优化天气胶囊拖动性能与插件示例迁移

完成天气胶囊在高 DPI 和窄窗口下的逐级降级布局，减少窗口拖动期间的主题与材质重建。新增三个停用的 manifest v3 插件示例、Tauri 伴随程序和构建哈希校验；旧版插件自动回收到可恢复目录。安装器升级成功后递归清理旧静态资源空目录，并补充相关文档和测试。

.claude/settings.local.json

@@ -0,0 +1,9 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(python -c ' *)",
+      "Bash(dotnet build *)",
+      "Bash(npm run *)"
+    ]
+  }
+}

.gitignore

@@ -34,6 +34,7 @@
 /Release/
 **/dist/
 **/node_modules/
+src/YMhut.Box.PluginEcho/plugin-echo/
 src/box-winUI/AppPackages/
 server/update/build/
 server/update/public/downloads/

NuGet.Config

@@ -2,7 +2,6 @@
 <configuration>
   <packageSources>
     <clear />
-    <add key="local-feed" value="./.cache/nuget/feed" />
     <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
   </packageSources>
 </configuration>

README

@@ -151,7 +151,7 @@ Release 构建时：
 常用测试命令：
 
 ```powershell
-dotnet restore YMhut.Box.Native.sln --configfile NuGet.Config --ignore-failed-sources
+dotnet restore YMhut.Box.Native.sln --configfile NuGet.Config
 dotnet test src\YMhut.Box.Tests\YMhut.Box.Tests.csproj -c Debug --no-restore
 ```
 
@@ -483,7 +483,7 @@ Everything up-to-date
 
 ```powershell
 git pull
-dotnet restore YMhut.Box.Native.sln --configfile NuGet.Config --ignore-failed-sources
+dotnet restore YMhut.Box.Native.sln --configfile NuGet.Config
 dotnet build src\box-winUI\YMhut.Box.WinUI.csproj -c Debug -p:Platform=x64 --no-restore
 dotnet test src\YMhut.Box.Tests\YMhut.Box.Tests.csproj -c Debug --no-restore
 ```

README.zh-CN.md

@@ -151,7 +151,7 @@ Release 构建时：
 常用测试命令：
 
 ```powershell
-dotnet restore YMhut.Box.Native.sln --configfile NuGet.Config --ignore-failed-sources
+dotnet restore YMhut.Box.Native.sln --configfile NuGet.Config
 dotnet test src\YMhut.Box.Tests\YMhut.Box.Tests.csproj -c Debug --no-restore
 ```
 
@@ -483,7 +483,7 @@ Everything up-to-date
 
 ```powershell
 git pull
-dotnet restore YMhut.Box.Native.sln --configfile NuGet.Config --ignore-failed-sources
+dotnet restore YMhut.Box.Native.sln --configfile NuGet.Config
 dotnet build src\box-winUI\YMhut.Box.WinUI.csproj -c Debug -p:Platform=x64 --no-restore
 dotnet test src\YMhut.Box.Tests\YMhut.Box.Tests.csproj -c Debug --no-restore
 ```

THIRD_PARTY_NOTICES.md

@@ -0,0 +1,29 @@
+# YMhutBox Third-Party Notices
+
+YMhutBox uses or adapts the following open-source projects. Their original
+copyrights, licenses, and trademarks remain with their respective owners.
+
+| Project | Version / source | License | Use in YMhutBox |
+| --- | --- | --- | --- |
+| NexBox | Local source under `参考/NexBox-main` | GPL-3.0 | Reference implementation for hardware monitoring, optimization, overlays, music, network diagnostics, and installer workflows. NexBox branding and site assets are not included. |
+| LibreHardwareMonitor | LibreHardwareMonitorLib 0.9.6 | MPL-2.0 | Optional sensor provider in the isolated hardware-monitor host. |
+| QRCoder | 1.8.0 | MIT | QR code rendering for provider login. |
+| MoeKoeMusic | Commit [`4581660209c9cdd07669e8bd5bcbe136b7d91e02`](https://github.com/MoeKoeMusic/MoeKoeMusic/tree/4581660209c9cdd07669e8bd5bcbe136b7d91e02) | GPL-2.0 at the pinned commit | Pinned upstream project, README, license, and original disclaimer distributed with the local KuGou API integration. The fixed commit identifies `api` as the KuGouMusicApi submodule below. |
+| KuGouMusicApi | Commit [`06560e3e053bda1ab830750db6f645bab703f824`](https://github.com/MakcRe/KuGouMusicApi/tree/06560e3e053bda1ab830750db6f645bab703f824) | MIT | Bundled and modified local random-port API service for KuGou requests, login/account workflows, playback resolution, and KRC lyrics. Original source, lockfile, MIT license, README/disclaimer, and `YMhut_PATCHES.md` are distributed in `music-api`. |
+| Binaryify/NeteaseCloudMusicApi | [Repository](https://github.com/Binaryify/NeteaseCloudMusicApi) | Upstream project license | Attribution for the two-minute API response cache mechanism inherited by KuGouMusicApi. YMhut restricts the cache to an explicit anonymous public GET allowlist. |
+| Node.js | 22.18.0 x64 | Node.js license | Bundled runtime for the loopback-only music API child process. Production does not depend on a system Node installation. |
+| MoeKoeMusic API npm dependencies | Exact versions in `api/pnpm-lock.yaml` | Package-specific licenses | Production dependencies include axios, express, pako, qrcode, crypto-js, node-forge, big-integer, dotenv, safe-decode-uri-component, and url. |
+| Microsoft Windows App SDK | 1.8.260416003 | Microsoft license | WinUI 3 desktop application and installer bootstrap. |
+| Microsoft WebView2 | 1.0.3967.48 | Microsoft license | Embedded browser and tool surfaces. |
+| Microsoft.Data.Sqlite | 10.0.9 | MIT | Local application data and logs. |
+| SQLitePCLRaw | 3.0.3 | MIT | SQLite native integration. |
+| ZXing.Net | 0.16.11 | Apache-2.0 | Barcode and QR decoding helpers. |
+
+Bundled external tools keep their original notice, license, README, or EULA
+files beside their payloads. Components that cannot be redistributed are not
+bundled; YMhutBox exposes only an official install, detection, status, and
+launch entry for those components.
+
+The complete corresponding YMhutBox source is distributed under the repository
+license. Package-specific license text is available from each package's source
+repository and NuGet metadata.

YMhut.Box.Native.sln

@@ -17,6 +17,12 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "YMhut.Box.DownloadHost", "s
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "YMhut.Box.Mobile", "src\YMhut.Box.Mobile\YMhut.Box.Mobile.csproj", "{80E5F09C-3D3E-4B0B-B798-2D8339239697}"
 EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "YMhut.Box.HardwareMonitor", "src\YMhut.Box.HardwareMonitor\YMhut.Box.HardwareMonitor.csproj", "{8F96D211-88D1-4760-A9B7-1A3B59483FD4}"
+EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "YMhut.Box.PrivilegedHost", "src\YMhut.Box.PrivilegedHost\YMhut.Box.PrivilegedHost.csproj", "{C41CB772-4D18-4688-B22F-6932EE8BFC6C}"
+EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "YMhut.Box.InstallerBootstrap", "src\YMhut.Box.InstallerBootstrap\YMhut.Box.InstallerBootstrap.csproj", "{A44BA083-DA71-4A42-A8C4-6067178DE91D}"
+EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		Debug|x64 = Debug|x64
@@ -49,6 +55,18 @@ Global
 		{7B7ED3B8-7C6D-4B50-A54B-1FD80A0F097E}.Release|x64.Build.0 = Release|Any CPU
 		{80E5F09C-3D3E-4B0B-B798-2D8339239697}.Debug|x64.ActiveCfg = Debug|Any CPU
 		{80E5F09C-3D3E-4B0B-B798-2D8339239697}.Release|x64.ActiveCfg = Release|Any CPU
+		{8F96D211-88D1-4760-A9B7-1A3B59483FD4}.Debug|x64.ActiveCfg = Debug|x64
+		{8F96D211-88D1-4760-A9B7-1A3B59483FD4}.Debug|x64.Build.0 = Debug|x64
+		{8F96D211-88D1-4760-A9B7-1A3B59483FD4}.Release|x64.ActiveCfg = Release|x64
+		{8F96D211-88D1-4760-A9B7-1A3B59483FD4}.Release|x64.Build.0 = Release|x64
+		{C41CB772-4D18-4688-B22F-6932EE8BFC6C}.Debug|x64.ActiveCfg = Debug|x64
+		{C41CB772-4D18-4688-B22F-6932EE8BFC6C}.Debug|x64.Build.0 = Debug|x64
+		{C41CB772-4D18-4688-B22F-6932EE8BFC6C}.Release|x64.ActiveCfg = Release|x64
+		{C41CB772-4D18-4688-B22F-6932EE8BFC6C}.Release|x64.Build.0 = Release|x64
+		{A44BA083-DA71-4A42-A8C4-6067178DE91D}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{A44BA083-DA71-4A42-A8C4-6067178DE91D}.Debug|x64.Build.0 = Debug|Any CPU
+		{A44BA083-DA71-4A42-A8C4-6067178DE91D}.Release|x64.ActiveCfg = Release|Any CPU
+		{A44BA083-DA71-4A42-A8C4-6067178DE91D}.Release|x64.Build.0 = Release|Any CPU
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE