray="' + pct + ' 100" transform="rotate(-90 20 20)"/></svg><span>' + esc(label) + '</span></span>'
+  }
+  function numeric(value) {
+    if (typeof value === 'number') return Number.isFinite(value) ? value : NaN
+    let s = String(value ?? '').trim().replace(/^[¥$€£]/, '').replace(/%$/, '')
+    if (!s) return NaN
+    let factor = 1
+    const unit = s.slice(-1).toLowerCase()
+    if ('kmb万亿'.includes(unit)) { factor = ({ k: 1e3, m: 1e6, b: 1e9, 万: 1e4, 亿: 1e8 })[unit]; s = s.slice(0, -1) }
+    return s.trim() ? Number(s.replace(/[,，\s]/g, '')) * factor : NaN
+  }
   function unsupported(node, reason) {
     return '<div class="genui-unsupported">暂不支持 / Unsupported: ' + esc(reason || node?.type || 'spec') + details(node) + '</div>'
   }
 
   function chart(node) {
     const kind = node.kind || 'bars'
-    if (!['bars', 'line', 'donut'].includes(kind) || node.stacked || node.filter || node.sortField) return unsupported(node, 'chart options')
+    if (!['bars', 'line', 'donut'].includes(kind) || (node.stacked && kind !== 'bars') || node.filter || node.sortField) return unsupported(node, 'chart options')
     const series = array(node.series).length ? node.series : [{ label: node.title || '', data: node.data }]
     if (series.length > 6 || (kind === 'donut' && series.length !== 1)) return unsupported(node, 'chart series')
     if (series.some(s => !s || !Array.isArray(s.data) || !s.data.length || s.data.length > 100 || s.data.some(d => !d || !number(d.value)))) return unsupported(node, 'chart data')
@@ -40,6 +59,11 @@
       svg += '<div class="genui-legend">' + data.map((d, i) => '<span><i style="background:' + color(d.color || array(node.palette)[i], i) + '"></i>' + esc(d.label) + ' · ' + (d.value / total * 100).toFixed(1) + '%</span>').join('') + '</div>'
     } else {
       const values = series.flatMap(s => s.data.map(d => d.value))
+      const stacked = node.stacked === true && kind === 'bars'
+      if (stacked) data.forEach((_, i) => {
+        values.push(series.reduce((sum, s) => sum + Math.max(0, s.data[i].value), 0))
+        values.push(series.reduce((sum, s) => sum + Math.min(0, s.data[i].value), 0))
+      })
       let min = Math.min(0, ...values), max = Math.max(0, ...values)
       if (min === max) max = min + 1
       const horizontal = kind === 'bars' && node.horizontal === true
@@ -57,14 +81,15 @@
       series.forEach((s, si) => {
         const points = []
         s.data.forEach((d, i) => {
-          const center = (horizontal ? top : left) + step * (i + 0.5), pos = scale(d.value)
+          const base = stacked ? series.slice(0, si).reduce((sum, prev) => sum + (d.value >= 0 ? Math.max(0, prev.data[i].value) : Math.min(0, prev.data[i].value)), 0) : 0
+          const center = (horizontal ? top : left) + step * (i + 0.5), pos = scale(base + d.value)
           const hint = '<title>' + esc((s.label ? s.label + ' · ' : '') + d.label + ': ' + d.value) + '</title>'
           if (kind === 'line') {
             points.push(center + ',' + pos)
             svg += '<circle cx="' + center + '" cy="' + pos + '" r="3" fill="' + colors[si] + '">' + hint + '</circle>'
           } else {
-            const size = step * 0.7 / series.length, lane = center - step * 0.35 + si * size
-            const zero = scale(0)
+            const size = step * 0.7 / (stacked ? 1 : series.length), lane = center - step * 0.35 + (stacked ? 0 : si * size)
+            const zero = scale(base)
             svg += '<rect x="' + (horizontal ? Math.min(zero, pos) : lane) + '" y="' + (horizontal ? lane : Math.min(zero, pos)) + '" width="' + (horizontal ? Math.abs(zero - pos) : size) + '" height="' + (horizontal ? size : Math.abs(zero - pos)) + '" fill="' + (series.length === 1 ? color(d.color || array(node.palette)[i], i) : colors[si]) + '">' + hint + '</rect>'
           }
         })
@@ -85,9 +110,38 @@
     if (!spec || typeof spec !== 'object') throw Error('Invalid spec')
     let count = 0
     function nodes(items, depth) { return array(items).map(n => node(n, depth)).join('') }
+    function fileTree(items, depth) {
+      if (depth > 12 || (count += array(items).length) > 240) throw Error('Component limit')
+      return '<ul class="genui-tree">' + array(items).map(v => !v || typeof v !== 'object' ? '<li>' + esc(v) + '</li>' : '<li>' + (v.type === 'dir' || Array.isArray(v.children) ? '<details open><summary>' + esc(v.name) + '</summary>' + fileTree(v.children, depth + 1) + '</details>' : '<span>' + esc(v.name) + '</span>') + '</li>').join('') + '</ul>'
+    }
+    function table(n, depth) {
+      const columns = array(n.columns), rows = array(n.rows), types = array(n.types)
+      if (!columns.length || rows.some(r => !Array.isArray(r)) || types.some(t => !['text', 'num', 'delta', 'bar', 'badge', 'spark', 'ring', 'index'].includes(t))) return unsupported(n, 'table shape/types')
+      const cell = (v, type, i) => {
+        const num = numeric(v)
+        if (type === 'index') return String(i + 1)
+        if (type === 'spark') return spark(String(v).split(/[\s,;]+/).map(Number)) || esc(v)
+        if (type === 'ring' && Number.isFinite(num)) return ring(num, v)
+        if (type === 'bar' && Number.isFinite(num)) return '<span>' + esc(v) + '</span><progress max="100" value="' + Math.max(0, Math.min(100, num)) + '"></progress>'
+        if (type === 'badge') return '<span class="genui-badge">' + esc(v) + '</span>'
+        if (type === 'delta') return '<span class="genui-' + (num > 0 ? 'positive' : num < 0 ? 'negative' : 'neutral') + '">' + esc(v) + '</span>'
+        return esc(v)
+      }
+      let foot = ''
+      if (n.total) foot = '<tfoot><tr>' + columns.map((_, j) => {
+        const values = rows.map(r => numeric(r[j]))
+        return '<td>' + (j === 0 ? '合计 / Total' : values.length && values.every(Number.isFinite) && !['index', 'spark', 'ring', 'bar'].includes(types[j]) ? esc(Number(values.reduce((a, b) => a + b, 0).toPrecision(12))) : '') + '</td>'
+      }).join('') + '</tr></tfoot>'
+      return '<div class="genui-scroll"><table class="genui-table"><thead><tr>' + columns.map((v, j) => '<th aria-sort="none"><button type="button" data-genui-sort="' + j + '">' + esc(v) + ' ↕</button></th>').join('') + '</tr></thead>' + rows.map((r, i) => '<tbody data-genui-order="' + i + '"><tr>' + columns.map((_, j) => '<td data-genui-value="' + esc(r[j]) + '">' + cell(r[j], types[j], i) + '</td>').join('') + '</tr>' + (array(n.details?.[i]).length ? '<tr><td colspan="' + columns.length + '"><details><summary>详情 / Details</summary>' + nodes(n.details[i], depth + 1) + '</details></td></tr>' : '') + '</tbody>').join('') + foot + '</table></div>' + (n.export ? '<details><summary>导出数据 / CSV</summary>' + raw([columns, ...rows].map(r => r.map(v => '"' + String(v ?? '').replace(/"/g, '""') + '"').join(',')).join('\n')) + '</details>' : '')
+    }
     function node(n, depth) {
       if (++count > 240 || depth > 12) throw Error('Component limit')
       if (!n || typeof n !== 'object' || Array.isArray(n)) return unsupported(n)
+      // 插件公开的常用字段别名。
+      n = { ...n }
+      if (n.type === 'text' && n.content === undefined) n.content = n.text
+      if (n.type === 'table') { n.columns ??= n.headers; n.rows ??= n.data }
+      if (n.type === 'card') { n.title ??= n.label; n.items ??= n.content }
       const type = n.type
       // Reject data-transforming options rather than silently displaying different data.
       if (n.filter || n.sortField) return unsupported(n, type + ' filter/sort')
@@ -98,21 +152,33 @@
         return '<section class="genui-' + type + '"' + (type === 'grid' ? ' style="--genui-cols:' + cols + '"' : '') + '>' + (n.title ? '<h4>' + esc(n.title) + '</h4>' : '') + nodes(n.items, depth + 1) + '</section>'
       }
       if (type === 'text') { const tag = ['h1', 'h2', 'h3'].includes(n.size) ? n.size : 'p'; return '<' + tag + '>' + esc(n.content) + '</' + tag + '>' }
-      if (type === 'hero') return '<div class="genui-stat"><small>' + esc(n.label) + '</small><strong>' + esc(n.value) + '</strong><h4>' + esc(n.title) + '</h4><span>' + esc(n.subtitle) + '</span><span>' + esc(n.delta) + '</span></div>'
-      if (type === 'stat') return '<div class="genui-stat"><small>' + esc(n.label) + '</small><strong>' + esc(n.value) + '</strong><span>' + esc(n.delta) + '</span></div>'
+      if (type === 'hero') return '<div class="genui-stat"><small>' + esc(n.label) + '</small><strong>' + esc(n.value) + '</strong><h4>' + esc(n.title) + '</h4><span>' + esc(n.subtitle) + '</span><span>' + esc(n.delta) + '</span>' + spark(n.spark) + '</div>'
+      if (type === 'stat') return '<div class="genui-stat"><small>' + esc(n.label) + '</small><strong>' + esc(n.value) + '</strong><span>' + esc(n.delta) + '</span>' + spark(n.spark) + '</div>'
       if (type === 'badge') return '<span class="genui-badge">' + esc(n.label) + '</span>'
       if (type === 'divider') return '<hr>'
       if (type === 'spacer') return '<div class="genui-spacer"></div>'
       if (type === 'progress' && !number(n.value)) return unsupported(n, 'progress value')
+      if (type === 'progress' && n.variant === 'ring') return '<div>' + esc(n.label) + ring(n.value, n.valueLabel || n.value + '%') + (number(n.target) ? '<small>目标 / Target: ' + esc(n.target) + '%</small>' : '') + '</div>'
       if (type === 'progress') return '<div>' + esc(n.label) + '<progress max="100" value="' + Math.max(0, Math.min(100, Number(n.value) || 0)) + '"></progress><small>' + esc(n.valueLabel || String(n.value || 0) + '%') + '</small>' + (number(n.target) ? '<small> · 目标 / Target: ' + esc(n.target) + '%</small>' : '') + '</div>'
       if (type === 'callout') return '<aside class="genui-callout"><strong>' + esc(n.title) + '</strong><p>' + esc(n.content) + '</p></aside>'
       if (type === 'code' || type === 'json') return raw(type === 'code' ? n.code : n.value)
       if (type === 'list' || type === 'timeline' || type === 'steps') return '<ul>' + array(n.items || n.steps).slice(0, 100).map(v => '<li>' + (v && typeof v === 'object' ? (v.type ? node(v, depth + 1) : '<strong>' + esc(v.title) + '</strong> ' + esc(v.desc) + ' ' + esc(v.time)) : esc(v)) + '</li>').join('') + '</ul>'
       if (type === 'keyvalue') return '<dl>' + array(n.pairs).slice(0, 100).map(v => '<dt>' + esc(v?.key) + '</dt><dd>' + esc(v?.value) + '</dd>').join('') + '</dl>'
-      if (type === 'table') return '<div class="genui-scroll"><table><thead><tr>' + array(n.columns).slice(0, 30).map(v => '<th>' + esc(v) + '</th>').join('') + '</tr></thead><tbody>' + array(n.rows).slice(0, 200).map(row => '<tr>' + array(row).slice(0, 30).map(v => '<td>' + esc(v) + '</td>').join('') + '</tr>').join('') + '</tbody></table></div>'
+      if (type === 'table') return table(n, depth)
+      if (type === 'file-tree') return fileTree(n.items, depth + 1)
+      if (type === 'breadcrumb') return '<nav aria-label="路径">' + array(n.items).map(esc).join(' › ') + '</nav>'
+      if (type === 'avatar') return '<span class="genui-badge">' + esc(n.name) + '</span>'
+      if (type === 'diff') {
+        if (array(n.diffs).length > 30) return unsupported(n, 'diff size limit')
+        return array(n.diffs).map(d => '<details class="genui-diff" open><summary>' + esc(d?.path) + '</summary><div class="genui-grid">' + (d?.oldText == null ? '<section>新增文件 / New file</section>' : '<section><strong>修改前 / Before</strong>' + raw(d.oldText) + '</section>') + '<section><strong>修改后 / After</strong>' + raw(d?.newText) + '</section></div></details>').join('')
+      }
       if (type === 'chart') return chart(n)
       if (type === 'echart' && !n.option && ['bar', 'line', 'pie'].includes(n.preset)) return '<small>ECharts 基础数据预览 / Basic preview</small>' + chart({ ...n, type: 'chart', kind: { bar: 'bars', line: 'line', pie: 'donut' }[n.preset] })
-      if (type === 'accordion' || type === 'tabs') return array(n.tabs || n.items).slice(0, 30).map(v => '<details><summary>' + esc(v?.label || v?.title) + '</summary>' + nodes(v?.items, depth + 1) + '</details>').join('')
+      if (type === 'tabs') {
+        const id = 'genui-tabs-' + (++uid), tabs = array(n.tabs).slice(0, 30)
+        return '<div class="genui-tabs"><div role="tablist" aria-label="' + esc(n.title || '标签页') + '">' + tabs.map((v, i) => '<button type="button" role="tab" id="' + id + '-tab-' + i + '" aria-controls="' + id + '-panel-' + i + '" aria-selected="' + (i === 0) + '" tabindex="' + (i === 0 ? 0 : -1) + '" data-genui-tab="' + i + '">' + esc(v?.label) + '</button>').join('') + '</div>' + tabs.map((v, i) => '<div role="tabpanel" id="' + id + '-panel-' + i + '" aria-labelledby="' + id + '-tab-' + i + '"' + (i ? ' hidden' : '') + '>' + nodes(v?.items || v?.content, depth + 1) + '</div>').join('') + '</div>'
+      }
+      if (type === 'accordion') return array(n.items).slice(0, 30).map(v => '<details><summary>' + esc(v?.title) + '</summary>' + nodes(v?.items, depth + 1) + '</details>').join('')
       return unsupported(n)
     }
     const body = Array.isArray(spec) ? nodes(spec, 0) : spec.type ? node(spec, 0) : nodes(spec.items, 0)
@@ -140,5 +206,49 @@
     const srcDoc = '<!doctype html><html><head><meta http-equiv="Content-Security-Policy" content="' + policy + '"><meta name="viewport" content="width=device-width,initial-scale=1"><style>body{font:14px/1.6 system-ui;margin:16px;overflow-wrap:anywhere}table{border-collapse:collapse}td,th{padding:6px;border:1px solid #ccc}pre{white-space:pre-wrap}*{max-width:100%;box-sizing:border-box}</style></head><body>' + template.innerHTML + '</body></html>'
     return '<section class="genui"><div class="genui-caption">HTML · 只读预览（脚本及外部资源已禁用）</div><iframe class="genui-html" sandbox="" referrerpolicy="no-referrer" title="HTML preview" srcdoc="' + esc(srcDoc) + '"></iframe></section>'
   }
-  return { render, html }
+  function activateTab(button, focus = false) {
+    const list = button.parentElement, tabs = Array.from(list.children)
+    tabs.forEach(tab => {
+      const active = tab === button
+      tab.setAttribute('aria-selected', String(active)); tab.tabIndex = active ? 0 : -1
+      const panel = Array.from(list.parentElement.children).find(p => p.id === tab.getAttribute('aria-controls'))
+      if (panel) panel.hidden = !active
+    })
+    if (focus) button.focus()
+  }
+  function compareCells(a, b) {
+    const x = numeric(a), y = numeric(b)
+    if (Number.isFinite(x) && Number.isFinite(y)) return x - y
+    if (Number.isFinite(x)) return -1
+    if (Number.isFinite(y)) return 1
+    return String(a ?? '').localeCompare(String(b ?? ''))
+  }
+  if (typeof document !== 'undefined') {
+    document.addEventListener('click', event => {
+      const button = event.target.closest?.('.genui button')
+      if (!button) return
+      if (button.hasAttribute('data-genui-tab')) activateTab(button)
+      if (button.hasAttribute('data-genui-sort')) {
+        const table = button.closest('table'), th = button.parentElement
+        const col = Number(button.dataset.genuiSort)
+        const previous = th.getAttribute('aria-sort'), direction = previous === 'ascending' ? 'descending' : previous === 'descending' ? 'none' : 'ascending'
+        Array.from(table.tHead.rows[0].cells).forEach(cell => cell.setAttribute('aria-sort', 'none'))
+        th.setAttribute('aria-sort', direction)
+        Array.from(table.tBodies).sort((a, b) => {
+          const order = Number(a.dataset.genuiOrder) - Number(b.dataset.genuiOrder)
+          if (direction === 'none') return order
+          const compared = compareCells(a.rows[0].cells[col]?.dataset.genuiValue, b.rows[0].cells[col]?.dataset.genuiValue)
+          return (direction === 'ascending' ? compared : -compared) || order
+        }).forEach(body => table.insertBefore(body, table.tFoot))
+      }
+    })
+    document.addEventListener('keydown', event => {
+      const button = event.target.closest?.('.genui [data-genui-tab]')
+      if (!button || !['ArrowLeft', 'ArrowRight', 'Home', 'End'].includes(event.key)) return
+      const tabs = Array.from(button.parentElement.children), i = tabs.indexOf(button)
+      const next = event.key === 'Home' ? 0 : event.key === 'End' ? tabs.length - 1 : (i + (event.key === 'ArrowRight' ? 1 : -1) + tabs.length) % tabs.length
+      event.preventDefault(); activateTab(tabs[next], true)
+    })
+  }
+  return { render, html, compareCells }
 })

package/public/index.html

@@ -13,6 +13,7 @@
   <link rel="icon" href="icon.svg" type="image/svg+xml">
   <link rel="stylesheet" href="styles.css">
   <link rel="stylesheet" href="genui.css">
+  <link rel="stylesheet" href="plugin-center.css">
 </head>
 <body>
   <header class="topbar">
@@ -293,6 +294,7 @@
     <!-- 设置 -->
     <section id="view-settings" class="view hidden">
       <div id="settings-home">
+          <button type="button" id="btn-plugin-center" class="setting-row setting-link"><span>插件中心 · 已安装 / 发现插件</span></button>
         <div class="settings-group">
           <button type="button" class="setting-row setting-link" data-settings-group="general">
             <div><div class="setting-name" data-i18n="settings.groupGeneral">通用</div><div class="setting-desc" data-i18n="settings.groupGeneralDesc">显示工具调用、预设提示词</div></div>
@@ -1379,6 +1381,7 @@
   <script src="vendor/gsap/gsap.min.js"></script>
   <script src="motion.js"></script>
   <script type="module" src="morphicons-init.js"></script>
+  <script src="plugin-center.js"></script>
   <script src="app.js"></script>
 </body>
 </html>

package/public/plugin-center.css

@@ -0,0 +1 @@
+.pc-dialog{width:min(860px,94vw);max-height:88dvh;box-sizing:border-box;border:1px solid #7775;border-radius:18px;background:var(--dsr-panel,#171b24);color:var(--dsr-text,#eee);padding:22px;overflow:auto}.pc-dialog::backdrop{background:#0009}.pc-heading,.pc-actions{display:flex;align-items:center;gap:10px;flex-wrap:wrap}.pc-heading{justify-content:space-between}.pc-dialog h2,.pc-dialog h3{margin:0}.pc-dialog h3{font-size:16px;overflow-wrap:anywhere}.pc-dialog p{line-height:1.6;overflow-wrap:anywhere}.pc-dialog button,.pc-dialog input{font:inherit;border:1px solid #8886;border-radius:9px;padding:9px 12px;background:transparent;color:inherit}.pc-dialog button{cursor:pointer}.pc-dialog button:disabled{opacity:.4;cursor:not-allowed}.pc-dialog button:focus-visible,.pc-dialog input:focus-visible{outline:2px solid #6e9dff;outline-offset:2px}.pc-dialog input{max-width:100%;box-sizing:border-box;min-width:0}.pc-market-tools:not([hidden]){display:flex;gap:8px;flex-wrap:wrap;margin-top:14px}.pc-search{flex:1}.pc-card{border:1px solid #8884;border-radius:12px;padding:16px;margin:12px 0}.pc-card>button,.pc-card>input,.pc-card>a{margin:8px 8px 0 0}.pc-dialog a{color:var(--dsr-accent-strong)}.pc-dialog details{padding:10px 0}.pc-dialog summary{cursor:pointer;overflow-wrap:anywhere}.pc-dialog pre{white-space:pre-wrap;overflow-wrap:anywhere;max-height:240px;overflow:auto;font-size:12px}.pc-message{color:var(--dsr-text)}.pc-profile{font-weight:600}.pc-dialog small{opacity:.7}@media(max-width:520px){.pc-dialog{padding:15px}.pc-dialog button{min-height:42px}.pc-actions>*{flex:1}.pc-card{padding:12px}}

package/public/plugin-center.js

@@ -0,0 +1,181 @@
+/* Shared mobile/desktop plugin center. Credentials stay in the parent connection. */
+'use strict';
+window.DshPluginCenter = (() => {
+  let dialog, connection, snapshot, timer, generation = 0, pending = false, tab = 'installed', offset = 0, searchSequence = 0, detailSequence = 0
+  let renderedInstalled = '', renderedJobs = ''
+  const labels = { install: '安装', update: '更新', remove: '卸载', enable: '启用', disable: '停用', queued: '等待执行', running: '执行中', complete: '已完成', failed: '失败' }
+  function node(tag, text, className) {
+    const el = document.createElement(tag)
+    if (text != null) el.textContent = text
+    if (className) el.className = className
+    return el
+  }
+  function button(text, action) {
+    const el = node('button', text)
+    el.type = 'button'; el.addEventListener('click', () => {
+      const current = generation
+      Promise.resolve().then(action).catch(error => { if (current === generation) message(error.message) })
+    })
+    return el
+  }
+  function message(text) { dialog.querySelector('.pc-message').textContent = text }
+  async function api(path, body) {
+    if (!connection.valid()) throw new Error('连接已切换，请关闭后重新打开插件中心')
+    const current = generation
+    const response = await fetch(connection.url('/remote/api/plugins' + path), {
+      method: body ? 'POST' : 'GET', headers: { ...connection.headers, 'content-type': 'application/json' },
+      ...(body ? { body: JSON.stringify(body) } : {}), signal: AbortSignal.timeout(30000),
+    })
+    if (current !== generation || !dialog.open || !connection.valid()) throw new Error('连接已切换，请重新打开插件中心')
+    let data
+    try { data = await response.json() } catch { throw new Error('当前服务器不支持插件中心，请升级主机端 Remote 插件') }
+    if (current !== generation || !dialog.open || !connection.valid()) throw new Error('连接已切换，请重新打开插件中心')
+    if (!response.ok || data.ok === false) throw new Error(data.message || '请求失败：HTTP ' + response.status)
+    return data
+  }
+  function card(name, description) {
+    const el = node('article', null, 'pc-card')
+    el.append(node('h3', name), node('p', description))
+    return el
+  }
+  function renderInstalled() {
+    const list = dialog.querySelector('.pc-list'); list.replaceChildren()
+    if (!snapshot.items.length) list.append(node('p', '暂无可管理插件'))
+    for (const item of snapshot.items) {
+      const el = card(item.name, item.description)
+      el.append(node('p', (item.version || item.requested || '内置') + ' · ' + (item.enabled ? '配置启用' : '配置停用') + (snapshot.pendingRestart ? ' · 待重启' : '')))
+      if (item.managed && snapshot.writable) {
+        const actions = node('div', null, 'pc-actions')
+        actions.append(button('查看更新', () => showDetails(item.name)))
+        if (item.bundle) actions.append(button(item.enabled ? '停用' : '启用', () => mutate(item.enabled ? 'disable' : 'enable', item.name)))
+        actions.append(button('卸载', () => mutate('remove', item.name)))
+        for (const action of actions.children) action.disabled = pending || snapshot.busy
+        el.append(actions)
+      } else el.append(node('small', '内置、核心或只读插件'))
+      list.append(el)
+    }
+    const runtime = node('details')
+    runtime.append(node('summary', '当前进程实际加载状态 (' + snapshot.runtime.length + ')'))
+    if (!snapshot.runtimeAvailable) runtime.append(node('p', '此 DSH 版本未提供加载状态'))
+    for (const entry of snapshot.runtime) runtime.append(node('p', entry.name + ' · ' + entry.phase + (entry.enabled ? '' : ' · disabled')))
+    list.append(runtime)
+  }
+  async function refresh() {
+    snapshot = await api('/state')
+    dialog.querySelector('.pc-profile').textContent = snapshot.profile ? '当前环境：' + snapshot.profile : '当前环境无法识别'
+    dialog.querySelector('.pc-status').textContent = snapshot.reason || (snapshot.pendingRestart ? '插件配置已变更，重启 DSH 后生效。' : '安装到当前连接的 DSH 主机。')
+    const installedKey = JSON.stringify([snapshot.items, snapshot.runtime, snapshot.pendingRestart, snapshot.busy, snapshot.writable, pending])
+    if (tab === 'installed' && installedKey !== renderedInstalled) { renderInstalled(); renderedInstalled = installedKey }
+    const jobsKey = JSON.stringify(snapshot.operations)
+    if (jobsKey === renderedJobs) return
+    renderedJobs = jobsKey
+    const jobs = dialog.querySelector('.pc-jobs')
+    const expanded = new Set([...jobs.querySelectorAll('details[open]')].map(el => el.dataset.id))
+    jobs.replaceChildren()
+    for (const job of snapshot.operations) {
+      const el = node('details')
+      el.dataset.id = job.id; el.open = expanded.has(job.id)
+      el.append(node('summary', (labels[job.action] || job.action) + ' ' + job.name + (job.version ? '@' + job.version : '') + ' · ' + (labels[job.phase] || job.phase)))
+      el.append(node('small', new Date(job.startedAt).toLocaleString()))
+      el.append(node('p', job.message || '任务在主机端执行，可关闭窗口后回来查看。'))
+      if (job.log) el.append(node('pre', job.log))
+      jobs.append(el)
+    }
+  }
+  async function search() {
+    const sequence = ++searchSequence
+    const q = dialog.querySelector('.pc-search').value.trim()
+    const list = dialog.querySelector('.pc-list'); list.replaceChildren(node('p', '正在查询 npm 插件目录…'))
+    const data = await api('/market?q=' + encodeURIComponent(q) + '&offset=' + offset)
+    if (tab !== 'market' || sequence !== searchSequence) return
+    list.replaceChildren(node('p', '来源：npm · 安装前校验 DSH bundle。目录收录不代表安全或兼容性审核。'))
+    if (!data.items.length) list.append(node('p', '没有找到插件；也可直接输入完整 npm 包名后查看详情。'))
+    for (const item of data.items) {
+      const el = card(item.name, item.description)
+      el.append(node('small', item.version), button('查看详情', () => showDetails(item.name)))
+      list.append(el)
+    }
+    if (offset > 0) list.append(button('上一页', () => { offset -= 20; return search() }))
+    if (offset + 20 < data.total) list.append(button('下一页', () => { offset += 20; return search() }))
+  }
+  async function showDetails(name, version) {
+    const sequence = ++detailSequence
+    const { item } = await api('/details?name=' + encodeURIComponent(name) + (version ? '&version=' + encodeURIComponent(version) : ''))
+    if (sequence !== detailSequence) return
+    const area = dialog.querySelector('.pc-detail'); area.replaceChildren()
+    const el = card(item.name + ' @ ' + item.version, item.description)
+    el.append(node('p', '许可证：' + (item.license || '未声明') + ' · ' + (item.bundle ? 'DSH bundle' : '未声明 DSH bundle')))
+    el.append(node('p', '运行要求：' + JSON.stringify(item.engines) + '；依赖要求：' + JSON.stringify(item.peers)))
+    el.append(node('p', '插件代码将在 DSH 主机运行。安装脚本默认禁用；需要额外配置的插件须在主机完成配置。'))
+    if (/^https:\/\//.test(item.homepage)) {
+      const link = node('a', '项目主页'); link.href = item.homepage; link.target = '_blank'; link.rel = 'noopener noreferrer'; el.append(link)
+    }
+    const input = node('input'); input.value = item.version; input.setAttribute('aria-label', '插件版本'); input.placeholder = '指定版本，如 1.2.3'
+    el.append(input, button('查看此版本', () => showDetails(name, input.value.trim())))
+    const installed = snapshot?.items.find(row => row.name === name)
+    const action = installed ? 'update' : 'install'
+    const install = button((labels[action]) + ' ' + item.version, () => mutate(action, name, item.version))
+    install.disabled = !item.bundle || item.protected || !snapshot?.writable || snapshot.busy || pending || installed?.version === item.version
+    el.append(install, button('关闭详情', () => area.replaceChildren()))
+    area.append(el); area.scrollIntoView({ block: 'nearest' })
+  }
+  async function mutate(action, name, version) {
+    if (pending) return
+    // LAN HTTP is not a secure context; an idempotency key does not need WebCrypto.
+    const id = globalThis.crypto?.randomUUID?.() || `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}-${Math.random().toString(36).slice(2)}`
+    const body = { id, action, name, ...(version ? { version } : {}), revision: snapshot.revision }
+    const area = dialog.querySelector('.pc-detail')
+    const review = card('确认' + labels[action], name + (version ? '@' + version : ''))
+    review.append(node('p', '目标环境：' + snapshot.profile + '。配置修改后需要重启 DSH；不会自动重启。'))
+    review.append(button('确认' + labels[action], () => executeMutation(body)), button('取消', () => area.replaceChildren()))
+    area.replaceChildren(review); area.scrollIntoView({ block: 'nearest' })
+  }
+  async function executeMutation(body) {
+    if (pending) return
+    const current = generation
+    pending = true
+    try {
+      message('正在提交…')
+      await api('/operations', body)
+      message('已受理，可在操作记录查看结果。')
+      dialog.querySelector('.pc-detail').replaceChildren()
+    } catch (error) {
+      if (current !== generation) return
+      message(error.message + '；请先查看操作记录，避免重复提交。')
+      const retry = button('重试同一请求', () => executeMutation(body))
+      dialog.querySelector('.pc-detail').replaceChildren(retry)
+    } finally { if (current === generation) { pending = false; await refresh() } }
+  }
+  async function open(config) {
+    if (!dialog) {
+      dialog = node('dialog', null, 'pc-dialog')
+      const heading = node('div', null, 'pc-heading'); heading.append(node('h2', '插件中心'), button('关闭', () => dialog.close()))
+      const toolbar = node('div', null, 'pc-actions')
+      toolbar.append(button('已安装', () => { tab = 'installed'; renderedInstalled = ''; dialog.querySelector('.pc-market-tools').hidden = true; return refresh() }), button('发现插件', () => { tab = 'market'; offset = 0; dialog.querySelector('.pc-market-tools').hidden = false; return search() }), button('刷新状态', refresh))
+      const market = node('form', null, 'pc-market-tools'); market.hidden = true
+      const input = node('input', null, 'pc-search'); input.placeholder = '搜索插件或输入完整 npm 包名'; input.maxLength = 80; input.setAttribute('aria-label', '搜索插件或 npm 包名')
+      market.append(input, button('搜索', () => { offset = 0; return search() }), button('按包名查看', () => showDetails(input.value.trim())))
+      market.addEventListener('submit', event => { event.preventDefault(); offset = 0; search().catch(error => message(error.message)) })
+      const jobs = node('details'); jobs.append(node('summary', '操作记录'), node('div', null, 'pc-jobs'))
+      const alert = node('p', null, 'pc-message'); alert.setAttribute('role', 'status')
+      dialog.append(heading, node('p', null, 'pc-profile'), node('p', null, 'pc-status'), toolbar, market, alert, node('div', null, 'pc-detail'), node('div', null, 'pc-list'), jobs)
+      dialog.addEventListener('close', () => { generation++; clearTimeout(timer) })
+      document.body.append(dialog)
+    }
+    generation++; searchSequence++; detailSequence++; connection = config; tab = 'installed'; pending = false; snapshot = null
+    const current = generation
+    renderedInstalled = ''; renderedJobs = ''
+    dialog.querySelector('.pc-market-tools').hidden = true
+    dialog.querySelector('.pc-detail').replaceChildren(); dialog.querySelector('.pc-list').replaceChildren(); dialog.querySelector('.pc-jobs').replaceChildren()
+    dialog.showModal(); message('正在读取插件状态…')
+    try { await refresh(); message('') } catch (error) { if (current === generation) message(error.message) }
+    if (current !== generation) return
+    async function poll() {
+      if (!dialog.open || current !== generation) return
+      try { await refresh() } catch (error) { if (current === generation) message(error.message) }
+      if (dialog.open && current === generation) timer = setTimeout(poll, 4000)
+    }
+    timer = setTimeout(poll, 4000)
+  }
+  return { open }
+})()

package/public/update.json

@@ -1,10 +1,14 @@
 {
-  "version": "0.6.25",
+  "version": "0.7.0-rc.1",
   "apkUrl": "dsh-remote.apk",
-  "sha256": "56e3aa905bcc4a746c604af7b09a5bfe50c21deafd1b04756a345bd03cc44828",
-  "releasedAt": "2026-09-16T06:56:53.046Z",
-  "notes": "0.6.25：适配 DSH 0.1.5 的实时思考、文件消息与 V3 会话统计；修复 Windows 跨盘文件访问和空会话持久归档；完善 APK 下载进度与校验；新增 dsh-ui 常用组件及柱状图、折线图、环形图只读预览，HTML 代码块支持隔离预览，未支持的高级组件保留原始规格。",
+  "sha256": "5393a9a7866566b63f2f0998ec8ac984600e182c153ee1ee892573405385e63f",
+  "releasedAt": "2026-09-18T23:57:45.705Z",
+  "notes": "0.7.0-rc.1：新增插件中心，支持手机端和桌面端管理当前 DSH profile 的插件，搜索 npm 插件目录、查看详情及安装指定版本；支持更新、卸载、配置启停、任务日志与配置备份。启停需重启 DSH 生效，安装默认禁用脚本。此为测试版，Android 真机与 Linux 使用场景仍待验收。",
   "history": [
+    {
+      "version": "0.6.26",
+      "notes": "0.6.26：修复 DSH 通配监听地址导致的认证与实时连接失败，兼容 IPv6-only；上传覆盖失败保留原文件，避免并发同名覆盖和续传分片竞争；网关改用认证关闭，避免误杀其他进程；完善 dsh-ui 堆叠柱状图、标签页、表格排序与特殊单元格、趋势线、环形进度、文件树和修改前后预览。已通过 Windows 自动测试与浏览器检查，Linux/Docker 专项实测仍待完成。"
+    },
     {
       "version": "0.6.25",
       "notes": "0.6.25：适配 DSH 0.1.5 的实时思考、文件消息与 V3 会话统计；修复 Windows 跨盘文件访问和空会话持久归档；完善 APK 下载进度与校验；新增 dsh-ui 常用组件及柱状图、折线图、环形图只读预览，HTML 代码块支持隔离预览，未支持的高级组件保留原始规格。"
@@ -40,10 +44,6 @@
     {
       "version": "0.6.17",
       "notes": "0.6.17：修复 host.describe 初次失败后总览误报 DSH 上游离线并增加恢复重试；识别 Docker、无 systemd 和插件内嵌等外部生命周期环境，隐藏不可用的 DSH 启停并给出明确提示；兼容 Caddy Basic Auth，避免管理 API 覆盖 Authorization 导致登录循环；支持通过环境变量或管理页手动补充 Docker 宿主、局域网和 Tailscale 地址并写入配对二维码；完整适配 Windows 盘符、UNC、多文件根和跨主机文件路径清理，并新增 Windows 原生 CI 安全门禁。"
-    },
-    {
-      "version": "0.6.16",
-      "notes": "0.6.16：Windows 端 DSH 服务启动/重启接入 Windows Service（实验性功能），启动后继续检查 DSH HTTP 与 mux/host 实时通道；空对话退出时清理 App 本地残留；网关控制台主机 IP 改为可逐项启用的地址表，关闭地址不再进入配对二维码、诊断和防火墙建议；Android 设置新增模型配置、自定义模型思考深度档位和小米/系统 ASR 功能测试，支持复制设备、权限、partial/final、session 重建和错误诊断日志。"
     }
   ]
 }

package/public/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.6.25"
+  "version": "0.7.0-rc.1"
 }