dsh-shutdown-guard 1.6.1-beta.1 → 1.6.1-beta.2

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## v1.6.1-beta.2 — 2026-11-08
+
+> 测试版（beta）：`latest` 仍指向 1.6.0，`npm i dsh-shutdown-guard` 不会装到它。装这个版本请用 `npm i dsh-shutdown-guard@1.6.1-beta.2`。
+
+- ⚠️ `~` **默认配置下，锁屏 / 注销 / 自定义脚本不再可用**：这三件事会让人离开机器、或让插件去执行一段你未必盯着的代码，所以现在要先开启「自定义配置」。设置页会写明原因「开启「自定义配置」后才能用这个动作」；即使绕过界面直接调接口武装，判定闸也同样拦住，不会进倒计时。
+- `~` **守夜页的行序换了**：倒计时挪到最上面，动作紧随其后；「会话都停下来」移到「后台任务跑完」与「有会话报错就跳过」之前，与判定实际执行的顺序一致。功能没少，位置变了。
+- `+` **不再限制安装平台**：移除了包里的平台限制，macOS 与 Linux 现在能正常安装（此前 npm 会直接以 `EBADPLATFORM` 拒绝）；Windows 用户不受影响。
+- 修复：自定义脚本还没上传文件时，下拉里那一项以前是灰的、点不动也没有说明 → 现在可以先选中再挑文件，不能武装时会说清原因。
+- 修复：关闭「自定义配置」后，脚本上传行与确认框整体收起；如果此前选的就是自定义脚本，动作下拉显示一个禁用的「自定义脚本（不可用）」占位，而不是空白。
+- **测试与体积**：宿主断言 **66 项**、客户端 **15 项**全绿；本版 npm 包约 363 kB（未压缩解包约 763 kB），仍是 11 个文件。
+
 ## v1.6.1-beta.1 — 2026-11-06
 
 > 测试版（beta）：`latest` 仍指向 1.6.0，`npm i dsh-shutdown-guard` 不会装到它。装这个版本请用 `npm i dsh-shutdown-guard@1.6.1-beta.1`。

package/README.en.md

@@ -7,7 +7,7 @@ Stable `v1.6.0` · beta `v1.6.1-beta.1` (closed beta) · [Changelog](https://git
 
 [![version](https://img.shields.io/badge/version-1.6.0-2ea44f)](https://github.com/ltayshark0637/dsh-Shutdown-Guard/blob/main/CHANGELOG.md) [![DSH](https://img.shields.io/badge/DSH-%E2%89%A50.1.5--rc.1-4a90d9)](https://github.com/deepseek-ai)
 [![demo](https://img.shields.io/badge/%E2%96%B6-interactive%20demo-d97757)](https://ltayshark0637.github.io/dsh-Shutdown-Guard/demo.html) [![license](https://img.shields.io/badge/license-MIT-blue)](LICENSE)
-[![dshbase install-tested](https://dshbase.com/badges/dsh-shutdown-guard.svg)](https://dshbase.com/plugins/dsh-shutdown-guard/) [![awesome-dsh-plugin listed](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com/p/ltayshark0637/dsh-Shutdown-Guard/)
+[![dshbase install-tested](https://dshbase.com/badges/dsh-shutdown-guard.svg)](https://dshbase.com/plugins/dsh-shutdown-guard/) [![dsh.so runtime-tested](https://cdn.dsh.so/badge/dsh-shutdown-guard.svg)](https://www.dsh.so/artifact/dsh-shutdown-guard/?ref=badge) [![dsh-plugin.org listed](https://dsh-plugin.org/badges/listed.svg)](https://dsh-plugin.org/plugins/ltayshark0637/dsh-shutdown-guard) [![awesome-dsh-plugin listed](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com/p/ltayshark0637/dsh-Shutdown-Guard/) [![dpharness listed](https://img.shields.io/badge/dpharness-listed-6f42c1)](https://dpharness.com/plugin/ltayshark0637/dsh-Shutdown-Guard)
 
 Adds a "shut down when every task is done" card to the DeepSeek Harness sidebar — right under Skill Centre and above the session list, following the task state live.
 

package/README.md

@@ -7,7 +7,7 @@
 
 [![version](https://img.shields.io/badge/version-1.6.0-2ea44f)](https://github.com/ltayshark0637/dsh-Shutdown-Guard/blob/main/CHANGELOG.md) [![DSH](https://img.shields.io/badge/DSH-%E2%89%A50.1.5--rc.1-4a90d9)](https://github.com/deepseek-ai)
 [![demo](https://img.shields.io/badge/%E2%96%B6-%E4%BA%A4%E4%BA%92%E6%BC%94%E7%A4%BA-d97757)](https://ltayshark0637.github.io/dsh-Shutdown-Guard/demo.html) [![license](https://img.shields.io/badge/license-MIT-blue)](LICENSE)
-[![dshbase 实装验证](https://dshbase.com/badges/dsh-shutdown-guard.svg)](https://dshbase.com/plugins/dsh-shutdown-guard/) [![awesome-dsh-plugin 收录](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com/p/ltayshark0637/dsh-Shutdown-Guard/)
+[![dshbase 实装验证](https://dshbase.com/badges/dsh-shutdown-guard.svg)](https://dshbase.com/plugins/dsh-shutdown-guard/) [![dsh.so 运行验证](https://cdn.dsh.so/badge/dsh-shutdown-guard.svg)](https://www.dsh.so/artifact/dsh-shutdown-guard/?ref=badge) [![dsh-plugin.org 收录](https://dsh-plugin.org/badges/listed.svg)](https://dsh-plugin.org/plugins/ltayshark0637/dsh-shutdown-guard) [![awesome-dsh-plugin 收录](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com/p/ltayshark0637/dsh-Shutdown-Guard/) [![dpharness 收录](https://img.shields.io/badge/dpharness-%E6%94%B6%E5%BD%95-6f42c1)](https://dpharness.com/plugin/ltayshark0637/dsh-Shutdown-Guard)
 
 为 DeepSeek Harness 的侧边栏加一张「所有任务完成后自动关机」的卡片，就在「技能中心」下方、会话列表上方，随任务状态实时变化。
 

package/README.ru.md

@@ -7,7 +7,7 @@
 
 [![version](https://img.shields.io/badge/version-1.6.0-2ea44f)](https://github.com/ltayshark0637/dsh-Shutdown-Guard/blob/main/CHANGELOG.md) [![DSH](https://img.shields.io/badge/DSH-%E2%89%A50.1.5--rc.1-4a90d9)](https://github.com/deepseek-ai)
 [![demo](https://img.shields.io/badge/%E2%96%B6-%D0%B4%D0%B5%D0%BC%D0%BE-d97757)](https://ltayshark0637.github.io/dsh-Shutdown-Guard/demo.html) [![license](https://img.shields.io/badge/license-MIT-blue)](LICENSE)
-[![dshbase: проверено установкой](https://dshbase.com/badges/dsh-shutdown-guard.svg)](https://dshbase.com/plugins/dsh-shutdown-guard/) [![awesome-dsh-plugin: в каталоге](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com/p/ltayshark0637/dsh-Shutdown-Guard/)
+[![dshbase: проверено установкой](https://dshbase.com/badges/dsh-shutdown-guard.svg)](https://dshbase.com/plugins/dsh-shutdown-guard/) [![dsh.so: проверено запуском](https://cdn.dsh.so/badge/dsh-shutdown-guard.svg)](https://www.dsh.so/artifact/dsh-shutdown-guard/?ref=badge) [![dsh-plugin.org: в каталоге](https://dsh-plugin.org/badges/listed.svg)](https://dsh-plugin.org/plugins/ltayshark0637/dsh-shutdown-guard) [![awesome-dsh-plugin: в каталоге](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com/p/ltayshark0637/dsh-Shutdown-Guard/) [![dpharness: в каталоге](https://img.shields.io/badge/dpharness-%D0%B2%20%D0%BA%D0%B0%D1%82%D0%B0%D0%BB%D0%BE%D0%B3%D0%B5-6f42c1)](https://dpharness.com/plugin/ltayshark0637/dsh-Shutdown-Guard)
 
 Добавляет в боковую панель DeepSeek Harness карточку «выключить, когда все задачи готовы» — сразу под «Центром навыков» и над списком сессий, в реальном времени следуя за состоянием задач.
 

package/lib/client.js

@@ -198,6 +198,7 @@
           'action.signout': '注销',
           'action.restart-dsh': '重启 DSH',
           'action.custom': '自定义脚本',
+          'action.custom.off': '自定义脚本（不可用）',
           'action.unknown': '可能需要授权；如果失败，会告诉你原因。',
           'action.reason.no-cli': '没有找到这个操作需要的系统命令。',
           'action.reason.may-need-permissions': '可能需要管理员权限；执行失败时会说明原因。',
@@ -205,6 +206,7 @@
           'action.reason.unsupported-on-platform': '当前系统不支持这个操作。',
           'action.reason.no-host-restart': 'DSH 不支持自重启，请手动退出后重开。',
           'action.reason.no-script': '还没有选择脚本文件。',
+          'action.reason.no-custom-profile': '开启「自定义配置」后才能用这个动作。',
           'action.reason.missing-interpreter': '找不到运行这个脚本所需的解释器。',
           'action.reason.script-not-acknowledged': '脚本还没有确认，先在下面勾选确认。',
           'set.halt': '熔断后关机',
@@ -377,6 +379,7 @@
           'action.signout': 'Sign out',
           'action.restart-dsh': 'Restart DSH',
           'action.custom': 'Custom script',
+          'action.custom.off': 'Custom script (unavailable)',
           'action.unknown': 'It may need permission; if it fails, you will see why.',
           'action.reason.no-cli': 'The system command this action needs was not found.',
           'action.reason.may-need-permissions': 'It may need administrator rights; if it fails, you will see why.',
@@ -384,6 +387,7 @@
           'action.reason.unsupported-on-platform': 'This system does not support this action.',
           'action.reason.no-host-restart': 'DSH cannot restart itself; quit and open it again manually.',
           'action.reason.no-script': 'No script file has been chosen yet.',
+          'action.reason.no-custom-profile': 'Turn on custom profiles to use this action.',
           'action.reason.missing-interpreter': 'The interpreter needed to run this script was not found.',
           'action.reason.script-not-acknowledged': 'The script is not confirmed yet; tick the box below first.',
           'set.halt': 'Shut down after a halt',
@@ -556,6 +560,7 @@
           'action.signout': 'Выйти из системы',
           'action.restart-dsh': 'Перезапустить DSH',
           'action.custom': 'Свой скрипт',
+          'action.custom.off': 'Свой скрипт (недоступен)',
           'action.unknown': 'Может потребоваться разрешение; при ошибке будет указана причина.',
           'action.reason.no-cli': 'Системная команда для этого действия не найдена.',
           'action.reason.may-need-permissions': 'Может потребоваться разрешение администратора; при ошибке будет указана причина.',
@@ -563,6 +568,7 @@
           'action.reason.unsupported-on-platform': 'Эта система не поддерживает такое действие.',
           'action.reason.no-host-restart': 'DSH не может перезапустить себя; закройте и откройте его вручную.',
           'action.reason.no-script': 'Файл скрипта ещё не выбран.',
+          'action.reason.no-custom-profile': 'Включите собственные профили, чтобы использовать это действие.',
           'action.reason.missing-interpreter': 'Не найден интерпретатор для запуска этого скрипта.',
           'action.reason.script-not-acknowledged': 'Скрипт ещё не подтверждён; сначала отметьте поле ниже.',
           'set.halt': 'Выключить после сбоя',
@@ -2386,19 +2392,36 @@
       }
 
       function actionPicker(snap, current, onPick) {
+        var showCustom = snap.customEnabled === true
+        var ids = showCustom
+          ? ACTION_IDS
+          : ACTION_IDS.filter(function (id) { return id !== 'custom' })
+        // When custom profiles were switched off after someone had picked the
+        // script action, the stored value is no longer one of the visible
+        // options. A <select> would silently render blank, so keep a disabled
+        // placeholder at the top that tells the truth; it disappears as soon
+        // as the value changes to a listed action.
+        var hiddenCustom = !showCustom && current === 'custom'
+          ? h('option', { key: 'custom-off', value: 'custom', disabled: true }, tr('action.custom.off'))
+          : null
         return h('select', {
           className: 'dsp-sel',
           value: current,
           'aria-label': tr('set.action'),
           onChange: function (ev) { onPick(ev.target.value) },
-        }, ACTION_IDS.map(function (id) {
+        }, hiddenCustom, ids.map(function (id) {
           var info = actionInfo(snap, id)
+          // Picking an action is a saved choice, not an arming promise: the host
+          // stores `custom` even when no script is uploaded yet, and refuses to
+          // arm instead. So the two "set this up first" reasons stay selectable,
+          // and the note under the picker says what is still missing. Anything
+          // else is a hard no from the host and stays grayed out.
+          var pending = info.reason === 'no-script'
+            || info.reason === 'script-not-acknowledged'
+            || info.reason === 'missing-interpreter'
           return h('option', {
             key: id, value: id,
-            // Disabled is the host's call: `available:false` always means the
-            // action cannot run, including a custom script we have no file for.
-            // The reason below the picker explains it in words.
-            disabled: info.available === false,
+            disabled: info.available === false && !pending,
           }, tr('action.' + id))
         }))
       }
@@ -2884,14 +2907,8 @@
 
         // 3) 守夜行为：四行判定闸不再自成一组的成员，收进这里排在 AFK 前面。
         var watch = [settingsGroup('watch-g', tr('set.watch'), null, 'watch')]
-        watch.push(settingsRow('c3', tr('set.bottom'), tr('set.bottom.desc'),
-          h('span', { className: 'dsp-sval' }, tr('set.always')), 'dsp-srow-ro'))
-        watch.push(settingsRow('c2', tr('set.jobs'), tr('set.jobs.desc') + hint,
-          toggle(cur.blockOnJobs, function (next) { profileWrite('jobs', 'blockOnJobs', next) },
-            locked, tr('set.jobs')), null, errFor('jobs')))
-        watch.push(settingsRow('c1', tr('set.err'), tr('set.err.desc') + hint,
-          toggle(cur.onlyOnSuccess, function (next) { profileWrite('err', 'onlyOnSuccess', next) },
-            locked, tr('set.err')), null, errFor('err')))
+        // The countdown comes first: it is the number most people open this pane
+        // to change, and it reads better before what happens when it hits zero.
         watch.push(settingsRow('cd', tr('set.cd'),
           snap.countdownLocked ? tr('set.cd.locked') : tr('set.cd.desc'),
           snap.countdownLocked
@@ -2899,10 +2916,10 @@
             : seg([[30, tr('cd.30')], [60, tr('cd.60')], [120, tr('cd.120')], [300, tr('cd.300')]], cur.countdownSec, function (v) {
               profileWrite('cd', 'countdownSec', v)
             }), null, errFor('cd')))
-        // 3b) Action layer: the picker, then the script block. The script row is
-        // rendered for every action on purpose: uploading a file is the only
-        // way to make 'custom' available, so it must stay reachable while that
-        // option is still grayed out.
+        // 3b) Action layer: the picker, then the script block. The script block
+        // only exists while custom profiles are on: with the feature off the
+        // action picker does not offer 'custom' at all, so there is nothing to
+        // upload for.
         var actionId = cur.action && ACTION_IDS.indexOf(cur.action) >= 0 ? cur.action : 'shutdown'
         var scr = cur.script && cur.script.ext ? cur.script : null
         var scrAck = !!(scr && cur.scriptAck && cur.scriptAck.sha256 === scr.sha256)
@@ -2919,7 +2936,7 @@
               profileWrite('action', 'action', next)
             }),
             actionNote(snap, actionId))))
-        watch.push(h('div', { key: 'script', className: 'dsp-srow dsp-srow-stack' },
+        if (customOn) watch.push(h('div', { key: 'script', className: 'dsp-srow dsp-srow-stack' },
           h('div', { className: 'dsp-srow-text' },
             h('span', { className: 'dsp-stitle' }, tr('set.script')),
             h('span', { className: 'dsp-sdesc' }, tr('set.script.desc')),
@@ -2953,7 +2970,7 @@
                   if (ev.key === 'Enter') { ev.preventDefault(); commitScriptName(ev.target.value) }
                 },
               })) : null)))
-        if (scr) {
+        if (customOn && scr) {
           // The checkbox lives inside the warning block, not under it: the
           // disclaimer and the confirmation must be impossible to separate.
           watch.push(h('div', { key: 'ack', className: 'dsp-srow dsp-srow-stack dsp-ackrow' },
@@ -2973,6 +2990,20 @@
               !scrAck ? h('span', { className: 'dsp-sreason' },
                 tr(resetHint ? 'set.script.ack.reset' : 'set.script.ack.needed')) : null)))
         }
+        // "Sessions have stopped" leads the group of three: no running session
+        // first, then background jobs, then this round's errors — the order the
+        // gate itself evaluates them in.
+        watch.push(settingsRow('c3', tr('set.bottom'), tr('set.bottom.desc'),
+          h('span', { className: 'dsp-sval' }, tr('set.always')), 'dsp-srow-ro'))
+        // The gate rows continue: "what runs" reads above, the conditions that
+        // hold it back below. The halt switch stays directly under its parent
+        // ("skip this round on errors") because it is its child.
+        watch.push(settingsRow('c2', tr('set.jobs'), tr('set.jobs.desc') + hint,
+          toggle(cur.blockOnJobs, function (next) { profileWrite('jobs', 'blockOnJobs', next) },
+            locked, tr('set.jobs')), null, errFor('jobs')))
+        watch.push(settingsRow('c1', tr('set.err'), tr('set.err.desc') + hint,
+          toggle(cur.onlyOnSuccess, function (next) { profileWrite('err', 'onlyOnSuccess', next) },
+            locked, tr('set.err')), null, errFor('err')))
         // "Shut down after a halt" is the child of "skip this round on errors":
         // the stored profile value is never rewritten, so turning the parent
         // back on restores what the user picked. /state already folded the

package/lib/index.mjs

@@ -400,8 +400,14 @@ const ACTION_REASON = {
   noScript: 'no-script',
   missingInterpreter: 'missing-interpreter',
   scriptNotAcknowledged: 'script-not-acknowledged',
+  noCustomProfile: 'no-custom-profile',
 }
 
+// Actions outside the plain system-power set are gated behind custom profiles:
+// locking a machine or running a script is not something an unattended default
+// profile should be able to do. Restart-dsh keeps its own permanent reason.
+const CUSTOM_PROFILE_ONLY = ['lock', 'signout', 'custom']
+
 /** True for an absolute/relative path, which needs no PATH lookup. */
 function looksLikePath(value) {
   return typeof value === 'string' && value.length > 0
@@ -1979,6 +1985,10 @@ export function apply(ctx, rawConfig) {
     // The script's interpreter is part of the answer, so resolve it first.
     await resolveCurrentScript()
     const next = {}
+    // Raw per-platform answers only. The "custom profile required" gate is applied
+    // on the way out (`gatedActions`), not stored here: a stored gate would go
+    // stale the moment the user enables custom profiles, and /state would keep
+    // reporting `no-custom-profile` until the async probe finished.
     for (const id of ACTION_IDS) {
       // `custom` has no table row: it runs the profile's script, so "no file" and
       // "no interpreter" are different answers and both are worth saying.
@@ -2024,6 +2034,9 @@ export function apply(ctx, rawConfig) {
   /** The active action is armed only when the probe did not mark it unavailable. */
   function actionReadyNow() {
     const id = resolveAction()
+    // Same gate as the probe, but read from the store: a stale map (or no probe
+    // yet) must not let a default profile arm lock/signout/custom.
+    if (store.customEnabled !== true && CUSTOM_PROFILE_ONLY.includes(id)) return false
     const entry = actionAvailability[id]
     if (id === 'custom') {
       // The script lives in the profile, so this answer must not lag behind the
@@ -2038,6 +2051,20 @@ export function apply(ctx, rawConfig) {
     return entry.available !== false
   }
 
+  /**
+   * The capability map as the settings page should see it. The probe stores the
+   * raw per-platform answer; the custom-profile gate is applied on the way out so
+   * a snapshot taken right after the toggle cannot show the old permission.
+   */
+  function gatedActions() {
+    if (store.customEnabled === true) return actionAvailability
+    const out = Object.assign({}, actionAvailability)
+    for (const id of CUSTOM_PROFILE_ONLY) {
+      out[id] = { available: false, reason: ACTION_REASON.noCustomProfile }
+    }
+    return out
+  }
+
   /** True when the user acknowledged exactly the file that is stored now. */
   function scriptAckedNow() {
     const script = cfg && cfg.script
@@ -2822,7 +2849,7 @@ export function apply(ctx, rawConfig) {
       afkAutoAnswer: cfg.afkAutoAnswer !== false,
       // Capability map, keyed by the same ids `profile.action` uses (hyphen
       // included). `{}` until the first probe settles; `recheck` refreshes it.
-      actions: actionAvailability,
+      actions: gatedActions(),
       actionReady: actionReadyNow(),
       // The active profile's script, metadata only, plus whether the stored
       // acknowledgement still covers exactly these bytes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-shutdown-guard",
-  "version": "1.6.1-beta.1",
+  "version": "1.6.1-beta.2",
   "description": "任务结束后自动关机 —— 侧边栏守夜卡片：五道判定闸、后台任务守卫、AFK 接管、阻断态分级",
   "author": {
     "name": "ltayshark0637",
@@ -65,8 +65,5 @@
   "engines": {
     "node": ">=22.19"
   },
-  "os": [
-    "win32"
-  ],
   "license": "MIT"
 }