v0.3.0 — boot-safety net

Boot-safety net v0.3.0 — installing a bad plugin can no longer brick DSH.

• compose-check gate: after every install/update the persisted bundle stack is composed with the exact boot machinery in a subprocess (duplicate loader ids, invalid config, missing packages surface there)
• automatic rollback: on check failure the profile manifest is restored from a pre-op snapshot and the package is uninstalled — the profile is never left unbootable
• pre-install bundle fan-out audit: aggregate plugins whose dependencies also declare dsh.bundle (e.g. dsh-web-ui family) now require an explicit risk confirmation
• offline repair CLI: scripts/repair.mjs recovers an already-broken profile
• fresh hot-mounts dispose failed fibers instead of leaving dead entries

v0.2.2 — 目录更新 Catalog update

更新插件目录，收录 13 个新插件（记忆/视觉/UI 增强/流程与效率/多智能体协作）。Catalog refreshed with 13 plugins (memory/vision/UI/facility/multi-agent).

v0.2.1 — 修复更新卡版本 fix updates stuck on 0.x

修复 Fix

更新命令现在带 \pnpm --latest\：0.x 版本的 caret 范围（如 ^0.1.3\）不允许跨 minor 升级，导致工坊自己和 0.x 插件点更新后实际版本没变（旧版 0.1.3 依然在运行、依然提示重启）。现在更新会无视范围直接升到最新，并自动重写依赖范围。

• Updates now run \pnpm update --latest, so caret ranges on 0.x versions can no longer stall upgrades (the running 0.1.3 kept reporting success without ever upgrading).
• 本机升级指引：手动执行一次 \dsh plugin --profile web add @cyber-moshen/dsh-plugin-market@0.2.1\ 并重启 Web 服务一次；之后所有安装/更新/卸载均热重载生效，无需重启。

v0.2.0 — 热重载 Hot reload

热重载 Hot reload

纯 JS 插件安装/更新/卸载后立即在运行中的进程生效，无需重启；页面自动刷新，弹窗确认。

• Pure-JS plugins now install/update/uninstall live in the running process — no restart needed; the page auto-refreshes with a confirmation toast.
• 含原生模块（.node / binding.gyp）的插件会被自动识别，改为提示重启生效。
• Plugins shipping native modules are detected and prompt for a restart instead.
• 插件工坊自身更新也走热重载（自更新），boot 自动更新同步生效。
• The workshop itself hot-reloads on update; the boot auto-updater uses the same path.
• 失败自动回滚并降级为重启提示（安全兜底）。Failures roll back to the previous runtime and degrade to a restart notice.

v0.1.3

更新内容 / Changes

• 修复目录：vision-toolkit 的 npm 包名改为作者实际发布的 @anionex/dsh-vision-toolkit（原 @dsh-external 指向的包声明了不存在的依赖，导致安装 404 失败）
  Fixed catalog: vision-toolkit now points to the author's real package @anionex/dsh-vision-toolkit (the old @dsh-external name pulled a broken package that depends on a nonexistent dependency, failing installs with 404)
• 版本 0.1.3（GitHub Actions 自动发布到 npm）
  v0.1.3 — auto-published to npm by GitHub Actions

v0.1.2

更新内容 / Changes

• 修复：已安装状态按 npm 包名匹配（如 taxueseek/argo 发布为 argo-search 时，卡片之前一直显示"未安装"）
  Fixed installed-state matching by npm package name — cards like argo-search (published under a different name than the repo) now show as installed
• 版本 0.1.2（GitHub Actions 自动发布到 npm）
  v0.1.2 — auto-published to npm by GitHub Actions

v0.1.1

更新内容 / Changes

• 卡片新增仓库简介：直接取 GitHub 仓库 description，显示在作者名上方
  Cards now show each plugin's GitHub repo description, above the author name
• 移除「更新 / 卸载」按钮的鼠标悬浮提示
  Removed the hover tooltips on the update/uninstall buttons
• 版本 0.1.1（GitHub Actions 自动发布到 npm）
  v0.1.1 — auto-published to npm by GitHub Actions

v0.1.0

First npm release of the Plugin Workshop.