@michengai/dsh-codex-ui 1.1.23 → 1.1.24

package/CHANGELOG.md

@@ -4,6 +4,29 @@
 
 This changelog records recent releases of DSH Codex UI and its one-click installer. Earlier changes remain available in the [Git history](https://github.com/MichengAI/dsh-codex-ui/commits/main).
 
+## 1.1.24 - 2026-09-30
+
+- About-page installs on official Desktop now use the host's bundled pnpm instead of launching the dsh command inside the app archive.
+- Host support includes DSH `0.2.0-rc.2`. The sidebar, layout, and slot contracts match `0.2.0-rc.1`; without this declaration the new Desktop disables the plugin. Development dependencies are pinned to `0.2.0-rc.2`.
+
+## suite-installer-v1.0.30 - 2026-09-29
+
+Install or maintain 11 first-party plugins in one step. Included plugins and versions:
+
+- `@michengai/dsh-archive-manager@1.0.7`
+- `@michengai/dsh-codex-ui@1.1.22`
+- `@michengai/dsh-skills-manager@1.1.5`
+- `@michengai/dsh-agency-agents@1.0.6`
+- `@michengai/dsh-im-connect@0.1.57`
+- `@michengai/dsh-automation@0.1.52`
+- `@michengai/dsh-btw@0.1.14`
+- `@michengai/dsh-simplify@0.1.11`
+- `@michengai/dsh-pua@0.3.19`
+- `@michengai/dsh-code-review@0.1.8`
+- `@michengai/dsh-codex-pet@0.1.11`
+
+The installer uses these exact versions for reproducible installation.
+
 ## 1.1.23 - 2026-09-29
 
 - Installing or updating other plugins from the About page in official DeepSeek Harness Desktop no longer crashes the desktop host.

package/CHANGELOG.zh-CN.md

@@ -4,6 +4,29 @@
 
 本日志记录 DSH Codex UI 及其一键安装器的最近发布；更早的变更可查看 [Git 提交历史](https://github.com/MichengAI/dsh-codex-ui/commits/main)。
 
+## 1.1.24 - 2026-09-30
+
+- 官方桌面端关于页安装其他插件时，改用宿主自带的 pnpm，不再去启动 asar 里的 dsh 命令。
+- 宿主兼容范围加入 DSH `0.2.0-rc.2`。侧栏、布局和插槽合约与 `0.2.0-rc.1` 相同；不声明这个版本时，新桌面端会因兼容检查停用本插件。开发依赖钉到 `0.2.0-rc.2`。
+
+## suite-installer-v1.0.30 - 2026-09-29
+
+一键维护安装 11 个自研插件。包含以下插件及版本：
+
+- `@michengai/dsh-archive-manager@1.0.7`
+- `@michengai/dsh-codex-ui@1.1.22`
+- `@michengai/dsh-skills-manager@1.1.5`
+- `@michengai/dsh-agency-agents@1.0.6`
+- `@michengai/dsh-im-connect@0.1.57`
+- `@michengai/dsh-automation@0.1.52`
+- `@michengai/dsh-btw@0.1.14`
+- `@michengai/dsh-simplify@0.1.11`
+- `@michengai/dsh-pua@0.3.19`
+- `@michengai/dsh-code-review@0.1.8`
+- `@michengai/dsh-codex-pet@0.1.11`
+
+安装器使用这些精确版本执行安装，确保可复现。
+
 ## 1.1.23 - 2026-09-29
 
 - 在官方 DeepSeek Harness 桌面端的关于页安装或更新其他插件时，不再把桌面宿主打崩。

package/README.md

@@ -24,7 +24,7 @@ Working across several projects and conversations in DSH Web? DSH Codex UI helps
 
 ## Host compatibility
 
-This working tree explicitly declares DSH `0.1.2-rc.1`, `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.5-rc.3`, `0.1.7-rc.1`, `0.1.7-rc.2`, and `0.2.0-rc.1`. Development dependencies are pinned to `0.2.0-rc.1`. No code references `@deepseek-ai/dsh-client-runtime`: it is not a peer, not a client inject, and no longer a development dependency now that the settings-lifecycle spec mounts the production `SlotRegistry` from the official `@deepseek-ai/dsh-client-ui-renderer/client` bundle. Isolated host checks cover `0.1.2-rc.1`, `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.5-rc.3`, `0.1.7-rc.1`, `0.1.7-rc.2`, and `0.2.0-rc.1`.
+This working tree explicitly declares DSH `0.1.2-rc.1`, `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.5-rc.3`, `0.1.7-rc.1`, `0.1.7-rc.2`, `0.2.0-rc.1`, and `0.2.0-rc.2`. Development dependencies are pinned to `0.2.0-rc.2`. No code references `@deepseek-ai/dsh-client-runtime`: it is not a peer, not a client inject, and no longer a development dependency now that the settings-lifecycle spec mounts the production `SlotRegistry` from the official `@deepseek-ai/dsh-client-ui-renderer/client` bundle. Isolated host checks cover `0.1.2-rc.1`, `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.5-rc.3`, `0.1.7-rc.1`, `0.1.7-rc.2`, `0.2.0-rc.1`, and `0.2.0-rc.2`.
 
 ## What you can do
 

package/README.zh-CN.md

@@ -24,7 +24,7 @@
 
 ## 宿主兼容性
 
-当前工作区已显式声明支持 DSH `0.1.2-rc.1`、`0.1.5-rc.1`、`0.1.5-rc.2`、`0.1.5-rc.3`、`0.1.7-rc.1`、`0.1.7-rc.2` 或 `0.2.0-rc.1`。开发依赖钉在 `0.2.0-rc.1`。代码已不再引用 `@deepseek-ai/dsh-client-runtime`：它既不是 peer、也不写入客户端 inject；设置生命周期用例改用官方 `@deepseek-ai/dsh-client-ui-renderer/client` 装配包里的生产 `SlotRegistry` 后，这条开发依赖也已移除。隔离宿主检查覆盖 `0.1.2-rc.1`、`0.1.5-rc.1`、`0.1.5-rc.2`、`0.1.5-rc.3`、`0.1.7-rc.1`、`0.1.7-rc.2` 或 `0.2.0-rc.1`。
+当前工作区已显式声明支持 DSH `0.1.2-rc.1`、`0.1.5-rc.1`、`0.1.5-rc.2`、`0.1.5-rc.3`、`0.1.7-rc.1`、`0.1.7-rc.2`、`0.2.0-rc.1` 或 `0.2.0-rc.2`。开发依赖钉在 `0.2.0-rc.2`。代码已不再引用 `@deepseek-ai/dsh-client-runtime`：它既不是 peer、也不写入客户端 inject；设置生命周期用例改用官方 `@deepseek-ai/dsh-client-ui-renderer/client` 装配包里的生产 `SlotRegistry` 后，这条开发依赖也已移除。隔离宿主检查覆盖 `0.1.2-rc.1`、`0.1.5-rc.1`、`0.1.5-rc.2`、`0.1.5-rc.3`、`0.1.7-rc.1`、`0.1.7-rc.2`、`0.2.0-rc.1` 或 `0.2.0-rc.2`。
 
 ## 你可以用它做什么
 

package/lib/index.mjs

@@ -3,7 +3,7 @@ import { spawn } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
 import { lstat, mkdir, open, readFile, readdir, realpath, rename, rm, unlink, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
-import { basename, dirname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";
+import { basename, delimiter, dirname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";
 import { fileURLToPath } from "node:url";
 import { randomBytes, randomUUID } from "node:crypto";
 //#region src/business-api.ts
@@ -221,13 +221,41 @@ function resolveDependencyRuntime(ctx, options = {}) {
 		cliRuntimeRoot
 	].filter((root) => root !== void 0 && root !== "");
 	const pluginEnv = stringEnvironment(launched?.packageManager?.env);
+	const packageManager = profilePackageManager(launched?.packageManager) ?? desktopPackageManagerFromArgv(argv);
 	return {
 		environmentKind: "cli",
 		profileName,
 		profileDir,
 		runtimeRoots,
 		...cliEntry === void 0 ? {} : { cliEntry },
-		...pluginEnv === void 0 ? {} : { pluginEnv }
+		...pluginEnv === void 0 ? {} : { pluginEnv },
+		...packageManager === void 0 ? {} : { packageManager }
+	};
+}
+function profilePackageManager(value) {
+	if (typeof value?.command !== "string" || value.command === "") return void 0;
+	if (!Array.isArray(value.args) || !value.args.every((item) => typeof item === "string")) return void 0;
+	const env = stringEnvironment(value.env);
+	return {
+		command: value.command,
+		args: value.args,
+		...env === void 0 ? {} : { env }
+	};
+}
+/** 官方 Desktop Host 把 pnpm 入口放在 argv[5]，bin 放在 argv[6]，不提供 desktopPnpm。 */
+function desktopPackageManagerFromArgv(argv, command = process.execPath) {
+	if (!isOfficialDesktopHostEntry(argv[1])) return void 0;
+	const pnpm = argv[5];
+	if (typeof pnpm !== "string" || !isAbsolute(pnpm) || !existsSync(pnpm)) return void 0;
+	const bin = argv[6];
+	const path = typeof bin === "string" && bin !== "" ? `${bin}${delimiter}${process.env.PATH ?? ""}` : process.env.PATH;
+	return {
+		command,
+		args: ["--expose-internals", pnpm],
+		env: {
+			ELECTRON_RUN_AS_NODE: "1",
+			...typeof path === "string" && path !== "" ? { PATH: path } : {}
+		}
 	};
 }
 function stringEnvironment(value) {
@@ -559,6 +587,28 @@ async function removePendingUpdate(packageName, runtime) {
 		if (error.code !== "ENOENT") throw error;
 	}
 }
+/** pnpm add 不会写 bundles。官方 Desktop 直接调宿主 pnpm 时，要自己把插件挂进 profile。 */
+async function declareProfileBundle(packageName, runtime) {
+	if (isOfficialRuntimePackage(packageName)) return;
+	const manifestPath = resolve(profileDirectory(runtime), "package.json");
+	let manifest;
+	try {
+		manifest = JSON.parse(await readFile(manifestPath, "utf8"));
+	} catch (error) {
+		if (error.code !== "ENOENT") throw error;
+		manifest = {};
+	}
+	const bundles = manifest.dsh?.profile?.bundles ?? [];
+	if (bundles.includes(packageName)) return;
+	manifest.dsh = {
+		...manifest.dsh,
+		profile: {
+			...manifest.dsh?.profile,
+			bundles: [...bundles, packageName]
+		}
+	};
+	await writeFile(manifestPath, `${JSON.stringify(manifest, void 0, 2)}\n`, "utf8");
+}
 async function recordDeclaredVersion(packageName, version, runtime) {
 	const manifestPath = resolve(profileDirectory(runtime), "package.json");
 	let manifest;
@@ -846,6 +896,21 @@ function monitorDesktopPlugin(handle, timeoutMs = PLUGIN_INSTALL_TIMEOUT_MS) {
 function runDshPlugin(args, runtime = resolveDependencyRuntime(), timeoutMs = PLUGIN_INSTALL_TIMEOUT_MS) {
 	const desktopPnpm = runtime.desktopPnpm;
 	if (desktopPnpm !== void 0) return monitorDesktopPlugin(withPnpmEntry(() => desktopPnpm.runPlugin(args, runtime.profileDir)), timeoutMs);
+	const packageManager = runtime.packageManager;
+	if (packageManager !== void 0) return monitorPluginChild(spawn(packageManager.command, [...packageManager.args, ...args], {
+		cwd: runtime.profileDir,
+		env: {
+			...pluginSpawnEnv(),
+			...runtime.pluginEnv,
+			...packageManager.env
+		},
+		windowsHide: true,
+		stdio: [
+			"ignore",
+			"pipe",
+			"pipe"
+		]
+	}), timeoutMs, "desktop");
 	const entry = runtime.cliEntry ?? resolveDshCliEntry();
 	if (isOfficialDesktopHostEntry(entry)) throw new Error("无法定位 DSH CLI。请从 DSH 命令启动 Web 服务后重试。");
 	return monitorPluginChild(spawn(process.execPath, [
@@ -961,6 +1026,7 @@ async function installDependenciesLocked(ids, requestHotUpdate, runtime) {
 				"--registry=https://registry.npmjs.org/"
 			], runtime);
 			for (const target of batch) {
+				if (runtime.packageManager !== void 0) await declareProfileBundle(target.packageName, runtime);
 				await waitUntilPluginMounted(target.packageName, target.version, runtime);
 				if (!isOfficialRuntimePackage(target.packageName)) await recordDeclaredVersion(target.packageName, target.version, runtime);
 				await removePendingUpdate(target.packageName, runtime);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-codex-ui",
-  "version": "1.1.23",
+  "version": "1.1.24",
   "description": "DSH Codex UI — 为 DeepSeek Harness Web 提供 Codex 风格侧栏、工作区会话树、全局搜索和轮次导航 · A Codex-style sidebar, workspace session tree, global search, and turn navigation for DSH Web",
   "license": "Apache-2.0",
   "publishConfig": {
@@ -74,47 +74,47 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.2 <5.0.0",
-    "@deepseek-ai/dsh-client-connection": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-locale": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-input-trigger": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-layout": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings-general": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-sidebar": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-workspace": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1",
+    "@deepseek-ai/dsh-client-connection": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-layout": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings-general": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-sidebar": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.4",
-    "@deepseek-ai/dsh-api-session-controller": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-workspace-controller": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-attachment": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-connection": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-store": "0.2.0-rc.1",
+    "@deepseek-ai/dsh-api-session-controller": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-workspace-controller": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-connection": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-store": "0.2.0-rc.2",
     "@deepseek-ai/dsh-client-test-runtime": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-chat": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-input-trigger": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-layout": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-session": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings-general": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-sidebar": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-workspace": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-scope": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-subagent": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-typert-protocol": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-util-workspace-path": "0.2.0-rc.1",
-    "@deepseek-ai/dsh-workspace": "0.2.0-rc.1",
+    "@deepseek-ai/dsh-client-ui-chat": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-layout": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings-general": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-sidebar": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-scope": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-util-workspace-path": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-workspace": "0.2.0-rc.2",
     "diff": "^9.0.0",
     "shiki": "^4.3.1",
     "simple-icons": "16.31.0",