@morehao/dsh-plugin-kit 0.1.0 → 0.3.0

package/dist/update.js

@@ -1,3 +1,170 @@
+// src/exec.ts
+import { spawn } from "child_process";
+var ENV_KEYS = [
+  "PATH",
+  "HOME",
+  "USER",
+  "LOGNAME",
+  "SHELL",
+  "TMPDIR",
+  "TMP",
+  "TEMP",
+  "LANG",
+  "LC_ALL",
+  "LC_CTYPE",
+  "SSL_CERT_FILE",
+  "SSL_CERT_DIR",
+  "GIT_AUTHOR_NAME",
+  "GIT_AUTHOR_EMAIL",
+  "GIT_COMMITTER_NAME",
+  "GIT_COMMITTER_EMAIL",
+  "GIT_CONFIG_GLOBAL",
+  "GIT_SSH_COMMAND"
+];
+var PROXY_KEYS = [
+  "HTTP_PROXY",
+  "HTTPS_PROXY",
+  "NO_PROXY",
+  "ALL_PROXY",
+  "http_proxy",
+  "https_proxy",
+  "no_proxy",
+  "all_proxy"
+];
+function sanitizedEnv(source = process.env, extra = {}) {
+  const env = {};
+  for (const key of [...ENV_KEYS, ...PROXY_KEYS]) {
+    const value = source[key];
+    if (typeof value === "string" && value !== "") env[key] = value;
+  }
+  for (const [key, value] of Object.entries(extra)) {
+    if (typeof value === "string" && value !== "") env[key] = value;
+  }
+  return env;
+}
+function keepTail(text, limit) {
+  if (!Number.isFinite(limit) || limit <= 0 || text.length <= limit) return text;
+  return text.slice(text.length - limit);
+}
+async function spawnCollect(command, args = [], options = {}) {
+  const started = Date.now();
+  const timeoutMs = options.timeoutMs ?? 1e4;
+  const abortGraceMs = options.abortGraceMs ?? 2e3;
+  const maxStdout = options.maxStdout ?? 1024 * 1024;
+  const maxStderr = options.maxStderr ?? 1024 * 1024;
+  const maxOutput = options.maxOutput ?? maxStdout + maxStderr;
+  let stdout = "";
+  let stderr = "";
+  let output = "";
+  let timedOut = false;
+  return new Promise((resolve) => {
+    let child;
+    try {
+      child = spawn(command, args, {
+        cwd: options.cwd,
+        env: options.env ?? process.env,
+        stdio: [options.input === void 0 ? "ignore" : "pipe", "pipe", "pipe"],
+        windowsHide: true
+      });
+    } catch (error) {
+      resolve(failureResult(error, started, options.signal?.aborted === true));
+      return;
+    }
+    if (options.input !== void 0) {
+      child.stdin?.on("error", () => void 0);
+      child.stdin?.end(options.input);
+    }
+    let settled = false;
+    let timer;
+    let hardKill;
+    const killTree = (signal) => {
+      try {
+        child.kill(signal);
+      } catch {
+      }
+    };
+    const softKill = () => {
+      killTree("SIGTERM");
+      hardKill = setTimeout(() => killTree("SIGKILL"), abortGraceMs);
+      hardKill.unref?.();
+    };
+    const onAbort = () => softKill();
+    const finish = (code, signal, error) => {
+      if (settled) return;
+      settled = true;
+      if (timer !== void 0) clearTimeout(timer);
+      if (hardKill !== void 0) clearTimeout(hardKill);
+      options.signal?.removeEventListener("abort", onAbort);
+      resolve({
+        code,
+        signal,
+        stdout,
+        stderr,
+        output,
+        timedOut,
+        aborted: options.signal?.aborted === true,
+        durationMs: Date.now() - started,
+        ...error === void 0 ? {} : { error }
+      });
+    };
+    child.stdout?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => {
+      stdout = keepTail(stdout + chunk, maxStdout);
+      output = keepTail(output + chunk, maxOutput);
+      try {
+        options.onData?.(chunk, "stdout");
+      } catch {
+      }
+    });
+    child.stderr?.setEncoding("utf8");
+    child.stderr?.on("data", (chunk) => {
+      stderr = keepTail(stderr + chunk, maxStderr);
+      output = keepTail(output + chunk, maxOutput);
+      try {
+        options.onData?.(chunk, "stderr");
+      } catch {
+      }
+    });
+    if (options.signal?.aborted === true) onAbort();
+    else options.signal?.addEventListener("abort", onAbort, { once: true });
+    if (Number.isFinite(timeoutMs) && timeoutMs > 0) {
+      timer = setTimeout(() => {
+        timedOut = true;
+        softKill();
+      }, timeoutMs);
+    }
+    child.on("error", (error) => finish(null, null, error));
+    child.on("close", (code, signalName) => finish(code, signalName));
+  });
+}
+function failureResult(error, started, aborted) {
+  const err = error instanceof Error ? error : new Error(String(error));
+  return {
+    code: null,
+    signal: null,
+    stdout: "",
+    stderr: "",
+    output: err.message,
+    timedOut: false,
+    aborted,
+    durationMs: Date.now() - started,
+    error: err
+  };
+}
+function collectVersionView(result) {
+  if (result.code !== 0) return null;
+  const text = result.stdout.trim();
+  if (text === "") return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return null;
+  }
+  const value = Array.isArray(parsed) ? parsed[parsed.length - 1] : parsed;
+  return typeof value === "string" && value.trim() !== "" ? value.trim() : null;
+}
+
 // src/registry.ts
 var OFFICIAL_REGISTRY = "https://registry.npmjs.org/";
 var DEFAULT_TIMEOUT_MS = 8e3;
@@ -38,56 +205,61 @@ function registryPlan(registries) {
   if (ordered.length === 0) ordered.push(OFFICIAL_REGISTRY);
   return ordered;
 }
+function planFromHost(hostPlan, registries) {
+  if (registries === null || typeof registries !== "object") return null;
+  const ordered = [];
+  const push = (value) => {
+    const normalized = normalizeRegistry(value);
+    if (normalized !== null && !ordered.includes(normalized)) ordered.push(normalized);
+  };
+  let result;
+  try {
+    result = hostPlan(void 0, registries);
+  } catch {
+    return null;
+  }
+  if (!Array.isArray(result)) return null;
+  for (const entry of result) {
+    if (entry === null) {
+      push(registries.resolved);
+      continue;
+    }
+    push(entry);
+  }
+  return ordered.length === 0 ? null : ordered;
+}
+function resolveRegistryPlan(registries, hostPlan) {
+  if (typeof hostPlan === "function") {
+    const fromHost = planFromHost(hostPlan, registries);
+    if (fromHost !== null) return fromHost;
+  }
+  return registryPlan(registries);
+}
 function manualCommand(packageName, profileName) {
   const spec = `${packageName}@latest`;
   return typeof profileName === "string" && profileName !== "" ? `dsh plugin --profile ${profileName} add ${spec}` : `dsh plugin add ${spec}`;
 }
 
 // src/semver.ts
-var SEMVER = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/;
+import semver from "semver";
 function parseSemver(value) {
   const text = String(value ?? "").trim();
-  const match = SEMVER.exec(text);
-  if (match === null) return void 0;
-  const major = Number(match[1]);
-  const minor = Number(match[2]);
-  const patch = Number(match[3]);
-  if (!Number.isSafeInteger(major) || !Number.isSafeInteger(minor) || !Number.isSafeInteger(patch)) return void 0;
-  return { core: [major, minor, patch], prerelease: match[4] === void 0 ? [] : match[4].split(".") };
-}
-function comparePrerelease(left, right) {
-  if (left.length === 0 || right.length === 0) {
-    return left.length === right.length ? 0 : left.length === 0 ? 1 : -1;
-  }
-  const length = Math.max(left.length, right.length);
-  for (let index = 0; index < length; index += 1) {
-    const a = left[index];
-    const b = right[index];
-    if (a === void 0 || b === void 0) return a === b ? 0 : a === void 0 ? -1 : 1;
-    if (a === b) continue;
-    const aNumeric = /^\d+$/.test(a);
-    const bNumeric = /^\d+$/.test(b);
-    if (aNumeric && bNumeric) {
-      const an = BigInt(a);
-      const bn = BigInt(b);
-      if (an !== bn) return an > bn ? 1 : -1;
-      continue;
-    }
-    if (aNumeric !== bNumeric) return aNumeric ? -1 : 1;
-    return a > b ? 1 : -1;
-  }
-  return 0;
+  if (text === "") return void 0;
+  const parsed = semver.parse(text);
+  if (parsed === null) return void 0;
+  return {
+    core: [parsed.major, parsed.minor, parsed.patch],
+    // semver 会把纯数字预发布段解析为 number，这里统一转回字符串以保持旧契约。
+    prerelease: parsed.prerelease.map((part) => String(part))
+  };
 }
 function isNewerVersion(current, candidate) {
   const a = parseSemver(current);
   const b = parseSemver(candidate);
   if (a === void 0 || b === void 0) return false;
-  for (let index = 0; index < 3; index += 1) {
-    const left = a.core[index] ?? 0;
-    const right = b.core[index] ?? 0;
-    if (right !== left) return right > left;
-  }
-  return comparePrerelease(b.prerelease, a.prerelease) > 0;
+  const left = String(current).trim();
+  const right = String(candidate).trim();
+  return semver.gt(right, left);
 }
 
 // src/latest.ts
@@ -131,7 +303,7 @@ function createLatestResolver(deps) {
     }
   }
   async function viaRegistries() {
-    const plan = registryPlan(await readRegistries());
+    const plan = resolveRegistryPlan(await readRegistries(), deps.registryPlan);
     for (const base of plan) {
       try {
         const response = await fetchImpl(`${base}${encodePackageName(deps.meta.name)}/latest`, {
@@ -273,6 +445,7 @@ function createPluginUpdater(deps) {
     ...deps.getPluginManager === void 0 ? {} : { getPluginManager: deps.getPluginManager },
     ...deps.fetchImpl === void 0 ? {} : { fetchImpl: deps.fetchImpl },
     ...deps.runPnpmView === void 0 ? {} : { runPnpmView: deps.runPnpmView },
+    ...deps.registryPlan === void 0 ? {} : { registryPlan: deps.registryPlan },
     ...deps.now === void 0 ? {} : { now: deps.now },
     ...deps.cacheTtlMs === void 0 ? {} : { cacheTtlMs: deps.cacheTtlMs },
     ...deps.timeoutMs === void 0 ? {} : { timeoutMs: deps.timeoutMs },
@@ -376,7 +549,7 @@ function createPluginUpdater(deps) {
     }
     const service = manager();
     if (service === null || typeof service.installBundle !== "function") {
-      throw new PluginUpdateError("NO_MANAGER", "\u5F53\u524D\u73AF\u5883\u4E0D\u652F\u6301\u4E00\u952E\u66F4\u65B0\uFF08\u7F3A\u5C11 pluginManager.installBundle\uFF09", {
+      throw new PluginUpdateError("NO_MANAGER", "\u5F53\u524D profile \u672A\u63D0\u4F9B\u4E00\u952E\u5B89\u88C5\u80FD\u529B\uFF08pluginManager.installBundle \u4E0D\u53EF\u7528\uFF09\uFF0C\u8BF7\u624B\u52A8\u66F4\u65B0", {
         manualCommand: view.manualCommand
       });
     }
@@ -453,7 +626,38 @@ function createPluginUpdater(deps) {
     isApplying: () => applying
   };
 }
+function createPnpmViewRunner(deps) {
+  const timeoutMs = deps.timeoutMs ?? 8e3;
+  const run = deps.exec ?? spawnCollect;
+  const env = sanitizedEnv(deps.env ?? process.env);
+  return async (spec) => {
+    let profile;
+    try {
+      profile = normalizeProfile(deps.getProfile());
+    } catch {
+      return null;
+    }
+    if (profile === null || typeof profile.dir !== "string" || profile.dir === "") return null;
+    const command = profile.packageManager?.command ?? "pnpm";
+    const prefix = profile.packageManager?.args ?? [];
+    let result;
+    try {
+      result = await run(command, [...prefix, "view", spec, "version", "--json"], {
+        cwd: profile.dir,
+        env,
+        timeoutMs,
+        maxStdout: 64 * 1024,
+        maxStderr: 16 * 1024
+      });
+    } catch {
+      return null;
+    }
+    const version = collectVersionView(result);
+    return version !== null && parseSemver(version) !== void 0 ? version : null;
+  };
+}
 export {
   PluginUpdateError,
-  createPluginUpdater
+  createPluginUpdater,
+  createPnpmViewRunner
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@morehao/dsh-plugin-kit",
-  "version": "0.1.0",
-  "description": "DeepSeek Harness 插件共用工具包：插件自更新引擎（查 npm 最新版 + 经宿主 pluginManager 重装）、headless 客户端控制器与 HTTP 小工具。零 @deepseek-ai 运行时依赖，宿主能力全部注入。",
+  "version": "0.3.0",
+  "description": "DeepSeek Harness 插件共用工具包：插件自更新引擎（查 npm 最新版 + 经宿主 pluginManager 重装）、headless 客户端控制器、HTTP 小工具，以及子进程执行 / 原子写 / JSON 状态持久化等通用底座。零 @deepseek-ai 运行时依赖，宿主能力全部注入。",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -22,6 +22,18 @@
       "types": "./dist/http.d.ts",
       "default": "./dist/http.js"
     },
+    "./exec": {
+      "types": "./dist/exec.d.ts",
+      "default": "./dist/exec.js"
+    },
+    "./fs": {
+      "types": "./dist/fs.d.ts",
+      "default": "./dist/fs.js"
+    },
+    "./state": {
+      "types": "./dist/state.d.ts",
+      "default": "./dist/state.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [
@@ -45,10 +57,13 @@
     "typecheck": "tsc --noEmit",
     "test": "node --test \"test/*.test.mjs\"",
     "pretest": "npm run build",
-    "check": "npm run typecheck && npm run build && npm test --ignore-scripts"
+    "check": "npm run typecheck && npm run build && npm test --ignore-scripts",
+    "check:release-notes": "node scripts/smoke-release-notes.mjs",
+    "prepack": "npm run build"
   },
   "devDependencies": {
     "@types/node": "22.20.5",
+    "@types/semver": "^7.8.0",
     "tsup": "8.5.1",
     "typescript": "5.9.3"
   },
@@ -65,5 +80,8 @@
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"
+  },
+  "dependencies": {
+    "semver": "^7.8.5"
   }
 }

package/dist/profile-C-eyP5F6.d.ts

@@ -1,44 +0,0 @@
-/**
- * profile 读取：判断本插件是以什么形态装进当前 profile。
- *
- * 一键更新最危险的场景是「开发用的本地链接」：profile 里写的是 `link:/path/to/repo`，
- * 一旦用 registry 重装，本地的 link 会被换成 npm 版，开发流就被悄悄改掉了。所以
- * 更新前先读 `<profile.dir>/package.json` 的依赖声明，link: / file: / workspace: 一律
- * 关闭一键更新，只给手动命令。
- */
-type InstallKind = 'registry' | 'link' | 'file' | 'workspace' | 'unknown';
-interface ProfileLike {
-    name?: string;
-    dir?: string;
-    home?: string;
-    packageManager?: {
-        command?: string;
-        args?: string[];
-    };
-}
-interface InstallKindResult {
-    kind: InstallKind;
-    /** profile package.json 里声明的原始 spec（读不到就是 undefined）。 */
-    spec?: string;
-    /** 说明来源，便于日志与界面提示。 */
-    source?: string;
-}
-/** 把宿主 `profileContext`（任意形状）收敛成只含我们关心的字段；拿不到返回 null。 */
-declare function normalizeProfile(value: unknown): ProfileLike | null;
-/** `dependencies` 里声明的 spec 决定安装形态；`npm:` 别名仍按 registry 处理。 */
-declare function classifyInstallSpec(spec: unknown): InstallKind;
-interface DetectDeps {
-    profile: ProfileLike | null;
-    packageName: string;
-    /** 测试注入；默认读真实文件。 */
-    readFile?: (path: string) => Promise<string>;
-    readJson?: (path: string) => Promise<unknown>;
-}
-/** 读 profile 的 package.json，返回本插件声明的 spec（找不到返回 undefined）。 */
-declare function readDeclaredSpec(deps: DetectDeps): Promise<{
-    spec?: string;
-    source?: string;
-}>;
-declare function detectInstallKind(deps: DetectDeps): Promise<InstallKindResult>;
-
-export { type DetectDeps as D, type InstallKind as I, type ProfileLike as P, type InstallKindResult as a, classifyInstallSpec as c, detectInstallKind as d, normalizeProfile as n, readDeclaredSpec as r };