@dsh-libing/market 0.0.0-stage → 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,7 @@
+# Changelog
+
+## 0.1.0
+
+- 新增 Web 插件市场、官方 pluginManager 操作接口、机器目录与本地 tarball 开发源。
+- 提供中英文页面、版本确认、离线已安装列表与市场自身卸载保护。
+- 迁移商店 SVG 图标；市场卡片读取目录内嵌图标，缺失或加载失败时回退占位图。

package/README.md

@@ -1,3 +1,28 @@
-# Temporary Holding Version
+# @dsh-libing/market
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+DSH `0.2.0-rc.2` 的 TypeScript 插件市场，在 Web 侧边栏提供「LiBing 市场」。首版支持搜索、已安装状态、版本确认、安装、更新与卸载 `@dsh-libing/*` 插件；实际包操作和配置应用由官方 `pluginManager` 执行。
+
+## 本地测试
+
+在仓库根目录运行 `pnpm dev:market`。命令构建、打包并准备仓库 `.dsh/market-dev` 下的独立 Web 环境；机器目录和安装包分别来自 `packages/market-catalog/catalog.json` 与 `artifacts/`。启动日志提供带认证的浏览器地址。打开「LiBing 市场」，可安装和卸载 hello，再在会话中调用 `libing_hello`。
+
+源码修改后退出并重新运行命令。更新测试时提高 hello 的版本、同步 CHANGELOG、运行 `pnpm catalog:generate`，再启动；市场只把更高版本标为可更新。暂未发布 npm 包，所以本地模式是当前推荐测试入口。
+
+## 配置与分发
+
+Cordis entry id 为 `libing-market`，注入 `pluginManager`、`profileContext` 和 Host `connection`。路由位于 `/api/libing-market/state` 与 `/api/libing-market/mutate`，使用 Connection 的浏览器认证和同源检查。客户端只提交操作、包名及确认版本，不能指定路径或命令。
+
+| 配置 | 默认值 | 用途 |
+| --- | --- | --- |
+| `source` | `npm` | `npm` 或 `local`，显式选择目录和安装源 |
+| `registry` | `https://registry.npmjs.org/` | npm 模式查询和安装使用的 registry |
+| `catalogPath` | 无 | local 模式必填，catalog.json 的绝对路径 |
+| `artifactsDir` | 无 | local 模式必填，tarball 目录的绝对路径 |
+| `fetchTimeoutMs` | `20000` | 单次目录请求超时 |
+| `maxArchiveBytes` | `52428800` | 目录压缩包与 JSON 成员的大小上限 |
+
+npm 模式读取 `@dsh-libing/market-catalog` 的 latest 元数据，校验 tarball integrity，安装目录中的精确版本。local 模式校验 tarball 包名、版本和安装生命周期脚本。首次安装市场自身使用 DSH CLI；页面禁止自行卸载市场。
+
+目录失败时显示已安装插件，暂停安装和更新，保留允许的卸载操作。操作反馈区分立即生效、需要重启、被配置覆盖、取消与失败。首版不包含登录、GitCode 凭据、第三方插件、自动发布或安装脚本授权。
+
+市场卡片展示目录内嵌的插件图标，无需额外访问 CDN；缺失或加载失败时回退占位图。本插件的商店图标为随包分发的 `icon.svg`，由 `dsh.market.icon` 声明。

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: libing-market
+      name: '@dsh-libing/market'

package/icon.svg

@@ -0,0 +1,7 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 16 16" fill="none" stroke="#4778e8" stroke-width="1.25" stroke-linecap="round" stroke-linejoin="round">
+  <path d="M2.35 5.5v8.9h11.3V5.5"/>
+  <path d="M1.25 5.5 2.85 1.6h10.3l1.6 3.9H1.25Z"/>
+  <path d="m4.7 5.5.55-3.9m6.05 3.9-.55-3.9"/>
+  <rect x="4.1" y="8.1" width="3.45" height="3.6" rx=".35"/>
+  <path d="M5.825 8.1v3.6M4.1 9.9h3.45M9.7 14.4V8.1h2.15"/>
+</svg>

package/lib/archive.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Extract one regular JSON member into an owned temporary directory.
+ * @param archive - absolute tarball path.
+ * @param member - owned npm member: package.json or catalog.json.
+ * @param maxBytes - compressed archive and selected-member size limit.
+ * @returns parsed JSON, to be narrowed by its owning schema.
+ */
+export declare function archiveJson(archive: string, member: 'package.json' | 'catalog.json', maxBytes: number): Promise<unknown>;

package/lib/archive.js

@@ -0,0 +1,33 @@
+/** Read bounded JSON members of npm archives without running package code. */
+import { mkdtemp, readFile, rm, stat } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { x } from 'tar';
+/**
+ * Extract one regular JSON member into an owned temporary directory.
+ * @param archive - absolute tarball path.
+ * @param member - owned npm member: package.json or catalog.json.
+ * @param maxBytes - compressed archive and selected-member size limit.
+ * @returns parsed JSON, to be narrowed by its owning schema.
+ */
+export async function archiveJson(archive, member, maxBytes) {
+    if ((await stat(archive)).size > maxBytes)
+        throw new Error('market archive exceeds maxArchiveBytes');
+    const directory = await mkdtemp(join(tmpdir(), 'libing-market-json-'));
+    try {
+        await x({
+            file: archive, cwd: directory, strict: true,
+            filter: (path, entry) => {
+                if (path !== `package/${member}`)
+                    return false;
+                if (!('type' in entry) || entry.type !== 'File' || entry.size > maxBytes)
+                    throw new Error('market archive JSON member is not a bounded regular file');
+                return true;
+            },
+        });
+        return JSON.parse(await readFile(join(directory, 'package', member), 'utf8'));
+    }
+    finally {
+        await rm(directory, { recursive: true, force: true });
+    }
+}

package/lib/catalog.d.ts

@@ -0,0 +1,19 @@
+import type { Settings } from './config.ts';
+import type { Catalog, CatalogEntry } from './shared.ts';
+/** Source reads and install-spec resolution owned by one plugin activation. */
+export declare class CatalogSource {
+    private readonly settings;
+    private readonly abort;
+    constructor(settings: Settings);
+    /** Cancel active network reads when the owning plugin is released. */
+    dispose(): void;
+    private fetch;
+    /** Read fresh catalog data; failures never return an old snapshot as online data. */
+    read(): Promise<Catalog>;
+    /**
+     * Resolve a catalog-approved exact npm version or an identity-checked local tarball.
+     * @param entry - latest validated catalog entry approved by the request.
+     * @returns specification passed to the DSH package manager.
+     */
+    spec(entry: CatalogEntry): Promise<string>;
+}

package/lib/catalog.js

@@ -0,0 +1,81 @@
+/** Catalog readers use registry integrity or explicit local artifacts. */
+import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { checkData } from 'ssri';
+import { z } from 'zod';
+import { archiveJson } from "./archive.js";
+import { catalogSchema, CATALOG_PACKAGE } from "./shared.js";
+/** Source reads and install-spec resolution owned by one plugin activation. */
+export class CatalogSource {
+    settings;
+    abort = new AbortController();
+    constructor(settings) {
+        this.settings = settings;
+    }
+    /** Cancel active network reads when the owning plugin is released. */
+    dispose() { this.abort.abort(); }
+    async fetch(url) {
+        const response = await fetch(url, { signal: AbortSignal.any([this.abort.signal, AbortSignal.timeout(this.settings.fetchTimeoutMs)]) });
+        if (!response.ok)
+            throw new Error(`market registry request failed: HTTP ${response.status}`);
+        return response;
+    }
+    /** Read fresh catalog data; failures never return an old snapshot as online data. */
+    async read() {
+        const source = this.settings.source;
+        if (source.kind === 'local')
+            return catalogSchema.parse(JSON.parse(await readFile(source.catalogPath, 'utf8')));
+        const metadata = z.object({
+            name: z.literal(CATALOG_PACKAGE), version: z.string(),
+            dist: z.object({ tarball: z.url(), integrity: z.string().min(1) }),
+        }).parse(await (await this.fetch(new URL(`${encodeURIComponent(CATALOG_PACKAGE)}/latest`, source.registry).href)).json());
+        const tarballUrl = new URL(metadata.dist.tarball);
+        if (!['https:', 'http:'].includes(tarballUrl.protocol) || tarballUrl.username !== '' || tarballUrl.password !== '')
+            throw new Error('market catalog tarball URL is invalid');
+        const response = await this.fetch(tarballUrl.href);
+        const chunks = [];
+        let length = 0;
+        for await (const chunk of response.body ?? []) {
+            length += chunk.length;
+            if (length > this.settings.maxArchiveBytes)
+                throw new Error('market catalog archive exceeds maxArchiveBytes');
+            chunks.push(chunk);
+        }
+        const bytes = Buffer.concat(chunks);
+        if (!checkData(bytes, metadata.dist.integrity))
+            throw new Error('market catalog integrity mismatch');
+        const directory = await mkdtemp(join(tmpdir(), 'libing-market-catalog-'));
+        try {
+            const file = join(directory, 'catalog.tgz');
+            await writeFile(file, bytes);
+            const catalog = catalogSchema.parse(await archiveJson(file, 'catalog.json', this.settings.maxArchiveBytes));
+            if (catalog.version !== metadata.version)
+                throw new Error('market catalog package version mismatch');
+            return catalog;
+        }
+        finally {
+            await rm(directory, { recursive: true, force: true });
+        }
+    }
+    /**
+     * Resolve a catalog-approved exact npm version or an identity-checked local tarball.
+     * @param entry - latest validated catalog entry approved by the request.
+     * @returns specification passed to the DSH package manager.
+     */
+    async spec(entry) {
+        if (this.settings.source.kind === 'npm')
+            return `${entry.name}@${entry.version}`;
+        const file = join(this.settings.source.artifactsDir, `${entry.name.slice(1).replace('/', '-')}-${entry.version}.tgz`);
+        const manifest = z.object({
+            name: z.literal(entry.name), version: z.literal(entry.version),
+            dsh: z.object({ bundle: z.object({ patch: z.string() }) }),
+            scripts: z.record(z.string(), z.string()).optional(),
+        }).parse(await archiveJson(file, 'package.json', this.settings.maxArchiveBytes));
+        for (const hook of ['preinstall', 'install', 'postinstall', 'prepare']) {
+            if (manifest.scripts?.[hook] !== undefined)
+                throw new Error('market local artifact contains an install lifecycle script');
+        }
+        return file;
+    }
+}

package/lib/client-types/client/MarketIcon.d.ts

@@ -0,0 +1,9 @@
+/** Sidebar glyph; DSH owns the button, label and selection state. */
+import type { ReactNode } from 'react';
+import type { PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
+/**
+ * Render the market glyph at the shell's requested size.
+ * @param props - sidebar-owned icon sizing and state.
+ * @returns decorative icon element.
+ */
+export declare function MarketIcon({ size }: PropsRuntime<'sidebar.panellist'>): ReactNode;

package/lib/client-types/client/MarketPage.d.ts

@@ -0,0 +1,13 @@
+import type { ReactNode } from 'react';
+import type { PropsLocale } from '@deepseek-ai/dsh-client-ui-slots';
+import type { MarketApi } from './api.ts';
+export interface MarketPageProps extends PropsLocale<'libingMarket'> {
+    api: MarketApi;
+    localeId: string;
+}
+/**
+ * Render plugin discovery and version-confirmed mutations for one active profile.
+ * @param props - locale dictionary and typed market API supplied by the plugin.
+ * @returns the root main panel.
+ */
+export declare function MarketPage({ api, localeId, t }: MarketPageProps): ReactNode;

package/lib/client-types/client/api.d.ts

@@ -0,0 +1,7 @@
+import type { MarketState, Mutation, Outcome } from '../shared.ts';
+export interface MarketApi {
+    state(signal: AbortSignal): Promise<MarketState>;
+    mutate(request: Mutation): Promise<Outcome>;
+}
+/** Network implementation; tests may supply the same typed API without a server. */
+export declare const marketApi: MarketApi;

package/lib/client-types/client/index.d.ts

@@ -0,0 +1,14 @@
+/** Lifecycle-owned market panel and sidebar entry in the DSH Web shell. */
+import type { Context } from '@deepseek-ai/cordis';
+import type { LocaleKey } from './locales.ts';
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+    interface LocaleNamespaceMap {
+        libingMarket: LocaleKey;
+    }
+}
+export declare const inject: string[];
+/**
+ * Register browser contributions through parent-owned slots.
+ * @param ctx - browser context with locale and slot services.
+ */
+export declare function apply(ctx: Context): void;

package/lib/client-types/client/locales.d.ts

@@ -0,0 +1,40 @@
+/** Product copy owned by the market's typed locale namespace. */
+export declare const zh: {
+    nav: string;
+    title: string;
+    subtitle: string;
+    profile: string;
+    local: string;
+    npm: string;
+    refresh: string;
+    loading: string;
+    search: string;
+    empty: string;
+    installed: string;
+    notInstalled: string;
+    installedVersion: string;
+    availableVersion: string;
+    unknownVersion: string;
+    enabled: string;
+    disabled: string;
+    updateAvailable: string;
+    install: string;
+    update: string;
+    remove: string;
+    busy: string;
+    offline: string;
+    failed: string;
+    applied: string;
+    restart: string;
+    overridden: string;
+    cancelled: string;
+    confirmTitle: string;
+    confirmBody: string;
+    confirm: string;
+    cancel: string;
+    close: string;
+    selfProtected: string;
+    loadFailed: string;
+};
+export type LocaleKey = keyof typeof zh;
+export declare const en: Record<LocaleKey, string>;

package/lib/client-types/shared.d.ts

@@ -0,0 +1,124 @@
+/** Validated JSON records exchanged by the market Host and browser. */
+import { z } from 'zod';
+/** Public market package identity and its supported runtime. */
+export declare const MARKET_PACKAGE = "@dsh-libing/market";
+export declare const CATALOG_PACKAGE = "@dsh-libing/market-catalog";
+export declare const DSH_VERSION = "0.2.0-rc.2";
+export declare const API = "/api/libing-market";
+export declare const packageName: z.ZodString;
+/** Small embedded images rendered through img; never interpreted as page markup. */
+export declare const iconDataUrlSchema: z.ZodString;
+/** Catalog v1 carries exact versions rather than executable install specifications. */
+export declare const catalogEntrySchema: z.ZodObject<{
+    name: z.ZodString;
+    version: z.ZodString;
+    description: z.ZodString;
+    displayName: z.ZodObject<{
+        zh: z.ZodString;
+        en: z.ZodString;
+    }, z.core.$strip>;
+    category: z.ZodString;
+    maintainers: z.ZodArray<z.ZodString>;
+    compatibility: z.ZodObject<{
+        dsh: z.ZodLiteral<"0.2.0-rc.2">;
+    }, z.core.$strip>;
+    allowedBuilds: z.ZodArray<z.ZodString>;
+    icon: z.ZodOptional<z.ZodString>;
+    iconDataUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** Catalog structure accepted from a local file or an npm package. */
+export declare const catalogSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    version: z.ZodString;
+    dshVersion: z.ZodLiteral<"0.2.0-rc.2">;
+    plugins: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+        description: z.ZodString;
+        displayName: z.ZodObject<{
+            zh: z.ZodString;
+            en: z.ZodString;
+        }, z.core.$strip>;
+        category: z.ZodString;
+        maintainers: z.ZodArray<z.ZodString>;
+        compatibility: z.ZodObject<{
+            dsh: z.ZodLiteral<"0.2.0-rc.2">;
+        }, z.core.$strip>;
+        allowedBuilds: z.ZodArray<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+        iconDataUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/** One available or installed package with actions resolved by the Host. */
+export declare const marketEntrySchema: z.ZodObject<{
+    name: z.ZodString;
+    displayName: z.ZodObject<{
+        zh: z.ZodString;
+        en: z.ZodString;
+    }, z.core.$strip>;
+    description: z.ZodString;
+    iconUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    availableVersion: z.ZodNullable<z.ZodString>;
+    installedVersion: z.ZodNullable<z.ZodString>;
+    installed: z.ZodBoolean;
+    enabled: z.ZodBoolean;
+    installable: z.ZodBoolean;
+    updatable: z.ZodBoolean;
+    removable: z.ZodBoolean;
+    loadError: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+/** State fetched on panel entry and after a user-triggered operation. */
+export declare const marketStateSchema: z.ZodObject<{
+    profile: z.ZodString;
+    source: z.ZodEnum<{
+        npm: "npm";
+        local: "local";
+    }>;
+    catalogVersion: z.ZodNullable<z.ZodString>;
+    catalogError: z.ZodNullable<z.ZodString>;
+    plugins: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        displayName: z.ZodObject<{
+            zh: z.ZodString;
+            en: z.ZodString;
+        }, z.core.$strip>;
+        description: z.ZodString;
+        iconUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        availableVersion: z.ZodNullable<z.ZodString>;
+        installedVersion: z.ZodNullable<z.ZodString>;
+        installed: z.ZodBoolean;
+        enabled: z.ZodBoolean;
+        installable: z.ZodBoolean;
+        updatable: z.ZodBoolean;
+        removable: z.ZodBoolean;
+        loadError: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/** The browser approves a package and an exact catalog version, never a path or command. */
+export declare const mutationSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        install: "install";
+        update: "update";
+        remove: "remove";
+    }>;
+    packageName: z.ZodString;
+    version: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+/** User-visible operation outcome; package-manager diagnostics stay on the Host. */
+export declare const outcomeSchema: z.ZodObject<{
+    application: z.ZodEnum<{
+        applied: "applied";
+        "restart-required": "restart-required";
+        overridden: "overridden";
+        failed: "failed";
+        cancelled: "cancelled";
+    }>;
+    changed: z.ZodBoolean;
+    error: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type Catalog = z.infer<typeof catalogSchema>;
+export type CatalogEntry = z.infer<typeof catalogEntrySchema>;
+export type MarketEntry = z.infer<typeof marketEntrySchema>;
+export type MarketState = z.infer<typeof marketStateSchema>;
+export type Mutation = z.infer<typeof mutationSchema>;
+export type Outcome = z.infer<typeof outcomeSchema>;