@michengai/dsh-codex-ui 0.2.53 → 0.2.54

package/dist/index.d.mts

@@ -12,8 +12,10 @@ type HostRequest = {
  * 非浏览器客户端（curl、CLI）仍然放行。
  */
 declare function crossSiteRequest(request: HostRequest): boolean;
+/** 把安装错误收成可给浏览器看的文案：我们自己的中文说明保留，带本地路径的底层错误脱敏。 */
+declare function publicDependencyError(error: unknown): string;
 declare const inject: string[];
 /** 提供不泄露地址、命令和凭证的连接器目录。 */
 declare function apply(ctx: Context): void;
 //#endregion
-export { apply, crossSiteRequest, inject };
+export { apply, crossSiteRequest, inject, publicDependencyError };

package/dist/index.mjs

@@ -169,6 +169,7 @@ function pluginCommandError(stderr) {
 	const detail = stderr.replace(/\s+/g, " ").trim();
 	if (detail.includes("minimumReleaseAge") || detail.includes("Release age")) return /* @__PURE__ */ new Error("更新被 pnpm 发布时间保护拦截。请确认已写入当前版本白名单后重试。");
 	if (detail.includes("EPERM") || detail.includes("EBUSY") || detail.includes("EACCES")) return /* @__PURE__ */ new Error("无法覆盖正在运行的插件文件。请先停止 DSH Web，再点击更新。");
+	if (detail.includes("NO_MATCHING_VERSION") || detail.includes("No matching version")) return /* @__PURE__ */ new Error("当前 npm 镜像还没有这个版本。请稍后重试，或改用官方源安装。");
 	return /* @__PURE__ */ new Error("从 npm 安装或更新依赖失败。请检查网络、npm registry 或发布时间保护后重试。");
 }
 /**
@@ -228,7 +229,11 @@ async function installDependencyLocked(id) {
 	const latestVersion = await npmLatestVersion(dependency.packageName);
 	if (latestVersion === void 0) throw new Error("无法获取 npm 最新版本，请检查网络或 npm registry 后重试。");
 	await ensureLatestReleaseAllowed(dependency.packageName, latestVersion);
-	await runDshPlugin(["add", `${dependency.packageName}@${latestVersion}`]);
+	await runDshPlugin([
+		"add",
+		`${dependency.packageName}@${latestVersion}`,
+		"--registry=https://registry.npmjs.org/"
+	]);
 	const installed = await installedPackageVersion(dependency.packageName);
 	if (installed !== latestVersion) throw new Error(`已请求 ${dependency.packageName}@${latestVersion}，但当前仍是 ${installed ?? "未安装"}。请先停止 DSH Web 后再更新。`);
 	return dependencyStatuses();
@@ -272,7 +277,18 @@ function crossSiteRequest(request) {
 	const origin = headerValue(headers, "origin");
 	if (origin === void 0) return false;
 	const host = headerValue(headers, "host");
-	return origin !== new URL(request.url ?? "/", `http://${host ?? "localhost"}`).origin;
+	if (host === void 0) return true;
+	try {
+		return new URL(origin).host !== host;
+	} catch {
+		return true;
+	}
+}
+/** 把安装错误收成可给浏览器看的文案：我们自己的中文说明保留，带本地路径的底层错误脱敏。 */
+function publicDependencyError(error) {
+	const message = error instanceof Error ? error.message : "依赖管理暂不可用。";
+	if (/[A-Za-z]:[\\/]|\/(?:home|Users|var|tmp)\//.test(message)) return "依赖管理暂不可用，请查看服务端日志。";
+	return message;
 }
 const inject = [
 	"webServer",
@@ -368,7 +384,7 @@ function apply(ctx) {
 						"content-type": "application/json; charset=utf-8",
 						"cache-control": "no-store"
 					});
-					response.end(JSON.stringify({ error: "依赖管理暂不可用，请查看服务端日志。" }));
+					response.end(JSON.stringify({ error: publicDependencyError(error) }));
 				}
 			}
 		});
@@ -379,4 +395,4 @@ function apply(ctx) {
 	}, "michengai-codex-ui: catalogs");
 }
 //#endregion
-export { apply, crossSiteRequest, inject };
+export { apply, crossSiteRequest, inject, publicDependencyError };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-codex-ui",
-  "version": "0.2.53",
+  "version": "0.2.54",
   "description": "以 Codex 风格重构 DSH Web 侧栏的独立客户端插件",
   "license": "Apache-2.0",
   "publishConfig": {