fengs2021/dsh-boot-failsafe

README 摘要

dsh-boot-failsafe v2 Boot failsafe for the DeepSeek Harness web GUI — pure client, zero disk writes, zero host logic, passive . If a client plugin crashes while loading (template defects like exports is not defined / received object , or any factory throw), it is skipped with a visible banner instead of breaking the UI; missing-bundle 404s are reported, not auto-"fixed". You can always get in, even when a plugin is broken. WebUI 加载容错（对抗审查修订版）。纯 client、零磁盘写入、零 host 逻辑、被动响应——坏插件加载失败时自动跳过 + 横幅提示，绝不破坏页面与服务端。 English Safety contract (v2 hard rules) - ❌ No disk writes of any kind (node modules / patch / anything) - ❌ No server routes, no loader service access, no manifest modification - ❌ No probing, no "is it uninstalled" guessing - ✅ The only persistence is browser localStorage - Worst possible outcome: a plugin is skipped (recoverable). The server is never touched. History (v0.1): a host-side auto-patch that wrote no-op packages into profile node modules once misclassified 128 official packages → crash loop (NRestarts=65) → 502. v2's host half is explicitly a no-op. Capabilities 1. Factory failsafe : wraps window. ModuleLoader .load — installed at module top level (during the arrive p…

分类