@moonquake2004/dsh-doctor 0.2.4 → 0.2.5

package/checks.json

@@ -8,8 +8,17 @@
       "severity": "error",
       "title": "dsh 可执行文件在 PATH 中",
       "discussion": "#1270",
-      "when": { "os": ["darwin", "linux", "win32"] },
-      "probe": { "type": "command-exists", "cmd": "dsh" },
+      "when": {
+        "os": [
+          "darwin",
+          "linux",
+          "win32"
+        ]
+      },
+      "probe": {
+        "type": "command-exists",
+        "cmd": "dsh"
+      },
       "detailOk": "dsh 在 PATH 中可用",
       "detailFail": "dsh 不在 PATH（插件/CLI 安装链路不可用，#1270 同族）",
       "fix": "安装 dsh 并将 node_modules/.bin 加入 PATH"
@@ -20,7 +29,13 @@
       "severity": "warn",
       "title": "workspace-root profile 的 .npmrc 安装开关",
       "discussion": "#20",
-      "when": { "os": ["darwin", "linux", "win32"] },
+      "when": {
+        "os": [
+          "darwin",
+          "linux",
+          "win32"
+        ]
+      },
       "probe": {
         "type": "text-contains",
         "path": "{profile}/.npmrc",
@@ -37,7 +52,13 @@
       "severity": "error",
       "title": "patch insert name 含空格（Windows 参数 lint）",
       "discussion": "#1420",
-      "when": { "os": ["darwin", "linux", "win32"] },
+      "when": {
+        "os": [
+          "darwin",
+          "linux",
+          "win32"
+        ]
+      },
       "probe": {
         "type": "text-not-contains",
         "path": "{profile}/cordis.patch.yml",
@@ -55,11 +76,43 @@
       "severity": "error",
       "title": "config 目录 JSON 文件合法性",
       "discussion": "#1357",
-      "when": { "os": ["darwin", "linux", "win32"] },
-      "probe": { "type": "json-valid", "path": "{home}/config/workspace.json", "required": false },
+      "when": {
+        "os": [
+          "darwin",
+          "linux",
+          "win32"
+        ]
+      },
+      "probe": {
+        "type": "json-valid",
+        "path": "{home}/config/workspace.json",
+        "required": false
+      },
       "detailOk": "config/workspace.json 为合法 JSON",
       "detailFail": "config/workspace.json 不是合法 JSON（#1357 并发写乱码类，工作区列表会消失）",
       "fix": "排查多实例并发写；修复或删除损坏文件"
+    },
+    {
+      "id": "E11-settings-writable",
+      "section": "env",
+      "severity": "error",
+      "title": "settings.yaml 可写性（sudo 属主问题）",
+      "discussion": "#1719",
+      "when": {
+        "os": [
+          "darwin",
+          "linux",
+          "win32"
+        ]
+      },
+      "probe": {
+        "type": "file-writable",
+        "path": "{home}/settings.yaml",
+        "required": false
+      },
+      "detailOk": "settings.yaml 可写",
+      "detailFail": "settings.yaml 不可写（sudo 安装遗留的属主/权限问题），dsh 无法持久化设置",
+      "fix": "把属主改回当前用户：sudo chown <当前用户> ~/.dsh/settings.yaml（或删掉让 dsh 重建）"
     }
   ]
 }

package/dsh-doctor.mjs

@@ -44,7 +44,7 @@
  * 退出码：0 = 全部通过；1 = 发现可修复问题（内置 + catalog severity=error）；warn 级失败不改退出码。
  */
 import { execFileSync, spawnSync } from 'node:child_process';
-import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, statSync, writeFileSync } from 'node:fs';
+import { closeSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, statSync, writeFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
 import net from 'node:net';
 import { basename, delimiter as PATH_DELIM, dirname, join } from 'node:path';
@@ -796,6 +796,16 @@ export function runCatalogCheck(check, ctx) {
       if (count > max) return { ok: false, detail: check.detailFail ?? `${probe.pattern} 匹配 ${count} 个（> ${max}）` };
       return { ok: true, detail: check.detailOk ?? `${probe.pattern} 匹配 ${count} 个（${min}..${max}）` };
     }
+    case 'file-writable': {
+      const fp = p(probe.path);
+      if (!existsSync(fp)) return probe.required === false
+        ? { ok: true, detail: check.detailOk ?? `${fp} 不存在（跳过）` }
+        : { ok: false, detail: check.detailFail ?? `${fp} 缺失` };
+      let writable = false;
+      try { const fd = openSync(fp, 'a'); closeSync(fd); writable = true; } catch { /* 只读/属主问题 */ }
+      return writable ? { ok: true, detail: check.detailOk ?? `${fp} 可写` }
+                      : { ok: false, detail: check.detailFail ?? `${fp} 不可写（sudo 属主或只读权限，#1719）` };
+    }
     default:
       return { ok: true, skipped: true, detail: `探测原语 ${probe.type} 本引擎不支持，已跳过（需更新插件）` };
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moonquake2004/dsh-doctor",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Offline diagnostic for DeepSeek Harness — 19 built-in checks + self-updating catalog (Layer A) + self-update check (Layer B); 'Doctor' panel in web UI settings.",
   "main": "lib/index.js",
   "files": [