@lenorin/dsh-tauri-launcher 1.0.0 → 1.0.2

package/lib/index.js

@@ -25,12 +25,8 @@ const STDIO = { stdin: 'ignore', stdout: 'inherit', stderr: 'inherit' }
 /** 本包随附的预编译桌面应用 exe 目录（无论安装到哪个 profile 都能定位）。 */
 const PACKAGE_BIN = fileURLToPath(new URL('../launcher/bin', import.meta.url))
 
-/** 未配置 launcherDirs 时的默认候选目录（包内 exe 优先，本机常见布局兜底，可被行配置覆盖）。 */
-const DEFAULT_DIRS = [
-  PACKAGE_BIN,
-  'F:\\DeepSeek Harness\\DeepSeek Harness Tauri\\dsh-launcher\\src-tauri\\target\\release',
-  'F:\\DeepSeek Harness\\DeepSeek Harness Tauri\\dsh-launcher\\src-tauri\\target\\debug',
-]
+/** 未配置 launcherDirs 时的默认候选目录（仅包内随附的预编译 exe；本地自行构建的 exe 通过行配置 launcherDirs/launcherExe 指定）。 */
+const DEFAULT_DIRS = [PACKAGE_BIN]
 
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms))
 const psQuote = (value) => "'" + String(value).replace(/'/g, "''") + "'"
@@ -41,9 +37,17 @@ function writeJson(res, status, body) {
   res.end(payload)
 }
 
+/** 请求体大小上限（回环接口的防御性约束）。 */
+const MAX_BODY_BYTES = 1024 * 1024
+
 async function readJsonBody(req) {
   const chunks = []
-  for await (const chunk of req) chunks.push(chunk)
+  let total = 0
+  for await (const chunk of req) {
+    total += chunk.length
+    if (total > MAX_BODY_BYTES) return {}
+    chunks.push(chunk)
+  }
   try {
     const parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'))
     return typeof parsed === 'object' && parsed !== null ? parsed : {}
@@ -58,6 +62,31 @@ function isLoopback(req) {
   return address === '127.0.0.1' || address === '::1' || address === '::ffff:127.0.0.1'
 }
 
+/**
+ * CSRF 防线（#4）：回环之外直接拒绝；回环内还须满足任一——
+ * 1. 携带本插件约定的自定义头（同源 fetch 可带，跨站 form POST 无法伪造）；
+ * 2. Origin 为 DSH 自身页面地址（http://127.0.0.1|localhost|[::1]:port）；
+ * 3. Referer 指向 DSH 自身页面地址。
+ * 三者全缺（如 <img>/<script> 等无头请求）拒绝。
+ */
+function isTrustedRequest(req, port) {
+  if (!isLoopback(req)) return false
+  const headers = req.headers || {}
+  if (headers['x-requested-with'] === 'dsh-tauri-launcher') return true
+  const allowed = new Set([
+    'http://127.0.0.1:' + port,
+    'http://localhost:' + port,
+    'http://[::1]:' + port,
+  ])
+  if (headers.origin && allowed.has(headers.origin)) return true
+  const referer = headers.referer
+  if (referer) {
+    const base = referer.split('/').slice(0, 3).join('/')
+    if (allowed.has(base)) return true
+  }
+  return false
+}
+
 export function apply(ctx, config) {
   // 注入的服务由加载器保证在 apply 前就绪（不能在 apply 时用 ctx.get 提前
   // 捕获未就绪的服务，否则会永久拿到 undefined）。
@@ -88,12 +117,6 @@ export function apply(ctx, config) {
       if (slash > 0) list.push(resolved.launcherExe.slice(0, slash))
     }
     for (const dir of DEFAULT_DIRS) list.push(dir)
-    const root = sandboxPolicy && sandboxPolicy.workspaceRoot
-    if (root) {
-      const r = String(root).replace(/[\\/]+$/, '')
-      list.push(r + '\\dsh-launcher\\src-tauri\\target\\release')
-      list.push(r + '\\dsh-launcher\\src-tauri\\target\\debug')
-    }
     return [...new Set(list)]
   }
 
@@ -110,11 +133,8 @@ export function apply(ctx, config) {
   }
 
   async function exeDirs() {
-    const dirs = []
-    for (const dir of baseDirs()) {
-      if (await exeExists(dir)) dirs.push(dir)
-    }
-    return dirs
+    const checked = await Promise.all(baseDirs().map(async (dir) => ((await exeExists(dir)) ? dir : null)))
+    return checked.filter((dir) => dir !== null)
   }
 
   async function fileText(dir, name) {
@@ -189,7 +209,7 @@ export function apply(ctx, config) {
     if (!subprocess) throw new Error('subprocess 服务不可用')
     const handle = subprocess.spawn({
       argv: ['powershell', '-NoProfile', '-NonInteractive', '-Command', script],
-      cwd: cwd || (await pickExe() ? await pickExe() : ''),
+      cwd: cwd || (await pickExe()) || '',
       stdio: STDIO,
       graceMs: 3000,
     })
@@ -334,8 +354,11 @@ export function apply(ctx, config) {
     const running = await isRunning()
     const exe = await pickExe()
     const shortcut = await shortcutExists()
-    const diag = await buildDiag()
-    return { ok: true, desktop: running, shortcut, exe: exe || null, diag }
+    return { ok: true, desktop: running, shortcut, exe: exe || null }
+  }
+
+  async function getDiag() {
+    return { ok: true, diag: await buildDiag() }
   }
 
   async function setDesktop(enabled) {
@@ -357,10 +380,10 @@ export function apply(ctx, config) {
       const state = await waitFresh(20)
       if (state === true) {
         if (!(await ensureShortcut())) lastMarkerError = 'shortcut sync failed (create)'
-        return { ok: true, desktop: true, shortcut: await shortcutExists(), diag: await buildDiag() }
+        return { ok: true, desktop: true, shortcut: await shortcutExists(), diag: '' }
       }
-      if (state === null) return { ok: true, desktop: null, shortcut: await shortcutExists(), diag: await buildDiag() }
-      return { ok: true, desktop: false, shortcut: await shortcutExists(), diag: await buildDiag() }
+      if (state === null) return { ok: true, desktop: null, shortcut: await shortcutExists(), diag: '' }
+      return { ok: true, desktop: false, shortcut: await shortcutExists(), diag: '' }
     }
 
     const owned = spawnHandle
@@ -379,33 +402,35 @@ export function apply(ctx, config) {
       if (owned && owned.done) await Promise.race([owned.done.catch(() => {}), sleep(3000)])
       writeQuitMarkerNoWait('0')
       if (!(await removeShortcut())) lastMarkerError = 'shortcut sync failed (delete)'
-      return { ok: true, desktop: false, shortcut: await shortcutExists(), diag: await buildDiag() }
+      return { ok: true, desktop: false, shortcut: await shortcutExists(), diag: '' }
     }
     writeQuitMarkerNoWait('0')
     const state = await waitGone(20)
     if (state === true) {
       if (!(await removeShortcut())) lastMarkerError = 'shortcut sync failed (delete)'
-      return { ok: true, desktop: false, shortcut: await shortcutExists(), diag: await buildDiag() }
+      return { ok: true, desktop: false, shortcut: await shortcutExists(), diag: '' }
     }
-    if (state === null) return { ok: true, desktop: null, shortcut: await shortcutExists(), diag: await buildDiag() }
+    if (state === null) return { ok: true, desktop: null, shortcut: await shortcutExists(), diag: '' }
     try {
       const exe = await pickExe()
       const dir = exe ? exe.slice(0, exe.lastIndexOf('\\')) : process.cwd()
-      await runPowerShell('Stop-Process -Name dsh-launcher -Force -ErrorAction SilentlyContinue', dir)
+      // 仅终止与探测到的 exe 路径匹配的进程，避免误杀其他同名程序。
+      const script = "$p = Get-Process -Name dsh-launcher -ErrorAction SilentlyContinue | Where-Object { $_.Path -eq " + psQuote(exe || '') + " }; if ($p) { $p | Stop-Process -Force -ErrorAction SilentlyContinue }"
+      await runPowerShell(script, dir)
     } catch (error) {
       lastMarkerError = String((error && error.message) || error)
     }
     const state2 = await waitGone(8)
     if (state2 === true) {
       if (!(await removeShortcut())) lastMarkerError = 'shortcut sync failed (delete)'
-      return { ok: true, desktop: false, shortcut: await shortcutExists(), diag: await buildDiag() }
+      return { ok: true, desktop: false, shortcut: await shortcutExists(), diag: '' }
     }
     return { ok: false, error: '桌面应用仍在运行（退出请求与强制结束均未生效）。', shortcut: await shortcutExists(), diag: await buildDiag() }
   }
 
   async function setShortcut() {
     const ok = await ensureShortcut()
-    if (ok) return { ok: true, shortcut: true, diag: await buildDiag() }
+    if (ok) return { ok: true, shortcut: true, diag: '' }
     return { ok: false, error: '创建桌面快捷方式失败。', shortcut: await shortcutExists(), diag: await buildDiag() }
   }
 
@@ -415,7 +440,7 @@ export function apply(ctx, config) {
         kind: 'exact',
         path: '/api/dsh-tauri-launcher/state',
         handler: async (req, res) => {
-          if (!isLoopback(req)) return writeJson(res, 403, { ok: false, error: 'forbidden' })
+          if (!isTrustedRequest(req, ctx.webServer.port)) return writeJson(res, 403, { ok: false, error: 'forbidden' })
           writeJson(res, 200, await getState())
         },
       },
@@ -423,7 +448,7 @@ export function apply(ctx, config) {
         kind: 'exact',
         path: '/api/dsh-tauri-launcher/set-desktop',
         handler: async (req, res) => {
-          if (!isLoopback(req)) return writeJson(res, 403, { ok: false, error: 'forbidden' })
+          if (!isTrustedRequest(req, ctx.webServer.port)) return writeJson(res, 403, { ok: false, error: 'forbidden' })
           const body = await readJsonBody(req)
           writeJson(res, 200, await setDesktop(Boolean(body.enabled)))
         },
@@ -432,10 +457,18 @@ export function apply(ctx, config) {
         kind: 'exact',
         path: '/api/dsh-tauri-launcher/set-shortcut',
         handler: async (req, res) => {
-          if (!isLoopback(req)) return writeJson(res, 403, { ok: false, error: 'forbidden' })
+          if (!isTrustedRequest(req, ctx.webServer.port)) return writeJson(res, 403, { ok: false, error: 'forbidden' })
           writeJson(res, 200, await setShortcut())
         },
       },
+      {
+        kind: 'exact',
+        path: '/api/dsh-tauri-launcher/diagnose',
+        handler: async (req, res) => {
+          if (!isTrustedRequest(req, ctx.webServer.port)) return writeJson(res, 403, { ok: false, error: 'forbidden' })
+          writeJson(res, 200, await getDiag())
+        },
+      },
     ]
     const disposers = routes.map((route) => ctx.webServer.register(route))
     return () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenorin/dsh-tauri-launcher",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "DSH Web 插件：基于 Tauri 2 的 DeepSeek Harness 桌面启动器，自动联动桌面快捷方式，exe 路径与探测窗口可配置。",
   "type": "module",
   "main": "lib/index.js",
@@ -12,7 +12,7 @@
   "files": [
     "lib",
     "cordis.patch.yml",
-    "launcher",
+    "launcher/bin",
     "README.md"
   ],
   "dsh": {

package/launcher/build.ps1

@@ -1,44 +0,0 @@
-# dsh-tauri-launcher 桌面应用一键构建脚本（Windows）。
-# 用法：在仓库根目录运行  pwsh -File launcher/build.ps1
-# 产物：launcher/src-tauri/target/release/dsh-launcher.exe
-#
-# 说明：
-# - 依赖 Rust 工具链（rustup + MSVC 或 GNU）与 Node.js 22+；
-# - 若本机无法联网拉取 crates.io 依赖，可先用 --offline 配合一个预置的
-#   CARGO_HOME（例如把已缓存的 .cargo 注册表目录传给 -CargoHome 参数）。
-
-param(
-    [switch]$Offline,
-    [string]$CargoHome = ''
-)
-
-$ErrorActionPreference = 'Stop'
-$root = Split-Path -Parent $PSScriptRoot
-$srcTauri = Join-Path $PSScriptRoot 'src-tauri'
-
-if ($CargoHome -ne '') {
-    $env:CARGO_HOME = $CargoHome
-    Write-Host "CARGO_HOME = $CargoHome"
-}
-
-Push-Location $srcTauri
-try {
-    if ($Offline) {
-        Write-Host 'cargo build --release --offline'
-        cargo build --release --offline
-    } else {
-        Write-Host 'cargo build --release'
-        cargo build --release
-    }
-    if ($LASTEXITCODE -ne 0) { throw "cargo build failed (exit $LASTEXITCODE)" }
-} finally {
-    Pop-Location
-}
-
-$exe = Join-Path $srcTauri 'target\release\dsh-launcher.exe'
-if (-not (Test-Path -LiteralPath $exe)) {
-    throw "构建产物缺失：$exe"
-}
-Write-Host ''
-Write-Host "构建完成：$exe"
-Get-Item -LiteralPath $exe | Select-Object Length, LastWriteTime

package/launcher/src-tauri/Cargo.toml

@@ -1,20 +0,0 @@
-[package]
-name = "dsh-launcher"
-version = "0.1.0"
-description = "DeepSeek Harness 桌面启动器：自动检测/安装并启动本地 DeepSeek Harness，系统托盘管理退出"
-authors = ["you"]
-edition = "2021"
-
-[lib]
-name = "dsh_launcher_lib"
-crate-type = ["staticlib", "cdylib", "rlib"]
-
-[build-dependencies]
-tauri-build = { version = "2", features = [] }
-
-[dependencies]
-tauri = { version = "2", features = ["tray-icon", "image-png"] }
-tauri-plugin-global-shortcut = "2"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
-tokio = { version = "1", features = ["rt-multi-thread", "macros", "process", "io-util", "time", "net", "sync"] }

package/launcher/src-tauri/build.rs

@@ -1,3 +0,0 @@
-fn main() {
-    tauri_build::build()
-}

package/launcher/src-tauri/capabilities/default.json

@@ -1,9 +0,0 @@
-{
-  "$schema": "../gen/schemas/desktop-schema.json",
-  "identifier": "default",
-  "description": "Capability for the launcher windows (main + settings)",
-  "windows": ["main", "settings"],
-  "permissions": [
-    "core:default"
-  ]
-}

package/launcher/src-tauri/src/dsh.rs

@@ -1,286 +0,0 @@
-//! DeepSeek Harness 管理逻辑：检测安装、npm 自动安装、端口探测。
-//! 与 tauri 解耦，便于独立测试。
-
-use std::collections::VecDeque;
-use std::env;
-use std::path::Path;
-use std::process::Command as StdCommand;
-use std::time::Duration;
-
-use serde::Serialize;
-use tokio::io::{AsyncBufReadExt, AsyncReadExt, AsyncWriteExt, BufReader};
-use tokio::process::Command as TokioCommand;
-
-/// npm 包名：DeepSeek Harness 本体。
-pub const DSH_PACKAGE: &str = "@deepseek-ai/dsh";
-/// Web GUI 默认端口。
-pub const DSH_PORT: u16 = 3080;
-/// Web GUI 默认地址。
-pub const DSH_URL: &str = "http://127.0.0.1:3080/";
-/// dsh web 页面中的指纹标记，用于确认端口上跑的是 DeepSeek Harness。
-pub const DSH_MARKER: &str = "__DSH_BOOT__";
-
-/// Windows: 隐藏子进程控制台窗口。
-#[cfg(windows)]
-fn hide_console_std(cmd: &mut StdCommand) {
-    use std::os::windows::process::CommandExt;
-    cmd.creation_flags(0x0800_0000); // CREATE_NO_WINDOW
-}
-#[cfg(not(windows))]
-fn hide_console_std(_cmd: &mut StdCommand) {}
-
-#[cfg(windows)]
-fn hide_console_tokio(cmd: &mut TokioCommand) {
-    cmd.creation_flags(0x0800_0000);
-}
-#[cfg(not(windows))]
-fn hide_console_tokio(_cmd: &mut TokioCommand) {}
-
-/// 同步执行命令并捕获标准输出。
-pub fn run_capture(cmd: &str, args: &[&str]) -> Result<String, String> {
-    let mut c = StdCommand::new(cmd);
-    c.args(args);
-    hide_console_std(&mut c);
-    let out = c.output().map_err(|e| e.to_string())?;
-    if out.status.success() {
-        Ok(String::from_utf8_lossy(&out.stdout).trim().to_string())
-    } else {
-        let detail = String::from_utf8_lossy(&out.stderr).trim().to_string();
-        Err(if detail.is_empty() {
-            format!("命令执行失败：{cmd} {}", args.join(" "))
-        } else {
-            detail
-        })
-    }
-}
-
-/// 解析 node.exe 完整路径（支持 DSH_LAUNCHER_NODE 覆盖，便于测试）。
-pub fn node_exe() -> Option<String> {
-    if let Ok(v) = env::var("DSH_LAUNCHER_NODE") {
-        if !v.trim().is_empty() {
-            return Some(v.trim().to_string());
-        }
-    }
-    run_capture("cmd", &["/C", "where", "node"])
-        .ok()
-        .and_then(|s| s.lines().next().map(str::trim).map(String::from))
-        .filter(|s| !s.is_empty())
-}
-
-/// npm 全局安装根目录（支持 DSH_LAUNCHER_NPM_ROOT 覆盖，便于测试）。
-pub fn npm_root() -> Option<String> {
-    if let Ok(v) = env::var("DSH_LAUNCHER_NPM_ROOT") {
-        if !v.trim().is_empty() {
-            return Some(v.trim().to_string());
-        }
-    }
-    run_capture("cmd", &["/C", "npm", "root", "-g"])
-        .ok()
-        .map(|s| s.trim().to_string())
-        .filter(|s| !s.is_empty())
-}
-
-#[derive(Serialize, Clone)]
-pub struct CheckResult {
-    pub installed: bool,
-    pub version: Option<String>,
-    pub root: Option<String>,
-    pub bin_path: Option<String>,
-    pub node_ok: bool,
-    pub error: Option<String>,
-}
-
-fn read_pkg_version(pkg_json: &Path) -> Option<String> {
-    let text = std::fs::read_to_string(pkg_json).ok()?;
-    let v: serde_json::Value = serde_json::from_str(&text).ok()?;
-    v.get("version").and_then(|v| v.as_str()).map(String::from)
-}
-
-/// 检查本地是否已安装 DeepSeek Harness（npm 全局包）。
-pub fn check() -> CheckResult {
-    if node_exe().is_none() {
-        return CheckResult {
-            installed: false,
-            version: None,
-            root: None,
-            bin_path: None,
-            node_ok: false,
-            error: Some(
-                "未检测到 Node.js。DeepSeek Harness 依赖 Node.js 运行，请先安装 Node.js（https://nodejs.org/）后重试。"
-                    .to_string(),
-            ),
-        };
-    }
-    let Some(root) = npm_root() else {
-        return CheckResult {
-            installed: false,
-            version: None,
-            root: None,
-            bin_path: None,
-            node_ok: true,
-            error: Some("无法确定 npm 全局安装目录（npm root -g 执行失败），请确认 npm 已正确安装。".to_string()),
-        };
-    };
-    // npm root -g 返回的路径本身以 node_modules 结尾；同时也兼容以
-    // npm prefix -g 形态给出的根目录（不含 node_modules），两种都探测。
-    let base = Path::new(&root);
-    let candidates = [base.join("node_modules").join(DSH_PACKAGE), base.join(DSH_PACKAGE)];
-    let Some(pkg_dir) = candidates.iter().find(|d| d.join("package.json").exists()) else {
-        return CheckResult {
-            installed: false,
-            version: None,
-            root: Some(root),
-            bin_path: None,
-            node_ok: true,
-            error: None,
-        };
-    };
-    CheckResult {
-        installed: true,
-        version: read_pkg_version(&pkg_dir.join("package.json")),
-        root: Some(root),
-        bin_path: Some(pkg_dir.join("lib").join("bin.js").to_string_lossy().into_owned()),
-        node_ok: true,
-        error: None,
-    }
-}
-
-/// 执行 `npm install -g @deepseek-ai/dsh`，逐行回调输出，返回安装后的版本号。
-/// 设置 DSH_LAUNCHER_NPM_ROOT 时改为安装到该目录（与检测根目录保持一致，便于测试）。
-pub async fn install<F>(mut emit: F) -> Result<String, String>
-where
-    F: FnMut(&str, &str),
-{
-    let override_root = env::var("DSH_LAUNCHER_NPM_ROOT")
-        .ok()
-        .filter(|s| !s.is_empty());
-    if let Some(root) = override_root.as_deref() {
-        std::fs::create_dir_all(root).map_err(|e| format!("无法创建安装目录 {root}：{e}"))?;
-        let pkg_json = Path::new(root).join("package.json");
-        if !pkg_json.exists() {
-            std::fs::write(&pkg_json, b"{\n  \"private\": true\n}\n")
-                .map_err(|e| format!("无法写入 {pkg_json:?}：{e}"))?;
-        }
-    }
-    let mut cmd = TokioCommand::new("cmd");
-    if let Some(root) = override_root {
-        cmd.args([
-            "/C",
-            "npm",
-            "install",
-            "--prefix",
-            &root,
-            DSH_PACKAGE,
-            "--no-fund",
-            "--no-audit",
-            "--loglevel=notice",
-        ]);
-    } else {
-        cmd.args([
-            "/C",
-            "npm",
-            "install",
-            "-g",
-            DSH_PACKAGE,
-            "--no-fund",
-            "--no-audit",
-            "--loglevel=notice",
-        ]);
-    }
-    cmd.env("npm_config_update_notifier", "false")
-        .env("npm_config_fund", "false")
-        .env("npm_config_audit", "false")
-        .stdout(std::process::Stdio::piped())
-        .stderr(std::process::Stdio::piped())
-        .kill_on_drop(true);
-    hide_console_tokio(&mut cmd);
-    let mut child = cmd.spawn().map_err(|e| format!("无法启动 npm：{e}"))?;
-    let stdout = child.stdout.take().ok_or("无法读取 npm 输出")?;
-    let stderr = child.stderr.take().ok_or("无法读取 npm 输出")?;
-
-    let (tx, mut rx) = tokio::sync::mpsc::unbounded_channel::<(String, String)>();
-    let tx2 = tx.clone();
-    tokio::spawn(async move {
-        let mut lines = BufReader::new(stdout).lines();
-        while let Ok(Some(line)) = lines.next_line().await {
-            let _ = tx.send(("stdout".to_string(), line));
-        }
-    });
-    tokio::spawn(async move {
-        let mut lines = BufReader::new(stderr).lines();
-        while let Ok(Some(line)) = lines.next_line().await {
-            let _ = tx2.send(("stderr".to_string(), line));
-        }
-    });
-
-    let mut tail: VecDeque<String> = VecDeque::with_capacity(256);
-    let status = loop {
-        tokio::select! {
-            status = child.wait() => {
-                break status.map_err(|e| format!("等待 npm 结束失败：{e}"))?;
-            }
-            Some((stream, line)) = rx.recv() => {
-                if tail.len() >= 256 {
-                    tail.pop_front();
-                }
-                tail.push_back(format!("[{stream}] {line}"));
-                emit(&stream, &line);
-            }
-        }
-    };
-
-    if status.success() {
-        let after = check();
-        after
-            .version
-            .ok_or_else(|| "npm 报告安装成功，但未能检测到已安装的 DeepSeek Harness。".to_string())
-    } else {
-        let code = status
-            .code()
-            .map(|c| c.to_string())
-            .unwrap_or_else(|| "被信号终止".to_string());
-        let log = tail.into_iter().collect::<Vec<_>>().join("\n");
-        Err(format!("npm install 失败（退出码 {code}）：\n{log}"))
-    }
-}
-
-/// 探测指定端口上是否正在运行 DeepSeek Harness Web GUI。
-pub async fn is_dsh_serving(port: u16) -> bool {
-    let addr = format!("127.0.0.1:{port}");
-    let Ok(conn) = tokio::time::timeout(Duration::from_secs(2), tokio::net::TcpStream::connect(&addr)).await else {
-        return false;
-    };
-    let Ok(mut stream) = conn else {
-        return false;
-    };
-    let req = format!("GET / HTTP/1.1\r\nHost: {addr}\r\nConnection: close\r\n\r\n");
-    if tokio::time::timeout(Duration::from_secs(2), stream.write_all(req.as_bytes()))
-        .await
-        .is_err()
-    {
-        return false;
-    }
-    let mut buf = Vec::new();
-    let _ = tokio::time::timeout(Duration::from_secs(3), stream.read_to_end(&mut buf)).await;
-    String::from_utf8_lossy(&buf).contains(DSH_MARKER)
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    /// 本机已全局安装 @deepseek-ai/dsh：check() 必须能通过
-    /// `npm root -g` 找到它（回归测试：此前曾把 node_modules 拼接了两次）。
-    #[test]
-    fn check_detects_global_install() {
-        let result = check();
-        assert!(
-            result.installed,
-            "check() 未检测到已安装的 DeepSeek Harness：root={:?} node_ok={} error={:?}",
-            result.root, result.node_ok, result.error
-        );
-        assert!(result.version.is_some(), "检测到安装但未解析出版本号");
-        let bin = result.bin_path.expect("bin_path 应存在");
-        assert!(std::path::Path::new(&bin).exists(), "入口脚本不存在：{bin}");
-    }
-}