@dan-ai-studio/dshopencodego 0.1.91 → 0.1.92

package/README.en.md

@@ -82,6 +82,8 @@ Why: Electron owns the Desktop profile, and **the CLI cannot boot or mutate it**
 
 The version constraint matches the CLI: the DSH bundled with the Desktop app must stay inside the declared and verified band (`>=0.2.0-rc.1 <0.3.0`, see "Compatibility"). If the plugin ever breaks startup, the Desktop's native recovery dialog can **disable third-party plugins, back up `cordis.patch.yml`, and restart** in one action — it will not lock the app out.
 
+The settings page also carries a **Desktop app** row: **Check download address** reads the official feed at `https://download.deepseek.com/dsh-desk/feeds/win-x64/nightly.yml` and shows the newest installer's version, publication date, size, staged-rollout share, SHA-512, and address — the address can be copied or opened in a browser. This **only reads the feed and shows the address**: the plugin never downloads, verifies, or installs anything. The Host caches the reading for six hours, and an unreachable feed says so instead of pretending nothing was published.
+
 ## Configuration
 
 Configuration lives in the profile's `cordis.patch.yml`:
@@ -291,7 +293,7 @@ npm run seed        # refresh the bundled catalog seed before a release (see "Re
 
 **Order matters**: `npm run build` must come before `npm test` — `tests/pack-contents.spec.ts` walks every `exports` target, and whether `lib/` exists decides whether that check runs or is silently skipped (it does not fail, it just stops protecting you). `package.json` no longer carries `prepare`, so `npm ci` will not build for you; all three CI workflows run `npm run build` explicitly.
 
-The suite covers configuration validation, the protocol ladder, gateway and online metadata, the catalog projection, the adapter on the wire (all three protocols), Remote contracts and services, session-header invariants, usage windows and the meter, the client controller and usage pill, both halves' mounting and registration, the error mapping for stream idle timeouts and aborts, the exit-code contract of the verification scripts, and several **structural invariants** (inject declarations match the source's reads, peer coverage holds both ways, the READMEs match the manifest, and the READMEs' claims about the upstream match the upstream actually installed). That is **61 test files** — a number `tests/readme-consistency.spec.ts` checks against the `tests/` directory, so it cannot drift.
+The suite covers configuration validation, the protocol ladder, gateway and online metadata, the catalog projection, the adapter on the wire (all three protocols), Remote contracts and services, session-header invariants, usage windows and the meter, the client controller and usage pill, both halves' mounting and registration, the error mapping for stream idle timeouts and aborts, the exit-code contract of the verification scripts, and several **structural invariants** (inject declarations match the source's reads, peer coverage holds both ways, the READMEs match the manifest, and the READMEs' claims about the upstream match the upstream actually installed). That is **64 test files** — a number `tests/readme-consistency.spec.ts` checks against the `tests/` directory, so it cannot drift.
 
 ## Releasing (maintainers)
 

package/README.md

@@ -82,6 +82,8 @@ DSH 桌面端是 Electron 壳 + 完整的 dsh Web 应用，本插件对它同样
 
 版本约束与 CLI 一致：桌面端内置的 DSH 要落在已声明并验证过的版本带内（`>=0.2.0-rc.1 <0.3.0`，见「兼容性」）。若插件导致启动失败，桌面端的原生恢复对话框可以一键**禁用第三方插件、备份 `cordis.patch.yml` 后重启**，不会把应用锁死。
 
+设置页里另有一栏**「桌面版」**：点「检查下载地址」会读取官方发布源 `https://download.deepseek.com/dsh-desk/feeds/win-x64/nightly.yml`，显示当前最新安装包的版本、发布时间、大小、灰度比例、SHA-512 与下载地址，地址可一键复制或用浏览器打开。这里**只读发布源、只显示地址**——插件不会下载、校验或安装任何东西。结果在 Host 侧缓存 6 小时，发布源没响应时会明确说「下载站没有响应」，而不是假装「没有新版本」。
+
 ## 配置
 
 配置写在 profile 的 `cordis.patch.yml`：
@@ -290,7 +292,7 @@ npm run seed        # 发版前刷新捆绑的目录种子（见「发布」）
 
 **顺序有讲究**：`npm run build` 要排在 `npm test` 之前——`tests/pack-contents.spec.ts` 会遍历 `exports` 的每个目标，`lib/` 存在与否决定这条检查是执行还是被跳过（不报错，但会少一层保护）。`package.json` 已移除 `prepare`，因此 `npm ci` 不会再替你隐式构建；三个 CI workflow 都显式跑了 `npm run build`。
 
-测试覆盖配置校验、协议阶梯、网关与在线元数据、目录投影、适配器（三种协议的线上请求）、Remote 契约与服务、会话头不变量、用量窗口与计量、客户端控制器与用量组件、两半的挂载与登记、流空闲超时与中止的错误映射、验证脚本的退出码契约、以及几条**结构性不变量**（inject 声明与源码读取一致、peer 覆盖双向、README 与 manifest 一致、README 对上游的断言与实装的上游一致）。共 **61 个测试文件**——这个数字由 `tests/readme-consistency.spec.ts` 对着 `tests/` 目录校验，不会漂移。
+测试覆盖配置校验、协议阶梯、网关与在线元数据、目录投影、适配器（三种协议的线上请求）、Remote 契约与服务、会话头不变量、用量窗口与计量、客户端控制器与用量组件、两半的挂载与登记、流空闲超时与中止的错误映射、验证脚本的退出码契约、以及几条**结构性不变量**（inject 声明与源码读取一致、peer 覆盖双向、README 与 manifest 一致、README 对上游的断言与实装的上游一致）。共 **64 个测试文件**——这个数字由 `tests/readme-consistency.spec.ts` 对着 `tests/` 目录校验，不会漂移。
 
 ## 发布（维护者）
 

package/lib/client.js

@@ -717,7 +717,23 @@ var en = {
   updateInspectRefused: "The published target could not be verified, so the installed version was left untouched:",
   updateStopProfile: "The running version cannot be removed without a restart; restart DSH first, then retry.",
   updateIncompatible: "The new version is incompatible with this DSH build; finish the update from the plugin manager page (a version exemption needs your explicit approval).",
-  updatePendingBuilds: "Installation needs build-script approval; approve it on the plugin manager page, then retry."
+  updatePendingBuilds: "Installation needs build-script approval; approve it on the plugin manager page, then retry.",
+  desktopTitle: "Desktop app",
+  desktopHint: "The newest installer published for this platform. The address is shown, never downloaded \u2014 copy it or open it in a browser.",
+  desktopCheck: "Check download address",
+  desktopChecking: "Checking the download host\u2026",
+  desktopVersion: "Newest build:",
+  desktopPublished: "published",
+  desktopSize: "size",
+  desktopStaging: "staged rollout",
+  desktopCopy: "Copy address",
+  desktopCopied: "Copied",
+  desktopCopyFailed: "The address could not be copied; select it and copy by hand.",
+  desktopOpen: "Open download",
+  desktopUnavailable: "The download host did not answer, so no installer address was read; choose Check download address to retry.",
+  desktopFailed: "The check failed:",
+  desktopRemoteMissing: "The desktop download service is not ready yet; choose Check download address to retry.",
+  desktopNoRelease: "The download host answered, but published no installer for this platform."
 };
 var zh = {
   nav: "OpenCode Go",
@@ -929,7 +945,23 @@ var zh = {
   updateInspectRefused: "\u65E0\u6CD5\u9A8C\u8BC1\u53D1\u5E03\u7684\u76EE\u6807\uFF0C\u5DF2\u4FDD\u7559\u5F53\u524D\u7248\u672C\u672A\u505A\u6539\u52A8\uFF1A",
   updateStopProfile: "\u8FD0\u884C\u4E2D\u7684\u7248\u672C\u9700\u91CD\u542F\u540E\u624D\u80FD\u79FB\u9664\uFF1B\u8BF7\u5148\u91CD\u542F DSH \u518D\u91CD\u8BD5\u3002",
   updateIncompatible: "\u65B0\u7248\u672C\u4E0E\u5F53\u524D DSH \u4E0D\u517C\u5BB9\uFF0C\u8BF7\u524D\u5F80\u63D2\u4EF6\u7BA1\u7406\u9875\u5B8C\u6210\u66F4\u65B0\uFF08\u7248\u672C\u8C41\u514D\u9700\u660E\u786E\u6279\u51C6\uFF09\u3002",
-  updatePendingBuilds: "\u5B89\u88C5\u9700\u8981\u6279\u51C6\u6784\u5EFA\u811A\u672C\uFF1B\u8BF7\u524D\u5F80\u63D2\u4EF6\u7BA1\u7406\u9875\u6279\u51C6\u540E\u518D\u91CD\u8BD5\u3002"
+  updatePendingBuilds: "\u5B89\u88C5\u9700\u8981\u6279\u51C6\u6784\u5EFA\u811A\u672C\uFF1B\u8BF7\u524D\u5F80\u63D2\u4EF6\u7BA1\u7406\u9875\u6279\u51C6\u540E\u518D\u91CD\u8BD5\u3002",
+  desktopTitle: "\u684C\u9762\u7248",
+  desktopHint: "\u5F53\u524D\u5E73\u53F0\u6700\u65B0\u53D1\u5E03\u7684\u5B89\u88C5\u5305\u3002\u8FD9\u91CC\u53EA\u663E\u793A\u5730\u5740\uFF0C\u4E0D\u4F1A\u4E0B\u8F7D\u2014\u2014\u53EF\u4EE5\u590D\u5236\uFF0C\u6216\u7528\u6D4F\u89C8\u5668\u6253\u5F00\u3002",
+  desktopCheck: "\u68C0\u67E5\u4E0B\u8F7D\u5730\u5740",
+  desktopChecking: "\u6B63\u5728\u67E5\u8BE2\u4E0B\u8F7D\u7AD9\u2026",
+  desktopVersion: "\u6700\u65B0\u7248\u672C\uFF1A",
+  desktopPublished: "\u53D1\u5E03\u4E8E",
+  desktopSize: "\u5927\u5C0F",
+  desktopStaging: "\u7070\u5EA6\u6BD4\u4F8B",
+  desktopCopy: "\u590D\u5236\u5730\u5740",
+  desktopCopied: "\u5DF2\u590D\u5236",
+  desktopCopyFailed: "\u5730\u5740\u590D\u5236\u5931\u8D25\uFF1B\u8BF7\u624B\u52A8\u9009\u4E2D\u540E\u590D\u5236\u3002",
+  desktopOpen: "\u6253\u5F00\u4E0B\u8F7D",
+  desktopUnavailable: "\u4E0B\u8F7D\u7AD9\u6CA1\u6709\u54CD\u5E94\uFF0C\u672A\u83B7\u53D6\u5230\u5B89\u88C5\u5305\u5730\u5740\uFF1B\u8BF7\u70B9\u51FB\u201C\u68C0\u67E5\u4E0B\u8F7D\u5730\u5740\u201D\u91CD\u8BD5\u3002",
+  desktopFailed: "\u68C0\u67E5\u5931\u8D25\uFF1A",
+  desktopRemoteMissing: "\u684C\u9762\u7248\u4E0B\u8F7D\u670D\u52A1\u5C1A\u672A\u5C31\u7EEA\uFF1B\u8BF7\u70B9\u51FB\u201C\u68C0\u67E5\u4E0B\u8F7D\u5730\u5740\u201D\u91CD\u8BD5\u3002",
+  desktopNoRelease: "\u4E0B\u8F7D\u7AD9\u6709\u54CD\u5E94\uFF0C\u4F46\u6CA1\u6709\u4E3A\u8BE5\u5E73\u53F0\u53D1\u5E03\u5B89\u88C5\u5305\u3002"
 };
 
 // src/client/Section.tsx
@@ -1113,7 +1145,8 @@ var INITIAL = {
   writable: false,
   saving: false,
   filter: INITIAL_FILTER,
-  update: { phase: "idle", status: void 0, message: void 0 }
+  update: { phase: "idle", status: void 0, message: void 0 },
+  desktop: { phase: "idle", reading: void 0, message: void 0, copied: false }
 };
 function settingsOf(value) {
   if (value === null || typeof value !== "object") return void 0;
@@ -1166,6 +1199,7 @@ var SectionController = class _SectionController {
     void this.loadKey();
     void this.loadNetwork();
     void this.checkUpdate(false);
+    void this.checkDesktop(false);
   }
   subscribe = (listener) => {
     this.listeners.add(listener);
@@ -1375,6 +1409,71 @@ var SectionController = class _SectionController {
       });
     }
   }
+  /**
+   * The desktop download Remote.
+   *
+   * Declared in `client/index.ts`'s inject list, so the namespace is mounted by
+   * the time this controller exists; the guard is a defensive assertion, not a
+   * wait, for the same reason the update Remote's is.
+   * @returns the mounted desktop Remote.
+   * @throws {Error} `remote-not-mounted` when the namespace is absent.
+   */
+  desktopRemote() {
+    const remote = this.services.remote.opencodeGoDesktop;
+    if (remote === void 0) throw new Error("remote-not-mounted");
+    return remote;
+  }
+  /**
+   * Ask the Host which installer the desktop download host publishes.
+   *
+   * The Host answers from a cached feed reading and fails silent, so an
+   * unreachable download host still answers "no installer known" rather than
+   * erroring the page. Runs once with the page and again only on explicit
+   * refresh — same shape as the update check, and for the same reason: both
+   * wire methods take zero arguments.
+   */
+  async checkDesktop(force) {
+    const previous = this.state.desktop;
+    this.set({ desktop: { ...previous, phase: "checking", message: void 0, copied: false } });
+    try {
+      const remote = this.desktopRemote();
+      const result = force ? await remote.refreshDesktop() : await remote.readDesktop();
+      if (!result.ok) throw result.error;
+      const reading = result.value;
+      this.set({
+        desktop: {
+          // An unanswered feed is not "nothing published": rendering the two
+          // alike would report a dead download host as an empty channel.
+          phase: !reading.checked ? "failed" : reading.release === void 0 ? "empty" : "ready",
+          reading,
+          message: reading.checked ? void 0 : "feed-unreachable",
+          copied: false
+        }
+      });
+    } catch (error) {
+      this.set({
+        desktop: {
+          phase: "failed",
+          reading: previous.reading,
+          message: error instanceof Error ? error.message : "the download check failed",
+          copied: false
+        }
+      });
+    }
+  }
+  /** Copy the installer address to the clipboard; the address stays on screen either way. */
+  async copyDesktopAddress() {
+    const url = this.state.desktop.reading?.release?.url;
+    if (url === void 0) return;
+    try {
+      const clipboard = globalThis.navigator?.clipboard;
+      if (clipboard === void 0) throw new Error("no clipboard");
+      await clipboard.writeText(url);
+      this.set({ desktop: { ...this.state.desktop, copied: true, message: void 0 } });
+    } catch {
+      this.set({ desktop: { ...this.state.desktop, copied: false, message: "copy-failed" } });
+    }
+  }
   /** Arm the confirm step; the destructive two-step runs only from `applyUpdate`. */
   armUpdate() {
     if (this.state.update.phase === "ready") {
@@ -1804,6 +1903,82 @@ function updateFailureText(message, t) {
   if (message === "pending-builds") return t("updatePendingBuilds");
   return message;
 }
+function formatBytes(bytes2) {
+  const units = ["B", "KB", "MB", "GB", "TB"];
+  let value = bytes2;
+  let unit = 0;
+  while (value >= 1024 && unit < units.length - 1) {
+    value /= 1024;
+    unit += 1;
+  }
+  const rounded = unit === 0 || value >= 10 ? Math.round(value) : Math.round(value * 10) / 10;
+  return `${rounded} ${units[unit] ?? "B"}`;
+}
+function formatReleaseDate(value) {
+  const at = new Date(value);
+  if (Number.isNaN(at.getTime())) return value;
+  return at.toLocaleString(void 0, { dateStyle: "medium", timeStyle: "short" });
+}
+function DesktopBanner({ controller, t, busy, act, desktop }) {
+  if (desktop.phase === "idle") return null;
+  const release = desktop.reading?.release;
+  const check = () => {
+    void act(async () => {
+      await controller.checkDesktop(true);
+    });
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.block, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.row, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("desktopTitle") }),
+      desktop.phase === "checking" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: t("desktopChecking") }),
+      desktop.phase === "ready" && release !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: `${t("desktopVersion")} ${release.version}` }),
+        release.releaseDate !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: `${t("desktopPublished")} ${formatReleaseDate(release.releaseDate)}` }),
+        release.size !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: `${t("desktopSize")} ${formatBytes(release.size)}` }),
+        release.stagingPercentage !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: `${t("desktopStaging")} ${release.stagingPercentage}%` }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", className: section_default.button, disabled: busy, onClick: check, children: t("desktopCheck") })
+      ] }),
+      desktop.phase === "empty" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: t("desktopNoRelease") }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", className: section_default.button, disabled: busy, onClick: check, children: t("desktopCheck") })
+      ] }),
+      desktop.phase === "failed" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.warn, children: t("desktopFailed") }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: desktopFailureText(desktop.message, t) }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", className: section_default.button, disabled: busy, onClick: check, children: t("desktopCheck") })
+      ] })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: section_default.hint, children: t("desktopHint") }),
+    desktop.phase === "ready" && release !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.row, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.mono, children: release.url }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+          "button",
+          {
+            type: "button",
+            className: section_default.button,
+            disabled: busy,
+            onClick: () => {
+              void act(async () => {
+                await controller.copyDesktopAddress();
+              });
+            },
+            children: desktop.copied ? t("desktopCopied") : t("desktopCopy")
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("a", { className: section_default.button, href: release.url, target: "_blank", rel: "noreferrer", children: t("desktopOpen") })
+      ] }),
+      desktop.message === "copy-failed" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: section_default.warn, children: t("desktopCopyFailed") }),
+      release.sha512 !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: section_default.hint, children: `SHA-512 ${release.sha512}` })
+    ] })
+  ] });
+}
+function desktopFailureText(message, t) {
+  if (message === void 0 || message.length === 0) return "";
+  if (message === "remote-not-mounted") return t("desktopRemoteMissing");
+  if (message === "feed-unreachable") return t("desktopUnavailable");
+  return message;
+}
 function Section({ controller, t, getLocale, openRequestLog }) {
   const state = (0, import_react.useSyncExternalStore)(controller.subscribe, controller.snapshot, controller.snapshot);
   const [keyDraft, setKeyDraft] = (0, import_react.useState)("");
@@ -1834,6 +2009,7 @@ function Section({ controller, t, getLocale, openRequestLog }) {
     /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h2", { className: section_default.title, children: t("nav") }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: section_default.hint, children: t("intro") }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsx)(UpdateBanner, { controller, t, busy, act, update: state.update }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)(DesktopBanner, { controller, t, busy, act, desktop: state.desktop }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.block, children: [
       /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.row, children: [
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("keyTitle") }),
@@ -3292,7 +3468,7 @@ function apply(ctx) {
       void dispose?.();
     };
   }, "dshopencodego: usage Remote");
-  ctx.inject(["configForms", "remote.opencodeGoCatalog", "remote.opencodeGoUpdate", "remote.opencodeGoNetwork", "remote.opencodeGoRequestLog", "remote.credentials"], (scope) => {
+  ctx.inject(["configForms", "remote.opencodeGoCatalog", "remote.opencodeGoUpdate", "remote.opencodeGoNetwork", "remote.opencodeGoDesktop", "remote.opencodeGoRequestLog", "remote.credentials"], (scope) => {
     const forms = scope.get("configForms");
     const pluginManager = {};
     const profile = forms?.get("dshopencodego");

package/lib/index.js

@@ -74427,8 +74427,8 @@ function writeDocCache(cacheDir, entry) {
 
 // src/catalog/go-doc.ts
 var GO_DOC_URLS = [
-  "https://raw.githubusercontent.com/anomalyco/opencode/dev/services/www/src/docs/content/console/go.mdx",
-  "https://cdn.jsdelivr.net/gh/anomalyco/opencode@dev/services/www/src/docs/content/console/go.mdx"
+  "https://raw.githubusercontent.com/anomalyco/opencode/dev/services/site/src/docs/content/console/go.mdx",
+  "https://cdn.jsdelivr.net/gh/anomalyco/opencode@dev/services/site/src/docs/content/console/go.mdx"
 ];
 var GO_DOC_MAX_BYTES = 1024 * 1024;
 var ENDPOINT_PROTOCOLS = {
@@ -79124,6 +79124,75 @@ var catalogRemote = {
   ]
 };
 
+// src/desktop/contract.ts
+function parseRelease(value) {
+  if (value === null || typeof value !== "object") throw new Error("invalid desktop release");
+  const row = value;
+  const version = row["version"];
+  const url = row["url"];
+  if (typeof version !== "string" || version.length === 0) throw new Error("invalid desktop release");
+  if (typeof url !== "string" || url.length === 0) throw new Error("invalid desktop release");
+  const size = row["size"];
+  const sha512 = row["sha512"];
+  const stagingPercentage = row["stagingPercentage"];
+  const releaseDate = row["releaseDate"];
+  return {
+    version,
+    url,
+    ...typeof size === "number" && Number.isFinite(size) && size >= 0 ? { size } : {},
+    ...typeof sha512 === "string" && sha512.length > 0 ? { sha512 } : {},
+    ...typeof stagingPercentage === "number" && Number.isFinite(stagingPercentage) ? { stagingPercentage } : {},
+    ...typeof releaseDate === "string" && releaseDate.length > 0 ? { releaseDate } : {}
+  };
+}
+function parseDesktopReading(value) {
+  if (value === null || typeof value !== "object") throw new Error("invalid desktop reading");
+  const row = value;
+  if (typeof row["checked"] !== "boolean") throw new Error("invalid desktop reading");
+  if (typeof row["checkedAt"] !== "number" || !Number.isFinite(row["checkedAt"])) {
+    throw new Error("invalid desktop reading");
+  }
+  if (typeof row["platform"] !== "string") throw new Error("invalid desktop reading");
+  if (typeof row["channel"] !== "string") throw new Error("invalid desktop reading");
+  const release = row["release"];
+  return {
+    checked: row["checked"],
+    checkedAt: row["checkedAt"],
+    platform: row["platform"],
+    channel: row["channel"],
+    ...release === void 0 ? {} : { release: parseRelease(release) }
+  };
+}
+var codec2 = {
+  mode: "strict",
+  typeSymbol: "@dan-ai-studio/dshopencodego#DesktopReading",
+  schema: { parse: parseDesktopReading },
+  create: () => ({ parse: parseDesktopReading })
+};
+var desktopRemote = {
+  package: "@dan-ai-studio/dshopencodego",
+  descriptors: [
+    {
+      id: "@dan-ai-studio/dshopencodego#opencodeGoDesktop/readDesktop",
+      service: "opencodeGoDesktop",
+      namespace: "opencodeGoDesktop",
+      method: "readDesktop",
+      invocation: { kind: "direct" },
+      parameters: [],
+      result: codec2
+    },
+    {
+      id: "@dan-ai-studio/dshopencodego#opencodeGoDesktop/refreshDesktop",
+      service: "opencodeGoDesktop",
+      namespace: "opencodeGoDesktop",
+      method: "refreshDesktop",
+      invocation: { kind: "direct" },
+      parameters: [],
+      result: codec2
+    }
+  ]
+};
+
 // src/network/contract.ts
 function parseNetworkReading(value) {
   if (value === null || typeof value !== "object") throw new Error("invalid network reading");
@@ -79138,7 +79207,7 @@ function parseNetworkReading(value) {
     ...typeof failed === "boolean" ? { failed } : {}
   };
 }
-var codec2 = {
+var codec3 = {
   mode: "strict",
   typeSymbol: "@dan-ai-studio/dshopencodego#NetworkReading",
   schema: { parse: parseNetworkReading },
@@ -79154,7 +79223,7 @@ var networkRemote = {
       method: "readNetwork",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec2
+      result: codec3
     }
   ]
 };
@@ -79512,7 +79581,7 @@ function parseRequestLogSnapshot(value) {
     ...typeof row["poolKey"] === "string" ? { poolKey: row["poolKey"] } : {}
   };
 }
-var codec3 = {
+var codec4 = {
   mode: "strict",
   typeSymbol: "@dan-ai-studio/dshopencodego#RequestLogSnapshot",
   schema: { parse: parseRequestLogSnapshot },
@@ -79528,7 +79597,7 @@ var requestLogRemote = {
       method: "readLog",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec3
+      result: codec4
     }
   ]
 };
@@ -79552,7 +79621,7 @@ function parseUpdateStatus(value) {
     checked: row["checked"]
   };
 }
-var codec4 = (typeSymbol, parse) => ({
+var codec5 = (typeSymbol, parse) => ({
   mode: "strict",
   typeSymbol,
   schema: { parse },
@@ -79568,7 +79637,7 @@ var updateRemote = {
       method: "readUpdate",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec4("@dan-ai-studio/dshopencodego#UpdateStatus", parseUpdateStatus)
+      result: codec5("@dan-ai-studio/dshopencodego#UpdateStatus", parseUpdateStatus)
     },
     {
       id: "@dan-ai-studio/dshopencodego#opencodeGoUpdate/refreshUpdate",
@@ -79577,7 +79646,7 @@ var updateRemote = {
       method: "refreshUpdate",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec4("@dan-ai-studio/dshopencodego#UpdateStatus", parseUpdateStatus)
+      result: codec5("@dan-ai-studio/dshopencodego#UpdateStatus", parseUpdateStatus)
     }
   ]
 };
@@ -79643,7 +79712,7 @@ function parseGoMeter(value) {
     })
   };
 }
-var codec5 = (typeSymbol, parse) => ({
+var codec6 = (typeSymbol, parse) => ({
   mode: "strict",
   typeSymbol,
   schema: { parse },
@@ -79659,7 +79728,7 @@ var usageRemote = {
       method: "readWindows",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec5("@dan-ai-studio/dshopencodego#GoUsageWindows", parseUsageWindows)
+      result: codec6("@dan-ai-studio/dshopencodego#GoUsageWindows", parseUsageWindows)
     },
     {
       id: "@dan-ai-studio/dshopencodego#opencodeGoUsage/readMeter",
@@ -79668,7 +79737,7 @@ var usageRemote = {
       method: "readMeter",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec5("@dan-ai-studio/dshopencodego#GoMeter", parseGoMeter)
+      result: codec6("@dan-ai-studio/dshopencodego#GoMeter", parseGoMeter)
     }
   ]
 };
@@ -79681,6 +79750,7 @@ var contribution = {
     ...catalogRemote.descriptors,
     ...updateRemote.descriptors,
     ...networkRemote.descriptors,
+    ...desktopRemote.descriptors,
     ...requestLogRemote.descriptors
   ]
 };
@@ -79816,6 +79886,174 @@ function catalogFailure(error) {
   }, { cause: error });
 }
 
+// src/desktop/feed.ts
+var DESKTOP_FEED_PLATFORM = "win-x64";
+var DESKTOP_FEED_CHANNEL = "nightly";
+var DESKTOP_FEED_URL = `https://download.deepseek.com/dsh-desk/feeds/${DESKTOP_FEED_PLATFORM}/${DESKTOP_FEED_CHANNEL}.yml`;
+var DESKTOP_CACHE_MS = 6 * 60 * 60 * 1e3;
+var DESKTOP_TIMEOUT_MS = 1e4;
+function indentOf(line) {
+  return line.length - line.trimStart().length;
+}
+function unquote(raw) {
+  const value = raw.trim();
+  const quoted = value.length >= 2 && (value.startsWith("'") && value.endsWith("'") || value.startsWith('"') && value.endsWith('"'));
+  return quoted ? value.slice(1, -1) : value;
+}
+function toNumber(value) {
+  if (!/^\d+$/.test(value)) return void 0;
+  const parsed = Number(value);
+  return Number.isFinite(parsed) ? parsed : void 0;
+}
+function foldBlocks(source) {
+  const lines = source.split(/\r?\n/);
+  const out = [];
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index] ?? "";
+    const open = /^([ \t]*)([A-Za-z][\w-]*):[ \t]*(>-?|>|\|-?|\|)[ \t]*$/.exec(line);
+    if (open === null) {
+      out.push({ indent: indentOf(line), text: line.trim() });
+      continue;
+    }
+    const [, leading = "", key = "", marker = ""] = open;
+    const indent = leading.length;
+    const parts = [];
+    let cursor = index + 1;
+    for (; cursor < lines.length; cursor += 1) {
+      const next = lines[cursor] ?? "";
+      if (next.trim().length === 0) continue;
+      if (indentOf(next) <= indent) break;
+      parts.push(next.trim());
+    }
+    out.push({ indent, text: `${key}: ${parts.join(marker.startsWith("|") ? "\n" : " ")}` });
+    index = cursor - 1;
+  }
+  return out;
+}
+function assignFile(target, text2) {
+  const match = /^([A-Za-z][\w-]*):[ \t]*(.*)$/.exec(text2);
+  if (match === null) return;
+  const [, key = "", raw = ""] = match;
+  const value = unquote(raw);
+  if (key === "url") target.url = value;
+  else if (key === "sha512") target.sha512 = value;
+  else if (key === "size") {
+    const size = toNumber(value);
+    if (size !== void 0) target.size = size;
+  }
+}
+function parseDesktopFeed(source) {
+  let version;
+  let path5;
+  let digest;
+  let stagingPercentage;
+  let releaseDate;
+  const files = [];
+  let section = "top";
+  for (const line of foldBlocks(source)) {
+    const text2 = line.text;
+    if (text2.length === 0 || text2.startsWith("#")) continue;
+    if (line.indent === 0) {
+      const match = /^([A-Za-z][\w-]*):[ \t]*(.*)$/.exec(text2);
+      if (match === null) continue;
+      const [, key = "", raw = ""] = match;
+      section = key === "files" ? "files" : "top";
+      if (section === "files") continue;
+      const value = unquote(raw);
+      if (key === "version") version = value;
+      else if (key === "path") path5 = value;
+      else if (key === "sha512") digest = value;
+      else if (key === "releaseDate") releaseDate = value;
+      else if (key === "stagingPercentage") stagingPercentage = toNumber(value);
+      continue;
+    }
+    if (section !== "files") continue;
+    if (text2.startsWith("-")) {
+      files.push({});
+      const rest = text2.slice(1).trim();
+      const target2 = files[files.length - 1];
+      if (target2 !== void 0 && rest.length > 0) assignFile(target2, rest);
+      continue;
+    }
+    const target = files[files.length - 1];
+    if (target !== void 0) assignFile(target, text2);
+  }
+  const first = files[0];
+  const url = path5 ?? first?.url;
+  if (version === void 0 || version.length === 0) return void 0;
+  if (url === void 0 || url.length === 0) return void 0;
+  const sha512 = digest ?? first?.sha512;
+  return {
+    version,
+    url,
+    ...first?.size === void 0 ? {} : { size: first.size },
+    ...sha512 === void 0 ? {} : { sha512 },
+    ...stagingPercentage === void 0 ? {} : { stagingPercentage },
+    ...releaseDate === void 0 ? {} : { releaseDate }
+  };
+}
+function createDesktopFeedReader(deps = {}) {
+  const now = deps.now ?? Date.now;
+  const fetchImpl = deps.fetchImpl ?? fetch;
+  let cached;
+  let inflight;
+  async function lookup() {
+    const checkedAt = now();
+    const identity = { checkedAt, platform: DESKTOP_FEED_PLATFORM, channel: DESKTOP_FEED_CHANNEL };
+    try {
+      const response = await fetchImpl(DESKTOP_FEED_URL, {
+        signal: AbortSignal.timeout(DESKTOP_TIMEOUT_MS),
+        headers: { accept: "text/yaml, text/plain, */*" }
+      });
+      if (!response.ok) throw new Error(`feed answered ${response.status}`);
+      const release = parseDesktopFeed(await response.text());
+      if (release === void 0) throw new Error("feed carried no release");
+      return { ...identity, checked: true, release };
+    } catch {
+      return { ...identity, checked: false };
+    }
+  }
+  return {
+    read(force = false) {
+      if (!force && cached !== void 0 && now() - cached.checkedAt < DESKTOP_CACHE_MS) {
+        return Promise.resolve(cached);
+      }
+      inflight ??= lookup().then((reading) => {
+        cached = reading;
+        inflight = void 0;
+        return reading;
+      });
+      return inflight;
+    }
+  };
+}
+
+// src/desktop/service.ts
+import { TypertRemoteService as TypertRemoteService2 } from "@deepseek-ai/dsh-typert-protocol";
+var OpencodeGoDesktopService = class extends TypertRemoteService2 {
+  read;
+  constructor(ctx) {
+    super(ctx, "opencodeGoDesktop");
+    const reader = createDesktopFeedReader();
+    this.read = (force) => reader.read(force);
+  }
+  /**
+   * The newest published installer (cached reading).
+   *
+   * The wire method takes no arguments — the gateway client rejects any call
+   * whose positional arity differs from the descriptor's `parameters`, so a
+   * `force` flag cannot ride this call. Forced revalidation is the separate
+   * `refreshDesktop` method below, mirroring the update Remote's pair.
+   */
+  readDesktop() {
+    return this.read(false);
+  }
+  /** Revalidate against the feed, bypassing the cache. */
+  refreshDesktop() {
+    return this.read(true);
+  }
+};
+
 // src/network/pinning.ts
 var import_undici = __toESM(require_undici(), 1);
 import { isIP } from "node:net";
@@ -79972,8 +80210,8 @@ function gatewayFetch(pin, keepAliveTimeoutMs) {
 }
 
 // src/network/service.ts
-import { TypertRemoteService as TypertRemoteService2 } from "@deepseek-ai/dsh-typert-protocol";
-var OpencodeGoNetworkService = class extends TypertRemoteService2 {
+import { TypertRemoteService as TypertRemoteService3 } from "@deepseek-ai/dsh-typert-protocol";
+var OpencodeGoNetworkService = class extends TypertRemoteService3 {
   options;
   constructor(ctx, options) {
     super(ctx, "opencodeGoNetwork");
@@ -79991,8 +80229,8 @@ var OpencodeGoNetworkService = class extends TypertRemoteService2 {
 };
 
 // src/request-log/service.ts
-import { TypertRemoteService as TypertRemoteService3 } from "@deepseek-ai/dsh-typert-protocol";
-var OpencodeGoRequestLogService = class extends TypertRemoteService3 {
+import { TypertRemoteService as TypertRemoteService4 } from "@deepseek-ai/dsh-typert-protocol";
+var OpencodeGoRequestLogService = class extends TypertRemoteService4 {
   options;
   constructor(ctx, options) {
     super(ctx, "opencodeGoRequestLog");
@@ -80098,11 +80336,11 @@ function createUpdateChecker(deps) {
 }
 
 // src/update/version.ts
-var PLUGIN_VERSION = true ? "0.1.91" : "0.0.0-dev";
+var PLUGIN_VERSION = true ? "0.1.92" : "0.0.0-dev";
 
 // src/update/service.ts
-import { TypertRemoteService as TypertRemoteService4 } from "@deepseek-ai/dsh-typert-protocol";
-var OpencodeGoUpdateService = class extends TypertRemoteService4 {
+import { TypertRemoteService as TypertRemoteService5 } from "@deepseek-ai/dsh-typert-protocol";
+var OpencodeGoUpdateService = class extends TypertRemoteService5 {
   check;
   constructor(ctx, options) {
     super(ctx, "opencodeGoUpdate");
@@ -80182,7 +80420,7 @@ async function readUsageWindows(options) {
 
 // src/usage/service.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { RemoteError as RemoteError2, TypertRemoteService as TypertRemoteService5 } from "@deepseek-ai/dsh-typert-protocol";
+import { RemoteError as RemoteError2, TypertRemoteService as TypertRemoteService6 } from "@deepseek-ai/dsh-typert-protocol";
 import { LlmError as LlmError13 } from "@deepseek-ai/dsh-llm";
 function usageFailure(error, source) {
   const missing = error instanceof LlmError13 && error.code === "MISSING_CREDENTIAL";
@@ -80193,7 +80431,7 @@ function usageFailure(error, source) {
     { cause: error }
   );
 }
-var OpencodeGoUsageService = class extends TypertRemoteService5 {
+var OpencodeGoUsageService = class extends TypertRemoteService6 {
   identity;
   options;
   constructor(ctx, options) {
@@ -80345,6 +80583,7 @@ function apply(ctx, raw) {
     }
   });
   ctx.plugin(OpencodeGoUpdateService, { currentVersion: PLUGIN_VERSION });
+  ctx.plugin(OpencodeGoDesktopService);
   ctx.effect(() => {
     const refresh = () => {
       void adapter.catalogOf(current2()).snapshot().catch(() => void 0);

package/lib/types/catalog/go-doc.d.ts

@@ -22,11 +22,12 @@ import type { WireProtocol } from './protocol.ts';
  * same path and is tried when GitHub itself is unreachable.
  *
  * The path is the provider's own, and it moves: `go.mdx` used to live at
- * `packages/web/src/content/docs/go.mdx` and the `packages/web` tree was
- * restructured, after which every request answered 404. A document that cannot
- * be read costs the endpoint table — the provider's own statement of each
- * model's protocol — so the path is asserted against the live repository by
- * `tests/go-doc-url.spec.ts` rather than left to rot unnoticed.
+ * `packages/web/src/content/docs/go.mdx`, then at
+ * `services/www/src/docs/content/console/go.mdx`, and the `www` tree was
+ * renamed to `site` — after which both mirrors answered 404 again. A document
+ * that cannot be read costs the endpoint table — the provider's own statement
+ * of each model's protocol — so the path is asserted against the live
+ * repository by `tests/go-doc-url.spec.ts` rather than left to rot unnoticed.
  */
 export declare const GO_DOC_URLS: readonly string[];
 /** What one parse of the document yields. */

package/lib/types/desktop/contract.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Wire contract for the desktop Remote.
+ *
+ * `readDesktop` answers which installer the desktop download host publishes
+ * right now, and where it lives. The reading is advisory: the page shows the
+ * address so a human can copy it or open it in a browser, and nothing here
+ * downloads or installs anything.
+ *
+ * @module @dan-ai-studio/dshopencodego/desktop/contract
+ */
+import type { RemoteResult, TypertRemoteContribution } from '@deepseek-ai/dsh-typert-protocol';
+import type { DesktopReading } from './feed.ts';
+export type { DesktopReading, DesktopRelease } from './feed.ts';
+/** Validate a desktop reading crossing the wire. */
+export declare function parseDesktopReading(value: unknown): DesktopReading;
+declare module '@deepseek-ai/dsh-typert-protocol' {
+    interface TypertRemoteNamespaceMap {
+        opencodeGoDesktop: {
+            readDesktop(): Promise<RemoteResult<DesktopReading>>;
+            refreshDesktop(): Promise<RemoteResult<DesktopReading>>;
+        };
+    }
+}
+/** Remote methods this package owns, mounted together by the plugin. */
+export declare const desktopRemote: TypertRemoteContribution;

package/lib/types/desktop/feed.d.ts

@@ -0,0 +1,96 @@
+/**
+ * The desktop app's release feed.
+ *
+ * The Harness desktop build publishes one small YAML document per platform and
+ * channel under `download.deepseek.com/dsh-desk/feeds/`. Reading it answers a
+ * single question — which installer is the newest one published right now, and
+ * where does it live? — without asking the user to curl the feed by hand.
+ *
+ * This module only *reads*. It never downloads, verifies, or runs the
+ * installer: the address is surfaced so the page can show, copy, or open it,
+ * and the decision to install stays with the human. Verifying the published
+ * `sha512` would mean fetching a ~286 MB payload, which is not something a
+ * settings-page click may do unasked.
+ *
+ * Only `win-x64/nightly` exists today — every other platform directory answers
+ * 404 — so platform and channel are constants rather than a matrix. A feed that
+ * starts publishing elsewhere gets its own constant here.
+ *
+ * @module @dan-ai-studio/dshopencodego/desktop/feed
+ */
+/** Platform directory of the published feed. */
+export declare const DESKTOP_FEED_PLATFORM = "win-x64";
+/** Release channel of the published feed. */
+export declare const DESKTOP_FEED_CHANNEL = "nightly";
+/** Document answering the newest installer for that platform and channel. */
+export declare const DESKTOP_FEED_URL = "https://download.deepseek.com/dsh-desk/feeds/win-x64/nightly.yml";
+/** How long one reading answers for before the feed is asked again. */
+export declare const DESKTOP_CACHE_MS: number;
+/** Bound on one feed round trip; expiry fails silent, never throws. */
+export declare const DESKTOP_TIMEOUT_MS = 10000;
+/** One published installer, as the feed describes it. */
+export interface DesktopRelease {
+    /** Version the installer carries, e.g. `0.2.2-rc.3`. */
+    readonly version: string;
+    /** Absolute address of the installer. */
+    readonly url: string;
+    /** Size in bytes, when the feed states one. */
+    readonly size?: number;
+    /** Base64 SHA-512 of the payload, when the feed states one. */
+    readonly sha512?: string;
+    /** Share of clients this build is offered to, when the feed states one. */
+    readonly stagingPercentage?: number;
+    /** ISO timestamp of the publication, when the feed states one. */
+    readonly releaseDate?: string;
+}
+/** What the settings page renders. */
+export interface DesktopReading {
+    /**
+     * Whether the feed actually answered.
+     *
+     * `false` means the reading is a placeholder for a failed lookup: "no
+     * installer known", which is not the same fact as "nothing published". The
+     * page must not render the two alike.
+     */
+    readonly checked: boolean;
+    /** Milliseconds since the epoch of the lookup backing this reading. */
+    readonly checkedAt: number;
+    /** Platform the reading describes. */
+    readonly platform: string;
+    /** Channel the reading describes. */
+    readonly channel: string;
+    /** The newest installer, when the feed answered with one. */
+    readonly release?: DesktopRelease;
+}
+/**
+ * Read the newest installer out of one feed document.
+ *
+ * The top-level `path`/`sha512` pair is what the updater itself follows, so it
+ * wins over the `files:` list; that list is the fallback for a feed that only
+ * spells the payload out there. A document without both a version and an
+ * address is not a release this page can offer, and reads as `undefined`
+ * rather than as a half-filled row.
+ *
+ * @param source - the feed document as served.
+ * @returns the release it describes, or `undefined` when it describes none.
+ */
+export declare function parseDesktopFeed(source: string): DesktopRelease | undefined;
+/** Dependencies the reader needs, injectable for tests. */
+interface DesktopFeedDeps {
+    /** Fetch implementation; defaults to the global one. */
+    readonly fetchImpl?: typeof fetch;
+    /** Clock; defaults to `Date.now`. */
+    readonly now?: () => number;
+}
+/**
+ * Ask the feed for the newest installer, cached per process.
+ *
+ * Concurrent callers share one in-flight lookup. A lookup that fails for any
+ * reason — network, timeout, a 404, a document without a release — resolves as
+ * "no installer known" rather than rejecting, so the settings page never
+ * breaks because the download host is unreachable.
+ */
+export declare function createDesktopFeedReader(deps?: DesktopFeedDeps): {
+    read(force?: boolean): Promise<DesktopReading>;
+};
+export {};

package/lib/types/desktop/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The desktop app's download feed (advisory only).
+ *
+ * @module @dan-ai-studio/dshopencodego/desktop
+ */
+export { DESKTOP_CACHE_MS, DESKTOP_FEED_CHANNEL, DESKTOP_FEED_PLATFORM, DESKTOP_FEED_URL, DESKTOP_TIMEOUT_MS, } from './feed.ts';
+export type { DesktopReading, DesktopRelease } from './feed.ts';
+export { createDesktopFeedReader, parseDesktopFeed } from './feed.ts';
+export { OpencodeGoDesktopService } from './service.ts';
+export { desktopRemote, parseDesktopReading } from './contract.ts';

package/lib/types/desktop/service.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Host half of the desktop Remote.
+ *
+ * One question: which installer does the desktop download host publish right
+ * now? The service answers from the cached feed reader in `./feed.ts`, so the
+ * settings page learns the address without the model path ever touching the
+ * network. Downloading and installing are intentionally absent — this only
+ * reports where the installer lives.
+ *
+ * @module @dan-ai-studio/dshopencodego/desktop/service
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+import type { DesktopReading } from './feed.ts';
+/** Desktop Remote: the cached feed reading for the settings page. */
+export declare class OpencodeGoDesktopService extends TypertRemoteService {
+    private readonly read;
+    constructor(ctx: Context);
+    /**
+     * The newest published installer (cached reading).
+     *
+     * The wire method takes no arguments — the gateway client rejects any call
+     * whose positional arity differs from the descriptor's `parameters`, so a
+     * `force` flag cannot ride this call. Forced revalidation is the separate
+     * `refreshDesktop` method below, mirroring the update Remote's pair.
+     */
+    readDesktop(): Promise<DesktopReading>;
+    /** Revalidate against the feed, bypassing the cache. */
+    refreshDesktop(): Promise<DesktopReading>;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dan-ai-studio/dshopencodego",
-  "version": "0.1.91",
+  "version": "0.1.92",
   "description": "OpenCode Go provider for DeepSeek Harness: live gateway catalog, per-conversation session header, usage",
   "type": "module",
   "license": "MIT",