@max-null/dsh-plugin-center 0.1.7 → 0.2.0

package/dist/toggle.js

@@ -0,0 +1,160 @@
+/**
+ * Hot disable/enable through the profile's user patch layer
+ * (`<profileDir>/cordis.patch.yml`) — the mechanism dsh-market ports from
+ * dsh-plugin-hub: a patch row `- id: X` + `disabled: true` stops that loader
+ * entry, `disabled: false` force-enables one a lower layer disabled. The
+ * official web profile re-composes via HMR (~1s, no restart); SSiD applies
+ * the same file on every boot, so the choice survives restarts there.
+ *
+ * Writes are line-level (the patch dialect is simple for toggles: a row id
+ * followed by an optional `disabled:` line), serialized so concurrent
+ * toggles cannot interleave a read-modify-write, refused when the file is
+ * not a plain entry list, and protected for host-infrastructure rows.
+ */
+import { readFileSync, writeFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+/** Host infrastructure rows: disabling any of these breaks the very chain
+ *  the patch layer runs on. Same list dsh-market uses. */
+const PROTECTED_PATTERNS = [
+    /^cordis:/u,
+    /^@deepseek-ai\/cordis-plugin-/u,
+    /^@deepseek-ai\/dsh-host-/u,
+    /^@deepseek-ai\/dsh-client-modules$/u,
+    /^@deepseek-ai\/dsh-client-connection$/u,
+    /^@deepseek-ai\/dsh-client-hmr$/u,
+    /^@deepseek-ai\/dsh-client-runtime$/u,
+    /^@deepseek-ai\/dsh-client-locale$/u,
+    /^@deepseek-ai\/dsh-client-web/u,
+    /^@deepseek-ai\/dsh-web-frontend$/u,
+    /^@deepseek-ai\/dsh-app-boot$/u,
+    /^@deepseek-ai\/dsh-base$/u,
+    /^@deepseek-ai\/dsh-web-app$/u,
+];
+function isProtected(id) {
+    return PROTECTED_PATTERNS.some(pattern => pattern.test(id));
+}
+/** Official bundle entry ids (timer/llm/session/… from dsh-base and
+ *  dsh-web-app patch inserts): disabling these breaks the core chain, so
+ *  they refuse to toggle alongside the pattern-based protection above. */
+function officialEntryIds(profileDir) {
+    const ids = new Set();
+    for (const pkg of ['@deepseek-ai/dsh-base', '@deepseek-ai/dsh-web-app']) {
+        try {
+            const patchPath = join(profileDir, 'node_modules', pkg, 'cordis.patch.yml');
+            if (!existsSync(patchPath))
+                continue;
+            const text = readFileSync(patchPath, 'utf8');
+            for (const match of text.matchAll(/^- id:\s*(\S+)\s*$/gmu))
+                ids.add(match[1]);
+        }
+        catch { /* best-effort */ }
+    }
+    return ids;
+}
+/** What the user patch layer currently says about every row id. */
+export function readDisabledState(patchPath) {
+    const state = new Map();
+    let text = '';
+    try {
+        text = existsSync(patchPath) ? readFileSync(patchPath, 'utf8') : '';
+    }
+    catch {
+        return state;
+    }
+    let current = null;
+    for (const line of text.split('\n')) {
+        const row = /^- id:\s*(\S+)\s*$/u.exec(line);
+        if (row !== null) {
+            current = row[1];
+            continue;
+        }
+        if (current === null)
+            continue;
+        const disabled = /^ {2}disabled:\s*(true|false)\s*$/u.exec(line);
+        if (disabled !== null) {
+            state.set(current, disabled[1] === 'true');
+            current = null;
+        }
+    }
+    return state;
+}
+/** Serialize toggles so concurrent writes cannot interleave. */
+let toggleChain = Promise.resolve();
+/**
+ * Set one entry's disabled stance in the profile patch layer. The file is
+ * only touched when the stance changes; a malformed file (not a plain
+ * entry list) is reported instead of being made worse.
+ * @param profileDir - the profile directory holding cordis.patch.yml.
+ * @param id - the loader entry id to toggle.
+ * @param disabled - the target stance.
+ * @returns the outcome; `nowDisabled` mirrors the stance or null when refused.
+ */
+export function setDisabled(profileDir, id, disabled) {
+    const run = toggleChain.then(async () => {
+        if (isProtected(id) || officialEntryIds(profileDir).has(id)) {
+            return { ok: false, detail: `"${id}" is host infrastructure and cannot be disabled`, nowDisabled: null };
+        }
+        const patchPath = join(profileDir, 'cordis.patch.yml');
+        const current = readDisabledState(patchPath);
+        if (current.get(id) === disabled) {
+            return { ok: true, detail: `"${id}" is already ${disabled ? 'disabled' : 'enabled'}`, nowDisabled: disabled };
+        }
+        let text = '';
+        try {
+            text = existsSync(patchPath) ? readFileSync(patchPath, 'utf8') : '';
+        }
+        catch (error) {
+            return { ok: false, detail: `read ${patchPath} failed: ${String(error)}`, nowDisabled: null };
+        }
+        // Malformed guard: skip comment/blank lines first — the shipped profile
+        // patch file opens with a comment block and an empty `[]` array, both of
+        // which are legal. A non-empty significant first line that is neither an
+        // entry (`- …`) nor the empty array means a file we must not touch.
+        const significant = text.split('\n').map(line => line.trim()).filter(line => line !== '' && !line.startsWith('#'));
+        if (significant.length > 0 && !significant[0].startsWith('- ') && significant[0] !== '[]') {
+            return { ok: false, detail: 'cordis.patch.yml is not a plain entry list; refusing to modify it', nowDisabled: null };
+        }
+        const lines = text === '' ? [] : text.split('\n');
+        const out = [];
+        let patched = false;
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            // The empty-array placeholder: appending entries to a file that still
+            // holds `[]` would produce invalid YAML, so the placeholder is dropped
+            // once the first real entry lands.
+            if (line.trim() === '[]')
+                continue;
+            const row = /^- id:\s*(\S+)\s*$/u.exec(line);
+            if (row !== null && row[1] === id) {
+                // Find the row's disabled line (immediately after, if present) and
+                // replace it; otherwise insert one right after the id line.
+                out.push(line);
+                const next = lines[i + 1];
+                if (next !== undefined && /^ {2}disabled:\s*(true|false)\s*$/u.test(next)) {
+                    out.push(`  disabled: ${String(disabled)}`);
+                    i++;
+                }
+                else {
+                    out.push(`  disabled: ${String(disabled)}`);
+                }
+                patched = true;
+                continue;
+            }
+            out.push(line);
+        }
+        if (!patched) {
+            // Append a new row (the file ends with a newline when non-empty).
+            const tail = out.length > 0 && out[out.length - 1] !== '' ? '\n' : '';
+            out.push(`${tail}- id: ${id}\n  disabled: ${String(disabled)}`);
+        }
+        try {
+            writeFileSync(patchPath, out.join('\n') + '\n');
+        }
+        catch (error) {
+            return { ok: false, detail: `write ${patchPath} failed: ${String(error)}`, nowDisabled: null };
+        }
+        return { ok: true, detail: '', nowDisabled: disabled };
+    });
+    toggleChain = run.catch(() => { });
+    return run;
+}

package/dist/update.d.ts

@@ -21,15 +21,27 @@ export declare function detectUpdate(name: string, localVersion: string, repoUrl
 export interface PnpmResult {
     ok: boolean;
     detail: string;
+    /** Wall-clock duration of the pnpm process (slow-but-successful is common). */
+    durationMs: number;
 }
+/**
+ * Append one pnpm operation to `<profileDir>/plugin-center-pnpm.log`: time,
+ * command, cwd, exit, duration, and the captured output tail. Every install
+ * and update lands here regardless of success, so a problem on any machine
+ * can be diagnosed by copying the log (2026-08-22: SSiD 更新慢/失败复盘需要
+ * 现场证据；日志写失败绝不影响主流程）。
+ */
+export declare function logPnpm(profileDir: string, args: readonly string[], result: PnpmResult): void;
 /** pnpm 候选命令：GUI 进程 PATH 常缺用户级 npm 全局目录；且 Windows 上
  *  CreateProcess 只找 pnpm.exe（.cmd/.ps1 必须经 shell）——2026-08-17 实测
  *  spawn('pnpm', shell:false) 直接 ENOENT，更新永远假成功。 */
 export declare function pnpmCandidates(): string[];
 /**
  * Run pnpm in the profile directory, trying each candidate command in turn.
- * Output inherits the process stdio (no pipe capture — the host sandbox
- * forbids named-pipe stdio); the exit code is the only result this layer needs.
+ * Output is captured (no named-pipe stdio — the host process is the web or
+ * electron main process, not the DSH tool sandbox); the exit code and the
+ * captured tail are the result this layer returns, and every attempt is
+ * appended to the profile's plugin-center-pnpm.log.
  */
 export declare function runPnpm(args: readonly string[], cwd: string): Promise<PnpmResult>;
 /** Install a package into the web profile, mirroring `dsh plugin add` semantics. */

package/dist/update.js

@@ -4,7 +4,7 @@
  * first (many community repos ship no release/tag/CHANGELOG — verified §7.2).
  */
 import { spawn } from 'node:child_process';
-import { existsSync } from 'node:fs';
+import { appendFileSync, existsSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { compareVersions, satisfies } from "./semver.js";
@@ -70,6 +70,28 @@ export async function detectUpdate(name, localVersion, repoUrl, compatRange, loc
         compatRange,
     };
 }
+/**
+ * Append one pnpm operation to `<profileDir>/plugin-center-pnpm.log`: time,
+ * command, cwd, exit, duration, and the captured output tail. Every install
+ * and update lands here regardless of success, so a problem on any machine
+ * can be diagnosed by copying the log (2026-08-22: SSiD 更新慢/失败复盘需要
+ * 现场证据；日志写失败绝不影响主流程）。
+ */
+export function logPnpm(profileDir, args, result) {
+    try {
+        const file = join(profileDir, 'plugin-center-pnpm.log');
+        const line = [
+            `${new Date().toISOString()} $ pnpm ${args.join(' ')}`,
+            `  cwd=${profileDir}`,
+            `  ${result.ok ? 'ok' : 'FAIL'} duration=${result.durationMs}ms`,
+            result.detail === '' ? '' : `  ${result.detail.split('\n').map(s => `  ${s}`).join('\n')}`,
+            '---',
+            '',
+        ].join('\n');
+        appendFileSync(file, line);
+    }
+    catch { /* logging must never break the install path */ }
+}
 /** pnpm 候选命令：GUI 进程 PATH 常缺用户级 npm 全局目录；且 Windows 上
  *  CreateProcess 只找 pnpm.exe（.cmd/.ps1 必须经 shell）——2026-08-17 实测
  *  spawn('pnpm', shell:false) 直接 ENOENT，更新永远假成功。 */
@@ -89,28 +111,53 @@ function runOne(command, args, cwd) {
         try {
             // shell: true —— Windows 下 .cmd shim 必须经 shell 才能 spawn；
             // windowsHide —— GUI 宿主下不弹 cmd 窗口（2026-08-18 用户实测闪烁）。
-            child = spawn(command, [...args], { cwd, stdio: 'inherit', shell: true, windowsHide: true });
+            // stdio 走默认 pipe：捕获 pnpm 输出，失败时把尾部输出放进 detail
+            // （2026-08-22 起——此前 inherit 只有 exit code，SSiD 下更新失败
+            // 无法诊断；宿主进程（web/electron）非 DSH 工具沙箱，pipe 可用）。
+            child = spawn(command, [...args], { cwd, shell: true, windowsHide: true });
         }
         catch (e) {
-            resolve({ ok: false, detail: e instanceof Error ? e.message : String(e) });
+            resolve({ ok: false, detail: e instanceof Error ? e.message : String(e), durationMs: 0 });
             return;
         }
-        child.on('error', e => resolve({ ok: false, detail: e.message }));
-        child.on('close', code => resolve(code === 0 ? { ok: true, detail: '' } : { ok: false, detail: `exit code ${code ?? 1}` }));
+        const started = Date.now();
+        // 15 分钟硬超时：pnpm 可能卡在 supply-chain 全量验证/网络重试上
+        // （2026-08-22 SSiD 下「更新中」长时间不结束的防御），超时杀掉并报错。
+        let timedOut = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill();
+        }, 15 * 60_000);
+        let out = '';
+        child.stdout?.on('data', (d) => { out += d.toString(); });
+        child.stderr?.on('data', (d) => { out += d.toString(); });
+        child.on('error', e => { clearTimeout(timer); resolve({ ok: false, detail: e.message, durationMs: Date.now() - started }); });
+        child.on('close', code => {
+            clearTimeout(timer);
+            const durationMs = Date.now() - started;
+            if (code === 0)
+                resolve({ ok: true, detail: '', durationMs });
+            const tail = out.trim();
+            const header = timedOut ? 'timed out after 15 minutes' : `exit code ${code ?? 1}`;
+            resolve({ ok: false, detail: `${header}${tail === '' ? '' : `\n${tail.slice(-4000)}`}`, durationMs });
+        });
     });
 }
 /**
  * Run pnpm in the profile directory, trying each candidate command in turn.
- * Output inherits the process stdio (no pipe capture — the host sandbox
- * forbids named-pipe stdio); the exit code is the only result this layer needs.
+ * Output is captured (no named-pipe stdio — the host process is the web or
+ * electron main process, not the DSH tool sandbox); the exit code and the
+ * captured tail are the result this layer returns, and every attempt is
+ * appended to the profile's plugin-center-pnpm.log.
  */
 export async function runPnpm(args, cwd) {
-    let last = { ok: false, detail: 'no pnpm candidate found' };
+    let last = { ok: false, detail: 'no pnpm candidate found', durationMs: 0 };
     for (const command of pnpmCandidates()) {
         last = await runOne(command, args, cwd);
         if (last.ok)
-            return last;
+            break;
     }
+    logPnpm(cwd, args, last);
     return last;
 }
 /** Install a package into the web profile, mirroring `dsh plugin add` semantics. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@max-null/dsh-plugin-center",
-  "version": "0.1.7",
+  "version": "0.2.0",
   "description": "Plugin center for DeepSeek Harness 鈥?installed metadata, community market, update detection, and What's New",
   "license": "MIT",
   "publishConfig": {
@@ -67,14 +67,14 @@
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/dsh-client-connection": ">=0.0.1-rc.5",
-    "@deepseek-ai/dsh-host-apiproxy": ">=0.0.1-rc.5"
+    "@deepseek-ai/dsh-client-connection": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-host-apiproxy": "^0.1.1-rc.1"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/dsh-client-connection": ">=0.0.1-rc.5",
-    "@deepseek-ai/dsh-host-apiproxy": ">=0.0.1-rc.5",
+    "@deepseek-ai/dsh-client-connection": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-host-apiproxy": "^0.1.1-rc.1",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^26.2.0",
     "@types/react": "~18.3.1",
@@ -83,4 +83,3 @@
     "typescript": "^5.5.0"
   }
 }
-